camofox-browser 2.4.6 → 2.4.7

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 ## [Unreleased]
 
+## [2.4.7] - 2026-08-13
+
+### Added
+- Added official Windows x64 headless support and a reproducible portable ZIP build that bundles Node.js, the application runtime, the pinned Camoufox Windows x64 engine, portable runtime state under `data\home`, and third-party licensing notices.
+- Added Windows Node 20/22 CI plus a Windows x64 portable-artifact job that extracts into a path containing spaces and verifies bundled-runtime CLI startup, `/health`, a safe local create/navigate/snapshot/close browser flow, server shutdown, and portable-state placement.
+
+### Changed
+- Server subprocess launches now reuse `process.execPath`, so bundled/embedded Node runtimes do not depend on a globally installed `node` executable on `PATH`.
+- Package release verification is now implemented in cross-platform Node.js instead of Bash and runs on both Ubuntu and Windows CI.
+- The release workflow builds, verifies, and attaches the Windows x64 portable ZIP to tag releases.
+
+### Security
+- Refreshed the dependency lock for current advisories and override `adm-zip` to the patched `0.6.0` release without changing the supported Node floor or `camoufox-js` version.
+
+### Fixed
+- Windows now rejects headed and virtual/Xvfb/VNC display modes before Linux-only display processes can be attempted, while preserving existing Linux/macOS display behavior.
+- New Windows persistent profile directories now use deterministic hashed internal keys, preventing distinct case-sensitive user/session identities from aliasing on case-insensitive Windows filesystems while leaving Linux/macOS profile naming unchanged. Existing Windows directories from the previous layout remain readable in place when the exact legacy name is unambiguous; if both old and hashed directories exist, or Windows resolves a different case/trailing-dot/space-equivalent legacy name, profile launch fails closed and reports the paths to back up/reconcile instead of silently choosing or migrating state.
+- Navigation health recovery now tracks failures per session, counts only actual navigation failures, preserves unrelated sibling sessions, and applies the same recovery behavior to core and OpenClaw tab-opening routes.
+- Concurrent recovery teardown and same-key context relaunch now use opaque session generations and exact context identity guards, preserving a healthy replacement session even when timestamps collide or lifecycle callbacks arrive late.
+
+### Tests
+- Added focused Windows platform and VNC side-effect regression tests plus a launcher test that removes Node from `PATH` and verifies the current runtime is reused.
+- Jest now isolates profiles, cookies, downloads, and traces under a disposable temp root and removes it after the run, preventing test/build verification from accumulating persistent state under the operator's `~/.camofox` directory.
+- Long-running session lifecycle coverage now reclaims its disposable profiles/downloads/cookies/traces after each fully closed case, preventing in-run profile buildup from exhausting Windows CI while retaining every lifecycle assertion.
+- Added production-boundary lifecycle regressions for recovery/relaunch overlap and equal-timestamp collisions, plus real Express coverage for OpenClaw `POST /tabs/open` recovery thresholds, success resets, and non-navigation isolation.
+
 ## [2.4.6] - 2026-06-17
 
 ### Fixed

package/README.md

@@ -13,6 +13,7 @@
 - [Features](#features)
 - [Preview Status](#preview-status)
 - [Quick Start](#quick-start)
+- [Windows x64 Portable](#windows-x64-portable)
 - [CLI](#cli)
 - [Console Capture](#console-capture)
 - [Playwright Tracing](#playwright-tracing)
@@ -128,6 +129,27 @@ camofox click e5
 
 > See [CLI](#cli) for the complete command reference.
 
+## Windows x64 Portable
+
+Windows x64 is supported as a headless-first portable distribution. Release ZIPs are named `camofox-browser-<version>-windows-x64.zip` and contain the Node.js runtime, application runtime, and the pinned Camoufox Windows x64 engine, so a global Node.js installation is not required.
+
+Extract the ZIP to a writable directory and run the bundled launchers from PowerShell or Command Prompt:
+
+```powershell
+.\camofox.cmd --version
+.\camofox.cmd server start --background
+.\camofox.cmd server status
+.\camofox.cmd server stop
+```
+
+Portable runtime state stays under `data\home` inside the extracted directory. This includes camofox-browser's `.camofox` profiles/logs and the bundled Camoufox cache, so the portable distribution does not use the normal Windows user profile for its application state.
+
+The portable ZIP intentionally excludes Camoufox's upstream bundled `fonts/` directory because the exact upstream source explicitly does not permit redistribution of those copyrighted Windows/macOS fonts. On Windows, CamoFox uses fonts installed on the host system instead.
+
+The supported Windows x64 display contract is `headless=true`. `headless=false` and `headless="virtual"` are rejected with a clear error before any Linux-only display process is attempted. Xvfb/VNC virtual display mode remains Linux-only, and native headed Windows mode is not part of the verified support contract.
+
+The release workflow verifies the ZIP after extracting it into a path containing spaces, starts the CLI using bundled Node.js with global Node removed from `PATH`, checks `/health`, runs a local create → navigate → snapshot → close browser flow, and confirms server shutdown and portable-state placement.
+
 ### Using Docker
 
