@descryy/mcp 0.1.2 → 0.3.0

package/dist/tools/browser-fill.js

@@ -0,0 +1,138 @@
+/**
+ * `browser_fill` — set a field's value directly.
+ *
+ * ## Consent, and why this tool asks for none
+ *
+ * `DEC-380` grants consent once, at
+ * `browser_start_session`, bound to that call's origin. So this tool declares
+ * `class: "action"` — it does change a running application, and pretending
+ * otherwise would be the lie — while its `describeAction` returns `undefined`,
+ * the existing "this particular call has nothing to confirm" path that
+ * `questions` uses when asked to read rather than write.
+ *
+ * The property that makes that safe rather than merely cheap: **a verb cannot
+ * mint consent for itself.** Called against a session with no consent record,
+ * it refuses. There is deliberately no path from a click to a token.
+ *
+ * ## A ref, never a selector
+ *
+ * The element is named by a ref from a snapshot the calling agent actually
+ * saw. A raw selector would let an agent act on an element it never looked
+ * at, and a ref from a superseded snapshot refuses rather than resolving
+ * against whatever now matches — that is the same mistake, arriving later.
+ */
+/**
+ * ## The trap this tool sets, stated where a reader meets it
+ *
+ * `fill` is faster and more reliable than typing, and for most fields it is
+ * the right verb. It also fires **no key events whatsoever** — the value is
+ * set directly. Any behaviour the page attaches to typing simply does not
+ * happen: autocompletes stay closed, per-character validation never runs, a
+ * debounced search never fires. The field ends up holding the right string
+ * and the page never learns it was touched.
+ *
+ * That is a correct tool producing a wrong answer, so the distinction is in
+ * the schema prose and not only here.
+ */
+import { browserAnswer, emptyEvidence, mutationRefusal, observeAndCorrelate, useSession } from "../browser/tool-support.js";
+import { NO_GRAPH_WRITE } from "../browser/graph-write.js";
+import { UnknownElementRefError } from "../browser/driver.js";
+import { requiredString } from "./kit.js";
+const SCHEMA = {
+    type: "object",
+    properties: {
+        sessionId: {
+            type: "string",
+            description: "REQUIRED. The id returned by browser_start_session.",
+        },
+        ref: {
+            type: "string",
+            description: "REQUIRED. An element ref from a browser_snapshot reply. Refs are issued per snapshot and are " +
+                "invalidated by navigation — a stale ref is refused rather than resolved against whatever now " +
+                "matches it, so take a fresh snapshot after the page changes.",
+        },
+        text: {
+            type: "string",
+            description: "REQUIRED. The value to put in the field, REPLACING whatever is there. Set directly, so the page " +
+                "sees no keydown, keypress or keyup at all — if the field has an autocomplete, per-character " +
+                "validation or a debounced search, none of it will fire. Use browser_type for those.",
+        },
+        confirmToken: {
+            type: "string",
+            description: "Not normally needed. Consent is granted once, for the whole session, by browser_start_session, " +
+                "so this call performs its action directly. The field is declared because the handshake reads it " +
+                "for every action-class tool.",
+        },
+    },
+    required: ["sessionId", "ref", "text"],
+    additionalProperties: false,
+};
+async function run(args, ctx) {
+    const sessionId = requiredString(args, "sessionId");
+    const ref = requiredString(args, "ref");
+    const text = requiredString(args, "text");
+    const found = await useSession(ctx.session.browserSessions(), sessionId);
+    if (!found.ok) {
+        return browserAnswer({
+            ctx,
+            state: found.dead.state,
+            headline: found.dead.headline,
+            notes: found.dead.notes,
+            data: { sessionId, ref, url: "", evidence: found.dead.evidence, graph: NO_GRAPH_WRITE },
+        });
+    }
+    const { entry } = found;
+    // Consent and safetyLevel are independent and both must pass. Consent was
+    // granted at session start; this is the other half.
+    const refused = mutationRefusal(entry);
+    if (refused !== null) {
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `${entry.profile?.name ?? "This environment"} is read-only.`,
+            notes: [refused],
+            data: { sessionId, ref, url: entry.page.currentUrl(), evidence: emptyEvidence(), graph: NO_GRAPH_WRITE },
+        });
+    }
+    try {
+        ctx.progress(`Filling`);
+        await entry.page.fill(ref, text);
+    }
+    catch (error) {
+        if (!(error instanceof UnknownElementRefError))
+            throw error;
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `"${ref}" is not an element in this session's current snapshot.`,
+            notes: [error.message],
+            data: { sessionId, ref, url: entry.page.currentUrl(), evidence: emptyEvidence(), graph: NO_GRAPH_WRITE },
+        });
+    }
+    const observed = await observeAndCorrelate(ctx, entry);
+    return browserAnswer({
+        ctx,
+        headline: `Filling on ${entry.page.currentUrl()}.`,
+        notes: observed.notes,
+        data: { sessionId, ref, url: entry.page.currentUrl(), evidence: observed.evidence, graph: observed.graph },
+    });
+}
+export const browserFillTool = {
+    name: "browser_fill",
+    title: "set a field's value directly",
+    description: "Set a field's value in an open browser session, replacing what is there. Fires no key events at all: " +
+        "the value is set directly, so an autocomplete, per-character validation or debounced search attached " +
+        "to that field will not run. Use browser_type when the page reacts to typing. Refused when the " +
+        "session's environment profile declares safetyLevel \"readOnly\".",
+    class: "action",
+    tier: "evidence",
+    version: "1.0.0",
+    inputSchema: SCHEMA,
+    run,
+    // Undefined, always: the session this runs in was confirmed at
+    // browser_start_session, and a verb that could describe — and therefore
+    // mint — its own consent would be a gate that exists only for callers who
+    // were not going to abuse it.
+    describeAction: () => undefined,
+};
+//# sourceMappingURL=browser-fill.js.map

