',elements:[]}}};if(method==='Page.captureScreenshot')return{data:'aGVsbG8='};return{}},close:()=>{}});\nconst c=createV4({accountId:'acct',apiToken:'secret',allowedDomains:['fixture.test']},{fetch:fakeFetch as any,wsFactory:fakeWs as any,randomUUID:()=> '11111111-2222-4333-8444-555555555555'});const s=await c.start();let snap:any=await c.navigate(s.session_id,'https://fixture.test');ok('screenshot_base64_exposed',snap.screenshot_base64==='aGVsbG8=',snap);snap=await c.clickAt(s.session_id,123,234);ok('mouse_move',calls.some(x=>x.method==='Input.dispatchMouseEvent'&&x.params.type==='mouseMoved'&&x.params.x===123&&x.params.y===234));ok('mouse_pressed',calls.some(x=>x.method==='Input.dispatchMouseEvent'&&x.params.type==='mousePressed'&&x.params.button==='left'));ok('mouse_released',calls.some(x=>x.method==='Input.dispatchMouseEvent'&&x.params.type==='mouseReleased'&&x.params.button==='left'));let bad=false;try{await c.clickAt(s.session_id,-1,2)}catch{bad=true}ok('bad_coordinates_fail_closed',bad);await c.close(s.session_id);console.log(JSON.stringify({schema:'CLOUDFLARE_BROWSER_CLIENT_V4_TEST',pass:true,passed:checks.length,total:checks.length,checks},null,2));",[187],"a876fe54-f291-4a09-971b-263c0a57d2d9","cloudflare_browser_client_v4_candidate.ts","01a0a6e1-6f27-758f-b693-f4824cc0e588",20,["D",1789506892899],"import Ws from \"npm:ws@8.18.3\";\n\ntype Config = { accountId: string; apiToken: string; allowedDomains?: string[] };\ntype BackendState = { sessionId: string; targetId: string };\ntype Deps = { fetch?: typeof fetch; wsFactory?: (url:string, headers:Record) => Promise; randomUUID?: () => string };\nconst te=new TextEncoder();\nasync function sha256Bytes(a:Uint8Array){return[...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",a))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");}\nasync function decodeBase64(s:string){const bin=atob(s);const a=new Uint8Array(bin.length);for(let i=0;i){\n const u=new URL(url);if(u.protocol!==\"wss:\"||u.hostname!==\"api.cloudflare.com\")throw new Error(\"UNTRUSTED_CDP_WS_ORIGIN\");\n const ws=new Ws(url,{headers});\n await new Promise((resolve,reject)=>{const t=setTimeout(()=>reject(new Error(\"CDP_WS_OPEN_TIMEOUT\")),10000);ws.once(\"open\",()=>{clearTimeout(t);resolve();});ws.once(\"error\",()=>{clearTimeout(t);reject(new Error(\"CDP_WS_OPEN_ERROR\"));});});\n let next=1;const pending=new Mapvoid;reject:(e:any)=>void;t:any}>();\n ws.on(\"message\",(data:any)=>{let m:any;try{m=JSON.parse(String(data));}catch{return;}if(typeof m?.id!==\"number\")return;const p=pending.get(m.id);if(!p)return;clearTimeout(p.t);pending.delete(m.id);if(m.error)p.reject(new Error(\"CDP_CALL_FAILED\"));else p.resolve(m.result??{});});\n const call=(method:string,params:any={})=>new Promise((resolve,reject)=>{const id=next++;const t=setTimeout(()=>{pending.delete(id);reject(new Error(\"CDP_CALL_TIMEOUT:\"+method));},12000);pending.set(id,{resolve,reject,t});ws.send(JSON.stringify({id,method,params}));});\n return{call,close:()=>{try{ws.close();}catch{}}};\n}\n\nexport function createCloudflareBrowserClientV3(config:Config,deps:Deps={}){\n if(!config?.accountId||!config?.apiToken)throw new Error(\"CLOUDFLARE_BROWSER_CREDENTIALS_REQUIRED\");\n const F=deps.fetch??fetch,wsFactory=deps.wsFactory??defaultWsFactory,uuid=deps.randomUUID??crypto.randomUUID.bind(crypto);\n const account=encodeURIComponent(config.accountId),base=`https://api.cloudflare.com/client/v4/accounts/${account}/browser-rendering/devtools/browser`,wsBase=`wss://api.cloudflare.com/client/v4/accounts/${account}/browser-rendering/devtools/browser`,auth={Authorization:`Bearer ${config.apiToken}`};\n const states=new Map();\n const load=(raw:string)=>{if(!/^cf3_[a-f0-9]{32}$/i.test(raw))throw new Error(\"BAD_CLOUDFLARE_BROWSER_STATE\");const s=states.get(raw);if(!s)throw new Error(\"CLOUDFLARE_BROWSER_STATE_NOT_FOUND\");return s;};\n const newHandle=()=>{for(let i=0;i<8;i++){const h=`cf3_${uuid().replaceAll(\"-\",\"\").toLowerCase()}`;if(/^cf3_[a-f0-9]{32}$/.test(h)&&!states.has(h))return h;}throw new Error(\"CLOUDFLARE_BROWSER_HANDLE_GENERATION_FAILED\");};\n const apiJson=async(url:string,init:any={})=>{const r=await F(url,{...init,headers:{...auth,\"content-type\":\"application/json\",...(init?.headers??{})}});const text=await r.text();let j:any;try{j=JSON.parse(text);}catch{j=null;}if(!r.ok||j?.success===false)throw new Error(`CLOUDFLARE_API_${r.status}:${String(j?.errors?.