pi-agent-browser-native 0.3.0 → 0.6.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-agent-browser-native",
-  "version": "0.3.0",
+  "version": "0.6.5",
   "description": "pi extension that exposes agent-browser as a native tool for browser automation",
   "type": "module",
   "author": "Mitch Fultz (https://github.com/fitchmultz)",
@@ -36,7 +36,9 @@
     "scripts/config.mjs",
     "scripts/doctor.mjs",
     "scripts/prepare.mjs",
+    "scripts/build.mjs",
     "scripts/agent-browser-capability-baseline.mjs",
+    "scripts/agent-browser-target.mjs",
     "scripts/platform-smoke.mjs",
     "scripts/platform-smoke",
     "README.md",

package/platform-smoke.config.mjs

@@ -22,9 +22,9 @@ export default {
 	ubuntuContainerImage: PLATFORM_SMOKE_UBUNTU_IMAGE,
 	windowsParallels: {
 		sourceVm: "pi-extension-windows-template",
-		// Shared template snapshot; refresh when the Windows image moves past agent-browser 0.33.0.
+		// Shared template snapshot; refresh when the Windows image moves past agent-browser 0.34.0.
 		// Parent crabbox-ready remains for other projects' linked clones.
-		snapshot: "crabbox-ready-ab-0.33.0",
+		snapshot: "crabbox-ready-ab-0.34.0-d",
 	},
 	nodeValidationMajor: 22,
 	agentBrowserVersion: PLATFORM_SMOKE_AGENT_BROWSER_VERSION,

package/scripts/agent-browser-capability-baseline.mjs

@@ -1,12 +1,14 @@
 /**
  * Purpose: Define the canonical upstream agent-browser capability baseline targeted by this package.
- * Responsibilities: Store the target upstream version, sampled help commands, and verifier/doc token expectations in one importable metadata object.
+ * Responsibilities: Combine the canonical target from agent-browser-target.mjs with sampled help commands and verifier/doc token expectations.
  * Scope: Versioned capability metadata only; it does not execute agent-browser or validate documentation by itself.
- * Usage: Imported by command-reference verifier, generated docs checker, and tests when upstream agent-browser is re-baselined.
- * Invariants/Assumptions: This package targets the current installed upstream agent-browser only and does not keep compatibility shims for older versions.
+ * Usage: Imported by command-reference verifier, generated docs checker, and tests when upstream agent-browser is re-baselined; runtime imports only agent-browser-target.mjs.
+ * Invariants/Assumptions: This package documents the current recommended upstream release, accepts stable runtimes at or above the configured floor, and does not add version-specific compatibility shims.
  * Related: `docs/SUPPORT_MATRIX.md` maps `CAPABILITY_BASELINE.inventorySections` to human docs, runtime behavior, tests, and verification gates; refresh that matrix whenever this baseline changes.
  */
 
+import { TARGET_AGENT_BROWSER_VERSION } from "./agent-browser-target.mjs";
+
 export const CAPABILITY_BASELINE_SOURCE = "scripts/agent-browser-capability-baseline.mjs";
 export const COMMAND_REFERENCE_DOC_PATH = "docs/COMMAND_REFERENCE.md";
 export const CAPABILITY_BASELINE_BLOCK_MARKER_PREFIX = "agent-browser-capability-baseline";
@@ -14,8 +16,8 @@ export const COMMAND_REFERENCE_BASELINE_BLOCK_IDS = Object.freeze(["upstream-bas
 
