@descryy/mcp 0.5.0 → 0.7.0

package/dist/tools/browser-save-scenario.js

@@ -1,34 +1,11 @@
 /**
- * `browser_save_scenario` — an explored session becomes a durable, repeatable
- * scenario.
- *
- * ## Everything goes out through `writeScenario`
- *
- * There is deliberately no private path to disk here. `writeScenario`
- * validates on the way *out* as well as in, and that is not redundant: a
- * scenario is written once and read on every push afterwards, so a fault saved
- * today surfaces during a check somebody is waiting on, long after the session
- * that could have explained it is gone. A tool that serialized its own JSON
- * would be a second writer with a first writer's rules, and the second one is
- * the one that ships a file nothing can read.
- *
- * ## A step carries no ref, and this schema offers no way to send one
- *
- * The ref refusal is enforced twice on purpose. The format module rejects a
- * step carrying a `ref` **by name**, with the reason in the message; this
- * schema does not declare the field at all. A caller working from a
- * `browser_snapshot` reply has the three durable fields already — every
- * snapshot element carries `role`, `name` and `selector` — so the natural
- * thing to copy is the right thing to store.
- *
- * ## What the session supplies
- *
- * The consented origin (a scenario may not be saved pointing somewhere this
- * session was never allowed to drive), the URL to start from, and the
- * provenance pair. The steps are the caller's: this server has no exploration
- * planner and does not pretend to have recorded intent it never saw.
+ * `browser_save_scenario`: an explored session becomes a durable scenario,
+ * written only through `writeScenario` (validates in and out — no private
+ * disk path here). A step can't carry a `ref`: the schema omits the field entirely and the format module also rejects one by name.
  */
+import { unlink } from "node:fs/promises";
 import { gitHead } from "@descryy/core";
+import { resolveTarget } from "../browser/scenario-resolve.js";
 import { browserAnswer, useSession, withinConsent } from "../browser/tool-support.js";
 import { SCENARIO_SCHEMA_VERSION, scenarioPath, writeScenario } from "../scenarios/index.js";
 import { optionalString, requiredString, ToolInputError } from "./kit.js";
@@ -43,7 +20,13 @@ const TARGET_SCHEMA = {
     properties: {
         role: { type: "string", description: "The element's ARIA role, as browser_snapshot reported it." },
         name: { type: "string", description: "The element's accessible name, as browser_snapshot reported it." },
-        selector: { type: "string", description: "The selector browser_snapshot reported for it." },
+        selector: {
+            type: ["string", "null"],
+            description: "The selector browser_snapshot reported for it, or null when the element carries no id, test " +
+                "attribute or name and its position was the only thing distinguishing it. A null selector cannot be " +
+                "saved — a step naming one is refused, by name, rather than stored to fail at replay. Add a " +
+                "data-testid to the element and re-explore.",
+        },
     },
     required: ["role", "name", "selector"],
     additionalProperties: false,
@@ -126,6 +109,49 @@ const SCHEMA = {
     required: ["sessionId", "name", "steps", "assertions"],
     additionalProperties: false,
 };
+function findNullSelectorTarget(args) {
+    function scan(key, label) {
+        const raw = args[key];
+        if (!Array.isArray(raw))
+            return null;
+        for (const [index, item] of raw.entries()) {
+            if (typeof item !== "object" || item === null)
+                continue;
+            const target = item["target"];
+            if (typeof target !== "object" || target === null)
+                continue;
+            const fields = target;
+            if (fields["selector"] === null) {
+                return {
+                    where: `${label} ${index}`,
+                    role: typeof fields["role"] === "string" ? fields["role"] : "",
+                    name: typeof fields["name"] === "string" ? fields["name"] : "",
+                };
+            }
+        }
+        return null;
+    }
+    return scan("steps", "step") ?? scan("assertions", "assertion");
+}
+/** Every stored target, resolved against a fresh snapshot — makes "validated before written" true for replay, not just serialisation. `writeScenario` only proves the file parses back; it never sees a page. */
+function collectUnresolvedTargets(scenario, freshSnapshot) {
+    const failures = [];
+    scenario.steps.forEach((step, index) => {
+        if (step.target === null)
+            return;
+        const result = resolveTarget(`step ${index}`, step.target, freshSnapshot);
+        if (!result.resolved)
+            failures.push(result.failure.message);
+    });
+    scenario.assertions.forEach((assertion, index) => {
+        if (assertion.target === null)
+            return;
+        const result = resolveTarget(`assertion ${index}`, assertion.target, freshSnapshot);
+        if (!result.resolved)
+            failures.push(result.failure.message);
+    });
+    return failures;
+}
 function readObjectArray(args, key) {
     const raw = args[key];
     if (raw === undefined || raw === null) {
@@ -137,14 +163,7 @@ function readObjectArray(args, key) {
     }
     return raw;
 }
-/**
- * Shape the caller's arguments into a `Scenario` **without validating them**.
- *
- * Deliberate: `writeScenario` is the validator, and a second one here would be
- * a second set of rules to keep in step with the first. Everything a caller
- * got wrong comes back through the format module's own messages, which are the
- * ones the file's future readers will see.
