open-multi-agent-kit 0.90.0 → 0.90.4

package/dist/core/hook-inventory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-inventory.d.ts","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,kBAAkB,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;CACjC;AAMD,eAAO,MAAM,aAAa,EAAE,SAAS,cAAc,EAyElD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAsBlE","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module provides canonical names plus safe policy metadata so the\n * loadout layer can validate selectors without executing hooks.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { HookPolicyMetadata } from \"./hooks/index.ts\";\nimport { DEFAULT_HOOK_POLICY, sanitizeHookPolicy } from \"./hooks/index.ts\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n\tpolicy: HookPolicyMetadata;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nfunction builtinHook(name: string, policy: HookPolicyMetadata): HookDescriptor {\n\treturn { name, builtin: true, policy: sanitizeHookPolicy(policy) };\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\tbuiltinHook(\"pre-shell-guard\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 3_000,\n\t}),\n\tbuiltinHook(\"protect-secrets\", {\n\t\tstages: [\"tool_call\", \"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"session-context\", {\n\t\tstages: [\"session_start\"],\n\t\teffects: [\"mutator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"precompact-checkpoint\", {\n\t\tstages: [\"pre_compact\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"typecheck-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"stop-verify\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"subagent-stop-audit\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"npm-audit-summary\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"bounded-evidence\", {\n\t\tstages: [\"tool_result\", \"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"document-artifact-guard\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"component-spec-before-build\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"visual-diff-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir).sort();\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t\tpolicy: sanitizeHookPolicy(DEFAULT_HOOK_POLICY),\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}
+{"version":3,"file":"hook-inventory.d.ts","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,kBAAkB,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;CACjC;AAMD,eAAO,MAAM,aAAa,EAAE,SAAS,cAAc,EA+ElD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAsBlE","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module provides canonical names plus safe policy metadata so the\n * loadout layer can validate selectors without executing hooks.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { HookPolicyMetadata } from \"./hooks/index.ts\";\nimport { DEFAULT_HOOK_POLICY, sanitizeHookPolicy } from \"./hooks/index.ts\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n\tpolicy: HookPolicyMetadata;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nfunction builtinHook(name: string, policy: HookPolicyMetadata): HookDescriptor {\n\treturn { name, builtin: true, policy: sanitizeHookPolicy(policy) };\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\tbuiltinHook(\"pre-shell-guard\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 3_000,\n\t}),\n\tbuiltinHook(\"protect-secrets\", {\n\t\tstages: [\"tool_call\", \"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"session-context\", {\n\t\tstages: [\"session_start\"],\n\t\teffects: [\"mutator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"precompact-checkpoint\", {\n\t\tstages: [\"pre_compact\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"typecheck-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"stop-verify\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"subagent-stop-audit\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"npm-audit-summary\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"notify-sound-on-stop\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"bounded-evidence\", {\n\t\tstages: [\"tool_result\", \"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"document-artifact-guard\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"component-spec-before-build\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"visual-diff-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir).sort();\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t\tpolicy: sanitizeHookPolicy(DEFAULT_HOOK_POLICY),\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}

package/dist/core/hook-inventory.js

@@ -60,6 +60,12 @@ export const BUILTIN_HOOKS = [
         failureMode: "fail-closed",
         timeoutMs: 30_000,
     }),
+    builtinHook("notify-sound-on-stop", {
+        stages: ["session_stop"],
+        effects: ["observer"],
+        failureMode: "fail-closed",
+        timeoutMs: 5_000,
+    }),
     builtinHook("bounded-evidence", {
         stages: ["tool_result", "session_stop"],
         effects: ["validator"],

