@proagentstore/cli 0.3.0 → 0.3.2

package/dist/browser-runner/runner.js

@@ -377,7 +377,9 @@ export class LocalRunner {
         this.store.putTask(task);
         this.addTaskEvent(task, "task.completed", `Task completed: ${task.type}`, output);
         await this.endTakeover(taskId);
-        return { submitted: true, output };
+        // This path only CLEARED a challenge — the form was NOT submitted (output.submitted
+        // is false). Report it accurately so the console doesn't show a false "submitted".
+        return { submitted: false, resumed: true, output };
     }
     /**
      * Always attach files via Playwright, never a native OS dialog: intercept any
@@ -584,6 +586,19 @@ export class LocalRunner {
             }
         });
     }
+    /** Close every page except the active one. ATS forms open popups/extra tabs that
+     *  otherwise stay open in the persistent context until shutdown; over many
+     *  applications they accumulate (memory/handles). Called when a task finishes. */
+    async closeStalePages() {
+        const ctx = this.browserContext;
+        if (!ctx)
+            return;
+        for (const p of ctx.pages()) {
+            if (p !== this.activePage && !p.isClosed()) {
+                await p.close().catch(() => undefined);
+            }
+        }
+    }
     /** The page the brain drives and the human takes over — created on demand. */
     async getActivePage() {
         const context = await this.getBrowserContext();
@@ -716,28 +731,39 @@ export class LocalRunner {
     /** Whether the brain can resume: a solved captcha (auto), a human "Resume" for a stuck step, or a provided value. */
     async browserHandoffStatus(taskId) {
         const session = this.takeovers.get(taskId);
-        const page = session?.page ?? (await this.getActivePage());
+        // No live takeover session (the runner restarted mid-handoff, or it expired): stay
+        // UNRESOLVED. The old code fell through and relaunched a blank page via
+        // getActivePage(), which detected no challenge and reported solved:true — so the
+        // brain resumed the application WITHOUT the human's captcha/value. A status poll
+        // must never relaunch the browser or claim a lost handoff is done.
+        if (!session)
+            return { solved: false, challenge: null };
+        const page = session.page;
         if (page.isClosed())
             return { solved: true, challenge: null };
         // A needs_input handoff resumes once the user supplies the value.
-        if (session?.reason === "needs_input")
+        if (session.reason === "needs_input")
             return { solved: !!session.inputValue, challenge: null, value: session.inputValue };
         // A stuck handoff resumes only when the human explicitly clicks Resume —
         // there's nothing to auto-detect.
-        if (session?.reason === "stuck")
+        if (session.reason === "stuck")
             return { solved: !!session.humanDone, challenge: null };
         // A challenge resumes when the token/widget clears OR the human clicks Done —
         // custom captchas (e.g. PageUp's "not a robot") have no detectable token, so
         // the human's explicit Done is the authority; never strand them.
         const challenge = await detectHumanChallenge(page);
-        const solved = !challenge || (await challengeSolved(page)) || !!session?.humanDone;
+        const solved = !challenge || (await challengeSolved(page)) || !!session.humanDone;
         return { solved, challenge };
     }
     /** The user supplied the value the agent asked for (ask-and-hold). */
     browserSubmitInput(taskId, value) {
         const session = this.takeovers.get(taskId);
-        if (session)
-            session.inputValue = value;
+        // No live takeover (session expired / runner restarted): the value can't be
+        // delivered. Don't discard it silently AND resurrect the already-terminal task as
+        // "running" — report failure so the console can say "session expired, re-run".
+        if (!session)
+            return { ok: false };
+        session.inputValue = value;
         const task = this.store.getTask(taskId);
         if (task) {
             task.status = "running";
@@ -777,6 +803,7 @@ export class LocalRunner {
             this.store.putTask(task);
             this.addTaskEvent(task, success ? "task.completed" : "task.failed", detail || `Application ${outcome}`, { outcome, detail });
         }
+        await this.closeStalePages().catch(() => undefined);
         return { ok: true };
     }
     ensureChromiumInstalled() {

