diff --git a/node_modules/lucarne/dist/cdp.d.ts b/node_modules/lucarne/dist/cdp.d.ts
index 9f706c0..a713375 100644
--- a/node_modules/lucarne/dist/cdp.d.ts
+++ b/node_modules/lucarne/dist/cdp.d.ts
@@ -1,6 +1,6 @@
 export interface CdpConn {
-    /** Fire-and-forget (no result needed) — used on the hot input/screencast path. */
-    send(method: string, params?: Record<string, unknown>): void;
+    /** Fire-and-forget (no result needed) — true when accepted by the live CDP socket. */
+    send(method: string, params?: Record<string, unknown>): boolean;
     /** Request/response — resolves with `result`, rejects on CDP `error`. */
     call(method: string, params?: Record<string, unknown>): Promise<any>;
     on(method: string, cb: (params: any) => void): void;
diff --git a/node_modules/lucarne/dist/cdp.js b/node_modules/lucarne/dist/cdp.js
index b4d8cf5..b1b6e2b 100644
--- a/node_modules/lucarne/dist/cdp.js
+++ b/node_modules/lucarne/dist/cdp.js
@@ -151,10 +151,15 @@ async function connectCdp(wsUrl) {
     ws.onerror = handleClose;
     return {
         send(method, params = {}) {
+            if (closed || ws.readyState !== 1)
+                return false;
             try {
                 ws.send(JSON.stringify({ id: id++, method, params }));
+                return true;
+            }
+            catch {
+                return false;
             }
-            catch { /* closed */ }
         },
         call(method, params = {}) {
             if (closed)
diff --git a/node_modules/lucarne/dist/engine.js b/node_modules/lucarne/dist/engine.js
index c802b43..84e2183 100644
--- a/node_modules/lucarne/dist/engine.js
+++ b/node_modules/lucarne/dist/engine.js
@@ -102,6 +102,30 @@ function rebindForbidden(headers) {
     }
     return false;
 }
+/** Privacy-safe input telemetry: never echo typed or pasted content to viewers. */
+function inputFeedbackEvent(event) {
+    if (event.t === "down" || event.t === "move" || event.t === "up") {
+        return { buttons: event.buttons, kind: event.t, x: event.x, y: event.y };
+    }
+    if (event.t === "wheel")
+        return { kind: "wheel", label: "Scroll", x: event.x, y: event.y };
+    if (event.t === "paste")
+        return { kind: "paste" };
+    if (event.t === "ime")
+        return event.phase === "commit" ? { kind: "typing" } : undefined;
+    if (event.t !== "keydown" || event.repeat)
+        return undefined;
+    const modifiers = [
+        event.mod && event.mod & 1 ? "Alt" : undefined,
+        event.mod && event.mod & 2 ? "Ctrl" : undefined,
+        event.mod && event.mod & 4 ? "⌘" : undefined,
+        event.mod && event.mod & 8 ? "Shift" : undefined,
+    ].filter(Boolean);
+    const printable = event.key !== undefined && event.key.length === 1;
+    return printable && modifiers.length === 0
+        ? { kind: "typing" }
+        : { kind: "typing", label: [...modifiers, printable ? event.key.toUpperCase() : event.key ?? "Key"].join(" + ") };
+}
 /**
  * Reject a non-positive / NaN numeric config option AT CONSTRUCTION with a clear
  * message naming the offending option (lucarne's fail-closed ethos), rather than
@@ -203,6 +227,7 @@ export class Lucarne {
     // stay peelable; the router delegates to each in turn.
     globalServices;
     wss = new WebSocketServer({ noServer: true });
+    portholePeers = new Map();
     server;
     reaper;
     registryFile;
@@ -887,6 +912,26 @@ v.addEventListener('ended',()=>{i++;play()});play();});
             return true;
         return headerAuth !== undefined && safeEqual(headerAuth, `Bearer ${this.token}`);
     }
+    addPortholePeer(sessionId, socket) {
+        const peers = this.portholePeers.get(sessionId) ?? new Set();
+        peers.add(socket);
+        this.portholePeers.set(sessionId, peers);
+        return () => {
+            peers.delete(socket);
+            if (peers.size === 0)
+                this.portholePeers.delete(sessionId);
+        };
+    }
+    broadcastInputFeedback(sessionId, event) {
+        const feedback = inputFeedbackEvent(event);
+        if (feedback === undefined)
+            return;
+        const payload = JSON.stringify({ event: feedback, t: "input-feedback" });
+        for (const peer of this.portholePeers.get(sessionId) ?? []) {
+            if (peer.readyState === peer.OPEN && peer.bufferedAmount < 64_000)
+                peer.send(payload);
+        }
+    }
     listen() {
         const send = (res, code, body) => {
             res.writeHead(code, { "content-type": "application/json" });
@@ -1234,7 +1279,8 @@ v.addEventListener('ended',()=>{i++;play()});play();});
                 socket.destroy();
                 return;
             }
-            const s = this.sessions.get(wm[1]);
+            const sessionId = wm[1];
+            const s = this.sessions.get(sessionId);
             if (!s) {
                 socket.destroy();
                 return;
@@ -1243,6 +1289,7 @@ v.addEventListener('ended',()=>{i++;play()});play();});
             // merely hidden — a read-only viewer genuinely cannot drive the browser.
