burhan-mop 0.1.6 → 0.1.8

package/.MOP/PROTOCOL.md

@@ -31,7 +31,8 @@ Use this order:
 7. Coding/adventure language.
 8. GitHub project link. Required for `team`, optional for `solo`.
 9. GitHub username.
-10. Git commit email. Use a GitHub-verified email or GitHub noreply email.
+10. Git commit email. Default to `github-noreply` so MOP derives the active
+    GitHub account email as `ID+USERNAME@users.noreply.github.com`.
 11. If `team`, ask join mode: `open`, `owner-approved`, or `invite`.
 12. Ask auto deploy: `Nak aktifkan auto deploy sekarang? Pilih provider:
     GitHub, Docker, Vercel.` If the user says later/no, answer with the defer
@@ -40,7 +41,7 @@ Use this order:
 After confirmation, run:
 
 ```bash
-node .MOP/scripts/mop-core.mjs setup --project-name "<name>" --name "<display>" --codename <codename> --password "<password>" --mode <solo|team> --conversation-language "<lang>" --coding-language "<lang>" --git-email "<github-verified-email>" [--git-name "<display>"] [--github-username "<github-login>"] [--github-url "<url>"] [--join-mode <mode>]
+node .MOP/scripts/mop-core.mjs setup --project-name "<name>" --name "<display>" --codename <codename> --password "<password>" --mode <solo|team> --conversation-language "<lang>" --coding-language "<lang>" --git-email github-noreply [--git-name "<display>"] [--github-username "<github-login>"] [--github-url "<url>"] [--join-mode <mode>]
 ```
 
 ## Agent Naming Ceremony
@@ -122,6 +123,11 @@ Routing rules:
   genuinely requires several areas of expertise.
 - If the route reports `partyMode.active: true`, run Party Mode before the final
   answer. Name any missing participant agents first.
+- If the route reports `nextAction: "name-required-party-agents"`, stop and ask
+  every question in `missingAgentQuestions`. Do not continue with the task until
+  all required party agents have names.
+- Explicit requests such as `party mode`, `multi-agent`, `semua agent`, or
+  `agent bincang` must activate Party Mode automatically.
 - The route JSON includes an `answerContract`. The assistant must restore
   monthly memory, start the visible answer with `answerContract.firstLine`, and
   save a one-line memory after meaningful work.
@@ -162,6 +168,8 @@ PARTY MODE
 - Do not include irrelevant agents just because they exist.
 - If a needed party role has no named agent, ask the user to name that agent
   before using it.
+- If several party agents are missing, ask for all missing names in one reply:
+  `Kita ada <N> agent belum ada nama. Beri nama untuk ...`
 
 Visible dialogue format:
 
@@ -187,6 +195,32 @@ agent: <from-name> (<from-role>)
           <explanation>
 ```
 
+## Browser And Scraping Gate
+
+Browser, scraping, rendered extraction, clicking, login flow, bot-detection, and
+form-filling tasks must pass browser preflight before any browser automation.
+
+Run:
+
+```bash
+node .MOP/scripts/mop-core.mjs browser preflight
+```
+
+Rules:
+
+- First scan the default browser automatically. On Linux this uses
+  `xdg-settings get default-web-browser`; fallback is `$BROWSER`.
+- If Chrome or Chromium is detected, browser automation may proceed with normal
+  Chrome-compatible mode.
+- If Edge, Brave, or Opera is detected, use browser-act `chrome-direct` mode and
+  guide the user to start that browser with `--remote-debugging-port`.
+- If no supported browser is detected, ask the user which browser they use
+  before scraping or browser automation.
+- Do not start a default Chrome session first when the user uses Edge, Brave, or
+  Opera.
+- If `agent route` includes `browserPreflight.needsQuestion: true`, ask
+  `browserPreflight.question` and stop.
+
 ## MOP Workflow
 
 MOP Workflow is BMAD-inspired and MOP-native. It is the default
@@ -431,10 +465,13 @@ In team mode, an agent name is the identity.
 Autosycn is always available and should be used after meaningful state or file
 changes. It is intentionally identity-safe.
 
-Before first push for a member, configure the real Git identity:
+Before first push for a member, configure the real GitHub identity. Default to
+GitHub noreply so commits attach to the active user account without exposing
+private email:
 
 ```bash
-node .MOP/scripts/mop-core.mjs member git-identity --actor <codename> --name "<display name>" --email "<github-verified-email>" --github-username "<github-login>"
+gh auth login
+node .MOP/scripts/mop-core.mjs member git-identity --actor <codename> --name "<display name>" --email github-noreply --github-username "<github-login>"
 ```
 
 Then run:
@@ -455,6 +492,13 @@ Autosycn must:
 - Commit with `GIT_AUTHOR_NAME`, `GIT_AUTHOR_EMAIL`, `GIT_COMMITTER_NAME`, and
   `GIT_COMMITTER_EMAIL` set from member state.
 - Set local `git config user.name` and `user.email` before commit/merge.
+- For member commits, derive `user.email` from the active GitHub CLI account as
+  `ID+USERNAME@users.noreply.github.com` when
+  `autosync.githubIdentity.useNoreplyForMemberCommits` is enabled.
+- Refuse to commit or push if `gh api user` is authenticated as a different
+  GitHub username than the active member's configured `githubUsername`.
+- Use the member GitHub identity for setup, preflight, memory, and work branch
+  commits. Use `BURHAN-MOP` only for merge guardian commits.
 - In team mode, `main` is the trunk and each user works on `dev/<codename>`.
 - Push to `dev/<codename>` in team mode and `main` in solo mode.
 - After a team push, BURHAN-MOP reviews `dev/<codename>` and merges it into
@@ -469,10 +513,11 @@ Autosycn must:
 - If `githubUsername` is configured, refuse to push unless `gh api user`
   verifies the same account.
 
-Important: GitHub commit attribution comes from commit email. GitHub push actor
-comes from the credential or SSH key used by `git push`; no script can fake that.
