claude-code-session-manager 0.62.0 → 0.62.1

package/src/preload/api.d.ts

@@ -29,82 +29,6 @@ export interface WriteErrorEvent {
   reason: string;
 }
 
-export interface BrowserNavState {
-  url: string;
-  title: string;
-  canGoBack: boolean;
-  canGoForward: boolean;
-  loading: boolean;
-  isSecure: boolean;
-}
-
-/** One captured recorder step (PRD 408 engine → PRD 409 panel). */
-export interface RecordStep {
-  n: number;
-  /** `select` is accepted by replay/export (PRD 410) for forward-compat;
-   * the live engine does not emit it yet. */
-  verb: 'navigate' | 'click' | 'type' | 'select' | 'wait-for' | 'drag';
-  target: string;
-  kind?: 'nav' | 'assert';
-  /** True for `type` steps — the actual typed value is never captured. */
-  masked?: boolean;
-  /** Engine-suggested `{{var}}` name for a `type` step (e.g. field name). */
-  variableSuggestion?: string;
-  /** Renderer-owned: set once the user checks "parameterize as {{var}}". */
-  variable?: string | null;
-  /** `select` steps only — the option value to choose on replay/export. */
-  value?: string;
-  /** Click position, or drag-start position for `drag` steps. */
-  x?: number;
-  /** Click position, or drag-start position for `drag` steps. */
-  y?: number;
-  /** `drag` steps only — drag-end target selector. */
-  endTarget?: string;
-  /** `drag` steps only — drag-end x position. */
-  endX?: number;
-  /** `drag` steps only — drag-end y position. */
-  endY?: number;
-}
-
-/** Per-step replay outcome (PRD 410), streamed as `browser:replay-step:<viewId>`. */
-export interface ReplayStepResult {
-  n: number;
-  status: 'pass' | 'fail';
-  detail?: string;
-}
-
-/** find-in-page result (PRD 402), streamed as `browser:find-result:<viewId>`. */
-export interface FindResult {
-  requestId: number;
-  matches: number;
-  activeMatchOrdinal: number;
-}
-
-/** Element-picker event (PRD 403), streamed as `browser:picker-event:<viewId>`. */
-export interface PickerEvent {
-  type: 'hover' | 'pick' | 'unpick' | 'exit';
-  selector?: string;
-  label?: string;
-  tag?: string;
-  rect?: { x: number; y: number; width: number; height: number };
-  /** Present on a 'pick' event fired by an unmodified click — the selection was replaced, not accumulated. */
-  replace?: boolean;
-}
-
-/** One entry in `~/.claude/session-manager/browser/history.json` (PRD 402). */
-export interface BrowserHistoryEntry {
-  url: string;
-  title: string;
-  ts: number;
-}
-
-/** One entry in `~/.claude/session-manager/browser/bookmarks.json` (PRD 402). */
-export interface BrowserBookmark {
-  url: string;
-  title: string;
-  ts: number;
-}
-
 export interface ReadJsonResult {
   exists: boolean;
   raw: string;
@@ -133,7 +57,7 @@ export interface ImportRef {
 /** Declared owner ids for the single-writer law over a project's
  *  session-manager-operations/ root. Mirrors OWNERS in
  *  src/main/lib/opsOwnership.cjs — one writer per namespace; everyone reads. */
-export type OpsWriter = 'epics' | 'scheduler' | 'project-home' | 'browser';
+export type OpsWriter = 'epics' | 'scheduler' | 'project-home';
 
 export interface WriteResult {
   ok: boolean;
@@ -1162,46 +1086,6 @@ export interface PluginInstallProgressEvent {
   line: string;
 }
 
-// ────────────────────────────────────────────── Web Remote (PRD 08)
-
-export interface WebRemoteDevice {
-  deviceId: string;
-  deviceName: string;
-  issuedAt: string;
-  lastConnectedAt: string | null;
-}
-
-export interface WebRemoteStatus {
-  enabled: boolean;
-  remoteControlEnabled: boolean;
-  connected: boolean;
-  e2eActive: boolean;
-  /** True once the user has confirmed the SAS on the desktop. */
-  e2eAuthenticated: boolean;
-  /** Explicit E2E session state for UI rendering. */
