@zenalexa/unicli 0.216.3 → 0.217.3

package/dist/engine/browser/evidence.js

@@ -0,0 +1,373 @@
+import { createHash } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+export const BROWSER_EVIDENCE_HOOK_JS = `(() => {
+  const root = globalThis;
+  const summary = root.__unicli_console_summary || {
+    count: 0,
+    error_count: 0,
+    warn_count: 0,
+    observed_since: new Date().toISOString()
+  };
+  root.__unicli_console_summary = summary;
+  if (root.__unicli_console_hooked) return;
+  root.__unicli_console_hooked = true;
+
+  const bump = (level) => {
+    try {
+      summary.count = Number(summary.count || 0) + 1;
+      if (level === "error") {
+        summary.error_count = Number(summary.error_count || 0) + 1;
+      }
+      if (level === "warn") {
+        summary.warn_count = Number(summary.warn_count || 0) + 1;
+      }
+    } catch {
+      /* evidence hooks must never affect the page */
+    }
+  };
+
+  for (const level of ["log", "warn", "error"]) {
+    const original = console[level];
+    if (typeof original !== "function") continue;
+    console[level] = function(...args) {
+      bump(level);
+      return original.apply(this, args);
+    };
+  }
+
+  root.addEventListener?.("error", () => {
+    bump("error");
+  });
+  root.addEventListener?.("unhandledrejection", () => {
+    bump("error");
+  });
+})()`;
+const READ_CONSOLE_SUMMARY_JS = `(() => JSON.stringify(globalThis.__unicli_console_summary || null))()`;
+export async function installBrowserEvidenceHooks(page) {
+    try {
+        await page.addInitScript(BROWSER_EVIDENCE_HOOK_JS);
+    }
+    catch {
+        // Best effort: older backends may only support evaluate on the current page.
+    }
+    try {
+        await page.evaluate(BROWSER_EVIDENCE_HOOK_JS);
+    }
+    catch {
+        // Evidence hooks are observational and must not block the browser command.
+    }
+}
+export async function captureBrowserEvidencePacket(page, options) {
+    const captureErrors = [];
+    const capturedAt = options.timestamp ?? new Date().toISOString();
+    const maxPreviewChars = Math.max(1, options.maxPreviewChars ?? 2000);
+    const url = await captureValue(() => page.url(), "", "url", captureErrors);
+    const title = await captureValue(() => page.title(), "", "title", captureErrors);
+    const snapshot = options.snapshot ??
+        (await captureValue(() => page.snapshot({ interactive: true }), "", "snapshot", captureErrors));
+    const consoleResult = await readConsoleSummary(page, captureErrors);
+    const networkResult = await readNetworkEntries(page, captureErrors);
+    const screenshot = await captureScreenshot(page, options, capturedAt);
+    if (screenshot.error)
+        captureErrors.push(`screenshot: ${screenshot.error}`);
+    const captureScope = {
+        console: consoleResult.scope,
+        dom: domScope(options, snapshot),
+        network: networkResult.scope,
+        screenshot: screenshotScope(screenshot),
+    };
+    return {
+        schema_version: "1",
+        evidence_type: "browser-operator",
+        action: options.action,
+        workspace: options.workspace,
+        ...(options.lease ? { lease: options.lease } : {}),
+        captured_at: capturedAt,
+        observed_since: consoleResult.observedSince,
+        partial: isPartialEvidence(captureScope),
+        capture_scope: captureScope,
+        page: { url, title },
+        dom: {
+            format: "dom-ax",
+            chars: snapshot.length,
+            ref_count: countSnapshotRefs(snapshot),
+            sha256: `sha256:${createHash("sha256").update(snapshot).digest("hex")}`,
+            preview: snapshot.slice(0, maxPreviewChars),
+        },
+        console: summarizeConsole(consoleResult.summary),
+        network: summarizeNetwork(networkResult.entries),
+        screenshot,
+        capture_errors: captureErrors,
+    };
+}
+export async function captureRenderAwareBrowserEvidence(page, options) {
+    const timeoutMs = Math.max(0, finiteNumber(options.timeoutMs, 3000));
+    const pollMs = Math.max(10, finiteNumber(options.pollMs, 100));
+    const stableForMs = Math.max(0, finiteNumber(options.stableForMs, 500));
+    const now = options.now ?? Date.now;
+    const sleep = options.sleep ??