-If GitHub shows the AI/bot as pusher, fix `gh auth login`, Git Credential
-Manager, or the SSH key account.
+Important: GitHub commit attribution comes from commit email. MOP uses the
+active GitHub account noreply email for member commits by default. GitHub push
+actor comes from the credential or SSH key used by `git push`; no script can
+fake that. If GitHub shows the wrong pusher, fix `gh auth login`, Git
+Credential Manager, or the SSH key account.
 
 ## Default Skill: auto-deploy
 

package/.MOP/STATE.json

@@ -77,7 +77,34 @@
       "Normal Party mode should use at least 3 participants and prefer 4 when the task has enough relevant roles.",
       "The primary agent coordinates the party and keeps the user intent visible.",
       "Every visible agent message must use the configured dialogue format.",
-      "Agents should ask each other focused questions, answer directly, then hand a clear result to the user."
+      "Agents should ask each other focused questions, answer directly, then hand a clear result to the user.",
+      "Explicit requests such as party mode, multi-agent, semua agent, or agent discussion must activate Party Mode.",
+      "If Party Mode needs unnamed agents, ask for all missing agent names before doing the task."
+    ]
+  },
+  "browserPolicy": {
+    "requirePreflightBeforeBrowserWork": true,
+    "requireDefaultBrowserCheck": true,
+    "supportedChoices": [
+      "Chrome",
+      "Edge",
+      "Brave",
+      "Opera"
+    ],
+    "builtinChromeBrowsers": [
+      "chrome",
+      "chromium"
+    ],
+    "directModeBrowsers": [
+      "brave",
+      "edge",
+      "opera"
+    ],
+    "rules": [
+      "Before browser, scraping, extraction, click automation, login flow, or form filling, run browser preflight.",
+      "Check the user's default browser automatically when possible.",
+      "If the default browser is Edge, Brave, or Opera, use chrome-direct mode and guide the user to start remote debugging.",
+      "If no supported browser is detected, ask the user which browser they use before continuing."
     ]
   },
   "workflow": {
@@ -399,7 +426,18 @@
       }
     },
     "requireUserGitEmail": true,
-    "verifyGhUserWhenConfigured": true
+    "verifyGhUserWhenConfigured": true,
+    "githubIdentity": {
+      "requireMatchedGhUser": true,
+      "useNoreplyForMemberCommits": true,
+      "noreplyFormat": "id-plus-login",
+      "rules": [
+        "Member commits must use the active member GitHub account, not an AI or guardian identity.",
+        "When gh is authenticated, derive member commit email as ID+USERNAME@users.noreply.github.com.",
+        "Refuse autosycn if the active gh account does not match the member githubUsername.",
+        "BURHAN-MOP identity is reserved for merge guardian commits only."
+      ]
+    }
   },
   "members": {},
   "installedSkills": [
@@ -520,6 +558,12 @@
       "kind": "operations",
       "purpose": "GitHub repo, branch, PR, issue, release, and merge workflow."
     },
+    {
+      "role": "browser",
+      "title": "Browser Automation Agent",
+      "kind": "operations",
+      "purpose": "Browser preflight, scraping, rendered extraction, clicking, form filling, login flows, and browser-act coordination."
+    },
     {
       "role": "devops",
       "title": "DevOps Engineer",

package/.MOP/scripts/mop-autosycn.mjs

@@ -247,22 +247,59 @@ function getMember(state, actor) {
   return member;
 }
 
+function githubIdentityPolicy(state) {
+  return state.autosync?.githubIdentity || {
+    requireMatchedGhUser: true,
+    useNoreplyForMemberCommits: true,
+    noreplyFormat: 'id-plus-login'
+  };
+}
+
+function currentGhUser() {
+  const result = runOptional('gh', ['api', 'user', '--jq', '{login:.login,id:.id,email:.email}']);
+  if (!result.ok) return null;
+  try {
+    return JSON.parse(result.stdout || '{}');
+  } catch {
+    return null;
+  }
+}
+
+function githubNoreplyEmail(user) {
+  if (!user?.login || !user?.id) return '';
+  return `${user.id}+${user.login}@users.noreply.github.com`;
+}
+
 function identityFor(state, actor) {
   const member = getMember(state, actor);
   const identity = member.gitIdentity || {};
+  const policy = githubIdentityPolicy(state);
+  const gh = currentGhUser();
   const name = identity.name || member.displayName || actor;
-  const email = identity.email || member.github?.noreplyEmail || '';
+  const githubUsername = identity.githubUsername || member.github?.username || gh?.login || '';
+  if (gh?.login && githubUsername && policy.requireMatchedGhUser !== false && gh.login.toLowerCase() !== githubUsername.toLowerCase()) {
+    throw new Error(`GitHub CLI authenticated as ${gh.login}, expected ${githubUsername}. Refusing to commit or push as the wrong user.`);
+  }
+  let email = identity.email || member.github?.noreplyEmail || '';
+  if (policy.useNoreplyForMemberCommits !== false) {
+    email = githubNoreplyEmail(gh);
+    if (!email) {
+      throw new Error('GitHub noreply identity is required for member commits. Run gh auth login as the real user, or set autosync.githubIdentity.useNoreplyForMemberCommits=false.');
+    }
+  }
   if (!email && state.autosync?.requireUserGitEmail !== false) {
     throw new Error([
       `Missing git email for ${actor}.`,
-      'Set a GitHub-verified email or noreply email first:',
-      `node .MOP/scripts/mop-core.mjs member git-identity --actor ${actor} --name "${name}" --email "<github-verified-email>" [--github-username "<username>"]`
+      'Set a GitHub-verified email or let MOP derive GitHub noreply from gh:',
