@descryy/mcp 0.11.3 → 0.11.5

package/dist/browser/reachability.js

@@ -1,294 +0,0 @@
-/**
- * What a browser session actually reached, and what it did not. §4.1.
- *
- * ## The claim this module exists to make possible
- *
- * *"I reached 40% of your application, and here is the 60% I could not."*
- *
- * Everything else here serves that sentence. The browser path already reports
- * what it saw; what it has never reported is what it **missed**, and a testing
- * agent that cannot say that is not merely incomplete — it is misleading,
- * because "no failures found" and "nothing was driven" render identically.
- * `fixtures/hostile-apps/` app 11 reproduces exactly that: a CAPTCHA screen
- * reports two interactive elements and no failures, which is true and useless.
- *
- * ## Coverage is not one of the five report categories
- *
- * Rule 6 is explicit: untested scope is a **separate axis**, reported as
- * verification status, not folded into confirmed/strongly-supported/
- * unconfirmed/not-analysable/unsupported. This module is on that separate axis.
- * So every rendering of it says, in words, that it is not a verdict — and the
- * tests assert that it still says so at 100% reach, which is the one case where
- * a reader is most likely to hear "all clear".
- *
- * ## Why counting is per screen and not per snapshot
- *
- * Two snapshots of one screen are not twice the coverage, and a reply that was
- * trimmed to fit a budget is not a screen that shrank. So screens are keyed by
- * URL and the largest observation of each wins. The alternative — summing
- * snapshots — would let an agent inflate its own coverage by asking twice.
- *
- * Rule 1: nothing here names a language or a framework.
- */
-import { evidenceInWindow, refineAttribution, assertEveryFailureAttributed, } from "./fault-attribution.js";
-/** Roles the port has a verb for. Anything else is enumerated and undrivable —
- *  §1.3, and a fact about the port rather than about the page.
- *
- *  `combobox` is here because the port grew `select`. It has to be added in the
- *  same change as the verb or the gap stays reported after it is closed, which
- *  is worse than either state on its own: a caller reading "no verb for this
- *  role" would go and build the verb that already exists. The hostile corpus's
- *  harness carries the same list and moves with this one. */
-const ROLES_WITH_A_VERB = new Set(["button", "link", "textbox", "searchbox", "combobox"]);
-/**
- * The risk kinds that mean **a region with controls in it was not entered at
- * all** — as opposed to reached with something lost on the way.
- *
- * The line is drawn by what a caller would do about it, not by severity. A
- * shadow root is reached and unsaveable; a same-origin frame is entered and
- * enumerated (`fixtures/hostile-apps/` app 05 measured both of its targets
- * driven); a tall document is unvisited until someone asks for a reveal pass.
- * None of those is a region nobody got into, so none of them is a gate.
- *
- * What is: a challenge and a sign-in, which put the whole application on the
- * far side; a cross-origin frame, which this session's consent does not cover;
- * an overlay or an inert subtree, under which every control is enumerable,
- * counted and impossible to operate; a canvas, whose controls have no elements
- * to enumerate at all; and a windowed region, which no single snapshot can ever
- * hold all of.
- *
- * Promoting them here rather than at each call site is deliberate: a disclosure
- * that depends on a caller remembering to file it is a disclosure that goes
- * missing on the path nobody tested.
- */
-const GATING_RISKS = new Set([
-    "challenge",
-    "authWall",
-    "crossOriginFrame",
-    "overlay",
-    "inertSubtree",
-    "canvasRendered",
-    "virtualizedRegion",
-]);
-export function createReachabilityTracker() {
-    const screens = new Map();
-    const actions = [];
-    const gates = [];
-    const skipped = [];
-    let estimate = null;
-    return {
-        recordScreen(snapshot) {
-            let actionable = 0;
-            let savable = 0;
-            let noVerb = 0;
-            for (const el of snapshot.elements) {
-                if (ROLES_WITH_A_VERB.has(el.role.trim().toLowerCase()))
-                    actionable += 1;
-                else
-                    noVerb += 1;
-                if (el.selector !== null)
-                    savable += 1;
-            }
-            // `totalElements`, never `elements.length`: a budget-trimmed reply is a
-            // shorter list, not a smaller page, and coverage measured off the list
-            // would improve every time a reply got tighter.
-            const unlisted = Math.max(0, snapshot.totalElements - snapshot.elements.length);
-            const next = {
-                seen: snapshot.totalElements,
-                actionable,
-                savable,
-                // Elements that did not fit in the reply were never classified. They
-                // are counted as seen and as having no known verb, because claiming
-                // them as actionable would be claiming something nothing looked at.
