autokap 1.0.8 → 1.1.0

package/dist/execution-schema.js

@@ -21,7 +21,7 @@ export const PostconditionSpecSchema = z.object({
     text: z.string().optional(),
     threshold: z.number().min(0).max(1).optional(),
     waitMs: z.number().int().positive().optional(),
-}).superRefine((value, ctx) => {
+}).strict().superRefine((value, ctx) => {
     if (value.type === 'route_matches' && !value.pattern) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -51,7 +51,7 @@ export const RecoveryPolicySchema = z.object({
     useAltInteraction: z.boolean(),
     allowReload: z.boolean(),
     allowHealer: z.boolean(),
-});
+}).strict();
 // ── Opcode base fields ──────────────────────────────────────────────
 const opcodeBase = {
     description: z.string().min(1),
@@ -68,7 +68,7 @@ const opcodeBase = {
 const StrictUrlSchema = z.string().min(1).refine((value) => {
     try {
         const parsed = new URL(value);
-        return Boolean(parsed.host);
+        return (parsed.protocol === 'http:' || parsed.protocol === 'https:') && Boolean(parsed.host);
     }
     catch {
         return false;
@@ -81,22 +81,22 @@ const NavigateOpcodeSchema = z.object({
     kind: z.literal('NAVIGATE'),
     ...opcodeBase,
     url: StrictUrlSchema,
-});
+}).strict();
 const DismissOverlaysOpcodeSchema = z.object({
     kind: z.literal('DISMISS_OVERLAYS'),
     ...opcodeBase,
-});
+}).strict();
 const AssertRouteOpcodeSchema = z.object({
     kind: z.literal('ASSERT_ROUTE'),
     ...opcodeBase,
     urlPattern: z.string().min(1),
-});
+}).strict();
 const AssertSurfaceOpcodeSchema = z.object({
     kind: z.literal('ASSERT_SURFACE'),
     ...opcodeBase,
     selectors: z.array(z.string().min(1)).min(1),
     matchAll: z.boolean(),
-});
+}).strict();
 const SemanticTargetSchema = z.object({
     text: z.string().optional(),
     role: z.string().optional(),
@@ -104,7 +104,7 @@ const SemanticTargetSchema = z.object({
     near: z.string().optional(),
     placeholder: z.string().optional(),
     exact: z.boolean().optional(),
-}).refine((value) => Boolean(value.text || value.role || value.label || value.near || value.placeholder), 'semantic targets need at least one identifying field');
+}).strict().refine((value) => Boolean(value.text || value.role || value.label || value.near || value.placeholder), 'semantic targets need at least one identifying field');
 const ClickOpcodeSchema = z.object({
     kind: z.literal('CLICK'),
     ...opcodeBase,
@@ -113,7 +113,7 @@ const ClickOpcodeSchema = z.object({
     button: z.enum(['right', 'middle']).optional(),
     fingerprint: z.string().optional(),
     selectorAlternates: z.array(z.string().min(1)).optional(),
-});
+}).strict();
 const TypeOpcodeSchema = z.object({
     kind: z.literal('TYPE'),
     ...opcodeBase,
@@ -124,19 +124,19 @@ const TypeOpcodeSchema = z.object({
     clearFirst: z.boolean(),
     fingerprint: z.string().optional(),
     selectorAlternates: z.array(z.string().min(1)).optional(),
-});
+}).strict();
 const PressKeyOpcodeSchema = z.object({
     kind: z.literal('PRESS_KEY'),
     ...opcodeBase,
     key: z.string().min(1),
-});
+}).strict();
 const WaitForOpcodeSchema = z.object({
     kind: z.literal('WAIT_FOR'),
     ...opcodeBase,
     selector: z.string().min(1).optional(),
     target: SemanticTargetSchema.optional(),
     state: z.enum(['visible', 'attached']),
-}).superRefine((value, ctx) => {
+}).strict().superRefine((value, ctx) => {
     if (!value.selector && !value.target) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -149,7 +149,7 @@ const storageHintSchema = z.object({
     storage: z.enum(['localStorage', 'sessionStorage', 'cookie']),
