@duckmind/dm-windows-x64 0.61.9 → 0.62.3

package/extensions/.dm-extensions.json

@@ -1,6 +1,6 @@
 {
   "status": "ok",
-  "prepared_at": "2026-08-30T17:14:08.444877+00:00",
+  "prepared_at": "2026-08-30T20:04:04.470932+00:00",
   "managed_entries": [
     {
       "id": "dm-context",
@@ -518,8 +518,8 @@
           "src/utils/system-cmds.mjs"
         ],
         "file_count": 62,
-        "before_bytes": 612563,
-        "after_bytes": 495187,
+        "before_bytes": 613697,
+        "after_bytes": 496359,
         "runtime_specifier_rewrites": 0,
         "runtime_filename_rewrites": 8,
         "declaration_files_removed": 0
@@ -764,8 +764,8 @@
           "src/browser-install.mjs"
         ],
         "file_count": 4,
-        "before_bytes": 35004,
-        "after_bytes": 35672,
+        "before_bytes": 38392,
+        "after_bytes": 38745,
         "runtime_specifier_rewrites": 0,
         "runtime_filename_rewrites": 0,
         "declaration_files_removed": 0

package/extensions/dm-cua/bin/browser-cua.mjs

@@ -11,11 +11,16 @@ Usage:
   node browser-cua.mjs click_xy --x <num> --y <num> [--tab <prefix>] [--json]
   node browser-cua.mjs type --text <text> [--tab <prefix>] [--json]
   node browser-cua.mjs evaluate --expression <js> [--tab <prefix>] [--json]
+  node browser-cua.mjs handoff [--tab <prefix>] [--json]
   node browser-cua.mjs stop [--json]
 
 	Notes:
 	  - This helper reuses DM's bundled greedysearch-dm CDP sidecar.
-	  - Fresh dedicated browser profiles auto-bootstrap a blank tab.
+		  - Fresh dedicated browser profiles auto-bootstrap a blank tab.
+		  - handoff opens the dedicated browser visibly for user-authorized login or
+		    verification. DM does not solve challenges or enter credentials for you.
+		  - Profiles persist by project under ~/.dm/agent/cua/profiles by default;
+		    set DM_CUA_EPHEMERAL=1 for a disposable profile.
 	  - Default browser is Chrome/Chromium. If absent, DM attempts a non-interactive
 	    package-manager install; set DM_CUA_AUTO_INSTALL=0 to opt out.
 	  - To try CloakBrowser, set DM_CUA_BROWSER=cloak

package/extensions/dm-cua/index.js

@@ -15,9 +15,10 @@ const browserActionSchema = Type.Object({
     Type.Literal("click_xy"),
     Type.Literal("type"),
     Type.Literal("evaluate"),
+    Type.Literal("handoff"),
     Type.Literal("stop")
   ], {
-    description: "Browser action. Start with list, snapshot, or screenshot before mutating actions on unfamiliar pages."
+    description: "Browser action. Start with list, snapshot, or screenshot before mutating actions on unfamiliar pages. Use handoff to show the retained DM browser window for user-authorized login or verification."
   }),
   tab: Type.Optional(Type.String({
     description: "Optional target tab prefix from browser_cua(list). If omitted, the first live page in the dedicated profile is used."
@@ -41,7 +42,7 @@ export default function registerDmCua(pi) {
   pi.registerTool({
     name: "browser_cua",
     label: "Browser CUA",
-    description: "Drive a dedicated Chrome browser profile through DM's bundled browser CUA lane. " + "If Chrome/Chromium is absent, DM attempts a non-interactive OS package-manager install before launch. " + "Inspect first with list, snapshot, or screenshot. Fresh empty profiles auto-bootstrap a blank tab. " + "Use navigate for deterministic URLs, click with a standard CSS selector/click_xy/type for page interaction, evaluate for focused DOM reads or text matching, and stop to close the dedicated browser lane.",
+    description: "Drive a dedicated Chrome browser profile through DM's bundled browser CUA lane. " + "If Chrome/Chromium is absent, DM attempts a non-interactive OS package-manager install before launch. " + "Inspect first with list, snapshot, or screenshot. Fresh empty profiles auto-bootstrap a blank tab. " + "Use handoff when a site needs you to complete a login or verification in the visible browser; DM never solves challenges or enters credentials. " + "Use navigate for deterministic URLs, click with a standard CSS selector/click_xy/type for page interaction, evaluate for focused DOM reads or text matching, and stop to close the dedicated browser lane.",
     promptSnippet: "First-class browser CUA for Chrome with automatic browser bootstrap. Inspect before acting. Screenshot complex pages before click/scroll loops.",
     parameters: browserActionSchema,
     async execute(_toolCallId, params) {

