@nuanu-ai/agentbrowse 0.2.12 → 0.2.14

package/dist/solver/captcha-detector.js

@@ -4,29 +4,101 @@ export async function detectCaptchas(page) {
     const pageUrl = page.url();
     return page.evaluate((url) => {
         const found = [];
+        const seen = new Set();
         const recaptchaEl = document.querySelector('.g-recaptcha[data-sitekey], div[data-sitekey]:not([data-hcaptcha-widget-id])');
         if (recaptchaEl) {
             const key = recaptchaEl.getAttribute('data-sitekey');
-            if (key)
-                found.push({ type: 'recaptcha-v2', siteKey: key, pageUrl: url });
+            if (key) {
+                const seenKey = ['recaptcha-v2', '', key, ''].join(':');
+                if (!seen.has(seenKey)) {
+                    seen.add(seenKey);
+                    found.push({ type: 'recaptcha-v2', siteKey: key, pageUrl: url });
+                }
+            }
         }
         const recaptchaIframe = document.querySelector('iframe[src*="recaptcha/api2"], iframe[src*="recaptcha/enterprise"]');
         if (recaptchaIframe && found.length === 0) {
             const match = recaptchaIframe.src.match(/[?&]k=([^&]+)/);
-            if (match?.[1])
-                found.push({ type: 'recaptcha-v2', siteKey: match[1], pageUrl: url });
+            if (match?.[1]) {
+                const seenKey = ['recaptcha-v2', '', match[1], ''].join(':');
+                if (!seen.has(seenKey)) {
+                    seen.add(seenKey);
+                    found.push({ type: 'recaptcha-v2', siteKey: match[1], pageUrl: url });
+                }
+            }
         }
         const hcaptchaEl = document.querySelector('.h-captcha[data-sitekey], div[data-hcaptcha-widget-id][data-sitekey]');
         if (hcaptchaEl) {
             const key = hcaptchaEl.getAttribute('data-sitekey');
-            if (key)
-                found.push({ type: 'hcaptcha', siteKey: key, pageUrl: url });
+            if (key) {
+                const seenKey = ['hcaptcha', '', key, ''].join(':');
+                if (!seen.has(seenKey)) {
+                    seen.add(seenKey);
+                    found.push({ type: 'hcaptcha', siteKey: key, pageUrl: url });
+                }
+            }
         }
         const turnstileEl = document.querySelector('.cf-turnstile[data-sitekey]');
         if (turnstileEl) {
             const key = turnstileEl.getAttribute('data-sitekey');
-            if (key)
-                found.push({ type: 'turnstile', siteKey: key, pageUrl: url });
+            if (key) {
+                const seenKey = ['turnstile', '', key, ''].join(':');
+                if (!seen.has(seenKey)) {
+                    seen.add(seenKey);
+                    found.push({
+                        type: 'turnstile',
+                        siteKey: key,
+                        pageUrl: url,
+                    });
+                }
+            }
+        }
+        const challengeStore = window.__agentbrowseTurnstileChallenges;
+        if (Array.isArray(challengeStore)) {
+            for (const challenge of challengeStore) {
+                const callbackId = challenge.callbackId ?? '';
+                const siteKey = challenge.siteKey ?? '';
+                const seenKey = ['turnstile', 'cloudflare-challenge', siteKey, callbackId].join(':');
+                if (!seen.has(seenKey)) {
+                    seen.add(seenKey);
+                    found.push({
+                        type: 'turnstile',
+                        variant: 'cloudflare-challenge',
+                        siteKey,
+                        pageUrl: url,
+                        captureSource: challenge.captureSource ?? 'render-hook',
+                        challengeReady: Boolean(siteKey && challenge.cData && challenge.chlPageData),
+                        action: challenge.action ?? '',
+                        cData: challenge.cData ?? '',
+                        chlPageData: challenge.chlPageData ?? '',
+                        callbackId,
+                        userAgent: challenge.userAgent ?? '',
+                    });
+                }
+            }
+        }
