@trusty-squire/mcp 1.1.13 → 1.1.14-rc.2

package/dist/bot/browser.js

@@ -21,84 +21,15 @@
 // Turnstile/reCAPTCHA-v3 scoring on most SaaS signups. Visible-mode
 // captchas still need the click-and-wait pattern (the Tier 2 captcha
 // gate).
-import { chromium as baseChromium } from "playwright";
-import { createRequire } from "node:module";
-import { Socket } from "node:net";
-import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync } from "node:fs";
-import { readFile } from "node:fs/promises";
-import { join } from "node:path";
-import { spawn } from "node:child_process";
+import { childProcessIsRunning, closeLocalBrowserLaunch, markLocalBrowserLaunchTerminal, profileCollisionFromStderr, registerLocalBrowserLaunch, registerSelfManagedChrome, resolveAttachedProfileChildIdentity, selfManagedChromes, signalOwnedChromeProcessTree, spawnLocalBrowser, trackOwnedChromeProcessTree, withChromeStartupLock, } from "./browser-process-runtime.js";
 import { isSameRecipeDomain } from "@trusty-squire/recipe-schema";
-import { clearStaleSingletonLock, closeProfileWithProof, currentProfileHolderPid, processBirthIdentity, processBirthIdentityState, profileProcessIdentity, profileProcessIdentityState, profileProcessMatches, PROFILE_BUSY_MESSAGE, ProfileBusyError, reapProfileHolderIfOwned, signalProfileProcess, } from "./profile.js";
-import { createOperatorBrowserMarker, OPERATOR_BROWSER_MARKER_ENV, operatorBrowserProcessMarker, operatorBrowserProcessMatchesMarker, startGlobalOperatorBrowserProcessWatchdog, } from "./operator-browser-watchdog.js";
-import { bindOwnerBrowserLaunch, markOwnerBrowserLaunchTerminal, reconcileOwnerBrowserLaunchAfterLeaderExit, terminateOwnerBrowserLaunch, trackOwnerBrowserLaunch, trackOwnerProcess, untrackOwnerBrowserLaunch, untrackOwnerProcess, } from "./owner-process-reaper.js";
-// Lazy registration: installing the plugin mutates the chromium singleton
-// from playwright-extra so we only do it once per process. We require()
-// the CJS modules lazily (the stealth toolchain only ships CJS) and treat
-// stealth as best-effort — a missing dep should never crash the bot.
-const require = createRequire(import.meta.url);
-// Operator signup runs are deliberately headed. Google, Stytch, and Cloudflare
-// routinely reject a headless Chrome even when it is otherwise self-launched.
-const OPERATOR_BROWSER_HEADLESS = false;
-export function registerLocalBrowserLaunch(profileDir, baseEnv = process.env, marker = createOperatorBrowserMarker()) {
-    trackOwnerBrowserLaunch(marker, profileDir);
-    return {
-        marker,
-        env: { ...baseEnv, [OPERATOR_BROWSER_MARKER_ENV]: marker },
-    };
-}
-export async function closeBrowserContextWithin(context, timeoutMs = 2_000) {
-    let timer;
-    const outcome = await Promise.race([
-        Promise.resolve()
-            .then(() => context.close())
-            .then(() => true, () => false),
-        new Promise((resolveTimeout) => {
-            timer = setTimeout(() => resolveTimeout(false), timeoutMs);
-        }),
-    ]);
-    if (timer !== undefined)
-        clearTimeout(timer);
-    return outcome;
-}
-function spawnLocalBrowser(binary, args, profileDir, options) {
-    const ownership = registerLocalBrowserLaunch(profileDir, options.env, options.marker);
-    try {
-        const child = spawn(binary, [...args], {
-            env: ownership.env,
-            stdio: options.stdio,
-            detached: options.detached,
-        });
-        localBrowserLaunchMarkers.set(child, ownership.marker);
-        child.once("exit", () => {
-            setTimeout(() => {
-                reconcileOwnerBrowserLaunchAfterLeaderExit(ownership.marker, profileDir);
-            }, 0).unref();
-        });
-        return child;
-    }
-    catch (error) {
-        untrackOwnerBrowserLaunch(ownership.marker);
-        throw error;
-    }
-}
-const localBrowserLaunchMarkers = new WeakMap();
-function markLocalBrowserLaunchTerminal(child) {
-    if (child === null)
-        return;
-    const marker = localBrowserLaunchMarkers.get(child);
-    if (marker !== undefined)
-        markOwnerBrowserLaunchTerminal(marker);
-}
-export async function closeLocalBrowserLaunch(marker, profileDir, runtime = {}) {
-    if (marker === undefined)
-        return;
-    (runtime.markTerminal ?? markOwnerBrowserLaunchTerminal)(marker);
-    if (!(await (runtime.terminate ?? terminateOwnerBrowserLaunch)(marker, profileDir))) {
-        throw new Error("local login browser closure unproven");
-    }
-    (runtime.untrack ?? untrackOwnerBrowserLaunch)(marker);
-}
+import {} from "node:child_process";
+import { existsSync, statSync } from "node:fs";
+import { experimentalMultiSessionEnabled } from "./session/multisession-flag.js";
+import { BrowserProcessOwner } from "./browser-process-owner.js";
+import { bindOwnerBrowserLaunch, untrackOwnerBrowserLaunch } from "./owner-process-reaper.js";
+import { PageDriver } from "./page-driver.js";
+import { clearStaleSingletonLock, profileProcessIdentity, reapProfileHolderIfOwned, signalProfileProcess, } from "./profile.js";
 export function contextInitScriptsFor(options) {
     if (options.hardened)
         return [];
@@ -108,81 +39,6 @@ export function contextInitScriptsFor(options) {
         ...(options.remoteMode ? [] : ["webgl-spoof"]),
     ];
 }
-// Whether to use the CDP-hardened launcher (patchright, which runs
-// evaluations in an isolated world and removes the automation tells —
-// mainWorldExecution, navigator.webdriver, viewport — that Turnstile /
-// reCAPTCHA-v3 / Google's consent SPA score on). See
-// docs/ARCHITECTURE.md.
-//
-// 2026-06-08 — DEFAULT FLIPPED ON. The baseline (playwright-extra +
-// stealth) self-inflicts a detectable navigator.webdriver via its manual
-// defineProperty patch, so it is strictly WORSE on the fingerprint. The
-// hardened launcher is all-green on the rebrowser bot-detector and was
-// live-A/B'd: meilisearch's Google consent-SPA block became a (handleable)
-// FedCM path, and render still signed up + extracted a key cleanly — no
-// crash on either (the old crash was the retired rebrowser fork, not
-// patchright). Default to hardened; opt out with BOT_CDP_HARDENED=0 for
-// the baseline. If patchright isn't installed, getChromium() falls back to
-// baseline gracefully.
-function cdpHardeningRequested() {
-    const v = process.env.BOT_CDP_HARDENED;
-    if (v === "0" || v === "false" || v === "off")
-        return false;
-    return true;
-}
-let cachedChromium = null;
-// The stealth profile the cached launcher actually represents. Set the
-// first time getChromium() resolves a launcher and read back via
-// BrowserController.stealthProfile for the CaptchaEvent A/B tag. A
-// patchright load failure degrades it to "baseline" truthfully rather
-// than over-claiming "cdp_hardened" on a run that never got the patch.
-let activeStealthProfile = "baseline";
-function activeStealthProfileValue() {
-    return activeStealthProfile;
-}
-function getChromium() {
-    if (cachedChromium !== null)
-        return cachedChromium;
-    const hardened = cdpHardeningRequested();
-    try {
-        if (hardened) {
-            // patchright — a maintained Playwright fork that runs every
-            // evaluation in an ISOLATED world (so the bot's DOM probing is
-            // invisible to a page that traps DOM methods → closes the
-            // `mainWorldExecution` tell) and handles `navigator.webdriver`
-            // natively + correctly. Verified ALL-GREEN against the maintained
-            // rebrowser bot-detector (mainWorldExecution, navigatorWebdriver,
-            // viewport, runtimeEnableLeak all clean). It drives real Chrome
-            // (channel) directly — the earlier rebrowser fork couldn't, which is
-            // why the old hardened arm was forced onto bundled chromium and then
-            // crashed the OAuth flow. NO playwright-extra/stealth wrap here: the
-            // stealth plugin's manual `navigator.webdriver` defineProperty
-            // RE-ADDS a detectable property (proven counterproductive) — patchright
-            // does it right. See docs/ARCHITECTURE.md.
-            const patchright = require("patchright");
-            cachedChromium = patchright.chromium;
-            activeStealthProfile = "cdp_hardened";
-            return cachedChromium;
-        }
-        // Baseline: playwright-extra + stealth (unchanged). addExtra(baseChromium)
-        // is exactly what playwright-extra's default `chromium` export already is.
-        const { addExtra } = require("playwright-extra");
-        const stealth = require("puppeteer-extra-plugin-stealth");
-        activeStealthProfile = "baseline";
-        const extra = addExtra(baseChromium);
-        extra.use(stealth());
-        cachedChromium = extra;
-    }
-    catch (err) {
-        // Fall back to vanilla playwright if stealth (or the rebrowser fork)
-        // isn't installed. The bot still works, it's just easier to
-        // fingerprint as a bot — and the A/B tag stays truthfully "baseline".
-        console.warn(`[operator] hardened launcher unavailable, falling back to vanilla chromium: ${err instanceof Error ? err.message : String(err)}`);
-        cachedChromium = baseChromium;
-        activeStealthProfile = "baseline";
-    }
-    return cachedChromium;
-}
 export class BrowserClickDispatchError extends Error {
     dispatchStatus;
     constructor(dispatchStatus, error) {
@@ -286,6 +142,82 @@ export class PaymentSubmitOutcomeUnknownError extends Error {
         this.name = "PaymentSubmitOutcomeUnknownError";
     }
 }
+export class OAuthAwaitingHumanError extends Error {
+    phase;
+    constructor(message, phase = "pending") {
+        super(message);
+        this.name = "OAuthAwaitingHumanError";
+        this.phase = phase;
+    }
+}
+export class OAuthFailedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "OAuthFailedError";
+    }
+}
+// Pure decision at the heart of Fix C's honest outcome classification,
+// applied the instant an OAuth completion wait's deadline elapses. Exported
+// so the exact race it recovers — the deadline firing in the same instant the
+// provider actually hands control back — can be unit-tested without racing
+// real timers: a 2026-09 dogfood run hit precisely this (Google's redirect
+// landed, but the strict wait's confirmation loop had already timed out) and
+// the tool reported a fabricated "session may have expired" failure for an
+// action that had, in fact, just succeeded.
+//
+//   - `transientClosed` at the deadline → the provider page is gone, which is
+//     this codebase's ordinary popup completion signal (waitForOAuthLifecycle
+//     reports the same state as "closed"); settle it the same way.
+//   - `returnedToProductOrigin` at the deadline (same-tab, the page actually
+//     left the product origin and is back on it — the same departure
+//     condition waitForOAuthLifecycle requires) → the provider DID return
+//     control; report completion, not failure.
+//   - otherwise we simply don't know yet → `awaiting_human` (a consent
+//     screen or 2FA challenge is commonly still showing); never asserted as
+//     a cause, just the honest "not done".
+//
+// A real failure is never inferred here: it comes only from an observed OAuth
+// error on the return URL (`oauthErrorFromReturnUrl`).
+export function classifyOAuthTimeout(transientClosed, returnedToProductOrigin) {
+    if (transientClosed)
+        return "closed";
+    if (returnedToProductOrigin)
+        return "returned";
+    return "awaiting_human";
+}
+// The one observed denial/error signal OAuth defines: the provider redirects
+// back to the relying party carrying `error=<code>` (RFC 6749 §4.1.2.1 in the
+// query; §4.2.2.1 in the fragment for implicit flows). The code is reported
+// verbatim — it is a fact the provider stated, not a guess.
+const OAUTH_ERROR_CODE_RE = /^[A-Za-z0-9_.:-]{1,64}$/;
+export function oauthErrorFromReturnUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    for (const params of [
+        parsed.searchParams,
+        new URLSearchParams(parsed.hash.startsWith("#") ? parsed.hash.slice(1) : ""),
+    ]) {
+        const error = params.get("error");
+        if (error === null || !OAUTH_ERROR_CODE_RE.test(error))
+            continue;
+        const description = params.get("error_description");
+        return {
+            error,
+            description: description === null || description.length === 0 ? null : description,
+        };
+    }
+    return null;
+}
+export function oauthAwaitingHumanMessage(productOrigin, budgetMs) {
+    return (`OAuth has not returned to ${productOrigin} within ${Math.ceil(budgetMs / 1000)} seconds. ` +
+        "A consent screen or a 2FA/verification challenge may still be showing on the provider; " +
+        "call operate_observe to check whether it has resolved, rather than treating this as a failure.");
+}
 export async function runCaptureConfirmedPaymentSubmit(options) {
     let clickError;
     let inputDispatchPossible = false;
@@ -1920,612 +1852,6 @@ function pngDimensions(buf) {
     }
     return { width: buf.readUInt32BE(16), height: buf.readUInt32BE(20) };
 }
-// Real-Chromium-family browser channels we'll prefer over the bundled
-// Chromium binary when available. Chromium ships without Widevine,
-// without proprietary codecs, with an empty navigator.plugins array,
-// and with a chrome.runtime API surface that bot-detection scripts
-// know to look for. Using a *real* installation papers over ~6 of
-// those fingerprint bits at zero engineering cost.
-//
-// Order matters: pick the channel most likely to be present *and*
-// hardest to fingerprint as automation. Stable Chrome > Edge >
-// Beta/Canary > Brave. Brave isn't a Playwright channel but its
-// binary path is well-known; we resolve it explicitly below.
-const PREFERRED_CHANNELS = ["chrome", "msedge", "chrome-beta", "chrome-canary"];
-// Per-channel binary search paths. Playwright's `executablePath()` is
-// argumentless (returns the bundled Chromium path), so we can't ask it
-// "is Chrome installed?" — we have to look ourselves. These are the
-// canonical install locations on each platform; the first hit wins.
-//
-// Limitation: this misses sideloaded installs (Chrome installed via
-// the user's package manager to a non-default path, dev-builds in
-// home directories, etc.). For those, the user can set
-// UNIVERSAL_BOT_CHANNEL=chrome to force Playwright to find it
-// through its own resolution. We accept the false-negative because
-// the alternative (asking Playwright to launch and seeing if it
-// succeeds) costs ~1s of process startup per probe.
-const CHANNEL_PATHS = {
-    chrome: [
-        // macOS
-        "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
-        // Linux
-        "/usr/bin/google-chrome",
-        "/usr/bin/google-chrome-stable",
-        "/opt/google/chrome/chrome",
-        // Windows — Playwright resolves these via channel anyway, but list
-        // for completeness on cross-platform Node runs.
-        "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe",
-        "C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe",
-    ],
-    msedge: [
-        "/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge",
-        "/usr/bin/microsoft-edge",
-        "/usr/bin/microsoft-edge-stable",
-        "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe",
-    ],
-    "chrome-beta": [
-        "/Applications/Google Chrome Beta.app/Contents/MacOS/Google Chrome Beta",
-        "/usr/bin/google-chrome-beta",
-    ],
-    "chrome-canary": [
-        "/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary",
-        "/usr/bin/google-chrome-unstable",
-    ],
-};
-// Detect a real-Chromium-family browser channel without launching it.
-// Returns the channel name (passable as `channel:` to .launch) or null
-// to mean "use bundled Chromium." Logs the selection to stderr so the
-// telemetry path can see which browser the run ended up on without
-// having to thread it through the agent state machine.
-async function detectChromiumChannel() {
-    // Skip detection in tests / when explicitly opting out. The unit tests
-    // launch hundreds of browsers and shouldn't probe the filesystem each
-    // time; they also can't rely on real Chrome being present.
-    if (process.env.UNIVERSAL_BOT_CHANNEL === "bundled")
-        return null;
-    if (process.env.UNIVERSAL_BOT_CHANNEL !== undefined) {
-        // Explicit override — caller knows what they want.
-        return process.env.UNIVERSAL_BOT_CHANNEL;
-    }
-    const fsMod = await import("node:fs");
-    for (const channel of PREFERRED_CHANNELS) {
-        const candidatePaths = CHANNEL_PATHS[channel] ?? [];
-        for (const candidate of candidatePaths) {
-            try {
-                if (fsMod.existsSync(candidate))
-                    return channel;
-            }
-            catch {
-                // permission errors etc. — skip this candidate, try the next
-            }
-        }
-    }
-    return null;
-}
-// Resolve the on-disk Chrome binary for a detected channel, for the
-// self-launch path (see launchSelfManagedContext). Playwright launches a
-// channel by name; we have to spawn the binary ourselves, so we need the
-// path. Returns null when the channel is unknown / not found on disk
-// (caller falls back to launchPersistentContext).
-export function resolveChannelBinary(channel) {
-    if (channel === null)
-        return null; // bundled Chromium — no self-launch
-    const explicit = process.env.UNIVERSAL_BOT_CHROME_BINARY;
-    if (explicit !== undefined && explicit.length > 0) {
-        return existsSync(explicit) ? explicit : null;
-    }
-    const candidates = CHANNEL_PATHS[channel] ?? [];
-    for (const c of candidates) {
-        try {
-            if (existsSync(c))
-                return c;
-        }
-        catch {
-            // skip unreadable candidate
-        }
-    }
-    return null;
-}
-// Whether to launch Chrome ourselves and attach over CDP, instead of
-// Playwright's launchPersistentContext.
-//
-// WHY THIS EXISTS — the single decisive finding (2026-06-12, fully
-// reproduced + falsifiable; see STATE.md "Cloudflare-Turnstile wall").
-// Cloudflare Turnstile's interactive challenge FAILS a Playwright/patchright
-// launchPersistentContext-driven Chrome and PASSES a Chrome the operator
-// launches itself and then attaches to over CDP — every other variable held
-// constant (same box, same datacenter IP, same headed display, same Chrome 148
-// binary, same software-WebGL, same humanized click). The discriminator
-// matrix:
-//   launchPersistentContext + CDP click   → "Verification failed"
-//   launchPersistentContext + OS click     → "Verification failed"
-//   plain google-chrome      + OS click     → "Success!"
-//   plain google-chrome + connectOverCDP + page.mouse → token issued (len816)
-// So the tell is NEITHER the live CDP attachment NOR the click mechanism —
-// it is specifically the launch flags/instrumentation Playwright injects at
-// launchPersistentContext time. Self-launching the binary (no
-// --enable-automation et al.) and attaching with connectOverCDP avoids it.
-// Default-ON; opt out with BOT_SELF_LAUNCH=0 for the persistent-context path. Exported for tests.
