agentic-browser 2.5.1 → 2.6.0

package/dist/{runtime-BeD8ZcjH.mjs → runtime-BzdbtFF4.mjs}

@@ -4,7 +4,7 @@ import fs from "node:fs";
 import net from "node:net";
 import os from "node:os";
 import path from "node:path";
-import WebSocket, { WebSocketServer } from "ws";
+import WebSocket from "ws";
 import crypto from "node:crypto";
 import { URL as URL$1 } from "node:url";
 import { z } from "zod";
@@ -24,6 +24,7 @@ function discoverChrome(explicitPath) {
 //#endregion
 //#region src/session/browser-controller.ts
 var CdpConnection = class CdpConnection {
+	ws;
 	nextId = 0;
 	pendingRequests = /* @__PURE__ */ new Map();
 	pendingEvents = /* @__PURE__ */ new Map();
@@ -151,6 +152,26 @@ var CdpConnection = class CdpConnection {
 			this.pendingEvents.set(method, waiters);
 		});
 	}
+	/**
+	* Resolve on the first event of `method` whose params satisfy `predicate`.
+	* Uses the persistent onEvent channel so non-matching events (e.g. subframe
+	* navigations) don't consume the wait.
+	*/
+	waitForEventMatching(method, predicate, timeoutMs = 5e3) {
+		return new Promise((resolve, reject) => {
+			let unsubscribe = () => {};
+			const timeout = setTimeout(() => {
+				unsubscribe();
+				reject(/* @__PURE__ */ new Error(`Timed out waiting for ${method}`));
+			}, timeoutMs);
+			unsubscribe = this.onEvent(method, (params) => {
+				if (!predicate(params)) return;
+				clearTimeout(timeout);
+				unsubscribe();
+				resolve(params);
+			});
+		});
+	}
 	onEvent(method, handler) {
 		const handlers = this.eventHandlers.get(method) ?? /* @__PURE__ */ new Set();
 		const wrapped = (params) => {
@@ -231,7 +252,12 @@ async function createTarget(cdpUrl, url = "about:blank") {
 * Apply stealth patches that remove common automation fingerprints.
 * These run before any page loads so sites cannot detect the bot.
 */
-const STEALTH_SCRIPT = `
+const STEALTH_SCRIPT = `(() => {
+  // Guard: registered once per CDP session, so re-connects would re-run the patches
+  // and the non-configurable defineProperty calls below would throw.
+  if (window.__agenticStealthApplied) return;
+  window.__agenticStealthApplied = true;
+
   // Remove navigator.webdriver flag
   Object.defineProperty(navigator, 'webdriver', { get: () => undefined });
 
@@ -273,8 +299,13 @@ const STEALTH_SCRIPT = `
       return origQuery.call(this, params);
     };
   }
-`;
-/** Verify the page is ready, apply stealth, and optionally set a custom user-agent. */
+})();`;
+/**
+* Verify the page is ready, apply stealth, and optionally set a custom user-agent.
+* Returns the user-agent override that was applied (if any) so callers can re-apply
+* it on later CDP sessions — script/UA overrides are scoped to the session that set
+* them and die when this bootstrap connection closes.
+*/
 async function initTarget(targetWsUrl, userAgent) {
 	const conn = await CdpConnection.connect(targetWsUrl);
 	try {
@@ -291,18 +322,38 @@ async function initTarget(targetWsUrl, userAgent) {
 			returnByValue: true,
 			awaitPromise: true
 		});
-		if (userAgent) await conn.send("Network.setUserAgentOverride", { userAgent });
-		else try {
+		if (userAgent) {
+			await conn.send("Network.setUserAgentOverride", { userAgent });
+			return userAgent;
+		}
+		try {
 			const { userAgent: currentUA } = await conn.send("Browser.getVersion");
 			if (currentUA?.includes("HeadlessChrome")) {
 				const cleanUA = currentUA.replace(/HeadlessChrome/g, "Chrome");
 				await conn.send("Network.setUserAgentOverride", { userAgent: cleanUA });
+				return cleanUA;
 			}
 		} catch {}
+		return;
 	} finally {
 		conn.close();
 	}
 }
+/**
+* Run Runtime.evaluate and surface in-page exceptions as errors.
+* CDP reports page-side throws via `exceptionDetails` on an otherwise successful
+* response — callers that read `result.value` directly would treat a throw as an
+* empty (successful) result.
+*/
+async function evaluateOnPage(conn, params) {
+	const result = await conn.send("Runtime.evaluate", params);
+	const details = result.exceptionDetails;
+	if (details) {
+		const raw = details.exception?.description ?? (typeof details.exception?.value === "string" ? details.exception.value : void 0) ?? details.text ?? "Page evaluation failed";
+		throw new Error(raw.split("\n")[0].replace(/^Error:\s*/, ""));
+	}
+	return result;
+}
 async function getFreePort() {
 	return await new Promise((resolve, reject) => {
 		const server = net.createServer();
@@ -535,7 +586,7 @@ ${LOCATOR_RUNTIME_HELPERS}
 ${body}
     })()`;
 }
-const SPECIAL_KEY_PAYLOADS = new Map([
+const SPECIAL_KEY_PAYLOADS = /* @__PURE__ */ new Map([
 	["Enter", {
 		key: "Enter",
 		code: "Enter",
@@ -700,9 +751,28 @@ function buildKeyDispatchPayload(inputKey) {
 /** Connection pool configuration */
 const CONNECTION_IDLE_TIMEOUT_MS = 300 * 1e3;
 const CONNECTION_CLEANUP_INTERVAL_MS = 6e4;
+/**
+* True when the error means the socket was closed/not-open — i.e. the request
+* was never delivered, so re-running it cannot double-apply a side effect.
+* Deliberately excludes CDP timeouts: a timed-out request may have reached
+* Chrome, so replaying it for a non-idempotent op could fire the action twice.
+*/
+function isConnectionError(error) {
+	const message = error instanceof Error ? error.message : String(error);
+	return message.includes("CDP connection closed") || message.includes("WebSocket not open");
+}
 var ChromeCdpBrowserController = class {
+	baseDir;
+	connectionFactory;
 	connections = /* @__PURE__ */ new Map();
 	cleanupInterval;
+	/**
+	* User-agent override resolved at target init, keyed by target ws URL.
+	* Stealth script + UA override are scoped to the CDP session that set them,
+	* so every pooled connection must re-apply them (initTarget's bootstrap
+	* connection closes right after launch).
+	*/
+	userAgentOverrides = /* @__PURE__ */ new Map();
 	constructor(baseDir, connectionFactory = CdpConnection.connect) {
 		this.baseDir = baseDir;
 		this.connectionFactory = connectionFactory;
@@ -724,6 +794,7 @@ var ChromeCdpBrowserController = class {
 			return cached.conn;
 		}
 		const conn = await this.connectionFactory(targetWsUrl);
+		await this.applySessionOverrides(conn, targetWsUrl);
 		this.connections.set(targetWsUrl, {
 			conn,
 			enabled: {
@@ -734,6 +805,26 @@ var ChromeCdpBrowserController = class {
 		});
 		return conn;
 	}
+	/**
+	* Re-apply session-scoped stealth patches + UA override on a fresh connection.
+	* Overrides are per-CDP-session, so every pooled connection must re-apply them
+	* — including in a fresh CLI process that reconnects to an existing target
+	* (the in-memory override map is empty there, so fall back to deriving one).
+	*/
+	async applySessionOverrides(conn, targetWsUrl) {
+		try {
+			await conn.send("Page.addScriptToEvaluateOnNewDocument", { source: STEALTH_SCRIPT });
+			let userAgent = this.userAgentOverrides.get(targetWsUrl);
+			if (!userAgent) try {
+				const { userAgent: currentUA } = await conn.send("Browser.getVersion");
+				if (currentUA?.includes("HeadlessChrome")) {
+					userAgent = currentUA.replace(/HeadlessChrome/g, "Chrome");
+					this.userAgentOverrides.set(targetWsUrl, userAgent);
+				}
+			} catch {}
+			if (userAgent) await conn.send("Emulation.setUserAgentOverride", { userAgent });
+		} catch {}
+	}
 	dropConnection(targetWsUrl) {
 		const cached = this.connections.get(targetWsUrl);
 		if (!cached) return;
@@ -751,7 +842,8 @@ var ChromeCdpBrowserController = class {
 		if (!port) throw new Error(`Invalid CDP URL: could not extract port from ${cdpUrl}`);
 		await waitForDebugger(port);
 		const targetWsUrl = await createTarget(cdpUrl);
-		await initTarget(targetWsUrl, options?.userAgent);
+		const appliedUa = await initTarget(targetWsUrl, options?.userAgent);
+		if (appliedUa) this.userAgentOverrides.set(targetWsUrl, appliedUa);
 		return {
 			pid: 0,
 			cdpUrl,
@@ -819,7 +911,8 @@ var ChromeCdpBrowserController = class {
 				const cdpUrl = `http://127.0.0.1:${port}`;
 				const targetWsUrl = await createTarget(cdpUrl, "about:blank");
 				if (!child.pid) throw new Error("Failed to launch Chrome process");
-				await initTarget(targetWsUrl, userAgent);
+				const appliedUa = await initTarget(targetWsUrl, userAgent);
+				if (appliedUa) this.userAgentOverrides.set(targetWsUrl, appliedUa);
 				return {
 					pid: child.pid,
 					cdpUrl,
@@ -834,12 +927,22 @@ var ChromeCdpBrowserController = class {
 		}
 		throw new Error(lastError?.message ?? "Unable to launch Chrome");
 	}
-	/** Execute fn with a pooled connection; on failure drop connection and retry once. */
-	async withRetry(targetWsUrl, fn) {
+	/**
+	* Execute fn with a pooled connection; on failure drop the connection and retry once.
+	*
+	* `retryOn`:
+	*  - "any" (default): retry any error — safe for reads/idempotent work.
+	*  - "connection": retry only when the connection itself died. Use for
+	*    non-idempotent input (click/type/press/toggle/select): a mid-operation
+	*    connection drop after an event was already dispatched must not replay it,
+	*    and in-page errors (selector missing, covered element) are not transient.
