npm - @xopcai/xopc - Versions diffs - 0.0.250 → 0.0.252 - Mend

@xopcai/xopc 0.0.250 → 0.0.252

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (312) hide show

package/dist/gateway/static/root/index.html CHANGED Viewed

@@ -11,7 +11,7 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260713-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260713-1" />
     <title>XOPC — Keep what matters moving.</title>
-    <script type="module" crossorigin src="/assets/index-BcaF-dgQ.js"></script>
+    <script type="module" crossorigin src="/assets/index-D4Ykja-U.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -25,13 +25,13 @@
     <link rel="modulepreload" crossorigin href="/assets/download-Dk-ZjtO6.js">
     <link rel="modulepreload" crossorigin href="/assets/plus-Q2yW6OE7.js">
     <link rel="modulepreload" crossorigin href="/assets/x-B_N4OPjy.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-Cf5hpZE6.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-CF4erhjB.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-DaIwVWar.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-BfZGZKSs.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-JdwAhgNB.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-BHS7bo06.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-CV4pDOtG.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/markdown-view-CQvzsE24.js">
+    <link rel="modulepreload" crossorigin href="/assets/markdown-view-DjiwT28p.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-DLmwHyAh.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-swr-BIWyz7Rc.js">
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
@@ -48,15 +48,15 @@
     <link rel="modulepreload" crossorigin href="/assets/files-BArWTfr7.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-activity-R8V9l6nk.js">
     <link rel="modulepreload" crossorigin href="/assets/button-CtTvuElV.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-CR7Xg8As.js">
-    <link rel="modulepreload" crossorigin href="/assets/registry-api-BsRBlji7.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-DRCPXONr.js">
+    <link rel="modulepreload" crossorigin href="/assets/registry-api-Bpy8XX-5.js">
     <link rel="modulepreload" crossorigin href="/assets/config-reload-event-Bjh2zoKp.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-CMNbl0FZ.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-9HidFZUd.js">
     <link rel="modulepreload" crossorigin href="/assets/electron-env-DH5wF8X8.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-DfBjTSo9.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-BOgkc_9D.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-w3eq3YpP.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-CISSxU1c.js">
     <link rel="stylesheet" crossorigin href="/assets/markdown-view-Y68dCxuc.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-DAryGvZ7.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-zIJ3AXgR.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js CHANGED Viewed

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.250";
+var version = "0.0.252";
 //#endregion
 export { version };

package/dist/packages/gateway-contract/src/new-session.js CHANGED Viewed

@@ -11,6 +11,7 @@ function createDefaultNewSessionPreferences() {
 	return {
 		version: 1,
 		modelByAgent: {},
+		executionModeByProject: {},
 		lastChatScope: noProjectScope()
 	};
 }
@@ -43,6 +44,13 @@ function parseModelPreferences(value) {
 	}
 	return result;
 }
+function parseExecutionModePreferences(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+	return Object.fromEntries(Object.entries(value).flatMap(([rawProjectId, rawMode]) => {
+		const projectId = normalized(rawProjectId);
+		return projectId && (rawMode === "local_checkout" || rawMode === "managed_worktree") ? [[projectId, rawMode]] : [];
+	}));
+}
 function parseNewSessionPreferences(value) {
 	const fallback = createDefaultNewSessionPreferences();
 	if (!value || typeof value !== "object" || Array.isArray(value)) return fallback;
@@ -53,6 +61,7 @@ function parseNewSessionPreferences(value) {
 		version: 1,
 		...selectedAgentId ? { selectedAgentId } : {},
 		modelByAgent: parseModelPreferences(record.modelByAgent),
+		executionModeByProject: parseExecutionModePreferences(record.executionModeByProject),
 		lastChatScope: parseProjectScope(record.lastChatScope) ?? noProjectScope()
 	};
 }

package/dist/src/agent/agent-manager.d.ts CHANGED Viewed

@@ -94,7 +94,8 @@ export interface AgentManagerConfig {
     };
     /** Gateway: exposes AutomationService for the `automation` tool. */
     getAutomationService?: () => AutomationService | undefined;
-    getBrowserRecipeService?: () => import('../browser/recipes/index.js').BrowserRecipeService | undefined;
+    getBrowserAutomationService?: () => import('../browser/automations/index.js').BrowserAutomationService | undefined;
+    emitBrowserEvent?: (type: string, payload: unknown) => void;
     /** Gateway: exposes first-class xopc product objects for the `xopc_use` tool. */
     getNotesService?: () => NotesService | undefined;
     getProjectService?: () => ProjectService | undefined;

