playwriter 0.2.0 → 0.3.1

package/dist/bippy.js

@@ -951,7 +951,7 @@ ${e3.stack}` : ``;
     return !(!t2 || !re2.test(t2) || ie2.test(t2));
   };
 
-  // dist/_bippy-entry-26306-1779191184823.js
+  // dist/_bippy-entry-35395-1781365259216.js
   globalThis.__bippy = {
     getFiberFromHostInstance: Pe,
     getDisplayName: Te,

package/dist/cdp-log.d.ts

@@ -7,10 +7,13 @@ export type CdpLogEntry = {
 };
 export type CdpLogger = {
     log(entry: CdpLogEntry): void;
+    /** Wait for all pending writes (and any in-flight rotation) to complete */
+    flush(): Promise<void>;
     logFilePath: string;
 };
-export declare function createCdpLogger({ logFilePath, maxStringLength, }?: {
+export declare function createCdpLogger({ logFilePath, maxStringLength, maxEntries, }?: {
     logFilePath?: string;
     maxStringLength?: number;
+    maxEntries?: number;
 }): CdpLogger;
 //# sourceMappingURL=cdp-log.d.ts.map

package/dist/cdp-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdp-log.d.ts","sourceRoot":"","sources":["../src/cdp-log.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,CAAA;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC/B,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IAC7B,WAAW,EAAE,MAAM,CAAA;CACpB,CAAA;AA4BD,wBAAgB,eAAe,CAAC,EAC9B,WAAW,EACX,eAAe,GAChB,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,SAAS,CAqBrE"}
+{"version":3,"file":"cdp-log.d.ts","sourceRoot":"","sources":["../src/cdp-log.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,CAAA;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC/B,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IAC7B,2EAA2E;IAC3E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;CACpB,CAAA;AAqCD,wBAAgB,eAAe,CAAC,EAC9B,WAAW,EACX,eAAe,EACf,UAAU,GACX,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,SAAS,CAmD1F"}

package/dist/cdp-log.js

@@ -24,7 +24,14 @@ function createTruncatingReplacer({ maxStringLength }) {
         return value;
     };
 }
-export function createCdpLogger({ logFilePath, maxStringLength, } = {}) {
+const DEFAULT_MAX_ENTRIES = 10_000;
+function resolvePositiveInt(value, fallback) {
+    if (value == null || !Number.isFinite(value) || value < 2) {
+        return fallback;
+    }
+    return Math.floor(value);
+}
+export function createCdpLogger({ logFilePath, maxStringLength, maxEntries, } = {}) {
     const resolvedLogFilePath = logFilePath || LOG_CDP_FILE_PATH;
     const logDir = path.dirname(resolvedLogFilePath);
     if (!fs.existsSync(logDir)) {
@@ -32,14 +39,44 @@ export function createCdpLogger({ logFilePath, maxStringLength, } = {}) {
     }
     fs.writeFileSync(resolvedLogFilePath, '');
     let queue = Promise.resolve();
+    let lineCount = 0;
     const maxLength = maxStringLength ?? DEFAULT_MAX_STRING_LENGTH;
+    const envMaxEntries = Number(process.env.PLAYWRITER_CDP_LOG_MAX_ENTRIES);
+    const resolvedMaxEntries = resolvePositiveInt(maxEntries, resolvePositiveInt(envMaxEntries, DEFAULT_MAX_ENTRIES));
+    // Keep half the entries after rotation so we don't rotate on every write
+    const keepAfterRotation = Math.floor(resolvedMaxEntries / 2);
+    // Atomic rotation: write to temp file then rename to avoid corruption on crash
+    const rotate = async () => {
+        try {
+            const content = await fs.promises.readFile(resolvedLogFilePath, 'utf-8');
+            const lines = content.split('\n').filter((l) => {
+                return l.length > 0;
+            });
+            const kept = lines.slice(-keepAfterRotation);
+            const tmpPath = `${resolvedLogFilePath}.tmp`;
+            await fs.promises.writeFile(tmpPath, kept.join('\n') + '\n');
+            await fs.promises.rename(tmpPath, resolvedLogFilePath);
+            lineCount = kept.length;
+        }
+        catch {
+            // If rotation fails (disk error, permissions), keep logging without rotation.
+            // lineCount stays high so rotation will be retried on next write.
+        }
+    };
     const log = (entry) => {
         const replacer = createTruncatingReplacer({ maxStringLength: maxLength });
         const line = JSON.stringify(entry, replacer);
-        queue = queue.then(() => fs.promises.appendFile(resolvedLogFilePath, `${line}\n`));
+        queue = queue.then(async () => {
+            await fs.promises.appendFile(resolvedLogFilePath, `${line}\n`);
+            lineCount++;
+            if (lineCount > resolvedMaxEntries) {
+                await rotate();
+            }
+        });
     };
     return {
         log,
+        flush: () => queue,
         logFilePath: resolvedLogFilePath,
     };
 }

