agentic-browser 2.4.0 → 2.5.1

package/dist/cli/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { r as createCliRuntime } from "../runtime-PnWvjdzU.mjs";
+import { r as createCliRuntime } from "../runtime-BeD8ZcjH.mjs";
 import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
@@ -242,7 +242,7 @@ async function runCommand(runtime, input) {
 			payload: input.payload
 		});
 	} catch (error) {
-		throw new Error(`Command rejected: ${error.message}`);
+		throw new Error(`Command rejected: ${error.message}`, { cause: error });
 	}
 }
 //#endregion
@@ -279,11 +279,11 @@ async function runMemoryStats(runtime) {
 }
 //#endregion
 //#region src/cli/index.ts
+const collect = (value, previous = []) => [...previous, value];
 async function main() {
 	const runtime = createCliRuntime();
 	const program = new Command();
 	program.name("agentic-browser").description("Agentic browser CLI");
-	const collect = (value, previous = []) => [...previous, value];
 	program.command("session:start").option("--cdp-url <url>", "connect to existing Chrome via CDP endpoint URL").option("--user-profile <path>", "use 'default' for system Chrome profile or an absolute path").option("--headless", "run Chrome in headless mode (no visible window)").option("--user-agent <string>", "override the browser user-agent string").action(async (options) => {
 		if (options.cdpUrl) runtime.context.config.cdpUrl = options.cdpUrl;
 		if (options.userProfile) runtime.context.config.userProfileDir = options.userProfile === "true" || options.userProfile === "default" ? "default" : options.userProfile;

package/dist/index.d.mts

@@ -99,6 +99,7 @@ interface BrowserController {
   getCurrentUrl(targetWsUrl: string): Promise<string>;
   terminate(pid: number): void;
   closeConnection?(targetWsUrl: string): void;
+  dispose?(): void;
 }
 //#endregion
 //#region src/memory/memory-schemas.d.ts
@@ -600,8 +601,7 @@ declare class SessionManager {
 //#region src/transport/control-api.d.ts
 declare class ControlApi {
   private readonly sessions;
-  private readonly eventStore;
-  constructor(sessions: SessionManager, eventStore: EventStore);
+  constructor(sessions: SessionManager);
   createSession(input: {
     browser: "chrome";
   }): Promise<{

package/dist/index.mjs

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { i as createMockAgenticBrowserCore, n as createAgenticBrowserCore, t as AgenticBrowserCore } from "./runtime-PnWvjdzU.mjs";
+import { i as createMockAgenticBrowserCore, n as createAgenticBrowserCore, t as AgenticBrowserCore } from "./runtime-BeD8ZcjH.mjs";
 export { AgenticBrowserCore, createAgenticBrowserCore, createMockAgenticBrowserCore };

package/dist/mcp/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as createAgenticBrowserCore } from "../runtime-PnWvjdzU.mjs";
+import { n as createAgenticBrowserCore } from "../runtime-BeD8ZcjH.mjs";
 import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -155,7 +155,7 @@ function summarizeElements(elements) {
 		});
 	}
 	return {
-		countsByRole: Object.fromEntries([...byRole.entries()].sort((a, b) => b[1] - a[1])),
+		countsByRole: Object.fromEntries([...byRole.entries()].toSorted((a, b) => b[1] - a[1])),
 		primaryActions
 	};
 }

package/dist/{runtime-PnWvjdzU.mjs → runtime-BeD8ZcjH.mjs}

@@ -175,6 +175,10 @@ async function getJson(url, timeoutMs = 5e3) {
 	if (!response.ok) throw new Error(`HTTP ${response.status}: ${url}`);
 	return await response.json();
 }
+/** Debugger connection timing */
+const DEBUGGER_READY_TIMEOUT_MS = 15e3;
+const DEBUGGER_INITIAL_RETRY_DELAY_MS = 50;
+const DEBUGGER_MAX_RETRY_DELAY_MS = 250;
 /** Check if the debug port is accepting TCP connections (faster than an HTTP fetch). */
 function probePort(port) {
 	return new Promise((resolve) => {
@@ -193,16 +197,15 @@ function probePort(port) {
 	});
 }
 async function waitForDebugger(port) {
-	const maxMs = 15e3;
 	const start = Date.now();
-	let delay = 50;
-	while (Date.now() - start < maxMs) {
+	let delay = DEBUGGER_INITIAL_RETRY_DELAY_MS;
+	while (Date.now() - start < DEBUGGER_READY_TIMEOUT_MS) {
 		if (await probePort(port)) try {
 			await getJson(`http://127.0.0.1:${port}/json/version`);
 			return;
 		} catch {}
 		await new Promise((resolve) => setTimeout(resolve, delay));
-		delay = Math.min(delay * 2, 250);
+		delay = Math.min(delay * 2, DEBUGGER_MAX_RETRY_DELAY_MS);
 	}
