@zenalexa/unicli 0.212.1 → 0.213.0

package/dist/engine/executor.js

@@ -0,0 +1,189 @@
+/**
+ * YAML Pipeline Execution Engine — runPipeline orchestrator.
+ *
+ * Dispatches pipeline steps through `step-registry`. Per-step bodies live
+ * in `steps/*.ts` and self-register on import. This file owns:
+ *   - PipelineError shape
+ *   - `executeStep` dispatch (registry → cua/ax bus → plugin registry)
+ *   - `runPipeline` orchestration (cookies, retry, fallback, auto-fix,
+ *     diagnostic, cookie refresh, temp-dir cleanup)
+ *
+ * Per-step recovery helpers live in `runtime.ts`.
+ */
+import { rmSync } from "node:fs";
+import { formatCookieHeader, loadCookiesWithCDP } from "./cookies.js";
+import { CUA_STEP_HANDLERS } from "./steps/cua.js";
+import { DESKTOP_AX_STEP_HANDLERS, } from "./steps/desktop-ax.js";
+import { getStep } from "./step-registry.js";
+import { getBus, buildTransportCtx, _resetTransportBusForTests, } from "../transport/bus.js";
+// Side-effect import: every per-step module self-registers on load.
+import "./steps/index.js";
+export { assertSafeRequestUrl } from "./ssrf.js";
+export { getBus, buildTransportCtx, _resetTransportBusForTests };
+/** Structured pipeline error — designed for AI agent consumption. */
+export class PipelineError extends Error {
+    detail;
+    constructor(message, detail) {
+        super(message);
+        this.detail = detail;
+        this.name = "PipelineError";
+    }
+    toAgentJSON(adapterPath) {
+        return {
+            error: this.message,
+            adapter: adapterPath,
+            ...this.detail,
+            retryable: this.detail.retryable ?? false,
+            alternatives: this.detail.alternatives ?? [],
+        };
+    }
+}
+const SIBLING_KEYS = new Set([
+    "fallback",
+    "then",
+    "else",
+    "merge",
+    "retry",
+    "backoff",
+]);
+function isCuaStep(action) {
+    return action in CUA_STEP_HANDLERS;
+}
+function isDesktopAxStep(action) {
+    return action in DESKTOP_AX_STEP_HANDLERS;
+}
+export function getActionEntry(step) {
+    const entries = Object.entries(step);
+    return (entries.find(([k]) => !SIBLING_KEYS.has(k)) ?? entries[0]);
+}
+export async function executeStep(ctx, action, config, stepIndex, fullStep, depth) {
+    if (action === "rate_limit") {
+        const rl = config;
+        const { waitForToken } = await import("./rate-limiter.js");
+        await waitForToken(rl.domain, rl.rpm ?? 60);
+        return ctx;
+    }
+    const handler = getStep(action);
+    if (handler)
+        return handler(ctx, config, stepIndex, fullStep, depth);
+    if (isCuaStep(action) || isDesktopAxStep(action)) {
+        return dispatchBusStep(ctx, action, config);
+    }
+    const { getCustomStep } = await import("../plugin/step-registry.js");
+    const customHandler = getCustomStep(action);
+    if (customHandler) {
+        const pluginCtx = {
+            data: ctx.data,
+            args: ctx.args,
+            vars: ctx.vars,
+            base: ctx.base,
+            cookieHeader: ctx.cookieHeader,
+        };
+        const result = await customHandler(pluginCtx, config);
+        return { ...ctx, data: result.data, vars: result.vars };
+    }
+    return ctx;
+}
+async function dispatchBusStep(ctx, action, config) {
+    const params = config && typeof config === "object" && !Array.isArray(config)
+        ? config
+        : {};
+    const busCtx = { bus: getBus(), transportCtx: buildTransportCtx(ctx) };
+    const handlerFn = isCuaStep(action)
+        ? CUA_STEP_HANDLERS[action]
+        : DESKTOP_AX_STEP_HANDLERS[action];
+    const envelope = await handlerFn(busCtx, params);
+    ctx.vars["lastEnvelope"] = envelope;
