@zenalexa/unicli 0.217.3 → 0.218.1

package/dist/engine/chromium-cookies-types.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Shared types for the chromium-cookies module. Split out to break a
+ * circular import between `chromium-cookies.ts` (orchestration) and
+ * `chromium-cookies-platform.ts` (per-platform crypto + keystore).
+ */
+export type BrowserId = "chrome" | "brave" | "edge" | "arc" | "dia" | "atlas";
+export interface CookieRow {
+    host: string;
+    name: string;
+    value: string;
+    path: string;
+    expires: number;
+    secure: boolean;
+    httpOnly: boolean;
+}
+export interface ReadOptions {
+    browser: BrowserId;
+    domain: string;
+    profile?: string;
+}
+export declare class ChromiumCookieError extends Error {
+    readonly code: "browser_not_installed" | "no_profile" | "keychain_denied" | "encryption_unsupported" | "sqlite_failed" | "decrypt_failed" | "platform_unsupported";
+    readonly suggestion?: string | undefined;
+    constructor(code: "browser_not_installed" | "no_profile" | "keychain_denied" | "encryption_unsupported" | "sqlite_failed" | "decrypt_failed" | "platform_unsupported", message: string, suggestion?: string | undefined);
+}
+//# sourceMappingURL=chromium-cookies-types.d.ts.map

package/dist/engine/chromium-cookies-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromium-cookies-types.d.ts","sourceRoot":"","sources":["../../src/engine/chromium-cookies-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAChB,uBAAuB,GACvB,YAAY,GACZ,iBAAiB,GACjB,wBAAwB,GACxB,eAAe,GACf,gBAAgB,GAChB,sBAAsB;aAEV,UAAU,CAAC,EAAE,MAAM;gBATnB,IAAI,EAChB,uBAAuB,GACvB,YAAY,GACZ,iBAAiB,GACjB,wBAAwB,GACxB,eAAe,GACf,gBAAgB,GAChB,sBAAsB,EAC1B,OAAO,EAAE,MAAM,EACC,UAAU,CAAC,EAAE,MAAM,YAAA;CAKtC"}

package/dist/engine/chromium-cookies-types.js

@@ -0,0 +1,16 @@
+/**
+ * Shared types for the chromium-cookies module. Split out to break a
+ * circular import between `chromium-cookies.ts` (orchestration) and
+ * `chromium-cookies-platform.ts` (per-platform crypto + keystore).
+ */
+export class ChromiumCookieError extends Error {
+    code;
+    suggestion;
+    constructor(code, message, suggestion) {
+        super(message);
+        this.code = code;
+        this.suggestion = suggestion;
+        this.name = "ChromiumCookieError";
+    }
+}
+//# sourceMappingURL=chromium-cookies-types.js.map

package/dist/engine/chromium-cookies-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromium-cookies-types.js","sourceRoot":"","sources":["../../src/engine/chromium-cookies-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAE1B;IASA;IAVlB,YACkB,IAOU,EAC1B,OAAe,EACC,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QAXC,SAAI,GAAJ,IAAI,CAOM;QAEV,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}

