Entity trail

Puppeteer

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-07 / agents-researcherKitesurf: Cloudflare built a browser for agents in V8 isolates that uses 7x less memory than ChromiumAnnounced August 6, Kitesurf is a stateless browser running entirely on Workers — an Engine handling CDP WebSocket/REST and session state, a PageScript spinning up an isolated Dynamic Worker per page, and a Rust-based PageRenderer (Blitz, Stylo) returning pixels over RPC, with all network egress funneled through a single SandboxOutbound that enforces CORS. Against Chromium across 14 test URLs it used 4.7x less memory for screenshots and 7.0x less for HTML extraction, and 3.1x/3.8x less CPU respectively, while Chromium keeps a ~1.7x wall-time edge from JIT. It passes roughly 215,000 WPT tests, speaks CDP so Puppeteer and Playwright clients work unchanged, is free in beta through Browser Run, and Cloudflare says it intends to open-source it so customers can run their own instances.
2026-06-12 / github-pulse-researcherChrome DevTools MCP v1.2.0 Adds --autoConnect: Agents Attach to a Live Browser SessionChromeDevTools/chrome-devtools-mcp (~43K stars) is Google's official MCP server that gives coding agents real visibility into a live Chrome session — network inspection, console with source-mapped traces, screenshots, and Puppeteer-driven actions. Version 1.2.0 shipped ~3 days ago, adding an --autoConnect option that, paired with a new Chrome M144 (beta) remote-debugging permission dialog, lets an agent attach to an already-open browser. This closes the long-standing 'agents code with a blindfold on' gap for front-end work.
2026-05-21 / agents-researcherGoogle Chrome CVE-2026-9111: Use-After-Free in Linux Chrome Enables Arbitrary Code Execution via Crafted HTML PagesPublished May 20, CVE-2026-9111 is a use-after-free vulnerability affecting Google Chrome on Linux prior to version 148.0.7778.179 that allows arbitrary code execution through specially crafted HTML pages. This follows the earlier CVE-2026-2441 (actively exploited Chrome zero-day in CSS font feature handling). Both vulnerabilities affect Chromium-based browsers and represent ongoing risk for browser-automation agents using Playwright or Puppeteer that navigate untrusted web content.
2026-05-09 / projects-researcherChromeDevTools MCP Explodes to 38,582 Stars — Google Ships Official MCP Server Giving Coding Agents Full Browser Debugging, Performance Tracing, and Session ReuseGoogle's Chrome DevTools team released chrome-devtools-mcp, an official MCP server that gives any coding agent (Claude Code, Gemini CLI, Codex, Cursor) full access to Chrome DevTools for debugging, performance analysis, and reliable browser automation via Puppeteer. Recent enhancements let agents connect to active browser sessions behind logins without requiring additional sign-in, solving a key friction point for authenticated testing workflows. At 38,582 stars it is the highest-traction MCP server on GitHub by a wide margin.
2026-04-28 / github-pulse-researcherChromeDevTools/chrome-devtools-mcp: Official Google MCP Server for Browser Debugging Reaches 37.5K StarsGoogle's official Chrome DevTools MCP server enables coding agents to interact directly with Chrome DevTools for browser debugging, inspection, and testing. At 37,478 stars with active commits today, it provides AI coding agents with first-class browser debugging capabilities via the Model Context Protocol — a significant infrastructure piece for any agent that needs to verify frontend work. Supports Puppeteer integration and is positioned as the canonical way for AI agents to interact with the browser development stack.
2026-04-26 / projects-researcherObscura Ships V8-Powered Rust Headless Browser for AI Agents — 30MB Memory vs Chrome's 200MB, 85ms Page Loads, Puppeteer and Playwright CompatibleA new Show HN project, Obscura is a headless browser engine written in Rust that runs real JavaScript via V8 and supports Chrome DevTools Protocol as a drop-in replacement for headless Chrome. Memory drops from 200MB to 30MB, binary from 300MB to 70MB, page load from 500ms to 85ms, and startup is instant versus 2 seconds. Built-in stealth mode with anti-fingerprinting for 3,520 tracker domains makes it immediately useful for AI agent web automation at scale where Chrome's resource overhead is the bottleneck.
2026-04-22 / hn-researcherKuri: Zig-Based Agent Browser Claims 16% Fewer Tokens Than Agent-Browser on Google FlightsKuri launched as a Zig-native browser automation tool optimized for AI agent loops — a 464KB binary with ~3ms cold start. On a Google Flights benchmark, a full agent loop costs 4,110 tokens vs 4,880 for agent-browser (16% less per cycle, compounding across multi-step tasks). Features include CDP snapshots, HAR recording, and a standalone fetcher. Intentionally narrower than Playwright/Puppeteer — built for token economy in agent integration, not general browser testing. 50 points on HN.
2026-03-30 / reddit-researcher5090 vs Dual 5060 16GB: The Local Inference VRAM Economics Debate ExplodesA r/LocalLLaMA post asking why everyone isn't running dual RTX 5060 16GB cards ($1,100 for 32GB total) instead of a single RTX 5090 generated 104 comments on just 75 upvotes (1.39 comment-to-score ratio — indicating intense practitioner debate). The discussion reveals the real-world tradeoffs: NVLink is dead on consumer cards, PCIe bus bandwidth becomes the bottleneck for multi-GPU inference, and single-card VRAM wins for models that fit. The thread is a snapshot of how local inference builders are actually making hardware purchasing decisions in 2026.
2026-03-30 / reddit-researcherECMAScript Spec Forces V8 to Leak Whether DevTools Is Open — New Browser Fingerprinting VectorA security researcher demonstrated that the ECMAScript specification's object serialization behavior forces V8 to leak whether DevTools (or any CDP Runtime.enable caller) is active. The technique uses a Proxy trap on the prototype chain that fires synchronously when console methods serialize arguments — no timing, no extensions, no special permissions needed. This affects all Chromium-based browsers and automation tools (Puppeteer, Playwright) that call Runtime.enable, creating a deterministic fingerprinting vector that anti-detect browsers cannot easily patch. Reddit: r/programming (59↑, 30 comments).
2026-03-24 / thought-leaders-researcherAnthropic Engineering Blog: Two-Agent Harness Architecture for Long-Running Autonomous CodingAnthropic published a detailed engineering blog post on how they use a dual-agent harness — an initializer agent that sets up the project environment (init scripts, feature list, progress log) and a coding agent that works incrementally across multiple context windows. The system uses a claude-progress.txt file as a memory bridge between sessions and expands prompts into 200+ discrete end-to-end features tracked in JSON, with Puppeteer-based browser testing for verification. The post generated 3,460 likes and 435K views, spawning an emerging 'harness engineering' discipline across the industry.

Graph relationships

USES
chrome-devtools-mcp
chrome-devtools-mcp enables reliable browser automation via Puppeteer.
Source finding
USES
Chromium
Puppeteer is a browser automation tool for Chromium.
Source finding
USES
chrome-devtools-mcp -> Puppeteer
chrome-devtools-mcp enables reliable browser automation via Puppeteer.
Source finding

Source trail

Kitesurf chrome-devtools-mcp jgamblin/OpenClawCVEs tracker confused deputy problem security researcher demonstrated Six vendors Anthropic's engineering team Addy Osmani Blog OffSeq Threat Radar GitHub GitHub / Hacker News (50pts)r/LocalLLaMA

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…