smooth-operator-mcp 3.0.0 → 3.0.2

package/.env.example

@@ -40,16 +40,16 @@ SMOOTH_OPERATOR_ALLOW_EVAL=true
 # these private roots by default.
 # SMOOTH_OPERATOR_ALLOWED_FILE_ROOTS=~/.smooth-operator/files,~/.smooth-operator/downloads
 
-# Optional automation-control baseline. The native default is enabled; set false
-# to preserve raw browser automation signals.
+# Compatibility baseline. Browser identity and automation signals remain native;
+# set false to skip the explicit-viewport compatibility script.
 # SMOOTH_OPERATOR_STEALTH_ENABLED=true
 # Stealth profile: balanced (default) | max (accepted compatibility names; same supported patch set)
 # SMOOTH_OPERATOR_STEALTH_PROFILE=balanced
 # Add opt-in GPU launch flags (does not make an identity/coherence guarantee)
 # SMOOTH_OPERATOR_STEALTH_GPU=false
-# Behavioral realism defaults on with short bounded timing; set false for the
-# fastest raw interaction path or override to decouple from stealth.
-# SMOOTH_OPERATOR_BEHAVIOR_ENABLED=true
+# Behavioral timing is off for the fastest deterministic path; set true only
+# when a site or workflow explicitly needs it.
+# SMOOTH_OPERATOR_BEHAVIOR_ENABLED=false
 
 # HTTP is opt-in; use a strong token before enabling remote access
 # SMOOTH_OPERATOR_TRANSPORT=http

package/README.md

@@ -44,9 +44,12 @@ Ask: *“Scrape pricing into a table”*, *“Fill this form with ~/resume.pdf
 
 ## How to use
 
-Talk to your harness normally. It can call `browser_navigate` → `browser_snapshot` → `browser_click` and the rest of the MCP surface as needed. For a challenge, `browser_solve_challenge` returns fresh bounded visual/state evidence for the connected AI; the AI uses ordinary browser actions and calls it again to verify the final classification. Human handoff remains available for logins or challenges that require the user.
+Talk to your harness normally. It can call `browser_navigate` → `browser_snapshot` → `browser_click` and the rest of the MCP surface as needed. For a challenge, `browser_solve_challenge` returns fresh bounded visual/state evidence and an attempt budget; the connected AI keeps using ordinary browser actions and calls it again until the final classification is clear or the budget is exhausted. Human handoff remains available only as an explicit final option.
 
-Stealth and short behavioral timing are enabled in the recommended native profile. Page JavaScript is also available by default; set the explicit environment flags to `false` when a stricter profile is needed. See `docs/STEALTH-GUIDE.md` for details and responsible use.
+Browser identity remains native, page JavaScript is available by default, and
+behavioral timing is off for fast deterministic input. Set the explicit
+environment flags to change those choices. See `docs/STEALTH-GUIDE.md` for
+details and responsible use.
 
 For the fastest supported operation, keep behavioral timing off with
 `SMOOTH_OPERATOR_BEHAVIOR_ENABLED=false`; the native browser remains bounded and

package/dist/smooth-operator.mjs

@@ -397,7 +397,7 @@ var SERVER_VERSION;
 var init_version = __esm({
   "src/server/version.ts"() {
     "use strict";
-    SERVER_VERSION = "3.0.0";
+    SERVER_VERSION = "3.0.2";
   }
 });
 
@@ -1554,7 +1554,7 @@ function writeSummary(ui, harness, choices) {
       ["Blocked sites", choices.blockedDomains.length ? choices.blockedDomains.join(", ") : "none"],
       ["Page JavaScript", choices.allowEval ? "enabled" : "off"],
       ["Stealth baseline", "enabled (balanced)"],
-      ["Behavioral realism", "enabled"],
+      ["Behavioral timing", "off (fast native input)"],
       ["Data directory", choices.dataDir]
     ]
   ]);
@@ -1629,7 +1629,7 @@ async function persistWizardConfig(rawChoices, homeDir) {
     enabled: true,
     profile: "balanced",
     gpu: false,
-    behaviorEnabled: true
+    behaviorEnabled: false
   };
   const config = { ...previous, browser: browserSection, security: securitySection, stealth: stealthSection };
   delete config.captchaSolver;
@@ -1734,7 +1734,7 @@ import { realpathSync as realpathSync2 } from "node:fs";
 import process4 from "node:process";
 import { Readable } from "node:stream";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { createMcpHandler } from "@modelcontextprotocol/server";
+import { createMcpHandler, isJsonContentType as sdkIsJsonContentType } from "@modelcontextprotocol/server";
 import { toNodeHandler } from "@modelcontextprotocol/node";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
 
