@opengeni/runtime 3.0.2-canary.38894290271001 → 3.1.2

package/dist/{chunk-JDNBDSQV.js → chunk-TE3JIUL6.js}

@@ -101,7 +101,7 @@ import {
   withModelRequestCapture,
   withModelTransportStartedObserver,
   withPreparedCompactionRequest
-} from "./chunk-EQQ3YOKR.js";
+} from "./chunk-7OUG7WBV.js";
 import {
   GMAIL_REST_MCP_BRIDGE_ADAPTER,
   gmailRestResultOutcome,
@@ -317,8 +317,6 @@ import {
 } from "@opengeni/contracts";
 import { boundComputerNativeReceipt } from "@opengeni/interaction";
 import {
-  AttachedBrowserBridge,
-  AttachedBrowserDevice,
   AuthRun,
   AuthRunListResponse,
   AuthRunMutationResponse,
@@ -339,12 +337,18 @@ import {
   BrowserIdentityListResponse,
   BrowserIdentityMutationResponse,
   BrowserObservation,
+  BrowserActionResolvedTarget,
+  BrowserDialog,
+  InteractionDiagnosticSummary,
+  InteractionError,
+  InteractionOperationState,
+  InteractionRect,
+  RetainedArtifactReferenceSchema,
   BrowserRevisionListResponse,
   BrowserSession,
   BrowserStorageMode,
   browserSessionStorageMode,
   BrowserSessionMutationResponse,
-  BrowserTarget,
   BrowserTargetListResponse,
   ComputerAction,
   ComputerActionReceipt,
@@ -411,28 +415,53 @@ var BrowserAgentNode = external_exports.object({
     external_exports.string().max(BROWSER_AGENT_MAX_FIELD_LENGTH),
     external_exports.object({ redacted: external_exports.literal(true), reason: external_exports.string().max(32) }).strict()
   ]).optional(),
-  states: external_exports.array(external_exports.string().max(BROWSER_AGENT_MAX_FIELD_LENGTH)).max(6),
-  actions: external_exports.array(external_exports.string().max(BROWSER_AGENT_MAX_FIELD_LENGTH)).max(6)
+  // Omitted when empty: most nodes have no states or actions, and repeating
+  // empty arrays on every node only costs the model tokens.
+  states: external_exports.array(external_exports.string().max(BROWSER_AGENT_MAX_FIELD_LENGTH)).min(1).max(6).optional(),
+  actions: external_exports.array(external_exports.string().max(BROWSER_AGENT_MAX_FIELD_LENGTH)).min(1).max(6).optional()
 }).strict();
 var BrowserAgentView = external_exports.object({
-  kind: external_exports.literal("compact"),
   sourceKind: external_exports.enum(["snapshot", "diff", "none"]),
   nodes: external_exports.array(BrowserAgentNode).max(BROWSER_AGENT_MAX_NODES),
-  sourceNodeCount: external_exports.number().int().nonnegative(),
-  omittedNodeCount: external_exports.number().int().nonnegative(),
-  removedRefCount: external_exports.number().int().nonnegative(),
-  clippedFieldCount: external_exports.number().int().nonnegative(),
-  maxNodes: external_exports.number().int().positive(),
-  maxNodeBytes: external_exports.number().int().positive()
+  omittedNodeCount: external_exports.number().int().positive().optional(),
+  removedRefCount: external_exports.number().int().positive().optional(),
+  clippedFieldCount: external_exports.number().int().positive().optional()
+}).strict();
+var AgentBrowserTarget = external_exports.object({
+  id: external_exports.string().max(512),
+  kind: external_exports.enum(["page", "popup", "background_page", "worker"]),
+  title: external_exports.string().max(4096),
+  url: external_exports.string().max(16384),
+  selected: external_exports.boolean(),
+  controllerGeneration: external_exports.string().max(256),
+  targetGeneration: external_exports.string().max(256),
+  documentGeneration: external_exports.string().max(256).nullable()
 }).strict();
-var CompactBrowserObservation = BrowserObservation.safeExtend({
-  semantic: external_exports.null(),
+var CompactBrowserObservation = external_exports.object({
+  target: AgentBrowserTarget,
+  frameId: external_exports.string().max(256).optional(),
+  viewport: external_exports.object({
+    width: external_exports.number().int().positive(),
+    height: external_exports.number().int().positive(),
+    deviceScaleFactor: external_exports.number().positive().optional(),
+    maxTouchPoints: external_exports.number().int().positive().optional()
+  }).strict().optional(),
+  focusedRef: external_exports.string().max(512).optional(),
+  changedRegions: external_exports.array(InteractionRect).min(1).optional(),
+  diagnostics: InteractionDiagnosticSummary.optional(),
+  dialog: BrowserDialog.optional(),
+  screenshot: RetainedArtifactReferenceSchema.optional(),
   agentView: BrowserAgentView
-});
+}).strict();
 var BrowserAgentObservation = external_exports.union([BrowserObservation, CompactBrowserObservation]);
-var BrowserAgentActionReceipt = BrowserActionReceipt.safeExtend({
-  observation: BrowserAgentObservation.nullable()
-});
+var CompactBrowserActionReceipt = external_exports.object({
+  targetId: external_exports.string().max(512),
+  state: InteractionOperationState,
+  error: InteractionError.optional(),
+  targets: external_exports.array(BrowserActionResolvedTarget).optional(),
+  observation: CompactBrowserObservation.optional()
+}).strict();
+var BrowserAgentActionReceipt = external_exports.union([BrowserActionReceipt, CompactBrowserActionReceipt]);
 var BrowserScreenshotInput = external_exports.object({
   browserSessionId: external_exports.string().uuid(),
   targetId: external_exports.string().min(1).max(512),
@@ -574,6 +603,20 @@ var DiscoveryInput = external_exports.object({
   includeArchivedIdentities: external_exports.boolean().optional(),
   includeDisconnectedDevices: external_exports.boolean().optional()
 }).strict();
+var AgentAttachedBrowser = external_exports.object({
+  id: external_exports.string().uuid(),
+  name: external_exports.string().max(200),
+  profileLabel: external_exports.string().max(200).optional(),
+  browserName: external_exports.string().max(100),
+  platform: external_exports.enum(["linux", "macos", "windows"]),
+  state: external_exports.enum(["connected", "disconnected"]),
