@nuanu-ai/agentbrowse 0.2.7 → 0.2.9

package/dist/secrets/types.d.ts

@@ -0,0 +1,91 @@
+export declare const LOGIN_FIELD_KEYS: readonly ["username", "password"];
+export declare const IDENTITY_FIELD_KEYS: readonly ["full_name", "document_number", "date_of_birth", "nationality", "issue_date", "expiry_date", "issuing_country"];
+export declare const PAYMENT_CARD_FIELD_KEYS: readonly ["cardholder", "pan", "exp_month", "exp_year", "cvv"];
+export type StoredSecretKind = 'login' | 'identity' | 'payment_card';
+export declare const STORED_SECRET_FIELD_KEYS_BY_KIND: {
+    readonly login: readonly ["username", "password"];
+    readonly identity: readonly ["full_name", "document_number", "date_of_birth", "nationality", "issue_date", "expiry_date", "issuing_country"];
+    readonly payment_card: readonly ["cardholder", "pan", "exp_month", "exp_year", "cvv"];
+};
+export type LoginFieldKey = (typeof LOGIN_FIELD_KEYS)[number];
+export type IdentityFieldKey = (typeof IDENTITY_FIELD_KEYS)[number];
+export type PaymentCardFieldKey = (typeof PAYMENT_CARD_FIELD_KEYS)[number];
+export type StoredSecretFieldKey = LoginFieldKey | IdentityFieldKey | PaymentCardFieldKey;
+export type StoredSecretScope = 'site' | 'global';
+export type ProtectedFieldPolicy = 'deterministic_only' | 'llm_assisted';
+export declare const PROTECTED_BINDING_VALUE_HINTS: readonly ["direct", "full_name.given", "full_name.family"];
+export type ProtectedBindingValueHint = (typeof PROTECTED_BINDING_VALUE_HINTS)[number];
+export type StoredSecretApplicabilityTarget = 'host' | 'site' | 'global';
+export interface StoredSecretApplicability {
+    target: StoredSecretApplicabilityTarget;
+    value?: string;
+}
+export type StoredSecretFieldPolicies = Partial<Record<StoredSecretFieldKey, ProtectedFieldPolicy>>;
+export interface StoredSecretMetadata {
+    storedSecretRef: string;
+    kind: StoredSecretKind;
+    scope: StoredSecretScope;
+    displayName: string;
+    fieldKeys: StoredSecretFieldKey[];
+    fieldPolicies?: StoredSecretFieldPolicies;
+    intentRequired: boolean;
+    applicability: StoredSecretApplicability;
+    preferredForMerchantKeys?: string[];
+}
+export interface SecretCatalogSnapshot {
+    source: 'mock' | 'agentpay_api';
+    host: string;
+    syncedAt: string;
+    storedSecrets: StoredSecretMetadata[];
+}
+export interface FillableFormFieldBinding {
+    fieldKey: StoredSecretFieldKey;
+    targetRef: string;
+    label?: string;
+    required?: boolean;
+    valueHint?: ProtectedBindingValueHint;
+}
+export interface FillableFormGuidanceHint {
+    hint: string;
+    why: string;
+    recheckWhen?: string;
+    evidence: string[];
+}
+export interface FillableFormStoredSecretCandidate {
+    storedSecretRef: string;
+    kind: StoredSecretKind;
+    scope: StoredSecretScope;
+    displayName: string;
+    matchConfidence: 'high' | 'medium' | 'low';
+    intentRequired: boolean;
+    fieldKeys?: StoredSecretFieldKey[];
+    fieldPolicies?: StoredSecretFieldPolicies;
+}
+export type FillableFormRecommendedTiming = 'late';
+export interface PersistedFillableForm {
+    fillRef: string;
+    pageRef: string;
+    scopeRef?: string;
+    purpose: string;
+    recommendedTiming?: FillableFormRecommendedTiming;
+    guidance?: FillableFormGuidanceHint;
+    fields: FillableFormFieldBinding[];
+    storedSecretCandidates: FillableFormStoredSecretCandidate[];
+    observedAt: string;
+}
+export type SecretIntentStatus = 'pending' | 'checking' | 'notify' | 'confirmation' | 'approved' | 'denied' | 'timed_out' | 'completed';
+export interface SecretIntentSnapshot {
+    intentId: string;
+    fillRef: string;
+    storedSecretRef: string;
+    status: SecretIntentStatus;
+    approvalChannel?: 'agentpay-cabinet';
+    host?: string;
+    pageRef?: string;
+    scopeRef?: string;
+    createdAt: string;
+    expiresAt?: string;
+    approvedAt?: string;
+    completedAt?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/secrets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/secrets/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,mCAAoC,CAAC;AAClE,eAAO,MAAM,mBAAmB,2HAQtB,CAAC;AACX,eAAO,MAAM,uBAAuB,gEAM1B,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;AAErE,eAAO,MAAM,gCAAgC;;;;CAInC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,gBAAgB,GAAG,mBAAmB,CAAC;AAE1F,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAClD,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,cAAc,CAAC;AACzE,eAAO,MAAM,6BAA6B,4DAIhC,CAAC;AACX,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvF,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzE,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,+BAA+B,CAAC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAEpG,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,yBAAyB,CAAC;IACzC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,oBAAoB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,yBAAyB,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC3C,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAClD,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACnC,sBAAsB,EAAE,iCAAiC,EAAE,CAAC;IAC5D,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,UAAU,GACV,QAAQ,GACR,cAAc,GACd,UAAU,GACV,QAAQ,GACR,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB"}

