@anweat/dsh-browser 0.1.17 → 0.2.0

package/lib/freedom.js

@@ -1,56 +1,9 @@
-/** Public automation-freedom contract and tool exposure matrix. */
+/** Public automation-freedom contract and action exposure matrix. */
+import { ACTIONS, CALL_TOOL, INDEX_TOOL, findAction, flatToolName, readOnlyCapable, traitsFor } from "./actions/registry.js";
 export const AUTOMATION_MODES = ['read-only', 'standard', 'autonomous', 'unrestricted'];
-export const ALL_BROWSER_TOOL_NAMES = [
-    'browser_open',
-    'browser_click',
-    'browser_type',
-    'browser_wait',
-    'browser_press',
-    'browser_select',
-    'browser_check',
-    'browser_hover',
-    'browser_set_files',
-    'browser_evaluate',
-    'browser_console',
-    'browser_requests',
-    'browser_scroll',
-    'browser_read',
-    'browser_screenshot',
-    'browser_close',
-    'browser_status',
-    'browser_install',
-    'browser_script_catalog',
-    'browser_script_validate',
-    'browser_script_run_builtin',
-    'browser_userscript_run',
-    'browser_recipe_run',
-    'browser_automation_search',
-    'browser_automation_develop',
-    'browser_automation_run',
-    'browser_opencli_status',
-    'browser_opencli_catalog',
-    'browser_opencli_run',
-    'browser_crawl',
-];
-const READ_ONLY_TOOL_NAMES = new Set([
-    'browser_open',
-    'browser_wait',
-    'browser_read',
-    'browser_screenshot',
-    'browser_console',
-    'browser_requests',
-    'browser_close',
-    'browser_status',
-    'browser_script_catalog',
-    'browser_script_validate',
-    'browser_script_run_builtin',
-    'browser_recipe_run',
-    'browser_automation_search',
-    'browser_automation_develop',
-    'browser_opencli_status',
-    'browser_opencli_catalog',
-    'browser_crawl',
-]);
+export const TOOL_SURFACES = ['indexed', 'flat'];
+/** Every browser action name (`group.action`), straight from the registry. */
+export const ALL_BROWSER_ACTION_NAMES = ACTIONS.map(action => action.name);
 export function resolveAutomationMode(value) {
     const mode = value ?? 'standard';
     if (typeof mode !== 'string' || !AUTOMATION_MODES.includes(mode)) {
@@ -58,17 +11,53 @@ export function resolveAutomationMode(value) {
     }
     return mode;
 }
-export function isBrowserToolExposed(name, mode) {
-    if (!ALL_BROWSER_TOOL_NAMES.includes(name))
+export function resolveToolSurface(value) {
+    const surface = value ?? 'indexed';
+    if (typeof surface !== 'string' || !TOOL_SURFACES.includes(surface)) {
+        throw new Error('toolSurface must be one of: ' + TOOL_SURFACES.join(', '));
+    }
+    return surface;
+}
+/**
+ * Whether an action name is a known browser action allowed under the mode. With `args`, an action
+ * that bundles several operations (`automation.develop`) is judged by the operation the call selects;
+ * without them, by whether any operation is usable.
