sqlite-cookie-parser 1.0.0

package/dist/chunk-4G6NLIPV.js

@@ -0,0 +1,98 @@
+import {
+  decryptWindowsDpapi
+} from "./chunk-AR5Q6KM4.js";
+import {
+  decryptChromiumAES256GCMCookieValue
+} from "./chunk-UR6BPQ2T.js";
+import {
+  resolveBrowserDefaultorSpecificDBPath
+} from "./chunk-TYLH6G3Z.js";
+import {
+  getCookiesFromChromiumSqliteDB
+} from "./chunk-JTBFDYPY.js";
+
+// src/vivaldiWindowsCookie.ts
+import path from "path";
+import { readFileSync } from "fs";
+async function getCookiesFromVivaldiWindowsSqlite(options, origins, cookieNames) {
+  const vivaldiUserDataDir = resolveVivaldiWindowsUserDataDir();
+  const sqlDBPath = resolveVivaldiWindowsDBPath(vivaldiUserDataDir, options.profile);
+  if (!sqlDBPath) {
+    return {
+      cookies: [],
+      warnings: ["Could not resolve Vivaldi cookie database path on Windows."]
+    };
+  }
+  const warnings = [];
+  const keyResult = await extractVivaldiWindowsEncryptionKey(vivaldiUserDataDir);
+  if (!keyResult.success) {
+    warnings.push(`Failed to get Vivaldi decryption key: ${keyResult.error}`);
+    return { cookies: [], warnings };
+  }
+  const key = keyResult.key;
+  const decryptFn = (encryptedValue) => {
+    return decryptChromiumAES256GCMCookieValue(encryptedValue, key);
+  };
+  const fileOptions = {
+    cookieFilePath: sqlDBPath
+  };
+  fileOptions.profile = options.profile;
+  fileOptions.includeExpired = options.includeExpired;
+  const { cookies, warnings: dbWarnings } = await getCookiesFromChromiumSqliteDB(
+    fileOptions,
+    origins,
+    cookieNames,
+    "vivaldi",
+    decryptFn
+  );
+  warnings.push(...dbWarnings);
+  return { cookies, warnings };
+}
+function resolveVivaldiWindowsUserDataDir() {
+  const localAppData = process.env.LOCALAPPDATA || path.join(process.env.USERPROFILE || "", "AppData", "Local");
+  return path.join(localAppData, "Vivaldi", "User Data");
+}
+function resolveVivaldiWindowsDBPath(userDataDir, profile) {
+  return resolveBrowserDefaultorSpecificDBPath([userDataDir], profile);
+}
+async function extractVivaldiWindowsEncryptionKey(userDataDir) {
+  const localStatePath = path.join(userDataDir, "Local State");
+  let localStateContent;
+  try {
+    localStateContent = readFileSync(localStatePath, "utf8");
+  } catch (error) {
+    return {
+      success: false,
+      error: `Failed to read Local State file: ${error.message}`
+    };
+  }
+  let localState;
+  try {
+    localState = JSON.parse(localStateContent);
+  } catch (error) {
+    return {
+      success: false,
+      error: `Failed to parse Local State JSON: ${error.message}`
+    };
+  }
+  const encryptedKeyBase64 = localState?.os_crypt?.encrypted_key;
+  if (!encryptedKeyBase64) {
+    return { success: false, error: "No encrypted_key found in Local State" };
+  }
+  const encryptedKeyWithPrefix = Buffer.from(encryptedKeyBase64, "base64");
+  const dpapiPrefix = encryptedKeyWithPrefix.subarray(0, 5).toString("utf8");
+  if (dpapiPrefix !== "DPAPI") {
+    return { success: false, error: "Encrypted key does not have expected DPAPI prefix" };
+  }
+  const encryptedKey = encryptedKeyWithPrefix.subarray(5);
+  const dpapiResult = await decryptWindowsDpapi(encryptedKey);
+  if (!dpapiResult.success) {
+    return { success: false, error: `DPAPI decryption failed: ${dpapiResult.error}` };
+  }
+  return { success: true, key: dpapiResult.decrypted };
+}
+
+export {
+  getCookiesFromVivaldiWindowsSqlite
+};
+//# sourceMappingURL=chunk-4G6NLIPV.js.map

package/dist/chunk-4G6NLIPV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vivaldiWindowsCookie.ts"],"sourcesContent":["import path from 'path';\nimport { readFileSync } from 'fs';\nimport { resolveBrowserDefaultorSpecificDBPath } from './util/fileHelper';\nimport { GetCookiesOptions, GetCookiesResult, GetCookiesFromFileOptions } from './types';\nimport { decryptWindowsDpapi } from './util/windowsDpapi';\nimport { decryptChromiumAES256GCMCookieValue } from './util/crypto';\nimport { getCookiesFromChromiumSqliteDB } from './common';\n\nexport async function getCookiesFromVivaldiWindowsSqlite(\n  options: GetCookiesOptions,\n  origins: string[],\n  cookieNames: Set<string> | null\n): Promise<GetCookiesResult> {\n  const vivaldiUserDataDir = resolveVivaldiWindowsUserDataDir();\n  const sqlDBPath = resolveVivaldiWindowsDBPath(vivaldiUserDataDir, options.profile);\n  if (!sqlDBPath) {\n    return {\n      cookies: [],\n      warnings: ['Could not resolve Vivaldi cookie database path on Windows.'],\n    };\n  }\n\n  const warnings: string[] = [];\n\n  const keyResult = await extractVivaldiWindowsEncryptionKey(vivaldiUserDataDir);\n  if (!keyResult.success) {\n    warnings.push(`Failed to get Vivaldi decryption key: ${keyResult.error}`);\n    return { cookies: [], warnings };\n  }\n\n  const key = keyResult.key;\n  const decryptFn = (encryptedValue: Uint8Array): string | null => {\n    return decryptChromiumAES256GCMCookieValue(encryptedValue, key);\n  };\n\n  const fileOptions: GetCookiesFromFileOptions = {\n    cookieFilePath: sqlDBPath,\n  };\n  fileOptions.profile = options.profile;\n  fileOptions.includeExpired = options.includeExpired;\n\n  const { cookies, warnings: dbWarnings } = await getCookiesFromChromiumSqliteDB(\n    fileOptions,\n    origins,\n    cookieNames,\n    'vivaldi',\n    decryptFn\n  );\n  warnings.push(...dbWarnings);\n\n  return { cookies, warnings };\n}\n\nfunction resolveVivaldiWindowsUserDataDir(): string {\n  const localAppData =\n    process.env.LOCALAPPDATA || path.join(process.env.USERPROFILE || '', 'AppData', 'Local');\n  return path.join(localAppData, 'Vivaldi', 'User Data');\n}\n\nfunction resolveVivaldiWindowsDBPath(userDataDir: string, profile?: string): string | null {\n  return resolveBrowserDefaultorSpecificDBPath([userDataDir], profile);\n}\n\nasync function extractVivaldiWindowsEncryptionKey(\n  userDataDir: string\n): Promise<{ success: true; key: Buffer } | { success: false; error: string }> {\n  const localStatePath = path.join(userDataDir, 'Local State');\n\n  let localStateContent: string;\n  try {\n    localStateContent = readFileSync(localStatePath, 'utf8');\n  } catch (error) {\n    return {\n      success: false,\n      error: `Failed to read Local State file: ${(error as Error).message}`,\n    };\n  }\n\n  let localState: { os_crypt?: { encrypted_key?: string } };\n  try {\n    localState = JSON.parse(localStateContent);\n  } catch (error) {\n    return {\n      success: false,\n      error: `Failed to parse Local State JSON: ${(error as Error).message}`,\n    };\n  }\n\n  const encryptedKeyBase64 = localState?.os_crypt?.encrypted_key;\n  if (!encryptedKeyBase64) {\n    return { success: false, error: 'No encrypted_key found in Local State' };\n  }\n\n  const encryptedKeyWithPrefix = Buffer.from(encryptedKeyBase64, 'base64');\n\n  // The key is prefixed with \"DPAPI\" (5 bytes)\n  const dpapiPrefix = encryptedKeyWithPrefix.subarray(0, 5).toString('utf8');\n  if (dpapiPrefix !== 'DPAPI') {\n    return { success: false, error: 'Encrypted key does not have expected DPAPI prefix' };\n  }\n\n  const encryptedKey = encryptedKeyWithPrefix.subarray(5);\n  const dpapiResult = await decryptWindowsDpapi(encryptedKey);\n  if (!dpapiResult.success) {\n    return { success: false, error: `DPAPI decryption failed: ${dpapiResult.error}` };\n  }\n\n  return { success: true, key: dpapiResult.decrypted };\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,oBAAoB;AAO7B,eAAsB,mCACpB,SACA,SACA,aAC2B;AAC3B,QAAM,qBAAqB,iCAAiC;AAC5D,QAAM,YAAY,4BAA4B,oBAAoB,QAAQ,OAAO;AACjF,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,MACV,UAAU,CAAC,4DAA4D;AAAA,IACzE;AAAA,EACF;AAEA,QAAM,WAAqB,CAAC;AAE5B,QAAM,YAAY,MAAM,mCAAmC,kBAAkB;AAC7E,MAAI,CAAC,UAAU,SAAS;AACtB,aAAS,KAAK,yCAAyC,UAAU,KAAK,EAAE;AACxE,WAAO,EAAE,SAAS,CAAC,GAAG,SAAS;AAAA,EACjC;AAEA,QAAM,MAAM,UAAU;AACtB,QAAM,YAAY,CAAC,mBAA8C;AAC/D,WAAO,oCAAoC,gBAAgB,GAAG;AAAA,EAChE;AAEA,QAAM,cAAyC;AAAA,IAC7C,gBAAgB;AAAA,EAClB;AACA,cAAY,UAAU,QAAQ;AAC9B,cAAY,iBAAiB,QAAQ;AAErC,QAAM,EAAE,SAAS,UAAU,WAAW,IAAI,MAAM;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,WAAS,KAAK,GAAG,UAAU;AAE3B,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,SAAS,mCAA2C;AAClD,QAAM,eACJ,QAAQ,IAAI,gBAAgB,KAAK,KAAK,QAAQ,IAAI,eAAe,IAAI,WAAW,OAAO;AACzF,SAAO,KAAK,KAAK,cAAc,WAAW,WAAW;AACvD;AAEA,SAAS,4BAA4B,aAAqB,SAAiC;AACzF,SAAO,sCAAsC,CAAC,WAAW,GAAG,OAAO;AACrE;AAEA,eAAe,mCACb,aAC6E;AAC7E,QAAM,iBAAiB,KAAK,KAAK,aAAa,aAAa;AAE3D,MAAI;AACJ,MAAI;AACF,wBAAoB,aAAa,gBAAgB,MAAM;AAAA,EACzD,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,oCAAqC,MAAgB,OAAO;AAAA,IACrE;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,MAAM,iBAAiB;AAAA,EAC3C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,qCAAsC,MAAgB,OAAO;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,qBAAqB,YAAY,UAAU;AACjD,MAAI,CAAC,oBAAoB;AACvB,WAAO,EAAE,SAAS,OAAO,OAAO,wCAAwC;AAAA,EAC1E;AAEA,QAAM,yBAAyB,OAAO,KAAK,oBAAoB,QAAQ;AAGvE,QAAM,cAAc,uBAAuB,SAAS,GAAG,CAAC,EAAE,SAAS,MAAM;AACzE,MAAI,gBAAgB,SAAS;AAC3B,WAAO,EAAE,SAAS,OAAO,OAAO,oDAAoD;AAAA,EACtF;AAEA,QAAM,eAAe,uBAAuB,SAAS,CAAC;AACtD,QAAM,cAAc,MAAM,oBAAoB,YAAY;AAC1D,MAAI,CAAC,YAAY,SAAS;AACxB,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B,YAAY,KAAK,GAAG;AAAA,EAClF;AAEA,SAAO,EAAE,SAAS,MAAM,KAAK,YAAY,UAAU;AACrD;","names":[]}

