@skyramp/mcp 0.4.1 → 0.4.2-rc.1

package/build/utils/versions.d.ts

@@ -1,4 +1,4 @@
-export declare const SKYRAMP_IMAGE_VERSION = "v1.3.44";
-export declare const EXECUTOR_DOCKER_IMAGE = "skyramp/executor:v1.3.44";
-export declare const WORKER_DOCKER_IMAGE = "skyramp/worker:v1.3.44";
+export declare const SKYRAMP_IMAGE_VERSION = "v1.3.46";
+export declare const EXECUTOR_DOCKER_IMAGE = "skyramp/executor:v1.3.46";
+export declare const WORKER_DOCKER_IMAGE = "skyramp/worker:v1.3.46";
 export declare const WORKER_CONTROL_PORT = 35142;

package/build/utils/versions.js

@@ -1,4 +1,4 @@
-export const SKYRAMP_IMAGE_VERSION = "v1.3.44";
+export const SKYRAMP_IMAGE_VERSION = "v1.3.46";
 export const EXECUTOR_DOCKER_IMAGE = `skyramp/executor:${SKYRAMP_IMAGE_VERSION}`;
 export const WORKER_DOCKER_IMAGE = `skyramp/worker:${SKYRAMP_IMAGE_VERSION}`;
 // Control port the Skyramp worker listens on (SDK `CONTAINER_PORT`).

