import { chromium, BrowserContext, Browser } from 'playwright';
import fs from 'fs/promises';
import path from 'path';

interface AccountMetadata {
  accountId: string;
  profilePath: string;
  proxyEndpoint?: string;
  region: string;
  createdAt: string;
  lastValidated: string;
}

interface AuthSnapshot {
  cookies: Array<{ name: string; value: string; domain: string; path: string }>;
  origins: Array<{ origin: string; localStorage: Array<{ name: string; value: string }> }>;
  metadata: AccountMetadata;
}

class BrowserIdentityManager {
  private browser: Browser | null = null;

  async initialize(headless: boolean = true): Promise<void> {
    this.browser = await chromium.launch({ headless });
  }

  async close(): Promise<void> {
    if (this.browser) {
      await this.browser.close();
      this.browser = null;
    }
  }
}

  async createPersistentSession(metadata: AccountMetadata): Promise<BrowserContext> {
    if (!this.browser) throw new Error('Browser not initialized');

    const profileDir = path.resolve(metadata.profilePath);
    await fs.mkdir(profileDir, { recursive: true });

    const context = await chromium.launchPersistentContext(profileDir, {
      headless: false, // Persistent profiles typically require headed mode for stability
      proxy: metadata.proxyEndpoint ? { server: metadata.proxyEndpoint } : undefined,
      locale: 'en-US',
      timezoneId: 'America/New_York',
      viewport: { width: 1280, height: 720 },
      userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36'
    });

    // Persist metadata alongside the profile for auditability
    await fs.writeFile(
     

path.join(profileDir, 'identity.json'), JSON.stringify(metadata, null, 2) );

return context;

