@hover-dev/core 0.16.0 → 0.18.0

package/dist/plugin-api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-api.d.ts","sourceRoot":"","sources":["../src/plugin-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC;AAChC,eAAO,MAAM,mBAAmB,EAAE,eAAmB,CAAC;AAMtD,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;+BAE2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;gEAC4D;IAC5D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;qDAKiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC;gDAC4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;8DAC0D;IAC1D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;iFAC6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;2EACuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;yDAEqD;IACrD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb;uDACmD;IACnD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAMD,MAAM,WAAW,cAAc;IAC7B;sEACkE;IAClE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,gBAAgB;IAC/B;;yBAEqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,SAAS,EAAE,cAAc,CAAC;CAC3B;AAED;;2EAE2E;AAC3E,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,MAAM,EAAE,MAAM,CAAC;IACf;6DACyD;IACzD,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACnE;;;;;sDAKkD;IAClD,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAChE;AAED;oDACoD;AACpD,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;kDAMkD;AAClD,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD;oEACgE;IAChE,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACnE;sCACkC;IAClC,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAChE;AAED;gEACgE;AAChE,MAAM,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,uBAAuB,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAMD,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,UAAU,EAAE,eAAe,CAAC;IAE5B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IAEb,uDAAuD;IACvD,IAAI,CAAC,EAAE,eAAe,CAAC;IAEvB,qEAAqE;IACrE,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAEpC,uDAAuD;IACvD,WAAW,CAAC,EAAE,sBAAsB,CAAC;IAErC;+BAC2B;IAC3B,qBAAqB,CAAC,EAAE,+BAA+B,EAAE,CAAC;IAE1D;;0DAEsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;;;oDAQgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;6BAOyB;IACzB,YAAY,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAExC,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC;;4EAEwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd;2EACuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;oEACgE;IAChE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;4DAGwD;IACxD,MAAM,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7F;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,GAAG,IAAI,EAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,mBAAmB,GAC5C,CAAC,IAAI,EAAE,KAAK,KAAK,mBAAmB,CAYtC"}

package/dist/plugin-api.js

@@ -1,52 +0,0 @@
-/**
- * Hover plugin API — the public contract third-party packages target.
- *
- * Plugins are *mostly declarative*: they ship a manifest describing what
- * resources they contribute (a mode, MCP servers, Chrome flags, agent
- * prompt fragments, widget event schemas). For genuinely time-bound work
- * — booting a sidecar like mockttp when a mode activates, tearing it down
- * when the mode deactivates or the service shuts down — they register
- * namespaced lifecycle hooks.
- *
- * Patterned after Astro Integrations (declarative manifest + namespaced
- * hooks: `astro:config:setup` etc). The `apiVersion` literal lets us
- * evolve the manifest and reject mismatched plugins at load time with a
- * clear error rather than silent breakage.
- *
- * Stability:
- *   - `apiVersion: 1` is what this file declares; breaking changes bump.
- *   - Adding new optional fields or new hook names is non-breaking.
- *   - Plugin authors should import only from this module; deep imports
- *     into `@hover-dev/core` internals are not part of the contract.
- */
-export const CURRENT_API_VERSION = 1;
-// ──────────────────────────────────────────────────────────────────────
-// Author helper
-// ──────────────────────────────────────────────────────────────────────
-/**
- * Branded factory that wraps a plugin manifest factory. The wrapper
- * - asserts `apiVersion` matches this core's version at construction time
- *   (catches authors who copy-pasted from a tutorial for a different core),
- * - returns a `(opts) => manifest` so call sites read `securityMode()` /
- *   `perfMode({ sampleHz: 100 })` uniformly.
- *
- * Use:
- *
- *   export default defineHoverPlugin<MyOpts>((opts) => ({
- *     apiVersion: 1,
- *     name: '@hover-dev/security',
- *     mode: { id: 'security', label: 'Security testing' },
- *     ...
- *   }));
- */
-export function defineHoverPlugin(factory) {
-    return (opts) => {
-        const manifest = factory(opts);
-        if (manifest.apiVersion !== CURRENT_API_VERSION) {
-            throw new Error(`[hover] plugin "${manifest.name}" targets apiVersion ` +
-                `${String(manifest.apiVersion)} but this Hover supports ` +
-                `${CURRENT_API_VERSION}. Update either the plugin or @hover-dev/core.`);
-        }
-        return manifest;
-    };
-}

