wield-mcp 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wield (wield.run)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,86 @@
-# Temporary Holding Version
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/wield-mcp/assets/wield-mark.svg" width="96" height="96" alt="Wield"></p>
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# wield-mcp
+
+**Websites as tools for your AI agent. Your logins never leave your computer.**
+
+Wield gives Claude, Cursor, Codex or any MCP client dozens of websites as fast, reliable tools: train connections, second-hand listings, doctor appointments, food delivery, shopping, housing. Each task is a *recipe*: a reviewed, signed description of the requests a site's own pages make. Wield runs it in a tab of that site **in your own browser, with your own session**, and returns structured data, usually in under a second.
+
+- **Private:** requests go from your browser to the website, nowhere else. Passwords, cookies and results never reach Wield's servers; in the site's tab Wield reads only the tokens a recipe names. Every request is logged on your computer.
+- **Safe:** recipes are Ed25519-signed and can only reach the hosts they list. Anything that changes data (booking, sending a message) waits for your **Allow** in the browser, showing exactly what will be sent.
+- **Fast:** no screenshots, no clicking through pages. One recipe, a few requests, structured output.
+
+## Install
+
+You need Node.js 20+ and a Chromium browser: Chrome, Edge, Brave, Arc, Vivaldi, Opera or Chromium. Works on macOS, Windows and Linux.
+
+```bash
+npx -y wield-mcp init
+```
+
+`init` does the following:
+- installs Wield into `~/.wield`;
+- registers its bridge with your browsers;
+- asks, app by app, whether to add Wield to Claude Desktop, Claude Code, Cursor and Codex, making a backup of each config file first;
+- shows you how to add the Wield browser extension;
+- runs one live sample, ending in "Wield is ready".
+
+**Claude Desktop** also has a one-click bundle at [wield.run/install](https://wield.run/install).
+
+```bash
+npx -y wield-mcp doctor   # check every link and get a fix for each problem
+npx -y wield-mcp check    # one live sample through your browser
+npx -y wield-mcp demo     # three sites, then every host your computer contacted
+```
+
+### Adding it to an MCP client by hand
+
+Run `init` once first (it installs the bridge your browser needs). Then:
+
+```json
+{ "mcpServers": { "wield": { "command": "npx", "args": ["-y", "wield-mcp"] } } }
+```
+
+## Tools
+
+| Tool | What it does |
+|---|---|
+| `find_recipe` | Find a ready-made task for what the user wants, in German or English |
+| `run` | Run a recipe in the user's browser and return its structured output. Writes need the user's Allow |
+| `list_sites` | The sites Wield can use, with their tasks and the user's login state |
+| `status` | Is the browser connected; registry, signatures, account and policy |
+| `request_recipe` | Ask for a recipe for a new site, or record the task once to build a private one (Pro/Team) |
+
+## Configuration
+
+`~/.wield/config.json`:
+
+```json
+{ "registry_url": "https://wield.run/api/v1", "telemetry": false, "country": "DE", "api_key": "wld_…" }
+```
+
+| Setting | Default | Notes |
+|---|---|---|
+| `telemetry` | `false` | When on, each run sends only `{recipe_id, version, ok, duration_ms, error_code}` |
+| `country` | from your time zone | Search ranking prefers sites in this country |
+| `api_key` | none | For private recipes, your organization's policy and the recipe builder (Pro and Team plans) |
+
+The same settings can come from environment variables: `WIELD_TELEMETRY`, `WIELD_COUNTRY`, `WIELD_API_KEY`, `WIELD_REGISTRY_URL`, `WIELD_HOME`.
+
+## What leaves your computer
+
+| Destination | What |
+|---|---|
+| Your browser → the website | Each recipe's requests, with your session, to the hosts the recipe lists |
+| wield-mcp → wield.run | Downloads of the public recipe index and recipes (signed). With an API key: your organization's private recipes and policy |
+| Nothing else | Telemetry is off unless you turn it on |
+
+Logs of both are kept on your computer: `~/.wield/logs/executor-*.ndjson` and `mcp-*.ndjson`. They hold method, host, path, status and timing, never bodies or query values.
+
+## Links
+
+- [Documentation](https://wield.run/docs): quick start, how it works, security model, tools, recipe format.
