@hasna/browser 0.4.7 → 0.4.8

package/dist/mcp/index.js

@@ -11297,7 +11297,7 @@ function buildRowRefs(rows, method, totalRows, rowCount) {
       row: index,
       text,
       visible: method === "dom" ? true : index >= firstVisibleRow,
-      selector: method === "dom" ? `#takumi-tui-dom-root [data-row="${index}"]` : undefined
+      selector: method === "dom" ? `#takumi-tui-dom-root .takumi-tui-dom-row[data-row="${index}"]` : undefined
     };
   });
   return refs;
@@ -11505,7 +11505,7 @@ async function readDomMirrorState(page) {
     const runtime = window.__takumiTuiDomRenderer;
     if (runtime?.sync)
       return runtime.sync();
-    const rowEls = Array.from(document.querySelectorAll("#takumi-tui-dom-root [data-row]"));
+    const rowEls = Array.from(document.querySelectorAll("#takumi-tui-dom-root .takumi-tui-dom-row"));
     const rows = rowEls.map((row) => row.getAttribute("aria-label") ?? row.textContent ?? "");
     const term = window.term ?? window.terminal;
     const active = term?.buffer?.active;
@@ -11528,17 +11528,14 @@ function isDomMethod(method) {
   return method === "dom";
 }
 async function withTimeout(label, operation, timeoutMs = DEFAULT_TOOL_TIMEOUT_MS) {
-  let timedOut = false;
-  const timer = setTimeout(() => {
-    timedOut = true;
-  }, timeoutMs);
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => {
+      reject(new BrowserError(`${label} timed out after ${timeoutMs}ms \u2014 ttyd/playwright connection may be unhealthy. Try closing and re-opening the session.`, "TUI_TIMEOUT"));
+    }, timeoutMs);
+  });
   try {
-    return await operation();
-  } catch (err) {
-    if (timedOut) {
-      throw new BrowserError(`${label} timed out after ${timeoutMs}ms \u2014 ttyd/playwright connection may be unhealthy. Try closing and re-opening the session.`, "TUI_TIMEOUT");
-    }
-    throw err;
+    return await Promise.race([operation(), timeout]);
   } finally {
     clearTimeout(timer);
   }
@@ -11808,7 +11805,7 @@ async function waitForTerminalText(page, text, timeoutMs = 30000, method = "buff
       return { found: true, elapsed_ms: Date.now() - start, stuck: false };
     await new Promise((r) => setTimeout(r, 250));
   }
-  return { found: false, elapsed_ms: timeoutMs, stuck: false };
+  return { found: false, elapsed_ms: Date.now() - start, stuck: false };
 }
 async function closeTui(session) {
   await destroyDomRenderer(session.page);
@@ -11921,6 +11918,23 @@ var init_selector = __esm(() => {
   };
 });
 
+// src/lib/tui-recording.ts
+function trackTuiRecording(sessionId, intervalId) {
+  stopTuiRecording(sessionId);
+  recordingIntervals.set(sessionId, intervalId);
+}
+function stopTuiRecording(sessionId) {
+  const intervalId = recordingIntervals.get(sessionId);
+  if (!intervalId)
+    return;
+  clearInterval(intervalId);
+  recordingIntervals.delete(sessionId);
+}
+var recordingIntervals;
+var init_tui_recording = __esm(() => {
+  recordingIntervals = new Map;
+});
+
 // src/db/network-log.ts
 import { randomUUID as randomUUID2 } from "crypto";
 function logRequest(data) {
@@ -12136,7 +12150,9 @@ async function applyStealthPatches(page) {
     "User-Agent": REALISTIC_USER_AGENT
   });
 }
-var REALISTIC_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36", STEALTH_SCRIPT = `
+var REALISTIC_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36", STEALTH_SCRIPT;
+var init_stealth = __esm(() => {
+  STEALTH_SCRIPT = `
 // \u2500\u2500 1. Remove navigator.webdriver flag \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 Object.defineProperty(navigator, 'webdriver', {
   get: () => false,
@@ -12184,8 +12200,14 @@ if (!window.chrome.runtime) {
     id: undefined,
   };
 }
+
+// \u2500\u2500 5. Override navigator.userAgent to match HTTP header \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+Object.defineProperty(navigator, 'userAgent', {
+  get: () => "${REALISTIC_USER_AGENT}",
+  configurable: true,
+});
 `;
-var init_stealth = () => {};
+});
 
 // src/lib/dialogs.ts
 var exports_dialogs = {};
@@ -13249,6 +13271,29 @@ __export(exports_session, {
 function createBunProxy(view) {
   return view;
 }
+function attachPlaywrightListeners(page, sessionId, cleanups, opts = {}) {
+  if (opts.captureNetwork !== false) {
+    try {
+      cleanups.push(enableNetworkLogging(page, sessionId));
+    } catch {}
+  }
+  if (opts.captureConsole !== false) {
+    try {
+      cleanups.push(enableConsoleCapture(page, sessionId));
+    } catch {}
+  }
+  try {
+    cleanups.push(setupDialogHandler(page, sessionId));
+  } catch {}
+}
+function detachPlaywrightListeners(cleanups) {
+  while (cleanups.length > 1) {
+    const cleanup = cleanups.pop();
+    try {
+      cleanup?.();
+    } catch {}
+  }
+}
 async function createSession2(opts = {}) {
   if (opts.cdpUrl) {
     const { connectToExistingBrowser: connectToExistingBrowser2 } = await Promise.resolve().then(() => (init_cdp(), exports_cdp));
@@ -13286,9 +13331,11 @@ async function createSession2(opts = {}) {
   let browser = null;
   let bunView = null;
   let page;
+  let actualEngine = resolvedEngine;
   if (resolvedEngine === "bun") {
     if (!isBunWebViewAvailable()) {
       console.warn("[browser] Bun.WebView requested but not available \u2014 falling back to playwright. Run: bun upgrade --canary");
+      actualEngine = "playwright";
       browser = await launchPlaywright({ headless: opts.headless ?? true, viewport: opts.viewport, userAgent: opts.userAgent });
       page = await getPage(browser, { viewport: opts.viewport, userAgent: opts.userAgent });
     } else {
@@ -13308,9 +13355,11 @@ async function createSession2(opts = {}) {
       }
       if (!bunWorks) {
         console.warn("[browser] Bun.WebView exists but Chrome not available \u2014 falling back to playwright");
+        actualEngine = "playwright";
         browser = await launchPlaywright({ headless: opts.headless ?? true, viewport: opts.viewport, userAgent: opts.userAgent });
         page = await getPage(browser, { viewport: opts.viewport, userAgent: opts.userAgent });
       } else {
+        actualEngine = "bun";
         bunView = testView;
         if (opts.stealth) {}
         page = createBunProxy(bunView);
@@ -13340,19 +13389,10 @@ async function createSession2(opts = {}) {
     });
     const cleanups2 = [];
     cleanups2.push(() => closeTui(tuiSess));
-    if (opts.captureNetwork !== false) {
-      try {
-        cleanups2.push(enableNetworkLogging(page, session2.id));
-      } catch {}
-    }
-    if (opts.captureConsole !== false) {
-      try {
-        cleanups2.push(enableConsoleCapture(page, session2.id));
-      } catch {}
-    }
-    try {
-      cleanups2.push(setupDialogHandler(page, session2.id));
-    } catch {}
+    attachPlaywrightListeners(page, session2.id, cleanups2, {
+      captureNetwork: opts.captureNetwork,
+      captureConsole: opts.captureConsole
+    });
     handles.set(session2.id, { browser, bunView: null, tuiSession: tuiSess, page, engine: "tui", cleanups: cleanups2, tokenBudget: { total: 0, used: 0 }, lastActivity: Date.now(), autoGallery: opts.autoGallery ?? false, startUrl: opts.startUrl ?? "bash" });
     return { session: session2, page };
   } else {
@@ -13382,7 +13422,7 @@ async function createSession2(opts = {}) {
     }
   })() : undefined);
   const session = createSession({
-    engine: bunView ? "bun" : browser ? resolvedEngine : resolvedEngine,
+    engine: actualEngine,
     projectId: opts.projectId,
     agentId: opts.agentId,
     startUrl: opts.startUrl,
@@ -13395,37 +13435,12 @@ async function createSession2(opts = {}) {
   }
   const cleanups = [];
   if (!bunView) {
-    if (opts.captureNetwork !== false) {
-      try {
-        cleanups.push(enableNetworkLogging(page, session.id));
-      } catch {}
-    }
-    if (opts.captureConsole !== false) {
-      try {
-        cleanups.push(enableConsoleCapture(page, session.id));
-      } catch {}
-    }
-    try {
-      cleanups.push(setupDialogHandler(page, session.id));
-    } catch {}
-  } else {
-    if (opts.captureConsole !== false) {