+        if (found.length === 0) {
+            const hasChallengePlatformScript = document.querySelectorAll("script[src*='/cdn-cgi/challenge-platform/']").length > 0;
+            const hasChallengeField = Array.from(document.querySelectorAll("input[name='cf-turnstile-response'], textarea[name='cf-turnstile-response']")).some((node) => {
+                const id = node.getAttribute('id') ?? '';
+                return id.startsWith('cf-chl-widget');
+            });
+            const hasCfChlOpt = Boolean(window._cf_chl_opt &&
+                typeof window._cf_chl_opt === 'object');
+            if (hasChallengePlatformScript || hasChallengeField || hasCfChlOpt) {
+                const seenKey = ['turnstile', 'cloudflare-challenge', '', ''].join(':');
+                if (!seen.has(seenKey)) {
+                    seen.add(seenKey);
+                    found.push({
+                        type: 'turnstile',
+                        variant: 'cloudflare-challenge',
+                        siteKey: '',
+                        pageUrl: url,
+                        captureSource: 'dom-fallback',
+                        challengeReady: false,
+                    });
+                }
+            }
         }
         return found;
     }, pageUrl);
@@ -43,10 +115,39 @@ export async function solveVisibleCaptchasWithOptions(page, solver, opts) {
         if (opts?.skipCaptcha?.(captcha)) {
             continue;
         }
+        if (captcha.variant === 'cloudflare-challenge' && captcha.challengeReady === false) {
+            const missingParamsOutcome = {
+                captcha,
+                injected: false,
+                clicked: false,
+                verified: false,
+                error: 'challenge-params-missing',
+            };
+            opts?.onProgress?.(`[captcha] detected ${captcha.type} on ${captcha.pageUrl}, but challenge params were not captured`);
+            outcomes.push(missingParamsOutcome);
+            opts?.onCaptchaResult?.(missingParamsOutcome);
+            continue;
+        }
+        if (captcha.variant === 'cloudflare-challenge') {
+            const transportRequiredOutcome = {
+                captcha,
+                injected: false,
+                clicked: false,
+                verified: false,
+                error: 'challenge-shared-transport-required',
+            };
+            opts?.onProgress?.(`[captcha] detected ${captcha.type} on ${captcha.pageUrl}, but Cloudflare challenge pages need shared browser/solver transport and that orchestration path is still deferred`);
+            outcomes.push(transportRequiredOutcome);
+            opts?.onCaptchaResult?.(transportRequiredOutcome);
+            continue;
+        }
         opts?.onProgress?.(`[captcha] detected ${captcha.type} on ${captcha.pageUrl}, sending to solver (timeout ${Math.ceil(timeoutMs / 1000)}s)`);
         try {
+            const solveRequest = toSolverRequest(captcha);
             const maybeToken = await Promise.race([
-                solver.solve(captcha.type, captcha.siteKey, captcha.pageUrl),
+                solveRequest
+                    ? solver.solve(captcha.type, captcha.siteKey, captcha.pageUrl, solveRequest)
+                    : solver.solve(captcha.type, captcha.siteKey, captcha.pageUrl),
                 sleep(timeoutMs).then(() => SOLVE_TIMEOUT),
             ]);
             if (maybeToken === SOLVE_TIMEOUT) {
@@ -62,8 +163,9 @@ export async function solveVisibleCaptchasWithOptions(page, solver, opts) {
                 opts?.onCaptchaResult?.(timeoutOutcome);
                 continue;
             }
-            const token = maybeToken;
-            await injectCaptchaToken(page, captcha, token);
+            const solution = maybeToken;
+            await applySolverUserAgent(page, solution.userAgent);
+            await injectCaptchaToken(page, captcha, solution.token);
             let verified = await verifyCaptchaResolved(page, captcha);
             let clicked = false;
             // Click only as last resort — it triggers a new Google challenge flow,
@@ -191,6 +293,7 @@ async function injectCaptchaToken(page, captcha, token) {
             }
