@modelprofile.com/browser-runtime 5.3.0 → 5.4.1

package/dist_ts/errors.d.ts

@@ -1,4 +1,4 @@
-export type TBrowserRuntimeErrorCode = 'ABORTED' | 'AUTHORIZATION_DENIED' | 'ATTACHMENT_CONFLICT' | 'BUSY' | 'CAPABILITY_EXPIRED' | 'CAPABILITY_INVALID' | 'CAPABILITY_REVOKED' | 'CONFINEMENT_FAILED' | 'EGRESS_DENIED' | 'FENCED' | 'FRAME_STREAM_FAILED' | 'FRAME_TOO_LARGE' | 'INVALID_INPUT' | 'LOCKED' | 'NOT_RUNNING' | 'PROTOCOL_ERROR' | 'QUOTA_EXCEEDED' | 'RESOURCE_NOT_FOUND' | 'RESOURCE_RETIRED' | 'TIMEOUT';
+export type TBrowserRuntimeErrorCode = 'ABORTED' | 'AUTHORIZATION_DENIED' | 'ATTACHMENT_CONFLICT' | 'BUSY' | 'CAPABILITY_EXPIRED' | 'CAPABILITY_INVALID' | 'CAPABILITY_REVOKED' | 'CONFINEMENT_FAILED' | 'EGRESS_DENIED' | 'FENCED' | 'FRAME_STREAM_FAILED' | 'FRAME_TOO_LARGE' | 'DIALOG_PENDING' | 'STALE_INPUT' | 'INVALID_INPUT' | 'LOCKED' | 'NOT_RUNNING' | 'PROTOCOL_ERROR' | 'QUOTA_EXCEEDED' | 'RESOURCE_NOT_FOUND' | 'RESOURCE_RETIRED' | 'TIMEOUT';
 export declare class BrowserRuntimeError extends Error {
     readonly code: TBrowserRuntimeErrorCode;
     constructor(code: TBrowserRuntimeErrorCode, internalMessage?: string);

package/dist_ts/errors.js

@@ -11,6 +11,8 @@ const publicMessages = {
     FENCED: 'The browser resource is permanently fenced.',
     FRAME_STREAM_FAILED: 'The browser frame stream failed.',
     FRAME_TOO_LARGE: 'The browser frame exceeded its limit.',
+    DIALOG_PENDING: 'Respond to the website dialog before sending input.',
+    STALE_INPUT: 'The input belongs to a previous document or dialog.',
     INVALID_INPUT: 'The request is invalid.',
     LOCKED: 'The browser runtime is already locked.',
     NOT_RUNNING: 'The browser runtime is not running.',
@@ -41,4 +43,4 @@ export const toBrowserRuntimeError = (error) => {
     }
     return new BrowserRuntimeError('ABORTED');
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/interfaces.d.ts

@@ -101,7 +101,7 @@ export type TBrowserRuntimeOperationIdentity = TReadonlyBrowserCapabilityAuthori
     readonly classification: TBrowserRuntimeOperationClassification;
     readonly startedAt: number;
 };
-export type TBrowserRuntimeOperationClassification = 'raw-input' | 'frame-stream' | 'video-peer' | 'devtools' | 'viewport' | 'navigation' | 'tab' | 'agent-action';
+export type TBrowserRuntimeOperationClassification = 'dialog' | 'raw-input' | 'frame-stream' | 'video-peer' | 'devtools' | 'viewport' | 'navigation' | 'tab' | 'agent-action';
 /** The viewport accepted by the shared resource, which may be smaller than one viewer's request. */
 export interface IBrowserRuntimeViewportResult {
     viewport: plugins.smartpuppeteer.ILiveBrowserViewport;
@@ -120,6 +120,7 @@ export type TBrowserRuntimeAuditEvent = TBrowserRuntimeOperationIdentity & {
     readonly errorCode?: string;
 };
 export interface ILiveBrowserSessionLike {
+    respondToDialog(input: plugins.smartpuppeteer.ILiveBrowserDialogResponse, options?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
     openDevTools?(options: plugins.smartpuppeteer.ILiveBrowserDevToolsOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<plugins.smartpuppeteer.ILiveBrowserDevToolsConnection>;
     start(options?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
     stop(): Promise<void>;
@@ -207,6 +208,7 @@ export interface IBrowserRuntimeOptions {
     artifacts?: Omit<IBrowserArtifactStoreOptions, 'rootDirectory'>;
 }
 export interface IBrowserRuntimeTabState {
+    dialog?: plugins.smartpuppeteer.ILiveBrowserDialog;
     id: string;
     url: string;
     title: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelprofile.com/browser-runtime",
-  "version": "5.3.0",
+  "version": "5.4.1",
   "private": false,
   "description": "Parent-owned, resource-centric Chromium runtime with revisioned attachment fencing, authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.",
   "main": "dist_ts/index.js",
@@ -30,7 +30,7 @@
     "@push.rocks/smartagent": "^6.0.0",
     "@push.rocks/smartipc": "^2.6.0",
     "@push.rocks/smartmcp": "^0.3.0",
-    "@push.rocks/smartpuppeteer": "^2.9.0",
+    "@push.rocks/smartpuppeteer": "^2.12.0",
     "ipaddr.js": "^2.5.0"
   },
   "devDependencies": {

