smart-web-mcp 0.44.1 → 1.0.0

package/dist/assessment.d.ts

@@ -5,7 +5,6 @@ export declare function createHandoffSuggestion(input: {
     mode?: RetrievalHandoffSuggestion["mode"];
     url: string;
     goal: string;
-    captcha_type?: CaptchaType;
 }): RetrievalHandoffSuggestion;
 export declare function createAssessment(input?: {
     confidence?: RetrievalConfidence;
@@ -14,15 +13,23 @@ export declare function createAssessment(input?: {
     interactive_flow_likely?: boolean;
     signals?: string[];
     recommended_handoff?: RetrievalHandoffSuggestion | null;
+    continuation?: RetrievalAssessment["continuation"];
 }): RetrievalAssessment;
 export declare function firstMeaningfulBlockedReason(items: Array<ToolError | string | null | undefined>): string;
 export declare function hasTerminalSafetyBlock(items: Array<ToolError | string | null | undefined>): boolean;
 export declare function detectAuthLikeText(value: string): boolean;
 export declare function detectInteractiveLikeText(value: string): boolean;
+/** Describes unfinished work only. Never authorizes or dispatches an action. */
+export declare function assessBrowserContinuation(input: {
+    url: string;
+    incomplete: boolean;
+    content: string;
+    interactive: boolean;
+    errors?: Array<ToolError | undefined>;
+}): RetrievalAssessment["continuation"];
 /**
  * Detect CAPTCHA widget type from page text/HTML content.
- * smart-web is read-only so it cannot inspect the live DOM — instead it
- * infers the likely CAPTCHA type from known signatures in the fetched HTML
+ * Infers the likely CAPTCHA type from known signatures in the fetched HTML
  * (iframe src patterns, class names, data-sitekey attributes).
  */
 export declare function detectCaptchaTypeFromContent(html: string): CaptchaType | null;

package/dist/assessment.js

@@ -8,7 +8,6 @@ export function createHandoffSuggestion(input) {
         mode: input.mode || "read",
         url: String(input.url || "").trim(),
         goal: String(input.goal || "").trim(),
-        ...(input.captcha_type ? { captcha_type: input.captcha_type } : {}),
     };
 }
 export function createAssessment(input = {}) {
@@ -19,6 +18,7 @@ export function createAssessment(input = {}) {
         interactive_flow_likely: Boolean(input.interactive_flow_likely),
         signals: normalizeSignals(input.signals || []),
         recommended_handoff: input.recommended_handoff || null,
+        continuation: input.continuation || null,
     };
 }
 export function firstMeaningfulBlockedReason(items) {
@@ -64,10 +64,27 @@ export function detectInteractiveLikeText(value) {
         return false;
     return /(enable javascript|checking your browser|just a moment|please wait|open the app|continue in browser|use the search box|select a filter|load more|show more)/i.test(text);
 }
+/** Describes unfinished work only. Never authorizes or dispatches an action. */
+export function assessBrowserContinuation(input) {
+    if (!input.incomplete)
+        return null;
+    const captcha = detectCaptchaTypeFromContent(input.content);
+    const explicitParticipation = input.errors?.find((error) => error?.code === "operator_browser_user_required");
+    const userRequired = explicitParticipation || input.errors?.some((error) => error?.code === "operator_browser_auth_required") || Boolean(captcha) || /(?:sign in|log in|login) (?:required|to continue)|로그인(?:이 필요| 후)|consent required|동의가 필요|(?:enter|provide) (?:your |the )?(?:password|one[- ]time code)|verify you are human|complete (?:the |this )?captcha|captcha (?:is )?required|password\/MFA\/CAPTCHA\/consent/i.test(input.content);
+    return {
+        status: userRequired ? "user_required" : input.interactive ? "action_required" : "unavailable",
+        url: input.url,
+        reason: userRequired
+            ? explicitParticipation?.message || "Password, MFA, CAPTCHA or consent requires user participation; no automated solving or further action is authorized."
+            : input.interactive
+                ? "Requested content still needs observed browser interaction; this assessment did not execute an action."
+                : "Available acquisition did not verify the requested content; no further backend task was dispatched.",
+        ...(captcha ? { captcha_type: captcha } : {}),
+    };
+}
 /**
  * Detect CAPTCHA widget type from page text/HTML content.
- * smart-web is read-only so it cannot inspect the live DOM — instead it
- * infers the likely CAPTCHA type from known signatures in the fetched HTML
+ * Infers the likely CAPTCHA type from known signatures in the fetched HTML
  * (iframe src patterns, class names, data-sitekey attributes).
