@fastbrowse/darwin-x64 0.5.20 → 0.5.23

package/fastbrowse/_internal/fastbrowse/browser/capture.js

@@ -16,6 +16,8 @@
   let controlObservations = 0;
   let imageObservations = 0;
   let imagesOmitted = false;
+  let linkObservations = 0;
+  let linksOmitted = false;
   let controlsOmitted = false;
   const imageSource = source => {
     if (!source) return source;
@@ -80,9 +82,46 @@
     }
     return found ? registry.hoverContexts.get(found).control : null;
   };
+  const listIds = new WeakMap();
+  const listFrameless = new WeakMap();
+  let nextListId = 0;
+  const listContext = nodes => {
+    const lists = new Set();
+    for (const node of nodes) {
+      let element = node.nodeType === 1 ? node : node.parentElement;
+      let list = null;
+      for (let parent = element; parent; parent = parent.parentElement) {
+        if (parent.matches('nav,[role="navigation"]')) return {};
+        if (parent.matches('ul,ol,[role="list"]')) list = parent;
+      }
+      if (!list) {
+        const nested = [...(element?.querySelectorAll('ul,ol,[role="list"]') ?? [])];
+        const outer = nested.filter(candidate => !nested.some(other => other !== candidate && other.contains(candidate)));
+        if (outer.length === 1) list = outer[0];
+      }
+      if (list) lists.add(list);
+    }
+    if (lists.size !== 1) return {};
+    const list = [...lists][0];
+    if (!listIds.has(list)) {
+      listIds.set(list, String(nextListId++));
+      // A frame the capture cannot open elsewhere on the page, such as an advertisement, cannot hold a member of a
+      // list whose element contains no frame; one inside the list, or behind a shadow root the list or anything in it
+      // holds, could.
+      const framed = e => e.tagName === 'IFRAME' || e.tagName === 'FRAME' || !!e.shadowRoot;
+      listFrameless.set(list, !framed(list) && ![...list.querySelectorAll('*')].some(framed));
+    }
+    const members = [...list.querySelectorAll('li,[role="listitem"]')].filter(member => {
+      for (let parent = member; parent && parent !== list; parent = parent.parentElement) {
+        if (hidden(parent)) return false;
+      }
+      return !!textOf(member);
+    });
+    return { list_id: listIds.get(list), list_count: members.length, list_frameless: listFrameless.get(list) };
+  };
   const push = (kind, text, extra = {}, nodes = []) => {
     if (text)
-      blocks.push({ kind, text, heading_path: [...path], frame_path: framePath, source_path: sourcePath, control_context: controlOf(nodes), ...extra });
+      blocks.push({ kind, text, heading_path: [...path], frame_path: framePath, source_path: sourcePath, control_context: controlOf(nodes), ...listContext(nodes), ...extra });
   };
 
   // A cell can say what it says with an image or an icon alone: a flag marking the winner, a tick for "yes".
@@ -408,6 +447,38 @@
         src: imageSource(image.getAttribute('src') ?? image.getAttribute('srcset')) };
       push('observation', `Image element DOM metadata: ${JSON.stringify(metadata)}. Pixels are not described.`);
     }
+    // A link drawn only as an icon has no text, so its destination, the one thing it says, was nowhere a reader
+    // could quote: asked for a release's download URL beside an icon-only download link, a run read every other
+    // field of the row and then clicked the link again and again looking for the address. The row's text names
+    // which item the link belongs to, since the observation is not read where the link stands.
+    for (const link of [...root.querySelectorAll('a[href]')].filter(visible)) {
+      if (clean(link.innerText ?? '')) continue;
+      // An icon button written as `href="#"` or a script URL runs code here and leads nowhere to report. A bare
+      // `#` parses to an empty hash, so the raw attribute says it is a fragment link, not the parsed URL.
+      let target;
+      try {
+        target = new URL(link.getAttribute('href'), location.href);
+      } catch {
+        // One malformed address must not cost the page its whole capture.
+        continue;
+      }
+      const page = location.href.split('#')[0];
+      const fragment = link.getAttribute('href').trim().startsWith('#') || (target.hash && target.href.split('#')[0] === page);
+      if (target.protocol === 'javascript:' || fragment) continue;
+      if (linkObservations++ >= 32) {
+        if (!linksOmitted) push('observation', 'Additional link destinations omitted.');
+        linksOmitted = true;
+        break;
+      }
+      let row = link.parentElement;
+      while (row && row !== root && !clean(row.innerText ?? '')) row = row.parentElement;
+      const metadata = {
+        label: (nameOf(link) || drawn(link)).slice(0, 256) || null,
+        href: imageSource(link.href),
+        near: row ? textOf(row).replace(/\s+/g, ' ').slice(0, 256) || null : null,
+      };
+      push('observation', `Link element DOM metadata: ${JSON.stringify(metadata)}. The link has no text.`);
+    }
     const h1 = [...root.querySelectorAll('h1,[role="heading"][aria-level="1"]')].filter(visible);
     visibleH1 ||= h1.length > 0;
     if (root === document.body) {

package/fastbrowse/_internal/fastbrowse/browser/snapshot.js

@@ -41,6 +41,10 @@
     return true;
   };
   const registry = (window.__fastbrowse ||= { ids: new WeakMap(), nodes: new Map(), next: 1 });
+  // Keep the page's own timer overrides from holding a browser-side frame wait open.
+  registry.nativeSetTimeout ||= window.setTimeout.bind(window);
+  registry.nativeClearTimeout ||= window.clearTimeout.bind(window);
+  registry.nativeRequestAnimationFrame ||= window.requestAnimationFrame.bind(window);
   // What was offered to be acted on; `ids` also names hover targets and fingerprinted nodes.
   registry.controls ||= new WeakSet();
   // A visible loading indicator means the page is still fetching what it will draw, which network idle and a
@@ -180,17 +184,51 @@
 
