rechrome 1.23.4 → 1.24.1

package/README.md

@@ -46,6 +46,11 @@ Now `rechrome` (or `rech`) is available globally.
 
 `rech setup` configures the daemon, Chrome extension, and connection URL in one pass:
 
+If no supported daemon manager is available, setup asks before installing `oxmgr` globally
+(default: No). It uses `bun i -g oxmgr` when launched with bunx and `npm i -g oxmgr`
+when launched with npx. Pass `--yes` to approve this installation without prompting,
+for example `bunx rechrome setup --profile Default --yes`.
+
 ```bash
 rech setup                          # interactive: pick a profile, follow the prompts
 rech setup --profile you@email.com  # non-interactive profile selection

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rechrome",
-  "version": "1.23.4",
+  "version": "1.24.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/snomiao/rechrome.git"

package/rech.js

@@ -6,7 +6,7 @@ import { mkdirSync, appendFileSync, existsSync, realpathSync, accessSync, cpSync
 import { hostname, homedir } from "os";
 import { join, basename, dirname } from "path";
 import { spawn as cpSpawn } from "child_process";
-import { pickDaemonManager, type DaemonManager } from "./daemon-manager.js";
+import { oxmgrInstallCommand, pickDaemonManager, type DaemonManager } from "./daemon-manager.js";
 
 export const ENV_KEY = "RECHROME_URL";
 export const DEFAULT_PORT = 13775;
@@ -174,17 +174,19 @@ export function parseUrl(raw: string) {
   };
 }
 
-export async function getOrCreateUrl(): Promise<string> {
+export async function getOrCreateUrl(persist = true): Promise<string> {
   // Treat a URL without a bearer key as missing — it cannot authenticate
   try { if (process.env[ENV_KEY] && new URL(process.env[ENV_KEY]!).username) return process.env[ENV_KEY]!; } catch {}
   const key = randomBytes(12).toString("base64url"); // 16 chars
   const url = `http://${key}@127.0.0.1:${DEFAULT_PORT}`;
-  const newLine = `${ENV_KEY}=${url}`;
-  // Write to ~/.env.local so it's not shadowed by project .env.local
-  const envRaw = await file(globalEnvFile).text().catch(() => "");
-  const lines = envRaw.trimEnd().split("\n").filter(l => !l.startsWith(`${ENV_KEY}=`));
-  const content = [...lines, newLine, ""].join("\n");
-  Bun.write(globalEnvFile, content);
+  if (persist) {
+    const newLine = `${ENV_KEY}=${url}`;
+    // Write to ~/.env.local so it's not shadowed by project .env.local
+    const envRaw = await file(globalEnvFile).text().catch(() => "");
+    const lines = envRaw.trimEnd().split("\n").filter(l => !l.startsWith(`${ENV_KEY}=`));
+    const content = [...lines, newLine, ""].join("\n");
+    await Bun.write(globalEnvFile, content);
+  }
   process.env[ENV_KEY] = url;
   return url;
 }
@@ -400,6 +402,59 @@ export function validateChromeProfileSelector(selector: string): void {
   );
 }
 
+export async function resolveGlobalProfile(
+  registry: Record<string, TokenEntry>,
+  chromeProfiles: Record<string, ChromeProfileInfo> | null,
+  selector: string,
+): Promise<{ email: string; entry: TokenEntry }> {
+  const value = selector.trim();
+  if (!value) throw new Error("--profile requires a non-empty value");
+
+  const registryKey = Object.keys(registry).find(k => k.toLowerCase() === value.toLowerCase());
+  if (registryKey) return { email: registryKey, entry: registry[registryKey] };
+
+  if (!chromeProfiles) {
+    throw new Error(
+      `--profile "${value}" does not match any registered email, and Chrome profiles are not accessible. ` +
+      `Run \`rech setup --profile "${value}"\` to register this profile.`,
+    );
+  }
+
+  const profiles = Object.entries(chromeProfiles);
+  let match: [string, ChromeProfileInfo] | null;
+  try {
+    match = resolveChromeProfileSelector(profiles, value);
+  } catch (err) {
+    throw err;
+  }
+
+  if (!match) {
+    throw new Error(
+      `--profile "${value}" does not match any Chrome profile. ` +
+      `See available profiles with \`rech profiles\`.`,
+    );
+  }
+
+  const [dir, info] = match;
+  const email = info.user_name;
+  if (!email) {
+    throw new Error(
+      `Chrome profile "${value}" (folder: ${dir}) has no email associated. ` +
+      `Run \`rech setup --profile "${value}"\` to register it.`,
+    );
+  }
+
+  const entry = registry[email];
+  if (!entry) {
+    throw new Error(
+      `Profile "${email}" (${dir}) is not registered. ` +
+      `Run \`rech setup --profile "${value}"\` to register it.`,
+    );
+  }
+
+  return { email, entry };
+}
+
 async function findChromeUserDataDir(): Promise<string | null> {
   for (const statePath of CHROME_LOCAL_STATE_PATHS()) {
     if (!(await file(statePath).exists())) continue;
@@ -545,7 +600,10 @@ async function callServe(
   // and run() has already done so for its log line. Recomputing here would double those git
   // spawns (and, on Windows, the console-window flashes) on every `rech open`.
   const identity = precomputedIdentity ?? await getClientIdentity();
-  const effectiveProfile = resolveEffectiveProfile(profileDirectory);
+  // A global `--profile` override must win for the session key too: the daemon hashes
+  // identity.profile into the session id, so without this, `rech --profile other open` would
+  // reuse the default profile's session (and its browser) instead of opening its own.
+  const effectiveProfile = overrideEnv?.["PLAYWRIGHT_MCP_PROFILE_DIRECTORY"] || resolveEffectiveProfile(profileDirectory);
   if (effectiveProfile) identity.profile = effectiveProfile;
   const env = { ...(await getClientEnv({ extensionId, extensionToken, profileDirectory, userDataDir, loadExtension })), ...overrideEnv };
   const res = await fetch(`${protocol}://${host}:${port}/run`, {
@@ -588,12 +646,43 @@ export function normalizeCommandArgs(args: string[]): string[] {
   return normalized;
 }
 
-async function run(url: string, args: string[]) {
+// Pull a global `--profile <val>` / `--profile=<val>` out of the leading flags of an argv.