+    return { ...ctx, data: envelope.ok ? envelope.data : envelope };
+}
+export async function runPipeline(steps, args, base, options) {
+    const rt = await import("./runtime.js");
+    let cookieHeader;
+    if ((options?.strategy === "cookie" || options?.strategy === "header") &&
+        options?.site) {
+        const cookies = await loadCookiesWithCDP(options.site);
+        if (!cookies) {
+            throw new PipelineError(`No cookies found for "${options.site}". Run: unicli auth setup ${options.site}`, {
+                step: -1,
+                action: "auth",
+                config: { site: options.site, strategy: options.strategy },
+                errorType: "http_error",
+                suggestion: `Either start Chrome with "unicli browser start" and login to ${options.site}, or create cookie file at ~/.unicli/cookies/${options.site}.json`,
+                retryable: false,
+                alternatives: [`unicli auth setup ${options.site}`],
+            });
+        }
+        cookieHeader = formatCookieHeader(cookies);
+    }
+    let ctx = { data: null, args, vars: {}, base, cookieHeader };
+    let tempDir;
+    try {
+        for (let i = 0; i < steps.length; i++) {
+            const step = steps[i];
+            const [action, config] = getActionEntry(step);
+            const { config: extracted, fallbacks } = rt.extractFallbacks(step, config);
+            const retryCount = rt.getRetryCount(step, extracted);
+            const backoffMs = rt.getBackoffMs(step, extracted);
+            const stepConfig = rt.stripRetryKeys(extracted);
+            try {
+                ctx =
+                    retryCount > 0
+                        ? await rt.runWithRetry(ctx, action, stepConfig, fallbacks, retryCount, backoffMs, i, step)
+                        : await rt.runWithFallbacks(ctx, action, stepConfig, fallbacks, i, step);
+            }
+            catch (err) {
+                const fixed = options?.site
+                    ? await rt.tryAutoFixSelect(err, ctx, action, stepConfig, i, options.site)
+                    : undefined;
+                if (fixed) {
+                    ctx = fixed;
+                    if (ctx.tempDir)
+                        tempDir = ctx.tempDir;
+                    continue;
+                }
+                await rt.emitDiagnosticIfEnabled(err, ctx, options?.site);
+                await rt.maybeRefreshCookies(err, options);
+                if (err instanceof PipelineError)
+                    throw err;
+                const errMsg = err instanceof Error ? err.message : String(err);
+                const isTransient = /timeout|ETIMEDOUT|ECONNREFUSED|ECONNRESET|socket hang up/i.test(errMsg);
+                throw new PipelineError(`Step ${i} (${action}) failed: ${errMsg}`, {
+                    step: i,
+                    action,
+                    config,
+                    errorType: isTransient ? "timeout" : "parse_error",
+                    suggestion: `Check the ${action} step at index ${i} in the adapter YAML. The expression or configuration may be invalid.`,
+                    retryable: isTransient,
+                    alternatives: [],
+                });
+            }
+            if (ctx.tempDir)
+                tempDir = ctx.tempDir;
+        }
+        const result = ctx.data;
+        if (Array.isArray(result))
+            return result;
+        if (result !== null && result !== undefined)
+            return [result];
+        return [];
+    }
+    finally {
+        if (tempDir) {
+            try {
+                rmSync(tempDir, { recursive: true, force: true });
+            }
+            catch {
+                /* best-effort */
