dev3000 0.0.185 → 0.0.187

package/dist/runtime/bridge.js

@@ -0,0 +1,340 @@
+import { randomUUID, timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+import { WebSocket, WebSocketServer } from "ws";
+const MAX_BYTES = 16 * 1024 * 1024;
+const MAX_CHANNELS = 32;
+const TIMEOUT = 15000;
+function send(socket, frame) {
+    if (!socket || socket.readyState !== WebSocket.OPEN)
+        return false;
+    if (socket.bufferedAmount > MAX_BYTES) {
+        socket.terminate();
+        return false;
+    }
+    socket.send(JSON.stringify(frame));
+    return true;
+}
+export function isDiscoveryPath(path, method) {
+    return method === "GET" && ["/json", "/json/list", "/json/version"].includes(path);
+}
+export function isDevtoolsPath(path) {
+    return /^\/devtools\/(page|browser)\/[a-zA-Z0-9-]+$/.test(path);
+}
+export function rewriteDiscovery(body, base) {
+    return JSON.stringify(JSON.parse(body), (key, value) => {
+        if (key !== "webSocketDebuggerUrl" || typeof value !== "string")
+            return value;
+        const path = new URL(value).pathname;
+        if (!isDevtoolsPath(path))
+            throw new Error("Invalid Chrome debugger path");
+        return `${base.replace(/^http/, "ws")}${path}`;
+    });
+}
+async function listen(server, host, port) {
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, host, resolve);
+    });
+    const address = server.address();
+    if (!address || typeof address === "string")
+        throw new Error("Bridge did not bind a TCP port");
+    return address.port;
+}
+/** Public ingress accepts only the paired companion. CDP discovery/control is loopback-only. */
+export async function startBridge(options) {
+    if (!/^[a-f0-9]{64}$/.test(options.token))
+        throw new Error("Bridge token must be 32 random bytes in hex");
+    let companion;
+    const channels = new Map();
+    const pending = new Map();
+    const ingress = createServer((_request, response) => {
+        response.writeHead(404).end();
+    });
+    const upgrades = new WebSocketServer({ noServer: true, maxPayload: MAX_BYTES, perMessageDeflate: false });
+    const cdpUpgrades = new WebSocketServer({ noServer: true, maxPayload: MAX_BYTES, perMessageDeflate: false });
+    let base = "";
+    const reset = () => {
+        companion = undefined;
+        for (const socket of channels.values())
+            socket.terminate();
+        channels.clear();
+        for (const { response, timer } of pending.values()) {
+            clearTimeout(timer);
+            response.writeHead(503).end("Browser disconnected");
+        }
+        pending.clear();
+        options.onState?.(false);
+    };
+    ingress.on("upgrade", (request, socket, head) => {
+        const supplied = Buffer.from(request.headers.authorization || "");
+        const expected = Buffer.from(`Bearer ${options.token}`);
+        if (request.url !== "/bridge" ||
+            request.headers.origin ||
+            supplied.length !== expected.length ||
+            !timingSafeEqual(supplied, expected) ||
+            companion) {
+            socket.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n");
+            return;
+        }
+        upgrades.handleUpgrade(request, socket, head, (ws) => {
+            companion = ws;
+            let alive = true;
+            const heartbeat = setInterval(() => {
+                if (!alive) {
+                    ws.terminate();
+                    return;
+                }
+                alive = false;
+                send(ws, { id: "heartbeat", type: "heartbeat" });
+                ws.ping();
+            }, 20000);
+            ws.on("error", () => ws.terminate());
+            ws.on("close", () => {
+                clearInterval(heartbeat);
+                reset();
+            });
+            ws.on("message", (data) => {
+                try {
+                    const frame = JSON.parse(data.toString());
+                    if (typeof frame.id !== "string")
+                        throw new Error("Invalid bridge frame");
+                    if (frame.type === "heartbeat-ack") {
+                        alive = true;
+                    }
+                    else if (frame.type === "response") {
+                        const item = pending.get(frame.id);
+                        if (!item)
+                            return;
+                        let body = frame.body || "";
+                        if (frame.status === 200)
+                            body = rewriteDiscovery(body, base);
+                        clearTimeout(item.timer);
+                        pending.delete(frame.id);
+                        item.response
+                            .writeHead(frame.status === 200 ? 200 : 502, {
+                            "content-type": "application/json",