   // Their text is code, not a name: Amazon nests a <style> inside a result card's link.
   const CODE = new Set(['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEMPLATE']);
-  // Icon-only buttons hide their glyph from accessibility text, but the icon library still names it.
+  // Icon-only buttons hide their glyph from accessibility text, but the icon library still names it: in a class,
+  // a sprite reference, a data attribute, an svg title or a ligature. A gallery's trash control otherwise reads
+  // "button" beside an edit link that reads "link", and the choice cannot tell removing an image from editing it.
+  const ICON_CLASS =
+    /^(?:icon-tabler|tabler-icon|lucide|glyphicon|fa|fas|far|bi|mdi|icon|ti|la|ri|ion|feather)-([a-z][a-z0-9-]{0,47})$/;
+  // Sizes, weights and effects share an icon library's prefix without naming a glyph, as does the library itself.
+  const ICON_STYLE =
+    /^(?:icon|tabler|solid|regular|light|thin|duotone|brands|xs|sm|lg|xl|\d+x|fw|spin|pulse|border|inverse|stack.*|pull-.*|rotate-.*|flip-.*)$/;
+  const glyphName = text => {
+    const name = (text || '').trim().toLowerCase().replace(/^(?:icons?|ico|ic|svg|sprite)[-_]/, '');
+    return /^[a-z][a-z0-9_-]{0,47}$/.test(name) && !ICON_STYLE.test(name) ? name : '';
+  };
   const iconLabel = e => {
     const glyphs = new Set();
-    for (const icon of e.querySelectorAll('svg')) {
-      if (!showing(icon)) continue;
+    for (const icon of e.querySelectorAll('svg,i,span,[role="img"]')) {
+      if (!icon.checkVisibility({ checkOpacity: true, checkVisibilityCSS: true })) continue;
+      const named = [];
       for (const token of icon.classList) {
-        const glyph = /^(?:icon-tabler|tabler-icon|lucide)-([a-z][a-z0-9-]{0,47})$/.exec(token);
-        if (glyph && !/^(?:icon|xs|sm|lg|xl|\d+x|spin|pulse)$/.test(glyph[1])) glyphs.add(glyph[1]);
+        const glyph = ICON_CLASS.exec(token);
+        if (glyph && !ICON_STYLE.test(glyph[1])) named.push(glyph[1]);
+      }
+      const use = icon.localName === 'svg' && icon.querySelector('use');
+      const sprite = use && (use.getAttribute('href') || use.getAttribute('xlink:href') || '');
+      if (sprite) named.push(glyphName(sprite.split('#').pop().split('/').pop().replace(/\.svg$/, '')));
+      named.push(glyphName(icon.getAttribute('data-icon')));
+      // A ligature font draws the glyph its text names, and the icon is hidden so readers skip that word.
+      if ([...icon.classList].some(token => /^material-(?:icons|symbols)/.test(token))) {
+        named.push(glyphName(icon.textContent.replace(/\s+/g, '_')));
       }
+      const title =
+        icon.getAttribute('aria-label') || (icon.localName === 'svg' ? icon.querySelector(':scope > title')?.textContent : '');
+      if (title?.trim()) glyphs.add(title.replace(/\s+/g, ' ').trim());
+      else for (const name of named) if (name) glyphs.add(`${name.replace(/[-_]/g, ' ')} icon`);
     }
-    return glyphs.size === 1 ? `${[...glyphs][0].replace(/-/g, ' ')} icon` : '';
+    return glyphs.size === 1 ? [...glyphs][0] : '';
+  };
+  // An accessible description is what an unnamed control has left that says what it does.
+  const describedBy = e => {
+    const root = typeof e.getRootNode === 'function' ? e.getRootNode() : document;
+    return (e.getAttribute('aria-describedby') || '')
+      .split(/\s+/)
+      .map(id => (id && (root.getElementById ? root.getElementById(id) : document.getElementById(id))?.textContent) || '')
+      .map(text => text.replace(/\s+/g, ' ').trim())
+      .filter(Boolean)
+      .join(' ');
   };
   const labelOf = (e, seen = new Set()) => {
     if (!e || seen.has(e)) return '';
@@ -373,6 +411,8 @@
   };
 
   const controls = [];
+  // Controls with no accessible name of their own, whose label is an icon's or only their role.
+  const unnamed = new Set();
   const fieldScope = e => {
     if (!e.matches('input,textarea,select')) return null;
     const form = e.form || e.closest('form,fieldset,[role="form"]');
@@ -412,10 +452,12 @@
 
     const id = identity(e);
     registry.controls.add(e);
+    const named = labelOf(e);
+    if (!named) unnamed.add(id);
     const base = {
       id,
       role: rname,
-      label: labelOf(e) || (rname === 'button' ? iconLabel(e) : '') || rname,
+      label: named || iconLabel(e) || describedBy(e) || rname,
       offscreen: y < 0 || y >= innerHeight,
       distance: y < 0 || y >= innerHeight ? 1 + Math.abs(y - innerHeight / 2) : 0,
       sensitive: secret(source),
@@ -432,6 +474,8 @@
       base.href = u.origin === location.origin ? u.pathname + u.search : u.host + u.pathname;
       // The page's own word for "the next page of this list", which survives an icon label or another language.
       if (e.rel && e.rel.split(/\s+/).includes('next')) base.next_page = true;
+      // The page's own word that this link saves a file, which a task ruling out downloads has to see before a click.
+      if (e.hasAttribute('download')) base.download = true;
     }
     for (const key of ['checked', 'selected', 'expanded']) {
       const value = e.getAttribute('aria-' + key);
@@ -705,6 +749,40 @@
     }
   }
 
