cbrowser 19.2.0 → 19.2.2

package/README.md

@@ -231,9 +231,9 @@ AI agents need boundaries. CBrowser classifies every action by risk level:
 | 🔴 **Red** | Submit, delete, purchase | Requires verification |
 | ⬛ **Black** | Bypass auth, inject scripts | Never executes |
 
-**How red is decided:** by the element an action would activate as well as by the selector text. The selector string is classified first, as before, so naming a dangerous action in a selector is refused even when the element reads harmless. The element is then classified however it is addressed: the same "Delete account" button is refused by its label, its id, its test id or a structural path, and an element with only a delegated click listener is judged by its own text. A click on a container is judged at the point it lands - beneath fixed bars and overlays, into open shadow roots, slots and same-origin frames, up to the control, pointer-cursor item or text-bearing item there - and the click is sent to that judged point. A refused click is never retried with a "healed" selector. Gated: `click`, `smart_click`, hover-click and the daemon's click; `press_key`, `type_text` and `keyboard` (Enter, including a typed or pressed newline, or Space on the focused control - followed into shadow roots and same-origin frames - and Enter in a field whose form submits one, judged together with a combobox's `aria-activedescendant` item); a `drag` whose press and release share a control; and the NL test runner's `click at X, Y`. Names below a control (icon labels, image alts, slotted and open-shadow text, `<label for>`) and the path a form submits to (a submitter's `formaction`, otherwise the form's `action`) feed the same keyword classification. `force: true` on the MCP `click`, `press_key`, `type_text` and `drag` tools (`smart_click` has none: use `click`), or `--force` on the CLI, proceeds and reports the zone.
+**How red is decided:** by the element an action would activate as well as by the selector text. The selector string is classified first, as before, so naming a dangerous action in a selector is refused even when the element reads harmless. The element is then classified however it is addressed: the same "Delete account" button is refused by its label, its id, its test id or a structural path, and an element with only a delegated click listener is judged by its own text. A click on a container is judged at the point it lands - beneath fixed bars and overlays, into open shadow roots, slots and same-origin frames, up to the control, pointer-cursor item or text-bearing item there - and the click is sent to that judged point. A refused click is never retried with a "healed" selector. Gated: `click`, `smart_click`, hover-click and the daemon's click; `press_key`, `type_text` and `keyboard` (Enter, including a typed or pressed newline, or Space on the focused control - followed into shadow roots and same-origin frames - and Enter in a field whose form submits one, judged together with a combobox's `aria-activedescendant` item); a `drag` whose press and release share a control; and the NL test runner's `click at X, Y`. Caller-supplied page script is red by itself, whatever it does: `evaluate_script` over MCP, `evaluate`/`eval` on the CLI and the daemon's evaluate are refused without force and run nothing, because a script can activate any control without passing the element gate (`document.querySelector('#delete-account').click()` is the click `click` refuses, in one line). Names below a control (icon labels, image alts, slotted and open-shadow text, `<label for>`) and the path a form submits to (a submitter's `formaction`, otherwise the form's `action`) feed the same keyword classification. `force: true` on the MCP `click`, `press_key`, `type_text`, `drag` and `evaluate_script` tools (`smart_click` has none: use `click`), or `--force` on the CLI, proceeds and reports the zone.
 