+  tabCount: external_exports.number().int().nonnegative(),
+  unsupported: external_exports.array(external_exports.string().max(64)).min(1).optional()
+}).strict();
+var AgentAttachedBrowserBridge = external_exports.object({
+  enrollmentId: external_exports.string().uuid(),
+  connectedProfileCount: external_exports.number().int().nonnegative()
+}).strict();
 var DiscoveryOutput = external_exports.object({
   browserRevision: external_exports.number().int().nonnegative(),
   computerRevision: external_exports.number().int().nonnegative(),
@@ -582,8 +625,17 @@ var DiscoveryOutput = external_exports.object({
   browsers: external_exports.array(BrowserSession),
   computers: external_exports.array(ComputerSession),
   identities: external_exports.array(BrowserIdentity),
-  attachedBrowserBridges: external_exports.array(AttachedBrowserBridge),
-  attachedBrowsers: external_exports.array(AttachedBrowserDevice)
+  attachedBrowserBridges: external_exports.array(AgentAttachedBrowserBridge),
+  attachedBrowsers: external_exports.array(AgentAttachedBrowser)
+}).strict();
+var BrowserOpenPlacement = external_exports.union([
+  InteractionPlacement,
+  external_exports.object({ kind: external_exports.literal("attached_device") }).strict()
+]);
+var AgentAttachedProfile = external_exports.object({
+  id: external_exports.string().uuid(),
+  name: external_exports.string(),
+  profileLabel: external_exports.string().optional()
 }).strict();
 var BrowserOpenInput = external_exports.object({
   browserSessionId: external_exports.string().uuid().optional(),
@@ -592,7 +644,7 @@ var BrowserOpenInput = external_exports.object({
   initialUrl: external_exports.string().url().max(16384).optional(),
   headless: external_exports.boolean().optional(),
   storageMode: BrowserStorageMode.optional(),
-  placement: InteractionPlacement.optional(),
+  placement: BrowserOpenPlacement.optional(),
   identityId: external_exports.string().uuid().optional(),
   baseRevisionId: external_exports.string().uuid().optional(),
   networkRouteId: external_exports.string().uuid().optional(),
@@ -620,7 +672,14 @@ var BrowserOpenInput = external_exports.object({
     });
   }
 });
-var BrowserOpenOutput = external_exports.object({ session: BrowserSession, targets: external_exports.array(BrowserTarget) }).strict();
+var BrowserOpenOutput = external_exports.object({
+  session: BrowserSession,
+  targets: external_exports.array(AgentBrowserTarget),
+  otherTabCount: external_exports.number().int().nonnegative().optional(),
+  observation: CompactBrowserObservation.optional(),
+  attachedProfile: AgentAttachedProfile.optional(),
+  otherAttachedProfiles: external_exports.array(AgentAttachedProfile).optional()
+}).strict();
 var BrowserTabsInput = external_exports.discriminatedUnion("operation", [
   external_exports.object({ operation: external_exports.literal("list"), browserSessionId: external_exports.string().uuid() }).strict(),
   external_exports.object({
@@ -639,9 +698,11 @@ var BrowserTabsInput = external_exports.discriminatedUnion("operation", [
     targetId: external_exports.string().min(1).max(512)
   }).strict()
 ]);
-var BrowserTabsOutput = BrowserTargetListResponse.safeExtend({
+var BrowserTabsOutput = external_exports.object({
+  browserSessionId: external_exports.string().uuid(),
+  targets: external_exports.array(AgentBrowserTarget),
   mutationObservation: CompactBrowserObservation.optional()
-});
+}).strict();
 var BrowserObserveInput = external_exports.object({
   browserSessionId: external_exports.string().uuid(),
   targetId: external_exports.string().min(1).max(512),
@@ -846,7 +907,7 @@ function createInteractionAttemptToolDefinitions(input) {
     name: "interaction_discover",
     codemodePath: ["interaction", "discover"],
     title: "Discover browsers and computers",
-    description: `Discover browsers and computers. For the user's existing/current/personal Chrome, use scope=attached_browsers before browser_open and select an actual attachedBrowsers device. This reads only Chrome profiles and extension bridges, avoiding unrelated sessions and saved identities. The default current_session scope lists this agent session's BrowserSessions and ComputerSessions. Use scope=workspace only for reusable identities or peer/child resources; that inventory can be large. An attachedBrowserBridge only means the machine is ready for the extension; only attachedBrowsers are real user Chrome profiles/tabs. If none exist, the person needs a Connected Machine first (post the Connected Machine card with capability_authorization_request api:connected-machine) and then the Opengeni Browser Chrome extension: ${OPENGENI_BROWSER_EXTENSION_URL}. Leave includeTerminal=false unless ended history is specifically required.`,
+    description: `Discover browsers and computers. To use the user's existing/current/personal Chrome, call browser_open with placement={kind:'attached_device'} directly; use scope=attached_browsers only to pick a specific Chrome profile or to see why none is connected. That scope reads only Chrome profiles and extension bridges, avoiding unrelated sessions and saved identities. The default current_session scope lists this agent session's BrowserSessions and ComputerSessions. Use scope=workspace only for reusable identities or peer/child resources; that inventory can be large. An attachedBrowserBridge only means the machine is ready for the extension; only attachedBrowsers are real user Chrome profiles/tabs. If none exist, the person needs a Connected Machine first (post the Connected Machine card with capability_authorization_request api:connected-machine) and then the Opengeni Browser Chrome extension: ${OPENGENI_BROWSER_EXTENSION_URL}. Leave includeTerminal=false unless ended history is specifically required.`,