@@ -2570,7 +2570,7 @@ function loadServerConfig(args = [], environment = env, homeDirectory = homedir(
     enabled: stealthEnabled,
     profile: environment.SMOOTH_OPERATOR_STEALTH_PROFILE ?? nestedStealth.profile ?? "balanced",
     gpu: parseBoolean(environment.SMOOTH_OPERATOR_STEALTH_GPU, nestedStealth.gpu ?? false),
-    behaviorEnabled: environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED === void 0 ? nestedStealth.behaviorEnabled ?? true : parseBoolean(environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED, stealthEnabled)
+    behaviorEnabled: environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED === void 0 ? nestedStealth.behaviorEnabled ?? false : parseBoolean(environment.SMOOTH_OPERATOR_BEHAVIOR_ENABLED, stealthEnabled)
   };
   const config = {
     transport: argValue("--transport") ?? environment.SMOOTH_OPERATOR_TRANSPORT ?? fileConfig.transport ?? "stdio",
@@ -2820,6 +2820,7 @@ var BrowserActionFieldsSchema = z2.object({
   verify: z2.boolean().optional(),
   durationMs: z2.number().int().min(0).max(3e4).optional(),
   pollMs: z2.number().int().min(250).max(1e4).optional(),
+  maxAttempts: z2.number().int().min(1).max(100).optional(),
   optionValue: BoundedString(2e3).optional(),
   optionValues: z2.array(BoundedString(2e3)).min(1).max(200).optional(),
   cookieName: BoundedString(256).optional(),
@@ -3256,7 +3257,8 @@ var SolveChallengeRequestSchema = z2.object({
   full: z2.boolean().optional(),
   maxDimension: z2.number().int().min(1).max(2e4).optional(),
   max_dim: z2.number().int().min(1).max(2e4).optional(),
-  maxChars: z2.number().int().min(1e3).max(MCP_PAGE_TEXT_MAX_CHARS).optional()
+  maxChars: z2.number().int().min(1e3).max(MCP_PAGE_TEXT_MAX_CHARS).optional(),
+  maxAttempts: z2.number().int().min(1).max(100).optional()
 }).strict().superRefine((input, context) => {
   if (input.includeScreenshot !== void 0 && input.include_screenshot !== void 0) {
     context.addIssue({ code: "custom", message: "Provide includeScreenshot or include_screenshot, not both." });
@@ -3419,6 +3421,23 @@ var MCP_OUTPUT_TRUNCATION_MARKER_BYTES = UTF8_ENCODER2.encode(MCP_OUTPUT_TRUNCAT
 var MCP_ERROR_CODE_MAX_BYTES = 200;
 var MCP_ERROR_MESSAGE_MAX_BYTES = 4e3;
 var MCP_JSON_TEXT_CACHE = /* @__PURE__ */ new WeakMap();
+var MCP_OUTPUT_CONTRACT_ARRAY_KEYS = /* @__PURE__ */ new Set([
+  "links",
+  "results",
+  "entries",
+  "interactive",
+  "nodes",
+  "matches",
+  "frames"
+]);
+var MCP_OUTPUT_ARRAY_BOUNDS = [
+  ["links", "linksTruncated"],
+  ["entries", "entriesTruncated"],
+  ["interactive", "interactiveTruncated"],
+  ["nodes", "nodesTruncated"],
+  ["matches", "matchesTruncated"],
+  ["frames", "framesTruncated"]
+];
 var NetworkIdleSchema = z3.object({
   timeoutMs: z3.number().int().min(100).max(12e4).optional(),
   pageId: z3.string().trim().min(1).max(200).optional()
@@ -3552,28 +3571,14 @@ var BrowserExecCodeSchema = z3.string().trim().min(1).max(8e4).superRefine((code
     context.addIssue({ code: "custom", message: "code must be a JSON array of validated browser actions." });
     return;
   }
-  if (!BrowserActionPlanSchema.safeParse(parsed).success) {
-    context.addIssue({ code: "custom", message: "code must be a non-empty JSON array of validated browser actions without nested scripts or screenshots." });
+  if (!Array.isArray(parsed) || parsed.length === 0 || parsed.length > 100) {
+    context.addIssue({ code: "custom", message: "code must be a non-empty JSON array of at most 100 browser actions." });
   }
 });
 var BrowserExecRequestSchema = z3.object({
   code: BrowserExecCodeSchema,
   confirmDestructive: z3.boolean().optional()
-}).strict().superRefine((input, context) => {
-  if (input.confirmDestructive) {
-    return;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(input.code);
-  } catch {
-    return;
-  }
-  const actions = BrowserActionPlanSchema.safeParse(parsed);
-  if (actions.success && actions.data.some((action) => isDestructiveBatchAction(action.action))) {
-    context.addIssue({ code: "custom", path: ["confirmDestructive"], message: "This action plan contains destructive actions. Set confirmDestructive=true to execute them." });
-  }
-});
+}).strict();
 var BrowserUseStateSchema = z3.object({
   include_screenshot: z3.boolean().optional(),
   fullPage: z3.boolean().optional(),
@@ -3613,7 +3618,7 @@ var BROWSER_MUTATING = { ...MUTATING, openWorldHint: true };
 var BROWSER_DESTRUCTIVE = { ...DESTRUCTIVE, openWorldHint: true };
 var MCP_INSTRUCTIONS = [
   "Use browser_snapshot or browser_get_state before interacting so element refs/indexes and viewport coordinates are current.",
-  "Serialize dependent browser calls as observe -> one navigation or mutation -> observe. Parallel calls are appropriate only for independent read-only observations; a parallel snapshot and action do not form a transaction.",
+  "Use an observe -> act -> verify loop: serialize dependent browser calls as one navigation or mutation between observations. Parallel calls are appropriate only for independent read-only observations; a parallel snapshot and action do not form a transaction.",
   "Give each request a bounded timeout or cancellation signal. After a timeout or cancellation, inspect current state before retrying a mutation; cancellation is not proof that a mutation did not happen.",
   "After navigation, tab switching, scrolling that changes lazy content, or any DOM-changing action, discard old refs and indexes and capture a fresh snapshot instead of silently falling back to coordinates, text, or a different selector.",
   "Only report titles, URLs, snippets, and metadata that are explicitly present in the returned MCP fields. Absence of a field is evidence of absence: never invent titles, summaries, counts, or other metadata that the tools did not return.",
