agents 0.23.0 → 0.25.0

package/dist/agent-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-tools.js","names":["agentContext","createTool"],"sources":["../src/agent-tools.ts"],"sourcesContent":["import {\n  asSchema,\n  tool,\n  type FlexibleSchema,\n  type InferSchema,\n  type Tool\n} from \"ai\";\nimport { __DO_NOT_USE_WILL_BREAK__agentContext as agentContext } from \"./internal_context\";\nimport type {\n  ChatCapableAgentClass,\n  RunAgentToolOptions,\n  RunAgentToolResult,\n  AgentToolDisplayMetadata,\n  AgentToolFailure\n} from \"./agent-tool-types\";\n\ntype ParseSchema<Output = unknown> = {\n  parse(value: unknown): Output;\n};\n\ntype AgentToolOutputSchema<Output> =\n  | FlexibleSchema<Output>\n  | ParseSchema<Output>;\n\ntype AgentToolFactoryOptions<Output = unknown, Input = unknown> = {\n  description: string;\n  inputSchema: FlexibleSchema<Input>;\n  outputSchema?: AgentToolOutputSchema<Output>;\n  displayName?: string;\n  icon?: string;\n  display?: AgentToolDisplayMetadata;\n};\n\n// Capture the concrete schema type so the overload below can derive its input\n// with InferSchema. AgentToolFactoryOptions remains available for callers that\n// explicitly supply agentTool<Input, Output>() type arguments.\ntype InferredAgentToolFactoryOptions<\n  InputSchema extends FlexibleSchema,\n  Output\n> = Omit<AgentToolFactoryOptions<Output>, \"inputSchema\"> & {\n  inputSchema: InputSchema;\n};\n\ntype ToolExecutionOptions = {\n  toolCallId?: string;\n  abortSignal?: AbortSignal;\n};\n\ntype AgentToolRunner = {\n  runAgentTool<Input, Output>(\n    cls: ChatCapableAgentClass,\n    options: RunAgentToolOptions<Input>\n  ): Promise<RunAgentToolResult<Output>>;\n};\n\n/**\n * Preserve the existing Zod-style `.parse()` output-schema contract while\n * extending validation to the other formats supported by AI SDK FlexibleSchema.\n */\nasync function validateOutput<Output>(\n  schema: AgentToolOutputSchema<Output>,\n  value: unknown\n): Promise<Output> {\n  if (\n    typeof schema === \"object\" &&\n    schema !== null &&\n    \"parse\" in schema &&\n    typeof schema.parse === \"function\"\n  ) {\n    return schema.parse(value);\n  }\n\n  const validate = asSchema(schema as FlexibleSchema<Output>).validate;\n  if (!validate) {\n    throw new Error(\"agentTool outputSchema must provide runtime validation\");\n  }\n\n  const result = await validate(value);\n  if (!result.success) throw result.error;\n  return result.value;\n}\n\nfunction currentAgentToolRunner(): AgentToolRunner {\n  const agent = agentContext.getStore()?.agent;\n  if (\n    agent === null ||\n    typeof agent !== \"object\" ||\n    typeof (agent as { runAgentTool?: unknown }).runAgentTool !== \"function\"\n  ) {\n    throw new Error(\n      \"agentTool() can only run inside an Agent turn. Use it from getTools() on an Agent subclass.\"\n    );\n  }\n  return agent as AgentToolRunner;\n}\n\nfunction failure(\n  status: AgentToolFailure[\"status\"],\n  error: string,\n  retryable: boolean,\n  extra?: Pick<AgentToolFailure, \"reason\" | \"childStillRunning\">\n): AgentToolFailure {\n  return {\n    ok: false,\n    status,\n    error,\n    retryable,\n    ...(extra?.reason !== undefined ? { reason: extra.reason } : {}),\n    ...(extra?.childStillRunning !== undefined\n      ? { childStillRunning: extra.childStillRunning }\n      : {})\n  };\n}\n\n/**\n * Create an AI SDK tool that dispatches a chat-capable sub-agent through\n * `Agent.runAgentTool`.\n */\nexport function agentTool<InputSchema extends FlexibleSchema, Output = unknown>(\n  cls: ChatCapableAgentClass,\n  options: InferredAgentToolFactoryOptions<InputSchema, Output>\n): Tool<InferSchema<InputSchema>, string | Output | AgentToolFailure>;\n// Preserve existing callers that explicitly provide agentTool<Input, Output>().\nexport function agentTool<Input = unknown, Output = unknown>(\n  cls: ChatCapableAgentClass,\n  options: AgentToolFactoryOptions<Output, Input>\n): Tool<Input, string | Output | AgentToolFailure>;\nexport function agentTool<Input = unknown, Output = unknown>(\n  cls: ChatCapableAgentClass,\n  options: AgentToolFactoryOptions<Output, Input>\n): Tool<Input, string | Output | AgentToolFailure> {\n  const createTool = tool as unknown as <I, O>(config: {\n    description: string;\n    inputSchema: unknown;\n    execute: (input: I, options?: ToolExecutionOptions) => Promise<O>;\n  }) => Tool<I, O>;\n\n  return createTool<Input, string | Output | AgentToolFailure>({\n    description: options.description,\n    inputSchema: options.inputSchema,\n    execute: async (input: Input, executeOptions?: ToolExecutionOptions) => {\n      const display: AgentToolDisplayMetadata | undefined =\n        options.displayName || options.icon || options.display\n          ? {\n              ...options.display,\n              ...(options.displayName ? { name: options.displayName } : {}),\n              ...(options.icon ? { icon: options.icon } : {})\n            }\n          : undefined;\n\n      // Derive a STABLE runId from the tool call id (#1630). A tool call's id is\n      // preserved in the transcript, so when a parent turn is re-run by chat\n      // recovery after a deploy / eviction, the same `agentTool()` call resolves\n      // to the same runId — turning the re-issue into a duplicate that\n      // `runAgentTool` re-attaches to the still-running child, instead of a\n      // fresh `nanoid` that spawns a brand-new child and re-runs already-\n      // completed work (\"the agent went all the way back\"). Falls back to a\n      // fresh id only when there is no tool call id (rare; preserves prior\n      // behavior).\n      const runId = executeOptions?.toolCallId\n        ? `agent-tool:${executeOptions.toolCallId}`\n        : undefined;\n\n      const result = await currentAgentToolRunner().runAgentTool<Input, Output>(\n        cls,\n        {\n          input,\n          runId,\n          parentToolCallId: executeOptions?.toolCallId,\n          signal: executeOptions?.abortSignal,\n          display\n        }\n      );\n\n      if (result.status === \"completed\") {\n        if (options.outputSchema) {\n          if (result.output === undefined) {\n            return failure(\n              \"error\",\n              \"agent tool completed without structured output required by outputSchema\",\n              false\n            );\n          }\n          return validateOutput(options.outputSchema, result.output);\n        }\n        return result.summary ?? \"\";\n      }\n\n      if (result.status === \"aborted\") {\n        // Intentional cancellation (parent/user stopped the run) — not retryable.\n        return failure(\n          \"aborted\",\n          result.error ?? \"agent tool run was cancelled\",\n          false\n        );\n      }\n      if (result.status === \"interrupted\") {\n        // The child was reset/superseded by a deploy or parent recovery before\n        // it reached a logical outcome. Re-dispatching the run can succeed, so\n        // surface it as retryable rather than a terminal failure the parent\n        // would report to the user as final. `retryable` is intentionally COARSE\n        // (always true for `interrupted`); callers that want to distinguish a\n        // self-healing child from an exhausted one branch on `reason` /\n        // `childStillRunning` instead.\n        return failure(\n          \"interrupted\",\n          result.error ??\n            \"agent tool run was interrupted before it finished; it can be retried\",\n          true,\n          { reason: result.reason, childStillRunning: result.childStillRunning }\n        );\n      }\n      return failure(\"error\", result.error ?? \"agent tool run failed\", false);\n    }\n  });\n}\n\nexport type { AgentToolFactoryOptions };\nexport type {\n  AgentToolChildAdapter,\n  AgentToolDisplayMetadata,\n  AgentToolEvent,\n  AgentToolEventMessage,\n  AgentToolEventState,\n  AgentToolFailure,\n  AgentToolInterruptedReason,\n  AgentToolLifecycleResult,\n  AgentToolRunInfo,\n  AgentToolRunInspection,\n  AgentToolRunPart,\n  AgentToolRunState,\n  AgentToolRunStatus,\n  AgentToolStoredChunk,\n  AgentToolTerminalStatus,\n  ChatCapableAgentClass,\n  DetachedAgentToolConfig,\n  DetachedRunAgentToolResult,\n  RunAgentToolOptions,\n  RunAgentToolResult\n} from \"./agent-tool-types\";\n"],"mappings":";;;;;;;;AA2DA,eAAe,eACb,QACA,OACiB;CACjB,IACE,OAAO,WAAW,YAClB,WAAW,QACX,WAAW,UACX,OAAO,OAAO,UAAU,YAExB,OAAO,OAAO,MAAM,KAAK;CAG3B,MAAM,WAAW,SAAS,MAAgC,CAAC,CAAC;CAC5D,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,wDAAwD;CAG1E,MAAM,SAAS,MAAM,SAAS,KAAK;CACnC,IAAI,CAAC,OAAO,SAAS,MAAM,OAAO;CAClC,OAAO,OAAO;AAChB;AAEA,SAAS,yBAA0C;CACjD,MAAM,QAAQA,sCAAa,SAAS,CAAC,EAAE;CACvC,IACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAQ,MAAqC,iBAAiB,YAE9D,MAAM,IAAI,MACR,6FACF;CAEF,OAAO;AACT;AAEA,SAAS,QACP,QACA,OACA,WACA,OACkB;CAClB,OAAO;EACL,IAAI;EACJ;EACA;EACA;EACA,GAAI,OAAO,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;EAC9D,GAAI,OAAO,sBAAsB,KAAA,IAC7B,EAAE,mBAAmB,MAAM,kBAAkB,IAC7C,CAAC;CACP;AACF;AAeA,SAAgB,UACd,KACA,SACiD;CAOjD,OAAOC,KAAsD;EAC3D,aAAa,QAAQ;EACrB,aAAa,QAAQ;EACrB,SAAS,OAAO,OAAc,mBAA0C;GACtE,MAAM,UACJ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,UAC3C;IACE,GAAG,QAAQ;IACX,GAAI,QAAQ,cAAc,EAAE,MAAM,QAAQ,YAAY,IAAI,CAAC;IAC3D,GAAI,QAAQ,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;GAC/C,IACA,KAAA;GAWN,MAAM,QAAQ,gBAAgB,aAC1B,cAAc,eAAe,eAC7B,KAAA;GAEJ,MAAM,SAAS,MAAM,uBAAuB,CAAC,CAAC,aAC5C,KACA;IACE;IACA;IACA,kBAAkB,gBAAgB;IAClC,QAAQ,gBAAgB;IACxB;GACF,CACF;GAEA,IAAI,OAAO,WAAW,aAAa;IACjC,IAAI,QAAQ,cAAc;KACxB,IAAI,OAAO,WAAW,KAAA,GACpB,OAAO,QACL,SACA,2EACA,KACF;KAEF,OAAO,eAAe,QAAQ,cAAc,OAAO,MAAM;IAC3D;IACA,OAAO,OAAO,WAAW;GAC3B;GAEA,IAAI,OAAO,WAAW,WAEpB,OAAO,QACL,WACA,OAAO,SAAS,gCAChB,KACF;GAEF,IAAI,OAAO,WAAW,eAQpB,OAAO,QACL,eACA,OAAO,SACL,wEACF,MACA;IAAE,QAAQ,OAAO;IAAQ,mBAAmB,OAAO;GAAkB,CACvE;GAEF,OAAO,QAAQ,SAAS,OAAO,SAAS,yBAAyB,KAAK;EACxE;CACF,CAAC;AACH"}