+// Only flags before the first positional (the playwright subcommand) are rech globals — a
+// --profile at/after the subcommand belongs to the forwarded CLI (e.g. playwright-cli's own
+// `open --profile <dir>`, a user-data-dir path) and must pass through untouched. Throws on a
+// missing value; accepts multiple occurrences (last one wins).
+export function extractGlobalProfileArg(args: string[]): { args: string[]; selector?: string } {
+  const rest = [...args];
+  let selector: string | undefined;
+  for (let i = 0; i < rest.length && rest[i].startsWith("-"); i++) {
+    const a = rest[i];
+    if (a === "--profile") {
+      const value = rest[i + 1];
+      if (!value || value.startsWith("--"))
+        throw new Error("--profile requires a value (e.g. --profile you@gmail.com)");
+      selector = value;
+      rest.splice(i, 2);
+      i--;
+      continue;
+    }
+    if (a.startsWith("--profile=")) {
+      const value = a.slice("--profile=".length);
+      if (!value) throw new Error("--profile requires a value (e.g. --profile you@gmail.com)");
+      selector = value;
+      rest.splice(i, 1);
+      i--;
+      continue;
+    }
+  }
+  return { args: rest, selector };
+}
+
+async function run(url: string, args: string[], overrideEnv?: Record<string, string>) {
   // Match the underlying CLI's command names while accepting the short forms humans
   // naturally try. Keep this client-side so old and new serve daemons behave alike.
   args = normalizeCommandArgs(args);
   const { host, port, protocol, extensionId, extensionToken, profileDirectory, userDataDir, loadExtension } = parseUrl(url);
-  const effectiveProfile = resolveEffectiveProfile(profileDirectory);
+  const effectiveProfile = overrideEnv?.["PLAYWRIGHT_MCP_PROFILE_DIRECTORY"] || resolveEffectiveProfile(profileDirectory);
   const displayProfile = effectiveProfile ? await resolveProfileEmail(effectiveProfile) : undefined;
   const identity = await getClientIdentity();
   const profileSuffix = displayProfile ? ` profile:${displayProfile}` : "";
@@ -602,18 +691,19 @@ async function run(url: string, args: string[]) {
   );
 
   const resolvedEnv = await getClientEnv({ extensionId, extensionToken, profileDirectory, userDataDir, loadExtension });
-  const { status, stdout, stderr, files, existingSession } = await callServe(url, args, undefined, identity);
+  const effectiveEnv = { ...resolvedEnv, ...overrideEnv };
+  const { status, stdout, stderr, files, existingSession } = await callServe(url, args, overrideEnv, identity);
 
   const isOpenWithUrl = args[0] === "open" && args.length > 1;
   if (existingSession && isOpenWithUrl) {
-    return run(url, ["goto", ...args.slice(1)]);
+    return run(url, ["goto", ...args.slice(1)], overrideEnv);
   }
 
   if (existingSession)
     console.error(`[rech] session already has open tabs — listing existing tabs instead of opening a new window`);
   if (stderr) {
     if (stderr.includes('Extension connection timeout')) {
-      const hasToken = !!resolvedEnv["PLAYWRIGHT_MCP_EXTENSION_TOKEN"];
+      const hasToken = !!effectiveEnv["PLAYWRIGHT_MCP_EXTENSION_TOKEN"];
       const last = hasToken
         ? `  -x: extension did not connect (reload it at chrome://extensions; then verify its token) -> extension[degraded]`
         : `  -> extension[not installed]  (run: rech setup)`;
@@ -810,6 +900,7 @@ export function resolvePlaywrightCli(): string {
 }
 
 export async function daemonInstall(serveUrl: string): Promise<void> {
+  const mgr = daemonManager();
   // Persist the URL to ~/.env.local before starting the daemon. The daemon's
   // loadEnv() walks CWD→root reading .env.local files and unconditionally
   // overwrites process.env.RECHROME_URL from whichever file it finds first.
@@ -846,8 +937,6 @@ export async function daemonInstall(serveUrl: string): Promise<void> {
   if (isReadable(process.env.RECH_TLS_CERT)) daemonEnv.RECH_TLS_CERT = process.env.RECH_TLS_CERT!;
   if (isReadable(process.env.RECH_TLS_KEY)) daemonEnv.RECH_TLS_KEY = process.env.RECH_TLS_KEY!;
 
-  const mgr = daemonManager();
-
   // Drop any prior registration (current + legacy names) before re-adding.
   for (const name of [PM_PROCESS_NAME, ...LEGACY_PROCESS_NAMES]) await runPm(mgr, ["delete", name]);
 
@@ -923,12 +1012,51 @@ function findTrayBinary(): string | undefined {
   return Bun.which(`rechrome-tray${ext}`) ?? undefined;
 }
 
+// Verify a PID is actually a rechrome-tray process, not an unrelated process that
+// happened to reuse the pid after the real tray died. POSIX only (`ps` isn't on stock
+// Windows); there we fall back to trusting the liveness probe alone (best-effort).
+function isPidRechromeTray(pid: number): boolean {
+  if (IS_WINDOWS) return true;
+  try {
+    const p = Bun.spawnSync(["ps", "-o", "comm=", "-p", String(pid)], { stdout: "pipe", stderr: "ignore", windowsHide: true });
+    return (p.stdout?.toString() ?? "").trim().includes("rechrome-tray");
+  } catch {
+    return false;
+  }
+}
+
+// PIDs of live rechrome-tray processes (POSIX). Catches untracked trays — ones launched
+// outside `rech tray show` that never touch the pidfile — so a singleton guard can't
+// spawn a second icon on top of them. Empty on Windows (no `ps`), where we rely on the
+// pidfile liveness check alone.
+function listTrayPids(): number[] {
+  if (IS_WINDOWS) return [];
+  try {
+    const p = Bun.spawnSync(["ps", "-axo", "pid=,comm="], { stdout: "pipe", stderr: "ignore", windowsHide: true });
+    const out = p.stdout?.toString() ?? "";
+    const pids: number[] = [];
+    for (const line of out.split("\n")) {
+      const m = line.trim().match(/^(\d+)\s+(.+)$/);
+      // macOS reports the full launch path in `comm`, so match the basename via a
+      // trailing "/rechrome-tray" or an exact bare name (Linux truncates to the name).