+ */
+export function isBrowserActionExposed(name, mode, args) {
+    const action = findAction(name);
+    if (!action)
         return false;
-    return mode !== 'read-only' || READ_ONLY_TOOL_NAMES.has(name);
+    if (mode !== 'read-only')
+        return true;
+    return args === undefined ? readOnlyCapable(action) : traitsFor(action, args).readOnly;
+}
+export function browserActionsForMode(mode) {
+    return ALL_BROWSER_ACTION_NAMES.filter(name => isBrowserActionExposed(name, mode));
+}
+/** Actions the model may use under this configuration. */
+export function configuredBrowserActions(mode, options, enabled = true) {
+    if (!enabled)
+        return [];
+    return browserActionsForMode(mode).filter(name => name !== 'automation.develop' || options.modelDevelopmentEnabled);
 }
-export function browserToolsForMode(mode) {
-    return ALL_BROWSER_TOOL_NAMES.filter(name => isBrowserToolExposed(name, mode));
+/** Why an action cannot run now, or undefined when it can. */
+export function actionUnavailableReason(action, mode, options, enabled = true, args) {
+    if (!enabled)
+        return 'browser service is disabled (enabled=false)';
+    if (mode === 'read-only' && !(args === undefined ? readOnlyCapable(action) : traitsFor(action, args).readOnly)) {
+        return args !== undefined && action.subActions && readOnlyCapable(action) ? `disabled by automationMode=${mode} for ${action.subActions.key}=${String(args[action.subActions.key])}` : `disabled by automationMode=${mode}`;
+    }
+    if (action.name === 'automation.develop' && !options.modelDevelopmentEnabled)
+        return 'disabled by automationAssets.modelDevelopmentEnabled=false';
+    return undefined;
 }
-export function configuredBrowserTools(mode, options, enabled = true) {
+/** Tool names the plugin registers for a surface (empty when the service is disabled). */
+export function configuredBrowserTools(mode, options, enabled = true, surface = 'indexed') {
     if (!enabled)
         return [];
-    return browserToolsForMode(mode).filter(name => name !== 'browser_automation_develop' || options.modelDevelopmentEnabled);
+    if (surface === 'indexed')
+        return [INDEX_TOOL, CALL_TOOL];
+    const exposed = new Set(configuredBrowserActions(mode, options, enabled));
+    return ACTIONS.filter(action => exposed.has(action.name)).map(flatToolName);
 }
 //# sourceMappingURL=freedom.js.map

package/lib/freedom.js.map

@@ -1 +1 @@
-{"version":3,"file":"freedom.js","sourceRoot":"","sources":["../src/freedom.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,CAAU,CAAA;AAGhG,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,cAAc;IACd,eAAe;IACf,cAAc;IACd,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,wBAAwB;IACxB,yBAAyB;IACzB,4BAA4B;IAC5B,wBAAwB;IACxB,oBAAoB;IACpB,2BAA2B;IAC3B,4BAA4B;IAC5B,wBAAwB;IACxB,wBAAwB;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,eAAe;CACP,CAAA;AAIV,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAkB;IACpD,cAAc;IACd,cAAc;IACd,cAAc;IACd,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,yBAAyB;IACzB,4BAA4B;IAC5B,oBAAoB;IACpB,2BAA2B;IAC3B,4BAA4B;IAC5B,wBAAwB;IACxB,yBAAyB;IACzB,eAAe;CAChB,CAAC,CAAA;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAA;IAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAsB,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,IAAsB,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAoB;IACrE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAuB,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3E,OAAO,IAAI,KAAK,WAAW,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAuB,CAAC,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAoB;IACtD,OAAO,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAoB,EAAE,OAA6C,EAAE,OAAO,GAAG,IAAI;IACxH,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,4BAA4B,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAC3H,CAAC"}
+{"version":3,"file":"freedom.js","sourceRoot":"","sources":["../src/freedom.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAG5H,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,CAAU,CAAA;AAGhG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,MAAM,CAAU,CAAA;AAGzD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAsB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AAG7F,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAA;IAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAsB,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,IAAsB,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,OAAO,GAAG,KAAK,IAAI,SAAS,CAAA;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAsB,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,OAAsB,CAAA;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,IAAoB,EAAE,IAAc;IACvF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IACrC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAA;AACxF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAoB;IACxD,OAAO,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACpF,CAAC;AAID,0DAA0D;AAC1D,MAAM,UAAU,wBAAwB,CAAC,IAAoB,EAAE,OAAwB,EAAE,OAAO,GAAG,IAAI;IACrG,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,oBAAoB,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAA;AACrH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,IAAoB,EAAE,OAAwB,EAAE,OAAO,GAAG,IAAI,EAAE,IAAc;IACvI,IAAI,CAAC,OAAO;QAAE,OAAO,6CAA6C,CAAA;IAClE,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/G,OAAO,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,8BAA8B,IAAI,QAAQ,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,MAAM,CAAE,IAAgC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B,IAAI,EAAE,CAAA;IAC1P,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,OAAO,CAAC,uBAAuB;QAAE,OAAO,4DAA4D,CAAA;IACjJ,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,sBAAsB,CAAC,IAAoB,EAAE,OAAwB,EAAE,OAAO,GAAG,IAAI,EAAE,UAAuB,SAAS;IACrI,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IACzE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;AAC7E,CAAC"}

package/lib/index.d.ts

@@ -10,14 +10,6 @@ import type { Context } from '@deepseek-ai/cordis';
 import { Config } from './config.ts';
 export declare const name = "dsh-browser";
 export declare const inject: string[];
-/**
- * Loader entry id of this plugin's row in `cordis.patch.yml`, which is also the
- * settings namespace the plugin owns. On hosts whose `SettingsForms` still
- * exposes `register()` this is the scope namespace; on newer hosts it is the
- * profile patch entry id whose `Config` schema the settings page is derived
- * from. Keep it in sync with the bundle patch.
- */
-export declare const BROWSER_SETTINGS_NS = "browser";
 /**
  * The object cordis actually receives.
  *
@@ -31,21 +23,21 @@ export declare const BROWSER_SETTINGS_NS = "browser";
  */
 declare const plugin: {
     name: string;
-    inject: readonly ["tools", "settings"];
+    inject: string[];
     apply: typeof apply;
     Config: import("@deepseek-ai/schemastery").default<Config>;
 };
 export default plugin;
 export { Config };
 export type { Config as BrowserConfig } from './config.ts';
-export type { BrowserService, RenderRule, RenderResult, SnapshotResult, PlatformSpec, SearchItem, InteractiveState, RecipeRunResult, ScriptRunResult, EvaluateResult, FileUploadResult } from './browser-service.ts';
+export type { BrowserService, RenderRule, RenderResult, SnapshotResult, PlatformSpec, SearchItem, InteractiveState, RecipeServiceResult, ScriptRunResult, EvaluateResult, FileUploadResult } from './browser-service.ts';
 export type { AuthProfileConfig, ResolvedAuthProfile } from './auth-profiles.ts';
 export type { RulePackConfig, RuleStep, ResolvedRulePack } from './rule-packs.ts';
-export type { BrowserRecipeStep, RecipeStepResult } from './automation.ts';
+export type { BrowserRecipeStep, RecipeStepResult, RecipeRunResult, RecipeExecutionStatus, RecipeValidationStatus, RecipeEffects, RecipeFailedStep, RecipeOutput } from './automation.ts';
 export type { UserscriptMetadata, UserscriptValidation, BuiltinScript } from './scripts.ts';
 export { BUILTIN_SCRIPTS, validateUserscript } from './scripts.ts';
-export type { AutomationMode, BrowserToolName } from './freedom.ts';
-export { AUTOMATION_MODES, ALL_BROWSER_TOOL_NAMES, browserToolsForMode, configuredBrowserTools } from './freedom.ts';
+export type { AutomationMode, ToolSurface, BrowserActionName } from './freedom.ts';
+export { AUTOMATION_MODES, TOOL_SURFACES, ALL_BROWSER_ACTION_NAMES, browserActionsForMode, configuredBrowserActions, configuredBrowserTools } from './freedom.ts';
 export type { AutomationAssetPolicy, AutomationAssetPolicyInput, AutomationAsset, AutomationAssetSummary, AutomationCandidate, AutomationCandidateSummary, AssetPersistenceMode, AssetActivationMode } from './automation-assets.ts';
 export { ASSET_PERSISTENCE_MODES, ASSET_ACTIVATION_MODES, resolveAutomationAssetPolicy, AutomationAssetStore } from './automation-assets.ts';
 export declare function apply(ctx: Context, config: Config): void;

package/lib/index.js

@@ -9,22 +9,23 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { Config, resolveConfig } from "./config.js";
-import { resolveSettingsScope } from "./settings-scope.js";
 import { BrowserService } from "./browser-service.js";
 import { registerTools } from "./tools.js";
 import { browserPolicyDecision } from "./approval-policy.js";
+import { resolveBrowserCall } from "./actions/surface.js";
+import { registerSkillWhenAvailable } from "./skill.js";
+import { installErrorHints } from "./actions/errors.js";
+import { describePrompts } from "./prompts.js";
 import { AutomationAssetStore } from "./automation-assets.js";
 import { registerAutomationAssetRpc } from "./automation-assets-rpc.js";
 export const name = 'dsh-browser';
-export const inject = ['tools', 'settings'];
-/**
- * Loader entry id of this plugin's row in `cordis.patch.yml`, which is also the
- * settings namespace the plugin owns. On hosts whose `SettingsForms` still
- * exposes `register()` this is the scope namespace; on newer hosts it is the
- * profile patch entry id whose `Config` schema the settings page is derived
- * from. Keep it in sync with the bundle patch.
