@remcp/runtime 0.2.179 → 0.2.181

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.2.181 — 2026-10-25
+
+- Add bounded read-only `browser_devtools` Form Map and selector-scoped computed Styles/box-model inspection with no user-entered values, raw CSS, URL content or page text in diagnostic reports.
+- Add optional `expected_tag` and `expected_type` safeguards for `fill_form` and workflow form batches; reject duplicates and detached DOM controls to reduce stale-selector writes.
+- Keep explicit per-tab target_id, loopback Chrome CDP, URL/DNS safety checks, authenticated tool permissions, and explicit submit boundaries. Add real Chromium QA scripts and regression tests.
+
+## 0.2.180 — 2026-10-25
+
+- Add redacted `browser_navigation_failed`, `browser_target_stale`, `browser_session_lost` and `browser_guard_failed` classifications for Chrome CDP failures, without disclosing error details, tab IDs or URLs.
+- Fail `Page.navigate` when Chrome provides a nonempty errorText instead of returning false success; preserve explicit target, origin and security checks.
+- Add focused regression coverage without changing the public 84-tool runtime interface.
+
+## 0.2.179 — 2026-10-25
+
+- Add one-element native CDP listener diagnostics without exposing script source, page text or untrusted raw event handler content.
+- Maintain the same 84 runtime tool names and the existing browser origin and permission boundaries.
+
+## 0.2.178 — 2026-10-25
+
+- Add bounded DOMSnapshot geometry diagnostics to detect potential viewport overflows and layout issues without screenshots.
+- Preserve privacy of raw DOM content and do not misclassify suspected geometry issues as confirmed CSS defects.
+
+## 0.2.177 — 2026-10-24
+
+- Add native read-only Chrome DevTools diagnostics for console, network, performance, layout and accessibility, plus selected-tab DOM inspection in the web Devices workspace.
+- Do not auto-start a user browser during read-only probes or expose CDP outside loopback.
+
 ## 0.2.176 — 2026-10-23
 
 - Reduce screenshot CDP round-trips by batching viewport resolution with capture and reusing measured element dimensions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.179",
+  "version": "0.2.181",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/error-classes.mjs

@@ -14,11 +14,28 @@ export function classifyRuntimeToolError(error, toolName = '') {
   if (MISSING_CODES.has(code)) return 'not_found';
   if (TIMEOUT_CODES.has(code)) return 'timeout';
   if (browserTool && CONNECTION_CODES.has(code)) return 'browser_unavailable';
+  if (browserTool && code === 'BROWSER_TARGET_DISAPPEARED') return 'browser_target_stale';
   if (/\bcancelled\b|\bcanceled\b|\baborted by the client\b/.test(message)) return 'cancelled';
   if (/blocked (?:by|local|private)|outside the directories this device allows|private browser destination|blocked local browser scheme/.test(message)) return 'blocked';
   if (browserTool && /browser cdp endpoint is unavailable|browser control is unavailable|cdp websocket (?:error|connection timed out)|local cdp endpoint did not become ready/.test(message)) {
     return 'browser_unavailable';
   }
+  if (browserTool) {
+    // Match only fixed CDP failure signatures; never emit the error text, tab ID,
+    // destination URL or selector as a telemetry category.
+    if (/browser child guard failed|browser request guard failed|browser safety guard failed/.test(message)) {
+      return 'browser_guard_failed';
+    }
+    if (/browser cdp target disappeared|target (?:was )?closed|no target with given id|target with given id not found|inspected target navigated or closed/.test(message)) {
+      return 'browser_target_stale';
+    }
+    if (/cdp websocket (?:closed|is not open)|session with given id not found|cdp session (?:closed|disconnected)/.test(message)) {
+      return 'browser_session_lost';
+    }
+    if (/browser navigation failed|cannot navigate (?:back|forward)|net::err_[a-z_]+/.test(message)) {
+      return 'browser_navigation_failed';
+    }
+  }
   if (/permission denied|access is denied|not authorized|not authorised|accessibility permission/.test(message)) return 'permission';
   if (/timed out|timeout after|time limit exceeded/.test(message)) return 'timeout';
   if (/element not found|no element matches|no matching ui window|target not found|not found in the current/.test(message)) return 'not_found';

