pi-agent-browser-native 0.6.13 → 0.6.14

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## Unreleased
+
+## 0.6.14 - 2026-09-17
+
+### Changed
+
+- Recommend `agent-browser` 0.38.1 while retaining the stable 0.35.0 minimum and separate upstream installation.
+- Support native delta snapshots and persistent refs without treating partial revisions as empty pages; keep native delta baselines upstream-owned.
+- Preserve conditional screenshot options and skipped-image results without inventing files or attaching old images.
+- Parse session pointer modes and recording cursor/contact-sheet options, verify contact-sheet images, and surface native WebMCP catalog updates. Document stateful auth login and native recording timing fixes.
+
+### Fixed
+
+- Give automatic managed-session cleanup the normal 35-second command budget, rather than aborting during native Chrome's five-second shutdown grace. Explicit cleanup-timeout overrides remain supported. Report cleanup deadlines with the phase and elapsed time instead of incorrectly reporting caller cancellation.
+
 ## 0.6.13 - 2026-09-14
 
 ### Fixed

package/README.md

@@ -85,7 +85,7 @@ The result is optimized for agent work:
 | Dashboard scroll commands can look successful while nothing moves | Handles standard `scroll <dir> [px]` against the document first (including pages whose smooth-scroll CSS defeats upstream wheel timing), falls back upstream when the document cannot move, and samples viewport/containers around the fallback; unchanged positions fail as `upstream-error` with `details.scrollNoop`, visible recovery guidance, and exact snapshot/screenshot checks. Unsupported `scrollintoview text=...` fails before dispatch, including inside effective batch rows, and shows exact native `find text ... hover` and snapshot/ref recovery payloads; help remains native pass-through. | [`docs/TOOL_CONTRACT.md`](docs/TOOL_CONTRACT.md#details), [`docs/COMMAND_REFERENCE.md`](docs/COMMAND_REFERENCE.md#core-page-and-element-commands), `test/agent-browser.extension-validation.test.ts` |
 | Dropdown/combobox clicks can focus or hit native option box-model errors | Adds first-class `select <selector> <value...>` paths through raw `args`, `job`, and `semanticAction`; semantic role/name or label select resolves exactly one current visible combobox/listbox ref before action. Custom combobox clicks still detect focused controls with explicit `aria-expanded` state but no visible options and return `details.comboboxFocus` plus exact recovery `nextActions` | [`docs/TOOL_CONTRACT.md`](docs/TOOL_CONTRACT.md#details), [`docs/COMMAND_REFERENCE.md`](docs/COMMAND_REFERENCE.md#core-page-and-element-commands), `extensions/agent-browser/lib/input-modes/semantic-action.ts`, `test/agent-browser.extension-input-modes.test.ts`, `test/agent-browser.extension-validation.test.ts` |
 | Recording workflows fail late when `ffmpeg` is missing or report stale lifecycle state | After successful `record start` / `record restart`, reports `successCategory: "artifact-pending"`, returns an exact `stop-pending-recording` action, warns when older natives report pending output without `ffmpeg`, and conservatively invalidates prior page-scoped `@e…` refs on every executed start attempt and URL-bearing restart to protect older supported natives. This is not evidence of a page change: 0.37 records the active page unless a URL is supplied; FPS-only calls keep the intended tab; an unbounded transcript-backed namespace/session index reserves active destinations across aliases, serializes artifact lifecycle and explicit wait/output writes, persists cross-branch close tombstones, retires every successful close path (including every matching namespace owner for `close --all`), rejects missing/stale restart output, coalesces terminal batch state, keeps only the newest pending path per identity, rejects recording starts after a nested close, folds Unicode path aliases, and retains exact cleanup actions with visible guidance on any later same-session failure | [`docs/TOOL_CONTRACT.md`](docs/TOOL_CONTRACT.md#details), [`docs/COMMAND_REFERENCE.md`](docs/COMMAND_REFERENCE.md#diff-debug-and-streaming), `test/agent-browser.extension-validation.test.ts`, `test/agent-browser.presentation-artifacts-batch.test.ts` |
-| Upstream CLI drift can silently invalidate wrapper behavior | Publishes a repo-readable command reference, verifies it against the recommended 0.37.0 target, and probes browser-backed calls once per cwd/PATH so stable versions below the 0.35.0 floor fail before browser launch with installed/expected version evidence | `npm run verify` |
+| Upstream CLI drift can silently invalidate wrapper behavior | Publishes a repo-readable command reference, verifies it against the recommended 0.38.1 target, and probes browser-backed calls once per cwd/PATH so stable versions below the 0.35.0 floor fail before browser launch with installed/expected version evidence | `npm run verify` |
 | Pages can expose structured workflows through experimental WebMCP | Shows native positive WebMCP availability in navigation summaries and passes through `webmcp list`, `invoke`, detached `result` / `cancel`, params/frame/timeout options, and the bundled `webmcp-gen` skill; treats `--no-webmcp` as launch-scoped, keeps pending or unsuccessfully settled targets unverified with an actionable `get url` follow-up, invalidates stale refs after page tools run, and budgets effective raw or stdin batch timeouts | [`docs/COMMAND_REFERENCE.md`](docs/COMMAND_REFERENCE.md#webmcp-page-tools), `test/agent-browser.extension-ref-guards.test.ts`, `test/agent-browser.wait-timeouts.test.ts`, `test/agent-browser.real-upstream-contract.test.ts` |
 | Desktop Electron apps need discovery, CDP attach, and safe teardown | Top-level `electron` runs host `list` / isolated `launch` (temp profile, OS-chosen debug port) / `status` / `probe` / `cleanup`, merges `launchId` plus managed `sessionName`, supports `handoff` `snapshot` / `tabs` / `connect`, and surfaces mismatch and post-command health guidance; wrapper cleanup applies only to launches it created | `extensions/agent-browser/lib/electron/discovery.ts`, `launch.ts`, `cleanup.ts`, [`docs/TOOL_CONTRACT.md`](docs/TOOL_CONTRACT.md#electron), [`docs/COMMAND_REFERENCE.md`](docs/COMMAND_REFERENCE.md#electron-desktop-apps) |
 | Agents need bundled `skills` text and local setup/status commands without touching the live session | Treats `skills list/get/path`, local auth/profile/setup commands, `session list`, and local state lifecycle commands as sessionless reads/actions when upstream does not need a live page. Session/state rows and targets remain visible, and supported upstream state/config/path operations pass through unchanged. Browser-backed workflows still receive an implicit session only when the caller did not choose one. | [`docs/COMMAND_REFERENCE.md`](docs/COMMAND_REFERENCE.md#built-in-skills), `extensions/agent-browser/lib/command-policy.ts`, `extensions/agent-browser/lib/runtime.ts` |
@@ -108,7 +108,9 @@ Optional external tools unlock the full command surface:
 | `agent-browser` | All browser automation through this extension | See upstream install docs |
 | `ffmpeg` | Recording WebM (libvpx) or MP4 (libx264); install before `record start` / `record restart` | `brew install ffmpeg` or `brew install ffmpeg-full` |
 
-Keep both binaries on `PATH`. This package recommends `agent-browser 0.37.0` and accepts stable versions at or above the 0.35.0 floor; browser-backed calls fail fast below that floor while local inspection/setup commands remain available for diagnosis. Native 0.37 validates `ffmpeg`, the output extension and FPS before recording; older supported natives may defer failures until stop. Use `record start <path.webm|path.mp4> [url] [--fps <n>]` (1–60 fps, default 30), then verify the completed file after `record stop`. Native `doctor` checks the recording dependency and encoders.
