@tekmidian/pai 0.40.0 → 0.41.0

package/README.md

@@ -112,6 +112,7 @@ pai worker replay <id>                         # transcript of a finished or run
 pai worker say <id> <text>                     # message a running worker mid-run
 pai worker handoff '<json>'                    # from inside a worker: report to the parent
 pai worker merge <id>                          # merge the worker's branch back, drop the worktree
+pai worker wait <id>...                        # block until workers finish (never sleep-loop)
 pai worker watch                               # ps refreshed every 2 seconds
 ```
 

package/dist/browser-mcp/index.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/browser-mcp/index.mjs

@@ -0,0 +1,352 @@
+#!/usr/bin/env node
+import { i as number, o as string, r as boolean } from "../schemas-De1F-ktH.mjs";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+//#region src/browser-mcp/bridge-client.ts
+/**
+* WebSocket client for the browser bridge.
+*
+* Talks to the native host's hand-rolled WS server (ws://127.0.0.1:8756) with
+* the global WebSocket — node >= 22, no external dependency. Requests carry an
+* id; replies are correlated by it. The socket is connected lazily per call
+* and reconnected on demand, so the server survives Chrome being closed.
+*/
+const BRIDGE_PORT = Number(process.env.PAI_BROWSER_BRIDGE_PORT || 8756);
+const BRIDGE_URL = `ws://127.0.0.1:${BRIDGE_PORT}`;
+const NOT_CONNECTED_MESSAGE = "Chrome bridge not connected — start Chrome (the PAI browser-bridge extension must be running) and try again.";
+const globalWebSocketFactory = (url) => {
+	const WS = globalThis.WebSocket;
+	if (!WS) throw new Error("this node runtime has no global WebSocket — pai-browser-mcp needs node >= 22");
+	return new WS(url);
+};
+var NotConnectedError = class extends Error {
+	constructor() {
+		super(NOT_CONNECTED_MESSAGE);
+		this.name = "NotConnectedError";
+	}
+};
+const CONNECT_TIMEOUT_MS = 5e3;
+const REQUEST_TIMEOUT_MS = 5e3;
+const OPEN = 1;
+var BridgeClient = class {
+	socket = null;
+	connecting = null;
+	nextId = 1;
+	pending = /* @__PURE__ */ new Map();
+	constructor(url = BRIDGE_URL, socketFactory = globalWebSocketFactory) {
+		this.url = url;
+		this.socketFactory = socketFactory;
+	}
+	/** True when the underlying socket is open. */
+	get connected() {
+		return this.socket !== null && this.socket.readyState === OPEN;
+	}
+	ensureSocket() {
+		if (this.socket && this.socket.readyState === OPEN) return Promise.resolve(this.socket);
+		if (this.connecting) return this.connecting;
+		this.dropSocket();
+		const attempt = new Promise((resolve, reject) => {
+			let socket;
+			try {
+				socket = this.socketFactory(this.url);
+			} catch (e) {
+				reject(e);
+				return;
+			}
+			const timer = setTimeout(() => {
+				reject(new NotConnectedError());
+				socket.onopen = null;
+				socket.onclose = null;
+				socket.onerror = null;
+				socket.onmessage = null;
+				try {
+					socket.close();
+				} catch {}
+			}, CONNECT_TIMEOUT_MS);
+			socket.onopen = () => {
+				clearTimeout(timer);
+				this.socket = socket;
+				resolve(socket);
+			};
+			socket.onclose = () => {
+				clearTimeout(timer);
+				this.dropSocket();
+				reject(new NotConnectedError());
+			};
+			socket.onerror = () => {
+				clearTimeout(timer);
+				this.dropSocket();
+				reject(new NotConnectedError());
+			};
+			socket.onmessage = (ev) => this.onMessage(ev);
+		});
+		this.connecting = attempt;
+		const clear = () => {
+			if (this.connecting === attempt) this.connecting = null;
+		};
+		attempt.then(clear, clear);
+		return attempt;
+	}
+	dropSocket() {
+		if (this.socket) {
+			this.socket.onopen = null;
+			this.socket.onclose = null;
+			this.socket.onerror = null;
+			this.socket.onmessage = null;
+			try {
+				this.socket.close();
+			} catch {}
+			this.socket = null;
+		}
+		for (const [, p] of this.pending) {
+			clearTimeout(p.timer);
+			p.reject(new NotConnectedError());
+		}
+		this.pending.clear();
+	}
+	onMessage(ev) {
+		let reply;
+		try {
+			reply = JSON.parse(ev.data);
+		} catch {
+			return;
+		}
+		const p = reply?.id !== void 0 ? this.pending.get(reply.id) : void 0;
+		if (!p) return;
+		this.pending.delete(reply.id);
+		clearTimeout(p.timer);
+		p.resolve(reply);
+	}
+	/**
+	* Sends one command and awaits its correlated reply. Connection problems
+	* and timeouts both surface as NotConnectedError with the user-facing text.