package/dist/tools/browser-fill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-fill.js","sourceRoot":"","sources":["../../src/tools/browser-fill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC5H,OAAO,EAAE,cAAc,EAA0B,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAyC,MAAM,UAAU,CAAC;AAYjF,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qDAAqD;SACnE;QACD,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,+FAA+F;gBAC/F,+FAA+F;gBAC/F,8DAA8D;SACjE;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,kGAAkG;gBAClG,8FAA8F;gBAC9F,qFAAqF;SACxF;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iGAAiG;gBACjG,kGAAkG;gBAClG,8BAA8B;SACjC;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC;IACtC,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,KAAK,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAgB;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,aAAa,CAAkB;YACpC,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;SACxF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,aAAa,CAAkB;YACpC,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,IAAI,kBAAkB,gBAAgB;YACtE,KAAK,EAAE,CAAC,OAAO,CAAC;YAChB,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;SACzG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC5D,OAAO,aAAa,CAAkB;YACpC,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,IAAI,GAAG,yDAAyD;YAC1E,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;YACtB,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;SACzG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvD,OAAO,aAAa,CAAkB;QACpC,GAAG;QACH,QAAQ,EAAE,cAAc,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG;QAClD,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;KAC3G,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,uGAAuG;QAClH,uGAAuG;QACvG,gGAAgG;QAChG,kEAAkE;IACpE,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,MAAM;IACnB,GAAG;IACH,+DAA+D;IAC/D,wEAAwE;IACxE,0EAA0E;IAC1E,8BAA8B;IAC9B,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;CAChC,CAAC"}

package/dist/tools/browser-navigate.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `browser_navigate` — move an open session to another page.
+ *
+ * ## The one rule that is not obvious
+ *
+ * Navigation is where a session-scoped consent could quietly become a
+ * general-purpose browser. The grant names an origin; this tool is the only
+ * thing that can leave it, so this is where the bound is enforced. A
+ * cross-origin navigate **refuses** — it does not ask again, because a second
+ * prompt at this point is exactly the reflexive confirmation the consent
+ * ruling rejected.
+ *
+ * ## Class
+ *
+ * `stateful-read`. It changes what a later call sees, so it is not a pure
+ * read; but the fact a developer approves — *drive a browser against this
+ * application* — was stated and confirmed at `browser_start_session`, and
+ * re-gating each hop would make the session grant meaningless.
+ */
+import { type ToolDefinition } from "./kit.ts";
+import type { BrowserPageData } from "./browser-snapshot.ts";
+/**
+ * Deliberately the same shape `browser_snapshot` returns.
+ *
+ * A navigate answers the question a snapshot answers — *what is on the page
+ * now* — so returning a different shape would make a caller write two readers
+ * for one fact. It is an alias rather than a re-declaration so the two cannot
+ * drift.
+ */
+export type BrowserNavigateData = BrowserPageData;
+export declare const browserNavigateTool: ToolDefinition;
+//# sourceMappingURL=browser-navigate.d.ts.map

