humanish 0.97.0 → 0.98.0

package/dist/guest-bootstrap.js

@@ -0,0 +1,240 @@
+import { validateBrowserControlIdentity, sameBrowserControlIdentity } from "./browser-control-protocol.js";
+import { CuaExecutorError } from "./cua-executor-error.js";
+import { createBrowserControlClient } from "./browser-control-client.js";
+export const GUEST_BOOTSTRAP_VERSION = 1;
+export const GUEST_BOOTSTRAP_LIMITS = Object.freeze({ bytes: 1024, admissionMs: 5000, readyMs: 35_000, connectMs: 3000, port: 5251 });
+const refused = () => new CuaExecutorError("protocol_mismatch", "not_dispatched");
+function canonical(identity, ready) {
+    const { generation, challenge, runtimeRevision } = validateBrowserControlIdentity(identity);
+    const fixed = { generation, challenge, runtimeRevision };
+    return JSON.stringify(ready ? { version: 1, ready: true, identity: fixed } : { version: 1, identity: fixed });
+}
+export function encodeGuestBootstrap(identity, ready = false) {
+    const bytes = Buffer.from(canonical(identity, ready));
+    if (bytes.length > GUEST_BOOTSTRAP_LIMITS.bytes)
+        throw refused();
+    const frame = Buffer.alloc(4 + bytes.length);
+    frame.writeUInt32BE(bytes.length);
+    bytes.copy(frame, 4);
+    return frame;
+}
+export function parseGuestBootstrap(bytes, revision, ready = false) {
+    if (!bytes.length || bytes.length > GUEST_BOOTSTRAP_LIMITS.bytes || bytes.some(byte => byte > 127))
+        throw refused();
+    try {
+        const value = JSON.parse(bytes.toString("ascii"));
+        if (typeof value !== "object" || value === null || !("identity" in value))
+            throw refused();
+        const identity = validateBrowserControlIdentity(value.identity);
+        if (identity.runtimeRevision !== revision || canonical(identity, ready) !== bytes.toString("ascii"))
+            throw refused();
+        return identity;
+    }
+    catch {
+        throw refused();
+    }
+}
+/** Own the first frame and continue refusing early bytes until synchronous handoff. */
+export class GuestBootstrapReader {
+    stream;
+    revision;
+    signal;
+    ready;
+    onFailure;
+    identity;
+    resolve;
+    reject;
+    header = Buffer.alloc(4);
+    headerUsed = 0;
+    body;
+    used = 0;
+    admitted = false;
+    terminal = false;
+    timer;
+    constructor(stream, revision, signal, ready = false, onFailure = () => { }) {
+        this.stream = stream;
+        this.revision = revision;
+        this.signal = signal;
+        this.ready = ready;
+        this.onFailure = onFailure;
+        this.identity = new Promise((resolve, reject) => { this.resolve = resolve; this.reject = reject; });
+        // A later factory rejection must not leave the admission rejection unconsumed.
+        void this.identity.catch(() => { });
+        this.timer = setTimeout(() => this.fail("deadline_exceeded"), ready ? GUEST_BOOTSTRAP_LIMITS.readyMs : GUEST_BOOTSTRAP_LIMITS.admissionMs);
+        stream.on("error", this.error);
+        stream.on("close", this.end);
+        stream.on("end", this.end);
+        stream.on("data", this.data);
+        signal.addEventListener("abort", this.abort, { once: true });
+        if (signal.aborted || stream.destroyed || stream.readableEnded || stream.writableEnded || stream.readableObjectMode || stream.writableObjectMode)
+            this.abort();
+        else
+            stream.resume();
+    }
+    data = (value) => {
+        if (this.terminal)
+            return;
+        if (!Buffer.isBuffer(value) || this.admitted) {
+            this.fail();
+            return;
+        }
+        let offset = 0;
+        if (!this.body) {
+            const count = Math.min(4 - this.headerUsed, value.length);
+            value.copy(this.header, this.headerUsed, 0, count);
+            this.headerUsed += count;
+            offset += count;
+            if (this.headerUsed < 4)
+                return;
+            const length = this.header.readUInt32BE(0);
+            if (!length || length > GUEST_BOOTSTRAP_LIMITS.bytes) {
+                this.fail();
+                return;
+            }
+            this.body = Buffer.alloc(length);
+        }
+        const count = Math.min(value.length - offset, this.body.length - this.used);
+        value.copy(this.body, this.used, offset, offset + count);
+        this.used += count;
+        offset += count;
+        if (offset !== value.length) {
+            this.fail();
+            return;
+        }
+        if (this.used === this.body.length) {
+            try {
+                const identity = parseGuestBootstrap(this.body, this.revision, this.ready);
+                this.admitted = true;
+                clearTimeout(this.timer);
+                this.resolve(identity);
+            }
+            catch {
+                this.fail();
+            }
+        }
+    };
+    error = () => this.fail("transport_failed");
+    end = () => this.fail("transport_failed");
+    abort = () => this.fail("session_revoked");
+    release() {
+        clearTimeout(this.timer);
+        this.stream.off("data", this.data);
+        this.stream.off("end", this.end);
+        this.stream.off("close", this.end);
+        this.signal.removeEventListener("abort", this.abort);
+        // Retain a safe listener until queued native error/close events have drained.