package/src/extended/browser-actions.mjs

@@ -119,6 +119,7 @@ export const PAGE_ELEMENT_ACTION = `function(selector, needle, action, value) {
 // Bounded form mutation: validate every target before changing any field.
 // Values are intentionally excluded from the return object and tool logs.
 export const PAGE_FILL_FORM = `function(fields) {
+  const used = new Set();
   const targets = fields.map(field => {
     const el = document.querySelector(field.selector);
     if (!el || !el.getClientRects().length || el.disabled || el.readOnly ||
@@ -127,6 +128,14 @@ export const PAGE_FILL_FORM = `function(fields) {
     }
     const tag = el.tagName.toLowerCase();
     if (!['input','textarea','select'].includes(tag)) throw new Error('Unsupported form field: ' + field.selector);
+    if (used.has(el)) throw new Error('Duplicate form field target');
+    used.add(el);
+    // Form Map selectors are structural; verify the observed kind again after any rerender.
+    const actualType = tag === 'input' ? (el.type || 'text').toLowerCase() : tag;
+    if ((field.expected_tag && field.expected_tag !== tag) ||
+        (field.expected_type && field.expected_type !== actualType)) {
+      throw new Error('Form field kind changed; refresh the form map');
+    }
     if (tag === 'input' && ['checkbox','radio'].includes(el.type) && typeof field.value !== 'boolean') {
       throw new Error('Checkbox and radio fields require a boolean value: ' + field.selector);
     }
@@ -137,6 +146,8 @@ export const PAGE_FILL_FORM = `function(fields) {
   });
   const summary = [];
   for (const {el,tag,value} of targets) {
+    // A change handler from an earlier field can detach a later field mid-batch.
+    if (el.isConnected === false) throw new Error('Form rerendered during the batch; refresh the form map');
     const checkbox = tag === 'input' && ['checkbox','radio'].includes(el.type);
     const prop = checkbox ? 'checked' : 'value';
     let prototype = Object.getPrototypeOf(el);
@@ -158,6 +169,7 @@ export function validateFormFields(fields) {
   if (!Array.isArray(fields) || fields.length < 1 || fields.length > 20) {
     throw new Error('fill_form requires 1 to 20 fields');
   }
+  const seen = new Set();
   return fields.map(field => {
     const selector = typeof field?.selector === 'string' ? field.selector.trim() : '';
     if (!selector || selector.length > 512 || !Object.hasOwn(field,'value') ||
@@ -166,7 +178,20 @@ export function validateFormFields(fields) {
       throw new Error('Each form field requires a CSS selector and a string/boolean/number value');
     }
     if (String(field.value).length > 16384) throw new Error('Form field value exceeds 16384 characters');
-    return {selector, value:field.value};
+    if (seen.has(selector)) throw new Error('Duplicate CSS selector in form batch');
+    seen.add(selector);
+    const expected_tag = field.expected_tag;
+    const expected_type = field.expected_type;
+    if (expected_tag != null && !['input','select','textarea'].includes(expected_tag))
+      throw new TypeError('Unsupported expected_tag');
+    if (expected_type != null && ![
+      'text','email','password','tel','url','search','number','date','time','datetime-local',
+      'month','week','color','range','checkbox','radio','file','hidden','submit','reset','button',
+      'select','textarea'
+    ].includes(expected_type)) throw new TypeError('Unsupported expected_type');
+    return {selector, value:field.value,
+      ...(expected_tag == null ? {} : {expected_tag}),
+      ...(expected_type == null ? {} : {expected_type})};
   });
 }
 

package/src/extended/browser-devtools.mjs

@@ -5,6 +5,8 @@ import { withTarget } from './browser-session.mjs';
 import { inspectNativeBrowserAudit } from './browser-native-audit.mjs';
 import { inspectDomGeometry } from './browser-geometry.mjs';
 import { inspectElementListeners } from './browser-listeners.mjs';
+import { inspectFormMap } from './browser-form-map.mjs';
+import { inspectScopedStyles } from './browser-styles.mjs';
 
 const METRIC_NAMES = new Set([
   'Timestamp','Documents','Frames','JSEventListeners','Nodes','LayoutCount',
@@ -45,6 +47,8 @@ export async function sampleBrowserDevtools(session, action, durationMs, maxEven
   if (action === 'layout' || action === 'accessibility') return inspectNativeBrowserAudit(session, action);
   if (action === 'geometry') return inspectDomGeometry(session);
   if (action === 'listeners') return inspectElementListeners(session,selector);
+  if (action === 'form_map') return inspectFormMap(session);
+  if (action === 'styles') return inspectScopedStyles(session,selector);
   if (action === 'performance') {
     await session.send('Performance.enable');
     try {
@@ -105,15 +109,17 @@ export async function sampleBrowserDevtools(session, action, durationMs, maxEven
 }
 export function buildDevtoolsReport(target, action, result) {
   return { target_id:target.id,
-    ...(['geometry','listeners'].includes(action) ? {} : {url:safeDevtoolsUrl(target.url)}),
+    ...(['geometry','listeners','form_map','styles'].includes(action) ? {} : {url:safeDevtoolsUrl(target.url)}),
     ...result };
 }
 export async function browserDevtools(args = {}) {
-  const action = requireEnum(args.action, 'action', ['console','network','performance','layout','accessibility','geometry','listeners']);
+  const action = requireEnum(args.action, 'action', ['console','network','performance','layout','accessibility','geometry','listeners','form_map','styles']);
   const durationMs = clamp(args.sample_ms, 1500, 250, 5000);
   const maxEvents = clamp(args.max_events, 50, 1, 100);
-  if (action === 'listeners' && (typeof args.target_id !== 'string' || !args.target_id.trim()))
-    throw new TypeError('Listener diagnostics require an explicitly selected target_id');
+  if (['listeners','form_map','styles'].includes(action) && (typeof args.target_id !== 'string' || !args.target_id.trim()))
+    throw new TypeError('Scoped DOM diagnostics require an explicitly selected target_id');
+  if (action==='styles' && (typeof args.selector!=='string'||!args.selector.trim()))
+    throw new TypeError('Scoped style diagnostics require a CSS selector');
   return withTarget(args, async (session,target) =>
     jsonResult(buildDevtoolsReport(target, action,
       await sampleBrowserDevtools(session,action,durationMs,maxEvents,args.selector))));