package/dist/tools/browser-navigate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-navigate.d.ts","sourceRoot":"","sources":["../../src/tools/browser-navigate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAAoC,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAEjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,eAAe,CAAC;AA8ElD,eAAO,MAAM,mBAAmB,EAAE,cAYjC,CAAC"}

package/dist/tools/browser-navigate.js

@@ -0,0 +1,103 @@
+/**
+ * `browser_navigate` — move an open session to another page.
+ *
+ * ## The one rule that is not obvious
+ *
+ * Navigation is where a session-scoped consent could quietly become a
+ * general-purpose browser. The grant names an origin; this tool is the only
+ * thing that can leave it, so this is where the bound is enforced. A
+ * cross-origin navigate **refuses** — it does not ask again, because a second
+ * prompt at this point is exactly the reflexive confirmation the consent
+ * ruling rejected.
+ *
+ * ## Class
+ *
+ * `stateful-read`. It changes what a later call sees, so it is not a pure
+ * read; but the fact a developer approves — *drive a browser against this
+ * application* — was stated and confirmed at `browser_start_session`, and
+ * re-gating each hop would make the session grant meaningless.
+ */
+import { browserAnswer, emptyEvidence, observeAndCorrelate, useSession, withinConsent } from "../browser/tool-support.js";
+import { NO_GRAPH_WRITE } from "../browser/graph-write.js";
+import { requiredString } from "./kit.js";
+const SCHEMA = {
+    type: "object",
+    properties: {
+        sessionId: {
+            type: "string",
+            description: "REQUIRED. The id returned by browser_start_session. Sessions belong to this connection and do not survive a reconnect.",
+        },
+        url: {
+            type: "string",
+            description: "REQUIRED. Where to navigate. Must be on the same origin the session was started against — a URL " +
+                "on any other origin is refused rather than confirmed again, because consent was granted for one " +
+                "application, not for the browser generally.",
+        },
+    },
+    required: ["sessionId", "url"],
+    additionalProperties: false,
+};
+function blank(url, evidence) {
+    return { sessionId: "", url, title: "", elements: [], totalElements: 0, evidence, graph: NO_GRAPH_WRITE };
+}
+async function run(args, ctx) {
+    const sessionId = requiredString(args, "sessionId");
+    const url = requiredString(args, "url");
+    const found = await useSession(ctx.session.browserSessions(), sessionId);
+    if (!found.ok) {
+        return browserAnswer({
+            ctx,
+            state: found.dead.state,
+            headline: found.dead.headline,
+            notes: found.dead.notes,
+            data: blank(url, found.dead.evidence),
+        });
+    }
+    const { entry } = found;
+    if (!withinConsent(entry, url)) {
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `${url} is outside this session's consented origin.`,
+            notes: [
+                `This session was started against ${entry.consentedOrigin} and consent is bound to that origin. ` +
+                    `Navigating to ${url} would take the browser somewhere the developer did not approve, so it is ` +
+                    "refused rather than confirmed again — asking a second time here is how a gate becomes a habit. " +
+                    "Start a new session if you genuinely mean to drive that origin.",
+            ],
+            data: blank(url, emptyEvidence()),
+        });
+    }
+    ctx.progress(`Navigating to ${url}`);
+    await entry.page.navigate(url);
+    const snapshot = await entry.page.snapshot();
+    const observed = await observeAndCorrelate(ctx, entry);
+    const evidence = observed.evidence;
+    return browserAnswer({
+        ctx,
+        headline: `${snapshot.url} — ${snapshot.title || "untitled"} (${snapshot.totalElements} elements).`,
+        notes: observed.notes,
+        data: {
+            sessionId: entry.sessionId,
+            url: snapshot.url,
+            title: snapshot.title,
+            elements: snapshot.elements,
+            totalElements: snapshot.totalElements,
+            evidence,
+            graph: observed.graph,
+        },
+    });
+}
+export const browserNavigateTool = {
+    name: "browser_navigate",
+    title: "Navigate an open browser session",
+    description: "Move an open browser session to another page on the same application, and return what is there plus " +
+        "anything the page produced on the way — console errors and failed requests, raw and untriaged. " +
+        "Refuses to leave the origin the session was started against.",
+    class: "stateful-read",
+    tier: "evidence",
+    version: "1.0.0",
+    inputSchema: SCHEMA,
+    run,
+};
+//# sourceMappingURL=browser-navigate.js.map

