agent-messenger 2.10.2 → 2.11.1

package/src/platforms/teams/token-extractor.ts

@@ -11,6 +11,7 @@ import {
   discoverBrowserProfileDirs,
   findLocalStatePath,
   getBrowserBasePath,
+  getAgentBrowserProfileDirs,
 } from '@/shared/chromium'
 import type { KeychainVariant } from '@/shared/chromium'
 import { DerivedKeyCache } from '@/shared/utils/derived-key-cache'
@@ -20,11 +21,17 @@ import type { TeamsAccountType } from './types'
 export interface ExtractedTeamsToken {
   token: string
   accountType: TeamsAccountType
+  // False when the account type was guessed from the cookie path and needs to be
+  // confirmed against the Teams API (e.g. browser profiles, which don't encode
+  // work vs personal in the path). True for desktop paths that reliably encode
+  // the account type (WV2Profile_tfw vs WV2Profile_tfl).
+  accountTypeKnown: boolean
 }
 
 interface TeamsCookiePath {
   path: string
   accountType: TeamsAccountType
+  accountTypeKnown: boolean
 }
 
 const TEAMS_PROCESS_NAMES: Record<string, string> = {
@@ -56,10 +63,17 @@ export class TeamsTokenExtractor {
   private decryptor: ChromiumCookieDecryptor
   private cookieReader: ChromiumCookieReader
   private debugLog: ((message: string) => void) | null
-
-  constructor(platform?: NodeJS.Platform, keyCache?: DerivedKeyCache, debugLog?: (message: string) => void) {
+  private customBrowserProfileDirs: string[]
+
+  constructor(
+    platform?: NodeJS.Platform,
+    keyCache?: DerivedKeyCache,
+    debugLog?: (message: string) => void,
+    customBrowserProfileDirs?: string[],
+  ) {
     this.platform = platform ?? process.platform
     this.debugLog = debugLog ?? null
+    this.customBrowserProfileDirs = customBrowserProfileDirs ?? []
 
