@remcp/runtime 0.2.167 → 0.2.169

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.2.169 — 2026-10-19
+
+- Emit redacted, bounded lifecycle events when ReMCP-owned Chrome exits and distinguish clean exit, nonzero exit, OS signal and spawn error.
+- On a missing default loopback CDP endpoint, include a fresh, explicitly non-causal hint only if the managed browser process recently exited. Never auto-launch browser_tabs/browser_snapshot, and never reveal URLs, tab content, Chrome arguments, credentials or profile paths.
+- Add detached subprocess, privacy, TTL and missing-listener regression tests.
+
 ## 0.2.165 — 2026-10-18
 
 **Crash-session recovery without losing browser automation when the local snapshot budget fills.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.167",
+  "version": "0.2.169",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/extended/browser-actions.mjs

@@ -125,6 +125,9 @@ export const PAGE_FILL_FORM = `function(fields) {
     }
     const tag = el.tagName.toLowerCase();
     if (!['input','textarea','select'].includes(tag)) throw new Error('Unsupported form field: ' + field.selector);
+    if (tag === 'input' && ['checkbox','radio'].includes(el.type) && typeof field.value !== 'boolean') {
+      throw new Error('Checkbox and radio fields require a boolean value: ' + field.selector);
+    }
     if (tag === 'select' && !Array.from(el.options).some(option => option.value === String(field.value))) {
       throw new Error('No matching select option: ' + field.selector);
     }

package/src/extended/browser-endpoint.mjs

@@ -8,6 +8,7 @@ import { resolveSafePath } from '../util.mjs';
 import { selectSafeBrowserLaunchProfile } from './browser-session-backup.mjs';
 import { shouldRestoreBrowserSession } from './browser-session-directory.mjs';
 import { shareBrowserDiscovery } from './browser-discovery-flight.mjs';
+import { observeBrowserLaunchExit, browserLaunchExitHint } from './browser-launch-lifecycle.mjs';
 import { clamp, commandExists, jsonResult, optionalString, requireEnum, spawnDetached, unavailable } from './common.mjs';
 
 
@@ -110,7 +111,13 @@ export async function ensureBrowserEndpoint(endpoint) {
       // evidence before a restart, including profiles with only Tabs_* left.
       const selected = selectSafeBrowserLaunchProfile(profile);
       if (selected.isolated) console.warn('ReMCP browser: using an isolated recovery profile; existing session and backups are preserved, and sign-in state is not copied.');
-      spawnDetached(executable, browserAutoLaunchArgs(selected.profile));
+      const restore = shouldRestoreBrowserSession(selected.profile);
+      const startedAt = Date.now();
+      spawnDetached(executable, browserAutoLaunchArgs(selected.profile), {
+        onExit:value => observeBrowserLaunchExit(value, { startedAt, restore, isolated:selected.isolated }),
+        onError:({ code }) => observeBrowserLaunchExit({ error:code || 'UNKNOWN' },
+          { startedAt, restore, isolated:selected.isolated }),
+      });
       if (!await waitForBrowserEndpoint(5000)) throw new Error('ReMCP launched a browser but its local CDP endpoint did not become ready');
       return true;
     })().finally(() => { browserLaunchPromise = null; });
@@ -415,7 +422,7 @@ export async function listBrowserTargets(endpoint, { targetId = null, readOnlySi
     if (!/fetch failed|ECONNREFUSED|ECONNRESET|ETIMEDOUT|abort|timed out|network error/i.test(message)) throw error;
     const configured = Boolean(endpoint || process.env.REMCP_CDP_URL);
     const label = configured ? 'The configured CDP endpoint' : 'Browser CDP endpoint';
-    throw new Error(`${label} is unavailable at ${base.origin}. Read-only browser_tabs and browser_snapshot do not launch a browser. Use ui_snapshot and ui_find for the existing browser window; do not retry this CDP endpoint unchanged. Only browser_navigate(action=new_tab), when explicitly requested, may start a local isolated browser.`);
+    throw new Error(`${label} is unavailable at ${base.origin}. Read-only browser_tabs and browser_snapshot do not launch a browser. Use ui_snapshot and ui_find for the existing browser window; do not retry this CDP endpoint unchanged. Only browser_navigate(action=new_tab), when explicitly requested, may start a local isolated browser.${browserLaunchExitHint({ configured })}`);
   }
   // Retain the current bounded concurrent DNS/security checks for up to 1000 tabs.
   return filterBrowserTargets(list, { targetId, validate });

package/src/extended/browser-launch-lifecycle.mjs

@@ -0,0 +1,36 @@
+// Bounded, content-free telemetry for ReMCP-owned Chrome child lifecycles.
+let recentExit = null;
+const HINT_WINDOW_MS = 60_000;
+
+export function classifyBrowserLaunchExit({ code = null, signal = null, error = null } = {}) {
+  if (error) return 'spawn_error';
+  if (typeof signal === 'string' && /^SIG[A-Z0-9]+$/.test(signal)) return 'signaled';
+  if (code === 0) return 'clean_exit';
+  if (Number.isInteger(code)) return 'nonzero_exit';
+  return 'unknown_exit';
+}
+
+export function observeBrowserLaunchExit({ code = null, signal = null, error = null } = {}, {
+  startedAt = Date.now(), now = Date.now(), restore = false, isolated = false,
+  log = console.warn,
+} = {}) {
+  const event = {
+    event:'dedicated_browser_exit',
+    reason:classifyBrowserLaunchExit({ code, signal, error }),
+    exit_code:Number.isInteger(code) ? code : null,
+    signal:typeof signal === 'string' && /^SIG[A-Z0-9]+$/.test(signal) ? signal : null,
+    elapsed_ms:Math.min(86_400_000, Math.max(0, now - startedAt)),
+    restore_requested:Boolean(restore),
+    recovery_profile:Boolean(isolated),
+  };
+  recentExit = { at:now, reason:event.reason };
+  log(`ReMCP browser lifecycle: ${JSON.stringify(event)}`);
+  return event;
+}
+
+// Advisory only: a Chrome launcher can exit without bringing CDP down. Never
+// claim this event caused a later endpoint failure or authorize a relaunch.
+export function browserLaunchExitHint({ now = Date.now(), configured = false } = {}) {
+  if (configured || !recentExit || now < recentExit.at || now - recentExit.at > HINT_WINDOW_MS) return '';
+  return ` A recently launched ReMCP browser process exited (${recentExit.reason}); the event may be unrelated to CDP availability.`;
+}

package/src/extended/common.mjs

@@ -238,6 +238,18 @@ export function spawnDetached(file, args = [], options = {}) {
     stdio: 'ignore',
     windowsHide: true,
   });
+  // Opt-in process lifecycle callbacks for long-lived detached services.
+  // Do not forward command arguments or OS error messages into telemetry.
+  if (typeof options.onExit === 'function') {
+    child.once('exit', (code, signal) => {
+      try { options.onExit({ pid: child.pid ?? null, code, signal }); } catch {}
+    });
+  }
+  if (typeof options.onError === 'function') {
+    child.once('error', error => {
+      try { options.onError({ pid: child.pid ?? null, code: String(error?.code || 'UNKNOWN') }); } catch {}
+    });
+  }
   child.unref();
   return child.pid;
 }