@@ -3623,8 +3628,7 @@ var MCP_INSTRUCTIONS = [
   "Prefer stable refs, indexes, and selectors over coordinates; use coordinates only when the page cannot expose a reliable target.",
   "For open shadow roots, Puppeteer pierce/ selectors may be used explicitly; closed shadow roots remain unavailable.",
   "Use browser_batch for short validated sequences, but keep destructive actions separate when user confirmation is needed.",
-  "Use an efficient observe -> act -> verify loop: observe with browser_snapshot or browser_get_state, perform one bounded browser action, then observe again to verify the resulting state. Keep refs and indexes fresh after navigation, scrolling, or DOM changes; parallelize only independent read-only observations.",
-  "browser_solve_challenge is an internal connected-AI loop. It collects a fresh challenge classification plus bounded visual/state evidence, then the connected AI uses normal browser actions and calls it again to verify. Never claim a challenge is solved unless the final classification explicitly reports it absent; unknown or failed classification is not success.",
+  "browser_solve_challenge is an internal connected-AI loop. Each call is one bounded verification cycle; present and exhausted classifications include fresh visual/state evidence and attemptsRemaining. The connected AI should keep using normal browser actions and call it again until the final classification explicitly reports the challenge absent or automation_exhausted. Never claim a challenge is solved from a present, unknown, or failed classification. Human handoff is only an explicit final option after exhaustion.",
   "The server contains no LLM or agent planner; the MCP client is responsible for reasoning, retries, and task completion."
 ].join(" ");
 function createMcpServer(runtime) {
@@ -3719,7 +3723,10 @@ function registerBrowserTools(server, runtime) {
       inputSchema: BrowserUseExtractSchema,
       annotations: BROWSER_READ_ONLY
     },
-    async (input, ctx) => callTool(() => runtime.run({ action: "extract", query: input.query, includeLinks: input.extract_links, pageId: input.pageId, frameId: input.frameId, maxChars: MCP_PAGE_TEXT_MAX_CHARS }, ctx.mcpReq.signal), runtime)
+    async (input, ctx) => {
+      const { extract_links, ...fields } = input;
+      return callTool(() => runtime.run({ action: "extract", ...fields, includeLinks: extract_links, maxChars: MCP_PAGE_TEXT_MAX_CHARS }, ctx.mcpReq.signal), runtime);
+    }
   );
   registerAction(server, runtime, "browser_navigate", "Navigate the browser", "Open an HTTP(S) URL after domain and private-network policy validation. DNS is checked before navigation but the browser resolver is not pinned. Set includeSnapshot=true for one trailing snapshot.", NavigateRequestSchema, "navigate", (input) => {
     const { new_tab, ...fields } = input;
@@ -3757,7 +3764,10 @@ function registerBrowserTools(server, runtime) {
     { title: "Read browser console log", description: "Enable, disable, read, clear, or read-and-clear the bounded console log.", inputSchema: NetworkLogRequestSchema, annotations: BROWSER_DESTRUCTIVE },
     async (input, ctx) => callTool(() => runtime.run({ action: consoleAction(input.operation), pageId: input.pageId }, ctx.mcpReq.signal), runtime)
   );
-  registerAction(server, runtime, "browser_find_text", "Find text", "Find and center the first matching text on the page.", PageQuerySchema, "find_text", (input) => ({ ...input, text: input.query }));
+  registerAction(server, runtime, "browser_find_text", "Find text", "Find and center the first matching text on the page.", PageQuerySchema, "find_text", (input) => {
+    const { query, ...fields } = input;
+    return { ...fields, text: query };
+  });
   registerAction(server, runtime, "browser_extract", "Extract page text", "Extract at most 8,000 page-text characters from the page or a CSS selector. Check truncated, offset, nextOffset, hasMore, and revision; use browser_page_next for later slices.", ExtractRequestSchema, "extract", (input) => ({ ...input, maxChars: input.maxChars ?? MCP_PAGE_TEXT_MAX_CHARS }));
   registerAction(server, runtime, "browser_upload", "Upload a file", "Upload a file from an allowed server file root into a file input.", UploadRequestSchema, "upload_file");
   registerAction(server, runtime, "browser_screenshot", "Capture a screenshot", "Capture a bounded PNG or JPEG screenshot of the current page.", ScreenshotRequestSchema, "screenshot", (input) => {
@@ -3776,7 +3786,10 @@ function registerBrowserTools(server, runtime) {
   registerAction(server, runtime, "browser_computed_style", "Read computed style", "Read a small safe subset of computed style for an element.", SelectorRequestSchema, "get_computed_style");
   registerAction(server, runtime, "browser_page_info", "Read page information", "Read URL, title, viewport, and document dimensions.", EmptyInputSchema, "get_page_info");
   registerAction(server, runtime, "browser_hover", "Hover an element", "Move the pointer over a CSS selector or snapshot ref.", TargetRequestSchema, "hover");
-  registerAction(server, runtime, "browser_move", "Move the pointer", "Move the pointer to bounded top-level viewport coordinates without clicking. Use this to inspect hover-driven UI before choosing a click point.", MoveRequestSchema, "move", (input) => ({ ...input, coordinateX: input.coordinateX ?? input.coordinate_x, coordinateY: input.coordinateY ?? input.coordinate_y }));
+  registerAction(server, runtime, "browser_move", "Move the pointer", "Move the pointer to bounded top-level viewport coordinates without clicking. Use this to inspect hover-driven UI before choosing a click point.", MoveRequestSchema, "move", (input) => {
