@reclaimprotocol/agent 0.1.21 → 0.1.22

package/lib/mcp/tools/agent/attach.js

@@ -18,6 +18,11 @@ export function attachTool(state, builderClient, name = 'attach_browser', before
                 + 'port), builder (quota-accounted Popcorn browser with a '
                 + 'shareable live view), or custom (caller-supplied CDP '
                 + 'websocket). '
+                + 'For builder mode, orgId may be omitted: it auto-resolves to '
+                + 'the account\'s only organization, or — if there is more '
+                + 'than one — returns needsChoice with the full list so the '
+                + 'caller can ask the developer which to use and re-call with '
+                + 'that orgId. '
                 + 'Builder and custom CDP credentials are held in memory and never '
                 + 'returned.',
         inputSchema: {
@@ -52,7 +57,30 @@ export function attachTool(state, builderClient, name = 'attach_browser', before
                 configPath: defaultConfigPath(),
             };
         }
-        const next = await connect(mode, parsed, persisted, builderClient, dependencies);
+        let orgId = parsed.orgId;
+        if (mode === 'builder' && !orgId) {
+            assert(builderClient, badRequest('Builder browser service is unavailable'));
+            const { data } = await builderClient.call('ListOrgs', { query: {} });
+            const orgs = data.items ?? [];
+            assert(orgs.length, badRequest('No organizations available for this account — create one '
+                + 'first, or authenticate as a user who belongs to one.'));
+            if (orgs.length > 1) {
+                return {
+                    needsChoice: true,
+                    message: 'This account belongs to more than one organization. Ask '
+                        + 'the developer which one to use, then re-call '
+                        + 'attach_browser with mode "builder" and that orgId.',
+                    organizations: orgs.map((o) => ({
+                        id: o.id,
+                        name: o.name,
+                        kind: o.kind,
+                        status: o.status,
+                    })),
+                };
+            }
+            orgId = orgs[0].id;
+        }
+        const next = await connect(mode, { ...parsed, orgId }, persisted, builderClient, dependencies);
         try {
             await beforeReplace?.();
             await disposeAttached(state);

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@reclaimprotocol/agent",
 	"title": "Reclaim Agent",
-	"version": "0.1.21",
+	"version": "0.1.22",
 	"description": "Reclaim Protocol's tools for agents — Reclaim Protocol lets your app verify **data points** about its users — a follower count, an account balance, an order history. This package gives your AI coding agent the tools to **find, build, test and fix the _data verification providers_** (the recipes that verify a data point) by inspecting and replaying captured requests, checking sessions, evaluate proofs, publishing updates, and much more.",
 	"type": "module",
 	"main": "./lib/index.js",
@@ -83,7 +83,7 @@
 		"@modelcontextprotocol/sdk": "^1.29.0",
 		"@noble/hashes": "^2.2.0",
 		"@reclaimprotocol/attestor-core": "^5.0.8",
-		"@reclaimprotocol/client": "0.1.21",
+		"@reclaimprotocol/client": "0.1.22",
 		"@reclaimprotocol/tls": "^0.1.3",
 		"chrome-remote-interface": "^0.33.0",
 		"domhandler": "^6.0.0",

package/skill/SKILL.builder.md

@@ -173,7 +173,9 @@ The value of any parameter marked secret is not included in the final proof, omi
 
     When done, tell the developer the version is live (PRIVATE) or submitted for review (PUBLIC), and that they can integrate using the `providerId`.
 
-    - **If a browser is still attached**, `create_provider_version_from_capture`'s response carries a `_notes` reminder about it. Surface that to the dev and ask whether they want to keep the session open for further edits — only call `dispose_browser` once they confirm they're done. Never close it unprompted; a `builder`-mode session is quota-accounted, but the dev may still be mid-workflow.
+    - **If a browser is still attached**, `create_provider_version_from_capture`'s response carries a `_notes` reminder about it. Surface that to the dev and ask whether they want to keep the session open for further edits — only call `dispose_browser` once they confirm they're done. Never close it unprompted; a `builder`-mode session is quota-accounted, but the dev may still be mid-workflow. Closing remote browsers
+    soon is also important to avoid wasting resources. So as best
+    practise, close remote browser session when not needed anymore.
 
