abtars 0.2.1-alpha.9 → 0.2.2

package/CHANGELOG.md

@@ -0,0 +1,64 @@
+# Changelog
+
+All notable changes to abTARS. Follows [Keep a Changelog](https://keepachangelog.com/).
+
+## [0.1.0] — 2026-05-31
+
+First public release.
+
+### Core
+- **Multi-platform** — Telegram, Discord, IRC with unified message pipeline
+- **Multi-provider** — ollama, OpenRouter, Kiro CLI, Gemini CLI, Codex
+- **Model management** — fallback chains, health tracking, hot-swap via `/model`
+- **Session system** — Main, Browse, Code, Task sessions with concurrent support
+- **Context window** — compaction, ABM-L compression, multi-tier assembly
+- **Streaming** — SSE streaming for DirectAPI transport
+
+### Memory (via abmind)
+- In-process memory integration (optional — bridge boots without it)
+- 4-layer recall injected per-turn (active memory)
+- Sleep maintenance (Dreamy subagent, 12-step overnight pipeline)
+- Credential vault — AES-256-GCM encrypted secrets at rest
+
+### Security
+- **Tool sandbox** — per-session policy enforcement (checkTool/checkPath)
+- **A2A peer restrictions** — 3-layer defense (whitelist, injection scan, system prompt)
+- **Rate limiter** — per-caller sliding window (MAX_AGENT_CALL_PER_HOUR/DAY)
+- **Path traversal protection** — symlink resolution, blacklist enforcement
+- **Secret auto-migration** — keys in .env.skills auto-moved to secret/
+- **Log redaction** — class≥2 secrets never appear in logs
+
+### Lifecycle
+- `abtars install` — supervised/supervised-daemon modes, systemd/launchd
+- `abtars update` — staged deploy, <2s downtime
+- `abtars start/stop/restart` — port-based stale process kill (#686)
+- `abtars doctor` — FTS integrity probe, filesystem checks, auto-repair
+- `abtars onboard` — interactive setup wizard
+- `abtars logs/config/status/backup/rollback` — operational commands
+- 4-layer watchdog — in-proc heartbeat, bash watchdog, OS supervisor, circuit breaker
+
+### Platforms
+- **Telegram** — polling, inline keyboards, model picker, TTS, image handling
+- **Discord** — polling, mention filter, chunking, multi-guild
+- **IRC** — multi-channel, retry with backoff, hot-reload config
+
+### Features
+- **Skills** — hot-reload from `~/.abtars/skills/`, self-authoring, usage tracking
+- **Scheduled tasks** — cron-style with retry, gate scripts, notifications
+- **Browser agent** — delegated web browsing via IPC subprocess
+- **Peer-to-peer** — A2A protocol, TLS 1.3, JWT auth, digital signatures
+- **Self-healer** — log watcher, auto-fix rules, circuit breaker, notification throttling
+- **Dashboard** — web UI for status monitoring
+- **MCP integration** — tool server support
+- **Hooks** — extensible lifecycle hooks system
+
+### CLI
+- `abtars install/uninstall/update/rollback/backup`
+- `abtars start/stop/restart/status`
+- `abtars doctor/onboard/passwd`
+- `abtars logs/config`
+
+### Documentation
+- Full wiki (29 pages): install, models, commands, sessions, skills, peers, security, resilience
+- "How to Add a New Service" guide
+- CLI reference

package/README.md

@@ -1,29 +1,36 @@
 # abTARS
 
-A personal AI agent that runs on your machine, talks to you via Telegram/Discord/IRC, and remembers everything. Use frontier models through existing subscriptions — no per-token billing.
+**Autonomous AI agent with persistent memory, self-healing, and peer-to-peer communication. Your hardware, your rules.**
 
-## What it does
+abTARS runs 24/7 on your machine — talks to you via Telegram/Discord/IRC, remembers everything across sessions, executes scheduled tasks, and recovers from failures without intervention. Use frontier models through existing CLI subscriptions at zero marginal cost.
