vskill 1.2.3 → 1.2.6

package/dist/webmcp/attribution.js

@@ -0,0 +1,141 @@
+// ---------------------------------------------------------------------------
+// vskill audit-webmcp -- who registered a tool. Pure module: no browser.
+//
+//   first-party  the script is on the page's own site (registrable domain)
+//   platform     the page runs on a hosting platform and the script is that
+//                platform's own code (PLATFORM_HOSTS: host + path prefix,
+//                and only when the page carries the platform's marker)
+//   library      the script comes from a public npm CDN (unpkg, jsDelivr,
+//                esm.sh, cdnjs, jspm, Skypack): a library the page author
+//                chose to load
+//   third-party  any other site. It may still be the site's own asset domain
+//                (assets.targetimg1.com on target.com); we cannot tell.
+// ---------------------------------------------------------------------------
+import { siteOf } from "./score.js";
+/**
+ * Hosting platforms whose own scripts register WebMCP tools on merchant
+ * pages. Add an entry only after seeing it in a scan, and keep the path
+ * prefix narrow: cdn.shopify.com/extensions/ holds third-party app code and
+ * cdn.shopify.com/s/files/ holds any merchant's uploads.
+ */
+export const PLATFORM_HOSTS = [
+    // Shopify storefront WebMCP (seen 2026-10: 92 stores serve it from their own
+    // domain under /cdn/shopifycloud/, cotopaxi.com from cdn.shopify.com).
+    { platform: "Shopify", marker: "shopify", host: "cdn.shopify.com", pathPrefix: "/shopifycloud/" },
+];
+/** Public npm CDNs: the page author picks the package and version. */
+export const LIBRARY_CDN_HOSTS = [
+    "unpkg.com",
+    "cdn.jsdelivr.net",
+    "fastly.jsdelivr.net",
+    "gcore.jsdelivr.net",
+    "esm.sh",
+    "esm.run",
+    "cdnjs.cloudflare.com",
+    "ga.jspm.io",
+    "jspm.dev",
+    "cdn.skypack.dev",
+];
+/** name or name@version from path segments starting at a package name (handles @scope/name). */
+function packageAt(segs, i) {
+    const first = segs[i];
+    if (!first)
+        return undefined;
+    if (first.startsWith("@")) {
+        const second = segs[i + 1];
+        return second ? `${first}/${second}` : undefined;
+    }
+    return first;
+}
+/** The package a public-CDN URL loads, as the URL spells it (e.g. "simple-webmcp@0.3.0"). */
+export function libraryPackage(url) {
+    let u;
+    try {
+        u = new URL(url);
+    }
+    catch {
+        return undefined;
+    }
+    const host = u.hostname.toLowerCase();
+    const segs = u.pathname.split("/").filter(Boolean).map((s) => {
+        try {
+            return decodeURIComponent(s);
+        }
+        catch {
+            return s;
+        }
+    });
+    if (host.endsWith("jsdelivr.net")) {
+        if (segs[0] === "npm")
+            return packageAt(segs, 1);
+        if (segs[0] === "gh" && segs[1] && segs[2])
+            return `gh/${segs[1]}/${segs[2]}`;
+        return undefined;
+    }
+    if (host === "cdnjs.cloudflare.com") {
+        if (segs[0] === "ajax" && segs[1] === "libs" && segs[2])
+            return segs[3] ? `${segs[2]}@${segs[3]}` : segs[2];
+        return undefined;
+    }
+    if (host === "ga.jspm.io" || host === "jspm.dev") {
+        const s = segs.slice();
+        if (s[0]?.startsWith("npm:"))
+            s[0] = s[0].slice(4);
+        return packageAt(s, 0);
+    }
+    if (host === "esm.sh") {
+        let i = 0;
+        while (segs[i] && (/^v\d+$/.test(segs[i]) || segs[i] === "stable"))
+            i++;
+        if (segs[i] === "gh" && segs[i + 1] && segs[i + 2])
+            return `gh/${segs[i + 1]}/${segs[i + 2]}`;
+        return packageAt(segs, i);
+    }
+    if (host === "cdn.skypack.dev") {
+        // Pinned URLs look like /-/name@v1.2.3-<hash>/dist=es2019/...