-  e2eState: 'idle' | 'pending_sas' | 'authenticated' | 'failed';
-  /** 6-digit Short Authentication String pending user confirmation, or null. */
-  pendingSas: string | null;
-  devices: WebRemoteDevice[];
-}
-
-export interface WebRemotePairResult {
-  ok: boolean;
-  deviceId?: string;
-  error?: string;
-}
-
-export interface WebRemoteMutationResult {
-  ok: boolean;
-  error?: string;
-}
-
-export interface WebRemoteAuditTailResult {
-  ok: boolean;
-  lines?: string[];
-  error?: string;
-}
-
 // ────────────────────────────────────────────── Chat runner (PRD 319)
 
 export interface ChatRunPayload {
@@ -1344,63 +1228,6 @@ export interface SessionManagerAPI {
     onExit: (tabId: string, handler: (info: PtyExit) => void) => () => void;
     onWriteError: (handler: (ev: WriteErrorEvent) => void) => () => void;
   };
-  browser: {
-    create: (payload: { viewId: string; partition: string }) => Promise<{ ok: boolean }>;
-    setBounds: (payload: { viewId: string; x: number; y: number; width: number; height: number }) => Promise<{ ok: boolean }>;
-    show: (viewId: string) => Promise<{ ok: boolean }>;
-    hide: (viewId: string) => Promise<{ ok: boolean }>;
-    destroy: (viewId: string) => Promise<{ ok: boolean }>;
-    navigate: (payload: { viewId: string; url: string }) => Promise<{ ok: boolean; error?: string }>;
-    back: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    forward: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    reload: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    stop: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    onNavState: (viewId: string, handler: (state: BrowserNavState) => void) => () => void;
-    recordStart: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    recordStop: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    onRecordStep: (viewId: string, handler: (step: RecordStep) => void) => () => void;
-    captureDom: (payload: { viewId: string; kind: 'text' | 'html' }) => Promise<
-      | { ok: true; url: string; title: string; text: string; truncated?: boolean }
-      | { ok: false; error: string }
-    >;
-    captureShot: (viewId: string) => Promise<
-      | { ok: true; url: string; title: string; dataUrl: string }
-      | { ok: false; error: string }
-    >;
-    saveBinary: (path: string, base64: string, writer?: OpsWriter) => Promise<{ ok: boolean; error?: string }>;
-    /** Opens a native "Save As" dialog and writes `text` to the chosen path directly
-     *  (bypasses config.cjs's write-boundary check — the path is user-chosen via OS dialog). */
-    saveRecording: (payload: { defaultName: string; text: string }) => Promise<
-      | { ok: true; path: string }
-      | { ok: false; canceled: true }
-      | { ok: false; error: string }
-    >;
-    replay: (payload: {
-      viewId: string;
-      steps: RecordStep[];
-      values?: Record<string, string>;
-      continueOnError?: boolean;
-    }) => Promise<{ ok: boolean; error?: string; stopped?: boolean; failedAt?: number }>;
-    onReplayStep: (viewId: string, handler: (step: ReplayStepResult) => void) => () => void;
-    setZoom: (payload: { viewId: string; factor: number }) => Promise<{ ok: boolean; error?: string; factor?: number }>;
-    find: (payload: { viewId: string; text: string; forward?: boolean }) => Promise<{ ok: boolean; error?: string }>;
-    stopFind: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    onFindResult: (viewId: string, handler: (result: FindResult) => void) => () => void;
-    pickerStart: (viewId: string) => Promise<{ ok: boolean; error?: string }>;
-    pickerStop: (viewId: string) => Promise<{ ok: boolean; error?: string; wasPicking?: boolean }>;
-    onPickerEvent: (viewId: string, handler: (ev: PickerEvent) => void) => () => void;