  */
 export function detectCaptchaTypeFromContent(html) {
@@ -96,9 +113,7 @@ export function detectCaptchaTypeFromContent(html) {
         return "hcaptcha";
     if (/data-sitekey[^>]*class="[^"]*h-captcha/i.test(html))
         return "hcaptcha";
-    // Fallback: "captcha" keyword without a specific type
-    if (/\bcaptcha\b/i.test(html))
-        return "recaptcha";
+    // An untyped challenge or a mere mention does not identify its vendor.
     return null;
 }
 //# sourceMappingURL=assessment.js.map

package/dist/assessment.js.map

@@ -1 +1 @@
-{"version":3,"file":"assessment.js","sourceRoot":"","sources":["../src/assessment.ts"],"names":[],"mappings":"AAEA,SAAS,gBAAgB,CAAC,OAAiB;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAC9F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAOvC;IACC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM;QAC1B,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACnC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACrC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAK,GAOlC,EAAE;IACJ,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ;QACxC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACzD,oBAAoB,EAAE,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QACzD,uBAAuB,EAAE,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAC/D,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAC9C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;KACvD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAmD;IAC9F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACxB,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,6EAA6E,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;YACxK,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAA;QAC/D,IAAI,yDAAyD,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAA;IACtI,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAmD;IACxF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACnD,OAAO,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI;YAClC,sBAAsB;YACtB,aAAa;YACb,kBAAkB;YAClB,YAAY;YACZ,oBAAoB;YACpB,oBAAoB;SACrB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,OAAO,gLAAgL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpM,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,OAAO,8JAA8J,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAClL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,kEAAkE;IAClE,IAAI,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC9F,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACpE,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC/E,2CAA2C;IAC3C,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC5E,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACnE,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACnE,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC9E,4CAA4C;IAC5C,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAA;IAC3D,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAA;IAChE,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAA;IAC3E,sDAAsD;IACtD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACjD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"assessment.js","sourceRoot":"","sources":["../src/assessment.ts"],"names":[],"mappings":"AAEA,SAAS,gBAAgB,CAAC,OAAiB;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAC9F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAMvC;IACC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM;QAC1B,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACnC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KACtC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAK,GAQlC,EAAE;IACJ,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ;QACxC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACzD,oBAAoB,EAAE,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QACzD,uBAAuB,EAAE,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAC/D,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAC9C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;QACtD,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;KACzC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAmD;IAC9F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACxB,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,6EAA6E,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;YACxK,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAA;QAC/D,IAAI,yDAAyD,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAA;IACtI,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAmD;IACxF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACnD,OAAO,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI;YAClC,sBAAsB;YACtB,aAAa;YACb,kBAAkB;YAClB,YAAY;YACZ,oBAAoB;YACpB,oBAAoB;SACrB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,OAAO,gLAAgL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpM,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,OAAO,8JAA8J,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAClL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,yBAAyB,CAAC,KAAyH;IACjK,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC3D,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,KAAK,gCAAgC,CAAC,CAAA;IAC7G,MAAM,YAAY,GAAG,qBAAqB,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,KAAK,gCAAgC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,wQAAwQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACjb,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa;QAC9F,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,YAAY;YAClB,CAAC,CAAC,qBAAqB,EAAE,OAAO,IAAI,sHAAsH;YAC1J,CAAC,CAAC,KAAK,CAAC,WAAW;gBACjB,CAAC,CAAC,wGAAwG;gBAC1G,CAAC,CAAC,qGAAqG;QAC3G,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,kEAAkE;IAClE,IAAI,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC9F,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACpE,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC/E,2CAA2C;IAC3C,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC5E,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACnE,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACnE,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC9E,4CAA4C;IAC5C,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAA;IAC3D,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAA;IAChE,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAA;IAC3E,uEAAuE;IACvE,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/body-export.d.ts

@@ -0,0 +1,10 @@
+import type { SmartfetchOutput } from "./shared.js";
+/** Export normalized body before inline projection, never raw DOM or session state. */
+export declare function exportBody(output: SmartfetchOutput): {
+    path: string;
+    format: "text";
+    bytes: number;
+    sha256: string;
+    chars: number;
+    complete: boolean;
+};

package/dist/body-export.js

@@ -0,0 +1,28 @@
+import { createHash } from "node:crypto";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { resolveSmartWebTempRoot } from "./runtime-temp.js";
+/** Export normalized body before inline projection, never raw DOM or session state. */
+export function exportBody(output) {
+    const text = output.post?.text;
+    if (typeof text !== "string" || !text.trim())
+        throw new Error("No readable body to export");
+    const bytes = Buffer.from(text);
+    if (bytes.length > 1024 * 1024)
+        throw new Error("Body export exceeds the 1 MiB bound");
+    const root = resolveSmartWebTempRoot();
+    mkdirSync(root, { recursive: true });
+    const dir = mkdtempSync(join(root, "smartfetch-body-"));
+    const path = join(dir, "body.txt");
+    try {
+        writeFileSync(path, bytes, { mode: 0o600, flag: "wx" });
+        const coverage = output.post?.body_coverage;
+        const complete = output.partial === false && (!coverage || (typeof coverage === "object" && "complete" in coverage && coverage.complete === true && "collected_chars" in coverage && coverage.collected_chars === text.length));
+        return { path, format: "text", bytes: bytes.length, sha256: createHash("sha256").update(bytes).digest("hex"), chars: text.length, complete };
+    }
+    catch (error) {
+        rmSync(dir, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=body-export.js.map

package/dist/body-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-export.js","sourceRoot":"","sources":["../src/body-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAG3D,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,MAAwB;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAA;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,uBAAuB,EAAE,CAAA;IACtC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAClC,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,iBAAiB,IAAI,QAAQ,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/N,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAA;IACvJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/browser-session.d.ts

@@ -1,8 +1,9 @@
+import type { Browser, BrowserContext, CDPSession, Page } from "playwright";
 import type { ToolError } from "./shared.js";
 export declare const SMART_WEB_PROFILE_NAME_PATTERN: RegExp;
 export declare const SMART_WEB_PROFILE_NAME_DESCRIPTION = "1-64 characters: letters, numbers, dots, underscores, or hyphens; must start with a letter or number and cannot end with a dot";
 type BrowserWaitUntil = "domcontentloaded" | "networkidle";
-type BrowserMethod = "playwright_stealth" | "undetected_chromedriver";
+type BrowserMethod = "playwright_stealth" | "undetected_chromedriver" | "local_browser_cdp";
 export type BrowserAnchor = {
     href: string;
     text: string;
@@ -40,6 +41,8 @@ export type BrowserPageResult = BrowserPageSnapshot | BrowserPageFailure;
 export type BrowserSessionOptions = {
     url: string;
     timeoutMs: number;
+    /** Explicitly approved local automation browser. Never discovered or launched. */
+    cdpUrl?: string;
     allowPrivateHosts?: boolean;
     waitUntil?: BrowserWaitUntil;
     extraHeaders?: Record<string, string>;
@@ -55,17 +58,45 @@ export type BrowserSessionOptions = {
      * useful for SPA pages where `networkidle` fires before JS has rendered
      * the target content. */
     waitForSelector?: string;
+    /** Trusted local action runner; only supported on the approved CDP lane. */
+    operatorTask?: (page: Page, remaining: () => number, session: CDPSession) => Promise<void>;
+    /** Install task-local client adapters before the owned page is created. */
+    operatorPrepareContext?: (context: BrowserContext) => Promise<void>;
+    /** Explicit scoped-frame batches allow only same-origin HTTP(S) children. */
+    operatorSameOriginFrames?: boolean;
