@solarisdk/mcp 0.4.0 → 0.5.0

package/dist/browser.js

@@ -294,6 +294,76 @@ export function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
                 });
             },
         },
+        solari_browser_autologin_status: {
+            description: "Check whether this account can sign in to websites automatically, and get a direct " +
+                "setup link if it cannot.\n" +
+                "Call this when a task will clearly need a login, BEFORE you start — if nothing is set " +
+                "up you can tell the user once, up front, with a link, instead of interrupting them " +
+                "mid-run. Also worth calling if a login keeps needing a human.\n" +
+                "Returns the connected password managers, the sites already configured, and `setupUrl`. " +
+                "If `configured` is false, SHOW setupUrl TO THE USER: it opens the page where they " +
+                "connect a password manager. You cannot do that step for them — it needs a credential " +
+                "that must never pass through you — but the link removes all the guesswork.",
+            inputSchema: {},
+            handler: async () => {
+                const res = await api(cfg, "GET", "/vault/status");
+                if (res.status === 501) {
+                    return text({
+                        configured: false,
+                        available: false,
+                        note: "Automatic sign-in is not available on this deployment.",
+                    });
+                }
+                if (res.status !== 200)
+                    await apiError(res, "auto-login status");
+                const d = (await res.json());
+                const managers = d.managers ?? [];
+                const sites = d.sites ?? [];
+                return text({
+                    configured: managers.length > 0,
+                    available: true,
+                    managers: managers.map((m) => ({ name: m.name, provider: m.provider, vaults: m.vaults })),
+                    sites,
+                    setupUrl: d.setupUrl ?? null,
+                    next: managers.length === 0
+                        ? "No password manager is connected. Show setupUrl to the user — it takes them " +
+                            "straight to the page where they connect one, after which logins happen with no " +
+                            "human involved."
+                        : sites.length === 0
+                            ? "A password manager is connected but no sites use it yet. Add one with " +
+                                "solari_browser_autologin_site, or the user can do it at setupUrl."
+                            : "Automatic sign-in is set up. Sessions will log in to these sites on their own.",
+                });
+            },
+        },
+        solari_browser_autologin_site: {
+            description: "Tell Solari to sign in to a site automatically using a connected password manager.\n" +
+                "`domain` is the site, e.g. 'github.com'. `manager` is the NAME of a connected password " +
+                "manager (see solari_browser_autologin_status) — omit it to mean 'remember the session " +
+                "but ask a human for a fresh login'. `item` is an optional 'Vault/Item' path for when " +
+                "one site has several logins; omit it to match by site.\n" +
+                "This only says WHICH credential to use — it never handles the credential itself.",
+            inputSchema: {
+                domain: z.string(),
+                manager: z.string().optional(),
+                item: z.string().optional(),
+            },
+            handler: async (a) => {
+                const res = await api(cfg, "POST", "/vault/sites", {
+                    domain: a.domain,
+                    ...(typeof a.manager === "string" ? { manager: a.manager } : {}),
+                    ...(typeof a.item === "string" ? { item: a.item } : {}),
+                });
+                if (res.status !== 200)
+                    await apiError(res, "configure auto-login site");
+                const d = (await res.json());
+                return text({
+                    ...d,
+                    next: "Set. The next session that hits a login wall on this site signs in automatically " +
+                        "if the credential is found; otherwise a human is asked, as before.",
+                });
+            },
+        },
         solari_browser_login: {
             description: "Get this session signed in. Call it the moment you hit a login form, a 2FA prompt, or "
                 + "anything asking for a password — you must never handle credentials yourself.\n"
@@ -370,6 +440,7 @@ export function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
                 // escalate to a human when that cannot work. Best-effort: any failure
                 // here just falls through to the handoff below, which is the behaviour
                 // that existed before.
+                let setupUrl = null;
                 try {
                     const auto = await api(cfg, "POST", `/sessions/${encodeURIComponent(sessionId)}/autologin`, {});
                     if (auto.status === 200) {
@@ -382,6 +453,12 @@ export function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
                                 next: "You are signed in — carry on. No human was needed.",
                             });
                         }
+                        // Nothing is configured for this site. Remember the setup link so
+                        // it can be offered alongside the handoff below — the user is
+                        // already being interrupted, so this is the cheapest possible
+                        // moment to tell them how to stop being interrupted next time.
+                        if (r.setupRequired && r.setupUrl)
+                            setupUrl = r.setupUrl;
                     }
                 }
                 catch {
@@ -410,6 +487,17 @@ export function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
                     url: showUrl,
                     fullUrl: h.url,
                     expiresAt: h.expiresAt,
+                    // Offered only when the account has NOTHING configured for this site.
+                    // The user is already being interrupted, so this is the cheapest
+                    // moment to show them how to stop being interrupted next time.
+                    ...(setupUrl
+                        ? {
+                            setupUrl,
+                            tip: "This account has no password manager connected for this site, so a human is " +
+                                "needed every time. Connecting one at the setupUrl lets future logins happen " +
+                                "automatically. MENTION THIS TO THE USER along with the sign-in link.",
+                        }
+                        : {}),
                     next: "Show the url to the user, then call solari_browser_await_login.",
                 });
             },