package/dist/chunk-5AEUDMIX.js

@@ -0,0 +1,68 @@
+import {
+  getCookiesFromSafari
+} from "./chunk-A3YGBITD.js";
+import {
+  getCookiesFromVivaldi
+} from "./chunk-IXZPT56H.js";
+import {
+  getCookiesFromBrave
+} from "./chunk-XDL34EPI.js";
+import {
+  getCookiesFromChrome
+} from "./chunk-NGBAATI3.js";
+import {
+  getCookiesFromEdge
+} from "./chunk-D23AYBOE.js";
+import {
+  getCookiesFromFirefoxSqlite
+} from "./chunk-YD3PNZMV.js";
+import {
+  getCookiesFromOpera
+} from "./chunk-HOGGS6QP.js";
+
+// src/publicApi.ts
+function toCookieHeader(cookies, options) {
+  const items = cookies.map((cookie) => ({ name: cookie.name, value: cookie.value }));
+  if (options.sortByName) {
+    items.sort((a, b) => a.name.localeCompare(b.name));
+  }
+  if (options.removeDuplicates) {
+    const seen = /* @__PURE__ */ new Set();
+    const uniqueItems = [];
+    for (const item of items) {
+      if (!seen.has(item.name)) {
+        seen.add(item.name);
+        uniqueItems.push(item);
+      }
+    }
+    return uniqueItems.map((item) => `${item.name}=${item.value}`).join("; ");
+  }
+  return items.map((item) => `${item.name}=${item.value}`).join("; ");
+}
+async function getCookiesFromBrowser(params) {
+  const { origins, cookieNames, browserName, profile, includeExpired, includePartitioned } = params;
+  const cookieNamesSet = cookieNames ? new Set(cookieNames) : null;
+  const options = { profile, includeExpired, includePartitioned };
+  switch (browserName) {
+    case "chrome":
+      return getCookiesFromChrome(options, origins, cookieNamesSet);
+    case "edge":
+      return getCookiesFromEdge(options, origins, cookieNamesSet);
+    case "firefox":
+      return getCookiesFromFirefoxSqlite(options, origins, cookieNamesSet);
+    case "safari":
+      return getCookiesFromSafari(options, origins, cookieNamesSet);
+    case "opera":
+      return getCookiesFromOpera(options, origins, cookieNamesSet);
+    case "brave":
+      return getCookiesFromBrave(options, origins, cookieNamesSet);
+    case "vivaldi":
+      return getCookiesFromVivaldi(options, origins, cookieNamesSet);
+  }
+}
+
+export {
+  toCookieHeader,
+  getCookiesFromBrowser
+};
+//# sourceMappingURL=chunk-5AEUDMIX.js.map

