rechrome 1.24.1 → 1.26.0

package/extension/THIRD_PARTY_NOTICES.txt

@@ -0,0 +1,81 @@
+Third-party software bundled in the rechrome extension
+
+Playwright extension: Apache-2.0; see LICENSE and NOTICE.
+
+
+react 19.2.1 (MIT)
+https://github.com/facebook/react
+
+MIT License
+
+Copyright (c) Meta Platforms, Inc. and affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+react-dom 19.2.1 (MIT)
+https://github.com/facebook/react
+
+MIT License
+
+Copyright (c) Meta Platforms, Inc. and affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+scheduler 0.27.0 (MIT)
+https://github.com/facebook/react
+
+MIT License
+
+Copyright (c) Meta Platforms, Inc. and affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/extension/lib/background.mjs

@@ -1,6 +1,9 @@
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+/*! Rechrome fork: modified by rechrome contributors (2026).
+ * Playwright: Copyright (c) Microsoft Corporation; Apache-2.0.
+ * See LICENSE, NOTICE, MODIFICATIONS.md and THIRD_PARTY_NOTICES.txt. */
 class ProtocolV1Handler {
   constructor(context) {
     __publicField(this, "_context");

package/extension/lib/ui/authToken.js

@@ -1,3 +1,6 @@
+/*! Rechrome fork: modified by rechrome contributors (2026).
+ * Playwright: Copyright (c) Microsoft Corporation; Apache-2.0.
+ * See LICENSE, NOTICE, MODIFICATIONS.md and THIRD_PARTY_NOTICES.txt. */
 (function polyfill() {
   const relList = document.createElement("link").relList;
   if (relList && relList.supports && relList.supports("modulepreload")) {

package/extension/lib/ui/connect.js

@@ -1,3 +1,6 @@
+/*! Rechrome fork: modified by rechrome contributors (2026).
+ * Playwright: Copyright (c) Microsoft Corporation; Apache-2.0.
+ * See LICENSE, NOTICE, MODIFICATIONS.md and THIRD_PARTY_NOTICES.txt. */
 import { c as clientExports, j as jsxRuntimeExports, r as reactExports, A as AuthTokenSection, T as TabItem, B as Button, g as getOrCreateAuthToken } from "./authToken.js";
 const SUPPORTED_PROTOCOL_VERSION = 2;
 const BACKGROUND_RESPONSE_TIMEOUT_MS = 1e4;

package/extension/lib/ui/status.js

@@ -1,3 +1,6 @@
+/*! Rechrome fork: modified by rechrome contributors (2026).
+ * Playwright: Copyright (c) Microsoft Corporation; Apache-2.0.
+ * See LICENSE, NOTICE, MODIFICATIONS.md and THIRD_PARTY_NOTICES.txt. */
 import { c as clientExports, j as jsxRuntimeExports, r as reactExports, B as Button, T as TabItem, A as AuthTokenSection } from "./authToken.js";
 const StatusApp = () => {
   const [connectedTabs, setConnectedTabs] = reactExports.useState([]);

package/extension/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "Playwright Extension",
   "version": "0.2.2",
-  "description": "Connect your browser to AI agents through Playwright MCP server and CLI. Enables AI-driven web testing, debugging, and automation.",
+  "description": "Connect your browser to AI agents through Playwright MCP server and CLI. Enables AI-driven web testing, debugging, and automation. Modified by rechrome contributors.",
   "minimum_chrome_version": "116",
   "permissions": [
     "debugger",