 	throw new Error("Chrome debug endpoint did not become ready in time");
 }
@@ -694,6 +697,9 @@ function buildKeyDispatchPayload(inputKey) {
 		nativeVirtualKeyCode: 0
 	};
 }
+/** Connection pool configuration */
+const CONNECTION_IDLE_TIMEOUT_MS = 300 * 1e3;
+const CONNECTION_CLEANUP_INTERVAL_MS = 6e4;
 var ChromeCdpBrowserController = class {
 	connections = /* @__PURE__ */ new Map();
 	cleanupInterval;
@@ -701,11 +707,16 @@ var ChromeCdpBrowserController = class {
 		this.baseDir = baseDir;
 		this.connectionFactory = connectionFactory;
 		this.cleanupInterval = setInterval(() => {
-			const cutoff = Date.now() - 300 * 1e3;
+			const cutoff = Date.now() - CONNECTION_IDLE_TIMEOUT_MS;
 			for (const [url, entry] of this.connections) if (entry.lastUsedAt < cutoff) this.dropConnection(url);
-		}, 6e4);
+		}, CONNECTION_CLEANUP_INTERVAL_MS);
 		this.cleanupInterval.unref();
 	}
+	/** Stop the cleanup interval and close all connections. Call when disposing the controller. */
+	dispose() {
+		clearInterval(this.cleanupInterval);
+		for (const url of this.connections.keys()) this.dropConnection(url);
+	}
 	async getConnection(targetWsUrl) {
 		const cached = this.connections.get(targetWsUrl);
 		if (cached) {
@@ -849,12 +860,18 @@ var ChromeCdpBrowserController = class {
 		});
 	}
 	async handleDialogAction(targetWsUrl, payload) {
+		const DIALOG_WAIT_TIMEOUT_MS = 500;
+		const DIALOG_POLL_INTERVAL_MS = 10;
+		const MAX_POLL_ATTEMPTS = 10;
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
 			const cached = this.connections.get(targetWsUrl);
 			if (!cached?.pendingDialog) try {
-				await conn.waitForEvent("Page.javascriptDialogOpening", 500);
-				await new Promise((r) => setTimeout(r, 50));
+				await conn.waitForEvent("Page.javascriptDialogOpening", DIALOG_WAIT_TIMEOUT_MS);
+				for (let attempt = 0; attempt < MAX_POLL_ATTEMPTS; attempt++) {
+					if (cached?.pendingDialog) break;
+					await new Promise((r) => setTimeout(r, DIALOG_POLL_INTERVAL_MS));
+				}
 			} catch {
 				return "no dialog present";
 			}
@@ -1932,27 +1949,122 @@ var ChromeCdpBrowserController = class {
 	* Returns silently on failure — never blocks navigation.
 	*/
 	async dismissCookieBanner(targetWsUrl) {
-		try {
-			const domResult = await this.dismissViaDom(targetWsUrl);
-			if (domResult.dismissed) return domResult;
-		} catch {}
-		try {
-			const a11yResult = await this.dismissViaA11y(targetWsUrl);
-			if (a11yResult.dismissed) return a11yResult;
-		} catch {}
+		for (let attempt = 0; attempt < 2; attempt++) {
+			try {
+				const domResult = await this.dismissViaDom(targetWsUrl);
+				if (domResult.dismissed) return domResult;
+			} catch {}
+			try {
+				const iframeResult = await this.dismissViaIframe(targetWsUrl);
+				if (iframeResult.dismissed) return iframeResult;
+			} catch {}
+			try {
+				const a11yResult = await this.dismissViaA11y(targetWsUrl);
+				if (a11yResult.dismissed) return a11yResult;
+			} catch {}
+			if (attempt === 0) await new Promise((resolve) => setTimeout(resolve, 800));
+		}
 		return { dismissed: false };
 	}
 	async dismissViaDom(targetWsUrl) {
 		const expression = `(() => {
-      // Common cookie-consent button selectors (ordered by specificity)
+      function isVisible(el) {
+        if (!el) return false;
+        const style = getComputedStyle(el);
+        return style.display !== 'none' && style.visibility !== 'hidden' && style.opacity !== '0' && el.offsetWidth > 0;
+      }
+
+      // Comprehensive CMP selectors (ordered by specificity/popularity)
       const selectors = [
+        // OneTrust
         '#onetrust-accept-btn-handler',
+        // Cookiebot
         '#CybotCookiebotDialogBodyLevelButtonLevelOptinAllowAll',
         '#CybotCookiebotDialogBodyButtonAccept',
+        // Usercentrics
+        '#uc-btn-accept-banner',
+        '[data-testid="uc-accept-all-button"]',
+        '.uc-btn-accept',
+        // Didomi
+        '#didomi-notice-agree-button',
+        '.didomi-button[data-action="accept"]',
+        '.didomi-components-button--color.didomi-button-highlight',
+        // Quantcast / GDPR
+        '.qc-cmp2-summary-buttons button[mode="primary"]',
+        '.qc-cmp-button[data-action="accept"]',
+        '#qc-cmp2-ui button.css-1litn2c',
+        // TrustArc / TrueVault
+        '#truste-consent-button',
+        '.trustarc-agree-btn',
+        '#consent_agree',
+        // Consentmanager (zeit.de, etc.)
