@runcofactor/cli 0.52.0 → 0.53.0

package/dist/{knobs-AMIWGYUZ.js → knobs-OKQFBQLK.js}

@@ -5,17 +5,17 @@ import {
   fetchList,
   parseLifecycleStage,
   toLifecycleLabel
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/knobs.ts
@@ -295,4 +295,4 @@ async function runKnobs(argv) {
 export {
   runKnobs
 };
-//# sourceMappingURL=knobs-AMIWGYUZ.js.map
+//# sourceMappingURL=knobs-OKQFBQLK.js.map

package/dist/{landing-3VLVVQL5.js → landing-XANIBPVM.js}

@@ -6,13 +6,13 @@ import {
   parseSinceFlag,
   renderStatsTable,
   runLanding
-} from "./chunk-M752EUK3.js";
-import "./chunk-ROX7N3RK.js";
-import "./chunk-LL6TSQWV.js";
+} from "./chunk-3JU4UYYN.js";
+import "./chunk-V7HB5LAU.js";
+import "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
-import "./chunk-3HI6QC4V.js";
-import "./chunk-UEJ2HTKU.js";
+import "./chunk-4UZN6TVT.js";
+import "./chunk-WRBU6TX7.js";
+import "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 export {
   buildLandingUrl,
@@ -22,4 +22,4 @@ export {
   renderStatsTable,
   runLanding
 };
-//# sourceMappingURL=landing-3VLVVQL5.js.map
+//# sourceMappingURL=landing-XANIBPVM.js.map

package/dist/{list-GDJR6UY6.js → list-64GX47Q4.js}

@@ -2,13 +2,13 @@ import { createRequire as __cr } from "module"; import { fileURLToPath as __fup
 import {
   fetchList,
   fetchProperties
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
-import "./chunk-UEJ2HTKU.js";
+} from "./chunk-WRBU6TX7.js";
+import "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/local/list.ts
@@ -56,4 +56,4 @@ async function runLocalList(argv) {
 export {
   runLocalList
 };
-//# sourceMappingURL=list-GDJR6UY6.js.map
+//# sourceMappingURL=list-64GX47Q4.js.map

package/dist/{local-4R6GVW7U.js → local-QMQY2ZUX.js}

@@ -1,8 +1,8 @@
 import { createRequire as __cr } from "module"; import { fileURLToPath as __fup } from "url"; import { dirname as __dn } from "path"; const require = __cr(import.meta.url); const __filename = __fup(import.meta.url); const __dirname = __dn(__filename);
 import {
   hasFlag
-} from "./chunk-3HI6QC4V.js";
-import "./chunk-UEJ2HTKU.js";
+} from "./chunk-WRBU6TX7.js";
+import "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/local/index.ts
@@ -70,22 +70,22 @@ async function runLocal(argv) {
   }
   switch (subcommand) {
     case "init": {
-      const { runLocalInit } = await import("./init-LT2TZMQY.js");
+      const { runLocalInit } = await import("./init-CROSTPA6.js");
       await runLocalInit(rest);
       break;
     }
     case "start": {
-      const { runLocalStart } = await import("./start-EPGLHTND.js");
+      const { runLocalStart } = await import("./start-DKWLOQI6.js");
       await runLocalStart(rest);
       break;
     }
     case "list": {
-      const { runLocalList } = await import("./list-GDJR6UY6.js");
+      const { runLocalList } = await import("./list-64GX47Q4.js");
       await runLocalList(rest);
       break;
     }
     case "login": {
-      const { runLocalLogin } = await import("./login-IXVAWTLO.js");
+      const { runLocalLogin } = await import("./login-I7UQ3GTM.js");
       await runLocalLogin(rest);
       break;
     }
@@ -98,4 +98,4 @@ async function runLocal(argv) {
 export {
   runLocal
 };
-//# sourceMappingURL=local-4R6GVW7U.js.map
+//# sourceMappingURL=local-QMQY2ZUX.js.map

package/dist/{login-IXVAWTLO.js → login-I7UQ3GTM.js}

@@ -11,14 +11,14 @@ import {
   promptChoice,
   selectProperty,
   uploadStorageState
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   getArgValue,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
-import "./chunk-UEJ2HTKU.js";
+} from "./chunk-WRBU6TX7.js";
+import "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/local/login.ts
@@ -313,4 +313,4 @@ Opening browser at ${args.url}...`);
 export {
   runLocalLogin
 };
-//# sourceMappingURL=login-IXVAWTLO.js.map
+//# sourceMappingURL=login-I7UQ3GTM.js.map

package/dist/{mcp-BM2MJWX4.js → mcp-XZV63DX5.js}

@@ -3,16 +3,16 @@ import {
   COFACTOR_MCP_INSTRUCTIONS,
   buildRegistry,
   sharedGroups
-} from "./chunk-QTYUM4ZB.js";
+} from "./chunk-EJ3ZPH5U.js";
 import "./chunk-DEK6B6LX.js";
 import {
   LocalBrowserHost,
   USER_PAUSED_ERROR
-} from "./chunk-RPJMQBB5.js";
-import "./chunk-DHAGRM2F.js";
+} from "./chunk-QXU4G4YN.js";
+import "./chunk-33U56YGD.js";
 import {
   getBrowserToolDefinitionsWithLifecycle
-} from "./chunk-IY3ZK46I.js";
+} from "./chunk-QOVJUSSL.js";
 import {
   callTool,
   createSession,
@@ -24,13 +24,13 @@ import {
   fetchOrgs,
   openUrl,
   switchOrg
-} from "./chunk-ABT3BLRC.js";
+} from "./chunk-5TKXHS3X.js";
 import {
   clearUpdateCache
-} from "./chunk-QCYSONXI.js";
+} from "./chunk-CRYHWO4M.js";
 import "./chunk-W7CFLOEI.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   DEFAULT_API_URL,
   ENV_URLS,
@@ -38,11 +38,11 @@ import {
   readStoredToken,
   resolveAppUrl,
   saveAuth
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   packageName,
   readBrandEnv
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-AK7WEGGB.js";
 import "./chunk-NQ7LMSSS.js";
 import "./chunk-5QHORHJT.js";
@@ -729,7 +729,7 @@ Use \`cofactor_workflow_sync\` for existing workflows or construct the full work
 
 ## Managing Workflows
 
-- **cofactor_workflow_list** \u2014 Browse existing tests. Filter by \`status\` (draft = editable, approved = human-verified), \`flowType\` (standard/setup/seed/teardown/eval), or \`search\` by name. Suite inclusion is derived eligibility (approved AND passed at least once), with a separate pause/unpause toggle; reliability is tracked separately by the workflow's \`health\`.
+- **cofactor_workflow_list** \u2014 Browse existing tests. Filter by \`status\` (draft = editable, approved = human-verified), \`flowType\` (standard/setup/seed/teardown), or \`search\` by name. Suite inclusion is derived eligibility (approved AND passed at least once), with a separate pause/unpause toggle; reliability is tracked separately by the workflow's \`health\`.
 - **cofactor_workflow_get** \u2014 Inspect a test's full definition: nodes, edges, playbook steps, assertions.
 - **cofactor_workflow_patch** \u2014 Update name, description, preflight, cleanup, status, or flow type. Only provided fields change. Description, preflight and cleanup are read by people: no raw IDs (name the seed, teardown or record), and write preflight and cleanup as short markdown bullet lists.
 - **cofactor_workflow_run** \u2014 Trigger execution. Returns a \`runId\` \u2014 use it to track progress.
@@ -905,4 +905,4 @@ async function runMcp(argv) {
 export {
   runMcp
 };
-//# sourceMappingURL=mcp-BM2MJWX4.js.map
+//# sourceMappingURL=mcp-XZV63DX5.js.map