+        const stream = this.stream, error = this.error;
+        const off = () => { stream.off("error", error); stream.off("close", off); };
+        stream.once("close", off);
+        if (stream.closed)
+            setImmediate(off);
+    }
+    fail(code = "protocol_mismatch") {
+        if (this.terminal)
+            return;
+        this.terminal = true;
+        this.release();
+        this.reject(new CuaExecutorError(code, "not_dispatched"));
+        this.stream.destroy();
+        this.onFailure();
+    }
+    /** Must be followed synchronously by installing the sole next stream owner. */
+    handoff() {
+        if (this.terminal || !this.admitted || this.signal.aborted || this.stream.destroyed || this.stream.readableLength !== 0)
+            throw refused();
+        this.stream.pause();
+        this.terminal = true;
+        this.release();
+    }
+    close() { this.fail("session_revoked"); }
+}
+/** Fixed preface on an already acquired Firecracker stream; no path discovery/retry. */
+export async function connectGuestBootstrap(stream, identity, signal) {
+    validateBrowserControlIdentity(identity);
+    await new Promise((resolve, reject) => {
+        let bytes = Buffer.alloc(0), done = false;
+        const timer = setTimeout(() => finish(new CuaExecutorError("deadline_exceeded", "not_dispatched")), GUEST_BOOTSTRAP_LIMITS.connectMs);
+        const finish = (error) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            stream.pause();
+            stream.off("data", data);
+            stream.off("end", end);
+            stream.off("close", end);
+            signal.removeEventListener("abort", abort);
+            const release = () => { stream.off("error", end); stream.off("close", release); };
+            stream.once("close", release);
+            if (stream.closed)
+                setImmediate(release);
+            if (error) {
+                stream.destroy();
+                reject(error);
+            }
+            else
+                resolve();
+        };
+        const end = () => {
+            if (done)
+                stream.destroy();
+            finish(new CuaExecutorError("transport_failed", "not_dispatched"));
+        };
+        const abort = () => finish(new CuaExecutorError("session_revoked", "not_dispatched"));
+        const data = (chunk) => {
+            if (!Buffer.isBuffer(chunk) || bytes.length + chunk.length > 64 + 1028) {
+                finish(refused());
+                return;
+            }
+            bytes = Buffer.concat([bytes, chunk]);
+            const newline = bytes.indexOf(10);
+            if (newline < 0) {
+                if (bytes.length > 64)
+                    finish(refused());
+                return;
+            }
+            const line = bytes.subarray(0, newline + 1).toString("ascii");
+            if (newline >= 64 || bytes.subarray(0, newline + 1).some(byte => byte > 127)
+                || !/^OK [1-9][0-9]{0,9}\n$/.test(line) || Number(line.slice(3)) > 0xffffffff) {
+                finish(refused());
+                return;
+            }
+            const tail = bytes.subarray(newline + 1);
+            if (tail.length) {
+                stream.pause();
+                stream.unshift(tail);
+            }
+            finish();
+        };
+        stream.on("error", end);
+        stream.on("end", end);
+        stream.on("close", end);
+        stream.on("data", data);
+        signal.addEventListener("abort", abort, { once: true });
+        if (signal.aborted || stream.destroyed)
+            abort();
+        else {
+            stream.resume();
+            stream.write("CONNECT 5251\n", error => { if (error)
+                end(); });
+        }
+    });
+    const reader = new GuestBootstrapReader(stream, identity.runtimeRevision, signal, true);
+    try {
+        stream.write(encodeGuestBootstrap(identity), error => { if (error)
+            reader.close(); });
+        const actual = await reader.identity;
+        if (!sameBrowserControlIdentity(actual, identity))
+            throw refused();
+        reader.handoff();
+    }
+    catch (error) {
+        reader.close();
+        stream.destroy();
+        throw error;
+    }
+    const client = createBrowserControlClient({ transport: stream, identity });
+    stream.resume();
+    return client;
+}
+//# sourceMappingURL=guest-bootstrap.js.map