-export function selfLaunchEnabled() {
-    const v = process.env.BOT_SELF_LAUNCH;
-    return v !== "0" && v !== "false" && v !== "off";
-}
-const PERSISTENT_CONTEXT_LAUNCH_TIMEOUT_MS = 30_000;
-const PERSISTENT_CONTEXT_CANCELLATION_SETTLE_MS = 2_000;
-const PERSISTENT_CONTEXT_CANCELLATION_POLL_MS = 25;
-const PROFILE_IDENTITY_PROOF_TIMEOUT_MS = 2_000;
-const PROFILE_IDENTITY_POLL_MS = 25;
-const PROFILE_HOLDER_ABSENCE_GRACE_MS = 100;
-export async function resolvePersistentFallbackIdentity(opts) {
-    if ((opts.platform ?? process.platform) !== "linux")
-        return { state: "unknown" };
-    const timeoutMs = opts.timeoutMs ?? PROFILE_IDENTITY_PROOF_TIMEOUT_MS;
-    const pollMs = opts.pollMs ?? PROFILE_IDENTITY_POLL_MS;
-    const absenceGraceMs = opts.absenceGraceMs ?? PROFILE_HOLDER_ABSENCE_GRACE_MS;
-    const readHolder = opts.currentHolderPid ?? currentProfileHolderPid;
-    const readIdentity = opts.readIdentity ?? profileProcessIdentity;
-    const clearStaleLock = opts.clearStaleLock ?? clearStaleSingletonLock;
-    const deadline = Date.now() + timeoutMs;
-    let absentSince = null;
-    for (;;) {
-        const holderPid = readHolder(opts.profileDir);
-        if (holderPid === null) {
-            absentSince ??= Date.now();
-            if (Date.now() - absentSince >= absenceGraceMs)
-                return { state: "absent" };
-        }
-        else {
-            absentSince = null;
-            const identity = readIdentity(holderPid, opts.profileDir);
-            if (identity !== null)
-                return { state: "owned", identity };
-            if (clearStaleLock(opts.profileDir))
-                return { state: "absent" };
-        }
-        if (Date.now() >= deadline)
-            return { state: "unknown" };
-        await new Promise((resolveWait) => {
-            const timer = setTimeout(resolveWait, Math.min(pollMs, Math.max(1, deadline - Date.now())));
-            timer.unref();
-        });
-    }
-}
-export async function launchCancellablePersistentContext(opts) {
-    const launchTimeoutMs = opts.launchTimeoutMs ?? PERSISTENT_CONTEXT_LAUNCH_TIMEOUT_MS;
-    const launchDeadline = Date.now() + launchTimeoutMs;
-    const launch = Promise.resolve().then(() => opts.launch({ ...opts.options, timeout: launchTimeoutMs }));
-    const outcome = await Promise.race([
-        launch.then((value) => ({ status: "launched", value })),
-        opts.cancellation.then(() => ({ status: "cancelled" })),
-    ]);
-    if (outcome.status === "launched")
-        return outcome;
-    let rejectedCleanup = null;
-    const cleanupRejected = () => {
-        if (rejectedCleanup !== null)
-            return rejectedCleanup;
-        const cleanup = Promise.resolve()
-            .then(opts.cleanupRejected)
-            .catch(() => "unknown")
-            .finally(() => {
-            if (rejectedCleanup === cleanup)
-                rejectedCleanup = null;
-        });
-        rejectedCleanup = cleanup;
-        return cleanup;
-    };
-    const lateCleanup = launch
-        .then(opts.cleanupCancelled, cleanupRejected)
-        .catch(() => "unknown");
-    const settleMs = opts.cancellationSettleMs ?? PERSISTENT_CONTEXT_CANCELLATION_SETTLE_MS;
-    const pollMs = opts.cancellationPollMs ?? PERSISTENT_CONTEXT_CANCELLATION_POLL_MS;
-    const cancellationDeadline = Math.max(Date.now(), launchDeadline) + settleMs;
-    let settledCloseState = null;
-    void lateCleanup.then((closeState) => {
-        settledCloseState = closeState;
-    });
-    while (settledCloseState === null && Date.now() < cancellationDeadline) {
-        await cleanupRejected();
-        if (settledCloseState !== null)
-            break;
-        const remaining = cancellationDeadline - Date.now();
-        if (remaining <= 0)
-            break;
-        await Promise.race([
-            lateCleanup,
-            new Promise((resolveWait) => {
-                const timer = setTimeout(resolveWait, Math.min(pollMs, remaining));
-                timer.unref();
-            }),
-        ]);
-    }
-    if (settledCloseState !== null) {
-        return { status: "cancelled", closeState: settledCloseState };
-    }
-    await cleanupRejected();
-    void lateCleanup;
-    return { status: "cancelled", closeState: "unknown" };
-}
-const DEVTOOLS_ACTIVE_PORT_FILE = "DevToolsActivePort";
-export async function waitForOwnedDevtoolsEndpoint(profileDir, deadlineMs, child) {
-    const activePortPath = join(profileDir, DEVTOOLS_ACTIVE_PORT_FILE);
-    const deadline = Date.now() + deadlineMs;
-    let lastErr = "";
-    while (Date.now() < deadline) {
-        if (!childProcessIsRunning(child)) {
-            throw new Error("Chrome exited before its owned DevTools endpoint became available");
-        }
-        try {
-            const [portText, browserPath] = (await readFile(activePortPath, "utf8")).split(/\r?\n/);
-            const port = Number(portText);
-            if (!Number.isInteger(port) ||
-                port < 1 ||
-                port > 65_535 ||
-                browserPath === undefined ||
-                !/^\/devtools\/browser\/[A-Za-z0-9-]+$/.test(browserPath)) {
-                throw new Error("invalid DevToolsActivePort contents");
-            }
-            return `ws://127.0.0.1:${port}${browserPath}`;
-        }
-        catch (error) {
-            lastErr = error instanceof Error ? error.message : String(error);
-        }
-        await new Promise((resolveWait) => {
-            const timer = setTimeout(resolveWait, 200);
-            timer.unref();
-        });
-    }
-    throw new Error(`Owned Chrome DevTools endpoint was not published (${lastErr})`);
-}
-export async function withChromeStartupLock(fn, opts = {}) {
-    const lockDir = opts.lockDir ?? "/tmp/trusty-squire-chrome-start.lock";
-    const deadlineMs = opts.deadlineMs ?? 60_000;
-    const deadline = Date.now() + deadlineMs;
-    for (;;) {
-        try {
-            mkdirSync(lockDir);
-            break;
-        }
-        catch (err) {
-            try {
-                const ageMs = Date.now() - statSync(lockDir).mtimeMs;
-                if (ageMs > 120_000) {
-                    rmSync(lockDir, { recursive: true, force: true });
-                    continue;
-                }
-            }
-            catch {
-                rmSync(lockDir, { recursive: true, force: true });
-                continue;
-            }
-            if (Date.now() >= deadline) {
-                if (deadlineMs === 0)
-                    throw new ProfileBusyError(PROFILE_BUSY_MESSAGE);
-                throw new Error(`Timed out waiting for Chrome startup lock at ${lockDir}: ${err instanceof Error ? err.message : String(err)}`);
-            }
-            await new Promise((resolve) => setTimeout(resolve, 100));
-        }
-    }
-    try {
-        return await fn();
-    }
-    finally {
-        rmSync(lockDir, { recursive: true, force: true });
-    }
-}
-const selfManagedChromes = new Map();
-const ownedChromeProcessTrees = new Set();
-let selfManagedCleanupInstalled = false;
-let selfManagedTerminationSignalExitEnabled = true;
-function cleanupSelfManagedChromes() {
-    for (const proof of ownedChromeProcessTrees) {
-        signalOwnedChromeProcessTree(proof.identity, proof.processGroup, "SIGKILL", { proof });
-        untrackOwnerProcess(proof.identity);
-    }
-    selfManagedChromes.clear();
-}
-const exitForSelfManagedSignal = (code) => {
-    cleanupSelfManagedChromes();
-    process.exit(128 + code);
-};
-const onSelfManagedSigint = () => exitForSelfManagedSignal(2);
-const onSelfManagedSigterm = () => exitForSelfManagedSignal(15);
-const onSelfManagedSighup = () => exitForSelfManagedSignal(1);
-const selfManagedTerminationSignalHandlers = [
-    ["SIGHUP", onSelfManagedSighup],
-    ["SIGINT", onSelfManagedSigint],
-    ["SIGTERM", onSelfManagedSigterm],
-];
-export function synchronizeSelfManagedChromeTerminationSignalHandlers(enabled, runtime = process) {
-    for (const [signal, handler] of selfManagedTerminationSignalHandlers) {
-        if (enabled)
-            runtime.once(signal, handler);
-        else
-            runtime.removeListener(signal, handler);
-    }
-}
-// Whether the self-managed termination-signal handlers may exit the process.
-// False means another shutdown owner (the MCP server's disconnect coordinator,
-// or an in-flight interactive login) holds process-exit responsibility.
-export function isSelfManagedChromeTerminationSignalExitEnabled() {
-    return selfManagedTerminationSignalExitEnabled;
-}
-export function setSelfManagedChromeTerminationSignalExitEnabled(enabled) {
-    if (selfManagedTerminationSignalExitEnabled === enabled)
-        return;
-    selfManagedTerminationSignalExitEnabled = enabled;
-    if (!selfManagedCleanupInstalled)
-        return;
-    synchronizeSelfManagedChromeTerminationSignalHandlers(enabled);
-}
-function installSelfManagedChromeCleanup() {
-    if (selfManagedCleanupInstalled)
-        return;
-    selfManagedCleanupInstalled = true;
-    process.once("exit", cleanupSelfManagedChromes);
-    if (selfManagedTerminationSignalExitEnabled) {
-        synchronizeSelfManagedChromeTerminationSignalHandlers(true);
-    }
-}
-function registerSelfManagedChrome(child, profileDir, processGroup = false) {
-    installSelfManagedChromeCleanup();
-    const identity = child.pid === undefined ? null : profileProcessIdentity(child.pid, profileDir);
-    if (identity !== null) {
-        const proof = trackOwnedChromeProcessTree(identity, processGroup);
-        if (proof !== null) {
-            const marker = proof.identity.process_marker;
-            if (marker !== undefined && !bindOwnerBrowserLaunch(marker, proof.identity)) {
-                releaseOwnedChromeProcessTree(proof);
-                throw new Error("local browser launch identity could not be bound to owner custody");
-            }
-            selfManagedChromes.set(identity.pid, { identity, processGroup, proof });
-        }
-    }
-    child.once("exit", () => {
-        if (child.pid === undefined)
-            return;
-        const tracked = selfManagedChromes.get(child.pid);
-        if (tracked === undefined)
-            return;
-        if (ownedChromeProcessTreeState(tracked.proof) === "stale") {
-            releaseOwnedChromeProcessTree(tracked.proof);
-            selfManagedChromes.delete(child.pid);
-        }
-    });
-    return identity;
-}
-async function waitForTrackedProfileChildIdentity(child, profileDir, readIdentity, timeoutMs, pollMs, processGroup = false) {
-    const deadline = Date.now() + timeoutMs;
-    while (childProcessIsRunning(child)) {
-        const identity = child.pid === undefined ? null : readIdentity(child.pid, profileDir);
-        if (identity !== null) {
-            const existing = selfManagedChromes.get(identity.pid);
-            const proof = existing?.identity.start_time === identity.start_time
-                ? existing.proof
-                : trackOwnedChromeProcessTree(identity, processGroup);
-            if (proof !== null)
-                selfManagedChromes.set(identity.pid, { identity, processGroup, proof });
-            return identity;
-        }
-        if (Date.now() >= deadline)
-            return null;
-        await new Promise((resolveWait) => {
-            const timer = setTimeout(resolveWait, Math.min(pollMs, Math.max(1, deadline - Date.now())));
-            timer.unref();
-        });
-    }
-    return null;
-}
-export async function resolveAttachedProfileChildIdentity(child, profileDir, identity, options = {}) {
-    if (identity !== null || (options.platform ?? process.platform) !== "linux")
-        return identity;
-    return await waitForTrackedProfileChildIdentity(child, profileDir, options.readIdentity ?? profileProcessIdentity, options.identityTimeoutMs ?? PROFILE_IDENTITY_PROOF_TIMEOUT_MS, options.identityPollMs ?? PROFILE_IDENTITY_POLL_MS, options.processGroup ?? false);
-}
-// Call this ONLY for a Chrome child spawned with detached:true. The identity
-// check protects against PID reuse, then POSIX negative-PID signalling reaches
-// Chrome's renderer/GPU/helper tree in one operation. A normal profile-root
-// signal remains the portable fallback for launchPersistentContext and Windows.
-export function signalOwnedChromeProcessTree(identity, processGroup, signal, options = {}) {
-    const profileMatches = options.profileMatches ?? profileProcessMatches;
-    const kill = options.kill ?? process.kill;
-    const proof = options.proof ??
-        captureOwnedChromeProcessTreeProof(identity, processGroup, {
-            profileMatches,
-            ...(options.platform === undefined ? {} : { platform: options.platform }),
-            ...(options.processTreePids === undefined
-                ? {}
-                : { processTreePids: options.processTreePids }),
-            ...(options.readBirthIdentity === undefined
-                ? {}
-                : { readBirthIdentity: options.readBirthIdentity }),
-        });
-    if (proof === null)
-        return false;
-    const platform = options.platform ?? process.platform;
-    const memberState = options.memberState ?? processBirthIdentityState;
-    const matchingMembers = proof.members.filter((member) => memberState(member) === "matching");
-    const matchingGroupMember = proof.processGroup && platform !== "win32"
-        ? matchingMembers.some((member) => platform !== "linux" ||
-            (options.processGroupId ?? linuxProcessGroupId)(member.pid) === proof.identity.pid)
-        : false;
-    if (matchingGroupMember) {
-        try {
-            kill(-proof.identity.pid, signal);
-            return true;
-        }
-        catch {
-            // A process may exit between the proof and the signal. Fall through to
-            // the root PID only while it is still identity-proven.
-        }
-    }
-    let signalled = false;
-    // Signal leaves first. This covers the Playwright persistent-context fallback
-    // (including chrome-headless-shell), whose child is not a detached process
-    // group leader but whose renderer tree is still rooted at the identity-proven
-    // browser PID.
-    for (const member of [...proof.members].reverse()) {
-        if (memberState(member) !== "matching")
-            continue;
-        try {
-            kill(member.pid, signal);
-            signalled = true;
-        }
-        catch {
-            // A child can naturally exit while the tree is being walked.
-        }
-    }
-    return signalled;
-}
-export function captureOwnedChromeProcessTreeProof(identity, processGroup, options = {}) {
-    const profileMatches = options.profileMatches ?? profileProcessMatches;
-    if (!profileMatches(identity, identity.user_data_dir))
-        return null;
-    const platform = options.platform ?? process.platform;
-    const pids = platform === "linux"
-        ? (options.processTreePids ?? linuxProcessTreePids)(identity.pid)
-        : [identity.pid];
-    const readBirthIdentity = options.readBirthIdentity ?? processBirthIdentity;
-    const members = pids.flatMap((pid) => {
-        if (pid === identity.pid)
-            return [{ pid, start_time: identity.start_time }];
-        const member = readBirthIdentity(pid);
-        return member === null ? [] : [member];
-    });
-    if (!members.some((member) => member.pid === identity.pid)) {
-        members.unshift({ pid: identity.pid, start_time: identity.start_time });
-    }
-    return { identity, processGroup, members };
-}
-function trackOwnedChromeProcessTree(identity, processGroup) {
-    installSelfManagedChromeCleanup();
-    const marker = operatorBrowserProcessMarker(identity.pid);
-    const trackedIdentity = marker === null ? identity : { ...identity, process_marker: marker };
-    const proof = captureOwnedChromeProcessTreeProof(trackedIdentity, processGroup);
-    if (proof === null)
-        return null;
-    ownedChromeProcessTrees.add(proof);
-    trackOwnerProcess(proof.identity);
-    return proof;
-}
-function releaseOwnedChromeProcessTree(proof) {
-    if (proof === null)
-        return;
-    ownedChromeProcessTrees.delete(proof);
-    untrackOwnerProcess(proof.identity);
-}
-export function ownedChromeProcessTreeState(proof, options = {}) {
-    const memberState = options.memberState ?? processBirthIdentityState;
-    let sawUnknown = false;
-    for (const member of proof.members) {
-        const state = memberState(member);
-        if (state === "matching")
-            return "matching";
-        if (state === "unknown")
-            sawUnknown = true;
-    }
-    return sawUnknown ? "unknown" : "stale";
-}
-function linuxProcessGroupId(pid) {
-    try {
-        const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
-        const closeParen = stat.lastIndexOf(")");
-        if (closeParen < 0)
-            return null;
-        const processGroupId = Number(stat
-            .slice(closeParen + 2)
-            .trim()
-            .split(/\s+/)[2]);
-        return Number.isSafeInteger(processGroupId) ? processGroupId : null;
-    }
-    catch {
-        return null;
-    }
-}
-function linuxProcessTreePids(rootPid) {
-    try {
-        const childrenByParent = new Map();
-        for (const entry of readdirSync("/proc")) {
-            if (!/^\d+$/.test(entry))
-                continue;
-            const pid = Number(entry);
-            try {
-                const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
-                const closeParen = stat.lastIndexOf(")");
-                if (closeParen < 0)
-                    continue;
-                const parentPid = Number(stat
-                    .slice(closeParen + 2)
-                    .trim()
-                    .split(/\s+/)[1]);
-                if (!Number.isSafeInteger(parentPid))
-                    continue;
-                const children = childrenByParent.get(parentPid) ?? [];
-                children.push(pid);
-                childrenByParent.set(parentPid, children);
-            }
-            catch {
-                // Processes leave /proc constantly; a partial tree is still safer than
-                // abandoning the profile-root browser after a failed close.
-            }
-        }
-        const pids = [];
-        const pending = [rootPid];
-        const seen = new Set();
-        while (pending.length > 0) {
-            const pid = pending.pop();
-            if (seen.has(pid))
-                continue;
-            seen.add(pid);
-            pids.push(pid);
-            for (const child of childrenByParent.get(pid) ?? [])
-                pending.push(child);
-        }
-        return pids;
-    }
-    catch {
-        return [rootPid];
-    }
-}
-export async function terminateTrackedProfileChild(child, profileDir, options = {}) {
-    const readIdentity = options.readIdentity ?? profileProcessIdentity;
-    const terminate = options.terminate ??
