browser-commander 0.16.0 → 0.17.0

package/.changeset/config.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://unpkg.com/@changesets/config@3.1.1/schema.json",
+  "$schema": "https://unpkg.com/@changesets/config@4.0.0/schema.json",
   "changelog": "@changesets/cli/changelog",
   "commit": false,
   "fixed": [],

package/.changeset/merged-loud-river.md

@@ -0,0 +1,7 @@
+---
+'browser-commander': minor
+---
+
+Restore the release pipeline. `const { $ } = await use('command-stream')` returned `undefined` on the Node 24 the release jobs pin, because Node 23 added a synthetic `'module.exports'` named export for CommonJS namespaces that use-m's unwrapping does not recognise, so every JS and Rust release died on its first shell call with `TypeError: $ is not a function`. Dependencies now load through `scripts/use-module.mjs`, which detects that namespace shape and unwraps it. Manifest fields are read by TOML table through `scripts/read-manifest.mjs` instead of a line-anchored `grep`, which matched duplicate keys in other tables and wrote two lines into `$GITHUB_OUTPUT`. The duplication gate had `format` set to a reporter name, so jscpd scanned zero files and passed unconditionally; it now scans the tree against a recorded baseline.
+
+Add the `fingerprint` subsystem, which removes the differences between a browser this library controls and one started by hand. `navigator.webdriver` stays false because the `AutomationControlled` Blink feature is disabled at launch, and `launchBrowser()` no longer passes the engine defaults a real Chrome does not carry. `resolveFingerprintProfile()` validates the 19 environment fields a page can read -- user agent and client hints, languages and locale, time zone, platform, cores, memory, screen, viewport, touch, WebGL strings, geolocation and the media preferences -- `createFingerprintPreset()` builds internally consistent Windows, macOS, Linux and Android machines, and `applyFingerprint()` installs a profile over CDP for both Playwright and Puppeteer. `FINGERPRINT_LIMITATIONS` documents what still cannot be made identical, and `relevantFingerprintLimitations()` narrows it to the entries a given profile and browser actually hit. The excluded defaults include Playwright's unconditional `--enable-unsafe-swiftshader`, which would otherwise give an automated browser a SwiftShader WebGL context on a machine where a hand-started Chrome has none.

