@jini-ai/agentic 0.1.0

package/dist/dom/dom-page-driver.js

@@ -0,0 +1,557 @@
+import { AGENT_ELEMENT_ATTRIBUTE, AGENT_LABEL_ATTRIBUTE, AGENT_PAGE_ATTRIBUTE, AGENT_ROLE_ATTRIBUTE, AGENT_ELEMENT_ROLES, resolveHandleSelector, } from '../element-handles.js';
+import { normalizeAgentLabel } from '../guards.js';
+/**
+ * A {@link PageDriver} over a real DOM subtree.
+ *
+ * Deliberately mechanical: every refusal — handle validation, the credential-field guard, the
+ * page allowlist, highlight clamping — already ran in `executePageCapability` before anything
+ * here is called. Re-checking would duplicate policy in a place that will drift from it.
+ *
+ * Scoped to a `root` the host names, never `document`. Scanning the whole document would make
+ * any markup anywhere — including rendered user content — an authorization decision, which
+ * inverts the point of an explicit allowlist.
+ */
+/** How the marker is drawn. Inline styles, so no stylesheet or CSP allowance is needed. */
+const HIGHLIGHT_STYLE = {
+    outline: '3px solid #e11d48',
+    outlineOffset: '2px',
+    borderRadius: '4px',
+};
+/**
+ * Upper bound on {@link createDomPageDriver}'s `settle`.
+ *
+ * A hidden tab stops delivering animation frames, so waiting for one never returns — and a
+ * background tab is exactly where an agent-driven page ends up while the user works elsewhere.
+ * This is the ceiling that keeps every write bounded regardless.
+ */
+const SETTLE_TIMEOUT_MS = 120;
+function isAgentElementRole(value) {
+    return value !== null && AGENT_ELEMENT_ROLES.includes(value);
+}
+/**
+ * Whether the element is a rich-text surface — a `contenteditable` region rather than a form
+ * control. Rich-text editors are built this way, so treating one as unfillable makes every
+ * comment box, description field and document editor unreachable.
+ */
+function isEditableRegion(element) {
+    if (!(element instanceof HTMLElement))
+        return false;
+    // A control embedded in a rich-text document is still that control. Without this, a real
+    // browser — which, unlike jsdom, propagates `isContentEditable` to every descendant — reports
+    // the Save button inside an editor as a fillable text region, and `fill` overwrites its label
+    // instead of refusing. The type-based refusals in `findFieldFillRefusal` cannot catch that
+    // either, because the descriptor would say `contenteditable` rather than `button`.
+    if (element.matches('input, textarea, select, button, a[href], summary, option'))
+        return false;
+    // The attribute is checked before `isContentEditable` because a headless DOM does not compute
+    // the latter — relying on it alone makes every one of these tests pass vacuously while the real
+    // browser behaves differently. `contenteditable=""` and `"plaintext-only"` are both editable;
+    // only an explicit `"false"` is not.
+    const attribute = element.getAttribute('contenteditable');
+    if (attribute !== null)
+        return attribute !== 'false';
+    // Editability inherited from an ancestor, which only a real layout engine can tell us about.
+    return element.isContentEditable === true;
+}
+/** Every `<label>` associated with `control` by whichever relationship resolves first. */
+function labelTextOf(control) {
+    // Real form controls carry `.labels` — every associated <label>, both for-linked and wrapping.
+    const associated = 'labels' in control
+        ? Array.from(control.labels ?? [])
+        : [];
+    for (const label of associated) {
+        const text = label.textContent?.trim();
+        if (text)
+            return text;
+    }
+    // A contenteditable region is not a form control and has no `.labels`; resolve the same two
+    // relationships by hand — an ancestor <label> (implicit wrapping) and a for-linked one (explicit).
+    const wrapping = control.closest('label');
+    if (wrapping) {
+        const text = wrapping.textContent?.trim();
+        if (text)
+            return text;
+    }
+    if (control.id) {
+        for (const label of Array.from(control.ownerDocument.querySelectorAll('label'))) {
+            if (label.htmlFor === control.id) {
+                const text = label.textContent?.trim();
+                if (text)
+                    return text;
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * The field's human-visible label, for the guard's benefit: `name`/`id` are the machine names, and
+ * a CMS emitting `name="field_47"` next to a visibly-labelled "Card number" leaves every guard here
+ * nothing to judge unless this is populated. Resolution order: `aria-label`, then `placeholder`,
+ * then the text of an associated `<label>` (for-linked or wrapping) — whichever the driver can
+ * resolve first.
+ */
+function accessibleLabelOf(control) {
+    const ariaLabel = control.getAttribute('aria-label')?.trim();
+    if (ariaLabel)
+        return ariaLabel;
+    const placeholder = control.getAttribute('placeholder')?.trim();
+    if (placeholder)
+        return placeholder;
+    return labelTextOf(control);
+}
+/** The field attributes the guards need, or `null` when the control is not a text-bearing input. */
+function fieldDescriptorOf(control) {
+    if (isEditableRegion(control)) {
+        // Reported as a field so the same guards run: a contenteditable div named `card-number` is
+        // no more fillable than an input would be. `type` is not a real HTML input type, and is not
+        // in any denied set, which is correct — the guard should judge it by name and attributes.
