retestkit 1.4.1

package/LICENSE

@@ -0,0 +1,65 @@
+## PROPRIETARY LICENSE (v1.1 – tightened)
+
+Copyright (c) 2025 Ing. Jan Beránek
+All rights reserved.
+Contact: [honza@beranku.cz](mailto:honza@beranku.cz)
+(“Licensor”, “we”, “us”)
+
+This software and associated documentation (the “Software”) is proprietary and protected by copyright and other laws. **No rights are granted** except as expressly set out in a **separate written agreement** signed by the Licensor (a “Commercial Agreement”). **If you do not have a Commercial Agreement, you have no rights to use the Software.**
+
+### 1. Acceptance
+
+By installing, copying, accessing, executing, or otherwise using the Software, you agree to be bound by this license.
+
+### 2. No Public License Grant
+
+No license, right, or interest in the Software is granted or transferred to you except as expressly set out in a Commercial Agreement.
+
+### 3. Authorized Use Only (MCP / testing)
+
+You may use the Software **only** as explicitly permitted in a Commercial Agreement and **only for testing systems you are authorized to test**. You represent and warrant that you have all necessary rights and permissions for any target application or environment you test.
+
+### 4. Restrictions
+
+Except as expressly permitted in a Commercial Agreement, you must not (and must not permit any third party to):
+
+* copy, reproduce, publish, distribute, or disclose the Software (in whole or in part);
+* sell, sublicense, rent, lease, lend, **host**, provide as a **service bureau**, timesharing, SaaS, managed service, or otherwise make the Software available to any third party;
+* use the Software to provide testing services to third parties, or to build or offer a competing product/service;
+* modify, translate, adapt, or create derivative works;
+* reverse engineer, decompile, disassemble, or attempt to derive source code, ideas, algorithms, protocols, or structure of the Software, **except to the limited extent such restriction is prohibited by applicable law**;
+* circumvent or disable authentication, access controls, usage limits, telemetry/licensing checks, or security mechanisms;
+* remove, alter, or obscure proprietary notices;
+* publish or disclose benchmarks, performance results, security analyses, or comparisons relating to the Software without Licensor’s prior written consent.
+
+### 5. Confidentiality
+
+The Software may contain trade secrets and confidential information. You must treat the Software and any non-public information about it as confidential, use at least reasonable care to protect it, and not disclose it to any third party. These obligations survive termination.
+
+### 6. Ownership
+
+The Software remains the exclusive property of the Licensor and its licensors. All rights not expressly granted are reserved.
+
+### 7. Termination
+
+Any rights you may have under a Commercial Agreement terminate immediately upon breach. Upon termination you must cease all use and destroy all copies in your possession or control, unless required by law or a Commercial Agreement.
+
+### 8. Injunctive Relief
+
+You acknowledge that unauthorized use or disclosure may cause irreparable harm, and the Licensor may seek injunctive or equitable relief in addition to any other remedies.
+
+### 9. Disclaimer of Warranty
+
+THE SOFTWARE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
+
+### 10. Limitation of Liability
+
+TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL THE LICENSOR BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS INTERRUPTION.
+
+### 11. Indemnity
+
+You will defend, indemnify, and hold harmless the Licensor from any claims, damages, liabilities, penalties, and expenses arising from your (or your users’) use of the Software in violation of this license, including unauthorized testing or illegal use.
+
+### 12. Governing Law
+
+This license is governed by the laws of the Czech Republic, excluding conflict-of-law rules. Any disputes shall be resolved by the competent courts in the Czech Republic.

