@descryy/mcp 0.11.4 → 0.11.5

package/dist/browser/tool-support.js

@@ -1,216 +0,0 @@
-/** What the seven browser tools share — kept in one place because the parts that repeat
- *  are the parts that must not drift: how a dead session is reported, how consent is
- *  checked, how a reply is stamped. Seven copies of a refusal is seven chances for one to
- *  say something slightly different about the same state. */
-import { answer } from "../tools/kit.js";
-import { evidenceNotes, evidenceReport } from "./evidence.js";
-import { graphWriteNotes, writeBrowserObservations, NO_GRAPH_WRITE } from "./graph-write.js";
-export function browserStamp(ctx) {
-    try {
-        const stamp = ctx.session.provider().baseStamp();
-        return {
-            commitSha: stamp.commitSha,
-            graphBuiltAt: stamp.graphBuiltAt,
-            irSchemaVersion: stamp.irSchemaVersion,
-            commitSpread: stamp.commitSpread,
-            repoCount: stamp.repoCount,
-            note: null,
-        };
-    }
-    catch {
-        return {
-            commitSha: null,
-            graphBuiltAt: null,
-            irSchemaVersion: 0,
-            commitSpread: 0,
-            repoCount: 0,
-            note: "This repository has no graph, so the reply carries no commit stamp. What the browser observed is " +
-                "still real; nothing here has been related to your code. Run analyze to connect the two.",
-        };
-    }
-}
-/** Every browser reply, stamped identically. `resolutionFloor: 4` on success — R4 is
- *  "observed at runtime", exactly what this call saw; a refusal/failure observed nothing,
- *  so stamps R0 — describing this reply's evidence, not the tool's best case. */
-export function browserAnswer(options) {
-    const stamp = browserStamp(options.ctx);
-    const observed = (options.state ?? "ok") === "ok";
-    const notes = stamp.note === null ? [...options.notes] : [...options.notes, stamp.note];
-    return answer({
-        headline: options.headline,
-        data: options.data,
-        resolutionFloor: observed ? 4 : 0,
-        commitSha: stamp.commitSha,
-        graphBuiltAt: stamp.graphBuiltAt,
-        irSchemaVersion: stamp.irSchemaVersion,
-        commitSpread: stamp.commitSpread,
-        repoCount: stamp.repoCount,
-        notes,
-        // A browser observation is a fact about names and structure on a page —
-        // "a button called Delete is here" — not about a program's types.
-        nameLevel: true,
-        ...(options.state === undefined || options.state === "ok" ? {} : { state: options.state }),
-        ...(options.fitToBudget === undefined ? {} : { fitToBudget: options.fitToBudget }),
-    });
-}
-/** Looks a session up, or says exactly why it can't be used. The three dead states stay
- *  apart — "never had it", "timed out, here's what it saw", "crashed" send a caller to
- *  three different things; only the last is `failed`. */
-export async function useSession(registry, sessionId) {
-    const used = await registry.use(sessionId);
-    if (used.ok)
-        return { ok: true, entry: used.entry };
-    if (used.kind === "unknown") {
-        return { ok: false, dead: { state: "refused", headline: `No browser session "${sessionId}".`, notes: [used.reason], evidence: emptyEvidence() } };
-    }
-    const evidence = evidenceReport(used.reaped.observation);
-    const carried = evidence.consoleErrors.length + evidence.failedRequests.length > 0
-        ? ["Everything the session had observed but not yet reported is included here rather than discarded."]
-        : [];
-    return {
-        ok: false,
-        dead: {
-            // A crash is something breaking; a reap is Descry tidying up — the five states keep those apart.
-            state: used.kind === "crashed" ? "failed" : "refused",
-            headline: used.kind === "crashed" ? `Browser session ${sessionId} crashed.` : `Browser session ${sessionId} is gone.`,
-            notes: [used.reason, ...carried],
-            evidence,
-        },
-    };
-}
-/** Drains page evidence, relates it to the graph, and returns both in one place — every
- *  evidence-bearing tool routes through this so the R4 write can't silently not happen.
- *  No graph correlates nothing and says so; that's real, not "found no connection". */
-export async function observeAndCorrelate(ctx, entry) {
-    const observation = await entry.page.drainEvidence();
-    // C3. The one place in a tool call where a drained observation and the
-    // session's record of its own failures are both in hand. The recording
-    // decorator could not do this — it may not drain — so every action failure
-    // arrives here still attributed from the error and the clock alone, which is
-    // `undetermined` for any bare timeout. Re-decided against this drain,
-    // narrowed to each failure's own window. Before `evidenceReport`, so the
-    // reply and the reachability report cannot disagree about the same drain.
-    entry.reach.refineFailures(observation, entry.consentedOrigin);
-    const evidence = evidenceReport(observation);
-    let graph = NO_GRAPH_WRITE;
-    const notes = [];
-    if (observation.requests.length > 0) {
-        try {
-            const commitSha = ctx.session.provider().baseStamp().commitSha;
-            graph = writeBrowserObservations({
-                driver: ctx.session.store().driver,
-                repo: ctx.session.config.repo,
-                runId: entry.runId,
-                // An edge records the commit the app was built from, so a reader can tell if code
-                // moved since. Without it, the observation is real but undatable against source, so not written.
-                commitSha: commitSha ?? "",
-                repoRoot: ctx.session.repoPath,
-                requests: observation.requests,
-            });
-            notes.push(...graphWriteNotes(graph, observation.requests));
-        }
-        catch {
-            notes.push("This repository has no graph open, so nothing the browser observed was related to your code. The " +
-                "observations below are real; they are simply unconnected. Run analyze to connect them.");
-        }
-    }
-    return { evidence, graph, notes: [...evidenceNotes(evidence), ...notes] };
-}
-export function emptyEvidence() {
