diggylab 0.1.39 → 0.1.40

package/README.md

@@ -113,17 +113,28 @@ If the browser says the link expired, run `diggylab login` again — each run mi
 If you would rather not share a screen, log into Facebook in your own browser and import those
 cookies instead — no Xvfb, no link, no port:
 
-1. Install **Cookie-Editor** (Chrome, Edge, Firefox), open `facebook.com`, then *Export → JSON*.
-   (Or copy the `cookie:` request header from your browser's DevTools.)
+1. Get the `facebook.com` cookies, in whichever way is easiest:
+   - **DevTools → Network** (fastest): open facebook.com, click any request, copy the whole
+     `cookie:` value from *Request Headers*.
+   - **DevTools → Application → Cookies → `https://www.facebook.com`**: select the table and copy the
+     rows.
+   - **Cookie-Editor** (Chrome, Edge, Firefox): *Export → JSON*.
 2. On the server:
 
 ```bash
 diggylab login --cookies cookies.json     # or: diggylab login --cookies -   and paste, then Ctrl-D
 ```
 
-The agent keeps only the `facebook.com` cookies, saves them encrypted, and opens Facebook once to
-confirm the session before it accepts it. Cookies exported from a different account, or expired ones,
-are rejected with a message instead of failing during a scan.
+Only `name` and `value` are required; the agent fills in the rest (`.facebook.com`, `/`, session
+expiry). Every `facebook.com` cookie is kept, and at least `c_user` plus `xs` must be present — those
+two carry the session, and `datr` is worth keeping too.
+
+Do not use `document.cookie` from the Console: Facebook's `c_user` and `xs` are HttpOnly, so they
+never appear there. The DevTools cookie table and the extension do show them.
+
+The agent saves the cookies encrypted and opens Facebook once to confirm the session before it
+accepts it. Cookies exported from a different account, or expired ones, are rejected with a message
+instead of failing during a scan.
 
 Note: Facebook sometimes asks for a security check when a session moves to a server's IP. If that
 happens the command says so — approve the login from your phone and import again.

package/cli.js

@@ -2386,16 +2386,30 @@ function toCookie(value) {
 }
 function parseCookieHeader(input) {
   const header = input.replace(/^\s*cookie\s*:/i, "");
-  return header.split(";").map((part) => part.trim()).filter(Boolean).map((part) => {
+  return header.split(/[;\n]/).map((part) => part.trim()).filter(Boolean).map((part) => {
     const separator = part.indexOf("=");
     if (separator <= 0) return null;
     return { name: part.slice(0, separator).trim(), value: part.slice(separator + 1) };
   }).filter((cookie) => cookie !== null);
 }
+function parseCookieTable(input) {
+  const cookies = [];
+  for (const line of input.split("\n")) {
+    const columns = line.split("	");
+    if (columns.length < 2) return [];
+    const name = columns[0].trim();
+    const value = columns[1];
+    if (!name || name === "Name" || !value) continue;
+    cookies.push({ name, value });
+  }
+  return cookies;
+}
 function parseCookieInput(input) {
   const trimmed = input.trim();
   if (!trimmed) return [];
-  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) return parseCookieHeader(trimmed);
+  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) {
+    return trimmed.includes("	") ? parseCookieTable(trimmed) : parseCookieHeader(trimmed);
+  }
   try {
     const parsed = JSON.parse(trimmed);
     if (Array.isArray(parsed)) {
@@ -2908,11 +2922,12 @@ async function commandLogin(runtime, options, io) {
     if (!needsVirtualDisplay) {
       io.log(process.env.DISPLAY ? `Opening the Facebook login page on display ${process.env.DISPLAY}.` : "Opening the Facebook login page in a browser window.");
     } else {
-      const access = runtime.manager.getAccessCredential();
-      if (!access) {
+      const stored = await runtime.manager.load();
+      if (!stored) {
         io.error("This server is not paired yet. Run `diggylab pair --code <code>` first.");
         return 1;
       }
+      const access = await runtime.manager.refresh();
       const webUrl = options.webUrl ?? process.env.DIGGYLAB_WEB_URL?.trim();
       display = await startVirtualDisplay({
         displayNumber: options.display,
@@ -2943,6 +2958,14 @@ ${relay.url}`);
       io.error(MISSING_DISPLAY_HINT);
       return 1;
     }
+    if (/CREDENTIAL_REVOKED|not paired/i.test(message)) {
+      io.error("This server is not paired (or was unpaired). Run `diggylab pair --code <code>` again.");
+      return 1;
+    }
+    if (/NETWORK_ERROR|SERVER_UNAVAILABLE|fetch failed/i.test(message)) {
+      io.error(`Could not reach the API: ${message}`);
+      return 1;
+    }
     if (/virtual screen|login screen|DiggyLab relay|Xvfb exited|x11vnc exited/i.test(message)) {
       io.error(`The login screen failed: ${message}`);
       printDisplayLogs(join4(runtime.directory, "logs"), io);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "diggylab",
-  "version": "0.1.39",
+  "version": "0.1.40",
   "description": "DiggyLab Desktop Agent collects posts and information from Facebook Groups on a paired computer. (headless CLI)",
   "type": "module",
   "bin": {