-        ((ownedIdentity, ownedProfileDir) => {
-            const signalled = signalProfileProcess(ownedIdentity, ownedProfileDir, "SIGKILL");
-            reapProfileHolderIfOwned(ownedProfileDir, ownedIdentity);
-            return signalled;
-        });
-    let identity = options.identity ?? null;
-    if (identity === null && (options.platform ?? process.platform) !== "linux")
-        return null;
-    while (childProcessIsRunning(child)) {
-        identity ??= await waitForTrackedProfileChildIdentity(child, profileDir, readIdentity, options.identityTimeoutMs ?? PROFILE_IDENTITY_PROOF_TIMEOUT_MS, options.identityPollMs ?? PROFILE_IDENTITY_POLL_MS, options.processGroup ?? false);
-        if (identity === null)
-            break;
-        const existing = selfManagedChromes.get(identity.pid);
-        const proof = existing?.identity.start_time === identity.start_time
-            ? existing.proof
-            : trackOwnedChromeProcessTree(identity, options.processGroup ?? false);
-        if (proof !== null) {
-            selfManagedChromes.set(identity.pid, {
-                identity,
-                processGroup: options.processGroup ?? false,
-                proof,
-            });
-        }
-        const terminated = terminate(identity, profileDir);
-        if (!terminated) {
-            identity = null;
-            continue;
-        }
-        while (childProcessIsRunning(child)) {
-            await new Promise((resolveWait) => {
-                const timer = setTimeout(resolveWait, 25);
-                timer.unref();
-            });
-        }
-    }
-    return identity;
-}
 // Classify an anti-bot interstitial page from its (title + body) text.
 // `onInterstitial` matches the static Cloudflare/Turnstile challenge copy.
 // `verificationPassed` is the signal the challenge SUCCEEDED — but
@@ -2569,14 +1895,6 @@ export function stripCloudflareChallengeParams(rawUrl) {
     }
     return changed ? u.toString() : null;
 }
-export function childProcessIsRunning(child) {
-    return child !== null && child.exitCode === null && child.signalCode === null;
-}
-function profileCollisionFromStderr(stderr) {
-    return /ProcessSingleton|SingletonLock|profile.*in use/i.test(stderr)
-        ? new ProfileBusyError(PROFILE_BUSY_MESSAGE)
-        : null;
-}
 // The signal that quits the plain login browser.
 //
 // It MUST NOT be SIGTERM. Chrome routes SIGTERM to its "session ending" path,
@@ -2761,116 +2079,204 @@ export async function launchPlainLoginBrowser(params) {
         marker: launchMarker,
     };
 }
-export class BrowserController {
-    // A persistent browser context backed by the user's real Chrome profile.
-    context = null;
-    page = null;
-    checkoutCardGroupScope;
-    checkoutOutcomeBaseline;
-    paymentInstrumentExpectation;
-    observedPaymentInstrumentMismatch;
-    checkoutSubmitSequence = 0;
-    clickDispatchSequence = 0;
-    mainDocumentSequence = 0;
-    mainDocumentIdentities = new WeakMap();
-    trackedMainDocumentPages = new WeakSet();
-    // The page start() configured with the controller's navigation/captcha
-    // handlers. OAuth may temporarily switch `this.page` to a popup, but session
-    // reuse must always restore this original page rather than adopting a popup
-    // whose lifecycle handlers were never installed.
-    primaryPage = null;
-    // Tabs the PAGE opened (target=_blank / window.open) since the operator armed
-    // adoption for an action, oldest first. A real user lands on the tab their
-    // click opened — an email magic-link button in Gmail is the case this exists
-    // for — so the operator has to follow it too. Reading the link's href instead
-    // is not an option: a single-use login token is sealed and must never be
-    // handed to the model as text.
-    openedTabs = [];
-    // Self-launch path (Turnstile-safe; see selfLaunchEnabled). When we spawn
-    // Chrome ourselves and attach over CDP, these hold the child process and
-    // the connected Browser so close() can tear both down.
-    childChrome = null;
-    childChromeIdentity = null;
-    childChromeProcessGroup = false;
-    ownedDisplayRig = null;
-    ownedChromeProcessTreeProof = null;
-    operatorProcessMarker = null;
-    ownerLaunchTracked = false;
-    cdpBrowser = null;
-    // True once a local browser context launched this session.
-    launchedContext = false;
-    launchedProfileHolderIdentity = null;
-    startPromise = null;
-    closePromise = null;
-    startCancellationRequested = false;
-    startLaunchCommitted = false;
-    startSettled = false;
-    persistentFallbackLaunchInFlight = false;
-    persistentFallbackOwnershipMonitor = null;
-    persistentFallbackCancellationState = null;
-    resolveStartCancellation = null;
-    startCancellation = new Promise((resolveCancellation) => {
-        this.resolveStartCancellation = resolveCancellation;
-    });
-    cancelledStartReaper = null;
-    humanize;
-    // Tracks the simulated mouse position so successive clicks can move
-    // along a continuous path (humans don't teleport between clicks).
-    mouseX = 100;
-    mouseY = 100;
-    // Records the browser channel that .start() actually launched. Set
-    // post-launch so telemetry can surface "this run
-    // used real Chrome" vs "this run used bundled Chromium." Useful for
-    // separating fingerprint regressions from network regressions when
-    // a service starts failing.
-    launchedChannel = null;
-    // The proxy server this run egressed through, or null for a direct
-    // connection. Set by .start(); surfaced via the `proxied` getter —
-    // a captcha failure behind a residential proxy is materially
-    // different signal from the same failure on a raw datacenter IP.
-    proxyServer = null;
-    // Optional live provider of the session's current allowed hosts, used by the
-    // fail-fast request-scope guard. Set by provision-session once a session
-    // exists so the guard auto-scopes same-registrable-domain merchant API
-    // siblings and fails-fast on genuinely out-of-scope in-page API calls. When
-    // null/never set (harness replay, non-session use) the guard is inert.
-    hostScopeAllowedHostsProvider = null;
-    operationScopedAllowedHosts = new Map();
-    hostScopeGuardInstallation = null;
-    // Feed the current session's allowed hosts to the request-scope guard. Read
-    // lazily per request, so allow_host / auto-widen updates take effect without
-    // re-registering the route. Registers the single fail-fast route handler on
-    // the first call — so the guard is only ever active for real operator
-    // sessions, never for harness/replay or non-session browsers.
-    async setHostScopeAllowedHosts(provider, siblingDomainProvider = provider) {
-        this.hostScopeAllowedHostsProvider = () => ({
-            allowedHosts: [...provider(), ...this.operationScopedAllowedHosts.keys()],
-            siblingDomainHosts: siblingDomainProvider(),
-        });
-        this.hostScopeGuardInstallation ??= this.installHostScopeGuard().catch((error) => {
-            this.hostScopeGuardInstallation = null;
-            throw error;
+// Dev-runtime guard: when the bot is run through `tsx`, esbuild may inject
+// calls to its `__name(fn, "name")` helper into functions passed to
+// page.evaluate/addInitScript. Those functions execute in the browser page,
+// where Node's helper does not exist, causing an immediate
+// `ReferenceError: __name is not defined` before the real signup even
+// starts. Define the same no-op helper in every document. Built `dist`
+// should not emit these calls, but the helper is harmless there too.
+const EVALUATE_NAME_SHIM_SCRIPT = 'Object.defineProperty(globalThis, "__name", { value: (fn) => fn, configurable: true });';
+// rc.33 / 2026-06-04 — spoof the WebGL UNMASKED vendor+renderer toward a
+// stock Intel GPU, so the software Mesa/llvmpipe string (--enable-unsafe-
+// swiftshader gives us a context, but llvmpipe is itself a VM/headless
+// tell) doesn't read through. Applied TWO ways because patchright
+// (hardened) isolates document-start scripts from the page's main world:
+//   • addInitScript — document-start; the effective path in the stealth
+//     BASELINE (non-patchright).
+//   • re-applied via page.evaluate on every navigation — the ONLY path that
+//     reaches the MAIN world under patchright. MEASURED 2026-06-04:
+//     addInitScript AND raw CDP Page.addScriptToEvaluateOnNewDocument both
+//     land in patchright's isolated world (renderer stayed llvmpipe);
+//     page.evaluate does not (renderer became Intel), and the v3 score held
+//     at 1.0. Idempotent via a marker so the per-nav re-apply is cheap, and
+//     getParameter.toString() is masked to the original native source so
+//     the patch itself isn't a tell. Only strings change, not rendering.
+const INSTALL_WEBGL_SPOOF_SCRIPT = String.raw `(() => {
+      const VENDOR_WEBGL = 0x9245; // UNMASKED_VENDOR_WEBGL
+      const RENDERER_WEBGL = 0x9246; // UNMASKED_RENDERER_WEBGL
+      const spoof = (proto) => {
+        // The marker lives on the prototype so re-application is a no-op; the
+        // cast is the one typed-alternative-exhausted spot (adding an ad-hoc
+        // brand to a DOM prototype).
+        if (proto.__tsWebglPatched === true) return;
+        const orig = proto.getParameter;
+        const native = orig.toString();
+        proto.getParameter = function (p) {
+          if (p === VENDOR_WEBGL) return "Google Inc. (Intel)";
+          if (p === RENDERER_WEBGL) {
+            return "ANGLE (Intel, Mesa Intel(R) UHD Graphics 620 (KBL GT2), OpenGL 4.6)";
+          }
+          return orig.call(this, p);
+        };
+        Object.defineProperty(proto.getParameter, "toString", {
+          value: () => native,
+          configurable: true,
+          writable: true,
         });
-        await this.hostScopeGuardInstallation;
-    }
-    async withTemporaryHostScopeAllowedHosts(hosts, operation) {
-        const normalized = [...new Set(hosts.map((host) => host.trim().toLowerCase()).filter(Boolean))];
-        for (const host of normalized) {
-            this.operationScopedAllowedHosts.set(host, (this.operationScopedAllowedHosts.get(host) ?? 0) + 1);
-        }
-        try {
-            return await operation();
-        }
-        finally {
-            for (const host of normalized) {
-                const remaining = (this.operationScopedAllowedHosts.get(host) ?? 1) - 1;
-                if (remaining <= 0)
-                    this.operationScopedAllowedHosts.delete(host);
-                else
-                    this.operationScopedAllowedHosts.set(host, remaining);
-            }
-        }
-    }
+        proto.__tsWebglPatched = true;
+      };
+      if (typeof WebGLRenderingContext !== "undefined") {
+        spoof(WebGLRenderingContext.prototype);
+      }
+      if (typeof WebGL2RenderingContext !== "undefined") {
+        spoof(WebGL2RenderingContext.prototype);
+      }
+      // Device-tell normalization. The headless harvester box reports 20
+      // logical cores (navigator.hardwareConcurrency) — a consumer residential
+      // device is 4-16. A 20-core Linux machine behind a "residential" IP is
+      // an internal inconsistency Cloudflare Turnstile scores against
+      // (MEASURED 2026-06-11: exa/cartesia Turnstile won't issue a token on a
+      // clean-fingerprint click; hwConcurrency=20 + Linux is the standout
+      // anomaly). Normalize to a common consumer profile. Same per-nav main-
+      // world application as the WebGL spoof — patchright denies init-world
+      // reach, and Turnstile reads these after the challenge script loads
+      // (seconds in), so the framenavigated re-apply wins the race. Defined on
+      // Navigator.prototype (where the native getters live) so there's no own-
+      // property tell on the instance.
+      const navProto = Navigator.prototype;
+      if (navProto.__tsDevicePatched !== true) {
+        try {
+          Object.defineProperty(Navigator.prototype, "hardwareConcurrency", {
+            get: () => 8,
+            configurable: true,
+          });
+          Object.defineProperty(Navigator.prototype, "deviceMemory", {
+            get: () => 8,
+            configurable: true,
+          });
+          // Screen availHeight tell: a virtual screen reports
+          // availHeight == height (no OS taskbar), whereas a real Windows
+          // desktop reserves ~40px for the taskbar (availHeight = height-40,
+          // availWidth = width). Reinstate that gap so the screen reads like
+          // an ordinary desktop, not a bare framebuffer. Guarded so it only
+          // applies when the two are currently equal (i.e. headless).
+          try {
+            if (screen.availHeight === screen.height) {
+              Object.defineProperty(Screen.prototype, "availHeight", {
+                get: () => screen.height - 40,
+                configurable: true,
+              });
+            }
+          } catch {
+            // leave it
+          }
+          navProto.__tsDevicePatched = true;
+        } catch {
+          // descriptor already locked by something else — leave it.
+        }
+      }
+    })();`;
+export class BrowserController {
+    get context() {
+        return this.processOwner.context;
+    }
+    set context(value) {
+        this.processOwner.context = value;
+    }
+    get page() {
+        return this.pageDriver.page;
+    }
+    set page(value) {
+        this.pageDriver.page = value;
+    }
+    get primaryPage() {
+        return this.pageDriver.primaryPage;
+    }
+    set primaryPage(value) {
+        this.pageDriver.primaryPage = value;
+    }
+    get oauthProductPage() {
+        return this.pageDriver.oauthProductPage;
+    }
+    set oauthProductPage(value) {
+        this.pageDriver.oauthProductPage = value;
+    }
+    get oauthProviderPage() {
+        return this.pageDriver.oauthProviderPage;
+    }
+    set oauthProviderPage(value) {
+        this.pageDriver.oauthProviderPage = value;
+    }
+    get oauthProviderPageClosed() {
+        return this.pageDriver.oauthProviderPageClosed;
+    }
+    set oauthProviderPageClosed(value) {
+        this.pageDriver.oauthProviderPageClosed = value;
+    }
+    get harnessAttachedPage() {
+        return this.pageDriver.harnessAttachedPage;
+    }
+    set harnessAttachedPage(value) {
+        this.pageDriver.harnessAttachedPage = value;
+    }
+    get ownedPages() {
+        return this.pageDriver.ownedPages;
+    }
+    checkoutCardGroupScope;
+    checkoutOutcomeBaseline;
+    paymentInstrumentExpectation;
+    observedPaymentInstrumentMismatch;
+    checkoutSubmitSequence = 0;
+    clickDispatchSequence = 0;
+    humanize;
+    // Tracks the simulated mouse position so successive clicks can move
+    // along a continuous path (humans don't teleport between clicks).
+    mouseX = 100;
+    mouseY = 100;
+    // Optional live provider of the session's current allowed hosts, used by the
+    // fail-fast request-scope guard. Set by provision-session once a session
+    // exists so the guard auto-scopes same-registrable-domain merchant API
+    // siblings and fails-fast on genuinely out-of-scope in-page API calls. When
+    // null/never set (harness replay, non-session use) the guard is inert.
+    hostScopeAllowedHostsProvider = null;
+    operationScopedAllowedHosts = new Map();
+    hostScopeGuardInstallation = null;
+    hostScopeGuardHandler = null;
+    // Feed the current session's allowed hosts to the request-scope guard. Read
+    // lazily per request, so allow_host / auto-widen updates take effect without
+    // re-registering the route. Registers the single fail-fast route handler on
+    // the first call — so the guard is only ever active for real operator
+    // sessions, never for harness/replay or non-session browsers.
+    async setHostScopeAllowedHosts(provider, siblingDomainProvider = provider) {
+        this.hostScopeAllowedHostsProvider = () => ({
+            allowedHosts: [...provider(), ...this.operationScopedAllowedHosts.keys()],
+            siblingDomainHosts: siblingDomainProvider(),
+        });
+        this.hostScopeGuardInstallation ??= this.installHostScopeGuard().catch((error) => {
+            this.hostScopeGuardInstallation = null;
+            throw error;
+        });
+        await this.hostScopeGuardInstallation;
+    }
+    async withTemporaryHostScopeAllowedHosts(hosts, operation) {
+        const normalized = [...new Set(hosts.map((host) => host.trim().toLowerCase()).filter(Boolean))];
+        for (const host of normalized) {
+            this.operationScopedAllowedHosts.set(host, (this.operationScopedAllowedHosts.get(host) ?? 0) + 1);
+        }
+        try {
+            return await operation();
+        }
+        finally {
+            for (const host of normalized) {
+                const remaining = (this.operationScopedAllowedHosts.get(host) ?? 1) - 1;
+                if (remaining <= 0)
+                    this.operationScopedAllowedHosts.delete(host);
+                else
+                    this.operationScopedAllowedHosts.set(host, remaining);
+            }
+        }
+    }
     // Defect-A fail-fast request-scope guard. Only XHR/fetch subresource API
     // calls are scope-guarded; page-load resources (scripts/styles/images/frames)
     // always continue, so a legitimate render is never broken by the guard. A
@@ -2881,12 +2287,28 @@ export class BrowserController {
     // request that never resolved — wedging the page with an infinite spinner.
     // Here it is aborted with a real net error so the page's fetch/XHR rejects
     // promptly and the site's own error handling runs.
+    //
+    // The route is CONTEXT-scoped. With TRUSTY_SQUIRE_EXPERIMENTAL_MULTISESSION
+    // off (the shipped default) every request is judged here unconditionally,
+    // exactly as it always was. Under the flag every session sharing the
+    // context has its own guard here and Playwright runs them all for every
+    // request, so a request from a page another session's OwnedPages has
+    // positively claimed is handed on untouched for that session's guard to
+    // judge. A page nobody has claimed (every popup, between its first
+    // navigation commit and the opener's "popup" event), or one whose page
+    // can't be resolved (service-worker requests have no frame), is still
+    // judged here fail-closed.
     async installHostScopeGuard() {
         const ctx = this.context;
         if (ctx === null)
             throw new Error("Browser not started");
-        await ctx.route("**/*", async (route) => {
+        const pageAware = experimentalMultiSessionEnabled();
+        const handler = async (route) => {
             try {
+                if (pageAware && this.requestPageClaimedByAnotherSession(route)) {
+                    await route.fallback();
+                    return;
+                }
                 const url = route.request().url();
                 const type = route.request().resourceType();
                 const scope = this.hostScopeAllowedHostsProvider?.() ?? null;
@@ -2899,689 +2321,112 @@ export class BrowserController {
             catch {
                 await route.fallback().catch(() => undefined);
             }
-        });
-    }
-    profileDir;
-    // The replay harness owns this context so it can route the storefront from a
-    // HAR, then remove that route before checkout becomes live.
-    harnessAttachedPage = false;
-    // T6/T7 — OAuth handshake bookkeeping. Legacy startOAuth() adopts a
-    // popup window as the active page, so keep the product tab parked here
-    // until settleAfterOAuth() restores it. The operator's oauth_login action
-    // keeps the observed product page active for the click and opens a recovery
-    // tab before the provider can redirect or close either OAuth transport.
-    oauthProductPage = null;
-    oauthProviderPage = null;
-    oauthProviderPageClosed = false;
-    // Surfaced in the run trail so operators can distinguish local headed,
-    // remote, and headless launches.
