pi-agent-browser-native 0.5.0 → 0.6.6

package/dist/extensions/agent-browser/index.js

@@ -9,25 +9,24 @@ import { canUseHeadlessCompatibilityUserAgent, createEphemeralSessionSeed, creat
 import { extractExplicitNamespace, extractExplicitSessionName, getAgentBrowserSessionIdentityKey, isAgentBrowserSessionIdentityKeyInNamespace, isUpstreamEnvFlagEnabled, resolveAgentBrowserNamespace } from "./lib/argv-grammar.js";
 import { parseArgvDescriptor } from "./lib/argv-descriptor.js";
 import { needsManagedSession } from "./lib/command-policy.js";
-import { cleanupManagedSessionRestoreConfig, ManagedSessionRestoreState } from "./lib/managed-session-restore.js";
+import { ManagedSessionRestoreState } from "./lib/managed-session-restore.js";
 import { isRecord } from "./lib/parsing.js";
 import { runAgentBrowserProcess } from "./lib/process.js";
 import { getAgentBrowserProcessEnvironment, withIsolatedAgentBrowserEnvironment } from "./lib/process-environment.js";
-import { TARGET_AGENT_BROWSER_VERSION, TARGET_AGENT_BROWSER_VERSION_LABEL, getAgentBrowserVersionValidationError, parseAgentBrowserVersionOutput, } from "./lib/upstream-version.js";
+import { MINIMUM_AGENT_BROWSER_VERSION, SUPPORTED_AGENT_BROWSER_VERSION_LABEL, TARGET_AGENT_BROWSER_VERSION, getAgentBrowserVersionValidationError, parseAgentBrowserVersionOutput, } from "./lib/upstream-version.js";
 import { buildPromptPolicy, getLatestUserPrompt, shouldAppendBrowserSystemPrompt } from "./lib/prompt-policy.js";
 import { isCloseAllCommand, isCloseCommand } from "./lib/command-taxonomy.js";
 import { hasLaunchScopedFlagToken } from "./lib/launch-scoped-flags.js";
 import { cleanupSecureTempArtifacts } from "./lib/temp.js";
 import { AGENT_BROWSER_PARAMS } from "./lib/input-modes/params.js";
 import { AGENT_BROWSER_SCRIPT_DEFAULT_TIMEOUT_MS, AGENT_BROWSER_SCRIPT_NAMESPACE, createAgentBrowserScriptSessionName, isAgentBrowserScriptSessionName, runAgentBrowserScript, } from "./lib/input-modes/script.js";
-import { parseAllowedDomainsPolicyFromArgs } from "./lib/navigation-policy.js";
 import { closeManagedSession, getSessionContextKey, runAgentBrowserTool } from "./lib/orchestration/browser-run/index.js";
 import { canonicalizeExplicitArtifactDestination, getExplicitArtifactDestination } from "./lib/orchestration/browser-run/artifact-paths.js";
 import { findElectronLaunchRecordForSession, getActiveElectronRecords } from "./lib/orchestration/browser-run/session-state.js";
 import { parseBatchCommandArgument, parseUserBatchStdin } from "./lib/orchestration/batch-stdin.js";
 import { ELECTRON_POST_COMMAND_STATUS_SETTLE_MS, ELECTRON_PROFILE_ISOLATION_DETAILS, cleanupActiveElectronHostLaunches, handleElectronHostInput, restoreElectronLaunchRecordsFromBranch, } from "./lib/orchestration/electron-host/index.js";
 import { buildValidationFailureResult, resolveAgentBrowserInput } from "./lib/orchestration/input-plan.js";
-import { applyAgentBrowserOutputPath, getAgentBrowserOutputPathValidationError, normalizeRequestedOutputPath } from "./lib/orchestration/output-file.js";
+import { applyAgentBrowserOutputPath, normalizeRequestedOutputPath } from "./lib/orchestration/output-file.js";
 import { appendScriptSessionLease, buildScriptBrowserEnvelope, buildScriptToolResult, getScriptSessionLeasesFromBranch } from "./lib/orchestration/script-mode.js";
 import { formatSessionArtifactRetentionSummary, getSessionArtifactManifestEntryKey, isPendingRecordingCommand, isSessionArtifactManifest, mergeSessionArtifactManifest, retirePendingRecordingManifestEntries } from "./lib/results/artifact-manifest.js";
 import { appendUniqueAgentBrowserNextActions, applyNamespaceToNextActions, applySessionToNextActions, buildNextToolAction } from "./lib/results/next-actions.js";
@@ -97,7 +96,7 @@ function getArtifactPreflightValidationError(options) {
     for (const [index, step] of steps.entries()) {
         const commandStep = extractUpstreamCommandTokens(step);
         if (batch) {
-            const stepValidationError = validateToolArgs(step);
+            const stepValidationError = validateToolArgs(step, { batchStep: true });
             if (stepValidationError)
                 return `Unsupported batch step ${index + 1}: ${stepValidationError}`;
             if (sawBatchClose && commandStep[0] === "record" && (commandStep[1] === "start" || commandStep[1] === "restart")) {
@@ -359,65 +358,6 @@ function restoreAttachedSessionKeysFromBranch(branch) {
     }
     return attachedSessionKeys;
 }
-function restoreAllowedDomainsBySessionFromBranch(branch) {
-    const restoredPolicies = new Map();
-    for (const entry of branch) {
-        if (!isRecord(entry) || entry.type !== "message")
-            continue;
-        const message = isRecord(entry.message) ? entry.message : undefined;
-        if (!message || message.toolName !== "agent_browser")
-            continue;
-        const details = isRecord(message.details) ? message.details : undefined;
-        if (!details)
-            continue;
-        const succeeded = getSuccessfulToolResult(details, message);
-        const batchCloseLifecycle = getSuccessfulBatchCloseLifecycle(details.batchSteps);
-        const args = getToolResultArgs(details);
-        const command = typeof details.command === "string" ? details.command : extractUpstreamCommandTokens(args)[0];
-        const sessionName = typeof details.sessionName === "string" ? details.sessionName : undefined;
-        const namespace = typeof details.namespace === "string" ? details.namespace : undefined;
-        const sessionKey = getSessionContextKey(sessionName, namespace);
-        const explicitSessionName = extractExplicitSessionName(args);
-        if (detailsReportCloseAllApplied(details, succeeded))
-            deleteIdentityKeysInNamespace(restoredPolicies, namespace);
-        const outcome = getManagedSessionOutcome(details);
-        const outcomeSucceeded = outcome?.succeeded === true;
-        const outcomeStatus = typeof outcome?.status === "string" ? outcome.status : undefined;