     input: DiscoveryInput,
     output: DiscoveryOutput,
     readOnly: true,
@@ -865,8 +926,7 @@ function createInteractionAttemptToolDefinitions(input) {
           browsers: [],
           computers: [],
           identities: [],
-          attachedBrowserBridges: attached2.bridges,
-          attachedBrowsers: attached2.devices
+          ...agentAttachedInventory(attached2)
         };
       }
       const listFilter = {
@@ -901,8 +961,7 @@ function createInteractionAttemptToolDefinitions(input) {
           value.includeTerminal ?? false
         ),
         identities: scope === "workspace" ? identities.identities : [],
-        attachedBrowserBridges: scope === "workspace" ? attached.bridges : [],
-        attachedBrowsers: scope === "workspace" ? attached.devices : []
+        ...scope === "workspace" ? agentAttachedInventory(attached) : { attachedBrowserBridges: [], attachedBrowsers: [] }
       };
     }
   });
@@ -910,7 +969,7 @@ function createInteractionAttemptToolDefinitions(input) {
     name: "browser_open",
     codemodePath: ["interaction", "browser", "open"],
     title: "Open or reuse browser",
-    description: `Open a managed BrowserSession on the current agent placement, reuse a relevant compatible live session by default, attach to an explicit workspace BrowserSession, or open an attached Chrome profile by passing placement={kind:'attached_device',deviceId}. This does not infer or attach the user's existing Chrome: for requests about 'my browser', 'my tabs', or current Chrome, call interaction_discover first and select an actual attachedBrowsers device; if none exists, explain that the Chrome extension must be connected instead of silently creating a blank managed browser (it needs a Connected Machine, then the Opengeni Browser extension: ${OPENGENI_BROWSER_EXTENSION_URL}). BrowserSessions persist across tool calls; shell-launched browser daemons do not survive remote-command cleanup. Never switch to the user's attached Chrome as a fallback for a failed managed browser unless the user requested that profile. A new attached session opens a dedicated tab. Managed Chromium defaults to headed so OAuth and later human interaction use a supported browser; request headless=true only for agent-only work that will not require sign-in or human control. Operator-enabled disposable sandbox verification may explicitly request storageMode=ephemeral_context with headless=true: no saved identity, route, Computer, checkpoint or resume; process loss ends the session. Default private_profile storage is unchanged. Returns exact session and tab state.`,
+    description: `Open a managed BrowserSession on the current agent placement, reuse a relevant compatible live session by default, attach to an explicit workspace BrowserSession, or open the user's own Chrome with placement={kind:'attached_device'}. Use that directly for requests about 'my browser', 'my tabs', or current Chrome: it opens the only Chrome profile connected through the Opengeni Browser extension, or else the most recently active one (reported as attachedProfile, the rest as otherAttachedProfiles). Add deviceId (from interaction_discover scope=attached_browsers or otherAttachedProfiles) only when the user wants a different profile. Omitting placement never uses the user's Chrome. If no profile is connected, explain that the Chrome extension must be connected instead of silently creating a blank managed browser (it needs a Connected Machine, then the Opengeni Browser extension: ${OPENGENI_BROWSER_EXTENSION_URL}). BrowserSessions persist across tool calls; shell-launched browser daemons do not survive remote-command cleanup. Never switch to the user's attached Chrome as a fallback for a failed managed browser unless the user requested that profile. A new attached session opens a dedicated tab. Managed Chromium defaults to headed so OAuth and later human interaction use a supported browser; request headless=true only for agent-only work that will not require sign-in or human control. Operator-enabled disposable sandbox verification may explicitly request storageMode=ephemeral_context with headless=true: no saved identity, route, Computer, checkpoint or resume; process loss ends the session. Default private_profile storage is unchanged. Returns exact session and tab state, plus observation: a compact snapshot of the opened (or selected) tab when one is available. With initialUrl, targets holds only the opened tab and otherTabCount counts the rest (browser_tabs list shows them). Reuse its refs and generations for the first action instead of observing again.`,
     input: BrowserOpenInput,
     output: BrowserOpenOutput,
     readOnly: false,
@@ -941,10 +1000,12 @@ function createInteractionAttemptToolDefinitions(input) {
           value.targetId
         );
       } else if (value.operation === "close") {
-        return await input.transport.closeBrowserTarget(
-          input.workspaceId,
-          value.browserSessionId,
-          value.targetId
+        return agentTargetList(
+          await input.transport.closeBrowserTarget(
+            input.workspaceId,
+            value.browserSessionId,
+            value.targetId
+          )
         );
       }
       const tabs = await input.transport.listBrowserTargets(
@@ -952,16 +1013,16 @@ function createInteractionAttemptToolDefinitions(input) {
         value.browserSessionId
       );
       return mutationObservation ? {
-        ...tabs,
+        ...agentTargetList(tabs),
         mutationObservation: projectBrowserObservation(mutationObservation, "compact")
-      } : tabs;
+      } : agentTargetList(tabs);
     }
   });
   add({
     name: "browser_observe",
     codemodePath: ["interaction", "browser", "observe"],
