@apilift/cli 1.4.32 → 1.4.33

package/dist/apilift-capture-server.js

@@ -19973,6 +19973,8 @@ var CaptureStore = class {
       `);
       if (!hadCandidates) this.db.exec(`INSERT INTO capture_candidates (scope_id,seq,capture_id,entry_json) SELECT e.scope_id,g.first_seq,g.capture_id,e.entry_json FROM capture_entries e JOIN (SELECT scope_id,COALESCE(json_extract(entry_json,'$.captureId'),CAST(seq AS TEXT)) AS capture_id,MIN(seq) AS first_seq,MAX(seq) AS last_seq FROM capture_entries GROUP BY scope_id,capture_id) g ON e.scope_id=g.scope_id AND e.seq=g.last_seq`);
       const columns = this.db.prepare("PRAGMA table_info(scopes)").all();
+      if (!columns.some((column) => column.name === "owner_session")) this.db.exec("ALTER TABLE scopes ADD COLUMN owner_session TEXT");
+      if (!this.db.prepare("PRAGMA table_info(bridge_status)").all().some((column) => column.name === "capabilities_json")) this.db.exec("ALTER TABLE bridge_status ADD COLUMN capabilities_json TEXT NOT NULL DEFAULT '[]'");
       if (!columns.some((column) => column.name === "start_url")) this.db.exec("ALTER TABLE scopes ADD COLUMN start_url TEXT");
       if (!columns.some((column) => column.name === "binding_mode")) this.db.exec("ALTER TABLE scopes ADD COLUMN binding_mode TEXT");
       if (!columns.some((column) => column.name === "retained_at")) this.db.exec("ALTER TABLE scopes ADD COLUMN retained_at REAL");
@@ -20016,8 +20018,10 @@ var CaptureStore = class {
   }
   releaseStaleScope(id2) {
     const capture = this.db.prepare("SELECT kind,window_json FROM scopes WHERE id=?").get(id2);
-    if (capture?.kind === "capture" && !capture.window_json && this.db.prepare("SELECT 1 FROM capture_candidates WHERE scope_id=? LIMIT 1").get(id2)) this.retainScope(id2);
-    else this.db.prepare("DELETE FROM scopes WHERE id=?").run(id2);
+    if (capture?.kind === "capture" && this.db.prepare("SELECT 1 FROM capture_candidates WHERE scope_id=? LIMIT 1").get(id2)) {
+      this.db.prepare("UPDATE scopes SET window_json=NULL WHERE id=?").run(id2);
+      this.retainScope(id2);
+    } else this.db.prepare("DELETE FROM scopes WHERE id=?").run(id2);
     this.emit();
   }
   row(id2, freshOwner = false) {
@@ -20059,11 +20063,12 @@ var CaptureStore = class {
     this.prune();
     return this.transaction(() => {
       if (input2.kind !== "inspect") {
-        const held = this.db.prepare("SELECT id FROM scopes WHERE page_origin=? AND retained_at IS NULL AND kind IN ('execute','capture') LIMIT 1").get(input2.pageOrigin);
-        if (held) throw new CaptureError("scope-busy", "This page origin already has an active execute or capture scope");
+        const held = this.db.prepare("SELECT id FROM scopes WHERE page_origin=? AND retained_at IS NULL AND kind IN ('execute','capture') AND (? IS NULL OR tab_selector IS NULL OR tab_selector=?) LIMIT 1").get(input2.pageOrigin, input2.tabSelector ?? null, input2.tabSelector ?? null);
+        if (held) throw new CaptureError("scope-busy", "This tab already has an active execute or capture scope");
       }
       const now = this.clock(), id2 = randomUUID(), leaseId = input2.kind === "inspect" ? null : randomUUID(), expiresAt = now + scopeTtl[input2.kind];
       this.db.prepare("INSERT INTO scopes (id,kind,app_id,context_id,page_origin,tab_selector,start_url,binding_mode,lease_id,owner_pid,owner_started_at,expires_at,activated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?)").run(id2, input2.kind, input2.appId, input2.contextId, input2.pageOrigin, input2.tabSelector ?? null, input2.startUrl ?? null, input2.bindingMode ?? null, leaseId, input2.ownerPid, input2.ownerStartedAt, expiresAt, now);
+      if (input2.ownerSession) this.db.prepare("UPDATE scopes SET owner_session=? WHERE id=?").run(input2.ownerSession, id2);
       this.emit();
       return { kind: input2.kind, id: id2, pageOrigin: input2.pageOrigin, ...leaseId ? { leaseId } : {}, ...input2.tabSelector ? { tabSelector: input2.tabSelector } : {}, ...input2.startUrl ? { startUrl: input2.startUrl } : {}, ...input2.bindingMode ? { bindingMode: input2.bindingMode } : {}, expiresAt: new Date(expiresAt).toISOString(), activatedAt: now };
     });
@@ -20082,8 +20087,8 @@ var CaptureStore = class {
   }
   scopes() {
     this.prune();
-    const rows = this.db.prepare("SELECT id,kind,page_origin,tab_selector,start_url,binding_mode,lease_id,expires_at,activated_at,ack_through,window_json FROM scopes WHERE retained_at IS NULL ORDER BY activated_at").all();
-    return rows.map((row) => ({ kind: row.kind, id: String(row.id), pageOrigin: String(row.page_origin), ...row.lease_id ? { leaseId: String(row.lease_id), ackThrough: Number(row.ack_through) } : {}, ...row.tab_selector ? { tabSelector: String(row.tab_selector) } : {}, ...row.start_url ? { startUrl: String(row.start_url) } : {}, ...row.binding_mode ? { bindingMode: row.binding_mode } : {}, expiresAt: new Date(Number(row.expires_at)).toISOString(), activatedAt: Number(row.activated_at), ...row.window_json ? { window: readJson(row.window_json) } : {} }));
+    const rows = this.db.prepare("SELECT id,kind,page_origin,tab_selector,start_url,binding_mode,lease_id,expires_at,activated_at,ack_through,window_json,owner_session FROM scopes WHERE retained_at IS NULL ORDER BY activated_at").all();
+    return rows.map((row) => ({ kind: row.kind, id: String(row.id), pageOrigin: String(row.page_origin), ...row.lease_id ? { leaseId: String(row.lease_id), ackThrough: Number(row.ack_through) } : {}, ...row.tab_selector ? { tabSelector: String(row.tab_selector) } : {}, ...row.start_url ? { startUrl: String(row.start_url) } : {}, ...row.binding_mode ? { bindingMode: row.binding_mode } : {}, expiresAt: new Date(Number(row.expires_at)).toISOString(), activatedAt: Number(row.activated_at), ...row.window_json ? { window: readJson(row.window_json) } : {}, ...row.owner_session ? { ownerSession: String(row.owner_session) } : {} }));
   }
   candidates(scopeId) {
     const row = this.row(scopeId);
@@ -20129,10 +20134,14 @@ var CaptureStore = class {
   }
   active() {
     this.prune();
-    return Boolean(this.db.prepare("SELECT 1 FROM scopes WHERE retained_at IS NULL LIMIT 1").get() || this.db.prepare("SELECT 1 FROM jobs LIMIT 1").get() || this.db.prepare("SELECT 1 FROM scopes s WHERE s.retained_at>? AND (EXISTS (SELECT 1 FROM capture_candidates c WHERE c.scope_id=s.id AND json_extract(c.entry_json,'$.pending')=1) OR EXISTS (SELECT 1 FROM capture_body_refs r LEFT JOIN blobs b ON b.scope_id=r.scope_id AND b.digest=r.digest WHERE r.scope_id=s.id AND COALESCE(b.complete,0)=0)) LIMIT 1").get(this.clock() - 2e4));
+    return Boolean(this.db.prepare("SELECT 1 FROM scopes WHERE retained_at IS NULL LIMIT 1").get() || this.db.prepare("SELECT 1 FROM jobs j JOIN scopes s ON s.id=j.scope_id WHERE s.retained_at IS NULL LIMIT 1").get() || this.db.prepare("SELECT 1 FROM scopes s WHERE s.retained_at>? AND (EXISTS (SELECT 1 FROM capture_candidates c WHERE c.scope_id=s.id AND json_extract(c.entry_json,'$.pending')=1) OR EXISTS (SELECT 1 FROM capture_body_refs r LEFT JOIN blobs b ON b.scope_id=r.scope_id AND b.digest=r.digest WHERE r.scope_id=s.id AND COALESCE(b.complete,0)=0)) LIMIT 1").get(this.clock() - 2e4));
   }
-  bridgeReady(version2) {
-    this.db.prepare("INSERT INTO bridge_status(id,version,updated_at) VALUES(1,?,?) ON CONFLICT(id) DO UPDATE SET version=excluded.version,updated_at=excluded.updated_at").run(version2, this.clock());
+  bridgeReady(version2, capabilities = []) {
+    this.db.prepare("INSERT INTO bridge_status(id,version,updated_at,capabilities_json) VALUES(1,?,?,?) ON CONFLICT(id) DO UPDATE SET version=excluded.version,updated_at=excluded.updated_at,capabilities_json=excluded.capabilities_json").run(version2, this.clock(), json3(capabilities));
+  }
+  bridgeCapabilities() {
+    const row = this.db.prepare("SELECT capabilities_json FROM bridge_status WHERE id=1 AND updated_at>?").get(this.clock() - 6e4);
+    return row ? readJson(row.capabilities_json) : [];
   }
   async changes(after, waitMs) {
     if (this.revision !== after || waitMs <= 0) return { revision: this.revision };
@@ -20172,6 +20181,8 @@ var CaptureStore = class {
         if (request2.payload.origin !== row.page_origin || new URL(request2.payload.url).origin !== row.page_origin) throw new CaptureError("origin-mismatch", "Claimed tab does not match the scope origin");
         const found = this.candidates(scopeId).find((item) => item.selector === request2.payload.tabSelector && item.tabId === request2.payload.tabId);
         if (!found || row.tab_selector && row.tab_selector !== found.selector) throw new CaptureError("tab-gone", "The selected tab is no longer available");
+        const held = this.db.prepare("SELECT id FROM scopes WHERE id<>? AND retained_at IS NULL AND claim_tab_id=? AND claim_client_id=? LIMIT 1").get(scopeId, found.tabId, request2.payload.clientId);
+        if (held) throw new CaptureError("scope-busy", "Another live scope owns the selected physical tab");
         this.db.prepare("UPDATE scopes SET claim_tab_id=?,claim_selector=?,claim_client_id=? WHERE id=?").run(found.tabId, found.selector, request2.payload.clientId, scopeId);
         this.emit();
         return { ackThrough: Number(row.ack_through), captureBatchMax: 32 };
@@ -20180,7 +20191,7 @@ var CaptureStore = class {
         if (row.kind === "inspect") throw new CaptureError("inspect-only", "Inspect scopes have no claim heartbeat");
         if (row.claim_client_id && request2.payload.clientId !== row.claim_client_id) throw new CaptureError("client-mismatch", "Another extension client owns this claim");
         if (request2.payload.origin && request2.payload.origin !== row.page_origin) throw new CaptureError("origin-mismatch", "Heartbeat origin does not match the scope");
-        this.db.prepare("UPDATE scopes SET expires_at=? WHERE id=?").run(row.kind === "capture" && !row.window_json ? Math.min(Number(row.expires_at), now + 12e4) : now + scopeTtl[row.kind], scopeId);
+        this.db.prepare("UPDATE scopes SET expires_at=? WHERE id=?").run(row.kind === "capture" ? Math.min(Number(row.activated_at) + scopeTtl.capture, row.window_json ? now + scopeTtl.capture : now + 12e4) : now + scopeTtl.execute, scopeId);
         if (request2.payload.lost) this.db.prepare("UPDATE scopes SET claim_tab_id=NULL,claim_selector=NULL WHERE id=?").run(scopeId);
         return { ackThrough: Number(row.ack_through), captureBatchMax: 32 };
       }
@@ -20319,13 +20330,13 @@ async function startCaptureServer(options) {
         return;
       }
       if (path === "/scopes" && request2.method === "GET") {
-        send(response, 200, { scopes: store.scopes() });
+        send(response, 200, { scopes: store.scopes(), extensionCapabilities: store.bridgeCapabilities() });
         return;
       }
       if (path === "/bridge/ready" && request2.method === "POST") {
         const body2 = object2(await readBody(request2));
-        if (typeof body2.version !== "string") throw new CaptureError("invalid-bridge-version", "Native host version is required");
-        store.bridgeReady(body2.version);
+        if (typeof body2.version !== "string" || body2.capabilities !== void 0 && (!Array.isArray(body2.capabilities) || body2.capabilities.some((value) => typeof value !== "string"))) throw new CaptureError("invalid-bridge-version", "Native host version and supported capabilities are required");
+        store.bridgeReady(body2.version, body2.capabilities);
         send(response, 200, { ok: true });
         return;
       }