+        return {
+            type: 'contenteditable',
+            // Read for the same reason `name` is: neither attribute is standard on a div, but a page
+            // that bothers to set one is telling the guard what the field holds, and honouring `name`
+            // while ignoring `autocomplete` would refuse `name="card_number"` and accept the
+            // `autocomplete="cc-number"` spelling of the same field.
+            autocomplete: control.getAttribute('autocomplete')?.toLowerCase() || undefined,
+            name: control.getAttribute('name') || undefined,
+            id: control.id || undefined,
+            accessibleLabel: accessibleLabelOf(control),
+            readOnly: control.getAttribute('aria-readonly') === 'true',
+            disabled: control.getAttribute('aria-disabled') === 'true',
+        };
+    }
+    if (!(control instanceof HTMLInputElement) && !(control instanceof HTMLTextAreaElement)) {
+        return null;
+    }
+    return {
+        type: control instanceof HTMLInputElement ? control.type.toLowerCase() : 'textarea',
+        autocomplete: control.getAttribute('autocomplete')?.toLowerCase() ?? undefined,
+        name: control.name || undefined,
+        id: control.id || undefined,
+        accessibleLabel: accessibleLabelOf(control),
+        readOnly: control.readOnly,
+        // `.disabled` reflects only this element's own attribute — not the "actually disabled" state
+        // a control gets from an ancestor `<fieldset disabled>`. `:disabled` is the platform's own
+        // answer for both, and is what decides whether the value even reaches form submission.
+        disabled: control.matches(':disabled'),
+    };
+}
+/**
+ * Whether the element is actually rendered, or `undefined` when the platform cannot say.
+ *
+ * `checkVisibility` is the only answer that accounts for `display:none` on an ancestor, `hidden`,
+ * `content-visibility` and an empty box at once. Where it is missing, this reports nothing rather
+ * than falling back to a layout measurement — a headless DOM has no layout, so that fallback would
+ * confidently declare every element invisible.
+ *
+ * The options are passed explicitly rather than relying on the method's defaults: per spec every
+ * option defaults to `false`, so a bare `checkVisibility()` misses `visibility:hidden` and
+ * `opacity:0` ancestors — two of the most common real ways to hide interactive UI (fade
+ * transitions, visually-hidden-but-focusable patterns) — while still correctly reporting
+ * `display:none`. Confirmed in real Chromium: `checkOpacity`/`checkVisibilityCSS` (this build's
+ * spelling) turn a false `visible: true` on a `visibility:hidden`/`opacity:0` ancestor into the
+ * correct `false`; jsdom does not implement the method at all, so no unit test can show this.
+ */
+function visibilityOf(element) {
+    const check = element.checkVisibility;
+    return typeof check === 'function'
+        ? check.call(element, { checkOpacity: true, checkVisibilityCSS: true })
+        : undefined;
+}
+/**
+ * `disabled` for the controls that have one; `undefined` for everything else, which is not the
+ * same as `false`.
+ *
+ * `:disabled` rather than the `.disabled` IDL property: the property only reflects the element's
+ * own attribute, so a control disabled solely by an ancestor `<fieldset disabled>` reads as
+ * enabled even though a real user cannot type into or click it, and its value is excluded from
+ * form submission entirely. `:disabled` is the platform's own answer and covers both cases.
+ */
+function disabledOf(control) {
+    return control instanceof HTMLInputElement
+        || control instanceof HTMLTextAreaElement
+        || control instanceof HTMLButtonElement
+        || control instanceof HTMLSelectElement
+        ? control.matches(':disabled')
+        : undefined;
+}
+function describe(element, page) {
+    const role = element.getAttribute(AGENT_ROLE_ATTRIBUTE);
+    /* c8 ignore next -- `Node.textContent` is typed nullable for the abstract node; on an Element it is always a string, so the `?? ''` satisfies the type and is not a reachable path. */
+    const text = element.textContent ?? '';
+    const label = element.getAttribute(AGENT_LABEL_ATTRIBUTE) ?? text;
+    /* c8 ignore next -- only ever called on a `[data-agent-element]` match, so the attribute is present by construction. */
+    const handle = element.getAttribute(AGENT_ELEMENT_ATTRIBUTE) ?? '';
+    return {
+        handle,
+        role: isAgentElementRole(role) ? role : undefined,
+        // The executor normalizes and bounds this; raw here on purpose so the guard is applied in
+        // exactly one place rather than half-applied in two.
+        label,
+        labelTruncated: false,
+        page,
+    };
+}
+/**
+ * Builds a driver over `root`.
+ *
+ * @param options - The subtree, the navigable pages, and the current page id.
+ * @returns A driver ready to hand to `executePageCapability`.
+ */
+export function createDomPageDriver(options) {
+    const { root, pages } = options;
+    /**
+     * The page a specific element belongs to — its own nearest `[data-agent-page]` ancestor, not a
+     * single document-wide guess.
+     *
+     * A host that keeps more than one `[data-agent-page]` section mounted at once (tabs, wizard
+     * steps toggled with CSS rather than unmounted — the kind of SPA this driver's own options doc
+     * anticipates) previously had every element attributed to whichever section happened to be
+     * first in the DOM, regardless of which one it actually lived in. `closest` answers per element
+     * instead of once for the whole call.