-    /** Selection-scoped capture pipeline (PRD 404): filter -> prune -> summarize -> chunk for 'agent', outerHTML for 'html', CDP AX-tree for 'a11y', fallback-chain for 'selector'. */
-    capture: (payload: {
-      viewId: string;
-      selectors: string[];
-      mode: 'agent' | 'html' | 'a11y' | 'selector';
-    }) => Promise<
-      | { ok: true; mode: string; text: string; meta: { chunks?: number; tokens?: number } }
-      | { ok: false; error: string }
-    >;
-    /** Fired when the embedded page tries to open a new window (target="_blank", window.open, ctrl/cmd-click) — the main process denies the native popup and forwards the URL here. */
-    onOpenTabRequest: (handler: (payload: { url: string }) => void) => () => void;
-  };
   transcripts: {
     subscribe: (payload: { tabId: string; cwd: string; sessionUuid: string }) => Promise<SubscribeResult>;
     /** Release the sub back to the LRU cache (view-switch). Does not destroy the watcher. */
@@ -1507,6 +1334,7 @@ export interface SessionManagerAPI {
     rename: (path: string, newName: string) => Promise<FilesRenameResult>;
     delete: (path: string) => Promise<FilesDeleteResult>;
     duplicate: (path: string) => Promise<FilesDuplicateResult>;
+    saveBinary: (path: string, base64: string, writer?: OpsWriter) => Promise<{ ok: boolean; error?: string }>;
   };
   docEdit: {
     run: (payload: { path: string; before: string; instruction: string; documentText?: string }) => Promise<DocEditResult>;
@@ -1616,8 +1444,6 @@ export interface SessionManagerAPI {
       | { ok: true; text: string }
       | { ok: false; error?: string }
     >;
-    /** Write side — copies a Capture-panel screenshot data URL to the OS clipboard. */
-    copyImage: (dataUrl: string) => Promise<{ ok: boolean; error?: string }>;
     /** Write side — copies arbitrary text (e.g. a recorded flow export) to the OS clipboard. */
     writeText: (text: string) => Promise<{ ok: boolean; error?: string }>;
   };
@@ -1704,27 +1530,6 @@ export interface SessionManagerAPI {
      *  renderer needs per-row badges without a separate git call per file. */
     fileStatus: (cwd: string) => Promise<GitFileStatusMap>;
   };
-  webRemote: {
-    getStatus: () => Promise<WebRemoteStatus>;
-    enable: () => Promise<WebRemoteMutationResult>;
-    disable: () => Promise<WebRemoteMutationResult>;
-    /** Allow MUTATE-tier commands (pty spawn/write, scheduler writes). Default off. */
-    enableControl: () => Promise<WebRemoteMutationResult>;
-    /** Block MUTATE-tier commands — mobile becomes read-only mirror. */
-    disableControl: () => Promise<WebRemoteMutationResult>;
-    pair: (otp: string) => Promise<WebRemotePairResult>;
-    revokeDevice: (deviceId: string) => Promise<WebRemoteMutationResult>;
-    auditTail: (lines?: number) => Promise<WebRemoteAuditTailResult>;
-    onStatus: (handler: (status: WebRemoteStatus) => void) => () => void;
-    onTokenRevoked: (handler: (ev: { deviceId: string }) => void) => () => void;
-    /** Revoke ALL paired devices and tear down every session immediately (panic). */
-    revokeAll: () => Promise<WebRemoteMutationResult>;
-    /** Subscribe to the completion event broadcast after revokeAll. */
-    onRevokedAll: (handler: (ev: { revokedCount: number }) => void) => () => void;
-    /** Confirm that the SAS shown on the desktop matches the browser — marks the
-     *  E2E session as authenticated and unblocks MUTATE-tier commands. */
-    confirmSas: () => Promise<WebRemoteMutationResult>;
-  };
   chat: {
     /** Spawn a headless `claude -p` run for a tab. Results arrive via the on* listeners. */
     run: (payload: ChatRunPayload) => Promise<{ ok: boolean }>;

package/src/preload/index.cjs