+        '#cmpbox .cmpboxbtn.cmpboxbtnyes',
+        '#cmpwelcomebtnyes a',
+        '#cmpbntyestxt',
+        '.cmpboxbtnyes',
+        'a.cmpboxbtn.cmpboxbtnyes',
+        // iubenda
+        '.iubenda-cs-accept-btn',
+        '#iubenda-cs-banner .iubenda-cs-accept-btn',
+        // Klaro
+        '.klaro .cm-btn-accept',
+        '.klaro .cm-btn-success',
+        // Osano
+        '.osano-cm-accept-all',
+        '.osano-cm-button--type_accept',
+        // CookieYes / GDPR Cookie Consent
+        '#cookie_action_close_header',
+        '.cky-btn-accept',
+        '[data-cky-tag="accept-button"]',
+        // Termly
+        '.t-acceptAllButton',
+        '#termly-code-snippet-support .t-acceptAllButton',
+        // Axeptio
+        '#axeptio_btn_acceptAll',
+        '[data-axeptio="accept"]',
+        // Complianz / Really Simple Cookie Consent
+        '.cmplz-accept',
+        '#cmplz-cookiebanner-container .cmplz-accept',
+        // CookieFirst
+        '[data-cookiefirst-action="accept"]',
+        // Cookie Notice / Cookie Law Info
+        '#cookie_action_close_header_reject',
+        '#cn-accept-cookie',
+        // Borlabs Cookie (WordPress)
+        '#CookieBoxSaveButton',
+        'a[data-cookie-accept]',
+        // Piwik PRO
+        '#PiwikPROConsentForm-agree-to-all',
+        '.PiwikPROConsentForm-agree-to-all-button',
+        // Civic Cookie Control
+        '#ccc-recommended-settings',
+        '#ccc-dismiss-button',
+        '.ccc-accept-settings',
+        // Moove GDPR (WordPress)
+        '.moove-gdpr-infobar-allow-all',
+        '#moove_gdpr_cookie_modal .moove-gdpr-modal-allow-all',
+        // CookieHub
+        '.cookiehub-accept',
+        '#cookiehub-accept-btn',
+        '.ch2-btn-primary',
+        // Cookie Script
+        '#cookiescript_accept',
+        '#cookiescript_injected .cookiescript_accept',
+        // HubSpot Cookie Banner
+        '#hs-eu-confirmation-button',
+        '#hs-eu-cookie-confirmation .hs-eu-cta',
+        // MediaVine
+        '[data-name="mediavine-gdpr-cmp"] .pur-accept',
+        // Sirdata
+        '#sd-cmp .sd-cmp-JEaB',
+        // Google Consent Mode / Funding Choices
+        '.fc-cta-consent',
+        '.fc-button-background[aria-label="Consent"]',
+        // Generic selectors
         '#accept-cookies', '#acceptCookies',
         '#cookie-accept', '#cookieAccept',
         '#gdpr-accept', '#consent-accept',
-        '#uc-btn-accept-banner',
+        '#cookies-accept-all', '#accept-all-cookies',
         '.cc-accept', '.cc-btn.cc-dismiss',
         '.cookie-consent-accept', '.cookie-accept-btn',
         '.js-cookie-accept', '.js-accept-cookies',
@@ -1960,39 +2072,99 @@ var ChromeCdpBrowserController = class {
         '.gdpr-accept',
         '[data-testid="cookie-accept"]',
         '[data-action="accept-cookies"]',
-        '[data-cookiefirst-action="accept"]',
+        '[data-gdpr="accept"]',
+        '[data-consent="accept"]',
       ];
 
-      for (const sel of selectors) {
+      // Query selector in main DOM and open shadow roots
+      function deepQuery(sel) {
         const el = document.querySelector(sel);
-        if (el && el.offsetParent !== null) {
-          el.click();
-          return JSON.stringify({ dismissed: true, method: 'selector', detail: sel });
+        if (el) return el;
+        for (const host of document.querySelectorAll('*')) {
+          if (host.shadowRoot) {
+            const inner = host.shadowRoot.querySelector(sel);
+            if (inner) return inner;
+          }
         }
+        return null;
+      }
+
+      for (const sel of selectors) {
+        try {
+          const el = deepQuery(sel);
+          if (el && isVisible(el)) {
+            el.click();
