pi-agent-browser-native 0.6.9 → 0.6.11

package/dist/extensions/agent-browser/lib/results/presentation/diagnostics.js

@@ -1,9 +1,9 @@
 import { isRecord } from "../../parsing.js";
-import { isSensitiveFieldName, redactSensitiveText, redactSensitiveValue } from "../../runtime.js";
+import { redactSensitiveText, redactSensitiveValue } from "../../runtime.js";
 import { classifyNetworkRequestFailure, isApiLikeNetworkRequest, isNetworkArtifactNoiseRequest, summarizeNetworkFailures } from "../network.js";
 import { withOptionalSessionArgs } from "../next-actions.js";
 import { stringifyUnknown, truncateText } from "../text.js";
-import { firstLine, formatCount, getArrayField, getStringField, parseJsonPreviewString, redactModelFacingText, redactModelFacingTextIfSensitive, stringifyModelFacing, } from "./common.js";
+import { firstLine, formatCount, getArrayField, getStringField, redactModelFacingText, stringifyModelFacing, } from "./common.js";
 const DIAGNOSTIC_REQUEST_PREVIEW_LIMIT = 40;
 const DIAGNOSTIC_LOG_PREVIEW_LIMIT = 80;
 const NETWORK_BODY_PREVIEW_MAX_CHARS = 280;
@@ -185,11 +185,11 @@ export function formatDiagnosticSummary(commandInfo, data) {
         }
         if (commandInfo.subcommand === "route") {
             const routed = getStringField(data, "routed") ?? getStringField(data, "url") ?? getStringField(data, "pattern");
-            return routed ? `Network route: ${redactModelFacingTextIfSensitive(routed)}` : "Network route configured";
+            return routed ? `Network route: ${redactSensitiveText(routed)}` : "Network route configured";
         }
         if (commandInfo.subcommand === "unroute") {
             const unrouted = getStringField(data, "unrouted") ?? getStringField(data, "url") ?? getStringField(data, "pattern");
-            return unrouted ? `Network unroute: ${redactModelFacingTextIfSensitive(unrouted)}` : "Network route removed";
+            return unrouted ? `Network unroute: ${redactSensitiveText(unrouted)}` : "Network route removed";
         }
         if (commandInfo.subcommand === "har") {
             const state = getStringField(data, "state") ?? getStringField(data, "status") ?? commandInfo.subcommand;
@@ -273,14 +273,33 @@ function formatSessionText(data) {
             const metadata = [
                 `active=${active ? "true" : "false"}`,
                 label ? `label=${redactModelFacingText(label)}` : undefined,
-                title ? `title=${redactModelFacingTextIfSensitive(title)}` : undefined,
-                url ? `url=${redactModelFacingTextIfSensitive(url)}` : undefined,
+                title ? `title=${redactSensitiveText(title)}` : undefined,
+                url ? `url=${redactSensitiveText(url)}` : undefined,
                 tabCount,
             ].filter(Boolean).join("; ");
             return `${index + 1}. name=${name}${active ? " *active*" : ""}; ${metadata}`;
         })
             .join("\n");
     }
+    if (typeof data.active === "boolean") {
+        const runtime = data.runtime;
+        const browser = isRecord(runtime) && isRecord(runtime.browser) ? runtime.browser : undefined;
+        const identity = [
+            `Daemon: ${data.active ? "active" : "inactive"}; PID: ${data.pid ?? "unknown"}`,
+            `Browser: ${browser?.status ?? "unknown"}; alive: ${browser?.alive ?? "unknown"}; Chrome PID: ${browser?.pid ?? "unknown"}`,
+            `Exact profile: ${browser?.userDataDir ?? "unknown"}`,
+            `Native browser ownership: ${browser?.ownership ?? "unknown"}; Pi cleanup ownership: ${data.piCleanupOwnership ?? "unknown"}`,
+        ].join("\n");
+        return `${redactModelFacingText(identity)}\n\n${stringifyModelFacing({
+            ...Object.fromEntries(["session", "namespace", "socketDir", "active", "pid", "version", "runtimeError"].map((key) => [key, data[key]])),
+            // Native runtime also includes restore check URLs, text and code; show status/identity only.