package/dist/runSession.d.ts

@@ -1,42 +0,0 @@
-import type { InvokeEvent } from './agents/types.js';
-import type { SkillStep } from './skills/writeSkill.js';
-export interface RunSessionOptions {
-    prompt: string;
-    agentId: string;
-    /** CDP URL of the debug Chrome the agent drives. Required unless `mcpConfig`
-     *  is supplied (the service passes a pre-built config; the CLI passes this). */
-    cdpUrl?: string;
-    model?: string;
-    maxBudgetUsd?: number;
-    /** Optional model API key, injected into the spawned CLI's env. */
-    apiKey?: string;
-    /** Agent cwd (project root) — where Claude Code reads CLAUDE.md and where a
-     *  `--save` / re-record writes the spec. Defaults to the process cwd. */
-    cwd?: string;
-    /** Namespaces the temp MCP config filename. Defaults to 51789. */
-    port?: number;
-    signal?: AbortSignal;
-    /** Pre-built MCP config path. The service supplies one (with plugin servers);
-     *  when omitted, runSession builds a plugin-free Playwright config from
-     *  `cdpUrl` via resolveMcpConfig. */
-    mcpConfig?: string;
-    /** Extra hard-sandbox allow-list prefixes — e.g. active-mode plugin MCP
-     *  server ids the service contributes. Appended to ['mcp__playwright']. */
-    allowedToolsExtra?: string[];
-    /** Appended to the agent's system prompt (the service folds in cdpHint +
-     *  conventions + plugin additions + a language directive; the CLI omits it). */
-    appendSystemPrompt?: string;
-    /** Resume an existing agent session (a follow-up turn). */
-    sessionId?: string;
-}
-export interface RunSessionResult {
-    /** Captured session as SpecStep[] (`user` → `step`* → `done`), ready to hand
-     *  straight to `writeSpec`. */
-    steps: SkillStep[];
-    /** The agent's final summary, if any. */
-    summary: string;
-    /** True if the run ended in error or was aborted. */
-    isError: boolean;
-}
-export declare function runSession(opts: RunSessionOptions, onEvent: (ev: InvokeEvent) => void): Promise<RunSessionResult>;
-//# sourceMappingURL=runSession.d.ts.map

package/dist/runSession.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runSession.d.ts","sourceRoot":"","sources":["../src/runSession.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGxD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB;oFACgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;6EACyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;yCAEqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+EAC2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;oFACgF;IAChF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B;mCAC+B;IAC/B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,CAAC,EAAE,EAAE,WAAW,KAAK,IAAI,GACjC,OAAO,CAAC,gBAAgB,CAAC,CA4D3B"}