+     *
+     * Still overridden by a pinned `currentPage`, unchanged: that value is the host's own claim
+     * about what is showing, taking precedence over whatever the DOM happens to say.
+     */
+    const pageOf = (element) => options.currentPage ?? element.closest(`[${AGENT_PAGE_ATTRIBUTE}]`)?.getAttribute(AGENT_PAGE_ATTRIBUTE) ?? undefined;
+    /**
+     * Active markers keyed by handle, so re-highlighting the same element restarts rather than
+     * stacks — and carrying the styling to put back, which must be captured once, on the first
+     * highlight. Re-reading the element on a restart would snapshot the marker itself, and the
+     * element would keep it forever: a capability classified `read` precisely because it is
+     * transient would permanently change how someone's page looks.
+     */
+    const highlights = new Map();
+    /**
+     * Every element published under `handle`. A page that (accidentally, or via a templating bug)
+     * publishes the same handle twice makes `find`'s single-match resolution ambiguous — surfaced
+     * here so both callers below can refuse rather than silently pick one.
+     */
+    const findAll = (handle) => Array.from(root.querySelectorAll(resolveHandleSelector(handle)));
+    /**
+     * More than one element answers to the same handle — a page-authoring bug (duplicate
+     * `data-agent-element`), not something a caller passing that handle can resolve on its own.
+     *
+     * `findElements` still lists every one of them, so the collision is discoverable; resolving a
+     * single handle to act on refuses instead of silently taking the first DOM match and leaving the
+     * others permanently unreachable with no signal that they were ever unreachable at all.
+     */
+    const ambiguousHandleError = (handle, count) => new Error(`"${handle}" is published on ${count} elements on this page, so which one it addresses is `
+        + 'ambiguous — this is a page-authoring bug (duplicate data-agent-element), not something a '
+        + 'caller can resolve; publish a unique handle per element');
+    const find = (handle) => {
+        const matches = findAll(handle);
+        if (matches.length === 0)
+            throw new Error(`no element published as "${handle}" on this page`);
+        if (matches.length > 1)
+            throw ambiguousHandleError(handle, matches.length);
+        return matches[0];
+    };
+    /**
+     * The control a handle addresses — for a wrapper like `<li><label><input>`, the input.
+     *
+     * `<details>` is called out because its interactive part is the `<summary>`: clicking the
+     * `<details>` element itself dispatches an event the platform ignores, so a disclosure widget
+     * would never open and the caller would be told the click landed.
+     */
+    const controlOf = (element) => {
+        // An editable region IS the control. Descending would find a link inside a rich-text document
+        // and address that instead of the text the caller meant to write.
+        if (isEditableRegion(element))
+            return element;
+        // `:scope >` because only a *direct child* `<summary>` is the disclosure control. An
+        // unscoped query returns the first summary anywhere in the subtree, so a `<details>`
+        // containing another one would toggle the inner disclosure while reporting that the outer
+        // handle was clicked — the false success this whole suite exists to catch.
+        if (element instanceof HTMLDetailsElement) {
+            return element.querySelector(':scope > summary') ?? element;
+        }
+        if (element.matches('input, textarea, select, button, a'))
+            return element;
+        // A descendant that is itself independently published (its own `[data-agent-element]`) must
+        // never be silently adopted as this handle's control — it is a distinct, separately
+        // addressable target with its own label, not unhandled wrapper markup like the plain
+        // `<li><label><input>` this descent exists for. Filtering to descendants whose nearest
+        // published ancestor is still `element` itself excludes exactly that case while leaving
+        // ordinary wrapper descent untouched.
+        const owned = (node) => node.closest(`[${AGENT_ELEMENT_ATTRIBUTE}]`) === element;
+        const candidate = Array.from(element.querySelectorAll('input, textarea, select, button, a, summary'))
+            .find(owned);
+        return candidate ?? element;
+    };
+    return {
+        async findElements(filter) {
+            const found = Array.from(root.querySelectorAll(`[${AGENT_ELEMENT_ATTRIBUTE}]`))
+                .map((element) => describe(element, pageOf(element)))
+                .filter((element) => element.handle.length > 0);
+            const query = filter.query?.toLowerCase();
+            return found.filter((element) => {
+                if (filter.role !== undefined && element.role !== filter.role)
+                    return false;
+                if (query === undefined)
+                    return true;
+                return element.handle.toLowerCase().includes(query)
+                    || element.label.toLowerCase().includes(query);
+            });
+        },
+        async listPages() {
+            return Object.keys(pages);
+        },
+        async describeField(handle) {
+            return fieldDescriptorOf(controlOf(find(handle)));
+        },
+        async describeState(handle) {
+            // Unlike every other method here, a handle that no longer resolves is an answer rather than
+            // an error: an element that a click removed is exactly what the caller is asking about. A
+            // handle resolving to *more than one* element is a different situation entirely — not an
+            // absence but an ambiguity — so that case still refuses, same as `find`.