+            runtime: isRecord(runtime) ? Object.fromEntries([
+                "session", "namespace", "socketDir", "backgroundPid", "browserLaunched", "browser", "recording", "capabilities", "pageCount", "engine", "launchHash",
+                "compatibilityStatus", "restoreKey", "restoreStatus", "restoreLoadedPath", "restoreValidationPending",
+                "restoreSave", "saveStatus", "restoreSavedPath",
+            ].map((key) => [key, runtime[key]])) : runtime,
+        })}`;
+    }
     const session = getStringField(data, "session");
     return session ? `Current session: ${redactModelFacingText(session)}` : undefined;
 }
@@ -315,8 +334,7 @@ function getPreviewCandidate(item, keys) {
 function formatNetworkPreviewValue(value, maxChars) {
     if (value === undefined || value === null)
         return undefined;
-    const previewValue = typeof value === "string" ? parseJsonPreviewString(value) : value;
-    const redacted = redactSensitiveValue(previewValue);
+    const redacted = redactSensitiveValue(value);
     const raw = typeof redacted === "string" ? redacted : stringifyUnknown(redacted);
     const normalized = raw.replace(/\s+/g, " ").trim();
     if (normalized.length === 0)
@@ -797,7 +815,7 @@ function valueContainsStorageSecret(value) {
                 return true;
         }
         catch { }
-        if (redactSensitiveText(trimmed) !== trimmed || redactModelFacingTextIfSensitive(trimmed) !== trimmed)
+        if (redactSensitiveText(trimmed) !== trimmed)
             return true;
         try {
             return valueContainsStorageSecret(JSON.parse(trimmed));
@@ -830,13 +848,13 @@ function formatStorageValue(key, value) {
 }
 function redactStorageEntryValue(item) {
     if (!Object.hasOwn(item, "value"))
-        return redactStructuredPresentationValue(item);
+        return redactSensitiveValue(item);
     const key = getStringField(item, "key") ?? getStringField(item, "name");
     const value = item.value;
     if (shouldRevealStorageValue(key, value))
-        return redactStructuredPresentationValue(item);
+        return redactSensitiveValue(item);
     return {
-        ...redactStructuredPresentationValue({ ...item, value: undefined }),
+        ...redactSensitiveValue({ ...item, value: undefined }),
         value: "[REDACTED]",
         valueRedacted: true,
         valueRedactionReason: key && STORAGE_SECRET_KEY_PATTERN.test(key) ? "sensitive-key" : "sensitive-value",
@@ -846,15 +864,15 @@ function redactStorageData(value) {
     if (Array.isArray(value))
         return value.map((item) => redactStorageData(item));
     if (!isRecord(value))
-        return redactStructuredPresentationValue(value);
+        return redactSensitiveValue(value);
     const entries = Object.fromEntries(Object.entries(value).map(([key, entryValue]) => {
         if ((key === "entries" || key === "items") && Array.isArray(entryValue))
-            return [key, entryValue.map((item) => isRecord(item) ? redactStorageEntryValue(item) : redactStructuredPresentationValue(item))];
+            return [key, entryValue.map((item) => isRecord(item) ? redactStorageEntryValue(item) : redactSensitiveValue(item))];
         if (key === "value") {
             const itemKey = getStringField(value, "key") ?? getStringField(value, "name");
-            return [key, shouldRevealStorageValue(itemKey, entryValue) ? redactStructuredPresentationValue(entryValue) : "[REDACTED]"];
+            return [key, shouldRevealStorageValue(itemKey, entryValue) ? redactSensitiveValue(entryValue) : "[REDACTED]"];
         }
-        return [key, redactStructuredPresentationValue(entryValue)];
+        return [key, redactSensitiveValue(entryValue)];
     }));
     if (Object.hasOwn(value, "value")) {
         const key = getStringField(value, "key") ?? getStringField(value, "name");
@@ -899,7 +917,7 @@ function formatDialogText(data) {
         lines.push(`Type: ${redactModelFacingText(type)}`);
     const message = getStringField(data, "message");
     if (message)
-        lines.push(`Message: ${/(?:auth|authorization|bearer|cookie|pass(?:word)?|secret|session|token)/i.test(message) ? "[REDACTED]" : redactModelFacingText(message)}`);
+        lines.push(`Message: ${redactModelFacingText(message)}`);
     if (data.accepted === true)
         lines.push("Accepted.");
     if (data.dismissed === true)
@@ -910,7 +928,7 @@ function formatFrameText(data) {
     const frame = getStringField(data, "frame") ?? getStringField(data, "name") ?? getStringField(data, "selector");
     const url = getStringField(data, "url");
     const title = getStringField(data, "title");
-    const lines = [frame ? `Frame: ${redactModelFacingText(frame)}` : undefined, title ? `Title: ${redactModelFacingText(title)}` : undefined, url ? `URL: ${redactModelFacingTextIfSensitive(url)}` : undefined].filter(Boolean);
+    const lines = [frame ? `Frame: ${redactModelFacingText(frame)}` : undefined, title ? `Title: ${redactModelFacingText(title)}` : undefined, url ? `URL: ${redactSensitiveText(url)}` : undefined].filter(Boolean);
     return lines.length > 0 ? lines.join("\n") : undefined;