package/dist/engine/chromium-cookies.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Direct Chromium cookie reader (macOS / Linux / Windows).
+ *
+ * Reads encrypted cookies from a browser's local SQLite DB and decrypts them
+ * with the browser's platform-native key store. No CDP, no extension, no
+ * browser launch — works whether the browser is open or closed.
+ *
+ *   macOS    keychain `security` CLI → AES-128-CBC + 32-byte SHA256 prefix
+ *   Linux    libsecret `secret-tool` (peanuts fallback) → AES-128-CBC, no prefix, PBKDF2 iter=1
+ *   Windows  Local State + DPAPI → AES-256-GCM + 32-byte SHA256 prefix
+ *            v20 cookies (Chrome 127+ App-Bound) surface as
+ *            encryption_unsupported with a CDP-fallback suggestion
+ *
+ * SQLite is read by copy-then-open via the system `sqlite3` binary so that
+ * an open browser cannot block the read; WAL/SHM siblings are copied too.
+ *
+ * Tests at tests/unit/chromium-cookies.test.ts cover the pure path
+ * (deriveKey vector, decrypt round-trips per platform, profile picker,
+ * resolveCookieDb error codes).
+ */
+import { type BrowserId, type CookieRow, type ReadOptions } from "./chromium-cookies-types.js";
+import { type Platform } from "./chromium-cookies-platform.js";
+export { ChromiumCookieError, type BrowserId, type CookieRow, type ReadOptions, } from "./chromium-cookies-types.js";
+export { decryptValue, deriveKey, type Platform, } from "./chromium-cookies-platform.js";
+/**
+ * Enumerate available profiles for a browser. Returns the directory names
+ * (e.g. "Default", "Profile 1") that contain a Cookies file, sorted by
+ * Cookies-file mtime descending (most-recently-active first).
+ */
+export declare function listProfiles(browser: BrowserId): string[];
+export declare function resolveCookieDb(browser: BrowserId, profile?: string): {
+    dbPath: string;
+    profile: string;
+    userDataRoot: string;
+    platform: Platform;
+};
+/**
+ * Read all cookies for a domain from a browser's local DB.
+ * Returns full structured rows for callers that want secure/httpOnly metadata.
+ */
+export declare function readCookies(opts: ReadOptions): CookieRow[];
+/**
+ * Convenience: read cookies for a domain and flatten to a name→value record,
+ * matching the shape that engine/cookies.ts already passes to fetch headers.
+ * Last-write-wins on duplicate names (later host_key entries override earlier).
+ */
+export declare function readCookiesAsRecord(opts: ReadOptions): Record<string, string>;
+/** All known browser ids in priority order for auto-discovery. */
+export declare const BROWSER_IDS: readonly BrowserId[];
+/**
+ * Find any installed browser whose profile DB exists. Used by the auto path
+ * when the caller doesn't specify --browser. Returns [] if no Chromium
+ * browser is installed locally, or if the platform isn't supported.
+ */
+export declare function detectInstalledBrowsers(): BrowserId[];
+//# sourceMappingURL=chromium-cookies.d.ts.map

package/dist/engine/chromium-cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromium-cookies.d.ts","sourceRoot":"","sources":["../../src/engine/chromium-cookies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAcH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,WAAW,EACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAML,KAAK,QAAQ,EACd,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,WAAW,GACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,KAAK,QAAQ,GACd,MAAM,gCAAgC,CAAC;AA6FxC;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,EAAE,CA+BzD;AAkBD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,MAAM,GACf;IACD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAmCA;AAuID;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,EAAE,CAmC1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM7E;AAED,kEAAkE;AAClE,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAOlC,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,SAAS,EAAE,CAWrD"}