+            }
+        }
+        if (ctx.page) {
+            try {
+                await ctx.page.close();
+            }
+            catch {
+                /* best-effort */
+            }
+        }
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/engine/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAoB,MAAM,gBAAgB,CAAC;AACrE,OAAO,EACL,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,MAAM,EACN,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,oEAAoE;AACpE,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,CAAC;AAkBjE,qEAAqE;AACrE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IAFlB,YACE,OAAe,EACC,MAkBf;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QApBC,WAAM,GAAN,MAAM,CAkBrB;QAGD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;IAED,WAAW,CAAC,WAAoB;QAC9B,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,OAAO,EAAE,WAAW;YACpB,GAAG,IAAI,CAAC,MAAM;YACd,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK;YACzC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE;SAC7C,CAAC;IACJ,CAAC;CACF;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,UAAU;IACV,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,SAAS;CACV,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,IAAI,iBAAiB,CAAC;AACrC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,IAAI,wBAAwB,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAGhE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAoB,EACpB,MAAc,EACd,MAAe,EACf,SAAiB,EACjB,QAAuB,EACvB,KAAc;IAEd,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,MAA0C,CAAC;QACtD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC3D,MAAM,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAErE,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAoB,EACpB,MAAc,EACd,MAAe;IAEf,MAAM,MAAM,GACV,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5D,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;IACvE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC;QAC3B,CAAC,CAAC,wBAAwB,CAAC,MAA2B,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,QAAQ,CAAC;IACpC,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAqB,EACrB,IAA6B,EAC7B,IAAa,EACb,OAAyB;IAEzB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,YAAgC,CAAC;IACrC,IACE,CAAC,OAAO,EAAE,QAAQ,KAAK,QAAQ,IAAI,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC;QAClE,OAAO,EAAE,IAAI,EACb,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CACrB,yBAAyB,OAAO,CAAC,IAAI,6BAA6B,OAAO,CAAC,IAAI,EAAE,EAChF;gBACE,IAAI,EAAE,CAAC,CAAC;gBACR,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC1D,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,gEAAgE,OAAO,CAAC,IAAI,gDAAgD,OAAO,CAAC,IAAI,OAAO;gBAC3J,SAAS,EAAE,KAAK;gBAChB,YAAY,EAAE,CAAC,qBAAqB,OAAO,CAAC,IAAI,EAAE,CAAC;aACpD,CACF,CAAC;QACJ,CAAC;QACD,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,GAAG,GAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC9E,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAC1D,IAAI,EACJ,MAAM,CACP,CAAC;YACF,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YAEhD,IAAI,CAAC;gBACH,GAAG;oBACD,UAAU,GAAG,CAAC;wBACZ,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,CACnB,GAAG,EACH,MAAM,EACN,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,EACT,CAAC,EACD,IAAI,CACL;wBACH,CAAC,CAAC,MAAM,EAAE,CAAC,gBAAgB,CACvB,GAAG,EACH,MAAM,EACN,UAAU,EACV,SAAS,EACT,CAAC,EACD,IAAI,CACL,CAAC;YACV,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,OAAO,EAAE,IAAI;oBACzB,CAAC,CAAC,MAAM,EAAE,CAAC,gBAAgB,CACvB,GAAG,EACH,GAAG,EACH,MAAM,EACN,UAAU,EACV,CAAC,EACD,OAAO,CAAC,IAAI,CACb;oBACH,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,KAAK,EAAE,CAAC;oBACV,GAAG,GAAG,KAAK,CAAC;oBACZ,IAAI,GAAG,CAAC,OAAO;wBAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