safari-pilot 0.1.28 → 0.1.29

package/bin/Safari Pilot.app/Contents/Info.plist

@@ -23,13 +23,13 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.1.28</string>
+	<string>0.1.29</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>202605050412</string>
+	<string>202605060230</string>
 	<key>DTCompiler</key>
 	<string>com.apple.compilers.llvm.clang.1_0</string>
 	<key>DTPlatformBuild</key>

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/Info.plist

@@ -19,13 +19,13 @@
 	<key>CFBundlePackageType</key>
 	<string>XPC!</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.1.28</string>
+	<string>0.1.29</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>202605050412</string>
+	<string>202605060230</string>
 	<key>DTCompiler</key>
 	<string>com.apple.compilers.llvm.clang.1_0</string>
 	<key>DTPlatformBuild</key>

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/Resources/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Safari Pilot",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "description": "Native Safari automation for AI agents",
   "permissions": [
     "activeTab",
@@ -18,22 +18,34 @@
   "content_security_policy": {
     "extension_pages": "script-src 'self'; connect-src 'self' http://localhost:19475 http://127.0.0.1:19475"
   },
-  "host_permissions": ["<all_urls>"],
+  "host_permissions": [
+    "<all_urls>"
+  ],
   "background": {
-    "scripts": ["background.js"],
+    "scripts": [
+      "background.js"
+    ],
     "persistent": false
   },
   "content_scripts": [
     {
-      "matches": ["<all_urls>"],
-      "js": ["content-isolated.js"],
+      "matches": [
+        "<all_urls>"
+      ],
+      "js": [
+        "content-isolated.js"
+      ],
       "run_at": "document_idle",
       "world": "ISOLATED",
       "all_frames": true
     },
     {
-      "matches": ["<all_urls>"],
-      "js": ["content-main.js"],
+      "matches": [
+        "<all_urls>"
+      ],
+      "js": [
+        "content-main.js"
+      ],
       "run_at": "document_idle",
       "world": "MAIN",
       "all_frames": true

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/_CodeSignature/CodeResources

@@ -46,7 +46,7 @@
 		</data>
 		<key>Resources/manifest.json</key>
 		<data>
-		N9cYkZyI/ckF3TWIR2w2ujwqOSQ=
+		+aLtOWURQx+rJpvnmelFssvw6sY=
 		</data>
 		<key>Resources/native/SafariWebExtensionHandler.swift</key>
 		<data>
@@ -129,7 +129,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Vh4l0sBEAXf+Jc3DaBwYM5wwB9LUiM1LhuR2p1VYK/4=
+			mrfYAmMwhQqkNTyZU2dzeThoyxd2hZYHwPgFKaNKpxE=
 			</data>
 		</dict>
 		<key>Resources/native/SafariWebExtensionHandler.swift</key>

package/bin/Safari Pilot.app/Contents/_CodeSignature/CodeResources

@@ -18,15 +18,15 @@
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/Info.plist</key>
 		<data>
-		Lk+CPfhfIGRA8ShZZFI+A0rJ2Fk=
+		E7+ia1hClIvypqZ7fpu0ykYY1Jo=
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/MainMenu.nib</key>
 		<data>
-		gfejsxd2k48cV+t1Ave1GMgeWeU=
+		ZNKXFL6TEBryOVVZLjtCzviNbTU=
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/NSWindowController-B8D-0N-5wS.nib</key>
 		<data>
-		9ykXQmnGGwCAJL2MPMLC7qPCpkQ=
+		B+v01Kjcwm0FLJsbuBG9NZchRD0=
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/XfG-lQ-9wD-view-m2S-Jp-Qdl.nib</key>
 		<data>
@@ -51,7 +51,7 @@
 		<dict>
 			<key>cdhash</key>
 			<data>
-			bWtJ8Gsg4i9gGuKEQ4SYB+FcDso=
+			NpksfTnkkjY5muDgSJktoSnJnSo=
 			</data>
 			<key>requirement</key>
 			<string>anchor apple generic and identifier "com.safari-pilot.app.Extension" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = V37WLKRXUJ)</string>
@@ -81,21 +81,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			8J9pOXoi9UK5I6qZRMloMaWPxQoW+OciXbGvdnqtq0Q=
+			ofN6kk0Yg0dmJF0e6J3yaZ0HWcwDs9vk3OVOSaapviI=
 			</data>
 		</dict>
 		<key>Resources/Base.lproj/Main.storyboardc/MainMenu.nib</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			pXqB05PG+ZwnFVMoJVsDjhgig8YjRG8grrBPWsZG/YI=
+			JutHRKOObLSCTpKJVIiQRRyzEBJKgzdTdsbgK218f2M=
 			</data>
 		</dict>
 		<key>Resources/Base.lproj/Main.storyboardc/NSWindowController-B8D-0N-5wS.nib</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			LAAQ0mIs7zxLtn87eO30xhqHEkEP/lblzyrpTD3gv0s=
+			ZQQSp+jq0L/MX6J66senkEoiNwFY6A1DMHS63B664YA=
 			</data>
 		</dict>
 		<key>Resources/Base.lproj/Main.storyboardc/XfG-lQ-9wD-view-m2S-Jp-Qdl.nib</key>

