@poncho-ai/browser 0.6.2 → 0.6.4

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @poncho-ai/browser@0.6.2 build /home/runner/work/poncho-ai/poncho-ai/packages/browser
+> @poncho-ai/browser@0.6.4 build /Users/cesar/Dev/latitude/poncho-ai/packages/browser
 > tsup src/index.ts --format esm --dts
 
 CLI Building entry: src/index.ts
@@ -7,8 +7,8 @@
 CLI tsup v8.5.1
 CLI Target: es2022
 ESM Build start
-ESM dist/index.js 41.37 KB
-ESM ⚡️ Build success in 75ms
+ESM dist/index.js 45.65 KB
+ESM ⚡️ Build success in 112ms
 DTS Build start
-DTS ⚡️ Build success in 4983ms
-DTS dist/index.d.ts 13.59 KB
+DTS ⚡️ Build success in 1828ms
+DTS dist/index.d.ts 13.72 KB

package/.turbo/turbo-test.log

@@ -0,0 +1,12 @@
+
+> @poncho-ai/browser@0.6.2 test /Users/cesar/Dev/latitude/poncho-ai/packages/browser
+> vitest --passWithNoTests
+
+
+ RUN  v1.6.1 /Users/cesar/Dev/latitude/poncho-ai/packages/browser
+
+No test files found, exiting with code 0
+include: **/*.{test,spec}.?(c|m)[jt]s?(x)
+
+exclude:  **/node_modules/**, **/dist/**, **/cypress/**, **/.{idea,git,cache,output,temp}/**, **/{karma,rollup,webpack,vite,vitest,jest,ava,babel,nyc,cypress,tsup,build,eslint,prettier}.config.*
+watch exclude:  **/node_modules/**, **/dist/**

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @poncho-ai/browser
 
+## 0.6.4
+
+### Patch Changes
+
+- [`b5af10a`](https://github.com/cesr/poncho-ai/commit/b5af10a2f7b0023c683f14cd465105f8ddfff0ee) Thanks [@cesr](https://github.com/cesr)! - Fix browser cookie restore failing with "Invalid parameters" by sanitizing Playwright-format cookies to CDP-compatible format before calling Network.setCookies. Falls back to per-cookie restore when batch call fails.
+
+## 0.6.3
+
+### Patch Changes
+
+- [`35f3f54`](https://github.com/cesr/poncho-ai/commit/35f3f54b17ff50253ab01dbcfe19c643dd6c7e00) Thanks [@cesr](https://github.com/cesr)! - Add `browser_clear_cookies` tool for deleting browser cookies
+
+  Agents with `browser: true` can now call `browser_clear_cookies` to delete cookies from the live browser and persisted storage. Accepts an optional `url` parameter to scope deletion to a specific site (e.g. "https://example.com"); omit to clear all cookies.
+
 ## 0.6.2
 
 ### Patch Changes

package/dist/index.d.ts

@@ -147,6 +147,9 @@ declare class BrowserSession {
     executeJs(conversationId: string, script: string): Promise<unknown>;
     closeTab(conversationId: string): Promise<void>;
     navigate(conversationId: string, action: string): Promise<void>;
+    clearCookies(conversationId: string, url?: string): Promise<{
+        cleared: number;
+    }>;
     startScreencast(conversationId: string, options?: ScreencastOptions): Promise<void>;
     stopScreencast(): Promise<void>;
     onFrame(conversationId: string, listener: FrameListener): () => void;
@@ -158,6 +161,7 @@ declare class BrowserSession {
     saveState(storagePath: string): Promise<void>;
     private persistStorageState;
     private restoreStorageState;
+    private clearPersistedCookies;
     close(): Promise<void>;
     private emitStatus;
 }