 const sourceEvidence = Object.freeze({
   repository: "vercel-labs/agent-browser",
-  upstreamHead: "93cdda5709e8861c0c26b0b955d8d746e9fda0d7",
-  upstreamPackageVersion: "0.33.2",
+  upstreamHead: "eb05921bad874cd2a1b4fa5d1149f1ed26576cae",
+  upstreamPackageVersion: "0.36.0",
   inspectedSources: Object.freeze([
     "agent-browser --version",
     "agent-browser --help",
@@ -26,25 +28,41 @@ const sourceEvidence = Object.freeze({
     "agent-browser skills list",
     "agent-browser skills get core --full",
     "agent-browser skills get derive-client --full",
+    "agent-browser skills get webmcp-gen --full",
     "README.md",
     "CHANGELOG.md",
     "agent-browser.schema.json",
+    "bin/agent-browser.js",
+    "cli/src/ca_bundle.rs",
     "cli/src/commands.rs",
+    "cli/src/mcp.rs",
     "cli/src/flags.rs",
     "cli/src/read.rs",
     "cli/src/doctor/webgpu.rs",
     "cli/src/native/actions.rs",
     "cli/src/native/a11y/mod.rs",
     "cli/src/native/browser.rs",
+    "cli/src/native/tab_binding.rs",
     "cli/src/native/daemon.rs",
+    "cli/src/native/element.rs",
+    "cli/src/native/stream/cdp_loop.rs",
+    "cli/src/native/stream/dashboard.rs",
+    "cli/src/native/test_fixtures/webmcp_frame_probe.html",
+    "cli/src/native/test_fixtures/webmcp_probe.html",
+    "cli/src/native/webmcp.rs",
     "cli/src/output.rs",
     "docs/src/app/webgpu/page.mdx",
+    "docs/src/app/webmcp/page.mdx",
     "docs/src/app/network/page.mdx",
+    "docs/src/app/proxy/page.mdx",
     "docs/src/app/selectors/page.mdx",
     "docs/src/app/skills/page.mdx",
     "docs/src/app/commands/page.mdx",
     "skill-data/derive-client/SKILL.md",
     "skill-data/core/SKILL.md",
+    "skill-data/protected-vercel-deployments/SKILL.md",
+    "skill-data/webmcp-gen/SKILL.md",
+    "test/launcher.test.mjs",
     "packages/@agent-browser/eve/README.md",
     "packages/@agent-browser/eve/package.json",
     "packages/@agent-browser/eve/test/extension.test.mjs",
@@ -72,6 +90,8 @@ const helpCommands = Object.freeze([
   helpCommand("skills list", ["skills", "list"]),
   helpCommand("core skill full", ["skills", "get", "core", "--full"]),
   helpCommand("vercel sandbox skill full", ["skills", "get", "vercel-sandbox", "--full"]),
+  helpCommand("protected Vercel deployments skill full", ["skills", "get", "protected-vercel-deployments", "--full"]),
+  helpCommand("WebMCP generation skill full", ["skills", "get", "webmcp-gen", "--full"]),
   helpCommand("open help", ["open", "--help"]),
   helpCommand("read help", ["read", "--help"]),
   helpCommand("click help", ["click", "--help"]),
@@ -140,8 +160,11 @@ const inventorySections = Object.freeze([
       "skills get slack",
       "skills get dogfood",
       "skills get vercel-sandbox",
+      "skills get protected-vercel-deployments",
       "skills get agentcore",
       "skills get derive-client",
+      "skills get webmcp-gen",
+      "webmcp.init.js",
       "@agent-browser/sandbox",
       "installSystemDependencies: false",
       "skills path [name]",
@@ -157,10 +180,16 @@ const inventorySections = Object.freeze([
       ["skills list", "slack"],
       ["skills list", "dogfood"],
       ["skills list", "vercel-sandbox"],
+      ["skills list", "protected-vercel-deployments"],