             const interactable = new URL(url, "http://x").searchParams.get("interactable") !== "0";
             this.wss.handleUpgrade(req, socket, head, (ws) => {
+                const removePeer = this.addPortholePeer(sessionId, ws);
                 const cur = s.media.frames.get();
                 if (cur)
                     ws.send(cur);
@@ -1251,13 +1298,21 @@ v.addEventListener('ended',()=>{i++;play()});play();});
                 // socket would otherwise accrete JPEGs forever).
                 const unsub = s.media.frames.subscribe((f) => { if (ws.readyState === ws.OPEN && ws.bufferedAmount < 1_000_000)
                     ws.send(f); });
-                ws.on("message", (d) => { if (!interactable)
-                    return; s.lastActivityMs = Date.now(); try {
-                    s.media.onInput(JSON.parse(d.toString()));
-                }
-                catch { /* ignore */ } });
-                ws.on("close", unsub);
-                ws.on("error", unsub);
+                ws.on("message", (d) => {
+                    if (!interactable)
+                        return;
+                    try {
+                        const event = JSON.parse(d.toString());
+                        if (s.media.onInput(event)) {
+                            s.lastActivityMs = Date.now();
+                            this.broadcastInputFeedback(sessionId, event);
+                        }
+                    }
+                    catch { /* ignore */ }
+                });
+                const cleanup = () => { unsub(); removePeer(); };
+                ws.on("close", cleanup);
+                ws.on("error", cleanup);
             });
         });
         return new Promise((resolve, reject) => {
diff --git a/node_modules/lucarne/dist/porthole.d.ts b/node_modules/lucarne/dist/porthole.d.ts
index 8f9516d..015c9cc 100644
--- a/node_modules/lucarne/dist/porthole.d.ts
+++ b/node_modules/lucarne/dist/porthole.d.ts
@@ -18,6 +18,9 @@ export interface InputEvent {
     clickCount?: number;
     dx?: number;
     dy?: number;
+    /** Dimensions of the rendered source frame used to derive x/y. */
+    frameHeight?: number;
+    frameWidth?: number;
     key?: string;
     code?: string;
     repeat?: boolean;
diff --git a/node_modules/lucarne/dist/porthole.js b/node_modules/lucarne/dist/porthole.js
index b852e00..846c0fe 100644
--- a/node_modules/lucarne/dist/porthole.js
+++ b/node_modules/lucarne/dist/porthole.js
@@ -7,40 +7,60 @@
  */
 export function portholeHtml(viewport) {
     return `<!doctype html><meta name=viewport content="width=device-width,initial-scale=1">
-<style>html,body{margin:0;height:100%;background:#111}canvas{display:block;width:100vw;height:100vh;object-fit:contain;touch-action:none;outline:none}
+<style>html,body{margin:0;height:100%;overflow:hidden;background:#111}canvas{display:block;width:100vw;height:100vh;object-fit:contain;touch-action:none;outline:none}
 #bar{display:none;align-items:center;gap:6px;height:36px;padding:0 8px;background:#222;font:13px system-ui}
 #bar button{background:#333;color:#ddd;border:0;border-radius:4px;height:24px;width:28px;cursor:pointer}
 #bar input{flex:1;height:24px;border:0;border-radius:4px;padding:0 8px;background:#111;color:#ddd}
-.controls #bar{display:flex}.controls #c{height:calc(100vh - 36px)}</style>
+.controls #bar{display:flex}.controls #c{height:calc(100vh - 36px)}
+#feedback-toggle{align-items:center;background:rgba(17,24,39,.82);border:1px solid rgba(255,255,255,.28);border-radius:7px;color:#fff;cursor:pointer;display:none;height:30px;justify-content:center;padding:0;position:fixed;right:9px;top:9px;width:30px;z-index:3}