package/dist/engine/chromium-cookies.js

@@ -0,0 +1,361 @@
+/**
+ * Direct Chromium cookie reader (macOS / Linux / Windows).
+ *
+ * Reads encrypted cookies from a browser's local SQLite DB and decrypts them
+ * with the browser's platform-native key store. No CDP, no extension, no
+ * browser launch — works whether the browser is open or closed.
+ *
+ *   macOS    keychain `security` CLI → AES-128-CBC + 32-byte SHA256 prefix
+ *   Linux    libsecret `secret-tool` (peanuts fallback) → AES-128-CBC, no prefix, PBKDF2 iter=1
+ *   Windows  Local State + DPAPI → AES-256-GCM + 32-byte SHA256 prefix
+ *            v20 cookies (Chrome 127+ App-Bound) surface as
+ *            encryption_unsupported with a CDP-fallback suggestion
+ *
+ * SQLite is read by copy-then-open via the system `sqlite3` binary so that
+ * an open browser cannot block the read; WAL/SHM siblings are copied too.
+ *
+ * Tests at tests/unit/chromium-cookies.test.ts cover the pure path
+ * (deriveKey vector, decrypt round-trips per platform, profile picker,
+ * resolveCookieDb error codes).
+ */
+import { copyFileSync, existsSync, mkdtempSync, readdirSync, rmSync, statSync, } from "node:fs";
+import { homedir, tmpdir } from "node:os";
+import { join } from "node:path";
+import { execFileSync } from "node:child_process";
+import { ChromiumCookieError, } from "./chromium-cookies-types.js";
+import { KEYSTORE_SPECS, currentPlatform, decryptValue, deriveKey, getEncryptionSecret, } from "./chromium-cookies-platform.js";
+export { ChromiumCookieError, } from "./chromium-cookies-types.js";
+export { decryptValue, deriveKey, } from "./chromium-cookies-platform.js";
+const BROWSERS = {
+    chrome: {
+        paths: {
+            darwin: "Google/Chrome",
+            linux: "google-chrome",
+            win32: "Google/Chrome/User Data",
+        },
+        // macOS: no extra User Data segment; Linux: same; Windows: already in path.
+        hasUserData: false,
+    },
+    brave: {
+        paths: {
+            darwin: "BraveSoftware/Brave-Browser",
+            linux: "BraveSoftware/Brave-Browser",
+            win32: "BraveSoftware/Brave-Browser/User Data",
+        },
+        hasUserData: false,
+    },
+    edge: {
+        paths: {
+            darwin: "Microsoft Edge",
+            linux: "microsoft-edge",
+            win32: "Microsoft/Edge/User Data",
+        },
+        hasUserData: false,
+    },
+    arc: {
+        // Arc has no Linux/Windows build as of 2026-05.
+        paths: { darwin: "Arc" },
+        hasUserData: true,
+    },
+    dia: {
+        // Dia has macOS only at present.
+        paths: { darwin: "Dia" },
+        hasUserData: true,
+    },
+    atlas: {
+        // Atlas (OpenAI ChatGPT browser) macOS only at present.
+        paths: { darwin: "com.openai.atlas" },
+        hasUserData: true,
+    },
+};
+/**
+ * Resolve the user-data root for a browser on the current platform.
+ *
+ *   macOS    $HOME/Library/Application Support/<browser>
+ *   Linux    $HOME/.config/<browser>
+ *   Windows  %LOCALAPPDATA%/<browser>            (also honors $LOCALAPPDATA)
+ *
+ * Override the entire root via `UNICLI_BROWSER_HOME` for tests.
+ */
+function userDataRoot(browser, platform) {
+    const spec = BROWSERS[browser];
+    const rel = spec.paths[platform];
+    if (!rel) {
+        throw new ChromiumCookieError("browser_not_installed", `${browser} has no known path on ${platform}`, `Supported: ${Object.keys(spec.paths).join(", ")}.`);
+    }
+    const override = process.env.UNICLI_BROWSER_HOME;
+    let home;
+    if (override) {
+        home = override;
+    }
+    else if (platform === "darwin") {
+        home = join(homedir(), "Library", "Application Support");
+    }
+    else if (platform === "linux") {
+        home = join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"));
+    }
+    else {
+        // win32
+        home = process.env.LOCALAPPDATA ?? join(homedir(), "AppData", "Local");
+    }
+    const base = join(home, rel);
+    return spec.hasUserData ? join(base, "User Data") : base;
+}
+/**
+ * Enumerate available profiles for a browser. Returns the directory names
+ * (e.g. "Default", "Profile 1") that contain a Cookies file, sorted by
+ * Cookies-file mtime descending (most-recently-active first).
+ */
+export function listProfiles(browser) {
+    let platform;
+    try {
+        platform = currentPlatform();
+    }
+    catch {
+        return [];
+    }
+    const spec = BROWSERS[browser];
+    if (!spec.paths[platform])
