@orkestrel/browser 0.0.23 → 0.0.25

package/dist/src/server/index.cjs

@@ -38,8 +38,18 @@ var BROWSER_CDP_VERSION_PATH = "/json/version";
 * other target category Chromium reports — `'/json/list'`.
 */
 var BROWSER_CDP_LIST_PATH = "/json/list";
-/** Lists the flags always passed to a launched browser process, alongside the caller's own. */
-var BROWSER_LAUNCH_ARGS = Object.freeze(["--no-first-run", "--no-default-browser-check"]);
+/**
+* Lists the flags always passed to a launched browser process, alongside the caller's own.
+*
+* @remarks
+* Disables account sync so extension installs cannot reset URL loader factories during page imports.
+* Edge can still sign a fresh Windows profile in to the operating-system account.
+*/
+var BROWSER_LAUNCH_ARGS = Object.freeze([
+	"--no-first-run",
+	"--no-default-browser-check",
+	"--disable-sync"
+]);
 /**
 * Names the flag that enables headless mode on a launched browser process, `'--headless=new'`.
 */
@@ -219,6 +229,10 @@ var BROWSER_SERVER_UNAVAILABLE = "BROWSER_SERVER_UNAVAILABLE";
 var BROWSER_SERVER_LAUNCH = "BROWSER_SERVER_LAUNCH";
 /** Sets the default number of warm browsers to 1. */
 var BROWSER_SERVER_POOL_SIZE = 1;
+/** Sets the default context capacity per browser, including the shared holder. */
+var BROWSER_SERVER_CONTEXTS = 2;
+/** Limits context capacity to the largest measured per-browser count. */
+var BROWSER_SERVER_CONTEXTS_LIMIT = 4;
 /** Limits the number of warm browsers to 3. */
 var BROWSER_SERVER_POOL_LIMIT = 3;
 /** Permits one failed refill before the next failure spends the bound. */
@@ -237,6 +251,84 @@ var BROWSER_SERVER_OPTIONS = "BROWSER_SERVER_OPTIONS";
 var BROWSER_SERVER_CRASH = "BROWSER_SERVER_CRASH";
 /** Names an interrupted call whose outcome is unknown. */
 var BROWSER_SERVER_UNRESOLVED = "BROWSER_SERVER_UNRESOLVED";
+/** Names the refusal when every browser is admitted to a holder. */
+var BROWSER_SERVER_BUSY = "BROWSER_SERVER_BUSY";
+/** Names the refusal for an unknown or ended holder. */
+var BROWSER_SERVER_HOLDER = "BROWSER_SERVER_HOLDER";
+/** Defines the holder tools independently of the shared browser's vocabulary. */
+var BROWSER_SERVER_COPY = Object.freeze({
+	acquire: Object.freeze({
+		name: "acquire",
+		description: "Acquires an independent browser and returns its holder id and tool catalog. Destroy the holder when its work ends.",
+		parameters: Object.freeze({
+			type: "object",
+			properties: Object.freeze({ purpose: Object.freeze({
+				type: "string",
+				description: "The work this browser will serve."
+			}) }),
+			required: Object.freeze(["purpose"])
+		})
+	}),
+	execute: Object.freeze({
+		name: "execute",
+		description: "Runs a tool on the selected holder, with that tool’s arguments inside arguments. Get its available tools with tools.",
+		parameters: Object.freeze({
+			type: "object",
+			properties: Object.freeze({
+				holder: Object.freeze({
+					type: "string",
+					description: "The holder id returned by acquire."
+				}),
+				name: Object.freeze({
+					type: "string",
+					description: "The tool name from this holder’s catalog."
+				}),
+				arguments: Object.freeze({
+					type: "object",
+					description: "The arguments for the selected tool."
+				})
+			}),
+			required: Object.freeze([
+				"holder",
+				"name",
+				"arguments"
+			])
+		}),
+		annotations: Object.freeze({
+			pure: false,
+			untrusted: true
+		})
+	}),
+	tools: Object.freeze({
+		name: "tools",
+		description: "Lists the selected holder’s tools, including tools supplied by its page.",
+		parameters: Object.freeze({
+			type: "object",
+			properties: Object.freeze({ holder: Object.freeze({
+				type: "string",
+				description: "The holder id returned by acquire."
+			}) }),
+			required: Object.freeze(["holder"])
+		}),
+		annotations: Object.freeze({
+			pure: true,
+			untrusted: true
+		})
+	}),
+	destroy: Object.freeze({
+		name: "destroy",
+		description: "Ends the selected holder and destroys its browser. Calls still running on that holder report an unresolved outcome.",
+		parameters: Object.freeze({
+			type: "object",
+			properties: Object.freeze({ holder: Object.freeze({
+				type: "string",
+				description: "The holder id returned by acquire."
+			}) }),
+			required: Object.freeze(["holder"])
+		}),
+		annotations: Object.freeze({ pure: false })
+	})
+});
 //#endregion
 //#region src/server/errors.ts
 /**
@@ -280,6 +372,25 @@ function isBrowserDestroyedError(value) {
 //#endregion
 //#region src/server/helpers.ts
 /**
+* Parses positive integer viewport dimensions in WIDTHxHEIGHT form.
+* @param value - The viewport environment variable, or undefined when unset
+* @returns The viewport, or undefined when absent or malformed
+* @example
+* parseBrowserViewport('1280x720') // { width: 1280, height: 720 }
+*/
+function parseBrowserViewport(value) {
+	if (value === void 0) return void 0;
+	const match = /^([0-9]+)x([0-9]+)$/u.exec(value);
+	if (match === null || match[0] !== value) return void 0;
+	const width = (0, _orkestrel_contract.parseInteger)(match[1]);
+	const height = (0, _orkestrel_contract.parseInteger)(match[2]);
+	if (width === void 0 || height === void 0 || !Number.isSafeInteger(width) || !Number.isSafeInteger(height) || width <= 0 || height <= 0) return void 0;
+	return {
+		width,
+		height
+	};
+}
+/**
 * Probes whether a process has not been confirmed absent.
 * @param pid - Process identifier to probe with signal zero
 * @returns True if the host has not confirmed absence with ESRCH; false otherwise
@@ -945,7 +1056,7 @@ var FileBrowserWriter = class {
 };
 //#endregion
 //#region package.json
-var version = "0.0.23";
+var version = "0.0.25";
 //#endregion
 //#region src/server/BrowserMCPServer.ts
 /**
@@ -960,21 +1071,28 @@ var version = "0.0.23";
 * absent. After the launch, a tool the toolset's manager adds under another name, such as a page
 * tool it adopts, is mirrored as a dispatcher with that tool's definition, and the mirror is
 * removed when the toolset withdraws the tool, so the server's tool list changes and a subscribed
-* client is notified. Startup warms the pool and leases one validated browser. The legacy
-* handshake and every tool call await that setup; concurrent callers share a replacement lease.
+* client is notified. The server also advertises `acquire`, `execute`, `tools`, and `destroy` with
+* `BROWSER_SERVER_COPY`. Startup warms the pool and assigns a prepared context to the shared holder. The legacy
+* handshake and browser calls await that setup. Named holders each own a lease, a pending grant,
+* and loss notices; concurrent calls on a holder share its replacement grant. Ending a holder
+* closes its context and releases its lease, and admission counts that holder until disposal settles.