package/build/utils/workspaceAuth.js

@@ -2,7 +2,7 @@ import * as fs from "fs";
 import path from "path";
 import yaml from "js-yaml";
 import { WorkspaceConfigManager } from "../workspace/workspace.js";
-import { normalizeBaseMap, normalizeOverrides } from "../workspace/queryParamResolution.js";
+import { normalizeBaseMap, normalizeOverrides, } from "../workspace/queryParamResolution.js";
 import { logger } from "./logger.js";
 import { getTestsRepoDir } from "./AnalysisStateManager.js";
 /**
@@ -21,7 +21,7 @@ import { getTestsRepoDir } from "./AnalysisStateManager.js";
  */
 export async function readWorkspaceConfigRaw(workspacePath) {
     const wsMgr = new WorkspaceConfigManager(workspacePath);
-    if (!await wsMgr.exists())
+    if (!(await wsMgr.exists()))
         return null;
     try {
         return await wsMgr.read();
@@ -80,11 +80,14 @@ function servicesForTestPath(services, repositoryPath, absTestPath, testRepoPath
     let matches = services.filter((s) => {
         // The strict schema rejects a non-string testDirectory, but readWorkspaceConfigRaw
         // falls back to a raw YAML parse and hands one straight through to path.resolve.
-        if (typeof s?.testDirectory !== "string" || !s.testDirectory || !s.api?.baseUrl)
+        if (typeof s?.testDirectory !== "string" ||
+            !s.testDirectory ||
+            !s.api?.baseUrl)
             return false;
         return testDirRoots.some((root) => {
             const absTestDirectory = path.resolve(root, s.testDirectory);
-            return absTestPath.startsWith(absTestDirectory + path.sep) || absTestPath === absTestDirectory;
+            return (absTestPath.startsWith(absTestDirectory + path.sep) ||
+                absTestPath === absTestDirectory);
         });
     });
     if (matches.length > 1) {
@@ -95,7 +98,11 @@ function servicesForTestPath(services, repositoryPath, absTestPath, testRepoPath
     return matches;
 }
 export async function getWorkspaceBaseUrl(repositoryPath, testFile, language, testRepoPath) {
-    const noMatch = { baseUrl: undefined, dockerNetwork: undefined, candidates: [] };
+    const noMatch = {
+        baseUrl: undefined,
+        dockerNetwork: undefined,
+        candidates: [],
+    };
     if (!testFile)
         return noMatch;
     try {
@@ -195,32 +202,75 @@ export const KNOWN_AUTH_HEADERS = new Set([
  */
 export const AUTH_MIDDLEWARE_PATTERNS = [
     // Python — FastAPI / Starlette
-    "HTTPBearer", "OAuth2PasswordBearer", "security.HTTPAuthorizationCredentials",
-    "Depends(get_current_user)", "Depends(oauth2_scheme)", "jwt_required", "login_required",
+    "HTTPBearer",
+    "OAuth2PasswordBearer",
+    "security.HTTPAuthorizationCredentials",
+    "Depends(get_current_user)",
+    "Depends(oauth2_scheme)",
+    "jwt_required",
+    "login_required",
     // Python — Django / DRF
-    "IsAuthenticated", "authentication_classes", "permission_classes", "TokenAuthentication",
-    "SessionAuthentication", "@login_required", "@permission_required",
+    "IsAuthenticated",
+    "authentication_classes",
+    "permission_classes",
+    "TokenAuthentication",
+    "SessionAuthentication",
+    "@login_required",
+    "@permission_required",
     // Node.js — Express / NestJS / general
-    "passport.authenticate", "passport", "jwt.verify", "verifyToken", "authMiddleware",
-    "req.headers.authorization", "@UseGuards", "@UseGuards(AuthGuard)",
-    "EnsureSessionDep", "session middleware",
+    "passport.authenticate",
+    "passport",
+    "jwt.verify",
+    "verifyToken",
+    "authMiddleware",
+    "req.headers.authorization",
+    "@UseGuards",
+    "@UseGuards(AuthGuard)",
+    "EnsureSessionDep",
+    "session middleware",
     // Java / Kotlin — Spring Security
-    "@PreAuthorize", "@Secured", "@RolesAllowed", "JwtAuthenticationFilter",
-    "OncePerRequestFilter", "UsernamePasswordAuthenticationToken", "SecurityConfig",
+    "@PreAuthorize",
+    "@Secured",
+    "@RolesAllowed",
+    "JwtAuthenticationFilter",
+    "OncePerRequestFilter",
+    "UsernamePasswordAuthenticationToken",
+    "SecurityConfig",
     // Go — Gin / Chi / Echo / Fiber / gorilla
-    "ValidateToken", "ParseWithClaims", 'c.GetHeader("Authorization")',
-    "gin.BasicAuth", "echo.JWT", "fiber.Ctx", "r.Use(", "chi.Middleware",
+    "ValidateToken",
+    "ParseWithClaims",
+    'c.GetHeader("Authorization")',
+    "gin.BasicAuth",
+    "echo.JWT",
+    "fiber.Ctx",
+    "r.Use(",
+    "chi.Middleware",
     // Ruby on Rails
-    "before_action :authenticate_user!", "authenticate_or_request_with_http_token",
-    "current_user", "devise",
+    "before_action :authenticate_user!",
+    "authenticate_or_request_with_http_token",
+    "current_user",
+    "devise",
     // PHP — Laravel / Symfony
-    "Auth::user()", "middleware('auth')", "auth:sanctum", "auth:api", "auth()->user()",
-    "#[IsGranted]", "access_control", "security.yaml",
+    "Auth::user()",
+    "middleware('auth')",
+    "auth:sanctum",
+    "auth:api",
+    "auth()->user()",
+    "#[IsGranted]",
+    "access_control",
+    "security.yaml",
     // Rust — Axum / Actix
-    "FromRequestParts", "extract::TypedHeader", "Authorization<Bearer>",
+    "FromRequestParts",
+    "extract::TypedHeader",
+    "Authorization<Bearer>",
     // C# — ASP.NET Core
-    "[Authorize]", "RequireAuthorization()", "AddJwtBearer()", "services.AddAuthentication()",
-    "ClaimsPrincipal", "IAuthorizationService", "AuthorizationPolicy",
+    "[Authorize]",
+    "RequireAuthorization()",
+    "AddJwtBearer()",
+    "services.AddAuthentication()",
+    "ClaimsPrincipal",
+    "IAuthorizationService",
+    "AuthorizationPolicy",
 ];
 /** Rendered as a comma-separated string for use in prompts. */
 export const AUTH_MIDDLEWARE_PATTERNS_STR = AUTH_MIDDLEWARE_PATTERNS.join(", ");
@@ -271,7 +321,7 @@ export function parseWorkspaceAuthType(value) {
         oauth2: WorkspaceAuthType.OAuth,
         oidc: WorkspaceAuthType.OAuth, // OpenID Connect tokens are Bearer