+{"version":3,"file":"agent-tools.js","names":["agentContext","createTool"],"sources":["../src/agent-tools.ts"],"sourcesContent":["import {\n  asSchema,\n  tool,\n  type FlexibleSchema,\n  type InferSchema,\n  type Tool\n} from \"ai\";\nimport { __DO_NOT_USE_WILL_BREAK__agentContext as agentContext } from \"./internal_context\";\nimport type {\n  ChatCapableAgentClass,\n  RunAgentToolOptions,\n  RunAgentToolResult,\n  AgentToolDisplayMetadata,\n  AgentToolFailure\n} from \"./agent-tool-types\";\n\ntype ParseSchema<Output = unknown> = {\n  parse(value: unknown): Output;\n};\n\ntype AgentToolOutputSchema<Output> =\n  | FlexibleSchema<Output>\n  | ParseSchema<Output>;\n\ntype AgentToolFactoryOptions<Output = unknown, Input = unknown> = {\n  description: string;\n  inputSchema: FlexibleSchema<Input>;\n  outputSchema?: AgentToolOutputSchema<Output>;\n  displayName?: string;\n  icon?: string;\n  display?: AgentToolDisplayMetadata;\n};\n\n// Capture the concrete schema type so the overload below can derive its input\n// with InferSchema. AgentToolFactoryOptions remains available for callers that\n// explicitly supply agentTool<Input, Output>() type arguments.\ntype InferredAgentToolFactoryOptions<\n  InputSchema extends FlexibleSchema,\n  Output\n> = Omit<AgentToolFactoryOptions<Output>, \"inputSchema\"> & {\n  inputSchema: InputSchema;\n};\n\ntype ToolExecutionOptions = {\n  toolCallId?: string;\n  abortSignal?: AbortSignal;\n};\n\ntype AgentToolRunner = {\n  runAgentTool<Input, Output>(\n    cls: ChatCapableAgentClass,\n    options: RunAgentToolOptions<Input>\n  ): Promise<RunAgentToolResult<Output>>;\n};\n\n/**\n * Preserve the existing Zod-style `.parse()` output-schema contract while\n * extending validation to the other formats supported by AI SDK FlexibleSchema.\n */\nasync function validateOutput<Output>(\n  schema: AgentToolOutputSchema<Output>,\n  value: unknown\n): Promise<Output> {\n  if (\n    typeof schema === \"object\" &&\n    schema !== null &&\n    \"parse\" in schema &&\n    typeof schema.parse === \"function\"\n  ) {\n    return schema.parse(value);\n  }\n\n  const validate = asSchema(schema as FlexibleSchema<Output>).validate;\n  if (!validate) {\n    throw new Error(\"agentTool outputSchema must provide runtime validation\");\n  }\n\n  const result = await validate(value);\n  if (!result.success) throw result.error;\n  return result.value;\n}\n\nfunction currentAgentToolRunner(): AgentToolRunner {\n  const agent = agentContext.getStore()?.agent;\n  if (\n    agent === null ||\n    typeof agent !== \"object\" ||\n    typeof (agent as { runAgentTool?: unknown }).runAgentTool !== \"function\"\n  ) {\n    throw new Error(\n      \"agentTool() can only run inside an Agent turn. Use it from getTools() on an Agent subclass.\"\n    );\n  }\n  return agent as AgentToolRunner;\n}\n\nfunction failure(\n  status: AgentToolFailure[\"status\"],\n  error: string,\n  retryable: boolean,\n  extra?: Pick<AgentToolFailure, \"reason\" | \"childStillRunning\">\n): AgentToolFailure {\n  return {\n    ok: false,\n    status,\n    error,\n    retryable,\n    ...(extra?.reason !== undefined ? { reason: extra.reason } : {}),\n    ...(extra?.childStillRunning !== undefined\n      ? { childStillRunning: extra.childStillRunning }\n      : {})\n  };\n}\n\n/**\n * Create an AI SDK tool that dispatches a chat-capable sub-agent through\n * `Agent.runAgentTool`.\n */\nexport function agentTool<InputSchema extends FlexibleSchema, Output = unknown>(\n  cls: ChatCapableAgentClass,\n  options: InferredAgentToolFactoryOptions<InputSchema, Output>\n): Tool<InferSchema<InputSchema>, string | Output | AgentToolFailure>;\n// Preserve existing callers that explicitly provide agentTool<Input, Output>().\nexport function agentTool<Input = unknown, Output = unknown>(\n  cls: ChatCapableAgentClass,\n  options: AgentToolFactoryOptions<Output, Input>\n): Tool<Input, string | Output | AgentToolFailure>;\nexport function agentTool<Input = unknown, Output = unknown>(\n  cls: ChatCapableAgentClass,\n  options: AgentToolFactoryOptions<Output, Input>\n): Tool<Input, string | Output | AgentToolFailure> {\n  const createTool = tool as unknown as <I, O>(config: {\n    description: string;\n    inputSchema: unknown;\n    execute: (input: I, options?: ToolExecutionOptions) => Promise<O>;\n  }) => Tool<I, O>;\n\n  return createTool<Input, string | Output | AgentToolFailure>({\n    description: options.description,\n    inputSchema: options.inputSchema,\n    execute: async (input: Input, executeOptions?: ToolExecutionOptions) => {\n      const display: AgentToolDisplayMetadata | undefined =\n        options.displayName || options.icon || options.display\n          ? {\n              ...options.display,\n              ...(options.displayName ? { name: options.displayName } : {}),\n              ...(options.icon ? { icon: options.icon } : {})\n            }\n          : undefined;\n\n      // Derive a STABLE runId from the tool call id (#1630). A tool call's id is\n      // preserved in the transcript, so when a parent turn is re-run by chat\n      // recovery after a deploy / eviction, the same `agentTool()` call resolves\n      // to the same runId — turning the re-issue into a duplicate that\n      // `runAgentTool` re-attaches to the still-running child, instead of a\n      // fresh `nanoid` that spawns a brand-new child and re-runs already-\n      // completed work (\"the agent went all the way back\"). Falls back to a\n      // fresh id only when there is no tool call id (rare; preserves prior\n      // behavior).\n      const runId = executeOptions?.toolCallId\n        ? `agent-tool:${executeOptions.toolCallId}`\n        : undefined;\n\n      const result = await currentAgentToolRunner().runAgentTool<Input, Output>(\n        cls,\n        {\n          input,\n          runId,\n          parentToolCallId: executeOptions?.toolCallId,\n          signal: executeOptions?.abortSignal,\n          display\n        }\n      );\n\n      if (result.status === \"completed\") {\n        if (options.outputSchema) {\n          if (result.output === undefined) {\n            return failure(\n              \"error\",\n              \"agent tool completed without structured output required by outputSchema\",\n              false\n            );\n          }\n          return validateOutput(options.outputSchema, result.output);\n        }\n        return result.summary ?? \"\";\n      }\n\n      if (result.status === \"aborted\") {\n        // Intentional cancellation (parent/user stopped the run) — not retryable.\n        return failure(\n          \"aborted\",\n          result.error ?? \"agent tool run was cancelled\",\n          false\n        );\n      }\n      if (result.status === \"interrupted\") {\n        // The child was reset/superseded by a deploy or parent recovery before\n        // it reached a logical outcome. Re-dispatching the run can succeed, so\n        // surface it as retryable rather than a terminal failure the parent\n        // would report to the user as final. `retryable` is intentionally COARSE\n        // (always true for `interrupted`); callers that want to distinguish a\n        // self-healing child from an exhausted one branch on `reason` /\n        // `childStillRunning` instead.\n        return failure(\n          \"interrupted\",\n          result.error ??\n            \"agent tool run was interrupted before it finished; it can be retried\",\n          true,\n          { reason: result.reason, childStillRunning: result.childStillRunning }\n        );\n      }\n      return failure(\"error\", result.error ?? \"agent tool run failed\", false);\n    }\n  });\n}\n\nexport type { AgentToolFactoryOptions };\nexport type {\n  AgentToolChildAdapter,\n  AgentToolDisplayMetadata,\n  AgentToolEvent,\n  AgentToolEventDelivery,\n  AgentToolEventMessage,\n  AgentToolEventState,\n  AgentToolFailure,\n  AgentToolInterruptedReason,\n  AgentToolLifecycleResult,\n  AgentToolRunInfo,\n  AgentToolRunInspection,\n  AgentToolRunPart,\n  AgentToolRunState,\n  AgentToolRunStatus,\n  AgentToolStoredChunk,\n  AgentToolTerminalStatus,\n  ChatCapableAgentClass,\n  DetachedAgentToolConfig,\n  DetachedRunAgentToolResult,\n  RunAgentToolOptions,\n  RunAgentToolResult\n} from \"./agent-tool-types\";\n"],"mappings":";;;;;;;;AA2DA,eAAe,eACb,QACA,OACiB;CACjB,IACE,OAAO,WAAW,YAClB,WAAW,QACX,WAAW,UACX,OAAO,OAAO,UAAU,YAExB,OAAO,OAAO,MAAM,KAAK;CAG3B,MAAM,WAAW,SAAS,MAAgC,CAAC,CAAC;CAC5D,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,wDAAwD;CAG1E,MAAM,SAAS,MAAM,SAAS,KAAK;CACnC,IAAI,CAAC,OAAO,SAAS,MAAM,OAAO;CAClC,OAAO,OAAO;AAChB;AAEA,SAAS,yBAA0C;CACjD,MAAM,QAAQA,sCAAa,SAAS,CAAC,EAAE;CACvC,IACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAQ,MAAqC,iBAAiB,YAE9D,MAAM,IAAI,MACR,6FACF;CAEF,OAAO;AACT;AAEA,SAAS,QACP,QACA,OACA,WACA,OACkB;CAClB,OAAO;EACL,IAAI;EACJ;EACA;EACA;EACA,GAAI,OAAO,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;EAC9D,GAAI,OAAO,sBAAsB,KAAA,IAC7B,EAAE,mBAAmB,MAAM,kBAAkB,IAC7C,CAAC;CACP;AACF;AAeA,SAAgB,UACd,KACA,SACiD;CAOjD,OAAOC,KAAsD;EAC3D,aAAa,QAAQ;EACrB,aAAa,QAAQ;EACrB,SAAS,OAAO,OAAc,mBAA0C;GACtE,MAAM,UACJ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,UAC3C;IACE,GAAG,QAAQ;IACX,GAAI,QAAQ,cAAc,EAAE,MAAM,QAAQ,YAAY,IAAI,CAAC;IAC3D,GAAI,QAAQ,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;GAC/C,IACA,KAAA;GAWN,MAAM,QAAQ,gBAAgB,aAC1B,cAAc,eAAe,eAC7B,KAAA;GAEJ,MAAM,SAAS,MAAM,uBAAuB,CAAC,CAAC,aAC5C,KACA;IACE;IACA;IACA,kBAAkB,gBAAgB;IAClC,QAAQ,gBAAgB;IACxB;GACF,CACF;GAEA,IAAI,OAAO,WAAW,aAAa;IACjC,IAAI,QAAQ,cAAc;KACxB,IAAI,OAAO,WAAW,KAAA,GACpB,OAAO,QACL,SACA,2EACA,KACF;KAEF,OAAO,eAAe,QAAQ,cAAc,OAAO,MAAM;IAC3D;IACA,OAAO,OAAO,WAAW;GAC3B;GAEA,IAAI,OAAO,WAAW,WAEpB,OAAO,QACL,WACA,OAAO,SAAS,gCAChB,KACF;GAEF,IAAI,OAAO,WAAW,eAQpB,OAAO,QACL,eACA,OAAO,SACL,wEACF,MACA;IAAE,QAAQ,OAAO;IAAQ,mBAAmB,OAAO;GAAkB,CACvE;GAEF,OAAO,QAAQ,SAAS,OAAO,SAAS,yBAAyB,KAAK;EACxE;CACF,CAAC;AACH"}

package/dist/ai-fm7xx1BK.js

@@ -0,0 +1,312 @@
+import { t as __DO_NOT_USE_WILL_BREAK__agentContext } from "./current-agent-DhoDkSnH.js";
+import "./internal_context.js";
+import { c as browserExtract, f as browserScrape, i as DurableBrowserSessionStore, l as browserLinks, s as browserContent, t as BrowserConnector, u as browserMarkdown } from "./connector-58XDGvc3.js";
+import { t as redactBase64Payloads } from "./base64-redaction-C1Uu29t5.js";
+import { tool } from "ai";
+import { z } from "zod";
+import { DynamicWorkerExecutor, createCodemodeRuntime, truncateResult } from "@cloudflare/codemode";
+//#region src/browser/tool-helpers.ts
+function browserScreenshotOutput(value) {
+	const outer = typeof value === "object" && value !== null ? value : null;
+	const result = outer && typeof outer.result === "object" && outer.result !== null ? outer.result : outer;
+	if (result?.type !== "browser_screenshot" || typeof result.mediaType !== "string" || typeof result.data !== "string") return null;
+	return result;
+}
+function transformBrowserResult(value) {
+	return browserScreenshotOutput(value) ? value : truncateResult(redactBase64Payloads(value));
+}
+/**
+* @param notes Sentences appended when a screenshot collapses the output to
+* text, so notices on the output aren't lost with it.