-                noVerb: noVerb + unlisted,
-            };
-            const existing = screens.get(snapshot.url);
-            if (existing === undefined || next.seen > existing.seen)
-                screens.set(snapshot.url, next);
-        },
-        recordEstimate(next) {
-            estimate = next;
-        },
-        recordAction(action) {
-            actions.push(action);
-        },
-        recordGate(gate) {
-            if (gate.reason.trim() === "") {
-                throw new Error("A gated region must carry a reason. A region recorded as unreachable with no reason is the silence " +
-                    "reachability reporting exists to remove.");
-            }
-            gates.push(gate);
-        },
-        recordSkip(item) {
-            skipped.push(item);
-        },
-        refineFailures(drained, applicationOrigin) {
-            for (let index = 0; index < actions.length; index += 1) {
-                const action = actions[index];
-                if (action.succeeded)
-                    continue;
-                // Only `undetermined` is open to revision — see `refineAttribution`.
-                // Checked here as well as there so a failure that already has a domain
-                // costs nothing to walk past on every later drain.
-                if (action.attribution.owner !== "undetermined")
-                    continue;
-                if (action.failure === undefined || action.window === undefined)
-                    continue;
-                const later = evidenceInWindow(drained, action.window, applicationOrigin);
-                if (later.pageErrors === 0 && later.failedRequests === 0)
-                    continue;
-                actions[index] = { ...action, attribution: refineAttribution(action.attribution, action.failure, later) };
-            }
-        },
-        report() {
-            const perScreen = [...screens.entries()].map(([url, acc]) => ({
-                url,
-                elementsSeen: acc.seen,
-                elementsActionable: acc.actionable,
-                elementsSavable: acc.savable,
-            }));
-            const elementsSeen = perScreen.reduce((sum, s) => sum + s.elementsSeen, 0);
-            const elementsActionable = perScreen.reduce((sum, s) => sum + s.elementsActionable, 0);
-            const elementsSavable = perScreen.reduce((sum, s) => sum + s.elementsSavable, 0);
-            const noVerb = [...screens.values()].reduce((sum, s) => sum + s.noVerb, 0);
-            const blocked = noVerb === 0
-                ? []
-                : [
-                    {
-                        reason: "noVerbForRole",
-                        count: noVerb,
-                        detail: "Enumerated on the page, but Descry has no verb for their role, so they were listed and never " +
-                            "operated. This is a gap in Descry's browser port, not something wrong with the page.",
-                    },
-                ];
-            // A risk named before the run that nothing later contradicted is still a
-            // region nobody reached. Promoting it to a gate here means the disclosure
-            // does not depend on some caller remembering to file it.
-            const gatedFromEstimate = estimate === null
-                ? []
-                : estimate.risks
-                    .filter((risk) => GATING_RISKS.has(risk.kind))
-                    .map((risk) => ({ region: risk.detail, reason: risk.effect, kind: risk.kind }));
-            const gated = [...gatedFromEstimate, ...gates];
-            // RG-12(c): every failed action in `actions` is, by the type above,
-            // already carrying a real attribution — nothing to filter, nothing
-            // that can silently fall out of the report unseen. Asserted, not just
-            // typed: a cast or a future widening of the type could still produce
-            // one from outside this module, and this is the belt for that.
-            assertEveryFailureAttributed(actions);
-            const failures = actions
-                .filter((a) => !a.succeeded)
-                .map((a) => ({ verb: a.verb, ref: a.ref, attribution: a.attribution }));
-            const wall = wallFor(estimate, perScreen.length);
-            return {
-                screens: perScreen,
-                elementsSeen,
-                elementsActionable,
-                elementsSavable,
-                blocked,
-                actionsAttempted: actions.length,
-                actionsSucceeded: actions.filter((a) => a.succeeded).length,
-                failures,
-                gated,
-                skipped,
-                estimate,
-                wall,
-                statement: statementFor(wall, perScreen.length, elementsSeen, elementsActionable, gated.length, skipped.length),
-            };
-        },
-    };
-}
-/**
- * Is the session behind a wall, and which one?
- *
- * A challenge is unconditional. Descry does not pass one, so however many
- * screens a session went on to see, it did not legitimately get past that.
- *
- * A sign-in is conditional on the session having stayed on one screen. The
- * evidence for the wall is a password field on the probed screen, and a session
- * that went on to read a second screen demonstrably moved — claiming it never
- * got in would be a false statement made from a true observation, which is the
- * precise failure rule 2 exists to prevent. It keeps its gated region either
- * way.
- *
- * An overlay is deliberately **not** a wall. The application underneath one is
- * present and enumerated, and one dismissal reaches it; "this session did not
- * reach the application" would overstate what a fixed banner proves. The gated
- * region carries it instead.