package/dist/{mcp-BM2MJWX4.js.map → mcp-XZV63DX5.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/mcp/index.ts","../src/mcp/api-url.ts","../src/mcp/tool-helpers.ts","../src/mcp/session-tools.ts","../src/mcp/browser-tools.ts","../src/mcp/login-tool.ts","../src/mcp/upgrade-tool.ts","../src/mcp/instructions.ts","../src/mcp/guide-tool.ts"],"sourcesContent":["/**\n * MCP Server for the Cofactor CLI.\n *\n * Combines:\n *   - HTTP-only shared tools from @chatsdet/mcp-tools (workflows, runs, suites,\n *     credentials, issues, proposals)\n *   - CLI-local tools (login, upgrade, browser daemon, cloud-relay sessions)\n *     that depend on local state and can't be hosted remotely.\n *\n * @module\n */\n\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';\nimport { buildRegistry, sharedGroups } from '@chatsdet/mcp-tools';\nimport { readStoredToken } from '../auth';\nimport { readBrandEnv } from '../brand.js';\nimport { resolveApiUrl } from './api-url';\nimport { toolText } from './tool-helpers';\nimport { getSessionToolDefinitions, handleSessionTool } from './session-tools';\nimport { getBrowserMCPToolDefinitions, handleBrowserTool } from './browser-tools';\nimport { getLoginToolDefinitions, handleLoginTool } from './login-tool';\nimport { getUpgradeToolDefinitions, handleUpgradeTool } from './upgrade-tool';\nimport { getGuideToolDefinitions, handleGuideTool } from './guide-tool';\nimport { COFACTOR_MCP_INSTRUCTIONS } from './instructions';\n\nasync function resolveCtx() {\n  const apiToken = readBrandEnv('CANARY_API_TOKEN') ?? (await readStoredToken());\n  if (!apiToken) {\n    throw new Error('Missing token. Call the cofactor_login tool or set CANARY_API_TOKEN.');\n  }\n  return { apiUrl: resolveApiUrl(), apiToken };\n}\n\nexport async function runMcp(argv: string[]) {\n  if (argv.includes('--help') || argv.includes('-h')) {\n    console.log(\n      [\n        'Usage: canary mcp',\n        '',\n        'Start the Cofactor MCP server on stdio. Agents launch it themselves; install it',\n        'into Claude, Cursor and others with `canary install`. It uses the session from',\n        '`canary login`, or CANARY_API_TOKEN.',\n      ].join('\\n')\n    );\n    return;\n  }\n  const registry = buildRegistry(sharedGroups);\n\n  const server = new Server(\n    { name: 'cofactor', version: '0.1.0' },\n    {\n      capabilities: { tools: {} },\n      instructions: COFACTOR_MCP_INSTRUCTIONS,\n    }\n  );\n\n  server.setRequestHandler(ListToolsRequestSchema, async () => ({\n    tools: [\n      ...getLoginToolDefinitions(),\n      ...getUpgradeToolDefinitions(),\n      ...getGuideToolDefinitions(),\n      ...getSessionToolDefinitions(),\n      ...getBrowserMCPToolDefinitions(),\n      ...registry.list(),\n    ],\n  }));\n\n  server.setRequestHandler(CallToolRequestSchema, async (req) => {\n    const tool = req.params.name;\n    const args = (req.params.arguments ?? {}) as Record<string, unknown>;\n\n    // CLI-local groups try first; each returns null if the tool is not theirs.\n    const loginResult = await handleLoginTool(tool, args);\n    if (loginResult) return loginResult;\n\n    const upgradeResult = await handleUpgradeTool(tool, args);\n    if (upgradeResult) return upgradeResult;\n\n    const guideResult = await handleGuideTool(tool);\n    if (guideResult) return guideResult;\n\n    const browserResult = await handleBrowserTool(tool, args);\n    if (browserResult) return browserResult;\n\n    const sessionResult = await handleSessionTool(tool, args);\n    if (sessionResult) return sessionResult;\n\n    // Shared HTTP-only tools — provide ctx for this call.\n    try {\n      const ctx = await resolveCtx();\n      return await registry.call(tool, args, ctx);\n    } catch (err) {\n      return toolText(err instanceof Error ? err.message : String(err));\n    }\n  });\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n  return new Promise<void>(() => undefined);\n}\n","import { readBrandEnv } from '../brand.js';\nimport { DEFAULT_API_URL } from '../default-urls.js';\n\nexport { DEFAULT_API_URL };\n\nexport function resolveApiUrl(): string {\n  return readBrandEnv('CANARY_API_URL') ?? DEFAULT_API_URL;\n}\n","/**\n * MCP tool response helpers.\n *\n * @module\n */\n\nimport type { ToolResult } from '@chatsdet/browser-core';\n\nexport function toolText(text: string) {\n  return { content: [{ type: 'text' as const, text }] };\n}\n\nexport function toolJson(data: unknown) {\n  return { content: [{ type: 'text' as const, text: JSON.stringify(data, null, 2) }] };\n}\n\n/**\n * Convert a BrowserToolExecutor result to MCP SDK content blocks.\n */\nexport function formatMCPContent(result: ToolResult) {\n  if (typeof result === 'string') {\n    return { content: [{ type: 'text' as const, text: result }] };\n  }\n\n  // MCPContentResult with text and optional images\n  const content: Array<{ type: 'text'; text: string } | { type: 'image'; data: string; mimeType: string }> = [];\n\n  if (result.text) {\n    content.push({ type: 'text', text: result.text });\n  }\n\n  for (const img of result.images ?? []) {\n    content.push({ type: 'image', data: img.data, mimeType: img.mimeType });\n  }\n\n  return { content };\n}\n","/**\n * Cloud-relay session tools for the MCP server.\n *\n * These tools proxy browser control through the cloud API via WebSocket.\n *\n * @module\n */\n\nimport { readStoredToken } from '../auth';\nimport { readBrandEnv } from '../brand.js';\nimport { DEFAULT_API_URL } from '../default-urls.js';\nimport { LocalBrowserHost } from '../local-browser/host';\nimport type { LocalBrowserMode } from '../local-browser/protocol';\nimport { toolJson } from './tool-helpers';\n\ntype LocalBrowserStartInput = {\n  mode?: LocalBrowserMode;\n  cdpUrl?: string;\n  headless?: boolean;\n  storageStatePath?: string;\n  instructions?: string;\n};\n\ntype LocalBrowserStopInput = {\n  sessionId: string;\n};\n\ntype LocalBrowserStatusInput = {\n  sessionId: string;\n};\n\ninterface BrowserSession {\n  sessionId: string;\n  host: LocalBrowserHost;\n  startedAt: number;\n  mode: LocalBrowserMode;\n}\n\n// Global browser sessions managed by MCP\nconst browserSessions = new Map<string, BrowserSession>();\n\nfunction resolveApiUrl(input?: string): string {\n  return input ?? readBrandEnv('CANARY_API_URL') ?? DEFAULT_API_URL;\n}\n\nasync function resolveToken(): Promise<string> {\n  const token = readBrandEnv('CANARY_API_TOKEN') ?? (await readStoredToken());\n  if (!token) {\n    throw new Error('Missing token. Run `cofactor login` first or set CANARY_API_TOKEN.');\n  }\n  return token;\n}\n\nexport function getSessionToolDefinitions() {\n  return [\n    {\n      name: 'local_browser_start',\n      description:\n        'Start a local browser session that connects to the cloud agent. The cloud agent can then control this browser to test local applications. Returns sessionId for tracking.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          mode: {\n            type: 'string',\n            enum: ['playwright', 'cdp'],\n            description:\n              \"Browser mode: 'playwright' for fresh browser, 'cdp' to connect to existing Chrome\",\n          },\n          cdpUrl: {\n            type: 'string',\n            description: \"CDP endpoint URL when mode is 'cdp' (e.g. http://localhost:9222)\",\n          },\n          headless: {\n            type: 'boolean',\n            description: 'Run browser headless (default: true for playwright mode)',\n          },\n          storageStatePath: {\n            type: 'string',\n            description: 'Path to Playwright storage state JSON for pre-authenticated sessions',\n          },\n          instructions: {\n            type: 'string',\n            description: 'Instructions for the cloud agent on what to test',\n          },\n        },\n      },\n    },\n    {\n      name: 'local_browser_status',\n      description: 'Check the status of a local browser session.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          sessionId: { type: 'string' },\n        },\n        required: ['sessionId'],\n      },\n    },\n    {\n      name: 'local_browser_stop',\n      description: 'Stop a local browser session and close the browser.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          sessionId: { type: 'string' },\n        },\n        required: ['sessionId'],\n      },\n    },\n    {\n      name: 'local_browser_list',\n      description: 'List all active local browser sessions.',\n      inputSchema: {\n        type: 'object',\n        properties: {},\n      },\n    },\n    {\n      name: 'local_browser_run',\n      description:\n        'Start a test run on an active local browser session. The cloud agent will control the local browser according to the instructions.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          sessionId: {\n            type: 'string',\n            description: 'The session ID from local_browser_start',\n          },\n          instructions: {\n            type: 'string',\n            description: 'Instructions for the cloud agent on what to test',\n          },\n          startUrl: {\n            type: 'string',\n            description: 'Optional URL to navigate to before starting',\n          },\n        },\n        required: ['sessionId', 'instructions'],\n      },\n    },\n  ];\n}\n\nexport async function handleSessionTool(tool: string, args: Record<string, unknown>) {\n  const token = await resolveToken();\n\n  if (tool === 'local_browser_start') {\n    const input = args as unknown as LocalBrowserStartInput;\n    const apiUrl = resolveApiUrl();\n    const mode = input.mode ?? 'playwright';\n\n    const sessionResponse = await fetch(`${apiUrl}/local-browser/sessions`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({\n        browserMode: mode,\n        instructions: input.instructions ?? null,\n      }),\n    });\n\n    if (!sessionResponse.ok) {\n      const text = await sessionResponse.text();\n      return toolJson({ ok: false, error: `Failed to create session: ${text}` });\n    }\n\n    const session = (await sessionResponse.json()) as {\n      ok: boolean;\n      sessionId: string;\n      wsToken: string;\n      expiresAt: string;\n    };\n\n    const host = new LocalBrowserHost({\n      apiUrl,\n      wsToken: session.wsToken,\n      sessionId: session.sessionId,\n      browserMode: mode,\n      cdpUrl: input.cdpUrl,\n      headless: input.headless ?? true,\n      storageStatePath: input.storageStatePath,\n      onLog: (level, message) => {\n        if (level === 'error') {\n          console.error(`[LocalBrowser] ${message}`);\n        }\n      },\n    });\n\n    host.start().catch((err) => {\n      console.error('Failed to start local browser:', err);\n      browserSessions.delete(session.sessionId);\n    });\n\n    browserSessions.set(session.sessionId, {\n      sessionId: session.sessionId,\n      host,\n      startedAt: Date.now(),\n      mode,\n    });\n\n    return toolJson({\n      ok: true,\n      sessionId: session.sessionId,\n      mode,\n      expiresAt: session.expiresAt,\n      note: 'Browser session started. The cloud agent can now control this browser. Use local_browser_stop to end the session.',\n    });\n  }\n\n  if (tool === 'local_browser_status') {\n    const input = args as unknown as LocalBrowserStatusInput;\n    const session = browserSessions.get(input.sessionId);\n\n    if (!session) {\n      return toolJson({ ok: false, error: 'Session not found', sessionId: input.sessionId });\n    }\n\n    return toolJson({\n      ok: true,\n      sessionId: session.sessionId,\n      mode: session.mode,\n      startedAt: new Date(session.startedAt).toISOString(),\n      uptimeMs: Date.now() - session.startedAt,\n    });\n  }\n\n  if (tool === 'local_browser_stop') {\n    const input = args as unknown as LocalBrowserStopInput;\n    const session = browserSessions.get(input.sessionId);\n\n    if (!session) {\n      return toolJson({ ok: false, error: 'Session not found', sessionId: input.sessionId });\n    }\n\n    await session.host.stop();\n    browserSessions.delete(input.sessionId);\n\n    return toolJson({\n      ok: true,\n      sessionId: input.sessionId,\n      note: 'Browser session stopped and browser closed.',\n    });\n  }\n\n  if (tool === 'local_browser_list') {\n    const sessions = Array.from(browserSessions.values()).map((s) => ({\n      sessionId: s.sessionId,\n      mode: s.mode,\n      startedAt: new Date(s.startedAt).toISOString(),\n      uptimeMs: Date.now() - s.startedAt,\n    }));\n\n    return toolJson({\n      ok: true,\n      count: sessions.length,\n      sessions,\n    });\n  }\n\n  if (tool === 'local_browser_run') {\n    const input = args as unknown as {\n      sessionId: string;\n      instructions: string;\n      startUrl?: string;\n    };\n    const apiUrl = resolveApiUrl();\n\n    const session = browserSessions.get(input.sessionId);\n    if (!session) {\n      return toolJson({\n        ok: false,\n        error: 'Session not found locally. Make sure you started it with local_browser_start.',\n        sessionId: input.sessionId,\n      });\n    }\n\n    const response = await fetch(`${apiUrl}/local-browser/sessions/${input.sessionId}/run`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({\n        instructions: input.instructions,\n        startUrl: input.startUrl ?? null,\n      }),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      return toolJson({ ok: false, error: `Failed to start run: ${text}` });\n    }\n\n    const result = (await response.json()) as { ok: boolean; jobId: string; sessionId: string };\n\n    return toolJson({\n      ok: true,\n      jobId: result.jobId,\n      sessionId: result.sessionId,\n      note: 'Test run started. The cloud agent is now controlling your local browser. You can watch the browser to see the test in action.',\n    });\n  }\n\n  return null; // Not handled\n}\n","/**\n * Browser MCP tool registration — daemon adapter.\n *\n * Thin layer that maps MCP tool calls to the session daemon,\n * ensuring the CLI gets the SAME semantic diff, snapshot formatting,\n * click validation, and recovery notices as the cloud agent.\n *\n * The daemon owns all browser sessions. MCP is just a protocol adapter.\n *\n * @module\n */\n\nimport { getBrowserToolDefinitionsWithLifecycle } from '@chatsdet/browser-core';\nimport {\n  createSession,\n  deleteSession,\n  deleteAllSessions,\n  callTool,\n  resolveTargetSession,\n} from '../session/daemon-client.js';\nimport { formatMCPContent, toolJson, toolText } from './tool-helpers';\nimport { USER_PAUSED_ERROR } from '../session/types.js';\nimport type { ToolResult } from '@chatsdet/browser-core';\n\n/** Track the active session ID within this MCP server instance */\nlet activeSessionId: string | null = null;\n\n/**\n * Get tool definitions for browser MCP tools (including lifecycle).\n */\nexport function getBrowserMCPToolDefinitions() {\n  return getBrowserToolDefinitionsWithLifecycle();\n}\n\n/**\n * Handle a browser tool call.\n * Returns null if the tool name is not a browser tool.\n */\nexport async function handleBrowserTool(name: string, args: Record<string, unknown>) {\n  // Lifecycle tools\n  if (name === 'browser_start') {\n    try {\n      const result = await createSession({\n        headless: (args.headless as boolean) ?? false,\n        storageStatePath: args.storageStatePath as string | undefined,\n      });\n\n      if (!result.ok) {\n        return toolJson({ ok: false, error: result.error });\n      }\n\n      activeSessionId = result.data!.id;\n      return toolJson({\n        ok: true,\n        sessionId: activeSessionId,\n        note: 'Browser started. You can now use browser_navigate, browser_click, and other browser tools.',\n      });\n    } catch (err) {\n      return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n    }\n  }\n\n  if (name === 'browser_stop') {\n    try {\n      if (activeSessionId) {\n        await deleteSession(activeSessionId);\n        activeSessionId = null;\n      } else {\n        // Stop all sessions if no specific one tracked\n        await deleteAllSessions();\n      }\n      return toolJson({ ok: true, note: 'Browser stopped and cleaned up.' });\n    } catch (err) {\n      return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n    }\n  }\n\n  // All other browser_* tools require an active session\n  if (!name.startsWith('browser_')) return null;\n\n  try {\n    // Resolve target session: prefer tracked MCP session, then auto-resolve\n    let sessionId = activeSessionId;\n    if (!sessionId) {\n      try {\n        const target = await resolveTargetSession();\n        sessionId = target.id;\n        activeSessionId = sessionId;\n      } catch {\n        return toolJson({\n          ok: false,\n          error: 'No active browser session. Start one with browser_start first.',\n        });\n      }\n    }\n\n    // Strip 'browser_' prefix for the daemon tool name\n    const toolName = name.replace(/^browser_/, '');\n    const result = await callTool(sessionId, toolName, args);\n\n    if (!result.ok) {\n      // If session not found, clear tracking and report error\n      if (result.error?.includes('not found')) {\n        activeSessionId = null;\n      }\n      // The user is actively driving the browser — the daemon deferred this\n      // action and will auto-resume once they go idle. Surface as informational\n      // text (not an error) so Claude waits rather than retrying in a loop.