package/dist/core/hook-inventory.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook-inventory.js","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAa3E,SAAS,WAAW,CAAC,IAAY,EAAE,MAA0B,EAAkB;IAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAAA,CACnE;AAED,MAAM,CAAC,MAAM,aAAa,GAA8B;IACvD,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;QACpC,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,eAAe,CAAC;QACzB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,uBAAuB,EAAE;QACpC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,sBAAsB,EAAE;QACnC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,aAAa,EAAE;QAC1B,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,qBAAqB,EAAE;QAClC,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,mBAAmB,EAAE;QAChC,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,kBAAkB,EAAE;QAC/B,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;QACvC,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,yBAAyB,EAAE;QACtC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,6BAA6B,EAAE;QAC1C,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,wBAAwB,EAAE;QACrC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB,EAAiB;IACnE,MAAM,KAAK,GAAqB,CAAC,GAAG,aAAa,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;oBAAE,SAAS;gBACjD,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACtC,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,kBAAkB,CAAC,mBAAmB,CAAC;iBAC/C,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;QACnE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,CACjB","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module provides canonical names plus safe policy metadata so the\n * loadout layer can validate selectors without executing hooks.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { HookPolicyMetadata } from \"./hooks/index.ts\";\nimport { DEFAULT_HOOK_POLICY, sanitizeHookPolicy } from \"./hooks/index.ts\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n\tpolicy: HookPolicyMetadata;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nfunction builtinHook(name: string, policy: HookPolicyMetadata): HookDescriptor {\n\treturn { name, builtin: true, policy: sanitizeHookPolicy(policy) };\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\tbuiltinHook(\"pre-shell-guard\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 3_000,\n\t}),\n\tbuiltinHook(\"protect-secrets\", {\n\t\tstages: [\"tool_call\", \"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"session-context\", {\n\t\tstages: [\"session_start\"],\n\t\teffects: [\"mutator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"precompact-checkpoint\", {\n\t\tstages: [\"pre_compact\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"typecheck-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"stop-verify\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"subagent-stop-audit\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"npm-audit-summary\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"bounded-evidence\", {\n\t\tstages: [\"tool_result\", \"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"document-artifact-guard\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"component-spec-before-build\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"visual-diff-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir).sort();\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t\tpolicy: sanitizeHookPolicy(DEFAULT_HOOK_POLICY),\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}
+{"version":3,"file":"hook-inventory.js","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAa3E,SAAS,WAAW,CAAC,IAAY,EAAE,MAA0B,EAAkB;IAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAAA,CACnE;AAED,MAAM,CAAC,MAAM,aAAa,GAA8B;IACvD,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;QACpC,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,eAAe,CAAC;QACzB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,uBAAuB,EAAE;QACpC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,sBAAsB,EAAE;QACnC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,aAAa,EAAE;QAC1B,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,qBAAqB,EAAE;QAClC,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,mBAAmB,EAAE;QAChC,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,sBAAsB,EAAE;QACnC,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,kBAAkB,EAAE;QAC/B,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;QACvC,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,yBAAyB,EAAE;QACtC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,6BAA6B,EAAE;QAC1C,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,wBAAwB,EAAE;QACrC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB,EAAiB;IACnE,MAAM,KAAK,GAAqB,CAAC,GAAG,aAAa,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;oBAAE,SAAS;gBACjD,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACtC,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,kBAAkB,CAAC,mBAAmB,CAAC;iBAC/C,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;QACnE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,CACjB","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module provides canonical names plus safe policy metadata so the\n * loadout layer can validate selectors without executing hooks.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { HookPolicyMetadata } from \"./hooks/index.ts\";\nimport { DEFAULT_HOOK_POLICY, sanitizeHookPolicy } from \"./hooks/index.ts\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n\tpolicy: HookPolicyMetadata;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nfunction builtinHook(name: string, policy: HookPolicyMetadata): HookDescriptor {\n\treturn { name, builtin: true, policy: sanitizeHookPolicy(policy) };\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\tbuiltinHook(\"pre-shell-guard\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 3_000,\n\t}),\n\tbuiltinHook(\"protect-secrets\", {\n\t\tstages: [\"tool_call\", \"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"session-context\", {\n\t\tstages: [\"session_start\"],\n\t\teffects: [\"mutator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"precompact-checkpoint\", {\n\t\tstages: [\"pre_compact\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"typecheck-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"stop-verify\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"subagent-stop-audit\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"npm-audit-summary\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"notify-sound-on-stop\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"bounded-evidence\", {\n\t\tstages: [\"tool_result\", \"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"document-artifact-guard\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"component-spec-before-build\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"visual-diff-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir).sort();\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t\tpolicy: sanitizeHookPolicy(DEFAULT_HOOK_POLICY),\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}

package/dist/core/mcp-computer-use-presets.d.ts

@@ -0,0 +1,64 @@
+export declare const OMK_COMPUTER_USE_DEFAULT_PRESET_ID = "playwright-computer-use";
+export type ComputerUsePresetKey = "browserUseAgent" | "playwrightComputerUse";
+export type ComputerUsePresetId = "browser-use-agent" | "playwright-computer-use";
+export type ComputerUseRisk = "R3";
+export type ComputerUseEngine = "mcp" | "python-rust-sidecar";
+export type ComputerUseBrowser = "chrome" | "firefox" | "msedge" | "webkit";
+export type ComputerUseCookieMode = "existing-browser-session" | "isolated-storage-state" | "managed-profile" | "none";
+export type ComputerUseCredentialScope = "none" | "session" | "workspace";
+export type ComputerUseLaunchOption = "browser" | "cdp-endpoint" | "extension" | "storage-state" | "user-data-dir";
+export interface ComputerUseTransport {
+    readonly args: readonly string[];
+    readonly command: string;
+    readonly packageName?: string;
+    readonly type: "stdio";
+}
+export interface ComputerUseBrowserMode {
+    readonly argsExtra?: readonly string[];
+    readonly browser?: ComputerUseBrowser;
+    readonly browserLimit?: "chrome-edge-only";
+    readonly cookieMode: ComputerUseCookieMode;
+    readonly description: string;
+    readonly id: "existing-chrome-session" | "isolated-storage-state" | "managed-chrome-profile" | "managed-firefox-profile";
+    readonly profileDir?: string;
+}
+export interface ComputerUsePolicy {
+    readonly allowedDomainsRequired?: boolean;
+    readonly allowedOriginsSecurityBoundary?: boolean;
+    readonly blockMetadataIp: boolean;
+    readonly blockPrivateNetwork: boolean;
+    readonly credentialScopes: readonly ComputerUseCredentialScope[];
+    readonly denyNoSandbox: boolean;
+    readonly descriptorHashPinned: boolean;
+    readonly evidenceLedger: boolean;
+    readonly maxActions: number;
+    readonly maxOutputBytes?: number;
+    readonly noManualProfileShellScript?: boolean;
+    readonly noUnrestrictedFileAccess: boolean;
+    readonly originAllowlistRequiredForCredentialedMode: boolean;
+    readonly outputGuard: boolean;
+    readonly profileBrokerOnly?: boolean;
+    readonly requiresExplicitPostconditions: boolean;
+    readonly requiresRequestInterception: boolean;
+    readonly sandboxRequired: boolean;
+    readonly secretBrokerOnly: boolean;
+}
+export interface ComputerUsePreset {
+    readonly browserModes: readonly ComputerUseBrowserMode[];
+    readonly defaultEnabled: boolean;
+    readonly engine: ComputerUseEngine;
+    readonly id: ComputerUsePresetId;
+    readonly key: ComputerUsePresetKey;
+    readonly label: string;
+    readonly notes: readonly string[];
+    readonly policy: ComputerUsePolicy;
+    readonly risk: ComputerUseRisk;
+    readonly sourceUrls: readonly string[];
+    readonly supportedLaunchOptions: readonly ComputerUseLaunchOption[];
+    readonly transport?: ComputerUseTransport;
+}
+export declare const COMPUTER_USE_PRESETS: Record<ComputerUsePresetKey, ComputerUsePreset>;
+export declare function listComputerUsePresets(): ComputerUsePreset[];
+export declare function getComputerUsePreset(id: string): ComputerUsePreset | undefined;
+export declare function requiresCredentialedOriginAllowlist(cookieMode: ComputerUseCookieMode): boolean;
+//# sourceMappingURL=mcp-computer-use-presets.d.ts.map

package/dist/core/mcp-computer-use-presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-computer-use-presets.d.ts","sourceRoot":"","sources":["../../src/core/mcp-computer-use-presets.