package/README.md

@@ -0,0 +1,303 @@
+# retest:kit
+
+> **Proprietary software. No public license is granted.**
+> Use, copying, modification, or distribution is permitted **only** under a separate written agreement with the Licensor.
+> See: **[LICENSE](./LICENSE)**
+
+## Overview
+
+This repository contains an **MCP server** for **AI-powered web application testing**. It provides tools for automated crawling, application analysis, test generation, and test execution using the Model Context Protocol (MCP).
+
+The server integrates with:
+- **MCP-compatible clients** (Claude Desktop, custom clients)
+- **Playwright MCP** for browser automation
+- **MCP Sampling** for AI-powered decision making
+- **MCP Elicitation** for interactive user input
+
+## Authorized Use Only
+
+You may use this Software **only** if:
+- you have a **separate written agreement** with the Licensor, and
+- you test only systems you are **authorized to test**.
+
+Any other use is prohibited. See **[LICENSE](./LICENSE)**.
+
+## Features
+
+- **Goal-directed crawling** - AI navigates web applications to achieve specified goals
+- **Application analysis** - Automatic discovery of entities, user flows, and assertions
+- **Test generation** - AI-generated test cases based on application analysis
+- **Test execution** - Automated test running with evidence capture
+- **Progress tracking** - Real-time progress notifications with budget status
+- **Checkpoint & resume** - Crawl checkpointing for resumable operations
+- **Security features** - Domain allowlists, injection protection, exfiltration blocking
+- **Resource management** - `webtest://` URI scheme for artifact access
+
+## Installation
+
+```bash
+npm install
+npm run build
+```
+
+## Configuration
+
+Configuration is done via environment variables:
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `TRANSPORT` | `stdio` | Transport type: `stdio` or `http` |
+| `PORT` | `3000` | HTTP port (when `TRANSPORT=http`) |
+| `LOG_LEVEL` | `info` | Log level: `debug`, `info`, `warn`, `error` |
+| `WEBTEST_WORKSPACE_DIR` | `./webtest-workspaces` | Directory for analysis workspaces |
+| `PLAYWRIGHT_MCP_COMMAND` | `npx` | Command to spawn Playwright MCP |
+| `PLAYWRIGHT_MCP_ARGS` | `@playwright/mcp@latest` | Comma-separated args for Playwright MCP |
+| `CHECKPOINT_INTERVAL` | `5` | Steps between crawl checkpoints |
+| `SCREENSHOT_FORMAT` | `png` | Screenshot format: `png` or `jpeg` |
+| `SCREENSHOT_QUALITY` | `80` | JPEG quality (1-100) |
+| `DEFAULT_MAX_STEPS` | `50` | Default max crawl steps |
+| `DEFAULT_MAX_MINUTES` | `30` | Default max crawl duration |
+| `DEFAULT_MAX_PAGES` | `20` | Default max pages to crawl |
+
+## Available Tools
+
+### `webtest_init`
+
+Initialize a new web testing analysis workspace.
+
+**Input:**
+```json
+{
+  "url": "https://example.com",
+  "focus": "User authentication flow",
+  "limits": {
+    "maxSteps": 50,
+    "maxMinutes": 30,
+    "maxPages": 20
+  },
+  "allowedDomains": ["example.com", "*.example.com"]
+}
+```
+
+**Output:** `analysisId` (e.g., `2025-01-15_10-30`), `workspacePath`
+
+### `webtest_crawl_app`
+
+Perform goal-directed crawling of a web application.
+
+**Input:**
+```json
+{
+  "analysisId": "2025-01-15_10-30",
+  "goal": "Navigate to login page and explore authentication options",
+  "strategy": "goal_directed",
+  "limits": { "maxSteps": 30 },
+  "artifacts": { "captureScreenshots": true, "captureSnapshots": true, "captureDom": true },
+  "resume": false
+}
+```
+
+**Features:**
+- AI-powered navigation decisions via MCP Sampling
+- Loop detection (DOM signatures, URL cycles, action repeats)
+- Budget enforcement (steps, time, pages)
+- Checkpointing every N steps (configurable)
+- Elicitation for user decisions (cookie consent, modals, auth)
+- Domain validation and security checks
+
+**Output:** `crawlId` (e.g., `2025-01-15_10-30-45`), `crawlPath`, page artifacts
+
+### `webtest_analyze_app`
+
+Analyze a crawled application to extract structure and flows.
+
+**Input:**
+```json
+{
+  "analysisId": "2025-01-15_10-30",
+  "crawlId": "2025-01-15_10-30-45"
+}
+```
+
+**Output:** `appAnalysisUri`, `appAnalysisFilePath`, `flowsUri`, `flowsFilePath` containing:
+- Application purpose and type
+- Discovered entities with fields
+- User flows with steps
+- Assertions (invariants, pre/postconditions)
+- Security and accessibility observations
+
+### `webtest_generate_tests`
+
+Generate test cases from application analysis.
+
+**Input:**
+```json
+{
+  "analysisId": "2025-01-15_10-30",
+  "testStrategy": "comprehensive",
+  "maxTests": 20,
+  "focusFlows": ["checkout-flow", "login-flow"]
+}
+```
+
+**Output:** `testsUri`, `testsFilePath` containing test cases with:
+- ID, name, purpose, category
+- Preconditions and steps
+- Expected outcomes
+
+### `webtest_run_tests`
+
+Execute a generated test case.
+
+**Input:**
+```json
+{
+  "analysisId": "2025-01-15_10-30",
+  "testCaseId": "TC-001",
+  "runOptions": {
+    "captureEvidence": true,
+    "stopOnFailure": true,
+    "retryFailedSteps": false