package/dist/chunk-5AEUDMIX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/publicApi.ts"],"sourcesContent":["import {\n  Cookie,\n  CookieHeaderOption,\n  GetCookiesOptions,\n  GetCookiesResult,\n  GetCookiesFromBrowserParams,\n} from './types';\nimport { getCookiesFromChrome } from './browsers/chrome';\nimport { getCookiesFromEdge } from './browsers/edge';\nimport { getCookiesFromFirefoxSqlite } from './browsers/firefoxCookie';\nimport { getCookiesFromSafari } from './browsers/safariCookie';\nimport { getCookiesFromOpera } from './browsers/opera';\nimport { getCookiesFromBrave } from './browsers/bravo';\nimport { getCookiesFromVivaldi } from './browsers/vivaldi';\n\n/**\n * Convert an array of Cookie objects into a Cookie header string (e.g. \"name1=value1; name2=value2\")\n * @param cookies - The cookies to serialize\n * @param options - Options for formatting the header\n *   - removeDuplicates: keep only the first occurrence of each cookie name\n *   - sortByName: sort cookies alphabetically by name\n * @returns A formatted Cookie header string\n */\nexport function toCookieHeader(cookies: Cookie[], options: CookieHeaderOption): string {\n  const items = cookies.map((cookie) => ({ name: cookie.name, value: cookie.value }));\n  if (options.sortByName) {\n    items.sort((a, b) => a.name.localeCompare(b.name));\n  }\n\n  if (options.removeDuplicates) {\n    const seen = new Set<string>();\n    const uniqueItems = [];\n    for (const item of items) {\n      if (!seen.has(item.name)) {\n        seen.add(item.name);\n        uniqueItems.push(item);\n      }\n    }\n    return uniqueItems.map((item) => `${item.name}=${item.value}`).join('; ');\n  }\n  return items.map((item) => `${item.name}=${item.value}`).join('; ');\n}\n\n/**\n * Extract cookies from a specified browser's local storage.\n * Supports Chrome, Edge, Firefox, Safari, Opera, Brave and Vivaldi.\n * @param params - Browser and filtering options\n * @returns Extracted cookies and any warnings encountered during parsing\n */\nexport async function getCookiesFromBrowser(\n  params: GetCookiesFromBrowserParams,\n): Promise<GetCookiesResult> {\n  const { origins, cookieNames, browserName, profile, includeExpired, includePartitioned } = params;\n  const cookieNamesSet = cookieNames ? new Set(cookieNames) : null;\n  const options: GetCookiesOptions = { profile, includeExpired, includePartitioned };\n\n  switch (browserName) {\n    case 'chrome':\n      return getCookiesFromChrome(options, origins, cookieNamesSet);\n    case 'edge':\n      return getCookiesFromEdge(options, origins, cookieNamesSet);\n    case 'firefox':\n      return getCookiesFromFirefoxSqlite(options, origins, cookieNamesSet);\n    case 'safari':\n      return getCookiesFromSafari(options, origins, cookieNamesSet);\n    case 'opera':\n      return getCookiesFromOpera(options, origins, cookieNamesSet);\n    case 'brave':\n      return getCookiesFromBrave(options, origins, cookieNamesSet);\n    case 'vivaldi':\n      return getCookiesFromVivaldi(options, origins, cookieNamesSet);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuBO,SAAS,eAAe,SAAmB,SAAqC;AACrF,QAAM,QAAQ,QAAQ,IAAI,CAAC,YAAY,EAAE,MAAM,OAAO,MAAM,OAAO,OAAO,MAAM,EAAE;AAClF,MAAI,QAAQ,YAAY;AACtB,UAAM,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,EACnD;AAEA,MAAI,QAAQ,kBAAkB;AAC5B,UAAM,OAAO,oBAAI,IAAY;AAC7B,UAAM,cAAc,CAAC;AACrB,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,IAAI,KAAK,IAAI,GAAG;AACxB,aAAK,IAAI,KAAK,IAAI;AAClB,oBAAY,KAAK,IAAI;AAAA,MACvB;AAAA,IACF;AACA,WAAO,YAAY,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI;AAAA,EAC1E;AACA,SAAO,MAAM,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI;AACpE;AAQA,eAAsB,sBACpB,QAC2B;AAC3B,QAAM,EAAE,SAAS,aAAa,aAAa,SAAS,gBAAgB,mBAAmB,IAAI;AAC3F,QAAM,iBAAiB,cAAc,IAAI,IAAI,WAAW,IAAI;AAC5D,QAAM,UAA6B,EAAE,SAAS,gBAAgB,mBAAmB;AAEjF,UAAQ,aAAa;AAAA,IACnB,KAAK;AACH,aAAO,qBAAqB,SAAS,SAAS,cAAc;AAAA,IAC9D,KAAK;AACH,aAAO,mBAAmB,SAAS,SAAS,cAAc;AAAA,IAC5D,KAAK;AACH,aAAO,4BAA4B,SAAS,SAAS,cAAc;AAAA,IACrE,KAAK;AACH,aAAO,qBAAqB,SAAS,SAAS,cAAc;AAAA,IAC9D,KAAK;AACH,aAAO,oBAAoB,SAAS,SAAS,cAAc;AAAA,IAC7D,KAAK;AACH,aAAO,oBAAoB,SAAS,SAAS,cAAc;AAAA,IAC7D,KAAK;AACH,aAAO,sBAAsB,SAAS,SAAS,cAAc;AAAA,EACjE;AACF;","names":[]}

package/dist/chunk-5AJFPLWB.js

@@ -0,0 +1,98 @@
+import {
+  decryptWindowsDpapi
+} from "./chunk-AR5Q6KM4.js";
+import {
+  decryptChromiumAES256GCMCookieValue
+} from "./chunk-UR6BPQ2T.js";
+import {
+  resolveBrowserDefaultorSpecificDBPath
+} from "./chunk-TYLH6G3Z.js";
+import {
+  getCookiesFromChromiumSqliteDB
+} from "./chunk-JTBFDYPY.js";
+
+// src/operaWindowsCookie.ts
+import path from "path";
+import { readFileSync } from "fs";
+async function getCookiesFromOperaWindowsSqlite(options, origins, cookieNames) {
+  const operaUserDataDir = resolveOperaWindowsUserDataDir();
+  const sqlDBPath = resolveOperaWindowsDBPath(operaUserDataDir, options.profile);
+  if (!sqlDBPath) {
+    return {
+      cookies: [],
+      warnings: ["Could not resolve Opera cookie database path on Windows."]
+    };
+  }
+  const warnings = [];
+  const keyResult = await extractOperaWindowsEncryptionKey(operaUserDataDir);
+  if (!keyResult.success) {
+    warnings.push(`Failed to get Opera decryption key: ${keyResult.error}`);
+    return { cookies: [], warnings };
+  }
+  const key = keyResult.key;
+  const decryptFn = (encryptedValue) => {
+    return decryptChromiumAES256GCMCookieValue(encryptedValue, key);
+  };
+  const fileOptions = {
+    cookieFilePath: sqlDBPath
+  };
+  fileOptions.profile = options.profile;
+  fileOptions.includeExpired = options.includeExpired;
+  const { cookies, warnings: dbWarnings } = await getCookiesFromChromiumSqliteDB(
+    fileOptions,
+    origins,
+    cookieNames,
+    "opera",
+    decryptFn
+  );
+  warnings.push(...dbWarnings);
+  return { cookies, warnings };
+}
+function resolveOperaWindowsUserDataDir() {
+  const appData = process.env.APPDATA || path.join(process.env.USERPROFILE || "", "AppData", "Roaming");
+  return path.join(appData, "Opera Software", "Opera Stable");
+}
+function resolveOperaWindowsDBPath(userDataDir, profile) {
+  return resolveBrowserDefaultorSpecificDBPath([userDataDir], profile);
+}
+async function extractOperaWindowsEncryptionKey(userDataDir) {
+  const localStatePath = path.join(userDataDir, "Local State");
+  let localStateContent;
+  try {
+    localStateContent = readFileSync(localStatePath, "utf8");
+  } catch (error) {
+    return {
+      success: false,
+      error: `Failed to read Local State file: ${error.message}`
+    };
+  }
+  let localState;
+  try {
+    localState = JSON.parse(localStateContent);
+  } catch (error) {
+    return {
+      success: false,
+      error: `Failed to parse Local State JSON: ${error.message}`
+    };
+  }
+  const encryptedKeyBase64 = localState?.os_crypt?.encrypted_key;
+  if (!encryptedKeyBase64) {
+    return { success: false, error: "No encrypted_key found in Local State" };
+  }
+  const encryptedKeyWithPrefix = Buffer.from(encryptedKeyBase64, "base64");
+  const dpapiPrefix = encryptedKeyWithPrefix.subarray(0, 5).toString("utf8");
+  if (dpapiPrefix !== "DPAPI") {
+    return { success: false, error: "Encrypted key does not have expected DPAPI prefix" };
+  }
+  const encryptedKey = encryptedKeyWithPrefix.subarray(5);
+  const dpapiResult = await decryptWindowsDpapi(encryptedKey);
+  if (!dpapiResult.success) {
+    return { success: false, error: `DPAPI decryption failed: ${dpapiResult.error}` };
+  }
+  return { success: true, key: dpapiResult.decrypted };
+}
+
+export {
+  getCookiesFromOperaWindowsSqlite
+};
+//# sourceMappingURL=chunk-5AJFPLWB.js.map

