Files
2026-07-13 12:22:59 +08:00

28 KiB
Raw Permalink Blame History

browser

Open, reuse, close, and script browser tabs against headless Chromium, CDP-attached apps, or cmux surfaces.

Source

  • Entry: packages/coding-agent/src/tools/browser.ts
  • Model-facing prompt: packages/coding-agent/src/prompts/tools/browser.md
  • Key collaborators:
    • packages/coding-agent/src/tools/browser/tab-supervisor.ts — global tab registry; worker lifecycle; run/close coordination.
    • packages/coding-agent/src/tools/browser/tab-worker.ts — executes run code; implements the tab helper API.
    • packages/coding-agent/src/tools/browser/tab-worker-entry.ts — worker-thread transport bootstrap.
    • packages/coding-agent/src/tools/browser/registry.ts — browser-handle registry keyed by browser kind.
    • packages/coding-agent/src/tools/browser/launch.ts — Puppeteer loading, Chromium resolution/download, headless launch, stealth injection.
    • packages/coding-agent/src/tools/browser/attach.ts — CDP attach/reuse, target picking, spawned-app process handling.
    • packages/coding-agent/src/tools/browser/tab-protocol.ts — worker init/run/result message schema.
    • packages/coding-agent/src/tools/browser/readable.tstab.extract() readability extraction.
    • packages/coding-agent/src/tools/browser/aria/aria-snapshot.tscaptureAriaSnapshot() (puppeteer/CDP path) and buildAriaSnapshotScript() (cmux path); imports the committed aria-snapshot.bundle.txt.
    • packages/coding-agent/src/tools/browser/aria/aria-snapshot.bundle.txt — generated, committed artifact: Playwright's injected ARIA-snapshot sources (Apache-2.0, (c) Microsoft; ARIA tree + W3C accessible-name computation) bundled to a CJS module. Upstream sources are not vendored into the repo.
    • packages/coding-agent/scripts/generate-aria-snapshot.ts — fetches the pinned Playwright sources to a temp dir and bundles them into aria-snapshot.bundle.txt (CJS, browser target). Dev-time, network-bound; only the bundle is committed.
    • packages/coding-agent/src/tools/browser/cmux/rpc.ts — cmux browser-kind resolution plus snapshot/eval/wait-state helpers for the cmux backend.
    • packages/coding-agent/src/tools/browser/cmux/socket-client.tsCmuxSocketClient: JSON-RPC over the cmux unix socket.
    • packages/coding-agent/src/tools/browser/cmux/cmux-tab.tsCmuxTab surface helper API and runCmuxCode() execution path.
    • packages/coding-agent/src/eval/js/shared/runtime.ts — shared JsRuntime that executes run code (same engine as the eval JS tool); both the worker and cmux backends delegate to it.
    • packages/coding-agent/src/tools/browser/render.ts — TUI rendering for open/close status lines and run JS cells.
    • packages/coding-agent/src/tools/puppeteer/00_stealth_tampering.txt — mask patched functions/descriptors as native.
    • packages/coding-agent/src/tools/puppeteer/01_stealth_activity.txt — synthesize visibility/focus/scroll activity.
    • packages/coding-agent/src/tools/puppeteer/02_stealth_hairline.txt — fix Modernizr hairline detection.
    • packages/coding-agent/src/tools/puppeteer/03_stealth_botd.txt — spoof navigator.webdriver, window.chrome, and Chrome fingerprint surfaces.
    • packages/coding-agent/src/tools/puppeteer/04_stealth_iframe.txt — patch iframe contentWindow/srcdoc behavior.
    • packages/coding-agent/src/tools/puppeteer/05_stealth_webgl.txt — spoof WebGL vendor/renderer/precision.
    • packages/coding-agent/src/tools/puppeteer/06_stealth_screen.txt — normalize screen/viewport/device-pixel-ratio values.
    • packages/coding-agent/src/tools/puppeteer/07_stealth_fonts.txt — spoof local fonts and perturb canvas text rendering.
    • packages/coding-agent/src/tools/puppeteer/08_stealth_audio.txt — spoof audio latency/sample-rate and perturb offline rendering.
    • packages/coding-agent/src/tools/puppeteer/09_stealth_locale.txt — force locale/languages/timezone/date strings.
    • packages/coding-agent/src/tools/puppeteer/10_stealth_plugins.txt — synthesize navigator.plugins/navigator.mimeTypes.
    • packages/coding-agent/src/tools/puppeteer/11_stealth_hardware.txt — spoof navigator.hardwareConcurrency.
    • packages/coding-agent/src/tools/puppeteer/12_stealth_codecs.txt — spoof media codec support.
    • packages/coding-agent/src/tools/puppeteer/13_stealth_worker.txt — carry UA/platform spoofing into Worker/SharedWorker.

