browser-automation-skill 0.71.0

package/scripts/browser-tab-list.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+# scripts/browser-tab-list.sh — enumerate tabs/pages currently held by the daemon.
+# Usage: bash scripts/browser-tab-list.sh [--site NAME] [--tool NAME]
+#                                          [--dry-run] [--raw]
+#
+# Routes to chrome-devtools-mcp by default (Phase 6 part 8-i). Daemon-required:
+# the verb caches the result in the daemon's `tabs` slot so 8-ii (tab-switch)
+# and 8-iii (tab-close) can reference the same `tab_id` shape. Without daemon
+# → exit 41 with hint.
+#
+# Read-only — no flags, no state mutation. The daemon dispatch calls upstream
+# MCP `list_pages` (best-effort name; real upstream may differ) and normalizes
+# to `[{tab_id, url, title}]`. `tab_id` is bridge-assigned (1-based, stable for
+# the lifetime of one list_pages call); upstream's CDP target id never escapes
+# the bridge.
+
+set -euo pipefail
+IFS=$'\n\t'
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/common.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/common.sh"
+# shellcheck source=lib/output.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/output.sh"
+# shellcheck source=lib/router.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/router.sh"
+# shellcheck source=lib/verb_helpers.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/verb_helpers.sh"
+
+init_paths
+
+SUMMARY_T0="$(now_ms)"; export SUMMARY_T0
+
+parse_verb_globals "$@"
+
+resolve_session_storage_state
+
+# tab-list takes no required flags; pass remaining argv straight through so
+# routing/capability checks still see globals like --tool.
+verb_argv=("${REMAINING_ARGV[@]}")
+
+if [ "${ARG_DRY_RUN:-0}" = "1" ]; then
+  ok "dry-run: would enumerate tabs via daemon"
+  emit_summary verb=tab-list tool=none why=dry-run status=ok dry_run=true
+  exit 0
+fi
+
+picked="$(pick_tool tab-list "${verb_argv[@]}")"
+tool_name="${picked%%$'\t'*}"
+why="${picked#*$'\t'}"
+
+source_picked_adapter "${tool_name}"
+
+set +e
+adapter_out="$(invoke_with_retry tab-list "${verb_argv[@]}")"
+adapter_rc=$?
+set -e
+
+[ -n "${adapter_out}" ] && printf '%s\n' "${adapter_out}"
+
+if [ "${adapter_rc}" -eq 0 ]; then
+  emit_summary verb=tab-list tool="${tool_name}" why="${why}" status=ok
+  exit 0
+fi
+emit_summary verb=tab-list tool="${tool_name}" why="${why}" status=error
+exit "${adapter_rc}"

package/scripts/browser-tab-switch.sh

@@ -0,0 +1,111 @@
+#!/usr/bin/env bash
+# scripts/browser-tab-switch.sh — switch the daemon's active tab.
+# Usage: bash scripts/browser-tab-switch.sh [--site NAME] [--tool NAME]
+#                                            [--dry-run] [--raw]
+#                                            (--by-index N | --by-url-pattern STR)
+#
+# Routes to chrome-devtools-mcp by default (Phase 6 part 8-ii). Daemon-required:
+# the daemon updates its `currentTab` pointer (added in this sub-part) and asks
+# the upstream MCP to focus the corresponding page. Without daemon → exit 41.
+#
+# Mutex: exactly one of --by-index / --by-url-pattern. --by-index is 1-based
+# (matches `tab_id` from tab-list). --by-url-pattern is substring-contains
+# (case-sensitive, first match wins).
+#
+# If the daemon's tabs[] cache is empty (no preceding tab-list call), the
+# daemon transparently auto-calls list_pages before resolving the selector.
+
+set -euo pipefail
+IFS=$'\n\t'
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/common.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/common.sh"
+# shellcheck source=lib/output.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/output.sh"
+# shellcheck source=lib/router.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/router.sh"
+# shellcheck source=lib/verb_helpers.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/verb_helpers.sh"
+
+init_paths
+
+SUMMARY_T0="$(now_ms)"; export SUMMARY_T0
+
+parse_verb_globals "$@"
+
+resolve_session_storage_state
+
+by_index="" by_url_pattern=""
+verb_argv=()
+i=0
+while [ "${i}" -lt "${#REMAINING_ARGV[@]}" ]; do
+  case "${REMAINING_ARGV[i]}" in
+    --by-index)
+      by_index="${REMAINING_ARGV[i+1]:-}"
+      [ -n "${by_index}" ] || die "${EXIT_USAGE_ERROR}" "--by-index requires a value"
+      verb_argv+=(--by-index "${by_index}")
+      i=$((i + 2))
+      ;;
+    --by-url-pattern)
+      by_url_pattern="${REMAINING_ARGV[i+1]:-}"
+      [ -n "${by_url_pattern}" ] || die "${EXIT_USAGE_ERROR}" "--by-url-pattern requires a value"
+      verb_argv+=(--by-url-pattern "${by_url_pattern}")
+      i=$((i + 2))
+      ;;
+    *)
+      verb_argv+=("${REMAINING_ARGV[i]}")
+      i=$((i + 1))
+      ;;
+  esac
+done
+
+# Mutex + presence: exactly one selector required.
+if [ -n "${by_index}" ] && [ -n "${by_url_pattern}" ]; then
+  die "${EXIT_USAGE_ERROR}" "--by-index and --by-url-pattern are mutually exclusive"
+fi
+if [ -z "${by_index}" ] && [ -z "${by_url_pattern}" ]; then
+  die "${EXIT_USAGE_ERROR}" "tab-switch requires exactly one of --by-index N or --by-url-pattern STR"
+fi
+
+# Validate by-index is a positive integer (1-based).
+if [ -n "${by_index}" ]; then
+  if ! printf '%s' "${by_index}" | grep -Eq '^[1-9][0-9]*$'; then
+    die "${EXIT_USAGE_ERROR}" "--by-index must be a positive integer (1-based); got: ${by_index}"
+  fi
+fi
+
+if [ "${ARG_DRY_RUN:-0}" = "1" ]; then
+  if [ -n "${by_index}" ]; then
+    ok "dry-run: would switch to tab #${by_index}"
+    emit_summary verb=tab-switch tool=none why=dry-run status=ok by_index="${by_index}" dry_run=true
+  else
+    ok "dry-run: would switch to first tab matching ${by_url_pattern}"
+    emit_summary verb=tab-switch tool=none why=dry-run status=ok by_url_pattern="${by_url_pattern}" dry_run=true
+  fi
+  exit 0
+fi
+
+picked="$(pick_tool tab-switch "${verb_argv[@]}")"
+tool_name="${picked%%$'\t'*}"
+why="${picked#*$'\t'}"
+
+source_picked_adapter "${tool_name}"
+
+set +e
+adapter_out="$(invoke_with_retry tab-switch "${verb_argv[@]}")"
+adapter_rc=$?
+set -e
+
+[ -n "${adapter_out}" ] && printf '%s\n' "${adapter_out}"
+
+if [ "${adapter_rc}" -eq 0 ]; then
+  emit_summary verb=tab-switch tool="${tool_name}" why="${why}" status=ok
+  exit 0
+fi
+emit_summary verb=tab-switch tool="${tool_name}" why="${why}" status=error
+exit "${adapter_rc}"