 * A launch creates `ROOT/.profiles/PID-UUID/` exclusively, connects a browser that never attaches to an
 * existing endpoint, opens one page in an isolated context, and constructs the page toolset with
 * that context and the file journey and run stores under the root, on a manager the toolset owns.
 * A dispatcher forwards its arguments and the call's context, signal included, to the toolset's
 * manager and returns that manager's value, or rejects with its failure message; a text value
 * reaches the client as one text block rather than as its JSON text.
-* A disconnect or current-page crash retires its slot. A failed call receives a liveness ping;
+* A disconnect retires its browser and every hosted generation. A current-page crash retires only
+* that holder's context. A failed call receives a liveness ping;
 * loss makes its outcome unresolved, while a known success remains successful. Pending losses
 * prefix the next outcome on a successor, or a refusal, and calls are never repeated.
+* Concurrent checks share one ping per slot. Cancelling a call ends only its wait; the ping keeps
+* its deadline and records loss for the next call.
 *
 * `start()` serves stdio and destroys the server at the end of its input, on `SIGINT`, and on
 * `SIGTERM`. `destroy()` stops reading requests and removes every dispatcher, then destroys every
-* slot through the pool — its toolset, which aborts the active replay, then its browser, then its
+* slot through the pool — each toolset, which aborts its active replay, then its context and downloads,
+* then its browser and its
 * profile — and rechecks the profile folders this server made or kept.
 *
 * Chromium on Linux refuses to start as the root user unless its sandbox is disabled, so a server
@@ -994,6 +1112,7 @@ var BrowserMCPServer = class {
 	#root;
 	#headless;
 	#executable;
+	#viewport;
 	#readonly;
 	#launcher;
 	#input;
@@ -1002,22 +1121,40 @@ var BrowserMCPServer = class {
 	#abort = new AbortController();
 	#signal;
 	#vocabulary;
-	#added;
-	#removed;
-	#cleared;
+	#mirrored;
 	#pool;
 	#log;
 	#folders = /* @__PURE__ */ new Set();
 	#faults = /* @__PURE__ */ new Set();
 	#losses = /* @__PURE__ */ new WeakMap();
+	#departures = /* @__PURE__ */ new WeakMap();
+	#pings = /* @__PURE__ */ new WeakMap();
 	#watches = /* @__PURE__ */ new Map();
-	#notice = /* @__PURE__ */ new Set();
+	#observed = /* @__PURE__ */ new Map();
+	#prepared = /* @__PURE__ */ new Map();
+	#owned = /* @__PURE__ */ new Map();
+	#building = /* @__PURE__ */ new Map();
+	#cleaning = /* @__PURE__ */ new WeakMap();
+	#endings = /* @__PURE__ */ new WeakMap();
+	#retentions = /* @__PURE__ */ new Map();
+	#shared = {
+		id: "shared",
+		purpose: "Shared browser",
+		abort: this.#abort
+	};
+	#holders = /* @__PURE__ */ new Map([[this.#shared.id, this.#shared]]);
+	#leases = /* @__PURE__ */ new Map();
+	#grants = /* @__PURE__ */ new Map();
+	#notices = /* @__PURE__ */ new Map();
+	#disposals = /* @__PURE__ */ new Map();
+	#drains = /* @__PURE__ */ new Map();
+	#readers = /* @__PURE__ */ new Map();
+	#writers = /* @__PURE__ */ new Set();
+	#admission;
 	#reference;
 	#references = 0;
 	#failure;
 	#stranded;
-	#lease;
-	#granting;
 	#starting;
 	#sweeping;
 	#closing;
@@ -1028,30 +1165,51 @@ var BrowserMCPServer = class {
 	*/
 	constructor(options) {
 		const size = options?.pool?.size ?? 1;
+		const contexts = options?.pool?.contexts ?? 2;
 		if (!(0, _orkestrel_contract.isInteger)(size) || size < 1 || size > 3) throw new _src_core.BrowserError(`pool.size must be an integer from 1 through 3`, BROWSER_SERVER_OPTIONS);
+		if (!(0, _orkestrel_contract.isInteger)(contexts) || contexts < 1 || contexts > 4) throw new _src_core.BrowserError(`pool.contexts must be an integer from 1 through 4`, BROWSER_SERVER_OPTIONS);
+		this.#admission = size * contexts;
 		this.#log = options?.log ?? process.stderr;
 		this.#reference = this.#issue.bind(this);
 		this.#pool = (0, _orkestrel_pool.createPool)({
 			create: this.#warm.bind(this),
-			destroy: (slot) => this.#destroySlot(slot.profile, slot.browser, slot.toolset, this.#losses.get(slot)?.cause),
+			destroy: this.#destroyRecord.bind(this),
 			validate: this.#validate.bind(this),
 			watch: this.#watch.bind(this),
 			error: this.#fault.bind(this),
 			min: size,
+			capacity: contexts,
 			restarts: 1
 		});
 		this.#root = (0, node_path.resolve)(options?.root ?? "tmp/browsers");
 		this.#headless = options?.headless ?? true;
 		this.#executable = options?.executable;
+		this.#viewport = options?.viewport;
 		this.#readonly = options?.readonly ?? false;
 		this.#launcher = options?.launch ?? createBrowser;
 		this.#input = options?.stdio?.input ?? process.stdin;
 		this.#tools = (0, _orkestrel_tool.createToolManager)();
 		const names = [..._src_core.BROWSER_TOOL_NAMES, ..._src_core.BROWSER_JOURNEY_TOOL_NAMES];
-		this.#vocabulary = new Set(names);
+		this.#vocabulary = /* @__PURE__ */ new Set([...names, ...Object.keys(BROWSER_SERVER_COPY)]);
 		for (const name of names) this.#tools.add((0, _orkestrel_tool.createTool)({
 			..._src_core.BROWSER_TOOL_COPY[name],
-			execute: this.#forward.bind(this, name)
+			execute: this.#forward.bind(this, this.#shared, name)
+		}));
+		this.#tools.add((0, _orkestrel_tool.createTool)({
+			...BROWSER_SERVER_COPY.acquire,
+			execute: this.#acquire.bind(this)
+		}));
+		this.#tools.add((0, _orkestrel_tool.createTool)({
+			...BROWSER_SERVER_COPY.execute,
+			execute: this.#dispatch.bind(this)
+		}));
+		this.#tools.add((0, _orkestrel_tool.createTool)({
+			...BROWSER_SERVER_COPY.tools,
+			execute: this.#catalog.bind(this)
+		}));
+		this.#tools.add((0, _orkestrel_tool.createTool)({
+			...BROWSER_SERVER_COPY.destroy,
+			execute: this.#dispose.bind(this)
 		}));
 		const server = (0, _orkestrel_mcp.createMCPServer)({
 			identity: {
@@ -1067,9 +1225,6 @@ var BrowserMCPServer = class {
 			...options?.stdio?.output === void 0 ? {} : { output: options.stdio.output }
 		});
 		this.#signal = this.#end.bind(this);
-		this.#added = this.#mirror.bind(this);
-		this.#removed = this.#withdraw.bind(this);
-		this.#cleared = this.#clear.bind(this);
 	}
 	async start() {
 		if (this.#closing !== void 0) throw this.#ended();
