ytdlp-cookie-keeper 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Bryan Kuang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,184 @@
+# ytdlp-cookie-keeper
+
+Keep your yt-dlp YouTube cookies fresh on a headless server — export from a persistent browser profile, validate against real videos, swap atomically. **Never clobber a working cookie file with a broken one.**
+
+## The problem
+
+Running yt-dlp on a server, you've probably seen this:
+
+```
+ERROR: Sign in to confirm you're not a bot. Use --cookies-from-browser or --cookies ...
+```
+
+So you export cookies from a logged-in browser and pass `--cookies cookies.txt`. It works — until YouTube rotates the session and the file goes stale, usually within days. The obvious fix, re-exporting on a cron with `--cookies-from-browser` pointed at a browser profile on the server, has a nasty failure mode: **the moment the browser session dies, the export silently produces logged-out cookies and overwrites the working file you had.** Playback breaks at the worst possible time and you don't find out until it does.
+
+`ytdlp-cookie-keeper` closes that gap. Every refresh cycle:
+
+1. **Exports** cookies from a persistent browser profile into a temp candidate file (`yt-dlp --cookies-from-browser`).
+2. **Validates** the candidate end-to-end: yt-dlp must successfully extract real watch URLs using *only the candidate*.
+3. **Swaps** the live file in place (same path, same inode, `0600` perms) — only after validation passes.
+
+A candidate that fails export or validation is discarded and your previous cookie file stays untouched. A stale-but-working file beats a fresh-but-broken one.
+
+Extras you'd otherwise reimplement: a cooldown window so error-triggered refreshes can't stampede, in-flight deduplication so concurrent triggers join one refresh, and log/error redaction so cookie values and signed CDN URLs never leak into your logs.
+
+## Requirements
+
+- Node.js ≥ 20 (or [Bun](https://bun.sh))
+- A recent [yt-dlp](https://github.com/yt-dlp/yt-dlp) on PATH (YouTube extraction increasingly needs a JS runtime — install `yt-dlp[default]` via pip, or have Deno/Node available for its challenge solver)
+- A browser installed on the server with a **logged-in YouTube session** in a persistent profile (see [setup](#setting-up-the-persistent-browser-profile))
+
+## CLI
+
+```bash
+npm install -g ytdlp-cookie-keeper   # or: npx ytdlp-cookie-keeper ...
+```
+
+### One-shot refresh (cron-friendly)
+
+```bash
+ytdlp-cookie-keeper refresh \
+  --cookies /srv/secrets/youtube_cookies.txt \
+  --browser chrome+basictext:/srv/youtube-browser-profile
+```
+
+Exit `0` on success, `1` on failure. The `--browser` value is passed straight to yt-dlp's `--cookies-from-browser` — the `+basictext` selects Chrome's plaintext keyring, typical for a dedicated headless-server profile.
+
+### Daemon
+
+```bash
+ytdlp-cookie-keeper daemon \
+  --cookies /srv/secrets/youtube_cookies.txt \
+  --browser chrome+basictext:/srv/youtube-browser-profile \
+  --interval 6h --refresh-on-start
+```
+
+### Freshness check (alerting)
+
+The refresh loop only rewrites the file on success — so if the browser session dies, failures are silent and the file just quietly ages. Alert on that from anywhere (cron, CI, a monitoring box):
+
+```bash
+ytdlp-cookie-keeper check --cookies /srv/secrets/youtube_cookies.txt --max-age 13h
+```
+
+| Exit code | Meaning |
+|---|---|
+| `0` | fresh |
+| `2` | file missing |
+| `3` | stale — refresh loop is failing; the browser profile likely needs a re-login |
+
+A `13h` threshold on a `6h` interval tolerates one missed cycle without flapping.
+
+Durations everywhere accept `90s`, `5m`, `6h`; bare numbers mean seconds.
+
+## Library
+
+```ts
+import { CookieKeeper } from 'ytdlp-cookie-keeper';
+
+const keeper = new CookieKeeper({
+  cookiesFile: '/srv/secrets/youtube_cookies.txt',
+  browserSpec: 'chrome+basictext:/srv/youtube-browser-profile',
+  refreshIntervalMs: 6 * 60 * 60 * 1000,
+});
+
+keeper.on('refresh:success', (e) => metrics.gauge('cookie_last_refresh', e.timestampMs / 1000));
+keeper.on('refresh:failure', (e) => logger.warn('cookie refresh failed', { error: e.error }));
+
+keeper.start(); // background loop
+
+// Or trigger on demand, e.g. when playback hits a 403:
+const result = await keeper.refreshNow({ reason: 'playback-403' });
+```
+
+Concurrent `refreshNow()` calls join the in-flight refresh; calls inside the cooldown window (default 5m) are skipped unless `{ force: true }`. Failure messages are redacted (no URLs, no cookie values) and safe to log.
