dsh-browser-playwright-codex 0.5.2 → 0.5.3

package/lib/tool-render.js

@@ -0,0 +1,137 @@
+import { CHALLENGE_NOTE, detectChallenge } from "./challenge.js";
+import { renderSnapshot, renderSnapshotDiff } from "./snapshot-render.js";
+/**
+ * Render one diagnostics payload as one line per entry. Diagnostics are read when
+ * something already looks wrong, so the compact form matters more than the rich
+ * one: the model needs the level, the message and the source, not a JSON tree.
+ */
+export function renderDiagnostics(kind, value) {
+    if (value === null || typeof value !== 'object')
+        return String(value);
+    const label = kind === 'console'
+        ? 'console (' + String(value.returned) + '/' + String(value.total) + ' shown, level=' + String(value.level) + ')'
+        : 'network (' + String(value.returned) + '/' + String(value.total) + ' shown)';
+    const lines = [label + (value.url === null ? '' : ' @ ' + String(value.url))];
+    if ((value.dropped ?? 0) > 0)
+        lines.push('[' + String(value.dropped) + ' older entries evicted]');
+    // Scope disclosure. Without this line an empty result looks like "the page is
+    // quiet" even when another tab of the shared window is throwing: that is how a
+    // model ends up diagnosing a page it is not even looking at.
+    if ((value.otherPages ?? 0) > 0)
+        lines.push('[' +
+            String(value.otherPages) +
+            ' matching ' +
+            (kind === 'console' ? 'entries' : 'requests') +
+            ' from other tabs of the same window not shown — this reports only the tab this session is driving]');
+    const entries = value.entries ?? [];
+    for (const entry of entries) {
+        if (kind === 'console') {
+            lines.push('#' +
+                String(entry.n) +
+                ' [' +
+                String(entry.level) +
+                '] ' +
+                String(entry.text) +
+                (entry.source ? '  <- ' + String(entry.source) : ''));
+        }
+        else {
+            const outcome = entry.failure !== null && entry.failure !== undefined
+                ? 'FAILED ' + String(entry.failure)
+                : String(entry.status === null ? 'pending' : entry.status);
+            lines.push('#' +
+                String(entry.n) +
+                ' ' +
+                String(entry.method) +
+                ' ' +
+                outcome +
+                ' ' +
+                String(entry.kind) +
+                (entry.ms === null ? '' : ' ' + String(entry.ms) + 'ms') +
+                ' ' +
+                String(entry.url));
+        }
+    }
+    if (entries.length === 0)
+        lines.push('(nothing captured yet)');
+    return lines.join('\n');
+}
+/** Project a provider snapshot into its canonical tool value. */
+export function snapshotValue(snapshot) {
+    const challenge = detectChallenge(snapshot);
+    const tree = renderSnapshot(snapshot);
+    const notes = [];
+    const dialog = snapshot.dialogNote;
+    if (dialog !== undefined && dialog !== '')
+        notes.push(dialog);
+    const landing = snapshot.landingNote;
+    if (landing !== undefined && landing !== '')
+        notes.push(landing);
+    // Engine fallback disclosure. The user explicitly chose a page-reading mode in
+    // Settings; when the provider has to serve the other engine's tree, saying so
+    // is the difference between a checked assumption and a silent one.
+    const engine = snapshot.engineNote;
+    if (engine !== undefined && engine !== '')
+        notes.push('[page reader] ' + engine);
+    const head = notes.length > 0 ? notes.join('\n\n') + '\n\n' : '';
+    // Incremental diff rides along when the provider computed one (snapshot.diff).
+    const diffBlock = snapshot.diff !== undefined ? '\n\n' + renderSnapshotDiff(snapshot.diff) : '';
+    return {
+        url: snapshot.url,
+        title: snapshot.title,
+        refs: snapshot.totalRefs,
+        truncated: snapshot.truncated,
+        tree: head +
+            (challenge === null ? tree : challenge.engine + ': ' + challenge.hint + '.\n' + CHALLENGE_NOTE + '\n\n' + tree) +
+            diffBlock,
+    };
+}
+/** Render a snapshot value as one text block. */
+export function renderSnapshotValue(_args, value) {
+    return [{ type: 'text', text: value.tree }];
+}
+export function renderTabsValue(_args, value) {
+    if (value.tabs.length === 0)
+        return [{ type: 'text', text: 'No open tabs.' }];
+    const lines = value.tabs.map((tab) => String(tab.index) + '.' + (tab.active ? ' [active]' : '') + ' ' + (tab.title || tab.url));
+    return [{ type: 'text', text: lines.join('\n') }];
+}
+const SCREENSHOT_EXTENSIONS = {
+    'image/png': '.png',
+    'image/jpeg': '.jpg',
+    'image/webp': '.webp',
+    'image/gif': '.gif',
+};
+/** Render a screenshot as its summary plus the image block itself. */
+export function renderScreenshotValue(_args, value) {
+    // The attachment store normalizes a capture before storing it: a metadata-carrying PNG
+    // is re-encoded to JPEG (no alpha) or WebP (alpha). The durable reference must therefore
+    // carry the media type the store returned -- hardcoding 'image/png' here makes every
+    // later request containing this message fail with ATTACHMENT_CORRUPT before the model
+    // call is even attempted (surfacing as a bogus transport error).
+    const mediaType = typeof value.mediaType === 'string' && value.mediaType.length > 0 ? value.mediaType : 'image/png';
+    const summary = 'Screenshot of ' +
+        value.url +
+        ': ' +
+        value.width +
+        'x' +
+        value.height +
+        ' px, ' +
+        value.bytes +
+        ' bytes (' +
+        mediaType.slice('image/'.length).toUpperCase() +
+        ' attachment).';
+    // The store brands its id and media type; the canonical value carries plain
+    // strings, so the assertion happens once, here, at the boundary.
+    const attachment = {
+        attachmentId: value.attachmentId,
+        mediaType,
+        bytes: value.bytes,
+        width: value.width,
+        height: value.height,
+        name: 'browser-screenshot' + (SCREENSHOT_EXTENSIONS[mediaType] ?? '.png'),
+    };
+    return [
+        { type: 'text', text: summary },
+        { type: 'image', attachment },
+    ];
+}