package/dist/apilift-collector.js

@@ -7208,6 +7208,7 @@ var LocalState = class {
     if (version2.user_version < 4) {
       this.db.exec("BEGIN EXCLUSIVE; CREATE TABLE pending_execution_report (id TEXT PRIMARY KEY, report_json TEXT NOT NULL, created_at TEXT NOT NULL); PRAGMA user_version=4; COMMIT");
     }
+    this.db.exec("CREATE TABLE IF NOT EXISTS browser_binding (agent_session_id TEXT NOT NULL, app_id TEXT NOT NULL, tab_selector TEXT NOT NULL, PRIMARY KEY(agent_session_id,app_id))");
   }
   installation() {
     const row = this.db.prepare("SELECT id, token, account_id, workspace_id FROM installation LIMIT 1").get();
@@ -7232,9 +7233,16 @@ var LocalState = class {
     this.db.prepare("INSERT INTO use_session (agent_session_id, app_id, context_json, credentials_json) VALUES (?, ?, ?, ?) ON CONFLICT(agent_session_id, app_id) DO UPDATE SET context_json=excluded.context_json, credentials_json=excluded.credentials_json").run(value.agentSessionId, value.appId, JSON.stringify(value.context), JSON.stringify(value.credentials));
   }
   releaseUseSession(agentSessionId, appId) {
+    this.db.prepare("DELETE FROM browser_binding WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
     this.db.prepare("DELETE FROM use_session WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
     this.db.prepare("DELETE FROM selected_app WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
   }
+  browserTab(agentSessionId, appId) {
+    return this.db.prepare("SELECT tab_selector FROM browser_binding WHERE agent_session_id=? AND app_id=?").get(agentSessionId, appId)?.tab_selector;
+  }
+  selectBrowserTab(agentSessionId, appId, tab) {
+    this.db.prepare("INSERT INTO browser_binding VALUES (?,?,?) ON CONFLICT(agent_session_id,app_id) DO UPDATE SET tab_selector=excluded.tab_selector").run(agentSessionId, appId, tab);
+  }
   selectedApp(agentSessionId) {
     const row = this.db.prepare("SELECT app_id, slug, title FROM selected_app WHERE agent_session_id=?").get(agentSessionId);
     return row ? { agentSessionId, appId: row.app_id, slug: row.slug, title: row.title } : null;

package/dist/apilift-native-host.js

@@ -9211,6 +9211,7 @@ var LocalState = class {
     if (version2.user_version < 4) {
       this.db.exec("BEGIN EXCLUSIVE; CREATE TABLE pending_execution_report (id TEXT PRIMARY KEY, report_json TEXT NOT NULL, created_at TEXT NOT NULL); PRAGMA user_version=4; COMMIT");
     }
+    this.db.exec("CREATE TABLE IF NOT EXISTS browser_binding (agent_session_id TEXT NOT NULL, app_id TEXT NOT NULL, tab_selector TEXT NOT NULL, PRIMARY KEY(agent_session_id,app_id))");
   }
   installation() {
     const row = this.db.prepare("SELECT id, token, account_id, workspace_id FROM installation LIMIT 1").get();
@@ -9235,9 +9236,16 @@ var LocalState = class {
     this.db.prepare("INSERT INTO use_session (agent_session_id, app_id, context_json, credentials_json) VALUES (?, ?, ?, ?) ON CONFLICT(agent_session_id, app_id) DO UPDATE SET context_json=excluded.context_json, credentials_json=excluded.credentials_json").run(value.agentSessionId, value.appId, JSON.stringify(value.context), JSON.stringify(value.credentials));
   }
   releaseUseSession(agentSessionId, appId) {
+    this.db.prepare("DELETE FROM browser_binding WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
     this.db.prepare("DELETE FROM use_session WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
     this.db.prepare("DELETE FROM selected_app WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
   }
+  browserTab(agentSessionId, appId) {
+    return this.db.prepare("SELECT tab_selector FROM browser_binding WHERE agent_session_id=? AND app_id=?").get(agentSessionId, appId)?.tab_selector;
+  }
+  selectBrowserTab(agentSessionId, appId, tab) {
+    this.db.prepare("INSERT INTO browser_binding VALUES (?,?,?) ON CONFLICT(agent_session_id,app_id) DO UPDATE SET tab_selector=excluded.tab_selector").run(agentSessionId, appId, tab);
+  }
   selectedApp(agentSessionId) {
     const row = this.db.prepare("SELECT app_id, slug, title FROM selected_app WHERE agent_session_id=?").get(agentSessionId);
     return row ? { agentSessionId, appId: row.app_id, slug: row.slug, title: row.title } : null;
@@ -9269,7 +9277,7 @@ var LocalState = class {
 };
 