+            const matches = findAll(handle);
+            if (matches.length === 0)
+                return null;
+            if (matches.length > 1)
+                throw ambiguousHandleError(handle, matches.length);
+            const element = matches[0];
+            const control = controlOf(element);
+            const field = fieldDescriptorOf(control);
+            const checkable = control instanceof HTMLInputElement
+                && (control.type === 'checkbox' || control.type === 'radio');
+            // A dropdown reports its option texts alongside its value. Without them a caller can only
+            // guess what to pass to `page.select_option`, and a wrong guess is a refusal it could have
+            // avoided by looking. It carries a descriptor too, so the read guard still runs — a
+            // `<select name="secret_token">` is no more readable than an input of the same name.
+            const dropdown = control instanceof HTMLSelectElement ? control : undefined;
+            const readable = field ?? (dropdown === undefined ? null : {
+                type: 'select',
+                name: dropdown.name || undefined,
+                id: dropdown.id || undefined,
+                // Same `:disabled` reasoning as `disabledOf` — a `<select>` inside a disabled `<fieldset>`
+                // is not itself flagged by the `.disabled` IDL property.
+                disabled: dropdown.matches(':disabled'),
+            });
+            const value = field !== null
+                ? control.value
+                : dropdown?.value;
+            /* c8 ignore next -- as in `describe`: an Element's textContent is always a string. */
+            const text = element.textContent ?? '';
+            return {
+                text,
+                // Reported raw and unconditionally; `projectElementState` applies the read guard. A
+                // driver deciding here which values are secret is a driver holding policy.
+                ...(value !== undefined ? { value } : {}),
+                ...(checkable ? { checked: control.checked } : {}),
+                ...(disabledOf(control) !== undefined ? { disabled: disabledOf(control) } : {}),
+                ...(visibilityOf(element) !== undefined ? { visible: visibilityOf(element) } : {}),
+                ...(readable !== null ? { field: readable } : {}),
+                ...(dropdown !== undefined
+                    ? {
+                        options: Array.from(dropdown.options)
+                            .map((entry) => entry.text.trim())
+                            .filter((entry) => entry.length > 0),
+                    }
+                    : {}),
+            };
+        },
+        /**
+         * Two animation frames — long enough for a framework to have re-rendered and the browser to
+         * have painted — or {@link SETTLE_TIMEOUT_MS}, whichever lands first. Without the timeout this
+         * would hang for the whole life of a backgrounded tab; without the frames every write would
+         * report its own target unchanged, because the read would beat the render.
+         */
+        async settle() {
+            await new Promise((resolve) => {
+                let timer;
+                // No re-entry guard: whichever side loses the race calls this again, and both of its
+                // effects are already idempotent — clearing an elapsed timer is a no-op, and a second
+                // `resolve` on a settled promise is ignored. A flag here would only be a branch nothing
+                // can distinguish.
+                const finish = () => {
+                    if (timer !== undefined)
+                        clearTimeout(timer);
+                    resolve();
+                };
+                const raf = globalThis.requestAnimationFrame;
+                // With no animation frames to wait for, one macrotask is the whole mechanism, and waiting
+                // the full ceiling on every write would be pure latency.
+                timer = setTimeout(finish, typeof raf === 'function' ? SETTLE_TIMEOUT_MS : 0);
+                if (typeof raf === 'function')
+                    raf(() => raf(finish));
+            });
+        },
+        async highlight(handle, durationMs) {
+            const element = find(handle);
+            // Same refusal as `click()`, for the same reason: an SVG (or other non-HTMLElement) target
+            // has no `.style` to draw an outline on, so silently returning here drew nothing while
+            // `page-executor.ts` unconditionally reports the highlight as successful — a guaranteed
+            // false positive with no way for the caller to tell. Refusing makes that visible instead.
+            if (!(element instanceof HTMLElement))
+                throw new Error(`"${handle}" is not highlightable`);
+            const active = highlights.get(handle);
+            if (active !== undefined)
+                clearTimeout(active.timer);
+            // Reuse the first capture on a restart; see the map's own doc for what re-reading would cost.
+            const restore = active?.restore ?? {
+                outline: element.style.outline,
+                outlineOffset: element.style.outlineOffset,
+                borderRadius: element.style.borderRadius,
+            };
+            Object.assign(element.style, HIGHLIGHT_STYLE);
+            element.scrollIntoView({ behavior: 'smooth', block: 'center' });
+            const timer = setTimeout(() => {
+                // Restore what was there rather than clearing: the element may have had its own outline.
+                Object.assign(element.style, restore);
+                highlights.delete(handle);
+            }, durationMs);
+            highlights.set(handle, { timer, restore });
+        },
+        async scrollTo(handle) {
+            find(handle).scrollIntoView({ behavior: 'smooth', block: 'center' });
+        },
+        async click(handle) {
+            const control = controlOf(find(handle));
+            if (!(control instanceof HTMLElement))
+                throw new Error(`"${handle}" is not clickable`);
+            control.click();
+        },
+        async fill(handle, text) {
+            const control = controlOf(find(handle));
+            if (isEditableRegion(control)) {
+                // A contenteditable region has no `value`; its content *is* its children, and a real
+                // editor owns that subtree. See `fillEditableRegion` for why this drives it through
+                // selection + `execCommand` rather than replacing `textContent` directly.
