@aryacode/dsh-plugin-arya-computer-use 1.0.2 → 1.0.4

package/client.js

@@ -14,8 +14,8 @@ window.__ModuleLoader__.load({
       remoteIndicatorVisible: true, indicatorText: 'Arya is controlling your computer', pointerLabel: 'Arya', indicatorPosition: 'top',
       indicatorIdleMs: 800, stopShortcut: '', resumeToken: 0, previewToken: 0,
       headedDefault: false, overlayDefault: true, driverLockEnabled: true,
-      toolPreset: 'lite',
-  browserTools: 'core', browserProfile: '', browserSession: '', browserStateFile: '', browserCdp: '', browserHeaded: false,
+      toolPreset: 'lite',
+  browserTools: 'core', browserProfile: '', browserSession: '', browserStateFile: '', browserCdp: '', browserHeaded: false, browserToolFlags: 'strip',
     };
     const equal = (left, right) => JSON.stringify(left) === JSON.stringify(right);
     const dictionaries = {
@@ -36,11 +36,12 @@ window.__ModuleLoader__.load({
         progressOpacity: '背景不透明度（%）', progressWidth: '宽度（像素）', progressHeight: '高度（像素）',
         progressPosition: '浮窗位置', progress_topRight: '右上', progress_topLeft: '左上', progress_bottomRight: '右下', progress_bottomLeft: '左下', progress_custom: '自定义',
         progressX: 'X 坐标', progressY: 'Y 坐标', progressShortcut: '浮窗解锁快捷键', progressShortcutHint: '按下后临时解锁浮窗以便拖动。留空表示不设置。',
-        toolSurfaceTitle: '工具范围', toolPreset: '工具预设', toolPresetHint: 'lite 直接列出全部 16 个工具；lazy 只暴露 tools / snapshot / click，其余按需加载。修改后需重启 MCP 生效。', toolPresetLite: 'lite · 全部 16 个', toolPresetLazy: 'lazy · 按需加载',
+        toolSurfaceTitle: '工具范围', toolPreset: '工具预设', toolPresetHint: 'lite 直接列出全部 16 个工具；lazy 只暴露 tools / snapshot / click，其余按需加载。修改后需重启 MCP 生效。', toolPresetLite: 'lite · 全部 16 个', toolPresetLazy: 'lazy · 按需加载',
   behaviorTitle: '操作方式', headedDefault: 'Real mouse and keyboard', headedDefaultHint: 'Off by default: input goes through background accessibility patterns and never moves your pointer or steals focus. Turn on to use real keyboard/mouse input, which briefly focuses the target window.',
         overlayDefault: '引擎会话叠加层', overlayDefaultHint: '启动桌面会话时启用引擎自带的光标叠加层。Arya 的虚拟光标不依赖它。',
         driverLock: '单会话驱动', driverLockHint: '同一时间只允许一个对话操作桌面；其他对话调用桌面工具会收到 BUSY 提示。关闭后最近使用的对话自动接管。',
         browserTitle: '网页通道', browserTools: '工具范围', browserToolsHint: 'agent-browser 向 MCP 暴露的工具集。修改后需重启 MCP 生效。',
+        browserFlags: '精简工具定义', browserFlagsHint: '插件启动网页通道时已经设好域名、证书、会话等全局参数，每个工具里重复的这些参数可以删掉：strip 全部删除（约省 1.8 万 token），lean 保留会话与状态恢复相关项，off 保持 agent-browser 原样。修改后需重启 MCP 生效。', browserFlagsStrip: 'strip · 全部删除', browserFlagsLean: 'lean · 保留会话项', browserFlagsOff: 'off · 保持原样',
         browserProfile: 'Chrome 配置', browserProfileHint: '配置名称（如 Default）或目录路径，让网页通道复用你的登录状态。',
         browserSession: '会话名', browserSessionHint: '隔离的会话键；不同会话名的 Cookie 与标签页彼此独立。',
         browserCdp: '连接我的浏览器', browserCdpHint: 'CDP 地址，例如 http://127.0.0.1:9222。用 --remote-debugging-port=9222 启动 Chrome 即可共享已登录的窗口。',
@@ -87,11 +88,12 @@ window.__ModuleLoader__.load({
         progressOpacity: 'Background opacity (%)', progressWidth: 'Width (px)', progressHeight: 'Height (px)',
         progressPosition: 'Overlay position', progress_topRight: 'Top right', progress_topLeft: 'Top left', progress_bottomRight: 'Bottom right', progress_bottomLeft: 'Bottom left', progress_custom: 'Custom',
         progressX: 'X coordinate', progressY: 'Y coordinate', progressShortcut: 'Overlay unlock shortcut', progressShortcutHint: 'Press to temporarily unlock the overlay so you can drag it. Empty means none.',
-        toolSurfaceTitle: 'Tool surface', toolPreset: 'Tool preset', toolPresetHint: 'lite lists all 16 tools up front; lazy exposes tools / snapshot / click and loads the rest on demand. Changes apply after the next MCP restart.', toolPresetLite: 'lite · all 16', toolPresetLazy: 'lazy · load on demand',
+        toolSurfaceTitle: 'Tool surface', toolPreset: 'Tool preset', toolPresetHint: 'lite lists all 16 tools up front; lazy exposes tools / snapshot / click and loads the rest on demand. Changes apply after the next MCP restart.', toolPresetLite: 'lite · all 16', toolPresetLazy: 'lazy · load on demand',
   behaviorTitle: 'Control style', headedDefault: 'Real mouse and keyboard', headedDefaultHint: 'Off by default: input goes through background accessibility patterns and never moves your pointer or steals focus. Turn on to use real keyboard/mouse input, which briefly focuses the target window.',