 // src/native-host/host.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import { readFileSync as readFileSync4, rmSync as rmSync2 } from "node:fs";
 import { join as join3 } from "node:path";
 
@@ -29838,8 +29846,16 @@ function createCliApi(baseUrl, fetcher = fetch, token, sessionId) {
   return createApiClient(baseUrl, transport);
 }
 
-// src/capture-server/client.ts
+// src/session.ts
 import { createHash } from "node:crypto";
+function apiSessionId(installationId, session) {
+  if (!session) return void 0;
+  const hex3 = createHash("sha256").update("apilift-api-session/v1\0").update(installationId).update("\0").update(session.id).digest("hex");
+  return `${hex3.slice(0, 8)}-${hex3.slice(8, 12)}-5${hex3.slice(13, 16)}-a${hex3.slice(17, 20)}-${hex3.slice(20, 32)}`;
+}
+
+// src/capture-server/client.ts
+import { createHash as createHash2 } from "node:crypto";
 import { chmodSync as chmodSync2, existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync } from "node:fs";
 import { dirname, join as join2 } from "node:path";
 import { DatabaseSync as DatabaseSync2 } from "node:sqlite";
@@ -29868,8 +29884,8 @@ var CaptureServerClient = class {
   scopes() {
     return this.call("GET", "/scopes");
   }
-  bridgeReady(version2) {
-    return this.call("POST", "/bridge/ready", { version: version2 }).then(() => {
+  bridgeReady(version2, capabilities = []) {
+    return this.call("POST", "/bridge/ready", { version: version2, capabilities }).then(() => {
     });
   }
   candidates(id2) {
@@ -29889,7 +29905,7 @@ var CaptureServerClient = class {
       throw Object.assign(new Error(issue2.error?.message ?? `Capture server HTTP ${response.status}`), { code: issue2.error?.code ?? "capture-server-error" });
     }
     const bytes = Buffer.from(await response.arrayBuffer());
-    if (createHash("sha256").update(bytes).digest("hex") !== digest) throw Object.assign(new Error("Selected body digest does not match stored bytes"), { code: "blob-integrity" });
+    if (createHash2("sha256").update(bytes).digest("hex") !== digest) throw Object.assign(new Error("Selected body digest does not match stored bytes"), { code: "blob-integrity" });
     return bytes;
   }
   openScope(input2) {
@@ -29976,7 +29992,7 @@ function installedCaptureVersion(script) {
 }
 
 // src/discovery/credential-draft.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { readFileSync as readFileSync3 } from "node:fs";
 
 // ../../node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/scanner.js
@@ -30870,6 +30886,7 @@ function parseDraftEnvelope(source) {
   if (value.dependencies !== void 0 && !object2(value.dependencies)) issues.push({ path: "/dependencies", message: "Dependencies must be an object" });
   if (value.verification !== void 0 && !object2(value.verification)) issues.push({ path: "/verification", message: "Verification settings must be an object" });
   if (value.capture !== void 0 && !object2(value.capture)) issues.push({ path: "/capture", message: "Capture settings must be an object" });
+  if (object2(value.capture) && value.capture.tab !== void 0 && (typeof value.capture.tab !== "string" || value.capture.tab.length > 160)) issues.push({ path: "/capture/tab", message: "Use a tab selector returned by browser tabs, or leave it empty to use the session selection" });
   if (issues.length) return { issues };
   return { envelope: value, issues };
 }
@@ -30914,7 +30931,7 @@ function readCredentialDraft(filePath) {
   }
   const transport = checked.definition;
   if (!transport.description.trim()) throw new Error(`Research credential acquisition and edit /definition/description in ${filePath}. Run discover check before secure setup`);
-  return { transport, fingerprint: createHash2("sha256").update(canonicalJson(transport)).digest("hex") };
+  return { transport, fingerprint: createHash3("sha256").update(canonicalJson(transport)).digest("hex") };
 }
 
 // src/native-host/credentials.ts
@@ -31401,12 +31418,15 @@ var NativeHost = class {
   state;
   analytics;
   helloDone = false;
+  extensionCapabilities = [];
+  recordingHeartbeatAt = 0;
+  recordingHeartbeatPending = false;
   reportedReady = false;
   stopped = false;
   client;
   registryCache;
   installationKey() {
-    return createHash3("sha256").update(JSON.stringify(this.state.installation())).digest("hex");
+    return createHash4("sha256").update(JSON.stringify(this.state.installation())).digest("hex");
   }
   lanes = { control: [], scope: [], binding: [], metadata: [], blob: [], poll: [] };
   admittedAt = /* @__PURE__ */ new WeakMap();
@@ -31573,6 +31593,7 @@ var NativeHost = class {
       if (this.options.registry || this.options.fetcher) void this.publishReadiness(registry2);
       else this.refreshRegistry();
       this.helloDone = true;
+      this.extensionCapabilities = request2.payload.capabilities;
       if (!this.restartTimer) {
         this.restartTimer = setInterval(() => {
           void this.checkRestart();
@@ -31592,7 +31613,10 @@ var NativeHost = class {
     if (request2.operation === "scopes") {
       const client2 = await this.capture();
       const scopes = await client2.scopes();
-      if (!client2.legacyBridge) await client2.bridgeReady?.(this.options.version);
+      if (this.stopped) return;
+      void this.heartbeatRecordingSessions(scopes.scopes).catch(() => {
+      });
+      if (!client2.legacyBridge) await client2.bridgeReady?.(this.options.version, this.extensionCapabilities);
       this.analytics.recovered();
       if (!this.reportedReady) {
         this.reportedReady = true;
@@ -31606,7 +31630,11 @@ var NativeHost = class {
       if (registry2 && !this.options.registry && !this.options.fetcher) this.refreshRegistry();
       if (!this.state.installation()) this.registryCache = void 0;
       if (!this.stopped) this.analytics.updateIdentity(registry2?.identity ?? null);
-      return { scopes: scopes.scopes, ...registry2?.identity ? { identity: registry2.identity } : {} };
+      return { scopes: scopes.scopes.map((scope2) => {
+        const wire = { ...scope2 };
+        delete wire.ownerSession;
+        return wire;
+      }), ...registry2?.identity ? { identity: registry2.identity } : {} };
     }
     if (request2.operation.startsWith("credentials.")) {
       const payload = request2.payload;
@@ -31674,6 +31702,27 @@ var NativeHost = class {
       }
     }
   }
+  async heartbeatRecordingSessions(scopes) {
+    if (this.stopped) return;
+    const installation = this.state.installation();
+    const owners = [...new Set(scopes.filter((scope2) => scope2.kind === "capture" && scope2.window && scope2.ownerSession).map((scope2) => scope2.ownerSession))];
+    if (!installation || !owners.length || this.recordingHeartbeatPending || Date.now() - this.recordingHeartbeatAt < 3e4) return;
+    this.recordingHeartbeatAt = Date.now();
+    this.recordingHeartbeatPending = true;
+    try {
+      const api = createCliApi(this.options.siteUrl, this.options.fetcher ?? fetch, installation.token);
+      for (const owner of owners.slice(0, 100)) {
+        if (this.stopped) break;
+        const agent2 = owner.startsWith("claude:") ? "claude" : "codex";
+        try {
+          await api.call("acquireSession", { params: { id: apiSessionId(installation.id, { id: owner, agent: agent2 }) }, body: { purpose: "discovery" } });
+        } catch {
+        }
+      }
+    } finally {
+      this.recordingHeartbeatPending = false;
+    }
+  }
   fatal(error62) {
     if (this.helloDone) this.analytics.failure(publicError(error62).code, "unknown", "framing");
     process.stderr.write(`${publicError(error62).code}: ${error62.message}
@@ -31692,7 +31741,7 @@ var NativeHost = class {
   }
 };
 function hostFingerprint(script) {
-  return createHash3("sha256").update(readFileSync4(script)).digest("hex");
+  return createHash4("sha256").update(readFileSync4(script)).digest("hex");
 }
 
