@pasko70/pibo 1.9.11 → 1.9.13

package/dist/resources/reaper.js

@@ -9,6 +9,7 @@ export class ResourceReaperService {
     plan;
     apply;
     now;
+    writeState;
     timer;
     running = false;
     stopped = true;
@@ -23,6 +24,7 @@ export class ResourceReaperService {
         this.plan = options.plan ?? planResourceReap;
         this.apply = options.apply ?? applyResourceReapPlan;
         this.now = options.clock ?? (() => new Date());
+        this.writeState = options.writeState ?? writeResourceReaperState;
     }
     async start() {
         if (!this.stopped)
@@ -47,19 +49,24 @@ export class ResourceReaperService {
         if (this.timer)
             clearTimeout(this.timer);
         this.timer = undefined;
-        if (this.state && this.ownsTimer) {
-            this.state = { ...this.state, status: "stopped", nextRunAt: undefined };
-            await this.persist();
+        try {
+            if (this.state && this.ownsTimer) {
+                this.state = { ...this.state, status: "stopped", nextRunAt: undefined };
+                await this.persist();
+            }
+        }
+        finally {
+            if (this.ownsTimer)
+                await releaseResourceReaperOwnership(this.lockPath);
+            this.ownsTimer = false;
         }
-        if (this.ownsTimer)
-            await releaseResourceReaperOwnership(this.lockPath);
-        this.ownsTimer = false;
     }
     async runNow() {
         if (!this.ownsTimer || this.running)
             return undefined;
         this.running = true;
         const runAt = this.now();
+        let result;
         try {
             const plan = await this.plan({
                 includeDev: this.options.includeDev,
@@ -71,7 +78,7 @@ export class ResourceReaperService {
                 exemptBrowserPids: this.options.exemptBrowserPids,
                 now: runAt,
             });
-            const result = await this.apply(plan);
+            result = await this.apply(plan);
             this.state = {
                 ...(this.state ?? {
                     status: "running",
@@ -91,8 +98,6 @@ export class ResourceReaperService {
                 lastError: undefined,
             };
             console.error(JSON.stringify({ event: "resource_reaper_finished", at: runAt.toISOString(), ...this.state.lastResult }));
-            await this.persist();
-            return result;
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
@@ -109,12 +114,16 @@ export class ResourceReaperService {
                 lastError: message,
             };
             console.error(JSON.stringify({ event: "resource_reaper_failed", at: runAt.toISOString(), error: message }));
-            await this.persist();
-            return undefined;
         }
         finally {
-            this.running = false;
+            try {
+                await this.persist();
+            }
+            finally {
+                this.running = false;
+            }
         }
+        return result;
     }
     arm(delayMs) {
         if (this.stopped)
@@ -122,13 +131,32 @@ export class ResourceReaperService {
         if (this.timer)
             clearTimeout(this.timer);
         this.timer = setTimeout(() => {
-            void this.runNow().finally(() => this.arm(this.intervalMs));
+            void this.runNow()
+                .catch((error) => {
+                console.error(JSON.stringify({
+                    event: "resource_reaper_timer_failed",
+                    at: new Date().toISOString(),
+                    error: error instanceof Error ? error.message : String(error),
+                }));
+            })
+                .finally(() => this.arm(this.intervalMs));
         }, delayMs);
         this.timer.unref?.();
     }
     async persist() {
-        if (this.state)
-            await writeResourceReaperState(this.statePath, this.state);
+        if (!this.state)
+            return;
+        try {
+            await this.writeState(this.statePath, this.state);
+        }
+        catch (error) {
+            console.error(JSON.stringify({
+                event: "resource_reaper_state_persist_failed",
+                at: new Date().toISOString(),
+                path: this.statePath,
+                error: error instanceof Error ? error.message : String(error),
+            }));
+        }
     }
 }
 function readPositiveInteger(value) {