- */
-function wallFor(estimate, screens) {
-    if (estimate === null)
-        return null;
-    const challenge = estimate.risks.find((risk) => risk.kind === "challenge");
-    if (challenge !== undefined) {
-        return {
-            kind: "challenge",
-            detail: challenge.detail,
-            reason: "Descry does not attempt to pass a human-verification challenge, by design. Everything behind it is not " +
-                "analysable, which is a different statement from finding nothing wrong with it.",
-        };
-    }
-    const auth = estimate.risks.find((risk) => risk.kind === "authWall");
-    if (auth !== undefined && screens <= 1) {
-        return {
-            kind: "authWall",
-            detail: auth.detail,
-            reason: "The only screen this session saw is the logged-out surface. Nothing behind the sign-in was seen, so " +
-                "nothing behind it was tested. Seed an authenticated session — browser_start_session takes a " +
-                "storageState or a storageStatePath — to drive the application itself.",
-        };
-    }
-    return null;
-}
-/** The wall's own sentence. Written out per kind rather than assembled, because
- *  this is the one sentence in the reply that must not read as boilerplate. */
-function wallStatement(wall, seen, screenNoun) {
-    const counted = seen === 0
-        ? ""
-        : ` The ${seen} interactive element${seen === 1 ? "" : "s"} counted below are the ${screenNoun}'s own, not the application's.`;
-    return `This session did not reach the application: ${wall.reason}${counted}`;
-}
-function statementFor(wall, screens, seen, actionable, gates, skips) {
-    if (wall !== null) {
-        return wallStatement(wall, seen, wall.kind === "challenge" ? "challenge screen" : "sign-in screen");
-    }
-    if (screens === 0) {
-        return ("This session read no screen, so it reached none of the application. That is a statement about coverage " +
-            "and not about the application.");
-    }
-    const plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
-    const tail = [];
-    if (gates > 0)
-        tail.push(`${plural(gates, "region")} could not be entered at all`);
-    if (skips > 0)
-        tail.push(`${plural(skips, "thing")} was deliberately skipped`);
-    const suffix = tail.length === 0 ? "" : `, and ${tail.join(", ")}`;
-    return `Reached ${actionable} of ${seen} interactive elements across ${plural(screens, "screen")}${suffix}.`;
-}
-/** The disclosure lines. Every one of them is on the coverage axis, and the
- *  last one says so explicitly at every level of reach — including total. */
-export function reachabilityNotes(report) {
-    const notes = [report.statement];
-    for (const blocked of report.blocked) {
-        notes.push(`${blocked.count} element${blocked.count === 1 ? " was" : "s were"} seen but not usable. ${blocked.detail}`);
-    }
-    const unsavable = report.elementsSeen - report.elementsSavable;
-    if (unsavable > 0) {
-        notes.push(`${unsavable} of the ${report.elementsSeen} elements seen have no stable selector. They can be driven in this ` +
-            "session and can never be saved to a scenario, so a flow through them cannot be replayed.");
-    }
-    for (const gate of report.gated) {
-        notes.push(`Not reached — ${gate.region}: ${gate.reason}`);
-    }
-    for (const skip of report.skipped) {
-        notes.push(`Skipped — ${skip.what}: ${skip.why}`);
-    }
-    for (const failure of report.failures) {
-        notes.push(`A ${failure.verb} failed${failure.ref === null ? "" : ` on ${failure.ref}`}. Fault: ${failure.attribution.owner}. ` +
-            `${failure.attribution.reason} ${failure.attribution.evidence}`);
-    }
-    notes.push("Reachability is coverage, not a verdict — it is a separate axis from the five report categories. Nothing here " +
-        "says the parts that were reached are correct, and nothing here says the parts that were not are broken.");
-    return notes;
-}
-//# sourceMappingURL=reachability.js.map

package/dist/browser/reachability.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reachability.js","sourceRoot":"","sources":["../../src/browser/reachability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,GAI7B,MAAM,wBAAwB,CAAC;AAGhC;;;;;;;6DAO6D;AAC7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,YAAY,GAA+B,IAAI,GAAG,CAAgB;IACtE,WAAW;IACX,UAAU;IACV,kBAAkB;IAClB,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,mBAAmB;CACpB,CAAC,CAAC;AAkJH,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAE1C,OAAO;QACL,YAAY,CAAC,QAAQ;YACnB,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAAE,UAAU,IAAI,CAAC,CAAC;;oBACpE,MAAM,IAAI,CAAC,CAAC;gBACjB,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC,CAAC;YACzC,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,gDAAgD;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChF,MAAM,IAAI,GAAsB;gBAC9B,IAAI,EAAE,QAAQ,CAAC,aAAa;gBAC5B,UAAU;gBACV,OAAO;gBACP,qEAAqE;gBACrE,oEAAoE;gBACpE,oEAAoE;gBACpE,MAAM,EAAE,MAAM,GAAG,QAAQ;aAC1B,CAAC;YACF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3F,CAAC;QAED,cAAc,CAAC,IAAI;YACjB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,YAAY,CAAC,MAAM;YACjB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,UAAU,CAAC,IAAI;YACb,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,qGAAqG;oBACnG,0CAA0C,CAC7C,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,UAAU,CAAC,