agentic-stealth-browser 2.5.0__tar.gz → 2.7.0__tar.gz

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/CHANGELOG.md

@@ -9,6 +9,75 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.7.0] — Enterprise Hardening (2026-07-18)
+
+Auditability, supply-chain, and business-facing hardening from a full enterprise
+audit. No breaking changes; no runtime behavior change on existing flows.
+
+### Added
+- **Acceptable Use Policy** (`ACCEPTABLE_USE.md`) + a `## Legal & Acceptable Use`
+  section in the README — authorized-use scope, prohibited uses (ToS/robots/CFAA/
+  GDPR-CCPA), operator responsibility, and rate-limit good-citizenship, for an
+  anti-bot tool that enterprise/legal review can pass through procurement.
+- **Compliance docs** (`docs/`): `INCIDENT_RESPONSE.md` (credential/key-compromise
+  playbook, triage severities, post-incident), `KEY_MANAGEMENT.md` (secret
+  inventory + env sourcing + rotation), `DATA_HANDLING.md` (what is persisted,
+  data-controller statement, retention + deletion posture).
+- **Navigation success/failure metrics** (`core/agent_browser.py`): `safe_goto`
+  now emits `requests_success` / `requests_failed` counters and calls
+  `metrics.record_error("navigation", …)` on failure, so `MetricsCollector`'s
+  `success_rate` reflects real traffic instead of being permanently 100%.
+
+### Changed
+- **Dependency lower bounds** (`pyproject.toml`): the seven previously-unpinned
+  runtime deps and the four dev deps now carry `>=` floors set to
+  CVE-safe/current releases (e.g. `aiohttp>=3.10.11`, `cryptography>=43.0.1`,
+  `jinja2>=3.1.5`), so a fresh install can no longer resolve a known-vulnerable
+  release. No upper caps — existing installs are unaffected.
+- **README claims hedged** for an enterprise audience: the tagline and the
+  "zero-flag" line are now framed as a point-in-time canary snapshot, not a
+  guarantee.
+- `pyproject.toml` version 2.6.0 → 2.7.0; MCP `clientInfo.version` handshake
+  strings in the two stdio adapters aligned to 2.7.0.
+
+### Security
+- **Release-metadata gate** (`.github/workflows/publish.yml`): the build job now
+  runs `twine check --strict dist/*` before upload, so malformed metadata can no
+  longer burn an immutable PyPI version.
+- **SECURITY.md supported-versions table** corrected from a stale `0.8.x` to
+  `2.7.x` (`< 2.7` unsupported), with a note that the table is updated every
+  release.
+
+### Testing
+- The five live-Chromium attach tests in `tests/test_attach_over_cdp.py` are now
+  marked `@pytest.mark.e2e`, so the default (non-e2e) CI run no longer errors when
+  a browser is unavailable and the deterministic subset stays green.
+
+## [2.6.0] — Stealth & MCP Hardening (2026-07-12)
+
+### Added
+- **`attach_mode` param** (`stealth/advanced_stealth.py`): `get_stealth_script(..., attach_mode=True)` skips `navigator.platform` / WebGL vendor-renderer / screen-DPR overrides when attaching to a real browser, so the injected fingerprint no longer contradicts the real OS/GPU. `core/agent_browser.py`'s `attach_over_cdp()` now passes `attach_mode=True`.
+- **`AdapterToolError`** (`production/adapters/`): raised when an MCP tool result carries `isError: true` — previously a failed `navigate`/`click`/`fill` call reported silent success.
+- **Canonical `connected` field** on adapter `status()` (`production/adapters/`), with a `running` back-compat alias.
+- **CDP bridge profile resolution** (`production/adapters/cdp_bridge.py`): `launch(profile)` now accepts either a raw `ws/wss/http(s)` endpoint or a profile name resolved via `CDP_ENDPOINT_<PROFILE>` / `CDP_ENDPOINT` env, aligning its signature with the `BackendAdapter` protocol and sibling adapters.
+- Adapter, stealth, and recovery unit tests covering the above (`tests/test_adapter_*.py`, `tests/test_stealth_modules.py`, `tests/test_recovery_state_machine.py`).
+- `CLAUDE.md`: contributor guidance (setup, test commands mirroring CI, architecture map, conventions).
+
+### Fixed
+- **Per-patch isolation** (`stealth/advanced_stealth.py`): each stealth patch now runs in its own try/catch, so one API mismatch no longer aborts every patch queued after it.
+- **Rotation failure correctness** (`recovery/anti_block_orchestrator.py`): a failed `ROTATE_*` action now returns `False` and records `_update_recovery_history(success=False)` instead of silently succeeding; per-attempt session/proxy names get a uuid suffix to avoid collisions; a redundant tentative history update was removed.
+- **playwright-mcp pin** (`production/adapters/playwright_mcp.py`): pinned to `@playwright/mcp@0.0.78` with corrected `browser_navigate`/`browser_click`/`browser_type` schema (`element`/`target`/`text`).
+
+### Security
+- **WebRTC leak fix** (`stealth/advanced_stealth.py`): `onicecandidate` is now rebound per-instance instead of on the shared prototype (no cross-instance/global leak); `addEventListener('icecandidate', ...)` listeners are now filtered too; `createDataChannel` restored to a real passthrough.
+- **PolicyEngine + ApprovalGate wiring** (`production/mcp_server.py`): both now sit in the `tools/call` dispatch path and workflow replay. Fail-open by default — no policy files means allow-all and auto-approve, so existing flows are unchanged — operators opt into enforcement via `STEALTH_MCP_POLICY` env or an approval callback.
+- **Honesty docstring** (`production/mcp_session_isolation.py`): documents that `SessionEnforcer` is defined and tested but NOT wired into the dispatch path — inert until a multi-client transport exists (single-client stdio has no per-context token).
+
+### Changed
+- `core/agent_browser.py`: `attach_over_cdp()` passes `attach_mode=True` through to the stealth script generator (see Added).
+
+---
+
 ## [2.5.0] — Real Dashboard Backend Adapters (#444) (2026-06-07)
 