package/src/extended/browser-form-map.mjs

@@ -0,0 +1,134 @@
+// Read-only Chrome DOMSnapshot form map. Page strings/attributes never leave this module.
+// Structural selectors contain only allowlisted HTML tag names and sibling indexes.
+const TAGS = new Set(['HTML','HEAD','BODY','DIV','MAIN','SECTION','ARTICLE','ASIDE','FORM','FIELDSET',
+  'LABEL','INPUT','SELECT','TEXTAREA','BUTTON','SPAN','P','UL','LI','DIALOG','TABLE','TR','TD']);
+const FIELDS = new Set(['INPUT','SELECT','TEXTAREA']);
+const TYPES = new Set(['text','email','password','tel','url','search','number','date','time',
+  'datetime-local','month','week','color','range','checkbox','radio','file','hidden','submit',
+  'reset','button','image']);
+const AUTOCOMPLETE = new Set(['on','off','name','given-name','family-name','email','username',
+  'new-password','current-password','one-time-code','tel','street-address','postal-code',
+  'country','country-name','organization','address-line1','address-line2','address-level1',
+  'address-level2','cc-name','cc-number','cc-exp','cc-exp-month','cc-exp-year','cc-csc']);
+const MAX_NODES=12000, MAX_FIELDS=40, MAX_FORMS=8, MAX_DEPTH=16;
+const safeNum = n => Number.isSafeInteger(n) && n>=0 ? n : -1;
+function nodeTag(nodes,strings,i) {
+  const name=strings?.[nodes?.nodeName?.[i]];
+  if (typeof name !== 'string') return '';
+  const tag=name.toUpperCase();
+  // Chrome also reports a lowercase 'html' doctype, which is not an element.
+  return name===tag && TAGS.has(tag) ? tag : '';
+}
+function attrs(nodes,strings,i) {
+  const list=nodes?.attributes?.[i];
+  const found=Object.create(null);
+  if (!Array.isArray(list)) return found;
+  for(let j=0;j<Math.min(list.length,80)-1;j+=2) {
+    const name=strings?.[list[j]], value=strings?.[list[j+1]];
+    // Chrome encodes valueless HTML attributes (for example required) with -1.
+    if(typeof name==='string' && name.length<=40)
+      found[name.toLowerCase()]=typeof value==='string'?value:'';
+  }
+  return found;
+}
+function ancestorWithTag(i,parents,tags,tag) {
+  let current=i;
+  for(let depth=0;depth<MAX_DEPTH;depth++) {
+    current=parents[current];
+    if(!Number.isSafeInteger(current)||current<0||current>=tags.length) return -1;
+    if(tags[current]===tag)return current;
+  }
+  return -1;
+}
+function structuralSelector(i,parents,tags,siblingPositions) {
+  const parts=[];
+  let current=i;
+  for(let depth=0;depth<MAX_DEPTH;depth++) {
+    const tag=tags[current], pos=siblingPositions[current];
+    if(!tag||!pos) return null;
+    parts.push(tag.toLowerCase()+':nth-of-type('+pos+')');
+    if(tag==='HTML')break;
+    const parent=parents[current];
+    if(!Number.isSafeInteger(parent)||parent<0) break;
+    if(parent>=tags.length||parent===current) return null;
+    current=parent;
+  }
+  if(parts.at(-1)!=='html:nth-of-type(1)') return null;
+  const css=parts.reverse().join(' > ');
+  return css.length<=350 ? css : null;
+}
+export function summarizeFormMap(snapshot) {
+  const docs=Array.isArray(snapshot?.documents)?snapshot.documents:[];
+  const nodes=docs[0]?.nodes||{}, strings=Array.isArray(snapshot?.strings)?snapshot.strings:[];
+  const parents=Array.isArray(nodes.parentIndex)?nodes.parentIndex:[];
+  const total=Math.min(MAX_NODES,Array.isArray(nodes.nodeName)?nodes.nodeName.length:0);
+  const tags=Array.from({length:total},(_,i)=>nodeTag(nodes,strings,i));
+  const siblingPositions=new Array(total).fill(0), counts=new Map();
+  for(let i=0;i<total;i++) {
+    if(!tags[i])continue;
+    const parent=safeNum(parents[i]);
+    const key=parent+':'+tags[i], ordinal=(counts.get(key)||0)+1;
