pi-agent-browser-native 0.5.0 → 0.6.6

package/dist/extensions/agent-browser/lib/orchestration/browser-run/process-output.js

@@ -1,11 +1,10 @@
 import { rm } from "node:fs/promises";
 import { getAgentBrowserSessionIdentityKey, isAgentBrowserSessionIdentityKeyInNamespace } from "../../argv-grammar.js";
 import { batchHasSuccessfulCloseAll, getSuccessfulBatchCloseLifecycle } from "../../batch-lifecycle.js";
-import { isCloseAllCommand, isCloseCommand, isNavigationObservableCommandName, isOpenNavigationCommand, isRecordPageTransitionCommand, isUnverifiedPageTransitionCommand } from "../../command-taxonomy.js";
+import { isCloseAllCommand, isCloseCommand, isOpenNavigationCommand, isUnverifiedPageTransitionCommand } from "../../command-taxonomy.js";
 import { OPEN_RESULT_TAB_CORRECTION_FLAGS } from "../../launch-scoped-flags.js";
 import { cleanupElectronLaunchResources, inspectElectronLaunchStatus } from "../../electron/cleanup.js";
-import { getAllowedDomainsViolation, parseAllowedDomainsPolicyFromArgs } from "../../navigation-policy.js";
-import { getManagedSessionResultingPageState, getObservedBrowserPageValidationError, managedSessionCommandRequiresLivePageVerification } from "../../managed-session-state-policy.js";
+import { getResultingPageTargetState, commandRequiresLivePageVerification } from "../../page-target-validation.js";
 import { analyzeNetworkSourceLookupResults, analyzeSourceLookupResults, redactNetworkSourceLookupAnalysis } from "../../input-modes/lookups.js";
 import { analyzeQaPresetResults, analyzeQaPresetTimeout, buildQaCompactFailureText, buildQaCompactPassText, extractQaPageContext } from "../../input-modes/job.js";
 import { applyNetworkRouteRecords, buildNetworkRouteDiagnostics } from "../../results/network-routes.js";
@@ -14,7 +13,7 @@ import { getAgentBrowserErrorText, parseAgentBrowserEnvelope } from "../../resul
 import { omitUpstreamLifecycle } from "../../results/presentation/common.js";
 import { getClipboardWritePayloadCandidates, redactClipboardPermissionEcho, redactClipboardPermissionErrorValue } from "../../results/presentation/errors.js";
 import { shouldCaptureSemanticActionNavigationSummary } from "../../results/presentation/semantic-action.js";
-import { buildPageTransitionRefSnapshotInvalidation, commandExplicitlyTargetsAboutBlank, deriveSessionTabTarget, extractLatestRefSnapshotStateFromBatchResults, extractRefSnapshotFromData, extractSessionTabTargetFromBatchResults, extractSessionTabTargetFromCommandData, isAboutBlankSessionTabTarget, normalizeSessionTabTarget, } from "../../session-page-state.js";
+import { buildPageTransitionRefSnapshotInvalidation, commandExplicitlyTargetsAboutBlank, getCommandRefSnapshotInvalidation, deriveSessionTabTarget, extractLatestRefSnapshotStateFromBatchResults, extractRefSnapshotFromData, extractSessionTabTargetFromBatchResults, extractSessionTabTargetFromCommandData, isAboutBlankSessionTabTarget, normalizeSessionTabTarget, } from "../../session-page-state.js";
 import { isRecord } from "../../parsing.js";
 import { pruneOwnedManagedSessionRestoreSnapshots } from "../../managed-session-restore.js";
 import { isManagedSessionRestoreKey } from "../../managed-session-storage.js";
@@ -64,6 +63,35 @@ function isStreamEnableAlreadyEnabledNoop(options) {
     const message = (getEnvelopeErrorString(options.envelope) ?? "").trim().replace(/[.!]+$/, "").toLowerCase();
     return message === "streaming is already enabled for this session" || message === "streaming is already enabled" || message === "stream already enabled";
 }
+function isPendingWebMcpMutation(command, subcommand, data) {
+    return command === "webmcp"
+        && ["invoke", "result"].includes(subcommand ?? "")
+        && isRecord(data)
+        && data.status === "pending";
+}
+function isWebMcpSettlementCommand(command, subcommand) {
+    return command === "webmcp" && ["result", "cancel"].includes(subcommand ?? "");
+}
+function batchHasPendingWebMcpMutation(data) {
+    if (!Array.isArray(data))
+        return false;
+    return data.some((row) => {
+        if (!isRecord(row) || row.success === false || !Array.isArray(row.command) || !row.command.every((token) => typeof token === "string"))
+            return false;
+        const [command, subcommand] = extractUpstreamCommandTokens(row.command);
+        return isPendingWebMcpMutation(command, subcommand, row.result);
+    });
+}
+function batchHasFailedWebMcpSettlement(data) {
+    if (!Array.isArray(data))
+        return false;
+    return data.some((row) => {
+        if (!isRecord(row) || row.success !== false || !Array.isArray(row.command) || !row.command.every((token) => typeof token === "string"))
+            return false;
+        const [command, subcommand] = extractUpstreamCommandTokens(row.command);
+        return isWebMcpSettlementCommand(command, subcommand);
+    });
+}
 function batchStartedManagedBrowser(data) {
     if (!Array.isArray(data))
         return false;
@@ -120,7 +148,6 @@ export async function processBrowserOutput(input) {
     const { ctx, cwd, electronPostCommandStatusSettleMs, implicitSessionCloseTimeoutMs, sessionPageStateUpdate, signal, state } = input;
     const { prepared, processResult } = input;
     const { electronChildProcesses, electronLaunchRecords, sessionPageState, traceOwners } = state;
-    let allowedDomainsBySession = state.allowedDomainsBySession;