+            return JSON.stringify({ dismissed: true, method: 'selector', detail: sel });
+          }
+        } catch { /* invalid selector — skip */ }
       }
 
       // Text-based fallback: find visible buttons with consent text
+      // Patterns are intentionally loose — they use .* instead of strict ^/$ anchors
       const patterns = [
-        /^accept\\s*(all)?\\s*(cookies)?$/i,
-        /^(alle\\s+)?akzeptieren$/i,
-        /^(i\\s+)?agree$/i,
-        /^allow\\s*(all)?\\s*(cookies)?$/i,
-        /^(alle\\s+)?zustimmen$/i,
-        /^got\\s*it$/i,
+        // English
+        /accept\\s*(all)?\\s*(cookies)?/i,
+        /allow\\s*(all)?\\s*(cookies)?/i,
+        /(i\\s+)?agree(\\s+to\\s+all)?/i,
+        /got\\s*it/i,
         /^ok$/i,
         /^consent$/i,
-        /^(j')?accepte(r)?$/i,
-        /^(tout\\s+)?accepter$/i,
-      ];
-      const candidates = [
-        ...document.querySelectorAll('button'),
-        ...document.querySelectorAll('a[role="button"]'),
-        ...document.querySelectorAll('[role="button"]'),
+        /continue\\s+without\\s+accepting/i,
+        // German
+        /(alle\\s+)?akzeptieren/i,
+        /alle\\s+cookies\\s+akzeptieren/i,
+        /(alle\\s+)?zustimmen/i,
+        /einwilligen/i,
+        /einverstanden/i,
+        /alles\\s+erlauben/i,
+        /alles\\s+akzeptieren/i,
+        /geht\\s+klar/i,
+        /verstanden/i,
+        // French
+        /(j')?accepte(r)?(\\s+tout)?/i,
+        /(tout\\s+)?accepter/i,
+        /autoriser/i,
+        // Spanish
+        /aceptar(\\s+todo)?/i,
+        /aceptar\\s+cookies/i,
+        // Italian
+        /accett(a|o)(\\s+tutt[oi])?/i,
+        /accetta\\s+cookies/i,
+        // Dutch
+        /(alle\\s+)?accepteren/i,
+        /alles\\s+accepteren/i,
+        // Portuguese
+        /aceitar(\\s+tudo)?/i,
+        /aceitar\\s+cookies/i,
+        // Polish
+        /akceptuj(\\s+wszystk[oi]e)?/i,
+        /zgadzam\\s+si/i,
+        // Swedish
+        /acceptera(\\s+alla)?/i,
+        // Danish
+        /accepter(\\s+alle)?/i,
+        // Norwegian
+        /aksepter(\\s+alle)?/i,
       ];
+      // Collect candidates from main DOM and open shadow roots
+      function collectButtons(root) {
+        const results = [];
+        for (const tag of ['button', 'a[role="button"]', '[role="button"]', 'div[role="button"]', 'span[role="button"]']) {
+          results.push(...root.querySelectorAll(tag));
+        }
+        // Traverse open shadow roots for CMPs that use web components
+        for (const el of root.querySelectorAll('*')) {
+          if (el.shadowRoot) {
+            results.push(...collectButtons(el.shadowRoot));
+          }
+        }
+        return results;
+      }
+      const candidates = collectButtons(document);
       for (const el of candidates) {
-        if (!el.offsetParent) continue;
+        if (!isVisible(el)) continue;
         const text = (el.textContent || '').trim();
-        if (text.length > 40) continue;
+        if (text.length > 60) continue;
         for (const pat of patterns) {
           if (pat.test(text)) {
             el.click();
@@ -2001,6 +2173,90 @@ var ChromeCdpBrowserController = class {
         }
       }
 
+      return JSON.stringify({ dismissed: false });
+    })()`;
+		return await this.withRetry(targetWsUrl, async (conn) => {
+			await this.ensureEnabled(targetWsUrl);
+			const raw = (await conn.send("Runtime.evaluate", {
+				expression,
+				returnByValue: true
+			})).result.value ?? "{\"dismissed\":false}";
+			try {
+				return JSON.parse(raw);
+			} catch {
+				return { dismissed: false };
+			}
+		});
+	}
+	/**
+	* Handle iframe-based consent banners (Sourcepoint, some OneTrust configurations, etc.)
+	* These banners render inside an iframe that needs to be accessed separately.
