pi-agent-browser-native 0.9.2 → 0.9.4

package/dist/extensions/agent-browser/lib/webmcp-observation.js

@@ -4,22 +4,29 @@ const observation = new AsyncLocalStorage();
 export function getNativeWebMcpCatalog(data) {
     if (Array.isArray(data)) {
         for (let index = data.length - 1; index >= 0; index -= 1) {
-            const catalog = getNativeWebMcpCatalog(isRecord(data[index]) ? data[index].result : undefined);
-            if (catalog)
+            const row = data[index];
+            const catalog = getNativeWebMcpCatalog(isRecord(row) ? row.result : undefined);
+            if (catalog) {
                 return catalog;
+            }
         }
     }
-    if (!isRecord(data) || !isRecord(data.webmcp))
+    if (!isRecord(data) || !isRecord(data.webmcp)) {
         return undefined;
-    return Array.isArray(data.webmcp.tools) || data.webmcp.status === "unavailable" ? data.webmcp : undefined;
+    }
+    return Array.isArray(data.webmcp.tools) || data.webmcp.status === "unavailable"
+        ? data.webmcp
+        : undefined;
 }
 export function observeNativeWebMcp(data) {
     const current = observation.getStore();
-    if (!current)
+    if (!current) {
         return;
+    }
     const catalog = getNativeWebMcpCatalog(data);
-    if (catalog)
+    if (catalog) {
         current.catalog = catalog;
+    }
 }
 /** Native discovery is edge-triggered; helper reads must not swallow its updates. */
 export async function collectNativeWebMcp(run) {