         overlayDefault: 'Engine session overlay', overlayDefaultHint: "Starts the desktop session with the engine's own cursor overlay. Arya's ghost cursor does not depend on it; leave it off unless you want the engine marker too.",
         driverLock: 'One conversation drives at a time', driverLockHint: 'While one conversation is driving, desktop calls from other conversations receive a BUSY notice. Turn off to let the most recent conversation take over automatically.',
         browserTitle: 'Web lane', browserTools: 'Tool surface', browserToolsHint: 'Which agent-browser tool profiles the MCP server exposes. Changing this applies on the next MCP restart.',
+        browserFlags: 'Trim tool schemas', browserFlagsHint: 'The plugin already sets domains, certificates, session and other host-wide flags when it starts the web lane, so the copies repeated inside every tool can go: strip removes them all (about 18k tokens saved), lean keeps the session and state-restore ones, off leaves the agent-browser schemas untouched. Changes apply after the next MCP restart.', browserFlagsStrip: 'strip · remove all', browserFlagsLean: 'lean · keep session flags', browserFlagsOff: 'off · keep as shipped',
         browserProfile: 'Chrome profile', browserProfileHint: 'A profile name such as Default, or a directory path, so the web lane reuses your sign-ins.',
         browserSession: 'Session', browserSessionHint: 'An isolated session key; cookies and tabs stay separate per name.',
         browserCdp: 'Connect to my browser', browserCdpHint: 'A CDP endpoint such as http://127.0.0.1:9222. Start Chrome with --remote-debugging-port=9222 to share a signed-in window.',
@@ -350,12 +352,13 @@ window.__ModuleLoader__.load({
           h('div', { className: 'arya-grid' },
             switchItem('headedDefault', 'headedDefault', 'headedDefaultHint', arts.keyboard(draft.headedDefault)),
             switchItem('overlayDefault', 'overlayDefault', 'overlayDefaultHint', arts.cursor(draft.overlayDefault)),
-            switchItem('driverLockEnabled', 'driverLock', 'driverLockHint', arts.shield(draft.driverLockEnabled)),
+            switchItem('driverLockEnabled', 'driverLock', 'driverLockHint', arts.shield(draft.driverLockEnabled)),
             field(title(t('toolPreset'), 'toolPresetHint', { htmlFor: idPrefix + '-toolPreset' }), h('select', { id: idPrefix + '-toolPreset', value: draft.toolPreset, disabled, onChange: (e) => change('toolPreset', e.target.value) }, h('option', { value: 'lite' }, t('toolPresetLite')), h('option', { value: 'lazy' }, t('toolPresetLazy')))))),
         h('section', { className: 'arya-section', 'aria-labelledby': idPrefix + '-browser-title' },
           head(idPrefix + '-browser-title', 'browserTitle'),
           h('div', { className: 'arya-grid' },
             field(title(t('browserTools'), 'browserToolsHint', { htmlFor: idPrefix + '-browserTools' }), h('select', { id: idPrefix + '-browserTools', value: draft.browserTools, disabled, onChange: (e) => change('browserTools', e.target.value) }, ...['core', 'network', 'state', 'debug', 'tabs', 'react', 'mobile', 'all'].map((key) => h('option', { key, value: key }, key)))),
+            field(title(t('browserFlags'), 'browserFlagsHint', { htmlFor: idPrefix + '-browserToolFlags' }), h('select', { id: idPrefix + '-browserToolFlags', value: draft.browserToolFlags, disabled, onChange: (e) => change('browserToolFlags', e.target.value) }, ...[['strip', 'browserFlagsStrip'], ['lean', 'browserFlagsLean'], ['off', 'browserFlagsOff']].map(([value, label]) => h('option', { key: value, value }, t(label))))),
             switchItem('browserHeaded', 'browserHeaded', 'browserHeadedHint', arts.monitor && arts.monitor(draft.browserHeaded) || arts.cursor(draft.browserHeaded))),
           h('div', { className: 'arya-fields' },
             field(title(t('browserProfile'), 'browserProfileHint', { htmlFor: idPrefix + '-browserProfile' }), h('input', { id: idPrefix + '-browserProfile', type: 'text', maxLength: 200, placeholder: 'Default', value: draft.browserProfile, disabled, onChange: (e) => change('browserProfile', e.target.value) })),