+                fillEditableRegion(control, text);
+                return;
+            }
+            if (!(control instanceof HTMLInputElement) && !(control instanceof HTMLTextAreaElement)) {
+                throw new Error(`"${handle}" is not a fillable field`);
+            }
+            // Assign through the prototype setter, then dispatch: React tracks the previous value on
+            // the node and ignores an input event whose value it believes it already has, so a plain
+            // `control.value = text` updates the DOM but leaves React state stale.
+            const prototype = control instanceof HTMLInputElement
+                ? HTMLInputElement.prototype
+                : HTMLTextAreaElement.prototype;
+            const setter = Object.getOwnPropertyDescriptor(prototype, 'value')?.set;
+            if (setter)
+                setter.call(control, text);
+            else
+                control.value = text;
+            control.dispatchEvent(new Event('input', { bubbles: true }));
+            control.dispatchEvent(new Event('change', { bubbles: true }));
+        },
+        async selectOption(handle, option, selected = true) {
+            const control = controlOf(find(handle));
+            if (!(control instanceof HTMLSelectElement)) {
+                throw new Error(`"${handle}" is not a dropdown`);
+            }
+            // Visible text first, then value: the text is what a caller saw in `find_elements`, and
+            // matching value first would make an option whose value collides with another's label
+            // resolve to the wrong entry.
+            // A disabled option is not selectable by the user either, so offering it to an agent would
+            // be a way around the page's own rule — and the resulting selection cannot be submitted.
+            const options = Array.from(control.options).filter((entry) => !entry.disabled);
+            const match = options.find((entry) => entry.text.trim() === option)
+                ?? options.find((entry) => entry.value === option);
+            if (match === undefined) {
+                // Every other piece of page-authored text this system hands to a model goes through
+                // normalizeAgentLabel first — bounded, control- and bidi-stripped. `available` is exactly
+                // that: the page's own <option> texts, read verbatim with no length bound of their own.
+                // The caller's `option` is sanitized too, for the same reason page.navigate's caller-
+                // supplied `page` now is — an unbounded value reaching a thrown message a model reads is
+                // the same shape of problem regardless of which side authored it. `handle` needs no
+                // treatment: it is already validated ASCII, length-capped by isValidElementHandle before
+                // this driver is ever called.
+                const safeOption = normalizeAgentLabel(option).text;
+                const available = options.map((entry) => normalizeAgentLabel(entry.text.trim()).text)
+                    .filter((text) => text.length > 0);
+                throw new Error(`"${safeOption}" is not an option of "${handle}". Available: ${available.length > 0 ? available.join(', ') : '(none)'}`);
+            }
+            if (control.multiple) {
+                // A multi-select accumulates by default. Assigning `value` would silently clear every
+                // prior choice, so a caller building up a selection would end with only its last call's
+                // option — and setting `.selected` directly is also how a caller narrows one back off
+                // without disturbing the rest.
+                match.selected = selected;
+            }
+            else if (!selected) {
+                // A single-select's one option IS its value; there is no "off" state to put it in. Silently
+                // ignoring this would tell the caller a deselect happened when nothing changed, and clearing
+                // the control would invent a third state (no selection) that a native <select> cannot hold.
+                throw new Error(`"${handle}" is a single-select; its choice cannot be removed, only replaced — `
+                    + `select a different option instead of deselecting "${normalizeAgentLabel(option).text}"`);
+            }
+            else {
+                // Same prototype-setter dance as `fill`, for the same reason: React tracks the previous
+                // value on the node and ignores a change event whose value it believes it already has.
+                const setter = Object.getOwnPropertyDescriptor(HTMLSelectElement.prototype, 'value')?.set;
+                if (setter)
+                    setter.call(control, match.value);
+                else
+                    control.value = match.value;
+            }
+            control.dispatchEvent(new Event('input', { bubbles: true }));
+            control.dispatchEvent(new Event('change', { bubbles: true }));
+        },
+        async navigate(page) {
+            const go = pages[page];
+            // The executor already checked the allowlist and sanitizes this same message before this
+            // driver-level check would ever be reached through it; this is the belt on the braces. But
+            // `PageDriver` is a public interface — a caller that reaches this method directly, bypassing
+            // the executor entirely, hands `page` in unsanitized, so the same bound-and-strip treatment
+            // applies here too rather than assuming the only caller is the one that already checked.
+            if (go === undefined)
+                throw new Error(`"${normalizeAgentLabel(page).text}" is not a published page`);
+            go();
+        },
+    };
+}
+/**
+ * Writes into a contenteditable region the way a real user typing would, rather than by replacing
+ * its DOM directly.
+ *
+ * A framework rich-text editor (Lexical, ProseMirror, Quill, CodeMirror) owns its subtree: it
+ * keeps its own model and reconciles the DOM to match it, so a direct `textContent =` write is
+ * either invisible to that model or gets reverted on the editor's next render — and it always
+ * destroys whatever node structure the editor had built (a mention's `<span>`, a paragraph's `<p>`)
+ * in favour of one bare text node. Selecting the existing contents and issuing a real editing
+ * command instead is what Playwright's own `fill` does against a contenteditable, for the same
+ * reason: `execCommand('insertText'|'delete')` is the platform's own command, so the browser fires
+ * `beforeinput`/`input` itself with the correct `inputType` — the exact signal these editors
+ * listen for — rather than this driver guessing at a contract it does not own by hand-rolling one.