-    return { consoleErrors: [], failedRequests: [], pendingRequests: [], totalRequests: 0, actions: [], unsettled: [], evidenceWarnings: [] };
-}
-export function reportOf(observation) {
-    return evidenceReport(observation);
-}
-/** Does the session's environment profile permit changing the application? Reads DEC-270's
- *  `safetyLevel` (same field `observe_runtime` consults), not a per-tool flag — two "safe"
- *  notions could disagree. No profile ⇒ null; consent and profile are independent, both must pass. */
-export function mutationRefusal(entry) {
-    if (entry.profile === null)
-        return null;
-    if (entry.profile.safetyLevel !== "readOnly")
-        return null;
-    return (`Environment profile "${entry.profile.name}" declares safetyLevel "readOnly", which does not permit ` +
-        "changing the application. Clicking, typing, filling, choosing an option and submitting a form can all " +
-        "change data, so they are refused; browser_navigate, browser_snapshot and browser_wait_for read or wait " +
-        "on the page without changing it and remain available. This is a fact about the profile you supplied, " +
-        "not about the page — the session's own consent is intact and does not override it.");
-}
-/** Is `url` inside the origin this session was consented for? The consent ruling's one
- *  hard bound — checked here, not in each verb, so a future eighth tool can't forget it. */
-export function withinConsent(entry, url) {
-    try {
-        return new URL(url).origin === entry.consentedOrigin;
-    }
-    catch {
-        return false;
-    }
-}
-/** Everything a snapshot could not reach, said out loud. Rule 7: a fallback the caller is not
- *  told about is the same as not having tried. Empty when every document was read, nothing was
- *  withheld, and no reveal pass ran — silence then means "nothing to disclose", not "not checked". */
-export function reachNotes(snapshot) {
-    const notes = [];
-    const unread = snapshot.frames.filter((f) => !f.enumerated);
-    for (const frame of unread) {
-        const label = frame.frame === null ? "the page" : (frame.frame.name ?? frame.frame.url ?? frame.frame.id);
-        notes.push(`Not read: ${label}. ${frame.reason ?? "no reason was recorded, which is itself a gap."}`);
-    }
-    const framed = snapshot.frames.filter((f) => f.enumerated && f.frame !== null && f.elements > 0);
-    if (framed.length > 0) {
-        notes.push(`${framed.map((f) => `${f.elements} element(s) in ${f.frame?.name ?? f.frame?.url ?? f.frame?.id}`).join(", ")}. ` +
-            "Elements inside a frame can be clicked, typed and filled by ref in this session, but carry no " +
-            "selector and so cannot be saved into a scenario — the scenario format has no field to name a frame.");
-    }
-    if (snapshot.shadow.piercedElements > 0) {
-        notes.push(`${snapshot.shadow.piercedElements} element(s) came from inside an open shadow root.`);
-    }
-    if (snapshot.shadow.ambiguousInDocument > 0) {
-        notes.push(`${snapshot.shadow.ambiguousInDocument} shadow-root element(s) have no selector: their hook is unique ` +
-            "inside their own component but not on the page, so any selector here would match the wrong instance.");
-    }
-    if (snapshot.shadow.probed && snapshot.shadow.suspectedClosedHosts > 0) {
-        notes.push(`${snapshot.shadow.suspectedClosedHosts} custom element(s) expose no shadow root and hold no children — ` +
-            "the signature of a closed shadow root, which no API can confirm. If this page has controls that do " +
-            "not appear above, they are most likely inside those. Suspected, not asserted.");
-    }
-    if (!snapshot.shadow.probed) {
-        notes.push("The closed-shadow-root probe did not run here, so nothing above says whether this page has any.");
-    }
-    if (snapshot.hidden.withheld > 0) {
-        notes.push(`${snapshot.hidden.withheld} element(s) match the interactive query but the page renders them nowhere — ` +
-            "a collapsed menu, a closed dialog, an inactive tab panel or `<canvas>` fallback content. They are left " +
-            "out above because listing them would name controls that are not on the screen. Something this page can " +
-            "open may reveal them; nothing here asserts it will.");
-    }
-    if (snapshot.hidden.untested > 0) {
-        notes.push(`${snapshot.hidden.untested} element(s) could not be tested for whether the page renders them at all, so ` +
-            "they are listed on trust and the withheld count above is a floor rather than a total.");
-    }
-    const reveal = snapshot.reveal;
-    if (reveal !== null) {
-        if (reveal.reason !== null)
-            notes.push(`Reveal was incomplete: ${reveal.reason}`);
-        if (reveal.containersScrolled > 0) {
-            notes.push(`${reveal.containersScrolled} scrollable container(s) on this page were scrolled as well as the page ` +
-                "itself. A list inside one does not move when the window does, so anything above that came from one " +
-                "was out of reach of a page scroll alone.");
-        }
-        notes.push(`Reveal scrolled the page ${reveal.passes} time(s), leaving it at y=${reveal.finalScrollY}` +
-            (reveal.revealedElements > 0 ? `, and ${reveal.revealedElements} element(s) exist above only because of it` : "") +
-            ".");
-        if (reveal.recycledElements > 0) {
-            notes.push(`${reveal.recycledElements} element(s) that were on the page before scrolling are gone from it now — ` +
-                "this list recycles its rows, so no single snapshot can hold all of them. They are counted rather " +
-                "than listed because a ref to an element the page has destroyed would not work.");
-        }
-        if (reveal.stoppedAtCap) {
-            notes.push("Reveal stopped at its pass cap while the page was still growing — there is more below that was not read.");
-        }
-        if (reveal.framesNotScrolled.length > 0) {
-            notes.push(`Reveal scrolls the main document only; below-the-fold content in ${reveal.framesNotScrolled.join(", ")} was not reached.`);
-        }
-    }
-    return notes;
-}
-//# sourceMappingURL=tool-support.js.map

