unbrowse 9.5.0-preview.1 → 9.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unbrowse",
-  "version": "9.5.0-preview.1",
+  "version": "9.6.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/unbrowse-ai/unbrowse.git"

package/runtime/cli.js

@@ -2223,7 +2223,7 @@ var init_telemetry = __esm(() => {
 });
 
 // .tmp-runtime-src/build-info.generated.ts
-var BUILD_RELEASE_VERSION = "9.5.0-preview.1", BUILD_GIT_SHA = "77a00a93a3da", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS41LjAtcHJldmlldy4xIiwiZ2l0X3NoYSI6Ijc3YTAwYTkzYTNkYSIsImNvZGVfaGFzaCI6IjVkOWViZjYxOWM2MSIsInRyYWNlX3ZlcnNpb24iOiI1ZDllYmY2MTljNjFANzdhMDBhOTNhM2RhIiwiaXNzdWVkX2F0IjoiMjAyNi0wNi0xN1QxNjoyMjozNC41MjdaIn0", BUILD_RELEASE_MANIFEST_SIGNATURE = "S6SeRd9EuGt1SLhfbZOdCZbjCUsYF8E0D-Yx-cet33g", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
+var BUILD_RELEASE_VERSION = "9.6.0", BUILD_GIT_SHA = "5b6b9dc9e8e1", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS42LjAiLCJnaXRfc2hhIjoiNWI2YjlkYzllOGUxIiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUA1YjZiOWRjOWU4ZTEiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE3VDIyOjAyOjQ0LjA3MVoifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "MqIyb1B_GA8W5Nv_Jictwt1jVCCTgxxdIjUFJqLoeAU", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
 
 // .tmp-runtime-src/version.ts
 import { createHash as createHash7 } from "crypto";
@@ -123597,6 +123597,125 @@ var init_fetch_ladder = __esm(() => {
   ];
 });
 
+// .tmp-runtime-src/execution/tencent-waf-solve.ts
+function parseCapzyProxy(proxyUrl) {
+  try {
+    const u = new URL(proxyUrl);
+    if (!u.hostname || !u.port)
+      return;
+    const scheme = u.protocol.replace(":", "").toLowerCase();
+    const type = scheme === "socks5" || scheme === "socks4" || scheme === "https" ? scheme : "http";
+    return {
+      type,
+      address: u.hostname,
+      port: Number(u.port),
+      ...u.username ? { login: decodeURIComponent(u.username) } : {},
+      ...u.password ? { password: decodeURIComponent(u.password) } : {}
+    };
+  } catch {
+    return;
+  }
+}
+
+// .tmp-runtime-src/execution/capzy-cf-solve.ts
+function extractCfClearance(solution) {
+  if (!solution || typeof solution !== "object")
+    return null;
+  const s = solution;
+  const ua = typeof s.user_agent === "string" && s.user_agent || typeof s.userAgent === "string" && s.userAgent || undefined;
+  if (typeof s.cf_clearance === "string" && s.cf_clearance) {
+    return { cf_clearance: s.cf_clearance, user_agent: ua || undefined };
+  }
+  if (typeof s.token === "string" && s.token && s.type !== "turnstile") {
+    return { cf_clearance: s.token, user_agent: ua || undefined };
+  }
+  const cookies = s.cookies;
+  if (cookies && typeof cookies === "object" && !Array.isArray(cookies)) {
+    const v = cookies.cf_clearance;
+    if (typeof v === "string" && v)
+      return { cf_clearance: v, user_agent: ua || undefined };
+  }
+  if (Array.isArray(cookies)) {
+    for (const c of cookies) {
+      if (c && typeof c === "object") {
+        const o = c;
+        if (o.name === "cf_clearance" && typeof o.value === "string" && o.value) {
+          return { cf_clearance: o.value, user_agent: ua || undefined };
+        }
+      } else if (typeof c === "string" && c.startsWith("cf_clearance=")) {
+        const v = c.slice("cf_clearance=".length).split(";")[0];
+        if (v)
+          return { cf_clearance: v, user_agent: ua || undefined };
+      }
+    }
+  }
+  return null;
+}
+function buildCfTask(websiteURL, proxy) {
+  return {
+    type: "AntiCloudflareTask",
+    websiteURL,
+    proxyType: proxy.type,
+    proxyAddress: proxy.address,
+    proxyPort: proxy.port,
+    ...proxy.login ? { proxyLogin: proxy.login } : {},
+    ...proxy.password ? { proxyPassword: proxy.password } : {}
+  };
+}
+async function solveCfViaCapzy(input) {
+  const clientKey = input.clientKey ?? process.env.UNBROWSE_CAPZY_KEY?.trim();
+  if (!clientKey)
+    return null;
+  if (!input.proxy)
+    return null;
+  const apiBase = (input.apiBase ?? process.env.UNBROWSE_CAPZY_URL?.trim() ?? "https://api.capzy.ai").replace(/\/+$/, "");
+  const doFetch = input.fetchImpl ?? fetch;
+  const deadline = Date.now() + (input.timeoutMs ?? 120000);
+  const task = buildCfTask(input.websiteURL, input.proxy);
+  let taskId;
+  try {
+    const created = await doFetch(`${apiBase}/createTask`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ clientKey, task }),
+      signal: AbortSignal.timeout(Math.max(1, Math.min(20000, deadline - Date.now())))
+    });
+    if (!created.ok)
+      return null;
+    const cj = await created.json().catch(() => null);
+    if (!cj || cj.errorId || !cj.taskId)
+      return null;
+    taskId = cj.taskId;
+  } catch {
+    return null;
+  }
+  while (Date.now() < deadline) {
+    try {
+      const res = await doFetch(`${apiBase}/getTaskResult`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ clientKey, taskId }),
+        signal: AbortSignal.timeout(Math.max(1, Math.min(15000, deadline - Date.now())))
+      });
+      if (!res.ok)
+        return null;
+      const rj = await res.json().catch(() => null);
+      if (!rj || rj.errorId)
+        return null;
+      if (rj.status === "failed")
+        return null;
+      if (rj.status === "ready") {
+        return extractCfClearance(rj.solution);
+      }
+    } catch {
+      return null;
+    }
+    await new Promise((r) => setTimeout(r, 2500));
+  }
+  return null;
+}
+var init_capzy_cf_solve = () => {};
+
 // .tmp-runtime-src/execution/cf-challenge.ts
 var exports_cf_challenge = {};
 __export(exports_cf_challenge, {
@@ -123617,6 +123736,31 @@ function extractCfBundleUrl(body, requestUrl) {
   }
 }
 async function solveCfAndRetry(input) {
+  if (process.env.UNBROWSE_CAPZY_KEY?.trim()) {
+    const viaCapzy = await solveCfViaCapzy({
+      websiteURL: input.url,
+      proxy: input.proxy ? parseCapzyProxy(input.proxy) : undefined,
+      timeoutMs: input.timeoutMs
+    });
+    if (viaCapzy?.cf_clearance) {
+      const merged2 = mergeCookieJar(input.cookies ?? [], [
+        { name: "cf_clearance", value: viaCapzy.cf_clearance }
+      ]);
+      const cookieHeader2 = merged2.map((c) => `${c.name}=${c.value}`).join("; ");
+      try {
+        const retry = await globalThis.fetch(input.url, {
+          method: "GET",
+          headers: {
+            ...cookieHeader2 ? { cookie: cookieHeader2 } : {},
+            ...viaCapzy.user_agent ? { "user-agent": viaCapzy.user_agent } : {}
+          }
+        });
+        if (retry.status >= 200 && retry.status < 400) {
+          return { status: retry.status, html: await retry.text(), cookies: merged2 };
+        }
+      } catch {}
+    }
+  }
   const bundleUrl = extractCfBundleUrl(input.body, input.url);
   if (!bundleUrl)
     return null;
@@ -123698,6 +123842,7 @@ function mergeCookieJar(a, b) {
 var CF_BUNDLE_RE;
 var init_cf_challenge = __esm(() => {
   init_bundle_replay_client();
+  init_capzy_cf_solve();
   CF_BUNDLE_RE = /src=["'](\/cdn-cgi\/challenge-platform\/h\/[gb]\/scripts\/jsd\/[a-f0-9]+\/main\.js)/i;
 });
 