+- [Troubleshooting](https://wield.run/docs/troubleshooting)
+- [Privacy](https://wield.run/privacy)
+
+MIT licensed.

package/SETUP_PROMPT.md

@@ -0,0 +1,25 @@
+# Wield setup prompt ("paste into Claude Code")
+
+For C6 / the site: render the text between the markers verbatim, with a copy button. It assumes `wield-mcp` is
+published on npm (it is not yet: `private: true` in apps/mcp/package.json until Victor publishes). The terminal
+alternative for people who prefer it is the one-liner at the bottom.
+
+<!-- prompt:start -->
+```text
+Set up Wield (wield.run) on this computer. Wield lets you use websites for me through my own Chrome, with my own logins; my passwords and cookies never leave this machine, and you never need them.
+
+1. Run `node -v`. If Node is missing or older than v20, tell me how to install Node 20+ for my OS and stop.
+2. Run `npx -y wield-mcp@latest init --no-wait` and show me its output. Then list which AI apps it found (Claude Desktop, Claude Code, Cursor, Codex) and ask me which ones to connect. When I answer, run `npx -y wield-mcp@latest init --yes --no-wait` only if I said all of them; otherwise for each app I chose, add the "Manual config" it printed to that app yourself, backing up the file first. Never touch an app I didn't choose. If it reports that Claude Desktop is running, tell me to quit Claude Desktop (Cmd+Q) and then run the same command again, because Claude Desktop overwrites config edits made while it is open.
+3. Tell me to load the Wield extension in Chrome: open chrome://extensions, switch on Developer mode, click "Load unpacked", press Cmd+Shift+G (Linux: Ctrl+L), paste ~/.wield/extension, press Return, then Select. The card must show the ID mkgnkapppehppdfjgohaoclabmjgfkgn. Wait until I say it's done.
+4. Run `~/.wield/bin/wield doctor`. If it reports problems, fix the ones you can and tell me exactly what to click for the rest, then run it again until it says "All good".
+5. Tell me which apps to restart, and that in a new Claude Code session I can ask things like "find me a train from Berlin to Munich tomorrow" or "Kleinanzeigen bikes in Berlin under 300 €".
+
+Do not ask me for any password, and do not log in to any website for me.
+```
+<!-- prompt:end -->
+
+Terminal alternative (asks before changing each app, then waits for the extension):
+
+```bash
+npx -y wield-mcp@latest init
+```

package/assets/wield-app-icon.svg

@@ -0,0 +1,2 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="512" height="512"><defs><linearGradient id="hd" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#ffd85a"/><stop offset=".5" stop-color="#ff9a24"/><stop offset="1" stop-color="#ff5200"/></linearGradient>
+<linearGradient id="ht" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#ff6a0a"/><stop offset="1" stop-color="#f6ece0"/></linearGradient></defs><rect width="24" height="24" rx="5.4" fill="#16110c"/><g transform="translate(3.4 3.4) scale(0.7166666666666667)"><g transform="translate(0 -2.45)"><path d="M7.0 11.6 2.4 16.6 7.0 21.6M17.0 11.6 21.6 16.6 17.0 21.6" fill="none" stroke="#f6ece0" stroke-width="2.7" stroke-linecap="round" stroke-linejoin="round"/><path d="M11.0 21.6 12.6 10.28" stroke="#f6ece0" stroke-width="2.3" stroke-linecap="round"/><g transform="translate(12.6 10.28) rotate(8.045051779050041)"><rect x="-1.15" y="-.2" width="2.3" height="2.4" fill="url(#ht)"/></g><g transform="translate(12.908 8.102) rotate(8.05) scale(0.84)"><path d="M-4.6 -1.9 -2.9 -1.9 -2.4 -1.5 1.3 -1.5 4.4 -0.55 4.6 -0.2 4.6 0.2 4.4 0.55 1.3 1.5 -2.4 1.5 -2.9 1.9 -4.6 1.9Z" fill="url(#hd)" stroke="url(#hd)" stroke-width=".35" stroke-linejoin="round"/><path d="M-4.2 -1.25H-2.9M-1.9 -.95H1.0" stroke="#fff1b8" stroke-width=".55" stroke-linecap="round" opacity=".85"/><rect x="-1.4" y="1.35" width="2.8" height=".8" rx=".3" fill="#f6ece0"/></g><rect x="7.01" y="5.50" width="1.3" height="1.3" fill="#ffc23d"/><rect x="5.41" y="7.20" width=".9" height=".9" fill="#ff8a1f"/></g></g></svg>