+    counts.set(key,ordinal);
+    siblingPositions[i]=ordinal;
+  }
+  const forms=[],formByIndex=new Map(), labelsFor=new Set();
+  for(let i=0;i<total;i++) {
+    if(tags[i]==='LABEL') {
+      const associated=attrs(nodes,strings,i).for;
+      if(associated) labelsFor.add(associated);
+    }
+    if(tags[i]==='FORM') {
+      const record={index:i,field_count:0,required_count:0,unlabeled_count:0,submit_count:0};
+      forms.push(record);formByIndex.set(i,record);
+    }
+  }
+  let fieldCount=0,requiredCount=0,unlabeledCount=0,disabledCount=0,unownedCount=0,submitCount=0;
+  const types=Object.create(null), fields=[];
+  for(let i=0;i<total;i++) {
+    const tag=tags[i];
+    if(!FIELDS.has(tag) && tag!=='BUTTON')continue;
+    const a=attrs(nodes,strings,i);
+    const rawType=tag==='INPUT' ? (a.type||'text').toLowerCase() : tag==='BUTTON'
+      ? (a.type||'submit').toLowerCase() : tag.toLowerCase();
+    const type=TYPES.has(rawType)?rawType:tag==='BUTTON'?'button':tag.toLowerCase()==='input'?'other':tag.toLowerCase();
+    const formIndex=ancestorWithTag(i,parents,tags,'FORM');
+    const form=formByIndex.get(formIndex);
+    const isSubmit=type==='submit';
+    if(isSubmit) {submitCount++; if(form) form.submit_count++;}
+    if(!FIELDS.has(tag))continue;
+    fieldCount++;if(form)form.field_count++;else unownedCount++;
+    types[type]=(types[type]||0)+1;
+    const required=Object.hasOwn(a,'required')||a['aria-required']==='true';
+    const disabled=Object.hasOwn(a,'disabled');
+    const labeled=Boolean(a['aria-label']?.trim()||a['aria-labelledby']?.trim()
+      ||(a.id && labelsFor.has(a.id))||ancestorWithTag(i,parents,tags,'LABEL')>=0);
+    if(required) {requiredCount++;if(form)form.required_count++;}
+    if(disabled)disabledCount++;
+    if(!labeled && type!=='hidden' && type!=='submit' && type!=='reset' && type!=='button') {
+      unlabeledCount++;if(form)form.unlabeled_count++;
+    }
+    if(fields.length<MAX_FIELDS) {
+      const autocomplete=typeof a.autocomplete==='string' ? a.autocomplete.trim().toLowerCase() : '';
+      fields.push({selector:structuralSelector(i,parents,tags,siblingPositions),tag:tag.toLowerCase(),
+        type,required,disabled,has_label:labeled,
+        autocomplete:AUTOCOMPLETE.has(autocomplete)?autocomplete:null,
+        form_index:formIndex>=0?forms.findIndex(f=>f.index===formIndex):null});
+    }
+  }
+  return {form_count:forms.length,field_count:fieldCount,required_count:requiredCount,
+    disabled_count:disabledCount,unlabeled_candidate_count:unlabeledCount,
+    unowned_field_count:unownedCount,submit_count:submitCount,
+    by_type:Object.fromEntries(Object.entries(types).sort((a,b)=>b[1]-a[1])),
+    forms:forms.slice(0,MAX_FORMS).map(f=>({field_count:f.field_count,
+      required_count:f.required_count,unlabeled_candidate_count:f.unlabeled_count,
+      submit_count:f.submit_count})), fields,
+    frames_omitted:Math.max(0,docs.length-1),
+    truncated:total<(nodes.nodeName?.length||0)||fieldCount>MAX_FIELDS||forms.length>MAX_FORMS,
+    note:'Native read-only DOMSnapshot; fields have structural selectors, type and label-presence flags only. No input values, raw attributes, names, label text, page text or URLs are returned. Selectors may become stale after re-render. Label candidates are heuristic; only the main frame is inspected.'};
+}
+export async function inspectFormMap(session) {
+  const snapshot=await session.send('DOMSnapshot.captureSnapshot',{
+    computedStyles:[],includePaintOrder:false,includeDOMRects:false,
+  });
+  return {action:'form_map',form_map:summarizeFormMap(snapshot)};
+}

