opendevbrowser 0.0.18 → 0.0.19

package/README.md

@@ -89,9 +89,9 @@ npm install -g opendevbrowser
 opendevbrowser --version
 ```
 
-### Pre-release Local Package (No npm publish required)
+### Local Package Validation
 
-Use this flow to validate first-run local package onboarding before npm publish.
+Use this flow to validate first-run onboarding from a source tarball without relying on the published registry package.
 
 ```bash
 cd <public-repo-root>
@@ -100,11 +100,13 @@ npm pack
 WORKDIR=$(mktemp -d /tmp/opendevbrowser-first-run-XXXXXX)
 cd "$WORKDIR"
 npm init -y
-npm install <public-repo-root>/opendevbrowser-0.0.18.tgz
+npm install <public-repo-root>/opendevbrowser-0.0.19.tgz
 npx --no-install opendevbrowser --help
 npx --no-install opendevbrowser help
 ```
 
+Published npm consumer proof is tracked separately in [docs/RELEASE_RUNBOOK.md](docs/RELEASE_RUNBOOK.md) through `scripts/registry-consumer-smoke.mjs`.
+
 See [docs/FIRST_RUN_ONBOARDING.md](docs/FIRST_RUN_ONBOARDING.md) for the full onboarding checklist, [docs/DEPENDENCIES.md](docs/DEPENDENCIES.md) for runtime inventory, and [docs/SURFACE_REFERENCE.md](docs/SURFACE_REFERENCE.md) for the live CLI and tool surface.
 
 Successful installs reconcile daemon auto-start on supported platforms so the relay is available on login. If the current CLI entrypoint lives under a transient temp-root path such as a first-run `/tmp` or `/private/tmp` workspace, OpenDevBrowser refuses to persist that path as auto-start. Rerun `opendevbrowser daemon install`, or `npx --no-install opendevbrowser daemon install` from a persistent local package install, from a stable install location if you want login auto-start; remove it later with `opendevbrowser daemon uninstall`.
@@ -244,7 +246,7 @@ Start every surface check from generated help when you need the current public l
 
 - `screencast / browser replay`: `screencast-start`, `screencast-stop`
 - `desktop observation`: `desktop-status`, `desktop-windows`, `desktop-active-window`, `desktop-capture-desktop`, `desktop-capture-window`, `desktop-accessibility-snapshot`
-- `computer use / browser-scoped computer use`: `--challenge-automation-mode off|browser|browser_with_helper` on `research run`, `shopping run`, `product-video run`, and `macro-resolve --execute`; `review` and `session-inspector` remain the quickest proof surfaces, and the optional helper stays browser-scoped rather than becoming a desktop agent
+- `computer use / browser-scoped computer use`: `--challenge-automation-mode off|browser|browser_with_helper` on `research run`, `shopping run`, `product-video run`, and `macro-resolve --execute`; start with `npx opendevbrowser research run --topic "account recovery flow" --source-selection auto --challenge-automation-mode browser --mode json --output-format json` when you need the first entry point, and use `review` plus `session-inspector` as the quickest proof surfaces while the optional helper stays browser-scoped rather than becoming a desktop agent
 
 ## Challenge Handling Boundary
 
@@ -262,14 +264,13 @@ Start every surface check from generated help when you need the current public l
 
 ## Recent Features
 
-### v0.0.18 (Latest)
+### v0.0.19 (Current release prep)
 
-- **Canvas and workflow surfaces are materially stronger after `v0.0.17`**: adapter-plugin validation, starter or inventory lanes, framework-adapter code sync, review/session-inspector flows, and direct-run release probes all landed on `main`.
-- **Generated public-surface manifests and onboarding metadata now drive help, docs parity, release evidence, and mirrored website inputs** instead of leaving those surfaces hand-maintained.
-- **Challenge automation and browser-scoped computer-use controls are tighter** with explicit `challengeAutomationMode` precedence and a clearer browser-only helper boundary.
-- **Browser replay screencasts and public desktop observation now ship on the active public surface** with manager-owned replay artifacts, dedicated desktop permission or audit coverage, and no desktop agent claim.
-- **Public read-only desktop observation now ships as a sibling runtime** with dedicated permission and audit coverage while staying outside the public relay or `/ops` plane.
-- **Release and distribution operations were refreshed for `v0.0.18`** across GitHub release assets, npm packaging, Chrome Web Store prep, regenerated live store assets, and private website sync inputs.
+- npm latest remains `0.0.18` until the next tag is pushed and published.
+- **Registry-consumer release proof is now first-class** with a post-publish smoke lane that installs the published package in a fresh temp workspace, verifies help/version, and captures the resolved consumer dependency graph.
+- **Browser-scoped computer use is easier to discover** because help, onboarding, and release-facing docs now expose a concrete workflow entry command instead of relying only on `--challenge-automation-mode` as a hidden modifier.
+- **Browser replay screencast shutdown is safer under load** because stop requests during the first in-flight capture no longer allow a later scheduled frame to sneak through.
