agentlinkops 0.6.6 → 0.6.8

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlinkops",
-  "version": "0.6.6",
+  "version": "0.6.8",
   "description": "Connect an agent to AgentLinkOps and run backlink work with it: the connect skill (views, the three discovery verbs, evidence rules), local ledger and campaign skills, a portable CRM, the source-cited content pipeline, user-managed disavow lists, HTML reports and monitoring-event sync.",
   "author": {
     "name": "AgentLinkOps"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlinkops",
-  "version": "0.6.6",
+  "version": "0.6.8",
   "description": "Connect an agent to AgentLinkOps and run backlink work with it: the connect skill (views, the three discovery verbs, evidence rules), local ledger and campaign skills, a portable CRM, the source-cited content pipeline, user-managed disavow lists, HTML reports and monitoring-event sync.",
   "author": {
     "name": "AgentLinkOps"

package/CHANGELOG.md

@@ -3,6 +3,18 @@
 All notable changes to the `agentlinkops` package are recorded here. The version follows the
 plugin manifests in `.claude-plugin/` and `.codex-plugin/`.
 
+## 0.6.8 (2026-09-20)
+
+- Recognize the anonymous ChatGPT response layout and use the latest visible assistant response consistently when reading answers and citations. Exclude user messages and response controls from answer text.
+- Read citation URLs from a newly opened anonymous Sources panel after one normal click on the latest response's Sources control. Require the exact controlled panel layout, visible publisher-label coverage and three matching valid reads; unresolved, hidden, ambiguous or changed evidence remains unknown.
+- Correct the bundled agent reference version. Package, web and documentation preflight checks now reject stale reference versions or mismatched generated copies.
+
+## 0.6.7 (2026-09-20)
+
+- Default browser citation measurement to accountless mode. Saved session files are ignored unless `AGENTLINKOPS_BROWSER_AUTH=saved-session` is explicitly selected.
+- Reject custom launch, environment, extension and Firefox-preference overrides in accountless mode. Proxy admission remains required; direct diagnostics still need explicit authorization and configuration.
+- Keep anonymous login walls, blocked pages and failed answers unknown. Accountless mode does not guarantee that a provider will answer.
+
 ## 0.6.6 (2026-09-20)
 
 - Retain supplied browser usage receipts in a bounded local journal after each attempt and cleanup. Missing meter values remain unknown; failed writes stop the run.

package/cli/citation.js

@@ -28,8 +28,8 @@ const USAGE = `agentlinkops citation — AI citation watches in this repository
                                             tallies land under .agentlinkops/citations/
   agentlinkops citation run PANEL.json --engine chatgpt:web-own-browser
                                             measure the consumer UI through Camoufox
-                                            (dedicated account, personal cadence; evidence
-                                            includes a screenshot of every answer)
+                                            (accountless by default; saved browser sessions
+                                            are not loaded)
   agentlinkops citation sweep PANEL.json --max-usd USD --out INVENTORY.json [--dir DIR]
                                             run a bounded epoch and freeze its retained evidence
   agentlinkops citation inventory PANEL.json --out INVENTORY.json [--epoch ID] [--dir DIR]
@@ -52,8 +52,8 @@ const USAGE = `agentlinkops citation — AI citation watches in this repository
   agentlinkops citation alert PANEL.json [--webhook URL --report REPORT.html]
                                             check the latest epoch for declines;
                                             logs an alert line if any cell declined
-  agentlinkops citation login ENGINE         open a browser, log in once, save the session
-                                            (the engine adapter uses it on every run)
+  agentlinkops citation login ENGINE         optional legacy saved-session setup
+                                            (not needed for accountless measurement)
   agentlinkops citation logout ENGINE        remove a saved session
   agentlinkops citation sessions            list saved engine sessions
   agentlinkops citation sync [--dir DIR] [--evidence]  push local epoch rows to the hosted
@@ -65,8 +65,11 @@ const USAGE = `agentlinkops citation — AI citation watches in this repository
 
