@peekdev/mcp 0.1.0-alpha.1

package/dist/mcp/playwright-repro.d.ts

@@ -0,0 +1,19 @@
+import type { eventWithTime } from './rrweb-types.js';
+export interface GenerateReproOptions {
+    /** Only include actions at/after this epoch-millis. */
+    readonly startTs?: number;
+    /** Only include actions at/before this epoch-millis. */
+    readonly endTs?: number;
+    /** Test title (defaults to a session-derived label). */
+    readonly title?: string;
+    /** Max actions to emit (default 200); keeps the latest N, the rest noted. */
+    readonly maxActions?: number;
+}
+/**
+ * Build a Playwright `test(...)` script from the user actions within
+ * `[startTs, endTs]`. Actions whose target selector couldn't be resolved are
+ * emitted as a `// TODO` comment (so the script stays runnable and the gap is
+ * visible) rather than silently dropped.
+ */
+export declare function generatePlaywrightRepro(events: eventWithTime[], options?: GenerateReproOptions): string;
+//# sourceMappingURL=playwright-repro.d.ts.map

package/dist/mcp/playwright-repro.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright-repro.d.ts","sourceRoot":"","sources":["../../src/mcp/playwright-repro.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAgCD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EAAE,EACvB,OAAO,GAAE,oBAAyB,GACjC,MAAM,CAqCR"}

package/dist/mcp/playwright-repro.js

@@ -0,0 +1,78 @@
+// generate_playwright_repro (Task 3.13): turn a window of extracted user
+// actions into a runnable Playwright test string. Each action maps to the
+// idiomatic Playwright call:
+//   navigate -> await page.goto('url')
+//   click    -> await page.click('selector')
+//   input    -> await page.fill('selector', 'value')
+// The first navigation seeds the opening goto; subsequent navigations are
+// emitted inline (e.g. an in-app route change that triggered a full load).
+import { extractUserActions } from './event-walker.js';
+/** Default ceiling on emitted actions — caps the output size (PRD §B token budget). */
+const DEFAULT_MAX_ACTIONS = 200;
+/** Single-quote-escape a value for embedding in a generated JS string literal. */
+function jsString(value) {
+    // Order matters: backslash first, then quote, then the line terminators —
+    // a bare \r or \n in a single-quoted literal is a strict-mode syntax error.
+    return `'${value
+        .replace(/\\/g, '\\\\')
+        .replace(/'/g, "\\'")
+        .replace(/\n/g, '\\n')
+        .replace(/\r/g, '\\r')}'`;
+}
+/** Map one user action to a Playwright statement, or undefined to skip it. */
+function actionToStatement(action) {
+    switch (action.type) {
+        case 'navigate':
+            return action.url ? `  await page.goto(${jsString(action.url)});` : undefined;
+        case 'click':
+            return action.selector ? `  await page.click(${jsString(action.selector)});` : undefined;
+        case 'input':
+            return action.selector
+                ? `  await page.fill(${jsString(action.selector)}, ${jsString(action.value ?? '')});`
+                : undefined;
+        default:
+            return undefined;
+    }
+}
+/**
+ * Build a Playwright `test(...)` script from the user actions within
+ * `[startTs, endTs]`. Actions whose target selector couldn't be resolved are
+ * emitted as a `// TODO` comment (so the script stays runnable and the gap is
+ * visible) rather than silently dropped.
+ */
+export function generatePlaywrightRepro(events, options = {}) {
+    const startTs = options.startTs ?? Number.NEGATIVE_INFINITY;
+    const endTs = options.endTs ?? Number.POSITIVE_INFINITY;
+    const title = options.title ?? 'peek recorded session';
+    const maxActions = options.maxActions ?? DEFAULT_MAX_ACTIONS;
+    const allInWindow = extractUserActions(events).filter((a) => a.ts >= startTs && a.ts <= endTs);
+    // Cap output: keep the LATEST N actions (most relevant to reproduce recent
+    // behavior), noting the truncation so the agent knows the repro is partial.
+    const truncated = allInWindow.length > maxActions;
+    const actions = truncated ? allInWindow.slice(allInWindow.length - maxActions) : allInWindow;
+    const lines = [];
+    lines.push(`import { test, expect } from '@playwright/test';`);
+    lines.push('');
+    lines.push(`test(${jsString(title)}, async ({ page }) => {`);
+    if (actions.length === 0) {
+        lines.push('  // No user actions were recorded in this window.');
+    }
+    else if (truncated) {
+        lines.push(`  // truncated: showing last ${maxActions} of ${allInWindow.length} actions (narrow startTs/endTs for the rest)`);
+    }
+    for (const action of actions) {
+        const stmt = actionToStatement(action);
+        if (stmt !== undefined) {
+            lines.push(stmt);
+        }
+        else {
+            lines.push(`  // TODO: ${action.summary} (target selector unresolved)`);
+        }
+    }
+    lines.push('});');
+    lines.push('');
+    return lines.join('\n');
+}
+// `expect` is imported in the generated script for the author to add assertions;
+// we don't synthesize assertions in v1 (we have no oracle for "correct" state).
+//# sourceMappingURL=playwright-repro.js.map

