@nuanu-ai/agentbrowse 0.2.46 → 0.2.48

package/README.md

@@ -60,6 +60,14 @@ agentbrowse launch https://example.com
 agentbrowse launch https://example.com --headless
 ```
 
+When the starting page is already known, prefer `launch <url>` directly to
+that page. Avoid `launch` on a blank tab followed immediately by
+`start-session` and `navigate`, because the first workflow session and timeline
+will otherwise begin on the current page state, often `about:blank`.
+
+If an older workflow session is still open in the persisted browser context,
+`launch` cancels that session first before replacing the browser record.
+
 By default, `launch` runs in headful mode. Use `--headless` only when you
 intentionally want a hidden browser:
 
@@ -70,7 +78,30 @@ agentbrowse launch https://example.com --headless
 If you want to state the default mode explicitly in scripts, use
 `--headful`.
 
-Navigate current session:
+Start workflow session on the current browser, optionally with an explicit
+operator-facing name:
+
+```bash
+agentbrowse start-session
+agentbrowse start-session "Acme checkout smoke"
+agentbrowse start-session "Acme checkout smoke" --merchant-name "Acme"
+```
+
+If a previous workflow session is still active in the persisted browser
+context, re-running `start-session` cancels that older session first and then
+binds a fresh one.
+
+Complete the active workflow session without closing the browser:
+
+```bash
+agentbrowse end-session
+```
+
+Use `end-session` for the normal successful workflow close-out. Do not rely on
+`close` to mark a run successful.
+
+Navigate current session when you intentionally change URL after the workflow
+already started:
 
 ```bash
 agentbrowse navigate https://example.com/checkout
@@ -112,22 +143,26 @@ Inspect or close the current session:
 
 ```bash
 agentbrowse status
+agentbrowse end-session
 agentbrowse close
 ```
 
-Refresh stored-secret metadata for the current page or a specific URL:
+Refresh stored-secret metadata for the current page or a specific URL after
+`start-session`:
 
 ```bash
 agentbrowse get-secrets-catalog
 agentbrowse get-secrets-catalog https://example.com/checkout
 ```
 
-Create and complete a protected stored-secret fill:
+Create and complete a protected stored-secret fill after `start-session` and
+`observe`:
 
 ```bash
-agentbrowse create-intent f12 ss_card_visa
-agentbrowse poll-intent intent_123
-agentbrowse fill-secret f12 intent_123
+agentbrowse request-secret f12 ss_card_visa --merchant-name "Acme"
+agentbrowse poll-secret sr_123
+agentbrowse fill-secret f12 sr_123
+agentbrowse end-session
 ```
 
 Solve captcha when the active session supports it:
@@ -151,6 +186,8 @@ overrides.
 ## Runtime model
 
