@trusty-squire/mcp 1.0.10-rc.2 → 1.0.10

package/dist/bot/browser.js

@@ -19,8 +19,8 @@
 // Together with the user's residential IP (the bot runs on user
 // machines, not on Fly), these are sufficient for invisible-mode
 // Turnstile/reCAPTCHA-v3 scoring on most SaaS signups. Visible-mode
-// captchas still need the click-and-wait pattern documented in
-// agent.ts.
+// captchas still need the click-and-wait pattern (the Tier 2 captcha
+// gate).
 import { chromium as baseChromium } from "playwright";
 import { createRequire } from "node:module";
 import { Socket, createServer } from "node:net";
@@ -103,7 +103,7 @@ function getChromium() {
         // Fall back to vanilla playwright if stealth (or the rebrowser fork)
         // isn't installed. The bot still works, it's just easier to
         // fingerprint as a bot — and the A/B tag stays truthfully "baseline".
-        console.warn(`[universal-bot] hardened launcher unavailable, falling back to vanilla chromium: ${err instanceof Error ? err.message : String(err)}`);
+        console.warn(`[operator] hardened launcher unavailable, falling back to vanilla chromium: ${err instanceof Error ? err.message : String(err)}`);
         cachedChromium = baseChromium;
         activeStealthProfile = "baseline";
     }
@@ -492,7 +492,7 @@ function reapOrphanedVerifyBrowsersOnce() {
     }
     if (pids.length === 0)
         return;
-    console.error(`[universal-bot] reaping ${pids.length} orphaned verify Chrome process(es)`);
+    console.error(`[operator] reaping ${pids.length} orphaned verify Chrome process(es)`);
     for (const pid of pids)
         killPid(pid, "SIGTERM");
     setTimeout(() => {
@@ -794,7 +794,7 @@ export class BrowserController {
                 // Routing race / already-handled — never let a decision crash nav.
             }
         });
-        console.error("[universal-bot] resource blocking ON (image/media/font + analytics aborted; captcha/CSS/JS allowed)");
+        console.error("[operator] resource blocking ON (image/media/font + analytics aborted; captcha/CSS/JS allowed)");
     }
     async start() {
         reapOrphanedVerifyBrowsersOnce();
@@ -804,7 +804,7 @@ export class BrowserController {
         this.proxyServer = proxy?.server ?? null;
         // Stderr so the MCP stdio transport's framing stays clean (the
         // module's existing logging convention).
-        console.error(`[universal-bot] launching browser channel=${channel ?? "bundled-chromium"} ` +
+        console.error(`[operator] launching browser channel=${channel ?? "bundled-chromium"} ` +
             `proxy=${proxy?.server ?? "direct"}`);
         // Remote-CDP mode (BOT_CDP_ENDPOINT): the browser runs on a REMOTE host
         // (e.g. a Mac with a real GPU + residential egress) and we attach over CDP
@@ -817,7 +817,7 @@ export class BrowserController {
         // fingerprint, which is the whole point of this path.
         const remoteMode = (process.env.BOT_CDP_ENDPOINT ?? "").trim().length > 0;
         if (remoteMode) {
-            console.error(`[universal-bot] REMOTE-CDP mode — attaching to ${(process.env.BOT_CDP_ENDPOINT ?? "").trim()} ` +
+            console.error(`[operator] REMOTE-CDP mode — attaching to ${(process.env.BOT_CDP_ENDPOINT ?? "").trim()} ` +
                 `(real-host GPU + egress; local fingerprint spoof + Xvfb DISABLED)`);
         }
         // T3.1: probe where this run's traffic actually exits so the
@@ -828,7 +828,7 @@ export class BrowserController {
         // remote mode — the remote host's own clock/IP are the authentic truth.
         const geo = remoteMode ? null : await this.probeEgressGeo(channel, proxy);
         if (geo !== null) {
-            console.error(`[universal-bot] egress geo: timezone=${geo.timezoneId}` +
+            console.error(`[operator] egress geo: timezone=${geo.timezoneId}` +
                 (geo.geolocation !== undefined
                     ? ` loc=${geo.geolocation.latitude},${geo.geolocation.longitude}`
                     : ""));
@@ -881,17 +881,17 @@ export class BrowserController {
                 chromeEnv = { ...process.env, DISPLAY: this.xvfb.display };
                 chromeHeadless = false;
                 this.launchedMode = "xvfb";
-                console.error(`[universal-bot] no DISPLAY — spawned Xvfb at ${this.xvfb.display} for headed Chrome`);
+                console.error(`[operator] no DISPLAY — spawned Xvfb at ${this.xvfb.display} for headed Chrome`);
             }
             catch (err) {
-                console.error(`[universal-bot] Xvfb failed (${err instanceof Error ? err.message : String(err)}) — ` +
+                console.error(`[operator] Xvfb failed (${err instanceof Error ? err.message : String(err)}) — ` +
                     `falling back to true headless; Cloudflare/Stytch-class signups may fail`);
                 chromeHeadless = true;
                 this.launchedMode = "headless";
             }
         }
         else {
-            console.error(`[universal-bot] no DISPLAY and Xvfb not installed — running true headless. ` +
+            console.error(`[operator] no DISPLAY and Xvfb not installed — running true headless. ` +
                 `For Cloudflare/Stytch-class signups install xvfb: apt-get install -y xvfb`);
             chromeHeadless = true;
             this.launchedMode = "headless";
@@ -902,7 +902,7 @@ export class BrowserController {
         // aborts with "Failed to create a ProcessSingleton" and bricks the run.