package/index.js

@@ -19,7 +19,7 @@
 import z from '@deepseek-ai/schemastery';
 import os from 'node:os';
 import { readFile, readFileSync, readdirSync, statSync } from 'node:fs';
-import { execFileSync } from 'node:child_process';
+import { execFileSync, spawn } from 'node:child_process';
 import { dirname, join } from 'node:path';
 import { createRequire } from 'node:module';
 import { fileURLToPath, pathToFileURL } from 'node:url';
@@ -33,6 +33,7 @@ export const inject = ['tools'];
 const HERE = dirname(fileURLToPath(import.meta.url));
 const SKILL_DIR = join(HERE, 'skills', 'arya-desktop');
 const SKILL_FILE = join(SKILL_DIR, 'SKILL.md');
+const CONSOLE_HIDER_SCRIPT = join(HERE, 'scripts', 'hide-consoles.ps1');
 const PROVIDER_NAME = 'arya-computer-use';
 const RANK = 350;
 const STATUS_PATH = '/plugins/arya/status';
@@ -222,6 +223,7 @@ const fields = {
   driverLockEnabled: z.boolean().default(true).description('One conversation drives the desktop at a time'),
   toolPreset: z.union(['lite', 'lazy'].map(value => z.const(value))).default('lite').description('Tool surface size: lite lists all 16 tools; lazy starts with tools/snapshot/click and reveals the rest on demand'),
   browserTools: z.union(['core', 'network', 'state', 'debug', 'tabs', 'react', 'mobile', 'all'].map(value => z.const(value))).default('core').description('agent-browser tool profiles exposed on the MCP row'),
+  browserToolFlags: z.union(['strip', 'lean', 'off'].map(value => z.const(value))).default('strip').description('Web lane schema size: strip drops the host/launch flags the plugin sets at launch from every tool, lean keeps session/restore/timeout, off keeps the agent-browser schemas unchanged'),
   browserProfile: z.string().default('').description('Chrome profile name or directory the web lane reuses for sign-ins'),
   browserSession: z.string().default('').description('Isolated browser session key'),
   browserStateFile: z.string().default('').description('Saved sign-in state file for the web lane'),
@@ -295,7 +297,47 @@ export { ensureMarketSource as __ensureMarketSource };
 