-      try {
-        const { logConsoleMessage: logConsoleMessage2 } = await Promise.resolve().then(() => (init_console_log(), exports_console_log));
-        await bunView.addInitScript(`
-          (() => {
-            const orig = { log: console.log, warn: console.warn, error: console.error, debug: console.debug, info: console.info };
-            ['log','warn','error','debug','info'].forEach(level => {
-              console[level] = (...args) => {
-                orig[level](...args);
-              };
-            });
-          })()
-        `);
-      } catch {}
-    }
+    attachPlaywrightListeners(page, session.id, cleanups, {
+      captureNetwork: opts.captureNetwork,
+      captureConsole: opts.captureConsole
+    });
   }
-  handles.set(session.id, { browser, bunView, tuiSession: null, page, engine: bunView ? "bun" : resolvedEngine, cleanups, tokenBudget: { total: 0, used: 0 }, lastActivity: Date.now(), autoGallery: opts.autoGallery ?? false, startUrl: opts.startUrl ?? "" });
+  handles.set(session.id, { browser, bunView, tuiSession: null, page, engine: actualEngine, cleanups, tokenBudget: { total: 0, used: 0 }, lastActivity: Date.now(), autoGallery: opts.autoGallery ?? false, startUrl: opts.startUrl ?? "" });
   if (opts.startUrl) {
     try {
       if (bunView) {
@@ -13458,7 +13473,8 @@ function getSessionBunView(sessionId) {
   return handles.get(sessionId)?.bunView ?? null;
 }
 function isBunSession(sessionId) {
-  return handles.get(sessionId)?.engine === "bun";
+  const handle = handles.get(sessionId);
+  return handle?.engine === "bun" && handle.bunView !== null;
 }
 function getSessionBrowser(sessionId) {
   const handle = handles.get(sessionId);
@@ -13484,11 +13500,16 @@ function setSessionTui(sessionId, tuiSess) {
   const handle = handles.get(sessionId);
   if (!handle)
     throw new SessionNotFoundError(sessionId);
+  detachPlaywrightListeners(handle.cleanups);
   handle.tuiSession = tuiSess;
   handle.page = tuiSess.page;
   if (tuiSess.browser !== handle.browser) {
     handle.browser = tuiSess.browser;
   }
+  attachPlaywrightListeners(tuiSess.page, sessionId, handle.cleanups, {
+    captureNetwork: true,
+    captureConsole: true
+  });
   handle.lastActivity = Date.now();
 }
 function getSessionCommand(sessionId) {
@@ -13504,9 +13525,12 @@ async function closeSession2(sessionId) {
   const handle = handles.get(sessionId);
   try {
     if (handle) {
+      if (handle.engine === "tui") {
+        stopTuiRecording(sessionId);
+      }
       for (const cleanup of handle.cleanups) {
         try {
-          cleanup();
+          await cleanup();
         } catch {}
       }
       if (handle.bunView) {
@@ -13618,6 +13642,7 @@ var init_session = __esm(() => {
   init_bun_webview();
   init_selector();
   init_tui();
+  init_tui_recording();
   init_network();
   init_console();
   init_stealth();
@@ -20245,10 +20270,17 @@ __export(exports_gallery, {
   createEntry: () => createEntry
 });
 import { randomUUID as randomUUID4 } from "crypto";
+import { join as join9, resolve, relative as relative2, isAbsolute } from "path";
 function validateDataPath(filePath) {
   if (filePath.includes("..")) {
     throw new Error(`File path must not contain '..': ${filePath}`);
   }
+  const dataDir = resolve(getDataDir2());
+  const resolved = resolve(isAbsolute(filePath) ? filePath : join9(dataDir, filePath));
+  const rel = relative2(dataDir, resolved);
+  if (rel.startsWith("..") || isAbsolute(rel)) {
+    throw new Error(`File path must be within data directory: ${filePath}`);
+  }
   return filePath;
 }
 function deserialize(row) {
@@ -20266,7 +20298,13 @@ function deserialize(row) {
     original_size_bytes: row.original_size_bytes ?? undefined,
     compressed_size_bytes: row.compressed_size_bytes ?? undefined,
     compression_ratio: row.compression_ratio ?? undefined,
-    tags: JSON.parse(row.tags),
+    tags: (() => {
+      try {
+        return JSON.parse(row.tags);
+      } catch {
+        return [];
+      }
+    })(),
     notes: row.notes ?? undefined,
     is_favorite: row.is_favorite === 1,
     created_at: row.created_at
@@ -20456,6 +20494,7 @@ var exports_recorder = {};
 __export(exports_recorder, {
   stopRecording: () => stopRecording,
   startRecording: () => startRecording,
+  resetRecorderState: () => resetRecorderState,
   replayRecording: () => replayRecording,
   recordStep: () => recordStep,
   listRecordings: () => listRecordings,
@@ -20463,6 +20502,14 @@ __export(exports_recorder, {
   exportRecording: () => exportRecording,
   attachPageListeners: () => attachPageListeners
 });
+function resetRecorderState() {
+  for (const active of activeRecordings.values()) {
+    try {
+      active.cleanup();
+    } catch {}
+  }
+  activeRecordings.clear();
+}
 function startRecording(sessionId, name, startUrl) {
   const steps = [];
   const recording = createRecording({ name, start_url: startUrl, steps });
@@ -20747,9 +20794,9 @@ var exports_gallery_diff = {};
 __export(exports_gallery_diff, {
   diffImages: () => diffImages
 });
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { mkdirSync as mkdirSync9 } from "fs";
-async function diffImages(path1, path2) {
+async function diffImages(path1, path2, threshold = 10) {
   const img1 = import_sharp2.default(path1);
   const img2 = import_sharp2.default(path2);
   const [meta1, meta2] = await Promise.all([img1.metadata(), img2.metadata()]);
@@ -20768,7 +20815,7 @@ async function diffImages(path1, path2) {
     const dg = Math.abs(raw1[i + 1] - raw2[i + 1]);
     const db = Math.abs(raw1[i + 2] - raw2[i + 2]);
     const diff = (dr + dg + db) / 3;
-    if (diff > 10) {
+    if (diff > threshold) {
       changedPixels++;
       diffBuffer[i] = 255;
       diffBuffer[i + 1] = 0;
@@ -20780,9 +20827,9 @@ async function diffImages(path1, path2) {
     }
   }
   const dataDir = getDataDir2();
-  const diffDir = join11(dataDir, "diffs");
+  const diffDir = join12(dataDir, "diffs");
   mkdirSync9(diffDir, { recursive: true });
-  const diffPath = join11(diffDir, `diff-${Date.now()}.webp`);
+  const diffPath = join12(diffDir, `diff-${Date.now()}.webp`);
   const diffImageBuffer = await import_sharp2.default(diffBuffer, { raw: { width: w, height: h, channels } }).webp({ quality: 85 }).toBuffer();
   await Bun.write(diffPath, diffImageBuffer);
   return {
@@ -20809,21 +20856,21 @@ __export(exports_profiles, {
   applyProfile: () => applyProfile
 });
 import { mkdirSync as mkdirSync11, existsSync as existsSync9, readdirSync as readdirSync7, rmSync, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 function getProfilesDir() {
   const dataDir = getDataDir2();
-  const dir = join13(dataDir, "profiles");
+  const dir = join14(dataDir, "profiles");
   mkdirSync11(dir, { recursive: true });
   return dir;
 }
 function getProfileDir2(name) {
-  return join13(getProfilesDir(), name);
+  return join14(getProfilesDir(), name);
 }
 async function saveProfile(page, name) {
   const dir = getProfileDir2(name);
   mkdirSync11(dir, { recursive: true });
   const cookies = await page.context().cookies();
-  writeFileSync3(join13(dir, "cookies.json"), JSON.stringify(cookies, null, 2));
+  writeFileSync3(join14(dir, "cookies.json"), JSON.stringify(cookies, null, 2));
   let localStorage2 = {};
   try {
     localStorage2 = await page.evaluate(() => {
@@ -20835,11 +20882,11 @@ async function saveProfile(page, name) {
       return result;
     });
   } catch {}
-  writeFileSync3(join13(dir, "storage.json"), JSON.stringify(localStorage2, null, 2));
+  writeFileSync3(join14(dir, "storage.json"), JSON.stringify(localStorage2, null, 2));
   const savedAt = new Date().toISOString();
   const url = page.url();
   const meta = { saved_at: savedAt, url };
-  writeFileSync3(join13(dir, "meta.json"), JSON.stringify(meta, null, 2));
+  writeFileSync3(join14(dir, "meta.json"), JSON.stringify(meta, null, 2));
   return {
     name,
     saved_at: savedAt,
@@ -20853,9 +20900,9 @@ function loadProfile(name) {
   if (!existsSync9(dir)) {
     throw new Error(`Profile not found: ${name}`);