@@ -1090,7 +1245,7 @@ var BrowserMCPServer = class {
 			if (this.#closing !== void 0) return;
 			this.#sweeping = this.#sweep();
 			const warming = this.#pool.start().then(void 0, (error) => error);
-			await this.#grant(this.#abort.signal);
+			await this.#grant(this.#shared, this.#abort.signal);
 			if (this.#closing !== void 0) return;
 			warming.then(this.#exhaust.bind(this));
 		} catch (error) {
@@ -1106,13 +1261,18 @@ var BrowserMCPServer = class {
 		this.#transport.stop();
 		for (const tool of this.#tools.tools()) this.#tools.remove(tool.name);
 		this.#unmirror();
-		this.#lease = void 0;
+		for (const generation of this.#observed.keys()) this.#untrack(generation);
+		this.#leases.clear();
+		for (const holder of this.#holders.values()) holder.abort.abort();
 		this.#abort.abort();
 		const barrier = this.#pool.destroy().catch((error) => {
 			for (const failure of (0, _orkestrel_pool.isPoolError)(error) ? error.context?.failures ?? [error] : [error]) this.#faults.add(failure);
 		});
 		await this.#starting?.catch(() => void 0);
 		await barrier;
+		await Promise.allSettled(this.#grants.values());
+		await Promise.allSettled(this.#disposals.values());
+		this.#holders.clear();
 		await this.#sweeping;
 		if (this.#stranded !== void 0) this.#faults.add(this.#stranded);
 		for (const folder of this.#folders) {
@@ -1157,22 +1317,143 @@ var BrowserMCPServer = class {
 		process.exitCode = 1;
 		this.#write(`browse: ${describeBrowserServerLoss(BROWSER_SERVER_TEARDOWN, error)}`);
 	}
-	async #forward(name, args, context) {
-		let slot;
+	async #acquire(args, context) {
+		context.signal.throwIfAborted();
+		if (this.#closing !== void 0) throw this.#ended();
+		const purpose = args["purpose"];
+		if (!(0, _orkestrel_contract.isString)(purpose) || purpose.trim().length === 0) throw new _src_core.BrowserError("purpose must describe the work", "BROWSER_TOOLSET_ARGUMENT");
+		if (this.#holders.size >= this.#admission) throw new _src_core.BrowserError(`${BROWSER_SERVER_BUSY}: ${[...this.#holders.values()].map((holder) => `${holder.id} (${holder.purpose})`).join(", ")}. Call destroy for a holder no longer needed or call the named tools to share the shared browser.`, BROWSER_SERVER_BUSY);
+		const holder = {
+			id: (0, node_crypto.randomUUID)(),
+			purpose,
+			abort: new AbortController()
+		};
+		this.#holders.set(holder.id, holder);
+		const listener = (0, node_events.addAbortListener)(context.signal, () => holder.abort.abort(context.signal.reason));
+		try {
+			const lease = await this.#serve(holder, context.signal);
+			context.signal.throwIfAborted();
+			if (holder.abort.signal.aborted || this.#holders.get(holder.id) !== holder) throw this.#ended();
+			if (this.#leases.get(holder) !== lease) throw this.#unavailable(this.#departures.get(lease)?.cause);
+			const catalog = {
+				holder: holder.id,
+				tools: lease.generation.toolset.tools.definitions()
+			};
+			return JSON.stringify(catalog);
+		} catch (error) {
+			await this.#retire(holder).catch(this.#fault.bind(this));
+			throw error;
+		} finally {
+			listener[Symbol.dispose]();
+		}
+	}
+	#holder(value) {
+		const holder = (0, _orkestrel_contract.isString)(value) ? this.#holders.get(value) : void 0;
+		if (holder === void 0 || holder === this.#shared || holder.abort.signal.aborted) throw new _src_core.BrowserError(`${BROWSER_SERVER_HOLDER}: unknown or ended holder`, BROWSER_SERVER_HOLDER);
+		return holder;
+	}
+	async #dispatch(args, context) {
+		const holder = this.#holder(args["holder"]);
+		const name = args["name"];
+		const parameters = args["arguments"];
+		if (!(0, _orkestrel_contract.isString)(name) || !(0, _orkestrel_contract.isRecord)(parameters)) throw new _src_core.BrowserError("execute requires name and arguments", "BROWSER_TOOLSET_ARGUMENT");
+		return this.#forward(holder, name, parameters, context);
+	}
+	async #catalog(args, context) {
+		const holder = this.#holder(args["holder"]);
+		const signal = AbortSignal.any([context.signal, holder.abort.signal]);
+		try {
+			const lease = await this.#serve(holder, signal);
+			signal.throwIfAborted();
+			if (this.#leases.get(holder) !== lease) throw this.#unavailable(this.#departures.get(lease)?.cause);
+			const catalog = {
+				holder: holder.id,
+				tools: lease.generation.toolset.tools.definitions()
+			};
+			return this.#annotate(holder, JSON.stringify(catalog));
+		} catch (error) {
+			context.signal.throwIfAborted();
+			if (holder.abort.signal.aborted) throw new _src_core.BrowserError(`${BROWSER_SERVER_UNRESOLVED}: the holder ended during the call`, BROWSER_SERVER_UNRESOLVED);
+			if ((0, _src_core.isBrowserError)(error)) throw new _src_core.BrowserError(this.#annotate(holder, `${error.code}: ${error.message}`), error.code);
+			throw error;
+		}
+	}
+	async #dispose(args) {
+		const id = args["holder"];
+		await (((0, _orkestrel_contract.isString)(id) ? this.#disposals.get(id) : void 0) ?? this.#retire(this.#holder(id)));
+		return "Holder destroyed.";
+	}
+	#retire(holder) {
+		const pending = this.#disposals.get(holder.id);
+		if (pending !== void 0) return pending;
+		holder.abort.abort();
+		const lease = this.#leases.get(holder);
+		this.#leases.delete(holder);
+		if (lease !== void 0) this.#untrack(lease.generation);
+		const disposal = Promise.resolve().then(async () => {
+			try {
+				await this.#grants.get(holder)?.catch(() => void 0);
+				if (lease !== void 0) await this.#release(holder, lease);
+				await Promise.all(this.#drains.get(holder) ?? []);
+				await Promise.all([...this.#notices.get(holder) ?? []].filter((lost) => this.#losses.has(lost.token.value)).map((lost) => this.#endings.get(lost.token.value)?.promise));
+			} catch (error) {
+				this.#faults.add(error);
+			} finally {
+				if (this.#holders.get(holder.id) === holder && !this.#retentions.has(holder)) this.#holders.delete(holder.id);
+				this.#notices.delete(holder);
+				this.#drains.delete(holder);
+			}
+		});
+		this.#disposals.set(holder.id, disposal);
+		return disposal;
+	}
+	async #forward(holder, name, args, context) {
+		context.signal.throwIfAborted();
+		const journey = args["journey"];
+		if (name !== "replay" && name !== "forget" || !(0, _orkestrel_contract.isString)(journey)) return this.#perform(holder, name, args, context);
