agent-browser-stealth 0.16.1-fork.1 → 0.16.1-fork.3

package/README.md

@@ -81,7 +81,10 @@ Install once in Chrome: load unpacked extension from `extensions/tab-group-cdp/`
 - Download archive routing: downloads from managed tabs are routed to `agent-browser-stealth/<session>/...`.
 - Domain allowlist fallback: when allowlist is configured for a session, extension can force-block out-of-policy tabs to `about:blank`.
 - Risk hints (debug only): suspicious host/TLD hints are returned via handshake and printed only when `AGENT_BROWSER_DEBUG=1`.
-- Side panel console: view session/tab/group mapping, focus a session, keep only one session, clean empty groups, edit session allowlist, and toggle auto-clean.
+- Side panel browser controls: open/back/forward/reload, click/fill/press by CSS selector, run shortcut commands, and switch/close tabs.
+- Side panel developer signals: capture page console errors/warnings, fetch/xhr network events, command history, and live DOM snapshots.
+- Workflow automation: record actions into workflows, run workflows, map workflows to slash shortcuts, and schedule runs (daily/weekly/monthly/yearly).
+- Side panel operations console: view session/tab/group mapping, focus a session, keep only one session, clean empty groups, edit session allowlist, and toggle auto-clean.
 
 ## Stealth Architecture
 

package/bin/agent-browser-stealth.d

@@ -0,0 +1 @@
+/Users/leo/github.com/agent-browser/cli/target/release/agent-browser-stealth: /Users/leo/github.com/agent-browser/cli/build.rs /Users/leo/github.com/agent-browser/cli/cdp-protocol/browser_protocol.json /Users/leo/github.com/agent-browser/cli/cdp-protocol/js_protocol.json /Users/leo/github.com/agent-browser/cli/src/color.rs /Users/leo/github.com/agent-browser/cli/src/commands.rs /Users/leo/github.com/agent-browser/cli/src/connection.rs /Users/leo/github.com/agent-browser/cli/src/flags.rs /Users/leo/github.com/agent-browser/cli/src/install.rs /Users/leo/github.com/agent-browser/cli/src/main.rs /Users/leo/github.com/agent-browser/cli/src/main_stealth.rs /Users/leo/github.com/agent-browser/cli/src/output.rs /Users/leo/github.com/agent-browser/cli/src/validation.rs

package/bin/agent-browser.d

@@ -0,0 +1 @@
+/Users/leo/github.com/agent-browser/cli/target/release/agent-browser: /Users/leo/github.com/agent-browser/cli/build.rs /Users/leo/github.com/agent-browser/cli/cdp-protocol/browser_protocol.json /Users/leo/github.com/agent-browser/cli/cdp-protocol/js_protocol.json /Users/leo/github.com/agent-browser/cli/src/color.rs /Users/leo/github.com/agent-browser/cli/src/commands.rs /Users/leo/github.com/agent-browser/cli/src/connection.rs /Users/leo/github.com/agent-browser/cli/src/flags.rs /Users/leo/github.com/agent-browser/cli/src/install.rs /Users/leo/github.com/agent-browser/cli/src/main.rs /Users/leo/github.com/agent-browser/cli/src/output.rs /Users/leo/github.com/agent-browser/cli/src/validation.rs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-browser-stealth",
-  "version": "0.16.1-fork.1",
+  "version": "0.16.1-fork.3",
   "description": "Stealth browser automation CLI for AI agents with anti-bot evasions",
   "type": "module",
   "main": "dist/daemon.js",
@@ -27,7 +27,7 @@
     "build:windows": "npm run version:sync && docker compose -f docker/docker-compose.yml run --rm build-windows",
     "build:all-platforms": "npm run version:sync && (npm run build:linux & npm run build:windows & wait) && npm run build:macos",
     "build:docker": "docker build -t agent-browser-builder -f docker/Dockerfile.build .",
-    "release": "npm run version:sync && npm run build && npm run build:all-platforms && npm publish",
+    "release": "npm run version:sync && npm run build && npm run build:all-platforms && npm run verify:bundled-binaries && npm run verify:native-version && npm publish",
     "start": "node dist/daemon.js",
     "dev": "tsx src/daemon.ts",
     "typecheck": "tsc --noEmit",
@@ -41,12 +41,16 @@
     "check:turnstile-testkey": "pnpm exec tsx scripts/check-turnstile-testkey.ts",
     "postinstall": "node scripts/postinstall.js",
     "verify:native-version": "node scripts/verify-native-version.js",
+    "verify:bundled-binaries": "node scripts/verify-bundled-binaries.js",
+    "verify:packed-host-binary": "node scripts/verify-packed-host-binary.js",
+    "verify:registry-host-binary": "node scripts/verify-registry-host-binary.js",
+    "prepublishOnly": "pnpm run verify:bundled-binaries && pnpm run verify:native-version && pnpm run verify:packed-host-binary",
     "clawhub:sync": "bash scripts/clawhub-sync.sh",
     "sync:upstream": "bash scripts/sync-upstream.sh",
     "sync:upstream:push": "bash scripts/sync-upstream.sh --push",
     "changeset": "changeset",
     "ci:version": "changeset version && pnpm run version:sync && pnpm install --no-frozen-lockfile",
-    "ci:publish": "pnpm run version:sync && pnpm run build && pnpm run build:native && pnpm run verify:native-version && changeset publish"
+    "ci:publish": "pnpm run version:sync && pnpm run build && pnpm run build:native && pnpm run verify:bundled-binaries && pnpm run verify:native-version && pnpm run verify:packed-host-binary && changeset publish"
   },
   "keywords": [
     "browser",