+    const { coordinate_x, coordinate_y, ...fields } = input;
+    return { ...fields, coordinateX: fields.coordinateX ?? coordinate_x, coordinateY: fields.coordinateY ?? coordinate_y };
+  });
   registerAction(server, runtime, "browser_press_and_hold", "Press and hold or drag", "Press a mouse button on an element for a bounded duration. Optional startCoordinateX/startCoordinateY and endCoordinateX/endCoordinateY drag with interpolated mouse events; path supplies a bounded explicit pointer path for drawing or selection gestures.", HoldRequestSchema, "press_and_hold");
   registerAction(server, runtime, "browser_challenge", "Detect a web challenge", "Detect bounded challenge markers and return a fresh classification for the current page. A detected challenge is not evidence that it has been solved.", EmptyInputSchema, "detect_challenge");
   registerAction(server, runtime, "browser_wait_for_human", "Wait for human takeover", "Optionally wait for a user to complete a visible challenge or sign-in step in the browser. The result includes a fresh final classification.", WaitForHumanRequestSchema, "wait_for_human");
@@ -3784,7 +3797,7 @@ function registerBrowserTools(server, runtime) {
     "browser_solve_challenge",
     {
       title: "Solve a web challenge",
-      description: "Run the internal connected-AI challenge loop: collect fresh challenge classification and bounded visual/state evidence, let the connected AI use normal browser actions, then call again to verify. The result is successful only when the final classification explicitly reports the challenge absent.",
+      description: "Run one cycle of the internal connected-AI challenge loop. Collect fresh bounded visual/state evidence, use normal browser actions, and call again until the challenge is explicitly absent or the bounded attempt budget is exhausted. No external solver or token injection is used.",
       inputSchema: SolveChallengeRequestSchema,
       annotations: BROWSER_READ_ONLY
     },
@@ -3811,11 +3824,24 @@ function registerBrowserTools(server, runtime) {
     "browser_exec",
     {
       title: "Execute a browser action program",
-      description: "Browser-use CLI compatibility entry point. The code must be a JSON array of validated browser actions; arbitrary Python or JavaScript is not executed.",
+      description: "Browser-use CLI compatibility entry point. The code must be a JSON array of validated browser actions; it is not a shell or arbitrary Python runner. Page JavaScript is limited to the explicit evaluate action and server policy.",
       inputSchema: BrowserExecRequestSchema,
       annotations: BROWSER_DESTRUCTIVE
     },
-    async (input, ctx) => callBatchTool(() => runtime.runBatch(parseBrowserExecCode(input.code), { confirmDestructive: input.confirmDestructive }, ctx.mcpReq.signal), runtime)
+    async (input, ctx) => callBatchTool(() => {
+      const actions = parseBrowserExecCode(input.code);
+      if (!input.confirmDestructive) {
+        const destructiveIndex = actions.findIndex((action) => isDestructiveBatchAction(action.action));
+        if (destructiveIndex >= 0) {
+          const action = actions[destructiveIndex];
+          throw new AppError("DESTRUCTIVE_CONFIRMATION_REQUIRED", `Action '${action.action}' must be executed separately or with confirmDestructive=true.`, {
+            retryable: true,
+            details: { failedIndex: destructiveIndex, failedAction: action.action, hint: "Set confirmDestructive=true or run the action separately." }
+          });
+        }
+      }
+      return runtime.runBatch(actions, { confirmDestructive: input.confirmDestructive }, ctx.mcpReq.signal);
+    }, runtime)
   );
   server.registerTool(
     "browser_batch",
@@ -4138,7 +4164,7 @@ function truncateUtf82(value, maxBytes) {
   while (low < high) {
     const midpoint = Math.ceil((low + high) / 2);
     const candidate = decoder.decode(bytes.slice(0, midpoint));
-    if (UTF8_ENCODER2.encode(candidate).byteLength <= maxBytes) {
+    if (UTF8_ENCODER2.encode(candidate).byteLength <= boundedMaxBytes) {
       low = midpoint;
     } else {
       high = midpoint - 1;
@@ -4259,9 +4285,8 @@ function boundMcpOutput(value, options = {}) {
   capArray("nodes", MCP_OUTPUT_NODE_LIMIT, "nodesTruncated");
   capArray("matches", MCP_OUTPUT_MATCH_LIMIT, "matchesTruncated");
   capArray("frames", 20, "framesTruncated");
-  const contractArrayKeys = /* @__PURE__ */ new Set(["links", "results", "entries", "interactive", "nodes", "matches", "frames"]);
   for (const [key, item] of Object.entries(output)) {
-    if (!contractArrayKeys.has(key) && Array.isArray(item)) {
+    if (!MCP_OUTPUT_CONTRACT_ARRAY_KEYS.has(key) && Array.isArray(item)) {
       capArray(key, MCP_OUTPUT_ARRAY_ITEM_LIMIT, `${key}Truncated`);
     }
   }
@@ -4324,10 +4349,7 @@ function boundMcpOutput(value, options = {}) {
       markOutputTruncated();
     }
   }
-  const arrayBounds = [["links", "linksTruncated"], ["entries", "entriesTruncated"], ["interactive", "interactiveTruncated"], ["nodes", "nodesTruncated"], ["matches", "matchesTruncated"], ["frames", "framesTruncated"]];
-  if (!options.preserveBatchResults) {
-    arrayBounds.push(["results", "resultsTruncated"]);
-  }
+  const arrayBounds = options.preserveBatchResults ? MCP_OUTPUT_ARRAY_BOUNDS : [...MCP_OUTPUT_ARRAY_BOUNDS, ["results", "resultsTruncated"]];
   for (const [key, flag] of arrayBounds) {
     while (jsonByteLength2(output) > MCP_OUTPUT_MAX_BYTES && Array.isArray(output[key]) && output[key].length > 1) {
       const items = output[key];
@@ -4732,81 +4754,16 @@ function boundedList(values) {
 }
 