- */
+/** Shapes args into a `Scenario` without validating — `writeScenario` is the validator, so a caller's mistakes surface through its own messages, not a second set of rules here. */
 function shape(args, name, targetUrl, savedAtCommit) {
     const steps = readObjectArray(args, "steps").map((step) => ({
         action: step["action"],
@@ -169,16 +188,7 @@ function shape(args, name, targetUrl, savedAtCommit) {
         assertions,
     };
 }
-/**
- * The commit this scenario was authored against.
- *
- * Provenance only — nothing expires on it and nothing refuses because of it.
- * It exists so a replay failure can say *the scenario was written against a
- * different revision of this application*, which is usually the answer to "why
- * did this break". A directory that is not a git checkout records the empty
- * string and the reply says so, rather than a plausible-looking placeholder
- * that a later reader would try to `git show`.
- */
+/** Provenance only — nothing expires or refuses on it. Says *"written against a different revision"* on replay failure. A non-git directory records "" and says so, rather than a placeholder a reader would try to `git show`. */
 async function commitOf(repoPath) {
     try {
         return await gitHead(repoPath);
@@ -219,10 +229,26 @@ async function run(args, ctx) {
             data: blank(sessionId, name),
         });
     }
+    // B1: an element with no id/test attribute/name comes back with
+    // `selector: null` rather than a fabricated value (rule 2). Refused here,
+    // by name, before reaching the format module's generic message.
+    const nullSelector = findNullSelectorTarget(args);
+    if (nullSelector !== null) {
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `${nullSelector.where}'s target has no stable selector.`,
+            notes: [
+                `The element with role "${nullSelector.role}" and name "${nullSelector.name}" has no stable selector ` +
+                    "— it carries no id, test attribute or name, and its position is the only thing distinguishing it. " +
+                    "Add a data-testid to make it addressable. Nothing was written.",
+            ],
+            data: blank(sessionId, name),
+        });
+    }
     const scenario = shape(args, name, targetUrl, await commitOf(ctx.session.repoPath));
     try {
-        // The one write path. `writeScenario` validates on the way out, so an
-        // artifact that this reader could not read back never reaches disk.
+        // The one write path: `writeScenario` validates on the way out, so an unreadable artifact never reaches disk.
         await writeScenario(ctx.session.repoPath, scenario);
     }
     catch (error) {
@@ -239,6 +265,26 @@ async function run(args, ctx) {
             data: blank(sessionId, name),
         });
     }
+    // The check the description claims: a fresh snapshot of the page just
+    // recorded on, every descriptor re-run through `resolveTarget`.
+    // `writeScenario` can't prove replay works — it never sees a page. Would have caught B1.
+    const freshSnapshot = await entry.page.snapshot();
+    const unresolved = collectUnresolvedTargets(scenario, freshSnapshot);
+    if (unresolved.length > 0) {
+        await unlink(scenarioPath(ctx.session.repoPath, name)).catch(() => { });
+        return browserAnswer({
+            ctx,
+            state: "refused",
+            headline: `Scenario "${name}" was not saved — ${unresolved.length} of its step(s)/assertion(s) do not resolve against the page it was just recorded on.`,
+            notes: [
+                ...unresolved,
+                "Nothing was written. A scenario whose file parses correctly but whose steps do not resolve against " +
+                    "the page it claims to describe is worse than one that was never saved — it looks replayable and " +
+                    "is not.",
+            ],
+            data: blank(sessionId, name),
+        });
+    }
     const path = scenarioPath(ctx.session.repoPath, name);
     return browserAnswer({
         ctx,
@@ -282,17 +328,18 @@ export const browserSaveScenarioTool = {
         "descry/scenarios/ that browser_run_scenario replays and a pre-push check can run with no agent in the " +
         "loop. Steps name their elements by role, name and selector together, never by a snapshot ref, because a " +
         "ref means nothing in a later session. Assertions are required and may be empty; an empty one is stored " +
-        "honestly and replays as unverified rather than passed. The file is validated before it is written, so " +
-        "a scenario that could not be read back is refused now rather than during a check somebody is waiting on.",
+        "honestly and replays as unverified rather than passed. Before this call reports success, every step and " +
+        "assertion is re-resolved against a fresh snapshot of the page it was just recorded on — a scenario whose " +
+        "steps do not actually resolve is refused and deleted now, rather than discovered during a check " +
+        "somebody is waiting on. A step naming an element with no id, test attribute or name is refused too: such " +
+        "an element has no selector that would survive to a later session.",
     class: "action",
     tier: "evidence",
     version: "1.0.0",
     inputSchema: SCHEMA,
     run,
-    // Undefined, for the reason the verbs have and one of its own: this call
-    // writes into the repository the developer already pointed Descry at, in a
-    // path they name, and the session it records was confirmed at
-    // browser_start_session.