+		if (this.#writers.has(journey) || name === "forget" && this.#readers.has(journey)) throw new _src_core.BrowserError(`BROWSER_JOURNEY_LOCKED: Journey ${journey} is locked; call ${name} again.`, "BROWSER_JOURNEY_LOCKED", { name: journey });
+		const reader = Symbol(journey);
+		if (name === "forget") this.#writers.add(journey);
+		else {
+			const readers = this.#readers.get(journey) ?? /* @__PURE__ */ new Set();
+			readers.add(reader);
+			this.#readers.set(journey, readers);
+		}
+		try {
+			return await this.#perform(holder, name, args, context);
+		} finally {
+			if (name === "forget") this.#writers.delete(journey);
+			else {
+				const readers = this.#readers.get(journey);
+				readers?.delete(reader);
+				if (readers?.size === 0) this.#readers.delete(journey);
+			}
+		}
+	}
+	async #perform(holder, name, args, context) {
+		const signal = holder === this.#shared ? context.signal : AbortSignal.any([context.signal, holder.abort.signal]);
+		let lease;
 		try {
-			slot = await this.#serve(context.signal);
+			lease = await this.#serve(holder, signal);
 		} catch (error) {
 			context.signal.throwIfAborted();
-			if ((0, _src_core.isBrowserError)(error)) throw new _src_core.BrowserError(this.#annotate(`${error.code}: ${error.message}`), error.code);
+			if (holder !== this.#shared && holder.abort.signal.aborted) throw new _src_core.BrowserError(`${BROWSER_SERVER_UNRESOLVED}: the holder ended during the call`, BROWSER_SERVER_UNRESOLVED);
+			if ((0, _src_core.isBrowserError)(error)) throw new _src_core.BrowserError(this.#annotate(holder, `${error.code}: ${error.message}`), error.code);
 			throw error;
 		}
 		let result;
 		try {
-			result = await slot.toolset.tools.execute({
+			const execution = lease.generation.toolset.tools.execute({
 				id: name,
 				name,
 				arguments: args
-			}, context);
+			}, {
+				...context,
+				signal
+			});
+			const outcome = await (name === "replay" || name === "forget" ? execution : this.#race(execution, signal));
+			if (outcome === void 0) throw this.#ended();
+			result = outcome;
 		} catch (error) {
 			result = {
 				id: name,
@@ -1182,28 +1463,27 @@ var BrowserMCPServer = class {
 			};
 		}
 		context.signal.throwIfAborted();
+		if (holder !== this.#shared && holder.abort.signal.aborted) throw new _src_core.BrowserError(BROWSER_SERVER_UNRESOLVED + ": the holder ended during the call", BROWSER_SERVER_UNRESOLVED);
 		if (!result.success) {
-			if (this.#lease?.value === slot && !context.signal.aborted) try {
-				await slot.browser.ping({ signal: AbortSignal.any([context.signal, this.#abort.signal]) });
-			} catch (error) {
-				if (!context.signal.aborted && !this.#abort.signal.aborted) this.#lose(slot, error);
-			}
+			if (this.#leases.get(holder) === lease && !context.signal.aborted) try {
+				await this.#race(this.#ping(lease.token.value), context.signal);
+			} catch {}
 			context.signal.throwIfAborted();
-			if (this.#lease?.value !== slot) {
-				const loss = this.#losses.get(slot);
-				throw new _src_core.BrowserError(this.#annotate(describeBrowserServerLoss(BROWSER_SERVER_UNRESOLVED, loss?.cause, loss?.url), slot), BROWSER_SERVER_UNRESOLVED);
+			if (this.#leases.get(holder) !== lease) {
+				const loss = this.#departures.get(lease);
+				throw new _src_core.BrowserError(this.#annotate(holder, describeBrowserServerLoss(BROWSER_SERVER_UNRESOLVED, loss?.cause, loss?.url), lease), BROWSER_SERVER_UNRESOLVED);
 			}
-			throw new _src_core.BrowserError(this.#annotate(result.error, slot));
+			throw new _src_core.BrowserError(this.#annotate(holder, result.error, lease));
 		}
-		return typeof result.value === "string" ? this.#annotate(result.value, slot) : result.value;
+		return typeof result.value === "string" ? this.#annotate(holder, result.value, lease) : result.value;
 	}
-	#annotate(value, slot) {
+	#annotate(holder, value, lease) {
 		const notes = [];
-		for (const lost of this.#notice) {
-			if (lost === slot) continue;
-			const loss = this.#losses.get(lost);
+		for (const lost of this.#notices.get(holder) ?? []) {
+			if (lost === lease) continue;
+			const loss = this.#departures.get(lost);
 			notes.push(describeBrowserServerLoss(BROWSER_SERVER_CRASH, loss?.cause, loss?.url));
-			this.#notice.delete(lost);
+			this.#notices.get(holder)?.delete(lost);
 		}
 		return [...notes, value].join("\n");
 	}
@@ -1227,52 +1507,95 @@ var BrowserMCPServer = class {
 			listener[Symbol.dispose]();
 		}
 	}
-	async #grant(signal) {
-		if (this.#lease !== void 0) return this.#lease;
-		this.#granting ??= this.#pool.acquire(this.#abort.signal).then(this.#hold.bind(this), this.#refuse.bind(this));
-		const token = await this.#race(this.#granting, signal);
-		if (token === void 0) throw this.#ended();
-		return token;
+	async #grant(holder, signal) {
+		const held = this.#leases.get(holder);
+		if (held !== void 0) return held;
+		let granting = this.#grants.get(holder);
+		if (granting === void 0) {
+			granting = Promise.resolve().then(async () => {
+				await Promise.allSettled(this.#drains.get(holder) ?? []);
+				if (this.#retentions.has(holder)) throw this.#unavailable(this.#retentions.get(holder));
+				const token = await this.#pool.acquire(holder.abort.signal);
+				return this.#hold(holder, token);
+			});
+			this.#grants.set(holder, granting);
+			granting.finally(() => {
+				if (this.#grants.get(holder) === granting) this.#grants.delete(holder);
+			}).catch(() => void 0);
+		}
+		const lease = await this.#race(granting, signal);
+		if (lease === void 0) throw this.#ended();
+		return lease;
+	}
+	async #hold(holder, token) {
+		const slot = token.value;
+		if (this.#closing !== void 0 || this.#holders.get(holder.id) !== holder || holder.abort.signal.aborted) {
+			token.release();
+			throw this.#ended();
+		}
+		if (!this.#prepared.has(slot)) await this.#ping(slot);
+		if (this.#closing !== void 0 || holder.abort.signal.aborted) {
+			token.release();
+			throw this.#ended();
+		}
+		if (this.#losses.has(slot)) {
+			token.release();
+			throw this.#unavailable(this.#losses.get(slot)?.cause);
+		}
+		let generation = this.#prepared.get(slot);
+		this.#prepared.delete(slot);
+		try {