package/dist/chunk-5AJFPLWB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/operaWindowsCookie.ts"],"sourcesContent":["import path from 'path';\nimport { readFileSync } from 'fs';\nimport { resolveBrowserDefaultorSpecificDBPath } from './util/fileHelper';\nimport { GetCookiesOptions, GetCookiesResult, GetCookiesFromFileOptions } from './types';\nimport { decryptWindowsDpapi } from './util/windowsDpapi';\nimport { decryptChromiumAES256GCMCookieValue } from './util/crypto';\nimport { getCookiesFromChromiumSqliteDB } from './common';\n\nexport async function getCookiesFromOperaWindowsSqlite(\n  options: GetCookiesOptions,\n  origins: string[],\n  cookieNames: Set<string> | null\n): Promise<GetCookiesResult> {\n  const operaUserDataDir = resolveOperaWindowsUserDataDir();\n  const sqlDBPath = resolveOperaWindowsDBPath(operaUserDataDir, options.profile);\n  if (!sqlDBPath) {\n    return {\n      cookies: [],\n      warnings: ['Could not resolve Opera cookie database path on Windows.'],\n    };\n  }\n\n  const warnings: string[] = [];\n\n  const keyResult = await extractOperaWindowsEncryptionKey(operaUserDataDir);\n  if (!keyResult.success) {\n    warnings.push(`Failed to get Opera decryption key: ${keyResult.error}`);\n    return { cookies: [], warnings };\n  }\n\n  const key = keyResult.key;\n  const decryptFn = (encryptedValue: Uint8Array): string | null => {\n    return decryptChromiumAES256GCMCookieValue(encryptedValue, key);\n  };\n\n  const fileOptions: GetCookiesFromFileOptions = {\n    cookieFilePath: sqlDBPath,\n  };\n  fileOptions.profile = options.profile;\n  fileOptions.includeExpired = options.includeExpired;\n\n  const { cookies, warnings: dbWarnings } = await getCookiesFromChromiumSqliteDB(\n    fileOptions,\n    origins,\n    cookieNames,\n    'opera',\n    decryptFn\n  );\n  warnings.push(...dbWarnings);\n\n  return { cookies, warnings };\n}\n\nfunction resolveOperaWindowsUserDataDir(): string {\n  const appData =\n    process.env.APPDATA || path.join(process.env.USERPROFILE || '', 'AppData', 'Roaming');\n  return path.join(appData, 'Opera Software', 'Opera Stable');\n}\n\nfunction resolveOperaWindowsDBPath(userDataDir: string, profile?: string): string | null {\n  return resolveBrowserDefaultorSpecificDBPath([userDataDir], profile);\n}\n\nasync function extractOperaWindowsEncryptionKey(\n  userDataDir: string\n): Promise<{ success: true; key: Buffer } | { success: false; error: string }> {\n  const localStatePath = path.join(userDataDir, 'Local State');\n\n  let localStateContent: string;\n  try {\n    localStateContent = readFileSync(localStatePath, 'utf8');\n  } catch (error) {\n    return {\n      success: false,\n      error: `Failed to read Local State file: ${(error as Error).message}`,\n    };\n  }\n\n  let localState: { os_crypt?: { encrypted_key?: string } };\n  try {\n    localState = JSON.parse(localStateContent);\n  } catch (error) {\n    return {\n      success: false,\n      error: `Failed to parse Local State JSON: ${(error as Error).message}`,\n    };\n  }\n\n  const encryptedKeyBase64 = localState?.os_crypt?.encrypted_key;\n  if (!encryptedKeyBase64) {\n    return { success: false, error: 'No encrypted_key found in Local State' };\n  }\n\n  const encryptedKeyWithPrefix = Buffer.from(encryptedKeyBase64, 'base64');\n\n  // The key is prefixed with \"DPAPI\" (5 bytes)\n  const dpapiPrefix = encryptedKeyWithPrefix.subarray(0, 5).toString('utf8');\n  if (dpapiPrefix !== 'DPAPI') {\n    return { success: false, error: 'Encrypted key does not have expected DPAPI prefix' };\n  }\n\n  const encryptedKey = encryptedKeyWithPrefix.subarray(5);\n  const dpapiResult = await decryptWindowsDpapi(encryptedKey);\n  if (!dpapiResult.success) {\n    return { success: false, error: `DPAPI decryption failed: ${dpapiResult.error}` };\n  }\n\n  return { success: true, key: dpapiResult.decrypted };\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,oBAAoB;AAO7B,eAAsB,iCACpB,SACA,SACA,aAC2B;AAC3B,QAAM,mBAAmB,+BAA+B;AACxD,QAAM,YAAY,0BAA0B,kBAAkB,QAAQ,OAAO;AAC7E,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,MACV,UAAU,CAAC,0DAA0D;AAAA,IACvE;AAAA,EACF;AAEA,QAAM,WAAqB,CAAC;AAE5B,QAAM,YAAY,MAAM,iCAAiC,gBAAgB;AACzE,MAAI,CAAC,UAAU,SAAS;AACtB,aAAS,KAAK,uCAAuC,UAAU,KAAK,EAAE;AACtE,WAAO,EAAE,SAAS,CAAC,GAAG,SAAS;AAAA,EACjC;AAEA,QAAM,MAAM,UAAU;AACtB,QAAM,YAAY,CAAC,mBAA8C;AAC/D,WAAO,oCAAoC,gBAAgB,GAAG;AAAA,EAChE;AAEA,QAAM,cAAyC;AAAA,IAC7C,gBAAgB;AAAA,EAClB;AACA,cAAY,UAAU,QAAQ;AAC9B,cAAY,iBAAiB,QAAQ;AAErC,QAAM,EAAE,SAAS,UAAU,WAAW,IAAI,MAAM;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,WAAS,KAAK,GAAG,UAAU;AAE3B,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,SAAS,iCAAyC;AAChD,QAAM,UACJ,QAAQ,IAAI,WAAW,KAAK,KAAK,QAAQ,IAAI,eAAe,IAAI,WAAW,SAAS;AACtF,SAAO,KAAK,KAAK,SAAS,kBAAkB,cAAc;AAC5D;AAEA,SAAS,0BAA0B,aAAqB,SAAiC;AACvF,SAAO,sCAAsC,CAAC,WAAW,GAAG,OAAO;AACrE;AAEA,eAAe,iCACb,aAC6E;AAC7E,QAAM,iBAAiB,KAAK,KAAK,aAAa,aAAa;AAE3D,MAAI;AACJ,MAAI;AACF,wBAAoB,aAAa,gBAAgB,MAAM;AAAA,EACzD,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,oCAAqC,MAAgB,OAAO;AAAA,IACrE;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,MAAM,iBAAiB;AAAA,EAC3C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,qCAAsC,MAAgB,OAAO;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,qBAAqB,YAAY,UAAU;AACjD,MAAI,CAAC,oBAAoB;AACvB,WAAO,EAAE,SAAS,OAAO,OAAO,wCAAwC;AAAA,EAC1E;AAEA,QAAM,yBAAyB,OAAO,KAAK,oBAAoB,QAAQ;AAGvE,QAAM,cAAc,uBAAuB,SAAS,GAAG,CAAC,EAAE,SAAS,MAAM;AACzE,MAAI,gBAAgB,SAAS;AAC3B,WAAO,EAAE,SAAS,OAAO,OAAO,oDAAoD;AAAA,EACtF;AAEA,QAAM,eAAe,uBAAuB,SAAS,CAAC;AACtD,QAAM,cAAc,MAAM,oBAAoB,YAAY;AAC1D,MAAI,CAAC,YAAY,SAAS;AACxB,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B,YAAY,KAAK,GAAG;AAAA,EAClF;AAEA,SAAO,EAAE,SAAS,MAAM,KAAK,YAAY,UAAU;AACrD;","names":[]}

package/dist/chunk-6OYYWSIJ.js

@@ -0,0 +1,58 @@
+import {
+  findLinuxChromiumPassword
+} from "./chunk-EPL3V4O3.js";
+import {
+  decryptChomiumAES128CBCCookieValue,
+  getAES128CBCKey
+} from "./chunk-UR6BPQ2T.js";
+import {
+  resolveBrowserDefaultorSpecificDBPath
+} from "./chunk-TYLH6G3Z.js";
+import {
+  getCookiesFromChromiumSqliteDB
+} from "./chunk-JTBFDYPY.js";
+
+// src/chromeLinuxCookie.ts
+import { homedir } from "os";
+async function getCookiesFromChromeLinuxSqlite(options, origins, cookieNames) {
+  const sqlDBPath = resolveChromeLinuxDBPath(options.profile);
+  if (!sqlDBPath) {
+    return {
+      cookies: [],
+      warnings: ["Could not resolve Chrome cookie database path on Linux."]
+    };
+  }
+  const warnings = [];
+  const passwordResult = await findLinuxChromiumPassword("chrome", "Chrome Safe Storage", 5e3);
+  if (passwordResult.warnings.length > 0) {
+    warnings.push(...passwordResult.warnings);
+  }
+  const key = getAES128CBCKey(passwordResult.password, 1);
+  const decryptFn = (encryptedValue) => {
+    return decryptChomiumAES128CBCCookieValue(encryptedValue, [key]);
+  };
+  const fileOptions = {
+    cookieFilePath: sqlDBPath
+  };
+  fileOptions.profile = options.profile;
+  fileOptions.includeExpired = options.includeExpired;
+  const { cookies, warnings: dbWarnings } = await getCookiesFromChromiumSqliteDB(
+    fileOptions,
+    origins,
+    cookieNames,
+    "chrome",
+    decryptFn
+  );
+  warnings.push(...dbWarnings);
+  return { cookies, warnings };
+}
+function resolveChromeLinuxDBPath(profile) {
+  const homeDir = homedir();
+  const roots = [`${homeDir}/.config/google-chrome`];
+  return resolveBrowserDefaultorSpecificDBPath(roots, profile);
+}
+
+export {
+  getCookiesFromChromeLinuxSqlite
+};
+//# sourceMappingURL=chunk-6OYYWSIJ.js.map