package/.jscpd-baseline.json

@@ -0,0 +1,257 @@
+{
+  "version": 1,
+  "fingerprints": {
+    "00d381dd611ae8ac": 1,
+    "029a62ef1f48e856": 1,
+    "038170e72e0af1f5": 1,
+    "04b28d01d0bb47dc": 1,
+    "04f605be138bc350": 1,
+    "0796d358ad2562c3": 1,
+    "090a69d9528e4cdb": 1,
+    "09694dc8fb9d683c": 1,
+    "0a3459aad03492bb": 1,
+    "0b48b63049c42591": 1,
+    "0b8c71391c107a5e": 1,
+    "0ba2d165b56db0b3": 1,
+    "0c8a29320e45bdfa": 1,
+    "0ca2d9c2f2b44d6c": 1,
+    "0caa402c4eae32d8": 1,
+    "0fd23be8410c2c95": 1,
+    "0fe4f3b5e5e939b3": 1,
+    "10b6201c3ca1fbe0": 1,
+    "1273365073edd790": 1,
+    "1296adc3c3128048": 1,
+    "13c4b58d3ea0719b": 1,
+    "14beedf656e57fba": 1,
+    "150c8efe188ac225": 1,
+    "16340a16ed52849e": 1,
+    "17c26c0db2d35ad1": 1,
+    "193b46c0e7f72053": 1,
+    "1ac9fbd87efdb313": 1,
+    "1ad4dc7e19a77f68": 1,
+    "1c1baf1bc8ea0eae": 1,
+    "1d61f5c49f12d2dc": 1,
+    "1ef570563d4e5a08": 1,
+    "1f2104c950b12a30": 1,
+    "20bb8deee1481129": 1,
+    "21f9aab35441e4ff": 1,
+    "22755b35701c5bb6": 1,
+    "2296c06fa00da254": 1,
+    "229b903386b17538": 1,
+    "2357ae472525f6bf": 1,
+    "2394170c8a2a0e9a": 1,
+    "23d2486c0e269b77": 1,
+    "24b29d9d78441dbd": 1,
+    "266893ea7a511fe4": 1,
+    "266b9cb95f783cdf": 1,
+    "26bb09996580437c": 1,
+    "26ebb2e251c9a39e": 1,
+    "2a78ee4b05679c8d": 1,
+    "2b1a759e2cfd21a2": 1,
+    "2c0f8b5c6f28420b": 1,
+    "2d2d6fd6c7c0f30d": 1,
+    "2e70be24d2268673": 1,
+    "2f9e15467cc2f12a": 1,
+    "3101802d3ea65339": 1,
+    "33357ce94e07cc4b": 1,
+    "37bd4114d0089f49": 1,
+    "389df6fb4b8315a1": 1,
+    "39eaada6d1879f4a": 1,
+    "3a9f1672ecc1d55b": 1,
+    "3adca52a3f04837c": 1,
+    "3c1017def7b3216c": 1,
+    "3d7e17ad32108a7f": 1,
+    "3da23cbee214a1a5": 1,
+    "3dced48baf70eb36": 1,
+    "3fa2ebbb416120f0": 1,
+    "3fe61c0a7772f18b": 1,
+    "406fed8e5b39aafd": 1,
+    "40aa2953f783819c": 1,
+    "418db56376cc23bd": 1,
+    "441570d51d6f70a4": 1,
+    "457c71f32f53833d": 1,
+    "46e3f58cfb14a43a": 1,
+    "4b0d3cc5c27227e7": 1,
+    "4c3b94caa28045d0": 1,
+    "4f3c541b3f3e3f23": 1,
+    "4fe5663c69a426cb": 1,
+    "505d98bd14b63a6c": 1,
+    "5085765e1f103f3e": 1,
+    "5184c90c9f8406c3": 1,
+    "520a28ee2ced56c2": 1,
+    "53519ec61a6ba319": 1,
+    "53f7e3f3e444a37d": 1,
+    "5587ec0cdb7b96e6": 1,
+    "559b5241047cd753": 1,