package/dist/mcp/playwright-repro.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright-repro.js","sourceRoot":"","sources":["../../src/mcp/playwright-repro.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,6BAA6B;AAC7B,uCAAuC;AACvC,6CAA6C;AAC7C,qDAAqD;AACrD,0EAA0E;AAC1E,2EAA2E;AAG3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAcvD,uFAAuF;AACvF,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,kFAAkF;AAClF,SAAS,QAAQ,CAAC,KAAa;IAC7B,0EAA0E;IAC1E,4EAA4E;IAC5E,OAAO,IAAI,KAAK;SACb,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;AAC9B,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,QAAQ;gBACpB,CAAC,CAAC,qBAAqB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI;gBACrF,CAAC,CAAC,SAAS,CAAC;QAChB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAuB,EACvB,UAAgC,EAAE;IAElC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB,CAAC;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,uBAAuB,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAE7D,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC;IAC/F,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAE7F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,QAAQ,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAE7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,gCAAgC,UAAU,OAAO,WAAW,CAAC,MAAM,8CAA8C,CAClH,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,iFAAiF;AACjF,gFAAgF"}

package/dist/mcp/queries.d.ts

@@ -0,0 +1,73 @@
+import type { Database } from 'better-sqlite3';
+/** A row of `sessions` as the MCP tools present it (camelCase, PRD §B3 ids). */
+export interface SessionSummaryRow {
+    readonly id: string;
+    readonly origin: string | null;
+    readonly url: string | null;
+    readonly title: string | null;
+    readonly startedAt: number;
+    readonly durationMs: number;
+    readonly errorCount: number;
+    readonly eventCount: number;
+}
+/** Accurate `COUNT(*)` of error-level console rows for a session. */
+export declare function countConsoleErrors(db: Database, sessionId: string): number;
+/** Accurate `COUNT(*)` of failed/notable network rows (status >= 400 or net error). */
+export declare function countNetworkErrors(db: Database, sessionId: string): number;
+export interface ListSessionsOptions {
+    readonly limit?: number;
+    readonly origin?: string;
+}
+/**
+ * List the most-recently-updated sessions, newest first (PRD §B3
+ * `list_recent_sessions`). Default limit 10; capped to the schema's
+ * `origin`-filtered subset when `origin` is given.
+ */
+export declare function listRecentSessions(db: Database, options?: ListSessionsOptions): SessionSummaryRow[];
+/** One session's summary row, or undefined if no such id. */
+export declare function getSessionSummaryRow(db: Database, id: string): SessionSummaryRow | undefined;
+export interface ConsoleErrorRow {
+    readonly id: number;
+    readonly ts: number;
+    readonly level: string;
+    readonly message: string;
+    readonly stack: string | null;
+}
+/**
+ * Console error rows for a session, oldest first (PRD §B3
+ * `get_session_console_errors`). `since` filters to ts >= it; default level
+ * filter is `error` only (the tool name says "errors").
+ */
+export declare function getConsoleErrors(db: Database, id: string, options?: {
+    since?: number;
+    limit?: number;
+    level?: string;
+}): ConsoleErrorRow[];
+export interface NetworkErrorRow {
+    readonly id: number;
+    readonly ts: number;
+    readonly method: string;
+    readonly url: string;
+    readonly status: number | null;
+    readonly statusText: string | null;
+    readonly resourceType: string | null;
+    readonly durationMs: number | null;
+    readonly errorText: string | null;
+}
+/**
+ * Failed/notable network rows for a session, oldest first (PRD §B3
+ * `get_session_network_errors`). `statusGte` defaults to 400; rows with a
+ * net-error string are always included.
+ */
+export declare function getNetworkErrors(db: Database, id: string, options?: {
+    statusGte?: number;
+    limit?: number;
+}): NetworkErrorRow[];
+/** Look up the events blob path + first-event ts for a session (for the walker tools). */
+export declare function getSessionBlobRef(db: Database, id: string): {
+    blobPath: string | null;
+    startedAt: number;
+} | undefined;
+/** The ts of a single console event id (used by get_user_action_before_error). */
+export declare function getConsoleEventTs(db: Database, id: string, errorId: number): number | undefined;
+//# sourceMappingURL=queries.d.ts.map