@@ -131983,6 +132128,35 @@ var init_mount = __esm(() => {
 import { existsSync as existsSync33, writeFileSync as writeFileSync20, readFileSync as readFileSync28, mkdirSync as mkdirSync22, readdirSync as readdirSync9 } from "node:fs";
 import { dirname as dirname7, join as join36 } from "node:path";
 import { createHash as createHash19 } from "node:crypto";
+function registrableHost(u) {
+  if (!u)
+    return null;
+  try {
+    return new URL(u).hostname.replace(/^www\./, "").split(".").slice(-2).join(".");
+  } catch {
+    return null;
+  }
+}
+function shouldAutoWalk(requestedUrl, topUrl, topScore, minScore = 0.8) {
+  if (!topUrl)
+    return false;
+  const reqReg = registrableHost(requestedUrl);
+  const topReg = registrableHost(topUrl);
+  return !!reqReg && reqReg === topReg || (topScore ?? 0) >= minScore;
+}
+function pickWalkTarget(requestedUrl, ranked, minScore = 0.8) {
+  const eligible = ranked.filter((c) => c?.url && shouldAutoWalk(requestedUrl, c.url, c.score, minScore));
+  if (eligible.length === 0)
+    return null;
+  const hasPath = (u) => {
+    try {
+      return new URL(u).pathname.replace(/\/+$/, "").length > 0;
+    } catch {
+      return false;
+    }
+  };
+  return eligible.find((c) => hasPath(c.url)) ?? eligible[0];
+}
 function artifactResultWithShortlist(artifact, skillId, triggerUrl) {
   const ep = artifact.endpoint;
   const res = artifact.result;
@@ -132522,6 +132696,19 @@ function promoteResultSnapshot(cacheKey2, skill, endpointId, result, trace) {
     expires: Date.now() + ROUTE_CACHE_TTL
   });
 }
+function persistWalkedRoute(scope, cacheKey2, walked) {
+  try {
+    const skill = walked.skill;
+    if (!skill)
+      return;
+    const endpointId = walked.trace?.endpoint_id;
+    const isReplayableRoute = (walked.source === "marketplace" || walked.source === "route-cache" || walked.source === "live-capture" || walked.source === "direct-fetch") && !!skill.endpoints?.length;
+    if (isReplayableRoute) {
+      promoteLearnedSkill(scope, cacheKey2, skill, endpointId, undefined);
+    }
+    promoteResultSnapshot(cacheKey2, skill, endpointId, walked.result, walked.trace);
+  } catch {}
+}
 function buildCachedResultResponse(cached4, source, timing) {
   const now = new Date().toISOString();
   return {
@@ -133667,6 +133854,7 @@ function resolveEndpointTemplateBindings(endpoint, params = {}, contextUrl) {
 }
 async function resolveAndExecute(intent, params = {}, context, projection, options) {
   const t0 = Date.now();
+  const walkDepth = options?.__walkDepth ?? 0;
   const timing = {
     search_ms: 0,
     get_skill_ms: 0,
@@ -135216,7 +135404,7 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
           }
         } catch {}
       }
-      if (exaHits.length > 0) {
+      if (walkDepth === 0 && exaHits.length > 0) {
         const intentTokens = (queryIntent || "").toLowerCase().match(/[a-z0-9]{3,}/g) ?? [];
         const stop2 = new Set(["get", "the", "for", "from", "with", "and", "any", "all", "new", "top", "top1", "top10"]);
         const intentTokenSet = new Set(intentTokens.filter((t) => !stop2.has(t)));
@@ -135244,7 +135432,7 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
           console.log(`[exa] raw-candidate mode (UNBROWSE_EXA_RAW=1): keeping ${exaHits.length} low-score hits for the agent to judge`);
         }
       }
-      if (exaHits.length > 0) {
+      if (walkDepth === 0 && exaHits.length > 0) {
         const richHit = pickAnswerHit(exaHits, raceProbeDomain);
         const candidates = exaHits.map((hit) => ({
           url: hit.url,
@@ -135277,6 +135465,40 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
           skill_id: "exa-web-search",
           domain: exaSkillDomain
         };
+        const topWalk = pickWalkTarget(raceContextUrl, exaHits);
+        if (topWalk?.url && walkDepth < 1) {
+          try {
+            const walked = await resolveAndExecute(intent, params, { url: topWalk.url, domain: registrableHost(topWalk.url) ?? undefined }, projection, { ...options ?? {}, __walkDepth: walkDepth + 1 });
+            if (walked && walked.source !== "exa" && !walked.result?.exec_unsupported) {
+              console.log(`[exa→walk] resolved candidate ${topWalk.url} via ${walked.source} (pointer pipe d${walkDepth + 1})`);
+              {
+                const wDom = context?.domain ?? (() => {
+                  try {
+                    return new URL(raceContextUrl).hostname;
+                  } catch {
+                    return null;
+                  }
+                })();
+                persistWalkedRoute(clientScope, scopedCacheKey(clientScope, buildResolveCacheKey(wDom ?? null, intent, raceContextUrl)), walked);
+              }
+              return {
+                ...walked,
+                result: {
+                  ...walked.result,
+                  walked_from: "exa-web-search",
+                  exa_candidates: candidates,
+                  run_plan: [
+                    { step: "resolve", mode: "web-search", status: "hit", label: "fallback", error: null, source: webProvider ?? "exa" },
+                    { step: "walk", mode: walked.source, status: "hit", label: "top-candidate", error: null, source: walked.source }
+                  ]
+                }
+              };
+            }
+            console.log(`[exa→walk] candidate ${topWalk.url} produced no ladder rung — candidate leaf`);
+          } catch (e) {
+            console.log(`[exa→walk] walk error (${e.message}) — candidate leaf`);
+          }
+        }
         return {
           result: {
             ...richHit ? {
@@ -136053,7 +136275,7 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
         console.log(`[ddg] $0 fallback failed: ${err.message}`);
       }
     }
-    if (viable.length === 0 && exaResults?.length) {
+    if (walkDepth === 0 && viable.length === 0 && exaResults?.length) {
       const richHit = pickAnswerHit(exaResults, requestedDomain);
       if (richHit) {
         console.log(`[exa] returning highlights answer from ${richHit.url} (${(richHit.highlights ?? []).join(" ").length} chars) + ${exaResults.length} ranked candidate(s)`);
@@ -136076,6 +136298,31 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
             fetch: `unbrowse fetch --url ${JSON.stringify(hit.url)}`
           }
         }));
+        const topWalk = pickWalkTarget(context?.url, exaResults);
+        if (topWalk?.url && walkDepth < 1) {
+          try {
+            const walked = await resolveAndExecute(intent, params, { url: topWalk.url, domain: registrableHost(topWalk.url) ?? undefined }, projection, { ...options ?? {}, __walkDepth: walkDepth + 1 });
+            if (walked && walked.source !== "exa" && !walked.result?.exec_unsupported) {
+              console.log(`[exa→walk] resolved candidate ${topWalk.url} via ${walked.source} (pointer pipe d${walkDepth + 1})`);
+              persistWalkedRoute(clientScope, cacheKey2, walked);
+              return {
+                ...walked,
+                result: {
+                  ...walked.result,
+                  walked_from: "exa-web-search",
+                  exa_candidates: candidates2,
+                  run_plan: [
+                    { step: "resolve", mode: "web-search", status: "hit", label: "fallback", error: null, source: serialWebProvider ?? "exa" },
+                    { step: "walk", mode: walked.source, status: "hit", label: "top-candidate", error: null, source: walked.source }
+                  ]
+                }
+              };
+            }
+            console.log(`[exa→walk] candidate ${topWalk.url} produced no ladder rung — exa leaf`);
+          } catch (e) {
+            console.log(`[exa→walk] walk error (${e.message}) — exa leaf`);
+          }
+        }
         return {
           result: {
             data: richHit.highlights,
@@ -154011,7 +154258,7 @@ var exports_tencent_waf_solve = {};
 __export(exports_tencent_waf_solve, {
   submitWafClearance: () => submitWafClearance,
   solveTencentViaCapzy: () => solveTencentViaCapzy,
-  parseCapzyProxy: () => parseCapzyProxy,
+  parseCapzyProxy: () => parseCapzyProxy2,
   mergeCookieHeader: () => mergeCookieHeader,
   extractTencentChallenge: () => extractTencentChallenge,
   clearTencentWafViaCapzy: () => clearTencentWafViaCapzy
@@ -154112,7 +154359,7 @@ async function submitWafClearance(input) {
     return { ok: false, status: 0, setCookies: [] };
   }
 }
-function parseCapzyProxy(proxyUrl) {
+function parseCapzyProxy2(proxyUrl) {
   try {
     const u = new URL(proxyUrl);
     if (!u.hostname || !u.port)
@@ -154153,7 +154400,7 @@ async function clearTencentWafViaCapzy(input) {
     websiteURL: input.url,
     appId: challenge.appId,
     clientKey: input.capzyKey,
-    proxy: input.proxyUrl ? parseCapzyProxy(input.proxyUrl) : undefined,
+    proxy: input.proxyUrl ? parseCapzyProxy2(input.proxyUrl) : undefined,
     timeoutMs: input.timeoutMs,
     fetchImpl: input.fetchImpl
   });