package/readme.md

@@ -24,6 +24,10 @@ No browser debugging port or browser-wide target discovery is exposed. Pair this
 connection with `DevToolsFrontend` from `@push.rocks/smartbrowser/web` for the official
 Chrome DevTools UI.
 
+## Page dialogs
+
+`state.tabs[].dialog` exposes the exact pending website dialog. A human lease can call `respondToDialog({ tabId, dialogId, accept, promptText? }, options?)`. This response receives the same authorization, audit, cancellation, and incarnation checks as other operations while bypassing document serialization. Agent leases cannot send this human response. A pending dialog rejects raw input with `DIALOG_PENDING`, preserving held-input tracking until it closes. Before input enters a new document, the runtime releases native keys and buttons retained from the previous document. Obsolete input and dialog identities fail with `STALE_INPUT`; they do not imply a failed browser connection.
+
 ## Native video viewers
 
 Human leases expose `openVideoPeer(options?)`, `answerVideoPeer(negotiationId, description, options?)`, `closeVideoPeer(options?)`, and `getVideoStatistics(options?)`. Each operation runs through the resource's bounded, authorized and audited operation queue. Peer IDs are private to the lease; offers expose the negotiation ID and exact tab/generation/viewport source identity. Agent leases cannot open media peers. Releasing or revoking a human lease closes only its peer, preserving other viewers and agent work. Failed peer cleanup remains owned for a subsequent release attempt.
@@ -158,11 +162,11 @@ by `maxCapabilities`. Hosts must stop scheduling renewal when their viewer disco
 
 Agent actions are exactly `navigate`, `snapshot`, `screenshot`, `click`, `fill`, and `press`. Agents can read or delete screenshots created by their exact lease using `readArtifact()` and `deleteArtifact()`. Human leases additionally expose tab lifecycle, viewport, raw input, frame subscription/acknowledgement and refresh, and exact-resource artifact reads/deletes. JavaScript evaluation is not public.
 
-All participants enter one strict resource FIFO. `maxQueuedOperationsPerLease` defaults to 128 and accepts 1 through 1,024; each participant has that bound, and the resource queue is bounded by its product with `maxCapabilitiesPerResource`. Overflow fails with `QUOTA_EXCEEDED`. Releasing a participant cancels only its queued and active work. Resource termination and shutdown cancel everyone. Started uncertain work must quiesce or the exact incarnation is terminated before operation settlement.
+All participants share a bounded resource queue. Up to four wheel operations may run concurrently, with authorization and native-send admission kept in order. Other input, viewport, and semantic operations remain barriers behind preceding wheel work. Dialog replies use one interrupt slot so a paused document operation cannot block its own response. `maxQueuedOperationsPerLease` defaults to 128 and accepts 1 through 1,024; each participant has that bound, and the resource queue is bounded by its product with `maxCapabilitiesPerResource`. Overflow fails with `QUOTA_EXCEEDED`. Releasing a participant cancels only its queued and active work. Resource termination and shutdown cancel everyone. Started uncertain work must quiesce or the exact incarnation is terminated before operation settlement.
 
