@attson/atwebpilot-mcp 0.0.55 → 0.0.56

package/README.md

@@ -24,7 +24,55 @@
 ## 工具面
 
 - 控制面 4 个：`list_tabs / open_session / close_session / get_quota`
-- 执行面 19 个 `browser_*`：snapshotDOM / click / fillInput / setCheckbox / selectOption / extractText / extractImages / submitForm / uploadFile / readStorage / httpRequest / scroll / waitFor / hover / focus / getValue / extractFormState / querySelector / querySelectorAll
+- 执行面 54 个 `browser_*`：扩展的全部内置工具，除了 `askUser`（MCP 会话没有人在侧边栏应答）和
+  `attachTab` / `detachTab`（侧边栏多 tab 记账，MCP 的目标 tab 已由 `open_session` 绑定）。
+
+工具列表会和扩展 `HELLO` 里上报的 `supported_tools` 求交集，所以旧版扩展配新版 server 时不会
+出现「列出来但一调就 unknown tool」。字段缺失（Plan 32 之前的扩展）时回落到旧的 19 个。
+
+### 环境变量 `ATWEBPILOT_MCP_TOOLS`
+
+| 值 | 效果 |
+|---|---|
+| `full`（默认） | 全部 54 个 |
+| `parity` | 只出对标 playwright-ext 那 24 个能力的子集，省上下文 |
+
+无法识别的值按 `full` 处理，并往 stderr 打一条提示。
+
+## 替代 playwright-ext
+
+`@playwright/mcp --extension` 的每个工具在这里都有对应项（名字是 AtWebPilot 的，不是 playwright 的）：
+
+| playwright-ext | AtWebPilot |
+|---|---|
+| `browser_snapshot` | `browser_takeSnapshot`（uid 可直接喂给 `clickByUid` / `fillByUid`） |
+| `browser_find` | `browser_findElements` |
+| `browser_click` | `browser_click`（含 `doubleClick` / `button` / `modifiers`）、`browser_clickByUid` |
+| `browser_type` | `browser_fillInput`（含 `slowly` / `submit`） |
+| `browser_fill_form` | `browser_fillForm` |
+| `browser_select_option` / `browser_hover` / `browser_press_key` | 同名去掉下划线：`browser_selectOption` / `browser_hover` / `browser_pressKey` |
+| `browser_drag` / `browser_drop` | `browser_drag` / `browser_drop` |
+| `browser_file_upload` | `browser_uploadFile` |
+| `browser_navigate` / `browser_navigate_back` | `browser_navigate` / `browser_navigateBack`（另有 `navigateForward`） |
+| `browser_tabs` | `browser_listTabs` / `openTab` / `closeTab` / `switchToTab` |
+| `browser_close` | `browser_closeTab` |
+| `browser_resize` | `browser_resize` |
+| `browser_take_screenshot` | `browser_screenshot`（含 `fullPage` / `format` / `scale`） |
+| `browser_wait_for` | `browser_waitFor`（含 `text` / `textGone`） |
+| `browser_evaluate` / `browser_run_code_unsafe` | `browser_runJS` |
+| `browser_console_messages` | `browser_consoleMessages` |
+| `browser_network_requests` / `browser_network_request` | `browser_networkRequests` / `browser_networkRequestDetail` |
+| `browser_handle_dialog` | `browser_handleDialog`（默认档是预设策略，见下） |
+
+两处语义差异，调用前要知道：
+
+- **`handleDialog` 在默认档是预先策略，不是反应式。** `alert` / `confirm` / `prompt` 是同步的，
+  打了补丁也没法挂起等 agent 决定。开启设置里的 CDP 档之后弹窗真挂起，行为才和 playwright 一致。
+- **`networkRequestDetail` 的 body 默认不记。** 先 `recorderConfig({bodies:true})` 再复现请求。
+  不开时返回元数据加一条 `bodyUnavailable` 说明怎么开。
+
+AtWebPilot 额外有 playwright-ext 没有的：page-index 四件套、`extractImages`、`httpRequest`、
+`downloadSpreadsheet`（真 `.xlsx`）、书签/历史搜索。
 
 详细协议与设计见 [`../../docs/superpowers/specs/2026-06-06-mcp-bridge-design.md`](../../docs/superpowers/specs/2026-06-06-mcp-bridge-design.md)。
 

package/dist/index.js

@@ -227,6 +227,13 @@ var HelloSchema = z4.object({
     chrome: z4.string()
   }),
   capabilities: z4.array(z4.string()),
+  /**
+   * Tool names this worker can actually execute. Optional for backward
+   * compatibility: an extension predating Plan 32 does not send it, and the
+   * server then falls back to the legacy 19-tool surface rather than
+   * advertising tools that would fail at call time with "unknown tool".
