rea-agents 3.1.0 → 3.2.1

package/dist/contracts/artifactComparisonExample.js

@@ -1,76 +1,74 @@
+import { createHash } from "node:crypto";
+import canonicalize from "canonicalize";
 import { createEvidence } from "../domain/evidence.js";
 import { jsonValueSchema } from "../domain/jsonValue.js";
 const inventory = (digit) => {
     const sha = digit.repeat(64);
-    const artifactId = `art_${sha}`;
-    const occurrenceId = `occ_${sha}`;
+    const artifactId = `art_${digestCanonical({ sha256: sha })}`;
+    const occurrenceId = `occ_${digestCanonical({ root: artifactId })}`;
+    const nodes = [
+        {
+            artifact_id: artifactId,
+            kind: "resource",
+            format: "file",
+            sha256: sha,
+            size: 1,
+            media_type: null,
+            architecture: null,
+            executable: false,
+            content_state: "materialized",
+            limitations: [],
+        },
+    ];
+    const occurrences = [
+        {
+            occurrence_id: occurrenceId,
+            artifact_id: artifactId,
+            parent_occurrence_id: null,
+            logical_path: ".",
+            entry_kind: "file",
+            declared_size: 1,
+            compressed_size: null,
+            executable: false,
+            encrypted: false,
+            hash_status: "verified",
+            source_location: null,
+            limitations: [],
+        },
+    ];
+    const graphSha256 = digestCanonical({
+        nodes,
+        occurrences,
+        edges: [],
+        integrity_contradictions: [],
+    });
     return jsonValueSchema.parse({
         manifest: {
-            schema_version: 1,
-            manifest_id: `agm_${sha}`,
+            manifest_id: `agm_${digestCanonical({
+                root_artifact_id: artifactId,
+                graph_sha256: graphSha256,
+            })}`,
             root_artifact_id: artifactId,
             root_sha256: sha,
             root_format: "file",
-            graph_sha256: sha,
-            node_count: 1,
-            occurrence_count: 1,
+            graph_sha256: graphSha256,
+            node_count: nodes.length,
+            occurrence_count: occurrences.length,
             edge_count: 0,
         },
-        nodes: {
-            items: [
-                {
-                    artifact_id: artifactId,
-                    kind: "resource",
-                    format: "file",
-                    sha256: sha,
-                    size: 1,
-                    media_type: null,
-                    architecture: null,
-                    executable: false,
-                    content_state: "materialized",
-                    limitations: [],
-                },
-            ],
-            offset: 0,
-            limit: 100,
-            total: 1,
-            next_offset: null,
-        },
-        occurrences: {
-            items: [
-                {
-                    occurrence_id: occurrenceId,
-                    artifact_id: artifactId,
-                    parent_occurrence_id: null,
-                    logical_path: ".",
-                    entry_kind: "file",
-                    declared_size: 1,
-                    compressed_size: null,
-                    executable: false,
-                    encrypted: false,
-                    hash_status: "verified",
-                    source_location: null,
-                    limitations: [],
-                },
-            ],
-            offset: 0,
-            limit: 100,
-            total: 1,
-            next_offset: null,
-        },
-        edges: { items: [], offset: 0, limit: 100, total: 0, next_offset: null },
-        limits: {
-            max_entries: 100,
-            max_total_bytes: 1024,
-            max_entry_bytes: 1024,
-            max_compression_ratio: 10,
-            max_depth: 10,
-            max_path_bytes: 256,
-        },
+        nodes,
+        occurrences,
+        edges: [],
         provenance: [],
         limitations: [],
     });
 };
+const digestCanonical = (value) => {
+    const encoded = canonicalize(value);
+    if (encoded === undefined)
+        throw new TypeError("Artifact example is not canonical JSON");
+    return createHash("sha256").update(encoded).digest("hex");
+};
 const provider = {
     id: "rea-artifact",
     name: "REA artifact graph",
@@ -78,14 +76,14 @@ const provider = {
 };
 /** Canonical complete inputs used to advertise artifact comparison. */
 export const ARTIFACT_COMPARISON_EXAMPLE = {
-    left: createEvidence(undefined, provider, {
+    left: createEvidence({ path: "fixture-left", sha256: "0".repeat(64), format: "file" }, provider, {
         operation: "inventory_artifact",
         parameters: {},
         result: inventory("0"),
         confidence: "observed",
         authority: "shipped-artifact",
     }),
-    right: createEvidence(undefined, provider, {
