@browserstack/mcp-server 1.5.0-beta.21 → 1.5.0-beta.23

package/dist/config.d.ts

@@ -11,10 +11,7 @@ export declare class Config {
     readonly O11Y_TFA_RCA_BASE_URL: string;
     readonly BROWSERSTACK_AUTOMATION_BASE_URL: string;
     readonly BROWSERSTACK_O11Y_UI_BASE_URL: string;
-    readonly ASK_BROWSERSTACK_ALLOW_REMOTE_RELAY: boolean;
-    readonly ASK_BROWSERSTACK_ATLAS_URL: string | undefined;
-    readonly ASK_BROWSERSTACK_AUTH_TOKEN_URL: string | undefined;
-    constructor(DEV_MODE: boolean, browserstackLocalOptions: Record<string, any>, USE_OWN_LOCAL_BINARY_PROCESS: boolean, REMOTE_MCP: boolean, UPLOAD_BASE_DIR: string | undefined, O11Y_TFA_RCA_BASE_URL: string, BROWSERSTACK_AUTOMATION_BASE_URL: string, BROWSERSTACK_O11Y_UI_BASE_URL: string, ASK_BROWSERSTACK_ALLOW_REMOTE_RELAY: boolean, ASK_BROWSERSTACK_ATLAS_URL: string | undefined, ASK_BROWSERSTACK_AUTH_TOKEN_URL: string | undefined);
+    constructor(DEV_MODE: boolean, browserstackLocalOptions: Record<string, any>, USE_OWN_LOCAL_BINARY_PROCESS: boolean, REMOTE_MCP: boolean, UPLOAD_BASE_DIR: string | undefined, O11Y_TFA_RCA_BASE_URL: string, BROWSERSTACK_AUTOMATION_BASE_URL: string, BROWSERSTACK_O11Y_UI_BASE_URL: string);
 }
 declare const config: Config;
 export default config;

package/dist/config.js

@@ -47,18 +47,7 @@ export class Config {
     O11Y_TFA_RCA_BASE_URL;
     BROWSERSTACK_AUTOMATION_BASE_URL;
     BROWSERSTACK_O11Y_UI_BASE_URL;
-    ASK_BROWSERSTACK_ALLOW_REMOTE_RELAY;
-    ASK_BROWSERSTACK_ATLAS_URL;
-    ASK_BROWSERSTACK_AUTH_TOKEN_URL;
-    constructor(DEV_MODE, browserstackLocalOptions, USE_OWN_LOCAL_BINARY_PROCESS, REMOTE_MCP, UPLOAD_BASE_DIR, O11Y_TFA_RCA_BASE_URL, BROWSERSTACK_AUTOMATION_BASE_URL, BROWSERSTACK_O11Y_UI_BASE_URL, 
-    // askBrowserStackAI's process-startup settings. Declared here rather than read from
-    // process.env inside src/tools/, per rules/tool-design.md — and so the remote wrapper,
-    // which only forwards env it knows about, has one place to look.
-    //
-    // ASK_BROWSERSTACK_DISABLED is deliberately NOT here: it is a kill switch, and reading
-    // it per call keeps it effective without a restart. Fixing it at boot would mean a pod
-    // roll to disable the tool, which is slowest exactly when you need it fastest.
-    ASK_BROWSERSTACK_ALLOW_REMOTE_RELAY, ASK_BROWSERSTACK_ATLAS_URL, ASK_BROWSERSTACK_AUTH_TOKEN_URL) {
+    constructor(DEV_MODE, browserstackLocalOptions, USE_OWN_LOCAL_BINARY_PROCESS, REMOTE_MCP, UPLOAD_BASE_DIR, O11Y_TFA_RCA_BASE_URL, BROWSERSTACK_AUTOMATION_BASE_URL, BROWSERSTACK_O11Y_UI_BASE_URL) {
         this.DEV_MODE = DEV_MODE;
         this.browserstackLocalOptions = browserstackLocalOptions;
         this.USE_OWN_LOCAL_BINARY_PROCESS = USE_OWN_LOCAL_BINARY_PROCESS;
@@ -67,9 +56,6 @@ export class Config {
         this.O11Y_TFA_RCA_BASE_URL = O11Y_TFA_RCA_BASE_URL;
         this.BROWSERSTACK_AUTOMATION_BASE_URL = BROWSERSTACK_AUTOMATION_BASE_URL;
         this.BROWSERSTACK_O11Y_UI_BASE_URL = BROWSERSTACK_O11Y_UI_BASE_URL;
-        this.ASK_BROWSERSTACK_ALLOW_REMOTE_RELAY = ASK_BROWSERSTACK_ALLOW_REMOTE_RELAY;
-        this.ASK_BROWSERSTACK_ATLAS_URL = ASK_BROWSERSTACK_ATLAS_URL;
-        this.ASK_BROWSERSTACK_AUTH_TOKEN_URL = ASK_BROWSERSTACK_AUTH_TOKEN_URL;
     }
 }
 const config = new Config(process.env.DEV_MODE === "true", browserstackLocalOptions, process.env.USE_OWN_LOCAL_BINARY_PROCESS === "true", process.env.REMOTE_MCP === "true", process.env.MCP_UPLOAD_BASE_DIR && process.env.MCP_UPLOAD_BASE_DIR.length > 0
@@ -83,12 +69,5 @@ const config = new Config(process.env.DEV_MODE === "true", browserstackLocalOpti
     : DEFAULT_BROWSERSTACK_AUTOMATION_BASE_URL, process.env.BROWSERSTACK_O11Y_UI_BASE_URL &&
     process.env.BROWSERSTACK_O11Y_UI_BASE_URL.length > 0
     ? process.env.BROWSERSTACK_O11Y_UI_BASE_URL
-    : DEFAULT_BROWSERSTACK_O11Y_UI_BASE_URL, (process.env.ASK_BROWSERSTACK_ALLOW_REMOTE_RELAY || "").toLowerCase() ===
-    "true", process.env.ASK_BROWSERSTACK_ATLAS_URL &&
-    process.env.ASK_BROWSERSTACK_ATLAS_URL.trim().length > 0
-    ? process.env.ASK_BROWSERSTACK_ATLAS_URL
-    : undefined, process.env.ASK_BROWSERSTACK_AUTH_TOKEN_URL &&
-    process.env.ASK_BROWSERSTACK_AUTH_TOKEN_URL.trim().length > 0
-    ? process.env.ASK_BROWSERSTACK_AUTH_TOKEN_URL
-    : undefined);
+    : DEFAULT_BROWSERSTACK_O11Y_UI_BASE_URL);
 export default config;