+        if (segs[0] === "-") {
+            const p = packageAt(segs, 1);
+            return p?.replace(/@v(\d[^-]*)-[A-Za-z0-9]+$/, "@$1");
+        }
+        return packageAt(segs, 0);
+    }
+    return packageAt(segs, 0);
+}
+/**
+ * True when a package spec has no exact version (no @version, or a tag such
+ * as @latest). A full commit SHA on a gh/ spec counts as pinned.
+ */
+export function isUnpinned(pkg) {
+    const at = pkg.lastIndexOf("@");
+    if (at <= 0)
+        return true;
+    const version = pkg.slice(at + 1);
+    if (pkg.startsWith("gh/") && /^[0-9a-f]{40}$/i.test(version))
+        return false;
+    return !/^\d+\.\d+\.\d+/.test(version);
+}
+/**
+ * Classify the script that registered a tool. Returns null when the script
+ * URL is unknown or not http(s).
+ */
+export function classifyRegistrar(registeredBy, pageUrl, platforms = []) {
+    const regSite = siteOf(registeredBy);
+    if (!registeredBy || !regSite)
+        return null;
+    const pageSite = siteOf(pageUrl);
+    if (!pageSite || regSite === pageSite)
+        return { kind: "first-party" };
+    const u = new URL(registeredBy);
+    const host = u.hostname.toLowerCase();
+    for (const p of PLATFORM_HOSTS) {
+        if (host === p.host && u.pathname.startsWith(p.pathPrefix) && platforms.includes(p.marker)) {
+            return { kind: "platform", platform: p.platform };
+        }
+    }
+    if (LIBRARY_CDN_HOSTS.includes(host)) {
+        const pkg = libraryPackage(registeredBy);
+        return pkg ? { kind: "library", package: pkg } : { kind: "library" };
+    }
+    return { kind: "third-party" };
+}
+//# sourceMappingURL=attribution.js.map

package/dist/webmcp/attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribution.js","sourceRoot":"","sources":["../../src/webmcp/attribution.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,+BAA+B;AAC/B,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAE9E,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAcpC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,6EAA6E;IAC7E,uEAAuE;IACvE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE;CAClG,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW;IACX,kBAAkB;IAClB,qBAAqB;IACrB,oBAAoB;IACpB,QAAQ;IACR,SAAS;IACT,sBAAsB;IACtB,YAAY;IACZ,UAAU;IACV,iBAAiB;CAClB,CAAC;AAUF,gGAAgG;AAChG,SAAS,SAAS,CAAC,IAAc,EAAE,CAAS;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5G,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;YAAE,CAAC,EAAE,CAAC;QACxE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,8DAA8D;QAC9D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7B,OAAO,CAAC,EAAE,OAAO,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAuC,EACvC,OAAkC,EAClC,YAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAEtE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC"}

package/dist/webmcp/enumerate.d.ts

@@ -0,0 +1,81 @@
+import type { EnumerationResult } from "./types.js";
+/** Playwright always passes CDPScreenshotNewSurface; a second --enable-features would override it. */
+export declare const CHROMIUM_ARGS: string[];
+export declare const UA_SUFFIX = "vskill-audit-webmcp (+https://verified-skill.com)";
+export declare const PROBE_NAME = "vskill-webmcp-probe";
+interface PwResponse {
+    headers(): Record<string, string>;
+}
+interface PwCdpSession {
+    send(method: string, params?: Record<string, unknown>): Promise<unknown>;
+    on(event: string, handler: (params: any) => void): void;
+    detach(): Promise<void>;
+}
+interface PwPage {
+    goto(url: string, opts: {
+        waitUntil: string;
+        timeout: number;
+    }): Promise<PwResponse | null>;
+    url(): string;
+    evaluate<T>(fn: (...args: any[]) => T | Promise<T>, arg?: unknown): Promise<T>;
+    waitForTimeout(ms: number): Promise<void>;
+    on(event: string, handler: (arg: any) => void): void;
+    close(): Promise<void>;
+}
+interface PwContext {
+    newPage(): Promise<PwPage>;
+    newCDPSession(page: PwPage): Promise<PwCdpSession>;
+    addInitScript(script: {
+        content: string;
+    }): Promise<void>;
+    on(event: string, handler: (arg: any) => void): void;
+    close(): Promise<void>;
+}
+export interface PwBrowser {
+    newContext(opts?: Record<string, unknown>): Promise<PwContext>;
+    close(): Promise<void>;
+    version(): string;
+    isConnected(): boolean;
+}
+interface PwChromium {
+    launch(opts: Record<string, unknown>): Promise<PwBrowser>;
+    executablePath(): string;
+}
+/**
+ * Import playwright-core, then playwright: first from vskill's own install,
+ * then from the current project (so `npm i -D playwright-core` works with npx).