+   */
+  supported_tools: z4.array(z4.string()).optional(),
   attended: z4.boolean(),
   available_tabs: z4.array(
     z4.object({
@@ -613,19 +620,26 @@ var CAPABILITIES = [
   "httpRequest:cookied",
   "runJS:scanned",
   "runJS:unsafe",
-  "tab:open"
+  "tab:open",
+  // Plan 32 — page-event recorder
+  "read:console",
+  "read:network",
+  "read:network-body"
 ];
 var IMPLICIT_CAPABILITIES = /* @__PURE__ */ new Set([
   "read:dom",
   "read:image",
-  "nav:tab"
+  "nav:tab",
+  "read:console"
 ]);
 var DANGEROUS_CAPABILITIES = /* @__PURE__ */ new Set([
   "read:storage",
   "submit:form",
   "upload:file",
   "httpRequest:cookied",
-  "runJS:unsafe"
+  "runJS:unsafe",
+  // response headers routinely carry Authorization / Set-Cookie / bearer tokens
+  "read:network-body"
 ]);
 function isCapability(s) {
   return CAPABILITIES.includes(s);
@@ -703,6 +717,26 @@ function capabilityForTool(tool, opts) {
     // can be added later if a finer distinction is needed.
     case "writeStorage":
       return "read:storage";
+    // Plan 32 — playwright parity
+    case "consoleMessages":
+      return "read:console";
+    case "networkRequests":
+      return "read:network";
+    case "networkRequestDetail":
+      return "read:network-body";
+    case "recorderConfig":
+      return opts?.recorderArmsBodies ? "read:network-body" : "read:network";
+    case "handleDialog":
+    case "drag":
+      return "interact:form";
+    case "drop":
+      return opts?.dropHasFiles ? "upload:file" : "interact:form";
+    case "navigateBack":
+    case "navigateForward":
+    case "resize":
+      return "nav:tab";
+    case "findElements":
+      return "read:dom";
     default: {
       const _exhaustive = tool;
       throw new Error(`capabilityForTool: unknown tool ${_exhaustive}`);
@@ -739,7 +773,11 @@ var Dispatcher = class {
       return fail("SessionExpired", `Session ${input.session_id} is expired`);
     if (session.state !== "active")
       return fail("InternalError", `Session ${input.session_id} state=${session.state}`);
-    const required = input.kind === "extension_tool" ? capabilityForTool(input.tool, { httpCookied: input.httpCookied }) : capabilityForRunJs(input.unsafe);
+    const required = input.kind === "extension_tool" ? capabilityForTool(input.tool, {
+      httpCookied: input.httpCookied,
+      dropHasFiles: input.dropHasFiles,
+      recorderArmsBodies: input.recorderArmsBodies
+    }) : input.kind === "capability" ? input.capability : capabilityForRunJs(input.unsafe);
     if (!scopeCovers(session.scope, required)) {
       return fail("PermissionDenied", `Capability ${required} not in session scope`, {
         denied_capability: required
@@ -1253,6 +1291,8 @@ var TOOL_DEFS = [
         ms: { type: "integer" },
         selector: { type: "string" },
         timeoutMs: { type: "integer", default: 5e3 },
+        text: { type: "string", description: "\u7B49\u5F85\u9875\u9762\u51FA\u73B0\u8BE5\u6587\u672C" },
+        textGone: { type: "string", description: "\u7B49\u5F85\u8BE5\u6587\u672C\u6D88\u5931" },
         tabId: TAB_ID_FIELD
       }
     }
@@ -1265,6 +1305,12 @@ var TOOL_DEFS = [
       properties: {
         selector: { type: "string" },
         required: { type: "boolean", default: true },
+        doubleClick: { type: "boolean", default: false },