package/dist/index.d.ts

@@ -2,7 +2,6 @@
 import "dotenv/config";
 export { setLogger } from "./logger.js";
 export { BrowserStackMcpServer } from "./server-factory.js";
-export { trackMCP, withToolCall } from "./lib/instrumentation.js";
-export { instrumentToolLatency } from "./lib/tool-latency.js";
+export { trackMCP } from "./lib/instrumentation.js";
 export { default as addTfaRcaCollaborationTools } from "./tools/tfa-rca-collaboration.js";
 export declare const PackageJsonVersion: any;

package/dist/index.js

@@ -29,16 +29,12 @@ async function main() {
     await mcpServer.getInstance().connect(transport);
 }
 main().catch(console.error);
-// Ensure logs are flushed before exit. Optional-called because an exit handler must not
-// be the thing that throws: `flush` is absent from every `vi.mock("src/logger")` in the
-// suite, so any test file that loads this module used to fail the run with
-// `default.flush is not a function` depending on how vitest scheduled workers.
+// Ensure logs are flushed before exit
 process.on("exit", () => {
-    logger.flush?.();
+    logger.flush();
 });
 export { setLogger } from "./logger.js";
 export { BrowserStackMcpServer } from "./server-factory.js";
-export { trackMCP, withToolCall } from "./lib/instrumentation.js";
-export { instrumentToolLatency } from "./lib/tool-latency.js";
+export { trackMCP } from "./lib/instrumentation.js";
 export { default as addTfaRcaCollaborationTools } from "./tools/tfa-rca-collaboration.js";
 export const PackageJsonVersion = packageJson.version;