-Not judged, by design: clicking or typing into a text field or a contenteditable editor, and choosing a value with a native checkbox, radio or select or a `role=checkbox`, `radio` or `switch` - the submit that commits them is judged, but a switch or checkbox that saves on its own as it changes commits immediately and is not refused; and a link's address (a link to `/buy` is navigation). Not gated: cognitive journeys and other engines that choose their own clicks, and `evaluate_script`. Known limits: labels inside closed shadow roots or drawn by CSS, controls inside cross-origin frames, icon-only controls with no accessible name, a confirmation button with neutral text ("Confirm", "OK") inside a dialog, a form with no `action` or an empty `formaction` (it submits to the page's own address, which is not judged), an `aria-activedescendant` id that only resolves outside the field's own document or shadow root (not followed; ARIA references do not cross roots), a Tab inside typed text that moves focus before a later Enter, one round trip between the check and the click in which a page could swap the element, and keyword false positives: a "Purchase history" tab, a "Buyer protection" link, a `role=option` value picker such as "Pay with PayPal", a harmless "Apply" in a form posting to `/checkout/discount`, and an inert heading such as "Checkout" clicked by id (refusing it costs one forced retry; missing a listener-only "Delete account" cannot be undone). Classification uses English keyword patterns; when the element cannot be read, the selector text alone decides.
+Not judged, by design: clicking or typing into a text field or a contenteditable editor, and choosing a value with a native checkbox, radio or select or a `role=checkbox`, `radio` or `switch` - the submit that commits them is judged, but a switch or checkbox that saves on its own as it changes commits immediately and is not refused; and a link's address (a link to `/buy` is navigation). Not gated: cognitive journeys and other engines that choose their own clicks. Known limits: labels inside closed shadow roots or drawn by CSS, controls inside cross-origin frames, icon-only controls with no accessible name, a confirmation button with neutral text ("Confirm", "OK") inside a dialog, a form with no `action` or an empty `formaction` (it submits to the page's own address, which is not judged), an `aria-activedescendant` id that only resolves outside the field's own document or shadow root (not followed; ARIA references do not cross roots), a Tab inside typed text that moves focus before a later Enter, one round trip between the check and the click in which a page could swap the element, and keyword false positives: a "Purchase history" tab, a "Buyer protection" link, a `role=option` value picker such as "Pay with PayPal", a harmless "Apply" in a form posting to `/checkout/discount`, and an inert heading such as "Checkout" clicked by id (refusing it costs one forced retry; missing a listener-only "Delete account" cannot be undone). Classification uses English keyword patterns; when the element cannot be read, the selector text alone decides.
 
 ---
 

package/dist/analysis/accessibility-empathy.d.ts

@@ -49,6 +49,12 @@ export declare function filterBarriersToViewport<T extends {
 };
 export declare function formatEmpathyAuditReport(result: EmpathyAuditResult): string;
 export declare function generateEmpathyAuditHtmlReport(result: EmpathyAuditResult): string;
+/**
+ * Disability shorthand -> roster name. One table for every tool now lives in
+ * src/personas.ts (PERSONA_ALIASES); kept under this name for existing
+ * importers. (2026-10-09)
+ */
+export declare const EMPATHY_PERSONA_ALIASES: Record<string, string>;
 /**
  * The published WCAG list, DERIVED from the barriers rather than accumulated
  * alongside them.

package/dist/analysis/accessibility-empathy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accessibility-empathy.d.ts","sourceRoot":"","sources":["../../src/analysis/accessibility-empathy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAmCH,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EASpB,MAAM,aAAa,CAAC;AAuKrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACnH,QAAQ,EAAE,CAAC,EAAE,EACb,QAAQ,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAWhC;AAwjED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAmF3E;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAkTjF;AAqJD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,KAAK,CAAC;IAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,EAC7E,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,EAChC,sBAAsB,EAAE,GAAG,CAAC,MAAM,CAAC,EACnC,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,KAAK,GAC5B,MAAM,EAAE,CAkBV;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA+Z7B"}
+{"version":3,"file":"accessibility-empathy.d.ts","sourceRoot":"","sources":["../../src/analysis/accessibility-empathy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAmCH,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EASpB,MAAM,aAAa,CAAC;AAuKrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACnH,QAAQ,EAAE,CAAC,EAAE,EACb,QAAQ,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAWhC;AAwjED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAmF3E;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAkTjF;AAqJD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAmB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,KAAK,CAAC;IAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,EAC7E,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,EAChC,sBAAsB,EAAE,GAAG,CAAC,MAAM,CAAC,EACnC,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,KAAK,GAC5B,MAAM,EAAE,CAkBV;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAsW7B"}