package/dist/browser/tool-support.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-support.js","sourceRoot":"","sources":["../../src/browser/tool-support.ts"],"names":[],"mappings":"AAAA;;;6DAG6D;AAE7D,OAAO,EAAE,MAAM,EAAoB,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,aAAa,EAAE,cAAc,EAA8B,MAAM,eAAe,CAAC;AAE1F,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,cAAc,EAA0B,MAAM,kBAAkB,CAAC;AAarH,MAAM,UAAU,YAAY,CAAC,GAAgB;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC;QACjD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,CAAC;YAClB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,CAAC;YACZ,IAAI,EACF,mGAAmG;gBACnG,yFAAyF;SAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAWD;;iFAEiF;AACjF,MAAM,UAAU,aAAa,CAAI,OAA+B;IAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAExF,OAAO,MAAM,CAAI;QACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,wEAAwE;QACxE,kEAAkE;QAClE,SAAS,EAAE,IAAI;QACf,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1F,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;KACnF,CAAC,CAAC;AACL,CAAC;AASD;;yDAEyD;AACzD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgC,EAChC,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAEpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,uBAAuB,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IACpJ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,OAAO,GACX,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAChE,CAAC,CAAC,CAAC,kGAAkG,CAAC;QACtG,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE;YACJ,iGAAiG;YACjG,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACrD,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,SAAS,WAAW,CAAC,CAAC,CAAC,mBAAmB,SAAS,WAAW;YACrH,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC;YAChC,QAAQ;SACT;KACF,CAAC;AACJ,CAAC;AAED;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAgB,EAChB,KAA0B;IAE1B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;IAErD,uEAAuE;IACvE,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAE7C,IAAI,KAAK,GAAsB,cAAc,CAAC;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC;YAC/D,KAAK,GAAG,wBAAwB,CAAC;gBAC/B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM;gBAClC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;gBAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,kFAAkF;gBAClF,iGAAiG;gBACjG,SAAS,EAAE,SAAS,IAAI,EAAE;gBAC1B,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBAC9B,QAAQ,EAAE,WAAW,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CACR,mGAAmG;gBACjG,wFAAwF,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;AAC5I,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,WAA+B;IACtD,OAAO,cAAc,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED;;sGAEsG;AACtG,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,CACL,wBAAwB,KAAK,CAAC,OAAO,CAAC,IAAI,2DAA2D;QACrG,wGAAwG;QACxG,yGAAyG;QACzG,uGAAuG;QACvG,oFAAoF,CACrF,CAAC;AACJ,CAAC;AAED;4FAC4F;AAC5F,MAAM,UAAU,aAAa,CAAC,KAA0B,EAAE,GAAW;IACnE,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,eAAe,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;sGAEsG;AACtG,MAAM,UAAU,UAAU,CAAC,QAAsB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1G,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,KAAK,KAAK,CAAC,MAAM,IAAI,gDAAgD,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,kBAAkB,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAChH,gGAAgG;YAChG,qGAAqG,CACxG,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,eAAe,mDAAmD,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,iEAAiE;YACrG,sGAAsG,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,CAAC,oBAAoB,kEAAkE;YACvG,qGAAqG;YACrG,+EAA+E,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;IAChH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,8EAA8E;YACvG,yGAAyG;YACzG,yGAAyG;YACzG,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,+EAA+E;YACxG,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,kBAAkB,0EAA0E;gBACpG,qGAAqG;gBACrG,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CACR,4BAA4B,MAAM,CAAC,MAAM,6BAA6B,MAAM,CAAC,YAAY,EAAE;YACzF,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,gBAAgB,4CAA4C,CAAC,CAAC,CAAC,EAAE,CAAC;YACjH,GAAG,CACN,CAAC;QACF,IAAI,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,gBAAgB,4EAA4E;gBACpG,mGAAmG;gBACnG,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,0GAA0G,CAAC,CAAC;QACzH,CAAC;QACD,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,oEAAoE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzI,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/browser/url-scheme.d.ts