 
-- **Always-on agent** — runs 24/7, responds on Telegram/Discord, executes tasks on schedule
-- **Persistent memory** — remembers conversations, learns preferences, extracts facts overnight
-- **Multi-model** — Claude, Gemini, OpenRouter (40+ models), ollama (local). Switch by changing config
-- **Self-healing** — 4-layer watchdog, auto model fallback, survives crashes and network drops
-- **Extensible** — skills system, MCP integration, agent-to-agent communication
+## Why abTARS
+
+- 🧠 **Memory that curates itself** — multi-layer recall (5 search stages + reranking), nightly sleep maintenance, emotion tracking, contradiction detection, Memory Darwinism
+- 🛡️ **Self-hosted, defense-in-depth** — classified memory (4 tiers, encrypted at rest), role-based access, injection scanning, secrets vault
+- 🔄 **Runs months unattended** — 5-layer supervision, leaky-bucket model fallback, self-healing agent, standby-aware recovery
+- 🤝 **Agent-to-agent** — P2P communication with Ed25519 signatures, mDNS wake-up, IRC coordination channels
+- 💰 **Zero idle cost** — no LLM calls at rest, CLI subscription parasitism, budget sleep tiers
+
+→ **[Why abTARS vs OpenClaw & Hermes](https://aksika.github.io/abtars/why)**
+
+## Architecture
 
 ```
-You (Telegram/Discord/IRC)
+You (Telegram / Discord / IRC / API client)
   │
   ▼
-abTARS (agent brain)
-  ├── Memory (abmind — persistent, searchable, encrypted)
-  ├── Personality (customizable identity + learned behavior)
-  ├── Tools (browse, recall, store, bash, MCP servers)
-  ├── Skills (hot-reloadable, self-authoring)
+abTARS (bridge)
+  ├── abmind (memory — in-process, multi-layer recall, encrypted)
+  ├── Skills (core + self-authored during sleep + downloadable)
+  ├── Tools (browse, bash, MCP, peer_ask)
+  ├── Tasks (cron scheduler + retry + DoD checks)
+  ├── Agent Swarm (async background sessions)
   │
-  ├── kiro-cli     → Claude (AWS subscription)
-  ├── gemini-cli   → Gemini
-  ├── Codex / Claude Code → OpenAI / Anthropic
-  └── Direct API   → ollama, OpenRouter, any OpenAI-compatible
+  ├── kiro-cli        → Claude, DeepSeek, MiniMax, Qwen (free tier)
+  ├── gemini-cli      → Gemini 2.5
+  ├── Direct API      → ollama, OpenRouter, any OpenAI-compatible
+  └── Peers           → other abTARS instances via /v1/chat/completions
 ```
 
 ## Quick Start
@@ -37,37 +44,84 @@ abtars onboard
 sudo $(which abtars) daemon install
 ```
 
-Full installation guide: **[docs/wiki/install.md](docs/wiki/install.md)**
+After install, configure `~/.abtars/config/.env` with your Telegram bot token and at least one model provider. Full guide: **[docs/wiki/install.md](docs/wiki/install.md)**
 
-## Documentation
+## Features
 
-Docs live in the repo at **[docs/wiki/](docs/wiki/)** — always up to date with the code.
+### Memory (abmind)
 
-- [Installation](docs/wiki/install.md)
-- [Configuration](docs/wiki/commands.md)
-- [Commands](docs/wiki/cli.md)
-- [Memory System (abmind)](https://github.com/aksika/abmind)
-- [Skills & Extensions](docs/wiki/skills.md)
-- [Deployment & Supervision](docs/wiki/supervision.md)
+Standalone package — works with abTARS, Kiro CLI, Gemini CLI, Claude Code, Codex, Hermes, or any MCP client.
+
+- Multi-layer recall: 5 search stages (porter FTS5 → trigram → binary signatures → vector embeddings → entity graph) + 7 post-processing layers (cross-stage penalty, context boost, emotion boost, spacing boost, quality boost, MMR reranking, interference detection)
+- Agglutinative language support (Hungarian, Finnish, Turkish) — QWERTZ fallback, substring windows
+- 25 emotion types with per-memory scoring, emotional arcs per topic
+- 12-step nightly sleep: extract, consolidate, prune, detect contradictions, fix translations
+- NATO-inspired classification: confidentiality × trust × integrity × credibility
+- AES-256-GCM encrypted secrets vault with auto-redaction from history
+- Memory Darwinism — unused memories fade, recalled memories strengthen
+
+### Reliability
+
+- **L1** Heartbeat — standby detection, bridge.lock, task dispatch
+- **L2** In-process watchdog — detects stuck event loops
+- **L3** External watchdog — catches dead PIDs, stale heartbeats. Circuit breaker prevents restart storms
+- **L4** OS supervisor — launchd (macOS) / systemd (Linux) restarts the watchdog itself
+- **L5** Preventive daily restart — eliminates memory leaks
+- **Model health** — leaky-bucket per model, progressive penalties, arbitrarily long fallback chains
+- **Self-healing agent** — diagnoses failed tasks, attempts repair, suspends after 3 failures
+
+### Agent Swarm
+
+Main agent spawns independent background sessions (own context, own tool loop). Results auto-inject into the parent's next prompt. Up to 3 concurrent. `/wait` injects instructions into running sessions.
+
+### Peer-to-Peer
 
-> **Note:** The [aksika.github.io](https://aksika.github.io/abtars/) site may be outdated. Always refer to the docs in this repo.
+Multiple abTARS instances communicate via OpenAI-compatible `/v1/chat/completions` endpoint. Bearer auth per peer, Ed25519 signatures, mDNS wake-up for firewalled peers, hop-limit loop prevention.
+
+### Security
+
+- Platform-level access: only registered chatId/userId can reach the agent
+- Role-based: master/user/guest — commands, tools, memory all gated
+- Secrets vault: AES-256-GCM, scrypt-derived key, auto-encrypt on ingest
+- Injection scanner on all inbound messages
+- SSRF guard on browser agent
+- Credential redaction in all logs and exports
 
 ## Supported Transports
 
-| Transport | Provider | 
-|-----------|----------|
-| ACP | kiro-cli, gemini-cli, Codex, Claude Code |
-| Direct API | OpenRouter, ollama, any OpenAI-compatible endpoint |
-| Hooks | abmind hooks (standalone CLI agents) |
+| Transport | Providers |
+|-----------|-----------|
+| ACP (recommended) | kiro-cli, gemini-cli |
+| Direct API | ollama, OpenRouter, any OpenAI-compatible endpoint |
+| Hooks (standalone) | abmind lifecycle hooks on any CLI agent |
 
 ## Requirements
 
 - Node.js 22+
-- A Telegram bot token
-- At least one model provider (kiro-cli, gemini-cli, ollama, OpenRouter, Codex, or Claude Code)
+- A Telegram bot token (Discord/IRC optional)
+- At least one model provider
 
 Optional: ollama + `nomic-embed-text` for memory embeddings.