+        button: { type: "string", enum: ["left", "right", "middle"], default: "left" },
+        modifiers: {
+          type: "array",
+          items: { type: "string", enum: ["Alt", "Control", "Meta", "Shift"] }
+        },
         tabId: TAB_ID_FIELD
       },
       required: ["selector"]
@@ -1308,6 +1354,12 @@ var TOOL_DEFS = [
         selector: { type: "string" },
         value: { type: "string" },
         clear: { type: "boolean", default: true },
+        slowly: {
+          type: "boolean",
+          default: false,
+          description: "\u9010\u5B57\u7B26\u89E6\u53D1 keydown/keypress/input/keyup\uFF0C\u5BF9\u4ED8\u53D7\u63A7\u7EC4\u4EF6"
+        },
+        submit: { type: "boolean", default: false, description: "\u586B\u5B8C\u6309\u4E00\u6B21 Enter" },
         tabId: TAB_ID_FIELD
       },
       required: ["selector", "value"]
@@ -1499,6 +1551,9 @@ var TOOL_DEFS = [
         blockId: { type: "string", description: "\u53EF\u9009\uFF1Apage-index \u8FD4\u56DE\u7684 blockId\uFF0C\u7528\u4E8E\u5C40\u90E8\u89C6\u89C9\u8BC1\u636E" },
         indexId: { type: "string", description: "\u53EF\u9009\uFF1A\u4EA7\u751F blockId \u7684 indexId\uFF0C\u907F\u514D refresh \u540E\u8BEF\u8BFB" },
         highlightMs: { type: "integer", default: 1500, description: "\u622A\u56FE\u524D\u76EE\u6807\u9AD8\u4EAE\u6301\u7EED\u65F6\u95F4\uFF0C250-5000ms" },
+        fullPage: { type: "boolean", default: false, description: "\u6EDA\u52A8\u5206\u6BB5\u622A\u56FE\u540E\u62FC\u63A5\u6574\u9875" },
+        format: { type: "string", enum: ["png", "jpeg"], default: "png" },
+        scale: { type: "number", default: 1, description: "0.1\u20131\uFF0C\u7F29\u5C0F\u53EF\u7701 token" },
         tabId: TAB_ID_FIELD
       }
     }
@@ -1757,48 +1812,232 @@ var TOOL_DEFS = [
       },
       required: ["store", "key", "value"]
     }
+  },
+  // ── Plan 32 — playwright parity ──────────────────────────────────────────
+  {
+    name: "consoleMessages",
+    description: "[OBSERVE] \u8BFB\u53D6\u672C\u9875 console \u65E5\u5FD7\u4E0E\u672A\u6355\u83B7\u9519\u8BEF\u3002\u8FD4\u56DE\u91CC\u5E26 backend \u5B57\u6BB5\uFF1Amain-world \u6863\u770B\u4E0D\u5230\u811A\u672C\u6CE8\u5165\u4E4B\u524D\u7684\u6D88\u606F\u548C\u6D4F\u89C8\u5668\u7EA7 CORS/CSP \u62A5\u9519\uFF0Ccdp \u6863\u80FD\u770B\u5230\u3002\n\u793A\u4F8B\uFF1A\u53EA\u770B\u62A5\u9519 { level: 'error', limit: 50 }\uFF1B\u589E\u91CF\u8F6E\u8BE2 { sinceId: \u4E0A\u6B21\u8FD4\u56DE\u7684\u6700\u5927 id }",
+    input_schema: {
+      type: "object",
+      properties: {
+        level: { type: "string", enum: ["log", "info", "warn", "error", "debug", "trace"] },
+        limit: { type: "integer", default: 100 },
+        sinceId: { type: "integer", description: "\u53EA\u8FD4\u56DE id \u5927\u4E8E\u6B64\u503C\u7684\u6D88\u606F\uFF0C\u7528\u4E8E\u589E\u91CF\u8BFB\u53D6" },
+        tabId: TAB_ID_FIELD
+      }
+    }
+  },
+  {
+    name: "networkRequests",
+    description: "[OBSERVE] \u5217\u51FA\u672C\u9875\u53D1\u51FA\u7684\u7F51\u7EDC\u8BF7\u6C42\u6458\u8981\uFF08method / url / status / \u8017\u65F6\uFF09\u3002\u9ED8\u8BA4\u9690\u85CF PerformanceObserver \u89C2\u6D4B\u5230\u7684\u9759\u6001\u8D44\u6E90\uFF0CincludeStatic:true \u624D\u5E26\u4E0A\u3002\n\u8981\u770B headers \u6216 body \u7528 networkRequestDetail\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        urlPattern: { type: "string", description: "\u5B50\u4E32\u5339\u914D\uFF1B\u7528 /re/ \u6216 /re/i \u5305\u8D77\u6765\u5219\u6309\u6B63\u5219" },