     title: "Observe browser tab",
-    description: "Read one tab's URL, title, viewport, causal generations, and a bounded accessibility view. Compact view is the default: agentView lists selected refs and reports omitted nodes and clipped fields; it is not a complete page tree. Set view=full for the complete accessibility snapshot. Set includeScreenshot=true to add a current still image as tool image content; browser_screenshot is faster when only pixels are needed.",
+    description: "Read one tab's URL, title, viewport, causal generations, and a bounded accessibility view. Compact view is the default: agentView lists selected refs, and omittedNodeCount or clippedFieldCount appear only when something was left out; it is not a complete page tree. Empty and default fields are omitted. Set view=full for the complete accessibility snapshot. Set includeScreenshot=true to add a current still image as tool image content; browser_screenshot is faster when only pixels are needed.",
     input: BrowserObserveInput,
     output: BrowserAgentObservation,
     readOnly: true,
@@ -1108,7 +1169,7 @@ function createInteractionAttemptToolDefinitions(input) {
     name: "browser_act",
     codemodePath: ["interaction", "browser", "act"],
     title: "Act in browser tab",
-    description: "Perform one semantic-first browser action or bounded batch. Prefer action={type:'batch',actions:[...],fenceEachAction:true} for predictable edits in the same observed document, such as filling known form fields before one authorized submit. Pause for new page state, a dialog, or a decision instead of batching steps that depend on an unseen result. Reuse a page observation, when present, from tab open/select or a prior action; browser_open returns only session/tab metadata, so observe when page content is needed. Observe again after page changes or when needed content was omitted. If an action reports outcome_unknown, inspect the outcome and do not replay the batch. Use viewport to set page width, height, desktop/mobile layout and touch emulation, then check the measured viewport in the returned observation; emulation does not prove physical mobile-browser behavior. Use history back/forward for tab navigation; keypress shortcuts are page input and may not navigate browser history. A press key is one character or a key name (Enter, Tab, Escape, Backspace, Delete, Insert, Home, End, PageUp, PageDown, ArrowUp/Down/Left/Right, Space, F1-F24), optionally prefixed by Ctrl+, Alt+, Shift+, Meta+ or Mod+. The explicit activate action foregrounds the target in the user's desktop browser; use only when that is intended. Permission actions set a managed browser's web permission for this tab's exact current top-level origin. Omit generation fences to fetch fresh generation metadata without scanning accessibility; supplying all three fences skips that state read while preserving controller validation. The default receipt includes a compact accessibility view with explicit omissions; set view=full for the complete observation, or view=none when no post-action tree is needed. An upload action takes workspace File IDs; the artifact.artifactId returned by sandbox_file_publish is one. Text in fill, type and clipboard write may contain {{secret:\u2026}} references; the value (or the current TOTP code for /otp) is typed at dispatch and never shown to you. Use type with mode:'keys' for split one-time-code boxes or inputs that ignore pasted text.",
+    description: "Perform one semantic-first browser action or bounded batch. Prefer action={type:'batch',actions:[...],fenceEachAction:true} for predictable edits in the same observed document, such as filling known form fields before one authorized submit. Pause for new page state, a dialog, or a decision instead of batching steps that depend on an unseen result. Reuse a page observation, when present, from browser_open, tab open/select or a prior action; observe only when none is present or it lacks needed content. Observe again after page changes or when needed content was omitted. If an action reports outcome_unknown, inspect the outcome and do not replay the batch. Use viewport to set page width, height, desktop/mobile layout and touch emulation, then check the measured viewport in the returned observation; emulation does not prove physical mobile-browser behavior. Use history back/forward for tab navigation; keypress shortcuts are page input and may not navigate browser history. A press key is one character or a key name (Enter, Tab, Escape, Backspace, Delete, Insert, Home, End, PageUp, PageDown, ArrowUp/Down/Left/Right, Space, F1-F24), optionally prefixed by Ctrl+, Alt+, Shift+, Meta+ or Mod+. The explicit activate action foregrounds the target in the user's desktop browser; use only when that is intended. Permission actions set a managed browser's web permission for this tab's exact current top-level origin. Omit generation fences to fetch fresh generation metadata without scanning accessibility; supplying all three fences skips that state read while preserving controller validation. The default receipt includes a compact accessibility view with explicit omissions; set view=full for the complete observation, or view=none when no post-action tree is needed. An upload action takes workspace File IDs; the artifact.artifactId returned by sandbox_file_publish is one. Text in fill, type and clipboard write may contain {{secret:\u2026}} references; the value (or the current TOTP code for /otp) is typed at dispatch and never shown to you. Use type with mode:'keys' for split one-time-code boxes or inputs that ignore pasted text.",
     input: BrowserActInput,
     output: BrowserAgentActionReceipt,
     readOnly: false,
@@ -1127,7 +1188,7 @@ function createInteractionAttemptToolDefinitions(input) {