;oBACvC,SAAS;gBACX,CAAC;gBAED,MAAM,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC1D,MAAM,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAE3C,IAAI,GAAG,YAAY,aAAa;oBAAE,MAAM,GAAG,CAAC;gBAC5C,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,WAAW,GACf,2DAA2D,CAAC,IAAI,CAC9D,MAAM,CACP,CAAC;gBACJ,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,MAAM,aAAa,MAAM,EAAE,EAAE;oBACjE,IAAI,EAAE,CAAC;oBACP,MAAM;oBACN,MAAM;oBACN,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;oBAClD,UAAU,EAAE,aAAa,MAAM,kBAAkB,CAAC,uEAAuE;oBACzH,SAAS,EAAE,WAAW;oBACtB,YAAY,EAAE,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACzC,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;QACxB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACzC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/engine/runtime.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pipeline runtime helpers — fallback chain, retry/backoff, auto-fix
+ * recovery, diagnostic emission, smart cookie refresh.
+ *
+ * These are the per-step recovery primitives that surround `executeStep`.
+ * Extracted from `runPipeline` so the orchestrator stays under its LOC
+ * budget while the recovery logic remains independently testable.
+ */
+import type { PipelineStep } from "../types.js";
+import { type PipelineContext, type PipelineOptions } from "./executor.js";
+export declare function extractFallbacks(step: PipelineStep, rawConfig: unknown): {
+    config: unknown;
+    fallbacks: unknown[] | undefined;
+};
+export declare function getRetryCount(step: PipelineStep, config: unknown): number;
+export declare function getBackoffMs(step: PipelineStep, config: unknown): number;
+export declare function stripRetryKeys(config: unknown): unknown;
+export declare function runWithFallbacks(ctx: PipelineContext, action: string, config: unknown, fallbacks: unknown[] | undefined, stepIndex: number, step: PipelineStep): Promise<PipelineContext>;
+export declare function runWithRetry(ctx: PipelineContext, action: string, config: unknown, fallbacks: unknown[] | undefined, retryCount: number, backoffMs: number, stepIndex: number, step: PipelineStep): Promise<PipelineContext>;
+export declare function tryAutoFixSelect(err: unknown, ctx: PipelineContext, action: string, stepConfig: unknown, stepIndex: number, site: string): Promise<PipelineContext | undefined>;
+export declare function emitDiagnosticIfEnabled(err: unknown, ctx: PipelineContext, site: string | undefined): Promise<void>;
+export declare function maybeRefreshCookies(err: unknown, options: PipelineOptions | undefined): Promise<void>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/engine/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/engine/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,eAAe,EAGrB,MAAM,eAAe,CAAC;AAGvB,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,OAAO,GACjB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,EAAE,GAAG,SAAS,CAAA;CAAE,CAwBvD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAQzE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAQxE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CASvD;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,OAAO,EAAE,GAAG,SAAS,EAChC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,eAAe,CAAC,CAe1B;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,OAAO,EAAE,GAAG,SAAS,EAChC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,eAAe,CAAC,CAsB1B;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,OAAO,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAgCtC;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,eAAe,GAAG,SAAS,GACnC,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/engine/runtime.js