+        method: { type: "string" },
+        status: { type: "integer" },
+        includeStatic: { type: "boolean", default: false },
+        limit: { type: "integer", default: 50 },
+        sinceId: { type: "integer" },
+        tabId: TAB_ID_FIELD
+      }
+    }
+  },
+  {
+    name: "networkRequestDetail",
+    description: "[OBSERVE] \u8BFB\u53D6\u5355\u6761\u8BF7\u6C42\u7684 headers \u4E0E body\u3002**dangerous**\uFF1A\u54CD\u5E94\u5934\u91CC\u53EF\u80FD\u6709 Authorization / Set-Cookie / token\u3002\nmain-world \u6863\u9700\u5148 recorderConfig({bodies:true}) \u624D\u4F1A\u8BB0\u5F55 body\uFF0C\u4E14\u53EA\u8BB0 256KB \u4EE5\u5185\u7684\u6587\u672C\u7C7B\u54CD\u5E94\uFF1Bcdp \u6863\u76F4\u63A5\u53EF\u53D6\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        id: { type: "integer", description: "networkRequests \u8FD4\u56DE\u7684\u6761\u76EE id" },
+        part: {
+          type: "string",
+          enum: ["request-headers", "request-body", "response-headers", "response-body"],
+          description: "\u53EA\u53D6\u5176\u4E2D\u4E00\u90E8\u5206\uFF1B\u7701\u7565\u5219\u5168\u7ED9"
+        },
+        tabId: TAB_ID_FIELD
+      },
+      required: ["id"]
+    }
+  },
+  {
+    name: "handleDialog",
+    description: "[OBSERVE] \u8BBE\u5B9A alert / confirm / prompt \u7684\u5E94\u7B54\u7B56\u7565\uFF0C\u5E76\u8FD4\u56DE\u5DF2\u8BB0\u5F55\u7684\u5F39\u7A97\u3002\nmain-world \u6863\u4E0B\u5F39\u7A97\u662F\u540C\u6B65\u7684\uFF0C\u65E0\u6CD5\u6302\u8D77\u7B49\u4F60\u51B3\u5B9A\uFF0C\u6240\u4EE5\u8FD9\u91CC\u8BBE\u7684\u662F**\u9884\u5148\u7B56\u7565**\uFF1A\u8C03\u7528\u4E4B\u540E\u53D1\u751F\u7684\u5F39\u7A97\u6309\u6B64\u5904\u7406\u3002cdp \u6863\u4E0B\u5F39\u7A97\u771F\u6302\u8D77\uFF0C\u672C\u8C03\u7528\u4F1A\u7ACB\u5373\u5E94\u7B54\u5F53\u524D\u6302\u8D77\u7684\u5F39\u7A97\u3002\n\u672A\u8C03\u7528\u8FC7\u672C\u5DE5\u5177\u65F6\u5F39\u7A97\u4FDD\u6301\u539F\u751F\u884C\u4E3A\uFF08passthrough\uFF09\uFF0C\u9875\u9762\u8868\u73B0\u4E0E\u6CA1\u88C5\u6269\u5C55\u4E00\u81F4\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        accept: { type: "boolean", description: "true=\u786E\u5B9A\uFF0Cfalse=\u53D6\u6D88" },
+        promptText: { type: "string", description: "prompt \u5F39\u7A97\u586B\u5165\u7684\u6587\u672C" },
+        scope: { type: "string", enum: ["next", "all"], default: "next" },
+        tabId: TAB_ID_FIELD
+      },
+      required: ["accept"]
+    }
+  },
+  {
+    name: "recorderConfig",
+    description: "[OBSERVE] \u5F00\u5173\u9875\u9762\u4E8B\u4EF6\u5F55\u5236\u3002bodies:true \u6253\u5F00\u8BF7\u6C42/\u54CD\u5E94 body \u6355\u83B7\uFF08\u9ED8\u8BA4\u5173\uFF0C\u6709\u5185\u5B58\u4EE3\u4EF7\uFF09\uFF1Bdialog:true \u8BA9\u5F39\u7A97\u8D70\u7B56\u7565\u800C\u4E0D\u662F\u539F\u751F\u884C\u4E3A\uFF1Bclear \u6E05\u7A7A\u7F13\u51B2\u3002\u7701\u7565\u7684\u5B57\u6BB5\u4FDD\u6301\u539F\u6837\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        console: { type: "boolean" },
+        network: { type: "boolean" },
+        bodies: { type: "boolean" },
+        dialog: { type: "boolean" },
+        clear: {