+        return [];
+    const root = userDataRoot(browser, platform);
+    if (!existsSync(root))
+        return [];
+    let entries;
+    try {
+        entries = readdirSync(root);
+    }
+    catch {
+        return [];
+    }
+    const profiles = [];
+    for (const name of entries) {
+        const cookies = locateCookieFile(root, name);
+        if (!cookies)
+            continue;
+        let mtime = 0;
+        try {
+            mtime = statSync(cookies).mtimeMs;
+        }
+        catch {
+            // ignore — keep mtime = 0
+        }
+        profiles.push({ name, mtime });
+    }
+    profiles.sort((a, b) => b.mtime - a.mtime);
+    return profiles.map((p) => p.name);
+}
+/**
+ * Cookies live at `<profile>/Cookies` on older builds and
+ * `<profile>/Network/Cookies` on newer ones (Chromium M96+ moved it). We
+ * check `Network/` first because it is the current default and contains the
+ * fresher data when both are present.
+ */
+function locateCookieFile(root, profile) {
+    for (const candidate of [
+        join(root, profile, "Network", "Cookies"),
+        join(root, profile, "Cookies"),
+    ]) {
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+export function resolveCookieDb(browser, profile) {
+    const platform = currentPlatform();
+    const spec = BROWSERS[browser];
+    if (!spec.paths[platform]) {
+        throw new ChromiumCookieError("browser_not_installed", `${browser} is not supported on ${platform}`, `Supported on: ${Object.keys(spec.paths).join(", ")}.`);
+    }
+    const root = userDataRoot(browser, platform);
+    if (!existsSync(root)) {
+        throw new ChromiumCookieError("browser_not_installed", `${browser} not found at ${root}`, `Install ${browser} or pass --browser <other>.`);
+    }
+    const chosen = profile ?? listProfiles(browser)[0];
+    if (!chosen) {
+        throw new ChromiumCookieError("no_profile", `${browser} has no profile with a Cookies database under ${root}`, `Sign into ${browser} and visit the target site once.`);
+    }
+    const dbPath = locateCookieFile(root, chosen);
+    if (!dbPath) {
+        throw new ChromiumCookieError("no_profile", `profile "${chosen}" has no Cookies file under ${root}`, "Pass a different --profile (try listProfiles).");
+    }
+    return { dbPath, profile: chosen, userDataRoot: root, platform };
+}
+/* -------------------------------------------------------------------------- */
+/*  SQLite read (copy-then-read via system sqlite3)                           */
+/* -------------------------------------------------------------------------- */
+/** Resolve the sqlite3 binary, allowing PATH lookup on Linux/Windows. */
+function sqliteBinary() {
+    return process.env.UNICLI_SQLITE_BIN ?? "sqlite3";
+}
+/** Copy Cookies + WAL/SHM siblings to a tmpdir; return the tmp DB path. */
+function snapshotDb(srcDb) {
+    const tmp = mkdtempSync(join(tmpdir(), "unicli-cookies-"));
+    const dst = join(tmp, "Cookies");
+    copyFileSync(srcDb, dst);
+    for (const suffix of ["-wal", "-shm", "-journal"]) {
+        const sibling = `${srcDb}${suffix}`;
+        if (existsSync(sibling)) {
+            try {
+                copyFileSync(sibling, `${dst}${suffix}`);
+            }
+            catch {
+                // Sibling read is opportunistic.
+            }
+        }
+    }
+    return {
+        dbPath: dst,
+        cleanup: () => {
+            try {
+                rmSync(tmp, { recursive: true, force: true });
+            }
+            catch {
+                // best effort
+            }
+        },
+    };
+}
+/**
+ * Read cookie rows for a domain. Filters via host_key suffix so
+ * `.example.com`, `example.com`, and `sub.example.com` all match.
+ *
+ * Implementation: shell-out to `sqlite3` reading from stdin. Zero npm deps,
+ * zero native compile — `sqlite3` ships with macOS and is widely available
+ * on Linux distros and WSL; on Windows we look up via PATH (set
+ * `UNICLI_SQLITE_BIN` to override).
+ */
+function readRowsForDomain(dbPath, domain) {
+    if (!/^[a-zA-Z0-9.-]+$/.test(domain)) {
+        throw new ChromiumCookieError("sqlite_failed", `invalid domain: "${domain}"`, "Domain must contain only letters, digits, dots, and hyphens.");
+    }
+    // Per RFC 6265, a cookie set on `.bilibili.com` is sent to `api.bilibili.com`.
+    // So when an adapter declares `api.bilibili.com`, we must also accept rows
+    // whose host_key is the parent `bilibili.com` (with or without leading dot).
