@rtrvr-ai/rover 1.1.0 → 1.1.2

package/dist/rover.js

@@ -11107,7 +11107,7 @@ var Bridge = class {
     this.runtimeId = opts.runtimeId;
     this.domainScopeMode = normalizeDomainScopeMode(opts.domainScopeMode);
     this.allowedDomains = normalizeAllowedDomains(opts.allowedDomains, window.location.hostname, this.domainScopeMode);
-    this.externalNavigationPolicy = normalizeExternalNavigationPolicy(opts.externalNavigationPolicy, opts.crossDomainPolicy);
+    this.externalNavigationPolicy = normalizeExternalNavigationPolicy(opts.externalNavigationPolicy);
     this.registerOpenedTab = opts.registerOpenedTab;
     this.listKnownTabs = opts.listKnownTabs;
     this.switchToLogicalTab = opts.switchToLogicalTab;
@@ -11137,8 +11137,8 @@ var Bridge = class {
     if (options.allowedDomains) {
       this.allowedDomains = normalizeAllowedDomains(options.allowedDomains, window.location.hostname, this.domainScopeMode);
     }
-    if (options.externalNavigationPolicy || options.crossDomainPolicy) {
-      this.externalNavigationPolicy = normalizeExternalNavigationPolicy(options.externalNavigationPolicy, options.crossDomainPolicy);
+    if (options.externalNavigationPolicy) {
+      this.externalNavigationPolicy = normalizeExternalNavigationPolicy(options.externalNavigationPolicy);
     }
   }
   async getSnapshot() {
@@ -11465,7 +11465,8 @@ var Bridge = class {
   }
   async openUrlInNewTab(targetUrl, options) {
     const external = !isUrlAllowedByDomains(targetUrl, this.allowedDomains);
-    const popupAttempt = this.openVerifiedPopup(targetUrl);
+    const knownTabIdsBeforeOpen = this.snapshotKnownTabIds();
+    let popupAttempt = this.openVerifiedPopup(targetUrl);
     let logicalTabId;
     if (popupAttempt.opened && this.registerOpenedTab) {
       try {
@@ -11479,6 +11480,16 @@ var Bridge = class {
       } catch {
       }
     }
+    if (popupAttempt.opened && !logicalTabId) {
+      logicalTabId = await this.reconcileOpenedTab(targetUrl, knownTabIdsBeforeOpen);
+    }
+    if (!popupAttempt.opened) {
+      const reconciledTabId = await this.reconcileOpenedTab(targetUrl, knownTabIdsBeforeOpen);
+      if (reconciledTabId) {
+        popupAttempt = { opened: true, verified: false };
+        logicalTabId = logicalTabId || reconciledTabId;
+      }
+    }
     const registrationFailed = popupAttempt.opened && !logicalTabId && !!this.registerOpenedTab;
     if (!popupAttempt.opened) {
       const reason = "Browser popup settings blocked opening a new tab.";
@@ -11588,6 +11599,51 @@ var Bridge = class {
       return { opened: false, verified: false };
     }
   }
+  snapshotKnownTabIds() {
+    const ids = /* @__PURE__ */ new Set();
+    if (!this.listKnownTabs)
+      return ids;
+    try {
+      const tabs = this.listKnownTabs();
+      for (const tab of tabs) {
+        const logicalTabId = Number(tab?.logicalTabId);
+        if (!Number.isFinite(logicalTabId) || logicalTabId <= 0)
+          continue;
+        ids.add(logicalTabId);
+      }
+    } catch {
+      return ids;
+    }
+    return ids;
+  }
+  async reconcileOpenedTab(targetUrl, beforeIds) {
+    if (!this.listKnownTabs)
+      return void 0;
+    const targetHost = extractHostname(targetUrl);
+    const deadline = Date.now() + 2e3;
+    while (Date.now() < deadline) {
+      try {
+        const knownTabs = this.listKnownTabs();
+        for (const tab of knownTabs) {
+          const logicalTabId = Number(tab?.logicalTabId);
+          if (!Number.isFinite(logicalTabId) || logicalTabId <= 0)
+            continue;
+          if (beforeIds.has(logicalTabId))
+            continue;
+          const knownUrl = String(tab?.url || "").trim();
+          if (!knownUrl)
+            return logicalTabId;
+          const knownHost = extractHostname(knownUrl);
+          if (!targetHost || !knownHost || knownHost === targetHost) {
+            return logicalTabId;