+    right: createEvidence({ path: "fixture-right", sha256: "1".repeat(64), format: "file" }, provider, {
         operation: "inventory_artifact",
         parameters: {},
         result: inventory("1"),

package/dist/contracts/artifactToolContracts.js

@@ -1,93 +1,37 @@
-import { isAbsolute } from "node:path";
 import { z } from "zod";
 import { artifactOutputSchemas } from "./toolOutputSchemas.js";
 import { jsonValueSchema } from "../domain/jsonValue.js";
 import { toolContractMetadata } from "./toolEffects.js";
 import { requireOutputSchema } from "./toolOutputSchemaPrimitives.js";
-import { artifactInspectionLimitsSchema } from "../domain/artifactInspection.js";
-const pageInput = {
-    node_offset: z.number().int().min(0).default(0),
-    node_limit: z.number().int().min(1).max(500).default(100),
-    occurrence_offset: z.number().int().min(0).default(0),
-    occurrence_limit: z.number().int().min(1).max(500).default(100),
-    edge_offset: z.number().int().min(0).default(0),
-    edge_limit: z.number().int().min(1).max(500).default(100),
-};
-const traversalLimitsInput = {
-    max_entries: z.number().int().min(1).max(1_000_000).default(10_000),
-    max_total_bytes: z
-        .number()
-        .int()
-        .min(1)
-        .max(Number.MAX_SAFE_INTEGER)
-        .default(1_073_741_824),
-    max_entry_bytes: z
-        .number()
-        .int()
-        .min(1)
-        .max(Number.MAX_SAFE_INTEGER)
-        .default(268_435_456),
-    max_compression_ratio: z.number().min(1).max(100_000).default(1_000),
-    max_depth: z.number().int().min(0).max(100).default(20),
-    max_path_bytes: z.number().int().min(1).max(65_535).default(4_096),
-};
 const integrityInput = {
     fail: {
         integrity_policy: z.literal("fail").default("fail"),
         integrity_continue_approved: z.literal(false).default(false),
-        max_integrity_mismatches: z.number().int().min(1).max(100).default(10),
     },
     continue: {
         integrity_policy: z.literal("record-and-continue"),
         integrity_continue_approved: z.literal(true),
-        max_integrity_mismatches: z.number().int().min(1).max(100).default(10),
     },
 };
 const artifactInventoryFacts = {
     native_mount_approved: z.boolean().default(false),
-    ...pageInput,
-    ...traversalLimitsInput,
 };
 /** Exact caller boundary for deterministic artifact inventory. */
 export const artifactInventoryInputSchema = z.union([
     z.object({ ...artifactInventoryFacts, ...integrityInput.fail }),
     z.object({ ...artifactInventoryFacts, ...integrityInput.continue }),
 ]);
-/** Exact caller boundary for approved artifact extraction. */
-export const artifactExtractionInputSchema = z.object({
-    approved: z.literal(true),
-    output_root: z
-        .string()
-        .min(1)
-        .max(4_096)
-        .refine(isAbsolute, "Extraction output root must be absolute"),
-    occurrence_ids: z
-        .array(z.string().regex(/^occ_[a-f0-9]{64}$/u))
-        .min(1)
-        .max(500),
-    offset: z.number().int().min(0).default(0),
-    limit: z.number().int().min(1).max(500).default(100),
-    ...traversalLimitsInput,
+/** Extraction needs no selector: it materializes every regular child file. */
+export const artifactExtractionInputSchema = z.strictObject({});
+/** Provider input after the local permission boundary chooses its destination. */
+export const artifactExtractionExecutionSchema = z.strictObject({
+    output_root: z.string().min(1),
 });
-/** Bounded provider-neutral inspection using one atomic inventory substep. */
-const artifactInspectionFacts = {
-    native_mount_approved: z.boolean().default(false),
-    ...artifactInspectionLimitsSchema.shape,
-    ...traversalLimitsInput,
-};
-export const artifactInspectionInputSchema = z.union([
-    z.object({ ...artifactInspectionFacts, ...integrityInput.fail }),
-    z.object({ ...artifactInspectionFacts, ...integrityInput.continue }),
-]);
 const exampleInputSchema = z.record(z.string(), jsonValueSchema);
 const examples = {
-    inventory_artifact: {},
     inspect_artifact: {},
-    extract_artifact: {
-        approved: true,
-        output_root: "/tmp/rea-extracted",
-        occurrence_ids: [`occ_${"0".repeat(64)}`],
-    },
+    extract_artifact: {},
+    decode_interface_builder: {},
 };
 const artifact = (name, description, inputSchema) => {
     const outputSchema = requireOutputSchema(artifactOutputSchemas, name);
@@ -106,9 +50,18 @@ const artifact = (name, description, inputSchema) => {
         ],
     };
 };
-/** Artifact-graph inventory and explicitly approved safe extraction contracts. */
+/** Artifact-graph inventory and safe extraction contracts. */
 export const ARTIFACT_TOOL_CONTRACTS = [