     let artifactManifest = state.artifactManifest;
     let freshSessionOrdinal = state.freshSessionOrdinal;
     let managedSessionActive = state.managedSessionActive;
@@ -183,7 +210,6 @@ export async function processBrowserOutput(input) {
         const sessionStateKey = getSessionContextKey(prepared.executionPlan.sessionName, prepared.executionPlan.namespace);
         const closeAllApplied = nestedBatchClosesAll || (directCloseAllRequested && succeeded);
         if (closeAllApplied) {
-            allowedDomainsBySession = withoutNamespaceEntries(allowedDomainsBySession, prepared.executionPlan.namespace);
             networkRoutesBySession = withoutNamespaceEntries(networkRoutesBySession, prepared.executionPlan.namespace);
             deleteNamespaceEntries(state.attachedSessionKeys, prepared.executionPlan.namespace);
             deleteNamespaceEntries(traceOwners, prepared.executionPlan.namespace);
@@ -197,8 +223,6 @@ export async function processBrowserOutput(input) {
             }
         }
         else if (nestedBatchClose && sessionStateKey) {
-            allowedDomainsBySession = new Map(allowedDomainsBySession);
-            allowedDomainsBySession.delete(sessionStateKey);
             networkRoutesBySession = new Map(networkRoutesBySession);
             networkRoutesBySession.delete(sessionStateKey);
             sessionPageState.clearSession(sessionStateKey);
@@ -227,33 +251,25 @@ export async function processBrowserOutput(input) {
                 presentationEnvelope = { ...(presentationEnvelope ?? {}), error: clickDispatchDiagnostic.summary, success: false };
             }
         }
-        const resultingPageState = getManagedSessionResultingPageState({
+        const tabTransition = prepared.executionPlan.commandInfo.command === "tab" && prepared.executionPlan.commandInfo.subcommand !== undefined && !["list", "new"].includes(prepared.executionPlan.commandInfo.subcommand);
+        const resultingPageState = getResultingPageTargetState({
             args: prepared.executionPlan.effectiveArgs,
             currentPageUrl: prepared.priorSessionTabTarget?.url,
             pageUrlUnknown: prepared.priorSessionTabTargetUnknown === true,
             stdin: prepared.runtimeToolStdin,
             trustedFirstBatchTabSelection: prepared.pinnedBatchUnwrapMode !== undefined,
         });
-        const presentationDataRecord = isRecord(presentationEnvelope?.data) ? presentationEnvelope.data : undefined;
-        const dataClicked = typeof presentationDataRecord?.clicked === "string" ? presentationDataRecord.clicked : undefined;
-        const cssClickWithoutHref = prepared.executionPlan.commandInfo.command === "click" && dataClicked !== undefined && !dataClicked.startsWith("@") && !dataClicked.startsWith("ref=") && typeof presentationDataRecord?.href !== "string";
-        const parsedAllowedDomainsPolicy = parseAllowedDomainsPolicyFromArgs(prepared.runtimeToolArgs);
-        const sessionAllowedDomainsPolicy = sessionStateKey
-            ? parsedAllowedDomainsPolicy ?? allowedDomainsBySession.get(sessionStateKey)
-            : parsedAllowedDomainsPolicy;
-        const shouldCaptureAllowedDomainNavigationSummary = sessionAllowedDomainsPolicy !== undefined && !cssClickWithoutHref && (prepared.executionPlan.commandInfo.command === "batch" || isNavigationObservableCommandName(prepared.executionPlan.commandInfo.command));
         if (succeeded &&
             !navigationSummary &&
-            (shouldCaptureNavigationSummary(prepared.executionPlan.commandInfo.command, presentationEnvelope?.data) ||
+            (shouldCaptureNavigationSummary(prepared.executionPlan.commandInfo.command, presentationEnvelope?.data, prepared.executionPlan.commandInfo.subcommand) ||
                 shouldCaptureSemanticActionNavigationSummary(prepared.compiledSemanticAction, presentationEnvelope?.data) ||
-                shouldCaptureAllowedDomainNavigationSummary ||
-                managedSessionCommandRequiresLivePageVerification(prepared.executionPlan.effectiveArgs, prepared.runtimeToolStdin) ||
-                (prepared.executionPlan.commandInfo.command === "tab" && prepared.executionPlan.commandInfo.subcommand === "close"))) {
-            navigationSummary = await collectNavigationSummary({ cwd, namespace: prepared.executionPlan.namespace, priorTarget: prepared.priorSessionTabTarget, sessionName: prepared.executionPlan.sessionName, signal });
+                commandRequiresLivePageVerification(prepared.executionPlan.effectiveArgs, prepared.runtimeToolStdin) ||
+                tabTransition)) {
+            navigationSummary = await collectNavigationSummary({ cwd, namespace: prepared.executionPlan.namespace, priorTarget: prepared.priorSessionTabTarget, reusePriorTitle: !tabTransition, sessionName: prepared.executionPlan.sessionName, signal });
         }
         // A failed eval/back/forward/reload/state-load/tab would otherwise drop the page to unverified and force the
-        // agent through a manual get url round trip. Probe the live URL ourselves instead: an observed http(s) page
-        // stays verified, a file URL keeps the local-file gate closed through currentSessionTabTarget, and a failed
+        // agent through a manual get url round trip. Probe the live URL ourselves instead: an observed page
+        // stays verified, and a failed
         // probe preserves the existing unknown-target behavior.