+  }
+}
+```
+
+**Output:** `runId`, `reportUri`, step results with:
+- Pass/fail status per step
+- Evidence (screenshots, DOM state)
+- Failure reasoning and discrepancies
+
+## Resources
+
+The server exposes resources via the `webtest://` URI scheme:
+
+- `webtest://{analysisId}/index.md` - Workspace metadata and summary
+- `webtest://{analysisId}/crawls/{crawlId}/index.md` - Crawl index with action history
+- `webtest://{analysisId}/crawls/{crawlId}/checkpoint.md` - Crawl checkpoint state
+- `webtest://{analysisId}/crawls/{crawlId}/pages/{pageId}/snapshot.md` - Page accessibility snapshot
+- `webtest://{analysisId}/crawls/{crawlId}/pages/{pageId}/screenshot.png` - Page screenshot
+- `webtest://{analysisId}/crawls/{crawlId}/pages/{pageId}/dom.html` - Page DOM
+- `webtest://{analysisId}/analysis/app-analysis.md` - Application analysis report
+- `webtest://{analysisId}/analysis/flows.md` - User flows with structured data
+- `webtest://{analysisId}/tests/tests.md` - Generated test cases
+- `webtest://{analysisId}/runs/{runId}/report.md` - Test run report
+- `webtest://{analysisId}/runs/{runId}/steps/{n}/snapshot.md` - Step evidence snapshot
+
+### Artifact Format
+
+All artifacts (except screenshots and DOM) use **Markdown with YAML frontmatter**:
+
+```markdown
+---
+analysisId: "2025-01-15_10-30"
+url: "https://example.com"
+status: "active"
+# ... structured data in YAML ...
+---
+
+# Human-Readable Content
+
+This section contains formatted markdown for easy browsing.
+```
+
+**Benefits:**
+- Human-readable without special tools
+- Structured data accessible via frontmatter parsing
+- Works with any markdown viewer or IDE
+- Git-friendly diffs
+
+**Parsing frontmatter programmatically:**
+```typescript
+import matter from "gray-matter";
+
+const { data, content } = matter(markdownContent);
+// data = parsed YAML frontmatter object
+// content = markdown body
+```
+
+### Workspace Folder Naming
+
+Workspaces use date-time based folder names for easy identification:
+- **Workspace ID**: `YYYY-MM-DD_HH-mm` (e.g., `2025-01-15_10-30`)
+- **Crawl ID**: `YYYY-MM-DD_HH-mm-ss` (e.g., `2025-01-15_10-30-45`)
+
+Legacy UUID-format IDs are still supported for backwards compatibility.
+
+## Prompts
+
+The server provides prompts for guided workflows:
+
+- **webtest-start** - Initialize a new analysis
+- **webtest-crawl** - Start or continue crawling
+- **webtest-analyze** - Analyze crawled application
+- **webtest-generate-tests** - Generate test cases
+- **webtest-run-test** - Execute a test case
+- **webtest-full-workflow** - Complete end-to-end workflow
+
+## Example Workflow
+
+```
+1. Start analysis:
+   webtest_init({ url: "https://myapp.com", focus: "checkout flow" })
+   → Returns analysisId
+
+2. Crawl the application:
+   webtest_crawl_app({ analysisId, goal: "Explore product catalog and checkout" })
+   → Returns crawlId, artifacts
+
+3. Analyze the application:
+   webtest_analyze_app({ analysisId, crawlId })
+   → Returns app structure, flows, assertions
+
+4. Generate test cases:
+   webtest_generate_tests({ analysisId, appAnalysisUri })
+   → Returns test cases
+
+5. Run tests:
+   webtest_run_tests({ analysisId, testCaseId, testsUri })
+   → Returns test results with evidence
+```
+
+## MCP Client Requirements
+
+For full functionality, the MCP client should support:
+
+| Capability | Required | Used For |
+|------------|----------|----------|
+| `sampling` | Recommended | AI-powered crawling, analysis, test generation |
+| `elicitation` | Optional | User decisions during crawl (cookie consent, auth) |
+| `logging` | Optional | Structured log delivery via MCP notifications |
+| `resources.listChanged` | Optional | Real-time resource update notifications |
+| `resources.subscribe` | Optional | Resource subscription support |
+
+**Fallback modes:** When sampling is unavailable, tools return prompt resources for manual execution. When elicitation is unavailable, questions are returned in tool output.
+
+## Security
+
+The server implements multiple security layers:
+
+- **Domain allowlists** - Restrict navigation to authorized domains
+- **Prompt injection protection** - Untrusted content demarcation in AI prompts
+- **Data exfiltration blocking** - Prevents sensitive data leakage
+- **Credential elicitation blocking** - Refuses to ask for passwords
+- **Audit logging** - All AI inputs/outputs logged for review
+- **Sensitive data redaction** - URL params, cookies, passwords redacted in logs
+
+## Getting Access
+
+To request commercial access or a license agreement, contact:
+**Ing. Jan Beránek** — honza@beranku.cz
+
+## Security & Responsible Use
+
+If you discover a security issue, please report it privately to the contact above.
+Do not open public issues containing sensitive details.
+
+## Repository Status
+
+Unless explicitly stated in a separate agreement, this repository is provided **without warranty** and **without support obligations**.
+
+## License
+
+Copyright (c) 2025 Ing. Jan Beránek.
+All rights reserved. See **[LICENSE](./LICENSE)**.