IAAI;YACb,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAED,cAAc,CAAC,OAAO,EAAE,iBAAiB;YACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,SAAS;oBAAE,SAAS;gBAC/B,qEAAqE;gBACrE,uEAAuE;gBACvE,mDAAmD;gBACnD,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,KAAK,cAAc;oBAAE,SAAS;gBAC1D,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAAE,SAAS;gBAC1E,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;gBAC1E,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC;oBAAE,SAAS;gBACnE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5G,CAAC;QACH,CAAC;QAED,MAAM;YACJ,MAAM,SAAS,GAAkB,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3E,GAAG;gBACH,YAAY,EAAE,GAAG,CAAC,IAAI;gBACtB,kBAAkB,EAAE,GAAG,CAAC,UAAU;gBAClC,eAAe,EAAE,GAAG,CAAC,OAAO;aAC7B,CAAC,CAAC,CAAC;YAEJ,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YAC3E,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;YACvF,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAE3E,MAAM,OAAO,GACX,MAAM,KAAK,CAAC;gBACV,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,MAAM,EAAE,eAAe;wBACvB,KAAK,EAAE,MAAM;wBACb,MAAM,EACJ,+FAA+F;4BAC/F,sFAAsF;qBACzF;iBACF,CAAC;YAER,yEAAyE;YACzE,0EAA0E;YAC1E,yDAAyD;YACzD,MAAM,iBAAiB,GACrB,QAAQ,KAAK,IAAI;gBACf,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,QAAQ,CAAC,KAAK;qBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBAC7C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAExF,MAAM,KAAK,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,KAAK,CAAC,CAAC;YAC/C,oEAAoE;YACpE,mEAAmE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,+DAA+D;YAC/D,4BAA4B,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,QAAQ,GAA0B,OAAO;iBAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAE1E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YAEjD,OAAO;gBACL,OAAO,EAAE,SAAS;gBAClB,YAAY;gBACZ,kBAAkB;gBAClB,eAAe;gBACf,OAAO;gBACP,gBAAgB,EAAE,OAAO,CAAC,MAAM;gBAChC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;gBAC3D,QAAQ;gBACR,KAAK;gBACL,OAAO;gBACP,QAAQ;gBACR,IAAI;gBACJ,SAAS,EAAE,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;aAChH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,OAAO,CAAC,QAA8B,EAAE,OAAe;IAC9D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC3E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EACJ,yGAAyG;gBACzG,gFAAgF;SACnF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACrE,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EACJ,sGAAsG;gBACtG,8FAA8F;gBAC9F,uEAAuE;SAC1E,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;+EAC+E;AAC/E,SAAS,aAAa,CAAC,IAAiB,EAAE,IAAY,EAAE,UAAkB;IACxE,MAAM,OAAO,GACX,IAAI,KAAK,CAAC;QACR,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,QAAQ,IAAI,uBAAuB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,0BAA0B,UAAU,gCAAgC,CAAC;IACnI,OAAO,+CAA+C,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CACnB,IAAwB,EACxB,OAAe,EACf,IAAY,EACZ,UAAkB,EAClB,KAAa,EACb,KAAa;IAEb,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,CACL,yGAAyG;YACzG,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACxF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IACnF,IAAI,KAAK,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,OAAO,WAAW,UAAU,OAAO,IAAI,gCAAgC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,GAAG,CAAC;AAC/G,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAE3C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,WAAW,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,yBAAyB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1H,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC;IAC/D,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,WAAW,MAAM,CAAC,YAAY,qEAAqE;YAC7G,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,KAAK,OAAO,CAAC,IAAI,UAAU,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,EAAE,YAAY,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI;YAClH,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,gHAAgH;QAC9G,yGAAyG,CAC5G,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/browser/registry.d.ts

@@ -1,126 +0,0 @@
-/** Live browser sessions belonging to one connection — `mcp-browser-tools.md` §4. Four
- *  teardown paths (idle timeout, disconnect, crash, close) converge on one `reap` so a
- *  session never stops being tracked without its browser closing and evidence being
- *  flushed (kept, never dropped — rule 7). Per-connection, never global — a global
- *  registry would let one client guess another's browser by session id. */
-import type { BrowserDriver, BrowserLaunchOptions, BrowserObservation, BrowserPageSession, ChromiumRefusal } from "./driver.ts";
-import type { ReachabilityReport, ReachabilityTracker } from "./reachability.ts";
-/** How long a session may go untouched before torn down. Starting value, not a
- *  measurement — 5 min balances agent-thinking time against leak size; matches the
- *  action handshake's token TTL deliberately. */
-export declare const BROWSER_IDLE_TIMEOUT_MS: number;
-/** Max sessions per connection. Small on purpose — each is a real Chromium process;
- *  3 leaves room for comparing two states plus one opening, without a loop with a
- *  missing `browser_close_session` filling the machine. */
-export declare const MAX_BROWSER_SESSIONS = 3;
-export type ReapReason = "idleTimeout" | "clientDisconnect" | "crashed" | "closed";
-/** DEC-270's vocabulary. Reuses `observe_runtime`'s environment-profile field rather
- *  than a browser-only notion of "safe" (item 27: two definitions could disagree).