 Panel (JSON): targets (domain or url, brand, aliases), prompts, engines
 ([{ "engine": "mock" | "perplexity", "model": "…" }]), optional samples and maxUsd.
-Live engines need their configured credentials or a usable browser session; the mock
-engine runs everything at zero cost. Every run states its estimated spend, and the
+API engines need their configured credentials. Browser measurement defaults to
+AGENTLINKOPS_BROWSER_AUTH=accountless and never loads saved sessions in that mode.
+Optional legacy saved-session mode requires explicit AGENTLINKOPS_BROWSER_AUTH=saved-session.
+Anonymous login walls or failed answers remain unknown; access is not guaranteed.
+The mock engine runs everything at zero cost. Every run states its estimated spend, and the
 cap reserves estimated cost before each call. A supplier charge above that estimate
 is recorded as an overrun and stops subsequent calls. Browser measurement requires
 AGENTLINKOPS_PROXY_URL. Authorized direct diagnostics need

package/cli/client.js

@@ -2,7 +2,7 @@ import {restResponseContract} from '../shared/response-contract.js';
 // A small HTTP client for the cloud. Scoped keys only; no human session ever reaches here.
 // DP-0036-T13: the CLI names itself so the usage counters can tell it from other REST callers.
 // The version follows the plugin manifests; bump it with them.
-export const CLI_VERSION = '0.6.6';
+export const CLI_VERSION = '0.6.8';
 export const CLI_USER_AGENT = `agentlinkops-cli/${CLI_VERSION}`;
 export class CloudError extends Error {
   constructor(code, status, details = null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlinkops",
-  "version": "0.6.6",
+  "version": "0.6.8",
   "description": "A backlink and AI citation ledger that lives in your repository: local link and citation checks with dated evidence, supplier-export imports and optional sync to the hosted AgentLinkOps service.",
   "author": "AgentLinkOps (https://agentlinkops.com)",
   "license": "Apache-2.0",

package/references/citation-panels.md

@@ -12,7 +12,9 @@ This command defaults to the mock engine. Its suggested questions are writing pr
 
 Use `--competitors competitors.json` to add domains to check beside your own. The file is an array of objects with `domain`, `brand` and optional `aliases` fields. Each target gets separate results for each question. A target missing from one answer is only missing from that sample; it does not establish absence from the engine.
 
-Choose a live engine explicitly after checking access and budget. For an existing browser setup, use `--engine chatgpt:web-own-browser` or `--engine grok:web-own-browser`. `--engine google-aio` requires your configured supplier access. This workflow does not create accounts or buy services.
+Choose a live engine explicitly after checking access and budget. For accountless browser measurement, use `--engine chatgpt:web-own-browser` or `--engine grok:web-own-browser`. `--engine google-aio` requires your configured supplier access. This workflow does not create accounts or buy services.
+
+Starting with CLI 0.6.7, browser authentication defaults to `AGENTLINKOPS_BROWSER_AUTH=accountless`. This mode does not load saved browser sessions, even if session files already exist. A login wall, blocked page or failed answer remains unknown; anonymous access is not guaranteed. Use accountless measurement for this workflow. The optional legacy `AGENTLINKOPS_BROWSER_AUTH=saved-session` mode is separate and requires an explicit opt-in; logging in is not a prerequisite for the default workflow.
 
 Starting with CLI 0.6.5, browser measurement requires `AGENTLINKOPS_PROXY_URL`. Missing, failed or quarantined proxy admission never selects direct traffic. An explicitly authorized direct diagnostic requires `AGENTLINKOPS_BROWSER_EGRESS=direct-diagnostic` with no proxy configured. The standard URL proxy has no usage meter; estimated costs are not a provider invoice cap.
 

package/skills/agentlinkops-campaigns/SKILL.md

@@ -16,6 +16,6 @@ If the user authorizes outreach, use their existing email tool and honor their s
 
 When a placement is earned, save source and destination URLs and its relationship to the opportunity. Use connected monitoring tools when requested; local campaign work remains useful without cloud access. Do not promise rankings, response rates, exhaustive competitor coverage, or improvements unsupported by evidence.
 
-For citation panels, read [the panel authoring reference](../../references/citation-panels.md). Gather real audience questions with the user's available sources and record where each came from. `agentlinkops citation panel` drafts editable JSON with a mock engine by default. Suggested questions are not evidence of search demand. Choose a live engine only after checking the user's access and budget; keep citations, mentions, competitors and locale context separate in the results.
+For citation panels, read [the panel authoring reference](../../references/citation-panels.md). Gather real audience questions with the user's available sources and record where each came from. `agentlinkops citation panel` drafts editable JSON with a mock engine by default. Suggested questions are not evidence of search demand. Choose a live engine only after checking the user's access and budget; keep citations, mentions, competitors and locale context separate in the results. Starting with CLI 0.6.7, browser citation measurement defaults to accountless and does not load saved sessions. Do not ask the user to log in as a prerequisite. Anonymous failures remain unknown. The panel reference keeps required proxy admission separate from an explicitly authorized direct diagnostic.
 