+    // Undefined: this writes into the repo the developer already pointed
+    // Descry at, and the session was already confirmed at browser_start_session.
     describeAction: () => undefined,
 };
 //# sourceMappingURL=browser-save-scenario.js.map

package/dist/tools/browser-save-scenario.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-save-scenario.js","sourceRoot":"","sources":["../../src/tools/browser-save-scenario.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,aAAa,EAAiB,MAAM,uBAAuB,CAAC;AAC5G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAyC,MAAM,UAAU,CAAC;AAejH,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,yGAAyG;QACzG,yGAAyG;QACzG,yGAAyG;QACzG,0GAA0G;QAC1G,yGAAyG;QACzG,iFAAiF;IACnF,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2DAA2D,EAAE;QAClG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;QACxG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;KAC5F;IACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;IACtC,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8DAA8D,EAAE;QAC1G,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,+FAA+F;gBAC/F,oGAAoG;gBACpG,yCAAyC;SAC5C;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;QACrG,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,qGAAqG;gBACrG,wEAAwE;SAC3E;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,WAAW,EACT,oGAAoG;gBACpG,4BAA4B;YAC9B,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,sFAAsF,EAAE;oBAC5K,MAAM,EAAE,aAAa;oBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;oBAC7E,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,iGAAiG;4BACjG,gGAAgG;4BAChG,mGAAmG;qBACtG;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD,UAAU,EAAE;YACV,IAAI,EAAE,OAAO;YACb,WAAW,EACT,iGAAiG;gBACjG,gGAAgG;gBAChG,uGAAuG;gBACvG,qGAAqG;gBACrG,uDAAuD;YACzD,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;wBAC1F,WAAW,EACT,kGAAkG;4BAClG,kGAAkG;4BAClG,gGAAgG;4BAChG,+CAA+C;qBAClD;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,iGAAiG;4BACjG,iGAAiG;4BACjG,oEAAoE;qBACvE;oBACD,MAAM,EAAE,aAAa;oBACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;iBAC3G;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,oGAAoG;gBACpG,sGAAsG;gBACtG,8BAA8B;SACjC;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC;IACtD,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,SAAS,eAAe,CAAC,IAA6B,EAAE,GAAW;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CACtB,IAAI,GAAG,+FAA+F;YACpG,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,+BAA+B,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAgC,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,KAAK,CAAC,IAA6B,EAAE,IAAY,EAAE,SAAiB,EAAE,aAAqB;IAClG,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAwC;QAC7D,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAwC;QACvE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAkB;QAC3C,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAkB;KAC9C,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,EAAE,SAAS,CAAC,MAAM,CAA2C;QACjE,SAAS,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,IAAI,CAAkB;QAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAA6C;QACjF,QAAQ,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,IAAI,CAAkB;KAC3D,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,aAAa,EAAE,uBAAuB;QACtC,IAAI;QACJ,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI;QACxD,SAAS;QACT,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,aAAa;QACb,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAgB;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE;gBACL,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK;gBACnB,oGAAoG;oBAClG,YAAY;aACf;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAC/E,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG,SAAS,8CAA8C;YACpE,KAAK,EAAE;gBACL,4CAA4C,KAAK,CAAC,eAAe,sDAAsD;oBACrH,sGAAsG;oBACtG,mCAAmC;aACtC;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC;QACH,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,aAAa,IAAI,kBAAkB;YAC7C,KAAK,EAAE;gBACL,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBACtD,qGAAqG;oBACnG,+FAA+F;oBAC/F,kCAAkC;aACrC;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO,aAAa,CAA0B;QAC5C,GAAG;QACH,QAAQ,EAAE,mBAAmB,IAAI,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,aAAa,QAAQ,CAAC,UAAU,CAAC,MAAM,gBAAgB;QACpH,KAAK,EAAE;YACL,cAAc,IAAI,kFAAkF;gBAClG,2EAA2E;YAC7E,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBAClC,CAAC,CAAC;oBACE,kGAAkG;wBAChG,+FAA+F;wBAC/F,mBAAmB;iBACtB;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,EAAE;gBAC/B,CAAC,CAAC;oBACE,4FAA4F;wBAC1F,oFAAoF;iBACvF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,IAAI,EAAE;YACJ,SAAS;YACT,IAAI;YACJ,IAAI;YACJ,SAAS;YACT,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAChC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;YAC1C,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,aAAa,EAAE,QAAQ,CAAC,aAAa;SACtC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB,EAAE,IAAY;IAC5C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,wCAAwC;IAC/C,WAAW,EACT,gGAAgG;QAChG,wGAAwG;QACxG,0GAA0G;QAC1G,yGAAyG;QACzG,wGAAwG;QACxG,0GAA0G;IAC5G,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,MAAM;IACnB,GAAG;IACH,yEAAyE;IACzE,2EAA2E;IAC3E,8DAA8D;IAC9D,yBAAyB;IACzB,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;CAChC,CAAC"}