+          type: "array",
+          items: { type: "string", enum: ["console", "network", "dialog"] }
+        },
+        tabId: TAB_ID_FIELD
+      }
+    }
+  },
+  {
+    name: "navigateBack",
+    description: "[FLOW] \u540E\u9000\u4E00\u9875\u3002\u5DF2\u5728\u5386\u53F2\u8D77\u70B9\u65F6\u8FD4\u56DE { ok:false, reason }\uFF0C\u4E0D\u629B\u9519\u3002",
+    input_schema: { type: "object", properties: { tabId: TAB_ID_FIELD } }
+  },
+  {
+    name: "navigateForward",
+    description: "[FLOW] \u524D\u8FDB\u4E00\u9875\u3002\u5DF2\u5728\u5386\u53F2\u672B\u5C3E\u65F6\u8FD4\u56DE { ok:false, reason }\uFF0C\u4E0D\u629B\u9519\u3002",
+    input_schema: { type: "object", properties: { tabId: TAB_ID_FIELD } }
+  },
+  {
+    name: "resize",
+    description: "[FLOW] \u628A\u89C6\u53E3\u8C03\u6574\u5230\u6307\u5B9A\u5C3A\u5BF8\u3002main-world \u6863\u91CF\u53D6 outerWidth-innerWidth \u53CD\u63A8\u6D4F\u89C8\u5668\u8FB9\u6846\u540E\u6539\u7A97\u53E3\u5916\u6846\uFF0C\u89C6\u53E3\u7CBE\u786E\u4F46**\u7528\u6237\u7684\u7A97\u53E3\u4F1A\u771F\u7684\u53D8\u5927\u5C0F**\uFF1Bcdp \u6863\u7528 Emulation \u8986\u76D6\u8BBE\u5907\u5C3A\u5BF8\uFF0C\u4E0D\u52A8\u771F\u5B9E\u7A97\u53E3\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        width: { type: "integer" },
+        height: { type: "integer" },
+        tabId: TAB_ID_FIELD
+      },
+      required: ["width", "height"]
+    }
+  },
+  {
+    name: "drag",
+    description: "[ACT] \u628A\u4E00\u4E2A\u5143\u7D20\u62D6\u5230\u53E6\u4E00\u4E2A\u5143\u7D20\u4E0A\u3002\u540C\u65F6\u53D1 pointer \u5E8F\u5217\u548C HTML5 DragEvent\uFF08\u5171\u7528\u4E00\u4E2A DataTransfer\uFF09\uFF0C\u517C\u5BB9\u539F\u751F\u62D6\u653E\u548C\u81EA\u5B9A\u4E49 pointer \u62D6\u653E\u3002\n\u8FD4\u56DE { consumed: { pointer, html5 } } \u8BF4\u660E\u76EE\u6807\u5B9E\u9645\u6D88\u8D39\u4E86\u54EA\u4E00\u7C7B\u4E8B\u4EF6\u2014\u2014\u90FD\u4E3A false \u8BF4\u660E\u8FD9\u4E2A\u62D6\u653E\u5B9E\u73B0\u4E24\u6761\u8DEF\u90FD\u4E0D\u5403\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        fromSelector: { type: "string" },
+        fromUid: { type: "string", description: "takeSnapshot / findElements \u8FD4\u56DE\u7684 uid" },
+        toSelector: { type: "string" },
+        toUid: { type: "string" },
+        tabId: TAB_ID_FIELD
+      }
+    }
+  },
+  {
+    name: "drop",
+    description: "[ACT] \u6A21\u62DF\u4ECE\u6D4F\u89C8\u5668\u5916\u90E8\u628A\u6587\u4EF6\u6216\u6570\u636E\u62D6\u653E\u5230\u9875\u9762\u5143\u7D20\u4E0A\u3002\u5E26 files \u65F6\u7B49\u540C\u4E0A\u4F20\uFF08dangerous\uFF09\u3002\n\u793A\u4F8B\uFF1A{ selector:'#dropzone', files:[{ name:'a.csv', mimeType:'text/csv', base64:'...' }] }",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        uid: { type: "string" },
+        files: {
+          type: "array",
+          items: {
+            type: "object",
+            properties: {
+              name: { type: "string" },
+              mimeType: { type: "string" },
+              base64: { type: "string" }
+            },
+            required: ["name", "base64"]
+          }
+        },
+        data: { type: "object", description: "MIME \u2192 \u5B57\u7B26\u4E32\uFF0C\u4F8B\u5982 { 'text/plain':'hi' }" },
+        tabId: TAB_ID_FIELD
+      }
+    }
+  },
+  {
+    name: "findElements",
