pi-agent-browser-native 0.9.4 → 0.9.5

package/dist/extensions/agent-browser/lib/browser-execution-claims.js

@@ -123,9 +123,8 @@ async function publishTicket(claim) {
     await rename(candidate, join(claim.path, LOCK_TICKET_FILE));
     return ticket.ticket;
 }
-function acquisitionExpired(budget) {
-    return (budget.signal?.aborted === true ||
-        (budget.deadline !== undefined && Date.now() >= budget.deadline));
+function acquisitionCancelled(budget) {
+    return budget.signal?.aborted === true;
 }
 async function waitForTurn(claim, ticket, budget, deadline) {
     while (budget.signal?.aborted !== true) {
@@ -145,8 +144,9 @@ async function waitForTurn(claim, ticket, budget, deadline) {
             // Opportunistic GC must finish before the final cancellation check.
             // oxlint-disable-next-line no-await-in-loop
             await cleanDeadPolicyArtifacts(claim.directory, budget);
-            // Re-read cancellation/deadline after the awaited filesystem/native probes.
-            return !acquisitionExpired(budget);
+            // GC stays within the wait budget but cannot revoke a turn this claim already won;
+            // only cancellation can. Callers enforce their own operation deadlines.
+            return !acquisitionCancelled(budget);
         }
         if (Date.now() >= deadline) {
             return false;

package/dist/extensions/agent-browser/lib/config-policy.js

@@ -5,7 +5,7 @@ import { join, resolve } from "node:path";
 import { DEFAULT_WEB_SEARCH_PROVIDER, WEB_SEARCH_PROVIDERS, getWebSearchProviderDescriptor, getWebSearchProviderEnvVar, } from "./config-providers.js";
 import { parseAgentBrowserConfigLayer, describeUnknownError } from "./config-validation.js";
 export * from "./config-providers.js";
-export { parseAgentBrowserConfigLayer, validateAgentBrowserConfig, validateWebSearchProvider, } from "./config-validation.js";
+export { parseAgentBrowserConfigJson, parseAgentBrowserConfigLayer, validateAgentBrowserConfig, validateWebSearchProvider, } from "./config-validation.js";
 /** @typedef {import("./config-providers.js").WebSearchProvider} WebSearchProvider */
 /** @typedef {import("./config-providers.js").ExaSearchType} ExaSearchType */
 /** @typedef {import("./config-providers.js").WebSearchProviderConfigKey} WebSearchProviderConfigKey */

package/dist/extensions/agent-browser/lib/config-validation.js

@@ -179,6 +179,23 @@ export function validateAgentBrowserConfig(value, path, errors, warnings) {
         ...(browser !== undefined ? { browser } : {}),
     };
 }
+/** Parse config without retaining native token previews or source-bearing error causes.
+ * @param {string} raw
+ * @returns {{ readonly ok: true; readonly value: unknown } | { readonly ok: false; readonly error: string }} */
+export function parseAgentBrowserConfigJson(raw) {
+    try {
+        return { ok: true, value: JSON.parse(raw) };
+    }
+    catch (error) {
+        const location = error instanceof Error
+            ? error.message.match(/at position \d+(?: \(line \d+ column \d+\))?/)?.[0]
+            : undefined;
+        return {
+            ok: false,
+            error: location === undefined ? "Invalid JSON." : `Invalid JSON ${location}.`,
+        };
+    }
+}
 /** @param {string} raw
  * @param {string} path
  * @param {ConfigLayerScope} scope
@@ -186,16 +203,12 @@ export function validateAgentBrowserConfig(value, path, errors, warnings) {
  * @param {ConfigDiagnostics} warnings
  * @returns {ConfigLayer | undefined} */
 export function parseAgentBrowserConfigLayer(raw, path, scope, errors, warnings) {
-    /** @type {unknown} */
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (error) {
-        errors.push(`Could not parse ${scope} config ${path}: ${error instanceof Error ? error.message : describeUnknownError(error)}`);
+    const parsed = parseAgentBrowserConfigJson(raw);
+    if (!parsed.ok) {
+        errors.push(`Could not parse ${scope} config ${path}: ${parsed.error}`);
         return;
     }
-    const config = validateAgentBrowserConfig(parsed, path, errors, warnings);
+    const config = validateAgentBrowserConfig(parsed.value, path, errors, warnings);
     return config ? { config, path, scope } : undefined;
 }
 /** @param {unknown} value */