package/dist/tools/browser-navigate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-navigate.js","sourceRoot":"","sources":["../../src/tools/browser-navigate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC1H,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAyC,MAAM,UAAU,CAAC;AAcjF,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,wHAAwH;SACtI;QACD,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,kGAAkG;gBAClG,kGAAkG;gBAClG,6CAA6C;SAChD;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC;IAC9B,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,SAAS,KAAK,CAAC,GAAW,EAAE,QAA+B;IACzD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AAC5G,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAgB;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,aAAa,CAAsB;YACxC,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAsB;YACxC,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG,GAAG,8CAA8C;YAC9D,KAAK,EAAE;gBACL,oCAAoC,KAAK,CAAC,eAAe,wCAAwC;oBAC/F,iBAAiB,GAAG,4EAA4E;oBAChG,iGAAiG;oBACjG,iEAAiE;aACpE;YACD,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,QAAQ,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IACrC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEnC,OAAO,aAAa,CAAsB;QACxC,GAAG;QACH,QAAQ,EAAE,GAAG,QAAQ,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,UAAU,KAAK,QAAQ,CAAC,aAAa,aAAa;QACnG,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,QAAQ;YACR,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,kCAAkC;IACzC,WAAW,EACT,sGAAsG;QACtG,iGAAiG;QACjG,8DAA8D;IAChE,KAAK,EAAE,eAAe;IACtB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,MAAM;IACnB,GAAG;CACJ,CAAC"}

package/dist/tools/browser-run-scenario.d.ts

@@ -0,0 +1,54 @@
+/**
+ * `browser_run_scenario` — replay a saved scenario in one batch call.
+ *
+ * ## One reply, not N
+ *
+ * The point of this tool over "call browser_click six times" is that a
+ * scenario is a *check*, and a check has one outcome. Six replies make the
+ * calling agent reassemble a verdict from fragments and give it six chances to
+ * stop early with a partial picture; one reply carries the whole run — every
+ * step, every assertion, and one aggregated evidence summary drained a step at
+ * a time.
+ *
+ * ## Class
+ *
+ * `action`, on the same test as `browser_click`: it changes a running
+ * application, and declaring it anything softer would be the lie. Like the
+ * verbs, it mints nothing — consent was granted once at
+ * `browser_start_session` and bound to that origin, and a scenario cannot
+ * widen it: a stored `navigate` step that would leave the consented origin
+ * stops the replay rather than following the file.
+ *
+ * ## What it will not do
+ *
+ * Report a verdict about the application beyond what the scenario's own author
+ * wrote down. `DEC-381` keeps classification
+ * in the desktop pipeline, so a console error observed during a replay is
+ * reported and is not blocking — while a console error the author *asserted*
+ * would not happen is a failed assertion and is. Same evidence, different
+ * status, and the difference is entirely whether a person claimed something
+ * about it.
+ */
+import { type BrowserGraphWrite } from "../browser/graph-write.ts";
+import { type ScenarioAssertionResult, type ScenarioCounts, type ScenarioStepResult } from "../browser/scenario-runner.ts";
+import type { BrowserEvidenceReport } from "../browser/evidence.ts";
+import { type ToolDefinition } from "./kit.ts";
+export interface BrowserRunScenarioData {
+    readonly sessionId: string;
+    readonly scenario: string;
+    /** `passed` · `failed` · `unresolved` · `unverified` — never `passed` for a scenario that asserted nothing. */
+    readonly outcome: "passed" | "failed" | "unresolved" | "unverified" | "notRun";
+    /** Three counts that are never summed, plus how many assertions held. */
+    readonly counts: ScenarioCounts;
+    /** Failed assertions alone. An unresolvable step is not a defect claim, so it does not join this. */
+    readonly blockingTotal: number;
+    /** 0 clean · 1 blocking findings · 2 the check could not run. `descry check`'s existing vocabulary. */
+    readonly exitCode: 0 | 1 | 2;
+    readonly steps: readonly ScenarioStepResult[];
+    readonly assertions: readonly ScenarioAssertionResult[];
+    /** One summary for the whole batch, drained a step at a time. */
+    readonly evidence: BrowserEvidenceReport;
+    readonly graph: BrowserGraphWrite;
+}
+export declare const browserRunScenarioTool: ToolDefinition;
+//# sourceMappingURL=browser-run-scenario.d.ts.map

