smooth-operator-mcp 3.0.0 → 3.0.1

package/.env.example

@@ -40,16 +40,16 @@ SMOOTH_OPERATOR_ALLOW_EVAL=true
 # these private roots by default.
 # SMOOTH_OPERATOR_ALLOWED_FILE_ROOTS=~/.smooth-operator/files,~/.smooth-operator/downloads
 
-# Optional automation-control baseline. The native default is enabled; set false
-# to preserve raw browser automation signals.
+# Compatibility baseline. Browser identity and automation signals remain native;
+# set false to skip the explicit-viewport compatibility script.
 # SMOOTH_OPERATOR_STEALTH_ENABLED=true
 # Stealth profile: balanced (default) | max (accepted compatibility names; same supported patch set)
 # SMOOTH_OPERATOR_STEALTH_PROFILE=balanced
 # Add opt-in GPU launch flags (does not make an identity/coherence guarantee)
 # SMOOTH_OPERATOR_STEALTH_GPU=false
-# Behavioral realism defaults on with short bounded timing; set false for the
-# fastest raw interaction path or override to decouple from stealth.
-# SMOOTH_OPERATOR_BEHAVIOR_ENABLED=true
+# Behavioral timing is off for the fastest deterministic path; set true only
+# when a site or workflow explicitly needs it.
+# SMOOTH_OPERATOR_BEHAVIOR_ENABLED=false
 
 # HTTP is opt-in; use a strong token before enabling remote access
 # SMOOTH_OPERATOR_TRANSPORT=http

package/README.md

@@ -44,9 +44,12 @@ Ask: *“Scrape pricing into a table”*, *“Fill this form with ~/resume.pdf
 
 ## How to use
 
-Talk to your harness normally. It can call `browser_navigate` → `browser_snapshot` → `browser_click` and the rest of the MCP surface as needed. For a challenge, `browser_solve_challenge` returns fresh bounded visual/state evidence for the connected AI; the AI uses ordinary browser actions and calls it again to verify the final classification. Human handoff remains available for logins or challenges that require the user.
+Talk to your harness normally. It can call `browser_navigate` → `browser_snapshot` → `browser_click` and the rest of the MCP surface as needed. For a challenge, `browser_solve_challenge` returns fresh bounded visual/state evidence and an attempt budget; the connected AI keeps using ordinary browser actions and calls it again until the final classification is clear or the budget is exhausted. Human handoff remains available only as an explicit final option.
 
-Stealth and short behavioral timing are enabled in the recommended native profile. Page JavaScript is also available by default; set the explicit environment flags to `false` when a stricter profile is needed. See `docs/STEALTH-GUIDE.md` for details and responsible use.
+Browser identity remains native, page JavaScript is available by default, and
+behavioral timing is off for fast deterministic input. Set the explicit
+environment flags to change those choices. See `docs/STEALTH-GUIDE.md` for
+details and responsible use.
 
 For the fastest supported operation, keep behavioral timing off with
 `SMOOTH_OPERATOR_BEHAVIOR_ENABLED=false`; the native browser remains bounded and

package/dist/smooth-operator.mjs

@@ -397,7 +397,7 @@ var SERVER_VERSION;
 var init_version = __esm({
   "src/server/version.ts"() {
     "use strict";
-    SERVER_VERSION = "3.0.0";
+    SERVER_VERSION = "3.0.1";
   }
 });
 