+Keep both binaries on `PATH`. This package recommends `agent-browser 0.38.1` and accepts stable versions at or above the 0.35.0 floor; browser-backed calls fail fast below that floor while local inspection/setup commands remain available for diagnosis. Native 0.37 validates `ffmpeg`, the output extension and FPS before recording; older supported natives may defer failures until stop. Use `record start <path.webm|path.mp4> [url] [--fps <n>]` (1–60 fps, default 30), then verify the completed file after `record stop`. Native `doctor` checks the recording dependency and encoders.
+
+On 0.38.1, use `snapshot --delta` for native full/unchanged/changed revisions and `snapshot --delta --full` to reset its baseline. Surviving DOM nodes keep their refs, but navigation/replaced nodes still require fresh refs. The wrapper preserves native revisions and refreshes complete refs internally for partial results. `screenshot --if-changed` (or `--threshold 0.01`) skips unchanged images without creating an artifact. `--input-mode instant|smooth|human` controls native session pointer movement; `click ... --human`, `drag ... --human`, and timed `mouse move` remain ordinary `args`. Recordings accept `--cursor` and `--contact-sheet`; the latter produces a timestamped PNG verified after stop. `auth login <name> --no-navigate` fills a prepared login page after upstream checks its origin. See the [command reference](docs/COMMAND_REFERENCE.md#upstream-0381-rebaseline) for examples and limits.
 
 ### Android / Termux
 
@@ -188,7 +190,7 @@ npm run doctor
 The doctor checks:
 
 - upstream `agent-browser` exists on `PATH`
-- the installed upstream is a stable version at or above the supported 0.35.0 floor; 0.37.0 remains the recommended baseline
+- the installed upstream is a stable version at or above the supported 0.35.0 floor; 0.38.1 remains the recommended baseline
 - `pi --version` meets the minimum Pi runtime floor for this release; older Pi versions are setup failures
 - Pi settings do not point at multiple active `pi-agent-browser-native` sources
 
@@ -758,7 +760,7 @@ The opt-in real-upstream suite is separate because it drives a real browser inst
 npm run verify -- real-upstream
 ```
 
-That mode sets `PI_AGENT_BROWSER_REAL_UPSTREAM=1` and runs `test/agent-browser.real-upstream-contract.test.ts` against the real `agent-browser` on `PATH` (the stable version must meet the 0.35.0 floor; current command-reference validation targets the recommended 0.37.0 capability baseline). It covers inspection, skills, experimental WebMCP list/invoke/result/cancel plus `--no-webmcp`, and a broad core interaction and navigation matrix on localhost fixtures (including off-viewport click, frame-scoped selector/wait/click behavior, form command fixes, `batch` stdin, and `pushstate`), plus `vitals`, network route/requests/HAR, diff snapshot/screenshot/url, trace/profiler, console/errors/highlight, stream enable/status/disable, `cookies set --curl`, a `react tree` missing-renderer path, and `wait --download` with the on-disk caveat documented in release notes. The harness uses a throwaway temp `HOME` and dedicated socket/screenshot directories so the run does not touch your normal browser profile paths. Browser-opening or credential-dependent families such as `inspect`, `dashboard`, `chat`, provider clouds, and OS clipboard flows stay in fake-upstream or manual validation unless a safe deterministic fixture is added. For prerequisites, isolation details, and troubleshooting, see [`docs/RELEASE.md`](docs/RELEASE.md#real-upstream-contract-validation).
+That mode sets `PI_AGENT_BROWSER_REAL_UPSTREAM=1` and runs `test/agent-browser.real-upstream-contract.test.ts` against the real `agent-browser` on `PATH` (the stable version must meet the 0.35.0 floor; current command-reference validation targets the recommended 0.38.1 capability baseline). It covers inspection, skills, experimental WebMCP list/invoke/result/cancel plus `--no-webmcp`, and a broad core interaction and navigation matrix on localhost fixtures (including off-viewport click, frame-scoped selector/wait/click behavior, form command fixes, `batch` stdin, and `pushstate`), plus `vitals`, network route/requests/HAR, diff snapshot/screenshot/url, trace/profiler, console/errors/highlight, stream enable/status/disable, `cookies set --curl`, a `react tree` missing-renderer path, and `wait --download` with the on-disk caveat documented in release notes. The harness uses a throwaway temp `HOME` and dedicated socket/screenshot directories so the run does not touch your normal browser profile paths. Browser-opening or credential-dependent families such as `inspect`, `dashboard`, `chat`, provider clouds, and OS clipboard flows stay in fake-upstream or manual validation unless a safe deterministic fixture is added. For prerequisites, isolation details, and troubleshooting, see [`docs/RELEASE.md`](docs/RELEASE.md#real-upstream-contract-validation).
 
 A deterministic host-only live-browser wrapper smoke is available without an LLM choosing tool calls:
 
@@ -791,12 +793,12 @@ npm run verify -- release
 5. Screenshots, downloads, recordings, traces, profiles, and spill files are normalized as Pi-visible artifacts where possible.
 6. Generated playbook text in docs and tool metadata stays aligned with `extensions/agent-browser/lib/playbook.ts`.
 
-The upstream browser engine remains [`agent-browser`](https://agent-browser.dev/). This package does not bundle it. The recommended baseline is 0.37.0 and the stable runtime floor is 0.35.0; newer stable versions are accepted without version-specific compatibility shims.
+The upstream browser engine remains [`agent-browser`](https://agent-browser.dev/). This package does not bundle it. The recommended baseline is 0.38.1 and the stable runtime floor is 0.35.0; newer stable versions are accepted without version-specific compatibility shims.
 
 ## Current limits
 
 - Published pre-1.0 package.
-- Recommends upstream `agent-browser` 0.37.0 and accepts stable runtimes at or above 0.35.0.
+- Recommends upstream `agent-browser` 0.38.1 and accepts stable runtimes at or above 0.35.0.
 - Does not bundle `agent-browser`; users install it separately.
 - Does not provide a human browser UI inside Pi; the primary UX is agent-invoked tool calls. `--headed` asks upstream to show a browser window, but the wrapper cannot yet prove that the window is visible on the user's desktop.
 - Localhost means the browser host's loopback, not necessarily the shell/Pi host. If `http://localhost:<port>` or `http://127.0.0.1:<port>` fails with errors such as `ERR_EMPTY_RESPONSE`, use an environment-specific host-reachable HTTP(S) address. A `file://` fixture is supported when upstream browser launch settings allow it; use HTTP(S) only when the browser environment cannot reach the local file.