         let free = await waitForProfileFree(this.profileDir, {
             deadlineMs: 120_000,
-            onWait: () => console.error("[universal-bot] bot Chrome profile is busy with another run — waiting…"),
+            onWait: () => console.error("[operator] bot Chrome profile is busy with another run — waiting…"),
         });
         if (!free) {
             // A live-pid holder that never released within the deadline. The
@@ -927,11 +927,11 @@ export class BrowserController {
             const allowLiveReap = concurrency <= 1;
             const reaped = allowLiveReap ? reapLeakedProfileHolder(this.profileDir) : false;
             if (reaped) {
-                console.error("[universal-bot] reaped a leaked Chrome holding the profile (orphan from an externally-killed run) — retrying");
+                console.error("[operator] reaped a leaked Chrome holding the profile (orphan from an externally-killed run) — retrying");
                 free = await waitForProfileFree(this.profileDir, { deadlineMs: 10_000 });
             }
             else if (!allowLiveReap) {
-                console.error("[universal-bot] profile still held after wait; not reaping because HOUSEKEEPER_CONCURRENCY>1");
+                console.error("[operator] profile still held after wait; not reaping because HOUSEKEEPER_CONCURRENCY>1");
             }
             if (!free) {
                 throw new ProfileBusyError("bot Chrome profile is held by another run (a login or signup); retry shortly");
@@ -983,7 +983,7 @@ export class BrowserController {
         const useSelfLaunch = selfLaunchBinary !== null && !proxyHasAuth;
         let context;
         if (useSelfLaunch && selfLaunchBinary !== null) {
-            console.error(`[universal-bot] self-launch + connectOverCDP (Turnstile-safe launch) binary=${selfLaunchBinary}`);
+            console.error(`[operator] self-launch + connectOverCDP (Turnstile-safe launch) binary=${selfLaunchBinary}`);
             // Window size matches the display surface so viewport reads as a real
             // window (no emulated-viewport tell). TZ on the child makes Chrome
             // report the egress timezone natively.
@@ -1012,12 +1012,12 @@ export class BrowserController {
                 }
             }
             catch (err) {
-                console.error(`[universal-bot] post-connect context setup partial: ${err instanceof Error ? err.message : String(err)}`);
+                console.error(`[operator] post-connect context setup partial: ${err instanceof Error ? err.message : String(err)}`);
             }
         }
         else {
             if (selfLaunchEnabled() && selfLaunchBinary !== null && proxyHasAuth) {
-                console.error("[universal-bot] credentialed proxy → launchPersistentContext (self-launch can't carry proxy auth)");
+                console.error("[operator] credentialed proxy → launchPersistentContext (self-launch can't carry proxy auth)");
             }
             // T3: a PERSISTENT context (the legacy path). The profile dir carries the
             // user's Google session so the OAuth-first path reuses it.
@@ -1290,7 +1290,7 @@ export class BrowserController {
                 return parseEgressGeo(await resp.text());
             }
             catch (err) {
-                console.error(`[universal-bot] egress geo probe failed — using default ` +
+                console.error(`[operator] egress geo probe failed — using default ` +
                     `timezone: ${err instanceof Error ? err.message : String(err)}`);
                 return null;
             }
@@ -1312,7 +1312,7 @@ export class BrowserController {
             return parseEgressGeo(body);
         }
         catch (err) {
-            console.error(`[universal-bot] egress geo probe failed — using default ` +
+            console.error(`[operator] egress geo probe failed — using default ` +
                 `timezone: ${err instanceof Error ? err.message : String(err)}`);
             return null;
         }
@@ -1345,7 +1345,7 @@ export class BrowserController {
             proxy = parseProxyUrl(raw);
         }
         catch (err) {
-            console.error(`[universal-bot] UNIVERSAL_BOT_PROXY_URL is malformed — running ` +
+            console.error(`[operator] UNIVERSAL_BOT_PROXY_URL is malformed — running ` +
                 `direct: ${err instanceof Error ? err.message : String(err)}`);
             return null;
         }
@@ -1363,16 +1363,16 @@ export class BrowserController {
             // datacenter IPs, instead of dying entirely. Self-healing > silent stall.
