@zenalexa/unicli 0.217.0 → 0.218.0

package/dist/engine/chromium-cookies.js

@@ -0,0 +1,361 @@
+/**
+ * Direct Chromium cookie reader (macOS / Linux / Windows).
+ *
+ * Reads encrypted cookies from a browser's local SQLite DB and decrypts them
+ * with the browser's platform-native key store. No CDP, no extension, no
+ * browser launch — works whether the browser is open or closed.
+ *
+ *   macOS    keychain `security` CLI → AES-128-CBC + 32-byte SHA256 prefix
+ *   Linux    libsecret `secret-tool` (peanuts fallback) → AES-128-CBC, no prefix, PBKDF2 iter=1
+ *   Windows  Local State + DPAPI → AES-256-GCM + 32-byte SHA256 prefix
+ *            v20 cookies (Chrome 127+ App-Bound) surface as
+ *            encryption_unsupported with a CDP-fallback suggestion
+ *
+ * SQLite is read by copy-then-open via the system `sqlite3` binary so that
+ * an open browser cannot block the read; WAL/SHM siblings are copied too.
+ *
+ * Tests at tests/unit/chromium-cookies.test.ts cover the pure path
+ * (deriveKey vector, decrypt round-trips per platform, profile picker,
+ * resolveCookieDb error codes).
+ */
+import { copyFileSync, existsSync, mkdtempSync, readdirSync, rmSync, statSync, } from "node:fs";
+import { homedir, tmpdir } from "node:os";
+import { join } from "node:path";
+import { execFileSync } from "node:child_process";
+import { ChromiumCookieError, } from "./chromium-cookies-types.js";
+import { KEYSTORE_SPECS, currentPlatform, decryptValue, deriveKey, getEncryptionSecret, } from "./chromium-cookies-platform.js";
+export { ChromiumCookieError, } from "./chromium-cookies-types.js";
+export { decryptValue, deriveKey, } from "./chromium-cookies-platform.js";
+const BROWSERS = {
+    chrome: {
+        paths: {
+            darwin: "Google/Chrome",
+            linux: "google-chrome",
+            win32: "Google/Chrome/User Data",
+        },
+        // macOS: no extra User Data segment; Linux: same; Windows: already in path.
+        hasUserData: false,
+    },
+    brave: {
+        paths: {
+            darwin: "BraveSoftware/Brave-Browser",
+            linux: "BraveSoftware/Brave-Browser",
+            win32: "BraveSoftware/Brave-Browser/User Data",
+        },
+        hasUserData: false,
+    },
+    edge: {
+        paths: {
+            darwin: "Microsoft Edge",
+            linux: "microsoft-edge",
+            win32: "Microsoft/Edge/User Data",
+        },
+        hasUserData: false,
+    },
+    arc: {
+        // Arc has no Linux/Windows build as of 2026-05.
+        paths: { darwin: "Arc" },
+        hasUserData: true,
+    },
+    dia: {
+        // Dia has macOS only at present.
+        paths: { darwin: "Dia" },
+        hasUserData: true,
+    },
+    atlas: {
+        // Atlas (OpenAI ChatGPT browser) macOS only at present.
+        paths: { darwin: "com.openai.atlas" },
+        hasUserData: true,
+    },
+};
+/**
+ * Resolve the user-data root for a browser on the current platform.
+ *
+ *   macOS    $HOME/Library/Application Support/<browser>
+ *   Linux    $HOME/.config/<browser>
+ *   Windows  %LOCALAPPDATA%/<browser>            (also honors $LOCALAPPDATA)
+ *
+ * Override the entire root via `UNICLI_BROWSER_HOME` for tests.