 `setViewport()` stores the viewer's preferred width, height and device scale factor and returns `IBrowserRuntimeViewportResult` with the effective `viewport` and `viewportRevision`. The effective values are the componentwise minima across active viewers that have supplied a preference. Unchanged effective sizes do not restart the stream. Removing a viewer recomputes the viewport in the resource FIFO. Held keys and buttons are tracked per participant; leaving releases only inputs that no other participant holds. Viewport and tab/navigation transitions clear held input before changing the target. Resource-owned departure cleanup is bounded and audited as `releaseParticipant`; it does not call the external `beforeOperation` gate after the participant has lost access.
 
-`beforeOperation` is an optional awaited fail-closed gate. It receives the complete immutable authority, operation/capability/lease IDs, action, classification, start time, and an `AbortSignal` after dequeue but before the browser side effect starts. Classifications are `raw-input`, `frame-stream`, `video-peer`, `viewport`, `navigation`, `tab`, and `agent-action`. Hosts that require durable attempt-before-side-effect auditing should persist the attempt there. Rejection denies the operation. The default `beforeOperationTimeoutMs` is 10,000 milliseconds and accepts values from 100 through 120,000; timeout fails with `TIMEOUT`. The terminal `audit` callback remains a best-effort `completed`/`failed` notification correlated by the same operation ID and classification and runs after bounded operation cleanup releases or fences the exact reservation.
+`beforeOperation` is an optional awaited fail-closed gate. It receives the complete immutable authority, operation/capability/lease IDs, action, classification, start time, and an `AbortSignal` after dequeue but before the browser side effect starts. Classifications are `raw-input`, `dialog`, `devtools`, `frame-stream`, `video-peer`, `viewport`, `navigation`, `tab`, and `agent-action`. Hosts that require durable attempt-before-side-effect auditing should persist the attempt there. Rejection denies the operation. The default `beforeOperationTimeoutMs` is 10,000 milliseconds and accepts values from 100 through 120,000; timeout fails with `TIMEOUT`. The terminal `audit` callback remains a best-effort `completed`/`failed` notification correlated by the same operation ID and classification and runs after bounded operation cleanup releases or fences the exact reservation.
 
 `lease.getAuthority()` returns an immutable process-local lease authority containing the runtime authority ID, exported `authorityGeneration`, incarnation generation, and complete capability binding. Every snapshot also binds the exact `capabilityId` and `leaseId`. `lease.isAuthorityCurrent(authority)` performs an exact synchronous revalidation suitable for a host-owned virtual stream. These values are not durable Controller state and do not replace attachment checks against the Controller database.
 

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@modelprofile.com/browser-runtime',
-  version: '5.3.0',
+  version: '5.4.1',
   description: 'Parent-owned, resource-centric Chromium runtime with revisioned attachment fencing, authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.'
 }

package/ts/classes.runtime.ts

@@ -262,7 +262,9 @@ interface IResourceSlot {
   profileDirectory?: string;
   unsubscribeSession?: () => void;
   leases: Map<string, ILeaseRecord>;
-  operation?: IOperationRecord;
+  operations: Set<IOperationRecord>;
+  activeQueuedOperations: Set<IQueuedOperationRecord>;
+  inputCleanup?: { session: ILiveBrowserSessionLike; incarnationGeneration: number; promise: Promise<void> };
   operationQueue: IQueuedOperationRecord[];
   operationSchedulerRunning: boolean;
   frameSubscriptions: Map<string, IFrameSubscriptionRecord>;
@@ -743,6 +745,8 @@ export class BrowserRuntime {
       frameSubscriptions: new Map(),
       highestFrameSequence: 0,
       producerAcknowledgements: new Set(),
+      operations: new Set(),
+      activeQueuedOperations: new Set(),
       operationQueue: [],
       operationSchedulerRunning: false,
       lifecycleTail: Promise.resolve(),
@@ -1640,6 +1644,24 @@ export class BrowserRuntime {
     );
   }
 