+	*/
+	async dismissViaIframe(targetWsUrl) {
+		const expression = `(() => {
+      // Known consent iframe selectors
+      const iframeSelectors = [
+        'iframe[id^="sp_message_iframe"]',              // Sourcepoint (dynamic ID suffix)
+        '#sp_message_iframe',                        // Sourcepoint (static ID)
+        'iframe[id*="sp_message"]',                  // Sourcepoint variants
+        'div[id^="sp_message_container"] iframe',    // Sourcepoint container with iframe
+        'iframe[title*="cookie"]',                   // Generic cookie iframes
+        'iframe[title*="consent"]',                  // Generic consent iframes
+        'iframe[title*="Cookie"]',
+        'iframe[title*="Consent"]',
+        'iframe[title*="Privacy"]',
+        'iframe[title*="privacy"]',
+        'iframe[title*="GDPR"]',
+        'iframe[src*="consent"]',
+        'iframe[src*="cookie"]',
+        'iframe[src*="privacy"]',
+        'iframe[src*="sourcepoint"]',
+        'iframe[src*="consentmanager"]',
+      ];
+
+      for (const sel of iframeSelectors) {
+        try {
+          const iframe = document.querySelector(sel);
+          if (!iframe) continue;
+          const doc = iframe.contentDocument || iframe.contentWindow?.document;
+          if (!doc) continue;
+
+          // Try known selectors inside the iframe
+          const innerSelectors = [
+            // Sourcepoint specific
+            'button.sp_choice_type_11',              // Accept all
+            'button.sp_choice_type_ACCEPT_ALL',      // Accept all variant
+            'button.sp_choice_type_SAVE_AND_EXIT',   // Save & exit
+            '.priv-save-btn',                        // Sourcepoint frame
+            '.message-button',                       // Generic Sourcepoint
+            // Title-based
+            'button[title*="Accept"]', 'button[title*="accept"]',
+            'button[title*="Agree"]', 'button[title*="agree"]',
+            'button[title*="Allow"]',
+            'button[title*="Akzeptieren"]', 'button[title*="akzeptieren"]',
+            'button[title*="Zustimmen"]',
+          ];
+          for (const innerSel of innerSelectors) {
+            const btn = doc.querySelector(innerSel);
+            if (btn && btn.offsetWidth > 0) {
+              btn.click();
+              return JSON.stringify({ dismissed: true, method: 'iframe', detail: sel + ' > ' + innerSel });
+            }
+          }
+
+          // Text-based fallback inside iframe
+          const buttons = doc.querySelectorAll('button, [role="button"]');
+          for (const btn of buttons) {
+            const text = (btn.textContent || '').trim();
+            if (text.length > 60) continue;
+            if (/accept|agree|allow|akzeptieren|zustimmen|einwilligen|accepter|aceptar/i.test(text)) {
+              btn.click();
+              return JSON.stringify({ dismissed: true, method: 'iframe-text', detail: text });
+            }
+          }
+        } catch { /* cross-origin iframe — skip */ }
+      }
+
       return JSON.stringify({ dismissed: false });
     })()`;
 		return await this.withRetry(targetWsUrl, async (conn) => {
@@ -2018,32 +2274,60 @@ var ChromeCdpBrowserController = class {
 	}
 	/**
 	* Use the CDP Accessibility tree to find and click consent buttons.
-	* This works even when consent banners use shadow DOM, iframes, or obfuscated class names.
+	* This works even when consent banners use shadow DOM or obfuscated class names.
+	* Also queries cross-origin iframe frames via Page.getFrameTree for Sourcepoint etc.
 	*/
 	async dismissViaA11y(targetWsUrl) {
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await conn.send("Accessibility.enable");
+			await conn.send("Page.enable");
 			const { nodes } = await conn.send("Accessibility.getFullAXTree");
+			const allNodes = [...nodes];
+			try {
+				const { frameTree } = await conn.send("Page.getFrameTree");
+				for (const child of frameTree.childFrames ?? []) {
+					const url = child.frame.url ?? "";
+					if (/consent|cookie|privacy|sourcepoint|didomi|cmp|gdpr|trustarc|consentmanager|sp_message|onetrust|usercentrics|consent-cdn/i.test(url) || url === "about:blank") try {
+						const frameResult = await conn.send("Accessibility.getFullAXTree", { frameId: child.frame.id });
+						allNodes.push(...frameResult.nodes);
+					} catch {}
+				}
+			} catch {}
 			const consentPatterns = [