package/dist/lib/constants.d.ts

@@ -2,18 +2,15 @@ export declare const SessionType: {
     readonly Automate: "automate";
     readonly AppAutomate: "app-automate";
 };
-export declare const SessionVideoLogType: "video";
 export declare const AutomateLogType: {
     readonly NetworkLogs: "networkLogs";
     readonly SessionLogs: "sessionLogs";
     readonly ConsoleLogs: "consoleLogs";
-    readonly Video: "video";
 };
 export declare const AppAutomateLogType: {
     readonly DeviceLogs: "deviceLogs";
     readonly AppiumLogs: "appiumLogs";
     readonly CrashLogs: "crashLogs";
-    readonly Video: "video";
 };
 export type SessionType = (typeof SessionType)[keyof typeof SessionType];
 export type AutomateLogType = (typeof AutomateLogType)[keyof typeof AutomateLogType];

package/dist/lib/constants.js

@@ -2,16 +2,13 @@ export const SessionType = {
     Automate: "automate",
     AppAutomate: "app-automate",
 };
-export const SessionVideoLogType = "video";
 export const AutomateLogType = {
     NetworkLogs: "networkLogs",
     SessionLogs: "sessionLogs",
     ConsoleLogs: "consoleLogs",
-    Video: SessionVideoLogType,
 };
 export const AppAutomateLogType = {
     DeviceLogs: "deviceLogs",
     AppiumLogs: "appiumLogs",
     CrashLogs: "crashLogs",
-    Video: SessionVideoLogType,
 };

package/dist/lib/instrumentation.d.ts

@@ -1,16 +1,4 @@
-export type ClientInfo = {
+export declare function trackMCP(toolName: string, clientInfo: {
     name?: string;
     version?: string;
-};
-export type ToolOutcome = "ok" | "error_result" | "threw";
-/**
- * Inside `withToolCall` this only records into the call's context; the single row is
- * written when the handler settles. Outside one (`started` heartbeat, unwrapped host
- * tools) it posts a row immediately, as before.
- */
-export declare function trackMCP(toolName: string, clientInfo: ClientInfo, error?: unknown, config?: any): void;
-/**
- * Runs a tool handler and writes one MCPInstrumentation row when it settles: success,
- * duration_ms, outcome (ok / error_result / threw), error fields on failure.
- */
-export declare function withToolCall<T>(toolName: string, getClientInfo: () => ClientInfo, config: any, fn: () => Promise<T> | T): Promise<T>;
+}, error?: unknown, config?: any): void;