-    launchedMode = "unknown";
-    get launchMode() {
-        return this.launchedMode;
-    }
-    constructor(opts = {}) {
-        this.humanize = opts.humanize ?? true;
-        this.profileDir = opts.profileDir ?? "";
-        this.proxyOverride =
-            opts.proxyUrl !== undefined && opts.proxyUrl.trim().length > 0 ? opts.proxyUrl.trim() : null;
-    }
-    trackMainDocument(page) {
-        if (this.trackedMainDocumentPages.has(page))
-            return;
-        this.trackedMainDocumentPages.add(page);
-        this.mainDocumentIdentities.set(page, ++this.mainDocumentSequence);
-        // A REPLACED main document advances the identity; a same-document History
-        // API navigation does not. Playwright emits `framenavigated` for both, so
-        // keying on it made every `history.replaceState` inside an SPA checkout
-        // retire every operator ref mid-form — the identity churned faster than a
-        // multi-field address block could be filled. `domcontentloaded` fires once
-        // per real main-frame document (playwright's client `Frame` gates it on
-        // `!this._parentFrame`), which is exactly the document-replacement signal.
-        // A same-document route change to a genuinely different logical page is
-        // still caught by the observation epoch's normalized origin+pathname fold
-        // (compactV2EpochDoc), which is the backstop this narrowing relies on.
-        page.on("domcontentloaded", () => {
-            this.mainDocumentIdentities.set(page, ++this.mainDocumentSequence);
-        });
-    }
-    mainDocumentIdentity() {
-        const page = this.page;
-        if (page === null)
-            return "none";
-        this.trackMainDocument(page);
-        return String(this.mainDocumentIdentities.get(page));
-    }
-    /** Attach normal controller behavior to a harness-owned Playwright page. */
-    static fromHarnessPage(page) {
-        const controller = new BrowserController({ humanize: false });
-        controller.context = page.context();
-        controller.page = page;
-        controller.primaryPage = page;
-        controller.trackMainDocument(page);
-        controller.trackOpenedTabs(page.context());
-        controller.harnessAttachedPage = true;
-        controller.launchedMode = "headless";
-        return controller;
-    }
-    // Record every page the CONTEXT opens. Covers window.open popups and
-    // target=_blank tabs alike; Playwright emits the same context-level "page"
-    // event for both.
-    trackOpenedTabs(context) {
-        context.on("page", (page) => {
-            this.trackMainDocument(page);
-            this.openedTabs.push(page);
-            // Bounded: adoption only ever reads the newest followable entry, and a
-            // controller driven by something other than the operator's click path
-            // never arms (and so never drains) this queue.
-            if (this.openedTabs.length > 8)
-                this.openedTabs.splice(0, this.openedTabs.length - 8);
-        });
-    }
-    // Per-launch egress override. null means direct egress. Explicit overrides
-    // are never subject to host-network classification.
-    proxyOverride;
-    operatorBrowserMarker() {
-        this.operatorProcessMarker ??= createOperatorBrowserMarker();
-        return this.operatorProcessMarker;
-    }
-    async ownedHeadedBrowserEnvironment() {
-        if (this.ownedDisplayRig === null) {
-            const { createXvfbDisplayRig, startRemoteLoginDisplay } = await import("./remote-login-display.js");
-            const rig = createXvfbDisplayRig();
-            this.ownedDisplayRig = rig;
-            await startRemoteLoginDisplay(rig);
-        }
-        const { remoteLoginEnvironment } = await import("./remote-login-display.js");
-        const rig = this.ownedDisplayRig;
-        if (rig === null)
-            throw new Error("headed operator display did not start");
-        return remoteLoginEnvironment(rig, process.env);
-    }
-    async teardownOwnedDisplay() {
-        const rig = this.ownedDisplayRig;
-        this.ownedDisplayRig = null;
-        if (rig === null)
-            return;
-        const { teardownRemoteLoginRig } = await import("./remote-login-display.js");
-        await teardownRemoteLoginRig(rig);
-    }
-    adoptOwnedChromeProcessTree(identity, processGroup) {
-        if (this.ownedChromeProcessTreeProof?.identity.pid === identity.pid &&
-            this.ownedChromeProcessTreeProof.identity.start_time === identity.start_time) {
-            return this.ownedChromeProcessTreeProof;
-        }
-        const tracked = selfManagedChromes.get(identity.pid);
-        const proof = tracked?.identity.start_time === identity.start_time
-            ? tracked.proof
-            : trackOwnedChromeProcessTree(identity, processGroup);
-        if (proof !== null && this.ownerLaunchTracked) {
-            if (!bindOwnerBrowserLaunch(this.operatorBrowserMarker(), proof.identity)) {
-                releaseOwnedChromeProcessTree(proof);
-                throw new Error("local browser launch identity could not be bound to owner custody");
-            }
-        }
-        if (proof !== null)
-            this.ownedChromeProcessTreeProof = proof;
-        return proof;
-    }
-    signalCurrentSelfManagedChrome(identity, signal) {
-        return signalOwnedChromeProcessTree(identity, this.childChromeProcessGroup, signal, {
-            ...(this.ownedChromeProcessTreeProof === null
-                ? {}
-                : { proof: this.ownedChromeProcessTreeProof }),
-        });
-    }
-    // Required health gate for a live session browser. BrowserContext alone is not a
-    // sufficient signal: a dead CDP transport can leave stale JS objects behind.
-    isConnected() {
-        const browser = this.cdpBrowser ?? this.context?.browser() ?? null;
-        return browser?.isConnected() === true;
+        };
+        await ctx.route("**/*", handler);
+        this.hostScopeGuardHandler = handler;
     }
-    // Which browser channel the most recent .start() actually used.
-    // `null` means bundled Chromium; a string like "chrome" means a
-    // real installed browser of that channel. Throws if .start() hasn't
-    // been called yet — there's no sensible default to return.
-    get channel() {
-        if (this.context === null) {
-            throw new Error("BrowserController.channel read before .start()");
+    requestPageClaimedByAnotherSession(route) {
+        try {
+            return this.ownedPages.claimedByAnother(route.request().frame().page());
         }
-        return this.launchedChannel;
-    }
-    // The proxy server the most recent .start() routed egress through,
-    // or null for a direct connection. Useful telemetry alongside
-    // `channel`. Throws if .start() hasn't run — same reason as channel.
-    get proxied() {
-        if (this.context === null) {
-            throw new Error("BrowserController.proxied read before .start()");
+        catch {
+            return false;
         }
-        return this.proxyServer;
-    }
-    // The stealth profile the most recent .start() launched under:
-    // "cdp_hardened" when the patchright launcher actually loaded
-    // (BOT_CDP_HARDENED set + patchright present), else "baseline". Surfaced
-    // for the CaptchaEvent A/B tag. Throws before .start() — same reason
-    // as channel/proxied.
-    get stealthProfile() {
-        if (this.context === null) {
-            throw new Error("BrowserController.stealthProfile read before .start()");
-        }
-        return activeStealthProfileValue();
-    }
-    // Launch Chrome ourselves and attach over CDP — the Turnstile-safe launch
-    // (see selfLaunchEnabled for the proof). The profile dir is the SAME shared
-    // profile launchPersistentContext would use, so the OAuth session carries
-    // over. Options that a default connectOverCDP context can't take at creation
-    // are applied differently:
-    //   • timezone  → TZ env on the child (more authentic than a CDP override)
-    //   • proxy     → --proxy-server flag, with credentials applied post-connect
-    //   • viewport  → --window-size (with viewport:null-equivalent: we never set
-    //                 an emulated viewport on the connected context)
-    //   • locale/geo/permissions → applied post-connect by start()
-    async launchSelfManagedContext(params) {
-        this.throwIfStartCancelled();
-        // Remote-CDP attach: BOT_CDP_ENDPOINT points at a Chrome already running on
-        // another host (e.g. a real-GPU Mac), reachable over Tailscale. We do NOT
-        // spawn or own the binary — the remote host launched it with its own
-        // profile, real GPU, and (residential) egress. Just attach over CDP. This
-        // is the real-GPU path: software-WebGL output (llvmpipe) is what
-        // hCaptcha-Enterprise-class anti-bot scores, and only real hardware fixes
-        // the rendered-pixel fingerprint that JS spoofing can't.
-        const remoteEndpoint = (process.env.BOT_CDP_ENDPOINT ?? "").trim();
-        if (remoteEndpoint.length > 0) {
-            const launcher = getChromium();
-            const browser = await launcher.connectOverCDP(remoteEndpoint);
-            this.cdpBrowser = browser;
-            this.launchedMode = "remote";
-            const ctx = browser.contexts()[0];
-            if (ctx === undefined) {
-                throw new Error(`remote Chrome (BOT_CDP_ENDPOINT=${remoteEndpoint}) exposed no default browser context`);
-            }
-            return ctx;
-        }
-        const endpoint = await (async () => {
-            this.throwIfStartCancelled();
-            clearStaleSingletonLock(this.profileDir);
-            rmSync(join(this.profileDir, DEVTOOLS_ACTIVE_PORT_FILE), { force: true });
-            const argv = [
-                "--remote-debugging-port=0",
-                "--remote-debugging-address=127.0.0.1",
-                `--user-data-dir=${this.profileDir}`,
-                "--no-first-run",
-                "--no-default-browser-check",
-                "--password-store=basic",
-                "--window-position=0,0",
-                `--window-size=${params.window.width},${params.window.height}`,
-                "--lang=en-US",
-                ...params.args,
-                ...(params.proxy !== null ? [`--proxy-server=${params.proxy.server}`] : []),
-                "about:blank",
-            ];
-            this.commitProfileLaunch();
-            const child = spawnLocalBrowser(params.binary, argv, this.profileDir, {
-                env: params.env,
-                stdio: ["ignore", "ignore", "pipe"],
-                // A dedicated process group gives the session a single, identity-
-                // proven teardown target for Chrome plus every renderer/GPU helper.
-                detached: process.platform !== "win32",
-                marker: this.operatorBrowserMarker(),
-            });
-            this.childChrome = child;
-            this.childChromeProcessGroup = process.platform !== "win32";
-            this.childChromeIdentity = registerSelfManagedChrome(child, this.profileDir, this.childChromeProcessGroup);
-            if (this.childChromeIdentity !== null) {
-                this.adoptOwnedChromeProcessTree(this.childChromeIdentity, this.childChromeProcessGroup);
-            }
-            let chromeStderr = "";
-            let chromeExit = "";
-            child.stderr?.on("data", (chunk) => {
-                chromeStderr = (chromeStderr + chunk.toString("utf8")).slice(-4_000);
-            });
-            child.on("exit", (code, signal) => {
-                chromeExit = ` exit=${code ?? "null"} signal=${signal ?? "none"}`;
-            });
-            if (this.startCancellationRequested) {
-                await this.cancelSpawnedSelfManagedChrome(child);
-                throw new Error("BrowserController start cancelled");
-            }
-            try {
-                const endpoint = await waitForOwnedDevtoolsEndpoint(this.profileDir, 30_000, child);
-                this.childChromeIdentity = await resolveAttachedProfileChildIdentity(child, this.profileDir, this.childChromeIdentity, { processGroup: this.childChromeProcessGroup });
-                if (process.platform === "linux" && this.childChromeIdentity === null) {
-                    throw new Error("self-launched Chrome exited before identity was proven");
-                }
-                if (this.childChromeIdentity !== null) {
-                    this.adoptOwnedChromeProcessTree(this.childChromeIdentity, this.childChromeProcessGroup);
-                }
-                return endpoint;
-            }
-            catch (err) {
-                const alive = this.childChromeIdentity !== null &&
-                    profileProcessMatches(this.childChromeIdentity, this.profileDir);
-                this.childChromeIdentity = await terminateTrackedProfileChild(child, this.profileDir, {
-                    identity: this.childChromeIdentity,
-                    terminate: (identity, profileDir) => {
-                        const signalled = signalOwnedChromeProcessTree(identity, this.childChromeProcessGroup, "SIGKILL", {
-                            ...(this.ownedChromeProcessTreeProof === null
-                                ? {}
-                                : { proof: this.ownedChromeProcessTreeProof }),
-                        });
-                        reapProfileHolderIfOwned(profileDir, identity);
-                        return signalled;
-                    },
-                    processGroup: this.childChromeProcessGroup,
-                });
-                this.childChrome = null;
-                this.childChromeIdentity = null;
-                this.childChromeProcessGroup = false;
-                const detail = chromeStderr.trim();
-                throw new Error(`${err instanceof Error ? err.message : String(err)}; Chrome pid=${child.pid ?? "unknown"} alive=${alive ? 1 : 0}` +
-                    `${chromeExit}${detail.length > 0 ? `; Chrome stderr: ${detail}` : ""}`);
-            }
-        })();
-        // Use the patchright launcher's connectOverCDP — it's the exact path the
-        // falsification experiment validated (its connect avoids Runtime.enable,
-        // which a plain attach would emit). The anti-detection that matters here
-        // is the LAUNCH (which we now own), not the connect.
-        const launcher = getChromium();
-        const browser = await launcher.connectOverCDP(endpoint);
-        this.cdpBrowser = browser;
-        const ctx = browser.contexts()[0];
-        if (ctx === undefined) {
-            throw new Error("self-launched Chrome exposed no default browser context");
-        }
-        return ctx;
-    }
-    async cancelSpawnedSelfManagedChrome(child) {
-        this.childChromeIdentity = await terminateTrackedProfileChild(child, this.profileDir, {
-            identity: this.childChromeIdentity,
-            terminate: (identity, profileDir) => {
-                const signalled = signalOwnedChromeProcessTree(identity, this.childChromeProcessGroup, "SIGKILL", {
-                    ...(this.ownedChromeProcessTreeProof === null
-                        ? {}
-                        : { proof: this.ownedChromeProcessTreeProof }),
-                });
-                reapProfileHolderIfOwned(profileDir, identity);
-                return signalled;
-            },
-            processGroup: this.childChromeProcessGroup,
-        });
-        if (this.childChrome === child)
-            this.childChrome = null;
-        this.childChromeIdentity = null;
-        this.childChromeProcessGroup = false;
     }
-    // Resource blocking for speed (BOT_BLOCK_RESOURCES, default OFF). Aborts
-    // image/media/font requests + known analytics/tracker hosts to cut page-load
-    // wall-clock (3-5x on byte-heavy pages; also stops trackers from holding the
-    // network "busy"). HARD ALLOW-GUARD first for captcha/challenge + payment
-    // scripts (blocking those breaks the Turnstile/hCaptcha token poll and the
-    // signup form). CSS + first-party JS are never blocked (not in BLOCK_TYPES) —
-    // the SPA form renders from them and the vision planner reads the styled
-    // render. DUAL RISK, hence default-OFF + an OF#2 A/B before flipping on:
-    //   (1) a browser that loads ZERO images is itself an anti-bot fingerprint;
-    //   (2) the screenshot the vision planner reads loses detail — mitigated
-    //       because the DOM inventory is the authoritative action space, but
-    //       still a regression risk on image-only affordances.
-    // Registered on the CONTEXT so it covers OAuth popups + iframes.
-    async installResourceBlocking() {
+    async uninstallHostScopeGuard() {
+        const handler = this.hostScopeGuardHandler;
         const ctx = this.context;
-        if (ctx === null)
-            return;
-        if (!/^(1|true|on)$/i.test(process.env.BOT_BLOCK_RESOURCES ?? ""))
+        this.hostScopeGuardHandler = null;
+        this.hostScopeGuardInstallation = null;
+        if (handler === null || ctx === null)
             return;
-        const BLOCK_TYPES = new Set(["image", "media", "font"]);
-        const BLOCK_HOSTS = [
-            "google-analytics.com",
-            "googletagmanager.com",
-            "analytics.google.com",
-            "doubleclick.net",
-            "static.hotjar.com",
-            "script.hotjar.com",
-            "segment.com",
-            "segment.io",
-            "cdn.segment.com",
-            "fullstory.com",
-            "mixpanel.com",
-            "bugsnag.com",
-            "intercom.io",
-            "intercomcdn.com",
-            "widget.intercom.io",
-            "connect.facebook.net",
-            "analytics.tiktok.com",
-            "clarity.ms",
-            "cdn.heapanalytics.com",
-            "wistia.com",
-        ];
-        // NEVER block — these break signup (captcha/challenge widgets + payment SDK).
-        const ALWAYS_ALLOW = [
-            "challenges.cloudflare.com",
-            "turnstile",
-            "hcaptcha.com",
-            "newassets.hcaptcha.com",
-            "recaptcha",
-            "gstatic.com/recaptcha",
-            "js.stripe.com",
-        ];
-        await ctx.route("**/*", async (route) => {
-            try {
-                const url = route.request().url();
-                if (ALWAYS_ALLOW.some((h) => url.includes(h))) {
-                    await route.continue();
-                    return;
-                }
-                const type = route.request().resourceType();
-                if (BLOCK_TYPES.has(type) || BLOCK_HOSTS.some((h) => url.includes(h))) {
-                    await route.abort();
-                    return;
-                }
-                await route.continue();
-            }
-            catch {
-                // Routing race / already-handled — never let a decision crash nav.
-            }
-        });
-        console.error("[operator] resource blocking ON (image/media/font + analytics aborted; captcha/CSS/JS allowed)");
+        await ctx.unroute("**/*", handler).catch(() => undefined);
     }
-    async start() {
-        if (this.profileDir.length === 0) {
-            throw new Error("BrowserController.start requires a per-session profile directory");
-        }
-        if (this.closePromise !== null)
-            throw new Error("BrowserController is already closing");
-        this.startPromise ??= this.startOnce();
-        await this.startPromise;
-    }
-    async startOnce() {
-        const remoteMode = (process.env.BOT_CDP_ENDPOINT ?? "").trim().length > 0;
-        if (!remoteMode)
-            startGlobalOperatorBrowserProcessWatchdog();
-        try {
-            await this.startBrowser();
-            if (this.startCancellationRequested) {
-                await this.closeBrowser();
-                throw new Error("BrowserController start cancelled");
-            }
-        }
-        catch (err) {
-            await this.teardownOwnedDisplay().catch(() => undefined);
-            if (this.startCancellationRequested && this.persistentFallbackCancellationState === null) {
-                await this.closeBrowser().catch(() => undefined);
-            }
-            throw err;
-        }
-        finally {
-            this.startSettled = true;
-        }
-    }
-    throwIfStartCancelled() {
-        if (this.startCancellationRequested)
-            throw new Error("BrowserController start cancelled");
-    }
-    commitProfileLaunch() {
-        this.throwIfStartCancelled();
-        this.startLaunchCommitted = true;
-    }
-    async startBrowser() {
-        this.throwIfStartCancelled();
-        const channel = await detectChromiumChannel();
-        this.throwIfStartCancelled();
-        this.launchedChannel = channel;
-        const proxy = await this.resolveProxy();
-        this.throwIfStartCancelled();
-        this.proxyServer = proxy?.server ?? null;
-        // Stderr so the MCP stdio transport's framing stays clean (the
-        // module's existing logging convention).