package/dist/index.js

@@ -186,6 +186,24 @@ async function getBrowserManagerCtor() {
   return BrowserManagerCtor;
 }
 var MAX_TABS = 8;
+var VALID_SAME_SITE = ["Strict", "Lax", "None"];
+function sanitizeCookieForCDP(c) {
+  const name = typeof c.name === "string" ? c.name : "";
+  const value = typeof c.value === "string" ? c.value : "";
+  if (!name) return null;
+  const out = { name, value };
+  if (typeof c.domain === "string" && c.domain) out.domain = c.domain;
+  if (typeof c.path === "string") out.path = c.path;
+  if (typeof c.secure === "boolean") out.secure = c.secure;
+  if (typeof c.httpOnly === "boolean") out.httpOnly = c.httpOnly;
+  if (typeof c.expires === "number" && c.expires > 0) {
+    out.expires = c.expires;
+  }
+  if (typeof c.sameSite === "string" && VALID_SAME_SITE.includes(c.sameSite)) {
+    out.sameSite = c.sameSite;
+  }
+  return out;
+}
 var SAME_TAB_INIT_SCRIPT = `
 (() => {
   // Override window.open to navigate in-place
@@ -739,6 +757,34 @@ var BrowserSession = class {
       this.unlock();
     }
   }
+  async clearCookies(conversationId, url) {
+    await this.lock();
+    try {
+      const mgr = await this.ensureManager();
+      await this.switchToConversation(mgr, conversationId);
+      const cdp = await mgr.getCDPSession();
+      let cleared = 0;
+      if (url) {
+        const { cookies } = await cdp.send("Network.getCookies", { urls: [url] });
+        cleared = cookies.length;
+        for (const cookie of cookies) {
+          await cdp.send("Network.deleteCookies", {
+            name: cookie.name,
+            domain: cookie.domain,
+            path: cookie.path
+          });
+        }
+      } else {
+        const { cookies } = await cdp.send("Network.getCookies");
+        cleared = cookies.length;
+        await cdp.send("Network.clearBrowserCookies");
+      }
+      await this.clearPersistedCookies(url);
+      return { cleared };
+    } finally {
+      this.unlock();
+    }
+  }
   // -----------------------------------------------------------------------
   // Screencast (one active at a time, tied to the viewed conversation)
   // -----------------------------------------------------------------------
@@ -808,6 +854,10 @@ var BrowserSession = class {
     tab.frameListeners.add(listener);
     return () => {
       tab.frameListeners.delete(listener);
+      if (tab.frameListeners.size === 0 && this._screencastConversation === conversationId) {
+        this.stopScreencast().catch(() => {
+        });
+      }
     };
   }
   onStatus(conversationId, listener) {
@@ -913,8 +963,28 @@ var BrowserSession = class {
       if (!json) return;
       const state = JSON.parse(json);
       if (state.cookies?.length) {
-        await cdp.send("Network.setCookies", { cookies: state.cookies });
-        console.log(`[poncho][browser] Restored ${state.cookies.length} cookies`);
+        const sanitized = state.cookies.map(sanitizeCookieForCDP).filter((c) => c !== null);
+        if (sanitized.length) {
+          try {
+            await cdp.send("Network.setCookies", { cookies: sanitized });
+          } catch {
+            let restored = 0;
+            for (const cookie of sanitized) {
+              try {
+                await cdp.send("Network.setCookies", { cookies: [cookie] });
+                restored++;
+              } catch {
+              }
+            }
+            if (restored > 0) {
+              console.log(`[poncho][browser] Restored ${restored}/${sanitized.length} cookies (batch failed, fell back to individual)`);
+            } else {
+              console.warn("[poncho][browser] Could not restore any cookies");
+            }
+            return;
+          }
+          console.log(`[poncho][browser] Restored ${sanitized.length} cookies`);
+        }
       }
       if (state.origins?.length) {
         const entries = {};
@@ -933,6 +1003,36 @@ var BrowserSession = class {
       console.warn("[poncho][browser] Failed to restore storage state:", err?.message ?? err);
     }
   }
+  async clearPersistedCookies(url) {
+    const persistence = this.config.storagePersistence;
+    if (!persistence) return;
+    try {
+      const json = await persistence.load();
+      if (!json) return;
+      const state = JSON.parse(json);
+      if (!state.cookies?.length) return;
+      if (url) {
+        let host;
+        try {
+          host = new URL(url).hostname.toLowerCase();
+        } catch {
+          return;
+        }
+        state.cookies = state.cookies.filter((c) => {
+          const raw = String(c.domain ?? "").toLowerCase();
+          const bare = raw.replace(/^\./, "");
+          if (host === bare) return false;
+          if (raw.startsWith(".") && host.endsWith("." + bare)) return false;
+          return true;
+        });
+      } else {
+        state.cookies = [];
+      }
+      await persistence.save(JSON.stringify(state));
+    } catch (err) {
+      console.warn("[poncho][browser] Failed to clear persisted cookies:", err?.message ?? err);
+    }
+  }
   async close() {
     try {
       await this.stopScreencast();
@@ -1167,6 +1267,25 @@ function createBrowserTools(getSession, getConversationId) {
         return { scrolled: direction, amount: amount ?? "viewport" };
       }
     },
+    {
+      name: "browser_clear_cookies",
+      description: `Delete browser cookies. By default clears all cookies. Pass a url to only delete cookies that would be sent to that URL (e.g. "https://example.com" removes cookies for example.com and its subdomains). Also removes them from persisted storage so they won't be restored on next launch.`,
+      inputSchema: {
+        type: "object",
+        properties: {
+          url: {
+            type: "string",
+            description: 'Optional URL to scope deletion to (e.g. "https://example.com"). Omit to clear all cookies.'
+          }
+        }
+      },
+      handler: async (input) => {
+        const session = getSession();
+        const url = input.url ? String(input.url) : void 0;
+        const { cleared } = await session.clearCookies(getConversationId(), url);
+        return { cleared, scope: url ?? "all" };
+      }
+    },
     {
       name: "browser_close",
       description: "Close the browser tab for this conversation. Call this when you're done with browser tasks to free resources.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poncho-ai/browser",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "Browser automation for Poncho agents, powered by agent-browser",
   "repository": {
     "type": "git",