\n      if (result.errorCode === USER_PAUSED_ERROR) {\n        return toolText(\n          result.error ?? 'The user is interacting with the browser; deferring until they are idle.'\n        );\n      }\n      return toolJson({ ok: false, error: result.error, tool: name });\n    }\n\n    // Convert daemon response back to ToolResult format for MCP formatting\n    const toolResult: ToolResult = result.images?.length\n      ? { text: result.text ?? '', images: result.images }\n      : (result.text ?? '');\n\n    return formatMCPContent(toolResult);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return toolJson({ ok: false, error: message, tool: name });\n  }\n}\n","/**\n * MCP tool for device code OAuth login.\n *\n * Allows AI coding tools to trigger authentication without\n * requiring the user to run `cofactor login` in a separate terminal.\n *\n * @module\n */\n\nimport { ENV_URLS, envToProfile, resolveAppUrl, saveAuth } from '../auth';\nimport { openUrl, fetchOrgs, switchOrg } from '../login';\nimport type { StartResponse, PollResponse } from '../login';\nimport { resolveApiUrl } from './api-url';\nimport { toolJson } from './tool-helpers';\n\nexport function getLoginToolDefinitions() {\n  return [\n    {\n      name: 'cofactor_login',\n      description:\n        'Authenticate with Cofactor using the device code OAuth flow. Opens a browser window for the user to approve. ' +\n        'May take 30-120 seconds while waiting for the user to complete login. ' +\n        'Returns the verification URL and user code in case the browser does not open automatically.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          env: {\n            type: 'string',\n            enum: ['prod', 'dev', 'local'],\n            description: 'Target environment (default: prod)',\n          },\n          org: {\n            type: 'string',\n            description:\n              'Organization name or ID to select if the user belongs to multiple orgs. If omitted, uses the default org.',\n          },\n        },\n      },\n    },\n  ];\n}\n\nexport async function handleLoginTool(\n  tool: string,\n  args: Record<string, unknown>\n) {\n  if (tool !== 'cofactor_login') return null;\n\n  try {\n    const env = args.env as string | undefined;\n    const orgFlag = args.org as string | undefined;\n    const envUrls = env ? ENV_URLS[env] : undefined;\n\n    if (env && !envUrls) {\n      return toolJson({ ok: false, error: `Unknown environment: ${env}. Valid: prod, dev, local` });\n    }\n\n    const apiUrl = envUrls?.api ?? resolveApiUrl();\n    const appUrl = envUrls?.app ?? resolveAppUrl(apiUrl);\n\n    // Step 1: Start device code flow\n    const startRes = await fetch(`${apiUrl}/cli-login/start`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ appUrl }),\n    });\n\n    const startJson = (await startRes.json()) as StartResponse;\n    if (!startRes.ok || !startJson.ok || !startJson.deviceCode || !startJson.userCode) {\n      return toolJson({\n        ok: false,\n        error: `Login start failed: ${startJson.error ?? startRes.statusText}`,\n      });\n    }\n\n    // Step 2: Open browser (non-fatal if it fails)\n    if (startJson.verificationUrl) {\n      // stdout is the MCP channel, so report a failed launch on stderr.\n      openUrl(startJson.verificationUrl, () =>\n        process.stderr.write(`Could not open a browser. Open ${startJson.verificationUrl} manually.\\n`)\n      );\n    }\n\n    // Step 3: Poll until approved/rejected/expired\n    const intervalMs = (startJson.intervalSeconds ?? 3) * 1000;\n    const expiresAt = startJson.expiresAt ? new Date(startJson.expiresAt).getTime() : null;\n\n    let token: string | undefined;\n    let initialOrgId: string | undefined;\n\n    while (true) {\n      if (expiresAt && Date.now() > expiresAt) {\n        return toolJson({\n          ok: false,\n          error: 'Login code expired. Please try again.',\n          userCode: startJson.userCode,\n          verificationUrl: startJson.verificationUrl,\n        });\n      }\n\n      await new Promise((resolve) => setTimeout(resolve, intervalMs));\n\n      const pollRes = await fetch(`${apiUrl}/cli-login/poll`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ deviceCode: startJson.deviceCode }),\n      });\n\n      const pollJson = (await pollRes.json()) as PollResponse;\n      if (!pollRes.ok || !pollJson.ok) {\n        return toolJson({\n          ok: false,\n          error: `Login poll failed: ${pollJson.error ?? pollRes.statusText}`,\n        });\n      }\n\n      if (pollJson.status === 'approved' && pollJson.accessToken) {\n        token = pollJson.accessToken;\n        initialOrgId = pollJson.orgId;\n        break;\n      }\n\n      if (pollJson.status === 'rejected') {\n        return toolJson({ ok: false, error: 'Login rejected by user.' });\n      }\n\n      if (pollJson.status === 'expired') {\n        return toolJson({ ok: false, error: 'Login expired. Please try again.' });\n      }\n    }\n\n    // Step 4: Handle org selection\n    const orgsData = await fetchOrgs(apiUrl, token);\n    const orgs = orgsData?.organizations ?? [];\n\n    let finalToken = token;\n    let finalOrgId = initialOrgId;\n    let finalOrgName: string | undefined;\n\n    if (orgs.length <= 1) {\n      finalOrgName = orgs[0]?.name;\n    } else if (orgFlag) {\n      // Match by name (case-insensitive) or ID\n      const selectedOrg = orgs.find(\n        (o) => o.name.toLowerCase() === orgFlag.toLowerCase() || o.id === orgFlag\n      );\n      if (!selectedOrg) {\n        // Save the default token so they're at least logged in\n        const profileName = env ? envToProfile(env) : undefined;\n        await saveAuth({ token: finalToken, apiUrl, orgId: finalOrgId, orgName: orgs.find((o) => o.id === initialOrgId)?.name }, profileName);\n\n        return toolJson({\n          ok: false,\n          error: `Organization \"${orgFlag}\" not found.`,\n          loggedIn: true,\n          currentOrg: orgs.find((o) => o.id === initialOrgId)?.name,\n          availableOrgs: orgs.map((o) => ({ id: o.id, name: o.name, role: o.role })),\n        });\n      }\n\n      if (selectedOrg.id !== initialOrgId) {\n        const switchRes = await switchOrg(apiUrl, token, selectedOrg.id);\n        if (!switchRes.ok || !switchRes.accessToken) {\n          return toolJson({\n            ok: false,\n            error: `Failed to switch organization: ${switchRes.error ?? 'Unknown error'}`,\n          });\n        }\n        finalToken = switchRes.accessToken;\n        finalOrgId = switchRes.orgId;\n        finalOrgName = switchRes.orgName;\n      } else {\n        finalOrgName = selectedOrg.name;\n      }\n    } else {\n      // Multiple orgs, no flag — use default\n      const defaultOrg = orgs.find((o) => o.id === initialOrgId);\n      finalOrgName = defaultOrg?.name;\n    }\n\n    // Step 5: Save auth\n    const profileName = env ? envToProfile(env) : undefined;\n    await saveAuth({ token: finalToken, apiUrl, orgId: finalOrgId, orgName: finalOrgName }, profileName);\n\n    return toolJson({\n      ok: true,\n      message: 'Login successful. Token saved.',\n      orgName: finalOrgName,\n      orgId: finalOrgId,\n      ...(orgs.length > 1\n        ? { availableOrgs: orgs.map((o) => ({ id: o.id, name: o.name, role: o.role })) }\n        : {}),\n    });\n  } catch (err) {\n    return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n  }\n}\n","/**\n * MCP tool for upgrading the Cofactor CLI to the latest version.\n *\n * Adapts the `cofactor upgrade` command for MCP context where\n * stdio is the transport and process.exit() must be avoided.\n *\n * @module\n */\n\nimport fs from 'node:fs';\nimport { spawnSync } from 'node:child_process';\nimport process from 'node:process';\nimport { packageName } from '../brand.js';\nimport { clearUpdateCache } from '../update-check.js';\nimport { toolJson } from './tool-helpers';\n\ntype PackageManager = 'bun' | 'pnpm' | 'npm';\n\nfunction detectPackageManager(): PackageManager {\n  try {\n    const binPath = fs.realpathSync(process.argv[1]).replace(/\\\\/g, '/');\n    if (binPath.includes('.bun/') || binPath.includes('/bun/')) return 'bun';\n    if (binPath.includes('.pnpm/') || binPath.includes('/pnpm/')) return 'pnpm';\n  } catch {\n    // realpathSync can fail if symlink is broken\n  }\n  return 'npm';\n}\n\nconst UPGRADE_COMMANDS: Record<PackageManager, string[]> = {\n  bun: ['bun', 'add', '-g', `${packageName}@latest`],\n  pnpm: ['pnpm', 'add', '-g', `${packageName}@latest`],\n  npm: ['npm', 'install', '-g', `${packageName}@latest`],\n};\n\nexport function getUpgradeToolDefinitions() {\n  return [\n    {\n      name: 'cofactor_upgrade',\n      description:\n        'Upgrade the Cofactor CLI to the latest version. ' +\n        'Detects the package manager (npm, bun, pnpm) and runs the appropriate global install command.',\n      inputSchema: {\n        type: 'object',\n        properties: {},\n      },\n    },\n  ];\n}\n\nexport async function handleUpgradeTool(\n  tool: string,\n  _args: Record<string, unknown>\n) {\n  if (tool !== 'cofactor_upgrade') return null;\n\n  try {\n    const pm = detectPackageManager();\n    const cmd = UPGRADE_COMMANDS[pm];\n\n    const result = spawnSync(cmd[0], cmd.slice(1), {\n      stdio: ['pipe', 'pipe', 'pipe'],\n      cwd: process.cwd(),\n      timeout: 120_000,\n      shell: process.platform === 'win32',\n      windowsHide: true,\n    });\n\n    if (result.error) {\n      return toolJson({\n        ok: false,\n        error: `Failed to run ${pm}: ${result.error.message}`,\n      });\n    }\n\n    const stdout = result.stdout?.toString().trim() ?? '';\n    const stderr = result.stderr?.toString().trim() ?? '';\n\n    if (result.status !== 0) {\n      return toolJson({\n        ok: false,\n        error: `Upgrade failed (exit code ${result.status}).`,\n        output: stderr || stdout,\n      });\n    }\n\n    await clearUpdateCache();\n\n    return toolJson({\n      ok: true,\n      message: `Successfully upgraded ${packageName} to the latest version.`,\n      packageManager: pm,\n      output: stdout || undefined,\n    });\n  } catch (err) {\n    return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n  }\n}\n","/**\n * Server instructions for the stdio server: the shared Cofactor text plus the\n * tools that only exist here (login, upgrade, local browser). Clients cap the\n * whole string at 4,096 chars, so the shared text is length-tested with room left\n * for this addendum (`apps/mcp/test/tools.test.ts`).\n *\n * The long workflow-authoring guide does not fit that cap, so it is served by\n * the cofactor_workflow_authoring_guide tool instead.\n *\n * @module\n */\n\nimport { COFACTOR_MCP_INSTRUCTIONS as SHARED_INSTRUCTIONS } from '@chatsdet/mcp-tools';\n\nconst LOCAL_TOOLS = `\n\nLocal tools (this stdio server only):\n- Call cofactor_login first with env \"prod\" unless the user asks for dev or local; if several organizations are available, ask which one and pass it as org.\n- To explore an app, list credentials (cofactor_credential_list), pick the default one (never one named local or manual), start a browser (browser_start or local_browser_start), then loop browser_snapshot (use its search parameter to find elements, mode \"screenshot\" to see the page), act by ref rather than coordinates, and snapshot again after every action to verify; never assume an action worked.\n- To switch organizations later, call cofactor_login again with org; no re-authentication needed.\n- Before writing or changing a test, call cofactor_workflow_authoring_guide.`;\n\nexport const COFACTOR_MCP_INSTRUCTIONS = SHARED_INSTRUCTIONS + LOCAL_TOOLS;\n\nexport const WORKFLOW_AUTHORING_GUIDE = `\n## Building Tests — Workflow Authoring\n\nAfter exploring an app via browser session, you can persist what you discovered as a reusable test workflow. The flow is: **explore → author → create**.\n\n### Step 1: Gather Credential Info\n\nCall \\`cofactor_credential_list\\` to get the credential UUID. You'll need it for the login node.\n- Always use \\`credentialId\\` (UUID) — never just the credential name\n- Set both \\`credentialId\\` and \\`credentialName\\` in the login node\n\n### Step 2: Design the Workflow\n\nA workflow is a directed graph of **nodes** connected by **edges**.\n\n#### Node Types\n\n| Type | Purpose | Required configJson |\n|------|---------|-------------------|\n| \\`login\\` | Authenticate with a credential | \\`credentialId\\`, \\`credentialName\\` |\n| \\`navigate\\` | Go to a URL | \\`pageUrl\\`, \\`pageTitle\\` |\n| \\`action\\` | Interact with elements | \\`customActionTitle\\`, \\`playbookSteps\\`, optionally \\`inlineAssertions\\` |\n| \\`assertion\\` | Standalone page verification | \\`condition\\` text |\n| \\`end\\` | Terminal node | (none) |\n\n#### Action Node Guidelines\n\n- Every action node **must** have a \\`customActionTitle\\` — a short (3-8 word) human-readable title describing the step (e.g., \"Create a new invoice\", \"Fill registration form\")\n- **Group related actions** into a single action node (one node per logical step, not per click)\n- **Prefer inline assertions** on action nodes over separate assertion nodes. Add \\`inlineAssertions\\` to verify outcomes right after the action. **Do not author an \\`id\\` field** — the server stamps a UUID on persist:\n  \\`\\`\\`json\n  {\n    \"inlineAssertions\": [\n      {\n        \"condition\": \"Success message 'Invoice created' is visible\",\n        \"severity\": \"fail\"\n      }\n    ]\n  }\n  \\`\\`\\`\n- Use separate \\`assertion\\` nodes only for standalone page-level verifications (e.g., initial page state before any action)\n\n#### Playbook Steps (inside action nodes)\n\nPlaybook steps describe what to do within an action node. Each step has:\n- \\`order\\`: sequence number (1, 2, 3...)\n- \\`action\\`: what to do — \\`click\\`, \\`fill\\`, \\`fill_form\\`, \\`select\\`, \\`navigate\\`, \\`wait\\`, \\`scroll\\`, \\`hover\\`, \\`upload\\`, \\`verify\\`, \\`press_key\\`, \\`drag\\`, \\`resize\\`, \\`capture\\`, \\`extract_table\\`, \\`python_execute\\`, \\`verify_download\\`, \\`verify_download_content\\`, \\`screenshot\\`, \\`agent_loop\\`\n- \\`target\\`: **semantic description** from the accessibility tree — button text, field labels, placeholder text. Describe as a human would: \"Submit button\", \"Email input field\", \"Status dropdown\". **Never use refs, CSS selectors, or XPaths.**\n- \\`params\\`: for \\`fill\\` actions, include \\`{ \"value\": \"...\" }\\`\n\nEach playbook step is one atomic intent executed in one browser tool call and maps to at most one recorded call. Draw boundaries at stable page states: fuse actions coupled through ephemeral UI state into that call; split unrelated intents and every stable intermediate into separate steps. Do not use \\`other\\`; if no concrete browser-tool-backed action fits, omit that diagnostic observation from \\`playbookSteps\\`. Use \\`click\\` for switches, checkboxes, and click-to-focus behavior. Use \\`press_key\\` with \\`{ \"key\": \"Escape\" }\\` or an explicit \\`click\\` to close popovers and panels; there is no \\`dismiss\\`, \\`toggle\\`, \\`focus\\`, or \\`handle_native_dialog\\` action.\n\n### Macros — Always Prefer Over Hardcoded Data\n\nMacros generate fresh values each run, preventing flaky tests from stale or colliding data. **Never hardcode emails, names, phone numbers, or dates when a macro exists.