agentic-browser 2.6.1 → 2.6.2

package/dist/{runtime-BzdbtFF4.mjs → runtime-Bo7FmRYk.mjs}

@@ -8,7 +8,33 @@ import WebSocket from "ws";
 import crypto from "node:crypto";
 import { URL as URL$1 } from "node:url";
 import { z } from "zod";
-//#region src/session/chrome-launcher.ts
+/**
+* Create a directory (recursively) and tighten it to owner-only if it already existed
+* with wider permissions (skips home, filesystem root, and dirs owned by another user).
+*/
+function ensurePrivateDir(dir) {
+	fs.mkdirSync(dir, {
+		recursive: true,
+		mode: 448
+	});
+	try {
+		if (process.platform === "win32" || typeof process.getuid !== "function") return;
+		const resolved = path.resolve(dir);
+		if (resolved === path.parse(resolved).root || resolved === path.resolve(os.homedir())) return;
+		const st = fs.statSync(resolved);
+		if (!st.isDirectory() || st.uid !== process.getuid()) return;
+		if ((st.mode & 63) !== 0) fs.chmodSync(resolved, 448);
+	} catch {}
+}
+/** Write a file with owner-only permissions, tightening any pre-existing file. */
+function writePrivateFileSync(file, data) {
+	fs.writeFileSync(file, data, {
+		encoding: "utf8",
+		mode: 384
+	});
+	fs.chmodSync(file, 384);
+}
+// src/session/chrome-launcher.ts
 const CANDIDATES = [
 	"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
 	"/usr/bin/google-chrome",
@@ -21,8 +47,36 @@ function discoverChrome(explicitPath) {
 	if (!found) throw new Error("No supported Chrome installation found.");
 	return found;
 }
-//#endregion
-//#region src/session/browser-controller.ts
+// src/session/browser-controller.ts
+/**
+* Detect a running Chrome that owns `profileDir`. On macOS/Linux `SingletonLock`
+* is a dangling symlink to `<hostname>-<pid>`, so existsSync (which follows
+* symlinks) cannot see it; inspect the link itself and probe the pid.
+*/
+function isProfileLocked(profileDir) {
+	const lockFile = path.join(profileDir, "SingletonLock");
+	let target;
+	try {
+		if (!fs.lstatSync(lockFile).isSymbolicLink()) return { locked: true };
+		target = fs.readlinkSync(lockFile);
+	} catch {
+		return { locked: false };
+	}
+	const pid = Number(target.slice(target.lastIndexOf("-") + 1));
+	if (!Number.isInteger(pid) || pid <= 0) return { locked: true };
+	try {
+		process.kill(pid, 0);
+		return {
+			locked: true,
+			pid
+		};
+	} catch (e) {
+		return {
+			locked: e.code === "EPERM",
+			pid
+		};
+	}
+}
 var CdpConnection = class CdpConnection {
 	ws;
 	nextId = 0;
@@ -749,7 +803,7 @@ function buildKeyDispatchPayload(inputKey) {
 	};
 }
 /** Connection pool configuration */
-const CONNECTION_IDLE_TIMEOUT_MS = 300 * 1e3;
+const CONNECTION_IDLE_TIMEOUT_MS = 3e5;
 const CONNECTION_CLEANUP_INTERVAL_MS = 6e4;
 /**
 * True when the error means the socket was closed/not-open — i.e. the request
@@ -765,6 +819,7 @@ var ChromeCdpBrowserController = class {
 	baseDir;
 	connectionFactory;
 	connections = /* @__PURE__ */ new Map();
+	pendingConnections = /* @__PURE__ */ new Map();
 	cleanupInterval;
 	/**
 	* User-agent override resolved at target init, keyed by target ws URL.
@@ -793,17 +848,27 @@ var ChromeCdpBrowserController = class {
 			cached.lastUsedAt = Date.now();
 			return cached.conn;
 		}
-		const conn = await this.connectionFactory(targetWsUrl);
-		await this.applySessionOverrides(conn, targetWsUrl);
-		this.connections.set(targetWsUrl, {
-			conn,
-			enabled: {
-				page: false,
-				runtime: false
-			},
-			lastUsedAt: Date.now()
-		});
-		return conn;
+		const pending = this.pendingConnections.get(targetWsUrl);
+		if (pending) return pending;
+		const p = (async () => {
+			const conn = await this.connectionFactory(targetWsUrl);
+			await this.applySessionOverrides(conn, targetWsUrl);
+			this.connections.set(targetWsUrl, {
+				conn,
+				enabled: {
+					page: false,
+					runtime: false
+				},
+				lastUsedAt: Date.now()
+			});
+			return conn;
+		})();
+		this.pendingConnections.set(targetWsUrl, p);
+		try {
+			return await p;
+		} finally {
+			this.pendingConnections.delete(targetWsUrl);
+		}
 	}
 	/**
 	* Re-apply session-scoped stealth patches + UA override on a fresh connection.
@@ -883,9 +948,11 @@ var ChromeCdpBrowserController = class {
 		if (userProfileDir === "default") profileDir = resolveDefaultProfileDir();
 		else if (userProfileDir) profileDir = userProfileDir;
 		else profileDir = path.join(this.baseDir, "profiles", sessionId);
-		fs.mkdirSync(profileDir, { recursive: true });
+		if (userProfileDir) fs.mkdirSync(profileDir, { recursive: true });
+		else ensurePrivateDir(profileDir);
 		const lockFile = path.join(profileDir, "SingletonLock");
-		if (fs.existsSync(lockFile)) throw new Error(`Chrome profile is already in use (lock file exists: ${lockFile}). Quit the running Chrome instance first, or use --cdp-url to connect to it instead.`);
+		const lock = isProfileLocked(profileDir);
+		if (lock.locked) throw new Error(`Chrome profile is already in use (lock file exists: ${lockFile}${lock.pid ? `, pid ${lock.pid}` : ""}). Quit the running Chrome instance first, or use --cdp-url to connect to it instead.`);
 		const launchAttempts = headless ? [{ headless: true }] : [{ headless: false }, { headless: true }];
 		let lastError;
 		for (const attempt of launchAttempts) {
@@ -1078,6 +1145,40 @@ var ChromeCdpBrowserController = class {
 		if (value !== "ready" && value !== "cleared") throw new Error("Unable to resolve type target");
 		return value;
 	}
+	/**
+	* Arm a wait for a main-frame navigation BEFORE the click is dispatched, so
+	* the start event cannot be missed. Resolves "navigated" once the main frame
+	* started loading and then committed/loaded (each stage timeout-tolerant),
+	* or "none" when no main-frame load started within 500 ms.
+	*/
+	async armMainFrameNavigationWait(conn) {
+		const matching = conn.waitForEventMatching?.bind(conn);
+		if (!matching) return { result: (async () => {
+			try {
+				await conn.waitForEvent("Page.frameNavigated", 50);
+			} catch {
+				return "none";
+			}
+			try {
+				await Promise.race([conn.waitForEvent("Page.loadEventFired", 3e3), conn.waitForEvent("Page.frameStoppedLoading", 3e3)]);
+			} catch {}
+			return "navigated";
+		})() };
+		let mainFrameId;
+		try {
+			mainFrameId = (await conn.send("Page.getFrameTree")).frameTree?.frame?.id;
+		} catch {}
+		const isMain = (params) => mainFrameId === void 0 || params.frameId === mainFrameId;
