pi-agent-browser-native 0.9.5 → 0.9.7

package/dist/extensions/agent-browser/lib/managed-session-snapshots.js

@@ -1,181 +0,0 @@
-import { lstatSync, readdirSync, rmdirSync, unlinkSync } from "node:fs";
-import { join } from "node:path";
-import { ensureManagedSessionRestoreStorageIsSecure, getManagedRestoreSessionsDirectory, isManagedSessionRestoreKey, resolveManagedSessionRestoreHome, } from "./managed-session-storage.js";
-import { getErrorCode } from "./process-errors.js";
-import { OWNED_RESTORE_SNAPSHOT_FAMILIES_TO_KEEP, OWNED_RESTORE_SNAPSHOT_MAX_RECORDS, OWNED_RESTORE_SNAPSHOT_MANIFEST_PREFIX, OWNED_RESTORE_SNAPSHOT_MAX_AGE_MS, pathExistsOrIsUnreadable, validateOwnedSnapshotPath, getManifestDirectory, ensureManifestDirectory, getCheckoutLineageHash, manifestHasLineage, ensureManifestLineage, removeManifestLineages, writeRecord, scanOwnedSnapshots, } from "./managed-session-snapshot-records.js";
-function discardRecord(path) {
-    try {
-        unlinkSync(path);
-    }
-    catch {
-        /* Ownership records are best-effort after the snapshot is absent. */
-    }
-}
-function removeSnapshot(snapshot) {
-    try {
-        const current = lstatSync(snapshot.path);
-        if (current.isSymbolicLink() || !current.isFile() || current.mtimeMs !== snapshot.mtimeMs) {
-            return { removed: 0, changed: false };
-        }
-        unlinkSync(snapshot.path);
-        discardRecord(snapshot.recordPath);
-        return { removed: 1, changed: true };
-    }
-    catch (error) {
-        if (getErrorCode(error) === "ENOENT") {
-            discardRecord(snapshot.recordPath);
-            return { removed: 0, changed: true };
-        }
-        return { removed: 0, changed: false };
-    }
-}
-function captureScope(options) {
-    const parentEnv = options.parentEnv ?? process.env;
-    const platform = options.platform ?? process.platform;
-    const restoreKey = options.restoreKey;
-    if (!isManagedSessionRestoreKey(restoreKey)) {
-        return undefined;
-    }
-    const home = resolveManagedSessionRestoreHome(parentEnv, platform);
-    if (home === undefined || home.length === 0) {
-        return undefined;
-    }
-    const directory = getManagedRestoreSessionsDirectory(home, options.namespace);
-    const manifestDirectory = getManifestDirectory(directory, restoreKey);
-    const hasCurrentManifest = pathExistsOrIsUnreadable(manifestDirectory);
-    if (!ensureManagedSessionRestoreStorageIsSecure(parentEnv, platform, options.namespace)) {
-        return undefined;
-    }
-    const hasStatePath = options.statePath !== undefined && options.statePath.length > 0;
-    const lineage = getCheckoutLineageHash(options.cwd, platform);
-    if (!prepareManifest(manifestDirectory, lineage, platform, hasStatePath || hasCurrentManifest)) {
-        return undefined;
-    }
-    return {
-        home,
-        namespace: options.namespace,
-        platform,
-        restoreKey,
-        directory,
-        manifestDirectory,
-        hasCurrentManifest,
-        lineage,
-    };
-}
-function prepareManifest(directory, lineage, platform, needed) {
-    return (!needed ||
-        (ensureManifestDirectory(directory, platform) &&
-            prepareLineage(directory, lineage, platform, true)));
-}
-function prepareLineage(directory, lineage, platform, needed) {
-    return (!needed ||
-        (lineage !== undefined &&
-            lineage.length > 0 &&
-            ensureManifestLineage(directory, lineage, platform)));
-}
-function recordClosedSnapshot(scope, statePath) {
-    if (statePath === undefined || statePath.length === 0) {
-        return true;
-    }
-    const path = validateOwnedSnapshotPath({ ...scope, path: statePath });