- */
-export const BROWSER_SETTINGS_NS = 'browser';
+// Only `tools` is required: `apply` registers the model-facing tools there. `settings` is deliberately NOT declared:
+// Cordis 4.0.4 treats every declared inject as required, so a Host composition without the Settings service
+// (sdk-minimal, a profile with that row switched off) would leave the plugin pending forever. Nothing here reads
+// `ctx.settings`; `apply` takes its config from the Loader entry. Without the Settings service the plugin runs with
+// its Config defaults and the settings card is simply not served (the client mounts it only while the Host serves
+// the `browser` namespace, see `src/client/index.ts`).
+export const inject = ['tools'];
 /**
  * The object cordis actually receives.
  *
@@ -36,43 +37,62 @@ export const BROWSER_SETTINGS_NS = 'browser';
  * reports the omission. Exporting the assembled object as `default` is what
  * makes `Config` visible to the settings service.
  */
-const plugin = { name: 'dsh-browser', inject: ['tools', 'settings'], apply, Config };
+const plugin = { name: 'dsh-browser', inject, apply, Config };
 export default plugin;
 export { Config };
 export { BUILTIN_SCRIPTS, validateUserscript } from "./scripts.js";
-export { AUTOMATION_MODES, ALL_BROWSER_TOOL_NAMES, browserToolsForMode, configuredBrowserTools } from "./freedom.js";
+export { AUTOMATION_MODES, TOOL_SURFACES, ALL_BROWSER_ACTION_NAMES, browserActionsForMode, configuredBrowserActions, configuredBrowserTools } from "./freedom.js";
 export { ASSET_PERSISTENCE_MODES, ASSET_ACTIVATION_MODES, resolveAutomationAssetPolicy, AutomationAssetStore } from "./automation-assets.js";
 export function apply(ctx, config) {
-    // Browser processes, tool exposure, and approval hooks are deliberately
-    // startup-scoped. On hosts that still ship the legacy `settings.register`
-    // provider we register a live scope; on dsh-v0.1.7-rc.2+ — which removed it
-    // and derives settings pages from this entry's own Config schema — the
-    // Loader re-applies the validated entry config by restarting this fiber.
-    // The namespace is the bundle patch's loader entry id (`browser`), which is
-    // also what the client settings card binds to.
-    const settingsScope = resolveSettingsScope(ctx.settings, BROWSER_SETTINGS_NS, Config, config);
-    const resolved = resolveConfig(settingsScope.get());
+    // `config` is the Loader entry's own `Config` (entry id `browser` in `cordis.patch.yml`, the same id the
+    // client settings card binds to); the Host derives the settings page from that schema. Every field that
+    // page edits is `.volatile()`, so a save commits the new value into the running references and emits
+    // `loader/volatile-update` without remounting this plugin. Browser processes, tool exposure and approval
+    // hooks are deliberately startup-scoped: `resolveConfig` reads them once here, so a saved value applies
+    // when the profile restarts. Only `prompts` is read live (see `ResolvedConfig.prompts`).
+    const resolved = resolveConfig(config);
     fs.mkdirSync(resolved.snapshotDir, { recursive: true });
     const service = new BrowserService(resolved);
     const assets = new AutomationAssetStore(resolved.automationAssets);
-    // Apply the configured exposure/approval mode before every browser tool.