+      if (m && Number(m[1]) !== process.pid && m[2].includes("rechrome-tray")) pids.push(Number(m[1]));
+    }
+    return pids;
+  } catch {
+    return [];
+  }
+}
+
 function isTrayRunning(): boolean {
+  // Any live tray (tracked by the pidfile or not) means "already running" — the pidfile
+  // is a single slot that only ever records the most-recent spawn, so it cannot see
+  // earlier/untracked instances on its own.
+  if (listTrayPids().length > 0) return true;
   try {
     const pid = parseInt(readFileSync(TRAY_PID_FILE, "utf8"), 10);
     if (!Number.isFinite(pid)) return false;
     process.kill(pid, 0); // signal 0 = liveness probe, doesn't actually signal
-    return true;
+    return isPidRechromeTray(pid);
   } catch {
     return false;
   }
@@ -958,7 +1086,12 @@ async function startTray({ quiet = false }: { quiet?: boolean } = {}): Promise<v
 }
 
 function stopTray(): void {
-  if (!isTrayRunning()) { console.log("tray: not running."); return; }
+  // Kill every live tray (tracked or untracked), then drop the pidfile. A singleton
+  // tray should never have more than one instance, but a crashed/overwritten pidfile
+  // can leave orphans the single-slot pidfile no longer points at — reap them too.
+  const pids = listTrayPids();
+  if (pids.length === 0 && !isTrayRunning()) { console.log("tray: not running."); return; }
+  for (const pid of pids) { try { process.kill(pid); } catch {} }
   try { process.kill(parseInt(readFileSync(TRAY_PID_FILE, "utf8"), 10)); } catch {}
   try { unlinkSync(TRAY_PID_FILE); } catch {}
   console.log("tray: stopped. Run `rech tray show` to restore.");
@@ -1187,7 +1320,7 @@ async function provisionProfile(name: string, opts: { headed?: boolean } = {}):
   console.log(`Or save it to a project .env.local to make it the default.`);
 }
 
-async function setup(opts: { profile?: string; token?: string } = {}): Promise<void> {
+async function setup(opts: { profile?: string; token?: string; yes?: boolean } = {}): Promise<void> {
   if (opts.profile !== undefined) {
     try {
       validateChromeProfileSelector(opts.profile);
@@ -1234,7 +1367,8 @@ async function setup(opts: { profile?: string; token?: string } = {}): Promise<v
       if (!["127.0.0.1", "localhost"].includes(u.hostname)) delete process.env[ENV_KEY];
     } catch {}
   }
-  const url = await getOrCreateUrl();
+  // Defer persistence until daemon prerequisites have passed.
+  const url = await getOrCreateUrl(false);
   const { host, port, protocol } = parseUrl(url);
 
   const { key: serveKey } = parseUrl(url);
@@ -1272,6 +1406,40 @@ async function setup(opts: { profile?: string; token?: string } = {}): Promise<v
     console.log(`      Daemon already running at ${protocol}://${host}:${port} (bind: ${currentBind}) — skipping daemon setup`);
   }
   const bindChanged = desiredBind !== currentBind;
+  if (!daemonHealthy || bindChanged) {
+    try {
+      try {
+        daemonManager();
+      } catch (error) {
+        // Respect an explicit pm2 choice; installing oxmgr would not satisfy it.
+        if (process.env.RECH_DAEMON_MANAGER?.toLowerCase() === "pm2") throw error;
+        const command = oxmgrInstallCommand(process.env);
+        const answer = opts.yes ? "yes" : (await ask(`      oxmgr is missing. Install globally with \`${command.join(" ")}\`? [y/N]: `)).trim();
+        if (!/^(y|yes)$/i.test(answer)) {
+          throw new Error(`Setup cancelled. To install oxmgr, run \`${command.join(" ")}\`, then rerun setup.`);
+        }
+        console.log(`      Installing oxmgr: ${command.join(" ")}`);
+        const installer = Bun.which(command[0]) ?? (command[0] === "bun" ? process.execPath : null);
+        if (!installer) throw new Error(`${command[0]} is not on PATH. Install it or run \`${command.join(" ")}\` in your terminal, then rerun setup.`);
+        const proc = Bun.spawn([installer, ...command.slice(1)], {
+          stdin: "inherit", stdout: "inherit", stderr: "inherit", windowsHide: true,
+        });
+        const code = await proc.exited;
+        if (code !== 0) throw new Error(`\`${command.join(" ")}\` failed (exit code ${code}). Resolve the installation error, then rerun setup.`);
+        if (!Bun.which("oxmgr")) {
+          throw new Error("oxmgr was installed but is not on PATH. Add the package manager's global bin directory to PATH, then rerun setup.");
+        }
+        _daemonMgr = undefined;
+        _oxmgrVersion = undefined;
+        daemonManager();
+      }
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      rl?.close();
+      envWatcher?.close();
+      process.exit(1);
+    }
+  }
   const persistedChanged = desiredBind !== persistedBind;
   if (persistedChanged) {
     const lines = globalEnvRaw.trimEnd().split("\n").filter(l => !/^\s*RECH_HOST\s*=/.test(l));
@@ -1623,8 +1791,18 @@ function printHelp(): void {
   console.log(`rechrome (rech) — drive Chrome via Playwright over HTTP
 
 Usage:
-  rech setup [--profile <email|name|folder>] [--token <tok>]
+  rech [--profile <email|name|folder>] <playwright-args...>
+                               Run Playwright CLI command with the given registered
+                               Chrome profile. --profile selects the profile by exact
+                               registered email (e.g. you@gmail.com), exact Chrome
+                               profile name, or exact profile folder name. The profile
+                               must already be registered (see \`rech setup\`). Place
+                               --profile before the playwright subcommand. Requires
+                               ${ENV_KEY}.
+  rech setup [--profile <email|name|folder>] [--token <tok>] [--yes]
                                First-time setup: daemon + Chrome extension + config
+                               Offers to install missing oxmgr globally (y/N).
+                               --yes approves installation without prompting.
                                --profile selects the Chrome profile non-interactively.