package/src/session.ts

@@ -62,6 +62,37 @@ async function getBrowserManagerCtor(): Promise<new () => BrowserManagerInstance
 
 const MAX_TABS = 8;
 
+const VALID_SAME_SITE = ["Strict", "Lax", "None"];
+
+/**
+ * Map a Playwright-format cookie to a CDP-compatible CookieParam, stripping
+ * unknown fields and fixing values that newer Chrome versions reject.
+ */
+function sanitizeCookieForCDP(c: Record<string, unknown>): Record<string, unknown> | null {
+  const name = typeof c.name === "string" ? c.name : "";
+  const value = typeof c.value === "string" ? c.value : "";
+  if (!name) return null;
+
+  const out: Record<string, unknown> = { name, value };
+
+  if (typeof c.domain === "string" && c.domain) out.domain = c.domain;
+  if (typeof c.path === "string") out.path = c.path;
+  if (typeof c.secure === "boolean") out.secure = c.secure;
+  if (typeof c.httpOnly === "boolean") out.httpOnly = c.httpOnly;
+
+  // Playwright uses -1 for session cookies; CDP expects the field to be
+  // absent for session cookies.
+  if (typeof c.expires === "number" && c.expires > 0) {
+    out.expires = c.expires;
+  }
+
+  if (typeof c.sameSite === "string" && VALID_SAME_SITE.includes(c.sameSite)) {
+    out.sameSite = c.sameSite;
+  }
+
+  return out;
+}
+
 /**
  * Init script that forces new-tab navigations (window.open, target="_blank")
  * to open in the current tab. Runs before page scripts on every navigation.
@@ -676,6 +707,42 @@ export class BrowserSession {
     }
   }
 
+  async clearCookies(conversationId: string, url?: string): Promise<{ cleared: number }> {
+    await this.lock();
+    try {
+      const mgr = await this.ensureManager();
+      await this.switchToConversation(mgr, conversationId);
+      const cdp = await mgr.getCDPSession();
+
+      let cleared = 0;
+
+      if (url) {
+        const { cookies } = (await cdp.send("Network.getCookies", { urls: [url] })) as {
+          cookies: Array<{ name: string; domain: string; path: string }>;
+        };
+        cleared = cookies.length;
+        for (const cookie of cookies) {
+          await cdp.send("Network.deleteCookies", {
+            name: cookie.name,
+            domain: cookie.domain,
+            path: cookie.path,
+          });
+        }
+      } else {
+        const { cookies } = (await cdp.send("Network.getCookies")) as {
+          cookies: Array<unknown>;
+        };
+        cleared = cookies.length;
+        await cdp.send("Network.clearBrowserCookies");
+      }
+
+      await this.clearPersistedCookies(url);
+      return { cleared };
+    } finally {
+      this.unlock();
+    }
+  }
+
   // -----------------------------------------------------------------------
   // Screencast (one active at a time, tied to the viewed conversation)
   // -----------------------------------------------------------------------
@@ -743,7 +810,12 @@ export class BrowserSession {
       this.tabs.set(conversationId, tab);
     }
     tab.frameListeners.add(listener);
-    return () => { tab!.frameListeners.delete(listener); };
+    return () => {
+      tab!.frameListeners.delete(listener);
+      if (tab!.frameListeners.size === 0 && this._screencastConversation === conversationId) {
+        this.stopScreencast().catch(() => {});
+      }
+    };
   }
 