package/src/extended/browser-listeners.mjs

@@ -11,11 +11,11 @@ const TYPES = new Set([
 ]);
 const MAX_LISTENERS = 200;
 const MAX_TYPES = 24;
-function validSelector(value) {
+export function validSelector(value,maxLength=120,allowChildCombinator=false) {
   if (typeof value !== 'string') throw new TypeError('A CSS selector is required for the event listener audit');
   const selector = value.trim();
-  if (!selector || selector.length > 120 || /[\u0000-\u001f\u007f<>]/.test(selector)) {
-    throw new TypeError('A CSS selector between 1 and 120 safe characters is required');
+  if (!selector || selector.length > maxLength || /[\u0000-\u001f\u007f<]/.test(selector) || (!allowChildCombinator && selector.includes('>'))) {
+    throw new TypeError('A CSS selector between 1 and '+maxLength+' safe characters is required');
   }
   return selector;
 }

package/src/extended/browser-navigation-result.mjs

@@ -0,0 +1,8 @@
+// Page.navigate may resolve successfully while Chrome explicitly reports a
+// navigation error. Treat that as a failed tool call, without echoing CDP's
+// errorText (which may contain user data) into diagnostics.
+export function requireSuccessfulBrowserNavigation(result) {
+  if (typeof result?.errorText === 'string' && result.errorText.trim()) {
+    throw new Error('Browser navigation failed: Chrome reported an unsuccessful navigation');
+  }
+}

package/src/extended/browser-read.mjs

@@ -1,4 +1,5 @@
 import { snapshotDelta } from './browser-snapshot-diff.mjs';
+import { requireSuccessfulBrowserNavigation } from './browser-navigation-result.mjs';
 import process from 'node:process';
 import os from 'node:os';
 import path from 'node:path';
@@ -75,6 +76,7 @@ export async function browserNavigate(args = {}) {
     let historyUrl = null;
     if (action === 'url') {
       const result = await session.send('Page.navigate', { url });
+      requireSuccessfulBrowserNavigation(result);
       frameId = result.frameId || null;
       errorText = result.errorText || null;
     } else if (action === 'reload') {

package/src/extended/browser-session.mjs

@@ -1,3 +1,4 @@
+import { requireSuccessfulBrowserNavigation } from './browser-navigation-result.mjs';
 import process from 'node:process';
 import os from 'node:os';
 import path from 'node:path';
@@ -350,6 +351,7 @@ export async function createGuardedNewTab(url, args) {
     await session.send('Page.enable');
     const loaded = session.waitFor('Page.loadEventFired', clamp(args.timeout_ms, 15_000, 500, 120_000)).catch(() => null);
     const navigation = await session.send('Page.navigate', { url });
+    requireSuccessfulBrowserNavigation(navigation);
     if (loaded) await loaded;
     const finalUrl = await evaluate(session, 'location.href');
     await assertResolvedPageUrl(finalUrl);