+                            "cache-control": "no-store"
+                        })
+                            .end(body);
+                    }
+                    else {
+                        const channel = channels.get(frame.id);
+                        if (frame.type === "data" && typeof frame.body === "string" && channel?.readyState === WebSocket.OPEN) {
+                            if (channel.bufferedAmount > MAX_BYTES) {
+                                channel.terminate();
+                                return;
+                            }
+                            channel.send(frame.body);
+                        }
+                        else if (frame.type === "close")
+                            channel?.terminate();
+                    }
+                }
+                catch {
+                    ws.terminate();
+                }
+            });
+            options.onState?.(true);
+        });
+    });
+    const cdp = createServer((request, response) => {
+        if (request.headers.origin ||
+            !isDiscoveryPath(request.url || "", request.method || "") ||
+            !companion ||
+            pending.size >= MAX_CHANNELS) {
+            response.writeHead(503).end("Browser unavailable or unsupported CDP request");
+            return;
+        }
+        const id = randomUUID();
+        const timer = setTimeout(() => {
+            pending.delete(id);
+            response.writeHead(504).end();
+        }, TIMEOUT);
+        pending.set(id, { response, timer });
+        response.on("close", () => {
+            clearTimeout(timer);
+            pending.delete(id);
+        });
+        send(companion, { id, type: "request", path: request.url, method: request.method });
+    });
+    cdp.on("upgrade", (request, socket, head) => {
+        if (request.headers.origin || !isDevtoolsPath(request.url || "") || !companion || channels.size >= MAX_CHANNELS) {
+            socket.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n");
+            return;
+        }
+        cdpUpgrades.handleUpgrade(request, socket, head, (ws) => {
+            const id = randomUUID();
+            channels.set(id, ws);
+            send(companion, { id, type: "open", path: request.url });
+            // Hold commands until the companion's Chrome WebSocket has opened.
+            ws.on("message", (data) => send(companion, { id, type: "data", body: data.toString() }));
+            ws.on("error", () => ws.terminate());
+            ws.on("close", () => {
+                channels.delete(id);
+                send(companion, { id, type: "close" });
+            });
+        });
+    });
+    try {
+        const cdpPort = await listen(cdp, "127.0.0.1", 0);
+        base = `http://127.0.0.1:${cdpPort}`;
+        const port = await listen(ingress, options.host || "0.0.0.0", options.port);
+        return {
+            cdpBase: base,
+            port,
+            connected: () => companion?.readyState === WebSocket.OPEN,
+            close: async () => {
+                companion?.terminate();
+                reset();
+                upgrades.close();
+                cdpUpgrades.close();
+                await Promise.all([ingress, cdp].map((server) => new Promise((resolve) => server.close(() => resolve()))));
+            }
+        };
+    }
+    catch (error) {
+        ingress.close();
+        cdp.close();
+        throw error;
+    }
+}
+/** Only talks to our dedicated loopback Chrome. Never accepts a remote hostname or arbitrary HTTP path. */
+export function connectCompanion(options) {
+    const url = new URL(options.url);
+    if (url.protocol !== "wss:" && !(options.allowLoopback && url.protocol === "ws:" && url.hostname === "127.0.0.1")) {
+        throw new Error("Companion requires a secure WebSocket URL");
+    }
+    if (!/^[a-f0-9]{64}$/.test(options.token) ||
+        !Number.isInteger(options.chromePort) ||
+        options.chromePort < 1 ||
+        options.chromePort > 65535)
+        throw new Error("Invalid companion configuration");
+    let stopped = false;
+    let socket;
+    let retry;
+    let attempt = 0;
+    const connect = () => {
+        if (stopped)
+            return;
+        const channels = new Map();
+        const requests = new Set();
+        const ws = new WebSocket(url, {
+            headers: { authorization: `Bearer ${options.token}` },
+            maxPayload: MAX_BYTES,
+            perMessageDeflate: false,
+            handshakeTimeout: TIMEOUT
+        });
+        socket = ws;
+        let lastActivity = Date.now();
+        let lastTick = Date.now();
+        const heartbeat = setInterval(() => {
+            const now = Date.now();
+            // After laptop sleep, queued frames can look fresh while the edge tunnel is already stale.