 ### Added
@@ -405,7 +474,8 @@ See the full v0.9.0 milestone and the stacked PRs #383/#384/#385 for implementat
 
 ---
 
-[unreleased]: https://github.com/shanewas/agentic-stealth-browser/compare/v2.3.0...HEAD
+[unreleased]: https://github.com/shanewas/agentic-stealth-browser/compare/v2.6.0...HEAD
+[2.6.0]: https://github.com/shanewas/agentic-stealth-browser/releases/tag/v2.6.0
 [2.3.0]: https://github.com/shanewas/agentic-stealth-browser/releases/tag/v2.3.0
 [2.1.1]: https://github.com/shanewas/agentic-stealth-browser/releases/tag/v2.1.1
 [2.1.0]: https://github.com/shanewas/agentic-stealth-browser/releases/tag/v2.1.0

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentic-stealth-browser
-Version: 2.5.0
+Version: 2.7.0
 Summary: Production-grade, human-mimicking browser automation framework for autonomous agents. Survives modern anti-bot systems.
 Author-email: Shane W <shanewas@users.noreply.github.com>
 License-Expression: MIT
@@ -23,23 +23,23 @@ Classifier: Framework :: AsyncIO
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: playwright
-Requires-Dist: aiohttp
-Requires-Dist: cryptography
-Requires-Dist: pyyaml
-Requires-Dist: fastapi
-Requires-Dist: jinja2
-Requires-Dist: uvicorn
+Requires-Dist: playwright>=1.45
+Requires-Dist: aiohttp>=3.10.11
+Requires-Dist: cryptography>=43.0.1
+Requires-Dist: pyyaml>=6.0.2
+Requires-Dist: fastapi>=0.115.0
+Requires-Dist: jinja2>=3.1.5
+Requires-Dist: uvicorn>=0.32.0
 Provides-Extra: dev
-Requires-Dist: pytest; extra == "dev"
-Requires-Dist: pytest-asyncio; extra == "dev"
-Requires-Dist: pytest-cov; extra == "dev"
-Requires-Dist: httpx; extra == "dev"
+Requires-Dist: pytest>=8.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
+Requires-Dist: pytest-cov>=5.0; extra == "dev"
+Requires-Dist: httpx>=0.27; extra == "dev"
 Dynamic: license-file
 
 # Agentic Stealth Browser
 
-**Playwright gets detected. This doesn't.**
+**Playwright gets detected. This is much harder to detect.**
 
 [![CI](https://github.com/shanewas/agentic-stealth-browser/actions/workflows/ci.yml/badge.svg)](https://github.com/shanewas/agentic-stealth-browser/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
@@ -51,6 +51,10 @@ Dynamic: license-file
   <img src="assets/hn-demo.gif" alt="Agentic Stealth Browser Demo" width="90%">
 </p>
 
