browser-pilot-cli 0.3.0-rc.1 → 0.3.0-rc.2

package/README.md

@@ -182,7 +182,7 @@ A project can pin Browser Pilot locally and run the same CLI without a global
 installation:
 
 ```bash
-npm install --save-exact browser-pilot-cli@0.3.0-rc.1
+npm install --save-exact browser-pilot-cli@0.3.0-rc.2
 npx --no-install browser-pilot tabs
 ```
 

package/dist/cli.js

@@ -6,7 +6,7 @@ import { writeFileSync as writeFileSync2, readFileSync as readFileSync4, existsS
 import { resolve as resolvePath } from "path";
 
 // src/version.ts
-var BROWSER_PILOT_VERSION = "0.3.0-rc.1";
+var BROWSER_PILOT_VERSION = "0.3.0-rc.2";
 
 // src/protocol/errors.ts
 var ERROR_CODES = [

package/dist/daemon.js

@@ -11753,13 +11753,13 @@ var BrowserToolService = class {
       await this.transport.send("Target.closeTarget", { targetId });
     } catch {
     }
-    for (let attempt = 0; attempt < 5; attempt += 1) {
+    for (let attempt = 0; attempt < 20; attempt += 1) {
       try {
         const current = await this.transport.send("Target.getTargets");
         if (Array.isArray(current?.targetInfos) && !current.targetInfos.some((target) => target?.targetId === targetId)) return true;
       } catch {
       }
-      if (attempt < 4) await new Promise((resolve3) => setTimeout(resolve3, 50));
+      if (attempt < 19) await new Promise((resolve3) => setTimeout(resolve3, 50));
     }
     return false;
   }
@@ -11861,9 +11861,9 @@ var BrowserToolService = class {
           context: { profileContextId: profile.id }
         });
       }
-      for (let attempt = 0; attempt < 40; attempt += 1) {
+      for (let attempt = 0; attempt < 100; attempt += 1) {
         const current = await this.transport.send("Target.getTargets");
-        const markerTargets = Array.isArray(current?.targetInfos) ? current.targetInfos.filter((target) => target && typeof target.targetId === "string" && !existing.has(target.targetId) && target.type === "page" && target.openerId === representative.cdpTargetId && target.url === marker) : [];
+        const markerTargets = Array.isArray(current?.targetInfos) ? current.targetInfos.filter((target) => target && typeof target.targetId === "string" && !existing.has(target.targetId) && target.type === "page" && target.url === marker) : [];
         for (const target of markerTargets) spawnedTargetIds.add(target.targetId);
         if (markerTargets.length > 1) {
           throw new BrowserPilotError("profile_context_unavailable", "Chrome created ambiguous managed window targets", {
@@ -11889,6 +11889,21 @@ var BrowserToolService = class {
               }
             );
           }
+          if (candidate.openerId !== representative.cdpTargetId && !await this.targetWindowNameMatches(candidate.targetId, windowName)) {
+            throw new BrowserPilotError(
+              "profile_context_unavailable",
+              "Chrome could not prove ownership of the managed Profile window",
+              {
+                retryable: true,
+                context: { profileContextId: profile.id },
+                remediation: {
+                  code: "relist_profile_contexts",
+                  message: "List Profile contexts again and retry with a current Profile context.",
+                  actionRequired: true
+                }
+              }
+            );
+          }
           candidateTargetId = candidate.targetId;
           break;
         }
@@ -11912,6 +11927,37 @@ var BrowserToolService = class {
       if (cleanup2.some((closed) => !closed)) throw this.managedTargetUnknownOutcome(profile);
     }
   }
+  async targetWindowNameMatches(targetId, expected) {
+    let sessionId;
+    try {
+      const attached = await this.transport.send("Target.attachToTarget", {
+        targetId,
+        flatten: true
+      });
+      if (typeof attached?.sessionId !== "string") return false;
+      sessionId = attached.sessionId;
+      for (let attempt = 0; attempt < 10; attempt += 1) {
+        try {
+          const result = await this.transport.send("Runtime.evaluate", {
+            expression: "window.name",
+            returnByValue: true
+          }, sessionId);
+          if (result?.result?.value === expected) return true;
+          if (result?.result?.value !== void 0) return false;
+        } catch {
+        }
+        if (attempt < 9) await new Promise((resolve3) => setTimeout(resolve3, 25));
+      }
+      return false;
+    } catch {
+      return false;
+    } finally {
+      if (sessionId) {
+        await this.transport.send("Target.detachFromTarget", { sessionId }).catch(() => {
+        });
+      }
+    }
+  }
   async resolveTargetSession(context, targetId, operation) {
     const inventoryContext = this.inventoryContext(context);
     await this.inventory.refresh(inventoryContext);
@@ -13943,7 +13989,7 @@ var ManagedTargetJanitorClient = class {
 };
 
 // src/version.ts
-var BROWSER_PILOT_VERSION = "0.3.0-rc.1";
+var BROWSER_PILOT_VERSION = "0.3.0-rc.2";
 