+      `node .MOP/scripts/mop-core.mjs member git-identity --actor ${actor} --name "${name}" --email github-noreply [--github-username "<username>"]`
     ].join(' '));
   }
   return {
     name,
     email,
-    githubUsername: identity.githubUsername || member.github?.username || ''
+    githubUsername,
+    githubUserId: gh?.login?.toLowerCase() === githubUsername.toLowerCase() ? gh.id : identity.githubUserId,
+    emailSource: policy.useNoreplyForMemberCommits !== false ? 'github-noreply' : (identity.emailSource || 'manual')
   };
 }
 
@@ -335,15 +372,16 @@ function configureRemote(url, replaceRemote = false) {
 }
 
 function verifyGhUser(identity, state) {
-  if (!identity.githubUsername || state.autosync?.verifyGhUserWhenConfigured === false) return 'skipped';
-  const gh = runOptional('gh', ['api', 'user', '--jq', '.login']);
-  if (!gh.ok) {
+  const policy = githubIdentityPolicy(state);
+  if (state.autosync?.verifyGhUserWhenConfigured === false && policy.requireMatchedGhUser === false) return 'skipped';
+  const gh = currentGhUser();
+  if (!gh?.login) {
     throw new Error('GitHub username is configured, but gh could not verify the active account. Run gh auth login as the real user or set autosync.verifyGhUserWhenConfigured=false for SSH-only workflows.');
   }
-  if (gh.stdout.toLowerCase() !== identity.githubUsername.toLowerCase()) {
-    throw new Error(`GitHub CLI authenticated as ${gh.stdout}, expected ${identity.githubUsername}. Refusing to push as the wrong account.`);
+  if (identity.githubUsername && gh.login.toLowerCase() !== identity.githubUsername.toLowerCase()) {
+    throw new Error(`GitHub CLI authenticated as ${gh.login}, expected ${identity.githubUsername}. Refusing to push as the wrong account.`);
   }
-  return `verified:${gh.stdout}`;
+  return `verified:${gh.login}:${githubNoreplyEmail(gh) || 'email-unavailable'}`;
 }
 
 function runProjectCommand(command, env) {
@@ -677,6 +715,7 @@ function status() {
     workBranchPrefix: state.autosync?.workBranchPrefix || 'dev',
     autoMergeToMain: state.autosync?.autoMergeToMain !== false,
     mergeGuardian: guardianConfig(state),
+    githubIdentity: githubIdentityPolicy(state),
     preflightBeforeWork: state.autosync?.preflightBeforeWork !== false,
     requireUserGitEmail: state.autosync?.requireUserGitEmail !== false,
     initialized: state.initialized,
@@ -691,7 +730,8 @@ function status() {
         displayName: member.displayName,
         gitIdentityConfigured: Boolean(member.gitIdentity?.email || member.github?.noreplyEmail),
         gitName: member.gitIdentity?.name || member.displayName || key,
-        gitEmail: member.gitIdentity?.email || member.github?.noreplyEmail || ''
+        gitEmail: member.gitIdentity?.email || member.github?.noreplyEmail || '',
+        githubUsername: member.gitIdentity?.githubUsername || member.github?.username || ''
       }
     ]))
   }, null, 2));

package/.MOP/scripts/mop-core.mjs

@@ -3,6 +3,7 @@ import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, writeFile
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { randomBytes, scryptSync, timingSafeEqual } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
 
 const here = dirname(fileURLToPath(import.meta.url));
 const coreDir = resolve(here, '..');
@@ -71,6 +72,53 @@ function verifyPassword(password, salt, expectedHex) {
   return expected.length === actual.length && timingSafeEqual(actual, expected);
 }
 
+function currentGhUser() {
+  const result = spawnSync('gh', ['api', 'user', '--jq', '{login:.login,id:.id,email:.email}'], {
+    cwd: rootDir,
+    encoding: 'utf8'
+  });
+  if (result.status !== 0) return null;
+  try {
+    return JSON.parse(result.stdout || '{}');
+  } catch {
+    return null;
+  }
+}
+
+function githubNoreplyEmail(user) {
+  if (!user?.login || !user?.id) return '';
+  return `${user.id}+${user.login}@users.noreply.github.com`;
+}
+
+function resolveGitIdentityInput(state, actor, name, emailInput, githubUsernameInput) {
+  const policy = state.autosync?.githubIdentity || {};
+  const preferNoreply = policy.useNoreplyForMemberCommits !== false;
+  const gh = currentGhUser();
+  const githubUsername = githubUsernameInput || gh?.login || '';
+  if (gh?.login && githubUsername && policy.requireMatchedGhUser !== false && gh.login.toLowerCase() !== githubUsername.toLowerCase()) {
+    throw new Error(`GitHub CLI authenticated as ${gh.login}, expected ${githubUsername}. Run gh auth login as the real user.`);
+  }
+
+  let email = String(emailInput || '').trim();
+  const wantsNoreply = !email || ['auto', 'github', 'github-noreply', 'noreply'].includes(email.toLowerCase());
+  if (preferNoreply && wantsNoreply) {
+    email = githubNoreplyEmail(gh);
+    if (!email) {
+      throw new Error('Cannot derive GitHub noreply email. Run gh auth login or provide --git-email "<github-verified-email>".');
+    }
+  }
+  if (!email && state.autosync?.requireUserGitEmail !== false) {
+    throw new Error('Git email is required. Use --git-email github-noreply after gh auth login, or provide a GitHub-verified email.');
+  }
+  return {
+    name,
+    email,
+    githubUsername,
+    githubUserId: gh?.login?.toLowerCase() === githubUsername.toLowerCase() ? gh.id : undefined,
+    emailSource: wantsNoreply && email ? 'github-noreply' : 'manual'
+  };
+}
+
 function activeAgentFor(state, actor) {
   const activeId = state.activeAgents?.[actor];
   if (!activeId) return null;
@@ -184,6 +232,66 @@ function answerContractFor(state, actor, agent = activeAgentFor(state, actor)) {
   };
 }
 