Inputs

Shared fields

Field Type Required Description
action "open" | "close" | "run" Yes Dispatches to the open/close/run path.
name string No Tab id. Defaults to "main". Tabs live in a process-global map, so the same name is reused across later calls and in-process subagents until closed.
timeout number No Tool wall-clock timeout in seconds. Defaults to 30; clamped to the browser tool range before execution.

action: "open"

Field Type Required Description
url string No Navigate after the tab is ready. Existing reusable tabs also navigate when url is supplied.
viewport { width: number; height: number; scale?: number } No Requested viewport. For headless launch this becomes the initial viewport; for a page it is applied with page.setViewport(). scale maps to Puppeteer deviceScaleFactor.
wait_until "load" | "domcontentloaded" | "networkidle0" | "networkidle2" No Navigation wait condition. Defaults to "load" where omitted, including open navigation and later tab.goto(...).
dialogs "accept" | "dismiss" No Installs a page dialog handler that auto-accepts or auto-dismisses dialogs. Omitted means no handler.
app { path?: string; cdp_url?: string; args?: string[]; target?: string } No Selects browser kind. With no app, the cmux backend is used when a cmux socket is available (CMUX_SOCKET_PATH, gated by the browser.cmux setting / PI_BROWSER_CMUX override); otherwise the session browser.headless setting applies. app.path is resolved against the session cwd and used as the executable path for spawn/attach reuse. app.cdp_url connects to an existing CDP endpoint. args are appended only when spawning app.path. target is only used for attached/spawned-app page selection.

action: "close"

Field Type Required Description
all boolean No Close every known tab. Omitted closes only name.
kill boolean No When a tab release drops a spawned-app browser handle to refcount 0, also terminate its process tree. Has no effect on headless shutdown and only disconnects connected CDP browsers.

action: "run"

Field Type Required Description
code string Yes Async-function body executed by the shared JsRuntime (src/eval/js/shared/runtime.ts, the same engine as the eval JS tool). In scope: browser-specific page, browser, tab, assert(cond, msg?), and wait(ms), plus the runtime prelude helpers (display, print, read, write, append, tree, env, tool, completion, agent, parallel, pipeline, log, phase, budget, ...) and ambient Bun globals (console, timers, URL, TextEncoder/TextDecoder, Buffer).

Outputs

The tool returns one result per call; no streaming partial output is emitted from the browser implementation itself.

  • open: text content with Opened or Reused, browser description, URL, and optional title. details includes action, name, browser, url, viewport, and the same text in details.result.
  • close: text content with either Closed ... or No tab named .... details includes action, name, and details.result.
  • run: ordered content array built as:
    1. every structured display output in execution order (object/image display(value) calls plus helper status events),
    2. final return value, JSON-stringified unless already a string,
    3. or Ran code on tab "..." if nothing else was produced.
  • display(value) is handled by the shared runtime's displayValue() (src/eval/js/shared/runtime.ts), then mapped to content by WorkerCore.#pushDisplay() (packages/coding-agent/src/tools/browser/tab-worker.ts):
    • { type: "image", data, mimeType } with decodable base64 becomes image content; an unrecognized data shape is dropped with a debug note.
    • any other object/array becomes pretty JSON text (JSON.stringify(value, null, 2)); a value that is not structured-cloneable is dropped with a debug note.
    • helper side effects (read/write/tree/...) emit status events that surface as compact JSON text.
    • primitive display(value) (string/number/...) and console.* flow to the text channel, which the worker forwards as debug logs rather than tool content; undefined is ignored.
  • tab.screenshot() also appends text plus an image content item unless silent: true; details.screenshots records persisted screenshot metadata { dest, mimeType, bytes, width, height }.
  • run details includes action, name, current browser/url when the tab exists, optional screenshots, and details.result containing only the concatenated text outputs. Combined run text is capped at the inline byte limit via enforceInlineByteCap(); over-cap text is saved as a session artifact (saveBrowserOutputArtifact()) and the capped text replaces it in content and details.result.