package/runtime/mcp.js

@@ -36310,7 +36310,7 @@ var init_cached_resolution = __esm(() => {
 });
 
 // .tmp-runtime-src/build-info.generated.ts
-var BUILD_RELEASE_VERSION = "9.5.0-preview.1", BUILD_GIT_SHA = "77a00a93a3da", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS41LjAtcHJldmlldy4xIiwiZ2l0X3NoYSI6Ijc3YTAwYTkzYTNkYSIsImNvZGVfaGFzaCI6IjVkOWViZjYxOWM2MSIsInRyYWNlX3ZlcnNpb24iOiI1ZDllYmY2MTljNjFANzdhMDBhOTNhM2RhIiwiaXNzdWVkX2F0IjoiMjAyNi0wNi0xN1QxNjoyMjozNC41MjdaIn0", BUILD_RELEASE_MANIFEST_SIGNATURE = "S6SeRd9EuGt1SLhfbZOdCZbjCUsYF8E0D-Yx-cet33g", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
+var BUILD_RELEASE_VERSION = "9.6.0", BUILD_GIT_SHA = "5b6b9dc9e8e1", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS42LjAiLCJnaXRfc2hhIjoiNWI2YjlkYzllOGUxIiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUA1YjZiOWRjOWU4ZTEiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE3VDIyOjAyOjQ0LjA3MVoifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "MqIyb1B_GA8W5Nv_Jictwt1jVCCTgxxdIjUFJqLoeAU", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
 
 // .tmp-runtime-src/version.ts
 import { createHash as createHash4 } from "crypto";
@@ -121818,6 +121818,292 @@ var init_fetch_ladder = __esm(() => {
   ];
 });
 
