@hasna/browser 0.4.8 → 0.4.10

package/dist/cli/index.js

@@ -14383,7 +14383,7 @@ function buildRowRefs(rows, method, totalRows, rowCount) {
       row: index,
       text,
       visible: method === "dom" ? true : index >= firstVisibleRow,
-      selector: method === "dom" ? `#takumi-tui-dom-root [data-row="${index}"]` : undefined
+      selector: method === "dom" ? `#takumi-tui-dom-root .takumi-tui-dom-row[data-row="${index}"]` : undefined
     };
   });
   return refs;
@@ -14591,7 +14591,7 @@ async function readDomMirrorState(page) {
     const runtime = window.__takumiTuiDomRenderer;
     if (runtime?.sync)
       return runtime.sync();
-    const rowEls = Array.from(document.querySelectorAll("#takumi-tui-dom-root [data-row]"));
+    const rowEls = Array.from(document.querySelectorAll("#takumi-tui-dom-root .takumi-tui-dom-row"));
     const rows = rowEls.map((row) => row.getAttribute("aria-label") ?? row.textContent ?? "");
     const term = window.term ?? window.terminal;
     const active = term?.buffer?.active;
@@ -14614,17 +14614,14 @@ function isDomMethod(method) {
   return method === "dom";
 }
 async function withTimeout(label, operation, timeoutMs = DEFAULT_TOOL_TIMEOUT_MS) {
-  let timedOut = false;
-  const timer = setTimeout(() => {
-    timedOut = true;
-  }, timeoutMs);
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => {
+      reject(new BrowserError(`${label} timed out after ${timeoutMs}ms \u2014 ttyd/playwright connection may be unhealthy. Try closing and re-opening the session.`, "TUI_TIMEOUT"));
+    }, timeoutMs);
+  });
   try {
-    return await operation();
-  } catch (err) {
-    if (timedOut) {
-      throw new BrowserError(`${label} timed out after ${timeoutMs}ms \u2014 ttyd/playwright connection may be unhealthy. Try closing and re-opening the session.`, "TUI_TIMEOUT");
-    }
-    throw err;
+    return await Promise.race([operation(), timeout]);
   } finally {
     clearTimeout(timer);
   }
@@ -14894,7 +14891,7 @@ async function waitForTerminalText(page, text, timeoutMs = 30000, method = "buff
       return { found: true, elapsed_ms: Date.now() - start, stuck: false };
     await new Promise((r) => setTimeout(r, 250));
   }
-  return { found: false, elapsed_ms: timeoutMs, stuck: false };
+  return { found: false, elapsed_ms: Date.now() - start, stuck: false };
 }
 async function closeTui(session) {
   await destroyDomRenderer(session.page);
@@ -15007,6 +15004,23 @@ var init_selector = __esm(() => {
   };
 });
 
+// src/lib/tui-recording.ts
+function trackTuiRecording(sessionId, intervalId) {
+  stopTuiRecording(sessionId);
+  recordingIntervals.set(sessionId, intervalId);
+}
+function stopTuiRecording(sessionId) {
+  const intervalId = recordingIntervals.get(sessionId);
+  if (!intervalId)
+    return;
+  clearInterval(intervalId);
+  recordingIntervals.delete(sessionId);
+}
+var recordingIntervals;
+var init_tui_recording = __esm(() => {
+  recordingIntervals = new Map;
+});
+
 // src/db/network-log.ts
 import { randomUUID as randomUUID2 } from "crypto";
 function logRequest(data) {
@@ -15226,7 +15240,9 @@ async function applyStealthPatches(page) {
     "User-Agent": REALISTIC_USER_AGENT
   });
 }
-var REALISTIC_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36", STEALTH_SCRIPT = `
+var REALISTIC_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36", STEALTH_SCRIPT;
+var init_stealth = __esm(() => {
+  STEALTH_SCRIPT = `
 // \u2500\u2500 1. Remove navigator.webdriver flag \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 Object.defineProperty(navigator, 'webdriver', {
   get: () => false,
@@ -15274,8 +15290,14 @@ if (!window.chrome.runtime) {
     id: undefined,
   };
 }
+
+// \u2500\u2500 5. Override navigator.userAgent to match HTTP header \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+Object.defineProperty(navigator, 'userAgent', {
+  get: () => "${REALISTIC_USER_AGENT}",
+  configurable: true,
+});
 `;
-var init_stealth = () => {};
+});
 
 // src/lib/dialogs.ts
 var exports_dialogs = {};
@@ -16339,6 +16361,29 @@ __export(exports_session, {
 function createBunProxy(view) {
   return view;
 }
+function attachPlaywrightListeners(page, sessionId, cleanups, opts = {}) {
+  if (opts.captureNetwork !== false) {
+    try {
+      cleanups.push(enableNetworkLogging(page, sessionId));
+    } catch {}
+  }
+  if (opts.captureConsole !== false) {
+    try {
+      cleanups.push(enableConsoleCapture(page, sessionId));
+    } catch {}
+  }
+  try {
+    cleanups.push(setupDialogHandler(page, sessionId));
+  } catch {}
+}
+function detachPlaywrightListeners(cleanups) {
+  while (cleanups.length > 1) {
+    const cleanup = cleanups.pop();
+    try {
+      cleanup?.();
+    } catch {}
+  }
+}
 async function createSession2(opts = {}) {
   if (opts.cdpUrl) {
     const { connectToExistingBrowser: connectToExistingBrowser2 } = await Promise.resolve().then(() => (init_cdp(), exports_cdp));
@@ -16376,9 +16421,11 @@ async function createSession2(opts = {}) {
   let browser = null;
   let bunView = null;
   let page;
+  let actualEngine = resolvedEngine;
   if (resolvedEngine === "bun") {
     if (!isBunWebViewAvailable()) {
       console.warn("[browser] Bun.WebView requested but not available \u2014 falling back to playwright. Run: bun upgrade --canary");
+      actualEngine = "playwright";
       browser = await launchPlaywright({ headless: opts.headless ?? true, viewport: opts.viewport, userAgent: opts.userAgent });
       page = await getPage(browser, { viewport: opts.viewport, userAgent: opts.userAgent });
     } else {
@@ -16398,9 +16445,11 @@ async function createSession2(opts = {}) {
       }
       if (!bunWorks) {
         console.warn("[browser] Bun.WebView exists but Chrome not available \u2014 falling back to playwright");
+        actualEngine = "playwright";
         browser = await launchPlaywright({ headless: opts.headless ?? true, viewport: opts.viewport, userAgent: opts.userAgent });
         page = await getPage(browser, { viewport: opts.viewport, userAgent: opts.userAgent });
       } else {
+        actualEngine = "bun";
         bunView = testView;
         if (opts.stealth) {}
         page = createBunProxy(bunView);
@@ -16430,19 +16479,10 @@ async function createSession2(opts = {}) {
     });
     const cleanups2 = [];
     cleanups2.push(() => closeTui(tuiSess));
-    if (opts.captureNetwork !== false) {
-      try {
-        cleanups2.push(enableNetworkLogging(page, session2.id));
-      } catch {}
-    }
-    if (opts.captureConsole !== false) {
-      try {
-        cleanups2.push(enableConsoleCapture(page, session2.id));
-      } catch {}
-    }
-    try {
-      cleanups2.push(setupDialogHandler(page, session2.id));
-    } catch {}
+    attachPlaywrightListeners(page, session2.id, cleanups2, {
+      captureNetwork: opts.captureNetwork,
+      captureConsole: opts.captureConsole
+    });
     handles.set(session2.id, { browser, bunView: null, tuiSession: tuiSess, page, engine: "tui", cleanups: cleanups2, tokenBudget: { total: 0, used: 0 }, lastActivity: Date.now(), autoGallery: opts.autoGallery ?? false, startUrl: opts.startUrl ?? "bash" });
     return { session: session2, page };
   } else {
@@ -16472,7 +16512,7 @@ async function createSession2(opts = {}) {
     }
   })() : undefined);
   const session = createSession({
-    engine: bunView ? "bun" : browser ? resolvedEngine : resolvedEngine,
+    engine: actualEngine,
     projectId: opts.projectId,
     agentId: opts.agentId,
     startUrl: opts.startUrl,
@@ -16485,37 +16525,12 @@ async function createSession2(opts = {}) {
   }
   const cleanups = [];
   if (!bunView) {
-    if (opts.captureNetwork !== false) {
-      try {
-        cleanups.push(enableNetworkLogging(page, session.id));
-      } catch {}
-    }
-    if (opts.captureConsole !== false) {
-      try {
-        cleanups.push(enableConsoleCapture(page, session.id));
-      } catch {}
-    }
-    try {
-      cleanups.push(setupDialogHandler(page, session.id));
-    } catch {}
-  } else {
-    if (opts.captureConsole !== false) {
-      try {
-        const { logConsoleMessage: logConsoleMessage2 } = await Promise.resolve().then(() => (init_console_log(), exports_console_log));
