fix(config): register AUTOBOT_BROWSER_SERVICE_HOST/PORT, AUTOBOT_VNC_PORT (#15151)

[mrveiss]

Thinking Path

#15151 found that AUTOBOT_PLAYWRIGHT_HOST and AUTOBOT_PLAYWRIGHT_API_PORT are documented in CONFIGURATION_GUIDE.md but read by nothing: not env_registry.py, no Python/TypeScript/shell code, no tracked .env* file. The issue asked for one of two fixes: wire them to whatever really configures the Playwright service, or remove them from the guide.

Tracing services/playwright_service.py::get_playwright_service (config.vm.browser, which raises "AUTOBOT_BROWSER_SERVICE_HOST environment variable must be set" when unset) led to autobot_shared/ssot_config.py's pydantic Field(alias=...) fields: AUTOBOT_BROWSER_SERVICE_HOST (default 127.0.0.1) and AUTOBOT_BROWSER_SERVICE_PORT (default 9001) are the real, working knobs — read via a mechanism check_env_var_registry.py's reader-detection (os.environ.get/env_utils calls) never sees, so they were unregistered too despite being live. So the right fix is "wire the guide to the real names," not remove them — the capability already exists, the guide just named the wrong knob.

While tracing this I found a third name right next to the other two with the identical defect: AUTOBOT_PLAYWRIGHT_VNC_PORT (guide) vs. the real AUTOBOT_VNC_PORT (ssot_config.py, default 6080 — the same default as the guide's wrong name, which is exactly why nobody noticed: the wrong name and the real one happened to agree on the default). Fixed in the same change since it's the same defect, same file, same fix shape.

Writing #15151's AC2 guard (every documented AUTOBOT_* name is registered or a tracked gap) surfaced that 18 other names in the same guide are also unregistered — a much bigger pre-existing gap than this issue's scope. Rather than guess through all 18 (each needs the same kind of trace these three got, and at least three of them are protocol enums that may not even fit env_registry.py's plain-type shape), I filed #16554 to track them and gave the guard test a _KNOWN_GAPS escape hatch naming that issue — the same "recorded, not certified" pattern this repo already uses elsewhere (e.g. core_router_auth_guard_test.py's _TRACKED_BY_OTHER_ISSUES).

What Changed

• docs/guides/CONFIGURATION_GUIDE.md: AUTOBOT_PLAYWRIGHT_HOST → AUTOBOT_BROWSER_SERVICE_HOST, AUTOBOT_PLAYWRIGHT_API_PORT → AUTOBOT_BROWSER_SERVICE_PORT, AUTOBOT_PLAYWRIGHT_VNC_PORT → AUTOBOT_VNC_PORT.
• autobot_shared/env_registry_backend_services.py: registers all three, component="network".
• docs/developer/CLAUDE_RULES.md: the autogenerated env-var table gets the three new rows and the updated count (219→222) — hand-matched against pipeline-scripts/generate_env_docs.py's exact formatting logic (read, not run, per the owner's no-local-execution rule) and confirmed byte-exact by the env-vars-documented pre-commit hook's own automatic run.
• New repo_tests/configuration_guide_env_vars_test.py: every AUTOBOT_* name the guide documents must be in REGISTRY or in this file's _KNOWN_GAPS (naming docs(config): 15 more AUTOBOT_* names in CONFIGURATION_GUIDE.md are unregistered in env_registry.py #16554); a second test fails if a known gap quietly becomes registered without being removed from the list (the tech-debt(guards): the exec-bit baseline cannot detect an entry that outlived its fix, and its tests broke when the backlog hit zero #15762 shape — a record outliving its fix).
• Filed docs(config): 15 more AUTOBOT_* names in CONFIGURATION_GUIDE.md are unregistered in env_registry.py #16554 for the 18 other gaps this guard surfaced.

Verification

Static only, per the owner's no-local-execution rule — no test suite or generator script run locally; CI, the pre-commit hook, and the pre-push hook are the authority.