@@ -0,0 +1,167 @@
+/**
+ * Pipeline runtime helpers — fallback chain, retry/backoff, auto-fix
+ * recovery, diagnostic emission, smart cookie refresh.
+ *
+ * These are the per-step recovery primitives that surround `executeStep`.
+ * Extracted from `runPipeline` so the orchestrator stays under its LOC
+ * budget while the recovery logic remains independently testable.
+ */
+import { PipelineError, executeStep, } from "./executor.js";
+import { getStep } from "./step-registry.js";
+export function extractFallbacks(step, rawConfig) {
+    let config = rawConfig;
+    let fallbacks;
+    if (config && typeof config === "object" && !Array.isArray(config)) {
+        const co = config;
+        if ("fallback" in co) {
+            fallbacks = Array.isArray(co.fallback) ? co.fallback : [co.fallback];
+            const { fallback: _, ...rest } = co;
+            config = rest;
+        }
+    }
+    if (!fallbacks) {
+        const so = step;
+        if ("fallback" in so) {
+            const fb = so.fallback;
+            fallbacks = Array.isArray(fb) ? fb : [fb];
+        }
+    }
+    if (fallbacks) {
+        fallbacks = fallbacks.filter((fb) => fb != null);
+        if (fallbacks.length === 0)
+            fallbacks = undefined;
+    }
+    return { config, fallbacks };
+}
+export function getRetryCount(step, config) {
+    const so = step;
+    if (typeof so.retry === "number")
+        return so.retry;
+    if (config && typeof config === "object" && !Array.isArray(config)) {
+        const co = config;
+        if ("retry" in co)
+            return Number(co.retry) || 0;
+    }
+    return 0;
+}
+export function getBackoffMs(step, config) {
+    const so = step;
+    if (typeof so.backoff === "number")
+        return so.backoff;
+    if (config && typeof config === "object" && !Array.isArray(config)) {
+        const co = config;
+        if ("backoff" in co)
+            return Number(co.backoff) || 1000;
+    }
+    return 1000;
+}
+export function stripRetryKeys(config) {
+    if (!config || typeof config !== "object" || Array.isArray(config))
+        return config;
+    const co = config;
+    if ("retry" in co || "backoff" in co) {
+        const { retry: _r, backoff: _b, ...rest } = co;
+        return rest;
+    }
+    return config;
+}
+export async function runWithFallbacks(ctx, action, config, fallbacks, stepIndex, step) {
+    try {
+        return await executeStep(ctx, action, config, stepIndex, step);
+    }
+    catch (primaryErr) {
+        if (!fallbacks || fallbacks.length === 0)
+            throw primaryErr;
+        let lastErr = primaryErr;
+        for (const fb of fallbacks) {
+            try {
+                return await executeStep(ctx, action, fb, stepIndex, step);
+            }
+            catch (fbErr) {
+                lastErr = fbErr;
+            }
+        }
+        throw lastErr;
+    }
+}
+export async function runWithRetry(ctx, action, config, fallbacks, retryCount, backoffMs, stepIndex, step) {
+    let lastErr;
+    for (let attempt = 0; attempt <= retryCount; attempt++) {
+        try {
+            return await runWithFallbacks(ctx, action, config, fallbacks, stepIndex, step);
+        }
+        catch (err) {
+            lastErr = err;
+            if (attempt < retryCount) {
+                await new Promise((r) => setTimeout(r, backoffMs * Math.pow(2, attempt)));
+            }
+        }
+    }
+    throw lastErr;
+}
+export async function tryAutoFixSelect(err, ctx, action, stepConfig, stepIndex, site) {
+    if (action !== "select" ||
+        !(err instanceof PipelineError) ||
+        err.detail.errorType !== "selector_miss") {
+        return undefined;
+    }
+    try {
+        const { suggestSelectFix } = await import("./auto-fix.js");
+        const suggestions = suggestSelectFix(ctx.data, stepConfig);
+        const handler = getStep("select");
+        if (!handler)
+            return undefined;
+        for (const suggestion of suggestions) {
+            try {
+                const fixed = (await handler(ctx, suggestion, stepIndex));
+                process.stderr.write(`[auto-fix] ${site}: select path changed "${String(stepConfig)}" → "${suggestion}"\n`);
+                return fixed;
+            }
+            catch {
+                /* try next suggestion */
+            }
+        }
+    }
+    catch {
+        /* auto-fix module unavailable */
+    }
+    return undefined;
+}
+export async function emitDiagnosticIfEnabled(err, ctx, site) {