     key: z.string().min(1),
     value: z.string(),
-});
+}).strict();
 const SetLocaleOpcodeSchema = z.object({
     kind: z.literal('SET_LOCALE'),
     ...opcodeBase,
@@ -157,7 +157,7 @@ const SetLocaleOpcodeSchema = z.object({
     method: z.enum(['browser_context', 'ui_interaction', 'storage']),
     selector: z.string().optional(),
     storageHints: z.array(storageHintSchema).optional(),
-}).superRefine((value, ctx) => {
+}).strict().superRefine((value, ctx) => {
     if (value.method === 'ui_interaction' && !value.selector) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -180,7 +180,7 @@ const SetThemeOpcodeSchema = z.object({
     method: z.enum(['color_scheme', 'ui_interaction', 'storage']),
     selector: z.string().optional(),
     storageHints: z.array(storageHintSchema).optional(),
-}).superRefine((value, ctx) => {
+}).strict().superRefine((value, ctx) => {
     if (value.method === 'ui_interaction' && !value.selector) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -203,20 +203,20 @@ const ScrollOpcodeSchema = z.object({
     amount: z.number().int().positive().optional(),
     targetSelector: z.string().optional(),
     target: SemanticTargetSchema.optional(),
-});
+}).strict();
 const CaptureScreenshotOpcodeSchema = z.object({
     kind: z.literal('CAPTURE_SCREENSHOT'),
     ...opcodeBase,
     captureId: z.string().optional(),
     captureName: z.string().optional(),
     elementSelector: z.string().optional(),
-});
+}).strict();
 const CaptureDomOpcodeSchema = z.object({
     kind: z.literal('CAPTURE_DOM'),
     ...opcodeBase,
     stateName: z.string().min(1).regex(/^[a-z0-9][a-z0-9-]*$/, 'stateName must be kebab-case'),
     selector: z.string().min(1).optional(),
-});
+}).strict();
 const CaptureFragmentOpcodeSchema = z.object({
     kind: z.literal('CAPTURE_FRAGMENT'),
     ...opcodeBase,
@@ -231,19 +231,19 @@ const CaptureFragmentOpcodeSchema = z.object({
     triggerSelector: z.string().min(1).optional(),
     mountStrategy: z.string().min(1).optional(),
     mountTargetSelector: z.string().min(1).optional(),
-});
+}).strict();
 const BeginClipOpcodeSchema = z.object({
     kind: z.literal('BEGIN_CLIP'),
     ...opcodeBase,
     clipId: z.string().optional(),
     clipName: z.string().optional(),
-});
+}).strict();
 const EndClipOpcodeSchema = z.object({
     kind: z.literal('END_CLIP'),
     ...opcodeBase,
     clipId: z.string().optional(),
     clipName: z.string().optional(),
-});
+}).strict();
 const HoverOpcodeSchema = z.object({
     kind: z.literal('HOVER'),
     ...opcodeBase,
@@ -251,7 +251,7 @@ const HoverOpcodeSchema = z.object({
     target: SemanticTargetSchema.optional(),
     fingerprint: z.string().optional(),
     selectorAlternates: z.array(z.string().min(1)).optional(),
-});
+}).strict();
 const SelectOptionOpcodeSchema = z.object({
     kind: z.literal('SELECT_OPTION'),
     ...opcodeBase,
@@ -262,7 +262,7 @@ const SelectOptionOpcodeSchema = z.object({
     optionIndex: z.number().int().min(0).optional(),
     fingerprint: z.string().optional(),
     selectorAlternates: z.array(z.string().min(1)).optional(),
-}).superRefine((value, ctx) => {
+}).strict().superRefine((value, ctx) => {
     if (value.optionLabel === undefined && value.optionValue === undefined && value.optionIndex === undefined) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -278,7 +278,7 @@ const CheckOpcodeSchema = z.object({
     checked: z.boolean(),
     fingerprint: z.string().optional(),
     selectorAlternates: z.array(z.string().min(1)).optional(),
-});
+}).strict();
 const DoubleClickOpcodeSchema = z.object({