**\n\n| Macro | Output | Example |\n|-------|--------|---------|\n| \\`$EMAIL()\\` | Unique test email | \\`test-xk9mq2@example-test.com\\` |\n| \\`$FIRST_NAME()\\` | Random first name | \\`Jordan\\` |\n| \\`$LAST_NAME()\\` | Random last name | \\`Chen\\` |\n| \\`$PHONE()\\` | US phone (555 prefix) | \\`+1-555-382-7491\\` |\n| \\`$UUID()\\` | Random UUID v4 | \\`a1b2c3d4-...\\` |\n| \\`$RANDOM_INT(min, max)\\` | Random integer | \\`$RANDOM_INT(100,999)\\` → \\`427\\` |\n| \\`$RANDOM_STRING(length)\\` | Alphanumeric string | \\`$RANDOM_STRING(8)\\` → \\`xK9mQ3bR\\` |\n| \\`$TODAY()\\` | Current date (YYYY-MM-DD) | \\`2026-04-06\\` |\n| \\`$DATE(days)\\` | Date offset from today | \\`$DATE(-7)\\` → last week |\n| \\`$NOW()\\` | ISO 8601 timestamp | \\`2026-04-06T14:30:00.000Z\\` |\n| \\`$NOW(+5m, 'fmt')\\` | Shifted time (+5m/-2h/30s/1d), optional UTC format (YYYY MM DD HH mm ss, unpadded H m) | \\`$NOW(+5m, 'm H * * *')\\` → \\`35 14 * * *\\` |\n| \\`$TIMESTAMP()\\` | Unix milliseconds | \\`1771520400000\\` |\n| \\`$SEQUENCE(\"name\")\\` | Auto-incrementing per run | \\`1\\`, \\`2\\`, \\`3\\`... |\n\nMacros combine inline: \\`\"QA Test $FIRST_NAME() $LAST_NAME()\"\\`, \\`\"order-$RANDOM_STRING(6)\"\\`\n\n**Prefix test data with \"QA Test\"** for identifiability.\n\n### Step 3: Create the Workflow\n\nUse \\`cofactor_workflow_sync\\` for existing workflows or construct the full workflow JSON and create via the API. Then verify with \\`cofactor_workflow_get\\`.\n\n### Example Workflow JSON\n\n\\`\\`\\`json\n{\n  \"name\": \"Verify user can create an invoice\",\n  \"description\": \"Tests the invoice creation flow end-to-end\",\n  \"nodes\": [\n    {\n      \"nodeType\": \"login\",\n      \"configJson\": {\n        \"credentialId\": \"4f6db838-16be-49e8-8887-8d0be1c83a87\",\n        \"credentialName\": \"QA User\"\n      }\n    },\n    {\n      \"nodeType\": \"navigate\",\n      \"configJson\": { \"pageUrl\": \"/invoices\", \"pageTitle\": \"Invoices\" }\n    },\n    {\n      \"nodeType\": \"action\",\n      \"configJson\": {\n        \"customActionTitle\": \"Create a new invoice\",\n        \"actionDescription\": \"Fill out the new invoice form and save\",\n        \"playbookSteps\": [\n          { \"order\": 1, \"action\": \"click\", \"target\": \"New Invoice button\" },\n          { \"order\": 2, \"action\": \"fill\", \"target\": \"Client name field\", \"params\": { \"value\": \"QA Test $FIRST_NAME()\" } },\n          { \"order\": 3, \"action\": \"fill\", \"target\": \"Amount field\", \"params\": { \"value\": \"$RANDOM_INT(100,999)\" } },\n          { \"order\": 4, \"action\": \"click\", \"target\": \"Save button\" }\n        ],\n        \"inlineAssertions\": [\n          {\n            \"condition\": \"Success message 'Invoice created' is visible and the new invoice appears in the list\",\n            \"severity\": \"fail\"\n          }\n        ]\n      }\n    }\n  ]\n}\n\\`\\`\\`\n\n## Managing Workflows\n\n- **cofactor_workflow_list** — Browse existing tests. Filter by \\`status\\` (draft = editable, approved = human-verified), \\`flowType\\` (standard/setup/seed/teardown/eval), or \\`search\\` by name. Suite inclusion is derived eligibility (approved AND passed at least once), with a separate pause/unpause toggle; reliability is tracked separately by the workflow's \\`health\\`.\n- **cofactor_workflow_get** — Inspect a test's full definition: nodes, edges, playbook steps, assertions.\n- **cofactor_workflow_patch** — Update name, description, preflight, cleanup, status, or flow type. Only provided fields change. Description, preflight and cleanup are read by people: no raw IDs (name the seed, teardown or record), and write preflight and cleanup as short markdown bullet lists.\n- **cofactor_workflow_run** — Trigger execution. Returns a \\`runId\\` — use it to track progress.\n- **cofactor_workflow_sync** — Atomically replace all nodes and edges. Automatically snapshots current state first so changes are reversible. Read the current DAG with \\`cofactor_workflow_get\\` before syncing.\n\n## Monitoring Runs & Debugging Failures\n\nAfter triggering a workflow run, monitor and debug with:\n\n- **cofactor_workflow_runs_list** — Recent runs for a workflow with status and duration.\n- **cofactor_workflow_runs_get** — Detailed run view: step-by-step status, duration, errors. Also works for in-progress runs to check status.\n- **cofactor_workflow_runs_diagnostics** — AI-generated failure analysis. Returns root cause and recommendations. Falls back to raw console logs and network requests if no AI analysis is available.\n\n### Regression Suite\n\n- **cofactor_test_suite_run** — Trigger a regression suite execution. Returns suiteId for tracking. Use cofactor_test_suite_list or cofactor_test_suite_get to check results.\n- **cofactor_test_suite_list** — Recent regression suite executions with pass/fail counts.\n- **cofactor_test_suite_get** — Individual test results within a suite execution.\n- **cofactor_test_suite_diagnostics** — Failure diagnostics for a specific test in a suite run.\n- **cofactor_test_suite_steps** — Step-by-step breakdown of a test run within a suite.\n\n## Investigating Issues\n\nIssues are bugs discovered by Cofactor during test runs.\n\n- **cofactor_issues_list** — Search and filter issues by severity (\\`low\\`/\\`medium\\`/\\`high\\`), status (\\`open\\`/\\`closed\\`/\\`not_a_bug\\`), or property. Supports full-text search.\n- **cofactor_issues_get** — Full issue detail including console errors and network failures from the latest occurrence, plus every evidence item on recent occurrences with signed screenshot/clip links (the first screenshots come back inline as images), and the issue's comments. Use this to understand what went wrong.\n- **cofactor_issues_comment** — Add a comment to an issue (\\`get\\` returns the comments).\n- **cofactor_issues_update** — Edit an occurrence's summary, repro steps, or evidence items (add, replace, or remove by the numbers cofactor_issues_get shows; screenshots as base64 image data).\n\n## Product Map (what the app does, and what covers it)\n\nAreas → capabilities, with flows linked to capabilities so coverage is showable. Available to every organization.\n\nCapabilities have **natural codes** — \\`CAP-CMM-001\\`, areas \\`ARE-CMM\\` — which are stable and safe to carry between a ticket, a spec, and a tool call. Prefer them over prefixed ids when writing anything a human will read.\n\n- **cofactor_product_map_get** — The whole map for an application. Call this before proposing a new capability so you reuse an existing one by code instead of creating a near-duplicate.\n- **cofactor_product_map_coverage** — Linked/covered rollup. Always report the unmapped-flow count beside any coverage figure; coverage is always coverage of the *known* map.\n- **cofactor_product_map_resolve_code** — Resolve a code, including one retired by a move. Use this before reporting that a code \"does not exist\" — it may just have been renumbered.\n- **cofactor_product_map_get_capability** — One capability in full: body, linked flows by name, previous codes.\n- **cofactor_product_map_link_flows** / **cofactor_product_map_unlink_flows** — Record that a flow covers a capability. Additive/subtractive; other links are preserved.\n\n## API Sequences (API-only workflows)\n\nFor APIs that need deterministic, browser-free smoke testing — composed of ordered HTTP calls that chain outputs into inputs.\n\n- **Create** with the same command as any workflow, with \\`--api-only\\`:\n  \\`cofactor workflow create --api-only --name \"<n>\" --sequence-from-file seq.json\\`\n  Returns \\`{ workflowId, apiSequenceId, nodeId }\\`. No \\`--property\\` — api-sequences are org-scoped.\n- **Inspect runs** with the same command as any runs, with \\`--side api\\` (or \\`--side all\\` for both):\n  \\`cofactor workflow runs list <wf> --side api\\`\n  \\`cofactor workflow runs get <wf> <runId>\\`\n- **Edit the sequence itself** via \\`cofactor workflow api-sequence <verb>\\`:\n  - \\`get <wf>\\` — dump config + steps\n  - \\`update <wf> --from-file seq.json\\` — replace config\n  - \\`execute <wf>\\` — run it\n  - \\`generate <wf> [--prompt \"...\"]\\` — AI-draft a config, then refine with \\`update\\`\n- **Discover endpoints** before composing steps:\n  \\`cofactor api-catalog sources list\\`\n  \\`cofactor api-catalog endpoints list --search <q>\\`\n  \\`cofactor api-catalog endpoints create --from-file ep.json\\` (add a one-off)\n- **Read the reference first** for the config/step shape and template syntax:\n  \\`cofactor workflow guide api-sequences\\`\n\nTemplates in step fields use \\`{{stepId.response.path}}\\` to reference prior-step outputs and \\`$MACRO()\\` for dynamic test data (same macros as browser workflows).\n\n## Common Workflows\n\n### \"Let's explore the app\"\n1. \\`cofactor_login\\` (env: prod) → switch to the right org\n2. \\`cofactor_credential_list\\` → find the right credential\n3. \\`browser_start\\` → launch browser\n4. Load credential and navigate to the app\n5. Snapshot, interact, explore\n\n### \"Write a test for this feature\"\n1. Explore the feature via browser (above workflow)\n2. \\`cofactor_credential_list\\` → get credentialId\n3. Construct workflow JSON with nodes, edges, playbook steps, macros\n4. Create or sync the workflow\n5. \\`cofactor_workflow_run\\` → execute it\n6. \\`cofactor_workflow_runs_get\\` → verify it passes\n\n### \"Why did this test fail?\"\n1. \\`cofactor_workflow_runs_list\\` → find the failed run\n2. \\`cofactor_workflow_runs_get\\` → see which step failed\n3. \\`cofactor_workflow_runs_diagnostics\\` → AI analysis of the failure\n4. If needed, open a browser session to reproduce and investigate\n\n### \"What issues have been found?\"\n1. \\`cofactor_issues_list\\` → browse open issues\n2. \\`cofactor_issues_get\\` → deep dive with console/network errors\n`.trim();\n","/**\n * MCP tool that returns the workflow-authoring guide. It lives in a tool rather\n * than the server instructions because clients cap instructions at 4,096 chars.\n *\n * @module\n */\n\nimport { WORKFLOW_AUTHORING_GUIDE } from './instructions';\nimport { toolText } from './tool-helpers';\n\nconst GUIDE_TOOL = 'cofactor_workflow_authoring_guide';\n\nexport function getGuideToolDefinitions() {\n  return [\n    {\n      name: GUIDE_TOOL,\n      description:\n        'How to author a Cofactor test (workflow): node types, playbook steps, macros, example workflow JSON, running and debugging. Read it before creating or syncing a workflow.',\n      inputSchema: { type: 'object', properties: {} },\n    },\n  ];\n}\n\nexport async function handleGuideTool(tool: string) {\n  return tool === GUIDE_TOOL ? toolText(WORKFLOW_AUTHORING_GUIDE) : null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,8BAA8B;;;ACTvD,SAAS,gBAAwB;AACtC,SAAO,aAAa,gBAAgB,KAAK;AAC3C;;;ACCO,SAAS,SAAS,MAAc;AACrC,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,KAAK,CAAC,EAAE;AACtD;AAEO,SAAS,SAAS,MAAe;AACtC,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,CAAC,EAAE;AACrF;AAKO,SAAS,iBAAiB,QAAoB;AACnD,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,OAAO,CAAC,EAAE;AAAA,EAC9D;AAGA,QAAM,UAAqG,CAAC;AAE5G,MAAI,OAAO,MAAM;AACf,YAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC;AAAA,EAClD;AAEA,aAAW,OAAO,OAAO,UAAU,CAAC,GAAG;AACrC,YAAQ,KAAK,EAAE,MAAM,SAAS,MAAM,IAAI,MAAM,UAAU,IAAI,SAAS,CAAC;AAAA,EACxE;AAEA,SAAO,EAAE,QAAQ;AACnB;;;ACGA,IAAM,kBAAkB,oBAAI,IAA4B;AAExD,SAASA,eAAc,OAAwB;AAC7C,SAAO,SAAS,aAAa,gBAAgB,KAAK;AACpD;AAEA,eAAe,eAAgC;AAC7C,QAAM,QAAQ,aAAa,kBAAkB,KAAM,MAAM,gBAAgB;AACzE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO;AACT;AAEO,SAAS,4BAA4B;AAC1C,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MACF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,MAAM,CAAC,cAAc,KAAK;AAAA,YAC1B,aACE;AAAA,UACJ;AAAA,UACA,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,kBAAkB;AAAA,YAChB,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,cAAc;AAAA,YACZ,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,SAAS;AAAA,QAC9B;AAAA,QACA,UAAU,CAAC,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,SAAS;AAAA,QAC9B;AAAA,QACA,UAAU,CAAC,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY,CAAC;AAAA,MACf;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MACF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,WAAW;AAAA,YACT,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,cAAc;AAAA,YACZ,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,UAAU,CAAC,aAAa,cAAc;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,kBAAkB,MAAc,MAA+B;AACnF,QAAM,QAAQ,MAAM,aAAa;AAEjC,MAAI,SAAS,uBAAuB;AAClC,UAAM,QAAQ;AACd,UAAM,SAASA,eAAc;AAC7B,UAAM,OAAO,MAAM,QAAQ;AAE3B,UAAM,kBAAkB,MAAM,MAAM,GAAG,MAAM,2BAA2B;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,MAChC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,aAAa;AAAA,QACb,cAAc,MAAM,gBAAgB;AAAA,MACtC,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,gBAAgB,IAAI;AACvB,YAAM,OAAO,MAAM,gBAAgB,KAAK;AACxC,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,6BAA6B,IAAI,GAAG,CAAC;AAAA,IAC3E;AAEA,UAAM,UAAW,MAAM,gBAAgB,KAAK;AAO5C,UAAM,OAAO,IAAI,iBAAiB;AAAA,MAChC;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,QAAQ,MAAM;AAAA,MACd,UAAU,MAAM,YAAY;AAAA,MAC5B,kBAAkB,MAAM;AAAA,MACxB,OAAO,CAAC,OAAO,YAAY;AACzB,YAAI,UAAU,SAAS;AACrB,kBAAQ,MAAM,kBAAkB,OAAO,EAAE;AAAA,QAC3C;AAAA,MACF;AAAA,IACF,CAAC;AAED,SAAK,MAAM,EAAE,MAAM,CAAC,QAAQ;AAC1B,cAAQ,MAAM,kCAAkC,GAAG;AACnD,sBAAgB,OAAO,QAAQ,SAAS;AAAA,IAC1C,CAAC;AAED,oBAAgB,IAAI,QAAQ,WAAW;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,IACF,CAAC;AAED,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,wBAAwB;AACnC,UAAM,QAAQ;AACd,UAAM,UAAU,gBAAgB,IAAI,MAAM,SAAS;AAEnD,QAAI,CAAC,SAAS;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,qBAAqB,WAAW,MAAM,UAAU,CAAC;AAAA,IACvF;AAEA,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,WAAW,QAAQ;AAAA,MACnB,MAAM,QAAQ;AAAA,MACd,WAAW,IAAI,KAAK,QAAQ,SAAS,EAAE,YAAY;AAAA,MACnD,UAAU,KAAK,IAAI,IAAI,QAAQ;AAAA,IACjC,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,sBAAsB;AACjC,UAAM,QAAQ;AACd,UAAM,UAAU,gBAAgB,IAAI,MAAM,SAAS;AAEnD,QAAI,CAAC,SAAS;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,qBAAqB,WAAW,MAAM,UAAU,CAAC;AAAA,IACvF;AAEA,UAAM,QAAQ,KAAK,KAAK;AACxB,oBAAgB,OAAO,MAAM,SAAS;AAEtC,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,WAAW,MAAM;AAAA,MACjB,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,sBAAsB;AACjC,UAAM,WAAW,MAAM,KAAK,gBAAgB,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO;AAAA,MAChE,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,WAAW,IAAI,KAAK,EAAE,SAAS,EAAE,YAAY;AAAA,MAC7C,UAAU,KAAK,IAAI,IAAI,EAAE;AAAA,IAC3B,EAAE;AAEF,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,OAAO,SAAS;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,qBAAqB;AAChC,UAAM,QAAQ;AAKd,UAAM,SAASA,eAAc;AAE7B,UAAM,UAAU,gBAAgB,IAAI,MAAM,SAAS;AACnD,QAAI,CAAC,SAAS;AACZ,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,WAAW,MAAM;AAAA,MACnB,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,MAAM,MAAM,GAAG,MAAM,2BAA2B,MAAM,SAAS,QAAQ;AAAA,MACtF,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,MAChC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,cAAc,MAAM;AAAA,QACpB,UAAU,MAAM,YAAY;AAAA,MAC9B,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,wBAAwB,IAAI,GAAG,CAAC;AAAA,IACtE;AAEA,UAAM,SAAU,MAAM,SAAS,KAAK;AAEpC,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,OAAO,OAAO;AAAA,MACd,WAAW,OAAO;AAAA,MAClB,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,SAAO;AACT;;;ACzRA,IAAI,kBAAiC;AAK9B,SAAS,+BAA+B;AAC7C,SAAO,uCAAuC;AAChD;AAMA,eAAsB,kBAAkB,MAAc,MAA+B;AAEnF,MAAI,SAAS,iBAAiB;AAC5B,QAAI;AACF,YAAM,SAAS,MAAM,cAAc;AAAA,QACjC,UAAW,KAAK,YAAwB;AAAA,QACxC,kBAAkB,KAAK;AAAA,MACzB,CAAC;AAED,UAAI,CAAC,OAAO,IAAI;AACd,eAAO,SAAS,EAAE,IAAI,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,MACpD;AAEA,wBAAkB,OAAO,KAAM;AAC/B,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,MAAM;AAAA,MACR,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,IACxF;AAAA,EACF;AAEA,MAAI,SAAS,gBAAgB;AAC3B,QAAI;AACF,UAAI,iBAAiB;AACnB,cAAM,cAAc,eAAe;AACnC,0BAAkB;AAAA,MACpB,OAAO;AAEL,cAAM,kBAAkB;AAAA,MAC1B;AACA,aAAO,SAAS,EAAE,IAAI,MAAM,MAAM,kCAAkC,CAAC;AAAA,IACvE,SAAS,KAAK;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,IACxF;AAAA,EACF;AAGA,MAAI,CAAC,KAAK,WAAW,UAAU,EAAG,QAAO;AAEzC,MAAI;AAEF,QAAI,YAAY;AAChB,QAAI,CAAC,WAAW;AACd,UAAI;AACF,cAAM,SAAS,MAAM,qBAAqB;AAC1C,oBAAY,OAAO;AACnB,0BAAkB;AAAA,MACpB,QAAQ;AACN,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAGA,UAAM,WAAW,KAAK,QAAQ,aAAa,EAAE;AAC7C,UAAM,SAAS,MAAM,SAAS,WAAW,UAAU,IAAI;AAEvD,QAAI,CAAC,OAAO,IAAI;AAEd,UAAI,OAAO,OAAO,SAAS,WAAW,GAAG;AACvC,0BAAkB;AAAA,MACpB;AAIA,UAAI,OAAO,cAAc,mBAAmB;AAC1C,eAAO;AAAA,UACL,OAAO,SAAS;AAAA,QAClB;AAAA,MACF;AACA,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,OAAO,OAAO,MAAM,KAAK,CAAC;AAAA,IAChE;AAGA,UAAM,aAAyB,OAAO,QAAQ,SAC1C,EAAE,MAAM,OAAO,QAAQ,IAAI,QAAQ,OAAO,OAAO,IAChD,OAAO,QAAQ;AAEpB,WAAO,iBAAiB,UAAU;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,SAAS,EAAE,IAAI,OAAO,OAAO,SAAS,MAAM,KAAK,CAAC;AAAA,EAC3D;AACF;;;AC/GO,SAAS,0BAA0B;AACxC,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MAGF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,KAAK;AAAA,YACH,MAAM;AAAA,YACN,MAAM,CAAC,QAAQ,OAAO,OAAO;AAAA,YAC7B,aAAa;AAAA,UACf;AAAA,UACA,KAAK;AAAA,YACH,MAAM;AAAA,YACN,aACE;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,gBACpB,MACA,MACA;AACA,MAAI,SAAS,iBAAkB,QAAO;AAEtC,MAAI;AACF,UAAM,MAAM,KAAK;AACjB,UAAM,UAAU,KAAK;AACrB,UAAM,UAAU,MAAM,SAAS,GAAG,IAAI;AAEtC,QAAI,OAAO,CAAC,SAAS;AACnB,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,wBAAwB,GAAG,4BAA4B,CAAC;AAAA,IAC9F;AAEA,UAAM,SAAS,SAAS,OAAO,cAAc;AAC7C,UAAM,SAAS,SAAS,OAAO,cAAc,MAAM;AAGnD,UAAM,WAAW,MAAM,MAAM,GAAG,MAAM,oBAAoB;AAAA,MACxD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AAED,UAAM,YAAa,MAAM,SAAS,KAAK;AACvC,QAAI,CAAC,SAAS,MAAM,CAAC,UAAU,MAAM,CAAC,UAAU,cAAc,CAAC,UAAU,UAAU;AACjF,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO,uBAAuB,UAAU,SAAS,SAAS,UAAU;AAAA,MACtE,CAAC;AAAA,IACH;AAGA,QAAI,UAAU,iBAAiB;AAE7B;AAAA,QAAQ,UAAU;AAAA,QAAiB,MACjC,QAAQ,OAAO,MAAM,kCAAkC,UAAU,eAAe;AAAA,CAAc;AAAA,MAChG;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,mBAAmB,KAAK;AACtD,UAAM,YAAY,UAAU,YAAY,IAAI,KAAK,UAAU,SAAS,EAAE,QAAQ,IAAI;AAElF,QAAI;AACJ,QAAI;AAEJ,WAAO,MAAM;AACX,UAAI,aAAa,KAAK,IAAI,IAAI,WAAW;AACvC,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO;AAAA,UACP,UAAU,UAAU;AAAA,UACpB,iBAAiB,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AAEA,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC;AAE9D,YAAM,UAAU,MAAM,MAAM,GAAG,MAAM,mBAAmB;AAAA,QACtD,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,YAAY,UAAU,WAAW,CAAC;AAAA,MAC3D,CAAC;AAED,YAAM,WAAY,MAAM,QAAQ,KAAK;AACrC,UAAI,CAAC,QAAQ,MAAM,CAAC,SAAS,IAAI;AAC/B,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO,sBAAsB,SAAS,SAAS,QAAQ,UAAU;AAAA,QACnE,CAAC;AAAA,MACH;AAEA,UAAI,SAAS,WAAW,cAAc,SAAS,aAAa;AAC1D,gBAAQ,SAAS;AACjB,uBAAe,SAAS;AACxB;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,YAAY;AAClC,eAAO,SAAS,EAAE,IAAI,OAAO,OAAO,0BAA0B,CAAC;AAAA,MACjE;AAEA,UAAI,SAAS,WAAW,WAAW;AACjC,eAAO,SAAS,EAAE,IAAI,OAAO,OAAO,mCAAmC,CAAC;AAAA,MAC1E;AAAA,IACF;AAGA,UAAM,WAAW,MAAM,UAAU,QAAQ,KAAK;AAC9C,UAAM,OAAO,UAAU,iBAAiB,CAAC;AAEzC,QAAI,aAAa;AACjB,QAAI,aAAa;AACjB,QAAI;AAEJ,QAAI,KAAK,UAAU,GAAG;AACpB,qBAAe,KAAK,CAAC,GAAG;AAAA,IAC1B,WAAW,SAAS;AAElB,YAAM,cAAc,KAAK;AAAA,QACvB,CAAC,MAAM,EAAE,KAAK,YAAY,MAAM,QAAQ,YAAY,KAAK,EAAE,OAAO;AAAA,MACpE;AACA,UAAI,CAAC,aAAa;AAEhB,cAAMC,eAAc,MAAM,aAAa,GAAG,IAAI;AAC9C,cAAM,SAAS,EAAE,OAAO,YAAY,QAAQ,OAAO,YAAY,SAAS,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY,GAAG,KAAK,GAAGA,YAAW;AAEpI,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO,iBAAiB,OAAO;AAAA,UAC/B,UAAU;AAAA,UACV,YAAY,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY,GAAG;AAAA,UACrD,eAAe,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE;AAAA,QAC3E,CAAC;AAAA,MACH;AAEA,UAAI,YAAY,OAAO,cAAc;AACnC,cAAM,YAAY,MAAM,UAAU,QAAQ,OAAO,YAAY,EAAE;AAC/D,YAAI,CAAC,UAAU,MAAM,CAAC,UAAU,aAAa;AAC3C,iBAAO,SAAS;AAAA,YACd,IAAI;AAAA,YACJ,OAAO,kCAAkC,UAAU,SAAS,eAAe;AAAA,UAC7E,CAAC;AAAA,QACH;AACA,qBAAa,UAAU;AACvB,qBAAa,UAAU;AACvB,uBAAe,UAAU;AAAA,MAC3B,OAAO;AACL,uBAAe,YAAY;AAAA,MAC7B;AAAA,IACF,OAAO;AAEL,YAAM,aAAa,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY;AACzD,qBAAe,YAAY;AAAA,IAC7B;AAGA,UAAM,cAAc,MAAM,aAAa,GAAG,IAAI;AAC9C,UAAM,SAAS,EAAE,OAAO,YAAY,QAAQ,OAAO,YAAY,SAAS,aAAa,GAAG,WAAW;AAEnG,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,SAAS;AAAA,MACT,OAAO;AAAA,MACP,GAAI,KAAK,SAAS,IACd,EAAE,eAAe,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE,EAAE,IAC7E,CAAC;AAAA,IACP,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,EACxF;AACF;;;AC3LA,OAAO,QAAQ;AACf,SAAS,iBAAiB;AAC1B,OAAOC,cAAa;AAOpB,SAAS,uBAAuC;AAC9C,MAAI;AACF,UAAM,UAAU,GAAG,aAAaC,SAAQ,KAAK,CAAC,CAAC,EAAE,QAAQ,OAAO,GAAG;AACnE,QAAI,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,OAAO,EAAG,QAAO;AACnE,QAAI,QAAQ,SAAS,QAAQ,KAAK,QAAQ,SAAS,QAAQ,EAAG,QAAO;AAAA,EACvE,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,IAAM,mBAAqD;AAAA,EACzD,KAAK,CAAC,OAAO,OAAO,MAAM,GAAG,WAAW,SAAS;AAAA,EACjD,MAAM,CAAC,QAAQ,OAAO,MAAM,GAAG,WAAW,SAAS;AAAA,EACnD,KAAK,CAAC,OAAO,WAAW,MAAM,GAAG,WAAW,SAAS;AACvD;AAEO,SAAS,4BAA4B;AAC1C,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MAEF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY,CAAC;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,kBACpB,MACA,OACA;AACA,MAAI,SAAS,mBAAoB,QAAO;AAExC,MAAI;AACF,UAAM,KAAK,qBAAqB;AAChC,UAAM,MAAM,iBAAiB,EAAE;AAE/B,UAAM,SAAS,UAAU,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;AAAA,MAC7C,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,KAAKA,SAAQ,IAAI;AAAA,MACjB,SAAS;AAAA,MACT,OAAOA,SAAQ,aAAa;AAAA,MAC5B,aAAa;AAAA,IACf,CAAC;AAED,QAAI,OAAO,OAAO;AAChB,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO,iBAAiB,EAAE,KAAK,OAAO,MAAM,OAAO;AAAA,MACrD,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,KAAK,KAAK;AACnD,UAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,KAAK,KAAK;AAEnD,QAAI,OAAO,WAAW,GAAG;AACvB,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO,6BAA6B,OAAO,MAAM;AAAA,QACjD,QAAQ,UAAU;AAAA,MACpB,CAAC;AAAA,IACH;AAEA,UAAM,iBAAiB;AAEvB,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,SAAS,yBAAyB,WAAW;AAAA,MAC7C,gBAAgB;AAAA,MAChB,QAAQ,UAAU;AAAA,IACpB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,EACxF;AACF;;;ACnFA,IAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQb,IAAMC,6BAA4B,4BAAsB;AAExD,IAAM,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwNtC,KAAK;;;ACtOP,IAAM,aAAa;AAEZ,SAAS,0BAA0B;AACxC,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MACF,aAAa,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,IAChD;AAAA,EACF;AACF;AAEA,eAAsB,gBAAgB,MAAc;AAClD,SAAO,SAAS,aAAa,SAAS,wBAAwB,IAAI;AACpE;;;AREA,eAAe,aAAa;AAC1B,QAAM,WAAW,aAAa,kBAAkB,KAAM,MAAM,gBAAgB;AAC5E,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,EAAE,QAAQ,cAAc,GAAG,SAAS;AAC7C;AAEA,eAAsB,OAAO,MAAgB;AAC3C,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AAClD,YAAQ;AAAA,MACN;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AACA;AAAA,EACF;AACA,QAAM,WAAW,cAAc,YAAY;AAE3C,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,YAAY,SAAS,QAAQ;AAAA,IACrC;AAAA,MACE,cAAc,EAAE,OAAO,CAAC,EAAE;AAAA,MAC1B,cAAcC;AAAA,IAChB;AAAA,EACF;AAEA,SAAO,kBAAkB,wBAAwB,aAAa;AAAA,IAC5D,OAAO;AAAA,MACL,GAAG,wBAAwB;AAAA,MAC3B,GAAG,0BAA0B;AAAA,MAC7B,GAAG,wBAAwB;AAAA,MAC3B,GAAG,0BAA0B;AAAA,MAC7B,GAAG,6BAA6B;AAAA,MAChC,GAAG,SAAS,KAAK;AAAA,IACnB;AAAA,EACF,EAAE;AAEF,SAAO,kBAAkB,uBAAuB,OAAO,QAAQ;AAC7D,UAAM,OAAO,IAAI,OAAO;AACxB,UAAM,OAAQ,IAAI,OAAO,aAAa,CAAC;AAGvC,UAAM,cAAc,MAAM,gBAAgB,MAAM,IAAI;AACpD,QAAI,YAAa,QAAO;AAExB,UAAM,gBAAgB,MAAM,kBAAkB,MAAM,IAAI;AACxD,QAAI,cAAe,QAAO;AAE1B,UAAM,cAAc,MAAM,gBAAgB,IAAI;AAC9C,QAAI,YAAa,QAAO;AAExB,UAAM,gBAAgB,MAAM,kBAAkB,MAAM,IAAI;AACxD,QAAI,cAAe,QAAO;AAE1B,UAAM,gBAAgB,MAAM,kBAAkB,MAAM,IAAI;AACxD,QAAI,cAAe,QAAO;AAG1B,QAAI;AACF,YAAM,MAAM,MAAM,WAAW;AAC7B,aAAO,MAAM,SAAS,KAAK,MAAM,MAAM,GAAG;AAAA,IAC5C,SAAS,KAAK;AACZ,aAAO,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAClE;AAAA,EACF,CAAC;AAED,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAC9B,SAAO,IAAI,QAAc,MAAM,MAAS;AAC1C;","names":["resolveApiUrl","profileName","process","process","COFACTOR_MCP_INSTRUCTIONS","COFACTOR_MCP_INSTRUCTIONS"]}
+{"version":3,"sources":["../src/mcp/index.ts","../src/mcp/api-url.ts","../src/mcp/tool-helpers.ts","../src/mcp/session-tools.ts","../src/mcp/browser-tools.ts","../src/mcp/login-tool.ts","../src/mcp/upgrade-tool.ts","../src/mcp/instructions.ts","../src/mcp/guide-tool.ts"],"sourcesContent":["/**\n * MCP Server for the Cofactor CLI.\n *\n * Combines:\n *   - HTTP-only shared tools from @chatsdet/mcp-tools (workflows, runs, suites,\n *     credentials, issues, proposals)\n *   - CLI-local tools (login, upgrade, browser daemon, cloud-relay sessions)\n *     that depend on local state and can't be hosted remotely.\n *\n * @module\n */\n\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';\nimport { buildRegistry, sharedGroups } from '@chatsdet/mcp-tools';\nimport { readStoredToken } from '../auth';\nimport { readBrandEnv } from '../brand.js';\nimport { resolveApiUrl } from './api-url';\nimport { toolText } from './tool-helpers';\nimport { getSessionToolDefinitions, handleSessionTool } from './session-tools';\nimport { getBrowserMCPToolDefinitions, handleBrowserTool } from './browser-tools';\nimport { getLoginToolDefinitions, handleLoginTool } from './login-tool';\nimport { getUpgradeToolDefinitions, handleUpgradeTool } from './upgrade-tool';\nimport { getGuideToolDefinitions, handleGuideTool } from './guide-tool';\nimport { COFACTOR_MCP_INSTRUCTIONS } from './instructions';\n\nasync function resolveCtx() {\n  const apiToken = readBrandEnv('CANARY_API_TOKEN') ?? (await readStoredToken());\n  if (!apiToken) {\n    throw new Error('Missing token. Call the cofactor_login tool or set CANARY_API_TOKEN.');\n  }\n  return { apiUrl: resolveApiUrl(), apiToken };\n}\n\nexport async function runMcp(argv: string[]) {\n  if (argv.includes('--help') || argv.includes('-h')) {\n    console.log(\n      [\n        'Usage: canary mcp',\n        '',\n        'Start the Cofactor MCP server on stdio. Agents launch it themselves; install it',\n        'into Claude, Cursor and others with `canary install`. It uses the session from',\n        '`canary login`, or CANARY_API_TOKEN.',\n      ].join('\\n')\n    );\n    return;\n  }\n  const registry = buildRegistry(sharedGroups);\n\n  const server = new Server(\n    { name: 'cofactor', version: '0.1.0' },\n    {\n      capabilities: { tools: {} },\n      instructions: COFACTOR_MCP_INSTRUCTIONS,\n    }\n  );\n\n  server.setRequestHandler(ListToolsRequestSchema, async () => ({\n    tools: [\n      ...getLoginToolDefinitions(),\n      ...getUpgradeToolDefinitions(),\n      ...getGuideToolDefinitions(),\n      ...getSessionToolDefinitions(),\n      ...getBrowserMCPToolDefinitions(),\n      ...registry.list(),\n    ],\n  }));\n\n  server.setRequestHandler(CallToolRequestSchema, async (req) => {\n    const tool = req.params.name;\n    const args = (req.params.arguments ?? {}) as Record<string, unknown>;\n\n    // CLI-local groups try first; each returns null if the tool is not theirs.\n    const loginResult = await handleLoginTool(tool, args);\n    if (loginResult) return loginResult;\n\n    const upgradeResult = await handleUpgradeTool(tool, args);\n    if (upgradeResult) return upgradeResult;\n\n    const guideResult = await handleGuideTool(tool);\n    if (guideResult) return guideResult;\n\n    const browserResult = await handleBrowserTool(tool, args);\n    if (browserResult) return browserResult;\n\n    const sessionResult = await handleSessionTool(tool, args);\n    if (sessionResult) return sessionResult;\n\n    // Shared HTTP-only tools — provide ctx for this call.\n    try {\n      const ctx = await resolveCtx();\n      return await registry.call(tool, args, ctx);\n    } catch (err) {\n      return toolText(err instanceof Error ? err.message : String(err));\n    }\n  });\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n  return new Promise<void>(() => undefined);\n}\n","import { readBrandEnv } from '../brand.js';\nimport { DEFAULT_API_URL } from '../default-urls.js';\n\nexport { DEFAULT_API_URL };\n\nexport function resolveApiUrl(): string {\n  return readBrandEnv('CANARY_API_URL') ?? DEFAULT_API_URL;\n}\n","/**\n * MCP tool response helpers.\n *\n * @module\n */\n\nimport type { ToolResult } from '@chatsdet/browser-core';\n\nexport function toolText(text: string) {\n  return { content: [{ type: 'text' as const, text }] };\n}\n\nexport function toolJson(data: unknown) {\n  return { content: [{ type: 'text' as const, text: JSON.stringify(data, null, 2) }] };\n}\n\n/**\n * Convert a BrowserToolExecutor result to MCP SDK content blocks.\n */\nexport function formatMCPContent(result: ToolResult) {\n  if (typeof result === 'string') {\n    return { content: [{ type: 'text' as const, text: result }] };\n  }\n\n  // MCPContentResult with text and optional images\n  const content: Array<{ type: 'text'; text: string } | { type: 'image'; data: string; mimeType: string }> = [];\n\n  if (result.text) {\n    content.push({ type: 'text', text: result.text });\n  }\n\n  for (const img of result.images ?? []) {\n    content.push({ type: 'image', data: img.data, mimeType: img.mimeType });\n  }\n\n  return { content };\n}\n","/**\n * Cloud-relay session tools for the MCP server.\n *\n * These tools proxy browser control through the cloud API via WebSocket.\n *\n * @module\n */\n\nimport { readStoredToken } from '../auth';\nimport { readBrandEnv } from '../brand.js';\nimport { DEFAULT_API_URL } from '../default-urls.js';\nimport { LocalBrowserHost } from '../local-browser/host';\nimport type { LocalBrowserMode } from '../local-browser/protocol';\nimport { toolJson } from './tool-helpers';\n\ntype LocalBrowserStartInput = {\n  mode?: LocalBrowserMode;\n  cdpUrl?: string;\n  headless?: boolean;\n  storageStatePath?: string;\n  instructions?: string;\n};\n\ntype LocalBrowserStopInput = {\n  sessionId: string;\n};\n\ntype LocalBrowserStatusInput = {\n  sessionId: string;\n};\n\ninterface BrowserSession {\n  sessionId: string;\n  host: LocalBrowserHost;\n  startedAt: number;\n  mode: LocalBrowserMode;\n}\n\n// Global browser sessions managed by MCP\nconst browserSessions = new Map<string, BrowserSession>();\n\nfunction resolveApiUrl(input?: string): string {\n  return input ?? readBrandEnv('CANARY_API_URL') ?? DEFAULT_API_URL;\n}\n\nasync function resolveToken(): Promise<string> {\n  const token = readBrandEnv('CANARY_API_TOKEN') ?? (await readStoredToken());\n  if (!token) {\n    throw new Error('Missing token. Run `cofactor login` first or set CANARY_API_TOKEN.');\n  }\n  return token;\n}\n\nexport function getSessionToolDefinitions() {\n  return [\n    {\n      name: 'local_browser_start',\n      description:\n        'Start a local browser session that connects to the cloud agent. The cloud agent can then control this browser to test local applications. Returns sessionId for tracking.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          mode: {\n            type: 'string',\n            enum: ['playwright', 'cdp'],\n            description:\n              \"Browser mode: 'playwright' for fresh browser, 'cdp' to connect to existing Chrome\",\n          },\n          cdpUrl: {\n            type: 'string',\n            description: \"CDP endpoint URL when mode is 'cdp' (e.g. http://localhost:9222)\",\n          },\n          headless: {\n            type: 'boolean',\n            description: 'Run browser headless (default: true for playwright mode)',\n          },\n          storageStatePath: {\n            type: 'string',\n            description: 'Path to Playwright storage state JSON for pre-authenticated sessions',\n          },\n          instructions: {\n            type: 'string',\n            description: 'Instructions for the cloud agent on what to test',\n          },\n        },\n      },\n    },\n    {\n      name: 'local_browser_status',\n      description: 'Check the status of a local browser session.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          sessionId: { type: 'string' },\n        },\n        required: ['sessionId'],\n      },\n    },\n    {\n      name: 'local_browser_stop',\n      description: 'Stop a local browser session and close the browser.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          sessionId: { type: 'string' },\n        },\n        required: ['sessionId'],\n      },\n    },\n    {\n      name: 'local_browser_list',\n      description: 'List all active local browser sessions.',\n      inputSchema: {\n        type: 'object',\n        properties: {},\n      },\n    },\n    {\n      name: 'local_browser_run',\n      description:\n        'Start a test run on an active local browser session. The cloud agent will control the local browser according to the instructions.