-        await bunView.addInitScript(`
-          (() => {
-            const orig = { log: console.log, warn: console.warn, error: console.error, debug: console.debug, info: console.info };
-            ['log','warn','error','debug','info'].forEach(level => {
-              console[level] = (...args) => {
-                orig[level](...args);
-              };
-            });
-          })()
-        `);
-      } catch {}
-    }
+    attachPlaywrightListeners(page, session.id, cleanups, {
+      captureNetwork: opts.captureNetwork,
+      captureConsole: opts.captureConsole
+    });
   }
-  handles.set(session.id, { browser, bunView, tuiSession: null, page, engine: bunView ? "bun" : resolvedEngine, cleanups, tokenBudget: { total: 0, used: 0 }, lastActivity: Date.now(), autoGallery: opts.autoGallery ?? false, startUrl: opts.startUrl ?? "" });
+  handles.set(session.id, { browser, bunView, tuiSession: null, page, engine: actualEngine, cleanups, tokenBudget: { total: 0, used: 0 }, lastActivity: Date.now(), autoGallery: opts.autoGallery ?? false, startUrl: opts.startUrl ?? "" });
   if (opts.startUrl) {
     try {
       if (bunView) {
@@ -16548,7 +16563,8 @@ function getSessionBunView(sessionId) {
   return handles.get(sessionId)?.bunView ?? null;
 }
 function isBunSession(sessionId) {
-  return handles.get(sessionId)?.engine === "bun";
+  const handle = handles.get(sessionId);
+  return handle?.engine === "bun" && handle.bunView !== null;
 }
 function getSessionBrowser(sessionId) {
   const handle = handles.get(sessionId);
@@ -16574,11 +16590,16 @@ function setSessionTui(sessionId, tuiSess) {
   const handle = handles.get(sessionId);
   if (!handle)
     throw new SessionNotFoundError(sessionId);
+  detachPlaywrightListeners(handle.cleanups);
   handle.tuiSession = tuiSess;
   handle.page = tuiSess.page;
   if (tuiSess.browser !== handle.browser) {
     handle.browser = tuiSess.browser;
   }
+  attachPlaywrightListeners(tuiSess.page, sessionId, handle.cleanups, {
+    captureNetwork: true,
+    captureConsole: true
+  });
   handle.lastActivity = Date.now();
 }
 function getSessionCommand(sessionId) {
@@ -16594,9 +16615,12 @@ async function closeSession2(sessionId) {
   const handle = handles.get(sessionId);
   try {
     if (handle) {
+      if (handle.engine === "tui") {
+        stopTuiRecording(sessionId);
+      }
       for (const cleanup of handle.cleanups) {
         try {
-          cleanup();
+          await cleanup();
         } catch {}
       }
       if (handle.bunView) {
@@ -16708,6 +16732,7 @@ var init_session = __esm(() => {
   init_bun_webview();
   init_selector();
   init_tui();
+  init_tui_recording();
   init_network();
   init_console();
   init_stealth();
@@ -23335,10 +23360,17 @@ __export(exports_gallery, {
   createEntry: () => createEntry
 });
 import { randomUUID as randomUUID4 } from "crypto";
+import { join as join11, resolve, relative as relative2, isAbsolute } from "path";
 function validateDataPath(filePath) {
   if (filePath.includes("..")) {
     throw new Error(`File path must not contain '..': ${filePath}`);
   }
+  const dataDir = resolve(getDataDir2());
+  const resolved = resolve(isAbsolute(filePath) ? filePath : join11(dataDir, filePath));
+  const rel = relative2(dataDir, resolved);
+  if (rel.startsWith("..") || isAbsolute(rel)) {
+    throw new Error(`File path must be within data directory: ${filePath}`);
+  }
   return filePath;
 }
 function deserialize(row) {
@@ -23356,7 +23388,13 @@ function deserialize(row) {
     original_size_bytes: row.original_size_bytes ?? undefined,
     compressed_size_bytes: row.compressed_size_bytes ?? undefined,
     compression_ratio: row.compression_ratio ?? undefined,
-    tags: JSON.parse(row.tags),
+    tags: (() => {
+      try {
+        return JSON.parse(row.tags);
+      } catch {
+        return [];
+      }
+    })(),
     notes: row.notes ?? undefined,
     is_favorite: row.is_favorite === 1,
     created_at: row.created_at
@@ -23487,12 +23525,12 @@ var init_gallery = __esm(() => {
 });
 
 // src/lib/screenshot.ts
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { mkdirSync as mkdirSync8 } from "fs";
 function getScreenshotDir(projectId) {
-  const base = join11(getDataDir2(), "screenshots");
+  const base = join12(getDataDir2(), "screenshots");
   const date = new Date().toISOString().split("T")[0];
-  const dir = projectId ? join11(base, projectId, date) : join11(base, date);
+  const dir = projectId ? join12(base, projectId, date) : join12(base, date);
   mkdirSync8(dir, { recursive: true });
   return dir;
 }
@@ -23508,7 +23546,7 @@ async function compressBuffer(raw, format, quality, maxWidth) {
   }
 }
 async function generateThumbnail(raw, dir, stem) {
-  const thumbPath = join11(dir, `${stem}.thumb.webp`);
+  const thumbPath = join12(dir, `${stem}.thumb.webp`);
   const thumbBuffer = await import_sharp.default(raw).resize({ width: 200, withoutEnlargement: true }).webp({ quality: 70, effort: 3 }).toBuffer();
   await Bun.write(thumbPath, thumbBuffer);
   return { path: thumbPath, base64: thumbBuffer.toString("base64") };
@@ -23576,7 +23614,7 @@ async function takeScreenshot(page, opts) {
     const compressedSizeBytes = finalBuffer.length;
     const compressionRatio = originalSizeBytes > 0 ? compressedSizeBytes / originalSizeBytes : 1;
     const ext = format;
-    const screenshotPath = opts?.path ?? join11(dir, `${stem}.${ext}`);
+    const screenshotPath = opts?.path ?? join12(dir, `${stem}.${ext}`);
     await Bun.write(screenshotPath, finalBuffer);
     let thumbnailPath;
     let thumbnailBase64;
@@ -23636,12 +23674,12 @@ async function takeScreenshot(page, opts) {
 }
 async function generatePDF(page, opts) {
   try {
-    const base = join11(getDataDir2(), "pdfs");
+    const base = join12(getDataDir2(), "pdfs");
     const date = new Date().toISOString().split("T")[0];
-    const dir = opts?.projectId ? join11(base, opts.projectId, date) : join11(base, date);
+    const dir = opts?.projectId ? join12(base, opts.projectId, date) : join12(base, date);
     mkdirSync8(dir, { recursive: true });
     const timestamp = Date.now();
-    const pdfPath = opts?.path ?? join11(dir, `${timestamp}.pdf`);
+    const pdfPath = opts?.path ?? join12(dir, `${timestamp}.pdf`);
     const buffer = await page.pdf({
       path: pdfPath,
       format: opts?.format ?? "A4",
@@ -24159,9 +24197,9 @@ var exports_gallery_diff = {};
 __export(exports_gallery_diff, {
   diffImages: () => diffImages
 });
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { mkdirSync as mkdirSync9 } from "fs";
-async function diffImages(path1, path2) {
+async function diffImages(path1, path2, threshold = 10) {
   const img1 = import_sharp2.default(path1);
   const img2 = import_sharp2.default(path2);
   const [meta1, meta2] = await Promise.all([img1.metadata(), img2.metadata()]);
@@ -24180,7 +24218,7 @@ async function diffImages(path1, path2) {
     const dg = Math.abs(raw1[i + 1] - raw2[i + 1]);
     const db = Math.abs(raw1[i + 2] - raw2[i + 2]);
     const diff = (dr + dg + db) / 3;
-    if (diff > 10) {
+    if (diff > threshold) {
       changedPixels++;
       diffBuffer[i] = 255;
       diffBuffer[i + 1] = 0;
@@ -24192,9 +24230,9 @@ async function diffImages(path1, path2) {
     }
   }
   const dataDir = getDataDir2();
-  const diffDir = join12(dataDir, "diffs");
+  const diffDir = join13(dataDir, "diffs");
   mkdirSync9(diffDir, { recursive: true });
-  const diffPath = join12(diffDir, `diff-${Date.now()}.webp`);
+  const diffPath = join13(diffDir, `diff-${Date.now()}.webp`);
   const diffImageBuffer = await import_sharp2.default(diffBuffer, { raw: { width: w, height: h, channels } }).webp({ quality: 85 }).toBuffer();
   await Bun.write(diffPath, diffImageBuffer);
   return {
@@ -24386,7 +24424,7 @@ var init_scripts = __esm(() => {
 });
 
 // src/lib/ai-inference.ts
-function resolve(opts) {
+function resolve2(opts) {
   if (opts?.model && ALIASES[opts.model])
     return ALIASES[opts.model];
   if (opts?.provider && opts?.model)
@@ -24396,7 +24434,7 @@ function resolve(opts) {
   return ALIASES.fast;
 }
 async function infer(prompt, opts) {