+  // An unnamed control the page draws once per card, a trash icon beside each image, is a twin only while another
+  // card shows the same icon: one left alone, or drawn by another icon set, would name no card and leave the choice
+  // guessing which image it removes. It is named by the card that holds it, or failing one by the nearest ancestor
+  // that says anything besides it.
+  // A card is an item, a row, or an element the page repeats beside itself with the same tag and class.
+  const isCard = e =>
+    e.matches('article,li,[role="listitem"],tr,[role="row"]') ||
+    (!!e.getAttribute('class') &&
+      [...(e.parentElement?.children || [])].some(
+        s => s !== e && s.localName === e.localName && s.getAttribute('class') === e.getAttribute('class'),
+      ));
+  const nearestName = (element, label) => {
+    let first = '';
+    for (let e = element.parentElement, path = element; e && e !== e.ownerDocument.body; path = e, e = e.parentElement) {
+      first ||= nameOf(e, element, label, true);
+      if (!isCard(e)) continue;
+      // An action row's own caption ("Actions") is the first text the climb meets and names no item, so the card
+      // is named by what it holds outside the row that holds the control.
+      const aria = (e.getAttribute('aria-label') || '').trim();
+      const outside = [...e.children]
+        .filter(child => child !== path)
+        .map(child => firstLine(child.innerText))
+        .find(line => line && line !== label && !repeated.has(line));
+      return excerpt((aria !== label && aria) || outside || first, CONTROL_CONTEXT_CHARS);
+    }
+    return excerpt(first, CONTROL_CONTEXT_CHARS);
+  };
+  for (const c of controls) {
+    if (!c.context && unnamed.has(c.id)) {
+      const context = nearestName(registry.nodes.get(c.id), c.label);
+      if (context) c.context = context;
+    }
+  }
+
   // A revealed caption needs its actual container association, not merely the most recent action.
   registry.hoverContexts = new WeakMap();
   for (const c of controls) {

package/fastbrowse/_internal/{fastbrowse-0.5.20.dist-info → fastbrowse-0.5.23.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: fastbrowse
-Version: 0.5.20
+Version: 0.5.23
 Summary: Browser automation with cited answers, structured output and code-controlled credentials and authorization.
 Project-URL: Homepage, https://github.com/agent-labs-dev/fastbrowse
 Project-URL: Repository, https://github.com/agent-labs-dev/fastbrowse
@@ -9,6 +9,7 @@ Author: Agent Labs
 License-Expression: MIT
 License-File: LICENSE
 License-File: NOTICE
+Classifier: Development Status :: 4 - Beta
 Requires-Python: >=3.13
 Requires-Dist: cdp-use==1.4.5
 Requires-Dist: httpx[http2]<1,>=0.28
@@ -60,6 +61,9 @@ with methods and run summaries.
 
 Rows are comparable only at matching task versions. See [eval results and workflow](docs/evals.md).
 
+Recorded results - the published head-to-head, the matched-task campaigns and the browser cost basis - are
+summarised with their limitations in [benchmark results](docs/benchmarks.md).
+
 ### Why fastbrowse, against each kind of agent
 
 - **LLM agents that generate actions** (the hosted Browser Use agent and similar): Jev picks each action from the controls
@@ -97,6 +101,10 @@ automatic selection; see [provider routing](docs/jev.md#provider-failover). The
 PATH, and `uv add fastbrowse` puts it in a project. Service keys can live in a `.env` file in the working directory;
 [`.env.example`](.env.example) shows the settings. Values named by `--secret` must be in the process environment.
 
+On Arch Linux, the [`fastbrowse` AUR package](https://aur.archlinux.org/packages/fastbrowse) puts `fastbrowse` and
+`fastbrowse-mcp` on your PATH from the same PyPI release: `paru -S fastbrowse` with an AUR helper, or `makepkg -si`
+in [`packaging/aur`](packaging/aur).
+
 To work on fastbrowse itself:
 
 ```sh
@@ -121,15 +129,16 @@ the quotes behind the answer, and cost by component.
 | `--cdp-port PORT` | the same, for a browser or Electron app listening on `127.0.0.1:PORT`; the URL is read from its `/json/version` |
 | `--attach` | with `--cdp-url` or `--cdp-port`, drive a window already open instead of opening a tab, and leave it open after the run |
 | `--target-match TEXT` | attach to the first window whose title or URL contains `TEXT` (implies `--attach`) |
+| `--foreground` | bring the run's tab and its browser window to the front, to watch it. Without it a run in a visible window works behind the window's current tab; see [working in the background](#working-in-the-background) for what Chrome still brings forward |
 | `--proxy-country CC` | browse from that country (Browser Use's codes: `uk`, `de`, ...; default `us`), so a shop shows its local delivery and prices |
 | `--authorize` | allow submit, pay, delete and send; without it the run stops at `needs_confirmation` first |
-| `--secret NAME=ENV_VAR[@ORIGIN]` | let the agent type `$ENV_VAR` on the declared origin, or the `--start` origin if omitted; models only see `NAME`. An explicit origin needs no `--start` |
+| `--secret NAME=ENV_VAR[@ORIGIN]` | let the agent type `$ENV_VAR` on the declared origin (`https://*.site.com` covers its hosts), or the `--start` origin if omitted; models only see `NAME`. An explicit origin needs no `--start` |
 | `--bitwarden ITEM` | match the vault login's saved URIs against `--start`, then allow its `username`, `password` and, when the item holds an authenticator key, `one_time_code` only on that start origin |
 | `--max-steps N`, `--max-dollars N` | optionally bound steps and model spend; defaults are unlimited. Cloud browser charges are added when it stops |
 | `--downloads DIR` | keep downloaded files |
 | `--json` | full result instead of the answer |
 | `--record FILE` | save an MP4 of the tab, each step captioned, ending on the answer, time and cost (needs `ffmpeg`; the captions need its libass), e.g. `recordings/demo.mp4`, which git ignores; `demo.plain.mp4` beside it has no captions. It shows what the pages showed, so watch it before sharing |
-| `--cursor` | draw the agent's cursor over a visible Chrome (`--headed`, or one you attach to) with [Cua Driver](https://github.com/trycua/cua), so you can watch where it acts. Off by default. It needs `cua-driver` on `PATH` and an X11 display on Linux, and does nothing without them |
+| `--cursor` | draw the agent's cursor over a visible Chrome (`--headed`, or one you attach to) with [Cua Driver](https://github.com/trycua/cua), so you can watch where it acts. Off by default. It needs `cua-driver` on `PATH` and an X11 display on Linux, and does nothing without them. It brings the run's tab to the front as `--foreground` does, since the cursor lies over the window's front tab |
 