+*/
+function browserExecuteModelOutput(output, notes = []) {
+	const screenshot = browserScreenshotOutput(output);
+	if (screenshot) {
+		const approximateBytes = Math.floor(screenshot.data.length * 3 / 4);
+		return {
+			type: "text",
+			value: [`Screenshot captured successfully (${screenshot.mediaType}, approximately ${approximateBytes.toLocaleString()} bytes); the image is kept for the UI and omitted here.`, ...notes].join(" ")
+		};
+	}
+	const redacted = redactBase64Payloads(typeof output === "object" && output !== null && !Array.isArray(output) ? (({ calls: _calls, ...rest }) => ({
+		...rest,
+		...Array.isArray(rest.logs) ? { logs: truncateResult(rest.logs) } : {}
+	}))(output) : output);
+	try {
+		const serialized = JSON.stringify(redacted);
+		return {
+			type: "json",
+			value: serialized === void 0 ? null : JSON.parse(serialized)
+		};
+	} catch {
+		return {
+			type: "text",
+			value: "Browser execution completed, but its result could not be serialized for model context."
+		};
+	}
+}
+/**
+* The Durable Object state to build the runtime in: the explicit `ctx` if
+* given, otherwise the current Agent's `ctx` (via `getCurrentAgent()`), so
+* `createBrowserRuntime` can be called from an Agent method without threading
+* `this.ctx` through.
+*/
+function resolveCtx(options) {
+	if (options.ctx) return options.ctx;
+	return (__DO_NOT_USE_WILL_BREAK__agentContext.getStore()?.agent)?.ctx;
+}
+//#endregion
+//#region src/browser/ai.ts
+let didWarnExperimental = false;
+let didDebugQuickActionSkip = false;
+function connectorOptions(options, ctx) {
+	if (options.cdpUrl) return {
+		cdpUrl: options.cdpUrl,
+		cdpHeaders: options.cdpHeaders,
+		timeout: options.timeout
+	};
+	if (!options.browser) throw new Error("Either 'browser' (Fetcher binding) or 'cdpUrl' must be provided");
+	return {
+		browser: options.browser,
+		store: options.store ?? new DurableBrowserSessionStore(ctx.storage),
+		session: options.session,
+		timeout: options.timeout
+	};
+}
+/**
+* Create the browser codemode runtime: the `browser_execute` tool plus the
+* runtime handle and connector for host-side wiring (approvals, session info,
+* sweeps).
+*
+* @example
+* ```ts
+* export class MyAgent extends Agent<Env> {
+*   get browser() {
+*     return createBrowserRuntime({
+*       ctx: this.ctx,
+*       browser: this.env.BROWSER,
+*       loader: this.env.LOADER,
+*       session: { mode: "dynamic" }
+*     });
+*   }
+*
+*   @callable()
+*   async closeBrowserSession() {
+*     await this.browser.connector.closeSession();
+*   }
+* }
+* ```
+*/
+function createBrowserRuntime(options) {
+	if (!didWarnExperimental) {
+		didWarnExperimental = true;
+		console.warn("[agents/browser] Browser tools are experimental and may change in a future release.");
+	}
+	const ctx = resolveCtx(options);
+	if (!ctx) throw new Error("createBrowserRuntime requires a Durable Object 'ctx' — pass it explicitly, or call from within an Agent so it can be resolved via getCurrentAgent()");
+	const connector = new BrowserConnector(ctx, connectorOptions(options, ctx));
+	const runtime = createCodemodeRuntime({
+		ctx,
+		executor: new DynamicWorkerExecutor({
+			loader: options.loader,
+			timeout: options.timeout
+		}),
+		connectors: [connector],
+		name: options.name ?? "browser",
+		transformResult: transformBrowserResult
+	});
+	const isKitesurf = !options.cdpUrl && options.session?.browser === "kitesurf";
+	const tools = { browser_execute: {
+		...runtime.tool({ connectorHints: { cdp: isKitesurf ? "Kitesurf one-shot Browser CDP. Call codemode.describe(\"cdp\") for connector types and Kitesurf execution rules. codemode.search indexes connector methods and snippets, not underlying CDP commands. Complete the task in one execution and do not pause. Return screenshots as { type: \"browser_screenshot\", mediaType: \"image/png\", data: screenshot.data }." : "Browser CDP. Return screenshots as { type: 'browser_screenshot', mediaType: 'image/png', data: screenshot.data }; the UI keeps the image while the model receives a compact summary." } }),
+		toModelOutput: ({ output }) => browserExecuteModelOutput(output)
+	} };
+	if (options.quickActions !== false && (!isKitesurf || options.quickActions !== void 0)) {
+		const qa = typeof options.quickActions === "object" ? options.quickActions : {};
+		const quickActionBrowser = qa.browser ?? options.browser;
+		if (quickActionBrowser) Object.assign(tools, createQuickActionTools({
+			browser: quickActionBrowser,
+			actions: qa.actions,
+			maxChars: qa.maxChars,
+			options: qa.options
+		}));
+		else if (options.quickActions) throw new Error("quickActions requires a Browser Run binding — set 'browser' (env.BROWSER) or 'quickActions.browser'");
+		else if (!didDebugQuickActionSkip) {
+			didDebugQuickActionSkip = true;
+			console.debug("[agents/browser] Quick Action tools skipped — no Browser Run binding (only 'cdpUrl' is set). Pass 'browser' or 'quickActions.browser' to enable them.");
+		}
+	}
+	return {
+		runtime,
+		connector,
+		tools
+	};
+}
+/**
+* Create AI SDK tools for browser automation via CDP code mode.
+*
+* Returns a `ToolSet` with a single durable `browser_execute` tool backed by
+* a codemode runtime: the model writes TypeScript against the `cdp` connector
+* (`cdp.send`, `cdp.attachToTarget`, `cdp.spec`, …), executions are recorded
+* for abort-and-replay, and browser sessions survive pauses.
+*
+* @example
+* ```ts
+* import { createBrowserTools } from "agents/browser/ai";
+* import { generateText } from "ai";
+*
+* // inside a Durable Object / Agent:
+* const browserTools = createBrowserTools({
+*   ctx: this.ctx,
+*   browser: this.env.BROWSER,
+*   loader: this.env.LOADER,
+* });
+*
+* const result = await generateText({
+*   model,
+*   tools: { ...browserTools, ...otherTools },
+*   messages,
+* });
+* ```
+*/
+function createBrowserTools(options) {
+	return createBrowserRuntime(options).tools;
+}
+const DEFAULT_QUICK_ACTION_TOOLS = [
+	"markdown",
+	"extract",
+	"links",
+	"scrape"
+];
+const DEFAULT_QUICK_ACTION_MAX_CHARS = 5e4;
+const pageInputSchema = z.object({
+	url: z.string().url().optional().describe("URL of the page to load"),
+	html: z.string().optional().describe("Raw HTML to render instead of loading a URL")
+}).refine((value) => Boolean(value.url) || Boolean(value.html), { message: "Provide either 'url' or 'html'" });
+function toPage(input, options) {
+	const page = input.url ? { url: input.url } : { html: input.html };
+	return {
+		...options,
+		...page
+	};
+}
+function truncate(text, maxChars) {
+	if (maxChars <= 0 || text.length <= maxChars) return text;
+	return `${text.slice(0, maxChars)}\n\n[truncated ${text.length - maxChars} characters]`;
+}
+/**
+* Keep a tool result within a rough character budget so a single browse cannot
+* blow the model's context window — while preserving the result's shape so the
+* model sees a consistent type across calls:
+*
+* - strings (markdown/content) are truncated to a string;
+* - arrays (links/scrape) are trimmed from the end but stay arrays;
+* - only an opaque oversized object (e.g. a sprawling `extract`) degrades to a
+*   `{ truncated, note, preview }` summary, since it cannot be trimmed safely.
+*/
+function boundResult(value, maxChars) {
+	if (maxChars <= 0) return value;
+	if (typeof value === "string") return truncate(value, maxChars);
+	let json;
+	try {
+		json = JSON.stringify(value);
+	} catch {
+		return value;
+	}
+	if (json.length <= maxChars) return value;
+	if (Array.isArray(value)) {
+		const trimmed = boundArray(value, maxChars);
+		if (trimmed.length > 0) return trimmed;
+	}
+	return {
+		truncated: true,
+		note: `Result is too large (${json.length} characters); narrow the request.`,
+		preview: `${json.slice(0, maxChars)}…`
+	};
+}
+/**
+* Take as many leading items as fit within `maxChars` (measured against their
+* JSON length), returning a trimmed array of the same element type. Silent by
+* design: the model gets fewer, valid items rather than a reshaped result.
+*/
+function boundArray(value, maxChars) {
+	const out = [];
+	let size = 2;
+	for (const item of value) {
+		const itemSize = JSON.stringify(item).length + 1;
+		if (size + itemSize > maxChars) break;
+		out.push(item);
+		size += itemSize;
+	}
+	return out;
+}
+/**
+* Create AI SDK tools for Browser Run [Quick Actions](https://developers.cloudflare.com/browser-run/quick-actions/):
+* stateless one-shot browsing (read a page as Markdown, extract structured
+* data with AI, list links, scrape elements). Unlike `createBrowserTools`,
+* these need only the `browser` binding — no Durable Object, loader, or
+* sandbox — so they work from any Worker.