-        console.error(`[operator] launching browser channel=${channel ?? "bundled-chromium"} ` +
-            `proxy=${proxy === null ? "direct" : "configured"}`);
-        // Remote-CDP mode (BOT_CDP_ENDPOINT): the browser runs on a REMOTE host
-        // (e.g. a Mac with a real GPU + residential egress) and we attach over CDP
-        // across Tailscale. The remote machine IS a real device, so we spoof
-        // NOTHING — no WebGL/device fingerprint patch (a fake-Intel string over a
-        // real Apple-GPU output would be its own mismatch tell), no local display, no
-        // egress-geo override (the remote host's real timezone + residential IP are
-        // authentic). software-WebGL output is exactly what the toughest anti-bot
-        // (hCaptcha Enterprise) scores; only real hardware fixes the pixel
-        // fingerprint, which is the whole point of this path.
-        const remoteMode = (process.env.BOT_CDP_ENDPOINT ?? "").trim().length > 0;
-        if (remoteMode) {
-            console.error(`[operator] REMOTE-CDP mode — attaching to ${(process.env.BOT_CDP_ENDPOINT ?? "").trim()} ` +
-                `(real-host GPU + egress; local fingerprint spoof + display setup disabled)`);
-        }
-        if (!remoteMode && !this.ownerLaunchTracked) {
-            registerLocalBrowserLaunch(this.profileDir, process.env, this.operatorBrowserMarker());
-            this.ownerLaunchTracked = true;
-        }
-        const browserEnv = remoteMode ? process.env : await this.ownedHeadedBrowserEnvironment();
-        // T3.1: probe where this run's traffic actually exits so the
-        // browser's declared timezone matches its egress IP (a US-timezone
-        // browser on a foreign proxy IP is itself an anti-bot signal).
-        // Done before the real launch: launchPersistentContext bakes the
-        // timezone in at creation, with no way to set it afterward. Skipped in
-        // remote mode — the remote host's own clock/IP are the authentic truth.
-        const geo = remoteMode ? null : await this.probeEgressGeo(channel, proxy, browserEnv);
-        this.throwIfStartCancelled();
-        if (geo !== null) {
-            console.error(`[operator] egress geo: timezone=${geo.timezoneId}` +
-                (geo.geolocation !== undefined
-                    ? ` loc=${geo.geolocation.latitude},${geo.geolocation.longitude}`
-                    : ""));
-        }
-        // Keep the operator browser headed: the browser runs on the operator's
-        // Xvfb display, preserving the normal Chrome surface OAuth providers see.
-        this.launchedMode = "headed";
-        // T3: a PERSISTENT context backed by this operator session's unique
-        // profile. launchPersistentContext takes launch + context options in one
-        // call.
-        // Resolve the launcher first so activeStealthProfile is set before we
-        // decide on executablePath below.
-        const launcher = getChromium();
-        const hardened = activeStealthProfileValue() === "cdp_hardened";
-        // Both launchers drive real Chrome via `channel`: baseline through
-        // playwright+stealth, hardened through patchright. patchright closes
-        // the automation tells at the protocol layer and drives real Chrome
-        // directly — so it no longer needs the bundled-chromium pin the old
-        // rebrowser fork required (the pin is what crashed the OAuth flow and
-        // confounded the A/B). One binary for both arms.
-        this.launchedChannel = channel;
-        // Launch args shared by BOTH paths (launchPersistentContext and the
-        // self-launch). See the per-flag rationale: swiftshader gives a real
-        // (software) WebGL context on GPU-less hosts; the others are the
-        // standard headless/sandbox flags. The three background-throttling disables
-        // are payment correctness controls: a backgrounded CardinalCommerce ACS
-        // frame must keep running its timers long enough to finish the issuer's OOB
-        // post-approval handshake with Stripe. Keep them paired with bringToFront()
-        // before payment submission and in waitForThreeDsResolution(). NOTE we
-        // deliberately do NOT include Playwright's automation flags
-        // (--enable-automation et al.) — on the self-launch path their ABSENCE is
-        // the whole fix.
-        const launchArgs = [
-            "--disable-blink-features=AutomationControlled",
-            "--disable-background-timer-throttling",
-            "--disable-backgrounding-occluded-windows",
-            "--disable-renderer-backgrounding",
-            "--no-sandbox",
-            "--disable-dev-shm-usage",
-            "--enable-unsafe-swiftshader",
-            "--ignore-gpu-blocklist",
-        ];
-        // F10 clipboard + egress-matched geolocation permission, built once for
-        // either path. Typed as string[] (Playwright's grantPermissions /
-        // permissions option both accept it).
-        const grantedPermissions = [
-            ...(geo?.geolocation !== undefined ? ["geolocation"] : []),
-            "clipboard-read",
-            "clipboard-write",
-        ];
-        const selfLaunchBinary = selfLaunchEnabled()
-            ? (resolveChannelBinary(channel) ?? (channel === null ? launcher.executablePath() : null))
-            : null;
-        const useSelfLaunch = selfLaunchBinary !== null && existsSync(selfLaunchBinary) && canSelfLaunchWithProxy(proxy);
-        let context;
-        this.throwIfStartCancelled();
-        if (useSelfLaunch && selfLaunchBinary !== null) {
-            console.error(`[operator] self-launch + connectOverCDP (Turnstile-safe launch) binary=${selfLaunchBinary}`);
-            const window = { width: 1280, height: 1024 };
-            const selfEnv = {
-                ...browserEnv,
-                TZ: geo?.timezoneId ?? "America/New_York",
-                [OPERATOR_BROWSER_MARKER_ENV]: this.operatorBrowserMarker(),
-            };
-            const launch = () => {
-                this.throwIfStartCancelled();
-                return this.launchSelfManagedContext({
-                    binary: selfLaunchBinary,
-                    args: launchArgs,
-                    proxy,
-                    env: selfEnv,
-                    window,
-                });
-            };
-            context = await launch();
-            try {
-                await context.grantPermissions(grantedPermissions);
-                if (geo?.geolocation !== undefined) {
-                    await context.setGeolocation(geo.geolocation);
-                }
-            }
-            catch (err) {
-                console.error(`[operator] post-connect context setup partial: ${err instanceof Error ? err.message : String(err)}`);
-            }
-        }
-        else {
-            this.persistentFallbackLaunchInFlight = true;
-            this.startPersistentFallbackOwnershipMonitor();
-            const cleanupProfileHolder = async () => {
-                const proof = await this.waitForPersistentFallbackIdentity();
-                if (proof.state === "absent")
-                    return "closed";
-                if (proof.state === "unknown")
-                    return "unknown";
-                const { identity } = proof;
-                const treeProof = this.adoptOwnedChromeProcessTree(identity, false);
-                signalOwnedChromeProcessTree(identity, false, "SIGKILL", {
-                    ...(treeProof === null ? {} : { proof: treeProof }),
-                });
-                return (await this.waitForOwnedProfileExit(identity, treeProof)) ? "closed" : "unknown";
-            };
-            const cleanupCancelled = async (lateContext) => {
-                const proof = await this.waitForPersistentFallbackIdentity().catch(() => ({ state: "unknown" }));
-                if (proof.state !== "owned") {
-                    await lateContext.close().catch(() => undefined);
-                    return proof.state === "absent" ? "closed" : "unknown";
-                }
-                const { identity } = proof;
-                const treeProof = this.adoptOwnedChromeProcessTree(identity, false);
-                const closeState = await closeProfileWithProof({
-                    profileDir: this.profileDir,
-                    identity,
-                    close: () => lateContext.close(),
-                    forceClose: () => {
-                        signalOwnedChromeProcessTree(identity, false, "SIGKILL", {
-                            ...(treeProof === null ? {} : { proof: treeProof }),
-                        });
-                        reapProfileHolderIfOwned(this.profileDir, identity);
-                    },
-                    ...(treeProof === null
-                        ? {}
-                        : { identityState: () => ownedChromeProcessTreeState(treeProof) }),
-                });
-                if (closeState === "closed")
-                    return closeState;
-                return (await this.waitForOwnedProfileExit(identity, treeProof)) ? "closed" : "unknown";
-            };
-            const outcome = await (async () => {
-                try {
-                    return await launchCancellablePersistentContext({
-                        launch: (options) => launcher.launchPersistentContext(this.profileDir, options),
-                        options: {
-                            headless: OPERATOR_BROWSER_HEADLESS,
-                            env: {
-                                ...browserEnv,
-                                [OPERATOR_BROWSER_MARKER_ENV]: this.operatorBrowserMarker(),
-                            },
-                            ...(channel !== null ? { channel } : {}),
-                            ...persistentProxyOptions(proxy),
-                            args: [...launchArgs],
-                            viewport: null,
-                            locale: "en-US",
-                            timezoneId: geo?.timezoneId ?? "America/New_York",
-                            permissions: grantedPermissions,
-                            ...(geo?.geolocation !== undefined ? { geolocation: geo.geolocation } : {}),
-                        },
-                        cancellation: this.startCancellation,
-                        cleanupCancelled,
-                        cleanupRejected: cleanupProfileHolder,
-                    });
-                }
-                catch (error) {
-                    if (!this.startCancellationRequested) {
-                        this.persistentFallbackLaunchInFlight = false;
-                        throw error;
-                    }
-                    this.persistentFallbackCancellationState = await cleanupProfileHolder().catch(() => "unknown");
-                    this.persistentFallbackLaunchInFlight = false;
-                    throw new Error("BrowserController start cancelled");
-                }
-            })();
-            if (outcome.status === "cancelled") {
-                this.persistentFallbackCancellationState = outcome.closeState;
-                this.persistentFallbackLaunchInFlight = false;
-                throw new Error("BrowserController start cancelled");
-            }
-            context = outcome.value;
-            if (this.startCancellationRequested) {
-                this.persistentFallbackCancellationState = await cleanupCancelled(context).catch(() => "unknown");
-                this.persistentFallbackLaunchInFlight = false;
-                throw new Error("BrowserController start cancelled");
-            }
-            this.context = context;
-            this.launchedContext = true;
-            this.launchedProfileHolderIdentity = await this.requirePersistentFallbackOwnership(async () => {
-                markOwnerBrowserLaunchTerminal(this.operatorBrowserMarker());
-                await Promise.race([
-                    context.close().catch(() => undefined),
-                    new Promise((resolveWait) => {
-                        const timer = setTimeout(resolveWait, PERSISTENT_CONTEXT_CANCELLATION_SETTLE_MS);
-                        timer.unref();
-                    }),
-                ]);
-                const markerClosed = await terminateOwnerBrowserLaunch(this.operatorBrowserMarker(), this.profileDir);
-                if (markerClosed) {
-                    untrackOwnerBrowserLaunch(this.operatorBrowserMarker());
-                    this.ownerLaunchTracked = false;
-                }
-                this.context = null;
-                this.launchedContext = false;
-            });
-            this.commitProfileLaunch();
-            this.persistentFallbackLaunchInFlight = false;
-        }
-        this.context = context;
-        // We own the profile now — close() may reap a leaked Chrome.
-        this.launchedContext = true;
-        if (!remoteMode) {
-            const holderPid = this.childChrome?.pid ?? currentProfileHolderPid(this.profileDir);
-            this.launchedProfileHolderIdentity =
-                this.childChromeIdentity ??
-                    (holderPid === null ? null : profileProcessIdentity(holderPid, this.profileDir));
-            if (this.launchedProfileHolderIdentity !== null) {
-                this.adoptOwnedChromeProcessTree(this.launchedProfileHolderIdentity, this.childChromeIdentity !== null && this.childChromeProcessGroup);
-            }
-        }
-        if (this.startCancellationRequested) {
-            await this.closeBrowser();
-            throw new Error("BrowserController start cancelled");
-        }
+    get launchMode() {
+        return this.processOwner.launchMode;
+    }
+    processOwner;
+    pageDriver;
+    // Experimental (TRUSTY_SQUIRE_EXPERIMENTAL_MULTISESSION only — see
+    // session/lifecycle.ts). True for a controller constructed by
+    // attachSatellite(): it shares ITS PEER's BrowserProcessOwner (same Chrome
+    // process/context) rather than owning one, so start()/close() must never
+    // touch the shared process — only this controller's own page(s).
+    isSatelliteAttachment;
+    constructor(opts = {}, sharedFrom) {
+        this.humanize = opts.humanize ?? true;
+        this.pageDriver = new PageDriver(() => this.processOwner.context, this.humanize);
+        this.processOwner =
+            sharedFrom !== undefined
+                ? sharedFrom.processOwner
+                : new BrowserProcessOwner(opts, this.pageDriver, (context, hardened, remoteMode) => this.initializePages(context, hardened, remoteMode));
+        this.isSatelliteAttachment = sharedFrom !== undefined;
+    }
+    // Experimental (TRUSTY_SQUIRE_EXPERIMENTAL_MULTISESSION only). A SECOND
+    // controller sharing `primary`'s already-live BrowserProcessOwner — same
+    // Chrome process and BrowserContext — but with its OWN independent
+    // PageDriver/OwnedPages, so it owns a tab family neither the primary nor
+    // any other satellite can adopt (owned-pages.ts already refuses to
+    // register a page under a second OwnedPages instance). close() on the
+    // result only ever tears down its own page — never the shared process; see
+    // session/lifecycle.ts for the shared-teardown ordering that requires.
+    static async attachSatellite(primary, opts = {}) {
+        const satellite = new BrowserController(opts, primary);
+        await satellite.attachOwnPage();
+        return satellite;
+    }
+    // Opens and registers this controller's OWN page in the shared context.
+    // Mirrors what initializePages() does for the primary's first page — the
+    // same per-page normalization via installPageNormalization — minus the
+    // context-level setup (init scripts, resource-blocking routes), which is
+    // CONTEXT-scoped and already installed once by whichever controller
+    // launched the shared browser. The host-scope guard is NOT shared: each
+    // session installs its own via setHostScopeAllowedHosts, and under the
+    // flag the guard dispatches by page ownership so the two never judge each
+    // other's claimed pages.
+    async attachOwnPage() {
+        const ctx = this.processOwner.context;
+        if (ctx === null) {
+            throw new Error("BrowserController.attachSatellite: shared browser has no live context to attach a page to");
+        }
+        const page = await ctx.newPage();
+        this.page = page;
+        this.primaryPage = page;
+        this.trackOpenedTabs(page);
+        await this.installPageNormalization(page, this.processOwner.launchMode === "remote");
+    }
+    // Closes ONLY this controller's own page(s) — never the shared Chrome
+    // process/context. Used for every session sharing an experimental
+    // multisession identity except whichever one's finish empties the group
+    // (which still runs the real close()); see session/lifecycle.ts.
+    async closeOwnPagesOnly() {
+        // Snapshot the whole tab family — the OAuth recovery tab and any adopted
+        // popups live in OwnedPages, not just in `page` — BEFORE
+        // disposeRegistrations() drops the only map that can enumerate them.
+        const family = new Set(this.ownedPages.live());
+        for (const page of [
+            this.pageDriver.page,
+            this.pageDriver.primaryPage,
+            this.pageDriver.oauthProductPage,
+            this.pageDriver.oauthProviderPage,
+        ]) {
+            if (page !== null && !page.isClosed())
+                family.add(page);
+        }
+        await this.uninstallHostScopeGuard();
+        this.pageDriver.disposeRegistrations();
+        this.pageDriver.page = null;
+        this.pageDriver.primaryPage = null;
+        this.pageDriver.oauthProductPage = null;
+        this.pageDriver.oauthProviderPage = null;
+        this.pageDriver.oauthProviderPageClosed = false;
+        for (const page of family)
+            await page.close().catch(() => undefined);
+        return "closed";
+    }
+    async initializePages(context, hardened, remoteMode) {
         // Speed: optionally abort heavy/irrelevant requests before any navigation.
         await this.installResourceBlocking();
-        // Dev-runtime guard: when the bot is run through `tsx`, esbuild may inject
-        // calls to its `__name(fn, "name")` helper into functions passed to
-        // page.evaluate/addInitScript. Those functions execute in the browser page,
-        // where Node's helper does not exist, causing an immediate
-        // `ReferenceError: __name is not defined` before the real signup even
-        // starts. Define the same no-op helper in every document. Built `dist`
-        // should not emit these calls, but the helper is harmless there too.
-        const evaluateNameShimScript = 'Object.defineProperty(globalThis, "__name", { value: (fn) => fn, configurable: true });';
         const contextInitScripts = contextInitScriptsFor({ hardened, remoteMode });
         // Never register context init scripts under patchright. Its injection path
         // rewrites text/html after decoding the response as UTF-8, corrupting
@@ -3591,7 +2436,7 @@ export class BrowserController {
         // Baseline playwright-extra does not rewrite responses and keeps these
         // document-start installs. Regression guard: observe-jp-mojibake.test.ts.
         if (contextInitScripts.includes("evaluate-name-shim")) {
-            await context.addInitScript({ content: evaluateNameShimScript });
+            await context.addInitScript({ content: EVALUATE_NAME_SHIM_SCRIPT });
         }
         // Patch navigator.webdriver — BASELINE ONLY. Measured against the
         // rebrowser bot-detector, this manual `defineProperty` is
@@ -3604,96 +2449,6 @@ export class BrowserController {
                 Object.defineProperty(navigator, "webdriver", { get: () => undefined });
             });
         }
-        // rc.33 / 2026-06-04 — spoof the WebGL UNMASKED vendor+renderer toward a
-        // stock Intel GPU, so the software Mesa/llvmpipe string (--enable-unsafe-
-        // swiftshader gives us a context, but llvmpipe is itself a VM/headless
-        // tell) doesn't read through. Applied TWO ways because patchright
-        // (hardened) isolates document-start scripts from the page's main world:
-        //   • addInitScript — document-start; the effective path in the stealth
-        //     BASELINE (non-patchright).
-        //   • re-applied via page.evaluate on every navigation — the ONLY path that
-        //     reaches the MAIN world under patchright. MEASURED 2026-06-04:
-        //     addInitScript AND raw CDP Page.addScriptToEvaluateOnNewDocument both
-        //     land in patchright's isolated world (renderer stayed llvmpipe);
-        //     page.evaluate does not (renderer became Intel), and the v3 score held
-        //     at 1.0. Idempotent via a marker so the per-nav re-apply is cheap, and
-        //     getParameter.toString() is masked to the original native source so
-        //     the patch itself isn't a tell. Only strings change, not rendering.