package/dist/discovery/recipe-miner.d.ts

@@ -0,0 +1,13 @@
+export interface MineOptions {
+    minOccurrences: number;
+    minLength: number;
+}
+export interface RecipeCandidate {
+    host: string;
+    steps: Array<{
+        tool: string;
+        argSignature: string;
+    }>;
+    occurrences: number;
+}
+export declare function mineRecipes(rootDir: string, opts: MineOptions): Promise<RecipeCandidate[]>;

package/dist/discovery/recipe-miner.js

@@ -0,0 +1,71 @@
+// src/discovery/recipe-miner.ts
+// Port of Browser Use's browser-harness pattern: read execution traces,
+// extract recurring successful tool sequences, emit candidate skills.
+import { readdir, readFile } from 'node:fs/promises';
+import { stat } from 'node:fs/promises';
+import { join } from 'node:path';
+export async function mineRecipes(rootDir, opts) {
+    const traces = await collectTraces(rootDir);
+    const counts = new Map();
+    for (const trace of traces) {
+        if (trace.steps.length < opts.minLength)
+            continue;
+        const key = trace.host + '|' + trace.steps.map((s) => `${s.tool}:${s.argSignature}`).join('>');
+        const existing = counts.get(key);
+        if (existing)
+            existing.occurrences++;
+        else
+            counts.set(key, { host: trace.host, steps: trace.steps, occurrences: 1 });
+    }
+    return [...counts.values()].filter((c) => c.occurrences >= opts.minOccurrences);
+}
+async function collectTraces(root) {
+    const out = [];
+    let entries;
+    try {
+        entries = await readdir(root);
+    }
+    catch {
+        return out;
+    }
+    for (const e of entries) {
+        const p = join(root, e);
+        const s = await stat(p).catch(() => null);
+        if (!s || !s.isDirectory())
+            continue;
+        try {
+            const score = JSON.parse(await readFile(join(p, 'score.json'), 'utf8'));
+            if (!score['success'])
+                continue;
+            const traceText = await readFile(join(p, 'tool-calls.jsonl'), 'utf8');
+            const steps = traceText
+                .split('\n')
+                .filter(Boolean)
+                .map((line) => {
+                const entry = JSON.parse(line);
+                return {
+                    tool: String(entry.tool),
+                    argSignature: signature(entry.args),
+                };
+            });
+            const host = inferHost(traceText);
+            out.push({ host, steps });
+        }
+        catch {
+            /* skip incomplete run dirs */
+        }
+    }
+    return out;
+}
+function signature(args) {
+    if (!args || typeof args !== 'object')
+        return '';
+    return Object.keys(args)
+        .sort()
+        .join(',');
+}
+function inferHost(trace) {
+    const m = trace.match(/"url"\s*:\s*"https?:\/\/([^/"]+)/);
+    return m?.[1] ?? 'unknown';
+}
+//# sourceMappingURL=recipe-miner.js.map

package/dist/discovery/recipe-miner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipe-miner.js","sourceRoot":"","sources":["../../src/discovery/recipe-miner.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,wEAAwE;AACxE,sEAAsE;AACtE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,IAAiB;IAClE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;YAAE,SAAS;QAClD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ;YAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY;IAEZ,MAAM,GAAG,GAAkF,EAAE,CAAC;IAC9F,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;YACnG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,SAAS;YAChC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,SAAS;iBACpB,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqC,CAAC;gBACnE,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,YAAY,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;iBACpC,CAAC;YACJ,CAAC,CAAC,CAAC;YACL,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,IAA+B,CAAC;SAChD,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1D,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;AAC7B,CAAC"}