+	*/
+	async send(command, params = {}) {
+		await this.ensureSocket();
+		const id = this.nextId++;
+		const frame = JSON.stringify({
+			id,
+			command,
+			...params
+		});
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => {
+				this.pending.delete(id);
+				reject(new NotConnectedError());
+			}, REQUEST_TIMEOUT_MS);
+			this.pending.set(id, {
+				resolve: (reply) => reply.ok ? resolve(reply.result) : reject(new Error(reply.error ?? "bridge error")),
+				reject,
+				timer
+			});
+			try {
+				this.socket.send(frame);
+			} catch (e) {
+				this.pending.delete(id);
+				clearTimeout(timer);
+				reject(new NotConnectedError());
+			}
+		});
+	}
+	close() {
+		this.dropSocket();
+	}
+};
+
+//#endregion
+//#region src/browser-mcp/tools.ts
+const tabSchema = number().int().describe("Tab id, as returned by tabs_list.");
+function asRecord(v) {
+	return v ?? {};
+}
+function formatTabs(result) {
+	const tabs = Array.isArray(result) ? result : asRecord(result).tabs;
+	if (!Array.isArray(tabs) || tabs.length === 0) return "(no open tabs)";
+	return tabs.map((t) => `${t.id}${t.active ? " *" : "  "} ${String(t.title ?? "")}\n     ${String(t.url ?? "")}`).join("\n");
+}
+function formatSnapshot(result) {
+	return String(asRecord(result).yaml ?? "");
+}
+function formatLogs(result) {
+	const entries = asRecord(result).entries;
+	if (!Array.isArray(entries) || entries.length === 0) return "(no console output captured)";
+	return entries.map((e) => {
+		return `[${e.source === "console" ? String(e.type ?? "log") : String(e.level ?? "log")}] ${String(e.text ?? "")}`;
+	}).join("\n");
+}
+function formatEval(result) {
+	const value = asRecord(result).value;
+	return typeof value === "string" ? value : JSON.stringify(value, null, 2);
+}
+function formatScreenshot(result) {
+	return String(asRecord(result).base64 ?? "");
+}
+const BROWSER_TOOLS = [
+	{
+		name: "tabs_list",
+		description: "List the tabs of the user's real running Chrome (id, title, url, active).",
+		shape: {},
+		command: "list_tabs",
+		toParams: () => ({}),
+		format: formatTabs
+	},
+	{
+		name: "tab_open",
+		description: "Open a new tab in the user's Chrome and return its tab id.",
+		shape: {
+			url: string().describe("URL to open."),
+			active: boolean().optional().describe("Focus the new tab (default true).")
+		},
+		command: "open_tab",
+		toParams: (a) => ({
+			url: a.url,
+			...a.active !== void 0 ? { active: a.active } : {}
+		})
+	},
+	{
+		name: "tab_select",
+		description: "Bring a tab to the front (activate it and focus its window).",
+		shape: { tab: tabSchema },
+		command: "select_tab",
+		toParams: (a) => ({ tabId: a.tab })
+	},
+	{
+		name: "tab_close",
+		description: "Close a tab.",
+		shape: { tab: tabSchema },
+		command: "close_tab",
+		toParams: (a) => ({ tabId: a.tab })
+	},
+	{
+		name: "dom_snapshot",
+		description: "Snapshot a tab's DOM as an accessibility-tree YAML with [ref=sN] ids for interactive elements. Take a snapshot before dom_click/dom_type; refs stay valid until the next snapshot or navigation.",
+		shape: { tab: tabSchema },
+		command: "snapshot",
+		toParams: (a) => ({ tabId: a.tab }),
+		format: formatSnapshot
+	},
+	{
+		name: "dom_click",
+		description: "Click an element by its [ref=sN] from the latest dom_snapshot (trusted CDP event).",
+		shape: {
+			tab: tabSchema,
+			ref: string().describe("Ref id from dom_snapshot, e.g. s3.")
+		},
+		command: "click",
+		toParams: (a) => ({
+			tabId: a.tab,
+			ref: a.ref
+		})
+	},
+	{
+		name: "dom_type",
+		description: "Focus an element by its [ref=sN] and type text into it (inserts at the caret, works in SPAs).",
+		shape: {
+			tab: tabSchema,
+			ref: string().describe("Ref id from dom_snapshot, e.g. s5."),
+			text: string().describe("Text to type.")
+		},
+		command: "type",
+		toParams: (a) => ({
+			tabId: a.tab,
+			ref: a.ref,
+			text: a.text
+		})
+	},
+	{
+		name: "page_text",
+		description: "Read a tab's visible text (document.body.innerText).",
+		shape: { tab: tabSchema },
+		command: "eval",
+		toParams: () => ({ code: "document.body.innerText" }),
+		format: formatEval
+	},
+	{
+		name: "eval_js",
+		description: "Evaluate JavaScript in a tab and return the JSON-safe result. Awaits promises.",
+		shape: {
+			tab: tabSchema,
+			code: string().describe("JavaScript expression to evaluate.")
+		},
+		command: "eval",
+		toParams: (a) => ({ code: a.code }),
+		format: formatEval
+	},
+	{
+		name: "tab_screenshot",
+		description: "Screenshot a tab (PNG, base64).",
+		shape: { tab: tabSchema },
+		command: "screenshot",
+		toParams: (a) => ({ tabId: a.tab }),
+		format: formatScreenshot
+	},
+	{
+		name: "console_logs",
+		description: "Read the console output captured for a tab since its last snapshot.",
+		shape: { tab: tabSchema },
+		command: "console_logs",
+		toParams: (a) => ({ tabId: a.tab }),
+		format: formatLogs
+	}
+];
+/** Runs one tool against the bridge; returns MCP content + isError. */
+async function runBrowserTool(def, args, bridge) {
+	try {
+		const result = await bridge.send(def.command, def.toParams(args));
+		return { content: [{
+			type: "text",
+			text: def.format ? def.format(result) : JSON.stringify(result, null, 2)
+		}] };
+	} catch (e) {
+		return {
+			content: [{
+				type: "text",
+				text: e instanceof NotConnectedError ? e.message : e instanceof Error ? e.message : String(e)
+			}],
+			isError: true
+		};
+	}
+}
+/** Registers every browser tool on an MCP server. */
+function registerBrowserTools(server, bridge) {
+	for (const def of BROWSER_TOOLS) server.tool(def.name, def.description, def.shape, (args) => runBrowserTool(def, args, bridge));
+}
+
+//#endregion
+//#region src/browser-mcp/index.ts
+/**
+* pai-browser-mcp — stdio MCP server for the PAI browser bridge.
+*
+* The provider-independent claude-in-chrome replacement: drives the user's
+* real running Chrome (tabs + DOM) through the browser-bridge extension's
+* native messaging host, over ws://127.0.0.1:8756. Any MCP client works —
+* nothing here is Anthropic-specific.
