Files
gstack/browse/src/cookie-database.ts
T
Garry Tan a84b0b5b6d v1.90.0.0 feat: make browser cookie imports explicit and safe (#2964)
* fix(browse): prepare reliable cookie import wave for validation

* ci: sequence quality and behavior for validation branch

* fix(browse): isolate Windows qualification and preserve native diagnostics

* test(browse): cover cookie workflow quality and isolate Windows user paths

* test(browse): trace native member startup and initialize fresh folders

* fix(browse): keep Windows member stdin alive through EOF

* fix(browse): latch native timeouts and compare contained Edge startup

* test(browse): verify native version metadata and actual Windows argv

* test(browse): qualify Dia import on isolated macOS CI

* fix(browse): require picker origin for session mutations

* fix(browse): bound credential reads through stream completion

* test(browse): inspect owned Windows process arguments natively

* test(evals): preserve passing coverage during cookie repair reruns

* test(browse): isolate Dia qualification in a fresh macOS account

* test(browse): pass bounded integer timeouts to native Mac probes

* test(browse): distinguish Windows profile initialization from containment

* test(browse): await descendant pipe readiness before parent exit

* test(browse): initialize and restore isolated macOS Keychain state

* test(browse): initialize Windows fixture folders before qualification

* test(ci): pin the same Node runtime across Windows checks

* test(browse): distinguish native macOS browser preflight stages

* test(browse): isolate Windows descendant console lifetime

* test(browse): preserve native receipts and identify fixture lock holders

* test(browse): prepare dependency resolution before native Mac worker startup

* test(ci): include lock and close checks in native diagnostics

* test(browse): preserve native owner probe stages and subprocess deadlines

* fix(browse): classify Chromium profile-in-use exit precisely

* test(browse): retain Mac qualification evidence through cleanup failures

* test(browse): bound Mac fixture paths and retire its owned user domain

* test(browse): accept vanished fixture entries without weakening cleanup

* test(browse): identify probe-created macOS user domains safely

* test(browse): observe Mac user domains without targeting them first

* test(browse): use passive fresh-user ownership throughout Mac qualification

* test(browse): distinguish profile and registered-home Keychain lookups

* test(browse): qualify Dia under one registered account home

* test(browse): identify Dia startup and owned process-group failures

* test(browse): classify bounded Dia startup diagnostics without leaking output

* fix(test): preserve native Mac sandboxing and reap owned browser children

* fix(browse): preserve Chromium sandboxing for native profile imports

* test(browse): inspect signed Mach-O architecture without launching Xcode tools

* test(browse): sample pending Dia startup and reap on all cleanup paths

* test(browse): compare protected Dia launches in fresh Bun and Node accounts

* test(browse): inspect isolated Mac GUI readiness without browser access

* v1.90.0.0 fix: bind cookie picker actions to their document

* test: validate cookie guards and fit nested launch fixtures

* ci: configure the bundled Chromium sandbox helper

* fix(browse): classify Playwright authentication timeouts

* test: retain bounded Windows lifecycle diagnostics

* test(cso): reuse bounded NTFS precision candidates

* test(review): handle explicit preservation choices safely

* test(browse): remove owned fixture directories with explicit primitives

* test(review): distinguish descriptive reuse from edit commitments

* test: admit only the approved unscored cookie workflow refusal

* test: keep the Office Hours judge mock export-complete

* fix: keep dependency-free CI planners independent of the model SDK

* test: observe the exact holder after a native fixture unlink failure

* fix: start seeded PTY observations at owned readiness

* test: acquire identity-bound Windows deletion admission before profile resets

* test: preserve qualified Git index bits without authorizing mutations
2026-09-25 12:06:45 -04:00

74 lines
2.6 KiB
TypeScript

import { createRequire } from 'node:module';
const require = createRequire(import.meta.url);
function databaseError(error: unknown): Error & { code: string } {
const detail = error as { errcode?: number; errno?: number; code?: string } | null;
const codes: Record<number, string> = {
5: 'SQLITE_BUSY', 6: 'SQLITE_LOCKED', 8: 'SQLITE_READONLY', 10: 'SQLITE_IOERR',
11: 'SQLITE_CORRUPT', 14: 'SQLITE_CANTOPEN', 26: 'SQLITE_CORRUPT',
};
const number = detail?.errcode ?? detail?.errno;
const code = typeof number === 'number' ? codes[number & 255] ?? 'SQLITE_ERROR'
: Object.values(codes).includes(detail?.code ?? '') ? detail!.code! : 'SQLITE_ERROR';
const message = code === 'SQLITE_BUSY' || code === 'SQLITE_LOCKED'
? 'Cookie database is locked. Close the source browser and retry.'
: 'Cookie database operation failed (' + code + ').';
return Object.assign(new Error(message), { code });
}
export function openCookieDatabase(dbPath: string): {
query(sql: string): { all(...bindings: any[]): unknown[] };
close(): void;
} {
const isBun = typeof process.versions.bun === 'string';
let Database;
try {
const sqlite = require(isBun ? 'bun:sqlite' : 'node:sqlite');
Database = isBun ? sqlite.Database : sqlite.DatabaseSync;
if (typeof Database !== 'function') throw new Error();
} catch {
throw Object.assign(new Error(isBun
? 'Cookie import requires a Bun runtime with SQLite support. Upgrade Bun and retry.'
: 'Cookie import requires Node.js 22.13 or newer with built-in SQLite enabled. Upgrade Node.js or enable SQLite and retry.'), { code: 'sqlite_unavailable' });
}
let database;
try {
database = new Database(dbPath, isBun ? { readonly: true, safeIntegers: true } : { readOnly: true });
} catch (error) {
throw databaseError(error);
}
return {
query(sql) {
let statement;
try {
statement = isBun ? database.query(sql) : database.prepare(sql);
if (!isBun) statement.setReadBigInts(true);
} catch (error) {
throw databaseError(error);
}
return {
all(...bindings) {
try {
return statement.all(...bindings).map((row: Record<string, unknown>) => Object.fromEntries(
Object.entries(row).map(([key, value]) => [key,
typeof value === 'bigint' && Number.isSafeInteger(Number(value)) ? Number(value) : value]),
));
} catch (error) {
throw databaseError(error);
}
},
};
},
close() {
try {
database.close();
} catch (error) {
throw databaseError(error);
}
},
};
}