- *  Null means no profile — session consent alone governs. */
-export type BrowserSafetyLevel = "readOnly" | "write" | "destructiveWithApproval";
-export interface BrowserSessionEntry {
-    readonly sessionId: string;
-    /** Run id every R4 edge this session witnesses is stamped with. One per session, not
-     *  per call — a run changing identity between a click and the request it caused would
-     *  make `observedByRun` meaningless. */
-    readonly runId: string;
-    readonly page: BrowserPageSession;
-    /** The profile this session was opened under, or null when none was declared. */
-    readonly profile: {
-        readonly name: string;
-        readonly safetyLevel: BrowserSafetyLevel;
-    } | null;
-    /** Origin `browser_start_session` was consented for, recorded at open time — a page
-     *  that navigated since would let re-deriving it launder a cross-origin move into an
-     *  approved one. */
-    readonly consentedOrigin: string;
-    readonly openedAt: number;
-    readonly lastUsedAt: number;
-    /** What this session has reached so far. Accumulated by the port wrapper, not
-     *  by the tools — see `reach-recording-session.ts` for why that is not a
-     *  convenience. */
-    readonly reach: ReachabilityTracker;
-}
-export interface ReapedSession {
-    readonly sessionId: string;
-    readonly reason: ReapReason;
-    readonly observation: BrowserObservation;
-    readonly at: number;
-    /**
-     * Why this session's `saveStorageStateTo` write did not happen, or null —
-     * B1.
-     *
-     * Recorded on the reap record for the same reason the final observation is:
-     * three of the four teardown paths have no reply to attach it to, and a
-     * caller who asked for a state and silently got none would only find out on
-     * the next run, when a session seeded from an absent file quietly drove the
-     * logged-out surface.
-     */
-    readonly storageStateSaveFailure: string | null;
-    /** The session's final reachability report, taken at teardown.
-     *
-     *  It rides on the reap record for the same reason `observation` does: all
-     *  four teardown paths converge here, and a report that only `close()`
-     *  produced would be missing from the three ways a session ends that nobody
-     *  asked for. A session reaped on an idle timeout still has to be able to say
-     *  what it reached. */
-    readonly reachability: ReachabilityReport;
-}
-export type OpenResult = {
-    readonly opened: true;
-    readonly entry: BrowserSessionEntry;
-} | {
-    readonly opened: false;
-    readonly kind: "atCapacity";
-    readonly reason: string;
-} | ({
-    readonly opened: false;
-    readonly kind: "chromiumNotInstalled";
-} & ChromiumRefusal);
-export type UseResult = {
-    readonly ok: true;
-    readonly entry: BrowserSessionEntry;
-} | {
-    readonly ok: false;
-    readonly kind: "unknown";
-    readonly reason: string;
-} | {
-    readonly ok: false;
-    readonly kind: "crashed" | "reaped";
-    readonly reason: string;
-    readonly reaped: ReapedSession;
-};
-export interface BrowserOpenOptions extends BrowserLaunchOptions {
-    /** The environment profile this session runs under. Read, never invented — see `BrowserSafetyLevel`. */
-    readonly profile?: {
-        readonly name: string;
-        readonly safetyLevel: BrowserSafetyLevel;
-    } | null;
-}
-export interface BrowserSessionRegistryOptions {
-    readonly now?: () => number;
-    readonly maxSessions?: number;
-    readonly idleTimeoutMs?: number;
-    /** Runs the background idle sweep. True in production — an idle session needs a
-     *  timer since it will never trigger a lazy sweep on its own; timer is `unref`'d.
-     *  False in tests, which drive `sweepIdle()` against an injected clock. */
-    readonly startSweeper?: boolean;
-}
-export interface BrowserSessionRegistry {
-    readonly idleTimeoutMs: number;
-    readonly maxSessions: number;
-    open(driver: BrowserDriver, options: BrowserOpenOptions): Promise<OpenResult>;
-    /** Looks up a session, touching its idle clock; detects a crash before returning.