+        (async (ms) => {
+            await new Promise((resolve) => setTimeout(resolve, ms));
+        });
+    const startedAt = now();
+    let samples = 1;
+    let packet = await captureBrowserEvidencePacket(page, options);
+    let signature = renderSignature(packet);
+    let stableSince = now();
+    while (now() - startedAt < timeoutMs) {
+        await sleep(pollMs);
+        samples += 1;
+        packet = await captureBrowserEvidencePacket(page, options);
+        const nextSignature = renderSignature(packet);
+        if (nextSignature !== signature) {
+            signature = nextSignature;
+            stableSince = now();
+            continue;
+        }
+        const stableFor = now() - stableSince;
+        if (stableFor >= stableForMs) {
+            return {
+                packet,
+                stability: {
+                    reached: true,
+                    reason: "stable",
+                    samples,
+                    stable_for_ms: stableFor,
+                    timeout_ms: timeoutMs,
+                    poll_ms: pollMs,
+                },
+            };
+        }
+    }
+    return {
+        packet: {
+            ...packet,
+            partial: true,
+            capture_errors: [
+                ...packet.capture_errors,
+                `render_stability: timeout after ${String(timeoutMs)}ms`,
+            ],
+        },
+        stability: {
+            reached: false,
+            reason: "timeout",
+            samples,
+            stable_for_ms: now() - stableSince,
+            timeout_ms: timeoutMs,
+            poll_ms: pollMs,
+        },
+    };
+}
+function finiteNumber(value, fallback) {
+    return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+function renderSignature(packet) {
+    return [
+        packet.page.url,
+        packet.page.title,
+        packet.dom.sha256,
+        packet.screenshot.sha256 ?? "",
+        String(packet.network.count),
+        String(packet.console.count),
+    ].join("\0");
+}
+async function captureValue(fn, fallback, label, errors) {
+    try {
+        return await fn();
+    }
+    catch (err) {
+        errors.push(`${label}: ${errorMessage(err)}`);
+        return fallback;
+    }
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function countSnapshotRefs(snapshot) {
+    try {
+        const parsed = JSON.parse(snapshot);
+        if (Array.isArray(parsed.refs))
+            return parsed.refs.length;
+    }
+    catch {
+        // Plain DOM/AX snapshot strings are expected.
+    }
+    const refs = new Set();
+    for (const match of snapshot.matchAll(/\[(\d+)\]/g)) {
+        refs.add(`numeric:${match[1]}`);
+    }
+    for (const match of snapshot.matchAll(/\[ref=([A-Za-z0-9_-]+)\]/g)) {
+        refs.add(`playwright:${match[1]}`);
+    }
+    for (const match of snapshot.matchAll(/\[(\d+-\d+)\]/g)) {
+        refs.add(`structured:${match[1]}`);
+    }
+    return refs.size;
+}
+async function readConsoleSummary(page, errors) {
+    try {
+        const raw = await page.evaluate(READ_CONSOLE_SUMMARY_JS);
+        if (typeof raw === "string") {
+            const parsed = JSON.parse(raw);
+            return consoleReadResult(parsed);
+        }
+        return consoleReadResult(raw);
+    }
+    catch (err) {
+        errors.push(`console: ${errorMessage(err)}`);
+        return {
+            summary: {},
+            scope: "unavailable",
+            observedSince: null,
+        };
+    }
+}
+async function readNetworkEntries(page, errors) {
+    const pageWithCapture = page;
+    let captured = [];
+    if (typeof pageWithCapture.readNetworkCapture === "function") {
+        try {
+            captured = (await pageWithCapture.readNetworkCapture()) ?? [];
+        }
+        catch (err) {
+            errors.push(`network_capture: ${errorMessage(err)}`);
+        }
+    }
+    let fallback = [];
+    try {
+        fallback = (await page.networkRequests()).map(fromNetworkRequest);
+    }
+    catch (err) {
+        errors.push(`network: ${errorMessage(err)}`);
+    }
+    const entries = mergeNetworkEntries(captured, fallback);
