@q-agent/agent 0.1.10 → 0.1.11

package/dist/src/runner.js

@@ -854,7 +854,12 @@ async function processExplorationJob(cfg, session) {
     const args = [script, session.baseUrl];
     if (storageState)
         args.push(storageState);
-    const child = (0, child_process_1.spawn)((0, paths_1.nodeBin)(), args, { cwd: nm, env: nodePathEnv(nm) });
+    // Run the explore browser HEADED on the paired device: the user watches the
+    // session, and a headed browser dodges WAF/bot-protection that blocks headless.
+    const child = (0, child_process_1.spawn)((0, paths_1.nodeBin)(), args, {
+        cwd: nm,
+        env: { ...nodePathEnv(nm), QAGENT_EXPLORE_HEADED: "1" },
+    });
     activeChild = child;
     // Capture the driver's stderr so a launch failure (missing browser, bad
     // Playwright resolution, …) is visible instead of a silent "complete".

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@q-agent/agent",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Q-Agent Local Agent — claims execution jobs from the Q-Agent server and runs Playwright locally, so manual login/MFA happens on the user's own machine and session credentials never leave it.",
   "license": "UNLICENSED",
   "bin": {

package/vendor/explore_session.cjs

@@ -159,7 +159,10 @@ async function handle(line) {
 
 (async () => {
   if (!baseURL) { console.error('explore_session: missing baseURL arg'); process.exit(1); }
-  browser = await chromium.launch({ headless: true });
+  // Headed when QAGENT_EXPLORE_HEADED=1 (the Local Agent sets it so the user can
+  // watch, and a headed browser trips WAF/bot-protection far less than headless);
+  // headless otherwise (e.g. the server, which has no display).
+  browser = await chromium.launch({ headless: process.env.QAGENT_EXPLORE_HEADED !== '1' });
   const contextOpts = { baseURL };
   if (storageState) contextOpts.storageState = storageState;
   const context = await browser.newContext(contextOpts);