+*
+* @example
+* ```ts
+* import { createQuickActionTools } from "agents/browser/ai";
+*
+* const tools = createQuickActionTools({ browser: this.env.BROWSER });
+* const result = await generateText({ model, tools, messages });
+* ```
+*/
+function createQuickActionTools(options) {
+	const { browser } = options;
+	const requestOptions = options.options;
+	const enabled = new Set(options.actions ?? DEFAULT_QUICK_ACTION_TOOLS);
+	const maxChars = options.maxChars ?? DEFAULT_QUICK_ACTION_MAX_CHARS;
+	const tools = {};
+	if (enabled.has("markdown")) tools.browser_markdown = tool({
+		description: "Load a web page (or render raw HTML) and return its content as Markdown. Best for reading articles, docs, or any page as text.",
+		inputSchema: pageInputSchema,
+		execute: async (input) => boundResult(await browserMarkdown(browser, toPage(input, requestOptions)), maxChars)
+	});
+	if (enabled.has("extract")) tools.browser_extract = tool({
+		description: "Extract structured data from a web page using AI. Describe what you want in 'prompt'. Passing a JSON Schema in 'schema' is strongly recommended — without one the extractor often fails to produce JSON.",
+		inputSchema: z.object({
+			url: z.string().url().optional().describe("URL of the page to load"),
+			html: z.string().optional().describe("Raw HTML to render instead of loading a URL"),
+			prompt: z.string().optional().describe("What to extract, in natural language"),
+			schema: z.record(z.string(), z.unknown(), { error: "Schema must be a JSON object" }).optional().describe("Optional JSON Schema describing the desired output")
+		}).refine((value) => Boolean(value.url) || Boolean(value.html), { message: "Provide either 'url' or 'html'" }).refine((value) => Boolean(value.prompt) || Boolean(value.schema), { message: "Provide either 'prompt' or 'schema'" }),
+		execute: async (input) => boundResult(await browserExtract(browser, {
+			...toPage(input, requestOptions),
+			prompt: input.prompt,
+			response_format: input.schema ? {
+				type: "json_schema",
+				json_schema: input.schema
+			} : void 0
+		}), maxChars)
+	});
+	if (enabled.has("links")) tools.browser_links = tool({
+		description: "Return every link found on a web page (including ones not visible). Useful for discovering pages to follow.",
+		inputSchema: pageInputSchema,
+		execute: async (input) => boundResult(await browserLinks(browser, toPage(input, requestOptions)), maxChars)
+	});
+	if (enabled.has("scrape")) tools.browser_scrape = tool({
+		description: "Scrape specific elements from a web page by CSS selector. Returns the matched elements' text, HTML, and attributes.",
+		inputSchema: z.object({
+			url: z.string().url().optional().describe("URL of the page to load"),
+			html: z.string().optional().describe("Raw HTML to render instead of loading a URL"),
+			selectors: z.array(z.string()).min(1).describe("CSS selectors to extract")
+		}).refine((value) => Boolean(value.url) || Boolean(value.html), { message: "Provide either 'url' or 'html'" }),
+		execute: async (input) => boundResult(await browserScrape(browser, {
+			...toPage(input, requestOptions),
+			elements: input.selectors.map((selector) => ({ selector }))
+		}), maxChars)
+	});
+	if (enabled.has("content")) tools.browser_content = tool({
+		description: "Load a web page and return its fully rendered HTML (after JavaScript runs). Prefer 'browser_markdown' unless you need the raw HTML.",
+		inputSchema: pageInputSchema,
+		execute: async (input) => boundResult(await browserContent(browser, toPage(input, requestOptions)), maxChars)
+	});
+	return tools;
+}
+//#endregion
+export { browserScreenshotOutput as a, browserExecuteModelOutput as i, createBrowserTools as n, resolveCtx as o, createQuickActionTools as r, transformBrowserResult as s, createBrowserRuntime as t };
+
+//# sourceMappingURL=ai-fm7xx1BK.js.map

package/dist/ai-fm7xx1BK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-fm7xx1BK.js","names":["agentContext"],"sources":["../src/browser/tool-helpers.ts","../src/browser/ai.ts"],"sourcesContent":["/**\n * Helpers shared by the browser tools: `createBrowserTools` in `ai.ts`, and\n * `browserTool` in `ai-sdk.ts` and `tanstack-ai.ts`. Internal — not an entry\n * point.\n */\nimport type { JSONValue } from \"ai\";\nimport { truncateResult } from \"@cloudflare/codemode\";\nimport { redactBase64Payloads } from \"../core/base64-redaction\";\nimport { __DO_NOT_USE_WILL_BREAK__agentContext as agentContext } from \"../internal_context\";\n\ninterface BrowserScreenshotOutput {\n  type: \"browser_screenshot\";\n  mediaType: string;\n  data: string;\n}\n\nexport function browserScreenshotOutput(\n  value: unknown\n): BrowserScreenshotOutput | null {\n  const outer =\n    typeof value === \"object\" && value !== null\n      ? (value as Record<string, unknown>)\n      : null;\n  const result =\n    outer && typeof outer.result === \"object\" && outer.result !== null\n      ? (outer.result as Record<string, unknown>)\n      : outer;\n  if (\n    result?.type !== \"browser_screenshot\" ||\n    typeof result.mediaType !== \"string\" ||\n    typeof result.data !== \"string\"\n  ) {\n    return null;\n  }\n  return result as unknown as BrowserScreenshotOutput;\n}\n\nexport function transformBrowserResult(value: unknown): unknown {\n  // Keep canonical screenshot output intact for UIMessage persistence and the\n  // chat renderer. Other results are redacted before truncation so a nested\n  // binary payload cannot become a large serialized preview.\n  return browserScreenshotOutput(value)\n    ? value\n    : truncateResult(redactBase64Payloads(value));\n}\n\n/** What the model sees in place of a browser tool's output. */\nexport type BrowserModelOutput =\n  | { type: \"text\"; value: string }\n  | { type: \"json\"; value: JSONValue };\n\n/**\n * @param notes Sentences appended when a screenshot collapses the output to\n * text, so notices on the output aren't lost with it.\n */\nexport function browserExecuteModelOutput(\n  output: unknown,\n  notes: string[] = []\n): BrowserModelOutput {\n  const screenshot = browserScreenshotOutput(output);\n  if (screenshot) {\n    const approximateBytes = Math.floor((screenshot.data.length * 3) / 4);\n    return {\n      type: \"text\",\n      value: [\n        `Screenshot captured successfully (${screenshot.mediaType}, approximately ${approximateBytes.toLocaleString()} bytes); the image is kept for the UI and omitted here.`,\n        ...notes\n      ].join(\" \")\n    };\n  }\n\n  // `calls` is the durable audit log; like the codemode tool's own projection,\n  // it stays on the persisted part and never enters the model's context, and\n  // the sandbox `logs` are bounded like a result.\n  const modelFacing =\n    typeof output === \"object\" && output !== null && !Array.isArray(output)\n      ? (({ calls: _calls, ...rest }: { calls?: unknown; logs?: unknown }) => ({\n          ...rest,\n          ...(Array.isArray(rest.logs)\n            ? { logs: truncateResult(rest.logs) }\n            : {})\n        }))(output)\n      : output;\n  const redacted = redactBase64Payloads(modelFacing);\n  try {\n    const serialized = JSON.stringify(redacted);\n    return {\n      type: \"json\",\n      value:\n        serialized === undefined ? null : (JSON.parse(serialized) as JSONValue)\n    };\n  } catch {\n    return {\n      type: \"text\",\n      value:\n        \"Browser execution completed, but its result could not be serialized for model context.\"\n    };\n  }\n}\n\n/**\n * The Durable Object state to build the runtime in: the explicit `ctx` if\n * given, otherwise the current Agent's `ctx` (via `getCurrentAgent()`), so\n * `createBrowserRuntime` can be called from an Agent method without threading\n * `this.ctx` through.\n */\nexport function resolveCtx(options: {\n  ctx?: DurableObjectState;\n}): DurableObjectState | undefined {\n  if (options.ctx) return options.ctx;\n  const agent = agentContext.getStore()?.agent as\n    | { ctx?: DurableObjectState }\n    | undefined;\n  return agent?.ctx;\n}\n","import { tool, type ToolSet } from \"ai\";\nimport { z } from \"zod\";\nimport {\n  createCodemodeRuntime,\n  DynamicWorkerExecutor,\n  type CodemodeRuntimeHandle\n} from \"@cloudflare/codemode\";\nimport type { BrowserBinding } from \"./browser-run\";\nimport {\n  browserContent,\n  browserExtract,\n  browserLinks,\n  browserMarkdown,\n  browserScrape,\n  type QuickActionBinding,\n  type QuickActionCommonOptions,\n  type QuickActionPage\n} from \"./quick-actions\";\nimport {\n  BrowserConnector,\n  type BrowserConnectorOptions,\n  type BrowserConnectorSessionOptions\n} from \"./connector\";\nimport {\n  DurableBrowserSessionStore,\n  type BrowserSessionStore\n} from \"./session-store\";\nimport {\n  browserExecuteModelOutput,\n  resolveCtx,\n  transformBrowserResult\n} from \"./tool-helpers\";\n\nexport interface CreateBrowserToolsOptions {\n  /**\n   * Durable Object state. The codemode runtime that backs the browser tool\n   * lives in a facet of this DO, and browser session ids are stored in its\n   * storage — so the tool must be created from inside a Durable Object\n   * (e.g. an Agent).