 > Docker image: `ghcr.io/redf0x1/camofox-browser`
@@ -461,7 +483,7 @@ AI Agent (MCP / OpenClaw / REST Client)
 ### Persistent Profiles (v1.3.0)
 
 - Each `userId` runs in its own persistent Firefox process/context (backed by `launchPersistentContext(userDataDir)`)
-- Profile data is stored at `~/.camofox/profiles/{userId}/` (override via `CAMOFOX_PROFILES_DIR`)
+- Profile data is stored under `~/.camofox/profiles/` (override via `CAMOFOX_PROFILES_DIR`). Linux/macOS keep the readable default-user directory name; new Windows profiles use a deterministic hashed directory name so case-insensitive or trailing-dot/space-equivalent user IDs cannot share a Firefox profile. Existing Windows directories from the previous layout are read in place only when their exact on-disk name is unambiguous and no hashed directory also exists; conflicting layouts fail closed with both recovery paths in the error.
 - Idle user contexts are closed via LRU eviction (profile data remains on disk)
 
 ## API Reference
@@ -481,7 +503,7 @@ The OpenAPI spec covers a representative subset of core and OpenClaw endpoints,
 
 ### Core Endpoints
 
-Note: For any endpoint that targets an existing tab (`/tabs/:tabId/...`), the server resolves `tabId` **within a `userId` scope**. If you omit `userId`, you will typically get `404 Tab not found`.
+Note: For any endpoint that targets an existing tab (`/tabs/:tabId/...`), the server resolves `tabId` **within a `userId` scope**. If you omit `userId` from the request body, the server returns `400 { "error": "userId is required" }`. If `userId` is present but the tab belongs to a different user, the server returns `404 Tab not found` — except `DELETE /tabs/:tabId`, which is idempotent and returns `200 { "ok": true }` when no matching tab is found under the given `userId` scope (the tab is already gone from the caller's perspective). For endpoints that accept `userId` as a query parameter (e.g. `GET /tabs/:tabId/snapshot`), omitting it may also result in a `400` or `404` depending on the route.
 
 | Method | Endpoint | Description | Required | Auth |
 |--------|----------|-------------|----------|------|
@@ -539,6 +561,8 @@ POST /sessions/:userId/toggle-display
 **Auth:** Conditional — requires `Authorization: Bearer $CAMOFOX_API_KEY` when `CAMOFOX_AUTH_MODE=required` or when `auto` mode has an API key configured. No auth is required in `CAMOFOX_AUTH_MODE=disabled`.
 Switch browser between headless and headed mode. When encountering CAPTCHAs or issues requiring visual interaction, switch to headed mode to show the browser window.
 
+**Platform note:** The Windows x64 contract is headless-only. Requests with `headless: false` or `headless: "virtual"` return HTTP 400 on Windows. The Xvfb/VNC behavior described below is Linux-only.
+
 Returns:
 ```json
 {"ok": true, "headless": "virtual", "vncUrl": "http://localhost:6080/vnc.html?autoconnect=true&resize=scale&token=...", "message": "Browser visible via VNC", "userId": "agent1"}
@@ -547,7 +571,7 @@ Returns:
 **Note:** This restarts the browser context. All tabs are invalidated but cookies/auth state persist via the persistent profile.
 
 ### Browser Viewer (noVNC)
-When the display mode is set to `"virtual"` or `false`, the server automatically starts a VNC viewer accessible via web browser.
+On Linux, when the display mode is set to `"virtual"` or a headed request requires a virtual display, the server can start a VNC viewer accessible via web browser.
 