 
+## Documentation
+
+- [Installation](docs/wiki/install.md)
+- [Configuration](docs/wiki/commands.md)
+- [CLI Reference](docs/wiki/cli.md)
+- [Memory System (abmind)](https://github.com/aksika/abmind)
+- [Skills & Extensions](docs/wiki/skills.md)
+- [Deployment & Supervision](docs/wiki/supervision.md)
+
+Full docs: **[aksika.github.io/abtars](https://aksika.github.io/abtars/)**
+
+## Numbers
+
+- 1794 tests (abtars 1016 + abmind 778)
+- 5 agent types (professor, dreamy, browsie, coding, cron)
+- 5-layer supervision stack
+- 3 platform adapters + OpenAI-compatible API
+- 12-step nightly memory maintenance
+
 ## Development
 
 ```bash
@@ -76,6 +130,11 @@ cd abtars && npm install && npm run build
 npm test
 ```
 
+## Community
+
+- **Discord:** [Join](https://discord.gg/pj2qbWJT8)
+- **GitHub:** [aksika/abtars](https://github.com/aksika/abtars) · [aksika/abmind](https://github.com/aksika/abmind)
+
 ## License
 
 Apache-2.0

package/bundle/{_registry.generated-ADOYFJJ4.js → _registry.generated-KYX63MGY.js}

@@ -2,29 +2,32 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   browser_exports
-} from "./chunk-KJOCXWJ5.js";
-import "./chunk-LDKSCXGL.js";
-import {
-  hotskills_exports
-} from "./chunk-RE3F3CFW.js";
+} from "./chunk-RITEGAW6.js";
+import "./chunk-DHPFI7OF.js";
 import {
   sleep_exports
-} from "./chunk-KWBGYWDO.js";
-import "./chunk-HEHD3GG5.js";
+} from "./chunk-N24ROESF.js";
+import {
+  hotskills_exports,
+  init_hotskills
+} from "./chunk-NIYVCGBC.js";
+import "./chunk-ITB2K6LI.js";
+import "./chunk-HAF2AFBW.js";
 import "./chunk-JAJ3DUQ2.js";
-import "./chunk-BYDUMHXT.js";
-import "./chunk-UDZIZB5F.js";
+import "./chunk-RTL7HO3N.js";
 import "./chunk-TBLYGCPQ.js";
-import "./chunk-GPL57SRN.js";
+import "./chunk-H7RX7UCR.js";
 import "./chunk-MZWMYN4O.js";
-import "./chunk-KSEIWT4T.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-JFKOPNKL.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-DGS7J4P6.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/capabilities/_registry.generated.ts
+init_hotskills();
 var capabilities = [
   { name: "browser", module: browser_exports },
   { name: "hotskills", module: hotskills_exports },
@@ -33,4 +36,4 @@ var capabilities = [
 export {
   capabilities
 };
-//# sourceMappingURL=_registry.generated-ADOYFJJ4.js.map
+//# sourceMappingURL=_registry.generated-KYX63MGY.js.map

package/bundle/{_registry.generated-ADOYFJJ4.js.map → _registry.generated-KYX63MGY.js.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/capabilities/_registry.generated.ts"],
   "sourcesContent": ["// AUTO-GENERATED by esbuild.config.js \u2014 do not edit\n// Static capability registry for bundled builds\n\nimport * as cap0 from \"./browser/index.js\";\nimport * as cap1 from \"./hotskills/index.js\";\nimport * as cap2 from \"./sleep/index.js\";\n\nexport const capabilities = [\n  { name: \"browser\", module: cap0 },\n  { name: \"hotskills\", module: cap1 },\n  { name: \"sleep\", module: cap2 },\n];\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOO,IAAM,eAAe;AAAA,EAC1B,EAAE,MAAM,WAAW,QAAQ,gBAAK;AAAA,EAChC,EAAE,MAAM,aAAa,QAAQ,kBAAK;AAAA,EAClC,EAAE,MAAM,SAAS,QAAQ,cAAK;AAChC;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AAGO,IAAM,eAAe;AAAA,EAC1B,EAAE,MAAM,WAAW,QAAQ,gBAAK;AAAA,EAChC,EAAE,MAAM,aAAa,QAAQ,kBAAK;AAAA,EAClC,EAAE,MAAM,SAAS,QAAQ,cAAK;AAChC;",
   "names": []
 }

package/bundle/abtars-browser.js

@@ -1,4 +1,3 @@
-#!/usr/bin/env node
 #!/usr/bin/env node
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
@@ -6,11 +5,11 @@ import {
   BrowserTool,
   DomainAllowlist,
   getDefaultSocketPath
-} from "./chunk-KSEIWT4T.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+} from "./chunk-JFKOPNKL.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/cli/abtars-browser.ts