+          }
+        }
+      } catch {
+      }
+      await new Promise((resolve) => setTimeout(resolve, 120));
+    }
+    return void 0;
+  }
   async openElementInNewTab(args) {
     const elementId = args.element_id ?? args.source_element_id ?? args.target_element_id ?? args.center_element_id ?? null;
     if (!elementId) {
@@ -11721,18 +11777,11 @@ function normalizeToolName(name) {
 function normalizeDomainScopeMode(mode) {
   return mode === "host_only" ? "host_only" : "registrable_domain";
 }
-function mapLegacyCrossDomainPolicy(policy) {
-  if (policy === "allow")
-    return "allow";
-  if (policy === "block_new_tab")
-    return "open_new_tab_notice";
-  return void 0;
-}
-function normalizeExternalNavigationPolicy(policy, legacy) {
+function normalizeExternalNavigationPolicy(policy) {
   if (policy === "allow" || policy === "block" || policy === "open_new_tab_notice") {
     return policy;
   }
-  return mapLegacyCrossDomainPolicy(legacy) || "open_new_tab_notice";
+  return "open_new_tab_notice";
 }
 function normalizeAllowedDomains(input, currentHost, scopeMode) {
   const candidates = Array.isArray(input) ? input : [];
@@ -14639,6 +14688,14 @@ var SessionCoordinator = class _SessionCoordinator {
     const normalizedUrl = normalizeUrl2(payload.url);
     let logicalTabId = 0;
     this.mutate("local", (draft) => {
+      const existing = draft.tabs.find((tab) => !tab.runtimeId && !!tab.external && tab.url === normalizedUrl);
+      if (existing) {
+        existing.title = payload.title || existing.title;
+        existing.updatedAt = now();
+        existing.openerRuntimeId = payload.openerRuntimeId || existing.openerRuntimeId;
+        logicalTabId = existing.logicalTabId;
+        return;
+      }
       logicalTabId = draft.nextLogicalTabId++;
       draft.tabs.push({
         logicalTabId,
@@ -15045,7 +15102,7 @@ var SessionCoordinator = class _SessionCoordinator {
 };
 
 // dist/cloudCheckpoint.js
-var DEFAULT_CLOUD_FUNCTIONS_BASE = "https://us-central1-rtrvr-extension-functions.cloudfunctions.net";
+var DEFAULT_EXTENSION_ROUTER_BASE = "https://extensionrouter.rtrvr.ai";
 function toFiniteNumber(value, fallback) {
   const n = Number(value);
   return Number.isFinite(n) ? n : fallback;
@@ -15071,8 +15128,22 @@ function buildRevisionKey(payload) {
   ].join(":");
 }
 function normalizeRouterEndpoint(apiBase) {
-  const base = (apiBase || DEFAULT_CLOUD_FUNCTIONS_BASE).replace(/\/$/, "");
-  return base.endsWith("/extensionRouter") ? base : `${base}/extensionRouter`;
+  const fallback = DEFAULT_EXTENSION_ROUTER_BASE;
+  const base = String(apiBase || fallback).trim().replace(/\/+$/, "");
+  if (!base)
+    return fallback;
+  if (base.endsWith("/extensionRouter"))
+    return base;
+  try {
+    const parsed = new URL(base);
+    const pathname = parsed.pathname.replace(/\/+$/, "");
+    if (pathname && pathname !== "/")
+      return base;
+    if (parsed.hostname.toLowerCase() === "extensionrouter.rtrvr.ai")
+      return base;
+  } catch {
+  }
+  return `${base}/extensionRouter`;
 }
 function toError(message, details) {
   const error = new Error(message);
@@ -15091,6 +15162,7 @@ var RoverCloudCheckpointClient = class {
   shouldWrite;
   buildCheckpoint;
   onCheckpoint;
+  onStateChange;
   onError;
   started = false;
   dirty = false;
@@ -15102,8 +15174,9 @@ var RoverCloudCheckpointClient = class {
   lastAppliedRemoteUpdatedAt = 0;
   pushInFlight = false;
   pullInFlight = false;
+  state = "active";
   constructor(options) {
-    const token = String(options.apiKey || options.authToken || "").trim();
+    const token = String(options.authToken || options.apiKey || "").trim();
     if (!token) {
       throw toError("Rover cloud checkpoint requires apiKey or authToken.");
     }
@@ -15118,12 +15191,14 @@ var RoverCloudCheckpointClient = class {
     this.shouldWrite = options.shouldWrite || (() => true);