-  const { provider, model } = resolve(opts);
+  const { provider, model } = resolve2(opts);
   const maxTokens = opts?.maxTokens ?? 1024;
   if (provider === "anthropic") {
     const apiKey2 = process.env["ANTHROPIC_API_KEY"];
@@ -25022,6 +25060,7 @@ var exports_recorder = {};
 __export(exports_recorder, {
   stopRecording: () => stopRecording,
   startRecording: () => startRecording,
+  resetRecorderState: () => resetRecorderState,
   replayRecording: () => replayRecording,
   recordStep: () => recordStep,
   listRecordings: () => listRecordings,
@@ -25029,6 +25068,14 @@ __export(exports_recorder, {
   exportRecording: () => exportRecording,
   attachPageListeners: () => attachPageListeners
 });
+function resetRecorderState() {
+  for (const active of activeRecordings.values()) {
+    try {
+      active.cleanup();
+    } catch {}
+  }
+  activeRecordings.clear();
+}
 function startRecording(sessionId, name, startUrl) {
   const steps = [];
   const recording = createRecording({ name, start_url: startUrl, steps });
@@ -25203,21 +25250,21 @@ __export(exports_profiles, {
   applyProfile: () => applyProfile
 });
 import { mkdirSync as mkdirSync10, existsSync as existsSync11, readdirSync as readdirSync7, rmSync, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 function getProfilesDir() {
   const dataDir = getDataDir2();
-  const dir = join13(dataDir, "profiles");
+  const dir = join14(dataDir, "profiles");
   mkdirSync10(dir, { recursive: true });
   return dir;
 }
 function getProfileDir2(name) {
-  return join13(getProfilesDir(), name);
+  return join14(getProfilesDir(), name);
 }
 async function saveProfile(page, name) {
   const dir = getProfileDir2(name);
   mkdirSync10(dir, { recursive: true });
   const cookies = await page.context().cookies();
-  writeFileSync3(join13(dir, "cookies.json"), JSON.stringify(cookies, null, 2));
+  writeFileSync3(join14(dir, "cookies.json"), JSON.stringify(cookies, null, 2));
   let localStorage2 = {};
   try {
     localStorage2 = await page.evaluate(() => {
@@ -25229,11 +25276,11 @@ async function saveProfile(page, name) {
       return result;
     });
   } catch {}
-  writeFileSync3(join13(dir, "storage.json"), JSON.stringify(localStorage2, null, 2));
+  writeFileSync3(join14(dir, "storage.json"), JSON.stringify(localStorage2, null, 2));
   const savedAt = new Date().toISOString();
   const url = page.url();
   const meta = { saved_at: savedAt, url };
-  writeFileSync3(join13(dir, "meta.json"), JSON.stringify(meta, null, 2));
+  writeFileSync3(join14(dir, "meta.json"), JSON.stringify(meta, null, 2));
   return {
     name,
     saved_at: savedAt,
@@ -25247,9 +25294,9 @@ function loadProfile(name) {
   if (!existsSync11(dir)) {
     throw new Error(`Profile not found: ${name}`);
   }
-  const cookiesPath = join13(dir, "cookies.json");
-  const storagePath = join13(dir, "storage.json");
-  const metaPath = join13(dir, "meta.json");
+  const cookiesPath = join14(dir, "cookies.json");
+  const storagePath = join14(dir, "storage.json");
+  const metaPath = join14(dir, "meta.json");
   const cookies = existsSync11(cookiesPath) ? JSON.parse(readFileSync3(cookiesPath, "utf8")) : [];
   const localStorage2 = existsSync11(storagePath) ? JSON.parse(readFileSync3(storagePath, "utf8")) : {};
   let savedAt = new Date().toISOString();
@@ -25290,24 +25337,24 @@ function listProfiles() {
     if (!entry.isDirectory())
       continue;
     const name = entry.name;
-    const profileDir = join13(dir, name);
+    const profileDir = join14(dir, name);
     let savedAt = "";
     let url;
     let cookieCount = 0;
     let storageKeyCount = 0;
     try {
-      const metaPath = join13(profileDir, "meta.json");
+      const metaPath = join14(profileDir, "meta.json");
       if (existsSync11(metaPath)) {
         const meta = JSON.parse(readFileSync3(metaPath, "utf8"));
         savedAt = meta.saved_at ?? "";
         url = meta.url;
       }
-      const cookiesPath = join13(profileDir, "cookies.json");
+      const cookiesPath = join14(profileDir, "cookies.json");
       if (existsSync11(cookiesPath)) {
         const cookies = JSON.parse(readFileSync3(cookiesPath, "utf8"));
         cookieCount = Array.isArray(cookies) ? cookies.length : 0;
       }
-      const storagePath = join13(profileDir, "storage.json");
+      const storagePath = join14(profileDir, "storage.json");
       if (existsSync11(storagePath)) {
         const storage = JSON.parse(readFileSync3(storagePath, "utf8"));
         storageKeyCount = Object.keys(storage).length;
@@ -25341,13 +25388,14 @@ var init_profiles = __esm(() => {
 // src/lib/auth.ts
 var exports_auth = {};
 __export(exports_auth, {
+  lookupCredentials: () => lookupCredentials,
   loginWithCredentials: () => loginWithCredentials,
   getCredentials: () => getCredentials
 });
 import { existsSync as existsSync12, readFileSync as readFileSync5 } from "fs";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 import { homedir as homedir8 } from "os";
-async function getCredentials(service) {
+async function lookupCredentials(service) {
   try {
     const secretsVaultPath = process.env["BROWSER_SECRETS_VAULT_PATH"];
     if (secretsVaultPath) {
@@ -25355,11 +25403,14 @@ async function getCredentials(service) {
       const email = getSecret(`${service}_email`) ?? getSecret(`${service}_username`) ?? getSecret(`${service}_login`);
       const password = getSecret(`${service}_password`) ?? getSecret(`${service}_pass`);
       if (email?.value && password?.value) {
-        return { email: email.value, password: password.value };
+        return {
+          credential: { email: email.value, password: password.value },
+          method: "secrets_vault"
+        };
       }
     }
   } catch {}
-  const secretsPath = join14(homedir8(), ".secrets");
+  const secretsPath = join15(homedir8(), ".secrets");
   if (existsSync12(secretsPath)) {
     let content;
     try {
@@ -25378,27 +25429,33 @@ async function getCredentials(service) {
     }
     const email = vars[`${prefix}_EMAIL`] ?? vars[`${prefix}_USERNAME`];
     const password = vars[`${prefix}_PASSWORD`];
-    if (email && password)
-      return { email, password };
+    if (email && password) {
+      return { credential: { email, password }, method: "env_file" };
+    }
   }
   const envPrefix = service.toUpperCase().replace(/[^A-Z0-9]/g, "_");
   const envEmail = process.env[`${envPrefix}_EMAIL`] ?? process.env[`${envPrefix}_USERNAME`];
   const envPass = process.env[`${envPrefix}_PASSWORD`];
-  if (envEmail && envPass)
-    return { email: envEmail, password: envPass };
-  return null;
+  if (envEmail && envPass) {
+    return { credential: { email: envEmail, password: envPass }, method: "process_env" };
+  }
+  return { credential: null, method: "not_found" };
+}
+async function getCredentials(service) {
+  return (await lookupCredentials(service)).credential;
 }
 async function loginWithCredentials(page, credentials, opts) {
-  const { fillForm: fillForm2 } = await Promise.resolve().then(() => (init_actions(), exports_actions));
+  const { fillForm: fillForm2, waitForText: waitForText2 } = await Promise.resolve().then(() => (init_actions(), exports_actions));
   const { saveProfile: saveProfile2 } = await Promise.resolve().then(() => (init_profiles(), exports_profiles));
   try {
     if (opts?.loginUrl) {
       await page.goto(opts.loginUrl, { waitUntil: "domcontentloaded" });
       await new Promise((r) => setTimeout(r, 500));
     }
+    const urlBefore = page.url();
     const emailSel = opts?.emailSelector ?? 'input[type="email"], input[name="email"], input[id*="email"], input[placeholder*="email" i]';
     const passSel = opts?.passwordSelector ?? 'input[type="password"]';
-    const submitSel = opts?.submitSelector ?? 'button[type="submit"], input[type="submit"], button:contains("Sign in"), button:contains("Log in"), button:contains("Login")';
+    const submitSel = opts?.submitSelector ?? 'button[type="submit"], input[type="submit"]';
     const fields = {};
     if (credentials.email)
       fields[emailSel] = credentials.email;
@@ -25407,10 +25464,38 @@ async function loginWithCredentials(page, credentials, opts) {