package/dist/secrets/types.js

@@ -0,0 +1,27 @@
+export const LOGIN_FIELD_KEYS = ['username', 'password'];
+export const IDENTITY_FIELD_KEYS = [
+    'full_name',
+    'document_number',
+    'date_of_birth',
+    'nationality',
+    'issue_date',
+    'expiry_date',
+    'issuing_country',
+];
+export const PAYMENT_CARD_FIELD_KEYS = [
+    'cardholder',
+    'pan',
+    'exp_month',
+    'exp_year',
+    'cvv',
+];
+export const STORED_SECRET_FIELD_KEYS_BY_KIND = {
+    login: LOGIN_FIELD_KEYS,
+    identity: IDENTITY_FIELD_KEYS,
+    payment_card: PAYMENT_CARD_FIELD_KEYS,
+};
+export const PROTECTED_BINDING_VALUE_HINTS = [
+    'direct',
+    'full_name.given',
+    'full_name.family',
+];

package/dist/session.d.ts

@@ -2,6 +2,17 @@
  * Session persistence for agentbrowse.
  * Stores CDP URL + Chrome PID in ~/.agentpay/browse-session.json
  */
+import type { BrowseRuntimeState } from './runtime-state.js';
+import type { StoredSecretFieldKey } from './secrets/types.js';
+export interface CachedTransientSecretEntry {
+    intentId: string;
+    fillRef: string;
+    storedSecretRef: string;
+    cachedAt: string;
+    approvedAt?: string;
+    expiresAt?: string;
+    values: Partial<Record<StoredSecretFieldKey, string>>;
+}
 export interface BrowseSession {
     cdpUrl: string;
     pid: number;
@@ -11,7 +22,18 @@ export interface BrowseSession {
     capabilities?: {
         captchaSolve?: boolean;
     };
+    runtime?: BrowseRuntimeState;
+    transientSecretCache?: Record<string, CachedTransientSecretEntry>;
 }
+export declare function cleanupTransientSecretCache(session: BrowseSession, options?: {
+    now?: string;
+}): boolean;
+export declare function cacheTransientSecret(session: BrowseSession, entry: CachedTransientSecretEntry): CachedTransientSecretEntry;
+export declare function getCachedTransientSecret(session: BrowseSession, intentId: string, options?: {
+    now?: string;
+}): CachedTransientSecretEntry | null;
+export declare function deleteCachedTransientSecret(session: BrowseSession, intentId: string): boolean;
+export declare function serializeSession(session: BrowseSession): string;
 export declare function saveSession(session: BrowseSession): void;
 export declare function loadSession(): BrowseSession | null;
 export declare function getSessionPort(session: BrowseSession | null): number;

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE;QACb,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;CACH;AAQD,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAGxD;AAED,wBAAgB,WAAW,IAAI,aAAa,GAAG,IAAI,CASlD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,CAapE;AAED,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAE3E;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAO9D"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAK/D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE;QACb,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;CACnE;AAyBD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,OAAO,CAqBT;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,0BAA0B,GAChC,0BAA0B,CAQ5B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,0BAA0B,GAAG,IAAI,CAMnC;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAW7F;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAW/D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAGxD;AAED,wBAAgB,WAAW,IAAI,aAAa,GAAG,IAAI,CAclD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,CAapE;AAED,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAE3E;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAO9D"}