Flow

  1. BrowserTool.execute() (packages/coding-agent/src/tools/browser.ts) abort-checks, clamps timeout via clampTimeout("browser", ...), defaults name to "main", and dispatches on action.
  2. open resolves browser kind with resolveBrowserKind():
    • app.cdp_url{ kind: "connected" } after trimming trailing slashes.
    • app.path{ kind: "spawned" } after resolving against session cwd.
    • otherwise, resolveCmuxKind(){ kind: "cmux", socketPath, password?, surface? } when CMUX_SOCKET_PATH is set and cmux is enabled (browser.cmux setting, overridable by PI_BROWSER_CMUX).
    • otherwise → { kind: "headless", headless: session.settings.get("browser.headless") }.
  3. open rejects reusing the same tab name across different browser kinds (sameBrowserKind()); callers must close first.
  4. open acquires a browser handle through acquireBrowser() (packages/coding-agent/src/tools/browser/registry.ts):
    • existing connected handle is reused by browser-kind key;
    • stale disconnected handles are disposed and recreated;
    • headless launches via launchHeadlessBrowser();
    • connected waits for ${cdpUrl}/json/version, then puppeteer.connect();
    • spawned first tries findReusableCdp(), else kills same-path processes, allocates a free loopback port, spawns the executable with --remote-debugging-port=<port>, waits for CDP, then connects.
    • cmux connects a CmuxSocketClient to the cmux unix socket; existing cmux handles are reused unconditionally (no connection-liveness recheck).
  5. open acquires a tab through acquireTab() (packages/coding-agent/src/tools/browser/tab-supervisor.ts):
    • same-name + same-browser + alive tab is reused unless dialogs changed;
    • same-name but different browser handle, dead state, or changed dialog policy forces release and recreation;
    • reusing with a new url navigates by issuing await tab.goto(...) through the worker, defaulting to waitUntil: "load" when wait_until is omitted.
  6. New tabs build a WorkerInitPayload in buildInitPayload():
    • headless mode sends url, waitUntil, viewport, dialogs, and timeout; the worker defaults missing waitUntil to "load".
    • attach mode resolves a page with pickElectronTarget(), gets its target id, and sends targetId plus dialogs.
  7. acquireTab() spawns a dedicated Bun Worker from tab-worker-entry.ts; if that fails it falls back to inline execution in the main thread (spawnInlineWorker()), preserving behavior but losing protection against synchronous infinite loops.
  8. WorkerCore.#init() (packages/coding-agent/src/tools/browser/tab-worker.ts) connects back to the browser websocket endpoint. Headless mode opens a new page, applies stealth patches, applies viewport, installs dialog handling if requested, and optionally navigates. Attach mode resolves the requested target page and optionally installs dialog handling.
  9. On success the worker sends ready with { url, title, viewport, targetId }; the supervisor stores a TabSession, increments browser-handle refcount with holdBrowser(), and keeps the tab in a process-global Map<string, TabSession>.
  10. run requires non-empty code, looks up the tab with getTab(), then delegates to runInTab().
  11. runInTabWithSnapshot() rejects dead tabs and concurrent runs (Tab ... is busy), captures session cwd plus optional browser.screenshotDir, registers an abort hook, sends a run message to the worker, and races the result against timeoutMs + 750 ms. Timeouts force-kill the tab worker and, for headless tabs, close the orphaned page target.
  12. WorkerCore.#run() builds the tab API, lazily creates a shared JsRuntime via #ensureRuntime(), injects page/browser/tab/assert/wait with runtime.setRunScope(), and executes the user code through runtime.run(code, ...) raced against a cancel/timeout rejection. Cmux tabs take a parallel path through runCmuxCode(), which drives the same JsRuntime.
  13. The tab helper API implemented in #createTabApi() is:
  • tab.name: string
  • tab.page: Page
  • tab.signal?: AbortSignal
  • tab.url(): string
  • tab.title(): Promise<string>
  • tab.goto(url, { waitUntil? })
  • tab.observe({ includeAll?, viewportOnly? })
  • tab.ariaSnapshot(selector?, { depth?, boxes? })
  • tab.ref(id)
  • tab.screenshot({ selector?, fullPage?, save?, silent? })
  • tab.extract(format = "markdown")
  • tab.click(selector)
  • tab.type(selector, text)
  • tab.fill(selector, value)