package/dist/extensions/agent-browser/lib/config.js

@@ -1,7 +1,7 @@
 import { exec as execCallback } from "node:child_process";
 import { promisify } from "node:util";
 import { SECRET_COMMAND_TIMEOUT_MS, getWebSearchCredentialSource, getWebSearchProviderOrder, loadAgentBrowserConfigStateSync, resolveEnvInterpolations, } from "./config-policy.js";
-export { AGENT_BROWSER_CONFIG_ENV, BRAVE_API_KEY_ENV, CONFIG_RELATIVE_PATH, DEFAULT_WEB_SEARCH_PROVIDER, EXA_API_KEY_ENV, EXA_SEARCH_TYPES, GLOBAL_CONFIG_RELATIVE_PATH, SECRET_COMMAND_TIMEOUT_MS, WEB_SEARCH_PROVIDER_CONFIG_KEYS, WEB_SEARCH_PROVIDER_DESCRIPTORS, WEB_SEARCH_PROVIDER_ENV_VARS, WEB_SEARCH_PROVIDERS, buildAgentBrowserConfigState, buildWebSearchCredentialSources, canRegisterWebSearchTool, classifyCredentialSource, formatBrowserExecutableStatus, formatBrowserProfileStatus, getAgentBrowserConfigPaths, getCredentialSourceSummary, getGlobalAgentBrowserConfigPath, getProjectAgentBrowserConfigPath, getWebSearchCredentialSource, getWebSearchProviderConfigKey, getWebSearchProviderDescriptor, getWebSearchProviderEnvVar, getWebSearchProviderLabel, getWebSearchProviderOrder, hasPotentialCredentialSource, isWebSearchProvider, loadAgentBrowserConfigStateSync, mergeAgentBrowserConfig, parseAgentBrowserConfigLayer, resolveEnvInterpolations, summarizeConfigFiles, validateAgentBrowserConfig, validateWebSearchProvider, } from "./config-policy.js";
+export { AGENT_BROWSER_CONFIG_ENV, BRAVE_API_KEY_ENV, CONFIG_RELATIVE_PATH, DEFAULT_WEB_SEARCH_PROVIDER, EXA_API_KEY_ENV, EXA_SEARCH_TYPES, GLOBAL_CONFIG_RELATIVE_PATH, SECRET_COMMAND_TIMEOUT_MS, WEB_SEARCH_PROVIDER_CONFIG_KEYS, WEB_SEARCH_PROVIDER_ENV_VARS, WEB_SEARCH_PROVIDERS, buildAgentBrowserConfigState, buildWebSearchCredentialSources, canRegisterWebSearchTool, classifyCredentialSource, formatBrowserExecutableStatus, formatBrowserProfileStatus, getAgentBrowserConfigPaths, getCredentialSourceSummary, getGlobalAgentBrowserConfigPath, getProjectAgentBrowserConfigPath, getWebSearchCredentialSource, getWebSearchProviderDescriptor, getWebSearchProviderLabel, getWebSearchProviderOrder, hasPotentialCredentialSource, isWebSearchProvider, loadAgentBrowserConfigStateSync, mergeAgentBrowserConfig, parseAgentBrowserConfigJson, parseAgentBrowserConfigLayer, resolveEnvInterpolations, summarizeConfigFiles, validateAgentBrowserConfig, validateWebSearchProvider, } from "./config-policy.js";
 // Node's callback-oriented exec returns ChildProcess; promisify intentionally ignores that return.
 // oxlint-disable-next-line typescript/strict-void-return
 const exec = promisify(execCallback);

package/dist/extensions/agent-browser/lib/electron/cdp.js

@@ -7,8 +7,12 @@ export function parseCdpVersion(value) {
     if (!isRecord(value)) {
         return undefined;
     }
+    const browser = asString(value.Browser) ?? asString(value.browser);
+    if (browser === undefined) {
+        return undefined;
+    }
     return {
-        browser: asString(value.Browser) ?? asString(value.browser),
+        browser,
         protocolVersion: asString(value["Protocol-Version"]) ?? asString(value.protocolVersion),
         userAgent: asString(value["User-Agent"]) ?? asString(value.userAgent),
         v8Version: asString(value["V8-Version"]) ?? asString(value.v8Version),

package/dist/extensions/agent-browser/lib/electron/cleanup.js

@@ -1,19 +1,13 @@
-import { execFile } from "node:child_process";
 import { lstat, rm } from "node:fs/promises";
-import { win32 } from "node:path";
-import { promisify } from "node:util";
 import { fetchCdpJson, parseCdpTargets, parseCdpVersion, } from "./cdp.js";
 import { ELECTRON_PROFILE_DIR_PREFIX } from "./launch-types.js";
 import { pathExists } from "../fs-utils.js";
 import { isRecord } from "../parsing.js";
+import { readProcessStartIdentity, processStartIdentitiesMatch } from "../process-identity.js";
 import { stringifyUnknown } from "../results/text.js";
 import { getSecureTempChildDirectoryValidationError } from "../temp.js";
 const ELECTRON_CLEANUP_DEFAULT_TIMEOUT_MS = 5_000;
 const ELECTRON_CLEANUP_POLL_INTERVAL_MS = 100;
-const RESTORED_PROCESS_COMMAND_TIMEOUT_MS = 1_000;
-// Node's callback-style execFile returns a ChildProcess; promisify owns its completion callback, not that return value.
-// oxlint-disable-next-line typescript/strict-void-return
-const execFileAsync = promisify(execFile);
 function sleep(ms) {
     return new Promise((resolve) => {
         setTimeout(resolve, ms);
@@ -77,48 +71,16 @@ async function waitForProcessExit(child, pid, deadlineMs) {
     }
     return hasProcessExited(child, pid);
 }
-async function readPidCommandLine(pid) {
-    if (!Number.isSafeInteger(pid) || pid <= 0) {
-        return undefined;
-    }
-    try {
-        // Win32_Process.CommandLine is the native ownership evidence; process
-        // start time (used by daemon-policy locks) cannot prove profile ownership.
-        const systemRoot = process.env.SystemRoot;
-        const windowsRoot = systemRoot !== undefined && systemRoot.length > 0 && win32.isAbsolute(systemRoot)
-            ? systemRoot
-            : "C:\\Windows";
-        const file = process.platform === "win32"
-            ? win32.join(windowsRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe")
-            : "ps";
-        const args = process.platform === "win32"
-            ? [
-                "-NoProfile",
-                "-NonInteractive",
-                "-Command",
-                `[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new(); $p = [wmi]"Win32_Process.Handle='${pid}'"; [Console]::WriteLine($p.CommandLine)`,
-            ]
-            : ["-ww", "-p", String(pid), "-o", "command="];
-        const { stdout } = await execFileAsync(file, args, {
-            timeout: RESTORED_PROCESS_COMMAND_TIMEOUT_MS,
-        });
-        const commandLine = stdout.trim();
-        return commandLine.length === 0 ? undefined : commandLine;
-    }
-    catch {
-        return undefined;
-    }
-}
-function restoredLaunchCommandMatchesRecord(record, commandLine) {
-    return commandLine?.includes(`--user-data-dir=${record.userDataDir}`) === true;
-}
 async function getRestoredProcessVerificationError(record) {
-    const commandLine = record.pid === undefined ? undefined : await readPidCommandLine(record.pid);
-    if (commandLine === undefined || commandLine.length === 0) {
-        return `PID ${String(record.pid)} is alive, but this session has no tracked child handle and its command line could not be inspected; refusing to signal a restored PID that may have been reused.`;
+    if (record.startIdentity === undefined || record.startIdentity.length === 0) {
+        return `PID ${String(record.pid)} is alive, but this session has no tracked child handle or recorded start identity; refusing to signal a restored PID that may have been reused.`;
     }
-    if (!restoredLaunchCommandMatchesRecord(record, commandLine)) {
-        return `PID ${String(record.pid)} is alive, but this session has no tracked child handle and its command line does not include wrapper-owned user data dir ${record.userDataDir}; refusing to signal a restored PID that may have been reused.`;
+    const currentIdentity = record.pid === undefined ? undefined : await readProcessStartIdentity(record.pid);
+    if (currentIdentity === undefined) {
+        return `PID ${String(record.pid)} is alive, but its current start identity could not be inspected; refusing to signal a restored PID that may have been reused.`;
+    }
+    if (!processStartIdentitiesMatch(record.startIdentity, currentIdentity)) {
+        return `PID ${String(record.pid)} is alive, but its start identity does not match the wrapper launch record; refusing to signal a restored PID that may have been reused.`;
     }
     return undefined;
 }
@@ -178,6 +140,10 @@ async function cleanupRestoredProcess(record, deadlineMs) {
     if (await waitForProcessExit(undefined, record.pid, deadlineMs)) {
         return { resource: "process", state: "removed" };
     }
+    const killVerificationError = await getRestoredProcessVerificationError(record);
+    if (killVerificationError !== undefined) {
+        return { error: killVerificationError, resource: "process", state: "failed" };
+    }
     signalRestoredLaunchProcess(record, "SIGKILL");
     if (await waitForProcessExit(undefined, record.pid, Date.now() + 1_000)) {
         return { resource: "process", state: "removed" };

package/dist/extensions/agent-browser/lib/electron/discovery-evidence.js

@@ -49,6 +49,7 @@ export async function directoryContainsChromePak(directory) {
 }
 export async function hasElectronAppPayload(resourcesDirectory) {
     return ((await pathExists(join(resourcesDirectory, "app.asar"))) ||
+        (await pathExists(join(resourcesDirectory, "default_app.asar"))) ||
         (await isDirectory(join(resourcesDirectory, "app"))));
 }
 export async function hasLinuxElectronEvidence(executablePath) {