+- **The `0.0.18` npm parity investigation is now explicit about chronology**: the published package matched the release-aligned source, while later local worktree drift and semver-based consumer dependency drift explain the mismatch reports.
 
 ### v0.0.16
 

package/dist/browser/screencast-recorder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screencast-recorder.d.ts","sourceRoot":"","sources":["../../src/browser/screencast-recorder.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAC9C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,KAAK,kBAAkB,GAAG;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,uBAAuB,GAAG,kBAAkB,GAAG;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAwBF,KAAK,6BAA6B,GAAG;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,6BAA6B,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAClE,CAAC;AA+JF,qBAAa,yBAAyB;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqD;IACtF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAmC;IACrE,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,UAAU,CAAwC;IAC1D,OAAO,CAAC,mBAAmB,CAAsG;IACjI,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAE5C,IAAI,EAAE,6BAA6B;IAmB/C,IAAI,aAAa,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAEpD;IAED,UAAU,IAAI,OAAO;IAIf,KAAK,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAY1C,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,4BAA4B,EAAE,SAAS,GAAG,gBAAgB,GAAG,eAAe,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAO3I,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,iBAAiB;YAUX,qBAAqB;YAwBrB,YAAY;IAoC1B,OAAO,CAAC,UAAU;YAWJ,QAAQ;CAmDvB"}
+{"version":3,"file":"screencast-recorder.d.ts","sourceRoot":"","sources":["../../src/browser/screencast-recorder.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAC9C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,KAAK,kBAAkB,GAAG;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,uBAAuB,GAAG,kBAAkB,GAAG;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAwBF,KAAK,6BAA6B,GAAG;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,6BAA6B,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAClE,CAAC;AA+JF,qBAAa,yBAAyB;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqD;IACtF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAmC;IACrE,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,UAAU,CAAwC;IAC1D,OAAO,CAAC,mBAAmB,CAAsG;IACjI,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAE5C,IAAI,EAAE,6BAA6B;IAmB/C,IAAI,aAAa,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAEpD;IAED,UAAU,IAAI,OAAO;IAIf,KAAK,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAc1C,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,4BAA4B,EAAE,SAAS,GAAG,gBAAgB,GAAG,eAAe,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAO3I,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,iBAAiB;YAUX,qBAAqB;YA2BrB,YAAY;IAoC1B,OAAO,CAAC,UAAU;YAWJ,QAAQ;CAmDvB"}

package/dist/{chunk-L57D35TB.js → chunk-W4IHGDXV.js}

@@ -6229,7 +6229,9 @@ var BrowserScreencastRecorder = class {
     await ensureEmptyDirectory(this.outputDir);
     await mkdir4(this.framesDir, { recursive: true });
     await this.captureFrame();
-    if (this.frames.length >= this.maxFrames) {
+    if (this.requestedStopReason) {
+      await this.finalize(this.requestedStopReason, false);
+    } else if (this.frames.length >= this.maxFrames) {
       await this.finalize("max_frames_reached", false);
     } else {
       this.scheduleNextFrame();
@@ -6256,7 +6258,7 @@ var BrowserScreencastRecorder = class {
     };
   }
   scheduleNextFrame() {
-    if (this.isComplete()) {
+    if (this.isComplete() || this.requestedStopReason) {
       return;
     }
     this.timer = setTimeout(() => {
@@ -6265,6 +6267,9 @@ var BrowserScreencastRecorder = class {
     }, this.intervalMs);
   }
   async captureScheduledFrame() {
+    if (this.requestedStopReason || this.isComplete()) {
+      return;
+    }
     const captured = await this.captureFrame().catch(async () => {
       if (!this.requestedStopReason) {
         await this.finalize("capture_failed", false);
@@ -31036,6 +31041,7 @@ var onboarding_metadata_default = {
     validatedLanes: 'opendevbrowser_skill_load opendevbrowser-best-practices "validated capability lanes"',
     validatedResearch: 'npx opendevbrowser research run --topic "Chrome extension debugging workflows" --days 30 --source-selection auto --mode json --output-format json',
     validatedShopping: 'npx opendevbrowser shopping run --query "wireless ergonomic mouse" --providers shopping/bestbuy,shopping/ebay --budget 150 --browser-mode managed --mode json --output-format json',
+    computerUseEntry: 'npx opendevbrowser research run --topic "account recovery flow" --source-selection auto --challenge-automation-mode browser --mode json --output-format json',
     happyPath: "npx opendevbrowser launch --no-extension --headless --start-url https://example.com --output-format json"
   },
   referencePaths: {
@@ -33510,4 +33516,4 @@ export {
   TOOL_SURFACE_ENTRIES
 };
 /* v8 ignore next -- @preserve */
-//# sourceMappingURL=chunk-L57D35TB.js.map
+//# sourceMappingURL=chunk-W4IHGDXV.js.map