@omercnet/paseo-shared-browser 4.1.1 → 4.1.2-next.361.1

package/README.md

@@ -40,7 +40,7 @@ organization names.
   controller when a takeover is needed, and continues the selected action after control is granted.
   Closing a tab or browser still requires its own confirmation. Actions that need a fresh frame wait
   for one before sending input.
-- The plugin owns `agent-browser` version `0.39.2`, its IPC directory, and the Chromium executable.
+- The plugin owns `agent-browser` version `0.40.0`, its IPC directory, and the Chromium executable.
   It strips inherited `AGENT_BROWSER_*` variables and sets `AGENT_BROWSER_SOCKET_DIR`,
   `AGENT_BROWSER_IDLE_TIMEOUT_MS=0`, `AGENT_BROWSER_STREAM_PORT=0`, and
   `AGENT_BROWSER_NO_AUTO_DIALOG=1` itself.

package/npm-shrinkwrap.json

@@ -1,18 +1,18 @@
 {
   "name": "@omercnet/paseo-shared-browser",
-  "version": "4.1.1",
+  "version": "4.1.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@omercnet/paseo-shared-browser",
-      "version": "4.1.1",
+      "version": "4.1.2",
       "dependencies": {
         "@getpaseo/plugin": "0.14.0",
         "@modelcontextprotocol/sdk": "1.30.0",
-        "agent-browser": "0.39.2",
+        "agent-browser": "0.40.0",
         "esbuild": "0.28.2",
-        "zod": "4.4.3"
+        "zod": "4.6.7"
       }
     },
     "node_modules/@agentclientprotocol/sdk": {
@@ -606,9 +606,9 @@
       }
     },
     "node_modules/agent-browser": {
-      "version": "0.39.2",
-      "resolved": "https://registry.npmjs.org/agent-browser/-/agent-browser-0.39.2.tgz",
-      "integrity": "sha512-8zh5Dj4r/Lo14nDw+8jUViTlmZV5ON3qmrGp1wppmB87NhMqmSXUqVIeNith9xjIJNr/00wHxhCqH/2lATezYQ==",
+      "version": "0.40.0",
+      "resolved": "https://registry.npmjs.org/agent-browser/-/agent-browser-0.40.0.tgz",
+      "integrity": "sha512-uqDAR3ozwJKYzVENMr/ZKYTZT1LUZauI49rTiK/KsFBxQDVTdtmrWGWTMWZlaIIQWToEtZUfWVXBSSTY6aHzrA==",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "bin": {
@@ -1029,9 +1029,9 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.7.1",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.1.tgz",
-      "integrity": "sha512-2FXbqkygil3mZiXzEtM0IjE/UBmBNot0J1GEVrJT4JbrvwOSoEtqtO+wHbiMQELWe1eNvHoYRg2dkjOid+6JkA==",
+      "version": "8.7.2",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.2.tgz",
+      "integrity": "sha512-U1ScocxDD9WI09LaBVypvNkOtNR5yWAmZLkuKJdAzIchA4YKFYF6GT5IKER7epG58oXtjvGlV0/6ii0F83EyZg==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -1233,9 +1233,9 @@
       }
     },
     "node_modules/i18next": {
-      "version": "26.5.11",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.5.11.tgz",
-      "integrity": "sha512-Wc0klBPKxqZ2tL2qdAnF8xvvnWgr1IMGSY2ikTiAvaFVbz7xiFARtkoU4RidBDw1SyziGROp0qxu6qnJ7l2Wug==",
+      "version": "26.5.12",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.5.12.tgz",
+      "integrity": "sha512-vTt8tc3y5axoU7wwTYg8vjpILLyP33a5GyGJAVI7FDRx1XueYxZVIkcVeStoftrVnAM/o28hKvK0sslucDI9aQ==",
       "funding": [
         {
           "type": "individual",
@@ -1874,9 +1874,9 @@
       "license": "ISC"
     },
     "node_modules/ws": {
-      "version": "8.22.0",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz",
-      "integrity": "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==",
+      "version": "8.22.1",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.1.tgz",
+      "integrity": "sha512-oyL6OPYme/CmiFvNuGzeoxCJ4nOrZE2O1FwM9MWM1AsGri6nLXB2pg+lNA8aLeXMSav0J6eIVS1j6vUPzUtK9g==",
       "license": "MIT",
       "peer": true,
       "engines": {
@@ -1896,9 +1896,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.4.3",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
-      "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
+      "version": "4.6.7",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz",
+      "integrity": "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-shared-browser",
-  "version": "4.1.1",
+  "version": "4.1.2-next.361.1",
   "description": "One real Chromium session per Paseo workspace, shared live across every connected client.",
   "keywords": [
     "browser",
@@ -57,9 +57,9 @@
   "dependencies": {
     "@getpaseo/plugin": "0.14.0",
     "@modelcontextprotocol/sdk": "1.30.0",
-    "agent-browser": "0.39.2",
+    "agent-browser": "0.40.0",
     "esbuild": "0.28.2",
-    "zod": "4.4.3"
+    "zod": "4.6.7"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.10",