package/dist/extensions/agent-browser/index.js

@@ -22,7 +22,7 @@ import { cleanupSecureTempArtifacts } from "./lib/temp.js";
 import { AGENT_BROWSER_PARAMS } from "./lib/input-modes/params.js";
 import { AGENT_BROWSER_SCRIPT_DEFAULT_TIMEOUT_MS, AGENT_BROWSER_SCRIPT_NAMESPACE, createAgentBrowserScriptSessionName, isAgentBrowserScriptSessionName, runAgentBrowserScript, } from "./lib/input-modes/script.js";
 import { closeManagedSession, getSessionContextKey, runAgentBrowserTool } from "./lib/orchestration/browser-run/index.js";
-import { canonicalizeExplicitArtifactDestination, getExplicitArtifactDestination } from "./lib/orchestration/browser-run/artifact-paths.js";
+import { canonicalizeExplicitArtifactDestination, getExplicitArtifactDestination, getRecordContactSheetDestination } from "./lib/orchestration/browser-run/artifact-paths.js";
 import { findElectronLaunchRecordForSession, getActiveElectronRecords } from "./lib/orchestration/browser-run/session-state.js";
 import { parseBatchCommandArgument, parseUserBatchStdin } from "./lib/orchestration/batch-stdin.js";
 import { ELECTRON_POST_COMMAND_STATUS_SETTLE_MS, ELECTRON_PROFILE_ISOLATION_DETAILS, cleanupActiveElectronHostLaunches, handleElectronHostInput, restoreElectronLaunchRecordsFromBranch, } from "./lib/orchestration/electron-host/index.js";
@@ -75,6 +75,8 @@ function getArtifactPreflightValidationError(options) {
     for (const reservation of options.activeRecordingReservations ?? []) {
         try {
             activeRecordingDestinations.add(canonicalizeExplicitArtifactDestination(reservation.cwd, reservation.absolutePath));
+            if (reservation.contactSheetPath)
+                activeRecordingDestinations.add(canonicalizeExplicitArtifactDestination(reservation.cwd, reservation.contactSheetPath));
         }
         catch (canonicalizationError) {
             if (!cleanupOnly)
@@ -106,8 +108,9 @@ function getArtifactPreflightValidationError(options) {
             if (isCloseCommand(commandStep[0]))
                 sawBatchClose = true;
         }
-        const artifactDestination = getExplicitArtifactDestination(commandStep);
-        if (artifactDestination) {
+        for (const artifactDestination of [getExplicitArtifactDestination(commandStep), getRecordContactSheetDestination(commandStep)]) {
+            if (!artifactDestination)
+                continue;
             let canonicalDestination;
             try {
                 canonicalDestination = canonicalizeExplicitArtifactDestination(options.cwd, artifactDestination);
@@ -1126,7 +1129,7 @@ export default function agentBrowserExtension(pi, { beforeExecute } = {}) {
         }
         for (const [key, reservation] of activeRecordingReservations) {
             const restored = restoredRecordingState.active.get(key);
-            if (restored?.absolutePath !== reservation.absolutePath || restored.cwd !== reservation.cwd || restored.recordingId !== reservation.recordingId || restored.startedAtMs !== reservation.startedAtMs)
+            if (restored?.absolutePath !== reservation.absolutePath || restored.cwd !== reservation.cwd || restored.recordingId !== reservation.recordingId || restored.startedAtMs !== reservation.startedAtMs || restored.contactSheetPath !== reservation.contactSheetPath)
                 recordingReservationsDirty = true;
             restoredRecordingState.active.set(key, reservation);
         }

package/dist/extensions/agent-browser/lib/argv-grammar.js

@@ -36,6 +36,7 @@ export const GLOBAL_VALUE_FLAGS = [
     "--max-output",
     "--model",
     "--idle-timeout",
+    "--input-mode",
 ];
 export const COMMAND_VALUE_FLAGS = [
     "--allowed-origins",

package/dist/extensions/agent-browser/lib/command-taxonomy.js

@@ -324,6 +324,10 @@ export function getRecordCommandOperands(tokens) {
         // Native validates the range; bare/non-numeric --fps keeps its old literal meaning.
         if (tokens[index] === "--fps" && /^\+?\d+$/.test(tokens[index + 1] ?? ""))
             index += 1;
+        else if (tokens[index] === "--cursor" || tokens[index] === "--contact-sheet")
+            continue;
+        else if (tokens[index] === "--contact-sheet-threshold" && tokens[index + 1] !== undefined)
+            index += 1;
         else
             operands.push(tokens[index]);
     }

package/dist/extensions/agent-browser/lib/orchestration/browser-run/artifact-paths.js

@@ -1,5 +1,5 @@
 import { lstatSync, readlinkSync, realpathSync, statSync } from "node:fs";
-import { basename, dirname, join, resolve } from "node:path";
+import { basename, dirname, extname, join, resolve } from "node:path";
 import { foldAgentBrowserFilesystemIdentity } from "../../argv-grammar.js";
 import { parseWaitCommandTokens } from "../../argv-descriptor.js";
 import { getRecordCommandOperands } from "../../command-taxonomy.js";
@@ -10,14 +10,18 @@ function isSingleScreenshotPathToken(token) {
         return false;
     return explicitlyRelative || token.includes("/") || SCREENSHOT_IMAGE_EXTENSIONS.some((extension) => token.endsWith(extension));
 }
-function getScreenshotPositionalIndices(commandTokens) {
+export function getScreenshotPositionalIndices(commandTokens) {
     if (commandTokens[0] !== "screenshot")
         return [];
     const positionalIndices = [];
     for (let index = 1; index < commandTokens.length; index += 1) {
         const token = commandTokens[index];
-        if (token === "--full" || token === "-f")
+        if (token === "--full" || token === "-f" || token === "--if-changed")
             continue;
+        if (token === "--threshold") {
+            index += 1;
+            continue;
+        }
         positionalIndices.push(index);
     }
     return positionalIndices;
@@ -91,6 +95,13 @@ function canonicalizeArtifactPath(absolutePath, platform, seenSymlinks) {
 export function canonicalizeExplicitArtifactDestination(cwd, destination, platform = process.platform) {
     return canonicalizeArtifactPath(resolve(cwd, destination), platform, new Set());
 }
+export function getRecordContactSheetDestination(commandTokens) {
+    const path = getRecordCommandOperands(commandTokens).path;
+    if (!path || !commandTokens.some((token) => token === "--contact-sheet" || token === "--contact-sheet-threshold"))
+        return undefined;
+    const extension = extname(path);
+    return extension ? `${path.slice(0, -extension.length)}.contact-sheet.png` : undefined;
+}
 export function getExplicitArtifactDestination(commandTokens) {
     const command = commandTokens[0];
     const subcommand = commandTokens[1];

package/dist/extensions/agent-browser/lib/orchestration/browser-run/click-dispatch.js

@@ -11,7 +11,7 @@ function normalizeAccessibleName(name) {
 function getClickDispatchProbeTarget(commandTokens, refSnapshot) {
     if (commandTokens[0] !== "click" || commandTokens.includes("--new-tab"))
         return undefined;