         "api-key": WorkspaceAuthType.ApiKey, // hyphenated variant
-        "api_key": WorkspaceAuthType.ApiKey, // underscore variant
+        api_key: WorkspaceAuthType.ApiKey, // underscore variant
         apitoken: WorkspaceAuthType.ApiKey,
         "x-api-key": WorkspaceAuthType.ApiKey,
         "session-cookie": WorkspaceAuthType.Cookie,
@@ -344,10 +394,14 @@ export function getAuthScheme(authType, explicitScheme) {
     if (explicitScheme !== undefined)
         return explicitScheme;
     switch (authType) {
-        case WorkspaceAuthType.Bearer: return "Bearer";
-        case WorkspaceAuthType.Basic: return "Basic";
-        case WorkspaceAuthType.Token: return "Token"; // Django REST Framework
-        case WorkspaceAuthType.OAuth: return "Bearer"; // OAuth 2.0 access tokens use Bearer
+        case WorkspaceAuthType.Bearer:
+            return "Bearer";
+        case WorkspaceAuthType.Basic:
+            return "Basic";
+        case WorkspaceAuthType.Token:
+            return "Token"; // Django REST Framework
+        case WorkspaceAuthType.OAuth:
+            return "Bearer"; // OAuth 2.0 access tokens use Bearer
         default:
             return undefined;
     }
@@ -358,8 +412,12 @@ export function getAuthScheme(authType, explicitScheme) {
  *  unified file names `api` once per repository (`src/workspace/workspace.ts`). */
 function servicesByName(rawConfig) {
     const byName = new Map();
-    for (const service of Array.isArray(rawConfig?.services) ? rawConfig.services : []) {
-        const name = typeof service?.serviceName === "string" ? service.serviceName.trim() : "";
+    for (const service of Array.isArray(rawConfig?.services)
+        ? rawConfig.services
+        : []) {
+        const name = typeof service?.serviceName === "string"
+            ? service.serviceName.trim()
+            : "";
         if (!name)
             continue;
         const group = byName.get(name);
@@ -437,7 +495,8 @@ export function findWorkspaceAuthDisagreement(primaryConfig, analysedConfig, pri
         const field = primaryAuth.authType !== analysedAuth.authType
             ? "authType"
             : // A header name is not case-sensitive, so two spellings are one header.
-                primaryAuth.authHeader.toLowerCase() !== analysedAuth.authHeader.toLowerCase()
+                primaryAuth.authHeader.toLowerCase() !==
+                    analysedAuth.authHeader.toLowerCase()
                     ? "authHeader"
                     : primaryAuth.authScheme !== analysedAuth.authScheme
                         ? "authScheme"
@@ -506,7 +565,9 @@ function declaresAuth(service) {
  *  for all of baseUrl, schemaPath and auth, because a baseUrl from the UI beside the
  *  API's header would call the wrong host with the right credentials. */
 export function resolveWorkspaceApiService(rawConfig) {
-    const services = Array.isArray(rawConfig?.services) ? rawConfig.services : [];
+    const services = Array.isArray(rawConfig?.services)
+        ? rawConfig.services
+        : [];
     return (services.find((service) => declaresAuth(service)) ??
         services.find((service) => service?.api && typeof service.api === "object") ??
         services[0]);
@@ -535,7 +596,9 @@ export async function getWorkspaceAuthConfig(repositoryPath, testPath) {
     const rawConfig = await readWorkspaceConfigRaw(workspaceRoot);
     if (!rawConfig)
         return {};
-    const services = Array.isArray(rawConfig.services) ? rawConfig.services : [];
+    const services = Array.isArray(rawConfig.services)
+        ? rawConfig.services
+        : [];
     const forTest = testPath
         ? servicesForTestPath(services, workspaceRoot, path.resolve(workspaceRoot, testPath), 
         // The delivery root when the run configures a test repo: the tests go there
@@ -602,7 +665,8 @@ export async function getWorkspaceScopedQueryParams(repositoryPath) {
     try {
         const raw = fs.readFileSync(wsConfigPath, "utf-8");
         const parsed = yaml.load(raw);
-        const declaring = (parsed?.services ?? []).filter((s) => s?.api?.defaultQueryParams !== undefined || s?.api?.queryParamOverrides !== undefined);
+        const declaring = (parsed?.services ?? []).filter((s) => s?.api?.defaultQueryParams !== undefined ||
+            s?.api?.queryParamOverrides !== undefined);
         const svc = declaring[0];
         if (!svc)
             return undefined;
@@ -647,7 +711,10 @@ export function mergeQueryParamsString(existing, defaults) {
             logger.warning("Skipping workspace defaultQueryParams entry with a non-string value", { key });
             continue;
         }
-        if (key.includes(",") || key.includes("=") || value.includes(",") || value.includes("=")) {
+        if (key.includes(",") ||
+            key.includes("=") ||
+            value.includes(",") ||
+            value.includes("=")) {
             logger.warning("Skipping workspace defaultQueryParams entry with invalid characters", { key });
             continue;
         }
@@ -669,7 +736,9 @@ export function mergeQueryParamsJson(existingJson, defaults) {
     if (existingJson) {
         try {
             const candidate = JSON.parse(existingJson);
-            if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) {
+            if (!candidate ||
+                typeof candidate !== "object" ||
+                Array.isArray(candidate)) {
                 return existingJson;
             }
             parsed = candidate;
@@ -713,7 +782,8 @@ export async function resolveAuthFromWorkspace(repoPath, existingAuthHeader, exi
     });
     let authScheme = existingAuthScheme;
     if (isAuthorizationHeaderName(resolvedHeader)) {
-        authScheme = authScheme ?? wsAuth.authScheme ?? getAuthScheme(wsAuth.authType);
+        authScheme =
+            authScheme ?? wsAuth.authScheme ?? getAuthScheme(wsAuth.authType);
     }
     return { authHeader: resolvedHeader, authScheme };
 }