\n   *\n   * Optional: when omitted, it is resolved from the current Agent via\n   * `getCurrentAgent()`, so inside an Agent method you can just pass `browser`\n   * and `loader`. Pass it explicitly outside an Agent context.\n   *\n   * The worker must export the `CodemodeRuntime` class (the\n   * `@cloudflare/codemode/vite` plugin does this automatically, or add\n   * `export { CodemodeRuntime } from \"@cloudflare/codemode\"` to your entry).\n   */\n  ctx?: DurableObjectState;\n\n  /**\n   * WorkerLoader binding for sandboxed code execution.\n   *\n   * Requires `\"worker_loaders\": [{ \"binding\": \"LOADER\" }]` in wrangler.jsonc.\n   */\n  loader: WorkerLoader;\n\n  /**\n   * Browser Rendering binding (Fetcher).\n   *\n   * This is the primary way to connect — works both locally in\n   * `wrangler dev` and when deployed to Cloudflare Workers.\n   *\n   * Requires `\"browser\": { \"binding\": \"BROWSER\" }` in wrangler.jsonc.\n   */\n  browser?: BrowserBinding;\n\n  /**\n   * Optional CDP base URL override (e.g. `http://localhost:9222`).\n   *\n   * Use when connecting to a manually managed Chrome instance or\n   * a remote CDP endpoint behind a tunnel.\n   */\n  cdpUrl?: string;\n\n  /**\n   * Headers to send with CDP URL discovery requests.\n   * Useful when the CDP endpoint requires authentication\n   * (e.g. Cloudflare Access headers).\n   */\n  cdpHeaders?: Record<string, string>;\n\n  /**\n   * Browser session lifecycle (binding-backed only). Defaults to one fresh\n   * session per codemode execution (`one-shot`).\n   */\n  session?: BrowserConnectorSessionOptions;\n\n  /**\n   * Durable store for Browser Run session ids. Defaults to a\n   * {@link DurableBrowserSessionStore} over `ctx.storage`.\n   */\n  store?: BrowserSessionStore;\n\n  /**\n   * Sandbox execution timeout in milliseconds. Defaults to 30000 (30s).\n   * Also used as the per-CDP-command timeout.\n   */\n  timeout?: number;\n\n  /**\n   * Codemode runtime name — the durable identity of the tool's executions\n   * and snippets. Defaults to `\"browser\"`.\n   */\n  name?: string;\n\n  /**\n   * Also expose stateless {@link createQuickActionTools | Quick Action} tools\n   * (`browser_markdown`, `browser_extract`, …) alongside the durable\n   * `browser_execute` tool.\n   *\n   * Enabled by default whenever a Browser Run `browser` binding is available\n   * (they share it), except when `session.browser` selects Kitesurf because\n   * the binding RPC cannot select that engine. Pass `true` or an object to\n   * explicitly add Chromium Quick Actions alongside Kitesurf, or `false` to\n   * disable them. The Quick Action binding defaults to `browser`; override it via\n   * `quickActions.browser`. When only `cdpUrl` is set (no binding), the\n   * defaults are skipped silently — pass `quickActions: { browser }` to force\n   * them.\n   */\n  quickActions?:\n    | boolean\n    | {\n        browser?: QuickActionBinding;\n        actions?: QuickActionToolName[];\n        maxChars?: number;\n        options?: QuickActionCommonOptions;\n      };\n}\n\n/**\n * The browser tool's moving parts, for hosts that need more than the tools:\n *\n * - `runtime` — the codemode runtime handle (approve/reject paused runs,\n *   `expirePaused`, audit via `executions()`, snippets).\n * - `connector` — host-side session helpers: `sessionInfo()`,\n *   `closeSession()`, and `sweep()` for a recurring cleanup task.\n * - `tools` — what `createBrowserTools` returns.\n */\nexport interface BrowserRuntime {\n  runtime: CodemodeRuntimeHandle;\n  connector: BrowserConnector;\n  tools: ToolSet;\n}\n\nlet didWarnExperimental = false;\nlet didDebugQuickActionSkip = false;\n\nfunction connectorOptions(\n  options: CreateBrowserToolsOptions,\n  ctx: DurableObjectState\n): BrowserConnectorOptions {\n  if (options.cdpUrl) {\n    return {\n      cdpUrl: options.cdpUrl,\n      cdpHeaders: options.cdpHeaders,\n      timeout: options.timeout\n    };\n  }\n  if (!options.browser) {\n    throw new Error(\n      \"Either 'browser' (Fetcher binding) or 'cdpUrl' must be provided\"\n    );\n  }\n  return {\n    browser: options.browser,\n    store: options.store ?? new DurableBrowserSessionStore(ctx.storage),\n    session: options.session,\n    timeout: options.timeout\n  };\n}\n\n/**\n * Create the browser codemode runtime: the `browser_execute` tool plus the\n * runtime handle and connector for host-side wiring (approvals, session info,\n * sweeps).\n *\n * @example\n * ```ts\n * export class MyAgent extends Agent<Env> {\n *   get browser() {\n *     return createBrowserRuntime({\n *       ctx: this.ctx,\n *       browser: this.env.BROWSER,\n *       loader: this.env.LOADER,\n *       session: { mode: \"dynamic\" }\n *     });\n *   }\n *\n *   @callable()\n *   async closeBrowserSession() {\n *     await this.browser.connector.closeSession();\n *   }\n * }\n * ```\n */\nexport function createBrowserRuntime(\n  options: CreateBrowserToolsOptions\n): BrowserRuntime {\n  if (!didWarnExperimental) {\n    didWarnExperimental = true;\n    console.warn(\n      \"[agents/browser] Browser tools are experimental and may change in a future release.\"\n    );\n  }\n\n  const ctx = resolveCtx(options);\n  if (!ctx) {\n    throw new Error(\n      \"createBrowserRuntime requires a Durable Object 'ctx' — pass it explicitly, or call from within an Agent so it can be resolved via getCurrentAgent()\"\n    );\n  }\n\n  const connector = new BrowserConnector(ctx, connectorOptions(options, ctx));\n  const runtime = createCodemodeRuntime({\n    ctx,\n    executor: new DynamicWorkerExecutor({\n      loader: options.loader,\n      timeout: options.timeout\n    }),\n    connectors: [connector],\n    name: options.name ?? \"browser\",\n    transformResult: transformBrowserResult\n  });\n\n  // `connectorOptions` drops `session` when a custom endpoint is used, so the\n  // connector is plain Chromium there whatever the session options say.\n  const isKitesurf = !options.cdpUrl && options.session?.browser === \"kitesurf\";\n  const browserExecute = runtime.tool({\n    connectorHints: {\n      cdp: isKitesurf\n        ? 'Kitesurf one-shot Browser CDP. Call codemode.describe(\"cdp\") for connector types and Kitesurf execution rules. codemode.search indexes connector methods and snippets, not underlying CDP commands. Complete the task in one execution and do not pause. Return screenshots as { type: \"browser_screenshot\", mediaType: \"image/png\", data: screenshot.data }.'\n        : \"Browser CDP. Return screenshots as { type: 'browser_screenshot', mediaType: 'image/png', data: screenshot.data }; the UI keeps the image while the model receives a compact summary.\"\n    }\n  });\n  const tools: ToolSet = {\n    browser_execute: {\n      ...browserExecute,\n      toModelOutput: ({ output }: { output: unknown }) =>\n        browserExecuteModelOutput(output)\n    }\n  };\n\n  // Quick Actions ride the same `browser` binding, so they are on by default\n  // for Chromium. The binding RPC cannot select Kitesurf, so selecting\n  // Kitesurf disables the defaults rather than silently adding Chromium tools.\n  // Callers can still request a mixed-engine toolset explicitly.\n  const enableQuickActions =\n    options.quickActions !== false &&\n    (!isKitesurf || options.quickActions !== undefined);\n  // `env.BROWSER` satisfies both the CDP `BrowserBinding` (fetch) and the\n  // `QuickActionBinding` (quickAction) surfaces; our narrower option type only\n  // sees the former, so reuse it here unless an explicit binding wins.\n  if (enableQuickActions) {\n    const qa =\n      typeof options.quickActions === \"object\" ? options.quickActions : {};\n    const quickActionBrowser =\n      qa.browser ??\n      (options.browser as unknown as QuickActionBinding | undefined);\n    if (quickActionBrowser) {\n      Object.assign(\n        tools,\n        createQuickActionTools({\n          browser: quickActionBrowser,\n          actions: qa.actions,\n          maxChars: qa.maxChars,\n          options: qa.options\n        })\n      );\n    } else if (options.quickActions) {\n      // Explicitly requested but no binding to back them.\n      throw new Error(\n        \"quickActions requires a Browser Run binding — set 'browser' (env.BROWSER) or 'quickActions.browser'\"\n      );\n    } else if (!didDebugQuickActionSkip) {\n      // Defaulted on, but only `cdpUrl` is set: there is no binding to call\n      // Quick Actions through, so they are skipped. Surface it once so a user\n      // expecting `browser_markdown` et al. isn't left wondering.\n      didDebugQuickActionSkip = true;\n      console.debug(\n        \"[agents/browser] Quick Action tools skipped — no Browser Run binding (only 'cdpUrl' is set). Pass 'browser' or 'quickActions.browser' to enable them.\"\n      );\n    }\n  }\n\n  return { runtime, connector, tools };\n}\n\n/**\n * Create AI SDK tools for browser automation via CDP code mode.\n *\n * Returns a `ToolSet` with a single durable `browser_execute` tool backed by\n * a codemode runtime: the model writes TypeScript against the `cdp` connector\n * (`cdp.send`, `cdp.attachToTarget`, `cdp.spec`, …), executions are recorded\n * for abort-and-replay, and browser sessions survive pauses.