+    /** Capture an explicit attachment without altering the shared download policy. */
+    operatorDownload?: (download: {
+        id: number;
+        url: string;
+        bytes: Buffer;
+        contentType: string;
+    }) => Promise<void>;
+    operatorDownloadTarget?: () => {
+        url: string;
+        id: number;
+        frameId?: string;
+    } | undefined;
+    signal?: AbortSignal;
 };
 type TimedCache = {
     value: any;
     expiresAt: number;
 };
+type OperatorBrowserConnector = (url: string, options: {
+    timeout: number;
+    noDefaults: true;
+}) => Promise<Browser>;
+export declare function TEST_setOperatorBrowserConnector(connector?: OperatorBrowserConnector): void;
 export declare function TEST_setChromiumCache(value: TimedCache | undefined): void;
 export declare function TEST_setUndetectedChromeRunner(value: ((options: BrowserSessionOptions) => Promise<BrowserPageResult>) | undefined): void;
 export declare function TEST_setPlaywrightInstaller(value: (() => Promise<ToolError | null>) | undefined): void;
 export declare function TEST_resetPlaywrightStartupWarning(): void;
 /** Override the system Chrome path for tests. Pass undefined to restore auto-detection. */
 export declare function TEST_setSystemChromePath(value: string | undefined): void;
+export declare class BrowserSessionToolError extends Error {
+    readonly toolError: ToolError;
+    constructor(toolError: ToolError);
+}
 export declare function looksBotBlockedContent(value: string): boolean;
 export declare function validateProfileName(name: string): string;
 /** Resolve the user-data-dir for a named profile (e.g. "work", "personal"). */

package/dist/browser-session.js

@@ -1,10 +1,12 @@
 import { execFile } from "node:child_process";
 import { chmodSync, existsSync, lstatSync, mkdirSync, readdirSync } from "node:fs";
 import { homedir } from "node:os";
+import { STATUS_CODES } from "node:http";
 import { createRequire } from "node:module";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
+import { connectOwnedBrowser, ownedBrowserCleanupIncomplete } from "./operator-cdp.js";
 import { asString, configEnabled, dedupeUrls, resolveValidatedUrl, validateOutboundUrl } from "./shared.js";
 import { sanitizeSmartWebTempEnv } from "./runtime-temp.js";
 import { configText } from "./settings.js";
@@ -23,6 +25,10 @@ let playwrightInstallerOverride = undefined;
 let playwrightInstallPromise = undefined;
 let playwrightStartupWarningShown = false;
 let systemChromePathOverride = undefined;
+let operatorBrowserConnector = connectOwnedBrowser;
+export function TEST_setOperatorBrowserConnector(connector) {
+    operatorBrowserConnector = connector || connectOwnedBrowser;
+}
 export function TEST_setChromiumCache(value) {
     chromiumCache = value;
 }
@@ -41,7 +47,7 @@ export function TEST_resetPlaywrightStartupWarning() {
 export function TEST_setSystemChromePath(value) {
     systemChromePathOverride = value;
 }
-class BrowserSessionToolError extends Error {
+export class BrowserSessionToolError extends Error {
     toolError;
     constructor(toolError) {
         super(toolError.message);
@@ -647,8 +653,18 @@ async function extractAnchors(page, maxAnchors) {
         return nodes.map((node) => {
             const element = node;
             const closest = element.closest("article, li, tr, section, main, .topic-list-item, .topic-body, .topic-post, .athing, .titleline, [role='article'], [data-pressable-container='true'], .feed-item, .timeline-item, .post, .storylink");
-            const text = (element.innerText || element.getAttribute("aria-label") || element.getAttribute("title") || "").replace(/\s+/g, " ").trim();
-            const contextSource = closest?.innerText || element.innerText || element.textContent || "";
+            const productName = /(^|\.)coupang\.com$/.test(element.hostname) && /\/vp\/products\/\d+/.test(element.pathname)
+                ? element.querySelector('[class*="productName"]') : null;
+            const text = (productName?.innerText || element.innerText || element.getAttribute("aria-label") || element.getAttribute("title") || "").replace(/\s+/g, " ").trim();
+            let contextSource = closest?.innerText || element.innerText || element.textContent || "";
+            if (productName) {
+                // A product card's first visible amount may be a crossed-out list price.
+                // Keep current/conditional labels, never borrow the neighbouring card.
+                const card = element.cloneNode(true);
+                card.querySelectorAll("del, s").forEach((node) => node.remove());
+                card.querySelectorAll("div, p, li, br").forEach((node) => node.after(document.createTextNode(" ")));
+                contextSource = card.textContent || "";
+            }
             return {
                 href: element.href || "",
                 text,
@@ -721,8 +737,362 @@ function shouldPromoteUndetectedChrome(playwrightResult) {
 function preferUndetectedChromeResult(playwrightResult, ucResult) {
     return ucResult.ok;
 }
+function assertReadableBrowserContent(title, text) {
+    if (/^\s*(?:please\s+)?(?:verify you are human|complete (?:the |this )?captcha|captcha (?:is )?required)/i.test(text)