@@ -1,14 +0,0 @@
-/**
- * Which URL schemes `browser_start_session` may open (A-F7). `file:`/`data:` resolve
- * `.origin` to `"null"`, so same-origin containment passes for every local file (e.g.
- * `file:///etc/passwd` reads back as inside consent). Only http:/https: trusted by
- * default; opt in extras via `DESCRY_ALLOW_BROWSER_URL_SCHEMES`. */
-export declare const ALLOW_BROWSER_URL_SCHEMES_ENV_VAR = "DESCRY_ALLOW_BROWSER_URL_SCHEMES";
-export type UrlSchemeDecision = {
-    readonly allowed: true;
-} | {
-    readonly allowed: false;
-    readonly reason: string;
-};
-export declare function checkUrlScheme(url: URL): UrlSchemeDecision;
-//# sourceMappingURL=url-scheme.d.ts.map

package/dist/browser/url-scheme.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-scheme.d.ts","sourceRoot":"","sources":["../../src/browser/url-scheme.ts"],"names":[],"mappings":"AAAA;;;;oEAIoE;AAEpE,eAAO,MAAM,iCAAiC,qCAAqC,CAAC;AAepF,MAAM,MAAM,iBAAiB,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAOlH,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,iBAAiB,CAa1D"}

package/dist/browser/url-scheme.js

@@ -1,38 +0,0 @@
-/**
- * Which URL schemes `browser_start_session` may open (A-F7). `file:`/`data:` resolve
- * `.origin` to `"null"`, so same-origin containment passes for every local file (e.g.
- * `file:///etc/passwd` reads back as inside consent). Only http:/https: trusted by
- * default; opt in extras via `DESCRY_ALLOW_BROWSER_URL_SCHEMES`. */
-export const ALLOW_BROWSER_URL_SCHEMES_ENV_VAR = "DESCRY_ALLOW_BROWSER_URL_SCHEMES";
-const DEFAULT_ALLOWED_SCHEMES = new Set(["http:", "https:"]);
-function operatorAllowedSchemes() {
-    const raw = process.env[ALLOW_BROWSER_URL_SCHEMES_ENV_VAR];
-    if (raw === undefined || raw.trim() === "")
-        return DEFAULT_ALLOWED_SCHEMES;
-    const extra = raw
-        .split(",")
-        .map((s) => s.trim())
-        .filter((s) => s !== "")
-        .map((s) => (s.endsWith(":") ? s : `${s}:`));
-    return new Set([...DEFAULT_ALLOWED_SCHEMES, ...extra]);
-}
-/** The one exception: `about:blank` carries no content (no hazard like `file:`/`data:`)
- *  and is the standard pre-navigation target for browser automation. Other `about:`
- *  URLs (`about:config`, …) can expose browser-internal state and are excluded. */
-const INERT_TARGET = "about:blank";
-export function checkUrlScheme(url) {
-    if (url.href === INERT_TARGET)
-        return { allowed: true };
-    const allowed = operatorAllowedSchemes();
-    if (allowed.has(url.protocol))
-        return { allowed: true };
-    return {
-        allowed: false,
-        reason: `"${url.href}" uses the "${url.protocol}" scheme, which this tool does not open by default. Same-origin ` +
-            "containment (the check every other browser tool relies on) does not hold for a file: or data: URL — " +
-            'both resolve to the origin "null", so a session opened on one would treat every local file as inside ' +
-            `consent. Only http: and https: are allowed by default; set ${ALLOW_BROWSER_URL_SCHEMES_ENV_VAR} ` +
-            '(e.g. "file") in this server\'s own environment to add a scheme deliberately.',
-    };
-}
-//# sourceMappingURL=url-scheme.js.map

package/dist/browser/url-scheme.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-scheme.js","sourceRoot":"","sources":["../../src/browser/url-scheme.ts"],"names":[],"mappings":"AAAA;;;;oEAIoE;AAEpE,MAAM,CAAC,MAAM,iCAAiC,GAAG,kCAAkC,CAAC;AAEpF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7D,SAAS,sBAAsB;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,uBAAuB,CAAC;IAC3E,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,uBAAuB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAID;;mFAEmF;AACnF,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;IACzC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EACJ,IAAI,GAAG,CAAC,IAAI,eAAe,GAAG,CAAC,QAAQ,kEAAkE;YACzG,sGAAsG;YACtG,uGAAuG;YACvG,8DAA8D,iCAAiC,GAAG;YAClG,+EAA+E;KAClF,CAAC;AACJ,CAAC"}

