@fastbrowse/darwin-x64 0.5.19 → 0.5.23

package/fastbrowse/_internal/fastbrowse/browser/capture.js

@@ -2,8 +2,8 @@
 // Unlike snapshot.js (bounded, for Jev's action choice) this reads the whole rendered document, on screen or not,
 // so the reading path and answer-evidence quotes see everything a user could scroll to.
 // Adjacent inline content (text, <strong>, <a>, <span>...) is one block, so a value inside markup stays with its label.
-// biome-ignore format: Python embeds this IIFE inside an expression, where a semicolon is invalid.
-(() => {
+// biome-ignore format: Python embeds this function inside an expression, where a semicolon is invalid.
+((allowedOrigins = null) => {
   if (!document.body) return null;
   const HEADINGS = { H1: 1, H2: 2, H3: 3, H4: 4, H5: 5, H6: 6 };
   const SKIP = new Set(['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEMPLATE', 'SVG', 'CANVAS', 'IFRAME']);
@@ -12,7 +12,34 @@
   let framePath = null;
   let sourcePath = '';
   let inaccessible = 0;
+  let visibleH1 = false;
+  let controlObservations = 0;
+  let imageObservations = 0;
+  let imagesOmitted = false;
+  let linkObservations = 0;
+  let linksOmitted = false;
+  let controlsOmitted = false;
+  const imageSource = source => {
+    if (!source) return source;
+    if (source.startsWith('data:')) {
+      const comma = source.indexOf(',');
+      return `${source.slice(0, comma < 0 ? 128 : Math.min(comma, 128))},[payload omitted]`;
+    }
+    if (source.startsWith('blob:')) return 'blob:[identifier omitted]';
+    return source.length > 1024 ? `${source.slice(0, 1024)}[truncated]` : source;
+  };
   const registry = (window.__fastbrowse ||= { ids: new WeakMap(), nodes: new Map(), next: 1 });
+  const granted = doc => {
+    if (allowedOrigins === null) return true;
+    const frame = doc.defaultView.frameElement;
+    if (frame) {
+      if (frame.hasAttribute('srcdoc') || !frame.getAttribute('src')) return false;
+      const source = new URL(frame.src);
+      if (!['http:', 'https:'].includes(source.protocol) || !allowedOrigins.includes(source.origin)) return false;
+    }
+    const url = new URL(doc.URL);
+    return ['http:', 'https:'].includes(url.protocol) && allowedOrigins.includes(url.origin);
+  };
   const identity = e => {
     if (!registry.ids.has(e)) registry.ids.set(e, registry.next++);
     return registry.ids.get(e);
@@ -34,9 +61,67 @@
     const u = new URL(a.href, location.href);
     return u.origin === location.origin ? u.pathname + u.search : u.href;
   };
-  const push = (kind, text, extra = {}) => {
+  const controlOf = nodes => {
+    let found = null;
+    for (const node of nodes) {
+      if (!clean(node.nodeType === 3 ? node.textContent : (node.innerText ?? node.textContent ?? ''))) continue;
+      let host = node.nodeType === 1 ? node : node.parentElement;
+      while (host && !registry.hoverContexts?.has(host)) host = host.parentElement;
+      if (!host?.isConnected || !host.matches(':hover')) return null;
+      const binding = registry.hoverContexts.get(host);
+      const siblings = [...(host.parentNode?.children || [])];
+      const labelAttributes = [host.getAttribute('role'), host.getAttribute('aria-label'),
+        host.getAttribute('title'), host.querySelector('img[alt]')?.getAttribute('alt') || null];
+      if (host.innerText !== binding.text ||
+          labelAttributes.some((value, index) => value !== binding.labelAttributes[index])) return null;
+      // A reordered or replaced sibling set invalidates the observed ordinal before the quote is taken.
+      if (host.parentNode !== binding.parent || siblings.length !== binding.siblings.length ||
+          siblings.some((sibling, index) => sibling !== binding.siblings[index])) return null;
+      if (found && found !== host) return null;
+      found = host;
+    }
+    return found ? registry.hoverContexts.get(found).control : null;
+  };
+  const listIds = new WeakMap();
+  const listFrameless = new WeakMap();
+  let nextListId = 0;
+  const listContext = nodes => {
+    const lists = new Set();
+    for (const node of nodes) {
+      let element = node.nodeType === 1 ? node : node.parentElement;
+      let list = null;
+      for (let parent = element; parent; parent = parent.parentElement) {
+        if (parent.matches('nav,[role="navigation"]')) return {};
+        if (parent.matches('ul,ol,[role="list"]')) list = parent;
+      }
+      if (!list) {
+        const nested = [...(element?.querySelectorAll('ul,ol,[role="list"]') ?? [])];
+        const outer = nested.filter(candidate => !nested.some(other => other !== candidate && other.contains(candidate)));
+        if (outer.length === 1) list = outer[0];
+      }
+      if (list) lists.add(list);
+    }
+    if (lists.size !== 1) return {};
+    const list = [...lists][0];
+    if (!listIds.has(list)) {
+      listIds.set(list, String(nextListId++));
+      // A frame the capture cannot open elsewhere on the page, such as an advertisement, cannot hold a member of a
+      // list whose element contains no frame; one inside the list, or behind a shadow root the list or anything in it
+      // holds, could.
+      const framed = e => e.tagName === 'IFRAME' || e.tagName === 'FRAME' || !!e.shadowRoot;
+      listFrameless.set(list, !framed(list) && ![...list.querySelectorAll('*')].some(framed));
+    }
+    const members = [...list.querySelectorAll('li,[role="listitem"]')].filter(member => {
+      for (let parent = member; parent && parent !== list; parent = parent.parentElement) {
+        if (hidden(parent)) return false;
+      }
+      return !!textOf(member);
+    });
+    return { list_id: listIds.get(list), list_count: members.length, list_frameless: listFrameless.get(list) };
+  };
+  const push = (kind, text, extra = {}, nodes = []) => {
     if (text)
-      blocks.push({ kind, text, heading_path: [...path], frame_path: framePath, source_path: sourcePath, ...extra });
+      blocks.push({ kind, text, heading_path: [...path], frame_path: framePath, source_path: sourcePath, control_context: controlOf(nodes), ...listContext(nodes), ...extra });
   };
 
   // A cell can say what it says with an image or an icon alone: a flag marking the winner, a tick for "yes".
@@ -168,6 +253,8 @@
     let headers = rows.filter(({ row }) => row.parentElement.tagName === 'THEAD');
     if (!headers.length && rows[0].cells.every(c => c.tagName === 'TH')) headers = [rows[0]];
     const line = ({ cells }) => '| ' + cells.map(c => cellText(c).replace(/\|/g, '\\|')).join(' | ') + ' |';
+    // Headerless comparison rows need leading cells for identity and separate source spans for counting.
+    if (!headers.length) return rows.map((row, index) => (index ? [line(rows[0]), line(row)].join('\n') : line(row)));
     const prefix = headers.map(line);
     if (headers.length) prefix.push('| ' + headers[0].cells.map(() => '---').join(' | ') + ' |');
     const data = rows.filter(row => !headers.includes(row));
@@ -184,8 +271,8 @@
       elements[0].href &&
       clean(elements[0].innerText ?? '') === text;
     for (const e of elements) text = withRating(text, e);
-    if (onlyLink) push('link', text, { href: hrefOf(elements[0]) });
-    else push('paragraph', text);
+    if (onlyLink) push('link', text, { href: hrefOf(elements[0]) }, run);
+    else push('paragraph', text, {}, run);
     for (const e of elements) for (const field of fields(e)) push('paragraph', field);
     run.length = 0;
   }
@@ -197,13 +284,22 @@
   // A classless div repeated three times is usually page layout; a record is a styled unit or a semantic item.
   function repeated(el) {
     if (!el.classList.length && el.tagName !== 'ARTICLE' && el.tagName !== 'LI') return false;
-    return (
-      [...(el.parentNode?.children ?? [])].filter(
+    const siblings = [...(el.parentNode?.children ?? [])].filter(
         sibling =>
           sibling.tagName === el.tagName &&
           sibling.classList.length === el.classList.length &&
           [...el.classList].every(token => sibling.classList.contains(token)),
-      ).length >= 3
+      );
+    if (siblings.length >= 3) return true;
+    // Linked cards can sit inside an unlabelled list wrapper, so distinct destinations establish the pair.
+    if (siblings.length === 2 && el.tagName === 'A' && siblings.every(sibling => sibling.hasAttribute('href'))) {
+      return new Set(siblings.map(sibling => sibling.href)).size === siblings.length;
+    }
+    // A styled pair can be a two-column layout, so require a heading outside both items to name their group.
+    const section = el.parentElement;
+    return (
+      siblings.length === 2 &&
+      [...(section?.querySelectorAll('h1,h2,h3,h4,h5,h6') ?? [])].some(heading => siblings.every(sibling => !sibling.contains(heading)))
     );
   }
 