+    "562ebfb882d4aa8f": 1,
+    "56b5df15ee61887d": 1,
+    "56b7675e4ce57335": 1,
+    "56d45d447baad2fd": 1,
+    "56deee57166c4369": 1,
+    "578ab1469dc998ec": 1,
+    "57c410b183671eec": 1,
+    "57e313e36a5ce81d": 1,
+    "58c08b8242c875ec": 1,
+    "58c1ca12d4d2b50f": 1,
+    "5a09e2677334ba05": 1,
+    "5ae9b1430fc38daf": 1,
+    "602bfd129bba900e": 1,
+    "608e1dd27138ec6f": 1,
+    "60d0c58a01fc8746": 1,
+    "61bcadcd8dc9f63e": 1,
+    "63a3b672c8d8b50b": 1,
+    "63ff613b1780c67a": 1,
+    "642cc89ed49f8a21": 1,
+    "6479c3604c153ec4": 1,
+    "66fb97eebd7ff0dc": 1,
+    "67a95e428b8fa31c": 1,
+    "6880d620e0e67229": 1,
+    "69d50e6f6a5f2ee9": 1,
+    "6a7ed9ad3fc00a39": 1,
+    "6af3c307939ef75e": 1,
+    "6cd00d6b6a039022": 1,
+    "6e2457cd3e1f69e7": 1,
+    "6fa62e2642cc73c3": 1,
+    "7009c5e9bd61dbe8": 1,
+    "709348ea44394b52": 1,
+    "731fbc5d4188839a": 1,
+    "73dbf56d17ab79ed": 1,
+    "760d9925f6e3ca85": 1,
+    "7623a3eea4680be4": 1,
+    "771db68809cce310": 1,
+    "771ddbb36a118cbb": 1,
+    "779517ed59b39aa6": 1,
+    "7850ccac58d09216": 1,
+    "785d557d0683185b": 1,
+    "785e57db939e1887": 1,
+    "786d7040e54017c7": 1,
+    "78c84b601cbc4ffe": 1,
+    "799dc9940577a15e": 1,
+    "79e705499ddaf44b": 1,
+    "7e6bad380644f9b0": 1,
+    "81a56c10bfd42e39": 1,
+    "837ba752ecdaf052": 1,
+    "8549c997a472cb6c": 1,
+    "86646647aab19e39": 1,
+    "8678919f1350f154": 1,
+    "86aae81b1aa0d21b": 1,
+    "87484a2744e09748": 1,
+    "87514cf1299c9c0e": 1,
+    "876d2c8edfc8c40a": 1,
+    "8b013ac20e436d76": 1,
+    "8c2b1408886c1db1": 1,
+    "8cb9a984bf19a062": 1,
+    "8ec18cdbd4a96518": 1,
+    "8ecf2e554a04d2ef": 1,
+    "91049efadc65169b": 1,
+    "9134185980de8a17": 1,
+    "916833bafca4fa63": 1,
+    "91a538e4a0c28f25": 1,
+    "929fba5228e9fdac": 1,
+    "92ddafa7e65be7eb": 1,
+    "94821a4d1b745dfd": 1,
+    "94d89888ac9da9a9": 1,
+    "97c5a112fdde7be8": 1,
+    "98cc22079feaa004": 1,
+    "990d87f21678fa96": 1,
+    "9b6ef4df04562546": 1,
+    "9c055dfd90c369bf": 1,
+    "9cb19f1b972e811e": 1,
+    "9ee57dcd5e7a6691": 1,
+    "9fbb8296259dedbe": 1,
+    "a0183465782b0b15": 1,
+    "a1e3a3a13b27dba4": 1,
+    "a1ef39a15701c2b5": 1,
+    "a2a00d268fb2cee4": 1,
+    "a305c6cac16f3af5": 1,
+    "a4c8498d4f2d2191": 1,
+    "a6ad7ab6c05656dc": 1,
+    "a78d76908162699e": 1,
+    "a9bd4ffef6da5faf": 1,