package/dist/browser/wait-target.d.ts

@@ -1,37 +0,0 @@
-/** What `waitFor` is waiting for, and how a candidate is judged against it.
- *
- *  Its own module because the fake driver and the real one must agree on the answer
- *  exactly — a matcher copied into both is two matchers, and the contract test would
- *  then be asserting that each implementation agrees with itself.
- *
- *  A target names an element the way a snapshot presents one (role, accessible name) and
- *  never a selector. That is the same rule every other verb obeys, held for the same
- *  reason: an agent waiting on a raw selector is waiting on something it has not seen and
- *  cannot describe, and whatever then matches it is an element nobody inspected.
- *
- *  Matching is exact, case-insensitive, after trimming — no substring fallback. Rule 2:
- *  a loose match turns "the thing I meant appeared" into "something like it did", and the
- *  agent acts on the difference. A wait that times out returns the page's real contents,
- *  so a too-strict target is visible rather than silent.
- *
- *  Rule 1: nothing here names a language, a framework or a file extension. */
-import type { SnapshotElement } from "./driver.ts";
-/** At least one of the two must be given; `waitFor` refuses an empty target rather than
- *  matching the first element on the page. */
-export interface WaitForTarget {
-    readonly role?: string;
-    readonly name?: string;
-}
-export declare function isEmptyWaitTarget(target: WaitForTarget): boolean;
-export declare function matchesWaitTarget(element: SnapshotElement, target: WaitForTarget): boolean;
-/** For a reply a person reads. Says which fields were actually constraining, so a
- *  timeout names the target that was waited on rather than a tidied version of it. */
-export declare function describeWaitTarget(target: WaitForTarget): string;
-/** Matches the fake driver's, so the contract's timing assertions mean the same on both. */
-export declare const WAIT_POLL_INTERVAL_MS = 25;
-export declare const WAIT_TIMEOUT_DEFAULT_MS = 5000;
-export declare const WAIT_TIMEOUT_MAX_MS = 30000;
-/** A ceiling a caller cannot remove. `waitFor` is the one verb whose whole job is to block,
- *  so an unbounded value here is how one pathological page stops a whole run. */
-export declare function clampWaitTimeout(requested: number | undefined): number;
-//# sourceMappingURL=wait-target.d.ts.map

package/dist/browser/wait-target.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wait-target.d.ts","sourceRoot":"","sources":["../../src/browser/wait-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;8EAgB8E;AAE9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;8CAC8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAEhE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAK1F;AAED;sFACsF;AACtF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAKhE;AAED,4FAA4F;AAC5F,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAC7C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAE1C;iFACiF;AACjF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGtE"}

package/dist/browser/wait-target.js

@@ -1,54 +0,0 @@
-/** What `waitFor` is waiting for, and how a candidate is judged against it.
- *
- *  Its own module because the fake driver and the real one must agree on the answer
- *  exactly — a matcher copied into both is two matchers, and the contract test would
- *  then be asserting that each implementation agrees with itself.
- *
- *  A target names an element the way a snapshot presents one (role, accessible name) and
- *  never a selector. That is the same rule every other verb obeys, held for the same
- *  reason: an agent waiting on a raw selector is waiting on something it has not seen and
- *  cannot describe, and whatever then matches it is an element nobody inspected.
- *
- *  Matching is exact, case-insensitive, after trimming — no substring fallback. Rule 2:
- *  a loose match turns "the thing I meant appeared" into "something like it did", and the
- *  agent acts on the difference. A wait that times out returns the page's real contents,
- *  so a too-strict target is visible rather than silent.
- *
- *  Rule 1: nothing here names a language, a framework or a file extension. */
-function normalise(value) {
-    return value.trim().toLowerCase();
-}
-export function isEmptyWaitTarget(target) {
-    return (target.role ?? "").trim() === "" && (target.name ?? "").trim() === "";
-}
-export function matchesWaitTarget(element, target) {
-    if (isEmptyWaitTarget(target))
-        return false;
-    if (target.role !== undefined && target.role.trim() !== "" && normalise(element.role) !== normalise(target.role))
-        return false;
-    if (target.name !== undefined && target.name.trim() !== "" && normalise(element.name) !== normalise(target.name))
-        return false;
-    return true;
-}
-/** For a reply a person reads. Says which fields were actually constraining, so a
- *  timeout names the target that was waited on rather than a tidied version of it. */
-export function describeWaitTarget(target) {
-    const parts = [];
-    if (target.role !== undefined && target.role.trim() !== "")
-        parts.push(`role "${target.role}"`);
-    if (target.name !== undefined && target.name.trim() !== "")
-        parts.push(`name "${target.name}"`);
-    return parts.length === 0 ? "an unspecified element" : parts.join(", ");
-}
-/** Matches the fake driver's, so the contract's timing assertions mean the same on both. */
-export const WAIT_POLL_INTERVAL_MS = 25;
-export const WAIT_TIMEOUT_DEFAULT_MS = 5_000;
-export const WAIT_TIMEOUT_MAX_MS = 30_000;
-/** A ceiling a caller cannot remove. `waitFor` is the one verb whose whole job is to block,
- *  so an unbounded value here is how one pathological page stops a whole run. */
-export function clampWaitTimeout(requested) {
-    if (requested === undefined || !Number.isFinite(requested))
-        return WAIT_TIMEOUT_DEFAULT_MS;
-    return Math.max(0, Math.min(WAIT_TIMEOUT_MAX_MS, Math.trunc(requested)));
-}
-//# sourceMappingURL=wait-target.js.map

package/dist/browser/wait-target.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"wait-target.js","sourceRoot":"","sources":["../../src/browser/wait-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;8EAgB8E;AAW9E,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAwB,EAAE,MAAqB;IAC/E,IAAI,iBAAiB,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/H,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/H,OAAO,IAAI,CAAC;AACd,CAAC;AAED;sFACsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;iFACiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC3F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/cancellation.d.ts