+ * Returns null when neither resolves.
+ */
+export declare function loadChromium(cwd?: string): Promise<PwChromium | null>;
+export declare const PLAYWRIGHT_INSTALL_HINT: string;
+/** Newest Chromium (headless shell preferred) in the usual Playwright cache dirs. */
+export declare function findCachedChromium(dirs?: string[]): string | null;
+/**
+ * Resolve the executable: explicit flag, then VSKILL_CHROMIUM, then
+ * Playwright's own pinned build, then the newest cached build.
+ * Returns undefined when Playwright's default should be used.
+ */
+export declare function resolveExecutablePath(chromium: PwChromium, explicit?: string): string | undefined;
+export declare function launchBrowser(opts?: {
+    executablePath?: string;
+}): Promise<PwBrowser>;
+/**
+ * Runs before any page script in every frame. Wraps registerTool to record
+ * the descriptor (minus execute) and the caller's stack. The page's own
+ * registerTool still runs unchanged.
+ */
+export declare const INIT_SCRIPT = "(() => {\n  const KEY = Symbol.for(\"vskill.webmcp\");\n  if (window[KEY]) return;\n  const log = [];\n  try { Object.defineProperty(window, KEY, { value: log, enumerable: false }); } catch (e) { return; }\n  // Crawl safety: the audit loads one page; popups (popunders, auto-opened tabs) never load.\n  try { window.open = function open() { return null; }; } catch (e) {}\n  let proto = null;\n  try {\n    proto = (typeof ModelContext !== \"undefined\" && ModelContext.prototype) ||\n      (document.modelContext && Object.getPrototypeOf(document.modelContext));\n  } catch (e) {}\n  if (!proto || typeof proto.registerTool !== \"function\") return;\n  const safe = (v) => { try { return v === undefined ? undefined : JSON.parse(JSON.stringify(v)); } catch (e) { return undefined; } };\n  const str = (v) => (typeof v === \"string\" ? v : undefined);\n  const orig = proto.registerTool;\n  const wrapped = function registerTool(tool, options) {\n    try {\n      const t = tool || {};\n      const rec = {\n        name: String(t.name == null ? \"\" : t.name),\n        title: str(t.title),\n        description: str(t.description),\n        inputSchema: typeof t.inputSchema === \"string\" ? t.inputSchema : safe(t.inputSchema),\n        annotations: safe(t.annotations),\n        exposedTo: safe((options && options.exposedTo) !== undefined ? options.exposedTo : t.exposedTo),\n        stack: String(new Error().stack || \"\"),\n      };\n      log.push(rec);\n      const signal = options && options.signal;\n      if (signal && typeof signal.addEventListener === \"function\") {\n        signal.addEventListener(\"abort\", () => log.push({ name: rec.name, unregistered: true }), { once: true });\n      }\n    } catch (e) {}\n    return orig.apply(this, arguments);\n  };\n  try { Object.defineProperty(proto, \"registerTool\", { value: wrapped, writable: true, configurable: true }); } catch (e) {}\n  if (typeof proto.unregisterTool === \"function\") {\n    const origUn = proto.unregisterTool;\n    try {\n      Object.defineProperty(proto, \"unregisterTool\", {\n        value: function unregisterTool(name) {\n          try { log.push({ name: String(name), unregistered: true }); } catch (e) {}\n          return origUn.apply(this, arguments);\n        },\n        writable: true,\n        configurable: true,\n      });\n    } catch (e) {}\n  }\n})();\n//# sourceURL=vskill-webmcp-probe.js";
+export interface EnumerateOptions {
+    timeoutMs: number;
+    /** Max wait after load for registrations to stop (default 5000). */
+    settleMs?: number;
+    /** Quiet period that ends the settle wait early (default 1500). */
+    quietMs?: number;
+    userAgent?: string;
+    /** Aborting closes the browser context, which ends any pending page work. */
+    signal?: AbortSignal;
+}
+/** Browser UA with our suffix, read once per browser. */
+export declare function userAgentFor(browser: PwBrowser): Promise<string>;
+export declare function enumerateSite(browser: PwBrowser, url: string, opts: EnumerateOptions): Promise<EnumerationResult>;
+export {};

package/dist/webmcp/enumerate.js

@@ -0,0 +1,436 @@
+// ---------------------------------------------------------------------------
+// vskill audit-webmcp -- headless Chromium enumeration of WebMCP tools.