 // src/capture-server/demand.ts

package/dist/apilift.js

@@ -28571,7 +28571,7 @@ var init_registry = __esm({
       credentialsAttach: { path: ["credentials", "attach"], min: 3, max: 3 },
       transportsShow: { path: ["transports", "show"], min: 1, max: 2 },
       browserCheck: { path: ["browser", "check"], min: 1, max: 1 },
-      browserTabs: { path: ["browser", "tabs"], min: 1, max: 1 },
+      browserTabs: { path: ["browser", "tabs"], min: 1, max: 1, values: ["select"] },
       contextSet: { path: ["context", "set"], min: 2, max: 2, values: ["app"] },
       contextShow: { path: ["context", "show"], min: 0, max: 0, values: ["app"] },
       contextUnset: { path: ["context", "unset"], min: 1, max: 1, values: ["app"] },
@@ -30228,6 +30228,7 @@ function parseDraftEnvelope(source) {
   if (value.dependencies !== void 0 && !object3(value.dependencies)) issues.push({ path: "/dependencies", message: "Dependencies must be an object" });
   if (value.verification !== void 0 && !object3(value.verification)) issues.push({ path: "/verification", message: "Verification settings must be an object" });
   if (value.capture !== void 0 && !object3(value.capture)) issues.push({ path: "/capture", message: "Capture settings must be an object" });
+  if (object3(value.capture) && value.capture.tab !== void 0 && (typeof value.capture.tab !== "string" || value.capture.tab.length > 160)) issues.push({ path: "/capture/tab", message: "Use a tab selector returned by browser tabs, or leave it empty to use the session selection" });
   if (issues.length) return { issues };
   return { envelope: value, issues };
 }
@@ -30267,7 +30268,7 @@ function draftTemplate(kind) {
     app: { creation: { visibility: "private" }, definition: { title: "", description: "", origin: "", category: "other" } },
     entity: { definition: { title: "", description: "" } },
     action: { definition: { title: "", description: "", effect: "read", inputs: { type: "object", properties: {}, additionalProperties: false }, request: { method: "GET", url: "" }, response: { schema: { type: "object", properties: {} } } }, dependencies: { transport: "" }, verification: { inputs: {}, review: "pending", notes: "" }, capture: { tab: "", authField: "", authScope: "" } },
-    transport: { definition: { title: "", description: "", mode: "direct", baseUrl: "", allowedOrigins: [], credentials: [], probes: {} }, dependencies: {}, verification: { inputs: {}, probeOrigin: "", review: "pending", notes: "" } },
+    transport: { definition: { title: "", description: "", mode: "direct", baseUrl: "", allowedOrigins: [], credentials: [], probes: {} }, dependencies: {}, verification: { inputs: {}, probeOrigin: "", review: "pending", notes: "" }, capture: { tab: "" } },
     "browser-page": { definition: { title: "", description: "", pageOrigin: "", startUrl: "" } }
   };
   const probeGuidance = kind === "transport" ? [
@@ -30284,8 +30285,9 @@ function draftTemplate(kind) {
     "// A locator hypothesis is not proof. Never copy a token value; verify the browser connection with discover run before accepting it.",
     ""
   ].join("\n") : "";
+  const tabGuidance = ["action", "transport"].includes(kind) ? "// capture.tab is a selector returned by browser tabs; it selects the same signed-in Chrome tab for capture and discover run, including connection probes. Leave other sessions' tabs untouched.\n" : "";
   const captureGuidance = kind === "action" ? '// Request JSON/query uses typed {"$input":"name"} bindings; URL segments use {input.name}. Resolve every {unresolved.N} marker from retained evidence before running.\n// Mutation proof compares a readback path with exactly one input, primary result path or internal JSON value: equals: [{"path":"/ready","value":true}]. Public literals require semantic review; fixed proof expectations are not caller flags.\n// After selecting a captured request, discover capture auth runs a bounded default search without authField or authScope. Set either only to narrow an observed field or location; browser-managed cookies need no locator.\n' : "";
-  return `${head}${probeGuidance}${captureGuidance}${JSON.stringify(templates[kind], null, 2)}
+  return `${head}${probeGuidance}${tabGuidance}${captureGuidance}${JSON.stringify(templates[kind], null, 2)}
 `;
 }
 var browserLocatorExample, names, object3, pointer;
@@ -31282,8 +31284,8 @@ var init_client2 = __esm({
       scopes() {
         return this.call("GET", "/scopes");
       }
-      bridgeReady(version2) {
-        return this.call("POST", "/bridge/ready", { version: version2 }).then(() => {
+      bridgeReady(version2, capabilities = []) {
+        return this.call("POST", "/bridge/ready", { version: version2, capabilities }).then(() => {
         });
       }
       candidates(id2) {
@@ -31383,6 +31385,17 @@ var init_demand = __esm({
 // src/commands/browser.ts
 import { realpathSync } from "node:fs";
 import { dirname as dirname3, join as join6 } from "node:path";
+async function checkTabOwnership(client, origin, tab, app2, prefix) {
+  const state = await client.scopes();
+  const active2 = state.scopes.filter((scope2) => scope2.pageOrigin === origin && scope2.kind !== "inspect");
+  const held = active2.find((scope2) => !scope2.tabSelector || scope2.tabSelector === tab);
+  if (held) {
+    const ownerLabel = held.ownerSession?.split(":label:")[1];
+    const settlement = held.kind === "capture" ? ownerLabel ? `Ask the owner to run apilift --session ${ownerLabel} discover capture stop or apilift --session ${ownerLabel} discover capture cancel` : "Ask the owning session to stop or cancel its recording" : "Wait for the owning command to finish or its lease to expire";
+    throw new BrowserControlError(`The selected tab has a live ${held.kind} lease${held.ownerSession ? ` owned by ${held.ownerSession}` : ""}, started ${new Date(held.activatedAt).toISOString()}, expires ${held.expiresAt}. ${settlement}; leave its tab open. For independent work, open another signed-in Chrome tab, start a distinct worker with apilift --session <new-worker-label> apps update ${app2}, list tabs with apilift --session <new-worker-label> browser tabs ${app2}, then bind a returned selector with apilift --session <new-worker-label> browser tabs ${app2} --select <returned-tab-id>. Capture and execution use that worker's selected tab`, "tab-owned");
+  }
+  if (active2.length && !state.extensionCapabilities?.includes("tab-scopes-v1")) throw new BrowserControlError(`The browser bridge has not advertised independent-tab support. Update the CLI with apilift update and Apilift Companion in Chrome. Leave the other session's tab open; after its command finishes, retry ${prefix} browser check ${app2} and ${prefix} discover run`, "extension-update-required");
+}
 async function browserContext(api, appId) {
   const app2 = await api.call("getApp", { params: { app: appId } });
   const transports = app2.transports;
@@ -31427,7 +31440,7 @@ async function inspectTabs(client, appId, contextId, pageOrigin) {
     await client.closeScope(scope2.id);
   }
 }
-async function handleBrowser(invocation, api, _state, session, root) {
+async function handleBrowser(invocation, api, state, session, root) {
   const appRef = invocation.positionals[0];
   if (!session) return fail(`A stable agent identity is required for browser work. Use --session <worker-label>. No browser scope was opened.
 `, 2);
@@ -31436,8 +31449,10 @@ async function handleBrowser(invocation, api, _state, session, root) {
   if (!context) return fail(`browser-page-unselected \u2014 ${app2.title} has no unambiguous published browser page. Publish one page or a browser connection that selects its page before browser work.
 `);
   let candidates;
+  let client;
   try {
-    candidates = await inspectTabs(await captureClient(root), app2.id, context.name, context.pageOrigin);
+    client = await captureClient(root);
+    candidates = await inspectTabs(client, app2.id, context.name, context.pageOrigin);
   } catch (error62) {
     return fail(`extension-unavailable \u2014 ${error62 instanceof Error ? error62.message : "Chrome did not respond"}. Check native host and extension setup with ${command(invocation, "doctor")}.
 `);
@@ -31446,11 +31461,23 @@ async function handleBrowser(invocation, api, _state, session, root) {
 If the tab is already open, recheck the browser connection: ${command(invocation, "setup continue")}
 No app request was sent. Agent browser-tool control and sign-in remain unverified.
 `);
-  if (invocation.key === "browserTabs") return ok(`Tabs reported by the extension:
+  if (invocation.key === "browserTabs") {
+    const selected = invocation.options.select;
+    if (selected) {
+      if (!candidates.some((candidate2) => candidate2.selector === selected)) return fail(`The selected tab was not reported. List current tabs: ${command(invocation, `browser tabs ${app2.slug}`)}. No binding changed.
+`, 2);
+      state.selectBrowserTab(session.id, app2.id, selected);
+      return ok(`Selected ${selected} for ${app2.title} in this agent session. Capture, connection probes and published action execution use this tab. An explicit capture.tab in a draft overrides this choice. No recording started and no app request was sent.
+`);
+    }
+    const scopes = (await client.scopes()).scopes.filter((scope2) => scope2.pageOrigin === context.pageOrigin && scope2.kind !== "inspect");
+    return ok(`Tabs reported by the extension:
 ${candidates.map((item) => `  ${item.selector} \u2014 ${item.title}${item.active ? " (active)" : ""}`).join("\n")}
 