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          sessionId: {\n            type: 'string',\n            description: 'The session ID from local_browser_start',\n          },\n          instructions: {\n            type: 'string',\n            description: 'Instructions for the cloud agent on what to test',\n          },\n          startUrl: {\n            type: 'string',\n            description: 'Optional URL to navigate to before starting',\n          },\n        },\n        required: ['sessionId', 'instructions'],\n      },\n    },\n  ];\n}\n\nexport async function handleSessionTool(tool: string, args: Record<string, unknown>) {\n  const token = await resolveToken();\n\n  if (tool === 'local_browser_start') {\n    const input = args as unknown as LocalBrowserStartInput;\n    const apiUrl = resolveApiUrl();\n    const mode = input.mode ?? 'playwright';\n\n    const sessionResponse = await fetch(`${apiUrl}/local-browser/sessions`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({\n        browserMode: mode,\n        instructions: input.instructions ?? null,\n      }),\n    });\n\n    if (!sessionResponse.ok) {\n      const text = await sessionResponse.text();\n      return toolJson({ ok: false, error: `Failed to create session: ${text}` });\n    }\n\n    const session = (await sessionResponse.json()) as {\n      ok: boolean;\n      sessionId: string;\n      wsToken: string;\n      expiresAt: string;\n    };\n\n    const host = new LocalBrowserHost({\n      apiUrl,\n      wsToken: session.wsToken,\n      sessionId: session.sessionId,\n      browserMode: mode,\n      cdpUrl: input.cdpUrl,\n      headless: input.headless ?? true,\n      storageStatePath: input.storageStatePath,\n      onLog: (level, message) => {\n        if (level === 'error') {\n          console.error(`[LocalBrowser] ${message}`);\n        }\n      },\n    });\n\n    host.start().catch((err) => {\n      console.error('Failed to start local browser:', err);\n      browserSessions.delete(session.sessionId);\n    });\n\n    browserSessions.set(session.sessionId, {\n      sessionId: session.sessionId,\n      host,\n      startedAt: Date.now(),\n      mode,\n    });\n\n    return toolJson({\n      ok: true,\n      sessionId: session.sessionId,\n      mode,\n      expiresAt: session.expiresAt,\n      note: 'Browser session started. The cloud agent can now control this browser. Use local_browser_stop to end the session.',\n    });\n  }\n\n  if (tool === 'local_browser_status') {\n    const input = args as unknown as LocalBrowserStatusInput;\n    const session = browserSessions.get(input.sessionId);\n\n    if (!session) {\n      return toolJson({ ok: false, error: 'Session not found', sessionId: input.sessionId });\n    }\n\n    return toolJson({\n      ok: true,\n      sessionId: session.sessionId,\n      mode: session.mode,\n      startedAt: new Date(session.startedAt).toISOString(),\n      uptimeMs: Date.now() - session.startedAt,\n    });\n  }\n\n  if (tool === 'local_browser_stop') {\n    const input = args as unknown as LocalBrowserStopInput;\n    const session = browserSessions.get(input.sessionId);\n\n    if (!session) {\n      return toolJson({ ok: false, error: 'Session not found', sessionId: input.sessionId });\n    }\n\n    await session.host.stop();\n    browserSessions.delete(input.sessionId);\n\n    return toolJson({\n      ok: true,\n      sessionId: input.sessionId,\n      note: 'Browser session stopped and browser closed.',\n    });\n  }\n\n  if (tool === 'local_browser_list') {\n    const sessions = Array.from(browserSessions.values()).map((s) => ({\n      sessionId: s.sessionId,\n      mode: s.mode,\n      startedAt: new Date(s.startedAt).toISOString(),\n      uptimeMs: Date.now() - s.startedAt,\n    }));\n\n    return toolJson({\n      ok: true,\n      count: sessions.length,\n      sessions,\n    });\n  }\n\n  if (tool === 'local_browser_run') {\n    const input = args as unknown as {\n      sessionId: string;\n      instructions: string;\n      startUrl?: string;\n    };\n    const apiUrl = resolveApiUrl();\n\n    const session = browserSessions.get(input.sessionId);\n    if (!session) {\n      return toolJson({\n        ok: false,\n        error: 'Session not found locally. Make sure you started it with local_browser_start.',\n        sessionId: input.sessionId,\n      });\n    }\n\n    const response = await fetch(`${apiUrl}/local-browser/sessions/${input.sessionId}/run`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({\n        instructions: input.instructions,\n        startUrl: input.startUrl ?? null,\n      }),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      return toolJson({ ok: false, error: `Failed to start run: ${text}` });\n    }\n\n    const result = (await response.json()) as { ok: boolean; jobId: string; sessionId: string };\n\n    return toolJson({\n      ok: true,\n      jobId: result.jobId,\n      sessionId: result.sessionId,\n      note: 'Test run started. The cloud agent is now controlling your local browser. You can watch the browser to see the test in action.',\n    });\n  }\n\n  return null; // Not handled\n}\n","/**\n * Browser MCP tool registration — daemon adapter.\n *\n * Thin layer that maps MCP tool calls to the session daemon,\n * ensuring the CLI gets the SAME semantic diff, snapshot formatting,\n * click validation, and recovery notices as the cloud agent.\n *\n * The daemon owns all browser sessions. MCP is just a protocol adapter.\n *\n * @module\n */\n\nimport { getBrowserToolDefinitionsWithLifecycle } from '@chatsdet/browser-core';\nimport {\n  createSession,\n  deleteSession,\n  deleteAllSessions,\n  callTool,\n  resolveTargetSession,\n} from '../session/daemon-client.js';\nimport { formatMCPContent, toolJson, toolText } from './tool-helpers';\nimport { USER_PAUSED_ERROR } from '../session/types.js';\nimport type { ToolResult } from '@chatsdet/browser-core';\n\n/** Track the active session ID within this MCP server instance */\nlet activeSessionId: string | null = null;\n\n/**\n * Get tool definitions for browser MCP tools (including lifecycle).\n */\nexport function getBrowserMCPToolDefinitions() {\n  return getBrowserToolDefinitionsWithLifecycle();\n}\n\n/**\n * Handle a browser tool call.\n * Returns null if the tool name is not a browser tool.\n */\nexport async function handleBrowserTool(name: string, args: Record<string, unknown>) {\n  // Lifecycle tools\n  if (name === 'browser_start') {\n    try {\n      const result = await createSession({\n        headless: (args.headless as boolean) ?? false,\n        storageStatePath: args.storageStatePath as string | undefined,\n      });\n\n      if (!result.ok) {\n        return toolJson({ ok: false, error: result.error });\n      }\n\n      activeSessionId = result.data!.id;\n      return toolJson({\n        ok: true,\n        sessionId: activeSessionId,\n        note: 'Browser started. You can now use browser_navigate, browser_click, and other browser tools.',\n      });\n    } catch (err) {\n      return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n    }\n  }\n\n  if (name === 'browser_stop') {\n    try {\n      if (activeSessionId) {\n        await deleteSession(activeSessionId);\n        activeSessionId = null;\n      } else {\n        // Stop all sessions if no specific one tracked\n        await deleteAllSessions();\n      }\n      return toolJson({ ok: true, note: 'Browser stopped and cleaned up.' });\n    } catch (err) {\n      return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n    }\n  }\n\n  // All other browser_* tools require an active session\n  if (!name.startsWith('browser_')) return null;\n\n  try {\n    // Resolve target session: prefer tracked MCP session, then auto-resolve\n    let sessionId = activeSessionId;\n    if (!sessionId) {\n      try {\n        const target = await resolveTargetSession();\n        sessionId = target.id;\n        activeSessionId = sessionId;\n      } catch {\n        return toolJson({\n          ok: false,\n          error: 'No active browser session. Start one with browser_start first.',\n        });\n      }\n    }\n\n    // Strip 'browser_' prefix for the daemon tool name\n    const toolName = name.replace(/^browser_/, '');\n    const result = await callTool(sessionId, toolName, args);\n\n    if (!result.ok) {\n      // If session not found, clear tracking and report error\n      if (result.error?.includes('not found')) {\n        activeSessionId = null;\n      }\n      // The user is actively driving the browser — the daemon deferred this\n      // action and will auto-resume once they go idle. Surface as informational\n      // text (not an error) so Claude waits rather than retrying in a loop.\n      if (result.errorCode === USER_PAUSED_ERROR) {\n        return toolText(\n          result.error ?? 'The user is interacting with the browser; deferring until they are idle.'\n        );\n      }\n      return toolJson({ ok: false, error: result.error, tool: name });\n    }\n\n    // Convert daemon response back to ToolResult format for MCP formatting\n    const toolResult: ToolResult = result.images?.length\n      ? { text: result.text ?? '', images: result.images }\n      : (result.text ?? '');\n\n    return formatMCPContent(toolResult);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return toolJson({ ok: false, error: message, tool: name });\n  }\n}\n","/**\n * MCP tool for device code OAuth login.\n *\n * Allows AI coding tools to trigger authentication without\n * requiring the user to run `cofactor login` in a separate terminal.\n *\n * @module\n */\n\nimport { ENV_URLS, envToProfile, resolveAppUrl, saveAuth } from '../auth';\nimport { openUrl, fetchOrgs, switchOrg } from '../login';\nimport type { StartResponse, PollResponse } from '../login';\nimport { resolveApiUrl } from './api-url';\nimport { toolJson } from './tool-helpers';\n\nexport function getLoginToolDefinitions() {\n  return [\n    {\n      name: 'cofactor_login',\n      description:\n        'Authenticate with Cofactor using the device code OAuth flow. Opens a browser window for the user to approve. ' +\n        'May take 30-120 seconds while waiting for the user to complete login. ' +\n        'Returns the verification URL and user code in case the browser does not open automatically.',\n      inputSchema: {\n        type: 'object',\n        properties: {\n          env: {\n            type: 'string',\n            enum: ['prod', 'dev', 'local'],\n            description: 'Target environment (default: prod)',\n          },\n          org: {\n            type: 'string',\n            description:\n              'Organization name or ID to select if the user belongs to multiple orgs. If omitted, uses the default org.',\n          },\n        },\n      },\n    },\n  ];\n}\n\nexport async function handleLoginTool(\n  tool: string,\n  args: Record<string, unknown>\n) {\n  if (tool !== 'cofactor_login') return null;\n\n  try {\n    const env = args.env as string | undefined;\n    const orgFlag = args.org as string | undefined;\n    const envUrls = env ? ENV_URLS[env] : undefined;\n\n    if (env && !envUrls) {\n      return toolJson({ ok: false, error: `Unknown environment: ${env}. Valid: prod, dev, local` });\n    }\n\n    const apiUrl = envUrls?.api ?? resolveApiUrl();\n    const appUrl = envUrls?.app ?? resolveAppUrl(apiUrl);\n\n    // Step 1: Start device code flow\n    const startRes = await fetch(`${apiUrl}/cli-login/start`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ appUrl }),\n    });\n\n    const startJson = (await startRes.json()) as StartResponse;\n    if (!startRes.ok || !startJson.ok || !startJson.deviceCode || !startJson.userCode) {\n      return toolJson({\n        ok: false,\n        error: `Login start failed: ${startJson.error ?? startRes.statusText}`,\n      });\n    }\n\n    // Step 2: Open browser (non-fatal if it fails)\n    if (startJson.verificationUrl) {\n      // stdout is the MCP channel, so report a failed launch on stderr.\n      openUrl(startJson.verificationUrl, () =>\n        process.stderr.write(`Could not open a browser. Open ${startJson.verificationUrl} manually.\\n`)\n      );\n    }\n\n    // Step 3: Poll until approved/rejected/expired\n    const intervalMs = (startJson.intervalSeconds ?? 3) * 1000;\n    const expiresAt = startJson.expiresAt ? new Date(startJson.expiresAt).getTime() : null;\n\n    let token: string | undefined;\n    let initialOrgId: string | undefined;\n\n    while (true) {\n      if (expiresAt && Date.now() > expiresAt) {\n        return toolJson({\n          ok: false,\n          error: 'Login code expired. Please try again.',\n          userCode: startJson.userCode,\n          verificationUrl: startJson.verificationUrl,\n        });\n      }\n\n      await new Promise((resolve) => setTimeout(resolve, intervalMs));\n\n      const pollRes = await fetch(`${apiUrl}/cli-login/poll`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ deviceCode: startJson.deviceCode }),\n      });\n\n      const pollJson = (await pollRes.json()) as PollResponse;\n      if (!pollRes.ok || !pollJson.ok) {\n        return toolJson({\n          ok: false,\n          error: `Login poll failed: ${pollJson.error ?? pollRes.statusText}`,\n        });\n      }\n\n      if (pollJson.status === 'approved' && pollJson.accessToken) {\n        token = pollJson.accessToken;\n        initialOrgId = pollJson.orgId;\n        break;\n      }\n\n      if (pollJson.status === 'rejected') {\n        return toolJson({ ok: false, error: 'Login rejected by user.' });\n      }\n\n      if (pollJson.status === 'expired') {\n        return toolJson({ ok: false, error: 'Login expired. Please try again.' });\n      }\n    }\n\n    // Step 4: Handle org selection\n    const orgsData = await fetchOrgs(apiUrl, token);\n    const orgs = orgsData?.organizations ?? [];\n\n    let finalToken = token;\n    let finalOrgId = initialOrgId;\n    let finalOrgName: string | undefined;\n\n    if (orgs.length <= 1) {\n      finalOrgName = orgs[0]?.name;\n    } else if (orgFlag) {\n      // Match by name (case-insensitive) or ID\n      const selectedOrg = orgs.find(\n        (o) => o.name.toLowerCase() === orgFlag.toLowerCase() || o.id === orgFlag\n      );\n      if (!selectedOrg) {\n        // Save the default token so they're at least logged in\n        const profileName = env ? envToProfile(env) : undefined;\n        await saveAuth({ token: finalToken, apiUrl, orgId: finalOrgId, orgName: orgs.find((o) => o.id === initialOrgId)?.name }, profileName);\n\n        return toolJson({\n          ok: false,\n          error: `Organization \"${orgFlag}\" not found.`,\n          loggedIn: true,\n          currentOrg: orgs.find((o) => o.id === initialOrgId)?.name,\n          availableOrgs: orgs.map((o) => ({ id: o.id, name: o.name, role: o.role })),\n        });\n      }\n\n      if (selectedOrg.id !== initialOrgId) {\n        const switchRes = await switchOrg(apiUrl, token, selectedOrg.id);\n        if (!switchRes.ok || !switchRes.accessToken) {\n          return toolJson({\n            ok: false,\n            error: `Failed to switch organization: ${switchRes.error ?? 'Unknown error'}`,\n          });\n        }\n        finalToken = switchRes.accessToken;\n        finalOrgId = switchRes.orgId;\n        finalOrgName = switchRes.orgName;\n      } else {\n        finalOrgName = selectedOrg.name;\n      }\n    } else {\n      // Multiple orgs, no flag — use default\n      const defaultOrg = orgs.find((o) => o.id === initialOrgId);\n      finalOrgName = defaultOrg?.name;\n    }\n\n    // Step 5: Save auth\n    const profileName = env ? envToProfile(env) : undefined;\n    await saveAuth({ token: finalToken, apiUrl, orgId: finalOrgId, orgName: finalOrgName }, profileName);\n\n    return toolJson({\n      ok: true,\n      message: 'Login successful. Token saved.',\n      orgName: finalOrgName,\n      orgId: finalOrgId,\n      ...(orgs.length > 1\n        ? { availableOrgs: orgs.map((o) => ({ id: o.id, name: o.name, role: o.role })) }\n        : {}),\n    });\n  } catch (err) {\n    return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n  }\n}\n","/**\n * MCP tool for upgrading the Cofactor CLI to the latest version.\n *\n * Adapts the `cofactor upgrade` command for MCP context where\n * stdio is the transport and process.exit() must be avoided.