machine-bridge-mcp 2.0.0 → 3.0.0-beta.102

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (473) hide show
  1. package/CHANGELOG.md +1142 -0
  2. package/CONTRIBUTING.md +23 -25
  3. package/GOVERNANCE.md +2 -2
  4. package/README.md +58 -20
  5. package/SECURITY.md +161 -120
  6. package/SUPPORT.md +1 -1
  7. package/browser-extension/broker-auth.js +83 -0
  8. package/browser-extension/broker-liveness.js +35 -0
  9. package/browser-extension/browser-error-boundary.js +96 -0
  10. package/browser-extension/browser-operations.js +1456 -101
  11. package/browser-extension/devtools-input.js +195 -34
  12. package/browser-extension/devtools-observation.js +429 -0
  13. package/browser-extension/devtools-session.js +48 -0
  14. package/browser-extension/manifest.json +4 -3
  15. package/browser-extension/page-automation.js +578 -118
  16. package/browser-extension/pairing-bootstrap.js +42 -0
  17. package/browser-extension/pairing.js +28 -12
  18. package/browser-extension/service-worker.js +126 -106
  19. package/docs/AGENT_CONTEXT.md +13 -10
  20. package/docs/ARCHITECTURE.md +159 -67
  21. package/docs/AUDIT.md +1302 -4
  22. package/docs/CLIENTS.md +19 -6
  23. package/docs/COMPUTER_USE.md +297 -0
  24. package/docs/ENGINEERING.md +72 -13
  25. package/docs/GETTING_STARTED.md +18 -20
  26. package/docs/LOCAL_AUTHORIZATION.md +115 -72
  27. package/docs/LOCAL_AUTOMATION.md +27 -21
  28. package/docs/LOGGING.md +40 -19
  29. package/docs/MANAGED_JOBS.md +37 -34
  30. package/docs/MULTI_ACCOUNT.md +98 -37
  31. package/docs/OPERATIONS.md +145 -51
  32. package/docs/OVERVIEW.md +14 -11
  33. package/docs/POLICY_REFERENCE.md +71 -3
  34. package/docs/PRIVACY.md +41 -2
  35. package/docs/PROJECT_STANDARDS.md +29 -6
  36. package/docs/RELEASING.md +238 -64
  37. package/docs/TESTING.md +150 -39
  38. package/docs/THREAT_MODEL.md +164 -67
  39. package/docs/TOOL_REFERENCE.md +653 -60
  40. package/docs/UPGRADING.md +78 -18
  41. package/native/macos/MachineBridgeBackgroundInput.swift +1051 -0
  42. package/native/macos/MachineBridgeBackgroundInputSmokeFixture.swift +295 -0
  43. package/native/macos/MachineBridgeTrustBroker.swift +233 -0
  44. package/package.json +94 -16
  45. package/scripts/accepted-candidate-tarball.mjs +77 -0
  46. package/scripts/candidate-runtime-store.mjs +93 -0
  47. package/scripts/check-plan.mjs +73 -3
  48. package/scripts/check-runner.mjs +129 -17
  49. package/scripts/commit-message-check.mjs +5 -2
  50. package/scripts/consumer-package-security.mjs +293 -0
  51. package/scripts/coverage-check.mjs +251 -15
  52. package/scripts/coverage-generation.mjs +41 -0
  53. package/scripts/coverage-range-merge.mjs +41 -0
  54. package/scripts/foreground-daemon-recovery.mjs +88 -0
  55. package/scripts/generate-policy-reference.mjs +28 -5
  56. package/scripts/generate-tool-reference.mjs +1 -1
  57. package/scripts/generate-worker-types.mjs +21 -11
  58. package/scripts/github-backlog.mjs +11 -10
  59. package/scripts/github-push.mjs +62 -16
  60. package/scripts/github-release-asset.mjs +58 -0
  61. package/scripts/github-release.mjs +241 -132
  62. package/scripts/global-package-installation.mjs +68 -0
  63. package/scripts/hardened-npm-session.mjs +42 -0
  64. package/scripts/install-published-prerelease.mjs +198 -0
  65. package/scripts/local-release-acceptance.mjs +103 -45
  66. package/scripts/macos-background-input-smoke.mjs +515 -0
  67. package/scripts/network-retry.mjs +8 -1
  68. package/scripts/npm-global-prefix.mjs +27 -0
  69. package/scripts/npm-publication-policy.mjs +17 -0
  70. package/scripts/official-mcp-conformance.mjs +267 -0
  71. package/scripts/persistent-activation-process.mjs +101 -0
  72. package/scripts/prepare-pinned-npm.mjs +12 -69
  73. package/scripts/prerelease-activation.mjs +160 -0
  74. package/scripts/privacy-check.mjs +14 -6
  75. package/scripts/promotion-digest.mjs +128 -0
  76. package/scripts/publish-npm.mjs +260 -0
  77. package/scripts/published-release.mjs +132 -0
  78. package/scripts/release-acceptance.mjs +62 -54
  79. package/scripts/release-browser-extension-store.mjs +172 -0
  80. package/scripts/release-candidate-manifest.mjs +52 -0
  81. package/scripts/release-channel.mjs +106 -0
  82. package/scripts/release-diagnostic.mjs +41 -0
  83. package/scripts/release-impact-check.mjs +12 -22
  84. package/scripts/release-oauth-canary-core.mjs +325 -0
  85. package/scripts/release-oauth-canary-evidence.mjs +100 -0
  86. package/scripts/release-oauth-canary.mjs +127 -0
  87. package/scripts/release-publication-guard.mjs +67 -0
  88. package/scripts/release-soak.mjs +284 -0
  89. package/scripts/release-state.mjs +1 -1
  90. package/scripts/run-checks.mjs +44 -7
  91. package/scripts/run-worker-dry-run.mjs +21 -0
  92. package/scripts/sarif-security-gate.mjs +2 -1
  93. package/scripts/sbom-check.mjs +106 -0
  94. package/scripts/start-release-candidate.mjs +267 -44
  95. package/scripts/syntax-check.mjs +36 -14
  96. package/scripts/verification-generation-guard.mjs +15 -0
  97. package/scripts/verification-idle-sleep-guard.mjs +37 -0
  98. package/scripts/verification-state.mjs +108 -0
  99. package/scripts/wrangler-command-lifecycle.mjs +115 -0
  100. package/src/local/account-access.mjs +13 -1
  101. package/src/local/account-admin-response.mjs +92 -0
  102. package/src/local/account-admin.mjs +52 -19
  103. package/src/local/agent-context-projection.mjs +26 -7
  104. package/src/local/agent-context.mjs +88 -49
  105. package/src/local/agent-skill-discovery.mjs +16 -5
  106. package/src/local/app-automation-macos-jxa.mjs +350 -0
  107. package/src/local/app-automation.mjs +873 -163
  108. package/src/local/application-capability-projection.mjs +24 -0
  109. package/src/local/authority-context.mjs +106 -0
  110. package/src/local/autostart-log-maintenance.mjs +36 -0
  111. package/src/local/browser-bridge-http.mjs +5 -3
  112. package/src/local/browser-bridge.mjs +109 -31
  113. package/src/local/browser-broker-auth-http.mjs +67 -0
  114. package/src/local/browser-broker-auth.mjs +98 -0
  115. package/src/local/browser-broker-routes.mjs +63 -20