     if (credentials.password)
       fields[passSel] = credentials.password;
     const fillResult = await fillForm2(page, fields, submitSel);
-    const successText = opts?.waitForText ?? "dashboard|profile|account|welcome|signed in|logout";
-    await new Promise((r) => setTimeout(r, 1500));
-    const currentUrl = page.url?.() ?? "";
-    const logged_in = fillResult.errors.length === 0;
+    if (fillResult.errors.some((e) => e.startsWith("submit("))) {
+      try {
+        await page.getByRole("button", { name: /sign in|log in|login|submit/i }).first().click({ timeout: 5000 });
+      } catch {
+        try {
+          await page.locator('input[type="submit"]').first().click({ timeout: 3000 });
+        } catch {}
+      }
+    }
+    const successPattern = opts?.waitForText ?? "dashboard|profile|account|welcome|signed in|logout";
+    const patterns = successPattern.split("|").map((p) => p.trim()).filter(Boolean);
+    let logged_in = false;
+    for (const pattern of patterns) {
+      try {
+        await waitForText2(page, pattern, { timeout: 5000 });
+        logged_in = fillResult.errors.length === 0;
+        break;
+      } catch {}
+    }
+    if (!logged_in) {
+      await page.waitForLoadState("domcontentloaded").catch(() => {});
+      await new Promise((r) => setTimeout(r, 1000));
+      const currentUrl2 = page.url();
+      const bodyText = await page.evaluate(() => document.body?.innerText?.toLowerCase() ?? "").catch(() => "");
+      const urlChanged = currentUrl2 !== urlBefore;
+      const textMatch = patterns.some((p) => {
+        const needle = p.toLowerCase();
+        return bodyText.includes(needle) || currentUrl2.toLowerCase().includes(needle);
+      });
+      logged_in = fillResult.errors.length === 0 && (urlChanged || textMatch);
+    }
+    const currentUrl = page.url();
     let profile_saved = false;
     if (opts?.saveProfile && logged_in) {
       try {
@@ -25422,14 +25507,14 @@ async function loginWithCredentials(page, credentials, opts) {
       logged_in,
       redirect_url: currentUrl,
       profile_saved,
-      method: "secrets_vault"
+      method: opts?.method ?? "secrets_vault"
     };
   } catch (err) {
     return {
       logged_in: false,
       redirect_url: "",
       profile_saved: false,
-      method: "not_found",
+      method: opts?.method ?? "not_found",
       error: err instanceof Error ? err.message : String(err)
     };
   }
@@ -25449,11 +25534,11 @@ __export(exports_downloads, {
   cleanStaleDownloads: () => cleanStaleDownloads
 });
 import { randomUUID as randomUUID11 } from "crypto";
-import { join as join15, basename, extname } from "path";
+import { join as join16, basename, extname } from "path";
 import { mkdirSync as mkdirSync11, existsSync as existsSync13, readdirSync as readdirSync8, statSync as statSync2, unlinkSync as unlinkSync3, copyFileSync as copyFileSync3, writeFileSync as writeFileSync5, readFileSync as readFileSync6 } from "fs";
 function getDownloadsDir(sessionId) {
-  const base = join15(getDataDir2(), "downloads");
-  const dir = sessionId ? join15(base, sessionId) : base;
+  const base = join16(getDataDir2(), "downloads");
+  const dir = sessionId ? join16(base, sessionId) : base;
   mkdirSync11(dir, { recursive: true });
   return dir;
 }
@@ -25469,7 +25554,7 @@ function saveToDownloads(buffer, filename, opts) {
   const ext = extname(filename) || "";
   const stem = basename(filename, ext);
   const uniqueName = `${stem}-${id.slice(0, 8)}${ext}`;
-  const filePath = join15(dir, uniqueName);
+  const filePath = join16(dir, uniqueName);
   writeFileSync5(filePath, buffer);
   const meta = {
     id,
@@ -25504,7 +25589,7 @@ function listDownloads(sessionId) {
     for (const entry of entries) {
       if (entry.endsWith(".meta.json"))
         continue;
-      const full = join15(d, entry);
+      const full = join16(d, entry);
       const stat = statSync2(full);
       if (stat.isDirectory()) {
         scanDir(full);
@@ -25600,7 +25685,7 @@ __export(exports_daemon_client, {
   getDaemonPid: () => getDaemonPid
 });
 import { existsSync as existsSync14, readFileSync as readFileSync7 } from "fs";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 function getDaemonPidFile() {
   return PID_FILE;
 }
@@ -25643,7 +25728,7 @@ async function getDaemonStatus() {
 var PID_FILE, DEFAULT_PORT = 7030;
 var init_daemon_client = __esm(() => {
   init_schema();
-  PID_FILE = join16(getDataDir2(), "daemon.pid");
+  PID_FILE = join17(getDataDir2(), "daemon.pid");
 });
 
 // node_modules/zod/v3/helpers/util.js
@@ -29705,7 +29790,7 @@ async function setSessionStorage(page, key, value) {
 }
 
 // src/lib/files-integration.ts
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 import { mkdirSync as mkdirSync12, copyFileSync as copyFileSync4 } from "fs";
 async function persistFile(localPath, opts) {
   try {
@@ -29717,10 +29802,10 @@ async function persistFile(localPath, opts) {
   } catch {}
   const dataDir = getDataDir2();
   const date = new Date().toISOString().split("T")[0];
-  const dir = join17(dataDir, "persistent", date);
+  const dir = join18(dataDir, "persistent", date);
   mkdirSync12(dir, { recursive: true });
   const filename = localPath.split("/").pop() ?? "file";
-  const targetPath = join17(dir, filename);
+  const targetPath = join18(dir, filename);
   copyFileSync4(localPath, targetPath);
   return {
     id: `local-${Date.now()}`,
@@ -30494,7 +30579,7 @@ function register5(server) {
       page.on("response", onResponse);
       page.on("requestfailed", onFailed);
       try {
-        await new Promise((resolve2, reject) => {
+        await new Promise((resolve3, reject) => {
           const check = () => {
             const now = Date.now();
             if (now - t0 > timeout) {
@@ -30502,7 +30587,7 @@ function register5(server) {
               return;
             }
             if (pending === 0 && now - lastActivity >= idle_time) {
-              resolve2();
+              resolve3();
               return;
             }
             setTimeout(check, 100);
@@ -31178,7 +31263,7 @@ function register6(server) {
       await new Promise((r) => setTimeout(r, wait_ms));
       const ss2 = await takeScreenshot(page, { maxWidth: 1280, compress: true, track: false });
       const { diffImages: diffImages2 } = await Promise.resolve().then(() => (init_gallery_diff(), exports_gallery_diff));
-      const diff = await diffImages2(ss1.path, ss2.path);
+      const diff = await diffImages2(ss1.path, ss2.path, threshold);
       logEvent(sid, "diff", { url1, url2, changed_percent: diff.changed_percent });
       return json({
         url1,
@@ -31247,7 +31332,7 @@ __export(exports_dist2, {
   AGENT_TARGETS: () => AGENT_TARGETS
 });
 import { existsSync as existsSync15, readFileSync as readFileSync8, readdirSync as readdirSync9 } from "fs";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 import { homedir as homedir9 } from "os";
 import { existsSync as existsSync22, cpSync, mkdirSync as mkdirSync13, writeFileSync as writeFileSync6, rmSync as rmSync2, readdirSync as readdirSync22, statSync as statSync3, readFileSync as readFileSync22, accessSync, constants } from "fs";
 import { join as join22, dirname as dirname2 } from "path";
@@ -31297,7 +31382,7 @@ function discoverSkillsInDir(dir) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join18(dir, entry.name, "SKILL.md");
+      const skillMdPath = join19(dir, entry.name, "SKILL.md");
       if (!existsSync15(skillMdPath))
         continue;
       let content;
@@ -31328,11 +31413,11 @@ function loadRegistry(cwd) {
     return _registryCache;
   }
   const official = SKILLS.map((s) => ({ ...s, source: "official" }));
-  const globalCustomNew = discoverSkillsInDir(join18(homedir9(), ".hasna", "skills", "custom"));
-  const globalCustomOld = discoverSkillsInDir(join18(homedir9(), ".skills"));
+  const globalCustomNew = discoverSkillsInDir(join19(homedir9(), ".hasna", "skills", "custom"));
+  const globalCustomOld = discoverSkillsInDir(join19(homedir9(), ".skills"));
   const oldNames = new Set(globalCustomNew.map((s) => s.name));
   const globalCustom = [...globalCustomNew, ...globalCustomOld.filter((s) => !oldNames.has(s.name))];
