@wrongstack/tools 0.285.0 → 0.287.0

package/README.md

@@ -42,6 +42,24 @@ pnpm add @wrongstack/tools @wrongstack/core
 | `fetch` | `auto` | no | SSRF-hardened (IPv4 + IPv6 private CIDR, redirect re-validation, http://-downgrade refused) |
 | `search` | `auto` | no | Web search via configured provider |
 
+### Browser
+
+First-party `browser_*` tools lazily launch Playwright Chromium and use isolated per-agent
+contexts. Observation tools are automatic; navigation, interaction, screenshot persistence,
+upload, and evaluation require confirmation where appropriate. See
+[browser automation](../../docs/browser-automation.md) for the lifecycle and security contract.
+Credential entry uses `browser_type.secretEnv` so audit records retain a placeholder rather than
+the secret value.
+
+### E2E discovery
+
+| Tool | Permission | Mutating | Notes |
+|------|------------|----------|-------|
+| `e2e_plan` | `auto` | no | Statically discovers Playwright/Cypress configs, servers, specs, and exact argv without evaluating project code |
+
+See [the browser-aware E2E runner guide](../../docs/e2e-runner.md). Process startup and test
+execution remain separate permission-gated steps.
+
 ### Project lifecycle
 
 | Tool | Permission | Notes |
@@ -51,10 +69,10 @@ pnpm add @wrongstack/tools @wrongstack/core
 | `typecheck` | `auto` | Project-aware typechecker |
 | `test` | `confirm` | Project-aware test runner |
 | `install` | `confirm` | Package manager install |
-| `audit` | `auto` | Dependency vuln audit |
+| `audit` | `confirm` | Dependency vulnerability audit |
 | `outdated` | `auto` | List outdated dependencies |
 | `scaffold` | `confirm` | Template-based scaffolding |
-| `document` | `confirm` | Inline JSDoc generation |
+| `document` | `auto` | Deprecated read-only documentation-candidate preview; use plugin tool `auto_doc` for generation |
 | `logs` | `auto` | Tail logs with rolling 100k-line window |
 
 ### Agent control
@@ -87,6 +105,7 @@ const all = new ToolRegistry(builtinTools);
 - **`bash` / `exec` child env sanitized** to a fixed allowlist + secret-substring strip (`TOKEN` / `SECRET` / `PASSWORD` / `AUTH` / `BEARER` / `COOKIE` / `PRIVATE` / `KEY`). Opt-out via `WRONGSTACK_BASH_ENV_PASSTHROUGH=1`.
 - **`bash` POSIX process-group kill** with `SIGTERM → 800 ms → SIGKILL`. Runaway grandchildren can't survive the timeout.
 - **`fetch` SSRF defenses**: numeric CIDR checks for IPv4 (`10/8`, `127/8`, `169.254/16`, `100.64/10`, `224/4`, `240/4`, …) and 8-group-expanded IPv6 (including Node's compressed `::ffff:7f00:1` form for v4-mapped addresses). Redirect target re-validated on every hop. `http://` downgrade refused.
+- **`browser_*` isolation and SSRF defenses**: one context per agent/session, private-host and URL-credential rejection, guarded subrequests, disabled downloads, project-root-confined uploads, bounded/redacted evidence, and abort/run-disposal cleanup.
 - **`patch` diff-target validation**: every `+++` target post-strip is resolved against `projectRoot` before GNU patch sees the diff. `strip` clamped to `≥1`. Temp diff written to a `0700 mkdtemp` directory. Run with `LANG=C` / `LC_ALL=C`.
 - **`replace` / `grep` symlink-safe**: lstat + realpath + projectRoot revalidation; symlinks skipped, not followed.
 - **User-regex ReDoS guard** (`_regex.ts`): 512-char cap, nested-quantifier rejection (`(a+)+`, `(?:x+)*`), 64 KB subject-line cap. Applied to `grep`, `replace`, `logs`.