-    const selector = commandTokens[1];
+    const selector = commandTokens.slice(1).find((token) => token !== "--human");
     if (!selector || selector.startsWith("-"))
         return undefined;
     const refId = parseRefId(selector);

package/dist/extensions/agent-browser/lib/orchestration/browser-run/index.js

@@ -1,5 +1,8 @@
 import { runAgentBrowserProcess, withAttachedBrowserSessionContext, withChromeStartupArgs } from "../../process.js";
 import { isRecord } from "../../parsing.js";
+import { collectNativeWebMcp, getNativeWebMcpCatalog } from "../../webmcp-observation.js";
+import { redactSensitiveValue } from "../../runtime.js";
+import { formatWebMcpCatalogUpdate } from "../../results/presentation/common.js";
 import { withOwnedManagedSessionContext } from "../../managed-session-restore.js";
 import { cleanupClickDispatchProbe } from "./click-dispatch.js";
 import { applyBrowserRunStatePatch, getSessionContextKey } from "./session-state.js";
@@ -9,8 +12,21 @@ import { processBrowserOutput } from "./process-output.js";
 export { closeManagedSession } from "./managed-session-daemon-policy.js";
 export { getSessionContextKey } from "./session-state.js";
 export async function runAgentBrowserTool(options) {
-    const result = await withChromeStartupArgs(options.input.persistentChromeArgs, () => withAttachedBrowserSessionContext(options.preserveAttachedBrowserSession === true, () => runAgentBrowserToolInContext(options)));
-    const details = isRecord(result.details) ? result.details : undefined;
+    const observed = await collectNativeWebMcp(() => withChromeStartupArgs(options.input.persistentChromeArgs, () => withAttachedBrowserSessionContext(options.preserveAttachedBrowserSession === true, () => runAgentBrowserToolInContext(options))));
+    const result = observed.result;
+    let details = isRecord(result.details) ? result.details : undefined;
+    if (observed.catalog) {
+        const catalog = redactSensitiveValue(observed.catalog);
+        details = { ...details, webMcpCatalog: catalog };
+        result.details = details;
+        if (!options.input.toolArgs.includes("--json") && JSON.stringify(getNativeWebMcpCatalog(details.data)) !== JSON.stringify(catalog)) {
+            const notice = formatWebMcpCatalogUpdate(catalog);
+            if (result.content[0]?.type === "text")
+                result.content[0] = { ...result.content[0], text: `${result.content[0].text}\n\n${notice}` };
+            else
+                result.content.push({ type: "text", text: notice });
+        }
+    }
     const sessionKey = getSessionContextKey(typeof details?.sessionName === "string" ? details.sessionName : undefined, typeof details?.namespace === "string" ? details.namespace : undefined);
     const page = options.state.sessionPageState.get(sessionKey);
     return page.tabReopenPending === undefined ? result : {

package/dist/extensions/agent-browser/lib/orchestration/browser-run/managed-session-daemon-policy.js

@@ -142,7 +142,13 @@ export async function acquireOwnedManagedSessionDaemonPolicy(options) {
 }
 export async function closeManagedSession(options) {
     const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), options.timeoutMs);
+    let phase = "policy coordination";
+    let phaseStartedAt = Date.now();
+    let timeoutError;
+    const timer = setTimeout(() => {
+        timeoutError = `Managed-session cleanup timed out after ${options.timeoutMs} ms during ${phase} (${Date.now() - phaseStartedAt} ms in this phase).`;
+        controller.abort();
+    }, options.timeoutMs);
     let stdoutSpillPath;
     const closeArgs = [...(options.namespace !== undefined ? ["--namespace", options.namespace] : []), "--session", options.sessionName, "close"];
     const policyLock = options.policyLock ?? await acquireManagedSessionPolicyLock({
@@ -153,9 +159,11 @@ export async function closeManagedSession(options) {
     });
     if (!policyLock) {
         clearTimeout(timer);
-        return "Managed-session policy coordination is unavailable or busy; cleanup did not run. Retry after the current operation finishes or repair the private policy-lock directory.";
+        return timeoutError ?? "Managed-session policy coordination is unavailable or busy; cleanup did not run. Retry after the current operation finishes or repair the private policy-lock directory.";
     }
     try {
+        phase = "daemon inspection";
+        phaseStartedAt = Date.now();
         const daemon = await inspectManagedSessionDaemon({
             cwd: options.cwd,
             headedManagedAutosaveInterval: options.headedManagedAutosaveInterval,
@@ -170,6 +178,8 @@ export async function closeManagedSession(options) {
         const daemonRestoreKey = options.restoreState.getDaemonRestoreKey(options.sessionName, options.namespace);
         const ownedRestoreKey = !options.restoreState.isDisabled(options.sessionName, options.namespace)
             && isManagedSessionRestoreKey(daemonRestoreKey) ? daemonRestoreKey : null;
+        phase = "native close";
+        phaseStartedAt = Date.now();
         const processResult = await runAgentBrowserProcess({
             args: closeArgs,
             cwd: options.cwd,
@@ -179,6 +189,7 @@ export async function closeManagedSession(options) {
             preserveAttachedBrowserSession: options.preserveAttachedBrowserSession,
             signal: controller.signal,
         });
+        clearTimeout(timer);
         stdoutSpillPath = processResult.stdoutSpillPath;
         if (!processResult.aborted && !processResult.spawnError && processResult.exitCode === 0) {
             const parsed = await parseAgentBrowserEnvelope({ stdout: processResult.stdout, stdoutPath: processResult.stdoutSpillPath });
@@ -191,7 +202,7 @@ export async function closeManagedSession(options) {
                 statePath: typeof data?.statePath === "string" ? data.statePath : undefined,
             });
         }
-        return getAgentBrowserErrorText({
+        return timeoutError ?? getAgentBrowserErrorText({
             aborted: processResult.aborted,
             command: "close",
             effectiveArgs: redactInvocationArgs(closeArgs),
@@ -204,7 +215,7 @@ export async function closeManagedSession(options) {
         });
     }
     catch (error) {
-        return error instanceof Error ? error.message : String(error);
+        return timeoutError ?? (error instanceof Error ? error.message : String(error));
     }
     finally {
         clearTimeout(timer);

package/dist/extensions/agent-browser/lib/orchestration/browser-run/prepare/snapshot-filter.js

@@ -13,6 +13,9 @@ function parseSnapshotFilterRequest(commandTokens) {
     let search;
     for (let index = 0; index < commandTokens.length; index += 1) {
         const token = commandTokens[index];
+        // Wrapper filters need a full native tree, not a revision-relative patch.