+function browserPolicy(state) {
+  return state.browserPolicy || {
+    requirePreflightBeforeBrowserWork: true,
+    requireDefaultBrowserCheck: true,
+    directModeBrowsers: ['brave', 'edge', 'opera'],
+    builtinChromeBrowsers: ['chrome', 'chromium'],
+    supportedChoices: ['Chrome', 'Edge', 'Brave', 'Opera']
+  };
+}
+
+function detectDefaultBrowser() {
+  const xdg = spawnSync('xdg-settings', ['get', 'default-web-browser'], {
+    cwd: rootDir,
+    encoding: 'utf8'
+  });
+  const raw = (xdg.status === 0 ? xdg.stdout : '').trim() || process.env.BROWSER || '';
+  const value = raw.toLowerCase();
+  let family = 'unknown';
+  if (/(google-chrome|chrome)/.test(value) && !/chromium/.test(value)) family = 'chrome';
+  else if (/chromium/.test(value)) family = 'chromium';
+  else if (/brave/.test(value)) family = 'brave';
+  else if (/(microsoft-edge|edge)/.test(value)) family = 'edge';
+  else if (/opera/.test(value)) family = 'opera';
+  else if (/firefox/.test(value)) family = 'firefox';
+  return {
+    raw: raw || null,
+    family,
+    source: raw ? (xdg.status === 0 ? 'xdg-settings' : 'BROWSER') : 'not-detected'
+  };
+}
+
+function browserPreflightFor(state) {
+  const policy = browserPolicy(state);
+  const detected = detectDefaultBrowser();
+  const direct = (policy.directModeBrowsers || []).includes(detected.family);
+  const builtin = (policy.builtinChromeBrowsers || []).includes(detected.family);
+  const supported = direct || builtin;
+  const mode = builtin ? 'chrome' : direct ? 'chrome-direct' : 'ask-user-browser';
+  const needsQuestion = !supported;
+  return {
+    required: policy.requirePreflightBeforeBrowserWork !== false,
+    defaultBrowser: detected,
+    mode,
+    ready: supported,
+    needsQuestion,
+    question: needsQuestion
+      ? `Saya tak dapat kesan Chrome/Edge/Brave/Opera sebagai browser default. Awak guna browser apa? Pilih: ${(policy.supportedChoices || ['Chrome', 'Edge', 'Brave', 'Opera']).join(', ')}.`
+      : '',
+    instructions: direct
+      ? [
+        `Use browser-act chrome-direct for ${detected.family}.`,
+        'Guide the user to start that browser with --remote-debugging-port before scraping or form automation.',
+        'Do not create a default chrome session first.'
+      ]
+      : builtin
+        ? ['Use normal Chrome-compatible browser automation.', 'Do not ask the user again unless automation fails.']
+        : ['Ask the user which browser they use before scraping or browser automation.']
+  };
+}
+
 function requireActiveAgent(state, actor, role = 'core', title = 'Core Agent') {
   const agent = activeAgentFor(state, actor);
   if (agent) return agent;
@@ -335,7 +443,7 @@ const routeRules = [
   {
     role: 'browser',
     support: ['researcher', 'tester'],
-    keywords: ['browser', 'browse', 'scrape', 'scraping', 'extract', 'click', 'login flow', 'fill form', 'captcha', 'bot detection', 'website', 'url', 'webpage']
+    keywords: ['agent browser', 'browser agent', 'browser automation', 'browser', 'browse', 'scrape', 'scraping', 'web scraping', 'extract', 'click', 'login flow', 'fill form', 'captcha', 'bot detection', 'website', 'url', 'webpage']
   },
   {
     role: 'researcher',
@@ -359,6 +467,10 @@ function routeScore(task, rule) {
   return rule.keywords.reduce((score, keyword) => task.includes(keyword) ? score + Math.max(1, keyword.split(/\s+/).length) : score, 0);
 }
 
+function hasBrowserWorkIntent(task) {
+  return /\b(agent browser|browser agent|browser automation|browse|scrape|scraping|web scraping|extract|click|login flow|fill form|captcha|bot detection|webpage|url)\b/.test(task);
+}
+
 function uniqueValues(values) {
   return [...new Set(values.filter(Boolean))];
 }
@@ -372,6 +484,7 @@ function maybeLimit(values, limit) {
 
 function shouldActivatePartyMode(state, task, primaryRole, supportRoles, newSystemIntent) {
   if (state.partyMode?.enabled === false || state.partyMode?.autoActivateWhenNeeded === false) return false;
+  const explicitPartyIntent = /\b(party mode|party|multi[- ]?agent|swarm|semua agent|banyak agent|agent.*bincang|bincang.*agent|agent.*discuss|discuss.*agent)\b/.test(task);
   const multiDomainIntent = [
     ['ui', 'backend'],
     ['frontend', 'backend'],
@@ -381,10 +494,11 @@ function shouldActivatePartyMode(state, task, primaryRole, supportRoles, newSyst
     ['security', 'auth'],
     ['prompt', 'system']
   ].some(([first, second]) => task.includes(first) && task.includes(second));
+  const browserRiskIntent = hasBrowserWorkIntent(task);
   const connectiveIntent = /\b(connect|connected|integrate|integration|bersambung|sambung|hubung|flow|workflow)\b/.test(task);
   const broadBuild = newSystemIntent && supportRoles.length >= 2;
   const specialistStack = supportRoles.length >= 3 && ['architect', 'planner', 'core'].includes(primaryRole);
-  return multiDomainIntent || connectiveIntent || broadBuild || specialistStack;
+  return explicitPartyIntent || multiDomainIntent || browserRiskIntent || connectiveIntent || broadBuild || specialistStack;
 }
 
 function partyFormat(state) {
@@ -405,12 +519,14 @@ function partyParticipantsFor(state, primaryRole, supportRoles, scored, partyAct
   const minimum = Number(state.partyMode?.minimumParticipants || 3);
   const floor = Number.isFinite(preferredMinimum) ? Math.max(minimum, preferredMinimum) : minimum;
   const fallbackRoles = ['planner', 'researcher', 'reviewer', 'coder', 'architect', 'prompt', 'tester'];
-  const participants = uniqueValues([
+  const relevant = uniqueValues([
     primaryRole,
     ...supportRoles,