-        const installWebglSpoofScript = String.raw `(() => {
-      const VENDOR_WEBGL = 0x9245; // UNMASKED_VENDOR_WEBGL
-      const RENDERER_WEBGL = 0x9246; // UNMASKED_RENDERER_WEBGL
-      const spoof = (proto) => {
-        // The marker lives on the prototype so re-application is a no-op; the
-        // cast is the one typed-alternative-exhausted spot (adding an ad-hoc
-        // brand to a DOM prototype).
-        if (proto.__tsWebglPatched === true) return;
-        const orig = proto.getParameter;
-        const native = orig.toString();
-        proto.getParameter = function (p) {
-          if (p === VENDOR_WEBGL) return "Google Inc. (Intel)";
-          if (p === RENDERER_WEBGL) {
-            return "ANGLE (Intel, Mesa Intel(R) UHD Graphics 620 (KBL GT2), OpenGL 4.6)";
-          }
-          return orig.call(this, p);
-        };
-        Object.defineProperty(proto.getParameter, "toString", {
-          value: () => native,
-          configurable: true,
-          writable: true,
-        });
-        proto.__tsWebglPatched = true;
-      };
-      if (typeof WebGLRenderingContext !== "undefined") {
-        spoof(WebGLRenderingContext.prototype);
-      }
-      if (typeof WebGL2RenderingContext !== "undefined") {
-        spoof(WebGL2RenderingContext.prototype);
-      }
-      // Device-tell normalization. The headless harvester box reports 20
-      // logical cores (navigator.hardwareConcurrency) — a consumer residential
-      // device is 4-16. A 20-core Linux machine behind a "residential" IP is
-      // an internal inconsistency Cloudflare Turnstile scores against
-      // (MEASURED 2026-06-11: exa/cartesia Turnstile won't issue a token on a
-      // clean-fingerprint click; hwConcurrency=20 + Linux is the standout
-      // anomaly). Normalize to a common consumer profile. Same per-nav main-
-      // world application as the WebGL spoof — patchright denies init-world
-      // reach, and Turnstile reads these after the challenge script loads
-      // (seconds in), so the framenavigated re-apply wins the race. Defined on
-      // Navigator.prototype (where the native getters live) so there's no own-
-      // property tell on the instance.
-      const navProto = Navigator.prototype;
-      if (navProto.__tsDevicePatched !== true) {
-        try {
-          Object.defineProperty(Navigator.prototype, "hardwareConcurrency", {
-            get: () => 8,
-            configurable: true,
-          });
-          Object.defineProperty(Navigator.prototype, "deviceMemory", {
-            get: () => 8,
-            configurable: true,
-          });
-          // Screen availHeight tell: a virtual screen reports
-          // availHeight == height (no OS taskbar), whereas a real Windows
-          // desktop reserves ~40px for the taskbar (availHeight = height-40,
-          // availWidth = width). Reinstate that gap so the screen reads like
-          // an ordinary desktop, not a bare framebuffer. Guarded so it only
-          // applies when the two are currently equal (i.e. headless).
-          try {
-            if (screen.availHeight === screen.height) {
-              Object.defineProperty(Screen.prototype, "availHeight", {
-                get: () => screen.height - 40,
-                configurable: true,
-              });
-            }
-          } catch {
-            // leave it
-          }
-          navProto.__tsDevicePatched = true;
-        } catch {
-          // descriptor already locked by something else — leave it.
-        }
-      }
-    })();`;
         // Skip under patchright (hardened) — see the mojibake note above: any
         // context.addInitScript triggers patchright's charset-lossy text/html
         // rewrite. This spoof is already re-applied per navigation via
@@ -3701,20 +2456,26 @@ export class BrowserController {
         // the ONLY path that reaches the main world under patchright anyway, so the
         // context init copy is dead weight there.
         if (contextInitScripts.includes("webgl-spoof")) {
-            await context.addInitScript({ content: installWebglSpoofScript });
+            await context.addInitScript({ content: INSTALL_WEBGL_SPOOF_SCRIPT });
         }
-        for (const page of context.pages())
-            this.trackMainDocument(page);
-        this.trackOpenedTabs(context);
         this.page = context.pages()[0] ?? (await context.newPage());
-        this.trackMainDocument(this.page);
+        this.trackOpenedTabs(this.page);
         this.primaryPage = this.page;
+        await this.installPageNormalization(this.page, remoteMode);
+    }
+    // Every per-page install the primary's first page gets — the evaluate-name
+    // shim, the per-navigation main-world spoof re-apply, the captcha-iframe
+    // in-frame spoof, and the optional captcha trace. Under patchright the
+    // context init scripts are skipped, so this per-navigation path is the ONLY
+    // fingerprint normalization a page gets; a satellite's page
+    // (attachOwnPage) must therefore go through it too.
+    async installPageNormalization(page, remoteMode) {
         // In baseline mode addInitScript covers document-start page JS, but
         // Playwright's page.evaluate utility execution can run in a separate realm.
         // Install the same no-op helper there with a STRING evaluate (tsx cannot
         // wrap strings with __name). This prevents dev-runtime source runs from
         // crashing before replay reaches the service page.
-        await this.page.evaluate(evaluateNameShimScript).catch(() => undefined);
+        await page.evaluate(EVALUATE_NAME_SHIM_SCRIPT).catch(() => undefined);
         // Re-apply on every navigation — the main-world reach patchright's isolated
         // init world denies us. framenavigated fires at navigation-commit (before
         // most page JS), so a late WebGL query (reCAPTCHA scores seconds in) sees
@@ -3726,8 +2487,8 @@ export class BrowserController {
             if (pg === null)
                 return;
             void (async () => {
-                await pg.evaluate(evaluateNameShimScript).catch(() => undefined);
-                await pg.evaluate(installWebglSpoofScript).catch(() => {
+                await pg.evaluate(EVALUATE_NAME_SHIM_SCRIPT).catch(() => undefined);
+                await pg.evaluate(INSTALL_WEBGL_SPOOF_SCRIPT).catch(() => {
                     // mid-navigation / closed page — the next navigation re-applies.
                 });
             })();
@@ -3747,7 +2508,7 @@ export class BrowserController {
         // a captcha would read. Logged only under CAPTCHA_TRACE to prove the fix.
         const RENDERER_PROBE = String.raw `(() => { try { const c = document.createElement("canvas"); const gl = c.getContext("webgl") || c.getContext("webgl2"); if (!gl) return "no-gl"; const e = gl.getExtension("WEBGL_debug_renderer_info"); return e ? String(gl.getParameter(e.UNMASKED_RENDERER_WEBGL)) : "no-ext"; } catch (err) { return "err:" + (err && err.message); } })()`;
         const trace = process.env.UNIVERSAL_BOT_CAPTCHA_TRACE === "1";
-        this.page.on("framenavigated", (frame) => {
+        page.on("framenavigated", (frame) => {
             if (remoteMode)
                 return; // real-GPU remote host: no in-iframe spoof
             if (this.page === null)
@@ -3779,7 +2540,7 @@ export class BrowserController {
                 // place before the scoring read.
                 let landed = false;
                 for (let i = 0; i < 20 && !landed; i++) {
-                    await frame.evaluate(installWebglSpoofScript).catch(() => undefined);
+                    await frame.evaluate(INSTALL_WEBGL_SPOOF_SCRIPT).catch(() => undefined);
                     const r = await frame.evaluate(RENDERER_PROBE).catch(() => "eval-fail");
                     if (typeof r === "string" && r.includes("Intel"))
                         landed = true;
@@ -3791,7 +2552,7 @@ export class BrowserController {
                 }
             })();
         });
-        this.page.on("load", reapplyWebglSpoof);
+        page.on("load", reapplyWebglSpoof);
         // rc.33 — captcha tracing. When UNIVERSAL_BOT_CAPTCHA_TRACE=1 is
         // set, log every response from Cloudflare/Google's challenge
         // endpoints plus any console message that mentions captcha-y
@@ -3801,102 +2562,150 @@ export class BrowserController {
         // it CAN observe its network. Off by default; opt in for
         // diagnostic runs only since the bodies can be large.
         if (process.env.UNIVERSAL_BOT_CAPTCHA_TRACE === "1") {
-            this.page.on("response", async (resp) => {
+            page.on("response", async (resp) => {
                 const url = resp.url();
                 if (!/challenges\.cloudflare\.com|google\.com\/recaptcha|hcaptcha\.com|newassets\.hcaptcha\.com/.test(url)) {
                     return;
                 }
-                const status = resp.status();
-                const ct = resp.headers()["content-type"] ?? "";
-                let bodyPreview = "";
-                if (/json|javascript|html|plain/.test(ct) ||
-                    /api\.hcaptcha\.com\/(?:checksiteconfig|getcaptcha|checkcaptcha)/.test(url)) {
-                    try {
-                        const body = await resp.text();
-                        bodyPreview = body.length > 400 ? body.slice(0, 400) + "…" : body;
-                    }
-                    catch {
-                        // body may be evicted; ignore
-                    }
-                }
-                console.error(`[captcha-trace] ${status} ${url}${bodyPreview ? "\n  body: " + bodyPreview.replace(/\n/g, "\\n") : ""}`);
-            });
-            this.page.on("console", (msg) => {
-                const text = msg.text();
-                if (!/turnstile|cloudflare|challenge|recaptcha/i.test(text))
+                const status = resp.status();
+                const ct = resp.headers()["content-type"] ?? "";
+                let bodyPreview = "";
+                if (/json|javascript|html|plain/.test(ct) ||
+                    /api\.hcaptcha\.com\/(?:checksiteconfig|getcaptcha|checkcaptcha)/.test(url)) {
+                    try {
+                        const body = await resp.text();
+                        bodyPreview = body.length > 400 ? body.slice(0, 400) + "…" : body;
+                    }
+                    catch {
+                        // body may be evicted; ignore
+                    }
+                }
+                console.error(`[captcha-trace] ${status} ${url}${bodyPreview ? "\n  body: " + bodyPreview.replace(/\n/g, "\\n") : ""}`);
+            });
+            page.on("console", (msg) => {
+                const text = msg.text();
+                if (!/turnstile|cloudflare|challenge|recaptcha/i.test(text))
+                    return;
+                console.error(`[captcha-trace] console.${msg.type()}: ${text}`);
+            });
+        }
+    }
+    trackMainDocument(page) {
+        return this.pageDriver.trackMainDocument(page);
+    }
+    mainDocumentIdentity() {
+        return this.pageDriver.mainDocumentIdentity();
+    }
+    /** Attach normal controller behavior to a harness-owned Playwright page. */
+    static fromHarnessPage(page) {
+        const controller = new BrowserController({ humanize: false });
+        controller.processOwner.context = page.context();
+        controller.page = page;
+        controller.primaryPage = page;
+        controller.trackOpenedTabs(page);
+        controller.harnessAttachedPage = true;
+        controller.processOwner.launchedMode = "headless";
+        return controller;
+    }
+    trackOpenedTabs(page) {
+        return this.pageDriver.trackOpenedTabs(page);
+    }
+    operatorBrowserMarker() {
+        return this.processOwner.operatorBrowserMarker();
+    }
+    isConnected() {
+        return this.processOwner.isConnected();
+    }
+    get channel() {
+        return this.processOwner.channel;
+    }
+    get proxied() {
+        return this.processOwner.proxied;
+    }
+    get stealthProfile() {
+        return this.processOwner.stealthProfile;
+    }
+    // Resource blocking for speed (BOT_BLOCK_RESOURCES, default OFF). Aborts
+    // image/media/font requests + known analytics/tracker hosts to cut page-load
+    // wall-clock (3-5x on byte-heavy pages; also stops trackers from holding the
+    // network "busy"). HARD ALLOW-GUARD first for captcha/challenge + payment
+    // scripts (blocking those breaks the Turnstile/hCaptcha token poll and the
+    // signup form). CSS + first-party JS are never blocked (not in BLOCK_TYPES) —
+    // the SPA form renders from them and the vision planner reads the styled
+    // render. DUAL RISK, hence default-OFF + an OF#2 A/B before flipping on:
+    //   (1) a browser that loads ZERO images is itself an anti-bot fingerprint;
+    //   (2) the screenshot the vision planner reads loses detail — mitigated
+    //       because the DOM inventory is the authoritative action space, but
+    //       still a regression risk on image-only affordances.
+    // Registered on the CONTEXT so it covers OAuth popups + iframes.
+    async installResourceBlocking() {
+        const ctx = this.context;
+        if (ctx === null)
+            return;
+        if (!/^(1|true|on)$/i.test(process.env.BOT_BLOCK_RESOURCES ?? ""))
+            return;
+        const BLOCK_TYPES = new Set(["image", "media", "font"]);
+        const BLOCK_HOSTS = [
+            "google-analytics.com",
+            "googletagmanager.com",
+            "analytics.google.com",
+            "doubleclick.net",
+            "static.hotjar.com",
+            "script.hotjar.com",
+            "segment.com",
+            "segment.io",
+            "cdn.segment.com",
+            "fullstory.com",
+            "mixpanel.com",
+            "bugsnag.com",
+            "intercom.io",
+            "intercomcdn.com",
+            "widget.intercom.io",
+            "connect.facebook.net",
+            "analytics.tiktok.com",
+            "clarity.ms",
+            "cdn.heapanalytics.com",
+            "wistia.com",
+        ];
+        // NEVER block — these break signup (captcha/challenge widgets + payment SDK).
+        const ALWAYS_ALLOW = [
+            "challenges.cloudflare.com",
+            "turnstile",
+            "hcaptcha.com",
+            "newassets.hcaptcha.com",
+            "recaptcha",
+            "gstatic.com/recaptcha",
+            "js.stripe.com",
+        ];
+        await ctx.route("**/*", async (route) => {
+            try {
+                const url = route.request().url();
+                if (ALWAYS_ALLOW.some((h) => url.includes(h))) {
+                    await route.continue();
+                    return;
+                }
+                const type = route.request().resourceType();
+                if (BLOCK_TYPES.has(type) || BLOCK_HOSTS.some((h) => url.includes(h))) {
+                    await route.abort();
                     return;
-                console.error(`[captcha-trace] console.${msg.type()}: ${text}`);
-            });
-        }
-    }
-    // Probe the run's actual egress geo by loading ipinfo.io. Launches a
-    // throwaway browser: the persistent context isn't up yet, and its
-    // timezone has to be known before it is. The throwaway inherits the
-    // same channel + proxy so it reports the real egress. Best-effort —
-    // any failure returns null and start() keeps a default timezone.
-    async probeEgressGeo(channel, proxy, browserEnv) {
-        if (proxy === null) {
-            try {
-                const resp = await fetch("https://ipinfo.io/json", { signal: AbortSignal.timeout(10_000) });
-                if (!resp.ok)
-                    throw new Error(`HTTP ${resp.status}`);
-                return parseEgressGeo(await resp.text());
+                }
+                await route.continue();
             }
-            catch (err) {
-                console.error(`[operator] egress geo probe failed — using default ` +
-                    `timezone: ${err instanceof Error ? err.message : String(err)}`);
-                return null;
+            catch {
+                // Routing race / already-handled — never let a decision crash nav.
             }
-        }
-        let probe;
-        try {
-            probe = await getChromium().launch({
-                headless: OPERATOR_BROWSER_HEADLESS,
-                env: browserEnv,
-                ...(channel !== null ? { channel } : {}),
-                ...(proxy !== null ? { proxy } : {}),
-                args: ["--no-sandbox", "--disable-dev-shm-usage"],
-            });
-            const page = await probe.newPage();
-            await page.goto("https://ipinfo.io/json", {
-                timeout: 10000,
-                waitUntil: "domcontentloaded",
-            });
-            const body = await page.evaluate(() => document.body.innerText);
-            return parseEgressGeo(body);
-        }
-        catch (err) {
-            console.error(`[operator] egress geo probe failed — using default ` +
-                `timezone: ${err instanceof Error ? err.message : String(err)}`);
-            return null;
-        }
-        finally {
-            if (probe !== undefined)
-                await probe.close();
-        }
+        });
+        console.error("[operator] resource blocking ON (image/media/font + analytics aborted; captcha/CSS/JS allowed)");
     }
-    // Resolve the deliberate per-session egress selection. A session proxy is
-    // not an optimization hint: falling back to the host's IP could submit a
-    // geo-gated flow from the wrong country, so malformed or unreachable values
-    // abort startup rather than silently egressing directly.
-    async resolveProxy() {
-        if (this.proxyOverride === null)
-            return null;
-        return resolveExplicitProxy(this.proxyOverride);
+    async start() {
+        // A satellite's page is already attached by attachSatellite() — there is
+        // no process for it to start.
+        if (this.isSatelliteAttachment)
+            return;
+        return await this.processOwner.start();
     }
-    // Reload the current page. Used by the post-verify flow to make a SPA
-    // re-read a server-side state change (email verified) that the client
-    // hasn't picked up yet. Best-effort: a reload failure is non-fatal — the
-    // caller re-reads the page state regardless.
     async reload() {
-        if (!this.page)
-            throw new Error("Browser not started");
-        try {
-            await this.page.reload({ waitUntil: "domcontentloaded", timeout: 20_000 });
-        }
-        catch {
-            // reload failed (slow SPA / transient) — caller re-inspects anyway
-        }
+        return await this.pageDriver.reload();
     }
     // Open the first conversation in a Gmail search-results list so the email
     // BODY renders. The results LIST only carries snippets + Gmail chrome links —
@@ -3932,106 +2741,7 @@ export class BrowserController {
         return false;
     }
     async goto(url) {
-        if (!this.page)
-            throw new Error("Browser not started");
-        // Retry transient network/proxy drops. A residential SOCKS tunnel
-        // intermittently resets a connection mid-navigation (Chrome surfaces
-        // net::ERR_SOCKS_CONNECTION_FAILED / ERR_CONNECTION_RESET / ERR_NETWORK_
-        // CHANGED / ERR_TIMED_OUT), especially on heavy onboarding pages that
-        // open many subresource connections at once (algolia's dashboard_setup).
-        // The host is reachable on the next attempt — a single goto failure
-        // shouldn't fail the whole signup. Only retry these connection-level
-        // errors; HTTP statuses and selector/logic errors fall straight through.
-        // net::ERR_ABORTED — a navigation superseded by a redirect/JS-nav during
-        // the domcontentloaded wait. Usually transient (a redirect race on the
-        // first hit of an auth-gated portal — MEASURED 2026-06-11: defang's
-        // portal.defang.io aborted on the initial goto); a retry lands the
-        // settled page. Distinct from ERR_CONNECTION_ABORTED (a dropped socket).