 ```bash
 # 1. Switch to virtual mode
@@ -839,7 +863,7 @@ Then use profiles by name in API requests or CLI commands.
 | `CAMOFOX_AUTH_MODE` | `auto` | API-key policy: `auto` allows loopback without auth and requires `CAMOFOX_API_KEY` for non-loopback binds; `required` requires `CAMOFOX_API_KEY` for every bind; `disabled` disables API-key auth for protected endpoints and is only for trusted private agent networks. |
 | `CAMOFOX_API_KEY` | (empty) | Guards protected endpoints (tab creation, navigation, interaction, session management, downloads, image extraction, tracing, console) via `Authorization: Bearer` header when set. Required in `CAMOFOX_AUTH_MODE=required`, and required by `auto` whenever `CAMOFOX_HOST` exposes the server beyond loopback. Must be unset when `CAMOFOX_AUTH_MODE=disabled`. |
 | `CAMOFOX_ALLOW_PRIVATE_NETWORK` | `true` on loopback binds, `false` otherwise | Allows navigation to loopback/private/link-local/metadata targets. Leave unset for the safe default; enable only for trusted deployments that intentionally need internal-network reachability. |
-| `CAMOFOX_HEADLESS` | `true` | Display mode: `true` (headless), `false` (headed), `virtual` (Xvfb) |
+| `CAMOFOX_HEADLESS` | `true` | Display mode: `true` (headless), `false` (headed), `virtual` (Xvfb). Windows x64 supports `true` only; Xvfb/VNC is Linux-only. |
 | `CAMOFOX_VNC_RESOLUTION` | `1920x1080x24` | Virtual Xvfb display resolution (`WIDTHxHEIGHTxDEPTH`) |
 | `CAMOFOX_VNC_TIMEOUT_MS` | `120000` | Max VNC session duration in ms before auto-stop |
 | `CAMOFOX_EVAL_EXTENDED_RATE_LIMIT_MAX` | `20` | Max evaluate-extended requests per user per window |

package/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,49 @@
+# Third-Party Notices
+
+The portable Windows distribution redistributes the following runtime components in addition to camofox-browser itself.
+
+## Node.js v22.23.2
+
+- Project: https://nodejs.org/
+- Source: https://github.com/nodejs/node/tree/v22.23.2
+- License: MIT, with additional third-party notices included by the upstream Node.js distribution.
+- The upstream `LICENSE` file is retained in the portable bundle under `node/LICENSE`.
+
+## Camoufox v152.0.4-beta.28
+
+- Project: https://github.com/daijro/camoufox
+- Source: https://github.com/daijro/camoufox/tree/v152.0.4-beta.28
+- License: Mozilla Public License 2.0 (MPL-2.0).
+- The portable bundle redistributes the Windows x64 browser/runtime from the exact upstream release, with the upstream `fonts/` directory deliberately removed.
+- The exact upstream tag states that its Windows/macOS bundled fonts are copyrighted and are not intended or permitted for redistribution. Those fonts are therefore not included in this portable distribution; Windows uses the fonts installed on the host system.
+- The exact Camoufox MPL-2.0 text is retained at `licenses/Camoufox-MPL-2.0.txt`, and the corresponding source is available from the exact source tag above.
+
+## camoufox-js 0.8.5
+
+- Project: https://github.com/apify/camoufox-js
+- Source revision published by npm: https://github.com/apify/camoufox-js/tree/afce2afa1300f1a938c0eb04aae92ff73fcd2c5b
+- License: Mozilla Public License 2.0 (MPL-2.0).
+- The package license is retained under `app/node_modules/camoufox-js/`.
+
+## impit 0.7.6 / impit-win32-x64-msvc 0.7.6
+
+- Project: https://github.com/apify/impit
+- Source revision published by npm: https://github.com/apify/impit/tree/be0331c1ea34349a6d97c5f269a4af1d21d783e7
+- License: Apache License 2.0.
+- The Windows x64 native package is required by `impit`, a runtime dependency of `camoufox-js`.
+- A copy of the Apache License 2.0 is retained in the portable bundle at `licenses/Apache-2.0.txt`.
+
+## playwright-core 1.58.1 / VS Code Codicon assets
+
+- Project: https://github.com/microsoft/playwright/tree/v1.58.1
+- `playwright-core` is Apache-2.0 and retains its upstream `LICENSE`, `NOTICE`, and `ThirdPartyNotices.txt` under `app/node_modules/playwright-core/`.
+- Playwright's bundled Codicon font assets originate from its `packages/web/src/third_party/vscode/` source directory and are covered there by the MIT License, Copyright (c) 2015 - present Microsoft Corporation.
+- The exact upstream MIT license text for those Codicon assets is retained at `licenses/Playwright-VSCode-Codicon-MIT.txt`.
+
+The Mozilla Public License 2.0 text used by `camoufox-js` is retained at `licenses/MPL-2.0.txt`. The Camoufox executable and browser runtime correspond to upstream `v152.0.4-beta.28`, except for the excluded `fonts/` payload described above.
+
+## Other npm runtime dependencies
+
+Production npm dependencies are installed from the repository lockfile with their package metadata and license files preserved under `app/node_modules/`. Refer to each package's included `package.json` and license file for its applicable terms.
+
+camoufox-browser itself is licensed under the MIT License; see `app/LICENSE` in the portable bundle.

