@omercnet/paseo-shared-browser 4.1.6 → 4.1.7

package/README.md

@@ -40,7 +40,7 @@ organization names.
   controller when a takeover is needed, and continues the selected action after control is granted.
   Closing a tab or browser still requires its own confirmation. Actions that need a fresh frame wait
   for one before sending input.
-- The plugin owns `agent-browser` version `0.41.0`, its IPC directory, and the Chromium executable.
+- The plugin owns `agent-browser` version `0.41.2`, its IPC directory, and the Chromium executable.
   It strips inherited `AGENT_BROWSER_*` variables and sets `AGENT_BROWSER_SOCKET_DIR`,
   `AGENT_BROWSER_IDLE_TIMEOUT_MS=0`, `AGENT_BROWSER_STREAM_PORT=0`, and
   `AGENT_BROWSER_NO_AUTO_DIALOG=1` itself.
@@ -105,7 +105,14 @@ from `/usr/bin/chromium`. Install a non-Snap Chromium build with the system pack
 adding the plugin. Set `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE` to an absolute path when Chromium
 is installed elsewhere. The plugin does not emulate x64 Chromium on Linux.
 
-On Windows, the upstream installer retains its Chrome download cache under the OS user profile.
+Runtime preparation keeps no Chrome download cache. When it uses the upstream installer (every
+platform except Linux ARM64, unless `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE` is set), the
+installer runs with a private home inside the staging directory, so each preparation downloads the
+current Chrome for Testing archive (about 200 MiB) and deletes the installer's copy after staging
+it. On a slow network that download can exceed the 180-second install timeout; set
+`PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE` to an existing Chromium to skip it. On Windows the
+override is not staged into the runtime, so keep it set in the daemon environment as well.
+
 Before upgrading the plugin on Windows, close active Shared Browser sessions and stop the Paseo
 daemon; Windows does not allow the installer to replace runtime executables that are still running.
 