package/dist/tools/browser-run-scenario.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-run-scenario.d.ts","sourceRoot":"","sources":["../../src/tools/browser-run-scenario.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAA2B,KAAK,uBAAuB,EAAE,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEpJ,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAoC,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAGjF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+GAA+G;IAC/G,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC/E,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,qGAAqG;IACrG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uGAAuG;IACvG,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxD,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AA2LD,eAAO,MAAM,sBAAsB,EAAE,cAoBpC,CAAC"}

package/dist/tools/browser-run-scenario.js

@@ -0,0 +1,228 @@
+/**
+ * `browser_run_scenario` — replay a saved scenario in one batch call.
+ *
+ * ## One reply, not N
+ *
+ * The point of this tool over "call browser_click six times" is that a
+ * scenario is a *check*, and a check has one outcome. Six replies make the
+ * calling agent reassemble a verdict from fragments and give it six chances to
+ * stop early with a partial picture; one reply carries the whole run — every
+ * step, every assertion, and one aggregated evidence summary drained a step at
+ * a time.
+ *
+ * ## Class
+ *
+ * `action`, on the same test as `browser_click`: it changes a running
+ * application, and declaring it anything softer would be the lie. Like the
+ * verbs, it mints nothing — consent was granted once at
+ * `browser_start_session` and bound to that origin, and a scenario cannot
+ * widen it: a stored `navigate` step that would leave the consented origin
+ * stops the replay rather than following the file.
+ *
+ * ## What it will not do
+ *
+ * Report a verdict about the application beyond what the scenario's own author
+ * wrote down. `DEC-381` keeps classification
+ * in the desktop pipeline, so a console error observed during a replay is
+ * reported and is not blocking — while a console error the author *asserted*
+ * would not happen is a failed assertion and is. Same evidence, different
+ * status, and the difference is entirely whether a person claimed something
+ * about it.
+ */
+import { readScenario } from "../scenarios/index.js";
+import { browserAnswer, emptyEvidence, mutationRefusal, useSession, withinConsent } from "../browser/tool-support.js";
+import { NO_GRAPH_WRITE } from "../browser/graph-write.js";
+import { mutates, replayScenario } from "../browser/scenario-runner.js";
+import { scenarioPath } from "../scenarios/index.js";
+import { requiredString } from "./kit.js";
+const SCHEMA = {
+    type: "object",
+    properties: {
+        sessionId: {
+            type: "string",
+            description: "REQUIRED. The id returned by browser_start_session. The replay runs in that session, under the consent it was granted.",
+        },
+        name: {
+            type: "string",
+            description: "REQUIRED. The scenario's name, without the file extension — a scenario saved as " +
+                "descry/scenarios/checkout.scenario.json is named \"checkout\". Saved scenarios are committed files; " +
+                "browser_save_scenario writes them.",
+        },
+        confirmToken: {
+            type: "string",
+            description: "Not normally needed. Consent is granted once, for the whole session, by browser_start_session, so " +
+                "this call replays directly. The field is declared because the handshake reads it for every " +
+                "action-class tool.",
+        },
+    },
+    required: ["sessionId", "name"],
+    additionalProperties: false,
+};
+function empty(sessionId, name) {
+    return {
+        sessionId,
+        scenario: name,
+        outcome: "notRun",
+        counts: { passed: 0, failed: 0, unresolved: 0, unverified: 0 },
+        blockingTotal: 0,
+        // 2 rather than 0: this is "the check could not run", and a refusal that
+        // reported clean would let a scenario nobody could replay keep claiming
+        // coverage.
+        exitCode: 2,
+        steps: [],
+        assertions: [],
+        evidence: emptyEvidence(),
+        graph: NO_GRAPH_WRITE,
+    };
+}
+async function run(args, ctx) {
+    const sessionId = requiredString(args, "sessionId");
+    const name = requiredString(args, "name");
+    const stored = await readScenario(ctx.session.repoPath, name);
+    if (!stored.valid) {
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `Scenario "${name}" cannot be replayed.`,
+            notes: [
+                ...stored.problems,
+                `Scenarios live in ${scenarioPath(ctx.session.repoPath, name)} and are committed like source. ` +
+                    "browser_save_scenario writes one from a session you have explored.",
+            ],
+            data: empty(sessionId, name),
+        });
+    }
+    const scenario = stored.scenario;
+    const found = await useSession(ctx.session.browserSessions(), sessionId);
+    if (!found.ok) {
+        return browserAnswer({
+            ctx,
+            state: found.dead.state,
+            headline: found.dead.headline,
+            notes: found.dead.notes,
+            data: { ...empty(sessionId, name), evidence: found.dead.evidence },
+        });
+    }
+    const { entry } = found;
+    // Consent is bound to one origin and a stored file cannot widen it. Checked
+    // before anything runs, because a replay that got three steps in and then
+    // refused would have already changed the application.
+    if (!withinConsent(entry, scenario.targetUrl)) {
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `Scenario "${name}" targets another origin.`,