 - `agentbrowse` persists the active browser session under `~/.agentpay`
+- browser bootstrap lives in `~/.agentpay/browse-session.json`
+- workflow/run context lives in `~/.agentpay/browse-workflow.json`
 - `agentbrowse init` persists AgentPay gateway configuration for future runs
 - mock stored secrets for live/manual runs come from one canonical file:
   `~/.agentpay/mock-stored-secrets.json`
@@ -158,14 +195,35 @@ overrides.
   not an additional runtime config source
 - all commands require AgentPay gateway configuration; prefer `agentbrowse init`
   and use env vars only as runtime overrides
+- `launch` is technical browser bootstrap only; it does not start workflow telemetry, but when the first working page is already known, prefer `launch <url>` so the workflow starts on the real page instead of `about:blank`
+- `launch` fail-closes an older active workflow session before replacing the persisted browser context
+- `start-session` starts the active workflow/run context on top of the current browser session
+- `start-session` creates the backend product session through `POST /api/sessions`
+- `start-session` may optionally attach `merchant_name` when the vendor is already known from the visible page or task context
+- re-running `start-session` fail-closes the older active workflow session through `POST /api/sessions/:id/complete` before creating a new one
+- page/runtime commands such as `navigate`, `observe`, `act`, `extract`, `screenshot`, `status`, `solve-captcha`, `request-secret`, `poll-secret`, and `fill-secret` require that active product session; `launch` alone is not enough
+- use `navigate` for explicit later URL transitions inside an active workflow session, not as a mandatory first step when the initial page is already known
+- `end-session` completes the active workflow session through `POST /api/sessions/:id/complete` and keeps the browser session alive
+- normal successful workflow close-out should use `end-session`; `close` is browser teardown and cancels any still-active workflow session instead of completing it successfully
+- `POST /api/sessions/:id/complete` is the only terminal session transition; ordinary `POST /api/sessions/:id/events` exports are non-terminal by contract
+- the same `start-session` request also carries the current telemetry envelope in the same OTLP structure that browse-cli already exports today
+- backend fan-out forwards that telemetry envelope through the existing telemetry ingest/index/forward path instead of inventing a new telemetry schema from product session fields
+- after `start-session`, ordinary workflow-relevant command step exports go through `POST /api/sessions/:id/events`
+- `status` stays local to the CLI as a diagnostic probe and does not emit workflow session events
+- `close` auto-cancels an active workflow session through `POST /api/sessions/:id/complete` before deleting the local browser session record
+- protected requests are session-bound:
+  - `get-secrets-catalog(url?)` reads host-filtered catalog metadata through `GET /api/sessions/:id/secrets/catalog`
+  - `request-secret` creates or reuses one request through `POST /api/sessions/:id/secret-requests` and must send `--merchant-name "<vendor>"`
+  - `poll-secret` reads request state through `GET /api/sessions/:id/secret-requests/:requestId`
+  - `fill-secret` claims the approved one-time payload through `POST /api/sessions/:id/secret-requests/:requestId/claim-secret`
 - the external AI agent remains the orchestration owner
 - `agentbrowse` is a single-step browser toolset, not an internal reactive form loop
 - runtime may enrich `observe` output with semantic hints and validation evidence, but it should not silently auto-submit, auto-retry, or maintain hidden durable field-state machines on behalf of the agent
-- protected fills use an explicit intent flow:
+- protected fills use an explicit session-first request flow:
   - `get-secrets-catalog(url?)`
-  - `create-intent(fillRef, storedSecretRef)`
-  - `poll-intent(intentId)`
-  - `fill-secret(fillRef, intentId)`
+  - `request-secret(fillRef, storedSecretRef, --merchant-name name)`
+  - `poll-secret(requestId)`
+  - `fill-secret(fillRef, requestId)`
 - main workflow is:
   - `observe(goal?)`
   - `act(targetRef, action, value?)`
@@ -203,5 +261,6 @@ See package docs:
 
 - [Package docs index](https://github.com/nuanu-ai/mercuryo-agent-pay/tree/main/packages/browse-cli/docs)
 - [CLI usage guide](https://github.com/nuanu-ai/mercuryo-agent-pay/blob/main/packages/browse-cli/docs/testing/cli-usage-guide.md)
+- [Tracked PoCs](https://github.com/nuanu-ai/mercuryo-agent-pay/tree/main/packages/browse-cli/poc)
 
 Releases are published automatically from `main` after checks pass. `@nuanu-ai/agentbrowse` is the only CLI package published by the current npm release workflow.

package/dist/agentpay-gateway.d.ts

@@ -5,5 +5,14 @@ export interface AgentpayGatewayConfig {
 export declare function tryResolveAgentpayGatewayConfig(): AgentpayGatewayConfig | null;
 export declare function resolveAgentpayGatewayConfig(): AgentpayGatewayConfig;
 export declare function applyAgentpayGatewayEnv(gateway: AgentpayGatewayConfig): void;
+export declare function buildAgentpayTelemetryTracesUrl(apiUrl: string): string;
+export declare function buildAgentpaySessionsUrl(apiUrl: string): string;
+export declare function buildAgentpaySessionUrl(apiUrl: string, sessionId: string): string;
+export declare function buildAgentpaySessionSecretsCatalogUrl(apiUrl: string, sessionId: string): string;
+export declare function buildAgentpaySessionEventsUrl(apiUrl: string, sessionId: string): string;
+export declare function buildAgentpayCompleteSessionUrl(apiUrl: string, sessionId: string): string;
+export declare function buildAgentpaySessionSecretRequestsUrl(apiUrl: string, sessionId: string): string;
+export declare function buildAgentpaySessionSecretRequestUrl(apiUrl: string, sessionId: string, requestId: string): string;
+export declare function buildAgentpayClaimSecretUrl(apiUrl: string, sessionId: string, requestId: string): string;
 export declare function preflightAgentpayGateway(): Promise<AgentpayGatewayConfig>;
 //# sourceMappingURL=agentpay-gateway.d.ts.map