package/scripts/postinstall.js

@@ -2,19 +2,29 @@
 
 /**
  * Postinstall script for agent-browser
- * 
+ *
  * Downloads the platform-specific native binary if not present.
  * On global installs, patches npm's bin entry to use the native binary directly:
  * - Windows: Overwrites .cmd/.ps1 shims
  * - Mac/Linux: Replaces symlink to point to native binary
  */
 
-import { existsSync, mkdirSync, chmodSync, createWriteStream, unlinkSync, writeFileSync, symlinkSync, lstatSync, readFileSync } from 'fs';
+import {
+  existsSync,
+  mkdirSync,
+  chmodSync,
+  createWriteStream,
+  unlinkSync,
+  writeFileSync,
+  symlinkSync,
+  lstatSync,
+  readFileSync,
+} from 'fs';
 import { dirname, join } from 'path';
 import { fileURLToPath } from 'url';
 import { platform, arch } from 'os';
 import { get } from 'https';
-import { execSync } from 'child_process';
+import { execFileSync, execSync } from 'child_process';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const projectRoot = join(__dirname, '..');
@@ -65,7 +75,7 @@ function getBinCommands(pkg) {
 async function downloadFile(url, dest) {
   return new Promise((resolve, reject) => {
     const file = createWriteStream(dest);
-    
+
     const request = (url) => {
       get(url, (response) => {
         // Handle redirects
@@ -73,12 +83,12 @@ async function downloadFile(url, dest) {
           request(response.headers.location);
           return;
         }
-        
+
         if (response.statusCode !== 200) {
           reject(new Error(`Failed to download: HTTP ${response.statusCode}`));
           return;
         }
-        
+
         response.pipe(file);
         file.on('finish', () => {
           file.close();
@@ -89,7 +99,7 @@ async function downloadFile(url, dest) {
         reject(err);
       });
     };
-    
+
     request(url);
   });
 }
@@ -101,13 +111,21 @@ async function main() {
     if (platform() !== 'win32') {
       chmodSync(binaryPath, 0o755);
     }
-    console.log(`✓ Native binary ready: ${binaryName}`);
-    
-    // On global installs, fix npm's bin entry to use native binary directly
-    await fixGlobalInstallBin();
-    
-    showPlaywrightReminder();
-    return;
+    const installedVersion = readBinaryVersion(binaryPath);
+    if (installedVersion.includes(version)) {
+      console.log(`✓ Native binary ready: ${binaryName}`);
+
+      // On global installs, fix npm's bin entry to use native binary directly
+      await fixGlobalInstallBin();
+
+      showPlaywrightReminder();
+      return;
+    }
+
+    console.log(
+      `⚠ Binary version mismatch detected: expected ${version}, got "${installedVersion || 'unknown'}"`
+    );
+    console.log(`  Re-downloading ${binaryName} from release assets...`);
   }
 
