ysk-server-core 1.0.0

package/dist/host-browse/downloads.js

@@ -0,0 +1,61 @@
+/**
+ * Host-browse download records (server-side only; operator fetches via API).
+ */
+import { randomBytes } from 'node:crypto';
+import { mkdirSync, existsSync, unlinkSync, statSync } from 'node:fs';
+import { join, basename } from 'node:path';
+export function toPublicDownload(d) {
+    return {
+        id: d.id,
+        sessionId: d.sessionId,
+        filename: d.filename,
+        sourceUrl: d.sourceUrl,
+        mime: d.mime,
+        size: d.size,
+        status: d.status,
+        reason: d.reason,
+        createdAt: d.createdAt,
+        finishedAt: d.finishedAt,
+        hasFile: d.status === 'completed' && !!d.absPath && existsSync(d.absPath),
+    };
+}
+export function safeFilename(name) {
+    const base = basename(name || 'download').replace(/[^\w.\-()+@ ]+/g, '_');
+    const trimmed = base.slice(0, 180) || 'download';
+    return trimmed;
+}
+export function downloadDir(dataDir, userId, sessionId) {
+    return join(dataDir, 'host-browse', 'downloads', userId, sessionId);
+}
+export function ensureDownloadDir(dataDir, userId, sessionId) {
+    const dir = downloadDir(dataDir, userId, sessionId);
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+export function newDownloadId() {
+    return randomBytes(8).toString('hex');
+}
+export function absPathFor(dataDir, userId, sessionId, downloadId, filename) {
+    const dir = join(downloadDir(dataDir, userId, sessionId), downloadId);
+    mkdirSync(dir, { recursive: true });
+    return join(dir, safeFilename(filename));
+}
+export function fileSize(path) {
+    try {
+        return statSync(path).size;
+    }
+    catch {
+        return 0;
+    }
+}
+export function tryUnlink(path) {
+    if (!path)
+        return;
+    try {
+        unlinkSync(path);
+    }
+    catch {
+        /* */
+    }
+}
+//# sourceMappingURL=downloads.js.map

package/dist/host-browse/downloads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloads.js","sourceRoot":"","sources":["../../src/host-browse/downloads.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAwB3C,MAAM,UAAU,gBAAgB,CAAC,CAAiB;IAChD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,MAAc,EACd,SAAiB;IAEjB,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,MAAc,EACd,SAAiB;IAEjB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,MAAc,EACd,SAAiB,EACjB,UAAkB,EAClB,QAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACtE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAA+B;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;AACH,CAAC"}

package/dist/host-browse/ephemeral-user.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Ephemeral Linux users for host-browse Chromium isolation.
+ * Requires HostExecutor with root + YSK_EXECUTE.
+ */
+import type { HostExecutor } from '../host/executor.js';
+export type EphemeralBrowseUser = {
+    username: string;
+    homeDir: string;
+    createdAt: string;
+};
+export declare function planBrowseUsername(panelUserId: string, sessionId: string): string;
+/**
+ * Create a nologin user with home under dataDir (not /home pollution when possible).
+ */
+export declare function createEphemeralBrowseUser(input: {
+    host: HostExecutor;
+    dataDir: string;
+    panelUserId: string;
+    sessionId: string;
+}): Promise<{
+    ok: true;
+    user: EphemeralBrowseUser;
+    notes: string[];
+} | {
+    ok: false;
+    blocked?: boolean;
+    notes: string[];
+    requiresExecute?: boolean;
+    requiresRoot?: boolean;
+}>;
+export declare function destroyEphemeralBrowseUser(input: {
+    host: HostExecutor;
+    username: string;
+    homeDir?: string;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+}>;
+//# sourceMappingURL=ephemeral-user.d.ts.map

package/dist/host-browse/ephemeral-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeral-user.d.ts","sourceRoot":"","sources":["../../src/host-browse/ephemeral-user.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAMF,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAMjF;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CACP;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACxD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,CACvG,CA2DA;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAmC5C"}