package/dist/solari-mcp-http.bundle.cjs

@@ -112358,7 +112358,7 @@ var SolariClient = class {
 };
 
 // src/version.ts
-var VERSION = "0.3.4";
+var VERSION = "0.5.0";
 
 // node_modules/puppeteer-core/lib/esm/puppeteer/index.js
 init_index_browser();
@@ -113865,6 +113865,53 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
         });
       }
     },
+    solari_browser_autologin_status: {
+      description: "Check whether this account can sign in to websites automatically, and get a direct setup link if it cannot.\nCall this when a task will clearly need a login, BEFORE you start \u2014 if nothing is set up you can tell the user once, up front, with a link, instead of interrupting them mid-run. Also worth calling if a login keeps needing a human.\nReturns the connected password managers, the sites already configured, and `setupUrl`. If `configured` is false, SHOW setupUrl TO THE USER: it opens the page where they connect a password manager. You cannot do that step for them \u2014 it needs a credential that must never pass through you \u2014 but the link removes all the guesswork.",
+      inputSchema: {},
+      handler: async () => {
+        const res = await api2(cfg, "GET", "/vault/status");
+        if (res.status === 501) {
+          return text({
+            configured: false,
+            available: false,
+            note: "Automatic sign-in is not available on this deployment."
+          });
+        }
+        if (res.status !== 200) await apiError(res, "auto-login status");
+        const d = await res.json();
+        const managers = d.managers ?? [];
+        const sites = d.sites ?? [];
+        return text({
+          configured: managers.length > 0,
+          available: true,
+          managers: managers.map((m) => ({ name: m.name, provider: m.provider, vaults: m.vaults })),
+          sites,
+          setupUrl: d.setupUrl ?? null,
+          next: managers.length === 0 ? "No password manager is connected. Show setupUrl to the user \u2014 it takes them straight to the page where they connect one, after which logins happen with no human involved." : sites.length === 0 ? "A password manager is connected but no sites use it yet. Add one with solari_browser_autologin_site, or the user can do it at setupUrl." : "Automatic sign-in is set up. Sessions will log in to these sites on their own."
+        });
+      }
+    },
+    solari_browser_autologin_site: {
+      description: "Tell Solari to sign in to a site automatically using a connected password manager.\n`domain` is the site, e.g. 'github.com'. `manager` is the NAME of a connected password manager (see solari_browser_autologin_status) \u2014 omit it to mean 'remember the session but ask a human for a fresh login'. `item` is an optional 'Vault/Item' path for when one site has several logins; omit it to match by site.\nThis only says WHICH credential to use \u2014 it never handles the credential itself.",
+      inputSchema: {
+        domain: external_exports.string(),
+        manager: external_exports.string().optional(),
+        item: external_exports.string().optional()
+      },
+      handler: async (a2) => {
+        const res = await api2(cfg, "POST", "/vault/sites", {
+          domain: a2.domain,
+          ...typeof a2.manager === "string" ? { manager: a2.manager } : {},
+          ...typeof a2.item === "string" ? { item: a2.item } : {}
+        });
+        if (res.status !== 200) await apiError(res, "configure auto-login site");
+        const d = await res.json();
+        return text({
+          ...d,
+          next: "Set. The next session that hits a login wall on this site signs in automatically if the credential is found; otherwise a human is asked, as before."
+        });
+      }
+    },
     solari_browser_login: {
       description: "Get this session signed in. Call it the moment you hit a login form, a 2FA prompt, or anything asking for a password \u2014 you must never handle credentials yourself.\nIt tries the account's connected password manager FIRST: if one is set up for this site, you are signed in automatically and NO human is involved \u2014 the reply says signedIn:true and you simply carry on. Otherwise it falls back to asking a human.\nTwo ways to call it:\nHOT \u2014 pass `sessionId` when you are ALREADY on a login wall mid-task. The user gets a live view of the exact page you are on and types into it; you resume on that same page.\nCOLD \u2014 pass `profileName` when you know a task will need a login and no session is open yet. The user signs in once in a profile editor, and every later solari_browser_create({profileId}) starts already authenticated. Prefer this when you can: nobody has to be watching mid-run. The profile is created if it does not exist.\nPass exactly one of the two. Either way, SHOW THE RETURNED URL TO THE USER, then call solari_browser_await_login.\nIn the HOT case your access to that session is REVOKED while the handoff is open \u2014 deliberately, so you cannot observe what they type \u2014 and the link expires in 5 minutes. Cold links last longer and revoke nothing, because there is no session yet.\n`reason` is required and is shown to the user \u2014 say plainly which site is asking and what for, because they are being asked to type a password on your say-so.",
       inputSchema: {
@@ -113913,6 +113960,7 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
           });
         }
         const e = need(sessionId);
+        let setupUrl = null;
         try {
           const auto = await api2(
             cfg,
@@ -113930,6 +113978,7 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
                 next: "You are signed in \u2014 carry on. No human was needed."
               });
             }
+            if (r.setupRequired && r.setupUrl) setupUrl = r.setupUrl;
           }
         } catch {
         }
@@ -113952,6 +114001,13 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
           url: showUrl,
           fullUrl: h.url,
           expiresAt: h.expiresAt,
+          // Offered only when the account has NOTHING configured for this site.
+          // The user is already being interrupted, so this is the cheapest
+          // moment to show them how to stop being interrupted next time.
+          ...setupUrl ? {
+            setupUrl,
+            tip: "This account has no password manager connected for this site, so a human is needed every time. Connecting one at the setupUrl lets future logins happen automatically. MENTION THIS TO THE USER along with the sign-in link."
+          } : {},
           next: "Show the url to the user, then call solari_browser_await_login."
         });
       }