     kind: z.literal('DOUBLE_CLICK'),
     ...opcodeBase,
@@ -286,6 +286,38 @@ const DoubleClickOpcodeSchema = z.object({
     target: SemanticTargetSchema.optional(),
     fingerprint: z.string().optional(),
     selectorAlternates: z.array(z.string().min(1)).optional(),
+}).strict();
+const DragOpcodeSchema = z.object({
+    kind: z.literal('DRAG'),
+    ...opcodeBase,
+    selector: z.string().min(1),
+    target: SemanticTargetSchema.optional(),
+    fingerprint: z.string().optional(),
+    selectorAlternates: z.array(z.string().min(1)).optional(),
+    toSelector: z.string().min(1).optional(),
+    toTarget: SemanticTargetSchema.optional(),
+    toSelectorAlternates: z.array(z.string().min(1)).optional(),
+    offset: z.object({
+        dx: z.number(),
+        dy: z.number(),
+    }).strict().optional(),
+}).strict().superRefine((value, ctx) => {
+    const hasElementDest = Boolean(value.toSelector || value.toTarget);
+    const hasOffsetDest = Boolean(value.offset);
+    if (!hasElementDest && !hasOffsetDest) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'DRAG requires a destination: provide `toSelector` / `toTarget` (element drag) or `offset` (relative drag)',
+            path: ['toSelector'],
+        });
+    }
+    if (hasElementDest && hasOffsetDest) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'DRAG destination must be either an element (`toSelector` / `toTarget`) or an `offset`, not both',
+            path: ['offset'],
+        });
+    }
 });
 // ── Mock data opcodes (soft / non-blocking) ─────────────────────────
 const CloneElementOpcodeSchema = z.object({
@@ -295,7 +327,7 @@ const CloneElementOpcodeSchema = z.object({
     containerSelector: z.string().min(1),
     count: z.number().int().min(1).max(500),
     removeSource: z.boolean().optional(),
-});
+}).strict();
 const InjectMockDataOpcodeSchema = z.object({
     kind: z.literal('INJECT_MOCK_DATA'),
     ...opcodeBase,
@@ -309,11 +341,11 @@ const InjectMockDataOpcodeSchema = z.object({
         slot: z.string().min(1),
         selector: z.string().min(1),
         attribute: z.string().min(1).optional(),
-    })).min(1).optional(),
+    }).strict()).min(1).optional(),
     // Trigger fields
     inputSelector: z.string().min(1).optional(),
     triggerSelector: z.string().min(1).optional(),
-}).superRefine((value, ctx) => {
+}).strict().superRefine((value, ctx) => {
     // The two delivery mechanisms are independent and additive. An opcode must
     // declare AT LEAST ONE complete mechanism — typically both — but if only
     // one is provided that's still valid.
@@ -363,14 +395,14 @@ const RemoveElementOpcodeSchema = z.object({
     kind: z.literal('REMOVE_ELEMENT'),
     ...opcodeBase,
     selector: z.string().min(1),
-});
+}).strict();
 const SetAttributeOpcodeSchema = z.object({
     kind: z.literal('SET_ATTRIBUTE'),
     ...opcodeBase,
     selector: z.string().min(1),
     attribute: z.string().min(1),
     value: z.string(),
-});
+}).strict();
 // ── Discriminated union ─────────────────────────────────────────────
 export const ExecutionOpcodeSchema = z.discriminatedUnion('kind', [
     NavigateOpcodeSchema,
@@ -393,6 +425,7 @@ export const ExecutionOpcodeSchema = z.discriminatedUnion('kind', [
     SelectOptionOpcodeSchema,
     CheckOpcodeSchema,
     DoubleClickOpcodeSchema,
+    DragOpcodeSchema,
     CloneElementOpcodeSchema,
     InjectMockDataOpcodeSchema,
     RemoveElementOpcodeSchema,
@@ -408,7 +441,7 @@ export const MockDataSlotSchema = z.object({
     // descriptive label is safe here. See `inputTypeForHint()` in
     // web/components/mock-data-editor.tsx.