         }
         else if (info.type === 'turnstile') {
+            const win = window;
             const selectors = [
                 "input[name='cf-turnstile-response']",
                 "textarea[name='cf-turnstile-response']",
@@ -204,8 +307,23 @@ async function injectCaptchaToken(page, captcha, token) {
                     node.dispatchEvent(new Event('change', { bubbles: true }));
                 }
             }
+            if (info.variant === 'cloudflare-challenge' && info.callbackId) {
+                const callback = win.__agentbrowseTurnstileCallbacks?.[info.callbackId];
+                if (typeof callback === 'function') {
+                    callback(info.token);
+                    win.__agentbrowseTurnstileSolved = {
+                        ...(win.__agentbrowseTurnstileSolved ?? {}),
+                        [info.callbackId]: info.token,
+                    };
+                }
+            }
         }
-    }, { type: captcha.type, token });
+    }, {
+        type: captcha.type,
+        token,
+        variant: captcha.variant,
+        callbackId: captcha.callbackId,
+    });
 }
 function recaptchaAnchorFrames(page, siteKey) {
     const all = page.frames().filter((frame) => frame.url().includes('/recaptcha/api2/anchor'));
@@ -400,6 +518,9 @@ async function verifyCaptchaResolved(page, captcha) {
                 "input[name*='hcaptcha-response']",
             ]);
         case 'turnstile':
+            if (captcha.variant === 'cloudflare-challenge') {
+                return verifyCloudflareChallengeCleared(page);
+            }
             return hasTokenInAnyFrame(page, [
                 "input[name='cf-turnstile-response']",
                 "textarea[name='cf-turnstile-response']",
@@ -407,6 +528,36 @@ async function verifyCaptchaResolved(page, captcha) {
             ]);
     }
 }
+async function verifyCloudflareChallengeCleared(page) {
+    const deadline = Date.now() + 10_000;
+    while (Date.now() < deadline) {
+        try {
+            const stillChallenge = await page.evaluate(() => {
+                const hasChallengePlatformScript = document.querySelectorAll("script[src*='/cdn-cgi/challenge-platform/']").length > 0;
+                const hasChallengeField = Array.from(document.querySelectorAll("input[name='cf-turnstile-response'], textarea[name='cf-turnstile-response']")).some((node) => {
+                    const id = node.getAttribute('id') ?? '';
+                    return id.startsWith('cf-chl-widget');
+                });
+                const hasCfChlOpt = Boolean(window._cf_chl_opt &&
+                    typeof window._cf_chl_opt === 'object');
+                const bodyText = document.body?.innerText ?? '';
+                return (hasChallengePlatformScript ||
+                    hasChallengeField ||
+                    hasCfChlOpt ||
+                    document.title === 'Just a moment...' ||
+                    bodyText.includes('Just a moment'));
+            });
+            if (!stillChallenge) {
+                return true;
+            }
+        }
+        catch {
+            // Page may be navigating between challenge and destination; retry briefly.
+        }
+        await sleep(500);
+    }
+    return false;
+}
 export function setupCaptchaMonitor(page, solver) {
     let solving = false;
     const checkAndSolve = async () => {
@@ -461,3 +612,27 @@ function formatSolveError(error) {
         return String(error);
     }
 }
+function toSolverRequest(captcha) {
+    if (captcha.type !== 'turnstile' || captcha.variant !== 'cloudflare-challenge') {
+        return undefined;
+    }
+    return {
+        action: captcha.action,
+        data: captcha.cData,
+        pagedata: captcha.chlPageData,
+        userAgent: captcha.userAgent,
+    };
+}
+async function applySolverUserAgent(page, userAgent) {
+    if (!userAgent || !userAgent.trim())
+        return;
+    const client = await page.createCDPSession();
+    try {
+        await client.send('Network.setUserAgentOverride', {
+            userAgent,
+        });
+    }
+    finally {
+        await client.detach().catch(() => { });
+    }
+}