• Traced get_playwright_service → config.vm.browser → ssot_config.py's Field(alias="AUTOBOT_BROWSER_SERVICE_HOST") in full before registering, to confirm the real reader and default rather than guessing.
• Read pipeline-scripts/generate_env_docs.py in full to hand-derive its exact table-row and count-line format rather than running it; the env-vars-documented pre-commit hook (which runs the equivalent check automatically on every commit) confirmed the hand-edit matches exactly — it failed twice on a first-pass mismatch (a missed count-line bump) and passed once corrected, which is the hook's own automatic run giving the evidence, not a manual invocation of the generator.
• Confirmed via grep that all 18 _KNOWN_GAPS names are genuinely absent from REGISTRY as of this diff, so the guard's initial state is accurate.
• Pre-commit hooks ran and passed on commit; the pre-push hook ran pytest on the new test file and passed before either push went through ([pre-push OK] pytest: all relevant tests pass).

Risks

Low. AUTOBOT_BROWSER_SERVICE_HOST/_PORT/AUTOBOT_VNC_PORT already existed and already had these exact defaults — this only makes them discoverable and documented correctly; nothing about the real config mechanism changes.

Model Used

Claude Sonnet 5 (claude-sonnet-5)

Issue Link

Closes #15151

Changelog fragment

• Added changelog/unreleased/15151-playwright-env-vars.md

Single-issue rationale

Single-issue rationale: #16554 (the 18-name follow-up this PR's own guard test surfaced) is deliberately a separate issue with its own, much larger trace-each-name scope — batching it here would block this fix on work that isn't ready.

Checklist

• Code follows AutoBot patterns from CLAUDE.md
• Tests added or updated
• Documentation updated if behavior changed (the guide itself is the fix)
• Pre-commit hooks pass (git commit runs them automatically)
• PR targets main — the default branch since the 2026-09-12 rename (this checklist item's "Dev_new_gui" wording is stale template text)
• No secrets or credentials in the diff

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 60cba3e8-07d1-47f6-821c-49e89c046507

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

AutoBot Phase Validation Results

System Maturity: 96.5%

Phase Status:

PASS Phase 1: Core Infrastructure: 100.0%
PASS Phase 2: Knowledge Base and Memory: 100.0%
IN PROGRESS Phase 3: LLM Integration: 66.7%
PASS Phase 4: Security and Authentication: 100.0%
PASS Phase 5: Agent Orchestration: 100.0%
PASS Phase 6: Enhanced UI/UX: 100.0%
PASS Phase 7: Testing and Validation: 100.0%
PASS Phase 8: Advanced Features: 100.0%
PASS Phase 9: Multi-Modal AI: 100.0%
PASS Phase 10: Production Readiness: 100.0%

Recommendations:

• 🟡 MEDIUM: Phase 3: LLM Integration requires attention (66.7% complete): Review and implement
• ✅ System is production-ready - consider advanced features and scaling: Review and implement

[github-actions]

✅ SSOT Configuration Compliance: Passing

🎉 No new hardcoded values of either class — ssot and other both block.

Known backlog in pipeline-scripts/hardcoded_values_baseline.txt is suppressed and tracked in #14371.

[github-actions]

Notice: 29 open PRs — past the runaway threshold (25)

There is no PR queue limit, and this is not a request to defer this PR. Work proceeds one issue at a time without a cap on open PRs; review capacity is the constraint.

This notice only means the count is high enough to be worth a glance for a runaway — something opening PRs in a loop, or a merge pipeline that has stalled so nothing is draining.