package/scripts/prepare-dependencies.mjs

@@ -1,10 +1,12 @@
-import { execFileSync } from "node:child_process";
+import { execSync } from "node:child_process";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
 const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+// Run through the shell so Windows resolves npm.cmd: Node refuses to spawn .cmd files without one.
+const INSTALL_COMMAND = "npm ci --omit=dev --ignore-scripts --workspaces=false";
 
 function loadRootCatalog(root) {
   for (let directory = root; ; directory = dirname(directory)) {
@@ -28,6 +30,8 @@ function stageManifest(root, catalog, install) {
     manifest.dependencies[name] = catalog[name];
   }
   delete manifest.devDependencies;
+  // npm-shrinkwrap.json is generated without overrides, so npm ci rejects a manifest that keeps them.
+  delete manifest.overrides;
 
   writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
   try {
@@ -41,18 +45,11 @@ export function resolveDependencyRoot(packageName, from = import.meta.url) {
   return dirname(createRequire(from).resolve(`${packageName}/package.json`));
 }
 
-export function prepareDependencies(root = projectRoot, execute = execFileSync) {
+export function prepareDependencies(root = projectRoot, execute = execSync) {
   const catalog = loadRootCatalog(root);
   if (!catalog) return false;
   stageManifest(root, catalog, () => {
-    execute(
-      process.platform === "win32" ? "npm.cmd" : "npm",
-      ["ci", "--omit=dev", "--ignore-scripts", "--workspaces=false"],
-      {
-        cwd: root,
-        stdio: "inherit",
-      },
-    );
+    execute(INSTALL_COMMAND, { cwd: root, stdio: "inherit" });
   });
   return true;
 }

package/scripts/prepare-runtime.mjs

@@ -18,7 +18,7 @@ function resolveDependencyRoot(packageName) {
 }
 
 const execFileAsync = promisify(execFile);
-const expectedVersion = "0.39.2";
+const expectedVersion = "0.40.0";
 const hostPlatform = platform();
 const hostArch = arch();
 const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));

package/server/agent-browser-runtime.ts

@@ -57,7 +57,7 @@ import { createScreencastSourceTime } from "./screencast-source-time";
 import { createVideoSourceRecovery } from "./video-source-recovery";
 
 const execFileAsync = promisify(execFile);
-export const AGENT_BROWSER_VERSION = "0.39.2";
+export const AGENT_BROWSER_VERSION = "0.40.0";
 const PRIVATE_DIRECTORY_MODE = 0o700;
 const PRIVATE_FILE_MODE = 0o600;
 const DEFAULT_TIMEOUT_MS = 15_000;
@@ -379,22 +379,30 @@ export class AgentBrowserRuntime {
     // From here a nonce-owned daemon may exist even if open rejects (e.g. navigation failure).
     this.daemonLaunched = true;
     this.daemon = null;
-    const opened = await this.invoke([
-      "--session",
-      this.session,
-      "--profile",
-      this.profilePath,
-      "--executable-path",
-      this.executablePath,
-      ...(videoExtension ? ["--extension", videoExtension] : []),
-      "--hide-scrollbars",
-      "false",
-      ...(this.headed ? ["--headed"] : []),
-      ...(chromiumArguments ? ["--args", chromiumArguments] : []),
-      "--json",
-      "open",
-      this.initialUrl,
-    ]);
+    let opened: unknown;
+    try {
+      opened = await this.invoke([
+        "--session",
+        this.session,
+        "--profile",
+        this.profilePath,
+        "--executable-path",
+        this.executablePath,
+        ...(videoExtension ? ["--extension", videoExtension] : []),
+        "--hide-scrollbars",
+        "false",
+        ...(this.headed ? ["--headed"] : []),
+        ...(chromiumArguments ? ["--args", chromiumArguments] : []),
+        "--json",
+        "open",
+        this.initialUrl,
+      ]);
+    } catch (error) {
+      // Record the daemon a failed open left behind: since agent-browser 0.40.0 `close`
+      // removes the PID file before returning, after which its exit is unobservable.
+      await this.captureDaemon().catch(() => undefined);
+      throw error;
+    }
     this.assertRuntimeOpen();
     const targetId = findString(opened, ["targetId", "target_id"]);
     await this.protectIpcMetadata();