  • tab.press(key, { selector? })
  • tab.scroll(deltaX, deltaY)
  • tab.drag(from, to)
  • tab.waitFor(selector, { timeout? })
  • tab.evaluate(fn, ...args)
  • tab.scrollIntoView(selector)
  • tab.select(selector, ...values)
  • tab.uploadFile(selector, ...filePaths)
  • tab.waitForUrl(pattern, { timeout? })
  • tab.waitForResponse(pattern, { timeout? })
  • tab.waitForSelector(selector, { timeout?, visible?, hidden? })
  • tab.waitForNavigation({ waitUntil?, timeout? })
  • tab.id(n)
  • tab.ref(id)
  1. Selector handling in normalizeSelector() accepts plain CSS and Puppeteer query handlers, and rewrites legacy Playwright-style prefixes p-text/, p-xpath/, p-pierce/, p-aria/; other p-* prefixes throw a ToolError. Playwright-only engines/pseudos (:has-text(), :text(), :visible, :nth-match(), :near()/:above()/…) on a CSS selector throw a ToolError pointing at the text//aria/ equivalents instead of stalling the action timeout.
  2. tab.observe() clears the element cache, takes a Puppeteer accessibility snapshot, filters to interactive nodes unless includeAll, optionally filters to viewport-visible nodes, assigns numeric ids, caches ElementHandles, and returns URL/title/viewport/scroll metadata plus elements. 15a. tab.ariaSnapshot() resolves the optional selector (via normalizeSelector()page.$, defaulting to the whole document) and runs the generated Playwright ARIA-snapshot bundle (src/tools/browser/aria/aria-snapshot.bundle.txt) via captureAriaSnapshot(). The bundle is wrapped in a new Function built worker-side (so page CSP never applies) and serialized to a CDP page.evaluate in the page's main world, returning Playwright-format YAML. It always runs in ai mode: every node gets a [ref=eN] id, clickables get [cursor=pointer], and matched DOM nodes are tagged with an _ariaRef expando. Existing _ariaRef expandos are cleared before each snapshot so ids renumber deterministically from e1 (the fresh module's counter resets each call); refs stay valid until the next snapshot. The cmux backend uses buildAriaSnapshotScript() over browser.eval instead (no ElementHandle; CSS selectors only for the root).
  3. tab.id(n) resolves the cached ElementHandle, verifies el.isConnected, and throws a stale-id error after cache invalidation if the DOM changed or the cache was cleared. 16a. tab.ref(id) resolves a [ref=eN] id from the latest ariaSnapshot() to a live ElementHandle via resolveAriaRefHandle() (page.evaluateHandle in the main world, walking the document + shadow roots for the matching _ariaRef), throwing if no element matches; it accepts a bare eN or a prefixed form. For inline selector use, parseAriaRefSelector() recognizes only the explicit aria-ref=eN / aria-ref/eN / ariaref/eN forms inside tab.click/type/fill/waitFor/scrollIntoView — a bare eN is intentionally rejected there so it does not collide with cmux's native observe ids. The cmux backend resolves the same explicit forms through its aria-ref SelectorSpec kind in findElement.
  4. tab.goto() clears the cached element ids before navigating. Any new tab.observe() also clears and rebuilds the cache.
  5. tab.click() uses a custom retry loop for text/... selectors to find an actionable visible match; other selectors use page.locator(...).click(). Interactive actions (click/fill/type/press/scroll/drag/scrollIntoView/select/uploadFile) and the waitFor* helpers run under a per-op deadline (min(cellBudget slack, ceiling)) threaded into both the puppeteer signal and .setTimeout(), so a stalled helper aborts the CDP action and rejects with a named tab.<op> timed out after <ms>ms that leaves cell budget — never the opaque whole-cell timeout. goto/evaluate stay uncapped.
  6. tab.screenshot() captures either the whole page or a selector PNG, downsizes a copy for model output, chooses a persistence path, writes the image to disk, records metadata, and optionally emits text + image display entries.
  7. display() calls accumulate in an array. After code finishes, the worker posts { displays, returnValue, screenshots }; BrowserTool.#run() appends the return value as trailing text content when not undefined.
  8. close releases one tab or all tabs via releaseTab() / releaseAllTabs(). Each tab aborts pending runs, asks the worker to close, waits up to 750 ms for a closed ack, terminates the worker, decrements browser refcount, and disposes the browser handle when refcount reaches zero.