package/extensions/dm-cua/src/browser-cua-lib.mjs

@@ -44,7 +44,8 @@ export function resolveBrowserRuntimeConfig(env = process.env, scope = process.c
   const browserExecutablePath = resolveBrowserExecutablePath(env, browserKind);
   const port = parsePort(env.DM_CUA_PORT) ?? parsePort(env.GREEDY_SEARCH_PORT) ?? DEFAULT_CUA_PORT_BASE + Number.parseInt(scopeHash.slice(0, 8), 16) % DEFAULT_CUA_PORT_RANGE;
   const profileSuffix = browserKind === "chrome" ? "chrome" : browserKind;
-  const profileDir = resolve(env.DM_CUA_PROFILE_DIR || join(tmpdir(), `dm-cua-${profileSuffix}-profile-${instanceId}`));
+  const defaultProfileDir = env.DM_CUA_EPHEMERAL === "1" ? join(tmpdir(), `dm-cua-${profileSuffix}-profile-${instanceId}`) : join(resolveAgentDir(env), "cua", "profiles", `${profileSuffix}-${scopeHash}`);
+  const profileDir = resolve(env.DM_CUA_PROFILE_DIR || defaultProfileDir);
   const socketBaseDir = platform() === "win32" ? tmpdir() : "/tmp";
   return {
     instanceId,
@@ -133,8 +134,8 @@ export function resolveBrowserHelperPaths() {
   }
   return candidates[0];
 }
-export function resolveBrowserProcessEnv(config = BROWSER_CONFIG, env = process.env) {
-  const visible = env.GREEDY_SEARCH_VISIBLE ?? env.DM_CUA_VISIBLE ?? env.DM_BROWSER_CUA_VISIBLE;
+export function resolveBrowserProcessEnv(config = BROWSER_CONFIG, env = process.env, { visible } = {}) {
+  const visibleMode = visible === true ? "1" : visible === false ? "0" : env.GREEDY_SEARCH_VISIBLE ?? env.DM_CUA_VISIBLE ?? env.DM_BROWSER_CUA_VISIBLE;
   return {
     ...env,
     ...config.browserExecutablePath ? { CHROME_PATH: config.browserExecutablePath } : {},
@@ -147,11 +148,11 @@ export function resolveBrowserProcessEnv(config = BROWSER_CONFIG, env = process.
     GREEDY_SEARCH_PID_FILE: config.pidFile.replace(/\\/g, "/"),
     GREEDY_SEARCH_MODE_FILE: config.modeFile.replace(/\\/g, "/"),
     GREEDY_SEARCH_ALLOW_PORT_CLEANUP: env.GREEDY_SEARCH_ALLOW_PORT_CLEANUP ?? "0",
-    ...visible === undefined ? {} : { GREEDY_SEARCH_VISIBLE: visible }
+    ...visibleMode === undefined ? {} : { GREEDY_SEARCH_VISIBLE: visibleMode }
   };
 }
-function browserEnv() {
-  return resolveBrowserProcessEnv(BROWSER_CONFIG, process.env);
+function browserEnv(options) {
+  return resolveBrowserProcessEnv(BROWSER_CONFIG, process.env, options);
 }
 function looksLikeUrl(value) {
   return URLISH_PATTERN.test(value);
@@ -184,8 +185,8 @@ export function validateBrowserSelector(selector) {
   }
   return value;
 }
-function resolveAgentDir() {
-  const explicit = process.env.DM_CODING_AGENT_DIR || process.env.PI_CODING_AGENT_DIR;
+function resolveAgentDir(env = process.env) {
+  const explicit = env.DM_CODING_AGENT_DIR || env.PI_CODING_AGENT_DIR;
   return explicit ? resolve(explicit) : join(homedir(), ".dm", "agent");
 }
 function defaultScreenshotPath() {
@@ -269,7 +270,10 @@ async function createBlankTarget(url = "about:blank") {
 }
 async function runCdp(args, options = {}) {
   const { cdpScript } = resolveBrowserHelperPaths();
-  return runNodeScript(cdpScript, args, { env: browserEnv(), timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS });
+  return runNodeScript(cdpScript, args, {
+    env: browserEnv({ visible: options.visible }),
+    timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS
+  });
 }
 async function listPages() {
   const result = await runCdp(["list"]);
@@ -288,10 +292,13 @@ async function ensureBrowserHelpersExist() {
   }
   return { launchScript, cdpScript };
 }
-export async function ensureBrowserReady() {
+export async function ensureBrowserReady({ visible = false } = {}) {
   const { launchScript } = await ensureBrowserHelpersExist();
   await ensureConfiguredBrowserSelectionUsable();