package/dist/mcp/queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/mcp/queries.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAoBD,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM1E;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ1E;AAqBD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,EACZ,OAAO,GAAE,mBAAwB,GAChC,iBAAiB,EAAE,CAYrB;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAG5F;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,eAAe,EAAE,CA8BnB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,eAAe,EAAE,CAgCnB;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,EAAE,EAAE,MAAM,GACT;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAM5D;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK/F"}

package/dist/mcp/queries.js

@@ -0,0 +1,139 @@
+// SQL read helpers for the MCP tools that hit structured tables directly
+// (sessions, console_events, network_events). These mirror @peekdev/cli's
+// db.ts shapes so a `peek sessions export --format json` and the MCP
+// `get_session_*` tools return interchangeable data (P2 PRD §B3). The console /
+// network rows are pre-extracted by the native host, so these are fast indexed
+// reads — only the event-level tools fall back to the gzipped blob walker.
+/** Epoch-millis of an ISO-8601 timestamp; 0 if unparseable. */
+function isoToMs(iso) {
+    if (!iso)
+        return 0;
+    const ms = Date.parse(iso);
+    return Number.isNaN(ms) ? 0 : ms;
+}
+/** Accurate `COUNT(*)` of error-level console rows for a session. */
+export function countConsoleErrors(db, sessionId) {
+    return db
+        .prepare("SELECT COUNT(*) AS c FROM console_events WHERE session_id = ? AND level = 'error'")
+        .get(sessionId).c;
+}
+/** Accurate `COUNT(*)` of failed/notable network rows (status >= 400 or net error). */
+export function countNetworkErrors(db, sessionId) {
+    return db
+        .prepare('SELECT COUNT(*) AS c FROM network_events WHERE session_id = ? AND (status >= 400 OR error_text IS NOT NULL)')
+        .get(sessionId).c;
+}
+function errorCountFor(db, sessionId) {
+    return countConsoleErrors(db, sessionId) + countNetworkErrors(db, sessionId);
+}
+function toSummaryRow(db, r) {
+    const startedAt = isoToMs(r.created_at);
+    const endedAt = isoToMs(r.updated_at);
+    return {
+        id: r.id,
+        origin: r.origin,
+        url: r.url,
+        title: r.title,
+        startedAt,
+        durationMs: Math.max(0, endedAt - startedAt),
+        errorCount: errorCountFor(db, r.id),
+        eventCount: r.event_count,
+    };
+}
+/**
+ * List the most-recently-updated sessions, newest first (PRD §B3
+ * `list_recent_sessions`). Default limit 10; capped to the schema's
+ * `origin`-filtered subset when `origin` is given.
+ */
+export function listRecentSessions(db, options = {}) {
+    const limit = options.limit ?? 10;
+    const params = [];
+    let sql = 'SELECT * FROM sessions';
+    if (options.origin !== undefined) {
+        sql += ' WHERE origin = ?';
+        params.push(options.origin);
+    }
+    sql += ' ORDER BY updated_at DESC, created_at DESC LIMIT ?';
+    params.push(limit);
+    const rows = db.prepare(sql).all(...params);
+    return rows.map((r) => toSummaryRow(db, r));
+}
+/** One session's summary row, or undefined if no such id. */
+export function getSessionSummaryRow(db, id) {
+    const row = db.prepare('SELECT * FROM sessions WHERE id = ?').get(id);
+    return row ? toSummaryRow(db, row) : undefined;
+}
+/**
+ * Console error rows for a session, oldest first (PRD §B3
+ * `get_session_console_errors`). `since` filters to ts >= it; default level
+ * filter is `error` only (the tool name says "errors").
+ */
+export function getConsoleErrors(db, id, options = {}) {
+    const limit = options.limit ?? 50;
+    const params = [id];
+    let sql = 'SELECT id, ts_ms, level, message, stack FROM console_events WHERE session_id = ?';
+    if (options.level !== undefined) {
+        sql += ' AND level = ?';
+        params.push(options.level);
+    }
+    else {
+        sql += " AND level = 'error'";
+    }
+    if (options.since !== undefined) {
+        sql += ' AND ts_ms >= ?';
+        params.push(options.since);
+    }
+    sql += ' ORDER BY ts_ms ASC LIMIT ?';
+    params.push(limit);
+    const rows = db.prepare(sql).all(...params);
+    return rows.map((r) => ({
+        id: r.id,
+        ts: r.ts_ms,
+        level: r.level,
+        message: r.message,
+        stack: r.stack,
+    }));
+}
+/**
+ * Failed/notable network rows for a session, oldest first (PRD §B3
+ * `get_session_network_errors`). `statusGte` defaults to 400; rows with a
+ * net-error string are always included.
+ */
+export function getNetworkErrors(db, id, options = {}) {
+    const statusGte = options.statusGte ?? 400;
+    const limit = options.limit ?? 50;
+    const rows = db
+        .prepare(`SELECT id, ts_ms, method, url, status, status_text, resource_type, duration_ms, error_text
+         FROM network_events
+        WHERE session_id = ? AND (status >= ? OR error_text IS NOT NULL)
+        ORDER BY ts_ms ASC LIMIT ?`)
+        .all(id, statusGte, limit);
+    return rows.map((r) => ({
+        id: r.id,
+        ts: r.ts_ms,
+        method: r.method,
+        url: r.url,
+        status: r.status,
+        statusText: r.status_text,
+        resourceType: r.resource_type,
+        durationMs: r.duration_ms,
+        errorText: r.error_text,
+    }));
+}
+/** Look up the events blob path + first-event ts for a session (for the walker tools). */
+export function getSessionBlobRef(db, id) {
+    const row = db
+        .prepare('SELECT events_blob_path, created_at FROM sessions WHERE id = ?')
+        .get(id);
+    if (!row)
+        return undefined;
+    return { blobPath: row.events_blob_path, startedAt: isoToMs(row.created_at) };
+}
+/** The ts of a single console event id (used by get_user_action_before_error). */
+export function getConsoleEventTs(db, id, errorId) {
+    const row = db
+        .prepare('SELECT ts_ms FROM console_events WHERE id = ? AND session_id = ?')
+        .get(errorId, id);
+    return row?.ts_ms;
+}
+//# sourceMappingURL=queries.js.map

