@remcp/runtime 0.2.179 → 0.2.180

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.2.180 — 2026-10-25
+
+- Categorize lost CDP sessions, stale targets, navigation failures and browser guard failures without transmitting page content, URLs, target IDs or raw exception messages as telemetry categories.
+- Treat nonempty `Page.navigate.errorText` as a failed tool call for both selected tabs and guarded new tabs.
+- Preserve existing browser policies and existing runtime operation contracts; regression tests cover redaction and failure semantics.
+
+
 ## 0.2.176 — 2026-10-23
 
 - Reduce screenshot CDP round-trips by batching viewport resolution with capture and reusing measured element dimensions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.179",
+  "version": "0.2.180",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/error-classes.mjs

@@ -14,11 +14,28 @@ export function classifyRuntimeToolError(error, toolName = '') {
   if (MISSING_CODES.has(code)) return 'not_found';
   if (TIMEOUT_CODES.has(code)) return 'timeout';
   if (browserTool && CONNECTION_CODES.has(code)) return 'browser_unavailable';
+  if (browserTool && code === 'BROWSER_TARGET_DISAPPEARED') return 'browser_target_stale';
   if (/\bcancelled\b|\bcanceled\b|\baborted by the client\b/.test(message)) return 'cancelled';
   if (/blocked (?:by|local|private)|outside the directories this device allows|private browser destination|blocked local browser scheme/.test(message)) return 'blocked';
   if (browserTool && /browser cdp endpoint is unavailable|browser control is unavailable|cdp websocket (?:error|connection timed out)|local cdp endpoint did not become ready/.test(message)) {
     return 'browser_unavailable';
   }
+  if (browserTool) {
+    // Match only fixed CDP failure signatures; never emit the error text, tab ID,
+    // destination URL or selector as a telemetry category.
+    if (/browser child guard failed|browser request guard failed|browser safety guard failed/.test(message)) {
+      return 'browser_guard_failed';
+    }
+    if (/browser cdp target disappeared|target (?:was )?closed|no target with given id|target with given id not found|inspected target navigated or closed/.test(message)) {
+      return 'browser_target_stale';
+    }
+    if (/cdp websocket (?:closed|is not open)|session with given id not found|cdp session (?:closed|disconnected)/.test(message)) {
+      return 'browser_session_lost';
+    }
+    if (/browser navigation failed|cannot navigate (?:back|forward)|net::err_[a-z_]+/.test(message)) {
+      return 'browser_navigation_failed';
+    }
+  }
   if (/permission denied|access is denied|not authorized|not authorised|accessibility permission/.test(message)) return 'permission';
   if (/timed out|timeout after|time limit exceeded/.test(message)) return 'timeout';
   if (/element not found|no element matches|no matching ui window|target not found|not found in the current/.test(message)) return 'not_found';

package/src/extended/browser-navigation-result.mjs

@@ -0,0 +1,8 @@
+// Page.navigate may resolve successfully while Chrome explicitly reports a
+// navigation error. Treat that as a failed tool call, without echoing CDP's
+// errorText (which may contain user data) into diagnostics.
+export function requireSuccessfulBrowserNavigation(result) {
+  if (typeof result?.errorText === 'string' && result.errorText.trim()) {
+    throw new Error('Browser navigation failed: Chrome reported an unsuccessful navigation');
+  }
+}

package/src/extended/browser-read.mjs

@@ -1,4 +1,5 @@
 import { snapshotDelta } from './browser-snapshot-diff.mjs';
+import { requireSuccessfulBrowserNavigation } from './browser-navigation-result.mjs';
 import process from 'node:process';
 import os from 'node:os';
 import path from 'node:path';
@@ -75,6 +76,7 @@ export async function browserNavigate(args = {}) {
     let historyUrl = null;
     if (action === 'url') {
       const result = await session.send('Page.navigate', { url });
+      requireSuccessfulBrowserNavigation(result);
       frameId = result.frameId || null;
       errorText = result.errorText || null;
     } else if (action === 'reload') {

package/src/extended/browser-session.mjs

@@ -1,3 +1,4 @@
+import { requireSuccessfulBrowserNavigation } from './browser-navigation-result.mjs';
 import process from 'node:process';
 import os from 'node:os';
 import path from 'node:path';
@@ -350,6 +351,7 @@ export async function createGuardedNewTab(url, args) {
     await session.send('Page.enable');
     const loaded = session.waitFor('Page.loadEventFired', clamp(args.timeout_ms, 15_000, 500, 120_000)).catch(() => null);
     const navigation = await session.send('Page.navigate', { url });
+    requireSuccessfulBrowserNavigation(navigation);
     if (loaded) await loaded;
     const finalUrl = await evaluate(session, 'location.href');
     await assertResolvedPageUrl(finalUrl);