   // Ensure bin directory exists
@@ -120,12 +138,19 @@ async function main() {
 
   try {
     await downloadFile(DOWNLOAD_URL, binaryPath);
-    
+
     // Make executable on Unix
     if (platform() !== 'win32') {
       chmodSync(binaryPath, 0o755);
     }
-    
+
+    const downloadedVersion = readBinaryVersion(binaryPath);
+    if (!downloadedVersion.includes(version)) {
+      throw new Error(
+        `downloaded binary version mismatch: expected ${version}, got "${downloadedVersion || 'unknown'}"`
+      );
+    }
+
     console.log(`✓ Downloaded native binary: ${binaryName}`);
   } catch (err) {
     console.log(`⚠ Could not download native binary: ${err.message}`);
@@ -143,6 +168,17 @@ async function main() {
   showPlaywrightReminder();
 }
 
+function readBinaryVersion(path) {
+  try {
+    return execFileSync(path, ['--version'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    }).trim();
+  } catch {
+    return '';
+  }
+}
+
 function showPlaywrightReminder() {
   console.log('');
   console.log('╔═══════════════════════════════════════════════════════════════════════════╗');

package/scripts/verify-bundled-binaries.js

@@ -0,0 +1,71 @@
+#!/usr/bin/env node
+
+/**
+ * Verifies that all bundled platform binaries are present and embed the
+ * package.json version string. This catches stale binary bundles where the
+ * package version is bumped but one or more binaries were not rebuilt.
+ */
+
+import { existsSync, readFileSync, statSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const rootDir = join(__dirname, "..");
+
+const pkg = JSON.parse(readFileSync(join(rootDir, "package.json"), "utf8"));
+const expectedVersion = String(pkg.version || "").trim();
+
+if (!expectedVersion) {
+  console.error("Error: package.json version is empty");
+  process.exit(1);
+}
+
+const expectedBinaries = [
+  "agent-browser-linux-x64",
+  "agent-browser-linux-arm64",
+  "agent-browser-win32-x64.exe",
+  "agent-browser-darwin-x64",
+  "agent-browser-darwin-arm64",
+];
+
+const minSizeBytes = 100_000;
+const versionBytes = Buffer.from(expectedVersion, "utf8");
+
+let errors = 0;
+
+for (const name of expectedBinaries) {
+  const binaryPath = join(rootDir, "bin", name);
+  if (!existsSync(binaryPath)) {
+    console.error(`ERROR: missing binary: bin/${name}`);
+    errors += 1;
+    continue;
+  }
+
+  const size = statSync(binaryPath).size;
+  if (size < minSizeBytes) {
+    console.error(
+      `ERROR: binary too small: bin/${name} (${size} bytes, expected >= ${minSizeBytes})`
+    );
+    errors += 1;
+    continue;
+  }
+
+  const bytes = readFileSync(binaryPath);
+  if (!bytes.includes(versionBytes)) {
+    console.error(
+      `ERROR: stale binary version: bin/${name} does not contain "${expectedVersion}"`
+    );
+    errors += 1;
+    continue;
+  }
+
+  console.log(`OK: bin/${name} matches version ${expectedVersion}`);
+}
+
+if (errors > 0) {
+  console.error(`\nFound ${errors} binary validation issue(s).`);
+  process.exit(1);
+}
+
+console.log(`\nAll bundled binaries match package.json version ${expectedVersion}.`);