package/dist/src/agent/agent-manager.js CHANGED Viewed

@@ -245,7 +245,8 @@ var AgentManager = class {
 			getSessionStore: this.config.getSessionStore,
 			gatewayClarify: this.config.gatewayClarify,
 			getAutomationService: this.config.getAutomationService,
-			getBrowserRecipeService: this.config.getBrowserRecipeService,
+			getBrowserAutomationService: this.config.getBrowserAutomationService,
+			emitBrowserEvent: this.config.emitBrowserEvent,
 			getNotesService: this.config.getNotesService,
 			getProjectService: this.config.getProjectService,
 			getLocalAppService: this.config.getLocalAppService,

package/dist/src/agent/coding/repository-instructions.js CHANGED Viewed

@@ -3,7 +3,7 @@ import { execFile } from "node:child_process";
 import { readFile, realpath, stat } from "node:fs/promises";
 import { promisify } from "node:util";
 //#region src/agent/coding/repository-instructions.ts
-const exec$1 = promisify(execFile);
+const exec = promisify(execFile);
 function inside(root, path) {
 	const rel = relative(root, path);
 	return rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
@@ -27,7 +27,7 @@ var RepositoryInstructions = class RepositoryInstructions {
 		} catch {}
 		const canonicalWorkspace = root;
 		try {
-			root = await realpath((await exec$1("git", ["rev-parse", "--show-toplevel"], {
+			root = await realpath((await exec("git", ["rev-parse", "--show-toplevel"], {
 				cwd: root,
 				timeout: 5e3
 			})).stdout.trim());

package/dist/src/agent/coding/workspace-revision.js CHANGED Viewed

@@ -4,11 +4,11 @@ import { createHash } from "node:crypto";
 import { lstat, readFile, readlink, realpath } from "node:fs/promises";
 import { promisify } from "node:util";
 //#region src/agent/coding/workspace-revision.ts
-const exec$1 = promisify(execFile);
+const exec = promisify(execFile);
 /** A content fingerprint, including user changes and untracked files, without changing Git state. */
 async function readWorkspaceRevision(workspace) {
 	let cwd = workspace;
-	const git = async (args) => (await exec$1("git", [
+	const git = async (args) => (await exec("git", [
 		"-c",
 		"core.fsmonitor=false",
 		...args

package/dist/src/agent/commands/command-isolation.js CHANGED Viewed

@@ -3,7 +3,7 @@ import { execFile } from "node:child_process";
 import { realpath } from "node:fs/promises";
 import { promisify } from "node:util";
 //#region src/agent/commands/command-isolation.ts
-const exec$1 = promisify(execFile);
+const exec = promisify(execFile);
 /** Docker is opt-in and never falls back to host execution or pulls an image implicitly. */
 async function isolatedCommand(input) {
 	if (!input.isolation || input.isolation.mode === "host") return {
@@ -59,7 +59,7 @@ async function isolatedCommand(input) {
 }
 async function removeCommandContainer(name) {
 	if (!/^xopc-command-[a-f0-9-]{36}$/.test(name)) throw new Error("Invalid command container name");
-	await exec$1("docker", [
+	await exec("docker", [
 		"rm",
 		"--force",
 		name

package/dist/src/agent/external-tools/composio-provider.d.ts CHANGED Viewed

@@ -19,6 +19,7 @@ export declare class ComposioToolProvider implements ExternalToolProvider {
     private readonly deps;
     readonly source: "composio";
     private readonly adapter;
+    private readonly unavailableToolkits;
     constructor(deps: ComposioToolProviderDeps);
     search(query: string): Promise<ExternalToolSearchHit[]>;
     describe(toolRef: string): Promise<ExternalToolDescriptor | undefined>;