+ */
+function userDataRoot(browser, platform) {
+    const spec = BROWSERS[browser];
+    const rel = spec.paths[platform];
+    if (!rel) {
+        throw new ChromiumCookieError("browser_not_installed", `${browser} has no known path on ${platform}`, `Supported: ${Object.keys(spec.paths).join(", ")}.`);
+    }
+    const override = process.env.UNICLI_BROWSER_HOME;
+    let home;
+    if (override) {
+        home = override;
+    }
+    else if (platform === "darwin") {
+        home = join(homedir(), "Library", "Application Support");
+    }
+    else if (platform === "linux") {
+        home = join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"));
+    }
+    else {
+        // win32
+        home = process.env.LOCALAPPDATA ?? join(homedir(), "AppData", "Local");
+    }
+    const base = join(home, rel);
+    return spec.hasUserData ? join(base, "User Data") : base;
+}
+/**
+ * Enumerate available profiles for a browser. Returns the directory names
+ * (e.g. "Default", "Profile 1") that contain a Cookies file, sorted by
+ * Cookies-file mtime descending (most-recently-active first).
+ */
+export function listProfiles(browser) {
+    let platform;
+    try {
+        platform = currentPlatform();
+    }
+    catch {
+        return [];
+    }
+    const spec = BROWSERS[browser];
+    if (!spec.paths[platform])
+        return [];
+    const root = userDataRoot(browser, platform);
+    if (!existsSync(root))
+        return [];
+    let entries;
+    try {
+        entries = readdirSync(root);
+    }
+    catch {
+        return [];
+    }
+    const profiles = [];
+    for (const name of entries) {
+        const cookies = locateCookieFile(root, name);
+        if (!cookies)
+            continue;
+        let mtime = 0;
+        try {
+            mtime = statSync(cookies).mtimeMs;
+        }
+        catch {
+            // ignore — keep mtime = 0
+        }
+        profiles.push({ name, mtime });
+    }
+    profiles.sort((a, b) => b.mtime - a.mtime);
+    return profiles.map((p) => p.name);
+}
+/**
+ * Cookies live at `<profile>/Cookies` on older builds and
+ * `<profile>/Network/Cookies` on newer ones (Chromium M96+ moved it). We
+ * check `Network/` first because it is the current default and contains the
+ * fresher data when both are present.
+ */
+function locateCookieFile(root, profile) {
+    for (const candidate of [
+        join(root, profile, "Network", "Cookies"),
+        join(root, profile, "Cookies"),
+    ]) {
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+export function resolveCookieDb(browser, profile) {
+    const platform = currentPlatform();
+    const spec = BROWSERS[browser];
+    if (!spec.paths[platform]) {
+        throw new ChromiumCookieError("browser_not_installed", `${browser} is not supported on ${platform}`, `Supported on: ${Object.keys(spec.paths).join(", ")}.`);
+    }
+    const root = userDataRoot(browser, platform);
+    if (!existsSync(root)) {
+        throw new ChromiumCookieError("browser_not_installed", `${browser} not found at ${root}`, `Install ${browser} or pass --browser <other>.`);
+    }
+    const chosen = profile ?? listProfiles(browser)[0];
+    if (!chosen) {
+        throw new ChromiumCookieError("no_profile", `${browser} has no profile with a Cookies database under ${root}`, `Sign into ${browser} and visit the target site once.`);
+    }
+    const dbPath = locateCookieFile(root, chosen);
+    if (!dbPath) {
+        throw new ChromiumCookieError("no_profile", `profile "${chosen}" has no Cookies file under ${root}`, "Pass a different --profile (try listProfiles).");
+    }
+    return { dbPath, profile: chosen, userDataRoot: root, platform };
+}
+/* -------------------------------------------------------------------------- */
+/*  SQLite read (copy-then-read via system sqlite3)                           */
+/* -------------------------------------------------------------------------- */
+/** Resolve the sqlite3 binary, allowing PATH lookup on Linux/Windows. */
+function sqliteBinary() {
+    return process.env.UNICLI_SQLITE_BIN ?? "sqlite3";
+}
+/** Copy Cookies + WAL/SHM siblings to a tmpdir; return the tmp DB path. */
+function snapshotDb(srcDb) {
+    const tmp = mkdtempSync(join(tmpdir(), "unicli-cookies-"));
+    const dst = join(tmp, "Cookies");
+    copyFileSync(srcDb, dst);
+    for (const suffix of ["-wal", "-shm", "-journal"]) {
+        const sibling = `${srcDb}${suffix}`;
+        if (existsSync(sibling)) {
+            try {
+                copyFileSync(sibling, `${dst}${suffix}`);
+            }
+            catch {
+                // Sibling read is opportunistic.