\n *\n * @module\n */\n\nimport fs from 'node:fs';\nimport { spawnSync } from 'node:child_process';\nimport process from 'node:process';\nimport { packageName } from '../brand.js';\nimport { clearUpdateCache } from '../update-check.js';\nimport { toolJson } from './tool-helpers';\n\ntype PackageManager = 'bun' | 'pnpm' | 'npm';\n\nfunction detectPackageManager(): PackageManager {\n  try {\n    const binPath = fs.realpathSync(process.argv[1]).replace(/\\\\/g, '/');\n    if (binPath.includes('.bun/') || binPath.includes('/bun/')) return 'bun';\n    if (binPath.includes('.pnpm/') || binPath.includes('/pnpm/')) return 'pnpm';\n  } catch {\n    // realpathSync can fail if symlink is broken\n  }\n  return 'npm';\n}\n\nconst UPGRADE_COMMANDS: Record<PackageManager, string[]> = {\n  bun: ['bun', 'add', '-g', `${packageName}@latest`],\n  pnpm: ['pnpm', 'add', '-g', `${packageName}@latest`],\n  npm: ['npm', 'install', '-g', `${packageName}@latest`],\n};\n\nexport function getUpgradeToolDefinitions() {\n  return [\n    {\n      name: 'cofactor_upgrade',\n      description:\n        'Upgrade the Cofactor CLI to the latest version. ' +\n        'Detects the package manager (npm, bun, pnpm) and runs the appropriate global install command.',\n      inputSchema: {\n        type: 'object',\n        properties: {},\n      },\n    },\n  ];\n}\n\nexport async function handleUpgradeTool(\n  tool: string,\n  _args: Record<string, unknown>\n) {\n  if (tool !== 'cofactor_upgrade') return null;\n\n  try {\n    const pm = detectPackageManager();\n    const cmd = UPGRADE_COMMANDS[pm];\n\n    const result = spawnSync(cmd[0], cmd.slice(1), {\n      stdio: ['pipe', 'pipe', 'pipe'],\n      cwd: process.cwd(),\n      timeout: 120_000,\n      shell: process.platform === 'win32',\n      windowsHide: true,\n    });\n\n    if (result.error) {\n      return toolJson({\n        ok: false,\n        error: `Failed to run ${pm}: ${result.error.message}`,\n      });\n    }\n\n    const stdout = result.stdout?.toString().trim() ?? '';\n    const stderr = result.stderr?.toString().trim() ?? '';\n\n    if (result.status !== 0) {\n      return toolJson({\n        ok: false,\n        error: `Upgrade failed (exit code ${result.status}).`,\n        output: stderr || stdout,\n      });\n    }\n\n    await clearUpdateCache();\n\n    return toolJson({\n      ok: true,\n      message: `Successfully upgraded ${packageName} to the latest version.`,\n      packageManager: pm,\n      output: stdout || undefined,\n    });\n  } catch (err) {\n    return toolJson({ ok: false, error: err instanceof Error ? err.message : String(err) });\n  }\n}\n","/**\n * Server instructions for the stdio server: the shared Cofactor text plus the\n * tools that only exist here (login, upgrade, local browser). Clients cap the\n * whole string at 4,096 chars, so the shared text is length-tested with room left\n * for this addendum (`apps/mcp/test/tools.test.ts`).\n *\n * The long workflow-authoring guide does not fit that cap, so it is served by\n * the cofactor_workflow_authoring_guide tool instead.\n *\n * @module\n */\n\nimport { COFACTOR_MCP_INSTRUCTIONS as SHARED_INSTRUCTIONS } from '@chatsdet/mcp-tools';\n\nconst LOCAL_TOOLS = `\n\nLocal tools (this stdio server only):\n- Call cofactor_login first with env \"prod\" unless the user asks for dev or local; if several organizations are available, ask which one and pass it as org.\n- To explore an app, list credentials (cofactor_credential_list), pick the default one (never one named local or manual), start a browser (browser_start or local_browser_start), then loop browser_snapshot (use its search parameter to find elements, mode \"screenshot\" to see the page), act by ref rather than coordinates, and snapshot again after every action to verify; never assume an action worked.\n- To switch organizations later, call cofactor_login again with org; no re-authentication needed.\n- Before writing or changing a test, call cofactor_workflow_authoring_guide.`;\n\nexport const COFACTOR_MCP_INSTRUCTIONS = SHARED_INSTRUCTIONS + LOCAL_TOOLS;\n\nexport const WORKFLOW_AUTHORING_GUIDE = `\n## Building Tests — Workflow Authoring\n\nAfter exploring an app via browser session, you can persist what you discovered as a reusable test workflow. The flow is: **explore → author → create**.\n\n### Step 1: Gather Credential Info\n\nCall \\`cofactor_credential_list\\` to get the credential UUID. You'll need it for the login node.\n- Always use \\`credentialId\\` (UUID) — never just the credential name\n- Set both \\`credentialId\\` and \\`credentialName\\` in the login node\n\n### Step 2: Design the Workflow\n\nA workflow is a directed graph of **nodes** connected by **edges**.\n\n#### Node Types\n\n| Type | Purpose | Required configJson |\n|------|---------|-------------------|\n| \\`login\\` | Authenticate with a credential | \\`credentialId\\`, \\`credentialName\\` |\n| \\`navigate\\` | Go to a URL | \\`pageUrl\\`, \\`pageTitle\\` |\n| \\`action\\` | Interact with elements | \\`customActionTitle\\`, \\`playbookSteps\\`, optionally \\`inlineAssertions\\` |\n| \\`assertion\\` | Standalone page verification | \\`condition\\` text |\n| \\`end\\` | Terminal node | (none) |\n\n#### Action Node Guidelines\n\n- Every action node **must** have a \\`customActionTitle\\` — a short (3-8 word) human-readable title describing the step (e.g., \"Create a new invoice\", \"Fill registration form\")\n- **Group related actions** into a single action node (one node per logical step, not per click)\n- **Prefer inline assertions** on action nodes over separate assertion nodes. Add \\`inlineAssertions\\` to verify outcomes right after the action. **Do not author an \\`id\\` field** — the server stamps a UUID on persist:\n  \\`\\`\\`json\n  {\n    \"inlineAssertions\": [\n      {\n        \"condition\": \"Success message 'Invoice created' is visible\",\n        \"severity\": \"fail\"\n      }\n    ]\n  }\n  \\`\\`\\`\n- Use separate \\`assertion\\` nodes only for standalone page-level verifications (e.g., initial page state before any action)\n\n#### Playbook Steps (inside action nodes)\n\nPlaybook steps describe what to do within an action node. Each step has:\n- \\`order\\`: sequence number (1, 2, 3...)\n- \\`action\\`: what to do — \\`click\\`, \\`fill\\`, \\`fill_form\\`, \\`select\\`, \\`navigate\\`, \\`wait\\`, \\`scroll\\`, \\`hover\\`, \\`upload\\`, \\`verify\\`, \\`press_key\\`, \\`drag\\`, \\`resize\\`, \\`capture\\`, \\`extract_table\\`, \\`python_execute\\`, \\`verify_download\\`, \\`verify_download_content\\`, \\`screenshot\\`, \\`agent_loop\\`\n- \\`target\\`: **semantic description** from the accessibility tree — button text, field labels, placeholder text. Describe as a human would: \"Submit button\", \"Email input field\", \"Status dropdown\". **Never use refs, CSS selectors, or XPaths.**\n- \\`params\\`: for \\`fill\\` actions, include \\`{ \"value\": \"...\" }\\`\n\nEach playbook step is one atomic intent executed in one browser tool call and maps to at most one recorded call. Draw boundaries at stable page states: fuse actions coupled through ephemeral UI state into that call; split unrelated intents and every stable intermediate into separate steps. Do not use \\`other\\`; if no concrete browser-tool-backed action fits, omit that diagnostic observation from \\`playbookSteps\\`. Use \\`click\\` for switches, checkboxes, and click-to-focus behavior. Use \\`press_key\\` with \\`{ \"key\": \"Escape\" }\\` or an explicit \\`click\\` to close popovers and panels; there is no \\`dismiss\\`, \\`toggle\\`, \\`focus\\`, or \\`handle_native_dialog\\` action.\n\n### Macros — Always Prefer Over Hardcoded Data\n\nMacros generate fresh values each run, preventing flaky tests from stale or colliding data. **Never hardcode emails, names, phone numbers, or dates when a macro exists.**\n\n| Macro | Output | Example |\n|-------|--------|---------|\n| \\`$EMAIL()\\` | Unique test email | \\`test-xk9mq2@example-test.com\\` |\n| \\`$FIRST_NAME()\\` | Random first name | \\`Jordan\\` |\n| \\`$LAST_NAME()\\` | Random last name | \\`Chen\\` |\n| \\`$PHONE()\\` | US phone (555 prefix) | \\`+1-555-382-7491\\` |\n| \\`$UUID()\\` | Random UUID v4 | \\`a1b2c3d4-...\\` |\n| \\`$RANDOM_INT(min, max)\\` | Random integer | \\`$RANDOM_INT(100,999)\\` → \\`427\\` |\n| \\`$RANDOM_STRING(length)\\` | Alphanumeric string | \\`$RANDOM_STRING(8)\\` → \\`xK9mQ3bR\\` |\n| \\`$TODAY()\\` | Current date (YYYY-MM-DD) | \\`2026-04-06\\` |\n| \\`$DATE(days)\\` | Date offset from today | \\`$DATE(-7)\\` → last week |\n| \\`$NOW()\\` | ISO 8601 timestamp | \\`2026-04-06T14:30:00.000Z\\` |\n| \\`$NOW(+5m, 'fmt')\\` | Shifted time (+5m/-2h/30s/1d), optional UTC format (YYYY MM DD HH mm ss, unpadded H m) | \\`$NOW(+5m, 'm H * * *')\\` → \\`35 14 * * *\\` |\n| \\`$TIMESTAMP()\\` | Unix milliseconds | \\`1771520400000\\` |\n| \\`$SEQUENCE(\"name\")\\` | Auto-incrementing per run | \\`1\\`, \\`2\\`, \\`3\\`... |\n\nMacros combine inline: \\`\"QA Test $FIRST_NAME() $LAST_NAME()\"\\`, \\`\"order-$RANDOM_STRING(6)\"\\`\n\n**Prefix test data with \"QA Test\"** for identifiability.\n\n### Step 3: Create the Workflow\n\nUse \\`cofactor_workflow_sync\\` for existing workflows or construct the full workflow JSON and create via the API. Then verify with \\`cofactor_workflow_get\\`.\n\n### Example Workflow JSON\n\n\\`\\`\\`json\n{\n  \"name\": \"Verify user can create an invoice\",\n  \"description\": \"Tests the invoice creation flow end-to-end\",\n  \"nodes\": [\n    {\n      \"nodeType\": \"login\",\n      \"configJson\": {\n        \"credentialId\": \"4f6db838-16be-49e8-8887-8d0be1c83a87\",\n        \"credentialName\": \"QA User\"\n      }\n    },\n    {\n      \"nodeType\": \"navigate\",\n      \"configJson\": { \"pageUrl\": \"/invoices\", \"pageTitle\": \"Invoices\" }\n    },\n    {\n      \"nodeType\": \"action\",\n      \"configJson\": {\n        \"customActionTitle\": \"Create a new invoice\",\n        \"actionDescription\": \"Fill out the new invoice form and save\",\n        \"playbookSteps\": [\n          { \"order\": 1, \"action\": \"click\", \"target\": \"New Invoice button\" },\n          { \"order\": 2, \"action\": \"fill\", \"target\": \"Client name field\", \"params\": { \"value\": \"QA Test $FIRST_NAME()\" } },\n          { \"order\": 3, \"action\": \"fill\", \"target\": \"Amount field\", \"params\": { \"value\": \"$RANDOM_INT(100,999)\" } },\n          { \"order\": 4, \"action\": \"click\", \"target\": \"Save button\" }\n        ],\n        \"inlineAssertions\": [\n          {\n            \"condition\": \"Success message 'Invoice created' is visible and the new invoice appears in the list\",\n            \"severity\": \"fail\"\n          }\n        ]\n      }\n    }\n  ]\n}\n\\`\\`\\`\n\n## Managing Workflows\n\n- **cofactor_workflow_list** — Browse existing tests. Filter by \\`status\\` (draft = editable, approved = human-verified), \\`flowType\\` (standard/setup/seed/teardown), or \\`search\\` by name. Suite inclusion is derived eligibility (approved AND passed at least once), with a separate pause/unpause toggle; reliability is tracked separately by the workflow's \\`health\\`.\n- **cofactor_workflow_get** — Inspect a test's full definition: nodes, edges, playbook steps, assertions.\n- **cofactor_workflow_patch** — Update name, description, preflight, cleanup, status, or flow type. Only provided fields change. Description, preflight and cleanup are read by people: no raw IDs (name the seed, teardown or record), and write preflight and cleanup as short markdown bullet lists.\n- **cofactor_workflow_run** — Trigger execution. Returns a \\`runId\\` — use it to track progress.\n- **cofactor_workflow_sync** — Atomically replace all nodes and edges. Automatically snapshots current state first so changes are reversible. Read the current DAG with \\`cofactor_workflow_get\\` before syncing.\n\n## Monitoring Runs & Debugging Failures\n\nAfter triggering a workflow run, monitor and debug with:\n\n- **cofactor_workflow_runs_list** — Recent runs for a workflow with status and duration.\n- **cofactor_workflow_runs_get** — Detailed run view: step-by-step status, duration, errors. Also works for in-progress runs to check status.\n- **cofactor_workflow_runs_diagnostics** — AI-generated failure analysis. Returns root cause and recommendations. Falls back to raw console logs and network requests if no AI analysis is available.\n\n### Regression Suite\n\n- **cofactor_test_suite_run** — Trigger a regression suite execution. Returns suiteId for tracking. Use cofactor_test_suite_list or cofactor_test_suite_get to check results.\n- **cofactor_test_suite_list** — Recent regression suite executions with pass/fail counts.\n- **cofactor_test_suite_get** — Individual test results within a suite execution.\n- **cofactor_test_suite_diagnostics** — Failure diagnostics for a specific test in a suite run.\n- **cofactor_test_suite_steps** — Step-by-step breakdown of a test run within a suite.\n\n## Investigating Issues\n\nIssues are bugs discovered by Cofactor during test runs.\n\n- **cofactor_issues_list** — Search and filter issues by severity (\\`low\\`/\\`medium\\`/\\`high\\`), status (\\`open\\`/\\`closed\\`/\\`not_a_bug\\`), or property. Supports full-text search.\n- **cofactor_issues_get** — Full issue detail including console errors and network failures from the latest occurrence, plus every evidence item on recent occurrences with signed screenshot/clip links (the first screenshots come back inline as images), and the issue's comments. Use this to understand what went wrong.\n- **cofactor_issues_comment** — Add a comment to an issue (\\`get\\` returns the comments).\n- **cofactor_issues_update** — Edit an occurrence's summary, repro steps, or evidence items (add, replace, or remove by the numbers cofactor_issues_get shows; screenshots as base64 image data).\n\n## Product Map (what the app does, and what covers it)\n\nAreas → capabilities, with flows linked to capabilities so coverage is showable. Available to every organization.\n\nCapabilities have **natural codes** — \\`CAP-CMM-001\\`, areas \\`ARE-CMM\\` — which are stable and safe to carry between a ticket, a spec, and a tool call. Prefer them over prefixed ids when writing anything a human will read.\n\n- **cofactor_product_map_get** — The whole map for an application. Call this before proposing a new capability so you reuse an existing one by code instead of creating a near-duplicate.\n- **cofactor_product_map_coverage** — Linked/covered rollup. Always report the unmapped-flow count beside any coverage figure; coverage is always coverage of the *known* map.\n- **cofactor_product_map_resolve_code** — Resolve a code, including one retired by a move. Use this before reporting that a code \"does not exist\" — it may just have been renumbered.\n- **cofactor_product_map_get_capability** — One capability in full: body, linked flows by name, previous codes.\n- **cofactor_product_map_link_flows** / **cofactor_product_map_unlink_flows** — Record that a flow covers a capability. Additive/subtractive; other links are preserved.\n\n## API Sequences (API-only workflows)\n\nFor APIs that need deterministic, browser-free smoke testing — composed of ordered HTTP calls that chain outputs into inputs.\n\n- **Create** with the same command as any workflow, with \\`--api-only\\`:\n  \\`cofactor workflow create --api-only --name \"<n>\" --sequence-from-file seq.json\\`\n  Returns \\`{ workflowId, apiSequenceId, nodeId }\\`. No \\`--property\\` — api-sequences are org-scoped.\n- **Inspect runs** with the same command as any runs, with \\`--side api\\` (or \\`--side all\\` for both):\n  \\`cofactor workflow runs list <wf> --side api\\`\n  \\`cofactor workflow runs get <wf> <runId>\\`\n- **Edit the sequence itself** via \\`cofactor workflow api-sequence <verb>\\`:\n  - \\`get <wf>\\` — dump config + steps\n  - \\`update <wf> --from-file seq.json\\` — replace config\n  - \\`execute <wf>\\` — run it\n  - \\`generate <wf> [--prompt \"...\"]\\` — AI-draft a config, then refine with \\`update\\`\n- **Discover endpoints** before composing steps:\n  \\`cofactor api-catalog sources list\\`\n  \\`cofactor api-catalog endpoints list --search <q>\\`\n  \\`cofactor api-catalog endpoints create --from-file ep.json\\` (add a one-off)\n- **Read the reference first** for the config/step shape and template syntax:\n  \\`cofactor workflow guide api-sequences\\`\n\nTemplates in step fields use \\`{{stepId.response.path}}\\` to reference prior-step outputs and \\`$MACRO()\\` for dynamic test data (same macros as browser workflows).