+.feedback-available #feedback-toggle{display:flex}.controls #feedback-toggle{top:45px}#feedback-toggle svg{height:16px;width:16px}
+#feedback-pointer{border:2px solid #fff;border-radius:50%;box-shadow:0 1px 5px rgba(0,0,0,.8);height:18px;opacity:0;pointer-events:none;position:fixed;transform:translate(-50%,-50%);transition:opacity .16s;width:18px;z-index:2}
+#feedback-pointer.visible{opacity:1}#feedback-pointer.dragging{border-color:#67e8f9;box-shadow:0 0 0 4px rgba(103,232,249,.2)}
+#feedback-click{border:3px solid #67e8f9;border-radius:50%;height:18px;opacity:0;pointer-events:none;position:fixed;transform:translate(-50%,-50%) scale(.45);width:18px;z-index:2}
+#feedback-click.pulse{animation:feedback-click .45s ease-out}@keyframes feedback-click{0%{opacity:1;transform:translate(-50%,-50%) scale(.45)}100%{opacity:0;transform:translate(-50%,-50%) scale(2.25)}}
+#feedback-key{background:rgba(17,24,39,.9);border:1px solid rgba(255,255,255,.3);border-radius:7px;bottom:10px;color:#fff;font:600 13px system-ui;left:50%;max-width:calc(100vw - 24px);opacity:0;overflow:hidden;padding:6px 10px;pointer-events:none;position:fixed;text-overflow:ellipsis;transform:translate(-50%,8px);transition:opacity .15s,transform .15s;white-space:nowrap;z-index:2}
+#feedback-key.visible{opacity:1;transform:translate(-50%,0)}</style>
 <div id=bar><button id=bk title=Back>◀</button><button id=fw title=Forward>▶</button><button id=rl title=Reload>⟳</button><input id=ub placeholder="url… (Enter)"></div>
-<canvas id=c tabindex=0 width=${viewport.width} height=${viewport.height}></canvas><script>
+<canvas aria-label="Remote browser input" id=c role=application tabindex=0 width=${viewport.width} height=${viewport.height}></canvas>
+<button aria-label="Hide input feedback" id=feedback-toggle title="Hide input feedback"><svg aria-hidden=true viewBox="0 0 24 24"><path d="M5 3l14 9-6 2-3 6L5 3z" fill="none" stroke="currentColor" stroke-linejoin="round" stroke-width="2"/></svg></button>
+<div aria-hidden=true id=feedback-pointer></div><div aria-hidden=true id=feedback-click></div><div aria-hidden=true id=feedback-key></div><script>
 const VW=${viewport.width},VH=${viewport.height};
 const cv=document.getElementById('c'),ctx=cv.getContext('2d');
+let FW=VW,FH=VH;
 cv.focus();
 const wsUrl=(location.protocol==='https:'?'wss':'ws')+'://'+location.host+location.pathname.replace(/\\/$/,'')+'/ws'+location.search;
 let ws;
+const params=new URLSearchParams(location.search),feedbackAvailable=params.has('feedback');
+let feedbackEnabled=feedbackAvailable&&params.get('feedback')!=='0',pointerTimer,keyTimer;
+const feedbackToggle=document.getElementById('feedback-toggle'),feedbackPointer=document.getElementById('feedback-pointer'),feedbackClick=document.getElementById('feedback-click'),feedbackKey=document.getElementById('feedback-key');
+if(feedbackAvailable)document.documentElement.classList.add('feedback-available');
+const renderedPoint=p=>{const r=cv.getBoundingClientRect(),s=Math.min(r.width/FW,r.height/FH),w=FW*s,h=FH*s;return{x:r.left+(r.width-w)/2+p.x*s,y:r.top+(r.height-h)/2+p.y*s}};
+const place=(el,p)=>{const q=renderedPoint(p);el.style.left=q.x+'px';el.style.top=q.y+'px'};
+const keyLabel=e=>e.label||(e.kind==='paste'?'Pasted':e.kind==='typing'?'Typing':'');