     hint: z.string().optional(),
-});
+}).strict();
 export const MockDataRowSchema = z.record(z.string(), z.string());
 export const MockDataGroupSchema = z.object({
     name: z.string().min(1),
@@ -416,27 +449,48 @@ export const MockDataGroupSchema = z.object({
     slots: z.array(MockDataSlotSchema).min(1),
     defaultValues: z.array(MockDataRowSchema),
     replaceExisting: z.boolean().optional(),
-});
+}).strict();
 // ── Variant & precondition ──────────────────────────────────────────
 export const VariantSpecSchema = z.object({
     id: z.string().min(1),
     viewport: z.object({
         width: z.number().int().positive(),
         height: z.number().int().positive(),
-    }),
+    }).strict(),
     deviceScaleFactor: z.number().positive().optional(),
     locale: z.string().optional(),
     theme: z.enum(['light', 'dark']).optional(),
     targetId: z.string().optional(),
     targetLabel: z.string().optional(),
     deviceFrame: z.string().optional(),
-});
+}).strict();
 const cookieSchema = z.object({
     name: z.string().min(1),
     value: z.string(),
     domain: z.string().min(1),
     path: z.string().optional(),
-});
+}).strict();
+const StorageStateCookieSchema = z.object({
+    name: z.string().min(1),
+    value: z.string(),
+    domain: z.string().min(1),
+    path: z.string().min(1),
+    expires: z.number(),
+    httpOnly: z.boolean(),
+    secure: z.boolean(),
+    sameSite: z.enum(['Strict', 'Lax', 'None']),
+}).strict();
+const StorageStateOriginSchema = z.object({
+    origin: StrictUrlSchema,
+    localStorage: z.array(z.object({
+        name: z.string().min(1),
+        value: z.string(),
+    }).strict()),
+}).strict();
+const StorageStateSchema = z.object({
+    cookies: z.array(StorageStateCookieSchema),
+    origins: z.array(StorageStateOriginSchema),
+}).strict().refine((value) => value.cookies.length > 0 || value.origins.length > 0, 'storageState must contain at least one cookie or origin');
 // `auth` enum removed: bootstrap is auto-detected from cookies / storageState /
 // sessionStorage (injected into the browser context) and/or credentials
 // (substituted into {{email}}/{{password}}/{{loginUrl}} placeholders inside
@@ -448,26 +502,26 @@ export const PreconditionSpecSchema = z.object({
         email: z.string().optional(),
         password: z.string().optional(),
         loginUrl: z.string().optional(),
-    }).optional(),
-    storageState: z.any().optional(),
+    }).strict().optional(),
+    storageState: StorageStateSchema.optional(),
     sessionStorage: z.record(z.string(), z.record(z.string(), z.string())).optional(),
     cookies: z.array(cookieSchema).optional(),
-});
+}).strict();
 // ── Artifact spec ───────────────────────────────────────────────────
 export const ArtifactSpecSchema = z.object({
     mediaMode: z.enum(['screenshot', 'clip', 'dom']),
     format: z.object({
         clipFormat: z.enum(['gif', 'mp4', 'both']).optional(),
         screenshotFormat: z.enum(['png', 'jpeg']).optional(),
-    }).optional(),
+    }).strict().optional(),
     cursorTheme: z.enum(['minimal', 'macos', 'windows']).optional(),
     maxClipDurationSec: z.number().positive().optional(),
     applyMockup: z.boolean().optional(),