+## Legal & Acceptable Use
+
+This is an anti-bot-evasion tool. Read the [Acceptable Use Policy](ACCEPTABLE_USE.md) before use — you are responsible for using it lawfully and within the target site's Terms of Service.
+
 ## What is this
 
 A production-grade stealth browser automation library for Python, built on Playwright.
@@ -95,7 +99,8 @@ Sites don't just check your User-Agent anymore. They check *everything*:
 | **Account warming** | Nothing | 14-day graduated ramp-up per account |
 
 Result: **passes bot.sannysoft.com, pixelscan.net, and CreepJS** with zero flags in
-headless mode (detection canaries run every 4 hours via `docs/canary.md`).
+headless mode as of the latest 4-hourly canary run (detection canaries run every 4 hours
+via `docs/canary.md`).
 
 ---
 
@@ -224,6 +229,29 @@ live E2E (`RUN_E2E_ANTI_BLOCK=1` to enable).
 
 ---
 
+## New in v2.6.0
+
+- **Stealth patch isolation** — per-patch try/catch in `advanced_stealth.py`; one
+  API mismatch no longer aborts every patch queued after it
+- **Attach-mode fingerprint coherence** — new `attach_mode` skips
+  navigator.platform / WebGL vendor-renderer / screen-DPR overrides that would
+  otherwise contradict a real attached browser's OS/GPU
+- **WebRTC leak hardening** — per-instance `onicecandidate` rebind (no
+  prototype-global leak); the `addEventListener('icecandidate')` variant is
+  now filtered too
+- **MCP policy/approval gates** — `PolicyEngine` + `ApprovalGate` wired into
+  the dispatch path, fail-open by default (opt-in enforcement via
+  `STEALTH_MCP_POLICY` env)
+- **Adapter `isError` surfacing** — failed MCP tool calls now raise
+  `AdapterToolError` instead of reporting silent success; playwright-mcp
+  pinned to 0.0.78 with the corrected tool schema
+- **Recovery rotation-failure correctness** — failed rotations now propagate
+  and record history instead of silently succeeding
+
+See [CHANGELOG.md](CHANGELOG.md) for the full release history.
+
+---
+
 ## New in v2.5.0
 
 - **BackendAdapter protocol** — pluggable execution backends (M0–M4 shipped)

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/README.md

@@ -1,6 +1,6 @@
 # Agentic Stealth Browser
 
-**Playwright gets detected. This doesn't.**
+**Playwright gets detected. This is much harder to detect.**
 
 [![CI](https://github.com/shanewas/agentic-stealth-browser/actions/workflows/ci.yml/badge.svg)](https://github.com/shanewas/agentic-stealth-browser/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
@@ -12,6 +12,10 @@
   <img src="assets/hn-demo.gif" alt="Agentic Stealth Browser Demo" width="90%">
 </p>
 
+## Legal & Acceptable Use
+
+This is an anti-bot-evasion tool. Read the [Acceptable Use Policy](ACCEPTABLE_USE.md) before use — you are responsible for using it lawfully and within the target site's Terms of Service.
+
 ## What is this
 
 A production-grade stealth browser automation library for Python, built on Playwright.
@@ -56,7 +60,8 @@ Sites don't just check your User-Agent anymore. They check *everything*:
 | **Account warming** | Nothing | 14-day graduated ramp-up per account |
 
 Result: **passes bot.sannysoft.com, pixelscan.net, and CreepJS** with zero flags in
-headless mode (detection canaries run every 4 hours via `docs/canary.md`).
+headless mode as of the latest 4-hourly canary run (detection canaries run every 4 hours
+via `docs/canary.md`).
 
 ---
 
@@ -185,6 +190,29 @@ live E2E (`RUN_E2E_ANTI_BLOCK=1` to enable).
 