 ```sh
 export SAUCE_PASSWORD=secret_sauce
@@ -147,6 +156,9 @@ uv run fastbrowse "Add a UGREEN USB-A to USB-C cable, 2m, to my cart." \
   --start https://www.amazon.com/ --profile ~/.fastbrowse/amazon --headed
 ```
 
+`--headed` is not needed once the profile is signed in: without it the run is headless and opens no window. A
+headed run opens one window when Chrome starts and then works in a tab behind it.
+
 On a cloud browser the profile lives on the [Browser Use Cloud](https://cloud.browser-use.com) account
 rather than on disk, and `--cloud-profile ID` runs as it. Whoever signed that profile in did so once, in a
 browser of their own; the run inherits the cookies and no model is shown a credential:
@@ -189,6 +201,26 @@ the text; `--attach` alone takes the first window, skipping DevTools. Popups the
 Windows that nothing opened, as an Electron app's main process opens them, join only with `--target-match`,
 because in a browser such a window could equally be a tab you opened yourself.
 
+### Working in the background
+
+A run in a visible window, whether `--headed` or a browser you handed over, opens its tab behind the window's
+current tab and renders it there under focus emulation. Nothing the run sends raises or focuses the window. `--foreground` brings the tab and its window to the front instead, to watch the run. Three things
+are Chrome's own and still bring a window forward: a headed Chrome showing its window as it starts, a popup a
+page opens, and, with `--attach`, a click in a window's front tab.
+
+For a signed-in browser that stays open and asks for nothing, start a Chrome of its own once, sign in, and leave
+it running. Each run then opens and closes a background tab in it:
+
+```sh
+google-chrome --remote-debugging-port=9222 --user-data-dir="$HOME/.fastbrowse/chrome"
+uv run fastbrowse "Report my open orders." --start https://www.amazon.com/ --cdp-port 9222
+```
+
+Chrome ignores `--remote-debugging-port` on its default data directory, so the directory of its own is required.
+Your everyday Chrome can instead offer an endpoint from `chrome://inspect/#remote-debugging`, but it then stops
+every connection on an "Allow remote debugging?" prompt that takes focus and waits for a click, once per run.
+Any program on the machine can drive a browser that listens on a debugging port.
+
 A DevTools port gives any program on the machine full control of the app, including its signed-in sessions.
 Close the app, or restart it without the flag, when you are done.
 
@@ -200,10 +232,23 @@ Override with `FASTBROWSE_LLM_MODEL` (every purpose), `FASTBROWSE_LLM_MODEL_<PUR
 `READ`, `FIELD_TEXT`, `SHORTCUT`, `RECOVER`, `COMPOSE`, `VERIFY`) and `FASTBROWSE_LLM_REASONING`
 (`low`, `medium`, `high`).
 
+`FASTBROWSE_LLM_BASE_URL` sends every LLM call to another OpenAI-compatible chat completions endpoint instead
+of OpenRouter and the gateway, such as a local vLLM server at `http://127.0.0.1:8000/v1`. Name the model it
+serves with `FASTBROWSE_LLM_MODEL`; a run refuses to start without one, and a blank value counts as unset.
+OpenRouter's `reasoning` field is sent to that endpoint only when `FASTBROWSE_LLM_REASONING` is set, since a
+strict server refuses a field it does not know. `FASTBROWSE_LLM_API_KEY` is its bearer
+token, sent only when set, and that endpoint never receives `OPENROUTER_API_KEY` or `AI_GATEWAY_API_KEY`. Two
+settings shape its requests: `FASTBROWSE_LLM_STRICT=0` sends each schema as the model defines it rather than
+in strict form, for a server whose structured output breaks under strict mode, and `FASTBROWSE_LLM_EXTRA_BODY`
+is a JSON object added to every request, such as `{"chat_template_kwargs":{"enable_thinking":false}}`. It may
+not set a field fastbrowse sends itself (`model`, `messages`, `max_tokens`, `response_format`, `provider`,
+`reasoning`). Jev still needs its own key. An endpoint that reports no price leaves those calls' cost unknown
+rather than zero, so `--max-dollars` stops the run after the first such call.
+
 ### Results
 
 The exit code identifies the run status. Configuration refusals exit 1; invalid command syntax exits 2.
-Programs that only check zero versus nonzero continue to work.
+Only `complete` exits 0, so a program can also check zero versus nonzero.
 
 | Status | Exit | Meaning |
 |:--|--:|:--|
@@ -225,6 +270,7 @@ optional object, so callers can identify the affected limit without parsing an e
 
 A bot check can block a cloud browser before any task steps execute. Retry with an attached local browser
