gm-copilot-cli 2.0.211 → 2.0.215

package/copilot-profile.md

@@ -1,6 +1,6 @@
 ---
 name: gm
-version: 2.0.211
+version: 2.0.215
 description: State machine agent with hooks, skills, and automated git enforcement
 author: AnEntrypoint
 repository: https://github.com/AnEntrypoint/gm-copilot-cli

package/hooks/pre-tool-use-hook.js

@@ -241,7 +241,7 @@ const run = () => {
         const rawLang = (execMatch[1] || '').toLowerCase();
         const code = execMatch[2];
         if (/^\s*agent-browser\s/.test(code)) {
-          return deny(`Do not call agent-browser via exec:bash. Use exec:agent-browser instead:\n\nexec:agent-browser\n<plain JS here>\n\nThe code is piped directly to the browser eval. No base64, no flags, no shell wrapping.`);
+          return deny(`Do not call agent-browser via exec:bash. Use exec:agent-browser instead:\n\nexec:agent-browser\nopen http://example.com\n\nMultiple commands in one block:\n\nexec:agent-browser\nopen http://localhost:3001\nwait 2000\nsnapshot -i\n\nFor JS eval (DOM inspection, custom logic):\n\nexec:agent-browser\ndocument.title\n\nCLI commands (open, click, screenshot, snapshot, wait, console, tab, etc.) run directly.\nAnything that is not a CLI command goes through eval --stdin.\nClose tabs when done: exec:agent-browser\\nclose`);
         }
         const cwd = tool_input?.cwd;
 