+            }
+        }
+    }
+    return {
+        dbPath: dst,
+        cleanup: () => {
+            try {
+                rmSync(tmp, { recursive: true, force: true });
+            }
+            catch {
+                // best effort
+            }
+        },
+    };
+}
+/**
+ * Read cookie rows for a domain. Filters via host_key suffix so
+ * `.example.com`, `example.com`, and `sub.example.com` all match.
+ *
+ * Implementation: shell-out to `sqlite3` reading from stdin. Zero npm deps,
+ * zero native compile — `sqlite3` ships with macOS and is widely available
+ * on Linux distros and WSL; on Windows we look up via PATH (set
+ * `UNICLI_SQLITE_BIN` to override).
+ */
+function readRowsForDomain(dbPath, domain) {
+    if (!/^[a-zA-Z0-9.-]+$/.test(domain)) {
+        throw new ChromiumCookieError("sqlite_failed", `invalid domain: "${domain}"`, "Domain must contain only letters, digits, dots, and hyphens.");
+    }
+    // Per RFC 6265, a cookie set on `.bilibili.com` is sent to `api.bilibili.com`.
+    // So when an adapter declares `api.bilibili.com`, we must also accept rows
+    // whose host_key is the parent `bilibili.com` (with or without leading dot).
+    // Walk every ≥2-segment suffix; exclude bare TLD to avoid pulling unrelated
+    // domains. PSL edge cases (`co.uk`) are tolerable: matching `.co.uk` would
+    // be overbroad but in practice the cookies DB never stores such entries.
+    const parts = domain.split(".");
+    const candidates = [];
+    for (let i = 0; i <= parts.length - 2; i++) {
+        candidates.push(parts.slice(i).join("."));
+    }
+    const clauses = candidates
+        .flatMap((d) => {
+        const safe = d.replace(/'/g, "''");
+        return [`host_key = '${safe}'`, `host_key = '.${safe}'`];
+    })
+        .join(" OR ");
+    const sql = [
+        ".mode list",
+        ".separator |",
+        ".headers off",
+        `SELECT host_key, name, hex(encrypted_value), value, path, expires_utc, is_secure, is_httponly
+       FROM cookies
+       WHERE ${clauses};`,
+    ].join("\n");
+    let stdout;
+    try {
+        stdout = execFileSync(sqliteBinary(), ["-readonly", "-bail", `file:${dbPath}?mode=ro&immutable=1`], {
+            input: sql + "\n.quit\n",
+            encoding: "utf8",
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+    }
+    catch (err) {
+        throw new ChromiumCookieError("sqlite_failed", `sqlite3 read failed: ${err.message}`, "Ensure the sqlite3 binary is on PATH (set UNICLI_SQLITE_BIN to override).");
+    }
+    const rows = [];
+    for (const line of stdout.split("\n")) {
+        if (!line)
+            continue;
+        const parts = line.split("|");
+        if (parts.length < 8)
+            continue;
+        const [host, name, hex, plain, path, expires, isSecure, isHttpOnly] = parts;
+        rows.push({
+            host,
+            name,
+            encrypted: Buffer.from(hex, "hex"),
+            plain,
+            path,
+            expires: Number(expires) || 0,
+            isSecure: Number(isSecure) || 0,
+            isHttpOnly: Number(isHttpOnly) || 0,
+        });
+    }
+    return rows;
+}
+/* -------------------------------------------------------------------------- */
+/*  Public API                                                                */
+/* -------------------------------------------------------------------------- */
+/**
+ * Read all cookies for a domain from a browser's local DB.
+ * Returns full structured rows for callers that want secure/httpOnly metadata.
+ */
+export function readCookies(opts) {
+    const { dbPath, platform, userDataRoot: root, } = resolveCookieDb(opts.browser, opts.profile);
+    const secret = getEncryptionSecret(opts.browser, platform, KEYSTORE_SPECS[opts.browser], root);
+    const key = deriveKey(secret, platform);
+    const snap = snapshotDb(dbPath);
+    try {
+        const rows = readRowsForDomain(snap.dbPath, opts.domain);
+        return rows.map((r) => {
+            const value = r.encrypted.length > 0
+                ? decryptValue(r.encrypted, key, platform)
+                : r.plain;
+            return {
+                host: r.host,
+                name: r.name,
+                value,
+                path: r.path,
+                expires: r.expires,
+                secure: r.isSecure === 1,
+                httpOnly: r.isHttpOnly === 1,
+            };
+        });
+    }
+    finally {
+        snap.cleanup();
+    }
+}
+/**
+ * Convenience: read cookies for a domain and flatten to a name→value record,
+ * matching the shape that engine/cookies.ts already passes to fetch headers.