-    ...scored.map((rule) => rule.role),
-    ...fallbackRoles
+    ...scored.map((rule) => rule.role)
   ]);
+  const participants = relevant.length >= floor
+    ? relevant
+    : uniqueValues([...relevant, ...fallbackRoles]).slice(0, floor);
   const catalogRoles = new Set((state.agentCatalog || []).map((item) => item.role));
   const filtered = participants.filter((role) => catalogRoles.has(role));
   const enough = filtered.length >= floor ? filtered : participants;
@@ -428,15 +544,16 @@ function inferAgentRoute(state, taskText) {
   const newSystemIntent = /\b(system|sistem|app|tool|platform|website|dashboard|engine|core)\b/.test(task)
     || /buat sebuah|bina sebuah|create a|build a/.test(task);
   const implementationIntent = /\b(code|coding|implement|fix|ubah file|buat file)\b/.test(task);
+  const browserWorkIntent = hasBrowserWorkIntent(task);
   const top = scored[0];
-  let primaryRole = top?.role || state.agentPolicy?.defaultRole || 'core';
+  let primaryRole = browserWorkIntent ? 'browser' : (top?.role || state.agentPolicy?.defaultRole || 'core');
 
-  if (newSystemIntent && !implementationIntent && state.agentRouter?.preferHighReasoningForNewSystems !== false) {
+  if (newSystemIntent && !implementationIntent && !browserWorkIntent && state.agentRouter?.preferHighReasoningForNewSystems !== false) {
     primaryRole = state.agentRouter?.defaultHighReasoningRole || 'architect';
   }
 
   const primary = catalogForRole(state, primaryRole);
-  const baseSupport = newSystemIntent
+  const baseSupport = newSystemIntent && !browserWorkIntent
     ? ['planner', 'researcher', 'prompt', 'coder', 'reviewer']
     : (top?.support || []);
   const supportRoles = maybeLimit(uniqueValues([
@@ -447,7 +564,7 @@ function inferAgentRoute(state, taskText) {
   const partyActive = shouldActivatePartyMode(state, task, primaryRole, supportRoles, newSystemIntent);
   const partyParticipants = partyParticipantsFor(state, primaryRole, supportRoles, scored, partyActive);
 
-  const ambiguousNewSystem = newSystemIntent && words.length < 18;
+  const ambiguousNewSystem = newSystemIntent && !browserWorkIntent && words.length < 18;
   const noClearMatch = scored.length === 0 && words.length > 3;
   const needsClarification = state.agentRouter?.clarifyBeforeActionWhenAmbiguous !== false
     && (ambiguousNewSystem || noClearMatch || /\b(maybe|mungkin|lebih kurang|macam)\b/.test(task));
@@ -478,7 +595,7 @@ function inferAgentRoute(state, taskText) {
     confidence: top ? Math.min(0.95, 0.45 + (top.score * 0.08)) : 0.35,
     needsClarification,
     questions,
-    reason: newSystemIntent
+    reason: newSystemIntent && !browserWorkIntent
       ? `New or broad system task routed to ${primary.title} for high-reasoning planning before implementation.`
       : top
         ? `Matched keywords for ${primary.title}: ${top.keywords.filter((keyword) => task.includes(keyword)).join(', ')}.`
@@ -502,7 +619,7 @@ function setup(args) {
   const codingLanguage = String(args['coding-language'] || 'English');
   const githubUrl = String(args['github-url'] || '');
   const gitName = String(args['git-name'] || displayName);
-  const gitEmail = String(args['git-email'] || '');
+  const gitEmail = String(args['git-email'] || 'github-noreply');
   const githubUsername = String(args['github-username'] || '');
   const joinMode = String(args['join-mode'] || 'owner-approved');
 
@@ -510,12 +627,10 @@ function setup(args) {
   if (password.length < 8) throw new Error('Password must be at least 8 characters.');
   if (!['solo', 'team'].includes(mode)) throw new Error('Mode must be solo or team.');
   if (mode === 'team' && !githubUrl) throw new Error('Team mode requires --github-url.');
-  if (state.autosync?.requireUserGitEmail !== false && !gitEmail) {
-    throw new Error('Git email is required so commits are attributed to the real user, not the AI tool.');
-  }
   if (!['open', 'owner-approved', 'invite'].includes(joinMode)) {
     throw new Error('Join mode must be open, owner-approved, or invite.');
   }
+  const gitIdentity = resolveGitIdentityInput(state, codename, gitName, gitEmail, githubUsername);
 
   const { passwordHash, passwordSalt } = hashPassword(password);
   state.initialized = true;
@@ -545,11 +660,7 @@ function setup(args) {
         conversation: conversationLanguage,
         coding: codingLanguage
       },
-      gitIdentity: {
-        name: gitName,
-        email: gitEmail,
-        githubUsername
-      },
+      gitIdentity,
       joinedAt: now()
     }
   };
@@ -692,13 +803,27 @@ function agentRoute(args) {
     };
   }) : [];
   const missingPartyAgents = partyAgents.filter((item) => item.missing);
+  const missingAgentCommands = missingPartyAgents.map((item) => (
+    `node .MOP/scripts/mop-core.mjs agent activate --actor ${actor} --role ${item.role} --title "${item.title}" --name "<agent-name>"`
+  ));
+  const missingAgentQuestions = missingPartyAgents.map((item) => (
+    `Beri nama untuk ${item.title} (${item.role}) kamu:`
+  ));
+  const browserPreflight = route.primaryRole === 'browser'
+    || route.supportRoles.includes('browser')
+    || route.partyMode?.participants?.includes('browser')
+    || hasBrowserWorkIntent(route.task || '')
+    ? browserPreflightFor(state)
+    : null;
   const response = {
     ok: Boolean(agent),
     actor,
     route,
     partyAgents,
+    missingAgents: missingPartyAgents,
     activeAgent: null,
     answerContract: null,
+    browserPreflight,
     monthlyMemory: {
       restoreCommand: `node .MOP/scripts/mop-core.mjs memory brief --actor ${actor}`,