-    return (path === undefined ||
-        path.length === 0 ||
-        writeRecord(scope.manifestDirectory, path, scope.platform));
-}
-function pruneCurrentScope(scope, staleBefore) {
-    let removed = 0;
-    for (let pass = 0; pass <= OWNED_RESTORE_SNAPSHOT_MAX_RECORDS; pass += 1) {
-        const snapshots = scanOwnedSnapshots(scope);
-        const candidates = snapshots.filter((snapshot, index) => index >= OWNED_RESTORE_SNAPSHOT_MAX_RECORDS ||
-            (index >= OWNED_RESTORE_SNAPSHOT_FAMILIES_TO_KEEP && snapshot.mtimeMs < staleBefore));
-        if (candidates.length === 0) {
-            break;
-        }
-        let changed = false;
-        for (const snapshot of candidates) {
-            const result = removeSnapshot(snapshot);
-            removed += result.removed;
-            changed ||= result.changed;
-        }
-        if (!changed) {
-            break;
-        }
-    }
-    return removed;
-}
-function removeEmptyManifest(directory, platform) {
-    try {
-        if (readdirSync(directory).filter((name) => /^[a-f\d]{64}\.json$/.test(name)).length === 0) {
-            removeManifestLineages(directory, platform);
-        }
-        if (readdirSync(directory).length === 0) {
-            rmdirSync(directory);
-        }
-    }
-    catch {
-        /* Unknown/concurrently modified entries keep the manifest intact. */
-    }
-}
-function pruneOtherManifest(scope, name, staleBefore) {
-    const restoreKey = name.slice(`${OWNED_RESTORE_SNAPSHOT_MANIFEST_PREFIX}-`.length);
-    // The predicate also validates the restore-key format on this untrusted directory name.
-    // oxlint-disable-next-line typescript/no-unnecessary-condition
-    if (!isManagedSessionRestoreKey(restoreKey) || restoreKey === scope.restoreKey) {
-        return 0;
-    }
-    const directory = join(scope.directory, name);
-    if (!ensureManifestDirectory(directory, scope.platform)) {
-        return 0;
-    }
-    if (scope.lineage === undefined ||
-        !manifestHasLineage(directory, scope.lineage, scope.platform)) {
-        return 0;
-    }
-    let snapshots;
-    try {
-        snapshots = scanOwnedSnapshots({ ...scope, manifestDirectory: directory, restoreKey });
-    }
-    catch {
-        return 0;
-    }
-    let removed = 0;
-    for (const snapshot of snapshots) {
-        if (snapshot.mtimeMs < staleBefore) {
-            removed += removeSnapshot(snapshot).removed;
-        }
-    }
-    removeEmptyManifest(directory, scope.platform);
-    return removed;
-}
-function pruneExpiredOtherRestoreKeys(scope, staleBefore) {
-    let entries;
-    try {
-        entries = readdirSync(scope.directory, { withFileTypes: true });
-    }
-    catch {
-        return 0;
-    }
-    let removed = 0;
-    for (const entry of entries) {
-        if (entry.isDirectory() &&
-            entry.name.startsWith(`${OWNED_RESTORE_SNAPSHOT_MANIFEST_PREFIX}-`)) {
-            removed += pruneOtherManifest(scope, entry.name, staleBefore);
-        }
-    }
-    return removed;
-}
-/** After an owned close, expire only close-proven snapshots while retaining two fallbacks. */
-export function pruneOwnedManagedSessionRestoreSnapshots(options) {
-    const scope = captureScope(options);
-    if (!scope || !recordClosedSnapshot(scope, options.statePath)) {
-        return 0;
-    }
-    const staleBefore = Date.now() - OWNED_RESTORE_SNAPSHOT_MAX_AGE_MS;
-    const current = (options.statePath !== undefined && options.statePath.length > 0) || scope.hasCurrentManifest;
-    let removed = current ? pruneCurrentScope(scope, staleBefore) : 0;
-    if (scope.lineage === undefined || scope.lineage.length === 0) {
-        return removed;
-    }
-    removed += pruneExpiredOtherRestoreKeys(scope, staleBefore);