+        if (token === "--delta" || token === "--full")
+            continue;
         if (token === "--viewport")
             continue;
         if (token === "--diff")

package/dist/extensions/agent-browser/lib/orchestration/browser-run/prepare.js

@@ -172,6 +172,8 @@ export async function prepareAgentBrowserArgs(args, stdin, cwd) {
 }
 async function repairScreenshotData(options) {
     const { cwd, data, request } = options;
+    if (data.changed === false)
+        return { data };
     const reportedPath = typeof data.path === "string" ? data.path : undefined;
     const reportedAbsolutePath = reportedPath ? resolve(cwd, reportedPath) : undefined;
     let status = await pathExists(request.absolutePath) ? "saved" : "missing";

package/dist/extensions/agent-browser/lib/orchestration/browser-run/process-output.js

@@ -1,4 +1,5 @@
 import { rm } from "node:fs/promises";
+import { observeNativeWebMcp } from "../../webmcp-observation.js";
 import { parseArgvDescriptor } from "../../argv-descriptor.js";
 import { isBrowserIndependentRead, needsManagedSession } from "../../command-policy.js";
 import { deleteIdentityKeysInNamespace, getAgentBrowserSessionIdentityKey, isAgentBrowserSessionIdentityKeyInNamespace } from "../../argv-grammar.js";
@@ -25,7 +26,7 @@ import { isManagedSessionRestoreKey } from "../../managed-session-storage.js";
 import { createFreshSessionName, extractUpstreamCommandTokens, resolveManagedSessionState } from "../../runtime.js";
 import { getUpstreamEffectiveBatchSteps } from "../batch-stdin.js";
 import { closeManagedSession, inspectManagedSessionDaemon } from "./managed-session-daemon-policy.js";
-import { applyOpenResultTabCorrection, buildAboutBlankRecoveryHint, buildAboutBlankWarning, buildElectronPostCommandHealthDiagnostic, buildElectronRefFreshnessDiagnostic, buildElectronSessionMismatch, buildManagedSessionOutcome, collectOpenResultTabCorrection, collectSessionTabSelection, commandChoosesSessionTabTarget, extractNavigationSummaryFromData, extractStringResultField, findElectronLaunchRecordForSession, formatElectronPostCommandHealthText, formatElectronSessionMismatchText, getSessionContextKey, getStaleRefArgs, mergeNavigationSummaryIntoData, shouldCaptureNavigationSummary, shouldCorrectSessionTabAfterCommand, shouldInspectElectronPostCommandHealth, updateTraceOwnerState, } from "./session-state.js";
+import { applyOpenResultTabCorrection, buildAboutBlankRecoveryHint, buildAboutBlankWarning, buildElectronPostCommandHealthDiagnostic, buildElectronRefFreshnessDiagnostic, buildElectronSessionMismatch, buildManagedSessionOutcome, collectOpenResultTabCorrection, collectSessionTabSelection, commandChoosesSessionTabTarget, extractNavigationSummaryFromData, extractStringResultField, findElectronLaunchRecordForSession, formatElectronPostCommandHealthText, formatElectronSessionMismatchText, getSessionContextKey, getStaleRefArgs, mergeNavigationSummaryIntoData, runSessionCommandData, shouldCaptureNavigationSummary, shouldCorrectSessionTabAfterCommand, shouldInspectElectronPostCommandHealth, updateTraceOwnerState, } from "./session-state.js";
 import { collectClickDispatchDiagnostic } from "./click-dispatch.js";
 import { buildScrollNoopDiagnostic, collectComboboxFocusDiagnostic, collectElectronBroadGetTextScopeDiagnostics, collectElectronHandoff, collectFillVerificationDiagnostic, collectNavigationSummary, collectOverlayBlockerDiagnostic, collectQaAttachedTarget, collectSnapshotOverlayBlockerDiagnostic, collectRecordingDependencyWarning, collectScrollPositionSnapshot, collectSelectorTextVisibilityDiagnostics, collectTimeoutPartialProgress, sleepMs, formatQaAttachedTargetText, getArtifactCleanupGuidance, getEvalResultWarning, getEvalStdinHint, getSourceLookupElectronContext, } from "./diagnostics.js";
 import { repairScreenshotData } from "./prepare.js";
@@ -163,6 +164,7 @@ export async function processBrowserOutput(input) {
         // Native upgrade prints text even with --json; all other command shapes keep strict JSON parsing.
         const plainTextUpgrade = !prepared.executionPlan.plainTextInspection && prepared.executionPlan.commandInfo.command === "upgrade" && !needsManagedSession(parseArgvDescriptor(prepared.runtimeToolArgs));
         const parsed = await parseAgentBrowserEnvelope({ stdout: processResult.stdout, stdoutPath: processResult.stdoutSpillPath, plainText: plainTextUpgrade });
+        observeNativeWebMcp(parsed.envelope?.data);
         let parseError = parsed.parseError;
         const recordingStopRecovery = await recoverRecordingStop({
             artifactManifest, artifactRunStartedAtMs: input.artifactRunStartedAtMs, commandTokens: prepared.commandTokens, cwd,
@@ -459,13 +461,22 @@ export async function processBrowserOutput(input) {
                 else if (processResult.agentBrowserStarted && (resultingPageState.pageUrlUnknown || resultingPageState.pageTargetMayHaveChanged) && !(prepared.commandTokens[0] === "session" && prepared.commandTokens[1] === "info")) {
                     sessionPageState.markTabTargetUnknown({ sessionName: sessionStateKey, update: sessionPageStateUpdate });
                 }
-                const refSnapshot = unsettledWebMcpMutation
+                let refSnapshot = unsettledWebMcpMutation
                     ? undefined
                     : prepared.executionPlan.commandInfo.command === "batch"
                         ? batchRefSnapshotState?.snapshot
                         : succeeded
                             ? prepared.executionPlan.commandInfo.command === "snapshot" ? extractRefSnapshotFromData(presentationEnvelope?.data) : prepared.resolvedSemanticActionRefSnapshot ?? overlayBlockerDiagnostic?.snapshot
                             : undefined;
+                const refreshArgs = batchRefSnapshotState?.refreshArgs ?? (succeeded && prepared.commandTokens[0] === "snapshot" && isRecord(presentationEnvelope?.data) && isRecord(presentationEnvelope.data.snapshot) && !refSnapshot
+                    ? prepared.commandTokens.filter((token) => token !== "--delta" && token !== "--full") : undefined);
+                // Native owns delta baselines. Read complete refs without advancing that baseline
+                // rather than maintaining a second revision/tree cache in the wrapper.