       ["skills list", "agentcore"],
       ["skills list", "derive-client"],
+      ["skills list", "webmcp-gen"],
+      ["WebMCP generation skill full", "webmcp.init.js"],
+      ["WebMCP generation skill full", "agent-browser webmcp invoke <tool> --params @fixture.json"],
       ["vercel sandbox skill full", "@agent-browser/sandbox"],
       ["vercel sandbox skill full", "installSystemDependencies: false"],
+      ["protected Vercel deployments skill full", "x-vercel-trusted-oidc-idp-token"],
+      ["protected Vercel deployments skill full", "vc project token"],
       ["core skill full", "agent-browser frame @e3"],
       ["core skill full", "agent-browser dialog accept"],
       ["core skill full", "agent-browser --session \"$SESSION\" --restore open https://app.example.com"],
@@ -365,6 +394,10 @@ const inventorySections = Object.freeze([
       "tab new --label <name> [url]",
       "tab close [target]",
       "tab <t<N>|label>",
+      "tab_gone",
+      "data.targetId",
+      "data.lastUrl",
+      "CDP target ids",
       "frame <selector|main>",
       "dialog accept [text]",
       "dialog dismiss",
@@ -387,8 +420,13 @@ const inventorySections = Object.freeze([
       ["state help", "clean --older-than <days>"],
       ["tab help", "new [url]"],
       ["tab help", "new --label <name> [url]"],
-      ["tab help", "close [t<N>|label]"],
+      ["tab help", "close [t<N>|label|target]"],
       ["tab help", "Stable tab ids"],
+      ["tab help", "tab_gone"],
+      ["tab help", "data.targetId"],
+      ["tab help", "data.lastUrl"],
+      ["core skill full", "--pin-tab"],
+      ["core skill full", "tab_gone"],
       ["frame help", "frame <selector|main>"],
       ["dialog help", "dialog <accept|dismiss|status> [text]"],
       ["window help", "window <operation>"],
@@ -412,6 +450,14 @@ const inventorySections = Object.freeze([
       "cookies set <name> <value> --url <url> --domain <domain> --path <path> --httpOnly --secure --sameSite <Strict|Lax|None> --expires <timestamp>",
       "cookies set --curl <file>",
       "storage <local|session>",
+      "webmcp list",
+      "webmcp invoke <tool>",
+      "webmcp invoke <tool> --params <json|@file>",
+      "webmcp invoke <tool> --frame <frame-id>",
+      "webmcp invoke <tool> --detach",
+      "webmcp invoke <tool> --timeout <ms>",
+      "webmcp result <id>",
+      "webmcp cancel <id>",
       "diff snapshot",
       "diff snapshot --baseline <file> --selector <sel> --compact --depth <n>",
       "diff screenshot --baseline",
@@ -459,6 +505,13 @@ const inventorySections = Object.freeze([
       root("cookies [get|set|clear]"),
       root("cookies set --curl <file>"),
       root("storage <local|session>"),
+      root("webmcp list"),
+      root("webmcp invoke <tool>"),
+      root("--params <json|@file>"),
+      root("--frame <frame-id>"),
+      root("--detach"),
+      root("webmcp result <id>"),
+      root("webmcp cancel <id>"),
       root("diff snapshot"),
       root("diff screenshot --baseline"),
       root("trace start"),
@@ -530,6 +583,8 @@ const inventorySections = Object.freeze([
       "chat <message>",
       "dashboard [start]",
       "dashboard start --port <n>",
+      "dashboard start --allowed-origins <origins>",