package/dist/_edit-match.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_edit-match.d.ts","sourceRoot":"","sources":["../src/_edit-match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,qBAAqB,GAAG,uBAAuB,GAAG,OAAO,CAAC;AAE5F,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACjC;AAED,uEAAuE;AACvE,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAMhD,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAKlF,CAAC;AAYF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CA+BzF;AA6GD,qEAAqE;AACrE,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAUvD;AAyBD,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAkBrC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CA0B/C"}
+{"version":3,"file":"_edit-match.d.ts","sourceRoot":"","sources":["../src/_edit-match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,qBAAqB,GAAG,uBAAuB,GAAG,OAAO,CAAC;AAE5F,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACjC;AAED,uEAAuE;AACvE,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAMhD,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAKlF,CAAC;AAYF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CA+CzF;AA4HD,qEAAqE;AACrE,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAUvD;AAyBD,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAkBrC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CA0B/C"}

package/dist/batch-tool-use.d.ts

@@ -1,4 +1,4 @@
-import type { Tool } from '@wrongstack/core';
+import { type Tool } from '@wrongstack/core';
 interface BatchToolUseInput {
     calls: {
         tool: string;

package/dist/batch-tool-use.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"batch-tool-use.d.ts","sourceRoot":"","sources":["../src/batch-tool-use.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,UAAU,iBAAiB;IACzB,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,EAAE,CAAC;IACJ,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED,UAAU,kBAAkB;IAC1B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;IACJ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,CAoFxE,CAAC"}
+{"version":3,"file":"batch-tool-use.d.ts","sourceRoot":"","sources":["../src/batch-tool-use.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,IAAI,EACV,MAAM,kBAAkB,CAAC;AAE1B,UAAU,iBAAiB;IACzB,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,EAAE,CAAC;IACJ,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED,UAAU,kBAAkB;IAC1B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;IACJ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,CAsGxE,CAAC"}

package/dist/batch-tool-use.js

@@ -1,4 +1,7 @@
 // src/batch-tool-use.ts
+import {
+  GOVERNED_TOOL_EXECUTOR_META_KEY
+} from "@wrongstack/core";
 var batchToolUseTool = {
   name: "batch_tool_use",
   category: "Meta",
@@ -35,7 +38,7 @@ var batchToolUseTool = {
     },
     required: ["calls"]
   },
-  async execute(input, ctx, opts) {
+  async execute(input, ctx, _opts) {
     if (!input?.calls || input.calls.length === 0) {
       return {
         results: [],
@@ -45,18 +48,33 @@ var batchToolUseTool = {
         stop_on_error: false
       };
     }
+    const governedExecute = ctx.meta[GOVERNED_TOOL_EXECUTOR_META_KEY];
+    if (typeof governedExecute !== "function") {
+      return {
+        results: input.calls.map((call) => ({
+          tool: call.tool,
+          success: false,
+          error: "governed nested execution is unavailable; call the tool directly",
+          executionMs: 0
+        })),
+        total: input.calls.length,
+        succeeded: 0,
+        failed: input.calls.length,
+        stop_on_error: input.stop_on_error ?? false
+      };
+    }
     const results = [];
     let succeeded = 0;
     let failed = 0;
     if (input.parallel !== false) {
-      const promises = input.calls.map(async (call) => executeSingle(call, ctx, opts));
+      const promises = input.calls.map(async (call) => executeSingle(call, ctx, governedExecute));
       const allResults = await Promise.all(promises);
       results.push(...allResults);
       succeeded = allResults.filter((r) => r.success).length;
       failed = allResults.filter((r) => !r.success).length;
     } else {
       for (const call of input.calls) {
-        const result = await executeSingle(call, ctx, opts ?? { signal: void 0 });
+        const result = await executeSingle(call, ctx, governedExecute);
         results.push(result);
         if (result.success) {
           succeeded++;
@@ -75,9 +93,9 @@ var batchToolUseTool = {
     };
   }
 };
-async function executeSingle(call, ctx, opts) {
+async function executeSingle(call, ctx, governedExecute) {
   const start = Date.now();
-  const tool = ctx.tools.find((t) => t.name === call.tool);
+  const tool = ctx.tools.find((candidate) => candidate.name === call.tool);
   if (!tool) {
     return {
       tool: call.tool,
@@ -87,11 +105,11 @@ async function executeSingle(call, ctx, opts) {
     };
   }
   try {
-    const result = await tool.execute(call.input, ctx, opts);
+    const result = await governedExecute(call.tool, call.input);
     return {
       tool: call.tool,
-      success: true,
-      result,
+      success: result.success,
+      ...result.success ? { result: result.result } : { error: result.error ?? "nested tool failed" },
       executionMs: Date.now() - start
     };
   } catch (e) {