package/dist/mcp/queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.js","sourceRoot":"","sources":["../../src/mcp/queries.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AA2B3E,+DAA+D;AAC/D,SAAS,OAAO,CAAC,GAA8B;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAAC,EAAY,EAAE,SAAiB;IAChE,OACE,EAAE;SACC,OAAO,CAAC,mFAAmF,CAAC;SAC5F,GAAG,CAAC,SAAS,CACjB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,EAAY,EAAE,SAAiB;IAChE,OACE,EAAE;SACC,OAAO,CACN,6GAA6G,CAC9G;SACA,GAAG,CAAC,SAAS,CACjB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,aAAa,CAAC,EAAY,EAAE,SAAiB;IACpD,OAAO,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,EAAY,EAAE,CAAa;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5C,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,WAAW;KAC1B,CAAC;AACJ,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAY,EACZ,UAA+B,EAAE;IAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,GAAG,GAAG,wBAAwB,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,GAAG,IAAI,mBAAmB,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,GAAG,IAAI,oDAAoD,CAAC;IAC5D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAiB,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,EAAY,EAAE,EAAU;IAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAA2B,CAAC;IAChG,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAY,EACZ,EAAU,EACV,UAA8D,EAAE;IAEhE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAA2B,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,GAAG,kFAAkF,CAAC;IAC7F,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,GAAG,IAAI,gBAAgB,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,GAAG,IAAI,sBAAsB,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,GAAG,IAAI,iBAAiB,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,IAAI,6BAA6B,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAMxC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,EAAE,EAAE,CAAC,CAAC,KAAK;QACX,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,CAAC;AACN,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAY,EACZ,EAAU,EACV,UAAkD,EAAE;IAEpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;;mCAG6B,CAC9B;SACA,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAUzB,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,EAAE,EAAE,CAAC,CAAC,KAAK;QACX,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAC/B,EAAY,EACZ,EAAU;IAEV,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,gEAAgE,CAAC;SACzE,GAAG,CAAC,EAAE,CAAwE,CAAC;IAClF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,EAAY,EAAE,EAAU,EAAE,OAAe;IACzE,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,OAAO,EAAE,EAAE,CAAkC,CAAC;IACrD,OAAO,GAAG,EAAE,KAAK,CAAC;AACpB,CAAC"}

