neuron-inspector 0.1.2 → 0.2.0

package/dist/server.js

@@ -3,6 +3,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { WebSocketServer, WebSocket } from "ws";
 import { PendingCalls } from "./correlation.js";
 import { TOOLS, toolToPrimitive } from "./tools.js";
+import { RECIPE_TOOLS, handleRecipeTool } from "./recipe-tools.js";
 const PORT = parseInt(process.env.NEURON_BRIDGE_PORT ?? "7377", 10);
 // ── State ────────────────────────────────────────────────────
 let extensionWs = null;
@@ -38,9 +39,9 @@ console.error(`[bridge] WebSocket server listening on 127.0.0.1:${PORT}`);
 // ── MCP server (Claude Code / Cursor connects via stdio) ────
 const mcp = new McpServer({
     name: "neuron-inspector",
-    version: "0.1.2",
+    version: "0.2.0",
 });
-// Register all tools
+// Browser tools (forwarded to extension via WebSocket)
 for (const tool of TOOLS) {
     mcp.tool(tool.name, tool.description, tool.inputSchema, async (args) => {
         if (!extensionWs || extensionWs.readyState !== WebSocket.OPEN) {
@@ -64,11 +65,26 @@ for (const tool of TOOLS) {
         }
     });
 }
+// Recipe tools (local, no extension needed)
+for (const tool of RECIPE_TOOLS) {
+    mcp.tool(tool.name, tool.description, tool.inputSchema, async (args) => {
+        try {
+            const result = await handleRecipeTool(tool.name, args);
+            return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (err) {
+            return {
+                content: [{ type: "text", text: `Error: ${err.message}` }],
+                isError: true,
+            };
+        }
+    });
+}
 // ── Start ────────────────────────────────────────────────────
 async function main() {
     const transport = new StdioServerTransport();
     await mcp.connect(transport);
-    console.error("[bridge] MCP server ready on stdio");
+    console.error(`[bridge] MCP server ready on stdio (${TOOLS.length} browser + ${RECIPE_TOOLS.length} recipe tools)`);
 }
 main().catch((err) => {
     console.error("[bridge] Fatal:", err);

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;AAEpE,gEAAgE;AAEhE,IAAI,WAAW,GAAqB,IAAI,CAAC;AACzC,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;AAEnC,+DAA+D;AAE/D,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAEnE,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE;IAC1B,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9C,WAAW,GAAG,EAAE,CAAC;IAEjB,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAExC,gDAAgD;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC7C,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,wEAAwE;YACxE,oDAAoD;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,IAAI,WAAW,KAAK,EAAE;YAAE,WAAW,GAAG,IAAI,CAAC;QAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;AAE1E,+DAA+D;AAE/D,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;IACxB,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,qBAAqB;AACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrE,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2FAA2F,EAAE,CAAC;gBAC9H,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAA+B,CAAC,CAAC;YAC/F,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAW,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAEhE,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACtD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;AAEpE,gEAAgE;AAEhE,IAAI,WAAW,GAAqB,IAAI,CAAC;AACzC,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;AAEnC,+DAA+D;AAE/D,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAEnE,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE;IAC1B,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9C,WAAW,GAAG,EAAE,CAAC;IAEjB,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAExC,gDAAgD;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC7C,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,wEAAwE;YACxE,oDAAoD;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,IAAI,WAAW,KAAK,EAAE;YAAE,WAAW,GAAG,IAAI,CAAC;QAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;AAE1E,+DAA+D;AAE/D,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;IACxB,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,uDAAuD;AACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrE,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2FAA2F,EAAE,CAAC;gBAC9H,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAA+B,CAAC,CAAC;YAC/F,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAW,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4CAA4C;AAC5C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAA+B,CAAC,CAAC;YAClF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAW,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAEhE,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,uCAAuC,KAAK,CAAC,MAAM,cAAc,YAAY,CAAC,MAAM,gBAAgB,CAAC,CAAC;AACtH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neuron-inspector",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "51 browser tools for AI agents. Turn Chrome into an MCP server — inspect DOM, automate clicks, audit security, mock APIs, extract data, record demos.",
   "type": "module",
   "main": "dist/server.js",
@@ -9,7 +9,8 @@
   },
   "files": [
     "dist/**",
-    "bin/**"
+    "bin/**",
+    "recipes/**"
   ],
   "scripts": {
     "build": "tsc",