+            if (now - lastTick > 60000 || now - lastActivity > 60000)
+                ws.terminate();
+            lastTick = now;
+        }, 20000);
+        ws.on("open", () => {
+            attempt = 0;
+            options.onState?.(true);
+        });
+        ws.on("error", () => ws.terminate());
+        ws.on("close", () => {
+            clearInterval(heartbeat);
+            for (const { ws: chrome } of channels.values())
+                chrome.terminate();
+            for (const controller of requests)
+                controller.abort();
+            options.onState?.(false);
+            if (!stopped)
+                retry = setTimeout(connect, Math.min(10000, 500 * 2 ** attempt++));
+        });
+        ws.on("message", (data) => {
+            lastActivity = Date.now();
+            try {
+                const frame = JSON.parse(data.toString());
+                if (typeof frame.id !== "string" || frame.id.length > 100)
+                    throw new Error("Invalid frame");
+                if (frame.type === "heartbeat") {
+                    send(ws, { id: frame.id, type: "heartbeat-ack" });
+                }
+                else if (frame.type === "request") {
+                    if (!isDiscoveryPath(frame.path || "", frame.method || "") || requests.size >= MAX_CHANNELS)
+                        throw new Error("Invalid discovery request");
+                    const controller = new AbortController();
+                    requests.add(controller);
+                    const timeout = setTimeout(() => controller.abort(), TIMEOUT);
+                    void fetch(`http://127.0.0.1:${options.chromePort}${frame.path}`, {
+                        method: frame.method,
+                        signal: controller.signal,
+                        redirect: "error"
+                    })
+                        .then(async (response) => {
+                        const body = await response.text();
+                        if (Buffer.byteLength(body) > MAX_BYTES / 2)
+                            throw new Error("Discovery response too large");
+                        send(ws, { id: frame.id, type: "response", status: response.status, body });
+                    })
+                        .catch(() => send(ws, { id: frame.id, type: "response", status: 502 }))
+                        .finally(() => {
+                        clearTimeout(timeout);
+                        requests.delete(controller);
+                    });
+                }
+                else if (frame.type === "open") {
+                    if (!isDevtoolsPath(frame.path || "") || channels.has(frame.id) || channels.size >= MAX_CHANNELS)
+                        throw new Error("Invalid CDP channel");
+                    const chrome = new WebSocket(`ws://127.0.0.1:${options.chromePort}${frame.path}`, {
+                        maxPayload: MAX_BYTES,
+                        perMessageDeflate: false,
+                        handshakeTimeout: TIMEOUT
+                    });
+                    const channel = { ws: chrome, queued: [], bytes: 0 };
+                    channels.set(frame.id, channel);
+                    chrome.on("open", () => {
+                        for (const body of channel.queued)
+                            chrome.send(body);
+                        channel.queued = [];
+                        channel.bytes = 0;
+                    });
+                    chrome.on("message", (data) => send(ws, { id: frame.id, type: "data", body: data.toString() }));
+                    chrome.on("error", () => chrome.terminate());
+                    chrome.on("close", () => {
+                        channels.delete(frame.id);
+                        send(ws, { id: frame.id, type: "close" });
+                    });
+                }
+                else {
+                    const channel = channels.get(frame.id);
+                    if (frame.type === "close")
+                        channel?.ws.terminate();
+                    else if (frame.type === "data" && channel && typeof frame.body === "string") {
+                        if (channel.ws.readyState === WebSocket.OPEN) {
+                            if (channel.ws.bufferedAmount > MAX_BYTES)
+                                throw new Error("Slow Chrome consumer");
+                            channel.ws.send(frame.body);
+                        }
+                        else if (channel.ws.readyState === WebSocket.CONNECTING) {
+                            channel.bytes += Buffer.byteLength(frame.body);
+                            if (channel.bytes > MAX_BYTES)
+                                throw new Error("CDP startup queue full");
+                            channel.queued.push(frame.body);
+                        }
+                    }
+                }
+            }
+            catch {