 /* -------------------------------------------------------------------- main */
 
+// Windows gives a console window titled after its executable to any console
+// child that was not created with CREATE_NO_WINDOW. Both engines ship a JS shim
+// (agent-browser/bin/agent-browser.js, agent-desktop/bin/agent-desktop) that
+// runs the native helper with `stdio: 'inherit'` and `windowsHide: false`, so a
+// black console stays on the desktop for as long as the helper lives - the
+// browser daemon keeps it for the whole session - and closing it kills the
+// helper, which is why it comes straight back. The plugin spawns the natives
+// itself wherever the call site allows it; this watcher covers whatever else
+// starts them (a lane restart, an older launcher, a helper started outside the
+// plugin). It hides only classic console windows whose title or image names one
+// of the two engine helpers, and hiding leaves stdio alone, so the helper keeps
+// working.
+function startConsoleHider(ctx) {
+  if (process.platform !== 'win32') return () => {};
+  try {
+    if (!statSync(CONSOLE_HIDER_SCRIPT).isFile()) return () => {};
+  } catch {
+    return () => {};
+  }
+  let child;
+  try {
+    child = spawn(
+      'powershell.exe',
+      ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', CONSOLE_HIDER_SCRIPT, '-ParentPid', String(process.pid)],
+      { stdio: 'ignore', windowsHide: true },
+    );
+  } catch (error) {
+    ctx.logger.warn('dsh-arya-computer-use: could not start the console watcher: %s', error?.message ?? String(error));
+    return () => {};
+  }
+  child.on('error', error => {
+    ctx.logger.warn('dsh-arya-computer-use: console watcher stopped: %s', error?.message ?? String(error));
+  });
+  child.unref?.();
+  return () => {
+    try { child.kill(); } catch { /* already gone */ }
+  };
+}
+
 export async function apply(ctx, config) {
+  const stopConsoleHider = startConsoleHider(ctx);
   registerSkillProvider(ctx);
   ensureMarketSource(ctx);
   void (async () => {
@@ -438,7 +480,9 @@ export async function apply(ctx, config) {
       state: readJson(runtime.stateFile),
     });
   }
-  return () => {};
+  return () => {
+    stopConsoleHider();
+  };
 }
 
 function isLoopbackAddress(address) {

package/mcp/adapter-server.mjs

@@ -25,6 +25,25 @@ const require = createRequire(import.meta.url);
 const CLI_BIN = require.resolve('agent-desktop/bin/agent-desktop');
 const OCR_PS1 = join(HERE, '..', 'scripts', 'ocr.ps1');
 
+// Windows console-window trap, the same one browser-launcher.mjs documents and
+// avoids: bin/agent-desktop (the npm shim) spawns the native exe with
+// stdio:'inherit' + windowsHide:false, so every tool call pops a console window
+// on the user's desktop. Spawn the native binary directly instead; stdio stays
+// piped and windowsHide holds. Null when the platform has no released binary,
+// in which case the shim is the only way to run the CLI.
+const NATIVE_BIN = (() => {
+  try {
+    const pkgDir = dirname(require.resolve('agent-desktop/package.json'));
+    const { resolve } = require('agent-desktop/lib/platform');
+    const entry = resolve(process.platform, process.arch);
+    if (!entry || !entry.released || !entry.binaryName) return null;
+    const bin = join(pkgDir, 'bin', entry.binaryName);
+    return existsSync(bin) ? bin : null;
+  } catch {
+    return null;
+  }
+})();
+
 // Engine state root: the engine's own default (~/.agent-desktop) — it creates
 // that root with its protected DACL and passes its private-file checks.
 // Do NOT point AGENT_DESKTOP_HOME at AppData\Local: inherited AppContainer ACEs
@@ -179,11 +198,17 @@ function runCli(args, { headed = effectiveHeaded() } = {}) {
   const env = { ...process.env };
   if (state.sessionStarted) env.AGENT_DESKTOP_SESSION = state.sessionId;
   return new Promise((resolve) => {
-    const child = spawn(process.execPath, [CLI_BIN, ...argv], {
-      stdio: ['ignore', 'pipe', 'pipe'],
-      windowsHide: true,
-      env,
-    });
+    const child = NATIVE_BIN
+      ? spawn(NATIVE_BIN, argv, {
+          stdio: ['ignore', 'pipe', 'pipe'],
+          windowsHide: true,
+          env,
+        })
+      : spawn(process.execPath, [CLI_BIN, ...argv], {
+          stdio: ['ignore', 'pipe', 'pipe'],
+          windowsHide: true,
+          env,
+        });
     let stdout = '';
     let stderr = '';
     child.stdout.on('data', (d) => (stdout += d));