     const resolvedKeyCache = keyCache ?? new DerivedKeyCache()
     this.decryptor = new ChromiumCookieDecryptor({
@@ -91,15 +105,28 @@ export class TeamsTokenExtractor {
           'EBWebView',
         )
         return [
-          { path: join(ebWebViewBase, 'WV2Profile_tfw', 'Cookies'), accountType: 'work' },
-          { path: join(ebWebViewBase, 'WV2Profile_tfw', 'Network', 'Cookies'), accountType: 'work' },
-          { path: join(ebWebViewBase, 'WV2Profile_tfl', 'Cookies'), accountType: 'personal' },
-          { path: join(ebWebViewBase, 'WV2Profile_tfl', 'Network', 'Cookies'), accountType: 'personal' },
-          { path: join(ebWebViewBase, 'Default', 'Cookies'), accountType: 'work' },
-          { path: join(ebWebViewBase, 'Default', 'Network', 'Cookies'), accountType: 'work' },
+          { path: join(ebWebViewBase, 'WV2Profile_tfw', 'Cookies'), accountType: 'work', accountTypeKnown: true },
+          {
+            path: join(ebWebViewBase, 'WV2Profile_tfw', 'Network', 'Cookies'),
+            accountType: 'work',
+            accountTypeKnown: true,
+          },
+          {
+            path: join(ebWebViewBase, 'WV2Profile_tfl', 'Cookies'),
+            accountType: 'personal',
+            accountTypeKnown: true,
+          },
+          {
+            path: join(ebWebViewBase, 'WV2Profile_tfl', 'Network', 'Cookies'),
+            accountType: 'personal',
+            accountTypeKnown: true,
+          },
+          { path: join(ebWebViewBase, 'Default', 'Cookies'), accountType: 'work', accountTypeKnown: false },
+          { path: join(ebWebViewBase, 'Default', 'Network', 'Cookies'), accountType: 'work', accountTypeKnown: false },
           {
             path: join(homedir(), 'Library', 'Application Support', 'Microsoft', 'Teams', 'Cookies'),
             accountType: 'work',
+            accountTypeKnown: false,
           },
         ]
       }
@@ -108,6 +135,7 @@ export class TeamsTokenExtractor {
           {
             path: join(homedir(), '.config', 'Microsoft', 'Microsoft Teams', 'Cookies'),
             accountType: 'work',
+            accountTypeKnown: false,
           },
         ]
       case 'win32': {
@@ -123,13 +151,25 @@ export class TeamsTokenExtractor {
           'EBWebView',
         )
         return [
-          { path: join(ebWebViewBase, 'WV2Profile_tfw', 'Cookies'), accountType: 'work' },
-          { path: join(ebWebViewBase, 'WV2Profile_tfw', 'Network', 'Cookies'), accountType: 'work' },
-          { path: join(ebWebViewBase, 'WV2Profile_tfl', 'Cookies'), accountType: 'personal' },
-          { path: join(ebWebViewBase, 'WV2Profile_tfl', 'Network', 'Cookies'), accountType: 'personal' },
-          { path: join(ebWebViewBase, 'Default', 'Cookies'), accountType: 'work' },
-          { path: join(ebWebViewBase, 'Default', 'Network', 'Cookies'), accountType: 'work' },
-          { path: join(appdata, 'Microsoft', 'Teams', 'Cookies'), accountType: 'work' },
+          { path: join(ebWebViewBase, 'WV2Profile_tfw', 'Cookies'), accountType: 'work', accountTypeKnown: true },
+          {
+            path: join(ebWebViewBase, 'WV2Profile_tfw', 'Network', 'Cookies'),
+            accountType: 'work',
+            accountTypeKnown: true,
+          },
+          {
+            path: join(ebWebViewBase, 'WV2Profile_tfl', 'Cookies'),
+            accountType: 'personal',
+            accountTypeKnown: true,
+          },
+          {
+            path: join(ebWebViewBase, 'WV2Profile_tfl', 'Network', 'Cookies'),
+            accountType: 'personal',
+            accountTypeKnown: true,
+          },
+          { path: join(ebWebViewBase, 'Default', 'Cookies'), accountType: 'work', accountTypeKnown: false },
+          { path: join(ebWebViewBase, 'Default', 'Network', 'Cookies'), accountType: 'work', accountTypeKnown: false },
+          { path: join(appdata, 'Microsoft', 'Teams', 'Cookies'), accountType: 'work', accountTypeKnown: false },
         ]
       }
       default:
@@ -145,11 +185,16 @@ export class TeamsTokenExtractor {
       if (!browserBase) continue
 
       for (const profileDir of discoverBrowserProfileDirs(browserBase)) {
-        paths.push({ path: join(profileDir, 'Cookies'), accountType: 'work' })
-        paths.push({ path: join(profileDir, 'Network', 'Cookies'), accountType: 'work' })
+        paths.push({ path: join(profileDir, 'Cookies'), accountType: 'work', accountTypeKnown: false })
+        paths.push({ path: join(profileDir, 'Network', 'Cookies'), accountType: 'work', accountTypeKnown: false })
       }
     }
 
+    for (const profileDir of getAgentBrowserProfileDirs({ customProfileDirs: this.customBrowserProfileDirs })) {
+      paths.push({ path: join(profileDir, 'Cookies'), accountType: 'work', accountTypeKnown: false })
+      paths.push({ path: join(profileDir, 'Network', 'Cookies'), accountType: 'work', accountTypeKnown: false })
+    }
+
     return paths
   }
 
@@ -213,12 +258,13 @@ export class TeamsTokenExtractor {
 
   private async extractFromCookiesDB(): Promise<ExtractedTeamsToken[]> {
     const results: ExtractedTeamsToken[] = []
-    const seenAccountTypes = new Set<TeamsAccountType>()
+    const seenKnownAccountTypes = new Set<TeamsAccountType>()
+    const seenTokens = new Set<string>()
     const allPaths = this.getTeamsCookiesPaths()
 
     this.debug(`Scanning ${allPaths.length} candidate cookie path(s)`)
 
-    for (const { path: dbPath, accountType } of allPaths) {
+    for (const { path: dbPath, accountType, accountTypeKnown } of allPaths) {
       if (!dbPath) continue
 
       if (!existsSync(dbPath)) {
@@ -226,22 +272,34 @@ export class TeamsTokenExtractor {
         continue
       }
 