 ---
 
+## New in v2.6.0
+
+- **Stealth patch isolation** — per-patch try/catch in `advanced_stealth.py`; one
+  API mismatch no longer aborts every patch queued after it
+- **Attach-mode fingerprint coherence** — new `attach_mode` skips
+  navigator.platform / WebGL vendor-renderer / screen-DPR overrides that would
+  otherwise contradict a real attached browser's OS/GPU
+- **WebRTC leak hardening** — per-instance `onicecandidate` rebind (no
+  prototype-global leak); the `addEventListener('icecandidate')` variant is
+  now filtered too
+- **MCP policy/approval gates** — `PolicyEngine` + `ApprovalGate` wired into
+  the dispatch path, fail-open by default (opt-in enforcement via
+  `STEALTH_MCP_POLICY` env)
+- **Adapter `isError` surfacing** — failed MCP tool calls now raise
+  `AdapterToolError` instead of reporting silent success; playwright-mcp
+  pinned to 0.0.78 with the corrected tool schema
+- **Recovery rotation-failure correctness** — failed rotations now propagate
+  and record history instead of silently succeeding
+
+See [CHANGELOG.md](CHANGELOG.md) for the full release history.
+
+---
+
 ## New in v2.5.0
 
 - **BackendAdapter protocol** — pluggable execution backends (M0–M4 shipped)

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/SECURITY.md

@@ -4,8 +4,10 @@
 
 | Version | Supported          |
 | ------- | ------------------ |
-| 0.8.x   | :white_check_mark: |
-| < 0.8   | :x:                |
+| 2.7.x   | :white_check_mark: |
+| < 2.7   | :x:                |
+
+This table is updated as part of every release; a release is not complete until the current minor version appears here.
 
 ## Reporting a Vulnerability
 

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/agentic_stealth_browser.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentic-stealth-browser
-Version: 2.5.0
+Version: 2.7.0
 Summary: Production-grade, human-mimicking browser automation framework for autonomous agents. Survives modern anti-bot systems.
 Author-email: Shane W <shanewas@users.noreply.github.com>
 License-Expression: MIT
@@ -23,23 +23,23 @@ Classifier: Framework :: AsyncIO
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: playwright
-Requires-Dist: aiohttp
-Requires-Dist: cryptography
-Requires-Dist: pyyaml
-Requires-Dist: fastapi
-Requires-Dist: jinja2
-Requires-Dist: uvicorn
+Requires-Dist: playwright>=1.45
+Requires-Dist: aiohttp>=3.10.11
+Requires-Dist: cryptography>=43.0.1
+Requires-Dist: pyyaml>=6.0.2
+Requires-Dist: fastapi>=0.115.0
+Requires-Dist: jinja2>=3.1.5
+Requires-Dist: uvicorn>=0.32.0
 Provides-Extra: dev
-Requires-Dist: pytest; extra == "dev"
-Requires-Dist: pytest-asyncio; extra == "dev"
-Requires-Dist: pytest-cov; extra == "dev"
-Requires-Dist: httpx; extra == "dev"
+Requires-Dist: pytest>=8.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
+Requires-Dist: pytest-cov>=5.0; extra == "dev"
+Requires-Dist: httpx>=0.27; extra == "dev"
 Dynamic: license-file
 
 # Agentic Stealth Browser
 
-**Playwright gets detected. This doesn't.**
+**Playwright gets detected. This is much harder to detect.**
 
 [![CI](https://github.com/shanewas/agentic-stealth-browser/actions/workflows/ci.yml/badge.svg)](https://github.com/shanewas/agentic-stealth-browser/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
@@ -51,6 +51,10 @@ Dynamic: license-file
   <img src="assets/hn-demo.gif" alt="Agentic Stealth Browser Demo" width="90%">
 </p>
 
+## Legal & Acceptable Use
+
+This is an anti-bot-evasion tool. Read the [Acceptable Use Policy](ACCEPTABLE_USE.md) before use — you are responsible for using it lawfully and within the target site's Terms of Service.
+
 ## What is this
 
 A production-grade stealth browser automation library for Python, built on Playwright.
@@ -95,7 +99,8 @@ Sites don't just check your User-Agent anymore. They check *everything*:
 | **Account warming** | Nothing | 14-day graduated ramp-up per account |
 
 Result: **passes bot.sannysoft.com, pixelscan.net, and CreepJS** with zero flags in
-headless mode (detection canaries run every 4 hours via `docs/canary.md`).
+headless mode as of the latest 4-hourly canary run (detection canaries run every 4 hours
+via `docs/canary.md`).
 
 ---
 
@@ -224,6 +229,29 @@ live E2E (`RUN_E2E_ANTI_BLOCK=1` to enable).
 