\n *\n * @example\n * ```ts\n * import { createBrowserTools } from \"agents/browser/ai\";\n * import { generateText } from \"ai\";\n *\n * // inside a Durable Object / Agent:\n * const browserTools = createBrowserTools({\n *   ctx: this.ctx,\n *   browser: this.env.BROWSER,\n *   loader: this.env.LOADER,\n * });\n *\n * const result = await generateText({\n *   model,\n *   tools: { ...browserTools, ...otherTools },\n *   messages,\n * });\n * ```\n */\nexport function createBrowserTools(\n  options: CreateBrowserToolsOptions\n): ToolSet {\n  return createBrowserRuntime(options).tools;\n}\n\n/** A Quick Action exposed as an AI SDK tool. */\nexport type QuickActionToolName =\n  | \"markdown\"\n  | \"extract\"\n  | \"links\"\n  | \"scrape\"\n  | \"content\";\n\nexport interface CreateQuickActionToolsOptions {\n  /**\n   * Browser Run binding with Quick Actions support (`env.BROWSER`). Requires a\n   * Worker `compatibility_date` of `2026-03-24`+ and `remote: true` for local\n   * `wrangler dev`.\n   */\n  browser: QuickActionBinding;\n\n  /**\n   * Which tools to expose. Defaults to the text-returning, model-friendly set\n   * (`markdown`, `extract`, `links`, `scrape`). `content` (raw HTML) is opt-in\n   * since it is large and rarely what a model wants.\n   */\n  actions?: QuickActionToolName[];\n\n  /**\n   * Bound every result to roughly this many characters before returning it to\n   * the model, to protect the context window, preserving each result's shape:\n   * text (markdown/content) is truncated to a string, oversized arrays\n   * (links/scrape) are trimmed but stay arrays, and only an opaque oversized\n   * object degrades to a truncated-preview summary. Set to `0` to disable.\n   * Defaults to 50000.\n   */\n  maxChars?: number;\n\n  /**\n   * Common Browser Run options merged into every request — e.g. `cookies`,\n   * `authenticate`, or `setExtraHTTPHeaders` for authenticated pages, and\n   * `gotoOptions` / `viewport` for JavaScript-heavy pages. The model only ever\n   * supplies the page (`url`/`html`) and action-specific fields; these\n   * host-supplied options are never exposed to it.\n   */\n  options?: QuickActionCommonOptions;\n}\n\nconst DEFAULT_QUICK_ACTION_TOOLS: QuickActionToolName[] = [\n  \"markdown\",\n  \"extract\",\n  \"links\",\n  \"scrape\"\n];\n\nconst DEFAULT_QUICK_ACTION_MAX_CHARS = 50_000;\n\nconst pageInputSchema = z\n  .object({\n    url: z.string().url().optional().describe(\"URL of the page to load\"),\n    html: z\n      .string()\n      .optional()\n      .describe(\"Raw HTML to render instead of loading a URL\")\n  })\n  .refine((value) => Boolean(value.url) || Boolean(value.html), {\n    message: \"Provide either 'url' or 'html'\"\n  });\n\nfunction toPage(\n  input: { url?: string; html?: string },\n  options?: QuickActionCommonOptions\n): QuickActionPage {\n  const page = input.url ? { url: input.url } : { html: input.html as string };\n  return { ...options, ...page } as QuickActionPage;\n}\n\nfunction truncate(text: string, maxChars: number): string {\n  if (maxChars <= 0 || text.length <= maxChars) return text;\n  return `${text.slice(0, maxChars)}\\n\\n[truncated ${text.length - maxChars} characters]`;\n}\n\n/**\n * Keep a tool result within a rough character budget so a single browse cannot\n * blow the model's context window — while preserving the result's shape so the\n * model sees a consistent type across calls:\n *\n * - strings (markdown/content) are truncated to a string;\n * - arrays (links/scrape) are trimmed from the end but stay arrays;\n * - only an opaque oversized object (e.g. a sprawling `extract`) degrades to a\n *   `{ truncated, note, preview }` summary, since it cannot be trimmed safely.\n */\nfunction boundResult(value: unknown, maxChars: number): unknown {\n  if (maxChars <= 0) return value;\n  if (typeof value === \"string\") return truncate(value, maxChars);\n  let json: string;\n  try {\n    json = JSON.stringify(value);\n  } catch {\n    return value;\n  }\n  if (json.length <= maxChars) return value;\n  if (Array.isArray(value)) {\n    const trimmed = boundArray(value, maxChars);\n    // If even the first element overflows the budget, `trimmed` is empty —\n    // returning `[]` would read as \"no results\" rather than \"too large\", so\n    // fall through to the explicit truncated-preview summary instead.\n    if (trimmed.length > 0) return trimmed;\n  }\n  return {\n    truncated: true,\n    note: `Result is too large (${json.length} characters); narrow the request.`,\n    preview: `${json.slice(0, maxChars)}…`\n  };\n}\n\n/**\n * Take as many leading items as fit within `maxChars` (measured against their\n * JSON length), returning a trimmed array of the same element type. Silent by\n * design: the model gets fewer, valid items rather than a reshaped result.\n */\nfunction boundArray(value: unknown[], maxChars: number): unknown[] {\n  const out: unknown[] = [];\n  let size = 2; // the enclosing \"[]\"\n  for (const item of value) {\n    const itemSize = JSON.stringify(item).length + 1; // + a separating comma\n    if (size + itemSize > maxChars) break;\n    out.push(item);\n    size += itemSize;\n  }\n  return out;\n}\n\n/**\n * Create AI SDK tools for Browser Run [Quick Actions](https://developers.cloudflare.com/browser-run/quick-actions/):\n * stateless one-shot browsing (read a page as Markdown, extract structured\n * data with AI, list links, scrape elements). Unlike `createBrowserTools`,\n * these need only the `browser` binding — no Durable Object, loader, or\n * sandbox — so they work from any Worker.\n *\n * @example\n * ```ts\n * import { createQuickActionTools } from \"agents/browser/ai\";\n *\n * const tools = createQuickActionTools({ browser: this.env.BROWSER });\n * const result = await generateText({ model, tools, messages });\n * ```\n */\nexport function createQuickActionTools(\n  options: CreateQuickActionToolsOptions\n): ToolSet {\n  const { browser } = options;\n  const requestOptions = options.options;\n  const enabled = new Set(options.actions ?? DEFAULT_QUICK_ACTION_TOOLS);\n  const maxChars = options.maxChars ?? DEFAULT_QUICK_ACTION_MAX_CHARS;\n  const tools: ToolSet = {};\n\n  if (enabled.has(\"markdown\")) {\n    tools.browser_markdown = tool({\n      description:\n        \"Load a web page (or render raw HTML) and return its content as Markdown. Best for reading articles, docs, or any page as text.\",\n      inputSchema: pageInputSchema,\n      execute: async (input) =>\n        boundResult(\n          await browserMarkdown(browser, toPage(input, requestOptions)),\n          maxChars\n        )\n    });\n  }\n\n  if (enabled.has(\"extract\")) {\n    tools.browser_extract = tool({\n      description:\n        \"Extract structured data from a web page using AI. Describe what you want in 'prompt'. Passing a JSON Schema in 'schema' is strongly recommended — without one the extractor often fails to produce JSON.\",\n      inputSchema: z\n        .object({\n          url: z.string().url().optional().describe(\"URL of the page to load\"),\n          html: z\n            .string()\n            .optional()\n            .describe(\"Raw HTML to render instead of loading a URL\"),\n          prompt: z\n            .string()\n            .optional()\n            .describe(\"What to extract, in natural language\"),\n          schema: z\n            .record(z.string(), z.unknown(), {\n              error: \"Schema must be a JSON object\"\n            })\n            .optional()\n            .describe(\"Optional JSON Schema describing the desired output\")\n        })\n        .refine((value) => Boolean(value.url) || Boolean(value.html), {\n          message: \"Provide either 'url' or 'html'\"\n        })\n        .refine((value) => Boolean(value.prompt) || Boolean(value.schema), {\n          message: \"Provide either 'prompt' or 'schema'\"\n        }),\n      execute: async (input) =>\n        boundResult(\n          await browserExtract(browser, {\n            ...toPage(input, requestOptions),\n            prompt: input.prompt,\n            response_format: input.schema\n              ? { type: \"json_schema\", json_schema: input.schema }\n              : undefined\n          }),\n          maxChars\n        )\n    });\n  }\n\n  if (enabled.has(\"links\")) {\n    tools.browser_links = tool({\n      description:\n        \"Return every link found on a web page (including ones not visible). Useful for discovering pages to follow.\",\n      inputSchema: pageInputSchema,\n      execute: async (input) =>\n        boundResult(\n          await browserLinks(browser, toPage(input, requestOptions)),\n          maxChars\n        )\n    });\n  }\n\n  if (enabled.has(\"scrape\")) {\n    tools.browser_scrape = tool({\n      description:\n        \"Scrape specific elements from a web page by CSS selector. Returns the matched elements' text, HTML, and attributes.