     applyStatusBar: z.boolean().optional(),
     domOptions: z.object({
         sanitize: z.boolean().optional(),
-    }).optional(),
-});
+    }).strict().optional(),
+}).strict();
 // ── Full program ────────────────────────────────────────────────────
 export const ExecutionProgramSchema = z.object({
     presetId: z.string().min(1),
@@ -485,15 +539,17 @@ export const ExecutionProgramSchema = z.object({
     compiledAt: z.string().datetime(),
     compiledWith: z.string().optional(),
     mockDataGroups: z.array(MockDataGroupSchema).optional(),
-});
+}).strict();
 // ── Healer patch ────────────────────────────────────────────────────
 export const HealerPatchSchema = z.object({
     opcodeIndex: z.number().int().min(0),
     originalOpcode: ExecutionOpcodeSchema,
     replacementOpcodes: z.array(ExecutionOpcodeSchema).min(1).max(3),
+    patchType: z.literal('selector_patch').optional(),
+    interactionMode: z.enum(['default', 'keyboard', 'js_dispatch', 'coordinates']).optional(),
     reason: z.string().min(1),
     patchedAt: z.string().datetime(),
-});
+}).strict();
 // ── Typed parse helpers ─────────────────────────────────────────────
 export function parseProgram(data) {
     return ExecutionProgramSchema.parse(data);

package/dist/execution-types.d.ts

@@ -7,7 +7,7 @@
 import type { AKTree, BrowserStorageState, BrowserSessionStorageState, VideoCursorTheme, VideoPageSignals } from './types.js';
 /** Sentinel value that resolves to the current variant's locale or theme at runtime */
 export declare const VARIANT_PLACEHOLDER: "$variant";
-export declare const OPCODE_KINDS: readonly ["NAVIGATE", "DISMISS_OVERLAYS", "ASSERT_ROUTE", "ASSERT_SURFACE", "CLICK", "TYPE", "PRESS_KEY", "WAIT_FOR", "SET_LOCALE", "SET_THEME", "SCROLL", "CAPTURE_SCREENSHOT", "CAPTURE_DOM", "CAPTURE_FRAGMENT", "BEGIN_CLIP", "END_CLIP", "HOVER", "SELECT_OPTION", "CHECK", "DOUBLE_CLICK", "CLONE_ELEMENT", "INJECT_MOCK_DATA", "REMOVE_ELEMENT", "SET_ATTRIBUTE"];
+export declare const OPCODE_KINDS: readonly ["NAVIGATE", "DISMISS_OVERLAYS", "ASSERT_ROUTE", "ASSERT_SURFACE", "CLICK", "TYPE", "PRESS_KEY", "WAIT_FOR", "SET_LOCALE", "SET_THEME", "SCROLL", "CAPTURE_SCREENSHOT", "CAPTURE_DOM", "CAPTURE_FRAGMENT", "BEGIN_CLIP", "END_CLIP", "HOVER", "SELECT_OPTION", "CHECK", "DOUBLE_CLICK", "DRAG", "CLONE_ELEMENT", "INJECT_MOCK_DATA", "REMOVE_ELEMENT", "SET_ATTRIBUTE"];
 export type OpcodeKind = (typeof OPCODE_KINDS)[number];
 /**
  * Soft opcodes are non-blocking — if their action or postcondition fails at
@@ -94,7 +94,7 @@ export interface RecoveryPolicy {
     useAltInteraction: boolean;
     /** Reload the page and retry from last checkpoint. Default: false */
     allowReload: boolean;
-    /** Allow LLM healer as last resort. Default: true */
+    /** Allow LLM healer as last resort. Default: false */
     allowHealer: boolean;
 }
 export declare const DEFAULT_RECOVERY_POLICY: RecoveryPolicy;
@@ -356,6 +356,35 @@ export interface DoubleClickOpcode extends OpcodeBase {
     fingerprint?: string;
     selectorAlternates?: string[];
 }
+/**
+ * Drag an element from point A to point B with an animated cursor.
+ * During clip recordings, the cursor overlay glides from source to
+ * destination along a Bezier curve with press/release visual feedback.