-        const TRANSIENT_NET = /ERR_SOCKS_CONNECTION_FAILED|ERR_CONNECTION_(?:RESET|CLOSED|FAILED|ABORTED)|ERR_NETWORK_CHANGED|ERR_TIMED_OUT|ERR_NAME_NOT_RESOLVED|net::ERR_EMPTY_RESPONSE|net::ERR_ABORTED/i;
-        const MAX_GOTO_ATTEMPTS = 3;
-        const sameOriginPathAndSearch = (a, b) => {
-            try {
-                const left = new URL(a);
-                const right = new URL(b);
-                return (left.origin === right.origin &&
-                    left.pathname === right.pathname &&
-                    left.search === right.search);
-            }
-            catch {
-                return false;
-            }
-        };
-        const landedAuthGateForTarget = (landedRaw, targetRaw) => {
-            try {
-                const landed = new URL(landedRaw);
-                const target = new URL(targetRaw);
-                if (landed.origin !== target.origin)
-                    return false;
-                return /\/(?:sign[_-]?in|login|log[_-]?in|auth)(?:\/|$)/i.test(landed.pathname);
-            }
-            catch {
-                return false;
-            }
-        };
-        for (let attempt = 1;; attempt++) {
-            try {
-                await this.page.goto(url, { waitUntil: "domcontentloaded", timeout: 60000 });
-                // A SOCKS/connection drop does NOT always throw: Chrome resolves
-                // domcontentloaded on its own `chrome-error://chromewebdata/`
-                // interstitial and goto returns cleanly. The bot then ran the whole
-                // planner on a dead error page and gave up after one round (MEASURED
-                // 2026-06-11: galileo/lancedb landed on chrome-error with the app
-                // host as the title, never retried). Treat a chrome-error landing as
-                // the same transient class and retry it like a thrown net error.
-                const landed = this.page.url();
-                if (landed.startsWith("chrome-error://")) {
-                    if (attempt >= MAX_GOTO_ATTEMPTS) {
-                        throw new Error(`net::navigation landed on a Chrome error page for ${url} ` +
-                            `after ${attempt} attempts (transient proxy/host failure)`);
-                    }
-                    await this.sleep(1500 * attempt);
-                    continue;
-                }
-                break;
-            }
-            catch (err) {
-                const msg = err instanceof Error ? err.message : String(err);
-                // Some client-routed apps commit the address bar to the requested SPA
-                // route but never fire the lifecycle event Playwright is waiting for.
-                // Treat that as a successful navigation: callers immediately inspect
-                // the DOM and have their own element-level waits.
-                if (/Timeout \d+ms exceeded/i.test(msg)) {
-                    await this.sleep(500);
-                    if (sameOriginPathAndSearch(this.page.url(), url))
-                        break;
-                    if (landedAuthGateForTarget(this.page.url(), url))
-                        break;
-                    await this.page
-                        .waitForURL((landed) => sameOriginPathAndSearch(landed.toString(), url), {
-                        timeout: 5000,
-                    })
-                        .then(() => undefined)
-                        .catch(() => undefined);
-                    if (sameOriginPathAndSearch(this.page.url(), url))
-                        break;
-                    if (landedAuthGateForTarget(this.page.url(), url))
-                        break;
-                }
-                if (attempt >= MAX_GOTO_ATTEMPTS || !TRANSIENT_NET.test(msg))
-                    throw err;
-                // Linear backoff — give the tunnel a moment to recover a slot.
-                await this.sleep(1500 * attempt);
-            }
-        }
-        // Post-load dwell. Cloudflare/reCAPTCHA scoring runs JS that
-        // collects behavior signals over a window (typically 500-2000ms);
-        // landing on a page and immediately interacting reads as bot-like.
-        // The "dwell" gives the scoring window enough wall-clock to settle
-        // and also gives any deferred JS time to register event listeners
-        // we'll later fire.
-        if (this.humanize) {
-            await this.sleep(rand(800, 2000));
-        }
+        return await this.pageDriver.goto(url);
     }
     // Pre-warm a domain by visiting its root. Useful before navigating
     // to a deep signup URL on a strict-Cloudflare service: the root sets
@@ -13412,12 +12122,11 @@ export class BrowserController {
         }
         this.oauthProviderPage = null;
         this.oauthProviderPageClosed = false;
-        // Race a popup `page` event against the click. context-level
-        // "page" fires for both window.open popups and target=_blank.
-        const popupPromise = this.context.waitForEvent("page", { timeout: 8000 }).catch(() => null);
+        // Only the current page's creation-attributed popup can carry this handshake.
+        const popupPromise = this.page.waitForEvent("popup", { timeout: 8000 }).catch(() => null);
         await this.click(selector);
         const popup = await popupPromise;
-        if (popup !== null && popup !== this.page && !popup.isClosed()) {
+        if (popup !== null && popup !== this.page && this.ownedPages.has(popup)) {
             this.page = popup;
             this.oauthProviderPage = popup;
             // A provider returning from OAuth is allowed to close its own popup.
@@ -13456,14 +12165,26 @@ export class BrowserController {
         const productUrl = product.url();
         const oauthDeadline = Date.now() + oauthBudgetMs;
         const remainingBudgetMs = () => Math.max(1, oauthDeadline - Date.now());
-        const deadlineError = () => consentProvider === "google"
-            ? Object.assign(new Error(`google_session: OAuth did not complete within ${Math.ceil(oauthBudgetMs / 1000)} seconds; ` +
-                "the saved session may have expired, so reconnect with " +
-                "`npx @trusty-squire/mcp connect --force-relogin=google` before retrying"), { code: "google_session" })
-            : new Error(`OAuth login is still awaiting the provider after ${Math.ceil(oauthBudgetMs / 1000)} seconds. Retry oauth_login; do not read or close the browser session.`);
+        const safeOrigin = (url) => {
+            try {
+                return new URL(url).origin;
+            }
+            catch {
+                return url;
+            }
+        };
+        // Fix C: a timed-out wait only proves control has not returned to the
+        // product origin yet — never assert WHY (expired session, denial, etc.).
+        // A consent screen or 2FA challenge is routinely still showing; the
+        // caller should keep waiting/retry, not treat this as a dead end.
+        const awaitingHumanError = () => new OAuthAwaitingHumanError(oauthAwaitingHumanMessage(safeOrigin(productUrl), oauthBudgetMs));
+        const oauthFailedError = (reason) => new OAuthFailedError(reason);
         let recovery = null;
         let providerPage = null;
         let productDeparted = false;
+        let pendingOnProvider = false;
+        let lastTransientUrl = productUrl;
+        let onTransientNavigation = null;
         let resolveProductDeparture = () => undefined;
         const productDeparturePromise = new Promise((resolve) => {
             resolveProductDeparture = resolve;
@@ -13479,6 +12200,7 @@ export class BrowserController {
         product.on("framenavigated", onProductNavigation);
         try {
             recovery = await context.newPage();
+            this.trackOpenedTabs(recovery);
             await recovery.goto(productUrl, {
                 waitUntil: "domcontentloaded",
                 timeout: remainingBudgetMs(),
@@ -13488,13 +12210,24 @@ export class BrowserController {
                 resolvePopup = resolve;
             });
             const onPopup = (page) => {
-                context.off("page", onPopup);
+                if (!this.ownedPages.has(page))
+                    return;
+                product.off("popup", onPopup);
                 resolvePopup(page);
             };
-            context.on("page", onPopup);
+            const onProductClose = () => {
+                product.off("popup", onPopup);
+                product.off("framenavigated", onProductNavigation);
+                resolvePopup(null);
+            };
+            product.on("popup", onPopup);
+            product.once("close", onProductClose);
             try {
-                if (Date.now() >= oauthDeadline)
-                    throw deadlineError();
+                if (Date.now() >= oauthDeadline) {
+                    throw new OAuthAwaitingHumanError(`OAuth has not been attempted yet: the ${Math.ceil(oauthBudgetMs / 1000)}-second ` +
+                        `budget elapsed before the OAuth control on ${safeOrigin(productUrl)} was clicked. ` +
+                        "Retry oauth_login.", "not_attempted");
+                }
                 try {
                     await this.click(selector);
                 }
@@ -13512,11 +12245,18 @@ export class BrowserController {
                 ]);
             }
             finally {
-                context.off("page", onPopup);
+                product.off("popup", onPopup);
+                product.off("close", onProductClose);
                 resolvePopup(null);
                 resolveProductDeparture();
             }
             const transient = providerPage ?? product;
+            lastTransientUrl = transient.url();
+            onTransientNavigation = (frame) => {
+                if (frame === transient.mainFrame())
+                    lastTransientUrl = frame.url();
+            };
+            transient.on("framenavigated", onTransientNavigation);
             productDeparted = productDeparted || !this.isOAuthProductUrl(transient.url(), productUrl);
             const durableProduct = providerPage === null ? recovery : product;
             this.oauthProductPage = durableProduct;
@@ -13544,27 +12284,69 @@ export class BrowserController {
                         await this.sleep(Math.min(250, remainingBudgetMs()));
                 }
             }
+            const observedUrls = [
+                ...(providerPage !== null || productDeparted
+                    ? [transient.isClosed() ? lastTransientUrl : transient.url()]
+                    : []),
+                ...(providerPage !== null && !product.isClosed() && product.url() !== productUrl
+                    ? [product.url()]
+                    : []),
+            ];
+            for (const observedUrl of observedUrls) {
+                const denial = oauthErrorFromReturnUrl(observedUrl);
+                if (denial === null)
+                    continue;
+                throw oauthFailedError(`OAuth returned to ${safeOrigin(observedUrl)} with error=${denial.error}` +
+                    (denial.description === null ? "" : ` (${denial.description})`) +
+                    ".");
+            }
             if (settled === null) {
-                throw deadlineError();
+                // Timed out without a confirmed origin-return. Re-check honestly
+                // rather than assume failure — see classifyOAuthTimeout's doc comment
+                // for the false-negative this recovers.
+                const outcome = classifyOAuthTimeout(transient.isClosed(), !transient.isClosed() &&
+                    providerPage === null &&
+                    productDeparted &&
+                    this.isOAuthProductUrl(transient.url(), productUrl));
+                if (outcome === "awaiting_human") {
+                    pendingOnProvider = true;
+                    throw awaitingHumanError();
+                }
+                settled = outcome;
             }
             if (providerPage === null && product.isClosed()) {
-                if (Date.now() >= oauthDeadline)
-                    throw deadlineError();
-                await recovery.reload({
+                const reloaded = await recovery
+                    .reload({
                     waitUntil: "domcontentloaded",
-                    timeout: remainingBudgetMs(),
-                });
+                    timeout: Math.max(remainingBudgetMs(), 500),
+                })
+                    .then(() => true)
+                    .catch(() => false);
+                if (!reloaded) {
+                    throw new OAuthAwaitingHumanError(`${safeOrigin(productUrl)} closed during OAuth and could not be reloaded within the ` +
+                        "budget, so completion could not be confirmed. Call operate_observe to check the " +
+                        "current page.");
+                }
             }
         }
         finally {
             product.off("framenavigated", onProductNavigation);
-            const retained = product.isClosed() ? recovery : product;
-            this.page = retained?.isClosed() === false ? retained : this.primaryPage;
-            this.oauthProductPage = null;
-            this.oauthProviderPage = null;
-            this.oauthProviderPageClosed = false;
-            if (providerPage !== null && !providerPage.isClosed()) {
-                await providerPage.close().catch(() => undefined);
+            if (onTransientNavigation !== null) {
+                (providerPage ?? product).off("framenavigated", onTransientNavigation);
+            }
+            const providerStillShowing = pendingOnProvider && providerPage !== null && !providerPage.isClosed();
+            if (providerStillShowing) {
+                this.page = providerPage;
+            }
+            else {
+                const retained = product.isClosed() ? recovery : product;
+                this.page = retained?.isClosed() === false ? retained : this.primaryPage;
+                this.oauthProductPage = null;
+                this.oauthProviderPage = null;
+                this.oauthProviderPageClosed = false;
+                if (providerPage !== null && !providerPage.isClosed()) {
+                    await providerPage.close().catch(() => undefined);
+                }
             }
             if (recovery !== null && recovery !== this.page && !recovery.isClosed()) {
                 await recovery.close().catch(() => undefined);
@@ -13806,8 +12588,8 @@ export class BrowserController {
             cdp = null; // FedCm domain unavailable — the popup path still works
             console.error(`[operator] FedCm.enable failed (${err instanceof Error ? err.message : String(err)}) — FedCM path disabled, relying on popup`);
         }
-        const popupPromise = this.context
-            .waitForEvent("page", { timeout: timeoutMs })
+        const popupPromise = this.page
+            .waitForEvent("popup", { timeout: timeoutMs })
             .then((p) => p)
             .catch(() => null);
         await this.click(triggerSelector);
@@ -13855,7 +12637,7 @@ export class BrowserController {
                 // best-effort
             }
         }
-        if (popup !== null && popup !== this.page && !popup.isClosed()) {
+        if (popup !== null && popup !== this.page && this.ownedPages.has(popup)) {
             this.page = popup;
             try {
                 await this.page.waitForLoadState("domcontentloaded", { timeout: 15_000 });
@@ -13880,91 +12662,20 @@ export class BrowserController {
             `fedcmResolved=${fedcmResolved} pages=${this.context.pages().length}`);
         return { ok: false, via: "none" };
     }
-    // URL of the active page (the OAuth page mid-handshake, the product
-    // page otherwise). Cheap — no screenshot, unlike getState().
     currentUrl() {
-        return this.page !== null ? this.page.url() : "";
+        return this.pageDriver.currentUrl();
     }
     recoverActivePage() {
-        return this.adoptLivePage();
+        return this.pageDriver.recoverActivePage();
     }
-    // ───────────── new-tab adoption ─────────────
-    //
-    // Arm adoption immediately BEFORE an action that may open a tab. Anything
-    // already queued belonged to an earlier action and is not this action's to
-    // follow.
     armOpenedTabAdoption() {
-        this.openedTabs.length = 0;
+        return this.pageDriver.armOpenedTabAdoption();
     }
-    // Adopt the newest live tab opened since armOpenedTabAdoption() as the active
-    // page, so the next observe/act reads the tab the click actually opened.
-    // Returns the adopted URL, or null when the action opened no followable tab.
-    //
-    // `graceMs` covers the window between the click returning and Playwright
-    // delivering the context "page" event; a caller that has already waited for
-    // the page to settle passes 0 and just drains what arrived.
     async adoptOpenedTab(graceMs = 0) {
-        const deadline = Date.now() + Math.max(0, graceMs);
-        let candidate = this.takeFollowableTab();
-        while (candidate === null && Date.now() < deadline) {
-            await this.sleep(50);
-            candidate = this.takeFollowableTab();
-        }
-        if (candidate === null)
-            return null;
-        this.openedTabs.length = 0;
-        // A window.open target starts at about:blank and is navigated a tick later.
-        // Adopting it while blank would report an empty page to the host, so wait
-        // (bounded) for the document it was opened for.
-        const blank = (url) => url === "" || url === "about:blank" || url === "about:srcdoc";
-        for (let i = 0; i < 40 && !candidate.isClosed() && blank(candidate.url()); i++) {
-            await this.sleep(50);
-        }
-        if (candidate.isClosed())
-            return null;
-        this.page = candidate;
-        this.trackMainDocument(candidate);
-        await candidate.bringToFront().catch(() => undefined);
-        await candidate
-            .waitForLoadState("domcontentloaded", { timeout: 15_000 })
-            .catch(() => undefined);
-        return candidate.isClosed() ? null : candidate.url();
-    }
-    // Newest queued tab the operator may follow. Pages the controller itself owns
-    // (the active page, the primary page, either side of an OAuth handshake, a
-    // recovery tab) are never adoption candidates — those lifecycles are managed
-    // by the code that created them.
-    takeFollowableTab() {
-        for (let i = this.openedTabs.length - 1; i >= 0; i--) {
-            const tab = this.openedTabs[i];
-            if (tab.isClosed())
-                continue;
-            if (tab === this.page ||
-                tab === this.primaryPage ||
-                tab === this.oauthProductPage ||
-                tab === this.oauthProviderPage) {
-                continue;
-            }
-            return tab;
-        }
-        return null;
+        return await this.pageDriver.adoptOpenedTab(graceMs);
     }
     adoptLivePage() {
-        if (this.page !== null && !this.page.isClosed())
-            return true;
-        if (this.context === null)
-            return false;
-        const pages = this.context.pages().filter((p) => !p.isClosed());
-        if (pages.length === 0)
-            return false;
-        const product = this.oauthProductPage !== null && !this.oauthProductPage.isClosed()
-            ? this.oauthProductPage
-            : null;
-        const nonAuth = [...pages]
-            .reverse()
-            .find((p) => !/accounts\.google\.com|github\.com\/login|login\.microsoftonline\.com/i.test(p.url()));
-        this.page = nonAuth ?? product ?? pages[pages.length - 1] ?? null;
-        return this.page !== null;
+        return this.pageDriver.adoptLivePage();
     }
     // Press a keyboard key (e.g. "Escape" to dismiss a focus-trapped modal that
     // exposes no in-DOM close control). Best-effort. Used by the nav-search
@@ -14202,6 +12913,8 @@ export class BrowserController {
             return null;
         let identityPage = null;
         try {
+            // Deliberately unregistered: this identity probe (and its popups) must
+            // never become the session's working page.
             identityPage = await this.context.newPage();
             const identityUrl = new URL("https://myaccount.google.com/");
             const expectedEmail = expectedGoogleAccountEmail?.trim();
@@ -14621,287 +13334,19 @@ export class BrowserController {
         }
     }
     async close(options = {}) {
-        if (options.cancelStart === true) {
-            this.startCancellationRequested = true;
-            this.resolveStartCancellation?.();
-            this.resolveStartCancellation = null;
-        }
-        this.closePromise ??= this.closeAfterStart();
-        return await this.closePromise;
+        if (this.isSatelliteAttachment)
+            return await this.closeOwnPagesOnly();
+        return await this.processOwner.close(options);
     }
     async waitForCancelledStartQuiescence() {
-        if (!this.startCancellationRequested)
+        if (this.isSatelliteAttachment)
             return;
-        await Promise.allSettled([
-            this.startPromise ?? Promise.resolve(),
-            this.reapCancelledStartProcess(),
-        ]);
-        await this.persistentFallbackOwnershipMonitor?.catch(() => undefined);
+        return await this.processOwner.waitForCancelledStartQuiescence();
     }
     async forceCloseOwnedProcessTree() {
-        this.startCancellationRequested = true;
-        this.resolveStartCancellation?.();
-        this.resolveStartCancellation = null;
-        const marker = this.operatorBrowserMarker();
-        if (this.ownerLaunchTracked)
-            markOwnerBrowserLaunchTerminal(marker);
-        const proof = this.ownedChromeProcessTreeProof;
-        const identity = proof?.identity ?? this.currentOwnedProfileIdentity();
-        if (identity !== null) {
-            signalOwnedChromeProcessTree(identity, proof?.processGroup ?? false, "SIGKILL", {
-                ...(proof === null ? {} : { proof }),
-            });
-            reapProfileHolderIfOwned(this.profileDir, identity);
-        }
-        const closed = identity === null
-            ? this.startSettled && !this.launchedContext
-            : await this.waitForOwnedProfileExit(identity, proof);
-        if (closed && proof !== null) {
-            releaseOwnedChromeProcessTree(proof);
-            const tracked = selfManagedChromes.get(proof.identity.pid);
-            if (tracked?.proof === proof)
-                selfManagedChromes.delete(proof.identity.pid);
-            if (this.ownedChromeProcessTreeProof === proof)
-                this.ownedChromeProcessTreeProof = null;
-        }
-        const markerClosed = !this.ownerLaunchTracked || (await terminateOwnerBrowserLaunch(marker, this.profileDir));
-        if (closed && markerClosed && this.ownerLaunchTracked) {
-            untrackOwnerBrowserLaunch(marker);
-            this.ownerLaunchTracked = false;
-        }
-        await this.teardownOwnedDisplay().catch(() => undefined);
-        return closed && markerClosed ? "closed" : "unknown";
-    }
-    async closeCancelledStart() {
-        void this.reapCancelledStartProcess().catch(() => undefined);
-        if (this.persistentFallbackCancellationState !== null) {
-            return this.persistentFallbackCancellationState;
-        }
-        if (!this.startLaunchCommitted) {
-            const closeState = await this.closeBrowser();
-            return this.startSettled ? closeState : "unknown";
-        }
-        return await this.closeBrowser();
-    }
-    async reapCancelledStartProcess() {
-        this.cancelledStartReaper ??= this.monitorCancelledStartProcess();
-        await this.cancelledStartReaper;
-    }
-    async monitorCancelledStartProcess() {
-        while (!this.startSettled) {
-            const identity = this.currentOwnedProfileIdentity();
-            if (identity !== null) {
-                this.signalCurrentSelfManagedChrome(identity, "SIGKILL");
-                reapProfileHolderIfOwned(this.profileDir, identity);
-            }
-            await new Promise((resolveWait) => {
-                const timer = setTimeout(resolveWait, 25);
-                timer.unref();
-            });
-        }
-    }
-    currentOwnedProfileIdentity() {
-        const known = this.ownedChromeProcessTreeProof?.identity ??