+		const started = matching("Page.frameStartedLoading", isMain, 500).then(() => true, () => false);
+		return { result: (async () => {
+			if (!await started) return "none";
+			const navigated = matching("Page.frameNavigated", (params) => !params.frame?.parentId, 5e3).catch(() => void 0);
+			const loaded = Promise.race([matching("Page.frameStoppedLoading", isMain, 5e3), matching("Page.loadEventFired", () => true, 5e3)]).catch(() => void 0);
+			await navigated;
+			await loaded;
+			return "navigated";
+		})() };
+	}
 	async dispatchMouseClick(conn, x, y) {
 		await conn.send("Input.dispatchMouseEvent", {
 			type: "mouseMoved",
@@ -1177,13 +1278,9 @@ var ChromeCdpBrowserController = class {
 			await this.ensureEnabled(targetWsUrl);
 			if (payload.action === "click") {
 				const point = await this.preparePointerTarget(conn, payload);
+				const nav = await this.armMainFrameNavigationWait(conn);
 				await this.dispatchMouseClick(conn, point.x, point.y);
-				try {
-					await conn.waitForEvent("Page.frameNavigated", 50);
-					try {
-						await Promise.race([conn.waitForEvent("Page.loadEventFired", 3e3), conn.waitForEvent("Page.frameStoppedLoading", 3e3)]);
-					} catch {}
-				} catch {}
+				await nav.result;
 				return "clicked";
 			}
 			if (payload.action === "hover") {
@@ -2640,8 +2737,7 @@ var MockBrowserController = class {
 	terminate(_pid) {}
 	closeConnection(_targetWsUrl) {}
 };
-//#endregion
-//#region src/lib/domain-schemas.ts
+// src/lib/domain-schemas.ts
 const InteractActionSchema = z.enum([
 	"click",
 	"type",
@@ -2747,12 +2843,11 @@ z.object({
 	createdAt: z.string().datetime(),
 	severity: EventSeveritySchema
 });
-//#endregion
-//#region src/session/session-store.ts
+// src/session/session-store.ts
 var SessionStore = class {
 	filePath;
 	constructor(baseDir) {
-		fs.mkdirSync(baseDir, { recursive: true });
+		ensurePrivateDir(baseDir);
 		this.filePath = path.join(baseDir, "sessions.json");
 		if (!fs.existsSync(this.filePath)) this.write({ sessions: {} });
 	}
@@ -2838,12 +2933,68 @@ var SessionStore = class {
 	}
 	write(state) {
 		const tmp = `${this.filePath}.${process.pid}.tmp`;
-		fs.writeFileSync(tmp, JSON.stringify(state, null, 2), "utf8");
+		writePrivateFileSync(tmp, JSON.stringify(state, null, 2));
 		fs.renameSync(tmp, this.filePath);
 	}
 };
-//#endregion
-//#region src/session/session-manager.ts
+// src/session/url-policy.ts
+function assertNavigableUrl(raw, opts) {
+	let parsed;
+	try {
+		parsed = new URL(raw);
+	} catch {
+		throw new Error(`Invalid URL: ${raw}`);
+	}
+	const { protocol } = parsed;
+	if (protocol === "http:" || protocol === "https:") return;
+	if (raw === "about:blank") return;
+	if (protocol === "file:" && opts.allowFileUrls) return;
+	throw new Error(`Navigation to ${protocol} URLs is not allowed${protocol === "file:" ? " (set AGENTIC_BROWSER_ALLOW_FILE_URLS=true to allow file: URLs)" : ""}`);
+}
+// src/memory/redact-step-payload.ts
+const ALLOWED_KEYS = /* @__PURE__ */ new Set([
+	"action",
+	"selector",
+	"fallbackSelectors",
+	"ref",
+	"key",
+	"direction",
+	"amount",
+	"deltaY",
+	"scrollX",
+	"scrollY",
+	"timeoutMs",
+	"redacted"
+]);
+const URL_IN_TEXT = /\bhttps?:\/\/[^\s"'<>]+/gi;
+/** Reduce a URL to origin + pathname, dropping query string and fragment. */
+function stripUrl(rawUrl) {
+	try {
+		const parsed = new URL(rawUrl);