     this.buildCheckpoint = options.buildCheckpoint;
     this.onCheckpoint = options.onCheckpoint;
+    this.onStateChange = options.onStateChange;
     this.onError = options.onError;
   }
   start() {
     if (this.started)
       return;
     this.started = true;
+    this.setState("active");
     this.flushTimer = window.setInterval(() => {
       void this.flush(false);
     }, this.flushIntervalMs);
@@ -15156,6 +15231,8 @@ var RoverCloudCheckpointClient = class {
   async flush(force) {
     if (this.pushInFlight)
       return;
+    if (this.state === "paused_auth")
+      return;
     if (!this.dirty && !force)
       return;
     if (!this.shouldWrite())
@@ -15189,8 +15266,9 @@ var RoverCloudCheckpointClient = class {
         this.applyRemoteCheckpoint(response.checkpoint, "push_stale");
         this.dirty = false;
       }
+      this.setState("active");
     } catch (error) {
-      this.onError?.(error);
+      this.handleCheckpointError(error, "roverSessionCheckpointUpsert");
     } finally {
       this.pushInFlight = false;
     }
@@ -15198,6 +15276,8 @@ var RoverCloudCheckpointClient = class {
   async pull(force) {
     if (this.pullInFlight)
       return;
+    if (this.state === "paused_auth")
+      return;
     if (!force && Date.now() - this.lastPullAt < this.pullIntervalMs)
       return;
     this.pullInFlight = true;
@@ -15210,8 +15290,9 @@ var RoverCloudCheckpointClient = class {
       if (!response?.found || !response?.checkpoint || typeof response.checkpoint !== "object")
         return;
       this.applyRemoteCheckpoint(response.checkpoint, "pull");
+      this.setState("active");
     } catch (error) {
-      this.onError?.(error);
+      this.handleCheckpointError(error, "roverSessionCheckpointGet");
     } finally {
       this.pullInFlight = false;
     }
@@ -15240,14 +15321,68 @@ var RoverCloudCheckpointClient = class {
         const text = await response.text().catch(() => "");
         payload2 = text ? { error: truncateText(text, 2e3) } : void 0;
       }
-      throw toError(`Checkpoint HTTP ${response.status}`, payload2);
+      throw toError(`Checkpoint HTTP ${response.status}`, {
+        action,
+        status: response.status,
+        payload: payload2
+      });
     }
     const payload = await response.json();
     if (payload?.success === false) {
-      throw toError("Checkpoint extensionRouter returned success=false", payload);
+      throw toError("Checkpoint extensionRouter returned success=false", {
+        action,
+        status: response.status,
+        payload
+      });
     }
     return payload?.data;
   }
+  setState(next, context) {
+    if (this.state === next)
+      return;
+    this.state = next;
+    this.onStateChange?.(next, context || {});
+  }
+  handleCheckpointError(error, action) {
+    const details = this.normalizeCheckpointError(error);
+    const isAuthFailure = this.isAuthFailure(details);
+    if (isAuthFailure) {
+      this.setState("paused_auth", {
+        reason: "auth_failed",
+        action,
+        code: details.code,
+        message: details.message
+      });
+    }
+    this.onError?.(error, {
+      action,
+      state: this.state,
+      code: details.code,
+      message: details.message,
+      status: details.status,
+      paused: isAuthFailure
+    });
+  }
+  normalizeCheckpointError(error) {
+    const anyError = error;
+    const details = anyError?.details;
+    const payload = details?.payload || details?.response || details;
+    const candidateCode = payload?.errorCode || payload?.errorDetails?.code || payload?.error?.code || payload?.code;
+    const candidateMessage = payload?.error || payload?.errorDetails?.message || payload?.error?.message || anyError?.message || "Checkpoint request failed";
+    const status = Number(details?.status);
+    return {
