rechrome 1.38.2 → 1.38.3

package/listeners.js

@@ -109,7 +109,7 @@ async function writeListeners(config) {
 `, { mode: 384 });
   await rename(temp, LISTENERS_FILE);
 }
-var SCOPED_COMMANDS = new Set(["open", "goto", "tab-new", "tab-list", "tab-select", "tab-close", "snapshot", "screenshot", "click", "dblclick", "fill", "type", "press", "hover", "select", "check", "uncheck", "go-back", "go-forward", "reload", "resize", "close", "fill-secret"]);
+var SCOPED_COMMANDS = new Set(["open", "goto", "tab-new", "tab-list", "tab-select", "tab-close", "snapshot", "screenshot", "click", "dblclick", "fill", "type", "press", "hover", "select", "check", "uncheck", "go-back", "go-forward", "reload", "resize", "close", "fill-secret", "console", "dialog-accept", "dialog-dismiss"]);
 function authorizeProfileRequest(listener, body) {
   if (!body || Array.isArray(body) || !body.identity || typeof body.identity.key !== "string" || !body.identity.key || !Array.isArray(body.args) || body.args.some((a) => typeof a !== "string"))
     throw new Error("Scoped requests require identity.key, identity.profile and string args");
@@ -121,7 +121,7 @@ function authorizeProfileRequest(listener, body) {
   const args = body.args.filter((a) => /^-s=[a-zA-Z0-9_-]{1,64}$/.test(a) === false);
   if (!(args[0] === "upload" && listener.uploads !== undefined) && !SCOPED_COMMANDS.has(args[0]))
     throw new Error("Command is unavailable on profile-scoped listeners; use the local management listener for arbitrary code or host access");
-  if (body.args.filter((a) => a.startsWith("-s=")).length > 1 || args.slice(1).some((a) => a.startsWith("-") && !(args[0] === "screenshot" && a === "--full-page") && !(args[0] === "fill-secret" && (a === "--submit" || a === "--totp" || a.startsWith("--allow-domain=")))))
+  if (body.args.filter((a) => a.startsWith("-s=")).length > 1 || args.slice(1).some((a) => a.startsWith("-") && !(args[0] === "screenshot" && a === "--full-page") && !(args[0] === "console" && a === "--clear") && !(args[0] === "fill-secret" && (a === "--submit" || a === "--totp" || a.startsWith("--allow-domain=")))))
     throw new Error("CLI option overrides are unavailable on profile-scoped listeners");
   if (["open", "goto", "tab-new"].includes(args[0]) && args[1] && !/^https?:\/\//i.test(args[1]) && args[1] !== "about:blank")
     throw new Error("Scoped navigation accepts only HTTP(S) or about:blank");

package/listeners.ts

@@ -96,7 +96,7 @@ export async function writeListeners(config: ListenerConfig): Promise<void> {
 
 // Restricted listeners deliberately exclude arbitrary code, host filesystem access,
 // attachment/config overrides, and commands that manage all browser sessions.
-const SCOPED_COMMANDS = new Set(["open", "goto", "tab-new", "tab-list", "tab-select", "tab-close", "snapshot", "screenshot", "click", "dblclick", "fill", "type", "press", "hover", "select", "check", "uncheck", "go-back", "go-forward", "reload", "resize", "close", "fill-secret"]);
+const SCOPED_COMMANDS = new Set(["open", "goto", "tab-new", "tab-list", "tab-select", "tab-close", "snapshot", "screenshot", "click", "dblclick", "fill", "type", "press", "hover", "select", "check", "uncheck", "go-back", "go-forward", "reload", "resize", "close", "fill-secret", "console", "dialog-accept", "dialog-dismiss"]);
 export function authorizeProfileRequest(listener: Listener, body: any): string {
   if (!body || Array.isArray(body) || !body.identity || typeof body.identity.key !== "string" || !body.identity.key || !Array.isArray(body.args) || body.args.some((a: unknown) => typeof a !== "string")) throw new Error("Scoped requests require identity.key, identity.profile and string args");
   const profile = body.identity.profile;
@@ -104,7 +104,7 @@ export function authorizeProfileRequest(listener: Listener, body: any): string {
   if (body.env?.PLAYWRIGHT_MCP_PROFILE_DIRECTORY && body.env.PLAYWRIGHT_MCP_PROFILE_DIRECTORY !== profile) throw new Error("Profile override does not match request identity");
   const args = body.args.filter((a: string) => /^-s=[a-zA-Z0-9_-]{1,64}$/.test(a) === false);
   if (!(args[0] === "upload" && listener.uploads !== undefined) && !SCOPED_COMMANDS.has(args[0])) throw new Error("Command is unavailable on profile-scoped listeners; use the local management listener for arbitrary code or host access");
-  if (body.args.filter((a: string) => a.startsWith("-s=")).length > 1 || args.slice(1).some((a: string) => a.startsWith("-") && !(args[0] === "screenshot" && a === "--full-page") && !(args[0] === "fill-secret" && (a === "--submit" || a === "--totp" || a.startsWith("--allow-domain="))))) throw new Error("CLI option overrides are unavailable on profile-scoped listeners");
+  if (body.args.filter((a: string) => a.startsWith("-s=")).length > 1 || args.slice(1).some((a: string) => a.startsWith("-") && !(args[0] === "screenshot" && a === "--full-page") && !(args[0] === "console" && a === "--clear") && !(args[0] === "fill-secret" && (a === "--submit" || a === "--totp" || a.startsWith("--allow-domain="))))) throw new Error("CLI option overrides are unavailable on profile-scoped listeners");
   if (["open", "goto", "tab-new"].includes(args[0]) && args[1] && !/^https?:\/\//i.test(args[1]) && args[1] !== "about:blank") throw new Error("Scoped navigation accepts only HTTP(S) or about:blank");
   // Upload is handled by the byte-only receiver; the caller cannot supply host paths.
   if (args[0] === "upload" && (args.length !== 1 || !body.upload)) throw new Error("Upload requires stdin bytes; host paths are unavailable");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rechrome",
-  "version": "1.38.2",
+  "version": "1.38.3",
   "repository": {
     "type": "git",
     "url": "https://github.com/snomiao/rechrome.git"