package/bundle/abtars-browser.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/cli/abtars-browser.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n/**\n * abtars-browser \u2014 standalone CLI for agent-initiated browser control.\n *\n * Gives the LLM agent direct control over a headless Chromium browser.\n * Follows the same pattern as abmind recall and abmind store.\n *\n * Usage:\n *   abtars-browser --action navigate --url \"https://example.com\" --session-id default\n *   abtars-browser --action fill --selector \"#email\" --value \"user@example.com\" --session-id auth\n *   abtars-browser --action click --selector \"text=Sign In\" --session-id auth\n *   abtars-browser --action extract_text --session-id auth\n *   abtars-browser --action screenshot --full-page --session-id auth\n *   abtars-browser --action get_page_info --session-id auth\n *   abtars-browser --action close_session --session-id auth\n *\n * Output (success):\n *   { \"success\": true, \"title\": \"Example\", \"url\": \"https://example.com\", \"status\": 200 }\n *\n * Output (error):\n *   { \"success\": false, \"error\": \"navigate action requires --url\" }\n */\n\nimport * as net from \"node:net\";\nimport * as fs from \"node:fs\";\nimport type { BrowserAction, BrowserActionType, BrowserToolResult } from \"../types/browser.js\";\nimport { BrowserManager } from \"../capabilities/browser/browser-manager.js\";\nimport { BrowserTool } from \"../capabilities/browser/browser-tool.js\";\nimport { DomainAllowlist } from \"../capabilities/browser/domain-allowlist.js\";\nimport { getDefaultSocketPath } from \"../capabilities/browser/browser-ipc-server.js\";\n\n/** The 7 valid browser action types. */\nconst VALID_ACTIONS: ReadonlySet<string> = new Set<BrowserActionType>([\n  \"navigate\",\n  \"click\",\n  \"fill\",\n  \"extract_text\",\n  \"screenshot\",\n  \"get_page_info\",\n  \"close_session\",\n  \"set_cookie\",\n]);\n\nexport type RawBrowserArgs = {\n  action?: string;\n  url?: string;\n  selector?: string;\n  value?: string;\n  sessionId: string;\n  fullPage: boolean;\n  cookieFile?: string;\n  engine?: string;\n};\n\n/**\n * Parse raw CLI argv into a RawBrowserArgs object.\n * Exported for unit testing.\n */\nexport function parseArgs(argv: string[]): RawBrowserArgs {\n  const args = argv.slice(2);\n  const parsed: RawBrowserArgs = { sessionId: \"default\", fullPage: false };\n\n  for (let i = 0; i < args.length; i++) {\n    switch (args[i]) {\n      case \"--action\":     parsed.action = args[++i] ?? \"\"; break;\n      case \"--url\":        parsed.url = args[++i] ?? \"\"; break;\n      case \"--selector\":   parsed.selector = args[++i] ?? \"\"; break;\n      case \"--value\":      parsed.value = args[++i] ?? \"\"; break;\n      case \"--session-id\": parsed.sessionId = args[++i] ?? \"default\"; break;\n      case \"--full-page\":  parsed.fullPage = true; break;\n      case \"--cookie-file\": parsed.cookieFile = args[++i] ?? \"\"; break;\n      case \"--engine\":     parsed.engine = args[++i] ?? \"\"; break;\n    }\n  }\n\n  return parsed;\n}\n\n/**\n * Validate raw CLI arguments and return either a parsed BrowserAction or an error string.\n * Exported for unit testing.\n */\nexport function validateArgs(\n  raw: RawBrowserArgs,\n): { ok: true; action: BrowserAction; raw: RawBrowserArgs } | { ok: false; error: string } {\n  // Validate action is one of the 7 valid types\n  if (!raw.action) {\n    return { ok: false, error: \"--action is required\" };\n  }\n  if (!VALID_ACTIONS.has(raw.action)) {\n    return {\n      ok: false,\n      error: `Invalid action \"${raw.action}\". Valid actions: ${[...VALID_ACTIONS].join(\", \")}`,\n    };\n  }\n\n  const actionType = raw.action as BrowserActionType;\n\n  // Validate required params per action\n  switch (actionType) {\n    case \"navigate\":\n      if (!raw.url) return { ok: false, error: \"navigate action requires --url\" };\n      break;\n    case \"click\":\n      if (!raw.selector) return { ok: false, error: \"click action requires --selector\" };\n      break;\n    case \"fill\":\n      if (!raw.selector) return { ok: false, error: \"fill action requires --selector\" };\n      if (raw.value === undefined) return { ok: false, error: \"fill action requires --value\" };\n      break;\n    case \"set_cookie\":\n      if (!raw.cookieFile) return { ok: false, error: \"set_cookie action requires --cookie-file\" };\n      break;\n    // extract_text, screenshot, get_page_info, close_session have no extra required params\n  }\n\n  return {\n    ok: true,\n    raw,\n    action: {\n      action: actionType,\n      sessionId: raw.sessionId,\n      url: raw.url,\n      selector: raw.selector,\n      value: raw.value,\n      fullPage: raw.fullPage,\n      cookieFile: raw.cookieFile,\n    },\n  };\n}\n\n// --- CLI entry point (only runs when executed directly) ---\n\n/**\n * Try executing the action via the main process IPC socket.