package/extension-token.js

@@ -0,0 +1,177 @@
+// @bun
+// extension-token.ts
+import { readFileSync, readdirSync } from "fs";
+import { join } from "path";
+function varint(b, cursor) {
+  let value = 0;
+  for (let shift = 0;shift < 56; shift += 7) {
+    if (cursor.p >= b.length)
+      throw new Error("Truncated varint");
+    const byte = b[cursor.p++];
+    value += (byte & 127) * 2 ** shift;
+    if (!(byte & 128))
+      return value;
+  }
+  throw new Error("Invalid varint");
+}
+function decodeSnappy(b) {
+  const c = { p: 0 };
+  const size = varint(b, c);
+  if (size > 64 * 1024 * 1024)
+    throw new Error("Oversized block");
+  const out = Buffer.alloc(size);
+  let p = 0;
+  while (c.p < b.length) {
+    const tag = b[c.p++], type = tag & 3;
+    let length, offset = 0;
+    if (type === 0) {
+      length = tag >>> 2;
+      if (length >= 60) {
+        const bytes = length - 59;
+        if (c.p + bytes > b.length)
+          throw new Error("Truncated literal");
+        length = b.readUIntLE(c.p, bytes);
+        c.p += bytes;
+      }
+      length++;
+      if (c.p + length > b.length || p + length > size)
+        throw new Error("Invalid literal");
+      b.copy(out, p, c.p, c.p + length);
+      c.p += length;
+      p += length;
+    } else {
+      length = type === 1 ? 4 + (tag >>> 2 & 7) : 1 + (tag >>> 2);
+      const bytes = type === 1 ? 1 : type === 2 ? 2 : 4;
+      if (c.p + bytes > b.length)
+        throw new Error("Truncated copy");
+      offset = b.readUIntLE(c.p, bytes) + (type === 1 ? (tag & 224) * 8 : 0);
+      c.p += bytes;
+      if (!offset || offset > p || p + length > size)
+        throw new Error("Invalid copy");
+      for (let i = 0;i < length; i++) {
+        out[p] = out[p - offset];
+        p++;
+      }
+    }
+  }
+  if (p !== size)
+    throw new Error("Truncated block");
+  return out;
+}
+function* entries(b) {
+  const restarts = b.readUInt32LE(b.length - 4);
+  const end = b.length - 4 - restarts * 4;
+  const c = { p: 0 };
+  let key = Buffer.alloc(0);
+  while (c.p < end) {
+    const shared = varint(b, c), extra = varint(b, c), length = varint(b, c);
+    if (shared > key.length || c.p + extra + length > end)
+      throw new Error("Invalid entry");
+    key = Buffer.concat([key.subarray(0, shared), b.subarray(c.p, c.p + extra)]);
+    c.p += extra;
+    const value = b.subarray(c.p, c.p + length);
+    c.p += length;
+    yield [key, value];
+  }
+}
+function block(file, handle) {
+  const c = { p: 0 }, offset = varint(handle, c), length = varint(handle, c);
+  if (offset + length + 5 > file.length)
+    throw new Error("Invalid block handle");
+  const bytes = file.subarray(offset, offset + length), compression = file[offset + length];
+  if (compression === 0)
+    return bytes;
+  if (compression === 1)
+    return decodeSnappy(bytes);
+  throw new Error("Unsupported compression");
+}
+function* logRecords(b) {
+  let parts = [];
+  for (let base = 0;base < b.length; base += 32768) {
+    const end = Math.min(base + 32768, b.length);