package/server/daemon-shutdown.test.ts

@@ -1,10 +1,11 @@
 /** The session daemon is signalled only while it is still the exact process this runtime launched. */
 import { type ChildProcess, spawn } from "node:child_process";
+import { rmSync, writeFileSync } from "node:fs";
 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, describe, expect, it, vi } from "vitest";
-import { AgentBrowserRuntime } from "./agent-browser-runtime";
+import { AGENT_BROWSER_VERSION, AgentBrowserRuntime } from "./agent-browser-runtime";
 import { RUNTIME_OWNER_VARIABLE } from "./process-identity";
 
 const probe = vi.hoisted(() => ({
@@ -32,20 +33,31 @@ vi.mock("./process-identity", async (importOriginal) => {
   };
 });
 
-const cli = vi.hoisted(() => ({ onClose: null as null | (() => void), closes: 0 }));
+const cli = vi.hoisted(() => ({
+  onClose: null as null | (() => void),
+  closes: 0,
+  /** Set to make `open` fail after its side effect, like a navigation failure. */
+  onOpen: null as null | (() => void),
+  version: "0.37.1",
+}));
 vi.mock("node:child_process", async (importOriginal) => ({
   ...(await importOriginal<typeof import("node:child_process")>()),
   execFile: (
     _file: string,
     args: string[],
     _options: unknown,
-    callback: (error: null, result: { stdout: string }) => void,
+    callback: (error: Error | null, result?: { stdout: string }) => void,
   ) => {
     if (args.includes("close")) {
       cli.closes += 1;
       cli.onClose?.();
     }
-    callback(null, { stdout: args.includes("--version") ? "0.37.1\n" : "{}\n" });
+    if (args.includes("open") && cli.onOpen) {
+      cli.onOpen();
+      callback(new Error("Navigation failed: net::ERR_CONNECTION_REFUSED"));
+      return;
+    }
+    callback(null, { stdout: args.includes("--version") ? `${cli.version}\n` : "{}\n" });
   },
 }));
 
@@ -58,6 +70,8 @@ afterEach(async () => {
   );
   cli.onClose = null;
   cli.closes = 0;
+  cli.onOpen = null;
+  cli.version = "0.37.1";
   probe.unreadable = false;
   probe.simulated = null;
   vi.restoreAllMocks();
@@ -273,6 +287,27 @@ describe.each(ownershipModes)(
       expect(daemon.pid && alive(daemon.pid)).toBe(false);
     });
 
+    it("confirms the exit of a daemon left by a failed open even when close removes its PID file", async () => {
+      const f = await fixture();
+      const daemon = await ownChild(f.native.ownerNonce);
+      own(daemon);
+      const pidFile = join(f.ipc, "owned.pid");
+      cli.version = AGENT_BROWSER_VERSION;
+      // The daemon starts and records its PID, then the initial navigation fails.
+      cli.onOpen = () => writeFileSync(pidFile, String(daemon.pid));
+      // agent-browser >= 0.40.0: close returns only after the daemon removed its PID file.
+      cli.onClose = () => {
+        daemon.kill("SIGTERM");
+        rmSync(pidFile, { force: true });
+      };
+      await expect(f.runtime.launch()).rejects.toThrow("agent-browser command failed");
+      const kill = vi.spyOn(process, "kill");
+      await f.runtime.shutdown();
+      await exited(daemon);
+      expect(kill).not.toHaveBeenCalledWith(daemon.pid, "SIGKILL");
+      expect(daemon.pid && alive(daemon.pid)).toBe(false);
+    });
+
     it("shares one in-flight shutdown and never reports success after a failed one", async () => {
       const f = await fixture(150);
       const daemon = await ownChild();