  116. package/src/local/browser-broker-server.mjs +17 -7
  117. package/src/local/browser-command.mjs +79 -30
  118. package/src/local/browser-computer-observation-service.mjs +266 -0
  119. package/src/local/browser-extension-identity.mjs +50 -0
  120. package/src/local/browser-extension-path.mjs +22 -0
  121. package/src/local/browser-extension-protocol.mjs +50 -11
  122. package/src/local/browser-operation-service.mjs +147 -117
  123. package/src/local/browser-pairing-grant.mjs +109 -0
  124. package/src/local/browser-pairing-http.mjs +36 -0
  125. package/src/local/browser-pairing-launch.mjs +58 -0
  126. package/src/local/browser-pairing-store.mjs +85 -48
  127. package/src/local/browser-request-registry.mjs +40 -14
  128. package/src/local/browser-request-settlement.mjs +78 -0
  129. package/src/local/browser-resource-input.mjs +74 -0
  130. package/src/local/browser-trusted-input-health.mjs +63 -0
  131. package/src/local/call-authority.mjs +21 -0
  132. package/src/local/call-capacity.mjs +45 -0
  133. package/src/local/call-registry-drain.mjs +54 -0
  134. package/src/local/call-registry.mjs +30 -15
  135. package/src/local/capability-observer.mjs +5 -0
  136. package/src/local/capability-ranking.mjs +3 -2
  137. package/src/local/child-process-settlement.mjs +132 -0
  138. package/src/local/cli-account-admin.mjs +40 -6
  139. package/src/local/cli-activate.mjs +162 -0
  140. package/src/local/cli-local-admin.mjs +20 -45
  141. package/src/local/cli-options.mjs +12 -13
  142. package/src/local/cli-ready-output.mjs +52 -0
  143. package/src/local/cli-service.mjs +91 -11
  144. package/src/local/cli.mjs +232 -150
  145. package/src/local/computer-use-application-observation.mjs +224 -0
  146. package/src/local/computer-use-arguments.mjs +270 -0
  147. package/src/local/computer-use-deadline.mjs +50 -0
  148. package/src/local/computer-use-dispatch-settlement.mjs +40 -0
  149. package/src/local/computer-use-expectation.mjs +171 -0
  150. package/src/local/computer-use-observation.mjs +769 -0
  151. package/src/local/computer-use-recovery.mjs +82 -0
  152. package/src/local/computer-use-result-budget.mjs +145 -0
  153. package/src/local/computer-use-snapshot-store.mjs +67 -0
  154. package/src/local/computer-use.mjs +2255 -0
  155. package/src/local/daemon-http-relay-auth.mjs +26 -0
  156. package/src/local/daemon-http-relay-connection.mjs +298 -0
  157. package/src/local/daemon-http-relay-request.mjs +64 -0
  158. package/src/local/daemon-http-relay-sequence.mjs +49 -0
  159. package/src/local/daemon-process.mjs +40 -7
  160. package/src/local/delegated-process-sandbox.mjs +148 -0
  161. package/src/local/device-identity.mjs +156 -49
  162. package/src/local/device-root-provider.mjs +81 -0
  163. package/src/local/directory-metadata.mjs +47 -0
  164. package/src/local/doctor-reporting.mjs +23 -0
  165. package/src/local/durable-process-spec.mjs +80 -0
  166. package/src/local/errors.mjs +25 -15
  167. package/src/local/exclusive-file.mjs +74 -26
  168. package/src/local/execution-limits.mjs +9 -0
  169. package/src/local/execution-routing.mjs +276 -0
  170. package/src/local/execution-surface.mjs +23 -0
  171. package/src/local/file-mutation-coordinator.mjs +47 -0
  172. package/src/local/file-snapshot-preservation.mjs +24 -0
  173. package/src/local/filesystem-identity.mjs +54 -0
  174. package/src/local/fixed-process-environment.mjs +21 -0
  175. package/src/local/full-access-test.mjs +31 -13
  176. package/src/local/git-commit.mjs +69 -0
  177. package/src/local/git-config-safety.mjs +55 -0
  178. package/src/local/git-log-parser.mjs +41 -0
  179. package/src/local/git-metadata-boundary.mjs +77 -0
  180. package/src/local/git-metadata-tree-safety.mjs +59 -0
  181. package/src/local/git-operation-state.mjs +19 -0
  182. package/src/local/git-service.mjs +165 -30
  183. package/src/local/hardened-npm-download-timeout.mjs +46 -0
  184. package/src/local/hardened-npm-download.mjs +109 -0
  185. package/src/local/hardened-npm-extract.mjs +20 -0
  186. package/src/local/hardened-npm-verification.mjs +104 -0
  187. package/src/local/hardened-npm.mjs +199 -0
  188. package/src/local/job-runner.mjs +244 -89
  189. package/src/local/lifecycle.mjs +6 -0
  190. package/src/local/log.mjs +19 -45
  191. package/src/local/macos-background-input.mjs +398 -0
  192. package/src/local/macos-idle-sleep-assertion.mjs +65 -0
  193. package/src/local/macos-trust-broker.mjs +404 -0
  194. package/src/local/managed-job-cancellation.mjs +42 -0
  195. package/src/local/managed-job-capacity.mjs +16 -0
  196. package/src/local/managed-job-directory-generation.mjs +60 -0
  197. package/src/local/managed-job-directory.mjs +75 -0
  198. package/src/local/managed-job-durable-process.mjs +49 -0
  199. package/src/local/managed-job-lock.mjs +46 -14
  200. package/src/local/managed-job-plan.mjs +38 -14
  201. package/src/local/managed-job-projection.mjs +23 -15
  202. package/src/local/managed-job-retention.mjs +128 -0
  203. package/src/local/managed-job-runner-claim.mjs +70 -0
  204. package/src/local/managed-job-runner.mjs +35 -10
  205. package/src/local/managed-job-storage.mjs +22 -6
  206. package/src/local/managed-job-terminal-maintenance.mjs +40 -0
  207. package/src/local/managed-job-terminal.mjs +150 -0
  208. package/src/local/managed-jobs.mjs +424 -287
  209. package/src/local/npm-cli.mjs +42 -0
  210. package/src/local/npm-environment.mjs +37 -0
  211. package/src/local/operation-authorization.mjs +68 -324
  212. package/src/local/operation-risk.mjs +51 -4
  213. package/src/local/owner-state-lock.mjs +118 -0
  214. package/src/local/package-identity.mjs +9 -0
  215. package/src/local/patch.mjs +20 -18
  216. package/src/local/path-inspection.mjs +23 -0
  217. package/src/local/policy.mjs +19 -0
  218. package/src/local/private-toolchain-integrity.mjs +54 -0
  219. package/src/local/process-execution.mjs +87 -75
  220. package/src/local/process-foreground-timeout.mjs +50 -0
  221. package/src/local/process-identity.mjs +41 -7
  222. package/src/local/process-nonreplayable-settlement.mjs +50 -0
  223. package/src/local/process-result-projection.mjs +22 -0