package/build/workspace/queryParamResolution.js

@@ -77,14 +77,19 @@ function isStringMap(v) {
 export function normalizeOverrides(raw) {
     if (!Array.isArray(raw)) {
         if (raw !== undefined) {
-            logger.warning("Ignoring api.queryParamOverrides — expected a list", { got: typeof raw });
+            logger.warning("Ignoring api.queryParamOverrides — expected a list", {
+                got: typeof raw,
+            });
         }
         return [];
     }
     const result = [];
     for (const entry of raw) {
         const e = entry;
-        if (!e || typeof e !== "object" || typeof e.pathPattern !== "string" || e.pathPattern.length === 0) {
+        if (!e ||
+            typeof e !== "object" ||
+            typeof e.pathPattern !== "string" ||
+            e.pathPattern.length === 0) {
             logger.warning("Skipping api.queryParamOverrides entry with a missing or empty pathPattern");
             continue;
         }
@@ -139,7 +144,8 @@ export function resolveQueryParamsForPath(config, pathname) {
     if (matches.length === 0)
         return { ...config.base };
     matches.sort((a, b) => {
-        const specDiff = patternSpecificity(b.override.pathPattern) - patternSpecificity(a.override.pathPattern);
+        const specDiff = patternSpecificity(b.override.pathPattern) -
+            patternSpecificity(a.override.pathPattern);
         if (specDiff !== 0)
             return specDiff;
         // Known limitation (Finding 5, SKYR-4127 final review): at equal literal-
@@ -155,7 +161,8 @@ export function resolveQueryParamsForPath(config, pathname) {
     });
     const [winner, runnerUp] = matches;
     if (runnerUp &&
-        patternSpecificity(winner.override.pathPattern) === patternSpecificity(runnerUp.override.pathPattern) &&
+        patternSpecificity(winner.override.pathPattern) ===
+            patternSpecificity(runnerUp.override.pathPattern) &&
         winner.override.pathPattern.length === runnerUp.override.pathPattern.length) {
         logger.warning("Ambiguous api.queryParamOverrides — two equally specific patterns match this path; using the first", {
             pathname,