@@ -56,66 +56,6 @@ contextBridge.exposeInMainWorld('api', {
       return () => ipcRenderer.removeListener('pty:write-error', listener);
     },
   },
-  browser: {
-    create: (payload) => ipcRenderer.invoke('browser:create', payload),
-    setBounds: (payload) => ipcRenderer.invoke('browser:set-bounds', payload),
-    show: (viewId) => ipcRenderer.invoke('browser:show', { viewId }),
-    hide: (viewId) => ipcRenderer.invoke('browser:hide', { viewId }),
-    destroy: (viewId) => ipcRenderer.invoke('browser:destroy', { viewId }),
-    navigate: (payload) => ipcRenderer.invoke('browser:navigate', payload),
-    back: (viewId) => ipcRenderer.invoke('browser:back', { viewId }),
-    forward: (viewId) => ipcRenderer.invoke('browser:forward', { viewId }),
-    reload: (viewId) => ipcRenderer.invoke('browser:reload', { viewId }),
-    stop: (viewId) => ipcRenderer.invoke('browser:stop', { viewId }),
-    onNavState: (viewId, handler) => {
-      const channel = `browser:nav-state:${viewId}`;
-      const listener = (_e, state) => handler(state);
-      ipcRenderer.on(channel, listener);
-      return () => ipcRenderer.removeListener(channel, listener);
-    },
-    recordStart: (viewId) => ipcRenderer.invoke('browser:record-start', { viewId }),
-    recordStop: (viewId) => ipcRenderer.invoke('browser:record-stop', { viewId }),
-    onRecordStep: (viewId, handler) => {
-      const channel = `browser:record-step:${viewId}`;
-      const listener = (_e, step) => handler(step);
-      ipcRenderer.on(channel, listener);
-      return () => ipcRenderer.removeListener(channel, listener);
-    },
-    captureDom: (payload) => ipcRenderer.invoke('browser:capture-dom', payload),
-    captureShot: (viewId) => ipcRenderer.invoke('browser:capture-shot', { viewId }),
-    saveBinary: (path, base64, writer) => ipcRenderer.invoke('browser:save-binary', { path, base64, writer }),
-    saveRecording: (payload) => ipcRenderer.invoke('browser:save-recording', payload),
-    replay: (payload) => ipcRenderer.invoke('browser:replay', payload),
-    onReplayStep: (viewId, handler) => {
-      const channel = `browser:replay-step:${viewId}`;
-      const listener = (_e, step) => handler(step);
-      ipcRenderer.on(channel, listener);
-      return () => ipcRenderer.removeListener(channel, listener);
-    },
-    setZoom: (payload) => ipcRenderer.invoke('browser:set-zoom', payload),
-    find: (payload) => ipcRenderer.invoke('browser:find', payload),
-    stopFind: (viewId) => ipcRenderer.invoke('browser:stop-find', { viewId }),
-    onFindResult: (viewId, handler) => {
-      const channel = `browser:find-result:${viewId}`;
-      const listener = (_e, result) => handler(result);
-      ipcRenderer.on(channel, listener);
-      return () => ipcRenderer.removeListener(channel, listener);
-    },
-    pickerStart: (viewId) => ipcRenderer.invoke('browser:picker-start', { viewId }),
-    pickerStop: (viewId) => ipcRenderer.invoke('browser:picker-stop', { viewId }),
-    onPickerEvent: (viewId, handler) => {
-      const channel = `browser:picker-event:${viewId}`;
-      const listener = (_e, ev) => handler(ev);
-      ipcRenderer.on(channel, listener);
-      return () => ipcRenderer.removeListener(channel, listener);
-    },
-    capture: (payload) => ipcRenderer.invoke('browser:capture', payload),
-    onOpenTabRequest: (handler) => {
-      const listener = (_e, payload) => handler(payload);
-      ipcRenderer.on('browser:open-tab-request', listener);
-      return () => ipcRenderer.removeListener('browser:open-tab-request', listener);
-    },
-  },
   transcripts: {
     subscribe: (payload) => ipcRenderer.invoke('transcript:subscribe', payload),
     unsubscribe: (tabId) => ipcRenderer.invoke('transcript:unsubscribe', { tabId }),