  224. package/src/local/process-session-events.mjs +47 -0
  225. package/src/local/process-session-remote-activity.mjs +10 -0
  226. package/src/local/process-session-termination.mjs +73 -0
  227. package/src/local/process-sessions.mjs +144 -112
  228. package/src/local/process-tracker.mjs +140 -13
  229. package/src/local/process-tree-ownership-types.d.ts +37 -0
  230. package/src/local/process-tree-ownership.mjs +57 -0
  231. package/src/local/process-tree-signal.mjs +34 -0
  232. package/src/local/process-tree-snapshot.mjs +77 -0
  233. package/src/local/process-tree-supervisor.mjs +69 -0
  234. package/src/local/process-tree.mjs +11 -53
  235. package/src/local/project-metadata.mjs +19 -6
  236. package/src/local/relay-call-recovery.mjs +58 -38
  237. package/src/local/relay-connection-classification.mjs +131 -0
  238. package/src/local/relay-connection-support.mjs +91 -0
  239. package/src/local/relay-connection.mjs +179 -272
  240. package/src/local/relay-diagnostics.mjs +91 -0
  241. package/src/local/relay-heartbeat.mjs +119 -0
  242. package/src/local/relay-liveness.mjs +109 -0
  243. package/src/local/relay-peer-diagnostics.mjs +29 -0
  244. package/src/local/release-runtime-lock.mjs +18 -0
  245. package/src/local/remote-activity-idle-sleep-guard.mjs +77 -0
  246. package/src/local/remote-configuration.mjs +48 -0
  247. package/src/local/resilient-relay-connection.mjs +178 -0
  248. package/src/local/resource-admission-diagnostics.mjs +52 -0
  249. package/src/local/resource-admission-policy.mjs +115 -0
  250. package/src/local/resource-admission.mjs +339 -0
  251. package/src/local/resource-build-root.mjs +83 -0
  252. package/src/local/resource-cargo-concurrency.mjs +38 -0
  253. package/src/local/resource-cmake-concurrency.mjs +42 -0
  254. package/src/local/resource-command-concurrency.mjs +37 -0
  255. package/src/local/resource-command-profile.mjs +176 -0
  256. package/src/local/resource-coordinator-accounting.mjs +21 -0
  257. package/src/local/resource-cpu-window.mjs +20 -0
  258. package/src/local/resource-disk-headroom.mjs +13 -0
  259. package/src/local/resource-elastic-memory.mjs +19 -0
  260. package/src/local/resource-elastic-request.mjs +36 -0
  261. package/src/local/resource-foreground-wait.mjs +29 -0
  262. package/src/local/resource-go-concurrency.mjs +43 -0
  263. package/src/local/resource-gradle-concurrency.mjs +57 -0
  264. package/src/local/resource-host-cache.mjs +39 -0
  265. package/src/local/resource-host-darwin.mjs +54 -0
  266. package/src/local/resource-host-linux.mjs +35 -0
  267. package/src/local/resource-host-sample-file.mjs +23 -0
  268. package/src/local/resource-host-snapshot.mjs +99 -0
  269. package/src/local/resource-lease-accounting.mjs +119 -0
  270. package/src/local/resource-light-command.mjs +6 -0
  271. package/src/local/resource-make-concurrency.mjs +42 -0
  272. package/src/local/resource-maven-concurrency.mjs +38 -0
  273. package/src/local/resource-ninja-command-concurrency.mjs +20 -0
  274. package/src/local/resource-ninja-concurrency.mjs +28 -0
  275. package/src/local/resource-operations.mjs +26 -10
  276. package/src/local/resource-pressure.mjs +67 -0
  277. package/src/local/resource-probe-command.mjs +35 -0
  278. package/src/local/resource-process-admission.mjs +59 -0
  279. package/src/local/resource-process-ancestry-cache.mjs +43 -0
  280. package/src/local/resource-process-ancestry.mjs +32 -0
  281. package/src/local/resource-process-priority.mjs +15 -0
  282. package/src/local/resource-project-key.mjs +53 -0
  283. package/src/local/resource-pytest-concurrency.mjs +33 -0
  284. package/src/local/resource-release-control-classification.mjs +14 -0
  285. package/src/local/resource-release-control-executable.mjs +70 -0
  286. package/src/local/resource-release-control-workspace.mjs +41 -0
  287. package/src/local/resource-request-contract.mjs +30 -0
  288. package/src/local/resource-script-classification.mjs +44 -0
  289. package/src/local/resource-shell-analysis.mjs +58 -0
  290. package/src/local/resource-staging-recovery.mjs +97 -0
  291. package/src/local/resource-swift-concurrency.mjs +31 -0
  292. package/src/local/resource-transaction-lock.mjs +189 -0
  293. package/src/local/resource-wait.mjs +48 -0
  294. package/src/local/resource-waiters.mjs +139 -0
  295. package/src/local/resource-xcode-command.mjs +7 -0
  296. package/src/local/resource-xcode-concurrency.mjs +34 -0
  297. package/src/local/resource-xcode-non-build.mjs +19 -0
  298. package/src/local/runtime-activation.mjs +700 -0
  299. package/src/local/runtime-activity-projection.mjs +48 -0
  300. package/src/local/runtime-capabilities.mjs +48 -15
  301. package/src/local/runtime-diagnostic-state.mjs +14 -0
  302. package/src/local/runtime-diagnostics.mjs +40 -13
  303. package/src/local/runtime-info-projection.mjs +60 -0
  304. package/src/local/runtime-info-relay-projection.mjs +21 -0
  305. package/src/local/runtime-paths.mjs +2 -1
  306. package/src/local/runtime-process-routing.mjs +33 -0
  307. package/src/local/runtime-relay-connection-options.mjs +44 -0
  308. package/src/local/runtime-relay-control.mjs +98 -0
  309. package/src/local/runtime-relay.mjs +26 -50
  310. package/src/local/runtime-reporting.mjs +37 -21
  311. package/src/local/runtime-resource-service.mjs +77 -0
  312. package/src/local/runtime-tool-handlers.mjs +13 -10
  313. package/src/local/runtime.mjs +244 -208
  314. package/src/local/secure-file.mjs +73 -20
  315. package/src/local/security-audit-dispatch.mjs +35 -0
  316. package/src/local/security-audit-log.mjs +215 -0
  317. package/src/local/security-audit-state.mjs +139 -0
  318. package/src/local/security-audit-storage.mjs +135 -0
  319. package/src/local/security-audit-warning.mjs +31 -0
  320. package/src/local/security-audit-worker.mjs +87 -0
  321. package/src/local/service-convergence.mjs +42 -1
  322. package/src/local/service-definition.mjs +24 -0
  323. package/src/local/service-environment.mjs +18 -10
  324. package/src/local/service-owner.mjs +146 -0
  325. package/src/local/service-ownership.mjs +17 -0