package/dist/src/agent/external-tools/composio-provider.js CHANGED Viewed

@@ -1,3 +1,5 @@
+import { createLogger } from "../../utils/logger/index.js";
+import { init_logger } from "../../utils/logger.js";
 import { connectionBinding, connectionBindings, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import { consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorInstallation, listConnectorActionMetadata, listConnectorConnections, listConnectorInstallations, upsertConnectorActionMetadata, upsertConnectorInstallation } from "../../storage/sqlite/connector-repository.js";
 import "../../storage/sqlite/index.js";
@@ -10,7 +12,9 @@ import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { ExternalToolSearchError } from "./search-error.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
 //#region src/agent/external-tools/composio-provider.ts
+init_logger();
 const CONNECTION_ARGUMENT = "xopcConnectionId";
+const log = createLogger("ComposioToolProvider");
 function textResult(value) {
 	return {
 		content: [{
@@ -108,47 +112,73 @@ function actionInputSchema(action) {
 var ComposioToolProvider = class {
 	source = "composio";
 	adapter;
+	unavailableToolkits = /* @__PURE__ */ new Set();
 	constructor(deps) {
 		this.deps = deps;
 		this.adapter = deps.adapter ?? new ComposioSessionsAdapter();
 	}
 	async search(query) {
 		const available = this.availableInstallations();
-		const toolkits = available.installations.map(toolkitFromInstallation);
-		if (toolkits.length === 0) return [];
-		let phase = "create_session";
-		let result;
-		try {
-			const session = await this.adapter.createSession({
-				principalId: available.principalId,
-				toolkits,
-				authConfigs: getConfiguredComposioAuthConfigs(this.deps.getConfig(), toolkits)
-			});
-			phase = "search";
-			result = await session.search({
-				query,
-				toolkits
-			});
-		} catch (cause) {
-			throw new ExternalToolSearchError(phase, toolkits, cause);
-		}
-		const schemas = result && typeof result === "object" && !Array.isArray(result) ? result.toolSchemas : void 0;
+		if (available.installations.length === 0) return [];
+		const settled = await Promise.allSettled(available.installations.map(async (installation) => {
+			const toolkit = toolkitFromInstallation(installation);
+			let phase = "create_session";
+			try {
+				const session = await this.adapter.createSession({
+					principalId: available.principalId,
+					toolkits: [toolkit],
+					authConfigs: getConfiguredComposioAuthConfigs(this.deps.getConfig(), [toolkit])
+				});
+				phase = "search";
+				return {
+					installation,
+					toolkit,
+					result: await session.search({
+						query,
+						toolkits: [toolkit]
+					})
+				};
+			} catch (cause) {
+				throw new ExternalToolSearchError(phase, [toolkit], cause);
+			}
+		}));
 		const hits = [];
-		if (!schemas || typeof schemas !== "object" || Array.isArray(schemas)) return hits;
-		for (const [actionId, schema] of Object.entries(schemas)) {
-			const toolkit = toolkitForAction(actionId, toolkits);
-			if (!toolkit || !isComposioActionAllowedByCatalog(actionId)) continue;
-			const installation = available.installations.find((candidate) => toolkitFromInstallation(candidate) === toolkit);
-			if (!installation) continue;
-			if (!isToolInputSchema(schema && typeof schema === "object" ? schema.inputSchema : void 0)) continue;
-			upsertConnectorActionMetadata(contractFromSearch(installation.connectorId, toolkit, actionId, schema));
-			hits.push({
-				toolRef: externalToolRef(this.source, installation.id, actionId),
-				source: this.source,
-				namespace: toolkit,
-				title: actionId,
-				summary: schemaSummary(schema, `Run ${actionId} in ${toolkit}.`)
-			});
+		const failures = [];
+		for (const attempt of settled) {
+			if (attempt.status === "rejected") {
+				failures.push(attempt.reason instanceof ExternalToolSearchError ? attempt.reason : new ExternalToolSearchError("search", [], attempt.reason));
+				continue;
+			}
+			const { installation, toolkit, result } = attempt.value;
+			this.unavailableToolkits.delete(toolkit);
+			const schemas = result && typeof result === "object" && !Array.isArray(result) ? result.toolSchemas : void 0;
+			if (!schemas || typeof schemas !== "object" || Array.isArray(schemas)) continue;
+			for (const [actionId, schema] of Object.entries(schemas)) {
+				if (toolkitForAction(actionId, [toolkit]) !== toolkit || !isComposioActionAllowedByCatalog(actionId)) continue;
+				if (!isToolInputSchema(schema && typeof schema === "object" ? schema.inputSchema : void 0)) continue;
+				upsertConnectorActionMetadata(contractFromSearch(installation.connectorId, toolkit, actionId, schema));
+				hits.push({
+					toolRef: externalToolRef(this.source, installation.id, actionId),
+					source: this.source,
+					namespace: toolkit,
+					title: actionId,
+					summary: schemaSummary(schema, `Run ${actionId} in ${toolkit}.`)
+				});
+			}
+		}
+		if (failures.length === settled.length) {
+			const first = failures[0];
+			throw new ExternalToolSearchError(first.phase, [...new Set(failures.flatMap((failure) => failure.toolkits))], first);
+		}
+		if (failures.length > 0) {
+			const failedToolkits = [...new Set(failures.flatMap((failure) => failure.toolkits))];
+			const newlyUnavailable = failedToolkits.filter((toolkit) => !this.unavailableToolkits.has(toolkit));
+			failedToolkits.forEach((toolkit) => this.unavailableToolkits.add(toolkit));
+			if (newlyUnavailable.length > 0) log.warn({
+				failedToolkits: newlyUnavailable,
+				failureCount: newlyUnavailable.length,
+				err: failures[0]
+			}, `Composio tool discovery skipped ${newlyUnavailable.length} unavailable toolkit${newlyUnavailable.length === 1 ? "" : "s"}`);
 		}
 		return hits;
 	}