package/scripts/verify-packed-host-binary.js

@@ -0,0 +1,88 @@
+#!/usr/bin/env node
+
+/**
+ * Build an npm tarball locally and verify that the bundled host-platform native
+ * binary reports the same version as package.json.
+ *
+ * This catches publish drifts where package.json is bumped but the embedded
+ * binary still points to an older fork version.
+ */
+
+import { existsSync, mkdtempSync, readFileSync, rmSync, unlinkSync } from 'fs';
+import { tmpdir } from 'os';
+import { dirname, join } from 'path';
+import { fileURLToPath } from 'url';
+import { execFileSync } from 'child_process';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const rootDir = join(__dirname, '..');
+
+const pkg = JSON.parse(readFileSync(join(rootDir, 'package.json'), 'utf8'));
+const expectedVersion = String(pkg.version || '').trim();
+
+if (!expectedVersion) {
+  console.error('Error: package.json version is empty');
+  process.exit(1);
+}
+
+const ext = process.platform === 'win32' ? '.exe' : '';
+const hostBinaryName = `agent-browser-${process.platform}-${process.arch}${ext}`;
+
+let tempDir = '';
+let packedTarball = '';
+
+try {
+  const packRaw = execFileSync('npm', ['pack', '--json'], {
+    cwd: rootDir,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+  const parsed = JSON.parse(packRaw);
+  const filename = parsed?.[0]?.filename;
+  if (!filename || typeof filename !== 'string') {
+    throw new Error(`unexpected npm pack output: ${packRaw}`);
+  }
+
+  packedTarball = join(rootDir, filename);
+  if (!existsSync(packedTarball)) {
+    throw new Error(`tarball not found: ${packedTarball}`);
+  }
+
+  tempDir = mkdtempSync(join(tmpdir(), 'ab-pack-verify-'));
+  execFileSync('tar', ['-xzf', packedTarball, '-C', tempDir], {
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+
+  const packedRoot = join(tempDir, 'package');
+  const packedPkg = JSON.parse(readFileSync(join(packedRoot, 'package.json'), 'utf8'));
+  if (String(packedPkg.version || '').trim() !== expectedVersion) {
+    throw new Error(
+      `packed package.json version mismatch: expected ${expectedVersion}, got ${packedPkg.version}`
+    );
+  }
+
+  const packedBinary = join(packedRoot, 'bin', hostBinaryName);
+  if (!existsSync(packedBinary)) {
+    throw new Error(`host binary missing in tarball: bin/${hostBinaryName}`);
+  }
+
+  const binaryVersion = execFileSync(packedBinary, ['--version'], {
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+  }).trim();
+
+  if (!binaryVersion.includes(expectedVersion)) {
+    throw new Error(
+      `tarball host binary version mismatch: expected ${expectedVersion}, got "${binaryVersion}"`
+    );
+  }
+
+  console.log(`✓ Packed tarball host binary matches package.json (${expectedVersion})`);
+} catch (error) {
+  const message = error instanceof Error ? error.message : String(error);
+  console.error(`Error: ${message}`);
+  process.exitCode = 1;
+} finally {
+  if (tempDir) rmSync(tempDir, { recursive: true, force: true });
+  if (packedTarball && existsSync(packedTarball)) unlinkSync(packedTarball);
+}