+    for (let p = base;p + 7 <= end; ) {
+      const length = b.readUInt16LE(p + 4), type = b[p + 6];
+      p += 7;
+      if (!type || p + length > end)
+        break;
+      const data = b.subarray(p, p + length);
+      p += length;
+      if (type === 1) {
+        parts = [];
+        yield data;
+      } else if (type === 2)
+        parts = [data];
+      else if (type === 3 && parts.length)
+        parts.push(data);
+      else if (type === 4 && parts.length) {
+        parts.push(data);
+        yield Buffer.concat(parts);
+        parts = [];
+      }
+    }
+  }
+}
+function readExtensionTokenFromProfile(userDataDir, profileDir, extensionId) {
+  const dir = join(userDataDir, profileDir, "Local Storage", "leveldb");
+  const wanted = Buffer.from(`_chrome-extension://${extensionId}\x00\x01auth-token`, "latin1");
+  let newest = -1n, token = null;
+  const accept = (key, value, seq, type) => {
+    if (!key.equals(wanted) || seq <= newest)
+      return;
+    newest = seq;
+    token = type === 1 && /^\x01[A-Za-z0-9_-]{43}$/.test(value.toString("latin1")) ? value.subarray(1).toString("latin1") : null;
+  };
+  try {
+    for (const name of readdirSync(dir)) {
+      if (!/\.(ldb|sst|log)$/.test(name))
+        continue;
+      let b;
+      try {
+        b = readFileSync(join(dir, name));
+      } catch {
+        continue;
+      }
+      if (name.endsWith(".log")) {
+        for (const record of logRecords(b)) {
+          if (record.length < 12)
+            continue;
+          const seq = record.readBigUInt64LE(0), count = record.readUInt32LE(8), c = { p: 12 };
+          for (let i = 0;i < count; i++) {
+            const type = record[c.p++];
+            if (type !== 0 && type !== 1)
+              throw new Error("Invalid write batch");
+            const keyLen = varint(record, c), key = record.subarray(c.p, c.p + keyLen);
+            c.p += keyLen;
+            const valueLen = type === 1 ? varint(record, c) : 0;
+            if (c.p + valueLen > record.length)
+              throw new Error("Truncated batch");
+            const value = record.subarray(c.p, c.p + valueLen);
+            c.p += valueLen;
+            accept(key, value, seq + BigInt(i), type);
+          }
+        }
+      } else {
+        if (b.length < 48 || b.readBigUInt64LE(b.length - 8) !== 0xdb4775248b80fb57n)
+          throw new Error("Invalid table");
+        const footer = b.subarray(b.length - 48), c = { p: 0 };
+        varint(footer, c);
+        varint(footer, c);
+        for (const [, handle] of entries(block(b, footer.subarray(c.p)))) {
+          for (const [key, value] of entries(block(b, handle))) {
+            if (key.length < 8)
+              throw new Error("Invalid internal key");
+            const tag = key.readBigUInt64LE(key.length - 8);
+            accept(key.subarray(0, -8), value, tag >> 8n, Number(tag & 255n));
+          }
+        }
+      }
+    }
+    return token;
+  } catch {
+    return null;
+  }
+}
+export {
+  decodeSnappy,
+  readExtensionTokenFromProfile
+};