+    if (process.env.UNICLI_DIAGNOSTIC !== "1")
+        return;
+    try {
+        const { buildRepairContext, emitRepairContext } = await import("./diagnostic.js");
+        const repairCtx = await buildRepairContext({
+            error: err instanceof Error ? err : new Error(String(err)),
+            site: site ?? "unknown",
+            command: "unknown",
+            page: ctx.page,
+        });
+        emitRepairContext(repairCtx);
+    }
+    catch {
+        /* never mask original error */
+    }
+}
+export async function maybeRefreshCookies(err, options) {
+    if (!(err instanceof PipelineError))
+        return;
+    if (err.detail.statusCode !== 401 && err.detail.statusCode !== 403)
+        return;
+    if (options?.strategy !== "cookie" && options?.strategy !== "header")
+        return;
+    if (!options?.site)
+        return;
+    try {
+        const { refreshCookies } = await import("./cookie-refresh.js");
+        const refreshed = await refreshCookies(options.site);
+        if (refreshed) {
+            process.stderr.write(`[cookie-refresh] Cookies refreshed for ${options.site}, retry the command.\n`);
+        }
+    }
+    catch {
+        /* non-fatal */
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/engine/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/engine/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAGL,aAAa,EACb,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,MAAM,UAAU,gBAAgB,CAC9B,IAAkB,EAClB,SAAkB;IAElB,IAAI,MAAM,GAAG,SAAS,CAAC;IACvB,IAAI,SAAgC,CAAC;IAErC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,EAAE,GAAG,MAAiC,CAAC;QAC7C,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;YACrB,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YACrE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;YACpC,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,IAA+B,CAAC;QAC3C,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC;YACvB,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,GAAG,SAAS,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAkB,EAAE,MAAe;IAC/D,MAAM,EAAE,GAAG,IAA+B,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC;IAClD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,EAAE,GAAG,MAAiC,CAAC;QAC7C,IAAI,OAAO,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAkB,EAAE,MAAe;IAC9D,MAAM,EAAE,GAAG,IAA+B,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,OAAO,CAAC;IACtD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,EAAE,GAAG,MAAiC,CAAC;QAC7C,IAAI,SAAS,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAChE,OAAO,MAAM,CAAC;IAChB,MAAM,EAAE,GAAG,MAAiC,CAAC;IAC7C,IAAI,OAAO,IAAI,EAAE,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAoB,EACpB,MAAc,EACd,MAAe,EACf,SAAgC,EAChC,SAAiB,EACjB,IAAkB;IAElB,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,UAAU,CAAC;QAC3D,IAAI,OAAO,GAAG,UAAU,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAoB,EACpB,MAAc,EACd,MAAe,EACf,SAAgC,EAChC,UAAkB,EAClB,SAAiB,EACjB,SAAiB,EACjB,IAAkB;IAElB,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAC3B,GAAG,EACH,MAAM,EACN,MAAM,EACN,SAAS,EACT,SAAS,EACT,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,UAAU,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAChD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAY,EACZ,GAAoB,EACpB,MAAc,EACd,UAAmB,EACnB,SAAiB,EACjB,IAAY;IAEZ,IACE,MAAM,KAAK,QAAQ;QACnB,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,eAAe,EACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAoB,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAC1B,GAAG,EACH,UAAU,EACV,SAAS,CACV,CAAoB,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,cAAc,IAAI,0BAA0B,MAAM,CAAC,UAAU,CAAC,QAAQ,UAAU,KAAK,CACtF,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAY,EACZ,GAAoB,EACpB,IAAwB;IAExB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG;QAAE,OAAO;IAClD,IAAI,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,GAC7C,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;YACzC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1D,IAAI,EAAE,IAAI,IAAI,SAAS;YACvB,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;QACH,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAY,EACZ,OAAoC;IAEpC,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC;QAAE,OAAO;IAC5C,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO;IAC3E,IAAI,OAAO,EAAE,QAAQ,KAAK,QAAQ,IAAI,OAAO,EAAE,QAAQ,KAAK,QAAQ;QAAE,OAAO;IAC7E,IAAI,CAAC,OAAO,EAAE,IAAI;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,OAAO,CAAC,IAAI,wBAAwB,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC"}