-      if (seenAccountTypes.has(accountType)) {
+      if (accountTypeKnown && seenKnownAccountTypes.has(accountType)) {
         this.debug(`  [skip] ${dbPath} (already have ${accountType} account)`)
         continue
       }
 
-      this.debug(`  [try]  ${dbPath} (${accountType})`)
+      const typeLabel = accountTypeKnown ? accountType : `${accountType}?`
+      this.debug(`  [try]  ${dbPath} (${typeLabel})`)
 
       const token = await this.copyAndExtract(dbPath)
-      if (token && this.isValidSkypeToken(token)) {
-        this.debug(`  [ok]   Extracted valid token (${token.length} chars)`)
-        results.push({ token, accountType })
-        seenAccountTypes.add(accountType)
-      } else if (token) {
-        this.debug(`  [fail] Token too short (${token.length} chars, need >=50)`)
-      } else {
-        this.debug(`  [fail] No token extracted`)
+      if (!token || !this.isValidSkypeToken(token)) {
+        if (token) {
+          this.debug(`  [fail] Token too short (${token.length} chars, need >=50)`)
+        } else {
+          this.debug(`  [fail] No token extracted`)
+        }
+        continue
+      }
+
+      if (seenTokens.has(token)) {
+        this.debug(`  [skip] Duplicate token (already extracted from another path)`)
+        continue
+      }
+
+      this.debug(`  [ok]   Extracted valid token (${token.length} chars)`)
+      results.push({ token, accountType, accountTypeKnown })
+      seenTokens.add(token)
+      if (accountTypeKnown) {
+        seenKnownAccountTypes.add(accountType)
       }
     }
 

package/src/platforms/webex/commands/auth.ts

@@ -1,5 +1,6 @@
 import { Command } from 'commander'
 
+import { collectBrowserProfileOption } from '@/shared/chromium'
 import { handleError } from '@/shared/utils/error-handler'
 import { formatOutput } from '@/shared/utils/output'
 import { info, debug } from '@/shared/utils/stderr'
@@ -141,10 +142,14 @@ export async function statusAction(options: { pretty?: boolean }): Promise<void>
   }
 }
 
-export async function extractAction(options: { pretty?: boolean; debug?: boolean }): Promise<void> {
+export async function extractAction(options: {
+  pretty?: boolean
+  debug?: boolean
+  browserProfile?: string[]
+}): Promise<void> {
   try {
     const debugLog = options.debug ? (msg: string) => debug(`[debug] ${msg}`) : undefined
-    const extractor = new WebexTokenExtractor(undefined, debugLog)
+    const extractor = new WebexTokenExtractor(undefined, debugLog, undefined, options.browserProfile)
 
     if (options.debug) {
       debug('[debug] Searching browser profiles for Webex tokens...')
@@ -283,6 +288,12 @@ export const authCommand = new Command('auth')
       .description('Extract Webex token from browser (Chrome, Edge, Arc, Brave)')
       .option('--pretty', 'Pretty print JSON output')
       .option('--debug', 'Show debug output')
+      .option(
+        '--browser-profile <path>',
+        'Additional Chromium profile/user-data directory to scan (repeatable, comma-separated supported)',
+        collectBrowserProfileOption,
+        [],
+      )
       .action(extractAction),
   )
   .addCommand(

package/src/platforms/webex/token-extractor.ts

@@ -4,6 +4,8 @@ import { join } from 'node:path'
 
 import { ClassicLevel } from 'classic-level'
 
+import { getAgentBrowserProfileDirs } from '@/shared/chromium'
+
 export interface ExtractedWebexToken {
   accessToken: string
   refreshToken?: string
@@ -74,11 +76,18 @@ export class WebexTokenExtractor {
   private platform: NodeJS.Platform
   private baseDir: string | null
   private debugLog: ((message: string) => void) | null
-
-  constructor(platform?: NodeJS.Platform, debugLog?: (message: string) => void, baseDir?: string) {
+  private customBrowserProfileDirs: string[]
+
+  constructor(
+    platform?: NodeJS.Platform,
+    debugLog?: (message: string) => void,
+    baseDir?: string,
+    customBrowserProfileDirs?: string[],
+  ) {
     this.platform = platform ?? process.platform
     this.debugLog = debugLog ?? null
     this.baseDir = baseDir ?? null
+    this.customBrowserProfileDirs = customBrowserProfileDirs ?? []
   }
 