+		return `${parsed.origin}${parsed.pathname}`;
+	} catch {
+		return;
+	}
+}
+/** Strip query strings and fragments from every http(s) URL embedded in free text. */
+function redactUrlsInText(text) {
+	return text.replace(URL_IN_TEXT, (match) => stripUrl(match) ?? "[url]");
+}
+/** Keep only structural, non-secret keys of a step payload; typed text and values are dropped. */
+function redactStepPayload(payload) {
+	const result = {};
+	for (const [key, value] of Object.entries(payload)) {
+		if (key === "url") {
+			const stripped = typeof value === "string" ? stripUrl(value) : void 0;
+			if (stripped !== void 0) result.url = stripped;
+			continue;
+		}
+		if (ALLOWED_KEYS.has(key)) result[key] = value;
+	}
+	if ("text" in payload || "value" in payload) result.redacted = true;
+	return result;
+}
+// src/session/session-manager.ts
 var SessionManager = class {
 	ctx;
 	browser;
@@ -2926,6 +3077,7 @@ var SessionManager = class {
 			if (input.type === "navigate") {
 				const url = String(input.payload.url ?? "");
 				if (!url) throw new Error("navigate command requires payload.url");
+				assertNavigableUrl(url, { allowFileUrls: this.ctx.config.allowFileUrls });
 				const finalUrl = await this.browser.navigate(record.targetWsUrl, url);
 				this.store.setLastUrl(sessionId, finalUrl);
 				resultMessage = `Navigated to ${finalUrl}`;
@@ -3219,7 +3371,7 @@ var SessionManager = class {
 				type: input.type === "navigate" ? "navigate" : input.type === "interact" ? "interact" : "assert",
 				summary: input.type === "interact" ? `interact:${action ?? "unknown"}` : input.type,
 				selector,
-				payload: input.payload
+				payload: redactStepPayload(input.payload)
 			},
 			selector,
 			url: inputUrl
@@ -3246,8 +3398,7 @@ var SessionManager = class {
 		}
 	}
 };
-//#endregion
-//#region src/transport/control-api.ts
+// src/transport/control-api.ts
 var ControlApi = class {
 	sessions;
 	constructor(sessions) {
@@ -3305,8 +3456,7 @@ var ControlApi = class {
 		return this.sessions.cleanupSessions(input);
 	}
 };
-//#endregion
-//#region src/lib/config.ts
+// src/lib/config.ts
 function loadConfig(env = process.env) {
 	const userProfile = env.AGENTIC_BROWSER_USER_PROFILE;
 	let userProfileDir;
@@ -3318,11 +3468,11 @@ function loadConfig(env = process.env) {
 		cdpUrl: env.AGENTIC_BROWSER_CDP_URL,
 		userProfileDir,
 		headless: env.AGENTIC_BROWSER_HEADLESS === "true" || env.AGENTIC_BROWSER_HEADLESS === "1",
-		userAgent: env.AGENTIC_BROWSER_USER_AGENT || void 0
+		userAgent: env.AGENTIC_BROWSER_USER_AGENT || void 0,
+		allowFileUrls: env.AGENTIC_BROWSER_ALLOW_FILE_URLS === "true" || env.AGENTIC_BROWSER_ALLOW_FILE_URLS === "1"
 	};
 }
-//#endregion
-//#region src/observability/logger.ts
+// src/observability/logger.ts
 var Logger = class {
 	namespace;
 	constructor(namespace) {
@@ -3353,8 +3503,7 @@ var Logger = class {
 		this.emit("error", message, context);
 	}
 };
-//#endregion
-//#region src/observability/event-store.ts
+// src/observability/event-store.ts
 const MAX_EVENTS_PER_SESSION = 500;
 var EventStore = class {
 	events = /* @__PURE__ */ new Map();
@@ -3364,8 +3513,11 @@ var EventStore = class {
 	pendingFlushDelayMs = Number.POSITIVE_INFINITY;
 	flushInFlight;
 	constructor(baseDir) {
-		fs.mkdirSync(baseDir, { recursive: true });
+		ensurePrivateDir(baseDir);