@@ -1,20 +0,0 @@
-/** What a tool does when the caller has already gone. `notifications/cancelled` stops the
- *  server from waiting, not the work itself — a browser or process would keep running
- *  unless released. Three rules: release only what this call started (never a caller's own
- *  state), keep evidence already witnessed, never render a cancelled run as clean. State is
- *  `refused` (a fact about Descry stopping) not `empty` (which would falsely say it looked and found nothing). */
-/** The reply state for a call that stopped because its signal was aborted. */
-export declare const CANCELLED_STATE: "refused";
-export declare function cancellationHeadline(what: string): string;
-/** @param stopped What this call stopped doing, in the caller's terms.
- *  @param released What it tore down, if anything — omitted when nothing was released;
- *  claiming a teardown that didn't happen is as false as hiding one that did. */
-export declare function cancellationNotes(stopped: string, released?: string): readonly string[];
-/** A promise that settles when the signal aborts, plus a way to stop listening.
- *  `Promise.race` leaves the loser pending forever, so an unremoved listener leaks on a
- *  signal that outlives the call — callers race then dispose in a `finally`. */
-export declare function whenAborted(signal: AbortSignal): {
-    readonly promise: Promise<void>;
-    dispose(): void;
-};
-//# sourceMappingURL=cancellation.d.ts.map

package/dist/cancellation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cancellation.d.ts","sourceRoot":"","sources":["../src/cancellation.ts"],"names":[],"mappings":"AAAA;;;;kHAIkH;AAElH,8EAA8E;AAC9E,eAAO,MAAM,eAAe,EAAG,SAAkB,CAAC;AAElD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;iFAEiF;AACjF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAMvF;AAED;;gFAEgF;AAChF,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,IAAI,IAAI,CAAA;CAAE,CAgBrG"}

package/dist/cancellation.js

@@ -1,41 +0,0 @@
-/** What a tool does when the caller has already gone. `notifications/cancelled` stops the
- *  server from waiting, not the work itself — a browser or process would keep running
- *  unless released. Three rules: release only what this call started (never a caller's own
- *  state), keep evidence already witnessed, never render a cancelled run as clean. State is
- *  `refused` (a fact about Descry stopping) not `empty` (which would falsely say it looked and found nothing). */
-/** The reply state for a call that stopped because its signal was aborted. */
-export const CANCELLED_STATE = "refused";
-export function cancellationHeadline(what) {
-    return `The call was cancelled; ${what}.`;
-}
-/** @param stopped What this call stopped doing, in the caller's terms.
- *  @param released What it tore down, if anything — omitted when nothing was released;
- *  claiming a teardown that didn't happen is as false as hiding one that did. */
-export function cancellationNotes(stopped, released) {
-    return [
-        `This call was cancelled before it finished. ${stopped} Nothing here is a finding about your ` +
-            "application: the run stopped, it did not conclude.",
-        ...(released === undefined ? [] : [released]),
-    ];
-}
-/** A promise that settles when the signal aborts, plus a way to stop listening.
- *  `Promise.race` leaves the loser pending forever, so an unremoved listener leaks on a
- *  signal that outlives the call — callers race then dispose in a `finally`. */
-export function whenAborted(signal) {
-    if (signal.aborted)
-        return { promise: Promise.resolve(), dispose: () => { } };
-    let onAbort = () => { };
-    const promise = new Promise((resolve) => {
-        onAbort = () => {
-            resolve();
-        };
-        signal.addEventListener("abort", onAbort, { once: true });
-    });
-    return {
-        promise,
-        dispose: () => {
-            signal.removeEventListener("abort", onAbort);
-        },
-    };
-}
-//# sourceMappingURL=cancellation.js.map

package/dist/cancellation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cancellation.js","sourceRoot":"","sources":["../src/cancellation.ts"],"names":[],"mappings":"AAAA;;;;kHAIkH;AAElH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,SAAkB,CAAC;AAElD,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,2BAA2B,IAAI,GAAG,CAAC;AAC5C,CAAC;AAED;;iFAEiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,QAAiB;IAClE,OAAO;QACL,+CAA+C,OAAO,wCAAwC;YAC5F,oDAAoD;QACtD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC7C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;IAE7E,IAAI,OAAO,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,OAAO,GAAG,GAAG,EAAE;YACb,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO;QACP,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/capped.d.ts