   onStatus(conversationId: string, listener: StatusListener): () => void {
@@ -860,8 +932,29 @@ export class BrowserSession {
         origins?: Array<{ origin: string; localStorage: Array<{ name: string; value: string }> }>;
       };
       if (state.cookies?.length) {
-        await cdp.send("Network.setCookies", { cookies: state.cookies });
-        console.log(`[poncho][browser] Restored ${state.cookies.length} cookies`);
+        const sanitized = state.cookies
+          .map(sanitizeCookieForCDP)
+          .filter((c): c is Record<string, unknown> => c !== null);
+        if (sanitized.length) {
+          try {
+            await cdp.send("Network.setCookies", { cookies: sanitized });
+          } catch {
+            let restored = 0;
+            for (const cookie of sanitized) {
+              try {
+                await cdp.send("Network.setCookies", { cookies: [cookie] });
+                restored++;
+              } catch { /* skip this cookie */ }
+            }
+            if (restored > 0) {
+              console.log(`[poncho][browser] Restored ${restored}/${sanitized.length} cookies (batch failed, fell back to individual)`);
+            } else {
+              console.warn("[poncho][browser] Could not restore any cookies");
+            }
+            return;
+          }
+          console.log(`[poncho][browser] Restored ${sanitized.length} cookies`);
+        }
       }
       if (state.origins?.length) {
         const entries: Record<string, Array<{ name: string; value: string }>> = {};
@@ -881,6 +974,38 @@ export class BrowserSession {
     }
   }
 
+  private async clearPersistedCookies(url?: string): Promise<void> {
+    const persistence = this.config.storagePersistence;
+    if (!persistence) return;
+    try {
+      const json = await persistence.load();
+      if (!json) return;
+      const state = JSON.parse(json) as {
+        cookies?: Array<Record<string, unknown>>;
+        origins?: Array<{ origin: string; localStorage: Array<{ name: string; value: string }> }>;
+      };
+      if (!state.cookies?.length) return;
+
+      if (url) {
+        let host: string;
+        try { host = new URL(url).hostname.toLowerCase(); } catch { return; }
+        state.cookies = state.cookies.filter((c) => {
+          const raw = String(c.domain ?? "").toLowerCase();
+          const bare = raw.replace(/^\./, "");
+          if (host === bare) return false;
+          if (raw.startsWith(".") && host.endsWith("." + bare)) return false;
+          return true;
+        });
+      } else {
+        state.cookies = [];
+      }
+
+      await persistence.save(JSON.stringify(state));
+    } catch (err) {
+      console.warn("[poncho][browser] Failed to clear persisted cookies:", (err as Error)?.message ?? err);
+    }
+  }
+
   async close(): Promise<void> {
     try { await this.stopScreencast(); } catch { /* */ }
     await this.persistStorageState();

package/src/tools.ts

@@ -221,6 +221,30 @@ export function createBrowserTools(
         return { scrolled: direction, amount: amount ?? "viewport" };
       },
     },
+    {
+      name: "browser_clear_cookies",
+      description:
+        "Delete browser cookies. By default clears all cookies. " +
+        "Pass a url to only delete cookies that would be sent to that URL " +
+        "(e.g. \"https://example.com\" removes cookies for example.com and its subdomains). " +
+        "Also removes them from persisted storage so they won't be restored on next launch.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          url: {
+            type: "string",
+            description:
+              "Optional URL to scope deletion to (e.g. \"https://example.com\"). Omit to clear all cookies.",
+          },
+        },
+      },
+      handler: async (input: BrowserToolInput) => {
+        const session = getSession();
+        const url = input.url ? String(input.url) : undefined;
+        const { cleared } = await session.clearCookies(getConversationId(), url);
+        return { cleared, scope: url ?? "all" };
+      },
+    },
     {
       name: "browser_close",
       description: