arena-bridge 0.5.2 → 0.6.0

package/CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to this project are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/) and the project uses
 [Semantic Versioning](https://semver.org/).
 
+## 0.6.0
+
+### Added
+- Named browser profiles for the agent: `chrome_launch {"profile":"work"}` keeps its logins between
+  runs, `chrome_profiles` lists them, and `arena-bridge browser list|open|close` manages them from
+  the command line so the user can log in once.
+- A visible agent window can be sized and placed (`width`, `height`, `x`, `y`) so it stays out of
+  the way on the user's screen.
+
 ## 0.5.2
 
 ### Fixed

package/README.md

@@ -12,7 +12,7 @@
   <img src="https://img.shields.io/badge/license-MIT-blue.svg?style=flat-square" alt="license">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green.svg?style=flat-square" alt="node">
   <img src="https://img.shields.io/badge/dependencies-0-brightgreen.svg?style=flat-square" alt="dependencies">
-  <img src="https://img.shields.io/badge/tests-92%20passed-brightgreen.svg?style=flat-square" alt="tests">
+  <img src="https://img.shields.io/badge/tests-96%20passed-brightgreen.svg?style=flat-square" alt="tests">
 </p>
 
 <p align="center">
@@ -79,7 +79,7 @@ arena-bridge setup --root ~/projects
 | Файлы | `list_dir` `read_file` `write_file` `edit_file` `delete_path` `search_files` `file_get` `file_put` | работа с файлами в разрешённых папках |
 | Шелл | `bash` `sysinfo` | команды и сведения о машине |
 | Процессы | `start_process` `read_process_output` `write_process` `kill_process` | фоновые дев-серверы |
-| Chrome | `chrome_launch` `chrome_attach` `chrome_open` `chrome_navigate` `chrome_snapshot` `chrome_click` `chrome_type` `chrome_press` `chrome_screenshot` `chrome_evaluate` `chrome_tabs` `chrome_stop` | браузер через CDP |
+| Chrome | `chrome_launch` `chrome_profiles` `chrome_attach` `chrome_open` `chrome_navigate` `chrome_snapshot` `chrome_click` `chrome_type` `chrome_press` `chrome_screenshot` `chrome_evaluate` `chrome_tabs` `chrome_stop` | браузер через CDP |
 | Десктоп | `mac_see` `mac_click` `mac_type` `mac_key` `mac_scroll` `mac_move` `mac_drag` `mac_apps` `mac_windows` `mac_app_launch` `mac_app_focus` `mac_app_quit` `mac_permissions` | macOS через Peekaboo |
 
 Полный каталог с JSON-схемами: `GET /tools` или `arena-bridge tools`.
@@ -171,6 +171,41 @@ arena-bridge trust --off
 
 ---
 
+## Отдельные браузерные «кабинеты» агента
+
+Агенту можно выдать несколько независимых профилей браузера — например «рабочий», «клиентский»,
+«тестовый». В каждом свои входы, и они переживают перезапуск моста.
+
+```bash
+arena-bridge browser open work       # открыть Chrome с профилем «work»
+# вы логинитесь в нужные сайты и закрываете окно — входы сохраняются
+arena-bridge browser list             # какие профили есть
+arena-bridge browser close work       # закрыть окно этого профиля
+```
+
+Агент открывает тот же профиль через `chrome_launch {"profile":"work"}` — уже с вашими входами.
+Каталог профилей агент тоже видит: `chrome_profiles`.
+
+Ваш собственный Chrome (на порту 9222, с вашими сессиями) доступен отдельно — через
+`chrome_attach`; любые действия в нём требуют подтверждения.
+
+---
+
+## Как это не мешает вам
+
+| Что беспокоит | Как решается |
+| --- | --- |
+| окно агента занимает экран | по умолчанию агент работает в фоне; видимое окно можно сделать маленьким и в углу: `chrome_launch {"headless":false,"width":900,"height":700,"x":-920,"y":40}` |
+| агент перехватывает фокус и курсор | действия в нативных приложениях идут «в фон» — в нужное окно, без переключения на вас; курсор двигается только по вашей явной просьбе |
+| окно агента на вашем рабочем столе | macOS умеет несколько рабочих столов: окно агента живёт на отдельном столе, вы — на своём |
+| нужен отдельный «второй монитор» | в macOS виртуальный монитор штатно не создаётся; сторонние утилиты (BetterDisplay, DisplayLink) умеют — тогда окно агента всегда там, где вы не работаете |
+| нужен полностью независимый курсор и стол | только отдельная виртуальная машина; на 16 ГБ и Intel 2019 года она заметно тормозит и съедает 30–60 ГБ — как правило, не нужно |
+
+Рекомендация для ноутбука с 16 ГБ и Intel 2019: отдельные профили браузера + фоновый режим +
+при необходимости второй рабочий стол macOS. Полноценная виртуальная машина того не стоит.
+
+---
+
 ## Безопасность
 