+//
+// Playwright is an optional peer: we import 'playwright-core' or 'playwright'
+// at runtime and never add it as a dependency. Each URL loads once in its own
+// browser context. We read tool descriptors only: no tool is invoked or
+// executed, no form is submitted, nothing is clicked, downloads are refused,
+// dialogs dismissed, popups closed and service workers blocked.
+// ---------------------------------------------------------------------------
+import { existsSync, readdirSync } from "node:fs";
+import { createRequire } from "node:module";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { mergeTools, scriptUrlFromStack } from "./merge.js";
+/** Playwright always passes CDPScreenshotNewSurface; a second --enable-features would override it. */
+export const CHROMIUM_ARGS = ["--enable-features=CDPScreenshotNewSurface,WebMCP"];
+export const UA_SUFFIX = "vskill-audit-webmcp (+https://verified-skill.com)";
+export const PROBE_NAME = "vskill-webmcp-probe";
+/**
+ * Import playwright-core, then playwright: first from vskill's own install,
+ * then from the current project (so `npm i -D playwright-core` works with npx).
+ * Returns null when neither resolves.
+ */
+export async function loadChromium(cwd = process.cwd()) {
+    const projectRequire = createRequire(join(cwd, "noop.js"));
+    for (const specifier of ["playwright-core", "playwright"]) {
+        const attempts = [
+            () => import(specifier),
+            () => import(pathToFileURL(projectRequire.resolve(specifier)).href),
+        ];
+        for (const attempt of attempts) {
+            try {
+                const mod = await attempt();
+                const chromium = mod.chromium ?? mod.default?.chromium;
+                if (chromium)
+                    return chromium;
+            }
+            catch {
+                // try the next one
+            }
+        }
+    }
+    return null;
+}
+export const PLAYWRIGHT_INSTALL_HINT = [
+    "audit-webmcp needs Playwright and a Chromium build. Install them with:",
+    "  npm i -D playwright-core        (in the project you run vskill from; or npm i -g alongside a global vskill)",
+    "  npx playwright install chromium-headless-shell",
+    "Or point at an existing build with --executable-path <path> or VSKILL_CHROMIUM=<path>.",
+].join("\n");
+// ---- Finding a Chromium build ----------------------------------------------
+function browserCacheDirs() {
+    const dirs = [];
+    if (process.env.PLAYWRIGHT_BROWSERS_PATH && process.env.PLAYWRIGHT_BROWSERS_PATH !== "0") {
+        dirs.push(process.env.PLAYWRIGHT_BROWSERS_PATH);
+    }
+    const home = homedir();
+    dirs.push(join(home, "Library", "Caches", "ms-playwright"));
+    dirs.push(join(home, ".cache", "ms-playwright"));
+    if (process.env.LOCALAPPDATA)
+        dirs.push(join(process.env.LOCALAPPDATA, "ms-playwright"));
+    dirs.push("/opt/pw-browsers");
+    return dirs;
+}
+const BINARY_CANDIDATES = [
+    {
+        prefix: "chromium_headless_shell-",
+        paths: [
+            ["chrome-headless-shell-mac-arm64", "chrome-headless-shell"],
+            ["chrome-headless-shell-mac-x64", "chrome-headless-shell"],
+            ["chrome-headless-shell-linux64", "chrome-headless-shell"],
+            ["chrome-headless-shell-linux-arm64", "chrome-headless-shell"],
+            ["chrome-linux", "headless_shell"],
+            ["chrome-headless-shell-win64", "chrome-headless-shell.exe"],
+        ],
+    },
+    {
+        prefix: "chromium-",
+        paths: [
+            ["chrome-mac-arm64", "Google Chrome for Testing.app", "Contents", "MacOS", "Google Chrome for Testing"],
+            ["chrome-mac", "Chromium.app", "Contents", "MacOS", "Chromium"],
+            ["chrome-linux64", "chrome"],
+            ["chrome-linux", "chrome"],
+            ["chrome-win64", "chrome.exe"],
+            ["chrome-win", "chrome.exe"],
+        ],
+    },
+];
+/** Newest Chromium (headless shell preferred) in the usual Playwright cache dirs. */
+export function findCachedChromium(dirs = browserCacheDirs()) {
+    for (const { prefix, paths } of BINARY_CANDIDATES) {
+        const found = [];
+        for (const dir of dirs) {
+            let entries;
+            try {
+                entries = readdirSync(dir);
+            }
+            catch {
+                continue;
+            }
+            for (const e of entries) {
+                if (!e.startsWith(prefix))
+                    continue;
+                const rev = parseInt(e.slice(prefix.length), 10);
+                if (Number.isNaN(rev))
+                    continue;
+                for (const segs of paths) {
+                    const p = join(dir, e, ...segs);
+                    if (existsSync(p))
+                        found.push({ rev, path: p });
+                }
+            }
+        }
+        found.sort((a, b) => b.rev - a.rev);
+        if (found.length)
+            return found[0].path;
+    }
+    return null;
+}
+/**
+ * Resolve the executable: explicit flag, then VSKILL_CHROMIUM, then
+ * Playwright's own pinned build, then the newest cached build.