package/dist/src/agent/external-tools/search-error.js CHANGED Viewed

@@ -13,15 +13,17 @@ function searchFailureDetails(error) {
 		phase: error.phase,
 		toolkits: error.toolkits
 	} : { phase: "search" };
+	const pending = [error];
 	const visited = /* @__PURE__ */ new Set();
-	let current = error;
-	while (current && typeof current === "object" && !visited.has(current)) {
+	while (pending.length > 0) {
+		const current = pending.shift();
+		if (!current || typeof current !== "object" || visited.has(current)) continue;
 		visited.add(current);
 		const row = current;
 		if (details.code === void 0 && (typeof row.code === "number" || typeof row.code === "string" && /^[a-zA-Z0-9_.-]{1,100}$/.test(row.code))) details.code = row.code;
 		const status = row.status ?? row.statusCode;
 		if (details.status === void 0 && typeof status === "number") details.status = status;
-		current = row.cause;
+		pending.push(row.cause, row.error);
 	}
 	return details;
 }

package/dist/src/agent/service.js CHANGED Viewed

@@ -229,7 +229,8 @@ var AgentService = class {
 			verboseLevel: config.verboseLevel,
 			gatewayClarify: config.gatewayClarify,
 			getAutomationService: config.getAutomationService,
-			getBrowserRecipeService: config.getBrowserRecipeService,
+			getBrowserAutomationService: config.getBrowserAutomationService,
+			emitBrowserEvent: config.emitBrowserEvent,
 			getNotesService: config.getNotesService,
 			getProjectService: config.getProjectService,
 			getLocalAppService: config.getLocalAppService,

package/dist/src/agent/service.types.d.ts CHANGED Viewed

@@ -28,7 +28,8 @@ export interface AgentServiceConfig {
         requestClarification: GatewayClarifyRequestFn;
     };
     getAutomationService?: () => AutomationService | undefined;
-    getBrowserRecipeService?: () => import('../browser/recipes/index.js').BrowserRecipeService | undefined;
+    getBrowserAutomationService?: () => import('../browser/automations/index.js').BrowserAutomationService | undefined;
+    emitBrowserEvent?: (type: string, payload: unknown) => void;
     /** Gateway: exposes first-class xopc product objects for the `xopc_use` tool. */
     getNotesService?: () => NotesService | undefined;
     getProjectService?: () => ProjectService | undefined;

package/dist/src/agent/skills/marketplace/adapters/store/store-api-client.js CHANGED Viewed

@@ -1,3 +1,4 @@
+import { init_resolution, resolveConnectedPlatformEndpoint } from "../../../../../platform/resolution.js";
 import { MAX_SKILL_ZIP_BYTES, isValidSkillId } from "../../../managed-store.js";
 import { MAX_EXTENSION_STORE_ZIP_BYTES } from "../../../../../extensions/store-zip-limits.js";
 import { createHash } from "node:crypto";
@@ -8,12 +9,15 @@ import { createHash } from "node:crypto";
 *
 * Facade: {@link ../../../skills-marketplace.js}.
 */
+init_resolution();
 const DEFAULT_STORE_BASE = "https://store.xopc.ai";
 function resolveSkillsStoreBaseUrl(config) {
 	const env = process.env.XOPC_SKILLS_STORE_URL?.trim();
 	if (env) try {
 		return normalizeBaseUrl(new URL(env).toString());
 	} catch {}
+	const fromPlatform = resolveConnectedPlatformEndpoint("storeApi");
+	if (fromPlatform) return normalizeBaseUrl(fromPlatform);
 	const fromConfig = config.gateway?.skillsStoreBaseUrl?.trim();
 	if (fromConfig) try {
 		return normalizeBaseUrl(new URL(fromConfig).toString());