+
+## Setting up the persistent browser profile
+
+The keeper refreshes cookies from a browser profile; keeping that profile's Google session alive is the part you own. A recipe for a Linux VPS:
+
+```bash
+# 1. Virtual display + Chrome with a dedicated profile dir
+apt install xvfb x11vnc chromium xdotool
+Xvfb :94 -screen 0 1280x800x24 &
+DISPLAY=:94 chromium --user-data-dir=/srv/youtube-browser-profile \
+  --password-store=basic --no-first-run &
+
+# 2. Log in interactively, once, over VNC
+x11vnc -display :94 -localhost -once
+# tunnel: ssh -L 5900:localhost:5900 you@server, then VNC to localhost:5900
+# and sign in to YouTube in the Chrome window
+
+# 3. Point the keeper at the profile
+ytdlp-cookie-keeper refresh \
+  --cookies /srv/secrets/youtube_cookies.txt \
+  --browser chrome+basictext:/srv/youtube-browser-profile
+```
+
+Tips that make the session last:
+
+- **Use a throwaway Google account**, not your own — automated-looking activity can trip account security.
+- **Keep Chrome running** (or restart it periodically) so its background token refresh keeps the session warm; a profile that's never opened goes stale faster.
+- `--password-store=basic` at first launch matches the `+basictext` keyring in the browser spec — cookies stay decryptable without a desktop keyring.
+- When Google eventually forces a re-login (weeks to months), **log in manually over VNC again**. Don't script the login: Google actively detects automated sign-ins, and CAPTCHA/2FA challenges can't be bypassed — a typed-credentials script fails exactly when you need it and puts the account at risk.
+
+## Recipes
+
+### systemd
+
+```ini
+# /etc/systemd/system/cookie-keeper.service
+[Unit]
+Description=Keep yt-dlp YouTube cookies fresh
+After=network-online.target
+
+[Service]
+ExecStart=/usr/bin/ytdlp-cookie-keeper daemon \
+  --cookies /srv/secrets/youtube_cookies.txt \
+  --browser chrome+basictext:/srv/youtube-browser-profile \
+  --interval 6h --refresh-on-start
+Restart=on-failure
+User=ytdlp
+
+[Install]
+WantedBy=multi-user.target
+```
+
+### GitHub Actions staleness alert
+
+```yaml
+name: Cookie Health
+on:
+  schedule: [{ cron: '0 */6 * * *' }]
+  workflow_dispatch:
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check cookie freshness on the server
+        uses: appleboy/ssh-action@v1
+        with:
+          host: ${{ secrets.HOST }}
+          username: ${{ secrets.USER }}
+          key: ${{ secrets.SSH_KEY }}
+          script: npx ytdlp-cookie-keeper check --cookies /srv/secrets/youtube_cookies.txt --max-age 13h
+      - name: Alert on stale cookies
+        if: failure()
+        run: |
+          curl -s -X POST "${{ secrets.WEBHOOK_URL }}" -H 'Content-Type: application/json' \
+            -d '{"text":"YouTube cookies are stale — the browser profile likely needs a manual re-login."}'
+```
+
+### Docker
+
+Run the daemon as a sidecar sharing a `secrets/` volume with whatever consumes the cookie file; mount the browser profile read-only into the sidecar. The consumer only ever sees a validated file.
+
+## Scope and non-goals
+
+- **No login automation.** This tool assumes a working browser session and keeps cookies flowing from it; establishing the session is a manual, interactive step by design (see above).
+- **Not a bypass.** If YouTube challenges the account, the validation step fails closed and your previous cookie file is preserved — nothing here evades bot detection; it just stops session rot from breaking you silently.
+- YouTube-flavored defaults, but the export→validate→swap pattern is site-agnostic: point `--validate-url` at any site yt-dlp supports.
+
+## Provenance
+
+Extracted from [FM-Hachimi](https://github.com/Bryan-Kuang/FM-Hachimi), a Discord music bot that has run this refresh loop unattended in production. MIT.

package/dist/cli-support.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Pure helpers backing the CLI: duration parsing and cookie-file freshness.
+ * Kept free of process/argv side effects so they are directly testable.
+ */
+/** Parse '90s' / '5m' / '6h' (bare numbers mean seconds) into milliseconds. */
+export declare function parseDuration(value: string): number;
+export interface FreshnessResult {
+    status: 'ok' | 'stale' | 'missing';
+    ageMs?: number;
+}
+/** Compare a cookie file's mtime against a maximum allowed age. */
+export declare function checkFreshness(cookiesFile: string, maxAgeMs: number): FreshnessResult;

package/dist/cli-support.js

@@ -0,0 +1,72 @@
+"use strict";
+/**
+ * Pure helpers backing the CLI: duration parsing and cookie-file freshness.
+ * Kept free of process/argv side effects so they are directly testable.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDuration = parseDuration;
+exports.checkFreshness = checkFreshness;
+const fs = __importStar(require("fs"));
+const DURATION_PATTERN = /^(\d+(?:\.\d+)?)([smh]?)$/;
+const UNIT_MS = {
+    s: 1000,
+    m: 60 * 1000,
+    h: 60 * 60 * 1000,
+};
+/** Parse '90s' / '5m' / '6h' (bare numbers mean seconds) into milliseconds. */
+function parseDuration(value) {
+    const match = DURATION_PATTERN.exec(value.trim());
+    if (!match) {
+        throw new Error(`Invalid duration '${value}' — use forms like 90s, 5m, 6h`);
+    }
+    const amount = Number(match[1]);
+    const unit = match[2] || 's';
+    return amount * UNIT_MS[unit];
+}
+/** Compare a cookie file's mtime against a maximum allowed age. */
+function checkFreshness(cookiesFile, maxAgeMs) {
+    let stat;
+    try {
+        stat = fs.statSync(cookiesFile);
+    }
+    catch {
+        return { status: 'missing' };
+    }
+    // Filesystem timestamps can be fractionally ahead of Date.now(); never report a negative age.