package/extension-token.ts

@@ -0,0 +1,133 @@
+import { readFileSync, readdirSync } from "fs";
+import { join } from "path";
+
+function varint(b: Buffer, cursor: { p: number }): number {
+  let value = 0;
+  for (let shift = 0; shift < 56; shift += 7) {
+    if (cursor.p >= b.length) throw new Error("Truncated varint");
+    const byte = b[cursor.p++];
+    value += (byte & 127) * 2 ** shift;
+    if (!(byte & 128)) return value;
+  }
+  throw new Error("Invalid varint");
+}
+
+export function decodeSnappy(b: Buffer): Buffer {
+  const c = { p: 0 };
+  const size = varint(b, c);
+  if (size > 64 * 1024 * 1024) throw new Error("Oversized block");
+  const out = Buffer.alloc(size);
+  let p = 0;
+  while (c.p < b.length) {
+    const tag = b[c.p++], type = tag & 3;
+    let length: number, offset = 0;
+    if (type === 0) {
+      length = tag >>> 2;
+      if (length >= 60) {
+        const bytes = length - 59;
+        if (c.p + bytes > b.length) throw new Error("Truncated literal");
+        length = b.readUIntLE(c.p, bytes); c.p += bytes;
+      }
+      length++;
+      if (c.p + length > b.length || p + length > size) throw new Error("Invalid literal");
+      b.copy(out, p, c.p, c.p + length); c.p += length; p += length;
+    } else {
+      length = type === 1 ? 4 + ((tag >>> 2) & 7) : 1 + (tag >>> 2);
+      const bytes = type === 1 ? 1 : type === 2 ? 2 : 4;
+      if (c.p + bytes > b.length) throw new Error("Truncated copy");
+      offset = b.readUIntLE(c.p, bytes) + (type === 1 ? (tag & 224) * 8 : 0); c.p += bytes;
+      if (!offset || offset > p || p + length > size) throw new Error("Invalid copy");
+      for (let i = 0; i < length; i++) { out[p] = out[p - offset]; p++; }
+    }
+  }
+  if (p !== size) throw new Error("Truncated block");
+  return out;
+}
+
+function* entries(b: Buffer): Generator<[Buffer, Buffer]> {
+  const restarts = b.readUInt32LE(b.length - 4);
+  const end = b.length - 4 - restarts * 4;
+  const c = { p: 0 };
+  let key = Buffer.alloc(0);
+  while (c.p < end) {
+    const shared = varint(b, c), extra = varint(b, c), length = varint(b, c);
+    if (shared > key.length || c.p + extra + length > end) throw new Error("Invalid entry");
+    key = Buffer.concat([key.subarray(0, shared), b.subarray(c.p, c.p + extra)]);
+    c.p += extra;
+    const value = b.subarray(c.p, c.p + length); c.p += length;
+    yield [key, value];
+  }
+}
+
+function block(file: Buffer, handle: Buffer): Buffer {
+  const c = { p: 0 }, offset = varint(handle, c), length = varint(handle, c);
+  if (offset + length + 5 > file.length) throw new Error("Invalid block handle");
+  const bytes = file.subarray(offset, offset + length), compression = file[offset + length];
+  if (compression === 0) return bytes;
+  if (compression === 1) return decodeSnappy(bytes);
+  throw new Error("Unsupported compression");
+}
+
+function* logRecords(b: Buffer): Generator<Buffer> {
+  let parts: Buffer[] = [];
+  for (let base = 0; base < b.length; base += 32768) {
+    const end = Math.min(base + 32768, b.length);
+    for (let p = base; p + 7 <= end;) {
+      const length = b.readUInt16LE(p + 4), type = b[p + 6]; p += 7;