-     *  Async because the crash path is a teardown, not a lookup — a sync version would
-     *  drop the dead page's evidence or (as the first draft did) flush it too late. */
-    use(sessionId: string): Promise<UseResult>;
-    close(sessionId: string): Promise<BrowserObservation>;
-    sweepIdle(): Promise<readonly ReapedSession[]>;
-    reapAll(reason: ReapReason): Promise<readonly ReapedSession[]>;
-    reaped(sessionId: string): ReapedSession | undefined;
-    openCount(): number;
-    /** Stop the background sweeper. Called when the connection's `Session` is disposed. */
-    stop(): void;
-}
-export declare function createBrowserSessionRegistry(options?: BrowserSessionRegistryOptions): BrowserSessionRegistry;
-//# sourceMappingURL=registry.d.ts.map

package/dist/browser/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/browser/registry.ts"],"names":[],"mappings":"AAAA;;;;2EAI2E;AAE3E,OAAO,KAAK,EACV,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EAChB,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEjF;;iDAEiD;AACjD,eAAO,MAAM,uBAAuB,QAAgB,CAAC;AAErD;;2DAE2D;AAC3D,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAItC,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEnF;;6DAE6D;AAC7D,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,OAAO,GAAG,yBAAyB,CAAC;AAElF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;4CAEwC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F;;wBAEoB;IACpB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;uBAEmB;IACnB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;;;;;;;OASG;IACH,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhD;;;;;;2BAMuB;IACvB,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC3C;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChF,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,GAAG,eAAe,CAAC,CAAC;AAE1F,MAAM,MAAM,SAAS,GACjB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAEzH,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,wGAAwG;IACxG,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/F;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;+EAE2E;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9E;;uFAEmF;IACnF,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtD,SAAS,IAAI,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IACrD,SAAS,IAAI,MAAM,CAAC;IACpB,uFAAuF;IACvF,IAAI,IAAI,IAAI,CAAC;CACd;AAsBD,wBAAgB,4BAA4B,CAAC,OAAO,GAAE,6BAAkC,GAAG,sBAAsB,CAqIhH"}

package/dist/browser/registry.js

@@ -1,177 +0,0 @@
-/** Live browser sessions belonging to one connection — `mcp-browser-tools.md` §4. Four
- *  teardown paths (idle timeout, disconnect, crash, close) converge on one `reap` so a
- *  session never stops being tracked without its browser closing and evidence being
- *  flushed (kept, never dropped — rule 7). Per-connection, never global — a global
- *  registry would let one client guess another's browser by session id. */
-import { EMPTY_OBSERVATION } from "./driver.js";
-import { withReachRecording } from "./reach-recording-session.js";
-/** How long a session may go untouched before torn down. Starting value, not a
- *  measurement — 5 min balances agent-thinking time against leak size; matches the
- *  action handshake's token TTL deliberately. */
-export const BROWSER_IDLE_TIMEOUT_MS = 5 * 60 * 1000;
-/** Max sessions per connection. Small on purpose — each is a real Chromium process;
- *  3 leaves room for comparing two states plus one opening, without a loop with a
- *  missing `browser_close_session` filling the machine. */
-export const MAX_BROWSER_SESSIONS = 3;
-const SWEEP_INTERVAL_MS = 30_000;
-function originOf(url) {
-    try {
-        return new URL(url).origin;
-    }
-    catch {
-        // Unparseable target already refused at the schema; return the raw string so
-        // consent comparison stays total instead of throwing from a bookkeeping call.
-        return url;
-    }
-}
-export function createBrowserSessionRegistry(options = {}) {
-    const now = options.now ?? Date.now;
-    const maxSessions = options.maxSessions ?? MAX_BROWSER_SESSIONS;
-    const idleTimeoutMs = options.idleTimeoutMs ?? BROWSER_IDLE_TIMEOUT_MS;
-    const live = new Map();
-    const reapedSessions = new Map();
-    /** The one teardown; every path routes through here so "closed" and "evidence kept"
-     *  cannot come apart. `close()` on the port is idempotent, so even a crashed session
-     *  yields its last buffered evidence. */
-    async function reap(sessionId, session, reason) {
-        live.delete(sessionId);
-        let observation = EMPTY_OBSERVATION;
-        try {
-            observation = await session.page.close();
-        }
-        catch {
-            // Teardown that throws must not leave the session tracked or lose the record —
-            // the browser may be gone already; this id is now unusable and says why.
-        }
-        // Read after `close()`, which is when the driver performs the write.
-        const storageStateSaveFailure = session.page.storageStateSaveFailure?.() ?? null;
-        // C3. The tail no tool call ever sees: everything produced after the last
-        // drain arrives in this final observation, and three of the four teardown
-        // paths have no reply to attach it to. A failure that the page explained
-        // only in its last moments would otherwise stay `undetermined` in the one
-        // report that gets read — `reachability` below is taken immediately after.