-				/^accept\s*(all)?\s*(cookies)?$/i,
-				/^(i\s+)?agree(\s+to\s+all)?$/i,
-				/^allow\s*(all)?\s*(cookies)?$/i,
-				/^got\s*it$/i,
+				/accept\s*(all)?\s*(cookies)?/i,
+				/allow\s*(all)?\s*(cookies)?/i,
+				/(i\s+)?agree(\s+to\s+all)?/i,
+				/got\s*it/i,
 				/^ok$/i,
 				/^consent$/i,
-				/^(alle\s+)?akzeptieren$/i,
-				/^(alle\s+)?zustimmen$/i,
-				/^einverstanden$/i,
-				/^(j')?accepte(r)?(\s+tout)?$/i,
-				/^(tout\s+)?accepter$/i,
-				/^aceptar(\s+todo)?$/i,
-				/^accetta(\s+tutto)?$/i,
-				/^accepteren$/i,
-				/^alle\s+accepteren$/i,
-				/^aceitar(\s+tudo)?$/i
+				/(alle\s+)?akzeptieren/i,
+				/alle\s+cookies\s+akzeptieren/i,
+				/(alle\s+)?zustimmen/i,
+				/einwilligen/i,
+				/einverstanden/i,
+				/alles\s+erlauben/i,
+				/alles\s+akzeptieren/i,
+				/geht\s+klar/i,
+				/verstanden/i,
+				/(j')?accepte(r)?(\s+tout)?/i,
+				/(tout\s+)?accepter/i,
+				/autoriser/i,
+				/aceptar(\s+todo)?/i,
+				/aceptar\s+cookies/i,
+				/accett(a|o)(\s+tutt[oi])?/i,
+				/accetta\s+cookies/i,
+				/(alle\s+)?accepteren/i,
+				/alles\s+accepteren/i,
+				/aceitar(\s+tudo)?/i,
+				/aceitar\s+cookies/i,
+				/akceptuj(\s+wszystk[oi]e)?/i,
+				/zgadzam\s+si/i,
+				/acceptera(\s+alla)?/i,
+				/accepter(\s+alle)?/i,
+				/aksepter(\s+alle)?/i
 			];
 			const candidates = [];
-			for (const node of nodes) {
+			for (const node of allNodes) {
 				if (node.ignored) continue;
 				const role = node.role?.value;
 				if (role !== "button" && role !== "link") continue;
@@ -2200,6 +2484,113 @@ var MockBrowserController = class {
 	closeConnection(_targetWsUrl) {}
 };
 //#endregion
+//#region src/lib/domain-schemas.ts
+const InteractActionSchema = z.enum([
+	"click",
+	"type",
+	"press",
+	"waitFor",
+	"evaluate",
+	"scroll",
+	"hover",
+	"select",
+	"toggle",
+	"goBack",
+	"goForward",
+	"refresh",
+	"dialog"
+]);
+const InteractPayloadSchema = z.object({
+	action: InteractActionSchema,
+	selector: z.string().optional(),
+	fallbackSelectors: z.array(z.string()).optional(),
+	text: z.string().optional(),
+	key: z.string().optional(),
+	value: z.string().optional(),
+	scrollX: z.number().optional(),
+	scrollY: z.number().optional(),
+	timeoutMs: z.number().optional()
+});
+const SessionStatusSchema = z.enum([
+	"starting",
+	"ready",
+	"disconnected",
+	"failed",
+	"terminated"
+]);
+const CommandTypeSchema = z.enum([
+	"navigate",
+	"interact",
+	"restart",
+	"terminate"
+]);
+const ResultStatusSchema = z.enum([
+	"success",
+	"failed",
+	"timed_out"
+]);
+const ConnectionStateSchema = z.enum([
+	"connecting",
+	"ready",
+	"disconnected",
+	"failed"
+]);
+const EventCategorySchema = z.enum([
+	"lifecycle",
+	"security",
+	"command"
+]);
+const EventSeveritySchema = z.enum([
+	"info",
+	"warning",
+	"error"
+]);
+z.object({
+	sessionId: z.string().min(1),
+	status: SessionStatusSchema,
+	browserType: z.literal("chrome"),
+	startedAt: z.string().datetime(),
+	endedAt: z.string().datetime().optional(),
+	authTokenRef: z.string().min(1)
+}).refine((session) => session.status === "terminated" ? Boolean(session.endedAt) : true, {
+	message: "endedAt is required for terminated sessions",
+	path: ["endedAt"]
+});
+z.object({
+	commandId: z.string().min(1),
+	sessionId: z.string().min(1),
+	type: CommandTypeSchema,
+	payload: z.record(z.string(), z.unknown()),
+	submittedAt: z.string().datetime(),
+	completedAt: z.string().datetime().optional(),
+	resultStatus: ResultStatusSchema.optional(),
+	resultMessage: z.string().optional()
+}).refine((command) => command.completedAt ? Boolean(command.resultStatus) : true, {
+	message: "resultStatus is required when completedAt is set",
+	path: ["resultStatus"]
+});
+z.object({
+	sessionId: z.string().min(1),
+	state: ConnectionStateSchema,
+	lastHeartbeatAt: z.string().datetime().optional(),
+	disconnectReason: z.string().optional()
+});
+z.object({
+	sessionId: z.string().min(1),
+	tokenId: z.string().min(1),
+	issuedAt: z.string().datetime(),
+	expiresAt: z.string().datetime().optional(),
+	revokedAt: z.string().datetime().optional()
+});
+z.object({
+	eventId: z.string().min(1),
+	sessionId: z.string().min(1),
+	category: EventCategorySchema,
+	message: z.string().min(1),
+	createdAt: z.string().datetime(),
+	severity: EventSeveritySchema
+});
+//#endregion
 //#region src/session/session-store.ts
 var SessionStore = class {
 	filePath;
