npm - zevairouter - Versions diffs - 1.0.7 → 1.0.9 - Mend

zevairouter 1.0.7 → 1.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (945) hide show

package/src/lib/oauth/services/kiroGoogleAutomation.js CHANGED Viewed

@@ -475,6 +475,18 @@ function isGoogleAuthPage(page) {
   }
 }
+// Google bounces flagged (headless) browsers to myaccount.google.com/not-supported
+// at the OAuth consent step; from there the page often drifts to about.google.
+function isBlockedBrowserPage(page) {
+  try {
+    const url = new URL(page.url());
+    if (url.pathname.startsWith("/not-supported")) return true;
+    return url.hostname === "about.google" || url.hostname.endsWith(".about.google");
+  } catch {
+    return false;
+  }
+}
 function isProviderPage(page) {
   try {
     const url = new URL(page.url());
@@ -1230,6 +1242,100 @@ export function createKiroCallbackMonitor(context, page, timeoutMs = DEFAULT_MAN
   return promise;
 }
+// Parse any OAuth redirect callback URL (e.g. http://localhost:8080/callback?code=...)
+// against a configurable prefix. Returns { callbackUrl, code, state } or null.
+function parseCallbackUrlWithPrefix(rawUrl, prefix) {
+  if (!rawUrl || !prefix || !rawUrl.startsWith(prefix)) return null;
+  const queryIndex = rawUrl.indexOf("?");
+  const params = new URLSearchParams(queryIndex >= 0 ? rawUrl.slice(queryIndex + 1) : "");
+  const code = params.get("code");
+  const state = params.get("state");
+  if (!code) return null;
+  return { callbackUrl: rawUrl, code, state };
+}
+// Generic version of createKiroCallbackMonitor for authorization_code providers
+// whose redirect_uri is an http(s) loopback (e.g. Antigravity → http://localhost:8080/callback).
+// The browser may fail to actually load the loopback (connection refused), but the
+// request/framenavigated/requestfailed events still fire with the URL+code, which we capture.
+export function createGenericCallbackMonitor(context, page, { prefix, timeoutMs = DEFAULT_MANUAL_TIMEOUT_MS } = {}) {
+  let resolveOuter;
+  let rejectOuter;
+  const promise = new Promise((resolve, reject) => {
+    resolveOuter = resolve;
+    rejectOuter = reject;
+  });
+  let settled = false;
+  const trackedPages = new Set();
+  const contextCleanups = new Map();
+  const timeoutHandle = setTimeout(() => {
+    settle(null, new Error("Timed out waiting for OAuth callback"));
+  }, timeoutMs);
+  function settle(result, error = null) {
+    if (settled) return;
+    settled = true;
+    clearTimeout(timeoutHandle);
+    for (const fns of contextCleanups.values()) {
+      for (const fn of fns) {
+        try { fn(); } catch {}
+      }
+    }
+    contextCleanups.clear();
+    if (error) rejectOuter(error);
+    else resolveOuter(result);
+  }
+  function registerPage(trackedPage, ownerCleanups) {
+    if (!trackedPage || trackedPages.has(trackedPage)) return;
+    trackedPages.add(trackedPage);
+    const check = (url) => {
+      const parsed = parseCallbackUrlWithPrefix(url || "", prefix);
+      if (parsed) settle(parsed);
+    };
+    const onFrame = (frame) => check(frame?.url?.() || "");
+    const onRequest = (request) => check(request?.url?.() || "");
+    const onRequestFailed = (request) => check(request?.url?.() || "");
+    const onLoadState = () => check(trackedPage.url?.() || "");
+    trackedPage.on("framenavigated", onFrame);
+    trackedPage.on("request", onRequest);
+    trackedPage.on("requestfailed", onRequestFailed);
+    trackedPage.on("domcontentloaded", onLoadState);
+    trackedPage.on("load", onLoadState);
+    ownerCleanups.push(() => {
+      trackedPage.off("framenavigated", onFrame);
+      trackedPage.off("request", onRequest);
+      trackedPage.off("requestfailed", onRequestFailed);
+      trackedPage.off("domcontentloaded", onLoadState);
+      trackedPage.off("load", onLoadState);
+    });
+    check(trackedPage.url?.() || "");
+  }
+  function bind(ctx, pg) {
+    if (settled) return;
+    if (contextCleanups.has(ctx)) return;
+    const cleanups = [];
+    contextCleanups.set(ctx, cleanups);
+    const onPage = (newPage) => registerPage(newPage, cleanups);
+    ctx.on("page", onPage);
+    cleanups.push(() => ctx.off("page", onPage));
+    if (pg) registerPage(pg, cleanups);
+  }
+  bind(context, page);
+  promise.rebind = ({ context: newContext, page: newPage } = {}) => {
+    if (newContext) bind(newContext, newPage);
+  };
+  return promise;
+}
 export async function runGoogleAccountAutomation({
   page,
   authUrl,
@@ -1294,6 +1400,18 @@ export async function runGoogleAccountAutomation({
       continue;
     }
+    // Headless Chromium gets bounced to myaccount.google.com/not-supported at the
+    // OAuth consent step. From there the broad Google-button selectors wander onto
+    // about.google and loop until timeout. Detect the dead-end and bail to manual
+    // (the Camoufox engine avoids this by not being flagged as headless).
+    if (isBlockedBrowserPage(page)) {
+      reportStep("manual_assist_required", "Google blocked the automated browser (not-supported). Use the Camoufox engine or complete manually.");
+      return {
+        status: "needs_manual",
+        error: "Google blocked the automated browser at the OAuth consent step (not-supported page). Switch to the Camoufox engine or finish this account manually.",
+      };
+    }
     const text = await readPageText(page);
     if (includesAny(text, INVALID_CREDENTIAL_MARKERS)) {
       reportStep("invalid_credentials", "Google rejected the supplied email or password");

package/cli/app/.next-cli-build/static/chunks/app/_global-error/page-b749a32da7b50d0e.js DELETED Viewed

@@ -1 +0,0 @@

- (self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[39,174,204,335,342,387,501,516,543,552,675,747,748,907,931,948,992,997,1077,1088,1091,1110,1118,1200,1288,1337,1382,1446,1451,1512,1566,1666,1674,1697,1860,1907,1910,1946,1949,2121,2154,2198,2284,2296,2536,2772,2785,2797,2919,2922,3025,3038,3078,3079,3397,3472,3549,3562,3568,3705,3883,3888,4010,4061,4245,4286,4422,4444,4612,4656,4674,4761,4896,4993,5018,5107,5177,5211,5226,5460,5466,5637,5685,5745,5746,5922,5990,6091,6107,6121,6268,6278,6319,6454,6479,6529,6580,6594,6724,6740,6743,6819,6872,6919,6988,7131,7158,7241,7306,7311,7429,7445,7473,7508,7520,7758,7824,7851,8018,8026,8057,8165,8167,8207,8246,8453,8489,8573,8648,8736,8791,8814,8870,8948,8974,8975,9027,9069,9088,9141,9199,9321,9338,9461,9678,9709,9762,9817],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/cli/app/.next-cli-build/static/chunks/app/api/auth/login/route-b749a32da7b50d0e.js DELETED Viewed

@@ -1 +0,0 @@