@anvailabs/agentbrowser-mcp 1.8.19 → 1.9.0

package/dist/bin.js

@@ -7434,11 +7434,21 @@ var AGENT_CAPABILITIES = Object.freeze([
   "page.interact",
   "page.form",
   "page.extract",
-  "page.capture"
+  "page.capture",
+  "application.discover",
+  "application.execute"
 ]);
-var FULL_BROWSER_PROFILE = AGENT_CAPABILITIES;
-var AUDIT_PROFILE = AGENT_CAPABILITIES.filter((capability) => capability !== "page.form");
-var APPLICATION_PROFILE = ["session.control"];
+var APPLICATION_CAPABILITIES = [
+  "application.discover",
+  "application.execute"
+];
+var BROWSER_PROFILE = AGENT_CAPABILITIES.filter((capability) => !APPLICATION_CAPABILITIES.includes(capability));
+var FULL_BROWSER_PROFILE = BROWSER_PROFILE;
+var AUDIT_PROFILE = BROWSER_PROFILE.filter((capability) => capability !== "page.form");
+var APPLICATION_PROFILE = [
+  "session.control",
+  ...APPLICATION_CAPABILITIES
+];
 var profiles = Object.freeze({
   qa: profile("qa", FULL_BROWSER_PROFILE),
   operations: profile("operations", FULL_BROWSER_PROFILE),
@@ -7462,6 +7472,14 @@ function agentModeAllows(mode, capability) {
 }
 
 // ../protocol/dist/control.js
+var strict = { additionalProperties: false };
+var OPERATION_ID_PATTERN = "^[a-zA-Z0-9_-]{1,128}$";
+var CONTROL_OPERATION_ID = new RegExp(OPERATION_ID_PATTERN);
+var OperationIdSchema = Type.String({
+  minLength: 1,
+  maxLength: 128,
+  pattern: OPERATION_ID_PATTERN
+});
 var ControlStateSchema = Type.Union([
   Type.Literal("HUMAN_ACTIVE"),
   Type.Literal("RESUME_REVIEW"),
@@ -7470,8 +7488,8 @@ var ControlStateSchema = Type.Union([
   Type.Literal("STOPPED")
 ]);
 var OperationRecordSchema = Type.Object({
-  operationId: Type.String(),
-  epoch: Type.Integer(),
+  operationId: OperationIdSchema,
+  epoch: Type.Integer({ minimum: 0 }),
   status: Type.Union([
     Type.Literal("in_flight"),
     Type.Literal("completed"),
@@ -7479,7 +7497,8 @@ var OperationRecordSchema = Type.Object({
     Type.Literal("outcome_unknown")
   ]),
   dispatched: Type.Boolean()
-});
+}, strict);
+var OperationReplaySchema = Type.Object({ replay: Type.Literal(true), operation: OperationRecordSchema }, { ...strict, $id: "urn:agentbrowser:operation-replay:v1" });
 var RunCursorSchema = Type.Object({
   version: Type.Literal(1),
   serviceGeneration: Type.String({ pattern: "^[A-Za-z0-9_-]{22}$" }),
@@ -7496,6 +7515,13 @@ var ControlViewSchema = Type.Object({
   operation: Type.Optional(OperationRecordSchema),
   cursor: Type.Optional(RunCursorSchema)
 });
+function parseOperationReplay(input) {
+  return parseExecutionReport(OperationReplaySchema, input, "operation replay", void 0, {
+    maxDepth: 4,
+    maxNodes: 32,
+    maxBytes: 4096
+  });
+}
 var ControlReviewSchema = Type.Intersect([
   ControlViewSchema,
   Type.Object({
@@ -7513,21 +7539,51 @@ var ControlGrantSchema = Type.Intersect([
   Type.Object({ token: Type.String(), mode: AgentModeSchema, cursor: RunCursorSchema })
 ]);
 
+// ../protocol/dist/application.js
+var strict2 = { additionalProperties: false };
+var ID_SCHEMA = OperationIdSchema;
+var ApplicationBindingSchema = Type.Object({ adapter: ID_SCHEMA, resource: ID_SCHEMA }, strict2);
+var ApplicationOperationDescriptorSchema = Type.Object({
+  name: ID_SCHEMA,
+  mode: Type.Union([Type.Literal("read"), Type.Literal("write")])
+}, strict2);
+var ApplicationDiscoverySchema = Type.Object({
+  adapter: Type.String(),
+  resource: Type.String(),
+  operations: Type.Array(ApplicationOperationDescriptorSchema, { maxItems: 256 })