package/build/workspace/workspace.js

@@ -16,6 +16,7 @@ import yaml from "js-yaml";
 import { z } from "zod";
 import { SUPPORTED_FRAMEWORKS } from "./frameworks.js";
 import { runtimeEnvironmentInputSchema } from "../types/TestTypes.js";
+import { parseOwnerRepo } from "../utils/repositorySlug.js";
 const execFileAsync = promisify(execFile);
 // ---------------------------------------------------------------------------
 // Constants
@@ -80,10 +81,12 @@ export const serviceSchema = z
          *  through verbatim and is case-sensitive; a near miss such as
          *  `ENV.VAR` is treated as an ordinary literal. */
         queryParamOverrides: z
-            .array(z.object({
+            .array(z
+            .object({
             pathPattern: z.string().min(1),
             values: z.record(z.string()),
-        }).strict())
+        })
+            .strict())
             .optional(),
         baseUrl: z.string().optional(),
         /** SUT serves self-signed TLS (e.g. a kind kube-apiserver) — generated
@@ -261,11 +264,8 @@ async function detectRepoInfo(dirPath, requireGit = true) {
         catch {
             // Git repo exists but no remote configured - this is OK
         }
-        if (repoUrl) {
-            const match = repoUrl.match(/[:/]([^/]+\/[^/]+?)(?:\.git)?$/);
-            if (match)
-                repoName = match[1];
-        }
+        if (repoUrl)
+            repoName = parseOwnerRepo(repoUrl) ?? repoName;
         if (!repoName) {
             repoName = path.basename(cwd);
         }

package/node_modules/playwright/ThirdPartyNotices.txt

@@ -81,12 +81,12 @@ This project incorporates components from the projects listed below. The origina
 -	ansi-styles@5.2.0 (https://github.com/chalk/ansi-styles)
 -	anymatch@3.1.3 (https://github.com/micromatch/anymatch)
 -	bail@2.0.2 (https://github.com/wooorm/bail)
--	baseline-browser-mapping@2.10.43 (https://github.com/web-platform-dx/baseline-browser-mapping)
+-	baseline-browser-mapping@2.11.21 (https://github.com/web-platform-dx/baseline-browser-mapping)
 -	binary-extensions@2.2.0 (https://github.com/sindresorhus/binary-extensions)
 -	braces@3.0.3 (https://github.com/micromatch/braces)
--	browserslist@4.28.6 (https://github.com/browserslist/browserslist)
+-	browserslist@4.28.9 (https://github.com/browserslist/browserslist)
 -	buffer-from@1.1.2 (https://github.com/LinusU/buffer-from)
--	caniuse-lite@1.0.30001805 (https://github.com/browserslist/caniuse-lite)
+-	caniuse-lite@1.0.30001810 (https://github.com/browserslist/caniuse-lite)
 -	chalk@4.1.2 (https://github.com/chalk/chalk)
 -	character-entities@2.0.2 (https://github.com/wooorm/character-entities)
 -	chokidar@3.6.0 (https://github.com/paulmillr/chokidar)
@@ -100,7 +100,7 @@ This project incorporates components from the projects listed below. The origina
 -	decode-named-character-reference@1.2.0 (https://github.com/wooorm/decode-named-character-reference)
 -	dequal@2.0.3 (https://github.com/lukeed/dequal)
 -	devlop@1.1.0 (https://github.com/wooorm/devlop)
--	electron-to-chromium@1.5.389 (https://github.com/Kilian/electron-to-chromium)
+-	electron-to-chromium@1.5.423 (https://github.com/Kilian/electron-to-chromium)
 -	enquirer@2.3.6 (https://github.com/enquirer/enquirer)
 -	escalade@3.2.0 (https://github.com/lukeed/escalade)
 -	escape-string-regexp@2.0.0 (https://github.com/sindresorhus/escape-string-regexp)
@@ -152,7 +152,7 @@ This project incorporates components from the projects listed below. The origina
 -	micromark@4.0.2 (https://github.com/micromark/micromark/tree/main/packages/micromark)
 -	micromatch@4.0.8 (https://github.com/micromatch/micromatch)
 -	ms@2.1.3 (https://github.com/vercel/ms)
--	node-releases@2.0.51 (https://github.com/chicoxyzzy/node-releases)
+-	node-releases@2.0.54 (https://github.com/chicoxyzzy/node-releases)
 -	normalize-path@3.0.0 (https://github.com/jonschlinkert/normalize-path)
 -	picocolors@1.1.1 (https://github.com/alexeyraspopov/picocolors)
 -	picomatch@2.3.2 (https://github.com/micromatch/picomatch)
@@ -173,7 +173,7 @@ This project incorporates components from the projects listed below. The origina
 -	undici-types@7.16.0 (https://github.com/nodejs/undici)
 -	unified@11.0.5 (https://github.com/unifiedjs/unified)
 -	unist-util-stringify-position@4.0.0 (https://github.com/syntax-tree/unist-util-stringify-position)
--	update-browserslist-db@1.2.3 (https://github.com/browserslist/update-db)
+-	update-browserslist-db@1.3.2 (https://github.com/browserslist/update-db)
 -	vfile-message@4.0.3 (https://github.com/vfile/vfile-message)
 -	vfile@6.0.3 (https://github.com/vfile/vfile)
 -	yallist@3.1.1 (https://github.com/isaacs/yallist)
@@ -2198,7 +2198,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 =========================================
 END OF bail@2.0.2 AND INFORMATION
 