package/dist/engine/ssrf.d.ts

@@ -0,0 +1,18 @@
+/**
+ * SSRF defence — reject request URLs that point at non-http(s) schemes or
+ * reserved local address ranges before we issue the fetch.
+ *
+ * The attack shape this blocks: a YAML adapter takes `${{ args.query }}`
+ * and interpolates it into the request URL. An attacker (or a careless
+ * template author) feeds a payload like `http://169.254.169.254/latest/meta-data/`
+ * (AWS IMDS) or `http://127.0.0.1:19825/internal` (Uni-CLI daemon). Without
+ * this guard the runner happily fetches it and returns the response —
+ * leaking credentials or driving the daemon.
+ *
+ * The check is intentionally conservative: only http/https, and no loopback
+ * / link-local / private metadata addresses. Set `UNICLI_ALLOW_LOCAL=1` to
+ * bypass — useful for local dev / testing where a developer intentionally
+ * targets `127.0.0.1` or a docker compose stack on a private subnet.
+ */
+export declare function assertSafeRequestUrl(raw: string): void;
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/engine/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../../src/engine/ssrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CA0CtD"}

package/dist/engine/ssrf.js

@@ -0,0 +1,55 @@
+/**
+ * SSRF defence — reject request URLs that point at non-http(s) schemes or
+ * reserved local address ranges before we issue the fetch.
+ *
+ * The attack shape this blocks: a YAML adapter takes `${{ args.query }}`
+ * and interpolates it into the request URL. An attacker (or a careless
+ * template author) feeds a payload like `http://169.254.169.254/latest/meta-data/`
+ * (AWS IMDS) or `http://127.0.0.1:19825/internal` (Uni-CLI daemon). Without
+ * this guard the runner happily fetches it and returns the response —
+ * leaking credentials or driving the daemon.
+ *
+ * The check is intentionally conservative: only http/https, and no loopback
+ * / link-local / private metadata addresses. Set `UNICLI_ALLOW_LOCAL=1` to
+ * bypass — useful for local dev / testing where a developer intentionally
+ * targets `127.0.0.1` or a docker compose stack on a private subnet.
+ */
+export function assertSafeRequestUrl(raw) {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw new Error(`invalid URL for pipeline fetch: ${raw.slice(0, 120)}`);
+    }
+    if (u.protocol !== "http:" && u.protocol !== "https:") {
+        throw new Error(`disallowed URL scheme for pipeline fetch: ${u.protocol} (only http/https)`);
+    }
+    if (process.env.UNICLI_ALLOW_LOCAL === "1")
+        return;
+    // Node's URL.hostname keeps the IPv6 brackets (`[::1]`) around the
+    // zero-compressed literal; strip them before comparing.
+    const hostnameLower = u.hostname.toLowerCase();
+    const host = hostnameLower.startsWith("[") && hostnameLower.endsWith("]")
+        ? hostnameLower.slice(1, -1)
+        : hostnameLower;
+    if (host === "localhost" ||
+        host === "0.0.0.0" ||
+        host === "::" ||
+        host === "::1" ||
+        host === "metadata.google.internal" ||
+        host === "metadata" ||
+        // IPv6 link-local (fe80::/10) and unique-local (fc00::/7 → fc/fd prefix)
+        host.startsWith("fe80:") ||
+        host.startsWith("fc") ||
+        host.startsWith("fd") ||
+        // IPv4 CIDR check — crude but covers the most common SSRF vectors.
+        host.startsWith("127.") ||
+        host.startsWith("10.") ||
+        host.startsWith("169.254.") ||
+        host.startsWith("192.168.") ||
+        /^172\.(1[6-9]|2\d|3[01])\./.test(host)) {
+        throw new Error(`blocked fetch to reserved/local address ${host} — set UNICLI_ALLOW_LOCAL=1 to override`);
+    }
+}
+//# sourceMappingURL=ssrf.js.map

package/dist/engine/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../../src/engine/ssrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,6CAA6C,CAAC,CAAC,QAAQ,oBAAoB,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG;QAAE,OAAO;IACnD,mEAAmE;IACnE,wDAAwD;IACxD,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,IAAI,GACR,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1D,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,aAAa,CAAC;IACpB,IACE,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,0BAA0B;QACnC,IAAI,KAAK,UAAU;QACnB,yEAAyE;QACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,mEAAmE;QACnE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,yCAAyC,CACzF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/engine/step-registry.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Pipeline step registry — the capability table the executor dispatches
+ * through.
+ *
+ * Each per-step module self-registers on import. `steps/index.ts` is the
+ * aggregator that triggers every registration; the executor imports that
+ * barrel once, then `getStep(name)` works for every built-in action.
+ */
+import type { PipelineStep } from "../types.js";
+import type { PipelineContext } from "./executor.js";
+export type StepHandler<TConfig = unknown> = (ctx: PipelineContext, config: TConfig, stepIndex?: number, fullStep?: PipelineStep, depth?: number) => Promise<PipelineContext> | PipelineContext;
+export declare function registerStep<TConfig = unknown>(name: string, handler: StepHandler<TConfig>): void;
+export declare function getStep(name: string): StepHandler | undefined;
+export declare function listSteps(): string[];
+export declare function unregisterStep(name: string): boolean;
+//# sourceMappingURL=step-registry.d.ts.map