+const showFeedback=e=>{if(!feedbackEnabled)return;if(e.x!==undefined&&e.y!==undefined){place(feedbackPointer,e);feedbackPointer.classList.toggle('dragging',!!e.buttons);feedbackPointer.classList.add('visible');clearTimeout(pointerTimer);pointerTimer=setTimeout(()=>feedbackPointer.classList.remove('visible'),1400)}if(e.kind==='down'){place(feedbackClick,e);feedbackClick.classList.remove('pulse');void feedbackClick.offsetWidth;feedbackClick.classList.add('pulse')}const label=keyLabel(e);if(label){feedbackKey.textContent=label;feedbackKey.classList.add('visible');clearTimeout(keyTimer);keyTimer=setTimeout(()=>feedbackKey.classList.remove('visible'),900)}};
+feedbackToggle.onclick=()=>{feedbackEnabled=!feedbackEnabled;feedbackToggle.setAttribute('aria-label',feedbackEnabled?'Hide input feedback':'Show input feedback');feedbackToggle.title=feedbackEnabled?'Hide input feedback':'Show input feedback';if(!feedbackEnabled){feedbackPointer.classList.remove('visible');feedbackKey.classList.remove('visible')}};
 function connect(){
   ws=new WebSocket(wsUrl);ws.binaryType='blob';
-  ws.onmessage=async ev=>{if(typeof ev.data==='string')return;const bmp=await createImageBitmap(ev.data);ctx.drawImage(bmp,0,0,VW,VH);bmp.close&&bmp.close();};
+  ws.onmessage=async ev=>{if(typeof ev.data==='string'){try{const message=JSON.parse(ev.data);if(message.t==='input-feedback')showFeedback(message.event)}catch{}return}const bmp=await createImageBitmap(ev.data);if(bmp.width!==FW||bmp.height!==FH){FW=bmp.width;FH=bmp.height;cv.width=FW;cv.height=FH}ctx.drawImage(bmp,0,0,FW,FH);bmp.close&&bmp.close();};
   ws.onclose=()=>setTimeout(connect,1000);
   ws.onerror=()=>{try{ws.close()}catch(e){}};
 }
 connect();
 const send=o=>{if(ws&&ws.readyState===1)ws.send(JSON.stringify(o))};
 const mod=e=>((e.altKey?1:0)|(e.ctrlKey?2:0)|(e.metaKey?4:0)|(e.shiftKey?8:0));
-const c=e=>{const r=cv.getBoundingClientRect();return{x:Math.round((e.clientX-r.left)/r.width*VW),y:Math.round((e.clientY-r.top)/r.height*VH)}};
-cv.addEventListener('mousedown',e=>{e.preventDefault();cv.focus();send({t:'down',...c(e),button:e.button,buttons:e.buttons,clickCount:e.detail||1,mod:mod(e)})});
-cv.addEventListener('mouseup',e=>{e.preventDefault();send({t:'up',...c(e),button:e.button,buttons:e.buttons,clickCount:e.detail||1,mod:mod(e)})});
-cv.addEventListener('mousemove',e=>send({t:'move',...c(e),buttons:e.buttons,mod:mod(e)}));
-cv.addEventListener('wheel',e=>{e.preventDefault();send({t:'wheel',...c(e),dx:e.deltaX,dy:e.deltaY,mod:mod(e)})},{passive:false});
+const heldButton=buttons=>(buttons&1)?0:(buttons&4)?1:(buttons&2)?2:0;
+const c=(e,clamp=false)=>{const r=cv.getBoundingClientRect(),s=Math.min(r.width/FW,r.height/FH),w=FW*s,h=FH*s,l=r.left+(r.width-w)/2,t=r.top+(r.height-h)/2,x=(e.clientX-l)/s,y=(e.clientY-t)/s;if(!clamp&&(x<0||x>=FW||y<0||y>=FH))return null;return{frameHeight:FH,frameWidth:FW,x:Math.max(0,Math.min(FW-1,Math.round(x))),y:Math.max(0,Math.min(FH-1,Math.round(y)))}};
+cv.addEventListener('mousedown',e=>{e.preventDefault();cv.focus();const p=c(e);if(p)send({t:'down',...p,button:e.button,buttons:e.buttons,clickCount:e.detail||1,mod:mod(e)})});
+cv.addEventListener('mouseup',e=>{e.preventDefault();const p=c(e,true);if(p)send({t:'up',...p,button:e.button,buttons:e.buttons,clickCount:e.detail||1,mod:mod(e)})});
+cv.addEventListener('mousemove',e=>{const p=c(e,e.buttons!==0);if(p)send({t:'move',...p,button:heldButton(e.buttons),buttons:e.buttons,mod:mod(e)})});
+cv.addEventListener('wheel',e=>{e.preventDefault();const p=c(e);if(p)send({t:'wheel',...p,dx:e.deltaX,dy:e.deltaY,mod:mod(e)})},{passive:false});
 cv.addEventListener('contextmenu',e=>e.preventDefault());
 cv.addEventListener('keydown',e=>{e.preventDefault();send({t:'keydown',key:e.key,code:e.code,repeat:e.repeat,mod:mod(e)})});