+      code: typeof candidateCode === "string" ? candidateCode : void 0,
+      message: truncateText(candidateMessage, 1e3),
+      status: Number.isFinite(status) ? status : void 0
+    };
+  }
+  isAuthFailure(details) {
+    const code = String(details.code || "").toUpperCase();
+    if (code === "INVALID_API_KEY" || code === "MISSING_API_KEY" || code === "UNAUTHENTICATED" || code === "PERMISSION_DENIED") {
+      return true;
+    }
+    return details.status === 401 || details.status === 403;
+  }
 };
 
 // dist/runtimeStorage.js
@@ -15387,6 +15522,9 @@ var VISITOR_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var CHECKPOINT_PAYLOAD_VERSION = 1;
 var ACTIVE_PENDING_RUN_GRACE_MS = 3e3;
 var STALE_PENDING_RUN_MS = 9e4;
+var TELEMETRY_DEFAULT_FLUSH_INTERVAL_MS = 12e3;
+var TELEMETRY_DEFAULT_MAX_BATCH_SIZE = 30;
+var TELEMETRY_MAX_BUFFER_SIZE = 240;
 var instance = null;
 var bridge = null;
 var worker = null;
@@ -15398,6 +15536,11 @@ var runtimeStateStore = null;
 var runtimeId = "";
 var sessionCoordinator = null;
 var cloudCheckpointClient = null;
+var telemetryFlushTimer = null;
+var telemetryBuffer = [];
+var telemetryInFlight = false;
+var telemetryPausedAuth = false;
+var telemetrySeq = 0;
 var resolvedVisitorId = void 0;
 var suppressCheckpointSync = false;
 var currentMode = "controller";
@@ -15423,6 +15566,7 @@ var RUN_SCOPED_WORKER_MESSAGE_TYPES = /* @__PURE__ */ new Set([
 var pendingToolRegistrations = [];
 var eventHandlers = /* @__PURE__ */ new Map();
 function emit(event, payload) {
+  recordTelemetryEvent(event, payload);
   const handlers = eventHandlers.get(event);
   if (!handlers)
     return;
@@ -15628,20 +15772,207 @@ function safeSerialize(value) {
     }
   }
 }
-function resolveEmbeddedDomainLabel(allowedDomains) {
-  const raw = String((allowedDomains || [])[0] || "").trim();
-  if (!raw)
-    return "the configured domain";
-  return raw.replace(/^\*?\./, "").replace(/^=/, "");
+function normalizeTelemetryConfig(cfg) {
+  const raw = cfg?.telemetry;
+  const sampleRateRaw = Number(raw?.sampleRate);
+  const sampleRate = Number.isFinite(sampleRateRaw) ? Math.min(1, Math.max(0, sampleRateRaw)) : 1;
+  const flushRaw = Number(raw?.flushIntervalMs);
+  const flushIntervalMs = Number.isFinite(flushRaw) ? Math.min(6e4, Math.max(2e3, Math.floor(flushRaw))) : TELEMETRY_DEFAULT_FLUSH_INTERVAL_MS;
+  const batchRaw = Number(raw?.maxBatchSize);
+  const maxBatchSize = Number.isFinite(batchRaw) ? Math.min(80, Math.max(1, Math.floor(batchRaw))) : TELEMETRY_DEFAULT_MAX_BATCH_SIZE;
+  return {
+    enabled: raw?.enabled !== false,
+    sampleRate,
+    flushIntervalMs,
+    maxBatchSize,
+    includePayloads: raw?.includePayloads === true
+  };
 }
-function buildInaccessibleTabPageData(cfg, tab, reason = "tab_not_accessible") {
+function canUseTelemetry(cfg) {
+  if (!cfg)
+    return false;
+  const telemetry = normalizeTelemetryConfig(cfg);
+  if (!telemetry.enabled)
+    return false;
+  if (!(cfg.authToken || cfg.apiKey))
+    return false;
+  return true;
+}
+function summarizeTelemetryPayload(payload) {
+  if (payload == null)
+    return void 0;
+  if (typeof payload === "string")
+    return truncateText2(payload, 260);
+  if (typeof payload === "number" || typeof payload === "boolean")
+    return payload;
+  if (Array.isArray(payload)) {
+    return { type: "array", length: payload.length };
+  }
+  if (typeof payload === "object") {
+    const keys = Object.keys(payload).slice(0, 20);
+    const summary = { type: "object", keys };
+    const preferredKeys = ["code", "message", "stage", "status", "reason", "taskId", "runId", "policyAction"];
+    for (const key of preferredKeys) {
+      const value = payload?.[key];
+      if (value == null)
+        continue;
+      if (typeof value === "string")
+        summary[key] = truncateText2(value, 180);
+      else if (typeof value === "number" || typeof value === "boolean")