-        const outcomeCurrentSessionName = typeof outcome?.currentSessionName === "string" ? outcome.currentSessionName : undefined;
-        const outcomeAttemptedSessionName = typeof outcome?.attemptedSessionName === "string" ? outcome.attemptedSessionName : undefined;
-        if (outcomeSucceeded && outcomeStatus === "closed") {
-            const closedSessionName = outcomeAttemptedSessionName ?? outcomeCurrentSessionName ?? sessionName;
-            if (closedSessionName)
-                restoredPolicies.delete(getSessionContextKey(closedSessionName, namespace) ?? closedSessionName);
-        }
-        if (outcomeSucceeded && outcomeStatus === "replaced") {
-            const replacedSessionName = typeof outcome.replacedSessionName === "string" ? outcome.replacedSessionName : undefined;
-            const replacedSessionNamespace = typeof outcome.replacedSessionNamespace === "string" ? outcome.replacedSessionNamespace : namespace;
-            if (replacedSessionName)
-                restoredPolicies.delete(getSessionContextKey(replacedSessionName, replacedSessionNamespace) ?? replacedSessionName);
-        }
-        if ((succeeded && isCloseCommand(command)) || batchCloseLifecycle) {
-            const closedSessionName = explicitSessionName ?? sessionName ?? outcomeAttemptedSessionName ?? outcomeCurrentSessionName;
-            if (closedSessionName)
-                restoredPolicies.delete(getSessionContextKey(closedSessionName, namespace) ?? closedSessionName);
-        }
-        const electron = isRecord(details.electron) ? details.electron : undefined;
-        const cleanup = isRecord(electron?.cleanup) ? electron.cleanup : undefined;
-        const cleanupResults = Array.isArray(cleanup?.results) ? cleanup.results : [];
-        for (const cleanupResult of cleanupResults) {
-            for (const identity of getCleanupResultClosedManagedSessionIdentities(cleanupResult, namespace)) {
-                restoredPolicies.delete(getSessionContextKey(identity.sessionName, identity.namespace) ?? identity.sessionName);
-            }
-        }
-        const outcomeKeepsSessionCurrent = outcome?.activeAfter === true
-            && (outcomeStatus === "created" || outcomeStatus === "replaced" || outcomeStatus === "unchanged")
-            && outcomeCurrentSessionName === sessionName;
-        const policy = (succeeded || outcomeKeepsSessionCurrent) && sessionKey && !isCloseCommand(command) && batchCloseLifecycle?.endsClosed !== true ? parseAllowedDomainsPolicyFromArgs(args) : undefined;
-        if (policy && sessionKey)
-            restoredPolicies.set(sessionKey, policy);
-    }
-    return restoredPolicies;
-}
 function trackOwnedManagedSession(sessions, sessionName, cwd, options = {}) {
     if (!sessionName)
         return;
@@ -905,7 +845,6 @@ export default function agentBrowserExtension(pi) {
     let activeRecordingReservations = new Map();
     let recordingSessionTombstones = new Map();
     let recordingSessionTombstonesToPersist = new Map();
-    let allowedDomainsBySession = new Map();
     let attachedSessionKeys = new Set();
     let networkRoutesBySession = new Map();
     let electronLaunchRecords = new Map();
@@ -1064,15 +1003,14 @@ export default function agentBrowserExtension(pi) {
                 failureCategory: "validation-error",
                 observedVersion,
                 resultCategory: "failure",
-                versionValidation: { expected: TARGET_AGENT_BROWSER_VERSION_LABEL, observed: observedVersion },
+                minimumSupportedVersion: MINIMUM_AGENT_BROWSER_VERSION,
+                versionValidation: { expected: SUPPORTED_AGENT_BROWSER_VERSION_LABEL, observed: observedVersion },
             },
             isError: true,
         };
     };
     const clearSessionScopedBrowserState = (sessionName, namespace) => {
         const key = getSessionContextKey(sessionName, namespace) ?? sessionName;
-        allowedDomainsBySession = new Map(allowedDomainsBySession);
-        allowedDomainsBySession.delete(key);
         attachedSessionKeys.delete(key);
         networkRoutesBySession = new Map(networkRoutesBySession);
         networkRoutesBySession.delete(key);
@@ -1184,7 +1122,6 @@ export default function agentBrowserExtension(pi) {
         for (const [key, reservation] of activeRecordingReservations)
             restoredRecordingState.active.set(key, reservation);
         activeRecordingReservations = restoredRecordingState.active;
-        allowedDomainsBySession = restoreAllowedDomainsBySessionFromBranch(branch);
         attachedSessionKeys = restoreAttachedSessionKeysFromBranch(branch);
         networkRoutesBySession = new Map();
         electronLaunchRecords = restoreElectronLaunchRecordsFromBranch(branch);
@@ -1350,7 +1287,6 @@ export default function agentBrowserExtension(pi) {
         activeRecordingReservations = new Map();
         recordingSessionTombstones = new Map();
         recordingSessionTombstonesToPersist = new Map();
-        allowedDomainsBySession = new Map();
         attachedSessionKeys = new Set();
         networkRoutesBySession = new Map();
         electronLaunchRecords = new Map();
@@ -1358,7 +1294,6 @@ export default function agentBrowserExtension(pi) {
         branchOwnedElectronLaunchIds = new Set();
         electronChildProcesses = new Map();
         ownedManagedSessions.clear();
-        cleanupManagedSessionRestoreConfig();
         await cleanupSecureTempArtifacts({ preservePaths: preservedElectronProfileDirs });
     });
     pi.on("before_agent_start", async (event, ctx) => {
@@ -1401,7 +1336,7 @@ export default function agentBrowserExtension(pi) {
     const agentBrowserTool = {
         name: "agent_browser",
         label: "Agent Browser",