-    // Validation remains active even when unrestricted mode skips approvals.
+    // Apply the configured exposure/approval mode before every browser call.
+    // Approval is decided per ACTION: browser_call (and each flat tool) is
+    // resolved to its action and arguments first, so the user is asked about
+    // `act.click #submit`, not about a generic dispatcher. browser_index only
+    // reads the catalog and is let through. Validation remains active even when
+    // unrestricted mode skips approvals.
     ctx.on('tools/pre-execute', async (exec, next) => {
         const downstream = await next();
         if (downstream.kind !== 'allow')
             return downstream;
-        const assetId = exec.arguments?.id;
-        const assetKind = exec.name === 'browser_automation_run' && typeof assetId === 'string'
-            ? assets.get(assetId)?.kind : undefined;
-        return browserPolicyDecision(exec.name, exec.arguments, resolved.automationMode, assetKind);
+        const call = resolveBrowserCall(exec.name, exec.arguments);
+        // `unresolved` is a browser_call naming no known action: it runs no
+        // action and returns a structured UNKNOWN_ACTION error, so nothing to approve.
+        if (call?.kind === 'index' || call?.kind === 'unresolved')
+            return downstream;
+        if (call?.kind === 'action') {
+            // automation.run and automation.develop test act on a stored asset: the policy needs to know what kind it is,
+            // and for a recipe draft which steps it would replay.
+            const callArgs = (call.args ?? {});
+            const replaysAsset = call.action === 'automation.run' || (call.action === 'automation.develop' && callArgs.action === 'test');
+            const target = replaysAsset && typeof callArgs.id === 'string' ? assets.get(callArgs.id) : undefined;
+            return browserPolicyDecision(call.action, call.args, resolved.automationMode, target?.kind, call.action === 'automation.develop' ? target?.recipe : undefined, target ? { id: target.id, name: target.name, revision: target.revision } : undefined);
+        }
+        return browserPolicyDecision(exec.name, exec.arguments, resolved.automationMode);
     });
     // Provide the `browser` service so consumers (web-search-pro) can inject it.
     // ctx.provide is scoped to this plugin's fiber; the browser instance itself
     // is closed via the effect disposer below.
     ctx.provide('browser', service);
     ctx.effect(() => () => void service.close());
-    registerTools(ctx, resolved, service, assets);
-    registerAutomationAssetRpc(ctx, assets, service);
+    // Optional: the `dsh-browser` skill is registered only when the Host has a
+    // skill registry. It must not be a declared `inject` (Cordis 4.0.4 would
+    // hang the plugin without it); this opens a scoped, optional dependency.
+    // `prompts.skill` is read live: the skill is registered, withdrawn or invalidated when it changes.
+    const skill = registerSkillWhenAvailable(ctx, undefined, resolved.prompts);
+    // `prompts.errorHints` replace the by-code hints wherever an error is built; read per call.