 Use the [campaign handoff recipe](../../references/recipes/qualified-campaign-handoff.md) when preparing records and reviewed drafts for the person's CRM or sender. It defines checkpoints and later readback before treating an uncertain write as complete.

package/skills/agentlinkops-connect/references/agentlinkops.md

@@ -9,7 +9,7 @@ records. This page is the complete agent reference: the same text prints from
 full once per session, then use `describe` for any command's exact schema.
 
 <!-- generated:skill-version begin (npm run generate:tools) -->
-Pack version 0.6.5. 125 commands in 13 toolsets.
+Pack version 0.6.8. 125 commands in 13 toolsets.
 <!-- generated:skill-version end -->
 
 ## Install and connect (once per machine)

package/src/citations/browser/chatgpt-citations.js

@@ -0,0 +1,215 @@
+import { PROVIDER_MODEL_RESPONSE_SELECTORS } from './shims/utils.js';
+
+// This function is serialized into the browser. Keep all lookups within the
+// latest visible, explicitly identified assistant response.
+export function readChatgptCitationState(input) {
+  const selectors = Array.isArray(input) ? input : input.selectors;
+  const visible = element => {
+    if (!(element instanceof HTMLElement) || !element.isConnected) return false;
+    const style = window.getComputedStyle(element);
+    if (style.visibility === 'hidden' || style.display === 'none' || style.opacity === '0') return false;
+    const rect = element.getBoundingClientRect();
+    return rect.width > 0 && rect.height > 0;
+  };
+  const latestResponse = () => {
+    const elements = Array.from(document.querySelectorAll(selectors.join(', '))).filter(visible);
+    return elements.filter(element => !elements.some(other => other !== element && other.contains(element))).at(-1);
+  };
+  const root = latestResponse();
+  if (!root || root.getAttribute('aria-busy') === 'true' ||
+    (root.getAttribute('data-message-id') || '').startsWith('request-placeholder') ||
+    (root.innerText || '').trim().length <= 50) return { found: false, groups: 0, unresolved: true, sources: [] };
+  if (input.prepareBinding) {
+    const text = root.innerText;
+    return {isCurrent:() => latestResponse() === root && visible(root) && root.innerText === text &&
+      root.getAttribute('aria-busy') !== 'true' && !(root.getAttribute('data-message-id') || '').startsWith('request-placeholder')};
+  }
+  const groups = Array.from(root.querySelectorAll('[role="group"][aria-label="Sources"]'));
+  const concealed = element => {
+    for (let node = element; node; node = node.parentElement) {
+      const style = window.getComputedStyle(node);
+      if (node.hidden || node.getAttribute('aria-hidden') === 'true' || style.visibility === 'hidden' || style.display === 'none' || style.opacity === '0') return true;
+      if (node === root) break;
+    }
+    return !visible(element);
+  };
+  const sources = [];
+  let unresolved = false;
+  const anonymous = root.matches(selectors.at(-1));
+  let panelEligible = anonymous && groups.length > 0 && groups.length <= 50;
+  const publisherLabels = [];
+  if (anonymous) {
+    // A new anonymous layout with unrecognized citation controls is not proof
+    // of absence. Never use unrelated page-wide links to fill this gap.
+    const actions = root.querySelector('[role="group"][aria-label="Response actions"]');
+    const unsupported = Array.from(root.querySelectorAll('a[href], button, [role="button"], cite, sup, [data-citation], [data-citation-id]'));
+    if (unsupported.some(element => !actions?.contains(element) && !groups.some(group => group.contains(element)))) {
+      unresolved = true; panelEligible = false;
+    }
+  }
+  for (const group of groups) {
+    if (concealed(group)) { unresolved = true; panelEligible = false; continue; }
+    if (anonymous) {
+      const buttons = Array.from(group.querySelectorAll('button'));
+      if (!buttons.length || buttons.length > 50 || group.querySelector('a[href], [role="button"]:not(button)')) panelEligible = false;
+      for (const button of buttons) {
+        const label = (button.getAttribute('aria-label') || '').trim();
+        if (!label || label.length > 200 || concealed(button)) panelEligible = false;
+        else publisherLabels.push(label);
+      }
+    }
+    let resolved = 0;
+    for (const anchor of group.querySelectorAll('a[href]')) {
+      if (concealed(anchor)) { unresolved = true; continue; }
+      try {
+        const url = new URL(anchor.href);
+        if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password) throw Error();
+        sources.push({ url: url.href, title: (anchor.textContent || '').trim() });