 cv.addEventListener('keyup',e=>{e.preventDefault();send({t:'keyup',key:e.key,code:e.code,mod:mod(e)})});
 cv.addEventListener('paste',e=>{e.preventDefault();const t=(e.clipboardData||window.clipboardData).getData('text');if(t)send({t:'paste',text:t})});
-const tc=t=>{const r=cv.getBoundingClientRect();return{x:Math.round((t.clientX-r.left)/r.width*VW),y:Math.round((t.clientY-r.top)/r.height*VH)}};
-cv.addEventListener('touchstart',e=>{e.preventDefault();send({t:'touch',phase:'start',...tc(e.changedTouches[0])})},{passive:false});
-cv.addEventListener('touchmove',e=>{e.preventDefault();send({t:'touch',phase:'move',...tc(e.changedTouches[0])})},{passive:false});
-cv.addEventListener('touchend',e=>{e.preventDefault();send({t:'touch',phase:'end',...tc(e.changedTouches[0])})},{passive:false});
+cv.addEventListener('touchstart',e=>{e.preventDefault();const p=c(e.changedTouches[0]);if(p)send({t:'touch',phase:'start',...p})},{passive:false});
+cv.addEventListener('touchmove',e=>{e.preventDefault();const p=c(e.changedTouches[0],true);if(p)send({t:'touch',phase:'move',...p})},{passive:false});
+cv.addEventListener('touchend',e=>{e.preventDefault();const p=c(e.changedTouches[0],true);if(p)send({t:'touch',phase:'end',...p})},{passive:false});
 cv.addEventListener('compositionupdate',e=>send({t:'ime',phase:'compose',text:e.data||''}));
 cv.addEventListener('compositionend',e=>send({t:'ime',phase:'commit',text:e.data||''}));
 {const th=new URLSearchParams(location.search).get('theme');if(th==='light'){document.body.style.background='#f4f4f4'}}
diff --git a/node_modules/lucarne/dist/session-media.d.ts b/node_modules/lucarne/dist/session-media.d.ts
index 7488a32..d86bf45 100644
--- a/node_modules/lucarne/dist/session-media.d.ts
+++ b/node_modules/lucarne/dist/session-media.d.ts
@@ -14,7 +14,7 @@ export interface SessionMedia {
     cdp: CdpConn;
     frames: FrameSource;
     /** `actor` attributes the event in the activity log: porthole = human, act() = agent. */
-    onInput(ev: InputEvent, actor?: "human" | "agent"): void;
+    onInput(ev: InputEvent, actor?: "human" | "agent"): boolean;
     /** Stream stats (frames + bytes served) for status / "pressure". */
     stats(): {
         frames: number;
diff --git a/node_modules/lucarne/dist/session-media.js b/node_modules/lucarne/dist/session-media.js
index c5e5105..bd77372 100644
--- a/node_modules/lucarne/dist/session-media.js
+++ b/node_modules/lucarne/dist/session-media.js
@@ -33,6 +33,12 @@ export async function startSessionMedia(opts) {
     const firstPage = await listPages(opts.cdpUrl);
     let activeId = firstPage[0]?.id;
     let page = await attachPage(opts.cdpUrl);
+    let dragData;
+    let dragInterceptionActive = false;
+    let inputViewport = { height: opts.viewport.height, width: opts.viewport.width };
+    let lastInputViewportRefreshMs = 0;
+    let pointerDown = false;
+    let pointerPosition = { mod: 0, x: 0, y: 0 };
     // Capture downloads to a retrievable per-session dir (list/get over the API).
     // MUST be browser-level + kept open: a page-session setting only scopes to that
     // session, so a download from any other page/driver would escape it.
@@ -49,6 +55,9 @@ export async function startSessionMedia(opts) {
     let latest = null;
     let lastFrameMs = 0;
     let frameCount = 0, streamedBytes = 0;
+    let reattachTimer;
+    let reattaching = false;
+    let stopped = false;
     const subs = new Set();
     // Bounded ring of captured logs + live subscribers (SSE). Wired per page so it
     // follows tab switches; the buffer + subscribers are shared across tabs.