@@ -237,7 +333,7 @@
         continue;
       }
       if (SKIP.has(node.tagName)) continue;
-      if (!isBlock(node) && recordText(node) === null) {
+      if (!node.matches('nav,[role="navigation"]') && !isBlock(node) && recordText(node) === null) {
         run.push(node);
         continue;
       }
@@ -248,30 +344,38 @@
   }
 
   function block(el) {
+    if (el.matches('nav,[role="navigation"]')) {
+      // Navigation help headings describe their menu, not product facts in the following main content.
+      const surrounding = [...path];
+      walk(el);
+      path = surrounding;
+      return;
+    }
     const level = HEADINGS[el.tagName];
     if (level) {
       const text = textOf(el);
       while (path.length >= level) path.pop();
       if (text) {
-        push('heading', text);
+        push('heading', text, {}, [el]);
         path.push(text);
       }
       return;
     }
     if (el.tagName === 'TABLE') {
-      for (const text of renderTable(el)) push('table', text);
+      for (const text of renderTable(el)) push('table', text, {}, [el]);
       // A form laid out in a table: its cells render as text, which holds none of the controls' values.
       for (const field of fields(el)) push('paragraph', field);
       return;
     }
-    if (el.tagName === 'PRE') return push('code', textOf(el));
+    if (el.tagName === 'PRE') return push('code', textOf(el), {}, [el]);
     const record = recordText(el);
     if ((el.tagName === 'LI' && leaf(el)) || record !== null) {
-      const links = el.querySelectorAll('a[href]');
+      const links = el.matches('a[href]') ? [el] : el.querySelectorAll('a[href]');
       push(
         el.tagName === 'LI' ? 'list_item' : 'record',
         record ?? withRating(textOf(el), el),
         links.length === 1 ? { href: hrefOf(links[0]) } : {},
+        [el],
       );
       for (const field of fields(el)) push('paragraph', field);
       return;
@@ -296,7 +400,7 @@
     } catch {
       inner = null;
     }
-    if (!inner?.body) {
+    if (!inner?.body || !granted(inner)) {
       inaccessible++;
       return;
     }
@@ -310,6 +414,77 @@
     framePath = frame;
     sourcePath = source;
     walk(root);
+    path = [...headings];
+    const visible = e => e.checkVisibility ? e.checkVisibility({ visibilityProperty: true }) : !hidden(e);
+    for (const e of [...root.querySelectorAll('input,select,textarea,button,[role="button"]')].filter(visible)) {
+      if (controlObservations >= 64) {
+        if (!controlsOmitted) push('observation', 'Additional control state observations omitted.');
+        controlsOmitted = true;
+        break;
+      }
+      // Placeholders suggest input; they do not label a value or prove an empty named field.
+      if (CONTROLS.has(e.tagName) && !e.labels?.length && !e.hasAttribute('aria-label') && !e.hasAttribute('aria-labelledby')) continue;
+      const name = nameOf(e) || clean(e.innerText ?? '');
+      if (!name || e.dataset?.fastbrowseSecret === '1') continue;
+      if (CONTROLS.has(e.tagName) && !UNFILLED.has(e.type) && !fieldValue(e)) {
+        push('observation', `${name.slice(0, 1024)}: [empty]`);
+        controlObservations++;
+      }
+      if (controlObservations < 64 && e.matches(':disabled,[aria-disabled="true"]')) {
+        push('observation', `${name.slice(0, 1024)}: disabled`);
+        controlObservations++;
+      }
+    }
+    // Images carry no innerText, so a text-only capture cannot distinguish their presence from absence.
+    for (const image of [...root.querySelectorAll('img')].filter(visible)) {
+      if (imageObservations++ >= 32) {
+        if (!imagesOmitted) push('observation', 'Additional visible image metadata omitted.');
+        imagesOmitted = true;
+        break;
+      }
+      // Loading changes without a page edit, so captures report presence rather than transient decode state.
+      const metadata = { alt: image.getAttribute('alt')?.slice(0, 1024) ?? null,
+        src: imageSource(image.getAttribute('src') ?? image.getAttribute('srcset')) };
+      push('observation', `Image element DOM metadata: ${JSON.stringify(metadata)}. Pixels are not described.`);
+    }
+    // A link drawn only as an icon has no text, so its destination, the one thing it says, was nowhere a reader
+    // could quote: asked for a release's download URL beside an icon-only download link, a run read every other
+    // field of the row and then clicked the link again and again looking for the address. The row's text names
+    // which item the link belongs to, since the observation is not read where the link stands.
+    for (const link of [...root.querySelectorAll('a[href]')].filter(visible)) {
+      if (clean(link.innerText ?? '')) continue;
+      // An icon button written as `href="#"` or a script URL runs code here and leads nowhere to report. A bare
+      // `#` parses to an empty hash, so the raw attribute says it is a fragment link, not the parsed URL.
+      let target;
+      try {
+        target = new URL(link.getAttribute('href'), location.href);
+      } catch {
+        // One malformed address must not cost the page its whole capture.
+        continue;
+      }
+      const page = location.href.split('#')[0];
+      const fragment = link.getAttribute('href').trim().startsWith('#') || (target.hash && target.href.split('#')[0] === page);
+      if (target.protocol === 'javascript:' || fragment) continue;
+      if (linkObservations++ >= 32) {
+        if (!linksOmitted) push('observation', 'Additional link destinations omitted.');
+        linksOmitted = true;
+        break;
+      }
+      let row = link.parentElement;
+      while (row && row !== root && !clean(row.innerText ?? '')) row = row.parentElement;
+      const metadata = {
+        label: (nameOf(link) || drawn(link)).slice(0, 256) || null,
+        href: imageSource(link.href),
+        near: row ? textOf(row).replace(/\s+/g, ' ').slice(0, 256) || null : null,
+      };
+      push('observation', `Link element DOM metadata: ${JSON.stringify(metadata)}. The link has no text.`);
+    }
+    const h1 = [...root.querySelectorAll('h1,[role="heading"][aria-level="1"]')].filter(visible);
+    visibleH1 ||= h1.length > 0;
+    if (root === document.body) {
+      const doc = document.documentElement;
+      push('observation', `Observed viewport: Horizontal overflow: ${doc.scrollWidth > doc.clientWidth ? 'yes' : 'no'}`);
+    }
     for (const e of root.querySelectorAll('*')) {
       if (e.shadowRoot) scope(e.shadowRoot, frame, `${source}/shadow:${identity(e)}`);
       // A frame the walk never reached (hidden, or inside a record or table read as one block) is still read.
@@ -319,5 +494,6 @@
   }
 
   scope(document.body, null, '');
-  return { url: location.href, title: document.title, blocks, inaccessible_frames: inaccessible };
-})()
+  if (!visibleH1) push('observation', 'Observed accessible DOM: Visible h1 headings: 0');
+  return { url: location.href, title: document.title, blocks, inaccessible_frames: inaccessible, visible_h1: visibleH1 };
+})

package/fastbrowse/_internal/fastbrowse/browser/snapshot.js

@@ -3,7 +3,18 @@
 // Adapted to fastbrowse's Control shape (role + operation set, not per-kind actions) and to traverse
 // open shadow roots. Runs once per frame session (main frame or an OOPIF); the Python side merges frames.
 // biome-ignore format: Python appends mode arguments to this parenthesized expression.
-(mode => {
+((mode, allowedOrigins = null) => {
+  const granted = doc => {
+    if (allowedOrigins === null) return true;
+    const frame = doc.defaultView.frameElement;
+    if (frame) {
+      if (frame.hasAttribute('srcdoc') || !frame.getAttribute('src')) return false;
+      const source = new URL(frame.src);
+      if (!['http:', 'https:'].includes(source.protocol) || !allowedOrigins.includes(source.origin)) return false;
+    }
+    const url = new URL(doc.URL);
+    return ['http:', 'https:'].includes(url.protocol) && allowedOrigins.includes(url.origin);
+  };
   // Form context is repeated for each submit-capable input in safety prompts.
   const FORM_TEXT_CHARS = 2000;
   // Freshness guards bound comparison work on large cards; this text is never sent to a model.
@@ -30,6 +41,10 @@
     return true;
   };
   const registry = (window.__fastbrowse ||= { ids: new WeakMap(), nodes: new Map(), next: 1 });
+  // Keep the page's own timer overrides from holding a browser-side frame wait open.
+  registry.nativeSetTimeout ||= window.setTimeout.bind(window);
+  registry.nativeClearTimeout ||= window.clearTimeout.bind(window);
+  registry.nativeRequestAnimationFrame ||= window.requestAnimationFrame.bind(window);
   // What was offered to be acted on; `ids` also names hover targets and fingerprinted nodes.
   registry.controls ||= new WeakSet();
   // A visible loading indicator means the page is still fetching what it will draw, which network idle and a
@@ -117,7 +132,7 @@
           } catch {
             inner = null;
           }
-          if (inner?.body) include(inner);
+          if (inner?.body && granted(inner)) include(inner);
         }
       }
     };
@@ -165,10 +180,56 @@
   registry.visible = visible;
   // Styled checkboxes and radios often hide the native input. Its visible label is the click
   // target, but the input still owns the checked/disabled state and must participate in freshness.
-  const sourceOf = e => (e.tagName === 'LABEL' && ['checkbox', 'radio'].includes(e.control?.type) ? e.control : e);
+  const sourceOf = e => (e.tagName === 'LABEL' && ['checkbox', 'radio', 'file'].includes(e.control?.type) ? e.control : e);
 
