@trusty-squire/mcp 1.1.13 → 1.1.14-rc.2

package/README.md

@@ -349,13 +349,16 @@ still return only a current handle. `detail:"full"` keeps the V2 format. Maintai
   live `text=…`/`css=…` locator; that one-off fallback is not replayable.
   Compact V2 accepts only a handle from its current sealed action map.
   When a `click` or `js_click` opens a new tab or popup (`target=_blank`, a
-  `window.open` control), the operator follows it the way a person would: the
-  newly opened page becomes the active page, so the next `operate_observe` or
-  `operate_act` reads it. This is how an emailed verification or magic link is
-  followed. Do not try to `extract` the link's href instead — a single-use login
-  token is sealed and is never returned as text; following the tab navigates the
-  browser without exposing it. Payment is excluded: during a sealed card fill or
-  a live place-order/3-D Secure approval the active page never changes.
+  `window.open` control), the operator follows it the way a person would only
+  when the browser attributes its creation to the session's active page. That
+  owned popup becomes the active page, so the next `operate_observe` or
+  `operate_act` reads it. An unrelated or no-opener page in the browser context
+  stays unassigned and cannot become the working page. This is how an emailed
+  verification or magic link is followed. Do not try to `extract` the link's href
+  instead — a single-use login token is sealed and is never returned as text;
+  following the tab navigates the browser without exposing it. Payment is
+  excluded: during a sealed card fill or a live place-order/3-D Secure approval
+  the active page never changes.
   In a live operator session, in-page XHR/fetch calls to merchant API sibling
   subdomains are automatically in scope only when they share the registrable
   domain of a host trusted at session start. Calls outside the session scope fail
@@ -387,10 +390,15 @@ still return only a current handle. `detail:"full"` keeps the V2 format. Maintai
   `detail` is `none`. Every `oauth_login` and legacy `oauth_click` is serialized
   from action start through completion and a short release cooldown; other
   session work remains parallel. The whole serialized action has a 30-second
-  deadline. If Google does not complete in time, the call returns
-  `google_session` re-login guidance and closes that operator session without
-  replacing the saved identity; start a fresh session after reconnecting.
-  `oauth_click` and `oauth_settle` remain for
+  deadline. If the provider has not handed control back in time, the call does
+  not error and does not close the session: it returns a normal observation
+  with `oauth.state: "awaiting_human"`, a `reason` naming only what was
+  observed, and `next_action: "operate_observe"`. A consent screen or a
+  2FA/verification challenge is usually still showing, so re-observe and drive
+  it; the session stays open and usable. A denial the provider actually
+  reported (an OAuth `error=` code on the return URL) is the one case that
+  fails the action, with that code in the message. `oauth_click` and
+  `oauth_settle` remain for
   legacy replay compatibility. If an observation races that legacy transition,
   the response reports `oauth.state: "in_progress"` and directs the host to
   observe again.

package/dist/bot/browser-process-owner.d.ts

@@ -0,0 +1,75 @@
+import type { BrowserContext } from "playwright";
+import { type ProfileCloseState } from "./profile.js";
+import { type StealthProfile } from "./browser-process-runtime.js";
+import type { PageDriver } from "./page-driver.js";
+/** Exclusive Chrome custody. Page setup is awaited at the original startup boundary. */
+export declare class BrowserProcessOwner {
+    private readonly pages;
+    private readonly initializePages;
+    context: BrowserContext | null;
+    private childChrome;
+    private childChromeIdentity;
+    private childChromeProcessGroup;
+    private ownedDisplayRig;
+    private ownedChromeProcessTreeProof;
+    private operatorProcessMarker;
+    private ownerLaunchTracked;
+    private cdpBrowser;
+    private launchedContext;
+    private launchedProfileHolderIdentity;
+    private startPromise;
+    private closePromise;
+    private startCancellationRequested;
+    private startLaunchCommitted;
+    private startSettled;
+    private persistentFallbackLaunchInFlight;
+    private persistentFallbackOwnershipMonitor;
+    private persistentFallbackCancellationState;
+    private resolveStartCancellation;
+    private readonly startCancellation;
+    private cancelledStartReaper;
+    private launchedChannel;
+    private proxyServer;
+    private readonly profileDir;
+    private readonly proxyOverride;
+    launchedMode: "headed" | "headless" | "remote" | "unknown";
+    constructor(opts: {
+        profileDir?: string;
+        proxyUrl?: string;
+    }, pages: PageDriver, initializePages: (context: BrowserContext, hardened: boolean, remoteMode: boolean) => Promise<void>);
+    operatorBrowserMarker(): string;
+    private ownedHeadedBrowserEnvironment;
+    private teardownOwnedDisplay;
+    private adoptOwnedChromeProcessTree;
+    private signalCurrentSelfManagedChrome;
+    isConnected(): boolean;
+    get channel(): string | null;
+    get proxied(): string | null;
+    get stealthProfile(): StealthProfile;
+    get launchMode(): "headed" | "headless" | "remote" | "unknown";
+    private launchSelfManagedContext;
+    private cancelSpawnedSelfManagedChrome;
+    start(): Promise<void>;
+    private startOnce;
+    private throwIfStartCancelled;
+    private commitProfileLaunch;
+    private startBrowser;
+    private probeEgressGeo;
+    private resolveProxy;
+    close(options?: {
+        cancelStart?: boolean;
+    }): Promise<ProfileCloseState>;
+    waitForCancelledStartQuiescence(): Promise<void>;
+    forceCloseOwnedProcessTree(): Promise<ProfileCloseState>;
+    private closeCancelledStart;
+    private reapCancelledStartProcess;
+    private monitorCancelledStartProcess;
+    private currentOwnedProfileIdentity;
+    private waitForPersistentFallbackIdentity;
+    private requirePersistentFallbackOwnership;
+    private startPersistentFallbackOwnershipMonitor;
+    private waitForOwnedProfileExit;
+    private closeAfterStart;
+    private closeBrowser;
+}
+//# sourceMappingURL=browser-process-owner.d.ts.map