-Set capture.tab in the current draft to the intended tab ID. Do not infer the correct tab from an example ID.
-`);
+Select the intended returned tab for capture and execution in this session: ${command(invocation, `browser tabs ${app2.slug} --select <returned-tab-id>`)}. A draft's capture.tab overrides the session choice. Do not infer the correct tab from an example ID.
+${scopes.map((scope2) => `Active ${scope2.kind} lease: ${scope2.tabSelector ?? "unselected tab"}; owner ${scope2.ownerSession ?? "not recorded"}; started ${new Date(scope2.activatedAt).toISOString()}; expires ${scope2.expiresAt}. Ask its owning session to stop/cancel before reusing that tab.
+`).join("")}`);
+  }
   if (candidates.length > 1) return ok(`Several ${app2.title} tabs match. No tab was selected and recording did not start.
 List them: ${command(invocation, `browser tabs ${app2.slug}`)}
 Choose the intended reported selector in the current draft.
@@ -31459,7 +31486,7 @@ Choose the intended reported selector in the current draft.
 Agent browser-tool control and ${app2.title} sign-in are not established by this check. Use your browser tools to inspect the actual page before observing an operation.
 `);
 }
-var ok, fail, command;
+var ok, fail, command, BrowserControlError;
 var init_browser = __esm({
   "src/commands/browser.ts"() {
     "use strict";
@@ -31469,6 +31496,13 @@ var init_browser = __esm({
     ok = (stdout) => ({ stdout, stderr: "", exitCode: 0 });
     fail = (stderr, exitCode = 5) => ({ stdout: "", stderr, exitCode });
     command = (invocation, text2) => `apilift${invocation.sessionLabel ? ` --session ${invocation.sessionLabel}` : ""} ${text2}`;
+    BrowserControlError = class extends Error {
+      constructor(message2, code, dispatched = false) {
+        super(message2);
+        this.code = code;
+        this.dispatched = dispatched;
+      }
+    };
   }
 });
 