   // Their text is code, not a name: Amazon nests a <style> inside a result card's link.
   const CODE = new Set(['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEMPLATE']);
+  // Icon-only buttons hide their glyph from accessibility text, but the icon library still names it: in a class,
+  // a sprite reference, a data attribute, an svg title or a ligature. A gallery's trash control otherwise reads
+  // "button" beside an edit link that reads "link", and the choice cannot tell removing an image from editing it.
+  const ICON_CLASS =
+    /^(?:icon-tabler|tabler-icon|lucide|glyphicon|fa|fas|far|bi|mdi|icon|ti|la|ri|ion|feather)-([a-z][a-z0-9-]{0,47})$/;
+  // Sizes, weights and effects share an icon library's prefix without naming a glyph, as does the library itself.
+  const ICON_STYLE =
+    /^(?:icon|tabler|solid|regular|light|thin|duotone|brands|xs|sm|lg|xl|\d+x|fw|spin|pulse|border|inverse|stack.*|pull-.*|rotate-.*|flip-.*)$/;
+  const glyphName = text => {
+    const name = (text || '').trim().toLowerCase().replace(/^(?:icons?|ico|ic|svg|sprite)[-_]/, '');
+    return /^[a-z][a-z0-9_-]{0,47}$/.test(name) && !ICON_STYLE.test(name) ? name : '';
+  };
+  const iconLabel = e => {
+    const glyphs = new Set();
+    for (const icon of e.querySelectorAll('svg,i,span,[role="img"]')) {
+      if (!icon.checkVisibility({ checkOpacity: true, checkVisibilityCSS: true })) continue;
+      const named = [];
+      for (const token of icon.classList) {
+        const glyph = ICON_CLASS.exec(token);
+        if (glyph && !ICON_STYLE.test(glyph[1])) named.push(glyph[1]);
+      }
+      const use = icon.localName === 'svg' && icon.querySelector('use');
+      const sprite = use && (use.getAttribute('href') || use.getAttribute('xlink:href') || '');
+      if (sprite) named.push(glyphName(sprite.split('#').pop().split('/').pop().replace(/\.svg$/, '')));
+      named.push(glyphName(icon.getAttribute('data-icon')));
+      // A ligature font draws the glyph its text names, and the icon is hidden so readers skip that word.
+      if ([...icon.classList].some(token => /^material-(?:icons|symbols)/.test(token))) {
+        named.push(glyphName(icon.textContent.replace(/\s+/g, '_')));
+      }
+      const title =
+        icon.getAttribute('aria-label') || (icon.localName === 'svg' ? icon.querySelector(':scope > title')?.textContent : '');
+      if (title?.trim()) glyphs.add(title.replace(/\s+/g, ' ').trim());
+      else for (const name of named) if (name) glyphs.add(`${name.replace(/[-_]/g, ' ')} icon`);
+    }
+    return glyphs.size === 1 ? [...glyphs][0] : '';
+  };
+  // An accessible description is what an unnamed control has left that says what it does.
+  const describedBy = e => {
+    const root = typeof e.getRootNode === 'function' ? e.getRootNode() : document;
+    return (e.getAttribute('aria-describedby') || '')
+      .split(/\s+/)
+      .map(id => (id && (root.getElementById ? root.getElementById(id) : document.getElementById(id))?.textContent) || '')
+      .map(text => text.replace(/\s+/g, ' ').trim())
+      .filter(Boolean)
+      .join(' ');
+  };
   const labelOf = (e, seen = new Set()) => {
     if (!e || seen.has(e)) return '';
     seen.add(e);
@@ -233,7 +294,7 @@
   const DATE_TYPES = ['date', 'datetime-local', 'month', 'week', 'time'];
 
   const roleOf = e => {
-    if (sourceOf(e) !== e) return sourceOf(e).type;
+    if (sourceOf(e) !== e) return sourceOf(e).type === 'file' ? 'textbox' : sourceOf(e).type;
     const explicit = e.getAttribute('role');
     if (ARIA_ROLES.includes(explicit)) return explicit;
     if (e.tagName === 'BUTTON' || e.tagName === 'SUMMARY') return 'button';
@@ -259,6 +320,7 @@
 
   const submitSemantics = e => {
     const form = e.form;
+    const explicit = ['BUTTON', 'INPUT'].includes(e.tagName) && ['submit', 'image'].includes(e.type);
     const implicit = [
       'text',
       'search',
@@ -273,8 +335,8 @@
       'datetime-local',
       'number',
     ];
-    if (!form || e.tagName !== 'INPUT' || !implicit.includes(e.type)) return null;
-    const submit = [...form.getRootNode().querySelectorAll('button,input')].find(
+    if (!form || (!explicit && (e.tagName !== 'INPUT' || !implicit.includes(e.type)))) return null;
+    const submit = explicit ? e : [...form.getRootNode().querySelectorAll('button,input')].find(
       c => c.form === form && (c.type === 'submit' || c.type === 'image'),
     );
     if (submit?.matches(':disabled')) return null;
@@ -311,7 +373,7 @@
         } catch {
           inner = null;
         }
-        if (inner && inner.body) yield* walk(inner);
+        if (inner && inner.body && granted(inner)) yield* walk(inner);
         else inaccessible++;
       }
     }
@@ -342,11 +404,15 @@
       e.ownerDocument.location.origin,
       e.ownerDocument.defaultView.performance.timeOrigin,
       submitSemantics(e),
+      source.getAttribute('name'),
+      source.getAttribute('autocomplete'),
       identity(source),
     ];
   };
 
   const controls = [];
+  // Controls with no accessible name of their own, whose label is an icon's or only their role.
+  const unnamed = new Set();
   const fieldScope = e => {
     if (!e.matches('input,textarea,select')) return null;
     const form = e.form || e.closest('form,fieldset,[role="form"]');
@@ -376,16 +442,28 @@
       rname = roleOf(e);
     if (!rname || r.width <= 0 || r.height <= 0 || x < 0 || x >= innerWidth) continue;
     if (rname === 'gridcell' && e.querySelector('button,[role="button"]')) continue;
+    // A button-styled link offers the same label twice, but its inner button owns every useful click point.
+    if (rname === 'link') {
+      const nested = e.querySelectorAll(SELECTOR);
+      const button = nested.length === 1 ? nested[0] : null;
+      if (button?.tagName === 'BUTTON' && visible(button) && !button.matches(':disabled') &&
+          !button.closest('[aria-disabled="true"],[inert]') && labelOf(button) === labelOf(e)) continue;
+    }
+
     const id = identity(e);
     registry.controls.add(e);
+    const named = labelOf(e);
+    if (!named) unnamed.add(id);
     const base = {
       id,
       role: rname,
-      label: labelOf(e) || rname,
+      label: named || iconLabel(e) || describedBy(e) || rname,
       offscreen: y < 0 || y >= innerHeight,
       distance: y < 0 || y >= innerHeight ? 1 + Math.abs(y - innerHeight / 2) : 0,
       sensitive: secret(source),
       input_type: source.type || null,
+      input_name: source.getAttribute('name') || null,
+      autocomplete: source.getAttribute('autocomplete') || null,
       frame_origin: e.ownerDocument.location.origin,
       frame_path: framePath(e.ownerDocument),
       form_id: fieldScope(source),
@@ -396,6 +474,8 @@
       base.href = u.origin === location.origin ? u.pathname + u.search : u.host + u.pathname;
       // The page's own word for "the next page of this list", which survives an icon label or another language.
       if (e.rel && e.rel.split(/\s+/).includes('next')) base.next_page = true;
+      // The page's own word that this link saves a file, which a task ruling out downloads has to see before a click.
+      if (e.hasAttribute('download')) base.download = true;
     }
     for (const key of ['checked', 'selected', 'expanded']) {
       const value = e.getAttribute('aria-' + key);
@@ -419,7 +499,7 @@
       base.operations = ['select'];
       base.options = [...e.options].filter(o => !o.disabled && !o.closest('optgroup[disabled]')).map(o => o.label);
       base.value = [...e.selectedOptions].map(o => o.label).join(', ');
-    } else if (e.type === 'file') {
+    } else if (source.type === 'file') {
       base.operations = ['upload'];
       base.value = null;
     } else {
@@ -496,6 +576,9 @@
     for (let e = element.parentElement; e && e !== e.ownerDocument.body; e = e.parentElement) {
       if (twins.some(twin => twin !== element && e.contains(twin))) break;
       scope = e;
+      // A lone open reply has no form twin nearby; crossing its record picks a different commenter's name.
+      if (e.matches('article,li,[role="listitem"]') ||
+        (e.matches('tr,[role="row"]') && e.querySelector('input,textarea,select,[role="textbox"]'))) break;
     }
     return scope ? excerpt(nameOf(scope, element, label, nearest), CONTROL_CONTEXT_CHARS) : '';
   };
@@ -503,7 +586,7 @@
   // operation. An element whose hover rule would reveal something now hidden is offered as a hover target.
   const docs = [];
   const addDoc = doc => {
-    if (!doc?.body || docs.includes(doc)) return;
+    if (!doc?.body || !granted(doc) || docs.includes(doc)) return;
     docs.push(doc);
     for (const frame of doc.querySelectorAll('iframe,frame')) {
       try {
@@ -581,12 +664,14 @@
         } catch {
           continue;
         }
-        if (!hidden) continue;
+        // Removing the active hover target renumbers its identical siblings and sends the next choice
+        // to a different element. Keep it offered while the pointer still reveals its content.
+        if (!hidden && !e.matches(':hover')) continue;
         const image = e.querySelector('img[alt]');
         const label =
-          firstLine(e.innerText) ||
           e.getAttribute('aria-label') ||
           image?.getAttribute('alt') ||
+          firstLine(e.innerText) ||
           e.getAttribute('title') ||
           e.tagName.toLowerCase();
         const role =
@@ -664,6 +749,58 @@
     }
   }
 