package/dist/src/agent/tool-manuals/browser.d.ts CHANGED Viewed

	@@ -1 +1 @@
1	- export declare const browserUseManual = "# Browser Tool Manual\n\n## ~~Overview~~\n\~~n`browser_use`~~ is ~~XOPC's~~ ~~unified~~ ~~browser~~ ~~tool~~. It ~~supports~~ ~~four modes:\n\n\| Mode \| Purpose \|\n\|------\|---------\|\n\|~~ `~~command~~` \| ~~Run~~ a ~~single~~ ~~browser~~ ~~action \|\n\| `pipeline` \| Run~~ a ~~multi-step YAML flow \|\n\|~~ `~~inspect`~~ ~~\| Read current page state \|\n\|~~ `~~close`~~ \| ~~Close~~ ~~the~~ ~~browser~~ ~~session~~ ~~\|\n\n##~~ ~~When~~ to use~~\n\n-~~ ~~Open~~ ~~pages, click controls, fill forms\n- Capture screenshots or page content\n- Run multi-step automation flows\n- Extract data~~ from ~~pages\n\n##~~ ~~Command~~ ~~mode\n\n###~~ ~~Basic~~ ~~shape\n\n```json\n{\n \"mode\":~~ ~~\"command\",\~~n \~~"command\":~~ ~~\"<action>\",\~~n \~~"args\": { ... }\~~n~~}\n```\n\n###~~ ~~Available commands\n\n\| Command \| Description \| Key arguments \|\n\|---------\|-------------\|---------------\|\n\|~~ `~~open`~~ / ~~`navigate`~~ \| ~~Open~~ a ~~URL~~ \| ~~`url`,~~ ~~`wait_until`~~ ~~\|\n\|~~ `~~state~~` / `~~snapshot~~` \| ~~ARIA~~ ~~snapshot~~ of ~~the~~ ~~page \| `selector`, `maxLength` \|\~~n\| `~~click`~~ \| ~~Click~~ an ~~element~~ \| ~~`selector`~~ / ~~`text`~~ / ~~`role` \|\~~n\| `~~type` / `input` \| Type text \| `selector` / `label~~`, `~~text~~`, `~~pressEnter`~~ ~~\|\n\|~~ ~~`scroll`~~ \| ~~Scroll~~ ~~the~~ ~~page~~ \| ~~`direction`,~~ ~~`amount` \|\~~n\| `~~screenshot` \| Screenshot \| `selector~~`, `~~full_page`,~~ ~~`path`~~ ~~\|\n\|~~ ~~`back`~~ \| Go ~~back~~ \| ~~`waitFor`~~ ~~\|\n\| `keys` / `press` \| Keyboard input \| `key` \|\n\| `console` / `eval` \| Run JavaScript \| `javascript` \|\n\| `images` \| Collect images on the~~ page ~~\| `selector`, `maxImages` \|\~~n\| `wait` \| ~~Wait~~ for ~~element/text/function/time \| `selector` / `text` / `function` / `ms`, `state`, `timeout_ms` \|\n\| `wait_for_navigation` \| Wait for~~ page ~~load state \| `wait_until`, `timeout_ms` \|\n\| `wait_for_network_idle` \| Wait until network is~~ idle ~~\| `timeout_ms` \|\n\| `element_text` \| Read element~~ text \| ~~`selector`~~ ~~\|\n\|~~ ~~`element_attribute`~~ ~~\| Read element attribute \| `selector`, `attribute` \|\~~n\| `~~bounding_box`~~ \| ~~Read~~ ~~element~~ ~~box~~ \| ~~`selector`~~ ~~\|\n\|~~ ~~`network_start`~~ / ~~`network_events`~~ / ~~`network_stop` \| Capture network events \| `url_pattern`, `include_body` \|\~~n\| `~~dialog`~~ \| ~~Handle dialogs \| `action` (accept/dismiss) \|\n\| `close` \| Close the current page \| \u2014 \|\n\n### Element targeting\n\nPrefer~~, ~~in order:\n\n1. ARIA role: most stable~~, ~~e.g.~~ ~~`\"role\":~~ ~~\"button:Submit\"`\n2.~~ Visible text, e.g. `\"text\": \"Sign In\"`\n3. CSS selector, e.g. `\"selector\": \"#login-btn\"`\n~~\nGuidelines:\n\n~~- ~~Use~~ `~~inspect`~~ or ~~`state`~~ ~~first~~ to ~~get~~ a ~~snapshot\~~n- ~~Pick~~ ~~locators~~ ~~from ARIA info in~~ the ~~snapshot\n~~- ~~Avoid~~ ~~dynamic class names when possible\~~n\~~n##~~ ~~Inspect~~ ~~mode\n\nBefore~~ ~~acting,~~ ~~understand~~ ~~the~~ ~~current page:\n\n```json\n{ \"mode\": \"inspect\" }\n```\n\nReturns: current URL~~, ~~title~~, ~~ARIA snapshot.\n\nBest practice: after each navigation~~, ~~inspect~~, ~~then~~ ~~choose the next step.\n\n## Pipeline mode\n\nFor multi~~-~~step,~~ ~~reusable flows~~. ~~Uses a brocli~~-~~style~~ ~~YAML~~ ~~DSL.\n\n###~~ ~~Run~~ ~~from~~ ~~file\n\n```json\n{\n \"mode\": \"pipeline\",\n \"pipeline\": {\n \"path\": \"./browser~~-~~flow.yaml\",\n \"args\":~~ ~~{ \"url\": \"https://example~~.~~com\"~~ ~~}\n }\n}\n```\n\n### Run inline YAML\n\n```json\n{\n \"mode\": \"pipeline\",\n \"pipeline\": {\n \"yaml\": \"name: quick~~-~~check\\npipeline:\\n -~~ ~~navigate:\\n url:~~ ~~https://example.com\\n -~~ ~~screenshot:\\n full_page:~~ ~~true\",\n \"dryRun\": false\n }\n}\n```\n\n### YAML layout\n\n```yaml\nname: pipeline~~-~~name\ndescription:~~ ~~What~~ ~~this~~ ~~flow~~ ~~does\ntimeoutSeconds:~~ ~~60\ninclude:\n~~ - ~~./shared-login.yaml\nargs:\n url:\n type:~~ ~~string\n required: true\n query:\n type: string\n default: \"hello\"\npipeline:\n - navigate:\n url: ${{ args~~.