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kCAAkC,4BAA4B,CAAC;AAE5E,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,uBAAuB,CAAC;AAC/E,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,yBAAyB,CAAC;AAClF,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC;AACnC,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,qBAAqB,CAAC;AAC9D,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC5E,MAAM,MAAM,qBAAqB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,MAAM,CAAC;AACvH,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,CAAC;AAEnH,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,EACR,yBAAyB,GACzB,wBAAwB,GACxB,wBAAwB,GACxB,yBAAyB,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,0CAA0C,EAAE,OAAO,CAAC;IAC7D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,8BAA8B,EAAE,OAAO,CAAC;IACjD,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AA6HD,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,iBAAiB,CAGvE,CAAC;AAEX,wBAAgB,sBAAsB,IAAI,iBAAiB,EAAE,CAE5D;AAED,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAG9E;AAED,wBAAgB,mCAAmC,CAAC,UAAU,EAAE,qBAAqB,GAAG,OAAO,CAE9F","sourcesContent":["export const OMK_COMPUTER_USE_DEFAULT_PRESET_ID = \"playwright-computer-use\";\n\nexport type ComputerUsePresetKey = \"browserUseAgent\" | \"playwrightComputerUse\";\nexport type ComputerUsePresetId = \"browser-use-agent\" | \"playwright-computer-use\";\nexport type ComputerUseRisk = \"R3\";\nexport type ComputerUseEngine = \"mcp\" | \"python-rust-sidecar\";\nexport type ComputerUseBrowser = \"chrome\" | \"firefox\" | \"msedge\" | \"webkit\";\nexport type ComputerUseCookieMode = \"existing-browser-session\" | \"isolated-storage-state\" | \"managed-profile\" | \"none\";\nexport type ComputerUseCredentialScope = \"none\" | \"session\" | \"workspace\";\nexport type ComputerUseLaunchOption = \"browser\" | \"cdp-endpoint\" | \"extension\" | \"storage-state\" | \"user-data-dir\";\n\nexport interface ComputerUseTransport {\n\treadonly args: readonly string[];\n\treadonly command: string;\n\treadonly packageName?: string;\n\treadonly type: \"stdio\";\n}\n\nexport interface ComputerUseBrowserMode {\n\treadonly argsExtra?: readonly string[];\n\treadonly browser?: ComputerUseBrowser;\n\treadonly browserLimit?: \"chrome-edge-only\";\n\treadonly cookieMode: ComputerUseCookieMode;\n\treadonly description: string;\n\treadonly id:\n\t\t| \"existing-chrome-session\"\n\t\t| \"isolated-storage-state\"\n\t\t| \"managed-chrome-profile\"\n\t\t| \"managed-firefox-profile\";\n\treadonly profileDir?: string;\n}\n\nexport interface ComputerUsePolicy {\n\treadonly allowedDomainsRequired?: boolean;\n\treadonly allowedOriginsSecurityBoundary?: boolean;\n\treadonly blockMetadataIp: boolean;\n\treadonly blockPrivateNetwork: boolean;\n\treadonly credentialScopes: readonly ComputerUseCredentialScope[];\n\treadonly denyNoSandbox: boolean;\n\treadonly descriptorHashPinned: boolean;\n\treadonly evidenceLedger: boolean;\n\treadonly maxActions: number;\n\treadonly maxOutputBytes?: number;\n\treadonly noManualProfileShellScript?: boolean;\n\treadonly noUnrestrictedFileAccess: boolean;\n\treadonly originAllowlistRequiredForCredentialedMode: boolean;\n\treadonly outputGuard: boolean;\n\treadonly profileBrokerOnly?: boolean;\n\treadonly requiresExplicitPostconditions: boolean;\n\treadonly requiresRequestInterception: boolean;\n\treadonly sandboxRequired: boolean;\n\treadonly secretBrokerOnly: boolean;\n}\n\nexport interface ComputerUsePreset {\n\treadonly browserModes: readonly ComputerUseBrowserMode[];\n\treadonly defaultEnabled: boolean;\n\treadonly engine: ComputerUseEngine;\n\treadonly id: ComputerUsePresetId;\n\treadonly key: ComputerUsePresetKey;\n\treadonly label: string;\n\treadonly notes: readonly string[];\n\treadonly policy: ComputerUsePolicy;\n\treadonly risk: ComputerUseRisk;\n\treadonly sourceUrls: readonly string[];\n\treadonly supportedLaunchOptions: readonly ComputerUseLaunchOption[];\n\treadonly transport?: ComputerUseTransport;\n}\n\nconst PLAYWRIGHT_BROWSER_MODES: readonly ComputerUseBrowserMode[] = [\n\t{\n\t\tbrowser: \"chrome\",\n\t\tcookieMode: \"managed-profile\",\n\t\tdescription: \"OMK-managed Chrome profile with project-scoped persistent cookies and local storage.\",\n\t\tid: \"managed-chrome-profile\",\n\t\tprofileDir: \".omk/browser-profiles/chrome\",\n\t},\n\t{\n\t\tbrowser: \"firefox\",\n\t\tcookieMode: \"managed-profile\",\n\t\tdescription: \"OMK-managed Firefox profile; avoids attaching to the user's real Firefox profile.\",\n\t\tid: \"managed-firefox-profile\",\n\t\tprofileDir: \".omk/browser-profiles/firefox\",\n\t},\n\t{\n\t\targsExtra: [\"--isolated\", \"--storage-state\", \"<storageStatePath>\"],\n\t\tcookieMode: \"isolated-storage-state\",\n\t\tdescription: \"Loads cookies and local storage from an explicit Playwright storage-state file.\",\n\t\tid: \"isolated-storage-state\",\n\t},\n\t{\n\t\targsExtra: [\"--extension\"],\n\t\tbrowser: \"chrome\",\n\t\tbrowserLimit: \"chrome-edge-only\",\n\t\tcookieMode: \"existing-browser-session\",\n\t\tdescription: \"Connects to an existing Chrome or Edge session through the Playwright extension.\",\n\t\tid: \"existing-chrome-session\",\n\t},\n];\n\nconst PLAYWRIGHT_COMPUTER_USE_PRESET: ComputerUsePreset = {\n\tbrowserModes: PLAYWRIGHT_BROWSER_MODES,\n\tdefaultEnabled: true,\n\tengine: \"mcp\",\n\tid: \"playwright-computer-use\",\n\tkey: \"playwrightComputerUse\",\n\tlabel: \"Playwright Computer Use\",\n\tnotes: [\n\t\t\"Default computer-use preset built on Microsoft Playwright MCP accessibility-tree automation.\",\n\t\t\"Credentialed browser sessions must go through SecureComputerUseBroker preflight and request interception.\",\n\t\t\"Playwright allowed-origins are recorded as advisory only; OMK policy remains the security boundary.