brightspace-mcp-server 1.6.3 → 3.0.0

package/build/auth/browser-auth.d.ts

@@ -1,64 +1,27 @@
 /**
- * Purdue Brightspace MCP Server
+ * Brightspace MCP Server
  * Copyright (c) 2026 Rohan Muppa. All rights reserved.
- * Licensed under MIT — see LICENSE file for details.
+ * Licensed under MIT: see LICENSE file for details.
  */
 import type { AppConfig, TokenData } from "../types/index.js";
-/**
- * Thrown when a headless run reaches the point where a human has to see the
- * screen. Not a failure: the caller relaunches the browser visible and retries.
- */
-export declare class HeadlessLoginRequiredError extends Error {
-    constructor();
+import type { RequestMfaCode } from "./sso-flow.js";
+export declare class BrowserAuthTransportError extends Error {
+    readonly code = "AUTH_TRANSPORT";
+    constructor(message: string, options?: ErrorOptions);
+}
+export interface AuthenticateOptions {
+    automatic?: boolean;
+    /** Persist the token before releasing the shared authentication lock. */
+    onAuthenticated?: (token: TokenData) => Promise<void>;
 }
-/** Whether the current attempt has to start over with a window on screen. */
-export declare function needsVisibleBrowser({ launchedHeadless }: {
-    launchedHeadless: boolean;
-}): boolean;
 export declare class BrowserAuth {
     private config;
     private ssoFlow;
-    /** Whether the browser for the current attempt was launched without a window. */
-    private launchedHeadless;
-    constructor(config: AppConfig);
-    /**
-     * Detect if running inside WSL (Windows Subsystem for Linux) or Docker.
-     * These environments require --no-sandbox for Chromium to launch.
-     */
+    private readonly stateStore;
+    private readonly cooldown;
+    constructor(config: AppConfig, requestMfaCode?: RequestMfaCode);
     private static isWSLOrDocker;
-    /**
-     * Build Chromium launch args based on the current platform and environment.
-     */
-    private static buildChromiumArgs;
-    /**
-     * Prevent Chrome for Testing from SIGTRAP'ing on launch on macOS (issue #10).
-     *
-     * Three layers, all idempotent and cheap:
-     *   1. ApplePersistenceIgnoreState — disables NSPersistentUIRestorer's crash-prompt
-     *      modal, which Chrome for Testing's AppKit bridge cannot handle.
-     *   2. IIO_LaunchInfo=0 — resets LaunchServices' per-app crash counter so macOS
-     *      stops triggering the recovery pathway in the first place.
-     *   3. Nuke the Cocoa saved-application-state bundle — if it exists, AppKit tries
-     *      to replay window state during launch and can crash the browser process.
-     *
-     * Runs before every launch. None of these are destructive to user data; Chrome
-     * for Testing is a disposable test profile.
-     */
-    private static applyMacOSCrashGuard;
-    /**
-     * Recovery step: the current browser-data profile is corrupted in a way that
-     * makes Chromium SIGTRAP during launch (issue #10). Move it aside so the next
-     * launch attempt gets a clean profile. Cheap — user just re-authenticates.
-     */
-    private quarantineBrowserDataDir;
-    /**
-     * Authenticate, opening a window if the flow turns out to need one.
-     *
-     * Headless is only ever safe for the silent path. The moment a real sign-in
-     * is required the run starts over with a visible browser, because the MFA
-     * number match has to be readable by a human.
-     */
-    authenticate(): Promise<TokenData>;
+    authenticate(options?: AuthenticateOptions): Promise<TokenData>;
     private attemptAuthentication;
     /**
      * Run the token extraction strategy chain, cheapest to most invasive.
@@ -71,23 +34,14 @@ export declare class BrowserAuth {
      * Returns true if the token is accepted by D2L, false otherwise.
      */
     private validateToken;
-    /**
-     * Set up passive network request listener to capture Bearer token.
-     * MUST be called BEFORE page.goto() to avoid race condition.
-     */
-    private setupTokenInterception;
-    /**
-     * Navigate to Brightspace and login if needed.
-     * Returns true if already authenticated (cookies valid), false if SSO login was performed.
-     */
+    /** Restore first, and only attempt credentials after a real sign-in is needed. */
     private navigateAndLogin;
-    /** Let the page finish loading, without letting a slow one fail the run. */
-    private settle;
     /**
      * Give the SSO chain a bounded window to finish with no human input.
      * Returns true only when the session proves itself live.
      */
     private awaitSilentSSO;
+    private hasCredentialPrompt;
     /**
      * A POSITIVE session check, never "the URL doesn't look like a login page".
      * Institutions bounce through intermediate SAML hops with a perfectly live
@@ -102,6 +56,8 @@ export declare class BrowserAuth {
     private clickSilentSurfaces;
     /** Visibility without the actionability wait, so a poll keeps its rhythm. */
     private isOnScreen;
+    /** Check each selector independently so a hidden earlier match cannot mask a visible one. */
+    private isAnyOnScreen;
     /**
      * Try to extract Bearer token from D2L's localStorage.
      * D2L stores API tokens in localStorage under "D2L.Fetch.Tokens".
@@ -130,29 +86,5 @@ export declare class BrowserAuth {
      * Constructs a cookie header string from d2lSessionVal and d2lSecureSessionVal.
      */
     private extractCookieToken;
-    /**
-     * Load previously saved storage state (cookies + localStorage).
-     * Workaround for Playwright bug #36139: session cookies don't persist in persistent context.
-     */
-    private loadStorageState;
-    private saveStorageState;
-    /**
-     * Launch browser with retry logic.
-     * Windows is prone to 180s launch timeouts (Playwright issue #22117) caused by
-     * lingering Chromium processes, antivirus interference, or resource contention.
-     * On timeout, we clear lock files and retry once.
-     */
-    private launchBrowserWithRetry;
-    /**
-     * Validate and remove stale Chromium lock files from the browser data directory.
-     * Playwright's persistent context uses Chromium's SingletonLock mechanism.
-     * If the browser is killed unexpectedly (antivirus, force close, crash),
-     * these lock files persist and block all future launch attempts.
-     *
-     * For SingletonLock (a symlink whose target is "hostname-pid"), we check
-     * whether the owning process is still alive before removing it. This avoids
-     * deleting a lock held by a legitimate running instance.
-     */
-    private validateAndClearLockFiles;
 }
 //# sourceMappingURL=browser-auth.d.ts.map