         if (succeeded === false &&
             !navigationSummary &&
@@ -281,15 +297,16 @@ export async function processBrowserOutput(input) {
         }
         const verifiesCurrentUrl = prepared.executionPlan.commandInfo.command === "get" && prepared.executionPlan.commandInfo.subcommand === "url";
         const trustsReportedPageTarget = !resultingPageState.pageUrlUnknown || verifiesCurrentUrl;
-        const observedSessionTabTarget = normalizeSessionTabTarget(navigationSummary)
-            ?? (trustsReportedPageTarget ? extractSessionTabTargetFromBatchResults(presentationEnvelope?.data) : undefined)
-            ?? (succeeded && trustsReportedPageTarget ? extractSessionTabTargetFromCommandData(prepared.commandTokens, presentationEnvelope?.data) : undefined);
-        const observedPageValidationError = succeeded ? getObservedBrowserPageValidationError(prepared.executionPlan.effectiveArgs, observedSessionTabTarget?.url, cwd) : undefined;
-        if (observedPageValidationError) {
-            succeeded = false;
-            presentationEnvelope = { error: observedPageValidationError, success: false };
-        }
-        const safeObservedSessionTabTarget = observedPageValidationError ? normalizeSessionTabTarget({ url: observedSessionTabTarget?.url }) : observedSessionTabTarget;
+        const pendingWebMcpMutation = isPendingWebMcpMutation(prepared.executionPlan.commandInfo.command, prepared.executionPlan.commandInfo.subcommand, presentationEnvelope?.data) || (prepared.executionPlan.commandInfo.command === "batch" && batchHasPendingWebMcpMutation(presentationEnvelope?.data));
+        const failedWebMcpSettlement = prepared.priorSessionTabTargetUnknown === true && ((!succeeded && isWebMcpSettlementCommand(prepared.executionPlan.commandInfo.command, prepared.executionPlan.commandInfo.subcommand))
+            || (prepared.executionPlan.commandInfo.command === "batch" && batchHasFailedWebMcpSettlement(presentationEnvelope?.data)));
+        const unsettledWebMcpMutation = pendingWebMcpMutation || failedWebMcpSettlement;
+        const observedSessionTabTarget = unsettledWebMcpMutation
+            ? undefined
+            : normalizeSessionTabTarget(navigationSummary)
+                ?? (trustsReportedPageTarget ? extractSessionTabTargetFromBatchResults(presentationEnvelope?.data) : undefined)
+                ?? (succeeded && trustsReportedPageTarget ? extractSessionTabTargetFromCommandData(prepared.commandTokens, presentationEnvelope?.data) : undefined);
+        const safeObservedSessionTabTarget = observedSessionTabTarget;
         let currentSessionTabTarget = safeObservedSessionTabTarget;
         if (!currentSessionTabTarget && nestedBatchClose === undefined) {
             currentSessionTabTarget = resultingPageState.pageTargetMayHaveChanged
@@ -301,7 +318,7 @@ export async function processBrowserOutput(input) {
         let electronRefFreshnessDiagnostic;
         let electronSessionMismatch;
         let electronStatusAfterCommand;
-        const shouldTreatAboutBlankAsMismatch = succeeded && nestedBatchClose === undefined && prepared.priorSessionTabTarget !== undefined && !isAboutBlankSessionTabTarget(prepared.priorSessionTabTarget) && isAboutBlankSessionTabTarget(observedSessionTabTarget ?? currentSessionTabTarget) && !commandExplicitlyTargetsAboutBlank(prepared.commandTokens);
+        const shouldTreatAboutBlankAsMismatch = succeeded && !tabTransition && nestedBatchClose === undefined && prepared.priorSessionTabTarget !== undefined && !isAboutBlankSessionTabTarget(prepared.priorSessionTabTarget) && isAboutBlankSessionTabTarget(observedSessionTabTarget ?? currentSessionTabTarget) && !commandExplicitlyTargetsAboutBlank(prepared.commandTokens);
         let sessionTabCorrection = prepared.sessionTabCorrection;
         if (shouldTreatAboutBlankAsMismatch && prepared.priorSessionTabTarget) {
             const aboutBlankObservedTarget = observedSessionTabTarget ?? currentSessionTabTarget;
@@ -328,18 +345,6 @@ export async function processBrowserOutput(input) {
                     sessionTabCorrection = appliedPostCommandCorrection;
             }
         }
-        if (succeeded && sessionStateKey && parsedAllowedDomainsPolicy) {
-            allowedDomainsBySession = new Map(allowedDomainsBySession);
-            allowedDomainsBySession.set(sessionStateKey, parsedAllowedDomainsPolicy);
-        }
-        const allowedDomainsViolation = succeeded ? getAllowedDomainsViolation({
-            policy: sessionAllowedDomainsPolicy,
-            url: currentSessionTabTarget?.url ?? observedSessionTabTarget?.url ?? navigationSummary?.url,
-        }) : undefined;
-        if (allowedDomainsViolation) {
-            succeeded = false;
-            presentationEnvelope = { ...(presentationEnvelope ?? {}), error: allowedDomainsViolation.summary, success: false };
-        }
         const electronRecordForCommand = findElectronLaunchRecordForSession(prepared.executionPlan.sessionName, electronLaunchRecords, prepared.executionPlan.namespace);
         if (succeeded && electronRecordForCommand && shouldInspectElectronPostCommandHealth(prepared.executionPlan.commandInfo.command)) {
             electronStatusAfterCommand ??= await inspectElectronLaunchStatus(electronRecordForCommand);
@@ -391,8 +396,6 @@ export async function processBrowserOutput(input) {
             const sessionClosed = (isCloseCommand(prepared.executionPlan.commandInfo.command) && succeeded) || nestedBatchClosed;
             if (sessionClosed) {
                 state.attachedSessionKeys.delete(sessionStateKey);
-                allowedDomainsBySession = new Map(allowedDomainsBySession);
-                allowedDomainsBySession.delete(sessionStateKey);
                 networkRoutesBySession = new Map(networkRoutesBySession);
                 networkRoutesBySession.delete(sessionStateKey);
                 sessionPageState.clearSession(sessionStateKey);
@@ -400,17 +403,21 @@ export async function processBrowserOutput(input) {
             }
             else {
                 // A batch that times out or returns unparseable output yields no result rows, but the daemon
-                // may already have executed a recording page swap; fall back to the planned steps then. This
-                // also fires for wrapper-replaced envelopes and upstream pre-loop errors where nothing ran,
-                // which only over-invalidates (one extra snapshot), never under-invalidates.