\",\n\t],\n\tpolicy: {\n\t\tallowedOriginsSecurityBoundary: false,\n\t\tblockMetadataIp: true,\n\t\tblockPrivateNetwork: true,\n\t\tcredentialScopes: [\"none\", \"session\", \"workspace\"],\n\t\tdenyNoSandbox: true,\n\t\tdescriptorHashPinned: true,\n\t\tevidenceLedger: true,\n\t\tmaxActions: 40,\n\t\tmaxOutputBytes: 25_000_000,\n\t\tnoUnrestrictedFileAccess: true,\n\t\toriginAllowlistRequiredForCredentialedMode: true,\n\t\toutputGuard: true,\n\t\trequiresExplicitPostconditions: true,\n\t\trequiresRequestInterception: true,\n\t\tsandboxRequired: true,\n\t\tsecretBrokerOnly: true,\n\t},\n\trisk: \"R3\",\n\tsourceUrls: [\"https://github.com/microsoft/playwright-mcp\"],\n\tsupportedLaunchOptions: [\"browser\", \"user-data-dir\", \"storage-state\", \"extension\", \"cdp-endpoint\"],\n\ttransport: {\n\t\targs: [\n\t\t\t\"-y\",\n\t\t\t\"@playwright/mcp@0.0.76\",\n\t\t\t\"--browser\",\n\t\t\t\"<browser>\",\n\t\t\t\"--user-data-dir\",\n\t\t\t\"<profileDir>\",\n\t\t\t\"--output-dir\",\n\t\t\t\"<outputDir>\",\n\t\t\t\"--output-mode\",\n\t\t\t\"file\",\n\t\t\t\"--block-service-workers\",\n\t\t\t\"--timeout-action\",\n\t\t\t\"5000\",\n\t\t\t\"--timeout-navigation\",\n\t\t\t\"60000\",\n\t\t],\n\t\tcommand: \"npx\",\n\t\tpackageName: \"@playwright/mcp\",\n\t\ttype: \"stdio\",\n\t},\n};\n\nconst BROWSER_USE_AGENT_PRESET: ComputerUsePreset = {\n\tbrowserModes: [],\n\tdefaultEnabled: false,\n\tengine: \"python-rust-sidecar\",\n\tid: \"browser-use-agent\",\n\tkey: \"browserUseAgent\",\n\tlabel: \"Browser Use Agent\",\n\tnotes: [\n\t\t\"Optional advanced runner for agentic browser tasks that need recovery loops or custom tools.\",\n\t\t\"Profiles and secrets must be injected through OMK brokers instead of manual shell profile scripts.\",\n\t],\n\tpolicy: {\n\t\tallowedDomainsRequired: true,\n\t\tblockMetadataIp: true,\n\t\tblockPrivateNetwork: true,\n\t\tcredentialScopes: [\"none\", \"session\", \"workspace\"],\n\t\tdenyNoSandbox: true,\n\t\tdescriptorHashPinned: true,\n\t\tevidenceLedger: true,\n\t\tmaxActions: 60,\n\t\tnoManualProfileShellScript: true,\n\t\tnoUnrestrictedFileAccess: true,\n\t\toriginAllowlistRequiredForCredentialedMode: true,\n\t\toutputGuard: true,\n\t\tprofileBrokerOnly: true,\n\t\trequiresExplicitPostconditions: true,\n\t\trequiresRequestInterception: true,\n\t\tsandboxRequired: true,\n\t\tsecretBrokerOnly: true,\n\t},\n\trisk: \"R3\",\n\tsourceUrls: [\"https://github.com/browser-use/browser-use\"],\n\tsupportedLaunchOptions: [],\n};\n\nexport const COMPUTER_USE_PRESETS: Record<ComputerUsePresetKey, ComputerUsePreset> = {\n\tplaywrightComputerUse: PLAYWRIGHT_COMPUTER_USE_PRESET,\n\tbrowserUseAgent: BROWSER_USE_AGENT_PRESET,\n} as const;\n\nexport function listComputerUsePresets(): ComputerUsePreset[] {\n\treturn Object.values(COMPUTER_USE_PRESETS).map((preset) => cloneComputerUsePreset(preset));\n}\n\nexport function getComputerUsePreset(id: string): ComputerUsePreset | undefined {\n\tconst preset = Object.values(COMPUTER_USE_PRESETS).find((candidate) => candidate.id === id);\n\treturn preset ? cloneComputerUsePreset(preset) : undefined;\n}\n\nexport function requiresCredentialedOriginAllowlist(cookieMode: ComputerUseCookieMode): boolean {\n\treturn cookieMode !== \"none\";\n}\n\nfunction cloneComputerUsePreset(preset: ComputerUsePreset): ComputerUsePreset {\n\treturn {\n\t\t...preset,\n\t\tbrowserModes: preset.browserModes.map((mode) => ({\n\t\t\t...mode,\n\t\t\targsExtra: mode.argsExtra ? [...mode.argsExtra] : undefined,\n\t\t})),\n\t\tnotes: [...preset.notes],\n\t\tpolicy: {\n\t\t\t...preset.policy,\n\t\t\tcredentialScopes: [...preset.policy.credentialScopes],\n\t\t},\n\t\tsourceUrls: [...preset.sourceUrls],\n\t\tsupportedLaunchOptions: [...preset.supportedLaunchOptions],\n\t\ttransport: preset.transport\n\t\t\t? {\n\t\t\t\t\t...preset.transport,\n\t\t\t\t\targs: [...preset.transport.args],\n\t\t\t\t}\n\t\t\t: undefined,\n\t};\n}\n"]}

package/dist/core/mcp-computer-use-presets.js

@@ -0,0 +1,158 @@
+export const OMK_COMPUTER_USE_DEFAULT_PRESET_ID = "playwright-computer-use";
+const PLAYWRIGHT_BROWSER_MODES = [
+    {
+        browser: "chrome",
+        cookieMode: "managed-profile",
+        description: "OMK-managed Chrome profile with project-scoped persistent cookies and local storage.",
+        id: "managed-chrome-profile",
+        profileDir: ".omk/browser-profiles/chrome",
+    },
+    {
+        browser: "firefox",
+        cookieMode: "managed-profile",
+        description: "OMK-managed Firefox profile; avoids attaching to the user's real Firefox profile.",
+        id: "managed-firefox-profile",
+        profileDir: ".omk/browser-profiles/firefox",
+    },
+    {
+        argsExtra: ["--isolated", "--storage-state", "<storageStatePath>"],
+        cookieMode: "isolated-storage-state",
+        description: "Loads cookies and local storage from an explicit Playwright storage-state file.",
+        id: "isolated-storage-state",
+    },
+    {
+        argsExtra: ["--extension"],
+        browser: "chrome",
+        browserLimit: "chrome-edge-only",
+        cookieMode: "existing-browser-session",
+        description: "Connects to an existing Chrome or Edge session through the Playwright extension.",
+        id: "existing-chrome-session",
+    },
+];
+const PLAYWRIGHT_COMPUTER_USE_PRESET = {
+    browserModes: PLAYWRIGHT_BROWSER_MODES,
+    defaultEnabled: true,
+    engine: "mcp",
+    id: "playwright-computer-use",
+    key: "playwrightComputerUse",
+    label: "Playwright Computer Use",
+    notes: [
+        "Default computer-use preset built on Microsoft Playwright MCP accessibility-tree automation.",
+        "Credentialed browser sessions must go through SecureComputerUseBroker preflight and request interception.",