   }
-  const cookiesPath = join13(dir, "cookies.json");
-  const storagePath = join13(dir, "storage.json");
-  const metaPath2 = join13(dir, "meta.json");
+  const cookiesPath = join14(dir, "cookies.json");
+  const storagePath = join14(dir, "storage.json");
+  const metaPath2 = join14(dir, "meta.json");
   const cookies = existsSync9(cookiesPath) ? JSON.parse(readFileSync3(cookiesPath, "utf8")) : [];
   const localStorage2 = existsSync9(storagePath) ? JSON.parse(readFileSync3(storagePath, "utf8")) : {};
   let savedAt = new Date().toISOString();
@@ -20896,24 +20943,24 @@ function listProfiles() {
     if (!entry.isDirectory())
       continue;
     const name = entry.name;
-    const profileDir = join13(dir, name);
+    const profileDir = join14(dir, name);
     let savedAt = "";
     let url;
     let cookieCount = 0;
     let storageKeyCount = 0;
     try {
-      const metaPath2 = join13(profileDir, "meta.json");
+      const metaPath2 = join14(profileDir, "meta.json");
       if (existsSync9(metaPath2)) {
         const meta = JSON.parse(readFileSync3(metaPath2, "utf8"));
         savedAt = meta.saved_at ?? "";
         url = meta.url;
       }
-      const cookiesPath = join13(profileDir, "cookies.json");
+      const cookiesPath = join14(profileDir, "cookies.json");
       if (existsSync9(cookiesPath)) {
         const cookies = JSON.parse(readFileSync3(cookiesPath, "utf8"));
         cookieCount = Array.isArray(cookies) ? cookies.length : 0;
       }
-      const storagePath = join13(profileDir, "storage.json");
+      const storagePath = join14(profileDir, "storage.json");
       if (existsSync9(storagePath)) {
         const storage = JSON.parse(readFileSync3(storagePath, "utf8"));
         storageKeyCount = Object.keys(storage).length;
@@ -21550,7 +21597,7 @@ __export(exports_dist, {
   AGENT_TARGETS: () => AGENT_TARGETS
 });
 import { existsSync as existsSync10, readFileSync as readFileSync4, readdirSync as readdirSync8 } from "fs";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 import { homedir as homedir8 } from "os";
 import { existsSync as existsSync22, cpSync, mkdirSync as mkdirSync12, writeFileSync as writeFileSync4, rmSync as rmSync2, readdirSync as readdirSync22, statSync as statSync3, readFileSync as readFileSync22, accessSync, constants } from "fs";
 import { join as join22, dirname as dirname2 } from "path";
@@ -21600,7 +21647,7 @@ function discoverSkillsInDir(dir) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join14(dir, entry.name, "SKILL.md");
+      const skillMdPath = join15(dir, entry.name, "SKILL.md");
       if (!existsSync10(skillMdPath))
         continue;
       let content;
@@ -21631,11 +21678,11 @@ function loadRegistry(cwd) {
     return _registryCache;
   }
   const official = SKILLS.map((s) => ({ ...s, source: "official" }));
-  const globalCustomNew = discoverSkillsInDir(join14(homedir8(), ".hasna", "skills", "custom"));
-  const globalCustomOld = discoverSkillsInDir(join14(homedir8(), ".skills"));
+  const globalCustomNew = discoverSkillsInDir(join15(homedir8(), ".hasna", "skills", "custom"));
+  const globalCustomOld = discoverSkillsInDir(join15(homedir8(), ".skills"));
   const oldNames = new Set(globalCustomNew.map((s) => s.name));
   const globalCustom = [...globalCustomNew, ...globalCustomOld.filter((s) => !oldNames.has(s.name))];
-  const projectCustom = discoverSkillsInDir(join14(cwd || process.cwd(), ".skills", "custom-skills"));
+  const projectCustom = discoverSkillsInDir(join15(cwd || process.cwd(), ".skills", "custom-skills"));
   const customNames = new Set([...globalCustom, ...projectCustom].map((s) => s.name));
   const filtered = official.filter((s) => !customNames.has(s.name));
   _registryCache = [...filtered, ...globalCustom, ...projectCustom];
@@ -23999,13 +24046,14 @@ var init_dist2 = __esm(() => {
 // src/lib/auth.ts
 var exports_auth = {};
 __export(exports_auth, {
+  lookupCredentials: () => lookupCredentials,
   loginWithCredentials: () => loginWithCredentials,
   getCredentials: () => getCredentials
 });
 import { existsSync as existsSync11, readFileSync as readFileSync6 } from "fs";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 import { homedir as homedir9 } from "os";
-async function getCredentials(service) {
+async function lookupCredentials(service) {
   try {
     const secretsVaultPath = process.env["BROWSER_SECRETS_VAULT_PATH"];
     if (secretsVaultPath) {
@@ -24013,11 +24061,14 @@ async function getCredentials(service) {
       const email = getSecret(`${service}_email`) ?? getSecret(`${service}_username`) ?? getSecret(`${service}_login`);
       const password = getSecret(`${service}_password`) ?? getSecret(`${service}_pass`);
       if (email?.value && password?.value) {
-        return { email: email.value, password: password.value };
+        return {
+          credential: { email: email.value, password: password.value },
+          method: "secrets_vault"
+        };
       }
     }
   } catch {}
-  const secretsPath = join15(homedir9(), ".secrets");
+  const secretsPath = join16(homedir9(), ".secrets");
   if (existsSync11(secretsPath)) {
     let content;
     try {
@@ -24036,27 +24087,33 @@ async function getCredentials(service) {
     }
     const email = vars[`${prefix}_EMAIL`] ?? vars[`${prefix}_USERNAME`];
     const password = vars[`${prefix}_PASSWORD`];
-    if (email && password)
-      return { email, password };
+    if (email && password) {
+      return { credential: { email, password }, method: "env_file" };
+    }
   }
   const envPrefix = service.toUpperCase().replace(/[^A-Z0-9]/g, "_");
   const envEmail = process.env[`${envPrefix}_EMAIL`] ?? process.env[`${envPrefix}_USERNAME`];
   const envPass = process.env[`${envPrefix}_PASSWORD`];
-  if (envEmail && envPass)
-    return { email: envEmail, password: envPass };
-  return null;
+  if (envEmail && envPass) {
+    return { credential: { email: envEmail, password: envPass }, method: "process_env" };
+  }
+  return { credential: null, method: "not_found" };
+}
+async function getCredentials(service) {
+  return (await lookupCredentials(service)).credential;
 }
 async function loginWithCredentials(page, credentials, opts) {
-  const { fillForm: fillForm2 } = await Promise.resolve().then(() => (init_actions(), exports_actions));
+  const { fillForm: fillForm2, waitForText: waitForText2 } = await Promise.resolve().then(() => (init_actions(), exports_actions));
   const { saveProfile: saveProfile2 } = await Promise.resolve().then(() => (init_profiles(), exports_profiles));
   try {
     if (opts?.loginUrl) {
       await page.goto(opts.loginUrl, { waitUntil: "domcontentloaded" });
       await new Promise((r) => setTimeout(r, 500));
     }
+    const urlBefore = page.url();
     const emailSel = opts?.emailSelector ?? 'input[type="email"], input[name="email"], input[id*="email"], input[placeholder*="email" i]';
     const passSel = opts?.passwordSelector ?? 'input[type="password"]';
-    const submitSel = opts?.submitSelector ?? 'button[type="submit"], input[type="submit"], button:contains("Sign in"), button:contains("Log in"), button:contains("Login")';
+    const submitSel = opts?.submitSelector ?? 'button[type="submit"], input[type="submit"]';
     const fields = {};
     if (credentials.email)
       fields[emailSel] = credentials.email;
@@ -24065,10 +24122,38 @@ async function loginWithCredentials(page, credentials, opts) {
     if (credentials.password)
       fields[passSel] = credentials.password;
     const fillResult = await fillForm2(page, fields, submitSel);
-    const successText = opts?.waitForText ?? "dashboard|profile|account|welcome|signed in|logout";
-    await new Promise((r) => setTimeout(r, 1500));
-    const currentUrl = page.url?.() ?? "";
-    const logged_in = fillResult.errors.length === 0;
+    if (fillResult.errors.some((e) => e.startsWith("submit("))) {
+      try {
+        await page.getByRole("button", { name: /sign in|log in|login|submit/i }).first().click({ timeout: 5000 });
+      } catch {
+        try {