+      "AGENT_BROWSER_DASHBOARD_ALLOWED_ORIGINS",
       "dashboard stop",
       "device list",
       "install",
@@ -542,6 +597,7 @@ const inventorySections = Object.freeze([
       "doctor --webgpu --headed",
       "doctor --json",
       "mcp",
+      "mcp --tools core,webmcp",
       "plugin add <ref>",
       "plugin [list]",
       "plugin show <name>",
@@ -557,6 +613,9 @@ const inventorySections = Object.freeze([
       root("deny <id>"),
       root("chat <message>"),
       root("dashboard start --port <n>"),
+      root("dashboard start --allowed-origins <origins>"),
+      ["dashboard help", "--allowed-origins <origins>"],
+      ["dashboard help", "AGENT_BROWSER_DASHBOARD_ALLOWED_ORIGINS"],
       ["device help", "device list"],
       root("install --with-deps"),
       ["install help", "fails if deps fail"],
@@ -615,6 +674,9 @@ const inventorySections = Object.freeze([
       "AGENT_BROWSER_STATE",
       "--auto-connect",
       "AGENT_BROWSER_AUTO_CONNECT",
+      "--pin-tab",
+      "--no-pin-tab",
+      "AGENT_BROWSER_PIN_TAB",
       "--headers <json>",
       "--init-script <path>",
       "AGENT_BROWSER_INIT_SCRIPTS",
@@ -638,6 +700,10 @@ const inventorySections = Object.freeze([
       "NO_PROXY",
       "--ignore-https-errors",
       "AGENT_BROWSER_IGNORE_HTTPS_ERRORS",
+      "--ca-cert <path>",
+      "--no-ca-cert",
+      "AGENT_BROWSER_CA_CERT",
+      "AGENT_BROWSER_CLEAR_CA_CERT",
       "--allow-file-access",
       "AGENT_BROWSER_ALLOW_FILE_ACCESS",
       "--hide-scrollbars <bool>",
@@ -645,9 +711,12 @@ const inventorySections = Object.freeze([
       "AGENT_BROWSER_HEADED",
       "--webgpu",
       "AGENT_BROWSER_WEBGPU",
+      "--no-webmcp",
+      "AGENT_BROWSER_NO_WEBMCP",
+      "noWebmcp",
       "AGENT_BROWSER_NO_XVFB",
       "\"webgpu\": true",
-      "--cdp <port>",
+      "--cdp <port|url>",
       "--color-scheme <scheme>",
       "AGENT_BROWSER_COLOR_SCHEME",
       "--download-path <path>",
@@ -759,6 +828,9 @@ const inventorySections = Object.freeze([
       root("AGENT_BROWSER_STATE"),
       root("--auto-connect"),
       root("AGENT_BROWSER_AUTO_CONNECT"),
+      root("--pin-tab"),
+      root("--no-pin-tab"),
+      root("AGENT_BROWSER_PIN_TAB"),
       root("--headers <json>"),
       root("--init-script <path>"),
       root("AGENT_BROWSER_INIT_SCRIPTS"),
@@ -781,6 +853,10 @@ const inventorySections = Object.freeze([
       root("NO_PROXY"),
       root("--ignore-https-errors"),
       root("AGENT_BROWSER_IGNORE_HTTPS_ERRORS"),
+      root("--ca-cert <path>"),
+      root("--no-ca-cert"),
+      root("AGENT_BROWSER_CA_CERT"),
+      root("AGENT_BROWSER_CLEAR_CA_CERT"),
       root("--allow-file-access"),
       root("AGENT_BROWSER_ALLOW_FILE_ACCESS"),
       root("--hide-scrollbars <bool>"),
@@ -788,7 +864,9 @@ const inventorySections = Object.freeze([
       root("AGENT_BROWSER_HEADED"),
       root("--webgpu"),
       root("AGENT_BROWSER_WEBGPU"),
-      root("--cdp <port>"),
+      root("--no-webmcp"),
+      root("AGENT_BROWSER_NO_WEBMCP"),
+      root("--cdp <port|url>"),
       root("--color-scheme <scheme>"),
       root("AGENT_BROWSER_COLOR_SCHEME"),
       root("--download-path <path>"),
@@ -852,7 +930,7 @@ const inventorySections = Object.freeze([
 ]);
 