package/dist/extensions/agent-browser/lib/electron/launch.js

@@ -3,6 +3,7 @@ import { rm } from "node:fs/promises";
 import { discoverElectronApps, inspectElectronAppPath, inspectElectronExecutablePath, } from "./discovery.js";
 import { createSecureTempDirectory, preserveSecureTempDirectory } from "../temp.js";
 import { stringifyUnknown } from "../results/text.js";
+import { readProcessStartIdentity } from "../process-identity.js";
 import { isElectronLaunchAborted, pollCdpMetadata, pollDevToolsActivePort, } from "./launch-monitor.js";
 import { ElectronLaunchProcess } from "./launch-process.js";
 import { ELECTRON_LAUNCH_RECORD_VERSION, ELECTRON_PROFILE_DIR_PREFIX, } from "./launch-types.js";
@@ -93,7 +94,7 @@ function launchFailureMessage(reason, target, detail) {
         case "aborted":
             return `Electron launch was aborted${target ? ` before ${label} finished starting` : " before the app started"}.`;
         case "non-electron-target":
-            return `Electron launch rejected: ${label} does not have Electron framework evidence.`;
+            return `Electron launch rejected: ${label} does not have the required Electron runtime and app payload evidence.`;
         case "policy-blocked":
             return detail ?? `Electron launch blocked by caller policy for ${label}.`;
         case "single-instance-conflict":
@@ -116,6 +117,7 @@ class ElectronLaunchAttempt {
     timeoutMs;
     deadlineMs;
     appArgs;
+    startIdentity;
     constructor(options, target, userDataDir, timing) {
         this.options = options;
         this.target = target;
@@ -194,6 +196,7 @@ class ElectronLaunchAttempt {
             platform: this.target.platform,
             port,
             processGroupId: process.platform === "win32" ? undefined : pid,
+            startIdentity: this.startIdentity,
             targetType: this.options.targetType,
             userDataDir: this.userDataDir,
             version: ELECTRON_LAUNCH_RECORD_VERSION,
@@ -211,6 +214,14 @@ class ElectronLaunchAttempt {
         if (this.process.child === undefined) {
             return this.fail(isElectronLaunchAborted(this.options.signal) ? "aborted" : "spawn-error", this.process.spawnError?.message);
         }
+        const pid = this.process.child.pid;
+        this.startIdentity =
+            pid === undefined
+                ? undefined
+                : await readProcessStartIdentity(pid, process.platform, {
+                    deadline: this.deadlineMs,
+                    signal: this.options.signal,
+                });
         const portResult = await pollDevToolsActivePort({
             deadlineMs: this.deadlineMs,
             getChildExit: this.process.childExit,

package/dist/extensions/agent-browser/lib/fs-utils.js

@@ -1,4 +1,4 @@
-import { access, stat } from "node:fs/promises";
+import { access } from "node:fs/promises";
 export async function pathExists(path) {
     try {
         await access(path);
@@ -8,11 +8,3 @@ export async function pathExists(path) {
         return false;
     }
 }
-export async function directoryExists(path) {
-    try {
-        return (await stat(path)).isDirectory();
-    }
-    catch {
-        return false;
-    }
-}

package/dist/extensions/agent-browser/lib/input-modes/job.js

@@ -19,9 +19,10 @@ function buildQaVisibleTextPredicate(text) {
     if (style.display === "none" || style.visibility === "hidden" || Number(style.opacity) === 0) return false;
     return element.getClientRects().length > 0;
   };
-  const hasVisibleAncestors = (node) => {
+  const ancestorsAllowVisibility = (node) => {
     for (let element = node.parentElement; element; element = element.parentElement) {
-      if (!isVisibleElement(element)) return false;
+      const style = window.getComputedStyle(element);
+      if (style.display === "none" || Number(style.opacity) === 0) return false;
       if (element === root) break;
     }
     return true;
@@ -29,14 +30,16 @@ function buildQaVisibleTextPredicate(text) {
   const textWalker = document.createTreeWalker(root, NodeFilter.SHOW_TEXT);
   let visitedText = 0;
   for (let node = textWalker.nextNode(); node && visitedText < 6000; node = textWalker.nextNode(), visitedText += 1) {
-    if (!hasVisibleAncestors(node)) continue;
+    const parent = node.parentElement;
+    if (!(parent instanceof HTMLElement) || skipTags.has(parent.tagName)) continue;
+    if (window.getComputedStyle(parent).visibility === "hidden" || !ancestorsAllowVisibility(node)) continue;
     if (normalize(node.nodeValue).includes(expected)) return true;
   }
   const elementWalker = document.createTreeWalker(root, NodeFilter.SHOW_ELEMENT);
   let visitedElements = 0;
   for (let node = elementWalker.nextNode(); node && visitedElements < 3000; node = elementWalker.nextNode(), visitedElements += 1) {
     const element = node;
-    if (!isVisibleElement(element) || !("value" in element)) continue;
+    if (!isVisibleElement(element) || !ancestorsAllowVisibility(element) || !("value" in element)) continue;
     if (normalize(element.value).includes(expected)) return true;
   }
   return false;

