machine-bridge-mcp 0.13.0 → 0.15.0

package/src/local/browser-command.mjs

@@ -0,0 +1,126 @@
+const NAVIGATION_ACTIONS = new Set(["navigate", "reload", "back", "forward"]);
+const PAGE_ACTIONS = new Set([
+  "click", "double_click", "hover", "fill", "type_text", "select", "check", "uncheck",
+  "focus", "press", "submit", "scroll_into_view",
+]);
+const FORM_ACTIONS = new Set(["fill", "select", "check", "uncheck", "click"]);
+const WAIT_STATES = new Set(["attached", "detached", "visible", "hidden", "enabled", "editable", "checked", "unchecked"]);
+const LOAD_STATES = new Set(["domcontentloaded", "complete"]);
+const INPUT_MODES = new Set(["auto", "trusted", "dom"]);
+
+export function normalizeBrowserAction(value) {
+  const action = String(value || "").trim();
+  if (!NAVIGATION_ACTIONS.has(action) && !PAGE_ACTIONS.has(action)) throw new Error("unsupported browser action");
+  return action;
+}
+
+export function normalizeFormAction(value) {
+  const action = String(value || "").trim();
+  if (!FORM_ACTIONS.has(action)) throw new Error("unsupported form field action");
+  return action;
+}
+
+export function normalizeBrowserSelector(value, action = "") {
+  if (NAVIGATION_ACTIONS.has(action)) return null;
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("selector must be an object");
+  const allowed = new Set(["ref", "css", "id", "name", "label", "text", "role", "placeholder", "index"]);
+  for (const key of Object.keys(value)) if (!allowed.has(key)) throw new Error(`unknown selector field: ${key}`);
+  const output = {};
+  if (value.ref !== undefined) {
+    const ref = optionalString(value.ref, "selector.ref", 100);
+    if (ref) output.ref = ref;
+  }
+  for (const key of ["css", "id", "name", "label", "text", "role", "placeholder"]) {
+    if (value[key] === undefined) continue;
+    const normalized = optionalString(value[key], `selector.${key}`, 2000);
+    if (normalized) output[key] = normalized;
+  }
+  if (value.index !== undefined) output.index = optionalInteger(value.index, "selector.index", 0, 10000);
+  if (!Object.keys(output).length) throw new Error("selector requires at least one field");
+  if (output.ref && Object.keys(output).length !== 1) throw new Error("selector.ref cannot be combined with other selector fields");
+  return output;
+}
+
+export function normalizeInputMode(value) {
+  if (value === undefined || value === null || value === "") return "auto";
+  const mode = String(value);
+  if (!INPUT_MODES.has(mode)) throw new Error("input_mode must be auto, trusted, or dom");
+  return mode;
+}
+
+export function normalizeNavigationWait(value) {
+  if (value === undefined || value === null || value === "") return "none";
+  const wait = String(value);
+  if (!["none", ...LOAD_STATES].includes(wait)) throw new Error("wait_for must be none, domcontentloaded, or complete");
+  return wait;
+}
+
+export function normalizeBrowserWait(args = {}) {
+  const selector = args.selector === undefined ? null : normalizeBrowserSelector(args.selector, "wait");
+  const state = args.state === undefined || args.state === null || args.state === ""
+    ? (selector ? "visible" : "")
+    : String(args.state);
+  if (state && !WAIT_STATES.has(state)) throw new Error("state is not a supported browser wait state");
+  if (state && !selector) throw new Error("state requires selector");
+  const text = optionalString(args.text, "text", 4000);
+  const urlContains = optionalString(args.url_contains, "url_contains", 32768);
+  const loadState = args.load_state === undefined || args.load_state === null || args.load_state === "" ? "" : String(args.load_state);
+  if (loadState && !LOAD_STATES.has(loadState)) throw new Error("load_state must be domcontentloaded or complete");
+  if (!selector && !text && !urlContains && !loadState) throw new Error("browser_wait requires selector, text, url_contains, or load_state");
+  const timeoutSeconds = clampInt(args.timeout_seconds, 30, 1, 120);
+  return {
+    tabId: optionalInteger(args.tab_id, "tab_id", 1, Number.MAX_SAFE_INTEGER),
+    frameId: optionalInteger(args.frame_id, "frame_id", 0, Number.MAX_SAFE_INTEGER),
+    selector,
+    state,
+    text,
+    urlContains,
+    loadState,
+    timeoutMs: timeoutSeconds * 1000,
+  };
+}
+
+export function normalizeTabCommand(args = {}) {
+  const action = String(args.action || "").trim();
+  if (!["new", "activate", "close"].includes(action)) throw new Error("browser tab action must be new, activate, or close");
+  const tabId = optionalInteger(args.tab_id, "tab_id", 1, Number.MAX_SAFE_INTEGER);
+  const rawUrl = optionalString(args.url, "url", 32768);
+  if (["activate", "close"].includes(action) && !tabId) throw new Error(`${action} requires tab_id`);
+  if (action !== "new" && rawUrl) throw new Error("url is only valid for new tabs");
+  return {
+    action,
+    tabId,
+    url: rawUrl ? validateNavigationUrl(rawUrl) : "",
+    active: args.active !== false,
+  };
+}
+
+export function validateNavigationUrl(value) {
+  if (!value) throw new Error("navigate requires url");
+  let parsed;
+  try { parsed = new URL(value); } catch { throw new Error("url must be an absolute URL"); }
+  if (!["http:", "https:", "file:"].includes(parsed.protocol)) throw new Error("url protocol must be http, https, or file");
+  return parsed.href;
+}
+
+export function optionalString(value, label, maxLength) {
+  if (value === undefined || value === null || value === "") return "";
+  if (typeof value !== "string" || value.includes("\0") || value.length > maxLength) {
+    throw new Error(`${label} must be a string of at most ${maxLength} characters without NUL bytes`);
+  }
+  return value;
+}
+
+export function optionalInteger(value, label, min, max) {
+  if (value === undefined || value === null || value === "") return null;
+  const number = Number(value);
+  if (!Number.isInteger(number) || number < min || number > max) throw new Error(`${label} must be an integer from ${min} to ${max}`);
+  return number;
+}
+
+export function clampInt(value, fallback, min, max) {
+  if (value === undefined || value === null || value === "") return fallback;
+  const number = Number(value);
+  if (!Number.isInteger(number) || number < min || number > max) throw new Error(`expected an integer from ${min} to ${max}`);
+  return number;
+}