+        || (text.length < 1000 && /verify you are human|complete (?:the |this )?captcha|captcha (?:is )?required/i.test(text))) {
+        throw new BrowserSessionToolError({ category: "block", code: "operator_browser_user_required", message: "Approved local browser requires CAPTCHA user participation; no content was verified" });
+    }
+    if (looksBotBlockedContent(title) || looksBotBlockedContent(text.slice(0, 4000)) || /사용\s*권한(?:이 없| 제한)|접근.*권한이 없습니다/.test(text.slice(0, 4000))) {
+        throw new BrowserSessionToolError({ category: "block", code: "operator_browser_blocked", message: "Approved local browser returned a challenge or denied page; no content was verified" });
+    }
+    if (text.length < 1000 && /로그인이 필요|로그인 후|sign in to continue|log in to continue/i.test(text)) {
+        throw new BrowserSessionToolError({ category: "block", code: "operator_browser_auth_required", message: "Approved local browser requires login or user participation; no content was verified" });
+    }
+}
+async function readGuardedResponse(session, requestId, remaining) {
+    const { stream } = await session.send("Fetch.takeResponseBodyAsStream", { requestId });
+    const chunks = [];
+    let bytes = 0;
+    try {
+        for (;;) {
+            remaining();
+            const chunk = await session.send("IO.read", { handle: stream, size: 64 * 1024 });
+            const buffer = Buffer.from(chunk.data, chunk.base64Encoded ? "base64" : "utf8");
+            bytes += buffer.length;
+            if (bytes > 8 * 1024 * 1024)
+                throw new Error("Operator response exceeds the 8 MiB guarded byte limit");
+            chunks.push(buffer);
+            if (chunk.eof)
+                break;
+        }
+        return Buffer.concat(chunks, bytes);
+    }
+    finally {
+        void session.send("IO.close", { handle: stream }).catch(() => { });
+    }
+}
+async function runConnectedBrowserSession(options) {
+    let browser;
+    let page;
+    let session;
+    const deadline = Date.now() + options.timeoutMs;
+    let expired = false;
+    let navigationError;
+    let phase = "validate_url";
+    let interruptionPhase;
+    const interruptionMessage = (cancelled) => `Operator browser task ${cancelled ? "cancelled" : "deadline exhausted"} (phase=${interruptionPhase ?? phase})`;
+    const interruptionError = () => {
+        interruptionPhase ??= phase;
+        return new BrowserSessionToolError({
+            category: "timeout", code: options.signal?.aborted ? "operator_browser_cancelled" : "operator_browser_timeout",
+            message: interruptionMessage(options.signal?.aborted === true),
+        });
+    };
+    const remaining = () => {
+        if (navigationError)
+            throw new BrowserSessionToolError(navigationError);
+        if (expired || options.signal?.aborted || Date.now() >= deadline)
+            throw interruptionError();
+        return Math.max(1, deadline - Date.now());
+    };
+    let interrupt;
+    const interrupted = new Promise((_resolve, reject) => { interrupt = reject; });
+    void interrupted.catch(() => { });
+    const bounded = (promise) => Promise.race([promise, interrupted]);
+    const cancel = () => {
+        expired = true;
+        interrupt(interruptionError());
+        void page?.close().catch(() => { });
+    };
+    const timer = setTimeout(cancel, options.timeoutMs);
+    options.signal?.addEventListener("abort", cancel, { once: true });
+    try {
+        remaining();
+        const endpoint = new URL(options.cdpUrl || "");
+        if (endpoint.protocol !== "http:" || !["127.0.0.1", "[::1]"].includes(endpoint.hostname)
+            || endpoint.username || endpoint.password || endpoint.pathname !== "/" || endpoint.search || endpoint.hash) {
+            throw new BrowserSessionToolError({ category: "block", code: "operator_cdp_endpoint_invalid", message: "Operator browser requires an explicit loopback HTTP CDP endpoint without credentials or path" });
+        }
+        await bounded(assertSafeBrowserFinalUrl(options.url, options));
+        // Plain Playwright is only a CDP client here. Do not install stealth plugins,
+        // context routes, headers or init scripts into somebody else's session.
+        phase = "connect";
+        browser = await bounded(operatorBrowserConnector(endpoint.origin, { timeout: remaining(), noDefaults: true }).then((connected) => {
+            if (expired || options.signal?.aborted)
+                void connected.close().catch(() => { });
+            return connected;
+        }));
+        remaining();
+        const context = browser.contexts()[0];
+        if (!context)
+            throw new Error("Approved browser has no existing context");
+        if (options.operatorPrepareContext)
+            await bounded(options.operatorPrepareContext(context));
+        phase = "create_tab";
+        page = await bounded(context.newPage().then((created) => {
+            if (expired || options.signal?.aborted)
+                void created.close().catch(() => { });
+            return created;
+        }));
+        if (expired)
+            throw new Error("Operator browser timeout");
+        // Guards belong to this tab, never the shared context. CDP Fetch pauses each
+        // redirect hop too (Playwright route only sees the first redirected request).