+	*/
+	async withRetry(targetWsUrl, fn, retryOn = "any") {
 		let conn = await this.getConnection(targetWsUrl);
 		try {
 			return await fn(conn);
-		} catch {
+		} catch (error) {
+			if (retryOn === "connection" && !isConnectionError(error)) throw error;
 			this.dropConnection(targetWsUrl);
 			conn = await this.getConnection(targetWsUrl);
 			return await fn(conn);
@@ -848,11 +951,12 @@ var ChromeCdpBrowserController = class {
 	async navigate(targetWsUrl, url) {
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			const navigatedPromise = conn.waitForEvent("Page.frameNavigated", 6e3).catch(() => void 0);
-			const loadPromise = Promise.race([conn.waitForEvent("Page.loadEventFired", 6e3), conn.waitForEvent("Page.frameStoppedLoading", 6e3)]);
+			const mainFrameNavigated = conn.waitForEventMatching ? conn.waitForEventMatching("Page.frameNavigated", (params) => !params.frame?.parentId, 6e3).catch(() => void 0) : conn.waitForEvent("Page.frameNavigated", 6e3).catch(() => void 0);
 			const navResult = await conn.send("Page.navigate", { url });
 			if (navResult.errorText) throw new Error(`Navigation failed: ${navResult.errorText}`);
-			const navigatedEvent = await navigatedPromise;
+			const mainFrameId = navResult.frameId;
+			const loadPromise = Promise.race([conn.waitForEvent("Page.loadEventFired", 6e3), conn.waitForEventMatching ? conn.waitForEventMatching("Page.frameStoppedLoading", (params) => !mainFrameId || params.frameId === mainFrameId, 6e3) : conn.waitForEvent("Page.frameStoppedLoading", 6e3)]);
+			const navigatedEvent = await mainFrameNavigated;
 			try {
 				await loadPromise;
 			} catch {}
@@ -888,7 +992,8 @@ var ChromeCdpBrowserController = class {
 		});
 	}
 	async preparePointerTarget(conn, payload) {
-		const expression = buildLocatorRuntimeExpression("payload", payload, `
+		const point = (await evaluateOnPage(conn, {
+			expression: buildLocatorRuntimeExpression("payload", payload, `
       const resolved = resolveWithFallbacks(payload.selector, payload.fallbackSelectors);
       const el = resolved.element;
       ensureInView(el);
@@ -905,9 +1010,7 @@ var ChromeCdpBrowserController = class {
       }
 
       return { x: point.x, y: point.y };
-`);
-		const point = (await conn.send("Runtime.evaluate", {
-			expression,
+`),
 			returnByValue: true,
 			awaitPromise: true
 		})).result.value;
@@ -918,7 +1021,8 @@ var ChromeCdpBrowserController = class {
 		};
 	}
 	async prepareTypeTarget(conn, payload) {
-		const expression = buildLocatorRuntimeExpression("payload", payload, `
+		const value = (await evaluateOnPage(conn, {
+			expression: buildLocatorRuntimeExpression("payload", payload, `
       const resolved = resolveWithFallbacks(payload.selector, payload.fallbackSelectors);
       const el = resolved.element;
       ensureInView(el);
@@ -967,12 +1071,12 @@ var ChromeCdpBrowserController = class {
       }
 
       return 'ready';
-`);
-		return (await conn.send("Runtime.evaluate", {
-			expression,
+`),
 			returnByValue: true,
 			awaitPromise: true
-		})).result.value ?? "ready";
+		})).result.value;
+		if (value !== "ready" && value !== "cleared") throw new Error("Unable to resolve type target");
+		return value;
 	}
 	async dispatchMouseClick(conn, x, y) {
 		await conn.send("Input.dispatchMouseEvent", {
@@ -998,7 +1102,8 @@ var ChromeCdpBrowserController = class {
 	}
 	async focusTarget(conn, payload) {
 		if (!payload.selector) return;
-		const expression = buildLocatorRuntimeExpression("payload", payload, `
+		await evaluateOnPage(conn, {
+			expression: buildLocatorRuntimeExpression("payload", payload, `
       const resolved = resolveWithFallbacks(payload.selector, payload.fallbackSelectors);
       const el = resolved.element;
       ensureInView(el);
@@ -1006,9 +1111,7 @@ var ChromeCdpBrowserController = class {
         el.focus();
       }
       return true;
-`);
-		await conn.send("Runtime.evaluate", {
-			expression,
+`),
 			returnByValue: true,
 			awaitPromise: true
 		});
@@ -1035,8 +1138,8 @@ var ChromeCdpBrowserController = class {
 	async interact(targetWsUrl, payload) {
 		if (payload.action === "goBack") return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			const navigatedPromise = conn.waitForEvent("Page.frameNavigated", 3e3).catch(() => void 0);
-			await conn.send("Runtime.evaluate", {
+			const navigatedPromise = (conn.waitForEventMatching ? conn.waitForEventMatching("Page.frameNavigated", (params) => !params.frame?.parentId, 3e3) : conn.waitForEvent("Page.frameNavigated", 3e3)).catch(() => void 0);
+			await evaluateOnPage(conn, {
 				expression: "history.back()",
 				returnByValue: true
 			});
@@ -1049,8 +1152,8 @@ var ChromeCdpBrowserController = class {
 		});
 		if (payload.action === "goForward") return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			const navigatedPromise = conn.waitForEvent("Page.frameNavigated", 3e3).catch(() => void 0);
-			await conn.send("Runtime.evaluate", {