+    if (captured.length > 0 && fallback.length > 0) {
+        return { entries, scope: "session+fallback" };
+    }
+    if (captured.length > 0)
+        return { entries, scope: "session" };
+    if (fallback.length > 0)
+        return { entries, scope: "fallback" };
+    return { entries, scope: "unavailable" };
+}
+function fromNetworkRequest(request) {
+    return {
+        url: request.url,
+        method: request.method,
+        status: request.status,
+        contentType: request.type,
+        size: request.size,
+    };
+}
+function summarizeConsole(summary) {
+    return {
+        count: numberOrZero(summary.count),
+        error_count: numberOrZero(summary.error_count),
+        warn_count: numberOrZero(summary.warn_count),
+    };
+}
+function summarizeNetwork(entries) {
+    const statusCounts = {};
+    const methodCounts = {};
+    let totalBytes = 0;
+    for (const entry of entries) {
+        const status = String(entry.status ?? 0);
+        statusCounts[status] = (statusCounts[status] ?? 0) + 1;
+        const method = (entry.method ?? "GET").toUpperCase();
+        methodCounts[method] = (methodCounts[method] ?? 0) + 1;
+        totalBytes += numberOrZero(entry.size ?? entry.bodySize);
+    }
+    return {
+        count: entries.length,
+        total_bytes: totalBytes,
+        status_counts: statusCounts,
+        method_counts: methodCounts,
+    };
+}
+function numberOrZero(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+async function captureScreenshot(page, options, capturedAt) {
+    if (!options.screenshotDir)
+        return { skipped: true };
+    try {
+        const buffer = await page.screenshot({ fullPage: false });
+        const sha256 = `sha256:${createHash("sha256").update(buffer).digest("hex")}`;
+        await mkdir(options.screenshotDir, { recursive: true, mode: 0o700 });
+        const path = join(options.screenshotDir, `browser-evidence-${safeTimestamp(capturedAt)}-${sha256.slice(7, 19)}.png`);
+        await writeFile(path, buffer, { mode: 0o600 });
+        return {
+            path,
+            bytes: buffer.length,
+            sha256,
+        };
+    }
+    catch (err) {
+        return { error: errorMessage(err) };
+    }
+}
+function consoleReadResult(value) {
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+        const summary = value;
+        const observedSince = typeof summary.observed_since === "string" &&
+            summary.observed_since.length > 0
+            ? summary.observed_since
+            : null;
+        return {
+            summary,
+            scope: observedSince ? "since_hook" : "unavailable",
+            observedSince,
+        };
+    }
+    return {
+        summary: {},
+        scope: "unavailable",
+        observedSince: null,
+    };
+}
+function mergeNetworkEntries(captured, fallback) {
+    const merged = [];
+    const seen = new Set();
+    for (const entry of [...captured, ...fallback]) {
+        const key = networkEntryKey(entry);
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        merged.push(entry);
+    }
+    return merged;
+}
+function networkEntryKey(entry) {
+    return [
+        (entry.method ?? "GET").toUpperCase(),
+        String(entry.status ?? 0),
+        entry.url,
+        String(numberOrZero(entry.size ?? entry.bodySize)),
+    ].join("\0");
+}
+function domScope(options, snapshot) {
+    if (options.snapshot !== undefined)
+        return "provided_snapshot";
+    return snapshot.length > 0 ? "current_snapshot" : "unavailable";
+}
+function screenshotScope(screenshot) {
+    if (screenshot.error)
+        return "failed";
+    if (screenshot.skipped)
+        return "skipped";
+    return "current_viewport";
+}
+function isPartialEvidence(scope) {
+    return (scope.console !== "session" ||
+        scope.network !== "session" ||
+        scope.dom === "unavailable" ||
+        scope.screenshot !== "current_viewport");
+}
+function safeTimestamp(timestamp) {
+    return timestamp
+        .replace(/[^A-Za-z0-9]+/g, "-")
+        .replace(/^-+/, "")
+        .replace(/-+$/, "");
+}
+//# sourceMappingURL=evidence.js.map