                                Menu numbers are not accepted. Resolution order is exact
                                email (e.g. you@gmail.com), exact Chrome profile name,
@@ -1659,13 +1837,14 @@ Environment:
 Examples:
   rech setup
   rech setup --profile you@gmail.com --token <PLAYWRIGHT_MCP_EXTENSION_TOKEN>
+  rech --profile you@gmail.com open https://example.com
   rech eval "() => document.title"
   rech open https://example.com
   rech screenshot`);
 }
 
 if (import.meta.main) {
-  const args = process.argv.slice(2);
+  let args = process.argv.slice(2);
   const cmd = args[0]?.toLowerCase();
 
   if (cmd === "serve") {
@@ -1687,7 +1866,7 @@ if (import.meta.main) {
       ? args[tokenIdx + 1]
       : args.find(a => a.startsWith("--token="))?.slice("--token=".length))
       ?? process.env.RECH_TOKEN;
-    await setup({ profile, token }); // setup closes envWatcher itself before printing Done
+    await setup({ profile, token, yes: args.includes("--yes") }); // setup closes envWatcher itself before printing Done
     // Auto-start the tray (best-effort, silent on headless / missing binary).
     await startTray({ quiet: true }).catch(() => {});
   } else if (cmd === "tray") {
@@ -1723,6 +1902,41 @@ if (import.meta.main) {
       printHelp();
       process.exit(1);
     }
+    // --profile: target a registered Chrome profile globally (see extractGlobalProfileArg for
+    // the leading-flags-only rule that protects the forwarded CLI's own --profile).
+    let profileSelector: string | undefined;
+    let overrideEnv: Record<string, string> | undefined;
+    try {
+      const extracted = extractGlobalProfileArg(args);
+      profileSelector = extracted.selector;
+      args = extracted.args;
+    } catch (err) {
+      console.error(err instanceof Error ? err.message : String(err));
+      envWatcher?.close();
+      process.exit(1);
+    }
+    if (profileSelector !== undefined) {
+      try {
+        const registry = await readTokenRegistry();
+        const cache = await readChromeProfileCache();
+        const resolved = await resolveGlobalProfile(registry, cache, profileSelector);
+        // Use the registry key (email, or the managed profile name) as the profile identity:
+        // the daemon already resolves email/name → profile dir for the default URL-param path,
+        // so this keeps `--profile <email>` on the SAME session as the default path and only
+        // opens a separate session when the profile really differs.
+        overrideEnv = {
+          PLAYWRIGHT_MCP_PROFILE_DIRECTORY: resolved.email,
+          PLAYWRIGHT_MCP_EXTENSION_ID: resolved.entry.extensionId,
+          PLAYWRIGHT_MCP_EXTENSION_TOKEN: resolved.entry.token,
+        };
+        if (resolved.entry.userDataDir) overrideEnv.PLAYWRIGHT_MCP_USER_DATA_DIR = resolved.entry.userDataDir;
+        if (resolved.entry.loadExtension) overrideEnv.PLAYWRIGHT_MCP_LOAD_EXTENSION = resolved.entry.loadExtension;
+      } catch (err) {
+        console.error(err instanceof Error ? err.message : String(err));
+        envWatcher?.close();
+        process.exit(1);
+      }
+    }
     // --isolate: ephemeral session isolation, sugar for -s=iso-<random>. For fragile single-shot
     // flows (OAuth/login) that must not share tabs with the worktree's default session. The `iso-`
     // marker lets the daemon reap these throwaway sessions on an idle TTL (see serve.js), so an
@@ -1732,7 +1946,7 @@ if (import.meta.main) {
       args.splice(isolateIdx, 1);
       args.push(`-s=iso-${randomBytes(8).toString("hex")}`);
     }
-    await run(url, args);
+    await run(url, args, overrideEnv);
     envWatcher?.close();
   }
 }

package/rech.ts

@@ -6,7 +6,7 @@ import { mkdirSync, appendFileSync, existsSync, realpathSync, accessSync, cpSync
 import { hostname, homedir } from "os";
 import { join, basename, dirname } from "path";
 import { spawn as cpSpawn } from "child_process";
-import { pickDaemonManager, type DaemonManager } from "./daemon-manager.ts";
+import { oxmgrInstallCommand, pickDaemonManager, type DaemonManager } from "./daemon-manager.ts";
 
 export const ENV_KEY = "RECHROME_URL";
 export const DEFAULT_PORT = 13775;
@@ -174,17 +174,19 @@ export function parseUrl(raw: string) {
   };
 }
 
-export async function getOrCreateUrl(): Promise<string> {
+export async function getOrCreateUrl(persist = true): Promise<string> {
   // Treat a URL without a bearer key as missing — it cannot authenticate
   try { if (process.env[ENV_KEY] && new URL(process.env[ENV_KEY]!).username) return process.env[ENV_KEY]!; } catch {}
   const key = randomBytes(12).toString("base64url"); // 16 chars
   const url = `http://${key}@127.0.0.1:${DEFAULT_PORT}`;
-  const newLine = `${ENV_KEY}=${url}`;
-  // Write to ~/.env.local so it's not shadowed by project .env.local
-  const envRaw = await file(globalEnvFile).text().catch(() => "");
-  const lines = envRaw.trimEnd().split("\n").filter(l => !l.startsWith(`${ENV_KEY}=`));
-  const content = [...lines, newLine, ""].join("\n");
-  Bun.write(globalEnvFile, content);
+  if (persist) {
+    const newLine = `${ENV_KEY}=${url}`;
+    // Write to ~/.env.local so it's not shadowed by project .env.local
+    const envRaw = await file(globalEnvFile).text().catch(() => "");
+    const lines = envRaw.trimEnd().split("\n").filter(l => !l.startsWith(`${ENV_KEY}=`));
+    const content = [...lines, newLine, ""].join("\n");
+    await Bun.write(globalEnvFile, content);
+  }
   process.env[ENV_KEY] = url;
   return url;
 }
@@ -400,6 +402,59 @@ export function validateChromeProfileSelector(selector: string): void {
   );
 }
 
+export async function resolveGlobalProfile(
+  registry: Record<string, TokenEntry>,
+  chromeProfiles: Record<string, ChromeProfileInfo> | null,
+  selector: string,
+): Promise<{ email: string; entry: TokenEntry }> {
+  const value = selector.trim();
+  if (!value) throw new Error("--profile requires a non-empty value");
+
+  const registryKey = Object.keys(registry).find(k => k.toLowerCase() === value.toLowerCase());
+  if (registryKey) return { email: registryKey, entry: registry[registryKey] };
+
+  if (!chromeProfiles) {
+    throw new Error(
+      `--profile "${value}" does not match any registered email, and Chrome profiles are not accessible. ` +
+      `Run \`rech setup --profile "${value}"\` to register this profile.`,
+    );
+  }
+
+  const profiles = Object.entries(chromeProfiles);
+  let match: [string, ChromeProfileInfo] | null;
+  try {
+    match = resolveChromeProfileSelector(profiles, value);
+  } catch (err) {
+    throw err;
+  }
+
+  if (!match) {
+    throw new Error(
+      `--profile "${value}" does not match any Chrome profile. ` +
+      `See available profiles with \`rech profiles\`.`,
+    );
+  }
+
+  const [dir, info] = match;
+  const email = info.user_name;
+  if (!email) {
+    throw new Error(
+      `Chrome profile "${value}" (folder: ${dir}) has no email associated. ` +
+      `Run \`rech setup --profile "${value}"\` to register it.`,
+    );
+  }
+
+  const entry = registry[email];
+  if (!entry) {
+    throw new Error(
+      `Profile "${email}" (${dir}) is not registered. ` +
+      `Run \`rech setup --profile "${value}"\` to register it.`,
+    );
+  }
+
+  return { email, entry };
+}
+
 async function findChromeUserDataDir(): Promise<string | null> {
   for (const statePath of CHROME_LOCAL_STATE_PATHS()) {
     if (!(await file(statePath).exists())) continue;
@@ -545,7 +600,10 @@ async function callServe(
   // and run() has already done so for its log line. Recomputing here would double those git
   // spawns (and, on Windows, the console-window flashes) on every `rech open`.