-  await runNodeScript(launchScript, [], { env: browserEnv(), timeoutMs: DEFAULT_TIMEOUT_MS });
+  await runNodeScript(launchScript, [], {
+    env: browserEnv({ visible }),
+    timeoutMs: DEFAULT_TIMEOUT_MS
+  });
   let pages = await listPages();
   if (pages.length === 0) {
     await createBlankTarget("about:blank");
@@ -310,6 +317,17 @@ async function resolveTabContext(tabPrefix) {
   }
   return { tab: page.target, page, pages };
 }
+export function classifyHumanInteraction(value) {
+  const text = String(value ?? "");
+  const match = text.match(/cloudflare|turnstile|recaptcha|hcaptcha|aws waf|geetest|verify (?:you are )?human|just a moment|checking your browser|login required|sign[ -]?in required|authentication required/i);
+  return match ? {
+    needed: true,
+    reason: match[0]
+  } : {
+    needed: false,
+    reason: null
+  };
+}
 export async function runBrowserAction({
   action,
   tab,
@@ -347,6 +365,7 @@ export async function runBrowserAction({
     case "snapshot": {
       const context = await resolveTabContext(tab);
       const result = await runCdp(["snap", context.tab]);
+      const snapshot = result.stdout.trim();
       return {
         status: "ok",
         action,
@@ -354,7 +373,33 @@ export async function runBrowserAction({
         tab: context.tab,
         title: context.page?.title || "",
         url: context.page?.url || "",
-        snapshot: result.stdout.trim()
+        snapshot,
+        humanInteraction: classifyHumanInteraction(`${context.page?.title || ""}
+${context.page?.url || ""}
+${snapshot}`)
+      };
+    }
+    case "handoff": {
+      try {
+        await runCdp(["stop"]);
+      } catch {}
+      const pages = await ensureBrowserReady({ visible: true });
+      const page = findPage(pages, tab);
+      if (!page) {
+        throw new Error(tab ? `No browser tab matching prefix "${tab}". Run browser_cua(list) first.` : "No browser tab available after browser bootstrap.");
+      }
+      const snapshot = await runCdp(["snap", page.target], { visible: true }).then((result) => result.stdout.trim());
+      return {
+        status: "ok",
+        action,
+        browser: browserSummary(),
+        tab: page.target,
+        title: page.title || "",
+        url: page.url || "",
+        humanInteraction: classifyHumanInteraction(`${page.title || ""}
+${page.url || ""}
+${snapshot}`),
+        message: "Opened the dedicated DM browser window for human interaction. Complete only the site interaction you authorize, then return to DM; this scoped profile is retained for future CUA sessions."
       };
     }
     case "screenshot": {
@@ -465,7 +510,18 @@ export function renderBrowserActionText(result) {
       return [`Navigated browser tab ${result.tab} to ${result.url || "(unknown URL)"}`, result.title ? `Title: ${result.title}` : ""].filter(Boolean).join(`
 `);
     case "snapshot":
-      return [`Browser snapshot for ${result.tab}`, result.snapshot || "(empty snapshot)"].join(`
+      return [
+        `Browser snapshot for ${result.tab}`,
+        result.snapshot || "(empty snapshot)",
+        result.humanInteraction?.needed ? `Human interaction may be required: ${result.humanInteraction.reason}. Use browser_cua(handoff) to open the DM browser window.` : ""
+      ].filter(Boolean).join(`
+`);
+    case "handoff":
+      return [
+        result.message,
+        result.humanInteraction?.needed ? `Detected: ${result.humanInteraction.reason}.` : "No known verification marker was detected; the visible browser remains available if the page still needs you.",
+        "DM does not solve challenges or enter credentials for you."
+      ].join(`
 `);
     case "screenshot":
       return [