+                if (refreshArgs && !unsettledWebMcpMutation) {
+                    refSnapshot = extractRefSnapshotFromData(await runSessionCommandData({ args: refreshArgs, cwd, namespace: prepared.executionPlan.namespace, sessionName: prepared.executionPlan.sessionName, signal }));
+                    if (!refSnapshot)
+                        sessionPageState.applyRefSnapshotInvalidation({ invalidation: buildPageTransitionRefSnapshotInvalidation("The native snapshot delta did not include complete refs and the full ref read failed. Run snapshot -i before using refs."), sessionName: sessionStateKey, update: sessionPageStateUpdate });
+                }
                 if (refSnapshot) {
                     const refUpdate = sessionPageState.applyRefSnapshot({ fallbackTarget: currentSessionTabTarget, sessionName: sessionStateKey, snapshot: refSnapshot, update: sessionPageStateUpdate });
                     currentRefSnapshot = refUpdate.refSnapshot;
@@ -670,7 +681,7 @@ export async function processBrowserOutput(input) {
         }
         if (plainTextUpgrade && errorText)
             presentationEnvelope = { ...presentationEnvelope, success: false, error: errorText };
-        let presentation = plainTextInspection ? { artifacts: undefined, batchFailure: undefined, batchSteps: undefined, content: [{ type: "text", text: inspectionText ?? "" }], data: undefined, fullOutputPath: undefined, fullOutputPaths: undefined, imagePath: undefined, imagePaths: undefined, savedFile: undefined, savedFilePath: undefined, summary: `${prepared.redactedArgs.join(" ")} completed` } : recordingStopRecovery && !recordingStopRecovery.batch ? recordingStopRecovery.presentation : await buildToolPresentation({ args: prepared.redactedProcessArgs, artifactManifest, artifactMaxUpdatedAtMs: Date.now(), artifactMinUpdatedAtMs: input.artifactRunStartedAtMs, artifactRequest: screenshotArtifactRequest, batchArtifactRequests: batchScreenshotArtifactRequests, commandInfo: prepared.executionPlan.commandInfo, compiledSemanticAction: prepared.compiledSemanticAction, cwd, envelope: presentationEnvelope, errorText, namespace: prepared.executionPlan.namespace, networkRouteDiagnostics, networkRoutes: activeNetworkRoutes, persistentArtifactStore, piCleanupOwnership: sessionStateKey && (state.ownedManagedSessions.has(sessionStateKey) || prepared.executionPlan.managedSessionName !== undefined) ? "wrapper-managed" : "caller-owned", sessionName: prepared.executionPlan.sessionName });
+        let presentation = plainTextInspection ? { artifacts: undefined, batchFailure: undefined, batchSteps: undefined, content: [{ type: "text", text: inspectionText ?? "" }], data: undefined, fullOutputPath: undefined, fullOutputPaths: undefined, imagePath: undefined, imagePaths: undefined, savedFile: undefined, savedFilePath: undefined, summary: `${prepared.redactedArgs.join(" ")} completed` } : recordingStopRecovery && !recordingStopRecovery.batch ? recordingStopRecovery.presentation : await buildToolPresentation({ args: prepared.redactedProcessArgs, artifactManifest, artifactMaxUpdatedAtMs: Date.now(), artifactMinUpdatedAtMs: input.artifactRunStartedAtMs, artifactRequest: screenshotArtifactRequest, batchArtifactRequests: batchScreenshotArtifactRequests, commandInfo: prepared.executionPlan.commandInfo, compiledSemanticAction: prepared.compiledSemanticAction, cwd, envelope: presentationEnvelope, errorText, namespace: prepared.executionPlan.namespace, networkRouteDiagnostics, networkRoutes: activeNetworkRoutes, persistentArtifactStore, previousRecordingContactSheetPath: sessionStateKey ? state.activeRecordingReservations?.get(sessionStateKey)?.contactSheetPath : undefined, piCleanupOwnership: sessionStateKey && (state.ownedManagedSessions.has(sessionStateKey) || prepared.executionPlan.managedSessionName !== undefined) ? "wrapper-managed" : "caller-owned", sessionName: prepared.executionPlan.sessionName });
         if (recordingStopRecovery)
             presentation = mergeRecordingRecoveryPresentation(presentation, recordingStopRecovery);
         const confirmation = readConfirmationEvent ?? prepared.readConfirmation;

package/dist/extensions/agent-browser/lib/orchestration/browser-run/session-state.js

@@ -1,4 +1,6 @@
 import { rm } from "node:fs/promises";
+import { getScreenshotPositionalIndices } from "./artifact-paths.js";
+import { observeNativeWebMcp } from "../../webmcp-observation.js";
 import { getAgentBrowserSessionIdentityKey } from "../../argv-grammar.js";
 import { parseArgvDescriptor } from "../../argv-descriptor.js";
 import { isBrowserIndependentRead, needsManagedSession } from "../../command-policy.js";
@@ -287,7 +289,7 @@ function collectRefsFromTokens(tokens) {
     let selectors;
     switch (tokens[0]) {
         case "click":
-            selectors = [tokens.slice(1).find((token) => token !== "--new-tab")];
+            selectors = [tokens.slice(1).find((token) => token !== "--new-tab" && token !== "--human")];
             break;
         case "drag":
             selectors = tokens.slice(1, 3);
@@ -299,7 +301,7 @@ function collectRefsFromTokens(tokens) {
             selectors = [tokens[2]];
             break;
         case "screenshot":
-            selectors = [tokens.slice(1).find((token) => !["--full", "-f"].includes(token))];
+            selectors = [tokens[getScreenshotPositionalIndices(tokens)[0]]];
             break;
         case "diff":
         case "scroll": {
@@ -516,6 +518,7 @@ export async function runSessionCommandData(options) {
                 throw new Error(parsed.parseError ? "agent-browser returned invalid structured output" : "agent-browser reported failure");
             return undefined;
         }
+        observeNativeWebMcp(parsed.envelope?.data);
         return parsed.envelope?.data;
     }
     finally {

package/dist/extensions/agent-browser/lib/playbook.js

@@ -55,6 +55,7 @@ export const SHARED_BROWSER_PLAYBOOK_GUIDELINES = [
     "When using eval --stdin, scope checks and actions to the target element or route whenever possible instead of relying on broad page-wide text heuristics.",
     "When using eval --stdin for extraction, pass the JavaScript through the native tool stdin field, not as an extra args token after --stdin, and return the value you want instead of relying on console.log as the primary result channel. Prefer plain expressions like ({ title: document.title }) or explicitly invoked functions like (() => ({ title: document.title }))(); use outputPath when the eval/get/snapshot data should be saved as a durable local file, but never reuse a screenshot, download, recording, or other browser artifact destination as outputPath. If a function-shaped snippet returns {}, details.evalStdinHint may warn that the function was serialized instead of called. Local file pages and caller-selected output paths are supported when upstream allows them. If get text on a broad CSS selector surfaces details.selectorTextVisibility or selectorTextVisibilityAll, prefer a visible @ref, a more specific selector, or the inspect-visible-text-candidates nextAction over hidden tab content.",
     "When details.pageChangeSummary is present, use changeType and summary as a compact signal for navigation, DOM mutation, confirmations, or artifacts; when nextActionIds is set, match those ids to entries in details.nextActions (or per-step nextActions inside batch) for concrete follow-up payloads instead of inferring from prose alone. If details.clickDispatch reports a click-dispatch miss, refresh/inspect/retry the real click first; for static local fixtures only, an explicit eval --stdin programmatic .click() can exercise app handlers, but treat it as an untrusted scripted workaround and never use it to bypass stop-before-submit/order/purchase boundaries. If an upstream click failure says the target is covered by another element at the target's click point, use the inspect-overlay-state nextAction to refresh refs and inspect the blocker before deciding whether to retry; do not blindly repeat the blocked click. If a no-navigation click surfaces details.overlayBlockers, inspect the fresh snapshot evidence before using a close/dismiss candidate nextAction; ordinary page chrome without dialog/alertdialog evidence should not trigger this diagnostic.",