@@ -1554,7 +1554,7 @@ function writeSummary(ui, harness, choices) {
       ["Blocked sites", choices.blockedDomains.length ? choices.blockedDomains.join(", ") : "none"],
       ["Page JavaScript", choices.allowEval ? "enabled" : "off"],
       ["Stealth baseline", "enabled (balanced)"],
-      ["Behavioral realism", "enabled"],
+      ["Behavioral timing", "off (fast native input)"],
       ["Data directory", choices.dataDir]
     ]
   ]);
@@ -1629,7 +1629,7 @@ async function persistWizardConfig(rawChoices, homeDir) {
     enabled: true,
     profile: "balanced",
     gpu: false,
-    behaviorEnabled: true
+    behaviorEnabled: false
   };
   const config = { ...previous, browser: browserSection, security: securitySection, stealth: stealthSection };
   delete config.captchaSolver;
@@ -2570,7 +2570,7 @@ function loadServerConfig(args = [], environment = env, homeDirectory = homedir(
     enabled: stealthEnabled,
     profile: environment.SMOOTH_OPERATOR_STEALTH_PROFILE ?? nestedStealth.profile ?? "balanced",
     gpu: parseBoolean(environment.SMOOTH_OPERATOR_STEALTH_GPU, nestedStealth.gpu ?? false),
-    behaviorEnabled: environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED === void 0 ? nestedStealth.behaviorEnabled ?? true : parseBoolean(environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED, stealthEnabled)
+    behaviorEnabled: environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED === void 0 ? nestedStealth.behaviorEnabled ?? false : parseBoolean(environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED, stealthEnabled)
   };
   const config = {
     transport: argValue("--transport") ?? environment.SMOOTH_OPERATOR_TRANSPORT ?? fileConfig.transport ?? "stdio",
@@ -2820,6 +2820,7 @@ var BrowserActionFieldsSchema = z2.object({
   verify: z2.boolean().optional(),
   durationMs: z2.number().int().min(0).max(3e4).optional(),
   pollMs: z2.number().int().min(250).max(1e4).optional(),
+  maxAttempts: z2.number().int().min(1).max(100).optional(),
   optionValue: BoundedString(2e3).optional(),
   optionValues: z2.array(BoundedString(2e3)).min(1).max(200).optional(),
   cookieName: BoundedString(256).optional(),
@@ -3256,7 +3257,8 @@ var SolveChallengeRequestSchema = z2.object({
   full: z2.boolean().optional(),
   maxDimension: z2.number().int().min(1).max(2e4).optional(),
   max_dim: z2.number().int().min(1).max(2e4).optional(),
-  maxChars: z2.number().int().min(1e3).max(MCP_PAGE_TEXT_MAX_CHARS).optional()
+  maxChars: z2.number().int().min(1e3).max(MCP_PAGE_TEXT_MAX_CHARS).optional(),
+  maxAttempts: z2.number().int().min(1).max(100).optional()
 }).strict().superRefine((input, context) => {
   if (input.includeScreenshot !== void 0 && input.include_screenshot !== void 0) {
     context.addIssue({ code: "custom", message: "Provide includeScreenshot or include_screenshot, not both." });
@@ -3624,7 +3626,7 @@ var MCP_INSTRUCTIONS = [
   "For open shadow roots, Puppeteer pierce/ selectors may be used explicitly; closed shadow roots remain unavailable.",
   "Use browser_batch for short validated sequences, but keep destructive actions separate when user confirmation is needed.",
   "Use an efficient observe -> act -> verify loop: observe with browser_snapshot or browser_get_state, perform one bounded browser action, then observe again to verify the resulting state. Keep refs and indexes fresh after navigation, scrolling, or DOM changes; parallelize only independent read-only observations.",
-  "browser_solve_challenge is an internal connected-AI loop. It collects a fresh challenge classification plus bounded visual/state evidence, then the connected AI uses normal browser actions and calls it again to verify. Never claim a challenge is solved unless the final classification explicitly reports it absent; unknown or failed classification is not success.",
+  "browser_solve_challenge is an internal connected-AI loop. Each call is one bounded verification cycle and returns fresh visual/state evidence plus attemptsRemaining; the connected AI should keep using normal browser actions and call it again until the final classification explicitly reports the challenge absent or automation_exhausted. Never claim a challenge is solved from a present, unknown, or failed classification. Human handoff is only an explicit final option after exhaustion.",
   "The server contains no LLM or agent planner; the MCP client is responsible for reasoning, retries, and task completion."
 ].join(" ");
 function createMcpServer(runtime) {
@@ -3784,7 +3786,7 @@ function registerBrowserTools(server, runtime) {
     "browser_solve_challenge",
     {
       title: "Solve a web challenge",
-      description: "Run the internal connected-AI challenge loop: collect fresh challenge classification and bounded visual/state evidence, let the connected AI use normal browser actions, then call again to verify. The result is successful only when the final classification explicitly reports the challenge absent.",
+      description: "Run one cycle of the internal connected-AI challenge loop. Collect fresh bounded visual/state evidence, use normal browser actions, and call again until the challenge is explicitly absent or the bounded attempt budget is exhausted. No external solver or token injection is used.",
       inputSchema: SolveChallengeRequestSchema,
       annotations: BROWSER_READ_ONLY
     },
@@ -4732,81 +4734,16 @@ function boundedList(values) {
 }
 