+  /** @internal */
+  public async leaseRespondToDialog(lease: ILeaseRecord,
+    input: plugins.smartpuppeteer.ILiveBrowserDialogResponse,
+    options: IBrowserRuntimeOperationOptions = {}): Promise<void> {
+    this.requireHuman(lease);
+    const record = validateExactKeys(input, ['tabId', 'dialogId', 'accept', 'promptText'], 'dialog');
+    const tabId = validateBoundedString(record.tabId, 'tabId', 1, 128);
+    const dialogId = validateBoundedString(record.dialogId, 'dialogId', 1, 128);
+    if (typeof record.accept !== 'boolean' || (record.promptText !== undefined
+      && (typeof record.promptText !== 'string' || record.promptText.length > 32768))) {
+      throw new BrowserRuntimeError('INVALID_INPUT');
+    }
+    const response = { tabId, dialogId, accept: record.accept,
+      ...(record.promptText !== undefined ? { promptText: record.promptText as string } : {}) };
+    return this.runOperation(lease, 'respondToDialog', 'dialog', options,
+      async (signal, session) => session.respondToDialog(response, { signal }));
+  }
+
   /** @internal */
   public async leaseDispatchRawInput(
     lease: ILeaseRecord,
@@ -1722,7 +1744,7 @@ export class BrowserRuntime {
     const tab = state.tabs.find((value) => value.id === state.activeTabId);
     if (!tab || tab.status !== 'open' || tab.id !== input.tabId
       || tab.generation !== input.generation || state.viewportRevision !== input.viewportRevision
-    ) throw new BrowserRuntimeError('INVALID_INPUT');
+    ) throw new BrowserRuntimeError('STALE_INPUT');
   }
 
   private mouseOwnershipKey(input: plugins.smartpuppeteer.ILiveBrowserMouseInput): string {
@@ -1770,6 +1792,29 @@ export class BrowserRuntime {
     return modifiers;
   }
 
+  private async releaseStaleParticipantInput(slot: IResourceSlot, session: ILiveBrowserSessionLike): Promise<void> {
+    const incarnationGeneration = slot.incarnationGeneration;
+    if (slot.session !== session) throw new BrowserRuntimeError('ABORTED');
+    if (slot.inputCleanup?.session === session
+      && slot.inputCleanup.incarnationGeneration === incarnationGeneration) return slot.inputCleanup.promise;
+    const state = session.getState();
+    const tab = state.tabs.find(tab => tab.id === state.activeTabId);
+    if (!tab?.streaming || tab.dialog) return;
+    const affected = [...slot.leases.values()].filter(lease => [...lease.heldKeys.values(), ...lease.heldButtons.values()]
+      .some(input => input.tabId !== tab.id || input.generation !== tab.generation
+        || input.viewportRevision !== state.viewportRevision));
+    if (!affected.length) return;
+    // The runtime owns native held input, including link navigation that bypasses its command queue.
+    const cleanup = { session, incarnationGeneration, promise: (async () => {
+      for (const lease of affected) {
+        if (slot.session !== session || slot.incarnationGeneration !== incarnationGeneration) return;
+        await this.releaseParticipantInput(lease, session);
+      }
+    })() };
+    slot.inputCleanup = cleanup;
+    try { await cleanup.promise; } finally { if (slot.inputCleanup === cleanup) slot.inputCleanup = undefined; }
+  }
+
   private async releaseAllParticipantInput(
     slot: IResourceSlot, session: ILiveBrowserSessionLike,
   ): Promise<void> {
@@ -1924,10 +1969,9 @@ export class BrowserRuntime {
   /** @internal */
   public cancelLeaseOperation(lease: ILeaseRecord): boolean {
     this.requireValidLease(lease);
-    const operation = lease.slot.operation;
-    if (!operation || operation.lease !== lease) return false;
-    operation.controller.abort(new BrowserRuntimeError('ABORTED'));
-    return true;
+    const operations = [...lease.slot.operations].filter(operation => operation.lease === lease);
+    for (const operation of operations) operation.controller.abort(new BrowserRuntimeError('ABORTED'));
+    return operations.length > 0;
   }
 