+			generation ??= await this.#build(slot, token);
+		} catch (error) {
+			if (this.#losses.has(slot)) await this.#endings.get(slot)?.promise;
+			else token.release();
+			throw this.#unavailable(error);
+		}
+		const lease = {
+			token,
+			generation
+		};
+		if (this.#closing !== void 0 || this.#holders.get(holder.id) !== holder || holder.abort.signal.aborted || this.#losses.has(slot)) {
+			await this.#release(holder, lease);
+			throw this.#ended();
+		}
+		this.#leases.set(holder, lease);
+		this.#observe(slot, generation);
+		if (holder === this.#shared) {
+			const tools = generation.toolset.tools;
+			const mirrored = {
+				lease,
+				added: this.#mirror.bind(this, lease),
+				removed: this.#withdraw.bind(this, lease),
+				cleared: this.#clear.bind(this, lease)
+			};
+			this.#mirrored = mirrored;
+			for (const tool of tools.tools()) this.#mirror(lease, tool);
+			tools.emitter.on("add", mirrored.added);
+			tools.emitter.on("remove", mirrored.removed);
+			tools.emitter.on("clear", mirrored.cleared);
+		}
+		return lease;
 	}
-	#hold(token) {
-		this.#granting = void 0;
-		if (this.#closing !== void 0) throw this.#ended();
-		if (this.#losses.has(token.value)) {
-			token.destroy().catch(() => void 0);
-			throw this.#unavailable(this.#losses.get(token.value)?.cause);
-		}
-		this.#lease = token;
-		const tools = token.value.toolset.tools;
-		for (const tool of tools.tools()) this.#mirror(tool);
-		tools.emitter.on("add", this.#added);
-		tools.emitter.on("remove", this.#removed);
-		tools.emitter.on("clear", this.#cleared);
-		return token;
-	}
-	#refuse(error) {
-		this.#granting = void 0;
-		throw error;
-	}
-	async #serve(signal) {
-		if (this.#closing !== void 0) throw this.#ended();
+	async #serve(holder, signal) {
+		if (this.#closing !== void 0 || holder.abort.signal.aborted) throw this.#ended();
 		await this.#race(this.#starting, signal);
-		if (this.#closing !== void 0) throw this.#ended();
-		const held = this.#lease;
+		if (this.#closing !== void 0 || holder.abort.signal.aborted) throw this.#ended();
+		const held = this.#leases.get(holder);
 		if (held !== void 0) try {
-			await held.value.browser.ping({ signal: AbortSignal.any([signal, this.#abort.signal]) });
-			if (this.#lease === held) return held.value;
-		} catch (error) {
+			await this.#race(this.#ping(held.token.value), signal);
+			if (this.#leases.get(holder) === held) return held;
+		} catch {
 			signal.throwIfAborted();
-			if (this.#abort.signal.aborted) throw this.#ended();
-			this.#lose(held.value, error);
+			if (holder.abort.signal.aborted) throw this.#ended();
 		}
 		try {
-			const token = await this.#grant(signal);
-			if (this.#lease !== token) throw this.#unavailable(this.#losses.get(token.value)?.cause);
-			return token.value;
+			const lease = await this.#grant(holder, signal);
+			if (this.#leases.get(holder) !== lease) throw this.#unavailable(this.#departures.get(lease)?.cause);
+			return lease;
 		} catch (error) {
 			signal.throwIfAborted();
-			if (this.#abort.signal.aborted || (0, _orkestrel_pool.isPoolError)(error) && error.code === "destroyed") throw this.#ended();
+			if (holder.abort.signal.aborted || (0, _orkestrel_pool.isPoolError)(error) && error.code === "destroyed") throw this.#ended();
 			if ((0, _orkestrel_pool.isPoolError)(error) && (error.code === "create" || error.code === "cleanup")) {
 				this.#exhaust(error);
 				throw this.#unavailable(error.cause ?? this.#failure);
@@ -1280,6 +1603,15 @@ var BrowserMCPServer = class {
 			throw error;
 		}
 	}
+	#ping(slot) {
+		const pending = this.#pings.get(slot);
+		if (pending !== void 0) return pending;
+		const ping = slot.browser.ping({ signal: this.#abort.signal }).catch((error) => {
+			if (!this.#abort.signal.aborted) this.#lose(slot, error);
+		}).finally(() => this.#pings.delete(slot));
+		this.#pings.set(slot, ping);
+		return ping;
+	}
 	async #validate(slot) {
 		try {
 			await slot.browser.ping({ signal: this.#abort.signal });
@@ -1291,71 +1623,211 @@ var BrowserMCPServer = class {
 	}
 	#lose(slot, cause) {
 		if (this.#closing !== void 0 || this.#losses.has(slot)) return;
-		this.#losses.set(slot, {
+		this.#losses.set(slot, { cause });
+		this.#failure = cause;
+		for (const [holder, lease] of this.#leases) {
+			if (lease.token.value !== slot) continue;
+			this.#detach(holder, lease, cause);
+		}
+		const watch = this.#watches.get(slot);
+		this.#unwatch(slot);
+		watch?.resolve(cause);
+	}
+	#detach(holder, lease, cause) {
+		if (this.#leases.get(holder) !== lease || this.#holders.get(holder.id) !== holder) return;
+		this.#departures.set(lease, {
 			cause,
-			url: slot.toolset.view.url
+			url: lease.generation.toolset.view.url
 		});
-		this.#failure = cause;
-		if (this.#lease?.value !== slot) return;
-		const token = this.#lease;
-		this.#unmirror();
-		this.#lease = void 0;
-		this.#notice.add(slot);
-		token.destroy().catch(() => void 0);
+		if (holder === this.#shared) this.#unmirror();
+		this.#leases.delete(holder);
+		this.#untrack(lease.generation);
+		const notices = this.#notices.get(holder) ?? /* @__PURE__ */ new Set();
+		notices.add(lease);
+		this.#notices.set(holder, notices);
 	}
 	#watch(slot, signal) {
 		const loss = Promise.withResolvers();
 		const disconnect = this.#disconnect.bind(this, slot);
-		const page = this.#track.bind(this, slot);
 		const subscription = (0, node_events.addAbortListener)(signal, this.#unwatch.bind(this, slot));
 		this.#watches.set(slot, {
 			resolve: loss.resolve,
 			disconnect,
-			page,
-			subscription,
-			crashes: /* @__PURE__ */ new Map()
+			subscription
 		});
 		slot.browser.emitter.on("disconnect", disconnect);
-		slot.context.emitter.on("page", page);
-		for (const current of slot.context.pages()) this.#track(slot, current);
 		if (signal.aborted) this.#unwatch(slot);
 		else if (slot.browser.status !== "connected") this.#disconnect(slot);
 		return loss.promise;
 	}
-	#track(slot, page) {
-		const watch = this.#watches.get(slot);
+	#observe(slot, generation) {
+		if (this.#observed.has(generation)) return;
+		const page = this.#track.bind(this, slot, generation);
+		this.#observed.set(generation, {
+			page,
+			crashes: /* @__PURE__ */ new Map()
+		});