-  const projectCustom = discoverSkillsInDir(join18(cwd || process.cwd(), ".skills", "custom-skills"));
+  const projectCustom = discoverSkillsInDir(join19(cwd || process.cwd(), ".skills", "custom-skills"));
   const customNames = new Set([...globalCustom, ...projectCustom].map((s) => s.name));
   const filtered = official.filter((s) => !customNames.has(s.name));
   _registryCache = [...filtered, ...globalCustom, ...projectCustom];
@@ -33793,11 +33878,11 @@ var init_skills_runner = __esm(() => {
     },
     login: async (page, params) => {
       const { service, login_url } = params;
-      const { getCredentials: getCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
-      const creds = await getCredentials2(service);
+      const { lookupCredentials: lookupCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
+      const { credential: creds, method } = await lookupCredentials2(service);
       if (!creds)
         return { logged_in: false, error: `No credentials found for ${service}` };
-      const result = await loginWithCredentials2(page, creds, { loginUrl: login_url, saveProfile: service });
+      const result = await loginWithCredentials2(page, creds, { loginUrl: login_url, saveProfile: service, method });
       return result;
     },
     "extract-text": async (page, params) => {
@@ -34871,7 +34956,7 @@ __export(exports_datasets, {
 });
 import { randomUUID as randomUUID15 } from "crypto";
 import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync14 } from "fs";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 function saveDataset(data) {
   const db = getDatabase();
   const id = randomUUID15();
@@ -34909,10 +34994,10 @@ function exportDataset(name, format) {
   const dataset = getDatasetByName(name);
   if (!dataset)
     throw new Error(`Dataset '${name}' not found`);
-  const dir = join19(getDataDir2(), "exports");
+  const dir = join20(getDataDir2(), "exports");
   mkdirSync14(dir, { recursive: true });
   const filename = `${name}.${format}`;
-  const path = join19(dir, filename);
+  const path = join20(dir, filename);
   if (format === "csv") {
     const rows = dataset.data;
     if (rows.length === 0) {
@@ -35413,7 +35498,7 @@ import {
   copyFileSync as copyFileSync6
 } from "fs";
 import { homedir as homedir10 } from "os";
-import { join as join20, relative as relative2 } from "path";
+import { join as join21, relative as relative3 } from "path";
 import { existsSync as existsSync23, mkdirSync as mkdirSync23, readFileSync as readFileSync9, writeFileSync as writeFileSync8 } from "fs";
 import { homedir as homedir23 } from "os";
 import { join as join23 } from "path";
@@ -35425,7 +35510,7 @@ import { join as join43 } from "path";
 import { join as join62, dirname as dirname3 } from "path";
 import { homedir as homedir52, platform as platform2 } from "os";
 import { existsSync as existsSync43, mkdirSync as mkdirSync33, cpSync as cpSync2 } from "fs";
-import { dirname as dirname23, join as join53, resolve as resolve2 } from "path";
+import { dirname as dirname23, join as join53, resolve as resolve3 } from "path";
 import { existsSync as existsSync62, mkdirSync as mkdirSync5, readFileSync as readFileSync23, readdirSync as readdirSync33, writeFileSync as writeFileSync23, unlinkSync as unlinkSync4, cpSync as cpSync22 } from "fs";
 import { homedir as homedir62 } from "os";
 import { basename as basename2, dirname as dirname32, join as join72, resolve as resolve22 } from "path";
@@ -36251,13 +36336,13 @@ function custom3(check, _params = {}, fatal) {
   return ZodAny3.create();
 }
 function getDataDir4(serviceName) {
-  const dir = join20(HASNA_DIR2, serviceName);
+  const dir = join21(HASNA_DIR2, serviceName);
   mkdirSync15(dir, { recursive: true });
   return dir;
 }
 function getDbPath2(serviceName) {
   const dir = getDataDir4(serviceName);
-  return join20(dir, `${serviceName}.db`);
+  return join21(dir, `${serviceName}.db`);
 }
 function getConfigDir2() {
   return CONFIG_DIR3;
@@ -36476,7 +36561,7 @@ function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestMementosDb(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
     const candidate = join53(dir, ".mementos", "mementos.db");
     if (existsSync43(candidate))
@@ -36489,7 +36574,7 @@ function findNearestMementosDb(startDir) {
   return null;
 }
 function findGitRoot(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
     if (existsSync43(join53(dir, ".git")))
       return dir;
@@ -36531,7 +36616,7 @@ function getDbPath22() {
 function ensureDir2(filePath) {
   if (isInMemoryDb(filePath))
     return;
-  const dir = dirname23(resolve2(filePath));
+  const dir = dirname23(resolve3(filePath));
   if (!existsSync43(dir)) {
     mkdirSync33(dir, { recursive: true });
   }
@@ -42769,7 +42854,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       function parse(stream, callback) {
         const parser = new parser_1.Parser;
         stream.on("data", (buffer) => parser.parse(buffer, callback));
-        return new Promise((resolve3) => stream.on("end", () => resolve3()));
+        return new Promise((resolve4) => stream.on("end", () => resolve4()));
       }
       exports.parse = parse;
     });
@@ -43434,12 +43519,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             this._connect(callback);
             return;
           }
-          return new this._Promise((resolve3, reject) => {
+          return new this._Promise((resolve4, reject) => {
             this._connect((error) => {
               if (error) {
                 reject(error);
               } else {
-                resolve3(this);
+                resolve4(this);
               }
             });
           });
@@ -43771,8 +43856,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
             query = new Query3(config, values, callback);
             if (!query.callback) {
-              result = new this._Promise((resolve3, reject) => {
-                query.callback = (err2, res) => err2 ? reject(err2) : resolve3(res);
+              result = new this._Promise((resolve4, reject) => {
+                query.callback = (err2, res) => err2 ? reject(err2) : resolve4(res);
               }).catch((err2) => {
                 Error.captureStackTrace(err2);
                 throw err2;
@@ -43847,8 +43932,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (cb) {
             this.connection.once("end", cb);
           } else {
-            return new this._Promise((resolve3) => {
-              this.connection.once("end", resolve3);
+            return new this._Promise((resolve4) => {
+              this.connection.once("end", resolve4);
             });
           }
         }
@@ -43893,8 +43978,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         const cb = function(err2, client) {
           err2 ? rej(err2) : res(client);
         };
-        const result = new Promise2(function(resolve3, reject) {
-          res = resolve3;
+        const result = new Promise2(function(resolve4, reject) {
+          res = resolve4;
           rej = reject;
         }).catch((err2) => {
           Error.captureStackTrace(err2);
@@ -43955,7 +44040,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (typeof Promise2.try === "function") {
             return Promise2.try(f);
           }
-          return new Promise2((resolve3) => resolve3(f()));
+          return new Promise2((resolve4) => resolve4(f()));
         }
         _isFull() {
           return this._clients.length >= this.options.max;
@@ -44329,8 +44414,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       NativeQuery.prototype._getPromise = function() {
         if (this._promise)
           return this._promise;
-        this._promise = new Promise(function(resolve3, reject) {
-          this._once("end", resolve3);
+        this._promise = new Promise(function(resolve4, reject) {
+          this._once("end", resolve4);
           this._once("error", reject);
         }.bind(this));
         return this._promise;
@@ -44504,12 +44589,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           this._connect(callback);
           return;
         }