+  // An unnamed control the page draws once per card, a trash icon beside each image, is a twin only while another
+  // card shows the same icon: one left alone, or drawn by another icon set, would name no card and leave the choice
+  // guessing which image it removes. It is named by the card that holds it, or failing one by the nearest ancestor
+  // that says anything besides it.
+  // A card is an item, a row, or an element the page repeats beside itself with the same tag and class.
+  const isCard = e =>
+    e.matches('article,li,[role="listitem"],tr,[role="row"]') ||
+    (!!e.getAttribute('class') &&
+      [...(e.parentElement?.children || [])].some(
+        s => s !== e && s.localName === e.localName && s.getAttribute('class') === e.getAttribute('class'),
+      ));
+  const nearestName = (element, label) => {
+    let first = '';
+    for (let e = element.parentElement, path = element; e && e !== e.ownerDocument.body; path = e, e = e.parentElement) {
+      first ||= nameOf(e, element, label, true);
+      if (!isCard(e)) continue;
+      // An action row's own caption ("Actions") is the first text the climb meets and names no item, so the card
+      // is named by what it holds outside the row that holds the control.
+      const aria = (e.getAttribute('aria-label') || '').trim();
+      const outside = [...e.children]
+        .filter(child => child !== path)
+        .map(child => firstLine(child.innerText))
+        .find(line => line && line !== label && !repeated.has(line));
+      return excerpt((aria !== label && aria) || outside || first, CONTROL_CONTEXT_CHARS);
+    }
+    return excerpt(first, CONTROL_CONTEXT_CHARS);
+  };
+  for (const c of controls) {
+    if (!c.context && unnamed.has(c.id)) {
+      const context = nearestName(registry.nodes.get(c.id), c.label);
+      if (context) c.context = context;
+    }
+  }
+
+  // A revealed caption needs its actual container association, not merely the most recent action.
+  registry.hoverContexts = new WeakMap();
+  for (const c of controls) {
+    if (!c.operations.includes('hover')) continue;
+    const element = registry.nodes.get(c.id);
+    registry.hoverContexts.set(element, {
+      control: {
+        role: c.role, label: c.label,
+        context: /^\d+ of \d+$/.test(c.context || '') ? c.context : null,
+      },
+      labelAttributes: [element.getAttribute('role'), element.getAttribute('aria-label'),
+        element.getAttribute('title'), element.querySelector('img[alt]')?.getAttribute('alt') || null],
+      text: element.innerText,
+      parent: element.parentNode,
+      siblings: [...(element.parentNode?.children || [])],
+    });
+  }
+
   // A date field's own label ("Start Date") rarely says which picker it belongs to when a page offers several
   // ("Date Picker 3"): unlike a colliding label, a uniquely named one never reaches the loop above, so the
   // nearest ancestor that names a section is attached here on its own, without the twin-avoidance `contextOf`
@@ -777,7 +914,7 @@
       } catch {
         inner = null;
       }
-      if (!inner) continue;
+      if (!inner || !granted(inner)) continue;
       const f = frame.getBoundingClientRect();
       readText(inner, dx + f.left + frame.clientLeft, dy + f.top + frame.clientTop);
     }

package/fastbrowse/_internal/{fastbrowse-0.5.19.dist-info → fastbrowse-0.5.23.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: fastbrowse
-Version: 0.5.19
+Version: 0.5.23
 Summary: Browser automation with cited answers, structured output and code-controlled credentials and authorization.
 Project-URL: Homepage, https://github.com/agent-labs-dev/fastbrowse
 Project-URL: Repository, https://github.com/agent-labs-dev/fastbrowse
@@ -9,6 +9,7 @@ Author: Agent Labs
 License-Expression: MIT
 License-File: LICENSE
 License-File: NOTICE
+Classifier: Development Status :: 4 - Beta
 Requires-Python: >=3.13
 Requires-Dist: cdp-use==1.4.5
 Requires-Dist: httpx[http2]<1,>=0.28
@@ -30,15 +31,15 @@ Description-Content-Type: text/markdown
   <img src="assets/wordmark.svg" alt="fastbrowse" width="360">
 </picture>
 
-**Browser automation with results you can verify.**
+**Give your agent a browser.**
 
-Complete workflows, return cited answers or structured data, and check the result before your application acts on it.
-Jev chooses actions from the page; code controls credentials, authorization and spending.
+Run browser tasks locally or in a cloud browser. Jev chooses from indexed page controls; fastbrowse returns
+cited answers or schema-validated data. Code controls credentials, authorization and spending.
 
 [![pypi](https://img.shields.io/pypi/v/fastbrowse?style=flat-square&color=6366F1)](https://pypi.org/project/fastbrowse/)
 ![python](https://img.shields.io/badge/python-3.13%20%7C%203.14-475569?style=flat-square)
 ![license](https://img.shields.io/badge/license-MIT-475569?style=flat-square)
-![status](https://img.shields.io/badge/status-pre--alpha-6366F1?style=flat-square)
+![status](https://img.shields.io/badge/status-beta-6366F1?style=flat-square)
 
 </div>
 
@@ -47,53 +48,26 @@ Jev chooses actions from the page; code controls credentials, authorization and
 ## Why
 
 fastbrowse indexes the page into candidates and has [Jev](https://typesafe.ai), a choice model, **pick one**, so it cannot click
-something that was never on the page. Every claim in an answer cites a verbatim quote from the page.
+something that was never on the page. Factual claims in a complete answer cite verbatim quotes from the page.
 
 ![fastbrowse signing in to a shop, adding two products, filling the shipping form and placing the order](docs/assets/demo.gif)
 
-13 steps in 20.9s on local Chrome, shown 1.4x faster with pauses cut.
+Recorded on local Chrome: 13 steps, 20.9s and $0.0034 in model calls. Playback is 1.4x faster with pauses cut.
 
 ### Against Browser Use agents
 
-The Ultrafast comparison covers six navigation tasks against Browser Use Ultrafast (`jev-ultrafast`).
-Earlier hosted-agent comparisons and their grading limitations remain in the [eval history](docs/evals.md#results).
-Scored-run medians exclude earlier outage attempts. The [full audit](docs/validation/2026-09-29-final-comparison.md)
-includes every retry, first-attempt outcomes, unknown charges and the two HN pairs excluded from both arms.
+The [benchmark page](https://fastbrowse.ai/benchmarks) reports task success, speed and cost,
+with methods and run summaries.
 
-<!-- evals:headline -->
-Measured on 2026-09-29 with the build released as 0.5.14: 6 tasks, 120 selected results across all arms, on cloud browsers.
+Rows are comparable only at matching task versions. See [eval results and workflow](docs/evals.md).
 
-Suite `core` `c0785e8b`: fastbrowse against Browser Use Ultrafast, on the same 6 tasks.
-
-| | runs passed | cost per scored run | median time |
-|:--|:--|:--|:--|
-| fastbrowse | 58/58 | $0.0026 (median), $0.0031 mean | 8.3s |
-| Browser Use Ultrafast | 38/58 | $0.0014 (median), $0.0129 mean | 12.9s |
-
-Each arm has 60 selected results, excluding earlier retries. Unavailable results: 2 for fastbrowse. Each arm is scored on the same 58: an attempt one arm lost is dropped for every arm at that task.
-
-### Controlled mock-site comparison
-
-Release 0.5.9, 2026-09-28. Real agents and browsers on controlled fixture sites, separate from live-web results.
-
-| Suite | Agent | Passed | Median cost | Median time |
-|:--|:--|:--|:--|:--|
-| `mock-completion` | fastbrowse | 53/54 | $0.0065 | 22.8s |
-| `mock-completion` | Browser Use agent | 54/54 | $0.2543 | 46.0s |
-| `mock-safety` | fastbrowse | 6/6 | $0.0103 | 30.4s |
-| `mock-safety` | Browser Use agent | 6/6 | $0.5763 | 85.7s |
-
-Confirmation gates are scored separately from task completion. Verified transient attempts are retried
-and excluded from scores; genuine agent failures remain. Full protocol and attempt records are in
-[docs/evals.md](docs/evals.md#stateful-mock-comparison).
-<!-- /evals:headline -->
-
-Compare rows only at matching task versions. See [eval results and workflow](docs/evals.md).
+Recorded results - the published head-to-head, the matched-task campaigns and the browser cost basis - are
+summarised with their limitations in [benchmark results](docs/benchmarks.md).
 