 }
 function formatStateText(data, subcommand) {
@@ -933,10 +951,10 @@ function formatStateText(data, subcommand) {
         return states
             .map((item, index) => {
             if (!isRecord(item))
-                return `${index + 1}. ${redactModelFacingTextIfSensitive(stringifyModelFacing(item))}`;
+                return `${index + 1}. ${stringifyModelFacing(item)}`;
             const name = getStringField(item, "name") ?? getStringField(item, "file") ?? getStringField(item, "path") ?? `(state ${index + 1})`;
             const url = getStringField(item, "url");
-            return url ? `${index + 1}. ${redactModelFacingText(name)} — ${redactModelFacingTextIfSensitive(url)}` : `${index + 1}. ${redactModelFacingText(name)}`;
+            return url ? `${index + 1}. ${redactModelFacingText(name)} — ${redactSensitiveText(url)}` : `${index + 1}. ${redactModelFacingText(name)}`;
         })
             .join("\n");
     }
@@ -946,23 +964,11 @@ function formatStateText(data, subcommand) {
         return "State cleared.";
     return undefined;
 }
-function redactStructuredPresentationValue(value) {
-    if (typeof value === "string")
-        return redactModelFacingTextIfSensitive(value);
-    if (Array.isArray(value))
-        return value.map((item) => redactStructuredPresentationValue(item));
-    if (!isRecord(value))
-        return value;
-    return Object.fromEntries(Object.entries(value).map(([key, entryValue]) => [
-        key,
-        isSensitiveFieldName(key) ? "[REDACTED]" : redactStructuredPresentationValue(entryValue),
-    ]));
-}
 function redactStatefulValues(value, sensitiveKeys) {
     if (Array.isArray(value))
         return value.map((item) => redactStatefulValues(item, sensitiveKeys));
     if (!isRecord(value))
-        return redactStructuredPresentationValue(value);
+        return redactSensitiveValue(value);
     return Object.fromEntries(Object.entries(value).map(([key, entryValue]) => [
         key,
         sensitiveKeys.has(key.toLowerCase()) ? "[REDACTED]" : redactStatefulValues(entryValue, sensitiveKeys),
@@ -973,13 +979,9 @@ export function redactPresentationData(commandInfo, data) {
         return redactStatefulValues(data, new Set(["value"]));
     if (commandInfo.command === "storage")
         return redactStorageData(data);
-    if (commandInfo.command === "session" && commandInfo.subcommand === "list")
-        return redactStructuredPresentationValue(data);
-    if (commandInfo.command === "state" && commandInfo.subcommand === "list")
-        return redactStructuredPresentationValue(data);
     if (commandInfo.command === "state" && commandInfo.subcommand === "show")
         return redactStatefulValues(data, new Set(["value"]));
-    return redactStructuredPresentationValue(data);
+    return redactSensitiveValue(data);
 }
 export function formatDiagnosticText(commandInfo, data) {
     if (commandInfo.command === "session")

package/dist/extensions/agent-browser/lib/results/presentation/errors.js

@@ -203,6 +203,7 @@ export function buildErrorPresentation(options) {
             overlayBlockedClick: isOverlayBlockedClickError(presentationCommand ?? commandInfo.command, safeErrorText, args ?? commandInfo.commandTokens),
             resultCategory: "failure",
             sessionName,
+            subcommand: commandInfo.subcommand,
         }) ?? []),
     ];
     return {

package/dist/extensions/agent-browser/lib/results/presentation/navigation.js

@@ -1,7 +1,7 @@
 import { isNavigationObservableCommandName, isOpenNavigationCommand, isPageChangeSummaryCommand } from "../../command-taxonomy.js";
 import { isRecord } from "../../parsing.js";
 import { detectConfirmationRequired } from "../confirmation.js";
-import { omitUpstreamLifecycle, redactModelFacingText, stringifyModelFacing } from "./common.js";
+import { firstLine, omitUpstreamLifecycle, redactModelFacingText, stringifyModelFacing } from "./common.js";
 const NAVIGATION_SUMMARY_FIELD = "navigationSummary";
 const GET_RESULT_FIELDS = {
     attr: "value",
@@ -25,7 +25,7 @@ function getScalarExtractionResult(commandInfo, data) {
     if (result === null || result === undefined)
         return "null";
     if (typeof result === "object")
-        return JSON.stringify(result);
+        return JSON.stringify(result, null, 2);
     return undefined;
 }
 function getExtractionOrigin(data) {
@@ -52,7 +52,7 @@ export function formatExtractionSummary(commandInfo, data) {
         return undefined;
     }
     const safeScalarResult = redactModelFacingText(scalarResult);
-    const firstResultLine = safeScalarResult.split("\n", 1)[0] ?? safeScalarResult;
+    const firstResultLine = firstLine(safeScalarResult);
     if (commandInfo.command === "get") {
         return `${formatGetSummaryLabel(commandInfo.subcommand)}: ${firstResultLine}`;
     }

package/dist/extensions/agent-browser/lib/results/presentation.js

@@ -1,10 +1,11 @@
 import { isRecord } from "../parsing.js";
+import { buildReadConfirmationNextActions, nextReadConfirmation } from "../read-confirmation.js";