+    "a9d71c2e50f1b832": 1,
+    "abe5a58f2b2cc593": 1,
+    "acc95d694eb2f581": 1,
+    "ad4469f2e8131535": 1,
+    "ad4cfa76daa1b6fc": 1,
+    "adae1329361a81a1": 1,
+    "ae477ba64bafba3f": 1,
+    "aee1e5c65f783848": 1,
+    "aee45e8b58c2d87f": 1,
+    "af9d6a2f4eba146e": 1,
+    "b010686af23efa90": 1,
+    "b2a0686231220c8a": 1,
+    "b35ff46c365dcd18": 1,
+    "b41581af204af40e": 1,
+    "b62f3449cde7991d": 1,
+    "b71fa5250da28739": 1,
+    "b740ecac685a15fe": 1,
+    "b8c2d21f2a26f77d": 1,
+    "bb269582b94ed42d": 1,
+    "bb3e6d0f7e7edccd": 1,
+    "bccf0d5cc57c08df": 1,
+    "bd0ae42c13d5b4f9": 1,
+    "bd6c62a6e1c6a071": 1,
+    "bdb8ca169be36b80": 1,
+    "bdcd11c2bfb5fde0": 1,
+    "be0900fb3e87164e": 1,
+    "bf452b9431c092ad": 1,
+    "c0b027bebd7bd737": 1,
+    "c2c155adbcb46f3c": 1,
+    "c30737d62069fc02": 1,
+    "c3c3569357673af8": 1,
+    "c415ffcd004d6518": 1,
+    "c461a83b51eb7740": 1,
+    "c9cf3c28bed33a5b": 1,
+    "cbd444e9a6a9072e": 1,
+    "cc60029bf62920a3": 1,
+    "cd49f39b43d14635": 1,
+    "cebff7d1cc87f646": 1,
+    "cf6116d195199f8a": 1,
+    "cfd68135b744c27b": 1,
+    "d097f41a6f43e634": 1,
+    "d17201496391f6cc": 1,
+    "d17e8db5a2bab966": 1,
+    "d1a4a8e6a523b752": 1,
+    "d2ed3d02dd6a2d8c": 1,
+    "d4eec99f58906a63": 1,
+    "d6157a86fea41907": 1,
+    "d6fa9884eee815f0": 1,
+    "d86bafb915488255": 1,
+    "de0bf2317c53d427": 1,
+    "de1b481bfe8c3e58": 1,
+    "df2dc922f40485e7": 1,
+    "df3b85f6947db144": 1,
+    "e0b90bce5112bb9c": 1,
+    "e2ef7800deb0f464": 1,
+    "e3111b845acb7a0e": 1,
+    "e4b10b56d7e1edac": 1,
+    "e59733bafda785e9": 1,
+    "e5feedc0c24e103e": 1,
+    "e67726a913675120": 1,
+    "ea1195048ded896c": 1,
+    "ea88711c5deb1fe5": 1,
+    "eb9a70c2a21094ff": 1,
+    "ebd08637a2d7bcf3": 1,
+    "ebe03c5f8c2f5147": 1,
+    "edccf5a595ab439f": 1,
+    "ee19c8b9b332ee98": 1,
+    "eeca0ccf8d821f21": 1,
+    "ef2fc2e92ac07c6e": 1,
+    "f022b763ff342b2d": 1,
+    "f07f979f8c2706e8": 1,
+    "f38f72095a67c95e": 1,
+    "f40ba84763547f41": 1,
+    "f46509ed693574df": 1,
+    "f4bb6f4c83950fcd": 1,
+    "f4bfa7e503443cd1": 1,
+    "f67a07a611f39cb2": 1,
+    "f911821aa7dda47f": 1,
+    "f97bf515bfd95829": 1,
+    "fae844842fba705b": 1,
+    "faf76ec43b2dbbaa": 1,
+    "fb3a2e9ace145907": 1,
+    "fc6ed7d760c98f51": 1,
+    "fccfd8b004c12dd4": 1,
+    "fe859df9f97c75d4": 1
+  }
+}