 or choose another source for the research. Credentials do not resolve a CAPTCHA.
+The `blocked` result's `evidence` quotes the opening text of the challenge page, with its address.
 
 If a model completion omits its cost, fastbrowse looks up the matching OpenRouter or Vercel generation
 receipt. If that receipt is still unavailable, a run with a dollar cap stops with `budget_exceeded`;
@@ -235,6 +281,9 @@ A browser command that remains unanswered for 120 seconds returns `unavailable`,
 still answers health checks. Step and dollar limits do not bound total elapsed time. Set `Limits(max_seconds=...)` for a run deadline.
 When investigating a stalled run, enable trace logging and retain the last event alongside the result.
 
+[Troubleshooting](docs/troubleshooting.md) takes each status a run can stop with: what it means, its common
+causes and the next step.
+
 ## How it works
 
 <picture>
@@ -299,7 +348,8 @@ asyncio.run(main())
 the run opens its own tab and closes the tabs it owns. It leaves the browser and pre-existing tabs open;
 cookies and other changes made by the task can persist. `cdp_port=` finds the same browser from its DevTools
 port on `127.0.0.1`. `attach=True` and `target_match=` drive a window already open and leave it open, as
-`--attach` and `--target-match` do. Pass `browser_api_key=` to start a cloud browser;
+`--attach` and `--target-match` do, and `foreground=True` brings the run's tab to the front as `--foreground`
+does. Pass `browser_api_key=` to start a cloud browser;
 with neither argument, it runs local Chrome. Passing both is an error. `cloud_extensions=[...]` loads up to
 three of your account's ready Browser Use Cloud extensions, by ID, into that cloud browser; it is an error with
 local or attached browsers.
@@ -318,6 +368,17 @@ async def main() -> None:
 
 `resolve_cdp_port(port)` returns the `ws://` URL behind a DevTools port, for a caller that passes `cdp_url=`.
 
+`run_task` and `connect_cdp` take two access controls that the command line, the MCP server and the JavaScript
+SDK do not offer. `allowed_origins=["https://app.example.com"]` limits the documents a run may read and control
+to those exact origins: scheme, host and optional port, with no wildcard or path. A navigation, redirect, frame
+or popup outside the list is refused before it is sent, and a window already open outside it is never read.
+A sign-in that redirects through another origin needs that origin listed too. The list scopes documents, not
+the network: images, scripts and requests a listed page makes to other hosts still load. A scoped run delivers
+no live frames or screenshots, and combining it with `record=` is an error. `check_access=` is an async callback
+awaited before the browser starts and before every read, navigation and action. When it raises, `connect_cdp`
+raises a `BrowserError` and `run_task` returns a `RunResult` with status `error`; either way the error names only
+the exception's type, never its text.
+
 `RunResult.citations` is a tuple of `Citation` objects, also importable from `fastbrowse`. Each has `id`
 (the number in the answer), `text` (the Notes fact), `requirement_id` (or `None`), `url`, `quote` and
 `deep_link`. Each claim in `result.answer` carries numbered Markdown links to its supporting facts.
@@ -357,7 +418,7 @@ package is a TypeScript SDK with no dependencies. With it npm installs one of fi
 as a native binary, the one for your platform: `@fastbrowse/darwin-arm64`, `darwin-x64`, `linux-arm64`,
 `linux-x64` or `win32-x64`. No install script runs and nothing is downloaded on first use, so it installs under
 pnpm and bun with scripts blocked, and it starts offline. It needs Node.js 20 or newer. The npm packages carry
-the PyPI package's version and are published by the same tag, starting with the release after 0.5.18.
+the PyPI package's version and are published by the same tag.
 
 The binary brings no browser. It finds local Chrome, starts a Browser Use Cloud browser, or drives one already
 running, as the command line does. It reads the same keys from the environment of your process
@@ -412,7 +473,7 @@ the options are camelCase. The structured data is in `data`, as in Python. The S
 schema's output type. Data the schema refuses rejects with `OutputValidationError`, which carries the result.
 A JSON Schema object is accepted too; `output` is then `data`, typed `unknown`.
 
-What a run can fill today is narrower than what a schema can say. The server accepts nested objects, arrays,
+What a run can fill is narrower than what a schema can say. The server accepts nested objects, arrays,