package/dist/host-browse/ephemeral-user.js

@@ -0,0 +1,100 @@
+/**
+ * Ephemeral Linux users for host-browse Chromium isolation.
+ * Requires HostExecutor with root + YSK_EXECUTE.
+ */
+import { randomBytes } from 'node:crypto';
+import { join } from 'node:path';
+function shortId(s) {
+    return s.replace(/[^a-zA-Z0-9]/g, '').slice(0, 8).toLowerCase() || 'x';
+}
+export function planBrowseUsername(panelUserId, sessionId) {
+    // Linux username max 32; keep deterministic prefix for cleanup greps
+    const a = shortId(panelUserId).slice(0, 6);
+    const b = shortId(sessionId).slice(0, 8);
+    const r = randomBytes(2).toString('hex');
+    return `yskb_${a}_${b}_${r}`.slice(0, 32);
+}
+/**
+ * Create a nologin user with home under dataDir (not /home pollution when possible).
+ */
+export async function createEphemeralBrowseUser(input) {
+    const notes = [];
+    if (!input.host.executeEnabled() || !input.host.isRoot()) {
+        return {
+            ok: false,
+            blocked: true,
+            requiresExecute: !input.host.executeEnabled(),
+            requiresRoot: !input.host.isRoot(),
+            notes: [
+                'Ephemeral browse user requires root and YSK_EXECUTE=1',
+            ],
+        };
+    }
+    const username = planBrowseUsername(input.panelUserId, input.sessionId);
+    const homeBase = join(input.dataDir, 'host-browse', 'homes');
+    const homeDir = join(homeBase, username);
+    // Ensure base dir
+    await input.host.runCommand(['mkdir', '-p', homeBase], { timeoutMs: 10_000 });
+    // useradd -M (no /home default) then create home under dataDir
+    const add = await input.host.runCommand([
+        'useradd',
+        '-M',
+        '-s',
+        '/usr/sbin/nologin',
+        '-d',
+        homeDir,
+        username,
+    ], { timeoutMs: 30_000 });
+    if (add.exitCode !== 0) {
+        notes.push((add.stderr || add.stdout || 'useradd failed').slice(0, 300));
+        return { ok: false, notes };
+    }
+    const mk = await input.host.runCommand(['bash', '-c', `mkdir -p ${JSON.stringify(homeDir)} && chown ${username}:${username} ${JSON.stringify(homeDir)} && chmod 700 ${JSON.stringify(homeDir)}`], { timeoutMs: 15_000 });
+    if (mk.exitCode !== 0) {
+        notes.push((mk.stderr || 'mkdir home failed').slice(0, 200));
+        await destroyEphemeralBrowseUser({ host: input.host, username, homeDir });
+        return { ok: false, notes };
+    }
+    notes.push(`created ${username}`);
+    return {
+        ok: true,
+        user: {
+            username,
+            homeDir,
+            createdAt: new Date().toISOString(),
+        },
+        notes,
+    };
+}
+export async function destroyEphemeralBrowseUser(input) {
+    const notes = [];
+    if (!input.host.executeEnabled() || !input.host.isRoot()) {
+        return {
+            ok: false,
+            notes: ['destroy requires root + YSK_EXECUTE'],
+        };
+    }
+    const u = input.username;
+    if (!u.startsWith('yskb_')) {
+        return { ok: false, notes: ['refusing to delete non-yskb_ user'] };
+    }
+    // Kill all processes for user
+    await input.host.runCommand(['bash', '-c', `pkill -9 -u ${JSON.stringify(u)} || true`], {
+        timeoutMs: 15_000,
+    });
+    await new Promise((r) => setTimeout(r, 300));
+    const del = await input.host.runCommand(['userdel', '-r', u], { timeoutMs: 30_000 });
+    if (del.exitCode !== 0) {
+        notes.push((del.stderr || del.stdout || 'userdel failed').slice(0, 300));
+        // try remove home manually
+        if (input.homeDir) {
+            await input.host.runCommand(['bash', '-c', `rm -rf ${JSON.stringify(input.homeDir)}`], { timeoutMs: 30_000 });
+        }
+        // userdel without -r
+        await input.host.runCommand(['userdel', u], { timeoutMs: 15_000 });
+        return { ok: false, notes };
+    }
+    notes.push(`removed ${u}`);
+    return { ok: true, notes };
+}
+//# sourceMappingURL=ephemeral-user.js.map