+          await page.locator('input[type="submit"]').first().click({ timeout: 3000 });
+        } catch {}
+      }
+    }
+    const successPattern = opts?.waitForText ?? "dashboard|profile|account|welcome|signed in|logout";
+    const patterns = successPattern.split("|").map((p) => p.trim()).filter(Boolean);
+    let logged_in = false;
+    for (const pattern of patterns) {
+      try {
+        await waitForText2(page, pattern, { timeout: 5000 });
+        logged_in = fillResult.errors.length === 0;
+        break;
+      } catch {}
+    }
+    if (!logged_in) {
+      await page.waitForLoadState("domcontentloaded").catch(() => {});
+      await new Promise((r) => setTimeout(r, 1000));
+      const currentUrl2 = page.url();
+      const bodyText = await page.evaluate(() => document.body?.innerText?.toLowerCase() ?? "").catch(() => "");
+      const urlChanged = currentUrl2 !== urlBefore;
+      const textMatch = patterns.some((p) => {
+        const needle = p.toLowerCase();
+        return bodyText.includes(needle) || currentUrl2.toLowerCase().includes(needle);
+      });
+      logged_in = fillResult.errors.length === 0 && (urlChanged || textMatch);
+    }
+    const currentUrl = page.url();
     let profile_saved = false;
     if (opts?.saveProfile && logged_in) {
       try {
@@ -24080,14 +24165,14 @@ async function loginWithCredentials(page, credentials, opts) {
       logged_in,
       redirect_url: currentUrl,
       profile_saved,
-      method: "secrets_vault"
+      method: opts?.method ?? "secrets_vault"
     };
   } catch (err2) {
     return {
       logged_in: false,
       redirect_url: "",
       profile_saved: false,
-      method: "not_found",
+      method: opts?.method ?? "not_found",
       error: err2 instanceof Error ? err2.message : String(err2)
     };
   }
@@ -24194,11 +24279,11 @@ var init_skills_runner = __esm(() => {
     },
     login: async (page, params) => {
       const { service, login_url } = params;
-      const { getCredentials: getCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
-      const creds = await getCredentials2(service);
+      const { lookupCredentials: lookupCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
+      const { credential: creds, method } = await lookupCredentials2(service);
       if (!creds)
         return { logged_in: false, error: `No credentials found for ${service}` };
-      const result = await loginWithCredentials2(page, creds, { loginUrl: login_url, saveProfile: service });
+      const result = await loginWithCredentials2(page, creds, { loginUrl: login_url, saveProfile: service, method });
       return result;
     },
     "extract-text": async (page, params) => {
@@ -24789,16 +24874,16 @@ function listRuns(scriptId) {
 }
 function migrateJsonScripts() {
   const { existsSync: existsSync12, readdirSync: readdirSync4, readFileSync: readFileSync7 } = __require("fs");
-  const { join: join16 } = __require("path");
+  const { join: join17 } = __require("path");
   const { getDataDir: getDataDir4 } = (init_schema(), __toCommonJS(exports_schema));
-  const dir = join16(getDataDir4(), "scripts");
+  const dir = join17(getDataDir4(), "scripts");
   if (!existsSync12(dir))
     return 0;
   const files = readdirSync4(dir).filter((f) => f.endsWith(".json"));
   let migrated = 0;
   for (const file of files) {
     try {
-      const raw = JSON.parse(readFileSync7(join16(dir, file), "utf8"));
+      const raw = JSON.parse(readFileSync7(join17(dir, file), "utf8"));
       if (!raw.name || !raw.steps)
         continue;
       if (getScriptByName(raw.name))
@@ -24851,7 +24936,7 @@ var init_scripts = __esm(() => {
 });
 
 // src/lib/ai-inference.ts
-function resolve(opts) {
+function resolve2(opts) {
   if (opts?.model && ALIASES[opts.model])
     return ALIASES[opts.model];
   if (opts?.provider && opts?.model)
@@ -24861,7 +24946,7 @@ function resolve(opts) {
   return ALIASES.fast;
 }
 async function infer(prompt, opts) {
-  const { provider, model } = resolve(opts);
+  const { provider, model } = resolve2(opts);
   const maxTokens = opts?.maxTokens ?? 1024;
   if (provider === "anthropic") {
     const apiKey2 = process.env["ANTHROPIC_API_KEY"];
@@ -25252,7 +25337,7 @@ __export(exports_datasets, {
 });
 import { randomUUID as randomUUID15 } from "crypto";
 import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync13 } from "fs";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 function saveDataset(data) {
   const db = getDatabase();
   const id = randomUUID15();
@@ -25290,10 +25375,10 @@ function exportDataset(name, format) {
   const dataset = getDatasetByName(name);
   if (!dataset)
     throw new Error(`Dataset '${name}' not found`);
-  const dir = join16(getDataDir2(), "exports");
+  const dir = join17(getDataDir2(), "exports");
   mkdirSync13(dir, { recursive: true });
   const filename = `${name}.${format}`;
-  const path = join16(dir, filename);
+  const path = join17(dir, filename);
   if (format === "csv") {
     const rows = dataset.data;
     if (rows.length === 0) {
@@ -25441,7 +25526,7 @@ import {
   copyFileSync as copyFileSync6
 } from "fs";
 import { homedir as homedir10 } from "os";
-import { join as join17, relative as relative2 } from "path";
+import { join as join18, relative as relative3 } from "path";
 import { existsSync as existsSync23, mkdirSync as mkdirSync23, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir23 } from "os";
 import { join as join23 } from "path";
@@ -25453,7 +25538,7 @@ import { join as join43 } from "path";
 import { join as join62, dirname as dirname3 } from "path";
 import { homedir as homedir52, platform as platform2 } from "os";
 import { existsSync as existsSync43, mkdirSync as mkdirSync33, cpSync as cpSync2 } from "fs";
-import { dirname as dirname23, join as join53, resolve as resolve2 } from "path";
+import { dirname as dirname23, join as join53, resolve as resolve3 } from "path";
 import { existsSync as existsSync62, mkdirSync as mkdirSync52, readFileSync as readFileSync23, readdirSync as readdirSync33, writeFileSync as writeFileSync23, unlinkSync as unlinkSync3, cpSync as cpSync22 } from "fs";
 import { homedir as homedir62 } from "os";
 import { basename as basename2, dirname as dirname32, join as join72, resolve as resolve22 } from "path";
@@ -26279,13 +26364,13 @@ function custom3(check, _params = {}, fatal) {
   return ZodAny3.create();
 }
 function getDataDir4(serviceName) {
-  const dir = join17(HASNA_DIR2, serviceName);
+  const dir = join18(HASNA_DIR2, serviceName);
   mkdirSync14(dir, { recursive: true });
   return dir;
 }
 function getDbPath2(serviceName) {
   const dir = getDataDir4(serviceName);
-  return join17(dir, `${serviceName}.db`);
+  return join18(dir, `${serviceName}.db`);
 }
 function getConfigDir2() {
   return CONFIG_DIR3;
@@ -26504,7 +26589,7 @@ function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestMementosDb(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
     const candidate = join53(dir, ".mementos", "mementos.db");
     if (existsSync43(candidate))
@@ -26517,7 +26602,7 @@ function findNearestMementosDb(startDir) {
   return null;
 }
 function findGitRoot(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
     if (existsSync43(join53(dir, ".git")))
       return dir;
@@ -26559,7 +26644,7 @@ function getDbPath22() {
 function ensureDir2(filePath) {
   if (isInMemoryDb(filePath))
     return;
-  const dir = dirname23(resolve2(filePath));
+  const dir = dirname23(resolve3(filePath));
   if (!existsSync43(dir)) {
     mkdirSync33(dir, { recursive: true });
   }
@@ -32797,7 +32882,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       function parse(stream, callback) {
         const parser = new parser_1.Parser;
         stream.on("data", (buffer) => parser.parse(buffer, callback));
-        return new Promise((resolve3) => stream.on("end", () => resolve3()));
+        return new Promise((resolve4) => stream.on("end", () => resolve4()));
       }
       exports.parse = parse;
     });