+			const navigatedPromise = (conn.waitForEventMatching ? conn.waitForEventMatching("Page.frameNavigated", (params) => !params.frame?.parentId, 3e3) : conn.waitForEvent("Page.frameNavigated", 3e3)).catch(() => void 0);
+			await evaluateOnPage(conn, {
 				expression: "history.forward()",
 				returnByValue: true
 			});
@@ -1100,7 +1203,7 @@ var ChromeCdpBrowserController = class {
 			}
 			if (await this.prepareTypeTarget(conn, payload) === "ready") await conn.send("Input.insertText", { text: payload.text ?? "" });
 			return "typed";
-		});
+		}, "connection");
 		const expression = buildLocatorRuntimeExpression("payload", payload, `
       if (payload.action === 'waitFor') {
         const timeout = payload.timeoutMs ?? 2000;
@@ -1148,12 +1251,12 @@ var ChromeCdpBrowserController = class {
 `);
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			return (await conn.send("Runtime.evaluate", {
+			return (await evaluateOnPage(conn, {
 				expression,
 				returnByValue: true,
 				awaitPromise: true
 			})).result.value ?? "";
-		});
+		}, "connection");
 	}
 	async screenshot(targetWsUrl, options) {
 		return await this.withRetry(targetWsUrl, async (conn) => {
@@ -1172,6 +1275,7 @@ var ChromeCdpBrowserController = class {
 					height: metrics.contentSize.height,
 					scale: 1
 				};
+				params.captureBeyondViewport = true;
 			}
 			return {
 				data: (await conn.send("Page.captureScreenshot", params)).data,
@@ -1181,7 +1285,7 @@ var ChromeCdpBrowserController = class {
 	}
 	async getCurrentUrl(targetWsUrl) {
 		return await this.withRetry(targetWsUrl, async (conn) => {
-			return (await conn.send("Runtime.evaluate", {
+			return (await evaluateOnPage(conn, {
 				expression: "window.location.href",
 				returnByValue: true
 			})).result.value ?? "";
@@ -1229,7 +1333,7 @@ var ChromeCdpBrowserController = class {
 `);
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			const limited = normalizeRuntimeContentPayload((await conn.send("Runtime.evaluate", {
+			const limited = normalizeRuntimeContentPayload((await evaluateOnPage(conn, {
 				expression,
 				returnByValue: true,
 				awaitPromise: true
@@ -1466,7 +1570,7 @@ var ChromeCdpBrowserController = class {
 `);
 		const pageSummary = await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			return (await conn.send("Runtime.evaluate", {
+			return (await evaluateOnPage(conn, {
 				expression,
 				returnByValue: true,
 				awaitPromise: true
@@ -1538,10 +1642,11 @@ var ChromeCdpBrowserController = class {
 			let nodes;
 			if (selector) {
 				const objectGroup = "agentic-browser-a11y";
-				const selected = await conn.send("Runtime.evaluate", {
+				const selected = await evaluateOnPage(conn, {
 					expression: buildLocatorRuntimeExpression("selector", selector, `
       return resolveLocator(selector);
 `),
+					awaitPromise: true,
 					objectGroup
 				});
 				const objectId = selected.result.objectId;
@@ -1932,10 +2037,12 @@ var ChromeCdpBrowserController = class {
 		};
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			return extract(await conn.send("Runtime.evaluate", {
+			const result = await evaluateOnPage(conn, {
 				expression,
-				returnByValue: true
-			}));
+				returnByValue: true,
+				awaitPromise: true
+			});
+			return extract(result);
 		});
 	}
 	/**
@@ -2160,6 +2267,28 @@ var ChromeCdpBrowserController = class {
         }
         return results;
       }
+      // Only click buttons that live inside something that looks like a consent
+      // banner: a dialog/modal, an element with consent-ish id/class, or a
+      // fixed/sticky overlay — AND whose container text actually talks about
+      // cookies/consent. Without this the loose text patterns above would click
+      // arbitrary page buttons ("Accept invitation", "I agree" form submits).
+      const containerTextPattern = /cookie|consent|privacy|gdpr|datenschutz|einwillig|zustimm|tracking|personal data|persönliche daten|données personnelles|datos personales/i;
+      function findBannerContainer(el) {
+        let node = el;
+        let depth = 0;
+        while (node && node.nodeType === 1 && depth < 20) {
+          const role = (node.getAttribute('role') || '').toLowerCase();
+          if (role === 'dialog' || role === 'alertdialog') return node;
+          if (node.getAttribute('aria-modal') === 'true') return node;
+          const idClass = (node.id + ' ' + (typeof node.className === 'string' ? node.className : '')).toLowerCase();
+          if (/cookie|consent|gdpr|cmp|privacy|datenschutz/.test(idClass)) return node;
+          const style = getComputedStyle(node);
+          if (style.position === 'fixed' || style.position === 'sticky') return node;
+          node = node.parentElement || (node.getRootNode && node.getRootNode().host) || null;
+          depth++;
+        }
+        return null;
+      }
       const candidates = collectButtons(document);
       for (const el of candidates) {
         if (!isVisible(el)) continue;
@@ -2167,6 +2296,10 @@ var ChromeCdpBrowserController = class {