-        return new this._Promise((resolve3, reject) => {
+        return new this._Promise((resolve4, reject) => {
           this._connect((error) => {
             if (error) {
               reject(error);
             } else {
-              resolve3(this);
+              resolve4(this);
             }
           });
         });
@@ -44533,8 +44618,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           query = new NativeQuery(config, values, callback);
           if (!query.callback) {
             let resolveOut, rejectOut;
-            result = new this._Promise((resolve3, reject) => {
-              resolveOut = resolve3;
+            result = new this._Promise((resolve4, reject) => {
+              resolveOut = resolve4;
               rejectOut = reject;
             }).catch((err2) => {
               Error.captureStackTrace(err2);
@@ -44592,8 +44677,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         }
         let result;
         if (!cb) {
-          result = new this._Promise(function(resolve3, reject) {
-            cb = (err2) => err2 ? reject(err2) : resolve3();
+          result = new this._Promise(function(resolve4, reject) {
+            cb = (err2) => err2 ? reject(err2) : resolve4();
           });
         }
         this.native.end(function() {
@@ -47881,7 +47966,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       init_external3();
     });
     init_dotfile2 = __esm22(() => {
-      HASNA_DIR2 = join20(homedir10(), ".hasna");
+      HASNA_DIR2 = join21(homedir10(), ".hasna");
     });
     exports_config2 = {};
     __export22(exports_config2, {
@@ -49457,10 +49542,10 @@ import {
   copyFileSync as copyFileSync7
 } from "fs";
 import { homedir as homedir11 } from "os";
-import { join as join21, relative as relative3 } from "path";
+import { join as join24, relative as relative4 } from "path";
 import { existsSync as existsSync24, mkdirSync as mkdirSync24, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "fs";
 import { homedir as homedir24 } from "os";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 import { readdirSync as readdirSync24, existsSync as existsSync34 } from "fs";
 import { join as join34 } from "path";
 import { homedir as homedir34 } from "os";
@@ -50300,13 +50385,13 @@ function custom4(check, _params = {}, fatal) {
   return ZodAny4.create();
 }
 function getDataDir5(serviceName) {
-  const dir = join21(HASNA_DIR3, serviceName);
+  const dir = join24(HASNA_DIR3, serviceName);
   mkdirSync16(dir, { recursive: true });
   return dir;
 }
 function getDbPath3(serviceName) {
   const dir = getDataDir5(serviceName);
-  return join21(dir, `${serviceName}.db`);
+  return join24(dir, `${serviceName}.db`);
 }
 function getConfigDir3() {
   return CONFIG_DIR5;
@@ -55765,7 +55850,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       function parse(stream, callback) {
         const parser = new parser_1.Parser;
         stream.on("data", (buffer) => parser.parse(buffer, callback));
-        return new Promise((resolve3) => stream.on("end", () => resolve3()));
+        return new Promise((resolve4) => stream.on("end", () => resolve4()));
       }
       exports.parse = parse;
     });
@@ -56430,12 +56515,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             this._connect(callback);
             return;
           }
-          return new this._Promise((resolve3, reject) => {
+          return new this._Promise((resolve4, reject) => {
             this._connect((error) => {
               if (error) {
                 reject(error);
               } else {
-                resolve3(this);
+                resolve4(this);
               }
             });
           });
@@ -56767,8 +56852,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
             readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
             query = new Query4(config, values, callback);
             if (!query.callback) {
-              result = new this._Promise((resolve3, reject) => {
-                query.callback = (err2, res) => err2 ? reject(err2) : resolve3(res);
+              result = new this._Promise((resolve4, reject) => {
+                query.callback = (err2, res) => err2 ? reject(err2) : resolve4(res);
               }).catch((err2) => {
                 Error.captureStackTrace(err2);
                 throw err2;
@@ -56843,8 +56928,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (cb) {
             this.connection.once("end", cb);
           } else {
-            return new this._Promise((resolve3) => {
-              this.connection.once("end", resolve3);
+            return new this._Promise((resolve4) => {
+              this.connection.once("end", resolve4);
             });
           }
         }
@@ -56889,8 +56974,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         const cb = function(err2, client) {
           err2 ? rej(err2) : res(client);
         };
-        const result = new Promise2(function(resolve3, reject) {
-          res = resolve3;
+        const result = new Promise2(function(resolve4, reject) {
+          res = resolve4;
           rej = reject;
         }).catch((err2) => {
           Error.captureStackTrace(err2);
@@ -56951,7 +57036,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           if (typeof Promise2.try === "function") {
             return Promise2.try(f);
           }
-          return new Promise2((resolve3) => resolve3(f()));
+          return new Promise2((resolve4) => resolve4(f()));
         }
         _isFull() {
           return this._clients.length >= this.options.max;
@@ -57325,8 +57410,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       NativeQuery.prototype._getPromise = function() {
         if (this._promise)
           return this._promise;
-        this._promise = new Promise(function(resolve3, reject) {
-          this._once("end", resolve3);
+        this._promise = new Promise(function(resolve4, reject) {
+          this._once("end", resolve4);
           this._once("error", reject);
         }.bind(this));
         return this._promise;
@@ -57500,12 +57585,12 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           this._connect(callback);
           return;
         }
-        return new this._Promise((resolve3, reject) => {
+        return new this._Promise((resolve4, reject) => {
           this._connect((error) => {
             if (error) {
               reject(error);
             } else {
-              resolve3(this);
+              resolve4(this);
             }
           });
         });
@@ -57529,8 +57614,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           query = new NativeQuery(config, values, callback);
           if (!query.callback) {
             let resolveOut, rejectOut;
-            result = new this._Promise((resolve3, reject) => {
-              resolveOut = resolve3;
+            result = new this._Promise((resolve4, reject) => {
+              resolveOut = resolve4;
               rejectOut = reject;
             }).catch((err2) => {
               Error.captureStackTrace(err2);
@@ -57588,8 +57673,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         }
         let result;
         if (!cb) {
-          result = new this._Promise(function(resolve3, reject) {
-            cb = (err2) => err2 ? reject(err2) : resolve3();
+          result = new this._Promise(function(resolve4, reject) {
+            cb = (err2) => err2 ? reject(err2) : resolve4();
           });
         }
         this.native.end(function() {
@@ -60877,7 +60962,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
       init_external4();
     });
     init_dotfile3 = __esm23(() => {
-      HASNA_DIR3 = join21(homedir11(), ".hasna");
+      HASNA_DIR3 = join24(homedir11(), ".hasna");
     });
     exports_config3 = {};
     __export23(exports_config3, {
@@ -60908,8 +60993,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
           schedule_minutes: exports_external4.number().default(0)
         }).default({})
       });
-      CONFIG_DIR5 = join24(homedir24(), ".hasna", "cloud");
-      CONFIG_PATH3 = join24(CONFIG_DIR5, "config.json");
+      CONFIG_DIR5 = join25(homedir24(), ".hasna", "cloud");