package/extensions/greedysearch-dm/bin/cdp.mjs

@@ -647,6 +647,15 @@ async function runDaemon(targetId) {
       }
     });
   });
+  server.once("error", (error) => {
+    process.stderr.write(`Daemon: socket listener failed at ${sp}: ${error.message}
+`);
+    try {
+      unlinkSync(sp);
+    } catch {}
+    cdp.close();
+    process.exit(1);
+  });
   try {
     unlinkSync(sp);
   } catch {}
@@ -669,21 +678,37 @@ async function getOrStartTabDaemon(targetId) {
   } catch {}
   const child = spawn(nodeRuntimeCommand(), [process.argv[1], "_daemon", targetId], {
     detached: true,
-    stdio: "ignore"
+    stdio: ["ignore", "ignore", "pipe"]
+  });
+  let daemonStderr = "";
+  let daemonExit = "";
+  child.stderr?.on("data", (chunk) => {
+    daemonStderr = `${daemonStderr}${chunk}`.slice(-2048);
+  });
+  child.on("error", (error) => {
+    daemonExit = error.message;
+  });
+  child.on("exit", (code, signal) => {
+    daemonExit = signal ? `terminated by ${signal}` : `exited with code ${code}`;
   });
   child.unref();
+  child.stderr?.unref?.();
   const backoffSchedule = [50, 100, 200];
   const deadline = Date.now() + DAEMON_CONNECT_RETRIES * DAEMON_CONNECT_DELAY;
   let attempt = 0;
   while (Date.now() < deadline) {
     try {
-      return await connectToSocket(sp);
+      const conn = await connectToSocket(sp);
+      child.stderr?.destroy();
+      return conn;
     } catch {}
     const delay = backoffSchedule[attempt] ?? DAEMON_CONNECT_DELAY;
     attempt++;
     await sleep(delay);
   }
-  throw new Error("Daemon failed to start — did you click Allow in Chrome?");
+  child.stderr?.destroy();
+  const diagnostic = (daemonStderr || daemonExit || "no startup diagnostic was emitted").replace(/\s+/g, " ").trim();
+  throw new Error(`Tab daemon did not become ready for ${targetId.slice(0, MIN_TARGET_PREFIX_LEN)}. ${diagnostic}. ` + "Keep the dedicated DM browser open and retry; use browser_cua(handoff) if the site needs your interaction.");
 }
 function sendCommand(conn, req) {
   return new Promise((resolve, reject) => {