         if (text.length > 60) continue;
         for (const pat of patterns) {
           if (pat.test(text)) {
+            const container = findBannerContainer(el);
+            if (!container) break;
+            const containerText = (container.textContent || '').slice(0, 4000);
+            if (!containerTextPattern.test(containerText)) break;
             el.click();
             return JSON.stringify({ dismissed: true, method: 'text', detail: text });
           }
@@ -2177,7 +2310,7 @@ var ChromeCdpBrowserController = class {
     })()`;
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			const raw = (await conn.send("Runtime.evaluate", {
+			const raw = (await evaluateOnPage(conn, {
 				expression,
 				returnByValue: true
 			})).result.value ?? "{\"dismissed\":false}";
@@ -2261,7 +2394,7 @@ var ChromeCdpBrowserController = class {
     })()`;
 		return await this.withRetry(targetWsUrl, async (conn) => {
 			await this.ensureEnabled(targetWsUrl);
-			const raw = (await conn.send("Runtime.evaluate", {
+			const raw = (await evaluateOnPage(conn, {
 				expression,
 				returnByValue: true
 			})).result.value ?? "{\"dismissed\":false}";
@@ -2282,14 +2415,21 @@ var ChromeCdpBrowserController = class {
 			await conn.send("Accessibility.enable");
 			await conn.send("Page.enable");
 			const { nodes } = await conn.send("Accessibility.getFullAXTree");
-			const allNodes = [...nodes];
+			const nodeSets = [{
+				nodes,
+				trusted: false
+			}];
 			try {
 				const { frameTree } = await conn.send("Page.getFrameTree");
 				for (const child of frameTree.childFrames ?? []) {
 					const url = child.frame.url ?? "";
-					if (/consent|cookie|privacy|sourcepoint|didomi|cmp|gdpr|trustarc|consentmanager|sp_message|onetrust|usercentrics|consent-cdn/i.test(url) || url === "about:blank") try {
+					const consentFrame = /consent|cookie|privacy|sourcepoint|didomi|cmp|gdpr|trustarc|consentmanager|sp_message|onetrust|usercentrics|consent-cdn/i.test(url);
+					if (consentFrame || url === "about:blank") try {
 						const frameResult = await conn.send("Accessibility.getFullAXTree", { frameId: child.frame.id });
-						allNodes.push(...frameResult.nodes);
+						nodeSets.push({
+							nodes: frameResult.nodes,
+							trusted: consentFrame
+						});
 					} catch {}
 				}
 			} catch {}
@@ -2326,21 +2466,38 @@ var ChromeCdpBrowserController = class {
 				/accepter(\s+alle)?/i,
 				/aksepter(\s+alle)?/i
 			];
+			const consentAncestorName = /cookie|consent|privacy|gdpr|datenschutz|einwillig|zustimm/i;
+			const hasConsentAncestor = (byId, node) => {
+				let current = node.parentId ? byId.get(node.parentId) : void 0;
+				let depth = 0;
+				while (current && depth < 50) {
+					const role = current.role?.value;
+					if (role === "dialog" || role === "alertdialog") return true;
+					const name = current.name?.value;
+					if (name && consentAncestorName.test(name)) return true;
+					current = current.parentId ? byId.get(current.parentId) : void 0;
+					depth++;
+				}
+				return false;
+			};
 			const candidates = [];
-			for (const node of allNodes) {
-				if (node.ignored) continue;
-				const role = node.role?.value;
-				if (role !== "button" && role !== "link") continue;
-				const name = node.name?.value?.trim();
-				if (!name || name.length > 50) continue;
-				if (node.properties?.some((p) => p.name === "disabled" && p.value.value === true)) continue;
-				for (const pat of consentPatterns) if (pat.test(name) && node.backendDOMNodeId) {
-					candidates.push({
-						nodeId: node.nodeId,
-						backendDOMNodeId: node.backendDOMNodeId,
-						name
-					});
-					break;
+			for (const { nodes: setNodes, trusted } of nodeSets) {
+				const byId = new Map(setNodes.map((n) => [n.nodeId, n]));
+				for (const node of setNodes) {
+					if (node.ignored) continue;
+					const role = node.role?.value;
+					if (role !== "button" && role !== "link") continue;
+					const name = node.name?.value?.trim();
+					if (!name || name.length > 50) continue;
+					if (node.properties?.some((p) => p.name === "disabled" && p.value.value === true)) continue;
+					for (const pat of consentPatterns) if (pat.test(name) && node.backendDOMNodeId) {
+						if (trusted || hasConsentAncestor(byId, node)) candidates.push({
+							nodeId: node.nodeId,
+							backendDOMNodeId: node.backendDOMNodeId,
+							name
+						});
+						break;
+					}
 				}
 			}
 			if (candidates.length === 0) return { dismissed: false };
@@ -2594,7 +2751,6 @@ z.object({
 //#region src/session/session-store.ts
 var SessionStore = class {
 	filePath;
-	cache = null;
 	constructor(baseDir) {
 		fs.mkdirSync(baseDir, { recursive: true });
 		this.filePath = path.join(baseDir, "sessions.json");
@@ -2662,25 +2818,35 @@ var SessionStore = class {
 		this.write(state);
 	}
 	read() {
-		if (this.cache) return this.cache;
+		let raw;
+		try {
+			raw = fs.readFileSync(this.filePath, "utf8");
+		} catch (error) {