 // src/server/browser/stealth.ts
-var STEALTH_BASELINE_ARGS = [
-  "--disable-blink-features=AutomationControlled"
-  // hide navigator.webdriver at the C++ source
-];
+var STEALTH_BASELINE_ARGS = [];
 function buildStealthInitScript(profile, options = {}) {
   const { width, height } = profile.viewport;
   const applyViewport = options.applyViewport === true;
-  const head = `
-  // ---- shared helpers (ported, minimal) ----
-  function makeNativeString(fnName) {
-    return 'function ' + fnName + '() { [native code] }';
-  }
-  function patchToString(target, fnStr) {
-    try {
-      Object.defineProperty(target, 'toString', {
-        configurable: true,
-        writable: true,
-        value: function toString() { return fnStr; }
-      });
-    } catch (e) {}
-  }
-  function stripProxyFromErrors(fn) {
-    try {
-      return new Proxy(fn, {
-        apply: function applyTrap(target, thisArg, args) {
-          try { return Reflect.apply(target, thisArg, args); }
-          catch (e) { throw e; }
-        }
-      });
-    } catch (e) { return fn; }
-  }
-
-  // ---- supported runtime values (only explicit configuration is interpolated) ----
+  const source = `
+  // Only an explicitly configured viewport is applied. Browser identity and
+  // native automation signals remain untouched.
   var APPLY_VIEWPORT = ${String(applyViewport)};
   var VIEWPORT = { width: ${width}, height: ${height} };`;
-  const balanced = `
-  // 1. navigator.webdriver \u2014 belt-and-suspenders (the launch flag is primary).
-  try {
-    var navProto = Object.getPrototypeOf(navigator);
-    if (navProto && Object.prototype.hasOwnProperty.call(navProto, 'webdriver')) {
-      delete navProto.webdriver;
-    }
-  } catch (e) {}
-
-  // 2. navigator.permissions.query \u2014 resolve the "impossible combination".
-  try {
-    if (navigator.permissions && typeof navigator.permissions.query === 'function') {
-      var perms = navigator.permissions;
-      var originalQuery = perms.query.bind(perms);
-      perms.query = function (query) {
-        if (query && query.name === 'notifications' &&
-            window.location && window.location.protocol !== 'https:') {
-          try {
-            if (typeof PermissionStatus !== 'undefined') {
-              return Promise.resolve(new PermissionStatus({ state: 'denied' }));
-            }
-          } catch (e) {}
-        }
-        return originalQuery(query);
-      };
-    }
-  } catch (e) {}
-
-  // 3. toString / Proxy trace hiding \u2014 the patched getters hide themselves.
-  try {
-    if (navigator.permissions && typeof navigator.permissions.query === 'function') {
-      var hiddenQuery = stripProxyFromErrors(navigator.permissions.query);
-      patchToString(hiddenQuery, makeNativeString('query'));
-      navigator.permissions.query = hiddenQuery;
-    }
-  } catch (e) {}
-
-  // Coherence: screen dimensions track an explicitly configured launch
-  // viewport (guarded, best-effort). Without that explicit input, leave the
-  // browser's real dimensions untouched.
+  const viewport = `
   try {
     if (APPLY_VIEWPORT && window && typeof window.innerWidth === 'number') {
       Object.defineProperty(window, 'innerWidth', {
@@ -4818,8 +4775,8 @@ function buildStealthInitScript(profile, options = {}) {
     }
   } catch (e) {}`;
   return `(function () {
-${head}
-${balanced}
+${source}
+${viewport}
 })();
 `;
 }
@@ -4868,67 +4825,10 @@ function nativeBrowserLaunchArgs(options = {}) {
 init_discovery();
 