-    artifact("inventory_artifact", "After open_binary binds a local archive, application package, or other artifact—or when one is already active—inventory it as a deterministic, content-addressed artifact graph. This tool accepts no path; in a target-free session open the target first. Returns bounded node and edge pages without extracting or mounting by default.", artifactInventoryInputSchema),
-    artifact("inspect_artifact", "After open_binary binds a local archive, application package, or other artifact—or when one is already active—inspect it through one bounded, cancellable inventory substep. This tool accepts no path; in a target-free session open the target first. Returns the full substep Evidence and its ID, observations, derived relationships, hypotheses, contradictions, unexplored branches, limitations, and format-specific next probes. Any substep failure fails the whole call.", artifactInspectionInputSchema),
-    artifact("extract_artifact", "Extract selected graph artifacts beneath an explicit output root. Requires approval, rejects traversal and symlink escapes, never overwrites, enforces bomb limits, and verifies cleanup.", artifactExtractionInputSchema),
+    artifact("inspect_artifact", "Inspect an active archive or application package in one call. Returns the complete content-addressed artifact graph, source Evidence, observations, relationships, integrity contradictions, hypotheses, unexplored branches, limitations, and next probes inline. It does not extract files; use extract_artifact to materialize its regular contents.", artifactInventoryInputSchema),
+    artifact("extract_artifact", "Extract all regular files from the active archive or application package into a fresh temporary directory chosen by REA. The result includes its location. Rejects traversal and symlink escapes, never overwrites, enforces archive integrity checks, and verifies cleanup.", artifactExtractionInputSchema),
+    artifact("decode_interface_builder", "Decode compiled storyboard and nib archives inside the active Apple app bundle, including keyed property lists and NIBArchive object tables, into a bounded object, hierarchy, and connection graph. This is static archive parsing; unrecognized archive classes and unresolved code handlers remain explicit unknowns.", z.strictObject({
+        max_documents: z.number().int().min(1).max(64).default(64),
+        max_objects: z.number().int().min(1).max(20_000).default(20_000),
+        max_connections: z.number().int().min(1).max(40_000).default(40_000),
+    })),
+];
+/** Provider operations; inventory remains an internal primitive of inspection. */
+export const ARTIFACT_ANALYSIS_OPERATIONS = [
+    "inventory_artifact",
+    ...ARTIFACT_TOOL_CONTRACTS.map(({ name }) => name),
 ];

package/dist/contracts/browserScenarioToolContracts.js

@@ -1,9 +1,8 @@
 import { toolContractMetadata } from "./toolEffects.js";
 import { evidenceResultOf } from "./toolOutputSchemas.js";
-import { browserScenarioSchema } from "../domain/browserScenario.js";
+import { browserScenarioInputSchema } from "../domain/browserScenario.js";
 import { browserScenarioCaptureSchema } from "../domain/browserScenarioCapture.js";
 const example = {
-    schema_version: 1,
     browser: {
         mode: "launch",
         executable_path: "/opt/chromium/chrome",
@@ -13,66 +12,22 @@ const example = {
     },
     start_url: { url: "https://app.example.test/", query: [] },
     allowed_origins: ["https://app.example.test"],
-    environment: {
-        viewport: { width: 1_280, height: 720, device_scale_factor: 1 },
-        locale: "en-US",
-        timezone: "UTC",
-        color_scheme: "light",
-        reduced_motion: "reduce",
-        service_workers: "block",
-    },
     actions: [
         {
-            step_id: "ready",
-            action: "wait_for",
-            locator: { kind: "test_id", value: "application-ready" },
-            state: "visible",
+            step_id: "settle",
+            action: "wait_for_timeout",
+            duration_ms: 250,
         },
     ],
-    storage: { cookies: [], local_storage: [], session_storage: [] },
-    request_replay: { mode: "disabled" },
-    secrets: [],
-    redaction: {
-        secret_values: "replace-with-secret-reference",
-        query_parameter_names: [],
-        header_names: [
-            "authorization",
-            "cookie",
-            "proxy-authorization",
-            "set-cookie",
-        ],
-    },
-    capture: {
-        after_each_step: ["screenshot", "url", "accessibility"],
-        at_end: ["dom", "history", "storage"],
-        events: ["console", "page-errors", "network", "websockets"],
-    },
-    limits: {
-        max_duration_ms: 60_000,
-        action_timeout_ms: 5_000,
-        navigation_timeout_ms: 10_000,
-        max_events: 2_000,
-        max_frames: 100,
-        max_workers: 20,
-        max_popups: 10,
-        max_websockets: 100,
-        max_dom_nodes: 10_000,
-        max_accessibility_nodes: 10_000,
-        max_screenshots: 16,