+    const ageMs = Math.max(0, Date.now() - stat.mtimeMs);
+    return { status: ageMs > maxAgeMs ? 'stale' : 'ok', ageMs };
+}
+//# sourceMappingURL=cli-support.js.map

package/dist/cli-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-support.js","sourceRoot":"","sources":["../src/cli-support.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaH,sCAQC;AAQD,wCAUC;AArCD,uCAAyB;AAEzB,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD,MAAM,OAAO,GAA2B;IACtC,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,EAAE,GAAG,IAAI;IACZ,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;CAClB,CAAC;AAEF,+EAA+E;AAC/E,SAAgB,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,gCAAgC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC7B,OAAO,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAOD,mEAAmE;AACnE,SAAgB,cAAc,CAAC,WAAmB,EAAE,QAAgB;IAClE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,8FAA8F;IAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+/**
+ * ytdlp-cookie-keeper CLI
+ *
+ *   refresh  One-shot export + validate + swap. Exit 0 on success, 1 on failure.
+ *   daemon   Refresh on an interval until terminated.
+ *   check    Freshness probe for cron/CI alerting.
+ *            Exit 0 = fresh, 2 = file missing, 3 = stale.
+ */
+export {};

package/dist/cli.js

@@ -0,0 +1,179 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * ytdlp-cookie-keeper CLI
+ *
+ *   refresh  One-shot export + validate + swap. Exit 0 on success, 1 on failure.
+ *   daemon   Refresh on an interval until terminated.
+ *   check    Freshness probe for cron/CI alerting.
+ *            Exit 0 = fresh, 2 = file missing, 3 = stale.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const cookie_keeper_1 = require("./cookie-keeper");
+const cli_support_1 = require("./cli-support");
+const USAGE = `Usage: ytdlp-cookie-keeper <command> [options]
+
+Commands:
+  refresh   Export cookies from the browser profile, validate, swap. One-shot.
+  daemon    Run refresh on an interval until terminated.
+  check     Verify the cookie file is fresh (for cron/CI alerting).
+
+Options (refresh, daemon):
+  --cookies <file>        Live cookie file to keep fresh (required)
+  --browser <spec>        yt-dlp --cookies-from-browser spec, e.g.
+                          chrome+basictext:/srv/youtube-profile (required)
+  --validate-url <url>    Watch URL the candidate must extract (repeatable;
+                          defaults to two evergreen videos)
+  --yt-dlp <path>         yt-dlp executable (default: yt-dlp on PATH)
+  --timeout <duration>    Per-invocation timeout (default: 90s)
+
+Options (daemon):
+  --interval <duration>   Time between refreshes (default: 6h)
+  --cooldown <duration>   Minimum gap between attempts (default: 5m)
+  --refresh-on-start      Also refresh immediately on startup
+
+Options (check):
+  --cookies <file>        Cookie file to inspect (required)
+  --max-age <duration>    Maximum acceptable age (default: 13h)
+
+Durations accept 90s, 5m, 6h; bare numbers mean seconds.
+
+Exit codes:
+  refresh/daemon: 0 success, 1 failure, 64 usage error
+  check:          0 fresh, 2 missing, 3 stale, 64 usage error
+`;
+const VALUE_FLAGS = new Set(['--cookies', '--browser', '--validate-url', '--yt-dlp', '--timeout', '--interval', '--cooldown', '--max-age']);
+const BOOLEAN_FLAGS = new Set(['--refresh-on-start', '--quiet']);
+function parseArgs(argv) {
+    const [command, ...rest] = argv;
+    if (!command)
+        usageError('missing command');
+    const flags = new Map();
+    const booleans = new Set();
+    for (let i = 0; i < rest.length; i++) {
+        const arg = rest[i];
+        if (BOOLEAN_FLAGS.has(arg)) {
+            booleans.add(arg);
+        }
+        else if (VALUE_FLAGS.has(arg)) {
+            const value = rest[++i];
+            if (value === undefined)
+                usageError(`${arg} requires a value`);
+            const list = flags.get(arg) ?? [];
+            list.push(value);
+            flags.set(arg, list);
+        }
+        else {
+            usageError(`unknown option '${arg}'`);
+        }
+    }
+    return { command, flags, booleans };
+}
+function usageError(message) {
+    process.stderr.write(`error: ${message}\n\n${USAGE}`);
+    process.exit(64);
+}
+function required(args, flag) {
+    const values = args.flags.get(flag);
+    if (!values?.length)
+        usageError(`${flag} is required for '${args.command}'`);
+    return values[values.length - 1];
+}
+function optional(args, flag) {
+    const values = args.flags.get(flag);
+    return values?.[values.length - 1];
+}
+function duration(args, flag, fallbackMs) {
+    const raw = optional(args, flag);
+    if (raw === undefined)
+        return fallbackMs;
+    try {
+        return (0, cli_support_1.parseDuration)(raw);
+    }
+    catch (error) {
+        usageError(error.message);
+    }
+}
+function log(message) {
+    process.stderr.write(`[${new Date().toISOString()}] ${message}\n`);
+}
+function buildKeeper(args, intervalMs, cooldownMs) {
+    const keeper = new cookie_keeper_1.CookieKeeper({
+        cookiesFile: required(args, '--cookies'),
+        browserSpec: required(args, '--browser'),
+        validateUrls: args.flags.get('--validate-url'),
+        ytDlpPath: optional(args, '--yt-dlp'),
+        processTimeoutMs: duration(args, '--timeout', 90_000),