\",\n      inputSchema: z\n        .object({\n          url: z.string().url().optional().describe(\"URL of the page to load\"),\n          html: z\n            .string()\n            .optional()\n            .describe(\"Raw HTML to render instead of loading a URL\"),\n          selectors: z\n            .array(z.string())\n            .min(1)\n            .describe(\"CSS selectors to extract\")\n        })\n        .refine((value) => Boolean(value.url) || Boolean(value.html), {\n          message: \"Provide either 'url' or 'html'\"\n        }),\n      execute: async (input) =>\n        boundResult(\n          await browserScrape(browser, {\n            ...toPage(input, requestOptions),\n            elements: input.selectors.map((selector) => ({ selector }))\n          }),\n          maxChars\n        )\n    });\n  }\n\n  if (enabled.has(\"content\")) {\n    tools.browser_content = tool({\n      description:\n        \"Load a web page and return its fully rendered HTML (after JavaScript runs). Prefer 'browser_markdown' unless you need the raw HTML.\",\n      inputSchema: pageInputSchema,\n      execute: async (input) =>\n        boundResult(\n          await browserContent(browser, toPage(input, requestOptions)),\n          maxChars\n        )\n    });\n  }\n\n  return tools;\n}\n"],"mappings":";;;;;;;;AAgBA,SAAgB,wBACd,OACgC;CAChC,MAAM,QACJ,OAAO,UAAU,YAAY,UAAU,OAClC,QACD;CACN,MAAM,SACJ,SAAS,OAAO,MAAM,WAAW,YAAY,MAAM,WAAW,OACzD,MAAM,SACP;CACN,IACE,QAAQ,SAAS,wBACjB,OAAO,OAAO,cAAc,YAC5B,OAAO,OAAO,SAAS,UAEvB,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,uBAAuB,OAAyB;CAI9D,OAAO,wBAAwB,KAAK,IAChC,QACA,eAAe,qBAAqB,KAAK,CAAC;AAChD;;;;;AAWA,SAAgB,0BACd,QACA,QAAkB,CAAC,GACC;CACpB,MAAM,aAAa,wBAAwB,MAAM;CACjD,IAAI,YAAY;EACd,MAAM,mBAAmB,KAAK,MAAO,WAAW,KAAK,SAAS,IAAK,CAAC;EACpE,OAAO;GACL,MAAM;GACN,OAAO,CACL,qCAAqC,WAAW,UAAU,kBAAkB,iBAAiB,eAAe,EAAE,0DAC9G,GAAG,KACL,CAAC,CAAC,KAAK,GAAG;EACZ;CACF;CAcA,MAAM,WAAW,qBARf,OAAO,WAAW,YAAY,WAAW,QAAQ,CAAC,MAAM,QAAQ,MAAM,MAChE,EAAE,OAAO,QAAQ,GAAG,YAAiD;EACrE,GAAG;EACH,GAAI,MAAM,QAAQ,KAAK,IAAI,IACvB,EAAE,MAAM,eAAe,KAAK,IAAI,EAAE,IAClC,CAAC;CACP,GAAA,CAAI,MAAM,IACV,MAC2C;CACjD,IAAI;EACF,MAAM,aAAa,KAAK,UAAU,QAAQ;EAC1C,OAAO;GACL,MAAM;GACN,OACE,eAAe,KAAA,IAAY,OAAQ,KAAK,MAAM,UAAU;EAC5D;CACF,QAAQ;EACN,OAAO;GACL,MAAM;GACN,OACE;EACJ;CACF;AACF;;;;;;;AAQA,SAAgB,WAAW,SAEQ;CACjC,IAAI,QAAQ,KAAK,OAAO,QAAQ;CAIhC,QAHcA,sCAAa,SAAS,CAAC,EAAE,MAAA,EAGzB;AAChB;;;AC+BA,IAAI,sBAAsB;AAC1B,IAAI,0BAA0B;AAE9B,SAAS,iBACP,SACA,KACyB;CACzB,IAAI,QAAQ,QACV,OAAO;EACL,QAAQ,QAAQ;EAChB,YAAY,QAAQ;EACpB,SAAS,QAAQ;CACnB;CAEF,IAAI,CAAC,QAAQ,SACX,MAAM,IAAI,MACR,iEACF;CAEF,OAAO;EACL,SAAS,QAAQ;EACjB,OAAO,QAAQ,SAAS,IAAI,2BAA2B,IAAI,OAAO;EAClE,SAAS,QAAQ;EACjB,SAAS,QAAQ;CACnB;AACF;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,qBACd,SACgB;CAChB,IAAI,CAAC,qBAAqB;EACxB,sBAAsB;EACtB,QAAQ,KACN,qFACF;CACF;CAEA,MAAM,MAAM,WAAW,OAAO;CAC9B,IAAI,CAAC,KACH,MAAM,IAAI,MACR,qJACF;CAGF,MAAM,YAAY,IAAI,iBAAiB,KAAK,iBAAiB,SAAS,GAAG,CAAC;CAC1E,MAAM,UAAU,sBAAsB;EACpC;EACA,UAAU,IAAI,sBAAsB;GAClC,QAAQ,QAAQ;GAChB,SAAS,QAAQ;EACnB,CAAC;EACD,YAAY,CAAC,SAAS;EACtB,MAAM,QAAQ,QAAQ;EACtB,iBAAiB;CACnB,CAAC;CAID,MAAM,aAAa,CAAC,QAAQ,UAAU,QAAQ,SAAS,YAAY;CAQnE,MAAM,QAAiB,EACrB,iBAAiB;EACf,GATmB,QAAQ,KAAK,EAClC,gBAAgB,EACd,KAAK,aACD,wWACA,uLACN,EACF,CAGoB;EAChB,gBAAgB,EAAE,aAChB,0BAA0B,MAAM;CACpC,EACF;CAYA,IALE,QAAQ,iBAAiB,UACxB,CAAC,cAAc,QAAQ,iBAAiB,KAAA,IAInB;EACtB,MAAM,KACJ,OAAO,QAAQ,iBAAiB,WAAW,QAAQ,eAAe,CAAC;EACrE,MAAM,qBACJ,GAAG,WACF,QAAQ;EACX,IAAI,oBACF,OAAO,OACL,OACA,uBAAuB;GACrB,SAAS;GACT,SAAS,GAAG;GACZ,UAAU,GAAG;GACb,SAAS,GAAG;EACd,CAAC,CACH;OACK,IAAI,QAAQ,cAEjB,MAAM,IAAI,MACR,qGACF;OACK,IAAI,CAAC,yBAAyB;GAInC,0BAA0B;GAC1B,QAAQ,MACN,uJACF;EACF;CACF;CAEA,OAAO;EAAE;EAAS;EAAW;CAAM;AACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,mBACd,SACS;CACT,OAAO,qBAAqB,OAAO,CAAC,CAAC;AACvC;AA6CA,MAAM,6BAAoD;CACxD;CACA;CACA;CACA;AACF;AAEA,MAAM,iCAAiC;AAEvC,MAAM,kBAAkB,EACrB,OAAO;CACN,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,yBAAyB;CACnE,MAAM,EACH,OAAO,CAAC,CACR,SAAS,CAAC,CACV,SAAS,6CAA6C;AAC3D,CAAC,CAAC,CACD,QAAQ,UAAU,QAAQ,MAAM,GAAG,KAAK,QAAQ,MAAM,IAAI,GAAG,EAC5D,SAAS,iCACX,CAAC;AAEH,SAAS,OACP,OACA,SACiB;CACjB,MAAM,OAAO,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,EAAE,MAAM,MAAM,KAAe;CAC3E,OAAO;EAAE,GAAG;EAAS,GAAG;CAAK;AAC/B;AAEA,SAAS,SAAS,MAAc,UAA0B;CACxD,IAAI,YAAY,KAAK,KAAK,UAAU,UAAU,OAAO;CACrD,OAAO,GAAG,KAAK,MAAM,GAAG,QAAQ,EAAE,iBAAiB,KAAK,SAAS,SAAS;AAC5E;;;;;;;;;;;AAYA,SAAS,YAAY,OAAgB,UAA2B;CAC9D,IAAI,YAAY,GAAG,OAAO;CAC1B,IAAI,OAAO,UAAU,UAAU,OAAO,SAAS,OAAO,QAAQ;CAC9D,IAAI;CACJ,IAAI;EACF,OAAO,KAAK,UAAU,KAAK;CAC7B,QAAQ;EACN,OAAO;CACT;CACA,IAAI,KAAK,UAAU,UAAU,OAAO;CACpC,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,MAAM,UAAU,WAAW,OAAO,QAAQ;EAI1C,IAAI,QAAQ,SAAS,GAAG,OAAO;CACjC;CACA,OAAO;EACL,WAAW;EACX,MAAM,wBAAwB,KAAK,OAAO;EAC1C,SAAS,GAAG,KAAK,MAAM,GAAG,QAAQ,EAAE;CACtC;AACF;;;;;;AAOA,SAAS,WAAW,OAAkB,UAA6B;CACjE,MAAM,MAAiB,CAAC;CACxB,IAAI,OAAO;CACX,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS;EAC/C,IAAI,OAAO,WAAW,UAAU;EAChC,IAAI,KAAK,IAAI;EACb,QAAQ;CACV;CACA,OAAO;AACT;;;;;;;;;;;;;;;;AAiBA,SAAgB,uBACd,SACS;CACT,MAAM,EAAE,YAAY;CACpB,MAAM,iBAAiB,QAAQ;CAC/B,MAAM,UAAU,IAAI,IAAI,QAAQ,WAAW,0BAA0B;CACrE,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,QAAiB,CAAC;CAExB,IAAI,QAAQ,IAAI,UAAU,GACxB,MAAM,mBAAmB,KAAK;EAC5B,aACE;EACF,aAAa;EACb,SAAS,OAAO,UACd,YACE,MAAM,gBAAgB,SAAS,OAAO,OAAO,cAAc,CAAC,GAC5D,QACF;CACJ,CAAC;CAGH,IAAI,QAAQ,IAAI,SAAS,GACvB,MAAM,kBAAkB,KAAK;EAC3B,aACE;EACF,aAAa,EACV,OAAO;GACN,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,yBAAyB;GACnE,MAAM,EACH,OAAO,CAAC,CACR,SAAS,CAAC,CACV,SAAS,6CAA6C;GACzD,QAAQ,EACL,OAAO,CAAC,CACR,SAAS,CAAC,CACV,SAAS,sCAAsC;GAClD,QAAQ,EACL,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,GAAG,EAC/B,OAAO,+BACT,CAAC,CAAC,CACD,SAAS,CAAC,CACV,SAAS,oDAAoD;EAClE,CAAC,CAAC,CACD,QAAQ,UAAU,QAAQ,MAAM,GAAG,KAAK,QAAQ,MAAM,IAAI,GAAG,EAC5D,SAAS,iCACX,CAAC,CAAC,CACD,QAAQ,UAAU,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,MAAM,GAAG,EACjE,SAAS,sCACX,CAAC;EACH,SAAS,OAAO,UACd,YACE,MAAM,eAAe,SAAS;GAC5B,GAAG,OAAO,OAAO,cAAc;GAC/B,QAAQ,MAAM;GACd,iBAAiB,MAAM,SACnB;IAAE,MAAM;IAAe,aAAa,MAAM;GAAO,IACjD,KAAA;EACN,CAAC,GACD,QACF;CACJ,CAAC;CAGH,IAAI,QAAQ,IAAI,OAAO,GACrB,MAAM,gBAAgB,KAAK;EACzB,aACE;EACF,aAAa;EACb,SAAS,OAAO,UACd,YACE,MAAM,aAAa,SAAS,OAAO,OAAO,cAAc,CAAC,GACzD,QACF;CACJ,CAAC;CAGH,IAAI,QAAQ,IAAI,QAAQ,GACtB,MAAM,iBAAiB,KAAK;EAC1B,aACE;EACF,aAAa,EACV,OAAO;GACN,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,yBAAyB;GACnE,MAAM,EACH,OAAO,CAAC,CACR,SAAS,CAAC,CACV,SAAS,6CAA6C;GACzD,WAAW,EACR,MAAM,EAAE,OAAO,CAAC,CAAC,CACjB,IAAI,CAAC,CAAC,CACN,SAAS,0BAA0B;EACxC,CAAC,CAAC,CACD,QAAQ,UAAU,QAAQ,MAAM,GAAG,KAAK,QAAQ,MAAM,IAAI,GAAG,EAC5D,SAAS,iCACX,CAAC;EACH,SAAS,OAAO,UACd,YACE,MAAM,cAAc,SAAS;GAC3B,GAAG,OAAO,OAAO,cAAc;GAC/B,UAAU,MAAM,UAAU,KAAK,cAAc,EAAE,SAAS,EAAE;EAC5D,CAAC,GACD,QACF;CACJ,CAAC;CAGH,IAAI,QAAQ,IAAI,SAAS,GACvB,MAAM,kBAAkB,KAAK;EAC3B,aACE;EACF,aAAa;EACb,SAAS,OAAO,UACd,YACE,MAAM,eAAe,SAAS,OAAO,OAAO,cAAc,CAAC,GAC3D,QACF;CACJ,CAAC;CAGH,OAAO;AACT"}

package/dist/base64-redaction-C1Uu29t5.js

@@ -0,0 +1,59 @@
+//#region src/core/base64-redaction.ts
+const BASE64_REDACTION_THRESHOLD = 4096;
+const MAX_REDACTION_DEPTH = 20;
+const MAX_REDACTION_NODES = 1e4;
+function base64Details(value, minimumLength = BASE64_REDACTION_THRESHOLD) {
+	if (value.length < minimumLength) return null;
+	const dataUrl = /^data:([^;,]+)(?:;[^;,]*)*;base64,([A-Za-z0-9+/]*={0,2})$/i.exec(value);
+	const encoded = dataUrl?.[2] ?? value;
+	if (encoded.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded)) return null;
+	const padding = encoded.endsWith("==") ? 2 : encoded.endsWith("=") ? 1 : 0;
+	return {
+		mediaType: dataUrl?.[1],
+		chars: encoded.length,
+		bytes: encoded.length / 4 * 3 - padding
+	};
+}
+function base64Redaction(value, mediaType, minimumLength) {
+	const details = base64Details(value, minimumLength);
+	if (!details) return value;
+	const type = mediaType ?? details.mediaType;
+	return `[base64${type ? ` ${type}` : ""} data omitted: ${details.chars.toLocaleString()} chars, approximately ${details.bytes.toLocaleString()} bytes]`;
+}
+function redactBase64Payloads(value) {
+	const ancestors = /* @__PURE__ */ new WeakSet();
+	let nodes = 0;
+	function visit(current, depth) {
+		if (depth > MAX_REDACTION_DEPTH) return "[nested value omitted]";
+		if (++nodes > MAX_REDACTION_NODES) return "[remaining values omitted]";
+		if (typeof current === "string") return base64Redaction(current);
+		if (typeof current !== "object" || current === null) return current;
+		if (current instanceof ArrayBuffer || ArrayBuffer.isView(current) || current instanceof Date || current instanceof Map || current instanceof Set) return current;
+		if (ancestors.has(current)) return "[circular reference omitted]";
+		ancestors.add(current);
+		try {
+			if (Array.isArray(current)) return current.map((entry) => visit(entry, depth + 1));
+			const record = current;
+			const screenshot = record.type === "browser_screenshot" && typeof record.mediaType === "string";
+			return Object.fromEntries(Object.entries(record).map(([key, entry]) => [key, screenshot && key === "data" && typeof entry === "string" ? base64Redaction(entry, record.mediaType, 0) : visit(entry, depth + 1)]));
+		} finally {
+			ancestors.delete(current);
+		}
+	}
+	return visit(value, 0);
+}
+/**
+* `JSON.stringify` replacer applying the same rules as
+* {@link redactBase64Payloads}. Because it runs inside `JSON.stringify`,
+* `toJSON`, cycles and unsupported values behave exactly as they do without
+* it, and no depth or node limits are needed.