package/dist/lib/instrumentation.js

@@ -1,4 +1,3 @@
-import { AsyncLocalStorage } from "node:async_hooks";
 import logger from "../logger.js";
 import { getBrowserStackAuth } from "./get-auth.js";
 import { createRequire } from "module";
@@ -6,31 +5,42 @@ const require = createRequire(import.meta.url);
 const packageJson = require("../../package.json");
 import { apiClient } from "./apiClient.js";
 import globalConfig from "../config.js";
-const INSTRUMENTATION_ENDPOINT = "https://api.browserstack.com/sdk/v1/event";
-function baseProperties(toolName, clientInfo) {
-    return {
-        mcp_version: packageJson.version,
-        tool_name: toolName,
-        mcp_client: clientInfo?.name || "unknown",
-        node_version: process.versions.node,
-        is_remote: globalConfig.REMOTE_MCP,
-    };
-}
-function errorProperties(error) {
-    return {
-        error_message: error instanceof Error ? error.message : String(error),
-        error_type: error instanceof Error ? error.constructor.name : "Unknown",
+export function trackMCP(toolName, clientInfo, error, config) {
+    const instrumentationEndpoint = "https://api.browserstack.com/sdk/v1/event";
+    const isSuccess = !error;
+    const mcpClient = clientInfo?.name || "unknown";
+    // Log client information
+    if (clientInfo?.name) {
+        logger.info(`Client connected: ${clientInfo.name} (version: ${clientInfo.version})`);
+    }
+    else {
+        logger.info("Client connected: unknown client");
+    }
+    const event = {
+        event_type: "MCPInstrumentation",
+        event_properties: {
+            mcp_version: packageJson.version,
+            tool_name: toolName,
+            mcp_client: mcpClient,
+            success: isSuccess,
+            is_remote: globalConfig.REMOTE_MCP,
+        },
     };
-}
-function sendEvent(event, config) {
-    let authHeader;
+    // Add error details if applicable
+    if (error) {
+        event.event_properties.error_message =
+            error instanceof Error ? error.message : String(error);
+        event.event_properties.error_type =
+            error instanceof Error ? error.constructor.name : "Unknown";
+    }
+    let authHeader = undefined;
     if (config) {
         const authString = getBrowserStackAuth(config);
         authHeader = `Basic ${Buffer.from(authString).toString("base64")}`;
     }
     apiClient
         .post({
-        url: INSTRUMENTATION_ENDPOINT,
+        url: instrumentationEndpoint,
         body: event,
         headers: {
             "Content-Type": "application/json",
@@ -41,88 +51,3 @@ function sendEvent(event, config) {
     })
         .catch(() => { });
 }
-const callContext = new AsyncLocalStorage();
-/**
- * Inside `withToolCall` this only records into the call's context; the single row is
- * written when the handler settles. Outside one (`started` heartbeat, unwrapped host
- * tools) it posts a row immediately, as before.
- */
-export function trackMCP(toolName, clientInfo, error, config) {
-    const ctx = callContext.getStore();
-    if (ctx) {
-        if (clientInfo?.name && !ctx.clientInfo?.name)
-            ctx.clientInfo = clientInfo;
-        if (config && !ctx.config)
-            ctx.config = config;
-        if (error)
-            ctx.error = error;
-        return;
-    }
-    if (clientInfo?.name) {
-        logger.info(`Client connected: ${clientInfo.name} (version: ${clientInfo.version})`);
-    }
-    else {
-        logger.info("Client connected: unknown client");
-    }
-    const event = {
-        event_type: "MCPInstrumentation",
-        event_properties: {
-            ...baseProperties(toolName, clientInfo),
-            success: !error,
-            ...(error ? errorProperties(error) : {}),
-        },
-    };
-    sendEvent(event, config);
-}
-function isErrorResult(result) {
-    return (typeof result === "object" &&
-        result !== null &&
-        result.isError === true);
-}
-/**
- * Runs a tool handler and writes one MCPInstrumentation row when it settles: success,
- * duration_ms, outcome (ok / error_result / threw), error fields on failure.
- */
-export async function withToolCall(toolName, getClientInfo, config, fn) {
-    const ctx = { toolName, clientInfo: {}, config };
-    const startedAt = performance.now();
-    let outcome = "ok";
-    try {
-        const result = await callContext.run(ctx, fn);
-        if (isErrorResult(result))
-            outcome = "error_result";
-        return result;
-    }
-    catch (error) {
-        outcome = "threw";
-        ctx.error ??= error;
-        throw error;
-    }
-    finally {
-        try {
-            let clientInfo = ctx.clientInfo;
-            try {
-                const live = getClientInfo();
-                if (live?.name)
-                    clientInfo = live;
-            }
-            catch {
-                /* client info is optional */
-            }
-            const event = {
-                event_type: "MCPInstrumentation",
-                event_properties: {
-                    ...baseProperties(toolName, clientInfo),
-                    success: ctx.error === undefined && outcome !== "threw",
-                    duration_ms: Math.max(0, Math.round(performance.now() - startedAt)),
-                    outcome,
-                    ...(ctx.error !== undefined ? errorProperties(ctx.error) : {}),
-                },
-            };
-            sendEvent(event, ctx.config ?? config);
-        }
-        catch {
-            /* telemetry must never affect the call */
-        }
-    }
-}

package/dist/lib/upload-validator.d.ts

@@ -1,7 +1,7 @@
 export interface UploadValidationOptions {
     allowedExtensions: readonly string[];
     maxSizeBytes: number;
-    allowedBaseDir: string | undefined;
+    allowedBaseDir?: string;
 }
 /**
  * Canonicalizes and validates a user-supplied upload path. Returns the resolved
@@ -13,8 +13,7 @@ export interface UploadValidationOptions {
  *  - File extension is in `allowedExtensions` (case-insensitive)
  *  - No path segment is a hidden dir/file (starts with `.`); blocks ~/.ssh,
  *    ~/.aws, .env, etc. even after symlink resolution
- *  - `allowedBaseDir` is mandatory: uploads are refused unless it is configured
- *    (via MCP_UPLOAD_BASE_DIR), and the canonical path must live inside it
+ *  - If `allowedBaseDir` is set, the canonical path must live inside it
  */
 export declare function validateUploadPath(filePath: string, options: UploadValidationOptions): string;
 export declare const APP_BINARY_EXTENSIONS: readonly [".apk", ".aab", ".ipa", ".app", ".zip"];