 export const CAPABILITY_BASELINE = Object.freeze({
-  targetVersion: "0.33.2",
+  targetVersion: TARGET_AGENT_BROWSER_VERSION,
   sourceEvidence,
   helpCommands,
   inventorySections,

package/scripts/agent-browser-target.mjs

@@ -0,0 +1,21 @@
+export const TARGET_AGENT_BROWSER_SOURCE = "scripts/agent-browser-target.mjs";
+export const TARGET_AGENT_BROWSER_VERSION = "0.36.0";
+export const TARGET_AGENT_BROWSER_VERSION_LABEL = `agent-browser ${TARGET_AGENT_BROWSER_VERSION}`;
+export const MINIMUM_AGENT_BROWSER_VERSION = "0.35.0";
+export const MINIMUM_AGENT_BROWSER_VERSION_LABEL = `agent-browser ${MINIMUM_AGENT_BROWSER_VERSION}`;
+export const SUPPORTED_AGENT_BROWSER_VERSION_LABEL = `${MINIMUM_AGENT_BROWSER_VERSION_LABEL} or newer`;
+
+function stableVersionParts(version) {
+	const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.exec(version);
+	return match?.slice(1).map(Number);
+}
+
+export function isSupportedAgentBrowserVersion(version) {
+	const actual = stableVersionParts(version);
+	const minimum = stableVersionParts(MINIMUM_AGENT_BROWSER_VERSION);
+	if (!actual || !minimum) return false;
+	for (let index = 0; index < minimum.length; index += 1) {
+		if (actual[index] !== minimum[index]) return actual[index] > minimum[index];
+	}
+	return true;
+}

package/scripts/build.mjs

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+/**
+ * Purpose: Produce the compiled runtime files that the published Pi package loads.
+ * Responsibilities: Remove stale dist output, run TypeScript emit through the local compiler, and fail with clear build output.
+ * Scope: Maintainer/package build only; runtime behavior remains in extensions/agent-browser TypeScript sources.
+ * Usage: `npm run build` before package verification, lifecycle validation, and npm pack/publish.
+ * Invariants/Assumptions: `node_modules` is installed and provides `typescript`; deleting `dist/` is safe because it is generated output.
+ */
+
+import { execFile as execFileCallback } from "node:child_process";
+import { rm } from "node:fs/promises";
+import { join } from "node:path";
+import process from "node:process";
+import { promisify } from "node:util";
+
+const execFile = promisify(execFileCallback);
+const binSuffix = process.platform === "win32" ? ".cmd" : "";
+const tscPath = join(process.cwd(), "node_modules", ".bin", `tsc${binSuffix}`);
+
+async function main() {
+	await rm(join(process.cwd(), "dist"), { force: true, maxRetries: 5, recursive: true, retryDelay: 100 });
+	const options = process.platform === "win32" ? { shell: true } : {};
+	try {
+		const { stderr, stdout } = await execFile(tscPath, ["-p", "tsconfig.build.json"], {
+			...options,
+			cwd: process.cwd(),
+			maxBuffer: 10 * 1024 * 1024,
+		});
+		if (stdout) process.stdout.write(stdout);
+		if (stderr) process.stderr.write(stderr);
+	} catch (error) {
+		if (error?.stdout) process.stdout.write(error.stdout);
+		if (error?.stderr) process.stderr.write(error.stderr);
+		throw error;
+	}
+}
+
+main().catch((error) => {
+	console.error(error instanceof Error ? error.message : String(error));
+	process.exitCode = 1;
+});

package/scripts/config.mjs

@@ -169,6 +169,7 @@ function printStatus() {
 	console.log("Effective config:");
 	console.log(`  webSearch.enabled: ${state.webSearchEnabled ? "true" : "false"}`);
 	console.log(`  webSearch.preferredProvider: ${state.config.webSearch?.preferredProvider ?? `auto (default ${DEFAULT_WEB_SEARCH_PROVIDER})`}`);
+	console.log(`  webSearch.defaultSearchType: ${state.config.webSearch?.defaultSearchType ?? "not configured (Exa auto)"}`);
 	for (const provider of WEB_SEARCH_PROVIDERS) {
 		const field = getWebSearchProviderConfigKey(provider);
 		console.log(`  webSearch.${field}: ${getCredentialSourceSummary(state.webSearchCredentialSources[provider], provider)}`);

package/scripts/doctor.mjs

@@ -4,7 +4,7 @@
  * Responsibilities: Check upstream agent-browser PATH/version, inspect Pi settings for duplicate package/checkout sources, and print actionable remediation.
  * Scope: Read-only package diagnostics only; upstream browser runtime health remains the responsibility of upstream `agent-browser doctor`.
  * Usage: Run via `pi-agent-browser-doctor`, `npm exec --package pi-agent-browser-native -- pi-agent-browser-doctor`, or `npm run doctor` from this repository.
- * Invariants/Assumptions: The wrapper targets CAPABILITY_BASELINE.targetVersion, does not bundle agent-browser, and must not edit Pi settings or run fixing commands.
+ * Invariants/Assumptions: The wrapper recommends TARGET_AGENT_BROWSER_VERSION, enforces the configured stable version floor, does not bundle agent-browser, and must not edit Pi settings or run fixing commands.
  */
 