-        description: "Browse and interact with websites using agent-browser. Use this for web research, reading live docs, opening pages, taking snapshots or screenshots, clicking links, filling forms, extracting page content, and authenticated/profile-based browser work. Input choice: `script` for one-shot JavaScript orchestration; default `args` for open → snapshot -i → click/fill @refs; `semanticAction` for stable role/text/label targets; `job` or `qa` for multi-step checks; `electron` only for desktop apps; experimental `sourceLookup` / `networkSourceLookup` for candidates only.",
+        description: "Browse and interact with websites using agent-browser. Use this for reading live pages, opening known URLs, taking snapshots or screenshots, clicking links, filling forms, extracting page content, and authenticated/profile-based browser work. Input choice: `script` for one-shot JavaScript orchestration; default `args` for open → snapshot -i → click/fill @refs; `semanticAction` for stable role/text/label targets; `job` or `qa` for multi-step checks; `electron` only for desktop apps; experimental `sourceLookup` / `networkSourceLookup` for candidates only.",
         promptSnippet: "Browse websites, read live docs, click and fill pages, extract browser content, take screenshots, and automate real web workflows.",
         promptGuidelines: toolPromptGuidelines,
         parameters: AGENT_BROWSER_PARAMS,
@@ -1428,10 +1363,6 @@ export default function agentBrowserExtension(pi) {
             if (resolvedInput.status === "invalid") {
                 return buildValidationFailureResult(resolvedInput);
             }
-            const outputPathValidationError = getAgentBrowserOutputPathValidationError(outputPath, ctx.cwd);
-            if (outputPathValidationError) {
-                return buildValidationFailureResult({ attemptedKind: resolvedInput.kind, kind: "invalid", redactedArgs: resolvedInput.redactedArgs, status: "invalid", toolArgs: resolvedInput.toolArgs, toolStdin: resolvedInput.toolStdin, validationError: outputPathValidationError });
-            }
             const applyUnserializedOutputPath = async (result, preserveTextContent = false) => {
                 if (!outputPath || result.isError === true || (isRecord(result.details) && result.details.resultCategory === "failure"))
                     return result;
@@ -1451,10 +1382,8 @@ export default function agentBrowserExtension(pi) {
             const versionCheckCommand = extractUpstreamCommandTokens(resolvedInput.toolArgs)[0];
             const electronHostOnlyAction = resolvedInput.kind === "electron" && ["cleanup", "list", "status"].includes(resolvedInput.compiledElectron.action);
             const browserBackedVersionCheck = needsManagedSession(parseArgvDescriptor(resolvedInput.toolArgs));
-            if (!electronHostOnlyAction && browserBackedVersionCheck && !isPlainTextInspectionArgs(resolvedInput.toolArgs) && !isCloseCommand(versionCheckCommand) && signal?.aborted !== true) {
-                const versionFailure = resolvedInput.kind === "script"
-                    ? await withIsolatedAgentBrowserEnvironment(() => validateUpstreamVersion(ctx.cwd, signal))
-                    : await validateUpstreamVersion(ctx.cwd, signal);
+            if (resolvedInput.kind !== "script" && !electronHostOnlyAction && browserBackedVersionCheck && !isPlainTextInspectionArgs(resolvedInput.toolArgs) && !isCloseCommand(versionCheckCommand) && signal?.aborted !== true) {
+                const versionFailure = await validateUpstreamVersion(ctx.cwd, signal);
                 if (versionFailure)
                     return applyAgentBrowserOutputPath({ cwd: ctx.cwd, outputPath, result: versionFailure });
             }
@@ -1496,6 +1425,10 @@ export default function agentBrowserExtension(pi) {
                 });
                 activeScriptExecutions.add(scriptExecution);
                 try {
+                    // Keep preflight inside shutdown tracking so quit cannot race into starting the sandbox afterward.
+                    const versionFailure = await withIsolatedAgentBrowserEnvironment(() => validateUpstreamVersion(ctx.cwd, scriptController.signal));
+                    if (versionFailure)
+                        return applyAgentBrowserOutputPath({ cwd: ctx.cwd, outputPath, result: versionFailure });
                     const pendingRun = runAgentBrowserScript({
                         beforeFirstCall() {
                             appendScriptSessionLease(pi, sessionName, "active");
@@ -1666,7 +1599,6 @@ export default function agentBrowserExtension(pi) {
                 const generationAtStart = branchStateGeneration;
                 const sessionPageStateUpdate = sessionPageState.beginUpdate();
                 const browserRunState = {
-                    allowedDomainsBySession,
                     artifactManifest,
                     attachedSessionKeys,
                     closedManagedSessionNames: new Set(),
@@ -1688,7 +1620,6 @@ export default function agentBrowserExtension(pi) {
                     sessionPageState,
                     traceOwners,
                 };
-                const initialAllowedDomainsBySession = browserRunState.allowedDomainsBySession;
                 const initialArtifactManifest = browserRunState.artifactManifest;
                 const initialNetworkRoutesBySession = browserRunState.networkRoutesBySession;
                 const attachedSessionRequested = isAttachedBrowserInvocation(toolArgs)
@@ -1748,7 +1679,6 @@ export default function agentBrowserExtension(pi) {
                     }
                 }
                 if (branchRestoreStillCurrent) {
-                    allowedDomainsBySession = mergeBrowserRunMap(allowedDomainsBySession, initialAllowedDomainsBySession, browserRunState.allowedDomainsBySession);
                     networkRoutesBySession = mergeBrowserRunMap(networkRoutesBySession, initialNetworkRoutesBySession, browserRunState.networkRoutesBySession);
                     artifactManifest = mergeBrowserRunArtifactManifest(artifactManifest, initialArtifactManifest, browserRunState.artifactManifest);
                     const handledBatchCloseKeys = syncRecordingReservationsFromResult(result);