package/dist/session.js

@@ -7,14 +7,81 @@ import { homedir } from 'node:os';
 import { join } from 'node:path';
 const SESSION_DIR = join(homedir(), '.agentpay');
 const SESSION_PATH = join(SESSION_DIR, 'browse-session.json');
+const BLOCKED_SESSION_KEYS = new Set([
+    'rawValue',
+    'rawValues',
+    'secretValue',
+    'secretValues',
+    'resolvedValues',
+    'protectedValues',
+]);
 function ensureDir() {
     if (!existsSync(SESSION_DIR)) {
         mkdirSync(SESSION_DIR, { recursive: true });
     }
 }
+function isExpired(expiresAt, now) {
+    if (!expiresAt) {
+        return false;
+    }
+    return new Date(expiresAt).getTime() <= new Date(now).getTime();
+}
+export function cleanupTransientSecretCache(session, options = {}) {
+    const cache = session.transientSecretCache;
+    if (!cache) {
+        return false;
+    }
+    const now = options.now ?? new Date().toISOString();
+    let changed = false;
+    for (const [intentId, entry] of Object.entries(cache)) {
+        if (isExpired(entry.expiresAt, now)) {
+            delete cache[intentId];
+            changed = true;
+        }
+    }
+    if (Object.keys(cache).length === 0) {
+        delete session.transientSecretCache;
+        changed = true;
+    }
+    return changed;
+}
+export function cacheTransientSecret(session, entry) {
+    cleanupTransientSecretCache(session);
+    const cache = (session.transientSecretCache ??= {});
+    cache[entry.intentId] = {
+        ...entry,
+        values: { ...entry.values },
+    };
+    return cache[entry.intentId];
+}
+export function getCachedTransientSecret(session, intentId, options = {}) {
+    if (cleanupTransientSecretCache(session, options)) {
+        // Keep the in-memory session sanitized for callers that save immediately after load.
+    }
+    return session.transientSecretCache?.[intentId] ?? null;
+}
+export function deleteCachedTransientSecret(session, intentId) {
+    const cache = session.transientSecretCache;
+    if (!cache?.[intentId]) {
+        return false;
+    }
+    delete cache[intentId];
+    if (Object.keys(cache).length === 0) {
+        delete session.transientSecretCache;
+    }
+    return true;
+}
+export function serializeSession(session) {
+    return JSON.stringify(session, (key, value) => {
+        if (BLOCKED_SESSION_KEYS.has(key)) {
+            return undefined;
+        }
+        return value;
+    }, 2);
+}
 export function saveSession(session) {
     ensureDir();
-    writeFileSync(SESSION_PATH, JSON.stringify(session, null, 2));
+    writeFileSync(SESSION_PATH, serializeSession(session));
 }
 export function loadSession() {
     if (!existsSync(SESSION_PATH))
@@ -23,7 +90,12 @@ export function loadSession() {
         const raw = JSON.parse(readFileSync(SESSION_PATH, 'utf-8'));
         if (!raw.cdpUrl || !raw.pid)
             return null;
-        return raw;
+        const session = raw;
+        const changed = cleanupTransientSecretCache(session);
+        if (changed) {
+            saveSession(session);
+        }
+        return session;
     }
     catch {
         return null;

package/dist/solver/browser-launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-launcher.d.ts","sourceRoot":"","sources":["../../src/solver/browser-launcher.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAsB,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAWjF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,CAAC;AAcF,wBAAsB,YAAY,CAChC,OAAO,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,aAAa,CAAC,CA0ExB"}
+{"version":3,"file":"browser-launcher.d.ts","sourceRoot":"","sources":["../../src/solver/browser-launcher.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAsB,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAWjF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,CAAC;AAgBF,wBAAsB,YAAY,CAChC,OAAO,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,aAAa,CAAC,CA0ExB"}

package/dist/solver/browser-launcher.js

@@ -7,6 +7,8 @@ import StealthPlugin from 'puppeteer-extra-plugin-stealth';
 const enhancedPuppeteer = puppeteerExtra;
 enhancedPuppeteer.use(StealthPlugin());
 const DEFAULT_CDP_PORT = 9222;
+const CDP_DISCOVERY_ATTEMPTS = 20;
+const CDP_DISCOVERY_INTERVAL_MS = 500;
 const CHROME_PATHS = [
     '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
     '/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary',
@@ -84,9 +86,9 @@ export async function launchSolver(profile, opts) {
     }
 }
 async function discoverCdpUrl(port) {
-    for (let i = 0; i < 10; i++) {
+    for (let i = 0; i < CDP_DISCOVERY_ATTEMPTS; i++) {
         try {
-            const res = await fetch(`http://localhost:${port}/json/version`);
+            const res = await fetch(`http://127.0.0.1:${port}/json/version`);
             if (!res.ok)
                 throw new Error(`CDP endpoint returned ${res.status}`);
             const json = (await res.json());
@@ -97,7 +99,7 @@ async function discoverCdpUrl(port) {
         catch {
             // Retry while Chrome is initializing.
         }
-        await new Promise((resolve) => setTimeout(resolve, 500));
+        await new Promise((resolve) => setTimeout(resolve, CDP_DISCOVERY_INTERVAL_MS));
     }
     return null;
 }
@@ -161,6 +163,7 @@ function spawnChromeProcess(executablePath, profile, fp, cdpPort, windowSize, he
     const height = windowSize?.height ?? fp.viewport.height;
     const args = [
         `--remote-debugging-port=${cdpPort}`,
+        '--remote-debugging-address=127.0.0.1',
         `--user-data-dir=${profile.userDataDir}`,
         `--window-size=${width},${height}`,
         '--disable-blink-features=AutomationControlled',

