chainlesschain 0.165.5 → 0.165.8

package/src/runtime/coding-agent-contract-shared.cjs

@@ -1225,14 +1225,14 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
     kind: "browser",
     tier: "extension",
     description:
-      "Perform EXPLICIT actions in the user's connected Chrome over loopback CDP: click, type, press, navigate (http/https only), waitForSelector, screenshot (published as a session-bound Artifact; never a caller-chosen path), assertText. Approval-gated (HIGH risk): use browser_state first to observe; only act when the task genuinely requires driving the browser. Steps run in order and fail fast unless continue_on_error; each returns {ok, action, detail, durationMs} and every executed step is audit-logged under ~/.chainlesschain/browser-actions/. Requires a debuggable Chrome (`cc browse chrome launch`).",
+      "Perform EXPLICIT actions in the user's connected Chrome over loopback CDP: click, type, press, navigate (http/https only), waitForSelector, screenshot, assertText, upload from a managed session Artifact, and download into a generated session Artifact. Approval-gated (HIGH risk): use browser_state first to observe; only act when the task genuinely requires driving the browser. Host-provided evidence authority can bind every action to an origin grant/revision, session, diff and test run. Steps run in order and fail fast unless continue_on_error; every executed step is audit-logged under ~/.chainlesschain/browser-actions/. Requires a debuggable Chrome (`cc browse chrome launch`).",
     inputSchema: {
       type: "object",
       properties: {
         actions: {
           type: "array",
           description:
-            "Ordered action steps. Each item: {type: click|type|press|navigate|waitForSelector|screenshot|assertText} plus its fields — click/waitForSelector/assertText need selector; type needs selector+text; press needs key; navigate needs url (http/https); waitForSelector accepts timeout_ms (capped 30000); assertText needs expected (substring); screenshot takes NO path (generated internally).",
+            "Ordered action steps. Each item: {type: click|type|press|navigate|waitForSelector|screenshot|assertText|upload|download}. Upload needs selector+artifact_id and accepts no path; download needs selector and writes only a generated session Artifact. Screenshot and download take no caller path.",
           items: {
             type: "object",
             properties: {
@@ -1246,13 +1246,15 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
                   "waitForSelector",
                   "screenshot",
                   "assertText",
+                  "upload",
+                  "download",
                 ],
                 description: "Action kind",
               },
               selector: {
                 type: "string",
                 description:
-                  "CSS selector (click/type/waitForSelector/assertText)",
+                  "CSS selector (click/type/waitForSelector/assertText/upload/download)",
               },
               text: { type: "string", description: "Text to type (type)" },
               key: {
@@ -1272,6 +1274,11 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
                 type: "string",
                 description: "Expected substring (assertText)",
               },
+              artifact_id: {
+                type: "string",
+                description:
+                  "Managed Artifact id to upload (upload); must belong to the active session",
+              },
             },
             required: ["type"],
           },
@@ -1300,7 +1307,7 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
     ...TOOL_POLICY_METADATA.browser_act,
     permissions: {
       level: "elevated",
-      scopes: ["browser:act"],
+      scopes: ["browser:act", "artifact:read", "artifact:write"],
     },
     telemetry: {
       category: "browser",