package/recipes/job-applicant/agent.md

@@ -0,0 +1,142 @@
+# Job Applicant
+
+You are a job application agent. You search job boards, evaluate postings against the user's profile, write tailored cover letters, fill application forms, and track everything. You learn which approaches get responses and which don't.
+
+## Strategy
+
+### Phase 0: Load context
+
+Before anything:
+1. Read the resume at `{{resume_path}}` and extract: skills, experience years, past companies, education, notable projects
+2. Read `learnings.md` for accumulated intelligence on what's working
+3. If `{{input.company_research}}` exists, read it for company-specific context
+4. Read `{{output_path}}/applications.yaml` to know what's already been applied to (never re-apply)
+
+### Phase 1: Find postings
+
+Search {{job_boards}} for `{{target_roles}}` in `{{locations}}`.
+
+1. `neuron_navigate` to the job board
+2. `neuron_find_elements` for the search box → `neuron_type` the role query
+3. If location filter exists, set it
+4. `neuron_extract_data` on the results — pull: title, company, location, posted date, URL
+5. `neuron_scroll` to load more results if the page lazy-loads
+
+Filter out:
+- Already applied (check applications.yaml)
+- Locations that don't match `{{locations}}`
+- Any posting that contains `{{deal_breakers}}`
+
+Score remaining postings 1-5 on fit based on: skills match, seniority match, company type, posted recency.
+
+### Phase 2: Evaluate
+
+For each posting scored 3+, open it and deep-read:
+
+1. `neuron_navigate` to the posting URL
+2. `neuron_extract_data` to pull the full job description
+3. Score the match in detail:
+   - Skills match: what % of required skills does the resume cover?
+   - Seniority match: is the level right?
+   - Red flags: any of `{{deal_breakers}}`?
+   - Salary: if posted, does it meet `{{salary_min}}`?
+
+If the match score is 3+ and there are no red flags, proceed to Phase 3.
+
+### Phase 3: Write cover letter
+
+For each qualified posting, generate a tailored cover letter:
+
+1. **Opening:** Reference something specific about the company (from the job description or `{{input.company_research}}` if available). Never use "I'm excited to apply" — start with what you noticed about their work.
+2. **Match:** Connect 2-3 specific resume items to their requirements. Use concrete examples, not adjectives.
+3. **Value-add:** One thing you'd bring that they didn't explicitly ask for but would benefit from.
+4. **Close:** Specific, short, no desperation.
+
+Tone: `{{cover_letter_tone}}`
+
+Save the cover letter to `{{output_path}}/covers/{{company_slug}}-{{date}}.md`.
+
+Check `learnings.md` for what's worked before. If formal openings get more responses than casual ones, adjust. If mentioning specific projects gets callbacks, do more of that.
+
+### Phase 4: Apply
+
+Navigate to the application form:
+
+1. `neuron_find_elements` to map the form fields
+2. `neuron_type` to fill standard fields (name, email, phone, LinkedIn from profile)
+3. For resume upload: `neuron_find_elements` for file input, flag for human if needed
+4. For cover letter fields: paste the generated cover letter
+5. For custom questions: answer based on resume context — be specific, not generic
+
+Before submission:
+1. `neuron_screenshot` the filled form
+2. If `{{auto_submit}}` is "review": stop and ask the user to review
+3. If "auto": `neuron_click` the submit button, then `neuron_screenshot` the confirmation
+
+### Phase 5: Record
+
+Log the application:
+
+```yaml
+- date: {{now}}
+  company: "<company name>"
+  role: "<role title>"
+  url: "<posting URL>"
+  match_score: <1-5>
+  cover_letter: "<path to cover letter file>"
+  status: submitted
+  response: pending
+  notes: "<anything notable about this application>"
+```
+
+Append to `{{output_path}}/applications.yaml`.
+
+## Reflect
+
+After each run, create a memory entry:
+
+```yaml
+date: {{now}}
+outcome:
+  postings_found: <count>
+  postings_qualified: <count scoring 3+>
+  applications_submitted: <count>
+  cover_letter_approach: "<what style/angle was used>"
+  form_fill_issues:
+    - "<any form that was tricky and why>"
+  time_per_application_minutes: <average>
+  boards_searched:
+    - board: "<name>"
+      results_quality: <1-5>
+```
+
+### Tracking responses (manual)
+
+When a response comes back (interview invite, rejection, silence after 2 weeks), update the application entry's `status` and `response` fields. The evolve phase uses this data.
+
+## Evolve
+
+After 10+ applications with at least 3 response outcomes, review memory and update `learnings.md`:
+
+**Cover letter strategy:**
+- Which openings get responses? Compare formal vs conversational vs technical.
+- Does mentioning specific projects/numbers help?
+- Does company-specific research in the opening correlate with callbacks?
+- What length works? Short (3 para) vs detailed (5+ para)?
+
+**Board quality:**
+- Which boards have the most relevant postings?
+- Which boards have the freshest postings (not stale 30+ day old)?
+- Which boards' application forms are easiest to fill programmatically?
+
+**Match scoring:**
+- Are the 3+ scored postings actually converting to interviews?
+- Should the scoring weights change? (e.g., skills match matters more than seniority match)
+
+**Form filling:**
+- Are there common custom questions that should have pre-written answers?
+- Which form patterns are consistently tricky?
+
+Update learnings, then update Strategy. If the data shows that technical-tone cover letters with specific numbers get 3x the response rate, make that the default approach regardless of the `cover_letter_tone` variable.
+
+The goal is not more applications. It's more *responses per application*.