  326. package/src/local/service-restart-handoff.mjs +64 -0
  327. package/src/local/service-restart-scheduler.mjs +49 -0
  328. package/src/local/service-runtime-convergence.mjs +52 -0
  329. package/src/local/service-runtime.mjs +105 -0
  330. package/src/local/service-status.mjs +60 -0
  331. package/src/local/service.mjs +385 -92
  332. package/src/local/shell.mjs +39 -19
  333. package/src/local/ssh-key.mjs +158 -42
  334. package/src/local/state-inventory.mjs +50 -24
  335. package/src/local/state-owner-lock-inventory.mjs +23 -0
  336. package/src/local/state-root-owned-namespaces.mjs +83 -0
  337. package/src/local/state-root-retirement.mjs +89 -0
  338. package/src/local/state.mjs +386 -96
  339. package/src/local/stdio.mjs +96 -66
  340. package/src/local/support-state-projection.mjs +30 -0
  341. package/src/local/system-network-route.mjs +76 -0
  342. package/src/local/systemd-removal.mjs +20 -0
  343. package/src/local/tool-executor.mjs +85 -20
  344. package/src/local/tool-result-boundary.mjs +51 -0
  345. package/src/local/toolchain-operation-lock.mjs +41 -0
  346. package/src/local/tools.mjs +7 -5
  347. package/src/local/trusted-executable.mjs +53 -0
  348. package/src/local/trusted-git-executable.mjs +34 -0
  349. package/src/local/trusted-github-cli.mjs +24 -0
  350. package/src/local/windows-service-convergence.mjs +49 -0
  351. package/src/local/windows-service.mjs +52 -45
  352. package/src/local/worker-deployment-fingerprint.mjs +102 -0
  353. package/src/local/worker-deployment.mjs +48 -60
  354. package/src/local/worker-health.mjs +12 -4
  355. package/src/local/worker-secret-file.mjs +37 -17
  356. package/src/local/workspace-file-service.mjs +156 -239
  357. package/src/local/workspace-file-transaction.mjs +189 -0
  358. package/src/local/workspace-search.mjs +55 -0
  359. package/src/local/wrangler-toolchain/package-lock.json +1505 -0
  360. package/src/local/wrangler-toolchain/package.json +23 -0
  361. package/src/local/wrangler-toolchain-verification.mjs +135 -0
  362. package/src/local/wrangler-toolchain.mjs +188 -0
  363. package/src/shared/access-contract.json +7 -1
  364. package/src/shared/activation-recovery.mjs +49 -0
  365. package/src/shared/admin-auth.d.mts +2 -1
  366. package/src/shared/admin-auth.mjs +3 -3
  367. package/src/shared/authority-revocation.d.mts +9 -0
  368. package/src/shared/authority-revocation.mjs +28 -0
  369. package/src/shared/daemon-auth.d.mts +11 -0
  370. package/src/shared/daemon-auth.mjs +17 -0
  371. package/src/shared/device-session-auth.d.mts +20 -0
  372. package/src/shared/device-session-auth.mjs +51 -0
  373. package/src/shared/foreground-timeout.d.mts +15 -0
  374. package/src/shared/foreground-timeout.mjs +70 -0
  375. package/src/shared/log-redaction.d.mts +9 -0
  376. package/src/shared/log-redaction.mjs +51 -0
  377. package/src/shared/mcp-protocol.d.mts +27 -0
  378. package/src/shared/mcp-protocol.mjs +275 -0
  379. package/src/shared/project-overview-projection.d.mts +4 -0
  380. package/src/shared/project-overview-projection.mjs +96 -0
  381. package/src/shared/relay-contract.json +28 -0
  382. package/src/shared/result-projection.d.mts +2 -1
  383. package/src/shared/result-projection.mjs +13 -2
  384. package/src/shared/server-metadata.json +15 -9
  385. package/src/shared/tool-argument-validation.d.mts +17 -0
  386. package/src/shared/tool-argument-validation.mjs +325 -0
  387. package/src/shared/tool-call-capacity.d.mts +41 -0
  388. package/src/shared/tool-call-capacity.mjs +59 -0
  389. package/src/shared/tool-catalog.json +626 -57
  390. package/src/worker/access.ts +12 -0
  391. package/src/worker/account-admin.ts +55 -33
  392. package/src/worker/authority-revocations.ts +174 -0
  393. package/src/worker/authority.ts +52 -6
  394. package/src/worker/daemon-auth.ts +49 -68
  395. package/src/worker/daemon-channel.ts +36 -0
  396. package/src/worker/daemon-http-auth.ts +63 -0
  397. package/src/worker/daemon-http-channel.ts +120 -0
  398. package/src/worker/daemon-http-controller.ts +163 -0
  399. package/src/worker/daemon-http-protocol.ts +62 -0
  400. package/src/worker/daemon-http-registry.ts +82 -0
  401. package/src/worker/daemon-last-observation.ts +30 -0
  402. package/src/worker/daemon-liveness.ts +8 -6
  403. package/src/worker/daemon-ready-dispatch.ts +17 -0
  404. package/src/worker/daemon-ready-messages.ts +73 -0
  405. package/src/worker/daemon-ready-waiters.ts +79 -0
  406. package/src/worker/daemon-recovery-budget.ts +13 -0
  407. package/src/worker/daemon-registry.ts +58 -0
  408. package/src/worker/daemon-relay-diagnostics.ts +127 -0
  409. package/src/worker/daemon-socket-attachment.ts +55 -0
  410. package/src/worker/daemon-sockets.ts +72 -62
  411. package/src/worker/daemon-status.ts +38 -0
  412. package/src/worker/device-session-verifier.ts +129 -0
  413. package/src/worker/dpop.ts +157 -0
  414. package/src/worker/durable-process-timeout.ts +29 -0
  415. package/src/worker/errors.ts +57 -0
  416. package/src/worker/http.ts +112 -26
  417. package/src/worker/index.ts +446 -440
  418. package/src/worker/mcp-access.ts +57 -0
  419. package/src/worker/mcp-controller.ts +188 -0
  420. package/src/worker/mcp-http-accept.ts +11 -0
  421. package/src/worker/mcp-http-contract.ts +322 -0
  422. package/src/worker/mcp-initialization-compat.ts +141 -0
  423. package/src/worker/mcp-jsonrpc.ts +11 -29
  424. package/src/worker/mcp-removed-protocol.ts +17 -0
  425. package/src/worker/mcp-response-proxy.ts +135 -0
  426. package/src/worker/mcp-response-stream.ts +65 -0
  427. package/src/worker/mcp-stale-schema-compat.ts +57 -0
  428. package/src/worker/mcp-stream-proxy-contract.ts +48 -0
  429. package/src/worker/mcp-tool-call-input.ts +23 -0
  430. package/src/worker/nonce-store.ts +33 -35
  431. package/src/worker/oauth-authorization-page.ts +21 -1
  432. package/src/worker/oauth-client-admin.ts +52 -0
  433. package/src/worker/oauth-client-contract.ts +38 -0
  434. package/src/worker/oauth-controller.ts +107 -47
  435. package/src/worker/oauth-field-contract.ts +31 -0
  436. package/src/worker/oauth-record-contract.ts +7 -0