+{"version":3,"file":"browser-save-scenario.js","sourceRoot":"","sources":["../../src/tools/browser-save-scenario.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,aAAa,EAAiB,MAAM,uBAAuB,CAAC;AAC5G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAyC,MAAM,UAAU,CAAC;AAejH,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,yGAAyG;QACzG,yGAAyG;QACzG,yGAAyG;QACzG,0GAA0G;QAC1G,yGAAyG;QACzG,iFAAiF;IACnF,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2DAA2D,EAAE;QAClG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;QACxG,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YACxB,WAAW,EACT,8FAA8F;gBAC9F,qGAAqG;gBACrG,6FAA6F;gBAC7F,4CAA4C;SAC/C;KACF;IACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;IACtC,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8DAA8D,EAAE;QAC1G,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,+FAA+F;gBAC/F,oGAAoG;gBACpG,yCAAyC;SAC5C;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;QACrG,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,qGAAqG;gBACrG,wEAAwE;SAC3E;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,WAAW,EACT,oGAAoG;gBACpG,4BAA4B;YAC9B,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,sFAAsF,EAAE;oBAC5K,MAAM,EAAE,aAAa;oBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;oBAC7E,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,iGAAiG;4BACjG,gGAAgG;4BAChG,mGAAmG;qBACtG;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD,UAAU,EAAE;YACV,IAAI,EAAE,OAAO;YACb,WAAW,EACT,iGAAiG;gBACjG,gGAAgG;gBAChG,uGAAuG;gBACvG,qGAAqG;gBACrG,uDAAuD;YACzD,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;wBAC1F,WAAW,EACT,kGAAkG;4BAClG,kGAAkG;4BAClG,gGAAgG;4BAChG,+CAA+C;qBAClD;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,iGAAiG;4BACjG,iGAAiG;4BACjG,oEAAoE;qBACvE;oBACD,MAAM,EAAE,aAAa;oBACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;iBAC3G;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,oGAAoG;gBACpG,sGAAsG;gBACtG,8BAA8B;SACjC;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC;IACtD,oBAAoB,EAAE,KAAK;CACnB,CAAC;AASX,SAAS,sBAAsB,CAAC,IAA6B;IAC3D,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YACxD,MAAM,MAAM,GAAI,IAAgC,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC5D,MAAM,MAAM,GAAG,MAAiC,CAAC;YACjD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChC,OAAO;oBACL,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,EAAE;oBAC1B,IAAI,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;oBAC9D,IAAI,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,iNAAiN;AACjN,SAAS,wBAAwB,CAAC,QAAkB,EAAE,aAA2B;IAC/E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC/C,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO;QACtC,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,KAAK,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAA6B,EAAE,GAAW;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CACtB,IAAI,GAAG,+FAA+F;YACpG,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,+BAA+B,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAgC,CAAC;AAC1C,CAAC;AAED,oLAAoL;AACpL,SAAS,KAAK,CAAC,IAA6B,EAAE,IAAY,EAAE,SAAiB,EAAE,aAAqB;IAClG,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAwC;QAC7D,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAwC;QACvE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAkB;QAC3C,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAkB;KAC9C,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,EAAE,SAAS,CAAC,MAAM,CAA2C;QACjE,SAAS,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,IAAI,CAAkB;QAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAA6C;QACjF,QAAQ,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,IAAI,CAAkB;KAC3D,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,aAAa,EAAE,uBAAuB;QACtC,IAAI;QACJ,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI;QACxD,SAAS;QACT,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,aAAa;QACb,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC;AAED,mOAAmO;AACnO,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAgB;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE;gBACL,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK;gBACnB,oGAAoG;oBAClG,YAAY;aACf;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAC/E,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG,SAAS,8CAA8C;YACpE,KAAK,EAAE;gBACL,4CAA4C,KAAK,CAAC,eAAe,sDAAsD;oBACrH,sGAAsG;oBACtG,mCAAmC;aACtC;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG,YAAY,CAAC,KAAK,mCAAmC;YAClE,KAAK,EAAE;gBACL,0BAA0B,YAAY,CAAC,IAAI,eAAe,YAAY,CAAC,IAAI,2BAA2B;oBACpG,oGAAoG;oBACpG,gEAAgE;aACnE;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC;QACH,8GAA8G;QAC9G,MAAM,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,aAAa,IAAI,kBAAkB;YAC7C,KAAK,EAAE;gBACL,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBACtD,qGAAqG;oBACnG,+FAA+F;oBAC/F,kCAAkC;aACrC;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,gEAAgE;IAChE,yFAAyF;IACzF,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvE,OAAO,aAAa,CAA0B;YAC5C,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,aAAa,IAAI,qBAAqB,UAAU,CAAC,MAAM,uFAAuF;YACxJ,KAAK,EAAE;gBACL,GAAG,UAAU;gBACb,qGAAqG;oBACnG,kGAAkG;oBAClG,SAAS;aACZ;YACD,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO,aAAa,CAA0B;QAC5C,GAAG;QACH,QAAQ,EAAE,mBAAmB,IAAI,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,aAAa,QAAQ,CAAC,UAAU,CAAC,MAAM,gBAAgB;QACpH,KAAK,EAAE;YACL,cAAc,IAAI,kFAAkF;gBAClG,2EAA2E;YAC7E,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBAClC,CAAC,CAAC;oBACE,kGAAkG;wBAChG,+FAA+F;wBAC/F,mBAAmB;iBACtB;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,EAAE;gBAC/B,CAAC,CAAC;oBACE,4FAA4F;wBAC1F,oFAAoF;iBACvF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,IAAI,EAAE;YACJ,SAAS;YACT,IAAI;YACJ,IAAI;YACJ,SAAS;YACT,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAChC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;YAC1C,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,aAAa,EAAE,QAAQ,CAAC,aAAa;SACtC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB,EAAE,IAAY;IAC5C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,wCAAwC;IAC/C,WAAW,EACT,gGAAgG;QAChG,wGAAwG;QACxG,0GAA0G;QAC1G,yGAAyG;QACzG,0GAA0G;QAC1G,2GAA2G;QAC3G,kGAAkG;QAClG,2GAA2G;QAC3G,mEAAmE;IACrE,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,MAAM;IACnB,GAAG;IACH,qEAAqE;IACrE,6EAA6E;IAC7E,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;CAChC,CAAC"}

package/dist/tools/browser-snapshot.d.ts

@@ -1,26 +1,7 @@
 /**
- * `browser_snapshot` — what is on the page, as refs an action can take.