-                const plannedBatchRecordSwap = !Array.isArray(presentationEnvelope?.data) && batchCommandSteps.some((step) => isRecordPageTransitionCommand(step));
-                const pageTransitionInvalidation = processResult.agentBrowserStarted && (isRecordPageTransitionCommand(prepared.commandTokens) || plannedBatchRecordSwap)
-                    ? buildPageTransitionRefSnapshotInvalidation()
-                    : failedTransitionReverification
-                        ? buildPageTransitionRefSnapshotInvalidation("A failed eval/back/forward/reload/connect/state-load/tab command may still have changed the page, so the prior snapshot refs were invalidated. Run snapshot -i before using page-scoped refs.")
-                        : batchRefSnapshotState?.invalidation?.reason === "page-transition"
-                            ? batchRefSnapshotState.invalidation
-                            : undefined;
+                // may already have executed a recording swap or page-provided WebMCP tool; fall back to the
+                // planned steps then. This can over-invalidate by one snapshot, but never under-invalidates.
+                const directTransitionInvalidation = getCommandRefSnapshotInvalidation(prepared.commandTokens);
+                const plannedBatchTransitionInvalidation = !Array.isArray(presentationEnvelope?.data)
+                    ? batchCommandSteps.map(getCommandRefSnapshotInvalidation).find((invalidation) => invalidation !== undefined)
+                    : undefined;
+                const pageTransitionInvalidation = unsettledWebMcpMutation
+                    ? buildPageTransitionRefSnapshotInvalidation("A detached WebMCP invocation is still pending or failed to settle and can mutate, rerender, or navigate the page, so prior snapshot refs remain invalid after URL verification. Run webmcp result or cancel, then take a fresh snapshot before using page-scoped refs.")
+                    : processResult.agentBrowserStarted && (directTransitionInvalidation || plannedBatchTransitionInvalidation)
+                        ? directTransitionInvalidation ?? plannedBatchTransitionInvalidation
+                        : failedTransitionReverification
+                            ? buildPageTransitionRefSnapshotInvalidation("A failed eval/back/forward/reload/connect/state-load/tab command may still have changed the page, so the prior snapshot refs were invalidated. Run snapshot -i before using page-scoped refs.")
+                            : batchRefSnapshotState?.invalidation?.reason === "page-transition"
+                                ? batchRefSnapshotState.invalidation
+                                : undefined;
                 if (currentSessionTabTarget) {
                     const tabUpdate = sessionPageState.applyTabTarget({ sessionName: sessionStateKey, target: currentSessionTabTarget, update: sessionPageStateUpdate });
                     if (!tabUpdate.applied && succeeded)
@@ -419,7 +426,13 @@ export async function processBrowserOutput(input) {
                 else if (processResult.agentBrowserStarted && (resultingPageState.pageUrlUnknown || resultingPageState.pageTargetMayHaveChanged)) {
                     sessionPageState.markTabTargetUnknown({ sessionName: sessionStateKey, update: sessionPageStateUpdate });
                 }
-                const refSnapshot = prepared.executionPlan.commandInfo.command === "batch" ? batchRefSnapshotState?.snapshot : succeeded ? prepared.executionPlan.commandInfo.command === "snapshot" ? extractRefSnapshotFromData(presentationEnvelope?.data) : prepared.resolvedSemanticActionRefSnapshot ?? overlayBlockerDiagnostic?.snapshot : undefined;
+                const refSnapshot = unsettledWebMcpMutation
+                    ? undefined
+                    : prepared.executionPlan.commandInfo.command === "batch"
+                        ? batchRefSnapshotState?.snapshot
+                        : succeeded
+                            ? prepared.executionPlan.commandInfo.command === "snapshot" ? extractRefSnapshotFromData(presentationEnvelope?.data) : prepared.resolvedSemanticActionRefSnapshot ?? overlayBlockerDiagnostic?.snapshot
+                            : undefined;
                 if (refSnapshot) {
                     const refUpdate = sessionPageState.applyRefSnapshot({ fallbackTarget: currentSessionTabTarget, sessionName: sessionStateKey, snapshot: refSnapshot, update: sessionPageStateUpdate });
                     currentRefSnapshot = refUpdate.refSnapshot;
@@ -458,7 +471,6 @@ export async function processBrowserOutput(input) {
             : closeCommandSucceeded && prepared.executionPlan.sessionName === priorManagedSessionName && closeTargetsPriorManagedNamespace
                 ? prepared.executionPlan.sessionName
                 : prepared.executionPlan.managedSessionName;
-        const policyBlockedFreshManagedSession = allowedDomainsViolation !== undefined && prepared.sessionMode === "fresh" && prepared.executionPlan.managedSessionName === prepared.executionPlan.sessionName;
         const postLaunchBatchFailure = !succeeded && processSucceeded && parseSucceeded && prepared.sessionMode === "fresh" && prepared.executionPlan.commandInfo.command === "batch" && batchStartedManagedBrowser(presentationEnvelope?.data);
         const postLaunchTimeoutWithPage = !succeeded && processResult.timedOut && prepared.sessionMode === "fresh" && prepared.executionPlan.commandInfo.command === "batch" && timeoutPartialProgress?.liveUrlRecovered === true;
         const failedFreshSessionMayHaveStarted = !succeeded
@@ -479,7 +491,7 @@ export async function processBrowserOutput(input) {
         }
         // Only a confirmed inactive daemon proves that a started fresh command did not establish browser ownership.