@@ -33462,12 +33547,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             this._connect(callback);
             return;
           }
-          return new this._Promise((resolve3, reject) => {
+          return new this._Promise((resolve4, reject) => {
             this._connect((error) => {
               if (error) {
                 reject(error);
               } else {
-                resolve3(this);
+                resolve4(this);
               }
             });
           });
@@ -33799,8 +33884,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
             query = new Query3(config, values, callback);
             if (!query.callback) {
-              result = new this._Promise((resolve3, reject) => {
-                query.callback = (err2, res) => err2 ? reject(err2) : resolve3(res);
+              result = new this._Promise((resolve4, reject) => {
+                query.callback = (err2, res) => err2 ? reject(err2) : resolve4(res);
               }).catch((err2) => {
                 Error.captureStackTrace(err2);
                 throw err2;
@@ -33875,8 +33960,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (cb) {
             this.connection.once("end", cb);
           } else {
-            return new this._Promise((resolve3) => {
-              this.connection.once("end", resolve3);
+            return new this._Promise((resolve4) => {
+              this.connection.once("end", resolve4);
             });
           }
         }
@@ -33921,8 +34006,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         const cb = function(err2, client) {
           err2 ? rej(err2) : res(client);
         };
-        const result = new Promise2(function(resolve3, reject) {
-          res = resolve3;
+        const result = new Promise2(function(resolve4, reject) {
+          res = resolve4;
           rej = reject;
         }).catch((err2) => {
           Error.captureStackTrace(err2);
@@ -33983,7 +34068,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (typeof Promise2.try === "function") {
             return Promise2.try(f);
           }
-          return new Promise2((resolve3) => resolve3(f()));
+          return new Promise2((resolve4) => resolve4(f()));
         }
         _isFull() {
           return this._clients.length >= this.options.max;
@@ -34357,8 +34442,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       NativeQuery.prototype._getPromise = function() {
         if (this._promise)
           return this._promise;
-        this._promise = new Promise(function(resolve3, reject) {
-          this._once("end", resolve3);
+        this._promise = new Promise(function(resolve4, reject) {
+          this._once("end", resolve4);
           this._once("error", reject);
         }.bind(this));
         return this._promise;
@@ -34532,12 +34617,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           this._connect(callback);
           return;
         }
-        return new this._Promise((resolve3, reject) => {
+        return new this._Promise((resolve4, reject) => {
           this._connect((error) => {
             if (error) {
               reject(error);
             } else {
-              resolve3(this);
+              resolve4(this);
             }
           });
         });
@@ -34561,8 +34646,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           query = new NativeQuery(config, values, callback);
           if (!query.callback) {
             let resolveOut, rejectOut;
-            result = new this._Promise((resolve3, reject) => {
-              resolveOut = resolve3;
+            result = new this._Promise((resolve4, reject) => {
+              resolveOut = resolve4;
               rejectOut = reject;
             }).catch((err2) => {
               Error.captureStackTrace(err2);
@@ -34620,8 +34705,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         }
         let result;
         if (!cb) {
-          result = new this._Promise(function(resolve3, reject) {
-            cb = (err2) => err2 ? reject(err2) : resolve3();
+          result = new this._Promise(function(resolve4, reject) {
+            cb = (err2) => err2 ? reject(err2) : resolve4();
           });
         }
         this.native.end(function() {
@@ -37909,7 +37994,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       init_external2();
     });
     init_dotfile2 = __esm22(() => {
-      HASNA_DIR2 = join17(homedir10(), ".hasna");
+      HASNA_DIR2 = join18(homedir10(), ".hasna");
     });
     exports_config2 = {};
     __export22(exports_config2, {
@@ -39485,7 +39570,7 @@ import {
   copyFileSync as copyFileSync7
 } from "fs";
 import { homedir as homedir11 } from "os";
-import { join as join18, relative as relative3 } from "path";
+import { join as join19, relative as relative4 } from "path";
 import { existsSync as existsSync24, mkdirSync as mkdirSync24, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
 import { homedir as homedir24 } from "os";
 import { join as join24 } from "path";
@@ -40328,13 +40413,13 @@ function custom4(check, _params = {}, fatal) {
   return ZodAny4.create();
 }
 function getDataDir5(serviceName) {
-  const dir = join18(HASNA_DIR3, serviceName);
+  const dir = join19(HASNA_DIR3, serviceName);
   mkdirSync15(dir, { recursive: true });
   return dir;
 }
 function getDbPath3(serviceName) {
   const dir = getDataDir5(serviceName);
-  return join18(dir, `${serviceName}.db`);
+  return join19(dir, `${serviceName}.db`);
 }
 function getConfigDir3() {
   return CONFIG_DIR5;
@@ -45793,7 +45878,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       function parse(stream, callback) {
         const parser = new parser_1.Parser;
         stream.on("data", (buffer) => parser.parse(buffer, callback));
-        return new Promise((resolve3) => stream.on("end", () => resolve3()));
+        return new Promise((resolve4) => stream.on("end", () => resolve4()));
       }
       exports.parse = parse;
     });
@@ -46458,12 +46543,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             this._connect(callback);
             return;
           }
-          return new this._Promise((resolve3, reject) => {
+          return new this._Promise((resolve4, reject) => {
             this._connect((error) => {
               if (error) {
                 reject(error);
               } else {
-                resolve3(this);
+                resolve4(this);
               }
             });
           });
@@ -46795,8 +46880,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
             query = new Query4(config, values, callback);
             if (!query.callback) {
-              result = new this._Promise((resolve3, reject) => {
-                query.callback = (err2, res) => err2 ? reject(err2) : resolve3(res);
+              result = new this._Promise((resolve4, reject) => {
+                query.callback = (err2, res) => err2 ? reject(err2) : resolve4(res);
               }).catch((err2) => {
                 Error.captureStackTrace(err2);
                 throw err2;
@@ -46871,8 +46956,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (cb) {
             this.connection.once("end", cb);
           } else {
-            return new this._Promise((resolve3) => {
-              this.connection.once("end", resolve3);
+            return new this._Promise((resolve4) => {
+              this.connection.once("end", resolve4);
             });
           }
         }
@@ -46917,8 +47002,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         const cb = function(err2, client) {
           err2 ? rej(err2) : res(client);
         };
-        const result = new Promise2(function(resolve3, reject) {
-          res = resolve3;
+        const result = new Promise2(function(resolve4, reject) {
+          res = resolve4;
           rej = reject;
         }).catch((err2) => {
           Error.captureStackTrace(err2);
@@ -46979,7 +47064,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (typeof Promise2.try === "function") {
             return Promise2.try(f);
           }