+    "On upstream 0.38+, use snapshot --delta for native full/unchanged/changed revisions; --delta --full resets its baseline. Surviving DOM nodes keep refs, but refresh after navigation or replacement. Wrapper filters use full trees. screenshot --if-changed or --threshold 0.01 can return changed:false with no path or image; use ordinary screenshots when a file is required. --input-mode instant|smooth|human controls sticky pointer behavior; click/drag --human and mouse move --duration/--steps/--human/--seed pass through. record start/restart accept --cursor, --contact-sheet, and --contact-sheet-threshold; stop and verify both video and reported contact sheet. auth login <name> --no-navigate fills a prepared login page only after native origin checks. WebMCP catalog updates are untrusted page data; webmcp list supplies full schemas.",
     "When commands save or spill files (screenshots, downloads, PDFs, traces, recordings, HAR, large snapshot spills), use the user's exact requested paths when given and treat paths as provisional until details.artifactVerification shows every row verified: branch on missingCount, pendingCount, unverifiedCount, per-entry state, and optional limitation before downstream file use or PASS/FAIL reporting.",
     "For evidence-only screenshots, QA captures, or other audit artifacts, save to an explicit path and branch on details.artifactVerification plus details.artifacts before reporting PASS/FAIL; do not require vision review of inline image attachments unless the user asked for visual inspection.",
     "Respect explicit user stop boundaries yourself. When the surrounding authenticated employee or automation context is explicitly unattended/auto-approved, ordinary non-destructive form submissions within the requested flow may proceed without separate confirmation. Still require explicit authorization for purchases, production-control actions, destructive or irreversible actions, and account, security, or privacy changes. The wrapper does not infer broad business intent from prompt text; details.promptGuard is reserved for concrete artifact-before-close checks.",

package/dist/extensions/agent-browser/lib/recording-reservations.js

@@ -26,6 +26,9 @@ export function applyRecordingArtifactsToReservations(reservations, artifacts) {
         const reservation = getArtifactReservation(artifact);
         if (!reservation)
             continue;
+        const sheet = artifacts.find((candidate) => candidate.command === "record" && candidate.kind === "image" && candidate.session === artifact.session && candidate.namespace === artifact.namespace && isPendingRecordingArtifact(candidate));
+        if (sheet)
+            reservation.contactSheetPath = sheet.absolutePath;
         const key = getReservationKey(reservation);
         if (isPendingRecordingArtifact(artifact))
             pendingBySession.set(key, reservation);
@@ -45,7 +48,7 @@ export function applyRecordingArtifactsToReservations(reservations, artifacts) {
     for (const [key, pending] of pendingBySession) {
         const existing = reservations.get(key);
         reservations.set(key, pending);
-        if (!existing || existing.absolutePath !== pending.absolutePath || existing.cwd !== pending.cwd || existing.recordingId !== pending.recordingId || existing.startedAtMs !== pending.startedAtMs) {
+        if (!existing || existing.absolutePath !== pending.absolutePath || existing.cwd !== pending.cwd || existing.recordingId !== pending.recordingId || existing.startedAtMs !== pending.startedAtMs || existing.contactSheetPath !== pending.contactSheetPath) {
             transitions.push({ reservation: pending, state: "active" });
         }
     }
@@ -62,6 +65,7 @@ export function appendRecordingReservationTransition(pi, transition) {
     const { reservation, state } = transition;
     pi.appendEntry(RECORDING_RESERVATION_ENTRY_TYPE, {
         absolutePath: state === "active" ? reservation.absolutePath : undefined,
+        contactSheetPath: state === "active" ? reservation.contactSheetPath : undefined,
         cwd: state === "active" ? reservation.cwd : undefined,
         namespace: reservation.namespace,
         path: state === "active" ? reservation.path : undefined,
@@ -85,6 +89,8 @@ function parseReservationTransition(data) {
             state: "closed",
         };
     }
+    if (data.contactSheetPath !== undefined && (typeof data.contactSheetPath !== "string" || !isAbsolute(data.contactSheetPath)))
+        return undefined;
     if (data.recordingId !== undefined && (typeof data.recordingId !== "string" || !data.recordingId))
         return undefined;
     if (data.startedAtMs !== undefined && (typeof data.startedAtMs !== "number" || !Number.isFinite(data.startedAtMs)))
@@ -95,6 +101,7 @@ function parseReservationTransition(data) {
     return {
         reservation: {
             absolutePath: data.absolutePath,
+            ...(typeof data.contactSheetPath === "string" ? { contactSheetPath: data.contactSheetPath } : {}),
             cwd: data.cwd,
             namespace: data.namespace,
             path: data.path,

package/dist/extensions/agent-browser/lib/results/presentation/artifacts.js

@@ -79,6 +79,8 @@ export function applyArtifactManifest(presentation, baseManifest, entries) {
     return presentation;
 }
 export function getScreenshotSummary(data) {
+    if (data.changed === false)
+        return "Screenshot unchanged; no image saved.";
     return typeof data.path === "string" ? `Saved image: ${data.path}` : undefined;
 }
 const PATH_FIELD_CANDIDATES = [
@@ -153,7 +155,7 @@ function artifactMtimeIsOutsideCommandWindow(updatedAtMs, minUpdatedAtMs, maxUpd
             || (maxUpdatedAtMs !== undefined && updatedAtMs > maxUpdatedAtMs + ARTIFACT_MTIME_TOLERANCE_MS));
 }
 async function buildFileArtifactMetadata(options) {
-    const kind = getArtifactKind(options.commandInfo);
+    const kind = options.kind ?? getArtifactKind(options.commandInfo);
     if (!kind) {
         return undefined;
     }
@@ -260,6 +262,18 @@ export async function extractFileArtifacts(options) {
     const recording = options.commandInfo.command === "record" ? getRecordingReceipt(options.data, options.commandInfo.subcommand === "stop" ? options.recordingOutcome : undefined) : undefined;
     const recordingPending = options.recordingPending ?? (recording?.success === null && isRecord(options.data) && isRecord(options.data.capture) && recording.capture.endedAt === null);
     const currentArtifacts = (await Promise.all(candidates.map((path) => buildFileArtifactMetadata({ ...options, path, recording, recordingPending })))).filter((artifact) => artifact !== undefined);
+    if (options.commandInfo.command === "record" && isRecord(options.data) && typeof options.data.contactSheetPath === "string" && options.data.contactSheetPath.trim() && !isNonFileArtifactPathCandidate(options.data.contactSheetPath)) {
+        const sheet = await buildFileArtifactMetadata({ ...options, artifactRequest: undefined, kind: "image", path: options.data.contactSheetPath, recordingPending: recordingPending || ["start", "restart"].includes(options.commandInfo.subcommand ?? "") });
+        if (sheet)
+            currentArtifacts.push({ ...sheet, requestedPath: undefined });
+    }
+    if (options.commandInfo.command === "record" && options.commandInfo.subcommand === "restart" && options.recordingOutcome === true && options.previousRecordingContactSheetPath) {
+        const previousSheet = await buildFileArtifactMetadata({ ...options, artifactRequest: undefined, commandInfo: { command: "record", subcommand: "restart-previous" }, kind: "image", path: options.previousRecordingContactSheetPath, recordingPending: false });
+        // Native restart omits the previous sheet's terminal receipt. Retain the
+        // known destination and disk evidence without inventing finalization proof.