+ *
+ * Destination is either another element (`toSelector` / `toTarget`) or a
+ * relative `offset` from the source center — use the offset form for
+ * sliders, canvas drawing, or any drag whose end point isn't a DOM node.
+ */
+export interface DragOpcode extends OpcodeBase {
+    kind: 'DRAG';
+    /** CSS selector of the source element (the one being dragged) */
+    selector: string;
+    /** Semantic fallback for the source element */
+    target?: SemanticTarget;
+    fingerprint?: string;
+    selectorAlternates?: string[];
+    /** CSS selector of the drop target element (mutually exclusive with `offset`) */
+    toSelector?: string;
+    /** Semantic fallback for the drop target */
+    toTarget?: SemanticTarget;
+    /** Alternative destination selectors tried in order */
+    toSelectorAlternates?: string[];
+    /** Absolute pixel offset from the source center. Use when the drop point isn't a DOM element (sliders, canvas). */
+    offset?: {
+        dx: number;
+        dy: number;
+    };
+}
 /**
  * Duplicate a template element N times into a container. **Soft / non-blocking.**
  * If the source or container selector is missing, the opcode is skipped and
@@ -452,7 +481,7 @@ export interface SetAttributeOpcode extends OpcodeBase {
     /** Attribute value */
     value: string;
 }
-export type ExecutionOpcode = NavigateOpcode | DismissOverlaysOpcode | AssertRouteOpcode | AssertSurfaceOpcode | ClickOpcode | TypeOpcode | PressKeyOpcode | WaitForOpcode | SetLocaleOpcode | SetThemeOpcode | ScrollOpcode | CaptureScreenshotOpcode | CaptureDomOpcode | CaptureFragmentOpcode | BeginClipOpcode | EndClipOpcode | HoverOpcode | SelectOptionOpcode | CheckOpcode | DoubleClickOpcode | CloneElementOpcode | InjectMockDataOpcode | RemoveElementOpcode | SetAttributeOpcode;
+export type ExecutionOpcode = NavigateOpcode | DismissOverlaysOpcode | AssertRouteOpcode | AssertSurfaceOpcode | ClickOpcode | TypeOpcode | PressKeyOpcode | WaitForOpcode | SetLocaleOpcode | SetThemeOpcode | ScrollOpcode | CaptureScreenshotOpcode | CaptureDomOpcode | CaptureFragmentOpcode | BeginClipOpcode | EndClipOpcode | HoverOpcode | SelectOptionOpcode | CheckOpcode | DoubleClickOpcode | DragOpcode | CloneElementOpcode | InjectMockDataOpcode | RemoveElementOpcode | SetAttributeOpcode;
 export interface VariantSpec {
     id: string;
     viewport: {
@@ -580,6 +609,10 @@ export interface HealerPatch {
     originalOpcode: ExecutionOpcode;
     /** The replacement opcode(s). Usually 1, max 3. */
     replacementOpcodes: ExecutionOpcode[];
+    /** Bounded patch type used by the healer. */
+    patchType?: 'selector_patch';
+    /** Optional interaction mode requested by the healer. */
+    interactionMode?: 'default' | 'keyboard' | 'js_dispatch' | 'coordinates';
     /** Why the healer made this change */
     reason: string;
     /** Timestamp */
@@ -837,6 +870,23 @@ export interface RuntimeAdapter {
     }): Promise<void>;
     check?(selector: string, checked: boolean): Promise<void>;
     doubleClick?(selector: string): Promise<void>;
+    /**
+     * Drag the source element from point A to point B with an animated cursor
+     * when a clip is recording. Destination is either another element
+     * (`toSelector` / `toTarget`) or an `offset` from the source center.