@@ -169,6 +178,19 @@ export async function startSessionMedia(opts) {
         c.send("Log.enable");
         c.on("Log.entryAdded", (p) => pushLog({ kind: "log", level: p.entry.level, text: p.entry.text, ts: Date.now() }));
     };
+    const refreshInputViewport = (c) => {
+        lastInputViewportRefreshMs = Date.now();
+        void c.call("Page.getLayoutMetrics").then((metrics) => {
+            const viewport = metrics.cssLayoutViewport;
+            if (Number.isFinite(viewport?.clientHeight) && Number.isFinite(viewport?.clientWidth) && viewport.clientHeight > 0 && viewport.clientWidth > 0) {
+                inputViewport = { height: viewport.clientHeight, width: viewport.clientWidth };
+            }
+        }).catch(() => { });
+    };
+    const refreshInputViewportIfDue = (c) => {
+        if (Date.now() - lastInputViewportRefreshMs >= 1000)
+            refreshInputViewport(c);
+    };
     const wireScreencast = (c) => {
         if (opts.mobile) {
             // Mobile emulation must be re-applied per page (it's session-scoped), so it
@@ -179,7 +201,23 @@ export async function startSessionMedia(opts) {
         }
         if (opts.geo)
             c.send("Emulation.setGeolocationOverride", { latitude: opts.geo.latitude, longitude: opts.geo.longitude, accuracy: opts.geo.accuracy ?? 50 });
+        c.on("Input.dragIntercepted", (event) => {
+            if (c !== page)
+                return;
+            const data = event.data;
+            c.send("Input.setInterceptDrags", { enabled: false });
+            dragInterceptionActive = false;
+            if (!pointerDown) {
+                c.send("Input.dispatchDragEvent", { data, type: "dragCancel", x: pointerPosition.x, y: pointerPosition.y });
+                return;
+            }
+            dragData = data;
+            c.send("Input.dispatchDragEvent", { data, modifiers: pointerPosition.mod, type: "dragEnter", x: pointerPosition.x, y: pointerPosition.y });
+        });
+        c.on("Page.frameResized", () => { if (c === page)
+            refreshInputViewport(c); });
         c.on("Page.screencastFrame", (p) => {
+            refreshInputViewportIfDue(c);
             latest = Buffer.from(p.data, "base64");
             lastFrameMs = Date.now();
             frameCount++;
@@ -189,10 +227,63 @@ export async function startSessionMedia(opts) {
             c.send("Page.screencastFrameAck", { sessionId: p.sessionId });
         });
         c.send("Page.enable");
+        refreshInputViewport(c);
         c.send("Page.startScreencast", { format: "jpeg", quality: opts.quality ?? 60, maxWidth: opts.viewport.width, maxHeight: opts.viewport.height, everyNthFrame: 1 });
         wireLogs(c);
         wireActivity(c);
+        c.onClose(() => {
+            if (c === page && !stopped)
+                scheduleReattach();
+        });
     };
+    // A renderer/page target may be replaced while the browser endpoint itself
+    // stays alive (Electron reloads do this during startup). The screencast can
+    // therefore leave a perfectly plausible last frame behind while its CDP
+    // socket is already dead, making input silently inert. Re-tap the current
+    // page on the same browser endpoint and keep the existing porthole/session
+    // identity; callers should never need to close and recreate the Surface.
+    function scheduleReattach() {
+        if (stopped || reattaching || reattachTimer)
+            return;
+        reattachTimer = setTimeout(() => {
+            reattachTimer = undefined;
+            void reattachPage();
+        }, 250);
+        reattachTimer.unref?.();
+    }
+    async function reattachPage() {
+        if (stopped || reattaching)
+            return;
+        reattaching = true;
+        let retry = false;
+        try {
+            const pages = await listPages(opts.cdpUrl);
+            const target = pages.find((candidate) => candidate.id === activeId)
+                ?? (curUrl ? pages.find((candidate) => candidate.url === curUrl) : undefined)
+                ?? pages[0];
+            if (!target)
+                throw new Error("no page target is available");
+            const next = await attachPage(opts.cdpUrl, target.id);
+            if (stopped) {
+                next.close();
+                return;
+            }
+            page = next;
+            activeId = target.id;
+            ret.cdp = next;
+            wireScreencast(next);
+            pushLog({ kind: "log", level: "info", text: "lucarne: reattached porthole to the current page target", ts: Date.now() });
+        }
+        catch (error) {
+            pushLog({ kind: "log", level: "warning", text: `lucarne: page reattach pending — ${error?.message ?? error}`, ts: Date.now() });
+            retry = true;
+        }
+        finally {
+            reattaching = false;
+            if (retry)
+                scheduleReattach();
+        }
+    }
     wireScreencast(page);
     // Frame watchdog: `Page.screencastFrame` only fires on visual CHANGE, and headless
     // Chrome composites no frames for a static/idle page — so `latest` could stay null
@@ -228,6 +319,8 @@ export async function startSessionMedia(opts) {
     }
     const FRAME_IDLE_MS = 1200;
     const watchdog = setInterval(() => {
+        if (subs.size > 0)
+            refreshInputViewportIfDue(page);
         if (Date.now() - lastFrameMs < FRAME_IDLE_MS)
             return; // live frames flowing — skip
         if (subs.size === 0 && !(opts.record && latest === null))
@@ -239,50 +332,65 @@ export async function startSessionMedia(opts) {
         get: () => latest,
         subscribe: (cb) => { subs.add(cb); return () => subs.delete(cb); },
     };
+    const inputPoint = (ev) => {
+        const frameHeight = Number.isFinite(ev.frameHeight) && ev.frameHeight > 0 ? ev.frameHeight : inputViewport.height;
+        const frameWidth = Number.isFinite(ev.frameWidth) && ev.frameWidth > 0 ? ev.frameWidth : inputViewport.width;
+        return {
+            x: (ev.x ?? 0) * inputViewport.width / frameWidth,
+            y: (ev.y ?? 0) * inputViewport.height / frameHeight,
+        };
+    };
     const onInput = (ev, actor = "human") => {
         const modifiers = ev.mod ?? 0;
-        if (actor === "human")
-            lastHumanMs = Date.now();
-        // activity log: a click (down) and typed text are the human/agent's semantic acts
-        if (ev.t === "down") {
-            void flushType();
-            void enrichClick(actor, ev.x, ev.y);
-        }
-        else if (ev.t === "paste" && typeof ev.text === "string")
-            appendType(actor, ev.text);
-        else if (ev.t === "ime" && ev.phase === "commit" && ev.text)
-            appendType(actor, ev.text);
-        // A focus-changing key (Tab/Enter/Escape) must FLUSH the buffer so a field change
-        // starts a fresh, separately-classified run — else "username<Tab>password" coalesces
-        // into one event classified by the username field and the password leaks unredacted.