Currently open:

• fix(scripts): detect-environment.sh only selects files this repo tracks (#15143) #16553 fix(scripts): detect-environment.sh only selects files this repo tracks (bug(scripts): detect-environment.sh selects three .env files that do not exist #15143)
• fix(security): agent_config, sync and hardware-priority record the real caller, not "admin" (#16547, #16541) #16550 fix(agents): api/agent_config.py records who made the write (fix(agents): api/agent_config.py records the audit trail as created_by="admin" for every actor #16547)
• feat(llm): wire extractive prompt compression and enforce per-provider concurrency cap (#16526, #16527) #16546 feat(llm): wire extractive prompt compression and enforce per-provider concurrency cap (Wire the existing extractive prompt compressor into the live LLM completion path #16526, Enforce the existing per-provider LLM concurrency cap #16527)
• security(chat): scan/redact PII and flag injection risk on every raw chat message (#16529, #16530) #16545 security(chat): scan/redact PII and flag injection risk on every raw chat message (Add PII scanning to the main chat path #16529, Add a blanket prompt-injection guard on raw user chat input #16530)
• security(browser): validate the URL in capture_screenshot (#13204) #16544 security(browser): validate the URL in capture_screenshot (security(browser): send_to_browser_vm and playwright_service bypass the SSRF/DNS-rebind guard the other browser paths enforce #13204)
• fix(perf): re-derive Multimodal processor startup's budget post-#15297 (#16535) #16537 fix(perf): re-derive Multimodal processor startup's budget post-fix(ml): drop resume_download, removed from from_pretrained in transformers v5 (#15054) #15297 (perf(test): Multimodal processor startup budget still calibrated against #15054's broken (work-skipping) baseline #16535)
• fix(llm-shared): remove dead SemanticLLMCache, keep live semantic cache (#16528) #16536 fix(llm-shared): remove dead SemanticLLMCache, keep live semantic cache (Consolidate duplicate semantic LLM-response cache implementations #16528)
• feat(tooling): check_run_status gains a pending-with-age helper (#16126) #16534 feat(tooling): check_run_status gains a pending-with-age helper (docs(process): two review findings on MEASUREMENT_DISCIPLINE.md — family order and D's missing mechanism #16126)
• DO NOT MERGE: mutation-check for #15931's AC4 #16525 DO NOT MERGE: mutation-check for bug(llc): the blocked-by transition rule has never fired — relation_svc is passed only by its own tests #15931's AC4
• fix(files): conversation uploads accept PDF and GIF, not the truncated '.pd' and '.gi' (#16521) #16523 fix(files): conversation uploads accept PDF and GIF, not the truncated '.pd' and '.gi' (bug(files): conversation uploads reject every PDF and GIF because the allowlist says '.pd' and '.gi' #16521)
• fix(infra): consolidate the last 3 private TLS-cert-generation copies (#16020) #16522 fix(infra): consolidate the last 3 private TLS-cert-generation copies (nginx cannot start on a node with no TLS cert: five roles consume the shared keypair, four provision it #16020)
• security(lint): classify test_first_remediation.py as production, fix the 2 real gaps it surfaced (#16514) #16518 security(lint): classify test_first_remediation.py as production, fix the 2 real gaps it surfaced (chore(lint): classify scripts/test_first_remediation.py as production and document the sync_orchestrator ssh gap #16514)
• docs(infra): record redis role tools as binary names, not units (#16060, #16071) #16511 docs(infra): record redis role tools as binary names, not units (Redis is managed by two unit names that do not exist, and a failed restore-stop is silent #16060, redis naming: five more sites name a unit the fleet does not have (#16060 follow-up) #16071)
• refactor(lifespan): split cleanup_services and _init_graph_rag_service into steps under the length limit (#16250) #16509 refactor(lifespan): split cleanup_services and _init_graph_rag_service into steps under the length limit (function-length-check pre-commit hook blocks any commit to lifespan.py: cleanup_services (267 lines) and _init_graph_rag_service (68 lines) exceed the 65-line ceiling #16250)