package/dist/discovery/tool-index.d.ts

@@ -0,0 +1,18 @@
+export interface ToolEntry {
+    name: string;
+    description: string;
+    tags?: string[];
+}
+export interface ToolHit extends ToolEntry {
+    score: number;
+}
+export declare class ToolIndex {
+    private entries;
+    constructor(entries: ToolEntry[]);
+    size(): number;
+    tagsFor(name: string): string[];
+    search(query: string, topK?: number): ToolHit[];
+    private inferTags;
+    private tokenize;
+    private score;
+}

package/dist/discovery/tool-index.js

@@ -0,0 +1,52 @@
+// src/discovery/tool-index.ts
+// In-memory tool index for safari_tool_search meta-tool.
+// Keyword overlap scoring with name + tag boost.
+export class ToolIndex {
+    entries;
+    constructor(entries) {
+        this.entries = entries.map((e) => ({
+            ...e,
+            tags: e.tags ?? this.inferTags(e.name),
+        }));
+    }
+    size() {
+        return this.entries.length;
+    }
+    tagsFor(name) {
+        return this.entries.find((e) => e.name === name)?.tags ?? [];
+    }
+    search(query, topK = 8) {
+        const tokens = this.tokenize(query);
+        if (tokens.length === 0)
+            return [];
+        const scored = this.entries
+            .map((e) => ({ ...e, score: this.score(tokens, e) }))
+            .filter((h) => h.score > 0);
+        scored.sort((a, b) => b.score - a.score);
+        return scored.slice(0, topK);
+    }
+    inferTags(name) {
+        const parts = name.replace(/^safari_/, '').split('_');
+        return parts[0] ? [parts[0]] : [];
+    }
+    tokenize(s) {
+        return s
+            .toLowerCase()
+            .split(/[^a-z0-9]+/)
+            .filter((t) => t.length > 1);
+    }
+    score(queryTokens, e) {
+        const haystack = (e.name + ' ' + e.description + ' ' + (e.tags ?? []).join(' ')).toLowerCase();
+        let s = 0;
+        for (const t of queryTokens) {
+            if (haystack.includes(t))
+                s += 1;
+            if (e.name.toLowerCase().includes(t))
+                s += 1; // boost name match
+            if (e.tags?.includes(t))
+                s += 0.5;
+        }
+        return s;
+    }
+}
+//# sourceMappingURL=tool-index.js.map

package/dist/discovery/tool-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-index.js","sourceRoot":"","sources":["../../src/discovery/tool-index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,yDAAyD;AACzD,iDAAiD;AAYjD,MAAM,OAAO,SAAS;IACZ,OAAO,CAAc;IAE7B,YAAY,OAAoB;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,GAAG,CAAC;YACJ,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;SACvC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,IAAI,GAAG,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;aACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC;IAEO,QAAQ,CAAC,CAAS;QACxB,OAAO,CAAC;aACL,WAAW,EAAE;aACb,KAAK,CAAC,YAAY,CAAC;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,WAAqB,EAAE,CAAY;QAC/C,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,WAAW,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB;YACjE,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAAE,CAAC,IAAI,GAAG,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/security/human-approval.d.ts

@@ -1,3 +1,10 @@
+/** Cluster G — suggested_next_tools emitted on every HumanApproval denial.
+ *  Exported so server.ts can attach it to both denial return paths without
+ *  duplicating the hint text. */
+export declare const HUMAN_APPROVAL_SUGGESTED_NEXT_TOOLS: Array<{
+    tool: string;
+    reason: string;
+}>;
 export interface ApprovalResult {
     required: boolean;
     reason?: string;

package/dist/security/human-approval.js

@@ -1,4 +1,10 @@
 import { HumanApprovalRequiredError } from '../errors.js';
+/** Cluster G — suggested_next_tools emitted on every HumanApproval denial.
+ *  Exported so server.ts can attach it to both denial return paths without
+ *  duplicating the hint text. */
+export const HUMAN_APPROVAL_SUGGESTED_NEXT_TOOLS = [
+    { tool: 'safari_evaluate', reason: 'Equivalent path that runs through the JS-eval engine (still security-gated).' },
+];
 // ─── Pattern Registry ─────────────────────────────────────────────────────────
 /** OAuth / SSO provider URL patterns. */
 const OAUTH_URL_PATTERNS = [