package/scripts/browser-upload.sh

@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+# scripts/browser-upload.sh — fill <input type=file> by --ref + --path.
+# Usage: bash scripts/browser-upload.sh [--site NAME] [--tool NAME] [--dry-run]
+#                                        [--raw] --ref eN --path PATH
+#                                        [--allow-sensitive]
+#
+# Routes to chrome-devtools-mcp by default (Phase 6 part 6). Stateful —
+# requires running daemon (refMap precondition).
+#
+# SECURITY (path validation, performed bash-side BEFORE invoking adapter):
+#   1. Path must exist and be a regular file (not dir, not device, not symlink-to-elsewhere).
+#   2. Path must be readable by the current user.
+#   3. Path must NOT match common sensitive patterns (~/.ssh/*, ~/.aws/*,
+#      ~/.config/*credentials*, *.env). Override via --allow-sensitive
+#      (typed acknowledgment that the agent is uploading sensitive material
+#      intentionally — covers legit use cases like "upload my GPG key").
+# Path is then resolved (`readlink -f` / `realpath`) and forwarded to MCP.
+
+set -euo pipefail
+IFS=$'\n\t'
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/common.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/common.sh"
+# shellcheck source=lib/output.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/output.sh"
+# shellcheck source=lib/router.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/router.sh"
+# shellcheck source=lib/verb_helpers.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/verb_helpers.sh"
+
+init_paths
+
+SUMMARY_T0="$(now_ms)"; export SUMMARY_T0
+
+parse_verb_globals "$@"
+
+resolve_session_storage_state
+
+ref="" path="" allow_sensitive=0
+verb_argv=()
+i=0
+while [ "${i}" -lt "${#REMAINING_ARGV[@]}" ]; do
+  case "${REMAINING_ARGV[i]}" in
+    --ref)
+      ref="${REMAINING_ARGV[i+1]:-}"
+      [ -n "${ref}" ] || die "${EXIT_USAGE_ERROR}" "--ref requires a value"
+      verb_argv+=(--ref "${ref}")
+      i=$((i + 2))
+      ;;
+    --path)
+      path="${REMAINING_ARGV[i+1]:-}"
+      [ -n "${path}" ] || die "${EXIT_USAGE_ERROR}" "--path requires a value"
+      i=$((i + 2))
+      ;;
+    --allow-sensitive)
+      allow_sensitive=1
+      i=$((i + 1))
+      ;;
+    *)
+      verb_argv+=("${REMAINING_ARGV[i]}")
+      i=$((i + 1))
+      ;;
+  esac
+done
+
+[ -n "${ref}" ]  || die "${EXIT_USAGE_ERROR}" "upload requires --ref eN"
+[ -n "${path}" ] || die "${EXIT_USAGE_ERROR}" "upload requires --path PATH"
+
+# Path security validation (bash-side, before adapter dispatch).
+# 1. File must exist + be a regular file.
+if [ ! -e "${path}" ]; then
+  die "${EXIT_USAGE_ERROR}" "upload: path does not exist: ${path}"
+fi
+if [ ! -f "${path}" ]; then
+  die "${EXIT_USAGE_ERROR}" "upload: path is not a regular file (directory, device, or other): ${path}"
+fi
+# 2. File must be readable.
+if [ ! -r "${path}" ]; then
+  die "${EXIT_USAGE_ERROR}" "upload: path is not readable by the current user: ${path}"
+fi
+# 3. Sensitive-pattern reject. Common locations agents shouldn't accidentally
+#    upload from. Override with --allow-sensitive when intentional.
+if [ "${allow_sensitive}" -ne 1 ]; then
+  case "${path}" in
