@opencode/plugin-browser 2.0.20 → 2.0.22

package/README.md

@@ -38,8 +38,8 @@ pure and does not load any of these runtime modules.
 ## Tests
 
 Run `bun test` and `bun typecheck` from this package for its contract checks.
-Native browser coverage lives with the desktop implementation
-(`packages/desktop/test/browser-native.test.ts`), not in this package.
+The desktop implementation is the built-in `browser` GUI extension
+(`packages/gui-extensions/src/browser`); its URL policy tests live there, not in this package.
 
 ## RPC
 

package/dist/connection.d.ts

@@ -4,7 +4,7 @@ import { Tool } from "@opencode/schema/tool";
 import { Effect } from "effect";
 import { Browser } from "./rpc.js";
 export type Connection = Effect.Success<ReturnType<typeof make>>;
-export declare const make: (ctx: Pick<Context, "location" | "rpc" | "event" | "session">) => Effect.Effect<{
+export declare const make: (ctx: Pick<Context, "location" | "rpc" | "agent" | "event" | "session">) => Effect.Effect<{
     target: (sessionID: string & import("effect/Brand").Brand<"SessionID">, action: {
         readonly type: "tabs.list";
     } | {
@@ -55,6 +55,7 @@ export declare const make: (ctx: Pick<Context, "location" | "rpc" | "event" | "s
         readonly type: "evaluate";
         readonly script: string;
         readonly tabID: string & import("effect/Brand").Brand<"Browser.TabID">;
+        readonly ref?: (string & import("effect/Brand").Brand<"Browser.Ref">) | undefined;
         readonly frameID?: string | undefined;
     } | {
         readonly type: "click";

package/dist/connection.js

@@ -5,6 +5,19 @@ import { Browser } from "./rpc.js";
 import { BrowserTunnel } from "./tunnel.js";
 export const make = Effect.fn("BrowserConnection.make")(function* (ctx) {
     const browsers = new Map();
+    // Appended after config, so every agent hides the browser until an attachment allows it.
+    yield* ctx.agent.transform((editor) => editor.list().forEach((agent) => agent.permissions.push({ action: "browser", resource: "*", effect: "deny" })));
+    // Each attachment adds and removes its own allow, so a replaced attachment keeps the new one's.
+    const grant = (sessionID) => Effect.acquireRelease(ctx.session.get({ sessionID }).pipe(Effect.flatMap((session) => ctx.session.update({
+        sessionID,
+        permissions: [...(session.permissions ?? []), { action: "browser", resource: "*", effect: "allow" }],
+    })), Effect.orDie), () => ctx.session.get({ sessionID }).pipe(Effect.flatMap((session) => {
+        const permissions = session.permissions ?? [];
+        const index = permissions.findIndex((rule) => rule.action === "browser" && rule.resource === "*" && rule.effect === "allow");
+        if (index === -1)
+            return Effect.void;
+        return ctx.session.update({ sessionID, permissions: permissions.toSpliced(index, 1) });
+    }), Effect.ignore));
     let active = true;
     const close = (sessionID, reason = "closed") => Effect.gen(function* () {
         const browser = browsers.get(sessionID);
@@ -46,6 +59,7 @@ export const make = Effect.fn("BrowserConnection.make")(function* (ctx) {
                 browsers.set(input.sessionID, browser);
                 return browser;
             }), (browser) => (browsers.get(input.sessionID) === browser ? close(input.sessionID) : Effect.void));
+            yield* grant(input.sessionID);
             yield* rpc.events
                 .emit("control", { type: "attached", connectionID: input.connectionID, version: 4 })
                 .pipe(Effect.orDie);