package/dist/batch-tool-use.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/batch-tool-use.ts"],
-  "sourcesContent": ["import type { Tool } from '@wrongstack/core';\n\ninterface BatchToolUseInput {\n  calls: {\n    tool: string;\n    input: Record<string, unknown>;\n  }[];\n  stop_on_error?: boolean | undefined;\n  parallel?: boolean | undefined;\n}\n\ninterface BatchToolUseOutput {\n  results: {\n    tool: string;\n    success: boolean;\n    result?: unknown | undefined;\n    error?: string | undefined;\n    executionMs: number;\n  }[];\n  total: number;\n  succeeded: number;\n  failed: number;\n  stop_on_error: boolean;\n}\n\nexport const batchToolUseTool: Tool<BatchToolUseInput, BatchToolUseOutput> = {\n  name: 'batch_tool_use',\n  category: 'Meta',\n  description:\n    'Execute a batch of tool calls either sequentially or in parallel. Returns structured results for every call.',\n  usageHint:\n    'ADVANCED / POWER USER TOOL:\\n\\n' +\n    '- Useful when you have a clear list of independent operations to perform.\\n' +\n    '- `parallel: true` (default) runs them concurrently for speed.\\n' +\n    '- `stop_on_error: true` makes it fail fast on the first error.\\n' +\n    'Use with care \u2014 batching many mutating operations can be risky. Prefer explicit sequential steps for important work.',\n  permission: 'confirm',\n  mutating: true,\n  timeoutMs: 120_000,\n  capabilities: ['tool.mutate.any'],\n  icon: 'meta',\n  inputSchema: {\n    type: 'object',\n    properties: {\n      calls: {\n        type: 'array',\n        items: {\n          type: 'object',\n          properties: {\n            tool: { type: 'string' },\n            input: { type: 'object' },\n          },\n          required: ['tool'],\n        },\n        description: 'Array of tool calls to execute',\n      },\n      stop_on_error: {\n        type: 'boolean',\n        description: 'Stop execution on first error (default: false)',\n      },\n      parallel: {\n        type: 'boolean',\n        description: 'Execute calls in parallel (default: true)',\n      },\n    },\n    required: ['calls'],\n  },\n  async execute(input, ctx, opts) {\n    if (!input?.calls || input.calls.length === 0) {\n      return {\n        results: [],\n        total: 0,\n        succeeded: 0,\n        failed: 0,\n        stop_on_error: false,\n      };\n    }\n\n    const results: BatchToolUseOutput['results'] = [];\n    let succeeded = 0;\n    let failed = 0;\n\n    if (input.parallel !== false) {\n      const promises = input.calls.map(async (call) => executeSingle(call, ctx, opts));\n      const allResults = await Promise.all(promises);\n      results.push(...allResults);\n      succeeded = allResults.filter((r) => r.success).length;\n      failed = allResults.filter((r) => !r.success).length;\n    } else {\n      for (const call of input.calls) {\n        const result = await executeSingle(call, ctx, opts ?? { signal: undefined as never as AbortSignal });\n        results.push(result);\n        if (result.success) {\n          succeeded++;\n        } else {\n          failed++;\n          if (input.stop_on_error) break;\n        }\n      }\n    }\n\n    return {\n      results,\n      total: input.calls.length,\n      succeeded,\n      failed,\n      stop_on_error: input.stop_on_error ?? false,\n    };\n  },\n};\n\nasync function executeSingle(\n  call: { tool: string; input: Record<string, unknown> },\n  ctx: import('@wrongstack/core').Context,\n  opts: { signal: AbortSignal },\n): Promise<BatchToolUseOutput['results'][0]> {\n  const start = Date.now();\n  const tool = ctx.tools.find((t: Tool) => t.name === call.tool);\n\n  if (!tool) {\n    return {\n      tool: call.tool,\n      success: false,\n      error: `tool \"${call.tool}\" not found`,\n      executionMs: Date.now() - start,\n    };\n  }\n\n  try {\n    const result = await tool.execute(call.input, ctx, opts);\n    return {\n      tool: call.tool,\n      success: true,\n      result,\n      executionMs: Date.now() - start,\n    };\n  } catch (e) {\n    return {\n      tool: call.tool,\n      success: false,\n      error: e instanceof Error ? e.message : String(e),\n      executionMs: Date.now() - start,\n    };\n  }\n}\n"],
-  "mappings": ";AAyBO,IAAM,mBAAgE;AAAA,EAC3E,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aACE;AAAA,EACF,WACE;AAAA,EAKF,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AAAA,EACX,cAAc,CAAC,iBAAiB;AAAA,EAChC,MAAM;AAAA,EACN,aAAa;AAAA,IACX,MAAM;AAAA,IACN,YAAY;AAAA,MACV,OAAO;AAAA,QACL,MAAM;AAAA,QACN,OAAO;AAAA,UACL,MAAM;AAAA,UACN,YAAY;AAAA,YACV,MAAM,EAAE,MAAM,SAAS;AAAA,YACvB,OAAO,EAAE,MAAM,SAAS;AAAA,UAC1B;AAAA,UACA,UAAU,CAAC,MAAM;AAAA,QACnB;AAAA,QACA,aAAa;AAAA,MACf;AAAA,MACA,eAAe;AAAA,QACb,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,UAAU,CAAC,OAAO;AAAA,EACpB;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK,MAAM;AAC9B,QAAI,CAAC,OAAO,SAAS,MAAM,MAAM,WAAW,GAAG;AAC7C,aAAO;AAAA,QACL,SAAS,CAAC;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,UAAyC,CAAC;AAChD,QAAI,YAAY;AAChB,QAAI,SAAS;AAEb,QAAI,MAAM,aAAa,OAAO;AAC5B,YAAM,WAAW,MAAM,MAAM,IAAI,OAAO,SAAS,cAAc,MAAM,KAAK,IAAI,CAAC;AAC/E,YAAM,aAAa,MAAM,QAAQ,IAAI,QAAQ;AAC7C,cAAQ,KAAK,GAAG,UAAU;AAC1B,kBAAY,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AAChD,eAAS,WAAW,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE;AAAA,IAChD,OAAO;AACL,iBAAW,QAAQ,MAAM,OAAO;AAC9B,cAAM,SAAS,MAAM,cAAc,MAAM,KAAK,QAAQ,EAAE,QAAQ,OAAkC,CAAC;AACnG,gBAAQ,KAAK,MAAM;AACnB,YAAI,OAAO,SAAS;AAClB;AAAA,QACF,OAAO;AACL;AACA,cAAI,MAAM,cAAe;AAAA,QAC3B;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,MAAM,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,eAAe,MAAM,iBAAiB;AAAA,IACxC;AAAA,EACF;AACF;AAEA,eAAe,cACb,MACA,KACA,MAC2C;AAC3C,QAAM,QAAQ,KAAK,IAAI;AACvB,QAAM,OAAO,IAAI,MAAM,KAAK,CAAC,MAAY,EAAE,SAAS,KAAK,IAAI;AAE7D,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,MACT,OAAO,SAAS,KAAK,IAAI;AAAA,MACzB,aAAa,KAAK,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,QAAQ,KAAK,OAAO,KAAK,IAAI;AACvD,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,MACT;AAAA,MACA,aAAa,KAAK,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF,SAAS,GAAG;AACV,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,MACT,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,MAChD,aAAa,KAAK,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF;AACF;",
+  "sourcesContent": ["import {\n  GOVERNED_TOOL_EXECUTOR_META_KEY,\n  type GovernedToolExecutor,\n  type Tool,\n} from '@wrongstack/core';\n\ninterface BatchToolUseInput {\n  calls: {\n    tool: string;\n    input: Record<string, unknown>;\n  }[];\n  stop_on_error?: boolean | undefined;\n  parallel?: boolean | undefined;\n}\n\ninterface BatchToolUseOutput {\n  results: {\n    tool: string;\n    success: boolean;\n    result?: unknown | undefined;\n    error?: string | undefined;\n    executionMs: number;\n  }[];\n  total: number;\n  succeeded: number;\n  failed: number;\n  stop_on_error: boolean;\n}\n\nexport const batchToolUseTool: Tool<BatchToolUseInput, BatchToolUseOutput> = {\n  name: 'batch_tool_use',\n  category: 'Meta',\n  description:\n    'Execute a batch of tool calls either sequentially or in parallel. Returns structured results for every call.',\n  usageHint:\n    'ADVANCED / POWER USER TOOL:\\n\\n' +\n    '- Useful when you have a clear list of independent operations to perform.