package/src/local/cli.mjs

@@ -10,7 +10,7 @@ import { runStdioServer } from "./stdio.mjs";
 import { assertCanonicalFullPolicy, DEFAULT_POLICY_PROFILE, DEFAULT_POLICY_REVISION, POLICY_PROFILES, normalizePolicy, policyProfile, toolsForPolicy } from "./tools.mjs";
 import { classifyOperationalError, createLogger, normalizeLogLevel, sanitizeLogText } from "./log.mjs";
 import { activeManagedJobs, inspectResourceFile, loadManagedJobPlan, ManagedJobManager, publicResourceRegistry, validateResourceName } from "./managed-jobs.mjs";
-import { runWrangler } from "./shell.mjs";
+import { run, runWrangler } from "./shell.mjs";
 import { generateRegisteredSshKey } from "./resource-operations.mjs";
 import { runFullAccessTest } from "./full-access-test.mjs";
 import { readBoundedRegularFileSync } from "./secure-file.mjs";
@@ -753,13 +753,26 @@ async function browserCommand(args) {
     connected: health?.broker === "machine-bridge-browser" && health?.connected === true,
     extension_path: extensionPath,
     pairing_url: pairingUrl,
+    expected_extension_version: typeof health?.expected_extension_version === "string" ? health.expected_extension_version : "",
+    extension_protocol: Number.isInteger(health?.extension_protocol) ? health.extension_protocol : null,
+    extension_version: typeof health?.extension_version === "string" ? health.extension_version : "",
+    extension_capabilities: Array.isArray(health?.extension_capabilities) ? health.extension_capabilities : [],
+    extension_reload_required: health?.extension_reload_required === true,
+    controls_existing_profile: health?.controls_existing_profile === true,
+    controls_extension_profile: health?.controls_extension_profile === true,
+    machine_bridge_launches_browser: health?.machine_bridge_launches_browser === true,
+    profile_identity_verifiable: health?.profile_identity_verifiable === true,
     token_exposed: false,
   };
   if (action === "status") {
     if (args.json) console.log(JSON.stringify(result, null, 2));
     else {
       console.log(`Browser bridge: ${result.running ? "running" : "not reachable"}`);
-      console.log(`Extension: ${result.connected ? "connected" : "not connected"}`);
+      console.log(`Extension: ${result.connected ? "connected" : result.extension_reload_required ? "reload required" : "not connected"}`);
+      if (result.expected_extension_version) console.log(`Expected extension build: ${result.expected_extension_version}`);
+      if (result.extension_version || result.extension_protocol) console.log(`Connected extension build: ${result.extension_version || "unknown"} (protocol ${result.extension_protocol ?? "unknown"})`);
+      console.log(`Browser profile: ${result.controls_extension_profile ? "the Chromium profile where this extension is installed" : "unknown"}`);
+      if (result.controls_extension_profile) console.log(`Profile provenance: Machine Bridge did not launch the browser; daily-vs-isolated profile identity is not machine-verifiable.`);
       console.log(`Extension path: ${extensionPath}`);
     }
     return;
@@ -769,7 +782,8 @@ async function browserCommand(args) {
   if (args.json) console.log(JSON.stringify({ ...result, pairing_page_opened: true }, null, 2));
   else {
     console.log(`Extension path: ${extensionPath}`);
-    console.log("Load this directory once from the Chromium extensions page with Developer mode enabled.");
+    console.log("Load this directory in the Chromium profile you use every day; Machine Bridge does not install it into Playwright or a separate automation profile.");
+    console.log("Enable Developer mode, choose Load unpacked, and reload the extension after each Machine Bridge upgrade.");
     console.log(`Pairing page opened: ${pairingUrl}`);
   }
 }
@@ -1124,6 +1138,10 @@ async function doctorCommand(args) {
   const workspace = await chooseWorkspace(args, { promptOnFirstRun: false, save: false, allowPositional: true });
   const checks = [];
   checks.push({ name: "node", ok: isSupportedNodeVersion(), detail: process.version });
+  const npmCommand = npmVersionCommand();
+  const npm = await run(npmCommand.file, npmCommand.args, { capture: true, allowFailure: true, timeoutMs: 10_000 });
+  const npmDetail = sanitizeLines(npm.stdout || npm.stderr);
+  checks.push({ name: "npm", ok: npm.code === 0 && isSupportedNpmVersion(npmDetail), detail: npmDetail || "unavailable" });
   const wrangler = await runWrangler(["--version"], { capture: true, allowFailure: true });
   checks.push({ name: "wrangler", ok: wrangler.code === 0, detail: (wrangler.stdout || wrangler.stderr).trim() });
   const whoami = await runWrangler(["whoami"], { capture: true, allowFailure: true });
@@ -1557,10 +1575,22 @@ function validateWorkerName(value) {
 }
 
 export function isSupportedNodeVersion(version = process.versions.node) {
-  const major = Number(String(version || "").split(".")[0]);
+  const major = Number(String(version || "").replace(/^v/, "").split(".")[0]);
   return Number.isInteger(major) && major >= 26;
 }
 
+export function isSupportedNpmVersion(version) {
+  const major = Number(String(version || "").trim().replace(/^v/, "").split(".")[0]);
+  return Number.isInteger(major) && major >= 12;
+}
+
+export function npmVersionCommand(platform = process.platform, comspec = process.env.ComSpec) {
+  if (platform === "win32") {
+    return { file: comspec || "cmd.exe", args: ["/d", "/s", "/c", "npm --version"] };
+  }
+  return { file: "npm", args: ["--version"] };
+}
+
 function assertNodeVersion() {
   if (!isSupportedNodeVersion()) throw new Error(`Node.js >=26 is required; current ${process.version}`);
 }
@@ -1568,8 +1598,10 @@ function assertNodeVersion() {
 function usage() {
   console.log(`machine-bridge-mcp
 
+Installation (run from a package-free temporary directory; Node.js >=26):
+  npx --yes npm@12.0.1 install --global --omit=optional --allow-scripts=esbuild,workerd,sharp,fsevents machine-bridge-mcp@latest && machine-mcp
+
 Usage:
-  npm install -g --omit=optional --allow-scripts=esbuild,workerd,sharp,fsevents machine-bridge-mcp@latest && machine-mcp
   npx machine-bridge-mcp@latest                  # no global install; autostart may rely on npm cache
   ./mbm                                          # from source checkout
   .\\mbm.cmd                                      # from source checkout on Windows cmd