package/dist/bot/browser-process-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-process-owner.d.ts","sourceRoot":"","sources":["../../src/bot/browser-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,cAAc,EAAE,MAAM,YAAY,CAAC;AAI1D,OAAO,EAQL,KAAK,iBAAiB,EAEvB,MAAM,cAAc,CAAC;AAatB,OAAO,EAiCL,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,wFAAwF;AACxF,qBAAa,mBAAmB;IA4E5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,eAAe;IA3ElC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAQ;IAKtC,OAAO,CAAC,WAAW,CAA6B;IAEhD,OAAO,CAAC,mBAAmB,CAAuC;IAElE,OAAO,CAAC,uBAAuB,CAAS;IAExC,OAAO,CAAC,eAAe,CAA+B;IAEtD,OAAO,CAAC,2BAA2B,CAA4C;IAE/E,OAAO,CAAC,qBAAqB,CAAuB;IAEpD,OAAO,CAAC,kBAAkB,CAAS;IAEnC,OAAO,CAAC,UAAU,CAAwB;IAG1C,OAAO,CAAC,eAAe,CAAS;IAEhC,OAAO,CAAC,6BAA6B,CAAuC;IAE5E,OAAO,CAAC,YAAY,CAA8B;IAElD,OAAO,CAAC,YAAY,CAA2C;IAE/D,OAAO,CAAC,0BAA0B,CAAS;IAE3C,OAAO,CAAC,oBAAoB,CAAS;IAErC,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,gCAAgC,CAAS;IAEjD,OAAO,CAAC,kCAAkC,CAA8B;IAExE,OAAO,CAAC,mCAAmC,CAAkC;IAE7E,OAAO,CAAC,wBAAwB,CAA6B;IAE7D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAE/B;IAEH,OAAO,CAAC,oBAAoB,CAA8B;IAO1D,OAAO,CAAC,eAAe,CAAuB;IAM9C,OAAO,CAAC,WAAW,CAAuB;IAE1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAIpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAI9C,YAAY,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAa;gBAErE,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAC/B,KAAK,EAAE,UAAU,EACjB,eAAe,EAAE,CAChC,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,OAAO,EACjB,UAAU,EAAE,OAAO,KAChB,OAAO,CAAC,IAAI,CAAC;IAOpB,qBAAqB,IAAI,MAAM;YAKjB,6BAA6B;YAc7B,oBAAoB;IAQlC,OAAO,CAAC,2BAA2B;IAyBnC,OAAO,CAAC,8BAA8B;IAatC,WAAW,IAAI,OAAO;IAStB,IAAI,OAAO,IAAI,MAAM,GAAG,IAAI,CAK3B;IAKD,IAAI,OAAO,IAAI,MAAM,GAAG,IAAI,CAK3B;IAOD,IAAI,cAAc,IAAI,cAAc,CAKnC;IAED,IAAI,UAAU,IAAI,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAE7D;YAYa,wBAAwB;YA2IxB,8BAA8B;IAwBtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YASd,SAAS;IAoBvB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,mBAAmB;YAKb,YAAY;YAyRZ,cAAc;YAkDd,YAAY;IAKpB,KAAK,CAAC,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAU1E,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC;IAShD,0BAA0B,IAAI,OAAO,CAAC,iBAAiB,CAAC;YAkChD,mBAAmB;YAYnB,yBAAyB;YAKzB,4BAA4B;IAc1C,OAAO,CAAC,2BAA2B;YAgBrB,iCAAiC;YAgBjC,kCAAkC;IAgBhD,OAAO,CAAC,uCAAuC;YA0BjC,uBAAuB;YA8BvB,eAAe;YAQf,YAAY;CA4G3B"}