package/dist/sessions/pibo-data-store.js

@@ -53,20 +53,20 @@ export class PiboDataSessionStore {
             activeModel: input.activeModel === null ? undefined : input.activeModel ? { ...input.activeModel } : existing.activeModel,
             updatedAt: new Date().toISOString(),
         };
-        this.db.prepare(`
-			UPDATE sessions SET
-				pi_session_id = ?,
-				root_session_id = ?,
-				parent_id = ?,
-				origin_id = ?,
-				profile = ?,
-				active_model_json = ?,
-				workspace = ?,
-				title = ?,
-				metadata_json = ?,
-				updated_at = ?,
-				last_activity_at = MAX(last_activity_at, ?)
-			WHERE id = ? AND deleted_at IS NULL
+        this.db.prepare(`
+			UPDATE sessions SET
+				pi_session_id = ?,
+				root_session_id = ?,
+				parent_id = ?,
+				origin_id = ?,
+				profile = ?,
+				active_model_json = ?,
+				workspace = ?,
+				title = ?,
+				metadata_json = ?,
+				updated_at = ?,
+				last_activity_at = MAX(last_activity_at, ?)
+			WHERE id = ? AND deleted_at IS NULL
 		`).run(updated.piSessionId, rootSessionId(updated), updated.parentId ?? null, updated.originId ?? null, updated.profile, updated.activeModel ? JSON.stringify(updated.activeModel) : null, updated.workspace ?? null, updated.title ?? "Untitled Session", JSON.stringify(updated.metadata ?? {}), updated.updatedAt, updated.updatedAt, id);
         return this.get(id);
     }
@@ -129,8 +129,8 @@ export class PiboDataSessionStore {
             "channel", "kind", "profile", "active_model_json", "workspace", "title", "first_message_preview",
             "status", "metadata_json", "created_at", "updated_at", "last_activity_at",
         ];
-        this.db.prepare(`
-			INSERT INTO sessions (${columns.join(", ")}) VALUES (${columns.map(() => "?").join(", ")})
+        this.db.prepare(`
+			INSERT INTO sessions (${columns.join(", ")}) VALUES (${columns.map(() => "?").join(", ")})
 		`).run(session.id, session.piSessionId, roomIdFromMetadata(session.metadata), rootSessionId(session), session.parentId ?? null, session.originId ?? null, session.channel, session.kind, session.profile, session.activeModel ? JSON.stringify(session.activeModel) : null, session.workspace ?? null, session.title ?? "Untitled Session", previewText(session.title ?? "") ?? null, "idle", JSON.stringify(session.metadata ?? {}), session.createdAt, session.updatedAt, session.updatedAt);
     }
 }