 // src/server/browser/stealth.ts
-var STEALTH_BASELINE_ARGS = [
-  "--disable-blink-features=AutomationControlled"
-  // hide navigator.webdriver at the C++ source
-];
+var STEALTH_BASELINE_ARGS = [];
 function buildStealthInitScript(profile, options = {}) {
   const { width, height } = profile.viewport;
   const applyViewport = options.applyViewport === true;
-  const head = `
-  // ---- shared helpers (ported, minimal) ----
-  function makeNativeString(fnName) {
-    return 'function ' + fnName + '() { [native code] }';
-  }
-  function patchToString(target, fnStr) {
-    try {
-      Object.defineProperty(target, 'toString', {
-        configurable: true,
-        writable: true,
-        value: function toString() { return fnStr; }
-      });
-    } catch (e) {}
-  }
-  function stripProxyFromErrors(fn) {
-    try {
-      return new Proxy(fn, {
-        apply: function applyTrap(target, thisArg, args) {
-          try { return Reflect.apply(target, thisArg, args); }
-          catch (e) { throw e; }
-        }
-      });
-    } catch (e) { return fn; }
-  }
-
-  // ---- supported runtime values (only explicit configuration is interpolated) ----
+  const source = `
+  // Only an explicitly configured viewport is applied. Browser identity and
+  // native automation signals remain untouched.
   var APPLY_VIEWPORT = ${String(applyViewport)};
   var VIEWPORT = { width: ${width}, height: ${height} };`;
-  const balanced = `
-  // 1. navigator.webdriver \u2014 belt-and-suspenders (the launch flag is primary).
-  try {
-    var navProto = Object.getPrototypeOf(navigator);
-    if (navProto && Object.prototype.hasOwnProperty.call(navProto, 'webdriver')) {
-      delete navProto.webdriver;
-    }
-  } catch (e) {}
-
-  // 2. navigator.permissions.query \u2014 resolve the "impossible combination".
-  try {
-    if (navigator.permissions && typeof navigator.permissions.query === 'function') {
-      var perms = navigator.permissions;
-      var originalQuery = perms.query.bind(perms);
-      perms.query = function (query) {
-        if (query && query.name === 'notifications' &&
-            window.location && window.location.protocol !== 'https:') {
-          try {
-            if (typeof PermissionStatus !== 'undefined') {
-              return Promise.resolve(new PermissionStatus({ state: 'denied' }));
-            }
-          } catch (e) {}
-        }
-        return originalQuery(query);
-      };
-    }
-  } catch (e) {}
-
-  // 3. toString / Proxy trace hiding \u2014 the patched getters hide themselves.
-  try {
-    if (navigator.permissions && typeof navigator.permissions.query === 'function') {
-      var hiddenQuery = stripProxyFromErrors(navigator.permissions.query);
-      patchToString(hiddenQuery, makeNativeString('query'));
-      navigator.permissions.query = hiddenQuery;
-    }
-  } catch (e) {}
-
-  // Coherence: screen dimensions track an explicitly configured launch
-  // viewport (guarded, best-effort). Without that explicit input, leave the
-  // browser's real dimensions untouched.
+  const viewport = `
   try {
     if (APPLY_VIEWPORT && window && typeof window.innerWidth === 'number') {
       Object.defineProperty(window, 'innerWidth', {
@@ -4818,8 +4755,8 @@ function buildStealthInitScript(profile, options = {}) {
     }
   } catch (e) {}`;
   return `(function () {
-${head}
-${balanced}
+${source}
+${viewport}
 })();
 `;
 }
@@ -4868,67 +4805,10 @@ function nativeBrowserLaunchArgs(options = {}) {
 init_discovery();
 