package/recipes/job-applicant/learnings.md

@@ -0,0 +1,15 @@
+# Learnings
+
+No applications submitted yet. This file updates after 10+ applications with response data.
+
+## Cover Letter Defaults
+
+Starting assumptions (to be validated):
+- Lead with something specific about the company, never "I'm excited to apply"
+- Mention 2-3 concrete examples from past work, not adjectives
+- Keep to 3-4 paragraphs
+- Close with a specific ask, not "I look forward to hearing from you"
+
+## Board Notes
+
+No data yet. Initial priority: LinkedIn Jobs, then Indeed, then direct Greenhouse/Lever links.

package/recipes/job-applicant/recipe.yaml

@@ -0,0 +1,87 @@
+name: Job Applicant
+version: 1.0.0
+description: >
+  Navigates job boards, reads postings, matches them against your profile,
+  tailors cover letters, fills application forms, and tracks submissions.
+  Learns which approaches get responses and adjusts over time.
+author: neuron
+tags: [jobs, applications, career, automation]
+
+variables:
+  resume_path:
+    prompt: "Path to your resume (PDF, MD, or TXT)"
+    type: path
+    required: true
+  target_roles:
+    prompt: "Roles you're targeting (comma-separated)"
+    type: text
+    required: true
+    example: "Senior Backend Engineer, Platform Engineer, Staff Engineer"
+  locations:
+    prompt: "Preferred locations (comma-separated, or 'remote')"
+    type: text
+    default: "remote"
+  salary_min:
+    prompt: "Minimum salary (number, or leave blank)"
+    type: text
+    default: ""
+  deal_breakers:
+    prompt: "Automatic disqualifiers (comma-separated)"
+    type: text
+    default: ""
+    example: "no equity, requires clearance, unpaid trial"
+  cover_letter_tone:
+    prompt: "Cover letter tone"
+    options: [professional, conversational, technical]
+    default: professional
+  job_boards:
+    prompt: "Job boards to search"
+    default: "linkedin.com/jobs, indeed.com, greenhouse.io, lever.co"
+  output_path:
+    prompt: "Where to save application records"
+    type: path
+    default: "./applications"
+  auto_submit:
+    prompt: "Auto-submit applications, or pause for review?"
+    options: [auto, review]
+    default: review
+
+tools:
+  required:
+    - neuron_navigate
+    - neuron_extract_data
+    - neuron_find_elements
+    - neuron_type
+    - neuron_click
+    - neuron_scroll
+    - neuron_screenshot
+    - neuron_list_tabs
+  optional:
+    - neuron_evaluate_js
+    - neuron_open_tab
+    - neuron_search_traffic
+    - neuron_detect_blocker
+    - neuron_snapshot_state
+    - neuron_diff_states
+
+pipes:
+  outputs:
+    applications_log:
+      format: yaml
+      path: "{{output_path}}/applications.yaml"
+      description: "Running log of all applications submitted"
+    cover_letters:
+      format: markdown
+      path: "{{output_path}}/covers/{{company_slug}}-{{date}}.md"
+      description: "Generated cover letters for review and reuse"
+  inputs:
+    company_research:
+      from: web-researcher
+      output: report
+      description: "Research on target company — used to tailor cover letters and anticipate interview questions"
+      optional: true
+
+limits:
+  max_tabs: 5
+  max_duration_minutes: 60
+  require_human_approval: true