+ * Last-write-wins on duplicate names (later host_key entries override earlier).
+ */
+export function readCookiesAsRecord(opts) {
+    const out = {};
+    for (const c of readCookies(opts)) {
+        out[c.name] = c.value;
+    }
+    return out;
+}
+/** All known browser ids in priority order for auto-discovery. */
+export const BROWSER_IDS = [
+    "chrome",
+    "arc",
+    "dia",
+    "brave",
+    "edge",
+    "atlas",
+];
+/**
+ * Find any installed browser whose profile DB exists. Used by the auto path
+ * when the caller doesn't specify --browser. Returns [] if no Chromium
+ * browser is installed locally, or if the platform isn't supported.
+ */
+export function detectInstalledBrowsers() {
+    let platform;
+    try {
+        platform = currentPlatform();
+    }
+    catch {
+        return [];
+    }
+    return BROWSER_IDS.filter((b) => {
+        if (!BROWSERS[b].paths[platform])
+            return false;
+        return listProfiles(b).length > 0;
+    });
+}
+//# sourceMappingURL=chromium-cookies.js.map

package/dist/engine/chromium-cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromium-cookies.js","sourceRoot":"","sources":["../../src/engine/chromium-cookies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,WAAW,EACX,WAAW,EACX,MAAM,EACN,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EACL,mBAAmB,GAIpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,cAAc,EACd,eAAe,EACf,YAAY,EACZ,SAAS,EACT,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,mBAAmB,GAIpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,YAAY,EACZ,SAAS,GAEV,MAAM,gCAAgC,CAAC;AAaxC,MAAM,QAAQ,GAAuC;IACnD,MAAM,EAAE;QACN,KAAK,EAAE;YACL,MAAM,EAAE,eAAe;YACvB,KAAK,EAAE,eAAe;YACtB,KAAK,EAAE,yBAAyB;SACjC;QACD,4EAA4E;QAC5E,WAAW,EAAE,KAAK;KACnB;IACD,KAAK,EAAE;QACL,KAAK,EAAE;YACL,MAAM,EAAE,6BAA6B;YACrC,KAAK,EAAE,6BAA6B;YACpC,KAAK,EAAE,uCAAuC;SAC/C;QACD,WAAW,EAAE,KAAK;KACnB;IACD,IAAI,EAAE;QACJ,KAAK,EAAE;YACL,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,0BAA0B;SAClC;QACD,WAAW,EAAE,KAAK;KACnB;IACD,GAAG,EAAE;QACH,gDAAgD;QAChD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QACxB,WAAW,EAAE,IAAI;KAClB;IACD,GAAG,EAAE;QACH,iCAAiC;QACjC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QACxB,WAAW,EAAE,IAAI;KAClB;IACD,KAAK,EAAE;QACL,wDAAwD;QACxD,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACrC,WAAW,EAAE,IAAI;KAClB;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,OAAkB,EAAE,QAAkB;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,GAAG,OAAO,yBAAyB,QAAQ,EAAE,EAC7C,cAAc,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,IAAI,IAAY,CAAC;IACjB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,QAAQ;QACR,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAkB;IAC7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,eAAe,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,KAAK,MAAM,SAAS,IAAI;QACtB,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;KAC/B,EAAE,CAAC;QACF,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAkB,EAClB,OAAgB;IAOhB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,GAAG,OAAO,wBAAwB,QAAQ,EAAE,EAC5C,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,GAAG,OAAO,iBAAiB,IAAI,EAAE,EACjC,WAAW,OAAO,6BAA6B,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,GAAG,OAAO,iDAAiD,IAAI,EAAE,EACjE,aAAa,OAAO,kCAAkC,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,YAAY,MAAM,+BAA+B,IAAI,EAAE,EACvD,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,yEAAyE;AACzE,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,YAAY,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACvD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,oBAAoB,MAAM,GAAG,EAC7B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,UAAU;SACvB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,eAAe,IAAI,GAAG,EAAE,gBAAgB,IAAI,GAAG,CAAC,CAAC;IAC3D,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,MAAM,GAAG,GAAG;QACV,YAAY;QACZ,cAAc;QACd,cAAc;QACd;;eAEW,OAAO,GAAG;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CACnB,YAAY,EAAE,EACd,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,MAAM,sBAAsB,CAAC,EAC5D;YACE,KAAK,EAAE,GAAG,GAAG,WAAW;YACxB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,wBAAyB,GAAa,CAAC,OAAO,EAAE,EAChD,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC;YACR,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;YAClC,KAAK;YACL,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAiB;IAC3C,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,YAAY,EAAE,IAAI,GACnB,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,mBAAmB,CAChC,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,IAAI,CACL,CAAC;IACF,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,KAAK,GACT,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC;gBAC1C,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;gBACxB,QAAQ,EAAE,CAAC,CAAC,UAAU,KAAK,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,QAAQ;IACR,KAAK;IACL,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;CACC,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,eAAe,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/engine/cookies.d.ts

@@ -26,12 +26,20 @@ export declare function validateCookies(site: string, requiredKeys: string[]): {
  */
 export declare function getCookieDir(): string;
 /**
- * Load cookies with CDP fallback.
- * 1. Try disk (fast, synchronous) — ~/.unicli/cookies/<site>.json
- * 2. Try CDP extraction (connects to Chrome debug port)
- * 3. Return null if neither available
+ * Load cookies with multi-source fallback.
  *
- * When CDP extraction succeeds, cookies are saved to disk for future use.
+ * Precedence (each falls through silently to the next on miss):
+ *   1. ~/.unicli/cookies/<site>.json       — explicit user import
+ *   2. browser local DB (Chrome/Arc/Dia/…) — direct SQLite read, no browser launch
+ *   3. CDP                                  — connects to Chrome debug port (legacy)
+ *
+ * The browser disk source is the new default for `strategy: cookie` adapters:
+ * it works whether the browser is open or closed, never opens a new tab, and
+ * needs neither extension nor daemon. Successful reads are persisted to
+ * ~/.unicli/cookies for offline reuse.
+ *
+ * Set `UNICLI_COOKIE_NO_BROWSER=1` to skip the browser-disk step (e.g., in CI
+ * where the macOS Keychain prompt would block).
  */
 export declare function loadCookiesWithCDP(site: string, domain?: string): Promise<Record<string, string> | null>;
 //# sourceMappingURL=cookies.d.ts.map

package/dist/engine/cookies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAmBvE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAI1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GACrB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAMvC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CA2BxC"}
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAmBvE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAI1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GACrB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAMvC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAwCxC"}

package/dist/engine/cookies.js

@@ -61,28 +61,48 @@ export function getCookieDir() {
     return cookieDir();
 }
 /**
- * Load cookies with CDP fallback.
- * 1. Try disk (fast, synchronous) — ~/.unicli/cookies/<site>.json
- * 2. Try CDP extraction (connects to Chrome debug port)
- * 3. Return null if neither available
+ * Load cookies with multi-source fallback.
  *
- * When CDP extraction succeeds, cookies are saved to disk for future use.
+ * Precedence (each falls through silently to the next on miss):
+ *   1. ~/.unicli/cookies/<site>.json       — explicit user import
+ *   2. browser local DB (Chrome/Arc/Dia/…) — direct SQLite read, no browser launch
+ *   3. CDP                                  — connects to Chrome debug port (legacy)
+ *
+ * The browser disk source is the new default for `strategy: cookie` adapters:
+ * it works whether the browser is open or closed, never opens a new tab, and
+ * needs neither extension nor daemon. Successful reads are persisted to
+ * ~/.unicli/cookies for offline reuse.
+ *
+ * Set `UNICLI_COOKIE_NO_BROWSER=1` to skip the browser-disk step (e.g., in CI
+ * where the macOS Keychain prompt would block).