package/dist/engine/step-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-registry.d.ts","sourceRoot":"","sources":["../../src/engine/step-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,MAAM,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,CAC3C,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,YAAY,EACvB,KAAK,CAAC,EAAE,MAAM,KACX,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC;AAIhD,wBAAgB,YAAY,CAAC,OAAO,GAAG,OAAO,EAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,GAC5B,IAAI,CAKN;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE7D;AAED,wBAAgB,SAAS,IAAI,MAAM,EAAE,CAEpC;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD"}

package/dist/engine/step-registry.js

@@ -0,0 +1,25 @@
+/**
+ * Pipeline step registry — the capability table the executor dispatches
+ * through.
+ *
+ * Each per-step module self-registers on import. `steps/index.ts` is the
+ * aggregator that triggers every registration; the executor imports that
+ * barrel once, then `getStep(name)` works for every built-in action.
+ */
+const registry = new Map();
+export function registerStep(name, handler) {
+    if (registry.has(name)) {
+        throw new Error(`step "${name}" already registered`);
+    }
+    registry.set(name, handler);
+}
+export function getStep(name) {
+    return registry.get(name);
+}
+export function listSteps() {
+    return Array.from(registry.keys()).sort();
+}
+export function unregisterStep(name) {
+    return registry.delete(name);
+}
+//# sourceMappingURL=step-registry.js.map

package/dist/engine/step-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-registry.js","sourceRoot":"","sources":["../../src/engine/step-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEhD,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,OAA6B;IAE7B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,sBAAsB,CAAC,CAAC;IACvD,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAsB,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/engine/steps/append.d.ts

@@ -0,0 +1,3 @@
+import type { PipelineContext } from "../executor.js";
+export declare function stepAppend(ctx: PipelineContext, key: string): PipelineContext;
+//# sourceMappingURL=append.d.ts.map

package/dist/engine/steps/append.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"append.d.ts","sourceRoot":"","sources":["../../../src/engine/steps/append.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,wBAAgB,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,CAc7E"}

package/dist/engine/steps/append.js

@@ -0,0 +1,20 @@
+import { registerStep } from "../step-registry.js";
+export function stepAppend(ctx, key) {
+    if (typeof key !== "string" || !key)
+        return ctx;
+    const existing = ctx.vars[key];
+    const arr = Array.isArray(existing)
+        ? [...existing]
+        : existing !== undefined
+            ? [existing]
+            : [];
+    if (Array.isArray(ctx.data)) {
+        arr.push(...ctx.data);
+    }
+    else if (ctx.data !== null && ctx.data !== undefined) {
+        arr.push(ctx.data);
+    }
+    return { ...ctx, vars: { ...ctx.vars, [key]: arr } };
+}
+registerStep("append", stepAppend);
+//# sourceMappingURL=append.js.map

package/dist/engine/steps/append.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"append.js","sourceRoot":"","sources":["../../../src/engine/steps/append.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AAGrE,MAAM,UAAU,UAAU,CAAC,GAAoB,EAAE,GAAW;IAC1D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;QACf,CAAC,CAAC,QAAQ,KAAK,SAAS;YACtB,CAAC,CAAC,CAAC,QAAQ,CAAC;YACZ,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,GAAI,GAAG,CAAC,IAAkB,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;AACvD,CAAC;AAED,YAAY,CAAC,QAAQ,EAAE,UAAyB,CAAC,CAAC"}

package/dist/engine/steps/assert.d.ts

@@ -0,0 +1,10 @@
+import { type PipelineContext } from "../executor.js";
+export interface AssertConfig {
+    url?: string;
+    selector?: string;
+    text?: string;
+    condition?: string;
+    message?: string;
+}
+export declare function stepAssert(ctx: PipelineContext, config: AssertConfig, stepIndex: number): Promise<PipelineContext>;
+//# sourceMappingURL=assert.d.ts.map

package/dist/engine/steps/assert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert.d.ts","sourceRoot":"","sources":["../../../src/engine/steps/assert.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,eAAe,EAAiB,MAAM,gBAAgB,CAAC;AAGrE,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAkE1B"}