package/dist/lib/upload-validator.js

@@ -10,8 +10,7 @@ import path from "path";
  *  - File extension is in `allowedExtensions` (case-insensitive)
  *  - No path segment is a hidden dir/file (starts with `.`); blocks ~/.ssh,
  *    ~/.aws, .env, etc. even after symlink resolution
- *  - `allowedBaseDir` is mandatory: uploads are refused unless it is configured
- *    (via MCP_UPLOAD_BASE_DIR), and the canonical path must live inside it
+ *  - If `allowedBaseDir` is set, the canonical path must live inside it
  */
 export function validateUploadPath(filePath, options) {
     if (typeof filePath !== "string" || filePath.trim().length === 0) {
@@ -49,22 +48,20 @@ export function validateUploadPath(filePath, options) {
     if (!allowed.includes(ext)) {
         throw new Error(`Upload rejected: file extension "${ext || "(none)"}" is not in the allowed list (${allowed.join(", ")}).`);
     }
-    if (!options.allowedBaseDir) {
-        throw new Error("Upload rejected: MCP_UPLOAD_BASE_DIR is not set. Set it to the directory " +
-            "containing the files to upload, then restart the MCP server.");
-    }
-    let baseCanonical;
-    try {
-        baseCanonical = fs.realpathSync(path.resolve(options.allowedBaseDir));
-    }
-    catch {
-        throw new Error(`Upload rejected: configured MCP_UPLOAD_BASE_DIR does not exist (${options.allowedBaseDir}).`);
-    }
-    const baseWithSep = baseCanonical.endsWith(path.sep)
-        ? baseCanonical
-        : baseCanonical + path.sep;
-    if (canonical !== baseCanonical && !canonical.startsWith(baseWithSep)) {
-        throw new Error(`Upload rejected: file must be located inside ${baseCanonical}.`);
+    if (options.allowedBaseDir) {
+        let baseCanonical;
+        try {
+            baseCanonical = fs.realpathSync(path.resolve(options.allowedBaseDir));
+        }
+        catch {
+            throw new Error(`Upload rejected: configured MCP_UPLOAD_BASE_DIR does not exist (${options.allowedBaseDir}).`);
+        }
+        const baseWithSep = baseCanonical.endsWith(path.sep)
+            ? baseCanonical
+            : baseCanonical + path.sep;
+        if (canonical !== baseCanonical && !canonical.startsWith(baseWithSep)) {
+            throw new Error(`Upload rejected: file must be located inside ${baseCanonical}.`);
+        }
     }
     return canonical;
 }

package/dist/lib/utils.js

@@ -1,6 +1,6 @@
+import sharp from "sharp";
 import { getBrowserStackAuth } from "./get-auth.js";
 import { trackMCP } from "../index.js";
-import logger from "../logger.js";
 export function sanitizeUrlParam(param) {
     // Remove any characters that could be used for command injection
     return param.replace(/[;&|`$(){}[\]<>]/g, "");
@@ -15,15 +15,8 @@ export async function maybeCompressBase64(base64) {
     const sizeRatio = 1048576 / buffer.length;
     const estimatedQuality = Math.floor(sizeRatio * 100);
     const quality = Math.min(95, Math.max(30, estimatedQuality));
-    try {
-        const { default: sharp } = await import("sharp");
-        const compressedBuffer = await sharp(buffer).png({ quality }).toBuffer();
-        return compressedBuffer.toString("base64");
-    }
-    catch (err) {
-        logger.warn("Image compression unavailable (sharp failed to load); returning the uncompressed image. %s", err instanceof Error ? err.message : String(err));
-        return base64;
-    }
+    const compressedBuffer = await sharp(buffer).png({ quality }).toBuffer();
+    return compressedBuffer.toString("base64");
 }
 export async function assertOkResponse(response, action) {
     if (!response.ok) {

package/dist/lib/version-resolver.d.ts

@@ -1 +1,6 @@
+/**
+ * If req === "latest" or "oldest", returns max/min numeric (or lex)
+ * Else if exact match, returns that
+ * Else picks the numerically closest (or first)
+ */
 export declare function resolveVersion(requested: string, available: string[]): string;