   /** @internal */
@@ -2391,37 +2435,42 @@ export class BrowserRuntime {
   private drainOperationQueue(slot: IResourceSlot): void {
     if (slot.operationSchedulerRunning) return;
     slot.operationSchedulerRunning = true;
-    const scheduler = (async () => {
-      while (slot.operationQueue.length > 0) {
-        const queued = slot.operationQueue.shift()!;
-        if (queued.state === 'settled') continue;
-        queued.state = 'starting';
-        try {
-          const result = await this.executeQueuedOperation(queued);
-          if ((queued as IQueuedOperationRecord).state !== 'settled') {
-            queued.state = 'settled';
-            queued.resolve(result);
-          }
-        } catch (error) {
-          if (queued.state !== 'settled') {
-            queued.state = 'settled';
-            queued.reject(error);
-          }
-        } finally {
-          if (queued.onQueuedAbort) {
-            queued.signal.removeEventListener('abort', queued.onQueuedAbort);
-            queued.onQueuedAbort = undefined;
-          }
+    void (async () => {
+      try {
+        while (slot.operationQueue.length > 0) {
+          // Dialog replies must unblock a page operation already waiting on Chrome.
+          const dialogIndex = slot.operationQueue.findIndex(entry => entry.classification === 'dialog');
+          const index = dialogIndex >= 0 ? dialogIndex : 0;
+          const queued = slot.operationQueue[index]!;
+          const active = [...slot.activeQueuedOperations];
+          if (queued.classification === 'dialog') {
+            if (active.some(entry => entry.classification === 'dialog')) break;
+          } else if (active.length > 0 && !(queued.action === 'dispatchWheel'
+            && active.length < 4 && active.every(entry => entry.action === 'dispatchWheel'))) break;
+          slot.operationQueue.splice(index, 1);
+          if (queued.state === 'settled') continue;
+          queued.state = 'starting';
+          slot.activeQueuedOperations.add(queued);
+          let dispatched!: () => void;
+          const admission = new Promise<void>(resolve => { dispatched = resolve; });
+          void this.executeQueuedOperation(queued, dispatched).then(result => {
+            if (queued.state !== 'settled') { queued.state = 'settled'; queued.resolve(result); }
+          }, error => {
+            if (queued.state !== 'settled') { queued.state = 'settled'; queued.reject(error); }
+          }).finally(() => {
+            dispatched();
+            if (queued.onQueuedAbort) queued.signal.removeEventListener('abort', queued.onQueuedAbort);
+            slot.activeQueuedOperations.delete(queued);
+            this.drainOperationQueue(slot);
+          });
+          // Preserve authorization and native-send order without waiting for wheel ACKs.
+          await admission;
         }
-      }
-    })().finally(() => {
-      slot.operationSchedulerRunning = false;
-      if (slot.operationQueue.length > 0) this.drainOperationQueue(slot);
-    });
-    void scheduler.catch(() => undefined);
+      } finally { slot.operationSchedulerRunning = false; }
+    })();
   }
 