+}, strict2);
+var ApplicationExecuteRequestSchema = Type.Object({
+  operation: ID_SCHEMA,
+  input: Type.Unknown(),
+  operationId: Type.Optional(ID_SCHEMA),
+  expectedVersion: Type.Optional(Type.Integer({ minimum: 0 }))
+}, strict2);
+var ApplicationOperationResultSchema = Type.Union([
+  Type.Object({
+    status: Type.Union([Type.Literal("read"), Type.Literal("committed")]),
+    value: Type.Unknown()
+  }, strict2),
+  Type.Object({ status: Type.Literal("rejected"), reason: Type.String() }, strict2),
+  Type.Object({ replay: Type.Literal(true), operation: OperationRecordSchema }, strict2)
+]);
+var binding = TypeCompiler.Compile(ApplicationBindingSchema);
+var execute = TypeCompiler.Compile(ApplicationExecuteRequestSchema);
+
 // ../protocol/dist/autofill.js
 var text = () => Type.String({ minLength: 1, maxLength: 512 });
-var strict = { additionalProperties: false };
+var strict3 = { additionalProperties: false };
 var AutofillMatchSchema = Type.Object({
   role: Type.Optional(text()),
   label: Type.Optional(text()),
   labelRegex: Type.Optional(text()),
   dataAutomationId: Type.Optional(text()),
-  block: Type.Optional(Type.Object({ id: Type.Optional(text()), label: Type.Optional(text()) }, { ...strict, minProperties: 1 }))
-}, { ...strict, minProperties: 1 });
+  block: Type.Optional(Type.Object({ id: Type.Optional(text()), label: Type.Optional(text()) }, { ...strict3, minProperties: 1 }))
+}, { ...strict3, minProperties: 1 });
 var AutofillRequestSchema = Type.Object({
   fields: Type.Array(Type.Object({
     match: AutofillMatchSchema,
     value: Type.Optional(Type.String({ maxLength: 8192 })),
-    option: Type.Optional(Type.Object({ value: Type.String({ maxLength: 8192 }) }, strict)),
+    option: Type.Optional(Type.Object({ value: Type.String({ maxLength: 8192 }) }, strict3)),
     verify: Type.Optional(Type.Union([Type.Literal("exact"), Type.Literal("none")])),
     strategy: Type.Optional(Type.Union([
       Type.Literal("native-input"),
@@ -7535,15 +7591,15 @@ var AutofillRequestSchema = Type.Object({
       Type.Literal("react-select"),
       Type.Literal("chip-multiselect")
     ]))
-  }, strict), { minItems: 1, maxItems: 50 }),
+  }, strict3), { minItems: 1, maxItems: 50 }),
   policy: Type.Optional(Type.Object({
     onAmbiguous: Type.Optional(Type.Union([Type.Literal("fail"), Type.Literal("skip")])),
     onVerifyFail: Type.Optional(Type.Union([Type.Literal("fail"), Type.Literal("skip"), Type.Literal("retry")])),
     maxReobserve: Type.Optional(Type.Integer({ minimum: 0, maximum: 5 })),
     settleMs: Type.Optional(Type.Integer({ minimum: 0, maximum: 2e3 })),
     timeoutMs: Type.Optional(Type.Integer({ minimum: 1, maximum: 24e4 }))
-  }, strict))
-}, strict);
+  }, strict3))
+}, strict3);
 var AutofillReceiptSchema = Type.Object({
   field: Type.Integer({ minimum: 0, maximum: 49 }),
   match: AutofillMatchSchema,
@@ -7554,8 +7610,8 @@ var AutofillReceiptSchema = Type.Object({
   verified: Type.Boolean(),
   actual: Type.Optional(Type.String({ maxLength: 512 })),
   actualTruncated: Type.Optional(Type.Boolean()),
-  error: Type.Optional(Type.Object({ code: Type.String(), message: Type.String() }, strict))
-}, strict);
+  error: Type.Optional(Type.Object({ code: Type.String(), message: Type.String() }, strict3))
+}, strict3);
 var AutofillReportSchema = Type.Object({
   ok: Type.Boolean(),
   receipts: Type.Array(AutofillReceiptSchema, { maxItems: 50 }),