package/mcp/browser-launcher.mjs

@@ -3,18 +3,42 @@
 // DSH launches this file instead of agent-browser itself so the browser lane can
 // follow the plugin's settings (tool surface, Chrome profile, session, CDP
 // endpoint, headed window) without editing the Cordis patch by hand. The real
-// server's stdio is inherited, so this process is a transparent pipe: stdin and
+// server's stdio is piped through this process, a transparent relay: stdin and
 // stdout carry the MCP protocol untouched, and settings changes are picked up on
 // the next MCP restart.
+//
+// Two window traps on Windows, both avoided here:
+//  - Node ignores windowsHide when stdio is 'inherit', so stdio is piped.
+//  - bin/agent-browser.js (the npm CLI shim) spawns the native exe with
+//    stdio:'inherit' + windowsHide:false, which pops a console window for the
+//    grandchild on the user's desktop. We skip the shim and spawn the native
+//    exe directly; it speaks MCP over stdio itself.
 
 import { spawn } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { homedir, platform, arch } from 'node:os';
+import { dirname, join } from 'node:path';
+import { Transform } from 'node:stream';
 
 const require = createRequire(import.meta.url);
-const BIN = require.resolve('agent-browser/bin/agent-browser.js');
+const SHIM = require.resolve('agent-browser/bin/agent-browser.js');
+
+// Resolve the platform native binary shipped inside the agent-browser package,
+// mirroring bin/agent-browser.js's naming (with the win32-arm64 → x64 fallback).
+function nativeBin() {
+  const dir = dirname(require.resolve('agent-browser/package.json'));
+  const osKey = { darwin: 'darwin', linux: 'linux', win32: 'win32' }[platform()];
+  const archKey = { x64: 'x64', arm64: 'arm64' }[arch()];
+  if (!osKey || !archKey) return null;
+  const ext = osKey === 'win32' ? '.exe' : '';
+  let name = `agent-browser-${osKey}-${archKey}${ext}`;
+  if (osKey === 'win32' && archKey === 'arm64' && !existsSync(join(dir, name))) {
+    name = 'agent-browser-win32-x64.exe';
+  }
+  const bin = join(dir, name);
+  return existsSync(bin) ? bin : null;
+}
 
 function controlDir() {
   const local = process.env.LOCALAPPDATA || join(homedir(), 'AppData', 'Local');
@@ -34,8 +58,71 @@ function readSettings() {
 
 const text = (value) => (typeof value === 'string' ? value.trim() : '');
 
+// Every agent-browser tool repeats the same host/launch flags in its schema, and
+// the plugin already sets them on the server command line below. They are worth
+// about 630 tokens per tool, so the relay rewrites tools/list responses to drop
+// them. agent-browser rejects undeclared argument keys with an invalid-params
+// error naming the key, so a caller that passes a dropped flag is told, not
+// silently mis-ruled.
+export const FLAG_KEYS_HOST = ['extraArgs', 'caCert', 'clearCaCert', 'useSystemCa', 'allowedDomains', 'namespace', 'idleTimeout'];
+export const FLAG_KEYS_REST = ['restore', 'restoreSave', 'restoreCheckFn', 'restoreCheckText', 'restoreCheckUrl', 'session', 'timeoutMs'];
+
+export function flagKeys(mode) {
+  if (mode === 'lean') return FLAG_KEYS_HOST;
+  if (mode === 'off') return [];
+  return [...FLAG_KEYS_HOST, ...FLAG_KEYS_REST];
+}
+
+export function stripToolFlags(tools, keys) {
+  const drop = new Set(keys);
+  let removed = 0;
+  for (const tool of Array.isArray(tools) ? tools : []) {
+    const schema = tool?.inputSchema;
+    if (schema?.properties) {
+      for (const key of drop) if (key in schema.properties) { delete schema.properties[key]; removed++; }
+    }
+    if (Array.isArray(schema?.required)) {
+      const kept = schema.required.filter((key) => !drop.has(key));
+      removed += schema.required.length - kept.length;
+      schema.required = kept;
+    }
+  }
+  return removed;
+}
+
+// MCP stdio is one JSON message per line, so the relay transforms line by line.
+// Anything that is not a tools/list response is forwarded byte-for-byte.
+export function transformLine(line, drop) {
+  if (!line.includes('"tools"')) return line;
+  let message;
+  try { message = JSON.parse(line); } catch { return line; }
+  if (!Array.isArray(message?.result?.tools)) return line;
+  return stripToolFlags(message.result.tools, drop) ? JSON.stringify(message) : line;
+}
+
+export function createFlagStripTransform(keys) {
+  const drop = new Set(keys);
+  let pending = '';
+  return new Transform({
+    transform(chunk, encoding, callback) {
+      pending += chunk.toString('utf8');
+      let cut = pending.indexOf('\n');
+      while (cut >= 0) {
+        this.push(`${transformLine(pending.slice(0, cut), drop)}\n`);
+        pending = pending.slice(cut + 1);
+        cut = pending.indexOf('\n');
+      }
+      callback();
+    },
+    flush(callback) {
+      if (pending) this.push(transformLine(pending, drop));
+      callback();
+    },
+  });
+}
+
 export function browserArgs(settings = {}) {
-  const args = [BIN, 'mcp'];
+  const args = [SHIM, 'mcp'];
   const tools = text(settings.browserTools);
   if (tools) args.push('--tools', tools);
   const cdp = text(settings.browserCdp);
@@ -51,13 +138,23 @@ export function browserArgs(settings = {}) {
 }
 