   const identity = precomputedIdentity ?? await getClientIdentity();
-  const effectiveProfile = resolveEffectiveProfile(profileDirectory);
+  // A global `--profile` override must win for the session key too: the daemon hashes
+  // identity.profile into the session id, so without this, `rech --profile other open` would
+  // reuse the default profile's session (and its browser) instead of opening its own.
+  const effectiveProfile = overrideEnv?.["PLAYWRIGHT_MCP_PROFILE_DIRECTORY"] || resolveEffectiveProfile(profileDirectory);
   if (effectiveProfile) identity.profile = effectiveProfile;
   const env = { ...(await getClientEnv({ extensionId, extensionToken, profileDirectory, userDataDir, loadExtension })), ...overrideEnv };
   const res = await fetch(`${protocol}://${host}:${port}/run`, {
@@ -588,12 +646,43 @@ export function normalizeCommandArgs(args: string[]): string[] {
   return normalized;
 }
 
-async function run(url: string, args: string[]) {
+// Pull a global `--profile <val>` / `--profile=<val>` out of the leading flags of an argv.
+// Only flags before the first positional (the playwright subcommand) are rech globals — a
+// --profile at/after the subcommand belongs to the forwarded CLI (e.g. playwright-cli's own
+// `open --profile <dir>`, a user-data-dir path) and must pass through untouched. Throws on a
+// missing value; accepts multiple occurrences (last one wins).
+export function extractGlobalProfileArg(args: string[]): { args: string[]; selector?: string } {
+  const rest = [...args];
+  let selector: string | undefined;
+  for (let i = 0; i < rest.length && rest[i].startsWith("-"); i++) {
+    const a = rest[i];
+    if (a === "--profile") {
+      const value = rest[i + 1];
+      if (!value || value.startsWith("--"))
+        throw new Error("--profile requires a value (e.g. --profile you@gmail.com)");
+      selector = value;
+      rest.splice(i, 2);
+      i--;
+      continue;
+    }
+    if (a.startsWith("--profile=")) {
+      const value = a.slice("--profile=".length);
+      if (!value) throw new Error("--profile requires a value (e.g. --profile you@gmail.com)");
+      selector = value;
+      rest.splice(i, 1);
+      i--;
+      continue;
+    }
+  }
+  return { args: rest, selector };
+}
+
+async function run(url: string, args: string[], overrideEnv?: Record<string, string>) {
   // Match the underlying CLI's command names while accepting the short forms humans
   // naturally try. Keep this client-side so old and new serve daemons behave alike.
   args = normalizeCommandArgs(args);
   const { host, port, protocol, extensionId, extensionToken, profileDirectory, userDataDir, loadExtension } = parseUrl(url);
-  const effectiveProfile = resolveEffectiveProfile(profileDirectory);
+  const effectiveProfile = overrideEnv?.["PLAYWRIGHT_MCP_PROFILE_DIRECTORY"] || resolveEffectiveProfile(profileDirectory);
   const displayProfile = effectiveProfile ? await resolveProfileEmail(effectiveProfile) : undefined;
   const identity = await getClientIdentity();
   const profileSuffix = displayProfile ? ` profile:${displayProfile}` : "";
@@ -602,18 +691,19 @@ async function run(url: string, args: string[]) {
   );
 
   const resolvedEnv = await getClientEnv({ extensionId, extensionToken, profileDirectory, userDataDir, loadExtension });
-  const { status, stdout, stderr, files, existingSession } = await callServe(url, args, undefined, identity);
+  const effectiveEnv = { ...resolvedEnv, ...overrideEnv };
+  const { status, stdout, stderr, files, existingSession } = await callServe(url, args, overrideEnv, identity);
 
   const isOpenWithUrl = args[0] === "open" && args.length > 1;
   if (existingSession && isOpenWithUrl) {
-    return run(url, ["goto", ...args.slice(1)]);
+    return run(url, ["goto", ...args.slice(1)], overrideEnv);
   }
 
   if (existingSession)
     console.error(`[rech] session already has open tabs — listing existing tabs instead of opening a new window`);
   if (stderr) {
     if (stderr.includes('Extension connection timeout')) {
-      const hasToken = !!resolvedEnv["PLAYWRIGHT_MCP_EXTENSION_TOKEN"];
+      const hasToken = !!effectiveEnv["PLAYWRIGHT_MCP_EXTENSION_TOKEN"];
       const last = hasToken
         ? `  -x: extension did not connect (reload it at chrome://extensions; then verify its token) -> extension[degraded]`
         : `  -> extension[not installed]  (run: rech setup)`;
@@ -810,6 +900,7 @@ export function resolvePlaywrightCli(): string {
 }
 
 export async function daemonInstall(serveUrl: string): Promise<void> {
+  const mgr = daemonManager();
   // Persist the URL to ~/.env.local before starting the daemon. The daemon's
   // loadEnv() walks CWD→root reading .env.local files and unconditionally
   // overwrites process.env.RECHROME_URL from whichever file it finds first.