package/dist/guest-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-bootstrap.js","sourceRoot":"","sources":["../src/guest-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAA+B,MAAM,+BAA+B,CAAC;AACxI,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAEzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACtI,MAAM,OAAO,GAAG,GAAqB,EAAE,CAAC,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AACpG,SAAS,SAAS,CAAC,QAAgC,EAAE,KAAc;IACjE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAChH,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,QAAgC,EAAE,KAAK,GAAG,KAAK;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,GAAG,sBAAsB,CAAC,KAAK;QAAE,MAAM,OAAO,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAK,GAAG,KAAK;IAChF,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,sBAAsB,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACpH,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAC3F,MAAM,QAAQ,GAAG,8BAA8B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,eAAe,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACrH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,uFAAuF;AACvF,MAAM,OAAO,oBAAoB;IAWF;IAAiC;IAAmC;IAC9E;IAAgC;IAX1C,QAAQ,CAAkC;IAC3C,OAAO,CAA8C;IACrD,MAAM,CAAqC;IAClC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,UAAU,GAAG,CAAC,CAAC;IACf,IAAI,CAAqB;IACzB,IAAI,GAAG,CAAC,CAAC;IACT,QAAQ,GAAG,KAAK,CAAC;IACjB,QAAQ,GAAG,KAAK,CAAC;IACjB,KAAK,CAAiB;IAC9B,YAA6B,MAAc,EAAmB,QAAgB,EAAmB,MAAmB,EACjG,QAAQ,KAAK,EAAmB,YAAwB,GAAG,EAAE,GAAE,CAAC;QADtD,WAAM,GAAN,MAAM,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAAQ;QAAmB,WAAM,GAAN,MAAM,CAAa;QACjG,UAAK,GAAL,KAAK,CAAQ;QAAmB,cAAS,GAAT,SAAS,CAAuB;QACjF,IAAI,CAAC,QAAQ,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,+EAA+E;QAC/E,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC3I,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;;YAC1J,MAAM,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IACO,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;QACtC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACtE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC;YAC9F,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;gBAAE,OAAO;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC;QAC9F,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IACM,KAAK,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClD,GAAG,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChD,KAAK,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,OAAO;QACb,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,8EAA8E;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM;YAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACO,IAAI,CAAC,OAA2F,mBAAmB;QACzH,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1C,CAAC;IACD,+EAA+E;IAC/E,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACzI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;CAChD;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAc,EAAE,QAAgC,EAAE,MAAmB;IAC/G,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACtI,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAQ,EAAE;YAChD,IAAI,IAAI;gBAAE,OAAO;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvI,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;;gBAAM,OAAO,EAAE,CAAC;QACjE,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,GAAS,EAAE;YACrB,IAAI,IAAI;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,CAAC,KAAa,EAAQ,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;oBAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC;mBACvE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/G,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAC1D,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,EAAE,CAAC;aAC3C,CAAC;YAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK;gBAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACnE,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAClE,MAAM,MAAM,GAAG,0BAA0B,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/guest-browser-tools.d.ts

@@ -0,0 +1,8 @@
+import type { GuestDesktopTools } from "./guest-desktop-executor.js";
+import type { GuestDesktopNativeTools } from "./guest-desktop-native.js";
+interface BrowserTextPort extends Pick<GuestDesktopTools, "prepareText"> {
+    assertReady(signal: AbortSignal): Promise<void>;
+}
+/** Owner-only composition for a single headed Chromium page. Never an actor API. */
+export declare function createGuestBrowserTools(native: GuestDesktopNativeTools, content: BrowserTextPort): GuestDesktopTools;
+export {};

package/dist/guest-browser-tools.js

@@ -0,0 +1,66 @@
+import { BROWSER_CONTROL_LIMITS } from "./browser-control-protocol.js";
+import { CuaExecutorError, isCuaExecutorError } from "./cua-executor-error.js";
+/** Owner-only composition for a single headed Chromium page. Never an actor API. */
+export function createGuestBrowserTools(native, content) {
+    let addressBarArmed = false;
+    let generation = 0;
+    return {
+        capture: signal => native.capture(signal),
+        async input(args, signal) {
+            addressBarArmed = false;
+            const inputGeneration = ++generation;
+            await native.input(args, signal);
+            if (signal.aborted || inputGeneration !== generation)
+                throw new CuaExecutorError("session_revoked", "outcome_uncertain");
+            // Positive navigation intent, not an inference from document.hasFocus().
