@zibby/skills 0.2.23 → 0.2.24

package/dist/browser.d.ts

@@ -7,21 +7,4 @@
  * Call resolve({ sessionPath, workspace }) to get a ready-to-use MCP server
  * config with session-specific args (video dir, viewport, etc.).
  */
-/**
- * Dev-server preview guidance — appended ONLY when the platform injected the
- * preview env into this run (self-host dispatcher; absent ⇒ the fragment is
- * byte-identical to the historical one). This is the ONE place the recipe
- * lives: every node that binds the browser skill inherits it automatically,
- * so no template author has to remember the URL shape.
- *
- * EXPORTED because binding the browser SKILL is not the only way a node gets a
- * browser: an agent can be handed one as a custom MCP server (row data), and
- * that path carries no prompt fragment at all — so the recipe never rendered
- * and the agent rediscovered the URL shape by trial and error, navigating to
- * localhost first (measured, 2026-08-18). A template in that position imports
- * THIS function rather than restating the recipe. Env-var NAMES only —
- * the token value itself never goes into a persisted prompt (security
- * invariant #4); the model materializes it via Bash at use time.
- */
-export declare function devServerPreviewRecipe(): string;
 export declare const browserSkill: any;

package/dist/browser.js

@@ -1,6 +1,6 @@
-import{createRequire as c}from"module";import{join as u}from"path";var v=c(import.meta.url);function h(){if(process.env.MCP_BROWSER_PATH)return process.env.MCP_BROWSER_PATH;try{return v.resolve("@zibby/mcp-browser/dist/bin/mcp-browser-zibby.js")}catch{return null}}var p="1280x720",b="1280x720";function d({headless:e}={}){if(e===!0)return!0;if(e===!1)return!1;let r=process.env.ZIBBY_HEADLESS;return r==="1"||String(r).toLowerCase()==="true"}function w(e,r){let t=(e||[]).filter(o=>o!=="--headless");return r?[...t,"--headless"]:t}var f=`Execute this test using the browser tools available to you. You MUST make actual browser tool calls \u2014 do not fabricate results.
+import{createRequire as c}from"module";import{join as u}from"path";var h=c(import.meta.url);function p(){if(process.env.MCP_BROWSER_PATH)return process.env.MCP_BROWSER_PATH;try{return h.resolve("@zibby/mcp-browser/dist/bin/mcp-browser-zibby.js")}catch{return null}}var v="1280x720",b="1280x720";function d({headless:e}={}){if(e===!0)return!0;if(e===!1)return!1;let r=process.env.ZIBBY_HEADLESS;return r==="1"||String(r).toLowerCase()==="true"}function w(e,r){let t=(e||[]).filter(o=>o!=="--headless");return r?[...t,"--headless"]:t}var f=`Execute this test using the browser tools available to you. You MUST make actual browser tool calls \u2014 do not fabricate results.
 If you DO NOT have access to browser tools \u2192 return {"success": false, "steps": [], "browserClosed": false, "notes": "No browser tools available"}.
-DO NOT return success: true unless you ACTUALLY called browser tools.`;function y(){return!process.env.PREVIEW_BASE_URL||!process.env.PREVIEW_TOKEN?"":"\n\n## Previewing a server YOU start in this container (dev-server preview)\nThe browser runs in an ISOLATED container: localhost/private URLs are unreachable from it \u2014 NEVER navigate to http://localhost:<port>. To let the browser view a server you start in this run (npm run dev, vite, a mock API \u2014 anything HTTP):\n1. Start the server bound to 0.0.0.0 (e.g. `npm run dev -- --host` or `HOST=0.0.0.0`); a localhost-only bind is unreachable from outside this container.\n2. Build the preview URL from this run's injected env (Bash): `echo \"$PREVIEW_BASE_URL/<port>/?pvt=$PREVIEW_TOKEN\"` \u2014 substitute your server's actual port.\n3. Serve your app at its own ROOT and leave the URL prefix alone \u2014 do NOT set a base path for the preview (Vite `base`, Next.js `basePath`, CRA `PUBLIC_URL`). The platform routes this page's root-absolute requests (`/assets/\u2026`, `/@vite/client`, XHR) back to your server for you. Setting a base to the preview prefix makes the dev server redirect to it in a LOOP, and re-adding the prefix by hand is never needed.\n4. browser_navigate to that exact URL. The first load does a cookie handshake and redirects; after that, assets, XHR and hot-reload all work \u2014 screenshots and video too.\nThe preview lives only as long as this run. Do not put PREVIEW_TOKEN anywhere except that URL."}var R={id:"browser",serverName:"playwright",cursorKey:"playwright-official",allowedTools:["mcp__playwright__*"],sessionEnvKey:"ZIBBY_SESSION_INFO",description:"Playwright Browser MCP Server",envKeys:[],tools:[],promptFragment:()=>f+y(),resolve({sessionPath:e,workspace:r,nodeName:t,headless:o}={}){let i=h(),s=e&&t?u(e,t):null,n=s||e||r||"test-results",l=d({headless:o}),a={};if(s&&(a.ZIBBY_NODE_SESSION_PATH=s),e&&(a.ZIBBY_SESSION_PATH=e),!i)throw new Error(`@zibby/mcp-browser is not installed.
+DO NOT return success: true unless you ACTUALLY called browser tools.`;function y(){return!process.env.PREVIEW_BASE_URL||!process.env.PREVIEW_TOKEN?"":"\n\n## Previewing a server YOU start in this container (dev-server preview)\nThe browser runs in an ISOLATED container: localhost/private URLs are unreachable from it \u2014 NEVER navigate to http://localhost:<port>. To let the browser view a server you start in this run (npm run dev, vite, a mock API \u2014 anything HTTP):\n1. Start the server bound to 0.0.0.0 (e.g. `npm run dev -- --host` or `HOST=0.0.0.0`); a localhost-only bind is unreachable from outside this container.\n2. Build the preview URL from this run's injected env (Bash): `echo \"$PREVIEW_BASE_URL/<port>/?pvt=$PREVIEW_TOKEN\"` \u2014 substitute your server's actual port.\n3. Serve your app at its own ROOT and leave the URL prefix alone \u2014 do NOT set a base path for the preview (Vite `base`, Next.js `basePath`, CRA `PUBLIC_URL`). The platform routes this page's root-absolute requests (`/assets/\u2026`, `/@vite/client`, XHR) back to your server for you. Setting a base to the preview prefix makes the dev server redirect to it in a LOOP, and re-adding the prefix by hand is never needed.\n4. browser_navigate to that exact URL. The first load does a cookie handshake and redirects; after that, assets, XHR and hot-reload all work \u2014 screenshots and video too.\nThe preview lives only as long as this run. Do not put PREVIEW_TOKEN anywhere except that URL."}var m={id:"browser",serverName:"playwright",cursorKey:"playwright-official",allowedTools:["mcp__playwright__*"],sessionEnvKey:"ZIBBY_SESSION_INFO",description:"Playwright Browser MCP Server",envKeys:[],tools:[],promptFragment:()=>f+y(),resolve({sessionPath:e,workspace:r,nodeName:t,headless:o}={}){let n=p(),s=e&&t?u(e,t):null,i=s||e||r||"test-results",l=d({headless:o}),a={};if(s&&(a.ZIBBY_NODE_SESSION_PATH=s),e&&(a.ZIBBY_SESSION_PATH=e),!n)throw new Error(`@zibby/mcp-browser is not installed.
   Cloud:   verify the Fargate image has it (packages/Dockerfile installs it globally alongside @zibby/cli).
   Local:   \`npm install @zibby/mcp-browser\` in your workflow, or use the global @zibby/cli install (which pulls it transitively).
-  Override: set MCP_BROWSER_PATH to the path of mcp-browser-zibby.js.`);return{command:"node",args:w([i,"--isolated",`--save-video=${p}`,`--viewport-size=${b}`,`--output-dir=${n}`],l),env:a}}};export{R as browserSkill,y as devServerPreviewRecipe};
+  Override: set MCP_BROWSER_PATH to the path of mcp-browser-zibby.js.`);return{command:"node",args:w([n,"--isolated",`--save-video=${v}`,`--viewport-size=${b}`,`--output-dir=${i}`],l),env:a}}};export{m as browserSkill};