package/npm-shrinkwrap.json

@@ -1,16 +1,16 @@
 {
   "name": "@omercnet/paseo-shared-browser",
-  "version": "4.1.6",
+  "version": "4.1.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@omercnet/paseo-shared-browser",
-      "version": "4.1.6",
+      "version": "4.1.7",
       "dependencies": {
         "@getpaseo/plugin": "0.15.0",
         "@modelcontextprotocol/sdk": "1.32.2",
-        "agent-browser": "0.41.0",
+        "agent-browser": "0.41.2",
         "esbuild": "0.28.2",
         "zod": "4.6.7"
       }
@@ -606,9 +606,9 @@
       }
     },
     "node_modules/agent-browser": {
-      "version": "0.41.0",
-      "resolved": "https://registry.npmjs.org/agent-browser/-/agent-browser-0.41.0.tgz",
-      "integrity": "sha512-XJtBouE5+gGUKyZU1COSmnxU6MKIlmLE2oEyHzl0ohLVOhuRjx9kqQ9vOqxiiW/Gbvi4JPF4Oz777Mn3FGiHAA==",
+      "version": "0.41.2",
+      "resolved": "https://registry.npmjs.org/agent-browser/-/agent-browser-0.41.2.tgz",
+      "integrity": "sha512-/agCKB5rw1EEK8SKWo4zid7a5kOwlclqALC0P3c69buJvKdhrl/dJkKdfLqGGaiNIbWzRdqqT0PxZVkwVEf2fg==",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "bin": {
@@ -1233,9 +1233,9 @@
       }
     },
     "node_modules/i18next": {
-      "version": "26.7.1",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.7.1.tgz",
-      "integrity": "sha512-cX+3RRVczel/V2kCMTACckSGSpqgtWYEA6beXNYVms7dOQiHojdPYHD26lT4IKimNeoGWrLvtPgjftbRvmZJVw==",
+      "version": "26.7.2",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.7.2.tgz",
+      "integrity": "sha512-RsOY3BeaCDdkk52NeJSFAXELQ2rQXBO/tOub6L8ue2ICPfR/FRDWDOfEDg4xMPd1SqO5goVYQ6i72qWEUB/PPw==",
       "funding": [
         {
           "type": "individual",
@@ -1283,9 +1283,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.7.5",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.5.tgz",
-      "integrity": "sha512-t2v0rkILYv9WXmSL7TpAaU3HXgaFYOPUcH3QHgwQ++gpJuH3bqyMy4Fvt/DJCTKwzH3Cf+bAp5W/mFL39KPLzA==",
+      "version": "10.7.6",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.6.tgz",
+      "integrity": "sha512-00LYkM6byILa9eQIx6qoaXCM40xTLd56AZ4vyaPW3YTyb49VZYPo5xsiAq4tuQ54GH4R7gVdYScJ1B7B77PuTg==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-shared-browser",
-  "version": "4.1.6",
+  "version": "4.1.7",
   "description": "One real Chromium session per Paseo workspace, shared live across every connected client.",
   "keywords": [
     "browser",
@@ -29,6 +29,7 @@
     "index.client.tsx",
     "index.server.ts",
     "client",
+    "scripts/chromium-release.mjs",
     "scripts/prepare-dependencies.mjs",
     "scripts/prepare-runtime.mjs",
     "scripts/replace-runtime.mjs",
@@ -48,8 +49,8 @@
     "check:write": "biome check --write .",
     "typecheck": "tsc --noEmit",
     "prepare:runtime": "node scripts/prepare-runtime.mjs",
-    "test": "vitest run tests/contracts.test.ts tests/lease.test.ts tests/runtime-lifecycle.test.ts tests/agent-access.test.ts tests/agent-input-safety.test.ts tests/tabs.test.ts tests/tabs-runtime-loss.test.ts tests/composer-pills.test.ts tests/sidebar.test.ts tests/pointer-mapping.test.ts tests/frame-lifecycle.test.ts tests/viewport-resync.test.ts client server shared",
-    "test:unit": "vitest run tests/contracts.test.ts tests/lease.test.ts tests/runtime-lifecycle.test.ts tests/agent-access.test.ts tests/agent-input-safety.test.ts tests/tabs.test.ts tests/tabs-runtime-loss.test.ts tests/composer-pills.test.ts tests/sidebar.test.ts tests/pointer-mapping.test.ts tests/frame-lifecycle.test.ts tests/viewport-resync.test.ts client server shared",
+    "test": "vitest run tests/contracts.test.ts tests/lease.test.ts tests/runtime-lifecycle.test.ts tests/chromium-release.test.ts tests/prepare-runtime.test.ts tests/agent-access.test.ts tests/agent-input-safety.test.ts tests/tabs.test.ts tests/tabs-runtime-loss.test.ts tests/composer-pills.test.ts tests/sidebar.test.ts tests/pointer-mapping.test.ts tests/frame-lifecycle.test.ts tests/viewport-resync.test.ts client server shared",
+    "test:unit": "vitest run tests/contracts.test.ts tests/lease.test.ts tests/runtime-lifecycle.test.ts tests/chromium-release.test.ts tests/prepare-runtime.test.ts tests/agent-access.test.ts tests/agent-input-safety.test.ts tests/tabs.test.ts tests/tabs-runtime-loss.test.ts tests/composer-pills.test.ts tests/sidebar.test.ts tests/pointer-mapping.test.ts tests/frame-lifecycle.test.ts tests/viewport-resync.test.ts client server shared",
     "test:smoke": "vitest run tests/browser.smoke.test.ts tests/browser.drag-cancel.smoke.test.ts tests/xvfb.smoke.test.ts tests/browser.failed-open.smoke.test.ts tests/browser.background-tab.smoke.test.ts --testTimeout=30000",
     "test:tabs": "vitest run tests/browser-tabs.smoke.test.ts --testTimeout=30000",
     "test:video": "vitest run tests/video.smoke.test.ts --testTimeout=30000"
@@ -57,7 +58,7 @@
   "dependencies": {
     "@getpaseo/plugin": "0.15.0",
     "@modelcontextprotocol/sdk": "1.32.2",
-    "agent-browser": "0.41.0",
+    "agent-browser": "0.41.2",
     "esbuild": "0.28.2",
     "zod": "4.6.7"
   },