package/dist/mcp/roots.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The subset of `McpServer.server` this module depends on. Kept structurally
+ * loose (only the fields we read) so the SDK's richer `listRoots` return type
+ * (extra `_meta`, index signature) assigns cleanly under exactOptionalPropertyTypes.
+ */
+export interface RootsCapableServer {
+    getClientCapabilities(): {
+        roots?: unknown;
+    } | undefined;
+    listRoots(): Promise<{
+        roots: ReadonlyArray<{
+            uri: string;
+        }>;
+    }>;
+}
+/** Resolved scope after consulting (or failing to consult) the client's roots. */
+export interface RootsScope {
+    /**
+     * Origins (`scheme://host[:port]`) the session queries should be limited to,
+     * or `undefined` to mean "no scoping — all sessions" (the safe fallback when
+     * the client doesn't support roots, doesn't answer, or supplies roots from
+     * which no origin can be derived).
+     */
+    readonly allowedOrigins: string[] | undefined;
+    /** Why we ended up with this scope — surfaced in logs / tests. */
+    readonly reason: 'no-roots-capability' | 'roots-timeout' | 'roots-error' | 'no-origins-derived' | 'scoped';
+}
+/**
+ * Derive the origins peek should scope to from a set of client roots. Roots are
+ * usually `file://` project directories (e.g. `file:///Users/x/repo`), not web
+ * origins — so v1 derives origins only from roots that ARE http(s) URIs (a
+ * client that surfaces a dev-server URL as a root). `file://` roots yield no
+ * origin here (deriving localhost ports from package.json/vite config is a
+ * documented future enhancement, PRD §B5), so a file-only root set falls back
+ * to unscoped rather than scoping to nothing.
+ */
+export declare function deriveAllowedOrigins(roots: ReadonlyArray<{
+    uri: string;
+}>): string[];
+export interface ResolveRootsScopeOptions {
+    /** Timeout for `roots/list` before falling back (default 1000ms, Issue #3315). */
+    readonly timeoutMs?: number;
+}
+/**
+ * Consult the client's roots (if advertised) and resolve the session scope,
+ * defensively timing out per claude-code Issue #3315. Never throws — every
+ * failure mode degrades to {@link UNSCOPED}.
+ */
+export declare function resolveRootsScope(server: RootsCapableServer, options?: ResolveRootsScopeOptions): Promise<RootsScope>;
+//# sourceMappingURL=roots.d.ts.map

package/dist/mcp/roots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roots.d.ts","sourceRoot":"","sources":["../../src/mcp/roots.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,qBAAqB,IAAI;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IACzD,SAAS,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,aAAa,CAAC;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CACjE;AAED,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9C,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EACX,qBAAqB,GACrB,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,QAAQ,CAAC;CACd;AAkCD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,EAAE,CAapF;AAED,MAAM,WAAW,wBAAwB;IACvC,kFAAkF;IAClF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,UAAU,CAAC,CAyBrB"}