package/dist/runSession.js

@@ -1,81 +0,0 @@
-/**
- * Headless session runner — the invoke + crystallize engine shared by every
- * frontend. The widget reaches it through the WebSocket service; `smoke.ts`
- * and (future) `hover run` call it in-process, no WS server. It spawns the
- * agent against the user's debug Chrome over CDP, streams normalized events to
- * `onEvent`, and accumulates the captured tool calls into a `SpecStep[]` the
- * caller can hand to `writeSpec` — `user` seed → `step` per tool_use → `done`
- * with the final summary (the exact shape the spec pipeline consumes).
- *
- * No WebSocket, no DOM. It drives an *already-running* debug Chrome over CDP;
- * launching Chrome / CDP preflight is the caller's call (the service does it
- * with autoLaunch; the CLI will too). The sandbox (allow/deny tools) mirrors
- * the service exactly, gated on the agent's `sandboxStrength`.
- *
- * The full surface (mcpConfig override, allowedToolsExtra, appendSystemPrompt,
- * sessionId) lets the service delegate to this instead of duplicating the
- * invoke loop; the CLI uses only the small subset (prompt + cdpUrl + model).
- */
-import { invokeAgent } from './agents/invoke.js';
-import { getAgent } from './agents/registry.js';
-import { resolveMcpConfig } from './playwright/resolveMcpConfig.js';
-export async function runSession(opts, onEvent) {
-    const descriptor = getAgent(opts.agentId);
-    const isHardSandbox = descriptor?.sandboxStrength === 'hard';
-    // Seed with a synthetic `user` step so writeSpec's JSDoc `Original prompt:`
-    // line carries the prompt the agent was given (mirrors the service path).
-    const steps = [{ kind: 'user', text: opts.prompt }];
-    let summary = '';
-    let isError = false;
-    const mcpConfig = opts.mcpConfig ??
-        resolveMcpConfig({
-            cdpUrl: opts.cdpUrl ?? 'http://localhost:9222',
-            port: opts.port ?? 51789,
-            // Resolve @playwright/mcp from the run's cwd, not the dir the CLI was
-            // invoked from — `hover run --cwd apps/web` must find the MCP package
-            // under the target workspace in a monorepo.
-            cwd: opts.cwd,
-        });
-    for await (const ev of invokeAgent({
-        agentId: opts.agentId,
-        prompt: opts.prompt,
-        sessionId: opts.sessionId,
-        mcpConfig,
-        cwd: opts.cwd,
-        appendSystemPrompt: opts.appendSystemPrompt,
-        // Hard sandbox: only Playwright MCP (+ any active-mode plugin servers) is
-        // callable, every built-in tool denied — a hijacked prompt can't reach the
-        // shell or filesystem. Soft agents (codex, …) enforce their own sandbox via
-        // buildArgs, so the lists stay undefined for them — exactly what the
-        // service does.
-        allowedTools: isHardSandbox
-            ? ['mcp__playwright', ...(opts.allowedToolsExtra ?? [])]
-            : undefined,
-        disallowedTools: isHardSandbox
-            ? (descriptor?.defaultDisallowedTools ? [...descriptor.defaultDisallowedTools] : undefined)
-            : undefined,
-        maxBudgetUsd: opts.maxBudgetUsd,
-        model: opts.model,
-        apiKey: opts.apiKey,
-        signal: opts.signal,
-    })) {
-        onEvent(ev);
-        if (ev.kind === 'tool_use') {
-            steps.push({ kind: 'step', tool: ev.tool, input: ev.input });
-        }
-        else if (ev.kind === 'session_end') {
-            if (ev.summary)
-                summary = ev.summary;
-            if (ev.isError)
-                isError = true;
-        }
-    }
-    // On abort (opts.signal), invokeAgent SIGTERMs the child and no session_end
-    // arrives, so the error flag above never gets set. Honour the doc contract
-    // ("True if the run ended in error or was aborted") by flipping it here.
-    if (opts.signal?.aborted)
-        isError = true;
-    if (summary)
-        steps.push({ kind: 'done', summary });
-    return { steps, summary, isError };
-}

package/dist/scripts/bench-multi-tab.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=bench-multi-tab.d.ts.map

package/dist/scripts/bench-multi-tab.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bench-multi-tab.d.ts","sourceRoot":"","sources":["../../src/scripts/bench-multi-tab.ts"],"names":[],"mappings":""}