@@ -2343,7 +2734,7 @@ var SessionManager = class {
 			return this.mustGetRecord(recovered.sessionId);
 		} catch (restartError) {
 			this.recordEvent(sessionId, "lifecycle", "error", `Recovery failed: ${restartError.message}`);
-			throw new Error(`Session is not ready and recovery failed: ${restartError.message}`);
+			throw new Error(`Session is not ready and recovery failed: ${restartError.message}`, { cause: restartError });
 		}
 		throw new Error("Session is terminated. Start a new session.");
 	}
@@ -2372,8 +2763,11 @@ var SessionManager = class {
 				const finalUrl = await this.browser.navigate(record.targetWsUrl, url);
 				this.store.setLastUrl(sessionId, finalUrl);
 				resultMessage = `Navigated to ${finalUrl}`;
-			} else if (input.type === "interact") resultMessage = `Interaction result: ${await this.browser.interact(record.targetWsUrl, input.payload)}`;
-			else if (input.type === "restart") {
+			} else if (input.type === "interact") {
+				const parsedPayload = InteractPayloadSchema.safeParse(input.payload);
+				if (!parsedPayload.success) throw new Error(`Invalid interact payload: ${parsedPayload.error.message}`);
+				resultMessage = `Interaction result: ${await this.browser.interact(record.targetWsUrl, parsedPayload.data)}`;
+			} else if (input.type === "restart") {
 				await this.restartSession(sessionId);
 				resultMessage = "Session restarted";
 			} else if (input.type === "terminate") {
@@ -2685,9 +3079,8 @@ var SessionManager = class {
 //#endregion
 //#region src/transport/control-api.ts
 var ControlApi = class {
-	constructor(sessions, eventStore) {
+	constructor(sessions) {
 		this.sessions = sessions;
-		this.eventStore = eventStore;
 	}
 	async createSession(input) {
 		return await this.sessions.createSession(input);
@@ -2723,7 +3116,7 @@ var ControlApi = class {
 		return await this.sessions.getCurrentUrl(sessionId);
 	}
 	listEvents(sessionId, limit = 100) {
-		return { events: this.eventStore.list(sessionId, limit) };
+		return { events: this.sessions.listEvents(sessionId, limit) };
 	}
 	searchMemory(input) {
 		return { results: this.sessions.searchMemory(input) };
@@ -2948,7 +3341,7 @@ function buildSelectorHints(insight) {
 		if (!evidence.selector || evidence.result !== "success") continue;
 		weightedSelectors.set(evidence.selector, (weightedSelectors.get(evidence.selector) ?? 0) + 3);
 	}
-	return [...weightedSelectors.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5).map(([selector]) => selector);
+	return [...weightedSelectors.entries()].toSorted((a, b) => b[1] - a[1]).slice(0, 5).map(([selector]) => selector);
 }
 function buildSelectorAliases(insight) {
 	return insight.selectorAliases ?? [];
@@ -3024,7 +3417,7 @@ var MemoryIndex = class {
 			}
 			return best ? [best] : [];
 		}
-		return candidates.map((insight) => scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup)).filter((result) => result.score > 0).sort((a, b) => b.score - a.score).slice(0, limit);
+		return candidates.map((insight) => scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup)).filter((result) => result.score > 0).toSorted((a, b) => b.score - a.score).slice(0, limit);
 	}
 };
 //#endregion
@@ -3401,10 +3794,19 @@ var TaskInsightStore = class {
 };
 //#endregion
 //#region src/memory/memory-service.ts
+/** Memory service configuration */
 const SEARCH_CACHE_TTL_MS = 2e3;
+const MAX_EVIDENCE_RECORDS = 50;
+const MAX_RECIPE_STEPS = 8;
+const MAX_SELECTOR_ALIASES = 10;
+/** Site profile limits */
 const MAX_NAVIGATION_PATHS = 20;
 const MAX_LAYOUT_FINGERPRINTS = 10;
 const MAX_SELECTOR_PATTERNS = 15;
+function normalizePathSegment(value) {
+	const [firstSegment = ""] = value.replace(/\/\*$/, "").split("/").filter(Boolean);
+	return firstSegment.toLowerCase();
+}
 var MemoryService = class {
 	store;
 	profileStore;
@@ -3462,7 +3864,7 @@ var MemoryService = class {
 			fresh: insights.filter((x) => x.freshness === "fresh").length,
 			suspect: insights.filter((x) => x.freshness === "suspect").length,
 			stale: insights.filter((x) => x.freshness === "stale").length,
-			topDomains: [...byDomain.entries()].sort((a, b) => b[1] - a[1]).slice(0, 10).map(([domain, count]) => ({
+			topDomains: [...byDomain.entries()].toSorted((a, b) => b[1] - a[1]).slice(0, 10).map(([domain, count]) => ({
 				domain,
 				count
 			}))
@@ -3514,7 +3916,7 @@ var MemoryService = class {
