@mario.andreschak/mcp-browser 3.42.1 → 3.44.0

package/dist/audioTap.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The in-page audio tap.
+ *
+ * Chromium renders a page's audio into a device sink Node cannot reach, so the
+ * only portable way to hear what an isolated session is playing is to intercept
+ * the Web Audio graph inside the page and ship the samples out ourselves. This
+ * is the same shape the MCP audio studio app uses in reverse: audio is always
+ * produced by Web Audio in the *viewer's* browser, never streamed as encoded
+ * media, which is why it plays without codec or CSP trouble.
+ *
+ * Two sources have to be covered:
+ *  1. pages that build their own AudioContext — their `destination` is replaced
+ *     by a tap node, so their whole graph flows through us;
+ *  2. plain `<audio>`/`<video>` elements — each is routed into a shared tap
+ *     context the first time it plays.
+ *
+ * The script must run in the page's MAIN world, which is why the gateway
+ * injects it over CDP: Patchright evaluates Playwright scripts in an isolated
+ * world where patching `window` would have no effect. `--mute-audio` only
+ * silences the device sink, so the graph still carries real samples and the
+ * host machine still stays quiet.
+ */
+export declare function audioTapSource(binding: string, initiallyMuted?: boolean): string;

package/dist/audioTap.js

@@ -0,0 +1,147 @@
+/**
+ * The in-page audio tap.
+ *
+ * Chromium renders a page's audio into a device sink Node cannot reach, so the
+ * only portable way to hear what an isolated session is playing is to intercept
+ * the Web Audio graph inside the page and ship the samples out ourselves. This
+ * is the same shape the MCP audio studio app uses in reverse: audio is always
+ * produced by Web Audio in the *viewer's* browser, never streamed as encoded
+ * media, which is why it plays without codec or CSP trouble.
+ *
+ * Two sources have to be covered:
+ *  1. pages that build their own AudioContext — their `destination` is replaced
+ *     by a tap node, so their whole graph flows through us;
+ *  2. plain `<audio>`/`<video>` elements — each is routed into a shared tap
+ *     context the first time it plays.
+ *
+ * The script must run in the page's MAIN world, which is why the gateway
+ * injects it over CDP: Patchright evaluates Playwright scripts in an isolated
+ * world where patching `window` would have no effect. `--mute-audio` only
+ * silences the device sink, so the graph still carries real samples and the
+ * host machine still stays quiet.
+ */
+export function audioTapSource(binding, initiallyMuted = false) {
+    const muted = initiallyMuted ? 'true' : 'false';
+    return `(function(){
+  if (window.__flujoAudioTap) { window.__flujoAudioMuted = ${muted}; return; }
+  var NativeCtx = window.AudioContext || window.webkitAudioContext;
+  if (!NativeCtx) return;
+  window.__flujoAudioTap = true;
+  window.__flujoAudioMuted = ${muted};
+  var CHUNK = 4096;
+  var SILENCE = 1 / 32768;
+
+  function encode(bytes){
+    var out = "", step = 0x8000;
+    for (var i = 0; i < bytes.length; i += step) {
+      out += String.fromCharCode.apply(null, bytes.subarray(i, i + step));
+    }
+    return btoa(out);
+  }
+
+  /** Insert a silent recorder between a context's graph and its real output. */
+  function tap(ctx, output){
+    var input = ctx.createGain();
+    var processor = ctx.createScriptProcessor(CHUNK, 2, 2);
+    processor.onaudioprocess = function(event){
+      var send = window.${binding};
+      if (window.__flujoAudioMuted || typeof send !== "function") return;
+      var buffer = event.inputBuffer;
+      var frames = buffer.length;
+      var left = buffer.getChannelData(0);
+      var right = buffer.numberOfChannels > 1 ? buffer.getChannelData(1) : left;
+      var pcm = new Int16Array(frames * 2);
+      var silent = true;
+      for (var i = 0; i < frames; i++) {
+        var a = left[i], b = right[i];
+        if (a > 1) a = 1; else if (a < -1) a = -1;
+        if (b > 1) b = 1; else if (b < -1) b = -1;
+        if (silent && (a > SILENCE || a < -SILENCE || b > SILENCE || b < -SILENCE)) silent = false;
+        pcm[i * 2] = a * 32767;
+        pcm[i * 2 + 1] = b * 32767;
+      }
+      // Digital silence is the common case on a normal page; never spend
+      // bandwidth or CDP round trips on it.