+ *
+ * jsdom implements neither a real editing host nor `execCommand`, so every unit test here exercises
+ * the fallback: the previous `textContent` + synthetic `input` behaviour, kept for exactly that
+ * case and for a real browser that reports the command did not run.
+ *
+ * Verified 2026-07-26 in Chromium against real Lexical 0.36.2 — the editor
+ * `packages/ui/src/features/rich-text-input/` is built on — driving both paths at one editor each
+ * and reading back Lexical's own `EditorState`, not the DOM. The `textContent` write left the
+ * model at its seed value and was reverted in the DOM too; the `execCommand` path landed in the
+ * model. That is the whole reason this function exists, and no unit test in this repo can show it.
+ */
+function fillEditableRegion(control, text) {
+    control.focus();
+    const selection = globalThis.getSelection?.();
+    if (selection) {
+        const range = control.ownerDocument.createRange();
+        range.selectNodeContents(control);
+        selection.removeAllRanges();
+        selection.addRange(range);
+    }
+    const execCommand = control.ownerDocument.execCommand?.bind(control.ownerDocument);
+    if (typeof execCommand === 'function') {
+        // An empty replacement has no text to insert; `delete` removes the just-selected contents,
+        // which `insertText` with an empty string is not guaranteed to do in every engine.
+        const ran = text.length > 0 ? execCommand('insertText', false, text) : execCommand('delete');
+        if (ran)
+            return;
+    }
+    control.textContent = text;
+    // Editors listen for `input`, not `change`; `change` is a form-control event and firing it here
+    // would be inventing an event the platform never sends for this element.
+    control.dispatchEvent(new Event('input', { bubbles: true }));
+}
+/** Reads the current page's `data-agent-page`, for hosts that tag the body. */
+export function currentAgentPage(root) {
+    const tagged = root.querySelector(`[${AGENT_PAGE_ATTRIBUTE}]`);
+    return tagged?.getAttribute(AGENT_PAGE_ATTRIBUTE) ?? undefined;
+}
+//# sourceMappingURL=dom-page-driver.js.map

package/dist/dom/dom-page-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dom-page-driver.js","sourceRoot":"","sources":["../../src/dom/dom-page-driver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GAItB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAwB,MAAM,cAAc,CAAC;AAGzE;;;;;;;;;;GAUG;AAEH,2FAA2F;AAC3F,MAAM,eAAe,GAAG;IACtB,OAAO,EAAE,mBAAmB;IAC5B,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,KAAK;CACX,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,SAAS,kBAAkB,CAAC,KAAoB;IAC9C,OAAO,KAAK,KAAK,IAAI,IAAK,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAgB;IACxC,IAAI,CAAC,CAAC,OAAO,YAAY,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,yFAAyF;IACzF,8FAA8F;IAC9F,8FAA8F;IAC9F,2FAA2F;IAC3F,mFAAmF;IACnF,IAAI,OAAO,CAAC,OAAO,CAAC,2DAA2D,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/F,8FAA8F;IAC9F,gGAAgG;IAChG,8FAA8F;IAC9F,qCAAqC;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,SAAS,KAAK,OAAO,CAAC;IACrD,6FAA6F;IAC7F,OAAO,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC;AAC5C,CAAC;AAED,0FAA0F;AAC1F,SAAS,WAAW,CAAC,OAAgB;IACnC,+FAA+F;IAC/F,MAAM,UAAU,GAAG,QAAQ,IAAI,OAAO;QACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAE,OAAqD,CAAC,MAAM,IAAI,EAAE,CAAC;QACjF,CAAC,CAAC,EAAE,CAAC;IACP,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,4FAA4F;IAC5F,mGAAmG;IACnG,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC1C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChF,IAAK,KAA0B,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;gBACvC,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,OAAgB;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,oGAAoG;AACpG,SAAS,iBAAiB,CAAC,OAAgB;IACzC,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,2FAA2F;QAC3F,4FAA4F;QAC5F,0FAA0F;QAC1F,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,yFAAyF;YACzF,0FAA0F;YAC1F,iFAAiF;YACjF,yDAAyD;YACzD,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,SAAS;YAC9E,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,SAAS;YAC/C,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS;YAC3B,eAAe,EAAE,iBAAiB,CAAC,OAAO,CAAC;YAC3C,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,MAAM;YAC1D,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,MAAM;SACjC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,YAAY,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,YAAY,mBAAmB,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,YAAY,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU;QACnF,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,SAAS;QAC9E,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;QAC/B,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS;QAC3B,eAAe,EAAE,iBAAiB,CAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,6FAA6F;QAC7F,2FAA2F;QAC3F,uFAAuF;QACvF,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;KACb,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,YAAY,CAAC,OAAgB;IACpC,MAAM,KAAK,GAAI,OAA+E,CAAC,eAAe,CAAC;IAC/G,OAAO,OAAO,KAAK,KAAK,UAAU;QAChC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,OAAgB;IAClC,OAAO,OAAO,YAAY,gBAAgB;WACrC,OAAO,YAAY,mBAAmB;WACtC,OAAO,YAAY,iBAAiB;WACpC,OAAO,YAAY,iBAAiB;QACvC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB,EAAE,IAAwB;