-    return removed;
-}

package/dist/extensions/agent-browser/lib/managed-session-storage.js

@@ -1,126 +0,0 @@
-import { lstatSync, mkdirSync, readdirSync, realpathSync } from "node:fs";
-import { homedir } from "node:os";
-import { isAbsolute, join, win32 } from "node:path";
-import { canonicalizeAgentBrowserNamespace } from "./argv-grammar.js";
-import { isTrustedPosixDirectory } from "./managed-session-posix-storage.js";
-import { getCurrentProcessUid } from "./process-identity.js";
-import { getErrorCode } from "./process-errors.js";
-export { isManagedSessionRestoreKey, createManagedSessionRestoreKey, getManagedSessionRestoreScope, hasManagedSessionRestoreProjectIdentity, resolveManagedSessionRestoreCheckoutRoot, } from "./managed-session-project-identity.js";
-function validHomeCandidate(candidate, platform) {
-    return (candidate.length > 0 &&
-        candidate.trim() === candidate &&
-        (platform === "win32" ? win32.isAbsolute(candidate) : isAbsolute(candidate)));
-}
-export function resolveManagedSessionRestoreHome(parentEnv, platform = process.platform) {
-    const configuredHome = platform === "win32" ? parentEnv.USERPROFILE : parentEnv.HOME;
-    const candidate = configuredHome ?? homedir();
-    if (!validHomeCandidate(candidate, platform)) {
-        return undefined;
-    }
-    if (platform === "win32") {
-        return candidate;
-    }
-    try {
-        const canonical = realpathSync(candidate);
-        return isTrustedPosixDirectory(canonical, true, platform) ? canonical : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-export function ensureOwnerOnlyDirectory(path, platform = process.platform) {
-    try {
-        try {
-            mkdirSync(path, { mode: 0o700 });
-        }
-        catch (error) {
-            if (getErrorCode(error) !== "EEXIST") {
-                return false;
-            }
-        }
-        const entry = lstatSync(path);
-        if (entry.isSymbolicLink() || !entry.isDirectory()) {
-            return false;
-        }
-        if (platform === "win32") {
-            return true;
-        }
-        const uid = getCurrentProcessUid();
-        return uid !== undefined && entry.uid === uid && (entry.mode & 0o077) === 0;
-    }
-    catch {
-        return false;
-    }
-}
-export function directoryContainsSymlink(path) {
-    try {
-        return readdirSync(path, { withFileTypes: true }).some((entry) => entry.isSymbolicLink());
-    }
-    catch {
-        return true;
-    }
-}
-function hasValidEncryptionKey(parentEnv) {
-    const value = parentEnv.AGENT_BROWSER_ENCRYPTION_KEY;
-    return typeof value === "string" && /^[a-f\d]{64}$/i.test(value);
-}
-export function getManagedRestoreSessionsDirectory(home, namespace) {
-    const canonicalNamespace = canonicalizeAgentBrowserNamespace(namespace);
-    return canonicalNamespace !== undefined && canonicalNamespace.length > 0
-        ? join(home, ".agent-browser", "namespaces", canonicalNamespace, "state", "sessions")
-        : join(home, ".agent-browser", "sessions");
-}
-function ensureRestoreStateDirectory(root, namespace, platform) {
-    const canonicalNamespace = canonicalizeAgentBrowserNamespace(namespace);
-    const components = canonicalNamespace !== undefined && canonicalNamespace.length > 0
-        ? ["namespaces", canonicalNamespace, "state", "sessions"]
-        : ["sessions"];
-    let path = root;
-    for (const component of components) {
-        path = join(path, component);
-        if (!ensureOwnerOnlyDirectory(path, platform)) {
-            return undefined;
-        }
-    }
-    return path;
-}
-/** Require the native 256-bit key format and secure each automatic restore storage directory. */