+        "Playwright allowed-origins are recorded as advisory only; OMK policy remains the security boundary.",
+    ],
+    policy: {
+        allowedOriginsSecurityBoundary: false,
+        blockMetadataIp: true,
+        blockPrivateNetwork: true,
+        credentialScopes: ["none", "session", "workspace"],
+        denyNoSandbox: true,
+        descriptorHashPinned: true,
+        evidenceLedger: true,
+        maxActions: 40,
+        maxOutputBytes: 25_000_000,
+        noUnrestrictedFileAccess: true,
+        originAllowlistRequiredForCredentialedMode: true,
+        outputGuard: true,
+        requiresExplicitPostconditions: true,
+        requiresRequestInterception: true,
+        sandboxRequired: true,
+        secretBrokerOnly: true,
+    },
+    risk: "R3",
+    sourceUrls: ["https://github.com/microsoft/playwright-mcp"],
+    supportedLaunchOptions: ["browser", "user-data-dir", "storage-state", "extension", "cdp-endpoint"],
+    transport: {
+        args: [
+            "-y",
+            "@playwright/mcp@0.0.76",
+            "--browser",
+            "<browser>",
+            "--user-data-dir",
+            "<profileDir>",
+            "--output-dir",
+            "<outputDir>",
+            "--output-mode",
+            "file",
+            "--block-service-workers",
+            "--timeout-action",
+            "5000",
+            "--timeout-navigation",
+            "60000",
+        ],
+        command: "npx",
+        packageName: "@playwright/mcp",
+        type: "stdio",
+    },
+};
+const BROWSER_USE_AGENT_PRESET = {
+    browserModes: [],
+    defaultEnabled: false,
+    engine: "python-rust-sidecar",
+    id: "browser-use-agent",
+    key: "browserUseAgent",
+    label: "Browser Use Agent",
+    notes: [
+        "Optional advanced runner for agentic browser tasks that need recovery loops or custom tools.",
+        "Profiles and secrets must be injected through OMK brokers instead of manual shell profile scripts.",
+    ],
+    policy: {
+        allowedDomainsRequired: true,
+        blockMetadataIp: true,
+        blockPrivateNetwork: true,
+        credentialScopes: ["none", "session", "workspace"],
+        denyNoSandbox: true,
+        descriptorHashPinned: true,
+        evidenceLedger: true,
+        maxActions: 60,
+        noManualProfileShellScript: true,
+        noUnrestrictedFileAccess: true,
+        originAllowlistRequiredForCredentialedMode: true,
+        outputGuard: true,
+        profileBrokerOnly: true,
+        requiresExplicitPostconditions: true,
+        requiresRequestInterception: true,
+        sandboxRequired: true,
+        secretBrokerOnly: true,
+    },
+    risk: "R3",
+    sourceUrls: ["https://github.com/browser-use/browser-use"],
+    supportedLaunchOptions: [],
+};
+export const COMPUTER_USE_PRESETS = {
+    playwrightComputerUse: PLAYWRIGHT_COMPUTER_USE_PRESET,
+    browserUseAgent: BROWSER_USE_AGENT_PRESET,
+};
+export function listComputerUsePresets() {
+    return Object.values(COMPUTER_USE_PRESETS).map((preset) => cloneComputerUsePreset(preset));
+}
+export function getComputerUsePreset(id) {
+    const preset = Object.values(COMPUTER_USE_PRESETS).find((candidate) => candidate.id === id);
+    return preset ? cloneComputerUsePreset(preset) : undefined;
+}
+export function requiresCredentialedOriginAllowlist(cookieMode) {
+    return cookieMode !== "none";
+}
+function cloneComputerUsePreset(preset) {
+    return {
+        ...preset,
+        browserModes: preset.browserModes.map((mode) => ({
+            ...mode,
+            argsExtra: mode.argsExtra ? [...mode.argsExtra] : undefined,
+        })),
+        notes: [...preset.notes],
+        policy: {
+            ...preset.policy,
+            credentialScopes: [...preset.policy.credentialScopes],
+        },
+        sourceUrls: [...preset.sourceUrls],
+        supportedLaunchOptions: [...preset.supportedLaunchOptions],
+        transport: preset.transport
+            ? {
+                ...preset.transport,
+                args: [...preset.transport.args],
+            }
+            : undefined,
+    };
+}
+//# sourceMappingURL=mcp-computer-use-presets.js.map

package/dist/core/mcp-computer-use-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-computer-use-presets.js","sourceRoot":"","sources":["../../src/core/mcp-computer-use-presets.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kCAAkC,GAAG,yBAAyB,CAAC;AAqE5E,MAAM,wBAAwB,GAAsC;IACnE;QACC,OAAO,EAAE,QAAQ;QACjB,UAAU,EAAE,iBAAiB;QAC7B,WAAW,EAAE,sFAAsF;QACnG,EAAE,EAAE,wBAAwB;QAC5B,UAAU,EAAE,8BAA8B;KAC1C;IACD;QACC,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,iBAAiB;QAC7B,WAAW,EAAE,mFAAmF;QAChG,EAAE,EAAE,yBAAyB;QAC7B,UAAU,EAAE,+BAA+B;KAC3C;IACD;QACC,SAAS,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,CAAC;QAClE,UAAU,EAAE,wBAAwB;QACpC,WAAW,EAAE,iFAAiF;QAC9F,EAAE,EAAE,wBAAwB;KAC5B;IACD;QACC,SAAS,EAAE,CAAC,aAAa,CAAC;QAC1B,OAAO,EAAE,QAAQ;QACjB,YAAY,EAAE,kBAAkB;QAChC,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,kFAAkF;QAC/F,EAAE,EAAE,yBAAyB;KAC7B;CACD,CAAC;AAEF,MAAM,8BAA8B,GAAsB;IACzD,YAAY,EAAE,wBAAwB;IACtC,cAAc,EAAE,IAAI;IACpB,MAAM,EAAE,KAAK;IACb,EAAE,EAAE,yBAAyB;IAC7B,GAAG,EAAE,uBAAuB;IAC5B,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE;QACN,8FAA8F;QAC9F,2GAA2G;QAC3G,qGAAqG;KACrG;IACD,MAAM,EAAE;QACP,8BAA8B,EAAE,KAAK;QACrC,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;QAClD,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,EAAE;QACd,cAAc,EAAE,UAAU;QAC1B,wBAAwB,EAAE,IAAI;QAC9B,0CAA0C,EAAE,IAAI;QAChD,WAAW,EAAE,IAAI;QACjB,8BAA8B,EAAE,IAAI;QACpC,2BAA2B,EAAE,IAAI;QACjC,eAAe,EAAE,IAAI;QACrB,gBAAgB,EAAE,IAAI;KACtB;IACD,IAAI,EAAE,IAAI;IACV,UAAU,EAAE,CAAC,6CAA6C,CAAC;IAC3D,sBAAsB,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,CAAC;IAClG,SAAS,EAAE;QACV,IAAI,EAAE;YACL,IAAI;YACJ,wBAAwB;YACxB,WAAW;YACX,WAAW;YACX,iBAAiB;YACjB,cAAc;YACd,cAAc;YACd,aAAa;YACb,eAAe;YACf,MAAM;YACN,yBAAyB;YACzB,kBAAkB;YAClB,MAAM;YACN,sBAAsB;YACtB,OAAO;SACP;QACD,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,iBAAiB;QAC9B,IAAI,EAAE,OAAO;KACb;CACD,CAAC;AAEF,MAAM,wBAAwB,GAAsB;IACnD,YAAY,EAAE,EAAE;IAChB,cAAc,EAAE,KAAK;IACrB,MAAM,EAAE,qBAAqB;IAC7B,EAAE,EAAE,mBAAmB;IACvB,GAAG,EAAE,iBAAiB;IACtB,KAAK,EAAE,mBAAmB;IAC1B,KAAK,EAAE;QACN,8FAA8F;QAC9F,oGAAoG;KACpG;IACD,MAAM,EAAE;QACP,sBAAsB,EAAE,IAAI;QAC5B,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;QAClD,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,EAAE;QACd,0BAA0B,EAAE,IAAI;QAChC,wBAAwB,EAAE,IAAI;QAC9B,0CAA0C,EAAE,IAAI;QAChD,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;QACvB,8BAA8B,EAAE,IAAI;QACpC,2BAA2B,EAAE,IAAI;QACjC,eAAe,EAAE,IAAI;QACrB,gBAAgB,EAAE,IAAI;KACtB;IACD,IAAI,EAAE,IAAI;IACV,UAAU,EAAE,CAAC,4CAA4C,CAAC;IAC1D,sBAAsB,EAAE,EAAE;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAoD;IACpF,qBAAqB,EAAE,8BAA8B;IACrD,eAAe,EAAE,wBAAwB;CAChC,CAAC;AAEX,MAAM,UAAU,sBAAsB,GAAwB;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;AAAA,CAC3F;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAiC;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC3D;AAED,MAAM,UAAU,mCAAmC,CAAC,UAAiC,EAAW;IAC/F,OAAO,UAAU,KAAK,MAAM,CAAC;AAAA,CAC7B;AAED,SAAS,sBAAsB,CAAC,MAAyB,EAAqB;IAC7E,OAAO;QACN,GAAG,MAAM;QACT,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,IAAI;YACP,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAC3D,CAAC,CAAC;QACH,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,MAAM,EAAE;YACP,GAAG,MAAM,CAAC,MAAM;YAChB,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACrD;QACD,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;QAClC,sBAAsB,EAAE,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC1D,SAAS,EAAE,MAAM,CAAC,SAAS;YAC1B,CAAC,CAAC;gBACA,GAAG,MAAM,CAAC,SAAS;gBACnB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;aAChC;YACF,CAAC,CAAC,SAAS;KACZ,CAAC;AAAA,CACF","sourcesContent":["export const OMK_COMPUTER_USE_DEFAULT_PRESET_ID = \"playwright-computer-use\";\n\nexport type ComputerUsePresetKey = \"browserUseAgent\" | \"playwrightComputerUse\";\nexport type ComputerUsePresetId = \"browser-use-agent\" | \"playwright-computer-use\";\nexport type ComputerUseRisk = \"R3\";\nexport type ComputerUseEngine = \"mcp\" | \"python-rust-sidecar\";\nexport type ComputerUseBrowser = \"chrome\" | \"firefox\" | \"msedge\" | \"webkit\";\nexport type ComputerUseCookieMode = \"existing-browser-session\" | \"isolated-storage-state\" | \"managed-profile\" | \"none\";\nexport type ComputerUseCredentialScope = \"none\" | \"session\" | \"workspace\";\nexport type ComputerUseLaunchOption = \"browser\" | \"cdp-endpoint\" | \"extension\" | \"storage-state\" | \"user-data-dir\";\n\nexport interface ComputerUseTransport {\n\treadonly args: readonly string[];\n\treadonly command: string;\n\treadonly packageName?: string;\n\treadonly type: \"stdio\";\n}\n\nexport interface ComputerUseBrowserMode {\n\treadonly argsExtra?: readonly string[];\n\treadonly browser?: ComputerUseBrowser;\n\treadonly browserLimit?: \"chrome-edge-only\";\n\treadonly cookieMode: ComputerUseCookieMode;\n\treadonly description: string;\n\treadonly id:\n\t\t| \"existing-chrome-session\"\n\t\t| \"isolated-storage-state\"\n\t\t| \"managed-chrome-profile\"\n\t\t| \"managed-firefox-profile\";\n\treadonly profileDir?: string;\n}\n\nexport interface ComputerUsePolicy {\n\treadonly allowedDomainsRequired?: boolean;\n\treadonly allowedOriginsSecurityBoundary?: boolean;\n\treadonly blockMetadataIp: boolean;\n\treadonly blockPrivateNetwork: boolean;\n\treadonly credentialScopes: readonly ComputerUseCredentialScope[];\n\treadonly denyNoSandbox: boolean;\n\treadonly descriptorHashPinned: boolean;\n\treadonly evidenceLedger: boolean;\n\treadonly maxActions: number;\n\treadonly maxOutputBytes?: number;\n\treadonly noManualProfileShellScript?: boolean;\n\treadonly noUnrestrictedFileAccess: boolean;\n\treadonly originAllowlistRequiredForCredentialedMode: boolean;\n\treadonly outputGuard: boolean;\n\treadonly profileBrokerOnly?: boolean;\n\treadonly requiresExplicitPostconditions: boolean;\n\treadonly requiresRequestInterception: boolean;\n\treadonly sandboxRequired: boolean;\n\treadonly secretBrokerOnly: boolean;\n}\n\nexport interface ComputerUsePreset {\n\treadonly browserModes: readonly ComputerUseBrowserMode[];\n\treadonly defaultEnabled: boolean;\n\treadonly engine: ComputerUseEngine;\n\treadonly id: ComputerUsePresetId;\n\treadonly key: ComputerUsePresetKey;\n\treadonly label: string;\n\treadonly notes: readonly string[];\n\treadonly policy: ComputerUsePolicy;\n\treadonly risk: ComputerUseRisk;\n\treadonly sourceUrls: readonly string[];\n\treadonly supportedLaunchOptions: readonly ComputerUseLaunchOption[];\n\treadonly transport?: ComputerUseTransport;\n}\n\nconst PLAYWRIGHT_BROWSER_MODES: readonly ComputerUseBrowserMode[] = [\n\t{\n\t\tbrowser: \"chrome\",\n\t\tcookieMode: \"managed-profile\",\n\t\tdescription: \"OMK-managed Chrome profile with project-scoped persistent cookies and local storage.