package/src/local/runtime.mjs

@@ -46,6 +46,8 @@ const RUNTIME_TOOL_HANDLERS = Object.freeze({
   browser_status: (runtime, _args, context) => runtime.browserBridgeManager.status(context),
   pair_browser_extension: (runtime, args, context) => runtime.browserBridgeManager.pair(args, context),
   browser_list_tabs: (runtime, args, context) => runtime.browserBridgeManager.listTabs(args, context),
+  browser_manage_tabs: (runtime, args, context) => runtime.browserBridgeManager.manageTabs(args, context),
+  browser_wait: (runtime, args, context) => runtime.browserBridgeManager.wait(args, context),
   browser_get_source: (runtime, args, context) => runtime.browserBridgeManager.getSource(args, context),
   browser_inspect_page: (runtime, args, context) => runtime.browserBridgeManager.inspectPage(args, context),
   browser_action: (runtime, args, context) => runtime.browserBridgeManager.act(args, context),

package/src/local/service.mjs

@@ -465,11 +465,15 @@ async function statusWindowsTask() {
 }
 
 function windowsCommand(spec) {
-  return [spec.node, ...daemonArgs(spec)].map(winQuote).join(" ");
+  return [spec.node, ...daemonArgs(spec)].map(windowsCommandLineArgument).join(" ");
 }
 
-function winQuote(value) {
-  return `"${String(value).replaceAll('"', '\\"')}"`;
+export function windowsCommandLineArgument(value) {
+  const text = String(value);
+  if (text.includes("\0")) throw new Error("Windows command-line argument contains a NUL byte");
+  const escapedQuotes = text.replace(/(\\*)"/g, (_match, slashes) => `${slashes}${slashes}\\"`);
+  const escapedTrailingSlashes = escapedQuotes.replace(/(\\+)$/, (slashes) => `${slashes}${slashes}`);
+  return `"${escapedTrailingSlashes}"`;
 }
 