+        phase = "install_guards";
+        session = await bounded(context.newCDPSession(page).then((created) => {
+            if (expired || options.signal?.aborted)
+                void created.detach().catch(() => { });
+            return created;
+        }));
+        const ownedSession = session;
+        const mainFrameId = options.operatorTask ? (await bounded(session.send("Page.getFrameTree"))).frameTree.frame.id : undefined;
+        const downloadRequests = new Set();
+        let activeDownloadId;
+        const guardedRequests = new Map();
+        const pendingGuards = new Set();
+        const settleGuards = async () => {
+            while (pendingGuards.size) {
+                if (navigationError)
+                    throw new BrowserSessionToolError(navigationError);
+                remaining();
+                await bounded(Promise.all([...pendingGuards]));
+            }
+            if (navigationError)
+                throw new BrowserSessionToolError(navigationError);
+        };
+        session.on("Network.loadingFailed", event => {
+            if (event.canceled !== true || event.errorText !== "net::ERR_ABORTED")
+                return;
+            for (const guard of guardedRequests.get(event.requestId) || [])
+                guard.cancelled = true;
+        });
+        const stopForeignFrameNavigation = (frameId, url) => {
+            if (!options.operatorSameOriginFrames || frameId === mainFrameId)
+                return false;
+            if (/^https?:/.test(url) && new URL(url).origin === new URL(page.url()).origin)
+                return false;
+            navigationError = { category: "block", code: "operator_frame_navigation_blocked", message: "Frame navigation violates the same-origin HTTP(S) action scope" };
+            expired = true;
+            interrupt(new BrowserSessionToolError(navigationError));
+            void page?.close().catch(() => { });
+            return true;
+        };
+        if (options.operatorSameOriginFrames) {
+            // Native CSP blocks transmission; the event reports the blocked intent
+            // without waiting for a locator in Chromium's opaque error document.
+            session.on("Page.frameRequestedNavigation", event => stopForeignFrameNavigation(event.frameId, event.url));
+            await bounded(session.send("Page.enable"));
+        }
+        session.on("Fetch.requestPaused", (event) => {
+            const mainGet = event.resourceType === "Document" && event.frameId === mainFrameId && event.request.method === "GET";
+            const requestStage = event.responseStatusCode === undefined && event.responseErrorReason === undefined;
+            const guard = { cancelled: false, replaced: false,
+                ...(mainGet && event.responseErrorReason === "Aborted" && event.responseStatusCode === undefined
+                    ? { abortedNavigation: { requestId: event.requestId, url: event.request.url } } : {}),
+            };
+            if (event.networkId) {
+                const guards = guardedRequests.get(event.networkId) || new Set();
+                // Chromium can replace an aborted navigation with a new interception
+                // while retaining its native Network ID. This is not loadingFailed and
+                // not permission to swallow a response error without a replacement.
+                if (mainGet && requestStage)
+                    for (const previous of guards) {
+                        if (previous.abortedNavigation && previous.abortedNavigation.requestId !== event.requestId
+                            && previous.abortedNavigation.url === event.request.url)
+                            previous.replaced = true;
+                    }
+                guards.add(guard);
+                guardedRequests.set(event.networkId, guards);
+            }
+            const work = (async () => {
+                if (event.resourceType === "Document" && event.responseStatusCode === undefined
+                    && stopForeignFrameNavigation(event.frameId, event.request.url)) {
+                    await ownedSession.send("Fetch.failRequest", { requestId: event.requestId, errorReason: "BlockedByClient" }).catch(() => { });
+                    return;
+                }
+                const target = options.operatorDownloadTarget?.();
+                if (target?.id !== activeDownloadId) {
+                    downloadRequests.clear();
+                    activeDownloadId = target?.id;
+                }
+                const downloadFrameId = target?.frameId ?? mainFrameId;
+                if (event.responseStatusCode === undefined && target && event.resourceType === "Document" && event.frameId === downloadFrameId
+                    && (event.request.url === target.url || Boolean(event.redirectedRequestId && downloadRequests.has(event.redirectedRequestId)))) {
+                    downloadRequests.add(event.requestId);
+                }
+                if (options.operatorTask && event.responseStatusCode !== undefined && event.responseStatusCode >= 200
+                    && ![204, 205, 304].includes(event.responseStatusCode) && (event.responseStatusCode < 300 || event.responseStatusCode >= 400)) {
+                    // Native Chromium sandbox, scoped to this task's documents only.
+                    // Do not let actions create unguarded popups or navigate another tab.