+    // Walk every ≥2-segment suffix; exclude bare TLD to avoid pulling unrelated
+    // domains. PSL edge cases (`co.uk`) are tolerable: matching `.co.uk` would
+    // be overbroad but in practice the cookies DB never stores such entries.
+    const parts = domain.split(".");
+    const candidates = [];
+    for (let i = 0; i <= parts.length - 2; i++) {
+        candidates.push(parts.slice(i).join("."));
+    }
+    const clauses = candidates
+        .flatMap((d) => {
+        const safe = d.replace(/'/g, "''");
+        return [`host_key = '${safe}'`, `host_key = '.${safe}'`];
+    })
+        .join(" OR ");
+    const sql = [
+        ".mode list",
+        ".separator |",
+        ".headers off",
+        `SELECT host_key, name, hex(encrypted_value), value, path, expires_utc, is_secure, is_httponly
+       FROM cookies
+       WHERE ${clauses};`,
+    ].join("\n");
+    let stdout;
+    try {
+        stdout = execFileSync(sqliteBinary(), ["-readonly", "-bail", `file:${dbPath}?mode=ro&immutable=1`], {
+            input: sql + "\n.quit\n",
+            encoding: "utf8",
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+    }
+    catch (err) {
+        throw new ChromiumCookieError("sqlite_failed", `sqlite3 read failed: ${err.message}`, "Ensure the sqlite3 binary is on PATH (set UNICLI_SQLITE_BIN to override).");
+    }
+    const rows = [];
+    for (const line of stdout.split("\n")) {
+        if (!line)
+            continue;
+        const parts = line.split("|");
+        if (parts.length < 8)
+            continue;
+        const [host, name, hex, plain, path, expires, isSecure, isHttpOnly] = parts;
+        rows.push({
+            host,
+            name,
+            encrypted: Buffer.from(hex, "hex"),
+            plain,
+            path,
+            expires: Number(expires) || 0,
+            isSecure: Number(isSecure) || 0,
+            isHttpOnly: Number(isHttpOnly) || 0,
+        });
+    }
+    return rows;
+}
+/* -------------------------------------------------------------------------- */
+/*  Public API                                                                */
+/* -------------------------------------------------------------------------- */
+/**
+ * Read all cookies for a domain from a browser's local DB.
+ * Returns full structured rows for callers that want secure/httpOnly metadata.
+ */
+export function readCookies(opts) {
+    const { dbPath, platform, userDataRoot: root, } = resolveCookieDb(opts.browser, opts.profile);
+    const secret = getEncryptionSecret(opts.browser, platform, KEYSTORE_SPECS[opts.browser], root);
+    const key = deriveKey(secret, platform);
+    const snap = snapshotDb(dbPath);
+    try {
+        const rows = readRowsForDomain(snap.dbPath, opts.domain);
+        return rows.map((r) => {
+            const value = r.encrypted.length > 0
+                ? decryptValue(r.encrypted, key, platform)
+                : r.plain;
+            return {
+                host: r.host,
+                name: r.name,
+                value,
+                path: r.path,
+                expires: r.expires,
+                secure: r.isSecure === 1,
+                httpOnly: r.isHttpOnly === 1,
+            };
+        });
+    }
+    finally {
+        snap.cleanup();
+    }
+}
+/**
+ * Convenience: read cookies for a domain and flatten to a name→value record,
+ * matching the shape that engine/cookies.ts already passes to fetch headers.
+ * Last-write-wins on duplicate names (later host_key entries override earlier).
+ */
+export function readCookiesAsRecord(opts) {
+    const out = {};
+    for (const c of readCookies(opts)) {
+        out[c.name] = c.value;
+    }
+    return out;
+}
+/** All known browser ids in priority order for auto-discovery. */
+export const BROWSER_IDS = [
+    "chrome",
+    "arc",
+    "dia",
+    "brave",
+    "edge",
+    "atlas",
+];
+/**
+ * Find any installed browser whose profile DB exists. Used by the auto path
+ * when the caller doesn't specify --browser. Returns [] if no Chromium
+ * browser is installed locally, or if the platform isn't supported.
+ */
+export function detectInstalledBrowsers() {
+    let platform;
+    try {
+        platform = currentPlatform();
+    }
+    catch {
+        return [];
+    }
+    return BROWSER_IDS.filter((b) => {
+        if (!BROWSERS[b].paths[platform])
+            return false;
+        return listProfiles(b).length > 0;
+    });
+}
+//# sourceMappingURL=chromium-cookies.js.map