@@ -246,6 +186,7 @@ contextBridge.exposeInMainWorld('api', {
     rename: (path, newName) => ipcRenderer.invoke('files:rename', { path, newName }),
     delete: (path) => ipcRenderer.invoke('files:delete', { path }),
     duplicate: (path) => ipcRenderer.invoke('files:duplicate', { path }),
+    saveBinary: (path, base64, writer) => ipcRenderer.invoke('files:save-binary', { path, base64, writer }),
   },
   docEdit: {
     run: (payload) => ipcRenderer.invoke('docedit:run', payload),
@@ -309,7 +250,6 @@ contextBridge.exposeInMainWorld('api', {
   clipboard: {
     pasteImage: () => ipcRenderer.invoke('clipboard:paste-image'),
     pasteText: () => ipcRenderer.invoke('clipboard:paste-text'),
-    copyImage: (dataUrl) => ipcRenderer.invoke('browser:copy-image', { dataUrl }),
     writeText: (text) => ipcRenderer.invoke('clipboard:write-text', { text }),
   },
   memory: {
@@ -372,45 +312,6 @@ contextBridge.exposeInMainWorld('api', {
     status: (cwd) => ipcRenderer.invoke('git:status', { cwd }),
     fileStatus: (cwd) => ipcRenderer.invoke('git:file-status', { cwd }),
   },
-  webRemote: {
-    /** Current connection state (no token values). */
-    getStatus: () => ipcRenderer.invoke('webRemote:get-status'),
-    /** Turn remote control on. Initiates relay connection if a device is paired. */
-    enable: () => ipcRenderer.invoke('webRemote:enable'),
-    /** Turn remote control off. Immediately drops relay connection. */
-    disable: () => ipcRenderer.invoke('webRemote:disable'),
-    /** Allow MUTATE-tier commands (pty spawn/write, scheduler writes). Default off. */
-    enableControl: () => ipcRenderer.invoke('webRemote:enable-control'),
-    /** Block MUTATE-tier commands — mobile becomes read-only mirror. */
-    disableControl: () => ipcRenderer.invoke('webRemote:disable-control'),
-    /** Pair a new device using the 8-character OTP shown in the web UI. */
-    pair: (otp) => ipcRenderer.invoke('webRemote:pair', { otp }),
-    /** Revoke a paired device by its deviceId. */
-    revokeDevice: (deviceId) => ipcRenderer.invoke('webRemote:revoke-device', { deviceId }),
-    /** Read the last N lines of today's audit log (default 50). */
-    auditTail: (lines) => ipcRenderer.invoke('webRemote:audit-tail', lines ? { lines } : {}),
-    /** Push event from main when connection status changes. */
-    onStatus: (handler) => {
-      const listener = (_e, payload) => handler(payload);
-      ipcRenderer.on('webRemote:status', listener);
-      return () => ipcRenderer.removeListener('webRemote:status', listener);
-    },
-    /** Push event when the relay revokes this device's token. */
-    onTokenRevoked: (handler) => {
-      const listener = (_e, payload) => handler(payload);
-      ipcRenderer.on('webRemote:token-revoked', listener);
-      return () => ipcRenderer.removeListener('webRemote:token-revoked', listener);
-    },
-    /** Revoke ALL paired devices and tear down every session immediately. */
-    revokeAll: () => ipcRenderer.invoke('webRemote:revoke-all'),
-    confirmSas: () => ipcRenderer.invoke('webRemote:confirm-sas'),
-    /** Push event when revokeAll completes (main broadcasts webRemote:revoked-all). */
-    onRevokedAll: (handler) => {
-      const listener = (_e, payload) => handler(payload);
-      ipcRenderer.on('webRemote:revoked-all', listener);
-      return () => ipcRenderer.removeListener('webRemote:revoked-all', listener);
-    },
-  },
   chat: {
     /** Spawn a headless claude -p job. Results arrive via the on* listeners. */
     run: (payload) => ipcRenderer.invoke('chat:run', payload),

package/src/main/__tests__/browserAgentServer.test.cjs

@@ -1,235 +0,0 @@
-/**
- * browserAgentServer.test.cjs — unit tests for the loopback-only browser
- * agent HTTP API (PRD 535).