+        refreshIntervalMs: intervalMs,
+        cooldownMs,
+    });
+    keeper.on('refresh:start', (e) => log(`refresh started (browser: ${e.browserSpec})`));
+    keeper.on('refresh:success', (e) => log(`refresh succeeded — validated against ${e.validateUrlCount} URL(s)`));
+    keeper.on('refresh:failure', (e) => log(`refresh failed: ${e.error}`));
+    keeper.on('refresh:skipped', (e) => log(`refresh skipped (cooldown, retry in ${Math.ceil(e.retryInMs / 1000)}s)`));
+    return keeper;
+}
+async function runRefresh(args) {
+    const keeper = buildKeeper(args, 0, 0);
+    const result = await keeper.refreshNow({ reason: 'cli', force: true });
+    process.exit(result.success ? 0 : 1);
+}
+async function runDaemon(args) {
+    const intervalMs = duration(args, '--interval', 6 * 60 * 60 * 1000);
+    const cooldownMs = duration(args, '--cooldown', 5 * 60 * 1000);
+    const keeper = buildKeeper(args, intervalMs, cooldownMs);
+    const shutdown = (signal) => {
+        log(`received ${signal}, stopping`);
+        keeper.stop();
+        process.exit(0);
+    };
+    process.on('SIGINT', () => shutdown('SIGINT'));
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    keeper.start();
+    log(`daemon started (interval ${Math.round(intervalMs / 1000)}s)`);
+    if (args.booleans.has('--refresh-on-start')) {
+        keeper.refreshInBackground({ reason: 'startup' });
+    }
+    // Keep the process alive; the keeper's own interval is unref'd by design.
+    setInterval(() => { }, 1 << 30);
+}
+function runCheck(args) {
+    const cookiesFile = required(args, '--cookies');
+    const maxAgeMs = duration(args, '--max-age', 13 * 60 * 60 * 1000);
+    const result = (0, cli_support_1.checkFreshness)(cookiesFile, maxAgeMs);
+    if (result.status === 'missing') {
+        process.stdout.write(`MISSING: ${cookiesFile} does not exist\n`);
+        process.exit(2);
+    }
+    const ageSeconds = Math.round((result.ageMs ?? 0) / 1000);
+    const thresholdSeconds = Math.round(maxAgeMs / 1000);
+    if (result.status === 'stale') {
+        process.stdout.write(`STALE: cookie age ${ageSeconds}s exceeds threshold ${thresholdSeconds}s — the refresh loop is likely failing (browser profile may need re-login)\n`);
+        process.exit(3);
+    }
+    process.stdout.write(`OK: cookie age ${ageSeconds}s (threshold ${thresholdSeconds}s)\n`);
+    process.exit(0);
+}
+async function main() {
+    const args = parseArgs(process.argv.slice(2));
+    switch (args.command) {
+        case 'refresh':
+            return runRefresh(args);
+        case 'daemon':
+            return runDaemon(args);
+        case 'check':
+            return runCheck(args);
+        case 'help':
+        case '--help':
+        case '-h':
+            process.stdout.write(USAGE);
+            return;
+        default:
+            usageError(`unknown command '${args.command}'`);
+    }
+}
+void main().catch((error) => {
+    process.stderr.write(`fatal: ${error.message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AACA;;;;;;;GAOG;;AAEH,mDAA+C;AAC/C,+CAA8D;AAE9D,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Bb,CAAC;AAQF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAC5I,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;AAEjE,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,GAAG,GAAG,mBAAmB,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgB,EAAE,IAAY;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,MAAM;QAAE,UAAU,CAAC,GAAG,IAAI,qBAAqB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgB,EAAE,IAAY;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgB,EAAE,IAAY,EAAE,UAAkB;IAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,OAAe;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,IAAgB,EAAE,UAAkB,EAAE,UAAkB;IAC3E,MAAM,MAAM,GAAG,IAAI,4BAAY,CAAC;QAC9B,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QACxC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QACxC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9C,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QACrC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC;QACrD,iBAAiB,EAAE,UAAU;QAC7B,UAAU;KACX,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IACtF,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,gBAAgB,SAAS,CAAC,CAAC,CAAC;IAC/G,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,uCAAuC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAgB;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAgB;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,GAAG,CAAC,YAAY,MAAM,YAAY,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,GAAG,CAAC,4BAA4B,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,0EAA0E;IAC1E,WAAW,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgB;IAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAErD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,WAAW,mBAAmB,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,UAAU,uBAAuB,gBAAgB,8EAA8E,CAAC,CAAC;QAC3K,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,UAAU,gBAAgB,gBAAgB,MAAM,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO;QACT;YACE,UAAU,CAAC,oBAAoB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cookie-keeper.d.ts

@@ -0,0 +1,129 @@
+/**
+ * CookieKeeper
+ * Keeps a yt-dlp YouTube cookie file fresh on a headless server.