 // src/daemon.ts
 var CLI_EXECUTABLE_PATH = publicExecutablePath(import.meta.url);

package/docs/architecture/browser-pilot-platform-spec.md

@@ -615,7 +615,9 @@ Artifacts. Raw CDP is never listed. `eval` requires `developer.eval`.
 - **BR-32:** Every ManagedTabSet is bound to at most one ProfileContext. Managed
   target creation verifies the returned context before public registration, and
   fallback-created targets enter janitor ownership before they become
-  addressable.
+  addressable. Fallback ownership requires the exact new URL marker plus either
+  the expected opener ID or exact readback of a per-command random window name;
+  Profile membership alone is never sufficient.
 - **BR-33:** Switching to an existing target may update the owning Workspace's
   selected ProfileContext, but never prevents inventory or control of targets
   in other Profiles. No Profile selection is a permission grant.

package/docs/plans/profile-context-routing.md

@@ -138,11 +138,13 @@ managed-target janitor:
    varies by regular Profile context.
 3. If Chrome rejects or misroutes that call, attach to a bounded representative
    page target in the selected context, create an isolated world, and call
-   `window.open("about:blank", "_blank", <fixed popup window features>)` with a
-   debugger user gesture.
-4. Identify exactly one new target by the pre-dispatch target set, opener ID,
-   Profile context, page type, and blank URL. Ambiguous or mismatched targets are
-   closed and the operation fails.
+   `window.open(<unique blank marker>, <unique window name>, <fixed popup window
+   features>)` with a debugger user gesture.
+4. Identify exactly one new page target by the pre-dispatch target set, unique
+   URL marker, and Profile context. Prove ownership through either the expected
+   opener ID or exact readback of the per-command random `window.name`; Chrome
+   may normalize the reported opener across regular Profile tabs. Ambiguous or
+   unverified targets are closed and the operation fails.
 5. Explicitly adopt the verified target into the janitor before registering it
    publicly, so Broker crash cleanup still closes it.
 6. Read and retain its window ID, bind the ManagedTabSet, register the opaque
@@ -177,7 +179,7 @@ candidate targets were closed.
 - [x] P4: update stdio integration guidance, adapters, skill, and release docs.
 - [x] P5: add protocol, dual-Profile, concurrency, reconnect, cleanup, and
   compatibility tests.
-- [ ] P6: run real Chrome acceptance and publish `v0.3.0-rc.1`.
+- [ ] P6: run real Chrome acceptance and publish `v0.3.0-rc.2`.
 
 ## Acceptance
 

package/docs/releases/v0.3.0-rc.2.md

@@ -0,0 +1,43 @@
+# Browser Pilot 0.3.0-rc.2
+
+This release candidate fixes a real-Chrome edge case found while accepting the
+multi-Profile routing introduced in `0.3.0-rc.1`.
+
+Some regular Chrome Profile tabs create a `window.open` target whose
+`TargetInfo.openerId` differs from the page target used for the isolated-world
+dispatch. Chrome still returns the exact per-command URL marker, Profile
+context, and random window name. RC.1 correctly refused to register that target
+but could leave the unregistered blank marker visible until the caller cleaned
+up the reported `unknown_outcome`.
+
+RC.2 keeps fail-closed ownership verification without relying on opener IDs
+alone. A fallback-created target must be a new page with the exact random URL
+marker and selected Profile context, then prove ownership through either the
+expected opener ID or exact readback of the per-command random `window.name`.
+Profile membership by itself is never accepted.
+
+All marker candidates are now tracked before validation, target discovery waits
+through a bounded five-second Chrome metadata window, and failure cleanup waits
+for asynchronous target destruction to become observable. A target that fails
+both ownership proofs is closed and never registered or adopted.
+
+The regression suite covers both paths: a Chrome-normalized opener with a valid
+window-name proof succeeds, while a mismatched opener and mismatched window name
+fails closed and leaves no marker target.
+
+Automated release gates completed before tagging:
+
+- TypeScript type checking passed.
+- 266 Node unit, protocol, process, and adapter tests passed.
+- 109 isolated Playwright core, compatibility, and network tests passed.
+- The black-box stdio conformance suite passed all 13 checks.
+- npm distribution verification passed for global, local project, and
+  product-bundled executable modes.
+- The npm dry-run package contains both Profile RC notes and the Profile routing
+  plan.
+
+The RC.1 real-Chrome run used one authorization and verified three live Profile
+contexts, cross-Profile user-tab inventory, existing-tab control in two
+Profiles, and managed creation in the direct-create Profile before exposing this
+fallback defect. RC.2 is accepted against the same Chrome setup after installing
+the published package.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-pilot-cli",
-  "version": "0.3.0-rc.1",
+  "version": "0.3.0-rc.2",
   "description": "CLI tool to control your browser via Chrome DevTools Protocol",
   "repository": "https://github.com/relixiaobo/browser-pilot",
   "type": "module",
@@ -43,6 +43,7 @@
     "docs/plans/profile-context-routing.md",
     "docs/plans/universal-agent-integration.md",
     "docs/releases/v0.3.0-rc.1.md",
+    "docs/releases/v0.3.0-rc.2.md",
     "README.md",
     "LICENSE"
   ],