 		this.filePath = path.join(baseDir, "session-events.log");
+		try {
+			if (fs.existsSync(this.filePath)) fs.chmodSync(this.filePath, 384);
+		} catch {}
 		process.on("beforeExit", this.flushSync);
 		process.on("exit", this.flushSync);
 	}
@@ -3416,7 +3568,10 @@ var EventStore = class {
 	async flushAsync() {
 		if (this.flushInFlight || this.bufferedLines.length === 0) return;
 		const chunk = this.bufferedLines.splice(0, this.bufferedLines.length).join("");
-		this.flushInFlight = fs.promises.appendFile(this.filePath, chunk, "utf8").catch(() => {}).finally(() => {
+		this.flushInFlight = fs.promises.appendFile(this.filePath, chunk, {
+			encoding: "utf8",
+			mode: 384
+		}).catch(() => {}).finally(() => {
 			this.flushInFlight = void 0;
 			if (this.bufferedLines.length > 0) this.flushSoon(0);
 		});
@@ -3430,12 +3585,14 @@ var EventStore = class {
 		if (this.bufferedLines.length === 0) return;
 		const chunk = this.bufferedLines.splice(0, this.bufferedLines.length).join("");
 		try {
-			fs.appendFileSync(this.filePath, chunk, "utf8");
+			fs.appendFileSync(this.filePath, chunk, {
+				encoding: "utf8",
+				mode: 384
+			});
 		} catch {}
 	};
 };
-//#endregion
-//#region src/auth/session-token.ts
+// src/auth/session-token.ts
 var SessionTokenService = class {
 	tokens = /* @__PURE__ */ new Map();
 	issue(sessionId) {
@@ -3461,8 +3618,7 @@ var SessionTokenService = class {
 		this.tokens.set(sessionId, token);
 	}
 };
-//#endregion
-//#region src/memory/memory-index.ts
+// src/memory/memory-index.ts
 function normalize(value) {
 	return value.trim().toLowerCase();
 }
@@ -3571,8 +3727,7 @@ var MemoryIndex = class {
 		return candidates.map((insight) => scoreInsight(insight, normalizedIntent, normalizedDomain, profileLookup)).filter(relevant).toSorted((a, b) => b.result.score - a.result.score).slice(0, limit).map((scored) => scored.result);
 	}
 };
-//#endregion
-//#region src/memory/staleness-detector.ts
+// src/memory/staleness-detector.ts
 const MAX_SUSPECT_STRIKES = 2;
 function detectStalenessSignal(errorMessage, selector) {
 	const lowered = errorMessage.toLowerCase();
@@ -3600,7 +3755,7 @@ function applyFailure(insight, signal) {
 	};
 }
 function applyAgeStaleness(insight) {
-	const ageDays = (Date.now() - Date.parse(insight.lastVerifiedAt)) / (1440 * 60 * 1e3);
+	const ageDays = (Date.now() - Date.parse(insight.lastVerifiedAt)) / 864e5;
 	if (insight.freshness === "fresh" && ageDays > 30) return {
 		...insight,
 		freshness: "suspect",
@@ -3627,8 +3782,57 @@ function applySuccess(insight) {
 		updatedAt: now
 	};
 }
-//#endregion
-//#region src/memory/memory-schemas.ts
+// src/lib/flush-registry.ts
+const REGISTRY = Symbol.for("agentic-browser.flush-registry");
+function flushAll(items) {
+	for (const item of items) try {
+		item.flushSync();
+	} catch {}
+}
+function createRegistry() {
+	const items = /* @__PURE__ */ new Set();
+	const onSignal = (signal) => {
+		flushAll(items);
+		if (process.listenerCount(signal) === 1) process.exit(0);
+	};
+	return {
+		items,
+		onExit: () => flushAll(items),
+		onSigint: () => onSignal("SIGINT"),
+		onSigterm: () => onSignal("SIGTERM")
+	};
+}
+/**
+* Register an item to be flushed synchronously on process exit / SIGINT / SIGTERM.
+* Returns an idempotent unregister function; the process listeners are removed
+* once the last item is unregistered.