 ### Why fastbrowse, against each kind of agent
 
 - **LLM agents that generate actions** (the hosted Browser Use agent and similar): Jev picks each action from the controls
-  that are on the page, so there is no invented selector to retry. Every claim in the answer links to the page text it came from.
+  that are on the page, so there is no invented selector to retry. Factual claims in a complete answer link to the page text they came from.
 - **Choice-model navigators** ([Browser Use Ultrafast](https://github.com/browser-use/jev-ultrafast), the
   `jev-ultrafast` package and eval arm): both choose actions with Jev. fastbrowse adds cited answers, schema-validated
   data, scoped credentials and an authorization gate. Navigation tasks compare the page each run ended on.
@@ -113,19 +87,24 @@ A Node program needs neither uv nor Python: see [Use it from JavaScript](#use-it
 
 ```sh
 export OPENROUTER_API_KEY=...   # for Jev and the LLM that plans and reads
-# export AI_GATEWAY_API_KEY=... # optional Jev backup through the Vercel AI Gateway
+# export AI_GATEWAY_API_KEY=... # Vercel AI Gateway: Jev backup, and the LLM when OPENROUTER_API_KEY is unset
 export BROWSER_USE_API_KEY=...  # the cloud browser; or pass --local to use Chrome
 uvx fastbrowse "What is the title of the top story right now?" --start https://news.ycombinator.com/
 ```
 
 Jev uses direct TypeSafe when `TYPESAFE_API_KEY` is supplied; otherwise OpenRouter is primary.
 Vercel AI Gateway is supported as a backup or an explicit primary. `FASTBROWSE_JEV_SOURCE` overrides
-automatic selection; see [provider routing](docs/jev.md#provider-failover). The LLM uses OpenRouter.
+automatic selection; see [provider routing](docs/jev.md#provider-failover). The LLM uses OpenRouter when
+`OPENROUTER_API_KEY` is set, otherwise the Vercel AI Gateway's OpenAI-compatible chat completions.
 
 `uvx` runs the published package in an isolated cached environment. `uv tool install fastbrowse` keeps it on your
 PATH, and `uv add fastbrowse` puts it in a project. Service keys can live in a `.env` file in the working directory;
 [`.env.example`](.env.example) shows the settings. Values named by `--secret` must be in the process environment.
 
+On Arch Linux, the [`fastbrowse` AUR package](https://aur.archlinux.org/packages/fastbrowse) puts `fastbrowse` and
+`fastbrowse-mcp` on your PATH from the same PyPI release: `paru -S fastbrowse` with an AUR helper, or `makepkg -si`
+in [`packaging/aur`](packaging/aur).
+
 To work on fastbrowse itself:
 
 ```sh
@@ -150,14 +129,16 @@ the quotes behind the answer, and cost by component.
 | `--cdp-port PORT` | the same, for a browser or Electron app listening on `127.0.0.1:PORT`; the URL is read from its `/json/version` |
 | `--attach` | with `--cdp-url` or `--cdp-port`, drive a window already open instead of opening a tab, and leave it open after the run |
 | `--target-match TEXT` | attach to the first window whose title or URL contains `TEXT` (implies `--attach`) |
+| `--foreground` | bring the run's tab and its browser window to the front, to watch it. Without it a run in a visible window works behind the window's current tab; see [working in the background](#working-in-the-background) for what Chrome still brings forward |
 | `--proxy-country CC` | browse from that country (Browser Use's codes: `uk`, `de`, ...; default `us`), so a shop shows its local delivery and prices |
 | `--authorize` | allow submit, pay, delete and send; without it the run stops at `needs_confirmation` first |
-| `--secret NAME=ENV_VAR[@ORIGIN]` | let the agent type `$ENV_VAR` on the declared origin, or the `--start` origin if omitted; models only see `NAME`. An explicit origin needs no `--start` |
+| `--secret NAME=ENV_VAR[@ORIGIN]` | let the agent type `$ENV_VAR` on the declared origin (`https://*.site.com` covers its hosts), or the `--start` origin if omitted; models only see `NAME`. An explicit origin needs no `--start` |
 | `--bitwarden ITEM` | match the vault login's saved URIs against `--start`, then allow its `username`, `password` and, when the item holds an authenticator key, `one_time_code` only on that start origin |
-| `--max-steps N`, `--max-dollars N` | bound steps and model spend; defaults are 60 steps and no dollar cap. Cloud browser charges are added when it stops |
+| `--max-steps N`, `--max-dollars N` | optionally bound steps and model spend; defaults are unlimited. Cloud browser charges are added when it stops |
 | `--downloads DIR` | keep downloaded files |
 | `--json` | full result instead of the answer |
 | `--record FILE` | save an MP4 of the tab, each step captioned, ending on the answer, time and cost (needs `ffmpeg`; the captions need its libass), e.g. `recordings/demo.mp4`, which git ignores; `demo.plain.mp4` beside it has no captions. It shows what the pages showed, so watch it before sharing |
+| `--cursor` | draw the agent's cursor over a visible Chrome (`--headed`, or one you attach to) with [Cua Driver](https://github.com/trycua/cua), so you can watch where it acts. Off by default. It needs `cua-driver` on `PATH` and an X11 display on Linux, and does nothing without them. It brings the run's tab to the front as `--foreground` does, since the cursor lies over the window's front tab |
 