package/dist/engine/browser/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/engine/browser/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkHjC,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyCnC,CAAC;AAEN,MAAM,uBAAuB,GAAG,uEAAuE,CAAC;AAExG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAW;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAW,EACX,OAA+B;IAE/B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC;IAErE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAClB,EAAE,EACF,OAAO,EACP,aAAa,CACd,CAAC;IACF,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ;QAChB,CAAC,MAAM,YAAY,CACjB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAC1C,EAAE,EACF,UAAU,EACV,aAAa,CACd,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,UAAU,CAAC,KAAK;QAAE,aAAa,CAAC,IAAI,CAAC,eAAe,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG;QACnB,OAAO,EAAE,aAAa,CAAC,KAAK;QAC5B,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QAChC,OAAO,EAAE,aAAa,CAAC,KAAK;QAC5B,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC;KACxC,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,GAAG;QACnB,aAAa,EAAE,kBAAkB;QACjC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,aAAa,CAAC,aAAa;QAC3C,OAAO,EAAE,iBAAiB,CAAC,YAAY,CAAC;QACxC,aAAa,EAAE,YAAY;QAC3B,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;QACpB,GAAG,EAAE;YACH,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,SAAS,EAAE,iBAAiB,CAAC,QAAQ,CAAC;YACtC,MAAM,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YACvE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;SAC5C;QACD,OAAO,EAAE,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC;QAChD,OAAO,EAAE,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC;QAChD,UAAU;QACV,cAAc,EAAE,aAAa;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAAW,EACX,OAA0C;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;YACpB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;IAExB,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,CAAC;QACb,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,SAAS,GAAG,aAAa,CAAC;YAC1B,WAAW,GAAG,GAAG,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,WAAW,CAAC;QACtC,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO;gBACL,MAAM;gBACN,SAAS,EAAE;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,QAAQ;oBAChB,OAAO;oBACP,aAAa,EAAE,SAAS;oBACxB,UAAU,EAAE,SAAS;oBACrB,OAAO,EAAE,MAAM;iBAChB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE;YACN,GAAG,MAAM;YACT,OAAO,EAAE,IAAI;YACb,cAAc,EAAE;gBACd,GAAG,MAAM,CAAC,cAAc;gBACxB,mCAAmC,MAAM,CAAC,SAAS,CAAC,IAAI;aACzD;SACF;QACD,SAAS,EAAE;YACT,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS;YACjB,OAAO;YACP,aAAa,EAAE,GAAG,EAAE,GAAG,WAAW;YAClC,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,MAAM;SAChB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAgB;IAC/D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,MAA6B;IACpD,OAAO;QACL,MAAM,CAAC,IAAI,CAAC,GAAG;QACf,MAAM,CAAC,IAAI,CAAC,KAAK;QACjB,MAAM,CAAC,GAAG,CAAC,MAAM;QACjB,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;KAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAoB,EACpB,QAAW,EACX,KAAa,EACb,MAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAuB,CAAC;QAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAW,EACX,MAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YAC1C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,aAAa;YACpB,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAW,EACX,MAAgB;IAEhB,MAAM,eAAe,GAAG,IAEvB,CAAC;IAEF,IAAI,QAAQ,GAA0B,EAAE,CAAC;IACzC,IAAI,OAAO,eAAe,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,oBAAoB,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAA0B,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAuB;IACjD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuB;IAEvB,OAAO;QACL,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9C,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA8B;IAE9B,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACzC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEvD,UAAU,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,WAAW,EAAE,UAAU;QACvB,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