  437. package/src/worker/oauth-refresh-authority.ts +27 -0
  438. package/src/worker/oauth-refresh-exchange.ts +162 -0
  439. package/src/worker/oauth-refresh-families.ts +130 -27
  440. package/src/worker/oauth-refresh-persistence.ts +116 -0
  441. package/src/worker/oauth-state.ts +33 -18
  442. package/src/worker/oauth-store-validation.ts +131 -0
  443. package/src/worker/oauth-token-derivation.ts +33 -0
  444. package/src/worker/oauth-token-issuance.ts +119 -0
  445. package/src/worker/oauth-tokens.ts +56 -190
  446. package/src/worker/observability.ts +38 -5
  447. package/src/worker/pending-admission.ts +15 -0
  448. package/src/worker/pending-call-capacity.ts +108 -0
  449. package/src/worker/pending-call-contract.ts +42 -5
  450. package/src/worker/pending-call-deadlines.ts +75 -0
  451. package/src/worker/pending-calls.ts +131 -125
  452. package/src/worker/runtime-alarm-storage.ts +37 -0
  453. package/src/worker/runtime-alarm.ts +136 -0
  454. package/src/worker/server-info-activity.ts +36 -0
  455. package/src/worker/server-info-tool-delivery.ts +15 -0
  456. package/src/worker/server-info.ts +168 -0
  457. package/src/worker/tool-catalog.ts +47 -1
  458. package/src/worker/tool-timeout.ts +75 -14
  459. package/src/worker/websocket-protocol.ts +26 -2
  460. package/src/worker/worker-edge-guard.ts +90 -0
  461. package/src/worker/worker-edge-log.ts +65 -0
  462. package/src/worker/worker-entry.ts +52 -0
  463. package/src/worker/worker-mcp-config.ts +23 -0
  464. package/src/worker/worker-metadata.ts +48 -0
  465. package/src/worker/worker-rate-limit-key.ts +30 -0
  466. package/src/worker/worker-runtime-config.ts +20 -0
  467. package/src/worker/worker-static-routes.ts +54 -0
  468. package/src/worker/worker-task-lifetime.ts +18 -0
  469. package/tsconfig.local.json +17 -1
  470. package/wrangler.jsonc +13 -0
  471. package/src/local/cli-approval.mjs +0 -117
  472. package/src/local/operation-state-lock.mjs +0 -92
  473. package/src/worker/mcp-session.ts +0 -72
@@ -0,0 +1,429 @@
1
+ (() => {
2
+ if (globalThis.__machineBridgeDevtoolsObservation) return;
3
+
4
+ const ACTIONABLE_ROLES = new Set([
5
+ "button", "link", "textbox", "searchbox", "checkbox", "radio", "switch", "combobox", "listbox",
6
+ "option", "menuitem", "menuitemcheckbox", "menuitemradio", "tab", "slider", "spinbutton", "treeitem",
7
+ ]);
8
+ const MAX_TEXT = 2000;
9
+ const SENSITIVE_IDENTITY = /(?:password|passwd|secret|token|api[-_ ]?key|otp|one[-_ ]?time|verification|cvc|cvv|security[-_ ]?code|card[-_ ]?number)/i;
10
+
11
+ async function capture(tabId, options = {}, state = null) {
12
+ const session = globalThis.__machineBridgeDevtoolsSession;
13
+ if (!session?.run) throw new Error("DevTools session module is unavailable");
14
+ if (!Number.isSafeInteger(tabId) || tabId < 1) throw new Error("tabId is invalid");
15
+ if (!options || typeof options !== "object" || Array.isArray(options)) throw new Error("DevTools observation options are invalid");
16
+ const maxNodes = exactBoundedInteger(options.maxNodes, "maxNodes", 600, 1, 2000);
17
+ const maxFrames = exactBoundedInteger(options.maxFrames, "maxFrames", 32, 1, 64);
18
+ const depth = exactBoundedInteger(options.depth, "depth", 12, 1, 16);
19
+ const includeValues = exactBoolean(options.includeValues, "includeValues", false);
20
+ const includeScreenshot = exactBoolean(options.includeScreenshot, "includeScreenshot", true);
21
+ const format = exactImageFormat(options.format);
22
+ const quality = exactBoundedInteger(options.quality, "quality", 90, 1, 100);
23
+ const focusQuery = normalizedQuery(options.focusQuery);
24
+
25
+ return session.run(tabId, async ({ send }) => {
26
+ throwIfCancelled(state);
27
+ await send("Page.enable");
28
+ throwIfCancelled(state);
29
+ await send("Accessibility.enable");
30
+ throwIfCancelled(state);
31
+
32
+ const frameTreeBefore = await send("Page.getFrameTree");
33
+ const frameTree = frameTreeBefore?.frameTree;
34
+ const allFramesBefore = flattenFrameTree(frameTree);
35
+ const frames = allFramesBefore.slice(0, maxFrames);
36
+ const rootBefore = frames[0] || null;
37
+ const rootFrameId = protocolString(frameTree?.frame?.id);
38
+ const metrics = await send("Page.getLayoutMetrics").catch((error) => {
39
+ if (error?.machineBridgeDevtoolsTimeout === true) throw error;
40
+ return null;
41
+ });
42
+ throwIfCancelled(state);
43
+
44
+ let domSnapshot = null;
45
+ try {
46
+ domSnapshot = await send("DOMSnapshot.captureSnapshot", {
47
+ computedStyles: [],
48
+ includePaintOrder: true,
49
+ includeDOMRects: false,
50
+ });
51
+ } catch (error) {
52
+ if (error?.machineBridgeDevtoolsTimeout === true) throw error;
53
+ }
54
+ throwIfCancelled(state);
55
+
56
+ const axRaw = [];
57
+ const axFrameFailures = [];
58
+ for (const frame of frames) {
59
+ throwIfCancelled(state);
60
+ const frameId = protocolString(frame?.id);
61
+ if (!frameId) {
62
+ axFrameFailures.push("");
63
+ continue;
64
+ }
65
+ try {
66
+ const response = await send("Accessibility.getFullAXTree", { depth, frameId });
67
+ for (const node of Array.isArray(response?.nodes) ? response.nodes : []) axRaw.push(node);
68
+ } catch (error) {
69
+ if (error?.machineBridgeDevtoolsTimeout === true) throw error;
70
+ axFrameFailures.push(frameId);
71
+ }
72
+ }
73
+
74
+ let screenshot = null;
75
+ if (includeScreenshot) {
76
+ try {
77
+ screenshot = await send("Page.captureScreenshot", {
78
+ format,
79
+ ...(format === "jpeg" ? { quality } : {}),
80
+ fromSurface: true,
81
+ captureBeyondViewport: false,
82
+ optimizeForSpeed: true,
83
+ });
84
+ } catch (error) {
85
+ if (error?.machineBridgeDevtoolsTimeout === true) throw error;
86
+ }
87
+ }
88
+ throwIfCancelled(state);
89
+
90
+ const frameTreeAfter = await send("Page.getFrameTree");
91
+ const rootAfter = flattenFrameTree(frameTreeAfter?.frameTree)[0] || null;
92
+ const navigationCoherent = sameDocumentEpoch(rootBefore, rootAfter);
93
+ const geometry = geometryByBackendNode(domSnapshot);
94
+ const accessibility = normalizeAccessibility(axRaw, geometry, metrics, {
95
+ maxNodes,
96
+ includeValues,
97
+ rootFrameId,
98
+ focusQuery,
99
+ });
100
+
101