 import { extractUpstreamCommandTokens, parseCommandInfo, redactInvocationArgs } from "../runtime.js";
 import { buildAgentBrowserNextActions } from "./action-recommendations.js";
 import { buildAgentBrowserResultCategoryDetails } from "./categories.js";
 import { detectConfirmationRequired } from "./confirmation.js";
 import { buildSnapshotPresentation } from "./snapshot.js";
-import { parseJsonPreviewString, redactModelFacingText, stringifyModelFacing } from "./presentation/common.js";
+import { redactModelFacingText } from "./presentation/common.js";
 import { applyArtifactManifest, attachInlineImage, buildArtifactVerificationSummary, buildManifestEntriesForFileArtifacts, classifyPresentationSuccessCategory, extractFileArtifacts, extractImagePath, formatArtifactMetadataLines, formatArtifactSummary, formatMissingArtifactFailureText, getSavedFileDetails, hasMissingFileArtifact, isManifestFileArtifact, } from "./presentation/artifacts.js";
 import { buildBatchPresentation, isAgentBrowserBatchResultArray, redactBatchStepErrorData } from "./presentation/batch.js";
 import { getPresentationPaths, isStringArray } from "./presentation/content.js";
@@ -18,8 +19,7 @@ function sanitizeModelFacingPresentation(presentation) {
     presentation.content = presentation.content.map((item) => {
         if (item.type !== "text")
             return item;
-        const parsed = parseJsonPreviewString(item.text);
-        return parsed === item.text ? item : { ...item, text: stringifyModelFacing(parsed) };
+        return { ...item, text: redactModelFacingText(item.text) };
     });
     presentation.summary = redactModelFacingText(presentation.summary);
     return presentation;
@@ -52,7 +52,10 @@ export async function buildToolPresentation(options) {
     const { args, artifactManifest, artifactRequest, commandInfo, compiledSemanticAction, cwd, envelope, errorText, namespace, networkRouteDiagnostics, networkRoutes, persistentArtifactStore, sessionName, } = options;
     const commandInfoWithTokens = commandInfo.commandTokens || !args ? commandInfo : { ...commandInfo, commandTokens: extractUpstreamCommandTokens(args) };
     const presentationCommandInfo = resolvePresentationCommandInfo(commandInfoWithTokens, compiledSemanticAction);
-    if (errorText) {
+    const recordingCommand = commandInfo.command === "record";
+    const recordingBatch = commandInfo.command === "batch" && isAgentBrowserBatchResultArray(envelope?.data)
+        && envelope.data.some((row) => row.command?.[0] === "record");
+    if (errorText && !recordingCommand && !recordingBatch) {
         return buildErrorPresentation({
             args,
             commandInfo,
@@ -61,11 +64,15 @@ export async function buildToolPresentation(options) {
             sessionName,
         });
     }
-    const data = enrichStreamStatusData(commandInfoWithTokens, envelope?.data);
+    let data = enrichStreamStatusData(commandInfoWithTokens, envelope?.data);
+    if (commandInfo.command === "session" && commandInfo.subcommand === "info" && isRecord(data)) {
+        data = { ...data, piCleanupOwnership: options.piCleanupOwnership ?? "unknown" };
+    }
+    const readConfirmation = nextReadConfirmation({ commandTokens: commandInfoWithTokens.commandTokens ?? [], data, namespace, sessionName: sessionName ?? "default", succeeded: envelope?.success !== false });
     const presentationData = commandInfo.command === "batch" && isAgentBrowserBatchResultArray(data)
         ? redactBatchSpillData(data)
         : redactPresentationData(commandInfoWithTokens, data);
-    const artifacts = await extractFileArtifacts({ artifactManifest, artifactMaxUpdatedAtMs: options.artifactMaxUpdatedAtMs, artifactMinUpdatedAtMs: options.artifactMinUpdatedAtMs, artifactRequest, commandInfo: presentationCommandInfo, cwd, data, namespace, sessionName });
+    const artifacts = await extractFileArtifacts({ artifactManifest, artifactMaxUpdatedAtMs: options.artifactMaxUpdatedAtMs, artifactMinUpdatedAtMs: options.artifactMinUpdatedAtMs, artifactRequest, commandInfo: presentationCommandInfo, cwd, data, namespace, recordingOutcome: recordingCommand ? envelope?.success : undefined, recordingPending: options.recordingPending, sessionName });
     const artifactVerification = buildArtifactVerificationSummary(artifacts);
     const artifactSummary = formatArtifactSummary(artifacts);
     const summary = artifactSummary ?? formatPresentationSummary(commandInfoWithTokens, data, compiledSemanticAction);
@@ -83,6 +90,7 @@ export async function buildToolPresentation(options) {
             namespace,
             networkRoutes,
             persistentArtifactStore,
+            piCleanupOwnership: options.piCleanupOwnership,
             sessionName,
             summary,
         });
@@ -99,6 +107,12 @@ export async function buildToolPresentation(options) {
             summary,
         };
     }
+    if (errorText && (recordingCommand || recordingBatch)) {
+        const errorPresentation = buildErrorPresentation({ args, commandInfo, errorText, presentationCommand: presentationCommandInfo.command, sessionName });