package/scripts/chromium-release.mjs

@@ -0,0 +1,29 @@
+import { execFile } from "node:child_process";
+import { mkdir, readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { promisify } from "node:util";
+
+const execFileAsync = promisify(execFile);
+
+/**
+ * Runs `agent-browser install` against a private home and returns the
+ * Chromium release directory it produced. agent-browser resolves its browser
+ * cache with Rust's std::env::home_dir(): HOME on Unix and USERPROFILE on
+ * Windows, so both point at installHome.
+ */
+export async function installChromiumRelease(agentBrowser, args, installHome) {
+  await mkdir(installHome, { recursive: true, mode: 0o700 });
+  await execFileAsync(agentBrowser, args, {
+    env: { ...process.env, HOME: installHome, USERPROFILE: installHome },
+    timeout: 180_000,
+    windowsHide: true,
+  });
+
+  const browsersRoot = join(installHome, ".agent-browser", "browsers");
+  const releases = (await readdir(browsersRoot, { withFileTypes: true }))
+    .filter((entry) => entry.isDirectory() && entry.name.startsWith("chrome-"))
+    .map((entry) => entry.name)
+    .sort((left, right) => right.localeCompare(left, undefined, { numeric: true }));
+  if (!releases[0]) throw new Error("agent-browser install did not produce a Chromium release");
+  return join(browsersRoot, releases[0]);
+}

package/scripts/prepare-runtime.mjs

@@ -3,12 +3,13 @@ import { randomUUID } from "node:crypto";
 import { constants } from "node:fs";
 import { access, chmod, cp, lstat, mkdir, readdir, rm, symlink, writeFile } from "node:fs/promises";
 import { createRequire } from "node:module";
-import { arch, homedir, platform, userInfo } from "node:os";
+import { arch, homedir, platform } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 import { build } from "esbuild";
-import { replaceRuntime } from "./replace-runtime.mjs";
+import { installChromiumRelease } from "./chromium-release.mjs";
+import { discardRuntime, replaceRuntime } from "./replace-runtime.mjs";
 
 const require = createRequire(import.meta.url);
 
@@ -18,7 +19,7 @@ function resolveDependencyRoot(packageName) {
 }
 
 const execFileAsync = promisify(execFile);
-const expectedVersion = "0.41.0";
+const expectedVersion = "0.41.2";
 const hostPlatform = platform();
 const hostArch = arch();
 const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));
@@ -163,26 +164,8 @@ async function installChromium() {
     return executable;
   }
 
-  // Rust's dirs::home_dir() ignores HOME on Windows and resolves the profile
-  // through SHGetKnownFolderPath. Use that cache there; Unix stays isolated.
-  const installHome =
-    hostPlatform === "win32" ? userInfo().homedir : join(stagingRoot, "install-home");
-  if (hostPlatform !== "win32") {
-    await mkdir(installHome, { recursive: true, mode: 0o700 });
-  }
-  await execFileAsync(runtimeEntry, ["install"], {
-    env: hostPlatform === "win32" ? process.env : { ...process.env, HOME: installHome },
-    timeout: 180_000,
-    windowsHide: true,
-  });
-
-  const browsersRoot = join(installHome, ".agent-browser", "browsers");
-  const releases = (await readdir(browsersRoot, { withFileTypes: true }))
-    .filter((entry) => entry.isDirectory() && entry.name.startsWith("chrome-"))
-    .map((entry) => entry.name)
-    .sort((left, right) => right.localeCompare(left, undefined, { numeric: true }));
-  const releaseDir = releases[0] && join(browsersRoot, releases[0]);
-  if (!releaseDir) throw new Error("agent-browser install did not produce a Chromium release");
+  const installHome = join(stagingRoot, "install-home");
+  const releaseDir = await installChromiumRelease(runtimeEntry, ["install"], installHome);
   const chrome = installedChromiumExecutable(releaseDir);
   await requireExecutable(chrome, "Installed Chromium executable");
   await cp(releaseDir, join(stagingRoot, "chromium"), {
@@ -200,7 +183,7 @@ async function installChromium() {
     );
     await chmod(runtimeChromiumEntry, 0o700);
   }
-  if (hostPlatform !== "win32") await rm(installHome, { recursive: true, force: true });
+  await rm(installHome, { recursive: true, force: true });
   return runtimeChromiumEntry;
 }
 