+     */
+    drag?(opts: {
+        selector?: string;
+        target?: SemanticTarget;
+        selectorAlternates?: string[];
+        toSelector?: string;
+        toTarget?: SemanticTarget;
+        toSelectorAlternates?: string[];
+        offset?: {
+            dx: number;
+            dy: number;
+        };
+    }): Promise<void>;
     /** Clone an element N times into a container. Throws if either selector misses. */
     cloneElement?(opts: {
         sourceSelector: string;

package/dist/execution-types.js

@@ -28,6 +28,7 @@ export const OPCODE_KINDS = [
     'SELECT_OPTION',
     'CHECK',
     'DOUBLE_CLICK',
+    'DRAG',
     'CLONE_ELEMENT',
     'INJECT_MOCK_DATA',
     'REMOVE_ELEMENT',
@@ -53,7 +54,7 @@ export const DEFAULT_RECOVERY_POLICY = {
     useSelectorMemory: true,
     useAltInteraction: true,
     allowReload: false,
-    allowHealer: true,
+    allowHealer: false,
 };
 // ── Artifact spec ───────────────────────────────────────────────────
 export const MEDIA_MODES = ['screenshot', 'clip', 'dom'];

package/dist/index.d.ts

@@ -3,6 +3,8 @@ export { DEFAULT_RECOVERY_POLICY, DEFAULT_CIRCUIT_BREAKER, VARIANT_PLACEHOLDER,
 export { ExecutionProgramSchema, ExecutionOpcodeSchema, parseProgram, parseOpcode, safeParseProgramResult, MockDataSlotSchema, MockDataRowSchema, MockDataGroupSchema, } from './execution-schema.js';
 export { callLLM } from './llm-provider.js';
 export type { LLMProviderConfig, LLMCallResult } from './llm-provider.js';
+export { normalizeAllowedOrigins, normalizeHttpOrigin, signExecutionProgramEnvelope, verifySignedExecutionProgramEnvelope, } from './program-signing.js';
+export type { ProgramSecurityMetadata, SignedExecutionProgramEnvelope, } from './program-signing.js';
 export { generateAltText } from './alt-text.js';
 export type { AltTextResult, AltTextContext } from './alt-text.js';
 export { logger, setOnLog, setOnScreenshot, emitScreenshot } from './logger.js';

package/dist/index.js

@@ -6,6 +6,7 @@ export { DEFAULT_RECOVERY_POLICY, DEFAULT_CIRCUIT_BREAKER, VARIANT_PLACEHOLDER,
 export { ExecutionProgramSchema, ExecutionOpcodeSchema, parseProgram, parseOpcode, safeParseProgramResult, MockDataSlotSchema, MockDataRowSchema, MockDataGroupSchema, } from './execution-schema.js';
 // ── LLM-backed helpers (OpenAI, no browser) ─────────────────────────
 export { callLLM } from './llm-provider.js';
+export { normalizeAllowedOrigins, normalizeHttpOrigin, signExecutionProgramEnvelope, verifySignedExecutionProgramEnvelope, } from './program-signing.js';
 export { generateAltText } from './alt-text.js';
 // ── Shared utilities ────────────────────────────────────────────────
 export { logger, setOnLog, setOnScreenshot, emitScreenshot } from './logger.js';

package/dist/llm-healer.d.ts

@@ -3,15 +3,7 @@
  *
  * Last-resort recovery: when all deterministic strategies fail,
  * the healer asks an LLM to analyze the current page state and
- * produce a replacement opcode.
- *
- * Constraints:
- * - Cannot change the preset's intention
- * - Cannot change variant order
- * - Cannot invent new capture targets
- * - Cannot skip the failed opcode's postcondition
- * - Max 1 LLM call per healing attempt
- * - Max 3 healing attempts per run
+ * produce a bounded selector patch.
  */
 import type { ExecutionOpcode, HealerPatch } from './execution-types.js';
 import type { LLMCallResult } from './llm-provider.js';
@@ -49,7 +41,7 @@ export interface HealerLLMProvider {
     }>;
 }
 /**
- * The LLM Healer — a constrained agent that repairs failed opcodes.
+ * The LLM Healer — a constrained agent that repairs failed selectors.
  */
 export declare class LLMHealer {
     private llmProvider;