package/dist/scripts/bench-multi-tab.js

@@ -1,192 +0,0 @@
-/**
- * Benchmark agent success rate on the multi-tab "Pay with PayHover" flow.
- *
- * Why this exists — v0.10's central theme is "agent can drive cross-tab
- * flows in the wild." The system-prompt addendum (cdpHint.ts rule 5/6/7)
- * is the lever we're tuning. This script gives us a number to tune
- * against: across N iterations, how often does the agent get from
- * "browse the store" to "Order placed"?
- *
- * Per iteration the agent has to:
- *   1. Browse the e-commerce store, add 1+ items to cart, go to checkout.
- *   2. Fill the shipping form.
- *   3. Pick "Pay with PayHover" (opens a new tab at localhost:5177).
- *   4. Switch to the new tab, fill card number + CVV, click Continue.
- *   5. Wait ~600ms for the simulated 3DS pre-check.
- *   6. Fill the 6-digit OTP (always 123456 in the sandbox).
- *   7. Click Confirm. The provider tab closes itself.
- *   8. Switch back to the original tab, observe the "Order placed" view.
- *
- * Steps 3, 4, 7, 8 are the failure-prone ones.
- *
- * Assumes:
- *   - Debug Chrome on :9222 (run `pnpm smoke:chrome`).
- *   - e-commerce on :5174 AND payment-provider on :5177 both running
- *     (run `pnpm dev:example:e-commerce` and `pnpm dev:example:payment-provider`
- *     in two terminals before invoking this).
- *
- * Usage:
- *   pnpm --filter @hover-dev/core exec tsx src/scripts/bench-multi-tab.ts [n]
- *   pnpm bench-multi-tab [n]
- *
- * `n` defaults to 5. Per-iteration timeout is 5 minutes — multi-tab flows
- * are slow because the agent does a lot of browser_snapshot calls.
- *
- * Output: per-run pass/fail + final summary (success rate, median wall
- * time, median turns, median cost in $). A/B prompt changes by running
- * once on each branch and comparing.
- */
-import { WebSocket } from 'ws';
-import { startService } from '../service.js';
-const PROMPT = process.env.HOVER_BENCH_PROMPT ??
-    [
-        'Open http://localhost:5174 (Hover Store).',
-        'Add any item to the cart, go to checkout, fill the shipping form with',
-        'realistic values, then choose "Pay with PayHover". A new tab opens at',
-        'the payment provider — switch to it, fill in card 4242 4242 4242 4242',
-        'with CVV 123, click Continue, wait for the OTP step, enter 123456,',
-        'click Confirm. The popup will close. Switch back to the original tab',
-        'and verify the order shows as placed.',
-    ].join(' ');
-const ITERATIONS = Number(process.argv[2] ?? 5);
-const PER_RUN_TIMEOUT_MS = 5 * 60 * 1000;
-async function singleRun(idx) {
-    process.stderr.write(`\n[bench-multi-tab] run ${idx + 1}/${ITERATIONS}\n`);
-    const service = await startService({
-        port: 0,
-        agentId: 'claude',
-        model: 'sonnet',
-        cdpUrl: 'http://localhost:9222',
-        devRoot: process.cwd(),
-    });
-    return new Promise((resolve) => {
-        const ws = new WebSocket(`ws://127.0.0.1:${service.port}`);
-        const t0 = performance.now();
-        let turns = 0;
-        let costUsd = null;
-        let resolved = false;
-        const finish = (result) => {
-            if (resolved)
-                return;
-            resolved = true;
-            try {
-                ws.close(1000);
-            }
-            catch { /* already closed */ }
-            service.close().finally(() => resolve(result));
-        };
-        const timeout = setTimeout(() => {
-            finish({
-                ok: false,
-                wallMs: performance.now() - t0,
-                turns,
-                costUsd,
-                reason: `timed out after ${PER_RUN_TIMEOUT_MS / 1000}s`,
-            });
-        }, PER_RUN_TIMEOUT_MS);
-        ws.on('open', () => {
-            ws.send(JSON.stringify({ type: 'command', payload: { text: PROMPT } }));
-        });
-        ws.on('message', (raw) => {
-            let msg;
-            try {
-                msg = JSON.parse(raw.toString());