~~url~~ ~~}}\n wait_until:~~ ~~domcontentloaded\n -~~ ~~wait:\n selector:~~ ~~input[name=\"q\"]\n -~~ ~~type:\n selector:~~ ~~input[name=\"q\"]\n text:~~ ~~${{~~ ~~args.query~~ ~~}}\n -~~ ~~press:\n key:~~ ~~Enter\n -~~ ~~wait:\n selector:~~ ~~body\n timeout_ms:~~ ~~10000\n -~~ ~~element_text:\n selector:~~ ~~h1\~~n ~~- assert:\n contains: Results~~\n - ~~screenshot:\n path: ./artifacts/result.png~~\n ~~full_page: true~~\~~n -~~ ~~output:\n value:\n screenshot:~~ ~~./artifacts/result.png\non_error:\n -~~ ~~screenshot:\n path:~~ ~~./artifacts/error.png\n full_page:~~ ~~true\n```\n\n### Authoring rules\n\n1~~. ~~One~~ ~~action~~ ~~per~~ ~~step\n2. Use `${{ args.xxx }}~~` ~~for parameters\n3. Use `${{ last }}~~` or ~~`${{ last \| json }}~~` ~~for the previous step result\n4. Use `${{ outputs.0 }}~~` ~~for~~ ~~prior~~ `~~output~~` ~~values~~ and ~~`${{~~ ~~vars.name~~ }}` ~~for values from~~ `~~set_var`\n5.~~ ~~Use `include` for shared YAML fragments; relative includes resolve from the current pipeline file\n6~~. ~~Use~~ ~~`on_error`~~ to collect diagnostics after failure\n\n### Stable pipeline actions\n\n```yaml\npipeline:\n - network_start:\n url_pattern: /api/search\n include_body: true\n - click:\n text: Search\n - wait_for_network_idle:\n timeout_ms: 10000\n - collect: {}~~\n -~~ ~~filter:\n path:~~ ~~type\n equals:~~ ~~response\n -~~ ~~limit:\n count: 3\n - output:\n value: ${{ last }}\n```\n\nControl~~ flow~~:\n\n```yaml\npipeline:\n -~~ ~~retry:\n times:~~ ~~3\n delay_ms:~~ ~~500\n pipeline:\n -~~ ~~wait:\n selector:~~ ~~button.submit\n timeout_ms:~~ ~~3000\n -~~ ~~click:\n selector:~~ ~~button.submit\n -~~ if:\n condition: ${{ last }}\n then:\n - output:\n value: clicked\n else:\n - output:\n value: missing\n```\n\n### Validate without running\n\n```json\n{\n \"mode\": \"pipeline\",\n \"pipeline\": {\n \"yaml\": \"...\",\n \"dryRun\": true\n }\n}\n```\n\n## Recovery when something fails\n\n1. `inspect` to see current state\n2. Confirm the URL (redirects may have changed it)\n3. Use the snapshot to see if the page finished loading\n4. `screenshot` for visual debugging\n5. `wait` for elements, ~~then retry\n\n## Safety\n\n~~- ~~Do not put API keys or tokens in URLs\n- Do not target private IPs / localhost unless configuration allows it\n- Cloud metadata endpoints are always blocked\n- For destructive actions (submit forms~~, ~~delete~~ ~~data)~~, ~~confirm~~ ~~intent~~ ~~with the user first\~~n";
1	+ export declare const browserUseManual = "# Browser Tool Manual\n\n## browser_use\n\nUse one typed action per call. Start with `observe` or `navigate`. Every observation returns a `sessionId`, `revision`, and semantic element refs. Element actions must use refs from the newest revision; never invent refs.\n\nAvailable actions:\n\n- `observe`: return URL, title, interactive semantic nodes, and changes. Set `visual` to `always` only when visual evidence is needed.\n- `navigate`: open an HTTP(S) URL and optionally verify an expectation.\n- `click`, `fill`, `select`: act on a semantic ref with its observation revision.\n- `press`, `scroll`: act on an optional ref or the active page.\n- `wait`: wait for page idle, text, or a ref visibility state.\n- `upload`: attach workspace files to a file input. Local approval may be required.\n- `tabs`: list, create, activate, or close task-owned tabs.\n- `sequence`: run a short list of same-document ref actions.\n- `close`: close the task-owned browser session.\n\nThe tool does not accept CSS, XPath, JavaScript, cookie, storage, or network-inspection commands. Re-observe after navigation or a stale-observation response. Cross-domain, upload, destructive, and external-effect actions follow the configured local-owner approval policy. Sensitive fields expose only their semantic identity; their values are redacted and filling them requires approval.\n\n## browser_automation\n\nReusable browser automations are strict JSON. They use semantic `role` plus `name` or `nameIncludes` targets and an exact `allowedDomains` list. Input templates use `${input.name}`. Save only a flow that has been run and verified; never store passwords, one-time codes, recovery codes, or payment details.\n";