+                ws.terminate();
+            }
+        });
+    };
+    connect();
+    return {
+        close: () => {
+            stopped = true;
+            clearTimeout(retry);
+            socket?.terminate();
+        }
+    };
+}
+//# sourceMappingURL=bridge.js.map

package/dist/runtime/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/runtime/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,YAAY,EAAoC,MAAM,WAAW,CAAA;AAC1E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,IAAI,CAAA;AAE/C,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAClC,MAAM,YAAY,GAAG,EAAE,CAAA;AACvB,MAAM,OAAO,GAAG,KAAK,CAAA;AAGrB,SAAS,IAAI,CAAC,MAA6B,EAAE,KAAY;IACvD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACjE,IAAI,MAAM,CAAC,cAAc,GAAG,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,SAAS,EAAE,CAAA;QAClB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IAClC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,OAAO,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,GAAG,KAAK,sBAAsB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAA;QACpC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC1E,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,IAAY;IAC9D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAC9F,OAAO,OAAO,CAAC,IAAI,CAAA;AACrB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAKjC;IACC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACzG,IAAI,SAAgC,CAAA;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+D,CAAA;IACtF,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QAClD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC/B,CAAC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IACzG,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5G,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,SAAS,GAAG,SAAS,CAAA;QACrB,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,CAAC,SAAS,EAAE,CAAA;QAC1D,QAAQ,CAAC,KAAK,EAAE,CAAA;QAChB,KAAK,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,CAAA;QACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QACvD,IACE,OAAO,CAAC,GAAG,KAAK,SAAS;YACzB,OAAO,CAAC,OAAO,CAAC,MAAM;YACtB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACpC,SAAS,EACT,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAA;YACjE,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YACnD,SAAS,GAAG,EAAE,CAAA;YACd,IAAI,KAAK,GAAG,IAAI,CAAA;YAChB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBACjC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,EAAE,CAAC,SAAS,EAAE,CAAA;oBACd,OAAM;gBACR,CAAC;gBACD,KAAK,GAAG,KAAK,CAAA;gBACb,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;gBAChD,EAAE,CAAC,IAAI,EAAE,CAAA;YACX,CAAC,EAAE,KAAK,CAAC,CAAA;YACT,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAA;YACpC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAClB,aAAa,CAAC,SAAS,CAAC,CAAA;gBACxB,KAAK,EAAE,CAAA;YACT,CAAC,CAAC,CAAA;YACF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAU,CAAA;oBAClD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;oBACzE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;wBACnC,KAAK,GAAG,IAAI,CAAA;oBACd,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;wBACrC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;wBAClC,IAAI,CAAC,IAAI;4BAAE,OAAM;wBACjB,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAA;wBAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;4BAAE,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;wBAC7D,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;wBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;wBACxB,IAAI,CAAC,QAAQ;6BACV,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;4BAC3C,cAAc,EAAE,kBAAkB;4BAClC,eAAe,EAAE,UAAU;yBAC5B,CAAC;6BACD,GAAG,CAAC,IAAI,CAAC,CAAA;oBACd,CAAC;yBAAM,CAAC;wBACN,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;wBACtC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;4BACtG,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,EAAE,CAAC;gCACvC,OAAO,CAAC,SAAS,EAAE,CAAA;gCACnB,OAAM;4BACR,CAAC;4BACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;wBAC1B,CAAC;6BAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;4BAAE,OAAO,EAAE,SAAS,EAAE,CAAA;oBACzD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,EAAE,CAAC,SAAS,EAAE,CAAA;gBAChB,CAAC;YACH,CAAC,CAAC,CAAA;YACF,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC7C,IACE,OAAO,CAAC,OAAO,CAAC,MAAM;YACtB,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACzD,CAAC,SAAS;YACV,OAAO,CAAC,IAAI,IAAI,YAAY,EAC5B,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAA;YAC7E,OAAM;QACR,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAClB,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QAC/B,CAAC,EAAE,OAAO,CAAC,CAAA;QACX,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC1C,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;YAChH,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAA;YACjE,OAAM;QACR,CAAC;QACD,WAAW,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