package/dist/extensions/agent-browser/lib/argv-grammar.js

@@ -12,6 +12,7 @@ export const GLOBAL_VALUE_FLAGS = [
     "--restore-check-fn",
     "--proxy",
     "--proxy-bypass",
+    "--ca-cert",
     "--headers",
     "--executable-path",
     "--extension",
@@ -37,6 +38,7 @@ export const GLOBAL_VALUE_FLAGS = [
     "--idle-timeout",
 ];
 export const COMMAND_VALUE_FLAGS = [
+    "--allowed-origins",
     "--baseline",
     "--body",
     "--categories",
@@ -47,6 +49,7 @@ export const COMMAND_VALUE_FLAGS = [
     "--domain",
     "--expires",
     "--filter",
+    "--frame",
     "--fn",
     "--label",
     "--load",
@@ -57,6 +60,7 @@ export const COMMAND_VALUE_FLAGS = [
     "--prefix",
     "--path",
     "--port",
+    "--params",
     "--resource-type",
     "--resource-types",
     "--sameSite",
@@ -90,7 +94,9 @@ export const GLOBAL_BOOLEAN_FLAGS_WITH_OPTIONAL_VALUES = new Set([
     "--ignore-https-errors",
     "--json",
     "--no-auto-dialog",
+    "--no-ca-cert",
     "--no-pin-tab",
+    "--no-webmcp",
     "--offline",
     "--pin-tab",
     "--quick",
@@ -169,7 +175,7 @@ export function isAgentBrowserSessionIdentityKeyInNamespace(identityKey, namespa
     const prefix = getAgentBrowserSessionIdentityKey("", namespace);
     return prefix ? identityKey.startsWith(prefix) : !identityKey.includes("\0");
 }
-/** Mirror upstream 0.34.0 global parsing: full argv, no `--` sentinel, and only global value payloads are skipped. */
+/** Mirror upstream global parsing: full argv, no `--` sentinel, and only global value payloads are skipped. */
 export function scanUpstreamGlobalFlagOccurrences(args, targetFlag) {
     const occurrences = [];
     for (let index = 0; index < args.length; index += 1) {
@@ -295,7 +301,7 @@ export function projectUpstreamGlobalFlags(args) {
     }
     return { indices, tokens };
 }
-/** Mirror upstream 0.34.0 clean_args: remove global flags wherever they appear before command parsing. */
+/** Mirror upstream clean_args: remove global flags wherever they appear before command parsing. */
 export function stripUpstreamGlobalFlags(args) {
     return projectUpstreamGlobalFlags(args).tokens;
 }