@@ -31512,6 +31546,7 @@ var init_state = __esm({
         if (version2.user_version < 4) {
           this.db.exec("BEGIN EXCLUSIVE; CREATE TABLE pending_execution_report (id TEXT PRIMARY KEY, report_json TEXT NOT NULL, created_at TEXT NOT NULL); PRAGMA user_version=4; COMMIT");
         }
+        this.db.exec("CREATE TABLE IF NOT EXISTS browser_binding (agent_session_id TEXT NOT NULL, app_id TEXT NOT NULL, tab_selector TEXT NOT NULL, PRIMARY KEY(agent_session_id,app_id))");
       }
       installation() {
         const row = this.db.prepare("SELECT id, token, account_id, workspace_id FROM installation LIMIT 1").get();
@@ -31536,9 +31571,16 @@ var init_state = __esm({
         this.db.prepare("INSERT INTO use_session (agent_session_id, app_id, context_json, credentials_json) VALUES (?, ?, ?, ?) ON CONFLICT(agent_session_id, app_id) DO UPDATE SET context_json=excluded.context_json, credentials_json=excluded.credentials_json").run(value.agentSessionId, value.appId, JSON.stringify(value.context), JSON.stringify(value.credentials));
       }
       releaseUseSession(agentSessionId, appId) {
+        this.db.prepare("DELETE FROM browser_binding WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
         this.db.prepare("DELETE FROM use_session WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
         this.db.prepare("DELETE FROM selected_app WHERE agent_session_id=? AND app_id=?").run(agentSessionId, appId);
       }
+      browserTab(agentSessionId, appId) {
+        return this.db.prepare("SELECT tab_selector FROM browser_binding WHERE agent_session_id=? AND app_id=?").get(agentSessionId, appId)?.tab_selector;
+      }
+      selectBrowserTab(agentSessionId, appId, tab) {
+        this.db.prepare("INSERT INTO browser_binding VALUES (?,?,?) ON CONFLICT(agent_session_id,app_id) DO UPDATE SET tab_selector=excluded.tab_selector").run(agentSessionId, appId, tab);
+      }
       selectedApp(agentSessionId) {
         const row = this.db.prepare("SELECT app_id, slug, title FROM selected_app WHERE agent_session_id=?").get(agentSessionId);
         return row ? { agentSessionId, appId: row.app_id, slug: row.slug, title: row.title } : null;
@@ -32058,7 +32100,7 @@ async function send(fetcher, prepared, allowNonJsonProbe = false) {
   const body = await responseBody(response, allowNonJsonProbe);
   return { response, body };
 }
-async function sendBrowser(root, appId, contextName, pageOrigin, effect2, transportName, transport, prepared, dispatched, credentialId, credentialDraftId, allowNonJsonProbe = false, dispatchBefore) {
+async function sendBrowser(root, appId, contextName, pageOrigin, effect2, transportName, transport, prepared, dispatched, credentialId, credentialDraftId, allowNonJsonProbe = false, dispatchBefore, selection = {}) {
   const client = await captureClient(root);
   const inspect = await client.openScope({ kind: "inspect", appId, contextId: contextName, pageOrigin, ownerPid: process.pid, ownerStartedAt: Date.now() - process.uptime() * 1e3 });
   let candidates = [];
@@ -32072,8 +32114,11 @@ async function sendBrowser(root, appId, contextName, pageOrigin, effect2, transp
   } finally {
     await client.closeScope(inspect.id);
   }
-  if (candidates.length !== 1) throw new Error(candidates.length ? "Several matching Chrome tabs were reported; use browser tabs and close or disambiguate them before execution" : "No matching Chrome tab was reported within 10 seconds");
-  const scope2 = await client.openScope({ kind: "execute", appId, contextId: contextName, pageOrigin, tabSelector: candidates[0].selector, ownerPid: process.pid, ownerStartedAt: Date.now() - process.uptime() * 1e3 });
+  const app2 = selection.appSlug ?? appId, prefix = selection.prefix ?? "apilift";
+  const tab = selection.tab ? candidates.find((candidate2) => candidate2.selector === selection.tab) : candidates.length === 1 ? candidates[0] : void 0;
+  if (!tab) throw new BrowserControlError(selection.tab ? `Configured capture.tab is not present. Inspect ${prefix} browser tabs ${app2} and select a reported tab in the current draft` : candidates.length ? `Several matching Chrome tabs were reported. Use ${prefix} browser tabs ${app2} and set capture.tab in the current draft for both capture and execution; leave other sessions' tabs open` : "No matching Chrome tab was reported within 10 seconds", "tab-unselected");
+  await checkTabOwnership(client, pageOrigin, tab.selector, app2, prefix);
+  const scope2 = await client.openScope({ kind: "execute", appId, contextId: contextName, pageOrigin, tabSelector: tab.selector, ownerPid: process.pid, ownerStartedAt: Date.now() - process.uptime() * 1e3, ownerSession: selection.ownerSession });
   const id2 = randomUUID6();
   try {
     const headers = Object.fromEntries(new Headers(prepared.init.headers).entries());
@@ -32088,7 +32133,17 @@ async function sendBrowser(root, appId, contextName, pageOrigin, effect2, transp
       if (held.status === "delivered") {
         await client.acknowledgeJob(id2);
         const value = held.result;
-        if (value.transportError) throw new Error(value.transportError);
+        if (value.transportError) {
+          if (value.executionState === "not-dispatched" && value.mutationDispatched !== true) {
+            let message2 = value.transportError.replace(/[.\s]+$/u, "");
+            if (message2.includes("still recording")) {
+              const peers = (await client.scopes()).scopes.filter((peer) => peer.kind !== "inspect" && peer.id !== scope2.id);
+              message2 = peers.length ? `Chrome reports a recording on this tab. Inspect ${prefix} browser tabs ${app2}; ask the owning session to stop/cancel, or bind another signed-in tab with capture.tab` : `Chrome retained a stale recording after its recorder lease ended. No live recorder owns it. Open another signed-in Chrome tab, list it with ${prefix} browser tabs ${app2}, bind its returned ID with ${prefix} browser tabs ${app2} --select <returned-tab-id>, then retry ${prefix} discover run. To recover the original tab, if no other agent is using Companion, turn Apilift Companion off and on in Chrome's Extensions page`;
+            }
+            throw new BrowserControlError(message2, value.code ?? "browser-not-dispatched");
+          }
+          throw new Error(value.transportError);
+        }
         if (!Number.isInteger(value.status) || value.bodyState && value.bodyState !== "complete") throw new Error("Chrome did not return complete response evidence");
         const body = [204, 205, 304].includes(value.status) ? null : value.body ?? null;
         const response = new Response(body, { status: value.status });
@@ -32188,7 +32243,18 @@ Inspect current action documentation: ${prefix(`actions show ${appName} ${action
     dispatchedAt ??= (/* @__PURE__ */ new Date()).toISOString();
   };
   const sendRequest = async (request2, effect2) => {
-    if (transport.mode === "browser") return sendBrowser(root, bundle2.app.id, transport.browserContext, browserPage.pageOrigin, effect2, action.transport, transport, request2, markDispatched, selectedCredential, void 0, false, bundle2.receipt?.dispatchBefore);
+    if (transport.mode === "browser") {
+      const prior = dispatchedAt;
+      try {
+        return await sendBrowser(root, bundle2.app.id, transport.browserContext, browserPage.pageOrigin, effect2, action.transport, transport, request2, markDispatched, selectedCredential, void 0, false, bundle2.receipt?.dispatchBefore, { tab: state.browserTab(session.id, bundle2.app.id), appSlug: bundle2.app.slug, prefix: prefix("").trim(), ownerSession: session.id });
+      } catch (error62) {
+        if (error62 instanceof BrowserControlError && !error62.dispatched) {
+          if (prior) throw new BrowserControlError("The mutation was already dispatched; its browser readback could not run. Inspect app state instead of rerunning the mutation", error62.code, true);
+          dispatchedAt = void 0;
+        }
+        throw error62;
+      }
+    }
     if (selectedCredential) {
       const store = new CredentialStore(root, new KeyringVault());
       try {
@@ -32340,10 +32406,19 @@ async function executeDraftVerification(input2) {
       }
     }
     if (transport.mode === "browser") {
-      return sendBrowser(input2.root, input2.appId, transport.browserContext, browserPage.pageOrigin, effect2, input2.kind === "action" && action && "transport" in action ? action.transport : input2.name, transport, request2, () => {
-        if (!dispatched) input2.onDispatch?.();
-        dispatched = true;
-      }, credential2, credentialDraftId, allowNonJsonProbe);
+      const prior = dispatched;
+      try {
+        return await sendBrowser(input2.root, input2.appId, transport.browserContext, browserPage.pageOrigin, effect2, input2.kind === "action" && action && "transport" in action ? action.transport : input2.name, transport, request2, () => {
+          if (!dispatched) input2.onDispatch?.();
+          dispatched = true;
+        }, credential2, credentialDraftId, allowNonJsonProbe, void 0, { tab: input2.browserTab || input2.state.browserTab(input2.session.id, input2.appId), appSlug: input2.appSlug, prefix: input2.commandPrefix, ownerSession: input2.session.id });
+      } catch (error62) {
+        if (error62 instanceof BrowserControlError && !error62.dispatched) {
+          if (prior) throw new BrowserControlError("The mutation was already dispatched; its browser readback could not run. Inspect app state instead of rerunning the mutation", error62.code, true);
+          dispatched = false;
+        }
+        throw error62;
+      }
     }
     if (credential2) {
       const store = new CredentialStore(input2.root, new KeyringVault());
@@ -32366,7 +32441,7 @@ async function executeDraftVerification(input2) {
   };
   try {
     const primary = await sendConfigured(prepared, input2.kind === "action" ? action.effect : "read");
-    if (!primary.response.ok) return { ok: false, message: `The app returned HTTP ${primary.response.status}. Inspect its state before retrying a mutation`, exitCode: 4, dispatched };
+    if (!primary.response.ok) return { ok: false, message: `The app returned HTTP ${primary.response.status}${input2.kind === "transport" || action && "effect" in action && action.effect === "read" ? "" : ". Inspect its state before retrying a mutation"}`, exitCode: 4, dispatched };
     if (input2.kind === "action" && transport.mode === "direct" && dispatchStarted) input2.onDirectBaseline?.(Math.max(0, performance.now() - dispatchStarted), JSON.stringify({ method: prepared.init.method, url: prepared.url.toString(), body: prepared.init.body ?? null }), JSON.stringify(primary.body), dispatchAt, (/* @__PURE__ */ new Date()).toISOString());
     if (input2.kind === "transport") {
       const selected = probe.response.path !== void 0 ? pointer2(primary.body, probe.response.path) : primary.body;
@@ -32383,7 +32458,7 @@ async function executeDraftVerification(input2) {
     }
     return { ok: true, output: value, proof: "not-applicable", dispatched: true };
   } catch (error62) {
-    return { ok: false, message: `${error62 instanceof Error ? error62.message : "The test did not return"}. ${dispatched ? "The request may have reached the app; inspect its state before another mutation" : "No app request was sent"}`, exitCode: dispatched || ["extension-unavailable", "capture-server-unavailable", "native-host-upgrade-required"].includes(error62?.code ?? "") ? 5 : 2, dispatched };
+    return { ok: false, message: `${(error62 instanceof Error ? error62.message : "The test did not return").replace(/[.\s]+$/u, "")}. ${dispatched ? input2.kind === "transport" || action && "effect" in action && action.effect === "read" ? "The read did not return complete evidence" : "The request may have reached the app; inspect its state before another mutation" : "No app request was sent"}`, exitCode: dispatched || error62 instanceof BrowserControlError || ["extension-unavailable", "capture-server-unavailable", "native-host-upgrade-required"].includes(error62?.code ?? "") ? 5 : 2, dispatched };
   }
 }
 var import__3, import_ajv_formats, ajv3, result, fail2, ResponseContractFailure, omit2;
@@ -32947,7 +33022,9 @@ Attach only after they identify it: ${command3(invocation, "credentials attach <
 ${item.credentials.length ? `Required saved credential field${item.credentials.length === 1 ? "" : "s"}: ${item.credentials.map((field) => field.name).join(", ")}.` : "No stored credential fields are required."}
 ${current2?.credentials[item.name] ? `A saved entry is selected for this agent's session.` : "No saved entry is selected for this agent's session."}
 ${item.instructions || "Acquisition instructions are missing from this connection."}
-${item.mode === "direct" && item.credentials.length ? "A successful connection probe does not verify how another user obtains a key. Compare these published instructions with official key-issuance and permission steps; do not invent missing steps. Secure setup saves an existing key; it does not issue one.\n" : ""}${item.credentials.length ? `Inspect saved names: ${command3(invocation, `credentials list ${selectedApp.slug} ${item.name}`)}
+${item.mode === "direct" && item.credentials.length ? "A successful connection probe does not verify how another user obtains a key. Compare these published instructions with official key-issuance and permission steps; do not invent missing steps. Secure setup saves an existing key; it does not issue one.\n" : ""}${item.mode === "browser" ? `Select a signed-in tab for this session: ${command3(invocation, `browser tabs ${selectedApp.slug}`)}, then repeat it with --select <returned-tab-id>.
+To verify this published connection without recording, open ${command3(invocation, `apps update ${selectedApp.slug}`)}, then ${command3(invocation, `discover draft transport ${item.name}`)}. In the returned file, set verification.probeOrigin to a declared definition.probes origin and verification.inputs to the read probe's required values. Run ${command3(invocation, "discover check")}, then ${command3(invocation, "discover run")}.
+` : ""}${item.credentials.length ? `Inspect saved names: ${command3(invocation, `credentials list ${selectedApp.slug} ${item.name}`)}
 Start secure setup: ${command3(invocation, `credentials add ${selectedApp.slug} ${item.name}`)}` : ""}`).join("\n\n") + `
 