package/src/extended/browser-styles.mjs

@@ -0,0 +1,83 @@
+// Scoped, read-only Chrome CSS/box model summary. Filter raw styles locally:
+// Never return selector, custom properties, images, text or background URLs.
+import { validSelector } from './browser-listeners.mjs';
+
+const ENUMS = {
+  display:new Set(['none','block','inline','inline-block','flex','inline-flex','grid','inline-grid','contents','table','table-cell','flow-root','list-item']),
+  position:new Set(['static','relative','absolute','fixed','sticky']),
+  visibility:new Set(['visible','hidden','collapse']),
+  overflowX:new Set(['visible','hidden','clip','scroll','auto']),
+  overflowY:new Set(['visible','hidden','clip','scroll','auto']),
+  pointerEvents:new Set(['auto','none']),
+  boxSizing:new Set(['content-box','border-box']),
+  whiteSpace:new Set(['normal','nowrap','pre','pre-wrap','pre-line','break-spaces']),
+};
+const STYLE_FIELDS = {
+  display:'display',position:'position',visibility:'visibility',
+  'overflow-x':'overflowX','overflow-y':'overflowY',
+  'pointer-events':'pointerEvents','box-sizing':'boxSizing','white-space':'whiteSpace'
+};
+const LENGTHS=['font-size','line-height','padding-top','padding-right','padding-bottom','padding-left',
+  'margin-top','margin-right','margin-bottom','margin-left','width','height'];
+function rounded(value) {return Number.isFinite(value) ? Math.round(Math.max(-100000,Math.min(100000,value))*100)/100 : null;}
+function lengthPx(value) {
+  if(typeof value!=='string')return null;
+  const m=/^(-?\d+(?:\.\d+)?)px$/.exec(value.trim());
+  return m?rounded(Number(m[1])):null;
+}
+export function summarizeComputedStyle(raw) {
+  const all=new Map((Array.isArray(raw)?raw:[])
+    .filter(item=>typeof item?.name==='string'&&typeof item?.value==='string')
+    .map(item=>[item.name,item.value]));
+  const result={};
+  for(const [css,key] of Object.entries(STYLE_FIELDS)) {
+    const value=all.get(css);
+    if(ENUMS[key].has(value))result[key]=value;
+  }
+  for(const css of LENGTHS) {
+    const value=lengthPx(all.get(css));
+    if(value!=null)result[css.replaceAll('-','_')+'_px']=value;
+  }
+  const opacity=Number(all.get('opacity'));
+  if(all.has('opacity')&&Number.isFinite(opacity)&&opacity>=0&&opacity<=1)result.opacity=rounded(opacity);
+  const zi=all.get('z-index');
+  if(zi==='auto')result.z_index='auto';
+  else if(typeof zi==='string'&&/^-?\d+$/.test(zi)) {
+    const num=rounded(Number(zi));
+    if(num!=null)result.z_index=num;
+  }
+  return result;
+}
+function rect(quad) {
+  if(!Array.isArray(quad)||quad.length!==8||quad.some(v=>typeof v!=='number'||!Number.isFinite(v)))return null;
+  const xs=[quad[0],quad[2],quad[4],quad[6]];
+  const ys=[quad[1],quad[3],quad[5],quad[7]];
+  const minX=Math.min(...xs),maxX=Math.max(...xs),minY=Math.min(...ys),maxY=Math.max(...ys);
+  return {x:rounded(minX),y:rounded(minY),width:rounded(maxX-minX),height:rounded(maxY-minY)};
+}
+export function summarizeBoxModel(model) {
+  if(!model||typeof model!=='object')return null;
+  const border=rect(model.border),content=rect(model.content);
+  if(!border)return null;
+  return {border,content,content_width_px:rounded(model.width),content_height_px:rounded(model.height)};
+}
+export async function inspectScopedStyles(session,selectorValue) {
+  const selector=validSelector(selectorValue,350,true);
+  await session.send('DOM.enable');
+  try {
+    await session.send('CSS.enable');
+    const {root}=await session.send('DOM.getDocument',{depth:0,pierce:false});
+    if(!Number.isSafeInteger(root?.nodeId)||root.nodeId<=0)throw new Error('CDP document root unavailable');
+    const {nodeId}=await session.send('DOM.querySelector',{nodeId:root.nodeId,selector});
+    if(!Number.isSafeInteger(nodeId)||nodeId<=0)return {action:'styles',found:false};
+    const [styles,box]=await Promise.all([
+      session.send('CSS.getComputedStyleForNode',{nodeId}),
+      session.send('DOM.getBoxModel',{nodeId}).catch(()=>null)
+    ]);
+    return {action:'styles',found:true,style:summarizeComputedStyle(styles.computedStyle),
+      box:summarizeBoxModel(box?.model),
+      note:'Scoped native CSS/box-model audit. Values are limited to allowlisted enums, pixel dimensions and numbers. It excludes raw CSS, selector, background URLs and page text. Border geometry is axis-aligned after transforms; inspect a screenshot only for visual details.'};
+  } finally {
+    await Promise.allSettled([session.send('CSS.disable'),session.send('DOM.disable')]);
+  }
+}