package/dist/host-browse/ephemeral-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeral-user.js","sourceRoot":"","sources":["../../src/host-browse/ephemeral-user.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,SAAiB;IACvE,qEAAqE;IACrE,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IAIC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE;YAC7C,YAAY,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;YAClC,KAAK,EAAE;gBACL,uDAAuD;aACxD;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEzC,kBAAkB;IAClB,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAE9E,+DAA+D;IAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACrC;QACE,SAAS;QACT,IAAI;QACJ,IAAI;QACJ,mBAAmB;QACnB,IAAI;QACJ,OAAO;QACP,QAAQ;KACT,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EACzJ,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;IAClC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,QAAQ;YACR,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,qCAAqC,CAAC;SAC/C,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,mCAAmC,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;QACtF,SAAS,EAAE,MAAM;KAClB,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,2BAA2B;QAC3B,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EACzD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QACJ,CAAC;QACD,qBAAqB;QACrB,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/host-browse/headers.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Outbound header allowlist — never forward operator browser identity.
+ */
+export declare function isForbiddenOutboundHeader(name: string): boolean;
+/**
+ * Build clean egress headers. Only server-controlled values + optional jar cookie / body type.
+ */
+export declare function buildOutboundHeaders(opts: {
+    userAgent?: string;
+    acceptLanguage?: string;
+    cookie?: string;
+    contentType?: string;
+    referer?: string | null;
+    extraSafe?: Record<string, string>;
+}): Record<string, string>;
+/** Response headers safe to expose to the panel (not Set-Cookie values). */
+export declare function filterResponseMetaHeaders(headers: Headers | Record<string, string | string[] | undefined>): Record<string, string>;
+//# sourceMappingURL=headers.d.ts.map

package/dist/host-browse/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/host-browse/headers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkCH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI/D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BzB;AAED,4EAA4E;AAC5E,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAC/D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBxB"}

package/dist/host-browse/headers.js

@@ -0,0 +1,93 @@
+/**
+ * Outbound header allowlist — never forward operator browser identity.
+ */
+import { HOST_BROWSE_ACCEPT, HOST_BROWSE_ACCEPT_LANGUAGE, HOST_BROWSE_DEFAULT_UA, } from './types.js';
+/** Headers that must never leave the control plane toward a browse target. */
+const FORBIDDEN_PREFIXES = [
+    'sec-ch-',
+    'sec-fetch-',
+    'x-forwarded-',
+    'x-real-',
+    'x-ysk-',
+    'proxy-',
+];
+const FORBIDDEN_EXACT = new Set([
+    'authorization',
+    'cookie',
+    'set-cookie',
+    'forwarded',
+    'true-client-ip',
+    'cf-connecting-ip',
+    'x-api-key',
+    'origin',
+    'referer',
+    'user-agent',
+    'x-request-id',
+    'traceparent',
+    'tracestate',
+]);
+export function isForbiddenOutboundHeader(name) {
+    const n = name.toLowerCase();
+    if (FORBIDDEN_EXACT.has(n))
+        return true;
+    return FORBIDDEN_PREFIXES.some((p) => n.startsWith(p));
+}
+/**
+ * Build clean egress headers. Only server-controlled values + optional jar cookie / body type.
+ */
+export function buildOutboundHeaders(opts) {
+    const headers = {
+        'User-Agent': opts.userAgent ?? HOST_BROWSE_DEFAULT_UA,
+        Accept: HOST_BROWSE_ACCEPT,
+        'Accept-Language': opts.acceptLanguage ?? HOST_BROWSE_ACCEPT_LANGUAGE,
+        'Accept-Encoding': 'gzip, deflate, br',
+        // Do not send panel Origin; omit client hints entirely
+    };
+    if (opts.cookie) {
+        headers.Cookie = opts.cookie;
+    }
+    if (opts.contentType) {
+        headers['Content-Type'] = opts.contentType;
+    }
+    // Referer only if same-session previous target URL (never panel origin)
+    if (opts.referer && /^https?:\/\//i.test(opts.referer)) {
+        headers.Referer = opts.referer;
+    }
+    if (opts.extraSafe) {
+        for (const [k, v] of Object.entries(opts.extraSafe)) {
+            if (!isForbiddenOutboundHeader(k) && v) {
+                headers[k] = v;
+            }
+        }
+    }
+    return headers;
+}
+/** Response headers safe to expose to the panel (not Set-Cookie values). */
+export function filterResponseMetaHeaders(headers) {
+    const out = {};
+    const allow = new Set([
+        'content-type',
+        'content-length',
+        'content-language',
+        'cache-control',
+        'last-modified',
+        'etag',
+        'location',
+    ]);
+    const getAll = (name) => {
+        if (headers instanceof Headers) {
+            return headers.get(name);
+        }
+        const v = headers[name] ?? headers[name.toLowerCase()];
+        if (v == null)
+            return null;
+        return Array.isArray(v) ? v.join(', ') : String(v);
+    };
+    for (const name of allow) {
+        const v = getAll(name);
+        if (v)
+            out[name] = v;
+    }
+    return out;
+}
+//# sourceMappingURL=headers.js.map