 | Токен | Кто знает | Что позволяет |
@@ -215,6 +250,7 @@ arena-bridge audit -n 50       # что происходило
 | `version` | установленная и последняя версии |
 | `update` | обновить пакет с npm (`--check` — только проверить) |
 | `service` | macOS-фоновый сервис: `install` / `uninstall` / `status` |
+| `browser` | профили браузера агента: `list` / `open <name>` / `close <name>` |
 | `rotate` | сменить агентский или девайсный токен |
 
 ---
@@ -246,8 +282,8 @@ curl -sS -X POST "https://<ваш-url>/call" \
 
 ```bash
 npm install          # зависимостей нет — только dev-тесты
-npm test             # 50 тестов Node: direct, approval, trust, MCP, hub, туннель, Chrome, десктоп
-npm run test:python  # 42 теста Python: то же самое
+npm test             # 52 теста Node: direct, approval, trust, MCP, hub, туннель, Chrome, десктоп
+npm run test:python  # 44 теста Python: то же самое
 ```
 
 Тесты не требуют ни Chrome, ни Peekaboo: используются фейковые CDP- и Peekaboo-серверы

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arena-bridge",
-  "version": "0.5.2",
+  "version": "0.6.0",
   "description": "Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.",
   "type": "module",
   "bin": {

package/src/browser.mjs

@@ -33,12 +33,72 @@ const KEYS = {
 
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
-function findChrome() {
+export function findChrome() {
   if (process.env.CHROME_PATH && fs.existsSync(process.env.CHROME_PATH)) return process.env.CHROME_PATH;
   for (const c of CHROME_CANDIDATES) if (fs.existsSync(c)) return c;
   return null;
 }
 