+    description: "[READ] \u6309\u6587\u672C\u6216\u6B63\u5219\u5728\u53EF\u4EA4\u4E92\u5143\u7D20\u91CC\u627E\u76EE\u6807\uFF0C\u8FD4\u56DE uid / role / name / bounds\u3002\u4E0D\u9700\u8981\u5148 createPageIndex\u3002\n\u62FF\u5230 uid \u540E\u7528 clickByUid / fillByUid \u64CD\u4F5C\u6700\u7A33\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        text: { type: "string", description: "\u5927\u5C0F\u5199\u4E0D\u654F\u611F\u5B50\u4E32" },
+        regex: { type: "string", description: "\u4E0E text \u4E8C\u9009\u4E00" },
+        limit: { type: "integer", default: 20 },
+        tabId: TAB_ID_FIELD
+      }
+    }
   }
 ];
 
 // src/tool-gen.ts
-var EXEC_TOOL_NAMES = [
-  "snapshotDOM",
-  "querySelector",
-  "querySelectorAll",
-  "extractText",
-  "extractImages",
-  "getValue",
-  "extractFormState",
-  "hover",
-  "focus",
-  "scroll",
-  "waitFor",
+var BLOCKED_TOOLS = /* @__PURE__ */ new Set(["askUser", "attachTab", "detachTab"]);
+var PARITY_TOOLS = [
+  // page state and search
+  "takeSnapshot",
+  "findElements",
+  "getPageInfo",
+  // interaction
+  "clickByUid",
   "click",
   "fillInput",
-  "setCheckbox",
+  "fillForm",
   "selectOption",
-  "httpRequest",
-  "submitForm",
+  "setCheckbox",
+  "hover",
+  "pressKey",
+  "drag",
+  "drop",
   "uploadFile",
-  "readStorage"
+  // navigation and tabs
+  "navigate",
+  "navigateBack",
+  "listTabs",
+  "openTab",
+  "resize",
+  // observation
+  "screenshot",
+  "waitFor",
+  "runJS",
+  "consoleMessages",
+  "networkRequests"
 ];
+var IMAGE_RESULT_TOOLS = /* @__PURE__ */ new Set(["screenshot"]);
+var JS_STEP_TOOLS = /* @__PURE__ */ new Set(["runJS"]);
 function rebuildSchema(src) {
   const s = src;
   const properties = { ...s.properties ?? {} };
   delete properties.tabId;
-  properties.session_id = { type: "string", description: "open_session \u8FD4\u56DE\u7684\u4F1A\u8BDD id\uFF08\u51B3\u5B9A\u76EE\u6807 worker \u4E0E tab\uFF09" };
+  properties.session_id = {
+    type: "string",
+    description: "open_session \u8FD4\u56DE\u7684\u4F1A\u8BDD id\uFF08\u51B3\u5B9A\u76EE\u6807 worker \u4E0E tab\uFF09"
+  };
   const required = [.../* @__PURE__ */ new Set([...(s.required ?? []).filter((r) => r !== "tabId"), "session_id"])];
   return { type: "object", properties, required };
 }
-function generateBrowserTools() {
-  const allow = new Set(EXEC_TOOL_NAMES);
-  return TOOL_DEFS.filter((t) => allow.has(t.name)).map((t) => ({
+function generateBrowserTools(mode = "full") {
+  const parity = new Set(PARITY_TOOLS);
+  return TOOL_DEFS.filter((t) => {
+    if (BLOCKED_TOOLS.has(t.name)) return false;
+    return mode === "full" || parity.has(t.name);
+  }).map((t) => ({
     name: `browser_${t.name}`,
     builtinTool: t.name,
     description: t.description,
+    resultKind: IMAGE_RESULT_TOOLS.has(t.name) ? "image" : "json",
+    stepKind: JS_STEP_TOOLS.has(t.name) ? "js" : "tool",
     inputSchema: rebuildSchema(t.input_schema)
   }));
 }
+function readToolMode(env) {
+  const raw = env.ATWEBPILOT_MCP_TOOLS;
+  if (raw == null || raw === "") return "full";
+  if (raw === "full" || raw === "parity") return raw;
+  process.stderr.write(
+    `[atwebpilot-mcp] ATWEBPILOT_MCP_TOOLS="${raw}" is not recognised; using "full"
+`
+  );
+  return "full";
+}
 
 // src/handlers.ts
 function singleWorkerId(c) {