package/dist/agentpay-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentpay-gateway.d.ts","sourceRoot":"","sources":["../src/agentpay-gateway.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAYD,wBAAgB,+BAA+B,IAAI,qBAAqB,GAAG,IAAI,CAgB9E;AAED,wBAAgB,4BAA4B,IAAI,qBAAqB,CAMpE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAG5E;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAI/E"}
+{"version":3,"file":"agentpay-gateway.d.ts","sourceRoot":"","sources":["../src/agentpay-gateway.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAgBD,wBAAgB,+BAA+B,IAAI,qBAAqB,GAAG,IAAI,CAgB9E;AAED,wBAAgB,4BAA4B,IAAI,qBAAqB,CAMpE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAG5E;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/F;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/F;AAED,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAI/E"}

package/dist/agentpay-gateway.js

@@ -9,6 +9,9 @@ function trimOrUndefined(value) {
 function normalizeApiUrl(value) {
     return value.replace(/\/$/, '');
 }
+function appendApiPath(apiUrl, suffix) {
+    return `${normalizeApiUrl(apiUrl)}${suffix.startsWith('/') ? suffix : `/${suffix}`}`;
+}
 export function tryResolveAgentpayGatewayConfig() {
     const solverConfig = readConfig();
     const apiKey = trimOrUndefined(process.env.AGENTPAY_API_KEY) || trimOrUndefined(solverConfig.agentpay?.apiKey);
@@ -34,6 +37,33 @@ export function applyAgentpayGatewayEnv(gateway) {
     process.env.AGENTPAY_API_KEY = gateway.apiKey;
     process.env.AGENTPAY_API_URL = gateway.apiUrl;
 }
+export function buildAgentpayTelemetryTracesUrl(apiUrl) {
+    return appendApiPath(apiUrl, '/telemetry/traces');
+}
+export function buildAgentpaySessionsUrl(apiUrl) {
+    return appendApiPath(apiUrl, '/sessions');
+}
+export function buildAgentpaySessionUrl(apiUrl, sessionId) {
+    return appendApiPath(apiUrl, `/sessions/${sessionId}`);
+}
+export function buildAgentpaySessionSecretsCatalogUrl(apiUrl, sessionId) {
+    return appendApiPath(apiUrl, `/sessions/${sessionId}/secrets/catalog`);
+}
+export function buildAgentpaySessionEventsUrl(apiUrl, sessionId) {
+    return appendApiPath(apiUrl, `/sessions/${sessionId}/events`);
+}
+export function buildAgentpayCompleteSessionUrl(apiUrl, sessionId) {
+    return appendApiPath(apiUrl, `/sessions/${sessionId}/complete`);
+}
+export function buildAgentpaySessionSecretRequestsUrl(apiUrl, sessionId) {
+    return appendApiPath(apiUrl, `/sessions/${sessionId}/secret-requests`);
+}
+export function buildAgentpaySessionSecretRequestUrl(apiUrl, sessionId, requestId) {
+    return appendApiPath(apiUrl, `/sessions/${sessionId}/secret-requests/${requestId}`);
+}
+export function buildAgentpayClaimSecretUrl(apiUrl, sessionId, requestId) {
+    return appendApiPath(apiUrl, `/sessions/${sessionId}/secret-requests/${requestId}/claim-secret`);
+}
 export async function preflightAgentpayGateway() {
     const gateway = resolveAgentpayGatewayConfig();
     applyAgentpayGatewayEnv(gateway);