 import { execFile as execFileCallback } from "node:child_process";
@@ -15,7 +15,8 @@ import { dirname, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 
-import { CAPABILITY_BASELINE, CAPABILITY_BASELINE_SOURCE } from "./agent-browser-capability-baseline.mjs";
+import { CAPABILITY_BASELINE_SOURCE } from "./agent-browser-capability-baseline.mjs";
+import { MINIMUM_AGENT_BROWSER_VERSION, TARGET_AGENT_BROWSER_SOURCE, TARGET_AGENT_BROWSER_VERSION, isSupportedAgentBrowserVersion } from "./agent-browser-target.mjs";
 
 const execFile = promisify(execFileCallback);
 const PACKAGE_NAME = "pi-agent-browser-native";
@@ -24,7 +25,7 @@ const EXTENSION_ENTRYPOINTS = Object.freeze([
 	"extensions/agent-browser/index.ts",
 	"dist/extensions/agent-browser/index.js",
 ]);
-const EXPECTED_VERSION = CAPABILITY_BASELINE.targetVersion;
+const RECOMMENDED_VERSION = TARGET_AGENT_BROWSER_VERSION;
 const MINIMUM_PI_VERSION = "0.84.0";
 const DEFAULT_AGENT_DIR = resolve(homedir(), ".pi/agent");
 const THIS_PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
@@ -69,7 +70,7 @@ Options:
 
 Checks:
   1. agent-browser is installed on PATH.
-  2. agent-browser --version matches the package capability baseline.
+  2. agent-browser --version is supported by this package.
   3. pi --version is at least the minimum Pi runtime version for this release.
   4. Pi settings and repo-local autoload locations do not point at multiple active pi-agent-browser-native sources.
 
@@ -340,17 +341,23 @@ async function checkAgentBrowserVersion({ runAgentBrowser }) {
 	try {
 		const rawOutput = await runAgentBrowser(["--version"]);
 		const version = normalizeAgentBrowserVersion(rawOutput);
-		if (version !== EXPECTED_VERSION) {
+		if (!isSupportedAgentBrowserVersion(version)) {
 			return {
 				status: "fail",
-				title: `agent-browser version drift: expected ${EXPECTED_VERSION}, found ${version || "<empty>"}.`,
+				title: `agent-browser version drift: minimum supported ${MINIMUM_AGENT_BROWSER_VERSION}; found ${version || "<empty>"}.`,
 				lines: [
-					`This wrapper targets the current baseline from ${CAPABILITY_BASELINE_SOURCE} and does not provide backwards-compatibility shims.`,
-					`Update upstream agent-browser to ${EXPECTED_VERSION}, or if you intentionally re-baselined upstream, update ${CAPABILITY_BASELINE_SOURCE}, run \`npm run docs -- command-reference write\`, refresh docs/COMMAND_REFERENCE.md, and rerun \`npm run verify -- command-reference\` plus \`npm run verify -- real-upstream\` with test/fixtures/agent-browser-real-output-shapes.json aligned to the new target version.`,
+					`This wrapper supports stable agent-browser versions at or above ${MINIMUM_AGENT_BROWSER_VERSION}; ${RECOMMENDED_VERSION} is the current recommendation from ${TARGET_AGENT_BROWSER_SOURCE}.`,
+					`Update upstream agent-browser to ${RECOMMENDED_VERSION}, or if you intentionally re-baselined upstream, update ${TARGET_AGENT_BROWSER_SOURCE} plus ${CAPABILITY_BASELINE_SOURCE}, run \`npm run docs -- command-reference write\`, refresh docs/COMMAND_REFERENCE.md, and rerun \`npm run verify -- command-reference\` plus \`npm run verify -- real-upstream\` with test/fixtures/agent-browser-real-output-shapes.json aligned to the new target version.`,
 				],
 			};
 		}
-		return { status: "pass", title: `agent-browser version matches baseline: ${version}`, lines: [] };
+		return {
+			status: "pass",
+			title: version === RECOMMENDED_VERSION
+				? `agent-browser version matches recommended baseline: ${version}`
+				: `agent-browser version meets supported floor: ${version} (recommended ${RECOMMENDED_VERSION})`,
+			lines: [],
+		};
 	} catch (error) {
 		const code = error && typeof error === "object" ? error.code : undefined;
 		return {