[0]?.message??\"REQUEST_FAILED\").slice(0,180)}`);return j?.result??j;};\n const openPage=async(state:BackendState)=>{const url=`${wsBase}/${encodeURIComponent(state.sessionId)}/page/${encodeURIComponent(state.targetId)}`;const c=await wsFactory(url,auth);await c.call(\"Page.enable\",{});await c.call(\"Runtime.enable\",{});return c;};\n const waitReady=async(c:any)=>{const deadline=Date.now()+10000;while(Date.now()setTimeout(r,100));}throw new Error(\"BROWSER_READY_TIMEOUT\");};\n const snap=async(state:BackendState)=>{const c=await openPage(state);try{await waitReady(c);const expression=`(()=>{const els=[...document.querySelectorAll('a,button,input,textarea,select,[role=\"button\"],[tabindex]')].slice(0,120);for(const e of els){if(!e.dataset.pbRef)e.dataset.pbRef='pb_'+crypto.randomUUID().replaceAll('-','').slice(0,16)}return{url:location.href,title:document.title,text:(document.body?.innerText||'').slice(0,20000),html:document.documentElement.outerHTML.slice(0,50000),elements:els.map(e=>({ref:e.dataset.pbRef,tag:e.tagName.toLowerCase(),id:e.id||null,name:e.getAttribute('name'),type:e.getAttribute('type'),text:(e.innerText||e.getAttribute('aria-label')||e.getAttribute('placeholder')||'').trim().slice(0,300),href:e instanceof HTMLAnchorElement?e.href:null,disabled:'disabled'in e?Boolean(e.disabled):false}))}})()`;const rr=await c.call(\"Runtime.evaluate\",{expression,returnByValue:true,awaitPromise:true});const out=rr?.result?.value??{};const ss=await c.call(\"Page.captureScreenshot\",{format:\"png\"});const screenshot_base64=String(ss?.data??\"\");const bytes=await decodeBase64(screenshot_base64);return{...out,screenshot_sha256:await sha256Bytes(bytes),screenshot_bytes:bytes.length,screenshot_base64};}finally{c.close();}};\n const start=async()=>{const guardrails=config.allowedDomains?.length?{allowedDomains:config.allowedDomains.slice(0,50)}:undefined;const r=await apiJson(`${base}?keep_alive=120000`,{method:\"POST\",body:JSON.stringify(guardrails?{guardrails}:{})});const sessionId=String(r?.sessionId??\"\");if(!sessionId)throw new Error(\"CLOUDFLARE_CREATE_BAD_RESPONSE\");try{const t=await apiJson(`${base}/${encodeURIComponent(sessionId)}/json/new?url=${encodeURIComponent(\"about:blank\")}`,{method:\"PUT\"});const targetId=String(t?.id??\"\");if(!targetId)throw new Error(\"CLOUDFLARE_TARGET_CREATE_FAILED\");const handle=newHandle();states.set(handle,{sessionId,targetId});return{session_id:handle};}catch(e){try{await apiJson(`${base}/${encodeURIComponent(sessionId)}`,{method:\"DELETE\"});}catch{}throw e;}};\n const navigate=async(raw:string,url:string)=>{const s=load(raw),c=await openPage(s);try{await c.call(\"Page.navigate\",{url});await waitReady(c);}finally{c.close();}return await snap(s);};\n const click=async(raw:string,ref:string)=>{const s=load(raw),c=await openPage(s);try{const selector=JSON.stringify(`[data-pb-ref=\"${ref.replaceAll('\"','')}\"]`);const r=await c.call(\"Runtime.evaluate\",{expression:`(()=>{const e=document.querySelector(${selector});if(!e)return false;e.click();return true})()`,returnByValue:true});if(r?.result?.value!==true)throw new Error(\"BROWSER_ELEMENT_NOT_FOUND\");await new Promise(r=>setTimeout(r,100));}finally{c.close();}return await snap(s);};\n const clickAt=async(raw:string,x:number,y:number)=>{if(!Number.isFinite(x)||!Number.isFinite(y)||x<0||y<0||x>10000||y>10000)throw new Error(\"BAD_BROWSER_COORDINATES\");const s=load(raw),c=await openPage(s);try{await c.call(\"Input.dispatchMouseEvent\",{type:\"mouseMoved\",x,y,button:\"none\"});await c.call(\"Input.dispatchMouseEvent\",{type:\"mousePressed\",x,y,button:\"left\",clickCount:1});await c.call(\"Input.dispatchMouseEvent\",{type:\"mouseReleased\",x,y,button:\"left\",clickCount:1});await new Promise(r=>setTimeout(r,150));}finally{c.close();}return await snap(s);};\n const setViewport=async(raw:string,width:number,height:number)=>{if(!Number.isInteger(width)||!Number.isInteger(height)||width<320||height<240||width>4096||height>4096)throw new Error(\"BAD_BROWSER_VIEWPORT\");const s=load(raw),c=await openPage(s);try{await c.call(\"Emulation.setDeviceMetricsOverride\",{width,height,deviceScaleFactor:1,mobile:false});}finally{c.close();}return{width,height};};\n const type=async(raw:string,ref:string,text:string,clear:boolean)=>{const s=load(raw),c=await openPage(s);try{const selector=JSON.stringify(`[data-pb-ref=\"${ref.replaceAll('\"','')}\"]`),clearStmt=clear?'e.value=\"\";':'';const r=await c.call(\"Runtime.evaluate\",{expression:`(()=>{const e=document.querySelector(${selector});if(!e||!