\",\n\t\tid: \"managed-chrome-profile\",\n\t\tprofileDir: \".omk/browser-profiles/chrome\",\n\t},\n\t{\n\t\tbrowser: \"firefox\",\n\t\tcookieMode: \"managed-profile\",\n\t\tdescription: \"OMK-managed Firefox profile; avoids attaching to the user's real Firefox profile.\",\n\t\tid: \"managed-firefox-profile\",\n\t\tprofileDir: \".omk/browser-profiles/firefox\",\n\t},\n\t{\n\t\targsExtra: [\"--isolated\", \"--storage-state\", \"<storageStatePath>\"],\n\t\tcookieMode: \"isolated-storage-state\",\n\t\tdescription: \"Loads cookies and local storage from an explicit Playwright storage-state file.\",\n\t\tid: \"isolated-storage-state\",\n\t},\n\t{\n\t\targsExtra: [\"--extension\"],\n\t\tbrowser: \"chrome\",\n\t\tbrowserLimit: \"chrome-edge-only\",\n\t\tcookieMode: \"existing-browser-session\",\n\t\tdescription: \"Connects to an existing Chrome or Edge session through the Playwright extension.\",\n\t\tid: \"existing-chrome-session\",\n\t},\n];\n\nconst PLAYWRIGHT_COMPUTER_USE_PRESET: ComputerUsePreset = {\n\tbrowserModes: PLAYWRIGHT_BROWSER_MODES,\n\tdefaultEnabled: true,\n\tengine: \"mcp\",\n\tid: \"playwright-computer-use\",\n\tkey: \"playwrightComputerUse\",\n\tlabel: \"Playwright Computer Use\",\n\tnotes: [\n\t\t\"Default computer-use preset built on Microsoft Playwright MCP accessibility-tree automation.\",\n\t\t\"Credentialed browser sessions must go through SecureComputerUseBroker preflight and request interception.\",\n\t\t\"Playwright allowed-origins are recorded as advisory only; OMK policy remains the security boundary.\",\n\t],\n\tpolicy: {\n\t\tallowedOriginsSecurityBoundary: false,\n\t\tblockMetadataIp: true,\n\t\tblockPrivateNetwork: true,\n\t\tcredentialScopes: [\"none\", \"session\", \"workspace\"],\n\t\tdenyNoSandbox: true,\n\t\tdescriptorHashPinned: true,\n\t\tevidenceLedger: true,\n\t\tmaxActions: 40,\n\t\tmaxOutputBytes: 25_000_000,\n\t\tnoUnrestrictedFileAccess: true,\n\t\toriginAllowlistRequiredForCredentialedMode: true,\n\t\toutputGuard: true,\n\t\trequiresExplicitPostconditions: true,\n\t\trequiresRequestInterception: true,\n\t\tsandboxRequired: true,\n\t\tsecretBrokerOnly: true,\n\t},\n\trisk: \"R3\",\n\tsourceUrls: [\"https://github.com/microsoft/playwright-mcp\"],\n\tsupportedLaunchOptions: [\"browser\", \"user-data-dir\", \"storage-state\", \"extension\", \"cdp-endpoint\"],\n\ttransport: {\n\t\targs: [\n\t\t\t\"-y\",\n\t\t\t\"@playwright/mcp@0.0.76\",\n\t\t\t\"--browser\",\n\t\t\t\"<browser>\",\n\t\t\t\"--user-data-dir\",\n\t\t\t\"<profileDir>\",\n\t\t\t\"--output-dir\",\n\t\t\t\"<outputDir>\",\n\t\t\t\"--output-mode\",\n\t\t\t\"file\",\n\t\t\t\"--block-service-workers\",\n\t\t\t\"--timeout-action\",\n\t\t\t\"5000\",\n\t\t\t\"--timeout-navigation\",\n\t\t\t\"60000\",\n\t\t],\n\t\tcommand: \"npx\",\n\t\tpackageName: \"@playwright/mcp\",\n\t\ttype: \"stdio\",\n\t},\n};\n\nconst BROWSER_USE_AGENT_PRESET: ComputerUsePreset = {\n\tbrowserModes: [],\n\tdefaultEnabled: false,\n\tengine: \"python-rust-sidecar\",\n\tid: \"browser-use-agent\",\n\tkey: \"browserUseAgent\",\n\tlabel: \"Browser Use Agent\",\n\tnotes: [\n\t\t\"Optional advanced runner for agentic browser tasks that need recovery loops or custom tools.\",\n\t\t\"Profiles and secrets must be injected through OMK brokers instead of manual shell profile scripts.\",\n\t],\n\tpolicy: {\n\t\tallowedDomainsRequired: true,\n\t\tblockMetadataIp: true,\n\t\tblockPrivateNetwork: true,\n\t\tcredentialScopes: [\"none\", \"session\", \"workspace\"],\n\t\tdenyNoSandbox: true,\n\t\tdescriptorHashPinned: true,\n\t\tevidenceLedger: true,\n\t\tmaxActions: 60,\n\t\tnoManualProfileShellScript: true,\n\t\tnoUnrestrictedFileAccess: true,\n\t\toriginAllowlistRequiredForCredentialedMode: true,\n\t\toutputGuard: true,\n\t\tprofileBrokerOnly: true,\n\t\trequiresExplicitPostconditions: true,\n\t\trequiresRequestInterception: true,\n\t\tsandboxRequired: true,\n\t\tsecretBrokerOnly: true,\n\t},\n\trisk: \"R3\",\n\tsourceUrls: [\"https://github.com/browser-use/browser-use\"],\n\tsupportedLaunchOptions: [],\n};\n\nexport const COMPUTER_USE_PRESETS: Record<ComputerUsePresetKey, ComputerUsePreset> = {\n\tplaywrightComputerUse: PLAYWRIGHT_COMPUTER_USE_PRESET,\n\tbrowserUseAgent: BROWSER_USE_AGENT_PRESET,\n} as const;\n\nexport function listComputerUsePresets(): ComputerUsePreset[] {\n\treturn Object.values(COMPUTER_USE_PRESETS).map((preset) => cloneComputerUsePreset(preset));\n}\n\nexport function getComputerUsePreset(id: string): ComputerUsePreset | undefined {\n\tconst preset = Object.values(COMPUTER_USE_PRESETS).find((candidate) => candidate.id === id);\n\treturn preset ? cloneComputerUsePreset(preset) : undefined;\n}\n\nexport function requiresCredentialedOriginAllowlist(cookieMode: ComputerUseCookieMode): boolean {\n\treturn cookieMode !== \"none\";\n}\n\nfunction cloneComputerUsePreset(preset: ComputerUsePreset): ComputerUsePreset {\n\treturn {\n\t\t...preset,\n\t\tbrowserModes: preset.browserModes.map((mode) => ({\n\t\t\t...mode,\n\t\t\targsExtra: mode.argsExtra ? [...mode.argsExtra] : undefined,\n\t\t})),\n\t\tnotes: [...preset.notes],\n\t\tpolicy: {\n\t\t\t...preset.policy,\n\t\t\tcredentialScopes: [...preset.policy.credentialScopes],\n\t\t},\n\t\tsourceUrls: [...preset.sourceUrls],\n\t\tsupportedLaunchOptions: [...preset.supportedLaunchOptions],\n\t\ttransport: preset.transport\n\t\t\t? {\n\t\t\t\t\t...preset.transport,\n\t\t\t\t\targs: [...preset.transport.args],\n\t\t\t\t}\n\t\t\t: undefined,\n\t};\n}\n"]}