package/dist/solver/captcha-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"captcha-runtime.d.ts","sourceRoot":"","sources":["../../src/solver/captcha-runtime.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAMF,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,yBAAyB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CA8GnC"}
+{"version":3,"file":"captcha-runtime.d.ts","sourceRoot":"","sources":["../../src/solver/captcha-runtime.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAMF,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,yBAAyB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CA0HnC"}

package/dist/solver/captcha-runtime.js

@@ -58,6 +58,8 @@ export async function solveCaptchasByCdp(cdpUrl, apiKey, opts) {
                     onProgress,
                     skipCaptcha: (captcha) => solvedKeys.has(captchaKey(captcha)),
                 });
+                const hasMissingParamsChallenge = outcomes.some((outcome) => outcome.error === 'challenge-params-missing');
+                const hasSharedTransportRequiredChallenge = outcomes.some((outcome) => outcome.error === 'challenge-shared-transport-required');
                 for (const outcome of outcomes) {
                     const key = captchaKey(outcome.captcha);
                     if (outcome.injected || outcome.verified) {
@@ -69,6 +71,12 @@ export async function solveCaptchasByCdp(cdpUrl, apiKey, opts) {
                     }
                 }
                 const unsolvedAfter = unsolvedBefore.filter((captcha) => !solvedKeys.has(captchaKey(captcha)));
+                if (hasMissingParamsChallenge) {
+                    return finalizeResult(solved, detectedKeys, verifiedKeys, false, onProgress);
+                }
+                if (hasSharedTransportRequiredChallenge) {
+                    return finalizeResult(solved, detectedKeys, verifiedKeys, false, onProgress);
+                }
                 if (unsolvedAfter.length === 0) {
                     return finalizeResult(solved, detectedKeys, verifiedKeys, false, onProgress);
                 }

package/dist/solver/captcha-solver.d.ts

@@ -6,6 +6,16 @@ export type CaptchaSolverConfig = {
     taskPollIntervalMs?: number;
     taskTimeoutMs?: number;
 };
+export type CaptchaSolveRequest = {
+    action?: string;
+    data?: string;
+    pagedata?: string;
+    userAgent?: string;
+};
+export type CaptchaSolveResult = {
+    token: string;
+    userAgent?: string;
+};
 /**
  * Backend CAPTCHA gateway client. No direct provider keys are used in CLI.
  */
@@ -16,7 +26,7 @@ export declare class CaptchaSolver {
     private readonly taskPollIntervalMs;
     private readonly taskTimeoutMs;
     constructor(config: CaptchaSolverConfig);
-    solve(type: CaptchaType, siteKey: string, pageUrl: string): Promise<string>;
+    solve(type: CaptchaType, siteKey: string, pageUrl: string, request?: CaptchaSolveRequest): Promise<CaptchaSolveResult>;
     private createTask;
     private getTaskStatus;
     private request;

package/dist/solver/captcha-solver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"captcha-solver.d.ts","sourceRoot":"","sources":["../../src/solver/captcha-solver.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC;AAEpE,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAoBF;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,mBAAmB;IAejC,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAkBnE,UAAU;YAYV,aAAa;YAOb,OAAO;CAsCtB"}
+{"version":3,"file":"captcha-solver.d.ts","sourceRoot":"","sources":["../../src/solver/captcha-solver.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC;AAEpE,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAiBF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAMF;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,mBAAmB;IAejC,KAAK,CACT,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC;YAqBhB,UAAU;YAiBV,aAAa;YAOb,OAAO;CAsCtB"}

package/dist/solver/captcha-solver.js

@@ -23,14 +23,17 @@ export class CaptchaSolver {
             throw new Error('CaptchaSolver: apiUrl is required (set AGENTPAY_API_URL)');
         }
     }
-    async solve(type, siteKey, pageUrl) {
-        const task = await this.createTask(type, siteKey, pageUrl);
+    async solve(type, siteKey, pageUrl, request) {
+        const task = await this.createTask(type, siteKey, pageUrl, request);
         const deadline = Date.now() + this.taskTimeoutMs;
         while (Date.now() < deadline) {
             await sleep(this.taskPollIntervalMs);
             const status = await this.getTaskStatus(task.task_id);
             if (status.status === 'ready' && status.token) {
-                return status.token;
+                return {
+                    token: status.token,
+                    userAgent: status.user_agent,
+                };
             }
             if (status.status === 'failed') {
                 throw new Error(`CAPTCHA solving failed: ${status.error || 'provider error'}`);
@@ -38,11 +41,15 @@ export class CaptchaSolver {
         }
         throw new Error(`CAPTCHA solving timed out after ${Math.ceil(this.taskTimeoutMs / 1000)}s`);
     }
-    async createTask(type, siteKey, pageUrl) {
+    async createTask(type, siteKey, pageUrl, request) {
         return this.request('POST', '/tools/captcha/tasks', {
             type,
             site_key: siteKey,
             page_url: pageUrl,
+            action: request?.action,
+            data: request?.data,
+            pagedata: request?.pagedata,
+            user_agent: request?.userAgent,
         });
     }
     async getTaskStatus(taskId) {