+        summary[key] = value;
+    }
+    return summary;
+  }
+  return void 0;
+}
+function buildTelemetryPayload(payload, includePayloads) {
+  if (!includePayloads) {
+    return summarizeTelemetryPayload(payload);
+  }
+  const cloned = cloneUnknown2(payload);
+  if (cloned == null)
+    return void 0;
+  if (typeof cloned === "string")
+    return truncateText2(cloned, 1e3);
+  if (typeof cloned === "number" || typeof cloned === "boolean")
+    return cloned;
+  if (Array.isArray(cloned))
+    return { type: "array", length: cloned.length };
+  if (typeof cloned === "object")
+    return cloned;
+  return summarizeTelemetryPayload(payload);
+}
+function stopTelemetry() {
+  if (telemetryFlushTimer) {
+    clearInterval(telemetryFlushTimer);
+    telemetryFlushTimer = null;
+  }
+}
+var DEFAULT_EXTENSION_ROUTER_BASE2 = "https://extensionrouter.rtrvr.ai";
+function resolveExtensionRouterEndpoint(apiBase) {
+  const fallback = DEFAULT_EXTENSION_ROUTER_BASE2;
+  const base = String(apiBase || fallback).trim().replace(/\/+$/, "");
+  if (!base)
+    return fallback;
+  if (base.endsWith("/extensionRouter"))
+    return base;
+  try {
+    const parsed = new URL(base);
+    const pathname = parsed.pathname.replace(/\/+$/, "");
+    if (pathname && pathname !== "/")
+      return base;
+    if (parsed.hostname.toLowerCase() === "extensionrouter.rtrvr.ai")
+      return base;
+  } catch {
+  }
+  return `${base}/extensionRouter`;
+}
+function getTelemetryEndpoint(cfg) {
+  return resolveExtensionRouterEndpoint(cfg.apiBase);
+}
+async function flushTelemetry(force = false) {
+  if (telemetryInFlight)
+    return;
+  if (telemetryPausedAuth)
+    return;
+  if (!currentConfig || !canUseTelemetry(currentConfig)) {
+    telemetryBuffer = [];
+    return;
+  }
+  if (!telemetryBuffer.length)
+    return;
+  const telemetry = normalizeTelemetryConfig(currentConfig);
+  const token = String(currentConfig.authToken || currentConfig.apiKey || "").trim();
+  if (!token)
+    return;
+  const batch = telemetryBuffer.splice(0, telemetry.maxBatchSize);
+  if (!batch.length)
+    return;
+  telemetryInFlight = true;
+  try {
+    const response = await fetch(getTelemetryEndpoint(currentConfig), {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        action: "roverTelemetryIngest",
+        data: {
+          siteId: currentConfig.siteId,
+          runtimeId,
+          sessionId: runtimeState?.sessionId,
+          visitorId: resolvedVisitorId,
+          flushReason: force ? "manual" : "interval",
+          sdkVersion: "rover_sdk_v1",
+          pageUrl: window.location.href,
+          userAgent: navigator.userAgent,
+          sampleRate: telemetry.sampleRate,
+          events: batch
+        }
+      })
+    });
+    if (!response.ok) {
+      if (response.status === 401 || response.status === 403) {
+        telemetryPausedAuth = true;
+      } else {
+        telemetryBuffer = [...batch, ...telemetryBuffer].slice(-TELEMETRY_MAX_BUFFER_SIZE);
+      }
+      return;
+    }
+    const payload = await response.json().catch(() => void 0);
+    if (payload?.success === false) {
+      const code = String(payload?.errorCode || payload?.errorDetails?.code || "").toUpperCase();
+      if (code === "INVALID_API_KEY" || code === "MISSING_API_KEY" || code === "UNAUTHENTICATED" || code === "PERMISSION_DENIED") {
+        telemetryPausedAuth = true;
+      }
+      return;
+    }
+  } catch {
+    telemetryBuffer = [...batch, ...telemetryBuffer].slice(-TELEMETRY_MAX_BUFFER_SIZE);
+  } finally {
+    telemetryInFlight = false;
+  }
+}
+function setupTelemetry(cfg) {
+  stopTelemetry();
+  telemetryPausedAuth = false;
+  if (!canUseTelemetry(cfg)) {
+    telemetryBuffer = [];
+    return;
+  }
+  const telemetry = normalizeTelemetryConfig(cfg);
+  telemetryFlushTimer = setInterval(() => {
+    void flushTelemetry(false);