         const postLaunchFreshFailure = failedFreshDaemon !== undefined && failedFreshDaemon.status !== "inactive";
-        const managedTransitionSucceeded = succeeded || nestedBatchClosed || nestedBatchRemainsActive || policyBlockedFreshManagedSession || postLaunchBatchFailure || postLaunchTimeoutWithPage || postLaunchFreshFailure;
+        const managedTransitionSucceeded = succeeded || nestedBatchClosed || nestedBatchRemainsActive || postLaunchBatchFailure || postLaunchTimeoutWithPage || postLaunchFreshFailure;
         const managedSessionState = resolveManagedSessionState({ command: commandClosesSession ? "close" : prepared.executionPlan.commandInfo.command, managedSessionName: managedCloseSessionName, managedSessionNamespace: prepared.executionPlan.namespace, priorActive: priorManagedSessionActive, priorNamespace: priorManagedSessionNamespace, priorSessionName: priorManagedSessionName, succeeded: managedTransitionSucceeded });
         if (!managedTransitionSucceeded && prepared.sessionMode === "fresh" && prepared.executionPlan.managedSessionName) {
             state.managedSessionRestoreState.clear(prepared.executionPlan.managedSessionName, prepared.executionPlan.namespace);
@@ -528,9 +540,7 @@ export async function processBrowserOutput(input) {
                 sessionPageState.clearRestorePinning(sessionStateKey);
         }
         if (replacedManagedSessionName) {
-            allowedDomainsBySession = new Map(allowedDomainsBySession);
             const replacedSessionStateKey = getSessionContextKey(replacedManagedSessionName, priorManagedSessionNamespace);
-            allowedDomainsBySession.delete(replacedSessionStateKey ?? replacedManagedSessionName);
             networkRoutesBySession = new Map(networkRoutesBySession);
             networkRoutesBySession.delete(replacedSessionStateKey ?? replacedManagedSessionName);
             sessionPageState.clearSession(replacedSessionStateKey ?? replacedManagedSessionName);
@@ -585,8 +595,6 @@ export async function processBrowserOutput(input) {
                     }
                     if (!closeError) {
                         state.closedManagedSessionNames.add(electronSessionStateKey);
-                        allowedDomainsBySession = new Map(allowedDomainsBySession);
-                        allowedDomainsBySession.delete(electronSessionStateKey);
                         networkRoutesBySession = new Map(networkRoutesBySession);
                         networkRoutesBySession.delete(electronSessionStateKey);
                         sessionPageState.clearSession(electronSessionStateKey);
@@ -626,8 +634,6 @@ export async function processBrowserOutput(input) {
                 presentationEnvelope = { ...presentationEnvelope, error: redactClipboardPermissionErrorValue(prepared.executionPlan.commandInfo, presentationEnvelope.error, clipboardWritePayloadCandidates) };
         }
         const presentation = plainTextInspection ? { artifacts: undefined, batchFailure: undefined, batchSteps: undefined, content: [{ type: "text", text: inspectionText ?? "" }], data: undefined, fullOutputPath: undefined, fullOutputPaths: undefined, imagePath: undefined, imagePaths: undefined, savedFile: undefined, savedFilePath: undefined, summary: `${prepared.redactedArgs.join(" ")} completed` } : await buildToolPresentation({ args: prepared.redactedProcessArgs, artifactManifest, artifactMaxUpdatedAtMs: Date.now(), artifactMinUpdatedAtMs: input.artifactRunStartedAtMs, artifactRequest: screenshotArtifactRequest, batchArtifactRequests: batchScreenshotArtifactRequests, commandInfo: prepared.executionPlan.commandInfo, compiledSemanticAction: prepared.compiledSemanticAction, cwd, envelope: presentationEnvelope, errorText, namespace: prepared.executionPlan.namespace, networkRouteDiagnostics, networkRoutes: activeNetworkRoutes, persistentArtifactStore, sessionName: prepared.executionPlan.sessionName });
-        if (observedPageValidationError)
-            presentation.failureCategory = "validation-error";
         if (electronHandoff?.error && electronHandoff.failureCategory)
             presentation.failureCategory = electronHandoff.failureCategory;
         networkRoutesBySession = applyBatchNetworkRouteState({ data: presentationEnvelope?.data, routesBySession: networkRoutesBySession, sessionName: sessionStateKey, succeeded });
@@ -749,11 +755,11 @@ export async function processBrowserOutput(input) {
         const resultHeadedManagedAutosaveInterval = resultRetainsPreparedManagedSession && !(commandClosesSession && succeeded)
             ? prepared.ownedManagedSessionContext?.headedManagedAutosaveInterval
             : undefined;
-        const result = buildFinalAgentBrowserToolResult({ aboutBlankSessionMismatch, artifactCleanup, categoryDetails: finalRecoveryState.categoryDetails, clickDispatchDiagnostic, commandTokens: prepared.commandTokens, comboboxFocusDiagnostic, compiledNetworkSourceLookup: prepared.compiledNetworkSourceLookup, compiledSemanticAction: prepared.compiledSemanticAction, compatibilityWorkaround: prepared.compatibilityWorkaround, currentRefSnapshot, currentRefSnapshotInvalidation, currentSessionTabTarget, currentSessionTabTargetUnknown, electronBroadGetTextScopeDiagnostics, electronFailedConnectCleanup, electronHandoff, electronLaunch: prepared.electronLaunch, electronLaunchRecord, electronLaunchRecords, electronPostCommandHealth, electronProfileIsolationDetails: input.electronProfileIsolationDetails, electronRefFreshnessDiagnostic, electronSessionMismatch, errorText, evalResultWarning, evalStdinHint, exactSensitiveValues: prepared.exactSensitiveValues, executionPlan: prepared.executionPlan, fillVerificationDiagnostic, inspectionText, managedSessionHeadedAutosaveDisabled: resultHeadedManagedAutosaveDisabled || undefined, managedSessionHeadedAutosaveInterval: resultHeadedManagedAutosaveInterval, managedSessionOutcome, managedSessionRestoreDisabled: state.managedSessionRestoreState.isDisabled(prepared.executionPlan.sessionName, prepared.executionPlan.namespace), navigationSummary, networkSourceLookup, noActivePageSnapshotFailure: finalRecoveryState.noActivePageSnapshotFailure, openResultTabCorrection, overlayBlockerDiagnostic, parseError, parseFailureOutput, parseSucceeded, plainTextInspection, presentation, presentationEnvelope, priorSessionTabTarget: prepared.priorSessionTabTarget, processResult, qaAttachedTarget, qaPreset, recordingDependencyWarning, redactedArgs: prepared.redactedArgs, redactedCompiledElectron: prepared.redactedCompiledElectron, redactedCompiledJob: prepared.redactedCompiledJob, redactedCompiledNetworkSourceLookup: prepared.redactedCompiledNetworkSourceLookup, redactedCompiledQaPreset: prepared.redactedCompiledQaPreset, redactedCompiledSemanticAction: prepared.redactedCompiledSemanticAction, redactedCompiledSourceLookup: prepared.redactedCompiledSourceLookup, redactedContent, redactedProcessArgs: prepared.redactedProcessArgs, redactedRecoveryHint: prepared.redactedRecoveryHint, resultArtifactManifest, richInputRecoveryDiagnostic: finalRecoveryState.richInputRecoveryDiagnostic, scrollNoopDiagnostic, selectorTextVisibilityDiagnostics, sessionMode: prepared.sessionMode, sessionTabCorrection, sourceLookup, succeeded, timeoutPartialProgress, userRequestedJson: prepared.userRequestedJson, visibleRefFallbackDiagnostic: finalRecoveryState.visibleRefFallbackDiagnostic, visibleRefFallbackSessionName: finalRecoveryState.visibleRefFallbackSessionName });
+        const result = buildFinalAgentBrowserToolResult({ aboutBlankSessionMismatch, artifactCleanup, categoryDetails: finalRecoveryState.categoryDetails, clickDispatchDiagnostic, commandTokens: prepared.commandTokens, comboboxFocusDiagnostic, compiledNetworkSourceLookup: prepared.compiledNetworkSourceLookup, compiledSemanticAction: prepared.compiledSemanticAction, compatibilityWorkaround: prepared.compatibilityWorkaround, currentRefSnapshot, currentRefSnapshotInvalidation, currentSessionTabTarget, currentSessionTabTargetUnknown, electronBroadGetTextScopeDiagnostics, electronFailedConnectCleanup, electronHandoff, electronLaunch: prepared.electronLaunch, electronLaunchRecord, electronLaunchRecords, electronPostCommandHealth, electronProfileIsolationDetails: input.electronProfileIsolationDetails, electronRefFreshnessDiagnostic, electronSessionMismatch, errorText, evalResultWarning, evalStdinHint, exactSensitiveValues: prepared.exactSensitiveValues, executionPlan: prepared.executionPlan, fillVerificationDiagnostic, headedLaunch: prepared.headedLaunch, inspectionText, preserveAttachedBrowserSession: input.preserveAttachedBrowserSession === true, providerLaunch: prepared.providerLaunch, managedSessionHeadedAutosaveDisabled: resultHeadedManagedAutosaveDisabled || undefined, managedSessionHeadedAutosaveInterval: resultHeadedManagedAutosaveInterval, managedSessionOutcome, managedSessionRestoreDisabled: state.managedSessionRestoreState.isDisabled(prepared.executionPlan.sessionName, prepared.executionPlan.namespace), navigationSummary, networkSourceLookup, noActivePageSnapshotFailure: finalRecoveryState.noActivePageSnapshotFailure, openResultTabCorrection, overlayBlockerDiagnostic, parseError, parseFailureOutput, parseSucceeded, plainTextInspection, presentation, presentationEnvelope, priorSessionTabTarget: prepared.priorSessionTabTarget, processResult, qaAttachedTarget, qaPreset, recordingDependencyWarning, redactedArgs: prepared.redactedArgs, redactedCompiledElectron: prepared.redactedCompiledElectron, redactedCompiledJob: prepared.redactedCompiledJob, redactedCompiledNetworkSourceLookup: prepared.redactedCompiledNetworkSourceLookup, redactedCompiledQaPreset: prepared.redactedCompiledQaPreset, redactedCompiledSemanticAction: prepared.redactedCompiledSemanticAction, redactedCompiledSourceLookup: prepared.redactedCompiledSourceLookup, redactedContent, redactedProcessArgs: prepared.redactedProcessArgs, redactedRecoveryHint: prepared.redactedRecoveryHint, resultArtifactManifest, richInputRecoveryDiagnostic: finalRecoveryState.richInputRecoveryDiagnostic, scrollNoopDiagnostic, selectorTextVisibilityDiagnostics, sessionMode: prepared.sessionMode, sessionTabCorrection, sourceLookup, succeeded, timeoutPartialProgress, unsettledWebMcpMutation, userRequestedJson: prepared.userRequestedJson, visibleRefFallbackDiagnostic: finalRecoveryState.visibleRefFallbackDiagnostic, visibleRefFallbackSessionName: finalRecoveryState.visibleRefFallbackSessionName });
         const resultWithCloseAll = closeAllApplied
             ? { ...result, details: { ...(isRecord(result.details) ? result.details : {}), closeAllApplied: true } }
             : result;
-        const statePatch = { allowedDomainsBySession, artifactManifest, freshSessionOrdinal, managedSessionActive, managedSessionCompatibilityWorkaround, managedSessionHeadedAutosaveDisabled, managedSessionHeadedAutosaveInterval, managedSessionCwd, managedSessionName, managedSessionNamespace, networkRoutesBySession };
+        const statePatch = { artifactManifest, freshSessionOrdinal, managedSessionActive, managedSessionCompatibilityWorkaround, managedSessionHeadedAutosaveDisabled, managedSessionHeadedAutosaveInterval, managedSessionCwd, managedSessionName, managedSessionNamespace, networkRoutesBySession };
         return { result: resultWithCloseAll, statePatch };
     }
     finally {

package/dist/extensions/agent-browser/lib/orchestration/browser-run/session-state.js

@@ -13,8 +13,6 @@ export const NAVIGATION_SUMMARY_EVAL = `({ title: document.title, url: location.