package/dist/lib/version-resolver.js

@@ -3,19 +3,13 @@
  * Else if exact match, returns that
  * Else picks the numerically closest (or first)
  */
-const PRERELEASE_CHANNEL = /\b(beta|dev|alpha|canary|nightly|preview)\b/i;
 export function resolveVersion(requested, available) {
     // strip duplicates & sort
     const uniq = Array.from(new Set(available));
     // pick min/max
     if (requested === "latest" || requested === "oldest") {
-        // Prefer stable releases: BrowserStack lists pre-release channels such as
-        // "154.0 beta" / "155.0 dev" alongside stable versions, and "latest"
-        // should never resolve to one of those while a stable version exists.
-        const stable = uniq.filter((v) => !PRERELEASE_CHANNEL.test(v));
-        const candidates = stable.length > 0 ? stable : uniq;
         // try numeric
-        const nums = candidates
+        const nums = uniq
             .map((v) => ({ v, n: parseFloat(v) }))
             .filter((x) => !isNaN(x.n))
             .sort((a, b) => a.n - b.n);
@@ -23,7 +17,7 @@ export function resolveVersion(requested, available) {
             return requested === "latest" ? nums[nums.length - 1].v : nums[0].v;
         }
         // fallback lex
-        const lex = candidates.slice().sort();
+        const lex = uniq.slice().sort();
         return requested === "latest" ? lex[lex.length - 1] : lex[0];
     }
     // exact match?

package/dist/logger.js

@@ -22,7 +22,16 @@ if (process.env.NODE_ENV === "development") {
     });
 }
 else {
-    currentLogger = pino({ level: "info", enabled: false });
+    // Null logger (logs go to /dev/null or NUL)
+    currentLogger = pino({
+        level: "info",
+        transport: {
+            target: "pino/file",
+            options: {
+                destination: process.platform === "win32" ? "NUL" : "/dev/null",
+            },
+        },
+    });
 }
 // 2. Proxy logger: always delegates to the currentLogger
 const logger = new Proxy({}, {

package/dist/server-factory.js

@@ -16,9 +16,7 @@ import addAppLiveTools from "./tools/applive.js";
 import addBuildInsightsTools from "./tools/build-insights.js";
 import { setupOnInitialized } from "./oninitialized.js";
 import addRCATools from "./tools/rca-agent.js";
-import addAskBrowserStackAITool from "./tools/ask-browserstack/register.js";
-import { instrumentToolLatency } from "./lib/tool-latency.js";
-import { nodeUpgradeNotice } from "./lib/node-version-notice.js";
+import addCapabilityRegistryTools from "./tools/capability-registry/register.js";
 /**
  * Wrapper class for BrowserStack MCP Server
  * Stores a map of registered tools by name
@@ -33,7 +31,7 @@ export class BrowserStackMcpServer {
         this.server = new McpServer({
             name: "BrowserStack MCP Server",
             version: packageJson.version,
-        }, { instructions: nodeUpgradeNotice() || undefined });
+        });
         setupOnInitialized(this.server, this.config);
         this.registerTools();
     }
@@ -54,18 +52,16 @@ export class BrowserStackMcpServer {
             addSelfHealTools,
             addBuildInsightsTools,
             addRCATools,
-            // Hands a plain-language task to BrowserStack's agent and relays its mid-run
-            // permission asks back to this client, so a write can be confirmed by the human
-            // sitting in front of it rather than refused for want of anyone to ask.
-            addAskBrowserStackAITool,
+            // Driven by a prebuilt index rather than hand-written per endpoint. Registers
+            // nothing (and logs why) when the artifact is absent, so a packaging problem cannot
+            // take the other products' tools down with it.
+            addCapabilityRegistryTools,
         ];
         toolAdders.forEach((adder) => {
             // Each adder now returns a Record<string, Tool>
             const added = adder(this.server, this.config);
             Object.assign(this.tools, added);
         });
-        // Client info is read at call time; it is empty until initialize arrives.
-        instrumentToolLatency(this.tools, () => this.server.server.getClientVersion() ?? {}, this.config);
     }
     /**
      * Expose the underlying MCP server instance