('value'in e))return false;${clearStmt}e.value+=${JSON.stringify(text)};e.dispatchEvent(new Event('input',{bubbles:true}));e.dispatchEvent(new Event('change',{bubbles:true}));return true})()`,returnByValue:true});if(r?.result?.value!==true)throw new Error(\"BROWSER_ELEMENT_NOT_FOUND\");}finally{c.close();}return await snap(s);};\n const close=async(raw:string)=>{const s=load(raw);await apiJson(`${base}/${encodeURIComponent(s.sessionId)}`,{method:\"DELETE\"});states.delete(raw);return{closed:true};};\n return{start,navigate,snapshot:async(raw:string)=>snap(load(raw)),click,clickAt,setViewport,type,close};\n}\n",[194],"65f78b9b-00c1-4d4c-869e-ce7e5a63d6ab","cloudflare_browser_client_v3_test.ts","5c17eb18-b134-11f1-8d38-1607ee4eb77e",8,["D",1789497386620],"import { createCloudflareBrowserClientV3 } from './cloudflare_browser_client_v3.ts';\nconst checks:any[]=[];const ok=(n:string,c:any,d?:any)=>{if(!c)throw new Error(`FAIL:${n}:${JSON.stringify(d)}`);checks.push({name:n,pass:true})};\nconst http:any[]=[];const wsOpens:any[]=[];const calls:any[]=[];\nconst fakeFetch=async(url:any,init:any={})=>{http.push({url:String(url),method:init.method??'GET',headers:init.headers??{},body:init.body??null});const m=init.method??'GET';if(m==='POST')return new Response(JSON.stringify({success:true,result:{sessionId:'session-1'}}),{status:200,headers:{'content-type':'application/json'}});if(m==='PUT')return new Response(JSON.stringify({success:true,result:{id:'target-1'}}),{status:200,headers:{'content-type':'application/json'}});if(m==='DELETE')return new Response(JSON.stringify({success:true,result:{status:'closed'}}),{status:200,headers:{'content-type':'application/json'}});return new Response('{}',{status:404});};\nconst fakeWs=async(url:string,headers:Record)=>{wsOpens.push({url,headers});return{call:async(method:string,params:any={})=>{calls.push({method,params});if(method==='Runtime.evaluate'&&String(params.expression).includes('document.readyState'))return{result:{value:'complete'}};if(method==='Runtime.evaluate'&&String(params.expression).includes('querySelectorAll'))return{result:{value:{url:'https://fixture.test/',title:'Fixture',text:'Ready',html:'Ready',elements:[{ref:'pb-in',tag:'input',id:'name',text:'Name'},{ref:'pb-btn',tag:'button',id:'advance',text:'Advance'}]}}};if(method==='Runtime.evaluate')return{result:{value:true}};if(method==='Page.captureScreenshot')return{data:'aGVsbG8='};return{}},close:()=>{}}};\nlet threw=false;try{createCloudflareBrowserClientV3({accountId:'',apiToken:''})}catch{threw=true}ok('credentials_required_at_client_construction',threw);\nconst c=createCloudflareBrowserClientV3({accountId:'acct-123',apiToken:'test-secret',allowedDomains:['fixture.test']},{fetch:fakeFetch as any,wsFactory:fakeWs,randomUUID:()=> '11111111-2222-4333-8444-555555555555'});\nconst st=await c.start();ok('opaque_random_handle',st.session_id==='cf3_11111111222243338444555555555555',st);ok('handle_no_backend_ids',!st.session_id.includes('session-1')&&!st.session_id.includes('target-1')&&!st.session_id.includes('test-secret'));\nlet forged=false;try{await c.snapshot('cf3_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa')}catch(e){forged=String((e as any)?.message??e).includes('STATE_NOT_FOUND')}ok('forged_handle_fails_closed',forged);\nconst cOther=createCloudflareBrowserClientV3({accountId:'acct-123',apiToken:'test-secret'},{fetch:fakeFetch as any,wsFactory:fakeWs,randomUUID:()=> '22222222-2222-4222-8222-222222222222'});let crossed=false;try{await cOther.snapshot(st.session_id)}catch{crossed=true}ok('handle_not_cross_client',crossed);\nlet s=await c.navigate(st.session_id,'https://fixture.test/');ok('snapshot',s.screenshot_sha256?.length===64&&s.elements?.length===2,s);ok('trusted_ws_origin',wsOpens.every(x=>new URL(x.url).hostname==='api.cloudflare.com'),wsOpens);ok('ws_auth_header',wsOpens.every(x=>String(x.headers.Authorization??'')==='Bearer test-secret'));ok('navigate_cdp',calls.some(x=>x.method==='Page.navigate'));\nawait c.type(st.session_id,'pb-in','Ada',true);ok('type_cdp',calls.some(x=>x.method==='Runtime.evaluate'&&String(x.params.expression).includes('dispatchEvent')));await c.click(st.session_id,'pb-btn');ok('click_cdp',calls.some(x=>x.method==='Runtime.evaluate'&&String(x.params.expression).includes('.click()')));\nawait c.close(st.session_id);ok('close_http',http.some(x=>x.method==='DELETE'&&x.url.includes('session-1')));let revoked=false;try{await c.snapshot(st.session_id)}catch{revoked=true}ok('closed_handle_revoked',revoked);ok('guardrails',JSON.parse(http.find(x=>x.method==='POST')?.body??'