package/dist/src/cli/server/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../../src/cli/server/manager.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB;AAID,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,IAAI,CAAC,EAAE,MAAM;WAOX,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM;IAOvC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ9B,WAAW,CAAC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmC3G,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAqB/B,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAkB7B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;YAe5B,WAAW;IAQzB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,UAAU;YASJ,KAAK;YAOL,WAAW;IAoBzB,OAAO,CAAC,MAAM,CAAC,WAAW;CAG1B"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../../src/cli/server/manager.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB;AAID,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,IAAI,CAAC,EAAE,MAAM;WAOX,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM;IAOvC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ9B,WAAW,CAAC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmC3G,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAqB/B,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAkB7B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;YAe5B,WAAW;IAQzB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,UAAU;YASJ,KAAK;YAIL,WAAW;IAoBzB,OAAO,CAAC,MAAM,CAAC,WAAW;CAG1B"}

package/dist/src/cli/server/manager.js

@@ -177,10 +177,7 @@ class ServerManager {
         }
     }
     async delay(ms) {
-        await new Promise((resolve) => {
-            const timer = setTimeout(() => resolve(), ms);
-            timer.unref();
-        });
+        await new Promise((resolve) => setTimeout(resolve, ms));
     }
     async isPortInUse(port) {
         return new Promise((resolve) => {