+        resolved++;
+      } catch { unresolved = true; }
+    }
+    // Observed anonymous pills are buttons without URLs. Their labels are
+    // not URL evidence; a partial anchor list cannot resolve those controls.
+    if (!resolved || group.querySelector('button, [role="button"]')) unresolved = true;
+  }
+  const labels = [...new Set(publisherLabels)];
+  panelEligible = panelEligible && labels.length > 0 && labels.length <= 50;
+  const state = { found: true, anonymous, groups: groups.length, unresolved, sources, panelEligible };
+  if (!input.prepare) return state;
+  if (!panelEligible || !unresolved) return {state};
+  // Keep the exact assistant and control references in-page. No DOM identities,
+  // tokens or control IDs are persisted in observations.
+  const footer = root.querySelector(':scope > [role="group"][aria-label="Response actions"]');
+  const buttons = Array.from(footer?.querySelectorAll('button') || []).filter(button =>
+    !concealed(button) && !button.disabled && Array.from(button.children).some(child =>
+      !concealed(child) && child.children.length === 0 && (child.textContent || '').trim() === 'Sources'));
+  if (buttons.length !== 1) return {state};
+  const button = buttons[0], controlledId = button.getAttribute('aria-controls');
+  if (!controlledId || controlledId.length > 256) return {state};
+  const before = document.getElementById(controlledId);
+  // Only the observed absent/empty target is supported. A populated old panel
+  // must not be mistaken for freshly resolved citations from this answer.
+  if (before && (visible(before) || (before.textContent || '').trim() || before.querySelector('a'))) return {state};
+  const responseText = root.innerText;
+  const unavailable = () => ({status:'unavailable'});
+  const inspect = () => {
+    if (latestResponse() !== root || !root.isConnected || !root.matches(selectors.at(-1)) || concealed(root) ||
+      root.innerText !== responseText || root.getAttribute('aria-busy') === 'true' ||
+      (root.getAttribute('data-message-id') || '').startsWith('request-placeholder') ||
+      !button.isConnected || !footer.contains(button) || !root.contains(footer) || button.getAttribute('aria-controls') !== controlledId) return unavailable();
+    const currentState = readChatgptCitationState(selectors);
+    if (!currentState.panelEligible || currentState.groups !== state.groups) return unavailable();
+    const currentLabels = [...new Set(Array.from(root.querySelectorAll('[role="group"][aria-label="Sources"] button')).map(node => (node.getAttribute('aria-label') || '').trim()))];
+    if (currentLabels.length !== labels.length || currentLabels.some(label => !labels.includes(label))) return unavailable();
+    const target = document.getElementById(controlledId);
+    if (!target || !visible(target)) return {status:'pending'};
+    if (target === root || target.contains(root) || ['BODY','MAIN','HTML','NAV'].includes(target.tagName)) return unavailable();
+    const articles = (target.matches('article') ? [target] : Array.from(target.querySelectorAll('article'))).filter(visible);
+    if (articles.length !== 1) return unavailable();
+    const article = articles[0];
+    if (concealed(article) || article.querySelector('form,input,textarea,select,[contenteditable="true"],button,[role="button"],[data-message-author-role="user"],[data-turn="user"],[aria-busy="true"],[role="progressbar"]')) return unavailable();
+    const headings = article.querySelectorAll('h1,h2,h3,[role="heading"]');
+    const header = article.querySelector(':scope > header > h2');
+    if (headings.length !== 1 || headings[0] !== header || concealed(header) || (header.textContent || '').trim() !== 'Sources') return unavailable();
+    const lists = article.querySelectorAll('ol');
+    if (lists.length !== 1 || article.querySelector('ul')) return unavailable();
+    const list = lists[0], cards = Array.from(list.children);
+    if (concealed(list) || !cards.length || cards.length > 50 || list.querySelectorAll('li').length !== cards.length || article.querySelectorAll('a').length !== cards.length) return unavailable();
+    const foundLabels = new Set(), results = [];
+    for (const card of cards) {
+      if (card.tagName !== 'LI' || concealed(card) || card.children.length !== 1 || card.firstElementChild.tagName !== 'A') return unavailable();
+      const anchor = card.firstElementChild, titles = anchor.querySelectorAll('strong');
+      if (concealed(anchor) || titles.length !== 1 || concealed(titles[0])) return unavailable();
+      const title = (titles[0].textContent || '').trim();