package/dist/tools/accessibility.js

@@ -4,12 +4,10 @@ import { AccessibilityReportFetcher } from "./accessiblity-utils/report-fetcher.
 import { AccessibilityAuthConfig, safeAuthConfigData, } from "./accessiblity-utils/auth-config.js";
 import { trackMCP } from "../lib/instrumentation.js";
 import { parseAccessibilityReportFromCSV } from "./accessiblity-utils/report-parser.js";
-import { wrapUntrusted } from "../lib/untrusted-content.js";
 import { queryAccessibilityRAG } from "./accessiblity-utils/accessibility-rag.js";
 import { getBrowserStackAuth } from "../lib/get-auth.js";
 import { elicitCredentialsIfSupported } from "../lib/elicit-credentials.js";
 import logger from "../logger.js";
-import { NEEDS_A11Y_CONFIG_ID, NEEDS_A11Y_SCAN_ID } from "./tool-handoff.js";
 function setupAuth(config) {
     const authString = getBrowserStackAuth(config);
     const [username, password] = authString.split(":");
@@ -91,7 +89,7 @@ async function fetchAccessibilityIssues(scanId, scanRunId, config, cursor = 0) {
     const remainingIssues = total_issues - currentlyShown;
     const messages = [
         `Retrieved ${page_length} accessibility issues (Total: ${total_issues})`,
-        `Issues: ${wrapUntrusted("accessibility scan results", JSON.stringify(records, null, 2))}`,
+        `Issues: ${JSON.stringify(records, null, 2)}`,
     ];
     if (next_page !== null) {
         messages.push(`${remainingIssues} more issues available. Use fetchAccessibilityIssues with cursor: ${next_page} to get the next batch.`);
@@ -187,7 +185,7 @@ function createScanSuccessResponse(name, totalIssues, pageLength, records, scanI
         `Scan ID: ${scanId} and Scan Run ID: ${scanRunId}`,
         `You can also download the full report from the following link: ${reportUrl}`,
         `We found ${totalIssues} issues. Below are the details of the ${pageLength} most critical issues.`,
-        `Scan results: ${wrapUntrusted("accessibility scan results", JSON.stringify(records, null, 2))}`,
+        `Scan results: ${JSON.stringify(records, null, 2)}`,
     ];
     if (cursor !== null) {
         messages.push(`More issues available. Use fetchAccessibilityIssues tool with scanId: "${scanId}", scanRunId: "${scanRunId}", and cursor: ${cursor} to get the next batch.`);
@@ -238,7 +236,7 @@ export default function addAccessibilityTools(server, config) {
     }, {
         title: "Start Accessibility Scan",
         readOnlyHint: false,
-        openWorldHint: true,
+        openWorldHint: false,
         destructiveHint: false,
         idempotentHint: false,
     }, async (args, context) => {
@@ -305,8 +303,7 @@ export default function addAccessibilityTools(server, config) {
             return handleMCPError("createAccessibilityAuthConfig", server, config, error);
         }
     });
-    tools.getAccessibilityAuthConfig = server.tool("getAccessibilityAuthConfig", "Retrieve an existing authentication configuration by ID." +
-        NEEDS_A11Y_CONFIG_ID, {
+    tools.getAccessibilityAuthConfig = server.tool("getAccessibilityAuthConfig", "Retrieve an existing authentication configuration by ID.", {
         configId: z.number().describe("ID of the auth configuration to retrieve"),
     }, {
         title: "Get Accessibility Auth Config",
@@ -317,8 +314,7 @@ export default function addAccessibilityTools(server, config) {
     }, async (args) => {
         return await executeGetAuthConfig(args, server, config);
     });
-    tools.fetchAccessibilityIssues = server.tool("fetchAccessibilityIssues", "Fetch accessibility issues from a completed scan with pagination support. Use cursor parameter to get subsequent pages of results." +
-        NEEDS_A11Y_SCAN_ID, {
+    tools.fetchAccessibilityIssues = server.tool("fetchAccessibilityIssues", "Fetch accessibility issues from a completed scan with pagination support. Use cursor parameter to get subsequent pages of results.", {
         scanId: z
             .string()
             .describe("The scan ID from a completed accessibility scan"),

package/dist/tools/accessiblity-utils/accessibility-rag.js

@@ -1,5 +1,4 @@
 import { apiClient } from "../../lib/apiClient.js";
-import { wrapUntrusted } from "../../lib/untrusted-content.js";
 import { getBrowserStackAuth } from "../../lib/get-auth.js";
 export async function queryAccessibilityRAG(userQuery, config) {
     const url = "https://accessibility.browserstack.com/api/tcg-proxy/search";
@@ -46,8 +45,7 @@ export async function queryAccessibilityRAG(userQuery, config) {
     const formattedChunks = chunks
         .map((chunk, index) => `${index + 1}: Source: ${chunk.url}\n\n${chunk.content}`)
         .join("\n\n---\n\n");
-    const formattedResponse = instruction +
-        wrapUntrusted("BrowserStack accessibility documentation", formattedChunks);
+    const formattedResponse = instruction + formattedChunks;
     return {
         content: [
             {