+// .tmp-runtime-src/execution/tencent-waf-solve.ts
+var exports_tencent_waf_solve = {};
+__export(exports_tencent_waf_solve, {
+  submitWafClearance: () => submitWafClearance,
+  solveTencentViaCapzy: () => solveTencentViaCapzy,
+  parseCapzyProxy: () => parseCapzyProxy,
+  mergeCookieHeader: () => mergeCookieHeader,
+  extractTencentChallenge: () => extractTencentChallenge,
+  clearTencentWafViaCapzy: () => clearTencentWafViaCapzy
+});
+function extractTencentChallenge(html3) {
+  if (!html3 || typeof html3 !== "string")
+    return null;
+  const appMatch = html3.match(/new\s+Captcha\(\s*["']([0-9]{5,})["']/);
+  const seqMatch = html3.match(/var\s+seqid\s*=\s*["']([^"']+?)["']/);
+  if (!appMatch || !seqMatch)
+    return null;
+  return { appId: appMatch[1], seqid: seqMatch[1] };
+}
+async function solveTencentViaCapzy(input) {
+  const clientKey = input.clientKey ?? process.env.UNBROWSE_CAPZY_KEY?.trim();
+  if (!clientKey)
+    return null;
+  const apiBase = (input.apiBase ?? process.env.UNBROWSE_CAPZY_URL?.trim() ?? "https://api.capzy.ai").replace(/\/+$/, "");
+  const doFetch = input.fetchImpl ?? fetch;
+  const deadline = Date.now() + (input.timeoutMs ?? 90000);
+  const task = input.proxy ? {
+    type: "TencentTask",
+    websiteURL: input.websiteURL,
+    websiteKey: input.appId,
+    proxyType: input.proxy.type,
+    proxyAddress: input.proxy.address,
+    proxyPort: input.proxy.port,
+    ...input.proxy.login ? { proxyLogin: input.proxy.login } : {},
+    ...input.proxy.password ? { proxyPassword: input.proxy.password } : {}
+  } : {
+    type: "TencentTaskProxyLess",
+    websiteURL: input.websiteURL,
+    websiteKey: input.appId
+  };
+  let taskId;
+  try {
+    const created = await doFetch(`${apiBase}/createTask`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ clientKey, task }),
+      signal: AbortSignal.timeout(Math.max(1, Math.min(20000, deadline - Date.now())))
+    });
+    if (!created.ok)
+      return null;
+    const cj = await created.json().catch(() => null);
+    if (!cj || cj.errorId || !cj.taskId)
+      return null;
+    taskId = cj.taskId;
+  } catch {
+    return null;
+  }
+  while (Date.now() < deadline) {
+    try {
+      const res = await doFetch(`${apiBase}/getTaskResult`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ clientKey, taskId }),
+        signal: AbortSignal.timeout(Math.max(1, Math.min(15000, deadline - Date.now())))
+      });
+      if (!res.ok)
+        return null;
+      const rj = await res.json().catch(() => null);
+      if (!rj || rj.errorId)
+        return null;
+      if (rj.status === "ready") {
+        const s = rj.solution ?? {};
+        if (s.ticket && s.randstr) {
+          return { ticket: s.ticket, randstr: s.randstr, appid: s.appid ?? input.appId };
+        }
+        return null;
+      }
+    } catch {
+      return null;
+    }
+    await new Promise((r) => setTimeout(r, 2000));
+  }
+  return null;
+}
+async function submitWafClearance(input) {
+  const doFetch = input.fetchImpl ?? fetch;
+  const ret = input.ret ?? 0;
+  const body = [String(ret), input.ticket, input.randstr, input.seqid].join(`
+`);
+  const headers = { "Content-Type": "text/plain;charset=UTF-8" };
+  if (input.cookieHeader)
+    headers["Cookie"] = input.cookieHeader;
+  try {
+    const res = await doFetch(input.wafUrl, {
+      method: "POST",
+      headers,
+      body,
+      signal: AbortSignal.timeout(input.timeoutMs ?? 20000),
+      ...input.proxyUrl ? { proxy: input.proxyUrl } : {}
+    });
+    const setCookies2 = typeof res.headers.getSetCookie === "function" ? res.headers.getSetCookie() : res.headers.get("set-cookie") ? [res.headers.get("set-cookie")] : [];
+    return { ok: res.ok, status: res.status, setCookies: setCookies2 };
+  } catch {
+    return { ok: false, status: 0, setCookies: [] };
+  }
+}
+function parseCapzyProxy(proxyUrl) {
+  try {
+    const u = new URL(proxyUrl);
+    if (!u.hostname || !u.port)
+      return;
+    const scheme = u.protocol.replace(":", "").toLowerCase();
+    const type = scheme === "socks5" || scheme === "socks4" || scheme === "https" ? scheme : "http";
+    return {
+      type,
+      address: u.hostname,
+      port: Number(u.port),
+      ...u.username ? { login: decodeURIComponent(u.username) } : {},
+      ...u.password ? { password: decodeURIComponent(u.password) } : {}
+    };
+  } catch {
+    return;
+  }
+}
+function mergeCookieHeader(prior, setCookies2) {
+  const jar = new Map;
+  for (const pair of (prior ?? "").split(/;\s*/)) {
+    const eq2 = pair.indexOf("=");
+    if (eq2 > 0)
+      jar.set(pair.slice(0, eq2).trim(), pair.slice(eq2 + 1).trim());
+  }
+  for (const sc of setCookies2) {
+    const first2 = sc.split(";")[0] ?? "";
+    const eq2 = first2.indexOf("=");
+    if (eq2 > 0)
+      jar.set(first2.slice(0, eq2).trim(), first2.slice(eq2 + 1).trim());
+  }
+  return Array.from(jar, ([k, v]) => `${k}=${v}`).join("; ");
+}
+async function clearTencentWafViaCapzy(input) {
+  const challenge = extractTencentChallenge(input.html);
+  if (!challenge)
+    return null;
+  const solved = await solveTencentViaCapzy({
+    websiteURL: input.url,
+    appId: challenge.appId,
+    clientKey: input.capzyKey,
+    proxy: input.proxyUrl ? parseCapzyProxy(input.proxyUrl) : undefined,
+    timeoutMs: input.timeoutMs,
+    fetchImpl: input.fetchImpl
+  });
+  if (!solved)
+    return null;
+  let origin;
+  try {
+    origin = new URL(input.url).origin;
+  } catch {
+    return null;
+  }
+  const clearance = await submitWafClearance({
+    wafUrl: `${origin}/WafCaptcha`,
+    ticket: solved.ticket,
+    randstr: solved.randstr,
+    seqid: challenge.seqid,
+    cookieHeader: input.cookieHeader,
+    proxyUrl: input.proxyUrl,
+    fetchImpl: input.fetchImpl
+  });
+  if (!clearance.ok)
+    return null;
+  const cookieHeader = mergeCookieHeader(input.cookieHeader, clearance.setCookies);
+  const doFetch = input.fetchImpl ?? fetch;
+  try {
+    const res = await doFetch(input.url, {
+      headers: { Cookie: cookieHeader, Accept: "*/*" },
+      signal: AbortSignal.timeout(input.timeoutMs ?? 30000),
+      ...input.proxyUrl ? { proxy: input.proxyUrl } : {}
+    });
+    const html3 = await res.text();
+    if (!html3 || extractTencentChallenge(html3))
+      return null;
+    return { html: html3, cookieHeader };
+  } catch {
+    return null;
+  }
+}
+
+// .tmp-runtime-src/execution/capzy-cf-solve.ts
+function extractCfClearance(solution) {
+  if (!solution || typeof solution !== "object")
+    return null;
+  const s = solution;
+  const ua = typeof s.user_agent === "string" && s.user_agent || typeof s.userAgent === "string" && s.userAgent || undefined;
+  if (typeof s.cf_clearance === "string" && s.cf_clearance) {
+    return { cf_clearance: s.cf_clearance, user_agent: ua || undefined };
+  }
+  if (typeof s.token === "string" && s.token && s.type !== "turnstile") {
+    return { cf_clearance: s.token, user_agent: ua || undefined };
+  }
+  const cookies = s.cookies;
+  if (cookies && typeof cookies === "object" && !Array.isArray(cookies)) {
+    const v = cookies.cf_clearance;
+    if (typeof v === "string" && v)
+      return { cf_clearance: v, user_agent: ua || undefined };
+  }
+  if (Array.isArray(cookies)) {
+    for (const c of cookies) {
+      if (c && typeof c === "object") {
+        const o = c;
+        if (o.name === "cf_clearance" && typeof o.value === "string" && o.value) {
+          return { cf_clearance: o.value, user_agent: ua || undefined };
+        }
+      } else if (typeof c === "string" && c.startsWith("cf_clearance=")) {
+        const v = c.slice("cf_clearance=".length).split(";")[0];
+        if (v)
+          return { cf_clearance: v, user_agent: ua || undefined };
+      }
+    }
+  }
+  return null;
+}
+function buildCfTask(websiteURL, proxy) {
+  return {
+    type: "AntiCloudflareTask",
+    websiteURL,
+    proxyType: proxy.type,
+    proxyAddress: proxy.address,
+    proxyPort: proxy.port,
+    ...proxy.login ? { proxyLogin: proxy.login } : {},
+    ...proxy.password ? { proxyPassword: proxy.password } : {}
+  };
+}
+async function solveCfViaCapzy(input) {
+  const clientKey = input.clientKey ?? process.env.UNBROWSE_CAPZY_KEY?.trim();
+  if (!clientKey)
+    return null;
+  if (!input.proxy)
+    return null;
+  const apiBase = (input.apiBase ?? process.env.UNBROWSE_CAPZY_URL?.trim() ?? "https://api.capzy.ai").replace(/\/+$/, "");
+  const doFetch = input.fetchImpl ?? fetch;
+  const deadline = Date.now() + (input.timeoutMs ?? 120000);
+  const task = buildCfTask(input.websiteURL, input.proxy);
+  let taskId;
+  try {
+    const created = await doFetch(`${apiBase}/createTask`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ clientKey, task }),
+      signal: AbortSignal.timeout(Math.max(1, Math.min(20000, deadline - Date.now())))
+    });
+    if (!created.ok)
+      return null;
+    const cj = await created.json().catch(() => null);
+    if (!cj || cj.errorId || !cj.taskId)
+      return null;
+    taskId = cj.taskId;
+  } catch {
+    return null;
+  }
+  while (Date.now() < deadline) {
+    try {
+      const res = await doFetch(`${apiBase}/getTaskResult`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ clientKey, taskId }),
+        signal: AbortSignal.timeout(Math.max(1, Math.min(15000, deadline - Date.now())))
+      });
+      if (!res.ok)
+        return null;
+      const rj = await res.json().catch(() => null);
+      if (!rj || rj.errorId)
+        return null;
+      if (rj.status === "failed")
+        return null;
+      if (rj.status === "ready") {
+        return extractCfClearance(rj.solution);
+      }
+    } catch {
+      return null;
+    }
+    await new Promise((r) => setTimeout(r, 2500));
+  }
+  return null;
+}
+var init_capzy_cf_solve = () => {};
+
 // .tmp-runtime-src/execution/cf-challenge.ts
 var exports_cf_challenge = {};
 __export(exports_cf_challenge, {
@@ -121838,6 +122124,31 @@ function extractCfBundleUrl(body, requestUrl) {
   }
 }
 async function solveCfAndRetry(input) {
+  if (process.env.UNBROWSE_CAPZY_KEY?.trim()) {
+    const viaCapzy = await solveCfViaCapzy({
+      websiteURL: input.url,
+      proxy: input.proxy ? parseCapzyProxy(input.proxy) : undefined,
+      timeoutMs: input.timeoutMs
+    });
+    if (viaCapzy?.cf_clearance) {
+      const merged2 = mergeCookieJar(input.cookies ?? [], [
+        { name: "cf_clearance", value: viaCapzy.cf_clearance }
+      ]);
+      const cookieHeader2 = merged2.map((c) => `${c.name}=${c.value}`).join("; ");
+      try {
+        const retry = await globalThis.fetch(input.url, {
+          method: "GET",
+          headers: {
+            ...cookieHeader2 ? { cookie: cookieHeader2 } : {},
+            ...viaCapzy.user_agent ? { "user-agent": viaCapzy.user_agent } : {}
+          }
+        });
+        if (retry.status >= 200 && retry.status < 400) {
+          return { status: retry.status, html: await retry.text(), cookies: merged2 };
+        }
+      } catch {}
+    }
+  }
   const bundleUrl = extractCfBundleUrl(input.body, input.url);
   if (!bundleUrl)
     return null;
@@ -121919,6 +122230,7 @@ function mergeCookieJar(a, b) {
 var CF_BUNDLE_RE;
 var init_cf_challenge = __esm(() => {
   init_bundle_replay_client();
+  init_capzy_cf_solve();
   CF_BUNDLE_RE = /src=["'](\/cdn-cgi\/challenge-platform\/h\/[gb]\/scripts\/jsd\/[a-f0-9]+\/main\.js)/i;
 });
 