 export function applyBrowserRunStatePatch(state, patch) {
     if (!patch)
         return;
-    if (patch.allowedDomainsBySession)
-        state.allowedDomainsBySession = patch.allowedDomainsBySession;
     if ("artifactManifest" in patch)
         state.artifactManifest = patch.artifactManifest;
     if (patch.freshSessionOrdinal !== undefined)
@@ -249,12 +247,13 @@ export function extractNavigationSummaryFromData(data) {
     const result = isRecord(data) && isRecord(data.result) ? data.result : data;
     const title = extractStringResultField(result, "title");
     const url = extractStringResultField(result, "url");
-    return title || url ? { title, url } : undefined;
+    const urlChanged = isRecord(result) && typeof result.urlChanged === "boolean" ? result.urlChanged : undefined;
+    return title || url ? { title, url, urlChanged } : undefined;
 }
-export function shouldCaptureNavigationSummary(command, data) {
+export function shouldCaptureNavigationSummary(command, data, subcommand) {
     if (command === "eval")
         return true;
-    return (isNavigationObservableCommandName(command) &&
+    return (isNavigationObservableCommandName(command, subcommand) &&
         (!isRecord(data) || (typeof data.title !== "string" && typeof data.url !== "string")));
 }
 export function mergeNavigationSummaryIntoData(data, navigationSummary) {
@@ -442,7 +441,7 @@ export function buildPinnedBatchPlan(options) {
     if (options.commandTokens.length === 0) {
         return undefined;
     }
-    const includeNavigationSummary = isNavigationObservableCommandName(options.command);
+    const includeNavigationSummary = isNavigationObservableCommandName(options.command, options.commandTokens[1]);
     const tabSelectionStep = ["tab", options.selectedTab];
     const commandStep = options.commandTokens;
     const navigationSummarySteps = includeNavigationSummary ? [["eval", NAVIGATION_SUMMARY_EVAL]] : [];
@@ -532,11 +531,10 @@ export function unwrapPinnedSessionBatchEnvelope(options) {
     };
 }
 export async function runSessionCommandData(options) {
-    const { allowManagedSessionTarget, args, cwd, namespace, pinNamespace, sessionName, signal, stdin, throwOnFailure, timeoutMs } = options;
+    const { args, cwd, namespace, pinNamespace, sessionName, signal, stdin, throwOnFailure, timeoutMs } = options;
     if (!sessionName)
         return undefined;
     const processResult = await runAgentBrowserProcess({
-        allowManagedSessionTarget,
         args: ["--json", ...(namespace !== undefined || pinNamespace ? ["--namespace", namespace ?? ""] : []), "--session", sessionName, ...args],
         cwd,
         signal,

package/dist/extensions/agent-browser/lib/orchestration/electron-host/index.js

@@ -2,7 +2,7 @@ import { cleanupElectronLaunchResources, inspectElectronLaunchStatus } from "../
 import { discoverElectronApps } from "../../electron/discovery.js";
 import { boundElectronProbeString } from "../../electron/cdp.js";
 import { buildOwnedManagedSessionRestoreContext, withOwnedManagedSessionContext, } from "../../managed-session-restore.js";
-import { getManagedSessionStateAccessValidationError } from "../../managed-session-state-policy.js";
+import { getPageTargetValidationError } from "../../page-target-validation.js";
 import { isRecord } from "../../parsing.js";
 import { withAttachedBrowserSessionContext } from "../../process.js";
 import { buildAgentBrowserNextActions } from "../../results/action-recommendations.js";
@@ -431,7 +431,6 @@ async function withOwnedElectronManagedSessionPolicy(options, run) {
 async function collectOwnedElectronManagedSessionTarget(options) {
     try {
         const target = await withOwnedElectronManagedSessionPolicy({ ...options, args: ["get", "url"] }, async () => await collectElectronManagedSessionTarget({
-            allowManagedSessionTarget: true,
             cwd: options.cwd,
             namespace: options.namespace,
             sessionName: options.sessionName,
@@ -446,7 +445,7 @@ async function collectOwnedElectronManagedSessionTarget(options) {
 }
 async function runElectronProbeCommandData(options) {
     try {
-        return { data: await runSessionCommandData({ ...options, allowManagedSessionTarget: true, pinNamespace: true, throwOnFailure: true }) };
+        return { data: await runSessionCommandData({ ...options, pinNamespace: true, throwOnFailure: true }) };
     }
     catch (error) {
         return { error: error instanceof Error ? error.message : String(error) };
@@ -460,9 +459,6 @@ async function collectElectronProbe(options) {
     const url = boundElectronProbeString(extractStringResultField(urlResult.data, "result") ?? extractStringResultField(urlResult.data, "url"), 300);
     if (!url)
         throw new Error("get url returned no active page URL.");
-    const fileAccessError = getManagedSessionStateAccessValidationError({ args: ["snapshot", "-i"], currentPageUrl: url, cwd: options.cwd });
-    if (fileAccessError)
-        throw new ElectronManagedSessionPolicyError(fileAccessError);
     const titleResult = await runElectronProbeCommandData({ ...commandContext, args: ["get", "title"] });
     const focusedResult = await runElectronProbeCommandData({ ...commandContext, args: ["eval", "--stdin"], stdin: ELECTRON_FOCUSED_ELEMENT_EVAL });
     const tabsResult = await runElectronProbeCommandData({ ...commandContext, args: ["tab", "list"] });
@@ -739,14 +735,13 @@ async function handleElectronHostInputInContext(options) {
             const probeNamespace = compiledElectron.launchId ? launchRecord?.namespace : managedSessionNamespace;
             const pageStateKey = getSessionPageStateKey(probeSessionName, probeNamespace) ?? probeSessionName;
             const currentPageState = sessionPageState.get(pageStateKey);
-            const fileAccessError = getManagedSessionStateAccessValidationError({
+            const pageTargetError = getPageTargetValidationError({
                 args: ["snapshot", "-i"],
                 currentPageUrl: currentPageState.tabTarget?.url,
-                cwd,
                 pageUrlUnknown: currentPageState.tabTargetUnknown === true,
             });
-            if (fileAccessError)
-                throw new ElectronManagedSessionPolicyError(fileAccessError);
+            if (pageTargetError)
+                throw new ElectronManagedSessionPolicyError(pageTargetError);
             const managedSessionOwner = ownedManagedSessions.get(pageStateKey);
             const headedManagedAutosaveDisabled = managedSessionOwner?.headedManagedAutosaveDisabled === true;