package/dist/tools/appautomate-utils/native-execution/constants.js

@@ -20,8 +20,7 @@ export const RUN_APP_AUTOMATE_SCHEMA = {
         "  xcodebuild clean -scheme YOUR_SCHEME && \\\n" +
         "  xcodebuild archive -scheme YOUR_SCHEME -configuration Release -archivePath build/app.xcarchive && \\\n" +
         "  xcodebuild -exportArchive -archivePath build/app.xcarchive -exportPath build/ipa -exportOptionsPlist exportOptions.plist\n\n" +
-        "If in other directory, provide existing app path.\n" +
-        "The resolved file must be located inside the directory set in MCP_UPLOAD_BASE_DIR."),
+        "If in other directory, provide existing app path"),
     testSuitePath: z
         .string()
         .describe("Path to your test suite file:\n" +
@@ -31,8 +30,7 @@ export const RUN_APP_AUTOMATE_SCHEMA = {
         "  xcodebuild test-without-building -scheme YOUR_SCHEME -destination 'generic/platform=iOS' && \\\n" +
         "  cd ~/Library/Developer/Xcode/DerivedData/*/Build/Products/Debug-iphonesimulator/ && \\\n" +
         "  zip -r Tests.zip *.xctestrun *-Runner.app\n\n" +
-        "If in other directory, provide existing test file path.\n" +
-        "The resolved file must be located inside the directory set in MCP_UPLOAD_BASE_DIR."),
+        "If in other directory, provide existing test file path"),
     devices: z
         .array(MobileDeviceSchema)
         .max(3)

package/dist/tools/appautomate.js

@@ -206,7 +206,7 @@ export default function addAppAutomationTools(server, config) {
             .describe("Platform to run the app on. Either 'android' or 'ios'."),
         appPath: z
             .string()
-            .describe("The path to the .apk or .ipa file. Required for app installation. Must be located inside the directory set in MCP_UPLOAD_BASE_DIR."),
+            .describe("The path to the .apk or .ipa file. Required for app installation."),
     }, {
         title: "Take App Screenshot",
         readOnlyHint: false,
@@ -266,11 +266,9 @@ export default function addAppAutomationTools(server, config) {
         idempotentHint: true,
     }, async (args) => {
         try {
-            trackMCP("setupBrowserStackAppAutomateTests", server.server.getClientVersion(), undefined, config);
             return await setupAppAutomateHandler(args, config);
         }
         catch (error) {
-            trackMCP("setupBrowserStackAppAutomateTests", server.server.getClientVersion(), error, config);
             const error_message = error instanceof Error ? error.message : "Unknown error";
             return {
                 content: [

package/dist/tools/applive.js

@@ -66,7 +66,7 @@ export default function addAppLiveTools(server, config) {
             .describe("Which platform to run on, examples: 'android', 'ios'. Set this based on the app path provided."),
         appPath: z
             .string()
-            .describe("The path to the .ipa or .apk file to install on the device. Always ask the user for the app path, do not assume it. Must be located inside the directory set in MCP_UPLOAD_BASE_DIR."),
+            .describe("The path to the .ipa or .apk file to install on the device. Always ask the user for the app path, do not assume it."),
     }, {
         title: "Run App Live Session",
         readOnlyHint: false,

package/dist/tools/automate.d.ts

@@ -6,11 +6,4 @@ export declare function fetchAutomationScreenshotsTool(args: {
     sessionId: string;
     sessionType: SessionType;
 }, config: BrowserStackConfig): Promise<CallToolResult>;
-export declare function listSessionIdsTool(args: {
-    sessionType: SessionType;
-    buildId: string;
-    limit?: number;
-    offset?: number;
-    status?: string;
-}, config: BrowserStackConfig): Promise<CallToolResult>;
 export default function addAutomationTools(server: McpServer, config: BrowserStackConfig): Record<string, any>;