           action: value.action
         }
       );
-      return receipt.observation && (value.view ?? "compact") === "compact" ? { ...receipt, observation: projectBrowserObservation(receipt.observation, "compact") } : receipt;
+      return value.view === "full" ? receipt : compactActionReceipt(receipt);
     }
   });
   add({
@@ -1646,7 +1707,43 @@ function createInteractionAttemptToolDefinitions(input) {
 }
 function nativeCuaSchema(variants) {
   const unique = [...new Map(variants.map((schema) => [JSON.stringify(schema), schema])).values()];
-  return unique.length === 1 ? unique[0] : { type: "object", anyOf: unique };
+  if (unique.length === 1) return unique[0];
+  const properties = {};
+  const names = [...new Set(unique.flatMap((schema) => Object.keys(objectProperties(schema))))];
+  for (const name of names) {
+    const alternatives = unique.map((schema) => objectProperties(schema)[name]).filter((value) => isJsonObject(value));
+    const distinct = /* @__PURE__ */ new Map();
+    for (const schema of alternatives) {
+      const key = JSON.stringify(withoutWording(schema));
+      if (!distinct.has(key)) distinct.set(key, schema);
+    }
+    const options = [...distinct.values()];
+    properties[name] = options.length === 1 ? options[0] : { anyOf: options };
+  }
+  const required = names.filter(
+    (name) => unique.every(
+      (schema) => Array.isArray(schema.required) ? schema.required.includes(name) : false
+    )
+  );
+  return {
+    type: "object",
+    properties,
+    ...required.length > 0 ? { required } : {},
+    ...unique.every((schema) => schema.additionalProperties === false) ? { additionalProperties: false } : {}
+  };
+}
+function objectProperties(schema) {
+  return isJsonObject(schema.properties) ? schema.properties : {};
+}
+function isJsonObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function withoutWording(value) {
+  if (Array.isArray(value)) return value.map(withoutWording);
+  if (!isJsonObject(value)) return value;
+  return Object.fromEntries(
+    Object.entries(value).filter(([key]) => key !== "description" && key !== "title" && key !== "default").sort(([a], [b]) => a.localeCompare(b)).map(([key, entry]) => [key, withoutWording(entry)])
+  );
 }
 function filterDiscoveredSessions(sessions, sessionId, scope, includeTerminal) {
   return sessions.filter(
@@ -1703,15 +1800,20 @@ function createFirstPartyInteractionAttemptToolDefinitions(input) {
 async function openBrowser(transport, workspaceId, sourceSessionId, value, context) {
   let session;
   let created = false;
+  let profileChoice;
   if (value.browserSessionId) {
     session = await transport.getBrowserSession(workspaceId, value.browserSessionId);
     if (value.storageMode && browserSessionStorageMode(session) !== value.storageMode)
       throw new Error("existing BrowserSession storage mode does not match request");
   } else {
-    const listed = value.mode === "new" ? { sessions: [] } : await transport.listBrowserSessions(workspaceId, {
-      associatedSessionId: sourceSessionId,
-      includeTerminal: false
-    });
+    const resolveProfile = value.placement?.kind === "attached_device" && !("deviceId" in value.placement);
+    const [listed, attachedInventory] = await Promise.all([
+      value.mode === "new" ? { sessions: [] } : transport.listBrowserSessions(workspaceId, {
+        associatedSessionId: sourceSessionId,
+        includeTerminal: false
+      }),
+      resolveProfile ? transport.listAttachedBrowsers(workspaceId, { includeDisconnected: false }) : null
+    ]);
     const requestedHeadless = value.headless ?? false;
     const reusable = value.mode === "new" ? null : newestRelevant(
       listed.sessions.filter(
@@ -1723,6 +1825,8 @@ async function openBrowser(transport, workspaceId, sourceSessionId, value, conte
       session = reusable;
     } else {
       created = true;
+      if (attachedInventory) profileChoice = chooseAttachedProfile(attachedInventory);
+      const placement = profileChoice ? { kind: "attached_device", deviceId: profileChoice.chosen.id } : value.placement;
       session = (await transport.createBrowserSession(workspaceId, {
         operationId: context.operationId,
         sessionId: sourceSessionId,
@@ -1730,7 +1834,7 @@ async function openBrowser(transport, workspaceId, sourceSessionId, value, conte
         ...value.initialUrl ? { initialUrl: value.initialUrl } : {},
         headless: requestedHeadless,
         ...value.storageMode ? { storageMode: value.storageMode } : {},
-        ...value.placement ? { placement: value.placement } : {},
+        ...placement ? { placement } : {},
         ...value.identityId ? { identityId: value.identityId } : {},
         ...value.baseRevisionId ? { baseRevisionId: value.baseRevisionId } : {},
         ...value.networkRouteId ? { networkRouteId: value.networkRouteId } : {},
@@ -1743,7 +1847,11 @@ async function openBrowser(transport, workspaceId, sourceSessionId, value, conte
       operationId: context.operationId
     })).session;
   }
-  if (session.lifecycle !== "active") return { session, targets: [] };
+  const chosenProfile = profileChoice ? {
+    attachedProfile: agentAttachedProfile(profileChoice.chosen),
+    ...profileChoice.others.length > 0 ? { otherAttachedProfiles: profileChoice.others.map(agentAttachedProfile) } : {}
+  } : {};
+  if (session.lifecycle !== "active") return { session, targets: [], ...chosenProfile };
   let targets = (await transport.listBrowserTargets(workspaceId, session.id)).targets;
   if (value.initialUrl && !created && !targets.some((target) => sameBrowserUrl(target.url, value.initialUrl))) {
     if (!transport.openBrowserTargetWithInventory) {