+*
+*   provider → MCP (this server) → WebSocket → native host → extension → Chrome
+*
+* If Chrome is not running (or the extension is not loaded), every tool
+* returns a clear "start Chrome" error; the server itself stays alive and
+* reconnects lazily per call.
+*/
+async function main() {
+	if (globalThis.WebSocket === void 0) {
+		process.stderr.write("pai-browser-mcp: this node runtime has no global WebSocket — run with node >= 22\n");
+		process.exit(1);
+	}
+	const server = new McpServer({
+		name: "pai-browser",
+		version: "0.1.0"
+	});
+	registerBrowserTools(server, new BridgeClient(void 0, globalWebSocketFactory));
+	const transport = new StdioServerTransport();
+	await server.connect(transport);
+}
+main().catch((e) => {
+	process.stderr.write(`pai-browser-mcp fatal error: ${String(e)}\n`);
+	process.exit(1);
+});
+
+//#endregion
+export {  };
+//# sourceMappingURL=index.mjs.map

package/dist/browser-mcp/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["z.number","z.string","z.boolean"],"sources":["../../src/browser-mcp/bridge-client.ts","../../src/browser-mcp/tools.ts","../../src/browser-mcp/index.ts"],"sourcesContent":["/**\n * WebSocket client for the browser bridge.\n *\n * Talks to the native host's hand-rolled WS server (ws://127.0.0.1:8756) with\n * the global WebSocket — node >= 22, no external dependency. Requests carry an\n * id; replies are correlated by it. The socket is connected lazily per call\n * and reconnected on demand, so the server survives Chrome being closed.\n */\n\nexport const BRIDGE_PORT = Number(process.env.PAI_BROWSER_BRIDGE_PORT || 8756);\nexport const BRIDGE_URL = `ws://127.0.0.1:${BRIDGE_PORT}`;\n\nexport const NOT_CONNECTED_MESSAGE =\n  \"Chrome bridge not connected — start Chrome (the PAI browser-bridge extension must be running) and try again.\";\n\n/** Minimal shape of the pieces of WebSocket this client uses. */\nexport interface WebSocketLike {\n  readyState: number;\n  send(data: string): void;\n  close(): void;\n  onopen: (() => void) | null;\n  onclose: (() => void) | null;\n  onerror: (() => void) | null;\n  onmessage: ((ev: { data: string }) => void) | null;\n}\n\nexport type WebSocketFactory = (url: string) => WebSocketLike;\n\nexport const globalWebSocketFactory: WebSocketFactory = (url) => {\n  const WS = (globalThis as { WebSocket?: new (url: string) => WebSocketLike }).WebSocket;\n  if (!WS) {\n    throw new Error(\n      \"this node runtime has no global WebSocket — pai-browser-mcp needs node >= 22\"\n    );\n  }\n  return new WS(url);\n};\n\nexport class NotConnectedError extends Error {\n  constructor() {\n    super(NOT_CONNECTED_MESSAGE);\n    this.name = \"NotConnectedError\";\n  }\n}\n\nexport interface BridgeReply {\n  id: number;\n  ok: boolean;\n  result?: unknown;\n  error?: string;\n}\n\nconst CONNECT_TIMEOUT_MS = 5_000;\nconst REQUEST_TIMEOUT_MS = 5_000;\nconst OPEN = 1;\n\nexport class BridgeClient {\n  private socket: WebSocketLike | null = null;\n  private connecting: Promise<WebSocketLike> | null = null;\n  private nextId = 1;\n  private readonly pending = new Map<\n    number,\n    { resolve: (r: BridgeReply) => void; reject: (e: Error) => void; timer: NodeJS.Timeout }\n  >();\n\n  constructor(\n    private readonly url: string = BRIDGE_URL,\n    private readonly socketFactory: WebSocketFactory = globalWebSocketFactory\n  ) {}\n\n  /** True when the underlying socket is open. */\n  get connected(): boolean {\n    return this.socket !== null && this.socket.readyState === OPEN;\n  }\n\n  private ensureSocket(): Promise<WebSocketLike> {\n    if (this.socket && this.socket.readyState === OPEN) return Promise.resolve(this.socket);\n    if (this.connecting) return this.connecting; // concurrent sends share one socket\n    this.dropSocket();\n    const attempt = new Promise<WebSocketLike>((resolve, reject) => {\n      let socket: WebSocketLike;\n      try {\n        socket = this.socketFactory(this.url);\n      } catch (e) {\n        reject(e);\n        return;\n      }\n      const timer = setTimeout(() => {\n        reject(new NotConnectedError());\n        socket.onopen = null;\n        socket.onclose = null;\n        socket.onerror = null;\n        socket.onmessage = null;\n        try {\n          socket.close();\n        } catch {\n          /* already gone */\n        }\n      }, CONNECT_TIMEOUT_MS);\n      socket.onopen = () => {\n        clearTimeout(timer);\n        this.socket = socket;\n        resolve(socket);\n      };\n      socket.onclose = () => {\n        clearTimeout(timer);\n        this.dropSocket();\n        reject(new NotConnectedError());\n      };\n      socket.onerror = () => {\n        clearTimeout(timer);\n        this.dropSocket();\n        reject(new NotConnectedError());\n      };\n      socket.onmessage = (ev) => this.onMessage(ev);\n    });\n    this.connecting = attempt;\n    const clear = () => {\n      if (this.connecting === attempt) this.connecting = null;\n    };\n    attempt.then(clear, clear);\n    return attempt;\n  }\n\n  private dropSocket(): void {\n    if (this.socket) {\n      this.socket.onopen = null;\n      this.socket.onclose = null;\n      this.socket.onerror = null;\n      this.socket.onmessage = null;\n      try {\n        this.socket.close();\n      } catch {\n        /* already gone */\n      }\n      this.socket = null;\n    }\n    // Fail everything still waiting — the peer is gone.\n    for (const [, p] of this.pending) {\n      clearTimeout(p.timer);\n      p.reject(new NotConnectedError());\n    }\n    this.pending.clear();\n  }\n\n  private onMessage(ev: { data: string }): void {\n    let reply: BridgeReply;\n    try {\n      reply = JSON.parse(ev.data) as BridgeReply;\n    } catch {\n      return; // bridge noise (keepalive pings echo nothing back); ignore\n    }\n    const p = reply?.id !== undefined ? this.pending.get(reply.id) : undefined;\n    if (!p) return;\n    this.pending.delete(reply.id);\n    clearTimeout(p.timer);\n    p.resolve(reply);\n  }\n\n  /**\n   * Sends one command and awaits its correlated reply. Connection problems\n   * and timeouts both surface as NotConnectedError with the user-facing text.\n   */\n  async send(command: string, params: Record<string, unknown> = {}): Promise<unknown> {\n    await this.ensureSocket();\n    const id = this.nextId++;\n    const frame = JSON.stringify({ id, command, ...params });\n    return new Promise<unknown>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        this.pending.delete(id);\n        reject(new NotConnectedError());\n      }, REQUEST_TIMEOUT_MS);\n      this.pending.set(id, {\n        resolve: (reply) => (reply.ok ? resolve(reply.result) : reject(new Error(reply.error ?? \"bridge error\"))),\n        reject,\n        timer,\n      });\n      try {\n        this.socket!.send(frame);\n      } catch (e) {\n        this.pending.delete(id);\n        clearTimeout(timer);\n        reject(new NotConnectedError());\n      }\n    });\n  }\n\n  close(): void {\n    this.dropSocket();\n  }\n}\n","/**\n * pai-browser MCP tool table.\n *\n * One definition per tool: MCP-facing name/schema, the wire command it maps\n * to on the browser bridge, param translation, and result formatting. Kept as\n * a data table so tests can drive every mapping without a transport, and so\n * registerBrowserTools stays a five-line loop.\n */\n\nimport type { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { z } from \"zod\";\nimport { NotConnectedError } from \"./bridge-client.js\";\n\nexport interface BridgeLike {\n  send(command: string, params?: Record<string, unknown>): Promise<unknown>;\n}\n\nexport interface BrowserToolDef {\n  name: string;\n  description: string;\n  /** zod raw shape for server.tool() */\n  shape: z.ZodRawShape;\n  /** wire command the extension handles */\n  command: string;\n  /** MCP args → wire params */\n  toParams: (args: Record<string, unknown>) => Record<string, unknown>;\n  /** wire result → text shown to the model */\n  format?: (result: unknown) => string;\n}\n\nconst tabSchema = z.number().int().describe(\"Tab id, as returned by tabs_list.\");\n\nfunction asRecord(v: unknown): Record<string, unknown> {\n  return (v ?? {}) as Record<string, unknown>;\n}\n\n// ---------------------------------------------------------------------------\n// Result formatters\n// ---------------------------------------------------------------------------\n\nfunction formatTabs(result: unknown): string {\n  const tabs = (Array.isArray(result) ? result : asRecord(result).tabs) as Array<\n    Record<string, unknown>\n  >;\n  if (!Array.isArray(tabs) || tabs.length === 0) return \"(no open tabs)\";\n  return tabs\n    .map(\n      (t) =>\n        `${t.id}${t.active ? \" *\" : \"  \"} ${String(t.title ?? \"\")}\\n     ${String(t.url ?? \"\")}`\n    )\n    .join(\"\\n\");\n}\n\nfunction formatSnapshot(result: unknown): string {\n  return String(asRecord(result).yaml ?? \"\");\n}\n\nfunction formatLogs(result: unknown): string {\n  const entries = asRecord(result).entries as Array<Record<string, unknown>>;\n  if (!Array.isArray(entries) || entries.length === 0) return \"(no console output captured)\";\n  return entries\n    .map((e) => {\n      const kind = e.source === \"console\" ? String(e.type ?? \"log\") : String(e.level ?? \"log\");\n      return `[${kind}] ${String(e.text ?? \"\")}`;\n    })\n    .join(\"\\n\");\n}\n\nfunction formatEval(result: unknown): string {\n  const value = asRecord(result).value;\n  return typeof value === \"string\" ? value : JSON.stringify(value, null, 2);\n}\n\nfunction formatScreenshot(result: unknown): string {\n  // Raw base64 PNG — the tool contract is \"base64 png\", not prose.\n  return String(asRecord(result).base64 ?? \"\");\n}\n\n// ---------------------------------------------------------------------------\n// Tool table: MCP name → wire command\n// ---------------------------------------------------------------------------\n\nexport const BROWSER_TOOLS: BrowserToolDef[] = [\n  {\n    name: \"tabs_list\",\n    description: \"List the tabs of the user's real running Chrome (id, title, url, active).\",\n    shape: {},\n    command: \"list_tabs\",\n    toParams: () => ({}),\n    format: formatTabs,\n  },\n  {\n    name: \"tab_open\",\n    description: \"Open a new tab in the user's Chrome and return its tab id.\",\n    shape: {\n      url: z.string().describe(\"URL to open.\"),\n      active: z.boolean().optional().describe(\"Focus the new tab (default true).\"),\n    },\n    command: \"open_tab\",\n    toParams: (a) => ({ url: a.url, ...(a.active !== undefined ? { active: a.active } : {}) }),\n  },\n  {\n    name: \"tab_select\",\n    description: \"Bring a tab to the front (activate it and focus its window).\",\n    shape: { tab: tabSchema },\n    command: \"select_tab\",\n    toParams: (a) => ({ tabId: a.tab }),\n  },\n  {\n    name: \"tab_close\",\n    description: \"Close a tab.\",\n    shape: { tab: tabSchema },\n    command: \"close_tab\",\n    toParams: (a) => ({ tabId: a.tab }),\n  },\n  {\n    name: \"dom_snapshot\",\n    description:\n      \"Snapshot a tab's DOM as an accessibility-tree YAML with [ref=sN] ids for interactive elements. \" +\n      \"Take a snapshot before dom_click/dom_type; refs stay valid until the next snapshot or navigation.\",\n    shape: { tab: tabSchema },\n    command: \"snapshot\",\n    toParams: (a) => ({ tabId: a.tab }),\n    format: formatSnapshot,\n  },\n  {\n    name: \"dom_click\",\n    description: \"Click an element by its [ref=sN] from the latest dom_snapshot (trusted CDP event).\",\n    shape: { tab: tabSchema, ref: z.string().describe(\"Ref id from dom_snapshot, e.g. s3.\") },\n    command: \"click\",\n    toParams: (a) => ({ tabId: a.tab, ref: a.ref }),\n  },\n  {\n    name: \"dom_type\",\n    description:\n      \"Focus an element by its [ref=sN] and type text into it (inserts at the caret, works in SPAs).\",\n    shape: {\n      tab: tabSchema,\n      ref: z.string().describe(\"Ref id from dom_snapshot, e.g. s5.\"),\n      text: z.string().describe(\"Text to type.\"),\n    },\n    command: \"type\",\n    toParams: (a) => ({ tabId: a.tab, ref: a.ref, text: a.text }),\n  },\n  {\n    name: \"page_text\",\n    description: \"Read a tab's visible text (document.body.innerText).\",\n    shape: { tab: tabSchema },\n    command: \"eval\",\n    toParams: () => ({ code: \"document.body.innerText\" }),\n    format: formatEval,\n  },\n  {\n    name: \"eval_js\",\n    description: \"Evaluate JavaScript in a tab and return the JSON-safe result. Awaits promises.\",\n    shape: {\n      tab: tabSchema,\n      code: z.string().describe(\"JavaScript expression to evaluate.\"),\n    },\n    command: \"eval\",\n    toParams: (a) => ({ code: a.code }),\n    format: formatEval,\n  },\n  {\n    name: \"tab_screenshot\",\n    description: \"Screenshot a tab (PNG, base64).\",\n    shape: { tab: tabSchema },\n    command: \"screenshot\",\n    toParams: (a) => ({ tabId: a.tab }),\n    format: formatScreenshot,\n  },\n  {\n    name: \"console_logs\",\n    description: \"Read the console output captured for a tab since its last snapshot.