-%% baseline-browser-mapping@2.10.43 NOTICES AND INFORMATION BEGIN HERE
+%% baseline-browser-mapping@2.11.21 NOTICES AND INFORMATION BEGIN HERE
 =========================================
 Apache License
                            Version 2.0, January 2004
@@ -2402,7 +2402,7 @@ Apache License
    See the License for the specific language governing permissions and
    limitations under the License.
 =========================================
-END OF baseline-browser-mapping@2.10.43 AND INFORMATION
+END OF baseline-browser-mapping@2.11.21 AND INFORMATION
 
 %% binary-extensions@2.2.0 NOTICES AND INFORMATION BEGIN HERE
 =========================================
@@ -2444,7 +2444,7 @@ THE SOFTWARE.
 =========================================
 END OF braces@3.0.3 AND INFORMATION
 
-%% browserslist@4.28.6 NOTICES AND INFORMATION BEGIN HERE
+%% browserslist@4.28.9 NOTICES AND INFORMATION BEGIN HERE
 =========================================
 The MIT License (MIT)
 
@@ -2467,7 +2467,7 @@ COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
 IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 =========================================
-END OF browserslist@4.28.6 AND INFORMATION
+END OF browserslist@4.28.9 AND INFORMATION
 
 %% buffer-from@1.1.2 NOTICES AND INFORMATION BEGIN HERE
 =========================================
@@ -2495,7 +2495,7 @@ SOFTWARE.
 =========================================
 END OF buffer-from@1.1.2 AND INFORMATION
 
-%% caniuse-lite@1.0.30001805 NOTICES AND INFORMATION BEGIN HERE
+%% caniuse-lite@1.0.30001810 NOTICES AND INFORMATION BEGIN HERE
 =========================================
 Attribution 4.0 International
 
@@ -2893,7 +2893,7 @@ public licenses.
 