package/dist/sessions/sqlite-store.js

@@ -18,31 +18,31 @@ export class SqlitePiboSessionStore {
         this.ensureActiveModelColumn();
     }
     applySchema() {
-        this.db.exec(`
-			CREATE TABLE IF NOT EXISTS pibo_sessions (
-				id TEXT PRIMARY KEY,
-				pi_session_id TEXT NOT NULL UNIQUE,
-				channel TEXT NOT NULL,
-				kind TEXT NOT NULL,
-				profile TEXT NOT NULL,
-				parent_id TEXT,
-				origin_id TEXT,
-				workspace TEXT,
-				title TEXT,
-				metadata_json TEXT,
-				active_model_json TEXT,
-				created_at TEXT NOT NULL,
-				updated_at TEXT NOT NULL,
-				FOREIGN KEY(parent_id) REFERENCES pibo_sessions(id),
-				FOREIGN KEY(origin_id) REFERENCES pibo_sessions(id)
-			);
-
-			CREATE INDEX IF NOT EXISTS idx_pibo_sessions_parent
-				ON pibo_sessions(parent_id, updated_at);
-			CREATE INDEX IF NOT EXISTS idx_pibo_sessions_origin
-				ON pibo_sessions(origin_id, updated_at);
-			CREATE INDEX IF NOT EXISTS idx_pibo_sessions_channel_kind
-				ON pibo_sessions(channel, kind, updated_at);
+        this.db.exec(`
+			CREATE TABLE IF NOT EXISTS pibo_sessions (
+				id TEXT PRIMARY KEY,
+				pi_session_id TEXT NOT NULL UNIQUE,
+				channel TEXT NOT NULL,
+				kind TEXT NOT NULL,
+				profile TEXT NOT NULL,
+				parent_id TEXT,
+				origin_id TEXT,
+				workspace TEXT,
+				title TEXT,
+				metadata_json TEXT,
+				active_model_json TEXT,
+				created_at TEXT NOT NULL,
+				updated_at TEXT NOT NULL,
+				FOREIGN KEY(parent_id) REFERENCES pibo_sessions(id),
+				FOREIGN KEY(origin_id) REFERENCES pibo_sessions(id)
+			);
+
+			CREATE INDEX IF NOT EXISTS idx_pibo_sessions_parent
+				ON pibo_sessions(parent_id, updated_at);
+			CREATE INDEX IF NOT EXISTS idx_pibo_sessions_origin
+				ON pibo_sessions(origin_id, updated_at);
+			CREATE INDEX IF NOT EXISTS idx_pibo_sessions_channel_kind
+				ON pibo_sessions(channel, kind, updated_at);
 		`);
     }
     ensureActiveModelColumn() {
@@ -60,22 +60,22 @@ export class SqlitePiboSessionStore {
     create(input) {
         const session = createPiboSession(input);
         this.db
-            .prepare(`
-				INSERT INTO pibo_sessions (
-					id,
-					pi_session_id,
-					channel,
-					kind,
-					profile,
-					parent_id,
-					origin_id,
-					workspace,
-					title,
-					metadata_json,
-					active_model_json,
-					created_at,
-					updated_at
-				) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+            .prepare(`
+				INSERT INTO pibo_sessions (
+					id,
+					pi_session_id,
+					channel,
+					kind,
+					profile,
+					parent_id,
+					origin_id,
+					workspace,
+					title,
+					metadata_json,
+					active_model_json,
+					created_at,
+					updated_at
+				) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
 			`)
             .run(session.id, session.piSessionId, session.channel, session.kind, session.profile, session.parentId ?? null, session.originId ?? null, session.workspace ?? null, session.title ?? null, JSON.stringify(session.metadata ?? {}), session.activeModel ? JSON.stringify(session.activeModel) : null, session.createdAt, session.updatedAt);
         const created = this.get(session.id);
@@ -100,18 +100,18 @@ export class SqlitePiboSessionStore {
             updatedAt: new Date().toISOString(),
         };
         this.db
-            .prepare(`
-				UPDATE pibo_sessions SET
-					pi_session_id = ?,
-					profile = ?,
-					parent_id = ?,
-					origin_id = ?,
-					workspace = ?,
-					title = ?,
-					metadata_json = ?,
-					active_model_json = ?,
-					updated_at = ?
-				WHERE id = ?
+            .prepare(`
+				UPDATE pibo_sessions SET
+					pi_session_id = ?,
+					profile = ?,
+					parent_id = ?,
+					origin_id = ?,
+					workspace = ?,
+					title = ?,
+					metadata_json = ?,
+					active_model_json = ?,
+					updated_at = ?
+				WHERE id = ?
 			`)
             .run(updated.piSessionId, updated.profile, updated.parentId ?? null, updated.originId ?? null, updated.workspace ?? null, updated.title ?? null, JSON.stringify(updated.metadata ?? {}), updated.activeModel ? JSON.stringify(updated.activeModel) : null, updated.updatedAt, id);
         return this.get(id);