 // src/server/browser/fingerprints.ts
-var DEFAULT_PROFILE = "balanced";
-var DEFAULT_VERSION = 124;
-var DEFAULT_PLATFORM = "Windows";
-var DEFAULT_LANGUAGE = "en-US";
-var DEFAULT_TIME_ZONE = "America/New_York";
 var DEFAULT_VIEWPORT_WIDTH = 1920;
 var DEFAULT_VIEWPORT_HEIGHT = 1080;
-var DEFAULT_SEED = 0;
-var PLATFORM_SEGMENTS = {
-  Windows: "Windows NT 10.0; Win64; x64",
-  macOS: "Mac OS X 10_15_7",
-  Linux: "X11; Linux x86_64"
-};
-var HARDWARE_CONCURRENCY_SET = [2, 4, 8, 16, 32];
-var DEVICEMEMORY_SET = [1, 2, 4, 8];
-var MAX_TOUCH_POINTS_SET = [0, 5, 10];
 function buildFingerprintProfile(options = {}) {
-  const profile = options.profile ?? DEFAULT_PROFILE;
-  const version = normalizeVersion(options.version);
-  const platform3 = normalizePlatform(options.platform);
-  const viewport = normalizeViewport(options.viewport);
-  const language = options.language ?? DEFAULT_LANGUAGE;
-  const seed = normalizeSeed(options.seed);
-  const versionStr = String(version);
-  const userAgent = `Mozilla/5.0 (${PLATFORM_SEGMENTS[platform3]}) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${versionStr}.0.0.0 Safari/537.36`;
-  const brands = [
-    { brand: "Chromium", version: versionStr },
-    { brand: "Google Chrome", version: versionStr },
-    { brand: "Not=A?Brand", version: "8" }
-  ];
-  const fullVersionList = {
-    Chromium: versionStr,
-    "Google Chrome": versionStr
-  };
-  const profileWithLanguages = {
-    version,
-    userAgent,
-    platform: platform3,
-    mobile: false,
-    brands,
-    fullVersionList,
-    languages: buildLanguages(language),
-    acceptLanguage: `${language},en;q=0.9`,
-    viewport
-  };
-  if (profile === "max") {
-    return {
-      ...profileWithLanguages,
-      hardwareConcurrency: pickFromValidSet(HARDWARE_CONCURRENCY_SET, seed),
-      deviceMemory: pickFromValidSet(DEVICEMEMORY_SET, seed),
-      maxTouchPoints: pickFromValidSet(MAX_TOUCH_POINTS_SET, seed),
-      timeZone: options.timeZone ?? DEFAULT_TIME_ZONE
-    };
-  }
-  return profileWithLanguages;
-}
-function normalizeVersion(version) {
-  return typeof version === "number" && Number.isFinite(version) && version > 0 ? Math.floor(version) : DEFAULT_VERSION;
-}
-function normalizePlatform(platform3) {
-  return platform3 && platform3 in PLATFORM_SEGMENTS ? platform3 : DEFAULT_PLATFORM;
+  return { viewport: normalizeViewport(options.viewport) };
 }
 function normalizeViewport(viewport) {
   if (viewport && Number.isFinite(viewport.width) && Number.isFinite(viewport.height) && viewport.width > 0 && viewport.height > 0) {
@@ -4936,16 +4836,6 @@ function normalizeViewport(viewport) {
   }
   return { width: DEFAULT_VIEWPORT_WIDTH, height: DEFAULT_VIEWPORT_HEIGHT };
 }
-function normalizeSeed(seed) {
-  return typeof seed === "number" && Number.isFinite(seed) ? seed : DEFAULT_SEED;
-}
-function buildLanguages(language) {
-  const parts = language.split(/[-_]/);
-  return parts.length > 1 ? [language, parts[0].toLowerCase()] : [language];
-}
-function pickFromValidSet(set, seed) {
-  return set[Math.floor(Math.abs(seed)) % set.length];
-}
 