@@ -1762,7 +1870,50 @@ async function openBrowser(transport, workspaceId, sourceSessionId, value, conte
     }
     targets = inventory.targets;
   }
-  return { session, targets };
+  const primary = openedBrowserTarget(targets, value.initialUrl);
+  const observation = primary ? await observeOpenedBrowserTarget(transport, workspaceId, session.id, primary) : void 0;
+  const opened = value.initialUrl && primary && sameBrowserUrl(primary.url, value.initialUrl) ? primary : void 0;
+  const shown = opened && targets.length > 1 ? [opened] : targets;
+  return {
+    session,
+    targets: shown.map(agentBrowserTarget),
+    ...shown.length < targets.length ? { otherTabCount: targets.length - shown.length } : {},
+    ...observation ? { observation } : {},
+    ...chosenProfile
+  };
+}
+function chooseAttachedProfile(inventory) {
+  const usable = inventory.devices.filter((device) => device.state === "connected" && device.capabilities.debuggerAttachment).sort((left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt));
+  const [chosen, ...others] = usable;
+  if (!chosen) {
+    throw new OpenGeniApiError(
+      409,
+      `No Chrome profile is connected through the Opengeni Browser extension. The person needs a Connected Machine, then the extension: ${OPENGENI_BROWSER_EXTENSION_URL}`,
+      { code: "attached_browser_unavailable", retryable: false }
+    );
+  }
+  return { chosen, others };
+}
+function agentAttachedProfile(device) {
+  return {
+    id: device.id,
+    name: device.name,
+    ...device.profileLabel && device.profileLabel !== device.name ? { profileLabel: device.profileLabel } : {}
+  };
+}
+function openedBrowserTarget(targets, initialUrl) {
+  const pages = targets.filter((target) => target.kind === "page");
+  return (initialUrl ? pages.find((target) => sameBrowserUrl(target.url, initialUrl)) : void 0) ?? pages.find((target) => target.selected) ?? (pages.length === 1 ? pages[0] : void 0);
+}
+async function observeOpenedBrowserTarget(transport, workspaceId, browserSessionId, primary) {
+  try {
+    return projectBrowserObservation(
+      await transport.observeBrowserTarget(workspaceId, browserSessionId, primary.id),
+      "compact"
+    );
+  } catch {
+    return void 0;
+  }
 }
 function sameBrowserUrl(left, right) {
   try {
@@ -1830,14 +1981,47 @@ function flattenBrowserNodes(roots, scopeRef) {
       node: next.node,
       depth: next.depth,
       index: flattened.length,
-      withinScope
+      withinScope,
+      ...next.parentName !== void 0 ? { parentName: next.parentName } : {}
     });
     for (const child of [...next.node.children ?? []].reverse()) {
-      stack.push({ node: child, depth: next.depth + 1, withinScope });
+      stack.push({
+        node: child,
+        depth: next.depth + 1,
+        withinScope,
+        ...next.node.name !== void 0 ? { parentName: next.node.name } : {}
+      });
     }
   }
   return flattened;
 }
+var BROWSER_AGENT_STRUCTURAL_ROLES = /* @__PURE__ */ new Set([
+  "dialog",
+  "alertdialog",
+  "alert",
+  "status",
+  "navigation",
+  "main",
+  "form",
+  "table",
+  "grid",
+  "list",
+  "listbox",
+  "menu",
+  "menubar",
+  "tablist",
+  "radiogroup"
+]);
+function redundantAgentNode(flat) {
+  const { node } = flat;
+  if (node.actions.length > 0 || node.states.length > 0) return false;
+  const hasValue = node.value !== void 0 && node.value !== null && node.value !== "";
+  if (node.role === "text" || node.role === "StaticText") {
+    return !hasValue && !node.description && (!node.name || node.name === flat.parentName);
+  }
+  if (BROWSER_AGENT_STRUCTURAL_ROLES.has(node.role)) return false;
+  return !node.name && !node.description && !hasValue;
+}
 function boundedAgentField(value, onClip) {
   if (value.length <= BROWSER_AGENT_MAX_FIELD_LENGTH) return value;
   onClip();
@@ -1858,8 +2042,8 @@ function projectAgentNode(flat) {
     ...source.value !== void 0 ? {
       value: typeof source.value === "string" ? boundedAgentField(source.value, clip) : source.value
     } : {},
-    states: source.states.slice(0, 6).map((state) => boundedAgentField(state, clip)),
-    actions: source.actions.slice(0, 6).map((action) => boundedAgentField(action, clip))
+    ...source.states.length > 0 ? { states: source.states.slice(0, 6).map((state) => boundedAgentField(state, clip)) } : {},
+    ...source.actions.length > 0 ? { actions: source.actions.slice(0, 6).map((action) => boundedAgentField(action, clip)) } : {}
   };
   if (source.states.length > 6) clippedFieldCount += source.states.length - 6;
   if (source.actions.length > 6) clippedFieldCount += source.actions.length - 6;
@@ -1897,28 +2081,90 @@ function projectBrowserObservation(observation, view) {
   if (view === "full") return observation;
   const semantic = observation.semantic;
   const roots = semantic?.kind === "snapshot" ? semantic.roots : semantic?.kind === "diff" ? semantic.changed : [];
-  const flattened = flattenBrowserNodes(roots);
+  const flattened = flattenBrowserNodes(roots).filter((flat) => !redundantAgentNode(flat));
   const projected = selectAgentNodes(
     flattened,
     BROWSER_AGENT_MAX_NODES,
     BROWSER_AGENT_MAX_NODE_BYTES
   );
+  const omittedNodeCount = flattened.length - projected.nodes.length;
+  const removedRefCount = semantic?.kind === "diff" ? semantic.removedRefs.length : 0;
+  const viewport = observation.viewport;
+  const diagnostics = observation.diagnostics;
+  const hasDiagnostics = diagnostics.consoleErrorCount > 0 || diagnostics.failedRequestCount > 0 || diagnostics.downloadCount > 0 || diagnostics.pageErrorCount > 0;
   return {
-    ...observation,
-    semantic: null,
+    target: agentBrowserTarget(observation.target),
+    ...observation.frameId ? { frameId: observation.frameId } : {},
+    ...viewport ? {
+      viewport: {