- *
- * ## Why this tool implements `fitToBudget` from its first commit
- *
- * A real accessibility tree is tens of thousands of bytes. `get_git_diff`
- * shipped without an aggregate reply ceiling, returned 228,860 characters on
- * an ordinary branch diff, and was rejected by the host before the caller saw
- * any of it; the fix that followed bounded patch text and still failed at
- * 84,516, because a reply is not only patch text. That lesson was paid for
- * twice, and a brand-new tool whose payload grows with the user's application
- * is precisely where it would be paid for a third time.
- *
- * So the budget hook is here from day one, and the test asserts the
- * serialized `CallToolResult` rather than asserting that a cap ran.
- *
- * ## `totalElements` is never the capped number
- *
- * A snapshot that quietly returned the first forty elements would teach a
- * calling agent that the page has forty elements. It would then conclude the
- * button it needs is absent, which is a wrong answer produced by a correct
- * tool. So the uncapped count is always present and always the real one, and
- * a shortened reply says so in a note.
+ * `browser_snapshot`: page elements as refs, budget-fit from day one —
+ * `get_git_diff` hit 228,860 then 84,516 chars unbounded, paid for twice.
+ * `totalElements` is always the real, uncapped count — never confused with a shortened list.
  */
 import type { BrowserEvidenceReport } from "../browser/evidence.ts";
 import { type BrowserGraphWrite } from "../browser/graph-write.ts";
@@ -32,29 +13,15 @@ export interface BrowserPageData {
     readonly url: string;
     readonly title: string;
     readonly elements: readonly SnapshotElement[];
-    /**
-     * How many elements the page has. **Never the number in `elements`** when
-     * the two differ — that is the whole point of carrying it.
-     */
+    /** How many elements the page has — never the number in `elements` when they differ; that's the whole point. */
     readonly totalElements: number;
     readonly evidence: BrowserEvidenceReport;
     /** Graph nodes this page's own requests reached, and any R4 edges witnessed. §5.3's "any graph node reached, surfaced in the same reply". */
     readonly graph: BrowserGraphWrite;
 }
-/**
- * What `browser_snapshot` returns. An alias of the shared page shape, so
- * `browser_navigate` — which answers the same question — cannot drift from it.
- */
+/** What `browser_snapshot` returns — aliased so `browser_navigate` (same question) can't drift from it. */
 export type BrowserSnapshotData = BrowserPageData;
-/**
- * Shrink by dropping elements from the end of the window, never by dropping
- * the count or the evidence.
- *
- * Evidence stays because it is the part a caller cannot re-request by paging —
- * the observations were drained when this reply was built, and a second
- * snapshot would return a different set. Elements can always be asked for
- * again with `startAt`, so they are what gives way.
- */
+/** Shrinks by dropping elements from the end, never the count or evidence. Evidence can't be re-requested (drained when built); elements can, via `startAt`. */
 export declare function fitSnapshot(data: BrowserSnapshotData, budgetBytes: number): ReplyFit<BrowserSnapshotData>;
 export declare const browserSnapshotTool: ToolDefinition;
 //# sourceMappingURL=browser-snapshot.d.ts.map

package/dist/tools/browser-snapshot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-snapshot.d.ts","sourceRoot":"","sources":["../../src/tools/browser-snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAqD,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,6IAA6I;IAC7I,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,eAAe,CAAC;AA6ElD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAwBzG;AAED,eAAO,MAAM,mBAAmB,EAAE,cAajC,CAAC"}
+{"version":3,"file":"browser-snapshot.d.ts","sourceRoot":"","sources":["../../src/tools/browser-snapshot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAqD,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,gHAAgH;IAChH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,6IAA6I;IAC7I,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AAED,2GAA2G;AAC3G,MAAM,MAAM,mBAAmB,GAAG,eAAe,CAAC;AA6ElD,gKAAgK;AAChK,wBAAgB,WAAW,CAAC,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAwBzG;AAED,eAAO,MAAM,mBAAmB,EAAE,cAajC,CAAC"}

package/dist/tools/browser-snapshot.js

@@ -1,26 +1,7 @@
 /**
- * `browser_snapshot` — what is on the page, as refs an action can take.
- *
- * ## Why this tool implements `fitToBudget` from its first commit
- *
- * A real accessibility tree is tens of thousands of bytes. `get_git_diff`
- * shipped without an aggregate reply ceiling, returned 228,860 characters on
- * an ordinary branch diff, and was rejected by the host before the caller saw
- * any of it; the fix that followed bounded patch text and still failed at
- * 84,516, because a reply is not only patch text. That lesson was paid for
- * twice, and a brand-new tool whose payload grows with the user's application
- * is precisely where it would be paid for a third time.
- *
- * So the budget hook is here from day one, and the test asserts the
- * serialized `CallToolResult` rather than asserting that a cap ran.