package/dist/security/human-approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"human-approval.js","sourceRoot":"","sources":["../../src/security/human-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAkB1D,iFAAiF;AAEjF,yCAAyC;AACzC,MAAM,kBAAkB,GAAa;IACnC,kCAAkC;IAClC,8BAA8B;IAC9B,4BAA4B;IAC5B,aAAa;IACb,YAAY;IACZ,mBAAmB;IACnB,sBAAsB;IACtB,+BAA+B;CAChC,CAAC;AAEF,iDAAiD;AACjD,MAAM,sBAAsB,GAAa;IACvC,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,qBAAqB,GAAa;IACtC,oBAAoB;IACpB,QAAQ;IACR,QAAQ;IACR,uBAAuB;IACvB,uBAAuB;IACvB,qBAAqB;IACrB,oBAAoB;CACrB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,mBAAmB,GAAG,6DAA6D,CAAC;AAE1F,sDAAsD;AACtD,MAAM,yBAAyB,GAAa;IAC1C,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,uBAAuB;IACvB,yBAAyB;CAC1B,CAAC;AAEF;;+DAE+D;AAC/D,MAAM,sBAAsB,GAA2B;IACrD,wBAAwB,EACtB,mHAAmH;CACtH,CAAC;AAEF,iDAAiD;AACjD,MAAM,qBAAqB,GAAa;IACtC,aAAa;IACb,WAAW;IACX,SAAS;IACT,QAAQ;IACR,uBAAuB;IACvB,mBAAmB;IACnB,mBAAmB;IACnB,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,iFAAiF;AAEjF,SAAS,UAAU,CAAC,KAAa,EAAE,QAAkB;IACnD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,aAAa;IACxB;;;;;;OAMG;IACH,gBAAgB,CACd,MAAc,EACd,GAAW,EACX,MAAgC;QAEhC,mEAAmE;QACnE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,eAAe;aACxB,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,8CAA8C;aACvD,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,IAAI,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,kDAAkD;aAC3D,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACpF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,gDAAgD,cAAc,GAAG;iBAC1E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,gBAAgB,GAAG,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,0BAA0B,CAAC;QACxF,IAAI,gBAAgB,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,oCAAoC;aAC7C,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,UAAU,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC/C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,kBAAkB;gBAC5B,MAAM,EAAE,2DAA2D;aACpE,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,YAAY,GAAG,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM;eACxD,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,cAAc,CAAC;QAC3D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;gBACpF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,OAAO;wBACL,QAAQ,EAAE,IAAI;wBACd,QAAQ,EAAE,iBAAiB;wBAC3B,MAAM,EAAE,8CAA8C,cAAc,GAAG;qBACxE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,MAAc,EAAE,GAAW,EAAE,MAAgC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,wBAAwB,CAAC,SAAiB;QACxC,0DAA0D;IAC5D,CAAC;CACF"}
+{"version":3,"file":"human-approval.js","sourceRoot":"","sources":["../../src/security/human-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D;;iCAEiC;AACjC,MAAM,CAAC,MAAM,mCAAmC,GAA4C;IAC1F,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,8EAA8E,EAAE;CACpH,CAAC;AAkBF,iFAAiF;AAEjF,yCAAyC;AACzC,MAAM,kBAAkB,GAAa;IACnC,kCAAkC;IAClC,8BAA8B;IAC9B,4BAA4B;IAC5B,aAAa;IACb,YAAY;IACZ,mBAAmB;IACnB,sBAAsB;IACtB,+BAA+B;CAChC,CAAC;AAEF,iDAAiD;AACjD,MAAM,sBAAsB,GAAa;IACvC,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,qBAAqB,GAAa;IACtC,oBAAoB;IACpB,QAAQ;IACR,QAAQ;IACR,uBAAuB;IACvB,uBAAuB;IACvB,qBAAqB;IACrB,oBAAoB;CACrB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,mBAAmB,GAAG,6DAA6D,CAAC;AAE1F,sDAAsD;AACtD,MAAM,yBAAyB,GAAa;IAC1C,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,uBAAuB;IACvB,yBAAyB;CAC1B,CAAC;AAEF;;+DAE+D;AAC/D,MAAM,sBAAsB,GAA2B;IACrD,wBAAwB,EACtB,mHAAmH;CACtH,CAAC;AAEF,iDAAiD;AACjD,MAAM,qBAAqB,GAAa;IACtC,aAAa;IACb,WAAW;IACX,SAAS;IACT,QAAQ;IACR,uBAAuB;IACvB,mBAAmB;IACnB,mBAAmB;IACnB,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,iFAAiF;AAEjF,SAAS,UAAU,CAAC,KAAa,EAAE,QAAkB;IACnD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,aAAa;IACxB;;;;;;OAMG;IACH,gBAAgB,CACd,MAAc,EACd,GAAW,EACX,MAAgC;QAEhC,mEAAmE;QACnE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,eAAe;aACxB,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,8CAA8C;aACvD,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,IAAI,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,kDAAkD;aAC3D,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACpF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,gDAAgD,cAAc,GAAG;iBAC1E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,gBAAgB,GAAG,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,0BAA0B,CAAC;QACxF,IAAI,gBAAgB,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,oCAAoC;aAC7C,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,UAAU,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC/C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,kBAAkB;gBAC5B,MAAM,EAAE,2DAA2D;aACpE,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,YAAY,GAAG,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM;eACxD,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,cAAc,CAAC;QAC3D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;gBACpF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,OAAO;wBACL,QAAQ,EAAE,IAAI;wBACd,QAAQ,EAAE,iBAAiB;wBAC3B,MAAM,EAAE,8CAA8C,cAAc,GAAG;qBACxE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,MAAc,EAAE,GAAW,EAAE,MAAgC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,wBAAwB,CAAC,SAAiB;QACxC,0DAA0D;IAC5D,CAAC;CACF"}