package/lib/tool-schemas.d.ts

@@ -0,0 +1,76 @@
+/**
+ * 工具参数 schema：快照、标签、截图三个工具的参数外形，与工具注册处共用同一份定义。
+ * @module dsh-browser-playwright-codex/tool-schemas
+ */
+export declare const SNAPSHOT_SCHEMA: {
+    readonly type: "object";
+    readonly properties: {
+        readonly url: {
+            readonly type: "string";
+        };
+        readonly title: {
+            readonly type: "string";
+        };
+        readonly refs: {
+            readonly type: "integer";
+        };
+        readonly truncated: {
+            readonly type: "boolean";
+        };
+        readonly tree: {
+            readonly type: "string";
+        };
+    };
+    readonly additionalProperties: false;
+};
+export declare const TABS_SCHEMA: {
+    readonly type: "object";
+    readonly properties: {
+        readonly tabs: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly properties: {
+                    readonly index: {
+                        readonly type: "integer";
+                    };
+                    readonly url: {
+                        readonly type: "string";
+                    };
+                    readonly title: {
+                        readonly type: "string";
+                    };
+                    readonly active: {
+                        readonly type: "boolean";
+                    };
+                };
+                readonly additionalProperties: false;
+            };
+        };
+    };
+    readonly additionalProperties: false;
+};
+export declare const SCREENSHOT_SCHEMA: {
+    readonly type: "object";
+    readonly properties: {
+        readonly attachmentId: {
+            readonly type: "string";
+        };
+        readonly mediaType: {
+            readonly type: "string";
+        };
+        readonly bytes: {
+            readonly type: "integer";
+        };
+        readonly width: {
+            readonly type: "integer";
+        };
+        readonly height: {
+            readonly type: "integer";
+        };
+        readonly url: {
+            readonly type: "string";
+        };
+    };
+    readonly additionalProperties: false;
+};

package/lib/tool-schemas.js

@@ -0,0 +1,46 @@
+/**
+ * 工具参数 schema：快照、标签、截图三个工具的参数外形，与工具注册处共用同一份定义。
+ * @module dsh-browser-playwright-codex/tool-schemas
+ */
+export const SNAPSHOT_SCHEMA = {
+    type: 'object',
+    properties: {
+        url: { type: 'string' },
+        title: { type: 'string' },
+        refs: { type: 'integer' },
+        truncated: { type: 'boolean' },
+        tree: { type: 'string' },
+    },
+    additionalProperties: false,
+};
+export const TABS_SCHEMA = {
+    type: 'object',
+    properties: {
+        tabs: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    index: { type: 'integer' },
+                    url: { type: 'string' },
+                    title: { type: 'string' },
+                    active: { type: 'boolean' },
+                },
+                additionalProperties: false,
+            },
+        },
+    },
+    additionalProperties: false,
+};
+export const SCREENSHOT_SCHEMA = {
+    type: 'object',
+    properties: {
+        attachmentId: { type: 'string' },
+        mediaType: { type: 'string' },
+        bytes: { type: 'integer' },
+        width: { type: 'integer' },
+        height: { type: 'integer' },
+        url: { type: 'string' },
+    },
+    additionalProperties: false,
+};