{}').guardrails.allowedDomains[0]==='fixture.test');\nconsole.log(JSON.stringify({schema:'CLOUDFLARE_BROWSER_CLIENT_V3_TEST',pass:true,passed:checks.length,total:checks.length,checks},null,2));",[201],"39e70297-6ecd-4f4b-bccf-15d92551ae83","cloudflare_browser_client_v3.ts","540c94aa-b134-11f1-99d2-1607ee4eb77e",7,["D",1789497373160],"import Ws from \"npm:ws@8.18.3\";\n\ntype Config = { accountId: string; apiToken: string; allowedDomains?: string[] };\ntype BackendState = { sessionId: string; targetId: string };\ntype Deps = { fetch?: typeof fetch; wsFactory?: (url:string, headers:Record) => Promise; randomUUID?: () => string };\nconst te=new TextEncoder();\nasync function sha256Bytes(a:Uint8Array){return[...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",a))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");}\nasync function decodeBase64(s:string){const bin=atob(s);const a=new Uint8Array(bin.length);for(let i=0;i){\n const u=new URL(url);if(u.protocol!==\"wss:\"||u.hostname!==\"api.cloudflare.com\")throw new Error(\"UNTRUSTED_CDP_WS_ORIGIN\");\n const ws=new Ws(url,{headers});\n await new Promise((resolve,reject)=>{const t=setTimeout(()=>reject(new Error(\"CDP_WS_OPEN_TIMEOUT\")),10000);ws.once(\"open\",()=>{clearTimeout(t);resolve();});ws.once(\"error\",()=>{clearTimeout(t);reject(new Error(\"CDP_WS_OPEN_ERROR\"));});});\n let next=1;const pending=new Mapvoid;reject:(e:any)=>void;t:any}>();\n ws.on(\"message\",(data:any)=>{let m:any;try{m=JSON.parse(String(data));}catch{return;}if(typeof m?.id!==\"number\")return;const p=pending.get(m.id);if(!p)return;clearTimeout(p.t);pending.delete(m.id);if(m.error)p.reject(new Error(\"CDP_CALL_FAILED\"));else p.resolve(m.result??{});});\n const call=(method:string,params:any={})=>new Promise((resolve,reject)=>{const id=next++;const t=setTimeout(()=>{pending.delete(id);reject(new Error(\"CDP_CALL_TIMEOUT:\"+method));},12000);pending.set(id,{resolve,reject,t});ws.send(JSON.stringify({id,method,params}));});\n return{call,close:()=>{try{ws.close();}catch{}}};\n}\n\nexport function createCloudflareBrowserClientV3(config:Config,deps:Deps={}){\n if(!config?.accountId||!config?.apiToken)throw new Error(\"CLOUDFLARE_BROWSER_CREDENTIALS_REQUIRED\");\n const F=deps.fetch??fetch,wsFactory=deps.wsFactory??defaultWsFactory,uuid=deps.randomUUID??crypto.randomUUID.bind(crypto);\n const account=encodeURIComponent(config.accountId),base=`https://api.cloudflare.com/client/v4/accounts/${account}/browser-rendering/devtools/browser`,wsBase=`wss://api.cloudflare.com/client/v4/accounts/${account}/browser-rendering/devtools/browser`,auth={Authorization:`Bearer ${config.apiToken}`};\n const states=new Map();\n const load=(raw:string)=>{if(!/^cf3_[a-f0-9]{32}$/i.test(raw))throw new Error(\"BAD_CLOUDFLARE_BROWSER_STATE\");const s=states.get(raw);if(!s)throw new Error(\"CLOUDFLARE_BROWSER_STATE_NOT_FOUND\");return s;};\n const newHandle=()=>{for(let i=0;i<8;i++){const h=`cf3_${uuid().replaceAll(\"-\",\"\").toLowerCase()}`;if(/^cf3_[a-f0-9]{32}$/.test(h)&&!states.has(h))return h;}throw new Error(\"CLOUDFLARE_BROWSER_HANDLE_GENERATION_FAILED\");};\n const apiJson=async(url:string,init:any={})=>{const r=await F(url,{...init,headers:{...auth,\"content-type\":\"application/json\",...(init?.headers??{})}});const text=await r.text();let j:any;try{j=JSON.parse(text);}catch{j=null;}if(!r.ok||j?.success===false)throw new Error(`CLOUDFLARE_API_${r.status}:${String(j?.errors?.[0]?.message??\"REQUEST_FAILED\").slice(0,180)}`);return j?.result??j;};\n const openPage=async(state:BackendState)=>{const url=`${wsBase}/${encodeURIComponent(state.sessionId)}/page/${encodeURIComponent(state.targetId)}`;const c=await wsFactory(url,auth);await c.call(\"Page.enable\",{});await c.call(\"Runtime.enable\",{});return c;};\n const waitReady=async(c:any)=>{const deadline=Date.now()+10000;while(Date.now()setTimeout(r,100));}throw new Error(\"BROWSER_READY_TIMEOUT\");};\n const snap=async(state:BackendState)=>{const c=await openPage(state);try{await waitReady(c);const expression=`(()=>{const els=[...document.querySelectorAll('a,button,input,textarea,select,[role=\"button\"],[tabindex]')].slice(0,120);for(const e of