+        if (previousSheet)
+            currentArtifacts.unshift({ ...previousSheet, status: previousSheet.status === "saved" ? "unverified" : previousSheet.status });
+    }
     const previousRestartRecordingArtifact = await buildPreviousRestartRecordingArtifact(options);
     return previousRestartRecordingArtifact ? [previousRestartRecordingArtifact, ...currentArtifacts] : currentArtifacts;
 }

package/dist/extensions/agent-browser/lib/results/presentation/batch.js

@@ -323,15 +323,15 @@ async function buildBatchStepPresentation(options) {
         presentation,
     };
 }
-async function abandonedRecordingArtifact(artifact) {
+async function unverifiedRecordingArtifact(artifact, subcommand) {
     const { recordingState: _recordingState, willExistOnStop: _willExistOnStop, ...terminal } = artifact;
     try {
         const file = await stat(artifact.absolutePath);
-        return { ...terminal, exists: file.isFile(), sizeBytes: file.size, status: file.isFile() ? "unverified" : "missing", subcommand: "close-abandoned" };
+        return { ...terminal, exists: file.isFile(), sizeBytes: file.size, status: file.isFile() ? "unverified" : "missing", subcommand };
     }
     catch (error) {
         const missing = error.code === "ENOENT";
-        return { ...terminal, exists: missing ? false : undefined, status: missing ? "missing" : "unverified", subcommand: "close-abandoned" };
+        return { ...terminal, exists: missing ? false : undefined, status: missing ? "missing" : "unverified", subcommand };
     }
 }
 async function coalesceTerminalBatchRecordingArtifacts(steps, sessionName, namespace) {
@@ -341,7 +341,7 @@ async function coalesceTerminalBatchRecordingArtifacts(steps, sessionName, names
     for (const step of steps) {
         for (const artifact of step.presentation.artifacts ?? []) {
             const index = artifacts.push(artifact) - 1;
-            if (artifact.command !== "record" || artifact.kind !== "video")
+            if (artifact.command !== "record")
                 continue;
             const session = artifact.session ? getAgentBrowserSessionIdentityKey(artifact.session, artifact.namespace) : "";
             if (isPendingRecordingArtifact(artifact)) {
@@ -350,9 +350,18 @@ async function coalesceTerminalBatchRecordingArtifacts(steps, sessionName, names
                 pendingIndexesBySession.set(session, pendingIndexes);
                 continue;
             }
-            const pendingIndex = pendingIndexesBySession.get(session)?.pop();
-            if (pendingIndex !== undefined)
-                removedPendingIndexes.add(pendingIndex);
+            const pendingIndexes = pendingIndexesBySession.get(session) ?? [];
+            const matchingIndex = pendingIndexes.map((pendingIndex) => artifacts[pendingIndex].kind).lastIndexOf(artifact.kind);
+            if (matchingIndex !== -1)
+                removedPendingIndexes.add(pendingIndexes.splice(matchingIndex, 1)[0]);
+            if (artifact.kind === "video") {
+                // A terminal video also ends its pending sheet; a reported sheet below
+                // replaces this unverified row, while legacy restart output may omit it.
+                for (const pendingIndex of pendingIndexes) {
+                    if (artifacts[pendingIndex].kind === "image" && isPendingRecordingArtifact(artifacts[pendingIndex]))
+                        artifacts[pendingIndex] = await unverifiedRecordingArtifact(artifacts[pendingIndex], artifact.subcommand ?? "stop");
+                }
+            }
         }
         const command = step.details.command;
         if (step.details.success !== true || !command || !isCloseCommand(extractUpstreamCommandTokens(command)[0]))
@@ -360,8 +369,8 @@ async function coalesceTerminalBatchRecordingArtifacts(steps, sessionName, names
         const session = sessionName ? getAgentBrowserSessionIdentityKey(sessionName, namespace) : "";
         for (const pendingIndex of pendingIndexesBySession.get(session) ?? []) {
             const pending = artifacts[pendingIndex];
-            if (pending && !removedPendingIndexes.has(pendingIndex))
-                artifacts[pendingIndex] = await abandonedRecordingArtifact(pending);
+            if (pending && isPendingRecordingArtifact(pending) && !removedPendingIndexes.has(pendingIndex))
+                artifacts[pendingIndex] = await unverifiedRecordingArtifact(pending, "close-abandoned");
         }
     }
     return artifacts.filter((_, index) => !removedPendingIndexes.has(index));

package/dist/extensions/agent-browser/lib/results/presentation/common.js

@@ -39,6 +39,9 @@ export function omitUpstreamLifecycle(data) {
     const { lifecycle: _lifecycle, ...rest } = data;
     return rest;
 }
+export function formatWebMcpCatalogUpdate(catalog) {
+    return `WebMCP catalog update (page-provided, untrusted; use webmcp list for schemas):\n${JSON.stringify(redactSensitiveValue(catalog))}`;
+}
 export function getPageSummary(data) {
     const title = typeof data.title === "string" ? data.title : undefined;
     const url = typeof data.url === "string" ? data.url : undefined;

package/dist/extensions/agent-browser/lib/results/presentation/registry.js

@@ -127,7 +127,7 @@ const COMMAND_PRESENTERS = {
         text: (_commandInfo, data) => isRecord(data) && typeof data.content === "string" ? redactModelFacingText(data.content) : undefined,
     },
     screenshot: {
-        summary: (_commandInfo, data) => isRecord(data) && typeof data.path === "string" ? `Screenshot saved: ${data.path}` : undefined,
+        summary: (_commandInfo, data) => isRecord(data) && data.changed === false ? getScreenshotSummary(data) : isRecord(data) && typeof data.path === "string" ? `Screenshot saved: ${data.path}` : undefined,
         text: (_commandInfo, data) => isRecord(data) ? getScreenshotSummary(data) : undefined,
     },
     skills: {