package/dist/agentpay-stagehand-llm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentpay-stagehand-llm.d.ts","sourceRoot":"","sources":["../src/agentpay-stagehand-llm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAmBnE,qBAAa,sCAAuC,SAAQ,KAAK;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;gBAGjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B;CAWJ;AAsDD,qBAAa,0BAA2B,SAAQ,SAAS;IAI3C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,IAAI,EAAG,UAAU,CAAU;IAC3B,aAAa,KAAM;gBAEU,OAAO,EAAE,qBAAqB;IAKrD,oBAAoB,CAAC,CAAC,EAC1B,IAAI,EAAE,2BAA2B,GAAG;QAClC,OAAO,EAAE;YACP,cAAc,EAAE;gBACd,IAAI,EAAE,MAAM,CAAC;gBACb,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5C,CAAC;SACH,CAAC;KACH,GACA,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC1B,oBAAoB,CAAC,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,CAAC,CAAC;CA8F3F;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,qBAAqB,GAC7B,0BAA0B,CAE5B"}
+{"version":3,"file":"agentpay-stagehand-llm.d.ts","sourceRoot":"","sources":["../src/agentpay-stagehand-llm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAoBnE,qBAAa,sCAAuC,SAAQ,KAAK;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;gBAGjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B;CAWJ;AAsDD,qBAAa,0BAA2B,SAAQ,SAAS;IAI3C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,IAAI,EAAG,UAAU,CAAU;IAC3B,aAAa,KAAM;gBAEU,OAAO,EAAE,qBAAqB;IAKrD,oBAAoB,CAAC,CAAC,EAC1B,IAAI,EAAE,2BAA2B,GAAG;QAClC,OAAO,EAAE;YACP,cAAc,EAAE;gBACd,IAAI,EAAE,MAAM,CAAC;gBACb,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5C,CAAC;SACH,CAAC;KACH,GACA,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC1B,oBAAoB,CAAC,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,CAAC,CAAC;CAyG3F;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,qBAAqB,GAC7B,0BAA0B,CAE5B"}

package/dist/agentpay-stagehand-llm.js

@@ -1,4 +1,5 @@
 import { LLMClient, toJsonSchema, } from '@browserbasehq/stagehand';
+import { tracedFetch } from './command-api-tracing.js';
 export class AgentpayStructuredOutputTruncatedError extends Error {
     status;
     provider;
@@ -102,7 +103,7 @@ export class AgentpayStagehandLlmClient extends LLMClient {
         const result = await withRetry(async () => {
             let response;
             try {
-                response = await fetch(url, {
+                response = await tracedFetch(url, {
                     method: 'POST',
                     headers: {
                         Authorization: `Bearer ${this.gateway.apiKey}`,
@@ -111,6 +112,13 @@ export class AgentpayStagehandLlmClient extends LLMClient {
                     },
                     body: JSON.stringify(body),
                     signal: AbortSignal.timeout(45_000),
+                }, {
+                    spanName: 'agentpay.llm.structured_chat',
+                    attributes: {
+                        'agentbrowse.api.system': 'agentpay',
+                        'agentbrowse.api.purpose': body.purpose,
+                        'agentbrowse.api.route': '/tools/llm/structured-chat',
+                    },
                 });
             }
             catch (err) {

package/dist/command-api-tracing.d.ts

@@ -0,0 +1,19 @@
+type ApiTraceContext = {
+    runId?: string;
+    stepId?: string;
+    command: string;
+};
+type TracedFetchOptions = {
+    spanName: string;
+    attributes?: Record<string, unknown>;
+    fetchImpl?: typeof fetch;
+};
+type TracedStepOperationOptions = {
+    spanName: string;
+    attributes?: Record<string, unknown>;
+};
+export declare function withApiTraceContext<T>(context: ApiTraceContext, run: () => Promise<T>): Promise<T>;
+export declare function tracedStepOperation<T>(run: () => Promise<T> | T, options?: TracedStepOperationOptions): Promise<T>;
+export declare function tracedFetch(input: RequestInfo | URL, init?: RequestInit, options?: TracedFetchOptions): Promise<Response>;
+export {};
+//# sourceMappingURL=command-api-tracing.d.ts.map

package/dist/command-api-tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-api-tracing.d.ts","sourceRoot":"","sources":["../src/command-api-tracing.ts"],"names":[],"mappings":"AAGA,KAAK,eAAe,GAAG;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC;AAoEF,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC,CAEZ;AAED,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACzB,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,CAAC,CAAC,CAqCZ;AAED,wBAAsB,WAAW,CAC/B,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAuCnB"}