 Creative Commons may be contacted at creativecommons.org.
 =========================================
-END OF caniuse-lite@1.0.30001805 AND INFORMATION
+END OF caniuse-lite@1.0.30001810 AND INFORMATION
 
 %% chalk@4.1.2 NOTICES AND INFORMATION BEGIN HERE
 =========================================
@@ -3208,7 +3208,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 =========================================
 END OF devlop@1.1.0 AND INFORMATION
 
-%% electron-to-chromium@1.5.389 NOTICES AND INFORMATION BEGIN HERE
+%% electron-to-chromium@1.5.423 NOTICES AND INFORMATION BEGIN HERE
 =========================================
 Copyright 2018 Kilian Valkhof
 
@@ -3216,7 +3216,7 @@ Permission to use, copy, modify, and/or distribute this software for any purpose
 
 THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 =========================================
-END OF electron-to-chromium@1.5.389 AND INFORMATION
+END OF electron-to-chromium@1.5.423 AND INFORMATION
 
 %% enquirer@2.3.6 NOTICES AND INFORMATION BEGIN HERE
 =========================================
@@ -4472,7 +4472,7 @@ SOFTWARE.
 =========================================
 END OF ms@2.1.3 AND INFORMATION
 
-%% node-releases@2.0.51 NOTICES AND INFORMATION BEGIN HERE
+%% node-releases@2.0.54 NOTICES AND INFORMATION BEGIN HERE
 =========================================
 The MIT License
 
@@ -4496,7 +4496,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 =========================================
-END OF node-releases@2.0.51 AND INFORMATION
+END OF node-releases@2.0.54 AND INFORMATION
 
 %% normalize-path@3.0.0 NOTICES AND INFORMATION BEGIN HERE
 =========================================
@@ -4990,11 +4990,11 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 =========================================
 END OF unist-util-stringify-position@4.0.0 AND INFORMATION
 
-%% update-browserslist-db@1.2.3 NOTICES AND INFORMATION BEGIN HERE
+%% update-browserslist-db@1.3.2 NOTICES AND INFORMATION BEGIN HERE
 =========================================
 The MIT License (MIT)
 
-Copyright 2022 Andrey Sitnik <andrey@sitnik.ru> and other contributors
+Copyright 2022 Andrey Sitnik <andrey@sitnik.es> and other contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in
@@ -5013,7 +5013,7 @@ COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
 IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 =========================================
-END OF update-browserslist-db@1.2.3 AND INFORMATION
+END OF update-browserslist-db@1.3.2 AND INFORMATION
 
 %% vfile-message@4.0.3 NOTICES AND INFORMATION BEGIN HERE
 =========================================

package/node_modules/playwright/lib/mcp/skyramp/assertTool.js

@@ -36,13 +36,19 @@ const assertToolSchema = {
     '"visible" checks the element is visible,',
     `"count" counts elements sharing the referenced element's role (or exact text)`,
     "across the page, e.g. ref one option of an open dropdown to assert the number of options.",
+    '"css" checks a computed style property (property "background-color", expected "rgb(37, 99, 235)"; a 3- or 6-digit #hex colour is accepted and recorded as the computed rgb),',
+    '"class" checks the element carries a class ("expected" = one class name),',
+    '"attribute" checks an attribute value ("property" = the attribute name, "expected" = its value).',
+    "Use css/class/attribute for a colour, style or class change the PR makes: a screenshot baseline created on this run cannot fail on it.",
+    'css/class/attribute are read with the pointer moved OFF the element, so a value that exists only on hover is never recorded; unlike "count", they cannot be asserted on an option of a menu that closes when the pointer leaves it.',
     "To assert an element is absent or not visible, use `browser_assert_hidden`."
   ].join(" "),
   inputSchema: import_mcpBundle.z.object({
-    type: import_mcpBundle.z.enum(["text", "value", "checked", "disabled", "visible", "count"]).describe(`Type of assertion: "text" for text content, "value" for input field value, "checked" for checkbox/radio state, "disabled" for disabled/enabled state ("false" asserts the element is enabled), "visible" for element visibility, "count" for the number of elements with the referenced element's role`),
+    type: import_mcpBundle.z.enum(["text", "value", "checked", "disabled", "visible", "count", "css", "class", "attribute"]).describe(`Type of assertion: "text" for text content, "value" for input field value, "checked" for checkbox/radio state, "disabled" for disabled/enabled state ("false" asserts the element is enabled), "visible" for element visibility, "count" for the number of elements with the referenced element's role, "css" for a computed style property, "class" for a class the element carries, "attribute" for an attribute value`),
     ref: import_mcpBundle.z.string().describe('Element reference from the latest snapshot. For "count", reference one exemplar element (e.g. one option in an open dropdown).'),
     element: import_mcpBundle.z.string().describe("Human-readable description of the element being asserted"),
-    expected: import_mcpBundle.z.string().optional().describe('Expected text or value ("text"/"value"), "true"/"false" ("checked"/"disabled", default "true"; "disabled" with "false" asserts enabled), the expected element count ("count"). Not used for "visible".'),
+    property: import_mcpBundle.z.string().optional().describe('For "css": the CSS property (e.g. "background-color", "flex-direction"). For "attribute": the attribute name (e.g. "aria-expanded", "data-state"). Not used by other types.'),
+    expected: import_mcpBundle.z.string().optional().describe('Expected text or value ("text"/"value"), "true"/"false" ("checked"/"disabled", default "true"; "disabled" with "false" asserts enabled), the expected element count ("count"), the computed style value ("css"; a 3- or 6-digit #hex colour is converted to rgb), one class name ("class"), the attribute value ("attribute"). Not used for "visible".'),
     substring: import_mcpBundle.z.boolean().optional().default(true).describe("For text assertions: match as substring (true) or exact match (false)")
   }),
   type: "readOnly"