package/dist/stagehand-runtime.d.ts

@@ -0,0 +1,4 @@
+import type { Stagehand } from '@browserbasehq/stagehand';
+import type { BrowseSession } from './session.js';
+export declare function withStagehand<T>(session: BrowseSession, run: (stagehand: Stagehand) => Promise<T>): Promise<T>;
+//# sourceMappingURL=stagehand-runtime.d.ts.map

package/dist/stagehand-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stagehand-runtime.d.ts","sourceRoot":"","sources":["../src/stagehand-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,wBAAsB,aAAa,CAAC,CAAC,EACnC,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GACxC,OAAO,CAAC,CAAC,CAAC,CAOZ"}

package/dist/stagehand-runtime.js

@@ -0,0 +1,10 @@
+import { connectStagehand } from './stagehand.js';
+export async function withStagehand(session, run) {
+    const stagehand = await connectStagehand(session.cdpUrl);
+    try {
+        return await run(stagehand);
+    }
+    finally {
+        await stagehand.close().catch(() => undefined);
+    }
+}

package/dist/stagehand.d.ts

@@ -12,9 +12,4 @@ export interface StagehandSession {
 export declare function connectStagehand(cdpUrl: string): Promise<Stagehand>;
 /** Find the PID of the Chrome process listening on CDP_PORT. */
 export declare function findChromePid(port?: number): number | null;
-/** Get current page URL and title from Stagehand. */
-export declare function getPageInfo(stagehand: Stagehand): Promise<{
-    url: string;
-    title: string;
-}>;
 //# sourceMappingURL=stagehand.d.ts.map

package/dist/stagehand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stagehand.d.ts","sourceRoot":"","sources":["../src/stagehand.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAMrD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,kDAAkD;AAClD,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAezE;AAED,gEAAgE;AAChE,wBAAgB,aAAa,CAAC,IAAI,SAAmB,GAAG,MAAM,GAAG,IAAI,CAQpE;AAED,qDAAqD;AACrD,wBAAsB,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAI/F"}
+{"version":3,"file":"stagehand.d.ts","sourceRoot":"","sources":["../src/stagehand.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAMrD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,kDAAkD;AAClD,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAezE;AAED,gEAAgE;AAChE,wBAAgB,aAAa,CAAC,IAAI,SAAmB,GAAG,MAAM,GAAG,IAAI,CAQpE"}

package/dist/stagehand.js

@@ -36,9 +36,3 @@ export function findChromePid(port = DEFAULT_CDP_PORT) {
         return null;
     }
 }
-/** Get current page URL and title from Stagehand. */
-export async function getPageInfo(stagehand) {
-    const page = stagehand.context.pages()[0];
-    const [url, title] = await Promise.all([page.url(), page.title()]);
-    return { url, title };
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuanu-ai/agentbrowse",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "type": "module",
   "description": "Standalone browser automation CLI for AI agents: launch, observe, act, extract, and solve captcha",
   "keywords": [
@@ -43,7 +43,9 @@
   "scripts": {
     "build": "node -e \"require('node:fs').rmSync('dist',{ recursive: true, force: true })\" && tsc -p tsconfig.build.json",
     "agentbrowse": "tsx src/index.ts",
-    "test": "vitest run",
+    "test": "pnpm run test:unit && pnpm run test:e2e",
+    "test:unit": "vitest run --exclude \"src/__tests__/*.e2e.test.ts\"",
+    "test:e2e": "vitest run --no-file-parallelism --maxWorkers=1 src/__tests__/observe-stagehand.e2e.test.ts src/__tests__/extract.e2e.test.ts src/__tests__/protected-fill.e2e.test.ts src/__tests__/runtime.e2e.test.ts",
     "check-types": "tsc --noEmit",
     "lint": "biome check .",
     "prepack": "pnpm run build"
@@ -51,6 +53,7 @@
   "dependencies": {
     "@browserbasehq/stagehand": "^3.0.0",
     "dotenv": "^16.4.0",
+    "playwright-core": "^1.58.2",
     "puppeteer": "^23.11.1",
     "puppeteer-extra": "^3.3.6",
     "puppeteer-extra-plugin-stealth": "^2.11.2",