+ * Returns undefined when Playwright's default should be used.
+ */
+export function resolveExecutablePath(chromium, explicit) {
+    if (explicit)
+        return explicit;
+    if (process.env.VSKILL_CHROMIUM)
+        return process.env.VSKILL_CHROMIUM;
+    try {
+        const def = chromium.executablePath();
+        if (def && existsSync(def))
+            return undefined;
+    }
+    catch {
+        // fall through
+    }
+    return findCachedChromium() ?? undefined;
+}
+export async function launchBrowser(opts = {}) {
+    const chromium = await loadChromium();
+    if (!chromium) {
+        const err = new Error(PLAYWRIGHT_INSTALL_HINT);
+        err.code = "VSKILL_NO_PLAYWRIGHT";
+        throw err;
+    }
+    const executablePath = resolveExecutablePath(chromium, opts.executablePath);
+    return chromium.launch({
+        headless: true,
+        args: CHROMIUM_ARGS,
+        ...(executablePath ? { executablePath } : {}),
+    });
+}
+// ---- In-page probe ---------------------------------------------------------
+/**
+ * Runs before any page script in every frame. Wraps registerTool to record
+ * the descriptor (minus execute) and the caller's stack. The page's own
+ * registerTool still runs unchanged.
+ */
+export const INIT_SCRIPT = `(() => {
+  const KEY = Symbol.for("vskill.webmcp");
+  if (window[KEY]) return;
+  const log = [];
+  try { Object.defineProperty(window, KEY, { value: log, enumerable: false }); } catch (e) { return; }
+  // Crawl safety: the audit loads one page; popups (popunders, auto-opened tabs) never load.
+  try { window.open = function open() { return null; }; } catch (e) {}
+  let proto = null;
+  try {
+    proto = (typeof ModelContext !== "undefined" && ModelContext.prototype) ||
+      (document.modelContext && Object.getPrototypeOf(document.modelContext));
+  } catch (e) {}
+  if (!proto || typeof proto.registerTool !== "function") return;
+  const safe = (v) => { try { return v === undefined ? undefined : JSON.parse(JSON.stringify(v)); } catch (e) { return undefined; } };
+  const str = (v) => (typeof v === "string" ? v : undefined);
+  const orig = proto.registerTool;
+  const wrapped = function registerTool(tool, options) {
+    try {
+      const t = tool || {};
+      const rec = {
+        name: String(t.name == null ? "" : t.name),
+        title: str(t.title),
+        description: str(t.description),
+        inputSchema: typeof t.inputSchema === "string" ? t.inputSchema : safe(t.inputSchema),
+        annotations: safe(t.annotations),
+        exposedTo: safe((options && options.exposedTo) !== undefined ? options.exposedTo : t.exposedTo),
+        stack: String(new Error().stack || ""),
+      };
+      log.push(rec);
+      const signal = options && options.signal;
+      if (signal && typeof signal.addEventListener === "function") {
+        signal.addEventListener("abort", () => log.push({ name: rec.name, unregistered: true }), { once: true });
+      }
+    } catch (e) {}
+    return orig.apply(this, arguments);
+  };
+  try { Object.defineProperty(proto, "registerTool", { value: wrapped, writable: true, configurable: true }); } catch (e) {}
+  if (typeof proto.unregisterTool === "function") {
+    const origUn = proto.unregisterTool;
+    try {
+      Object.defineProperty(proto, "unregisterTool", {
+        value: function unregisterTool(name) {
+          try { log.push({ name: String(name), unregistered: true }); } catch (e) {}
+          return origUn.apply(this, arguments);
+        },
+        writable: true,
+        configurable: true,
+      });
+    } catch (e) {}
+  }
+})();
+//# sourceURL=${PROBE_NAME}.js`;
+/** Evaluated in the page after it settles. Reads, never executes. */
+function snapshotInPage() {
+    const w = window;
+    const d = document;
+    const mc = d.modelContext;
+    const out = {
+        documentModelContext: !!mc,
+        navigatorModelContext: "modelContext" in navigator,
+        captured: [],
+        listed: null,
+        platforms: [],
+    };
+    // Hosting-platform markers (attribution.ts PLATFORM_HOSTS). Shopify storefronts
+    // set window.Shopify.shop to the store's myshopify.com name and emit these metas.