+            addressBarArmed = args.length === 3 && args[0] === "key" && args[1] === "--clearmodifiers" && args[2] === "ctrl+l";
+        },
+        async prepareText(text, signal) {
+            const navigation = addressBarArmed;
+            addressBarArmed = false;
+            if (!navigation)
+                return content.prepareText(text, signal);
+            // Other browser chrome, IME composition, and Unicode omnibox text need
+            // separate qualification. Do not silently switch routes or transliterate.
+            if (!/^[\x20-\x7e]+$/.test(text) || Buffer.byteLength(text) > BROWSER_CONTROL_LIMITS.textBytes) {
+                throw new CuaExecutorError("action_rejected", "not_dispatched");
+            }
+            const preparedGeneration = generation;
+            let used = false;
+            function check() {
+                if (signal.aborted)
+                    throw new CuaExecutorError("session_revoked", "not_dispatched");
+                if (used || preparedGeneration !== generation)
+                    throw new CuaExecutorError("action_rejected", "not_dispatched");
+            }
+            check();
+            await content.assertReady(signal);
+            check();
+            return {
+                async paste() {
+                    check();
+                    await content.assertReady(signal);
+                    check();
+                    used = true;
+                    // Re-establish the explicitly requested destination immediately before
+                    // native typing; the previous page may have changed its own focus.
+                    try {
+                        await native.input(["key", "--clearmodifiers", "ctrl+l"], signal);
+                        if (signal.aborted)
+                            throw new CuaExecutorError("session_revoked", "outcome_uncertain");
+                        await content.assertReady(signal);
+                        if (signal.aborted || preparedGeneration !== generation)
+                            throw new CuaExecutorError("session_revoked", "outcome_uncertain");
+                        await native.typeAscii(text, signal);
+                    }
+                    catch (error) {
+                        // Ctrl+L itself is input. No content fallback after that dispatch.
+                        throw new CuaExecutorError(isCuaExecutorError(error) ? error.code : "execution_failed", "outcome_uncertain");
+                    }
+                },
+                async close() { used = true; }
+            };
+        }
+    };
+}
+//# sourceMappingURL=guest-browser-tools.js.map

package/dist/guest-browser-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-browser-tools.js","sourceRoot":"","sources":["../src/guest-browser-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAQ/E,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,MAA+B,EAAE,OAAwB;IAC/F,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM;YACtB,eAAe,GAAG,KAAK,CAAC;YACxB,MAAM,eAAe,GAAG,EAAE,UAAU,CAAC;YACrC,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,OAAO,IAAI,eAAe,KAAK,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;YACzH,yEAAyE;YACzE,eAAe,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;QACrH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM;YAC5B,MAAM,UAAU,GAAG,eAAe,CAAC;YACnC,eAAe,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,UAAU;gBAAE,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1D,uEAAuE;YACvE,0EAA0E;YAC1E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,SAAS,EAAE,CAAC;gBAC/F,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,kBAAkB,GAAG,UAAU,CAAC;YACtC,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,SAAS,KAAK;gBACZ,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;gBACpF,IAAI,IAAI,IAAI,kBAAkB,KAAK,UAAU;oBAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;YACjH,CAAC;YACD,KAAK,EAAE,CAAC;YACR,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,KAAK,EAAE,CAAC;YACR,OAAO;gBACL,KAAK,CAAC,KAAK;oBACT,KAAK,EAAE,CAAC;oBACR,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAClC,KAAK,EAAE,CAAC;oBACR,IAAI,GAAG,IAAI,CAAC;oBACZ,uEAAuE;oBACvE,mEAAmE;oBACnE,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;wBAClE,IAAI,MAAM,CAAC,OAAO;4BAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;wBACvF,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;wBAClC,IAAI,MAAM,CAAC,OAAO,IAAI,kBAAkB,KAAK,UAAU;4BAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;wBAC5H,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACvC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,mEAAmE;wBACnE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;oBAC/G,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;aAC/B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/guest-chromium-text.d.ts

@@ -0,0 +1,27 @@
+import type { BrowserContext, Page } from "playwright-core";
+export interface PreparedGuestChromiumText {
+    paste(): Promise<void>;
+    close(): Promise<void>;
+}
+export interface GuestChromiumText {
+    /** Owner/window readiness only: deliberately permits a focused browser toolbar. */
+    assertReady(signal: AbortSignal): Promise<void>;
+    prepareText(text: string, signal: AbortSignal): Promise<PreparedGuestChromiumText>;
+    close(): Promise<void>;
+}
+/**
+ * A finite text port for one owner-acquired Chromium page in a one-page context.
+ * It neither selects/activates targets nor handles browser chrome, frames or
+ * dialogs. An observed dialog poisons this port; the owner must handle it and
+ * construct a new port. A dialog already open can make preparation time out.
+ *
+ * Focus checks and insertText are separate protocol calls: page code can change
+ * focus between them. This is not atomic element binding or proof an app applied
+ * text. A lost post-send acknowledgement is uncertain and terminal for this port.
+ * The owner remains responsible for browser/session teardown.
+ */
+export declare function createGuestChromiumText(options: {
+    context: BrowserContext;
+    page: Page;
+    assertFocusedWindow: (signal: AbortSignal) => Promise<void>;
+}): GuestChromiumText;

package/dist/guest-chromium-text.js

@@ -0,0 +1,281 @@
+import { randomUUID } from "node:crypto";
+import { CuaExecutorError, isCuaExecutorError } from "./cua-executor-error.js";
+const DEADLINE_MS = 5_000;
+// These expressions execute only in this port's isolated world. Actor text is
+// never interpolated into JavaScript, a selector, a world name, or a CDP method.
+const PREPARE = `(() => {
+  const active = () => Object.getOwnPropertyDescriptor(Document.prototype, "activeElement").get.call(document);
+  const element = active();
+  const editable = () => {
+    if (!Document.prototype.hasFocus.call(document) || active() !== element ||
+        !element || !element.isConnected || element.ownerDocument !== document ||
+        element.localName === "iframe" || element.localName === "frame") return false;
+    if (element instanceof HTMLTextAreaElement) return !element.disabled && !element.readOnly;
+    if (element instanceof HTMLInputElement) return !element.disabled && !element.readOnly &&
+      ["text", "search", "tel", "url", "email", "password", "number"].includes(element.type);
+    return element instanceof HTMLElement && element.isContentEditable;
+  };
+  if (!editable()) return false;
+  Object.defineProperty(globalThis, "__humanish_text_preparation__", {
+    configurable: true, value: Object.freeze({ editable })
+  });
+  return true;
+})()`;
+const RECHECK = `(() => {
+  const state = globalThis.__humanish_text_preparation__;
+  return !!state && state.editable() === true;
+})()`;
+/**
+ * A finite text port for one owner-acquired Chromium page in a one-page context.
+ * It neither selects/activates targets nor handles browser chrome, frames or
+ * dialogs. An observed dialog poisons this port; the owner must handle it and
+ * construct a new port. A dialog already open can make preparation time out.
+ *
+ * Focus checks and insertText are separate protocol calls: page code can change
+ * focus between them. This is not atomic element binding or proof an app applied
+ * text. A lost post-send acknowledgement is uncertain and terminal for this port.
+ * The owner remains responsible for browser/session teardown.