\",\n    shape: { tab: tabSchema },\n    command: \"console_logs\",\n    toParams: (a) => ({ tabId: a.tab }),\n    format: formatLogs,\n  },\n];\n\n/** Runs one tool against the bridge; returns MCP content + isError. */\nexport async function runBrowserTool(\n  def: BrowserToolDef,\n  args: Record<string, unknown>,\n  bridge: BridgeLike\n): Promise<{ content: Array<{ type: \"text\"; text: string }>; isError?: boolean }> {\n  try {\n    const result = await bridge.send(def.command, def.toParams(args));\n    return { content: [{ type: \"text\", text: def.format ? def.format(result) : JSON.stringify(result, null, 2) }] };\n  } catch (e) {\n    const msg =\n      e instanceof NotConnectedError\n        ? e.message\n        : e instanceof Error\n          ? e.message\n          : String(e);\n    return { content: [{ type: \"text\", text: msg }], isError: true };\n  }\n}\n\n/** Registers every browser tool on an MCP server. */\nexport function registerBrowserTools(server: McpServer, bridge: BridgeLike): void {\n  for (const def of BROWSER_TOOLS) {\n    server.tool(def.name, def.description, def.shape, (args) => runBrowserTool(def, args, bridge));\n  }\n}\n","#!/usr/bin/env node\n/**\n * pai-browser-mcp — stdio MCP server for the PAI browser bridge.\n *\n * The provider-independent claude-in-chrome replacement: drives the user's\n * real running Chrome (tabs + DOM) through the browser-bridge extension's\n * native messaging host, over ws://127.0.0.1:8756. Any MCP client works —\n * nothing here is Anthropic-specific.\n *\n *   provider → MCP (this server) → WebSocket → native host → extension → Chrome\n *\n * If Chrome is not running (or the extension is not loaded), every tool\n * returns a clear \"start Chrome\" error; the server itself stays alive and\n * reconnects lazily per call.\n */\n\nimport { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { BridgeClient, globalWebSocketFactory } from \"./bridge-client.js\";\nimport { registerBrowserTools } from \"./tools.js\";\n\nasync function main(): Promise<void> {\n  if (globalThis.WebSocket === undefined) {\n    // Node < 22 has no global WebSocket client; say so instead of crashing\n    // with an opaque TypeError when the first tool call connects.\n    process.stderr.write(\n      \"pai-browser-mcp: this node runtime has no global WebSocket — run with node >= 22\\n\"\n    );\n    process.exit(1);\n  }\n\n  const server = new McpServer({\n    name: \"pai-browser\",\n    version: \"0.1.0\",\n  });\n\n  const bridge = new BridgeClient(undefined, globalWebSocketFactory);\n  registerBrowserTools(server, bridge);\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n}\n\nmain().catch((e) => {\n  process.stderr.write(`pai-browser-mcp fatal error: ${String(e)}\\n`);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;AASA,MAAa,cAAc,OAAO,QAAQ,IAAI,2BAA2B,KAAK;AAC9E,MAAa,aAAa,kBAAkB;AAE5C,MAAa,wBACX;AAeF,MAAa,0BAA4C,QAAQ;CAC/D,MAAM,KAAM,WAAkE;AAC9E,KAAI,CAAC,GACH,OAAM,IAAI,MACR,+EACD;AAEH,QAAO,IAAI,GAAG,IAAI;;AAGpB,IAAa,oBAAb,cAAuC,MAAM;CAC3C,cAAc;AACZ,QAAM,sBAAsB;AAC5B,OAAK,OAAO;;;AAWhB,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAC3B,MAAM,OAAO;AAEb,IAAa,eAAb,MAA0B;CACxB,AAAQ,SAA+B;CACvC,AAAQ,aAA4C;CACpD,AAAQ,SAAS;CACjB,AAAiB,0BAAU,IAAI,KAG5B;CAEH,YACE,AAAiB,MAAc,YAC/B,AAAiB,gBAAkC,wBACnD;EAFiB;EACA;;;CAInB,IAAI,YAAqB;AACvB,SAAO,KAAK,WAAW,QAAQ,KAAK,OAAO,eAAe;;CAG5D,AAAQ,eAAuC;AAC7C,MAAI,KAAK,UAAU,KAAK,OAAO,eAAe,KAAM,QAAO,QAAQ,QAAQ,KAAK,OAAO;AACvF,MAAI,KAAK,WAAY,QAAO,KAAK;AACjC,OAAK,YAAY;EACjB,MAAM,UAAU,IAAI,SAAwB,SAAS,WAAW;GAC9D,IAAI;AACJ,OAAI;AACF,aAAS,KAAK,cAAc,KAAK,IAAI;YAC9B,GAAG;AACV,WAAO,EAAE;AACT;;GAEF,MAAM,QAAQ,iBAAiB;AAC7B,WAAO,IAAI,mBAAmB,CAAC;AAC/B,WAAO,SAAS;AAChB,WAAO,UAAU;AACjB,WAAO,UAAU;AACjB,WAAO,YAAY;AACnB,QAAI;AACF,YAAO,OAAO;YACR;MAGP,mBAAmB;AACtB,UAAO,eAAe;AACpB,iBAAa,MAAM;AACnB,SAAK,SAAS;AACd,YAAQ,OAAO;;AAEjB,UAAO,gBAAgB;AACrB,iBAAa,MAAM;AACnB,SAAK,YAAY;AACjB,WAAO,IAAI,mBAAmB,CAAC;;AAEjC,UAAO,gBAAgB;AACrB,iBAAa,MAAM;AACnB,SAAK,YAAY;AACjB,WAAO,IAAI,mBAAmB,CAAC;;AAEjC,UAAO,aAAa,OAAO,KAAK,UAAU,GAAG;IAC7C;AACF,OAAK,aAAa;EAClB,MAAM,cAAc;AAClB,OAAI,KAAK,eAAe,QAAS,MAAK,aAAa;;AAErD,UAAQ,KAAK,OAAO,MAAM;AAC1B,SAAO;;CAGT,AAAQ,aAAmB;AACzB,MAAI,KAAK,QAAQ;AACf,QAAK,OAAO,SAAS;AACrB,QAAK,OAAO,UAAU;AACtB,QAAK,OAAO,UAAU;AACtB,QAAK,OAAO,YAAY;AACxB,OAAI;AACF,SAAK,OAAO,OAAO;WACb;AAGR,QAAK,SAAS;;AAGhB,OAAK,MAAM,GAAG,MAAM,KAAK,SAAS;AAChC,gBAAa,EAAE,MAAM;AACrB,KAAE,OAAO,IAAI,mBAAmB,CAAC;;AAEnC,OAAK,QAAQ,OAAO;;CAGtB,AAAQ,UAAU,IAA4B;EAC5C,IAAI;AACJ,MAAI;AACF,WAAQ,KAAK,MAAM,GAAG,KAAK;UACrB;AACN;;EAEF,MAAM,IAAI,OAAO,OAAO,SAAY,KAAK,QAAQ,IAAI,MAAM,GAAG,GAAG;AACjE,MAAI,CAAC,EAAG;AACR,OAAK,QAAQ,OAAO,MAAM,GAAG;AAC7B,eAAa,EAAE,MAAM;AACrB,IAAE,QAAQ,MAAM;;;;;;CAOlB,MAAM,KAAK,SAAiB,SAAkC,EAAE,EAAoB;AAClF,QAAM,KAAK,cAAc;EACzB,MAAM,KAAK,KAAK;EAChB,MAAM,QAAQ,KAAK,UAAU;GAAE;GAAI;GAAS,GAAG;GAAQ,CAAC;AACxD,SAAO,IAAI,SAAkB,SAAS,WAAW;GAC/C,MAAM,QAAQ,iBAAiB;AAC7B,SAAK,QAAQ,OAAO,GAAG;AACvB,WAAO,IAAI,mBAAmB,CAAC;MAC9B,mBAAmB;AACtB,QAAK,QAAQ,IAAI,IAAI;IACnB,UAAU,UAAW,MAAM,KAAK,QAAQ,MAAM,OAAO,GAAG,OAAO,IAAI,MAAM,MAAM,SAAS,eAAe,CAAC;IACxG;IACA;IACD,CAAC;AACF,OAAI;AACF,SAAK,OAAQ,KAAK,MAAM;YACjB,GAAG;AACV,SAAK,QAAQ,OAAO,GAAG;AACvB,iBAAa,MAAM;AACnB,WAAO,IAAI,mBAAmB,CAAC;;IAEjC;;CAGJ,QAAc;AACZ,OAAK,YAAY;;;;;;AC9JrB,MAAM,YAAYA,QAAU,CAAC,KAAK,CAAC,SAAS,oCAAoC;AAEhF,SAAS,SAAS,GAAqC;AACrD,QAAQ,KAAK,EAAE;;AAOjB,SAAS,WAAW,QAAyB;CAC3C,MAAM,OAAQ,MAAM,QAAQ,OAAO,GAAG,SAAS,SAAS,OAAO,CAAC;AAGhE,KAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,WAAW,EAAG,QAAO;AACtD,QAAO,KACJ,KACE,MACC,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,KAAK,GAAG,OAAO,EAAE,SAAS,GAAG,CAAC,SAAS,OAAO,EAAE,OAAO,GAAG,GACzF,CACA,KAAK,KAAK;;AAGf,SAAS,eAAe,QAAyB;AAC/C,QAAO,OAAO,SAAS,OAAO,CAAC,QAAQ,GAAG;;AAG5C,SAAS,WAAW,QAAyB;CAC3C,MAAM,UAAU,SAAS,OAAO,CAAC;AACjC,KAAI,CAAC,MAAM,QAAQ,QAAQ,IAAI,QAAQ,WAAW,EAAG,QAAO;AAC5D,QAAO,QACJ,KAAK,MAAM;AAEV,SAAO,IADM,EAAE,WAAW,YAAY,OAAO,EAAE,QAAQ,MAAM,GAAG,OAAO,EAAE,SAAS,MAAM,CACxE,IAAI,OAAO,EAAE,QAAQ,GAAG;GACxC,CACD,KAAK,KAAK;;AAGf,SAAS,WAAW,QAAyB;CAC3C,MAAM,QAAQ,SAAS,OAAO,CAAC;AAC/B,QAAO,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,OAAO,MAAM,EAAE;;AAG3E,SAAS,iBAAiB,QAAyB;AAEjD,QAAO,OAAO,SAAS,OAAO,CAAC,UAAU,GAAG;;AAO9C,MAAa,gBAAkC;CAC7C;EACE,MAAM;EACN,aAAa;EACb,OAAO,EAAE;EACT,SAAS;EACT,iBAAiB,EAAE;EACnB,QAAQ;EACT;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO;GACL,KAAKC,QAAU,CAAC,SAAS,eAAe;GACxC,QAAQC,SAAW,CAAC,UAAU,CAAC,SAAS,oCAAoC;GAC7E;EACD,SAAS;EACT,WAAW,OAAO;GAAE,KAAK,EAAE;GAAK,GAAI,EAAE,WAAW,SAAY,EAAE,QAAQ,EAAE,QAAQ,GAAG,EAAE;GAAG;EAC1F;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO,EAAE,KAAK,WAAW;EACzB,SAAS;EACT,WAAW,OAAO,EAAE,OAAO,EAAE,KAAK;EACnC;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO,EAAE,KAAK,WAAW;EACzB,SAAS;EACT,WAAW,OAAO,EAAE,OAAO,EAAE,KAAK;EACnC;CACD;EACE,MAAM;EACN,aACE;EAEF,OAAO,EAAE,KAAK,WAAW;EACzB,SAAS;EACT,WAAW,OAAO,EAAE,OAAO,EAAE,KAAK;EAClC,QAAQ;EACT;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO;GAAE,KAAK;GAAW,KAAKD,QAAU,CAAC,SAAS,qCAAqC;GAAE;EACzF,SAAS;EACT,WAAW,OAAO;GAAE,OAAO,EAAE;GAAK,KAAK,EAAE;GAAK;EAC/C;CACD;EACE,MAAM;EACN,aACE;EACF,OAAO;GACL,KAAK;GACL,KAAKA,QAAU,CAAC,SAAS,qCAAqC;GAC9D,MAAMA,QAAU,CAAC,SAAS,gBAAgB;GAC3C;EACD,SAAS;EACT,WAAW,OAAO;GAAE,OAAO,EAAE;GAAK,KAAK,EAAE;GAAK,MAAM,EAAE;GAAM;EAC7D;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO,EAAE,KAAK,WAAW;EACzB,SAAS;EACT,iBAAiB,EAAE,MAAM,2BAA2B;EACpD,QAAQ;EACT;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO;GACL,KAAK;GACL,MAAMA,QAAU,CAAC,SAAS,qCAAqC;GAChE;EACD,SAAS;EACT,WAAW,OAAO,EAAE,MAAM,EAAE,MAAM;EAClC,QAAQ;EACT;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO,EAAE,KAAK,WAAW;EACzB,SAAS;EACT,WAAW,OAAO,EAAE,OAAO,EAAE,KAAK;EAClC,QAAQ;EACT;CACD;EACE,MAAM;EACN,aAAa;EACb,OAAO,EAAE,KAAK,WAAW;EACzB,SAAS;EACT,WAAW,OAAO,EAAE,OAAO,EAAE,KAAK;EAClC,QAAQ;EACT;CACF;;AAGD,eAAsB,eACpB,KACA,MACA,QACgF;AAChF,KAAI;EACF,MAAM,SAAS,MAAM,OAAO,KAAK,IAAI,SAAS,IAAI,SAAS,KAAK,CAAC;AACjE,SAAO,EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM,IAAI,SAAS,IAAI,OAAO,OAAO,GAAG,KAAK,UAAU,QAAQ,MAAM,EAAE;GAAE,CAAC,EAAE;UACxG,GAAG;AAOV,SAAO;GAAE,SAAS,CAAC;IAAE,MAAM;IAAQ,MALjC,aAAa,oBACT,EAAE,UACF,aAAa,QACX,EAAE,UACF,OAAO,EAAE;IAC6B,CAAC;GAAE,SAAS;GAAM;;;;AAKpE,SAAgB,qBAAqB,QAAmB,QAA0B;AAChF,MAAK,MAAM,OAAO,cAChB,QAAO,KAAK,IAAI,MAAM,IAAI,aAAa,IAAI,QAAQ,SAAS,eAAe,KAAK,MAAM,OAAO,CAAC;;;;;;;;;;;;;;;;;;;ACvLlG,eAAe,OAAsB;AACnC,KAAI,WAAW,cAAc,QAAW;AAGtC,UAAQ,OAAO,MACb,qFACD;AACD,UAAQ,KAAK,EAAE;;CAGjB,MAAM,SAAS,IAAI,UAAU;EAC3B,MAAM;EACN,SAAS;EACV,CAAC;AAGF,sBAAqB,QADN,IAAI,aAAa,QAAW,uBAAuB,CAC9B;CAEpC,MAAM,YAAY,IAAI,sBAAsB;AAC5C,OAAM,OAAO,QAAQ,UAAU;;AAGjC,MAAM,CAAC,OAAO,MAAM;AAClB,SAAQ,OAAO,MAAM,gCAAgC,OAAO,EAAE,CAAC,IAAI;AACnE,SAAQ,KAAK,EAAE;EACf"}

package/dist/{chain-DhVHVnmT.mjs → chain-zMjCDW-R.mjs}

@@ -17,6 +17,7 @@ function parseRunnerArgs(argv) {
 	let callerMcpConfig = false;
 	let callerSystemPrompt = false;
 	const mcp = [];
+	const allowedTools = [];
 	let i = 0;
 	while (i < argv.length) {
 		const a = argv[i];
@@ -42,7 +43,18 @@ function parseRunnerArgs(argv) {
 				i += 1;
 			}
 		} else if (a.startsWith("--mcp=")) mcp.push(a.slice(6));
-		else {
+		else if (a === "--allowedTools") {
+			rest.push(a);
+			const v = argv[i + 1];
+			if (v !== void 0 && !v.startsWith("-")) {
+				allowedTools.push(v);
+				rest.push(v);
+				i += 1;
+			}
+		} else if (a.startsWith("--allowedTools=")) {
+			allowedTools.push(a.slice(15));
+			rest.push(a);
+		} else {
 			if (a === "--model") callerModel = true;
 			if (a.startsWith("--model=")) callerModel = true;
 			if (a === "--mcp-config") callerMcpConfig = true;
@@ -62,7 +74,8 @@ function parseRunnerArgs(argv) {
 		callerModel,
 		callerMcpConfig,
 		callerSystemPrompt,
-		mcp
+		mcp,
+		allowedTools
 	};
 }
 /**
@@ -1607,9 +1620,11 @@ function relShort(p, cwd) {
 * Headless workers start with NO MCP servers: every server definition is a
 * prompt-time tool inventory the model pays to know, and a worker that only
 * reads and edits files needs none of it. A run may opt in with `--mcp
-* name[,name…]` (or a role carrying `"mcp": [...]`); names may be single
-* servers from ~/.claude.json's `mcpServers` or `workers.mcpSets` set names,
-* which expand to their member list. The filtered config lands in
+* name[,name…]`, a role carrying `"mcp": [...]`, or implicitly by naming
+* `mcp__server__tool` in --allowedTools (a grant without its server loaded is
+* a dead letter). Names may be single servers from ~/.claude.json's
+* `mcpServers` or `workers.mcpSets` set names, which expand to their member
+* list. The filtered config lands in
 * `<logDir>/<id>.mcp.json` and is passed with `--strict-mcp-config
 * --mcp-config` so exactly those servers load. MCP servers are chosen at
 * launch only — a mid-run `say` cannot add any.
@@ -1646,6 +1661,22 @@ function expandMcpNames(names, config, claudeJson = CLAUDE_JSON) {
 	}
 	return out;
 }
+/**
+* Derive server names from tool grants: every `mcp__<server>__<tool>` (or bare
+* `mcp__<server>`, or `mcp__<server>__*`) in an --allowedTools list names a
+* server the run expects to be loaded. A grant is a dead letter unless its
+* server is in the filtered config, so the runner treats these as implicit
+* --mcp names — and only these; non-mcp grants load nothing.
+*/
+function mcpServersFromToolGrants(tools) {
+	const out = [];
+	for (const entry of tools) for (const name of entry.split(",").map((s) => s.trim()).filter(Boolean)) {
+		if (!name.startsWith("mcp__")) continue;
+		const server = name.slice(5).split("__")[0];
+		if (server && !out.includes(server)) out.push(server);
+	}
+	return out;
+}
 /** Path of a run's filtered MCP config. */
 function runMcpConfigPath(logDir, id) {
 	return join(logDir, `${id}.mcp.json`);
@@ -1961,7 +1992,7 @@ async function runWorker(opts) {
 	const logDir = workersLogDir(config);
 	mkdirSync(logDir, { recursive: true });
 	if (opts.className === "plan" && !opts._planner) {
-		const { runPlanner } = await import("./planner-Cm3g6fWH.mjs");
+		const { runPlanner } = await import("./planner-DsmMRIZR.mjs");
 		return runPlanner(opts);
 	}
 	const parent = launchParent(opts.parent);
@@ -2093,7 +2124,8 @@ async function executeRun(a) {
 		const wanted = [
 			...a.mcpFlag ? [a.mcpFlag] : [],
 			...parsed.mcp,
-			...target.classMcp ?? []
+			...target.classMcp ?? [],
+			...mcpServersFromToolGrants(parsed.allowedTools)
 		];
 		if (wanted.length) mcpArgs = [
 			"--strict-mcp-config",
@@ -2794,4 +2826,4 @@ async function runChain(opts, deps = {}) {
 
 //#endregion
 export { appendLedger as A, ageOf as C, loadStatus as D, contextPercent as E, parseRunnerArgs as M, shortText as N, loadStatuses as O, UNLABELED as S, contextLabel as T, openPaneForWorker as _, testProvider as a, sessionTag as b, renderReport as c, handoffFromInside as d, readInbox as f, openFollowPane as g, checkPaneForWorker as h, runWorker as i, ledgerSummary as j, newWorkerId as k, discardWorker as l, workerDepth as m, swapPromptArg as n, describeMcp as o, sayToWorker as p, printResult as r, parseWorkerReport as s, runChain as t, mergeWorker as u, currentTabKey as v, alive as w, workerInScope as x, resolveSession as y };
-//# sourceMappingURL=chain-DhVHVnmT.mjs.map
+//# sourceMappingURL=chain-zMjCDW-R.mjs.map