+*/
+function redactBase64Replacer(key, value) {
+	if (typeof value !== "string") return value;
+	const holder = this;
+	return key === "data" && holder.type === "browser_screenshot" && typeof holder.mediaType === "string" ? base64Redaction(value, holder.mediaType, 0) : base64Redaction(value);
+}
+//#endregion
+export { redactBase64Replacer as n, redactBase64Payloads as t };
+
+//# sourceMappingURL=base64-redaction-C1Uu29t5.js.map

package/dist/base64-redaction-C1Uu29t5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64-redaction-C1Uu29t5.js","names":[],"sources":["../src/core/base64-redaction.ts"],"sourcesContent":["// Internal base64 redaction shared by the browser tools (model-facing output)\n// and AI tracing (oversized tool payloads). Not part of the public API.\n\nconst BASE64_REDACTION_THRESHOLD = 4096;\nconst MAX_REDACTION_DEPTH = 20;\nconst MAX_REDACTION_NODES = 10_000;\n\nfunction base64Details(\n  value: string,\n  minimumLength = BASE64_REDACTION_THRESHOLD\n): {\n  mediaType?: string;\n  chars: number;\n  bytes: number;\n} | null {\n  if (value.length < minimumLength) return null;\n\n  const dataUrl =\n    /^data:([^;,]+)(?:;[^;,]*)*;base64,([A-Za-z0-9+/]*={0,2})$/i.exec(value);\n  const encoded = dataUrl?.[2] ?? value;\n  if (encoded.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded)) {\n    return null;\n  }\n\n  const padding = encoded.endsWith(\"==\") ? 2 : encoded.endsWith(\"=\") ? 1 : 0;\n  return {\n    mediaType: dataUrl?.[1],\n    chars: encoded.length,\n    bytes: (encoded.length / 4) * 3 - padding\n  };\n}\n\nfunction base64Redaction(\n  value: string,\n  mediaType?: string,\n  minimumLength?: number\n): string {\n  const details = base64Details(value, minimumLength);\n  if (!details) return value;\n  const type = mediaType ?? details.mediaType;\n  return `[base64${type ? ` ${type}` : \"\"} data omitted: ${details.chars.toLocaleString()} chars, approximately ${details.bytes.toLocaleString()} bytes]`;\n}\n\nexport function redactBase64Payloads(value: unknown): unknown {\n  const ancestors = new WeakSet<object>();\n  let nodes = 0;\n\n  function visit(current: unknown, depth: number): unknown {\n    if (depth > MAX_REDACTION_DEPTH) return \"[nested value omitted]\";\n    if (++nodes > MAX_REDACTION_NODES) return \"[remaining values omitted]\";\n    if (typeof current === \"string\") return base64Redaction(current);\n    if (typeof current !== \"object\" || current === null) return current;\n    // Binary values cross the sandbox boundary as Uint8Array/ArrayBuffer —\n    // walking them would rebuild them as index-keyed plain objects. The same\n    // is true of Date/Map/Set, whose own enumerable entries are empty.\n    if (\n      current instanceof ArrayBuffer ||\n      ArrayBuffer.isView(current) ||\n      current instanceof Date ||\n      current instanceof Map ||\n      current instanceof Set\n    ) {\n      return current;\n    }\n    if (ancestors.has(current)) return \"[circular reference omitted]\";\n\n    ancestors.add(current);\n    try {\n      if (Array.isArray(current)) {\n        return current.map((entry) => visit(entry, depth + 1));\n      }\n\n      const record = current as Record<string, unknown>;\n      const screenshot =\n        record.type === \"browser_screenshot\" &&\n        typeof record.mediaType === \"string\";\n      return Object.fromEntries(\n        Object.entries(record).map(([key, entry]) => [\n          key,\n          screenshot && key === \"data\" && typeof entry === \"string\"\n            ? base64Redaction(entry, record.mediaType as string, 0)\n            : visit(entry, depth + 1)\n        ])\n      );\n    } finally {\n      ancestors.delete(current);\n    }\n  }\n\n  return visit(value, 0);\n}\n\n/**\n * `JSON.stringify` replacer applying the same rules as\n * {@link redactBase64Payloads}. Because it runs inside `JSON.stringify`,\n * `toJSON`, cycles and unsupported values behave exactly as they do without\n * it, and no depth or node limits are needed.\n */\nexport function redactBase64Replacer(\n  this: unknown,\n  key: string,\n  value: unknown\n): unknown {\n  if (typeof value !== \"string\") return value;\n  const holder = this as Record<string, unknown>;\n  return key === \"data\" &&\n    holder.type === \"browser_screenshot\" &&\n    typeof holder.mediaType === \"string\"\n    ? base64Redaction(value, holder.mediaType, 0)\n    : base64Redaction(value);\n}\n"],"mappings":";AAGA,MAAM,6BAA6B;AACnC,MAAM,sBAAsB;AAC5B,MAAM,sBAAsB;AAE5B,SAAS,cACP,OACA,gBAAgB,4BAKT;CACP,IAAI,MAAM,SAAS,eAAe,OAAO;CAEzC,MAAM,UACJ,6DAA6D,KAAK,KAAK;CACzE,MAAM,UAAU,UAAU,MAAM;CAChC,IAAI,QAAQ,SAAS,MAAM,KAAK,CAAC,yBAAyB,KAAK,OAAO,GACpE,OAAO;CAGT,MAAM,UAAU,QAAQ,SAAS,IAAI,IAAI,IAAI,QAAQ,SAAS,GAAG,IAAI,IAAI;CACzE,OAAO;EACL,WAAW,UAAU;EACrB,OAAO,QAAQ;EACf,OAAQ,QAAQ,SAAS,IAAK,IAAI;CACpC;AACF;AAEA,SAAS,gBACP,OACA,WACA,eACQ;CACR,MAAM,UAAU,cAAc,OAAO,aAAa;CAClD,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,OAAO,aAAa,QAAQ;CAClC,OAAO,UAAU,OAAO,IAAI,SAAS,GAAG,iBAAiB,QAAQ,MAAM,eAAe,EAAE,wBAAwB,QAAQ,MAAM,eAAe,EAAE;AACjJ;AAEA,SAAgB,qBAAqB,OAAyB;CAC5D,MAAM,4BAAY,IAAI,QAAgB;CACtC,IAAI,QAAQ;CAEZ,SAAS,MAAM,SAAkB,OAAwB;EACvD,IAAI,QAAQ,qBAAqB,OAAO;EACxC,IAAI,EAAE,QAAQ,qBAAqB,OAAO;EAC1C,IAAI,OAAO,YAAY,UAAU,OAAO,gBAAgB,OAAO;EAC/D,IAAI,OAAO,YAAY,YAAY,YAAY,MAAM,OAAO;EAI5D,IACE,mBAAmB,eACnB,YAAY,OAAO,OAAO,KAC1B,mBAAmB,QACnB,mBAAmB,OACnB,mBAAmB,KAEnB,OAAO;EAET,IAAI,UAAU,IAAI,OAAO,GAAG,OAAO;EAEnC,UAAU,IAAI,OAAO;EACrB,IAAI;GACF,IAAI,MAAM,QAAQ,OAAO,GACvB,OAAO,QAAQ,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC;GAGvD,MAAM,SAAS;GACf,MAAM,aACJ,OAAO,SAAS,wBAChB,OAAO,OAAO,cAAc;GAC9B,OAAO,OAAO,YACZ,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAC3C,KACA,cAAc,QAAQ,UAAU,OAAO,UAAU,WAC7C,gBAAgB,OAAO,OAAO,WAAqB,CAAC,IACpD,MAAM,OAAO,QAAQ,CAAC,CAC5B,CAAC,CACH;EACF,UAAU;GACR,UAAU,OAAO,OAAO;EAC1B;CACF;CAEA,OAAO,MAAM,OAAO,CAAC;AACvB;;;;;;;AAQA,SAAgB,qBAEd,KACA,OACS;CACT,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,SAAS;CACf,OAAO,QAAQ,UACb,OAAO,SAAS,wBAChB,OAAO,OAAO,cAAc,WAC1B,gBAAgB,OAAO,OAAO,WAAW,CAAC,IAC1C,gBAAgB,KAAK;AAC3B"}

package/dist/browser/ai-sdk.d.ts

@@ -0,0 +1,90 @@
+import {
+  a as BrowserSource,
+  i as BrowserNewTab,
+  n as BrowserToolOptions,
+  r as BrowserToolOutput,
+  t as BrowserToolInput
+} from "../browser-tool-DuNdlwZ9.js";
+import {
+  CreateQuickActionToolsOptions,
+  QuickActionToolName,
+  createQuickActionTools
+} from "./ai.js";
+import { FlexibleSchema, JSONValue } from "ai";
+
+//#region src/browser/tool-helpers.d.ts
+/** What the model sees in place of a browser tool's output. */
+type BrowserModelOutput =
+  | {
+      type: "text";
+      value: string;
+    }
+  | {
+      type: "json";
+      value: JSONValue;
+    };
+//#endregion
+//#region src/browser/ai-sdk.d.ts
+/**
+ * The AI SDK tool {@link browserTool} returns. Assignable to the AI SDK's
+ * `Tool`, and `execute` / `toModelOutput` are always present.
+ */
+interface BrowserTool {
+  description: string;
+  inputSchema: FlexibleSchema<BrowserToolInput>;
+  execute(
+    input: BrowserToolInput,
+    options: unknown
+  ): Promise<BrowserToolOutput>;
+  toModelOutput(options: { output: BrowserToolOutput }): BrowserModelOutput;
+}
+/**
+ * Create an AI SDK tool that lets the model drive a persistent browser with
+ * JavaScript and the Chrome DevTools Protocol.
+ *
+ * The browser outlives each run: tabs, cookies, and logins carry over. The
+ * model never starts, closes, or resets it, and `sessionId: "active"`
+ * addresses the tab it last worked in. If the browser had to be replaced
+ * (it expired or was closed), the code still runs in the new browser and the
+ * result says `restarted: true`.
+ *
+ * Browser Run only (Chromium). Guardrails, `keepAliveMs`, and recording are
+ * set on the `Browser`'s provider.
+ *
+ * @example
+ * ```ts
+ * import { Browser, browserRun } from "agents/browser";
+ * import { browserTool } from "agents/browser/ai-sdk";
+ *
+ * export class MyAgent extends Agent<Env> {
+ *   browser = new Browser({ provider: browserRun(this.env.BROWSER) });
+ *
+ *   constructor(ctx: AgentContext, env: Env) {
+ *     super(ctx, env);
+ *     this.lifecycle.use(this.browser);
+ *   }
+ *
+ *   async onChatMessage() {
+ *     const tools = {
+ *       browser: browserTool({ browser: this.browser, loader: this.env.LOADER })
+ *     };
+ *     // …pass `tools` to streamText / generateText
+ *   }
+ * }
+ * ```
+ */
+declare function browserTool(options: BrowserToolOptions): BrowserTool;
+//#endregion
+export {
+  type BrowserNewTab,
+  type BrowserSource,
+  BrowserTool,
+  type BrowserToolInput,
+  type BrowserToolOptions,
+  type BrowserToolOutput,
+  type CreateQuickActionToolsOptions,
+  type QuickActionToolName,
+  browserTool,
+  createQuickActionTools
+};
+//# sourceMappingURL=ai-sdk.d.ts.map

package/dist/browser/ai-sdk.js

@@ -0,0 +1,51 @@
+import { n as createBrowserToolCore, t as browserReportNotes } from "../browser-tool-CQ10e6Kj.js";
+import { i as browserExecuteModelOutput, r as createQuickActionTools } from "../ai-fm7xx1BK.js";
+//#region src/browser/ai-sdk.ts
+/**
+* Create an AI SDK tool that lets the model drive a persistent browser with
+* JavaScript and the Chrome DevTools Protocol.
+*
+* The browser outlives each run: tabs, cookies, and logins carry over. The
+* model never starts, closes, or resets it, and `sessionId: "active"`
+* addresses the tab it last worked in. If the browser had to be replaced
+* (it expired or was closed), the code still runs in the new browser and the
+* result says `restarted: true`.
+*
+* Browser Run only (Chromium). Guardrails, `keepAliveMs`, and recording are
+* set on the `Browser`'s provider.
+*
+* @example
+* ```ts
+* import { Browser, browserRun } from "agents/browser";
+* import { browserTool } from "agents/browser/ai-sdk";
+*
+* export class MyAgent extends Agent<Env> {
+*   browser = new Browser({ provider: browserRun(this.env.BROWSER) });
+*
+*   constructor(ctx: AgentContext, env: Env) {
+*     super(ctx, env);
+*     this.lifecycle.use(this.browser);
+*   }
+*
+*   async onChatMessage() {
+*     const tools = {
+*       browser: browserTool({ browser: this.browser, loader: this.env.LOADER })
+*     };
+*     // …pass `tools` to streamText / generateText
+*   }
+* }
+* ```
+*/
+function browserTool(options) {
+	const core = createBrowserToolCore(options, { screenshotHint: "Return screenshots as { type: 'browser_screenshot', mediaType: 'image/png', data: screenshot.data }; the UI keeps the image while the model receives a compact summary." });
+	return {
+		description: core.description,
+		inputSchema: core.inputSchema,
+		execute: core.execute,
+		toModelOutput: ({ output }) => browserExecuteModelOutput(output, browserReportNotes(output))
+	};
+}
+//#endregion
+export { browserTool, createQuickActionTools };
+
+//# sourceMappingURL=ai-sdk.js.map