+ *
+ * The refresh cycle never risks the live cookie file:
+ *   1. Export cookies from a persistent browser profile into a temp candidate
+ *      file (`yt-dlp --cookies-from-browser`).
+ *   2. Validate the candidate end-to-end against real watch URLs.
+ *   3. Only then overwrite the live file, in place (same inode, 0600 perms),
+ *      so anything holding the path open keeps working.
+ * A candidate that fails export or validation is discarded and the previous
+ * live file stays untouched.
+ *
+ * Concurrency: a refresh already in flight is joined, not duplicated, and a
+ * cooldown window absorbs bursts of retry-triggered refresh requests.
+ */
+import { EventEmitter } from 'events';
+export interface RefreshContext {
+    /** Why this refresh was requested, e.g. 'scheduled' or 'playback-403'. */
+    reason?: string;
+    /** Which component requested it. */
+    source?: string;
+    /** Bypass the cooldown window. */
+    force?: boolean;
+}
+export interface RefreshResult {
+    success: boolean;
+    refreshed: boolean;
+    skipped?: boolean;
+    error?: string;
+}
+export interface RefreshStartEvent {
+    reason?: string;
+    source?: string;
+    /** Browser spec with the profile path redacted. */
+    browserSpec: string;
+}
+export interface RefreshSuccessEvent {
+    reason?: string;
+    source?: string;
+    validateUrlCount: number;
+    /** Unix time (ms) of the successful swap — feed this to your metrics/alerts. */
+    timestampMs: number;
+}
+export interface RefreshFailureEvent {
+    reason?: string;
+    source?: string;
+    /** Human-readable failure, with URLs and cookie values redacted. */
+    error: string;
+}
+export interface RefreshSkippedEvent {
+    reason?: string;
+    source?: string;
+    why: 'cooldown';
+    /** Milliseconds until the cooldown window ends. */
+    retryInMs: number;
+}
+/** Minimal surface of child_process.spawn output that CookieKeeper needs. */
+export interface SpawnedProcess {
+    stdout?: {
+        on(event: 'data', listener: (data: Buffer) => void): unknown;
+    } | null;
+    stderr?: {
+        on(event: 'data', listener: (data: Buffer) => void): unknown;
+    } | null;
+    killed: boolean;
+    kill(signal?: NodeJS.Signals | number): unknown;
+    on(event: 'close', listener: (code: number | null) => void): unknown;
+    on(event: 'error', listener: (error: Error) => void): unknown;
+}
+export type SpawnFunction = (command: string, args: readonly string[]) => SpawnedProcess;
+export interface CookieKeeperOptions {
+    /** Live cookie file consumed by yt-dlp (`--cookies <file>`). Overwritten in place only after validation. */
+    cookiesFile: string;
+    /** `--cookies-from-browser` spec, e.g. `chrome+basictext:/srv/youtube-profile`. */
+    browserSpec: string;
+    /** Watch URLs the candidate must extract successfully before it goes live. */
+    validateUrls?: string[];
+    /** Interval for start()'s background refresh loop. 0 disables the loop. Default 6h. */
+    refreshIntervalMs?: number;
+    /** Minimum time between refresh attempts unless forced. Default 5m. */
+    cooldownMs?: number;
+    /** Where candidate files are staged. Default os.tmpdir(). */
+    tmpDir?: string;
+    /** yt-dlp executable. Default 'yt-dlp' from PATH. */
+    ytDlpPath?: string;
+    /** Timeout per yt-dlp invocation. Default 90s. */
+    processTimeoutMs?: number;
+    /** Injectable spawn, for testing. Default child_process.spawn. */
+    spawnFn?: SpawnFunction;
+}
+export declare interface CookieKeeper {
+    on(event: 'refresh:start', listener: (event: RefreshStartEvent) => void): this;
+    on(event: 'refresh:success', listener: (event: RefreshSuccessEvent) => void): this;
+    on(event: 'refresh:failure', listener: (event: RefreshFailureEvent) => void): this;
+    on(event: 'refresh:skipped', listener: (event: RefreshSkippedEvent) => void): this;
+    once(event: 'refresh:start', listener: (event: RefreshStartEvent) => void): this;
+    once(event: 'refresh:success', listener: (event: RefreshSuccessEvent) => void): this;
+    once(event: 'refresh:failure', listener: (event: RefreshFailureEvent) => void): this;
+    once(event: 'refresh:skipped', listener: (event: RefreshSkippedEvent) => void): this;
+}
+export declare class CookieKeeper extends EventEmitter {
+    private readonly cookiesFile;
+    private readonly browserSpec;
+    private readonly validateUrls;
+    private readonly refreshIntervalMs;
+    private readonly cooldownMs;
+    private readonly tmpDir;
+    private readonly ytDlpPath;
+    private readonly processTimeoutMs;
+    private readonly spawnFn;
+    private interval;
+    private inFlight;
+    private lastAttemptAt;
+    constructor(options: CookieKeeperOptions);
+    /** Start the background refresh loop (no-op if refreshIntervalMs is 0). */
+    start(): void;
+    stop(): void;
+    /** Fire-and-forget refresh; failures surface via the 'refresh:failure' event. */
+    refreshInBackground(context?: RefreshContext): void;
+    refreshNow(context?: RefreshContext): Promise<RefreshResult>;
+    private doRefresh;
+    private hasCookiePayload;
+    private failure;
+    private runYtDlp;
+    private redactBrowserSpec;
+    /** Strip URLs, signed query params, and cookie values from error details. */
+    private redact;
+}

package/dist/cookie-keeper.js

@@ -0,0 +1,281 @@
+"use strict";
+/**
+ * CookieKeeper
+ * Keeps a yt-dlp YouTube cookie file fresh on a headless server.