@@ -7565,9 +7621,9 @@ var AutofillReportSchema = Type.Object({
     contentType: Type.Optional(Type.String()),
     sizeBytes: Type.Optional(Type.Integer({ minimum: 0 })),
     warnings: Type.Optional(Type.Array(Type.String()))
-  }, strict)),
+  }, strict3)),
   snapshotError: Type.Optional(Type.String())
-}, { ...strict, $id: "urn:agentbrowser:autofill-report:v1" });
+}, { ...strict3, $id: "urn:agentbrowser:autofill-report:v1" });
 function labelPattern(pattern) {
   const start = pattern.startsWith("^");
   const end = pattern.endsWith("$");
@@ -7673,7 +7729,7 @@ function createPlanReportParser(actions) {
 }
 
 // ../protocol/dist/outcome.js
-var strict2 = { additionalProperties: false };
+var strict4 = { additionalProperties: false };
 var identifier = () => Type.String({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z0-9][A-Za-z0-9._-]*$" });
 var GROUNDING_LAYERS = Object.freeze(["G0", "G1", "G2", "G3", "G4", "G5", "G6"]);
 var GroundingLayerSchema = Type.Union([
@@ -7698,11 +7754,11 @@ var VerificationProjectionSchema = Type.Object({
     Type.Literal("unknown"),
     Type.Literal("not_requested")
   ]),
-  verifier: Type.Optional(Type.Object({ id: identifier(), version: identifier() }, strict2)),
+  verifier: Type.Optional(Type.Object({ id: identifier(), version: identifier() }, strict4)),
   requiredLayer: GroundingLayerSchema,
   achievedLayer: Type.Optional(GroundingLayerSchema),
   evidenceRefIds: EvidenceReferenceIdsSchema
-}, strict2);
+}, strict4);
 var OutcomeProjectionSchema = Type.Object({
   availability: Type.Union([
     Type.Literal("available"),
@@ -7729,7 +7785,24 @@ var OutcomeProjectionSchema = Type.Object({
     Type.Literal("application"),
     Type.Literal("agent_tool")
   ])
-}, strict2);
+}, strict4);
+var evidenceCorrelationIdSchema = {
+  ...OperationIdSchema,
+  description: "Business receipt operation ID for an opted-in trusted evidence source; distinct from the service operation ID and conveys no authority."
+};
+var OutcomeRunRequestSchema = Type.Object({
+  // A UI outcome must exercise the UI seam; an empty plan cannot attest it.
+  actions: Type.Array(PlanStepSchema, { minItems: 1 }),
+  verification: Type.Object({
+    verifier: Type.Object({ id: identifier(), version: identifier() }, strict4),
+    input: Type.Unknown(),
+    evidenceCorrelationId: Type.Optional(evidenceCorrelationIdSchema)
+  }, strict4)
+}, { ...strict4, $id: "urn:agentbrowser:outcome-run-request:v1" });
+var OutcomeRunReportSchema = Type.Object({
+  plan: PlanReportSchema,
+  outcome: OutcomeProjectionSchema
+}, { ...strict4, $id: "urn:agentbrowser:outcome-run-report:v1" });
 var TrustedVerifierDescriptorSchema = Type.Object({
   id: identifier(),
   version: identifier(),
@@ -7741,12 +7814,68 @@ var TrustedVerifierDescriptorSchema = Type.Object({
   budget: Type.Object({
     maxReads: Type.Integer({ minimum: 1, maximum: 100 }),
     timeoutMs: Type.Integer({ minimum: 1, maximum: 6e4 }),
+    pollIntervalMs: Type.Integer({ minimum: 1, maximum: 1e4 }),
+    cleanupTimeoutMs: Type.Integer({ minimum: 1, maximum: 6e4 }),
     maxEvidenceRefs: Type.Integer({ minimum: 1, maximum: 32 })
-  }, strict2),
+  }, strict4),
   redaction: Type.Literal("reference_only"),
   unsupported: Type.Array(Type.String({ minLength: 1, maxLength: 128 }), { maxItems: 16 }),
   cleanup: Type.Union([Type.Literal("not_needed"), Type.Literal("required")])
-}, strict2);
+}, strict4);
+var layer = (value) => GROUNDING_LAYERS.indexOf(value);