package/dist/chunk-6OYYWSIJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/chromeLinuxCookie.ts"],"sourcesContent":["import { homedir } from 'os';\nimport { resolveBrowserDefaultorSpecificDBPath } from './util/fileHelper';\nimport { GetCookiesOptions, GetCookiesResult, GetCookiesFromFileOptions } from './types';\nimport { getAES128CBCKey, decryptChomiumAES128CBCCookieValue } from './util/crypto';\nimport { getCookiesFromChromiumSqliteDB } from './common';\nimport { findLinuxChromiumPassword } from './util/linuxKeyring';\n\nexport async function getCookiesFromChromeLinuxSqlite(\n  options: GetCookiesOptions,\n  origins: string[],\n  cookieNames: Set<string> | null\n): Promise<GetCookiesResult> {\n  const sqlDBPath = resolveChromeLinuxDBPath(options.profile);\n  if (!sqlDBPath) {\n    return {\n      cookies: [],\n      warnings: ['Could not resolve Chrome cookie database path on Linux.'],\n    };\n  }\n\n  const warnings: string[] = [];\n\n  const passwordResult = await findLinuxChromiumPassword('chrome', 'Chrome Safe Storage', 5000);\n  if (passwordResult.warnings.length > 0) {\n    warnings.push(...passwordResult.warnings);\n  }\n\n  // iterations is 1 for Linux Chrome\n  const key = getAES128CBCKey(passwordResult.password, 1);\n  const decryptFn = (encryptedValue: Uint8Array): string | null => {\n    return decryptChomiumAES128CBCCookieValue(encryptedValue, [key]);\n  };\n\n  const fileOptions: GetCookiesFromFileOptions = {\n    cookieFilePath: sqlDBPath,\n  };\n  fileOptions.profile = options.profile;\n  fileOptions.includeExpired = options.includeExpired;\n\n  const { cookies, warnings: dbWarnings } = await getCookiesFromChromiumSqliteDB(\n    fileOptions,\n    origins,\n    cookieNames,\n    'chrome',\n    decryptFn\n  );\n  warnings.push(...dbWarnings);\n\n  return { cookies, warnings };\n}\n\nfunction resolveChromeLinuxDBPath(profile?: string): string | null {\n  const homeDir = homedir();\n  const roots = [`${homeDir}/.config/google-chrome`];\n  return resolveBrowserDefaultorSpecificDBPath(roots, profile);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AAOxB,eAAsB,gCACpB,SACA,SACA,aAC2B;AAC3B,QAAM,YAAY,yBAAyB,QAAQ,OAAO;AAC1D,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,MACV,UAAU,CAAC,yDAAyD;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,WAAqB,CAAC;AAE5B,QAAM,iBAAiB,MAAM,0BAA0B,UAAU,uBAAuB,GAAI;AAC5F,MAAI,eAAe,SAAS,SAAS,GAAG;AACtC,aAAS,KAAK,GAAG,eAAe,QAAQ;AAAA,EAC1C;AAGA,QAAM,MAAM,gBAAgB,eAAe,UAAU,CAAC;AACtD,QAAM,YAAY,CAAC,mBAA8C;AAC/D,WAAO,mCAAmC,gBAAgB,CAAC,GAAG,CAAC;AAAA,EACjE;AAEA,QAAM,cAAyC;AAAA,IAC7C,gBAAgB;AAAA,EAClB;AACA,cAAY,UAAU,QAAQ;AAC9B,cAAY,iBAAiB,QAAQ;AAErC,QAAM,EAAE,SAAS,UAAU,WAAW,IAAI,MAAM;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,WAAS,KAAK,GAAG,UAAU;AAE3B,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,SAAS,yBAAyB,SAAiC;AACjE,QAAM,UAAU,QAAQ;AACxB,QAAM,QAAQ,CAAC,GAAG,OAAO,wBAAwB;AACjD,SAAO,sCAAsC,OAAO,OAAO;AAC7D;","names":[]}

package/dist/chunk-A3YGBITD.js

@@ -0,0 +1,221 @@
+import {
+  normalizeExpiration
+} from "./chunk-JTBFDYPY.js";
+
+// src/browsers/safariCookie.ts
+import { homedir, tmpdir } from "os";
+import { copyFileSync, mkdtempSync, rmSync, existsSync, readFileSync, statSync } from "fs";
+import path from "path";
+var BINARY_COOKIES_MAGIC = "cook";
+async function getCookiesFromSafari(options, origins, cookieNames) {
+  const warnings = [];
+  if (process.platform !== "darwin") {
+    warnings.push("Safari cookies are only supported on macOS.");
+    return { cookies: [], warnings };
+  }
+  let hosts;
+  try {
+    hosts = origins.map((origin) => new URL(origin).hostname);
+  } catch (error) {
+    warnings.push(`Invalid URL: ${error.message}`);
+    return { cookies: [], warnings };
+  }
+  const cookieFilePath = resolveSafariCookiePath(options.profile);
+  if (!cookieFilePath) {
+    warnings.push("Could not find Safari cookie file.");
+    return { cookies: [], warnings };
+  }
+  const tmpdirPath = mkdtempSync(path.join(tmpdir(), "sqlite-cookie-safari-"));
+  const tempFilePath = path.join(tmpdirPath, "Cookies.binarycookies");
+  try {
+    copyFileSync(cookieFilePath, tempFilePath);
+  } catch (error) {
+    rmSync(tmpdirPath, { recursive: true, force: true });
+    warnings.push(`Failed to copy Safari cookie file: ${error.message}`);
+    return { cookies: [], warnings };
+  }
+  try {
+    const fileBuffer = readFileSync(tempFilePath);
+    const rawCookies = parseBinaryCookies(fileBuffer);
+    const fileOptions = {
+      cookieFilePath,
+      profile: options.profile,
+      includeExpired: options.includeExpired
+    };
+    const cookies = filterAndConvertCookies(rawCookies, fileOptions, hosts, cookieNames);
+    rmSync(tmpdirPath, { recursive: true, force: true });
+    if (cookies.length === 0 && warnings.length === 0) {
+      warnings.push("No cookies found.");
+    }
+    return { cookies, warnings };
+  } catch (error) {
+    rmSync(tmpdirPath, { recursive: true, force: true });
+    warnings.push(`Failed to parse Safari cookie file: ${error.message}`);
+    return { cookies: [], warnings };
+  }
+}
+function parseBinaryCookies(buffer) {
+  let offset = 0;
+  const magic = buffer.subarray(0, 4).toString("ascii");
+  if (magic !== BINARY_COOKIES_MAGIC) {
+    throw new Error(
+      `Invalid BinaryCookies magic: expected "${BINARY_COOKIES_MAGIC}", got "${magic}"`
+    );
+  }
+  offset = 4;
+  const numPages = buffer.readUInt32BE(offset);
+  offset += 4;
+  const pageSizes = [];
+  for (let i = 0; i < numPages; i++) {
+    pageSizes.push(buffer.readUInt32BE(offset));
+    offset += 4;
+  }
+  const cookies = [];
+  for (let i = 0; i < numPages; i++) {
+    const pageStart = offset;
+    const pageBuffer = buffer.subarray(pageStart, pageStart + pageSizes[i]);
+    const pageCookies = parsePage(pageBuffer);
+    cookies.push(...pageCookies);
+    offset += pageSizes[i];
+  }
+  return cookies;
+}
+function parsePage(page) {
+  let offset = 0;
+  offset += 4;
+  const numCookies = page.readUInt32LE(offset);
+  offset += 4;
+  const cookieOffsets = [];
+  for (let i = 0; i < numCookies; i++) {
+    cookieOffsets.push(page.readUInt32LE(offset));
+    offset += 4;
+  }
+  const cookies = [];
+  for (const cookieOffset of cookieOffsets) {
+    try {
+      const cookie = parseCookieRecord(page, cookieOffset);
+      if (cookie) {
+        cookies.push(cookie);
+      }
+    } catch {
+    }
+  }
+  return cookies;
+}
+function parseCookieRecord(page, startOffset) {
+  let offset = startOffset;
+  offset += 4;
+  const flags = page.readUInt32LE(offset);
+  offset += 4;
+  offset += 8;
+  const urlOffset = page.readUInt32LE(offset);
+  offset += 4;
+  const nameOffset = page.readUInt32LE(offset);
+  offset += 4;
+  const pathOffset = page.readUInt32LE(offset);
+  offset += 4;
+  const valueOffset = page.readUInt32LE(offset);
+  offset += 4;
+  offset += 8;
+  const expiry = page.readDoubleLE(offset);
+  offset += 8;
+  const domain = readNullTerminatedString(page, startOffset + urlOffset);
+  const name = readNullTerminatedString(page, startOffset + nameOffset);
+  const cookiePath = readNullTerminatedString(page, startOffset + pathOffset);
+  const value = readNullTerminatedString(page, startOffset + valueOffset);
+  const secure = (flags & 1) !== 0;
+  const httpOnly = (flags & 4) !== 0;
+  return {
+    name,
+    value,
+    domain,
+    path: cookiePath,
+    expiry,
+    secure,
+    httpOnly
+  };
+}
+function readNullTerminatedString(buffer, offset) {
+  if (offset < 0 || offset >= buffer.length) {
+    return "";
+  }
+  const end = buffer.indexOf(0, offset);
+  if (end === -1) {
+    return buffer.subarray(offset).toString("utf8");
+  }
+  return buffer.subarray(offset, end).toString("utf8");
+}
+function filterAndConvertCookies(rawCookies, options, hosts, cookieNames) {
+  const cookies = [];
+  for (const raw of rawCookies) {
+    if (cookieNames && !cookieNames.has(raw.name)) {
+      continue;
+    }
+    const domain = raw.domain.startsWith(".") ? raw.domain.substring(1) : raw.domain;
+    const domainLower = domain.toLowerCase();
+    if (!hosts.some((h) => {
+      const hostLower = h.toLowerCase();
+      return hostLower === domainLower || hostLower.endsWith(`.${domainLower}`);
+    })) {
+      continue;
+    }
+    const expires = normalizeExpiration(raw.expiry, "safari");
+    if (!options.includeExpired && expires && expires < Date.now()) {
+      continue;
+    }
+    const cookie = {
+      name: raw.name,
+      value: raw.value,
+      domain,
+      path: raw.path || "/",
+      expires,
+      secure: raw.secure,
+      httpOnly: raw.httpOnly,
+      source: {
+        browser: "safari",
+        cookieFilePath: options.cookieFilePath
+      }
+    };
+    cookies.push(cookie);
+  }
+  return cookies;
+}
+function resolveSafariCookiePath(profile) {
+  profile = profile?.trim();
+  if (profile) {
+    const stat = statSync(profile, { throwIfNoEntry: false });
+    if (stat && stat.isFile()) {
+      return profile;
+    }
+    if (stat && stat.isDirectory()) {
+      const cookiePath = path.join(profile, "Cookies.binarycookies");
+      if (existsSync(cookiePath)) {
+        return cookiePath;
+      }
+    }
+  }
+  const homeDir = homedir();
+  const sandboxedPath = path.join(
+    homeDir,
+    "Library",
+    "Containers",
+    "com.apple.Safari",
+    "Data",
+    "Library",
+    "Cookies",
+    "Cookies.binarycookies"
+  );
+  if (existsSync(sandboxedPath)) {
+    return sandboxedPath;
+  }
+  const traditionalPath = path.join(homeDir, "Library", "Cookies", "Cookies.binarycookies");
+  if (existsSync(traditionalPath)) {
+    return traditionalPath;
+  }
+  return null;
+}
+
+export {
+  getCookiesFromSafari
+};
+//# sourceMappingURL=chunk-A3YGBITD.js.map