+      CONFIG_PATH3 = join25(CONFIG_DIR5, "config.json");
     });
     exports_discover3 = {};
     __export23(exports_discover3, {
@@ -62639,14 +62724,14 @@ Check the top-level render call using <` + parentName + ">.";
               var thenableResult = result;
               var wasAwaited = false;
               var thenable = {
-                then: function(resolve3, reject) {
+                then: function(resolve4, reject) {
                   wasAwaited = true;
                   thenableResult.then(function(returnValue2) {
                     popActScope(prevActScopeDepth);
                     if (actScopeDepth === 0) {
-                      recursivelyFlushAsyncActWork(returnValue2, resolve3, reject);
+                      recursivelyFlushAsyncActWork(returnValue2, resolve4, reject);
                     } else {
-                      resolve3(returnValue2);
+                      resolve4(returnValue2);
                     }
                   }, function(error2) {
                     popActScope(prevActScopeDepth);
@@ -62675,20 +62760,20 @@ Check the top-level render call using <` + parentName + ">.";
                   ReactCurrentActQueue.current = null;
                 }
                 var _thenable = {
-                  then: function(resolve3, reject) {
+                  then: function(resolve4, reject) {
                     if (ReactCurrentActQueue.current === null) {
                       ReactCurrentActQueue.current = [];
-                      recursivelyFlushAsyncActWork(returnValue, resolve3, reject);
+                      recursivelyFlushAsyncActWork(returnValue, resolve4, reject);
                     } else {
-                      resolve3(returnValue);
+                      resolve4(returnValue);
                     }
                   }
                 };
                 return _thenable;
               } else {
                 var _thenable2 = {
-                  then: function(resolve3, reject) {
-                    resolve3(returnValue);
+                  then: function(resolve4, reject) {
+                    resolve4(returnValue);
                   }
                 };
                 return _thenable2;
@@ -62704,7 +62789,7 @@ Check the top-level render call using <` + parentName + ">.";
             actScopeDepth = prevActScopeDepth;
           }
         }
-        function recursivelyFlushAsyncActWork(returnValue, resolve3, reject) {
+        function recursivelyFlushAsyncActWork(returnValue, resolve4, reject) {
           {
             var queue = ReactCurrentActQueue.current;
             if (queue !== null) {
@@ -62713,16 +62798,16 @@ Check the top-level render call using <` + parentName + ">.";
                 enqueueTask(function() {
                   if (queue.length === 0) {
                     ReactCurrentActQueue.current = null;
-                    resolve3(returnValue);
+                    resolve4(returnValue);
                   } else {
-                    recursivelyFlushAsyncActWork(returnValue, resolve3, reject);
+                    recursivelyFlushAsyncActWork(returnValue, resolve4, reject);
                   }
                 });
               } catch (error2) {
                 reject(error2);
               }
             } else {
-              resolve3(returnValue);
+              resolve4(returnValue);
             }
           }
         }
@@ -63642,11 +63727,11 @@ __export(exports_dist5, {
 import { hostname as osHostname, platform as osPlatform } from "os";
 import { Database as Database4 } from "bun:sqlite";
 import { existsSync as existsSync18, mkdirSync as mkdirSync17 } from "fs";
-import { dirname as dirname5, join as join25, resolve as resolve3 } from "path";
+import { dirname as dirname5, join as join26, resolve as resolve4 } from "path";
 import { existsSync as existsSync35 } from "fs";
 import { join as join35 } from "path";
 import { existsSync as existsSync25, mkdirSync as mkdirSync25, readFileSync as readFileSync11, readdirSync as readdirSync12, statSync as statSync5, writeFileSync as writeFileSync10 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 import { existsSync as existsSync45, mkdirSync as mkdirSync35, readFileSync as readFileSync25, writeFileSync as writeFileSync25 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join45 } from "path";
@@ -63663,7 +63748,7 @@ import {
   copyFileSync as copyFileSync8
 } from "fs";
 import { homedir as homedir25 } from "os";
-import { join as join74, relative as relative4 } from "path";
+import { join as join74, relative as relative5 } from "path";
 import { existsSync as existsSync222, mkdirSync as mkdirSync222, readFileSync as readFileSync44, writeFileSync as writeFileSync42 } from "fs";
 import { homedir as homedir222 } from "os";
 import { join as join222 } from "path";
@@ -64121,9 +64206,9 @@ function isInMemoryDb2(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestTodosDb(startDir) {
-  let dir = resolve3(startDir);
+  let dir = resolve4(startDir);
   while (true) {
-    const candidate = join25(dir, ".todos", "todos.db");
+    const candidate = join26(dir, ".todos", "todos.db");
     if (existsSync18(candidate))
       return candidate;
     const parent = dirname5(dir);
@@ -64134,9 +64219,9 @@ function findNearestTodosDb(startDir) {
   return null;
 }
 function findGitRoot2(startDir) {
-  let dir = resolve3(startDir);
+  let dir = resolve4(startDir);
   while (true) {
-    if (existsSync18(join25(dir, ".git")))
+    if (existsSync18(join26(dir, ".git")))
       return dir;
     const parent = dirname5(dir);
     if (parent === dir)
@@ -64159,12 +64244,12 @@ function getDbPath4() {
   if (process.env["TODOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot2(cwd);
     if (gitRoot) {
-      return join25(gitRoot, ".todos", "todos.db");
+      return join26(gitRoot, ".todos", "todos.db");
     }
   }
   const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  const newPath = join25(home, ".hasna", "todos", "todos.db");
-  const legacyPath = join25(home, ".todos", "todos.db");
+  const newPath = join26(home, ".hasna", "todos", "todos.db");
+  const legacyPath = join26(home, ".todos", "todos.db");
   if (!existsSync18(newPath) && existsSync18(legacyPath)) {
     return legacyPath;
   }
@@ -64173,7 +64258,7 @@ function getDbPath4() {
 function ensureDir3(filePath) {
   if (isInMemoryDb2(filePath))
     return;
-  const dir = dirname5(resolve3(filePath));
+  const dir = dirname5(resolve4(filePath));
   if (!existsSync18(dir)) {
     mkdirSync17(dir, { recursive: true });
   }
@@ -64792,14 +64877,14 @@ function writeJsonFile(path, data) {
 `);
 }
 function readHighWaterMark(dir) {
-  const path = join26(dir, ".highwatermark");
+  const path = join27(dir, ".highwatermark");
   if (!existsSync25(path))
     return 1;
   const val = parseInt(readFileSync11(path, "utf-8").trim(), 10);
   return isNaN(val) ? 1 : val;
 }
 function writeHighWaterMark(dir, value) {
-  writeFileSync10(join26(dir, ".highwatermark"), String(value));
+  writeFileSync10(join27(dir, ".highwatermark"), String(value));
 }
 function getFileMtimeMs(path) {
   try {
@@ -80829,13 +80914,14 @@ function registerIntegrationAndMeta(server) {
     try {
       const sid = resolveSessionId(session_id);
       const page = getSessionPage(sid);
-      const { getCredentials: getCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
-      const creds = await getCredentials2(service);
+      const { lookupCredentials: lookupCredentials2, loginWithCredentials: loginWithCredentials2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
+      const { credential: creds, method } = await lookupCredentials2(service);
       if (!creds)
         return err(new Error(`No credentials found for '${service}'. Add them: secrets set ${service}_email yourlogin && secrets set ${service}_password yourpass`));
       const result = await loginWithCredentials2(page, creds, {
         loginUrl: login_url,
-        saveProfile: save_profile ? service : undefined
+        saveProfile: save_profile ? service : undefined,
+        method
       });
       return json(result);
     } catch (e) {