YACtD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;YACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YACpB,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;YACxD,mEAAmE;YACnE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAA;YACxF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAA;YACpC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAClB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBACnB,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YACxC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;QACjD,IAAI,GAAG,oBAAoB,OAAO,EAAE,CAAA;QACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QAC3E,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI;YACJ,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI;YACzD,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,SAAS,EAAE,SAAS,EAAE,CAAA;gBACtB,KAAK,EAAE,CAAA;gBACP,QAAQ,CAAC,KAAK,EAAE,CAAA;gBAChB,WAAW,CAAC,KAAK,EAAE,CAAA;gBACnB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YAClH,CAAC;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,EAAE,CAAA;QACf,GAAG,CAAC,KAAK,EAAE,CAAA;QACX,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,gBAAgB,CAAC,OAMhC;IACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9D,CAAC;IACD,IACE,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;QACrC,OAAO,CAAC,UAAU,GAAG,CAAC;QACtB,OAAO,CAAC,UAAU,GAAG,KAAK;QAE1B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,MAA6B,CAAA;IACjC,IAAI,KAAiC,CAAA;IACrC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,OAAO;YAAE,OAAM;QACnB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8D,CAAA;QACtF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;QAC3C,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE;YACrD,UAAU,EAAE,SAAS;YACrB,iBAAiB,EAAE,KAAK;YACxB,gBAAgB,EAAE,OAAO;SAC1B,CAAC,CAAA;QACF,MAAM,GAAG,EAAE,CAAA;QACX,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC7B,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACzB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,2FAA2F;YAC3F,IAAI,GAAG,GAAG,QAAQ,GAAG,KAAK,IAAI,GAAG,GAAG,YAAY,GAAG,KAAK;gBAAE,EAAE,CAAC,SAAS,EAAE,CAAA;YACxE,QAAQ,GAAG,GAAG,CAAA;QAChB,CAAC,EAAE,KAAK,CAAC,CAAA;QACT,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,OAAO,GAAG,CAAC,CAAA;YACX,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAA;QACpC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,aAAa,CAAC,SAAS,CAAC,CAAA;YACxB,KAAK,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAAE,MAAM,CAAC,SAAS,EAAE,CAAA;YAClE,KAAK,MAAM,UAAU,IAAI,QAAQ;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAA;YACrD,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;YACxB,IAAI,CAAC,OAAO;gBAAE,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAA;QAClF,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAU,CAAA;gBAClD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;gBAC3F,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC/B,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAA;gBACnD,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACpC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,IAAI,YAAY;wBACzF,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;oBAC9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;oBACxC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;oBACxB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;oBAC7D,KAAK,KAAK,CAAC,oBAAoB,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE;wBAChE,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,MAAM,EAAE,UAAU,CAAC,MAAM;wBACzB,QAAQ,EAAE,OAAO;qBAClB,CAAC;yBACC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;wBACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;wBAClC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;wBAC5F,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;oBAC7E,CAAC,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;yBACtE,OAAO,CAAC,GAAG,EAAE;wBACZ,YAAY,CAAC,OAAO,CAAC,CAAA;wBACrB,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;oBAC7B,CAAC,CAAC,CAAA;gBACN,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBACjC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,IAAI,YAAY;wBAC9F,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;oBACxC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,kBAAkB,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE;wBAChF,UAAU,EAAE,SAAS;wBACrB,iBAAiB,EAAE,KAAK;wBACxB,gBAAgB,EAAE,OAAO;qBAC1B,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;oBAChE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;oBAC/B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;wBACrB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM;4BAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;wBACpD,OAAO,CAAC,MAAM,GAAG,EAAE,CAAA;wBACnB,OAAO,CAAC,KAAK,GAAG,CAAC,CAAA;oBACnB,CAAC,CAAC,CAAA;oBACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAA;oBAC/F,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;oBAC5C