package/server/native-video-backpressure.test.ts

@@ -17,7 +17,7 @@ async function fixture(failFirstEncoder = false) {
       }),
     cancel: async () => deliver({ done: true }),
   };
-  const pending: { timestamp: number; type: string }[] = [];
+  const pending: { timestamp: number; type: string; queued: boolean }[] = [];
   const encoded: { timestamp: number; keyFrame: boolean }[] = [];
   let encoder: Encoder;
   const instances: Encoder[] = [];
@@ -37,14 +37,31 @@ async function fixture(failFirstEncoder = false) {
       if (failFirstEncoder && this === instances[0]) throw new Error("Codec stopped");
       this.encodeQueueSize++;
       encoded.push({ timestamp: frame.timestamp, keyFrame: options.keyFrame });
-      pending.push({ timestamp: frame.timestamp, type: options.keyFrame ? "key" : "delta" });
+      pending.push({
+        timestamp: frame.timestamp,
+        type: options.keyFrame ? "key" : "delta",
+        queued: true,
+      });
+    }
+    /** WebCodecs lowers encodeQueueSize once the codec starts a frame, before its output. */
+    dequeue() {
+      const value = pending.find((entry) => entry.queued);
+      if (!value) throw new Error("No queued fixture frame");
+      value.queued = false;
+      this.encodeQueueSize--;
     }
+    /** Emits in submission order, as an in-order realtime codec does. */
     output() {
       const value = pending.shift();
       if (!value) throw new Error("No queued fixture frame");
-      this.encodeQueueSize--;
+      if (value.queued) this.encodeQueueSize--;
       this.callbacks.output(
-        { ...value, byteLength: 10, copyTo: (bytes: Uint8Array) => bytes.fill(1) },
+        {
+          timestamp: value.timestamp,
+          type: value.type,
+          byteLength: 10,
+          copyTo: (bytes: Uint8Array) => bytes.fill(1),
+        },
         {},
       );
     }
@@ -94,6 +111,7 @@ async function fixture(failFirstEncoder = false) {
       await turn();
     },
     output: () => encoder!.output(),
+    dequeue: () => encoder!.dequeue(),
     ack: () =>
       runInContext(
         'for(const p of fixturePackets) acknowledge("stream",p.sequence)',
@@ -189,6 +207,28 @@ it("still suppresses dependencies after an actual encoded output is dropped", as
   }
 });
 
+it("emits outputs from a codec that lags further behind than its dequeued queue size", async () => {
+  const f = await fixture();
+  try {
+    const timestamps = [0, 33334, 66668, 100002, 133336, 166670];
+    for (const timestamp of timestamps) {
+      await f.frame(timestamp);
+      f.dequeue();
+    }
+    expect(f.encoded).toHaveLength(timestamps.length);
+    for (const _ of timestamps) {
+      f.output();
+      f.ack();
+    }
+    expect(f.packets.map((p) => [p.timestampUs, p.type])).toEqual(
+      timestamps.map((timestamp, index) => [timestamp, index ? "delta" : "key"]),
+    );
+    expect(f.encoded.filter((e) => e.keyFrame)).toHaveLength(1);
+  } finally {
+    await f.stop();
+  }
+});
+
 it("shipped packet conversion is exact with native and legacy byte APIs", () => {
   for (const native of [true, false]) {
     const context = createContext({

package/server/native-video-extension-source.ts

@@ -132,7 +132,12 @@ async function startCapture(targetId, width, height, generation) {
                 continue;
               state.lastEncodedTimestampUs = frame.timestamp;
               state.frameGenerations.set(frame.timestamp, current.generation);
-              while (state.frameGenerations.size > 4)
+              // encodeQueueSize drops when the codec dequeues a frame, not when it
+              // outputs, so a slow encode keeps more frames in flight than the gate
+              // above admits. Bound by one second at the 60fps ceiling, the host's
+              // packet age limit, so an in-flight output keeps its generation
+              // for as long as the host would still accept it.
+              while (state.frameGenerations.size > 60)
                 state.frameGenerations.delete(state.frameGenerations.keys().next().value);
               const keyFrame =
                 state.forceKey || frame.timestamp - state.lastKeyTimestamp >= 1000000;

package/server/runtime-launch-environment.test.ts

@@ -23,7 +23,7 @@ vi.mock("node:child_process", () => ({
     callback: (error: null, result: { stdout: string }) => void,
   ) => {
     exec.calls.push({ file, args, env: options.env });
-    callback(null, { stdout: args.includes("--version") ? "0.39.2\n" : "{}\n" });
+    callback(null, { stdout: args.includes("--version") ? "0.40.0\n" : "{}\n" });
   },
 }));
 

package/server/runtime-video-opt-in.test.ts

@@ -15,7 +15,7 @@ vi.mock("node:child_process", async (importOriginal) => ({
     _args: string[],
     _options: unknown,
     callback: (error: null, result: { stdout: string }) => void,
-  ) => callback(null, { stdout: "0.39.2\n" }),
+  ) => callback(null, { stdout: "0.40.0\n" }),
 }));
 
 const temporary: string[] = [];