+ */
+export function createGuestChromiumText(options) {
+    const { context, page, assertFocusedWindow } = options;
+    const worldName = `humanish-text-${randomUUID()}`;
+    let generation = 0;
+    let closed = false;
+    let unusable = false;
+    let dialogSeen = false;
+    let busy = false;
+    let closing;
+    let activeDisposal;
+    const interruptions = new Set();
+    const sessions = new Set();
+    const detachments = new WeakMap();
+    function invalidate() {
+        generation++;
+        for (const interrupt of interruptions)
+            interrupt("session_revoked");
+    }
+    function dialog() { dialogSeen = true; invalidate(); }
+    function targetClosed() { unusable = true; invalidate(); }
+    page.on("framenavigated", invalidate);
+    page.on("frameattached", invalidate);
+    page.on("framedetached", invalidate);
+    page.on("dialog", dialog);
+    page.on("close", targetClosed);
+    context.on("page", invalidate);
+    context.on("close", targetClosed);
+    function scope(expected) {
+        if (closed || unusable)
+            throw new CuaExecutorError("executor_closed", "not_dispatched");
+        if (generation !== expected)
+            throw new CuaExecutorError("session_revoked", "not_dispatched");
+        const pages = context.pages();
+        if (dialogSeen || page.isClosed() || page.context() !== context || pages.length !== 1 || pages[0] !== page)
+            throw new CuaExecutorError("action_rejected", "not_dispatched");
+    }
+    async function run(signal, expected, body) {
+        let dispatched = false;
+        let stopped;
+        const controller = new AbortController();
+        let rejectStop;
+        const stop = new Promise((_resolve, reject) => { rejectStop = reject; });
+        // An event can interrupt before the first awaited step; consume that rejection.
+        void stop.catch(() => { });
+        const interrupt = (code) => {
+            if (stopped)
+                return;
+            stopped = code;
+            controller.abort();
+            rejectStop(new CuaExecutorError(code, dispatched ? "outcome_uncertain" : "not_dispatched"));
+        };
+        const abort = () => interrupt("cancelled");
+        const timer = setTimeout(() => interrupt("deadline_exceeded"), DEADLINE_MS);
+        interruptions.add(interrupt);
+        signal.addEventListener("abort", abort, { once: true });
+        const check = () => {
+            if (signal.aborted)
+                abort();
+            if (stopped)
+                throw new CuaExecutorError(stopped, dispatched ? "outcome_uncertain" : "not_dispatched");
+            scope(expected);
+        };
+        try {
+            check();
+            return await body({
+                signal: controller.signal,
+                check,
+                async step(call, dispatch = false) {
+                    check();
+                    if (dispatch)
+                        dispatched = true;
+                    const value = await Promise.race([call(), stop]);
+                    check();
+                    return value;
+                }
+            });
+        }
+        catch (error) {
+            controller.abort();
+            if (dispatched)
+                unusable = true;
+            const code = stopped ?? (isCuaExecutorError(error) ? error.code : "transport_failed");
+            throw new CuaExecutorError(code, dispatched ? "outcome_uncertain" : "not_dispatched");
+        }
+        finally {
+            clearTimeout(timer);
+            signal.removeEventListener("abort", abort);
+            interruptions.delete(interrupt);
+        }
+    }
+    function detach(session) {
+        const prior = detachments.get(session);
+        if (prior)
+            return prior;
+        const result = (async () => {
+            let timer;
+            try {
+                await Promise.race([
+                    session.detach(),
+                    new Promise((_resolve, reject) => {
+                        timer = setTimeout(() => reject(new CuaExecutorError("deadline_exceeded", "not_dispatched")), DEADLINE_MS);
+                    })
+                ]);
+            }
+            catch {
+                unusable = true;
+                throw new CuaExecutorError("transport_failed", "not_dispatched");
+            }
+            finally {
+                clearTimeout(timer);
+                sessions.delete(session);
+            }
+        })();
+        detachments.set(session, result);
+        // Late acquisition after cancellation also uses this consumed, bounded path.