   private debug(message: string): void {
@@ -87,7 +96,7 @@ export class WebexTokenExtractor {
 
   getBrowserProfileDirs(): string[] {
     if (this.baseDir) {
-      return this.discoverProfileDirs(this.baseDir)
+      return [...this.discoverProfileDirs(this.baseDir), ...this.getCustomBrowserProfileLevelDBDirs()]
     }
 
     const dirs: string[] = []
@@ -100,6 +109,19 @@ export class WebexTokenExtractor {
       dirs.push(...profileDirs)
     }
 
+    dirs.push(...this.getCustomBrowserProfileLevelDBDirs())
+
+    return dirs
+  }
+
+  private getCustomBrowserProfileLevelDBDirs(): string[] {
+    const dirs: string[] = []
+    for (const profileDir of getAgentBrowserProfileDirs({ customProfileDirs: this.customBrowserProfileDirs })) {
+      const leveldb = join(profileDir, 'Local Storage', 'leveldb')
+      if (existsSync(leveldb)) {
+        dirs.push(leveldb)
+      }
+    }
     return dirs
   }
 

package/src/platforms/wechatbot/cli.ts

@@ -13,6 +13,15 @@ program
   .version(pkg.version)
   .option('--pretty', 'Pretty-print JSON output')
   .option('--account <id>', 'Account ID to use')
+  .hook('preAction', (thisCmd, actionCmd) => {
+    for (const [key, value] of Object.entries(thisCmd.opts())) {
+      if (value === undefined) continue
+      const source = actionCmd.getOptionValueSource(key)
+      if (source === undefined || source === 'default') {
+        actionCmd.setOptionValue(key, value)
+      }
+    }
+  })
 
 program.addCommand(authCommand)
 program.addCommand(whoamiCommand)

package/src/platforms/wechatbot/commands/auth.ts

@@ -1,5 +1,6 @@
 import { Command } from 'commander'
 
+import { cliOutput } from '@/shared/utils/cli-output'
 import { formatOutput } from '@/shared/utils/output'
 
 import { WeChatBotClient } from '../client'
@@ -139,11 +140,6 @@ export async function removeAction(accountId: string, options: ActionOptions): P
   }
 }
 
-function cliOutput(result: ActionResult, pretty?: boolean, exitOnError = true): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error && exitOnError) process.exit(1)
-}
-
 export const authCommand = new Command('auth')
   .description('Authentication commands')
   .addCommand(

package/src/platforms/wechatbot/commands/message.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander'
 
-import { formatOutput } from '@/shared/utils/output'
+import { cliOutput } from '@/shared/utils/cli-output'
 
 import type { WeChatBotNewsArticle } from '../types'
 import type { AccountOption } from './shared'
@@ -63,11 +63,6 @@ export async function sendNewsAction(openId: string, options: MessageOptions): P
   }
 }
 
-function cliOutput(result: MessageResult, pretty?: boolean): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error) process.exit(1)
-}
-
 export const messageCommand = new Command('message')
   .description('Message commands')
   .addCommand(

package/src/platforms/wechatbot/commands/template.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander'
 
-import { formatOutput } from '@/shared/utils/output'
+import { cliOutput } from '@/shared/utils/cli-output'
 
 import type { WeChatBotTemplate } from '../types'
 import type { AccountOption } from './shared'
@@ -61,11 +61,6 @@ export async function deleteAction(templateId: string, options: TemplateOptions)
   }
 }
 
-function cliOutput(result: TemplateResult, pretty?: boolean): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error) process.exit(1)
-}
-
 export const templateCommand = new Command('template')
   .description('Template message commands')
   .addCommand(

package/src/platforms/wechatbot/commands/user.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander'
 
-import { formatOutput } from '@/shared/utils/output'
+import { cliOutput } from '@/shared/utils/cli-output'
 
 import type { WeChatBotUserInfo } from '../types'
 import type { AccountOption } from './shared'
@@ -45,11 +45,6 @@ export async function getAction(openId: string, options: UserOptions): Promise<U
   }
 }
 