       saveCommand: `node .MOP/scripts/mop-core.mjs memory add --actor ${actor} --kind conversation --summary "<one-line outcome>"`
@@ -721,18 +846,33 @@ function agentRoute(args) {
     if (route.partyMode.active && missingPartyAgents.length) {
       response.ok = false;
       response.nextAction = 'name-required-party-agents';
-      response.message = 'Party mode diperlukan, tetapi ada agent terlibat yang belum dinamakan.';
-      response.missingAgentCommands = missingPartyAgents.map((item) => (
-        `node .MOP/scripts/mop-core.mjs agent activate --actor ${actor} --role ${item.role} --title "${item.title}" --name "<agent-name>"`
-      ));
+      response.message = `Party Mode perlukan ${missingPartyAgents.length} agent yang belum ada nama. Minta nama semua agent ini dahulu sebelum sambung kerja.`;
+      response.ask = `Kita ada ${missingPartyAgents.length} agent belum ada nama. ${missingAgentQuestions.join(' ')}`;
+      response.missingAgentQuestions = missingAgentQuestions;
+      response.missingAgentCommands = missingAgentCommands;
+    } else if (browserPreflight?.required && browserPreflight.needsQuestion) {
+      response.ok = false;
+      response.nextAction = 'ask-browser-before-browser-work';
+      response.message = 'Browser preflight belum ready. Tanya browser user dahulu sebelum scraping/browser automation.';
+      response.ask = browserPreflight.question;
     } else {
       response.nextAction = route.needsClarification ? 'ask-clarifying-questions' : 'proceed-with-agent';
     }
   } else {
-    response.nextAction = 'name-required-agent';
-    response.message = `Task ini perlukan ${route.primaryTitle}. Agent ini belum ada nama lagi atau belum dipilih.`;
-    response.ask = `Beri nama untuk ${route.primaryTitle} kamu:`;
+    response.nextAction = route.partyMode.active && missingPartyAgents.length
+      ? 'name-required-party-agents'
+      : 'name-required-agent';
+    response.message = route.partyMode.active && missingPartyAgents.length
+      ? `Party Mode perlukan ${missingPartyAgents.length} agent yang belum ada nama. Minta nama semua agent ini dahulu sebelum sambung kerja.`
+      : `Task ini perlukan ${route.primaryTitle}. Agent ini belum ada nama lagi atau belum dipilih.`;
+    response.ask = route.partyMode.active && missingPartyAgents.length
+      ? `Kita ada ${missingPartyAgents.length} agent belum ada nama. ${missingAgentQuestions.join(' ')}`
+      : `Beri nama untuk ${route.primaryTitle} kamu:`;
     response.command = `node .MOP/scripts/mop-core.mjs agent activate --actor ${actor} --role ${route.primaryRole} --title "${route.primaryTitle}" --name "<agent-name>"`;
+    if (route.partyMode.active && missingPartyAgents.length) {
+      response.missingAgentQuestions = missingAgentQuestions;
+      response.missingAgentCommands = missingAgentCommands;
+    }
     if (route.needsClarification) response.afterNaming = route.questions;
   }
 
@@ -747,6 +887,11 @@ function agentList() {
   }, null, 2));
 }
 
+function browserPreflight() {
+  const state = readState();
+  console.log(JSON.stringify(browserPreflightFor(state), null, 2));
+}
+
 function memoryAdd(args) {
   const state = readState();
   if (!state.initialized) throw new Error('MOP is not initialized.');
@@ -822,12 +967,12 @@ function memberGitIdentity(args) {
   if (!member) throw new Error('Unknown actor.');
   const agent = requireActiveAgent(state, actor);
   const name = String(args.name || member.displayName || actor);
-  const email = requireArg(args, 'email');
+  const email = String(args.email || 'github-noreply');
   const githubUsername = String(args['github-username'] || member.gitIdentity?.githubUsername || '');
-  member.gitIdentity = { name, email, githubUsername };
+  member.gitIdentity = resolveGitIdentityInput(state, actor, name, email, githubUsername);
   appendLedger(state, actor, 'git-identity', `Updated git identity for ${actor}.`, agent);
   writeState(state);
-  console.log(`Git identity set for ${actor}: ${name} <${email}>${githubUsername ? ` github=${githubUsername}` : ''}`);
+  console.log(`Git identity set for ${actor}: ${member.gitIdentity.name} <${member.gitIdentity.email}>${member.gitIdentity.githubUsername ? ` github=${member.gitIdentity.githubUsername}` : ''}`);
 }
 
 function validate() {
@@ -841,8 +986,12 @@ function validate() {
   if (state.agentPolicy && typeof state.agentPolicy !== 'object') errors.push('agentPolicy must be object');
   if (state.answerPolicy && typeof state.answerPolicy !== 'object') errors.push('answerPolicy must be object');
   if (state.memoryPolicy && typeof state.memoryPolicy !== 'object') errors.push('memoryPolicy must be object');
+  if (state.browserPolicy && typeof state.browserPolicy !== 'object') errors.push('browserPolicy must be object');
   if (state.agentRouter && typeof state.agentRouter !== 'object') errors.push('agentRouter must be object');
   if (state.partyMode && typeof state.partyMode !== 'object') errors.push('partyMode must be object');
+  if (state.autosync?.githubIdentity && typeof state.autosync.githubIdentity !== 'object') {
+    errors.push('autosync.githubIdentity must be object');
+  }
   if (state.projectRootPolicy && typeof state.projectRootPolicy !== 'object') errors.push('projectRootPolicy must be object');
   if (state.projectRootPolicy?.rules && !Array.isArray(state.projectRootPolicy.rules)) {
     errors.push('projectRootPolicy.rules must be array');
@@ -925,6 +1074,7 @@ function status() {
     agentPolicy: state.agentPolicy || {},
     answerPolicy: answerPolicy(state),