+ return {
102
+ protocol: "cdp-1.3",
103
+ document_epoch: rootBefore ? documentEpoch(rootBefore) : "",
104
+ navigation_coherent: navigationCoherent,
105
+ frame_tree: frames.map((frame) => ({
106
+ id: protocolString(frame?.id),
107
+ parent_id: protocolString(frame?.parentId),
108
+ loader_id: protocolString(frame?.loaderId),
109
+ url: protocolString(frame?.url),
110
+ name: protocolString(frame?.name, 500),
111
+ })),
112
+ frames_truncated: allFramesBefore.length > maxFrames,
113
+ accessibility: {
114
+ kind: "chromium-accessibility",
115
+ nodes: accessibility.nodes,
116
+ returned_nodes: accessibility.nodes.length,
117
+ observed_nodes: accessibility.observedNodes,
118
+ ignored_nodes: accessibility.ignoredNodes,
119
+ truncated: accessibility.truncated,
120
+ depth,
121
+ query_matched: accessibility.queryMatched,
122
+ query_match_count: accessibility.queryMatchCount,
123
+ query_search_exhaustive: focusQuery ? false : null,
124
+ top_query_score: accessibility.topQueryScore,
125
+ failed_frame_count: axFrameFailures.length,
126
+ available: frames.length > 0 && axFrameFailures.length < frames.length,
127
+ },
128
+ components: {
129
+ layout_metrics: Boolean(metrics),
130
+ dom_snapshot: Boolean(domSnapshot),
131
+ accessibility: frames.length > 0 && axFrameFailures.length < frames.length,
132
+ screenshot_requested: includeScreenshot,
133
+ screenshot: validBase64Payload(screenshot?.data),
134
+ },
135
+ viewport: normalizeViewport(metrics),
136
+ screenshot: validBase64Payload(screenshot?.data)
137
+ ? { mime_type: format === "jpeg" ? "image/jpeg" : "image/png", data: screenshot.data }
138
+ : null,
139
+ };
140
+ });
141
+ }
142
+
143
+ function normalizeAccessibility(rawNodes, geometry, metrics, { maxNodes, includeValues, rootFrameId, focusQuery }) {
144
+ const candidates = [];
145
+ let ignoredNodes = 0;
146
+ for (let index = 0; index < rawNodes.length; index += 1) {
147
+ const raw = rawNodes[index];
148
+ if (!raw || raw.ignored === true) { ignoredNodes += 1; continue; }
149
+ const role = bounded(axValue(raw.role), 200).toLowerCase();
150
+ const name = bounded(axValue(raw.name), 1000);
151
+ const description = bounded(axValue(raw.description), 1000);
152
+ const properties = propertyMap(raw.properties);
153
+ const backendNodeId = Number.isSafeInteger(raw.backendDOMNodeId) && raw.backendDOMNodeId > 0 ? raw.backendDOMNodeId : 0;
154
+ const layout = backendNodeId ? geometry.get(backendNodeId) || null : null;
155
+ const frameId = protocolString(raw.frameId) || protocolString(layout?.frameId) || protocolString(rootFrameId);
156
+ const sensitive = isSensitive(role, name, description, properties);
157
+ const node = {
158
+ ax_id: bounded(raw.nodeId, 200),
159
+ parent_ax_id: bounded(raw.parentId, 200),
160
+ backend_dom_node_id: backendNodeId || null,
161
+ frame_id: frameId,
162
+ role,
163
+ name,
164
+ description,
165
+ disabled: booleanProperty(properties.disabled),
166
+ focused: booleanProperty(properties.focused),
167
+ focusable: booleanProperty(properties.focusable),
168
+ editable: booleanProperty(properties.editable),
169
+ checked: scalarProperty(properties.checked),
170
+ selected: booleanProperty(properties.selected),
171
+ expanded: booleanProperty(properties.expanded),
172
+ required: booleanProperty(properties.required),
173
+ sensitive,
174
+ clickable: layout?.clickable === true || ACTIONABLE_ROLES.has(role),
175
+ bounding_box: layout?.bbox || null,
176
+ paint_order: Number.isFinite(layout?.paintOrder) ? layout.paintOrder : null,
177
+ };
178
+ if (includeValues && !sensitive && !["textbox", "searchbox"].includes(role)) {
179
+ const value = axValue(raw.value);
180
+ if (value !== "") node.value = bounded(value, MAX_TEXT);
181
+ }
182
+ const queryScore = focusMatchScore(node, focusQuery);
183
+ const score = salienceScore(node, metrics, index, queryScore);
184
+ candidates.push({ node, score, queryScore, index });
185
+ }
186
+ candidates.sort((left, right) => right.score - left.score || left.index - right.index);
187
+ const queryMatches = focusQuery ? candidates.filter((candidate) => candidate.queryScore > 0) : [];
188
+ const selected = candidates.slice(0, maxNodes).map(({ node, queryScore }) => ({
189
+ ...node,
190
+ ...(focusQuery ? { focus_match_score: Math.round(queryScore) } : {}),
191
+ }));
192
+ return {
193
+ nodes: selected,
194
+ observedNodes: rawNodes.length,
195
+ ignoredNodes,
196
+ truncated: candidates.length > selected.length,
197
+ queryMatched: focusQuery ? queryMatches.length > 0 : null,
198
+ queryMatchCount: focusQuery ? queryMatches.length : null,
199
+ topQueryScore: focusQuery && queryMatches.length ? Math.max(...queryMatches.map((candidate) => candidate.queryScore)) : null,
200
+ };
201
+ }
202
+
203
+ function geometryByBackendNode(snapshot) {
204
+ const map = new Map();
205
+ const strings = Array.isArray(snapshot?.strings) ? snapshot.strings : [];
206
+ for (const document of Array.isArray(snapshot?.documents) ? snapshot.documents : []) {
207
+ const frameId = stringAt(strings, document?.frameId);
208
+ const scrollX = finiteNumber(document?.scrollOffsetX, 0);
209
+ const scrollY = finiteNumber(document?.scrollOffsetY, 0);
210
+ const backendIds = Array.isArray(document?.nodes?.backendNodeId) ? document.nodes.backendNodeId : [];
211
+ const clickableIndexes = new Set(Array.isArray(document?.nodes?.isClickable?.index) ? document.nodes.isClickable.index : []);
212
+ const layoutIndexes = Array.isArray(document?.layout?.nodeIndex) ? document.layout.nodeIndex : [];
213
+ const bounds = Array.isArray(document?.layout?.bounds) ? document.layout.bounds : [];
214
+ const paintOrders = Array.isArray(document?.layout?.paintOrders) ? document.layout.paintOrders : [];
215
+ const layoutByNodeIndex = new Map();
216
+ for (let layoutIndex = 0; layoutIndex < layoutIndexes.length; layoutIndex += 1) {
217
+ const nodeIndex = layoutIndexes[layoutIndex];
218
+ if (!Number.isSafeInteger(nodeIndex) || nodeIndex < 0) continue;
219
+ const rect = normalizeRect(bounds[layoutIndex], scrollX, scrollY);
220
+ layoutByNodeIndex.set(nodeIndex, {
221
+ bbox: rect,
222