package/dist/code-scan.d.ts

@@ -82,7 +82,7 @@ export declare const SCANNERS: {
     id: string;
     detect: (dir: any) => boolean;
     langs: string[];
-    bin: () => string;
+    bin: () => any;
     args: (files: any, ctx?: any) => any[];
     parse: typeof parseOxlint;
 }[];

package/dist/index.d.ts

@@ -45,7 +45,6 @@ import { codebaseMemorySkill } from './codebaseMemory.js';
 import { gbrainSkill } from './gbrain.js';
 import { workflowBuilderSkill } from './workflow-builder.js';
 export { SKILL_IDS as SKILLS } from '@zibby/skill-ids';
-export { devServerPreviewRecipe } from './browser.js';
 export { browserSkill, jiraSkill, githubSkill, gitlabSkill, figmaSkill, hubspotSkill, linearSkill, vikunjaSkill, planeSkill, opendesignSkill, gitSkill, gitWriteSkill, slackSkill, larkSkill, discordSkill, notionSkill, linkedinSkill, googleDocsSkill, larkDocsSkill, larkAttendanceSkill, chatNotifySkill, sentrySkill, memorySkill, chatMemorySkill, kvMemorySkill, datasetStoreSkill, artifactSkill, chartRenderSkill, reportCheckSkill, codeStatsSkill, chatProgressSkill, socialCardSkill, codeScanSkill, codebaseMemorySkill, gbrainSkill, testRunnerSkill, testRunnerSkill as runnerSkill, skillInstallerSkill, coreToolsSkill, workflowBuilderSkill };
 export { openaiBillingSkill, anthropicBillingSkill, cursorAdminSkill, fetchOpenAICosts, fetchOpenAIProjects, fetchAnthropicCosts, fetchAnthropicWorkspaces, fetchCursorSpend, fetchAllProviders, groupByKey, meanStddev, } from './llm-billing.js';
 export { reportObjectSchema, reportToBlockKit, reportToLarkCard, reportToNotionBlocks, reportToMarkdown, SEVERITIES as REPORT_SEVERITIES, } from './report.js';