-  private async executeQueuedOperation(queued: IQueuedOperationRecord): Promise<unknown> {
+  private async executeQueuedOperation(queued: IQueuedOperationRecord, dispatched: () => void): Promise<unknown> {
     const { lease, action, classification } = queued;
     const slot = lease.slot;
     const release = await slot.mutex.acquire();
@@ -2441,7 +2490,12 @@ export class BrowserRuntime {
       queued.signal.throwIfAborted();
       this.requireQueuedLease(lease, queued.participantCleanup);
       this.assertSlotAvailable(slot);
-      if (slot.operation) throw new BrowserRuntimeError('BUSY');
+      const active = [...slot.operations];
+      if (classification === 'dialog' ? active.some(operation => operation.action === 'respondToDialog')
+        : active.length > 0 && !(action === 'dispatchWheel' && active.length < 4
+          && active.every(operation => operation.action === 'dispatchWheel'))) {
+        throw new BrowserRuntimeError('BUSY');
+      }
       session = slot.session!;
       generation = slot.arbitrationGeneration;
       incarnationGeneration = slot.incarnationGeneration;
@@ -2471,7 +2525,7 @@ export class BrowserRuntime {
         incarnationGeneration,
         promise: new Promise<void>((resolve) => { resolvePreflight = resolve; }),
       };
-      slot.operation = operation;
+      slot.operations.add(operation);
       queued.state = 'active';
       if (queued.onQueuedAbort) {
         queued.signal.removeEventListener('abort', queued.onQueuedAbort);
@@ -2507,7 +2561,7 @@ export class BrowserRuntime {
         this.requireQueuedLease(lease, queued.participantCleanup);
         this.assertSlotAvailable(slot);
         if (
-          slot.operation !== operation
+          !slot.operations.has(operation)
           || slot.session !== session
           || slot.arbitrationGeneration !== generation
           || slot.incarnationGeneration !== incarnationGeneration
@@ -2517,8 +2571,11 @@ export class BrowserRuntime {
           if (classification === 'navigation' || classification === 'tab') {
             await this.releaseAllParticipantInput(slot, session);
           }
+          if (classification !== 'dialog') await this.releaseStaleParticipantInput(slot, session);
           combinedSignal.throwIfAborted();
-          return queued.execute(combinedSignal, session);
+          const result = queued.execute(combinedSignal, session);
+          dispatched();
+          return result;
         })();
         operation.promise = executionPromise.then(() => undefined, () => undefined).finally(() => {
           executionSettled = true;
@@ -2548,10 +2605,11 @@ export class BrowserRuntime {
       clearTimeout(timeout!);
       queued.externalSignal?.removeEventListener('abort', onExternalAbort!);
       resolvePreflight();
+      dispatched();
       const cleanupSlot = async (): Promise<void> => {
         const cleanupRelease = await slot.mutex.acquire();
         try {
-          if (slot.operation === operation) slot.operation = undefined;
+          slot.operations.delete(operation);
         } finally {
           cleanupRelease();
         }
@@ -2560,7 +2618,7 @@ export class BrowserRuntime {
         if (combinedSignal!.aborted) {
           await this.enforceOperationQuiescence(operation).catch(() => undefined);
         }
-        if (slot.operation === operation) {
+        if (slot.operations.has(operation)) {
           const settled = await waitBounded(operation.promise, this.options.quiescenceTimeoutMs);
           if (settled.settled) await cleanupSlot();
         }
@@ -2570,7 +2628,7 @@ export class BrowserRuntime {
       if (
         queued.finalize
         && (!executionStarted || executionSettled)
-        && slot.operation !== operation
+        && !slot.operations.has(operation)
       ) {
         try {
           await queued.finalize();
@@ -2618,6 +2676,8 @@ export class BrowserRuntime {
       );
     }
     if (errorArg instanceof BrowserRuntimeError) return errorArg;
+    if (errorArg instanceof plugins.smartpuppeteer.LiveBrowserInputStaleError) return new BrowserRuntimeError('STALE_INPUT');
+    if (errorArg instanceof plugins.smartpuppeteer.LiveBrowserDialogPendingError) return new BrowserRuntimeError('DIALOG_PENDING');
     if (errorArg instanceof Error && errorArg.name === 'TimeoutError') {
       return new BrowserRuntimeError('TIMEOUT');
     }
@@ -2890,6 +2950,7 @@ export class BrowserRuntime {
         generation: tab.generation,
         appliedViewportRevision: tab.appliedViewportRevision,
         streaming: tab.streaming,
+        ...(tab.dialog ? { dialog: { ...tab.dialog } } : {}),
       })),
       ...(state.lastError
         ? {
@@ -3257,7 +3318,7 @@ export class BrowserRuntime {
         lease.released = true;
         lease.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
       }
-      slot.operation?.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
+      for (const operation of slot.operations) operation.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
       for (const subscription of subscribers) {
         try { subscription.listener(runtimeEvent); } catch { /* Producer failure owns cleanup. */ }
       }
@@ -3449,7 +3510,7 @@ export class BrowserRuntime {
         lease.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
         this.notifyFramedLeaseEnded(lease);
       }
-      slot.operation?.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
+      for (const operation of slot.operations) operation.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
     } finally {
       release();
     }
@@ -3465,7 +3526,7 @@ export class BrowserRuntime {
           slot.leases.delete(lease.leaseId);
           if (lease.capability.lease === lease) lease.capability.lease = undefined;
         }
-        slot.operation = undefined;
+        slot.operations.clear();
         slot.fencingGeneration = undefined;
       }
     } finally {
@@ -3630,18 +3691,18 @@ export class BrowserRuntime {
     const slot = lease.slot;
     if (slot.leases.get(lease.leaseId) !== lease) return;
     const release = await slot.mutex.acquire();
-    let operation: IOperationRecord | undefined;
+    let operations: IOperationRecord[];
     try {
       lease.released = true;
       lease.controller.abort(new BrowserRuntimeError('ABORTED'));
-      operation = slot.operation?.lease === lease ? slot.operation : undefined;
-      operation?.controller.abort(new BrowserRuntimeError('ABORTED'));
+      operations = [...slot.operations].filter(operation => operation.lease === lease);
+      for (const operation of operations) operation.controller.abort(new BrowserRuntimeError('ABORTED'));
     } finally {
       release();
     }
     await this.closeFrameSubscriptionIfLease(lease);
     if (lease.devTools) await this.closeLeaseDevTools(lease, lease.devTools);
-    if (operation) {
+    for (const operation of operations) {
       const settled = await waitBounded(operation.promise, this.options.quiescenceTimeoutMs);
       if (!settled.settled) {
         // An unquiescent operation belongs to the browser process, so its incarnation must end.
@@ -3689,13 +3750,12 @@ export class BrowserRuntime {
   }
 