package/.jscpd.json

@@ -1,8 +1,7 @@
 {
-  "threshold": 0,
   "minTokens": 30,
   "minLines": 5,
-  "skipComments": true,
+  "mode": "weak",
   "ignore": [
     "**/node_modules/**",
     "**/build/**",
@@ -14,7 +13,6 @@
     "**/pnpm-lock.yaml",
     "**/yarn.lock"
   ],
-  "format": "console",
   "reporters": ["console", "html"],
   "output": "./reports/jscpd"
 }

package/.prettierignore

@@ -6,3 +6,4 @@ docs-api
 package-lock.json
 .eslintcache
 CLAUDE.md
+reports

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.17.0
+
+### Minor Changes
+
+- Restore the release pipeline. `const { $ } = await use('command-stream')` returned `undefined` on the Node 24 the release jobs pin, because Node 23 added a synthetic `'module.exports'` named export for CommonJS namespaces that use-m's unwrapping does not recognise, so every JS and Rust release died on its first shell call with `TypeError: $ is not a function`. Dependencies now load through `scripts/use-module.mjs`, which detects that namespace shape and unwraps it. Manifest fields are read by TOML table through `scripts/read-manifest.mjs` instead of a line-anchored `grep`, which matched duplicate keys in other tables and wrote two lines into `$GITHUB_OUTPUT`. The duplication gate had `format` set to a reporter name, so jscpd scanned zero files and passed unconditionally; it now scans the tree against a recorded baseline.
+  
+  Add the `fingerprint` subsystem, which removes the differences between a browser this library controls and one started by hand. `navigator.webdriver` stays false because the `AutomationControlled` Blink feature is disabled at launch, and `launchBrowser()` no longer passes the engine defaults a real Chrome does not carry. `resolveFingerprintProfile()` validates the 19 environment fields a page can read -- user agent and client hints, languages and locale, time zone, platform, cores, memory, screen, viewport, touch, WebGL strings, geolocation and the media preferences -- `createFingerprintPreset()` builds internally consistent Windows, macOS, Linux and Android machines, and `applyFingerprint()` installs a profile over CDP for both Playwright and Puppeteer. `FINGERPRINT_LIMITATIONS` documents what still cannot be made identical, and `relevantFingerprintLimitations()` narrows it to the entries a given profile and browser actually hit. The excluded defaults include Playwright's unconditional `--enable-unsafe-swiftshader`, which would otherwise give an automated browser a SwiftShader WebGL context on a machine where a hand-started Chrome has none.
+
+## 0.16.1
+
+### Patch Changes
+
+- 542bf75: Fix CI/CD false positives, false negatives and warnings across all workflows
+  - Repair `if:` conditions that started with `!`, which a YAML plain scalar cannot do
+  - Replace `always()` with `!cancelled()` so cancelled runs stop propagating
+  - Gate `instant-release` and `changeset-pr` on lint and test, so a manual release can no longer publish unvalidated code
+  - Make the changelog fragment checks fail instead of only warning
+  - Pass `github.base_ref` and free-form `workflow_dispatch` inputs through environment variables instead of interpolating them into shell bodies
+  - Update `actions/setup-python` to v6, `codecov/codecov-action` to v7 and `peter-evans/create-pull-request` to v8
+  - Extend `scripts/check-ci-workflows.mjs` so each of the above becomes a permanent policy check
+  - Add repository-wide secrets scanning and a 1500-line file limit gate
+
 ## 0.16.0
 