- *
- * ## `totalElements` is never the capped number
- *
- * A snapshot that quietly returned the first forty elements would teach a
- * calling agent that the page has forty elements. It would then conclude the
- * button it needs is absent, which is a wrong answer produced by a correct
- * tool. So the uncapped count is always present and always the real one, and
- * a shortened reply says so in a note.
+ * `browser_snapshot`: page elements as refs, budget-fit from day one —
+ * `get_git_diff` hit 228,860 then 84,516 chars unbounded, paid for twice.
+ * `totalElements` is always the real, uncapped count — never confused with a shortened list.
  */
 import { browserAnswer, observeAndCorrelate, useSession } from "../browser/tool-support.js";
 import { NO_GRAPH_WRITE } from "../browser/graph-write.js";
@@ -90,15 +71,7 @@ async function run(args, ctx) {
         fitToBudget: (budgetBytes) => fitSnapshot(data, budgetBytes),
     });
 }
-/**
- * Shrink by dropping elements from the end of the window, never by dropping
- * the count or the evidence.
- *
- * Evidence stays because it is the part a caller cannot re-request by paging —
- * the observations were drained when this reply was built, and a second
- * snapshot would return a different set. Elements can always be asked for
- * again with `startAt`, so they are what gives way.
- */
+/** Shrinks by dropping elements from the end, never the count or evidence. Evidence can't be re-requested (drained when built); elements can, via `startAt`. */
 export function fitSnapshot(data, budgetBytes) {
     const fits = (elements) => Buffer.byteLength(JSON.stringify({ ...data, elements }), "utf8") <= budgetBytes;
     if (fits(data.elements))

package/dist/tools/browser-snapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-snapshot.js","sourceRoot":"","sources":["../../src/tools/browser-snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,cAAc,EAA0B,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAyC,MAAM,UAAU,CAAC;AAyBlG,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qDAAqD;SACnE;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,WAAW,EACT,kGAAkG;gBAClG,gGAAgG;gBAChG,2CAA2C;SAC9C;QACD,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,0GAA0G;SACxH;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,CAAC;IACvB,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,KAAK,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAgB;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,aAAa,CAAsB;YACxC,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;SAClI,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,WAAW,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,aAAa,yBAAyB,OAAO,IAAI;YACzF,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAwB;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,QAAQ;QAClB,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,QAAQ;QACR,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC;IAEF,OAAO,aAAa,CAAsB;QACxC,GAAG;QACH,QAAQ,EAAE,GAAG,QAAQ,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,aAAa,YAAY;QACvF,KAAK;QACL,IAAI;QACJ,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAyB,EAAE,WAAmB;IACxE,MAAM,IAAI,GAAG,CAAC,QAAoC,EAAW,EAAE,CAC7D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC;IAElF,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEpD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAChC,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC;;YAC5C,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;QACjC,KAAK,EAAE;YACL,oDAAoD,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,aAAa,iBAAiB;gBACvG,yFAAyF,IAAI,CAAC,MAAM,GAAG;gBACvG,qBAAqB;SACxB;QACD,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,sGAAsG;QACtG,yGAAyG;QACzG,wGAAwG;QACxG,qEAAqE;IACvE,KAAK,EAAE,eAAe;IACtB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,MAAM;IACnB,GAAG;CACJ,CAAC"}
+{"version":3,"file":"browser-snapshot.js","sourceRoot":"","sources":["../../src/tools/browser-snapshot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,cAAc,EAA0B,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAyC,MAAM,UAAU,CAAC;AAmBlG,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qDAAqD;SACnE;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,WAAW,EACT,kGAAkG;gBAClG,gGAAgG;gBAChG,2CAA2C;SAC9C;QACD,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,0GAA0G;SACxH;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,CAAC;IACvB,oBAAoB,EAAE,KAAK;CACnB,CAAC;AAEX,KAAK,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAgB;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,aAAa,CAAsB;YACxC,GAAG;YACH,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YACvB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;SAClI,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,WAAW,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,aAAa,yBAAyB,OAAO,IAAI;YACzF,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAwB;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,QAAQ;QAClB,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,QAAQ;QACR,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC;IAEF,OAAO,aAAa,CAAsB;QACxC,GAAG;QACH,QAAQ,EAAE,GAAG,QAAQ,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,aAAa,YAAY;QACvF,KAAK;QACL,IAAI;QACJ,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED,gKAAgK;AAChK,MAAM,UAAU,WAAW,CAAC,IAAyB,EAAE,WAAmB;IACxE,MAAM,IAAI,GAAG,CAAC,QAAoC,EAAW,EAAE,CAC7D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC;IAElF,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEpD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAChC,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC;;YAC5C,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;QACjC,KAAK,EAAE;YACL,oDAAoD,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,aAAa,iBAAiB;gBACvG,yFAAyF,IAAI,CAAC,MAAM,GAAG;gBACvG,qBAAqB;SACxB;QACD,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,sGAAsG;QACtG,yGAAyG;QACzG,wGAAwG;QACxG,qEAAqE;IACvE,KAAK,EAAE,eAAe;IACtB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,MAAM;IACnB,GAAG;CACJ,CAAC"}

package/dist/tools/browser-start-session.d.ts

@@ -1,27 +1,8 @@
 /**
- * `browser_start_session` — open a real browser against the developer's app.