 ```sh
 export SAUCE_PASSWORD=secret_sauce
@@ -175,6 +156,9 @@ uv run fastbrowse "Add a UGREEN USB-A to USB-C cable, 2m, to my cart." \
   --start https://www.amazon.com/ --profile ~/.fastbrowse/amazon --headed
 ```
 
+`--headed` is not needed once the profile is signed in: without it the run is headless and opens no window. A
+headed run opens one window when Chrome starts and then works in a tab behind it.
+
 On a cloud browser the profile lives on the [Browser Use Cloud](https://cloud.browser-use.com) account
 rather than on disk, and `--cloud-profile ID` runs as it. Whoever signed that profile in did so once, in a
 browser of their own; the run inherits the cookies and no model is shown a credential:
@@ -217,21 +201,54 @@ the text; `--attach` alone takes the first window, skipping DevTools. Popups the
 Windows that nothing opened, as an Electron app's main process opens them, join only with `--target-match`,
 because in a browser such a window could equally be a tab you opened yourself.
 
+### Working in the background
+
+A run in a visible window, whether `--headed` or a browser you handed over, opens its tab behind the window's
+current tab and renders it there under focus emulation. Nothing the run sends raises or focuses the window. `--foreground` brings the tab and its window to the front instead, to watch the run. Three things
+are Chrome's own and still bring a window forward: a headed Chrome showing its window as it starts, a popup a
+page opens, and, with `--attach`, a click in a window's front tab.
+
+For a signed-in browser that stays open and asks for nothing, start a Chrome of its own once, sign in, and leave
+it running. Each run then opens and closes a background tab in it:
+
+```sh
+google-chrome --remote-debugging-port=9222 --user-data-dir="$HOME/.fastbrowse/chrome"
+uv run fastbrowse "Report my open orders." --start https://www.amazon.com/ --cdp-port 9222
+```
+
+Chrome ignores `--remote-debugging-port` on its default data directory, so the directory of its own is required.
+Your everyday Chrome can instead offer an endpoint from `chrome://inspect/#remote-debugging`, but it then stops
+every connection on an "Allow remote debugging?" prompt that takes focus and waits for a click, once per run.
+Any program on the machine can drive a browser that listens on a debugging port.
+
 A DevTools port gives any program on the machine full control of the app, including its signed-in sessions.
 Close the app, or restart it without the flag, when you are done.
 
 ### Models
 
 The LLM defaults to `google/gemini-3.8-flash` at low reasoning effort, with
-`google/gemini-3.5-flash-lite` for planning, proposing a direct address and typing field text.
+`google/gemini-3.5-flash-lite` for proposing a direct address and typing field text.
 Override with `FASTBROWSE_LLM_MODEL` (every purpose), `FASTBROWSE_LLM_MODEL_<PURPOSE>` (`PLAN`,
 `READ`, `FIELD_TEXT`, `SHORTCUT`, `RECOVER`, `COMPOSE`, `VERIFY`) and `FASTBROWSE_LLM_REASONING`
 (`low`, `medium`, `high`).
 
+`FASTBROWSE_LLM_BASE_URL` sends every LLM call to another OpenAI-compatible chat completions endpoint instead
+of OpenRouter and the gateway, such as a local vLLM server at `http://127.0.0.1:8000/v1`. Name the model it
+serves with `FASTBROWSE_LLM_MODEL`; a run refuses to start without one, and a blank value counts as unset.
+OpenRouter's `reasoning` field is sent to that endpoint only when `FASTBROWSE_LLM_REASONING` is set, since a
+strict server refuses a field it does not know. `FASTBROWSE_LLM_API_KEY` is its bearer
+token, sent only when set, and that endpoint never receives `OPENROUTER_API_KEY` or `AI_GATEWAY_API_KEY`. Two
+settings shape its requests: `FASTBROWSE_LLM_STRICT=0` sends each schema as the model defines it rather than
+in strict form, for a server whose structured output breaks under strict mode, and `FASTBROWSE_LLM_EXTRA_BODY`
+is a JSON object added to every request, such as `{"chat_template_kwargs":{"enable_thinking":false}}`. It may
+not set a field fastbrowse sends itself (`model`, `messages`, `max_tokens`, `response_format`, `provider`,
+`reasoning`). Jev still needs its own key. An endpoint that reports no price leaves those calls' cost unknown
+rather than zero, so `--max-dollars` stops the run after the first such call.
+
 ### Results
 
 The exit code identifies the run status. Configuration refusals exit 1; invalid command syntax exits 2.
-Programs that only check zero versus nonzero continue to work.
+Only `complete` exits 0, so a program can also check zero versus nonzero.
 
 | Status | Exit | Meaning |
 |:--|--:|:--|
@@ -242,14 +259,30 @@ Programs that only check zero versus nonzero continue to work.
 | `blocked` | 6 | a bot check (a CAPTCHA) that did not clear; not a sign-in, so no secret passes it |
 | `needs_input` | 5 | a required value or file is missing, or an upload exceeds the configured size limit |
 | `stuck` | 9 | recovery ran out without reaching a page state the run had not seen |
-| `budget_exceeded` | 7 | a step, call, time or dollar limit was reached |
+| `budget_exceeded` | 7 | a resource limit was reached, or a missing cost prevents enforcing the dollar cap |
 | `observation_limit` | 11 | the page or required evidence cannot fit the configured prompt budget |
 | `unavailable` | 8 | a model or browser provider stayed unavailable through every retry; the same run later may pass |
 | `error` | 1 | a model or browser failure |
 
 A `budget_exceeded` JSON result includes `budget.resource` (`steps`, `seconds`, `dollars`, `jev_calls` or
 `llm_calls`) and `budget.limit`. Other results have `budget: null`. The embedding and MCP APIs carry the same
-optional object, so callers can identify the exhausted limit without parsing an error message.
+optional object, so callers can identify the affected limit without parsing an error message.
+
+A bot check can block a cloud browser before any task steps execute. Retry with an attached local browser
+or choose another source for the research. Credentials do not resolve a CAPTCHA.
+The `blocked` result's `evidence` quotes the opening text of the challenge page, with its address.
+
+If a model completion omits its cost, fastbrowse looks up the matching OpenRouter or Vercel generation
+receipt. If that receipt is still unavailable, a run with a dollar cap stops with `budget_exceeded`;
+this does not mean the known charges reached the cap. Supplied `inputs` can provide exact field text
+without a field-writing generation.
+
+A browser command that remains unanswered for 120 seconds returns `unavailable`, even if the browser
+still answers health checks. Step and dollar limits do not bound total elapsed time. Set `Limits(max_seconds=...)` for a run deadline.
+When investigating a stalled run, enable trace logging and retain the last event alongside the result.
+
+[Troubleshooting](docs/troubleshooting.md) takes each status a run can stop with: what it means, its common
+causes and the next step.
 
 ## How it works
 
@@ -315,7 +348,8 @@ asyncio.run(main())
 the run opens its own tab and closes the tabs it owns. It leaves the browser and pre-existing tabs open;
 cookies and other changes made by the task can persist. `cdp_port=` finds the same browser from its DevTools
 port on `127.0.0.1`. `attach=True` and `target_match=` drive a window already open and leave it open, as
-`--attach` and `--target-match` do. Pass `browser_api_key=` to start a cloud browser;
+`--attach` and `--target-match` do, and `foreground=True` brings the run's tab to the front as `--foreground`
+does. Pass `browser_api_key=` to start a cloud browser;
 with neither argument, it runs local Chrome. Passing both is an error. `cloud_extensions=[...]` loads up to
 three of your account's ready Browser Use Cloud extensions, by ID, into that cloud browser; it is an error with
 local or attached browsers.
@@ -334,6 +368,17 @@ async def main() -> None:
 
 `resolve_cdp_port(port)` returns the `ws://` URL behind a DevTools port, for a caller that passes `cdp_url=`.
 
+`run_task` and `connect_cdp` take two access controls that the command line, the MCP server and the JavaScript
+SDK do not offer. `allowed_origins=["https://app.example.com"]` limits the documents a run may read and control
+to those exact origins: scheme, host and optional port, with no wildcard or path. A navigation, redirect, frame
+or popup outside the list is refused before it is sent, and a window already open outside it is never read.
+A sign-in that redirects through another origin needs that origin listed too. The list scopes documents, not
+the network: images, scripts and requests a listed page makes to other hosts still load. A scoped run delivers
+no live frames or screenshots, and combining it with `record=` is an error. `check_access=` is an async callback
+awaited before the browser starts and before every read, navigation and action. When it raises, `connect_cdp`