+  }, telemetry.flushIntervalMs);
+}
+function recordTelemetryEvent(event, payload) {
+  if (!canUseTelemetry(currentConfig) || telemetryPausedAuth)
+    return;
+  const telemetry = normalizeTelemetryConfig(currentConfig);
+  if (telemetry.sampleRate < 1 && Math.random() > telemetry.sampleRate)
+    return;
+  const next = {
+    name: event,
+    ts: Date.now(),
+    seq: ++telemetrySeq,
+    payload: buildTelemetryPayload(payload, telemetry.includePayloads)
+  };
+  telemetryBuffer.push(next);
+  if (telemetryBuffer.length > TELEMETRY_MAX_BUFFER_SIZE) {
+    telemetryBuffer = telemetryBuffer.slice(-TELEMETRY_MAX_BUFFER_SIZE);
+  }
+  if (telemetryBuffer.length >= telemetry.maxBatchSize) {
+    void flushTelemetry(false);
+  }
+}
+function buildInaccessibleTabPageData(_cfg, tab, reason = "tab_not_accessible") {
   const logicalTabId = Number(tab?.logicalTabId) || void 0;
   const url = tab?.url || "";
   const title = tab?.title || (tab?.external ? "External Tab (Inaccessible)" : "Inactive Tab");
-  const embeddedDomain = resolveEmbeddedDomainLabel(cfg.allowedDomains);
   const normalizedReason = String(reason || "").trim();
   const reasonLine = normalizedReason ? ` Reason: ${normalizedReason}.` : "";
-  const content = tab?.external ? `Rover is embedded inside ${embeddedDomain}. This tab is outside direct DOM access and only virtual tab context is available.${reasonLine}` : `This tab is currently not attached to an active Rover runtime. Switch to a live tab or reopen it.${reasonLine}`;
+  const content = tab?.external ? `This external tab is tracked in virtual mode only. Live DOM control and accessibility-tree access are unavailable here.${reasonLine}` : `This tab is currently not attached to an active Rover runtime. Switch to a live tab or reopen it.${reasonLine}`;
   return {
     url,
     title,
@@ -15659,8 +15990,7 @@ function buildInaccessibleTabPageData(cfg, tab, reason = "tab_not_accessible") {
 function buildTabAccessToolError(cfg, tab, reason = "tab_not_accessible") {
   const logicalTabId = Number(tab?.logicalTabId) || 0;
   const blockedUrl = tab?.url || "";
-  const embeddedDomain = resolveEmbeddedDomainLabel(cfg.allowedDomains);
-  const message = tab?.external ? `Tab ${logicalTabId} is outside Rover's embedded domain scope (${embeddedDomain}) and cannot be controlled directly.` : `Tab ${logicalTabId} is not attached to an active Rover runtime.`;
+  const message = tab?.external ? `Tab ${logicalTabId} is external to the active runtime and cannot be controlled directly.` : `Tab ${logicalTabId} is not attached to an active Rover runtime.`;
   const code = tab?.external ? "DOMAIN_SCOPE_BLOCKED" : "TAB_NOT_ACCESSIBLE";
   return {
     success: false,
@@ -16010,6 +16340,8 @@ function ensureUnloadHandler() {
       sessionCoordinator?.releaseWorkflowLock(runtimeState.pendingRun.id);
     }
     persistRuntimeState();
+    void flushTelemetry(true);
+    stopTelemetry();
     cloudCheckpointClient?.markDirty();
     cloudCheckpointClient?.syncNow();
     cloudCheckpointClient?.stop();
@@ -16025,6 +16357,9 @@ function ensureUnloadHandler() {
       sessionCoordinator.claimLease(false);
     }
     autoResumeAttempted = false;
+    if (currentConfig) {
+      setupTelemetry(currentConfig);
+    }
   };
   window.addEventListener("pageshow", onPageShow);
 }
@@ -16641,6 +16976,10 @@ function setupCloudCheckpointing(cfg) {
   if (!resolvedVisitorId)
     return;
   try {
+    const emitCheckpointState = (payload) => {
+      emit("checkpoint_state", payload);
+      cfg.checkpointing?.onStateChange?.(payload);
+    };
     cloudCheckpointClient = new RoverCloudCheckpointClient({
       apiBase: cfg.apiBase,
       apiKey: cfg.apiKey,
@@ -16656,7 +16995,36 @@ function setupCloudCheckpointing(cfg) {
       onCheckpoint: (payload) => {
         applyCloudCheckpointPayload(payload);
       },
-      onError: () => {