  */
 export async function loadCookiesWithCDP(site, domain) {
-    // 1. Try disk first (existing behavior)
+    // 1. ~/.unicli/cookies first
     const diskCookies = loadCookies(site);
     if (diskCookies)
         return diskCookies;
-    // 2. Try CDP extraction
+    // Resolve the cookie domain once for both browser and CDP paths.
     let cookieDomain = domain ?? site.replace(/_/g, ".");
-    // If no TLD in domain, append .com as default (covers bilibili, zhihu, weibo, etc.)
     if (!cookieDomain.includes(".")) {
         cookieDomain = `${cookieDomain}.com`;
     }
+    // 2. Direct browser disk read (no launch, no CDP, no extension).
+    if (process.env.UNICLI_COOKIE_NO_BROWSER !== "1") {
+        const browserCookies = await loadFromInstalledBrowser(cookieDomain);
+        if (browserCookies && Object.keys(browserCookies).length > 0) {
+            try {
+                saveCookiesToDisk(site, browserCookies);
+            }
+            catch {
+                // Non-fatal — caller still gets the cookies.
+            }
+            return browserCookies;
+        }
+    }
+    // 3. CDP fallback for users running Chrome with --remote-debugging-port.
     try {
         const cdpCookies = await extractCookiesViaCDP(cookieDomain);
         if (Object.keys(cdpCookies).length > 0) {
-            // Save to disk for future use (site name is already validated by saveCookiesToDisk)
             try {
                 saveCookiesToDisk(site, cdpCookies);
             }
@@ -97,4 +117,30 @@ export async function loadCookiesWithCDP(site, domain) {
     }
     return null;
 }
+/**
+ * Try each installed Chromium browser in priority order until one yields
+ * cookies for the domain. Failures (browser not installed, Keychain denied,
+ * unsupported encryption) fall through silently — the next source handles it.
+ */
+async function loadFromInstalledBrowser(domain) {
+    let mod;
+    try {
+        mod = await import("./chromium-cookies.js");
+    }
+    catch {
+        return null;
+    }
+    const installed = mod.detectInstalledBrowsers();
+    for (const browser of installed) {
+        try {
+            const record = mod.readCookiesAsRecord({ browser, domain });
+            if (Object.keys(record).length > 0)
+                return record;
+        }
+        catch {
+            // Move on to the next browser.
+        }
+    }
+    return null;
+}
 //# sourceMappingURL=cookies.js.map

package/dist/engine/cookies.js.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,WAAW,IAAI,iBAAiB,GACjC,MAAM,uBAAuB,CAAC;AAE/B,SAAS,SAAS;IAChB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAgC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,YAAsB;IAEtB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAE7D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,MAAe;IAEf,wCAAwC;IACxC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,wBAAwB;IACxB,IAAI,YAAY,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,oFAAoF;IACpF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,YAAY,GAAG,GAAG,YAAY,MAAM,CAAC;IACvC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,oFAAoF;YACpF,IAAI,CAAC;gBACH,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,WAAW,IAAI,iBAAiB,GACjC,MAAM,uBAAuB,CAAC;AAE/B,SAAS,SAAS;IAChB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAgC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,YAAsB;IAEtB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAE7D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,MAAe;IAEf,6BAA6B;IAC7B,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,iEAAiE;IACjE,IAAI,YAAY,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,YAAY,GAAG,GAAG,YAAY,MAAM,CAAC;IACvC,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAAE,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACpE,IAAI,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YACD,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,wBAAwB,CACrC,MAAc;IAEd,IAAI,GAA2C,CAAC;IAChD,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,uBAAuB,EAAE,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/engine/executor.d.ts

@@ -19,7 +19,16 @@ export { assertSafeRequestUrl } from "./ssrf.js";
 export { getBus, buildTransportCtx, _resetTransportBusForTests };
 export interface PipelineOptions {
     site?: string;
+    command?: string;
     strategy?: string;
+    /**
+     * Cookie domain declared by the adapter (or the command override). Drives
+     * the browser-cookie source — without this the loader has to guess
+     * `${site}.com`, which is wrong for sites like notion (`.notion.so`),
+     * weixin (`mp.weixin.qq.com`), perplexity (`.perplexity.ai`), twitch
+     * (`.twitch.tv`), linux-do (`linux.do`), etc.