package/lib/tool-types.d.ts

@@ -0,0 +1,82 @@
+/**
+ * 工具面类型：各工具的返回值形状（快照/标签/截图/诊断）与辅助服务接口。
+ * @module dsh-browser-playwright-codex/tool-types
+ */
+import type { StreamChunk } from '@deepseek-ai/dsh-llm';
+/**
+ * JSON value: the shape every tool value must be serializable to, so the
+ * framework can put it on the wire. Declared locally because the installed
+ * dsh-session build does not re-export one.
+ */
+export type JsonValue = string | number | boolean | null | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+/** One actionable element row as the renderer sees it. */
+export interface SnapshotValue {
+    url: string;
+    title: string;
+    refs: number;
+    truncated: boolean;
+    tree: string;
+}
+/** One open tab row as the renderer sees it. */
+export interface TabRow {
+    index: number;
+    url: string;
+    title: string;
+    active: boolean;
+}
+/** Canonical value of browser_tabs. */
+export interface TabsValue {
+    tabs: TabRow[];
+}
+/** Canonical value of browser_screenshot. */
+export interface ScreenshotValue {
+    attachmentId: string;
+    mediaType: string;
+    bytes: number;
+    width: number;
+    height: number;
+    url: string;
+}
+/** Minimal node shape the challenge detector walks. */
+export interface ChallengeNode {
+    readonly name?: string;
+    readonly children?: readonly ChallengeNode[];
+}
+/** The slice of a snapshot the challenge detector reads. */
+export interface ChallengeSnapshot {
+    readonly title?: string;
+    readonly url?: string;
+    readonly nodes?: readonly ChallengeNode[];
+}
+/** What the challenge detector reports when a page is an anti-bot wall. */
+export interface ChallengeMatch {
+    engine: string;
+    hint: string;
+}
+/** The attachments-service face consumed at execution time. */
+export interface AttachmentServiceLike {
+    saveImage(input: {
+        data: Uint8Array;
+        mediaType: string;
+        name: string;
+    }): Promise<SavedImageRef>;
+}
+/** Durable reference returned by the attachment store. */
+export interface SavedImageRef {
+    attachmentId: string;
+    mediaType: string;
+    bytes: number;
+    width: number;
+    height: number;
+}
+/** The llm-service face consumed at execution time. */
+export interface LlmServiceLike {
+    stream(options: unknown): AsyncIterable<StreamChunk>;
+}
+/** Optional service faces consumed at execution time. */
+export interface OptionalServices {
+    attachments?: AttachmentServiceLike;
+    llm?: LlmServiceLike;
+}

package/lib/tool-types.js

@@ -0,0 +1 @@
+export {};

package/lib/tool.d.ts

@@ -10,6 +10,8 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
+import { detectChallenge } from './challenge.ts';
+export { detectChallenge };
 /** Cordis plugin name used by loader diagnostics. */
 export declare const name = "browser-tool";
 /** The browser runtime and tool registry this plugin consumes. */
@@ -41,37 +43,11 @@ export interface ToolConfig {
         maxOutputTokens: number;
     };
 }
-/** Minimal node shape the challenge detector walks. */
-interface ChallengeNode {
-    readonly name?: string;
-    readonly children?: readonly ChallengeNode[];
-}
-/** The slice of a snapshot the challenge detector reads. */
-interface ChallengeSnapshot {
-    readonly title?: string;
-    readonly url?: string;
-    readonly nodes?: readonly ChallengeNode[];
-}
-/** What the challenge detector reports when a page is an anti-bot wall. */
-interface ChallengeMatch {
-    engine: string;
-    hint: string;
-}
 /** Schemastery validation for {@link ToolConfig}. */
 export declare const Config: z<ToolConfig>;
-/**
- * Detect anti-bot / human-verification challenge pages (Cloudflare
- * interstitial, Turnstile, reCAPTCHA-style) from a snapshot's title, url and
- * visible text. We do NOT try to solve them: the correct move for an agent is
- * to hand the challenge to the human who can see the open window. Returns the
- * engine name when matched, else null. Matching is conservative to avoid
- * false positives on ordinary pages.
- */
-export declare function detectChallenge(snapshot: ChallengeSnapshot): ChallengeMatch | null;
 /**
  * Register the browser tool family on ctx.tools.
  * @param ctx - plugin context carrying browser, tools, and the optional services.
  * @param config - tool naming and safety configuration.
  */
 export declare function apply(ctx: Context, config: ToolConfig): void;
-export {};