package/dist/chunk-A3YGBITD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browsers/safariCookie.ts"],"sourcesContent":["import { homedir, tmpdir } from 'os';\nimport { copyFileSync, mkdtempSync, rmSync, existsSync, readFileSync, statSync } from 'fs';\nimport path from 'path';\nimport { GetCookiesOptions, GetCookiesResult, Cookie, GetCookiesFromFileOptions } from '../types';\nimport { normalizeExpiration } from '../common';\n\n/**\n * Safari BinaryCookies file format:\n * - Magic: \"cook\" (4 bytes)\n * - Number of pages: uint32 BE\n * - Page sizes: uint32 BE × numPages\n * - Pages data (concatenated)\n * - Checksum (8 bytes)\n *\n * Each page:\n * - Page header: 0x00000100 (4 bytes LE)\n * - Number of cookies: uint32 LE\n * - Cookie offsets: uint32 LE × numCookies\n * - Page end marker: 0x00000000 (4 bytes)\n * - Cookie records\n *\n * Each cookie record:\n * - Size: uint32 LE\n * - Flags: uint32 LE (bit 0 = secure, bit 2 = httpOnly)\n * - Unknown: 4 bytes\n * - URL offset: uint32 LE (relative to cookie start)\n * - Name offset: uint32 LE (relative to cookie start)\n * - Path offset: uint32 LE (relative to cookie start)\n * - Value offset: uint32 LE (relative to cookie start)\n * - Comment: 8 bytes\n * - Expiry date: float64 LE (CFAbsoluteTime, seconds since 2001-01-01)\n * - Creation date: float64 LE (CFAbsoluteTime)\n */\n\ninterface RawSafariCookie {\n  name: string;\n  value: string;\n  domain: string;\n  path: string;\n  expiry: number;\n  secure: boolean;\n  httpOnly: boolean;\n}\n\nconst BINARY_COOKIES_MAGIC = 'cook';\n\n/**\n * Get cookies from Safari's Cookies.binarycookies file\n * @param options - Options for getting cookies\n * @param origins - List of origins to filter cookies by\n * @param cookieNames - Set of cookie names to filter (null for all)\n * @returns Promise resolving to cookies and warnings\n */\nexport async function getCookiesFromSafari(\n  options: GetCookiesOptions,\n  origins: string[],\n  cookieNames: Set<string> | null\n): Promise<GetCookiesResult> {\n  const warnings: string[] = [];\n\n  if (process.platform !== 'darwin') {\n    warnings.push('Safari cookies are only supported on macOS.');\n    return { cookies: [], warnings };\n  }\n\n  // Parse hosts from origins\n  let hosts: string[];\n  try {\n    hosts = origins.map((origin) => new URL(origin).hostname);\n  } catch (error) {\n    warnings.push(`Invalid URL: ${(error as Error).message}`);\n    return { cookies: [], warnings };\n  }\n\n  const cookieFilePath = resolveSafariCookiePath(options.profile);\n  if (!cookieFilePath) {\n    warnings.push('Could not find Safari cookie file.');\n    return { cookies: [], warnings };\n  }\n\n  // Copy the file to a temp location to avoid lock issues\n  const tmpdirPath = mkdtempSync(path.join(tmpdir(), 'sqlite-cookie-safari-'));\n  const tempFilePath = path.join(tmpdirPath, 'Cookies.binarycookies');\n  try {\n    copyFileSync(cookieFilePath, tempFilePath);\n  } catch (error) {\n    rmSync(tmpdirPath, { recursive: true, force: true });\n    warnings.push(`Failed to copy Safari cookie file: ${(error as Error).message}`);\n    return { cookies: [], warnings };\n  }\n\n  try {\n    const fileBuffer = readFileSync(tempFilePath);\n    const rawCookies = parseBinaryCookies(fileBuffer);\n    const fileOptions: GetCookiesFromFileOptions = {\n      cookieFilePath,\n      profile: options.profile,\n      includeExpired: options.includeExpired,\n    };\n    const cookies = filterAndConvertCookies(rawCookies, fileOptions, hosts, cookieNames);\n\n    rmSync(tmpdirPath, { recursive: true, force: true });\n\n    if (cookies.length === 0 && warnings.length === 0) {\n      warnings.push('No cookies found.');\n    }\n\n    return { cookies, warnings };\n  } catch (error) {\n    rmSync(tmpdirPath, { recursive: true, force: true });\n    warnings.push(`Failed to parse Safari cookie file: ${(error as Error).message}`);\n    return { cookies: [], warnings };\n  }\n}\n\n/**\n * Parse Safari's BinaryCookies file format\n */\nfunction parseBinaryCookies(buffer: Buffer): RawSafariCookie[] {\n  let offset = 0;\n\n  // Validate magic header\n  const magic = buffer.subarray(0, 4).toString('ascii');\n  if (magic !== BINARY_COOKIES_MAGIC) {\n    throw new Error(\n      `Invalid BinaryCookies magic: expected \"${BINARY_COOKIES_MAGIC}\", got \"${magic}\"`\n    );\n  }\n  offset = 4;\n\n  // Number of pages (big-endian)\n  const numPages = buffer.readUInt32BE(offset);\n  offset += 4;\n\n  // Page sizes (big-endian)\n  const pageSizes: number[] = [];\n  for (let i = 0; i < numPages; i++) {\n    pageSizes.push(buffer.readUInt32BE(offset));\n    offset += 4;\n  }\n\n  // Parse each page\n  const cookies: RawSafariCookie[] = [];\n  for (let i = 0; i < numPages; i++) {\n    const pageStart = offset;\n    const pageBuffer = buffer.subarray(pageStart, pageStart + pageSizes[i]);\n    const pageCookies = parsePage(pageBuffer);\n    cookies.push(...pageCookies);\n    offset += pageSizes[i];\n  }\n\n  return cookies;\n}\n\n/**\n * Parse a single page of cookies\n */\nfunction parsePage(page: Buffer): RawSafariCookie[] {\n  let offset = 0;\n\n  // Page header (0x00000100, little-endian)\n  // const pageHeader = page.readUInt32LE(offset);\n  offset += 4;\n\n  // Number of cookies in this page\n  const numCookies = page.readUInt32LE(offset);\n  offset += 4;\n\n  // Cookie offsets (relative to page start)\n  const cookieOffsets: number[] = [];\n  for (let i = 0; i < numCookies; i++) {\n    cookieOffsets.push(page.readUInt32LE(offset));\n    offset += 4;\n  }\n\n  // Parse each cookie\n  const cookies: RawSafariCookie[] = [];\n  for (const cookieOffset of cookieOffsets) {\n    try {\n      const cookie = parseCookieRecord(page, cookieOffset);\n      if (cookie) {\n        cookies.push(cookie);\n      }\n    } catch {\n      // Skip malformed cookie records\n    }\n  }\n\n  return cookies;\n}\n\n/**\n * Parse a single cookie record from the page buffer\n */\nfunction parseCookieRecord(page: Buffer, startOffset: number): RawSafariCookie | null {\n  let offset = startOffset;\n\n  // Cookie size\n  // const cookieSize = page.readUInt32LE(offset);\n  offset += 4;\n\n  // Flags (bit 0 = secure, bit 2 = httpOnly)\n  const flags = page.readUInt32LE(offset);\n  offset += 4;\n\n  // Unknown fields (2 × 4 bytes)\n  offset += 8;\n\n  // String offsets (relative to cookie start)\n  const urlOffset = page.readUInt32LE(offset);\n  offset += 4;\n  const nameOffset = page.readUInt32LE(offset);\n  offset += 4;\n  const pathOffset = page.readUInt32LE(offset);\n  offset += 4;\n  const valueOffset = page.readUInt32LE(offset);\n  offset += 4;\n\n  // Comment/unknown (8 bytes, skip)\n  offset += 8;\n\n  // Expiry date (CFAbsoluteTime, float64 LE)\n  const expiry = page.readDoubleLE(offset);\n  offset += 8;\n\n  // Creation date (skip)\n  // offset += 8;\n\n  // Read null-terminated strings\n  const domain = readNullTerminatedString(page, startOffset + urlOffset);\n  const name = readNullTerminatedString(page, startOffset + nameOffset);\n  const cookiePath = readNullTerminatedString(page, startOffset + pathOffset);\n  const value = readNullTerminatedString(page, startOffset + valueOffset);\n\n  const secure = (flags & 0x1) !== 0;\n  const httpOnly = (flags & 0x4) !