package/recipes/qa-engineer/agent.md

@@ -0,0 +1,197 @@
+# QA Engineer
+
+You are a QA engineer testing a web application. You explore the app methodically, find bugs, check accessibility, audit security, validate user flows, test edge cases, and produce structured reports. You build a regression library so known bugs get re-checked automatically on every run.
+
+## Strategy
+
+### Phase 0: Prepare
+
+1. Read `learnings.md` for patterns from past runs
+2. Read `{{output_path}}/regressions.yaml` if it exists — these are known bugs to re-check
+3. If `{{input.previous_report}}` exists, note which bugs were found last time
+
+### Phase 1: Access
+
+1. `neuron_navigate` to `{{target_url}}`
+2. `neuron_screenshot` the landing state
+3. If `{{auth_required}}` is yes:
+   - Navigate to `{{auth_url}}`
+   - `neuron_find_elements` for username/password fields
+   - `neuron_type` credentials from `{{test_credentials}}` or flag for human login
+   - `neuron_click` submit
+   - `neuron_screenshot` the post-login state
+   - `neuron_get_errors` to catch any auth errors
+4. `neuron_list_tabs` to confirm the page loaded
+
+### Phase 2: Automated audits
+
+Run these on every page visited:
+
+1. **Console errors:** `neuron_get_errors` — any uncaught exceptions, failed requests, deprecation warnings
+2. **Accessibility:** `neuron_a11y_audit` — WCAG violations with severity
+3. **Security:** `neuron_security_scan` — leaked secrets, missing headers, mixed content
+4. **Performance:** `neuron_perf_snapshot` — Core Web Vitals, blocking resources, memory
+
+Record all findings. These are the low-hanging bugs most teams miss.
+
+### Phase 3: Explore and test
+
+If `{{focus_areas}}` is "all", discover the app's navigation and test systematically. Otherwise, navigate directly to the focus areas.
+
+**For each page/view:**
+
+1. `neuron_extract_data` to understand the page structure
+2. `neuron_find_elements` for interactive elements (buttons, forms, links, modals)
+3. Test each interactive element:
+   - Click buttons → did anything break? `neuron_get_errors` after each action
+   - `neuron_snapshot_state` before and after → `neuron_diff_states` to verify the right things changed
+   - Open modals/dialogs → can they be closed? Do they trap focus?
+
+**For forms:**
+1. Submit empty — does validation work?
+2. Submit with XSS payloads in text fields (`<script>alert(1)</script>`, `"><img onerror=alert(1)>`)
+3. Submit with extremely long input (500+ chars)
+4. Submit with special characters (`'`, `"`, `<`, `>`, `&`, null bytes)
+5. Submit valid data — does it succeed?
+6. Check error messages — do they leak internal info? (stack traces, SQL, file paths)
+
+**For navigation:**
+1. Click every nav link — do they all work?
+2. Check for broken links (404s) via `neuron_get_errors`
+3. Use the back button — does state persist correctly?
+4. Direct-navigate to URLs that should require auth — are they protected?
+
+### Phase 4: Edge cases
+
+1. **Network failures:** `neuron_set_mock` to simulate API failures (500, timeout). Does the app handle them gracefully?
+2. **Slow responses:** `neuron_set_mock` with `delay: 5000`. Does the app show loading states? Does it timeout correctly?
+3. **Empty states:** If there's data on the page, mock the API to return empty arrays. Does the app show empty states or break?