package/dist/src/cli/server/manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../src/cli/server/manager.ts"],"names":[],"mappings":";;;AAAA,qCAA0G;AAC1G,qCAAkC;AAClC,yCAA0C;AAC1C,2DAA2C;AAE3C,+CAAgD;AAChD,uCAAkC;AAUlC,MAAM,eAAe,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC;AAEjF,MAAa,aAAa;IACR,IAAI,CAAS;IACb,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,WAAW,CAAS;IAErC,YAAY,IAAa;QACxB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IAEM,MAAM,CAAC,OAAO,CAAC,YAAqB;QAC1C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YACjF,OAAO,YAAY,CAAC;QACrB,CAAC;QACD,OAAO,IAAA,mBAAU,GAAE,CAAC,IAAI,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO;YAAE,OAAO;QAEpB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,OAA+E;QACvG,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACd,QAAQ,UAAU,mGAAmG,CACrH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE;gBACxD,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC/B,GAAG,EAAE;oBACJ,GAAG,GAAG,CAAC,SAAS;oBAChB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;oBACxB,uBAAuB,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC;oBAC5E,4BAA4B,EAAE,MAAM,CAAC,OAAO,EAAE,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC;oBACzF,uBAAuB,EAAE,IAAI,CAAC,WAAW;iBACzC;aACD,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC1D,CAAC;YAED,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACV,IAAA,mBAAS,EAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,OAAO;YACR,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,UAAU,CAAC,CAAC;IACxE,CAAC;IAEM,KAAK,CAAC,MAAM;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAe,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBACJ,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,GAAG,SAAS,CAAC;YACpB,CAAC;QACF,CAAC;QAED,OAAO;YACN,OAAO;YACP,GAAG;YACH,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,SAAS;YACxB,SAAS,EAAE,MAAM,CAAE,MAA6C,EAAE,QAAQ,IAAI,CAAC,CAAC;SAChF,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7D,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YAChE,OAAO,IAAI,EAAE,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,YAAY;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,GAAG,CAAC;QAElB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;YACzC,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC5B,OAAO;YACR,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,IAAI,oBAAoB,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,WAAW;QACxB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,iBAAiB;QACxB,IAAA,mBAAS,EAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,IAAA,mBAAS,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEO,OAAO;QACd,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAEO,kBAAkB,CAAC,GAAW;QACrC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACxE,IAAA,uBAAa,EAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAA,oBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAEO,cAAc;QACrB,IAAI,CAAC;YACJ,IAAA,gBAAM,EAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,SAAS;QACV,CAAC;IACF,CAAC;IAEO,UAAU,CAAC,GAAW;QAC7B,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAU;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9C,KAAK,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY;QACrC,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,IAAI,iBAAM,EAAE,CAAC;YAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,MAAM,GAAG,CAAC,MAAe,EAAQ,EAAE;gBACxC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,IAAY;QACtC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC;IAC7D,CAAC;CACD;AAzND,sCAyNC"}
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../src/cli/server/manager.ts"],"names":[],"mappings":";;;AAAA,qCAA0G;AAC1G,qCAAkC;AAClC,yCAA0C;AAC1C,2DAA2C;AAE3C,+CAAgD;AAChD,uCAAkC;AAUlC,MAAM,eAAe,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC;AAEjF,MAAa,aAAa;IACR,IAAI,CAAS;IACb,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,WAAW,CAAS;IAErC,YAAY,IAAa;QACxB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IAEM,MAAM,CAAC,OAAO,CAAC,YAAqB;QAC1C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YACjF,OAAO,YAAY,CAAC;QACrB,CAAC;QACD,OAAO,IAAA,mBAAU,GAAE,CAAC,IAAI,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO;YAAE,OAAO;QAEpB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,OAA+E;QACvG,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACd,QAAQ,UAAU,mGAAmG,CACrH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE;gBACxD,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC/B,GAAG,EAAE;oBACJ,GAAG,GAAG,CAAC,SAAS;oBAChB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;oBACxB,uBAAuB,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC;oBAC5E,4BAA4B,EAAE,MAAM,CAAC,OAAO,EAAE,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC;oBACzF,uBAAuB,EAAE,IAAI,CAAC,WAAW;iBACzC;aACD,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC1D,CAAC;YAED,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACV,IAAA,mBAAS,EAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,OAAO;YACR,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,UAAU,CAAC,CAAC;IACxE,CAAC;IAEM,KAAK,CAAC,MAAM;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAe,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBACJ,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,GAAG,SAAS,CAAC;YACpB,CAAC;QACF,CAAC;QAED,OAAO;YACN,OAAO;YACP,GAAG;YACH,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,SAAS;YACxB,SAAS,EAAE,MAAM,CAAE,MAA6C,EAAE,QAAQ,IAAI,CAAC,CAAC;SAChF,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7D,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YAChE,OAAO,IAAI,EAAE,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,YAAY;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,GAAG,CAAC;QAElB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;YACzC,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC5B,OAAO;YACR,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,IAAI,oBAAoB,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,WAAW;QACxB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,iBAAiB;QACxB,IAAA,mBAAS,EAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,IAAA,mBAAS,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEO,OAAO;QACd,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAEO,kBAAkB,CAAC,GAAW;QACrC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACxE,IAAA,uBAAa,EAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAA,oBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAEO,cAAc;QACrB,IAAI,CAAC;YACJ,IAAA,gBAAM,EAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,SAAS;QACV,CAAC;IACF,CAAC;IAEO,UAAU,CAAC,GAAW;QAC7B,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAU;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY;QACrC,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,IAAI,iBAAM,EAAE,CAAC;YAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,MAAM,GAAG,CAAC,MAAe,EAAQ,EAAE;gBACxC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,IAAY;QACtC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC;IAC7D,CAAC;CACD;AAtND,sCAsNC"}

package/dist/src/routes/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/routes/core.ts"],"names":[],"mappings":"AAmHA,QAAA,MAAM,MAAM,4CAAW,CAAC;AAk0DxB,eAAe,MAAM,CAAC"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/routes/core.ts"],"names":[],"mappings":"AA0HA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA22DxB,eAAe,MAAM,CAAC"}