 // src/server/browser/fingerprints.ts
-var DEFAULT_PROFILE = "balanced";
-var DEFAULT_VERSION = 124;
-var DEFAULT_PLATFORM = "Windows";
-var DEFAULT_LANGUAGE = "en-US";
-var DEFAULT_TIME_ZONE = "America/New_York";
 var DEFAULT_VIEWPORT_WIDTH = 1920;
 var DEFAULT_VIEWPORT_HEIGHT = 1080;
-var DEFAULT_SEED = 0;
-var PLATFORM_SEGMENTS = {
-  Windows: "Windows NT 10.0; Win64; x64",
-  macOS: "Mac OS X 10_15_7",
-  Linux: "X11; Linux x86_64"
-};
-var HARDWARE_CONCURRENCY_SET = [2, 4, 8, 16, 32];
-var DEVICEMEMORY_SET = [1, 2, 4, 8];
-var MAX_TOUCH_POINTS_SET = [0, 5, 10];
 function buildFingerprintProfile(options = {}) {
-  const profile = options.profile ?? DEFAULT_PROFILE;
-  const version = normalizeVersion(options.version);
-  const platform3 = normalizePlatform(options.platform);
-  const viewport = normalizeViewport(options.viewport);
-  const language = options.language ?? DEFAULT_LANGUAGE;
-  const seed = normalizeSeed(options.seed);
-  const versionStr = String(version);
-  const userAgent = `Mozilla/5.0 (${PLATFORM_SEGMENTS[platform3]}) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${versionStr}.0.0.0 Safari/537.36`;
-  const brands = [
-    { brand: "Chromium", version: versionStr },
-    { brand: "Google Chrome", version: versionStr },
-    { brand: "Not=A?Brand", version: "8" }
-  ];
-  const fullVersionList = {
-    Chromium: versionStr,
-    "Google Chrome": versionStr
-  };
-  const profileWithLanguages = {
-    version,
-    userAgent,
-    platform: platform3,
-    mobile: false,
-    brands,
-    fullVersionList,
-    languages: buildLanguages(language),
-    acceptLanguage: `${language},en;q=0.9`,
-    viewport
-  };
-  if (profile === "max") {
-    return {
-      ...profileWithLanguages,
-      hardwareConcurrency: pickFromValidSet(HARDWARE_CONCURRENCY_SET, seed),
-      deviceMemory: pickFromValidSet(DEVICEMEMORY_SET, seed),
-      maxTouchPoints: pickFromValidSet(MAX_TOUCH_POINTS_SET, seed),
-      timeZone: options.timeZone ?? DEFAULT_TIME_ZONE
-    };
-  }
-  return profileWithLanguages;
-}
-function normalizeVersion(version) {
-  return typeof version === "number" && Number.isFinite(version) && version > 0 ? Math.floor(version) : DEFAULT_VERSION;
-}
-function normalizePlatform(platform3) {
-  return platform3 && platform3 in PLATFORM_SEGMENTS ? platform3 : DEFAULT_PLATFORM;
+  return { viewport: normalizeViewport(options.viewport) };
 }
 function normalizeViewport(viewport) {
   if (viewport && Number.isFinite(viewport.width) && Number.isFinite(viewport.height) && viewport.width > 0 && viewport.height > 0) {
@@ -4936,16 +4816,6 @@ function normalizeViewport(viewport) {
   }
   return { width: DEFAULT_VIEWPORT_WIDTH, height: DEFAULT_VIEWPORT_HEIGHT };
 }
-function normalizeSeed(seed) {
-  return typeof seed === "number" && Number.isFinite(seed) ? seed : DEFAULT_SEED;
-}
-function buildLanguages(language) {
-  const parts = language.split(/[-_]/);
-  return parts.length > 1 ? [language, parts[0].toLowerCase()] : [language];
-}
-function pickFromValidSet(set, seed) {
-  return set[Math.floor(Math.abs(seed)) % set.length];
-}
 