@@ -1829,16 +2068,52 @@ function handleGetQuota(deps, args) {
   if (!q) throw new Error(`session ${String(args.session_id)} not found`);
   return q;
 }
+var NON_BUILTIN_CAPABILITY = {
+  listTabs: "tab:open",
+  openTab: "tab:open"
+};
 async function handleBrowserTool(deps, gen, args) {
   const session_id = String(args.session_id);
   const session = deps.coordinator.sessions.get(session_id);
   if (!session) throw new Error(`session ${session_id} not found`);
   const { session_id: _omit, ...toolArgs } = args;
   const tool = gen.builtinTool;
-  const httpCookied = tool === "httpRequest" ? Boolean(toolArgs.withCredentials) : void 0;
-  const v = deps.coordinator.validateCall({ session_id, kind: "extension_tool", tool, httpCookied });
-  if (!v.ok) throw new Error(`${v.error.code}: ${v.error.message}`);
-  deps.coordinator.recordCall(session_id, v.dangerous);
+  if (gen.stepKind === "js") {
+    const source = String(toolArgs.source ?? "");
+    if (!source) throw new Error("browser_runJS: source required");
+    const v = deps.coordinator.validateCall({ session_id, kind: "runJS", unsafe: true });
+    if (!v.ok) throw new Error(`${v.error.code}: ${v.error.message}`);
+    deps.coordinator.recordCall(session_id, v.dangerous);
+    const jsResult = await deps.hub.exec(session.worker_id, {
+      session_id,
+      tab_id: session.tab_id,
+      step: { kind: "js", source }
+    });
+    if (!jsResult.ok) {
+      throw new Error(
+        jsResult.error ? `${jsResult.error.code}: ${jsResult.error.message}` : "EXEC failed"
+      );
+    }
+    return jsResult.return ?? null;
+  }
+  const override = NON_BUILTIN_CAPABILITY[gen.builtinTool];
+  if (override) {
+    const v = deps.coordinator.validateCall({ session_id, kind: "capability", capability: override });
+    if (!v.ok) throw new Error(`${v.error.code}: ${v.error.message}`);
+    deps.coordinator.recordCall(session_id, v.dangerous);
+  } else {
+    const raw = toolArgs;
+    const v = deps.coordinator.validateCall({
+      session_id,
+      kind: "extension_tool",
+      tool,
+      httpCookied: tool === "httpRequest" ? Boolean(raw.withCredentials) : void 0,
+      dropHasFiles: tool === "drop" ? Array.isArray(raw.files) && raw.files.length > 0 : void 0,
+      recorderArmsBodies: tool === "recorderConfig" ? raw.bodies === true : void 0
+    });
+    if (!v.ok) throw new Error(`${v.error.code}: ${v.error.message}`);
+    deps.coordinator.recordCall(session_id, v.dangerous);
+  }
   const result = await deps.hub.exec(session.worker_id, { session_id, tab_id: session.tab_id, step: { kind: "tool", tool, args: toolArgs } });
   if (!result.ok) throw new Error(result.error ? `${result.error.code}: ${result.error.message}` : "EXEC failed");
   return result.return ?? null;
@@ -1886,16 +2161,56 @@ var SKILL_TOOL = {
 };
 
 // src/mcp-server.ts
-var BROWSER_TOOLS = generateBrowserTools();
+var TOOL_MODE = readToolMode(process.env);
+var BROWSER_TOOLS = generateBrowserTools(TOOL_MODE);
 var BROWSER_BY_NAME = new Map(BROWSER_TOOLS.map((t) => [t.name, t]));
-function buildToolList() {
+var LEGACY_TOOLS = [
+  "snapshotDOM",
+  "querySelector",
+  "querySelectorAll",
+  "extractText",
+  "extractImages",
+  "getValue",
+  "extractFormState",
+  "hover",
+  "focus",
+  "scroll",
+  "waitFor",
+  "click",
+  "fillInput",