+    try {
+        const shop = w.Shopify;
+        const shopifyMeta = d.querySelector('meta[name="shopify-checkout-api-token"], meta[name="shopify-digital-wallet"]');
+        if ((shop && typeof shop === "object" && typeof shop.shop === "string") || shopifyMeta || /\.myshopify\.com$/i.test(location.hostname)) {
+            out.platforms.push("shopify");
+        }
+    }
+    catch {
+        // markers are best effort
+    }
+    const log = w[Symbol.for("vskill.webmcp")];
+    if (Array.isArray(log))
+        out.captured = log.slice();
+    if (!mc || typeof mc.getTools !== "function")
+        return Promise.resolve(out);
+    const clone = (v) => {
+        try {
+            return v === undefined ? undefined : JSON.parse(JSON.stringify(v));
+        }
+        catch {
+            return undefined;
+        }
+    };
+    return Promise.race([
+        Promise.resolve(mc.getTools()),
+        new Promise((_, reject) => setTimeout(() => reject(new Error("getTools() timed out")), 3000)),
+    ])
+        .then((tools) => {
+        out.listed = Array.from(tools || []).map((t) => ({
+            name: String(t.name),
+            title: typeof t.title === "string" ? t.title : undefined,
+            description: typeof t.description === "string" ? t.description : undefined,
+            inputSchema: typeof t.inputSchema === "string" ? t.inputSchema : clone(t.inputSchema),
+            annotations: clone(t.annotations),
+            origin: typeof t.origin === "string" ? t.origin : undefined,
+            exposedTo: clone(t.exposedTo),
+        }));
+        return out;
+    })
+        .catch((e) => {
+        out.getToolsError = String(e);
+        return out;
+    });
+}
+/** Reject when `p` takes longer than `ms` (a page stuck in a busy loop never answers evaluate). */
+function withTimeout(p, ms, what) {
+    let timer;
+    return Promise.race([
+        p,
+        new Promise((_, reject) => {
+            timer = setTimeout(() => reject(new Error(`${what} timed out after ${ms}ms`)), ms);
+        }),
+    ]).finally(() => clearTimeout(timer));
+}
+function firstLine(e) {
+    const msg = e instanceof Error ? e.message : String(e);
+    return msg.split("\n")[0].replace(/^page\.goto:\s*/, "").trim();
+}
+function cdpToolList(params) {
+    if (Array.isArray(params?.tools))
+        return params.tools;
+    if (params?.tool)
+        return [params.tool];
+    if (params?.name)
+        return [params];
+    return [];
+}
+/** Browser UA with our suffix, read once per browser. */
+export async function userAgentFor(browser) {
+    const ctx = await browser.newContext();
+    try {
+        const page = await ctx.newPage();
+        const ua = await page.evaluate(() => navigator.userAgent);
+        return `${ua} ${UA_SUFFIX}`;
+    }
+    finally {
+        await ctx.close();
+    }
+}
+export async function enumerateSite(browser, url, opts) {
+    const settleMs = opts.settleMs ?? 5000;
+    const quietMs = opts.quietMs ?? 1500;
+    const result = {
+        url,
+        finalUrl: null,
+        documentModelContext: false,
+        navigatorModelContext: false,
+        permissionsPolicy: null,
+        platforms: [],
+        tools: [],
+    };
+    if (opts.signal?.aborted) {
+        result.error = "aborted";
+        return result;
+    }
+    const ctx = await browser.newContext({
+        acceptDownloads: false,
+        javaScriptEnabled: true,
+        serviceWorkers: "block",
+        ...(opts.userAgent ? { userAgent: opts.userAgent } : {}),
+    });
+    const onAbort = () => {
+        ctx.close().catch(() => { });
+    };
+    opts.signal?.addEventListener("abort", onAbort, { once: true });
+    try {
+        await ctx.addInitScript({ content: INIT_SCRIPT });
+        const page = await ctx.newPage();
+        page.on("dialog", (d) => {
+            d.dismiss().catch(() => { });
+        });
+        // window.open popups would load more pages we never asked for: close them.