els){if(!e.dataset.pbRef)e.dataset.pbRef='pb_'+crypto.randomUUID().replaceAll('-','').slice(0,16)}return{url:location.href,title:document.title,text:(document.body?.innerText||'').slice(0,20000),html:document.documentElement.outerHTML.slice(0,50000),elements:els.map(e=>({ref:e.dataset.pbRef,tag:e.tagName.toLowerCase(),id:e.id||null,name:e.getAttribute('name'),type:e.getAttribute('type'),text:(e.innerText||e.getAttribute('aria-label')||e.getAttribute('placeholder')||'').trim().slice(0,300),href:e instanceof HTMLAnchorElement?e.href:null,disabled:'disabled'in e?Boolean(e.disabled):false}))}})()`;const rr=await c.call(\"Runtime.evaluate\",{expression,returnByValue:true,awaitPromise:true});const out=rr?.result?.value??{};const ss=await c.call(\"Page.captureScreenshot\",{format:\"png\"});const bytes=await decodeBase64(String(ss?.data??\"\"));return{...out,screenshot_sha256:await sha256Bytes(bytes),screenshot_bytes:bytes.length};}finally{c.close();}};\n const start=async()=>{const guardrails=config.allowedDomains?.length?{allowedDomains:config.allowedDomains.slice(0,50)}:undefined;const r=await apiJson(`${base}?keep_alive=120000`,{method:\"POST\",body:JSON.stringify(guardrails?{guardrails}:{})});const sessionId=String(r?.sessionId??\"\");if(!sessionId)throw new Error(\"CLOUDFLARE_CREATE_BAD_RESPONSE\");try{const t=await apiJson(`${base}/${encodeURIComponent(sessionId)}/json/new?url=${encodeURIComponent(\"about:blank\")}`,{method:\"PUT\"});const targetId=String(t?.id??\"\");if(!targetId)throw new Error(\"CLOUDFLARE_TARGET_CREATE_FAILED\");const handle=newHandle();states.set(handle,{sessionId,targetId});return{session_id:handle};}catch(e){try{await apiJson(`${base}/${encodeURIComponent(sessionId)}`,{method:\"DELETE\"});}catch{}throw e;}};\n const navigate=async(raw:string,url:string)=>{const s=load(raw),c=await openPage(s);try{await c.call(\"Page.navigate\",{url});await waitReady(c);}finally{c.close();}return await snap(s);};\n const click=async(raw:string,ref:string)=>{const s=load(raw),c=await openPage(s);try{const selector=JSON.stringify(`[data-pb-ref=\"${ref.replaceAll('\"','')}\"]`);const r=await c.call(\"Runtime.evaluate\",{expression:`(()=>{const e=document.querySelector(${selector});if(!e)return false;e.click();return true})()`,returnByValue:true});if(r?.result?.value!==true)throw new Error(\"BROWSER_ELEMENT_NOT_FOUND\");await new Promise(r=>setTimeout(r,100));}finally{c.close();}return await snap(s);};\n const type=async(raw:string,ref:string,text:string,clear:boolean)=>{const s=load(raw),c=await openPage(s);try{const selector=JSON.stringify(`[data-pb-ref=\"${ref.replaceAll('\"','')}\"]`),clearStmt=clear?'e.value=\"\";':'';const r=await c.call(\"Runtime.evaluate\",{expression:`(()=>{const e=document.querySelector(${selector});if(!e||!('value'in e))return false;${clearStmt}e.value+=${JSON.stringify(text)};e.dispatchEvent(new Event('input',{bubbles:true}));e.dispatchEvent(new Event('change',{bubbles:true}));return true})()`,returnByValue:true});if(r?.result?.value!==true)throw new Error(\"BROWSER_ELEMENT_NOT_FOUND\");}finally{c.close();}return await snap(s);};\n const close=async(raw:string)=>{const s=load(raw);await apiJson(`${base}/${encodeURIComponent(s.sessionId)}`,{method:\"DELETE\"});states.delete(raw);return{closed:true};};\n return{start,navigate,snapshot:async(raw:string)=>snap(load(raw)),click,type,close};\n}\n",[208],"54ee860c-06cb-4af1-b743-423c3453afa3","cloudflare_browser_client_v2_test.ts","8c80c7f8-b12e-11f1-91ad-1607ee4eb77e",3,["D",1789494890893],"import { createCloudflareBrowserClientV2 } from './cloudflare_browser_client_v2.ts';\nconst checks:any[]=[];const ok=(n:string,c:any,d?:any)=>{if(!c)throw new Error(`FAIL:${n}:${JSON.stringify(d)}`);checks.push({name:n,pass:true})};\nconst http:any[]=[];const wsOpens:any[]=[];const calls:any[]=[];\nconst fakeFetch=async(url:any,init:any={})=>{http.push({url:String(url),method:init.method??'GET',headers:init.headers??