package/dist/src/agent/tool-manuals/browser.js CHANGED Viewed

@@ -1,238 +1,27 @@
 //#region src/agent/tool-manuals/browser.ts
 const browserUseManual = `# Browser Tool Manual
-## Overview
+## browser_use
-\`browser_use\` is XOPC's unified browser tool. It supports four modes:
+Use one typed action per call. Start with \`observe\` or \`navigate\`. Every observation returns a \`sessionId\`, \`revision\`, and semantic element refs. Element actions must use refs from the newest revision; never invent refs.
-| Mode | Purpose |
-|------|---------|
-| \`command\` | Run a single browser action |
-| \`pipeline\` | Run a multi-step YAML flow |
-| \`inspect\` | Read current page state |
-| \`close\` | Close the browser session |
+Available actions:
-## When to use
+- \`observe\`: return URL, title, interactive semantic nodes, and changes. Set \`visual\` to \`always\` only when visual evidence is needed.
+- \`navigate\`: open an HTTP(S) URL and optionally verify an expectation.
+- \`click\`, \`fill\`, \`select\`: act on a semantic ref with its observation revision.
+- \`press\`, \`scroll\`: act on an optional ref or the active page.
+- \`wait\`: wait for page idle, text, or a ref visibility state.
+- \`upload\`: attach workspace files to a file input. Local approval may be required.
+- \`tabs\`: list, create, activate, or close task-owned tabs.
+- \`sequence\`: run a short list of same-document ref actions.
+- \`close\`: close the task-owned browser session.
-- Open pages, click controls, fill forms
-- Capture screenshots or page content
-- Run multi-step automation flows
-- Extract data from pages
+The tool does not accept CSS, XPath, JavaScript, cookie, storage, or network-inspection commands. Re-observe after navigation or a stale-observation response. Cross-domain, upload, destructive, and external-effect actions follow the configured local-owner approval policy. Sensitive fields expose only their semantic identity; their values are redacted and filling them requires approval.
-## Command mode
+## browser_automation
-### Basic shape
-\`\`\`json
-{
-  "mode": "command",
-  "command": "<action>",
-  "args": { ... }
-}
-\`\`\`
-### Available commands
-| Command | Description | Key arguments |
-|---------|-------------|---------------|
-| \`open\` / \`navigate\` | Open a URL | \`url\`, \`wait_until\` |
-| \`state\` / \`snapshot\` | ARIA snapshot of the page | \`selector\`, \`maxLength\` |
-| \`click\` | Click an element | \`selector\` / \`text\` / \`role\` |
-| \`type\` / \`input\` | Type text | \`selector\` / \`label\`, \`text\`, \`pressEnter\` |
-| \`scroll\` | Scroll the page | \`direction\`, \`amount\` |
-| \`screenshot\` | Screenshot | \`selector\`, \`full_page\`, \`path\` |
-| \`back\` | Go back | \`waitFor\` |
-| \`keys\` / \`press\` | Keyboard input | \`key\` |
-| \`console\` / \`eval\` | Run JavaScript | \`javascript\` |
-| \`images\` | Collect images on the page | \`selector\`, \`maxImages\` |
-| \`wait\` | Wait for element/text/function/time | \`selector\` / \`text\` / \`function\` / \`ms\`, \`state\`, \`timeout_ms\` |
-| \`wait_for_navigation\` | Wait for page load state | \`wait_until\`, \`timeout_ms\` |
-| \`wait_for_network_idle\` | Wait until network is idle | \`timeout_ms\` |
-| \`element_text\` | Read element text | \`selector\` |
-| \`element_attribute\` | Read element attribute | \`selector\`, \`attribute\` |
-| \`bounding_box\` | Read element box | \`selector\` |
-| \`network_start\` / \`network_events\` / \`network_stop\` | Capture network events | \`url_pattern\`, \`include_body\` |
-| \`dialog\` | Handle dialogs | \`action\` (accept/dismiss) |
-| \`close\` | Close the current page | — |
-### Element targeting
-Prefer, in order:
-1. **ARIA role**: most stable, e.g. \`"role": "button:Submit"\`
-2. **Visible text**, e.g. \`"text": "Sign In"\`
-3. **CSS selector**, e.g. \`"selector": "#login-btn"\`
-Guidelines:
-- Use \`inspect\` or \`state\` first to get a snapshot