@@ -130228,6 +130540,35 @@ var init_mount = __esm(() => {
 import { existsSync as existsSync27, writeFileSync as writeFileSync17, readFileSync as readFileSync23, mkdirSync as mkdirSync19, readdirSync as readdirSync8 } from "node:fs";
 import { dirname as dirname6, join as join33 } from "node:path";
 import { createHash as createHash14 } from "node:crypto";
+function registrableHost(u) {
+  if (!u)
+    return null;
+  try {
+    return new URL(u).hostname.replace(/^www\./, "").split(".").slice(-2).join(".");
+  } catch {
+    return null;
+  }
+}
+function shouldAutoWalk(requestedUrl, topUrl, topScore, minScore = 0.8) {
+  if (!topUrl)
+    return false;
+  const reqReg = registrableHost(requestedUrl);
+  const topReg = registrableHost(topUrl);
+  return !!reqReg && reqReg === topReg || (topScore ?? 0) >= minScore;
+}
+function pickWalkTarget(requestedUrl, ranked, minScore = 0.8) {
+  const eligible = ranked.filter((c) => c?.url && shouldAutoWalk(requestedUrl, c.url, c.score, minScore));
+  if (eligible.length === 0)
+    return null;
+  const hasPath = (u) => {
+    try {
+      return new URL(u).pathname.replace(/\/+$/, "").length > 0;
+    } catch {
+      return false;
+    }
+  };
+  return eligible.find((c) => hasPath(c.url)) ?? eligible[0];
+}
 function artifactResultWithShortlist(artifact, skillId, triggerUrl) {
   const ep = artifact.endpoint;
   const res = artifact.result;
@@ -130767,6 +131108,19 @@ function promoteResultSnapshot(cacheKey2, skill, endpointId, result, trace) {
     expires: Date.now() + ROUTE_CACHE_TTL
   });
 }
+function persistWalkedRoute(scope, cacheKey2, walked) {
+  try {
+    const skill = walked.skill;
+    if (!skill)
+      return;
+    const endpointId = walked.trace?.endpoint_id;
+    const isReplayableRoute = (walked.source === "marketplace" || walked.source === "route-cache" || walked.source === "live-capture" || walked.source === "direct-fetch") && !!skill.endpoints?.length;
+    if (isReplayableRoute) {
+      promoteLearnedSkill(scope, cacheKey2, skill, endpointId, undefined);
+    }
+    promoteResultSnapshot(cacheKey2, skill, endpointId, walked.result, walked.trace);
+  } catch {}
+}
 function buildCachedResultResponse(cached4, source, timing) {
   const now = new Date().toISOString();
   return {
@@ -131912,6 +132266,7 @@ function resolveEndpointTemplateBindings(endpoint, params = {}, contextUrl) {
 }
 async function resolveAndExecute(intent, params = {}, context, projection, options) {
   const t0 = Date.now();
+  const walkDepth = options?.__walkDepth ?? 0;
   const timing = {
     search_ms: 0,
     get_skill_ms: 0,
@@ -133461,7 +133816,7 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
           }
         } catch {}
       }
-      if (exaHits.length > 0) {
+      if (walkDepth === 0 && exaHits.length > 0) {
         const intentTokens = (queryIntent || "").toLowerCase().match(/[a-z0-9]{3,}/g) ?? [];
         const stop2 = new Set(["get", "the", "for", "from", "with", "and", "any", "all", "new", "top", "top1", "top10"]);
         const intentTokenSet = new Set(intentTokens.filter((t) => !stop2.has(t)));
@@ -133489,7 +133844,7 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
           console.log(`[exa] raw-candidate mode (UNBROWSE_EXA_RAW=1): keeping ${exaHits.length} low-score hits for the agent to judge`);
         }
       }
-      if (exaHits.length > 0) {
+      if (walkDepth === 0 && exaHits.length > 0) {
         const richHit = pickAnswerHit(exaHits, raceProbeDomain);
         const candidates = exaHits.map((hit) => ({
           url: hit.url,
@@ -133522,6 +133877,40 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
           skill_id: "exa-web-search",
           domain: exaSkillDomain
         };
+        const topWalk = pickWalkTarget(raceContextUrl, exaHits);
+        if (topWalk?.url && walkDepth < 1) {
+          try {
+            const walked = await resolveAndExecute(intent, params, { url: topWalk.url, domain: registrableHost(topWalk.url) ?? undefined }, projection, { ...options ?? {}, __walkDepth: walkDepth + 1 });
+            if (walked && walked.source !== "exa" && !walked.result?.exec_unsupported) {
+              console.log(`[exa→walk] resolved candidate ${topWalk.url} via ${walked.source} (pointer pipe d${walkDepth + 1})`);
+              {
+                const wDom = context?.domain ?? (() => {
+                  try {
+                    return new URL(raceContextUrl).hostname;
+                  } catch {
+                    return null;
+                  }
+                })();
+                persistWalkedRoute(clientScope, scopedCacheKey(clientScope, buildResolveCacheKey(wDom ?? null, intent, raceContextUrl)), walked);
+              }
+              return {
+                ...walked,
+                result: {
+                  ...walked.result,
+                  walked_from: "exa-web-search",
+                  exa_candidates: candidates,
+                  run_plan: [
+                    { step: "resolve", mode: "web-search", status: "hit", label: "fallback", error: null, source: webProvider ?? "exa" },
+                    { step: "walk", mode: walked.source, status: "hit", label: "top-candidate", error: null, source: walked.source }
+                  ]
+                }
+              };
+            }
+            console.log(`[exa→walk] candidate ${topWalk.url} produced no ladder rung — candidate leaf`);
+          } catch (e) {
+            console.log(`[exa→walk] walk error (${e.message}) — candidate leaf`);
+          }
+        }
         return {
           result: {
             ...richHit ? {
@@ -134298,7 +134687,7 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
         console.log(`[ddg] $0 fallback failed: ${err.message}`);
       }
     }
-    if (viable.length === 0 && exaResults?.length) {
+    if (walkDepth === 0 && viable.length === 0 && exaResults?.length) {
       const richHit = pickAnswerHit(exaResults, requestedDomain);
       if (richHit) {
         console.log(`[exa] returning highlights answer from ${richHit.url} (${(richHit.highlights ?? []).join(" ").length} chars) + ${exaResults.length} ranked candidate(s)`);
@@ -134321,6 +134710,31 @@ async function resolveAndExecute(intent, params = {}, context, projection, optio
             fetch: `unbrowse fetch --url ${JSON.stringify(hit.url)}`
           }
         }));
+        const topWalk = pickWalkTarget(context?.url, exaResults);
+        if (topWalk?.url && walkDepth < 1) {
+          try {
+            const walked = await resolveAndExecute(intent, params, { url: topWalk.url, domain: registrableHost(topWalk.url) ?? undefined }, projection, { ...options ?? {}, __walkDepth: walkDepth + 1 });
+            if (walked && walked.source !== "exa" && !walked.result?.exec_unsupported) {
+              console.log(`[exa→walk] resolved candidate ${topWalk.url} via ${walked.source} (pointer pipe d${walkDepth + 1})`);
+              persistWalkedRoute(clientScope, cacheKey2, walked);
+              return {
+                ...walked,
+                result: {
+                  ...walked.result,
+                  walked_from: "exa-web-search",
+                  exa_candidates: candidates2,
+                  run_plan: [
+                    { step: "resolve", mode: "web-search", status: "hit", label: "fallback", error: null, source: serialWebProvider ?? "exa" },
+                    { step: "walk", mode: walked.source, status: "hit", label: "top-candidate", error: null, source: walked.source }
+                  ]
+                }
+              };
+            }
+            console.log(`[exa→walk] candidate ${topWalk.url} produced no ladder rung — exa leaf`);
+          } catch (e) {
+            console.log(`[exa→walk] walk error (${e.message}) — exa leaf`);
+          }
+        }
         return {
           result: {
             data: richHit.highlights,
@@ -148674,193 +149088,6 @@ function isGithubBlob(url) {
   return githubBlobToRaw(url) !== null;
 }
 