package/dist/config.d.ts

@@ -0,0 +1,4 @@
+import { type Config } from "./schemas/config.js";
+export declare function loadConfig(): Config;
+export type { Config };
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAEhE,wBAAgB,UAAU,IAAI,MAAM,CA2BnC;AAED,YAAY,EAAE,MAAM,EAAE,CAAC"}

package/dist/config.js

@@ -0,0 +1,27 @@
+import { ConfigSchema } from "./schemas/config.js";
+export function loadConfig() {
+    const rawConfig = {
+        transport: process.env.TRANSPORT,
+        port: process.env.PORT,
+        logLevel: process.env.LOG_LEVEL,
+        // Webtest configuration
+        workspaceDir: process.env.WEBTEST_WORKSPACE_DIR,
+        playwrightMcpCommand: process.env.PLAYWRIGHT_MCP_COMMAND,
+        playwrightMcpArgs: process.env.PLAYWRIGHT_MCP_ARGS,
+        checkpointInterval: process.env.WEBTEST_CHECKPOINT_INTERVAL,
+        screenshotFormat: process.env.WEBTEST_SCREENSHOT_FORMAT,
+        screenshotQuality: process.env.WEBTEST_SCREENSHOT_QUALITY,
+        defaultMaxSteps: process.env.WEBTEST_DEFAULT_MAX_STEPS,
+        defaultMaxMinutes: process.env.WEBTEST_DEFAULT_MAX_MINUTES,
+        defaultMaxPages: process.env.WEBTEST_DEFAULT_MAX_PAGES,
+    };
+    const result = ConfigSchema.safeParse(rawConfig);
+    if (!result.success) {
+        const errors = result.error.issues
+            .map((issue) => `${issue.path.join(".")}: ${issue.message}`)
+            .join(", ");
+        throw new Error(`Invalid configuration: ${errors}`);
+    }
+    return result.data;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,qBAAqB,CAAC;AAEhE,MAAM,UAAU,UAAU;IACxB,MAAM,SAAS,GAAG;QAChB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAChC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;QACtB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAC/B,wBAAwB;QACxB,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QAC/C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QACxD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAClD,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;QAC3D,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACvD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;QACzD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACtD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;QAC1D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;KACvD,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/elicitation/index.d.ts