package/dist/engine/chromium-cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromium-cookies.js","sourceRoot":"","sources":["../../src/engine/chromium-cookies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,WAAW,EACX,WAAW,EACX,MAAM,EACN,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EACL,mBAAmB,GAIpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,cAAc,EACd,eAAe,EACf,YAAY,EACZ,SAAS,EACT,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,mBAAmB,GAIpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,YAAY,EACZ,SAAS,GAEV,MAAM,gCAAgC,CAAC;AAaxC,MAAM,QAAQ,GAAuC;IACnD,MAAM,EAAE;QACN,KAAK,EAAE;YACL,MAAM,EAAE,eAAe;YACvB,KAAK,EAAE,eAAe;YACtB,KAAK,EAAE,yBAAyB;SACjC;QACD,4EAA4E;QAC5E,WAAW,EAAE,KAAK;KACnB;IACD,KAAK,EAAE;QACL,KAAK,EAAE;YACL,MAAM,EAAE,6BAA6B;YACrC,KAAK,EAAE,6BAA6B;YACpC,KAAK,EAAE,uCAAuC;SAC/C;QACD,WAAW,EAAE,KAAK;KACnB;IACD,IAAI,EAAE;QACJ,KAAK,EAAE;YACL,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,0BAA0B;SAClC;QACD,WAAW,EAAE,KAAK;KACnB;IACD,GAAG,EAAE;QACH,gDAAgD;QAChD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QACxB,WAAW,EAAE,IAAI;KAClB;IACD,GAAG,EAAE;QACH,iCAAiC;QACjC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QACxB,WAAW,EAAE,IAAI;KAClB;IACD,KAAK,EAAE;QACL,wDAAwD;QACxD,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACrC,WAAW,EAAE,IAAI;KAClB;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,OAAkB,EAAE,QAAkB;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,GAAG,OAAO,yBAAyB,QAAQ,EAAE,EAC7C,cAAc,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,IAAI,IAAY,CAAC;IACjB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,QAAQ;QACR,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAkB;IAC7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,eAAe,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,KAAK,MAAM,SAAS,IAAI;QACtB,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;KAC/B,EAAE,CAAC;QACF,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAkB,EAClB,OAAgB;IAOhB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,GAAG,OAAO,wBAAwB,QAAQ,EAAE,EAC5C,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,GAAG,OAAO,iBAAiB,IAAI,EAAE,EACjC,WAAW,OAAO,6BAA6B,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,GAAG,OAAO,iDAAiD,IAAI,EAAE,EACjE,aAAa,OAAO,kCAAkC,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,YAAY,MAAM,+BAA+B,IAAI,EAAE,EACvD,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,yEAAyE;AACzE,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,YAAY,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACvD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,oBAAoB,MAAM,GAAG,EAC7B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,UAAU;SACvB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,eAAe,IAAI,GAAG,EAAE,gBAAgB,IAAI,GAAG,CAAC,CAAC;IAC3D,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,MAAM,GAAG,GAAG;QACV,YAAY;QACZ,cAAc;QACd,cAAc;QACd;;eAEW,OAAO,GAAG;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CACnB,YAAY,EAAE,EACd,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,MAAM,sBAAsB,CAAC,EAC5D;YACE,KAAK,EAAE,GAAG,GAAG,WAAW;YACxB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,wBAAyB,GAAa,CAAC,OAAO,EAAE,EAChD,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC;YACR,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;YAClC,KAAK;YACL,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAiB;IAC3C,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,YAAY,EAAE,IAAI,GACnB,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,mBAAmB,CAChC,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,IAAI,CACL,CAAC;IACF,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,KAAK,GACT,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC;gBAC1C,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;gBACxB,QAAQ,EAAE,CAAC,CAAC,UAAU,KAAK,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,QAAQ;IACR,KAAK;IACL,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;CACC,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,eAAe,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/engine/cookies.d.ts