+        width: viewport.width,
+        height: viewport.height,
+        ...viewport.deviceScaleFactor !== 1 ? { deviceScaleFactor: viewport.deviceScaleFactor } : {},
+        ...viewport.maxTouchPoints > 0 ? { maxTouchPoints: viewport.maxTouchPoints } : {}
+      }
+    } : {},
+    ...observation.focusedRef ? { focusedRef: observation.focusedRef } : {},
+    ...observation.changedRegions.length > 0 ? { changedRegions: observation.changedRegions } : {},
+    ...hasDiagnostics ? { diagnostics } : {},
+    ...observation.dialog ? { dialog: observation.dialog } : {},
+    ...observation.screenshot ? { screenshot: observation.screenshot } : {},
     agentView: {
-      kind: "compact",
       sourceKind: semantic?.kind ?? "none",
       nodes: projected.nodes,
-      sourceNodeCount: flattened.length,
-      omittedNodeCount: flattened.length - projected.nodes.length,
-      removedRefCount: semantic?.kind === "diff" ? semantic.removedRefs.length : 0,
-      clippedFieldCount: projected.clippedFieldCount,
-      maxNodes: BROWSER_AGENT_MAX_NODES,
-      maxNodeBytes: BROWSER_AGENT_MAX_NODE_BYTES
+      ...omittedNodeCount > 0 ? { omittedNodeCount } : {},
+      ...removedRefCount > 0 ? { removedRefCount } : {},
+      ...projected.clippedFieldCount > 0 ? { clippedFieldCount: projected.clippedFieldCount } : {}
     }
   };
 }
+function agentBrowserTarget(target) {
+  return {
+    id: target.id,
+    kind: target.kind,
+    title: target.title,
+    url: target.url,
+    selected: target.selected,
+    controllerGeneration: target.controllerGeneration,
+    targetGeneration: target.targetGeneration,
+    documentGeneration: target.documentGeneration
+  };
+}
+function agentAttachedInventory(inventory) {
+  const attachedBrowsers = inventory.devices.map((device) => {
+    const unsupported = Object.entries(device.capabilities).filter(([, supported]) => !supported).map(([capability]) => capability);
+    return {
+      id: device.id,
+      name: device.name,
+      ...device.profileLabel ? { profileLabel: device.profileLabel } : {},
+      browserName: device.browserName,
+      platform: device.platform,
+      state: device.state,
+      tabCount: device.tabCount,
+      ...unsupported.length > 0 ? { unsupported } : {}
+    };
+  });
+  const anyConnected = inventory.devices.some((device) => device.state === "connected");
+  const attachedBrowserBridges = anyConnected ? [] : inventory.bridges.filter((bridge) => bridge.state === "online").map((bridge) => ({
+    enrollmentId: bridge.enrollmentId,
+    connectedProfileCount: bridge.connectedProfileCount
+  }));
+  return { attachedBrowserBridges, attachedBrowsers };
+}
+function agentTargetList(list) {
+  return {
+    browserSessionId: list.browserSessionId,
+    targets: list.targets.map(agentBrowserTarget)
+  };
+}
+function compactActionReceipt(receipt) {
+  return {
+    targetId: receipt.targetId,
+    state: receipt.state,
+    ...receipt.error ? { error: receipt.error } : {},
+    ...receipt.targets && receipt.targets.length > 0 ? { targets: receipt.targets } : {},
+    ...receipt.observation ? { observation: projectBrowserObservation(receipt.observation, "compact") } : {}
+  };
+}
 function readBrowserObservation(observation, input) {
   if (observation.semantic?.kind !== "snapshot") {
     throw new Error("browser focused read requires a complete accessibility snapshot");
@@ -2413,6 +2659,7 @@ function normalizedUrl(value) {
 
 // src/index.ts
 import {
+  mcpToolRecommendsApproval,
   normalizeCredentialProviderMcpUrl as normalizeCredentialProviderMcpUrl2,
   toolPolicyActionName,
   toolReviewContextFromSchema
@@ -4864,7 +5111,7 @@ import { existsSync, readdirSync } from "fs";
 // ../sdk/package.json
 var package_default = {
   name: "@opengeni/sdk",
-  version: "3.0.2-canary.38894290271001",
+  version: "3.1.2",
   description: "Framework-agnostic TypeScript SDK for the Opengeni API: typed client, session lifecycle, SSE event streaming with reconnect + replay-by-sequence, and proxy re-streaming helpers.",
   license: "Apache-2.0",
   repository: {
@@ -5082,7 +5329,7 @@ var package_default = {
 // ../react/package.json
 var package_default2 = {
   name: "@opengeni/react",
-  version: "3.0.2-canary.38894290271001",
+  version: "3.1.2",
   description: "React hooks and styled components for Opengeni: live session streaming, chat composer, message timeline, session status, and fleet views \u2014 token-themed (CSS variables), dark-first, built on Tailwind v4 + Radix + Motion.",
   license: "Apache-2.0",
   repository: {
@@ -5257,6 +5504,10 @@ var package_default2 = {
       types: "./src/session-agents-model.ts",
       default: "./src/session-agents-model.ts"
     },
+    "./scrollbars": {
+      types: "./src/scrollbars.ts",
+      default: "./src/scrollbars.ts"
+    },
     "./session-list-model": {
       types: "./src/session-list-model.ts",
       default: "./src/session-list-model.ts"
@@ -5415,7 +5666,7 @@ var package_default2 = {
 // ../codemode/package.json
 var package_default3 = {
   name: "@opengeni/codemode",
-  version: "3.0.2-canary.38894290271001",
+  version: "3.1.2",
   description: "Attempt-frozen programmatic tool catalog and execution authority for Opengeni.",
   license: "Apache-2.0",
   repository: {
@@ -5465,7 +5716,7 @@ var package_default3 = {
 // ../ogtool/package.json
 var package_default4 = {
   name: "@opengeni/ogtool",
-  version: "3.0.2-canary.38894290271001",
+  version: "3.1.2",
   description: "Codemode CLI and typed client entrypoint for an Opengeni execution attempt.",
   license: "Apache-2.0",
   repository: {
@@ -8898,6 +9149,7 @@ function installMcpApprovalPolicy(agent, policies, connectorActionPolicy, approv
           serverId: server.registryId,