{},body:init.body??null});if((init.method??'GET')==='POST')return new Response(JSON.stringify({success:true,result:{sessionId:'session-1',webSocketDebuggerUrl:'wss://evil.example/signed-secret'}}),{status:200,headers:{'content-type':'application/json'}});if((init.method??'GET')==='PUT')return new Response(JSON.stringify({success:true,result:{id:'target-1',type:'page',url:'about:blank'}}),{status:200,headers:{'content-type':'application/json'}});if((init.method??'GET')==='DELETE')return new Response(JSON.stringify({success:true,result:{status:'closed'}}),{status:200,headers:{'content-type':'application/json'}});return new Response('{}',{status:404});};\nconst fakeWs=async(url:string,headers:Record)=>{wsOpens.push({url,headers});return{call:async(method:string,params:any={})=>{calls.push({method,params});if(method==='Runtime.evaluate'&&String(params.expression).includes('document.readyState'))return{result:{value:'complete'}};if(method==='Runtime.evaluate'&&String(params.expression).includes('querySelectorAll'))return{result:{value:{url:'https://fixture.test/',title:'Fixture',text:'Ready',html:'Ready',elements:[{ref:'pb-in',tag:'input',id:'name',text:'Name'},{ref:'pb-btn',tag:'button',id:'advance',text:'Advance'}]}}};if(method==='Runtime.evaluate')return{result:{value:true}};if(method==='Page.captureScreenshot')return{data:'aGVsbG8='};return{}},close:()=>{}}};\nlet threw=false;try{createCloudflareBrowserClientV2({accountId:'',apiToken:''})}catch{threw=true}ok('credentials_required',threw);\nconst c=createCloudflareBrowserClientV2({accountId:'acct-123',apiToken:'test-secret',allowedDomains:['fixture.test']},{fetch:fakeFetch as any,wsFactory:fakeWs,randomUUID:()=> '11111111-2222-4333-8444-555555555555'});\nconst st=await c.start();ok('opaque_state_prefix',st.session_id.startsWith('cf2_'));ok('state_no_token',!st.session_id.includes('test-secret'));ok('state_ignores_returned_ws_url',!atob(st.session_id.slice(4).replace(/-/g,'+').replace(/_/g,'/').padEnd(Math.ceil(st.session_id.slice(4).length/4)*4,'=')).includes('evil.example'));\nlet s=await c.navigate(st.session_id,'https://fixture.test/');ok('snapshot',s.screenshot_sha256?.length===64&&s.elements?.length===2,s);ok('trusted_ws_origin',wsOpens.every(x=>new URL(x.url).hostname==='api.cloudflare.com'),wsOpens);ok('ws_auth_header',wsOpens.every(x=>String(x.headers.Authorization??'')==='Bearer test-secret'),wsOpens.map(x=>Object.keys(x.headers)));ok('navigate_cdp',calls.some(x=>x.method==='Page.navigate'));\ns=await c.type(st.session_id,'pb-in','Ada',true);ok('type_cdp',calls.some(x=>x.method==='Runtime.evaluate'&&String(x.params.expression).includes('dispatchEvent')));s=await c.click(st.session_id,'pb-btn');ok('click_cdp',calls.some(x=>x.method==='Runtime.evaluate'&&String(x.params.expression).includes('.click()')));\nawait c.close(st.session_id);ok('close_http',http.some(x=>x.method==='DELETE'&&x.url.includes('session-1')));ok('guardrails',JSON.parse(http.find(x=>x.method==='POST')?.body??'{}').guardrails.allowedDomains[0]==='fixture.test');\nconsole.log(JSON.stringify({schema:'CLOUDFLARE_BROWSER_CLIENT_V2_TEST',pass:true,passed:checks.length,total:checks.length,checks},null,2));\n",[215],"717e67a7-5b00-4dd6-ae7a-9592f97eee31","cloudflare_browser_client_v2.ts","8194f706-b12e-11f1-9e66-1607ee4eb77e",["D",1789494872569],"import Ws from \"npm:ws@8.18.3\";\n\ntype Config = { accountId: string; apiToken: string; allowedDomains?: string[] };\ntype Deps = { fetch?: typeof fetch; wsFactory?: (url:string, headers:Record) => Promise; randomUUID?: () => string };\nconst te=new TextEncoder();\nfunction b64u(s:string){const a=te.encode(s);let b=\"\";for(const x of a)b+=String.fromCharCode(x);return btoa(b).replaceAll(\"+\",\"-\").replaceAll(\"/\",\"_\").replace(/=+$/,\"\");}\nfunction unb64u(s:string){const x=s.replaceAll(\"-\",\"+\").replaceAll(\"_\",\"/\").padEnd(Math.ceil(s.length/4)*4,\"=\");const bin=atob(x);const a=new Uint8Array(bin.length);for(let i=0;ix.toString(16).padStart(2,\"0\")).join(\"\");}\nasync function decodeBase64(s:string){const bin=atob(s);const a=new Uint8Array(bin.length);for(let i=0;i){\n const u=new URL(url);\n if(u.protocol!==\"wss:\"||u.hostname!==\"api.cloudflare.com\")throw new Error(\"UNTRUSTED_CDP_WS_ORIGIN\");\n const ws=new Ws(url,{headers});\n await new Promise((resolve,reject)=>{const t=setTimeout(()=>reject(new Error(\"CDP_WS_OPEN_TIMEOUT\")),10000);ws.once(\"open\",()=>{clearTimeout(t);resolve();});ws.once(\"error\",(e:any)=>{clearTimeout(t);reject(new Error(\"CDP_WS_OPEN_ERROR:\"+String(e?.message??e).slice(0,160)));});});\n let next=1;const pending=new Mapvoid;reject:(e:any)=>void;t:any}>();\n ws.on(\"message\",(data:any)=>{let m:any;try{m=JSON.parse(String(data));}catch{return;}if(typeof m?.id!==\"number\")return;const p=pending.get(m.id);if(!p)return;clearTimeout(p.t);pending.delete(m.id);if(m.error)p.reject(new Error(\"CDP_\"+String(m.error?.message??JSON.stringify(m.error))));else p.resolve(m.result??