package/dist/setup/cli.js

@@ -23,89 +23,89 @@ function shellQuote(value) {
 }
 function serviceUnit(options) {
     const gatewayPortEnv = options.serviceKind === "dev" ? `Environment=PIBO_GATEWAY_DEV_PORT=${options.webPort}\n` : `Environment=PIBO_GATEWAY_WEB_PORT=${options.webPort}\n`;
-    return `[Unit]
-Description=${options.description}
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=simple
-WorkingDirectory=${options.workingDirectory}
-Environment=HOME=/root
-Environment=PIBO_HOME=${options.piboHome}
-Environment=NODE_ENV=production
-${gatewayPortEnv}ExecStart=${options.execStart}
-Restart=always
-RestartSec=5
-KillSignal=SIGTERM
-TimeoutStopSec=30
-
-[Install]
-WantedBy=multi-user.target
+    return `[Unit]
+Description=${options.description}
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=${options.workingDirectory}
+Environment=HOME=/root
+Environment=PIBO_HOME=${options.piboHome}
+Environment=NODE_ENV=production
+${gatewayPortEnv}ExecStart=${options.execStart}
+Restart=always
+RestartSec=5
+KillSignal=SIGTERM
+TimeoutStopSec=30
+
+[Install]
+WantedBy=multi-user.target
 `;
 }
 function devStartWrapper(options) {
-    return `#!/usr/bin/env node
-import { runWebGatewayServer } from ${JSON.stringify(`${options.repoDir}/dist/gateway/web.js`)};
-
-await runWebGatewayServer({
-  host: "127.0.0.1",
-  port: ${options.gatewayPort},
-  web: {
-    host: "127.0.0.1",
-    port: ${options.webPort},
-  },
-});
+    return `#!/usr/bin/env node
+import { runWebGatewayServer } from ${JSON.stringify(`${options.repoDir}/dist/gateway/web.js`)};
+
+await runWebGatewayServer({
+  host: "127.0.0.1",
+  port: ${options.gatewayPort},
+  web: {
+    host: "127.0.0.1",
+    port: ${options.webPort},
+  },
+});
 `;
 }
 function caddyfile(options) {
     const blocks = [];
     if (options.prodDomain) {
-        blocks.push(`${options.prodDomain} {
-	encode zstd gzip
-	reverse_proxy 127.0.0.1:${options.prodPort}
+        blocks.push(`${options.prodDomain} {
+	encode zstd gzip
+	reverse_proxy 127.0.0.1:${options.prodPort}
 }`);
     }
     if (options.prodWwwDomain && options.prodDomain) {
-        blocks.push(`${options.prodWwwDomain} {
-	redir https://${options.prodDomain}{uri} permanent
+        blocks.push(`${options.prodWwwDomain} {
+	redir https://${options.prodDomain}{uri} permanent
 }`);
     }
     if (options.devDomain && options.devPort) {
-        blocks.push(`${options.devDomain} {
-	encode zstd gzip
-	reverse_proxy 127.0.0.1:${options.devPort}
+        blocks.push(`${options.devDomain} {
+	encode zstd gzip
+	reverse_proxy 127.0.0.1:${options.devPort}
 }`);
     }
     if (options.devWwwDomain && options.devDomain) {
-        blocks.push(`${options.devWwwDomain} {
-	redir https://${options.devDomain}{uri} permanent
+        blocks.push(`${options.devWwwDomain} {
+	redir https://${options.devDomain}{uri} permanent
 }`);
     }
     return `${blocks.join("\n\n")}\n`;
 }
 function userEnvTemplate(options) {
-    return `# Pibo user-host setup
-PIBO_HOME=${options.piboHome}
-PIBO_AUTH_BASE_URL=${options.domain ? `https://${options.domain}` : "https://pibo.example.com"}
-# Set through \`pibo config set\` or your secret manager:
-# PIBO_AUTH_SECRET=<at-least-32-characters>
-# PIBO_GOOGLE_CLIENT_ID=<google-client-id>
-# PIBO_GOOGLE_CLIENT_SECRET=<google-client-secret>
-# PIBO_ALLOWED_EMAILS=you@example.com
+    return `# Pibo user-host setup
+PIBO_HOME=${options.piboHome}
+PIBO_AUTH_BASE_URL=${options.domain ? `https://${options.domain}` : "https://pibo.example.com"}
+# Set through \`pibo config set\` or your secret manager:
+# PIBO_AUTH_SECRET=<at-least-32-characters>
+# PIBO_GOOGLE_CLIENT_ID=<google-client-id>
+# PIBO_GOOGLE_CLIENT_SECRET=<google-client-secret>
+# PIBO_ALLOWED_EMAILS=you@example.com
 `;
 }
 function developerEnvTemplate(options) {
-    return `# Pibo developer-host setup
-PIBO_ORIGIN=${options.origin ?? "git@github.com:<your-fork>/pibo.git"}
-PIBO_UPSTREAM=${options.upstream ?? "git@github.com:Pascapone/pibo.git"}
-PIBO_REPO_DIR=${options.repoDir}
-PIBO_PROD_HOME=${options.prodHome}
-PIBO_DEV_HOME=${options.devHome}
-PIBO_PROD_BASE_URL=${options.prodDomain ? `https://${options.prodDomain}` : "https://pibo.example.com"}
-PIBO_DEV_BASE_URL=${options.devDomain ? `https://${options.devDomain}` : "https://dev.pibo.example.com"}
-# Optional: override the dev deploy reachability probe. If omitted, deploy uses PIBO_DEV_BASE_URL/apps/chat.
-# PIBO_DEV_PUBLIC_URL=${options.devDomain ? `https://${options.devDomain}/apps/chat` : "https://dev.pibo.example.com/apps/chat"}
+    return `# Pibo developer-host setup
+PIBO_ORIGIN=${options.origin ?? "git@github.com:<your-fork>/pibo.git"}
+PIBO_UPSTREAM=${options.upstream ?? "git@github.com:Pascapone/pibo.git"}
+PIBO_REPO_DIR=${options.repoDir}
+PIBO_PROD_HOME=${options.prodHome}
+PIBO_DEV_HOME=${options.devHome}
+PIBO_PROD_BASE_URL=${options.prodDomain ? `https://${options.prodDomain}` : "https://pibo.example.com"}
+PIBO_DEV_BASE_URL=${options.devDomain ? `https://${options.devDomain}` : "https://dev.pibo.example.com"}
+# Optional: override the dev deploy reachability probe. If omitted, deploy uses PIBO_DEV_BASE_URL/apps/chat.
+# PIBO_DEV_PUBLIC_URL=${options.devDomain ? `https://${options.devDomain}/apps/chat` : "https://dev.pibo.example.com/apps/chat"}
 `;
 }
 export function createUserHostSetupPlan(options = {}) {