+/** Where the named agent profiles live (follows ARENA_BRIDGE_HOME when set). */
+export function profileDir() {
+  const base = process.env.ARENA_BRIDGE_HOME || path.join(os.homedir(), '.arena-bridge');
+  return path.join(base, 'chrome-profiles');
+}
+
+export const sanitizeProfile = (name) =>
+  String(name)
+    .trim()
+    .replace(/[^a-zA-Z0-9._-]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 60) || 'default';
+
+/** A named profile keeps its logins between agent runs; a path is used as given. */
+export function resolveProfile(raw, port = 9223) {
+  if (!raw) return path.join(os.homedir(), '.arena-bridge', `chrome-profile-${port}`);
+  const value = String(raw);
+  if (value.startsWith('/') || value.startsWith('~')) {
+    return path.resolve(value.replace(/^~/, os.homedir()));
+  }
+  return path.join(profileDir(), sanitizeProfile(value));
+}
+
+export function profileName(raw) {
+  if (!raw) return null;
+  const value = String(raw);
+  if (value.startsWith('/') || value.startsWith('~')) return null;
+  return sanitizeProfile(value);
+}
+
+export function listProfiles() {
+  const out = [];
+  let names = [];
+  try {
+    names = fs.readdirSync(profileDir());
+  } catch {
+    return out;
+  }
+  for (const name of names) {
+    const dir = path.join(profileDir(), name);
+    let stat = null;
+    try {
+      stat = fs.statSync(dir);
+    } catch {
+      continue;
+    }
+    if (!stat.isDirectory()) continue;
+    let size = 0;
+    try {
+      size = fs
+        .readdirSync(dir)
+        .reduce((acc, f) => acc + (fs.statSync(path.join(dir, f)).size || 0), 0);
+    } catch {
+      /* ignore */
+    }
+    out.push({ name, path: dir, mtime: stat.mtimeMs, files: fs.readdirSync(dir).length, approx_bytes: size });
+  }
+  return out.sort((a, b) => b.mtime - a.mtime);
+}
+
 const S = (props, required) => ({
   type: 'object',
   properties: props || {},
@@ -140,9 +200,7 @@ export class BrowserManager {
     }
     const headless = args.headless !== false;
     const port = Number(args.port || 9223);
-    const profile = args.profile
-      ? path.resolve(String(args.profile).replace(/^~/, os.homedir()))
-      : path.join(os.homedir(), '.arena-bridge', `chrome-profile-${port}`);
+    const profile = resolveProfile(args.profile, port);
 
     fs.mkdirSync(profile, { recursive: true });
 
@@ -157,6 +215,14 @@ export class BrowserManager {
       '--remote-allow-origins=*',
     ];
     if (headless) chromeArgs.push(process.env.ARENA_HEADLESS_FLAG || '--headless=new');
+    if (!headless) {
+      const width = Number(args.width || 0);
+      const height = Number(args.height || 0);
+      if (width && height) chromeArgs.push(`--window-size=${width},${height}`);
+      if (Number.isFinite(Number(args.x)) && Number.isFinite(Number(args.y))) {
+        chromeArgs.push(`--window-position=${Number(args.x)},${Number(args.y)}`);
+      }
+    }
     if (args.url) chromeArgs.push(String(args.url));
 
     const proc = spawn(bin, chromeArgs, { detached: true, stdio: 'ignore' });
@@ -193,6 +259,7 @@ export class BrowserManager {
       headless,
       port,
       profile,
+      profile_name: profileName(args.profile),
       ws_url: wsUrl,
       tabs: [...session.tabs.values()].map((t) => ({ tab_id: t.targetId, title: t.title, url: t.url })),
       note: 'This browser belongs to the agent — no local approval needed for actions on it.',
@@ -307,13 +374,41 @@ export class BrowserManager {
             headless: { type: 'boolean', description: 'true (default) = no window, false = visible window' },
             port: { type: 'number', description: 'CDP port (default 9223)' },
             url: { type: 'string', description: 'URL to open on start' },
-            profile: { type: 'string', description: 'profile directory (default ~/.arena-bridge/chrome-profile-<port>)' },
+            profile: {
+              type: 'string',
+              description:
+                'named profile (keeps its logins between runs) or a directory path. ' +
+                'Default: a throwaway profile for this port.',
+            },
+            width: { type: 'number', description: 'window width in pixels (visible window only)' },
+            height: { type: 'number', description: 'window height in pixels (visible window only)' },
+            x: { type: 'number', description: 'window left edge, e.g. -900 puts it on the left of a wide screen' },
+            y: { type: 'number', description: 'window top edge' },
           },
           [],
         ),
         required: [],
         handler: (args, ctx) => ctx.browser.launch(args, ctx),
       },
+      {
+        name: 'chrome_profiles',
+        description:
+          'List the agent\'s own named browser profiles (each keeps its own logins between runs). ' +
+          'Launch one with chrome_launch {"profile":"<name>"}; the user logs into it once with ' +
+          '"arena-bridge browser open <name>" on their machine.',
+        approval: false,
+        schema: S({}, []),
+        required: [],
+        handler: async () => {
+          const profiles = listProfiles();
+          return {
+            ok: true,
+            count: profiles.length,
+            profiles,
+            hint: 'Ask the user to log in: arena-bridge browser open <name> — then use chrome_launch {"profile":"<name>"}',
+          };
+        },
+      },
       {
         name: 'chrome_attach',
         description:

package/src/cli.mjs

@@ -11,8 +11,10 @@ import { buildPrompt } from './prompt.mjs';
 import { listApprovals, decide } from './approvals.mjs';
 import { tailAudit } from './audit.mjs';
 import { startTunnel, isPortOpen } from './tunnel.mjs';
+import { spawn, execSync } from 'node:child_process';
 import { parseDuration, trustState, saveTrust, clearTrust } from './trust.mjs';
 import { findPeekaboo } from './mac.mjs';
+import { findChrome, listProfiles, resolveProfile, sanitizeProfile } from './browser.mjs';
 import { packageInfo, latestVersion, compareVersions, selfUpdate } from './selfupdate.mjs';
 import { serviceStatus, serviceInstall, serviceUninstall } from './service.mjs';
 
@@ -78,6 +80,8 @@ Commands:
   update               Update this package from npm (--check to only look)
   service              Run the bridge as a macOS background service
                        install | uninstall | status
+  browser              The agent's own browser profiles
+                       list | open <name> | close <name>
 
 Common options:
   --mode direct|hub    mode for "init"
@@ -437,6 +441,86 @@ function cmdService(args) {
   if (!st.installed) console.log('  install it with: arena-bridge service install');
 }
 
+function cmdBrowser(args) {
+  const what = args._[1] || 'list';
+  if (what === 'list') {
+    const profiles = listProfiles();
+    if (!profiles.length) {
+      console.log('no agent browser profiles yet — create one: arena-bridge browser open <name>');
+      return;
+    }
+    for (const p of profiles) {
+      console.log(`${p.name.padEnd(20)} ${String(p.files).padStart(3)} files   ${new Date(p.mtime).toLocaleString()}`);
+      console.log(`  ${p.path}`);
+    }
+    console.log('\nThe agent opens a profile with: chrome_launch {"profile":"<name>"}');
+    return;
+  }
+  if (what === 'open') {
+    const name = args._[2];
+    if (!name) {
+      console.error('usage: arena-bridge browser open <name>');
+      process.exit(1);
+    }
+    const bin = findChrome();
+    if (!bin) {
+      console.error('✗ Chrome not found in /Applications');
+      process.exit(1);
+    }
+    const profile = resolveProfile(name);
+    fs.mkdirSync(profile, { recursive: true });
+    const chromeArgs = [
+      `--user-data-dir=${profile}`,
+      '--no-first-run',
+      '--no-default-browser-check',
+      '--remote-debugging-port=0',
+    ];
+    const width = Number(args.flags.width || 0);
+    const height = Number(args.flags.height || 0);
+    if (width && height) chromeArgs.push(`--window-size=${width},${height}`);
+    if (args.flags.x != null && args.flags.y != null) {
+      chromeArgs.push(`--window-position=${Number(args.flags.x)},${Number(args.flags.y)}`);
+    }
+    const proc = spawn(bin, chromeArgs, { detached: true, stdio: 'ignore' });
+    proc.unref();
+    console.log(`✓ Chrome opened with the profile "${sanitizeProfile(name)}"`);
+    console.log(`  profile: ${profile}`);
+    console.log('  log in to the sites the agent needs and close this window — the logins stay.');
+    console.log(`  the agent opens the same profile with: chrome_launch {"profile":"${sanitizeProfile(name)}"}`);
+    return;
+  }
+  if (what === 'close') {
+    const name = args._[2];
+    if (!name) {
+      console.error('usage: arena-bridge browser close <name>');
+      process.exit(1);
+    }
+    const profile = resolveProfile(name);
+    let out = '';
+    try {
+      out = execSync('ps -Ao pid,command', { encoding: 'utf8' });
+    } catch {
+      /* ignore */
+    }
+    let killed = 0;
+    for (const line of out.split('\n')) {
+      if (!line.includes(`--user-data-dir=${profile}`)) continue;
+      const pid = Number(line.trim().split(/\s+/)[0]);
+      if (!pid) continue;
+      try {
+        process.kill(pid);
+        killed++;
+      } catch {
+        /* ignore */
+      }
+    }
+    console.log(`✓ closed ${killed} Chrome window(s) for "${sanitizeProfile(name)}"`);
+    return;
+  }
+  console.error(`unknown browser action: ${what}\nuse: list | open <name> | close <name>`);
+  process.exitCode = 1;
+}
+
 function cmdRotate(args) {
   const cfg = loadConfig();
   const what = args.flags.device ? 'device' : 'agent';
@@ -521,6 +605,8 @@ export async function main(argv = process.argv.slice(2)) {
       return cmdUpdate(args);
     case 'service':
       return cmdService(args);
+    case 'browser':
+      return cmdBrowser(args);
     case undefined:
     case 'help':
     case '--help':