 <!-- common: concerns-section -->
 

package/skill/SKILL.common.md

@@ -17,7 +17,7 @@ You drive the browser through the capture → draft → replay → prove loop us
 1. **Attach.** Call `attach_browser`. If it returns `needsChoice: true`, ask the dev which browser source they want:
    - `dedicated` — agent auto-launches Chrome with a dedicated profile under `~/.reclaim/chrome-profile`. Easiest local path; works out of the box.
    - `attach` — connect to a Chrome the dev is already running. **Important Chrome 136+ gotcha:** the dev's Chrome must be launched with BOTH `--remote-debugging-port=9222` AND `--user-data-dir=<some-non-default-path>`. Since Chrome 136 (May 2025), the debug-port flag is silently ignored when the default user profile is in use. If `attach` fails, tell them this verbatim and offer to switch to `dedicated`.
-   - `builder` — allocate a quota-accounted remote Popcorn browser. Obtain an `orgId` with `list_builder_organizations` in old-devtools mode or the generated `list_orgs` tool in Builder mode. If Builder answers 401, authenticate with `authenticate_builder` in old-devtools mode or the existing `authenticate` flow in Builder mode, then retry. Return the FULL `liveViewUrl` to the dev verbatim — on its own line, never abbreviated, elided, or wrapped in prose that truncates it — so it stays one clean, copy-pasteable string; they'll share it with the volunteer operating the browser. This works in both publishing modes and consumes one VERIFICATION-pool use under the chosen organization's normal plan restrictions.
+   - `builder` — allocate a quota-accounted remote Popcorn browser. If Builder answers 401, authenticate with `authenticate_builder` in old-devtools mode or the existing `authenticate` flow in Builder mode, then retry. You can omit `orgId` and call `attach_browser` directly: it auto-resolves to the account's only organization, or — if the account belongs to more than one — comes back with `needsChoice: true` and an `organizations` list; **ask the dev which one to use** (don't guess or default to the first) and re-call `attach_browser` with that `orgId`. (`list_builder_organizations` in old-devtools mode / `list_orgs` in Builder mode still work directly if you want the list up front instead.) Return the FULL `liveViewUrl` to the dev verbatim — on its own line, never abbreviated, elided, or wrapped in prose that truncates it — so it stays one clean, copy-pasteable string; they'll share it with the volunteer operating the browser. This works in both publishing modes and consumes one VERIFICATION-pool use under the chosen organization's normal plan restrictions.
    - `custom` — connect to a `ws://` or `wss://` CDP URL supplied by the dev. The URL is a credential: never repeat it, log it, or persist it. An optional `liveViewUrl` may be returned — if so, share it FULL and verbatim, same as `builder` above.
 
    Re-call with the chosen `mode` and its required fields.

package/src/mcp/tools/agent/attach.ts

@@ -70,6 +70,11 @@ export function attachTool(
 						+ 'port), builder (quota-accounted Popcorn browser with a '
 						+ 'shareable live view), or custom (caller-supplied CDP '
 						+ 'websocket). '
+						+ 'For builder mode, orgId may be omitted: it auto-resolves to '
+						+ 'the account\'s only organization, or — if there is more '
+						+ 'than one — returns needsChoice with the full list so the '
+						+ 'caller can ask the developer which to use and re-call with '
+						+ 'that orgId. '
 						+ 'Builder and custom CDP credentials are held in memory and never '
 						+ 'returned.',
 			inputSchema: {
@@ -107,8 +112,42 @@ export function attachTool(
 				}
 			}
 
+			let orgId = parsed.orgId
+			if(mode === 'builder' && !orgId) {
+				assert(
+					builderClient,
+					badRequest('Builder browser service is unavailable'),
+				)
+				const { data } = await builderClient.call('ListOrgs', { query: {} })
+				const orgs = data.items ?? []
+				assert(
+					orgs.length,
+					badRequest(
+						'No organizations available for this account — create one '
+						+ 'first, or authenticate as a user who belongs to one.',
+					),
+				)
+				if(orgs.length > 1) {
+					return {
+						needsChoice: true,
+						message:
+							'This account belongs to more than one organization. Ask '
+							+ 'the developer which one to use, then re-call '
+							+ 'attach_browser with mode "builder" and that orgId.',
+						organizations: orgs.map((o) => ({
+							id: o.id,
+							name: o.name,
+							kind: o.kind,
+							status: o.status,
+						})),
+					}
+				}
+
+				orgId = orgs[0].id
+			}
+
 			const next = await connect(
-				mode, parsed, persisted, builderClient, dependencies,
+				mode, { ...parsed, orgId }, persisted, builderClient, dependencies,
 			)
 			try {
 				await beforeReplace?.()