package/dist/shared/trace-engine.js

@@ -1,5 +1,5 @@
 import { reconcileAsyncAgentRunStatuses } from "./trace-async-agent-runs.js";
-import { applySingleEventToNodes, contentDeltaPatchNodeId, dedupeTraceEvents, eventsCanAffectAsyncAgentRunStatus, findOpenTranscriptEventIds, isConfirmedUserMessageEcho, latestTraceStreamId, messageTurnTimingsFromEvents, reconcileTranscriptUserMessageTimestamps, traceEventDedupeKey, } from "./trace-event-projection.js";
+import { applySingleEventToNodes, contentDeltaPatchNodeId, dedupeTraceEvents, eventsCanAffectAsyncAgentRunStatus, findOpenTranscriptEventIds, isConfirmedUserMessageEcho, latestTraceStreamId, mergeMessageTurnTimings, messageTurnTimingsFromEvents, reconcileTranscriptUserMessageTimestamps, traceEventDedupeKey, } from "./trace-event-projection.js";
 import { flattenTraceNodes, mapTraceNodesById, nestTraceNodes } from "./trace-nodes.js";
 import { nestMutableCopiedTraceNodes, shareUnchangedTraceNodes } from "./trace-patch-nodes.js";
 import { mapTraceChildSessionsByParent, mapTraceSubagentSessionLinks, } from "./trace-subagent-links.js";
@@ -14,7 +14,8 @@ export function buildTraceViewFromEvents(input) {
     const allEntries = input.transcriptEntries ?? [];
     const openTranscriptEventIds = findOpenTranscriptEventIds(events, sessionStatus);
     const entries = projectTranscriptEntries(allEntries, sessionStatus, openTranscriptEventIds);
-    const nodes = traceNodesFromEntries(input.session.id, entries, messageTurnTimingsFromEvents(events));
+    const turnTimings = mergeMessageTurnTimings(input.turnTimings ?? [], messageTurnTimingsFromEvents(events));
+    const nodes = traceNodesFromEntries(input.session.id, entries, turnTimings);
     reconcileTranscriptUserMessageTimestamps(nodes, events);
     const byId = mapTraceNodesById(nodes);
     const childByParent = mapTraceChildSessionsByParent(input.sessions ?? []);