+            notes: [
+                `It opens ${scenario.targetUrl}, and this session's consent covers ${entry.consentedOrigin} only. ` +
+                    "Consent is granted per session and bound to the origin it was granted for, so a saved file cannot " +
+                    "extend it. Start a session against that origin to replay this scenario.",
+            ],
+            data: empty(sessionId, name),
+        });
+    }
+    const refusedForSafety = mutationRefusal(entry);
+    if (refusedForSafety !== null && mutates(scenario)) {
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `${entry.profile?.name ?? "This environment"} is read-only.`,
+            notes: [
+                refusedForSafety,
+                `Scenario "${name}" clicks, types or fills, so replaying it would change the application. A ` +
+                    "navigate-only scenario would still run here.",
+            ],
+            data: empty(sessionId, name),
+        });
+    }
+    // Start where the scenario says it starts, rather than wherever the session
+    // happened to be left. A replay that began from an arbitrary page is not a
+    // repeat of the run that was saved.
+    if (entry.page.currentUrl() !== scenario.targetUrl) {
+        await entry.page.navigate(scenario.targetUrl);
+    }
+    const replay = await replayScenario(ctx, ctx.session.browserSessions(), sessionId, scenario);
+    const notes = [
+        ...(replay.sessionEnded === null ? [] : replay.sessionEnded.notes),
+        ...replay.notes,
+        ...outcomeNotes(replay.outcome, replay.counts, name),
+        ...replay.steps.filter((s) => s.resolution !== null).map((s) => s.resolution.message),
+        ...replay.assertions.filter((a) => a.status === "failed" || a.status === "unevaluable").map((a) => a.detail),
+    ];
+    return browserAnswer({
+        ctx,
+        ...(replay.sessionEnded === null ? {} : { state: replay.sessionEnded.state }),
+        headline: `Scenario "${name}": ${replay.outcome} — ${replay.counts.passed} assertion(s) held, ` +
+            `${replay.counts.failed} failed, ${replay.counts.unresolved} could not run.`,
+        notes,
+        data: {
+            sessionId,
+            scenario: name,
+            outcome: replay.outcome,
+            counts: replay.counts,
+            blockingTotal: replay.blockingTotal,
+            exitCode: replay.exitCode,
+            steps: replay.steps,
+            assertions: replay.assertions,
+            evidence: replay.evidence,
+            graph: replay.graph,
+        },
+    });
+}
+/**
+ * The disclosure the three counts exist for.
+ *
+ * Emitted per outcome rather than always, because a note that appears on every
+ * reply is a note nobody reads by the third one — the same reasoning
+ * `evidenceNotes` uses for the triage disclaimer.
+ */
+function outcomeNotes(outcome, counts, name) {
+    switch (outcome) {
+        case "unverified":
+            return [
+                `Scenario "${name}" stores no assertions, so this replay verified nothing. Its steps still resolved ` +
+                    "and still ran — real information — but that is not the same statement as the application behaving, " +
+                    "and it is deliberately never reported as passed.",
+            ];
+        case "unresolved":
+            return [
+                `${counts.unresolved} step or assertion could not run, so this replay neither passed nor failed. ` +
+                    "Descry cannot tell a deliberate rename from a vanished element — both look identical from here — " +
+                    "so it claims neither. The remedy is in the message below: re-save the step if the change was " +
+                    "intended, or fix the application if it was not.",
+            ];
+        case "failed":
+            return [
+                `${counts.failed} assertion(s) the scenario's author wrote down did not hold. Only those count as ` +
+                    "blocking; console errors and failed requests observed during the replay are reported below and are " +
+                    "not, because they are frequently true of a working page." +
+                    (counts.unresolved > 0
+                        ? ` ${counts.unresolved} check(s) also could not run, counted separately and never added to the ` +
+                            "blocking total."
+                        : ""),
+            ];
+        case "passed":
+        case "notRun":
+            return [];
+    }
+}
+export const browserRunScenarioTool = {
+    name: "browser_run_scenario",
+    title: "Replay a saved scenario",
+    description: "Replay a saved scenario — a named step sequence with the assertions its author wrote down — in one " +
+        "call, and return a single evidence summary rather than one reply per step. Each step re-resolves its " +
+        "element against a fresh page: exactly one match or the replay stops and says which of role, name and " +
+        "selector disagreed and what the page holds now. Reports three counts that are never added together — " +
+        "failed assertions, checks that could not run, and whether the scenario asserted anything at all. A " +
+        "scenario with no assertions replays as unverified, never as passed.",
+    class: "action",
+    tier: "evidence",
+    version: "1.0.0",
+    inputSchema: SCHEMA,
+    run,
+    // Undefined, always — the same property the verbs have. The session was
+    // confirmed at browser_start_session; a replay that could mint its own
+    // consent would be a gate that exists only for callers who were not going
+    // to abuse it.
+    describeAction: () => undefined,
+};
+//# sourceMappingURL=browser-run-scenario.js.map