@@ -0,0 +1,17 @@
+import type { Logger } from "../logger.js";
+import type { ClientCapabilities } from "../types/capabilities.js";
+import { type ElicitationRequest, type ElicitationResponse, type ElicitationResult } from "./types.js";
+export * from "./types.js";
+export interface ElicitationClient {
+    elicit(request: ElicitationRequest): Promise<ElicitationResult>;
+    hasElicitation(): boolean;
+    createCookieConsentRequest(context: string): ElicitationRequest;
+    createModalBlockingRequest(modalContent: string): ElicitationRequest;
+    createAmbiguousNavigationRequest(options: Array<{
+        url: string;
+        label: string;
+    }>): ElicitationRequest;
+    createAuthRequiredRequest(): ElicitationRequest;
+}
+export declare function createElicitationClient(requestElicitation: (request: ElicitationRequest) => Promise<ElicitationResponse>, capabilities: ClientCapabilities, logger: Logger): ElicitationClient;
+//# sourceMappingURL=index.d.ts.map

package/dist/elicitation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/elicitation/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EAKvB,MAAM,YAAY,CAAC;AAEpB,cAAc,YAAY,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChE,cAAc,IAAI,OAAO,CAAC;IAC1B,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAChE,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,kBAAkB,CAAC;IACrE,gCAAgC,CAC9B,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,GAC7C,kBAAkB,CAAC;IACtB,yBAAyB,IAAI,kBAAkB,CAAC;CACjD;AAED,wBAAgB,uBAAuB,CACrC,kBAAkB,EAAE,CAClB,OAAO,EAAE,kBAAkB,KACxB,OAAO,CAAC,mBAAmB,CAAC,EACjC,YAAY,EAAE,kBAAkB,EAChC,MAAM,EAAE,MAAM,GACb,iBAAiB,CA0InB"}