package/dist/cdp-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"cdp-log.js","sourceRoot":"","sources":["../src/cdp-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAe9C,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,IAAI,CAAC,CAAA;AAElG,SAAS,cAAc,CAAC,KAAa,EAAE,SAAiB;IACtD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAA;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,eAAe,cAAc,SAAS,CAAA;AAC3E,CAAC;AAED,SAAS,wBAAwB,CAAC,EAAE,eAAe,EAA+B;IAChF,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAA;IAClC,OAAO,CAAC,IAAY,EAAE,KAAc,EAAE,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,YAAY,CAAA;YACrB,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAC9B,WAAW,EACX,eAAe,MACuC,EAAE;IACxD,MAAM,mBAAmB,GAAG,WAAW,IAAI,iBAAiB,CAAA;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAA;IAEzC,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC5C,MAAM,SAAS,GAAG,eAAe,IAAI,yBAAyB,CAAA;IAE9D,MAAM,GAAG,GAAG,CAAC,KAAkB,EAAQ,EAAE;QACvC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAA;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC5C,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAA;IACpF,CAAC,CAAA;IAED,OAAO;QACL,GAAG;QACH,WAAW,EAAE,mBAAmB;KACjC,CAAA;AACH,CAAC"}
+{"version":3,"file":"cdp-log.js","sourceRoot":"","sources":["../src/cdp-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAiB9C,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,IAAI,CAAC,CAAA;AAElG,SAAS,cAAc,CAAC,KAAa,EAAE,SAAiB;IACtD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAA;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,eAAe,cAAc,SAAS,CAAA;AAC3E,CAAC;AAED,SAAS,wBAAwB,CAAC,EAAE,eAAe,EAA+B;IAChF,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAA;IAClC,OAAO,CAAC,IAAY,EAAE,KAAc,EAAE,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,YAAY,CAAA;YACrB,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;AACH,CAAC;AAED,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAElC,SAAS,kBAAkB,CAAC,KAAyB,EAAE,QAAgB;IACrE,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAC9B,WAAW,EACX,eAAe,EACf,UAAU,MACiE,EAAE;IAC7E,MAAM,mBAAmB,GAAG,WAAW,IAAI,iBAAiB,CAAA;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAA;IAEzC,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,MAAM,SAAS,GAAG,eAAe,IAAI,yBAAyB,CAAA;IAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;IACxE,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,UAAU,EAAE,kBAAkB,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAA;IACjH,yEAAyE;IACzE,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAA;IAE5D,+EAA+E;IAC/E,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAA;YACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7C,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;YACrB,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAA;YAC5C,MAAM,OAAO,GAAG,GAAG,mBAAmB,MAAM,CAAA;YAC5C,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;YAC5D,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;YACtD,SAAS,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;YAC9E,kEAAkE;QACpE,CAAC;IACH,CAAC,CAAA;IAED,MAAM,GAAG,GAAG,CAAC,KAAkB,EAAQ,EAAE;QACvC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAA;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC5C,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,EAAE,GAAG,IAAI,IAAI,CAAC,CAAA;YAC9D,SAAS,EAAE,CAAA;YACX,IAAI,SAAS,GAAG,kBAAkB,EAAE,CAAC;gBACnC,MAAM,MAAM,EAAE,CAAA;YAChB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,OAAO;QACL,GAAG;QACH,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK;QAClB,WAAW,EAAE,mBAAmB;KACjC,CAAA;AACH,CAAC"}

package/dist/cdp-log.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cdp-log.test.d.ts.map

package/dist/cdp-log.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-log.test.d.ts","sourceRoot":"","sources":["../src/cdp-log.test.ts"],"names":[],"mappings":""}