-- Pick locators from ARIA info in the snapshot
-- Avoid dynamic class names when possible
-## Inspect mode
-Before acting, understand the current page:
-\`\`\`json
-{ "mode": "inspect" }
-\`\`\`
-Returns: current URL, title, ARIA snapshot.
-**Best practice**: after each navigation, inspect, then choose the next step.
-## Pipeline mode
-For multi-step, reusable flows. Uses a brocli-style YAML DSL.
-### Run from file
-\`\`\`json
-{
-  "mode": "pipeline",
-  "pipeline": {
-    "path": "./browser-flow.yaml",
-    "args": { "url": "https://example.com" }
-  }
-}
-\`\`\`
-### Run inline YAML
-\`\`\`json
-{
-  "mode": "pipeline",
-  "pipeline": {
-    "yaml": "name: quick-check\\npipeline:\\n  - navigate:\\n      url: https://example.com\\n  - screenshot:\\n      full_page: true",
-    "dryRun": false
-  }
-}
-\`\`\`
-### YAML layout
-\`\`\`yaml
-name: pipeline-name
-description: What this flow does
-timeoutSeconds: 60
-include:
-  - ./shared-login.yaml
-args:
-  url:
-    type: string
-    required: true
-  query:
-    type: string
-    default: "hello"
-pipeline:
-  - navigate:
-      url: \${{ args.url }}
-      wait_until: domcontentloaded
-  - wait:
-      selector: input[name="q"]
-  - type:
-      selector: input[name="q"]
-      text: \${{ args.query }}
-  - press:
-      key: Enter
-  - wait:
-      selector: body
-      timeout_ms: 10000
-  - element_text:
-      selector: h1
-  - assert:
-      contains: Results
-  - screenshot:
-      path: ./artifacts/result.png
-      full_page: true
-  - output:
-      value:
-        screenshot: ./artifacts/result.png
-on_error:
-  - screenshot:
-      path: ./artifacts/error.png
-      full_page: true
-\`\`\`
-### Authoring rules
-1. One action per step
-2. Use \`\${{ args.xxx }}\` for parameters
-3. Use \`\${{ last }}\` or \`\${{ last | json }}\` for the previous step result
-4. Use \`\${{ outputs.0 }}\` for prior \`output\` values and \`\${{ vars.name }}\` for values from \`set_var\`
-5. Use \`include\` for shared YAML fragments; relative includes resolve from the current pipeline file
-6. Use \`on_error\` to collect diagnostics after failure
-### Stable pipeline actions
-\`\`\`yaml
-pipeline:
-  - network_start:
-      url_pattern: /api/search
-      include_body: true
-  - click:
-      text: Search
-  - wait_for_network_idle:
-      timeout_ms: 10000
-  - collect: {}
-  - filter:
-      path: type
-      equals: response
-  - limit:
-      count: 3
-  - output:
-      value: \${{ last }}
-\`\`\`
-Control flow:
-\`\`\`yaml
-pipeline:
-  - retry:
-      times: 3
-      delay_ms: 500
-      pipeline:
-        - wait:
-            selector: button.submit
-            timeout_ms: 3000
-        - click:
-            selector: button.submit
-  - if:
-      condition: \${{ last }}
-      then:
-        - output:
-            value: clicked
-      else:
-        - output:
-            value: missing
-\`\`\`
-### Validate without running
-\`\`\`json
-{
-  "mode": "pipeline",
-  "pipeline": {
-    "yaml": "...",
-    "dryRun": true
-  }
-}
-\`\`\`
-## Recovery when something fails
-1. \`inspect\` to see current state
-2. Confirm the URL (redirects may have changed it)
-3. Use the snapshot to see if the page finished loading
-4. \`screenshot\` for visual debugging
-5. \`wait\` for elements, then retry
-## Safety
-- Do not put API keys or tokens in URLs
-- Do not target private IPs / localhost unless configuration allows it
-- Cloud metadata endpoints are always blocked
-- For destructive actions (submit forms, delete data), confirm intent with the user first
+Reusable browser automations are strict JSON. They use semantic \`role\` plus \`name\` or \`nameIncludes\` targets and an exact \`allowedDomains\` list. Input templates use \`\${input.name}\`. Save only a flow that has been run and verified; never store passwords, one-time codes, recovery codes, or payment details.
 `;
 //#endregion
 export { browserUseManual };