package/extensions/greedysearch-dm/bin/launch.mjs

@@ -9,7 +9,7 @@ import {
 } from "node:fs";
 import { platform, tmpdir } from "node:os";
 import { join } from "node:path";
-import { httpGet, minimizeViaCDP } from "../src/search/minimize.mjs";
+import { httpGet } from "../src/search/minimize.mjs";
 import {
   ACTIVE_PORT_FILE,
   CHROME_MODE_FILE,
@@ -275,8 +275,7 @@ async function main() {
   if (isHeadless()) {
     console.log("Ready (headless).");
   } else {
-    await minimizeViaCDP(PORT);
-    console.log("Ready.");
+    console.log("Ready (visible).");
   }
 }
 main();

package/extensions/greedysearch-dm/src/search/constants.mjs

@@ -1,5 +1,6 @@
+import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import { homedir, platform } from "node:os";
 import { join } from "node:path";
 import { tmpdir } from "node:os";
 export function parseGreedySearchPort(value, fallback = 9222) {
@@ -16,7 +17,9 @@ export const CHROME_MODE_FILE = process.env.GREEDY_SEARCH_MODE_FILE || `${GREEDY
 export const GREEDY_METADATA_FILE = process.env.GREEDY_SEARCH_METADATA_FILE || `${GREEDY_PROFILE_DIR}/browser-metadata.json`;
 export const GREEDY_LAUNCH_LOCK_FILE = process.env.GREEDY_SEARCH_LAUNCH_LOCK_FILE || `${GREEDY_PROFILE_DIR}/browser-launch.lock`;
 export const GREEDY_ACTIVITY_FILE = process.env.GREEDY_SEARCH_ACTIVITY_FILE || `${GREEDY_PROFILE_DIR}/browser-last-activity`;
-export const GREEDY_CDP_SOCKET_DIR = (process.env.CDP_SOCKET_DIR || `${GREEDY_PROFILE_DIR}/cdp-sockets`).replaceAll("\\", "/");
+const GREEDY_SOCKET_SCOPE = createHash("sha256").update(GREEDY_PROFILE_DIR).digest("hex").slice(0, 16);
+const GREEDY_SOCKET_BASE = platform() === "win32" ? GREEDY_TMP : "/tmp";
+export const GREEDY_CDP_SOCKET_DIR = (process.env.CDP_SOCKET_DIR || `${GREEDY_SOCKET_BASE}/dm-gs-${GREEDY_SOCKET_SCOPE}`).replaceAll("\\", "/");
 export const VISIBLE_RECOVERY_LOG = `${GREEDY_PROFILE_DIR}/visible-recovery.jsonl`;
 const CONFIG_DIR = join(homedir(), ".dm");
 const CONFIG_FILE = join(CONFIG_DIR, "greedyconfig");

package/extensions/greedysearch-dm/src/search/research.mjs

@@ -19,7 +19,7 @@ import { runSimpleResearchMode } from "./simple-research.mjs";
 import { createProgressTracker } from "./progress.mjs";
 const __dir = fileURLToPath(new URL(".", import.meta.url)).replace(/^\/([A-Z]:)/, "$1");
 const SEARCH_BIN = join(__dir, "..", "..", "bin", "search.mjs");
-const DEFAULT_RESEARCH_BUNDLE_ROOT = join(process.cwd(), ".pi", "greedysearch-research");
+const DEFAULT_RESEARCH_BUNDLE_ROOT = join(process.cwd(), ".dm", "greedysearch-research");
 const MAX_PROMPT_CHARS = 28000;
 function slugifyResearchName(value) {
   const slug = String(value || "research").toLowerCase().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/^-|-$/g, "").slice(0, 60);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@duckmind/dm-windows-x64",
-  "version": "0.61.9",
+  "version": "0.62.3",
   "description": "DuckMind (dm) binary payload for windows x64",
   "license": "MIT",
   "os": [