+        void result.catch(() => { });
+        return result;
+    }
+    async function ready(op) {
+        await op.step(() => assertFocusedWindow(op.signal));
+    }
+    async function probe(op, session, contextId, expression) {
+        const result = await op.step(() => session.send("Runtime.evaluate", {
+            expression, contextId, returnByValue: true, awaitPromise: false,
+            userGesture: false, includeCommandLineAPI: false, silent: true
+        }));
+        if (result.exceptionDetails || result.result.type !== "boolean" || result.result.value !== true)
+            throw new CuaExecutorError("action_rejected", "not_dispatched");
+    }
+    return {
+        async assertReady(signal) {
+            await run(signal, generation, ready);
+        },
+        async prepareText(text, signal) {
+            if (typeof text !== "string" || !text || text.includes("\0") || Buffer.byteLength(text, "utf8") > 65536 ||
+                Buffer.from(text, "utf8").toString("utf8") !== text)
+                throw new CuaExecutorError("invalid_request", "not_dispatched");
+            scope(generation);
+            if (busy)
+                throw new CuaExecutorError("executor_busy", "not_dispatched");
+            busy = true;
+            const expected = generation;
+            const lifetime = new AbortController();
+            const abortLifetime = () => lifetime.abort();
+            signal.addEventListener("abort", abortLifetime, { once: true });
+            if (signal.aborted)
+                abortLifetime();
+            let session;
+            let contextId;
+            let used = false;
+            let disposed = false;
+            let dispatchedText = false;
+            let disposal;
+            const dispose = () => {
+                if (!disposal) {
+                    disposed = true;
+                    lifetime.abort();
+                    signal.removeEventListener("abort", abortLifetime);
+                    disposal = (async () => {
+                        try {
+                            if (session)
+                                await detach(session);
+                        }
+                        catch (error) {
+                            throw new CuaExecutorError(isCuaExecutorError(error) ? error.code : "transport_failed", dispatchedText ? "outcome_uncertain" : "not_dispatched");
+                        }
+                        finally {
+                            busy = false;
+                            if (activeDisposal === dispose)
+                                activeDisposal = undefined;
+                        }
+                    })();
+                }
+                return disposal;
+            };
+            activeDisposal = dispose;
+            try {
+                await run(lifetime.signal, expected, async (op) => {
+                    await ready(op);
+                    session = await op.step(() => context.newCDPSession(page).then(acquired => {
+                        sessions.add(acquired);
+                        if (op.signal.aborted || closed)
+                            void detach(acquired).catch(() => { });
+                        return acquired;
+                    }));
+                    const tree = await op.step(() => session.send("Page.getFrameTree"));
+                    const frameId = tree.frameTree?.frame?.id;
+                    if (typeof frameId !== "string" || !frameId || tree.frameTree.frame.parentId)
+                        throw new CuaExecutorError("invalid_response", "not_dispatched");
+                    const world = await op.step(() => session.send("Page.createIsolatedWorld", { frameId, worldName }));
+                    contextId = world.executionContextId;
+                    if (!Number.isSafeInteger(contextId) || contextId <= 0)
+                        throw new CuaExecutorError("invalid_response", "not_dispatched");
+                    await probe(op, session, contextId, PREPARE);
+                });
+            }
+            catch (error) {
+                await dispose().catch(() => { });
+                throw error;
+            }
+            return {
+                async paste() {
+                    if (used || disposed)
+                        throw new CuaExecutorError("action_rejected", "not_dispatched");
+                    used = true; // A failed attempt cannot be retried through this handle.
+                    await run(lifetime.signal, expected, async (op) => {
+                        await ready(op);
+                        await probe(op, session, contextId, RECHECK);
+                        await ready(op);
+                        op.check();
+                        await op.step(() => {
+                            dispatchedText = true;
+                            return session.send("Input.insertText", { text });
+                        }, true);
+                    });
+                },
+                close: dispose
+            };
+        },
+        close() {
+            if (!closing) {
+                closed = true;
+                for (const interrupt of interruptions)
+                    interrupt("executor_closed");
+                page.off("framenavigated", invalidate);
+                page.off("frameattached", invalidate);
+                page.off("framedetached", invalidate);
+                page.off("dialog", dialog);
+                page.off("close", targetClosed);
+                context.off("page", invalidate);
+                context.off("close", targetClosed);
+                const active = activeDisposal?.();
+                closing = Promise.allSettled([...(active ? [active] : []), ...[...sessions].map(detach)]).then(results => {
+                    const failure = results.find(result => result.status === "rejected");
+                    if (failure?.status === "rejected")
+                        throw failure.reason;
+                });
+            }
+            return closing;
+        }
+    };
+}
+//# sourceMappingURL=guest-chromium-text.js.map