package/src/extended/catalog.mjs

@@ -165,9 +165,9 @@ export const extendedToolDefinitions = [
   define('browser_navigate', 'Browser navigate', 'Open a new debuggable tab or navigate a selected browser page by URL, history back/forward, or reload through Chrome DevTools Protocol.', o({ ...browserTarget, action:e(['url','new_tab','back','forward','reload'], 'Default url when url is provided, otherwise reload. new_tab creates the first page target when needed.'), url:s('Destination URL for action=url or action=new_tab.'), wait:b('Wait for the page load event; default true.'), ignore_cache:b('Reload without cache when action=reload.') }), openMutatingNonDestructive, browserHandlers.browser_navigate, ['browser_cdp']),
   define('browser_snapshot', 'Browser snapshot', 'Return a full or incremental accessibility tree (diff_from snapshot_id) through Chrome DevTools Protocol and, when requested, attach a real rendered viewport PNG for visual verification. A selector is temporarily recentered for capture, its exact viewport bounds are returned, and the prior scroll position is restored before return.', o({ ...browserTarget, max_nodes:n('Maximum AX nodes; default 1500.'), diff_from:s('Optional previous opaque snapshot_id for this exact target/page and node limit. Return changed/removed AX nodes only; if stale or mismatched, safely return a full snapshot.'), include_screenshot:b('Attach a real CDP-rendered viewport PNG screenshot; default false.'), selector:s('When include_screenshot=true, center this CSS-selected element before capture and report its viewport bounds.') }), readOnlyOpen, browserHandlers.browser_snapshot, ['browser_cdp']),
   define('browser_find', 'Find browser element', 'Find visible DOM elements by CSS selector, text, or ARIA role and return reusable selectors plus text, value, and bounding boxes.', o({ ...browserTarget, selector:s('CSS selector.'), text:s('Visible text substring.'), role:s('ARIA role.'), limit:n() }), readOnlyOpen, browserHandlers.browser_find, ['browser_cdp']),
-  define('browser_action', 'Browser element action', 'Click, focus, type/set a value, fill up to 20 form fields in one guarded call, select, scroll a page or scrollable element, scroll an element into view, upload files, press a key, or set an exact responsive-test viewport in a debuggable browser page using DOM/CDP semantics.', o({ ...browserTarget, action:e(['click','focus','type','set_value','select','scroll','scroll_into_view','upload','press','set_viewport','fill_form','workflow']), selector:s('CSS selector for the target element; prefer the reusable selector returned by browser_find.'), steps:{type:'array',minItems:1,maxItems:12,description:'Workflow on one page: explicit CSS actions and bounded waits, max 12 seconds. Never silently submits; click must be explicit.',items:{type:'object',additionalProperties:false,properties:{action:e(['fill_form','set_value','select','focus','click','wait_for']),selector:s('CSS selector for action or wait_for.'),value:{type:['string','number','boolean']},fields:{type:'array',description:'CSS-selected field edits within the workflow step; no implicit form submission.',minItems:1,maxItems:20,items:{type:'object',additionalProperties:false,properties:{selector:s(),value:{type:['string','number','boolean']}},required:['selector','value']}},condition:e(['selector','text','url_contains','load']),text:s('Text or URL fragment for wait condition.'),timeout_ms:n('Wait timeout 100..4000 ms; default 1500.')},required:['action']}}, fields:{type:'array',minItems:1,maxItems:20,items:{type:'object',additionalProperties:false,properties:{selector:s('CSS selector.'),value:{type:['string','boolean','number'],description:'New field value; not returned in results.'}},required:['selector','value']},description:'fill_form: 1–20 CSS form fields in one CDP call. Does not submit.'}, browser_text:s('Visible text used only to locate a DOM element; use this instead of overloading text for action=type.'), text:s('For action=type, Unicode text to insert. For non-type element actions without selector/browser_text, visible text may identify the target.'), clear:b('For action=type, clear the current value before inserting text.'), value:s('Value for action=set_value; also accepted as a legacy type payload when text is used as the locator.'), text_value:s('Compatibility alias for the type/set_value text value.'), option:s(), delta_x:n('Horizontal scroll delta; positive means right.'), delta_y:n('Vertical scroll delta; positive means down.'), delta:n('Alias for delta_y.'), direction:e(['up','down','left','right']), wheel_times:n('Number of 120-unit wheel steps for direction; 1..50.'), path:s(), paths:{type:'array',items:{type:'string'}}, key:s(), width:n('CSS viewport width for set_viewport.'), height:n('CSS viewport height for set_viewport.'), device_scale_factor:n('Device scale factor for set_viewport; default 1.'), mobile:b('Enable mobile emulation for set_viewport.') }, ['action']), openMutating, browserHandlers.browser_action, ['browser_cdp']),
+  define('browser_action', 'Browser element action', 'Click, focus, type/set a value, fill up to 20 form fields in one guarded call, select, scroll a page or scrollable element, scroll an element into view, upload files, press a key, or set an exact responsive-test viewport in a debuggable browser page using DOM/CDP semantics.', o({ ...browserTarget, action:e(['click','focus','type','set_value','select','scroll','scroll_into_view','upload','press','set_viewport','fill_form','workflow']), selector:s('CSS selector for the target element; prefer the reusable selector returned by browser_find.'), steps:{type:'array',minItems:1,maxItems:12,description:'Workflow on one page: explicit CSS actions and bounded waits, max 12 seconds. Never silently submits; click must be explicit.',items:{type:'object',additionalProperties:false,properties:{action:e(['fill_form','set_value','select','focus','click','wait_for']),selector:s('CSS selector for action or wait_for.'),value:{type:['string','number','boolean']},fields:{type:'array',description:'CSS-selected field edits within the workflow step; no implicit form submission.',minItems:1,maxItems:20,items:{type:'object',additionalProperties:false,properties:{selector:s(),value:{type:['string','number','boolean']},expected_tag:e(['input','select','textarea'],'Optional HTML tag from Forms; rejects stale selector mismatches.'),expected_type:e(['text','email','password','tel','url','search','number','date','time','datetime-local','month','week','color','range','checkbox','radio','file','hidden','submit','reset','button','select','textarea'],'Optional field type from Forms; checked immediately before batch writes.')