+        ctx.on("page", (p) => {
+            if (p !== page)
+                p.close().catch(() => { });
+        });
+        const cdpEvents = [];
+        try {
+            const cdp = await ctx.newCDPSession(page);
+            cdp.on("WebMCP.toolsAdded", (p) => {
+                for (const t of cdpToolList(p))
+                    if (t?.name)
+                        cdpEvents.push({ ...t, name: String(t.name) });
+            });
+            cdp.on("WebMCP.toolsRemoved", (p) => {
+                const names = Array.isArray(p?.names) ? p.names : cdpToolList(p).map((t) => t?.name ?? t);
+                for (const n of names)
+                    if (typeof n === "string")
+                        cdpEvents.push({ name: n, removed: true });
+            });
+            await cdp.send("WebMCP.enable");
+        }
+        catch {
+            // Older Chromium without the WebMCP domain: rely on the other sources.
+        }
+        try {
+            const response = await page.goto(url, { waitUntil: "load", timeout: opts.timeoutMs });
+            const headers = response?.headers() ?? {};
+            result.permissionsPolicy = headers["permissions-policy"] ?? null;
+        }
+        catch (e) {
+            const msg = firstLine(e);
+            if (!/timeout/i.test(msg) || page.url() === "about:blank") {
+                result.error = msg;
+                result.finalUrl = page.url() === "about:blank" ? null : page.url();
+                return result;
+            }
+            result.error = `${msg} (partial: tools registered before the timeout are included)`;
+        }
+        // Wait for registrations to stop: at most settleMs, done early after quietMs without change.
+        const countNow = async () => {
+            const captured = await withTimeout(page.evaluate(() => {
+                const log = window[Symbol.for("vskill.webmcp")];
+                return Array.isArray(log) ? log.length : 0;
+            }), 2000, "page.evaluate").catch(() => 0);
+            return captured + cdpEvents.length;
+        };
+        const start = Date.now();
+        let last = await countNow();
+        let lastChange = Date.now();
+        while (Date.now() - start < settleMs) {
+            await page.waitForTimeout(250);
+            const n = await countNow();
+            if (n !== last) {
+                last = n;
+                lastChange = Date.now();
+            }
+            else if (Date.now() - lastChange >= quietMs) {
+                break;
+            }
+        }
+        result.finalUrl = page.url();
+        const readSnapshot = () => withTimeout(page.evaluate(snapshotInPage), 10_000, "reading tools from the page");
+        let snap;
+        try {
+            snap = await readSnapshot();
+        }
+        catch (e) {
+            // The page navigated itself (client-side redirect) mid-read: read the new document once more.
+            if (!/context was destroyed|navigat/i.test(String(e)))
+                throw e;
+            await page.waitForTimeout(1000);
+            snap = await readSnapshot();
+        }
+        result.finalUrl = page.url();
+        result.documentModelContext = snap.documentModelContext;
+        result.navigatorModelContext = snap.navigatorModelContext;
+        result.platforms = snap.platforms;
+        const captured = snap.captured.map(({ stack, ...rest }) => ({
+            ...rest,
+            scriptUrl: rest.unregistered ? undefined : scriptUrlFromStack(stack, PROBE_NAME),
+        }));
+        result.tools = mergeTools({
+            pageUrl: result.finalUrl,
+            captured,
+            cdp: cdpEvents,
+            listed: snap.listed,
+            platforms: snap.platforms,
+        });
+    }
+    catch (e) {
+        result.error = result.error ?? firstLine(e);
+    }
+    finally {
+        opts.signal?.removeEventListener("abort", onAbort);
+        await ctx.close().catch(() => { });
+    }
+    return result;
+}
+//# sourceMappingURL=enumerate.js.map