@m8i-51/shoal 0.1.13 → 0.1.14

package/framework/account-manager.ts

@@ -287,7 +287,8 @@ If user management is not accessible from this account, or the app has no role s
           }
 
           case "navigate": {
-            const { path: navPath } = toolUse.input as { path: string };
+            const { path: navPath } = toolUse.input as { path?: string };
+            if (!navPath) { resultText = "navigate: missing path"; break; }
             await saveSnapshotBeforeAction(page, observation);
             await page.goto(`${baseUrl}${navPath}`, { waitUntil: "networkidle" });
             await page.waitForTimeout(500);
@@ -297,7 +298,8 @@ If user management is not accessible from this account, or the app has no role s
           }
 
           case "click": {
-            const { description } = toolUse.input as { description: string };
+            const { description } = toolUse.input as { description?: string };
+            if (!description) { resultText = "click: missing description"; break; }
             await saveSnapshotBeforeAction(page, observation);
             const escaped = description.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
             let clicked = false;
@@ -316,7 +318,8 @@ If user management is not accessible from this account, or the app has no role s
           }
 
           case "fill": {
-            const { label, value } = toolUse.input as { label: string; value: string };
+            const { label, value } = toolUse.input as { label?: string; value?: string };
+            if (!label || value === undefined) { resultText = "fill: missing label or value"; break; }
             await saveSnapshotBeforeAction(page, observation);
             const byLabel = page.getByLabel(new RegExp(label, "i"));
             const byPlaceholder = page.getByPlaceholder(new RegExp(label, "i"));
@@ -340,7 +343,8 @@ If user management is not accessible from this account, or the app has no role s
           }
 
           case "save_account": {
-            const { email, password, role } = toolUse.input as { email: string; password: string; role: string };
+            const { email, password, role } = toolUse.input as { email?: string; password?: string; role?: string };
+            if (!email || !password || !role) { resultText = "save_account: missing required fields"; break; }
             savedAccounts.push({ email, password, role });
             console.log(`  [account-manager] saved account: ${email} (role: ${role})`);
             resultText = `Account saved: ${email} (${role})`;
@@ -348,7 +352,8 @@ If user management is not accessible from this account, or the app has no role s
           }
 
           case "post_finding": {
-            const { title, body } = toolUse.input as { title: string; body: string };
+            const { title, body } = toolUse.input as { title?: string; body?: string };
+            if (!title || !body) { resultText = "post_finding: missing title or body"; break; }
             saveFinding({
               id: `acct_${Date.now()}`,
               runId,

package/framework/product-discovery.ts

@@ -253,7 +253,8 @@ Guidelines for output_spec:
       let result: string;
 
       if (toolUse.name === "navigate_and_read") {
-        const { path } = toolUse.input as { path: string };
+        const { path } = toolUse.input as { path?: string };
+        if (!path) { result = "navigate_and_read: missing path"; toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: result }); continue; }
         try {
           await page.goto(`${baseUrl}${path}`, { waitUntil: "networkidle", timeout: 10000 });
           await page.waitForTimeout(500);
@@ -268,7 +269,8 @@ Guidelines for output_spec:
         }
 
       } else if (toolUse.name === "fetch_url") {
-        const { url } = toolUse.input as { url: string };
+        const { url } = toolUse.input as { url?: string };
+        if (!url) { result = "fetch_url: missing url"; toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: result }); continue; }
         try {
           const res = await fetch(url, { signal: AbortSignal.timeout(8000) });
           const text = await res.text();

package/framework/triage.ts

@@ -143,11 +143,16 @@ Organize feedback collected by multiple agents and post it as issue tickets.
 
       } else if (toolUse.name === "create_issue") {
         const { title, body, category, merged_finding_ids } = toolUse.input as {
-          title: string;
-          body: string;
-          category: string;
-          merged_finding_ids: string[] | undefined;
+          title?: string;
+          body?: string;
+          category?: string;
+          merged_finding_ids?: string[];
         };
+        if (!title || !body || !category) {
+          result = { error: "create_issue: missing required fields" };
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: JSON.stringify(result) });
+          continue;
+        }
         const mergedIds = merged_finding_ids ?? [];
         if (mergedIds.length === 0) {
           result = { error: "merged_finding_ids must contain at least one ID" };
@@ -175,7 +180,12 @@ Organize feedback collected by multiple agents and post it as issue tickets.
         }
 
       } else if (toolUse.name === "skip_finding") {
-        const { finding_id, reason } = toolUse.input as { finding_id: string; reason: string };
+        const { finding_id, reason } = toolUse.input as { finding_id?: string; reason?: string };
+        if (!finding_id) {
+          result = { error: "skip_finding: missing finding_id" };
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: JSON.stringify(result) });
+          continue;
+        }
         pendingIds.delete(finding_id);
         skippedIds.push(finding_id);
         skipped++;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m8i-51/shoal",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "type": "module",
   "description": "Multi-agent web exploration framework — finds bugs, UX issues, and missing features by running AI agents against your app",
   "repository": {