package/dist/analysis/accessibility-empathy.js

@@ -6,7 +6,7 @@
 import { weightKeyFor, barrierWeightFor, weightedSeverity } from "../visual/perceptual-transport.js";
 import { VERSION } from "../version.js";
 import { CBrowser } from "../browser.js";
-import { getAccessibilityPersona } from "../personas.js";
+import { getAccessibilityPersona, PERSONA_ALIASES } from "../personas.js";
 import { runCognitiveJourney, isApiKeyConfigured, } from "../cognitive/index.js";
 import { calculatePerceptualScore, analyzePerceptualTransport, } from "../visual/perceptual-transport.js";
 import { buildOTCognitiveProfile, estimateCognitiveLoad, extractPageMetrics, } from "../visual/cognitive-transport.js";
@@ -2521,6 +2521,12 @@ function inferGoalType(goal) {
         return "navigate_to";
     return "complete_action";
 }
+/**
+ * Disability shorthand -> roster name. One table for every tool now lives in
+ * src/personas.ts (PERSONA_ALIASES); kept under this name for existing
+ * importers. (2026-10-09)
+ */
+export const EMPATHY_PERSONA_ALIASES = PERSONA_ALIASES;
 /**
  * The published WCAG list, DERIVED from the barriers rather than accumulated
  * alongside them.
@@ -2569,90 +2575,35 @@ export async function runEmpathyAudit(url, options) {
     const results = [];
     const allWcagViolations = new Set();
     const allBarriers = [];
-    // Map disability names to personas
-    // v14.2.5: Added elderly-user mapping (issue #190 - persona dropout)
-    const personaMap = {
-        "motor-tremor": "motor-impairment-tremor",
-        "motor": "motor-impairment-tremor",
-        "tremor": "motor-impairment-tremor",
-        "low-vision": "low-vision-magnified",
-        "vision": "low-vision-magnified",
-        "magnified": "low-vision-magnified",
-        "adhd": "cognitive-adhd",
-        "cognitive": "cognitive-adhd",
-        "attention": "cognitive-adhd",
-        "dyslexia": "dyslexic-user",
-        "dyslexic": "dyslexic-user",
-        "reading": "dyslexic-user",
-        "deaf": "deaf-user",
-        "hearing": "deaf-user",
-        "elderly": "elderly-low-vision",
-        "elderly-user": "elderly-low-vision", // v14.2.5: Added missing mapping
-        "elderly-low-vision": "elderly-low-vision",
-        "senior": "elderly-low-vision",
-        "old": "elderly-low-vision", // v14.2.5: Additional synonym
-        "color-blind": "color-blind-deuteranopia",
-        "colorblind": "color-blind-deuteranopia",
-        "deuteranopia": "color-blind-deuteranopia",
-        // v18.35.0: New research-backed cognitive disability personas
-        "autism": "autism-spectrum",
-        "autistic": "autism-spectrum",
-        "asd": "autism-spectrum",
-        "autism-spectrum": "autism-spectrum",
-        "intellectual-disability": "intellectual-disability",
-        "intellectual": "intellectual-disability",
-        "learning-disability": "intellectual-disability",
-        "aphasia": "aphasia-receptive",
-        "aphasia-receptive": "aphasia-receptive",
-        "wernicke": "aphasia-receptive",
-        "dyscalculia": "dyscalculia",
-        "numeracy": "dyscalculia",
-    };
+    // Disability shorthand -> roster name (module-level so the MCP handler
+    // resolves with the same table).
+    const personaMap = EMPATHY_PERSONA_ALIASES;
     // Run audit for each disability type
     // v18.35.0: Accept any persona — wrap non-disability personas with default accessibility traits
-    for (const disability of disabilities) {
-        const personaName = personaMap[disability.toLowerCase()] || disability;
+    // Every requested persona resolves through the one resolver BEFORE anything
+    // launches. An unknown name used to fall through to a "persona" with no
+    // traits that scored 0 -- the worst possible score -- with errors: [] and
+    // isDisabilityPersona: true, which a dashboard reads as "the site failed
+    // completely". It now throws UnknownPersonaError instead. (2026-10-09)