+function validVerification(value) {
+  if (value.status === "not_requested")
+    return value.verifier === void 0 && value.achievedLayer === void 0 && value.evidenceRefIds.length === 0;
+  if (!value.verifier)
+    return false;
+  if (value.status === "unknown")
+    return true;
+  if (value.achievedLayer === void 0 || value.evidenceRefIds.length === 0)
+    return false;
+  return value.status !== "passed" || layer(value.achievedLayer) >= layer(value.requiredLayer);
+}
+function parseOutcomeProjection(input) {
+  return parseExecutionReport(OutcomeProjectionSchema, input, "outcome projection", (outcome) => validVerification(outcome.verification), VERIFICATION_SNAPSHOT_LIMITS);
+}
+function parseOutcomeRunRequest(input) {
+  return parseExecutionReport(OutcomeRunRequestSchema, input, "outcome run request", void 0, VERIFICATION_SNAPSHOT_LIMITS);
+}
+function validRunAxes(plan, outcome) {
+  if (plan.ok !== (outcome.execution === "completed"))
+    return false;
+  if (!plan.ok && outcome.execution !== "failed" && outcome.execution !== "unknown") {
+    const unavailableBeforeExecution = outcome.execution === "not_started" && outcome.availability !== "available" && plan.completed === 0 && plan.results.length === 0;
+    if (!unavailableBeforeExecution)
+      return false;
+  }
+  return outcome.verification.status !== "passed" || outcome.execution === "completed";
+}
+function invalidOutcomeRunReport() {
+  throw new Error(`Invalid outcome run report. ${INTERACTION_GUIDANCE.uncertainWrite}`);
+}
+function parseRunReport(input, parsePlan, verifier) {
+  const report = parseExecutionReport(OutcomeRunReportSchema, input, "outcome run report", void 0, VERIFICATION_SNAPSHOT_LIMITS);
+  let plan;
+  let outcome;
+  try {
+    plan = parsePlan(report.plan);
+    outcome = parseOutcomeProjection(report.outcome);
+  } catch {
+    return invalidOutcomeRunReport();
+  }
+  if (!validRunAxes(plan, outcome))
+    return invalidOutcomeRunReport();
+  if (verifier !== void 0 && (outcome.verification.verifier?.id !== verifier.id || outcome.verification.verifier.version !== verifier.version)) {
+    return invalidOutcomeRunReport();
+  }
+  return { plan, outcome };
+}
+function createOutcomeRunReportParser(request) {
+  const snapshot = parseOutcomeRunRequest(request);
+  const parsePlan = createPlanReportParser(snapshot.actions);
+  const verifier = Object.freeze({ ...snapshot.verification.verifier });
+  return (input) => parseRunReport(input, parsePlan, verifier);
+}
 
 // ../sdk-typescript/dist/client.js
 var AgentBrowserError = class extends Error {
@@ -7775,7 +7904,13 @@ var HttpClient = class {
     this.headers = headers;
   }
   async requestJson(path, init = {}) {
-    const operationId = path.startsWith("/v1/sessions/") && !path.includes("/control") && init.method && init.method !== "GET" ? init.operationId ?? this.headers["x-agentbrowser-operation-id"] ?? crypto.randomUUID() : void 0;
+    const operationId = path.startsWith("/v1/sessions/") && !path.includes("/control") && // Application routes carry their operation identity in the BODY
+    // (deduplicated and fingerprinted by the ApplicationAuthority); the
+    // server ignores the header there. Deriving one here would mint a
+    // random UUID, poison error details with a phantom ID, and make the
+    // replay guard reject legitimate application replays whose recorded
+    // operation ID can never equal a locally minted UUID.