+    ctx.effect(() => installErrorHints(() => resolved.prompts.current().errorHints));
+    registerTools(ctx, resolved, service, assets, { skillAvailable: skill.isAvailable, refreshSkill: skill.refresh });
+    registerAutomationAssetRpc(ctx, assets, service, () => describePrompts({ prompts: resolved.prompts, mode: resolved.automationMode, options: resolved.automationAssets, enabled: resolved.enabled }));
     if (resolved.verbose) {
         try {
             const markerPath = path.join(resolved.snapshotDir, 'apply.log');
@@ -83,11 +103,12 @@ export function apply(ctx, config) {
                 headless: resolved.headless,
                 opencliEnabled: resolved.opencliEnabled,
                 automationMode: resolved.automationMode,
+                toolSurface: resolved.toolSurface,
                 snapshotDir: resolved.snapshotDir,
             }) + '\n', 'utf8');
         }
         catch { /* marker is best-effort */ }
     }
-    ctx.logger?.(name).info('dsh-browser loaded: channel=' + resolved.channel + ' headless=' + resolved.headless + ' opencli=' + resolved.opencliEnabled + ' automation=' + resolved.automationMode);
+    ctx.logger?.(name).info('dsh-browser loaded: channel=' + resolved.channel + ' headless=' + resolved.headless + ' opencli=' + resolved.opencliEnabled + ' automation=' + resolved.automationMode + ' surface=' + resolved.toolSurface);
 }
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAEvE,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAA;AACjC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AAE3C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAE5C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,CAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC7F,eAAe,MAAM,CAAA;AAErB,OAAO,EAAE,MAAM,EAAE,CAAA;AAOjB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAElE,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEpH,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAE5I,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAc;IAChD,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,aAAa,GAAG,oBAAoB,CAAS,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACrG,MAAM,QAAQ,GAAmB,aAAa,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAA;IACnE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAElE,yEAAyE;IACzE,yEAAyE;IACzE,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,EAAE,CAAA;QAC/B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,UAAU,CAAA;QAClD,MAAM,OAAO,GAAI,IAAI,CAAC,SAA8B,EAAE,EAAE,CAAA;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,wBAAwB,IAAI,OAAO,OAAO,KAAK,QAAQ;YACrF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;QACzC,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,2CAA2C;IAC3C,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IAE5C,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC7C,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAEhD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YAC/D,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,8BAA8B,GAAG,QAAQ,CAAC,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;AAClM,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAEvE,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAA;AACjC,qHAAqH;AACrH,4GAA4G;AAC5G,iHAAiH;AACjH,oHAAoH;AACpH,kHAAkH;AAClH,uDAAuD;AACvD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAA;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC7D,eAAe,MAAM,CAAA;AAErB,OAAO,EAAE,MAAM,EAAE,CAAA;AAOjB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAElE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEjK,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAE5I,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAc;IAChD,yGAAyG;IACzG,wGAAwG;IACxG,qGAAqG;IACrG,yGAAyG;IACzG,wGAAwG;IACxG,yFAAyF;IACzF,MAAM,QAAQ,GAAmB,aAAa,CAAC,MAAM,CAAC,CAAA;IACtD,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAElE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,qCAAqC;IACrC,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,EAAE,CAAA;QAC/B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,UAAU,CAAA;QAClD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1D,oEAAoE;QACpE,+EAA+E;QAC/E,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,EAAE,IAAI,KAAK,YAAY;YAAE,OAAO,UAAU,CAAA;QAC5E,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,8GAA8G;YAC9G,sDAAsD;YACtD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAuC,CAAA;YACxE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,oBAAoB,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;YAC7H,MAAM,MAAM,GAAG,YAAY,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpG,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACtP,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,2CAA2C;IAC3C,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IAE5C,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,mGAAmG;IACnG,MAAM,KAAK,GAAG,0BAA0B,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAE1E,4FAA4F;IAC5F,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhF,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IACjH,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAEpM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YAC/D,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,8BAA8B,GAAG,QAAQ,CAAC,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC,cAAc,GAAG,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;AACvO,CAAC"}

package/lib/journal.d.ts

@@ -0,0 +1,109 @@
+/**
+ * The exploration journal: a bounded, in-memory record of what one session did through `browser_call`.
+ *
+ * It is evidence for turning an exploration into a draft (`automation.develop` draft_from_journal), not a
+ * log of the page. Entries hold the action, the page generation before and after, the locator, scrubbed
+ * parameters, and the outcome. Typed text never appears in an entry: fill/type text is a reference
+ * `{ref:'v<seq>', length, sensitive?}`. The text itself is kept in memory only when it is short (at most
+ * {@link RAW_TEXT_MAX} characters) and does not look secret (see {@link looksSecret}), and only so a draft
+ * can use it as a literal or an example; it is released together with its entry, and nothing is written to disk.