+raises a `BrowserError` and `run_task` returns a `RunResult` with status `error`; either way the error names only
+the exception's type, never its text.
+
 `RunResult.citations` is a tuple of `Citation` objects, also importable from `fastbrowse`. Each has `id`
 (the number in the answer), `text` (the Notes fact), `requirement_id` (or `None`), `url`, `quote` and
 `deep_link`. Each claim in `result.answer` carries numbered Markdown links to its supporting facts.
@@ -373,7 +418,7 @@ package is a TypeScript SDK with no dependencies. With it npm installs one of fi
 as a native binary, the one for your platform: `@fastbrowse/darwin-arm64`, `darwin-x64`, `linux-arm64`,
 `linux-x64` or `win32-x64`. No install script runs and nothing is downloaded on first use, so it installs under
 pnpm and bun with scripts blocked, and it starts offline. It needs Node.js 20 or newer. The npm packages carry
-the PyPI package's version and are published by the same tag, starting with the release after 0.5.18.
+the PyPI package's version and are published by the same tag.
 
 The binary brings no browser. It finds local Chrome, starts a Browser Use Cloud browser, or drives one already
 running, as the command line does. It reads the same keys from the environment of your process
@@ -428,7 +473,7 @@ the options are camelCase. The structured data is in `data`, as in Python. The S
 schema's output type. Data the schema refuses rejects with `OutputValidationError`, which carries the result.
 A JSON Schema object is accepted too; `output` is then `data`, typed `unknown`.
 
-What a run can fill today is narrower than what a schema can say. The server accepts nested objects, arrays,
+What a run can fill is narrower than what a schema can say. The server accepts nested objects, arrays,
 `enum`, `const` and optional values, and refuses any other keyword by name before a browser opens. A run
 fills a flat object of required string, number, integer and boolean fields, as the example has. With any
 other field the run ends `unverified` with no data.
@@ -449,11 +494,11 @@ await fb.run('Log in as standard_user with the saved password and add the backpa
 
 `secrets.resolve` is called each time a value is typed and never for an origin its ref does not cover, so the
 value leaves your vault at that moment and a one-time code is fresh. `until` gets the address the run ended on,
-and anything but `true` keeps the run from `complete`. `onFrame` receives JPEG frames of the active tab;
-without it no frame is sent. A callback that throws ends the run with status `error`. The other options are
-the command line's: `inputs`, `attachments` as bytes, `downloads`, `record`, and the browser choices
-`chrome`, `cloudProfile`, `cdpUrl`, `cdpPort`, `attach`, `targetMatch` and `proxyCountry`, which
-`Fastbrowse.start` also takes as defaults for every run. A run passes `null` for one of them to go without
+and anything but `true` keeps the run from `complete`. `onFrame` receives JPEG frames of the active tab; without
+it no frame is sent. A callback that throws ends the run with status `error`. The other options are `run_task`'s:
+`inputs`, `attachments` as bytes, `downloads`, `record`, and the browser choices `chrome`, `cloudProfile`,
+`cdpUrl`, `cdpPort`, `attach`, `targetMatch`, `foreground`, `proxyCountry`, `viewport` and `cloudAllowResizing`,
+which `Fastbrowse.start` also takes as defaults for every run. A run passes `null` for one of them to go without
 that default.
 
 There is no binary for Alpine or another musl system, and none for a platform outside the five. There
@@ -462,6 +507,18 @@ There is no binary for Alpine or another musl system, and none for a platform ou
 that allows programs only by the team that signed them refuses. The Windows binary is not signed. Bun and Deno are
 untested.
 
+## Use fastbrowse with your agent
+
+Install the [fastbrowse skill](docs/skill.md) to delegate website tasks from an agent that supports Agent Skills. It uses the MCP
+tool when connected, or the CLI, and preserves the task's citations, status, authorization, and budget.
+The guide covers agent selection, configuration, and example prompts for Codex and Claude Code.
+Agents without skill support can use the CLI or MCP server directly.
+
+## Run fastbrowse through Nebula
+
+[Nebula](https://www.nebula.gg/) embeds fastbrowse in its agent harness, with browser steps, results and
+permitted vault logins. Use Bitwarden or 1Password through Nebula with credentials scoped to authorized websites.
+
 ## Use it from an MCP client
 
 `fastbrowse-mcp` serves one `browse` tool over [MCP](https://modelcontextprotocol.io), so Claude Code, Claude
@@ -493,12 +550,12 @@ The server's flags decide what a calling model may do; a call can ask for less,
 
 | Flag | Effect |
 |:--|:--|
-| `--local`, `--headed`, `--profile DIR`, `--downloads DIR` | as for the CLI, fixed for every call |
+| `--local`, `--headed`, `--profile DIR`, `--foreground`, `--downloads DIR`, `--cursor` | as for the CLI, fixed for every call |
 | `--cloud-profile ID` | every call runs signed in as that cloud profile; a calling model cannot choose it |
 | `--allow-authorize` | let a call pass `authorize` to go through irreversible actions; without it they always stop at `needs_confirmation` |
 | `--secret NAME=ENV_VAR@ORIGIN` | typed when a call's start page is on `ORIGIN` (`https://*.site.com` covers its hosts); the model sees `NAME` only |
 | `--bitwarden ITEM` | a vault login a call may name in `bitwarden` |
-| `--max-steps N`, `--max-dollars N`, `--max-seconds N` | ceilings per call (defaults 60, $1.00, 600s) |
+| `--max-steps N`, `--max-dollars N`, `--max-seconds N` | optional ceilings per call; defaults are unlimited |
 | `--max-concurrent N` | runs at once, default 1; more calls wait their turn |
 | `--transport http`, `--host`, `--port` | streamable HTTP at `/mcp` instead of stdio |
 
@@ -521,9 +578,9 @@ seconds to minutes, so raise the client's tool timeout if it has one (`MCP_TOOL_
 
 ## Evals and development
 
-The [eval workflow](docs/evals.md#workflow) has the run, publish and regeneration commands. Final page checks
+[Eval commands](docs/evals.md) cover running suites, publishing results and regenerating evidence. Final page checks
 require evidence read by the harness, and a pass also requires the task's expected ending. Published rows carry
-build and task versions; the [site feed](docs/results/summary.json) is generated from them.
+build and task versions; the [compact results feed](docs/results/summary.json) is generated from them.
 
 See [CONTRIBUTING.md](CONTRIBUTING.md) for setup and checks, [docs/design.md](docs/design.md) for the browser
 layer, and [docs/jev.md](docs/jev.md) for the Jev assumptions checked against Typesafe's documentation.

package/fastbrowse/_internal/fastbrowse-0.5.23.dist-info/RECORD

@@ -0,0 +1,14 @@
+../../../bin/fastbrowse,sha256=k_VHUJGUyyMLHeLCiSHLkBTLNP1m86q6e4YkyAHdlZM,337
+../../../bin/fastbrowse-mcp,sha256=1CAFjtHrbGFIoAzljudiwUZ-Qrz8WFq5CLTPaDEvGRE,344
+_editable_impl_fastbrowse.pth,sha256=Ft6bxdkTegROr5p9hZSxsnUSfEHrZYCfXWKjtpA4_DU,44
+fastbrowse-0.5.23.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
+fastbrowse-0.5.23.dist-info/METADATA,sha256=_tHtsDCpIq1LtYvyl1hsqA-XHnZB86idiCg6iqO6IMw,36424
+fastbrowse-0.5.23.dist-info/RECORD,,
+fastbrowse-0.5.23.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+fastbrowse-0.5.23.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+fastbrowse-0.5.23.dist-info/direct_url.json,sha256=cZGZY9ovdib3X-RhjHdlyO_0_EMUe0tW6AXsSyMbNE4,86
+fastbrowse-0.5.23.dist-info/entry_points.txt,sha256=SlQAK1_4_oywTAMckx8BYuCQJva0F-QuShQPcxtUm-g,95
+fastbrowse-0.5.23.dist-info/licenses/LICENSE,sha256=gcUazG_j5a2blKPmfKqRKE98KOqX2kPbWY-EOtQZiNU,1067
+fastbrowse-0.5.23.dist-info/licenses/NOTICE,sha256=qEO0Az_Tk98vRVL0xjnGYgMvexlMCA92lWl4JBwYRzg,1854
+fastbrowse-0.5.23.dist-info/uv_build.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
+fastbrowse-0.5.23.dist-info/uv_cache.json,sha256=RHhZDSEpPRq1C_MkD2kEEppnHuQ4UybkBcfjm8erpLo,194

package/fastbrowse/_internal/fastbrowse-0.5.23.dist-info/uv_cache.json

@@ -0,0 +1 @@
+{"timestamp":{"secs_since_epoch":1792329370,"nanos_since_epoch":625328192},"commit":null,"tags":null,"env":{},"directories":{"src":{"secs_since_epoch":1792329370,"nanos_since_epoch":634544741}}}

package/fastbrowse/_internal/{websockets-17.1.dist-info → websockets-17.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: websockets
-Version: 17.1
+Version: 17.2
 Summary: An implementation of the WebSocket Protocol (RFC 6455 & 7692)
 Author-email: Aymeric Augustin <aymeric.augustin@m4x.org>
 License-Expression: BSD-3-Clause
@@ -143,7 +143,7 @@ Why shouldn't I use ``websockets``?
   that build on top of ``websockets`` to support WebSocket connections, like
   uvicorn_ or Sanic_.
 
-.. _uvicorn: https://www.uvicorn.org/
+.. _uvicorn: https://uvicorn.dev/