\n * Returns null if socket unavailable (caller should fall back to ephemeral).\n */\nexport function executeViaIpc(\n  action: BrowserAction,\n  socketPath?: string,\n): Promise<BrowserToolResult | null> {\n  const sock = socketPath ?? getDefaultSocketPath();\n\n  if (!fs.existsSync(sock)) return Promise.resolve(null);\n\n  return new Promise<BrowserToolResult | null>((resolve) => {\n    const conn = net.createConnection(sock, () => {\n      conn.end(JSON.stringify(action) + \"\\n\");\n    });\n\n    let data = \"\";\n    conn.on(\"data\", (chunk) => { data += chunk.toString(); });\n\n    conn.on(\"end\", () => {\n      try {\n        resolve(JSON.parse(data.trim()) as BrowserToolResult);\n      } catch {\n        resolve(null);\n      }\n    });\n\n    conn.on(\"error\", () => resolve(null));\n\n    // Don't hang forever if main process is stuck.\n    conn.setTimeout(60_000, () => {\n      conn.destroy();\n      resolve(null);\n    });\n  });\n}\n\nasync function main() {\n  const raw = parseArgs(process.argv);\n  const validation = validateArgs(raw);\n\n  if (!validation.ok) {\n    console.log(JSON.stringify({ success: false, error: validation.error }));\n    process.exit(1);\n  }\n\n  // Try IPC to main process first (sessions persist across calls).\n  const ipcResult = await executeViaIpc(validation.action);\n  if (ipcResult !== null) {\n    console.log(JSON.stringify(ipcResult));\n    return;\n  }\n\n  // Fallback: ephemeral browser (no session persistence).\n  if (validation.raw.engine) process.env[\"BROWSER_ENGINE\"] = validation.raw.engine;\n  else if (!process.env[\"BROWSER_ENGINE\"]) process.env[\"BROWSER_ENGINE\"] = \"patchright\";\n  const browserManager = new BrowserManager();\n  const allowlist = DomainAllowlist.fromEnv();\n  const tool = new BrowserTool(browserManager, allowlist);\n\n  try {\n    const result = await tool.execute(validation.action);\n    console.log(JSON.stringify(result));\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    console.log(JSON.stringify({ success: false, error: message }));\n  } finally {\n    await browserManager.shutdown();\n  }\n}\n\n// Only run when executed as a script, not when imported for testing\nconst isDirectRun =\n  process.argv[1]?.endsWith(\"abtars-browser.ts\") ||\n  process.argv[1]?.endsWith(\"abtars-browser.js\");\nif (isDirectRun) {\n  main();\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;AAuBA,YAAY,SAAS;AACrB,YAAY,QAAQ;AAQpB,IAAM,gBAAqC,oBAAI,IAAuB;AAAA,EACpE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAiBM,SAAS,UAAU,MAAgC;AACxD,QAAM,OAAO,KAAK,MAAM,CAAC;AACzB,QAAM,SAAyB,EAAE,WAAW,WAAW,UAAU,MAAM;AAEvE,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,YAAQ,KAAK,CAAC,GAAG;AAAA,MACf,KAAK;AAAgB,eAAO,SAAS,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACtD,KAAK;AAAgB,eAAO,MAAM,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACnD,KAAK;AAAgB,eAAO,WAAW,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACxD,KAAK;AAAgB,eAAO,QAAQ,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACrD,KAAK;AAAgB,eAAO,YAAY,KAAK,EAAE,CAAC,KAAK;AAAW;AAAA,MAChE,KAAK;AAAgB,eAAO,WAAW;AAAM;AAAA,MAC7C,KAAK;AAAiB,eAAO,aAAa,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MAC3D,KAAK;AAAgB,eAAO,SAAS,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,IACxD;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,aACd,KACyF;AAEzF,MAAI,CAAC,IAAI,QAAQ;AACf,WAAO,EAAE,IAAI,OAAO,OAAO,uBAAuB;AAAA,EACpD;AACA,MAAI,CAAC,cAAc,IAAI,IAAI,MAAM,GAAG;AAClC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,mBAAmB,IAAI,MAAM,qBAAqB,CAAC,GAAG,aAAa,EAAE,KAAK,IAAI,CAAC;AAAA,IACxF;AAAA,EACF;AAEA,QAAM,aAAa,IAAI;AAGvB,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,UAAI,CAAC,IAAI,IAAK,QAAO,EAAE,IAAI,OAAO,OAAO,iCAAiC;AAC1E;AAAA,IACF,KAAK;AACH,UAAI,CAAC,IAAI,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