package/dist/server.d.ts

@@ -66,6 +66,19 @@ export declare class SafariPilotServer {
      * Returns undefined before the first successful `ensureSessionWindow`.
      */
     getSessionWindowId(): number | undefined;
+    /**
+     * Return all tool definitions (name, description, inputSchema, requirements)
+     * without requiring `initialize()` to have been called.
+     *
+     * Uses I/O-free engine instances to satisfy tool module constructors;
+     * only `getDefinitions()` is called — no engine I/O occurs.
+     */
+    listToolDefinitions(): Array<{
+        name: string;
+        description: string;
+        inputSchema: Record<string, unknown>;
+        requirements: ToolRequirements;
+    }>;
     private get sessionTabUrl();
     constructor(config?: SafariPilotConfig);
     initialize(): Promise<void>;

package/dist/server.js

@@ -25,6 +25,10 @@ import { DownloadTools } from './tools/downloads.js';
 import { PdfTools } from './tools/pdf.js';
 import { ExtensionDiagnosticsTools } from './tools/extension-diagnostics.js';
 import { FileUploadTools } from './tools/file-upload.js';
+import { ToolIndex } from './discovery/tool-index.js';
+import { ToolSearchTools } from './tools/tool-search.js';
+import { SkillRegistry } from './skills/registry.js';
+import { SkillTools } from './tools/skills.js';
 import { KillSwitch } from './security/kill-switch.js';
 import { TabOwnership } from './security/tab-ownership.js';
 import { AuditLog } from './security/audit-log.js';
@@ -32,7 +36,7 @@ import { DomainPolicy } from './security/domain-policy.js';
 import { RateLimiter } from './security/rate-limiter.js';
 import { CircuitBreaker } from './security/circuit-breaker.js';
 import { IdpiAnnotator } from './security/idpi-annotator.js';
-import { HumanApproval } from './security/human-approval.js';
+import { HumanApproval, HUMAN_APPROVAL_SUGGESTED_NEXT_TOOLS } from './security/human-approval.js';
 import { ScreenshotPolicy } from './security/screenshot-policy.js';
 import { RateLimitedError, HumanApprovalRequiredError, TabUrlNotRecognizedError, SessionTabProtectedError, TabNotOwnedError, DomainNotAllowedError, KillSwitchActiveError, CircuitBreakerOpenError, SessionRecoveryError, SessionWindowInitError, } from './errors.js';
 import { loadConfig, DEFAULT_CONFIG } from './config.js';
@@ -184,6 +188,62 @@ export class SafariPilotServer {
     getSessionWindowId() {
         return this._sessionWindowId;
     }
+    /**
+     * Return all tool definitions (name, description, inputSchema, requirements)
+     * without requiring `initialize()` to have been called.
+     *
+     * Uses I/O-free engine instances to satisfy tool module constructors;
+     * only `getDefinitions()` is called — no engine I/O occurs.
+     */
+    listToolDefinitions() {
+        const engine = new AppleScriptEngine();
+        const proxy = new EngineProxy(engine);
+        const daemon = new DaemonEngine();
+        const modules = [
+            new NavigationTools(engine),
+            new InteractionTools(proxy, this),
+            new ExtractionTools(proxy, new ScreenshotPolicy(this.config.screenshotPolicy)),
+            new NetworkTools(proxy),
+            new StorageTools(proxy),
+            new AuthTools(proxy),
+            new FileUploadTools(proxy, daemon),
+            new ShadowTools(proxy),
+            new FrameTools(proxy),
+            new PermissionTools(proxy),
+            new ClipboardTools(proxy),
+            new ServiceWorkerTools(proxy),
+            new PerformanceTools(proxy),
+            new StructuredExtractionTools(proxy),
+            new WaitTools(proxy),
+            new CompoundTools(engine),
+            new DownloadTools(this),
+            new PdfTools(this),
+            new ExtensionDiagnosticsTools(null),
+            new SelectorPackTools(proxy, this.config.selectorPack),
+        ];
+        // Build the tool index from all existing modules and add the search meta-tool.