+		generation.context.emitter.on("page", page);
+		for (const current of generation.context.pages()) this.#track(slot, generation, current);
+	}
+	#track(slot, generation, page) {
+		const watch = this.#observed.get(generation);
 		if (watch === void 0 || watch.crashes.has(page)) return;
-		const crash = this.#createCrash(slot, page);
+		const crash = this.#crash.bind(this, slot, generation, page);
 		page.emitter.on("crash", crash);
-		this.#watches.set(slot, {
+		this.#observed.set(generation, {
 			...watch,
 			crashes: new Map([...watch.crashes, [page, crash]])
 		});
 	}
-	#createCrash(slot, page) {
-		return () => {
-			if (page === slot.toolset.view) this.#report(slot, /* @__PURE__ */ new Error("The current page renderer crashed"));
-		};
+	#crash(slot, generation, page) {
+		if (this.#prepared.get(slot) === generation) {
+			this.#prepared.delete(slot);
+			this.#untrack(generation);
+			this.#clean(slot, generation).catch(this.#fault.bind(this));
+			return;
+		}
+		const held = [...this.#leases].find(([, lease]) => lease.generation === generation);
+		if (held === void 0 || page !== generation.toolset.view) return;
+		const [holder, lease] = held;
+		this.#detach(holder, lease, /* @__PURE__ */ new Error("The current page renderer crashed"));
+		const drain = this.#release(holder, lease);
+		const drains = this.#drains.get(holder) ?? /* @__PURE__ */ new Set();
+		drains.add(drain);
+		this.#drains.set(holder, drains);
+		drain.finally(() => drains.delete(drain)).catch(this.#fault.bind(this));
+	}
+	#untrack(generation) {
+		const watch = this.#observed.get(generation);
+		if (watch === void 0) return;
+		this.#observed.delete(generation);
+		generation.context.emitter.off("page", watch.page);
+		for (const [page, crash] of watch.crashes) page.emitter.off("crash", crash);
 	}
 	#disconnect(slot) {
-		this.#report(slot, /* @__PURE__ */ new Error(slot.browser.pid === void 0 ? "The browser process exited" : "The browser transport disconnected"));
-	}
-	#report(slot, cause) {
-		const watch = this.#watches.get(slot);
-		if (watch === void 0) return;
-		this.#unwatch(slot);
-		this.#lose(slot, cause);
-		watch.resolve(cause);
+		this.#lose(slot, /* @__PURE__ */ new Error(slot.browser.pid === void 0 ? "The browser process exited" : "The browser transport disconnected"));
 	}
 	#unwatch(slot) {
 		const watch = this.#watches.get(slot);
 		if (watch === void 0) return;
 		this.#watches.delete(slot);
 		slot.browser.emitter.off("disconnect", watch.disconnect);
-		slot.context.emitter.off("page", watch.page);
-		for (const [page, crash] of watch.crashes) page.emitter.off("crash", crash);
 		watch.subscription[Symbol.dispose]();
 	}
+	async #release(holder, lease) {
+		const slot = lease.token.value;
+		const removed = await this.#clean(slot, lease.generation);
+		const disposal = lease.generation.context.disposal;
+		if (!removed) this.#retentions.set(holder, /* @__PURE__ */ new Error("The context downloads directory remains owned"));
+		if (disposal?.confirmed !== true && !this.#losses.has(slot) && this.#closing === void 0) {
+			if (![...this.#leases.values()].some((held) => held.token.value === slot && held !== lease) && (this.#building.get(slot)?.size ?? 0) === 0) lease.token.release();
+			this.#lose(slot, disposal?.error ?? /* @__PURE__ */ new Error("The context disposal is unconfirmed"));
+			await this.#endings.get(slot)?.promise;
+		} else if (removed) lease.token.release();
+	}
+	#clean(slot, generation) {
+		let cleaning = this.#cleaning.get(generation);
+		if (cleaning !== void 0) return cleaning;
+		cleaning = Promise.resolve().then(async () => {
+			await generation.toolset.destroy().catch(this.#fault.bind(this));
+			await generation.context.close().catch((error) => {
+				if (!this.#losses.has(slot) && slot.browser.status === "connected") this.#fault(error);
+			});
+			try {
+				await (0, node_fs_promises.rm)(generation.directory, {
+					recursive: true,
+					force: true
+				});
+				this.#owned.get(slot)?.delete(generation);
+				return true;
+			} catch (error) {
+				this.#fault(error);
+				return false;
+			}
+		});
+		this.#cleaning.set(generation, cleaning);
+		return cleaning;
+	}
+	#build(slot, token) {
+		const construction = this.#construct(slot, token);
+		const building = this.#building.get(slot) ?? /* @__PURE__ */ new Set();
+		building.add(construction);
+		this.#building.set(slot, building);
+		construction.finally(() => building.delete(construction)).catch(() => void 0);
+		return construction;
+	}
+	async #construct(slot, token) {
+		const directory = (0, node_path.join)(slot.profile, "contexts", (0, node_crypto.randomUUID)(), "downloads");
+		let context;
+		let toolset;
+		try {
+			await (0, node_fs_promises.mkdir)(directory, { recursive: true });
+			let page;
+			try {
+				context = await slot.browser.isolate({
+					reference: this.#reference,
+					downloads: { path: directory },
+					...this.#viewport === void 0 ? {} : { emulation: { viewport: this.#viewport } }
+				});
+				page = await context.create();
+			} catch (error) {
+				if (token !== void 0) {
+					if (![...this.#leases.values()].some((lease) => lease.token.value === slot) && (this.#building.get(slot)?.size ?? 0) === 1) token.release();
+					this.#lose(slot, error);
+				}
+				throw error;
+			}
+			toolset = (0, _src_core.createBrowserToolset)(page, {
+				context,
+				journeys: {
+					store: createFileBrowserJourneyStore({ root: this.#root }),
+					runs: createFileBrowserRunStore({ root: this.#root }),
+					readonly: this.#readonly
+				}
+			});
+			await toolset.start();
+			const generation = {
+				context,
+				toolset,
+				directory
+			};
+			const owned = this.#owned.get(slot) ?? /* @__PURE__ */ new Set();
+			owned.add(generation);
+			this.#owned.set(slot, owned);
+			return generation;
+		} catch (error) {
+			await toolset?.destroy().catch(this.#fault.bind(this));
+			await context?.close().catch((failure) => {
+				if (!this.#losses.has(slot) && slot.browser.status === "connected" && this.#closing === void 0 && !(0, _src_core.isCDPConnectionError)(failure)) this.#fault(failure);
+			});
+			await (0, node_fs_promises.rm)(directory, {
+				recursive: true,
+				force: true
+			}).catch(this.#fault.bind(this));