package/dist/tools/browser-run-scenario.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-run-scenario.js","sourceRoot":"","sources":["../../src/tools/browser-run-scenario.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACtH,OAAO,EAAE,cAAc,EAA0B,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,cAAc,EAA8E,MAAM,+BAA+B,CAAC;AACpJ,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAyC,MAAM,UAAU,CAAC;AAqBjF,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,wHAAwH;SACtI;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,kFAAkF;gBAClF,sGAAsG;gBACtG,oCAAoC;SACvC;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,oGAAoG;gBACpG,6FAA6F;gBAC7F,oBAAoB;SACvB;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,SAAS,KAAK,CAAC,SAAiB,EAAE,IAAY;IAC5C,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;QAC9D,aAAa,EAAE,CAAC;QAChB,yEAAyE;QACzE,wEAAwE;QACxE,YAAY;QACZ,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,aAAa,EAAE;QACzB,KAAK,EAAE,cAAc;KACtB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAgB;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,aAAa,CAAyB;YAC3C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,aAAa,IAAI,uBAAuB;YAClD,KAAK,EAAE;gBACL,GAAG,MAAM,CAAC,QAAQ;gBAClB,qBAAqB,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,kCAAkC;oBAC7F,oEAAoE;aACvE;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAEjC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,aAAa,CAAyB;YAC3C,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO,aAAa,CAAyB;YAC3C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,aAAa,IAAI,2BAA2B;YACtD,KAAK,EAAE;gBACL,YAAY,QAAQ,CAAC,SAAS,uCAAuC,KAAK,CAAC,eAAe,SAAS;oBACjG,oGAAoG;oBACpG,yEAAyE;aAC5E;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,gBAAgB,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,aAAa,CAAyB;YAC3C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,IAAI,kBAAkB,gBAAgB;YACtE,KAAK,EAAE;gBACL,gBAAgB;gBAChB,aAAa,IAAI,4EAA4E;oBAC3F,8CAA8C;aACjD;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,oCAAoC;IACpC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnD,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE7F,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;QAClE,GAAG,MAAM,CAAC,KAAK;QACf,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QACpD,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAW,CAAC,OAAO,CAAC;QACtF,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;KAC7G,CAAC;IAEF,OAAO,aAAa,CAAyB;QAC3C,GAAG;QACH,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7E,QAAQ,EACN,aAAa,IAAI,MAAM,MAAM,CAAC,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,sBAAsB;YACrF,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,CAAC,UAAU,iBAAiB;QAC9E,KAAK;QACL,IAAI,EAAE;YACJ,SAAS;YACT,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,OAA0C,EAAE,MAAsB,EAAE,IAAY;IACpG,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY;YACf,OAAO;gBACL,aAAa,IAAI,oFAAoF;oBACnG,qGAAqG;oBACrG,kDAAkD;aACrD,CAAC;QACJ,KAAK,YAAY;YACf,OAAO;gBACL,GAAG,MAAM,CAAC,UAAU,8EAA8E;oBAChG,mGAAmG;oBACnG,+FAA+F;oBAC/F,iDAAiD;aACpD,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,MAAM,CAAC,MAAM,mFAAmF;oBACjG,qGAAqG;oBACrG,0DAA0D;oBAC1D,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC;wBACpB,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,0EAA0E;4BAC/F,iBAAiB;wBACnB,CAAC,CAAC,EAAE,CAAC;aACV,CAAC;QACJ,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAmB;IACpD,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,qGAAqG;QACrG,uGAAuG;QACvG,uGAAuG;QACvG,uGAAuG;QACvG,qGAAqG;QACrG,qEAAqE;IACvE,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,MAAM;IACnB,GAAG;IACH,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,eAAe;IACf,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;CAChC,CAAC"}