 function main() {
-  const args = browserArgs(readSettings());
-  const child = spawn(process.execPath, args, { stdio: 'inherit', windowsHide: true });
+  const settings = readSettings();
+  const args = browserArgs(settings);
+  const flagKeys_ = flagKeys(text(settings.browserToolFlags));
+  const native = nativeBin();
+  const child = native
+    ? spawn(native, args.slice(1), { stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true })
+    : spawn(process.execPath, args, { stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
   child.on('error', (error) => {
     process.stderr.write(`arya browser lane: could not start agent-browser: ${error.message}\n`);
     process.exit(1);
   });
   child.on('exit', (code, signal) => process.exit(code ?? (signal ? 1 : 0)));
+  process.stdin.pipe(child.stdin);
+  if (flagKeys_.length) child.stdout.pipe(createFlagStripTransform(flagKeys_)).pipe(process.stdout);
+  else child.stdout.pipe(process.stdout);
+  child.stderr.pipe(process.stderr);
+  child.stdin.on('error', () => { /* child gone mid-write; the exit handler ends us */ });
   for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) {
     process.on(signal, () => { try { child.kill(signal); } catch { /* already gone */ } });
   }

package/mcp/settings.mjs

@@ -10,6 +10,7 @@ export const DEFAULT_SETTINGS = Object.freeze({
   resumeToken: 0, previewToken: 0,
   headedDefault: false, overlayDefault: true, driverLockEnabled: true, toolPreset: 'lite',
   browserTools: 'core', browserProfile: '', browserSession: '', browserStateFile: '', browserCdp: '', browserHeaded: false,
+  browserToolFlags: 'strip',
 });
 