@@ -846,8 +937,6 @@ export async function daemonInstall(serveUrl: string): Promise<void> {
   if (isReadable(process.env.RECH_TLS_CERT)) daemonEnv.RECH_TLS_CERT = process.env.RECH_TLS_CERT!;
   if (isReadable(process.env.RECH_TLS_KEY)) daemonEnv.RECH_TLS_KEY = process.env.RECH_TLS_KEY!;
 
-  const mgr = daemonManager();
-
   // Drop any prior registration (current + legacy names) before re-adding.
   for (const name of [PM_PROCESS_NAME, ...LEGACY_PROCESS_NAMES]) await runPm(mgr, ["delete", name]);
 
@@ -923,12 +1012,51 @@ function findTrayBinary(): string | undefined {
   return Bun.which(`rechrome-tray${ext}`) ?? undefined;
 }
 
+// Verify a PID is actually a rechrome-tray process, not an unrelated process that
+// happened to reuse the pid after the real tray died. POSIX only (`ps` isn't on stock
+// Windows); there we fall back to trusting the liveness probe alone (best-effort).
+function isPidRechromeTray(pid: number): boolean {
+  if (IS_WINDOWS) return true;
+  try {
+    const p = Bun.spawnSync(["ps", "-o", "comm=", "-p", String(pid)], { stdout: "pipe", stderr: "ignore", windowsHide: true });
+    return (p.stdout?.toString() ?? "").trim().includes("rechrome-tray");
+  } catch {
+    return false;
+  }
+}
+
+// PIDs of live rechrome-tray processes (POSIX). Catches untracked trays — ones launched
+// outside `rech tray show` that never touch the pidfile — so a singleton guard can't
+// spawn a second icon on top of them. Empty on Windows (no `ps`), where we rely on the
+// pidfile liveness check alone.
+function listTrayPids(): number[] {
+  if (IS_WINDOWS) return [];
+  try {
+    const p = Bun.spawnSync(["ps", "-axo", "pid=,comm="], { stdout: "pipe", stderr: "ignore", windowsHide: true });
+    const out = p.stdout?.toString() ?? "";
+    const pids: number[] = [];
+    for (const line of out.split("\n")) {
+      const m = line.trim().match(/^(\d+)\s+(.+)$/);
+      // macOS reports the full launch path in `comm`, so match the basename via a
+      // trailing "/rechrome-tray" or an exact bare name (Linux truncates to the name).
+      if (m && Number(m[1]) !== process.pid && m[2].includes("rechrome-tray")) pids.push(Number(m[1]));
+    }
+    return pids;
+  } catch {
+    return [];
+  }
+}
+
 function isTrayRunning(): boolean {
+  // Any live tray (tracked by the pidfile or not) means "already running" — the pidfile
+  // is a single slot that only ever records the most-recent spawn, so it cannot see
+  // earlier/untracked instances on its own.
+  if (listTrayPids().length > 0) return true;
   try {
     const pid = parseInt(readFileSync(TRAY_PID_FILE, "utf8"), 10);
     if (!Number.isFinite(pid)) return false;
     process.kill(pid, 0); // signal 0 = liveness probe, doesn't actually signal
-    return true;
+    return isPidRechromeTray(pid);
   } catch {
     return false;
   }
@@ -958,7 +1086,12 @@ async function startTray({ quiet = false }: { quiet?: boolean } = {}): Promise<v
 }
 
 function stopTray(): void {
-  if (!isTrayRunning()) { console.log("tray: not running."); return; }
+  // Kill every live tray (tracked or untracked), then drop the pidfile. A singleton
+  // tray should never have more than one instance, but a crashed/overwritten pidfile
+  // can leave orphans the single-slot pidfile no longer points at — reap them too.
+  const pids = listTrayPids();
+  if (pids.length === 0 && !isTrayRunning()) { console.log("tray: not running."); return; }
+  for (const pid of pids) { try { process.kill(pid); } catch {} }
   try { process.kill(parseInt(readFileSync(TRAY_PID_FILE, "utf8"), 10)); } catch {}
   try { unlinkSync(TRAY_PID_FILE); } catch {}
   console.log("tray: stopped. Run `rech tray show` to restore.");
@@ -1187,7 +1320,7 @@ async function provisionProfile(name: string, opts: { headed?: boolean } = {}):
   console.log(`Or save it to a project .env.local to make it the default.`);
 }
 
-async function setup(opts: { profile?: string; token?: string } = {}): Promise<void> {
+async function setup(opts: { profile?: string; token?: string; yes?: boolean } = {}): Promise<void> {
   if (opts.profile !== undefined) {
     try {
       validateChromeProfileSelector(opts.profile);
@@ -1234,7 +1367,8 @@ async function setup(opts: { profile?: string; token?: string } = {}): Promise<v
       if (!["127.0.0.1", "localhost"].includes(u.hostname)) delete process.env[ENV_KEY];
     } catch {}
   }
-  const url = await getOrCreateUrl();
+  // Defer persistence until daemon prerequisites have passed.
+  const url = await getOrCreateUrl(false);
   const { host, port, protocol } = parseUrl(url);
 
   const { key: serveKey } = parseUrl(url);
@@ -1272,6 +1406,40 @@ async function setup(opts: { profile?: string; token?: string } = {}): Promise<v
     console.log(`      Daemon already running at ${protocol}://${host}:${port} (bind: ${currentBind}) — skipping daemon setup`);
   }
   const bindChanged = desiredBind !== currentBind;
+  if (!daemonHealthy || bindChanged) {
+    try {
+      try {
+        daemonManager();
+      } catch (error) {
+        // Respect an explicit pm2 choice; installing oxmgr would not satisfy it.