 Search actions: ${command3(invocation, `actions search ${selectedApp.slug} "<keyword>"`)}
@@ -33987,7 +34064,7 @@ Abandon removal: ${command4(invocation, "discover discard")}
         return ok4(`Editing ${current.title} ${label(draft.kind)} ${draft.name}.
 File: ${draft.filePath}
 ${evidence ? `Latest saved execution: ${evidence.resultPath}
-` : "No execution evidence is saved for this draft.\n"}${capture?.scope_id ? `Recording phase: ${capture.phase}. ${capture.phase === "closed" ? `Temporary auth evidence is available until run, publish, defer or close releases it automatically.` : `Do not repeat the app operation. Confirm the boundary with ${command4(invocation, "discover capture stop")} or ${command4(invocation, "discover capture cancel")}.`}
+` : "No execution evidence is saved for this draft.\n"}${capture?.phase === "lost" ? "Recorder lease ended; admission is closed and the stop boundary is unconfirmed. Inspect app state before another mutation. Retained evidence remains available.\n" : ""}${capture?.scope_id ? `Recording phase: ${capture.phase}. ${capture.phase === "closed" ? `Temporary auth evidence is available until run, publish, defer or close releases it automatically.` : `Do not repeat the app operation. Confirm the boundary with ${command4(invocation, "discover capture stop")} or ${command4(invocation, "discover capture cancel")}.`}
 ` : ""}${store.publication(draft.id) ? `A publication request may have been sent. Reconcile it with ${command4(invocation, "discover publish")} before changing or discarding this draft.
 ` : ""}
 Check: ${command4(invocation, "discover check")}
@@ -34031,6 +34108,8 @@ Start again: ${command4(invocation, `discover ${draft.intent === "remove" ? "rem
 `);
       if (captureRow(state, store.selected(session.id)?.id ?? "")?.scope_id) return fail5(`A recording is active. Stop it with ${command4(invocation, "discover capture stop")} or cancel it with ${command4(invocation, "discover capture cancel")} before closing.
 `);
+      const installation = state.installation();
+      if (installation) await api.call("releaseSession", { params: { id: apiSessionId(installation.id, session) } });
       store.close(session.id);
       return ok4(`Closed discovery for ${current.title}. Published actions remain usable.
 To continue later: ${command4(invocation, `apps update ${current.appSlug}`)}
@@ -34299,6 +34378,8 @@ async function verifyDraft(invocation, api, state, store, session, fetcher, root
     transport = related.definition;
   }
   if (!transport) return fail5("The configured connection is missing. No app request was sent.\n");
+  const installation = state.installation();
+  if (installation) await api.call("acquireSession", { params: { id: apiSessionId(installation.id, session) }, body: { purpose: "discovery", appId: draft.appId } });
   const write = Boolean(action && "effect" in action && action.effect !== "read");
   const previous = store.attempt(draft.id);
   if (write && previous?.fingerprint === identity2.fingerprint && previous.state === "success") {
@@ -34311,7 +34392,7 @@ Review it and publish; no app request was sent.
   if (write && previous?.fingerprint === identity2.fingerprint && previous.state === "possibly-dispatched") return fail5(`This configured mutation may already have reached the app. Do not repeat it. Inspect the app and use a changed, authorized test request before running again.
 `, 12);
   if (write) store.saveAttempt(draft.id, identity2.fingerprint, "possibly-dispatched");
-  const executed = await executeDraftVerification({ api, state, session, root, fetcher, appId: draft.appId, appSlug: draft.appSlug, kind: draft.kind, name: draft.name, action, transport, commandPrefix: command4(invocation, "").trim(), probeOrigin: envelope.verification?.probeOrigin, sampleInputs: envelope.verification?.inputs ?? {}, onDispatch: () => withBaselines(root, (baselines) => baselines.closeObservation(draft.id, "dispatch")), onDirectBaseline: (durationMs, request2, response, startedAt, finishedAt) => {
+  const executed = await executeDraftVerification({ api, state, session, root, fetcher, appId: draft.appId, appSlug: draft.appSlug, kind: draft.kind, name: draft.name, action, transport, commandPrefix: command4(invocation, "").trim(), browserTab: envelope.capture?.tab || void 0, probeOrigin: envelope.verification?.probeOrigin, sampleInputs: envelope.verification?.inputs ?? {}, onDispatch: () => withBaselines(root, (baselines) => baselines.closeObservation(draft.id, "dispatch")), onDirectBaseline: (durationMs, request2, response, startedAt, finishedAt) => {
     if (draft.kind === "action") withBaselines(root, (baselines) => baselines.recordDirect({ draftId: draft.id, appId: draft.appId, sessionId: session.id, durationMs, request: request2, response, invocationId, startedAt, finishedAt }));
   } });
   if (!executed.ok) {
@@ -34335,7 +34416,7 @@ Saved output: ${resultPath}
 