package/dist/solari-mcp.bundle.cjs

@@ -111027,7 +111027,7 @@ var SolariClient = class {
 };
 
 // src/version.ts
-var VERSION = "0.3.4";
+var VERSION = "0.5.0";
 
 // node_modules/puppeteer-core/lib/esm/puppeteer/index.js
 init_index_browser();
@@ -112534,6 +112534,53 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
         });
       }
     },
+    solari_browser_autologin_status: {
+      description: "Check whether this account can sign in to websites automatically, and get a direct setup link if it cannot.\nCall this when a task will clearly need a login, BEFORE you start \u2014 if nothing is set up you can tell the user once, up front, with a link, instead of interrupting them mid-run. Also worth calling if a login keeps needing a human.\nReturns the connected password managers, the sites already configured, and `setupUrl`. If `configured` is false, SHOW setupUrl TO THE USER: it opens the page where they connect a password manager. You cannot do that step for them \u2014 it needs a credential that must never pass through you \u2014 but the link removes all the guesswork.",
+      inputSchema: {},
+      handler: async () => {
+        const res = await api2(cfg, "GET", "/vault/status");
+        if (res.status === 501) {
+          return text({
+            configured: false,
+            available: false,
+            note: "Automatic sign-in is not available on this deployment."
+          });
+        }
+        if (res.status !== 200) await apiError(res, "auto-login status");
+        const d = await res.json();
+        const managers = d.managers ?? [];
+        const sites = d.sites ?? [];
+        return text({
+          configured: managers.length > 0,
+          available: true,
+          managers: managers.map((m) => ({ name: m.name, provider: m.provider, vaults: m.vaults })),
+          sites,
+          setupUrl: d.setupUrl ?? null,
+          next: managers.length === 0 ? "No password manager is connected. Show setupUrl to the user \u2014 it takes them straight to the page where they connect one, after which logins happen with no human involved." : sites.length === 0 ? "A password manager is connected but no sites use it yet. Add one with solari_browser_autologin_site, or the user can do it at setupUrl." : "Automatic sign-in is set up. Sessions will log in to these sites on their own."
+        });
+      }
+    },
+    solari_browser_autologin_site: {
+      description: "Tell Solari to sign in to a site automatically using a connected password manager.\n`domain` is the site, e.g. 'github.com'. `manager` is the NAME of a connected password manager (see solari_browser_autologin_status) \u2014 omit it to mean 'remember the session but ask a human for a fresh login'. `item` is an optional 'Vault/Item' path for when one site has several logins; omit it to match by site.\nThis only says WHICH credential to use \u2014 it never handles the credential itself.",
+      inputSchema: {
+        domain: external_exports.string(),
+        manager: external_exports.string().optional(),
+        item: external_exports.string().optional()
+      },
+      handler: async (a2) => {
+        const res = await api2(cfg, "POST", "/vault/sites", {
+          domain: a2.domain,
+          ...typeof a2.manager === "string" ? { manager: a2.manager } : {},
+          ...typeof a2.item === "string" ? { item: a2.item } : {}
+        });
+        if (res.status !== 200) await apiError(res, "configure auto-login site");
+        const d = await res.json();
+        return text({
+          ...d,
+          next: "Set. The next session that hits a login wall on this site signs in automatically if the credential is found; otherwise a human is asked, as before."