-          return new Promise2((resolve3) => resolve3(f()));
+          return new Promise2((resolve4) => resolve4(f()));
         }
         _isFull() {
           return this._clients.length >= this.options.max;
@@ -47353,8 +47438,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       NativeQuery.prototype._getPromise = function() {
         if (this._promise)
           return this._promise;
-        this._promise = new Promise(function(resolve3, reject) {
-          this._once("end", resolve3);
+        this._promise = new Promise(function(resolve4, reject) {
+          this._once("end", resolve4);
           this._once("error", reject);
         }.bind(this));
         return this._promise;
@@ -47528,12 +47613,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           this._connect(callback);
           return;
         }
-        return new this._Promise((resolve3, reject) => {
+        return new this._Promise((resolve4, reject) => {
           this._connect((error) => {
             if (error) {
               reject(error);
             } else {
-              resolve3(this);
+              resolve4(this);
             }
           });
         });
@@ -47557,8 +47642,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           query = new NativeQuery(config, values, callback);
           if (!query.callback) {
             let resolveOut, rejectOut;
-            result = new this._Promise((resolve3, reject) => {
-              resolveOut = resolve3;
+            result = new this._Promise((resolve4, reject) => {
+              resolveOut = resolve4;
               rejectOut = reject;
             }).catch((err2) => {
               Error.captureStackTrace(err2);
@@ -47616,8 +47701,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         }
         let result;
         if (!cb) {
-          result = new this._Promise(function(resolve3, reject) {
-            cb = (err2) => err2 ? reject(err2) : resolve3();
+          result = new this._Promise(function(resolve4, reject) {
+            cb = (err2) => err2 ? reject(err2) : resolve4();
           });
         }
         this.native.end(function() {
@@ -50905,7 +50990,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       init_external3();
     });
     init_dotfile3 = __esm23(() => {
-      HASNA_DIR3 = join18(homedir11(), ".hasna");
+      HASNA_DIR3 = join19(homedir11(), ".hasna");
     });
     exports_config3 = {};
     __export23(exports_config3, {
@@ -52667,14 +52752,14 @@ Check the top-level render call using <` + parentName + ">.";
               var thenableResult = result;
               var wasAwaited = false;
               var thenable = {
-                then: function(resolve3, reject) {
+                then: function(resolve4, reject) {
                   wasAwaited = true;
                   thenableResult.then(function(returnValue2) {
                     popActScope(prevActScopeDepth);
                     if (actScopeDepth === 0) {
-                      recursivelyFlushAsyncActWork(returnValue2, resolve3, reject);
+                      recursivelyFlushAsyncActWork(returnValue2, resolve4, reject);
                     } else {
-                      resolve3(returnValue2);
+                      resolve4(returnValue2);
                     }
                   }, function(error2) {
                     popActScope(prevActScopeDepth);
@@ -52703,20 +52788,20 @@ Check the top-level render call using <` + parentName + ">.";
                   ReactCurrentActQueue.current = null;
                 }
                 var _thenable = {
-                  then: function(resolve3, reject) {
+                  then: function(resolve4, reject) {
                     if (ReactCurrentActQueue.current === null) {
                       ReactCurrentActQueue.current = [];
-                      recursivelyFlushAsyncActWork(returnValue, resolve3, reject);
+                      recursivelyFlushAsyncActWork(returnValue, resolve4, reject);
                     } else {
-                      resolve3(returnValue);
+                      resolve4(returnValue);
                     }
                   }
                 };
                 return _thenable;
               } else {
                 var _thenable2 = {
-                  then: function(resolve3, reject) {
-                    resolve3(returnValue);
+                  then: function(resolve4, reject) {
+                    resolve4(returnValue);
                   }
                 };
                 return _thenable2;
@@ -52732,7 +52817,7 @@ Check the top-level render call using <` + parentName + ">.";
             actScopeDepth = prevActScopeDepth;
           }
         }
-        function recursivelyFlushAsyncActWork(returnValue, resolve3, reject) {
+        function recursivelyFlushAsyncActWork(returnValue, resolve4, reject) {
           {
             var queue = ReactCurrentActQueue.current;
             if (queue !== null) {
@@ -52741,16 +52826,16 @@ Check the top-level render call using <` + parentName + ">.";
                 enqueueTask(function() {
                   if (queue.length === 0) {
                     ReactCurrentActQueue.current = null;
-                    resolve3(returnValue);
+                    resolve4(returnValue);
                   } else {
-                    recursivelyFlushAsyncActWork(returnValue, resolve3, reject);
+                    recursivelyFlushAsyncActWork(returnValue, resolve4, reject);
                   }
                 });
               } catch (error2) {
                 reject(error2);
               }
             } else {
-              resolve3(returnValue);
+              resolve4(returnValue);
             }
           }
         }
@@ -53670,7 +53755,7 @@ __export(exports_dist4, {
 import { hostname as osHostname, platform as osPlatform } from "os";
 import { Database as Database4 } from "bun:sqlite";
 import { existsSync as existsSync14, mkdirSync as mkdirSync16 } from "fs";
-import { dirname as dirname5, join as join19, resolve as resolve3 } from "path";
+import { dirname as dirname5, join as join20, resolve as resolve4 } from "path";
 import { existsSync as existsSync35 } from "fs";
 import { join as join35 } from "path";
 import { existsSync as existsSync25, mkdirSync as mkdirSync25, readFileSync as readFileSync10, readdirSync as readdirSync11, statSync as statSync5, writeFileSync as writeFileSync8 } from "fs";
@@ -53691,7 +53776,7 @@ import {
   copyFileSync as copyFileSync8
 } from "fs";
 import { homedir as homedir25 } from "os";
-import { join as join74, relative as relative4 } from "path";
+import { join as join74, relative as relative5 } from "path";
 import { existsSync as existsSync222, mkdirSync as mkdirSync222, readFileSync as readFileSync45, writeFileSync as writeFileSync43 } from "fs";
 import { homedir as homedir222 } from "os";
 import { join as join222 } from "path";
@@ -54149,9 +54234,9 @@ function isInMemoryDb2(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestTodosDb(startDir) {
-  let dir = resolve3(startDir);
+  let dir = resolve4(startDir);
   while (true) {
-    const candidate = join19(dir, ".todos", "todos.db");
+    const candidate = join20(dir, ".todos", "todos.db");
     if (existsSync14(candidate))
       return candidate;
     const parent = dirname5(dir);
@@ -54162,9 +54247,9 @@ function findNearestTodosDb(startDir) {
   return null;
 }
 function findGitRoot2(startDir) {
-  let dir = resolve3(startDir);
+  let dir = resolve4(startDir);
   while (true) {
-    if (existsSync14(join19(dir, ".git")))
+    if (existsSync14(join20(dir, ".git")))
       return dir;
     const parent = dirname5(dir);
     if (parent === dir)
@@ -54187,12 +54272,12 @@ function getDbPath4() {
   if (process.env["TODOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot2(cwd);
     if (gitRoot) {
-      return join19(gitRoot, ".todos", "todos.db");
+      return join20(gitRoot, ".todos", "todos.db");
     }
   }
   const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  const newPath = join19(home, ".hasna", "todos", "todos.db");