- *
- * Run: timeout 120 node --test src/main/__tests__/browserAgentServer.test.cjs
- */
-
-'use strict';
-
-const { test } = require('node:test');
-const assert = require('node:assert/strict');
-const http = require('node:http');
-const fs = require('node:fs');
-const path = require('node:path');
-const { createBrowserAgentServer, TOKEN_PATH, resolveTokenPath } = require('../browserAgentServer.cjs');
-
-function request(port, { method = 'GET', path: reqPath, token, body }) {
-  return new Promise((resolve, reject) => {
-    const headers = {};
-    if (token !== undefined) headers.Authorization = `Bearer ${token}`;
-    let payload;
-    if (body !== undefined) {
-      payload = JSON.stringify(body);
-      headers['Content-Type'] = 'application/json';
-      headers['Content-Length'] = Buffer.byteLength(payload);
-    }
-    const req = http.request({ hostname: '127.0.0.1', port, method, path: reqPath, headers }, (res) => {
-      const chunks = [];
-      res.on('data', (c) => chunks.push(c));
-      res.on('end', () => {
-        const text = Buffer.concat(chunks).toString('utf8');
-        let json = null;
-        try { json = JSON.parse(text); } catch { /* leave null for non-JSON bodies */ }
-        resolve({ status: res.statusCode, json, text });
-      });
-    });
-    req.on('error', reject);
-    if (payload) req.write(payload);
-    req.end();
-  });
-}
-
-function makeFakeRemote() {
-  const actions = [];
-  return {
-    actions,
-    async listTabs() {
-      return [{ viewId: 'v1', url: 'https://example.com', title: 'Example', active: true }];
-    },
-    async screenshot({ viewId }) {
-      if (!viewId && viewId !== undefined) return { ok: false, error: 'unknown viewId' };
-      return { ok: true, viewId: viewId || 'v1', dataUrl: 'data:image/png;base64,AAA', scale: 1 };
-    },
-    async action(params) {
-      actions.push(params);
-      if (params.action === 'boom') return { ok: false, error: 'unsupported action: boom' };
-      return { ok: true };
-    },
-    async dom({ viewId }) {
-      return { ok: true, viewId: viewId || 'v1', text: 'hello', elements: [] };
-    },
-  };
-}
-
-test('rejects requests without a bearer token', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port } = await server.start();
-  try {
-    const res = await request(port, { path: '/agent/browser/tabs' });
-    assert.equal(res.status, 401);
-    assert.equal(res.json.ok, false);
-  } finally {
-    await server.stop();
-  }
-});
-
-test('rejects requests with a wrong token', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port } = await server.start();
-  try {
-    const res = await request(port, { path: '/agent/browser/tabs', token: 'wrong-token' });
-    assert.equal(res.status, 401);
-  } finally {
-    await server.stop();
-  }
-});
-
-test('GET /agent/browser/tabs lists open tabs', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port, token } = await server.start();
-  try {
-    const res = await request(port, { path: '/agent/browser/tabs', token });
-    assert.equal(res.status, 200);
-    assert.equal(res.json.ok, true);
-    assert.equal(res.json.tabs.length, 1);
-    assert.equal(res.json.tabs[0].active, true);
-  } finally {
-    await server.stop();
-  }
-});
-
-test('POST /agent/browser/screenshot returns a resized image payload', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port, token } = await server.start();
-  try {
-    const res = await request(port, { method: 'POST', path: '/agent/browser/screenshot', token, body: {} });
-    assert.equal(res.status, 200);
-    assert.equal(res.json.ok, true);
-    assert.ok(res.json.dataUrl.startsWith('data:image/png'));
-  } finally {
-    await server.stop();
-  }
-});
-
-test('POST /agent/browser/action dispatches a single action', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port, token } = await server.start();
-  try {