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;wBACtB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;wBACzB,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;oBAC3C,CAAC,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;oBACtC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;wBAAE,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,CAAA;yBAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC5E,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;4BAC7C,IAAI,OAAO,CAAC,EAAE,CAAC,cAAc,GAAG,SAAS;gCAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;4BAClF,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;wBAC7B,CAAC;6BAAM,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;4BAC1D,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;4BAC9C,IAAI,OAAO,CAAC,KAAK,GAAG,SAAS;gCAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;4BACxE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;wBACjC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,CAAC,SAAS,EAAE,CAAA;YAChB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,OAAO,EAAE,CAAA;IACT,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,EAAE,SAAS,EAAE,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/chrome-isolation.d.ts

@@ -0,0 +1,16 @@
+/** Filesystem confinement applies to Chrome's browser process and every child, including CDP file operations. */
+export declare function isolatedChromeInvocation(binary: string, args: string[], profile: string, certificatePin?: string): {
+    binary: string;
+    args: string[];
+    env: {
+        PATH: string;
+        LANG: string;
+        HOME: string;
+        TMPDIR: string;
+    };
+};
+/** Use the separately installed automation browser, never a managed everyday profile. */
+export declare function sandboxChromePath(): string;
+/** Trust exactly the certificate served by canonical Portless, without reading the user's keychain. */
+export declare function portlessCertificatePin(appUrl: string): Promise<string>;
+//# sourceMappingURL=chrome-isolation.d.ts.map

package/dist/runtime/chrome-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chrome-isolation.d.ts","sourceRoot":"","sources":["../../src/runtime/chrome-isolation.ts"],"names":[],"mappings":"AAMA,iHAAiH;AACjH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM;IAmD7G,MAAM;IACN,IAAI;IACJ,GAAG;QAAI,IAAI;QAAmC,IAAI;QAAiB,IAAI;QAAa,MAAM;;EAE7F;AAED,yFAAyF;AACzF,wBAAgB,iBAAiB,IAAI,MAAM,CAU1C;AAED,uGAAuG;AACvG,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB5E"}

package/dist/runtime/chrome-isolation.js

@@ -0,0 +1,97 @@
+import { createHash, X509Certificate } from "node:crypto";
+import { existsSync, mkdirSync, readdirSync, realpathSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { connect } from "node:tls";
+/** Filesystem confinement applies to Chrome's browser process and every child, including CDP file operations. */
+export function isolatedChromeInvocation(binary, args, profile, certificatePin) {
+    if (process.platform !== "darwin" || !existsSync("/usr/bin/sandbox-exec"))
+        throw new Error("Sandbox mode requires macOS Chrome filesystem isolation; this platform is not supported yet");
+    const executable = realpathSync(binary);
+    const marker = executable.indexOf(".app/");
+    if (marker < 0)
+        throw new Error("Sandbox mode requires Chrome installed in an application bundle");
+    mkdirSync(profile, { recursive: true, mode: 0o700 });
+    const directory = realpathSync(resolve(profile));
+    const temporary = join(directory, "d3k-temp");
+    mkdirSync(temporary, { recursive: true, mode: 0o700 });
+    const readable = [
+        executable.slice(0, marker + 4),
+        "/System/Library",
+        "/System/Cryptexes",
+        "/usr/lib",
+        "/usr/share",
+        "/usr/bin",
+        "/bin",
+        "/sbin",
+        "/Library/Fonts",
+        "/Library/Apple",
+        "/private/preboot",
+        "/private/var/db/dyld",
+        "/private/etc",
+        "/private/var/run",
+        "/Library/Preferences/SystemConfiguration",
+        "/dev",
+        directory
+    ];
+    // Chrome's singleton socket ignores TMPDIR on macOS. Allow only its generated socket directories.
+    const socket = '(regex #"^/private/var/folders/[^/]+/[^/]+/T/com\\.google\\.Chrome[^/]*(/.*)?$")';
+    const except = (paths) => `(require-all (require-not (literal "/")) ${paths.map((path) => `(require-not (subpath ${JSON.stringify(path)}))`).join(" ")} (require-not ${socket}))`;
+    const policy = `(version 1)
+(allow default)
+(deny file-read-data ${except(readable)})
+(deny file-write* ${except([directory, "/dev"])})
+(deny appleevent-send)
+(deny mach-lookup (global-name "com.apple.pasteboard.1") (global-name "com.apple.pasteboard") (global-name "com.apple.pbs"))`;
+    // Seatbelt cannot be nested. The outer policy confines all Chrome processes, rather than renderers alone.