 ### Minor Changes

package/eslint.config.js

@@ -45,9 +45,22 @@ export default [
         Bun: 'readonly',
         Deno: 'readonly',
         globalThis: 'readonly',
-        // Browser globals (used in evaluate functions)
+        // Browser globals (used in evaluate functions and in the page
+        // scripts under experiments/fingerprint-parity/, which are shipped to
+        // Chrome verbatim rather than executed by Node).
         document: 'readonly',
         window: 'readonly',
+        navigator: 'readonly',
+        Navigator: 'readonly',
+        screen: 'readonly',
+        Screen: 'readonly',
+        Notification: 'readonly',
+        speechSynthesis: 'readonly',
+        HTMLCanvasElement: 'readonly',
+        CanvasRenderingContext2D: 'readonly',
+        WebGLRenderingContext: 'readonly',
+        Blob: 'readonly',
+        Worker: 'readonly',
       },
     },
     rules: {
@@ -104,6 +117,15 @@ export default [
       'max-lines': ['error', 1500], // Maximum lines per file - counts all lines including blank lines and comments
     },
   },
+  {
+    // The shared init payload is source text, not a module: it is read verbatim
+    // and sent to the page, so the declaration it exports to the page has no
+    // caller inside this package. See scripts/check-shared-fingerprint-assets.sh.
+    files: ['src/fingerprint/init-payload.js'],
+    rules: {
+      'no-unused-vars': 'off',
+    },
+  },
   {
     // Test files have different requirements
     files: ['tests/**/*.js', '**/*.test.js'],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-commander",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Universal browser automation library that supports both Playwright and Puppeteer with a unified API",
   "main": "src/index.js",
   "type": "module",
@@ -15,19 +15,20 @@
     "test:e2e": "node scripts/run-tests.mjs --env RUN_E2E=true tests/e2e",
     "test:e2e:playwright": "node scripts/run-tests.mjs --env RUN_E2E=true tests/e2e/playwright.e2e.test.js",
     "test:e2e:puppeteer": "node scripts/run-tests.mjs --env RUN_E2E=true tests/e2e/puppeteer.e2e.test.js",
+    "test:e2e:parity": "node scripts/run-tests.mjs --env RUN_E2E=true tests/e2e/fingerprint-parity.e2e.test.js",
     "test:all": "npm run test:unit && npm run test:e2e",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "docs:api": "jsdoc -c jsdoc.json",
-    "check:duplication": "jscpd .",
+    "check:duplication": "jscpd . --baseline .jscpd-baseline.json --fail-on-new-clones",
     "check": "npm run lint && npm run format:check && npm run check:duplication",
-    "prepare": "husky || true",
     "changeset": "changeset",
     "changeset:version": "node scripts/changeset-version.mjs",
     "changeset:publish": "changeset publish",
-    "changeset:status": "changeset status --since=origin/main"
+    "changeset:status": "changeset status --since=origin/main",
+    "check:duplication:update": "jscpd . --baseline .jscpd-baseline.json --update-baseline"
   },
   "repository": {
     "type": "git",
@@ -68,27 +69,15 @@
     "test-anywhere": "^0.9.1"
   },
   "devDependencies": {
-    "@changesets/cli": "^2.29.7",
-    "eslint": "^9.39.0",
+    "@changesets/cli": "^3.0.2",
+    "@eslint/js": "^10.0.1",
+    "eslint": "^10.10.0",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-prettier": "^5.5.4",
-    "husky": "^9.1.7",
-    "jscpd": "^4.0.5",
+    "eslint-plugin-prettier": "^5.5.6",
+    "jscpd": "^5.1.2",
     "jsdoc": "^4.0.4",
-    "lint-staged": "^16.2.6",
-    "playwright": "^1.56.1",
-    "prettier": "^3.6.2",
-    "puppeteer": "^24.27.0"
-  },
-  "lint-staged": {
-    "*.{js,mjs,cjs}": [
-      "eslint --fix",
-      "prettier --write",
-      "prettier --check"
-    ],
-    "*.md": [
-      "prettier --write",
-      "prettier --check"
-    ]
+    "playwright": "^1.62.1",
+    "prettier": "^3.9.6",
+    "puppeteer": "^25.10.0"
   }
 }

package/scripts/changeset-version.mjs

@@ -13,13 +13,9 @@
  * - command-stream: Modern shell command execution with streaming support
  */
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
+import { loadCommandStream } from '../../scripts/use-module.mjs';
 
-// Import command-stream for shell command execution
-const { $ } = await use('command-stream');
+const { $ } = await loadCommandStream();
 
 try {
   console.log('Running changeset version...');

package/scripts/create-github-release.mjs

@@ -14,14 +14,13 @@
 
 import { readFileSync } from 'fs';
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
-
-// Import link-foundation libraries
-const { $ } = await use('command-stream');
-const { makeConfig } = await use('lino-arguments');
+import {
+  loadCommandStream,
+  loadLinoArguments,
+} from '../../scripts/use-module.mjs';
+
+const { $ } = await loadCommandStream();
+const { makeConfig } = await loadLinoArguments();
 
 // Parse CLI arguments using lino-arguments
 // Note: Using --release-version instead of --version to avoid conflict with yargs' built-in --version flag

package/scripts/create-manual-changeset.mjs

@@ -15,14 +15,13 @@ import { randomBytes } from 'crypto';
 
 const PACKAGE_NAME = 'browser-commander';
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
-
-// Import link-foundation libraries
-const { $ } = await use('command-stream');
-const { makeConfig } = await use('lino-arguments');
+import {
+  loadCommandStream,
+  loadLinoArguments,
+} from '../../scripts/use-module.mjs';
+
+const { $ } = await loadCommandStream();
+const { makeConfig } = await loadLinoArguments();
 
 // Parse CLI arguments using lino-arguments
 const config = makeConfig({

package/scripts/format-github-release.mjs

@@ -13,14 +13,13 @@
  * - lino-arguments: Unified configuration from CLI args, env vars, and .lenv files
  */
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
+import {
+  loadCommandStream,
+  loadLinoArguments,
+} from '../../scripts/use-module.mjs';
 