package/dist/host-browse/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../src/host-browse/headers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG;IACzB,SAAS;IACT,YAAY;IACZ,cAAc;IACd,SAAS;IACT,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,gBAAgB;IAChB,kBAAkB;IAClB,WAAW;IACX,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,cAAc;IACd,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAOpC;IACC,MAAM,OAAO,GAA2B;QACtC,YAAY,EAAE,IAAI,CAAC,SAAS,IAAI,sBAAsB;QACtD,MAAM,EAAE,kBAAkB;QAC1B,iBAAiB,EAAE,IAAI,CAAC,cAAc,IAAI,2BAA2B;QACrE,iBAAiB,EAAE,mBAAmB;QACtC,uDAAuD;KACxD,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAC7C,CAAC;IACD,wEAAwE;IACxE,IAAI,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,yBAAyB,CACvC,OAAgE;IAEhE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;QACpB,cAAc;QACd,gBAAgB;QAChB,kBAAkB;QAClB,eAAe;QACf,eAAe;QACf,MAAM;QACN,UAAU;KACX,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,IAAY,EAAiB,EAAE;QAC7C,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/host-browse/index.d.ts

@@ -0,0 +1,18 @@
+export * from './types.js';
+export * from './ssrf.js';
+export * from './headers.js';
+export * from './cookie-jar.js';
+export * from './rewrite-html.js';
+export * from './session-store.js';
+export * from './service.js';
+export * from './chrome-probe.js';
+export * from './browser-engine.js';
+export * from './live-ticket.js';
+export * from './stream-presets.js';
+export * from './bookmarks.js';
+export * from './ephemeral-user.js';
+export * from './danger.js';
+export * from './chrome-as-user.js';
+export * from './downloads.js';
+export * from './audio-bridge.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/host-browse/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host-browse/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC"}

package/dist/host-browse/index.js

@@ -0,0 +1,18 @@
+export * from './types.js';
+export * from './ssrf.js';
+export * from './headers.js';
+export * from './cookie-jar.js';
+export * from './rewrite-html.js';
+export * from './session-store.js';
+export * from './service.js';
+export * from './chrome-probe.js';
+export * from './browser-engine.js';
+export * from './live-ticket.js';
+export * from './stream-presets.js';
+export * from './bookmarks.js';
+export * from './ephemeral-user.js';
+export * from './danger.js';
+export * from './chrome-as-user.js';
+export * from './downloads.js';
+export * from './audio-bridge.js';
+//# sourceMappingURL=index.js.map

package/dist/host-browse/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host-browse/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC"}