 export const STOP_SHORTCUT_PATTERN = /^(?:(?:Ctrl\+)?(?:Alt\+)?(?:Shift\+)?(?:Win\+)?(?:[A-Z0-9]|F(?:[1-9]|1[0-9]|2[0-4])|Space|Enter|Tab|Backspace|Delete|Insert|Home|End|PageUp|PageDown|Up|Down|Left|Right|Pause|CapsLock|NumLock|ScrollLock))?$/;
@@ -37,6 +38,7 @@ const SETTING_SWITCHES = ['progressOverlayEnabled', 'indicatorEnabled', 'cursorI
 SETTING_CHOICES.progressOverlayPosition = ['top-right','top-left','bottom-right','bottom-left','custom'];
 SETTING_CHOICES.progressOverlayMode = ['source','summary'];
 SETTING_CHOICES.browserTools = ['core', 'network', 'state', 'debug', 'tabs', 'react', 'mobile', 'all'];
+SETTING_CHOICES.browserToolFlags = ['strip', 'lean', 'off'];
 SETTING_CHOICES.toolPreset = ['lite', 'lazy'];
 export function repairStaleSettings(input) {
   if (!input || typeof input !== 'object' || Array.isArray(input)) return { value: input, repaired: [] };
@@ -56,10 +58,10 @@ export function normalizeSettings(input = {}) {
   if (typeof value.indicatorText !== 'string' || !value.indicatorText.trim() || value.indicatorText.length > 120 || /[\r\n\x00-\x1f]/.test(value.indicatorText)) {
     throw new Error('indicatorText must be one line of 1–120 characters');
   }
-  if (typeof value.pointerLabel !== 'string' || !value.pointerLabel.trim() || value.pointerLabel.trim().length > 16 || /[\r\n\x00-\x1f]/.test(value.pointerLabel)) {
-    throw new Error('pointerLabel must be one line of 1–16 characters');
-  }
-  value.pointerLabel = value.pointerLabel.trim();
+  if (typeof value.pointerLabel !== 'string' || !value.pointerLabel.trim() || value.pointerLabel.trim().length > 16 || /[\r\n\x00-\x1f]/.test(value.pointerLabel)) {
+    throw new Error('pointerLabel must be one line of 1–16 characters');
+  }
+  value.pointerLabel = value.pointerLabel.trim();
   if (!['top', 'bottom'].includes(value.indicatorPosition)) throw new Error('indicatorPosition must be top or bottom');
   if (!Number.isInteger(value.indicatorIdleMs) || value.indicatorIdleMs < 200 || value.indicatorIdleMs > 3000) throw new Error('indicatorIdleMs must be 200–3000');
   value.stopShortcut = normalizeStopShortcut(value.stopShortcut);
@@ -72,6 +74,7 @@ export function normalizeSettings(input = {}) {
   if (!SETTING_CHOICES.progressOverlayMode.includes(value.progressOverlayMode)) throw new Error('Invalid progressOverlayMode');
   if (!SETTING_CHOICES.toolPreset.includes(value.toolPreset)) throw new Error('toolPreset must be one of ' + SETTING_CHOICES.toolPreset.join(', '));
   if (!SETTING_CHOICES.browserTools.includes(value.browserTools)) throw new Error('browserTools must be one of ' + SETTING_CHOICES.browserTools.join(', '));
+  if (!SETTING_CHOICES.browserToolFlags.includes(value.browserToolFlags)) throw new Error('browserToolFlags must be one of ' + SETTING_CHOICES.browserToolFlags.join(', '));
   for (const key of ['browserProfile', 'browserSession', 'browserStateFile', 'browserCdp']) {
     if (typeof value[key] !== 'string') throw new Error(`${key} must be a string`);
     if (/[\r\n\x00-\x1f]/.test(value[key])) throw new Error(`${key} must be one line`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aryacode/dsh-plugin-arya-computer-use",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Computer use for DSH/AryaCode: agent-desktop UIA engine, agent-browser web lane, takeover UI with a ghost cursor",
   "license": "MIT",
   "type": "module",
@@ -29,6 +29,7 @@
     "scripts/windows-takeover.ps1",
     "scripts/windows-takeover.cs",
     "scripts/ocr.ps1",
+    "scripts/hide-consoles.ps1",
     "skills/arya-desktop/SKILL.md",
     "locale/en.json",
     "icon.svg",