+ *
+ * The refresh cycle never risks the live cookie file:
+ *   1. Export cookies from a persistent browser profile into a temp candidate
+ *      file (`yt-dlp --cookies-from-browser`).
+ *   2. Validate the candidate end-to-end against real watch URLs.
+ *   3. Only then overwrite the live file, in place (same inode, 0600 perms),
+ *      so anything holding the path open keeps working.
+ * A candidate that fails export or validation is discarded and the previous
+ * live file stays untouched.
+ *
+ * Concurrency: a refresh already in flight is joined, not duplicated, and a
+ * cooldown window absorbs bursts of retry-triggered refresh requests.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieKeeper = void 0;
+const child_process_1 = require("child_process");
+const events_1 = require("events");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const DEFAULT_VALIDATE_URLS = [
+    // Evergreen videos that are very unlikely to ever be removed or region-locked.
+    'https://www.youtube.com/watch?v=dQw4w9WgXcQ', // Rick Astley — Never Gonna Give You Up
+    'https://www.youtube.com/watch?v=jNQXAC9IVRw', // "Me at the zoo" — the first YouTube video
+];
+const DEFAULT_INTERVAL_MS = 6 * 60 * 60 * 1000;
+const DEFAULT_COOLDOWN_MS = 5 * 60 * 1000;
+const DEFAULT_PROCESS_TIMEOUT_MS = 90_000;
+const NETSCAPE_HEADER = '# Netscape HTTP Cookie File\n';
+class CookieKeeper extends events_1.EventEmitter {
+    cookiesFile;
+    browserSpec;
+    validateUrls;
+    refreshIntervalMs;
+    cooldownMs;
+    tmpDir;
+    ytDlpPath;
+    processTimeoutMs;
+    spawnFn;
+    interval = null;
+    inFlight = null;
+    lastAttemptAt = 0;
+    constructor(options) {
+        super();
+        if (!options.cookiesFile)
+            throw new Error('cookiesFile is required');
+        if (!options.browserSpec)
+            throw new Error('browserSpec is required');
+        this.cookiesFile = options.cookiesFile;
+        this.browserSpec = options.browserSpec;
+        this.validateUrls = options.validateUrls?.length ? options.validateUrls : DEFAULT_VALIDATE_URLS;
+        this.refreshIntervalMs = Math.max(0, options.refreshIntervalMs ?? DEFAULT_INTERVAL_MS);
+        this.cooldownMs = Math.max(0, options.cooldownMs ?? DEFAULT_COOLDOWN_MS);
+        this.tmpDir = options.tmpDir || os.tmpdir();
+        this.ytDlpPath = options.ytDlpPath || 'yt-dlp';
+        this.processTimeoutMs = options.processTimeoutMs ?? DEFAULT_PROCESS_TIMEOUT_MS;
+        this.spawnFn = options.spawnFn || child_process_1.spawn;
+    }
+    /** Start the background refresh loop (no-op if refreshIntervalMs is 0). */
+    start() {
+        if (this.refreshIntervalMs <= 0 || this.interval)
+            return;
+        this.interval = setInterval(() => {
+            this.refreshInBackground({ reason: 'scheduled' });
+        }, this.refreshIntervalMs);
+        this.interval.unref();
+    }
+    stop() {
+        if (!this.interval)
+            return;
+        clearInterval(this.interval);
+        this.interval = null;
+    }
+    /** Fire-and-forget refresh; failures surface via the 'refresh:failure' event. */
+    refreshInBackground(context = {}) {
+        void this.refreshNow(context).catch((error) => {
+            this.emit('refresh:failure', {
+                reason: context.reason,
+                source: context.source,
+                error: this.redact(error.message),
+            });
+        });
+    }
+    async refreshNow(context = {}) {
+        if (this.inFlight)
+            return this.inFlight;
+        const now = Date.now();
+        if (!context.force && this.lastAttemptAt > 0 && now - this.lastAttemptAt < this.cooldownMs) {
+            const retryInMs = this.cooldownMs - (now - this.lastAttemptAt);
+            this.emit('refresh:skipped', {
+                reason: context.reason,
+                source: context.source,
+                why: 'cooldown',
+                retryInMs,
+            });
+            return {
+                success: false,
+                refreshed: false,
+                skipped: true,
+                error: `refresh is cooling down for another ${retryInMs}ms`,
+            };
+        }
+        this.lastAttemptAt = now;
+        this.inFlight = this.doRefresh(context).finally(() => {
+            this.inFlight = null;
+        });
+        return this.inFlight;
+    }
+    async doRefresh(context) {
+        let workDir = null;
+        try {
+            fs.mkdirSync(path.dirname(this.cookiesFile), { recursive: true });
+            fs.mkdirSync(this.tmpDir, { recursive: true });
+            workDir = fs.mkdtempSync(path.join(this.tmpDir, 'cookie-keeper-'));
+            const candidateFile = path.join(workDir, 'candidate_cookies.txt');
+            fs.writeFileSync(candidateFile, NETSCAPE_HEADER, { mode: 0o600 });
+            this.emit('refresh:start', {
+                reason: context.reason,
+                source: context.source,
+                browserSpec: this.redactBrowserSpec(this.browserSpec),
+            });
+            const exportResult = await this.runYtDlp([
+                '--cookies-from-browser', this.browserSpec,
+                '--cookies', candidateFile,
+                '--skip-download',
+                '--flat-playlist',
+                '--playlist-items', '0',
+                '--extractor-args', 'youtubetab:skip=authcheck',
+                'https://www.youtube.com/',
+            ]);