package/dist/extensions/agent-browser/lib/input-modes/lookup-network-evidence.js

@@ -47,7 +47,17 @@ export function getFailedNetworkRequests(data, queryText) {
             });
         }
     }
-    return failed;
+    const seenRequestIds = new Set();
+    return failed.filter(({ requestId: id }) => {
+        if (id === undefined) {
+            return true;
+        }
+        if (seenRequestIds.has(id)) {
+            return false;
+        }
+        seenRequestIds.add(id);
+        return true;
+    });
 }
 export function distinctNetworkCandidates(candidates) {
     const keys = new Set();
@@ -84,7 +94,7 @@ function correlatesWithFailure(value, failedIds, failedUrls) {
     const url = typeof value.url === "string" ? value.url : undefined;
     return (id !== undefined && failedIds.has(id)) || (url !== undefined && failedUrls.has(url));
 }
-export function observeInitiatorCandidates(data, failedRequests) {
+export function observeInitiatorCandidates(data, failedRequests, queryText) {
     const failedIds = new Set(failedRequests.map((request) => request.requestId).filter((value) => value !== undefined));
     const failedUrls = new Set(failedRequests.map((request) => request.url).filter((value) => value !== undefined));
     const candidates = [];
@@ -95,7 +105,9 @@ export function observeInitiatorCandidates(data, failedRequests) {
             if (!isRecord(value)) {
                 continue;
             }
-            if (correlatesWithFailure(value, failedIds, failedUrls) || isFailedNetworkRecord(value)) {
+            const url = typeof value.url === "string" ? value.url : undefined;
+            if (networkRequestMatchesQuery(url, queryText) &&
+                (correlatesWithFailure(value, failedIds, failedUrls) || isFailedNetworkRecord(value))) {
                 candidates.push(...initiatorCandidates(value));
             }
         }

package/dist/extensions/agent-browser/lib/input-modes/lookups.js

@@ -64,8 +64,9 @@ function networkSummary(status, failedCount, candidateCount) {
 export async function analyzeNetworkSourceLookupResults(data, compiled, cwd) {
     const { distinctNetworkCandidates, getFailedNetworkRequests, observeInitiatorCandidates } = await import("./lookup-network-evidence.js");
     const { scanWorkspaceRequests } = await import("./lookup-workspace.js");
-    const failedRequests = getFailedNetworkRequests(data, compiled.query.url ?? compiled.query.filter);
-    const observed = observeInitiatorCandidates(data, failedRequests);
+    const queryText = compiled.query.filter ?? compiled.query.url;
+    const failedRequests = getFailedNetworkRequests(data, queryText);
+    const observed = observeInitiatorCandidates(data, failedRequests, queryText);
     const workspace = await scanWorkspaceRequests(compiled.query, failedRequests, cwd);
     const candidates = distinctNetworkCandidates([...observed, ...workspace.candidates]);
     const status = networkStatus(failedRequests.length, candidates.length);