 export function systemdQuote(value) {

package/src/shared/tool-catalog.json

@@ -318,7 +318,7 @@
   {
     "name": "browser_status",
     "title": "Browser bridge status",
-    "description": "Start or inspect the loopback browser-extension bridge used to automate the user's existing Chromium profile, windows, tabs, and login state.",
+    "description": "Start or inspect the loopback bridge for the Chromium profile where the extension is installed. Machine Bridge does not launch Playwright or another browser process, but cannot infer whether that profile is the user's daily or isolated profile; status reports authenticated extension version, protocol, capabilities, and reload state.",
     "availability": "full",
     "annotations": {
       "readOnlyHint": false,
@@ -334,7 +334,7 @@
   {
     "name": "pair_browser_extension",
     "title": "Pair browser extension",
-    "description": "Open the local pairing page and return the packaged unpacked-extension path for one-time browser installation and pairing.",
+    "description": "Open the local pairing page and return the packaged unpacked-extension path for installation in the user's intended Chromium profile. Pairing is persisted only after an acknowledged version/capability handshake.",
     "availability": "full",
     "annotations": {
       "readOnlyHint": false,
@@ -385,10 +385,59 @@
       }
     }
   },
+  {
+    "name": "browser_manage_tabs",
+    "title": "Manage browser tabs",
+    "description": "Create, activate, or close tabs in the paired existing browser profile.",
+    "availability": "full",
+    "annotations": {
+      "readOnlyHint": false,
+      "destructiveHint": true,
+      "idempotentHint": false,
+      "openWorldHint": true
+    },
+    "inputSchema": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "action": {
+          "type": "string",
+          "enum": [
+            "new",
+            "activate",
+            "close"
+          ]
+        },
+        "tab_id": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Required for activate and close."
+        },
+        "url": {
+          "type": "string",
+          "maxLength": 32768,
+          "description": "Optional absolute http, https, or file URL for a new tab."
+        },
+        "active": {
+          "type": "boolean",
+          "default": true
+        },
+        "timeout_seconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 120,
+          "default": 30
+        }
+      },
+      "required": [
+        "action"
+      ]
+    }
+  },
   {
     "name": "browser_get_source",
     "title": "Read browser page source",
-    "description": "Read bounded serialized current DOM HTML from the active or selected browser tab and optionally from all accessible frames.",
+    "description": "Read bounded serialized current DOM HTML from the active or selected browser tab. max_bytes is one aggregate budget across at most 64 accessible frames, with explicit frame, node, and byte truncation metadata.",
     "availability": "full",
     "annotations": {
       "readOnlyHint": true,
@@ -430,7 +479,7 @@
   {
     "name": "browser_inspect_page",
     "title": "Inspect browser page",
-    "description": "Inspect bounded interactive DOM metadata across accessible frames for links, controls, form fields, accessible names, labels, and roles.",
+    "description": "Inspect a bounded snapshot-version-2 semantic representation across at most 64 accessible frames, with one aggregate element budget, bounded reusable refs, actionability state, bounded page-controlled metadata, and explicit scan/frame truncation.",
     "availability": "full",
     "annotations": {
       "readOnlyHint": true,
@@ -473,10 +522,115 @@
       }
     }
   },
+  {
+    "name": "browser_wait",
+    "title": "Wait for browser state",
+    "description": "Wait until all supplied URL, load, text, and element-state conditions are satisfied in an existing browser tab.",
+    "availability": "full",
+    "annotations": {
+      "readOnlyHint": true,
+      "destructiveHint": false,
+      "idempotentHint": true,
+      "openWorldHint": true
+    },
+    "inputSchema": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "tab_id": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "frame_id": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "selector": {
+          "type": "object",
+          "properties": {
+            "ref": {
+              "type": "string",
+              "maxLength": 100,
+              "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+            },
+            "css": {
+              "type": "string",
+              "maxLength": 2000
+            },
+            "id": {
+              "type": "string",
+              "maxLength": 2000
+            },
+            "name": {
+              "type": "string",
+              "maxLength": 2000
+            },
+            "label": {
+              "type": "string",
+              "maxLength": 2000
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2000
+            },
+            "role": {
+              "type": "string",
+              "maxLength": 2000
+            },
+            "placeholder": {
+              "type": "string",
+              "maxLength": 2000
+            },
+            "index": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 10000
+            }
+          },
+          "additionalProperties": false
+        },
+        "state": {
+          "type": "string",