package/dist/src/routes/core.js

@@ -45,9 +45,12 @@ const logging_1 = require("../middleware/logging");
 const auth_1 = require("../middleware/auth");
 const rate_limit_1 = require("../middleware/rate-limit");
 const config_1 = require("../utils/config");
+const platform_support_1 = require("../utils/platform-support");
 const presets_1 = require("../utils/presets");
 const context_pool_1 = require("../services/context-pool");
 const lifecycle_controller_1 = require("../services/lifecycle-controller");
+const health_1 = require("../services/health");
+const nav_recovery_1 = require("../services/nav-recovery");
 const vnc_1 = require("../services/vnc");
 const session_1 = require("../services/session");
 const tab_1 = require("../services/tab");
@@ -283,12 +286,18 @@ router.get('/presets', (_req, res) => {
 router.post('/tabs', async (req, res) => {
     let createUserId;
     let createSessionKey;
+    let createSessionMapKey;
     let createdSessionProfile = false;
     let createdSessionProfileSignature;
     let createdDefaultSessionProfileClaim = false;
     let releaseSessionProfileCreate;
     let isFirstCreator = false;
     let stagedGeneration;
+    // Track whether the error (if any) occurred during navigation
+    // vs. provisioning. Only navigation errors should be counted
+    // toward the nav failure threshold — provisioning errors
+    // (session creation, mutex, profile) are a different class.
+    let navError = false;
     try {
         if (CONFIG.apiKey && !(0, auth_1.isAuthorizedWithApiKey)(req, CONFIG.apiKey)) {
             return res.status(403).json({ error: 'Forbidden' });
@@ -427,6 +436,7 @@ router.post('/tabs', async (req, res) => {
         const sessionMapKey = establishedProfile
             ? (0, session_1.getSessionMapKey)(userId, resolvedSessionKey, establishedProfile.signature)
             : (0, session_1.getSessionMapKey)(userId, contextOverrides);
+        createSessionMapKey = sessionMapKey;
         let tabId;
         let pageUrl;
         if (isFirstCreator) {
@@ -440,11 +450,15 @@ router.post('/tabs', async (req, res) => {
             (0, download_1.registerDownloadListener)(tabId, String(userId), page);
             (0, download_1.markDownloadsStaged)(tabId);
             if (url) {
+                navError = true;
                 await (0, tab_1.navigateWithSafetyGuard)(page, url, {
                     allowPrivateNetworkTargets: CONFIG.allowPrivateNetworkTargets,
                     waitUntil: 'domcontentloaded',
                     timeout: 30000,
                 });
+                navError = false;
+                // Record success immediately after navigation resolves.
+                (0, health_1.recordNavSuccess)(String(userId), sessionMapKey);
                 tabState.visitedUrls.add(url);
             }
             const committed = (0, session_1.commitStagedFirstUse)(userId, session, contextOverrides, {
@@ -493,11 +507,15 @@ router.post('/tabs', async (req, res) => {
             (0, session_1.indexTab)(tabId, sessionMapKey);
             (0, download_1.registerDownloadListener)(tabId, String(userId), page);
             if (url) {
+                navError = true;
                 await (0, tab_1.navigateWithSafetyGuard)(page, url, {
                     allowPrivateNetworkTargets: CONFIG.allowPrivateNetworkTargets,
                     waitUntil: 'domcontentloaded',
                     timeout: 30000,
                 });
+                navError = false;
+                // Record success immediately after navigation resolves.
+                (0, health_1.recordNavSuccess)(String(userId), sessionMapKey);
                 tabState.visitedUrls.add(url);
             }
             pageUrl = page.url();
@@ -539,6 +557,12 @@ router.post('/tabs', async (req, res) => {
         releaseSessionProfileCreate = undefined;
         const message = err instanceof Error ? err.message : String(err);
         (0, logging_1.log)('error', 'tab create failed', { reqId: req.reqId, error: message });
+        // Only count navigation errors toward the failure threshold —
+        // provisioning errors (session creation, mutex, profile) are
+        // a different class and should not trigger browser recovery.
+        if (navError) {
+            await (0, nav_recovery_1.handleNavFailure)(String(createUserId ?? ''), createSessionMapKey);
+        }
         return res.status(getRouteErrorStatus(err)).json({ error: (0, errors_1.safeError)(err) });
     }
 });
@@ -574,6 +598,8 @@ router.get('/tabs', async (req, res) => {
 // Navigate
 router.post('/tabs/:tabId/navigate', async (req, res) => {