+			if (error.code === "ENOENT") return { sessions: {} };
+			throw error;
+		}
 		try {
-			const parsed = JSON.parse(fs.readFileSync(this.filePath, "utf8"));
-			this.cache = parsed;
-			return parsed;
+			return JSON.parse(raw);
 		} catch {
+			try {
+				fs.copyFileSync(this.filePath, `${this.filePath}.corrupt`);
+			} catch {}
 			const empty = { sessions: {} };
 			this.write(empty);
 			return empty;
 		}
 	}
 	write(state) {
-		this.cache = state;
-		fs.writeFileSync(this.filePath, JSON.stringify(state, null, 2), "utf8");
+		const tmp = `${this.filePath}.${process.pid}.tmp`;
+		fs.writeFileSync(tmp, JSON.stringify(state, null, 2), "utf8");
+		fs.renameSync(tmp, this.filePath);
 	}
 };
 //#endregion
 //#region src/session/session-manager.ts
 var SessionManager = class {
+	ctx;
+	browser;
 	store;
 	constructor(ctx, browser) {
 		this.ctx = ctx;
@@ -2773,7 +2939,7 @@ var SessionManager = class {
 			} else if (input.type === "terminate") {
 				await this.terminateSession(sessionId);
 				resultMessage = "Session terminated";
-			}
+			} else throw new Error(`Unsupported command type: ${String(input.type)}`);
 		} catch (error) {
 			resultStatus = "failed";
 			resultMessage = error.message;
@@ -2876,6 +3042,7 @@ var SessionManager = class {
 	}
 	async restartSession(sessionId) {
 		const record = this.mustGetRecord(sessionId);
+		if (record.session.status === "terminated") throw new Error("Session is terminated. Start a new session.");
 		if (this.browser.closeConnection) try {
 			this.browser.closeConnection(record.targetWsUrl);
 		} catch {}
@@ -2907,6 +3074,7 @@ var SessionManager = class {
 	}
 	rotateAuthToken(sessionId) {
 		const record = this.mustGetRecord(sessionId);
+		if (record.session.status === "terminated") throw new Error("Session is terminated. Start a new session.");
 		this.ctx.tokenService.revoke(sessionId);
 		const nextToken = this.ctx.tokenService.issue(sessionId);
 		const updated = {
@@ -3018,8 +3186,10 @@ var SessionManager = class {
 		const record = this.store.get(sessionId);
 		if (!record) throw new Error("Session not found");
 		if (!record.targetWsUrl) throw new Error("Session target is missing. Restart the session.");
-		const seeded = this.ctx.tokenService.get(sessionId);
-		if (!seeded || seeded !== record.session.authTokenRef) this.ctx.tokenService.seed(sessionId, record.session.authTokenRef);
+		if (record.session.status !== "terminated") {
+			const seeded = this.ctx.tokenService.get(sessionId);
+			if (!seeded || seeded !== record.session.authTokenRef) this.ctx.tokenService.seed(sessionId, record.session.authTokenRef);
+		}
 		return record;
 	}
 	recordEvent(sessionId, category, severity, message) {
@@ -3079,6 +3249,7 @@ var SessionManager = class {
 //#endregion
 //#region src/transport/control-api.ts
 var ControlApi = class {
+	sessions;
 	constructor(sessions) {
 		this.sessions = sessions;
 	}
@@ -3136,21 +3307,12 @@ var ControlApi = class {
 };
 //#endregion
 //#region src/lib/config.ts
-const DEFAULT_PORT = 43111;
-const DEFAULT_TIMEOUT_MS = 2e3;
 function loadConfig(env = process.env) {
-	const wsPort = Number.parseInt(env.AGENTIC_BROWSER_WS_PORT ?? `${DEFAULT_PORT}`, 10);
-	const commandTimeoutMs = Number.parseInt(env.AGENTIC_BROWSER_COMMAND_TIMEOUT_MS ?? `${DEFAULT_TIMEOUT_MS}`, 10);
-	if (Number.isNaN(wsPort) || wsPort <= 0) throw new Error("AGENTIC_BROWSER_WS_PORT must be a positive integer");
-	if (Number.isNaN(commandTimeoutMs) || commandTimeoutMs <= 0) throw new Error("AGENTIC_BROWSER_COMMAND_TIMEOUT_MS must be a positive integer");
 	const userProfile = env.AGENTIC_BROWSER_USER_PROFILE;
 	let userProfileDir;
 	if (userProfile === "true" || userProfile === "default") userProfileDir = "default";
 	else if (userProfile && path.isAbsolute(userProfile)) userProfileDir = userProfile;
 	return {
-		host: env.AGENTIC_BROWSER_HOST ?? "127.0.0.1",
-		wsPort,
-		commandTimeoutMs,
 		dataDir: env.AGENTIC_BROWSER_DIR ?? path.join(os.homedir(), ".agentic-browser"),
 		browserExecutablePath: env.AGENTIC_BROWSER_CHROME_EXECUTABLE_PATH ?? env.AGENTIC_BROWSER_CHROME_PATH,
 		cdpUrl: env.AGENTIC_BROWSER_CDP_URL,
@@ -3162,6 +3324,7 @@ function loadConfig(env = process.env) {
 //#endregion
 //#region src/observability/logger.ts
 var Logger = class {
+	namespace;
 	constructor(namespace) {
 		this.namespace = namespace;
 	}
@@ -3198,17 +3361,28 @@ var EventStore = class {
 	filePath;
 	bufferedLines = [];
 	flushTimer;
+	pendingFlushDelayMs = Number.POSITIVE_INFINITY;
 	flushInFlight;
 	constructor(baseDir) {
 		fs.mkdirSync(baseDir, { recursive: true });
 		this.filePath = path.join(baseDir, "session-events.log");
-		process.once("beforeExit", this.flushSync);
-		process.once("exit", this.flushSync);
+		process.on("beforeExit", this.flushSync);
+		process.on("exit", this.flushSync);
+	}
+	/**
+	* Remove the process exit handlers and flush any buffered lines.
+	* Call when discarding a store (repeated context creation in tests/embedders
+	* would otherwise leak a listener pair per instance).