package/assets/wield-mark.svg

@@ -0,0 +1,2 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="512" height="512"><defs><linearGradient id="hd" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#ffd85a"/><stop offset=".5" stop-color="#ff9a24"/><stop offset="1" stop-color="#ff5200"/></linearGradient>
+<linearGradient id="ht" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#ff6a0a"/><stop offset="1" stop-color="#16110c"/></linearGradient></defs><g transform="translate(0 -2.45)"><path d="M7.0 11.6 2.4 16.6 7.0 21.6M17.0 11.6 21.6 16.6 17.0 21.6" fill="none" stroke="#16110c" stroke-width="2.7" stroke-linecap="round" stroke-linejoin="round"/><path d="M11.0 21.6 12.6 10.28" stroke="#16110c" stroke-width="2.3" stroke-linecap="round"/><g transform="translate(12.6 10.28) rotate(8.045051779050041)"><rect x="-1.15" y="-.2" width="2.3" height="2.4" fill="url(#ht)"/></g><g transform="translate(12.908 8.102) rotate(8.05) scale(0.84)"><path d="M-4.6 -1.9 -2.9 -1.9 -2.4 -1.5 1.3 -1.5 4.4 -0.55 4.6 -0.2 4.6 0.2 4.4 0.55 1.3 1.5 -2.4 1.5 -2.9 1.9 -4.6 1.9Z" fill="url(#hd)" stroke="url(#hd)" stroke-width=".35" stroke-linejoin="round"/><path d="M-4.2 -1.25H-2.9M-1.9 -.95H1.0" stroke="#fff1b8" stroke-width=".55" stroke-linecap="round" opacity=".85"/><rect x="-1.4" y="1.35" width="2.8" height=".8" rx=".3" fill="#16110c"/></g><rect x="7.01" y="5.50" width="1.3" height="1.3" fill="#ffc23d"/><rect x="5.41" y="7.20" width=".9" height=".9" fill="#ff8a1f"/></g></svg>

package/dist/bridge.js

@@ -0,0 +1,433 @@
+// src/bridge.ts
+import { appendFileSync, chmodSync, existsSync, lstatSync, mkdirSync, unlinkSync, writeFileSync } from "fs";
+import { createConnection, createServer } from "net";
+import { basename, dirname, join as join2 } from "path";
+
+// src/native.ts
+var MAX_TO_EXTENSION = 1024 * 1024;
+var MAX_FROM_EXTENSION = 64 * 1024 * 1024;
+function encodeNative(msg) {
+  const json = Buffer.from(JSON.stringify(msg), "utf8");
+  const header = Buffer.alloc(4);
+  header.writeUInt32LE(json.length, 0);
+  return Buffer.concat([header, json]);
+}
+function readNative(input, onMessage, onError) {
+  let buf = Buffer.alloc(0);
+  input.on("data", (chunk) => {
+    buf = buf.length ? Buffer.concat([buf, chunk]) : chunk;
+    for (; ; ) {
+      if (buf.length < 4) return;
+      const len = buf.readUInt32LE(0);
+      if (len > MAX_FROM_EXTENSION) {
+        onError(new Error(`native message too large (${len} bytes)`));
+        buf = Buffer.alloc(0);
+        return;
+      }
+      if (buf.length < 4 + len) return;
+      const body = buf.subarray(4, 4 + len);
+      buf = buf.subarray(4 + len);
+      let msg;
+      try {
+        msg = JSON.parse(body.toString("utf8"));
+      } catch (e) {
+        onError(new Error(`invalid JSON from extension: ${e.message}`));
+        continue;
+      }
+      onMessage(msg);
+    }
+  });
+}
+function makeNativeWriter(output) {
+  return (msg) => {
+    const frame = encodeNative(msg);
+    if (frame.length - 4 > MAX_TO_EXTENSION) return { ok: false, size: frame.length - 4 };
+    output.write(frame);
+    return { ok: true };
+  };
+}
+
+// src/paths.ts
+import { createHash } from "crypto";
+import { homedir, userInfo } from "os";
+import { join } from "path";
+function wieldHome() {
+  return process.env.WIELD_HOME || join(homedir(), ".wield");
+}
+function expandHome(p) {
+  return p.startsWith("~/") ? join(homedir(), p.slice(2)) : p;