package/dist/solver/turnstile-challenge.d.ts

@@ -0,0 +1,3 @@
+export declare function isTurnstileApiRequest(url: string): boolean;
+export declare function buildTurnstileApiShimSource(originalUrl: string): string;
+//# sourceMappingURL=turnstile-challenge.d.ts.map

package/dist/solver/turnstile-challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile-challenge.d.ts","sourceRoot":"","sources":["../../src/solver/turnstile-challenge.ts"],"names":[],"mappings":"AAKA,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAY1D;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA6JvE"}

package/dist/solver/turnstile-challenge.js

@@ -0,0 +1,173 @@
+const TURNSTILE_HOST = 'challenges.cloudflare.com';
+const TURNSTILE_PATH_FRAGMENT = '/turnstile/';
+const TURNSTILE_API_SUFFIX = '/api.js';
+const AGENTBROWSE_PASSTHROUGH_PARAM = '__agentbrowse_passthrough';
+export function isTurnstileApiRequest(url) {
+    try {
+        const parsed = new URL(url);
+        return (parsed.hostname === TURNSTILE_HOST &&
+            parsed.pathname.includes(TURNSTILE_PATH_FRAGMENT) &&
+            parsed.pathname.endsWith(TURNSTILE_API_SUFFIX) &&
+            !parsed.searchParams.has(AGENTBROWSE_PASSTHROUGH_PARAM));
+    }
+    catch {
+        return false;
+    }
+}
+export function buildTurnstileApiShimSource(originalUrl) {
+    const serializedUrl = JSON.stringify(originalUrl);
+    return `
+(function () {
+  const originalUrl = ${serializedUrl};
+  const passthroughParam = ${JSON.stringify(AGENTBROWSE_PASSTHROUGH_PARAM)};
+  const callbacksKey = '__agentbrowseTurnstileCallbacks';
+  const challengesKey = '__agentbrowseTurnstileChallenges';
+  const pendingRendersKey = '__agentbrowseTurnstilePendingRenders';
+  const scriptLoadKey = '__agentbrowseTurnstileRealScriptLoading';
+  const stateKey = '__agentbrowseTurnstileState';
+
+  function ensureStores(win) {
+    if (!Array.isArray(win[challengesKey])) {
+      win[challengesKey] = [];
+    }
+    if (!win[callbacksKey] || typeof win[callbacksKey] !== 'object') {
+      win[callbacksKey] = {};
+    }
+    if (!win[stateKey] || typeof win[stateKey] !== 'object') {
+      win[stateKey] = { nextCallbackId: 1 };
+    }
+    if (!Array.isArray(win[pendingRendersKey])) {
+      win[pendingRendersKey] = [];
+    }
+  }
+
+  function addPassthroughParam(url) {
+    const parsed = new URL(url);
+    parsed.searchParams.set(passthroughParam, '1');
+    parsed.searchParams.delete('onload');
+    return parsed.toString();
+  }
+
+  function appendRealScript(doc, win, src, stubRender) {
+    if (win[scriptLoadKey]) {
+      return;
+    }
+    win[scriptLoadKey] = true;
+    const script = doc.createElement('script');
+    script.src = addPassthroughParam(src);
+    script.async = true;
+    script.onload = function () {
+      win[scriptLoadKey] = false;
+      const pendingRenders = Array.isArray(win[pendingRendersKey]) ? win[pendingRendersKey].slice() : [];
+      win[pendingRendersKey] = [];
+      const realTurnstile = win.turnstile;
+      if (!realTurnstile || typeof realTurnstile.render !== 'function' || realTurnstile.render === stubRender) {
+        return;
+      }
+      for (const entry of pendingRenders) {
+        try {
+          realTurnstile.render(entry.container, entry.options);
+        } catch {
+          // Preserve page execution if passthrough replay fails.
+        }
+      }
+    };
+    (doc.head || doc.documentElement).appendChild(script);
+  }
+
+  function notifyOnload(win, onloadName) {
+    if (!onloadName) return;
+    const current = win[onloadName];
+    if (typeof current === 'function') {
+      current();
+      return;
+    }
+
+    try {
+      let assignedValue;
+      Object.defineProperty(win, onloadName, {
+        configurable: true,
+        enumerable: true,
+        get: function () {
+          return assignedValue;
+        },
+        set: function (value) {
+          assignedValue = value;
+          if (typeof value === 'function') {
+            value();
+          }
+        },
+      });
+    } catch {
+      // Ignore non-configurable global callback names.
+    }
+  }
+
+  const win = window;
+  const doc = document;
+  const parsedUrl = new URL(originalUrl);
+  const onloadName = parsedUrl.searchParams.get('onload') || '';
+  ensureStores(win);
+  const callbacks = win[callbacksKey];
+  const challenges = win[challengesKey];
+  const pendingRenders = win[pendingRendersKey];
+  const state = win[stateKey];
+  win.__agentbrowseTurnstileShimInstalled = true;
+  const userAgent = (win.navigator && typeof win.navigator.userAgent === 'string')
+    ? win.navigator.userAgent
+    : '';
+
+  const stubRender = function (container, options) {
+      const isChallenge = Boolean(
+        options && (
+          (typeof options.cData === 'string' && options.cData) ||
+          (typeof options.chlPageData === 'string' && options.chlPageData)
+        )
+      );
+
+      if (!isChallenge) {
+        state.lastShimMode = 'passthrough';
+        pendingRenders.push({ container: container, options: options });
+        appendRealScript(doc, win, originalUrl, stubRender);
+        return 'agentbrowse-turnstile-passthrough';
+      }
+
+      const callbackId = typeof options.callback === 'function'
+        ? 'cf-turnstile-callback-' + String(state.nextCallbackId || 1)
+        : '';
+      if (callbackId) {
+        callbacks[callbackId] = options.callback;
+        state.nextCallbackId = (state.nextCallbackId || 1) + 1;
+      }
+
+      challenges.push({
+        siteKey: typeof options.sitekey === 'string'
+          ? options.sitekey
+          : typeof options.siteKey === 'string'
+          ? options.siteKey
+          : '',
+        action: typeof options.action === 'string' ? options.action : '',
+        cData: typeof options.cData === 'string' ? options.cData : '',
+        chlPageData: typeof options.chlPageData === 'string' ? options.chlPageData : '',
+        callbackId: callbackId,
+        userAgent: userAgent,
+        captureSource: 'api-shim',
+      });
+      state.lastShimMode = 'challenge-captured';
+
+      return 'agentbrowse-turnstile-challenge';
+    };
+
+  win.turnstile = {
+    render: stubRender,
+    execute: function () {
+      return 'agentbrowse-turnstile-challenge';
+    },
+    reset: function () {},
+    remove: function () {},
+  };
+
+  notifyOnload(win, onloadName);
+})();
+`;
+}