+			throw error;
+		}
+	}
+	async #destroyRecord(slot) {
+		if ((0, _src_core.isCDPTimeoutError)(this.#losses.get(slot)?.cause) && slot.browser.pid !== void 0) try {
+			process.kill(slot.browser.pid, "SIGKILL");
+		} catch (error) {
+			if (!(0, _orkestrel_contract.isError)(error) || !("code" in error) || error.code !== "ESRCH") this.#faults.add(error);
+		}
+		try {
+			await Promise.allSettled(this.#building.get(slot) ?? []);
+			const prepared = this.#prepared.get(slot);
+			if (prepared !== void 0) this.#untrack(prepared);
+			this.#prepared.delete(slot);
+			await Promise.all([...this.#owned.get(slot) ?? []].map((generation) => this.#clean(slot, generation)));
+			await this.#destroySlot(slot.profile, slot.browser);
+			this.#owned.delete(slot);
+			this.#building.delete(slot);
+			this.#endings.get(slot)?.resolve();
+		} catch (error) {
+			this.#endings.get(slot)?.reject(error);
+			throw error;
+		}
+	}
 	#fault(error) {
 		this.#faults.add(error);
 	}
@@ -1364,7 +1836,7 @@ var BrowserMCPServer = class {
 		if (this.#stranded !== void 0) throw new _src_core.BrowserError((0, _orkestrel_contract.isError)(this.#stranded) ? this.#stranded.message : String(this.#stranded), BROWSER_SERVER_TEARDOWN, (0, _src_core.isBrowserError)(this.#stranded) ? this.#stranded.context : void 0);
 		const profile = (0, node_path.join)(this.#root, ".profiles", formatBrowserLockEntry(process.pid, (0, node_crypto.randomUUID)()));
 		let browser;
-		let toolset;
+		let slot;
 		try {
 			await (0, node_fs_promises.mkdir)(profile);
 			this.#folders.add(profile);
@@ -1374,6 +1846,7 @@ var BrowserMCPServer = class {
 				cdp: { discover: false },
 				signal: this.#abort.signal,
 				...this.#executable === void 0 ? {} : { executable: this.#executable },
+				...this.#viewport === void 0 ? {} : { viewport: this.#viewport },
 				...process.platform === "linux" && process.getuid?.() === 0 ? { args: ["--no-sandbox"] } : {}
 			});
 			await browser.connect();
@@ -1385,38 +1858,26 @@ var BrowserMCPServer = class {
 				}));
 				await (0, node_fs_promises.rename)(`${record}.tmp`, record);
 			}
-			const context = await browser.isolate({ reference: this.#reference });
-			const page = await context.create();
-			toolset = (0, _src_core.createBrowserToolset)(page, {
-				context,
-				journeys: {
-					store: createFileBrowserJourneyStore({ root: this.#root }),
-					runs: createFileBrowserRunStore({ root: this.#root }),
-					readonly: this.#readonly
-				}
-			});
-			await toolset.start();
-			return {
+			slot = {
 				browser,
-				profile,
-				context,
-				toolset
+				profile
 			};
+			const ending = Promise.withResolvers();
+			ending.promise.catch(() => void 0);
+			this.#endings.set(slot, ending);
+			const generation = await this.#build(slot);
+			this.#prepared.set(slot, generation);
+			this.#observe(slot, generation);
+			return slot;
 		} catch (error) {
-			if (this.#folders.has(profile)) await this.#destroySlot(profile, browser, toolset).catch((failure) => {
+			if (this.#folders.has(profile)) await (slot === void 0 ? this.#destroySlot(profile, browser) : this.#destroyRecord(slot)).catch((failure) => {
 				this.#stranded = failure;
 			});
 			if (this.#closing === void 0) this.#write(`browse: ${describeBrowserServerLoss(BROWSER_SERVER_LAUNCH, error)}`);
 			throw error;
 		}
 	}
-	async #destroySlot(profile, browser, toolset, cause) {
-		if ((0, _src_core.isCDPTimeoutError)(cause) && browser?.pid !== void 0) try {
-			process.kill(browser.pid, "SIGKILL");
-		} catch (error) {
-			if (!(0, _orkestrel_contract.isError)(error) || !("code" in error) || error.code !== "ESRCH") this.#faults.add(error);
-		}
-		await toolset?.destroy().catch((error) => this.#faults.add(error));
+	async #destroySlot(profile, browser) {
 		try {
 			await browser?.destroy();
 		} catch (error) {
@@ -1492,29 +1953,31 @@ var BrowserMCPServer = class {
 	#issue() {
 		return `e${++this.#references}`;
 	}
-	#mirror(tool) {
-		if (this.#vocabulary.has(tool.name)) return;
+	#mirror(lease, tool) {
+		if (this.#leases.get(this.#shared) !== lease || this.#vocabulary.has(tool.name)) return;
 		this.#tools.add((0, _orkestrel_tool.createTool)({
 			...(0, _orkestrel_tool.toolToDefinition)(tool),
-			execute: this.#forward.bind(this, tool.name)
+			execute: this.#forward.bind(this, this.#shared, tool.name)
 		}));
 	}
-	#withdraw(tool) {
-		if (this.#vocabulary.has(tool.name)) return;
-		const current = this.#lease?.value.toolset.tools.tool(tool.name);
+	#withdraw(lease, tool) {
+		if (this.#leases.get(this.#shared) !== lease || this.#vocabulary.has(tool.name)) return;
+		const current = lease.generation.toolset.tools.tool(tool.name);
 		if (current === void 0) this.#tools.remove(tool.name);
-		else this.#mirror(current);
+		else this.#mirror(lease, current);
 	}
-	#clear(tools) {
-		for (const tool of tools) this.#withdraw(tool);
+	#clear(lease, tools) {
+		for (const tool of tools) this.#withdraw(lease, tool);
 	}
 	#unmirror() {
-		const mirrored = this.#lease?.value.toolset.tools;
+		const mirrored = this.#mirrored;
 		if (mirrored === void 0) return;
-		for (const tool of mirrored.tools()) if (!this.#vocabulary.has(tool.name)) this.#tools.remove(tool.name);
-		mirrored.emitter.off("add", this.#added);
-		mirrored.emitter.off("remove", this.#removed);
-		mirrored.emitter.off("clear", this.#cleared);
+		this.#mirrored = void 0;
+		const tools = mirrored.lease.generation.toolset.tools;
+		for (const tool of tools.tools()) if (!this.#vocabulary.has(tool.name)) this.#tools.remove(tool.name);
+		tools.emitter.off("add", mirrored.added);
+		tools.emitter.off("remove", mirrored.removed);
+		tools.emitter.off("clear", mirrored.cleared);
 	}
 	#ended() {
 		return new _src_core.BrowserError("the browser session ended", "BROWSER_TOOLSET_ENDED");
@@ -1941,30 +2404,62 @@ var FileBrowserJourneyStore = class {
 /**
 * Persists runs and captures only in directories allocated by this instance.
 * @remarks Requires an existing root. Reopened stores can read and delete saved runs.
+* Allocations of one journey share a process-local queue across instances; the filesystem lock
+* still refuses conflicting mutations and allocations from another process.
