smooth-operator-mcp 3.0.0 → 3.0.2

package/docs/mcp-server.md

@@ -46,10 +46,10 @@ smooth-operator --help
 The interactive installer asks exactly three questions: (1) browser profile
 ownership, (2) headed or headless display, and (3) which Chromium executable to
 use. Its recommended defaults are a managed private persistent profile, headed
-display, and the first detected Chromium executable. It also enables page eval,
-balanced stealth, and short behavioral timing in the native profile; pass the
-corresponding environment flags as `false` when those capabilities are not
-wanted. Managed mode owns its profile. Connected mode launches and attaches to
+display, and the first detected Chromium executable. It also enables page eval
+and the identity-preserving compatibility profile; behavioral timing is off
+for fast deterministic input and can be enabled explicitly. Managed mode owns
+its profile. Connected mode launches and attaches to
 a dedicated debugging profile and does not claim ownership of an operator's
 daily browser.
 
@@ -147,7 +147,9 @@ smooth-operator
 ```
 
 Remote mode is rejected unless the token is at least 32 characters. Do not
-use a token from a shell history, checked-in file, or shared log. A reverse
+use a token from a shell history, checked-in file, or shared log. POST requests
+must declare `Content-Type: application/json`; unsupported media types are
+rejected before their body is read. A reverse
 proxy can add TLS and network access controls, but it does not replace the
 application token, Host/Origin allowlists, or request-size limit. Allowed host
 and origin values are hostnames without a scheme; browser preflight requests
@@ -167,11 +169,11 @@ The managed browser is headed by default for sign-in and human handoff. On CI or
 displayless host, explicitly set `SMOOTH_OPERATOR_BROWSER_HEADLESS=true` or use
 Xvfb. If you set both `SMOOTH_OPERATOR_BROWSER_VIEWPORT_WIDTH` and
 `SMOOTH_OPERATOR_BROWSER_VIEWPORT_HEIGHT`, that explicit viewport is applied to
-the browser and any opt-in stealth page metrics. All local browser tools and
-features are available by default, including page evaluation and the balanced
-stealth/short-behavior profile. Set their environment flags to `false` for a
-stricter or faster profile. See `STEALTH-GUIDE.md` for challenge handling and
-the remaining boundaries.
+the browser and any explicitly configured viewport. All local browser tools and
+features are available by default, including page evaluation and the
+identity-preserving compatibility profile. Behavioral timing is off by default
+for fast deterministic input. See `STEALTH-GUIDE.md` for challenge handling
+and the remaining boundaries.
 
 ### Managed mode (default)
 
@@ -312,10 +314,10 @@ variables include:
 | `SMOOTH_OPERATOR_ALLOWED_FILE_ROOTS` | data `files`, `downloads` | Explicit roots replace defaults |
 | `SMOOTH_OPERATOR_ALLOW_PRIVATE_NETWORK` | `false` | Allows non-loopback private targets when true |
 | `SMOOTH_OPERATOR_ALLOW_EVAL` | `true` | Set `false` to disable page JavaScript |
-| `SMOOTH_OPERATOR_STEALTH_ENABLED` | `true` | Set `false` to preserve raw automation signals |
+| `SMOOTH_OPERATOR_STEALTH_ENABLED` | `true` | Native-identity viewport compatibility script |
 | `SMOOTH_OPERATOR_STEALTH_PROFILE` | `balanced` | `balanced` or `max` compatibility label |
 | `SMOOTH_OPERATOR_STEALTH_GPU` | `false` | Adds opt-in GPU launch flags |
-| `SMOOTH_OPERATOR_BEHAVIOR_ENABLED` | `true` | Set `false` for fastest raw interactions |
+| `SMOOTH_OPERATOR_BEHAVIOR_ENABLED` | `false` | Opt-in timing wrappers |
 | `SMOOTH_OPERATOR_HTTP_HOST` | `127.0.0.1` | HTTP bind host |
 | `SMOOTH_OPERATOR_HTTP_PORT` | `3344` | HTTP bind port |
 | `SMOOTH_OPERATOR_HTTP_PATH` | `/mcp` | HTTP endpoint path |
@@ -328,13 +330,11 @@ variables include:
 
 ### Fast operation mode
 
-The default configuration is a native managed browser with short bounded
-behavioral timing, the conservative stealth baseline, and page evaluation
-available. For the fastest raw interactions, set
-`SMOOTH_OPERATOR_BEHAVIOR_ENABLED=false` and, when appropriate,
-`SMOOTH_OPERATOR_STEALTH_ENABLED=false`; set `SMOOTH_OPERATOR_ALLOW_EVAL=false`
-when page JavaScript is not needed. Tool calls remain bounded and cancellable;
-no hidden planning loop is introduced.
+The default configuration is a native managed browser with page evaluation
+available, native browser identity, and deterministic input. Enable
+`SMOOTH_OPERATOR_BEHAVIOR_ENABLED=true` only when a workflow explicitly needs
+timing wrappers. Tool calls remain bounded and cancellable; no hidden planning
+loop is introduced.
 
 Raw MCP/tool-call speed is not the main bot-detection vector. Sites can score
 network and browser identity, IP reputation, session history, and interaction
@@ -411,13 +411,16 @@ disabled explicitly with `SMOOTH_OPERATOR_ALLOW_EVAL=false`.
 `browser_evaluate` is page JavaScript and is available by default (set
 `SMOOTH_OPERATOR_ALLOW_EVAL=false` when it is not wanted). `browser_exec`
 accepts only a JSON array of validated browser actions; it is not a shell,
-Python, or arbitrary code runner. Destructive batch actions require explicit
+Python, or arbitrary code runner. Its explicit `evaluate` action still follows
+the page-evaluation policy. Destructive batch actions require explicit
 confirmation. `browser_wait_for_human` pauses for an operator to complete a
 visible sign-in or challenge. `browser_solve_challenge` is an internal
 connected-AI observe/act/verify loop: it returns bounded evidence and is
 successful only when a fresh final classification explicitly reports the
-challenge absent. `browser_close_session` closes the one native browser session
-by its explicit session identifier.
+challenge absent; present and exhausted cycles report the remaining attempt
+budget and `automation_exhausted` is the final non-success state.
+`browser_close_session`
+closes the one native browser session by its explicit session identifier.
 
 Actions that leave a usable page—navigation, click, input, select, scroll, key,
 back, forward, and reload—accept optional `includeSnapshot: true`. The action
@@ -472,8 +475,9 @@ The server publishes read-only resources:
 Resource output is bounded and follows the same redaction and policy rules as
 tool output. The capabilities resource also reports the native defaults and
 effective feature flags for local browser tools, page evaluation, stealth, and
-behavioral timing, plus whether challenge success requires an explicit absent
-classification.
+behavioral timing. Its challenge metadata includes the default and maximum
+connected-AI attempt budgets and states that success requires an explicit
+absent classification.
 
 ### Prompts
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "smooth-operator-mcp",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "type": "module",
   "packageManager": "npm@12.0.2",
   "description": "A lightweight, production-grade MCP server for secure browser automation.",