+ paintOrder: finiteNumber(paintOrders[layoutIndex], null),
223
+ });
224
+ }
225
+ for (let nodeIndex = 0; nodeIndex < backendIds.length; nodeIndex += 1) {
226
+ const backendNodeId = backendIds[nodeIndex];
227
+ if (!Number.isSafeInteger(backendNodeId) || backendNodeId <= 0) continue;
228
+ const layout = layoutByNodeIndex.get(nodeIndex) || null;
229
+ map.set(backendNodeId, {
230
+ frameId,
231
+ bbox: layout?.bbox || null,
232
+ paintOrder: layout?.paintOrder ?? null,
233
+ clickable: clickableIndexes.has(nodeIndex),
234
+ });
235
+ }
236
+ }
237
+ return map;
238
+ }
239
+
240
+ function focusMatchScore(node, focusQuery) {
241
+ if (!focusQuery) return 0;
242
+ const identity = `${node.role} ${node.name} ${node.description}`.trim().replace(/\s+/g, " ").toLowerCase();
243
+ if (identity === focusQuery) return 240;
244
+ if (identity.includes(focusQuery)) return 180;
245
+ const tokens = focusQuery.split(" ").filter((token) => token.length > 1);
246
+ return Math.min(120, tokens.filter((token) => identity.includes(token)).length * 30);
247
+ }
248
+
249
+ function salienceScore(node, metrics, index, queryScore) {
250
+ let score = 0;
251
+ if (ACTIONABLE_ROLES.has(node.role)) score += 100;
252
+ if (node.clickable) score += 30;
253
+ if (node.focused) score += 50;
254
+ if (node.focusable) score += 12;
255
+ if (node.editable) score += 20;
256
+ if (node.name) score += 12;
257
+ if (node.bounding_box) {
258
+ score += 10;
259
+ if (intersectsViewport(node.bounding_box, metrics)) score += 40;
260
+ const area = Math.max(0, node.bounding_box.width * node.bounding_box.height);
261
+ if (area > 0 && area < 2_000_000) score += Math.min(10, Math.log10(area + 1) * 2);
262
+ }
263
+ if (node.disabled === true) score -= 20;
264
+ score += queryScore;
265
+ if (["genericcontainer", "none", "unknown", "statictext", "inlinetextbox"].includes(node.role)) score -= 40;
266
+ score -= index / 1_000_000;
267
+ return score;
268
+ }
269
+
270
+ function intersectsViewport(rect, metrics) {
271
+ const viewport = metrics?.cssVisualViewport || metrics?.visualViewport || null;
272
+ if (!viewport) return false;
273
+ const width = finiteNumber(viewport.clientWidth, finiteNumber(viewport.width, 0));
274
+ const height = finiteNumber(viewport.clientHeight, finiteNumber(viewport.height, 0));
275
+ if (!(width > 0 && height > 0)) return false;
276
+ return rect.x + rect.width > 0 && rect.y + rect.height > 0 && rect.x < width && rect.y < height;
277
+ }
278
+
279
+ function normalizedQuery(value) {
280
+ if (value === undefined) return "";
281
+ if (typeof value !== "string" || value.length > 1000 || value.includes("\0")) throw new Error("focusQuery is invalid");
282
+ return value.trim().replace(/\s+/g, " ").toLowerCase();
283
+ }
284
+
285
+ function normalizeViewport(metrics) {
286
+ const viewport = metrics?.cssVisualViewport || metrics?.visualViewport || {};
287
+ const layout = metrics?.cssLayoutViewport || metrics?.layoutViewport || {};
288
+ return {
289
+ x: finiteNumber(viewport.pageX, finiteNumber(layout.pageX, 0)),
290
+ y: finiteNumber(viewport.pageY, finiteNumber(layout.pageY, 0)),
291
+ width: finiteNumber(viewport.clientWidth, finiteNumber(layout.clientWidth, 0)),
292
+ height: finiteNumber(viewport.clientHeight, finiteNumber(layout.clientHeight, 0)),
293
+ scale: finiteNumber(viewport.scale, 1),
294
+ };
295
+ }
296
+
297
+ function flattenFrameTree(tree) {
298
+ if (!tree?.frame) return [];
299
+ const out = [];
300
+ const stack = [tree];
301
+ while (stack.length) {
302
+ const current = stack.pop();
303
+ if (!current?.frame) continue;
304
+ out.push(current.frame);
305
+ const children = Array.isArray(current.childFrames) ? current.childFrames : [];
306
+ for (let index = children.length - 1; index >= 0; index -= 1) stack.push(children[index]);
307
+ }
308
+ return out;
309
+ }
310
+
311
+ function sameDocumentEpoch(left, right) {
312
+ if (!left || !right) return false;
313
+ const leftId = protocolString(left.id, 200);
314
+ const rightId = protocolString(right.id, 200);
315
+ const leftLoaderId = protocolString(left.loaderId, 300);
316
+ const rightLoaderId = protocolString(right.loaderId, 300);
317
+ const leftUrl = protocolString(left.url, 8192);
318
+ const rightUrl = protocolString(right.url, 8192);
319
+ return Boolean(leftId && rightId && leftLoaderId && rightLoaderId && leftUrl && rightUrl)
320
+ && leftId === rightId && leftLoaderId === rightLoaderId && leftUrl === rightUrl;
321
+ }
322
+
323
+ function documentEpoch(frame) {
324
+ const id = protocolString(frame?.id, 200);
325
+ const loaderId = protocolString(frame?.loaderId, 300);
326
+ const url = protocolString(frame?.url, 8192);
327
+ return id && loaderId && url ? `${id}:${loaderId}:${url}` : "";
328
+ }
329
+
330
+ function propertyMap(properties) {
331
+ const out = Object.create(null);
332
+ for (const property of Array.isArray(properties) ? properties : []) {
333
+ const name = protocolString(property?.name, 200);
334
+ if (name) out[name] = property?.value;
335
+ }
336
+ return out;
337
+ }
338
+
339
+ function axValue(value) {
340
+ const raw = value?.value;
341
+ if (raw === undefined || raw === null) return "";
342
+ if (["string", "number", "boolean"].includes(typeof raw)) return String(raw);
343
+ return "";
344
+ }
345
+
346
+ function scalarProperty(value) {
347
+ const raw = value?.value;
348
+ if (raw === undefined || raw === null) return null;
349
+ if (["string", "number", "boolean"].includes(typeof raw)) return raw;
350
+ return null;
351
+ }
352
+
353
+ function booleanProperty(value) {
354
+ const raw = value?.value;
355
+ return typeof raw === "boolean" ? raw : null;
356
+ }
357
+
358
+ function isSensitive(role, name, description, properties) {
359
+ if (role === "passwordtext" || role === "password") return true;
360
+ const identity = `${name} ${description} ${axValue(properties.autocomplete)}`;
361
+ return SENSITIVE_IDENTITY.test(identity);
362
+ }
363
+
364
+ function normalizeRect(raw, scrollX, scrollY) {
365
+ if (!Array.isArray(raw) || raw.length < 4) return null;
366
+ const [x, y, width, height] = raw;
367