\\n' +\n    '- `parallel: true` (default) runs them concurrently for speed.\\n' +\n    '- `stop_on_error: true` makes it fail fast on the first error.\\n' +\n    'Use with care \u2014 batching many mutating operations can be risky. Prefer explicit sequential steps for important work.',\n  permission: 'confirm',\n  mutating: true,\n  timeoutMs: 120_000,\n  capabilities: ['tool.mutate.any'],\n  icon: 'meta',\n  inputSchema: {\n    type: 'object',\n    properties: {\n      calls: {\n        type: 'array',\n        items: {\n          type: 'object',\n          properties: {\n            tool: { type: 'string' },\n            input: { type: 'object' },\n          },\n          required: ['tool'],\n        },\n        description: 'Array of tool calls to execute',\n      },\n      stop_on_error: {\n        type: 'boolean',\n        description: 'Stop execution on first error (default: false)',\n      },\n      parallel: {\n        type: 'boolean',\n        description: 'Execute calls in parallel (default: true)',\n      },\n    },\n    required: ['calls'],\n  },\n  async execute(input, ctx, _opts) {\n    if (!input?.calls || input.calls.length === 0) {\n      return {\n        results: [],\n        total: 0,\n        succeeded: 0,\n        failed: 0,\n        stop_on_error: false,\n      };\n    }\n\n    const governedExecute = ctx.meta[GOVERNED_TOOL_EXECUTOR_META_KEY] as\n      | GovernedToolExecutor\n      | undefined;\n    if (typeof governedExecute !== 'function') {\n      return {\n        results: input.calls.map((call) => ({\n          tool: call.tool,\n          success: false,\n          error: 'governed nested execution is unavailable; call the tool directly',\n          executionMs: 0,\n        })),\n        total: input.calls.length,\n        succeeded: 0,\n        failed: input.calls.length,\n        stop_on_error: input.stop_on_error ?? false,\n      };\n    }\n\n    const results: BatchToolUseOutput['results'] = [];\n    let succeeded = 0;\n    let failed = 0;\n\n    if (input.parallel !== false) {\n      const promises = input.calls.map(async (call) => executeSingle(call, ctx, governedExecute));\n      const allResults = await Promise.all(promises);\n      results.push(...allResults);\n      succeeded = allResults.filter((r) => r.success).length;\n      failed = allResults.filter((r) => !r.success).length;\n    } else {\n      for (const call of input.calls) {\n        const result = await executeSingle(call, ctx, governedExecute);\n        results.push(result);\n        if (result.success) {\n          succeeded++;\n        } else {\n          failed++;\n          if (input.stop_on_error) break;\n        }\n      }\n    }\n\n    return {\n      results,\n      total: input.calls.length,\n      succeeded,\n      failed,\n      stop_on_error: input.stop_on_error ?? false,\n    };\n  },\n};\n\nasync function executeSingle(\n  call: { tool: string; input: Record<string, unknown> },\n  ctx: import('@wrongstack/core').Context,\n  governedExecute: GovernedToolExecutor,\n): Promise<BatchToolUseOutput['results'][0]> {\n  const start = Date.now();\n  const tool = ctx.tools.find((candidate: Tool) => candidate.name === call.tool);\n\n  if (!tool) {\n    return {\n      tool: call.tool,\n      success: false,\n      error: `tool \"${call.tool}\" not found`,\n      executionMs: Date.now() - start,\n    };\n  }\n\n  try {\n    const result = await governedExecute(call.tool, call.input);\n    return {\n      tool: call.tool,\n      success: result.success,\n      ...(result.success ? { result: result.result } : { error: result.error ?? 'nested tool failed' }),\n      executionMs: Date.now() - start,\n    };\n  } catch (e) {\n    return {\n      tool: call.tool,\n      success: false,\n      error: e instanceof Error ? e.message : String(e),\n      executionMs: Date.now() - start,\n    };\n  }\n}\n"],
+  "mappings": ";AAAA;AAAA,EACE;AAAA,OAGK;AAyBA,IAAM,mBAAgE;AAAA,EAC3E,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aACE;AAAA,EACF,WACE;AAAA,EAKF,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AAAA,EACX,cAAc,CAAC,iBAAiB;AAAA,EAChC,MAAM;AAAA,EACN,aAAa;AAAA,IACX,MAAM;AAAA,IACN,YAAY;AAAA,MACV,OAAO;AAAA,QACL,MAAM;AAAA,QACN,OAAO;AAAA,UACL,MAAM;AAAA,UACN,YAAY;AAAA,YACV,MAAM,EAAE,MAAM,SAAS;AAAA,YACvB,OAAO,EAAE,MAAM,SAAS;AAAA,UAC1B;AAAA,UACA,UAAU,CAAC,MAAM;AAAA,QACnB;AAAA,QACA,aAAa;AAAA,MACf;AAAA,MACA,eAAe;AAAA,QACb,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,UAAU,CAAC,OAAO;AAAA,EACpB;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK,OAAO;AAC/B,QAAI,CAAC,OAAO,SAAS,MAAM,MAAM,WAAW,GAAG;AAC7C,aAAO;AAAA,QACL,SAAS,CAAC;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,kBAAkB,IAAI,KAAK,+BAA+B;AAGhE,QAAI,OAAO,oBAAoB,YAAY;AACzC,aAAO;AAAA,QACL,SAAS,MAAM,MAAM,IAAI,CAAC,UAAU;AAAA,UAClC,MAAM,KAAK;AAAA,UACX,SAAS;AAAA,UACT,OAAO;AAAA,UACP,aAAa;AAAA,QACf,EAAE;AAAA,QACF,OAAO,MAAM,MAAM;AAAA,QACnB,WAAW;AAAA,QACX,QAAQ,MAAM,MAAM;AAAA,QACpB,eAAe,MAAM,iBAAiB;AAAA,MACxC;AAAA,IACF;AAEA,UAAM,UAAyC,CAAC;AAChD,QAAI,YAAY;AAChB,QAAI,SAAS;AAEb,QAAI,MAAM,aAAa,OAAO;AAC5B,YAAM,WAAW,MAAM,MAAM,IAAI,OAAO,SAAS,cAAc,MAAM,KAAK,eAAe,CAAC;AAC1F,YAAM,aAAa,MAAM,QAAQ,IAAI,QAAQ;AAC7C,cAAQ,KAAK,GAAG,UAAU;AAC1B,kBAAY,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AAChD,eAAS,WAAW,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE;AAAA,IAChD,OAAO;AACL,iBAAW,QAAQ,MAAM,OAAO;AAC9B,cAAM,SAAS,MAAM,cAAc,MAAM,KAAK,eAAe;AAC7D,gBAAQ,KAAK,MAAM;AACnB,YAAI,OAAO,SAAS;AAClB;AAAA,QACF,OAAO;AACL;AACA,cAAI,MAAM,cAAe;AAAA,QAC3B;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,MAAM,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,eAAe,MAAM,iBAAiB;AAAA,IACxC;AAAA,EACF;AACF;AAEA,eAAe,cACb,MACA,KACA,iBAC2C;AAC3C,QAAM,QAAQ,KAAK,IAAI;AACvB,QAAM,OAAO,IAAI,MAAM,KAAK,CAAC,cAAoB,UAAU,SAAS,KAAK,IAAI;AAE7E,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,MACT,OAAO,SAAS,KAAK,IAAI;AAAA,MACzB,aAAa,KAAK,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB,KAAK,MAAM,KAAK,KAAK;AAC1D,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,SAAS,OAAO;AAAA,MAChB,GAAI,OAAO,UAAU,EAAE,QAAQ,OAAO,OAAO,IAAI,EAAE,OAAO,OAAO,SAAS,qBAAqB;AAAA,MAC/F,aAAa,KAAK,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF,SAAS,GAAG;AACV,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,MACT,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,MAChD,aAAa,KAAK,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/browser/artifacts.d.ts