+        presentation = { ...presentation, resultCategory: "failure", failureCategory: errorPresentation.failureCategory, summary: errorPresentation.summary,
+            content: [{ type: "text", text: `${errorPresentation.content[0]?.type === "text" ? errorPresentation.content[0].text : errorText}\n\n${presentation.content[0]?.type === "text" ? presentation.content[0].text : ""}` }],
+        };
+    }
     if (networkRouteDiagnostics && networkRouteDiagnostics.length > 0 && presentation.content[0]?.type === "text") {
         const diagnosticText = formatNetworkRouteDiagnosticsText(networkRouteDiagnostics);
         if (diagnosticText)
@@ -141,7 +155,7 @@ export async function buildToolPresentation(options) {
     presentationWithManifest.artifactVerification = buildArtifactVerificationSummary(artifacts, presentationWithManifest.artifactManifest, currentSpillPaths) ?? presentationWithManifest.artifactVerification;
     const confirmationRequired = detectConfirmationRequired(data);
     const missingArtifactFailureText = formatMissingArtifactFailureText(presentationWithManifest.artifacts);
-    if (missingArtifactFailureText && hasMissingFileArtifact(presentationWithManifest.artifacts)) {
+    if (!errorText && missingArtifactFailureText && hasMissingFileArtifact(presentationWithManifest.artifacts)) {
         presentationWithManifest.resultCategory = "failure";
         presentationWithManifest.failureCategory = "artifact-missing";
         presentationWithManifest.successCategory = undefined;
@@ -153,6 +167,21 @@ export async function buildToolPresentation(options) {
             presentationWithManifest.content.unshift({ type: "text", text: missingArtifactFailureText });
         }
     }
+    const failedRecording = presentationWithManifest.artifacts?.find((artifact) => artifact.recording?.success === false || artifact.recording?.output.encoderSucceeded === false);
+    if (failedRecording && !errorText) {
+        const failure = `Recording failed: ${failedRecording.recording?.error ?? "native capture/encoder failure"}`;
+        presentationWithManifest.resultCategory = "failure";
+        presentationWithManifest.failureCategory = "upstream-error";
+        presentationWithManifest.successCategory = undefined;
+        presentationWithManifest.summary = failure;
+        presentationWithManifest.content.unshift({ type: "text", text: failure });
+    }
+    if (readConfirmation?.state === "pending") {
+        presentationWithManifest.readConfirmation = readConfirmation;
+        presentationWithManifest.resultCategory = "failure";
+        presentationWithManifest.failureCategory = "confirmation-required";
+        presentationWithManifest.successCategory = undefined;
+    }
     if (!presentationWithManifest.resultCategory) {
         const categoryDetails = buildAgentBrowserResultCategoryDetails({
             artifacts: presentationWithManifest.artifacts,
@@ -160,7 +189,7 @@ export async function buildToolPresentation(options) {
             confirmationRequired: confirmationRequired !== undefined,
             errorText: envelope?.success === false ? presentationWithManifest.summary : undefined,
             savedFile: presentationWithManifest.savedFile,
-            succeeded: envelope?.success !== false,
+            succeeded: envelope?.success !== false && confirmationRequired === undefined,
         });
         presentationWithManifest.resultCategory = categoryDetails.resultCategory;
         presentationWithManifest.successCategory = categoryDetails.resultCategory === "success"
@@ -196,7 +225,7 @@ export async function buildToolPresentation(options) {
         ? buildNetworkRequestsNextActions(data, sessionName, presentationWithManifest.networkRouteDiagnostics)
         : undefined;
     const streamNextActions = presentationWithManifest.resultCategory === "success" ? buildStreamNextActions(commandInfoWithTokens, data, sessionName) : undefined;
-    presentationWithManifest.nextActions = mergeNextActions(presentationWithManifest.nextActions, genericNextActions, networkNextActions, streamNextActions);
+    presentationWithManifest.nextActions = readConfirmation ? buildReadConfirmationNextActions(readConfirmation, true) : mergeNextActions(presentationWithManifest.nextActions, genericNextActions, networkNextActions, streamNextActions);
     presentationWithManifest.pageChangeSummary = presentationWithManifest.pageChangeSummary ?? buildPageChangeSummary({
         artifacts: presentationWithManifest.artifacts,
         commandInfo: presentationCommandInfo,

package/dist/extensions/agent-browser/lib/results/recording.js

@@ -0,0 +1,50 @@
+import { isRecord } from "../parsing.js";
+const RECORDING_QUALITY_WARNING = "Capture quality warning: repaint-driven capture, held/repeated or static frames, and late/final-state-only frames cannot establish UI smoothness. Output FPS is not captured-frame rate; inspect the recording and capture window before judging motion.";
+function number(value) {
+    return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : null;
+}
+function text(value) {
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+export function getRecordingReceipt(value, outcome) {