== 0;\n\n  return {\n    name,\n    value,\n    domain,\n    path: cookiePath,\n    expiry,\n    secure,\n    httpOnly,\n  };\n}\n\n/**\n * Read a null-terminated string from a buffer\n */\nfunction readNullTerminatedString(buffer: Buffer, offset: number): string {\n  if (offset < 0 || offset >= buffer.length) {\n    return '';\n  }\n  const end = buffer.indexOf(0, offset);\n  if (end === -1) {\n    return buffer.subarray(offset).toString('utf8');\n  }\n  return buffer.subarray(offset, end).toString('utf8');\n}\n\n/**\n * Filter raw Safari cookies by host, name, and expiry, then convert to Cookie objects\n */\nfunction filterAndConvertCookies(\n  rawCookies: RawSafariCookie[],\n  options: GetCookiesFromFileOptions,\n  hosts: string[],\n  cookieNames: Set<string> | null\n): Cookie[] {\n  const cookies: Cookie[] = [];\n\n  for (const raw of rawCookies) {\n    // Filter by cookie name\n    if (cookieNames && !cookieNames.has(raw.name)) {\n      continue;\n    }\n\n    // Normalize domain (remove leading dot)\n    const domain = raw.domain.startsWith('.') ? raw.domain.substring(1) : raw.domain;\n    const domainLower = domain.toLowerCase();\n\n    // Check if this cookie matches any of the requested hosts\n    if (\n      !hosts.some((h) => {\n        const hostLower = h.toLowerCase();\n        return hostLower === domainLower || hostLower.endsWith(`.${domainLower}`);\n      })\n    ) {\n      continue;\n    }\n\n    // Convert expiry (CFAbsoluteTime -> JS milliseconds)\n    const expires = normalizeExpiration(raw.expiry, 'safari');\n\n    // Filter expired cookies\n    if (!options.includeExpired && expires && expires < Date.now()) {\n      continue;\n    }\n\n    const cookie: Cookie = {\n      name: raw.name,\n      value: raw.value,\n      domain,\n      path: raw.path || '/',\n      expires,\n      secure: raw.secure,\n      httpOnly: raw.httpOnly,\n      source: {\n        browser: 'safari',\n        cookieFilePath: options.cookieFilePath,\n      },\n    };\n\n    cookies.push(cookie);\n  }\n\n  return cookies;\n}\n\n/**\n * Resolve the path to Safari's Cookies.binarycookies file\n *\n * Safari cookie file locations on macOS:\n * - ~/Library/Cookies/Cookies.binarycookies (traditional)\n * - ~/Library/Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies (sandboxed)\n */\nfunction resolveSafariCookiePath(profile?: string): string | null {\n  profile = profile?.trim();\n  // If profile is a direct file path\n  if (profile) {\n    const stat = statSync(profile, { throwIfNoEntry: false });\n    if (stat && stat.isFile()) {\n      return profile;\n    }\n    // Could be a directory containing the cookie file\n    if (stat && stat.isDirectory()) {\n      const cookiePath = path.join(profile, 'Cookies.binarycookies');\n      if (existsSync(cookiePath)) {\n        return cookiePath;\n      }\n    }\n  }\n\n  const homeDir = homedir();\n\n  // Try sandboxed location first (newer macOS)\n  const sandboxedPath = path.join(\n    homeDir,\n    'Library',\n    'Containers',\n    'com.apple.Safari',\n    'Data',\n    'Library',\n    'Cookies',\n    'Cookies.binarycookies'\n  );\n  if (existsSync(sandboxedPath)) {\n    return sandboxedPath;\n  }\n\n  // Traditional location\n  const traditionalPath = path.join(homeDir, 'Library', 'Cookies', 'Cookies.binarycookies');\n  if (existsSync(traditionalPath)) {\n    return traditionalPath;\n  }\n\n  return null;\n}\n"],"mappings":";;;;;AAAA,SAAS,SAAS,cAAc;AAChC,SAAS,cAAc,aAAa,QAAQ,YAAY,cAAc,gBAAgB;AACtF,OAAO,UAAU;AA0CjB,IAAM,uBAAuB;AAS7B,eAAsB,qBACpB,SACA,SACA,aAC2B;AAC3B,QAAM,WAAqB,CAAC;AAE5B,MAAI,QAAQ,aAAa,UAAU;AACjC,aAAS,KAAK,6CAA6C;AAC3D,WAAO,EAAE,SAAS,CAAC,GAAG,SAAS;AAAA,EACjC;AAGA,MAAI;AACJ,MAAI;AACF,YAAQ,QAAQ,IAAI,CAAC,WAAW,IAAI,IAAI,MAAM,EAAE,QAAQ;AAAA,EAC1D,SAAS,OAAO;AACd,aAAS,KAAK,gBAAiB,MAAgB,OAAO,EAAE;AACxD,WAAO,EAAE,SAAS,CAAC,GAAG,SAAS;AAAA,EACjC;AAEA,QAAM,iBAAiB,wBAAwB,QAAQ,OAAO;AAC9D,MAAI,CAAC,gBAAgB;AACnB,aAAS,KAAK,oCAAoC;AAClD,WAAO,EAAE,SAAS,CAAC,GAAG,SAAS;AAAA,EACjC;AAGA,QAAM,aAAa,YAAY,KAAK,KAAK,OAAO,GAAG,uBAAuB,CAAC;AAC3E,QAAM,eAAe,KAAK,KAAK,YAAY,uBAAuB;AAClE,MAAI;AACF,iBAAa,gBAAgB,YAAY;AAAA,EAC3C,SAAS,OAAO;AACd,WAAO,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACnD,aAAS,KAAK,sCAAuC,MAAgB,OAAO,EAAE;AAC9E,WAAO,EAAE,SAAS,CAAC,GAAG,SAAS;AAAA,EACjC;AAEA,MAAI;AACF,UAAM,aAAa,aAAa,YAAY;AAC5C,UAAM,aAAa,mBAAmB,UAAU;AAChD,UAAM,cAAyC;AAAA,MAC7C;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB,gBAAgB,QAAQ;AAAA,IAC1B;AACA,UAAM,UAAU,wBAAwB,YAAY,aAAa,OAAO,WAAW;AAEnF,WAAO,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAEnD,QAAI,QAAQ,WAAW,KAAK,SAAS,WAAW,GAAG;AACjD,eAAS,KAAK,mBAAmB;AAAA,IACnC;AAEA,WAAO,EAAE,SAAS,SAAS;AAAA,EAC7B,SAAS,OAAO;AACd,WAAO,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACnD,aAAS,KAAK,uCAAwC,MAAgB,OAAO,EAAE;AAC/E,WAAO,EAAE,SAAS,CAAC,GAAG,SAAS;AAAA,EACjC;AACF;AAKA,SAAS,mBAAmB,QAAmC;AAC7D,MAAI,SAAS;AAGb,QAAM,QAAQ,OAAO,SAAS,GAAG,CAAC,EAAE,SAAS,OAAO;AACpD,MAAI,UAAU,sBAAsB;AAClC,UAAM,IAAI;AAAA,MACR,0CAA0C,oBAAoB,WAAW,KAAK;AAAA,IAChF;AAAA,EACF;AACA,WAAS;AAGT,QAAM,WAAW,OAAO,aAAa,MAAM;AAC3C,YAAU;AAGV,QAAM,YAAsB,CAAC;AAC7B,WAAS,IAAI,GAAG,IAAI,UAAU,KAAK;AACjC,cAAU,KAAK,OAAO,aAAa,MAAM,CAAC;AAC1C,cAAU;AAAA,EACZ;AAGA,QAAM,UAA6B,CAAC;AACpC,WAAS,IAAI,GAAG,IAAI,UAAU,KAAK;AACjC,UAAM,YAAY;AAClB,UAAM,aAAa,OAAO,SAAS,WAAW,YAAY,UAAU,CAAC,CAAC;AACtE,UAAM,cAAc,UAAU,UAAU;AACxC,YAAQ,KAAK,GAAG,WAAW;AAC3B,cAAU,UAAU,CAAC;AAAA,EACvB;AAEA,SAAO;AACT;AAKA,SAAS,UAAU,MAAiC;AAClD,MAAI,SAAS;AAIb,YAAU;AAGV,QAAM,aAAa,KAAK,aAAa,MAAM;AAC3C,YAAU;AAGV,QAAM,gBAA0B,CAAC;AACjC,WAAS,IAAI,GAAG,IAAI,YAAY,KAAK;AACnC,kBAAc,KAAK,KAAK,aAAa,MAAM,CAAC;AAC5C,cAAU;AAAA,EACZ;AAGA,QAAM,UAA6B,CAAC;AACpC,aAAW,gBAAgB,eAAe;AACxC,QAAI;AACF,YAAM,SAAS,kBAAkB,MAAM,YAAY;AACnD,UAAI,QAAQ;AACV,gBAAQ,KAAK,MAAM;AAAA,MACrB;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,kBAAkB,MAAc,aAA6C;AACpF,MAAI,SAAS;AAIb,YAAU;AAGV,QAAM,QAAQ,KAAK,aAAa,MAAM;AACtC,YAAU;AAGV,YAAU;AAGV,QAAM,YAAY,KAAK,aAAa,MAAM;AAC1C,YAAU;AACV,QAAM,aAAa,KAAK,aAAa,MAAM;AAC3C,YAAU;AACV,QAAM,aAAa,KAAK,aAAa,MAAM;AAC3C,YAAU;AACV,QAAM,cAAc,KAAK,aAAa,MAAM;AAC5C,YAAU;AAGV,YAAU;AAGV,QAAM,SAAS,KAAK,aAAa,MAAM;AACvC,YAAU;AAMV,QAAM,SAAS,yBAAyB,MAAM,cAAc,SAAS;AACrE,QAAM,OAAO,yBAAyB,MAAM,cAAc,UAAU;AACpE,QAAM,aAAa,yBAAyB,MAAM,cAAc,UAAU;AAC1E,QAAM,QAAQ,yBAAyB,MAAM,cAAc,WAAW;AAEtE,QAAM,UAAU,QAAQ,OAAS;AACjC,QAAM,YAAY,QAAQ,OAAS;AAEnC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKA,SAAS,yBAAyB,QAAgB,QAAwB;AACxE,MAAI,SAAS,KAAK,UAAU,OAAO,QAAQ;AACzC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,OAAO,QAAQ,GAAG,MAAM;AACpC,MAAI,QAAQ,IAAI;AACd,WAAO,OAAO,SAAS,MAAM,EAAE,SAAS,MAAM;AAAA,EAChD;AACA,SAAO,OAAO,SAAS,QAAQ,GAAG,EAAE,SAAS,MAAM;AACrD;AAKA,SAAS,wBACP,YACA,SACA,OACA,aACU;AACV,QAAM,UAAoB,CAAC;AAE3B,aAAW,OAAO,YAAY;AAE5B,QAAI,eAAe,CAAC,YAAY,IAAI,IAAI,IAAI,GAAG;AAC7C;AAAA,IACF;AAGA,UAAM,SAAS,IAAI,OAAO,WAAW,GAAG,IAAI,IAAI,OAAO,UAAU,CAAC,IAAI,IAAI;AAC1E,UAAM,cAAc,OAAO,YAAY;AAGvC,QACE,CAAC,MAAM,KAAK,CAAC,MAAM;AACjB,YAAM,YAAY,EAAE,YAAY;AAChC,aAAO,cAAc,eAAe,UAAU,SAAS,IAAI,WAAW,EAAE;AAAA,IAC1E,CAAC,GACD;AACA;AAAA,IACF;AAGA,UAAM,UAAU,oBAAoB,IAAI,QAAQ,QAAQ;AAGxD,QAAI,CAAC,QAAQ,kBAAkB,WAAW,UAAU,KAAK,IAAI,GAAG;AAC9D;AAAA,IACF;AAEA,UAAM,SAAiB;AAAA,MACrB,MAAM,IAAI;AAAA,MACV,OAAO,IAAI;AAAA,MACX;AAAA,MACA,MAAM,IAAI,QAAQ;AAAA,MAClB;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ,UAAU,IAAI;AAAA,MACd,QAAQ;AAAA,QACN,SAAS;AAAA,QACT,gBAAgB,QAAQ;AAAA,MAC1B;AAAA,IACF;AAEA,YAAQ,KAAK,MAAM;AAAA,EACrB;AAEA,SAAO;AACT;AASA,SAAS,wBAAwB,SAAiC;AAChE,YAAU,SAAS,KAAK;AAExB,MAAI,SAAS;AACX,UAAM,OAAO,SAAS,SAAS,EAAE,gBAAgB,MAAM,CAAC;AACxD,QAAI,QAAQ,KAAK,OAAO,GAAG;AACzB,aAAO;AAAA,IACT;AAEA,QAAI,QAAQ,KAAK,YAAY,GAAG;AAC9B,YAAM,aAAa,KAAK,KAAK,SAAS,uBAAuB;AAC7D,UAAI,WAAW,UAAU,GAAG;AAC1B,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ;AAGxB,QAAM,gBAAgB,KAAK;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,WAAW,aAAa,GAAG;AAC7B,WAAO;AAAA,EACT;AAGA,QAAM,kBAAkB,KAAK,KAAK,SAAS,WAAW,WAAW,uBAAuB;AACxF,MAAI,WAAW,eAAe,GAAG;AAC/B,WAAO;AAAA,EACT;AAEA,SAAO;AACT;","names":[]}