-        session.reach.refineFailures(observation, session.consentedOrigin);
-        const record = {
-            sessionId,
-            reason,
-            observation,
-            at: now(),
-            storageStateSaveFailure,
-            reachability: session.reach.report(),
-        };
-        reapedSessions.set(sessionId, record);
-        return record;
-    }
-    const sweeper = options.startSweeper === false ? null : setInterval(() => void sweepIdle(), SWEEP_INTERVAL_MS);
-    sweeper?.unref();
-    async function sweepIdle() {
-        const deadline = now() - idleTimeoutMs;
-        const expired = [...live.entries()].filter(([, session]) => session.lastUsedAt < deadline);
-        return Promise.all(expired.map(([sessionId, session]) => reap(sessionId, session, "idleTimeout")));
-    }
-    return {
-        idleTimeoutMs,
-        maxSessions,
-        async open(driver, launchOptions) {
-            if (live.size >= maxSessions) {
-                return {
-                    opened: false,
-                    kind: "atCapacity",
-                    // Both numbers so the caller knows whether to close one or stop opening in a loop.
-                    reason: `This connection already has ${live.size} of ${maxSessions} browser sessions open. Close one with ` +
-                        "browser_close_session before starting another. The cap is per connection and exists because each " +
-                        "session is a real browser process.",
-                };
-            }
-            const launch = await driver.launch(launchOptions);
-            if (!launch.launched) {
-                const { launched: _launched, ...refusal } = launch;
-                return { opened: false, kind: "chromiumNotInstalled", ...refusal };
-            }
-            const at = now();
-            const recorded = withReachRecording(launch.session);
-            const session = {
-                runId: `browser-${launch.session.sessionId}`,
-                page: recorded.page,
-                reach: recorded.reach,
-                profile: launchOptions.profile ?? null,
-                consentedOrigin: originOf(launchOptions.targetUrl),
-                openedAt: at,
-                lastUsedAt: at,
-            };
-            live.set(launch.session.sessionId, session);
-            return { opened: true, entry: entryOf(launch.session.sessionId, session) };
-        },
-        async use(sessionId) {
-            const session = live.get(sessionId);
-            if (session === undefined) {
-                const record = reapedSessions.get(sessionId);
-                if (record !== undefined) {
-                    return { ok: false, kind: "reaped", reason: reasonFor(record), reaped: record };
-                }
-                return {
-                    ok: false,
-                    kind: "unknown",
-                    reason: `No browser session "${sessionId}" on this connection. Sessions are per connection and do not ` +
-                        "survive a reconnect; start one with browser_start_session.",
-                };
-            }
-            if (!session.page.isUsable()) {
-                // Same teardown as every other path, so the crash case can't skip the flush.
-                const record = await reap(sessionId, session, "crashed");
-                return { ok: false, kind: "crashed", reason: crashReason(sessionId), reaped: record };
-            }
-            session.lastUsedAt = now();
-            return { ok: true, entry: entryOf(sessionId, session) };
-        },
-        async close(sessionId) {
-            const session = live.get(sessionId);
-            if (session === undefined)
-                return reapedSessions.get(sessionId)?.observation ?? EMPTY_OBSERVATION;
-            const record = await reap(sessionId, session, "closed");
-            return record.observation;
-        },
-        sweepIdle,
-        async reapAll(reason) {
-            const all = [...live.entries()];
-            return Promise.all(all.map(([sessionId, session]) => reap(sessionId, session, reason)));
-        },
-        reaped: (sessionId) => reapedSessions.get(sessionId),
-        openCount: () => live.size,
-        stop() {
-            if (sweeper !== null)
-                clearInterval(sweeper);
-        },
-    };
-}
-function entryOf(sessionId, session) {
-    return {
-        sessionId,
-        runId: session.runId,
-        page: session.page,
-        reach: session.reach,
-        profile: session.profile,
-        consentedOrigin: session.consentedOrigin,
-        openedAt: session.openedAt,
-        lastUsedAt: session.lastUsedAt,
-    };
-}
-function crashReason(sessionId) {
-    return (`Browser session ${sessionId} crashed or its page closed. The session id is invalidated rather than ` +
-        "reopened against a different browser, which would silently change what later evidence refers to. " +
-        "Anything the page reported before it died is included here.");
-}
-function reasonFor(record) {
-    switch (record.reason) {
-        case "idleTimeout":
-            return (`Browser session ${record.sessionId} was torn down after being idle. Its evidence was kept and is ` +
-                "included here. Start a new session to continue.");
-        case "clientDisconnect":
-            return `Browser session ${record.sessionId} was reaped when the client disconnected.`;
-        case "crashed":
-            return crashReason(record.sessionId);
-        case "closed":
-            return `Browser session ${record.sessionId} was closed by browser_close_session.`;
-    }
-}
-//# sourceMappingURL=registry.js.map