package/scripts/platform-smoke/browser-dogfood-windows.ps1

@@ -1,5 +1,6 @@
 param(
-  [Parameter(Mandatory=$true)][string]$AgentBrowserVersion
+  [Parameter(Mandatory=$true)][string]$AgentBrowserVersion,
+  [switch]$SkipNpmCi
 )
 
 $ErrorActionPreference = "Continue"
@@ -90,8 +91,13 @@ Write-Output "PLATFORM_DOGFOOD_ARTIFACT_DIR=$DogfoodArtifactDir"
 $NodeVersion = (& node --version 2>$null)
 Write-Output "PLATFORM_NODE_VERSION=$NodeVersion"
 
-& npm ci 2>&1
-$NpmCiExit = $LASTEXITCODE
+if ($SkipNpmCi -and (Test-Path (Join-Path $SourceRoot "node_modules"))) {
+  Write-Output "PLATFORM_NPM_CI_SKIPPED=1"
+  $NpmCiExit = 0
+} else {
+  & npm ci 2>&1
+  $NpmCiExit = $LASTEXITCODE
+}
 Write-Output "PLATFORM_NPM_CI_EXIT=$NpmCiExit"
 
 $AgentBrowserPath = Get-AgentBrowserCommandPath

package/scripts/platform-smoke/targets.mjs

@@ -305,9 +305,9 @@ export function buildPlatformBuildCommand(targetName, packageName = "pi-agent-br
 	return lines.join("\n");
 }
 
-export function buildBrowserDogfoodCommand(targetName, agentBrowserVersion = CAPABILITY_BASELINE.targetVersion) {
+export function buildBrowserDogfoodCommand(targetName, agentBrowserVersion = CAPABILITY_BASELINE.targetVersion, dependenciesReady = false) {
 	if (platformFor(targetName) === "powershell") {
-		return `powershell.exe -NoLogo -NoProfile -ExecutionPolicy Bypass -File .\\scripts\\platform-smoke\\browser-dogfood-windows.ps1 -AgentBrowserVersion ${psSingleQuote(agentBrowserVersion)}`;
+		return `powershell.exe -NoLogo -NoProfile -ExecutionPolicy Bypass -File .\\scripts\\platform-smoke\\browser-dogfood-windows.ps1 -AgentBrowserVersion ${psSingleQuote(agentBrowserVersion)}${dependenciesReady ? " -SkipNpmCi" : ""}`;
 	}
 