+        if (process.env.RECH_DAEMON_MANAGER?.toLowerCase() === "pm2") throw error;
+        const command = oxmgrInstallCommand(process.env);
+        const answer = opts.yes ? "yes" : (await ask(`      oxmgr is missing. Install globally with \`${command.join(" ")}\`? [y/N]: `)).trim();
+        if (!/^(y|yes)$/i.test(answer)) {
+          throw new Error(`Setup cancelled. To install oxmgr, run \`${command.join(" ")}\`, then rerun setup.`);
+        }
+        console.log(`      Installing oxmgr: ${command.join(" ")}`);
+        const installer = Bun.which(command[0]) ?? (command[0] === "bun" ? process.execPath : null);
+        if (!installer) throw new Error(`${command[0]} is not on PATH. Install it or run \`${command.join(" ")}\` in your terminal, then rerun setup.`);
+        const proc = Bun.spawn([installer, ...command.slice(1)], {
+          stdin: "inherit", stdout: "inherit", stderr: "inherit", windowsHide: true,
+        });
+        const code = await proc.exited;
+        if (code !== 0) throw new Error(`\`${command.join(" ")}\` failed (exit code ${code}). Resolve the installation error, then rerun setup.`);
+        if (!Bun.which("oxmgr")) {
+          throw new Error("oxmgr was installed but is not on PATH. Add the package manager's global bin directory to PATH, then rerun setup.");
+        }
+        _daemonMgr = undefined;
+        _oxmgrVersion = undefined;
+        daemonManager();
+      }
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      rl?.close();
+      envWatcher?.close();
+      process.exit(1);
+    }
+  }
   const persistedChanged = desiredBind !== persistedBind;
   if (persistedChanged) {
     const lines = globalEnvRaw.trimEnd().split("\n").filter(l => !/^\s*RECH_HOST\s*=/.test(l));
@@ -1623,8 +1791,18 @@ function printHelp(): void {
   console.log(`rechrome (rech) — drive Chrome via Playwright over HTTP
 
 Usage:
-  rech setup [--profile <email|name|folder>] [--token <tok>]
+  rech [--profile <email|name|folder>] <playwright-args...>
+                               Run Playwright CLI command with the given registered
+                               Chrome profile. --profile selects the profile by exact
+                               registered email (e.g. you@gmail.com), exact Chrome
+                               profile name, or exact profile folder name. The profile
+                               must already be registered (see \`rech setup\`). Place
+                               --profile before the playwright subcommand. Requires
+                               ${ENV_KEY}.
+  rech setup [--profile <email|name|folder>] [--token <tok>] [--yes]
                                First-time setup: daemon + Chrome extension + config
+                               Offers to install missing oxmgr globally (y/N).
+                               --yes approves installation without prompting.
                                --profile selects the Chrome profile non-interactively.
                                Menu numbers are not accepted. Resolution order is exact
                                email (e.g. you@gmail.com), exact Chrome profile name,
@@ -1659,13 +1837,14 @@ Environment:
 Examples:
   rech setup
   rech setup --profile you@gmail.com --token <PLAYWRIGHT_MCP_EXTENSION_TOKEN>
+  rech --profile you@gmail.com open https://example.com
   rech eval "() => document.title"
   rech open https://example.com
   rech screenshot`);
 }
 
 if (import.meta.main) {
-  const args = process.argv.slice(2);
+  let args = process.argv.slice(2);
   const cmd = args[0]?.toLowerCase();
 
   if (cmd === "serve") {
@@ -1687,7 +1866,7 @@ if (import.meta.main) {
       ? args[tokenIdx + 1]
       : args.find(a => a.startsWith("--token="))?.slice("--token=".length))
       ?? process.env.RECH_TOKEN;
-    await setup({ profile, token }); // setup closes envWatcher itself before printing Done
+    await setup({ profile, token, yes: args.includes("--yes") }); // setup closes envWatcher itself before printing Done
     // Auto-start the tray (best-effort, silent on headless / missing binary).
     await startTray({ quiet: true }).catch(() => {});
   } else if (cmd === "tray") {
@@ -1723,6 +1902,41 @@ if (import.meta.main) {
       printHelp();
       process.exit(1);
     }
+    // --profile: target a registered Chrome profile globally (see extractGlobalProfileArg for
+    // the leading-flags-only rule that protects the forwarded CLI's own --profile).
+    let profileSelector: string | undefined;
+    let overrideEnv: Record<string, string> | undefined;
+    try {
+      const extracted = extractGlobalProfileArg(args);
+      profileSelector = extracted.selector;
+      args = extracted.args;
+    } catch (err) {
+      console.error(err instanceof Error ? err.message : String(err));
+      envWatcher?.close();
+      process.exit(1);
+    }
+    if (profileSelector !== undefined) {
+      try {
+        const registry = await readTokenRegistry();
+        const cache = await readChromeProfileCache();
+        const resolved = await resolveGlobalProfile(registry, cache, profileSelector);
+        // Use the registry key (email, or the managed profile name) as the profile identity:
+        // the daemon already resolves email/name → profile dir for the default URL-param path,
+        // so this keeps `--profile <email>` on the SAME session as the default path and only
+        // opens a separate session when the profile really differs.
+        overrideEnv = {
+          PLAYWRIGHT_MCP_PROFILE_DIRECTORY: resolved.email,
+          PLAYWRIGHT_MCP_EXTENSION_ID: resolved.entry.extensionId,
+          PLAYWRIGHT_MCP_EXTENSION_TOKEN: resolved.entry.token,
+        };
+        if (resolved.entry.userDataDir) overrideEnv.PLAYWRIGHT_MCP_USER_DATA_DIR = resolved.entry.userDataDir;
+        if (resolved.entry.loadExtension) overrideEnv.PLAYWRIGHT_MCP_LOAD_EXTENSION = resolved.entry.loadExtension;
+      } catch (err) {
+        console.error(err instanceof Error ? err.message : String(err));
+        envWatcher?.close();
+        process.exit(1);
+      }
+    }
     // --isolate: ephemeral session isolation, sugar for -s=iso-<random>. For fragile single-shot
     // flows (OAuth/login) that must not share tabs with the worktree's default session. The `iso-`
     // marker lets the daemon reap these throwaway sessions on an idle TTL (see serve.ts), so an
@@ -1732,7 +1946,7 @@ if (import.meta.main) {
       args.splice(isolateIdx, 1);
       args.push(`-s=iso-${randomBytes(8).toString("hex")}`);
     }
-    await run(url, args);
+    await run(url, args, overrideEnv);
     envWatcher?.close();
   }
 }

package/serve.js

@@ -278,6 +278,27 @@ async function freeStalePort(port: number): Promise<void> {
   await new Promise(r => setTimeout(r, 800)); // let the OS release the socket before retry
 }
 
+// --- Foreground/orphan self-exit ---------------------------------------------------
+// A foreground `rech serve` (run directly by an agent, NOT under oxmgr/pm2) has no
+// process-manager safety net: when the agent that spawned it exits, the OS re-parents
+// the orphan to init (ppid 1) and it lives forever — the resource leak behind
+// PERFORMANCE-EVENT.md. The managed daemon (oxmgr `--restart always`) keeps the
+// process as its own child, so its ppid is stable and non-1 and it is never flagged.