-  const legacyPath = join19(home, ".todos", "todos.db");
+  const newPath = join20(home, ".hasna", "todos", "todos.db");
+  const legacyPath = join20(home, ".todos", "todos.db");
   if (!existsSync14(newPath) && existsSync14(legacyPath)) {
     return legacyPath;
   }
@@ -54201,7 +54286,7 @@ function getDbPath4() {
 function ensureDir3(filePath) {
   if (isInMemoryDb2(filePath))
     return;
-  const dir = dirname5(resolve3(filePath));
+  const dir = dirname5(resolve4(filePath));
   if (!existsSync14(dir)) {
     mkdirSync16(dir, { recursive: true });
   }
@@ -70827,7 +70912,7 @@ init_dist();
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { readFileSync as readFileSync11 } from "fs";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 
 // node_modules/zod/v3/external.js
 var exports_external2 = {};
@@ -74812,12 +74897,12 @@ init_types2();
 init_gallery();
 init_schema();
 var import_sharp = __toESM(require_lib3(), 1);
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 import { mkdirSync as mkdirSync7 } from "fs";
 function getScreenshotDir(projectId) {
-  const base = join9(getDataDir2(), "screenshots");
+  const base = join10(getDataDir2(), "screenshots");
   const date = new Date().toISOString().split("T")[0];
-  const dir = projectId ? join9(base, projectId, date) : join9(base, date);
+  const dir = projectId ? join10(base, projectId, date) : join10(base, date);
   mkdirSync7(dir, { recursive: true });
   return dir;
 }
@@ -74833,7 +74918,7 @@ async function compressBuffer(raw, format, quality, maxWidth) {
   }
 }
 async function generateThumbnail(raw, dir, stem) {
-  const thumbPath = join9(dir, `${stem}.thumb.webp`);
+  const thumbPath = join10(dir, `${stem}.thumb.webp`);
   const thumbBuffer = await import_sharp.default(raw).resize({ width: 200, withoutEnlargement: true }).webp({ quality: 70, effort: 3 }).toBuffer();
   await Bun.write(thumbPath, thumbBuffer);
   return { path: thumbPath, base64: thumbBuffer.toString("base64") };
@@ -74901,7 +74986,7 @@ async function takeScreenshot(page, opts) {
     const compressedSizeBytes = finalBuffer.length;
     const compressionRatio = originalSizeBytes > 0 ? compressedSizeBytes / originalSizeBytes : 1;
     const ext = format;
-    const screenshotPath = opts?.path ?? join9(dir, `${stem}.${ext}`);
+    const screenshotPath = opts?.path ?? join10(dir, `${stem}.${ext}`);
     await Bun.write(screenshotPath, finalBuffer);
     let thumbnailPath;
     let thumbnailBase64;
@@ -74961,12 +75046,12 @@ async function takeScreenshot(page, opts) {
 }
 async function generatePDF(page, opts) {
   try {
-    const base = join9(getDataDir2(), "pdfs");
+    const base = join10(getDataDir2(), "pdfs");
     const date = new Date().toISOString().split("T")[0];
-    const dir = opts?.projectId ? join9(base, opts.projectId, date) : join9(base, date);
+    const dir = opts?.projectId ? join10(base, opts.projectId, date) : join10(base, date);
     mkdirSync7(dir, { recursive: true });
     const timestamp = Date.now();
-    const pdfPath = opts?.path ?? join9(dir, `${timestamp}.pdf`);
+    const pdfPath = opts?.path ?? join10(dir, `${timestamp}.pdf`);
     const buffer = await page.pdf({
       path: pdfPath,
       format: opts?.format ?? "A4",
@@ -75218,11 +75303,11 @@ init_gallery();
 // src/lib/downloads.ts
 init_schema();
 import { randomUUID as randomUUID9 } from "crypto";
-import { join as join10, basename, extname } from "path";
+import { join as join11, basename, extname } from "path";
 import { mkdirSync as mkdirSync8, existsSync as existsSync7, readdirSync as readdirSync6, statSync as statSync2, unlinkSync as unlinkSync2, copyFileSync as copyFileSync3, writeFileSync as writeFileSync2, readFileSync as readFileSync2 } from "fs";
 function getDownloadsDir(sessionId) {
-  const base = join10(getDataDir2(), "downloads");
-  const dir = sessionId ? join10(base, sessionId) : base;
+  const base = join11(getDataDir2(), "downloads");
+  const dir = sessionId ? join11(base, sessionId) : base;
   mkdirSync8(dir, { recursive: true });
   return dir;
 }
@@ -75235,7 +75320,7 @@ function saveToDownloads(buffer, filename, opts) {
   const ext = extname(filename) || "";
   const stem = basename(filename, ext);
   const uniqueName = `${stem}-${id.slice(0, 8)}${ext}`;
-  const filePath = join10(dir, uniqueName);
+  const filePath = join11(dir, uniqueName);
   writeFileSync2(filePath, buffer);
   const meta = {
     id,
@@ -75270,7 +75355,7 @@ function listDownloads(sessionId) {
     for (const entry of entries) {
       if (entry.endsWith(".meta.json"))
         continue;
-      const full = join10(d, entry);
+      const full = join11(d, entry);
       const stat = statSync2(full);
       if (stat.isDirectory()) {
         scanDir(full);
@@ -75359,7 +75444,7 @@ init_snapshot();
 
 // src/lib/files-integration.ts
 init_schema();
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { mkdirSync as mkdirSync10, copyFileSync as copyFileSync4 } from "fs";
 async function persistFile(localPath, opts) {
   try {
@@ -75371,10 +75456,10 @@ async function persistFile(localPath, opts) {
   } catch {}
   const dataDir = getDataDir2();
   const date = new Date().toISOString().split("T")[0];
-  const dir = join12(dataDir, "persistent", date);
+  const dir = join13(dataDir, "persistent", date);
   mkdirSync10(dir, { recursive: true });
   const filename = localPath.split("/").pop() ?? "file";
-  const targetPath = join12(dir, filename);
+  const targetPath = join13(dir, filename);
   copyFileSync4(localPath, targetPath);
   return {
     id: `local-${Date.now()}`,
@@ -76117,7 +76202,7 @@ function register2(server) {
       page.on("response", onResponse);
       page.on("requestfailed", onFailed);
       try {
-        await new Promise((resolve, reject) => {
+        await new Promise((resolve2, reject) => {
           const check = () => {
             const now = Date.now();
             if (now - t0 > timeout) {
@@ -76125,7 +76210,7 @@ function register2(server) {
               return;
             }
             if (pending === 0 && now - lastActivity >= idle_time) {
-              resolve();
+              resolve2();
               return;
             }
             setTimeout(check, 100);
@@ -76647,7 +76732,7 @@ function register3(server) {
       await new Promise((r) => setTimeout(r, wait_ms));
       const ss2 = await takeScreenshot(page, { maxWidth: 1280, compress: true, track: false });
       const { diffImages: diffImages2 } = await Promise.resolve().then(() => (init_gallery_diff(), exports_gallery_diff));
-      const diff = await diffImages2(ss1.path, ss2.path);
+      const diff = await diffImages2(ss1.path, ss2.path, threshold);
       logEvent(sid, "diff", { url1, url2, changed_percent: diff.changed_percent });
       return json({
         url1,
@@ -77623,13 +77708,14 @@ function registerIntegrationAndMeta(server) {
     try {
       const sid = resolveSessionId(session_id);
       const page = getSessionPage(sid);
-      const { getCredentials: getCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
-      const creds = await getCredentials2(service);
+      const { lookupCredentials: lookupCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
+      const { credential: creds, method } = await lookupCredentials2(service);
       if (!creds)
         return err(new Error(`No credentials found for '${service}'. Add them: secrets set ${service}_email yourlogin && secrets set ${service}_password yourpass`));
       const result = await loginWithCredentials2(page, creds, {
         loginUrl: login_url,
-        saveProfile: save_profile ? service : undefined
+        saveProfile: save_profile ? service : undefined,
+        method
       });
       return json(result);
     } catch (e) {
@@ -77994,6 +78080,7 @@ function register8(server) {
 // src/mcp/tui.ts
 init_tui();
 init_session();
+init_tui_recording();
 var DEFAULT_TOOL_TIMEOUT_MS2 = 15000;
 var RECONNECT_ON_STUCK = true;
 var KEY_MAP = {
@@ -78048,7 +78135,11 @@ function assertTuiSession(sessionId) {