 * @example
 * const store = new FileBrowserRunStore({ root: directory })
 * const slot = await store.open('check-ready')
 */
-var FileBrowserRunStore = class {
+var FileBrowserRunStore = class FileBrowserRunStore {
+	static #allocations = /* @__PURE__ */ new Map();
 	#files;
 	#slots = /* @__PURE__ */ new WeakMap();
 	#directories = /* @__PURE__ */ new Set();
 	constructor(options) {
 		this.#files = new FileBrowserStore(options);
 	}
+	async snapshot(bytes, options) {
+		options?.signal?.throwIfAborted();
+		const owned = new Uint8Array(bytes);
+		const directory = await this.#files.allocate(this.#files.resolvePath(BROWSER_RUN_DIRECTORY), _src_core.generateBrowserRunId, options);
+		const path = this.#files.resolvePath(directory.path, "view.png");
+		try {
+			await this.#files.check(path, options);
+			options?.signal?.throwIfAborted();
+			await (0, node_fs_promises.writeFile)(path, owned, {
+				flag: "wx",
+				signal: options?.signal
+			});
+			return path;
+		} catch (error) {
+			options?.signal?.throwIfAborted();
+			throw this.#files.translateError(path, error);
+		}
+	}
 	async open(name, options) {
 		options?.signal?.throwIfAborted();
 		this.#files.validateName(name);
-		return this.#files.lock(this.#files.resolvePath(name, BROWSER_JOURNEY_LOCK_DIRECTORY), async () => {
-			const directory = await this.#files.allocate(this.#files.resolvePath(name, BROWSER_RUN_DIRECTORY), _src_core.generateBrowserRunId, options);
-			const slot = Object.freeze({
-				id: directory.id,
-				directory: directory.path
-			});
-			this.#directories.add(directory.path);
-			this.#slots.set(slot, directory.path);
-			return slot;
-		}, options);
+		const path = this.#files.resolvePath(name, BROWSER_JOURNEY_LOCK_DIRECTORY);
+		const previous = FileBrowserRunStore.#allocations.get(path);
+		const allocation = Promise.withResolvers();
+		FileBrowserRunStore.#allocations.set(path, allocation.promise);
+		try {
+			await previous;
+			options?.signal?.throwIfAborted();
+			return await this.#files.lock(path, async () => {
+				const directory = await this.#files.allocate(this.#files.resolvePath(name, BROWSER_RUN_DIRECTORY), _src_core.generateBrowserRunId, options);
+				const slot = Object.freeze({
+					id: directory.id,
+					directory: directory.path
+				});
+				this.#directories.add(directory.path);
+				this.#slots.set(slot, directory.path);
+				return slot;
+			}, options);
+		} finally {
+			allocation.resolve();
+			if (FileBrowserRunStore.#allocations.get(path) === allocation.promise) FileBrowserRunStore.#allocations.delete(path);
+		}
 	}
 	async get(name, id, options) {
 		options?.signal?.throwIfAborted();
@@ -2174,6 +2669,7 @@ var Browser = class {
 	#servingPid;
 	#profile;
 	#contexts = [];
+	#isolating = /* @__PURE__ */ new Set();
 	#destroyed = false;
 	#connecting = new _src_core.BrowserTransition();
 	#disconnecting = new _src_core.BrowserTransition();
@@ -2260,33 +2756,13 @@ var Browser = class {
 		return [...this.#contexts];
 	}
 	async isolate(options) {
-		if (this.#destroyed) throw new BrowserDestroyedError();
-		const client = this.#client;
-		if (this.#status !== "connected" || client === void 0) throw new BrowserNotConnectedError();
-		(0, _src_core.validateBrowserContextOptions)(options);
-		const params = { disposeOnDetach: false };
-		if (options?.proxy !== void 0) {
-			params["proxyServer"] = options.proxy.server;
-			if (options.proxy.bypass !== void 0) params["proxyBypassList"] = options.proxy.bypass.join(",");
-		}
-		if (options?.origins !== void 0) params["originsWithUniversalNetworkAccess"] = [...options.origins];
-		const result = await client.send("Target.createBrowserContext", params);
-		if (!(0, _orkestrel_contract.isRecord)(result) || !(0, _orkestrel_contract.isString)(result["browserContextId"])) throw new _src_core.BrowserConnectionError("Failed to create isolated browser context");
-		const id = result["browserContextId"];
-		const context = new _src_core.BrowserContext(client, id, options?.emulation?.viewport ?? this.#options.viewport, createBrowserWriter(), options?.emulation, options?.downloads, options);
+		const attempt = this.#isolate(options);
+		this.#isolating.add(attempt);
 		try {
-			if (options?.downloads !== void 0) await client.send("Browser.setDownloadBehavior", {
-				behavior: options.downloads.named === true ? "allowAndName" : "allow",
-				browserContextId: id,
-				downloadPath: options.downloads.path,
-				eventsEnabled: true
-			});
-		} catch (error) {
-			await context.close().catch(() => void 0);
-			throw error;
+			return await attempt;
+		} finally {
+			this.#isolating.delete(attempt);
 		}
-		this.#registerContext(context);
-		return context;
 	}
 	async create(options) {
 		if (this.#destroyed) throw new BrowserDestroyedError();
@@ -2321,6 +2797,37 @@ var Browser = class {
 		this.#shutdown = shutdown;
 		return shutdown;
 	}
+	async #isolate(options) {
+		if (this.#destroyed) throw new BrowserDestroyedError();
+		const client = this.#client;
+		if (this.#status !== "connected" || client === void 0) throw new BrowserNotConnectedError();
+		(0, _src_core.validateBrowserContextOptions)(options);
+		const params = { disposeOnDetach: false };
+		if (options?.proxy !== void 0) {
+			params["proxyServer"] = options.proxy.server;
+			if (options.proxy.bypass !== void 0) params["proxyBypassList"] = options.proxy.bypass.join(",");
+		}
+		if (options?.origins !== void 0) params["originsWithUniversalNetworkAccess"] = [...options.origins];
+		const result = await client.send("Target.createBrowserContext", params);
+		if (!(0, _orkestrel_contract.isRecord)(result) || !(0, _orkestrel_contract.isString)(result["browserContextId"])) throw new _src_core.BrowserConnectionError("Failed to create isolated browser context");
+		const id = result["browserContextId"];
+		const context = new _src_core.BrowserContext(client, id, options?.emulation?.viewport ?? this.#options.viewport, createBrowserWriter(), options?.emulation, options?.downloads, options);
+		try {
+			if (this.#destroyed || this.#client !== client) throw new BrowserDestroyedError();
+			if (options?.downloads !== void 0) await client.send("Browser.setDownloadBehavior", {
+				behavior: options.downloads.named === true ? "allowAndName" : "allow",
+				browserContextId: id,
+				downloadPath: options.downloads.path,
+				eventsEnabled: true
+			});
+			if (this.#destroyed || this.#client !== client) throw new BrowserDestroyedError();
+		} catch (error) {
+			await context.close().catch(() => void 0);
+			throw error;
+		}
+		this.#registerContext(context);
+		return context;
+	}
 	async #establish() {
 		const disconnecting = this.#disconnecting.pending;
 		if (disconnecting !== void 0) await disconnecting;
@@ -2794,6 +3301,7 @@ var Browser = class {
 		}
 	}
 	async #settle() {
+		await Promise.allSettled(this.#isolating);
 		await this.#connecting.pending?.catch(() => void 0);
 		await this.#disconnecting.pending?.catch(() => void 0);
 		await this.#settleExit();
@@ -3006,8 +3514,13 @@ exports.BROWSER_PROCESS_EXIT_CAUSE = BROWSER_PROCESS_EXIT_CAUSE;
 exports.BROWSER_PROFILE_PREFIX = BROWSER_PROFILE_PREFIX;
 exports.BROWSER_RUN_DIRECTORY = BROWSER_RUN_DIRECTORY;
 exports.BROWSER_RUN_FILE = BROWSER_RUN_FILE;
+exports.BROWSER_SERVER_BUSY = BROWSER_SERVER_BUSY;
+exports.BROWSER_SERVER_CONTEXTS = BROWSER_SERVER_CONTEXTS;
+exports.BROWSER_SERVER_CONTEXTS_LIMIT = BROWSER_SERVER_CONTEXTS_LIMIT;
+exports.BROWSER_SERVER_COPY = BROWSER_SERVER_COPY;
 exports.BROWSER_SERVER_CRASH = BROWSER_SERVER_CRASH;
 exports.BROWSER_SERVER_EXHAUSTED = BROWSER_SERVER_EXHAUSTED;
+exports.BROWSER_SERVER_HOLDER = BROWSER_SERVER_HOLDER;
 exports.BROWSER_SERVER_LAUNCH = BROWSER_SERVER_LAUNCH;
 exports.BROWSER_SERVER_OPTIONS = BROWSER_SERVER_OPTIONS;
 exports.BROWSER_SERVER_POOL_LIMIT = BROWSER_SERVER_POOL_LIMIT;
@@ -3061,6 +3574,7 @@ exports.normalizeExecutablePath = normalizeExecutablePath;
 exports.parseBrowserEngine = parseBrowserEngine;
 exports.parseBrowserLockEntry = parseBrowserLockEntry;
 exports.parseBrowserProfileRecord = parseBrowserProfileRecord;
+exports.parseBrowserViewport = parseBrowserViewport;
 exports.probePathNames = probePathNames;
 exports.probeProcess = probeProcess;
 exports.readBrowserEndpoint = readBrowserEndpoint;