package/scripts/verify-registry-host-binary.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+
+/**
+ * Download the published npm tarball and verify that the bundled host-platform
+ * native binary reports the expected package version.
+ */
+
+import { createWriteStream, existsSync, mkdtempSync, readFileSync, rmSync, unlinkSync } from 'fs';
+import { tmpdir } from 'os';
+import { dirname, join } from 'path';
+import { fileURLToPath } from 'url';
+import { execFileSync } from 'child_process';
+import { get } from 'https';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const rootDir = join(__dirname, '..');
+
+const pkg = JSON.parse(readFileSync(join(rootDir, 'package.json'), 'utf8'));
+const packageName = process.env.PACKAGE_NAME || pkg.name || 'agent-browser-stealth';
+const expectedVersion = process.env.EXPECTED_VERSION || pkg.version;
+
+if (!expectedVersion) {
+  console.error('Error: expected version is empty');
+  process.exit(1);
+}
+
+const ext = process.platform === 'win32' ? '.exe' : '';
+const hostBinaryName = `agent-browser-${process.platform}-${process.arch}${ext}`;
+
+function downloadFile(url, dest) {
+  return new Promise((resolve, reject) => {
+    const file = createWriteStream(dest);
+
+    const request = (currentUrl) => {
+      get(currentUrl, (response) => {
+        if (response.statusCode === 301 || response.statusCode === 302) {
+          request(response.headers.location);
+          return;
+        }
+
+        if (response.statusCode !== 200) {
+          reject(new Error(`Failed to download tarball: HTTP ${response.statusCode}`));
+          return;
+        }
+
+        response.pipe(file);
+        file.on('finish', () => {
+          file.close();
+          resolve();
+        });
+      }).on('error', (err) => {
+        reject(err);
+      });
+    };
+
+    request(url);
+  });
+}
+
+let tempDir = '';
+let tarballPath = '';
+
+try {
+  const tarballUrl = execFileSync(
+    'npm',
+    ['view', `${packageName}@${expectedVersion}`, 'dist.tarball'],
+    {
+      cwd: rootDir,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    }
+  ).trim();
+
+  if (!tarballUrl) {
+    throw new Error(`could not resolve dist.tarball for ${packageName}@${expectedVersion}`);
+  }
+
+  tempDir = mkdtempSync(join(tmpdir(), 'ab-registry-verify-'));
+  tarballPath = join(tempDir, 'package.tgz');
+  await downloadFile(tarballUrl, tarballPath);
+
+  execFileSync('tar', ['-xzf', tarballPath, '-C', tempDir], {
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+
+  const packedRoot = join(tempDir, 'package');
+  const packedPkg = JSON.parse(readFileSync(join(packedRoot, 'package.json'), 'utf8'));
+  if (String(packedPkg.version || '').trim() !== expectedVersion) {
+    throw new Error(
+      `registry package.json version mismatch: expected ${expectedVersion}, got ${packedPkg.version}`
+    );
+  }
+
+  const packedBinary = join(packedRoot, 'bin', hostBinaryName);
+  if (!existsSync(packedBinary)) {
+    throw new Error(`host binary missing in registry tarball: bin/${hostBinaryName}`);
+  }
+
+  const binaryVersion = execFileSync(packedBinary, ['--version'], {
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+  }).trim();
+
+  if (!binaryVersion.includes(expectedVersion)) {
+    throw new Error(
+      `registry host binary version mismatch: expected ${expectedVersion}, got "${binaryVersion}"`
+    );
+  }
+
+  console.log(
+    `✓ Registry tarball host binary matches package.json (${packageName}@${expectedVersion})`
+  );
+} catch (error) {
+  const message = error instanceof Error ? error.message : String(error);
+  console.error(`Error: ${message}`);
+  process.exitCode = 1;
+} finally {
+  if (tarballPath && existsSync(tarballPath)) unlinkSync(tarballPath);
+  if (tempDir) rmSync(tempDir, { recursive: true, force: true });
+}

package/skills/agent-browser/SKILL.md

@@ -286,7 +286,10 @@ Notes:
   - non-default session: `Agent Browser Stealth • <session>`
 - Additional extension-side capabilities:
   - Session window isolation + deterministic group colors.
-  - Side panel controls: Focus / Keep Only This / Clean Empty Groups + isolation/auto-clean toggles.
+  - Side panel browser controls: `open` / `back` / `forward` / `reload` + selector-based `click` / `fill` / `press`.
+  - Side panel developer signals: page console events, fetch/xhr network events, command history, and on-demand DOM snapshots.
+  - Side panel automation: action recording, workflow run, slash shortcut binding, and scheduled execution (daily/weekly/monthly/yearly).
+  - Side panel operations: Focus / Keep Only This / Clean Empty Groups + isolation/auto-clean toggles.
   - Session allowlist policy editing and fallback blocking (`about:blank`).
   - Download auto-routing to `agent-browser-stealth/<session>/...`.