package/dist/extensions/agent-browser/lib/input-modes/params.js

@@ -1,9 +1,9 @@
-import { JsonSchema } from "../json-schema.js";
-import { StringEnum as localStringEnum } from "../string-enum-schema.js";
+import { JsonSchema as Type } from "../json-schema.js";
+import { StringEnum } from "../string-enum-schema.js";
 import { ELECTRON_DISCOVERY_DEFAULT_MAX_RESULTS, ELECTRON_DISCOVERY_MAX_RESULTS, } from "../electron/discovery-types.js";
 import { AGENT_BROWSER_CODE_MAX_TIMEOUT_MS, AGENT_BROWSER_ELECTRON_HANDOFFS, AGENT_BROWSER_ELECTRON_TARGET_TYPES, AGENT_BROWSER_QA_LOAD_STATES, AGENT_BROWSER_SEMANTIC_ACTIONS, AGENT_BROWSER_SEMANTIC_LOCATORS, DEFAULT_SESSION_MODE, SOURCE_LOOKUP_MAX_WORKSPACE_FILES, } from "./types.js";
 const AGENT_BROWSER_ADVANCED_TOOLS = ["action", "qa", "electron", "source", "network"];
-function outputProperties(Type) {
+function outputProperties() {
     return {
         outputPath: Type.Optional(Type.String({
             description: "Result-data path, separate from browser artifact paths.",
@@ -12,14 +12,14 @@ function outputProperties(Type) {
         timeoutMs: Type.Optional(Type.Integer({ description: "Timeout in ms; exceed explicit waits.", minimum: 1 })),
     };
 }
-function sessionModeProperty(Type, StringEnum) {
+function sessionModeProperty() {
     return Type.Optional(StringEnum(["auto", "fresh"], {
         description: "Native configured sessions win; auto reuses the browser, fresh intentionally launches a separate managed browser.",
         default: DEFAULT_SESSION_MODE,
     }));
 }
 // Keep the always-on schemas small; specialized guidance belongs to each advanced tool.
-export function createAgentBrowserParamsSchema(Type = JsonSchema, StringEnum = localStringEnum) {
+export function createAgentBrowserParamsSchema() {
     return Type.Unsafe(Type.Object({
         args: Type.Array(Type.String(), {
             description: "Native agent-browser argv without the binary or shell syntax. Fixed sequences: batch --bail with JSON-array stdin.",
@@ -28,11 +28,11 @@ export function createAgentBrowserParamsSchema(Type = JsonSchema, StringEnum = l
         stdin: Type.Optional(Type.String({
             description: "Native batch JSON, eval --stdin source, or auth save --password-stdin text.",
         })),
-        ...outputProperties(Type),
-        sessionMode: sessionModeProperty(Type, StringEnum),
+        ...outputProperties(),
+        sessionMode: sessionModeProperty(),
     }, { additionalProperties: false }));
 }
-export function createAgentBrowserCodeParamsSchema(Type = JsonSchema) {
+export function createAgentBrowserCodeParamsSchema() {
     return Type.Unsafe(Type.Object({
         code: Type.String({
             description: "JavaScript with await browser({args, stdin?, timeoutMs?}), emit(JSON), and emitImage(image handle). Fresh JS context; persistent browser.",
@@ -46,11 +46,11 @@ export function createAgentBrowserCodeParamsSchema(Type = JsonSchema) {
         namespace: Type.Optional(Type.String({
             description: "Native namespace; empty string selects the default namespace.",
         })),
-        ...outputProperties(Type),
+        ...outputProperties(),
         timeoutMs: Type.Optional(Type.Integer({ minimum: 1, maximum: AGENT_BROWSER_CODE_MAX_TIMEOUT_MS })),
     }, { additionalProperties: false }));
 }
-export function createAgentBrowserActionParamsSchema(Type = JsonSchema, StringEnum = localStringEnum) {
+export function createAgentBrowserActionParamsSchema() {
     return Type.Unsafe(Type.Object({
         action: StringEnum(AGENT_BROWSER_SEMANTIC_ACTIONS),
         locator: Type.Optional(StringEnum(AGENT_BROWSER_SEMANTIC_LOCATORS, {
@@ -68,7 +68,7 @@ export function createAgentBrowserActionParamsSchema(Type = JsonSchema, StringEn
         role: Type.Optional(Type.String({ description: "Role locator; select needs combobox or listbox." })),
         name: Type.Optional(Type.String({ description: "Accessible name." })),
         session: Type.Optional(Type.String({ description: "Upstream session name." })),
-        ...outputProperties(Type),
+        ...outputProperties(),
     }, {
         additionalProperties: false,
         // Top-level properties let Pi normalize optional nulls before validating branches.
@@ -81,7 +81,7 @@ export function createAgentBrowserActionParamsSchema(Type = JsonSchema, StringEn
         ],
     }));
 }
-export function createAgentBrowserQaParamsSchema(Type = JsonSchema, StringEnum = localStringEnum) {
+export function createAgentBrowserQaParamsSchema() {
     return Type.Unsafe(Type.Object({
         url: Type.Optional(Type.String()),
         attached: Type.Optional(Type.Boolean()),
@@ -92,8 +92,8 @@ export function createAgentBrowserQaParamsSchema(Type = JsonSchema, StringEnum =
         checkErrors: Type.Optional(Type.Boolean()),
         checkNetwork: Type.Optional(Type.Boolean()),
         loadState: Type.Optional(StringEnum(AGENT_BROWSER_QA_LOAD_STATES)),
-        ...outputProperties(Type),
-        sessionMode: sessionModeProperty(Type, StringEnum),
+        ...outputProperties(),
+        sessionMode: sessionModeProperty(),
     }, {
         additionalProperties: false,
         anyOf: [
@@ -105,8 +105,8 @@ export function createAgentBrowserQaParamsSchema(Type = JsonSchema, StringEnum =
         ],
     }));
 }
-export function createAgentBrowserElectronParamsSchema(Type = JsonSchema, StringEnum = localStringEnum) {
-    const common = { outputPath: outputProperties(Type).outputPath };
+export function createAgentBrowserElectronParamsSchema() {
+    const common = { outputPath: outputProperties().outputPath };
     const timeoutMs = Type.Optional(Type.Integer({ minimum: 1 }));
     const list = {
         query: Type.Optional(Type.String({ description: "Case-insensitive app filter.", minLength: 1 })),
@@ -147,7 +147,7 @@ export function createAgentBrowserElectronParamsSchema(Type = JsonSchema, String
         ],
     }));
 }
-export function createAgentBrowserSourceParamsSchema(Type = JsonSchema, StringEnum = localStringEnum) {
+export function createAgentBrowserSourceParamsSchema() {
     return Type.Unsafe(Type.Object({
         selector: Type.Optional(Type.String({ description: "Visible selector or @ref." })),
         reactFiberId: Type.Optional(Type.String({ description: "React fiber id; requires --enable react-devtools." })),
@@ -158,11 +158,11 @@ export function createAgentBrowserSourceParamsSchema(Type = JsonSchema, StringEn
             minimum: 1,
             maximum: SOURCE_LOOKUP_MAX_WORKSPACE_FILES,
         })),
-        ...outputProperties(Type),
-        sessionMode: sessionModeProperty(Type, StringEnum),
+        ...outputProperties(),
+        sessionMode: sessionModeProperty(),
     }, { additionalProperties: false }));
 }
-export function createAgentBrowserNetworkSourceParamsSchema(Type = JsonSchema, StringEnum = localStringEnum) {
+export function createAgentBrowserNetworkSourceParamsSchema() {
     return Type.Unsafe(Type.Object({
         filter: Type.Optional(Type.String({ description: "Network request filter." })),
         namespace: Type.Optional(Type.String()),
@@ -174,11 +174,11 @@ export function createAgentBrowserNetworkSourceParamsSchema(Type = JsonSchema, S
             minimum: 1,
             maximum: SOURCE_LOOKUP_MAX_WORKSPACE_FILES,
         })),
-        ...outputProperties(Type),
-        sessionMode: sessionModeProperty(Type, StringEnum),
+        ...outputProperties(),
+        sessionMode: sessionModeProperty(),
     }, { additionalProperties: false }));
 }
-export function createAgentBrowserToolsParamsSchema(Type = JsonSchema, StringEnum = localStringEnum) {
+export function createAgentBrowserToolsParamsSchema() {
     return Type.Unsafe(Type.Object({
         enable: Type.Optional(Type.Array(StringEnum(AGENT_BROWSER_ADVANCED_TOOLS), {
             description: "Add capabilities to active tools; omit to list inventory.",