+	*/
+	dispose() {
+		process.off("beforeExit", this.flushSync);
+		process.off("exit", this.flushSync);
+		this.flushSync();
 	}
 	append(event) {
 		let existing = this.events.get(event.sessionId) ?? [];
 		existing.push(event);
-		if (existing.length > MAX_EVENTS_PER_SESSION) existing = existing.slice(-MAX_EVENTS_PER_SESSION);
+		if (existing.length > MAX_EVENTS_PER_SESSION) existing = existing.slice(-500);
 		this.events.set(event.sessionId, existing);
 		this.bufferedLines.push(`${JSON.stringify(event)}\n`);
 		if (this.bufferedLines.length >= 20) {
@@ -3226,7 +3400,12 @@ var EventStore = class {
 	}
 	flushSoon(delayMs) {
 		if (this.flushInFlight) return this.flushInFlight;
-		if (this.flushTimer) return Promise.resolve();
+		if (this.flushTimer) {
+			if (delayMs >= this.pendingFlushDelayMs) return Promise.resolve();
+			clearTimeout(this.flushTimer);
+			this.flushTimer = void 0;
+		}
+		this.pendingFlushDelayMs = delayMs;
 		this.flushTimer = setTimeout(() => {
 			this.flushTimer = void 0;
 			this.flushAsync();
@@ -3283,40 +3462,6 @@ var SessionTokenService = class {
 	}
 };
 //#endregion
-//#region src/transport/ws-server.ts
-var AuthenticatedWsServer = class {
-	logger = new Logger("ws-server");
-	server;
-	constructor(options) {
-		this.options = options;
-	}
-	start(onMessage) {
-		this.server = new WebSocketServer({
-			host: this.options.host,
-			port: this.options.port
-		});
-		this.server.on("connection", (socket, request) => {
-			const url = new URL(request.url ?? "/", `http://${this.options.host}:${this.options.port}`);
-			const sessionId = url.searchParams.get("sessionId");
-			const token = url.searchParams.get("token");
-			if (!sessionId || !token || !this.options.tokenService.validate(sessionId, token)) {
-				this.logger.warning("Rejected websocket client", { sessionId });
-				socket.close(4401, "Unauthorized");
-				return;
-			}
-			socket.on("message", (payload) => onMessage(socket, payload.toString("utf8")));
-		});
-		this.logger.info("WebSocket server started", {
-			host: this.options.host,
-			port: this.options.port
-		});
-	}
-	stop() {
-		this.server?.close();
-		this.server = void 0;
-	}
-};
-//#endregion
 //#region src/memory/memory-index.ts
 function normalize(value) {
 	return value.trim().toLowerCase();
@@ -3357,10 +3502,11 @@ function scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup
 	const insightIntent = normalize(insight.taskIntent);
 	const intentMatch = insightIntent === normalizedIntent ? 1 : 0;
 	const intentPartial = intentMatch === 1 || insightIntent.includes(normalizedIntent) || normalizedIntent.includes(insightIntent) ? .65 : 0;
+	const intentSignal = Math.max(intentMatch, intentPartial);
 	const domainMatch = normalizedDomain && normalize(insight.siteDomain) === normalizedDomain ? 1 : normalizedDomain ? 0 : .6;
 	const reliability = .6 * confidenceFromCounts(insight.successCount, insight.failureCount) + .4 * freshnessWeight(insight.freshness);
 	const selectorQuality = selectorSignal(insight);
-	const score = .5 * Math.max(intentMatch, intentPartial) + .2 * domainMatch + .15 * reliability + .15 * selectorQuality;
+	const score = .5 * intentSignal + .2 * domainMatch + .15 * reliability + .15 * selectorQuality;
 	const result = {
 		insightId: insight.insightId,
 		taskIntent: insight.taskIntent,
@@ -3379,7 +3525,10 @@ function scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup
 		cookieBanner: profile.cookieBanner,
 		visitCount: profile.visitCount
 	};
-	return result;
+	return {
+		result,
+		intentSignal
+	};
 }
 var MemoryIndex = class {
 	/** Domain → insights index, rebuilt lazily when insight list changes. */
@@ -3406,18 +3555,20 @@ var MemoryIndex = class {
 		const limit = input.limit ?? 10;
 		this.ensureIndex(insights);
 		const candidates = normalizedDomain ? this.domainIndex.get(normalizedDomain) ?? [] : insights;
+		const relevant = (scored) => scored.intentSignal > 0;
 		if (limit === 1 && normalizedDomain) {
 			let best;
 			for (const insight of candidates) {
-				const result = scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup);
-				if (result.score > 0 && (!best || result.score > best.score)) {
-					best = result;
-					if (best.score >= .95) break;
+				const scored = scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup);
+				if (!relevant(scored)) continue;
+				if (!best || scored.result.score > best.result.score) {
+					best = scored;
+					if (best.result.score >= 1) break;
 				}
 			}
-			return best ? [best] : [];
+			return best ? [best.result] : [];
 		}
-		return candidates.map((insight) => scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup)).filter((result) => result.score > 0).toSorted((a, b) => b.score - a.score).slice(0, limit);
+		return candidates.map((insight) => scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup)).filter(relevant).toSorted((a, b) => b.result.score - a.result.score).slice(0, limit).map((scored) => scored.result);
 	}
 };
 //#endregion
@@ -3584,11 +3735,15 @@ var SiteProfileStore = class {
 		return this.getCache().find((p) => p.domain === normalized);
 	}
 	upsert(profile) {