• security(routers): gate knowledge_search, knowledge_search_aggregator, knowledge_suggestions and voice_stream (#16507) #16508 security(routers): gate knowledge_search, knowledge_search_aggregator, knowledge_suggestions and voice_stream (security(routers): gate knowledge_search, knowledge_search_aggregator, knowledge_suggestions and voice_stream #16507)
• test(user-management): a user in org A gets no results from org B (#16279) #16506 test(user-management): a user in org A gets no results from org B (security(users): /user-management/users/search answers anonymous callers with names from every organisation #16279)
• security(settings): record the real caller, not the literal "admin" (#16501) #16504 security(settings): record the real caller, not the literal "admin" (security(settings): sync_config and update_hardware_priority record the literal "admin" instead of the real caller #16501)
• fix(chat-knowledge): contexts can be deleted, cascade with their chat, and orphans get cleaned (#16490) #16503 fix(chat-knowledge): contexts can be deleted, cascade with their chat, and orphans get cleaned (bug(chat-knowledge): contexts can be created but never deleted, so orphans accumulate #16490)
• fix(slm-frontend): give the service-log fetch one path and its real timeout (#16256) #16500 fix(slm-frontend): give the service-log fetch one path and its real timeout (tech-debt(slm-frontend): the two log viewers fetch the same journal through two paths with different timeouts #16256)
• fix(a2a): cooperative cancellation checkpoints in execute_a2a_task (#16174) #16498 fix(a2a): cooperative cancellation checkpoints in execute_a2a_task (Cancelling an A2A task does not stop its executor, so claims can only lapse rather than release #16174)
• fix(sdk): TypeScript SDK request/response parity + missing /api prefix (#15528, #16495) #16497 fix(sdk): TypeScript SDK request/response parity + missing /api prefix (bug(sdk): the TypeScript SDK still sends the parameters and parses the envelopes the Python SDK stopped sending #15528, bug(sdk): every TypeScript SDK request omits the /api prefix — 404 against a real backend #16495)
• refactor(agents): extract NPUCodeSearchAgent's pattern helpers, add declared_scopes (#16173) #16496 refactor(agents): extract NPUCodeSearchAgent's pattern helpers, add declared_scopes (NPUCodeSearchAgent cannot declare its write scopes: its file is at the size ceiling #16173)
• fix(frontend): converge the permission vocabulary onto the backend's real Permission enum, wire in v-permission (#16243) #16493 fix(frontend): converge the permission vocabulary onto the backend's real Permission enum, wire in v-permission (tech-debt(frontend): usePermissions' permission strings share nothing with the backend's Permission vocabulary #16243)
• security(research): treat fetched repos and pages as untrusted data (#16488) #16492 security(research): treat fetched repos and pages as untrusted data (security(research): treat fetched repos and pages as untrusted data: prompt-injection hardening for research, adopt and web-fetch #16488)
• feat(frontend): wire router meta.minRole into a real guard, ranked against the backend's role order (#16244) #16489 feat(frontend): wire router meta.minRole into a real guard, ranked against the backend's role order (tech-debt(frontend): router meta.minRole is declared and read by no guard #16244)
• chore(git): rename Dev_new_gui to main and main to release across the repo (#16479) #16487 chore(git): rename Dev_new_gui to main and main to release across the repo (infra(git): swap branch names across the repo for the rename (in-repo half of #16461) #16479)
• feat(secrets): wire in SecretAuditLog, consolidate SecretVault into SecretsManager (#16485) #16486 feat(secrets): wire in SecretAuditLog, consolidate SecretVault into SecretsManager (wire in SecretAuditLog, consolidate SecretVault into SecretsManager #16485)
• fix(frontend): retire four dead settings API paths, stop a fifth calling admin-gated settings from non-admin surfaces (#16481) #16484 fix(frontend): retire four dead settings API paths, stop a fifth calling admin-gated settings from non-admin surfaces (retire useSettingsApi/SystemRepository/services-api.ts/CacheService.ts dead settings paths #16481)
• feat(llm): cross-worker quota headroom store, persist real 429 headroom #16483 feat(llm): cross-worker quota headroom store, persist real 429 headroom