package/dist/host-browse/live-ticket.d.ts

@@ -0,0 +1,19 @@
+/**
+ * One-time tickets for host-browse live WebSocket (browser engine screencast).
+ */
+export type HostBrowseLiveTicket = {
+    ticket: string;
+    sessionId: string;
+    userId: string;
+    expiresAt: number;
+};
+export type HostBrowseLiveTicketStore = {
+    issue: (input: {
+        sessionId: string;
+        userId: string;
+        ttlMs?: number;
+    }) => HostBrowseLiveTicket;
+    consume: (ticket: string) => HostBrowseLiveTicket | null;
+};
+export declare function createHostBrowseLiveTicketStore(): HostBrowseLiveTicketStore;
+//# sourceMappingURL=live-ticket.d.ts.map

package/dist/host-browse/live-ticket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-ticket.d.ts","sourceRoot":"","sources":["../../src/host-browse/live-ticket.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,EAAE,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,oBAAoB,CAAC;IAC3B,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,oBAAoB,GAAG,IAAI,CAAC;CAC1D,CAAC;AAEF,wBAAgB,+BAA+B,IAAI,yBAAyB,CAgC3E"}

package/dist/host-browse/live-ticket.js

@@ -0,0 +1,39 @@
+/**
+ * One-time tickets for host-browse live WebSocket (browser engine screencast).
+ */
+import { randomBytes } from 'node:crypto';
+export function createHostBrowseLiveTicketStore() {
+    const map = new Map();
+    const purge = () => {
+        const now = Date.now();
+        for (const [k, v] of map) {
+            if (v.expiresAt <= now)
+                map.delete(k);
+        }
+    };
+    return {
+        issue(input) {
+            purge();
+            const ticket = randomBytes(24).toString('base64url');
+            const rec = {
+                ticket,
+                sessionId: input.sessionId,
+                userId: input.userId,
+                expiresAt: Date.now() + (input.ttlMs ?? 60_000),
+            };
+            map.set(ticket, rec);
+            return rec;
+        },
+        consume(ticket) {
+            purge();
+            const rec = map.get(ticket);
+            if (!rec)
+                return null;
+            map.delete(ticket);
+            if (rec.expiresAt <= Date.now())
+                return null;
+            return rec;
+        },
+    };
+}
+//# sourceMappingURL=live-ticket.js.map

package/dist/host-browse/live-ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-ticket.js","sourceRoot":"","sources":["../../src/host-browse/live-ticket.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAkB1C,MAAM,UAAU,+BAA+B;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEpD,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;gBAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,KAAK;YACT,KAAK,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrD,MAAM,GAAG,GAAyB;gBAChC,MAAM;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC;aAChD,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrB,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,MAAM;YACZ,KAAK,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnB,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC7C,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/host-browse/rewrite-html.d.ts

@@ -0,0 +1,22 @@
+/**
+ * HTML rewrite so navigations and subresources go through host-browse proxy.
+ * Forms POST → formUrl (contentToken auth); GET resources → proxyUrl.
+ */
+export type RewriteHtmlOpts = {
+    pageUrl: string;
+    /** GET content/asset proxy */
+    proxyUrl: (absoluteTarget: string) => string;
+    /** POST form endpoint (contentToken) */
+    formUrl?: (absoluteTarget: string) => string;
+};
+/**
+ * Rewrite HTML attributes + forms. Strips meta CSP that blocks proxy assets.
+ */
+export declare function rewriteHtml(html: string, opts: RewriteHtmlOpts): {
+    html: string;
+    warnings: string[];
+};
+export declare function extractTitle(html: string): string | undefined;
+/** CSS url() + @import rewrite. */
+export declare function rewriteCss(css: string, opts: RewriteHtmlOpts): string;
+//# sourceMappingURL=rewrite-html.d.ts.map

package/dist/host-browse/rewrite-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite-html.d.ts","sourceRoot":"","sources":["../../src/host-browse/rewrite-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,QAAQ,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,MAAM,CAAC;IAC7C,wCAAwC;IACxC,OAAO,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C,CAAC;AA2FF;;GAEG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,eAAe,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAyCtC;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK7D;AAED,mCAAmC;AACnC,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,MAAM,CAerE"}