+    if (!isRecord(value) || typeof value.path !== "string" || !value.path)
+        return undefined;
+    const capture = isRecord(value.capture) ? value.capture : {};
+    const output = isRecord(value.output) ? value.output : {};
+    const file = isRecord(value.file) ? value.file : {};
+    return {
+        warning: RECORDING_QUALITY_WARNING,
+        recordingId: text(value.recordingId), path: value.path,
+        success: typeof value.success === "boolean" ? value.success : value.success === null ? null : outcome ?? null,
+        error: text(value.error), frames: number(value.frames), capturedFrames: number(value.capturedFrames), fps: number(value.fps),
+        capture: {
+            startedAt: text(capture.startedAt), endedAt: text(capture.endedAt), durationMs: number(capture.durationMs),
+            firstFrameAt: text(capture.firstFrameAt), lastFrameAt: text(capture.lastFrameAt), firstFrameAfterMs: number(capture.firstFrameAfterMs), lastFrameAfterMs: number(capture.lastFrameAfterMs),
+            averageFps: number(capture.averageFps), maxFrameGapMs: number(capture.maxFrameGapMs), timestampSource: text(capture.timestampSource),
+        },
+        output: {
+            frames: number(output.frames ?? value.frames), fps: number(output.fps ?? value.fps), encodedFrames: number(output.encodedFrames),
+            durationMs: number(output.durationMs), durationSource: text(output.durationSource), heldFrames: number(output.heldFrames), droppedFrames: number(output.droppedFrames), skippedFrames: number(output.skippedFrames),
+            encoderSucceeded: typeof output.encoderSucceeded === "boolean" ? output.encoderSucceeded : null,
+        },
+        file: { exists: typeof file.exists === "boolean" ? file.exists : null, sizeBytes: number(file.sizeBytes) },
+    };
+}
+export function formatRecordingReceipt(receipt) {
+    const metric = (value, unit = "") => value === null ? "unknown" : `${value}${unit}`;
+    return [
+        `Recording ID: ${metric(receipt.recordingId)}`,
+        `Native recording outcome: ${receipt.success === true ? "succeeded" : receipt.success === false ? "failed" : "pending/unknown"}${receipt.error ? ` — ${receipt.error}` : ""}`,
+        `Capture started: ${metric(receipt.capture.startedAt)}; ended: ${metric(receipt.capture.endedAt)}`,
+        `Wall-clock capture duration: ${metric(receipt.capture.durationMs, " ms")}`,
+        `Captured frames (received, not pixel-unique): ${metric(receipt.capturedFrames)}`,
+        `Captured-frame rate: ${metric(receipt.capture.averageFps, " fps")}`,
+        `First frame: ${metric(receipt.capture.firstFrameAt)}; after start: ${metric(receipt.capture.firstFrameAfterMs, " ms")}`,
+        `Last frame: ${metric(receipt.capture.lastFrameAt)}; after start: ${metric(receipt.capture.lastFrameAfterMs, " ms")}`,
+        `Maximum frame gap: ${metric(receipt.capture.maxFrameGapMs, " ms")}; timestamp source: ${metric(receipt.capture.timestampSource)}`,
+        `Written frames: ${metric(receipt.output.frames)}; Encoded frames: ${metric(receipt.output.encodedFrames)}`,
+        `Held frames: ${metric(receipt.output.heldFrames)}; dropped frames: ${metric(receipt.output.droppedFrames)}; skipped frames: ${metric(receipt.output.skippedFrames)}`,
+        `Nominal/output FPS: ${metric(receipt.output.fps)}; output duration (encoded frames/fps): ${metric(receipt.output.durationMs, " ms")}`,
+        receipt.warning,
+    ].join("\n");
+}

package/dist/extensions/agent-browser/lib/runtime.js

@@ -20,7 +20,7 @@ const DEFAULT_IMPLICIT_SESSION_IDLE_TIMEOUT_MS = 15 * 60 * 1000;
 const DEFAULT_IMPLICIT_SESSION_CLOSE_TIMEOUT_MS = 5_000;
 const INSPECTION_FLAGS = new Set(["--help", "-h", "--version", "-V"]);
 const SENSITIVE_VALUE_FLAGS = new Set(["--body", "--headers", "--password", "--proxy"]);
-const SENSITIVE_QUERY_PARAM_PATTERN = /^(?:access(?:_|-)?token|api(?:_|-)?key|auth|authorization|bearer|client(?:_|-)?secret|code|cookie|id(?:_|-)?token|key|pass(?:word)?|refresh(?:_|-)?token|relay(?:_|-)?state|saml(?:_|-)?request|saml(?:_|-)?response|secret|sentry(?:_|-)?key|session(?:_|-)?id|sig(?:nature)?|token|write(?:_|-)?key)$/i;
+const SENSITIVE_QUERY_PARAM_PATTERN = /^(?:access(?:_|-)?token|api(?:_|-)?key|auth|authorization|authorization(?:_|-)?session(?:_|-)?id|bearer|client(?:_|-)?secret|code|cookie|id(?:_|-)?token|key|pass(?:word)?|refresh(?:_|-)?token|relay(?:_|-)?state|saml(?:_|-)?request|saml(?:_|-)?response|secret|sentry(?:_|-)?key|session(?:_|-)?id|sig(?:nature)?|token|write(?:_|-)?key)$/i;
 const AUTH_STATE_QUERY_PARAM_PATTERN = /^(?:nonce|state)$/i;
 const AUTH_URL_CONTEXT_PATTERN = /(?:^|[./_-])(?:auth|authorize|callback|login|oauth2?|oidc|saml|sso)(?:[./?#_-]|$)/i;