+    const chromeArgs = args.filter((arg) => arg !== "--no-sandbox" && arg !== "--disable-setuid-sandbox");
+    chromeArgs.push("--no-sandbox", "--disable-breakpad", "--password-store=basic", "--use-mock-keychain", "--disable-features=ChromeBrowserCloudManagement", `--crash-dumps-dir=${join(temporary, "crashes")}`);
+    if (certificatePin)
+        chromeArgs.push(`--ignore-certificate-errors-spki-list=${certificatePin}`);
+    return {
+        binary: "/usr/bin/sandbox-exec",
+        args: ["-p", policy, executable, ...chromeArgs],
+        env: { PATH: "/usr/bin:/bin:/usr/sbin:/sbin", LANG: "en_US.UTF-8", HOME: directory, TMPDIR: temporary }
+    };
+}
+/** Use the separately installed automation browser, never a managed everyday profile. */
+export function sandboxChromePath() {
+    if (process.platform !== "darwin")
+        throw new Error("Sandbox mode currently requires macOS filesystem confinement");
+    const root = join(homedir(), ".agent-browser", "browsers");
+    const installed = existsSync(root) ? readdirSync(root).filter((name) => /^chrome-[0-9.]+$/.test(name)) : [];
+    installed.sort((a, b) => b.localeCompare(a, undefined, { numeric: true }));
+    for (const name of installed) {
+        const binary = join(root, name, "Google Chrome for Testing.app", "Contents", "MacOS", "Google Chrome for Testing");
+        if (existsSync(binary))
+            return binary;
+    }
+    throw new Error("Sandbox mode requires Chrome for Testing. Run bunx agent-browser install, then retry");
+}
+/** Trust exactly the certificate served by canonical Portless, without reading the user's keychain. */
+export async function portlessCertificatePin(appUrl) {
+    return new Promise((accept, reject) => {
+        const socket = connect({
+            host: "127.0.0.1",
+            port: 443,
+            servername: new URL(appUrl).hostname,
+            rejectUnauthorized: false
+        });
+        socket.setTimeout(5000, () => socket.destroy(new Error("Portless TLS certificate unavailable")));
+        socket.once("error", reject);
+        socket.once("secureConnect", () => {
+            try {
+                const certificate = new X509Certificate(socket.getPeerCertificate().raw);
+                const publicKey = certificate.publicKey.export({ type: "spki", format: "der" });
+                accept(createHash("sha256").update(publicKey).digest("base64"));
+            }
+            catch (error) {
+                reject(error);
+            }
+            finally {
+                socket.destroy();
+            }
+        });
+    });
+}
+//# sourceMappingURL=chrome-isolation.js.map

package/dist/runtime/chrome-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chrome-isolation.js","sourceRoot":"","sources":["../../src/runtime/chrome-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAElC,iHAAiH;AACjH,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,IAAc,EAAE,OAAe,EAAE,cAAuB;IAC/G,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;IAChH,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IAClG,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACpD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC7C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG;QACf,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;QAC/B,iBAAiB;QACjB,mBAAmB;QACnB,UAAU;QACV,YAAY;QACZ,UAAU;QACV,MAAM;QACN,OAAO;QACP,gBAAgB;QAChB,gBAAgB;QAChB,kBAAkB;QAClB,sBAAsB;QACtB,cAAc;QACd,kBAAkB;QAClB,0CAA0C;QAC1C,MAAM;QACN,SAAS;KACV,CAAA;IACD,kGAAkG;IAClG,MAAM,MAAM,GAAG,kFAAkF,CAAA;IACjG,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE,CACjC,4CAA4C,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,MAAM,IAAI,CAAA;IACzJ,MAAM,MAAM,GAAG;;uBAEM,MAAM,CAAC,QAAQ,CAAC;oBACnB,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;;6HAE8E,CAAA;IAC3H,0GAA0G;IAC1G,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,0BAA0B,CAAC,CAAA;IACrG,UAAU,CAAC,IAAI,CACb,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,iDAAiD,EACjD,qBAAqB,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAClD,CAAA;IACD,IAAI,cAAc;QAAE,UAAU,CAAC,IAAI,CAAC,yCAAyC,cAAc,EAAE,CAAC,CAAA;IAC9F,OAAO;QACL,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;QAC/C,GAAG,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;KACxG,CAAA;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IAClH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAA;IAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3G,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC1E,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,+BAA+B,EAAE,UAAU,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAA;QAClH,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IACvC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAA;AACzG,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ;YACpC,kBAAkB,EAAE,KAAK;SAC1B,CAAC,CAAA;QACF,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAA;QAChG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;YAChC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAA;gBACxE,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;gBAC/E,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAA;YACf,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,EAAE,CAAA;YAClB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}