+}
+function defaultSocketPath(home, platform = process.platform) {
+  if (platform === "win32") {
+    let user = "user";
+    try {
+      user = userInfo().username.replace(/[^A-Za-z0-9_.-]/g, "_").slice(0, 40) || "user";
+    } catch {
+    }
+    return `\\\\.\\pipe\\wield-${user}-${createHash("sha256").update(home.toLowerCase()).digest("hex").slice(0, 12)}`;
+  }
+  const p = join(home, "bridge.sock");
+  if (Buffer.byteLength(p) <= MAX_SOCKET_PATH) return p;
+  const uid = typeof process.getuid === "function" ? process.getuid() : 0;
+  const dir = process.env.XDG_RUNTIME_DIR && process.env.XDG_RUNTIME_DIR.length < 40 ? process.env.XDG_RUNTIME_DIR : "/tmp";
+  return join(dir, `wield-${uid}-${createHash("sha256").update(home).digest("hex").slice(0, 12)}.sock`);
+}
+var MAX_SOCKET_PATH = 100;
+var isPipe = (p) => p.startsWith("\\\\.\\pipe\\");
+function socketPath() {
+  return expandHome(process.env.WIELD_SOCKET || defaultSocketPath(wieldHome()));
+}
+function logDir() {
+  return join(wieldHome(), "logs");
+}
+function day(d = /* @__PURE__ */ new Date()) {
+  const p = (n) => String(n).padStart(2, "0");
+  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}`;
+}
+
+// src/bridge.ts
+var EVENT_DATA_KEYS = ["method", "origin", "path", "status", "ms", "bytes"];
+var REQUESTS = { status: "status_result", policy: "policy_ack", index: "index_ack", record_start: "recording" };
+var REPLIES = new Set(Object.values(REQUESTS));
+var NOTIFY = /* @__PURE__ */ new Set(["warm"]);
+var REC_ID = /^[A-Za-z0-9_-]{1,64}$/;
+var Bridge = class {
+  constructor(o) {
+    this.o = o;
+    this.toExtension = makeNativeWriter(o.output);
+  }
+  o;
+  server = null;
+  clients = /* @__PURE__ */ new Set();
+  runOwner = /* @__PURE__ */ new Map();
+  reqOwner = /* @__PURE__ */ new Map();
+  helloQueue = [];
+  lastHelloAck = null;
+  nextId = 1;
+  closed = false;
+  toExtension;
+  async start() {
+    mkdirSync(this.o.logDir, { recursive: true, mode: 448 });
+    const pipe = isPipe(this.o.socketPath);
+    if (!pipe) {
+      const dir = dirname(this.o.socketPath);
+      const created = mkdirSync(dir, { recursive: true, mode: 448 });
+      if (created || basename(dir) === ".wield" || dir === dirname(this.o.logDir)) {
+        try {
+          chmodSync(dir, 448);
+        } catch {
+        }
+      }
+      await this.clearStaleSocket();
+    }
+    readNative(
+      this.o.input,
+      (m) => this.fromExtension(m),
+      (err) => this.debug(`native: ${err.message}`)
+    );
+    this.o.input.on("end", () => void this.close("Chrome disconnected"));
+    this.o.input.on("close", () => void this.close("Chrome disconnected"));
+    this.server = createServer((sock) => this.onClient(sock));
+    const oldMask = process.umask(127);
+    try {
+      await new Promise((resolve, reject) => {
+        this.server.once("error", reject);
+        this.server.listen(this.o.socketPath, () => resolve());
+      });
+    } finally {
+      process.umask(oldMask);
+    }
+    if (!pipe) chmodSync(this.o.socketPath, 384);
+    this.log({ kind: "bridge", msg: `bridge started (pid ${process.pid})` });
+    this.debug(`listening on ${this.o.socketPath}`);
+  }
+  async close(reason = "bridge stopped") {
+    if (this.closed) return;
+    this.closed = true;
+    for (const h of this.helloQueue) clearTimeout(h.timer);
+    this.helloQueue = [];
+    for (const c of this.clients) {
+      this.send(c, { type: "error", code: "executor_offline", message: reason });
+      c.sock.end();
+    }
+    this.clients.clear();
+    await new Promise((r) => this.server ? this.server.close(() => r()) : r());
+    try {