+      if (!title || title.length > 1000) return unavailable();
+      let url;
+      try {
+        const raw = anchor.getAttribute('href');
+        if (!raw || raw.length > 8192 || /[\u0000-\u0020\u007f]/.test(raw)) return unavailable();
+        url = new URL(raw);
+        if (!['http:','https:'].includes(url.protocol) || !url.hostname || url.username || url.password) return unavailable();
+      } catch { return unavailable(); }
+      // Exact visible publisher labels, not guessed domains or URL derivation.
+      const matched = [...new Set(Array.from(anchor.querySelectorAll('span')).filter(node =>
+        node.children.length === 0 && !concealed(node)).map(node => (node.textContent || '').trim()).filter(label => labels.includes(label)))];
+      if (matched.length !== 1) return unavailable();
+      foundLabels.add(matched[0]);
+      results.push({url:url.href,title});
+    }
+    if (foundLabels.size !== labels.length) return unavailable();
+    return {status:'resolved',sources:results};
+  };
+  return {state,button,inspect};
+}
+
+const unavailable = () => Object.assign(new Error('ChatGPT citation controls could not be resolved.'), {code:'CITATION_EXTRACTION_UNAVAILABLE'});
+const responseBindings = new WeakMap();
+const bindingCurrent = binding => binding.evaluate(value => typeof value.isCurrent === 'function' && value.isCurrent());
+export async function releaseChatgptResponseBinding(page) {
+  const binding = responseBindings.get(page);
+  responseBindings.delete(page);
+  await binding?.dispose().catch(() => {});
+}
+export async function extractBoundChatgptResponse(page, legacyExtract) {
+  const previous = responseBindings.get(page);
+  responseBindings.delete(page);
+  if (previous) await previous.dispose().catch(() => {});
+  let binding;
+  try {
+    binding = await page.evaluateHandle(readChatgptCitationState, {selectors:PROVIDER_MODEL_RESPONSE_SELECTORS.chatgpt,prepareBinding:true});
+    if (!await bindingCurrent(binding)) throw unavailable();
+    const answer = await legacyExtract(page);
+    if (!await bindingCurrent(binding)) throw unavailable();
+    responseBindings.set(page,binding);
+    return answer;
+  } catch {
+    await binding?.dispose().catch(() => {});
+    throw unavailable();
+  }
+}
+async function extractControlledPanel(page, binding) {
+  let handle, buttonHandle;
+  try {
+    handle = await page.evaluateHandle(readChatgptCitationState, {selectors:PROVIDER_MODEL_RESPONSE_SELECTORS.chatgpt,prepare:true});
+    buttonHandle = await handle.getProperty('button');
+    const button = buttonHandle.asElement();
+    if (!button) throw unavailable();
+    await button.click({timeout:3000});
+    // Bounded DOM render polling only; never another click/provider invocation.
+    let previous = null, stable = 0;
+    for (let attempt=0; attempt<12; attempt++) {
+      const result = await handle.evaluate((state,guard) => guard && !guard.isCurrent() ? {status:'unavailable'} : state.inspect(),binding || null);
+      if (result.status === 'resolved') {
+        const signature = JSON.stringify(result.sources);
+        stable = signature === previous ? stable + 1 : 1;
+        previous = signature;
+        // Publisher coverage alone is insufficient while more same-publisher
+        // cards may still be rendering. Require three identical valid reads.
+        if (stable >= 3) return [...new Map(result.sources.map(source => [source.url,source])).values()];
+      } else if (result.status === 'pending') { previous = null; stable = 0; }
+      else throw unavailable();
+      await page.waitForTimeout(250);
+    }
+    throw unavailable();
+  } catch { throw unavailable(); }
+  finally { await Promise.allSettled([buttonHandle?.dispose(),handle?.dispose()]); }
+}
+
+export async function extractChatgptSources(page, legacyExtract) {
+  const binding = responseBindings.get(page);
+  try {
+    if (binding && !await bindingCurrent(binding)) throw unavailable();
+    const state = await page.evaluate(readChatgptCitationState, PROVIDER_MODEL_RESPONSE_SELECTORS.chatgpt);
+    let sources;
+    if (!state.found || state.unresolved) {
+      if (!state.found || !state.panelEligible) throw unavailable();
+      sources = await extractControlledPanel(page,binding);
+    } else if (state.anonymous || state.groups) sources = [...new Map(state.sources.map(source => [source.url, source])).values()];
+    else sources = await legacyExtract(page);
+    if (binding && !await bindingCurrent(binding)) throw unavailable();
+    return sources;
+  } finally {
+    responseBindings.delete(page);
+    await binding?.dispose().catch(() => {});
+  }
+}