+            if (exportResult.code !== 0) {
+                return this.failure(context, 'cookie export failed', exportResult.stderr);
+            }
+            if (!this.hasCookiePayload(candidateFile)) {
+                return this.failure(context, 'cookie export produced no usable cookies');
+            }
+            for (const validateUrl of this.validateUrls) {
+                const validateResult = await this.runYtDlp([
+                    '--cookies', candidateFile,
+                    '--skip-download',
+                    '--no-playlist',
+                    '--no-warnings',
+                    '--format', 'bestaudio[vcodec=none][acodec!=none]/best[height<=360][acodec!=none]/worst[acodec!=none]',
+                    '--print', 'id',
+                    validateUrl,
+                ]);
+                if (validateResult.code !== 0) {
+                    return this.failure(context, 'exported cookies failed validation', validateResult.stderr);
+                }
+            }
+            const candidate = fs.readFileSync(candidateFile);
+            fs.writeFileSync(this.cookiesFile, candidate, { mode: 0o600 });
+            fs.chmodSync(this.cookiesFile, 0o600);
+            this.emit('refresh:success', {
+                reason: context.reason,
+                source: context.source,
+                validateUrlCount: this.validateUrls.length,
+                timestampMs: Date.now(),
+            });
+            return { success: true, refreshed: true };
+        }
+        catch (error) {
+            return this.failure(context, 'refresh failed', error.message);
+        }
+        finally {
+            if (workDir) {
+                fs.rmSync(workDir, { recursive: true, force: true });
+            }
+        }
+    }
+    hasCookiePayload(cookieFile) {
+        if (!fs.existsSync(cookieFile))
+            return false;
+        const raw = fs.readFileSync(cookieFile, 'utf8');
+        const dataLines = raw
+            .split(/\r?\n/)
+            .map((line) => line.trim())
+            .map((line) => (line.startsWith('#HttpOnly_') ? line.replace(/^#HttpOnly_/, '') : line))
+            .filter((line) => line && !line.startsWith('#'));
+        return dataLines.some((line) => line.includes('youtube.com') || line.includes('\tSID\t'));
+    }
+    failure(context, message, rawDetails = '') {
+        const error = rawDetails ? `${message}: ${this.redact(rawDetails)}` : message;
+        this.emit('refresh:failure', {
+            reason: context.reason,
+            source: context.source,
+            error,
+        });
+        return { success: false, refreshed: false, error };
+    }
+    runYtDlp(args) {
+        return new Promise((resolve, reject) => {
+            const child = this.spawnFn(this.ytDlpPath, args);
+            let stdout = '';
+            let stderr = '';
+            let settled = false;
+            child.stdout?.on('data', (data) => {
+                stdout += data.toString();
+            });
+            child.stderr?.on('data', (data) => {
+                stderr += data.toString();
+            });
+            const timeoutId = setTimeout(() => {
+                if (settled)
+                    return;
+                child.kill('SIGTERM');
+                const killTimer = setTimeout(() => {
+                    if (!child.killed)
+                        child.kill('SIGKILL');
+                }, 2000);
+                killTimer.unref();
+                settled = true;
+                resolve({ code: 143, stdout, stderr: `${stderr}\nTimed out` });
+            }, this.processTimeoutMs);
+            timeoutId.unref();
+            child.on('close', (code) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timeoutId);
+                resolve({ code, stdout, stderr });
+            });
+            child.on('error', (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timeoutId);
+                reject(error);
+            });
+        });
+    }
+    redactBrowserSpec(value) {
+        return value.replace(/:(\/[^:\s]+)/, ':<profile>');
+    }
+    /** Strip URLs, signed query params, and cookie values from error details. */
+    redact(value) {
+        return value
+            .replace(/https?:\/\/\S+/g, '<redacted-url>')
+            .replace(/([?&](?:sig|signature|expire|ei|spc|lsig|n)=)[^&\s]+/gi, '$1<redacted>')
+            .replace(/(SID|HSID|SSID|SAPISID|APISID|LOGIN_INFO)\t[^\s]+/g, '$1\t<redacted>');
+    }
+}
+exports.CookieKeeper = CookieKeeper;
+//# sourceMappingURL=cookie-keeper.js.map

package/dist/cookie-keeper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-keeper.js","sourceRoot":"","sources":["../src/cookie-keeper.