+      if (silent) return;
+      try {
+        send(JSON.stringify({ rate: ctx.sampleRate, pcm: encode(new Uint8Array(pcm.buffer)) }));
+      } catch (error) {
+        window.__flujoAudioMuted = true;
+      }
+    };
+    input.connect(processor);
+    // A ScriptProcessor only runs while it is reachable from the destination.
+    // Its own output stays silent because onaudioprocess never writes one.
+    processor.connect(output);
+    return input;
+  }
+
+  // 1) Pages with their own AudioContext.
+  function patch(Ctor){
+    if (typeof Ctor !== "function") return Ctor;
+    function Patched(){
+      var ctx = new (Function.prototype.bind.apply(Ctor, [null].concat([].slice.call(arguments))))();
+      try {
+        var input = tap(ctx, ctx.destination);
+        input.maxChannelCount = ctx.destination.maxChannelCount;
+        Object.defineProperty(ctx, "destination", {
+          configurable: true,
+          get: function(){ return input; }
+        });
+      } catch (error) { /* an untappable context still plays normally */ }
+      return ctx;
+    }
+    Patched.prototype = Ctor.prototype;
+    return Patched;
+  }
+  try {
+    if (window.AudioContext) window.AudioContext = patch(window.AudioContext);
+    if (window.webkitAudioContext) window.webkitAudioContext = patch(window.webkitAudioContext);
+  } catch (error) { /* frozen globals: media elements below still work */ }
+
+  // 2) Plain media elements, routed into one shared context on first play.
+  var mediaCtx, mediaTap, attached = new WeakSet();
+  function attach(element){
+    if (attached.has(element)) return;
+    try {
+      if (!mediaCtx) {
+        mediaCtx = new NativeCtx();
+        mediaTap = tap(mediaCtx, mediaCtx.destination);
+      }
+      attached.add(element);
+      mediaCtx.createMediaElementSource(element).connect(mediaTap);
+      if (mediaCtx.state === "suspended") mediaCtx.resume();
+    } catch (error) {
+      // Cross-origin media without CORS headers taints the graph; leave the
+      // element alone so at least the picture keeps playing.
+    }
+  }
+  document.addEventListener("play", function(event){
+    var target = event.target;
+    if (target && (target.tagName === "AUDIO" || target.tagName === "VIDEO")) attach(target);
+  }, true);
+
+  // Installing the tap after a session was opened must still recover media
+  // whose play event already fired. The pre-navigation install is the normal
+  // path; this scan is the fallback for reused sessions and dynamically added
+  // elements that began playing before they entered the document.
+  function attachPlaying(root){
+    if (!root) return;
+    if ((root.tagName === "AUDIO" || root.tagName === "VIDEO") && !root.paused && !root.ended) attach(root);
+    if (typeof root.querySelectorAll !== "function") return;
+    var media = root.querySelectorAll("audio,video");
+    for (var i = 0; i < media.length; i++) {
+      if (!media[i].paused && !media[i].ended) attach(media[i]);
+    }
+  }
+  attachPlaying(document);
+  if (window.MutationObserver) {
+    new MutationObserver(function(records){
+      for (var i = 0; i < records.length; i++) {
+        for (var j = 0; j < records[i].addedNodes.length; j++) attachPlaying(records[i].addedNodes[j]);
+      }
+    }).observe(document.documentElement || document, { childList: true, subtree: true });
+  }
+})();`;
+}
+//# sourceMappingURL=audioTap.js.map

package/dist/audioTap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioTap.js","sourceRoot":"","sources":["../src/audioTap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,cAAc,GAAG,KAAK;IACpE,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAChD,OAAO;6DACoD,KAAK;;;;+BAInC,KAAK;;;;;;;;;;;;;;;;;0BAiBV,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAkG3B,CAAC;AACP,CAAC"}

package/dist/capture.d.ts

@@ -0,0 +1,94 @@
+import type { Page } from 'patchright';
+/**
+ * Local `getDataDir()`/`isInside()` — deliberately not imported from
+ * `mcp-servers/shared`: the browser package resolves `FLUJO_DATA_DIR` inline
+ * everywhere else (see `runtime.ts`'s `screenshotRoot()`), and does not carry
+ * the `@flujo-ai/mcp-shared` workspace dependency the other packages use.