}

### Step 3: Implement Snapshot Export & Validation

Snapshots should never be treated as authoritative identity sources. They are fast-loading credentials for ephemeral contexts. We attach validation metadata to prevent region drift and headless/headed mismatches.

```typescript
  async exportAuthSnapshot(context: BrowserContext, targetPath: string, metadata: AccountMetadata): Promise<void> {
    const rawState = await context.storageState();
    
    const validatedSnapshot: AuthSnapshot = {
      cookies: rawState.cookies,
      origins: rawState.origins,
      metadata: {
        ...metadata,
        lastValidated: new Date().toISOString(),
        executionMode: 'headed' // Explicitly tag the source environment
      }
    };

    await fs.writeFile(targetPath, JSON.stringify(validatedSnapshot, null, 2));
  }

  async loadEphemeralSession(snapshotPath: string): Promise<BrowserContext> {
    if (!this.browser) throw new Error('Browser not initialized');

    const raw = await fs.readFile(snapshotPath, 'utf-8');
    const snapshot: AuthSnapshot = JSON.parse(raw);

    // Validate environmental consistency before injection
    if (snapshot.metadata.executionMode === 'headed') {
      console.warn(`Snapshot ${snapshotPath} was generated in headed mode. Headless replay may trigger verification.`);
    }

    return this.browser.newContext({
      storageState: snapshotPath,
      proxy: snapshot.metadata.proxyEndpoint ? { server: snapshot.metadata.proxyEndpoint } : undefined,
      locale: 'en-US',
      timezoneId: 'America/New_York'
    });
  }

Architecture Rationale

1. Directory Isolation: Each persistent profile lives in a dedicated folder. This prevents cache, IndexedDB, and permission bleed between accounts. Playwright's internal storage mechanisms rely on origin-scoped directories; sharing paths causes silent state corruption.
2. Metadata Attachment: Raw JSON snapshots lack context. By embedding execution mode, proxy region, and validation timestamps directly into the state file, you create an auditable trail. This eliminates guesswork when sessions fail unexpectedly.
3. Headless/Headed Boundary: Persistent profiles are initialized in headed mode by default. Modern platforms fingerprint browser rendering pipelines. Headless contexts often trigger additional verification steps. Snapshots exported from headed sessions should be replayed in matched environments unless explicitly tested for headless compatibility.
4. Proxy Binding: Proxy endpoints are tied to both the context initialization and the metadata. Rotating proxies without updating the profile's environmental signature breaks session continuity. The architecture enforces explicit proxy declaration at context creation.

Pitfall Guide

1. Snapshot Drift

Explanation: Reusing a storageState file long after its creation without validating session expiry. Cookies and tokens decay, but the file remains valid JSON. Fix: Implement a lastValidated timestamp check. Reject snapshots older than a configurable threshold (e.g., 24 hours for high-security platforms). Trigger automatic re-authentication when drift is detected.

2. Proxy-Region Mismatch

Explanation: Exporting a state file while connected to a US proxy, then replaying it through a German proxy. Platforms detect geographic inconsistency and invalidate the session. Fix: Bind proxy endpoints to metadata. Validate that the current proxy region matches the snapshot's recorded region before injection. Fail fast with a clear error instead of allowing silent auth failure.

3. Headless/Headed State Leakage

Explanation: Logging in via a headed browser, saving the state, and replaying it in headless mode. Rendering differences, WebGL fingerprints, and navigator properties differ between modes, triggering bot detection. Fix: Tag snapshots with their source execution mode. Maintain separate state files for headed and headless workflows. Test headless compatibility explicitly before deploying to CI.

4. IndexedDB/Cache Blind Spots

Explanation: Assuming cookies and local storage are sufficient for all applications. Modern SPAs rely heavily on IndexedDB for offline caching, service worker registrations, and client-side state machines. Fix: Use persistentContext for applications that depend on IndexedDB or service workers. Snapshots cannot capture these storage mechanisms. Verify application architecture before choosing a state strategy.

5. Flat File State Chaos

Explanation: Storing all snapshots in a single directory with generic names (login.json, state.json). This leads to accidental overwrites and makes debugging impossible. Fix: Enforce a strict naming convention: {account-id}-{region}-{mode}-{timestamp}.json. Pair with a manifest file that tracks active states, expiry, and associated profiles.

6. Cross-Account Context Pollution

Explanation: Reusing a single BrowserContext instance across multiple accounts by swapping state files mid-session. This leaves residual cache, permissions, and history from the previous account. Fix: Always create a fresh context for each account. Dispose of contexts immediately after use. Never mutate context state after initialization.

7. Ignoring Permission Grants

Explanation: Notifications, geolocation, camera, and microphone permissions are stored separately from cookies. Snapshots do not capture them, causing unexpected permission prompts during replay. Fix: Use persistentContext when permission state matters. Alternatively, explicitly grant permissions via context.grantPermissions() after loading a snapshot, but recognize this breaks the illusion of a natural browsing session.

Production Bundle

Action Checklist

• Audit target applications for IndexedDB, service workers, and permission dependencies before selecting a state strategy
• Implement metadata tagging for all exported snapshots (account ID, region, execution mode, timestamp)
• Enforce directory isolation for persistent profiles; never share user data paths across accounts
• Validate proxy region consistency between snapshot creation and replay environments
• Set automatic expiry thresholds for snapshots; trigger re-authentication when drift is detected
• Maintain separate state files for headed and headless workflows; test compatibility explicitly
• Dispose of browser contexts immediately after use; never reuse contexts across accounts
• Log session initialization events with full environmental context for debugging

Decision Matrix

Scenario	Recommended Approach	Why	Cost Impact
CI Regression Suite	storageState Snapshot	Fast initialization, deterministic state, no environmental drift	Low (Minimal storage, fast execution)
Long-Running Social Bot	persistentContext Profile	Maintains browsing history, cache, and platform trust signals	Medium (Disk I/O, slower startup)
Marketplace Monitor	persistentContext Profile	Preserves IndexedDB, permissions, and proxy-bound identity	Medium-High (Requires stable proxy routing)
Extension-Dependent Workflow	persistentContext Profile	Snapshots cannot capture extension state or background scripts	High (Requires headed mode, extension packaging)
Quick Role-Based Test	storageState Snapshot	Isolated, repeatable, no cross-test contamination	Low (Ephemeral, zero persistence overhead)

Configuration Template

// identity.config.ts
export const ACCOUNT_REGISTRY = {
  'account-alpha': {
    profilePath: './data/profiles/account-alpha',
    proxyEndpoint: 'http://us-east-proxy.internal:8080',
    region: 'US-EAST',
    timezone: 'America/New_York',
    locale: 'en-US',
    stateStrategy: 'persistent' // or 'snapshot'
  },
  'account-beta': {
    profilePath: './data/profiles/account-beta',
    proxyEndpoint: 'http://eu-west-proxy.internal:8080',
    region: 'EU-WEST',
    timezone: 'Europe/Berlin',
    locale: 'de-DE',
    stateStrategy: 'snapshot'
  }
};

export const STATE_VALIDATION = {
  maxSnapshotAgeHours: 24,
  requireRegionMatch: true,
  warnOnHeadlessReplay: true,
  autoRotateProxyOnFailure: false
};

export const DIRECTORY_STRUCTURE = {
  profiles: './data/profiles',
  snapshots: './data/snapshots',
  logs: './data/logs',
  manifest: './data/manifest.json'
};

Quick Start Guide

1. Initialize the Manager: Import BrowserIdentityManager, call initialize(false) for persistent workflows or initialize(true) for snapshot-based tests.
2. Authenticate & Persist: Navigate to the login endpoint, complete authentication, then call createPersistentSession() or exportAuthSnapshot() with full metadata.
3. Validate Environment: Before replaying, check the snapshot's lastValidated timestamp and proxy region against current configuration. Reject if mismatched or expired.
4. Execute & Dispose: Load the context, run your automation steps, then immediately call context.close() and manager.close(). Never leave contexts open.
5. Audit & Rotate: Review logs for session decay or verification triggers. Rotate snapshots or refresh persistent profiles according to your validation thresholds.