+    !path.includes("/application") && init.method && init.method !== "GET" ? init.operationId ?? this.headers["x-agentbrowser-operation-id"] ?? crypto.randomUUID() : void 0;
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), init.timeoutMs ?? this.timeoutMs);
     try {
@@ -7810,13 +7945,24 @@ var HttpClient = class {
         throw new AgentBrowserError(error2.code, error2.message, error2.retryable, { ...error2.details, ...operationId ? { operationId } : {} }, error2.action, error2.traceId);
       }
       const result = await response.json();
-      if (result?.replay === true)
-        throw new AgentBrowserError("OPERATION_RECORDED", "Operation already recorded; reconcile its status before taking further action", false, { operationId, operation: result.operation });
+      const invalidResponse = () => new AgentBrowserError("INVALID_RESPONSE", `Invalid operation response. ${INTERACTION_GUIDANCE.uncertainWrite}`, false, operationId ? { operationId } : void 0);
+      const replayShaped = typeof result === "object" && result !== null && !Array.isArray(result) && Object.hasOwn(result, "replay") && result.replay === true;
+      if (operationId && replayShaped) {
+        let replay;
+        try {
+          replay = parseOperationReplay(result);
+        } catch {
+          throw invalidResponse();
+        }
+        if (replay.operation.operationId !== operationId)
+          throw invalidResponse();
+        throw new AgentBrowserError("OPERATION_RECORDED", "Operation already recorded; reconcile its status before taking further action", false, { operationId, operation: replay.operation });
+      }
       if (init.parseResponse) {
         try {
           return init.parseResponse(result);
         } catch {
-          throw new AgentBrowserError("INVALID_RESPONSE", `Invalid operation response. ${INTERACTION_GUIDANCE.uncertainWrite}`, false, operationId ? { operationId } : void 0);
+          throw invalidResponse();
         }
       }
       return result;
@@ -7857,6 +8003,41 @@ var SessionsClient = class {
   async operation(sessionId, operationId) {
     return this.http.requestJson(`/v1/sessions/${sessionId}/operations/${encodeURIComponent(operationId)}`);
   }
+  /** Operator: bind an application adapter to a resource while the human owns the session. */
+  async applicationBind(sessionId, binding2) {
+    return this.http.requestJson(`/v1/sessions/${sessionId}/application`, {
+      method: "PUT",
+      body: binding2
+    });
+  }
+  /**
+   * Operator: drop the binding. Like bind, this requires the human to own
+   * the session - it takes control as a side effect (bumping the control
+   * epoch and invalidating a prepared review) even when nothing is bound.
+   */
+  async applicationUnbind(sessionId) {
+    return this.http.requestJson(`/v1/sessions/${sessionId}/application`, { method: "DELETE" });
+  }
+  /** The bound adapter's operations, or null when nothing is bound. */
+  async applicationDiscover(sessionId) {
+    return this.http.requestJson(`/v1/sessions/${sessionId}/application`);
+  }
+  /**
+   * Dispatch one application operation. Writes need operationId +
+   * expectedVersion; a repeated operationId returns the recorded
+   * operation (`replay: true`) instead of re-executing - the retry-safe
+   * path. Read operations must not carry either identity.
+   */
+  async applicationExecute(sessionId, request) {
+    return this.http.requestJson(`/v1/sessions/${sessionId}/application/execute`, {
+      method: "POST",
+      body: request
+    });
+  }
+  /** Read one application receipt by operation ID; null when the adapter has none. */
+  async applicationReceipt(sessionId, operationId) {