     memoryPolicy: memoryPolicy(state),
+    browserPolicy: browserPolicy(state),
     agentRouter: state.agentRouter || {},
     partyMode: state.partyMode || {},
     workflow: {
@@ -978,6 +1128,7 @@ function main() {
   if (command === 'agent' && subcommand === 'require') return agentRequire(args);
   if (command === 'agent' && subcommand === 'route') return agentRoute(args);
   if (command === 'agent' && subcommand === 'list') return agentList();
+  if (command === 'browser' && subcommand === 'preflight') return browserPreflight();
   if (command === 'memory' && subcommand === 'add') return memoryAdd(args);
   if (command === 'memory' && subcommand === 'brief') return memoryBrief(args);
   if (command === 'memory' && subcommand === 'restore') return memoryRestore(args);
@@ -985,15 +1136,16 @@ function main() {
   console.log(`Usage:
   node .MOP/scripts/mop-core.mjs status
   node .MOP/scripts/mop-core.mjs validate
-  node .MOP/scripts/mop-core.mjs setup --project-name NAME --name DISPLAY --codename CODE --password PASS --mode solo|team --conversation-language LANG --coding-language LANG --git-email EMAIL [--git-name NAME] [--github-username USER] [--github-url URL]
+  node .MOP/scripts/mop-core.mjs setup --project-name NAME --name DISPLAY --codename CODE --password PASS --mode solo|team --conversation-language LANG --coding-language LANG [--git-email github-noreply|EMAIL] [--git-name NAME] [--github-username USER] [--github-url URL]
   node .MOP/scripts/mop-core.mjs login --codename CODE --password PASS
-  node .MOP/scripts/mop-core.mjs member git-identity --actor CODE --name NAME --email EMAIL [--github-username USER]
+  node .MOP/scripts/mop-core.mjs member git-identity --actor CODE --name NAME [--email github-noreply|EMAIL] [--github-username USER]
   node .MOP/scripts/mop-core.mjs agent activate --actor CODE --role ROLE --title TITLE --name NAME
   node .MOP/scripts/mop-core.mjs agent use --actor CODE --name NAME
   node .MOP/scripts/mop-core.mjs agent current --actor CODE
   node .MOP/scripts/mop-core.mjs agent require --actor CODE [--role ROLE] [--title TITLE]
   node .MOP/scripts/mop-core.mjs agent route --actor CODE --task "task text"
   node .MOP/scripts/mop-core.mjs agent list
+  node .MOP/scripts/mop-core.mjs browser preflight
   node .MOP/scripts/mop-core.mjs memory brief --actor CODE [--month YYYY-MM]
   node .MOP/scripts/mop-core.mjs memory add --actor CODE --kind conversation --summary "what happened"
   node .MOP/scripts/mop-core.mjs memory restore --actor CODE`);

package/.agents/AGENTS.md

@@ -23,6 +23,14 @@ Before doing anything, read `.MOP/STATE.json` and follow
   `mop-core.mjs memory add --actor <codename> --kind conversation --summary "<outcome>"`.
 - If the router says clarification is needed, ask the clarifying questions
   before implementation.
+- If the router returns `nextAction: "name-required-party-agents"`, ask every
+  question in `missingAgentQuestions` and stop until those agents are named.
+- Before browser, scraping, extraction, click automation, login flow,
+  bot-detection, or form-filling work, run `mop-core.mjs browser preflight`. If
+  it reports Edge, Brave, or Opera, use browser-act `chrome-direct` mode and
+  guide the user to start remote debugging (`--remote-debugging-port`). If it
+  cannot detect a supported browser, ask which browser they use before doing
+  browser work.
 - If the router activates Party Mode, show visible agent-to-agent dialogue using
   the exact format in `.MOP/PROTOCOL.md`, with `PARTY MODE` shown in
   large uppercase before the dialogue. Party Mode normally uses at least 3
@@ -34,6 +42,10 @@ Before doing anything, read `.MOP/STATE.json` and follow
 - For risky changes, run adversarial review before implementation or merge.
 - When a role agent first appears, ask the user to name it before using it as a
   personal agent.
+- Autosycn member commits must use the active member GitHub account. By default,
+  MOP derives `ID+USERNAME@users.noreply.github.com` from `gh api user` and
+  refuses mismatched GitHub accounts. `BURHAN-MOP` identity is reserved for
+  merge guardian commits only.
 
 ## Operating Rules
 

package/AGENTS.md

@@ -31,7 +31,16 @@ follow `.MOP/PROTOCOL.md`.
 
 - If the router marks the task as ambiguous, the named primary agent must ask
   clarifying questions before implementation.
-- **[browser] Agent Rule**: Before creating a new browser session with `browser-act`, you must check the user's default browser (e.g., using `xdg-settings get default-web-browser` on Linux) or ask them what browser they use (Chrome, Edge, Brave, Opera). If they use something other than the built-in Chrome, use `browser-act`'s `chrome-direct` mode and guide them to start their browser with remote debugging (`--remote-debugging-port`), rather than just creating a default `chrome` browser.
+- If the router returns `nextAction: "name-required-party-agents"`, ask every
+  question in `missingAgentQuestions` and stop until those agents are named.
+- **[browser] Agent Rule**: Before browser, scraping, extraction, click
+  automation, login flow, bot-detection, or form-filling work, run
+  `mop-core.mjs browser preflight`. It scans the default browser when possible.
+  If it reports Edge, Brave, or Opera, use browser-act `chrome-direct` mode and
+  guide the user to start remote debugging (`--remote-debugging-port`). If it
+  cannot detect a supported browser, ask which browser they use before doing
+  browser work. Never create a default Chrome session first when the user uses
+  another supported browser.