- *
- * ## Why this one is the gate
- *
- * `DEC-380` puts consent here and nowhere
- * else. This is the call where a target URL is named, so it is the only call
- * where the fact a developer actually approves — *Descry may drive a browser
- * against this application* — can be stated. A per-click confirmation would
- * describe "click ref-14", which is a string the caller supplied one call
- * earlier and can neither evaluate nor be surprised by, and it would train
- * callers to confirm reflexively.
- *
- * The grant is bound to this URL's **origin**. `browser_navigate` refuses to
- * leave it. Without that bound, "drive my local app" would silently become
- * "drive anything".
- *
- * ## Class
- *
- * `action`, unambiguously: this launches a process and points it at a running
- * application. It is the only browser tool that mints a token; the verbs it
- * consents for redeem nothing, because the session they run in has already
- * been confirmed.
- */
+ * `browser_start_session` — opens a real browser (DEC-380: consent lives here only,
+ * bound to the target URL's origin — `browser_navigate` refuses to leave it). Class
+ * `action`: the only browser tool that mints a token; the verbs it consents for
+ * redeem nothing, since the session is already confirmed. */
 import type { BrowserEvidenceReport } from "../browser/evidence.ts";
 import { type BrowserGraphWrite } from "../browser/graph-write.ts";
 import { type ToolDefinition } from "./kit.ts";

package/dist/tools/browser-start-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-start-session.d.ts","sourceRoot":"","sources":["../../src/tools/browser-start-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAOnF,OAAO,EAAmG,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAGhJ,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,mFAAmF;IACnF,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAAC;IAC9E,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AA8RD,eAAO,MAAM,uBAAuB,EAAE,cAsBrC,CAAC"}
+{"version":3,"file":"browser-start-session.d.ts","sourceRoot":"","sources":["../../src/tools/browser-start-session.ts"],"names":[],"mappings":"AAAA;;;;6DAI6D;AAG7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAQnF,OAAO,EAAmG,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAGhJ,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,mFAAmF;IACnF,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAAC;IAC9E,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AA0RD,eAAO,MAAM,uBAAuB,EAAE,cAgCrC,CAAC"}

package/dist/tools/browser-start-session.js

@@ -1,32 +1,14 @@
 /**
- * `browser_start_session` — open a real browser against the developer's app.
- *
- * ## Why this one is the gate
- *
- * `DEC-380` puts consent here and nowhere
- * else. This is the call where a target URL is named, so it is the only call
- * where the fact a developer actually approves — *Descry may drive a browser
- * against this application* — can be stated. A per-click confirmation would
- * describe "click ref-14", which is a string the caller supplied one call
- * earlier and can neither evaluate nor be surprised by, and it would train
- * callers to confirm reflexively.
- *
- * The grant is bound to this URL's **origin**. `browser_navigate` refuses to
- * leave it. Without that bound, "drive my local app" would silently become
- * "drive anything".
- *
- * ## Class
- *
- * `action`, unambiguously: this launches a process and points it at a running
- * application. It is the only browser tool that mints a token; the verbs it
- * consents for redeem nothing, because the session they run in has already
- * been confirmed.
- */
+ * `browser_start_session` — opens a real browser (DEC-380: consent lives here only,
+ * bound to the target URL's origin — `browser_navigate` refuses to leave it). Class
+ * `action`: the only browser tool that mints a token; the verbs it consents for
+ * redeem nothing, since the session is already confirmed. */
 import { CANCELLED_STATE, cancellationHeadline, cancellationNotes } from "../cancellation.js";
 import { browserAnswer, emptyEvidence, observeAndCorrelate } from "../browser/tool-support.js";
 import { NO_GRAPH_WRITE } from "../browser/graph-write.js";
 import { isAbsolute, join } from "node:path";
 import { loadStackParser, StackParserLoadError } from "../browser/stack-parser.js";
+import { checkUrlScheme } from "../browser/url-scheme.js";
 import { optionalBoolean, optionalEnum, optionalString, requiredString, ToolInputError } from "./kit.js";
 const SCHEMA = {
     type: "object",
@@ -96,15 +78,9 @@ const SCHEMA = {
     additionalProperties: false,
 };
 const SAFETY_LEVELS = ["readOnly", "write", "destructiveWithApproval"];
-/**
- * Read the profile, do not re-derive it.
- *
- * Only the two fields this surface actually consults are read; everything
- * else a caller sends is carried by the profile it came from and is none of
- * this tool's business. `additionalProperties: true` on the schema is what
- * lets a caller pass the same object it passes `observe_runtime` rather than
- * trimming a second copy of it.
- */
+/** Reads the profile, doesn't re-derive it — only the 2 fields this surface consults.
+ *  `additionalProperties: true` lets a caller pass the same object it gives
+ *  `observe_runtime` without trimming a second copy. */
 function readProfile(args) {
     const raw = args["environment"];
     if (raw === undefined || raw === null)
@@ -133,13 +109,20 @@ function readStackParserSpec(args) {
 }
 function parseTarget(args) {
     const raw = requiredString(args, "targetUrl");
+    let url;
     try {
-        return new URL(raw);
+        url = new URL(raw);
     }
     catch {
         throw new ToolInputError(`"targetUrl" must be an absolute URL including scheme — got "${raw}". A bare host or path cannot be ` +
             "opened, and cannot be turned into the origin this session's consent is bound to.");
     }
+    // file:/data: (untrusted schemes) resolve to origin "null", collapsing
+    // tool-support.ts's same-origin containment — see url-scheme.ts.