-export function ensureManagedSessionRestoreStorageIsSecure(parentEnv = process.env, platform = process.platform, namespace) {
-    if (parentEnv.AGENT_BROWSER_ENCRYPTION_KEY !== undefined && !hasValidEncryptionKey(parentEnv)) {
-        return false;
-    }
-    if (platform === "win32") {
-        return hasValidEncryptionKey(parentEnv);
-    }
-    const home = resolveManagedSessionRestoreHome(parentEnv, platform);
-    if (home === undefined) {
-        return false;
-    }
-    const root = join(home, ".agent-browser");
-    if (!ensureOwnerOnlyDirectory(root, platform)) {
-        return false;
-    }
-    const path = ensureRestoreStateDirectory(root, namespace, platform);
-    if (path === undefined || directoryContainsSymlink(path)) {
-        return false;
-    }
-    return secureRestoreTemporaryDirectory(path, platform);
-}
-function secureRestoreTemporaryDirectory(path, platform) {
-    const temporaryDirectory = join(path, ".tmp");
-    return (ensureOwnerOnlyDirectory(temporaryDirectory, platform) &&
-        !directoryContainsSymlink(temporaryDirectory));
-}
-export function getManagedSessionRestoreProtectedStorageEnv(restoreEnabled, parentEnv, platform = process.platform) {
-    if (!restoreEnabled) {
-        return {};
-    }
-    const home = resolveManagedSessionRestoreHome(parentEnv, platform);
-    if (home === undefined) {
-        return {};
-    }
-    return {
-        AGENT_BROWSER_ENCRYPTION_KEY: parentEnv.AGENT_BROWSER_ENCRYPTION_KEY,
-        ...(platform === "win32" ? { USERPROFILE: home } : { HOME: home }),
-    };
-}

package/dist/extensions/agent-browser/lib/native-confirmation.js

@@ -1,140 +0,0 @@
-import { getExplicitNavigationTarget } from "./page-target-navigation.js";
-import { isRecord } from "./parsing.js";
-function isNonemptyString(value) {
-    return typeof value === "string" && value.length > 0;
-}
-function confirmationIdentity(value) {
-    if (!isNonemptyString(value.id) ||
-        !isNonemptyString(value.sessionName) ||
-        (value.namespace !== undefined && typeof value.namespace !== "string")) {
-        return undefined;
-    }
-    return { id: value.id, sessionName: value.sessionName, namespace: value.namespace };
-}
-function guardedProvenance(value) {
-    if (!isNonemptyString(value.command) || !isNonemptyString(value.action)) {
-        return undefined;
-    }
-    const fresh = value.state === "cleared" &&
-        value.command === "snapshot" &&
-        value.action === "snapshot" &&
-        value.refSnapshotFresh === true;
-    return {
-        command: value.command,
-        action: value.action,
-        ...(fresh ? { refSnapshotFresh: true } : {}),
-    };
-}
-function explicitReadCapabilities(value) {
-    return isRecord(value) && value.readRequiresConfirmation === true
-        ? { readRequiresConfirmation: true }
-        : undefined;
-}
-export function parseReadConfirmation(value) {
-    if (!isRecord(value) ||
-        (value.source !== "native-explicit-url-read" && value.source !== "native-guarded-action") ||
-        (value.state !== "pending" && value.state !== "cleared")) {
-        return undefined;
-    }
-    const identity = confirmationIdentity(value);
-    if (identity === undefined) {
-        return undefined;
-    }
-    if (value.source === "native-explicit-url-read") {
-        const capabilities = explicitReadCapabilities(value.capabilities);
-        return {
-            ...identity,
-            source: value.source,
-            state: value.state,
-            ...(capabilities !== undefined ? { capabilities } : {}),
-        };
-    }
-    const provenance = guardedProvenance(value);
-    return provenance === undefined
-        ? undefined