package/dist/solver/types.d.ts

@@ -37,19 +37,23 @@ export type SolverConfig = {
     };
     defaults?: {
         headless?: boolean;
-        captchaAutoSolve?: boolean;
     };
 };
 export type CaptchaType = 'recaptcha-v2' | 'hcaptcha' | 'turnstile';
+export type TurnstileVariant = 'standalone' | 'cloudflare-challenge';
+export type TurnstileCaptureSource = 'render-hook' | 'api-shim' | 'dom-fallback';
 export type DetectedCaptcha = {
     type: CaptchaType;
     siteKey: string;
     pageUrl: string;
-};
-export type CaptchaSolverOptions = {
-    apiKey: string;
-    apiUrl?: string;
-    autoSolve?: boolean;
+    variant?: TurnstileVariant;
+    captureSource?: TurnstileCaptureSource;
+    challengeReady?: boolean;
+    action?: string;
+    cData?: string;
+    chlPageData?: string;
+    callbackId?: string;
+    userAgent?: string;
 };
 export type LaunchOptions = {
     headless?: boolean;
@@ -60,7 +64,5 @@ export type LaunchOptions = {
         width: number;
         height: number;
     };
-    captchaInitialSolveTimeoutMs?: number;
-    captchaSolver?: CaptchaSolverOptions;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/solver/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/solver/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,kBAAkB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACtC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/solver/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,kBAAkB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC;AAEpE,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,sBAAsB,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,CAAC;AAEjF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuanu-ai/agentbrowse",
-  "version": "0.2.12",
+  "version": "0.2.14",
   "type": "module",
   "description": "Standalone browser automation CLI for AI agents: launch, observe, act, extract, and solve captcha",
   "keywords": [