 `enum`, `const` and optional values, and refuses any other keyword by name before a browser opens. A run
 fills a flat object of required string, number, integer and boolean fields, as the example has. With any
 other field the run ends `unverified` with no data.
@@ -433,11 +494,11 @@ await fb.run('Log in as standard_user with the saved password and add the backpa
 
 `secrets.resolve` is called each time a value is typed and never for an origin its ref does not cover, so the
 value leaves your vault at that moment and a one-time code is fresh. `until` gets the address the run ended on,
-and anything but `true` keeps the run from `complete`. `onFrame` receives JPEG frames of the active tab;
-without it no frame is sent. A callback that throws ends the run with status `error`. The other options are
-the command line's: `inputs`, `attachments` as bytes, `downloads`, `record`, and the browser choices
-`chrome`, `cloudProfile`, `cdpUrl`, `cdpPort`, `attach`, `targetMatch` and `proxyCountry`, which
-`Fastbrowse.start` also takes as defaults for every run. A run passes `null` for one of them to go without
+and anything but `true` keeps the run from `complete`. `onFrame` receives JPEG frames of the active tab; without
+it no frame is sent. A callback that throws ends the run with status `error`. The other options are `run_task`'s:
+`inputs`, `attachments` as bytes, `downloads`, `record`, and the browser choices `chrome`, `cloudProfile`,
+`cdpUrl`, `cdpPort`, `attach`, `targetMatch`, `foreground`, `proxyCountry`, `viewport` and `cloudAllowResizing`,
+which `Fastbrowse.start` also takes as defaults for every run. A run passes `null` for one of them to go without
 that default.
 
 There is no binary for Alpine or another musl system, and none for a platform outside the five. There
@@ -489,7 +550,7 @@ The server's flags decide what a calling model may do; a call can ask for less,
 
 | Flag | Effect |
 |:--|:--|
-| `--local`, `--headed`, `--profile DIR`, `--downloads DIR`, `--cursor` | as for the CLI, fixed for every call |
+| `--local`, `--headed`, `--profile DIR`, `--foreground`, `--downloads DIR`, `--cursor` | as for the CLI, fixed for every call |
 | `--cloud-profile ID` | every call runs signed in as that cloud profile; a calling model cannot choose it |
 | `--allow-authorize` | let a call pass `authorize` to go through irreversible actions; without it they always stop at `needs_confirmation` |
 | `--secret NAME=ENV_VAR@ORIGIN` | typed when a call's start page is on `ORIGIN` (`https://*.site.com` covers its hosts); the model sees `NAME` only |

package/fastbrowse/_internal/fastbrowse-0.5.23.dist-info/RECORD

@@ -0,0 +1,14 @@
+../../../bin/fastbrowse,sha256=k_VHUJGUyyMLHeLCiSHLkBTLNP1m86q6e4YkyAHdlZM,337
+../../../bin/fastbrowse-mcp,sha256=1CAFjtHrbGFIoAzljudiwUZ-Qrz8WFq5CLTPaDEvGRE,344
+_editable_impl_fastbrowse.pth,sha256=Ft6bxdkTegROr5p9hZSxsnUSfEHrZYCfXWKjtpA4_DU,44
+fastbrowse-0.5.23.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
+fastbrowse-0.5.23.dist-info/METADATA,sha256=_tHtsDCpIq1LtYvyl1hsqA-XHnZB86idiCg6iqO6IMw,36424
+fastbrowse-0.5.23.dist-info/RECORD,,
+fastbrowse-0.5.23.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+fastbrowse-0.5.23.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+fastbrowse-0.5.23.dist-info/direct_url.json,sha256=cZGZY9ovdib3X-RhjHdlyO_0_EMUe0tW6AXsSyMbNE4,86
+fastbrowse-0.5.23.dist-info/entry_points.txt,sha256=SlQAK1_4_oywTAMckx8BYuCQJva0F-QuShQPcxtUm-g,95
+fastbrowse-0.5.23.dist-info/licenses/LICENSE,sha256=gcUazG_j5a2blKPmfKqRKE98KOqX2kPbWY-EOtQZiNU,1067
+fastbrowse-0.5.23.dist-info/licenses/NOTICE,sha256=qEO0Az_Tk98vRVL0xjnGYgMvexlMCA92lWl4JBwYRzg,1854
+fastbrowse-0.5.23.dist-info/uv_build.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
+fastbrowse-0.5.23.dist-info/uv_cache.json,sha256=RHhZDSEpPRq1C_MkD2kEEppnHuQ4UybkBcfjm8erpLo,194

package/fastbrowse/_internal/fastbrowse-0.5.23.dist-info/uv_cache.json

@@ -0,0 +1 @@
+{"timestamp":{"secs_since_epoch":1792329370,"nanos_since_epoch":625328192},"commit":null,"tags":null,"env":{},"directories":{"src":{"secs_since_epoch":1792329370,"nanos_since_epoch":634544741}}}

package/fastbrowse/_internal/{websockets-17.1.dist-info → websockets-17.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: websockets
-Version: 17.1
+Version: 17.2
 Summary: An implementation of the WebSocket Protocol (RFC 6455 & 7692)
 Author-email: Aymeric Augustin <aymeric.augustin@m4x.org>
 License-Expression: BSD-3-Clause
@@ -143,7 +143,7 @@ Why shouldn't I use ``websockets``?