package/dist/extensions/agent-browser/lib/windows-stock-launcher.js

@@ -3,42 +3,46 @@ import { dirname, isAbsolute, join, resolve } from "node:path";
 import { isMainThread } from "node:worker_threads";
 import pathKey from "path-key";
 import which from "which";
-/** Bypass only upstream's optimized npm CMD shim: cmd.exe loses literal CR/LF.
- * Keep which/path-key aligned with cross-spawn's public dependency versions.
- * Unknown/custom launchers (including other npm layouts) stay on cross-spawn.
- */
-export function resolveWindowsStockLauncher(cwd, env) {
-    if (process.platform !== "win32" || !isMainThread)
-        return undefined;
-    // which reads parent PATHEXT; cmd.exe reads the child's. Node also handles
-    // duplicate case-insensitive environment keys differently from path-key.
-    // In those ambiguous cases, keep the original transport and its selection.
-    const values = (name) => Object.entries(env)
-        .filter(([key, value]) => key.toUpperCase() === name && value !== undefined).map(([, value]) => value);
-    const paths = values("PATH"), extensions = values("PATHEXT");
-    if (paths.length !== 1 || !paths[0] || extensions.length !== 1 || extensions[0] !== process.env.PATHEXT
-        || values("NODEFAULTCURRENTDIRECTORYINEXEPATH").length)
-        return undefined;
-    // A custom COMSPEC can implement different command selection/semantics.
-    // Compare filesystem identity, not short/long Windows path spellings.
+import { isRecord } from "./parsing.js";
+function environmentValues(env, name) {
+    return Object.entries(env)
+        .filter(([key, value]) => key.toUpperCase() === name && value !== undefined)
+        .map(([, value]) => value);
+}
+function hasStockEnvironment(env) {
+    const paths = environmentValues(env, "PATH");
+    const extensions = environmentValues(env, "PATHEXT");
+    return (paths.length === 1 &&
+        paths.at(0) !== undefined &&
+        paths.at(0) !== "" &&
+        extensions.length === 1 &&
+        extensions.at(0) === process.env.PATHEXT &&
+        environmentValues(env, "NODEFAULTCURRENTDIRECTORYINEXEPATH").length === 0);
+}
+function hasNativeCommandShell() {
+    const { comspec, SystemRoot } = process.env;
+    if (comspec === undefined ||
+        comspec.length === 0 ||
+        !isAbsolute(comspec) ||
+        SystemRoot === undefined ||
+        SystemRoot.length === 0) {
+        return false;
+    }
     try {
-        if (!process.env.comspec || !isAbsolute(process.env.comspec) || !process.env.SystemRoot)
-            return undefined;
-        const shell = statSync(process.env.comspec, { bigint: true });
-        const native = statSync(join(process.env.SystemRoot, "System32", "cmd.exe"), { bigint: true });
-        if (shell.dev !== native.dev || shell.ino !== native.ino)
-            return undefined;
+        const shell = statSync(comspec, { bigint: true });
+        const native = statSync(join(SystemRoot, "System32", "cmd.exe"), { bigint: true });
+        return shell.dev === native.dev && shell.ino === native.ino;
     }
     catch {
-        return undefined;
+        return false;
     }
+}
+function selectLauncher(cwd, env) {
     const previousCwd = process.cwd();
-    let selected;
     try {
-        // which 2 has no cwd option. Like cross-spawn, change cwd only during
-        // synchronous resolution, restoring it before any caller can await.
+        // which 2 has no cwd option; synchronous resolution matches cross-spawn's child cwd.
         process.chdir(cwd);
-        selected = which.sync("agent-browser", { path: env[pathKey({ env })], nothrow: true });
+        return which.sync("agent-browser", { path: env[pathKey({ env })], nothrow: true });
     }
     catch {
         return undefined;
@@ -46,21 +50,25 @@ export function resolveWindowsStockLauncher(cwd, env) {
     finally {
         process.chdir(previousCwd);
     }
-    // cross-spawn's second (extensionless) lookup cannot select this CMD shim.
-    if (!selected || !selected.toLowerCase().endsWith(".cmd"))
-        return undefined;
+}
+function stockLauncherBinary(absoluteShim) {
     try {
-        // which can return a relative PATH result; interpret it in the child cwd.
-        const absoluteShim = resolve(cwd, selected);
-        if (statSync(absoluteShim).size > 512)
+        if (statSync(absoluteShim).size > 512) {
             return undefined;
+        }
         const text = readFileSync(absoluteShim, "utf8");
-        if (!/^@ECHO off\r?\n"%~dp0node_modules\\agent-browser\\bin\\agent-browser-win32-x64\.exe" %\*(?:\r?\n)?(?![\s\S])/.test(text))
+        if (!/^@ECHO off\r?\n"%~dp0node_modules\\agent-browser\\bin\\agent-browser-win32-x64\.exe" %\*(?:\r?\n)?(?![\s\S])/.test(text)) {
             return undefined;
+        }
         const packageRoot = join(dirname(absoluteShim), "node_modules", "agent-browser");
         const manifest = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
-        if (manifest.name !== "agent-browser" || !["bin/agent-browser.js", "./bin/agent-browser.js"].includes(manifest.bin?.["agent-browser"]))
+        if (!isRecord(manifest) || manifest.name !== "agent-browser" || !isRecord(manifest.bin)) {
+            return undefined;
+        }
+        const entrypoint = manifest.bin["agent-browser"];
+        if (entrypoint !== "bin/agent-browser.js" && entrypoint !== "./bin/agent-browser.js") {
             return undefined;
+        }
         const binary = join(packageRoot, "bin", "agent-browser-win32-x64.exe");
         return statSync(binary).isFile() ? binary : undefined;
     }
@@ -68,3 +76,21 @@ export function resolveWindowsStockLauncher(cwd, env) {
         return undefined;
     }
 }
+/** Bypass only upstream's optimized npm CMD shim: cmd.exe loses literal CR/LF.
+ * Keep which/path-key aligned with cross-spawn's public dependency versions.
+ * Unknown/custom launchers stay on cross-spawn.
+ */
+export function resolveWindowsStockLauncher(cwd, env) {
+    if (process.platform !== "win32" ||
+        !isMainThread ||
+        !hasStockEnvironment(env) ||
+        !hasNativeCommandShell()) {
+        return undefined;
+    }
+    const selected = selectLauncher(cwd, env);
+    // cross-spawn's extensionless lookup cannot select this CMD shim.
+    if (selected === undefined || selected === null || !selected.toLowerCase().endsWith(".cmd")) {
+        return undefined;
+    }
+    return stockLauncherBinary(resolve(cwd, selected));
+}