 // src/server/browser/utils.ts
 var SENSITIVE_URL_PART = /(access[_-]?token|api[_-]?key|auth|code|credential|jwt|nonce|otp|password|secret|session|sig(?:nature)?|token)/i;
@@ -5051,6 +4921,8 @@ var MAX_DOM_TRAVERSAL_NODES = 2e4;
 var MAX_TEXT_SCAN_CHARS = 5e5;
 var MAX_MARKUP_EVIDENCE_CHARS = 12e4;
 var CHALLENGE_AI_GUIDANCE = "Use normal browser click, input, scroll, or key tools on the visible challenge controls, then call solve_challenge again to verify that the challenge is cleared.";
+var CHALLENGE_DEFAULT_MAX_ATTEMPTS = 32;
+var CHALLENGE_MAX_ATTEMPTS = 100;
 var MAX_DOWNLOAD_ENTRIES = 100;
 var TARGET_GUARD_MAX_REQUEST_IDS = 128;
 var CLICK_SETTLE_TIMEOUT_MS = 10;
@@ -8338,6 +8210,7 @@ var BrowserService = class {
       this.clearTargetGuardNavigationError(state.page);
       state.policyVerifiedUrls?.clear();
       state.challengeStatus = void 0;
+      state.challengeAttempts = 0;
     } catch (error) {
       this.logger.debug("Blocked navigation recovery could not restore a blank page", { pageId: state.id, error: String(error) });
     }
@@ -8570,7 +8443,7 @@ var BrowserService = class {
         state.stealthInjected = true;
       } catch (error) {
         throwIfAborted(signal);
-        throw new AppError("STEALTH_INITIALIZATION_FAILED", "The stealth fingerprint init script could not be injected.", { retryable: true, cause: error });
+        throw new AppError("STEALTH_INITIALIZATION_FAILED", "The browser compatibility script could not be injected.", { retryable: true, cause: error });
       }
     }
     await this.releaseTargetGuardForPage(state.page);
@@ -8751,6 +8624,7 @@ var BrowserService = class {
         const mainFrame = state.page.mainFrame();
         if (frame === mainFrame) {
           state.challengeStatus = void 0;
+          state.challengeAttempts = 0;
         }
       } catch (error) {
         this.logger.debug("Browser frame navigation event was unavailable after page disposal", { pageId: state.id, error: String(error) });
@@ -10372,12 +10246,15 @@ var BrowserService = class {
   async solveChallenge(state, action, signal) {
     throwIfAborted(signal);
     const previousChallengeStatus = state.challengeStatus;
+    const requestedMaxAttempts = action.maxAttempts;
+    const maxAttempts = Number.isFinite(requestedMaxAttempts) ? Math.min(CHALLENGE_MAX_ATTEMPTS, Math.max(1, Math.floor(requestedMaxAttempts))) : CHALLENGE_DEFAULT_MAX_ATTEMPTS;
     const detection = await this.detectChallenge(state, signal);
     if (isChallengeUnknown(detection)) {
       state.challengeStatus = "unknown";
       return {
         solved: false,
         verified: false,
+        challengeState: "unknown",
         resolution: "challenge_state_unverified",
         verification: "unknown",
         workflow: "verification_unavailable",
@@ -10389,18 +10266,41 @@ var BrowserService = class {
     }
     if (isChallengeAbsent(detection)) {
       const cleared = previousChallengeStatus === "present";
+      const attempts2 = state.challengeAttempts ?? 0;
       state.challengeStatus = "absent";
+      state.challengeAttempts = 0;
       return {
         solved: true,
         verified: true,
+        challengeState: "clear",
         resolution: cleared ? "challenge_cleared" : "no_challenge",
         verification: "verified",
         workflow: "verified",
         pageId: state.id,
+        ...attempts2 > 0 ? { attempts: attempts2 } : {},
         classification: detection
       };
     }
     state.challengeStatus = "present";
+    const attempts = (state.challengeAttempts ?? 0) + 1;
+    state.challengeAttempts = attempts;
+    if (attempts > maxAttempts) {
+      return {
+        solved: false,
+        verified: true,
+        challengeState: "present",
+        resolution: "automation_exhausted",
+        verification: "challenge_present",
+        workflow: "human_handoff_available",
+        pageId: state.id,
+        attempts: attempts - 1,
+        maxAttempts,
+        attemptsRemaining: 0,
+        classification: detection,
+        nextAction: "Automation attempts are exhausted. Human handoff is available if the site permits it.",
+        guidance: "Automation attempts are exhausted. Human handoff is available if the site permits it."
+      };
+    }
     const includeScreenshot = action.includeScreenshot ?? action.include_screenshot ?? true;
     const requestedMaxDimension = action.maxDimension ?? action.max_dim;
     const maxDimension = Number.isFinite(requestedMaxDimension) ? Math.min(1600, Math.max(100, Math.floor(requestedMaxDimension))) : 1600;
@@ -10430,6 +10330,9 @@ var BrowserService = class {
       snapshotId: snapshot.snapshotId,
       domRevision: snapshot.domRevision,
       viewport: snapshot.viewport,
+      attempts,
+      maxAttempts,
+      attemptsRemaining: Math.max(0, maxAttempts - attempts),
       refs: stableRefs,
       interactive: stableRefs,
       classification: detection,
@@ -12166,7 +12069,7 @@ var ServerRuntime = class _ServerRuntime {
         headedBrowser: true,
         pageEvaluation: true,
         stealth: true,
-        behavioralTiming: true
+        behavioralTiming: false
       },
       features: {
         localBrowserTools: "available",