package/dist/cdp-log.test.js

@@ -0,0 +1,109 @@
+import { describe, it, expect } from 'vitest';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { createCdpLogger } from './cdp-log.js';
+function makeTmpDir() {
+    return fs.mkdtempSync(path.join(os.tmpdir(), 'cdp-log-test-'));
+}
+function makeEntry(i) {
+    return {
+        timestamp: new Date().toISOString(),
+        direction: 'from-extension',
+        message: { method: `Test.method${i}`, id: i },
+    };
+}
+function readIds(logFile) {
+    return fs
+        .readFileSync(logFile, 'utf-8')
+        .trim()
+        .split('\n')
+        .filter((l) => {
+        return l.length > 0;
+    })
+        .map((l) => {
+        return JSON.parse(l).message.id;
+    });
+}
+describe('CDP log rotation', () => {
+    it('rotates when lineCount exceeds maxEntries, keeping last half', async () => {
+        const tmpDir = makeTmpDir();
+        const logFile = path.join(tmpDir, 'cdp.jsonl');
+        const logger = createCdpLogger({ logFilePath: logFile, maxEntries: 20 });
+        // Write 25 entries to trigger rotation (threshold is 20)
+        for (let i = 0; i < 25; i++) {
+            logger.log(makeEntry(i));
+        }
+        await logger.flush();
+        const ids = readIds(logFile);
+        // Rotation triggers after entry 20 is written (lineCount becomes 21 > 20).
+        // It keeps last 10 (entries 11-20), then entries 21-24 are appended.
+        expect(ids).toMatchInlineSnapshot(`
+      [
+        11,
+        12,
+        13,
+        14,
+        15,
+        16,
+        17,
+        18,
+        19,
+        20,
+        21,
+        22,
+        23,
+        24,
+      ]
+    `);
+        fs.rmSync(tmpDir, { recursive: true });
+    });
+    it('does not rotate when under maxEntries', async () => {
+        const tmpDir = makeTmpDir();
+        const logFile = path.join(tmpDir, 'cdp.jsonl');
+        const logger = createCdpLogger({ logFilePath: logFile, maxEntries: 50 });
+        for (let i = 0; i < 30; i++) {
+            logger.log(makeEntry(i));
+        }
+        await logger.flush();
+        const ids = readIds(logFile);
+        expect(ids.length).toBe(30);
+        expect(ids[0]).toBe(0);
+        expect(ids[29]).toBe(29);
+        fs.rmSync(tmpDir, { recursive: true });
+    });
+    it('handles multiple rotations', async () => {
+        const tmpDir = makeTmpDir();
+        const logFile = path.join(tmpDir, 'cdp.jsonl');
+        const logger = createCdpLogger({ logFilePath: logFile, maxEntries: 10 });
+        // Write 35 entries, should trigger multiple rotations
+        for (let i = 0; i < 35; i++) {
+            logger.log(makeEntry(i));
+        }
+        await logger.flush();
+        const ids = readIds(logFile);
+        // File should never exceed maxEntries
+        expect(ids.length).toBeLessThanOrEqual(15);
+        expect(ids.length).toBeGreaterThanOrEqual(5);
+        // Last entry should always be the most recent
+        expect(ids[ids.length - 1]).toBe(34);
+        // No entries from the very beginning should survive multiple rotations
+        expect(ids[0]).toBeGreaterThan(10);
+        fs.rmSync(tmpDir, { recursive: true });
+    });
+    it('uses atomic rename for rotation', async () => {
+        const tmpDir = makeTmpDir();
+        const logFile = path.join(tmpDir, 'cdp.jsonl');
+        const logger = createCdpLogger({ logFilePath: logFile, maxEntries: 10 });
+        for (let i = 0; i < 15; i++) {
+            logger.log(makeEntry(i));
+        }
+        await logger.flush();
+        // Temp file should not remain after successful rotation
+        expect(fs.existsSync(`${logFile}.tmp`)).toBe(false);
+        const ids = readIds(logFile);
+        expect(ids[ids.length - 1]).toBe(14);
+        fs.rmSync(tmpDir, { recursive: true });
+    });
+});
+//# sourceMappingURL=cdp-log.test.js.map