@@ -26,12 +26,20 @@ export declare function validateCookies(site: string, requiredKeys: string[]): {
  */
 export declare function getCookieDir(): string;
 /**
- * Load cookies with CDP fallback.
- * 1. Try disk (fast, synchronous) — ~/.unicli/cookies/<site>.json
- * 2. Try CDP extraction (connects to Chrome debug port)
- * 3. Return null if neither available
+ * Load cookies with multi-source fallback.
  *
- * When CDP extraction succeeds, cookies are saved to disk for future use.
+ * Precedence (each falls through silently to the next on miss):
+ *   1. ~/.unicli/cookies/<site>.json       — explicit user import
+ *   2. browser local DB (Chrome/Arc/Dia/…) — direct SQLite read, no browser launch
+ *   3. CDP                                  — connects to Chrome debug port (legacy)
+ *
+ * The browser disk source is the new default for `strategy: cookie` adapters:
+ * it works whether the browser is open or closed, never opens a new tab, and
+ * needs neither extension nor daemon. Successful reads are persisted to
+ * ~/.unicli/cookies for offline reuse.
+ *
+ * Set `UNICLI_COOKIE_NO_BROWSER=1` to skip the browser-disk step (e.g., in CI
+ * where the macOS Keychain prompt would block).
  */
 export declare function loadCookiesWithCDP(site: string, domain?: string): Promise<Record<string, string> | null>;
 //# sourceMappingURL=cookies.d.ts.map