package/rechrome.js

@@ -4166,9 +4166,30 @@ const selfCommand = () => [process.execPath, Bun.main];
  */
 const bridgedUrls = new Set<string>();
 
+/**
+ * RECHROME_URL may address one of this machine's own scoped listeners directly (e.g. its tailnet
+ * IP), which refuses management-only commands. Same user, same daemon: go through the loopback
+ * management listener instead. The session is unchanged, since it is keyed by identity, not by
+ * listener. HTTPS is left alone: the daemon's certificate doesn't name 127.0.0.1.
+ */
+export function preferManagementListener(url: string, config: { listeners: Listener[] } | null): string {
+  const { key, host, port, protocol } = parseUrl(url);
+  const own = config?.listeners.find(l => l.key === key);
+  const management = config?.listeners.find(l => l.profiles === "*" && isLoopback(l.host));
+  if (!key || !own || own.profiles === "*" || !management || protocol !== "http") return url;
+  if (own.host !== host.replace(/^\[|\]$/g, "") || own.port !== port) return url;
+  const source = new URL(url);
+  const next = new URL(`http://${listenerAddress(management)}${normalizePrefix(management.prefix)}`);
+  next.search = source.search;
+  const fragment = new URLSearchParams(source.hash.slice(1).replace(/^\?/, ""));
+  fragment.set("key", management.key);
+  next.hash = fragment.toString();
+  return next.toString();
+}
+
 export async function transportUrl(url: string): Promise<string> {
   const parts = shareLinkParts(url);
-  if (!parts?.webrtc) return url;
+  if (!parts?.webrtc) return preferManagementListener(url, await readListeners().catch(() => null));
   const info = await spawnBridge(parts.token, parts.origin, selfCommand());
   const bridged = new URL(`http://127.0.0.1:${info.port}/`);
   new URL(url).searchParams.forEach((v, k) => bridged.searchParams.set(k, v));

package/rechrome.ts

@@ -4166,9 +4166,30 @@ const selfCommand = () => [process.execPath, Bun.main];
  */
 const bridgedUrls = new Set<string>();
 
+/**
+ * RECHROME_URL may address one of this machine's own scoped listeners directly (e.g. its tailnet
+ * IP), which refuses management-only commands. Same user, same daemon: go through the loopback
+ * management listener instead. The session is unchanged, since it is keyed by identity, not by
+ * listener. HTTPS is left alone: the daemon's certificate doesn't name 127.0.0.1.
+ */
+export function preferManagementListener(url: string, config: { listeners: Listener[] } | null): string {
+  const { key, host, port, protocol } = parseUrl(url);
+  const own = config?.listeners.find(l => l.key === key);
+  const management = config?.listeners.find(l => l.profiles === "*" && isLoopback(l.host));
+  if (!key || !own || own.profiles === "*" || !management || protocol !== "http") return url;
+  if (own.host !== host.replace(/^\[|\]$/g, "") || own.port !== port) return url;
+  const source = new URL(url);
+  const next = new URL(`http://${listenerAddress(management)}${normalizePrefix(management.prefix)}`);
+  next.search = source.search;
+  const fragment = new URLSearchParams(source.hash.slice(1).replace(/^\?/, ""));
+  fragment.set("key", management.key);
+  next.hash = fragment.toString();
+  return next.toString();
+}
+
 export async function transportUrl(url: string): Promise<string> {
   const parts = shareLinkParts(url);
-  if (!parts?.webrtc) return url;
+  if (!parts?.webrtc) return preferManagementListener(url, await readListeners().catch(() => null));
   const info = await spawnBridge(parts.token, parts.origin, selfCommand());
   const bridged = new URL(`http://127.0.0.1:${info.port}/`);
   new URL(url).searchParams.forEach((v, k) => bridged.searchParams.set(k, v));