+ */
+export declare function getDataDir(): string;
+export declare function isInside(root: string, candidate: string): boolean;
+export type CaptureSource = {
+    kind: 'html';
+    html: string;
+} | {
+    kind: 'url';
+    url: string;
+};
+/** Assert a single, stable PNG color type and return it. Never silently accepts a malformed image. */
+export declare function pngColorType(png: Buffer): number;
+/** Gates 1-3 of the local-capture ladder; gate 4 is `assertNavigationAllowed()` itself. */
+export declare function assertLocalCaptureAllowed(resolvedPath: string, allowLocal: boolean): Promise<void>;
+/**
+ * Resolve exactly one of `url` / `html` / `filePath` into a `CaptureSource`,
+ * applying local-source gating for `file://` and localhost/private-host
+ * inputs and the ordinary `assertNavigationAllowed()` gate for everything
+ * else.
+ */
+export declare function resolveCaptureSource(args: {
+    url?: string;
+    html?: string;
+    filePath?: string;
+    allowLocal?: boolean;
+}): Promise<CaptureSource>;
+export type CapturePageOptions = {
+    fullPage: boolean;
+    clipSelector?: string;
+    waitFor?: string;
+    timeoutMs: number;
+};
+/**
+ * Determinism ladder: navigate → `waitForLoadState('load')` →
+ * `document.fonts.ready` → optional `waitFor` (selector or JS predicate,
+ * boolean-coerced and discarded — never returned to the caller, per D4) →
+ * screenshot with animations disabled.
+ */
+export declare function captureDeterministicPng(page: Page, source: CaptureSource, options: CapturePageOptions): Promise<{
+    png: Buffer;
+    colorType: number;
+}>;
+/** Navigate/render a resolved source without capturing (used by `browser_capture_element_metrics`). */
+export declare function navigateCaptureSource(page: Page, source: CaptureSource, timeoutMs: number): Promise<void>;
+export type CaptureRegion = {
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+};
+/** Region capture is a clipped `page.screenshot()`, not a manual pixel crop, so DPR/scroll never drift the result. */
+export declare function captureRegionPng(page: Page, source: CaptureSource, region: CaptureRegion, timeoutMs: number): Promise<{
+    png: Buffer;
+    colorType: number;
+}>;
+export type ElementMetrics = {
+    selector: string;
+    found: boolean;
+    boundingBox?: {
+        x: number;
+        y: number;
+        width: number;
+        height: number;
+    };
+    clientRect?: {
+        top: number;
+        left: number;
+        right: number;
+        bottom: number;
+        width: number;
+        height: number;
+    };
+    scrollWidth?: number;
+    scrollHeight?: number;
+    isVisible?: boolean;
+    isInViewport?: boolean;
+    overflowX?: string;
+    overflowY?: string;
+    textOverflow?: boolean;
+    actionSafe?: boolean;
+    computed?: Record<string, string>;
+};
+export declare function evaluateElementMetrics(page: Page, selectors: string[]): Promise<ElementMetrics[]>;
+export declare function sha256Hex(data: Buffer): string;
+/** Default persistence root for still captures, mirroring `writeScreenshotArtifact()`'s layout. */
+export declare function captureRoot(): string;
+/** Write a capture artifact, confining any caller-supplied `outputPath` to the data dir or the capture root. */
+export declare function writeCaptureArtifact(outputPath: string | undefined, defaultRelativePath: string[], data: Buffer): Promise<string>;

package/dist/capture.js

@@ -0,0 +1,302 @@
+/**
+ * Deterministic still capture for the browser MCP server (#366).
+ *
+ * Kept out of `tools.ts`/`runtime.ts` to keep those under control, per the
+ * plan. Everything here operates on a `Page` handed in by the caller — either
+ * an ephemeral capture context (`createCaptureContext()` in `runtime.ts`) or
+ * an existing session's page — and never owns session lifecycle itself.