-        : { ...identity, ...provenance, source: value.source, state: value.state };
-}
-function parsePendingControl(value) {
-    if (!isRecord(value) ||
-        value.confirmation_required !== true ||
-        !isNonemptyString(value.confirmation_id) ||
-        !isNonemptyString(value.action)) {
-        return undefined;
-    }
-    return {
-        id: value.confirmation_id,
-        action: value.action,
-        capabilities: explicitReadCapabilities(value.capabilities),
-    };
-}
-const TAB_TRANSPORT_KEYS = new Set([
-    "confirmation_required",
-    "confirmation_id",
-    "action",
-    "capabilities",
-    "after_confirmation",
-    "guidance",
-]);
-function matchesTabContinuation(after, commandTokens) {
-    return (Array.isArray(after) &&
-        after.length === 2 &&
-        after[0] === "open" &&
-        isNonemptyString(after[1]) &&
-        after[1] === getExplicitNavigationTarget(commandTokens));
-}
-export function getNativeTabContinuationGuidance(commandTokens, data) {
-    if (commandTokens[0] !== "tab" || commandTokens[1] !== "new" || !isRecord(data)) {
-        return undefined;
-    }
-    const pending = parsePendingControl(data);
-    if (pending?.action !== "tab_new" ||
-        !Object.keys(data).every((key) => TAB_TRANSPORT_KEYS.has(key))) {
-        return undefined;
-    }
-    if (!matchesTabContinuation(data.after_confirmation, commandTokens)) {
-        return undefined;
-    }
-    // Transport prose only: approval creates the tab; the continuation is never stored or executed.
-    return typeof data.guidance === "string" && data.guidance.trim().length > 0
-        ? data.guidance
-        : undefined;
-}
-export function getNativePendingControl(commandTokens, data) {
-    if (!isRecord(data)) {
-        return undefined;
-    }
-    // Only native control fields and validated tab transport. Page output is never provenance.
-    const controlKeys = new Set([
-        "confirmation_required",
-        "confirmation_id",
-        "action",
-        "capabilities",
-    ]);
-    if (!Object.keys(data).every((key) => controlKeys.has(key)) &&
-        getNativeTabContinuationGuidance(commandTokens, data) === undefined) {
-        return undefined;
-    }
-    return parsePendingControl(data);
-}
-export function getConfirmedNativeResult(data, current) {
-    const action = current.source === "native-explicit-url-read" ? "read" : current.action;
-    return isRecord(data) &&
-        data.confirmed === true &&
-        data.action === action &&
-        isRecord(data.result)
-        ? data.result
-        : undefined;
-}
-export function isSuccessfulNativeConfirmedClose(commandTokens, data) {
-    if (commandTokens[0] !== "confirm" ||
-        commandTokens.length !== 2 ||
-        !isRecord(data) ||
-        data.confirmed !== true ||
-        data.action !== "close") {
-        return false;
-    }
-    return (isRecord(data.result) &&
-        data.result.success === true &&
-        isRecord(data.result.data) &&
-        data.result.data.closed === true);
-}

package/dist/extensions/agent-browser/lib/native-output.js

@@ -1,81 +0,0 @@
-import { JsonSchema } from "./json-schema.js";
-import { isRecord } from "./parsing.js";
-import { isBooleanFlagEnabled } from "./argv-grammar.js";
-import { finalizeAgentBrowserFailure } from "./pi-tool-rendering.js";
-import { isPlainTextInspectionArgs } from "./runtime.js";
-import { projectAgentBrowserObservation, OBSERVATION_INLINE_MAX_CHARS, isStringArray, } from "./results/presentation/content.js";
-import { renderAgentBrowserObservation } from "./results/presentation/large-output.js";
-export const AGENT_BROWSER_NAMESPACE = {
-    name: "browser",