   }
 }
 function getTuiSession(sessionId) {
-  return getSessionTuiSession(sessionId);
+  const session = getSessionTuiSession(sessionId);
+  if (!session) {
+    throw new Error(`TUI session handle missing for session ${sessionId}. Close and re-open with engine="tui".`);
+  }
+  return session;
 }
 function getTuiMeta(sessionId) {
   const session = getTuiSession(sessionId);
@@ -78095,19 +78186,19 @@ async function withTuiHealth(sessionId, operation, options = {}) {
   } else if (!health.healthy) {
     throw Object.assign(new Error(`TUI session is unhealthy: ${health.reason}. Close and reopen the session.`), { code: "TUI_UNHEALTHY" });
   }
-  let timedOut = false;
-  const timer = setTimeout(() => {
-    timedOut = true;
-  }, timeoutMs);
-  try {
-    return await operation(page, session);
-  } catch (error) {
-    if (timedOut) {
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => {
       const err2 = new Error(`${operationName} timed out after ${timeoutMs}ms \u2014 ttyd/playwright connection may be unhealthy. Status: ${health.healthy ? "was healthy before op" : "was already unhealthy"}. Try closing and re-opening the session.`);
       Object.assign(err2, { code: "TUI_TIMEOUT" });
-      throw err2;
-    }
-    throw error;
+      reject(err2);
+    }, timeoutMs);
+  });
+  try {
+    return await Promise.race([
+      operation(page, session),
+      timeout
+    ]);
   } finally {
     clearTimeout(timer);
   }
@@ -78406,6 +78497,7 @@ CONDITION SYNTAX:
         }, interval_ms)
       };
       activeRecordings2.set(sid, recording);
+      trackTuiRecording(sid, recording.intervalId);
       return json({
         recording: true,
         session_id: sid,
@@ -78425,6 +78517,7 @@ CONDITION SYNTAX:
       if (!recording)
         return err(new Error("No active recording for this session"));
       clearInterval(recording.intervalId);
+      stopTuiRecording(sid);
       activeRecordings2.delete(sid);
       const duration = (Date.now() - recording.startTime) / 1000;
       const header = {
@@ -78471,20 +78564,170 @@ CONDITION SYNTAX:
   });
 }
 
+// src/mcp/http.ts
+import { createServer } from "http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+var MCP_HTTP_SERVICE_NAME = "browser";
+var DEFAULT_MCP_HTTP_PORT = 8802;
+function isHttpMode(argv = process.argv, env = process.env) {
+  return argv.includes("--http") || env.MCP_HTTP === "1";
+}
+function resolveMcpHttpPort(argv = process.argv, env = process.env) {
+  const portIdx = argv.indexOf("--port");
+  if (portIdx !== -1 && argv[portIdx + 1]) {
+    return parsePort(argv[portIdx + 1], "--port");
+  }
+  if (env.MCP_HTTP_PORT) {
+    return parsePort(env.MCP_HTTP_PORT, "MCP_HTTP_PORT");
+  }
+  return DEFAULT_MCP_HTTP_PORT;
+}
+function parsePort(raw, source) {
+  const parsed = Number(raw);
+  if (!Number.isInteger(parsed) || parsed < 0 || parsed > 65535) {
+    throw new Error(`Invalid ${source} value "${raw}". Expected 0-65535.`);
+  }
+  return parsed;
+}
+async function readJsonBody(req) {
+  const chunks = [];
+  for await (const chunk of req) {
+    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+  }
+  const text = Buffer.concat(chunks).toString("utf8");
+  if (!text)
+    return;
+  return JSON.parse(text);
+}
+async function startMcpHttpServer(buildServer, options) {
+  const host = options?.host ?? "127.0.0.1";
+  const requestedPort = options?.port ?? resolveMcpHttpPort();
+  const serviceName = options?.serviceName ?? MCP_HTTP_SERVICE_NAME;
+  const httpServer = createServer(async (req, res) => {
+    try {
+      const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+      if (req.method === "GET" && url.pathname === "/health") {
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ status: "ok", name: serviceName }));
+        return;
+      }
+      if (url.pathname !== "/mcp") {
+        res.writeHead(404, { "Content-Type": "text/plain" });
+        res.end("Not Found");
+        return;
+      }
+      const server = buildServer();
+      const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: undefined
+      });
+      await server.connect(transport);
+      let parsedBody;
+      if (req.method === "POST") {
+        parsedBody = await readJsonBody(req);
+      }
+      await transport.handleRequest(req, res, parsedBody);
+      res.on("close", () => {
+        transport.close();
+        server.close();
+      });
+    } catch (error) {
+      console.error(`[${serviceName}-mcp] HTTP error:`, error);
+      if (!res.headersSent) {
+        res.writeHead(500, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({
+          jsonrpc: "2.0",
+          error: { code: -32603, message: "Internal server error" },
+          id: null
+        }));
+      }
+    }
+  });
+  await new Promise((resolve5, reject) => {
+    httpServer.once("error", reject);
+    httpServer.listen(requestedPort, host, () => resolve5());
+  });
+  const addr = httpServer.address();
+  const port = typeof addr === "object" && addr ? addr.port : requestedPort;
+  console.error(`[${serviceName}-mcp] Streamable HTTP listening on http://${host}:${port}/mcp`);
+  return {
+    port,
+    host,
+    close: () => new Promise((resolve5, reject) => {
+      httpServer.close((err2) => err2 ? reject(err2) : resolve5());
+    })
+  };
+}
+
 // src/mcp/index.ts
-var _pkg = JSON.parse(readFileSync11(join20(import.meta.dir, "../../package.json"), "utf8"));
-var server = new McpServer2({
-  name: "@hasna/browser",
-  version: _pkg.version
-});
-register(server);
-register2(server);
-register3(server);
-register4(server);
-register8(server);
-register9(server);
-registerCloudTools(server, "browser");
-var _startupToolCount = Object.keys(server._registeredTools ?? {}).length;
-console.error(`@hasna/browser v${_pkg.version} \u2014 ${_startupToolCount} tools | data: ${(await Promise.resolve().then(() => (init_schema(), exports_schema))).getDataDir()}`);
-var transport = new StdioServerTransport;
-await server.connect(transport);
+var _pkg = JSON.parse(readFileSync11(join21(import.meta.dir, "../../package.json"), "utf8"));
+function buildServer() {
+  const server = new McpServer2({
+    name: "@hasna/browser",
+    version: _pkg.version
+  });
+  register(server);
+  register2(server);
+  register3(server);
+  register4(server);
+  register8(server);
+  register9(server);
+  registerCloudTools(server, "browser");
+  return server;
+}
+function hasFlag(...flags) {
+  return process.argv.some((arg) => flags.includes(arg));
+}
+function printHelp() {
+  process.stdout.write(`Usage: browser-mcp [options]
+
+Browser MCP server (stdio transport by default)
+
+Options:
+  --http           Serve MCP over Streamable HTTP (127.0.0.1)
+  --port <number>  HTTP port (default: 8802, env: MCP_HTTP_PORT)
+  -h, --help       Show help
+  -V, --version    Show version
+`);
+}
+async function logStartup(server) {
+  const startupToolCount = Object.keys(server._registeredTools ?? {}).length;
+  const { getDataDir: getDataDir7 } = await Promise.resolve().then(() => (init_schema(), exports_schema));
+  console.error(`@hasna/browser v${_pkg.version} \u2014 ${startupToolCount} tools | data: ${getDataDir7()}`);
+}
+async function main() {
+  if (hasFlag("--help", "-h")) {
+    printHelp();
+    return;
+  }
+  if (hasFlag("--version", "-V")) {
+    process.stdout.write(`${_pkg.version}
+`);
+    return;
+  }
+  if (isHttpMode()) {
+    const handle = await startMcpHttpServer(buildServer, {
+      port: resolveMcpHttpPort()
+    });
+    await logStartup(buildServer());
+    process.on("SIGINT", () => {
+      handle.close().finally(() => process.exit(0));
+    });
+    process.on("SIGTERM", () => {
+      handle.close().finally(() => process.exit(0));
+    });
+    return;
+  }
+  const server = buildServer();
+  await logStartup(server);
+  const transport = new StdioServerTransport;
+  await server.connect(transport);
+}
+if (import.meta.main) {
+  main().catch((error) => {
+    console.error("MCP server error:", error);
+    process.exit(1);
+  });
+}
+export {
+  buildServer
+};