+ *
+ * Local-source gating (`assertLocalCaptureAllowed`) is the narrow, explicit
+ * bypass mentioned in the plan: it does not touch `assertNavigationAllowed()`,
+ * so ordinary `browser_open`/`browser_navigate` behaviour is unchanged. Four
+ * independent gates must all hold before a `file://` / localhost / private
+ * host is captured:
+ *  1. `allowLocal === true` on the call;
+ *  2. `FLUJO_BROWSER_ALLOW_LOCAL_CAPTURE` is truthy (default off);
+ *  3. the resolved realpath satisfies `isInside()` against the FLUJO data
+ *     directory or an entry in `FLUJO_BROWSER_LOCAL_CAPTURE_ROOTS`;
+ *  4. everything else still goes through the ordinary `assertNavigationAllowed()`.
+ */
+import { promises as fs } from 'node:fs';
+import { createHash } from 'node:crypto';
+import path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { BrowserMcpError, assertNavigationAllowed, enabledEnv } from './runtime.js';
+/**
+ * Local `getDataDir()`/`isInside()` — deliberately not imported from
+ * `mcp-servers/shared`: the browser package resolves `FLUJO_DATA_DIR` inline
+ * everywhere else (see `runtime.ts`'s `screenshotRoot()`), and does not carry
+ * the `@flujo-ai/mcp-shared` workspace dependency the other packages use.
+ */
+export function getDataDir() {
+    return path.resolve(process.env.FLUJO_DATA_DIR?.trim() || process.cwd());
+}
+export function isInside(root, candidate) {
+    const rel = path.relative(path.resolve(root), path.resolve(candidate));
+    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
+}
+const PNG_SIGNATURE = '89504e470d0a1a0a';
+/** Byte offset of the IHDR color-type field: 8 (signature) + 4 (length) + 4 ("IHDR") + 4 (width) + 4 (height) + 1 (bit depth). */
+const PNG_COLOR_TYPE_OFFSET = 25;
+/** Assert a single, stable PNG color type and return it. Never silently accepts a malformed image. */
+export function pngColorType(png) {
+    if (png.length <= PNG_COLOR_TYPE_OFFSET || png.subarray(0, 8).toString('hex') !== PNG_SIGNATURE) {
+        throw new BrowserMcpError('UNEXPECTED', 'The captured image is not a valid PNG.');
+    }
+    return png.readUInt8(PNG_COLOR_TYPE_OFFSET);
+}
+async function realpathIfExists(candidate) {
+    try {
+        return await fs.realpath(candidate);
+    }
+    catch {
+        return path.resolve(candidate);
+    }
+}
+function localCaptureRoots() {
+    const roots = [getDataDir()];
+    const raw = process.env.FLUJO_BROWSER_LOCAL_CAPTURE_ROOTS?.trim();
+    if (raw) {
+        for (const entry of raw.split(path.delimiter)) {
+            const trimmed = entry.trim();
+            if (trimmed)
+                roots.push(path.resolve(trimmed));
+        }
+    }
+    return roots;
+}
+function isLocalOrPrivateOrigin(url) {
+    if (url.protocol === 'file:')
+        return true;
+    const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/g, '');
+    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '::1'
+        || hostname.endsWith('.localhost') || hostname.endsWith('.local');
+}
+/** Gates 1-3 of the local-capture ladder; gate 4 is `assertNavigationAllowed()` itself. */
+export async function assertLocalCaptureAllowed(resolvedPath, allowLocal) {
+    if (!allowLocal) {
+        throw new BrowserMcpError('NAVIGATION_BLOCKED', 'Local file/localhost capture requires allowLocal=true.');
+    }
+    if (!enabledEnv('FLUJO_BROWSER_ALLOW_LOCAL_CAPTURE')) {
+        throw new BrowserMcpError('NAVIGATION_BLOCKED', 'Local capture is disabled by policy (set FLUJO_BROWSER_ALLOW_LOCAL_CAPTURE=1 to enable).');
+    }
+    const real = await realpathIfExists(resolvedPath);
+    const roots = localCaptureRoots();
+    if (!roots.some((root) => isInside(root, real))) {
+        throw new BrowserMcpError('NAVIGATION_BLOCKED', 'The local path is outside the allowed capture roots.');
+    }
+}
+/**
+ * Resolve exactly one of `url` / `html` / `filePath` into a `CaptureSource`,
+ * applying local-source gating for `file://` and localhost/private-host
+ * inputs and the ordinary `assertNavigationAllowed()` gate for everything
+ * else.