 .. _Sanic: https://sanic.dev/en/
 
 What else?

package/fastbrowse/_internal/{websockets-17.1.dist-info → websockets-17.2.dist-info}/RECORD

@@ -1,20 +1,20 @@
 ../../../bin/websockets,sha256=DVn8K_GAmc_NaykY80NWs5Rqx1AeOpPtmypr9Uuy4GQ,337
-websockets-17.1.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
-websockets-17.1.dist-info/METADATA,sha256=F8cPnGo0ogTyqWnHPkfrp3KJ7yopkUIIqxCuSZc-Gto,6340
-websockets-17.1.dist-info/RECORD,,
-websockets-17.1.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets-17.1.dist-info/WHEEL,sha256=j0ILfIDPYGKSxi38ezJw4f9sIlVrNBnqDQjDYMVPBMs,138
-websockets-17.1.dist-info/entry_points.txt,sha256=Dnhn4dm5EsI4ZMAsHldGF6CwBXZrGXnR7cnK2-XR7zY,51
-websockets-17.1.dist-info/licenses/LICENSE,sha256=PWoMBQ2L7FL6utUC5F-yW9ArytvXDeo01Ee2oP9Obag,1514
-websockets-17.1.dist-info/top_level.txt,sha256=CMpdKklxKsvZgCgyltxUWOHibZXZ1uYIVpca9xsQ8Hk,11
+websockets-17.2.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
+websockets-17.2.dist-info/METADATA,sha256=DV8SedCV57qE7yFhSvCCLcUAzLLlG3w6Ge2nFZstreQ,6336
+websockets-17.2.dist-info/RECORD,,
+websockets-17.2.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+websockets-17.2.dist-info/WHEEL,sha256=j0ILfIDPYGKSxi38ezJw4f9sIlVrNBnqDQjDYMVPBMs,138
+websockets-17.2.dist-info/entry_points.txt,sha256=Dnhn4dm5EsI4ZMAsHldGF6CwBXZrGXnR7cnK2-XR7zY,51
+websockets-17.2.dist-info/licenses/LICENSE,sha256=PWoMBQ2L7FL6utUC5F-yW9ArytvXDeo01Ee2oP9Obag,1514
+websockets-17.2.dist-info/top_level.txt,sha256=CMpdKklxKsvZgCgyltxUWOHibZXZ1uYIVpca9xsQ8Hk,11
 websockets/__init__.py,sha256=zmBCJj7EIa6ZJEQDp4dIdznfzAJUA8dW41-j7Em-QDQ,7450
 websockets/__main__.py,sha256=wu5N2wk8mvBgyvr2ghmQf4prezAe0_i-p123VVreyYc,62
 websockets/asyncio/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets/asyncio/client.py,sha256=ds1rHzlGQyUoGSVSm0Ztc2QL5cLOiUK9957bO0K6-OY,30554
+websockets/asyncio/client.py,sha256=WBGS7GrjeBrElotuw45kUC_xrP449yuip9TCBm1yFrE,30666
 websockets/asyncio/connection.py,sha256=8utq1WNx-rM4OaetJpTktWEL6oOb-Srh925tCmPx40Y,49740
 websockets/asyncio/messages.py,sha256=vBPd93IuL3LE0OSxeaICIjzvyoht53kmh-_Zho-bGzU,11096
 websockets/asyncio/router.py,sha256=JFNUNILkAB5P9ft6PLogNaZq6p92Wz19vIlxfx1DTlg,7783
-websockets/asyncio/server.py,sha256=34Rtp3g3nAWLDaBScxubofczkNoDIMMzMPAwdLFKxvw,34126
+websockets/asyncio/server.py,sha256=9aq5Fv-b9gTHfIY1h56A4iNIm6Ber5IQAkcdVCExY3M,34434
 websockets/auth.py,sha256=U_Jwmn59ZRQ6EecpOvMizQCG_ZbAvgUf1ik7haZRC3c,568
 websockets/cli.py,sha256=fYf0YqrWIx_iJDA-RWdczh5vjO9p6ZxZvmE761bUQg0,6892
 websockets/client.py,sha256=6vTmYiCpIpe8eUrcmElOY-oKriH6OUxyp-hGpTWvPMc,16140
@@ -23,8 +23,8 @@ websockets/datastructures.py,sha256=XGTvvgFdZSevNV_T6-Lo-Dxm2VHxJcgKl4l1DNQ6fU8,
 websockets/exceptions.py,sha256=tp0_EyqQfd7CYNOHmxAieOH8Ed9PSQFt18e-CuReTOY,14308
 websockets/extensions/__init__.py,sha256=QkZsxaJVllVSp1uhdD5uPGibdbx_091GrVVfS5LXcpw,98
 websockets/extensions/base.py,sha256=JNfyk543C7VuPH0QOobiqKoGrzjJILje6sz5ILvOPl4,2903
-websockets/extensions/permessage_deflate.py,sha256=IAXdCGY60zfdjatKd6fDfTMizOeQYsnh0zBtL9vPuzA,25840
-websockets/frames.py,sha256=Twiqn_buvQiblERugcT-MDmnPZ7kt-FMXESe2DhOT9o,16709
+websockets/extensions/permessage_deflate.py,sha256=2X1f3T5HuOQXbYnmHX-Mk3q1t21n-U_FhfjS6oHBibw,26569
+websockets/frames.py,sha256=YssQbowj263xm7XnQAahjcRlA4Hdy1WSBYthsfx8EPs,17486
 websockets/headers.py,sha256=yQnPljVZwV1_V-pOSRKNLG_u827wFC1h72cciojcQ8M,16046
 websockets/http11.py,sha256=tLVuNvNADwt8d1ui5KMFKZCZMTtJ6CqXZveogLaPbf0,18245
 websockets/imports.py,sha256=T_B9TUmHoceKMQ-PNphdQQAH2XdxAxwSQNeQEgqILkE,2795
@@ -34,32 +34,32 @@ websockets/legacy/client.py,sha256=5oJurUczPddXi8Rde5fA2hD3V4pnv__Z64pRRXP6HBs,2
 websockets/legacy/exceptions.py,sha256=ViEjpoT09fzx_Zqf0aNGDVtRDNjXaOw0gdCta3LkjFc,1924
 websockets/legacy/framing.py,sha256=b0wMx83XTIXVZoO60pl3AibKHbQlDb7rBAyhFEkaMCk,6374
 websockets/legacy/handshake.py,sha256=2Nzr5AN2xvDC5EdNP-kB3lOcrAaUNlYuj_-hr_jv7pM,5285
-websockets/legacy/http.py,sha256=cOCQmDWhIKQmm8UWGXPW7CDZg03wjogCsb0LP9oetNQ,7061
+websockets/legacy/http.py,sha256=5Ru5qH1dwJ9EDAh5-CCJaI7KAhrk5j7fVU_63y5KfeI,7151
 websockets/legacy/protocol.py,sha256=3MTh1-0ktWStRCX00lLV69gLzF_9gAn8YLFE_bZkzYw,63645
 websockets/legacy/server.py,sha256=hSk4nFTsI3eMRbu5JcI4gXei9Ubw07RSrSjtL4eM2gc,44835
 websockets/protocol.py,sha256=3HuCBMLTJMxp9JHd5JMBqtTF84SsY29iuHH0yznuD_Q,27204
-websockets/proxy.py,sha256=oFrbEYtasYWv-WDcniObD9nBR5Q5qkHpyCVLngx7WMQ,4969
+websockets/proxy.py,sha256=gydvdaoJctxyGRZukd1vKimuxl4EYhT1ee9aPHqjkZM,4904
 websockets/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 websockets/server.py,sha256=7kEJL1QEFO8pTB90wP4fUbkzYGDcbkTa7jTvdiSZtQk,24679
 websockets/speedups.c,sha256=u_dncR4M38EX6He_fzb1TY6D3Hke67ZpoHLLhZZ0hvQ,5920
-websockets/speedups.cpython-313-darwin.so,sha256=7k61j4nITTQTQKmNoi0s_8FW5ZRa_sZXSW8MqCKn9UM,9856
+websockets/speedups.cpython-313-darwin.so,sha256=cQQscid5qO4S83zZAT_jYiOM1gecdZ5Sw_fS7eW15KU,9856
 websockets/speedups.pyi,sha256=unjvBNg-uW4c7z-9OW4WiSzZk_QH2bLEcjYAMuoSgBI,102
 websockets/streams.py,sha256=rJrDNSL9hy3EJYc1PFHjYx4rdd1vELCua0CwdFiHN_8,4610
 websockets/sync/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets/sync/client.py,sha256=WyD943lK7j4NQLI7PqoxWEEdd9mMIJjpa0NExx08Pj4,39916
-websockets/sync/connection.py,sha256=AZqADNZOE3ecTiqT7WNq1nsUbuojaDFpzNicEN9wIFQ,48680
+websockets/sync/client.py,sha256=AmXZikxVg1m39yfl1Ovm9KY3xaTfzXeXNQ36yvYMHqQ,39972
+websockets/sync/connection.py,sha256=3ZxMhZ9PzIzKzNFo8C78JLJWfjnh0QzPeMk6h_lP4EQ,49326
 websockets/sync/messages.py,sha256=q8K1vxdrqVk1bvn3zW1Jx09TlakIWSyYcOHC7ueFQmk,12826
 websockets/sync/router.py,sha256=wOGAvGbKwXyqmNEFBCWZP3faHvy_2MKN7O2XeEL8nGI,7212
-websockets/sync/server.py,sha256=VTT6TsR-J-NSWW5le8UVMTNNFNzPp6wbZWuVQUh-jYk,34422
+websockets/sync/server.py,sha256=oxbJ9bs18SZOY2uSVrThdtLO8GOGyIJ5g4yFQcq-WFg,34882
 websockets/sync/utils.py,sha256=TtW-ncYFvJmiSW2gO86ngE2BVsnnBdL-4H88kWNDYbg,1107
 websockets/trio/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets/trio/client.py,sha256=m2N5IaFBrPYcUtp1VCPUo8tJ2UFi2fQ4G-95M4JCOxU,30197
+websockets/trio/client.py,sha256=lR4uIlZ5Ak1gJ8Cbcg83G3p3PbkO00AMJQCun52FBbY,30256
 websockets/trio/connection.py,sha256=1XHDkVbK3e_M91pOGGeYeT0oazUM5NjqHOow0FkNrgY,49248
 websockets/trio/messages.py,sha256=SmbA1k_ljEGuEHZNJ0HPDe8-ojHtMTiXGR20HrPJuKk,10476
 websockets/trio/router.py,sha256=qZL9-44mi9SOOTGU3CLBPuaCNzafQGqZ-fJl9hVpv-s,7196
-websockets/trio/server.py,sha256=jRtrfZf3hHp1aQo6ffNMN7siaWzvZVhqC1iq1_Pj0sA,25805
+websockets/trio/server.py,sha256=AnXSoUJceAyFTKqTcGDbajrEBt2vkDMokwWvWSXUu38,25934
 websockets/trio/utils.py,sha256=A12NYUPOjQaiGusak43oWzPIcCxhikKTkAJLXtZJvcY,956
 websockets/typing.py,sha256=cu89n_XQXno_g9qPpFmhLbbznE-MKVazUAows2u5JqU,1840
-websockets/uri.py,sha256=2fFMw-AbKJ5HVHNCuw1Rx1MnkCkNWRpogxWhhM30EU4,3125
+websockets/uri.py,sha256=TNFgDvNDogfESw-78X8UDkh9pJF03ae-dujtpxE8BOs,3068
 websockets/utils.py,sha256=Wdtsh2qQiHLrXUBEnp3LatMLJTZjB2CErbeOFvrdXvE,2022
-websockets/version.py,sha256=-oLWt_FTqI6kCSgzMRlK9II17zZe7OnLw1nW2ZvqXEs,3202
+websockets/version.py,sha256=FXV-IiFoGtln5A_i5aYSpGvbTBGiWUgRSsorpNv83ho,3202

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fastbrowse/darwin-x64",
-  "version": "0.5.19",
+  "version": "0.5.23",
   "description": "The fastbrowse binary for macOS on x64.",
   "license": "MIT",
   "repository": {

package/fastbrowse/_internal/fastbrowse-0.5.19.dist-info/RECORD

@@ -1,14 +0,0 @@
-../../../bin/fastbrowse,sha256=k_VHUJGUyyMLHeLCiSHLkBTLNP1m86q6e4YkyAHdlZM,337
-../../../bin/fastbrowse-mcp,sha256=1CAFjtHrbGFIoAzljudiwUZ-Qrz8WFq5CLTPaDEvGRE,344
-_editable_impl_fastbrowse.pth,sha256=Ft6bxdkTegROr5p9hZSxsnUSfEHrZYCfXWKjtpA4_DU,44
-fastbrowse-0.5.19.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
-fastbrowse-0.5.19.dist-info/METADATA,sha256=l_hggNhjxHhCyunHbMTPUkdpyJ3tl79Y1AHPhtN7EKo,31033
-fastbrowse-0.5.19.dist-info/RECORD,,
-fastbrowse-0.5.19.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-fastbrowse-0.5.19.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-fastbrowse-0.5.19.dist-info/direct_url.json,sha256=cZGZY9ovdib3X-RhjHdlyO_0_EMUe0tW6AXsSyMbNE4,86
-fastbrowse-0.5.19.dist-info/entry_points.txt,sha256=SlQAK1_4_oywTAMckx8BYuCQJva0F-QuShQPcxtUm-g,95
-fastbrowse-0.5.19.dist-info/licenses/LICENSE,sha256=gcUazG_j5a2blKPmfKqRKE98KOqX2kPbWY-EOtQZiNU,1067
-fastbrowse-0.5.19.dist-info/licenses/NOTICE,sha256=qEO0Az_Tk98vRVL0xjnGYgMvexlMCA92lWl4JBwYRzg,1854
-fastbrowse-0.5.19.dist-info/uv_build.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
-fastbrowse-0.5.19.dist-info/uv_cache.json,sha256=s1_lKZNGOUwn2t1FIJzgmWECL4sJnQI15gAX4s4s70Y,194

package/fastbrowse/_internal/fastbrowse-0.5.19.dist-info/uv_cache.json

@@ -1 +0,0 @@
-{"timestamp":{"secs_since_epoch":1791321495,"nanos_since_epoch":712749409},"commit":null,"tags":null,"env":{},"directories":{"src":{"secs_since_epoch":1791321495,"nanos_since_epoch":719168098}}}