-// .tmp-runtime-src/execution/tencent-waf-solve.ts
-var exports_tencent_waf_solve = {};
-__export(exports_tencent_waf_solve, {
-  submitWafClearance: () => submitWafClearance,
-  solveTencentViaCapzy: () => solveTencentViaCapzy,
-  parseCapzyProxy: () => parseCapzyProxy,
-  mergeCookieHeader: () => mergeCookieHeader,
-  extractTencentChallenge: () => extractTencentChallenge,
-  clearTencentWafViaCapzy: () => clearTencentWafViaCapzy
-});
-function extractTencentChallenge(html3) {
-  if (!html3 || typeof html3 !== "string")
-    return null;
-  const appMatch = html3.match(/new\s+Captcha\(\s*["']([0-9]{5,})["']/);
-  const seqMatch = html3.match(/var\s+seqid\s*=\s*["']([^"']+?)["']/);
-  if (!appMatch || !seqMatch)
-    return null;
-  return { appId: appMatch[1], seqid: seqMatch[1] };
-}
-async function solveTencentViaCapzy(input) {
-  const clientKey = input.clientKey ?? process.env.UNBROWSE_CAPZY_KEY?.trim();
-  if (!clientKey)
-    return null;
-  const apiBase = (input.apiBase ?? process.env.UNBROWSE_CAPZY_URL?.trim() ?? "https://api.capzy.ai").replace(/\/+$/, "");
-  const doFetch = input.fetchImpl ?? fetch;
-  const deadline = Date.now() + (input.timeoutMs ?? 90000);
-  const task = input.proxy ? {
-    type: "TencentTask",
-    websiteURL: input.websiteURL,
-    websiteKey: input.appId,
-    proxyType: input.proxy.type,
-    proxyAddress: input.proxy.address,
-    proxyPort: input.proxy.port,
-    ...input.proxy.login ? { proxyLogin: input.proxy.login } : {},
-    ...input.proxy.password ? { proxyPassword: input.proxy.password } : {}
-  } : {
-    type: "TencentTaskProxyLess",
-    websiteURL: input.websiteURL,
-    websiteKey: input.appId
-  };
-  let taskId;
-  try {
-    const created = await doFetch(`${apiBase}/createTask`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ clientKey, task }),
-      signal: AbortSignal.timeout(Math.max(1, Math.min(20000, deadline - Date.now())))
-    });
-    if (!created.ok)
-      return null;
-    const cj = await created.json().catch(() => null);
-    if (!cj || cj.errorId || !cj.taskId)
-      return null;
-    taskId = cj.taskId;
-  } catch {
-    return null;
-  }
-  while (Date.now() < deadline) {
-    try {
-      const res = await doFetch(`${apiBase}/getTaskResult`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ clientKey, taskId }),
-        signal: AbortSignal.timeout(Math.max(1, Math.min(15000, deadline - Date.now())))
-      });
-      if (!res.ok)
-        return null;
-      const rj = await res.json().catch(() => null);
-      if (!rj || rj.errorId)
-        return null;
-      if (rj.status === "ready") {
-        const s = rj.solution ?? {};
-        if (s.ticket && s.randstr) {
-          return { ticket: s.ticket, randstr: s.randstr, appid: s.appid ?? input.appId };
-        }
-        return null;
-      }
-    } catch {
-      return null;
-    }
-    await new Promise((r) => setTimeout(r, 2000));
-  }
-  return null;
-}
-async function submitWafClearance(input) {
-  const doFetch = input.fetchImpl ?? fetch;
-  const ret = input.ret ?? 0;
-  const body = [String(ret), input.ticket, input.randstr, input.seqid].join(`
-`);
-  const headers = { "Content-Type": "text/plain;charset=UTF-8" };
-  if (input.cookieHeader)
-    headers["Cookie"] = input.cookieHeader;
-  try {
-    const res = await doFetch(input.wafUrl, {
-      method: "POST",
-      headers,
-      body,
-      signal: AbortSignal.timeout(input.timeoutMs ?? 20000),
-      ...input.proxyUrl ? { proxy: input.proxyUrl } : {}
-    });
-    const setCookies2 = typeof res.headers.getSetCookie === "function" ? res.headers.getSetCookie() : res.headers.get("set-cookie") ? [res.headers.get("set-cookie")] : [];
-    return { ok: res.ok, status: res.status, setCookies: setCookies2 };
-  } catch {
-    return { ok: false, status: 0, setCookies: [] };
-  }
-}
-function parseCapzyProxy(proxyUrl) {
-  try {
-    const u = new URL(proxyUrl);
-    if (!u.hostname || !u.port)
-      return;
-    const scheme = u.protocol.replace(":", "").toLowerCase();
-    const type = scheme === "socks5" || scheme === "socks4" || scheme === "https" ? scheme : "http";
-    return {
-      type,
-      address: u.hostname,
-      port: Number(u.port),
-      ...u.username ? { login: decodeURIComponent(u.username) } : {},
-      ...u.password ? { password: decodeURIComponent(u.password) } : {}
-    };
-  } catch {
-    return;
-  }
-}
-function mergeCookieHeader(prior, setCookies2) {
-  const jar = new Map;
-  for (const pair of (prior ?? "").split(/;\s*/)) {
-    const eq2 = pair.indexOf("=");
-    if (eq2 > 0)
-      jar.set(pair.slice(0, eq2).trim(), pair.slice(eq2 + 1).trim());
-  }
-  for (const sc of setCookies2) {
-    const first2 = sc.split(";")[0] ?? "";
-    const eq2 = first2.indexOf("=");
-    if (eq2 > 0)
-      jar.set(first2.slice(0, eq2).trim(), first2.slice(eq2 + 1).trim());
-  }
-  return Array.from(jar, ([k, v]) => `${k}=${v}`).join("; ");
-}
-async function clearTencentWafViaCapzy(input) {
-  const challenge = extractTencentChallenge(input.html);
-  if (!challenge)
-    return null;
-  const solved = await solveTencentViaCapzy({
-    websiteURL: input.url,
-    appId: challenge.appId,
-    clientKey: input.capzyKey,
-    proxy: input.proxyUrl ? parseCapzyProxy(input.proxyUrl) : undefined,
-    timeoutMs: input.timeoutMs,
-    fetchImpl: input.fetchImpl
-  });
-  if (!solved)
-    return null;
-  let origin;
-  try {
-    origin = new URL(input.url).origin;
-  } catch {
-    return null;
-  }
-  const clearance = await submitWafClearance({
-    wafUrl: `${origin}/WafCaptcha`,
-    ticket: solved.ticket,
-    randstr: solved.randstr,
-    seqid: challenge.seqid,
-    cookieHeader: input.cookieHeader,
-    proxyUrl: input.proxyUrl,
-    fetchImpl: input.fetchImpl
-  });
-  if (!clearance.ok)
-    return null;
-  const cookieHeader = mergeCookieHeader(input.cookieHeader, clearance.setCookies);
-  const doFetch = input.fetchImpl ?? fetch;
-  try {
-    const res = await doFetch(input.url, {
-      headers: { Cookie: cookieHeader, Accept: "*/*" },
-      signal: AbortSignal.timeout(input.timeoutMs ?? 30000),
-      ...input.proxyUrl ? { proxy: input.proxyUrl } : {}
-    });
-    const html3 = await res.text();
-    if (!html3 || extractTencentChallenge(html3))
-      return null;
-    return { html: html3, cookieHeader };
-  } catch {
-    return null;
-  }
-}
-
 // .tmp-runtime-src/extraction/readability.ts
 function linkDensity($2, $el) {
   const textLen = $el.text().replace(/\s+/g, " ").trim().length || 1;
@@ -235975,11 +236202,13 @@ __export(exports_orchestrator, {
   shouldReuseRouteResultSnapshot: () => shouldReuseRouteResultSnapshot2,
   shouldFallbackToLiveCaptureAfterAutoexecFailure: () => shouldFallbackToLiveCaptureAfterAutoexecFailure2,
   shouldBypassLiveCaptureQueue: () => shouldBypassLiveCaptureQueue2,
+  shouldAutoWalk: () => shouldAutoWalk2,
   selectSkillIdsToHydrate: () => selectSkillIdsToHydrate2,
   selectSearchTermsForExecution: () => selectSearchTermsForExecution2,
   scopedCacheKey: () => scopedCacheKey2,
   resolveEndpointTemplateBindings: () => resolveEndpointTemplateBindings2,
   resolveAndExecute: () => resolveAndExecute2,
+  registrableHost: () => registrableHost2,
   readSkillSnapshot: () => readSkillSnapshot2,
   readComposite: () => readComposite2,
   pruneLocalCacheEntriesForSkill: () => pruneLocalCacheEntriesForSkill2,
@@ -235987,6 +236216,7 @@ __export(exports_orchestrator, {
   probeLooksLikeFetchableHtmlDocument: () => probeLooksLikeFetchableHtmlDocument2,
   probeLooksLikeDirectJsonApi: () => probeLooksLikeDirectJsonApi2,
   planPrereqOrder: () => planPrereqOrder2,
+  pickWalkTarget: () => pickWalkTarget2,
   pickPreferredSkillSnapshot: () => pickPreferredSkillSnapshot2,
   persistDomainCache: () => persistDomainCache2,
   marketplaceSkillMatchesContext: () => marketplaceSkillMatchesContext2,
@@ -236018,6 +236248,35 @@ __export(exports_orchestrator, {