package/src/citations/browser/engine.js

@@ -15,6 +15,7 @@ import { join } from 'node:path';
 
 import { EngineError } from '../adapter.js';
 import {createProxyAdmission,proxyFailureReason} from './proxy-admission.js';
+import { extractBoundChatgptResponse, extractChatgptSources, releaseChatgptResponseBinding } from './chatgpt-citations.js';
 
 const MODULE_LOADERS = {
   'playwright-core': () => import('playwright-core'),
@@ -61,6 +62,18 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
   if (!BROWSER_PROVIDERS.includes(engineName)) {
     throw new EngineError(`unknown browser engine: ${engineName} (known: ${BROWSER_PROVIDERS.join(', ')})`);
   }
+  const authentication = env.AGENTLINKOPS_BROWSER_AUTH ?? 'accountless';
+  if (!['accountless', 'saved-session'].includes(authentication)) {
+    throw Object.assign(new EngineError('Unsupported browser authentication policy.'), { code: 'BROWSER_AUTH_POLICY_INVALID' });
+  }
+  // The vendored resolver reads process.env directly; arbitrary launch/profile
+  // and extension overrides must not reintroduce ambient identity.
+  const assertAccountlessLaunch = () => {
+    if (authentication === 'accountless' && ['CAMOUFOX_EXTRA_LAUNCH_JSON', 'CAMOUFOX_ENV_JSON', 'CAMOUFOX_ADDONS', 'CAMOUFOX_ARGS', 'CAMOUFOX_FIREFOX_USER_PREFS_JSON'].some(key => env[key] || process.env[key])) {
+      throw Object.assign(new EngineError('Accountless measurement does not accept custom browser launch or extension overrides.'), { code: 'BROWSER_AUTH_POLICY_INVALID' });
+    }
+  };
+  assertAccountlessLaunch();
   const identity = { engine: engineName, provider: 'web-own-browser', model: engineName };
   const sessionDir = runtime.sessionDir ?? join(homedir(), '.agentlinkops', 'citations', 'sessions');
   const load = runtime.loadModule ?? lazy;
@@ -89,6 +102,13 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
     const { OWN_PROVIDER_CONFIGS } = await load('./providers.js');
     providerConfig = OWN_PROVIDER_CONFIGS[engineName] ?? PROVIDER_CONFIGS[engineName];
     if (!providerConfig) throw new EngineError(`no provider config for ${engineName}`);
+    if (engineName === 'chatgpt') {
+      const legacyExtract = providerConfig.extractSources;
+      const legacyResponse = providerConfig.extractResponse;
+      providerConfig = { ...providerConfig,
+        extractResponse: page => extractBoundChatgptResponse(page, legacyResponse),
+        extractSources: page => extractChatgptSources(page, legacyExtract) };
+    }
     return providerConfig;
   }
 
@@ -110,6 +130,7 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
     const proxy = admission.proxy;
     await event(proxy?'egress: proxy-required':'egress: direct-diagnostic');
 
+    assertAccountlessLaunch();
     const options = await resolveCamoufoxLaunchOptions({
       provider: engineName,
       proxy: proxy ?? undefined,
@@ -123,6 +144,7 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
     const launchOpts = { ...options, executablePath: options.executablePath };
     if (proxy) launchOpts.proxy = proxy;
     admission.assertReady();
+    assertAccountlessLaunch();
     const browser = await fw.launch(launchOpts);
 
     browserHandle = {
@@ -139,6 +161,8 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
   }
 
   async function loadStorageState() {
+    // Accountless measurement never opens session files, even when they exist.
+    if (authentication === 'accountless') return undefined;
     try {
       const { readFile } = await load('node:fs/promises');
       return JSON.parse(await readFile(join(sessionDir, `${engineName}.json`), 'utf8'));
@@ -205,6 +229,7 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
         locale: 'en-US',
         timezoneId: 'America/New_York',
       });
+      let page;
       try {
       // Route-level asset stripping (opt out with AGENTLINKOPS_BROWSER_KEEP_ASSETS=1):
       // images and media are the bulk of the 3-8 MB measured per observation.
@@ -216,7 +241,7 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
           return route.continue();
         });
       }
-        const page = await context.newPage();
+        page = await context.newPage();
         const { runPageDomOp } = await load('./gen/lib/browser/domOps.js');
         page.runDomOp = (operation, params = {}) => runPageDomOp(page, operation, params);
         let answer = '';
@@ -301,7 +326,7 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
           await config.beforeSubmitHook?.(page);
 