},required:['selector','value']}},condition:e(['selector','text','url_contains','load']),text:s('Text or URL fragment for wait condition.'),timeout_ms:n('Wait timeout 100..4000 ms; default 1500.')},required:['action']}}, fields:{type:'array',minItems:1,maxItems:20,items:{type:'object',additionalProperties:false,properties:{selector:s('CSS selector.'),value:{type:['string','boolean','number'],description:'New field value; not returned in results.'},expected_tag:e(['input','select','textarea'],'Expected tag from the native form map; stale selectors fail without writes.'),expected_type:e(['text','email','password','tel','url','search','number','date','time','datetime-local','month','week','color','range','checkbox','radio','file','hidden','submit','reset','button','select','textarea'],'Expected field type from the native form map; stale selectors fail without writes.')},required:['selector','value']},description:'fill_form: 1–20 CSS form fields in one CDP call. Does not submit.'}, browser_text:s('Visible text used only to locate a DOM element; use this instead of overloading text for action=type.'), text:s('For action=type, Unicode text to insert. For non-type element actions without selector/browser_text, visible text may identify the target.'), clear:b('For action=type, clear the current value before inserting text.'), value:s('Value for action=set_value; also accepted as a legacy type payload when text is used as the locator.'), text_value:s('Compatibility alias for the type/set_value text value.'), option:s(), delta_x:n('Horizontal scroll delta; positive means right.'), delta_y:n('Vertical scroll delta; positive means down.'), delta:n('Alias for delta_y.'), direction:e(['up','down','left','right']), wheel_times:n('Number of 120-unit wheel steps for direction; 1..50.'), path:s(), paths:{type:'array',items:{type:'string'}}, key:s(), width:n('CSS viewport width for set_viewport.'), height:n('CSS viewport height for set_viewport.'), device_scale_factor:n('Device scale factor for set_viewport; default 1.'), mobile:b('Enable mobile emulation for set_viewport.') }, ['action']), openMutating, browserHandlers.browser_action, ['browser_cdp']),
   define('browser_wait', 'Wait for browser', 'Wait for DOM state, page text, URL, completed loading, a navigation away from the current URL, or a short network-idle period in a debuggable browser page. Use browser_evaluate separately for JavaScript predicates or page-specific inspection.', o({ ...browserTarget, condition:e(['selector','text','url_contains','load','navigation','network_idle']), selector:s(), text:s(), value:s(), poll_ms:n(), idle_ms:n('Required zero-in-flight network quiet window for network_idle; default 500 ms.') }), readOnlyOpen, browserHandlers.browser_wait, ['browser_cdp']),
-  define('browser_devtools', 'Browser DevTools diagnostics', 'Use this to inspect Chrome Console/Network live events, Performance, Layout, Accessibility or screenshot-free DOMSnapshot Geometry via native CDP. Network headers, bodies and cookies are excluded; geometry returns bounded numeric summaries without page text.', o({ ...browserTarget, action:e(['console','network','performance','layout','accessibility','geometry','listeners'],'Diagnostics mode. Layout measures CSS viewport, accessibility returns anonymized roles and unnamed controls, geometry audits DOMSnapshot bounds without page contents.'), sample_ms:n('Live event capture period 250–5000 ms; default 1500. Ignored for performance, layout, accessibility, geometry and listeners.'), selector:s('Required CSS selector for action=listeners; only the first matching element is inspected, with no script source or DOM text returned.'), max_events:n('Maximum 1–100 events retained; default 50.') }, ['action']), readOnlyOpen, browserHandlers.browser_devtools, ['browser_cdp']),
+  define('browser_devtools', 'Browser DevTools diagnostics', 'Use this to inspect Chrome Console/Network live events, Performance, Layout, Accessibility, Geometry, scoped Listeners or a native screenshot-free Form Map, or selector-scoped CSS/box-model Styles. No form values, page text, raw CSS or network credentials leave the device in these bounded modes.', o({ ...browserTarget, action:e(['console','network','performance','layout','accessibility','geometry','listeners','form_map','styles'],'Diagnostics mode. Layout measures CSS viewport, accessibility returns anonymized roles and unnamed controls, geometry audits DOMSnapshot bounds without page contents.'), sample_ms:n('Live event capture period 250–5000 ms; default 1500. Ignored for performance, layout, accessibility, geometry and listeners.'), selector:s('Required CSS selector for action=listeners and action=styles. Only the first matching element is inspected; no script source, raw CSS or DOM text is returned.'), max_events:n('Maximum 1–100 events retained; default 50.') }, ['action']), readOnlyOpen, browserHandlers.browser_devtools, ['browser_cdp']),
   define('browser_evaluate', 'Evaluate browser JavaScript', 'Evaluate JavaScript in a selected debuggable browser page and return its serializable value. This is a powerful escape hatch for page-specific automation.', o({ ...browserTarget, expression:s('JavaScript expression.'), await_promise:b('Await a returned Promise; default true.') }, ['expression']), openMutating, browserHandlers.browser_evaluate, ['browser_evaluate']),
 
   define('service', 'Service control', 'List, inspect, start, stop, or restart operating-system services using Service Control Manager, launchctl, or systemd. Mutating actions pass through ReMCP command policy.', o({ action:e(['list','status','start','stop','restart']), name:s('Service/unit/launchd label.'), scope:e(['user','system']) }, ['action']), mutating, diagnosticHandlers.service, ['services']),