package/dist/elicitation/index.js

@@ -0,0 +1,118 @@
+import { isElicitationSupported } from "../types/capabilities.js";
+import { ElicitationType, COOKIE_CONSENT_OPTIONS, MODAL_BLOCKING_OPTIONS, AUTH_REQUIRED_OPTIONS, } from "./types.js";
+export * from "./types.js";
+export function createElicitationClient(requestElicitation, capabilities, logger) {
+    const hasElicitationCapability = isElicitationSupported(capabilities);
+    async function elicit(request) {
+        // Validate that we never request credentials
+        if (request.type === ElicitationType.AuthRequired) {
+            // Ensure options don't include credential entry
+            const hasCredentialOption = request.options.some((opt) => opt.value.includes("password") ||
+                opt.value.includes("credential") ||
+                opt.value.includes("login"));
+            if (hasCredentialOption) {
+                logger.error("Attempted to elicit credentials - blocked", {
+                    type: request.type,
+                });
+                return {
+                    success: false,
+                    error: "Security policy prevents credential elicitation",
+                };
+            }
+        }
+        // If elicitation not available, return fallback
+        if (!hasElicitationCapability) {
+            logger.info("Elicitation unavailable, returning fallback questions");
+            return {
+                success: false,
+                error: "Elicitation not available",
+                fallbackQuestions: request,
+            };
+        }
+        logger.debug("Sending elicitation request", {
+            type: request.type,
+            title: request.title,
+            optionCount: request.options.length,
+        });
+        try {
+            const response = await requestElicitation(request);
+            if (response.action === "cancel") {
+                logger.info("User cancelled elicitation", { type: request.type });
+                return {
+                    success: true,
+                    cancelled: true,
+                };
+            }
+            if (response.action === "dismiss") {
+                logger.info("User dismissed elicitation", { type: request.type });
+                return {
+                    success: true,
+                    selectedValue: "dismiss",
+                };
+            }
+            // Extract selected value from content
+            const selectedValue = response.content?.selected || response.content?.value;
+            logger.info("Elicitation response received", {
+                type: request.type,
+                action: response.action,
+                selectedValue,
+            });
+            return {
+                success: true,
+                selectedValue,
+                customValue: response.content?.custom,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "Unknown error";
+            logger.error("Elicitation request failed", { error: message });
+            return {
+                success: false,
+                error: message,
+                fallbackQuestions: request,
+            };
+        }
+    }
+    return {
+        elicit,
+        hasElicitation: () => hasElicitationCapability,
+        createCookieConsentRequest(context) {
+            return {
+                type: ElicitationType.CookieConsent,
+                title: "Cookie Consent Banner Detected",
+                message: `A cookie consent banner was detected on the page. How should we handle it?\n\nContext: ${context}`,
+                options: COOKIE_CONSENT_OPTIONS,
+            };
+        },
+        createModalBlockingRequest(modalContent) {
+            return {
+                type: ElicitationType.ModalBlocking,
+                title: "Modal Dialog Blocking Page",
+                message: `A modal dialog is blocking page interaction.\n\nModal content: ${modalContent.slice(0, 200)}...`,
+                options: MODAL_BLOCKING_OPTIONS,
+            };
+        },
+        createAmbiguousNavigationRequest(options) {
+            return {
+                type: ElicitationType.AmbiguousNavigation,
+                title: "Multiple Navigation Options",
+                message: "Multiple similar navigation options were found. Which path should we explore?",
+                options: options.slice(0, 5).map((opt, i) => ({
+                    value: opt.url,
+                    label: opt.label || `Option ${i + 1}`,
+                    description: opt.url,
+                })),
+                allowCustom: true,
+            };
+        },
+        createAuthRequiredRequest() {
+            return {
+                type: ElicitationType.AuthRequired,
+                title: "Authentication Required",
+                message: "This page requires authentication. For security reasons, we cannot handle login automatically. How would you like to proceed?",
+                options: AUTH_REQUIRED_OPTIONS,
+            };
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/elicitation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/elicitation/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAIL,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,cAAc,YAAY,CAAC;AAa3B,MAAM,UAAU,uBAAuB,CACrC,kBAEiC,EACjC,YAAgC,EAChC,MAAc;IAEd,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAEtE,KAAK,UAAU,MAAM,CACnB,OAA2B;QAE3B,6CAA6C;QAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,YAAY,EAAE,CAAC;YAClD,gDAAgD;YAChD,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAC9C,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC9B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC9B,CAAC;YAEF,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;oBACxD,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,iDAAiD;iBACzD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YAErE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,2BAA2B;gBAClC,iBAAiB,EAAE,OAAO;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAEnD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClE,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;iBAChB,CAAC;YACJ,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClE,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,aAAa,EAAE,SAAS;iBACzB,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;YAE5E,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAC3C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,aAAa;aACd,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa;gBACb,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM;aACtC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAE/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,OAAO;gBACd,iBAAiB,EAAE,OAAO;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,wBAAwB;QAE9C,0BAA0B,CAAC,OAAe;YACxC,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC,aAAa;gBACnC,KAAK,EAAE,gCAAgC;gBACvC,OAAO,EAAE,0FAA0F,OAAO,EAAE;gBAC5G,OAAO,EAAE,sBAAsB;aAChC,CAAC;QACJ,CAAC;QAED,0BAA0B,CAAC,YAAoB;YAC7C,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC,aAAa;gBACnC,KAAK,EAAE,4BAA4B;gBACnC,OAAO,EAAE,kEAAkE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;gBAC1G,OAAO,EAAE,sBAAsB;aAChC,CAAC;QACJ,CAAC;QAED,gCAAgC,CAC9B,OAA8C;YAE9C,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC,mBAAmB;gBACzC,KAAK,EAAE,6BAA6B;gBACpC,OAAO,EACL,+EAA+E;gBACjF,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5C,KAAK,EAAE,GAAG,CAAC,GAAG;oBACd,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE;oBACrC,WAAW,EAAE,GAAG,CAAC,GAAG;iBACrB,CAAC,CAAC;gBACH,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC;QAED,yBAAyB;YACvB,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC,YAAY;gBAClC,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EACL,+HAA+H;gBACjI,OAAO,EAAE,qBAAqB;aAC/B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/elicitation/types.d.ts