package/dist/index.js

@@ -171,6 +171,7 @@ var initCommand = new Command2("init").description("Scaffold a new ProAgentStore
           category: "general",
           model: "@cf/meta/llama-3.2-3b-instruct",
           template,
+          capabilities: { surfaces: [], runtime: null, workflow: null },
           serverConfig: {
             durableObject: template === "worker",
             cron: template === "cron" ? "0 8 * * *" : void 0,
@@ -378,7 +379,6 @@ import { Command as Command3 } from "commander";
 var CONFIG_DIR = join3(homedir(), ".config", "proagentstore");
 var TOKEN_FILE = join3(CONFIG_DIR, "session.json");
 var API_BASE = "https://api.proagentstore.online";
-var FAS_API = "https://api.freeappstore.online";
 function loadSession() {
   try {
     if (!existsSync3(TOKEN_FILE)) return null;
@@ -421,34 +421,32 @@ var loginCommand = new Command3("login").description("Sign in with Google or Git
         res.end();
         return;
       }
-      const fasSession = url.searchParams.get("fas_session");
-      if (!fasSession) {
+      const session = url.searchParams.get("session");
+      if (!session) {
         res.writeHead(400, { "Content-Type": "text/html" });
         res.end("<h1>Sign-in failed</h1><p>No session received.</p>");
         clearTimeout(timeout);
         server.close();
-        reject(new Error("No fas_session in callback"));
+        reject(new Error("No session in callback"));
         return;
       }
       try {
-        const exchangeRes = await fetch(`${API_BASE}/v1/auth/exchange`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ fas_session: fasSession })
+        const meRes = await fetch(`${API_BASE}/v1/auth/me`, {
+          headers: { Authorization: `Bearer ${session}` }
         });
-        const data = await exchangeRes.json();
-        if (!data.token) throw new Error(data.error || "Exchange failed");
+        if (!meRes.ok) throw new Error("Session validation failed");
+        const me = await meRes.json();
         saveSession({
-          token: data.token,
-          user: data.user,
+          token: session,
+          user: { id: me.id, login: me.login, avatar: me.avatar },
           expiresAt: Date.now() + 29 * 24 * 60 * 60 * 1e3
           // ~29 days
         });
         res.writeHead(200, { "Content-Type": "text/html" });
-        res.end(`<h1>Signed in as ${data.user?.login}</h1><p>You can close this tab and return to the terminal.</p><script>window.close()</script>`);
+        res.end(`<h1>Signed in as ${me.login}</h1><p>You can close this tab and return to the terminal.</p><script>window.close()</script>`);
         clearTimeout(timeout);
         server.close();
-        resolve5(data.token);
+        resolve5(session);
       } catch (err) {
         res.writeHead(500, { "Content-Type": "text/html" });
         res.end(`<h1>Sign-in failed</h1><p>${err instanceof Error ? err.message : String(err)}</p>`);
@@ -459,8 +457,8 @@ var loginCommand = new Command3("login").description("Sign in with Google or Git
     });
     server.listen(port, "127.0.0.1");
   });
-  const oauthBase = provider === "google" ? `${FAS_API}/v1/auth/google/start` : `${FAS_API}/v1/auth/github/start`;
-  const oauthUrl = `${oauthBase}?app_id=pags-cli&response_mode=query&return_to=${encodeURIComponent(callbackUrl)}`;
+  const oauthBase = provider === "google" ? `${API_BASE}/v1/auth/google/start` : `${API_BASE}/v1/auth/github/start`;
+  const oauthUrl = `${oauthBase}?return_to=${encodeURIComponent(callbackUrl)}`;
   const open = (await import("child_process")).exec;
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   open(`${cmd} "${oauthUrl}"`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",