@@ -1,39 +0,0 @@
-/** `capped(items, limit) → { shown, detail }`, B6's fix. Three tools used to compute a list cut
- *  three different ways; two left `render.ts` filling the gap with a `{shown:-1,total:-1}`
- *  sentinel — worse than nothing, since it passes a presence check and poisons arithmetic. Now the
- *  slice and the fact it happened are computed together, so a tool can't hold one without the other. */
-import type { TruncationDetail } from "./render.ts";
-export interface Capped<T> {
-    /** The first `limit` items, in their original order. */
-    readonly shown: readonly T[];
-    /** `null` when nothing was withheld; otherwise the same `{shown, total}` shape `render.ts` puts
-     *  on the wire, so a tool can pass it straight through as `truncatedDetail`. */
-    readonly detail: TruncationDetail | null;
-}
-/** Slices `items` to `limit` and reports the cost in the same call. A negative/fractional `limit`
- *  is treated as zero rather than thrown — defensive only, callers already validate at the schema
- *  boundary. */
-export declare function capped<T>(items: readonly T[], limit: number): Capped<T>;
-export interface SizeCapped<T> {
-    /** A prefix of `items`, shorter exactly when `droppedForSize > 0`. */
-    readonly shown: readonly T[];
-    /** How many trailing items this call dropped — on top of whatever `capped()` already dropped
-     *  for `limit` before this ran. Zero means the `limit`-capped list already fit. */
-    readonly droppedForSize: number;
-}
-/**
- * `fitToBudget`'s common case: a tool whose reply is a fixed scaffold plus one already-`limit`-
- * capped list of self-contained rows, none of which carries a droppable payload of its own — so
- * the only way to shrink is to drop trailing rows, exactly as `applyReplySizeBudget` does for
- * `get_git_diff`'s files, minus the per-row withholding that has nothing to withhold here.
- *
- * `scaffoldBytes` is the serialized cost of everything in `data` except this list (pass `[]` for
- * the list when measuring it) — the caller's to compute, because only it knows its own shape.
- * Never assumes it can spend the whole `budgetBytes` on the list alone.
- */
-export declare function capBySize<T>(items: readonly T[], budgetBytes: number, scaffoldBytes: number): SizeCapped<T>;
-/** The disclosure sentence for `capBySize`'s drop — appended to a tool's other notes only when
- *  `droppedForSize > 0`; a silent drop is exactly the failure `render.ts`'s `fitToBudget` guards
- *  against with `DisclosureError`. */
-export declare function sizeCapNote(noun: string, shownNow: number, shownBefore: number, droppedForSize: number): string;
-//# sourceMappingURL=capped.d.ts.map

package/dist/capped.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"capped.d.ts","sourceRoot":"","sources":["../src/capped.ts"],"names":[],"mappings":"AAAA;;;wGAGwG;AAIxG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,MAAM,CAAC,CAAC;IACvB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;IAC7B;oFACgF;IAChF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC1C;AAED;;gBAEgB;AAChB,wBAAgB,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAKvE;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;IAC7B;uFACmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAS3G;AAED;;sCAEsC;AACtC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAK/G"}

package/dist/capped.js

@@ -1,43 +0,0 @@
-/** `capped(items, limit) → { shown, detail }`, B6's fix. Three tools used to compute a list cut
- *  three different ways; two left `render.ts` filling the gap with a `{shown:-1,total:-1}`
- *  sentinel — worse than nothing, since it passes a presence check and poisons arithmetic. Now the
- *  slice and the fact it happened are computed together, so a tool can't hold one without the other. */
-import { applyReplySizeBudget } from "@descryy/core";
-/** Slices `items` to `limit` and reports the cost in the same call. A negative/fractional `limit`
- *  is treated as zero rather than thrown — defensive only, callers already validate at the schema
- *  boundary. */
-export function capped(items, limit) {
-    const bound = Number.isFinite(limit) && limit > 0 ? Math.floor(limit) : 0;
-    const shown = items.slice(0, bound);
-    if (shown.length >= items.length)
-        return { shown, detail: null };
-    return { shown, detail: { shown: shown.length, total: items.length, more: null } };
-}
-/**
- * `fitToBudget`'s common case: a tool whose reply is a fixed scaffold plus one already-`limit`-
- * capped list of self-contained rows, none of which carries a droppable payload of its own — so
- * the only way to shrink is to drop trailing rows, exactly as `applyReplySizeBudget` does for
- * `get_git_diff`'s files, minus the per-row withholding that has nothing to withhold here.
- *
- * `scaffoldBytes` is the serialized cost of everything in `data` except this list (pass `[]` for
- * the list when measuring it) — the caller's to compute, because only it knows its own shape.
- * Never assumes it can spend the whole `budgetBytes` on the list alone.
- */
-export function capBySize(items, budgetBytes, scaffoldBytes) {
-    const result = applyReplySizeBudget(items, {
-        maxTotalBytes: Math.max(budgetBytes - scaffoldBytes, 0),
-        overheadBytes: 0,
-        sizeOf: (item) => Buffer.byteLength(JSON.stringify(item) ?? "null", "utf8") + 1,
-        hasPayload: () => false,
-        withhold: (item) => item,
-    });
-    return { shown: result.items, droppedForSize: result.droppedCount };
-}
-/** The disclosure sentence for `capBySize`'s drop — appended to a tool's other notes only when
- *  `droppedForSize > 0`; a silent drop is exactly the failure `render.ts`'s `fitToBudget` guards
- *  against with `DisclosureError`. */
-export function sizeCapNote(noun, shownNow, shownBefore, droppedForSize) {
-    return (`${droppedForSize} further ${noun}(s), already within the "limit" cap, were dropped to fit the ` +
-        `reply's overall size budget — ${shownNow} of the ${shownBefore} that limit allowed are shown here.`);
-}
-//# sourceMappingURL=capped.js.map