package/src/direct.mjs

@@ -29,7 +29,7 @@ export function createDirectServer(cfg, engine) {
           ok: true,
           mode: 'direct',
           device: cfg.device,
-          version: '0.5.2',
+          version: '0.6.0',
           uptime_sec: Math.round(process.uptime()),
         });
       }

package/src/hub.mjs

@@ -90,7 +90,7 @@ export function createHubServer(cfg) {
         return sendJson(res, 200, {
           ok: true,
           mode: 'hub',
-          version: '0.5.2',
+          version: '0.6.0',
           devices: [...devices.keys()],
         });
       }

package/src/mcp.mjs

@@ -48,7 +48,7 @@ export async function handleMcp(req, res, ctx) {
           mcpResponse(id, {
             protocolVersion: PROTOCOL_VERSION,
             capabilities: { tools: { listChanged: false } },
-            serverInfo: { name: 'arena-bridge', version: '0.5.2' },
+            serverInfo: { name: 'arena-bridge', version: '0.6.0' },
             instructions:
               'Tools operate the user\'s own machine. Dangerous operations may return ' +
               'PROTECTED and require a local human approval.',

package/src/prompt.mjs

@@ -69,6 +69,10 @@ ${tools.join('\n')}
 3. \`chrome_attach\` connects to the user's own Chrome (default port 9222, with their logged-in sessions).
    Actions on an attached browser require a local approval — ask for it instead of retrying.
 4. Screenshots: pass \`{"path": "shot.png"}\` to save the PNG inside the authorized roots, then read it with \`file_get\`.
+5. Named profiles keep their logins between runs: \`chrome_launch {"profile":"work"}\` opens
+   \`~/.arena-bridge/chrome-profiles/work\`. \`chrome_profiles\` lists them. The user logs in once with
+   \`arena-bridge browser open work\` on their machine — ask for that instead of trying to log in yourself.
+6. A visible window can be kept small and out of the way: \`chrome_launch {"headless":false,"width":900,"height":700,"x":-920,"y":40}\`.
 
 ## Desktop control (macOS, through Peekaboo)
 1. \`mac_see\` is the entry point: it takes a screenshot of the screen (or of one app window with
@@ -78,6 +82,8 @@ ${tools.join('\n')}
 4. If a capture or a click fails, run \`mac_permissions\` — macOS needs Screen Recording and
    Accessibility permissions for the terminal that runs the bridge.
 5. Screenshots are saved as PNG inside the authorized roots; read them back with \`file_get\`.
+6. Stay out of the user's way: do not pass \`foreground\`, do not focus windows and do not move the
+   pointer unless the user asks for it. Background actions are delivered to the target window only.
 
 ## Approvals
 ${trustLine}