@@ -364,11 +364,90 @@ const run = () => {
             const wrapped = `const __result = await (async () => {\n${safeCode}\n})();\nif (__result !== undefined) { if (typeof __result === 'object') { console.log(JSON.stringify(__result, null, 2)); } else { console.log(__result); } }`;
             result = runWithFile(lang || 'nodejs', wrapped);
           } else if (lang === 'agent-browser') {
-            const abBin = localBin('agent-browser');
-            if (fs.existsSync(abBin)) {
-              result = spawnDirect(abBin, ['eval', '--stdin'], safeCode);
+            const abBin = fs.existsSync(localBin('agent-browser')) ? localBin('agent-browser') : 'agent-browser';
+            const AB_CMDS = new Set(['open','goto','navigate','close','quit','exit','back','forward','reload','click','dblclick','type','fill','press','check','uncheck','select','drag','upload','hover','focus','scroll','scrollintoview','wait','screenshot','pdf','snapshot','get','is','find','eval','connect','tab','frame','dialog','state','session','network','cookies','storage','set','trace','profiler','record','console','errors','highlight','inspect','diff','keyboard','mouse','install','upgrade','confirm','deny','auth','device','window']);
+            const AB_GLOBAL_FLAGS = new Set(['--cdp','--headed','--headless','--session','--session-name','--auto-connect','--profile','--allow-file-access','--color-scheme','-p','--platform','--device']);
+            const AB_GLOBAL_FLAGS_WITH_VALUE = new Set(['--cdp','--session','--session-name','--profile','--color-scheme','-p','--platform','--device']);
+            function loadAbProfile(dir) {
+              if (!dir) return [];
+              try {
+                const cfg = JSON.parse(fs.readFileSync(path.join(dir, '.agent-browser.json'), 'utf8'));
+                const flags = [];
+                if (cfg.headed) flags.push('--headed');
+                if (cfg.headless) flags.push('--headless');
+                if (cfg.profile) flags.push('--profile', cfg.profile);
+                if (cfg.cdp) flags.push('--cdp', String(cfg.cdp));
+                if (cfg.platform || cfg.p) flags.push('-p', cfg.platform || cfg.p);
+                if (cfg.device) flags.push('--device', cfg.device);
+                if (cfg['allow-file-access']) flags.push('--allow-file-access');
+                if (cfg['color-scheme']) flags.push('--color-scheme', cfg['color-scheme']);
+                return flags;
+              } catch { return []; }
+            }
+            const abProfileFlags = loadAbProfile(projectDir || cwd || process.cwd());
+            const AB_SESSION_STATE = path.join(os.tmpdir(), 'gm-ab-sessions.json');
+            function readAbSessions() { try { return JSON.parse(fs.readFileSync(AB_SESSION_STATE, 'utf8')); } catch { return {}; } }
+            function writeAbSessions(s) { try { fs.writeFileSync(AB_SESSION_STATE, JSON.stringify(s)); } catch {} }
+            function parseAbLine(line) {
+              const tokens = line.match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g) || [];
+              const globalArgs = [], rest = [];
+              let i = 0;
+              while (i < tokens.length) {
+                if (AB_GLOBAL_FLAGS.has(tokens[i])) {
+                  globalArgs.push(tokens[i]);
+                  if (AB_GLOBAL_FLAGS_WITH_VALUE.has(tokens[i]) && i + 1 < tokens.length && !tokens[i+1].startsWith('--')) {
+                    globalArgs.push(tokens[++i]);
+                  }
+                  i++;
+                } else { rest.push(...tokens.slice(i)); break; }
+              }
+              return { globalArgs, rest };
+            }
+            const firstLineParsed = parseAbLine(safeCode.trim().split('\n')[0].trim());
+            const firstWord = (firstLineParsed.rest[0] || '').toLowerCase();
+            const sessionName = (() => { const si = firstLineParsed.globalArgs.indexOf('--session'); return si >= 0 ? firstLineParsed.globalArgs[si+1] : 'default'; })();
+            const isOpen = ['open','goto','navigate'].includes(firstWord);
+            const isClose = ['close','quit','exit'].includes(firstWord);
+            const sessions = readAbSessions();
+            if (isOpen) sessions[sessionName] = { url: (firstLineParsed.rest[1] || '?'), ts: Date.now() };
+            if (isClose) delete sessions[sessionName];
+            writeAbSessions(sessions);
+            const openSessions = Object.entries(sessions);
+            function mergeProfileFlags(userGlobalArgs) {
+              const userFlagSet = new Set(userGlobalArgs.filter(f => f.startsWith('-')));
+              const filtered = [];
+              for (let i = 0; i < abProfileFlags.length; i++) {
+                const f = abProfileFlags[i];
+                if (f.startsWith('-') && userFlagSet.has(f)) { if (AB_GLOBAL_FLAGS_WITH_VALUE.has(f)) i++; continue; }
+                filtered.push(f);
+              }
+              return [...filtered, ...userGlobalArgs];
+            }
+            if (AB_CMDS.has(firstWord)) {
+              const lines = safeCode.split('\n').map(l => l.trim()).filter(Boolean);
+              if (lines.length === 1) {
+                const { globalArgs, rest } = parseAbLine(lines[0]);
+                result = spawnDirect(abBin, [...mergeProfileFlags(globalArgs), ...rest]);
+              } else {
+                const hasClose = lines.some(l => { const w = (parseAbLine(l).rest[0]||'').toLowerCase(); return ['close','quit','exit'].includes(w); });
+                const cmds = lines.map(l => {
+                  const { globalArgs, rest } = parseAbLine(l);
+                  const w = (rest[0]||'').toLowerCase();
+                  if (['open','goto','navigate'].includes(w)) sessions[sessionName] = { url: rest[1]||'?', ts: Date.now() };
+                  if (['close','quit','exit'].includes(w)) delete sessions[sessionName];
+                  if (!AB_CMDS.has(w)) return [...mergeProfileFlags(globalArgs), 'eval', l.trim()];
+                  return [...mergeProfileFlags(globalArgs), ...rest];
+                });
+                writeAbSessions(sessions);
+                result = spawnDirect(abBin, ['batch'], JSON.stringify(cmds));
+                if (!hasClose && openSessions.length > 0) result += `\n\n[tab] Browser session "${sessionName}" still open. Close when done:\n  exec:agent-browser\n  close`;
+              }
             } else {
-              result = spawnDirect('agent-browser', ['eval', '--stdin'], safeCode);
+              result = spawnDirect(abBin, [...abProfileFlags, 'eval', '--stdin'], safeCode);
+            }
+            if (openSessions.length > 1) {
+              const stale = openSessions.filter(([n]) => n !== sessionName).map(([n,v]) => `  "${n}" → ${v.url} (${Math.round((Date.now()-v.ts)/60000)}min ago)`).join('\n');
+              result = (result || '') + `\n\n[tab] ${openSessions.length - 1} other session(s) still open:\n${stale}\n  Close with: exec:agent-browser\\nclose  (or --session <name> close)`;
             }
           } else {
             result = runWithFile(lang, safeCode);
@@ -384,7 +463,7 @@ const run = () => {
         try { helpText = '\n\n' + execSync(`"${localBin('gm-exec')}" --help`, { timeout: 10000, windowsHide: true }).toString().trim(); } catch (e) {
           try { helpText = '\n\n' + execSync('bun x gm-exec --help', { timeout: 10000, windowsHide: true }).toString().trim(); } catch {}
         }
-        return deny(`Bash is restricted to exec:<lang> and git.\n\nexec:<lang> syntax (lang auto-detected if omitted):\n  exec:nodejs / exec:python / exec:bash / exec:typescript\n  exec:go / exec:rust / exec:java / exec:c / exec:cpp\n  exec:cmd            ← runs cmd.exe /c on Windows\n  exec:agent-browser  ← plain JS piped to browser eval (NO base64)\n  exec               ← auto-detects language\n\nTask management shortcuts (body = args):\n  exec:status\n  <task_id>\n\n  exec:sleep\n  <task_id> [seconds] [--next-output]\n\n  exec:type\n  <task_id>\n  <input to send to stdin>\n\n  exec:close\n  <task_id>\n\n  exec:runner\n  start|stop|status\n\nCode search shortcut:\n  exec:codesearch\n  <natural language query>\n\nNEVER encode agent-browser code as base64 — pass plain JS directly.\n\nbun x gm-exec${helpText}\n\nAll other Bash commands are blocked.`);
+        return deny(`Bash is restricted to exec:<lang> and git.\n\nexec:<lang> syntax (lang auto-detected if omitted):\n  exec:nodejs / exec:python / exec:bash / exec:typescript\n  exec:go / exec:rust / exec:java / exec:c / exec:cpp\n  exec:cmd            ← runs cmd.exe /c on Windows\n  exec:agent-browser  ← browser CLI (open, click, snapshot, wait, tab, console...)\n                        OR JS eval when body is not a CLI command\n  exec               ← auto-detects language\n\nexec:agent-browser examples:\n  open http://localhost:3001     ← navigate\n  snapshot -i                    ← get element refs\n  wait 2000                      ← wait ms\n  console                        ← read browser console\n  close                          ← ALWAYS close when done\n  document.title                 ← JS eval (not a CLI command)\n\nMultiple CLI commands in one block run as batch:\n  exec:agent-browser\n  open http://localhost:3001\n  wait 2000\n  snapshot -i\n\nTask management shortcuts (body = args):\n  exec:status\n  <task_id>\n\n  exec:sleep\n  <task_id> [seconds] [--next-output]\n\n  exec:type\n  <task_id>\n  <input to send to stdin>\n\n  exec:close\n  <task_id>\n\n  exec:runner\n  start|stop|status\n\nCode search shortcut:\n  exec:codesearch\n  <natural language query>\n\nbun x gm-exec${helpText}\n\nAll other Bash commands are blocked.`);
       }
     }
 