     const tabId = req.params.tabId;
+    let navError = false;
+    let foundSessionKey;
     try {
         if (CONFIG.apiKey && !(0, auth_1.isAuthorizedWithApiKey)(req, CONFIG.apiKey)) {
             return res.status(403).json({ error: 'Forbidden' });
@@ -584,6 +610,7 @@ router.post('/tabs/:tabId/navigate', async (req, res) => {
         const found = (0, session_1.findTabById)(tabId, userId);
         if (!found)
             return res.status(404).json({ error: 'Tab not found' });
+        foundSessionKey = found.sessionKey;
         const { tabState } = found;
         tabState.toolCalls++;
         const result = await (0, session_1.withUserLimit)(String(userId), CONFIG.maxConcurrentPerUser, () => (0, tab_1.withTimeout)((0, tab_1.withTabLock)(tabId, async () => {
@@ -599,11 +626,21 @@ router.post('/tabs/:tabId/navigate', async (req, res) => {
             });
             if (urlErr)
                 return { status: 400, body: { error: urlErr } };
+            // Arm navError only around the actual navigation attempt —
+            // limiter/timeout/lock, macro expansion, validation, and
+            // buildRefs failures are NOT navigation errors and must not
+            // advance the recovery threshold.
+            navError = true;
             await (0, tab_1.navigateWithSafetyGuard)(tabState.page, targetUrl, {
                 allowPrivateNetworkTargets: CONFIG.allowPrivateNetworkTargets,
                 waitUntil: 'domcontentloaded',
                 timeout: 30000,
             });
+            navError = false;
+            // Record success immediately after navigation resolves —
+            // a buildRefs failure after this must NOT prevent the
+            // counter reset, since the navigation itself succeeded.
+            (0, health_1.recordNavSuccess)(String(req.body.userId), foundSessionKey);
             tabState.visitedUrls.add(targetUrl);
             tabState.refs = await (0, tab_1.buildRefs)(tabState.page);
             return { status: 200, body: { ok: true, url: tabState.page.url() } };
@@ -617,6 +654,9 @@ router.post('/tabs/:tabId/navigate', async (req, res) => {
     catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         (0, logging_1.log)('error', 'navigate failed', { reqId: req.reqId, tabId, error: message });
+        if (navError) {
+            await (0, nav_recovery_1.handleNavFailure)(String(req.body.userId ?? ''), foundSessionKey);
+        }
         return res.status(getRouteErrorStatus(err)).json({ error: (0, errors_1.safeError)(err) });
     }
 });
@@ -808,6 +848,8 @@ router.post('/tabs/:tabId/evaluate', express_1.default.json({ limit: '64kb' }),
             return res.status(403).json({ error: 'Forbidden' });
         }
         const { userId, expression, timeout } = req.body;
+        if (!userId)
+            return res.status(400).json({ error: 'userId is required' });
         if (!expression || typeof expression !== 'string') {
             return res.status(400).json({ error: 'expression is required and must be a string' });
         }
@@ -1085,6 +1127,8 @@ router.delete('/tabs/:tabId', async (req, res) => {
             return res.status(403).json({ error: 'Forbidden' });
         }
         const { userId } = req.body;
+        if (!userId)
+            return res.status(400).json({ error: 'userId is required' });
         const found = (0, session_1.findTabById)(req.params.tabId, userId);
         if (found) {
             await (0, tab_1.safePageClose)(found.tabState.page);
@@ -1169,6 +1213,7 @@ router.post('/sessions/:userId/toggle-display', async (req, res) => {
                 error: 'headless must be a boolean or "virtual"',
             });
         }
+        (0, platform_support_1.assertBrowserPlatformSupported)((0, platform_support_1.getHostOS)(), (0, platform_support_1.getHostArchitecture)(), headless);
         const existingSessions = (0, session_1.getSessionsForUser)(userId);
         const prewarmProfileKey = existingSessions.length === 1 ? existingSessions[0][0] : undefined;
         const prewarmEntry = prewarmProfileKey ? context_pool_1.contextPool.getEntry(prewarmProfileKey) : undefined;
@@ -1224,7 +1269,7 @@ router.post('/sessions/:userId/toggle-display', async (req, res) => {
     catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         (0, logging_1.log)('error', 'toggle display failed', { error: message });
-        return res.status(500).json({ error: (0, errors_1.safeError)(err) });
+        return res.status(getRouteErrorStatus(err)).json({ error: (0, errors_1.safeError)(err) });
     }
 });
 // Downloads: list by tab