,mCAAmC;AACjF;AAAA,IACF,KAAK;AACH,UAAI,CAAC,IAAI,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC;AAChF,UAAI,IAAI,UAAU,OAAW,QAAO,EAAE,IAAI,OAAO,OAAO,+BAA+B;AACvF;AAAA,IACF,KAAK;AACH,UAAI,CAAC,IAAI,WAAY,QAAO,EAAE,IAAI,OAAO,OAAO,2CAA2C;AAC3F;AAAA,EAEJ;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,WAAW,IAAI;AAAA,MACf,KAAK,IAAI;AAAA,MACT,UAAU,IAAI;AAAA,MACd,OAAO,IAAI;AAAA,MACX,UAAU,IAAI;AAAA,MACd,YAAY,IAAI;AAAA,IAClB;AAAA,EACF;AACF;AAQO,SAAS,cACd,QACA,YACmC;AACnC,QAAM,OAAO,cAAc,qBAAqB;AAEhD,MAAI,CAAI,cAAW,IAAI,EAAG,QAAO,QAAQ,QAAQ,IAAI;AAErD,SAAO,IAAI,QAAkC,CAAC,YAAY;AACxD,UAAM,OAAW,qBAAiB,MAAM,MAAM;AAC5C,WAAK,IAAI,KAAK,UAAU,MAAM,IAAI,IAAI;AAAA,IACxC,CAAC;AAED,QAAI,OAAO;AACX,SAAK,GAAG,QAAQ,CAAC,UAAU;AAAE,cAAQ,MAAM,SAAS;AAAA,IAAG,CAAC;AAExD,SAAK,GAAG,OAAO,MAAM;AACnB,UAAI;AACF,gBAAQ,KAAK,MAAM,KAAK,KAAK,CAAC,CAAsB;AAAA,MACtD,QAAQ;AACN,gBAAQ,IAAI;AAAA,MACd;AAAA,IACF,CAAC;AAED,SAAK,GAAG,SAAS,MAAM,QAAQ,IAAI,CAAC;AAGpC,SAAK,WAAW,KAAQ,MAAM;AAC5B,WAAK,QAAQ;AACb,cAAQ,IAAI;AAAA,IACd,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,OAAO;AACpB,QAAM,MAAM,UAAU,QAAQ,IAAI;AAClC,QAAM,aAAa,aAAa,GAAG;AAEnC,MAAI,CAAC,WAAW,IAAI;AAClB,YAAQ,IAAI,KAAK,UAAU,EAAE,SAAS,OAAO,OAAO,WAAW,MAAM,CAAC,CAAC;AACvE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,YAAY,MAAM,cAAc,WAAW,MAAM;AACvD,MAAI,cAAc,MAAM;AACtB,YAAQ,IAAI,KAAK,UAAU,SAAS,CAAC;AACrC;AAAA,EACF;AAGA,MAAI,WAAW,IAAI,OAAQ,SAAQ,IAAI,gBAAgB,IAAI,WAAW,IAAI;AAAA,WACjE,CAAC,QAAQ,IAAI,gBAAgB,EAAG,SAAQ,IAAI,gBAAgB,IAAI;AACzE,QAAM,iBAAiB,IAAI,eAAe;AAC1C,QAAM,YAAY,gBAAgB,QAAQ;AAC1C,QAAM,OAAO,IAAI,YAAY,gBAAgB,SAAS;AAEtD,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,MAAM;AACnD,YAAQ,IAAI,KAAK,UAAU,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAQ,IAAI,KAAK,UAAU,EAAE,SAAS,OAAO,OAAO,QAAQ,CAAC,CAAC;AAAA,EAChE,UAAE;AACA,UAAM,eAAe,SAAS;AAAA,EAChC;AACF;AAGA,IAAM,cACJ,QAAQ,KAAK,CAAC,GAAG,SAAS,mBAAmB,KAC7C,QAAQ,KAAK,CAAC,GAAG,SAAS,mBAAmB;AAC/C,IAAI,aAAa;AACf,OAAK;AACP;",
+  "sourcesContent": ["/**\n * abtars-browser \u2014 standalone CLI for agent-initiated browser control.\n *\n * Gives the LLM agent direct control over a headless Chromium browser.\n * Follows the same pattern as abmind recall and abmind store.\n *\n * Usage:\n *   abtars-browser --action navigate --url \"https://example.com\" --session-id default\n *   abtars-browser --action fill --selector \"#email\" --value \"user@example.com\" --session-id auth\n *   abtars-browser --action click --selector \"text=Sign In\" --session-id auth\n *   abtars-browser --action extract_text --session-id auth\n *   abtars-browser --action screenshot --full-page --session-id auth\n *   abtars-browser --action get_page_info --session-id auth\n *   abtars-browser --action close_session --session-id auth\n *\n * Output (success):\n *   { \"success\": true, \"title\": \"Example\", \"url\": \"https://example.com\", \"status\": 200 }\n *\n * Output (error):\n *   { \"success\": false, \"error\": \"navigate action requires --url\" }\n */\n\nimport * as net from \"node:net\";\nimport * as fs from \"node:fs\";\nimport type { BrowserAction, BrowserActionType, BrowserToolResult } from \"../types/browser.js\";\nimport { BrowserManager } from \"../capabilities/browser/browser-manager.js\";\nimport { BrowserTool } from \"../capabilities/browser/browser-tool.js\";\nimport { DomainAllowlist } from \"../capabilities/browser/domain-allowlist.js\";\nimport { getDefaultSocketPath } from \"../capabilities/browser/browser-ipc-server.js\";\n\n/** The 7 valid browser action types. */\nconst VALID_ACTIONS: ReadonlySet<string> = new Set<BrowserActionType>([\n  \"navigate\",\n  \"click\",\n  \"fill\",\n  \"extract_text\",\n  \"screenshot\",\n  \"get_page_info\",\n  \"close_session\",\n  \"set_cookie\",\n]);\n\nexport type RawBrowserArgs = {\n  action?: string;\n  url?: string;\n  selector?: string;\n  value?: string;\n  sessionId: string;\n  fullPage: boolean;\n  cookieFile?: string;\n  engine?: string;\n};\n\n/**\n * Parse raw CLI argv into a RawBrowserArgs object.\n * Exported for unit testing.