package/scripts/hide-consoles.ps1

@@ -0,0 +1,120 @@
+# Arya Computer Use - hide the console windows the automation sidecars hand to
+# the desktop.
+#
+# Windows gives a console window named after the executable to any console
+# process that was not started with CREATE_NO_WINDOW. Both engines ship a JS
+# shim (agent-browser/bin/agent-browser.js, agent-desktop/bin/agent-desktop)
+# that runs the native helper with `stdio: 'inherit'` and `windowsHide: false`,
+# and a native helper that outlives the call (the browser daemon) keeps its
+# console for the whole session. The plugin starts the natives itself wherever
+# it can, so the shim never runs, but a lane restart or a helper started by
+# something else still puts a black console on screen - and closing it kills the
+# helper, which is why it comes back.
+#
+# This watcher hides those windows instead of closing them. Hiding only removes
+# the chrome: stdio is piped, the helper keeps running and stays reachable.
+# Nothing else is touched - the window must be a classic console AND its title
+# or its image path must name one of the two engine helpers.
+#
+# Started hidden by index.js for the lifetime of the host process
+# (-ParentPid). -Once -Report prints what would be hidden and changes nothing.
+
+param(
+  [int]$ParentPid = 0,
+  [int]$IntervalMs = 600,
+  [switch]$Once,
+  [switch]$Report
+)
+
+$ErrorActionPreference = 'Stop'
+
+# Console window titles on Windows default to the application path, and the
+# vendor shim does not overwrite them. A few releases rename the helper, so the
+# match stays on the package name plus its bin directory.
+$script:TitlePattern = 'agent-(browser|desktop)(-win32-(x64|arm64))?\.exe'
+$script:PathPattern = '\\node_modules\\(agent-browser|agent-desktop)\\bin\\'
+
+Add-Type -Namespace AryaCU -Name Win32 -MemberDefinition @'
+    public delegate bool EnumWindowsProc(System.IntPtr hWnd, System.IntPtr lParam);
+
+    [System.Runtime.InteropServices.DllImport("user32.dll")]
+    public static extern bool EnumWindows(EnumWindowsProc lpEnumFunc, System.IntPtr lParam);
+
+    [System.Runtime.InteropServices.DllImport("user32.dll", CharSet = System.Runtime.InteropServices.CharSet.Unicode)]
+    public static extern int GetWindowTextW(System.IntPtr hWnd, System.Text.StringBuilder lpString, int nMaxCount);
+
+    [System.Runtime.InteropServices.DllImport("user32.dll", CharSet = System.Runtime.InteropServices.CharSet.Unicode)]
+    public static extern int GetClassNameW(System.IntPtr hWnd, System.Text.StringBuilder lpClassName, int nMaxCount);
+
+    [System.Runtime.InteropServices.DllImport("user32.dll")]
+    public static extern bool IsWindowVisible(System.IntPtr hWnd);
+
+    [System.Runtime.InteropServices.DllImport("user32.dll")]
+    public static extern bool ShowWindow(System.IntPtr hWnd, int nCmdShow);
+
+    [System.Runtime.InteropServices.DllImport("user32.dll")]
+    public static extern uint GetWindowThreadProcessId(System.IntPtr hWnd, out uint lpdwProcessId);
+'@
+
+# Returns the visible console windows that belong to one of the engine helpers.
+function Get-EngineConsoles {
+  $found = New-Object System.Collections.ArrayList
+
+  $callback = [AryaCU.Win32+EnumWindowsProc] {
+    param([IntPtr]$hWnd, [IntPtr]$lParam)
+
+    if (-not [AryaCU.Win32]::IsWindowVisible($hWnd)) { return $true }
+
+    $class = New-Object System.Text.StringBuilder 256
+    [void][AryaCU.Win32]::GetClassNameW($hWnd, $class, 256)
+    # ConPTY terminals and Windows Terminal use their own classes; only the
+    # classic console host is a candidate.
+    if ($class.ToString() -ne 'ConsoleWindowClass') { return $true }
+
+    $title = New-Object System.Text.StringBuilder 1024
+    [void][AryaCU.Win32]::GetWindowTextW($hWnd, $title, 1024)
+    $text = $title.ToString()
+
+    $ownerPid = 0
+    [void][AryaCU.Win32]::GetWindowThreadProcessId($hWnd, [ref]$ownerPid)
+
+    $hit = $text -match $script:TitlePattern
+    if (-not $hit -and $ownerPid -gt 0) {
+      # The title can be blanked by the shim's parent; fall back to the image
+      # path when the process is readable (the host runs elevated, so it is).
+      try {
+        $path = (Get-Process -Id $ownerPid -ErrorAction Stop).Path
+        if ($path -and $path -match $script:PathPattern) { $hit = $true }
+      } catch { }
+    }
+
+    if ($hit) {
+      [void]$found.Add([pscustomobject]@{ Handle = $hWnd; Title = $text; OwnerPid = $ownerPid })
+    }
+    return $true
+  }
+
+  [void][AryaCU.Win32]::EnumWindows($callback, [IntPtr]::Zero)
+  return @($found.ToArray())
+}
+
+while ($true) {
+  try {
+    foreach ($window in Get-EngineConsoles) {
+      if ($Report) {
+        '{0} {1} {2}' -f $window.OwnerPid, $window.Handle, $window.Title
+      } else {
+        [void][AryaCU.Win32]::ShowWindow($window.Handle, 0) # SW_HIDE
+      }
+    }
+  } catch {
+    if ($Once) { throw }
+  }
+
+  if ($Once) { break }
+
+  Start-Sleep -Milliseconds ([Math]::Max(200, $IntervalMs))
+
+  # Leave with the host: an orphaned watcher would keep polling forever.
+  if ($ParentPid -gt 0 -and -not (Get-Process -Id $ParentPid -ErrorAction SilentlyContinue)) { break }
+}