-        else if (ev.t === "keydown" && (ev.key === "Tab" || ev.key === "Enter" || ev.key === "Escape"))
-            void flushType();
-        else if (ev.t === "keydown" && ev.key && ev.key.length === 1 && (modifiers & 2) === 0 && (modifiers & 4) === 0)
-            appendType(actor, ev.key);
+        let accepted = false;
         if (ev.t === "down" || ev.t === "up" || ev.t === "move") {
-            page.send("Input.dispatchMouseEvent", {
-                type: ev.t === "down" ? "mousePressed" : ev.t === "up" ? "mouseReleased" : "mouseMoved",
-                x: ev.x, y: ev.y,
-                button: ev.t === "move" ? "none" : (MOUSE_BUTTON[ev.button ?? 0] ?? "left"),
-                buttons: ev.buttons ?? 0, // held buttons → enables drags
-                clickCount: ev.t === "move" ? 0 : (ev.clickCount || 1), // double/triple-click
-                modifiers,
-            });
+            const point = inputPoint(ev);
+            pointerPosition = { mod: modifiers, ...point };
+            const button = MOUSE_BUTTON[ev.button ?? 0] ?? "left";
+            if (ev.t === "down") {
+                pointerDown = true;
+                dragData = undefined;
+            }
+            if (ev.t === "move" && pointerDown && ev.buttons && button === "left" && !dragInterceptionActive)
+                dragInterceptionActive = page.send("Input.setInterceptDrags", { enabled: true });
+            if (ev.t === "move" && dragData !== undefined) {
+                accepted = page.send("Input.dispatchDragEvent", { data: dragData, modifiers, type: "dragOver", ...point });
+            }
+            else if (ev.t === "up" && dragData !== undefined) {
+                accepted = page.send("Input.dispatchDragEvent", { data: dragData, modifiers, type: "drop", ...point });
+            }
+            else {
+                accepted = page.send("Input.dispatchMouseEvent", {
+                    type: ev.t === "down" ? "mousePressed" : ev.t === "up" ? "mouseReleased" : "mouseMoved",
+                    ...point,
+                    button: ev.t === "move" ? (ev.buttons ? button : "none") : button,
+                    buttons: ev.buttons ?? 0,
+                    clickCount: ev.t === "move" ? 0 : (ev.clickCount || 1),
+                    force: ev.buttons ? 0.5 : 0,
+                    modifiers,
+                });
+            }
+            if (ev.t === "up") {
+                if (dragInterceptionActive)
+                    page.send("Input.setInterceptDrags", { enabled: false });
+                dragData = undefined;
+                dragInterceptionActive = false;
+                pointerDown = false;
+            }
         }
         else if (ev.t === "wheel") {
-            page.send("Input.dispatchMouseEvent", { type: "mouseWheel", x: ev.x, y: ev.y, deltaX: ev.dx, deltaY: ev.dy, modifiers });
+            accepted = page.send("Input.dispatchMouseEvent", { type: "mouseWheel", ...inputPoint(ev), deltaX: ev.dx, deltaY: ev.dy, modifiers });
         }
         else if (ev.t === "touch") {
             const type = ev.phase === "start" ? "touchStart" : ev.phase === "end" ? "touchEnd" : "touchMove";
-            page.send("Input.dispatchTouchEvent", { type, touchPoints: type === "touchEnd" ? [] : [{ x: ev.x, y: ev.y }] });
+            accepted = page.send("Input.dispatchTouchEvent", { type, touchPoints: type === "touchEnd" ? [] : [inputPoint(ev)] });
         }
         else if (ev.t === "ime") {
             // IME/composition (CJK etc.) — plain keydowns can't produce composed text.