+*/
+function registerFlushable(item) {
+	const proc = process;
+	let registry = proc[REGISTRY];
+	if (!registry) {
+		registry = createRegistry();
+		proc[REGISTRY] = registry;
+		process.on("exit", registry.onExit);
+		process.on("SIGINT", registry.onSigint);
+		process.on("SIGTERM", registry.onSigterm);
+	}
+	registry.items.add(item);
+	const owner = registry;
+	let done = false;
+	return () => {
+		if (done) return;
+		done = true;
+		owner.items.delete(item);
+		if (owner.items.size === 0 && proc[REGISTRY] === owner) {
+			process.off("exit", owner.onExit);
+			process.off("SIGINT", owner.onSigint);
+			process.off("SIGTERM", owner.onSigterm);
+			delete proc[REGISTRY];
+		}
+	};
+}
+// src/memory/memory-schemas.ts
 const InsightFreshnessSchema = z.enum([
 	"fresh",
 	"suspect",
@@ -3705,27 +3909,25 @@ const SiteProfileSchema = z.object({
 	createdAt: z.string().datetime()
 });
 const SiteProfileStateSchema = z.object({ profiles: z.array(SiteProfileSchema) });
-//#endregion
-//#region src/memory/site-profile-store.ts
+// src/memory/site-profile-store.ts
 const EMPTY_STATE$1 = { profiles: [] };
 const FLUSH_DELAY_MS$1 = 500;
-const REGISTERED_EXIT_HANDLERS$1 = Symbol.for("agentic-browser.site-profile-store.exit-handlers");
-const REGISTERED_STORES$1 = Symbol.for("agentic-browser.site-profile-store.instances");
 var SiteProfileStore = class {
 	filePath;
 	cached = null;
 	dirty = false;
 	flushTimer = null;
+	unregister;
 	constructor(baseDir) {
 		const memoryDir = path.join(baseDir, "memory");
-		fs.mkdirSync(memoryDir, { recursive: true });
+		ensurePrivateDir(memoryDir);
 		this.filePath = path.join(memoryDir, "site-profiles.json");
 		const tmpPath = `${this.filePath}.tmp`;
 		try {
 			if (fs.existsSync(tmpPath)) fs.unlinkSync(tmpPath);
 		} catch {}
 		if (!fs.existsSync(this.filePath)) this.writeDisk(EMPTY_STATE$1);
-		this.registerProcessHandlers();
+		this.unregister = registerFlushable(this);
 	}
 	list() {
 		return this.getCache();
@@ -3746,6 +3948,11 @@ var SiteProfileStore = class {
 		else profiles.push(normalized);
 		this.markDirty();
 	}
+	/** Flush pending writes and stop flushing on process exit. Idempotent. */
+	dispose() {
+		this.flushSync();
+		this.unregister();
+	}
 	flushSync() {
 		if (this.flushTimer) {
 			clearTimeout(this.flushTimer);
@@ -3802,51 +4009,30 @@ var SiteProfileStore = class {
 	}
 	writeDisk(state) {
 		const tempPath = `${this.filePath}.tmp`;
-		fs.writeFileSync(tempPath, JSON.stringify(state, null, 2), "utf8");
+		writePrivateFileSync(tempPath, JSON.stringify(state, null, 2));
 		fs.renameSync(tempPath, this.filePath);
 	}
-	registerProcessHandlers() {
-		const proc = process;
-		const stores = proc[REGISTERED_STORES$1] ??= /* @__PURE__ */ new Set();
-		stores.add(this);
-		if (proc[REGISTERED_EXIT_HANDLERS$1]) return;
-		proc[REGISTERED_EXIT_HANDLERS$1] = true;
-		const flushAll = () => {
-			for (const store of stores) store.flushSync();
-		};
-		process.on("exit", flushAll);
-		process.on("SIGINT", () => {
-			flushAll();
-			process.exit(0);
-		});
-		process.on("SIGTERM", () => {
-			flushAll();
-			process.exit(0);
-		});
-	}
 };
-//#endregion
-//#region src/memory/task-insight-store.ts
+// src/memory/task-insight-store.ts
 const EMPTY_STATE = { insights: [] };
 const FLUSH_DELAY_MS = 500;
-const REGISTERED_EXIT_HANDLERS = Symbol.for("agentic-browser.task-insight-store.exit-handlers");
-const REGISTERED_STORES = Symbol.for("agentic-browser.task-insight-store.instances");
 var TaskInsightStore = class {
 	filePath;
 	/** In-memory cache – authoritative after first load. */
 	cached = null;
 	dirty = false;
 	flushTimer = null;
+	unregister;
 	constructor(baseDir) {
 		const memoryDir = path.join(baseDir, "memory");
-		fs.mkdirSync(memoryDir, { recursive: true });
+		ensurePrivateDir(memoryDir);
 		this.filePath = path.join(memoryDir, "insights.json");
 		const tmpPath = `${this.filePath}.tmp`;
 		try {
 			if (fs.existsSync(tmpPath)) fs.unlinkSync(tmpPath);
 		} catch {}
 		if (!fs.existsSync(this.filePath)) this.writeDisk(EMPTY_STATE);
-		this.registerProcessHandlers();
+		this.unregister = registerFlushable(this);
 	}
 	list() {
 		return this.getCache();
@@ -3876,6 +4062,11 @@ var TaskInsightStore = class {
 		this.cached = insights;
 		this.markDirty();
 	}
+	/** Flush pending writes and stop flushing on process exit. Idempotent. */
+	dispose() {
+		this.flushSync();
+		this.unregister();
+	}
 	/** Force an immediate synchronous flush (used at shutdown). */
 	flushSync() {
 		if (this.flushTimer) {
@@ -3892,8 +4083,52 @@ var TaskInsightStore = class {
 		if (this.cached) return this.cached;
 		const state = this.readDisk();
 		this.cached = state.insights;
+		if (this.sanitizeCached(this.cached)) this.markDirty();
 		return this.cached;
 	}
+	/**
+	* Redact already-persisted step payloads and URL query strings/fragments in place.