,YAAY;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAW,EACX,OAA+B,EAC/B,UAAkB;IAElB,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CACf,OAAO,CAAC,aAAa,EACrB,oBAAoB,aAAa,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAC3E,CAAC;QACF,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,KAAuB,CAAC;QACxC,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ;YAC1C,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAC/B,CAAC,CAAC,OAAO,CAAC,cAAc;YACxB,CAAC,CAAC,IAAI,CAAC;QACX,OAAO;YACL,OAAO;YACP,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa;YACnD,aAAa;SACd,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,aAAa;QACpB,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA+B,EAC/B,QAA+B;IAE/B,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAA0B;IACjD,OAAO;QACL,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACzB,KAAK,CAAC,GAAG;QACT,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;KACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,OAA+B,EAAE,QAAgB;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC;IAC/D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CACtB,UAA+C;IAE/C,IAAI,UAAU,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,UAAU,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA6C;IAE7C,OAAO,CACL,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,KAAK,CAAC,GAAG,KAAK,aAAa;QAC3B,KAAK,CAAC,UAAU,KAAK,kBAAkB,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,SAAS;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC"}

package/dist/engine/browser/session-lease.d.ts

@@ -0,0 +1,53 @@
+export type BrowserSessionLeaseScope = "shared" | "explicit" | "isolated";
+export interface BrowserSessionLeaseOptions {
+    namespace: "browser" | "operate";
+    workspace: string;
+    isolated?: boolean;
+    sharedSession?: boolean;
+    daemonPort?: string;
+    expectedDomain?: string;
+    expectedPathPrefix?: string;
+}
+export interface BrowserSessionLease {
+    browser_session_id: string;
+    browser_workspace_id: string;
+    lease_owner: string;
+    scope: BrowserSessionLeaseScope;
+    daemon_port?: string;
+    url_guard?: BrowserSessionLeaseUrlGuard;
+    target?: BrowserSessionLeaseTarget;
+    auth?: BrowserSessionLeaseAuthPosture;
+}
+export interface BrowserSessionLeaseUrlGuard {
+    expected_domain?: string;
+    expected_path_prefix?: string;
+}
+export interface BrowserSessionLeaseTarget {
+    kind: "daemon-tab" | "cdp-target" | "unknown";
+    captured_at: string;
+    target_id?: string;
+    tab_id?: number;
+    window_id?: number;
+    target_type?: string;
+    url?: string;
+    title?: string;
+    owned?: boolean;
+    preferred_tab_id?: number | null;
+    tab_count?: number;
+}
+export interface BrowserSessionLeaseAuthPosture {
+    state: "cookies_present" | "no_cookies" | "unavailable";
+    captured_at: string;
+    cookie_count?: number;
+}
+export declare class BrowserSessionLeaseGuardError extends Error {
+    readonly code: "browser_domain_mismatch" | "browser_path_mismatch" | "browser_target_mismatch";
+    readonly lease: BrowserSessionLease;
+    readonly expected: string;
+    readonly actual: string;
+    suggestion: string;
+    constructor(code: "browser_domain_mismatch" | "browser_path_mismatch" | "browser_target_mismatch", lease: BrowserSessionLease, expected: string, actual: string);
+}
+export declare function createBrowserSessionLease(options: BrowserSessionLeaseOptions): BrowserSessionLease;
+export declare function assertBrowserSessionLeaseUrlGuard(lease: BrowserSessionLease, currentUrl: string): void;
+//# sourceMappingURL=session-lease.d.ts.map