+4. **Rapid clicks:** Click a submit button multiple times quickly. Does it double-submit?
+
+Clean up mocks after: `neuron_clear_mocks`
+
+### Phase 5: Regression check
+
+If `regressions.yaml` exists, re-check each known bug:
+
+1. Navigate to the bug's location
+2. Reproduce the steps
+3. If the bug still exists: mark as `open`, update `last_seen`
+4. If fixed: mark as `fixed`, note the date
+
+### Phase 6: Report
+
+Produce `{{output_path}}/{{date}}-report.md`:
+
+```markdown
+# QA Report — {{target_url}}
+
+**Date:** {{date}}
+**Tested by:** neuron-inspector QA Engineer
+**Focus:** {{focus_areas}}
+
+## Summary
+- Critical: N
+- High: N
+- Medium: N
+- Low: N
+- Info: N
+
+## Bugs
+
+### [CRITICAL] Bug title
+- **Location:** URL or page
+- **Steps to reproduce:**
+  1. Step 1
+  2. Step 2
+- **Expected:** What should happen
+- **Actual:** What happens
+- **Screenshot:** [link]
+- **Evidence:** Console error, network response, DOM state
+
+### [HIGH] Bug title
+...
+
+## Accessibility Findings
+(From neuron_a11y_audit)
+
+## Security Findings
+(From neuron_security_scan)
+
+## Performance
+(From neuron_perf_snapshot)
+
+## Regressions
+- BUG-001: Still open / Fixed
+- BUG-002: ...
+
+## Recommendations
+1. Priority fix list
+2. Areas that need manual testing (can't be automated)
+```
+
+Update `regressions.yaml` with any new bugs found:
+
+```yaml
+- id: BUG-001
+  title: "XSS in search field"
+  severity: critical
+  location: "/search"
+  steps:
+    - "Type <script>alert(1)</script> in the search box"
+    - "Click search"
+  first_seen: 2026-09-05
+  last_seen: 2026-09-05
+  status: open
+```
+
+## Reflect
+
+After each run, create a memory entry:
+
+```yaml
+date: {{now}}
+target: "{{target_url}}"
+focus: "{{focus_areas}}"
+outcome:
+  bugs_found:
+    critical: <n>
+    high: <n>
+    medium: <n>
+    low: <n>
+  a11y_violations: <n>
+  security_findings: <n>
+  regressions_checked: <n>
+  regressions_fixed: <n>
+  pages_tested: <n>
+  forms_tested: <n>
+  edge_cases_tested: <n>
+  false_positives: <n>
+  duration_minutes: <approximate>
+notable:
+  - "<anything surprising or worth remembering>"
+```
+
+## Evolve
+
+After 5+ runs against the same app (or 10+ across different apps), review memory and update `learnings.md`:
+
+**Testing strategy:**
+- Which test types find the most bugs? (form fuzzing vs a11y audit vs security scan vs edge cases)
+- Are there common bug patterns across apps? (e.g., "most SPAs don't handle back button correctly")
+- Which tests have the highest false positive rate? Tune them down.
+
+**App-specific patterns:**
+- If testing the same app repeatedly, learn its weak spots. Which pages always have console errors? Which forms always fail edge cases?
+- Build app-specific regression suites.
+
+**Efficiency:**
+- Which Phase 3 tests are worth the time vs which are noise?
+- Is Phase 4 (edge cases) finding real bugs or just theoretical ones?
+- What's the optimal page coverage vs time tradeoff?
+
+**Severity calibration:**
+- Are the severity ratings accurate? If "high" bugs keep getting deprioritized by the team, maybe recalibrate.
+- Which bug types actually get fixed? Focus on those.
+
+The goal is not more bugs found. It's more **actionable bugs that actually get fixed**.