-            }
-            catch {
-                return;
-            }
-            if (msg.type !== 'event')
-                return;
-            const ev = msg.payload;
-            if (ev.kind === 'tool_use') {
-                turns += 1;
-                if (process.env.HOVER_BENCH_VERBOSE === '1') {
-                    const ev2 = ev;
-                    process.stderr.write(`    [turn ${turns}] ${ev2.name ?? '<tool>'}\n`);
-                }
-            }
-            if (ev.kind === 'session_end') {
-                clearTimeout(timeout);
-                const evAny = ev;
-                if (typeof evAny.costUsd === 'number')
-                    costUsd = evAny.costUsd;
-                finish({
-                    ok: !evAny.isError,
-                    wallMs: performance.now() - t0,
-                    turns,
-                    costUsd,
-                    reason: evAny.isError ? 'agent reported error' : undefined,
-                });
-            }
-        });
-        ws.on('error', (err) => {
-            clearTimeout(timeout);
-            finish({
-                ok: false,
-                wallMs: performance.now() - t0,
-                turns,
-                costUsd,
-                reason: `WS error: ${err.message}`,
-            });
-        });
-    });
-}
-function median(xs) {
-    if (xs.length === 0)
-        return 0;
-    const sorted = [...xs].sort((a, b) => a - b);
-    const mid = Math.floor(sorted.length / 2);
-    return sorted.length % 2 === 0
-        ? (sorted[mid - 1] + sorted[mid]) / 2
-        : sorted[mid];
-}
-function fmtMs(ms) {
-    return `${(ms / 1000).toFixed(1)}s`;
-}
-function fmtUsd(usd) {
-    return usd == null ? '–' : `$${usd.toFixed(4)}`;
-}
-async function main() {
-    process.stderr.write(`[bench-multi-tab] ${ITERATIONS} iterations, per-run timeout ${PER_RUN_TIMEOUT_MS / 1000}s\n`);
-    process.stderr.write(`[bench-multi-tab] prompt: ${PROMPT.slice(0, 80)}…\n`);
-    const results = [];
-    for (let i = 0; i < ITERATIONS; i++) {
-        try {
-            const r = await singleRun(i);
-            results.push(r);
-            const status = r.ok ? '✓ PASS' : '✗ FAIL';
-            process.stderr.write(`[bench-multi-tab] run ${i + 1}: ${status} · ${fmtMs(r.wallMs)} · ${r.turns} turns · ${fmtUsd(r.costUsd)}${r.reason ? ` · ${r.reason}` : ''}\n`);
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            results.push({ ok: false, wallMs: 0, turns: 0, costUsd: null, reason: msg });
-            process.stderr.write(`[bench-multi-tab] run ${i + 1}: ✗ FAIL · setup error · ${msg}\n`);
-        }
-    }
-    const passes = results.filter((r) => r.ok);
-    const successRate = passes.length / results.length;
-    process.stderr.write('\n[bench-multi-tab] summary\n');
-    process.stderr.write(`  success rate: ${(successRate * 100).toFixed(0)}% (${passes.length}/${results.length})\n`);
-    if (passes.length > 0) {
-        process.stderr.write(`  median wall:  ${fmtMs(median(passes.map((r) => r.wallMs)))}\n`);
-        process.stderr.write(`  median turns: ${median(passes.map((r) => r.turns)).toFixed(0)}\n`);
-        const costs = passes.map((r) => r.costUsd).filter((c) => c != null);
-        if (costs.length > 0) {
-            process.stderr.write(`  median cost:  ${fmtUsd(median(costs))}\n`);
-        }
-    }
-    if (passes.length < results.length) {
-        process.stderr.write(`\n  failures:\n`);
-        results.forEach((r, i) => {
-            if (!r.ok)
-                process.stderr.write(`    run ${i + 1}: ${r.reason ?? 'unknown'}\n`);
-        });
-    }
-    // Exit non-zero if EVERY run failed — useful for CI plumbing later. A
-    // partial-pass run still exits 0 so we collect signal across branches.
-    process.exit(passes.length === 0 ? 1 : 0);
-}
-main().catch((err) => {
-    process.stderr.write(`[bench-multi-tab] fatal: ${err instanceof Error ? err.stack ?? err.message : String(err)}\n`);
-    process.exit(1);
-});