+    return this.http.requestJson(`/v1/sessions/${sessionId}/application/receipts/${encodeURIComponent(operationId)}`);
+  }
   async listPages(sessionId) {
     const result = await this.http.requestJson(`/v1/sessions/${sessionId}/pages`);
     return result.pages;
@@ -7946,6 +8127,16 @@ var SessionsClient = class {
       parseResponse
     });
   }
+  /** Execute one existing plan and verify its outcome through a trusted server source. */
+  async outcome(sessionId, pageId, request, options = {}) {
+    const parseResponse = createOutcomeRunReportParser(request);
+    return this.http.requestJson(`/v1/sessions/${sessionId}/pages/${pageId}/outcomes`, {
+      method: "POST",
+      body: request,
+      ...options,
+      parseResponse
+    });
+  }
   /** TD-BROWSER-8: self-contained snapshot payload for one-shot LLM reasoning. */
   async snapshot(sessionId, pageId, bounds) {
     const query = new URLSearchParams();

package/dist/index.js

@@ -7430,11 +7430,21 @@ var AGENT_CAPABILITIES = Object.freeze([
   "page.interact",
   "page.form",
   "page.extract",
-  "page.capture"
+  "page.capture",
+  "application.discover",
+  "application.execute"
 ]);
-var FULL_BROWSER_PROFILE = AGENT_CAPABILITIES;
-var AUDIT_PROFILE = AGENT_CAPABILITIES.filter((capability) => capability !== "page.form");
-var APPLICATION_PROFILE = ["session.control"];
+var APPLICATION_CAPABILITIES = [
+  "application.discover",
+  "application.execute"
+];
+var BROWSER_PROFILE = AGENT_CAPABILITIES.filter((capability) => !APPLICATION_CAPABILITIES.includes(capability));
+var FULL_BROWSER_PROFILE = BROWSER_PROFILE;
+var AUDIT_PROFILE = BROWSER_PROFILE.filter((capability) => capability !== "page.form");
+var APPLICATION_PROFILE = [
+  "session.control",
+  ...APPLICATION_CAPABILITIES
+];
 var profiles = Object.freeze({
   qa: profile("qa", FULL_BROWSER_PROFILE),
   operations: profile("operations", FULL_BROWSER_PROFILE),
@@ -7455,6 +7465,14 @@ function agentModeAllows(mode, capability) {
 }
 
 // ../protocol/dist/control.js
+var strict = { additionalProperties: false };
+var OPERATION_ID_PATTERN = "^[a-zA-Z0-9_-]{1,128}$";
+var CONTROL_OPERATION_ID = new RegExp(OPERATION_ID_PATTERN);
+var OperationIdSchema = Type.String({
+  minLength: 1,
+  maxLength: 128,
+  pattern: OPERATION_ID_PATTERN
+});
 var ControlStateSchema = Type.Union([
   Type.Literal("HUMAN_ACTIVE"),
   Type.Literal("RESUME_REVIEW"),
@@ -7463,8 +7481,8 @@ var ControlStateSchema = Type.Union([
   Type.Literal("STOPPED")
 ]);
 var OperationRecordSchema = Type.Object({
-  operationId: Type.String(),
-  epoch: Type.Integer(),
+  operationId: OperationIdSchema,
+  epoch: Type.Integer({ minimum: 0 }),
   status: Type.Union([
     Type.Literal("in_flight"),
     Type.Literal("completed"),
@@ -7472,7 +7490,8 @@ var OperationRecordSchema = Type.Object({
     Type.Literal("outcome_unknown")
   ]),
   dispatched: Type.Boolean()
-});
+}, strict);
+var OperationReplaySchema = Type.Object({ replay: Type.Literal(true), operation: OperationRecordSchema }, { ...strict, $id: "urn:agentbrowser:operation-replay:v1" });
 var RunCursorSchema = Type.Object({
   version: Type.Literal(1),
   serviceGeneration: Type.String({ pattern: "^[A-Za-z0-9_-]{22}$" }),
@@ -7506,21 +7525,51 @@ var ControlGrantSchema = Type.Intersect([
   Type.Object({ token: Type.String(), mode: AgentModeSchema, cursor: RunCursorSchema })
 ]);
 
+// ../protocol/dist/application.js
+var strict2 = { additionalProperties: false };
+var ID_SCHEMA = OperationIdSchema;
+var ApplicationBindingSchema = Type.Object({ adapter: ID_SCHEMA, resource: ID_SCHEMA }, strict2);
+var ApplicationOperationDescriptorSchema = Type.Object({
+  name: ID_SCHEMA,
+  mode: Type.Union([Type.Literal("read"), Type.Literal("write")])
+}, strict2);