Modes / Variants

  • Action dispatch
    • open — acquire/reuse browser + tab.
    • close — release one tab or all tabs.
    • run — execute JS inside the tab worker.
  • Browser kind
    • Headless: launches local Chromium with Puppeteer, applies stealth patches, and creates a fresh page per tab.
    • Spawned app (app.path): reuses an existing CDP-enabled process for that executable when possible; otherwise kills same-path processes, spawns the executable with remote debugging enabled, then attaches. No stealth patches are injected.
    • Connected browser (app.cdp_url): attaches to an already-running CDP endpoint. No process ownership; close only disconnects.
    • Cmux surface (browser.cmux): with no app and a cmux socket available (CMUX_SOCKET_PATH, enabled by the browser.cmux setting / PI_BROWSER_CMUX override), drives a cmux WKWebView surface over a unix-socket JSON-RPC client instead of Puppeteer. No Bun worker and no stealth patches; open opens a split (owning that surface), run executes via runCmuxCode(), and close issues surface.close for surfaces it owns (leaving the workspace's last surface open).
  • Target selection for attached/spawned browsers
    • With app.target, pickElectronTarget() returns the first page whose URL or title contains the case-insensitive substring.
    • Without app.target, it skips titles/URLs matching request handler|devtools|background page|background host|service worker and otherwise falls back to the first page.
  • Worker mode
    • Dedicated worker: normal path; user code runs off the main thread and can be aborted even when it blocks synchronously.
    • Inline fallback: activated when Bun worker spawn fails; behavior matches, but synchronous infinite loops on user code cannot be interrupted.
  • Dialog policy
    • No dialogs field: no auto-handler.
    • accept/dismiss: page dialog events are handled automatically.
    • Changing dialog policy on an existing live tab forces tab recreation instead of mutating the worker in place.
  • Screenshot persistence
    • save provided: persist full-resolution PNG at the resolved cwd-relative or absolute path.
    • browser.screenshotDir session setting set: persist full-resolution PNG under that directory with a timestamped filename.
    • Neither set: persist the resized image to a temp-file path under the OS temp dir.

Side Effects

  • Filesystem
    • loadPuppeteer() writes {} to <puppeteer-safe-dir>/package.json before importing puppeteer-core.
    • First headless launch may download Chromium into the Puppeteer cache directory returned by getPuppeteerDir().
    • tab.screenshot() creates parent directories and writes image files.
    • tab.uploadFile() resolves supplied paths against the session cwd.
  • Network
    • CDP attach paths poll http://127.0.0.1:<port>/json/version or the supplied cdp_url /json/version.
    • Headless/browser-attach sessions create CDP websocket connections.
    • Headless first-use Chromium download uses @puppeteer/browsers.
    • User page / tab operations perform normal browser network traffic.
  • Subprocesses / native bindings
    • Headless mode launches Chromium through Puppeteer.
    • app.path mode may spawn the target executable via Bun.spawn().
    • killExistingByPath() / gracefulKillTreeOnce() use @oh-my-pi/pi-natives process inspection/termination.
    • Worker mode uses Bun Worker; fallback mode does not.
  • Session state (transcript, memory, jobs, checkpoints, registries)
    • Browser handles are cached in a process-global Map keyed by browser kind in packages/coding-agent/src/tools/browser/registry.ts.
    • Tabs are cached in a process-global Map keyed by name in packages/coding-agent/src/tools/browser/tab-supervisor.ts.
    • run captures session cwd and optional browser.screenshotDir for screenshot/save path resolution.
    • restartForModeChange() drops only headless tabs.
  • User-visible prompts / interactive UI
    • None beyond normal tool output. Dialog auto-handling is invisible unless it fails and emits debug logs.
  • Background work / cancellation
    • open, run, CDP waits, and browser actions thread through abort signals.
    • A timed-out run aborts the worker execution path and can tear down the tab.

Limits & Caps

  • Tool timeout clamp: default 30 s, min 1 s, max 300 s (TOOL_TIMEOUTS.browser in packages/coding-agent/src/tools/tool-timeouts.ts).
  • Supervisor grace period around init/run/close: 750 ms (GRACE_MS in packages/coding-agent/src/tools/browser/tab-supervisor.ts).
  • Puppeteer protocol timeout for launch/connect operations: 60_000 ms (BROWSER_PROTOCOL_TIMEOUT_MS in packages/coding-agent/src/tools/browser/launch.ts).
  • Connected-browser CDP readiness wait: 5_000 ms before puppeteer.connect() (packages/coding-agent/src/tools/browser/registry.ts).
  • Spawned-app CDP readiness wait after spawn: 30_000 ms (packages/coding-agent/src/tools/browser/registry.ts).
  • CDP polling cadence: 150 ms in waitForCdp() (packages/coding-agent/src/tools/browser/attach.ts).
  • Headless default viewport: 1365x768 at deviceScaleFactor: 1.25 (DEFAULT_VIEWPORT in packages/coding-agent/src/tools/browser/launch.ts).
  • Screenshot model-attachment resize cap: maxWidth 1024, maxHeight 1024, maxBytes 150 * 1024, jpegQuality 70 (packages/coding-agent/src/tools/browser/tab-worker.ts).
  • tab.waitForUrl() polling interval: 200 ms (packages/coding-agent/src/tools/browser/tab-worker.ts).
  • Drag simulation uses 12 mouse-move steps (packages/coding-agent/src/tools/browser/tab-worker.ts).
  • Per-op fail-fast ceilings (packages/coding-agent/src/tools/browser/tab-worker.ts): quick page reads (observe/screenshot/extract/ariaSnapshot) min(cellBudget 1s, 20s); interactive actions + default waits min(cellBudget 1s, 15s); an explicit { timeout } on a waitFor* is clamped to cellBudget 1s (0/Infinity → that bound). See resolveOpTimeouts() / resolveWaitTimeout().