package/dist/browser/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/browser/registry.ts"],"names":[],"mappings":"AAAA;;;;2EAI2E;AAS3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGlE;;iDAEiD;AACjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD;;2DAE2D;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AA6GjC,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,8EAA8E;QAC9E,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,UAAyC,EAAE;IACtF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAEvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;IAExD;;6CAEyC;IACzC,KAAK,UAAU,IAAI,CAAC,SAAiB,EAAE,OAAoB,EAAE,MAAkB;QAC7E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvB,IAAI,WAAW,GAAuB,iBAAiB,CAAC;QACxD,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;YAC/E,yEAAyE;QAC3E,CAAC;QACD,qEAAqE;QACrE,MAAM,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,IAAI,CAAC;QACjF,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QACnE,MAAM,MAAM,GAAkB;YAC5B,SAAS;YACT,MAAM;YACN,WAAW;YACX,EAAE,EAAE,GAAG,EAAE;YACT,uBAAuB;YACvB,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;SACrC,CAAC;QACF,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,SAAS,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC/G,OAAO,EAAE,KAAK,EAAE,CAAC;IAEjB,KAAK,UAAU,SAAS;QACtB,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,aAAa,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;QAC3F,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,OAAO;QACL,aAAa;QACb,WAAW;QAEX,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa;YAC9B,IAAI,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC7B,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,YAAY;oBAClB,mFAAmF;oBACnF,MAAM,EACJ,+BAA+B,IAAI,CAAC,IAAI,OAAO,WAAW,yCAAyC;wBACnG,mGAAmG;wBACnG,oCAAoC;iBACvC,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;gBACnD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,OAAO,EAAE,CAAC;YACrE,CAAC;YAED,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,OAAO,GAAgB;gBAC3B,KAAK,EAAE,WAAW,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE;gBAC5C,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,IAAI;gBACtC,eAAe,EAAE,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC;gBAClD,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7E,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,SAAS;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAClF,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,SAAS;oBACf,MAAM,EACJ,uBAAuB,SAAS,+DAA+D;wBAC/F,4DAA4D;iBAC/D,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC7B,6EAA6E;gBAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;gBACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACxF,CAAC;YAED,OAAO,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,SAAS;YACnB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,IAAI,iBAAiB,CAAC;YAClG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,SAAS;QAET,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;QACpD,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI;QAC1B,IAAI;YACF,IAAI,OAAO,KAAK,IAAI;gBAAE,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,OAAoB;IACtD,OAAO;QACL,SAAS;QACT,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,CACL,mBAAmB,SAAS,yEAAyE;QACrG,mGAAmG;QACnG,6DAA6D,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAqB;IACtC,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,aAAa;YAChB,OAAO,CACL,mBAAmB,MAAM,CAAC,SAAS,gEAAgE;gBACnG,iDAAiD,CAClD,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO,mBAAmB,MAAM,CAAC,SAAS,2CAA2C,CAAC;QACxF,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,mBAAmB,MAAM,CAAC,SAAS,uCAAuC,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/browser/scenario-provenance.d.ts

@@ -1,23 +0,0 @@
-/** Provenance matching for `browser_save_scenario` — DEC-NEXT (Part 13 of the UAT audit). A step
- *  the session actually performed, in order, was necessarily resolvable at the moment it ran; that
- *  is stronger evidence than re-resolving the same step against a LATER static snapshot, which is
- *  exactly what fails for a UI that reveals controls progressively (the earlier steps' own targets
- *  can mutate — a "Try it out" button that renames itself to "Cancel" — or the later steps' targets
- *  can vanish again by the time save() looks, even though every one of them was just performed live,
- *  successfully, moments before). This module answers one question only: for each step in a
- *  scenario, does it match something this session's own action log says actually happened, in the
- *  same relative order? It does not decide what to do with that answer — the caller
- *  (`browser-save-scenario.ts`) still runs today's single-snapshot check for anything this says no
- *  to, which is the fallback that still catches a fabricated or hand-edited scenario. */
-import type { PerformedStep } from "./driver.ts";
-import { type ScenarioStep } from "../scenarios/index.ts";
-/** For each of `steps`, in order: does it match an entry in `log`, without matching an earlier
- *  step to a later log entry than a later step already claimed? A greedy in-order subsequence
- *  match — each match consumes the log up to and including itself, so a match can never come
- *  from *before* the previous step's own match, even though extra performed actions in between
- *  (an explored dead end, a step the scenario doesn't include) are skipped over freely rather
- *  than required to appear. `log` from a different or closed session, or a hand-constructed
- *  scenario naming something that was never actually performed, matches nothing here — every
- *  entry in `result` for it comes back `false`, leaving the fallback snapshot check to run. */
-export declare function matchByProvenance(steps: readonly ScenarioStep[], log: readonly PerformedStep[]): readonly boolean[];
-//# sourceMappingURL=scenario-provenance.d.ts.map