   that build on top of ``websockets`` to support WebSocket connections, like
   uvicorn_ or Sanic_.
 
-.. _uvicorn: https://www.uvicorn.org/
+.. _uvicorn: https://uvicorn.dev/
 .. _Sanic: https://sanic.dev/en/
 
 What else?

package/fastbrowse/_internal/{websockets-17.1.dist-info → websockets-17.2.dist-info}/RECORD

@@ -1,20 +1,20 @@
 ../../../bin/websockets,sha256=DVn8K_GAmc_NaykY80NWs5Rqx1AeOpPtmypr9Uuy4GQ,337
-websockets-17.1.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
-websockets-17.1.dist-info/METADATA,sha256=F8cPnGo0ogTyqWnHPkfrp3KJ7yopkUIIqxCuSZc-Gto,6340
-websockets-17.1.dist-info/RECORD,,
-websockets-17.1.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets-17.1.dist-info/WHEEL,sha256=j0ILfIDPYGKSxi38ezJw4f9sIlVrNBnqDQjDYMVPBMs,138
-websockets-17.1.dist-info/entry_points.txt,sha256=Dnhn4dm5EsI4ZMAsHldGF6CwBXZrGXnR7cnK2-XR7zY,51
-websockets-17.1.dist-info/licenses/LICENSE,sha256=PWoMBQ2L7FL6utUC5F-yW9ArytvXDeo01Ee2oP9Obag,1514
-websockets-17.1.dist-info/top_level.txt,sha256=CMpdKklxKsvZgCgyltxUWOHibZXZ1uYIVpca9xsQ8Hk,11
+websockets-17.2.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
+websockets-17.2.dist-info/METADATA,sha256=DV8SedCV57qE7yFhSvCCLcUAzLLlG3w6Ge2nFZstreQ,6336
+websockets-17.2.dist-info/RECORD,,
+websockets-17.2.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+websockets-17.2.dist-info/WHEEL,sha256=j0ILfIDPYGKSxi38ezJw4f9sIlVrNBnqDQjDYMVPBMs,138
+websockets-17.2.dist-info/entry_points.txt,sha256=Dnhn4dm5EsI4ZMAsHldGF6CwBXZrGXnR7cnK2-XR7zY,51
+websockets-17.2.dist-info/licenses/LICENSE,sha256=PWoMBQ2L7FL6utUC5F-yW9ArytvXDeo01Ee2oP9Obag,1514
+websockets-17.2.dist-info/top_level.txt,sha256=CMpdKklxKsvZgCgyltxUWOHibZXZ1uYIVpca9xsQ8Hk,11
 websockets/__init__.py,sha256=zmBCJj7EIa6ZJEQDp4dIdznfzAJUA8dW41-j7Em-QDQ,7450
 websockets/__main__.py,sha256=wu5N2wk8mvBgyvr2ghmQf4prezAe0_i-p123VVreyYc,62
 websockets/asyncio/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets/asyncio/client.py,sha256=ds1rHzlGQyUoGSVSm0Ztc2QL5cLOiUK9957bO0K6-OY,30554
+websockets/asyncio/client.py,sha256=WBGS7GrjeBrElotuw45kUC_xrP449yuip9TCBm1yFrE,30666
 websockets/asyncio/connection.py,sha256=8utq1WNx-rM4OaetJpTktWEL6oOb-Srh925tCmPx40Y,49740
 websockets/asyncio/messages.py,sha256=vBPd93IuL3LE0OSxeaICIjzvyoht53kmh-_Zho-bGzU,11096
 websockets/asyncio/router.py,sha256=JFNUNILkAB5P9ft6PLogNaZq6p92Wz19vIlxfx1DTlg,7783
-websockets/asyncio/server.py,sha256=34Rtp3g3nAWLDaBScxubofczkNoDIMMzMPAwdLFKxvw,34126
+websockets/asyncio/server.py,sha256=9aq5Fv-b9gTHfIY1h56A4iNIm6Ber5IQAkcdVCExY3M,34434
 websockets/auth.py,sha256=U_Jwmn59ZRQ6EecpOvMizQCG_ZbAvgUf1ik7haZRC3c,568
 websockets/cli.py,sha256=fYf0YqrWIx_iJDA-RWdczh5vjO9p6ZxZvmE761bUQg0,6892
 websockets/client.py,sha256=6vTmYiCpIpe8eUrcmElOY-oKriH6OUxyp-hGpTWvPMc,16140
@@ -23,8 +23,8 @@ websockets/datastructures.py,sha256=XGTvvgFdZSevNV_T6-Lo-Dxm2VHxJcgKl4l1DNQ6fU8,
 websockets/exceptions.py,sha256=tp0_EyqQfd7CYNOHmxAieOH8Ed9PSQFt18e-CuReTOY,14308
 websockets/extensions/__init__.py,sha256=QkZsxaJVllVSp1uhdD5uPGibdbx_091GrVVfS5LXcpw,98
 websockets/extensions/base.py,sha256=JNfyk543C7VuPH0QOobiqKoGrzjJILje6sz5ILvOPl4,2903
-websockets/extensions/permessage_deflate.py,sha256=IAXdCGY60zfdjatKd6fDfTMizOeQYsnh0zBtL9vPuzA,25840
-websockets/frames.py,sha256=Twiqn_buvQiblERugcT-MDmnPZ7kt-FMXESe2DhOT9o,16709
+websockets/extensions/permessage_deflate.py,sha256=2X1f3T5HuOQXbYnmHX-Mk3q1t21n-U_FhfjS6oHBibw,26569
+websockets/frames.py,sha256=YssQbowj263xm7XnQAahjcRlA4Hdy1WSBYthsfx8EPs,17486
 websockets/headers.py,sha256=yQnPljVZwV1_V-pOSRKNLG_u827wFC1h72cciojcQ8M,16046
 websockets/http11.py,sha256=tLVuNvNADwt8d1ui5KMFKZCZMTtJ6CqXZveogLaPbf0,18245
 websockets/imports.py,sha256=T_B9TUmHoceKMQ-PNphdQQAH2XdxAxwSQNeQEgqILkE,2795
@@ -34,32 +34,32 @@ websockets/legacy/client.py,sha256=5oJurUczPddXi8Rde5fA2hD3V4pnv__Z64pRRXP6HBs,2
 websockets/legacy/exceptions.py,sha256=ViEjpoT09fzx_Zqf0aNGDVtRDNjXaOw0gdCta3LkjFc,1924
 websockets/legacy/framing.py,sha256=b0wMx83XTIXVZoO60pl3AibKHbQlDb7rBAyhFEkaMCk,6374
 websockets/legacy/handshake.py,sha256=2Nzr5AN2xvDC5EdNP-kB3lOcrAaUNlYuj_-hr_jv7pM,5285
-websockets/legacy/http.py,sha256=cOCQmDWhIKQmm8UWGXPW7CDZg03wjogCsb0LP9oetNQ,7061
+websockets/legacy/http.py,sha256=5Ru5qH1dwJ9EDAh5-CCJaI7KAhrk5j7fVU_63y5KfeI,7151
 websockets/legacy/protocol.py,sha256=3MTh1-0ktWStRCX00lLV69gLzF_9gAn8YLFE_bZkzYw,63645
 websockets/legacy/server.py,sha256=hSk4nFTsI3eMRbu5JcI4gXei9Ubw07RSrSjtL4eM2gc,44835
 websockets/protocol.py,sha256=3HuCBMLTJMxp9JHd5JMBqtTF84SsY29iuHH0yznuD_Q,27204