package/dist/engine/cookies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAmBvE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAI1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GACrB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAMvC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CA2BxC"}
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAmBvE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAI1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GACrB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAMvC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAwCxC"}

package/dist/engine/cookies.js

@@ -61,28 +61,48 @@ export function getCookieDir() {
     return cookieDir();
 }
 /**
- * Load cookies with CDP fallback.
- * 1. Try disk (fast, synchronous) — ~/.unicli/cookies/<site>.json
- * 2. Try CDP extraction (connects to Chrome debug port)
- * 3. Return null if neither available
+ * Load cookies with multi-source fallback.
  *
- * When CDP extraction succeeds, cookies are saved to disk for future use.
+ * Precedence (each falls through silently to the next on miss):
+ *   1. ~/.unicli/cookies/<site>.json       — explicit user import
+ *   2. browser local DB (Chrome/Arc/Dia/…) — direct SQLite read, no browser launch
+ *   3. CDP                                  — connects to Chrome debug port (legacy)
+ *
+ * The browser disk source is the new default for `strategy: cookie` adapters:
+ * it works whether the browser is open or closed, never opens a new tab, and
+ * needs neither extension nor daemon. Successful reads are persisted to
+ * ~/.unicli/cookies for offline reuse.
+ *
+ * Set `UNICLI_COOKIE_NO_BROWSER=1` to skip the browser-disk step (e.g., in CI
+ * where the macOS Keychain prompt would block).
  */
 export async function loadCookiesWithCDP(site, domain) {
-    // 1. Try disk first (existing behavior)
+    // 1. ~/.unicli/cookies first
     const diskCookies = loadCookies(site);
     if (diskCookies)
         return diskCookies;
-    // 2. Try CDP extraction
+    // Resolve the cookie domain once for both browser and CDP paths.
     let cookieDomain = domain ?? site.replace(/_/g, ".");
-    // If no TLD in domain, append .com as default (covers bilibili, zhihu, weibo, etc.)
     if (!cookieDomain.includes(".")) {
         cookieDomain = `${cookieDomain}.com`;
     }
+    // 2. Direct browser disk read (no launch, no CDP, no extension).
+    if (process.env.UNICLI_COOKIE_NO_BROWSER !== "1") {
+        const browserCookies = await loadFromInstalledBrowser(cookieDomain);
+        if (browserCookies && Object.keys(browserCookies).length > 0) {
+            try {
+                saveCookiesToDisk(site, browserCookies);
+            }
+            catch {
+                // Non-fatal — caller still gets the cookies.
+            }
+            return browserCookies;
+        }
+    }
+    // 3. CDP fallback for users running Chrome with --remote-debugging-port.
     try {
         const cdpCookies = await extractCookiesViaCDP(cookieDomain);
         if (Object.keys(cdpCookies).length > 0) {
-            // Save to disk for future use (site name is already validated by saveCookiesToDisk)
             try {
                 saveCookiesToDisk(site, cdpCookies);
             }
@@ -97,4 +117,30 @@ export async function loadCookiesWithCDP(site, domain) {
     }
     return null;
 }
+/**
+ * Try each installed Chromium browser in priority order until one yields
+ * cookies for the domain. Failures (browser not installed, Keychain denied,
+ * unsupported encryption) fall through silently — the next source handles it.
+ */
+async function loadFromInstalledBrowser(domain) {
+    let mod;
+    try {
+        mod = await import("./chromium-cookies.js");
+    }
+    catch {
+        return null;
+    }
+    const installed = mod.detectInstalledBrowsers();
+    for (const browser of installed) {
+        try {
+            const record = mod.readCookiesAsRecord({ browser, domain });
+            if (Object.keys(record).length > 0)
+                return record;
+        }
+        catch {
+            // Move on to the next browser.
+        }
+    }
+    return null;
+}
 //# sourceMappingURL=cookies.js.map

package/dist/engine/cookies.js.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,WAAW,IAAI,iBAAiB,GACjC,MAAM,uBAAuB,CAAC;AAE/B,SAAS,SAAS;IAChB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAgC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,YAAsB;IAEtB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAE7D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,MAAe;IAEf,wCAAwC;IACxC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,wBAAwB;IACxB,IAAI,YAAY,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,oFAAoF;IACpF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,YAAY,GAAG,GAAG,YAAY,MAAM,CAAC;IACvC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,oFAAoF;YACpF,IAAI,CAAC;gBACH,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/engine/cookies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,WAAW,IAAI,iBAAiB,GACjC,MAAM,uBAAuB,CAAC;AAE/B,SAAS,SAAS;IAChB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAgC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,YAAsB;IAEtB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAE7D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,MAAe;IAEf,6BAA6B;IAC7B,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,iEAAiE;IACjE,IAAI,YAAY,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,YAAY,GAAG,GAAG,YAAY,MAAM,CAAC;IACvC,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAAE,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACpE,IAAI,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YACD,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,wBAAwB,CACrC,MAAc;IAEd,IAAI,GAA2C,CAAC;IAChD,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,uBAAuB,EAAE,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/engine/executor.d.ts

@@ -21,6 +21,14 @@ export interface PipelineOptions {
     site?: string;
     command?: string;
     strategy?: string;
+    /**
+     * Cookie domain declared by the adapter (or the command override). Drives
+     * the browser-cookie source — without this the loader has to guess
+     * `${site}.com`, which is wrong for sites like notion (`.notion.so`),
+     * weixin (`mp.weixin.qq.com`), perplexity (`.perplexity.ai`), twitch
+     * (`.twitch.tv`), linux-do (`linux.do`), etc.
+     */
+    domain?: string;
     /**
      * Kernel surface that dispatched the pipeline. When provided, becomes
      * `${{ surface }}` in YAML templates. Undefined for legacy callers