@proagentstore/cli 0.4.79 → 0.4.81

package/dist/browser-runner/local-browser/bridge.js

@@ -56,14 +56,28 @@ const RESEARCH_TOOLS = [
     },
 ];
 /** Runs inside the page, through the browser's own evaluate tool — privileged, never offered to the CLI. */
-const INSPECT_PAGE = `() => {
+export const INSPECT_PAGE = `() => {
 	const text = (document.body ? document.body.innerText : "").slice(0, 20000).toLowerCase();
 	const has = (s) => !!document.querySelector(s);
 	const captcha = has('iframe[src*="hcaptcha.com"], .h-captcha, iframe[src*="challenges.cloudflare.com"], .cf-turnstile, iframe[src*="arkoselabs"], .geetest_holder')
 		|| /confirm (that )?you('?re| are) not a robot|i'?m not a robot|verify (that )?you('?re| are) (a )?human|checking (if the site connection is secure|your browser)/.test(text);
 	const login = has('input[type=password]');
 	const paywall = /subscribe to (continue|read)|you('ve| have) reached your (free )?(article )?limit|sign in to (continue|read)/.test(text);
-	return { url: location.href, title: document.title.slice(0, 200), captcha, login, paywall };
+	// A bot check or an access-control page (#947). Read off the title, or off a SHORT body: these
+	// pages say little else, and a long article that merely contains "access denied" is not one.
+	const title = document.title.toLowerCase();
+	const blockedText = /access (is )?denied|403 forbidden|you don'?t have permission to access|(your )?request (was |has been )?blocked|unusual traffic from your (computer|network)|automated (queries|requests|access)|are you a (robot|human)|bot (detection|protection)|pardon our interruption|attention required/;
+	const accessBlocked = blockedText.test(title) || (text.length < 3000 && blockedText.test(text));
+	// A write affordance (#947): somewhere a run would pay, upload, or submit an application or an
+	// account. Search boxes and lone inputs are not; the fields are counted per form, search excluded.
+	const field = 'input:not([type=hidden]):not([type=search]):not([type=submit]):not([type=button]):not([type=checkbox]):not([type=radio]), textarea, select';
+	const payOrUpload = has('input[autocomplete^="cc-"], input[type=file]');
+	const submitForm = Array.from(document.querySelectorAll("form")).some((f) => {
+		if (f.getAttribute("role") === "search" || f.querySelector("input[type=search]")) return false;
+		const send = Array.from(f.querySelectorAll('button, input[type=submit]')).some((b) => /submit|apply|send|pay|place order|checkout|register|sign up|create account/i.test((b.textContent || b.getAttribute("value") || "").trim()));
+		return send && f.querySelectorAll(field).length >= 2;
+	});
+	return { url: location.href, title: document.title.slice(0, 200), captcha, login, paywall, accessBlocked, writeForm: payOrUpload || submitForm };
 }`;
 /** A bare lowercase hostname, or null — the same rule the API applies to the lists it sends. */
 export function hostOf(raw) {
@@ -95,6 +109,11 @@ export function evaluateResult(raw) {
         return null;
     }
 }
+const BLOCKER_WORDS = {
+    captcha: { noun: "a captcha", failure: "captcha" },
+    login_required: { noun: "a sign-in", failure: "login_required" },
+    access_blocked: { noun: "a bot check or access block", failure: "access_denied" },
+};
 /** The role and accessible name of a snapshot line holding this ref, e.g. `- link "Next" [ref=e12]`. */
 export function refRole(snapshot, ref) {
     for (const line of snapshot.split("\n")) {
@@ -115,6 +134,8 @@ export class BrowserBridge {
     findings = [];
     sourceFailures = [];
     summary = null;
+    /** Tool calls that reached the bridge. Zero at exit means the CLI never used the browser (#944). */
+    calls = 0;
     constructor(browser, host) {
         this.browser = browser;
         this.host = host;
@@ -128,6 +149,7 @@ export class BrowserBridge {
         ];
     }
     async callTool(name, args = {}) {
+        this.calls++;
         if (name === "record_finding")
             return this.recordFinding(args);
         if (name === "report_source_failure")
@@ -249,17 +271,32 @@ export class BrowserBridge {
         this.pages++;
         this.noteNavigation(state);
         const host = hostOf(state.url) ?? "";
-        const blocker = state.captcha ? "captcha" : state.login ? "login_required" : null;
+        // Pauses, never obstacles (#947): a captcha, a sign-in, a bot check or an access-control page is
+        // for a PERSON in the browser on this machine — the run waits, and re-checks once resumed.
+        const blocker = state.captcha ? "captcha" : state.login ? "login_required" : state.accessBlocked ? "access_blocked" : null;
         if (blocker) {
+            const what = BLOCKER_WORDS[blocker];
             this.host.emit({ type: "browser.blocked", url: state.url, domain: host, detail: { reason: blocker } });
             const outcome = await this.host.pause(blocker, { domain: host });
             if (outcome !== "resumed")
-                return text(`${host} needs a person (${blocker === "captcha" ? "a captcha" : "a sign-in"}) and nobody resolved it. Record it with report_source_failure (${blocker}) and move on.`, true);
+                return text(`${host} needs a person (${what.noun}) and nobody resolved it. Record it with report_source_failure (${what.failure}) and move on.`, true);
             const after = await this.inspect();
-            if (after && (after.captcha || after.login))
-                return text(`${host} still shows ${blocker === "captcha" ? "a captcha" : "a sign-in"}. Record it with report_source_failure (${blocker}) and move on.`, true);
+            if (after && (after.captcha || after.login || after.accessBlocked))
+                return text(`${host} still shows ${what.noun}. Record it with report_source_failure (${what.failure}) and move on.`, true);
             return text(`Resumed after the owner handled ${host}. Take a browser_snapshot to read the page.`);
         }
+        // A page that pays, uploads, or submits an application or account is outside research. The
+        // tools to act on it do not exist here anyway; the pause is so the OWNER decides whether the run
+        // should be reading it at all, rather than the model wandering through a form it cannot fill.
+        if (state.writeForm) {
+            this.host.emit({ type: "browser.blocked", url: state.url, domain: host, detail: { reason: "write_affordance" } });
+            const outcome = await this.host.pause("write_affordance", { domain: host });
+            if (outcome !== "resumed") {
+                await this.browser.callTool("browser_navigate_back", {}).catch(() => undefined);
+                return text(`${state.url} is a page for submitting, paying or uploading, and the owner did not ask the run to read it. Went back; do not return to it.`, true);
+            }
+            return text("The owner let the run read this page. It is still research only: nothing here can be filled, submitted or uploaded. Take a browser_snapshot to read it.");
+        }
         if (state.paywall) {
             this.host.emit({ type: "browser.blocked", url: state.url, domain: host, detail: { reason: "paywall" } });
             return text(`${host} is behind a paywall. Do not try to get around it: record it with report_source_failure (paywall) and move on.`, true);
@@ -278,7 +315,7 @@ export class BrowserBridge {
         const v = res && !res.isError ? evaluateResult(textOf(res)) : null;
         if (!v || typeof v.url !== "string")
             return null;
-        return { url: v.url, title: typeof v.title === "string" ? v.title : "", captcha: !!v.captcha, login: !!v.login, paywall: !!v.paywall };
+        return { url: v.url, title: typeof v.title === "string" ? v.title : "", captcha: !!v.captcha, login: !!v.login, paywall: !!v.paywall, accessBlocked: !!v.accessBlocked, writeForm: !!v.writeForm };
     }
     recordFinding(args) {
         const title = typeof args.title === "string" ? args.title.trim() : "";