-websockets/proxy.py,sha256=oFrbEYtasYWv-WDcniObD9nBR5Q5qkHpyCVLngx7WMQ,4969
+websockets/proxy.py,sha256=gydvdaoJctxyGRZukd1vKimuxl4EYhT1ee9aPHqjkZM,4904
 websockets/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 websockets/server.py,sha256=7kEJL1QEFO8pTB90wP4fUbkzYGDcbkTa7jTvdiSZtQk,24679
 websockets/speedups.c,sha256=u_dncR4M38EX6He_fzb1TY6D3Hke67ZpoHLLhZZ0hvQ,5920
-websockets/speedups.cpython-313-darwin.so,sha256=7k61j4nITTQTQKmNoi0s_8FW5ZRa_sZXSW8MqCKn9UM,9856
+websockets/speedups.cpython-313-darwin.so,sha256=cQQscid5qO4S83zZAT_jYiOM1gecdZ5Sw_fS7eW15KU,9856
 websockets/speedups.pyi,sha256=unjvBNg-uW4c7z-9OW4WiSzZk_QH2bLEcjYAMuoSgBI,102
 websockets/streams.py,sha256=rJrDNSL9hy3EJYc1PFHjYx4rdd1vELCua0CwdFiHN_8,4610
 websockets/sync/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets/sync/client.py,sha256=WyD943lK7j4NQLI7PqoxWEEdd9mMIJjpa0NExx08Pj4,39916
-websockets/sync/connection.py,sha256=AZqADNZOE3ecTiqT7WNq1nsUbuojaDFpzNicEN9wIFQ,48680
+websockets/sync/client.py,sha256=AmXZikxVg1m39yfl1Ovm9KY3xaTfzXeXNQ36yvYMHqQ,39972
+websockets/sync/connection.py,sha256=3ZxMhZ9PzIzKzNFo8C78JLJWfjnh0QzPeMk6h_lP4EQ,49326
 websockets/sync/messages.py,sha256=q8K1vxdrqVk1bvn3zW1Jx09TlakIWSyYcOHC7ueFQmk,12826
 websockets/sync/router.py,sha256=wOGAvGbKwXyqmNEFBCWZP3faHvy_2MKN7O2XeEL8nGI,7212
-websockets/sync/server.py,sha256=VTT6TsR-J-NSWW5le8UVMTNNFNzPp6wbZWuVQUh-jYk,34422
+websockets/sync/server.py,sha256=oxbJ9bs18SZOY2uSVrThdtLO8GOGyIJ5g4yFQcq-WFg,34882
 websockets/sync/utils.py,sha256=TtW-ncYFvJmiSW2gO86ngE2BVsnnBdL-4H88kWNDYbg,1107
 websockets/trio/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-websockets/trio/client.py,sha256=m2N5IaFBrPYcUtp1VCPUo8tJ2UFi2fQ4G-95M4JCOxU,30197
+websockets/trio/client.py,sha256=lR4uIlZ5Ak1gJ8Cbcg83G3p3PbkO00AMJQCun52FBbY,30256
 websockets/trio/connection.py,sha256=1XHDkVbK3e_M91pOGGeYeT0oazUM5NjqHOow0FkNrgY,49248
 websockets/trio/messages.py,sha256=SmbA1k_ljEGuEHZNJ0HPDe8-ojHtMTiXGR20HrPJuKk,10476
 websockets/trio/router.py,sha256=qZL9-44mi9SOOTGU3CLBPuaCNzafQGqZ-fJl9hVpv-s,7196
-websockets/trio/server.py,sha256=jRtrfZf3hHp1aQo6ffNMN7siaWzvZVhqC1iq1_Pj0sA,25805
+websockets/trio/server.py,sha256=AnXSoUJceAyFTKqTcGDbajrEBt2vkDMokwWvWSXUu38,25934
 websockets/trio/utils.py,sha256=A12NYUPOjQaiGusak43oWzPIcCxhikKTkAJLXtZJvcY,956
 websockets/typing.py,sha256=cu89n_XQXno_g9qPpFmhLbbznE-MKVazUAows2u5JqU,1840
-websockets/uri.py,sha256=2fFMw-AbKJ5HVHNCuw1Rx1MnkCkNWRpogxWhhM30EU4,3125
+websockets/uri.py,sha256=TNFgDvNDogfESw-78X8UDkh9pJF03ae-dujtpxE8BOs,3068
 websockets/utils.py,sha256=Wdtsh2qQiHLrXUBEnp3LatMLJTZjB2CErbeOFvrdXvE,2022
-websockets/version.py,sha256=-oLWt_FTqI6kCSgzMRlK9II17zZe7OnLw1nW2ZvqXEs,3202
+websockets/version.py,sha256=FXV-IiFoGtln5A_i5aYSpGvbTBGiWUgRSsorpNv83ho,3202

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fastbrowse/darwin-x64",
-  "version": "0.5.20",
+  "version": "0.5.23",
   "description": "The fastbrowse binary for macOS on x64.",
   "license": "MIT",
   "repository": {

package/fastbrowse/_internal/fastbrowse-0.5.20.dist-info/RECORD

@@ -1,14 +0,0 @@
-../../../bin/fastbrowse,sha256=k_VHUJGUyyMLHeLCiSHLkBTLNP1m86q6e4YkyAHdlZM,337
-../../../bin/fastbrowse-mcp,sha256=1CAFjtHrbGFIoAzljudiwUZ-Qrz8WFq5CLTPaDEvGRE,344
-_editable_impl_fastbrowse.pth,sha256=Ft6bxdkTegROr5p9hZSxsnUSfEHrZYCfXWKjtpA4_DU,44
-fastbrowse-0.5.20.dist-info/INSTALLER,sha256=5hhM4Q4mYTT9z6QB6PGpUAW81PGNFrYrdXMj4oM_6ak,2
-fastbrowse-0.5.20.dist-info/METADATA,sha256=TRP1vQPXRmVjUohcVe1cPzAiSIAyyu5deui0sw5RpmA,31373
-fastbrowse-0.5.20.dist-info/RECORD,,
-fastbrowse-0.5.20.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-fastbrowse-0.5.20.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-fastbrowse-0.5.20.dist-info/direct_url.json,sha256=cZGZY9ovdib3X-RhjHdlyO_0_EMUe0tW6AXsSyMbNE4,86
-fastbrowse-0.5.20.dist-info/entry_points.txt,sha256=SlQAK1_4_oywTAMckx8BYuCQJva0F-QuShQPcxtUm-g,95
-fastbrowse-0.5.20.dist-info/licenses/LICENSE,sha256=gcUazG_j5a2blKPmfKqRKE98KOqX2kPbWY-EOtQZiNU,1067
-fastbrowse-0.5.20.dist-info/licenses/NOTICE,sha256=qEO0Az_Tk98vRVL0xjnGYgMvexlMCA92lWl4JBwYRzg,1854
-fastbrowse-0.5.20.dist-info/uv_build.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
-fastbrowse-0.5.20.dist-info/uv_cache.json,sha256=NQkJ10qj0a2tOAG1n-E8bx-QNcOOfzHTWIFROAfMSS0,194

package/fastbrowse/_internal/fastbrowse-0.5.20.dist-info/uv_cache.json

@@ -1 +0,0 @@
-{"timestamp":{"secs_since_epoch":1791608647,"nanos_since_epoch":711603669},"commit":null,"tags":null,"env":{},"directories":{"src":{"secs_since_epoch":1791608647,"nanos_since_epoch":722459116}}}