 import { existsSync as existsSync60, writeFileSync as writeFileSync35, readFileSync as readFileSync49, mkdirSync as mkdirSync39, readdirSync as readdirSync17 } from "node:fs";
 import { dirname as dirname15, join as join68 } from "node:path";
 import { createHash as createHash48 } from "node:crypto";
+function registrableHost2(u) {
+  if (!u)
+    return null;
+  try {
+    return new URL(u).hostname.replace(/^www\./, "").split(".").slice(-2).join(".");
+  } catch {
+    return null;
+  }
+}
+function shouldAutoWalk2(requestedUrl, topUrl, topScore, minScore = 0.8) {
+  if (!topUrl)
+    return false;
+  const reqReg = registrableHost2(requestedUrl);
+  const topReg = registrableHost2(topUrl);
+  return !!reqReg && reqReg === topReg || (topScore ?? 0) >= minScore;
+}
+function pickWalkTarget2(requestedUrl, ranked, minScore = 0.8) {
+  const eligible = ranked.filter((c) => c?.url && shouldAutoWalk2(requestedUrl, c.url, c.score, minScore));
+  if (eligible.length === 0)
+    return null;
+  const hasPath = (u) => {
+    try {
+      return new URL(u).pathname.replace(/\/+$/, "").length > 0;
+    } catch {
+      return false;
+    }
+  };
+  return eligible.find((c) => hasPath(c.url)) ?? eligible[0];
+}
 function artifactResultWithShortlist2(artifact, skillId, triggerUrl) {
   const ep = artifact.endpoint;
   const res = artifact.result;
@@ -236557,6 +236816,19 @@ function promoteResultSnapshot2(cacheKey2, skill, endpointId, result, trace) {
     expires: Date.now() + ROUTE_CACHE_TTL2
   });
 }
+function persistWalkedRoute2(scope, cacheKey2, walked) {
+  try {
+    const skill = walked.skill;
+    if (!skill)
+      return;
+    const endpointId = walked.trace?.endpoint_id;
+    const isReplayableRoute = (walked.source === "marketplace" || walked.source === "route-cache" || walked.source === "live-capture" || walked.source === "direct-fetch") && !!skill.endpoints?.length;
+    if (isReplayableRoute) {
+      promoteLearnedSkill2(scope, cacheKey2, skill, endpointId, undefined);
+    }
+    promoteResultSnapshot2(cacheKey2, skill, endpointId, walked.result, walked.trace);
+  } catch {}
+}
 function buildCachedResultResponse2(cached5, source, timing) {
   const now = new Date().toISOString();
   return {
@@ -237707,6 +237979,7 @@ function resolveEndpointTemplateBindings2(endpoint, params = {}, contextUrl) {
 }
 async function resolveAndExecute2(intent, params = {}, context, projection, options) {
   const t0 = Date.now();
+  const walkDepth = options?.__walkDepth ?? 0;
   const timing = {
     search_ms: 0,
     get_skill_ms: 0,
@@ -239256,7 +239529,7 @@ async function resolveAndExecute2(intent, params = {}, context, projection, opti
           }
         } catch {}
       }
-      if (exaHits.length > 0) {
+      if (walkDepth === 0 && exaHits.length > 0) {
         const intentTokens = (queryIntent || "").toLowerCase().match(/[a-z0-9]{3,}/g) ?? [];
         const stop2 = new Set(["get", "the", "for", "from", "with", "and", "any", "all", "new", "top", "top1", "top10"]);
         const intentTokenSet = new Set(intentTokens.filter((t) => !stop2.has(t)));
@@ -239284,7 +239557,7 @@ async function resolveAndExecute2(intent, params = {}, context, projection, opti
           console.log(`[exa] raw-candidate mode (UNBROWSE_EXA_RAW=1): keeping ${exaHits.length} low-score hits for the agent to judge`);
         }
       }
-      if (exaHits.length > 0) {
+      if (walkDepth === 0 && exaHits.length > 0) {
         const richHit = pickAnswerHit(exaHits, raceProbeDomain);
         const candidates = exaHits.map((hit) => ({
           url: hit.url,
@@ -239317,6 +239590,40 @@ async function resolveAndExecute2(intent, params = {}, context, projection, opti
           skill_id: "exa-web-search",
           domain: exaSkillDomain
         };
+        const topWalk = pickWalkTarget2(raceContextUrl, exaHits);
+        if (topWalk?.url && walkDepth < 1) {
+          try {
+            const walked = await resolveAndExecute2(intent, params, { url: topWalk.url, domain: registrableHost2(topWalk.url) ?? undefined }, projection, { ...options ?? {}, __walkDepth: walkDepth + 1 });
+            if (walked && walked.source !== "exa" && !walked.result?.exec_unsupported) {
+              console.log(`[exa→walk] resolved candidate ${topWalk.url} via ${walked.source} (pointer pipe d${walkDepth + 1})`);
+              {
+                const wDom = context?.domain ?? (() => {
+                  try {
+                    return new URL(raceContextUrl).hostname;
+                  } catch {
+                    return null;
+                  }
+                })();
+                persistWalkedRoute2(clientScope, scopedCacheKey2(clientScope, buildResolveCacheKey2(wDom ?? null, intent, raceContextUrl)), walked);
+              }
+              return {
+                ...walked,
+                result: {
+                  ...walked.result,
+                  walked_from: "exa-web-search",
+                  exa_candidates: candidates,
+                  run_plan: [
+                    { step: "resolve", mode: "web-search", status: "hit", label: "fallback", error: null, source: webProvider ?? "exa" },
+                    { step: "walk", mode: walked.source, status: "hit", label: "top-candidate", error: null, source: walked.source }
+                  ]
+                }
+              };
+            }
+            console.log(`[exa→walk] candidate ${topWalk.url} produced no ladder rung — candidate leaf`);
+          } catch (e) {
+            console.log(`[exa→walk] walk error (${e.message}) — candidate leaf`);
+          }
+        }
         return {
           result: {
             ...richHit ? {
@@ -240093,7 +240400,7 @@ async function resolveAndExecute2(intent, params = {}, context, projection, opti
         console.log(`[ddg] $0 fallback failed: ${err.message}`);
       }
     }
-    if (viable.length === 0 && exaResults?.length) {
+    if (walkDepth === 0 && viable.length === 0 && exaResults?.length) {
       const richHit = pickAnswerHit(exaResults, requestedDomain);
       if (richHit) {
         console.log(`[exa] returning highlights answer from ${richHit.url} (${(richHit.highlights ?? []).join(" ").length} chars) + ${exaResults.length} ranked candidate(s)`);
@@ -240116,6 +240423,31 @@ async function resolveAndExecute2(intent, params = {}, context, projection, opti
             fetch: `unbrowse fetch --url ${JSON.stringify(hit.url)}`
           }
         }));
+        const topWalk = pickWalkTarget2(context?.url, exaResults);
+        if (topWalk?.url && walkDepth < 1) {
+          try {
+            const walked = await resolveAndExecute2(intent, params, { url: topWalk.url, domain: registrableHost2(topWalk.url) ?? undefined }, projection, { ...options ?? {}, __walkDepth: walkDepth + 1 });
+            if (walked && walked.source !== "exa" && !walked.result?.exec_unsupported) {
+              console.log(`[exa→walk] resolved candidate ${topWalk.url} via ${walked.source} (pointer pipe d${walkDepth + 1})`);
+              persistWalkedRoute2(clientScope, cacheKey2, walked);
+              return {
+                ...walked,
+                result: {
+                  ...walked.result,
+                  walked_from: "exa-web-search",
+                  exa_candidates: candidates2,
+                  run_plan: [
+                    { step: "resolve", mode: "web-search", status: "hit", label: "fallback", error: null, source: serialWebProvider ?? "exa" },
+                    { step: "walk", mode: walked.source, status: "hit", label: "top-candidate", error: null, source: walked.source }
+                  ]
+                }
+              };
+            }
+            console.log(`[exa→walk] candidate ${topWalk.url} produced no ladder rung — exa leaf`);
+          } catch (e) {
+            console.log(`[exa→walk] walk error (${e.message}) — exa leaf`);
+          }
+        }
         return {
           result: {
             data: richHit.highlights,