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACxD,uLAAuL;IACvL,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC;IAClE,wHAAwH;IACxH,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO;QACL,MAAM;QACN,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACjD,0FAA0F;QAC1F,qDAAqD;QACrD,KAAK;QACL,cAAc,EAAE,KAAK;QACrB,IAAI;KACL,CAAC;AACJ,CAAC;AAmBD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAChC;;;;;;;;;;;;OAYG;IACH,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAsB,EAAE,CACtD,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,oBAAoB,GAAG,CAAC,EAAE,YAAY,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IACvH;;;;;;OAMG;IACH,MAAM,UAAU,GAAG,IAAI,GAAG,EAGtB,CAAC;IAEL;;;;OAIG;IACH,MAAM,OAAO,GAAG,CAAC,MAAc,EAAa,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEhH;;;;;;;OAOG;IACH,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAE,KAAa,EAAS,EAAE,CAAC,IAAI,KAAK,CAC9E,IAAI,MAAM,qBAAqB,KAAK,uDAAuD;UACzF,2FAA2F;UAC3F,yDAAyD,CAC5D,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAW,EAAE;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,gBAAgB,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3E,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IACrB,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,SAAS,GAAG,CAAC,OAAgB,EAAW,EAAE;QAC9C,8FAA8F;QAC9F,kEAAkE;QAClE,IAAI,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QAC9C,qFAAqF;QACrF,qFAAqF;QACrF,0FAA0F;QAC1F,2EAA2E;QAC3E,IAAI,OAAO,YAAY,kBAAkB,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,oCAAoC,CAAC;YAAE,OAAO,OAAO,CAAC;QAC1E,4FAA4F;QAC5F,oFAAoF;QACpF,qFAAqF;QACrF,uFAAuF;QACvF,wFAAwF;QACxF,sCAAsC;QACtC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,uBAAuB,GAAG,CAAC,KAAK,OAAO,CAAC;QACnG,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,6CAA6C,CAAC,CAAC;aAClG,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,OAAO,SAAS,IAAI,OAAO,CAAC;IAC9B,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,MAA0B;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,uBAAuB,GAAG,CAAC,CAAC;iBAC5E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;iBACpD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;oBAAE,OAAO,KAAK,CAAC;gBAC5E,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACrC,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;uBAC9C,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,SAAS;YACb,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM;YACxB,OAAO,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM;YACxB,4FAA4F;YAC5F,0FAA0F;YAC1F,yFAAyF;YACzF,yEAAyE;YACzE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,OAAO,YAAY,gBAAgB;mBAChD,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YAC/D,0FAA0F;YAC1F,2FAA2F;YAC3F,oFAAoF;YACpF,qFAAqF;YACrF,MAAM,QAAQ,GAAG,OAAO,YAAY,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,SAAS;gBAChC,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,SAAS;gBAC5B,2FAA2F;gBAC3F,yDAAyD;gBACzD,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;aACd,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,KAAK,KAAK,IAAI;gBAC1B,CAAC,CAAE,OAAkD,CAAC,KAAK;gBAC3D,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC;YACpB,sFAAsF;YACtF,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;YACvC,OAAO;gBACL,IAAI;gBACJ,oFAAoF;gBACpF,2EAA2E;gBAC3E,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAG,OAA4B,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,QAAQ,KAAK,SAAS;oBACxB,CAAC,CAAC;wBACE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;6BAClC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;6BACjC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;qBACvC;oBACH,CAAC,CAAC,EAAE,CAAC;aACuB,CAAC;QACnC,CAAC;QAED;;;;;WAKG;QACH,KAAK,CAAC,MAAM;YACV,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,KAAgD,CAAC;gBACrD,qFAAqF;gBACrF,sFAAsF;gBACtF,wFAAwF;gBACxF,mBAAmB;gBACnB,MAAM,MAAM,GAAG,GAAS,EAAE;oBACxB,IAAI,KAAK,KAAK,SAAS;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;oBAC7C,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,MAAM,GAAG,GAAG,UAAU,CAAC,qBAAqB,CAAC;gBAC7C,0FAA0F;gBAC1F,yDAAyD;gBACzD,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9E,IAAI,OAAO,GAAG,KAAK,UAAU;oBAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,2FAA2F;YAC3F,uFAAuF;YACvF,wFAAwF;YACxF,0FAA0F;YAC1F,IAAI,CAAC,CAAC,OAAO,YAAY,WAAW,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,wBAAwB,CAAC,CAAC;YAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,SAAS;gBAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAErD,8FAA8F;YAC9F,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI;gBACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa;gBAC1C,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;aACzC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YAC9C,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,yFAAyF;gBACzF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACtC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC,EAAE,UAAU,CAAC,CAAC;YACf,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,IAAI,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,MAAM;YAChB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,CAAC,OAAO,YAAY,WAAW,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,oBAAoB,CAAC,CAAC;YACvF,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI;YACrB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,qFAAqF;gBACrF,oFAAoF;gBACpF,0EAA0E;gBAC1E,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