package/dist/chunk-AR5Q6KM4.js

@@ -0,0 +1,37 @@
+import {
+  executeProcess
+} from "./chunk-LTLRZZW3.js";
+
+// src/util/windowsDpapi.ts
+async function decryptWindowsDpapi(encryptedBytes, timeoutMs = 5e3) {
+  const base64Input = encryptedBytes.toString("base64");
+  const script = [
+    "Add-Type -AssemblyName System.Security",
+    `$bytes = [Convert]::FromBase64String("${base64Input}")`,
+    "$decrypted = [System.Security.Cryptography.ProtectedData]::Unprotect($bytes, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)",
+    "[Convert]::ToBase64String($decrypted)"
+  ].join("; ");
+  const result = await executeProcess(
+    "powershell.exe",
+    ["-NoProfile", "-NonInteractive", "-Command", script],
+    timeoutMs
+  );
+  if (result.code !== 0) {
+    return { success: false, error: result.stderr.trim() || `powershell exit ${result.code}` };
+  }
+  const output = result.stdout.trim();
+  if (!output) {
+    return { success: false, error: "DPAPI decryption returned empty result" };
+  }
+  try {
+    const decrypted = Buffer.from(output, "base64");
+    return { success: true, decrypted };
+  } catch (error) {
+    return { success: false, error: `Failed to decode DPAPI result: ${error.message}` };
+  }
+}
+
+export {
+  decryptWindowsDpapi
+};
+//# sourceMappingURL=chunk-AR5Q6KM4.js.map