package/lib/tool.js

@@ -3,9 +3,13 @@ import { defineTool } from '@deepseek-ai/dsh-tools';
 import { BlockAssembler, createUserMessage } from '@deepseek-ai/dsh-llm';
 import { BrowserError } from "./errors.js";
 import { registeredSuffixes } from "./contract.js";
-import { renderSnapshot, renderSnapshotDiff } from "./snapshot-render.js";
 import { getEnabled, publishGates } from "./runtime-state.js";
 import { isCdpMethodAllowed, cdpDenialMessage } from "./cdp-policy.js";
+import { SCREENSHOT_SCHEMA, SNAPSHOT_SCHEMA, TABS_SCHEMA } from "./tool-schemas.js";
+import { parseJsonText, extractionPrompt } from "./extract.js";
+import { detectChallenge } from "./challenge.js";
+import { renderDiagnostics, renderScreenshotValue, renderSnapshotValue, renderTabsValue, snapshotValue, } from "./tool-render.js";
+export { detectChallenge };
 /** Cordis plugin name used by loader diagnostics. */
 export const name = 'browser-tool';
 /** The browser runtime and tool registry this plugin consumes. */
@@ -25,257 +29,6 @@ export const Config = z.object({
         maxOutputTokens: z.number().default(2000),
     }),
 });
-/**
- * Render one diagnostics payload as one line per entry. Diagnostics are read when
- * something already looks wrong, so the compact form matters more than the rich
- * one: the model needs the level, the message and the source, not a JSON tree.
- */
-function renderDiagnostics(kind, value) {
-    if (value === null || typeof value !== 'object')
-        return String(value);
-    const label = kind === 'console'
-        ? 'console (' + String(value.returned) + '/' + String(value.total) + ' shown, level=' + String(value.level) + ')'
-        : 'network (' + String(value.returned) + '/' + String(value.total) + ' shown)';
-    const lines = [label + (value.url === null ? '' : ' @ ' + String(value.url))];
-    if ((value.dropped ?? 0) > 0)
-        lines.push('[' + String(value.dropped) + ' older entries evicted]');
-    // Scope disclosure. Without this line an empty result looks like "the page is
-    // quiet" even when another tab of the shared window is throwing: that is how a
-    // model ends up diagnosing a page it is not even looking at.
-    if ((value.otherPages ?? 0) > 0)
-        lines.push('[' +
-            String(value.otherPages) +
-            ' matching ' +
-            (kind === 'console' ? 'entries' : 'requests') +
-            ' from other tabs of the same window not shown — this reports only the tab this session is driving]');
-    const entries = value.entries ?? [];
-    for (const entry of entries) {
-        if (kind === 'console') {
-            lines.push('#' +
-                String(entry.n) +
-                ' [' +
-                String(entry.level) +
-                '] ' +
-                String(entry.text) +
-                (entry.source ? '  <- ' + String(entry.source) : ''));
-        }
-        else {
-            const outcome = entry.failure !== null && entry.failure !== undefined
-                ? 'FAILED ' + String(entry.failure)
-                : String(entry.status === null ? 'pending' : entry.status);
-            lines.push('#' +
-                String(entry.n) +
-                ' ' +
-                String(entry.method) +
-                ' ' +
-                outcome +
-                ' ' +
-                String(entry.kind) +
-                (entry.ms === null ? '' : ' ' + String(entry.ms) + 'ms') +
-                ' ' +
-                String(entry.url));
-        }
-    }
-    if (entries.length === 0)
-        lines.push('(nothing captured yet)');
-    return lines.join('\n');
-}
-const SNAPSHOT_SCHEMA = {
-    type: 'object',
-    properties: {
-        url: { type: 'string' },
-        title: { type: 'string' },
-        refs: { type: 'integer' },
-        truncated: { type: 'boolean' },
-        tree: { type: 'string' },
-    },
-    additionalProperties: false,
-};
-/**
- * Detect anti-bot / human-verification challenge pages (Cloudflare
- * interstitial, Turnstile, reCAPTCHA-style) from a snapshot's title, url and
- * visible text. We do NOT try to solve them: the correct move for an agent is