 const SENSITIVE_FIELD_NAME_PATTERN = /^(?:[A-Za-z0-9_-]*(?:api[_-]?key|access[_-]?key|private[_-]?key|secret(?:[_-]?(?:key|access[_-]?key))?|token|password|passwd|credentials?|database[_-]?url|db[_-]?url|connection[_-]?string|mongo(?:db)?[_-]?uri|redis[_-]?url)|[A-Za-z0-9]*(?:apiKey|ApiKey|apikey|privateKey|PrivateKey|databaseUrl|DatabaseUrl|dbUrl|DbUrl|connectionString|ConnectionString|mongoUri|MongoUri|mongodbUri|MongodbUri|mongoDbUri|MongoDbUri|redisUrl|RedisUrl|Token|Secret|Password|Credential|Credentials)|auth(?:orization)?|bearer|client(?:_|-)?secret|cookie|id(?:_|-)?token|pass(?:word)?|proxy(?:_|-)?authorization|refresh(?:_|-)?token|sentry(?:_|-)?key|session(?:_|-)?id|set(?:_|-)?cookie|sig(?:nature)?|write(?:_|-)?key|x(?:_|-)?api(?:_|-)?key)$/i;
@@ -50,6 +50,7 @@ function redactUrlToken(token) {
     catch {
         return token;
     }
+    const originalHref = parsed.href;
     if (parsed.username.length > 0)
         parsed.username = "[REDACTED]";
     if (parsed.password.length > 0)
@@ -74,7 +75,7 @@ function redactUrlToken(token) {
         if (hashMutated)
             parsed.hash = `#${hashParams.toString()}`;
     }
-    return parsed.toString();
+    return parsed.href === originalHref ? token : parsed.href;
 }
 function redactLooseUrlParameterText(text) {
     return text.replace(/(?<![^\s"'`<>\])}])[^\s"'`<>\])}]*[?#&][^\s"'`<>\])}]*/g, (token) => {
@@ -160,6 +161,52 @@ function findBalancedJsonEnd(text, startIndex) {
     }
     return undefined;
 }
+function redactSerializedJson(text) {
+    // Validate grammar only; rebuilding parsed values loses duplicates and numeric spelling.
+    try {
+        JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    let output = "";
+    let cursor = 0;
+    const strings = /"(?:\\.|[^"\\])*"/g;
+    let match;
+    while ((match = strings.exec(text)) !== null) {
+        const end = strings.lastIndex;
+        const value = JSON.parse(match[0]);
+        const redacted = redactSensitiveText(value);
+        if (redacted !== value) {
+            output += text.slice(cursor, match.index) + JSON.stringify(redacted);
+            cursor = end;
+        }
+        const separator = /^\s*:\s*/.exec(text.slice(end));
+        if (!separator || !isSensitiveFieldName(value))
+            continue;
+        const valueStart = end + separator[0].length;
+        let valueEnd = findBalancedJsonEnd(text, valueStart);
+        if (valueEnd !== undefined) {
+            valueEnd += 1;
+        }
+        else if (text[valueStart] === '"') {
+            strings.lastIndex = valueStart;
+            const fieldValue = strings.exec(text);
+            valueEnd = strings.lastIndex;
+            if (JSON.parse(fieldValue[0]) === "[REDACTED]")
+                continue;
+        }
+        else {
+            valueEnd = valueStart;
+            while (valueEnd < text.length && !/[\s,\]}]/.test(text[valueEnd]))
+                valueEnd += 1;
+        }
+        output += text.slice(cursor, valueStart) + '"[REDACTED]"';
+        cursor = valueEnd;
+        strings.lastIndex = valueEnd;
+    }
+    return output + text.slice(cursor);
+}
 function redactEmbeddedStructuredText(text) {
     let output = "";
     let cursor = 0;
@@ -177,15 +224,7 @@ function redactEmbeddedStructuredText(text) {
             continue;
         }
         const candidate = text.slice(cursor, endIndex + 1);
-        try {
-            const parsed = JSON.parse(candidate);
-            const redacted = typeof parsed === "string" ? redactSensitiveText(parsed) : JSON.stringify(redactSensitiveValue(parsed));
-            const original = typeof parsed === "string" ? parsed : JSON.stringify(parsed);
-            output += redacted === original ? candidate : redacted;
-        }
-        catch {
-            output += candidate;
-        }
+        output += redactSerializedJson(candidate) ?? candidate;
         cursor = endIndex + 1;
     }
     return output;
@@ -198,21 +237,22 @@ function redactStandaloneBasicCredential(text) {
     });
 }
 function credentialTrailingPunctuation(credential) {
-    return credential.match(/^(.+?)([,.]+)$/)?.[2] ?? "";
-}
-function isBearerHelpPlaceholder(label, credential, trailing) {
-    return label.toLowerCase() === "authorization bearer" && credential.toLowerCase() === "token" && trailing === ")";
+    return credential.match(/[,.:;!?]+$/)?.[0] ?? "";
 }
 function formatRedactedCredential(label, credential, trailing = "") {
     return `${label} [REDACTED]${credentialTrailingPunctuation(credential)}${trailing}`;
 }
 function redactBearerCredentials(text) {
     return text
-        .replace(/\b(Authorization\s*:\s*Bearer)\s+([^\s"',)\[\]]+)([),.]?)/gi, (_match, label, credential, trailing) => {
+        .replace(/((?:\b([A-Za-z][A-Za-z0-9_-]*)\s*[:=]\s*|(?:^|\s)(?:-H\s*|--header(?:\s+|=)))["']?Bearer)\s+([^\s"',)\[\]]+)([),.]?)/gi, (match, label, field, credential, trailing) => {
+        if (field && !isSensitiveFieldName(field))
+            return match;
         return formatRedactedCredential(label, credential, trailing);
     })
-        .replace(/\b((?:Authorization\s+)?Bearer)\s+([^\s"',)\[\]]+)([),.]?)/gi, (match, label, credential, trailing) => {
-        if (isBearerHelpPlaceholder(label, credential, trailing))
+        .replace(/\b(Bearer)\s+([^\s"',)\[\]]+)([),.]?)/gi, (match, label, credential, trailing) => {
+        // Without a credential field/header, require a bearer-token shape, not prose, HTML or a URL.