+ */
+export async function resolveCaptureSource(args) {
+    const provided = [args.url, args.html, args.filePath].filter((value) => typeof value === 'string' && value.length > 0);
+    if (provided.length !== 1) {
+        throw new BrowserMcpError('INVALID_ARGUMENT', 'Provide exactly one of url, html, or filePath.');
+    }
+    if (typeof args.html === 'string') {
+        return { kind: 'html', html: args.html };
+    }
+    const allowLocal = args.allowLocal === true;
+    if (typeof args.filePath === 'string') {
+        const resolved = path.resolve(args.filePath);
+        await assertLocalCaptureAllowed(resolved, allowLocal);
+        return { kind: 'url', url: pathToFileURL(resolved).href };
+    }
+    const raw = args.url;
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch {
+        throw new BrowserMcpError('NAVIGATION_BLOCKED', 'The URL is malformed.');
+    }
+    if (parsed.protocol === 'file:') {
+        await assertLocalCaptureAllowed(fileURLToPath(parsed), allowLocal);
+        return { kind: 'url', url: parsed.href };
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new BrowserMcpError('NAVIGATION_BLOCKED', 'Only HTTP, HTTPS, and file:// URLs are allowed.');
+    }
+    if (isLocalOrPrivateOrigin(parsed)) {
+        await assertLocalCaptureAllowed(raw, allowLocal);
+        return { kind: 'url', url: parsed.href };
+    }
+    // Gate 4: ordinary navigation policy, byte-for-byte unchanged, for anything
+    // that is not a local/private destination.
+    const allowedUrl = await assertNavigationAllowed(raw);
+    return { kind: 'url', url: allowedUrl.href };
+}
+function looksLikeJsPredicate(expression) {
+    return /[(){}=]/.test(expression) || /^\s*function\b/.test(expression) || expression.includes('=>');
+}
+/**
+ * Determinism ladder: navigate → `waitForLoadState('load')` →
+ * `document.fonts.ready` → optional `waitFor` (selector or JS predicate,
+ * boolean-coerced and discarded — never returned to the caller, per D4) →
+ * screenshot with animations disabled.
+ */
+export async function captureDeterministicPng(page, source, options) {
+    const timeout = options.timeoutMs;
+    if (source.kind === 'html') {
+        await page.setContent(source.html, { waitUntil: 'load', timeout });
+    }
+    else {
+        await page.goto(source.url, { waitUntil: 'load', timeout });
+    }
+    await page.waitForLoadState('load', { timeout }).catch(() => undefined);
+    // No `dom` lib in this workspace's tsconfig, so the fonts-ready wait is a
+    // fixed string body rather than a typed arrow function (same rationale as
+    // ELEMENT_METRICS_SCRIPT below).
+    await page.evaluate('(document.fonts && document.fonts.ready) || Promise.resolve()').catch(() => undefined);
+    if (options.waitFor) {
+        if (looksLikeJsPredicate(options.waitFor)) {
+            // The predicate's return value is intentionally discarded: this waits
+            // for a boolean-truthy condition and never leaks arbitrary evaluation
+            // results back to the caller (D4 — no general JS-evaluate tool).