+  "setCheckbox",
+  "selectOption",
+  "httpRequest",
+  "submitForm",
+  "uploadFile",
+  "readStorage"
+];
+function workerToolSupport(deps) {
+  if (!deps) return void 0;
+  const workers = deps.coordinator.workers.list();
+  if (workers.length === 0) return void 0;
+  const supported = workers[0].supported_tools;
+  return supported ?? new Set(LEGACY_TOOLS);
+}
+function buildToolList(deps) {
+  const supported = workerToolSupport(deps);
+  const browser = supported ? BROWSER_TOOLS.filter((t) => supported.has(t.builtinTool)) : BROWSER_TOOLS;
   return [
     { name: SKILL_TOOL.name, description: SKILL_TOOL.description, inputSchema: SKILL_TOOL.inputSchema },
     ...CONTROL_TOOLS.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema })),
-    ...BROWSER_TOOLS.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema }))
+    ...browser.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema }))
   ];
 }
-var ok = (data) => ({ content: [{ type: "text", text: JSON.stringify(data ?? null) }] });
+var ok = (data) => ({
+  content: [{ type: "text", text: JSON.stringify(data ?? null) }]
+});
+function toolResult(gen, data) {
+  if (gen.resultKind !== "image") return ok(data);
+  const d = data ?? {};
+  if (typeof d.data !== "string") return ok(data);
+  const mimeType = typeof d.media_type === "string" ? d.media_type : "image/png";
+  return { content: [{ type: "image", data: d.data, mimeType }] };
+}
 var fail2 = (message) => ({ content: [{ type: "text", text: message }], isError: true });
 async function dispatchCall(deps, name, args) {
   try {
@@ -1908,7 +2223,7 @@ async function dispatchCall(deps, name, args) {
     if (name === "close_session") return ok(handleCloseSession(deps, args));
     if (name === "get_quota") return ok(handleGetQuota(deps, args));
     const gen = BROWSER_BY_NAME.get(name);
-    if (gen) return ok(await handleBrowserTool(deps, gen, args));
+    if (gen) return toolResult(gen, await handleBrowserTool(deps, gen, args));
     return fail2(`unknown tool: ${name}`);
   } catch (e) {
     return fail2(e instanceof Error ? e.message : String(e));
@@ -1916,7 +2231,7 @@ async function dispatchCall(deps, name, args) {
 }
 function createMcpServer(deps) {
   const server = new Server({ name: "atwebpilot-mcp", version: "0.1.0" }, { capabilities: { tools: {} } });
-  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: buildToolList() }));
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: buildToolList(deps) }));
   server.setRequestHandler(CallToolRequestSchema, async (req) => {
     const args = req.params.arguments ?? {};
     return dispatchCall(deps, req.params.name, args);
@@ -1930,6 +2245,7 @@ function helloToWorker(h, now) {
     id: h.worker_id,
     fingerprint: h.fingerprint,
     capabilities: new Set(h.capabilities.filter(isCapability)),
+    supported_tools: h.supported_tools ? new Set(h.supported_tools) : void 0,
     attended: h.attended,
     labels: new Set(h.labels),
     available_tabs: h.available_tabs,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attson/atwebpilot-mcp",
-  "version": "0.0.55",
+  "version": "0.0.56",
   "license": "Apache-2.0",
   "description": "MCP server for the atwebpilot browser extension — let Claude Code drive your browser.",
   "homepage": "https://github.com/attson/atwebpilot#readme",