package/vendor/kuri/manifest.json

@@ -2,7 +2,7 @@
   "repo_url": "https://github.com/justrach/kuri.git",
   "branch": "adding-extensions",
   "source_sha": "149881254046a20778f642b69f20f0c6468f6fb4",
-  "built_at": "2026-06-17T15:12:51.641Z",
+  "built_at": "2026-06-17T21:47:52.749Z",
   "binaries": {
     "darwin-arm64": {
       "zig_target": "aarch64-macos",
@@ -21,11 +21,11 @@
     },
     "linux-x64": {
       "zig_target": "x86_64-linux",
-      "sha256": "4d009a669b71c2e11d747fb2839da17b1f89b62b4e937a9f5bb7274cc2ee2b4a"
+      "sha256": "250b2dfafc912dfda669416984036cf745749a0f5322c85acf0f95d7902e2dff"
     },
     "win-x64": {
       "zig_target": "x86_64-windows-gnu",
-      "sha256": "4a244ea5f508b7dbeff9227f43458bb03e6db2e11f72abd00ab3c81c0fde973d",
+      "sha256": "f920a3a3f95e38c3245c52af11989a046a0c8c87b4091d8b3c0a1638b44b6179",
       "source": "pre-staged"
     }
   },
@@ -33,22 +33,22 @@
     "darwin-arm64": {
       "zig_target": "aarch64-macos",
       "lib": "libkuri_ffi.dylib",
-      "sha256": "c49a5ad76c782f3fa351a8c8f797f63bf92a2e4f4405a76fc92d59cba9e52dee"
+      "sha256": "898a9290964371d9814d98de79bc62678833a0b914c47f765d46d6080ee391d5"
     },
     "darwin-x64": {
       "zig_target": "x86_64-macos",
       "lib": "libkuri_ffi.dylib",
-      "sha256": "44ef8a02fa2e3f70f52cfb915cc2cf69e321964770c3fcdaaa9906341044fa5d"
+      "sha256": "730a09622d95ee3a5c9f5c41a7971d8ab93e7ca401be717c54c13bbbe498f604"
     },
     "linux-arm64": {
       "zig_target": "aarch64-linux",
       "lib": "libkuri_ffi.so",
-      "sha256": "18a8c9834bfd1090d29d9ea20426dc8b798a7eb0c3a64949cefe0ef83551a7e3"
+      "sha256": "ef27e02d48f90d159b0bbcbc35b07970354af2924653ba0b00a863d9153c0313"
     },
     "linux-x64": {
       "zig_target": "x86_64-linux",
       "lib": "libkuri_ffi.so",
-      "sha256": "9c874005b5d4b32ed52999a68a4f5961b304e072cf152bac28aa86351d662ac7"
+      "sha256": "de4075e2444204d2f860d1293577d4389247c6fe55049c7505196d9e8eb5f4fb"
     }
   }
 }