-// Import link-foundation libraries
-const { $ } = await use('command-stream');
-const { makeConfig } = await use('lino-arguments');
+const { $ } = await loadCommandStream();
+const { makeConfig } = await loadLinoArguments();
 
 // Parse CLI arguments using lino-arguments
 // Note: Using --release-version instead of --version to avoid conflict with yargs' built-in --version flag

package/scripts/format-release-notes.mjs

@@ -23,14 +23,13 @@
 
 const PACKAGE_NAME = 'browser-commander';
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
-
-// Import link-foundation libraries
-const { $ } = await use('command-stream');
-const { makeConfig } = await use('lino-arguments');
+import {
+  loadCommandStream,
+  loadLinoArguments,
+} from '../../scripts/use-module.mjs';
+
+const { $ } = await loadCommandStream();
+const { makeConfig } = await loadLinoArguments();
 
 // Parse CLI arguments using lino-arguments
 // Note: Using --release-version instead of --version to avoid conflict with yargs' built-in --version flag

package/scripts/instant-version-bump.mjs

@@ -14,14 +14,13 @@
 
 import { readFileSync, writeFileSync } from 'fs';
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
-
-// Import link-foundation libraries
-const { $ } = await use('command-stream');
-const { makeConfig } = await use('lino-arguments');
+import {
+  loadCommandStream,
+  loadLinoArguments,
+} from '../../scripts/use-module.mjs';
+
+const { $ } = await loadCommandStream();
+const { makeConfig } = await loadLinoArguments();
 
 // Parse CLI arguments using lino-arguments
 const config = makeConfig({

package/scripts/publish-to-npm.mjs

@@ -17,14 +17,13 @@ import { isVersionPublished } from './npm-registry.mjs';
 
 const PACKAGE_NAME = 'browser-commander';
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
-
-// Import link-foundation libraries
-const { $ } = await use('command-stream');
-const { makeConfig } = await use('lino-arguments');
+import {
+  loadCommandStream,
+  loadLinoArguments,
+} from '../../scripts/use-module.mjs';
+
+const { $ } = await loadCommandStream();
+const { makeConfig } = await loadLinoArguments();
 
 // Parse CLI arguments using lino-arguments
 const config = makeConfig({

package/scripts/setup-npm.mjs

@@ -10,13 +10,9 @@
  * - command-stream: Modern shell command execution with streaming support
  */
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
+import { loadCommandStream } from '../../scripts/use-module.mjs';
 
-// Import command-stream for shell command execution
-const { $ } = await use('command-stream');
+const { $ } = await loadCommandStream();
 
 try {
   // Get current npm version

package/scripts/version-and-commit.mjs

@@ -14,14 +14,13 @@
 
 import { readFileSync, appendFileSync, readdirSync } from 'fs';
 
-// Load use-m dynamically
-const { use } = eval(
-  await (await fetch('https://unpkg.com/use-m/use.js')).text()
-);
-
-// Import link-foundation libraries
-const { $ } = await use('command-stream');
-const { makeConfig } = await use('lino-arguments');
+import {
+  loadCommandStream,
+  loadLinoArguments,
+} from '../../scripts/use-module.mjs';
+
+const { $ } = await loadCommandStream();
+const { makeConfig } = await loadLinoArguments();
 
 // Parse CLI arguments using lino-arguments
 const config = makeConfig({

package/src/browser/browser-cookie-credentials.js

@@ -134,7 +134,9 @@ export async function readWindowsEncryptionKey({
   try {
     state = JSON.parse(await readFile(localStatePath, 'utf8'));
   } catch (error) {
-    throw new Error(`Could not read Chromium Local State: ${error.message}`);
+    throw new Error(`Could not read Chromium Local State: ${error.message}`, {
+      cause: error,
+    });
   }
   const encoded = state.os_crypt?.encrypted_key;
   if (!encoded) {