package/build/auth/browser-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-auth.d.ts","sourceRoot":"","sources":["../../src/auth/browser-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AA2B9D;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;;CAKpD;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,EAAE;IAAE,gBAAgB,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAEhG;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,OAAO,CAAU;IACzB,iFAAiF;IACjF,OAAO,CAAC,gBAAgB,CAAS;gBAErB,MAAM,EAAE,SAAS;IAK7B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAwB5B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAoBhC;;;;;;;;;;;;;OAaG;mBACkB,oBAAoB;IA8CzC;;;;OAIG;YACW,wBAAwB;IAoBtC;;;;;;OAMG;IACG,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC;YAY1B,qBAAqB;IA8KnC;;;;OAIG;YACW,eAAe;IAyD7B;;;OAGG;YACW,aAAa;IAmC3B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IA+B9B;;;OAGG;YACW,gBAAgB;IAsD9B,4EAA4E;YAC9D,MAAM;IAQpB;;;OAGG;YACW,cAAc;IAoB5B;;;;;OAKG;YACW,cAAc;IAiB5B;;;OAGG;YACW,mBAAmB;IAsCjC,6EAA6E;YAC/D,UAAU;IAIxB;;;OAGG;YACW,wBAAwB;IAyCtC;;;;;OAKG;YACW,sBAAsB;IAoCpC;;;;OAIG;YACW,eAAe;IAyC7B;;;OAGG;YACW,gBAAgB;IAgE9B;;;OAGG;YACW,kBAAkB;IAiChC;;;OAGG;YACW,gBAAgB;YA8FhB,gBAAgB;IAc9B;;;;;OAKG;YACW,sBAAsB;IA+DpC;;;;;;;;;OASG;YACW,yBAAyB;CAiExC"}
+{"version":3,"file":"browser-auth.d.ts","sourceRoot":"","sources":["../../src/auth/browser-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAK9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAoBpD,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,oBAAoB;gBACrB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIpD;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,yEAAyE;IACzE,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;gBAE5B,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,cAAc;IAO9D,OAAO,CAAC,MAAM,CAAC,aAAa;IAetB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,SAAS,CAAC;YAgB3D,qBAAqB;IAwEnC;;;;OAIG;YACW,eAAe;IA0D7B;;;OAGG;YACW,aAAa;IA0B3B,kFAAkF;YACpE,gBAAgB;IAmD9B;;;OAGG;YACW,cAAc;YAmDd,mBAAmB;IAKjC;;;;;OAKG;YACW,cAAc;IAsB5B;;;OAGG;YACW,mBAAmB;IA0CjC,6EAA6E;YAC/D,UAAU;IAQxB,6FAA6F;YAC/E,aAAa;IAO3B;;;OAGG;YACW,wBAAwB;IAyCtC;;;;;OAKG;YACW,sBAAsB;IAoCpC;;;;OAIG;YACW,eAAe;IAoD7B;;;OAGG;YACW,gBAAgB;IAgE9B;;;OAGG;YACW,kBAAkB;CAiCjC"}