@@ -0,0 +1,35 @@
+export declare enum ElicitationType {
+    CookieConsent = "cookie_consent",
+    ModalBlocking = "modal_blocking",
+    AmbiguousNavigation = "ambiguous_navigation",
+    AuthRequired = "auth_required",
+    ConfirmAction = "confirm_action"
+}
+export interface ElicitationOption {
+    value: string;
+    label: string;
+    description?: string;
+}
+export interface ElicitationRequest {
+    type: ElicitationType;
+    title: string;
+    message: string;
+    options: ElicitationOption[];
+    allowCustom?: boolean;
+}
+export interface ElicitationResponse {
+    action: "confirm" | "dismiss" | "cancel";
+    content?: Record<string, string>;
+}
+export interface ElicitationResult {
+    success: boolean;
+    selectedValue?: string;
+    customValue?: string;
+    cancelled?: boolean;
+    error?: string;
+    fallbackQuestions?: ElicitationRequest;
+}
+export declare const COOKIE_CONSENT_OPTIONS: ElicitationOption[];
+export declare const MODAL_BLOCKING_OPTIONS: ElicitationOption[];
+export declare const AUTH_REQUIRED_OPTIONS: ElicitationOption[];
+//# sourceMappingURL=types.d.ts.map

package/dist/elicitation/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/elicitation/types.ts"],"names":[],"mappings":"AAAA,oBAAY,eAAe;IACzB,aAAa,mBAAmB;IAChC,aAAa,mBAAmB;IAChC,mBAAmB,yBAAyB;IAC5C,YAAY,kBAAkB;IAC9B,aAAa,mBAAmB;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAGD,eAAO,MAAM,sBAAsB,EAAE,iBAAiB,EAYrD,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,iBAAiB,EAOrD,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,iBAAiB,EAOpD,CAAC"}

package/dist/elicitation/types.js

@@ -0,0 +1,39 @@
+export var ElicitationType;
+(function (ElicitationType) {
+    ElicitationType["CookieConsent"] = "cookie_consent";
+    ElicitationType["ModalBlocking"] = "modal_blocking";
+    ElicitationType["AmbiguousNavigation"] = "ambiguous_navigation";
+    ElicitationType["AuthRequired"] = "auth_required";
+    ElicitationType["ConfirmAction"] = "confirm_action";
+})(ElicitationType || (ElicitationType = {}));
+// Predefined option sets for common scenarios
+export const COOKIE_CONSENT_OPTIONS = [
+    { value: "accept", label: "Accept All", description: "Accept all cookies" },
+    {
+        value: "reject",
+        label: "Reject All",
+        description: "Reject non-essential cookies",
+    },
+    {
+        value: "dismiss",
+        label: "Dismiss",
+        description: "Close the banner without choosing",
+    },
+];
+export const MODAL_BLOCKING_OPTIONS = [
+    { value: "close", label: "Close Modal", description: "Close and continue" },
+    {
+        value: "interact",
+        label: "Interact",
+        description: "Interact with modal content",
+    },
+];
+export const AUTH_REQUIRED_OPTIONS = [
+    { value: "stop", label: "Stop Analysis", description: "End the analysis" },
+    {
+        value: "continue",
+        label: "Continue Unauthenticated",
+        description: "Continue without logging in",
+    },
+];
+//# sourceMappingURL=types.js.map

package/dist/elicitation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/elicitation/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,eAMX;AAND,WAAY,eAAe;IACzB,mDAAgC,CAAA;IAChC,mDAAgC,CAAA;IAChC,+DAA4C,CAAA;IAC5C,iDAA8B,CAAA;IAC9B,mDAAgC,CAAA;AAClC,CAAC,EANW,eAAe,KAAf,eAAe,QAM1B;AA8BD,8CAA8C;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAwB;IACzD,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC3E;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,mCAAmC;KACjD;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAwB;IACzD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC3E;QACE,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,6BAA6B;KAC3C;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAwB;IACxD,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC1E;QACE,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,6BAA6B;KAC3C;CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}