+ if (![x, y, width, height].every((value) => typeof value === "number" && Number.isFinite(value)) || width < 0 || height < 0) return null;
368
+ return {
369
+ x: round2(x - scrollX),
370
+ y: round2(y - scrollY),
371
+ width: round2(width),
372
+ height: round2(height),
373
+ };
374
+ }
375
+
376
+ function stringAt(strings, index) {
377
+ if (!Number.isSafeInteger(index) || index < 0) return "";
378
+ return protocolString(strings[index]);
379
+ }
380
+
381
+ function finiteNumber(value, fallback) {
382
+ return typeof value === "number" && Number.isFinite(value) ? value : fallback;
383
+ }
384
+
385
+ function round2(value) {
386
+ return Math.round(value * 100) / 100;
387
+ }
388
+
389
+ function bounded(value, max) {
390
+ return String(value ?? "").slice(0, max);
391
+ }
392
+
393
+ function protocolString(value, maxLength = 32768) {
394
+ if (typeof value !== "string" || value.length > maxLength || value.includes("\0")) return "";
395
+ return value;
396
+ }
397
+
398
+ function exactBoundedInteger(value, label, fallback, min, max) {
399
+ if (value === undefined) return fallback;
400
+ if (!Number.isSafeInteger(value) || value < min || value > max) throw new Error(`${label} must be an integer from ${min} to ${max}`);
401
+ return value;
402
+ }
403
+
404
+ function exactBoolean(value, label, fallback) {
405
+ if (value === undefined) return fallback;
406
+ if (typeof value !== "boolean") throw new Error(`${label} must be boolean`);
407
+ return value;
408
+ }
409
+
410
+ function exactImageFormat(value) {
411
+ if (value === undefined) return "png";
412
+ if (value !== "png" && value !== "jpeg") throw new Error("format must be png or jpeg");
413
+ return value;
414
+ }
415
+
416
+ function validBase64Payload(value) {
417
+ if (typeof value !== "string" || !value || value.length > 64 * 1024 * 1024 || value.length % 4 !== 0) return false;
418
+ return /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value);
419
+ }
420
+
421
+ function throwIfCancelled(state) {
422
+ if (state?.cancelled) throw new Error("browser request cancelled");
423
+ }
424
+
425
+ Object.defineProperty(globalThis, "__machineBridgeDevtoolsObservation", {
426
+ value: Object.freeze({ capture, geometryByBackendNode, flattenFrameTree }),
427
+ configurable: false,
428
+ });
429
+ })();
@@ -0,0 +1,48 @@
1
+ (() => {
2
+ if (globalThis.__machineBridgeDevtoolsSession) return;
3
+ const ATTACH_TIMEOUT_MS = 5_000;
4
+ const COMMAND_TIMEOUT_MS = 5_000;
5
+ const DETACH_TIMEOUT_MS = 1_500;
6
+ const tabQueues = new Map();
7
+ async function run(tabId, operation, options = {}) {
8
+ if (!Number.isInteger(tabId) || tabId < 1) throw new Error("DevTools session requires a valid tab");
9
+ if (typeof operation !== "function") throw new Error("DevTools session requires an operation");
10
+ const previous = tabQueues.get(tabId) || Promise.resolve();
11
+ const current = previous.catch(() => { /* A prior tab operation must not poison the serialized queue. */ }).then(() => {
12
+ options.beforeAttach?.();
13
+ return withDebugger(tabId, operation);
14
+ });
15
+ tabQueues.set(tabId, current);
16
+ try { return await current; } finally { if (tabQueues.get(tabId) === current) tabQueues.delete(tabId); }
17
+ }
18
+ async function withDebugger(tabId, operation) {
19
+ const target = { tabId };
20
+ let attached = false;
21
+ const attach = Promise.resolve().then(() => chrome.debugger.attach(target, "1.3"));
22
+ try {
23
+ try { await deadline(attach, ATTACH_TIMEOUT_MS, "DevTools attach"); attached = true; }
24
+ catch (error) { if (error?.machineBridgeDevtoolsTimeout === true) attach.then(() => detachQuietly(target), () => {}); throw error; }
25
+ const send = (method, params = {}) => deadline(
26
+ Promise.resolve().then(() => chrome.debugger.sendCommand(target, method, params)), COMMAND_TIMEOUT_MS, `DevTools command ${method}`,
27
+ );
28
+ return await operation(Object.freeze({ tabId, target, send }));
29
+ } finally { if (attached) await detachQuietly(target); }
30
+ }
31
+ async function detachQuietly(target) {
32
+ try { await deadline(Promise.resolve().then(() => chrome.debugger.detach(target)), DETACH_TIMEOUT_MS, "DevTools detach"); }
33
+ catch { /* Session ownership is already ending; detach is bounded best-effort cleanup. */ }
34
+ }
35
+ async function deadline(operation, timeoutMs, label) {
36
+ if (typeof globalThis.setTimeout !== "function") return operation;
37
+ let timer;
38
+ const timeout = new Promise((_, reject) => { timer = globalThis.setTimeout(() => reject(timeoutError(label)), timeoutMs); });
39
+ try { return await Promise.race([operation, timeout]); }
40
+ finally { if (timer !== undefined && typeof globalThis.clearTimeout === "function") globalThis.clearTimeout(timer); }
41
+ }
42
+ function timeoutError(label) {
43
+ const error = new Error(`${label} timed out`);
44
+ Object.defineProperty(error, "machineBridgeDevtoolsTimeout", { value: true });
45
+ return error;
46
+ }
47
+ Object.defineProperty(globalThis, "__machineBridgeDevtoolsSession", { value: Object.freeze({ run }), configurable: false });
48
+ })();
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "manifest_version": 3,
3
3
  "name": "Machine Bridge Browser",
4
- "version": "2.0.0",
4
+ "version": "3.0.0",
5
5
  "description": "Connects the current Chromium browser profile to the local Machine Bridge runtime for user-authorized automation.",
6
6
  "permissions": [
7
7
  "tabs",
@@ -24,11 +24,12 @@
24
24
  "js": [
25
25
  "pairing.js"
26
26
  ],
27
- "run_at": "document_idle"
27
+ "run_at": "document_start"
28
28
  }
29
29
  ],
30
30
  "action": {
31
31
  "default_title": "Machine Bridge Browser"
32
32
  },
33
- "version_name": "2.0.0"
33
+ "version_name": "3.0.0-beta.102",
34
+ "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxryYkpZhq8+VAQLHcGS9BAHQcyKX8RHGIpIwvtIVRU/rcOcE0bNdnM0aZJ/h6xWQsGDHlhvjT2+1aJaAn/9k8473BRWajzVXld961CdHYVFVHoce2hHiSJ0xydWrHMMZhAm0mN0UzjEpgZ0tMw209efcZHIvSwuxhteZMRy4kyiVjwFlOf5oXFCxRuCJnPj3AK9CmCf4XgEBuPIJ0TZmjGHOOdBvJmbCNnAWXYEo5/mf7MfCGhV4IJ1hNuhpoNQfOFKMUcw9/v/IpT62XpfXdGYTfGYCmCjC+gntK1spbkr2P4/2+sYMQtLpse71mpSNGXfcf3abU55Vpn+gncSxRQIDAQAB"
34
35
  }