- * to hand the challenge to the human who can see the open window. Returns the
- * engine name when matched, else null. Matching is conservative to avoid
- * false positives on ordinary pages.
- */
-export function detectChallenge(snapshot) {
-    const title = snapshot.title ?? '';
-    const url = snapshot.url ?? '';
-    const parts = [];
-    const walk = (nodes, depth) => {
-        for (const node of nodes) {
-            if (parts.length >= 60)
-                return;
-            if (node.name !== undefined && node.name !== '')
-                parts.push(node.name);
-            if (depth < 2 && node.children !== undefined && node.children.length > 0)
-                walk(node.children, depth + 1);
-        }
-    };
-    walk(snapshot.nodes ?? [], 0);
-    const text = [title, url, ...parts].join(' | ').slice(0, 900);
-    const saidCaptcha = parts.some((name) => /(captcha|turnstile|recaptcha|hcaptcha)/i.test(name));
-    if (/just a moment|attention required|checking (your )?browser|cf-chl-|请稍候|验证你的浏览器/i.test(text))
-        return { engine: 'Cloudflare', hint: 'Cloudflare is challenging the browser before letting the page load' };
-    if (/verify (you are|you're|that you are) (a )?human|人机验证|验证您(是|为)人类/i.test(text))
-        return { engine: 'human-verification', hint: 'the page is asking to verify a human visitor' };
-    if (/(captcha|turnstile|recaptcha|hcaptcha)/i.test(text) &&
-        (saidCaptcha || /(captcha|turnstile|recaptcha)/i.test(title)))
-        return { engine: 'captcha', hint: 'the page embedded a captcha-style challenge' };
-    return null;
-}
-/**
- * Instruction appended above a snapshot when the page is an anti-bot
- * challenge. The browser window is visible on the user's desktop: the agent
- * should pause and ask the user to complete it by hand, then re-snapshot.
- */
-const CHALLENGE_NOTE = "[human verification] The page triggered an anti-bot challenge; it is NOT solvable by automation and must NOT be retried blindly. The browser window is open on the user's desktop — tell the user a verification appeared, wait for them to finish it (a few seconds), then call browser_snapshot again. The clearance cookie is saved to the profile automatically and keeps working for the session.";
-/** Project a provider snapshot into its canonical tool value. */
-function snapshotValue(snapshot) {
-    const challenge = detectChallenge(snapshot);
-    const tree = renderSnapshot(snapshot);
-    const notes = [];
-    const dialog = snapshot.dialogNote;
-    if (dialog !== undefined && dialog !== '')
-        notes.push(dialog);
-    const landing = snapshot.landingNote;
-    if (landing !== undefined && landing !== '')
-        notes.push(landing);
-    // Engine fallback disclosure. The user explicitly chose a page-reading mode in
-    // Settings; when the provider has to serve the other engine's tree, saying so
-    // is the difference between a checked assumption and a silent one.
-    const engine = snapshot.engineNote;
-    if (engine !== undefined && engine !== '')
-        notes.push('[page reader] ' + engine);
-    const head = notes.length > 0 ? notes.join('\n\n') + '\n\n' : '';
-    // Incremental diff rides along when the provider computed one (snapshot.diff).
-    const diffBlock = snapshot.diff !== undefined ? '\n\n' + renderSnapshotDiff(snapshot.diff) : '';
-    return {
-        url: snapshot.url,
-        title: snapshot.title,
-        refs: snapshot.totalRefs,
-        truncated: snapshot.truncated,
-        tree: head +
-            (challenge === null ? tree : challenge.engine + ': ' + challenge.hint + '.\n' + CHALLENGE_NOTE + '\n\n' + tree) +
-            diffBlock,
-    };
-}
-/** Render a snapshot value as one text block. */
-function renderSnapshotValue(_args, value) {
-    return [{ type: 'text', text: value.tree }];
-}
-const TABS_SCHEMA = {
-    type: 'object',
-    properties: {
-        tabs: {
-            type: 'array',
-            items: {
-                type: 'object',
-                properties: {
-                    index: { type: 'integer' },
-                    url: { type: 'string' },
-                    title: { type: 'string' },