 // src/server/browser/utils.ts
 var SENSITIVE_URL_PART = /(access[_-]?token|api[_-]?key|auth|code|credential|jwt|nonce|otp|password|secret|session|sig(?:nature)?|token)/i;
@@ -5051,6 +4941,8 @@ var MAX_DOM_TRAVERSAL_NODES = 2e4;
 var MAX_TEXT_SCAN_CHARS = 5e5;
 var MAX_MARKUP_EVIDENCE_CHARS = 12e4;
 var CHALLENGE_AI_GUIDANCE = "Use normal browser click, input, scroll, or key tools on the visible challenge controls, then call solve_challenge again to verify that the challenge is cleared.";
+var CHALLENGE_DEFAULT_MAX_ATTEMPTS = 32;
+var CHALLENGE_MAX_ATTEMPTS = 100;
 var MAX_DOWNLOAD_ENTRIES = 100;
 var TARGET_GUARD_MAX_REQUEST_IDS = 128;
 var CLICK_SETTLE_TIMEOUT_MS = 10;
@@ -8338,6 +8230,7 @@ var BrowserService = class {
       this.clearTargetGuardNavigationError(state.page);
       state.policyVerifiedUrls?.clear();
       state.challengeStatus = void 0;
+      state.challengeAttempts = 0;
     } catch (error) {
       this.logger.debug("Blocked navigation recovery could not restore a blank page", { pageId: state.id, error: String(error) });
     }
@@ -8570,7 +8463,7 @@ var BrowserService = class {
         state.stealthInjected = true;
       } catch (error) {
         throwIfAborted(signal);
-        throw new AppError("STEALTH_INITIALIZATION_FAILED", "The stealth fingerprint init script could not be injected.", { retryable: true, cause: error });
+        throw new AppError("STEALTH_INITIALIZATION_FAILED", "The browser compatibility script could not be injected.", { retryable: true, cause: error });
       }
     }
     await this.releaseTargetGuardForPage(state.page);
@@ -8751,6 +8644,7 @@ var BrowserService = class {
         const mainFrame = state.page.mainFrame();
         if (frame === mainFrame) {
           state.challengeStatus = void 0;
+          state.challengeAttempts = 0;
         }
       } catch (error) {
         this.logger.debug("Browser frame navigation event was unavailable after page disposal", { pageId: state.id, error: String(error) });
@@ -10372,12 +10266,15 @@ var BrowserService = class {
   async solveChallenge(state, action, signal) {
     throwIfAborted(signal);
     const previousChallengeStatus = state.challengeStatus;
+    const requestedMaxAttempts = action.maxAttempts;
+    const maxAttempts = Number.isFinite(requestedMaxAttempts) ? Math.min(CHALLENGE_MAX_ATTEMPTS, Math.max(1, Math.floor(requestedMaxAttempts))) : CHALLENGE_DEFAULT_MAX_ATTEMPTS;
     const detection = await this.detectChallenge(state, signal);
     if (isChallengeUnknown(detection)) {
       state.challengeStatus = "unknown";
       return {
         solved: false,
         verified: false,
+        challengeState: "unknown",
         resolution: "challenge_state_unverified",
         verification: "unknown",
         workflow: "verification_unavailable",
@@ -10389,18 +10286,41 @@ var BrowserService = class {
     }
     if (isChallengeAbsent(detection)) {
       const cleared = previousChallengeStatus === "present";
+      const attempts2 = state.challengeAttempts ?? 0;
       state.challengeStatus = "absent";
+      state.challengeAttempts = 0;
       return {
         solved: true,
         verified: true,
+        challengeState: "clear",
         resolution: cleared ? "challenge_cleared" : "no_challenge",
         verification: "verified",
         workflow: "verified",
         pageId: state.id,
+        ...attempts2 > 0 ? { attempts: attempts2 } : {},
         classification: detection
       };
     }
     state.challengeStatus = "present";
+    const attempts = (state.challengeAttempts ?? 0) + 1;
+    state.challengeAttempts = attempts;
+    if (attempts > maxAttempts) {
+      return {
+        solved: false,
+        verified: true,
+        challengeState: "present",
+        resolution: "automation_exhausted",
+        verification: "challenge_present",