package/dist/extensions/agent-browser/lib/orchestration/browser-run/electron-observation.js

@@ -4,8 +4,9 @@ import { buildNextToolAction, withOptionalSessionArgs } from "../../results/next
 import { extractRefSnapshotFromData } from "../../session-page-state.js";
 import { extractStringResultField, runSessionCommandData } from "./session-state.js";
 import { diagnosticErrorText } from "./diagnostic-values.js";
-function boundedSessionResult(data, field, limit) {
-    return boundElectronProbeString(extractStringResultField(data, "result") ?? extractStringResultField(data, field), limit);
+import { presentElectronManagedSessionTarget } from "./final-result-electron.js";
+function sessionResult(data, field) {
+    return extractStringResultField(data, "result") ?? extractStringResultField(data, field);
 }
 async function collectManagedSessionCommandData(options) {
     try {
@@ -17,8 +18,7 @@ async function collectManagedSessionCommandData(options) {
 }
 async function collectElectronManagedSessionUrl(options) {
     const urlResult = await collectManagedSessionCommandData({ ...options, args: ["get", "url"] });
-    const url = boundElectronProbeString(extractStringResultField(urlResult.data, "result") ??
-        extractStringResultField(urlResult.data, "url"), 300);
+    const url = sessionResult(urlResult.data, "url");
     return urlResult.error !== undefined && urlResult.error !== ""
         ? { error: urlResult.error }
         : { url };
@@ -29,8 +29,8 @@ export async function collectElectronManagedSessionTarget(options) {
     }
     const request = { ...options, sessionName: options.sessionName };
     const urlResult = await collectManagedSessionCommandData({ ...request, args: ["get", "url"] });
-    const url = boundedSessionResult(urlResult.data, "url", 300);
-    if ((urlResult.error ?? "") !== "" || url === undefined || url === "") {
+    const url = sessionResult(urlResult.data, "url");
+    if ((urlResult.error ?? "") !== "" || url === undefined || url.trim() === "") {
         return {
             error: urlResult.error ?? "get url returned no active page URL.",
             sessionName: options.sessionName,
@@ -40,7 +40,7 @@ export async function collectElectronManagedSessionTarget(options) {
         ...request,
         args: ["get", "title"],
     });
-    const title = boundedSessionResult(titleResult.data, "title", 160);
+    const title = boundElectronProbeString(sessionResult(titleResult.data, "title"), 160);
     return {
         sessionName: options.sessionName,
         title,
@@ -62,12 +62,13 @@ export async function collectQaAttachedTarget(options) {
             url: target.url,
         };
     }
-    return collectElectronManagedSessionTarget({
+    const observed = await collectElectronManagedSessionTarget({
         cwd: options.cwd,
         namespace: options.namespace,
         sessionName: options.sessionName,
         signal: options.signal,
     });
+    return observed ? presentElectronManagedSessionTarget(observed) : undefined;
 }
 export function formatQaAttachedTargetText(target) {
     return target

package/dist/extensions/agent-browser/lib/orchestration/browser-run/final-result-electron.js