If the queue is draining normally, ignore this. Otherwise:

1. Check whether CI is dispatching at all — see the ci-dispatch-watchdog status on these PRs
2. Merge the ones whose CI has finished and review has passed: gh pr merge <number> --squash --delete-branch
3. Look for a loop opening near-identical PRs

Warn-only runaway detector — .github/workflows/pr-queue-gate.yml. It never blocks a merge.

[mrveiss]

Independent review of 6ddf509be: approve, no findings. 1 behind, 0 trailers, closingIssuesReferences=[15151] matches the single Closes.

Registers AUTOBOT_BROWSER_SERVICE_HOST/PORT and AUTOBOT_VNC_PORT via register_env_var, the same visibility gap #15710 closed for a different reader shape (these three are read via pydantic Field(alias=...), so the registry never saw them). Fixes the doc guide's three wrong/dead names in the same change, rather than leaving the registration and the doc fix as two separate claims to reconcile. AUTOBOT_BROWSER_SERVICE_PORT's description specifically calls out 9001 vs Grafana's 3000 — the kind of detail that prevents a future copy-paste mistake. Tests: the guide documents at least one name, every documented name is either registered or a tracked gap, and no known gap quietly became registered without the tracking being updated — that third one guards against exactly the kind of silent drift this PR is fixing.

[github-actions]

AutoBot Phase Validation Results

System Maturity: 96.5%

Phase Status:

PASS Phase 1: Core Infrastructure: 100.0%
PASS Phase 2: Knowledge Base and Memory: 100.0%
IN PROGRESS Phase 3: LLM Integration: 66.7%
PASS Phase 4: Security and Authentication: 100.0%
PASS Phase 5: Agent Orchestration: 100.0%
PASS Phase 6: Enhanced UI/UX: 100.0%
PASS Phase 7: Testing and Validation: 100.0%
PASS Phase 8: Advanced Features: 100.0%
PASS Phase 9: Multi-Modal AI: 100.0%
PASS Phase 10: Production Readiness: 100.0%

Recommendations:

• 🟡 MEDIUM: Phase 3: LLM Integration requires attention (66.7% complete): Review and implement
• ✅ System is production-ready - consider advanced features and scaling: Review and implement

[mrveiss]

Fixed at `0c9442de6`: added `docs/guides/CONFIGURATION_GUIDE.md` to `.github/filters/python-paths.yml`, matching the same pattern as every other entry in that file (#14544, #14891, #15713, #16275, ...). Without it, a change confined to the guide would take the required-context shim's green while `configuration_guide_env_vars_test.py` never ran.

Verified the pattern actually matches via `fnmatch` against the full filter list — `docs/guides/CONFIGURATION_GUIDE.md` is now covered.

Note: this branch collides with #16440 on `repo_tests/configuration_guide_env_vars_test.py` and `docs/guides/CONFIGURATION_GUIDE.md` itself — tracking that consolidation separately per the sweep's instruction, not resolved in this push.

[mrveiss]

Delta 6ddf509be..0c9442de6: still approved. The only file whose change differs across the net diffs is .github/filters/python-paths.yml. It gains docs/guides/CONFIGURATION_GUIDE.md, so a change confined to the guide still triggers configuration_guide_env_vars_test.py, which fixes the uncovered-read red. The other new commit is the changelog fragment. Note that #16440 adds the same test file, so whichever of the two lands second has to reconcile. CI was still pending when I posted.

[mrveiss]

Delta 0c9442de6..0e2bf8b09 (the rebase onto 0abe0d47a): still approved.

• Scope: the net diff against main is 6 files, +132/−5, the same as the approved version. The only file whose change differs is docs/developer/CLAUDE_RULES.md.
• Footer: at this head, the | AUTOBOT_… rows strictly between BEGIN_AUTOGEN_ENV_DOCS and END_AUTOGEN_ENV_DOCS number 224, and the footer reads 224. That is main's 221 plus this PR's three new variables. For the record, main at 0abe0d47a is itself consistent (221 rows, footer 221), so the one-behind mismatch seen during the rebase came from the older base, not from main.
• .github/filters/python-paths.yml: both additive entries are present, docs/guides/CONFIGURATION_GUIDE.md (this PR) and requirements-gpu-faiss.txt (fix(rag): wire GPU faiss onto an automated install, gated on GPU alone (#15163) #16560, via main), with no duplicate. This PR's own change to the file is identical to the approved one.

This head was pushed with the pre-push pytest timeout accepted, so CI is its only verification. It had 23 checks pending when I posted.