-        max_screenshot_bytes: 4_194_304,
-        max_storage_entries: 256,
-        max_total_metadata_bytes: 4_194_304,
-    },
-    approved: true,
 };
 /** Controlled browser scenario contract shared by MCP and catalog generation. */
 export const BROWSER_SCENARIO_TOOL_CONTRACTS = [
     {
         name: "capture_browser_scenario",
         ...toolContractMetadata("capture_browser_scenario"),
-        description: "Run one approved, bounded browser scenario through Playwright. Launch mode owns and terminates a temporary browser profile; connect mode attaches to one exact loopback CDP target and disconnects without terminating the external browser. Only the fixed action vocabulary is accepted. Navigation, storage, requests, redirects, secrets, redaction, captures, and limits must be declared before execution. Returns step-indexed Evidence with screenshots, DOM, accessibility, URL/history/storage state, runtime events, explicit missing/truncated sections, and equality eligibility.",
+        description: "Run a controlled browser scenario when passive observation cannot exercise the application. Launch an approved executable or connect to an approved loopback CDP target, declare the allowed origins, and provide actions. Environment, empty storage, disabled request replay, redaction, and a URL-only final capture are defaults; provide secrets, initial storage, request replay, or additional artifacts when needed. Actions run until completion or cancellation unless timeout_ms is set. Results are returned inline.",
         kind: "browser-provider",
-        inputSchema: browserScenarioSchema,
+        inputSchema: browserScenarioInputSchema,
         outputSchema: evidenceResultOf(browserScenarioCaptureSchema),
         examples: [
             { title: "Capture a deterministic browser scenario", input: example },

package/dist/contracts/browserToolContracts.js

@@ -38,7 +38,6 @@ const scenarioArtifacts = {
     storage: { state: "not_requested" },
 };
 const exampleScenarioCapture = () => ({
-    schema_version: 1,
     browser: {
         mode: "connect",
         process_ownership: "external",
@@ -92,7 +91,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "list_browser_targets",
         ...toolContractMetadata("list_browser_targets"),
-        description: "List bounded page targets from an approved user-owned loopback Chrome DevTools Protocol endpoint. Only targets whose current URL matches an approved exact origin are returned; URL credentials, query values, and fragments are redacted.",
+        description: "List every page target from an approved user-owned loopback Chrome DevTools Protocol endpoint whose current URL matches an approved exact origin. URL credentials, query values, and fragments are redacted.",
         kind: "browser-provider",
         inputSchema: listBrowserTargetsInputSchema,
         outputSchema: listOutputSchema,
@@ -102,9 +101,6 @@ export const BROWSER_TOOL_CONTRACTS = [
                 input: {
                     cdp_endpoint: endpoint,
                     allowed_origins: [origin],
-                    approved: true,
-                    offset: 0,
-                    limit: 100,
                 },
             },
         ],
@@ -112,7 +108,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "inspect_web_page",
         ...toolContractMetadata("inspect_web_page"),
-        description: "Passively inspect one approved page target through CDP without evaluating JavaScript, navigating, clicking, closing, or mutating the page. Returns bounded DOM structure, accessibility, scripts, resources, attach-window network and console metadata, workers, and redacted storage inventory as Evidence v2.",
+        description: "Passively inspect one approved page target through CDP without evaluating JavaScript, navigating, clicking, closing, or mutating the page. Returns DOM structure, accessibility, scripts, resources, attach-window network and console metadata, workers, and redacted storage inventory as Evidence.",
         kind: "browser-provider",
         inputSchema: inspectWebPageInputSchema,
         outputSchema: inspectionOutputSchema,
@@ -122,43 +118,7 @@ export const BROWSER_TOOL_CONTRACTS = [
                 input: {
                     cdp_endpoint: endpoint,
                     allowed_origins: [origin],
-                    approved: true,
                     target_id: "TARGET_ID_FROM_LIST_BROWSER_TARGETS",
-                    observation_ms: 500,
-                    include_accessibility_text: false,
-                    include_console_text: false,
-                    console_text_approved: false,
-                    include_json_body_shapes: false,
-                    json_body_schema_approved: false,
-                    include_websocket_shapes: false,
-                    websocket_shape_approved: false,
-                    include_script_sources: false,