package/node_modules/playwright/lib/mcp/skyramp/common/cssValue.js

@@ -0,0 +1,87 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var cssValue_exports = {};
+__export(cssValue_exports, {
+  normalizeCssValue: () => normalizeCssValue
+});
+module.exports = __toCommonJS(cssValue_exports);
+const CASE_SENSITIVE_IDENT_PROPERTIES = /* @__PURE__ */ new Set([
+  "animation",
+  "animation-name",
+  "animation-timeline",
+  "transition",
+  "transition-property",
+  "will-change",
+  "grid",
+  "grid-area",
+  "grid-row",
+  "grid-column",
+  "grid-row-start",
+  "grid-row-end",
+  "grid-column-start",
+  "grid-column-end",
+  "grid-template-areas",
+  "grid-template-rows",
+  "grid-template-columns",
+  "grid-template",
+  "counter-increment",
+  "counter-reset",
+  "counter-set",
+  "list-style",
+  "list-style-type",
+  "container-name",
+  "container",
+  "view-transition-name",
+  "view-transition-class",
+  "anchor-name",
+  "position-anchor",
+  "position-try",
+  "position-try-fallbacks",
+  "font-palette",
+  "scroll-timeline",
+  "scroll-timeline-name",
+  "view-timeline",
+  "view-timeline-name",
+  "timeline-scope",
+  "page"
+]);
+function foldCaseKeepingDashedIdents(value) {
+  return value.replace(/[^\s,()]+/g, (token) => token.startsWith("--") ? token : token.toLowerCase());
+}
+function normalizeCssValue(value, property) {
+  const trimmed = value.trim();
+  if (/["']|url\(|var\(/i.test(trimmed))
+    return trimmed;
+  const prop = property?.trim().toLowerCase();
+  if (prop && (prop.startsWith("--") || CASE_SENSITIVE_IDENT_PROPERTIES.has(prop)))
+    return trimmed.replace(/\s+/g, " ").replace(/,\s*/g, ", ");
+  const v = foldCaseKeepingDashedIdents(trimmed.replace(/\s+/g, " "));
+  const hex = v.match(/^#([0-9a-f]{3}|[0-9a-f]{6})$/);
+  if (!hex)
+    return v.replace(/,\s*/g, ", ");
+  const h = hex[1].length === 3 ? hex[1].split("").map((c) => c + c).join("") : hex[1];
+  const r = parseInt(h.slice(0, 2), 16);
+  const g = parseInt(h.slice(2, 4), 16);
+  const b = parseInt(h.slice(4, 6), 16);
+  return `rgb(${r}, ${g}, ${b})`;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  normalizeCssValue
+});