+var ApplicationDiscoverySchema = Type.Object({
+  adapter: Type.String(),
+  resource: Type.String(),
+  operations: Type.Array(ApplicationOperationDescriptorSchema, { maxItems: 256 })
+}, strict2);
+var ApplicationExecuteRequestSchema = Type.Object({
+  operation: ID_SCHEMA,
+  input: Type.Unknown(),
+  operationId: Type.Optional(ID_SCHEMA),
+  expectedVersion: Type.Optional(Type.Integer({ minimum: 0 }))
+}, strict2);
+var ApplicationOperationResultSchema = Type.Union([
+  Type.Object({
+    status: Type.Union([Type.Literal("read"), Type.Literal("committed")]),
+    value: Type.Unknown()
+  }, strict2),
+  Type.Object({ status: Type.Literal("rejected"), reason: Type.String() }, strict2),
+  Type.Object({ replay: Type.Literal(true), operation: OperationRecordSchema }, strict2)
+]);
+var binding = TypeCompiler.Compile(ApplicationBindingSchema);
+var execute = TypeCompiler.Compile(ApplicationExecuteRequestSchema);
+
 // ../protocol/dist/autofill.js
 var text = () => Type.String({ minLength: 1, maxLength: 512 });
-var strict = { additionalProperties: false };
+var strict3 = { additionalProperties: false };
 var AutofillMatchSchema = Type.Object({
   role: Type.Optional(text()),
   label: Type.Optional(text()),
   labelRegex: Type.Optional(text()),
   dataAutomationId: Type.Optional(text()),
-  block: Type.Optional(Type.Object({ id: Type.Optional(text()), label: Type.Optional(text()) }, { ...strict, minProperties: 1 }))
-}, { ...strict, minProperties: 1 });
+  block: Type.Optional(Type.Object({ id: Type.Optional(text()), label: Type.Optional(text()) }, { ...strict3, minProperties: 1 }))
+}, { ...strict3, minProperties: 1 });
 var AutofillRequestSchema = Type.Object({
   fields: Type.Array(Type.Object({
     match: AutofillMatchSchema,
     value: Type.Optional(Type.String({ maxLength: 8192 })),
-    option: Type.Optional(Type.Object({ value: Type.String({ maxLength: 8192 }) }, strict)),
+    option: Type.Optional(Type.Object({ value: Type.String({ maxLength: 8192 }) }, strict3)),
     verify: Type.Optional(Type.Union([Type.Literal("exact"), Type.Literal("none")])),
     strategy: Type.Optional(Type.Union([
       Type.Literal("native-input"),
@@ -7528,15 +7577,15 @@ var AutofillRequestSchema = Type.Object({
       Type.Literal("react-select"),
       Type.Literal("chip-multiselect")
     ]))
-  }, strict), { minItems: 1, maxItems: 50 }),
+  }, strict3), { minItems: 1, maxItems: 50 }),
   policy: Type.Optional(Type.Object({
     onAmbiguous: Type.Optional(Type.Union([Type.Literal("fail"), Type.Literal("skip")])),
     onVerifyFail: Type.Optional(Type.Union([Type.Literal("fail"), Type.Literal("skip"), Type.Literal("retry")])),
     maxReobserve: Type.Optional(Type.Integer({ minimum: 0, maximum: 5 })),
     settleMs: Type.Optional(Type.Integer({ minimum: 0, maximum: 2e3 })),
     timeoutMs: Type.Optional(Type.Integer({ minimum: 1, maximum: 24e4 }))
-  }, strict))
-}, strict);
+  }, strict3))
+}, strict3);
 var AutofillReceiptSchema = Type.Object({
   field: Type.Integer({ minimum: 0, maximum: 49 }),
   match: AutofillMatchSchema,
@@ -7547,8 +7596,8 @@ var AutofillReceiptSchema = Type.Object({
   verified: Type.Boolean(),
   actual: Type.Optional(Type.String({ maxLength: 512 })),
   actualTruncated: Type.Optional(Type.Boolean()),
-  error: Type.Optional(Type.Object({ code: Type.String(), message: Type.String() }, strict))
-}, strict);
+  error: Type.Optional(Type.Object({ code: Type.String(), message: Type.String() }, strict3))
+}, strict3);
 var AutofillReportSchema = Type.Object({
   ok: Type.Boolean(),
   receipts: Type.Array(AutofillReceiptSchema, { maxItems: 50 }),
@@ -7558,9 +7607,9 @@ var AutofillReportSchema = Type.Object({
     contentType: Type.Optional(Type.String()),