 ---
 
+## New in v2.6.0
+
+- **Stealth patch isolation** — per-patch try/catch in `advanced_stealth.py`; one
+  API mismatch no longer aborts every patch queued after it
+- **Attach-mode fingerprint coherence** — new `attach_mode` skips
+  navigator.platform / WebGL vendor-renderer / screen-DPR overrides that would
+  otherwise contradict a real attached browser's OS/GPU
+- **WebRTC leak hardening** — per-instance `onicecandidate` rebind (no
+  prototype-global leak); the `addEventListener('icecandidate')` variant is
+  now filtered too
+- **MCP policy/approval gates** — `PolicyEngine` + `ApprovalGate` wired into
+  the dispatch path, fail-open by default (opt-in enforcement via
+  `STEALTH_MCP_POLICY` env)
+- **Adapter `isError` surfacing** — failed MCP tool calls now raise
+  `AdapterToolError` instead of reporting silent success; playwright-mcp
+  pinned to 0.0.78 with the corrected tool schema
+- **Recovery rotation-failure correctness** — failed rotations now propagate
+  and record history instead of silently succeeding
+
+See [CHANGELOG.md](CHANGELOG.md) for the full release history.
+
+---
+
 ## New in v2.5.0
 
 - **BackendAdapter protocol** — pluggable execution backends (M0–M4 shipped)

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/agentic_stealth_browser.egg-info/SOURCES.txt

@@ -46,6 +46,9 @@ core/py.typed
 core/session_checkpoint.py
 core/types.py
 docs/ATTACH_OVER_CDP.md
+docs/DATA_HANDLING.md
+docs/INCIDENT_RESPONSE.md
+docs/KEY_MANAGEMENT.md
 docs/README.md
 docs/agentic-stealth-browser-analysis-report.md
 docs/canary.md
@@ -182,6 +185,9 @@ tests/test_workflow_orchestrator.py
 tests/test_workflow_schema.py
 tests/test_workflow_schema_unit.py
 tests/test_workflow_versioning.py
+tests/stealth_harness/__init__.py
+tests/stealth_harness/collect.py
+tests/stealth_harness/test_stealth.py
 workflows/__init__.py
 workflows/action_interpreter.py
 workflows/player.py

agentic_stealth_browser-2.7.0/agentic_stealth_browser.egg-info/requires.txt

@@ -0,0 +1,13 @@
+playwright>=1.45
+aiohttp>=3.10.11
+cryptography>=43.0.1
+pyyaml>=6.0.2
+fastapi>=0.115.0
+jinja2>=3.1.5
+uvicorn>=0.32.0
+
+[dev]
+pytest>=8.0
+pytest-asyncio>=0.23
+pytest-cov>=5.0
+httpx>=0.27

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/core/agent_browser.py

@@ -1272,6 +1272,7 @@ class AgentBrowser:
                 self.account_warming.record_page_visit(url)
             self.connection_pool.release_context(domain)
             self.adaptive_tuner.record_feedback(blocked=False, platform=platform)
+            self.metrics.increment("requests_success")
             return True
         except Exception as e:
             # P3: Record failure to all tracking systems
@@ -1284,6 +1285,8 @@ class AgentBrowser:
             self.logger.log_error(
                 "safe_goto_failed", str(e), {"url": url, "platform": platform}
             )
+            self.metrics.increment("requests_failed")
+            self.metrics.record_error("navigation", str(e))
             return False
 
     async def load_cookies(self, cookies_path: str):
@@ -2274,7 +2277,9 @@ class AgentBrowser:
             if apply_stealth:
                 session_name = (self.session or {}).get("name", "default-session")
                 fp_seed = f"agentic-{session_name}-canvas-v4"
-                stealth_script = get_stealth_script(fingerprint_seed=fp_seed)
+                stealth_script = get_stealth_script(
+                    fingerprint_seed=fp_seed, attach_mode=True
+                )
                 try:
                     await ctx.add_init_script(stealth_script)
                     stealth_installed = True

agentic_stealth_browser-2.7.0/docs/DATA_HANDLING.md

@@ -0,0 +1,19 @@
+# Data Handling & Retention
+
+## What the tool persists
+
+- Scraped results (wherever the operator's workflow writes them)
+- Cookies under `sessions/`
+- Screenshots under `checkpoints/`
+
+## Data controller
+
+The operator running this tool is the data controller for any data it collects or persists. The maintainers are not.
+
+## Retention recommendation
+
+By default, retain persisted files no longer than necessary for the operator's task — 30 days is a reasonable starting point unless the operator's own policy or applicable law requires otherwise.
+
+## Deletion
+
+Deletion is the operator's responsibility. Documented deletion means removing the relevant files under `sessions/` and `checkpoints/`.