+      if (!type || p + length > end) break;
+      const data = b.subarray(p, p + length); p += length;
+      if (type === 1) { parts = []; yield data; }
+      else if (type === 2) parts = [data];
+      else if (type === 3 && parts.length) parts.push(data);
+      else if (type === 4 && parts.length) { parts.push(data); yield Buffer.concat(parts); parts = []; }
+    }
+  }
+}
+
+// Read files without opening the database or taking Chrome's LevelDB lock. Internal
+// sequence numbers, not filenames/byte order, determine the latest value. Decode
+// SST prefix compression and Snappy, and scope the key to the exact extension origin.
+export function readExtensionTokenFromProfile(userDataDir: string, profileDir: string, extensionId: string): string | null {
+  const dir = join(userDataDir, profileDir, "Local Storage", "leveldb");
+  const wanted = Buffer.from(`_chrome-extension://${extensionId}\0\x01auth-token`, "latin1");
+  let newest = -1n, token: string | null = null;
+  const accept = (key: Buffer, value: Buffer, seq: bigint, type: number) => {
+    if (!key.equals(wanted) || seq <= newest) return;
+    newest = seq;
+    token = type === 1 && /^\x01[A-Za-z0-9_-]{43}$/.test(value.toString("latin1")) ? value.subarray(1).toString("latin1") : null;
+  };
+  try {
+    for (const name of readdirSync(dir)) {
+      if (!/\.(ldb|sst|log)$/.test(name)) continue;
+      let b: Buffer;
+      try { b = readFileSync(join(dir, name)); } catch { continue; } // Compaction can remove files.
+      if (name.endsWith(".log")) {
+        for (const record of logRecords(b)) {
+          if (record.length < 12) continue;
+          const seq = record.readBigUInt64LE(0), count = record.readUInt32LE(8), c = { p: 12 };
+          for (let i = 0; i < count; i++) {
+            const type = record[c.p++];
+            if (type !== 0 && type !== 1) throw new Error("Invalid write batch");
+            const keyLen = varint(record, c), key = record.subarray(c.p, c.p + keyLen); c.p += keyLen;
+            const valueLen = type === 1 ? varint(record, c) : 0;
+            if (c.p + valueLen > record.length) throw new Error("Truncated batch");
+            const value = record.subarray(c.p, c.p + valueLen); c.p += valueLen;
+            accept(key, value, seq + BigInt(i), type);
+          }
+        }
+      } else {
+        if (b.length < 48 || b.readBigUInt64LE(b.length - 8) !== 0xdb4775248b80fb57n) throw new Error("Invalid table");
+        const footer = b.subarray(b.length - 48), c = { p: 0 };
+        varint(footer, c); varint(footer, c); // Skip metaindex handle.
+        for (const [, handle] of entries(block(b, footer.subarray(c.p)))) {
+          for (const [key, value] of entries(block(b, handle))) {
+            if (key.length < 8) throw new Error("Invalid internal key");
+            const tag = key.readBigUInt64LE(key.length - 8);
+            accept(key.subarray(0, -8), value, tag >> 8n, Number(tag & 255n));
+          }
+        }
+      }
+    }
+    return token;
+  } catch { return null; } // Never replace credentials with a partial/unsupported read.
+}