 Review the actual objects and field meanings against the official docs or UI.
 Edit ${draft.filePath}: set verification.review to accepted only if this result has the intended meaning; otherwise rejected with verification.notes.
-Then publish: ${command4(invocation, "discover publish")}
+${draft.kind === "transport" && draft.baseVersion ? `If this task requires publishing connection changes or renewed verification, publish: ${command4(invocation, "discover publish")}. If you only checked the existing connection, discard this local draft: ${command4(invocation, "discover discard")}.` : `Then publish: ${command4(invocation, "discover publish")}`}
 Publication does not send another app request.
 `, exitCode: 0, stdoutJson: true, dispatched: true };
 }
@@ -34358,9 +34439,19 @@ function captureRow(state, draftId) {
 function captureEntries(row) {
   return row.entries_json ? JSON.parse(row.entries_json) : [];
 }
+async function retainedCaptureEntries(client, scopeId) {
+  const entries = [];
+  let after = 0;
+  for (; ; ) {
+    const page2 = (await client.entries(scopeId, after, 100)).entries;
+    entries.push(...page2);
+    if (page2.length < 100) return entries;
+    after = page2.at(-1).seq;
+  }
+}
 async function releaseCapture(state, draftId, row, root) {
   if (!row.scope_id) return;
-  await (await captureClient(root)).retainScope(row.scope_id);
+  await (await captureClient(root, false)).retainScope(row.scope_id);
   state.db.prepare("UPDATE discovery_capture SET evidence_scope_id=COALESCE(evidence_scope_id,scope_id),scope_id=NULL WHERE draft_id=?").run(draftId);
 }
 async function awaitCaptureJob(client, id2) {
@@ -34602,15 +34693,23 @@ ${detail}
     if (!page2) return fail5(`Published browser page ${transport.browserContext} is missing. No recording started.
 `);
     const context = page2.definition;
+    const installation = state.installation();
+    if (installation) await api.call("acquireSession", { params: { id: apiSessionId(installation.id, session) }, body: { purpose: "discovery", appId: draft.appId } });
     const client = await captureClient(root);
     const tabs = await inspectTabs(client, draft.appId, transport.browserContext, context.pageOrigin);
-    const intended = envelope.capture?.tab;
+    const intended = envelope.capture?.tab || state.browserTab(session.id, draft.appId);
     if (!intended && tabs.length !== 1) return fail5(`${tabs.length ? "Several matching tabs are open" : "No matching tab was reported"}. Set capture.tab in ${draft.filePath} using ${command4(invocation, `browser tabs ${draft.appSlug}`)}. No recording started.
 `);
     const tab = intended ? tabs.find((item2) => item2.selector === intended) : tabs[0];
     if (!tab) return fail5(`Configured capture.tab ${intended} is not present. Check ${command4(invocation, `browser tabs ${draft.appSlug}`)}. No recording started.
 `);
-    const scope2 = await client.openScope({ kind: "capture", appId: draft.appId, contextId: transport.browserContext, pageOrigin: context.pageOrigin, tabSelector: tab.selector, ownerPid: client.receipt.pid, ownerStartedAt: Date.parse(client.receipt.startedAt) });
+    try {
+      await checkTabOwnership(client, context.pageOrigin, tab.selector, draft.appSlug, command4(invocation, "").trim());
+    } catch (error62) {
+      return fail5(`${error62 instanceof Error ? error62.message : "Tab ownership is unavailable"}. No recording started.
+`, 5);
+    }
+    const scope2 = await client.openScope({ kind: "capture", appId: draft.appId, contextId: transport.browserContext, pageOrigin: context.pageOrigin, tabSelector: tab.selector, ownerPid: client.receipt.pid, ownerStartedAt: Date.parse(client.receipt.startedAt), ownerSession: session.id });
     const previousEvidence = row?.evidence_scope_id ?? row?.scope_id;
     if (previousEvidence) await client.closeScope(previousEvidence);
     const id2 = randomUUID8();
@@ -34629,11 +34728,13 @@ Perform that one UI operation now. Then ${command4(invocation, "discover capture
 `);
   }
   if (!row) return fail5(`No recording exists for this draft. Start with ${command4(invocation, "discover capture start")}.
+`);
+  if ((key === "discoverCaptureCancel" || key === "discoverCaptureStop") && row.phase === "lost") return ok4(`Recording admission is closed because the recorder lease ended. Its stop boundary was not confirmed. Inspect app state before any mutation; retained evidence and drafts remain available. No app operation was repeated.
 `);
   if (key === "discoverCaptureCancel" && row.phase === "closed") {
     if (row.scope_id) {
       try {
-        await (await captureClient(root, false)).closeScope(row.scope_id);
+        await (await captureClient(root, false)).retainScope(row.scope_id);
       } catch (error62) {
         return fail5(`Recording admission was closed, but scope release is unconfirmed: ${error62 instanceof Error ? error62.message : "unknown error"}. Retry ${command4(invocation, "discover capture cancel")}.
 `, 12);
@@ -34651,7 +34752,12 @@ Review: ${command4(invocation, "discover status")}
     if (!row.scope_id) return key === "discoverCaptureCancel" ? ok4("Recording admission is already closed. App operations were not undone.\n") : fail5("This recording is already closed. Inspect its candidates with discover capture list.\n");
     let client = await captureClient(root, false);
     if (!(await client.scopes()).scopes.some((scope2) => scope2.id === row.scope_id)) {
-      state.db.prepare("UPDATE discovery_capture SET evidence_scope_id=COALESCE(evidence_scope_id,scope_id),scope_id=NULL,job_id=NULL,phase='closed' WHERE draft_id=?").run(draft.id);
+      state.db.prepare("UPDATE discovery_capture SET evidence_scope_id=COALESCE(evidence_scope_id,scope_id),scope_id=NULL,job_id=NULL,phase='lost' WHERE draft_id=?").run(draft.id);
+      try {
+        const entries3 = await retainedCaptureEntries(client, row.scope_id);
+        state.db.prepare("UPDATE discovery_capture SET entries_json=? WHERE draft_id=?").run(JSON.stringify(entries3), draft.id);
+      } catch {
+      }
       withBaselines(root, (baselines) => baselines.closeObservation(draft.id, "capture-lost"));
       return fail5(`capture-scope-lost \u2014 The recorder exited before it confirmed the recording boundary. Admission is closed, but the app operation may have happened. Do not repeat a mutation. Inspect app state and the retained draft: ${draft.filePath}
 `, 12);
@@ -34674,14 +34780,7 @@ Review: ${command4(invocation, "discover status")}
     const job = await awaitCaptureJob(client, stopId);
     if (job.status !== "delivered" || job.result?.boundaryConfirmed !== true) return fail5(`Recording closure is unconfirmed. Do not repeat the app operation. Retry the same ${command4(invocation, key === "discoverCaptureCancel" ? "discover capture cancel" : "discover capture stop")}.
 `, 12);
-    const entries2 = [];
-    let after = 0;
-    for (; ; ) {
-      const page2 = (await client.entries(row.scope_id, after, 100)).entries;
-      entries2.push(...page2);
-      if (page2.length < 100) break;
-      after = page2.at(-1).seq;
-    }
+    const entries2 = await retainedCaptureEntries(client, row.scope_id);
     await client.acknowledgeJob(stopId);
     state.db.prepare("UPDATE discovery_capture SET job_id=NULL,phase='closed',entries_json=? WHERE draft_id=?").run(JSON.stringify(entries2), draft.id);
     if (key === "discoverCaptureCancel") {
@@ -34700,7 +34799,7 @@ Select the causal request for the draft: ${command4(invocation, "discover captur
 List all captured metadata pages: ${command4(invocation, "discover capture list")}
 `);
   }
-  if (row.phase !== "closed") return fail5(`Recording is ${row.phase}. Stop or cancel it before reading candidates.
+  if (row.phase !== "closed" && row.phase !== "lost") return fail5(`Recording is ${row.phase}. Stop or cancel it before reading candidates.
 `);
   const entries = captureEntries(row);
   if (key === "discoverCaptureList") {
@@ -34805,6 +34904,7 @@ var init_discover = __esm({
     init_envelope();
     init_lock();
     init_session();
+    init_session();
     init_run();
     init_baselines();
     init_browser();
@@ -38213,7 +38313,7 @@ function commandHelp() {
   apilift credentials list <app> [<transport>] | use <app> <transport> <name> | add <app> <transport> | remove <app> <transport> <name>
   apilift credentials unbound | attach <app> <transport> <name>
   apilift transports show <app> [<name>]
-  apilift browser check <app> | browser tabs <app>
+  apilift browser check <app> | browser tabs <app> [--select <tab-id>]
   apilift apps new <slug> | apps update <app> | apps history <app>
   apilift discover draft <kind> [name] | check | run | publish | status | defer | discard | rebase | close
   apilift discover remove <kind> <name>
@@ -38418,7 +38518,9 @@ Use apilift help commands for syntax.
           const apiError2 = envelope.data.error;
           output2 = result2("", cliExitForError(apiError2), `${apiError2.code} \u2014 ${apiError2.message}
 ${apiError2.hint ? `${apiError2.hint}
-` : ""}`, true);
+` : ""}${apiError2.code === "session-limit" ? `${typeof apiError2.details.activeExpiresAt === "string" ? `Active session lease expires ${apiError2.details.activeExpiresAt}.
+` : ""}No app request was sent.
+` : ""}`, apiError2.code !== "session-limit");
         } else output2 = result2("", 11, `registry-response-invalid \u2014 The registry returned HTTP ${error62.status} without a valid JSON response. The request was sent; check its outcome before retrying a mutation.
 `, true);
       } else {

package/dist/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apilift",
-  "version": "1.4.32",
+  "version": "1.4.33",
   "description": "Use logged-in apps and discover missing actions with Apilift.",
   "author": {
     "name": "Apilift"

package/dist/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apilift",
-  "version": "1.4.32",
+  "version": "1.4.33",
   "description": "Use logged-in apps and discover missing actions with Apilift.",
   "author": {
     "name": "Apilift"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apilift/cli",
-  "version": "1.4.32",
+  "version": "1.4.33",
   "private": false,
   "type": "module",
   "bin": {
@@ -36,7 +36,7 @@
   "engines": {
     "node": ">=24.16.0 <27"
   },
-  "gitHead": "10f690490a8f07533344fcbf30be957a02c1c3c5",
+  "gitHead": "c4d0802b2b89d48cadc699d922e39587c1f92c98",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/egor-sergeev/apilift.git",