+          "enum": [
+            "attached",
+            "detached",
+            "visible",
+            "hidden",
+            "enabled",
+            "editable",
+            "checked",
+            "unchecked"
+          ],
+          "description": "Element state to wait for. Defaults to visible only when selector is supplied."
+        },
+        "text": {
+          "type": "string",
+          "maxLength": 4000
+        },
+        "url_contains": {
+          "type": "string",
+          "maxLength": 32768
+        },
+        "load_state": {
+          "type": "string",
+          "enum": [
+            "domcontentloaded",
+            "complete"
+          ]
+        },
+        "timeout_seconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 120,
+          "default": 30
+        }
+      }
+    }
+  },
   {
     "name": "browser_action",
     "title": "Operate browser page",
-    "description": "Perform one structured navigation or DOM action in the user's existing browser tab without accepting arbitrary JavaScript.",
+    "description": "Perform one structured navigation or page action in the user's existing browser tab without arbitrary JavaScript. Automatic trusted-input fallback occurs only before any DevTools Input command starts; ambiguous post-dispatch failures require inspection before retry.",
     "availability": "full",
     "annotations": {
       "readOnlyHint": false,
@@ -506,12 +660,21 @@
             "submit",
             "reload",
             "back",
-            "forward"
+            "forward",
+            "double_click",
+            "hover",
+            "type_text",
+            "scroll_into_view"
           ]
         },
         "selector": {
           "type": "object",
           "properties": {
+            "ref": {
+              "type": "string",
+              "maxLength": 100,
+              "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+            },
             "css": {
               "type": "string",
               "maxLength": 2000
@@ -582,6 +745,22 @@
         "frame_id": {
           "type": "integer",
           "minimum": 0
+        },
+        "input_mode": {
+          "type": "string",
+          "enum": [
+            "auto",
+            "trusted",
+            "dom"
+          ],
+          "default": "auto",
+          "description": "Use fixed DevTools Input commands when possible, require them, or use DOM events only."
+        },
+        "element_timeout_seconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 60,
+          "default": 10
         }
       },
       "required": [
@@ -592,7 +771,7 @@
   {
     "name": "browser_fill_form",
     "title": "Fill complex browser form",
-    "description": "Fill multiple fields and optionally submit a complex form in one structured browser transaction. Sensitive values can come from registered local resources and are not returned.",
+    "description": "Fill multiple fields and optionally submit a complex form. Sensitive values can come from registered local resources; errors identify possible earlier mutations without returning field values.",
     "availability": "full",
     "annotations": {
       "readOnlyHint": false,
@@ -618,6 +797,11 @@
               "selector": {
                 "type": "object",
                 "properties": {
+                  "ref": {
+                    "type": "string",
+                    "maxLength": 100,
+                    "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+                  },
                   "css": {
                     "type": "string",
                     "maxLength": 2000
@@ -691,6 +875,11 @@
         "submit_selector": {
           "type": "object",
           "properties": {
+            "ref": {
+              "type": "string",
+              "maxLength": 100,
+              "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+            },
             "css": {
               "type": "string",
               "maxLength": 2000
@@ -745,6 +934,12 @@
         "frame_id": {
           "type": "integer",
           "minimum": 0
+        },
+        "element_timeout_seconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 60,
+          "default": 10
         }
       },
       "required": [
@@ -755,7 +950,7 @@
   {
     "name": "browser_screenshot",
     "title": "Capture browser screenshot",
-    "description": "Capture the visible area of the active or selected tab from the paired existing browser profile and return it as MCP image content.",
+    "description": "Capture the visible area of the active or selected tab from the paired existing browser profile, restore the previous active tab when safe, avoid focusing another window, and return native MCP image content.",
     "availability": "full",
     "annotations": {
       "readOnlyHint": false,
@@ -815,6 +1010,11 @@
         "selector": {
           "type": "object",
           "properties": {
+            "ref": {
+              "type": "string",
+              "maxLength": 100,
+              "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+            },
             "css": {
               "type": "string",
               "maxLength": 2000
@@ -885,6 +1085,12 @@
         "frame_id": {
           "type": "integer",
           "minimum": 0
+        },
+        "element_timeout_seconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 60,
+          "default": 10
         }
       },
       "required": [