{});});\n const call=(method:string,params:any={})=>new Promise((resolve,reject)=>{const id=next++;const t=setTimeout(()=>{pending.delete(id);reject(new Error(\"CDP_CALL_TIMEOUT:\"+method));},12000);pending.set(id,{resolve,reject,t});ws.send(JSON.stringify({id,method,params}));});\n return{call,close:()=>{try{ws.close();}catch{}}};\n}\n\nexport function createCloudflareBrowserClientV2(config:Config,deps:Deps={}){\n if(!config?.accountId||!config?.apiToken)throw new Error(\"CLOUDFLARE_BROWSER_CREDENTIALS_REQUIRED\");\n const F=deps.fetch??fetch;const wsFactory=deps.wsFactory??defaultWsFactory;const uuid=deps.randomUUID??crypto.randomUUID.bind(crypto);\n const account=encodeURIComponent(config.accountId);\n const base=`https://api.cloudflare.com/client/v4/accounts/${account}/browser-rendering/devtools/browser`;\n const wsBase=`wss://api.cloudflare.com/client/v4/accounts/${account}/browser-rendering/devtools/browser`;\n const auth={Authorization:`Bearer ${config.apiToken}`};\n const apiJson=async(url:string,init:any={})=>{const r=await F(url,{...init,headers:{...auth,\"content-type\":\"application/json\",...(init?.headers??{})}});const text=await r.text();let j:any;try{j=JSON.parse(text);}catch{j=null;}if(!r.ok||j?.success===false)throw new Error(`CLOUDFLARE_API_${r.status}:${String(j?.errors?.[0]?.message??text).slice(0,300)}`);return j?.result??j;};\n const openPage=async(state:any)=>{const url=`${wsBase}/${encodeURIComponent(state.sessionId)}/page/${encodeURIComponent(state.targetId)}`;const c=await wsFactory(url,auth);await c.call(\"Page.enable\",{});await c.call(\"Runtime.enable\",{});return c;};\n const waitReady=async(c:any)=>{const deadline=Date.now()+10000;while(Date.now()setTimeout(r,100));}throw new Error(\"BROWSER_READY_TIMEOUT\");};\n const snap=async(state:any)=>{const c=await openPage(state);try{await waitReady(c);const expression=`(()=>{const els=[...document.querySelectorAll('a,button,input,textarea,select,[role=\"button\"],[tabindex]')].slice(0,120);for(const e of els){if(!e.dataset.pbRef)e.dataset.pbRef='pb_'+crypto.randomUUID().replaceAll('-','').slice(0,16)}return{url:location.href,title:document.title,text:(document.body?.innerText||'').slice(0,20000),html:document.documentElement.outerHTML.slice(0,50000),elements:els.map(e=>({ref:e.dataset.pbRef,tag:e.tagName.toLowerCase(),id:e.id||null,name:e.getAttribute('name'),type:e.getAttribute('type'),text:(e.innerText||e.getAttribute('aria-label')||e.getAttribute('placeholder')||'').trim().slice(0,300),href:e instanceof HTMLAnchorElement?e.href:null,disabled:'disabled'in e?Boolean(e.disabled):false}))}})()`;const rr=await c.call(\"Runtime.evaluate\",{expression,returnByValue:true,awaitPromise:true});const out=rr?.result?.value??{};const ss=await c.call(\"Page.captureScreenshot\",{format:\"png\"});const bytes=await decodeBase64(String(ss?.data??\"\"));return{...out,screenshot_sha256:await sha256Bytes(bytes),screenshot_bytes:bytes.length};}finally{c.close();}};\n const start=async()=>{const guardrails=config.allowedDomains?.length?{allowedDomains:config.allowedDomains.slice(0,50)}:undefined;const r=await apiJson(`${base}?keep_alive=120000`,{method:\"POST\",body:JSON.stringify(guardrails?{guardrails}:{})});const sessionId=String(r?.sessionId??\"\");if(!sessionId)throw new Error(\"CLOUDFLARE_CREATE_BAD_RESPONSE\");const t=await apiJson(`${base}/${encodeURIComponent(sessionId)}/json/new?url=${encodeURIComponent(\"about:blank\")}`,{method:\"PUT\"});const targetId=String(t?.id??\"\");if(!targetId)throw new Error(\"CLOUDFLARE_TARGET_CREATE_FAILED\");return{session_id:\"cf2_\"+b64u(JSON.stringify({v:2,sessionId,targetId,nonce:uuid()}))};};\n const navigate=async(raw:string,url:string)=>{const s=parseState(raw);const c=await openPage(s);try{await c.call(\"Page.navigate\",{url});await waitReady(c);}finally{c.close();}return await snap(s);};\n const click=async(raw:string,ref:string)=>{const s=parseState(raw);const c=await openPage(s);try{const selector=JSON.stringify(`[data-pb-ref=\"${ref.replaceAll('\"','')}\"]`);const r=await c.call(\"Runtime.evaluate\",{expression:`(()=>{const e=document.querySelector(${selector});if(!e)return false;e.click();return true})()`,returnByValue:true});if(r?.result?.value!