package/dist/capped.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capped.js","sourceRoot":"","sources":["../src/capped.ts"],"names":[],"mappings":"AAAA;;;wGAGwG;AAExG,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAYrD;;gBAEgB;AAChB,MAAM,UAAU,MAAM,CAAI,KAAmB,EAAE,KAAa;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AACrF,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAI,KAAmB,EAAE,WAAmB,EAAE,aAAqB;IAC1F,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE;QACzC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,aAAa,EAAE,CAAC,CAAC;QACvD,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;QAC/E,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;QACvB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;KACzB,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;AACtE,CAAC;AAED;;sCAEsC;AACtC,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,WAAmB,EAAE,cAAsB;IACrG,OAAO,CACL,GAAG,cAAc,YAAY,IAAI,+DAA+D;QAChG,iCAAiC,QAAQ,WAAW,WAAW,qCAAqC,CACrG,CAAC;AACJ,CAAC"}

package/dist/credential-store.d.ts

@@ -1,22 +0,0 @@
-import type { CredentialStoreLike } from "./scenarios/index.ts";
-export interface CredentialStoreOptions {
-    /** Overrides the documented default (`~/.descry/credentials`) — for isolation in a test,
-     *  never in production use, where the shared, documented location is the point: a
-     *  credential stored once via `descry credential set` must be the same store a later
-     *  `descry-mcp` process reads. */
-    readonly baseDir?: string;
-}
-/** The full three-method shape (`store`/`retrieve`/`delete`) — `CredentialStoreLike` only
- *  needs `retrieve` for a scenario replay, but `descry credential set` needs `store` too, and
- *  both callers share one factory rather than each constructing `EncryptedFileCredentialStore`
- *  directly. */
-export interface WritableCredentialStore extends CredentialStoreLike {
-    store(credentialRef: string, secret: string): Promise<void>;
-    delete(credentialRef: string): Promise<void>;
-}
-/** Constructs the real, at-rest credential store — AES-256-GCM file backing, documented
- *  default location. Every real `descry-mcp` process calls this once at startup
- *  (`bin/descry-mcp.ts`) and sets it on the `Session`; `descry credential set` calls it to
- *  write into the exact same store. */
-export declare function createDefaultCredentialStore(options?: CredentialStoreOptions): WritableCredentialStore;
-//# sourceMappingURL=credential-store.d.ts.map

package/dist/credential-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-store.d.ts","sourceRoot":"","sources":["../src/credential-store.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC;;;sCAGkC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;gBAGgB;AAChB,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED;;;uCAGuC;AACvC,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,uBAAuB,CAEtG"}

package/dist/credential-store.js

@@ -1,33 +0,0 @@
-/**
- * The real credential store a running `descry-mcp` server uses, not a test double.
- *
- * `Session.credentialStore` (`session.ts`) has been settable since the round that added
- * `${credential:NAME}` scenario references, but nothing outside a test ever set it — every
- * real server left it `undefined`, so `${credential:...}` refused unconditionally no matter
- * what a person had stored. RG-1(4)'s remaining gap.
- *
- * `descry-runtime`'s `EncryptedFileCredentialStore` (`@descryy/runtime-environment-profile`,
- * already one of this package's nine runtime dependencies — see `descry-core`'s CLAUDE.md,
- * "Repo split") is the store: AES-256-GCM at rest, one file per credential named by the
- * SHA-256 hash of its ref, key at `<baseDir>/master.key`, both directory and key chmod'd
- * owner-only. Documented default location: `~/.descry/credentials` (`homedir()`, joined with
- * `.descry/credentials` — see that package's own header for why this is a disclosed fallback
- * rather than a real OS keychain, DEC-270). `baseDir` is exposed here, not hidden, so a test —
- * or a future caller with a reason to isolate the store — can point it elsewhere without
- * reaching past this module into the runtime package directly.
- *
- * This module is the one place `@descryy/mcp` constructs the real store; `bin/descry-mcp.ts`
- * is the one place a real server calls it. `@descryy/cli`'s `descry credential set` (
- * `packages/cli/src/commands/credential.ts`) calls it too, through this package's own export
- * surface (`index.ts`) rather than adding a second, redundant dependency on the runtime
- * package for a CLI that otherwise has no reason to know it exists.
- */
-import { EncryptedFileCredentialStore } from "@descryy/runtime-environment-profile";
-/** Constructs the real, at-rest credential store — AES-256-GCM file backing, documented
- *  default location. Every real `descry-mcp` process calls this once at startup
- *  (`bin/descry-mcp.ts`) and sets it on the `Session`; `descry credential set` calls it to
- *  write into the exact same store. */
-export function createDefaultCredentialStore(options) {
-    return new EncryptedFileCredentialStore(options);
-}
-//# sourceMappingURL=credential-store.js.map