package/dist/scripts/bench-ttfb.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=bench-ttfb.d.ts.map

package/dist/scripts/bench-ttfb.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bench-ttfb.d.ts","sourceRoot":"","sources":["../../src/scripts/bench-ttfb.ts"],"names":[],"mappings":""}

package/dist/scripts/bench-ttfb.js

@@ -1,127 +0,0 @@
-/**
- * Benchmark "time to first tool_use" for the LLM-driven loop.
- *
- * Assumes:
- *  - A debug Chrome is running on :9222 (start with `pnpm smoke:chrome`).
- *  - A dev server is running so the agent has something to drive
- *    (`pnpm dev:example:basic-app`).
- *
- * Per iteration:
- *  - Start a fresh Hover service (cold — kills any prior service to avoid
- *    cached MCP process state across iterations).
- *  - WS-connect, send a fixed command, mark t0 right before send().
- *  - Mark t1 on the first tool_use event from the agent.
- *  - Report (t1 - t0) in milliseconds. Close service + WS.
- *
- *   pnpm --filter @hover-dev/core exec tsx src/scripts/bench-ttfb.ts <n>
- *
- * `n` defaults to 5. Prints individual timings + median + min/max.
- */
-import { WebSocket } from 'ws';
-import { startService } from '../service.js';
-const PROMPT = process.env.HOVER_BENCH_PROMPT ?? 'Take a snapshot of the page.';
-const ITERATIONS = Number(process.argv[2] ?? 5);
-async function singleRun() {
-    const service = await startService({
-        // Use 0 to let the kernel pick — avoids cross-iter EADDRINUSE races.
-        port: 0,
-        agentId: 'claude',
-        model: 'sonnet',
-        cdpUrl: 'http://localhost:9222',
-        devRoot: process.cwd(),
-    });
-    return new Promise((resolve, reject) => {
-        const ws = new WebSocket(`ws://127.0.0.1:${service.port}`);
-        let t0 = 0;
-        let resolved = false;
-        const timeout = setTimeout(() => {
-            if (!resolved) {
-                ws.close(1000);
-                service.close();
-                reject(new Error('timed out waiting for first tool_use after 60s'));
-            }
-        }, 60_000);
-        ws.on('open', () => {
-            t0 = performance.now();
-            ws.send(JSON.stringify({ type: 'command', payload: { text: PROMPT } }));
-        });
-        ws.on('message', raw => {
-            let msg;
-            try {
-                msg = JSON.parse(raw.toString());
-            }
-            catch {
-                return;
-            }
-            if (process.env.HOVER_BENCH_VERBOSE === '1') {
-                process.stderr.write(`    [event] ${raw.toString().slice(0, 200)}\n`);
-            }
-            if (msg.type !== 'event')
-                return;
-            const ev = msg.payload;
-            if (ev.kind === 'tool_use' && !resolved) {
-                const t1 = performance.now();
-                const ms = t1 - t0;
-                resolved = true;
-                clearTimeout(timeout);
-                ws.close(1000);
-                service.close().finally(() => resolve(ms));
-            }
-            if (ev.kind === 'session_end' && !resolved) {
-                // Ran without any tool_use — agent went text-only or errored.
-                // Reject so the bench surfaces the issue instead of recording
-                // a misleadingly tiny "first tool_use" timing.
-                resolved = true;
-                clearTimeout(timeout);
-                const evAny = ev;
-                const reason = evAny.isError ? 'session_end (error)' : 'session_end without tool_use';
-                ws.close(1000);
-                service.close().finally(() => reject(new Error(reason)));
-            }
-        });
-        ws.on('error', err => {
-            if (resolved)
-                return;
-            resolved = true;
-            clearTimeout(timeout);
-            service.close().finally(() => reject(err));
-        });
-    });
-}
-function median(xs) {
-    const sorted = [...xs].sort((a, b) => a - b);
-    const mid = Math.floor(sorted.length / 2);
-    return sorted.length % 2 === 0
-        ? (sorted[mid - 1] + sorted[mid]) / 2
-        : sorted[mid];
-}
-async function main() {
-    console.log(`prompt: ${JSON.stringify(PROMPT)}`);
-    console.log(`iterations: ${ITERATIONS}`);
-    console.log('');
-    const results = [];
-    for (let i = 1; i <= ITERATIONS; i++) {
-        try {
-            const ms = await singleRun();
-            results.push(ms);
-            console.log(`  run ${i}: ${ms.toFixed(0).padStart(5)} ms`);
-        }
-        catch (err) {
-            console.error(`  run ${i}: FAILED — ${err instanceof Error ? err.message : String(err)}`);
-        }
-        // Small gap between runs so any process-cleanup tail can flush.
-        await new Promise(r => setTimeout(r, 500));
-    }
-    if (results.length === 0) {
-        console.error('\nNo successful runs.');
-        process.exit(1);
-    }
-    console.log('');
-    console.log(`min:    ${Math.min(...results).toFixed(0)} ms`);
-    console.log(`median: ${median(results).toFixed(0)} ms`);
-    console.log(`max:    ${Math.max(...results).toFixed(0)} ms`);
-}
-main().catch(err => {
-    console.error(err);
-    process.exit(1);
-});