           // Submit: the surface's own send button when it exposes one; Enter fallback.
-          // Submission is verified: the composer clears or a user turn appears.
+          // Allow the surface to settle; response extraction remains fail-closed.
           const send = await page.locator('button[aria-label="Send message"], button[data-testid="send-button"], button[aria-label*="Submit" i], button[aria-label*="Send" i]').first();
           if (await send.isVisible().catch(() => false)) { await send.click(); }
           else { await editor.locator.press('Enter'); }
@@ -339,6 +364,9 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
           screenshotPng,
         };
       } catch (cause) {
+        if (cause?.code === 'CITATION_EXTRACTION_UNAVAILABLE') {
+          throw Object.assign(new EngineError('Citation response could not be bound.'), {code:'CITATION_EXTRACTION_UNAVAILABLE',unknown:true});
+        }
         if (cause instanceof EngineError) throw cause;
         const msg = String(cause?.message ?? cause);
         const retriable = /timeout|timed out|ERR_|net::|closed|Target closed/i.test(msg);
@@ -346,6 +374,7 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
         error.unknown = true;
         throw error;
       } finally {
+        if (engineName === 'chatgpt' && page) await closeQuietly(() => releaseChatgptResponseBinding(page));
         if(!await closeQuietly(() => context.close()))contextCleanupFailed=true;
       }
     },
@@ -362,10 +391,10 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
     },
   };
   const sample=engine.run.bind(engine),closeBrowser=engine.close.bind(engine);
-  const policyCodes=new Set(['PROXY_REQUIRED','PROXY_POLICY_INVALID','PROXY_POLICY_CONFLICT','PROXY_CONFIGURATION_INVALID','PROXY_ACQUIRE_FAILED','PROXY_SUPPLIER_INVALID','PROXY_LEASE_INVALID','PROXY_LEASE_EXPIRED','PROXY_QUARANTINE_FAILED','PROXY_RELEASE_FAILED','PROXY_RECEIPT_FAILED','PROXY_CUSTODY_UNAVAILABLE','BROWSER_CLEANUP_UNCONFIRMED','BROWSER_RUN_IN_PROGRESS']);
+  const policyCodes=new Set(['CITATION_EXTRACTION_UNAVAILABLE','BROWSER_AUTH_POLICY_INVALID','PROXY_REQUIRED','PROXY_POLICY_INVALID','PROXY_POLICY_CONFLICT','PROXY_CONFIGURATION_INVALID','PROXY_ACQUIRE_FAILED','PROXY_SUPPLIER_INVALID','PROXY_LEASE_INVALID','PROXY_LEASE_EXPIRED','PROXY_QUARANTINE_FAILED','PROXY_RELEASE_FAILED','PROXY_RECEIPT_FAILED','PROXY_CUSTODY_UNAVAILABLE','BROWSER_CLEANUP_UNCONFIRMED','BROWSER_RUN_IN_PROGRESS']);
   const safeError=cause=>{
     const code=policyCodes.has(cause?.code)?cause.code:'BROWSER_RUN_FAILED';
-    const error=Object.assign(new EngineError(code==='BROWSER_RUN_FAILED'?'Browser sample failed.':'Browser admission or cleanup failed.',{retriable:code==='BROWSER_RUN_FAILED'&&cause?.retriable===true}),{code});
+    const error=Object.assign(new EngineError(code==='CITATION_EXTRACTION_UNAVAILABLE'?'Citation binding or extraction was unavailable.':code==='BROWSER_RUN_FAILED'?'Browser sample failed.':'Browser admission or cleanup failed.',{retriable:code==='BROWSER_RUN_FAILED'&&cause?.retriable===true}),{code});
     if(code==='BROWSER_RUN_FAILED'||cause?.unknown===true)error.unknown=true;
     return error;
   };
@@ -384,6 +413,7 @@ export function createBrowserEngine({ engineName, env = process.env, onEvent = (
     if(running)throw Object.assign(new EngineError('A browser sample is already running.'),{code:'BROWSER_RUN_IN_PROGRESS'});
     running=true;let result,error,reason=null,admitted=false;
     try{
+      assertAccountlessLaunch();
       if(admission.expired)await retire('lease_expiry');
       await admission.begin();admitted=true;
       result=await sample(input);