package/dist/extensions/agent-browser/script-worker.js

@@ -2,8 +2,9 @@ import { randomBytes } from "node:crypto";
 import { createContext, runInContext, Script } from "node:vm";
 function parseLimit(value, label) {
     const parsed = Number(value);
-    if (!Number.isSafeInteger(parsed) || parsed <= 0)
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
         throw new Error(`Invalid ${label}.`);
+    }
     return parsed;
 }
 const maxMessageBytes = parseLimit(process.argv[2], "script IPC message limit");
@@ -11,7 +12,8 @@ const maxCumulativeBytes = parseLimit(process.argv[3], "script IPC cumulative li
 let cumulativeBytes = 0;
 let inputBuffer = Buffer.alloc(0);
 let started = false;
-const sandbox = Object.create(null);
+const sandbox = {};
+Object.setPrototypeOf(sandbox, null);
 const context = createContext(sandbox, {
     codeGeneration: { strings: false, wasm: false },
     name: "agent-browser-script",
@@ -19,11 +21,13 @@ const context = createContext(sandbox, {
 const bridgeKey = `__piab_send_${randomBytes(16).toString("hex")}`;
 const stateName = `__piab_state_${randomBytes(16).toString("hex")}`;
 const hostSend = (json) => {
-    if (typeof json !== "string")
+    if (typeof json !== "string") {
         return false;
+    }
     const bytes = Buffer.byteLength(json, "utf8") + 1;
-    if (bytes > maxMessageBytes || cumulativeBytes + bytes > maxCumulativeBytes)
+    if (bytes > maxMessageBytes || cumulativeBytes + bytes > maxCumulativeBytes) {
         return false;
+    }
     cumulativeBytes += bytes;
     try {
         process.stdout.write(`${json}\n`);
@@ -36,10 +40,16 @@ const hostSend = (json) => {
 Object.setPrototypeOf(hostSend, null);
 Object.freeze(hostSend);
 sandbox[bridgeKey] = hostSend;
-runInContext("const " + stateName + " = (() => {\n" +
+runInContext("const " +
+    stateName +
+    " = (() => {\n" +
     "  'use strict';\n" +
-    "  const send = globalThis[" + JSON.stringify(bridgeKey) + "];\n" +
-    "  delete globalThis[" + JSON.stringify(bridgeKey) + "];\n" +
+    "  const send = globalThis[" +
+    JSON.stringify(bridgeKey) +
+    "];\n" +
+    "  delete globalThis[" +
+    JSON.stringify(bridgeKey) +
+    "];\n" +
     "  for (const name of ['console','process','require','Buffer','fetch','WebSocket','setTimeout','setInterval','setImmediate','queueMicrotask','clearTimeout','clearInterval','clearImmediate']) Object.defineProperty(globalThis, name, { value: undefined, writable: false, configurable: false });\n" +
     "  const NativePromise = Promise;\n" +
     "  const promiseThen = Promise.prototype.then;\n" +
@@ -47,7 +57,9 @@ runInContext("const " + stateName + " = (() => {\n" +
     "  const pending = new Map();\n" +
     "  let nextId = 0;\n" +
     "  const encode = (value) => { const json = JSON.stringify(value); if (typeof json !== 'string') throw new TypeError('Value must be JSON-serializable.'); return json; };\n" +
-    "  const sendValue = (value) => { const json = encode(value); if (json.length + 1 > " + maxMessageBytes + " || send(json) !== true) throw new RangeError('Script IPC limit exceeded.'); };\n" +
+    "  const sendValue = (value) => { const json = encode(value); if (json.length + 1 > " +
+    String(maxMessageBytes) +
+    " || send(json) !== true) throw new RangeError('Script IPC limit exceeded.'); };\n" +
     "  const browser = function browser(params) {\n" +
     "    return new NativePromise((resolve, reject) => {\n" +
     "      const id = ++nextId;\n" +
@@ -91,18 +103,67 @@ runInContext("const " + stateName + " = (() => {\n" +
     "  });\n" +
     "})();", context, { timeout: 1_000 });
 const deliver = runInContext(`${stateName}.deliver`, context, { timeout: 1_000 });
+if (typeof deliver !== "function") {
+    throw new Error("Script response bridge was not initialized.");
+}
 function fail(name, message) {
     hostSend(JSON.stringify({ type: "complete", error: { name, message } }));
 }
 function describeError(error, fallback) {
-    if (!error || typeof error !== "object")
+    if (error === null || typeof error !== "object") {
         return { message: fallback, name: "Error" };
-    const candidate = error;
+    }
+    const message = "message" in error ? error.message : undefined;
+    const name = "name" in error ? error.name : undefined;
     return {
-        message: typeof candidate.message === "string" ? candidate.message.replace(/[\r\n]+/g, " ").slice(0, 400) : fallback,
-        name: typeof candidate.name === "string" ? candidate.name.slice(0, 80) : "Error",