+            await page.waitForFunction(options.waitFor, undefined, { timeout });
+        }
+        else {
+            await page.waitForSelector(options.waitFor, { timeout });
+        }
+    }
+    let handle = null;
+    try {
+        let png;
+        if (options.clipSelector) {
+            handle = await page.waitForSelector(options.clipSelector, { timeout });
+            if (!handle)
+                throw new BrowserMcpError('NOT_FOUND', 'clipSelector did not match any element.');
+            await handle.scrollIntoViewIfNeeded({ timeout }).catch(() => undefined);
+            png = await handle.screenshot({ type: 'png', animations: 'disabled', caret: 'hide', scale: 'css', timeout });
+        }
+        else {
+            png = await page.screenshot({
+                type: 'png',
+                fullPage: options.fullPage,
+                animations: 'disabled',
+                caret: 'hide',
+                scale: 'css',
+                timeout,
+            });
+        }
+        return { png, colorType: pngColorType(png) };
+    }
+    finally {
+        await handle?.dispose().catch(() => undefined);
+    }
+}
+/** Navigate/render a resolved source without capturing (used by `browser_capture_element_metrics`). */
+export async function navigateCaptureSource(page, source, timeoutMs) {
+    if (source.kind === 'html') {
+        await page.setContent(source.html, { waitUntil: 'load', timeout: timeoutMs });
+    }
+    else {
+        await page.goto(source.url, { waitUntil: 'load', timeout: timeoutMs });
+    }
+    await page.waitForLoadState('load', { timeout: timeoutMs }).catch(() => undefined);
+}
+/** Region capture is a clipped `page.screenshot()`, not a manual pixel crop, so DPR/scroll never drift the result. */
+export async function captureRegionPng(page, source, region, timeoutMs) {
+    if (source.kind === 'html') {
+        await page.setContent(source.html, { waitUntil: 'load', timeout: timeoutMs });
+    }
+    else {
+        await page.goto(source.url, { waitUntil: 'load', timeout: timeoutMs });
+    }
+    await page.waitForLoadState('load', { timeout: timeoutMs }).catch(() => undefined);
+    const png = await page.screenshot({
+        type: 'png',
+        animations: 'disabled',
+        caret: 'hide',
+        scale: 'css',
+        clip: region,
+        timeout: timeoutMs,
+    });
+    return { png, colorType: pngColorType(png) };
+}
+/**
+ * A single, fixed, non-parameterised `page.evaluate` script body, kept as a
+ * string (this file's `tsconfig.json` has no `dom` lib, and the script only
+ * ever runs inside the page, never in this Node process). Selectors are
+ * passed as *data* arguments only — never string-concatenated into code — so
+ * this cannot become a general JS-evaluate primitive (D4).
+ */
+const ELEMENT_METRICS_SCRIPT = `(function(selectors){
+  function overflowClass(value, scrollSize, clientSize){
+    if (value === "visible") return "visible";
+    if (scrollSize > clientSize) return value === "scroll" ? "scroll" : "clipped";
+    return value;
+  }
+  return selectors.map(function(selector){
+    var el = document.querySelector(selector);
+    if (!el) return { selector: selector, found: false };
+    var rect = el.getBoundingClientRect();
+    var style = window.getComputedStyle(el);
+    var viewportW = window.innerWidth, viewportH = window.innerHeight;
+    var isVisible = style.visibility !== "hidden" && style.display !== "none" && rect.width > 0 && rect.height > 0;
+    var isInViewport = rect.top < viewportH && rect.bottom > 0 && rect.left < viewportW && rect.right > 0;
+    return {
+      selector: selector,
+      found: true,
+      boundingBox: { x: rect.x, y: rect.y, width: rect.width, height: rect.height },
+      clientRect: { top: rect.top, left: rect.left, right: rect.right, bottom: rect.bottom, width: rect.width, height: rect.height },
+      scrollWidth: el.scrollWidth,
+      scrollHeight: el.scrollHeight,
+      isVisible: isVisible,
+      isInViewport: isInViewport,
+      overflowX: overflowClass(style.overflowX, el.scrollWidth, el.clientWidth),
+      overflowY: overflowClass(style.overflowY, el.scrollHeight, el.clientHeight),
+      textOverflow: el.scrollWidth > el.clientWidth || el.scrollHeight > el.clientHeight,
+      actionSafe: isVisible && isInViewport,
+      computed: {
+        fontSize: style.fontSize,
+        lineHeight: style.lineHeight,
+        color: style.color,
+        backgroundColor: style.backgroundColor,
+        opacity: style.opacity,
+        zIndex: style.zIndex,
+        transform: style.transform,
+        display: style.display,
+        position: style.position,
+      },
+    };
+  });
+})`;
+export async function evaluateElementMetrics(page, selectors) {
+    return page.evaluate(ELEMENT_METRICS_SCRIPT, selectors);
+}
+export function sha256Hex(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+/** Default persistence root for still captures, mirroring `writeScreenshotArtifact()`'s layout. */
+export function captureRoot() {
+    const configured = process.env.FLUJO_BROWSER_SCREENSHOT_DIR?.trim();
+    if (configured)
+        return path.resolve(configured);
+    const dataRoot = process.env.FLUJO_DATA_DIR?.trim() || process.cwd();
+    return path.resolve(dataRoot, 'screenshots', 'browser');
+}
+/** Write a capture artifact, confining any caller-supplied `outputPath` to the data dir or the capture root. */
+export async function writeCaptureArtifact(outputPath, defaultRelativePath, data) {