+    *.ssh/*|*/.ssh/*|*.aws/credentials|*/.aws/credentials|*/.env|*.env|\
+    */credentials|*/credentials.json|*/secrets.json|*/private_key*|*/id_rsa*|\
+    */id_ed25519*|*/id_ecdsa*)
+      die "${EXIT_USAGE_ERROR}" "upload: path '${path}' matches a sensitive pattern (SSH key / AWS / .env / private_key); pass --allow-sensitive to override"
+      ;;
+  esac
+fi
+
+# Resolve to canonical path (eliminate symlink shenanigans). Cross-platform:
+# `readlink -f` is GNU; macOS BSD has it via Xcode 11+ but `realpath` is more
+# portable. Try realpath first, fall back to readlink -f.
+canonical_path="$(realpath "${path}" 2>/dev/null || readlink -f "${path}" 2>/dev/null || printf '%s' "${path}")"
+
+verb_argv+=(--path "${canonical_path}")
+
+if [ "${ARG_DRY_RUN:-0}" = "1" ]; then
+  ok "dry-run: would upload ${canonical_path} to ${ref}"
+  emit_summary verb=upload tool=none why=dry-run status=ok \
+               ref="${ref}" path="${canonical_path}" dry_run=true
+  exit 0
+fi
+
+picked="$(pick_tool upload "${verb_argv[@]}")"
+tool_name="${picked%%$'\t'*}"
+why="${picked#*$'\t'}"
+
+source_picked_adapter "${tool_name}"
+
+set +e
+adapter_out="$(invoke_with_retry upload "${verb_argv[@]}")"
+adapter_rc=$?
+set -e
+
+[ -n "${adapter_out}" ] && printf '%s\n' "${adapter_out}"
+
+if [ "${adapter_rc}" -eq 0 ]; then
+  emit_summary verb=upload tool="${tool_name}" why="${why}" status=ok \
+               ref="${ref}" path="${canonical_path}"
+  exit 0
+fi
+emit_summary verb=upload tool="${tool_name}" why="${why}" status=error \
+             ref="${ref}" path="${canonical_path}"
+exit "${adapter_rc}"

package/scripts/browser-use.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# use — get / set / clear the current site (CURRENT_FILE).
+set -euo pipefail
+IFS=$'\n\t'
+umask 077
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/common.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/common.sh"
+# shellcheck source=lib/site.sh
+# shellcheck disable=SC1091
+source "${SCRIPT_DIR}/lib/site.sh"
+init_paths
+
+mode=""; arg=""
+usage() {
+  cat <<'USAGE'
+Usage: use --set NAME | --show | --clear
+USAGE
+}
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --set)    mode=set;   arg="$2"; shift 2 ;;
+    --show)   mode=show;  shift ;;
+    --clear)  mode=clear; shift ;;
+    -h|--help) usage; exit 0 ;;
+    *) die "${EXIT_USAGE_ERROR}" "unknown flag: $1" ;;
+  esac
+done
+[ -n "${mode}" ] || { usage; die "${EXIT_USAGE_ERROR}" "specify --set NAME, --show, or --clear"; }
+
+started_at_ms="$(now_ms)"
+
+case "${mode}" in
+  set)
+    [ -n "${arg}" ] || die "${EXIT_USAGE_ERROR}" "--set requires NAME"
+    current_set "${arg}"
+    ok "current site: ${arg}"
+    why="set"
+    ;;
+  show)
+    why="show"
+    ;;
+  clear)
+    current_clear
+    ok "current site cleared"
+    why="clear"
+    ;;
+esac
+
+current="$(current_get)"
+duration_ms=$(( $(now_ms) - started_at_ms ))
+if [ -z "${current}" ]; then
+  jq -cn --arg w "${why}" --argjson d "${duration_ms}" \
+    '{verb: "use", tool: "none", why: $w, status: "ok", current: null, duration_ms: $d}'
+else
+  jq -cn --arg w "${why}" --arg c "${current}" --argjson d "${duration_ms}" \
+    '{verb: "use", tool: "none", why: $w, status: "ok", current: $c, duration_ms: $d}'
+fi