package/dist/browser-runner/local-browser/engine.js

@@ -143,6 +143,17 @@ export function signInHelp(engine) {
         ? "The Claude Code CLI on this machine is not signed in. Run `claude`, then /login, on that machine and start the run again."
         : "The Codex CLI on this machine is not signed in. Run `codex login` on that machine and start the run again.";
 }
+/**
+ * Why a run that never touched the browser bridge failed, and the step that fixes it (#944). The usual
+ * cause is the CLI refusing the bridge's tools (an approval policy, #952) or not loading the server.
+ */
+export function bridgeUnused(engine, said) {
+    const blocked = /approval|not (allowed|permitted)|permission|denied/i.test(said);
+    const cause = blocked
+        ? `The ${engine === "claude" ? "Claude Code" : "Codex"} CLI was refused the PAGS browser tools.`
+        : `The ${engine === "claude" ? "Claude Code" : "Codex"} CLI finished without using the PAGS browser tools.`;
+    return `${cause} No page was opened, so this run found nothing. Update the CLI on that machine (npm i -g @proagentstore/cli), restart \`pags up\`, and start the run again.`;
+}
 /** The CLI's own closing text, from its structured output — the summary when it never called finish_research. */
 export function finalText(engine, lines) {
     for (let i = lines.length - 1; i >= 0; i--) {

package/dist/browser-runner/local-browser/runtime.js

@@ -27,7 +27,7 @@ import { RunnerInputError } from "../errors.js";
 import { BrowserBridge, domainWithin } from "./bridge.js";
 import { BRIDGE_ENV } from "./bridge-stdio.js";
 import { LOCAL_BROWSER_AUTH_MODES, LOCAL_BROWSER_ENGINES, LOCAL_BROWSER_TASK_TYPE, redactDetail, redactText, secretEnvValues, } from "./contract.js";
-import { buildEngineSpec, finalText, missingLogin, observedEngineAuth, researchPrompt, signInHelp } from "./engine.js";
+import { bridgeUnused, buildEngineSpec, finalText, missingLogin, observedEngineAuth, researchPrompt, signInHelp } from "./engine.js";
 const MAX_EVENTS = 2000;
 const OUTPUT_LINES = 400;
 const SAFE_ID = /^[A-Za-z0-9_.:-]{1,100}$/;
@@ -387,6 +387,11 @@ export class LocalBrowserRuntime {
             const tail = run.output.slice(-5).join("\n").slice(-800);
             return { outcome: "failed", summary, error: `The ${e.engine} CLI exited with code ${code}${tail ? `: ${tail}` : ""}` };
         }
+        // A CLI that exits cleanly having never called the bridge did no research, whatever its prose
+        // says. Live run aac758dc (#952) ended `completed` with "the browser bridge required approval":
+        // no page opened, and the run looked like a success with nothing found.
+        if (!bridge?.calls)
+            return { outcome: "failed", summary, error: bridgeUnused(e.engine, summary) };
         return { outcome: "completed", summary };
     }
     end(run, r) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.79",
+  "version": "0.4.81",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",