package/dist/scripts/start-chrome.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=start-chrome.d.ts.map

package/dist/scripts/start-chrome.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"start-chrome.d.ts","sourceRoot":"","sources":["../../src/scripts/start-chrome.ts"],"names":[],"mappings":""}

package/dist/scripts/start-chrome.js

@@ -1,23 +0,0 @@
-#!/usr/bin/env node
-/**
- * "Start debug Chrome on port 9222" CLI.
- *
- * Two entry points:
- *   - Repo dev:    `pnpm smoke:chrome`           → tsx src/scripts/start-chrome.ts
- *   - npm consumer: `pnpm exec hover-chrome`     → dist/scripts/start-chrome.js
- *                  (or `npx hover-chrome`, bin exposed by vite-plugin-hover)
- *
- * All actual launch logic lives in ../playwright/launchChrome.ts.
- */
-import { launchDebugChrome } from '../playwright/launchChrome.js';
-const result = await launchDebugChrome();
-if (!result.ok) {
-    console.error(`[hover:chrome] ${result.reason}`);
-    process.exit(1);
-}
-if (result.alreadyRunning) {
-    console.log(`[hover:chrome] already listening on ${result.port}`);
-}
-else {
-    console.log(`[hover:chrome] ready on ${result.port} (data-dir=${result.userDataDir})`);
-}

package/dist/service/cdpHandlers.d.ts

@@ -1,44 +0,0 @@
-/**
- * CDP-related WebSocket message handlers.
- *
- *   check-cdp     → checkCdpStatus → emit cdp-status
- *   launch-chrome → emit "launching" placeholder → launchDebugChrome →
- *                   re-check status → emit cdp-status
- *   focus-debug   → focusDebugTab → no message on success (the widget the
- *                   user is about to focus runs its own check-cdp anyway)
- *
- * Extracted from service.ts during the v0.2.x refactor pass so the main
- * file can be a thin orchestrator.
- */
-import type { WebSocket } from 'ws';
-import { type LaunchOptions } from '../playwright/launchChrome.js';
-import { type ClientMessage } from './types.js';
-/** Extra launch options surfaced from the active mode (security plugin
- *  needs a resident proxy + spki). When none are set, behaviour is identical
- *  to pre-v0.7 normal-mode launch. */
-export type LaunchExtras = Pick<LaunchOptions, 'proxy'>;
-/**
- * "Is this widget running inside the debug Chrome?" The widget asks this on
- * connect (and after every status-changing event) so it can render itself as
- * either:
- *   - same-window  → normal, drives the page
- *   - wrong-window → disabled, with a "use the other window" notice
- *   - no-cdp       → enabled but click triggers launch-chrome instead
- */
-export declare function handleCheckCdp(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
-/**
- * Launch a debug Chrome navigated to `pageUrl`, then re-check status. The
- * re-check usually returns 'wrong-window' (because the widget asking is in
- * the user's regular Chrome, not the freshly-launched one) — the widget then
- * displays the "use the other window" state.
- */
-export declare function handleLaunchChrome(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
-/**
- * bringToFront the debug-Chrome tab matching `pageUrl`'s origin (or open one
- * if none exists). Used by the wrong-window UI's "switch to debug Chrome"
- * button. Doesn't return cdp-status — bringToFront doesn't change anything
- * the widget cares about, and the widget the user is about to focus is a
- * different page (and will run its own check-cdp on its own ws connection).
- */
-export declare function handleFocusDebug(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
-//# sourceMappingURL=cdpHandlers.d.ts.map

package/dist/service/cdpHandlers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cdpHandlers.d.ts","sourceRoot":"","sources":["../../src/service/cdpHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD;;sCAEsC;AACtC,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf"}