package/dist/host-browse/rewrite-html.js

@@ -0,0 +1,134 @@
+/**
+ * HTML rewrite so navigations and subresources go through host-browse proxy.
+ * Forms POST → formUrl (contentToken auth); GET resources → proxyUrl.
+ */
+const SKIP_SCHEMES = /^(javascript:|data:|mailto:|tel:|blob:|#)/i;
+function resolveUrl(base, href) {
+    const h = href.trim();
+    if (!h || SKIP_SCHEMES.test(h))
+        return null;
+    try {
+        return new URL(h, base).href;
+    }
+    catch {
+        return null;
+    }
+}
+function rewriteAttr(html, attr, pageUrl, proxyUrl) {
+    const re = new RegExp(`(\\s${attr}\\s*=\\s*)(["'])([^"']*)(["'])`, 'gi');
+    return html.replace(re, (full, pre, q1, val, q2) => {
+        const abs = resolveUrl(pageUrl, val);
+        if (!abs)
+            return full;
+        return `${pre}${q1}${proxyUrl(abs)}${q2}`;
+    });
+}
+function rewriteSrcset(html, pageUrl, proxyUrl) {
+    const re = /(\ssrcset\s*=\s*)(["'])([^"']*)(["'])/gi;
+    return html.replace(re, (_full, pre, q1, val, q2) => {
+        const parts = String(val)
+            .split(',')
+            .map((p) => p.trim())
+            .filter(Boolean);
+        const out = parts.map((part) => {
+            const bits = part.split(/\s+/);
+            const u = bits[0];
+            const rest = bits.slice(1).join(' ');
+            const abs = resolveUrl(pageUrl, u);
+            if (!abs)
+                return part;
+            return rest ? `${proxyUrl(abs)} ${rest}` : proxyUrl(abs);
+        });
+        return `${pre}${q1}${out.join(', ')}${q2}`;
+    });
+}
+/** Rewrite <form ...> action for GET→content, POST→form endpoint. */
+function rewriteForms(html, pageUrl, proxyUrl, formUrl) {
+    return html.replace(/<form\b([^>]*)>/gi, (_full, attrs) => {
+        const methodM = attrs.match(/\smethod\s*=\s*(["']?)(get|post|put|patch)\1/i);
+        const method = (methodM?.[2] || 'get').toLowerCase();
+        const isPost = method === 'post' || method === 'put' || method === 'patch';
+        let action = pageUrl;
+        const actionM = attrs.match(/\saction\s*=\s*(["'])([^"']*)\1/i);
+        if (actionM) {
+            const abs = resolveUrl(pageUrl, actionM[2]);
+            if (abs)
+                action = abs;
+        }
+        else {
+            // default form action = current page
+            action = pageUrl;
+        }
+        const targetFn = isPost && formUrl ? formUrl : proxyUrl;
+        const proxied = targetFn(action);
+        let next = attrs;
+        if (actionM) {
+            next = next.replace(/\saction\s*=\s*(["'])([^"']*)\1/i, ` action="${proxied}"`);
+        }
+        else {
+            next = `${next} action="${proxied}"`;
+        }
+        // Ensure POST methods stay POST for form endpoint
+        if (isPost && formUrl && !methodM) {
+            next = `${next} method="post"`;
+        }
+        return `<form${next}>`;
+    });
+}
+/**
+ * Rewrite HTML attributes + forms. Strips meta CSP that blocks proxy assets.
+ */
+export function rewriteHtml(html, opts) {
+    const warnings = [];
+    let out = html;
+    const { pageUrl, proxyUrl, formUrl } = opts;
+    // Forms first (action before generic attr rewrite)
+    out = rewriteForms(out, pageUrl, proxyUrl, formUrl);
+    // Note: form action already rewritten — do not re-proxy action= attributes
+    const attrs = ['href', 'src', 'poster', 'data', 'xlink:href'];
+    for (const a of attrs) {
+        out = rewriteAttr(out, a, pageUrl, proxyUrl);
+    }
+    out = rewriteSrcset(out, pageUrl, proxyUrl);
+    out = out.replace(/(<meta\b[^>]*http-equiv\s*=\s*["']?refresh["']?[^>]*content\s*=\s*["'])([^"']*)(["'])/gi, (full, pre, content, post) => {
+        const m = String(content).match(/^(\s*\d+\s*;\s*url\s*=\s*)(.+)$/i);
+        if (!m)
+            return full;
+        const abs = resolveUrl(pageUrl, m[2].trim());
+        if (!abs)
+            return full;
+        return `${pre}${m[1]}${proxyUrl(abs)}${post}`;
+    });
+    const beforeCsp = out;
+    out = out.replace(/<meta\b[^>]*http-equiv\s*=\s*["']?content-security-policy["']?[^>]*>/gi, '');
+    if (out !== beforeCsp)
+        warnings.push('stripped_meta_csp');
+    // @import in style tags
+    out = out.replace(/(<style\b[^>]*>)([\s\S]*?)(<\/style>)/gi, (_f, open, css, close) => `${open}${rewriteCss(css, opts)}${close}`);
+    warnings.push('spa_may_break');
+    return { html: out, warnings };
+}
+export function extractTitle(html) {
+    const m = html.match(/<title[^>]*>([^<]*)<\/title>/i);
+    if (!m)
+        return undefined;
+    const t = m[1].replace(/\s+/g, ' ').trim();
+    return t ? t.slice(0, 200) : undefined;
+}
+/** CSS url() + @import rewrite. */
+export function rewriteCss(css, opts) {
+    let out = css.replace(/url\(\s*(['"]?)([^)'"]+)\1\s*\)/gi, (full, _q, raw) => {
+        const abs = resolveUrl(opts.pageUrl, String(raw).trim());
+        if (!abs)
+            return full;
+        return `url(${opts.proxyUrl(abs)})`;
+    });
+    out = out.replace(/@import\s+(?:url\(\s*)?(['"]?)([^'")\s]+)\1\s*\)?/gi, (full, _q, raw) => {
+        const abs = resolveUrl(opts.pageUrl, String(raw).trim());
+        if (!abs)
+            return full;
+        return `@import url(${opts.proxyUrl(abs)})`;
+    });
+    return out;
+}
+//# sourceMappingURL=rewrite-html.js.map