-function cliOutput(result: UserResult, pretty?: boolean): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error) process.exit(1)
-}
-
 export const userCommand = new Command('user')
   .description('User management commands')
   .addCommand(

package/src/platforms/wechatbot/commands/whoami.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander'
 
-import { formatOutput } from '@/shared/utils/output'
+import { cliOutput } from '@/shared/utils/cli-output'
 
 import { WeChatBotCredentialManager } from '../credential-manager'
 import type { AccountOption } from './shared'
@@ -29,11 +29,6 @@ export async function whoamiAction(options: AccountOption): Promise<WhoamiResult
   }
 }
 
-function cliOutput(result: WhoamiResult, pretty?: boolean): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error) process.exit(1)
-}
-
 export const whoamiCommand = new Command('whoami')
   .description('Show current authenticated bot')
   .option('--account <id>', 'Account ID to use')

package/src/platforms/whatsappbot/cli.ts

@@ -13,6 +13,15 @@ program
   .version(pkg.version)
   .option('--pretty', 'Pretty-print JSON output')
   .option('--account <id>', 'Account ID to use')
+  .hook('preAction', (thisCmd, actionCmd) => {
+    for (const [key, value] of Object.entries(thisCmd.opts())) {
+      if (value === undefined) continue
+      const source = actionCmd.getOptionValueSource(key)
+      if (source === undefined || source === 'default') {
+        actionCmd.setOptionValue(key, value)
+      }
+    }
+  })
 
 program.addCommand(authCommand)
 program.addCommand(whoamiCommand)

package/src/platforms/whatsappbot/commands/auth.ts

@@ -1,5 +1,6 @@
 import { Command } from 'commander'
 
+import { cliOutput } from '@/shared/utils/cli-output'
 import { formatOutput } from '@/shared/utils/output'
 
 import { WhatsAppBotClient } from '../client'
@@ -145,11 +146,6 @@ export async function removeAction(accountId: string, options: ActionOptions): P
   }
 }
 
-function cliOutput(result: ActionResult, pretty?: boolean, exitOnError = true): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error && exitOnError) process.exit(1)
-}
-
 export const authCommand = new Command('auth')
   .description('Authentication commands')
   .addCommand(

package/src/platforms/whatsappbot/commands/message.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander'
 
-import { formatOutput } from '@/shared/utils/output'
+import { cliOutput } from '@/shared/utils/cli-output'
 
 import type { AccountOption } from './shared'
 import { getClient } from './shared'
@@ -91,11 +91,6 @@ export async function sendDocumentAction(
   }
 }
 
-function cliOutput(result: MessageResult, pretty?: boolean): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error) process.exit(1)
-}
-
 export const messageCommand = new Command('message')
   .description('Message commands')
   .addCommand(

package/src/platforms/whatsappbot/commands/template.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander'
 
-import { formatOutput } from '@/shared/utils/output'
+import { cliOutput } from '@/shared/utils/cli-output'
 
 import type { WhatsAppBotTemplate } from '../types'
 import type { AccountOption } from './shared'
@@ -40,11 +40,6 @@ export async function getAction(templateName: string, options: TemplateOptions):
   }
 }
 
-function cliOutput(result: TemplateResult, pretty?: boolean): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error) process.exit(1)
-}
-
 export const templateCommand = new Command('template')
   .description('Template commands')
   .addCommand(

package/src/platforms/whatsappbot/commands/whoami.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander'
 
-import { formatOutput } from '@/shared/utils/output'
+import { cliOutput } from '@/shared/utils/cli-output'
 
 import { WhatsAppBotClient } from '../client'
 import { WhatsAppBotCredentialManager } from '../credential-manager'
@@ -43,11 +43,6 @@ export async function whoamiAction(options: WhoamiOptions): Promise<WhoamiResult
   }
 }
 
-function cliOutput(result: WhoamiResult, pretty?: boolean): void {
-  console.log(formatOutput(result, pretty))
-  if (result.error) process.exit(1)
-}
-
 export const whoamiCommand = new Command('whoami')
   .description('Show current authenticated bot')
   .option('--account <id>', 'Account ID to use')

package/src/shared/chromium/browsers.test.ts

@@ -8,6 +8,7 @@ import {
   CHROMIUM_BROWSERS,
   discoverBrowserProfileDirs,
   findLocalStatePath,
+  getAgentBrowserProfileDirs,
   getBrowserBasePath,
 } from './browsers'
 