package/listeners.js

@@ -0,0 +1,104 @@
+// @bun
+// listeners.ts
+import { isIP } from "net";
+import { createHash, randomBytes } from "crypto";
+import { homedir } from "os";
+import { join } from "path";
+import { mkdir, readFile, rename, writeFile } from "fs/promises";
+var LISTENERS_FILE = join(homedir(), ".rechrome", "listeners.json");
+var isLoopback = (host) => host === "::1" || /^127\./.test(host);
+var listenerAddress = (l) => `${l.host.includes(":") ? `[${l.host}]` : l.host}:${l.port}`;
+var profileOutputPrefix = (profile) => `profiles/${createHash("sha256").update(profile).digest("hex")}/`;
+function normalizePrefix(value = "/") {
+  if (typeof value !== "string")
+    throw new Error("Prefix must be a URL path");
+  const path = value.replace(/^\/+|\/+$/g, "");
+  if (!path)
+    return "/";
+  if (path.split("/").some((segment) => !/^[A-Za-z0-9._~-]+$/.test(segment) || segment === "." || segment === ".."))
+    throw new Error("Prefix must contain URL path segments, without queries, escapes, or traversal");
+  return `/${path}/`;
+}
+function serviceUrl(raw, route = "") {
+  const source = new URL(raw);
+  const result = new URL(`${source.protocol === "https:" ? "https:" : "http:"}//${source.host}`);
+  result.pathname = normalizePrefix(source.pathname) + route.replace(/^\/+/, "");
+  return result.toString();
+}
+function validateListeners(value) {
+  const config = value;
+  if (config?.version !== 1 || !Array.isArray(config.listeners) || !config.listeners.length)
+    throw new Error("listeners.json requires version 1 and at least one listener");
+  const names = new Set, addresses = new Set, keys = new Set;
+  for (const l of config.listeners) {
+    if (!l || !/^[a-zA-Z0-9_-]+$/.test(l.name) || typeof l.host !== "string" || !isIP(l.host) || ["0.0.0.0", "::"].includes(l.host) || !Number.isInteger(l.port) || l.port < 1 || l.port > 65535 || typeof l.key !== "string" || l.key.length < 16)
+      throw new Error("Each listener needs a name, concrete IP, valid port, and bearer key of at least 16 characters");
+    l.prefix = normalizePrefix(l.prefix);
+    if (l.profiles === "*") {
+      if (!isLoopback(l.host))
+        throw new Error("Unrestricted management listeners must bind to loopback");
+    } else if (!Array.isArray(l.profiles) || !l.profiles.length || l.profiles.some((p) => typeof p !== "string" || !p.trim() || p.includes("\x00") || p === "*")) {
+      throw new Error("Listener profiles must be a nonempty list of registered profile keys");
+    }
+    const address = listenerAddress(l);
+    if (names.has(l.name) || addresses.has(address) || keys.has(l.key))
+      throw new Error("Listener names, addresses, and credentials must be unique");
+    names.add(l.name);
+    addresses.add(address);
+    keys.add(l.key);
+  }
+  return config;
+}
+async function readListeners() {
+  let raw;
+  try {
+    raw = await readFile(LISTENERS_FILE, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return null;
+    throw error;
+  }
+  return validateListeners(JSON.parse(raw));
+}
+async function writeListeners(config) {
+  validateListeners(config);
+  await mkdir(join(homedir(), ".rechrome"), { recursive: true });
+  const temp = `${LISTENERS_FILE}.${randomBytes(6).toString("hex")}.tmp`;
+  await writeFile(temp, JSON.stringify(config, null, 2) + `
+`, { mode: 384 });
+  await rename(temp, LISTENERS_FILE);
+}
+var SCOPED_COMMANDS = new Set(["open", "goto", "tab-new", "tab-list", "tab-select", "tab-close", "snapshot", "screenshot", "click", "dblclick", "fill", "type", "press", "hover", "select", "check", "uncheck", "go-back", "go-forward", "reload", "resize", "close"]);
+function authorizeProfileRequest(listener, body) {
+  if (!body || Array.isArray(body) || !body.identity || typeof body.identity.key !== "string" || !body.identity.key || !Array.isArray(body.args) || body.args.some((a) => typeof a !== "string"))
+    throw new Error("Scoped requests require identity.key, identity.profile and string args");
+  const profile = body.identity.profile;
+  if (typeof profile !== "string" || listener.profiles === "*" || !listener.profiles.includes(profile))
+    throw new Error("Profile is not allowed on this listener");
+  if (body.env?.PLAYWRIGHT_MCP_PROFILE_DIRECTORY && body.env.PLAYWRIGHT_MCP_PROFILE_DIRECTORY !== profile)
+    throw new Error("Profile override does not match request identity");
+  const args = body.args.filter((a) => /^-s=[a-zA-Z0-9_-]{1,64}$/.test(a) === false);
+  if (!SCOPED_COMMANDS.has(args[0]))
+    throw new Error("Command is unavailable on profile-scoped listeners; use the local management listener for arbitrary code or host access");
+  if (body.args.filter((a) => a.startsWith("-s=")).length > 1 || args.slice(1).some((a) => a.startsWith("-") && !(args[0] === "screenshot" && a === "--full-page")))
+    throw new Error("CLI option overrides are unavailable on profile-scoped listeners");
+  if (["open", "goto", "tab-new"].includes(args[0]) && args[1] && !/^https?:\/\//i.test(args[1]) && args[1] !== "about:blank")
+    throw new Error("Scoped navigation accepts only HTTP(S) or about:blank");
+  return profile;
+}
+function canReadProfileFile(listener, path) {
+  return listener.profiles === "*" || listener.profiles.some((p) => path.startsWith(profileOutputPrefix(p)));
+}
+export {
+  LISTENERS_FILE,
+  authorizeProfileRequest,
+  canReadProfileFile,
+  isLoopback,
+  listenerAddress,
+  normalizePrefix,
+  profileOutputPrefix,
+  readListeners,
+  serviceUrl,
+  validateListeners,
+  writeListeners
+};

