Function extractGlobalFlags

browse/src/cli.ts:786–836

(rawArgs: string[], env: NodeJS.ProcessEnv)

 * Exported for unit tests.
 */
export function extractGlobalFlags(rawArgs: string[], env: NodeJS.ProcessEnv): GlobalFlags {
  const out: string[] = [];
  let proxyUrl: string | null = null;
  let headed = false;

  for (let i = 0; i < rawArgs.length; i++) {
    const arg = rawArgs[i];
    if (arg === '--proxy') {
      const value = rawArgs[i + 1];
      if (!value) {
        throw new ProxyConfigError(
          'usage: --proxy <scheme://[user:pass@]host:port>',
          '--proxy requires a URL value',
        );
      }
      proxyUrl = value;
      i++;
      continue;
    }
    if (arg.startsWith('--proxy=')) {
      proxyUrl = arg.slice('--proxy='.length);
      continue;
    }
    if (arg === '--headed') { headed = true; continue; }
    out.push(arg);
  }

  // Compose the canonical proxyUrl with creds resolved from argv+env.
  let canonicalProxyUrl: string | null = null;
  if (proxyUrl) {
    const parsed = parseProxyConfig({
      proxyUrl,
      envUser: env.BROWSE_PROXY_USER,
      envPass: env.BROWSE_PROXY_PASS,
    });
    // Re-encode with resolved creds embedded (server reads BROWSE_PROXY_URL
    // from env — env passes to child process safely without ps-aux exposure).
    const rebuilt = new URL(proxyUrl);
    rebuilt.username = parsed.userId ? encodeURIComponent(parsed.userId) : '';
    rebuilt.password = parsed.password ? encodeURIComponent(parsed.password) : '';
    canonicalProxyUrl = rebuilt.toString();
  }

  return {
    args: out,
    proxyUrl: canonicalProxyUrl,
    headed,
    configHash: computeConfigHash({ proxyUrl: canonicalProxyUrl, headed }),
    redactedProxyUrl: redactProxyUrl(canonicalProxyUrl),
  };
}

async function handlePairAgent(state: ServerState, args: string[]): Promise<void> {
  const clientName = parseFlag(args, '--client') || `remote-${Date.now()}`;