-                    include_storage_keys: false,
-                    include_storage_fingerprints: false,
-                    limits: {
-                        max_frames: 200,
-                        max_dom_nodes: 2_000,
-                        max_ax_nodes: 2_000,
-                        max_ax_text_field_bytes: 1_024,
-                        max_total_ax_text_bytes: 65_536,
-                        max_scripts: 200,
-                        max_resources: 2_000,
-                        max_workers: 500,
-                        max_storage_keys: 1_000,
-                        max_script_source_bytes: 1_048_576,
-                        max_total_script_source_bytes: 4_194_304,
-                        max_network_events: 1_000,
-                        max_console_events: 200,
-                        max_console_text_field_bytes: 1_024,
-                        max_total_console_text_bytes: 65_536,
-                        max_json_body_bytes: 1_048_576,
-                        max_total_json_body_bytes: 4_194_304,
-                        max_json_shape_nodes: 5_000,
-                        max_json_shape_depth: 20,
-                        max_websocket_events: 500,
-                        max_websocket_shape_bytes: 65_536,
-                        max_total_websocket_shape_bytes: 1_048_576,
-                    },
                 },
             },
         ],
@@ -166,7 +126,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "analyze_web_bundle",
         ...toolContractMetadata("analyze_web_bundle"),
-        description: "Capture explicitly approved JavaScript source from one approved CDP page and statically derive a bounded chunk graph, route and endpoint candidates, vendor fingerprints, page-declared WebMCP metadata, and optional separately approved source-map evidence. JavaScript is parsed but never executed.",
+        description: "Capture JavaScript source from one configured CDP page and statically derive a chunk graph, route and endpoint candidates, vendor fingerprints, page-declared WebMCP metadata, and optionally fetch source maps from allowed origins. JavaScript is parsed but never executed.",
         kind: "browser-provider",
         inputSchema: analyzeWebBundleInputSchema,
         outputSchema: bundleOutputSchema,
@@ -176,24 +136,12 @@ export const BROWSER_TOOL_CONTRACTS = [
                 input: {
                     cdp_endpoint: endpoint,
                     allowed_origins: [origin],
-                    approved: true,
                     target_id: "TARGET_ID_FROM_LIST_BROWSER_TARGETS",
                     observation_ms: 500,
                     include_accessibility_text: false,
                     include_script_sources: true,
                     include_storage_keys: false,
-                    source_capture_approved: true,
                     fetch_source_maps: false,
-                    source_map_fetch_approved: false,
-                    analysis_limits: {
-                        max_findings: 1_000,
-                        max_ast_nodes: 250_000,
-                        max_source_maps: 100,
-                        max_source_map_bytes: 4_194_304,
-                        max_total_source_map_bytes: 16_777_216,
-                        max_source_map_mappings: 10_000,
-                        max_original_sources: 2_000,
-                    },
                 },
             },
         ],
@@ -201,7 +149,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "observe_web_session",
         ...toolContractMetadata("observe_web_session"),
-        description: "Arm a bounded CDP observation window while the user operates the page. Allows approved same-origin reload and SPA navigation, records ordered navigation, redirect, lifecycle, and failure metadata, and stops before retaining an out-of-policy destination.",
+        description: "Arm a CDP observation window of the requested duration while the user operates the page. Allows approved same-origin reload and SPA navigation, records every observed navigation, redirect, lifecycle, and failure event, and stops before retaining an out-of-policy destination.",
         kind: "browser-provider",
         inputSchema: observeWebSessionInputSchema,
         outputSchema: observationSessionOutputSchema,
@@ -212,9 +160,7 @@ export const BROWSER_TOOL_CONTRACTS = [
                     cdp_endpoint: endpoint,
                     allowed_origins: [origin],
                     target_id: "TARGET_ID_FROM_LIST_BROWSER_TARGETS",
-                    approved: true,
                     observation_ms: 10_000,
-                    max_timeline_events: 2_000,
                 },
             },
         ],
@@ -222,7 +168,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "discover_webmcp_tools",
         ...toolContractMetadata("discover_webmcp_tools"),