+    try {
+        const { loadAccountPersonas } = await import("../mcp-tools/account-personas.js");
+        const { getSessionApiKey } = await import("../mcp-tools/base/cognitive-tools.js");
+        await loadAccountPersonas(getSessionApiKey());
+    }
+    catch { /* falls back to disk and built-ins */ }
+    const { resolvePersonaForTool } = await import("../personas.js");
+    const resolvedNames = disabilities.map((d) => resolvePersonaForTool(d, personaMap, true).name);
+    for (const [index, disability] of disabilities.entries()) {
+        const personaName = resolvedNames[index];
         let persona = getAccessibilityPersona(personaName);
         let isDisabilityPersona = !!persona;
         if (!persona) {
             // Try to find as a regular cognitive persona and wrap it
             const { getAnyPersona, createCognitivePersona } = await import("../personas.js");
             let cognitivePersona = getAnyPersona(personaName);
-            // CMS custom persona fallback — fetch from API if not found locally
-            if (!cognitivePersona) {
-                try {
-                    const { getSessionApiKey } = await import("../mcp-tools/base/cognitive-tools.js");
-                    const apiKey = getSessionApiKey();
-                    if (apiKey) {
-                        const cmsUrl = process.env.CMS_URL || "http://localhost:3200";
-                        const res = await fetch(`${cmsUrl}/api/personas`, {
-                            headers: { "Authorization": `Bearer ${apiKey}` },
-                        });
-                        if (res.ok) {
-                            const data = await res.json();
-                            const cmsMatch = data.personas.find((p) => p.name.toLowerCase() === personaName.toLowerCase() ||
-                                p.name.toLowerCase().replace(/\s+/g, '-') === personaName.toLowerCase() ||
-                                p.name.toLowerCase().replace(/\s+/g, '_') === personaName.toLowerCase() ||
-                                (p.slug && p.slug.toLowerCase() === personaName.toLowerCase()));
-                            if (cmsMatch) {
-                                const parsedTraits = typeof cmsMatch.traits === "string" ? JSON.parse(cmsMatch.traits) : cmsMatch.traits;
-                                cognitivePersona = createCognitivePersona(cmsMatch.name, cmsMatch.name, parsedTraits, {
-                                    ageRange: cmsMatch.age_range || undefined,
-                                });
-                                // Attach CMS accessibility traits if stored
-                                if (cmsMatch.accessibility_traits) {
-                                    const at = typeof cmsMatch.accessibility_traits === "string" ? JSON.parse(cmsMatch.accessibility_traits) : cmsMatch.accessibility_traits;
-                                    cognitivePersona.accessibilityTraits = at;
-                                }
-                                console.log(`[empathy_audit] Found custom CMS persona: "${cmsMatch.name}" with ${Object.keys(parsedTraits).length} traits${cmsMatch.accessibility_traits ? ' + disability modeling' : ''}`);
-                            }
-                        }
-                    }
-                }
-                catch (e) {
-                    console.debug(`[empathy_audit] CMS persona lookup failed: ${e.message}`);
-                }
-            }
+            // No CMS fallback here any more: the account's CMS personas were loaded
+            // into the scoped registry above, so getAnyPersona already sees them, and
+            // a name nothing resolves was refused before the loop. (2026-10-09)
             if (cognitivePersona) {
                 // Wrap cognitive persona as accessibility persona, inferring traits from name + cognitive traits
                 const ct = cognitivePersona.cognitiveTraits || {};