Issue 87 browser downloads

CHANGELOG.md

@@ -26,6 +26,9 @@ and versions follow [Semantic Versioning](https://semver.org/).
   approvals and rules, and Stop everything stops it. It only answers your chats: tasks, suggestions and other
   background work keep using your other models, and it can't be the memory search model. Anthropic may change how
   this is counted or allowed.
+- **Browser downloads:** files Sentient downloads while using a website are saved to `downloads/` in your Files
+  folder, and the browser result says where. In an attached browser, only downloads from Sentient's own tabs are
+  saved.
 - **Push to talk and dictation into any app:** hold Ctrl+Alt+Shift+T (Cmd+Option+Shift+T on a Mac) anywhere, speak,
   and let go: what you said goes to Sentient as a chat message, and the answer is read aloud. Press Ctrl+Alt+Shift+D,
   speak, and press it again (or just pause): your words are typed where your cursor is, in any app. A small bar at the
@@ -234,6 +237,7 @@ and versions follow [Semantic Versioning](https://semver.org/).
 - Everyday phrases like "If you don't know, say so" no longer make Sentient suggest a Never rule for unrelated
   tools. A suggested rule for a single tool now needs your words to name an action, the app or the tool, so
   "Never write files for me" still suggests blocking file writing.
+- Edge's downloads hub no longer replaces the active page or appears as a browser tab when a download starts.
 
 ### Security
 - Once Sentient has read an email, a web page, a message or anything else other people wrote, it asks before

docs/API.md

@@ -1439,9 +1439,26 @@ Every new tool declares a `Risk`; approvals behave as in section 1.
   idle_minutes, allow_domains, block_domains, max_snapshot_chars, max_extract_chars, confirm_purchases, live_view,
   profiles`. Every safety rule below applies the same in every profile, attached ones included.
 - Tools (plugin `browser`). Failures return `{error}` with a message the model can act on.
+  - Downloads from launched profiles are accepted by Playwright; in an attached profile, only downloads from the tab
+    Sentient opens and popups opened from Sentient-owned tabs are handled (not the user's existing tabs). Every handled
+    download is saved under `downloads/` in Sentient's Files folder. Browser tool results (including `browser_scroll`)
+    may include an optional `downloads` array of relative paths such as `["downloads/report.pdf"]`.
+    `browser_open`, `browser_click`, `browser_type`, `browser_press`, `browser_select` and `browser_back` wait up to
+    0.3 s for a download to start during the action. Opening a URL that directly starts a download returns a normal
+    browser result with its download status rather than a navigation error. Edge's internal downloads hub is excluded
+    from browser tabs and does not replace the active page. If a download starts later, it remains tracked and is
+    reported on a later browser result after saving finishes. Other browser results collect finished downloads
+    immediately without that start wait. Actions do not wait for downloads to finish; unfinished downloads are listed
+    by filename in an optional `downloads_in_progress` array and reported under `downloads` when a later result observes
+    that they have finished. Saves reserve unique filenames under a short lock, then transfer concurrently. Each save
+    is limited to 120 s total; when the limit is reached, Sentient asks the browser to cancel it, with a 5 s limit for
+    that cancellation request. A cancellation failure is included in `download_errors`.
+    Failed saves are reported in an optional `download_errors` array; they don't discard the browser action result or
+    successful downloads from the same batch. Completed downloads that no browser result consumes become eligible for
+    cleanup after 5 minutes, and active browser actions get the chance to report them before cleanup.
   - `browser_open(url, profile="")` read → same as `browser_snapshot` plus `profile` (http/https only; allow/block lists
-    apply, also after redirects). `profile` switches to that profile for this and the following calls of the run;
-    empty uses the run's profile, else `default`.
+    apply, also after redirects). `profile` switches to that profile for this and the following calls of the run; empty
+    uses the run's profile, else `default`.
   - `browser_snapshot()` read → `{url, title, text, truncated?}`. `text` is `Page:`/`URL:`/`Scroll:` header, interactive
     elements one per line (`[e12] button "Sign in"`, `[e4] textbox "Search" value=""`, `[e7] combobox "Country"
     value="India" options: India | Japan`, `[e3] link "Docs" -> /docs`, flags `checked`, `disabled`, `focused`) and the