+      if (!isPipe(this.o.socketPath) && existsSync(this.o.socketPath) && lstatSync(this.o.socketPath).isSocket()) unlinkSync(this.o.socketPath);
+    } catch {
+    }
+    this.log({ kind: "bridge", msg: `bridge stopped: ${reason}` });
+  }
+  // ---------------------------------------------------------------------------
+  async clearStaleSocket() {
+    const p = this.o.socketPath;
+    let st;
+    try {
+      st = lstatSync(p);
+    } catch {
+      return;
+    }
+    if (!st.isSocket()) throw new Error(`${p} exists and is not a socket; refusing to remove it`);
+    const live = await new Promise((resolve) => {
+      const s = createConnection(p);
+      s.once("connect", () => {
+        s.destroy();
+        resolve(true);
+      });
+      s.once("error", () => resolve(false));
+    });
+    this.debug(live ? `taking over live socket ${p}` : `removing stale socket ${p}`);
+    unlinkSync(p);
+  }
+  onClient(sock) {
+    const client = { id: this.nextId++, sock, runs: /* @__PURE__ */ new Set(), reqs: /* @__PURE__ */ new Set() };
+    this.clients.add(client);
+    sock.setEncoding("utf8");
+    let buf = "";
+    sock.on("data", (chunk) => {
+      buf += chunk;
+      if (buf.length > 4 * 1024 * 1024) {
+        this.send(client, { type: "error", code: "bad_message", message: "line too long" });
+        sock.destroy();
+        return;
+      }
+      let nl;
+      while ((nl = buf.indexOf("\n")) >= 0) {
+        const line = buf.slice(0, nl).trim();
+        buf = buf.slice(nl + 1);
+        if (!line) continue;
+        let msg;
+        try {
+          msg = JSON.parse(line);
+        } catch {
+          this.send(client, { type: "error", code: "bad_message", message: "invalid JSON" });
+          continue;
+        }
+        this.fromClient(client, msg);
+      }
+    });
+    const gone = () => this.dropClient(client);
+    sock.on("close", gone);
+    sock.on("error", gone);
+  }
+  dropClient(c) {
+    if (!this.clients.delete(c)) return;
+    for (const runId of c.runs) {
+      this.runOwner.delete(runId);
+      if (!this.closed) this.toExtension({ type: "cancel", run_id: runId });
+    }
+    for (const reqId of c.reqs) this.reqOwner.delete(reqId);
+    this.helloQueue = this.helloQueue.filter((h) => {
+      if (h.client === c) clearTimeout(h.timer);
+      return h.client !== c;
+    });
+  }
+  send(c, msg) {
+    if (c.sock.destroyed || !c.sock.writable) return;
+    c.sock.write(JSON.stringify(msg) + "\n");
+  }
+  // -- client → extension -------------------------------------------------------
+  fromClient(c, m) {
+    switch (m.type) {
+      case "hello": {
+        const timer = setTimeout(() => {
+          const i = this.helloQueue.findIndex((h) => h.timer === timer);
+          if (i >= 0) this.helloQueue.splice(i, 1);
+          this.send(c, { type: "error", code: "executor_offline", message: "the extension did not answer hello" });
+        }, this.o.helloTimeoutMs ?? 5e3);
+        this.helloQueue.push({ client: c, timer });
+        this.forward(c, m);
+        return;
+      }
+      case "run": {
+        const runId = typeof m.run_id === "string" ? m.run_id : "";
+        if (!runId) return this.send(c, { type: "error", code: "bad_message", message: "run needs run_id" });
+        if (this.runOwner.has(runId)) return this.send(c, { type: "error", code: "bad_message", run_id: runId, message: "duplicate run_id" });
+        const recipe = m.recipe ?? {};
+        const res = this.toExtension(m);
+        if (!res.ok) {
+          this.log({ kind: "run", run_id: runId, msg: `refused ${String(recipe.id)}: message too large (${res.size} bytes)` });