+      onStateChange: (state, context) => {
+        emitCheckpointState({
+          state,
+          reason: context.reason,
+          action: context.action,
+          code: context.code,
+          message: context.message
+        });
+        if (state === "paused_auth") {
+          emit("checkpoint_error", {
+            action: context.action,
+            code: context.code || "INVALID_API_KEY",
+            message: context.message || "Checkpoint sync paused due to auth failure.",
+            disabled: true,
+            reason: context.reason || "auth_failed"
+          });
+        }
+      },
+      onError: (_error, context) => {
+        cfg.checkpointing?.onError?.(context);
+        if (!context.paused) {
+          emit("checkpoint_error", {
+            action: context.action,
+            code: context.code,
+            message: context.message,
+            status: context.status,
+            disabled: false,
+            reason: "transient_failure"
+          });
+        }
       }
     });
     cloudCheckpointClient.start();
@@ -16965,6 +17333,10 @@ function handleWorkerMessage(msg) {
       const needsUserInput = completionState.needsUserInput;
       if (taskComplete) {
         markTaskCompleted("worker_task_complete");
+        sessionCoordinator?.pruneTabs({
+          dropRuntimeDetached: true,
+          dropAllDetachedExternal: true
+        });
         setUiStatus("Task completed");
         finalizeSuccessfulRunTimeline(typeof msg.runId === "string" ? msg.runId : void 0);
       } else {
@@ -17022,6 +17394,7 @@ function createRuntime(cfg) {
     }
   }
   setupCloudCheckpointing(cfg);
+  setupTelemetry(cfg);
   const initialAllowActions = (cfg.allowActions ?? true) && (sessionCoordinator ? sessionCoordinator.isController() : true);
   bridge = new Bridge({
     allowActions: initialAllowActions,
@@ -17029,7 +17402,6 @@ function createRuntime(cfg) {
     allowedDomains: cfg.allowedDomains,
     domainScopeMode: cfg.domainScopeMode,
     externalNavigationPolicy: cfg.externalNavigationPolicy,
-    crossDomainPolicy: cfg.crossDomainPolicy,
     registerOpenedTab: (payload) => sessionCoordinator?.registerOpenedTab(payload),
     switchToLogicalTab: (logicalTabId) => sessionCoordinator?.switchToLogicalTab(logicalTabId) || { ok: false, reason: "No session coordinator" },
     listKnownTabs: () => (sessionCoordinator?.listTabs() || []).map((tab) => ({
@@ -17406,16 +17778,16 @@ function update(cfg) {
     setupSessionCoordinator(currentConfig);
   }
   setupCloudCheckpointing(currentConfig);
+  setupTelemetry(currentConfig);
   if (bridge) {
     if (typeof cfg.allowActions === "boolean") {
       bridge.setAllowActions(cfg.allowActions && currentMode === "controller");
     }
-    if (cfg.allowedDomains || cfg.crossDomainPolicy || cfg.domainScopeMode || cfg.externalNavigationPolicy) {
+    if (cfg.allowedDomains || cfg.domainScopeMode || cfg.externalNavigationPolicy) {
       bridge.setNavigationPolicy({
         allowedDomains: cfg.allowedDomains,
         domainScopeMode: cfg.domainScopeMode,
-        externalNavigationPolicy: cfg.externalNavigationPolicy,
-        crossDomainPolicy: cfg.crossDomainPolicy
+        externalNavigationPolicy: cfg.externalNavigationPolicy
       });
     }
   }
@@ -17430,6 +17802,8 @@ function update(cfg) {
 function shutdown() {
   hideTaskSuggestion();
   persistRuntimeState();
+  void flushTelemetry(true);
+  stopTelemetry();
   cloudCheckpointClient?.markDirty();
   cloudCheckpointClient?.syncNow();
   cloudCheckpointClient?.stop();
@@ -17447,6 +17821,10 @@ function shutdown() {
   runtimeId = "";
   resolvedVisitorId = void 0;
   suppressCheckpointSync = false;
+  telemetryInFlight = false;
+  telemetryPausedAuth = false;
+  telemetryBuffer = [];
+  telemetrySeq = 0;
   currentMode = "controller";
   pendingTaskSuggestion = null;
   runtimeStateStore = null;