+	* Returns true if anything changed.
+	*/
+	sanitizeCached(insights) {
+		let changed = false;
+		for (const insight of insights) {
+			const expectedOutcome = redactUrlsInText(insight.expectedOutcome);
+			if (expectedOutcome !== insight.expectedOutcome) {
+				insight.expectedOutcome = expectedOutcome;
+				changed = true;
+			}
+			const taskIntent = redactUrlsInText(insight.taskIntent);
+			if (taskIntent !== insight.taskIntent) {
+				insight.taskIntent = taskIntent;
+				changed = true;
+			}
+			for (const evidence of insight.evidence) {
+				if (evidence.url !== void 0) {
+					const url = stripUrl(evidence.url);
+					if (url !== evidence.url) {
+						evidence.url = url;
+						changed = true;
+					}
+				}
+				if (evidence.reason !== void 0) {
+					const reason = redactUrlsInText(evidence.reason);
+					if (reason !== evidence.reason) {
+						evidence.reason = reason;
+						changed = true;
+					}
+				}
+			}
+			for (const step of insight.actionRecipe) {
+				const redacted = redactStepPayload(step.payload);
+				if (JSON.stringify(redacted) !== JSON.stringify(step.payload)) {
+					step.payload = redacted;
+					changed = true;
+				}
+			}
+		}
+		return changed;
+	}
 	markDirty() {
 		this.dirty = true;
 		if (!this.flushTimer) this.flushTimer = setTimeout(() => {
@@ -3935,31 +4170,11 @@ var TaskInsightStore = class {
 	}
 	writeDisk(state) {
 		const tempPath = `${this.filePath}.tmp`;
-		fs.writeFileSync(tempPath, JSON.stringify(state, null, 2), "utf8");
+		writePrivateFileSync(tempPath, JSON.stringify(state, null, 2));
 		fs.renameSync(tempPath, this.filePath);
 	}
-	registerProcessHandlers() {
-		const proc = process;
-		const stores = proc[REGISTERED_STORES] ??= /* @__PURE__ */ new Set();
-		stores.add(this);
-		if (proc[REGISTERED_EXIT_HANDLERS]) return;
-		proc[REGISTERED_EXIT_HANDLERS] = true;
-		const flushAll = () => {
-			for (const store of stores) store.flushSync();
-		};
-		process.on("exit", flushAll);
-		process.on("SIGINT", () => {
-			flushAll();
-			process.exit(0);
-		});
-		process.on("SIGTERM", () => {
-			flushAll();
-			process.exit(0);
-		});
-	}
 };
-//#endregion
-//#region src/memory/memory-service.ts
+// src/memory/memory-service.ts
 /** Memory service configuration */
 const SEARCH_CACHE_TTL_MS = 2e3;
 const MAX_SELECTOR_ALIASES = 10;
@@ -3987,6 +4202,11 @@ var MemoryService = class {
 		this.store.flushSync();
 		this.profileStore.flushSync();
 	}
+	/** Flush pending writes and release the stores' process exit hooks. */
+	dispose() {
+		this.store.dispose();
+		this.profileStore.dispose();
+	}
 	search(input) {
 		const cacheKey = `${input.taskIntent}\0${input.siteDomain ?? ""}\0${input.limit ?? 10}`;
 		const now = Date.now();
@@ -4048,7 +4268,8 @@ var MemoryService = class {
 		this.invalidateSearchCache();
 		return verified;
 	}
-	recordSuccess(input) {
+	recordSuccess(rawInput) {
+		const input = this.sanitizeInput(rawInput);
 		this.updateSiteProfile(input.siteDomain, input.selector, input.url, input.sitePathPattern);
 		const insights = this.store.list();
 		const matched = this.findBestExactMatch(insights, input);