+// Once a serve is orphaned AND has had no real /run for the idle timeout, it exits so
+// the leak self-heals. /ping is deliberately NOT activity (the tray polls it every 2s
+// and would otherwise keep an orphan alive forever).
+const ORPHAN_POLL_INTERVAL_MS = 15_000;
+const ORPHAN_IDLE_EXIT_MS = Number(process.env.RECH_SERVE_IDLE_TIMEOUT_MS) || 5 * 60_000;
+
+// Pure decision predicate (testable). idleTimeoutMs <= 0 disables orphan self-exit.
+export function shouldExitOrphanedServe(opts: {
+  orphaned: boolean;
+  idleMs: number;
+  idleTimeoutMs: number;
+}): boolean {
+  return opts.idleTimeoutMs > 0 && opts.orphaned && opts.idleMs >= opts.idleTimeoutMs;
+}
+
 export async function serve() {
   const url = await getOrCreateUrl();
   const { key, port } = parseUrl(url);
@@ -285,6 +306,21 @@ export async function serve() {
   const workDir = join(RECH_DIR, "output");
   mkdirSync(workDir, { recursive: true });
 
+  // Foreground/orphan self-exit: a serve whose parent has been re-parented to init
+  // (ppid 1) is a leaked foreground serve. Poll for that, track the last real /run,
+  // and exit once orphaned + idle so an agent that died without shutting us down
+  // doesn't leave a daemon behind.
+  let orphaned = false;
+  let idleSince = Date.now();
+  const markActivity = () => { idleSince = Date.now(); };
+  setInterval(() => {
+    if (process.ppid === 1) orphaned = true;
+    if (shouldExitOrphanedServe({ orphaned, idleMs: Date.now() - idleSince, idleTimeoutMs: ORPHAN_IDLE_EXIT_MS })) {
+      log(`orphaned foreground serve idle ${Math.round((Date.now() - idleSince) / 1000)}s — exiting (spawning agent is gone)`);
+      process.exit(0);
+    }
+  }, ORPHAN_POLL_INTERVAL_MS);
+
   // Reap idle --isolate sessions so single-shot OAuth/login drives don't leak browser contexts.
   adoptOrphanedIsoSessions();
   setInterval(() => {
@@ -365,6 +401,7 @@ export async function serve() {
       if (reqUrl.pathname !== "/run") return new Response("rech server\n");
       const denied = authCheck(req, key);
       if (denied) return denied;
+      markActivity(); // a real command: this serve is not idle
 
       const body = await req.json();
       let args: string[];

package/serve.ts

@@ -278,6 +278,27 @@ async function freeStalePort(port: number): Promise<void> {
   await new Promise(r => setTimeout(r, 800)); // let the OS release the socket before retry
 }
 
+// --- Foreground/orphan self-exit ---------------------------------------------------
+// A foreground `rech serve` (run directly by an agent, NOT under oxmgr/pm2) has no
+// process-manager safety net: when the agent that spawned it exits, the OS re-parents
+// the orphan to init (ppid 1) and it lives forever — the resource leak behind
+// PERFORMANCE-EVENT.md. The managed daemon (oxmgr `--restart always`) keeps the
+// process as its own child, so its ppid is stable and non-1 and it is never flagged.
+// Once a serve is orphaned AND has had no real /run for the idle timeout, it exits so
+// the leak self-heals. /ping is deliberately NOT activity (the tray polls it every 2s
+// and would otherwise keep an orphan alive forever).
+const ORPHAN_POLL_INTERVAL_MS = 15_000;
+const ORPHAN_IDLE_EXIT_MS = Number(process.env.RECH_SERVE_IDLE_TIMEOUT_MS) || 5 * 60_000;
+
+// Pure decision predicate (testable). idleTimeoutMs <= 0 disables orphan self-exit.
+export function shouldExitOrphanedServe(opts: {
+  orphaned: boolean;
+  idleMs: number;
+  idleTimeoutMs: number;
+}): boolean {
+  return opts.idleTimeoutMs > 0 && opts.orphaned && opts.idleMs >= opts.idleTimeoutMs;
+}
+
 export async function serve() {
   const url = await getOrCreateUrl();
   const { key, port } = parseUrl(url);
@@ -285,6 +306,21 @@ export async function serve() {
   const workDir = join(RECH_DIR, "output");
   mkdirSync(workDir, { recursive: true });
 
+  // Foreground/orphan self-exit: a serve whose parent has been re-parented to init
+  // (ppid 1) is a leaked foreground serve. Poll for that, track the last real /run,
+  // and exit once orphaned + idle so an agent that died without shutting us down
+  // doesn't leave a daemon behind.
+  let orphaned = false;
+  let idleSince = Date.now();
+  const markActivity = () => { idleSince = Date.now(); };
+  setInterval(() => {
+    if (process.ppid === 1) orphaned = true;
+    if (shouldExitOrphanedServe({ orphaned, idleMs: Date.now() - idleSince, idleTimeoutMs: ORPHAN_IDLE_EXIT_MS })) {
+      log(`orphaned foreground serve idle ${Math.round((Date.now() - idleSince) / 1000)}s — exiting (spawning agent is gone)`);
+      process.exit(0);
+    }
+  }, ORPHAN_POLL_INTERVAL_MS);
+
   // Reap idle --isolate sessions so single-shot OAuth/login drives don't leak browser contexts.
   adoptOrphanedIsoSessions();
   setInterval(() => {
@@ -365,6 +401,7 @@ export async function serve() {
       if (reqUrl.pathname !== "/run") return new Response("rech server\n");
       const denied = authCheck(req, key);
       if (denied) return denied;
+      markActivity(); // a real command: this serve is not idle
 
       const body = await req.json();
       let args: string[];