+        message: typeof message === "string" ? message.replace(/[\r\n]+/g, " ").slice(0, 400) : fallback,
+        name: typeof name === "string" ? name.slice(0, 80) : "Error",
     };
 }
+function startScript(message) {
+    if (message === null ||
+        typeof message !== "object" ||
+        !("type" in message) ||
+        message.type !== "start" ||
+        !("code" in message) ||
+        typeof message.code !== "string") {
+        fail("Error", "Invalid script start message.");
+        return;
+    }
+    started = true;
+    try {
+        const source = `'use strict';\n${stateName}.run(async function () {\n'use strict';\n${message.code}\n});`;
+        const script = new Script(source, {
+            filename: "agent-browser-script.js",
+            importModuleDynamically() {
+                process.exit(70);
+            },
+        });
+        script.runInContext(context);
+    }
+    catch (error) {
+        const described = describeError(error, "Script compilation failed.");
+        fail(described.name, described.message);
+    }
+}
+function deliverBrowserResponse(message, line) {
+    if (message === null ||
+        typeof message !== "object" ||
+        !("type" in message) ||
+        message.type !== "response") {
+        fail("Error", "Invalid parent IPC response.");
+        return;
+    }
+    try {
+        if (typeof deliver !== "function") {
+            throw new Error("Script response bridge is unavailable.");
+        }
+        Reflect.apply(deliver, undefined, [line]);
+    }
+    catch {
+        fail("Error", "Invalid browser response envelope.");
+    }
+}
 function handleLine(line) {
     const bytes = Buffer.byteLength(line, "utf8") + 1;
     if (bytes > maxMessageBytes || cumulativeBytes + bytes > maxCumulativeBytes) {
@@ -119,37 +180,10 @@ function handleLine(line) {
         return;
     }
     if (!started) {
-        if (!message || typeof message !== "object" || message.type !== "start" || typeof message.code !== "string") {
-            fail("Error", "Invalid script start message.");
-            return;
-        }
-        started = true;
-        try {
-            const source = `'use strict';\n${stateName}.run(async function () {\n'use strict';\n${message.code}\n});`;
-            const script = new Script(source, {
-                filename: "agent-browser-script.js",
-                importModuleDynamically() {
-                    process.exit(70);
-                },
-            });
-            script.runInContext(context, { timeout: undefined });
-        }
-        catch (error) {
-            const described = describeError(error, "Script compilation failed.");
-            fail(described.name, described.message);
-        }
+        startScript(message);
         return;
     }
-    if (!message || typeof message !== "object" || message.type !== "response") {
-        fail("Error", "Invalid parent IPC response.");
-        return;
-    }
-    try {
-        deliver(line);
-    }
-    catch {
-        fail("Error", "Invalid browser response envelope.");
-    }
+    deliverBrowserResponse(message, line);
 }
 process.stdin.on("data", (rawChunk) => {
     const chunk = Buffer.isBuffer(rawChunk) ? rawChunk : Buffer.from(rawChunk);
@@ -161,12 +195,15 @@ process.stdin.on("data", (rawChunk) => {
     }
     for (;;) {
         const newline = inputBuffer.indexOf(10);
-        if (newline < 0)
+        if (newline < 0) {
             break;
+        }
         const line = inputBuffer.subarray(0, newline).toString("utf8");
         inputBuffer = inputBuffer.subarray(newline + 1);
         handleLine(line);
     }
 });
-process.stdin.on("error", () => undefined);
+process.stdin.on("error", () => {
+    // Parent transport teardown is handled by the parent's worker lifecycle owner.
+});
 hostSend(JSON.stringify({ type: "ready" }));

package/dist/scripts/agent-browser-target.mjs

@@ -11,11 +11,13 @@ function stableVersionParts(version) {
 export function isSupportedAgentBrowserVersion(version) {
     const actual = stableVersionParts(version);
     const minimum = stableVersionParts(MINIMUM_AGENT_BROWSER_VERSION);
-    if (!actual || !minimum)
+    if (!actual || !minimum) {
         return false;
+    }
     for (let index = 0; index < minimum.length; index += 1) {
-        if (actual[index] !== minimum[index])
+        if (actual[index] !== minimum[index]) {
             return actual[index] > minimum[index];
+        }
     }
     return true;
 }