   private async quiesceSlot(slot: IResourceSlot): Promise<void> {
-    const operation = slot.operation;
-    if (!operation) return;
-    operation.controller.abort(new BrowserRuntimeError('ABORTED'));
-    const settled = await waitBounded(operation.promise, this.options.quiescenceTimeoutMs);
+    const operations = [...slot.operations];
+    for (const operation of operations) operation.controller.abort(new BrowserRuntimeError('ABORTED'));
+    const settled = await waitBounded(Promise.all(operations.map(operation => operation.promise)), this.options.quiescenceTimeoutMs);
     if (settled.settled) return;
     await this.terminateSlotSession(slot);
-    if (slot.operation === operation) slot.operation = undefined;
+    for (const operation of operations) slot.operations.delete(operation);
   }
 
   private async enforceOperationQuiescence(operation: IOperationRecord): Promise<void> {
@@ -3711,7 +3771,7 @@ export class BrowserRuntime {
     } catch (error) {
       cleanupError = error;
     }
-    if (operation.lease.slot.operation !== operation) {
+    if (!operation.lease.slot.operations.has(operation)) {
       if (cleanupError) throw cleanupError;
       return;
     }
@@ -3721,7 +3781,7 @@ export class BrowserRuntime {
       return;
     }
     const slot = operation.lease.slot;
-    if (slot.operation === operation && slot.session === operation.session
+    if (slot.operations.has(operation) && slot.session === operation.session
       && slot.incarnationGeneration === operation.incarnationGeneration) {
       await this.terminateRegisteredResourceInternal(slot, false, {
         session: operation.session, incarnationGeneration: operation.incarnationGeneration,
@@ -3730,13 +3790,13 @@ export class BrowserRuntime {
     const release = await slot.mutex.acquire();
     try {
       if (
-        slot.operation === operation
+        slot.operations.has(operation)
         && (
           slot.permanentlyFenced
           || slot.session !== operation.session
           || slot.incarnationGeneration !== operation.incarnationGeneration
         )
-      ) slot.operation = undefined;
+      ) slot.operations.delete(operation);
     } finally {
       release();
     }
@@ -3778,6 +3838,7 @@ export class BrowserRuntime {
       }
       slot.unsubscribeSession?.();
       slot.unsubscribeSession = undefined;
+      if (slot.inputCleanup?.session === session) slot.inputCleanup = undefined;
       slot.session = undefined;
       slot.highestFrameSequence = 0;
       slot.producerAcknowledgements.clear();
@@ -3862,7 +3923,7 @@ export class BrowserRuntime {
         lease.controller.abort(new BrowserRuntimeError('ABORTED'));
         if (!stopping) this.notifyFramedLeaseEnded(lease);
       }
-      slot.operation?.controller.abort(new BrowserRuntimeError('ABORTED'));
+      for (const operation of slot.operations) operation.controller.abort(new BrowserRuntimeError('ABORTED'));
     } finally {
       release();
     }
@@ -3878,7 +3939,7 @@ export class BrowserRuntime {
         if (lease.capability.lease === lease) lease.capability.lease = undefined;
         slot.leases.delete(lease.leaseId);
       }
-      slot.operation = undefined;
+      slot.operations.clear();
       slot.fencingGeneration = undefined;
     } finally {
       finalRelease();
@@ -3979,8 +4040,8 @@ export class BrowserRuntime {
           lease.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
         }
       }
-      if (slot.operation?.lease.role === 'agent') {
-        slot.operation.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
+      for (const operation of slot.operations) {
+        if (operation.lease.role === 'agent') operation.controller.abort(new BrowserRuntimeError('CAPABILITY_REVOKED'));
       }
     } finally {
       release();
@@ -4506,6 +4567,11 @@ export class BrowserRuntimeLease {
     return this.runtime.leaseSetViewport(this.record, viewport, operationOptions);
   }
 