             const reachable = await isProxyReachable(proxy.server);
             if (!reachable) {
-                console.error(`[universal-bot] proxy ${proxy.server} is UNREACHABLE — falling back to ` +
+                console.error(`[operator] proxy ${proxy.server} is UNREACHABLE — falling back to ` +
                     `DIRECT egress (datacenter IP; anti-bot services may block it, but far ` +
                     `better than every navigation timing out)`);
                 return null;
             }
-            console.error(`[universal-bot] routing through residential proxy ` +
+            console.error(`[operator] routing through residential proxy ` +
                 `(asn=${asnClass}${forceAlways ? ", forced" : ""})`);
             return proxy;
         }
-        console.error(`[universal-bot] direct connection (asn=${asnClass}) — proxy ` +
+        console.error(`[operator] direct connection (asn=${asnClass}) — proxy ` +
             `configured but not needed for this network`);
         return null;
     }
@@ -1592,7 +1592,7 @@ export class BrowserController {
             // Any step in the chain failing leaves us at *some* page (the
             // search results, the marketing site, an error page) — that's
             // still better than a cold landing on /sign_up. Log and proceed.
-            console.error(`[universal-bot] referrer-chain prewarm partial failure (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
+            console.error(`[operator] referrer-chain prewarm partial failure (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
         }
     }
     async type(selector, text) {
@@ -4925,7 +4925,7 @@ export class BrowserController {
     //     isMasked: true if the value looks like a redacted display
     //               (••••, ****, contains "•" or runs of "*") }
     //
-    // The caller (agent.ts extractAllLabeledCandidates path) maps label
+    // The caller maps label
     // text to canonical credential keys using the same vocabulary the
     // Phase E parser uses.
     async extractLabeledCredentialCandidates() {
@@ -6611,10 +6611,10 @@ export class BrowserController {
         try {
             cdp = await this.context.newCDPSession(this.page);
             await cdp.send("FedCm.enable", { disableRejectionDelay: true });
-            console.error("[universal-bot] FedCm.enable ok — listening for dialogShown");
+            console.error("[operator] FedCm.enable ok — listening for dialogShown");
             cdp.on("FedCm.dialogShown", (ev) => {
                 const e = ev;
-                console.error(`[universal-bot] FedCm.dialogShown type=${e.dialogType ?? "?"} accounts=${Array.isArray(e.accounts) ? e.accounts.length : "?"}`);
+                console.error(`[operator] FedCm.dialogShown type=${e.dialogType ?? "?"} accounts=${Array.isArray(e.accounts) ? e.accounts.length : "?"}`);
                 const dialogId = e.dialogId;
                 if (dialogId === undefined)
                     return;
@@ -6665,7 +6665,7 @@ export class BrowserController {
         }
         catch (err) {
             cdp = null; // FedCm domain unavailable — the popup path still works
-            console.error(`[universal-bot] FedCm.enable failed (${err instanceof Error ? err.message : String(err)}) — FedCM path disabled, relying on popup`);
+            console.error(`[operator] FedCm.enable failed (${err instanceof Error ? err.message : String(err)}) — FedCM path disabled, relying on popup`);
         }
         const popupPromise = this.context
             .waitForEvent("page", { timeout: timeoutMs })
@@ -6739,7 +6739,7 @@ export class BrowserController {
             }
             return { ok: true, via: "fedcm" };
         }
-        console.error(`[universal-bot] GSI resolved via none — fedcmEnabled=${cdp !== null} ` +
+        console.error(`[operator] GSI resolved via none — fedcmEnabled=${cdp !== null} ` +
             `fedcmResolved=${fedcmResolved} pages=${this.context.pages().length}`);
         return { ok: false, via: "none" };
     }
@@ -7082,7 +7082,7 @@ export class BrowserController {
                     .filter((t) => t.length > 0);
             })
                 .catch(() => []);
-            console.error(`[universal-bot] GitHub advanceOAuthConsent failed — visible buttons: ` +
+            console.error(`[operator] GitHub advanceOAuthConsent failed — visible buttons: ` +
                 `${seen.length === 0 ? "<none>" : seen.map((s) => JSON.stringify(s)).join(", ")}`);
             return false;
         }
@@ -7165,7 +7165,7 @@ export class BrowserController {
                 .filter((t) => t.length > 0);
         })
             .catch(() => []);
-        console.error(`[universal-bot] Google advanceOAuthConsent failed — visible buttons: ` +
+        console.error(`[operator] Google advanceOAuthConsent failed — visible buttons: ` +
             `${seen.length === 0 ? "<none>" : seen.map((s) => JSON.stringify(s)).join(", ")}`);
         return false;
     }
@@ -7303,7 +7303,7 @@ function rand(min, max) {
 // button[type=submit] next to the real account-creation button, so a
 // generic selector resolves to several — this picks the right one.
 //
-// Same shape and rationale as agent.ts's pickVerificationLink: a positive
+// Same shape and rationale as the verification-link picker: a positive
 // score gate so an OAuth-only page (every candidate negative) returns
 // null rather than mis-clicking "Continue with Google".
 // Click disambiguation (regression: #61 weaviate). A bare id selector can