package/dist/engine/browser/session-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lease.d.ts","sourceRoot":"","sources":["../../../src/engine/browser/session-lease.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;AAE1E,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,wBAAwB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACxC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,IAAI,CAAC,EAAE,8BAA8B,CAAC;CACvC;AAED,MAAM,WAAW,2BAA2B;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,iBAAiB,GAAG,YAAY,GAAG,aAAa,CAAC;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IAKpD,QAAQ,CAAC,IAAI,EACT,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB;IAC7B,QAAQ,CAAC,KAAK,EAAE,mBAAmB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAVzB,UAAU,SAC6D;gBAG5D,IAAI,EACT,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,EACpB,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM;CAW1B;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CAoBrB;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,mBAAmB,EAC1B,UAAU,EAAE,MAAM,GACjB,IAAI,CAuBN"}

package/dist/engine/browser/session-lease.js

@@ -0,0 +1,100 @@
+import { createHash } from "node:crypto";
+export class BrowserSessionLeaseGuardError extends Error {
+    code;
+    lease;
+    expected;
+    actual;
+    suggestion = "Bind or open a tab that matches the requested browser lease guard.";
+    constructor(code, lease, expected, actual) {
+        super(code === "browser_domain_mismatch"
+            ? `Browser tab hostname "${actual}" does not match expected domain "${expected}"`
+            : code === "browser_path_mismatch"
+                ? `Browser tab path "${actual}" does not match expected path prefix "${expected}"`
+                : `Browser target "${actual}" does not match expected target "${expected}"`);
+        this.code = code;
+        this.lease = lease;
+        this.expected = expected;
+        this.actual = actual;
+        this.name = "BrowserSessionLeaseGuardError";
+    }
+}
+export function createBrowserSessionLease(options) {
+    const workspace = options.workspace.trim();
+    const owner = `unicli.${options.namespace}`;
+    const scope = leaseScope(workspace, options);
+    const daemonPort = normalizedDaemonPort(options.daemonPort);
+    const urlGuard = browserSessionLeaseUrlGuard(options);
+    return {
+        browser_session_id: `browser-session:${shortHash([
+            "v1",
+            owner,
+            workspace,
+            daemonPort ?? "default-daemon",
+        ])}`,
+        browser_workspace_id: workspace,
+        lease_owner: owner,
+        scope,
+        ...(daemonPort ? { daemon_port: daemonPort } : {}),
+        ...(urlGuard ? { url_guard: urlGuard } : {}),
+    };
+}
+export function assertBrowserSessionLeaseUrlGuard(lease, currentUrl) {
+    if (!lease.url_guard)
+        return;
+    const url = new URL(currentUrl);
+    const host = url.hostname.toLowerCase();
+    const expectedDomain = lease.url_guard.expected_domain;
+    if (expectedDomain && !matchesDomainGuard(host, expectedDomain)) {
+        throw new BrowserSessionLeaseGuardError("browser_domain_mismatch", lease, expectedDomain, host);
+    }
+    const expectedPathPrefix = lease.url_guard.expected_path_prefix;
+    if (expectedPathPrefix && !url.pathname.startsWith(expectedPathPrefix)) {
+        throw new BrowserSessionLeaseGuardError("browser_path_mismatch", lease, expectedPathPrefix, url.pathname);
+    }
+}
+function leaseScope(workspace, options) {
+    if (options.isolated || /^browser:\d+:\d+:[0-9a-f]+$/.test(workspace)) {
+        return "isolated";
+    }
+    if (options.sharedSession || workspace === `${options.namespace}:default`) {
+        return "shared";
+    }
+    return "explicit";
+}
+function normalizedDaemonPort(value) {
+    const raw = value ?? process.env.UNICLI_DAEMON_PORT;
+    return raw && raw.trim().length > 0 ? raw.trim() : undefined;
+}
+function browserSessionLeaseUrlGuard(options) {
+    const expectedDomain = normalizedDomain(options.expectedDomain);
+    const expectedPathPrefix = normalizedPathPrefix(options.expectedPathPrefix);
+    if (!expectedDomain && !expectedPathPrefix)
+        return undefined;
+    return {
+        ...(expectedDomain ? { expected_domain: expectedDomain } : {}),
+        ...(expectedPathPrefix ? { expected_path_prefix: expectedPathPrefix } : {}),
+    };
+}
+function normalizedDomain(value) {
+    const normalized = value
+        ?.trim()
+        .replace(/^\.+|\.+$/g, "")
+        .toLowerCase();
+    return normalized && normalized.length > 0 ? normalized : undefined;
+}
+function normalizedPathPrefix(value) {