+                    const disposition = event.responseHeaders?.find((header) => header.name.toLowerCase() === "content-disposition")?.value || "";
+                    const attachment = Boolean(options.operatorDownload && /^attachment(?:;|$)/i.test(disposition.trim()));
+                    if (attachment && (event.responseStatusCode !== 200 || event.responseHeaders?.some((header) => header.name.toLowerCase() === "content-range")))
+                        throw new Error("Only complete HTTP 200 attachments without Content-Range are supported");
+                    if (attachment && (!target || event.frameId !== downloadFrameId || !downloadRequests.has(event.requestId)))
+                        throw new Error("Attachment does not match the explicit armed download target and redirect chain");
+                    const body = await readGuardedResponse(ownedSession, event.requestId, remaining);
+                    if (attachment && options.operatorDownload && target) {
+                        remaining();
+                        if (options.operatorDownloadTarget?.()?.id !== target.id)
+                            throw new Error("Download step changed before its response completed");
+                        // Consume only this owned tab's response. Do not toggle Browser-wide
+                        // download behavior or write to the shared browser's Downloads dir.
+                        await ownedSession.send("Fetch.fulfillRequest", { requestId: event.requestId, responseCode: 204, responseHeaders: [], body: "" });
+                        remaining();
+                        await options.operatorDownload({ id: target.id, url: event.request.url, bytes: body, contentType: event.responseHeaders?.find((header) => header.name.toLowerCase() === "content-type")?.value.slice(0, 200) || "application/octet-stream" });
+                        return;
+                    }
+                    await ownedSession.send("Fetch.fulfillRequest", {
+                        requestId: event.requestId, responseCode: event.responseStatusCode,
+                        // Chromium rejects empty phrases for extension codes (e.g. 299).
+                        // Keep the actual numeric status; a neutral phrase is not success.
+                        responsePhrase: event.responseStatusText || STATUS_CODES[event.responseStatusCode] || "Unknown",
+                        responseHeaders: [...(event.responseHeaders || []).filter((header) => !/^(content-length|content-encoding|transfer-encoding)$/i.test(header.name)), { name: "Content-Security-Policy", value: `sandbox allow-scripts allow-same-origin allow-forms${options.operatorSameOriginFrames ? "; frame-src 'self'" : ""}` }],
+                        body: body.toString("base64"),
+                    });
+                    return;
+                }
+                const validation = await validateBrowserNavigationUrl(event.request.url, options);
+                if (!validation.ok) {
+                    if (event.resourceType === "Document")
+                        navigationError = browserNavigationBlockedError(validation.reason, validation.message);
+                    await ownedSession.send("Fetch.failRequest", { requestId: event.requestId, errorReason: "BlockedByClient" });
+                }
+                else {
+                    try {
+                        await ownedSession.send("Fetch.continueRequest", {
+                            requestId: event.requestId,
+                            ...(options.operatorTask && event.resourceType === "Document" ? { interceptResponse: true } : {}),
+                        });
+                    }
+                    catch (error) {
+                        // Both exceptions require native session-local evidence and exact
+                        // stale-ID failure after validation. Replacement guards still run
+                        // normally and must settle before any action/evidence publication.
+                        const retired = (requestStage && guard.cancelled) || guard.replaced;
+                        if (!retired || !(error instanceof Error)
+                            || !/Protocol error \(Fetch\.continueRequest\): Invalid InterceptionId\.?$/.test(error.message))
+                            throw error;
+                    }
+                }
+            })().catch((error) => {
+                navigationError = error instanceof BrowserSessionToolError ? error.toolError : { category: "block", code: "operator_request_guard_failed", message: error instanceof Error ? error.message : "Operator request guard failed" };
+                expired = true;
+                interrupt(new BrowserSessionToolError(navigationError));
+                void ownedSession.send("Fetch.failRequest", { requestId: event.requestId, errorReason: "BlockedByClient" }).catch(() => { });
+            }).finally(() => {
+                pendingGuards.delete(work);
+                if (!event.networkId)
+                    return;
+                const guards = guardedRequests.get(event.networkId);
+                guards?.delete(guard);
+                if (guards?.size === 0)
+                    guardedRequests.delete(event.networkId);
+            });
+            pendingGuards.add(work);
+        });
+        await bounded(session.send("Network.enable"));
+        await bounded(session.send("Network.setBypassServiceWorker", { bypass: true }));
+        if (options.operatorTask)
+            await bounded(session.send("Page.setBypassCSP", { enabled: false }));
+        await bounded(session.send("Fetch.enable", { patterns: [{ urlPattern: "*", requestStage: "Request" }] }));
+        phase = "navigate";
+        try {
+            const response = await bounded(page.goto(options.url, { waitUntil: "domcontentloaded", timeout: remaining() }));
+            const status = response?.status();
+            if (status !== undefined && status >= 400) {
+                // Read only the already-loaded denial document, without readiness waits
+                // or actions. Preserve observed participation instead of hiding it as HTTP.