\n\n## Common Workflows\n\n### \"Let's explore the app\"\n1. \\`cofactor_login\\` (env: prod) → switch to the right org\n2. \\`cofactor_credential_list\\` → find the right credential\n3. \\`browser_start\\` → launch browser\n4. Load credential and navigate to the app\n5. Snapshot, interact, explore\n\n### \"Write a test for this feature\"\n1. Explore the feature via browser (above workflow)\n2. \\`cofactor_credential_list\\` → get credentialId\n3. Construct workflow JSON with nodes, edges, playbook steps, macros\n4. Create or sync the workflow\n5. \\`cofactor_workflow_run\\` → execute it\n6. \\`cofactor_workflow_runs_get\\` → verify it passes\n\n### \"Why did this test fail?\"\n1. \\`cofactor_workflow_runs_list\\` → find the failed run\n2. \\`cofactor_workflow_runs_get\\` → see which step failed\n3. \\`cofactor_workflow_runs_diagnostics\\` → AI analysis of the failure\n4. If needed, open a browser session to reproduce and investigate\n\n### \"What issues have been found?\"\n1. \\`cofactor_issues_list\\` → browse open issues\n2. \\`cofactor_issues_get\\` → deep dive with console/network errors\n`.trim();\n","/**\n * MCP tool that returns the workflow-authoring guide. It lives in a tool rather\n * than the server instructions because clients cap instructions at 4,096 chars.\n *\n * @module\n */\n\nimport { WORKFLOW_AUTHORING_GUIDE } from './instructions';\nimport { toolText } from './tool-helpers';\n\nconst GUIDE_TOOL = 'cofactor_workflow_authoring_guide';\n\nexport function getGuideToolDefinitions() {\n  return [\n    {\n      name: GUIDE_TOOL,\n      description:\n        'How to author a Cofactor test (workflow): node types, playbook steps, macros, example workflow JSON, running and debugging. Read it before creating or syncing a workflow.',\n      inputSchema: { type: 'object', properties: {} },\n    },\n  ];\n}\n\nexport async function handleGuideTool(tool: string) {\n  return tool === GUIDE_TOOL ? toolText(WORKFLOW_AUTHORING_GUIDE) : null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,8BAA8B;;;ACTvD,SAAS,gBAAwB;AACtC,SAAO,aAAa,gBAAgB,KAAK;AAC3C;;;ACCO,SAAS,SAAS,MAAc;AACrC,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,KAAK,CAAC,EAAE;AACtD;AAEO,SAAS,SAAS,MAAe;AACtC,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,CAAC,EAAE;AACrF;AAKO,SAAS,iBAAiB,QAAoB;AACnD,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,OAAO,CAAC,EAAE;AAAA,EAC9D;AAGA,QAAM,UAAqG,CAAC;AAE5G,MAAI,OAAO,MAAM;AACf,YAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC;AAAA,EAClD;AAEA,aAAW,OAAO,OAAO,UAAU,CAAC,GAAG;AACrC,YAAQ,KAAK,EAAE,MAAM,SAAS,MAAM,IAAI,MAAM,UAAU,IAAI,SAAS,CAAC;AAAA,EACxE;AAEA,SAAO,EAAE,QAAQ;AACnB;;;ACGA,IAAM,kBAAkB,oBAAI,IAA4B;AAExD,SAASA,eAAc,OAAwB;AAC7C,SAAO,SAAS,aAAa,gBAAgB,KAAK;AACpD;AAEA,eAAe,eAAgC;AAC7C,QAAM,QAAQ,aAAa,kBAAkB,KAAM,MAAM,gBAAgB;AACzE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO;AACT;AAEO,SAAS,4BAA4B;AAC1C,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MACF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,MAAM,CAAC,cAAc,KAAK;AAAA,YAC1B,aACE;AAAA,UACJ;AAAA,UACA,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,kBAAkB;AAAA,YAChB,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,cAAc;AAAA,YACZ,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,SAAS;AAAA,QAC9B;AAAA,QACA,UAAU,CAAC,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,SAAS;AAAA,QAC9B;AAAA,QACA,UAAU,CAAC,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY,CAAC;AAAA,MACf;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MACF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,WAAW;AAAA,YACT,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,cAAc;AAAA,YACZ,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,UAAU,CAAC,aAAa,cAAc;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,kBAAkB,MAAc,MAA+B;AACnF,QAAM,QAAQ,MAAM,aAAa;AAEjC,MAAI,SAAS,uBAAuB;AAClC,UAAM,QAAQ;AACd,UAAM,SAASA,eAAc;AAC7B,UAAM,OAAO,MAAM,QAAQ;AAE3B,UAAM,kBAAkB,MAAM,MAAM,GAAG,MAAM,2BAA2B;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,MAChC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,aAAa;AAAA,QACb,cAAc,MAAM,gBAAgB;AAAA,MACtC,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,gBAAgB,IAAI;AACvB,YAAM,OAAO,MAAM,gBAAgB,KAAK;AACxC,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,6BAA6B,IAAI,GAAG,CAAC;AAAA,IAC3E;AAEA,UAAM,UAAW,MAAM,gBAAgB,KAAK;AAO5C,UAAM,OAAO,IAAI,iBAAiB;AAAA,MAChC;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,aAAa;AAAA,MACb,QAAQ,MAAM;AAAA,MACd,UAAU,MAAM,YAAY;AAAA,MAC5B,kBAAkB,MAAM;AAAA,MACxB,OAAO,CAAC,OAAO,YAAY;AACzB,YAAI,UAAU,SAAS;AACrB,kBAAQ,MAAM,kBAAkB,OAAO,EAAE;AAAA,QAC3C;AAAA,MACF;AAAA,IACF,CAAC;AAED,SAAK,MAAM,EAAE,MAAM,CAAC,QAAQ;AAC1B,cAAQ,MAAM,kCAAkC,GAAG;AACnD,sBAAgB,OAAO,QAAQ,SAAS;AAAA,IAC1C,CAAC;AAED,oBAAgB,IAAI,QAAQ,WAAW;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,IACF,CAAC;AAED,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,wBAAwB;AACnC,UAAM,QAAQ;AACd,UAAM,UAAU,gBAAgB,IAAI,MAAM,SAAS;AAEnD,QAAI,CAAC,SAAS;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,qBAAqB,WAAW,MAAM,UAAU,CAAC;AAAA,IACvF;AAEA,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,WAAW,QAAQ;AAAA,MACnB,MAAM,QAAQ;AAAA,MACd,WAAW,IAAI,KAAK,QAAQ,SAAS,EAAE,YAAY;AAAA,MACnD,UAAU,KAAK,IAAI,IAAI,QAAQ;AAAA,IACjC,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,sBAAsB;AACjC,UAAM,QAAQ;AACd,UAAM,UAAU,gBAAgB,IAAI,MAAM,SAAS;AAEnD,QAAI,CAAC,SAAS;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,qBAAqB,WAAW,MAAM,UAAU,CAAC;AAAA,IACvF;AAEA,UAAM,QAAQ,KAAK,KAAK;AACxB,oBAAgB,OAAO,MAAM,SAAS;AAEtC,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,WAAW,MAAM;AAAA,MACjB,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,sBAAsB;AACjC,UAAM,WAAW,MAAM,KAAK,gBAAgB,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO;AAAA,MAChE,WAAW,EAAE;AAAA,MACb,MAAM,EAAE;AAAA,MACR,WAAW,IAAI,KAAK,EAAE,SAAS,EAAE,YAAY;AAAA,MAC7C,UAAU,KAAK,IAAI,IAAI,EAAE;AAAA,IAC3B,EAAE;AAEF,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,OAAO,SAAS;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,qBAAqB;AAChC,UAAM,QAAQ;AAKd,UAAM,SAASA,eAAc;AAE7B,UAAM,UAAU,gBAAgB,IAAI,MAAM,SAAS;AACnD,QAAI,CAAC,SAAS;AACZ,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,WAAW,MAAM;AAAA,MACnB,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,MAAM,MAAM,GAAG,MAAM,2BAA2B,MAAM,SAAS,QAAQ;AAAA,MACtF,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,MAChC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,cAAc,MAAM;AAAA,QACpB,UAAU,MAAM,YAAY;AAAA,MAC9B,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,wBAAwB,IAAI,GAAG,CAAC;AAAA,IACtE;AAEA,UAAM,SAAU,MAAM,SAAS,KAAK;AAEpC,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,OAAO,OAAO;AAAA,MACd,WAAW,OAAO;AAAA,MAClB,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,SAAO;AACT;;;ACzRA,IAAI,kBAAiC;AAK9B,SAAS,+BAA+B;AAC7C,SAAO,uCAAuC;AAChD;AAMA,eAAsB,kBAAkB,MAAc,MAA+B;AAEnF,MAAI,SAAS,iBAAiB;AAC5B,QAAI;AACF,YAAM,SAAS,MAAM,cAAc;AAAA,QACjC,UAAW,KAAK,YAAwB;AAAA,QACxC,kBAAkB,KAAK;AAAA,MACzB,CAAC;AAED,UAAI,CAAC,OAAO,IAAI;AACd,eAAO,SAAS,EAAE,IAAI,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,MACpD;AAEA,wBAAkB,OAAO,KAAM;AAC/B,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,WAAW;AAAA,QACX,MAAM;AAAA,MACR,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,IACxF;AAAA,EACF;AAEA,MAAI,SAAS,gBAAgB;AAC3B,QAAI;AACF,UAAI,iBAAiB;AACnB,cAAM,cAAc,eAAe;AACnC,0BAAkB;AAAA,MACpB,OAAO;AAEL,cAAM,kBAAkB;AAAA,MAC1B;AACA,aAAO,SAAS,EAAE,IAAI,MAAM,MAAM,kCAAkC,CAAC;AAAA,IACvE,SAAS,KAAK;AACZ,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,IACxF;AAAA,EACF;AAGA,MAAI,CAAC,KAAK,WAAW,UAAU,EAAG,QAAO;AAEzC,MAAI;AAEF,QAAI,YAAY;AAChB,QAAI,CAAC,WAAW;AACd,UAAI;AACF,cAAM,SAAS,MAAM,qBAAqB;AAC1C,oBAAY,OAAO;AACnB,0BAAkB;AAAA,MACpB,QAAQ;AACN,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAGA,UAAM,WAAW,KAAK,QAAQ,aAAa,EAAE;AAC7C,UAAM,SAAS,MAAM,SAAS,WAAW,UAAU,IAAI;AAEvD,QAAI,CAAC,OAAO,IAAI;AAEd,UAAI,OAAO,OAAO,SAAS,WAAW,GAAG;AACvC,0BAAkB;AAAA,MACpB;AAIA,UAAI,OAAO,cAAc,mBAAmB;AAC1C,eAAO;AAAA,UACL,OAAO,SAAS;AAAA,QAClB;AAAA,MACF;AACA,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,OAAO,OAAO,MAAM,KAAK,CAAC;AAAA,IAChE;AAGA,UAAM,aAAyB,OAAO,QAAQ,SAC1C,EAAE,MAAM,OAAO,QAAQ,IAAI,QAAQ,OAAO,OAAO,IAChD,OAAO,QAAQ;AAEpB,WAAO,iBAAiB,UAAU;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,SAAS,EAAE,IAAI,OAAO,OAAO,SAAS,MAAM,KAAK,CAAC;AAAA,EAC3D;AACF;;;AC/GO,SAAS,0BAA0B;AACxC,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MAGF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY;AAAA,UACV,KAAK;AAAA,YACH,MAAM;AAAA,YACN,MAAM,CAAC,QAAQ,OAAO,OAAO;AAAA,YAC7B,aAAa;AAAA,UACf;AAAA,UACA,KAAK;AAAA,YACH,MAAM;AAAA,YACN,aACE;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,gBACpB,MACA,MACA;AACA,MAAI,SAAS,iBAAkB,QAAO;AAEtC,MAAI;AACF,UAAM,MAAM,KAAK;AACjB,UAAM,UAAU,KAAK;AACrB,UAAM,UAAU,MAAM,SAAS,GAAG,IAAI;AAEtC,QAAI,OAAO,CAAC,SAAS;AACnB,aAAO,SAAS,EAAE,IAAI,OAAO,OAAO,wBAAwB,GAAG,4BAA4B,CAAC;AAAA,IAC9F;AAEA,UAAM,SAAS,SAAS,OAAO,cAAc;AAC7C,UAAM,SAAS,SAAS,OAAO,cAAc,MAAM;AAGnD,UAAM,WAAW,MAAM,MAAM,GAAG,MAAM,oBAAoB;AAAA,MACxD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AAED,UAAM,YAAa,MAAM,SAAS,KAAK;AACvC,QAAI,CAAC,SAAS,MAAM,CAAC,UAAU,MAAM,CAAC,UAAU,cAAc,CAAC,UAAU,UAAU;AACjF,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO,uBAAuB,UAAU,SAAS,SAAS,UAAU;AAAA,MACtE,CAAC;AAAA,IACH;AAGA,QAAI,UAAU,iBAAiB;AAE7B;AAAA,QAAQ,UAAU;AAAA,QAAiB,MACjC,QAAQ,OAAO,MAAM,kCAAkC,UAAU,eAAe;AAAA,CAAc;AAAA,MAChG;AAAA,IACF;AAGA,UAAM,cAAc,UAAU,mBAAmB,KAAK;AACtD,UAAM,YAAY,UAAU,YAAY,IAAI,KAAK,UAAU,SAAS,EAAE,QAAQ,IAAI;AAElF,QAAI;AACJ,QAAI;AAEJ,WAAO,MAAM;AACX,UAAI,aAAa,KAAK,IAAI,IAAI,WAAW;AACvC,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO;AAAA,UACP,UAAU,UAAU;AAAA,UACpB,iBAAiB,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AAEA,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC;AAE9D,YAAM,UAAU,MAAM,MAAM,GAAG,MAAM,mBAAmB;AAAA,QACtD,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,YAAY,UAAU,WAAW,CAAC;AAAA,MAC3D,CAAC;AAED,YAAM,WAAY,MAAM,QAAQ,KAAK;AACrC,UAAI,CAAC,QAAQ,MAAM,CAAC,SAAS,IAAI;AAC/B,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO,sBAAsB,SAAS,SAAS,QAAQ,UAAU;AAAA,QACnE,CAAC;AAAA,MACH;AAEA,UAAI,SAAS,WAAW,cAAc,SAAS,aAAa;AAC1D,gBAAQ,SAAS;AACjB,uBAAe,SAAS;AACxB;AAAA,MACF;AAEA,UAAI,SAAS,WAAW,YAAY;AAClC,eAAO,SAAS,EAAE,IAAI,OAAO,OAAO,0BAA0B,CAAC;AAAA,MACjE;AAEA,UAAI,SAAS,WAAW,WAAW;AACjC,eAAO,SAAS,EAAE,IAAI,OAAO,OAAO,mCAAmC,CAAC;AAAA,MAC1E;AAAA,IACF;AAGA,UAAM,WAAW,MAAM,UAAU,QAAQ,KAAK;AAC9C,UAAM,OAAO,UAAU,iBAAiB,CAAC;AAEzC,QAAI,aAAa;AACjB,QAAI,aAAa;AACjB,QAAI;AAEJ,QAAI,KAAK,UAAU,GAAG;AACpB,qBAAe,KAAK,CAAC,GAAG;AAAA,IAC1B,WAAW,SAAS;AAElB,YAAM,cAAc,KAAK;AAAA,QACvB,CAAC,MAAM,EAAE,KAAK,YAAY,MAAM,QAAQ,YAAY,KAAK,EAAE,OAAO;AAAA,MACpE;AACA,UAAI,CAAC,aAAa;AAEhB,cAAMC,eAAc,MAAM,aAAa,GAAG,IAAI;AAC9C,cAAM,SAAS,EAAE,OAAO,YAAY,QAAQ,OAAO,YAAY,SAAS,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY,GAAG,KAAK,GAAGA,YAAW;AAEpI,eAAO,SAAS;AAAA,UACd,IAAI;AAAA,UACJ,OAAO,iBAAiB,OAAO;AAAA,UAC/B,UAAU;AAAA,UACV,YAAY,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY,GAAG;AAAA,UACrD,eAAe,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE;AAAA,QAC3E,CAAC;AAAA,MACH;AAEA,UAAI,YAAY,OAAO,cAAc;AACnC,cAAM,YAAY,MAAM,UAAU,QAAQ,OAAO,YAAY,EAAE;AAC/D,YAAI,CAAC,UAAU,MAAM,CAAC,UAAU,aAAa;AAC3C,iBAAO,SAAS;AAAA,YACd,IAAI;AAAA,YACJ,OAAO,kCAAkC,UAAU,SAAS,eAAe;AAAA,UAC7E,CAAC;AAAA,QACH;AACA,qBAAa,UAAU;AACvB,qBAAa,UAAU;AACvB,uBAAe,UAAU;AAAA,MAC3B,OAAO;AACL,uBAAe,YAAY;AAAA,MAC7B;AAAA,IACF,OAAO;AAEL,YAAM,aAAa,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY;AACzD,qBAAe,YAAY;AAAA,IAC7B;AAGA,UAAM,cAAc,MAAM,aAAa,GAAG,IAAI;AAC9C,UAAM,SAAS,EAAE,OAAO,YAAY,QAAQ,OAAO,YAAY,SAAS,aAAa,GAAG,WAAW;AAEnG,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,SAAS;AAAA,MACT,OAAO;AAAA,MACP,GAAI,KAAK,SAAS,IACd,EAAE,eAAe,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE,EAAE,IAC7E,CAAC;AAAA,IACP,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,EACxF;AACF;;;AC3LA,OAAO,QAAQ;AACf,SAAS,iBAAiB;AAC1B,OAAOC,cAAa;AAOpB,SAAS,uBAAuC;AAC9C,MAAI;AACF,UAAM,UAAU,GAAG,aAAaC,SAAQ,KAAK,CAAC,CAAC,EAAE,QAAQ,OAAO,GAAG;AACnE,QAAI,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,OAAO,EAAG,QAAO;AACnE,QAAI,QAAQ,SAAS,QAAQ,KAAK,QAAQ,SAAS,QAAQ,EAAG,QAAO;AAAA,EACvE,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,IAAM,mBAAqD;AAAA,EACzD,KAAK,CAAC,OAAO,OAAO,MAAM,GAAG,WAAW,SAAS;AAAA,EACjD,MAAM,CAAC,QAAQ,OAAO,MAAM,GAAG,WAAW,SAAS;AAAA,EACnD,KAAK,CAAC,OAAO,WAAW,MAAM,GAAG,WAAW,SAAS;AACvD;AAEO,SAAS,4BAA4B;AAC1C,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MAEF,aAAa;AAAA,QACX,MAAM;AAAA,QACN,YAAY,CAAC;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,kBACpB,MACA,OACA;AACA,MAAI,SAAS,mBAAoB,QAAO;AAExC,MAAI;AACF,UAAM,KAAK,qBAAqB;AAChC,UAAM,MAAM,iBAAiB,EAAE;AAE/B,UAAM,SAAS,UAAU,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;AAAA,MAC7C,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,KAAKA,SAAQ,IAAI;AAAA,MACjB,SAAS;AAAA,MACT,OAAOA,SAAQ,aAAa;AAAA,MAC5B,aAAa;AAAA,IACf,CAAC;AAED,QAAI,OAAO,OAAO;AAChB,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO,iBAAiB,EAAE,KAAK,OAAO,MAAM,OAAO;AAAA,MACrD,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,KAAK,KAAK;AACnD,UAAM,SAAS,OAAO,QAAQ,SAAS,EAAE,KAAK,KAAK;AAEnD,QAAI,OAAO,WAAW,GAAG;AACvB,aAAO,SAAS;AAAA,QACd,IAAI;AAAA,QACJ,OAAO,6BAA6B,OAAO,MAAM;AAAA,QACjD,QAAQ,UAAU;AAAA,MACpB,CAAC;AAAA,IACH;AAEA,UAAM,iBAAiB;AAEvB,WAAO,SAAS;AAAA,MACd,IAAI;AAAA,MACJ,SAAS,yBAAyB,WAAW;AAAA,MAC7C,gBAAgB;AAAA,MAChB,QAAQ,UAAU;AAAA,IACpB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,SAAS,EAAE,IAAI,OAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,EACxF;AACF;;;ACnFA,IAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQb,IAAMC,6BAA4B,4BAAsB;AAExD,IAAM,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwNtC,KAAK;;;ACtOP,IAAM,aAAa;AAEZ,SAAS,0BAA0B;AACxC,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,aACE;AAAA,MACF,aAAa,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,IAChD;AAAA,EACF;AACF;AAEA,eAAsB,gBAAgB,MAAc;AAClD,SAAO,SAAS,aAAa,SAAS,wBAAwB,IAAI;AACpE;;;AREA,eAAe,aAAa;AAC1B,QAAM,WAAW,aAAa,kBAAkB,KAAM,MAAM,gBAAgB;AAC5E,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,EAAE,QAAQ,cAAc,GAAG,SAAS;AAC7C;AAEA,eAAsB,OAAO,MAAgB;AAC3C,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AAClD,YAAQ;AAAA,MACN;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AACA;AAAA,EACF;AACA,QAAM,WAAW,cAAc,YAAY;AAE3C,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,YAAY,SAAS,QAAQ;AAAA,IACrC;AAAA,MACE,cAAc,EAAE,OAAO,CAAC,EAAE;AAAA,MAC1B,cAAcC;AAAA,IAChB;AAAA,EACF;AAEA,SAAO,kBAAkB,wBAAwB,aAAa;AAAA,IAC5D,OAAO;AAAA,MACL,GAAG,wBAAwB;AAAA,MAC3B,GAAG,0BAA0B;AAAA,MAC7B,GAAG,wBAAwB;AAAA,MAC3B,GAAG,0BAA0B;AAAA,MAC7B,GAAG,6BAA6B;AAAA,MAChC,GAAG,SAAS,KAAK;AAAA,IACnB;AAAA,EACF,EAAE;AAEF,SAAO,kBAAkB,uBAAuB,OAAO,QAAQ;AAC7D,UAAM,OAAO,IAAI,OAAO;AACxB,UAAM,OAAQ,IAAI,OAAO,aAAa,CAAC;AAGvC,UAAM,cAAc,MAAM,gBAAgB,MAAM,IAAI;AACpD,QAAI,YAAa,QAAO;AAExB,UAAM,gBAAgB,MAAM,kBAAkB,MAAM,IAAI;AACxD,QAAI,cAAe,QAAO;AAE1B,UAAM,cAAc,MAAM,gBAAgB,IAAI;AAC9C,QAAI,YAAa,QAAO;AAExB,UAAM,gBAAgB,MAAM,kBAAkB,MAAM,IAAI;AACxD,QAAI,cAAe,QAAO;AAE1B,UAAM,gBAAgB,MAAM,kBAAkB,MAAM,IAAI;AACxD,QAAI,cAAe,QAAO;AAG1B,QAAI;AACF,YAAM,MAAM,MAAM,WAAW;AAC7B,aAAO,MAAM,SAAS,KAAK,MAAM,MAAM,GAAG;AAAA,IAC5C,SAAS,KAAK;AACZ,aAAO,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAClE;AAAA,EACF,CAAC;AAED,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAC9B,SAAO,IAAI,QAAc,MAAM,MAAS;AAC1C;","names":["resolveApiUrl","profileName","process","process","COFACTOR_MCP_INSTRUCTIONS","COFACTOR_MCP_INSTRUCTIONS"]}

package/dist/{metrics-SSIP5CEB.js → metrics-KBTQ3KGZ.js}

@@ -2,17 +2,17 @@ import { createRequire as __cr } from "module"; import { fileURLToPath as __fup
 import {
   apiRequest,
   fetchList
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/metrics.ts
@@ -371,4 +371,4 @@ async function runMetrics(argv) {
 export {
   runMetrics
 };
-//# sourceMappingURL=metrics-SSIP5CEB.js.map
+//# sourceMappingURL=metrics-KBTQ3KGZ.js.map

package/dist/{monitor-ESZYHXT2.js → monitor-UGWY43IU.js}

@@ -2,16 +2,16 @@ import { createRequire as __cr } from "module"; import { fileURLToPath as __fup
 import {
   apiRequest,
   getApplicationIdArg
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/monitor.ts
@@ -119,4 +119,4 @@ async function runMonitor(argv) {
 export {
   runMonitor
 };
-//# sourceMappingURL=monitor-ESZYHXT2.js.map
+//# sourceMappingURL=monitor-UGWY43IU.js.map