@reclaimprotocol/agent 0.1.27 → 0.1.28

package/README.md

@@ -69,12 +69,12 @@ Or more loosely:
 
 The agent orchestrates the tools for you:
 
-1. **`reclaim_authenticate`** — a Chrome window opens the Reclaim dashboard; you sign in. The token is captured automatically and the tab closes. (Or it reuses a still-valid cached identity.)
+1. **`reclaim_authenticate`** — a local Chrome window opens the Reclaim dashboard; you sign in. The token is captured automatically and the tab closes. It never uses a Builder, container, custom-CDP, or shared browser. (Or it reuses a still-valid cached identity.)
 2. **`attach_browser` + `navigate`** — uses local Chrome, a Builder-hosted remote browser, or a custom CDP websocket; **`wait_for_page`** waits while you log in.
 3. **`start_capture` → `find_requests_containing` → `get_request`** — records network traffic and locates the request carrying your value.
 4. **`propose_provider`** — drafts the provider (a `contains` match + `jsonPath`/`xPath`/`regex` redaction), keeping any secret headers server-side.
 5. **`replay_request` → `run_proof`** — pre-flights the draft, then produces a verified zkTLS proof via the attestor.
-6. **`create_provider_version_from_capture`** — publishes it. **`get_me_providers`** lists what you own; pass a returned `providerId` back to publish a new version of an existing provider.
+6. **`create_provider_version_from_capture`** — publishes it as a new immutable semantic version. **`get_me_providers`** lists what you own; pass a returned `providerId` back to add a version. Patch is the default; request `major`, `minor`, `patch`, or an exact higher version.
 
 Your only manual steps are signing in when the browser windows open and confirming the value you want to prove.
 
@@ -98,7 +98,7 @@ These capture/synthesis/proof tools are backend-independent and registered in bo
 | `propose_provider`                          | Synthesize a provider — `contains` match + `jsonPath`/`xPath`/`regex` redaction                                |
 | `replay_request`                            | Pre-flight replay via Node `fetch` (no attestor); also used for auth-bound check by omitting `secretParamsRef` |
 | `run_proof`                                 | End-to-end zkTLS proof through the attestor SDK                                                                |
-| `create_provider_version_from_capture`      | Publish a drafted provider to the backend                                                                      |
+| `create_provider_version_from_capture`      | Publish a draft as a new immutable semantic version (patch by default)                                         |
 | `authenticate_builder`                      | In old-devtools mode only, sign in to Builder for remote-browser allocation                                   |
 | `list_builder_organizations`                | In old-devtools mode only, list organization ids for a quota-accounted Builder browser                         |
 | `share_browser_view`, `stop_browser_view`   | Put the `container` browser's own live view behind a public HTTPS URL (cloudflared quick tunnel), so someone elsewhere can watch it and act in it — from a phone if they like. Container mode only: a `builder` browser already returns a hosted `liveViewUrl`, and a plain local browser has no view to share |
@@ -110,8 +110,8 @@ These capture/synthesis/proof tools are backend-independent and registered in bo
 The MCP server targets one of two backends, selected by `USE_OLD_DEVTOOLS`:
 
 - **Old devtools (default).** The legacy devtools backend is still in production while the new "builder" backend is built, so this is the default — opt into builder with `USE_OLD_DEVTOOLS=false`. In old mode all auto-generated HTTP-API tools are disabled and a small client (`src/old/`) serves:
-  - `reclaim_authenticate` — by default opens the dashboard in Chrome via CDP, waits for sign-in, reads the Firebase token from page storage, and closes the tab (or pass a `token` / `ethAddress` to skip the browser).
-  - `create_provider_version_from_capture` — registers a new provider, or adds a version to an existing one when given a `providerId`.
+  - `reclaim_authenticate` — by default opens the dashboard in local Chrome over loopback CDP, waits for sign-in, reads the Firebase token from page storage, and closes the tab. It never uses a remote or shared authoring browser. Pass a `token` / `ethAddress` to skip the browser.
+  - `create_provider_version_from_capture` — registers a new provider, or adds a new immutable semantic version when given a `providerId`. It never edits an existing version.
   - `get_me_providers` — list the providers you own (the only provider-listing tool in this mode).
   - `session_analytics_logs` — the milestone events for a verification session, which show how far it got.
   - `session_logs` — the log entries the in-app SDK emitted during that session, each with its event type, log level, and logger name. Filter by event type, level, or substring, page with `limit` and `offset`, or set `saveTo` to write every matching entry to an NDJSON file. The backend searches only the last 3 days unless you pass `startTime` and `endTime`, and it deletes entries after 30 days.