package/dist/mcp/roots.js

@@ -0,0 +1,97 @@
+// MCP Roots scoping (Task 3.14 / P2 PRD §B5). On `oninitialized` the server
+// asks whether the client advertised the `roots` capability; if so it fetches
+// the client's roots (project directories) and derives the origins peek should
+// scope session queries to. Two defensive realities drive the design:
+//
+//   1. Anthropic claude-code Issue #3315 (Apr 2026): Claude Code advertises the
+//      `roots` capability but historically did NOT implement `roots/list` — a
+//      naive `await listRoots()` hangs forever. So we race it against a 1s
+//      timeout and fall back to "all sessions" (no scoping).
+//   2. modelcontextprotocol/servers Issue #3602: the filesystem server
+//      *replaces* its allowed dirs with the client roots. peek instead treats
+//      roots as a SOFT filter over origins (v1) — see deriveAllowedOrigins.
+//
+// This module is transport-agnostic and side-effect-free: it takes the two
+// Server methods it needs as inputs so it's trivially unit-testable.
+/** The unscoped fallback. */
+const UNSCOPED = (reason) => ({
+    allowedOrigins: undefined,
+    reason,
+});
+/**
+ * Race a promise against a timeout. Resolves to the promise's value, or
+ * `{ timedOut: true }` after `ms`. The losing promise is left to settle
+ * (its result is ignored) — we never reject from the timeout path.
+ */
+async function withTimeout(promise, ms) {
+    let timer;
+    const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve({ timedOut: true }), ms);
+        // Don't keep the event loop alive solely for this timer.
+        timer.unref?.();
+    });
+    try {
+        const value = await Promise.race([
+            promise.then((v) => ({ timedOut: false, value: v })),
+            timeout,
+        ]);
+        return value;
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/**
+ * Derive the origins peek should scope to from a set of client roots. Roots are
+ * usually `file://` project directories (e.g. `file:///Users/x/repo`), not web
+ * origins — so v1 derives origins only from roots that ARE http(s) URIs (a
+ * client that surfaces a dev-server URL as a root). `file://` roots yield no
+ * origin here (deriving localhost ports from package.json/vite config is a
+ * documented future enhancement, PRD §B5), so a file-only root set falls back
+ * to unscoped rather than scoping to nothing.
+ */
+export function deriveAllowedOrigins(roots) {
+    const origins = new Set();
+    for (const root of roots) {
+        try {
+            const url = new URL(root.uri);
+            if (url.protocol === 'http:' || url.protocol === 'https:') {
+                origins.add(url.origin);
+            }
+        }
+        catch {
+            // Non-URL root — skip.
+        }
+    }
+    return [...origins];
+}
+/**
+ * Consult the client's roots (if advertised) and resolve the session scope,
+ * defensively timing out per claude-code Issue #3315. Never throws — every
+ * failure mode degrades to {@link UNSCOPED}.
+ */
+export async function resolveRootsScope(server, options = {}) {
+    const timeoutMs = options.timeoutMs ?? 1000;
+    const caps = server.getClientCapabilities();
+    if (!caps?.roots) {
+        return UNSCOPED('no-roots-capability');
+    }
+    const raced = await withTimeout(server.listRoots(), timeoutMs).catch(() => ({
+        timedOut: false,
+        value: undefined,
+    }));
+    if (raced.timedOut) {
+        return UNSCOPED('roots-timeout');
+    }
+    const result = raced.value;
+    if (!result || !Array.isArray(result.roots)) {
+        return UNSCOPED('roots-error');
+    }
+    const allowedOrigins = deriveAllowedOrigins(result.roots);
+    if (allowedOrigins.length === 0) {
+        return UNSCOPED('no-origins-derived');
+    }
+    return { allowedOrigins, reason: 'scoped' };
+}
+//# sourceMappingURL=roots.js.map

package/dist/mcp/roots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roots.js","sourceRoot":"","sources":["../../src/mcp/roots.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,sEAAsE;AACtE,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAC3E,6DAA6D;AAC7D,uEAAuE;AACvE,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,2EAA2E;AAC3E,qEAAqE;AA8BrE,6BAA6B;AAC7B,MAAM,QAAQ,GAAG,CAAC,MAA4B,EAAc,EAAE,CAAC,CAAC;IAC9D,cAAc,EAAE,SAAS;IACzB,MAAM;CACP,CAAC,CAAC;AAEH;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,OAAmB,EACnB,EAAU;IAEV,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;QAC1D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,yDAAyD;QACzD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7D,OAAO;SACR,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAqC;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA0B,EAC1B,UAAoC,EAAE;IAEtC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1E,QAAQ,EAAE,KAAc;QACxB,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC,CAAC;IAEJ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC"}

package/dist/mcp/rrweb-types.d.ts

@@ -0,0 +1,3 @@
+export { EventType, IncrementalSource, MouseInteractions, NodeType, } from '@cubenest/rrweb-core';
+export type { eventWithTime, serializedNodeWithId, incrementalData, incrementalSnapshotEvent, fullSnapshotEvent, metaEvent, mouseInteractionData, inputData, mutationData, addedNodeMutation, attributeMutation, textMutation, } from '@cubenest/rrweb-core';
+//# sourceMappingURL=rrweb-types.d.ts.map