package/src/worker/index.ts

@@ -3,7 +3,7 @@ import toolCatalog from "../shared/tool-catalog.json";
 import serverMetadata from "../shared/server-metadata.json";
 
 const SERVER_NAME = String(serverMetadata.name);
-const SERVER_VERSION = "0.13.0";
+const SERVER_VERSION = "0.15.0";
 const MCP_PROTOCOL_VERSION = String(serverMetadata.protocolVersion);
 const MCP_SUPPORTED_PROTOCOL_VERSIONS = serverMetadata.supportedProtocolVersions.map((value) => String(value));
 const JSONRPC_VERSION = "2.0";
@@ -817,6 +817,7 @@ export class BridgeRoom extends DurableObject<BridgeEnv> {
       client.last_used_at = now;
 
       const code = randomToken("mcp_code");
+      const redirectLocation = authorizationRedirectLocation(redirectUri, code, state);
       store.codes[code] = {
         client_id: clientId,
         redirect_uri: redirectUri,
@@ -829,9 +830,7 @@ export class BridgeRoom extends DurableObject<BridgeEnv> {
       pruneRecordByExpiry(store.codes, MAX_OAUTH_CODES);
       await this.ctx.storage.put("oauth", store);
 
-      const params = new URLSearchParams({ code });
-      if (state) params.set("state", state);
-      return oauthRedirect(`${redirectUri}${redirectUri.includes("?") ? "&" : "?"}${params.toString()}`);
+      return oauthRedirect(redirectLocation);
     });
   }
 
@@ -996,11 +995,11 @@ function methodNotAllowed(allow: string): Response {
   });
 }
 
-function oauthRedirect(location: string): Response {
+function oauthRedirect(location: URL): Response {
   return new Response(null, {
-    status: 302,
+    status: 303,
     headers: {
-      location,
+      location: location.href,
       "cache-control": "no-store",
       "referrer-policy": "no-referrer",
       "x-content-type-options": "nosniff",
@@ -1008,6 +1007,13 @@ function oauthRedirect(location: string): Response {
   });
 }
 
+function authorizationRedirectLocation(redirectUri: string, code: string, state: string): URL {
+  const location = new URL(redirectUri);
+  location.searchParams.append("code", code);
+  if (state) location.searchParams.append("state", state);
+  return location;
+}
+
 function isFreshDaemonCandidate(connectedAt: string): boolean {
   const timestamp = Date.parse(connectedAt);
   if (!Number.isFinite(timestamp)) return false;
@@ -1187,7 +1193,7 @@ function daemonToolTimeoutMs(name: string, args: Record<string, unknown>): numbe
   const configurable = new Set([
     "exec_command", "run_process", "run_local_command", "open_local_application",
     "inspect_local_application", "operate_local_application", "browser_list_tabs",
-    "browser_get_source", "browser_inspect_page", "browser_action", "browser_fill_form",
+    "browser_manage_tabs", "browser_wait", "browser_get_source", "browser_inspect_page", "browser_action", "browser_fill_form",
     "browser_screenshot", "browser_upload_files",
   ]);
   if (!configurable.has(name)) return 60_000;