package/lib/authoring/tools.js

@@ -129,7 +129,8 @@ export function authoringTools(resolveBackend) {
         defineTool({
             name: 'test_user_script',
             description: 'Dry-run a USER SCRIPT (the `jsUserScripts` / `customInjection` '
-                + 'field) in the LIVE attached tab, BEFORE publishing. Installs '
+                + 'field) in the LIVE attached tab while authoring or after provider '
+                + 'creation. Installs '
                 + '`script` via CDP so it runs on the next navigation exactly as '
                 + 'the real field would, then reports whether it ran and what it '
                 + 'threw. With `navigateUrl`, it navigates there and removes the '

package/lib/consts.d.ts

@@ -15,7 +15,7 @@
  *
  * Each var's default/fallback literal is co-located with its getter.
  */
-import { DEFAULT_BASE_URL } from '@reclaimprotocol/client';
+import { DEFAULT_BASE_URL } from '@reclaimprotocol/client/api';
 import { DEFAULT_OLD_API_URL, DEFAULT_OLD_LOGS_URL } from './old/client.ts';
 import { DEFAULT_SDK_API_URL } from './old/sdk-client.ts';
 /** Public attestor websocket URL — fallback for `RECLAIM_ATTESTOR_URL`. */

package/lib/consts.js

@@ -15,7 +15,7 @@
  *
  * Each var's default/fallback literal is co-located with its getter.
  */
-import { DEFAULT_BASE_URL } from '@reclaimprotocol/client';
+import { DEFAULT_BASE_URL } from '@reclaimprotocol/client/api';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { DEFAULT_OLD_API_URL, DEFAULT_OLD_LOGS_URL } from "./old/client.js";

package/lib/live/tunnel.d.ts

@@ -2,6 +2,10 @@ import { type CloudflaredBinary } from './cloudflared.ts';
 export interface Tunnel {
     /** The public HTTPS origin Cloudflare assigned. */
     url: string;
+    /** Whether the public viewer answered during the initial readiness probe. */
+    ready: boolean;
+    /** Bounded cloudflared output when the edge is still propagating. */
+    cloudflaredLog?: string;
     /** Terminate the tunnel. Safe to call more than once. */
     stop: () => Promise<void>;
     /** Which cloudflared ran, and whether we had to fetch it. */

package/lib/live/tunnel.js

@@ -23,9 +23,9 @@ import { LOGGER } from "../logger.js";
 import { resolveCloudflared } from "./cloudflared.js";
 /** How long to wait for cloudflared to report its hostname before giving up. */
 const URL_TIMEOUT_MS = 30000;
-/** After the hostname is printed, Cloudflare needs a moment before the edge
- *  routes to it — measured at ~3s. Wait for it so the caller never hands out a
- *  URL that errors. */
+/** After the hostname is printed, Cloudflare needs time before the edge routes
+ *  to it. Probe briefly, then return the still-running tunnel as propagating so
+ *  slow DNS or edge setup does not destroy an otherwise healthy share. */
 const READY_TIMEOUT_MS = 20000;
 const READY_POLL_MS = 1000;
 const STOP_TIMEOUT_MS = 5000;
@@ -109,7 +109,9 @@ export async function startTunnel(port, { autoInstall = true, probePath = '/', r
             // Keep watching after the hostname so a readiness failure can include
             // cloudflared's account of what happened.
             tail = (tail + text).slice(-LOG_TAIL_BYTES);
-            const match = QUICK_TUNNEL_URL.exec(text);
+            // Search the accumulated tail so a URL split across stream chunks is not
+            // missed. The tail is bounded and the URL appears near startup.
+            const match = QUICK_TUNNEL_URL.exec(tail);
             if (match) {
                 const url = match[0];
                 finish(() => {
@@ -119,17 +121,24 @@ export async function startTunnel(port, { autoInstall = true, probePath = '/', r
                             && child.signalCode === null,
                         pollMs: readyPollMs,
                         timeoutMs: readyTimeoutMs,
-                    }).then(async (ready) => {
+                    }).then((ready) => {
                         if (ready) {
-                            resolve({ url, stop, binary });
+                            resolve({ url, ready, stop, binary });
                             return;
                         }
-                        await stop();
-                        LOGGER.warn({ url, tail }, 'tunnel public URL never became reachable');
-                        reject(new Error('cloudflared created a hostname, but the public viewer did '
-                            + `not become reachable within ${readyTimeoutMs / 1000}s. `
-                            + 'Retry share_browser_view. cloudflared output:\n'
-                            + tail));
+                        if (child.exitCode !== null || child.signalCode !== null) {
+                            reject(new Error('cloudflared exited before the public viewer became reachable. '
+                                + 'cloudflared output:\n' + tail));
+                            return;
+                        }
+                        LOGGER.warn({ url, tail }, 'tunnel still propagating; returning the live hostname');
+                        resolve({
+                            url,
+                            ready,
+                            cloudflaredLog: tail,
+                            stop,
+                            binary,
+                        });
                     });
                 });
             }

package/lib/mcp/api/operations.gen.d.ts

@@ -19,6 +19,10 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
+    BindVerificationSessionTeeNonce: {
+        description: string;
+        inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
+    };
     CancelPublicListingRequest: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
@@ -67,10 +71,6 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
-    DeleteProviderVersion: {
-        description: string;
-        inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-    };
     DiscoverDataPoints: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
@@ -107,6 +107,10 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
+    GetVerificationFunnel: {
+        description: string;
+        inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
+    };
     GetVerificationSession: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
@@ -199,10 +203,6 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
-    UpdateProviderVersion: {
-        description: string;
-        inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-    };
 };
 export type McpToolName = keyof typeof MCP_TOOLS;
 export type McpToolShape = (typeof MCP_TOOLS)[McpToolName];