-    description: "Browser commands, bounded browser code, advanced UI checks, Electron, and optional web search.",
-    instructions: "Use agent_browser for native commands and batch --bail for fixed sequences. Use agent_browser_code for a fresh bounded JS cell with a persistent browser. Enable advanced direct tools with agent_browser_tools before calling them. Check success and nextActions; structured imageObservations are capture metadata, not inline images. Optional web search is available only when configured. Full browser instructions remain in the agent_browser prompt section.",
-};
-export const AGENT_BROWSER_OUTPUT_SCHEMA = JsonSchema.Object({
-    success: JsonSchema.Boolean(),
-    resultCategory: JsonSchema.Union([
-        JsonSchema.Literal("success"),
-        JsonSchema.Literal("failure"),
-    ]),
-    data: JsonSchema.Optional(JsonSchema.Unsafe({})),
-    error: JsonSchema.Optional(JsonSchema.Unsafe({})),
-    summary: JsonSchema.Optional(JsonSchema.String()),
-    nextActions: JsonSchema.Optional(JsonSchema.Array(JsonSchema.Object({}))),
-}, { additionalProperties: true });
-function inputArgs(input) {
-    return isRecord(input) && isStringArray(input.args) ? input.args : undefined;
-}
-function isJsonRequest(input) {
-    return (isRecord(input) && ("code" in input || isBooleanFlagEnabled(inputArgs(input) ?? [], "--json")));
-}
-function isJsonValue(value) {
-    if (value === null ||
-        typeof value === "string" ||
-        typeof value === "number" ||
-        typeof value === "boolean") {
-        return true;
-    }
-    if (Array.isArray(value)) {
-        return value.every(isJsonValue);
-    }
-    return isRecord(value) && Object.values(value).every(isJsonValue);
-}
-function serializedObservation(value) {
-    // Serialization keeps native JSON omission/coercion semantics; validate the decoded unknown boundary.
-    const decoded = JSON.parse(JSON.stringify(value));
-    if (!isJsonValue(decoded)) {
-        throw new Error("Browser observation did not serialize to a JSON value.");
-    }
-    return decoded;
-}
-/** Final public boundary, after execution, persistence, and any requested output export. */
-export async function finalizeAgentBrowserNativeResult(result, input) {
-    const finalized = finalizeAgentBrowserFailure(result, input);
-    // Native help/version stays plain text; the entrypoint intentionally skips observation rendering for it.
-    if (isPlainTextInspectionArgs(inputArgs(input) ?? [])) {
-        return finalized;
-    }
-    const succeeded = finalized.isError !== true;
-    // The normal entrypoint supplies the exact bounded projection, including its complete spill.
-    if (isRecord(result.structuredContent) && result.structuredContent.success === succeeded) {
-        return finalized;
-    }
-    const details = isRecord(result.details) ? result.details : {};
-    const observation = projectAgentBrowserObservation(details, succeeded);
-    if (JSON.stringify(observation).length > OBSERVATION_INLINE_MAX_CHARS) {
-        const rendered = await renderAgentBrowserObservation({
-            content: finalized.content,
-            details,
-            succeeded,
-            json: isJsonRequest(input),
-            // The caller's exact visible output stays inline (for example formatted search results); only the structured field is bounded.
-            preserveContent: true,
-        });
-        const { artifactManifest, ...renderedResult } = rendered;
-        return finalizeAgentBrowserFailure({
-            ...finalized,
-            ...renderedResult,
-            details: artifactManifest ? { ...details, artifactManifest } : details,
-        }, input);
-    }
-    return { ...finalized, structuredContent: serializedObservation(observation) };
-}