Errors

  • BrowserTool.execute() converts DOM-style AbortError into ToolAbortError; other errors propagate.
  • run hard-fails on missing code: Missing required parameter 'code' for action 'run'.
  • open fails when reusing a name across browser kinds: Tab "..." is bound to a different browser (...). Close it first.
  • runInTabWithSnapshot() fails when the tab is absent/dead (Tab "..." is not alive. Reopen it.) or already running (Tab "..." is busy).
  • Worker init failures and run failures are serialized through RunErrorPayload; ToolError and abort state are reconstructed on the host side by errorFromPayload().
  • Attached-target mismatches surface as:
    • No page targets available on the attached browser
    • No page target matched "...". Available pages:\n...
    • Target ... is no longer available on the attached browser
  • Spawned-app path validation requires an absolute executable path after cwd resolution, not an app bundle directory path.
  • Spawn/attach failures are wrapped into ToolErrors such as Timed out waiting for CDP endpoint ..., Failed to attach to ..., or Connected to ... but puppeteer.connect failed: ....
  • app.cdp_url must be the HTTP CDP discovery endpoint, not a ws:// URL; otherwise normalizeConnectedCdpUrl() throws browser app.cdp_url must be the HTTP CDP discovery endpoint ....
  • tab helper errors are user-visible ToolErrors, including unsupported selector prefix, stale/unknown element id, invalid drag target, missing upload files, non-<select> for tab.select(), non-file-input for tab.uploadFile(), and screenshot selector misses.
  • On run timeout, the worker reports Browser code execution timed out after <ms>ms (with (stalled on <op>) naming the still-running helper); a single stalled per-op helper instead rejects with tab.<op>(...) timed out after <ms>ms before the cell budget is reached. The supervisor may escalate to Browser code execution hung past grace; tab killed if the worker does not respond after the grace window.

Notes

  • loadPuppeteer() and loadPuppeteerInWorker() temporarily redirect cwd to a safe Puppeteer directory before importing puppeteer-core, because Puppeteer probes the current working directory during module load.
  • Headless launch prefers a detected system Chrome/Chromium, then PUPPETEER_EXECUTABLE_PATH, and only then downloads Chromium.
  • Headless launch always passes --no-sandbox, --disable-setuid-sandbox, --disable-blink-features=AutomationControlled, and a --window-size=... matching the initial viewport. It also ignores Puppeteer default args --disable-extensions, --disable-default-apps, and --disable-component-extensions-with-background-pages.
  • Proxy-related env vars only affect headless launch: PUPPETEER_PROXY, PUPPETEER_PROXY_BYPASS_LOOPBACK, and PUPPETEER_PROXY_IGNORE_CERT_ERRORS.
  • Stealth patches are applied only in headless mode. Spawned or externally connected browsers are intentionally left untouched.
  • applyStealthPatches() also strips Puppeteer's //# sourceURL=__puppeteer_evaluation_script__ suffix from CDP Runtime.evaluate / Runtime.callFunctionOn payloads.
  • tab.extract() reads page.content(), runs Readability first, then falls back to the first non-empty of [data-pagefind-body]/main article/article/main/[role='main']/body, and returns null if neither extraction path yields content.
  • close(all: true, kill: false) disconnects from spawned/connected browsers when the last tab closes but leaves spawned app processes running.
  • Headless orphan cleanup is best-effort: if a worker dies before closing its page, the supervisor searches browser targets by targetId and closes that page.
  • Console methods inside run do not appear in tool output; they are forwarded as debug/warn/error logs through the worker transport.