,OAAO,YAAY,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,YAAY,mBAAmB,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,2BAA2B,CAAC,CAAC;YACzD,CAAC;YACD,yFAAyF;YACzF,yFAAyF;YACzF,uEAAuE;YACvE,MAAM,SAAS,GAAG,OAAO,YAAY,gBAAgB;gBACnD,CAAC,CAAC,gBAAgB,CAAC,SAAS;gBAC5B,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC;YACxE,IAAI,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;;gBAClC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;YAC1B,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,IAAI;YAChD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,CAAC,OAAO,YAAY,iBAAiB,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,qBAAqB,CAAC,CAAC;YACnD,CAAC;YACD,wFAAwF;YACxF,sFAAsF;YACtF,8BAA8B;YAC9B,2FAA2F;YAC3F,yFAAyF;YACzF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;mBAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;YACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,oFAAoF;gBACpF,0FAA0F;gBAC1F,wFAAwF;gBACxF,sFAAsF;gBACtF,yFAAyF;gBACzF,oFAAoF;gBACpF,yFAAyF;gBACzF,8BAA8B;gBAC9B,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;gBACpD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;qBAClF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACrC,MAAM,IAAI,KAAK,CACb,IAAI,UAAU,0BAA0B,MAAM,iBAAiB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CACxH,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,sFAAsF;gBACtF,wFAAwF;gBACxF,sFAAsF;gBACtF,+BAA+B;gBAC/B,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC5B,CAAC;iBAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrB,4FAA4F;gBAC5F,6FAA6F;gBAC7F,4FAA4F;gBAC5F,MAAM,IAAI,KAAK,CACb,IAAI,MAAM,sEAAsE;sBAC9E,qDAAqD,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAC3F,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,wFAAwF;gBACxF,uFAAuF;gBACvF,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC;gBAC1F,IAAI,MAAM;oBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;;oBACzC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YACnC,CAAC;YACD,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAI;YACjB,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,yFAAyF;YACzF,2FAA2F;YAC3F,6FAA6F;YAC7F,4FAA4F;YAC5F,yFAAyF;YACzF,IAAI,EAAE,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,2BAA2B,CAAC,CAAC;YACrG,EAAE,EAAE,CAAC;QACP,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,kBAAkB,CAAC,OAAoB,EAAE,IAAY;IAC5D,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QAClD,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAClC,SAAS,CAAC,eAAe,EAAE,CAAC;QAC5B,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACnF,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;QACtC,2FAA2F;QAC3F,mFAAmF;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7F,IAAI,GAAG;YAAE,OAAO;IAClB,CAAC;IACD,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAC3B,gGAAgG;IAChG,yEAAyE;IACzE,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC/D,OAAO,MAAM,EAAE,YAAY,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;AACjE,CAAC"}

package/dist/dom/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @jini-ai/agentic/dom — the browser half of agent control.
+ *
+ * The one `PageDriver` (see `@jini-ai/agentic`'s `page-driver.ts`) that reads and writes a real DOM
+ * subtree. Split into its own entry point, compiled under its own `DOM`-lib `tsconfig.dom.json`,
+ * so the rest of this package can stay provably DOM-free — see source-map.md's "The DOM split".
+ *
+ * `@jini-ai/chat-react` is this package's one in-repo consumer today.
+ */
+export { createDomPageDriver, currentAgentPage, type DomPageDriverOptions } from './dom-page-driver.js';
+/**
+ * WebMCP feature detection — moved 2026-07-26 from `@jini-ai/ui`'s `agent-tools/model-context.ts`
+ * (plan §8 step 6). See `model-context.ts`'s module doc for why it lives here rather than
+ * alongside `../webmcp.ts`'s DOM-free projection.
+ */
+export { getAgentModelContext, type AgentModelContextLike, type AgentModelContextToolRegistration, } from './model-context.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/dom/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dom/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAExG;;;;GAIG;AACH,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,KAAK,iCAAiC,GACvC,MAAM,oBAAoB,CAAC"}

package/dist/dom/index.js

@@ -0,0 +1,17 @@
+/**
+ * @jini-ai/agentic/dom — the browser half of agent control.
+ *
+ * The one `PageDriver` (see `@jini-ai/agentic`'s `page-driver.ts`) that reads and writes a real DOM
+ * subtree. Split into its own entry point, compiled under its own `DOM`-lib `tsconfig.dom.json`,
+ * so the rest of this package can stay provably DOM-free — see source-map.md's "The DOM split".
+ *
+ * `@jini-ai/chat-react` is this package's one in-repo consumer today.
+ */
+export { createDomPageDriver, currentAgentPage } from './dom-page-driver.js';
+/**
+ * WebMCP feature detection — moved 2026-07-26 from `@jini-ai/ui`'s `agent-tools/model-context.ts`
+ * (plan §8 step 6). See `model-context.ts`'s module doc for why it lives here rather than
+ * alongside `../webmcp.ts`'s DOM-free projection.
+ */
+export { getAgentModelContext, } from './model-context.js';
+//# sourceMappingURL=index.js.map

package/dist/dom/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dom/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAA6B,MAAM,sBAAsB,CAAC;AAExG;;;;GAIG;AACH,OAAO,EACL,oBAAoB,GAGrB,MAAM,oBAAoB,CAAC"}