package/dist/cdp-log.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-log.test.js","sourceRoot":"","sources":["../src/cdp-log.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,eAAe,EAAoB,MAAM,cAAc,CAAA;AAEhE,SAAS,UAAU;IACjB,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,gBAAgB;QAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;KAC9C,CAAA;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,EAAE;SACN,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC9B,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IACrB,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAY,CAAA;IAC3C,CAAC,CAAC,CAAA;AACN,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;QAExE,yDAAyD;QACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1B,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAEpB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAE5B,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC;;;;;;;;;;;;;;;;;KAiBjC,CAAC,CAAA;QAEF,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;QAExE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1B,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAEpB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAExB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;QAExE,sDAAsD;QACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1B,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAEpB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAE5B,sCAAsC;QACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QAC1C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;QAE5C,8CAA8C;QAC9C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACpC,uEAAuE;QACvE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QAElC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;QAExE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1B,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAEpB,wDAAwD;QACxD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEnD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAEpC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/cdp-relay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdp-relay.d.ts","sourceRoot":"","sources":["../src/cdp-relay.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA0D,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAqB/G,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAqChF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,IAAI,IAAI,CAAA;IACb,EAAE,CAAC,CAAC,SAAS,MAAM,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IACrF,GAAG,CAAC,CAAC,SAAS,MAAM,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;CACvF,CAAA;AAED,wBAAsB,6BAA6B,CAAC,EAClD,IAAY,EACZ,IAAkB,EAClB,KAAK,EACL,MAAM,EACN,SAAS,GACV,GAAE;IACD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;KAAE,CAAA;IACnE,SAAS,CAAC,EAAE,SAAS,CAAA;CACjB,GAAG,OAAO,CAAC,WAAW,CAAC,CA2+D5B"}
+{"version":3,"file":"cdp-relay.d.ts","sourceRoot":"","sources":["../src/cdp-relay.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA0D,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAqB/G,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAqChF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,IAAI,IAAI,CAAA;IACb,EAAE,CAAC,CAAC,SAAS,MAAM,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IACrF,GAAG,CAAC,CAAC,SAAS,MAAM,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;CACvF,CAAA;AAED,wBAAsB,6BAA6B,CAAC,EAClD,IAAY,EACZ,IAAkB,EAClB,KAAK,EACL,MAAM,EACN,SAAS,GACV,GAAE;IACD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;KAAE,CAAA;IACnE,SAAS,CAAC,EAAE,SAAS,CAAA;CACjB,GAAG,OAAO,CAAC,WAAW,CAAC,CA6kE5B"}