             const headedManagedAutosaveInterval = managedSessionOwner?.headedManagedAutosaveInterval;

package/dist/extensions/agent-browser/lib/orchestration/output-file.js

@@ -1,7 +1,7 @@
-import { mkdir, realpath, stat, writeFile } from "node:fs/promises";
-import { dirname, isAbsolute, resolve } from "node:path";
-import { getAgentBrowserStoragePathValidationError } from "../managed-session-state-policy.js";
+import { mkdir, readFile, realpath, stat, writeFile } from "node:fs/promises";
+import { dirname, extname, isAbsolute, resolve } from "node:path";
 import { isRecord } from "../parsing.js";
+import { isSessionArtifactManifest } from "../results/artifact-manifest.js";
 export function normalizeRequestedOutputPath(path) {
     return path.startsWith("@") ? path.slice(1) : path;
 }
@@ -11,11 +11,41 @@ function getTextContent(result) {
         .map((item) => item.text)
         .join("\n\n") ?? "";
 }
-function getOutputPayload(result) {
+function getOutputSource(result) {
+    return isRecord(result.details) && result.details.data !== undefined ? "details.data" : "content.text";
+}
+async function readCompactedSpill(path, manifest) {
+    if (!path || !manifest?.entries.some((entry) => entry.kind === "spill"
+        && (entry.path === path || entry.absolutePath === path)
+        && (entry.storageScope === "persistent-session" || entry.storageScope === "process-temp")
+        && (entry.retentionState === "live" || entry.retentionState === "ephemeral")))
+        throw new Error("Full compacted output is unavailable from the wrapper-managed spill; outputPath was not written.");
+    const text = await readFile(path, "utf8");
+    return extname(path) === ".json" ? JSON.parse(text) : text;
+}
+async function rehydrateCompactedData(data, details, manifest) {
+    if (isRecord(data) && data.compacted === true) {
+        return readCompactedSpill(typeof details.fullOutputPath === "string" ? details.fullOutputPath : undefined, manifest);
+    }
+    if (!Array.isArray(data))
+        return data;
+    const batchSteps = Array.isArray(details.batchSteps) ? details.batchSteps : [];
+    return Promise.all(data.map(async (row, index) => {
+        if (!isRecord(row) || !isRecord(row.result) || row.result.compacted !== true)
+            return row;
+        const step = isRecord(batchSteps[index]) ? batchSteps[index] : undefined;
+        const path = typeof step?.fullOutputPath === "string"
+            ? step.fullOutputPath
+            : typeof row.result.fullOutputPath === "string" ? row.result.fullOutputPath : undefined;
+        return { ...row, result: await readCompactedSpill(path, manifest) };
+    }));
+}
+async function getOutputPayload(result) {
     const details = isRecord(result.details) ? result.details : undefined;
-    if (details && details.data !== undefined)
-        return { source: "details.data", value: details.data };
-    return { source: "content.text", value: getTextContent(result) };
+    if (details?.data === undefined)
+        return { source: "content.text", value: getTextContent(result) };
+    const manifest = isSessionArtifactManifest(details.artifactManifest) ? details.artifactManifest : undefined;
+    return { source: "details.data", value: await rehydrateCompactedData(details.data, details, manifest) };
 }
 function serializeOutputPayload(value) {
     return typeof value === "string" ? value : `${JSON.stringify(value, null, 2)}\n`;
@@ -28,9 +58,6 @@ function appendOutputFileNotice(result, message) {
     }
     return [{ type: "text", text: message }, ...content];
 }
-export function getAgentBrowserOutputPathValidationError(outputPath, cwd) {
-    return outputPath ? getAgentBrowserStoragePathValidationError(normalizeRequestedOutputPath(outputPath), cwd) : undefined;
-}
 function getArtifactPaths(result, cwd) {
     const details = isRecord(result.details) ? result.details : undefined;
     if (!details || !Array.isArray(details.artifacts))
@@ -61,24 +88,16 @@ async function pathsReferToSameFile(left, right) {
 export async function applyAgentBrowserOutputPath(options) {
     if (!options.outputPath)
         return options.result;
-    const validationError = getAgentBrowserOutputPathValidationError(options.outputPath, options.cwd);
-    if (validationError) {
-        return {
-            content: [{ type: "text", text: validationError }],
-            details: { failureCategory: "validation-error", resultCategory: "failure", validationError },
-            isError: true,
-        };
-    }
     if (options.result.isError || (isRecord(options.result.details) && options.result.details.resultCategory === "failure"))
         return options.result;
     const requestedPath = normalizeRequestedOutputPath(options.outputPath);
     const absolutePath = isAbsolute(requestedPath) ? requestedPath : resolve(options.cwd, requestedPath);
-    const payload = getOutputPayload(options.result);
+    const source = getOutputSource(options.result);
     for (const artifactPath of getArtifactPaths(options.result, options.cwd)) {
         if (!await pathsReferToSameFile(absolutePath, artifactPath))
             continue;
         const message = "outputPath resolves to the same file as a browser artifact destination; choose a separate outputPath or omit it. The browser artifact was preserved.";
-        const outputFile = { absolutePath, error: message, path: requestedPath, source: payload.source, status: "failed" };
+        const outputFile = { absolutePath, error: message, path: requestedPath, source, status: "failed" };
         const details = isRecord(options.result.details) ? { ...options.result.details } : {};
         delete details.successCategory;
         return {
@@ -89,6 +108,7 @@ export async function applyAgentBrowserOutputPath(options) {
         };
     }
     try {
+        const payload = await getOutputPayload(options.result);
         const serialized = serializeOutputPayload(payload.value);
         await mkdir(dirname(absolutePath), { recursive: true });
         await writeFile(absolutePath, serialized, "utf8");
@@ -103,7 +123,7 @@ export async function applyAgentBrowserOutputPath(options) {
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
-        const outputFile = { absolutePath, error: message, path: requestedPath, source: payload.source, status: "failed" };
+        const outputFile = { absolutePath, error: message, path: requestedPath, source, status: "failed" };
         const details = isRecord(options.result.details)
             ? (() => {
                 const rest = { ...options.result.details };