     sizeBytes: Type.Optional(Type.Integer({ minimum: 0 })),
     warnings: Type.Optional(Type.Array(Type.String()))
-  }, strict)),
+  }, strict3)),
   snapshotError: Type.Optional(Type.String())
-}, { ...strict, $id: "urn:agentbrowser:autofill-report:v1" });
+}, { ...strict3, $id: "urn:agentbrowser:autofill-report:v1" });
 function labelPattern(pattern) {
   const start = pattern.startsWith("^");
   const end = pattern.endsWith("$");
@@ -7666,7 +7715,7 @@ function createPlanReportParser(actions) {
 }
 
 // ../protocol/dist/outcome.js
-var strict2 = { additionalProperties: false };
+var strict4 = { additionalProperties: false };
 var identifier = () => Type.String({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z0-9][A-Za-z0-9._-]*$" });
 var GROUNDING_LAYERS = Object.freeze(["G0", "G1", "G2", "G3", "G4", "G5", "G6"]);
 var GroundingLayerSchema = Type.Union([
@@ -7691,11 +7740,11 @@ var VerificationProjectionSchema = Type.Object({
     Type.Literal("unknown"),
     Type.Literal("not_requested")
   ]),
-  verifier: Type.Optional(Type.Object({ id: identifier(), version: identifier() }, strict2)),
+  verifier: Type.Optional(Type.Object({ id: identifier(), version: identifier() }, strict4)),
   requiredLayer: GroundingLayerSchema,
   achievedLayer: Type.Optional(GroundingLayerSchema),
   evidenceRefIds: EvidenceReferenceIdsSchema
-}, strict2);
+}, strict4);
 var OutcomeProjectionSchema = Type.Object({
   availability: Type.Union([
     Type.Literal("available"),
@@ -7722,7 +7771,24 @@ var OutcomeProjectionSchema = Type.Object({
     Type.Literal("application"),
     Type.Literal("agent_tool")
   ])
-}, strict2);
+}, strict4);
+var evidenceCorrelationIdSchema = {
+  ...OperationIdSchema,
+  description: "Business receipt operation ID for an opted-in trusted evidence source; distinct from the service operation ID and conveys no authority."
+};
+var OutcomeRunRequestSchema = Type.Object({
+  // A UI outcome must exercise the UI seam; an empty plan cannot attest it.
+  actions: Type.Array(PlanStepSchema, { minItems: 1 }),
+  verification: Type.Object({
+    verifier: Type.Object({ id: identifier(), version: identifier() }, strict4),
+    input: Type.Unknown(),
+    evidenceCorrelationId: Type.Optional(evidenceCorrelationIdSchema)
+  }, strict4)
+}, { ...strict4, $id: "urn:agentbrowser:outcome-run-request:v1" });
+var OutcomeRunReportSchema = Type.Object({
+  plan: PlanReportSchema,
+  outcome: OutcomeProjectionSchema
+}, { ...strict4, $id: "urn:agentbrowser:outcome-run-report:v1" });
 var TrustedVerifierDescriptorSchema = Type.Object({
   id: identifier(),
   version: identifier(),
@@ -7734,12 +7800,14 @@ var TrustedVerifierDescriptorSchema = Type.Object({
   budget: Type.Object({
     maxReads: Type.Integer({ minimum: 1, maximum: 100 }),
     timeoutMs: Type.Integer({ minimum: 1, maximum: 6e4 }),
+    pollIntervalMs: Type.Integer({ minimum: 1, maximum: 1e4 }),
+    cleanupTimeoutMs: Type.Integer({ minimum: 1, maximum: 6e4 }),
     maxEvidenceRefs: Type.Integer({ minimum: 1, maximum: 32 })
-  }, strict2),
+  }, strict4),
   redaction: Type.Literal("reference_only"),
   unsupported: Type.Array(Type.String({ minLength: 1, maxLength: 128 }), { maxItems: 16 }),
   cleanup: Type.Union([Type.Literal("not_needed"), Type.Literal("required")])
-}, strict2);
+}, strict4);
 
 // dist/mcp-server.js
 var LEGACY_PROTOCOL_VERSION = "2024-11-05";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anvailabs/agentbrowser-mcp",
-  "version": "1.8.19",
+  "version": "1.9.0",
   "type": "module",
   "description": "MCP server exposing AgentBrowser as high-level, safe, composable tools (talks to an AgentBrowser service via AGENTBROWSER_BASE_URL)",
   "main": "dist/index.js",