+                const text = await bounded(page.evaluate(() => document.body?.innerText || ""));
+                const title = await bounded(page.title());
+                assertReadableBrowserContent(title, text);
+                throw new BrowserSessionToolError({
+                    category: status < 500 ? "block" : "unavailable", code: "operator_browser_http_error",
+                    message: `Approved local browser returned HTTP ${status}; requested content was not verified`,
+                });
+            }
+        }
+        catch (error) {
+            if (navigationError)
+                throw new BrowserSessionToolError(navigationError);
+            throw error;
+        }
+        phase = options.operatorTask ? "actions" : "wait_for_content";
+        if (options.operatorTask) {
+            await settleGuards();
+            await bounded(options.operatorTask(page, remaining, session));
+        }
+        else if (options.waitForSelector) {
+            await bounded(page.waitForSelector(options.waitForSelector, { timeout: remaining() }));
+        }
+        else {
+            await bounded(page.waitForFunction(() => {
+                const body = document.body?.innerText || "";
+                if (/access denied|사용\s*권한|접근.*권한|verify you are human|captcha|로그인이 필요|sign in to continue/i.test(body))
+                    return true;
+                if (/(^|\.)coupang\.com$/.test(location.hostname) && location.pathname === "/np/search") {
+                    return Array.from(document.querySelectorAll('a[href*="/vp/products/"]')).some((a) => /[\d,]+원/.test(a.innerText));
+                }
+                return body.trim().length >= 80;
+            }, undefined, { timeout: remaining() }));
+        }
+        await settleGuards();
+        phase = "extract";
+        await bounded(assertSafeBrowserFinalUrl(page.url(), options));
+        const text = await bounded(page.evaluate(() => document.body?.innerText || ""));
+        const title = await bounded(page.title());
+        assertReadableBrowserContent(title, text);
+        const anchors = await bounded(extractAnchors(page, Math.max(50, Math.min(2000, options.maxAnchors || 400))));
+        const primary = await bounded(extractPrimaryContent(page));
+        const html = await bounded(page.content());
+        await settleGuards();
+        if (expired)
+            throw new Error("Operator browser timeout");
+        return {
+            ok: true, method: "local_browser_cdp", url: options.url, final_url: page.url(), title,
+            html, text, content_html: primary.html, content_text: primary.text,
+            headings: primary.headings, anchors, links: dedupeUrls(anchors.map((anchor) => anchor.href)),
+            scroll_steps: 0, load_more_clicks: 0,
+        };
+    }
+    catch (error) {
+        const timedOut = expired || /timeout/i.test(String(error));
+        const code = options.signal?.aborted ? "operator_browser_cancelled" : timedOut ? "operator_browser_timeout" : "operator_browser_failed";
+        const toolError = browserSessionToolError(error, code, timedOut ? "timeout" : "unavailable");
+        // Playwright call logs can echo signed URLs, selectors or fill values. Keep
+        // interruption codes and a closed phase, never their raw diagnostic text.
+        const safeError = ["operator_browser_timeout", "operator_browser_cancelled"].includes(toolError.code)
+            ? { ...toolError, message: interruptionMessage(toolError.code === "operator_browser_cancelled") }
+            : toolError;
+        return { ok: false, method: "local_browser_cdp", error: safeError };
+    }
+    finally {
+        clearTimeout(timer);
+        options.signal?.removeEventListener("abort", cancel);
+        // Close only the page created above. Browser.close() on connectOverCDP
+        // disconnects this client; it does not terminate the external browser.
+        let cleanupTimer;
+        const cleaned = await Promise.race([
+            (async () => {
+                await page?.close().catch(() => { });
+                await session?.detach().catch(() => { });
+                await browser?.close().catch(() => { });
+                return !ownedBrowserCleanupIncomplete(browser);
+            })(),
+            new Promise((resolve) => { cleanupTimer = setTimeout(() => resolve(false), 1000); }),
+        ]);
+        clearTimeout(cleanupTimer);
+        if (!cleaned) {
+            void session?.detach().catch(() => { });
+            void browser?.close().catch(() => { });
+            return { ok: false, method: "local_browser_cdp", error: { category: "timeout", code: "operator_cleanup_incomplete", message: "Task cleanup could not be confirmed within its bounded cleanup window; do not assume its owned tab was closed" } };
+        }
+    }
+}
 export async function runBrowserSession(options) {
     sanitizeSmartWebTempEnv();
+    if (options.cdpUrl && !options.profileDir)
+        return runConnectedBrowserSession(options);
     const resolveOptions = {
         timeoutMs: options.timeoutMs,
     };