package/dist/secrets/request-guidance.d.ts

@@ -1,24 +0,0 @@
-import type { TargetDescriptor } from '../runtime-state.js';
-import type { FillableFormFieldBinding, FillableFormGuidanceHint, FillableFormRecommendedTiming, StoredSecretFieldKey } from './types.js';
-declare function collectVisibleFieldEvidence(fields: ReadonlyArray<FillableFormFieldBinding>, targetByRef: ReadonlyMap<string, TargetDescriptor>): string;
-declare function collectBlockingValidationEvidence(fields: ReadonlyArray<FillableFormFieldBinding>, targetByRef: ReadonlyMap<string, TargetDescriptor>): string[];
-declare function collectPassiveRequiredEvidence(fields: ReadonlyArray<FillableFormFieldBinding>, targetByRef: ReadonlyMap<string, TargetDescriptor>): string[];
-declare function hasCorePaymentCardFields(fieldKeys: ReadonlySet<StoredSecretFieldKey>): boolean;
-declare function looksLikePrimaryLoginForm(fieldKeys: ReadonlySet<StoredSecretFieldKey>): boolean;
-declare function looksLikeStrongIdentityForm(fieldKeys: ReadonlySet<StoredSecretFieldKey>): boolean;
-export declare function buildFillableFormGuidance(params: {
-    purpose: string;
-    recommendedTiming?: FillableFormRecommendedTiming;
-    fields: ReadonlyArray<FillableFormFieldBinding>;
-    targetByRef: ReadonlyMap<string, TargetDescriptor>;
-}): FillableFormGuidanceHint;
-export declare const __testRequestGuidance: {
-    collectVisibleFieldEvidence: typeof collectVisibleFieldEvidence;
-    collectBlockingValidationEvidence: typeof collectBlockingValidationEvidence;
-    collectPassiveRequiredEvidence: typeof collectPassiveRequiredEvidence;
-    hasCorePaymentCardFields: typeof hasCorePaymentCardFields;
-    looksLikePrimaryLoginForm: typeof looksLikePrimaryLoginForm;
-    looksLikeStrongIdentityForm: typeof looksLikeStrongIdentityForm;
-};
-export {};
-//# sourceMappingURL=request-guidance.d.ts.map

package/dist/secrets/request-guidance.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"request-guidance.d.ts","sourceRoot":"","sources":["../../src/secrets/request-guidance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EACV,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAC7B,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAoCpB,iBAAS,2BAA2B,CAClC,MAAM,EAAE,aAAa,CAAC,wBAAwB,CAAC,EAC/C,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACjD,MAAM,CAYR;AAED,iBAAS,iCAAiC,CACxC,MAAM,EAAE,aAAa,CAAC,wBAAwB,CAAC,EAC/C,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACjD,MAAM,EAAE,CA+BV;AAED,iBAAS,8BAA8B,CACrC,MAAM,EAAE,aAAa,CAAC,wBAAwB,CAAC,EAC/C,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACjD,MAAM,EAAE,CAsBV;AAED,iBAAS,wBAAwB,CAAC,SAAS,EAAE,WAAW,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAEvF;AAED,iBAAS,yBAAyB,CAAC,SAAS,EAAE,WAAW,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAExF;AAED,iBAAS,2BAA2B,CAAC,SAAS,EAAE,WAAW,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAK1F;AAmBD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAClD,MAAM,EAAE,aAAa,CAAC,wBAAwB,CAAC,CAAC;IAChD,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACpD,GAAG,wBAAwB,CA4C3B;AAED,eAAO,MAAM,qBAAqB;;;;;;;CAOjC,CAAC"}