package/dist/host-browse/rewrite-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite-html.js","sourceRoot":"","sources":["../../src/host-browse/rewrite-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAUlE,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,IAAY,EACZ,OAAe,EACf,QAAiC;IAEjC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,IAAI,gCAAgC,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,GAAG,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,OAAe,EACf,QAAiC;IAEjC,MAAM,EAAE,GAAG,yCAAyC,CAAC;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC;aACtB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,SAAS,YAAY,CACnB,IAAY,EACZ,OAAe,EACf,QAAiC,EACjC,OAAiC;IAEjC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAChE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,CAAC;QAE3E,IAAI,MAAM,GAAG,OAAO,CAAC;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAChE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,GAAG;gBAAE,MAAM,GAAG,GAAG,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,qCAAqC;YACrC,MAAM,GAAG,OAAO,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,GAAG,IAAI,CAAC,OAAO,CACjB,kCAAkC,EAClC,YAAY,OAAO,GAAG,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,GAAG,IAAI,YAAY,OAAO,GAAG,CAAC;QACvC,CAAC;QACD,kDAAkD;QAClD,IAAI,MAAM,IAAI,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,GAAG,GAAG,IAAI,gBAAgB,CAAC;QACjC,CAAC;QACD,OAAO,QAAQ,IAAI,GAAG,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,IAAqB;IAErB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAE5C,mDAAmD;IACnD,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEpD,2EAA2E;IAC3E,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE5C,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,yFAAyF,EACzF,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,GAAG,CAAC;IACtB,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,wEAAwE,EACxE,EAAE,CACH,CAAC;IACF,IAAI,GAAG,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAE1D,wBAAwB;IACxB,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,yCAAyC,EACzC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,EAAE,CACpE,CAAC;IAEF,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzC,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAqB;IAC3D,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,mCAAmC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;QAC3E,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,qDAAqD,EACrD,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,eAAe,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,CAAC,CACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}