+        const allEntries = modules.flatMap((m) => m
+            .getDefinitions()
+            .map((d) => ({ name: d.name, description: d.description })));
+        modules.push(new ToolSearchTools(proxy, new ToolIndex(allEntries)));
+        // Add SkillTools with empty registry (listToolDefinitions is sync — no I/O).
+        const emptyDispatch = async () => { throw new Error('listToolDefinitions: dispatch unavailable'); };
+        modules.push(new SkillTools(proxy, new SkillRegistry(), emptyDispatch));
+        const defs = [];
+        for (const mod of modules) {
+            for (const d of mod.getDefinitions()) {
+                defs.push({ name: d.name, description: d.description, inputSchema: d.inputSchema, requirements: d.requirements });
+            }
+        }
+        // Also include the emergency stop tool registered directly in initialize()
+        defs.push({
+            name: 'safari_emergency_stop',
+            description: 'Emergency stop — immediately close all agent-owned tabs, activate kill switch, and block all further automation.',
+            inputSchema: { type: 'object', properties: { reason: { type: 'string', description: 'Reason for the emergency stop' } } },
+            requirements: { idempotent: false },
+        });
+        return defs;
+    }
     get sessionTabUrl() {
         return `http://127.0.0.1:19475/session?id=${this.sessionId}`;
     }
@@ -303,6 +363,34 @@ export class SafariPilotServer {
             extensionDiagnosticsTools,
             selectorPackTools,
         ];
+        // Build the tool index from all registered modules, then add the search meta-tool.
+        const toolIndex = new ToolIndex(modules.flatMap((m) => m.getDefinitions().map((d) => ({ name: d.name, description: d.description }))));
+        modules.push(new ToolSearchTools(proxy, toolIndex));
+        // Load skill registry async and add SkillTools.
+        // NOTE: Sub-step dispatch bypasses the security pipeline (tab-ownership,
+        // rate-limit, circuit-breaker, audit). The outer safari_run_skill call is
+        // fully secured; inner steps are not individually audited. Accepted trade-off.
+        const skillRegistry = await SkillRegistry.fromDir('skills');
+        const skillDispatch = async (n, a) => {
+            if (n === 'safari_run_skill' || n === 'safari_list_skills') {
+                throw new Error(`Skill cannot call meta-tool: ${n}`);
+            }
+            for (const m of modules) {
+                const h = m.getHandler(n);
+                if (h) {
+                    const resp = await h(a);
+                    const text = resp.content[0]?.text;
+                    try {
+                        return text ? JSON.parse(text) : null;
+                    }
+                    catch {
+                        return text;
+                    }
+                }
+            }
+            throw new Error(`Skill called unknown tool: ${n}`);
+        };
+        modules.push(new SkillTools(proxy, skillRegistry, skillDispatch));
         for (const module of modules) {
             for (const def of module.getDefinitions()) {
                 const handler = module.getHandler(def.name);
@@ -489,6 +577,7 @@ export class SafariPilotServer {
                         degraded: true,
                         degradedReason: err.message,
                         latencyMs: Date.now() - start,
+                        suggested_next_tools: HUMAN_APPROVAL_SUGGESTED_NEXT_TOOLS,
                     },
                 };
             }
@@ -643,6 +732,7 @@ export class SafariPilotServer {
                             degraded: true,
                             degradedReason: `extension_degraded_approval_required: ${err.message}`,
                             latencyMs: Date.now() - start,
+                            suggested_next_tools: HUMAN_APPROVAL_SUGGESTED_NEXT_TOOLS,
                         },
                     };
                 }