@@ -0,0 +1,13 @@
+import type { BrowserArtifact, BrowserArtifactKind } from './types.js';
+export declare class BrowserArtifactStore {
+    private readonly root;
+    constructor(root: string);
+    write(sessionId: string, kind: BrowserArtifactKind, extension: string, mimeType: string, content: Uint8Array): Promise<BrowserArtifact>;
+    private record;
+    pathFor(sessionId: string, extension: string): {
+        id: string;
+        path: string;
+    };
+    describe(id: string, kind: BrowserArtifactKind, target: string, mimeType: string): Promise<BrowserArtifact>;
+}
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/browser/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../src/browser/artifacts.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEvE,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,KAAK,CACT,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,eAAe,CAAC,CAM1B;YAEa,MAAM;IA0CpB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAM1E;IAEK,QAAQ,CACZ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC,CAE1B;CACF"}

package/dist/browser/index.d.ts

@@ -0,0 +1,7 @@
+export { BrowserArtifactStore } from './artifacts.js';
+export { type BrowserLauncher, BrowserSessionManager, browserInstallationDiagnostics, } from './manager.js';
+export { BrowserNetworkGuardProxy } from './network-guard-proxy.js';
+export { assertBrowserUrlAllowed, type BrowserDnsLookup, type BrowserResolvedTarget, parsePrivateOriginAllowlist, redactBrowserText, resolvePinnedBrowserTarget, safeBrowserUrl, } from './security.js';
+export { browserClickTool, browserCloseTool, browserDragTool, browserEvaluateTool, browserHoverTool, browserListTool, browserNavigateTool, browserOpenTool, browserPressTool, browserScreenshotTool, browserSelectTool, browserSnapshotTool, browserStatusTool, browserTools, browserTypeTool, browserUploadTool, browserWaitTool, shutdownBrowserTools, } from './tools.js';
+export type { BrowserArtifact, BrowserArtifactKind, BrowserConsoleEntry, BrowserManagerOptions, BrowserNetworkEntry, BrowserOpenOptions, BrowserSessionSummary, BrowserSnapshot, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/browser/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/browser/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EACL,KAAK,eAAe,EACpB,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,2BAA2B,EAC3B,iBAAiB,EACjB,0BAA0B,EAC1B,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,GAChB,MAAM,YAAY,CAAC"}