package/index.html

@@ -18,7 +18,7 @@
 <script type="module">
 import { createElement as h, applyDiff, Fragment } from "webjsx";
 const PLATFORM_NAME="Copilot CLI",PLATFORM_TYPE="CLI Tool",PLATFORM_TYPE_COLOR="#3b82f6";
-const DESCRIPTION="State machine agent with hooks, skills, and automated git enforcement",VERSION="2.0.211";
+const DESCRIPTION="State machine agent with hooks, skills, and automated git enforcement",VERSION="2.0.215";
 const GITHUB_URL="https://github.com/AnEntrypoint/gm-copilot-cli",BADGE_LABEL="copilot-cli";
 const FEATURES=[{"title":"State Machine","desc":"Immutable PLAN→EXECUTE→EMIT→VERIFY→COMPLETE phases with full mutable tracking"},{"title":"Semantic Search","desc":"Natural language codebase exploration via codesearch skill — no grep needed"},{"title":"Hooks","desc":"Pre-tool, session-start, prompt-submit, and stop hooks for full lifecycle control"},{"title":"Agents","desc":"gm, codesearch, and websearch agents pre-configured and ready to use"},{"title":"MCP Integration","desc":"Model Context Protocol server support built in"},{"title":"Auto-Recovery","desc":"Supervisor hierarchy ensures the system never crashes"}],INSTALL_STEPS=[{"desc":"Install via GitHub CLI","cmd":"gh extension install AnEntrypoint/gm-copilot-cli"},{"desc":"Restart your terminal — activates automatically"}];
 const CURRENT_PLATFORM="gm-copilot-cli";

package/manifest.yml

@@ -1,5 +1,5 @@
 name: gm
-version: 2.0.211
+version: 2.0.215
 description: State machine agent with hooks, skills, and automated git enforcement
 author: AnEntrypoint
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-copilot-cli",
-  "version": "2.0.211",
+  "version": "2.0.215",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/skills/agent-browser/SKILL.md

@@ -8,11 +8,25 @@ allowed-tools: agent-browser, Bash(exec:agent-browser*)
 
 ## Two Pathways
 
-**Ordinary browser control** — call the `agent-browser` tool directly. This covers all standard browser tasks: navigating, clicking, filling forms, taking screenshots, extracting text. The tool accepts CLI-style commands as its input.
+**Page control** — use the `agent-browser` tool directly for all browser interaction: navigating, clicking, filling forms, taking screenshots, reading snapshots. This is the primary pathway for driving the browser.
 
-**JavaScript eval** — use `exec:agent-browser` via Bash when you need to run arbitrary JavaScript in the page context. The code body is piped directly to `agent-browser eval --stdin`. Use this for DOM inspection, custom extraction logic, or anything the CLI commands don't cover.
+**Code execution** — use `exec:agent-browser` via Bash when you need to run JavaScript in the page context. The body is piped to `eval --stdin`. Use this for DOM inspection, custom extraction logic, or anything requiring programmatic page access.
 
-Use the ordinary pathway by default. Switch to eval only when you need JavaScript access to the page.
+```
+exec:agent-browser
+document.title
+```
+
+Multi-line `exec:agent-browser` blocks where lines are recognized CLI commands run as a batch instead of eval — useful for sequencing page control steps when the `agent-browser` tool isn't available:
+
+```
+exec:agent-browser
+open http://localhost:3001
+wait 2000
+snapshot -i
+```
+
+**Always close tabs when done**: every `open` is tracked. Use `exec:agent-browser\nclose` (or `--session <name> close`) when finished. Leaving sessions open accumulates stale tabs — the hook will warn you when other sessions are still open.
 
 ## Core Workflow
 

package/tools.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.211",
+  "version": "2.0.215",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "tools": [
     {