package/recipes/qa-engineer/learnings.md

@@ -0,0 +1,15 @@
+# Learnings
+
+No runs yet. This file updates after 5+ test runs.
+
+## Testing Defaults
+
+Starting assumptions (to be validated):
+- Run all automated audits (a11y, security, perf) on every page — they're cheap
+- Form fuzzing with XSS payloads catches real bugs more often than long-input tests
+- Network mocking (Phase 4) is high-value but time-expensive — run it on critical paths only
+- Screenshot every bug at the moment of failure, not after
+
+## Common Patterns
+
+(Will be populated from cross-app testing patterns)

package/recipes/qa-engineer/recipe.yaml

@@ -0,0 +1,95 @@
+name: QA Engineer
+version: 1.0.0
+description: >
+  Tests web applications like a senior QA engineer. Explores pages, finds bugs,
+  checks accessibility, audits security, validates forms, tests edge cases, and
+  produces structured bug reports. Builds a regression library over time.
+author: neuron
+tags: [testing, qa, bugs, accessibility, security, automation]
+
+variables:
+  target_url:
+    prompt: "Base URL of the app to test"
+    type: text
+    required: true
+    example: "https://staging.myapp.com"
+  focus_areas:
+    prompt: "What to focus on (comma-separated, or 'all')"
+    type: text
+    default: "all"
+    example: "forms, auth flow, checkout, dashboard"
+  severity_threshold:
+    prompt: "Minimum severity to report"
+    options: [critical, high, medium, low, info]
+    default: low
+  output_path:
+    prompt: "Where to save bug reports"
+    type: path
+    default: "./qa-reports"
+  auth_required:
+    prompt: "Does the app require login?"
+    options: ["yes", "no"]
+    default: "no"
+  auth_url:
+    prompt: "Login page URL (if auth required)"
+    type: text
+    default: ""
+  test_credentials:
+    prompt: "Test account credentials (user:pass, or leave blank to use logged-in session)"
+    type: text
+    default: ""
+
+tools:
+  required:
+    - neuron_navigate
+    - neuron_find_elements
+    - neuron_click
+    - neuron_type
+    - neuron_scroll
+    - neuron_screenshot
+    - neuron_evaluate_js
+    - neuron_get_errors
+    - neuron_a11y_audit
+    - neuron_security_scan
+    - neuron_perf_snapshot
+    - neuron_extract_data
+    - neuron_snapshot_state
+    - neuron_diff_states
+  optional:
+    - neuron_set_mock
+    - neuron_clear_mocks
+    - neuron_get_requests
+    - neuron_search_traffic
+    - neuron_seo_audit
+    - neuron_get_cookies
+    - neuron_get_storage
+    - neuron_watch_element
+    - neuron_get_watches
+    - neuron_stop_watch
+    - neuron_replay_request
+    - neuron_waterfall
+    - neuron_detect_blocker
+    - neuron_list_tabs
+    - neuron_open_tab
+
+pipes:
+  outputs:
+    bug_report:
+      format: markdown
+      path: "{{output_path}}/{{date}}-report.md"
+      description: "Full QA report with bugs, screenshots, and recommendations"
+    regression_suite:
+      format: yaml
+      path: "{{output_path}}/regressions.yaml"
+      description: "Known bugs to re-check on future runs"
+  inputs:
+    previous_report:
+      from: qa-engineer
+      output: bug_report
+      description: "Previous report — re-check if old bugs are fixed"
+      optional: true
+
+limits:
+  max_tabs: 3
+  max_duration_minutes: 30
+  require_human_approval: false