\n */\nexport function parseArgs(argv: string[]): RawBrowserArgs {\n  const args = argv.slice(2);\n  const parsed: RawBrowserArgs = { sessionId: \"default\", fullPage: false };\n\n  for (let i = 0; i < args.length; i++) {\n    switch (args[i]) {\n      case \"--action\":     parsed.action = args[++i] ?? \"\"; break;\n      case \"--url\":        parsed.url = args[++i] ?? \"\"; break;\n      case \"--selector\":   parsed.selector = args[++i] ?? \"\"; break;\n      case \"--value\":      parsed.value = args[++i] ?? \"\"; break;\n      case \"--session-id\": parsed.sessionId = args[++i] ?? \"default\"; break;\n      case \"--full-page\":  parsed.fullPage = true; break;\n      case \"--cookie-file\": parsed.cookieFile = args[++i] ?? \"\"; break;\n      case \"--engine\":     parsed.engine = args[++i] ?? \"\"; break;\n    }\n  }\n\n  return parsed;\n}\n\n/**\n * Validate raw CLI arguments and return either a parsed BrowserAction or an error string.\n * Exported for unit testing.\n */\nexport function validateArgs(\n  raw: RawBrowserArgs,\n): { ok: true; action: BrowserAction; raw: RawBrowserArgs } | { ok: false; error: string } {\n  // Validate action is one of the 7 valid types\n  if (!raw.action) {\n    return { ok: false, error: \"--action is required\" };\n  }\n  if (!VALID_ACTIONS.has(raw.action)) {\n    return {\n      ok: false,\n      error: `Invalid action \"${raw.action}\". Valid actions: ${[...VALID_ACTIONS].join(\", \")}`,\n    };\n  }\n\n  const actionType = raw.action as BrowserActionType;\n\n  // Validate required params per action\n  switch (actionType) {\n    case \"navigate\":\n      if (!raw.url) return { ok: false, error: \"navigate action requires --url\" };\n      break;\n    case \"click\":\n      if (!raw.selector) return { ok: false, error: \"click action requires --selector\" };\n      break;\n    case \"fill\":\n      if (!raw.selector) return { ok: false, error: \"fill action requires --selector\" };\n      if (raw.value === undefined) return { ok: false, error: \"fill action requires --value\" };\n      break;\n    case \"set_cookie\":\n      if (!raw.cookieFile) return { ok: false, error: \"set_cookie action requires --cookie-file\" };\n      break;\n    // extract_text, screenshot, get_page_info, close_session have no extra required params\n  }\n\n  return {\n    ok: true,\n    raw,\n    action: {\n      action: actionType,\n      sessionId: raw.sessionId,\n      url: raw.url,\n      selector: raw.selector,\n      value: raw.value,\n      fullPage: raw.fullPage,\n      cookieFile: raw.cookieFile,\n    },\n  };\n}\n\n// --- CLI entry point (only runs when executed directly) ---\n\n/**\n * Try executing the action via the main process IPC socket.\n * Returns null if socket unavailable (caller should fall back to ephemeral).\n */\nexport function executeViaIpc(\n  action: BrowserAction,\n  socketPath?: string,\n): Promise<BrowserToolResult | null> {\n  const sock = socketPath ?? getDefaultSocketPath();\n\n  if (!fs.existsSync(sock)) return Promise.resolve(null);\n\n  return new Promise<BrowserToolResult | null>((resolve) => {\n    const conn = net.createConnection(sock, () => {\n      conn.end(JSON.stringify(action) + \"\\n\");\n    });\n\n    let data = \"\";\n    conn.on(\"data\", (chunk) => { data += chunk.toString(); });\n\n    conn.on(\"end\", () => {\n      try {\n        resolve(JSON.parse(data.trim()) as BrowserToolResult);\n      } catch {\n        resolve(null);\n      }\n    });\n\n    conn.on(\"error\", () => resolve(null));\n\n    // Don't hang forever if main process is stuck.\n    conn.setTimeout(60_000, () => {\n      conn.destroy();\n      resolve(null);\n    });\n  });\n}\n\nasync function main() {\n  const raw = parseArgs(process.argv);\n  const validation = validateArgs(raw);\n\n  if (!validation.ok) {\n    console.log(JSON.stringify({ success: false, error: validation.error }));\n    process.exit(1);\n  }\n\n  // Try IPC to main process first (sessions persist across calls).\n  const ipcResult = await executeViaIpc(validation.action);\n  if (ipcResult !== null) {\n    console.log(JSON.stringify(ipcResult));\n    return;\n  }\n\n  // Fallback: ephemeral browser (no session persistence).