package/listeners.ts

@@ -0,0 +1,84 @@
+import { isIP } from "net";
+import { createHash, randomBytes } from "crypto";
+import { homedir } from "os";
+import { join } from "path";
+import { mkdir, readFile, rename, writeFile } from "fs/promises";
+
+export type Listener = { name: string; host: string; port: number; key: string; profiles: string[] | "*"; prefix?: string };
+export type ListenerConfig = { version: 1; listeners: Listener[] };
+export const LISTENERS_FILE = join(homedir(), ".rechrome", "listeners.json");
+export const isLoopback = (host: string) => host === "::1" || /^127\./.test(host);
+export const listenerAddress = (l: Listener) => `${l.host.includes(":") ? `[${l.host}]` : l.host}:${l.port}`;
+export const profileOutputPrefix = (profile: string) => `profiles/${createHash("sha256").update(profile).digest("hex")}/`;
+
+export function normalizePrefix(value = "/"): string {
+  if (typeof value !== "string") throw new Error("Prefix must be a URL path");
+  const path = value.replace(/^\/+|\/+$/g, "");
+  if (!path) return "/";
+  if (path.split("/").some(segment => !/^[A-Za-z0-9._~-]+$/.test(segment) || segment === "." || segment === ".."))
+    throw new Error("Prefix must contain URL path segments, without queries, escapes, or traversal");
+  return `/${path}/`;
+}
+
+/** Build an API endpoint without forwarding connection credentials or profile query params. */
+export function serviceUrl(raw: string, route = ""): string {
+  const source = new URL(raw);
+  const result = new URL(`${source.protocol === "https:" ? "https:" : "http:"}//${source.host}`);
+  result.pathname = normalizePrefix(source.pathname) + route.replace(/^\/+/, "");
+  return result.toString();
+}
+
+export function validateListeners(value: unknown): ListenerConfig {
+  const config = value as ListenerConfig;
+  if (config?.version !== 1 || !Array.isArray(config.listeners) || !config.listeners.length) throw new Error("listeners.json requires version 1 and at least one listener");
+  const names = new Set<string>(), addresses = new Set<string>(), keys = new Set<string>();
+  for (const l of config.listeners) {
+    if (!l || !/^[a-zA-Z0-9_-]+$/.test(l.name) || typeof l.host !== "string" || !isIP(l.host) || ["0.0.0.0", "::"].includes(l.host)
+      || !Number.isInteger(l.port) || l.port < 1 || l.port > 65535 || typeof l.key !== "string" || l.key.length < 16)
+      throw new Error("Each listener needs a name, concrete IP, valid port, and bearer key of at least 16 characters");
+    l.prefix = normalizePrefix(l.prefix);
+    if (l.profiles === "*") {
+      if (!isLoopback(l.host)) throw new Error("Unrestricted management listeners must bind to loopback");
+    } else if (!Array.isArray(l.profiles) || !l.profiles.length || l.profiles.some(p => typeof p !== "string" || !p.trim() || p.includes("\0") || p === "*")) {
+      throw new Error("Listener profiles must be a nonempty list of registered profile keys");
+    }
+    const address = listenerAddress(l);
+    if (names.has(l.name) || addresses.has(address) || keys.has(l.key)) throw new Error("Listener names, addresses, and credentials must be unique");
+    names.add(l.name); addresses.add(address); keys.add(l.key);
+  }
+  return config;
+}
+
+export async function readListeners(): Promise<ListenerConfig | null> {
+  let raw: string;
+  try { raw = await readFile(LISTENERS_FILE, "utf8"); }
+  catch (error: any) { if (error.code === "ENOENT") return null; throw error; }
+  return validateListeners(JSON.parse(raw));
+}
+
+export async function writeListeners(config: ListenerConfig): Promise<void> {
+  validateListeners(config);
+  await mkdir(join(homedir(), ".rechrome"), { recursive: true });
+  const temp = `${LISTENERS_FILE}.${randomBytes(6).toString("hex")}.tmp`;
+  await writeFile(temp, JSON.stringify(config, null, 2) + "\n", { mode: 0o600 });
+  await rename(temp, LISTENERS_FILE);
+}
+
+// Restricted listeners deliberately exclude arbitrary code, host filesystem access,
+// attachment/config overrides, and commands that manage all browser sessions.
+const SCOPED_COMMANDS = new Set(["open", "goto", "tab-new", "tab-list", "tab-select", "tab-close", "snapshot", "screenshot", "click", "dblclick", "fill", "type", "press", "hover", "select", "check", "uncheck", "go-back", "go-forward", "reload", "resize", "close"]);
+export function authorizeProfileRequest(listener: Listener, body: any): string {
+  if (!body || Array.isArray(body) || !body.identity || typeof body.identity.key !== "string" || !body.identity.key || !Array.isArray(body.args) || body.args.some((a: unknown) => typeof a !== "string")) throw new Error("Scoped requests require identity.key, identity.profile and string args");
+  const profile = body.identity.profile;
+  if (typeof profile !== "string" || listener.profiles === "*" || !listener.profiles.includes(profile)) throw new Error("Profile is not allowed on this listener");
+  if (body.env?.PLAYWRIGHT_MCP_PROFILE_DIRECTORY && body.env.PLAYWRIGHT_MCP_PROFILE_DIRECTORY !== profile) throw new Error("Profile override does not match request identity");
+  const args = body.args.filter((a: string) => /^-s=[a-zA-Z0-9_-]{1,64}$/.test(a) === false);
+  if (!SCOPED_COMMANDS.has(args[0])) throw new Error("Command is unavailable on profile-scoped listeners; use the local management listener for arbitrary code or host access");
+  if (body.args.filter((a: string) => a.startsWith("-s=")).length > 1 || args.slice(1).some((a: string) => a.startsWith("-") && !(args[0] === "screenshot" && a === "--full-page"))) throw new Error("CLI option overrides are unavailable on profile-scoped listeners");
+  if (["open", "goto", "tab-new"].includes(args[0]) && args[1] && !/^https?:\/\//i.test(args[1]) && args[1] !== "about:blank") throw new Error("Scoped navigation accepts only HTTP(S) or about:blank");
+  return profile;
+}
+
+export function canReadProfileFile(listener: Listener, path: string): boolean {
+  return listener.profiles === "*" || listener.profiles.some(p => path.startsWith(profileOutputPrefix(p)));
+}