+          return this.send(c, { type: "error", code: "recipe_too_large", run_id: runId, message: `run message is ${res.size} bytes; Chrome allows 1 MB` });
+        }
+        this.runOwner.set(runId, c);
+        c.runs.add(runId);
+        this.log({ kind: "run", run_id: runId, msg: `run ${String(recipe.id)} v${String(recipe.version)}`, recipe_id: recipe.id, version: recipe.version, recipe_sha256: m.recipe_sha256 });
+        return;
+      }
+      case "cancel": {
+        const runId = typeof m.run_id === "string" ? m.run_id : "";
+        if (this.runOwner.get(runId) === c) this.forward(c, { type: "cancel", run_id: runId });
+        return;
+      }
+      default: {
+        const type = String(m.type);
+        if (type in REQUESTS) {
+          const reqId = typeof m.req_id === "string" ? m.req_id : "";
+          if (!reqId) return this.send(c, { type: "error", code: "bad_message", message: `${type} needs req_id` });
+          const owner = this.reqOwner.get(reqId);
+          if (owner && owner !== c) return this.send(c, { type: "error", code: "bad_message", req_id: reqId, message: "req_id already in use" });
+          this.reqOwner.set(reqId, c);
+          c.reqs.add(reqId);
+          if (type === "record_start") this.log({ kind: "record", run_id: reqId, msg: `record_start ${String(m.origin ?? "")}`.trim() });
+          this.forward(c, m);
+          return;
+        }
+        if (NOTIFY.has(type)) return this.forward(c, m);
+        this.send(c, { type: "error", code: "bad_message", message: `unknown message type ${JSON.stringify(m.type)}` });
+      }
+    }
+  }
+  forward(c, m) {
+    const res = this.toExtension(m);
+    if (!res.ok) this.send(c, { type: "error", code: "recipe_too_large", message: `message is ${res.size} bytes; Chrome allows 1 MB` });
+  }
+  // -- extension → client -------------------------------------------------------
+  fromExtension(m) {
+    if (!m || typeof m !== "object") return;
+    const runId = typeof m.run_id === "string" ? m.run_id : void 0;
+    const reqId = typeof m.req_id === "string" ? m.req_id : void 0;
+    switch (m.type) {
+      case "hello_ack": {
+        this.lastHelloAck = m;
+        const h = this.helloQueue.shift();
+        if (h) {
+          clearTimeout(h.timer);
+          this.send(h.client, m);
+        }
+        return;
+      }
+      case "event": {
+        this.logEvent(m);
+        const c = runId ? this.runOwner.get(runId) ?? this.reqOwner.get(runId) : void 0;
+        if (c) this.send(c, m);
+        return;
+      }
+      case "result": {
+        this.log({
+          kind: "result",
+          run_id: runId,
+          level: m.ok ? "info" : "error",
+          msg: m.ok ? `ok in ${String(m.duration_ms)} ms (${String(m.requests)} requests)` : `failed: ${String(m.error?.code)}`,
+          ok: m.ok === true,
+          duration_ms: m.duration_ms,
+          requests: m.requests,
+          ...m.ok ? {} : { error_code: m.error?.code }
+        });
+        const c = runId ? this.runOwner.get(runId) : void 0;
+        if (runId) {
+          this.runOwner.delete(runId);
+          c?.runs.delete(runId);
+        }
+        if (c) this.send(c, m);
+        return;
+      }
+      case "recording": {
+        const c = reqId ? this.reqOwner.get(reqId) : void 0;
+        if (reqId) {
+          this.reqOwner.delete(reqId);
+          c?.reqs.delete(reqId);
+        }
+        const trace = m.trace ?? {};
+        const entries = Array.isArray(trace.entries) ? trace.entries.length : Array.isArray(trace.requests) ? trace.requests.length : void 0;
+        const origin = typeof trace.origin === "string" ? trace.origin : typeof trace.site?.origin === "string" ? String(trace.site.origin) : void 0;