package/dist/shared/trace-event-projection.js

@@ -531,6 +531,32 @@ function shouldKeepTranscriptEchoEvent(event, openTranscriptEventIds) {
 function isStaleToolCallEchoEvent(event, sessionStatus) {
     return sessionStatus !== "running" && event.type === "tool_call";
 }
+export function mergeMessageTurnTimings(...groups) {
+    const byEventId = new Map();
+    for (const timing of groups.flat()) {
+        const existing = byEventId.get(timing.eventId);
+        if (!existing) {
+            byEventId.set(timing.eventId, timing);
+            continue;
+        }
+        const merged = {
+            eventId: timing.eventId,
+            userText: timing.userText ?? existing.userText,
+            startedAt: timing.startedAt ?? existing.startedAt,
+            completedAt: timing.completedAt ?? existing.completedAt,
+            durationMs: timing.durationMs ?? existing.durationMs,
+        };
+        if (merged.durationMs === undefined) {
+            const startedAtMs = parseTimestamp(merged.startedAt);
+            const completedAtMs = parseTimestamp(merged.completedAt);
+            if (startedAtMs !== undefined && completedAtMs !== undefined) {
+                merged.durationMs = Math.max(0, completedAtMs - startedAtMs);
+            }
+        }
+        byEventId.set(timing.eventId, merged);
+    }
+    return [...byEventId.values()];
+}
 export function messageTurnTimingsFromEvents(events) {
     const timings = new Map();
     const completedEventIds = [];