-            this.childChromeIdentity ??
-            this.launchedProfileHolderIdentity;
-        if (known !== null)
-            return known;
-        const holderPid = currentProfileHolderPid(this.profileDir);
-        if (holderPid === null)
-            return null;
-        const identity = profileProcessIdentity(holderPid, this.profileDir);
-        if (identity === null)
-            return null;
-        if (!this.startCancellationRequested)
-            return identity;
-        return operatorBrowserProcessMatchesMarker(identity.pid, this.operatorBrowserMarker())
-            ? identity
-            : null;
-    }
-    async waitForPersistentFallbackIdentity() {
-        if (this.ownedChromeProcessTreeProof !== null) {
-            return { state: "owned", identity: this.ownedChromeProcessTreeProof.identity };
-        }
-        const proof = await resolvePersistentFallbackIdentity({ profileDir: this.profileDir });
-        if (proof.state === "owned" &&
-            this.startCancellationRequested &&
-            !operatorBrowserProcessMatchesMarker(proof.identity.pid, this.operatorBrowserMarker())) {
-            return { state: "unknown" };
-        }
-        if (proof.state === "owned")
-            this.adoptOwnedChromeProcessTree(proof.identity, false);
-        return proof;
-    }
-    async requirePersistentFallbackOwnership(cleanupUnproven) {
-        try {
-            const proof = await this.waitForPersistentFallbackIdentity();
-            if (proof.state !== "owned" || this.ownedChromeProcessTreeProof === null) {
-                throw new Error("persistent browser launch identity could not be bound to owner custody");
-            }
-            return proof.identity;
-        }
-        catch (error) {
-            await cleanupUnproven().catch(() => undefined);
-            this.persistentFallbackLaunchInFlight = false;
-            throw error;
-        }
-    }
-    startPersistentFallbackOwnershipMonitor() {
-        if (this.persistentFallbackOwnershipMonitor !== null)
-            return;
-        this.persistentFallbackOwnershipMonitor = (async () => {
-            while (this.persistentFallbackLaunchInFlight && this.ownedChromeProcessTreeProof === null) {
-                const holderPid = currentProfileHolderPid(this.profileDir);
-                const identity = holderPid === null ? null : profileProcessIdentity(holderPid, this.profileDir);
-                const controllerOwnsIdentity = identity !== null &&
-                    (!this.startCancellationRequested ||
-                        operatorBrowserProcessMatchesMarker(identity.pid, this.operatorBrowserMarker()));
-                if (identity !== null && controllerOwnsIdentity) {
-                    this.launchedProfileHolderIdentity = identity;
-                    try {
-                        this.adoptOwnedChromeProcessTree(identity, false);
-                    }
-                    catch { }
-                    return;
-                }
-                await new Promise((resolveWait) => {
-                    const timer = setTimeout(resolveWait, PROFILE_IDENTITY_POLL_MS);
-                    timer.unref();
-                });
-            }
-        })();
-    }
-    async waitForOwnedProfileExit(identity, existingProof) {
-        const deadline = Date.now() + PROFILE_IDENTITY_PROOF_TIMEOUT_MS;
-        const proof = existingProof ?? captureOwnedChromeProcessTreeProof(identity, false);
-        let state = proof === null
-            ? profileProcessIdentityState(identity, this.profileDir)
-            : ownedChromeProcessTreeState(proof);
-        while (state !== "stale" && Date.now() < deadline) {
-            if (proof !== null) {
-                signalOwnedChromeProcessTree(identity, false, "SIGKILL", { proof });
-            }
-            else if (profileProcessMatches(identity, this.profileDir)) {
-                signalOwnedChromeProcessTree(identity, false, "SIGKILL");
-            }
-            await new Promise((resolveWait) => {
-                const timer = setTimeout(resolveWait, PROFILE_IDENTITY_POLL_MS);
-                timer.unref();
-            });
-            state =
-                proof === null
-                    ? profileProcessIdentityState(identity, this.profileDir)
-                    : ownedChromeProcessTreeState(proof);
-        }
-        if (state !== "stale")
-            return false;
-        reapProfileHolderIfOwned(this.profileDir, identity);
-        return true;
-    }
-    async closeAfterStart() {
-        if (this.startPromise !== null && !this.startSettled) {
-            await Promise.race([this.startPromise.catch(() => undefined), this.startCancellation]);
-        }
-        if (this.startCancellationRequested)
-            return await this.closeCancelledStart();
-        return await this.closeBrowser();
-    }
-    async closeBrowser() {
-        if (this.harnessAttachedPage) {
-            this.page = null;
-            this.primaryPage = null;
-            this.oauthProductPage = null;
-            this.oauthProviderPage = null;
-            this.oauthProviderPageClosed = false;
-            this.context = null;
-            return "closed";
-        }
-        const marker = this.operatorBrowserMarker();
-        if (this.ownerLaunchTracked)
-            markOwnerBrowserLaunchTerminal(marker);
-        // Each step is best-effort and independent: a throw closing the page
-        // or context must NOT skip the browser reap below, or an un-closed Chrome
-        // keeps the profile's
-        // SingletonLock held — bricking the next signup + `mcp connect`).
-        //
-        // EVERY close call is timeout-capped. On a wedged headed Chrome (e.g. a
-        // run that crashed mid-captcha-click), BOTH page.close() AND
-        // context.close() can hang INDEFINITELY — and an un-capped page.close()
-        // blocked the reap below from ever running, so the browser leaked for
-        // minutes and bricked the next 3 services (MEASURED 2026-06-09: supabase
-        // crash → cockroachdb/weaviate/honeycomb all "profile held"). The cap
-        // guarantees we always reach the SIGKILL reap.
-        const page = this.page;
-        const context = this.context;
-        const cdpBrowser = this.cdpBrowser;
-        const childIdentity = this.childChromeIdentity;
-        const childChromeProcessGroup = this.childChromeProcessGroup;
-        const holderIdentity = this.launchedProfileHolderIdentity ?? this.currentOwnedProfileIdentity();
-        const identity = this.ownedChromeProcessTreeProof?.identity ?? childIdentity ?? holderIdentity;
-        const treeProof = identity === null
-            ? null
-            : (this.ownedChromeProcessTreeProof ??
-                this.adoptOwnedChromeProcessTree(identity, childIdentity !== null ? childChromeProcessGroup : false));
-        this.page = null;
-        this.primaryPage = null;
-        this.oauthProductPage = null;
-        this.oauthProviderPage = null;
-        this.oauthProviderPageClosed = false;
-        this.context = null;
-        this.cdpBrowser = null;
-        this.childChrome = null;
-        this.childChromeIdentity = null;
-        this.childChromeProcessGroup = false;
-        this.launchedContext = false;
-        this.launchedProfileHolderIdentity = null;
-        const closeState = await closeProfileWithProof({
-            profileDir: this.profileDir,
-            identity,
-            close: async () => {
-                if (identity !== null) {
-                    signalOwnedChromeProcessTree(identity, treeProof?.processGroup ?? (childIdentity !== null ? childChromeProcessGroup : false), "SIGTERM", { ...(treeProof === null ? {} : { proof: treeProof }) });
-                }
-                // A process-tree SIGTERM can close the CDP target before Playwright
-                // observes it. That is successful teardown, not a reason to skip the
-                // proof/reap path or retain a cleanly closed ephemeral profile.
-                if (page !== null)
-                    await page.close().catch(() => undefined);
-                if (context !== null)
-                    await context.close().catch(() => undefined);
-                if (cdpBrowser !== null)
-                    await cdpBrowser.close().catch(() => undefined);
-            },
-            forceClose: () => {
-                if (identity !== null) {
-                    signalOwnedChromeProcessTree(identity, treeProof?.processGroup ?? (childIdentity !== null ? childChromeProcessGroup : false), "SIGKILL", { ...(treeProof === null ? {} : { proof: treeProof }) });
-                }
-                reapProfileHolderIfOwned(this.profileDir, identity);
-            },
-            ...(treeProof === null
-                ? {}
-                : { identityState: () => ownedChromeProcessTreeState(treeProof) }),
-        });
-        // Self-launch path: disconnect the CDP browser and SIGKILL the Chrome we
-        // spawned. context.close() on a connectOverCDP context only disconnects —
-        // it does NOT necessarily exit the browser process, which would leak the
-        // SingletonLock and brick the next run (the reap below is the backstop, but
-        // killing our own child directly is cleaner and faster).
-        if (treeProof !== null && ownedChromeProcessTreeState(treeProof) === "stale") {
-            releaseOwnedChromeProcessTree(treeProof);
-            const tracked = selfManagedChromes.get(treeProof.identity.pid);
-            if (tracked?.proof === treeProof)
-                selfManagedChromes.delete(treeProof.identity.pid);
-            if (this.ownedChromeProcessTreeProof === treeProof) {
-                this.ownedChromeProcessTreeProof = null;
-            }
-        }
-        const markerClosed = !this.ownerLaunchTracked || (await terminateOwnerBrowserLaunch(marker, this.profileDir));
-        if (markerClosed && this.ownerLaunchTracked) {
-            untrackOwnerBrowserLaunch(marker);
-            this.ownerLaunchTracked = false;
-        }
-        await this.teardownOwnedDisplay().catch(() => undefined);
-        return closeState === "closed" && !markerClosed ? "force_closed_unproven" : closeState;
+        if (this.isSatelliteAttachment)
+            return await this.closeOwnPagesOnly();
+        return await this.processOwner.forceCloseOwnedProcessTree();
     }
 }
 // Random integer in [min, max]. We use Math.random() (not crypto)
@@ -15064,144 +13509,6 @@ export function isSafeSignupChoiceText(text) {
         !AGREEMENT_TEXT_RE.test(text) &&
         !MARKETING_TEXT_RE.test(text));
 }
-export function proxyHasCredentials(proxy) {
-    return (proxy !== null &&
-        ((typeof proxy.username === "string" && proxy.username.length > 0) ||
-            (typeof proxy.password === "string" && proxy.password.length > 0)));
-}
-// Parse a per-session proxy URL — e.g. "http://user:pass@host:8080" or
-// "socks5://host:1080" — into Playwright's proxy option shape. Playwright
-// wants credentials separate from `server`, so we split them out and
-// percent-decode them (residential providers embed session IDs with
-// reserved characters in the username, which arrive %-encoded).
-//
-// Throws on a URL the WHATWG parser rejects, or one with no host (a bare
-// "host:port" parses as a scheme with an empty host).
-//
-// Exported for unit testing — URL parsing is the error-prone bit.
-// Cheap TCP liveness probe for a proxy `server` string ("socks5://host:port").
-// A SOCKS5 proxy listens on TCP; if a connect succeeds within the timeout the
-// proxy is up. Resolves false on connect error / timeout / a malformed server.
-// Pure (no class state) so resolveProxy can call it before launching Chrome.
-export async function isProxyReachable(server, timeoutMs = 4000) {
-    let host;
-    let port;
-    try {
-        const u = new URL(server);
-        host = u.hostname;
-        port = Number(u.port) || proxyDefaultPort(u.protocol);
-    }
-    catch {
-        return false;
-    }
-    if (host.length === 0 || !Number.isFinite(port))
-        return false;
-    return await new Promise((resolve) => {
-        const sock = new Socket();
-        let settled = false;
-        const finish = (ok) => {
-            if (settled)
-                return;
-            settled = true;
-            try {
-                sock.destroy();
-            }
-            catch {
-                // already closed
-            }
-            resolve(ok);
-        };
-        sock.setTimeout(timeoutMs);
-        sock.once("connect", () => finish(true));
-        sock.once("timeout", () => finish(false));
-        sock.once("error", () => finish(false));
-        sock.connect(port, host);
-    });
-}
-export function proxyDefaultPort(protocol) {
-    if (protocol === "http:")
-        return 80;
-    if (protocol === "https:")
-        return 443;
-    if (protocol.startsWith("socks"))
-        return 1080;
-    return 8080;
-}
-export function parseProxyUrl(raw) {
-    const u = new URL(raw.trim());
-    if (u.hostname.length === 0) {
-        throw new Error("proxy URL has no host");
-    }
-    // `host` includes the port; `protocol` keeps its trailing ":".
-    const settings = { server: `${u.protocol}//${u.host}` };
-    if (u.username.length > 0)
-        settings.username = decodeURIComponent(u.username);
-    if (u.password.length > 0)
-        settings.password = decodeURIComponent(u.password);
-    return settings;
-}
-/** Resolve an explicit session proxy, refusing an unsafe direct fallback. */
-export async function resolveExplicitProxy(raw, probe = isProxyReachable) {
-    let proxy;
-    try {
-        proxy = parseProxyUrl(raw);
-    }
-    catch (err) {
-        throw new Error(`explicit session proxy is malformed; refusing direct egress: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    if (!(await probe(proxy.server))) {
-        throw new Error(`explicit session proxy ${proxy.server} is unreachable; refusing direct egress`);
-    }
-    return proxy;
-}
-/** Self-launched Chrome cannot authenticate an HTTP/SOCKS proxy. */
-export function canSelfLaunchWithProxy(proxy) {
-    return !proxyHasCredentials(proxy);
-}
-/** Options passed to launchPersistentContext, including proxy credentials. */
-export function persistentProxyOptions(proxy) {
-    return proxy === null ? {} : { proxy };
-}
-// Parse an ipinfo.io/json response body into EgressGeo. Returns null
-// when the timezone is absent or not a plausible IANA zone — the
-// caller then keeps a default rather than handing Playwright a bad
-// timezoneId (which would throw inside newContext()).
-//
-// geolocation is optional: a valid `loc` ("lat,long") sets it; a
-// missing or malformed one leaves a timezone-only result. Exported
-// for unit testing — JSON-shape handling is the error-prone bit.
-export function parseEgressGeo(text) {
-    let data;
-    try {
-        data = JSON.parse(text);
-    }
-    catch {
-        return null;
-    }
-    if (data === null || typeof data !== "object")
-        return null;
-    const d = data;
-    const tz = typeof d.timezone === "string" ? d.timezone : null;
-    // IANA zones look like "Asia/Seoul" or "America/Argentina/Buenos_Aires".
-    // Reject anything else so a garbage value never reaches newContext().
-    if (tz === null || !/^[A-Za-z]+(?:\/[A-Za-z0-9_+-]+)+$/.test(tz))
-        return null;
-    const geo = { timezoneId: tz };
-    if (typeof d.loc === "string") {
-        const parts = d.loc.split(",");
-        if (parts.length === 2) {
-            const latitude = Number(parts[0]);
-            const longitude = Number(parts[1]);
-            if (Number.isFinite(latitude) &&
-                Number.isFinite(longitude) &&
-                Math.abs(latitude) <= 90 &&
-                Math.abs(longitude) <= 180) {
-                geo.geolocation = { latitude, longitude };
-            }
-        }
-    }
-    return geo;
-}
 // T38 — pure clustering logic. Identifies card-radio groups from a
 // flat list of inventory candidates: each candidate carries its
 // parent's identity (an integer assigned in DOM-walk order) plus
@@ -15367,4 +13674,5 @@ export function rankAndCapInventory(elements, buttonCap = 25, oauthProviders) {
         buttonsDropped: Math.max(0, ranked.length - keptButtons.length),
     };
 }
+export { canSelfLaunchWithProxy, captureOwnedChromeProcessTreeProof, childProcessIsRunning, closeBrowserContextWithin, closeLocalBrowserLaunch, isProxyReachable, isSelfManagedChromeTerminationSignalExitEnabled, launchCancellablePersistentContext, ownedChromeProcessTreeState, parseEgressGeo, parseProxyUrl, persistentProxyOptions, proxyDefaultPort, proxyHasCredentials, registerLocalBrowserLaunch, resolveAttachedProfileChildIdentity, resolveChannelBinary, resolveExplicitProxy, resolvePersistentFallbackIdentity, selfLaunchEnabled, setSelfManagedChromeTerminationSignalExitEnabled, signalOwnedChromeProcessTree, synchronizeSelfManagedChromeTerminationSignalHandlers, terminateTrackedProfileChild, waitForOwnedDevtoolsEndpoint, withChromeStartupLock, } from "./browser-process-runtime.js";
 //# sourceMappingURL=browser.js.map