+        const recId = typeof m.rec_id === "string" && REC_ID.test(m.rec_id) ? m.rec_id : void 0;
+        let saved;
+        if (!c && recId && !m.discarded) saved = this.saveRecording(recId, m);
+        this.log({
+          kind: "record",
+          run_id: reqId,
+          msg: m.discarded ? `recording ${recId ?? "?"} discarded` : `recording ${recId ?? "?"}${origin ? ` on ${origin}` : ""}${entries !== void 0 ? `, ${entries} entries` : ""}${saved ? ", saved" : ""}`
+        });
+        if (c) this.send(c, m);
+        return;
+      }
+      default: {
+        if (REPLIES.has(String(m.type))) {
+          const c = reqId ? this.reqOwner.get(reqId) : void 0;
+          if (reqId) {
+            this.reqOwner.delete(reqId);
+            c?.reqs.delete(reqId);
+          }
+          if (c) this.send(c, m);
+          return;
+        }
+        this.debug(`ignoring extension message type ${JSON.stringify(m.type)}`);
+        return;
+      }
+      case "error": {
+        const c = runId && this.runOwner.get(runId) || reqId && this.reqOwner.get(reqId);
+        if (c) this.send(c, m);
+        else this.log({ kind: "error", level: "warn", msg: `extension error for no client: ${String(m.code ?? "")}`.trim() });
+        return;
+      }
+    }
+  }
+  saveRecording(recId, m) {
+    const dir = this.o.recordingsDir ?? join2(dirname(this.o.logDir), "recordings");
+    try {
+      mkdirSync(dir, { recursive: true, mode: 448 });
+      const file = join2(dir, `${recId}.json`);
+      writeFileSync(file, JSON.stringify({ rec_id: recId, saved_at: (/* @__PURE__ */ new Date()).toISOString(), trace: m.trace }), { mode: 384 });
+      return file;
+    } catch (e) {
+      this.debug(`could not save recording ${recId}: ${e.message}`);
+      return void 0;
+    }
+  }
+  // -- logs -----------------------------------------------------------------------
+  /** Events are logged with only the protocol-allowed fields, whatever the extension sent. */
+  logEvent(m) {
+    const data = m.data ?? {};
+    const clean = {};
+    for (const k of EVENT_DATA_KEYS) if (data[k] !== void 0) clean[k] = data[k];
+    this.log({
+      ts: typeof m.ts === "string" ? m.ts : void 0,
+      run_id: m.run_id,
+      level: m.level,
+      kind: m.kind,
+      msg: typeof m.msg === "string" ? m.msg.slice(0, 500) : void 0,
+      ...Object.keys(clean).length ? { data: clean } : {}
+    });
+  }
+  log(entry) {
+    const line = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...stripUndefined(entry) }) + "\n";
+    try {
+      appendFileSync(join2(this.o.logDir, `executor-${day()}.ndjson`), line, { mode: 384 });
+    } catch (e) {
+      this.debug(`log write failed: ${e.message}`);
+    }
+  }
+  debug(s) {
+    this.o.debug?.(s);
+  }
+  /** For tests. */
+  get helloAck() {
+    return this.lastHelloAck;
+  }
+};
+function stripUndefined(o) {
+  const out = {};
+  for (const [k, v] of Object.entries(o)) if (v !== void 0) out[k] = v;
+  return out;
+}
+
+// src/index.ts
+var debug = process.env.WIELD_BRIDGE_DEBUG ? (s) => process.stderr.write(`[wield-bridge] ${s}
+`) : void 0;
+var bridge = new Bridge({ input: process.stdin, output: process.stdout, socketPath: socketPath(), logDir: logDir(), debug });
+var stop = (reason) => {
+  void bridge.close(reason).finally(() => process.exit(0));
+};
+process.stdin.on("end", () => stop("Chrome disconnected"));
+process.on("SIGTERM", () => stop("SIGTERM"));
+process.on("SIGINT", () => stop("SIGINT"));
+process.on("uncaughtException", (e) => {
+  process.stderr.write(`[wield-bridge] fatal: ${e.stack ?? e}
+`);
+  stop("crash");
+});
+bridge.start().catch((e) => {
+  process.stderr.write(`[wield-bridge] cannot start: ${e.message}