 	const lines = [];
@@ -329,8 +329,12 @@ export function buildBrowserDogfoodCommand(targetName, agentBrowserVersion = CAP
 	lines.push(`echo "PLATFORM_AGENT_BROWSER_VERSION=$AGENT_BROWSER_VERSION_OUTPUT"`);
 	lines.push(`if [ "$AGENT_BROWSER_VERSION_COMMAND_EXIT" -eq 0 ] && [ "$AGENT_BROWSER_VERSION_OUTPUT" = "$EXPECTED_AGENT_BROWSER_VERSION" ]; then AGENT_BROWSER_READY_EXIT=0; else AGENT_BROWSER_READY_EXIT=1; fi`);
 	lines.push(`echo "PLATFORM_AGENT_BROWSER_READY_EXIT=$AGENT_BROWSER_READY_EXIT"`);
-	lines.push(`npm ci 2>&1`);
-	lines.push(`NPM_CI_EXIT=$?`);
+	if (dependenciesReady) {
+		lines.push(`if [ -d node_modules ]; then echo "PLATFORM_NPM_CI_SKIPPED=1"; NPM_CI_EXIT=0; else npm ci 2>&1; NPM_CI_EXIT=$?; fi`);
+	} else {
+		lines.push(`npm ci 2>&1`);
+		lines.push(`NPM_CI_EXIT=$?`);
+	}
 	lines.push(`echo "PLATFORM_NPM_CI_EXIT=$NPM_CI_EXIT"`);
 	lines.push(`TSX_CLI="$SOURCE_ROOT/node_modules/.bin/tsx"`);
 	lines.push(`if [ ! -x "$TSX_CLI" ]; then TSX_CLI="$(command -v tsx || true)"; fi`);
@@ -349,7 +353,7 @@ async function runBrowserDogfoodSuite(config, targetName, suiteName, leaseSessio
 	const startedAt = Date.now();
 	const platform = platformFor(targetName);
 	const slug = `${config.packageName}-${targetName}`;
-	const command = buildBrowserDogfoodCommand(targetName, config.agentBrowserVersion);
+	const command = buildBrowserDogfoodCommand(targetName, config.agentBrowserVersion, leaseSession?.dependenciesReady === true);
 	writeFileSync(resolve(suiteDir, "target.json"), JSON.stringify(targetEvidence(config, targetName, runId, slug), null, 2));
 	writeFileSync(resolve(suiteDir, "suite.json"), JSON.stringify({ suiteName, modelCalls: 0, realBrowser: true }, null, 2));
 	writeCommand(suiteDir, command);
@@ -496,12 +500,14 @@ export async function runTargetSuites(config, targetName, suiteNames) {
 	let staleCleanupResult;
 	try {
 		let sync = true;
+		let dependenciesReady = false;
 		for (const suiteName of suiteNames) {
 			console.log(`  Suite: ${suiteName}`);
-			const result = await runTargetSuite(config, targetName, suiteName, { ...lease, sync }, runId);
+			const result = await runTargetSuite(config, targetName, suiteName, { ...lease, dependenciesReady, sync }, runId);
 			results.push(result);
 			console.log(`  ${result.ok ? "PASS" : "FAIL"} ${suiteName} on ${targetName}`);
 			sync = false;
+			if (result.ok && suiteName === "platform-build") dependenciesReady = true;
 			if (!result.ok) break;
 		}
 	} finally {

package/dist/extensions/agent-browser/lib/managed-session-capabilities.js

@@ -1,20 +0,0 @@
-const MANAGED_SESSION_RESTORE_KEY_PATTERN = /piab-r(?:2)?-[a-f\d]{32}/gi;
-const MANAGED_SESSION_RESTORE_KEY_EXACT_PATTERN = /^piab-r2-[a-f\d]{32}$/i;
-const WRAPPER_MANAGED_SESSION_PREFIX = "piab-";
-export function isWrapperManagedSessionName(value) {
-    return typeof value === "string" && value.toLowerCase().startsWith(WRAPPER_MANAGED_SESSION_PREFIX);
-}
-export function isManagedSessionRestoreKey(value) {
-    return typeof value === "string" && MANAGED_SESSION_RESTORE_KEY_EXACT_PATTERN.test(value);
-}
-export function extractManagedSessionRestoreKeys(value) {
-    return [...new Set(value.match(MANAGED_SESSION_RESTORE_KEY_PATTERN)?.map((key) => key.toLowerCase()) ?? [])];
-}
-export function containsManagedSessionRestoreKey(value) {
-    MANAGED_SESSION_RESTORE_KEY_PATTERN.lastIndex = 0;
-    return MANAGED_SESSION_RESTORE_KEY_PATTERN.test(value);
-}
-export function redactManagedSessionRestoreKeys(value) {
-    MANAGED_SESSION_RESTORE_KEY_PATTERN.lastIndex = 0;
-    return value.replace(MANAGED_SESSION_RESTORE_KEY_PATTERN, "[REDACTED MANAGED STATE]");
-}