+        const token = credential.slice(0, credential.length - credentialTrailingPunctuation(credential).length);
+        if (!/^[A-Za-z0-9._~+/-]+=*$/.test(token) || !/[0-9._~+/=-]/.test(token))
             return match;
         return formatRedactedCredential(label, credential, trailing);
     });
@@ -236,7 +276,13 @@ function redactEnvSecretAssignments(text) {
     });
 }
 export function redactSensitiveText(text) {
-    return redactEmbeddedStructuredText(redactEnvSecretAssignments(redactStandaloneBasicCredential(redactBearerCredentials(redactLooseUrlParameterText(redactLooseUrlUserinfo(redactLooseUrlMatches(text))))
+    // Redact JSON string literals before text heuristics can consume their escapes.
+    // Non-JSON stays whole so assignments and headers retain their credential context.
+    const serialized = redactSerializedJson(text);
+    if (serialized !== undefined)
+        return serialized;
+    const embeddedRedactedText = redactEmbeddedStructuredText(text);
+    return redactEmbeddedStructuredText(redactEnvSecretAssignments(redactStandaloneBasicCredential(redactBearerCredentials(redactLooseUrlParameterText(redactLooseUrlUserinfo(redactLooseUrlMatches(embeddedRedactedText))))
         .replace(/\b(Authorization\s*:\s*Basic)\s+[^\s",]+/gi, "$1 [REDACTED]")
         .replace(/\b(Cookie|Set-Cookie)\s*:\s*[^\n\r"]+/gi, "$1: [REDACTED]"))));
 }
@@ -744,6 +790,8 @@ export function getDefaultHeadlessCompatUserAgent(platform = process.platform) {
     return DEFAULT_HEADLESS_COMPAT_USER_AGENT_BY_PLATFORM[platform] ?? FALLBACK_HEADLESS_COMPAT_USER_AGENT;
 }
 export function canUseHeadlessCompatibilityUserAgent(args, env = getAgentBrowserProcessEnvironment()) {
+    if (env.AGENT_BROWSER_SESSION !== undefined)
+        return false;
     if (hasFlagToken(args, "--user-agent") || hasFlagToken(args, "--args"))
         return false;
     if (hasFlagToken(args, "--cdp") || hasFlagToken(args, "--provider") || hasFlagToken(args, "-p"))
@@ -798,6 +846,9 @@ export function getStartupScopedFlags(args) {
         .filter((flag) => hasLaunchScopedFlagToken(args, flag));
 }
 export function buildExecutionPlan(args, options) {
+    const nativeSession = getAgentBrowserProcessEnvironment().AGENT_BROWSER_SESSION;
+    if (nativeSession !== undefined && !isPlainTextInspectionArgs(args) && extractExplicitSessionName(args) === undefined)
+        args = ["--session", nativeSession, ...args];
     const invalidValueFlag = getInvalidValueFlagDetails(args);
     const explicitNamespacePresent = scanUpstreamGlobalFlagOccurrences(args, "--namespace").length > 0;
     const explicitNamespace = extractExplicitNamespace(args);
@@ -806,7 +857,7 @@ export function buildExecutionPlan(args, options) {
     const plainTextInspection = isPlainTextInspectionArgs(args);
     const argvDescriptor = parseArgvDescriptor(args);
     const commandInfo = argvDescriptor.commandInfo;
-    const commandNeedsManagedSession = !plainTextInspection && needsManagedSession(argvDescriptor);
+    const commandNeedsManagedSession = !plainTextInspection && !options.browserIndependentReadConfirmation && needsManagedSession(argvDescriptor, options.stdin);
     const effectiveArgs = plainTextInspection ? [...args] : args.includes("--json") ? [] : ["--json"];
     let namespace = explicitNamespacePresent ? explicitNamespace ?? "" : undefined;
     if (plainTextInspection) {
@@ -902,6 +953,7 @@ export function buildExecutionPlan(args, options) {
         namespace = resolveAgentBrowserNamespace(args, getAgentBrowserProcessEnvironment().AGENT_BROWSER_NAMESPACE);
     }
     const targetsActiveManagedSession = options.managedSessionActive
+        && commandNeedsManagedSession
         && sessionName
         && getAgentBrowserSessionIdentityKey(sessionName, namespace) === getAgentBrowserSessionIdentityKey(options.managedSessionName, options.managedSessionNamespace);
     if (targetsActiveManagedSession && startupScopedFlags.length > 0 && !isCloseCommand(commandInfo.command) && !validationError) {