package/dist/mcp/rrweb-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rrweb-types.d.ts","sourceRoot":"","sources":["../../src/mcp/rrweb-types.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,SAAS,EACT,oBAAoB,EACpB,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,GACb,MAAM,sBAAsB,CAAC"}

package/dist/mcp/rrweb-types.js

@@ -0,0 +1,7 @@
+// One local re-export point for the rrweb wire-format types + enums the event
+// walker needs. Everything funnels through @cubenest/rrweb-core (the package
+// that owns the vendored rrweb surface) so peek-mcp never depends on the
+// PostHog rrweb-types package directly — if upstream shifts, rrweb-core is the
+// single place that breaks (ADR-0002).
+export { EventType, IncrementalSource, MouseInteractions, NodeType, } from '@cubenest/rrweb-core';
+//# sourceMappingURL=rrweb-types.js.map

package/dist/mcp/rrweb-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rrweb-types.js","sourceRoot":"","sources":["../../src/mcp/rrweb-types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,QAAQ,GACT,MAAM,sBAAsB,CAAC"}

package/dist/mcp/selector.d.ts

@@ -0,0 +1,54 @@
+import { type serializedNodeWithId } from './rrweb-types.js';
+/** A serialized node plus its resolved parent, for ancestor walks. */
+interface IndexedNode {
+    readonly node: serializedNodeWithId;
+    readonly parentId: number | null;
+}
+/**
+ * A flat index of a serialized snapshot tree: node id -> { node, parentId }.
+ * Built once per snapshot so selector derivation and DOM lookups are O(1) per
+ * id instead of re-walking the tree.
+ */
+export type NodeIndex = ReadonlyMap<number, IndexedNode>;
+/**
+ * Max DOM nesting depth the offline walkers descend before stopping. Real
+ * browser DOMs are nowhere near this deep; the bound exists because this code
+ * ingests UNTRUSTED recordings — a crafted ~10k-deep tree would otherwise blow
+ * the call stack. Shared so the index builders and the serializer agree.
+ */
+export declare const MAX_DOM_DEPTH = 1000;
+/**
+ * Build a {@link NodeIndex} from a FullSnapshot's root serialized node. Nodes
+ * deeper than {@link MAX_DOM_DEPTH} are skipped (not indexed) rather than
+ * overflowing the stack on an adversarial blob.
+ */
+export declare function indexNodes(root: serializedNodeWithId): NodeIndex;
+/** The serialized child nodes of a node, or `[]` for leaf/text/comment nodes. */
+export declare function nodeChildren(node: serializedNodeWithId): serializedNodeWithId[];
+/**
+ * Derive the most stable selector for a single node, ignoring ancestors:
+ *   1. `#id`                (when the id looks static, not an obvious nonce)
+ *   2. `[data-testid="…"]`  (or data-test / data-cy — test hooks)
+ *   3. `tag[name="…"]`      (form controls)
+ *   4. `tag.class.class`    (first two classes)
+ *   5. `tag`
+ * Returns `undefined` for non-element nodes.
+ */
+export declare function localSelector(node: serializedNodeWithId): string | undefined;
+/**
+ * Heuristic: does a token look like a stable hook rather than a generated
+ * nonce? Rejects hashed/utility tokens (long hex-ish runs, CSS-module suffixes
+ * like `Button_x8Hk2`, emotion `css-1q2w3e`). Keeps short, word-y identifiers.
+ */
+export declare function isStableToken(token: string): boolean;
+/**
+ * Derive a full selector path for `id` within `index`, climbing ancestors until
+ * an id/test-hook anchor is hit (or the document root). Joins with `>` to keep
+ * the path specific and short. Returns `undefined` if `id` is missing or not an
+ * element. The result is a best-effort selector for human/agent consumption and
+ * Playwright scripts — not guaranteed unique on a live page, but stable enough
+ * for the recorded snapshot.
+ */
+export declare function selectorFor(index: NodeIndex, id: number): string | undefined;
+export {};
+//# sourceMappingURL=selector.d.ts.map

package/dist/mcp/selector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector.d.ts","sourceRoot":"","sources":["../../src/mcp/selector.ts"],"names":[],"mappings":"AAUA,OAAO,EAAY,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,sEAAsE;AACtE,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,OAAO,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,oBAAoB,GAAG,SAAS,CAWhE;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE,oBAAoB,GAAG,oBAAoB,EAAE,CAM/E;AA8BD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAiC5E;AAOD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAWpD;AAwBD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAyC5E"}