package/src/citations/browser/gen/lib/browser/domOps.js

@@ -96,9 +96,11 @@ async function runPageDomOp(page, operation, params) {
       function findLatestResponseElement(selectors) {
         const selector = (selectors || []).join(", ");
         if (!selector.trim()) return null;
-        const element = Array.from(document.querySelectorAll(selector)).filter(
-          (el) => el instanceof HTMLElement && isVisible(el) && !isResponsePlaceholder(el) && el.innerText.trim().length > 50
-        ).pop() ?? null;
+        const elements = Array.from(document.querySelectorAll(selector)).filter(
+          (el) => el instanceof HTMLElement && isVisible(el)
+        );
+        const element = elements.filter((el) => !elements.some((other) => other !== el && other.contains(el))).at(-1) ?? null;
+        if (!element || isResponsePlaceholder(element) || element.innerText.trim().length <= 50) return null;
         return element ? { selector, element } : null;
       }
       function getCachedRawSources(key) {

package/src/citations/browser/gen/lib/input/response/isGenerating.js

@@ -34,15 +34,16 @@ async function hasVisibleGenerationIndicator(page, provider) {
 async function getResponseStateSignature(page, provider) {
   return await page.evaluate((selectors) => {
     const visible = (element) => {
-      if (!(element instanceof HTMLElement)) return false;
+      if (!(element instanceof HTMLElement) || !element.isConnected) return false;
       const style = window.getComputedStyle(element);
-      return element.offsetParent !== null && style.visibility !== "hidden" && style.display !== "none";
+      if (style.visibility === "hidden" || style.display === "none" || style.opacity === "0") return false;
+      const rect = element.getBoundingClientRect();
+      return rect.width > 0 && rect.height > 0;
     };
-    const elements = (selectors || []).flatMap((selector) => Array.from(document.querySelectorAll(selector))).filter(
-      (el) => visible(el) && (el.innerText || "").trim().length > 0
-    );
-    const latest = elements.at(-1) ?? null;
-    if (!latest) {
+    const selector = (selectors || []).join(", ");
+    const elements = selector.trim() ? Array.from(document.querySelectorAll(selector)).filter(visible) : [];
+    const latest = elements.filter((el) => !elements.some((other) => other !== el && other.contains(el))).at(-1) ?? null;
+    if (!latest || latest.getAttribute("aria-busy") === "true" || (latest.getAttribute("data-message-id") || "").startsWith("request-placeholder") || (latest.innerText || "").trim().length <= 50) {
       return { signature: "", textLength: 0 };
     }
     const text = (latest.innerText || "").replace(/\s+/g, " ").trim();

package/src/citations/browser/shims/utils.js

@@ -1,15 +1,23 @@
 // Shim for @oneglanse/utils runtime exports. The selector/timeout constants
-// are re-exported from the vendored agent-constants module unchanged; logger,
+// are re-exported except the evidenced anonymous ChatGPT response boundary; logger,
 // getDomain and getFaviconUrls are minimal equivalents.
 export {
   PROVIDER_NO_OUTPUT_TIMEOUT_MS,
   PROVIDER_FORCE_EXIT_STABLE_MS,
   PROVIDER_EDITOR_SELECTORS,
   PROVIDER_SUBMIT_BTN_SELECTORS,
-  PROVIDER_MODEL_RESPONSE_SELECTORS,
   PROVIDER_RESPONSE_GENERATION_SELECTORS,
   RETRYABLE_ERRORS,
 } from '../gen/utils/agent-constants.js';
+import { PROVIDER_MODEL_RESPONSE_SELECTORS as vendoredResponseSelectors } from '../gen/utils/agent-constants.js';
+
+// Anonymous surface observed 2026-09-20: conversation LI, distinct from its
+// user sibling, with response actions. Never select the conversation itself.
+export const CHATGPT_ANONYMOUS_RESPONSE_SELECTOR = 'ol[aria-label="Conversation"] > li:has(> [role="group"][aria-label="Response actions"] button[aria-label="Copy response"]):not(:has(button[aria-label="Copy message"], [data-message-author-role="user"], [data-turn="user"], form, input, textarea, [contenteditable="true"]))';
+export const PROVIDER_MODEL_RESPONSE_SELECTORS = Object.freeze({
+  ...vendoredResponseSelectors,
+  chatgpt: Object.freeze([...vendoredResponseSelectors.chatgpt, CHATGPT_ANONYMOUS_RESPONSE_SELECTOR]),
+});
 
 const envQuiet = () => Boolean(process.env.AGENTLINKOPS_BROWSER_QUIET);