 		const refreshed = applySuccess({
 			...matched,
 			useCount: matched.useCount + 1,
-			evidence: [...matched.evidence.slice(-49), evidence],
+			evidence: [...matched.evidence.slice(-(MAX_EVIDENCE_RECORDS - 1)), evidence],
 			actionRecipe: this.mergeRecipe(matched.actionRecipe, input.step),
 			expectedOutcome: input.expectedOutcome
 		});
@@ -3548,7 +3950,7 @@ var MemoryService = class {
 		const failed = applyFailure({
 			...matched,
 			useCount: matched.useCount + 1,
-			evidence: [...matched.evidence.slice(-49), evidence]
+			evidence: [...matched.evidence.slice(-(MAX_EVIDENCE_RECORDS - 1)), evidence]
 		}, signal);
 		this.store.upsert(failed);
 		this.invalidateSearchCache();
@@ -3570,7 +3972,7 @@ var MemoryService = class {
 		if (fpIndex >= 0) profile.layoutFingerprints[fpIndex] = fingerprint;
 		else {
 			profile.layoutFingerprints.push(fingerprint);
-			if (profile.layoutFingerprints.length > MAX_LAYOUT_FINGERPRINTS) profile.layoutFingerprints = profile.layoutFingerprints.sort((a, b) => b.lastSeenAt.localeCompare(a.lastSeenAt)).slice(0, MAX_LAYOUT_FINGERPRINTS);
+			if (profile.layoutFingerprints.length > MAX_LAYOUT_FINGERPRINTS) profile.layoutFingerprints = profile.layoutFingerprints.toSorted((a, b) => b.lastSeenAt.localeCompare(a.lastSeenAt)).slice(0, MAX_LAYOUT_FINGERPRINTS);
 		}
 		profile.lastVisitAt = now;
 		this.profileStore.upsert(profile);
@@ -3662,12 +4064,8 @@ var MemoryService = class {
 		return score;
 	}
 	sameFirstPathSegment(left, right) {
-		const normalize = (value) => {
-			const [firstSegment = ""] = value.replace(/\/\*$/, "").split("/").filter(Boolean);
-			return firstSegment.toLowerCase();
-		};
-		const leftSegment = normalize(left);
-		const rightSegment = normalize(right);
+		const leftSegment = normalizePathSegment(left);
+		const rightSegment = normalizePathSegment(right);
 		return Boolean(leftSegment) && leftSegment === rightSegment;
 	}
 	createEvidence(input, result, reason) {
@@ -3696,11 +4094,11 @@ var MemoryService = class {
 				selector,
 				fallbackSelectors: []
 			});
-			if (aliasMap.size >= 10) break;
+			if (aliasMap.size >= MAX_SELECTOR_ALIASES) break;
 		}
 		return {
 			...insight,
-			selectorAliases: [...aliasMap.values()].slice(0, 10)
+			selectorAliases: [...aliasMap.values()].slice(0, MAX_SELECTOR_ALIASES)
 		};
 	}
 	deriveAliasName(selector) {
@@ -3719,7 +4117,7 @@ var MemoryService = class {
 	}
 	mergeRecipe(recipe, step) {
 		if (recipe.find((existing) => existing.summary === step.summary && existing.selector === step.selector)) return recipe;
-		return [...recipe, step].slice(-8);
+		return [...recipe, step].slice(-MAX_RECIPE_STEPS);
 	}
 };
 //#endregion
@@ -3751,7 +4149,7 @@ var AgenticBrowserCore = class {
 	constructor(context, browserController) {
 		this.context = context;
 		this.sessions = new SessionManager(context, browserController);
-		this.api = new ControlApi(this.sessions, context.eventStore);
+		this.api = new ControlApi(this.sessions);
 	}
 	async startSession(input = { browser: "chrome" }) {
 		return await this.api.createSession(input);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-browser",
-  "version": "2.4.0",
+  "version": "2.5.1",
   "description": "CLI and MCP server for AI agents to control Chrome via CDP",
   "keywords": [
     "agent",
@@ -66,9 +66,9 @@
     "typecheck": "tsc"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.27.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "commander": "^14.0.3",
-    "ws": "^8.19.0",
+    "ws": "^8.20.0",
     "zod": "^4.3.6"
   },
   "devDependencies": {
@@ -76,20 +76,20 @@
     "@semantic-release/github": "^12.0.6",
     "@semantic-release/npm": "^13.1.5",
     "@semantic-release/release-notes-generator": "^14.1.0",
-    "@types/node": "^25.4.0",
+    "@types/node": "^25.6.0",
     "@types/ws": "^8.18.1",
-    "oxfmt": "^0.37.0",
-    "oxlint": "^1.52.0",
-    "react": "^19.2.4",
-    "react-dom": "^19.2.4",
+    "oxfmt": "^0.44.0",
+    "oxlint": "^1.59.0",
+    "react": "^19.2.5",
+    "react-dom": "^19.2.5",
     "semantic-release": "^25.0.3",
-    "tsdown": "^0.21.1",
-    "typescript": "^5.9.3",
-    "vitest": "^4.0.18",
+    "tsdown": "^0.21.7",
+    "typescript": "^6.0.2",
+    "vitest": "^4.1.4",
     "vocs": "1.4.1"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
-  "packageManager": "pnpm@10.32.0"
+  "packageManager": "pnpm@10.33.0"
 }