           toolName: await server.unprefixedToolName(descriptor.name),
           inputSchema: descriptor.inputSchema,
+          recommendsApproval: mcpToolRecommendsApproval(descriptor),
           readReview: (name, args) => server.reviewContext(name, args),
           ...descriptor.title ? { title: descriptor.title } : {},
           ...accountLabel ? { accountLabel } : {}
@@ -8916,7 +9168,8 @@ function installMcpApprovalPolicy(agent, policies, connectorActionPolicy, approv
       const unprefixed = identity2?.toolName ?? tool2.name.slice(policy.prefix.length);
       const originalNeedsApproval = tool2.needsApproval.bind(tool2);
       const originalInvoke = tool2.invoke.bind(tool2);
-      const legacyApproval = !policy.connectorBacked && mcpToolRequiresApproval(policy.requireApproval, unprefixed);
+      const recommendsApproval = mcpToolRequiresApproval(policy.requireApproval, unprefixed) || identity2?.recommendsApproval === true;
+      const legacyApproval = !policy.connectorBacked && recommendsApproval;
       if (!policy.connectorBacked && !legacyApproval && !connectorActionPolicy) {
         return tool2;
       }
@@ -8938,14 +9191,14 @@ function installMcpApprovalPolicy(agent, policies, connectorActionPolicy, approv
           }),
           actionName: toolPolicyActionName(unprefixed, identity2?.inputSchema, args),
           ...legacyApproval ? { approvalMode: "session_mcp" } : {},
-          defaultDecision: mcpToolRequiresApproval(policy.requireApproval, unprefixed) ? "ask" : "allow"
+          defaultDecision: recommendsApproval ? "ask" : "allow"
         };
       };
       return {
         ...tool2,
         needsApproval: async (runContext, parsedInput, callId) => {
           if (!connectorActionPolicy) {
-            return mcpToolRequiresApproval(policy.requireApproval, unprefixed) || await originalNeedsApproval(runContext, parsedInput, callId);
+            return recommendsApproval || await originalNeedsApproval(runContext, parsedInput, callId);
           }
           if (!callId) {
             throw new Error("Connector action is missing its durable approval identity");
@@ -8960,7 +9213,7 @@ function installMcpApprovalPolicy(agent, policies, connectorActionPolicy, approv
             approvalRequiredCallIds.delete(callId);
             return false;
           }
-          const requiresApproval = preparation.managed ? preparation.decision === "ask" : mcpToolRequiresApproval(policy.requireApproval, unprefixed);
+          const requiresApproval = preparation.managed ? preparation.decision === "ask" : recommendsApproval;
           if (requiresApproval) approvalRequiredCallIds.add(callId);
           else approvalRequiredCallIds.delete(callId);
           return requiresApproval;
@@ -9159,7 +9412,7 @@ function installInteractionInterventionPolicy(agent, approvedToolCallId) {
 }
 function applyMcpApprovalPolicy(agent, settings, connectorActionPolicy, resolvedMcpConnectionIds, approvedToolCallId) {
   const policies = settings.mcpServers.filter(
-    (server) => Boolean(server.connectionRef) || Boolean(connectorActionPolicy && attemptToolSource(server.id) === "mcp") || server.requireApproval === true || Array.isArray(server.requireApproval) && server.requireApproval.length > 0
+    (server) => Boolean(server.connectionRef) || attemptToolSource(server.id) === "mcp" || server.requireApproval === true || Array.isArray(server.requireApproval) && server.requireApproval.length > 0
   ).map((server) => {
     const connectionId = () => {
       return resolvedMcpConnectionId(server, resolvedMcpConnectionIds) ?? (server.connectionRef ? null : sessionMcpApprovalConnectionId(server.id, server.url));
@@ -10324,7 +10577,7 @@ function installAttemptConnectorActionGatewayLifecycle(definitions, registry, re
           definition.inputSchema,
           arguments_
         ),
-        defaultDecision: attemptToolApproval(config, definition.identity.toolName) === "human" ? "ask" : "allow"
+        defaultDecision: definition.approval === "human" ? "ask" : "allow"
       };
     } : (approvalId, arguments_) => ({
       approvalId,
@@ -10515,7 +10768,7 @@ async function prepareToolGatewayDefinitionsFromServers(servers, registry, callI
           ...tool2.annotations ? { annotations: tool2.annotations } : {},
           ...tool2.icons ? { icons: tool2.icons } : {},
           source: attemptToolSource(server.registryId),
-          approval: attemptToolApproval(config, toolName),
+          approval: attemptToolApproval(config, toolName, tool2),
           effectAuthorityDigest: digestCanonicalJson({
             version: 1,
             serverId: server.registryId,
@@ -10630,8 +10883,8 @@ function attemptToolSource(serverId) {
   if (serverId === CODEX_APPS_MCP_SERVER_ID) return "codex_apps";
   return "mcp";
 }
-function attemptToolApproval(config, toolName) {
-  if (config.requireApproval === true || Array.isArray(config.requireApproval) && config.requireApproval.includes(toolName)) {
+function attemptToolApproval(config, toolName, tool2) {
+  if (config.requireApproval === true || Array.isArray(config.requireApproval) && config.requireApproval.includes(toolName) || attemptToolSource(config.id) === "mcp" && mcpToolRecommendsApproval(tool2)) {
     return "human";
   }
   return config.connectionRef ? "policy" : "none";
@@ -15562,6 +15815,7 @@ function sortJson(value) {
 export {
   INTERACTION_ATTEMPT_TOOL_NAMES,
   createInteractionAttemptToolDefinitions,
+  nativeCuaSchema,
   createFirstPartyInteractionAttemptToolDefinitions,
   interactionToolErrorOutput,
   secretReferenceToolResult,
@@ -15748,4 +16002,4 @@ export {
   runAzureCliLoginHook,
   renderSessionGoalContext2 as renderSessionGoalContext
 };
-//# sourceMappingURL=chunk-JDNBDSQV.js.map
+//# sourceMappingURL=chunk-TE3JIUL6.js.map