+        workflow: "human_handoff_available",
+        pageId: state.id,
+        attempts: attempts - 1,
+        maxAttempts,
+        attemptsRemaining: 0,
+        classification: detection,
+        nextAction: "Automation attempts are exhausted. Human handoff is available if the site permits it.",
+        guidance: "Automation attempts are exhausted. Human handoff is available if the site permits it."
+      };
+    }
     const includeScreenshot = action.includeScreenshot ?? action.include_screenshot ?? true;
     const requestedMaxDimension = action.maxDimension ?? action.max_dim;
     const maxDimension = Number.isFinite(requestedMaxDimension) ? Math.min(1600, Math.max(100, Math.floor(requestedMaxDimension))) : 1600;
@@ -10430,6 +10350,9 @@ var BrowserService = class {
       snapshotId: snapshot.snapshotId,
       domRevision: snapshot.domRevision,
       viewport: snapshot.viewport,
+      attempts,
+      maxAttempts,
+      attemptsRemaining: Math.max(0, maxAttempts - attempts),
       refs: stableRefs,
       interactive: stableRefs,
       classification: detection,
@@ -12166,7 +12089,7 @@ var ServerRuntime = class _ServerRuntime {
         headedBrowser: true,
         pageEvaluation: true,
         stealth: true,
-        behavioralTiming: true
+        behavioralTiming: false
       },
       features: {
         localBrowserTools: "available",
@@ -12196,7 +12119,9 @@ var ServerRuntime = class _ServerRuntime {
         classification: "bounded-evidence",
         connectedAiLoop: true,
         humanHandoff: true,
-        successRequiresAbsentClassification: true
+        successRequiresAbsentClassification: true,
+        defaultMaxAttempts: 32,
+        maxAttempts: 100
       },
       persistence: {
         fileRootsConfigured: this.config.security.allowedFileRoots.length > 0,
@@ -12309,7 +12234,9 @@ async function reclaimStaleLock(lockPath) {
     if (after.ino !== before.ino || after.dev !== before.dev) {
       return false;
     }
-    await rename2(lockPath, `${lockPath}.stale-${randomUUID2()}`);
+    const stalePath = `${lockPath}.stale-${randomUUID2()}`;
+    await rename2(lockPath, stalePath);
+    await unlink2(stalePath).catch(() => void 0);
     return true;
   } catch {
     return false;
@@ -12520,6 +12447,10 @@ var HTTP_NOT_FOUND_BODY = JSON.stringify({ error: "not_found" });
 var HTTP_SHUTTING_DOWN_BODY = JSON.stringify({ error: "server_shutting_down" });
 var HTTP_BUSY_BODY = JSON.stringify({ error: "server_busy" });
 var HTTP_UNAUTHORIZED_BODY = JSON.stringify({ error: "unauthorized" });
+var HTTP_UNSUPPORTED_MEDIA_BODY = JSON.stringify({
+  jsonrpc: "2.0",
+  error: { code: -32e3, message: "Unsupported Media Type: Content-Type must be application/json" }
+});
 async function main(args = process4.argv.slice(2)) {
   if (args[0] === "install") {
     const yes = args.includes("--yes") || args.includes("--no-interactive");
@@ -12867,6 +12798,14 @@ async function dispatchHttpRequest(request, response, nodeHandler, maxBodyBytes,
   if (request.aborted) {
     throw new AppError("HTTP_REQUEST_ABORTED", "The HTTP client disconnected before the request completed.", { status: 499, retryable: true });
   }
+  const contentType = request.headers["content-type"];
+  if (request.method?.toUpperCase() === "POST" && (typeof contentType !== "string" || !sdkIsJsonContentType(contentType))) {
+    response.setHeader("connection", "close");
+    closeIncompleteRequestAfterResponse(request, response);
+    response.writeHead(415, { "content-type": "application/json" });
+    response.end(HTTP_UNSUPPORTED_MEDIA_BODY);
+    return;
+  }
   const contentLength = Number(request.headers["content-length"] ?? 0);
   if (Number.isFinite(contentLength) && contentLength > maxBodyBytes) {
     closeIncompleteRequestAfterResponse(request, response);