agentic_stealth_browser-2.7.0/docs/INCIDENT_RESPONSE.md

@@ -0,0 +1,22 @@
+# Security Incident Response
+
+## Reporting
+
+See [SECURITY.md](../SECURITY.md) for how to report a vulnerability.
+
+## Credential / Key Compromise
+
+1. Rotate the leaked secret.
+2. Invalidate live dashboard sessions by rotating `DashboardSettings.secret_key`.
+3. Delete affected session cookie files under `sessions/`.
+4. Force re-login for all operators.
+
+## Triage Severity
+
+- **SEV1** — key/credential leak
+- **SEV2** — data exposure
+- **SEV3** — availability
+
+## Post-Incident
+
+Record the incident in the CHANGELOG Security section.

agentic_stealth_browser-2.7.0/docs/KEY_MANAGEMENT.md

@@ -0,0 +1,9 @@
+# Key Management
+
+| Secret | Source | Rotation procedure |
+|---|---|---|
+| Cookie encryption key | env var | Generate a new key, re-encrypt or discard existing session cookie files under `sessions/`, force re-login. |
+| Dashboard `secret_key` (`DashboardSettings.secret_key`) | env var | Set a new value, restart the dashboard process — this invalidates all live dashboard sessions. |
+| HMAC / audit keys | env var | Generate a new key, redeploy, allow a short overlap window if signed artifacts must remain verifiable during rotation. |
+
+Keys must come from environment variables and must never be committed to the repository. Rotation should be performed immediately on suspected compromise (see [docs/INCIDENT_RESPONSE.md](INCIDENT_RESPONSE.md)) and periodically as routine hygiene.

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/production/adapters/__init__.py

@@ -9,6 +9,7 @@ Public surface:
     Capability             - the feature enum
     AdapterLaunchError     - cannot start (runtime)
     AdapterCapabilityError - cannot perform a requested action
+    AdapterToolError       - MCP tool call reported isError: true
     AdapterNotFoundError   - get_adapter() was called with an unknown name
     BACKEND_REGISTRY       - mutable dict[name -> Adapter class]
     get_adapter(name)      - registry lookup with friendly error
@@ -21,6 +22,7 @@ from production.adapters.base import (
     AdapterCapabilityError,
     AdapterLaunchError,
     AdapterNotFoundError,
+    AdapterToolError,
     BackendAdapter,
     Capability,
 )
@@ -103,6 +105,7 @@ __all__ = [
     "AdapterCapabilityError",
     "AdapterLaunchError",
     "AdapterNotFoundError",
+    "AdapterToolError",
     "BACKEND_REGISTRY",
     "BackendAdapter",
     "Capability",

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/production/adapters/agentic_stealth_mcp.py

@@ -24,6 +24,7 @@ from production.adapters._jsonrpc_stdio import JsonRpcStdioClient
 from production.adapters.base import (
     AdapterCapabilityError,
     AdapterLaunchError,
+    AdapterToolError,
     Capability,
 )
 
@@ -118,7 +119,7 @@ class AgenticStealthMCPAdapter:
                     "protocolVersion": "2024-11-05",
                     "clientInfo": {
                         "name": "agentic-stealth-browser-dashboard",
-                        "version": "2.5.0",
+                        "version": "2.7.0",
                     },
                     "capabilities": {},
                 },
@@ -199,9 +200,11 @@ class AgenticStealthMCPAdapter:
         return str(path)
 
     async def status(self) -> dict[str, Any]:
+        alive = self._proc is not None and self._proc.returncode is None
         return {
             "backend": self.name,
-            "running": self._proc is not None and self._proc.returncode is None,
+            "connected": alive,
+            "running": alive,  # back-compat alias; "connected" is canonical
             "headless": self._headless,
             "profile": self._profile,
         }
@@ -215,7 +218,12 @@ class AgenticStealthMCPAdapter:
         response = await self._client.request(
             "tools/call", {"name": name, "arguments": arguments}
         )
-        return response.get("result", {})
+        result = response.get("result", {})
+        if result.get("isError"):
+            raise AdapterToolError(
+                f"MCP tool {name!r} failed: {result.get('content')!r}"
+            )
+        return result
 
     def _require_capability(self, cap: Capability) -> None:
         """Raise AdapterCapabilityError when the active adapter does not