+        });
+      }
+    },
     solari_browser_login: {
       description: "Get this session signed in. Call it the moment you hit a login form, a 2FA prompt, or anything asking for a password \u2014 you must never handle credentials yourself.\nIt tries the account's connected password manager FIRST: if one is set up for this site, you are signed in automatically and NO human is involved \u2014 the reply says signedIn:true and you simply carry on. Otherwise it falls back to asking a human.\nTwo ways to call it:\nHOT \u2014 pass `sessionId` when you are ALREADY on a login wall mid-task. The user gets a live view of the exact page you are on and types into it; you resume on that same page.\nCOLD \u2014 pass `profileName` when you know a task will need a login and no session is open yet. The user signs in once in a profile editor, and every later solari_browser_create({profileId}) starts already authenticated. Prefer this when you can: nobody has to be watching mid-run. The profile is created if it does not exist.\nPass exactly one of the two. Either way, SHOW THE RETURNED URL TO THE USER, then call solari_browser_await_login.\nIn the HOT case your access to that session is REVOKED while the handoff is open \u2014 deliberately, so you cannot observe what they type \u2014 and the link expires in 5 minutes. Cold links last longer and revoke nothing, because there is no session yet.\n`reason` is required and is shown to the user \u2014 say plainly which site is asking and what for, because they are being asked to type a password on your say-so.",
       inputSchema: {
@@ -112582,6 +112629,7 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
           });
         }
         const e = need(sessionId);
+        let setupUrl = null;
         try {
           const auto = await api2(
             cfg,
@@ -112599,6 +112647,7 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
                 next: "You are signed in \u2014 carry on. No human was needed."
               });
             }
+            if (r.setupRequired && r.setupUrl) setupUrl = r.setupUrl;
           }
         } catch {
         }
@@ -112621,6 +112670,13 @@ function makeBrowserToolset(cfg, reg, deps = defaultDeps) {
           url: showUrl,
           fullUrl: h.url,
           expiresAt: h.expiresAt,
+          // Offered only when the account has NOTHING configured for this site.
+          // The user is already being interrupted, so this is the cheapest
+          // moment to show them how to stop being interrupted next time.
+          ...setupUrl ? {
+            setupUrl,
+            tip: "This account has no password manager connected for this site, so a human is needed every time. Connecting one at the setupUrl lets future logins happen automatically. MENTION THIS TO THE USER along with the sign-in link."
+          } : {},
           next: "Show the url to the user, then call solari_browser_await_login."
         });
       }

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "0.3.4";
+export declare const VERSION = "0.5.0";

package/dist/version.js

@@ -8,4 +8,4 @@
 // `test/version.test.mjs` FAILS the build if it ever drifts from package.json.
 //
 // KEEP IN SYNC WITH sdk/mcp/package.json "version".
-export const VERSION = "0.3.4";
+export const VERSION = "0.5.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solarisdk/mcp",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Model Context Protocol server for the Solari cloud browser, sandboxes + desktops \u2014 drive them from Claude Desktop/Cowork, Claude Code, Cursor, etc.",
   "type": "module",
   "bin": {