-    const res = await request(port, {
-      method: 'POST',
-      path: '/agent/browser/action',
-      token,
-      body: { action: 'left_click', coordinate: [10, 20] },
-    });
-    assert.equal(res.status, 200);
-    assert.equal(res.json.ok, true);
-    assert.equal(remote.actions.length, 1);
-    assert.deepEqual(remote.actions[0].coordinate, [10, 20]);
-  } finally {
-    await server.stop();
-  }
-});
-
-test('POST /agent/browser/action without an action field is a 400', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port, token } = await server.start();
-  try {
-    const res = await request(port, { method: 'POST', path: '/agent/browser/action', token, body: {} });
-    assert.equal(res.status, 400);
-    assert.equal(res.json.ok, false);
-  } finally {
-    await server.stop();
-  }
-});
-
-test('POST /agent/browser/action surfaces a remote failure as a 400', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port, token } = await server.start();
-  try {
-    const res = await request(port, { method: 'POST', path: '/agent/browser/action', token, body: { action: 'boom' } });
-    assert.equal(res.status, 400);
-    assert.equal(res.json.ok, false);
-  } finally {
-    await server.stop();
-  }
-});
-
-test('GET /agent/browser/dom returns a text snapshot', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port, token } = await server.start();
-  try {
-    const res = await request(port, { path: '/agent/browser/dom', token });
-    assert.equal(res.status, 200);
-    assert.equal(res.json.text, 'hello');
-  } finally {
-    await server.stop();
-  }
-});
-
-test('unknown route is a 404', async () => {
-  const remote = makeFakeRemote();
-  const server = createBrowserAgentServer(remote);
-  const { port, token } = await server.start();
-  try {
-    const res = await request(port, { path: '/agent/browser/nope', token });
-    assert.equal(res.status, 404);
-  } finally {
-    await server.stop();
-  }
-});
-
-test('SM_DEV=1 writes to a dev-suffixed path, never the production browser-agent-api.json', async () => {
-  const devPath = path.join(path.dirname(TOKEN_PATH), 'browser-agent-api.dev.json');
-  const prevMtime = fs.existsSync(TOKEN_PATH) ? fs.statSync(TOKEN_PATH).mtimeMs : null;
-  const prevEnv = process.env.SM_DEV;
-  const remote = makeFakeRemote();
-  let server;
-  try {
-    process.env.SM_DEV = '1';
-    server = createBrowserAgentServer(remote);
-    const { port, token } = await server.start();
-    assert.equal(resolveTokenPath(), devPath);
-    const parsed = JSON.parse(fs.readFileSync(devPath, 'utf8'));
-    assert.equal(parsed.port, port);
-    assert.equal(parsed.token, token);
-    if (prevMtime !== null) {
-      assert.equal(fs.statSync(TOKEN_PATH).mtimeMs, prevMtime);
-    } else {
-      assert.equal(fs.existsSync(TOKEN_PATH), false);
-    }
-  } finally {
-    if (server) await server.stop();
-    if (prevEnv === undefined) delete process.env.SM_DEV; else process.env.SM_DEV = prevEnv;
-    fs.rmSync(devPath, { force: true });
-  }
-});
-
-test('with neither SM_DEV nor SM_E2E set, writes to the original browser-agent-api.json path', async () => {
-  const prevDev = process.env.SM_DEV;
-  const prevE2e = process.env.SM_E2E;
-  const remote = makeFakeRemote();
-  let server;
-  try {
-    delete process.env.SM_DEV;
-    delete process.env.SM_E2E;
-    assert.equal(resolveTokenPath(), TOKEN_PATH);
-    server = createBrowserAgentServer(remote);
-    const { port, token } = await server.start();
-    const parsed = JSON.parse(fs.readFileSync(TOKEN_PATH, 'utf8'));
-    assert.equal(parsed.port, port);
-    assert.equal(parsed.token, token);
-  } finally {
-    if (server) await server.stop();
-    if (prevDev === undefined) delete process.env.SM_DEV; else process.env.SM_DEV = prevDev;
-    if (prevE2e === undefined) delete process.env.SM_E2E; else process.env.SM_E2E = prevE2e;
-  }
-});