package/dist/tools/agent-browser-wrapper.js

@@ -6,86 +6,86 @@ function shellQuote(value) {
     return `'${value.replaceAll("'", "'\\''")}'`;
 }
 function createAgentBrowserWrapper(realExecutablePath, defaultHomeDir) {
-    return `#!/usr/bin/env bash
-set -euo pipefail
-
-real_agent_browser=${shellQuote(realExecutablePath)}
-default_home=${shellQuote(defaultHomeDir)}
-fresh_flag=${shellQuote(AGENT_BROWSER_FRESH_PROFILE_FLAG)}
-
-if [ -z "\${AGENT_BROWSER_HOME:-}" ]; then
-  export AGENT_BROWSER_HOME="$default_home"
-fi
-mkdir -p "$AGENT_BROWSER_HOME" "$AGENT_BROWSER_HOME/profiles"
-
-# agent-browser@0.27.0 uses HOME for ~/.agent-browser state. Redirect it by
-# default so doctor, config, sockets, and auth vault files stay inside Pibo's
-# tool home. Operators can opt out for upstream debugging.
-if [ "\${PIBO_AGENT_BROWSER_PRESERVE_HOME:-0}" != "1" ]; then
-  export HOME="$AGENT_BROWSER_HOME"
-fi
-
-explicit_runtime=0
-fresh_profile=0
-show_help=0
-starts_browser=0
-args=()
-
-print_wrapper_help() {
-  cat <<'HELP'
-Pibo agent-browser wrapper
-  - keeps Agent Browser state under AGENT_BROWSER_HOME by default
-  - prepends a persistent Pibo profile for browser-launching commands
-  - pass --fresh-profile to disable Pibo profile injection
-  - explicit --profile, --state, --cdp, --auto-connect, --provider, --engine,
-    --executable-path, or --config flags override Pibo defaults
-HELP
-}
-
-while [ "$#" -gt 0 ]; do
-  case "$1" in
-    --help|-h)
-      show_help=1
-      args+=("$1")
-      ;;
-    --fresh-profile)
-      fresh_profile=1
-      ;;
-    --profile|--state|--cdp|--auto-connect|--provider|--engine|--executable-path|--config)
-      explicit_runtime=1
-      args+=("$1")
-      if [ "$#" -gt 1 ]; then
-        shift
-        args+=("$1")
-      fi
-      ;;
-    --profile=*|--state=*|--cdp=*|--auto-connect=*|--provider=*|--engine=*|--executable-path=*|--config=*)
-      explicit_runtime=1
-      args+=("$1")
-      ;;
-    open|launch|new|goto)
-      starts_browser=1
-      args+=("$1")
-      ;;
-    *)
-      args+=("$1")
-      ;;
-  esac
-  shift
-done
-
-if [ "$show_help" -eq 1 ]; then
-  print_wrapper_help
-  exec "$real_agent_browser" "\${args[@]}"
-fi
-
-if [ "$starts_browser" -eq 1 ] && [ "$fresh_profile" -eq 0 ] && [ "$explicit_runtime" -eq 0 ]; then
-  profile_dir=\${AGENT_BROWSER_PROFILE:-$AGENT_BROWSER_HOME/profiles/${AGENT_BROWSER_DEFAULT_PROFILE}}
-  mkdir -p "$profile_dir"
-  exec "$real_agent_browser" --profile "$profile_dir" "\${args[@]}"
-fi
-
-exec "$real_agent_browser" "\${args[@]}"
+    return `#!/usr/bin/env bash
+set -euo pipefail
+
+real_agent_browser=${shellQuote(realExecutablePath)}
+default_home=${shellQuote(defaultHomeDir)}
+fresh_flag=${shellQuote(AGENT_BROWSER_FRESH_PROFILE_FLAG)}
+
+if [ -z "\${AGENT_BROWSER_HOME:-}" ]; then
+  export AGENT_BROWSER_HOME="$default_home"
+fi
+mkdir -p "$AGENT_BROWSER_HOME" "$AGENT_BROWSER_HOME/profiles"
+
+# agent-browser@0.27.0 uses HOME for ~/.agent-browser state. Redirect it by
+# default so doctor, config, sockets, and auth vault files stay inside Pibo's
+# tool home. Operators can opt out for upstream debugging.
+if [ "\${PIBO_AGENT_BROWSER_PRESERVE_HOME:-0}" != "1" ]; then
+  export HOME="$AGENT_BROWSER_HOME"
+fi
+
+explicit_runtime=0
+fresh_profile=0
+show_help=0
+starts_browser=0
+args=()
+
+print_wrapper_help() {
+  cat <<'HELP'
+Pibo agent-browser wrapper
+  - keeps Agent Browser state under AGENT_BROWSER_HOME by default
+  - prepends a persistent Pibo profile for browser-launching commands
+  - pass --fresh-profile to disable Pibo profile injection
+  - explicit --profile, --state, --cdp, --auto-connect, --provider, --engine,
+    --executable-path, or --config flags override Pibo defaults
+HELP
+}
+
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --help|-h)
+      show_help=1
+      args+=("$1")
+      ;;
+    --fresh-profile)
+      fresh_profile=1
+      ;;
+    --profile|--state|--cdp|--auto-connect|--provider|--engine|--executable-path|--config)
+      explicit_runtime=1
+      args+=("$1")
+      if [ "$#" -gt 1 ]; then
+        shift
+        args+=("$1")
+      fi
+      ;;
+    --profile=*|--state=*|--cdp=*|--auto-connect=*|--provider=*|--engine=*|--executable-path=*|--config=*)
+      explicit_runtime=1
+      args+=("$1")
+      ;;
+    open|launch|new|goto)
+      starts_browser=1
+      args+=("$1")
+      ;;
+    *)
+      args+=("$1")
+      ;;
+  esac
+  shift
+done
+
+if [ "$show_help" -eq 1 ]; then
+  print_wrapper_help
+  exec "$real_agent_browser" "\${args[@]}"
+fi
+
+if [ "$starts_browser" -eq 1 ] && [ "$fresh_profile" -eq 0 ] && [ "$explicit_runtime" -eq 0 ]; then
+  profile_dir=\${AGENT_BROWSER_PROFILE:-$AGENT_BROWSER_HOME/profiles/${AGENT_BROWSER_DEFAULT_PROFILE}}
+  mkdir -p "$profile_dir"
+  exec "$real_agent_browser" --profile "$profile_dir" "\${args[@]}"
+fi
+
+exec "$real_agent_browser" "\${args[@]}"
 `;
 }
 export function ensureAgentBrowserWrapper(status) {