-		SiteProfileSchema.parse(profile);
+		const normalized = {
+			...profile,
+			domain: profile.domain.toLowerCase()
+		};
+		SiteProfileSchema.parse(normalized);
 		const profiles = this.getCache();
-		const index = profiles.findIndex((p) => p.domain === profile.domain);
-		if (index >= 0) profiles[index] = profile;
-		else profiles.push(profile);
+		const index = profiles.findIndex((p) => p.domain === normalized.domain);
+		if (index >= 0) profiles[index] = normalized;
+		else profiles.push(normalized);
 		this.markDirty();
 	}
 	flushSync() {
@@ -3603,7 +3758,8 @@ var SiteProfileStore = class {
 	}
 	getCache() {
 		if (this.cached) return this.cached;
-		this.cached = this.readDisk().profiles;
+		const state = this.readDisk();
+		this.cached = state.profiles;
 		return this.cached;
 	}
 	markDirty() {
@@ -3626,7 +3782,7 @@ var SiteProfileStore = class {
 		} catch {
 			const obj = raw;
 			if (Array.isArray(obj?.profiles)) {
-				const salvaged = obj.profiles.filter((item) => SiteProfileSchema.safeParse(item).success);
+				const salvaged = obj.profiles.map((item) => SiteProfileSchema.safeParse(item)).filter((result) => result.success).map((result) => result.data);
 				if (salvaged.length > 0) {
 					const state = { profiles: salvaged };
 					this.backupAndReset();
@@ -3706,6 +3862,15 @@ var TaskInsightStore = class {
 		else insights.push(insight);
 		this.markDirty();
 	}
+	/** Remove an insight by id. Returns true if a record was removed. */
+	remove(insightId) {
+		const insights = this.getCache();
+		const index = insights.findIndex((entry) => entry.insightId === insightId);
+		if (index < 0) return false;
+		insights.splice(index, 1);
+		this.markDirty();
+		return true;
+	}
 	replaceMany(insights) {
 		for (const insight of insights) TaskInsightSchema.parse(insight);
 		this.cached = insights;
@@ -3725,7 +3890,8 @@ var TaskInsightStore = class {
 	/** Return the in-memory cache, loading from disk on first access. */
 	getCache() {
 		if (this.cached) return this.cached;
-		this.cached = this.readDisk().insights;
+		const state = this.readDisk();
+		this.cached = state.insights;
 		return this.cached;
 	}
 	markDirty() {
@@ -3749,7 +3915,7 @@ var TaskInsightStore = class {
 		} catch {
 			const obj = raw;
 			if (Array.isArray(obj?.insights)) {
-				const salvaged = obj.insights.filter((item) => TaskInsightSchema.safeParse(item).success);
+				const salvaged = obj.insights.map((item) => TaskInsightSchema.safeParse(item)).filter((result) => result.success).map((result) => result.data);
 				if (salvaged.length > 0) {
 					const state = { insights: salvaged };
 					this.backupAndReset();
@@ -3796,8 +3962,6 @@ var TaskInsightStore = class {
 //#region src/memory/memory-service.ts
 /** Memory service configuration */
 const SEARCH_CACHE_TTL_MS = 2e3;
-const MAX_EVIDENCE_RECORDS = 50;
-const MAX_RECIPE_STEPS = 8;
 const MAX_SELECTOR_ALIASES = 10;
 /** Site profile limits */
 const MAX_NAVIGATION_PATHS = 20;
@@ -3875,6 +4039,8 @@ var MemoryService = class {
 		const now = (/* @__PURE__ */ new Date()).toISOString();
 		const verified = {
 			...insight,
+			freshness: "fresh",
+			staleStrikeCount: 0,
 			lastVerifiedAt: now,
 			updatedAt: now
 		};
@@ -3916,7 +4082,7 @@ var MemoryService = class {
 		const refreshed = applySuccess({
 			...matched,
 			useCount: matched.useCount + 1,
-			evidence: [...matched.evidence.slice(-(MAX_EVIDENCE_RECORDS - 1)), evidence],
+			evidence: [...matched.evidence.slice(-49), evidence],
 			actionRecipe: this.mergeRecipe(matched.actionRecipe, input.step),
 			expectedOutcome: input.expectedOutcome
 		});
@@ -3932,6 +4098,7 @@ var MemoryService = class {
 			};
 			versioned = this.maybeGenerateAliases(versioned);
 			this.store.upsert(versioned);
+			this.store.remove(matched.insightId);
 			this.invalidateSearchCache();
 			return versioned;
 		}
@@ -3950,7 +4117,7 @@ var MemoryService = class {
 		const failed = applyFailure({
 			...matched,
 			useCount: matched.useCount + 1,
-			evidence: [...matched.evidence.slice(-(MAX_EVIDENCE_RECORDS - 1)), evidence]
+			evidence: [...matched.evidence.slice(-49), evidence]
 		}, signal);
 		this.store.upsert(failed);
 		this.invalidateSearchCache();
@@ -4117,26 +4284,18 @@ var MemoryService = class {
 	}
 	mergeRecipe(recipe, step) {
 		if (recipe.find((existing) => existing.summary === step.summary && existing.selector === step.selector)) return recipe;
-		return [...recipe, step].slice(-MAX_RECIPE_STEPS);
+		return [...recipe, step].slice(-8);
 	}
 };
 //#endregion
 //#region src/cli/app.ts
 function createAppContext(env = process.env) {
 	const config = loadConfig(env);
-	const logger = new Logger("app");
-	const eventStore = new EventStore(config.dataDir);
-	const tokenService = new SessionTokenService();
 	return {
 		config,
-		logger,
-		eventStore,
-		tokenService,
-		wsServer: new AuthenticatedWsServer({
-			host: config.host,
-			port: config.wsPort,
-			tokenService
-		}),
+		logger: new Logger("app"),
+		eventStore: new EventStore(config.dataDir),
+		tokenService: new SessionTokenService(),
 		memoryService: new MemoryService(config.dataDir)
 	};
 }