package/dist/extensions/agent-browser/lib/batch-lifecycle.js

@@ -53,7 +53,7 @@ export function getSuccessfulBatchCloseLifecycle(rows, fallbackCommands = []) {
             statePath = typeof result?.statePath === "string" ? result.statePath : undefined;
         }
         else if (sawClose && command === "record") {
-            if (browserLaunched === true || (subcommand === "stop" && browserLaunched === undefined)) {
+            if (browserLaunched !== false) {
                 endsClosed = false;
                 browserActiveAfterClose = true;
             }

package/dist/extensions/agent-browser/lib/command-policy.js

@@ -5,8 +5,7 @@ const EMPTY_BOOLEAN_FLAGS = new Set();
 const JSON_BOOLEAN_FLAGS = new Set(["--json"]);
 const AUTH_SAVE_BOOLEAN_FLAGS = new Set(["--json", "--password-stdin"]);
 const AUTH_SAVE_VALUE_FLAGS = new Set(["--password", "--password-selector", "--submit-selector", "--url", "--username", "--username-selector"]);
-const DASHBOARD_SUBCOMMANDS = new Set(["start", "stop"]);
-const DASHBOARD_START_VALUE_FLAGS = new Set(["--port"]);
+const DASHBOARD_VALUE_FLAGS = new Set(["--allowed-origins", "--port"]);
 const DOCTOR_BOOLEAN_FLAGS = new Set(["--fix", "--headed", "--json", "--offline", "--quick", "--webgpu"]);
 const INSTALL_BOOLEAN_FLAGS = new Set(["--with-deps", "-d"]);
 const STATE_SESSIONLESS_SUBCOMMANDS = new Set(["list", "show", "clear", "clean", "rename"]);
@@ -26,11 +25,9 @@ function isSessionlessAuthCommand(commandTokens) {
 }
 function isSessionlessDashboardCommand(commandTokens) {
     const [, subcommand, ...rest] = commandTokens;
-    if (subcommand === undefined)
-        return true;
-    if (!DASHBOARD_SUBCOMMANDS.has(subcommand))
-        return false;
-    return subcommand === "start" ? hasOnlyOptionFlags(rest, JSON_BOOLEAN_FLAGS, DASHBOARD_START_VALUE_FLAGS) : rest.length === 0;
+    if (subcommand === "stop")
+        return rest.length === 0;
+    return hasOnlyOptionFlags(subcommand === "start" ? rest : commandTokens.slice(1), JSON_BOOLEAN_FLAGS, DASHBOARD_VALUE_FLAGS);
 }
 function isSessionlessStateCommand(commandTokens) {
     const [, subcommand, firstArg, secondArg, ...rest] = commandTokens;