package/dist/cdp-relay.js

@@ -1,6 +1,6 @@
 import { Hono } from 'hono';
 import { cors } from 'hono/cors';
-import { serve } from '@hono/node-server';
+import { createAdaptorServer } from '@hono/node-server';
 import { getConnInfo } from '@hono/node-server/conninfo';
 import { createNodeWebSocket } from '@hono/node-ws';
 import pc from 'picocolors';
@@ -10,7 +10,7 @@ Buffer.prototype[util.inspect.custom] = function () {
     return `<Buffer ${this.length} bytes>`;
 };
 import { EventEmitter } from 'node:events';
-import { VERSION, EXTENSION_IDS } from './utils.js';
+import { VERSION, EXTENSION_IDS, shouldAutoEnablePlaywriter } from './utils.js';
 import { createCdpLogger } from './cdp-log.js';
 import { RecordingRelay } from './recording-relay.js';
 import { appendSessionToWsUrl } from './chrome-discovery.js';
@@ -368,10 +368,10 @@ export async function startPlayWriterCDPRelayServer({ port = 19988, host = '127.
         }
         return recordingRelays.get(connId) || null;
     };
-    // Auto-create initial tab when PLAYWRITER_AUTO_ENABLE is set and no targets exist.
-    // This allows Playwright to connect and immediately have a page to work with.
+    // Auto-create an initial blank tab when no targets exist. Set
+    // PLAYWRITER_AUTO_ENABLE=false to require manually enabled tabs instead.
     async function maybeAutoCreateInitialTab(extensionId) {
-        if (!process.env.PLAYWRITER_AUTO_ENABLE) {
+        if (!shouldAutoEnablePlaywriter()) {
             return;
         }
         const conn = getExtensionConnection(extensionId);
@@ -629,6 +629,83 @@ export async function startPlayWriterCDPRelayServer({ port = 19988, host = '127.
         },
         allowMethods: ['GET', 'POST', 'HEAD', 'OPTIONS'],
     }));
+    // Host header validation to prevent DNS rebinding attacks.
+    // DNS rebinding is worse than a simple cross-origin request: the attacker
+    // serves a page from http://evil.com:19988, then rebinds the DNS to
+    // 127.0.0.1. The browser now considers requests to our relay as same-origin,
+    // so Sec-Fetch-Site is "same-origin", CORS doesn't apply, and JSON POSTs
+    // don't need preflight. This bypasses all our other defenses.
+    // By rejecting any Host that isn't a known localhost value we kill DNS
+    // rebinding at the root. When a valid token is provided (remote access), we
+    // allow through regardless of Host since remote clients use real hostnames.
+    const ALLOWED_HOSTS = new Set([
+        'localhost',
+        '127.0.0.1',
+        '[::1]',
+        '::1',
+    ]);
+    // Parse the Host header into just the hostname, handling IPv6 brackets and
+    // port suffixes. Returns null for missing or malformed values.
+    function parseHostname(hostHeader) {
+        const value = hostHeader?.trim().toLowerCase();
+        if (!value) {
+            return null;
+        }
+        // IPv6 in brackets: [::1] or [::1]:19988
+        if (value.startsWith('[')) {
+            const closingBracket = value.indexOf(']');
+            if (closingBracket === -1) {
+                return null;
+            }
+            const host = value.slice(0, closingBracket + 1);
+            const rest = value.slice(closingBracket + 1);
+            if (rest && !/^:\d+$/.test(rest)) {
+                return null;
+            }
+            return host;
+        }
+        // Bare ::1 without brackets (uncommon but possible)
+        if (value === '::1') {
+            return '::1';
+        }
+        // hostname or hostname:port
+        const colonIndex = value.indexOf(':');
+        if (colonIndex === -1) {
+            return value;
+        }
+        const host = value.slice(0, colonIndex);
+        const portPart = value.slice(colonIndex + 1);
+        if (!/^\d+$/.test(portPart)) {
+            return null;
+        }
+        return host || null;
+    }
+    function hasValidToken(c) {
+        if (!token) {
+            return false;
+        }
+        const authHeader = c.req.header('authorization') || '';
+        const bearerToken = authHeader.startsWith('Bearer ') ? authHeader.slice(7) : null;
+        const queryToken = new URL(c.req.url, 'http://localhost').searchParams.get('token');
+        return bearerToken === token || queryToken === token;
+    }
+    app.use('*', async (c, next) => {
+        const hostname = parseHostname(c.req.header('host'));
+        if (hostname && ALLOWED_HOSTS.has(hostname)) {
+            return next();
+        }
+        // Remote clients with a valid token are allowed regardless of Host
+        if (hasValidToken(c)) {
+            return next();
+        }
+        // Missing Host header from non-browser clients (curl without Host) is fine
+        // in local mode since they're not browser-based DNS rebinding attacks
+        if (!hostname && !token) {
+            return next();
+        }
+        logger?.log(pc.red(`Rejecting request with unexpected Host header: ${c.req.header('host')} (DNS rebinding protection)`));
+        return c.text('Forbidden - Invalid Host header', 403);
+    });
     const { injectWebSocket, upgradeWebSocket } = createNodeWebSocket({ app });
     const getCdpWsUrl = (c) => {
         const hostHeader = c.req.header('host') || `${host}:${port}`;
@@ -1647,8 +1724,24 @@ export async function startPlayWriterCDPRelayServer({ port = 19988, host = '127.
         const result = await relay.cancelRecording(cancelParams);
         return c.json(result);
     });
-    const server = serve({ fetch: app.fetch, port, hostname: host });
+    // Use createAdaptorServer instead of serve() so we control the listen()
+    // timing. This lets us inject WebSocket upgrade handlers before binding and
+    // await the bind to surface EADDRINUSE as a catchable error (issue #75).
+    const server = createAdaptorServer({ fetch: app.fetch, hostname: host });
     injectWebSocket(server);
+    await new Promise((resolve, reject) => {
+        const onListening = () => {
+            server.off('error', onError);
+            resolve();
+        };
+        const onError = (error) => {
+            server.off('listening', onListening);
+            reject(error);
+        };
+        server.once('listening', onListening);
+        server.once('error', onError);
+        server.listen(port, host);
+    });
     const wsHost = `ws://${host}:${port}`;
     const cdpEndpoint = `${wsHost}/cdp`;
     const extensionEndpoint = `${wsHost}/extension`;