+     */
+    domain?: string;
     /**
      * Kernel surface that dispatched the pipeline. When provided, becomes
      * `${{ surface }}` in YAML templates. Undefined for legacy callers
@@ -48,6 +57,10 @@ export type PipelineContext = {
     surface?: "cli" | "mcp" | "acp" | "bench" | "hub";
     /** Kernel trace ID. Mirrors `PipelineOptions.trace_id`. */
     trace_id?: string;
+    /** Adapter site that owns this pipeline, when routed through the kernel. */
+    site?: string;
+    /** Adapter command that owns this pipeline, when routed through the kernel. */
+    command?: string;
 };
 /** Structured pipeline error — designed for AI agent consumption. */
 export declare class PipelineError extends Error {
@@ -55,7 +68,7 @@ export declare class PipelineError extends Error {
         step: number;
         action: string;
         config: unknown;
-        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "network_error" | "timeout" | "expression_error" | "assertion_failed" | "stale_ref" | "ambiguous" | "ref_not_found";
+        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "network_error" | "timeout" | "expression_error" | "assertion_failed" | "permission_denied" | "stale_ref" | "ambiguous" | "ref_not_found";
         url?: string;
         statusCode?: number;
         responsePreview?: string;
@@ -67,7 +80,7 @@ export declare class PipelineError extends Error {
         step: number;
         action: string;
         config: unknown;
-        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "network_error" | "timeout" | "expression_error" | "assertion_failed" | "stale_ref" | "ambiguous" | "ref_not_found";
+        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "network_error" | "timeout" | "expression_error" | "assertion_failed" | "permission_denied" | "stale_ref" | "ambiguous" | "ref_not_found";
         url?: string;
         statusCode?: number;
         responsePreview?: string;
@@ -81,7 +94,7 @@ export declare class PipelineError extends Error {
         step: number;
         action: string;
         config: unknown;
-        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "network_error" | "timeout" | "expression_error" | "assertion_failed" | "stale_ref" | "ambiguous" | "ref_not_found";
+        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "network_error" | "timeout" | "expression_error" | "assertion_failed" | "permission_denied" | "stale_ref" | "ambiguous" | "ref_not_found";
         url?: string;
         statusCode?: number;
         responsePreview?: string;

package/dist/engine/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAStD,OAAO,EACL,MAAM,EACN,iBAAiB,EACjB,0BAA0B,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,gEAAgE;IAChE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;IAClD,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qEAAqE;AACrE,qBAAa,aAAc,SAAQ,KAAK;aAGpB,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,EACL,YAAY,GACZ,eAAe,GACf,cAAc,GACd,aAAa,GACb,eAAe,GACf,SAAS,GACT,kBAAkB,GAClB,kBAAkB,GAClB,WAAW,GACX,WAAW,GACX,eAAe,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB;gBAvBD,OAAO,EAAE,MAAM,EACC,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,EACL,YAAY,GACZ,eAAe,GACf,cAAc,GACd,aAAa,GACb,eAAe,GACf,SAAS,GACT,kBAAkB,GAClB,kBAAkB,GAClB,WAAW,GACX,WAAW,GACX,eAAe,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB;IAMH,WAAW,CAAC,WAAW,CAAC,EAAE,MAAM;;;cA3BtB,MAAM;gBACJ,MAAM;gBACN,OAAO;mBAEX,YAAY,GACZ,eAAe,GACf,cAAc,GACd,aAAa,GACb,eAAe,GACf,SAAS,GACT,kBAAkB,GAClB,kBAAkB,GAClB,WAAW,GACX,WAAW,GACX,eAAe;cACb,MAAM;qBACC,MAAM;0BACD,MAAM;oBACZ,MAAM;;;;CAkBvB;AAmBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAMpE;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,YAAY,EACvB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAoBD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,YAAY,EACjB,IAAI,CAAC,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,OAAO,EAAE,CAAC,CAyJpB"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAatD,OAAO,EACL,MAAM,EACN,iBAAiB,EACjB,0BAA0B,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,gEAAgE;IAChE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;IAClD,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,qEAAqE;AACrE,qBAAa,aAAc,SAAQ,KAAK;aAGpB,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,EACL,YAAY,GACZ,eAAe,GACf,cAAc,GACd,aAAa,GACb,eAAe,GACf,SAAS,GACT,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,WAAW,GACX,WAAW,GACX,eAAe,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB;gBAxBD,OAAO,EAAE,MAAM,EACC,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,EACL,YAAY,GACZ,eAAe,GACf,cAAc,GACd,aAAa,GACb,eAAe,GACf,SAAS,GACT,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,WAAW,GACX,WAAW,GACX,eAAe,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB;IAMH,WAAW,CAAC,WAAW,CAAC,EAAE,MAAM;;;cA5BtB,MAAM;gBACJ,MAAM;gBACN,OAAO;mBAEX,YAAY,GACZ,eAAe,GACf,cAAc,GACd,aAAa,GACb,eAAe,GACf,SAAS,GACT,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,WAAW,GACX,WAAW,GACX,eAAe;cACb,MAAM;qBACC,MAAM;0BACD,MAAM;oBACZ,MAAM;;;;CAkBvB;AAmBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAMpE;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,YAAY,EACvB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,CAAC,CAkC1B;AAsBD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,YAAY,EACjB,IAAI,CAAC,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,OAAO,EAAE,CAAC,CA2JpB"}

package/dist/engine/executor.js

@@ -15,6 +15,7 @@ import { isTargetError } from "../browser/target-errors.js";
 import { formatCookieHeader, loadCookiesWithCDP } from "./cookies.js";
 import { CUA_STEP_HANDLERS } from "./steps/cua.js";
 import { DESKTOP_AX_STEP_HANDLERS, } from "./steps/desktop-ax.js";
+import { DESKTOP_SIDECAR_STEP_HANDLERS, isDesktopSidecarStep, } from "./steps/desktop-sidecar.js";
 import { getStep } from "./step-registry.js";
 import { getBus, buildTransportCtx, _resetTransportBusForTests, } from "../transport/bus.js";
 // Side-effect import: every per-step module self-registers on load.
@@ -67,7 +68,9 @@ export async function executeStep(ctx, action, config, stepIndex, fullStep, dept
     const handler = getStep(action);
     if (handler)
         return handler(ctx, config, stepIndex, fullStep, depth);
-    if (isCuaStep(action) || isDesktopAxStep(action)) {
+    if (isCuaStep(action) ||
+        isDesktopAxStep(action) ||
+        isDesktopSidecarStep(action)) {
         return dispatchBusStep(ctx, action, config);
     }
     const { getCustomStep } = await import("../plugin/step-registry.js");
@@ -92,7 +95,9 @@ async function dispatchBusStep(ctx, action, config) {
     const busCtx = { bus: getBus(), transportCtx: buildTransportCtx(ctx) };
     const handlerFn = isCuaStep(action)
         ? CUA_STEP_HANDLERS[action]
-        : DESKTOP_AX_STEP_HANDLERS[action];
+        : isDesktopSidecarStep(action)
+            ? DESKTOP_SIDECAR_STEP_HANDLERS[action]
+            : DESKTOP_AX_STEP_HANDLERS[action];
     const envelope = await handlerFn(busCtx, params);
     ctx.vars["lastEnvelope"] = envelope;
     return { ...ctx, data: envelope.ok ? envelope.data : envelope };
@@ -102,7 +107,7 @@ export async function runPipeline(steps, bag, base, options) {
     let cookieHeader;
     if ((options?.strategy === "cookie" || options?.strategy === "header") &&
         options?.site) {
-        const cookies = await loadCookiesWithCDP(options.site);
+        const cookies = await loadCookiesWithCDP(options.site, options.domain);
         if (!cookies) {
             throw new PipelineError(`No cookies found for "${options.site}". Run: unicli auth setup ${options.site}`, {
                 step: -1,
@@ -125,6 +130,8 @@ export async function runPipeline(steps, bag, base, options) {
         source: bag.source,
         surface: options?.surface,
         trace_id: options?.trace_id,
+        site: options?.site,
+        command: options?.command,
     };
     let tempDir;
     try {