+    const scheme = checkUrlScheme(url);
+    if (!scheme.allowed)
+        throw new ToolInputError(scheme.reason);
+    return url;
 }
 function cancelledBeforeLaunch(ctx, target, safetyLevel) {
     return browserAnswer({
@@ -167,10 +150,9 @@ async function run(args, ctx) {
     const parserSpec = readStackParserSpec(args);
     const documentRoot = optionalString(args, "documentRoot");
     const backend = ctx.session.browserBackend();
-    // Before anything launches. A browser opened for a caller who has already
-    // gone is one nothing will ever close: the session id goes back in a reply
-    // the server suppresses, so no `browser_close_session` can name it and the
-    // five-minute idle reaper is the only thing left that would.
+    // Before anything launches — a browser opened for a caller who's already gone is
+    // one nothing will ever close (its session id never reaches a suppressed reply);
+    // only the 5-minute idle reaper would eventually catch it.
     if (ctx.signal.aborted)
         return cancelledBeforeLaunch(ctx, target, null);
     if (!backend.available) {
@@ -182,10 +164,9 @@ async function run(args, ctx) {
             data: { sessionId: "", url: target.href, title: "", consentedOrigin: target.origin, safetyLevel: null, totalElements: 0, evidence: emptyEvidence(), graph: NO_GRAPH_WRITE },
         });
     }
-    // The parser is loaded before anything launches. A parser that will not
-    // import is a refusal the caller can fix, and finding that out after a
-    // browser is open would mean either tearing it down again or running a
-    // session that quietly cannot write the edge it was opened for.
+    // Parser loaded before anything launches — a bad parser is a fixable refusal here;
+    // discovering it after a browser is open means tearing it down or running a
+    // session that silently can't write the edge it opened for.
     let parser;
     try {
         parser = parserSpec === null ? undefined : await loadStackParser(parserSpec);
@@ -201,10 +182,9 @@ async function run(args, ctx) {
             data: { sessionId: "", url: target.href, title: "", consentedOrigin: target.origin, safetyLevel: null, totalElements: 0, evidence: emptyEvidence(), graph: NO_GRAPH_WRITE },
         });
     }
-    // Trap A, closed here rather than left to a caller to get right silently.
-    // The origin being driven maps to the directory that actually serves its
-    // scripts; `documentRoot` overrides the repository root for exactly the
-    // `public/` case the schema describes.
+    // Closed here rather than left to a caller: the origin driven must map to
+    // the directory actually serving its scripts — `documentRoot` overrides the repo
+    // root for the `public/` case the schema describes.
     const servedFrom = documentRoot === undefined
         ? ctx.session.repoPath
         : isAbsolute(documentRoot)
@@ -223,8 +203,8 @@ async function run(args, ctx) {
     if (!opened.opened) {
         const notes = opened.kind === "atCapacity"
             ? [opened.reason]
-            : // The remedy travels verbatim. A refusal that says "could not launch"
-                // and stops is one the developer has to go and research.
+            : // Remedy travels verbatim — "could not launch" and stopping there is a
+                // refusal the developer has to go research themselves.
                 [opened.message, `Remedy: ${opened.remedy}`, `Expected the browser at ${opened.expectedExecutablePath}.`];
         return browserAnswer({
             ctx,
@@ -234,10 +214,9 @@ async function run(args, ctx) {
             data: { sessionId: "", url: target.href, title: "", consentedOrigin: target.origin, safetyLevel: profile?.safetyLevel ?? null, totalElements: 0, evidence: emptyEvidence(), graph: NO_GRAPH_WRITE },
         });
     }
-    // The race that is actually lost in practice: the caller cancelled while
-    // Chromium was starting, so the launch succeeded on behalf of nobody. This
-    // closes the session it just opened — the one resource this call started,
-    // and the only one it may tear down.
+    // The race actually lost in practice: caller cancelled while Chromium was
+    // starting, so the launch succeeded for nobody. Closes the session just opened
+    // — the one resource this call started, the only one it may tear down.
     if (ctx.signal.aborted) {
         await ctx.session.browserSessions().close(opened.entry.sessionId);
         return cancelledBeforeLaunch(ctx, target, profile?.safetyLevel ?? null);
@@ -298,6 +277,14 @@ export const browserStartSessionTool = {
     run,
     describeAction(args) {
         const target = parseTarget(args);
+        // Same parse the run path uses to enforce the gate (`mutationRefusal` in
+        // `tool-support.ts`) — read here, not re-derived, so what's confirmed matches
+        // what's enforced.
+        const safetyLevel = readProfile(args)?.safetyLevel;
+        if (safetyLevel === "readOnly") {
+            return (`Descry may navigate and snapshot anywhere on ${target.origin}. Clicking, typing and filling will be ` +
+                `refused. It may not leave that origin.`);
+        }
         return (`Launch a browser and open ${target.href}. For as long as the session lives, Descry may navigate, ` +
             `click, type and fill anywhere on ${target.origin} without asking again — including actions that ` +
             "change data in that application. It may not leave that origin.");