package/dist/tools/browser-save-scenario.d.ts

@@ -0,0 +1,44 @@
+/**
+ * `browser_save_scenario` — an explored session becomes a durable, repeatable
+ * scenario.
+ *
+ * ## Everything goes out through `writeScenario`
+ *
+ * There is deliberately no private path to disk here. `writeScenario`
+ * validates on the way *out* as well as in, and that is not redundant: a
+ * scenario is written once and read on every push afterwards, so a fault saved
+ * today surfaces during a check somebody is waiting on, long after the session
+ * that could have explained it is gone. A tool that serialized its own JSON
+ * would be a second writer with a first writer's rules, and the second one is
+ * the one that ships a file nothing can read.
+ *
+ * ## A step carries no ref, and this schema offers no way to send one
+ *
+ * The ref refusal is enforced twice on purpose. The format module rejects a
+ * step carrying a `ref` **by name**, with the reason in the message; this
+ * schema does not declare the field at all. A caller working from a
+ * `browser_snapshot` reply has the three durable fields already — every
+ * snapshot element carries `role`, `name` and `selector` — so the natural
+ * thing to copy is the right thing to store.
+ *
+ * ## What the session supplies
+ *
+ * The consented origin (a scenario may not be saved pointing somewhere this
+ * session was never allowed to drive), the URL to start from, and the
+ * provenance pair. The steps are the caller's: this server has no exploration
+ * planner and does not pretend to have recorded intent it never saw.
+ */
+import { type ToolDefinition } from "./kit.ts";
+export interface BrowserSaveScenarioData {
+    readonly sessionId: string;
+    readonly name: string;
+    /** Where it was written, or "" when nothing was written. */
+    readonly path: string;
+    readonly targetUrl: string;
+    readonly stepCount: number;
+    readonly assertionCount: number;
+    readonly savedAt: string;
+    readonly savedAtCommit: string;
+}
+export declare const browserSaveScenarioTool: ToolDefinition;
+//# sourceMappingURL=browser-save-scenario.d.ts.map

package/dist/tools/browser-save-scenario.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-save-scenario.d.ts","sourceRoot":"","sources":["../../src/tools/browser-save-scenario.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,OAAO,EAAoE,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAGjH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AA2QD,eAAO,MAAM,uBAAuB,EAAE,cAoBrC,CAAC"}