-        description: "Passively inventory page-registered WebMCP tools using the experimental CDP WebMCP domain. Metadata is bounded and page-declared-untrusted; REA never registers or invokes discovered tools.",
+        description: "Passively inventory every page-registered WebMCP tool and its complete structural input-schema summary using the experimental CDP WebMCP domain. Metadata is page-declared-untrusted; REA never registers or invokes discovered tools.",
         kind: "browser-provider",
         inputSchema: discoverWebMcpToolsInputSchema,
         outputSchema: webMcpOutputSchema,
@@ -233,12 +179,7 @@ export const BROWSER_TOOL_CONTRACTS = [
                     cdp_endpoint: endpoint,
                     allowed_origins: [origin],
                     target_id: "TARGET_ID_FROM_LIST_BROWSER_TARGETS",
-                    approved: true,
                     observation_ms: 100,
-                    max_tools: 500,
-                    max_schema_bytes: 262_144,
-                    max_schema_nodes: 5_000,
-                    max_schema_depth: 20,
                 },
             },
         ],
@@ -246,7 +187,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "compare_web_captures",
         ...toolContractMetadata("compare_web_captures"),
-        description: "Compare either passive web captures or step-indexed browser scenarios. Scenario comparison aligns exact step IDs, records deterministic literal normalization, and exposes bounded artifact-level changes plus alignment failures. Missing or truncated evidence never proves equality.",
+        description: "Compare passive web captures by providing before and after, or compare recorded scenarios by providing before_scenario and after_scenario with an optional normalization policy. Use exactly one input group. Scenario comparison aligns exact step IDs, records deterministic literal normalization, and returns every artifact-level difference plus alignment failures inline. Missing or truncated evidence never proves equality.",
         kind: "browser-provider",
         inputSchema: browserCaptureComparisonInputSchema,
         outputSchema: captureDiffOutputSchema,
@@ -266,7 +207,6 @@ export const BROWSER_TOOL_CONTRACTS = [
                             },
                         ],
                     },
-                    max_changes: 2_000,
                 },
             },
         ],
@@ -274,7 +214,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "capture_web_screenshot",
         ...toolContractMetadata("capture_web_screenshot"),
-        description: "Capture the current visible viewport of one approved page as a bounded, content-addressed PNG artifact. Screenshot capture requires separate explicit approval and never scrolls, navigates, or evaluates page JavaScript.",
+        description: "Capture the current visible viewport of one configured page as an inline, content-addressed PNG artifact. The operation never scrolls, navigates, or evaluates page JavaScript.",
         kind: "browser-provider",
         inputSchema: captureWebScreenshotInputSchema,
         outputSchema: screenshotOutputSchema,
@@ -285,9 +225,6 @@ export const BROWSER_TOOL_CONTRACTS = [
                     cdp_endpoint: endpoint,
                     allowed_origins: [origin],
                     target_id: "TARGET_ID_FROM_LIST_BROWSER_TARGETS",
-                    approved: true,
-                    screenshot_approved: true,
-                    maximum_image_bytes: 4_194_304,
                 },
             },
         ],
@@ -295,7 +232,7 @@ export const BROWSER_TOOL_CONTRACTS = [
     {
         name: "compare_web_screenshots",
         ...toolContractMetadata("compare_web_screenshots"),
-        description: "Compare two self-verifying PNG screenshot artifacts with bounded local pixel metrics. Returns exact changed-pixel ratios and channel deltas without OCR or external services.",
+        description: "Compare two self-verifying PNG screenshot artifacts with local pixel metrics. Returns exact changed-pixel ratios and channel deltas without OCR or external services.",
         kind: "browser-provider",
         inputSchema: compareWebScreenshotsInputSchema,
         outputSchema: screenshotDiffOutputSchema,
@@ -306,7 +243,6 @@ export const BROWSER_TOOL_CONTRACTS = [
                     before: exampleScreenshot(),
                     after: exampleScreenshot(),
                     channel_threshold: 0,
-                    maximum_pixels: 16_000_000,
                 },
             },
         ],
@@ -314,7 +250,6 @@ export const BROWSER_TOOL_CONTRACTS = [
 ];
 function exampleScreenshot() {
     return {
-        uri: "rea://web-screenshot/sha256/153cf6c9a526a63053a37b10234c2fd85df38887c2dc0a800d90abfa6631d01c",
         sha256: "153cf6c9a526a63053a37b10234c2fd85df38887c2dc0a800d90abfa6631d01c",
         bytes: 70,
         media_type: "image/png",