package/dist/extensions/agent-browser/lib/command-taxonomy.js

@@ -1,6 +1,7 @@
 const ADDITIONAL_COMMAND_TOKENS = [
-    "a11y", "auth", "chat", "clipboard", "confirm", "connect", "dashboard", "deny", "device", "dialog", "diff", "doctor", "errors", "eval", "find", "frame", "get", "highlight", "inspect", "install", "is", "mcp", "plugin", "plugins", "profiles", "profiler", "react", "record", "removeinitscript", "session", "set", "skills", "snapshot", "state", "stream", "trace", "upgrade", "vitals", "wait", "web-vitals", "window",
+    "a11y", "auth", "chat", "clipboard", "confirm", "connect", "dashboard", "deny", "device", "dialog", "diff", "doctor", "errors", "eval", "find", "frame", "get", "highlight", "inspect", "install", "is", "mcp", "plugin", "plugins", "profiles", "profiler", "react", "record", "removeinitscript", "session", "set", "skills", "snapshot", "state", "stream", "trace", "upgrade", "vitals", "wait", "web-vitals", "webmcp", "window",
 ];
+const WEBMCP_PAGE_MUTATION_SUBCOMMANDS = new Set(["invoke", "result", "cancel"]);
 const COMMAND_CAPABILITIES = [
     {
         command: "back",
@@ -309,8 +310,8 @@ export function isCloseAllCommand(commandTokens) {
 export function isOpenNavigationCommand(command) {
     return hasCommandCapability(command, "openNavigation");
 }
-export function isReadOnlyDiagnosticSessionTargetCommand(command, _subcommand) {
-    return hasCommandCapability(command, "readOnlyDiagnosticSessionTarget");
+export function isReadOnlyDiagnosticSessionTargetCommand(command, subcommand) {
+    return hasCommandCapability(command, "readOnlyDiagnosticSessionTarget") || (command === "webmcp" && subcommand === "list");
 }
 export function isSessionTabPinningExcludedCommand(command) {
     return hasCommandCapability(command, "excludedFromPinning");
@@ -326,8 +327,11 @@ export function isRecordPageTransitionCommand(tokens) {
         return true;
     return tokens[1] === "restart" && tokens.length >= 4;
 }
+export function isWebMcpPageMutationCommand(tokens) {
+    return isWebMcpPageMutation(tokens[0], tokens[1]);
+}
 export function isRefInvalidatingBatchCommand(step) {
-    return hasCommandCapability(step[0], "invalidatesBatchRefs") || isRecordPageTransitionCommand(step);
+    return hasCommandCapability(step[0], "invalidatesBatchRefs") || isRecordPageTransitionCommand(step) || isWebMcpPageMutationCommand(step);
 }
 export function isRefGuardedCommand(command) {
     return hasCommandCapability(command, "guardsPageRefs");
@@ -335,17 +339,21 @@ export function isRefGuardedCommand(command) {
 export function isElectronPostCommandHealthCommand(command) {
     return hasCommandCapability(command, "eligibleForElectronHealthProbe");
 }
-export function isNavigationObservableCommandName(command) {
-    return hasCommandCapability(command, "navigationObservable");
+function isWebMcpPageMutation(command, subcommand) {
+    return command === "webmcp" && WEBMCP_PAGE_MUTATION_SUBCOMMANDS.has(subcommand ?? "");
+}
+export function isNavigationObservableCommandName(command, subcommand) {
+    return hasCommandCapability(command, "navigationObservable") || isWebMcpPageMutation(command, subcommand);
 }
 export function isUnverifiedPageTransitionCommand(command, subcommand) {
     return ["back", "connect", "eval", "forward", "reload"].includes(command ?? "")
         || (command === "state" && subcommand === "load")
-        || (command === "tab" && subcommand !== undefined && !["list", "new"].includes(subcommand));
+        || (command === "tab" && subcommand !== undefined && !["list", "new"].includes(subcommand))
+        || isWebMcpPageMutation(command, subcommand);
 }
-export function isPageMutationCommand(command) {
-    return hasCommandCapability(command, "triggersPostMutationSnapshot");
+export function isPageMutationCommand(command, subcommand) {
+    return hasCommandCapability(command, "triggersPostMutationSnapshot") || isWebMcpPageMutation(command, subcommand);
 }
-export function isPageChangeSummaryCommand(command) {
-    return hasCommandCapability(command, "eligibleForPageChangeSummary");
+export function isPageChangeSummaryCommand(command, subcommand) {
+    return hasCommandCapability(command, "eligibleForPageChangeSummary") || isWebMcpPageMutation(command, subcommand);
 }

package/dist/extensions/agent-browser/lib/config-policy.js

@@ -7,10 +7,11 @@ import { join, resolve } from "node:path";
 /** @typedef {"global" | "project" | "override"} ConfigLayerScope */
 /** @typedef {"literal" | "env" | "command"} CredentialSourceKind */
 /** @typedef {"exa" | "brave"} WebSearchProvider */
+/** @typedef {"auto" | "fast" | "instant" | "deep-lite" | "deep" | "deep-reasoning"} ExaSearchType */
 /** @typedef {"exaApiKey" | "braveApiKey"} WebSearchProviderConfigKey */
 /** @typedef {{ provider: WebSearchProvider; apiKeyEnv: string; configKey: WebSearchProviderConfigKey; label: string }} WebSearchProviderDescriptor */
 /** @typedef {{ name: string; policy?: BrowserDefaultProfilePolicy }} BrowserDefaultProfileConfig */
-/** @typedef {{ enabled?: boolean; preferredProvider?: WebSearchProvider; braveApiKey?: string; exaApiKey?: string }} WebSearchConfig */
+/** @typedef {{ enabled?: boolean; preferredProvider?: WebSearchProvider; defaultSearchType?: ExaSearchType; braveApiKey?: string; exaApiKey?: string }} WebSearchConfig */
 /** @typedef {{ defaultProfile?: BrowserDefaultProfileConfig; executablePath?: string }} BrowserConfig */
 /** @typedef {{ version?: 1; webSearch?: WebSearchConfig; browser?: BrowserConfig }} AgentBrowserConfig */
 /** @typedef {{ config: AgentBrowserConfig; path: string; scope: ConfigLayerScope }} ConfigLayer */
@@ -45,6 +46,8 @@ export const WEB_SEARCH_PROVIDER_DESCRIPTORS = Object.freeze({
 export const WEB_SEARCH_PROVIDERS = Object.freeze(["exa", "brave"]);
 /** @type {WebSearchProvider} */
 export const DEFAULT_WEB_SEARCH_PROVIDER = "exa";
+/** @type {readonly ExaSearchType[]} */
+export const EXA_SEARCH_TYPES = Object.freeze(["auto", "fast", "instant", "deep-lite", "deep", "deep-reasoning"]);
 /** @type {Readonly<Record<WebSearchProvider, WebSearchProviderConfigKey>>} */
 export const WEB_SEARCH_PROVIDER_CONFIG_KEYS = Object.freeze({
     exa: WEB_SEARCH_PROVIDER_DESCRIPTORS.exa.configKey,
@@ -182,6 +185,24 @@ export function validateWebSearchProvider(value, path, errors) {
     }
     return provider;
 }
+/**
+ * @param {unknown} value
+ * @param {string} path
+ * @param {string[]} errors
+ * @returns {ExaSearchType | undefined}
+ */
+function validateExaSearchType(value, path, errors) {
+    if (value === undefined)
+        return undefined;
+    const searchType = validateString(value, path, errors)?.trim();
+    if (searchType === undefined)
+        return undefined;
+    if (!EXA_SEARCH_TYPES.includes(/** @type {ExaSearchType} */ (searchType))) {
+        errors.push(`${path} must be one of ${EXA_SEARCH_TYPES.join(", ")}.`);
+        return undefined;
+    }
+    return /** @type {ExaSearchType} */ (searchType);
+}
 /**
  * @param {unknown} value
  * @param {string} path
@@ -251,6 +272,9 @@ export function validateAgentBrowserConfig(value, path, errors, warnings) {
             const preferredProvider = validateWebSearchProvider(value.webSearch.preferredProvider, `${path}.webSearch.preferredProvider`, errors);
             if (preferredProvider)
                 webSearch.preferredProvider = preferredProvider;
+            const defaultSearchType = validateExaSearchType(value.webSearch.defaultSearchType, `${path}.webSearch.defaultSearchType`, errors);
+            if (defaultSearchType)
+                webSearch.defaultSearchType = defaultSearchType;
             for (const provider of WEB_SEARCH_PROVIDERS) {
                 const descriptor = getWebSearchProviderDescriptor(provider);
                 const apiKey = validateString(value.webSearch[descriptor.configKey], `${path}.webSearch.${descriptor.configKey}`, errors);