+ * @module dsh-browser/journal
+ */
+import type { BrowserLocatorSpec } from './locator.ts';
+import type { ErrorCode, ExecutionStatus } from './actions/types.ts';
+/** Default number of entries a session keeps; the oldest are dropped first. */
+export declare const JOURNAL_LIMIT = 200;
+/** Typed text longer than this is never retained, only its length. */
+export declare const RAW_TEXT_MAX = 200;
+/** A scrubbed stand-in for a value that is not stored in the entry. */
+export interface ValueRef {
+    ref: string;
+    length: number;
+    sensitive?: true;
+}
+export type JournalEffects = 'none' | 'observed' | 'unknown';
+export interface JournalEntry {
+    seq: number;
+    /** `group.action`, e.g. `act.fill`. */
+    action: string;
+    /** The page the call ran on (`t1`...). */
+    targetId?: string;
+    generationBefore?: number;
+    generationAfter?: number;
+    /** The element the call acted on, as a LocatorSpec (a CSS `selector` argument becomes `{css}`). */
+    locator?: BrowserLocatorSpec;
+    /** The call's arguments with values scrubbed; see the module comment. */
+    params: Record<string, unknown>;
+    outcome: {
+        ok: boolean;
+        executionStatus: ExecutionStatus;
+        errorCode?: ErrorCode;
+    };
+    /** Whether the call changed anything: `none`, `observed` (it ran and changed state), `unknown` (it may have). */
+    effects: JournalEffects;
+    /** One short line about the result: page title/path or the error. */
+    summary: string;
+    /** A read-only observation: it never becomes a step. */
+    observation?: true;
+    /** The page URL after the call, secret query values redacted. */
+    url?: string;
+    /** For observations: characters of text read. */
+    size?: number;
+}
+/** Field names that suggest a secret; the same list `observe.read` uses for controls. */
+export declare const SENSITIVE_NAME: RegExp;
+export declare function cardLike(value: string): boolean;
+export declare function tokenLike(value: string): boolean;
+/** A value that looks like a token, a JWT or a card number. */
+export declare function looksSecret(value: string): boolean;
+/** A locator that names a password-like field (its label, name, css...). */
+export declare function locatorSuggestsSecret(locator: BrowserLocatorSpec | undefined): boolean;
+/** `https://u:p@host/path?token=x` -> secret query values and userinfo removed. Returns the cleaned URL and whether anything was removed. */
+export declare function redactUrl(value: string): {
+    url: string;
+    redacted: boolean;
+};
+export interface ScrubbedCall {
+    params: Record<string, unknown>;
+    locator?: BrowserLocatorSpec;
+    /** The typed text, only when it may be retained. */
+    raw?: string;
+}
+/**
+ * Scrub the arguments of one call. `sensitiveControl` is true when the page itself says the target is a
+ * password-like control (type=password, autocomplete one-time-code, ...).
+ */
+export declare function scrubCall(action: string, args: Record<string, unknown>, seq: number, sensitiveControl?: boolean): ScrubbedCall;
+/** Whether a call goes into the journal. Lists, inspection, searches and drafting are not exploration. */
+export declare function isJournaled(action: string): boolean;
+export declare function isObservation(action: string): boolean;
+/** What a finished call changed, from what it is and how it ended. */
+export declare function effectsOf(mutating: boolean, outcome: JournalEntry['outcome']): JournalEffects;
+export declare class SessionJournal {
+    readonly limit: number;
+    private nextSeq;
+    private items;
+    private readonly raws;
+    /** How many entries fell off the front because of the limit. */
+    dropped: number;
+    constructor(limit?: number);
+    /** Reserve the sequence number of a call that is about to run. */
+    allocate(): number;
+    add(entry: JournalEntry, raw?: string): void;
+    entries(): readonly JournalEntry[];
+    /** The retained typed text of an entry, if it was short and not secret. Internal: never part of an entry. */
+    rawText(seq: number): string | undefined;
+    get firstSeq(): number | undefined;
+    get lastSeq(): number | undefined;
+    get size(): number;
+    clear(): void;
+}
+/** The one-line summary of a finished call, with no secret query values. */
+export declare function summarize(action: string, envelope: {
+    ok: boolean;
+    result?: Record<string, unknown>;
+    error?: {
+        code: string;
+        message: string;
+    };
+}): string;