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/production/adapters/base.py

@@ -46,6 +46,20 @@ class AdapterCapabilityError(RuntimeError):
     """
 
 
+class AdapterToolError(RuntimeError):
+    """Raised when an MCP tool call completes as a valid JSON-RPC response
+    but reports a tool-level failure (``result["isError"] is True``).
+
+    MCP servers report a failed tool execution (bad selector, navigation
+    timeout, etc.) as a *successful* JSON-RPC call whose result carries
+    ``isError: true`` — not as a JSON-RPC protocol-level error. Without this
+    exception, adapters would silently treat a failed navigate/click/fill/
+    screenshot as success. Distinct from AdapterLaunchError (process/handshake
+    failures) and the plain RuntimeError raised by JsonRpcStdioClient for
+    JSON-RPC protocol errors (e.g. unknown method).
+    """
+
+
 class AdapterNotFoundError(LookupError):
     """Raised by get_adapter() when the requested name is not in
     BACKEND_REGISTRY. Inherits from LookupError (the natural superclass for

{agentic_stealth_browser-2.5.0 → agentic_stealth_browser-2.7.0}/production/adapters/cdp_bridge.py

@@ -14,6 +14,7 @@ running and reachable at the CDP endpoint.
 
 from __future__ import annotations
 
+import os
 from typing import Any, Optional
 
 from playwright.async_api import (
@@ -72,17 +73,24 @@ class CDPBridgeAdapter:
         return capability in self.capabilities()
 
     # ------------------------------------------------------------------ launch
-    async def launch(self, endpoint: str, headless: bool = True) -> None:
+    async def launch(self, profile: str, headless: bool = True) -> None:
         """Connect to an existing CDP endpoint. Does NOT spawn a new browser.
 
         Args:
-            endpoint: ws:// or wss:// URL of the Chrome DevTools Protocol server.
+            profile: either a raw ws:// / wss:// / http(s):// CDP endpoint URL
+                (back-compat with direct callers of this adapter), or a
+                profile name — consistent with the base.py contract and the
+                M2/M3 adapters — resolved to an endpoint via the
+                ``CDP_ENDPOINT_<PROFILE>`` (or generic ``CDP_ENDPOINT``)
+                environment variable.
             headless: cosmetic flag, passed to spec but the remote browser's
                       display state is determined by its own launch args.
 
         Raises:
-            AdapterLaunchError: if the connection cannot be established.
+            AdapterLaunchError: if the connection cannot be established, or
+                (for a profile name) if no endpoint is configured for it.
         """
+        endpoint = self._resolve_endpoint(profile)
         self._endpoint = endpoint
         self._playwright = await async_playwright().start()
         try:
@@ -103,6 +111,23 @@ class CDPBridgeAdapter:
         self._context = await self._browser.new_context()
         self._owns_page = True
 
+    # ponytail: profile -> endpoint resolution is a flat env-var lookup, not
+    # a real profile registry. Fine while operators set one CDP target per
+    # profile by hand; upgrade to a config-file-backed mapping if/when the
+    # dashboard needs to drive many named CDP profiles at once.
+    @staticmethod
+    def _resolve_endpoint(profile: str) -> str:
+        if profile.startswith(("ws://", "wss://", "http://", "https://")):
+            return profile
+        env_key = f"CDP_ENDPOINT_{profile.upper().replace('-', '_')}"
+        endpoint = os.environ.get(env_key) or os.environ.get("CDP_ENDPOINT")
+        if not endpoint:
+            raise AdapterLaunchError(
+                f"No CDP endpoint configured for profile {profile!r}; "
+                f"set {env_key} or CDP_ENDPOINT to a ws:// CDP URL"
+            )
+        return endpoint
+
     # ------------------------------------------------------------------ close
     async def close(self) -> None:
         """Tear down. Honors the v2.4.1 attach contract: only closes owned pages.
@@ -180,6 +205,7 @@ class CDPBridgeAdapter:
         return {
             "backend": self.name,
             "connected": connected,
+            "running": connected,  # back-compat alias; "connected" is canonical
             "endpoint": self._endpoint,
             "owns_page": self._owns_page,
         }