package/dist/extensions/agent-browser/lib/config.js

@@ -2,7 +2,7 @@ import { exec as execCallback } from "node:child_process";
 import { readFile } from "node:fs/promises";
 import { promisify } from "node:util";
 import { SECRET_COMMAND_TIMEOUT_MS, buildAgentBrowserConfigState, getAgentBrowserConfigPaths, getWebSearchCredentialSource, getWebSearchProviderOrder, loadAgentBrowserConfigStateSync, mergeAgentBrowserConfig, parseAgentBrowserConfigLayer, resolveEnvInterpolations, } from "./config-policy.js";
-export { AGENT_BROWSER_CONFIG_ENV, BRAVE_API_KEY_ENV, CONFIG_RELATIVE_PATH, DEFAULT_WEB_SEARCH_PROVIDER, EXA_API_KEY_ENV, GLOBAL_CONFIG_RELATIVE_PATH, SECRET_COMMAND_TIMEOUT_MS, WEB_SEARCH_PROVIDER_CONFIG_KEYS, WEB_SEARCH_PROVIDER_DESCRIPTORS, WEB_SEARCH_PROVIDER_ENV_VARS, WEB_SEARCH_PROVIDERS, buildAgentBrowserConfigState, buildWebSearchCredentialSources, canRegisterWebSearchTool, classifyCredentialSource, formatBrowserExecutableStatus, formatBrowserProfileStatus, getAgentBrowserConfigPaths, getCredentialSourceSummary, getGlobalAgentBrowserConfigPath, getProjectAgentBrowserConfigPath, getWebSearchCredentialSource, getWebSearchProviderConfigKey, getWebSearchProviderDescriptor, getWebSearchProviderEnvVar, getWebSearchProviderLabel, getWebSearchProviderOrder, hasPotentialCredentialSource, isPlaintextCredentialValue, isProjectSafeCredentialValueForProvider, isWebSearchProvider, loadAgentBrowserConfigStateSync, mergeAgentBrowserConfig, parseAgentBrowserConfigLayer, resolveEnvInterpolations, summarizeConfigFiles, validateAgentBrowserConfig, validateWebSearchProvider, } from "./config-policy.js";
+export { AGENT_BROWSER_CONFIG_ENV, BRAVE_API_KEY_ENV, CONFIG_RELATIVE_PATH, DEFAULT_WEB_SEARCH_PROVIDER, EXA_API_KEY_ENV, EXA_SEARCH_TYPES, GLOBAL_CONFIG_RELATIVE_PATH, SECRET_COMMAND_TIMEOUT_MS, WEB_SEARCH_PROVIDER_CONFIG_KEYS, WEB_SEARCH_PROVIDER_DESCRIPTORS, WEB_SEARCH_PROVIDER_ENV_VARS, WEB_SEARCH_PROVIDERS, buildAgentBrowserConfigState, buildWebSearchCredentialSources, canRegisterWebSearchTool, classifyCredentialSource, formatBrowserExecutableStatus, formatBrowserProfileStatus, getAgentBrowserConfigPaths, getCredentialSourceSummary, getGlobalAgentBrowserConfigPath, getProjectAgentBrowserConfigPath, getWebSearchCredentialSource, getWebSearchProviderConfigKey, getWebSearchProviderDescriptor, getWebSearchProviderEnvVar, getWebSearchProviderLabel, getWebSearchProviderOrder, hasPotentialCredentialSource, isPlaintextCredentialValue, isProjectSafeCredentialValueForProvider, isWebSearchProvider, loadAgentBrowserConfigStateSync, mergeAgentBrowserConfig, parseAgentBrowserConfigLayer, resolveEnvInterpolations, summarizeConfigFiles, validateAgentBrowserConfig, validateWebSearchProvider, } from "./config-policy.js";
 const exec = promisify(execCallback);
 async function readConfigLayer(path, scope, errors, warnings) {
     let raw;