+    let filePath;
+    if (outputPath) {
+        const resolved = path.resolve(outputPath);
+        const dataDir = getDataDir();
+        const root = captureRoot();
+        if (!isInside(dataDir, resolved) && !isInside(root, resolved)) {
+            throw new BrowserMcpError('INVALID_ARGUMENT', 'outputPath must be inside the FLUJO data directory or the browser screenshot root.');
+        }
+        filePath = resolved;
+    }
+    else {
+        filePath = path.join(captureRoot(), ...defaultRelativePath);
+    }
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    await fs.writeFile(filePath, data);
+    return filePath;
+}
+//# sourceMappingURL=capture.js.map

package/dist/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../src/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,SAAiB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,aAAa,GAAG,kBAAkB,CAAC;AACzC,kIAAkI;AAClI,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAMjC,sGAAsG;AACtG,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAG,CAAC,MAAM,IAAI,qBAAqB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,aAAa,EAAE,CAAC;QAChG,MAAM,IAAI,eAAe,CAAC,YAAY,EAAE,wCAAwC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAQ;IACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK;WAC5E,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,YAAoB,EAAE,UAAmB;IACvF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,0FAA0F,CAAC,CAAC;IAC9I,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,sDAAsD,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAK1C;IACC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,gDAAgD,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IAC5C,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,yBAAyB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAa,CAAC;IAC/B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,yBAAyB,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,iDAAiD,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,yBAAyB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,4EAA4E;IAC5E,2CAA2C;IAC3C,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,MAAqB,EACrB,OAA2B;IAE3B,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,iCAAiC;IACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,+DAA+D,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE5G,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,sEAAsE;YACtE,sEAAsE;YACtE,iEAAiE;YACjE,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,GAAyB,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,GAAW,CAAC;QAChB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;YAC/F,MAAM,MAAM,CAAC,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxE,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/G,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;gBAC1B,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,UAAU;gBACtB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,KAAK;gBACZ,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAU,EAAE,MAAqB,EAAE,SAAiB;IAC9F,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACrF,CAAC;AAID,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAU,EACV,MAAqB,EACrB,MAAqB,EACrB,SAAiB;IAEjB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;QAChC,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/C,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwC5B,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAU,EAAE,SAAmB;IAC1E,OAAO,IAAI,CAAC,QAAQ,CAA6B,sBAAsB,EAAE,SAAS,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,WAAW;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAA8B,EAC9B,mBAA6B,EAC7B,IAAY;IAEZ,IAAI,QAAgB,CAAC;IACrB,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,oFAAoF,CAAC,CAAC;QACtI,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,mBAAmB,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/gateway.d.ts

@@ -0,0 +1,28 @@
+export type BrowserGatewayEndpoint = {
+    /** Origin the MCP App connects to, e.g. `http://127.0.0.1:53411`. */
+    origin: string;
+    /** Bearer token required on every gateway request. */
+    token: string;
+};
+/** Exported for tests: whether the escape hatch is active. */
+export declare function browserSandboxAllowAll(): boolean;
+/**
+ * Start (or reuse) the loopback gateway. Resolves to `undefined` when streaming
+ * is disabled or the listener cannot bind, so the MCP App can fall back to the
+ * screenshot poll loop instead of failing to render at all.
+ */
+export declare function ensureBrowserGateway(): Promise<BrowserGatewayEndpoint | undefined>;
+/** Current endpoint, or `undefined` when the gateway has not started. */
+export declare function browserGatewayEndpoint(): BrowserGatewayEndpoint | undefined;
+/**
+ * Install the main-world audio interception before a navigation can create an
+ * AudioContext or fire a media element's play event. Capture remains muted
+ * until a client opens /audio. Failure is intentionally non-fatal: browser
+ * navigation and the screenshot stream must continue when audio is unavailable.
+ */
+export declare function prepareBrowserAudioStream(sessionId: string): Promise<void>;
+export declare function shutdownBrowserGateway(): Promise<void>;
+/** Exported for tests: host speaker output stays muted unless opted in. */
+export declare function browserAudioEnabled(): boolean;
+/** Exported for tests: whether the page audio tap streams to the app. */
+export declare function browserAudioStreamEnabled(): boolean;