@@ -81218,7 +81304,11 @@ function assertTuiSession(sessionId) {
   }
 }
 function getTuiSession(sessionId) {
-  return getSessionTuiSession(sessionId);
+  const session = getSessionTuiSession(sessionId);
+  if (!session) {
+    throw new Error(`TUI session handle missing for session ${sessionId}. Close and re-open with engine="tui".`);
+  }
+  return session;
 }
 function getTuiMeta(sessionId) {
   const session = getTuiSession(sessionId);
@@ -81264,19 +81354,19 @@ async function withTuiHealth(sessionId, operation, options = {}) {
   } else if (!health.healthy) {
     throw Object.assign(new Error(`TUI session is unhealthy: ${health.reason}. Close and reopen the session.`), { code: "TUI_UNHEALTHY" });
   }
-  let timedOut = false;
-  const timer = setTimeout(() => {
-    timedOut = true;
-  }, timeoutMs);
-  try {
-    return await operation(page, session);
-  } catch (error) {
-    if (timedOut) {
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => {
       const err2 = new Error(`${operationName} timed out after ${timeoutMs}ms \u2014 ttyd/playwright connection may be unhealthy. Status: ${health.healthy ? "was healthy before op" : "was already unhealthy"}. Try closing and re-opening the session.`);
       Object.assign(err2, { code: "TUI_TIMEOUT" });
-      throw err2;
-    }
-    throw error;
+      reject(err2);
+    }, timeoutMs);
+  });
+  try {
+    return await Promise.race([
+      operation(page, session),
+      timeout
+    ]);
   } finally {
     clearTimeout(timer);
   }
@@ -81575,6 +81665,7 @@ CONDITION SYNTAX:
         }, interval_ms)
       };
       activeRecordings2.set(sid, recording);
+      trackTuiRecording(sid, recording.intervalId);
       return json({
         recording: true,
         session_id: sid,
@@ -81594,6 +81685,7 @@ CONDITION SYNTAX:
       if (!recording)
         return err(new Error("No active recording for this session"));
       clearInterval(recording.intervalId);
+      stopTuiRecording(sid);
       activeRecordings2.delete(sid);
       const duration = (Date.now() - recording.startTime) / 1000;
       const header = {
@@ -81644,6 +81736,7 @@ var init_tui2 = __esm(() => {
   init_helpers();
   init_tui();
   init_session();
+  init_tui_recording();
   KEY_MAP = {
     "ctrl+c": "\x03",
     "ctrl+d": "\x04",
@@ -81692,23 +81785,21 @@ var init_tui2 = __esm(() => {
   activeRecordings2 = new Map;
 });
 
+// src/mcp/http.ts
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+var init_http = () => {};
+
 // src/mcp/index.ts
 var exports_mcp = {};
+__export(exports_mcp, {
+  buildServer: () => buildServer
+});
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { readFileSync as readFileSync12 } from "fs";
-import { join as join27 } from "path";
-var _pkg, server, _startupToolCount, transport;
-var init_mcp = __esm(async () => {
-  init_dist();
-  init_sessions2();
-  init_actions2();
-  init_capture();
-  init_network2();
-  init_data();
-  init_tui2();
-  _pkg = JSON.parse(readFileSync12(join27(import.meta.dir, "../../package.json"), "utf8"));
-  server = new McpServer2({
+import { join as join28 } from "path";
+function buildServer() {
+  const server = new McpServer2({
     name: "@hasna/browser",
     version: _pkg.version
   });
@@ -81719,10 +81810,20 @@ var init_mcp = __esm(async () => {
   register11(server);
   register12(server);
   registerCloudTools(server, "browser");
-  _startupToolCount = Object.keys(server._registeredTools ?? {}).length;
-  console.error(`@hasna/browser v${_pkg.version} \u2014 ${_startupToolCount} tools | data: ${(await Promise.resolve().then(() => (init_schema(), exports_schema))).getDataDir()}`);
-  transport = new StdioServerTransport;
-  await server.connect(transport);
+  return server;
+}
+var _pkg;
+var init_mcp = __esm(() => {
+  init_dist();
+  init_sessions2();
+  init_actions2();
+  init_capture();
+  init_network2();
+  init_data();
+  init_tui2();
+  init_http();
+  _pkg = JSON.parse(readFileSync12(join28(import.meta.dir, "../../package.json"), "utf8"));
+  if (false) {}
 });
 
 // src/db/snapshots.ts
@@ -81763,7 +81864,7 @@ var init_snapshots = __esm(() => {
 
 // src/server/index.ts
 var exports_server = {};
-import { join as join28 } from "path";
+import { join as join30 } from "path";
 import { existsSync as existsSync19 } from "fs";
 function corsHeaders(origin) {
   const headers = {
@@ -81829,7 +81930,7 @@ function serverError(e, extraHeaders) {
     headers: { "Content-Type": "application/json", ...extraHeaders ?? {} }
   });
 }
-var PORT, API_KEY, ALLOWED_ORIGIN, startTime, networkCleanup, consoleCleanup, harCaptures2, server2;
+var PORT, API_KEY, ALLOWED_ORIGIN, startTime, networkCleanup, consoleCleanup, harCaptures2, server;
 var init_server = __esm(() => {
   init_session();
   init_actions();
@@ -81854,7 +81955,7 @@ var init_server = __esm(() => {
   networkCleanup = new Map;
   consoleCleanup = new Map;
   harCaptures2 = new Map;
-  server2 = Bun.serve({
+  server = Bun.serve({
     port: PORT,
     async fetch(req) {
       const url = new URL(req.url);
@@ -82150,19 +82251,19 @@ var init_server = __esm(() => {
           const id = path.split("/")[3];
           return ok({ deleted: deleteDownload(id) });
         }
-        const dashboardDist = join28(import.meta.dir, "../../dashboard/dist");
+        const dashboardDist = join30(import.meta.dir, "../../dashboard/dist");
         if (existsSync19(dashboardDist)) {
           const cleanPath = path.replace(/^\//, "");
           if (cleanPath.includes("..") || cleanPath.startsWith("/"))
             return notFound("Not found", headers);
-          const filePath = path === "/" ? join28(dashboardDist, "index.html") : join28(dashboardDist, cleanPath);
-          const resolved = await Bun.file(filePath).arrayBuffer().then(() => join28(dashboardDist, cleanPath)) || "";
+          const filePath = path === "/" ? join30(dashboardDist, "index.html") : join30(dashboardDist, cleanPath);
+          const resolved = await Bun.file(filePath).arrayBuffer().then(() => join30(dashboardDist, cleanPath)) || "";
           if (!resolved.startsWith(dashboardDist))
             return notFound("Not found", headers);
           if (existsSync19(filePath)) {
             return new Response(Bun.file(filePath), { headers });
           }
-          return new Response(Bun.file(join28(dashboardDist, "index.html")), { headers });
+          return new Response(Bun.file(join30(dashboardDist, "index.html")), { headers });
         }
         if (path === "/" || path === "") {
           return new Response("@hasna/browser REST API running. Dashboard not built.", {
@@ -82197,7 +82298,7 @@ var {
 // src/cli/index.tsx
 init_dist();
 import { readFileSync as readFileSync13 } from "fs";
-import { join as join29 } from "path";
+import { join as join31 } from "path";
 
 // src/cli/commands/browse.ts
 init_session();
@@ -83022,7 +83123,7 @@ Stopping watch. ${checkCount} checks performed.`));
     });
   });
   program2.command("mcp").description("Start the MCP server (stdio)").action(async () => {
-    await init_mcp().then(() => exports_mcp);
+    await Promise.resolve().then(() => (init_mcp(), exports_mcp));
   });
   program2.command("serve").description("Start the REST API server").option("--port <port>", "Port to listen on", "7030").action(async (opts) => {
     process.env["BROWSER_SERVER_PORT"] = opts.port;
@@ -83055,7 +83156,7 @@ Stopping watch. ${checkCount} checks performed.`));
 }
 
 // src/cli/index.tsx
-var pkg = JSON.parse(readFileSync13(join29(import.meta.dir, "../../package.json"), "utf8"));
+var pkg = JSON.parse(readFileSync13(join31(import.meta.dir, "../../package.json"), "utf8"));
 var program2 = new Command;
 program2.name("browser").description("@hasna/browser \u2014 general-purpose browser agent CLI").version(pkg.version);
 register(program2);
@@ -83063,4 +83164,9 @@ register2(program2);
 register3(program2);
 register13(program2);
 registerCloudCommands(program2, "browser");
-program2.parseAsync(process.argv);
+try {
+  await program2.parseAsync(process.argv);
+} finally {
+  const { closeAllSessions: closeAllSessions2 } = await Promise.resolve().then(() => (init_session(), exports_session));
+  await closeAllSessions2();
+}