package/dist/command-api-tracing.js

@@ -0,0 +1,137 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { appendStepChildSpan } from './run-store.js';
+const apiTraceContextStorage = new AsyncLocalStorage();
+function sanitizeTraceUrl(value) {
+    try {
+        const parsed = new URL(value);
+        parsed.username = '';
+        parsed.password = '';
+        parsed.search = '';
+        parsed.hash = '';
+        return parsed.toString();
+    }
+    catch {
+        return value;
+    }
+}
+function resolveMethod(input, init) {
+    const initMethod = init?.method?.trim();
+    if (initMethod) {
+        return initMethod.toUpperCase();
+    }
+    if (typeof Request !== 'undefined' && input instanceof Request) {
+        return input.method.toUpperCase();
+    }
+    return 'GET';
+}
+function resolveUrl(input) {
+    if (input instanceof URL) {
+        return input.toString();
+    }
+    if (typeof input === 'string') {
+        return input;
+    }
+    if (typeof Request !== 'undefined' && input instanceof Request) {
+        return input.url;
+    }
+    return String(input);
+}
+function buildTraceAttributes(context, input, init, extraAttributes) {
+    const url = resolveUrl(input);
+    const method = resolveMethod(input, init);
+    let hostname;
+    let pathname;
+    try {
+        const parsed = new URL(url);
+        hostname = parsed.host;
+        pathname = parsed.pathname;
+    }
+    catch { }
+    return {
+        'agentbrowse.api.command': context.command,
+        'http.request.method': method,
+        'url.full': sanitizeTraceUrl(url),
+        ...(hostname ? { 'server.address': hostname } : {}),
+        ...(pathname ? { 'url.path': pathname } : {}),
+        ...(extraAttributes ?? {}),
+    };
+}
+export async function withApiTraceContext(context, run) {
+    return apiTraceContextStorage.run(context, run);
+}
+export async function tracedStepOperation(run, options) {
+    const context = apiTraceContextStorage.getStore();
+    if (!context?.runId || !context.stepId || !options?.spanName) {
+        return run();
+    }
+    const startedAt = new Date().toISOString();
+    const attributes = {
+        'agentbrowse.api.command': context.command,
+        ...(options.attributes ?? {}),
+    };
+    try {
+        const result = await run();
+        appendStepChildSpan({
+            runId: context.runId,
+            stepId: context.stepId,
+            name: options.spanName,
+            startedAt,
+            endedAt: new Date().toISOString(),
+            statusCode: 'ok',
+            attributes,
+        });
+        return result;
+    }
+    catch (error) {
+        appendStepChildSpan({
+            runId: context.runId,
+            stepId: context.stepId,
+            name: options.spanName,
+            startedAt,
+            endedAt: new Date().toISOString(),
+            statusCode: 'error',
+            statusMessage: error instanceof Error ? error.message : String(error),
+            attributes,
+        });
+        throw error;
+    }
+}
+export async function tracedFetch(input, init, options) {
+    const fetchImpl = options?.fetchImpl ?? fetch;
+    const context = apiTraceContextStorage.getStore();
+    if (!context?.runId || !context.stepId || !options?.spanName) {
+        return fetchImpl(input, init);
+    }
+    const startedAt = new Date().toISOString();
+    const attributes = buildTraceAttributes(context, input, init, options.attributes);
+    try {
+        const response = await fetchImpl(input, init);
+        appendStepChildSpan({
+            runId: context.runId,
+            stepId: context.stepId,
+            name: options.spanName,
+            startedAt,
+            endedAt: new Date().toISOString(),
+            statusCode: response.ok ? 'ok' : 'error',
+            ...(response.ok ? {} : { statusMessage: `http_${response.status}` }),
+            attributes: {
+                ...attributes,
+                'http.response.status_code': response.status,
+            },
+        });
+        return response;
+    }
+    catch (error) {
+        appendStepChildSpan({
+            runId: context.runId,
+            stepId: context.stepId,
+            name: options.spanName,
+            startedAt,
+            endedAt: new Date().toISOString(),
+            statusCode: 'error',
+            statusMessage: error instanceof Error ? error.message : String(error),
+            attributes,
+        });
+        throw error;
+    }
+}

package/dist/commands/act.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"act.d.ts","sourceRoot":"","sources":["../../src/commands/act.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAuCnD,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA2HxF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,CAAC;AA4V7B,wBAAsB,GAAG,CACvB,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAstBf"}
+{"version":3,"file":"act.d.ts","sourceRoot":"","sources":["../../src/commands/act.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAiCnD,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAiNxF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,CAAC;AAkR7B,wBAAsB,GAAG,CACvB,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CA01Bf"}