+`);
+  process.exit(1);
+});

package/dist/extension/build-id.json

@@ -0,0 +1 @@
+{"build":"0.1.13+20261107213428.da3a"}

package/dist/extension/confirm.html

@@ -0,0 +1,56 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Wield · Allow?</title>
+  <link rel="stylesheet" href="tokens.css">
+  <link rel="stylesheet" href="ui.css">
+</head>
+<!-- Classes are semantic (ask-*), so the look can change in ui.css alone. -->
+<body class="ask" data-kind="write">
+  <header class="top ask-head">
+    <span class="brand" aria-label="Wield">
+      <svg viewBox="0 0 24 24" aria-hidden="true"><defs><linearGradient id="wm-hd" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#ffd85a"/><stop offset=".5" stop-color="#ff9a24"/><stop offset="1" stop-color="#ff5200"/></linearGradient><linearGradient id="wm-ht" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#ff6a0a"/><stop offset="1" stop-color="currentColor"/></linearGradient></defs><g transform="translate(0 -2.45)"><path d="M7.0 11.6 2.4 16.6 7.0 21.6M17.0 11.6 21.6 16.6 17.0 21.6" fill="none" stroke="currentColor" stroke-width="2.7" stroke-linecap="round" stroke-linejoin="round"/><path d="M11.0 21.6 12.6 10.28" stroke="currentColor" stroke-width="2.3" stroke-linecap="round"/><g transform="translate(12.6 10.28) rotate(8.045051779050041)"><rect x="-1.15" y="-.2" width="2.3" height="2.4" fill="url(#wm-ht)"/></g><g transform="translate(12.908 8.102) rotate(8.05) scale(0.84)"><path d="M-4.6 -1.9 -2.9 -1.9 -2.4 -1.5 1.3 -1.5 4.4 -0.55 4.6 -0.2 4.6 0.2 4.4 0.55 1.3 1.5 -2.4 1.5 -2.9 1.9 -4.6 1.9Z" fill="url(#wm-hd)" stroke="url(#wm-hd)" stroke-width=".35" stroke-linejoin="round"/><path d="M-4.2 -1.25H-2.9M-1.9 -.95H1.0" stroke="#fff1b8" stroke-width=".55" stroke-linecap="round" opacity=".85"/><rect x="-1.4" y="1.35" width="2.8" height=".8" rx=".3" fill="currentColor"/></g><rect x="7.01" y="5.50" width="1.3" height="1.3" fill="#ffc23d"/><rect x="5.41" y="7.20" width=".9" height=".9" fill="#ff8a1f"/></g></svg>
+      <b>wield</b>
+    </span>
+    <span class="badge plain ask-kind" id="kind">Needs your OK</span>
+  </header>
+
+  <main class="ask-body" id="main">
+    <p class="label ask-eyebrow" id="eyebrow">Your agent wants to</p>
+    <h1 class="ask-title" id="title"></h1>
+    <p class="ask-site" id="site"></p>
+
+    <section class="ask-section" id="write" hidden aria-labelledby="h-sent">
+      <h2 class="label" id="h-sent">What gets sent</h2>
+      <ul class="ask-writes" id="writes"></ul>
+    </section>
+
+    <section class="ask-section" id="perm" hidden>
+      <p class="ask-explain" id="perm-text"></p>
+      <p class="ask-explain" id="perm-chrome">Chrome asks you to confirm next. You can remove access any time in chrome://extensions.</p>
+    </section>
+
+    <section class="ask-section" id="draft" hidden aria-labelledby="h-draft">
+      <p class="ask-warning" id="draft-warning" role="alert" hidden></p>
+      <h2 class="label" id="h-draft">Sites it may contact</h2>
+      <ul class="ask-fields" id="draft-origins"></ul>
+      <h2 class="label">Requests</h2>
+      <ul class="ask-writes" id="draft-steps"></ul>
+    </section>
+
+    <p class="ask-note" id="note"></p>
+  </main>
+
+  <footer class="ask-foot">
+    <div class="ask-timer" aria-hidden="true"><span id="timer-bar"></span></div>
+    <p class="ask-countdown num" id="countdown" aria-live="polite"></p>
+    <div class="ask-actions">
+      <button class="btn btn-secondary ask-deny" id="deny" type="button" disabled>Deny</button>
+      <button class="btn btn-primary ask-allow" id="allow" type="button" disabled>Allow</button>
+    </div>
+  </footer>
+  <script src="confirm.js"></script>
+</body>
+</html>