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,iDAAmD;AACnD,mCAAsC;AACtC,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAuF7B,MAAM,qBAAqB,GAAG;IAC5B,+EAA+E;IAC/E,6CAA6C,EAAE,wCAAwC;IACvF,6CAA6C,EAAE,4CAA4C;CAC5F,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,eAAe,GAAG,+BAA+B,CAAC;AAaxD,MAAa,YAAa,SAAQ,qBAAY;IAC3B,WAAW,CAAS;IACpB,WAAW,CAAS;IACpB,YAAY,CAAW;IACvB,iBAAiB,CAAS;IAC1B,UAAU,CAAS;IACnB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,gBAAgB,CAAS;IACzB,OAAO,CAAgB;IAChC,QAAQ,GAA0B,IAAI,CAAC;IACvC,QAAQ,GAAkC,IAAI,CAAC;IAC/C,aAAa,GAAG,CAAC,CAAC;IAE1B,YAAY,OAA4B;QACtC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAChG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,IAAI,mBAAmB,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;QAC/C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC/E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAK,qBAAsC,CAAC;IAC5E,CAAC;IAED,2EAA2E;IAC3E,KAAK;QACH,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QACzD,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,iFAAiF;IACjF,mBAAmB,CAAC,UAA0B,EAAE;QAC9C,KAAK,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACrD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAA0B,EAAE;QAC3C,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAExC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,UAAU;gBACf,SAAS;aACV,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,uCAAuC,SAAS,IAAI;aAC5D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACnD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAuB;QAC7C,IAAI,OAAO,GAAkB,IAAI,CAAC;QAElC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE/C,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACnE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;YAClE,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAElE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;gBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC;aACtD,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACvC,wBAAwB,EAAE,IAAI,CAAC,WAAW;gBAC1C,WAAW,EAAE,aAAa;gBAC1B,iBAAiB;gBACjB,iBAAiB;gBACjB,kBAAkB,EAAE,GAAG;gBACvB,kBAAkB,EAAE,2BAA2B;gBAC/C,0BAA0B;aAC3B,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,sBAAsB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;YAC3E,CAAC;YAED,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC5C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;oBACzC,WAAW,EAAE,aAAa;oBAC1B,iBAAiB;oBACjB,eAAe;oBACf,eAAe;oBACf,UAAU,EAAE,0FAA0F;oBACtG,SAAS,EAAE,IAAI;oBACf,WAAW;iBACZ,CAAC,CAAC;gBAEH,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,oCAAoC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YACjD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAEtC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;gBAC1C,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO,EAAE,CAAC;gBACZ,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,UAAkB;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,GAAG;aAClB,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACvF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,CAAC;IAEO,OAAO,CAAC,OAAuB,EAAE,OAAe,EAAE,UAAU,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAEO,QAAQ,CAAC,IAAc;QAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACxC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACxC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,OAAO;oBAAE,OAAO;gBACpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAChC,IAAI,CAAC,KAAK,CAAC,MAAM;wBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC,EAAE,IAAI,CAAC,CAAC;gBACT,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC,CAAC;YACjE,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1B,SAAS,CAAC,KAAK,EAAE,CAAC;YAElB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;gBACxC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;gBACjC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,KAAa;QACrC,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IAED,6EAA6E;IACrE,MAAM,CAAC,KAAa;QAC1B,OAAO,KAAK;aACT,OAAO,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;aAC5C,OAAO,CAAC,wDAAwD,EAAE,cAAc,CAAC;aACjF,OAAO,CAAC,oDAAoD,EAAE,gBAAgB,CAAC,CAAC;IACrF,CAAC;CACF;AApOD,oCAoOC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export { CookieKeeper, CookieKeeperOptions, RefreshContext, RefreshResult, RefreshStartEvent, RefreshSuccessEvent, RefreshFailureEvent, RefreshSkippedEvent, SpawnedProcess, SpawnFunction, } from './cookie-keeper';
+export { parseDuration, checkFreshness, FreshnessResult } from './cli-support';

package/dist/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkFreshness = exports.parseDuration = exports.CookieKeeper = void 0;
+var cookie_keeper_1 = require("./cookie-keeper");
+Object.defineProperty(exports, "CookieKeeper", { enumerable: true, get: function () { return cookie_keeper_1.CookieKeeper; } });
+var cli_support_1 = require("./cli-support");
+Object.defineProperty(exports, "parseDuration", { enumerable: true, get: function () { return cli_support_1.parseDuration; } });
+Object.defineProperty(exports, "checkFreshness", { enumerable: true, get: function () { return cli_support_1.checkFreshness; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,iDAWyB;AAVvB,6GAAA,YAAY,OAAA;AAYd,6CAA+E;AAAtE,4GAAA,aAAa,OAAA;AAAE,6GAAA,cAAc,OAAA"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "ytdlp-cookie-keeper",
+  "version": "0.1.0",
+  "description": "Keep your yt-dlp YouTube cookies fresh on a headless server: export from a persistent browser profile, validate against real videos, atomically swap — never clobber a working cookie file with a broken one.",
+  "license": "MIT",
+  "author": "Bryan Kuang",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "ytdlp-cookie-keeper": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "jest",
+    "prepublishOnly": "npm test && npm run build"
+  },
+  "keywords": [
+    "yt-dlp",
+    "ytdlp",
+    "youtube",
+    "cookies",
+    "cookies-from-browser",
+    "headless",
+    "bot-detection",
+    "sign-in-to-confirm"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "devDependencies": {
+    "@jest/globals": "^29.7.0",
+    "@types/node": "^20.12.12",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.1.5",
+    "typescript": "^5.4.5"
+  }
+}