\n  if (validation.raw.engine) process.env[\"BROWSER_ENGINE\"] = validation.raw.engine;\n  else if (!process.env[\"BROWSER_ENGINE\"]) process.env[\"BROWSER_ENGINE\"] = \"patchright\";\n  const browserManager = new BrowserManager();\n  const allowlist = DomainAllowlist.fromEnv();\n  const tool = new BrowserTool(browserManager, allowlist);\n\n  try {\n    const result = await tool.execute(validation.action);\n    console.log(JSON.stringify(result));\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    console.log(JSON.stringify({ success: false, error: message }));\n  } finally {\n    await browserManager.shutdown();\n  }\n}\n\n// Only run when executed as a script, not when imported for testing\nconst isDirectRun =\n  process.argv[1]?.endsWith(\"abtars-browser.ts\") ||\n  process.argv[1]?.endsWith(\"abtars-browser.js\");\nif (isDirectRun) {\n  main();\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;AAsBA,YAAY,SAAS;AACrB,YAAY,QAAQ;AAQpB,IAAM,gBAAqC,oBAAI,IAAuB;AAAA,EACpE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAiBM,SAAS,UAAU,MAAgC;AACxD,QAAM,OAAO,KAAK,MAAM,CAAC;AACzB,QAAM,SAAyB,EAAE,WAAW,WAAW,UAAU,MAAM;AAEvE,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,YAAQ,KAAK,CAAC,GAAG;AAAA,MACf,KAAK;AAAgB,eAAO,SAAS,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACtD,KAAK;AAAgB,eAAO,MAAM,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACnD,KAAK;AAAgB,eAAO,WAAW,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACxD,KAAK;AAAgB,eAAO,QAAQ,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MACrD,KAAK;AAAgB,eAAO,YAAY,KAAK,EAAE,CAAC,KAAK;AAAW;AAAA,MAChE,KAAK;AAAgB,eAAO,WAAW;AAAM;AAAA,MAC7C,KAAK;AAAiB,eAAO,aAAa,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,MAC3D,KAAK;AAAgB,eAAO,SAAS,KAAK,EAAE,CAAC,KAAK;AAAI;AAAA,IACxD;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,aACd,KACyF;AAEzF,MAAI,CAAC,IAAI,QAAQ;AACf,WAAO,EAAE,IAAI,OAAO,OAAO,uBAAuB;AAAA,EACpD;AACA,MAAI,CAAC,cAAc,IAAI,IAAI,MAAM,GAAG;AAClC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,mBAAmB,IAAI,MAAM,qBAAqB,CAAC,GAAG,aAAa,EAAE,KAAK,IAAI,CAAC;AAAA,IACxF;AAAA,EACF;AAEA,QAAM,aAAa,IAAI;AAGvB,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,UAAI,CAAC,IAAI,IAAK,QAAO,EAAE,IAAI,OAAO,OAAO,iCAAiC;AAC1E;AAAA,IACF,KAAK;AACH,UAAI,CAAC,IAAI,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,mCAAmC;AACjF;AAAA,IACF,KAAK;AACH,UAAI,CAAC,IAAI,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC;AAChF,UAAI,IAAI,UAAU,OAAW,QAAO,EAAE,IAAI,OAAO,OAAO,+BAA+B;AACvF;AAAA,IACF,KAAK;AACH,UAAI,CAAC,IAAI,WAAY,QAAO,EAAE,IAAI,OAAO,OAAO,2CAA2C;AAC3F;AAAA,EAEJ;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,WAAW,IAAI;AAAA,MACf,KAAK,IAAI;AAAA,MACT,UAAU,IAAI;AAAA,MACd,OAAO,IAAI;AAAA,MACX,UAAU,IAAI;AAAA,MACd,YAAY,IAAI;AAAA,IAClB;AAAA,EACF;AACF;AAQO,SAAS,cACd,QACA,YACmC;AACnC,QAAM,OAAO,cAAc,qBAAqB;AAEhD,MAAI,CAAI,cAAW,IAAI,EAAG,QAAO,QAAQ,QAAQ,IAAI;AAErD,SAAO,IAAI,QAAkC,CAAC,YAAY;AACxD,UAAM,OAAW,qBAAiB,MAAM,MAAM;AAC5C,WAAK,IAAI,KAAK,UAAU,MAAM,IAAI,IAAI;AAAA,IACxC,CAAC;AAED,QAAI,OAAO;AACX,SAAK,GAAG,QAAQ,CAAC,UAAU;AAAE,cAAQ,MAAM,SAAS;AAAA,IAAG,CAAC;AAExD,SAAK,GAAG,OAAO,MAAM;AACnB,UAAI;AACF,gBAAQ,KAAK,MAAM,KAAK,KAAK,CAAC,CAAsB;AAAA,MACtD,QAAQ;AACN,gBAAQ,IAAI;AAAA,MACd;AAAA,IACF,CAAC;AAED,SAAK,GAAG,SAAS,MAAM,QAAQ,IAAI,CAAC;AAGpC,SAAK,WAAW,KAAQ,MAAM;AAC5B,WAAK,QAAQ;AACb,cAAQ,IAAI;AAAA,IACd,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,OAAO;AACpB,QAAM,MAAM,UAAU,QAAQ,IAAI;AAClC,QAAM,aAAa,aAAa,GAAG;AAEnC,MAAI,CAAC,WAAW,IAAI;AAClB,YAAQ,IAAI,KAAK,UAAU,EAAE,SAAS,OAAO,OAAO,WAAW,MAAM,CAAC,CAAC;AACvE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,YAAY,MAAM,cAAc,WAAW,MAAM;AACvD,MAAI,cAAc,MAAM;AACtB,YAAQ,IAAI,KAAK,UAAU,SAAS,CAAC;AACrC;AAAA,EACF;AAGA,MAAI,WAAW,IAAI,OAAQ,SAAQ,IAAI,gBAAgB,IAAI,WAAW,IAAI;AAAA,WACjE,CAAC,QAAQ,IAAI,gBAAgB,EAAG,SAAQ,IAAI,gBAAgB,IAAI;AACzE,QAAM,iBAAiB,IAAI,eAAe;AAC1C,QAAM,YAAY,gBAAgB,QAAQ;AAC1C,QAAM,OAAO,IAAI,YAAY,gBAAgB,SAAS;AAEtD,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,MAAM;AACnD,YAAQ,IAAI,KAAK,UAAU,MAAM,CAAC;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAQ,IAAI,KAAK,UAAU,EAAE,SAAS,OAAO,OAAO,QAAQ,CAAC,CAAC;AAAA,EAChE,UAAE;AACA,UAAM,eAAe,SAAS;AAAA,EAChC;AACF;AAGA,IAAM,cACJ,QAAQ,KAAK,CAAC,GAAG,SAAS,mBAAmB,KAC7C,QAAQ,KAAK,CAAC,GAAG,SAAS,mBAAmB;AAC/C,IAAI,aAAa;AACf,OAAK;AACP;",
   "names": []
 }