+    const raw = value?.trim();
+    if (!raw)
+        return undefined;
+    return raw.startsWith("/") ? raw : `/${raw}`;
+}
+function matchesDomainGuard(host, expectedDomain) {
+    return host === expectedDomain || host.endsWith(`.${expectedDomain}`);
+}
+function shortHash(parts) {
+    return createHash("sha256")
+        .update(parts.join("\0"))
+        .digest("hex")
+        .slice(0, 16);
+}
+//# sourceMappingURL=session-lease.js.map

package/dist/engine/browser/session-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lease.js","sourceRoot":"","sources":["../../../src/engine/browser/session-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkDzC,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAK3C;IAIA;IACA;IACA;IAVX,UAAU,GACR,oEAAoE,CAAC;IAEvE,YACW,IAGoB,EACpB,KAA0B,EAC1B,QAAgB,EAChB,MAAc;QAEvB,KAAK,CACH,IAAI,KAAK,yBAAyB;YAChC,CAAC,CAAC,yBAAyB,MAAM,qCAAqC,QAAQ,GAAG;YACjF,CAAC,CAAC,IAAI,KAAK,uBAAuB;gBAChC,CAAC,CAAC,qBAAqB,MAAM,0CAA0C,QAAQ,GAAG;gBAClF,CAAC,CAAC,mBAAmB,MAAM,qCAAqC,QAAQ,GAAG,CAChF,CAAC;QAdO,SAAI,GAAJ,IAAI,CAGgB;QACpB,UAAK,GAAL,KAAK,CAAqB;QAC1B,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QASvB,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAmC;IAEnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,OAAO,CAAC,SAAS,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAEtD,OAAO;QACL,kBAAkB,EAAE,mBAAmB,SAAS,CAAC;YAC/C,IAAI;YACJ,KAAK;YACL,SAAS;YACT,UAAU,IAAI,gBAAgB;SAC/B,CAAC,EAAE;QACJ,oBAAoB,EAAE,SAAS;QAC/B,WAAW,EAAE,KAAK;QAClB,KAAK;QACL,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAA0B,EAC1B,UAAkB;IAElB,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC;IACvD,IAAI,cAAc,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,6BAA6B,CACrC,yBAAyB,EACzB,KAAK,EACL,cAAc,EACd,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,CAAC,oBAAoB,CAAC;IAChE,IAAI,kBAAkB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,6BAA6B,CACrC,uBAAuB,EACvB,KAAK,EACL,kBAAkB,EAClB,GAAG,CAAC,QAAQ,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,SAAiB,EACjB,OAAmC;IAEnC,IAAI,OAAO,CAAC,QAAQ,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,SAAS,KAAK,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC;QAC1E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAmC;IAEnC,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5E,IAAI,CAAC,cAAc,IAAI,CAAC,kBAAkB;QAAE,OAAO,SAAS,CAAC;IAC7D,OAAO;QACL,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,UAAU,GAAG,KAAK;QACtB,EAAE,IAAI,EAAE;SACP,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,WAAW,EAAE,CAAC;IACjB,OAAO,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,cAAsB;IAC9D,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACxB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/engine/browser/session-lock.d.ts

@@ -0,0 +1,17 @@
+import type { BrowserSessionLease } from "./session-lease.js";
+export interface BrowserSessionLeaseLockOptions {
+    rootDir?: string;
+    retryMs?: number;
+    staleMs?: number;
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+}
+export declare class BrowserSessionLeaseLockError extends Error {
+    readonly lease: BrowserSessionLease;
+    code: string;
+    suggestion: string;
+    constructor(lease: BrowserSessionLease);
+}
+export declare function withBrowserSessionLeaseLock<T>(lease: BrowserSessionLease, action: () => Promise<T>, options?: BrowserSessionLeaseLockOptions): Promise<T>;
+export declare function browserSessionLeaseLockPath(lease: BrowserSessionLease, rootDir?: string): string;
+//# sourceMappingURL=session-lock.d.ts.map

package/dist/engine/browser/session-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lock.d.ts","sourceRoot":"","sources":["../../../src/engine/browser/session-lock.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,WAAW,8BAA8B;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,qBAAa,4BAA6B,SAAQ,KAAK;IAKzC,QAAQ,CAAC,KAAK,EAAE,mBAAmB;IAJ/C,IAAI,SAA0B;IAC9B,UAAU,SAC2H;gBAEhH,KAAK,EAAE,mBAAmB;CAIhD;AAED,wBAAsB,2BAA2B,CAAC,CAAC,EACjD,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAyCZ;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,SAA+C,GACrD,MAAM,CAGR"}