             const text = ev.text ?? "";
-            if (ev.phase === "commit")
-                page.send("Input.insertText", { text });
-            else
-                page.send("Input.imeSetComposition", { text, selectionStart: text.length, selectionEnd: text.length });
+            accepted = ev.phase === "commit"
+                ? page.send("Input.insertText", { text })
+                : page.send("Input.imeSetComposition", { text, selectionStart: text.length, selectionEnd: text.length });
         }
         else if (ev.t === "nav") {
             // Allow ONLY web schemes for porthole navigation. file://, chrome://, etc. would
@@ -290,18 +398,18 @@ export async function startSessionMedia(opts) {
             // /screenshot). Default-deny by allowlist, after stripping leading C0/whitespace
             // (the chars Chrome's URL parser strips) so `\x00file://` can't slip past.
             if (ev.action === "go" && ev.url && isWebNavUrl(ev.url))
-                page.send("Page.navigate", { url: ev.url });
+                accepted = page.send("Page.navigate", { url: ev.url });
             else if (ev.action === "back")
-                page.send("Runtime.evaluate", { expression: "history.back()" });
+                accepted = page.send("Runtime.evaluate", { expression: "history.back()" });
             else if (ev.action === "forward")
-                page.send("Runtime.evaluate", { expression: "history.forward()" });
+                accepted = page.send("Runtime.evaluate", { expression: "history.forward()" });
             else if (ev.action === "reload")
-                page.send("Page.reload", {});
+                accepted = page.send("Page.reload", {});
         }
         else if (ev.t === "paste" && typeof ev.text === "string") {
             // Clipboard sync: deliver text the operator pasted into the porthole as if
             // pasted into the focused field (CDP inserts it like a real paste).
-            page.send("Input.insertText", { text: ev.text });
+            accepted = page.send("Input.insertText", { text: ev.text });
         }
         else if ((ev.t === "keydown" || ev.t === "keyup") && ev.key) {
             const down = ev.t === "keydown";
@@ -310,7 +418,7 @@ export async function startSessionMedia(opts) {
             const text = down && ev.key.length === 1 && !cmdKey ? ev.key : undefined;
             // editing accelerators must be sent as CDP `commands` — synthetic keydowns alone don't fire them
             const command = down && cmdKey && ev.code ? EDIT_COMMANDS[ev.code === "KeyZ" && modifiers & 8 ? "RedoZ" : ev.code] : undefined;
-            page.send("Input.dispatchKeyEvent", {
+            accepted = page.send("Input.dispatchKeyEvent", {
                 type: down ? (text !== undefined ? "keyDown" : "rawKeyDown") : "keyUp",
                 key: ev.key,
                 code: ev.code ?? "",
@@ -322,6 +430,28 @@ export async function startSessionMedia(opts) {
                 location: 0,
             });
         }
+        if (!accepted)
+            return false;
+        if (actor === "human")
+            lastHumanMs = Date.now();
+        // Activity is recorded only after the live CDP socket accepts the input.
+        if (ev.t === "down") {
+            const point = inputPoint(ev);
+            void flushType();
+            void enrichClick(actor, point.x, point.y);
+        }
+        else if (ev.t === "paste" && typeof ev.text === "string")
+            appendType(actor, ev.text);
+        else if (ev.t === "ime" && ev.phase === "commit" && ev.text)
+            appendType(actor, ev.text);
+        // A focus-changing key (Tab/Enter/Escape) must FLUSH the buffer so a field change
+        // starts a fresh, separately-classified run — else "username<Tab>password" coalesces
+        // into one event classified by the username field and the password leaks unredacted.
+        else if (ev.t === "keydown" && (ev.key === "Tab" || ev.key === "Enter" || ev.key === "Escape"))
+            void flushType();
+        else if (ev.t === "keydown" && ev.key && ev.key.length === 1 && (modifiers & 2) === 0 && (modifiers & 4) === 0)
+            appendType(actor, ev.key);
+        return true;
     };
     const recorder = opts.record
         ? startRecorder({ recDir: opts.recDir, fps: opts.fps, retentionMin: opts.retentionMin, segmentSeconds: opts.segmentSeconds, frames })
@@ -364,6 +494,9 @@ export async function startSessionMedia(opts) {
             catch { /* ignore */ }
         },
         close() {
+            stopped = true;
+            if (reattachTimer)
+                clearTimeout(reattachTimer);
             clearInterval(watchdog);
             try {
                 recorder?.close();