@@ -222,32 +205,38 @@ async function stageAgentBrowserEntry() {
 }
 
 await rm(stagingRoot, { recursive: true, force: true });
-await mkdir(join(runtimeModules, ".bin"), { recursive: true, mode: 0o700 });
-await chmod(pluginDataRoot, 0o700);
-await cp(packagedAgentBrowser, join(runtimeModules, "agent-browser"), {
-  recursive: true,
-  force: true,
-});
-await stageAgentBrowserEntry();
-
-const binaryOverride = process.env.PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY;
-if (binaryOverride)
-  await validateAgentBrowser(
-    await requireExecutable(binaryOverride, "PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY"),
+try {
+  await mkdir(join(runtimeModules, ".bin"), { recursive: true, mode: 0o700 });
+  await chmod(pluginDataRoot, 0o700);
+  await cp(packagedAgentBrowser, join(runtimeModules, "agent-browser"), {
+    recursive: true,
+    force: true,
+  });
+  await stageAgentBrowserEntry();
+
+  const binaryOverride = process.env.PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY;
+  if (binaryOverride)
+    await validateAgentBrowser(
+      await requireExecutable(binaryOverride, "PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY"),
+    );
+  await validateAgentBrowser(await requireExecutable(runtimeEntry, "Packaged agent-browser entry"));
+  const chromiumEntry = await installChromium();
+  await bundleRuntimeEntries();
+
+  await writeFile(
+    join(stagingRoot, "package.json"),
+    `${JSON.stringify({ private: true, type: "commonjs" }, null, 2)}\n`,
+    { mode: 0o600 },
   );
-await validateAgentBrowser(await requireExecutable(runtimeEntry, "Packaged agent-browser entry"));
-const chromiumEntry = await installChromium();
-await bundleRuntimeEntries();
-
-await writeFile(
-  join(stagingRoot, "package.json"),
-  `${JSON.stringify({ private: true, type: "commonjs" }, null, 2)}\n`,
-  { mode: 0o600 },
-);
-await applyPrivatePermissions(stagingRoot);
-if (hostPlatform !== "win32") {
-  await validateChromium(await requireExecutable(chromiumEntry, "Staged Chromium executable"));
+  await applyPrivatePermissions(stagingRoot);
+  if (hostPlatform !== "win32") {
+    await validateChromium(await requireExecutable(chromiumEntry, "Staged Chromium executable"));
+  }
+} catch (error) {
+  // A failed preparation must not leave a partial runtime, which can hold a Chromium download.
+  await discardRuntime(stagingRoot, error);
 }
+// Outside the cleanup: replaceRuntime can reject after publishing, when the stage is the live runtime.
 await replaceRuntime(stagingRoot, runtimeRoot);
 
 console.log(`Prepared immutable Shared Browser runtime assets in ${stagingRoot}`);

package/scripts/replace-runtime.mjs

@@ -13,3 +13,20 @@ export async function replaceRuntime(stagingRoot, runtimeRoot) {
     await rm(pendingPointer, { force: true });
   }
 }
+
+/**
+ * Removes a staging runtime after a failed preparation and rethrows the
+ * preparation error. Windows file locks can outlast the retries; a cleanup
+ * failure is reported but never replaces the original diagnostic.
+ */
+export async function discardRuntime(stagingRoot, preparationError, remove = rm) {
+  try {
+    await remove(stagingRoot, { recursive: true, force: true, maxRetries: 5, retryDelay: 200 });
+  } catch (cleanupError) {
+    console.warn(
+      `Could not remove the failed Shared Browser runtime at ${stagingRoot}:`,
+      cleanupError,
+    );
+  }
+  throw preparationError;
+}

package/server/agent-browser-runtime.ts

@@ -57,7 +57,7 @@ import { createScreencastSourceTime } from "./screencast-source-time";
 import { createVideoSourceRecovery } from "./video-source-recovery";
 
 const execFileAsync = promisify(execFile);
-export const AGENT_BROWSER_VERSION = "0.41.0";
+export const AGENT_BROWSER_VERSION = "0.41.2";
 const PRIVATE_DIRECTORY_MODE = 0o700;
 const PRIVATE_FILE_MODE = 0o600;
 const DEFAULT_TIMEOUT_MS = 15_000;

package/server/runtime-launch-environment.test.ts

@@ -23,7 +23,7 @@ vi.mock("node:child_process", () => ({
     callback: (error: null, result: { stdout: string }) => void,
   ) => {
     exec.calls.push({ file, args, env: options.env });
-    callback(null, { stdout: args.includes("--version") ? "0.41.0\n" : "{}\n" });
+    callback(null, { stdout: args.includes("--version") ? "0.41.2\n" : "{}\n" });
   },
 }));
 

package/server/runtime-video-opt-in.test.ts

@@ -15,7 +15,7 @@ vi.mock("node:child_process", async (importOriginal) => ({
     _args: string[],
     _options: unknown,
     callback: (error: null, result: { stdout: string }) => void,
-  ) => callback(null, { stdout: "0.41.0\n" }),
+  ) => callback(null, { stdout: "0.41.2\n" }),
 }));
 
 const temporary: string[] = [];