 - If the router returns `partyMode.active: true`, use Party Mode. Show
   `PARTY MODE` in large uppercase before the dialogue, then generate the
   agent-to-agent and agent-to-user dialogue explicitly in your response using this exact format:
@@ -46,8 +55,8 @@ follow `.MOP/PROTOCOL.md`.
 
 For `/mop-setup`, ask in order: project name (default folder name), owner display
 name, owner codename, password, solo/team, conversation language, coding
-language, GitHub link, GitHub username, Git commit email, join mode if team,
-then whether to activate auto-deploy now or later.
+language, GitHub link, GitHub username, Git commit email (`github-noreply` by
+default), join mode if team, then whether to activate auto-deploy now or later.
 
 Agent role/template names are not personal AI names. When a role agent is first
 needed, ask the user to name it and save it with `mop-core.mjs agent activate`.
@@ -62,6 +71,9 @@ agent route instead of answering invisibly.
 Default skill: `autosycn`. After meaningful changes, use
 `.MOP/scripts/mop-autosycn.mjs`. It must commit and merge with the
 real member Git identity from state, never with the AI tool identity.
+Member commits must use the active member GitHub account; by default MOP derives
+`ID+USERNAME@users.noreply.github.com` from `gh api user` and refuses mismatched
+GitHub accounts. `BURHAN-MOP` identity is only for merge guardian commits.
 In team mode, run `preflight --actor <codename>` before starting work; work goes
 to `dev/<codename>`. Every small or large change is pushed there first, then
 BURHAN-MOP reviews and merges to `main` only when checks pass.

package/CLAUDE.md

@@ -23,6 +23,14 @@ follow `.MOP/PROTOCOL.md`.
   `mop-core.mjs memory add --actor <codename> --kind conversation --summary "<one-line outcome>"`.
 - If the router marks the task as ambiguous, the named primary agent must ask
   clarifying questions before implementation.
+- If the router returns `nextAction: "name-required-party-agents"`, ask every
+  question in `missingAgentQuestions` and stop until those agents are named.
+- Before browser, scraping, extraction, click automation, login flow,
+  bot-detection, or form-filling work, run `mop-core.mjs browser preflight`. If
+  it reports Edge, Brave, or Opera, use browser-act `chrome-direct` mode and
+  guide the user to start remote debugging (`--remote-debugging-port`). If it
+  cannot detect a supported browser, ask which browser they use before doing
+  browser work.
 - If the router returns `partyMode.active: true`, use Party Mode. Show
   `PARTY MODE` in large uppercase before the dialogue, then show
   agent-to-agent and agent-to-user dialogue with the exact format from
@@ -47,6 +55,9 @@ agent route instead of answering invisibly.
 Default skill: `autosycn`. After meaningful changes, use
 `.MOP/scripts/mop-autosycn.mjs`. It must commit and merge with the
 real member Git identity from state, never with the AI tool identity.
+Member commits must use the active member GitHub account; by default MOP derives
+`ID+USERNAME@users.noreply.github.com` from `gh api user` and refuses mismatched
+GitHub accounts. `BURHAN-MOP` identity is only for merge guardian commits.
 In team mode, run `preflight --actor <codename>` before starting work; work goes
 to `dev/<codename>`. Every small or large change is pushed there first, then
 BURHAN-MOP reviews and merges to `main` only when checks pass.

package/GEMINI.md

@@ -16,6 +16,14 @@ rules are imported below.
   example: `agent: <agent-name> (<agent-role>) to <user>`.
 - Save a one-line memory after meaningful work with
   `mop-core.mjs memory add --actor <codename> --kind conversation --summary "<outcome>"`.
+- If `agent route` returns `nextAction: "name-required-party-agents"`, ask every
+  question in `missingAgentQuestions` and stop until those agents are named.
+- Before browser, scraping, extraction, click automation, login flow,
+  bot-detection, or form-filling work, run `mop-core.mjs browser preflight` and
+  follow its mode/question before doing browser work.
+- Autosycn member commits must use the active member GitHub account. MOP derives
+  `ID+USERNAME@users.noreply.github.com` from `gh api user` by default and
+  refuses mismatched GitHub accounts.
 - Treat the current workspace root as the project root; do not create a nested
   project wrapper folder for app work unless the user explicitly asks for it.
 - Use `.gemini/settings.json` for context filenames and MCP server setup.

package/README.bm.md

@@ -142,7 +142,7 @@ dan merge hanya bila workflow selamat.
 | --- | --- |
 | npm package | [`burhan-mop`](https://www.npmjs.com/package/burhan-mop) |
 | command latest | `npx burhan-mop install` |
-| GitHub release | [`v0.1.6`](https://github.com/BURHANDEV-ENTERPRISE/BURHAN-MOP/releases/tag/v0.1.6) |
+| GitHub release | [`v0.1.8`](https://github.com/BURHANDEV-ENTERPRISE/BURHAN-MOP/releases/tag/v0.1.8) |
 | Node | `>=20` |
 
 ## Links

package/README.md

@@ -141,7 +141,7 @@ and merges only when the workflow is safe.
 | --- | --- |
 | npm package | [`burhan-mop`](https://www.npmjs.com/package/burhan-mop) |
 | latest command | `npx burhan-mop install` |
-| GitHub release | [`v0.1.6`](https://github.com/BURHANDEV-ENTERPRISE/BURHAN-MOP/releases/tag/v0.1.6) |
+| GitHub release | [`v0.1.8`](https://github.com/BURHANDEV-ENTERPRISE/BURHAN-MOP/releases/tag/v0.1.8) |
 | Node | `>=20` |
 
 ## Links

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "burhan-mop",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "MOP portable agent memory core installer and CLI.",
   "type": "module",
   "author": "BURHANDEV ENTERPRISE",