package/dist/extensions/agent-browser/lib/input-modes/job.js

@@ -213,15 +213,6 @@ export function compileAgentBrowserJob(input) {
     }
     return { compiled: { args: failFast ? ["batch", "--bail"] : ["batch"], failFast, stdin: JSON.stringify(steps.map((step) => step.args)), steps } };
 }
-export function isHttpOrHttpsUrl(url) {
-    try {
-        const protocol = new URL(url).protocol;
-        return protocol === "http:" || protocol === "https:";
-    }
-    catch {
-        return false;
-    }
-}
 function describeQaChecksRun(checks) {
     const parts = [`load:${checks.loadState}`];
     if (checks.expectedText.length > 0)

package/dist/extensions/agent-browser/lib/input-modes/params.js

@@ -106,7 +106,7 @@ export function createAgentBrowserParamsSchema(Type = JsonSchema, StringEnum = l
             failFast: Type.Optional(Type.Boolean({ description: "Stop on first failure; default true." })),
             steps: Type.Array(Type.Object({
                 action: StringEnum(AGENT_BROWSER_JOB_STEP_ACTIONS),
-                url: Type.Optional(Type.String({ description: "Open URL or assertUrl glob." })),
+                url: Type.Optional(Type.String({ description: "Open URL, or assertUrl exact URL/glob that distinguishes the expected state from the starting page." })),
                 loadState: Type.Optional(StringEnum(AGENT_BROWSER_QA_LOAD_STATES, { description: "Readiness wait after open." })),
                 selector: Type.Optional(Type.String({ description: "Selector or @ref." })),
                 locator: Type.Optional(StringEnum(AGENT_BROWSER_SEMANTIC_LOCATORS, { description: "Locator when selector is omitted." })),

package/dist/extensions/agent-browser/lib/launch-scoped-flags.js

@@ -1,5 +1,5 @@
 import { findCommandStartIndex } from "./argv-descriptor.js";
-import { isBooleanFlagEnabled, optionalGlobalValueFlagConsumesNext } from "./argv-grammar.js";
+import { isBooleanFlagEnabled } from "./argv-grammar.js";
 export const LAUNCH_SCOPED_FLAG_DEFINITIONS = [
     {
         flag: "--auto-connect",
@@ -17,6 +17,14 @@ export const LAUNCH_SCOPED_FLAG_DEFINITIONS = [
         flag: "--cdp",
         reason: "selects the browser/CDP endpoint used when an upstream session is launched",
     },
+    {
+        flag: "--ca-cert",
+        reason: "selects isolated Chromium CA trust and may relaunch the browser",
+    },
+    {
+        flag: "--no-ca-cert",
+        reason: "clears retained isolated Chromium CA trust and may relaunch the browser",
+    },
     {
         flag: "--enable",
         reason: "selects built-in page init scripts before the upstream browser session is launched",
@@ -29,6 +37,10 @@ export const LAUNCH_SCOPED_FLAG_DEFINITIONS = [
         flag: "--webgpu",
         reason: "selects the platform-specific WebGPU browser launch preset",
     },
+    {
+        flag: "--no-webmcp",
+        reason: "selects whether locally launched Chrome enables experimental WebMCP support",
+    },
     {
         flag: "--init-script",
         reason: "registers page init scripts before the upstream browser session is launched",
@@ -120,6 +132,7 @@ export const MANAGED_RESTORE_INCOMPATIBLE_FLAGS = [
     "--user-agent",
     "--proxy",
     "--proxy-bypass",
+    "--ca-cert",
     "--ignore-https-errors",
     "--allow-file-access",
     "--webgpu",
@@ -148,6 +161,7 @@ export const MANAGED_RESTORE_INCOMPATIBLE_ENVS = [
     "AGENT_BROWSER_USER_AGENT",
     "AGENT_BROWSER_PROXY",
     "AGENT_BROWSER_PROXY_BYPASS",
+    "AGENT_BROWSER_CA_CERT",
     "AGENT_BROWSER_PLUGINS",
     "AGENT_BROWSER_IOS_DEVICE",
     "AGENT_BROWSER_IOS_UDID",
@@ -170,12 +184,12 @@ export function hasLaunchScopedFlagToken(args, flag) {
     const commandStartIndex = findCommandStartIndex(args);
     const command = commandStartIndex === undefined ? undefined : args[commandStartIndex];
     return args.some((token, index) => {
-        if (token !== flag && !token.startsWith(`${flag}=`))
+        if (token.startsWith(`${flag}=`))
+            return flag === "--restore";
+        if (token !== flag)
             return false;
         if (flag === "--auto-connect")
             return isBooleanFlagEnabled(args, flag);
-        if (flag === "--restore" && token === "--restore" && optionalGlobalValueFlagConsumesNext(flag, args[index + 1]))
-            return true;
         if (flag === "--state" && command === "wait" && commandStartIndex !== undefined && index > commandStartIndex)
             return false;
         return true;