@@ -4107,13 +4328,14 @@ var MemoryService = class {
 		this.invalidateSearchCache();
 		return withAliases;
 	}
-	recordFailure(input, errorMessage) {
+	recordFailure(rawInput, errorMessage) {
+		const input = this.sanitizeInput(rawInput);
 		this.updateSiteProfile(input.siteDomain, input.selector, input.url, input.sitePathPattern);
 		const insights = this.store.list();
 		const matched = this.findBestExactMatch(insights, input);
 		if (!matched) return;
 		const signal = detectStalenessSignal(errorMessage, input.selector);
-		const evidence = this.createEvidence(input, "failure", errorMessage);
+		const evidence = this.createEvidence(input, "failure", redactUrlsInText(errorMessage));
 		const failed = applyFailure({
 			...matched,
 			useCount: matched.useCount + 1,
@@ -4235,6 +4457,15 @@ var MemoryService = class {
 		const rightSegment = normalizePathSegment(right);
 		return Boolean(leftSegment) && leftSegment === rightSegment;
 	}
+	/** Strip query strings and fragments from every URL-bearing field before it is persisted. */
+	sanitizeInput(input) {
+		return {
+			...input,
+			url: input.url ? stripUrl(input.url) ?? void 0 : void 0,
+			expectedOutcome: redactUrlsInText(input.expectedOutcome),
+			taskIntent: redactUrlsInText(input.taskIntent)
+		};
+	}
 	createEvidence(input, result, reason) {
 		return {
 			evidenceId: crypto.randomUUID(),
@@ -4287,8 +4518,7 @@ var MemoryService = class {
 		return [...recipe, step].slice(-8);
 	}
 };
-//#endregion
-//#region src/cli/app.ts
+// src/cli/app.ts
 function createAppContext(env = process.env) {
 	const config = loadConfig(env);
 	return {
@@ -4299,17 +4529,31 @@ function createAppContext(env = process.env) {
 		memoryService: new MemoryService(config.dataDir)
 	};
 }
-//#endregion
-//#region src/cli/runtime.ts
+// src/cli/runtime.ts
 var AgenticBrowserCore = class {
 	context;
 	sessions;
 	api;
+	browserController;
+	disposed = false;
 	constructor(context, browserController) {
 		this.context = context;
+		this.browserController = browserController;
 		this.sessions = new SessionManager(context, browserController);
 		this.api = new ControlApi(this.sessions);
 	}
+	/**
+	* Release process-level resources (event store and memory store exit handlers,
+	* controller timers). Flushes pending memory writes.
+	* Does not terminate browser sessions. Idempotent.
+	*/
+	async dispose() {
+		if (this.disposed) return;
+		this.disposed = true;
+		this.browserController.dispose?.();
+		this.context.eventStore.dispose();
+		this.context.memoryService.dispose();
+	}
 	async startSession(input = { browser: "chrome" }) {
 		return await this.api.createSession(input);
 	}
@@ -4380,5 +4624,4 @@ function createMockAgenticBrowserCore(env) {
 function createCliRuntime() {
 	return createAgenticBrowserCore();
 }
-//#endregion
-export { createMockAgenticBrowserCore as i, createAgenticBrowserCore as n, createCliRuntime as r, AgenticBrowserCore as t };
+export { isConnectionError as a, createMockAgenticBrowserCore as i, createAgenticBrowserCore as n, ensurePrivateDir as o, createCliRuntime as r, writePrivateFileSync as s, AgenticBrowserCore as t };