@@ -1,6 +1,14 @@
+import { boundElectronProbeString } from "../../electron/cdp.js";
 import { buildAgentBrowserResultCategoryDetails } from "../../results/categories.js";
 import { redactSensitiveText } from "../../runtime-redaction.js";
 import { redactToolDetails } from "./final-result-redaction.js";
+export function presentElectronManagedSessionTarget(target) {
+    return {
+        ...target,
+        title: boundElectronProbeString(target.title, 160),
+        url: boundElectronProbeString(target.url, 300),
+    };
+}
 export function getElectronLaunchFailureCategory(failure) {
     switch (failure.reason) {
         case "aborted":

package/dist/extensions/agent-browser/lib/orchestration/browser-run/prepare/scroll-shims.js

@@ -5,7 +5,7 @@ import { buildScrollNoopNextActions } from "../interaction-diagnostics.js";
 import { buildSessionDetailFields, runSessionCommandData } from "../session-state.js";
 const SCROLL_CONTAINER_DIRECTIONS = new Set(["down", "left", "right", "up"]);
 function getContainerScrollRequest(commandTokens) {
-    if (commandTokens[0] !== "scroll" || commandTokens.length < 3) {
+    if (commandTokens[0] !== "scroll" || commandTokens.length < 3 || commandTokens.length > 4) {
         return undefined;
     }
     const selector = commandTokens[1];
@@ -138,7 +138,7 @@ function getPageScrollToRequest(commandTokens) {
         return undefined;
     }
     if (commandTokens[1]?.toLowerCase() === "to") {
-        return getPageScrollTarget(commandTokens.at(2));
+        return commandTokens.length === 3 ? getPageScrollTarget(commandTokens.at(2)) : undefined;
     }
     const direction = commandTokens[1]?.toLowerCase();
     if (!isPageScrollDirection(direction) || commandTokens.length > 3) {

package/dist/extensions/agent-browser/lib/orchestration/browser-run/prepare/snapshot-filter.js

@@ -51,6 +51,13 @@ async function collectSnapshotEvidence(options, request) {
         ? buildSnapshotDiff(options.previousRefSnapshot, fullSnapshot)
         : undefined;
     if (fullSnapshot) {
+        if (fullSnapshot.target) {
+            options.sessionPageState.applyTabTarget({
+                sessionName: options.sessionStateKey ?? options.sessionName,
+                target: fullSnapshot.target,
+                update: options.sessionPageStateUpdate,
+            });
+        }
         options.sessionPageState.applyRefSnapshot({
             sessionName: options.sessionStateKey ?? options.sessionName,
             snapshot: fullSnapshot,
@@ -133,6 +140,8 @@ function snapshotToolResult(options, request, evidence, presentation) {
             fullOutputPaths: presentation.fullOutputPaths,
             refSnapshot: evidence.fullSnapshot,
             sessionMode: options.sessionMode,
+            sessionTabTarget: options.sessionPageState.get(options.sessionStateKey ?? options.sessionName)
+                .tabTarget,
             snapshotDiff: evidence.diff,
             snapshotFilter: snapshotFilterDetails(request, evidence),
             snapshotViewport: evidence.viewport,

package/dist/extensions/agent-browser/lib/orchestration/browser-run/session-state-electron.js

@@ -3,6 +3,7 @@ import { isElectronPostCommandHealthCommand } from "../../command-taxonomy.js";
 import { buildAgentBrowserNextActions } from "../../results/action-recommendations.js";
 import { isAboutBlankUrl, normalizeComparableUrl, } from "../../session-page-state.js";
 import { getGuardedRefUsage } from "./session-state-refs.js";
+import { presentElectronManagedSessionTarget } from "./final-result-electron.js";
 export function isLiveElectronRendererTarget(target) {
     const normalizedUrl = normalizeComparableUrl(target.url);
     if (normalizedUrl === undefined ||
@@ -105,15 +106,16 @@ export function buildElectronSessionMismatch(options) {
         return;
     }
     const nextActions = buildElectronMismatchNextActions(options.record, liveTarget);
+    const managedSession = presentElectronManagedSessionTarget(options.managedSession);
     return {
         launchId: options.record.launchId,
         liveTarget,
-        managedSession: options.managedSession,
+        managedSession,
         nextActionIds: nextActions.map((action) => action.id),
         reason,
         sessionName: options.record.sessionName,
         statusTargets: options.statusTargets,
-        summary: describeElectronMismatch(options.managedSession, options.record, liveTarget, reason),
+        summary: describeElectronMismatch(managedSession, options.record, liveTarget, reason),
     };
 }
 export function formatElectronSessionMismatchText(mismatch) {