@@ -195,6 +196,85 @@ describe('browsers', () => {
     })
   })
 
+  describe('getAgentBrowserProfileDirs', () => {
+    it('includes profile dirs from env and config files', () => {
+      // given
+      const homeDir = mkdtempSync(join(tmpdir(), 'agent-browser-home-'))
+      const projectDir = mkdtempSync(join(tmpdir(), 'agent-browser-project-'))
+      const customConfigDir = mkdtempSync(join(tmpdir(), 'agent-browser-custom-'))
+      tempDirs.push(homeDir, projectDir, customConfigDir)
+
+      mkdirSync(join(homeDir, '.agent-browser'))
+      writeFileSync(join(homeDir, '.agent-browser', 'config.json'), JSON.stringify({ profile: './global-profile' }))
+      writeFileSync(join(projectDir, 'agent-browser.json'), JSON.stringify({ profile: './project-profile' }))
+      const customConfigPath = join(customConfigDir, 'custom-agent-browser.json')
+      writeFileSync(customConfigPath, JSON.stringify({ profile: './custom-profile' }))
+
+      // when
+      const dirs = getAgentBrowserProfileDirs({
+        cwd: projectDir,
+        env: {
+          AGENT_BROWSER_CONFIG: customConfigPath,
+          AGENT_BROWSER_PROFILE: join(projectDir, 'env-profile'),
+        },
+        homeDir,
+        customProfileDirs: ['./cli-profile', join(projectDir, 'second-cli-profile')],
+      })
+
+      // then
+      expect(dirs).toEqual([
+        join(projectDir, 'cli-profile'),
+        join(projectDir, 'cli-profile', 'Default'),
+        join(projectDir, 'second-cli-profile'),
+        join(projectDir, 'second-cli-profile', 'Default'),
+        join(projectDir, 'env-profile'),
+        join(projectDir, 'env-profile', 'Default'),
+        join(homeDir, '.agent-browser', 'global-profile'),
+        join(homeDir, '.agent-browser', 'global-profile', 'Default'),
+        join(projectDir, 'project-profile'),
+        join(projectDir, 'project-profile', 'Default'),
+        join(customConfigDir, 'custom-profile'),
+        join(customConfigDir, 'custom-profile', 'Default'),
+      ])
+    })
+
+    it('expands existing agent-browser profile bases with numbered Chromium profiles', () => {
+      // given
+      const homeDir = mkdtempSync(join(tmpdir(), 'agent-browser-expand-home-'))
+      const projectDir = mkdtempSync(join(tmpdir(), 'agent-browser-expand-project-'))
+      const profileBase = join(projectDir, 'browser-data')
+      tempDirs.push(homeDir, projectDir)
+      mkdirSync(join(profileBase, 'Profile 1'), { recursive: true })
+      mkdirSync(join(profileBase, 'Profile 2'))
+      writeFileSync(join(projectDir, 'agent-browser.json'), JSON.stringify({ profile: './browser-data' }))
+
+      // when
+      const dirs = getAgentBrowserProfileDirs({ cwd: projectDir, env: {}, homeDir })
+
+      // then
+      expect(dirs).toEqual([
+        profileBase,
+        join(profileBase, 'Default'),
+        join(profileBase, 'Profile 1'),
+        join(profileBase, 'Profile 2'),
+      ])
+    })
+
+    it('ignores malformed agent-browser configs', () => {
+      // given
+      const homeDir = mkdtempSync(join(tmpdir(), 'agent-browser-malformed-home-'))
+      const projectDir = mkdtempSync(join(tmpdir(), 'agent-browser-malformed-project-'))
+      tempDirs.push(homeDir, projectDir)
+      writeFileSync(join(projectDir, 'agent-browser.json'), '{')
+
+      // when
+      const dirs = getAgentBrowserProfileDirs({ cwd: projectDir, env: {}, homeDir })
+
+      // then
+      expect(dirs).toEqual([])
+    })
+  })
+
   describe('findLocalStatePath', () => {
     it('returns null when no Local State exists at any level', () => {
       // given