-                    active: { type: 'boolean' },
-                },
-                additionalProperties: false,
-            },
-        },
-    },
-    additionalProperties: false,
-};
-function renderTabsValue(_args, value) {
-    if (value.tabs.length === 0)
-        return [{ type: 'text', text: 'No open tabs.' }];
-    const lines = value.tabs.map((tab) => String(tab.index) + '.' + (tab.active ? ' [active]' : '') + ' ' + (tab.title || tab.url));
-    return [{ type: 'text', text: lines.join('\n') }];
-}
-const SCREENSHOT_SCHEMA = {
-    type: 'object',
-    properties: {
-        attachmentId: { type: 'string' },
-        mediaType: { type: 'string' },
-        bytes: { type: 'integer' },
-        width: { type: 'integer' },
-        height: { type: 'integer' },
-        url: { type: 'string' },
-    },
-    additionalProperties: false,
-};
-const SCREENSHOT_EXTENSIONS = {
-    'image/png': '.png',
-    'image/jpeg': '.jpg',
-    'image/webp': '.webp',
-    'image/gif': '.gif',
-};
-/** Render a screenshot as its summary plus the image block itself. */
-function renderScreenshotValue(_args, value) {
-    // The attachment store normalizes a capture before storing it: a metadata-carrying PNG
-    // is re-encoded to JPEG (no alpha) or WebP (alpha). The durable reference must therefore
-    // carry the media type the store returned -- hardcoding 'image/png' here makes every
-    // later request containing this message fail with ATTACHMENT_CORRUPT before the model
-    // call is even attempted (surfacing as a bogus transport error).
-    const mediaType = typeof value.mediaType === 'string' && value.mediaType.length > 0 ? value.mediaType : 'image/png';
-    const summary = 'Screenshot of ' +
-        value.url +
-        ': ' +
-        value.width +
-        'x' +
-        value.height +
-        ' px, ' +
-        value.bytes +
-        ' bytes (' +
-        mediaType.slice('image/'.length).toUpperCase() +
-        ' attachment).';
-    // The store brands its id and media type; the canonical value carries plain
-    // strings, so the assertion happens once, here, at the boundary.
-    const attachment = {
-        attachmentId: value.attachmentId,
-        mediaType,
-        bytes: value.bytes,
-        width: value.width,
-        height: value.height,
-        name: 'browser-screenshot' + (SCREENSHOT_EXTENSIONS[mediaType] ?? '.png'),
-    };
-    return [
-        { type: 'text', text: summary },
-        { type: 'image', attachment },
-    ];
-}
-/** Strip markdown fences and whitespace, then parse one JSON document. */
-function parseJsonText(raw) {
-    let text = raw.trim();
-    const fenced = /^\s*```(?:json)?\s*([\s\S]*?)```\s*$/.exec(text);
-    if (fenced !== null) {
-        const inner = fenced[1];
-        if (inner !== undefined)
-            text = inner.trim();
-    }
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        throw new Error('browser_extract: the model output is not valid JSON: ' + text.slice(0, 500));
-    }
-}
-/**
- * Prompt template for structured page extraction. `maxInputChars` bounds the page
- * data handed to the auxiliary model — that model is billed on this prompt, so an
- * unbounded page is a tax on every extraction.
- */
-function extractionPrompt(instruction, data, maxInputChars) {
-    const page = JSON.stringify(data);
-    const bounded = page.length > maxInputChars
-        ? page.slice(0, maxInputChars) + ' [page data truncated at ' + String(maxInputChars) + ' characters]'
-        : page;
-    return ('Extract the following from the page data according to the instruction. ' +
-        'Answer with ONLY one valid JSON value (object, array, or scalar), no prose, no markdown fences.\n\n' +
-        'Instruction: ' +
-        instruction +
-        '\n\n' +
-        'Page data (JSON):\n' +
-        bounded);
-}
 /**
  * Register the browser tool family on ctx.tools.
  * @param ctx - plugin context carrying browser, tools, and the optional services.

package/lib/url-policy.d.ts

@@ -0,0 +1,2 @@
+/** Validate one absolute URL against the navigation policy. */
+export declare function assertAllowedUrl(raw: string, allowedDomains: readonly string[]): URL;