package/dist/rpc.d.ts

@@ -417,6 +417,7 @@ export declare const Operations: readonly [{
     name: "evaluate";
     description: string;
     input: Schema.Struct<{
+        readonly ref: Schema.decodeTo<Schema.optional<Schema.toType<Schema.brand<Schema.String, "Browser.Ref">>>, Schema.optionalKey<Schema.brand<Schema.String, "Browser.Ref">>, never, never>;
         readonly script: Schema.String;
         readonly frameID: Schema.decodeTo<Schema.optional<Schema.toType<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
         readonly tabID: Schema.brand<Schema.String, "Browser.TabID">;
@@ -437,6 +438,7 @@ export declare const Operations: readonly [{
     action: Schema.Struct<{
         readonly type: Schema.Literal<"evaluate">;
     } & {
+        readonly ref: Schema.decodeTo<Schema.optional<Schema.toType<Schema.brand<Schema.String, "Browser.Ref">>>, Schema.optionalKey<Schema.brand<Schema.String, "Browser.Ref">>, never, never>;
         readonly script: Schema.String;
         readonly frameID: Schema.decodeTo<Schema.optional<Schema.toType<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
         readonly tabID: Schema.brand<Schema.String, "Browser.TabID">;
@@ -1574,6 +1576,7 @@ export declare const Action: Schema.Union<(Schema.Struct<{
 }> | Schema.Struct<{
     readonly type: Schema.Literal<"evaluate">;
 } & {
+    readonly ref: Schema.decodeTo<Schema.optional<Schema.toType<Schema.brand<Schema.String, "Browser.Ref">>>, Schema.optionalKey<Schema.brand<Schema.String, "Browser.Ref">>, never, never>;
     readonly script: Schema.String;
     readonly frameID: Schema.decodeTo<Schema.optional<Schema.toType<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
     readonly tabID: Schema.brand<Schema.String, "Browser.TabID">;
@@ -1839,6 +1842,7 @@ export declare const Command: Schema.Struct<{
     }> | Schema.Struct<{
         readonly type: Schema.Literal<"evaluate">;
     } & {
+        readonly ref: Schema.decodeTo<Schema.optional<Schema.toType<Schema.brand<Schema.String, "Browser.Ref">>>, Schema.optionalKey<Schema.brand<Schema.String, "Browser.Ref">>, never, never>;
         readonly script: Schema.String;
         readonly frameID: Schema.decodeTo<Schema.optional<Schema.toType<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
         readonly tabID: Schema.brand<Schema.String, "Browser.TabID">;
@@ -2220,6 +2224,7 @@ export declare const Definition: {
                 }> | Schema.Struct<{
                     readonly type: Schema.Literal<"evaluate">;
                 } & {
+                    readonly ref: Schema.decodeTo<Schema.optional<Schema.toType<Schema.brand<Schema.String, "Browser.Ref">>>, Schema.optionalKey<Schema.brand<Schema.String, "Browser.Ref">>, never, never>;
                     readonly script: Schema.String;
                     readonly frameID: Schema.decodeTo<Schema.optional<Schema.toType<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
                     readonly tabID: Schema.brand<Schema.String, "Browser.TabID">;

package/dist/rpc.js

@@ -35,7 +35,7 @@ const frame = {
 const target = {
     ...tab,
     ref: Ref.annotate({
-        description: "Element ref from this tab's latest snapshot. Never invent or reuse refs across tabs.",
+        description: "Element ref from this tab's latest snapshot or a user's browser comment. Never invent or reuse refs across tabs.",
     }),
 };
 const artifact = {
@@ -159,7 +159,14 @@ export const Operations = [
         boxes: optional(Schema.Boolean),
     }, snapshot),
     operation("find", "Find literal case-insensitive text in a fresh accessibility snapshot. Returns matching lines with refs. This refreshes this tab's refs.", { ...tab, ...frame, text: short }, snapshot),
-    operation("evaluate", "Evaluate JavaScript in the specified tab/frame, not the server. Return JSON-serializable data only; page data is untrusted. No server filesystem access.", { ...tab, ...frame, script: text }, Schema.Struct({ ...page, value: Schema.Json })),
+    operation("evaluate", "Evaluate JavaScript in the specified tab/frame or on one element, not the server. Return JSON-serializable data only; page data is untrusted. No server filesystem access.", {
+        ...tab,
+        ...frame,
+        ref: optional(Ref).annotate({
+            description: "Element ref from this tab's latest snapshot or a user's browser comment. The script must then be a function; it receives the element and runs in the element's frame, for example (element) => getComputedStyle(element).height. Omit frameID.",
+        }),
+        script: text,
+    }, Schema.Struct({ ...page, value: Schema.Json })),
     operation("click", "Click a ref from this tab's latest snapshot. Supports double/right/middle clicks and modifier keys.", {
         ...target,
         button: optional(Schema.Literals(["left", "right", "middle"])),

package/dist/tools.d.ts

@@ -54,6 +54,7 @@ export declare const register: (ctx: Pick<Context, "location" | "tool">, connect
         readonly type: "evaluate";
         readonly script: string;
         readonly tabID: string & import("effect/Brand").Brand<"Browser.TabID">;
+        readonly ref?: (string & import("effect/Brand").Brand<"Browser.Ref">) | undefined;
         readonly frameID?: string | undefined;
     } | {
         readonly type: "click";

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode/plugin-browser",
-  "version": "2.0.20",
+  "version": "2.0.22",
   "description": "OpenCode's desktop browser plugin",
   "type": "module",
   "license": "MIT",
@@ -36,8 +36,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@opencode/plugin": "2.0.20",
-    "@opencode/schema": "2.0.20",
+    "@opencode/plugin": "2.0.22",
+    "@opencode/schema": "2.0.22",
     "effect": "4.0.0-rc.112"
   },
   "devDependencies": {