+  public respondToDialog(input: plugins.smartpuppeteer.ILiveBrowserDialogResponse,
+    options: IBrowserRuntimeOperationOptions = {}): Promise<void> {
+    return this.runtime.leaseRespondToDialog(this.record, input, options);
+  }
+
   public dispatchMouse(
     input: plugins.smartpuppeteer.ILiveBrowserMouseInput,
     operationOptions?: IBrowserRuntimeOperationOptions,

package/ts/errors.ts

@@ -11,6 +11,8 @@ export type TBrowserRuntimeErrorCode =
   | 'FENCED'
   | 'FRAME_STREAM_FAILED'
   | 'FRAME_TOO_LARGE'
+  | 'DIALOG_PENDING'
+  | 'STALE_INPUT'
   | 'INVALID_INPUT'
   | 'LOCKED'
   | 'NOT_RUNNING'
@@ -33,6 +35,8 @@ const publicMessages: Record<TBrowserRuntimeErrorCode, string> = {
   FENCED: 'The browser resource is permanently fenced.',
   FRAME_STREAM_FAILED: 'The browser frame stream failed.',
   FRAME_TOO_LARGE: 'The browser frame exceeded its limit.',
+  DIALOG_PENDING: 'Respond to the website dialog before sending input.',
+  STALE_INPUT: 'The input belongs to a previous document or dialog.',
   INVALID_INPUT: 'The request is invalid.',
   LOCKED: 'The browser runtime is already locked.',
   NOT_RUNNING: 'The browser runtime is not running.',

package/ts/interfaces.ts

@@ -131,6 +131,7 @@ export type TBrowserRuntimeOperationIdentity = TReadonlyBrowserCapabilityAuthori
 };
 
 export type TBrowserRuntimeOperationClassification =
+  | 'dialog'
   | 'raw-input'
   | 'frame-stream'
   | 'video-peer'
@@ -161,6 +162,8 @@ export type TBrowserRuntimeAuditEvent = TBrowserRuntimeOperationIdentity & {
 };
 
 export interface ILiveBrowserSessionLike {
+  respondToDialog(input: plugins.smartpuppeteer.ILiveBrowserDialogResponse,
+    options?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
   openDevTools?(options: plugins.smartpuppeteer.ILiveBrowserDevToolsOptions,
     operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<plugins.smartpuppeteer.ILiveBrowserDevToolsConnection>;
   start(options?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
@@ -310,6 +313,7 @@ export interface IBrowserRuntimeOptions {
 }
 
 export interface IBrowserRuntimeTabState {
+  dialog?: plugins.smartpuppeteer.ILiveBrowserDialog;
   id: string;
   url: string;
   title: string;