==true)throw new Error(\"BROWSER_ELEMENT_NOT_FOUND\");await new Promise(r=>setTimeout(r,100));}finally{c.close();}return await snap(s);};\n const type=async(raw:string,ref:string,text:string,clear:boolean)=>{const s=parseState(raw);const c=await openPage(s);try{const selector=JSON.stringify(`[data-pb-ref=\"${ref.replaceAll('\"','')}\"]`);const clearStmt=clear?'e.value=\"\";':'';const r=await c.call(\"Runtime.evaluate\",{expression:`(()=>{const e=document.querySelector(${selector});if(!e||!('value'in e))return false;${clearStmt}e.value+=${JSON.stringify(text)};e.dispatchEvent(new Event('input',{bubbles:true}));e.dispatchEvent(new Event('change',{bubbles:true}));return true})()`,returnByValue:true});if(r?.result?.value!==true)throw new Error(\"BROWSER_ELEMENT_NOT_FOUND\");}finally{c.close();}return await snap(s);};\n const close=async(raw:string)=>{const s=parseState(raw);await apiJson(`${base}/${encodeURIComponent(s.sessionId)}`,{method:\"DELETE\"});return{closed:true};};\n return{start,navigate,snapshot:async(raw:string)=>snap(parseState(raw)),click,type,close};\n}\n",[222],"c03f3841-da07-4f3e-bf2d-2c24bec96d41",["D",1789519857336],[27],"35af3ded-48dc-4538-838b-a44d2d949cef","README.md","737b5da4-b12e-11f1-b298-1607ee4eb77e",1,["D",1789494848904],"Code-only Cloudflare CDP adapter candidate. No secrets or environment variables belong in this project.",[231],"pulls","branches","forks","envVars",{"_244":61,"_246":61},"connections",{"_244":61,"_245":61},"count","unfilledCount","emptyCount",{"_41":230,"_31":231,"_29":232,"_143":-5,"_39":40,"_38":233,"_145":57,"_36":301,"_13":61,"_32":20,"_34":235,"_23":24,"_148":-5,"_262":302,"_26":303},{"_41":227,"_31":27,"_29":30,"_143":-5,"_39":40,"_38":14,"_145":57,"_36":298,"_13":61,"_32":33,"_34":35,"_23":24,"_148":-5,"_262":299,"_26":300},{"_41":221,"_31":222,"_29":223,"_143":-5,"_39":40,"_38":155,"_145":57,"_36":295,"_13":61,"_32":33,"_34":225,"_23":24,"_148":-5,"_262":296,"_26":297},{"_41":214,"_31":215,"_29":216,"_143":-5,"_39":40,"_38":217,"_145":57,"_36":292,"_13":61,"_32":33,"_34":219,"_23":24,"_148":-5,"_262":293,"_26":294},{"_41":207,"_31":208,"_29":209,"_143":-5,"_39":40,"_38":210,"_145":57,"_36":289,"_13":61,"_32":33,"_34":212,"_23":24,"_148":-5,"_262":290,"_26":291},{"_41":200,"_31":201,"_29":202,"_143":-5,"_39":40,"_38":203,"_145":57,"_36":286,"_13":61,"_32":33,"_34":205,"_23":24,"_148":-5,"_262":287,"_26":288},{"_41":193,"_31":194,"_29":195,"_143":-5,"_39":40,"_38":196,"_145":57,"_36":283,"_13":161,"_32":33,"_34":198,"_23":24,"_148":-5,"_262":284,"_26":285},{"_41":186,"_31":187,"_29":188,"_143":-5,"_39":40,"_38":189,"_145":57,"_36":280,"_13":61,"_32":33,"_34":191,"_23":24,"_148":-5,"_262":281,"_26":282},{"_41":179,"_31":180,"_29":181,"_143":-5,"_39":40,"_38":182,"_145":57,"_36":277,"_13":61,"_32":33,"_34":184,"_23":24,"_148":-5,"_262":278,"_26":279},{"_41":172,"_31":173,"_29":174,"_143":-5,"_39":40,"_38":175,"_145":57,"_36":274,"_13":61,"_32":33,"_34":177,"_23":24,"_148":-5,"_262":275,"_26":276},{"_41":165,"_31":166,"_29":167,"_143":-5,"_39":40,"_38":168,"_145":57,"_36":271,"_13":61,"_32":33,"_34":170,"_23":24,"_148":-5,"_262":272,"_26":273},{"_41":158,"_31":159,"_29":160,"_143":-5,"_39":40,"_38":161,"_145":57,"_36":268,"_13":61,"_32":33,"_34":163,"_23":24,"_148":-5,"_262":269,"_26":270},{"_41":150,"_31":151,"_29":152,"_143":-5,"_39":40,"_38":153,"_145":57,"_36":265,"_13":155,"_32":33,"_34":156,"_23":24,"_148":-5,"_262":266,"_26":267},{"_41":140,"_31":141,"_29":142,"_143":-5,"_39":40,"_38":144,"_145":57,"_36":261,"_13":61,"_32":33,"_34":147,"_23":24,"_148":-5,"_262":263,"_26":264},["D",1789497550916],"children",[],[141],["D",1789497525831],[],[151],["D",1789497319444],[],[159],["D",1789497415111],[],[166],["D",1789495064415],[],[173],["D",1789506876658],[],[180],["D",1789506226696],[],[187],["D",1789506892899],[],[194],["D",1789497386620],[],[201],["D",1789497373160],[],[208],["D",1789494890893],[],[215],["D",1789494872569],[],[222],["D",1789519857336],[],[27],["D",1789494848904],[],[231],["D",1789494848860],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":53,"_100":101,"_102":24},{"_13":84,"_31":85,"_41":40,"_86":42,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":43,"_93":94},"ctx",{"_77":-5,"_123":341,"_342":343,"_344":345,"_346":24,"_347":24,"_348":24,"_349":57,"_350":-5,"_351":-7,"_352":-7,"_353":61,"_354":24,"_355":24,"_356":-5,"_357":24,"_358":24,"_359":24,"_360":-5},"ENV",{"_312":313,"_314":315,"_316":85,"_317":318,"_319":320,"_321":322,"_323":324,"_325":326,"_327":328,"_329":330,"_331":332,"_333":334,"_335":336,"_337":338,"_339":340},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v21