wield-mcp 0.1.1 → 0.1.2

package/dist/extension/build-id.json

@@ -1 +1 @@
-{"build":"0.1.13+20261107213428.da3a"}
+{"build":"0.1.15+20261107220223.8c74"}

package/dist/extension/content.js

@@ -3061,6 +3061,14 @@
     if (res.error.code === "login_required") return false;
     return null;
   }
+  function pageOf(base) {
+    try {
+      const u = new URL(base);
+      return { origin: u.origin, host: u.host };
+    } catch {
+      return { origin: "", host: "" };
+    }
+  }
   var Run = class {
     constructor(recipe, adapters, opts) {
       this.recipe = recipe;
@@ -3130,12 +3138,12 @@
         this.staticChecks();
         await this.resolveBase();
         const params = prepareParams(this.recipe.params, rawParams);
-        const ctx = { params, vars: {}, steps: {}, now: this.opts.now ? this.opts.now() : /* @__PURE__ */ new Date() };
+        const ctx = { params, vars: {}, steps: {}, now: this.opts.now ? this.opts.now() : /* @__PURE__ */ new Date(), page: pageOf(this.base) };
         await this.derive(ctx);
         if (this.recipe.login_check && (this.recipe.requires_login || loginOnly)) await this.loginCheck(ctx);
         await this.runSteps(ctx);
         this.currentStep = void 0;
-        let output = this.q({ params: ctx.params, steps: ctx.steps, now: localIsoNow(ctx.now) }, this.recipe.output.value, "output");
+        let output = this.q({ params: ctx.params, steps: ctx.steps, now: localIsoNow(ctx.now), page: ctx.page }, this.recipe.output.value, "output");
         output = redactDeep(normalizeValue(output), this.secrets);
         const duration_ms = Date.now() - this.t0;
         this.emit("done", "info", `ok in ${duration_ms} ms (${this.requests} requests)`);
@@ -3413,7 +3421,7 @@
       let summary = this.recipe.task;
       if (this.recipe.confirm?.summary) {
         try {
-          summary = toText(renderString(this.recipe.confirm.summary, { params: ctx.params, steps: ctx.steps, now: ctx.now }));
+          summary = toText(renderString(this.recipe.confirm.summary, { params: ctx.params, steps: ctx.steps, now: ctx.now, page: ctx.page }));
         } catch {
           summary = this.recipe.confirm.summary;
         }
@@ -3754,7 +3762,7 @@
   var enc = new TextEncoder();
 
   // apps/extension/src/shared/types.ts
-  var BUILD_ID = "0.1.13+20261107213428.da3a";
+  var BUILD_ID = "0.1.15+20261107220223.8c74";
   var RELOAD_HINT = "Reload the Wield extension once: open chrome://extensions (vivaldi://extensions in Vivaldi) and click the reload arrow on the Wield card, then try again.";
   var LIMITS2 = {
     steps: 12,

package/dist/extension/manifest.json

@@ -3,7 +3,7 @@
   "name": "Wield",
   "short_name": "Wield",
   "description": "Lets your AI agent use websites through your own browser and logins. Your passwords never leave your device.",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "minimum_chrome_version": "137",
   "permissions": [
     "nativeMessaging",
@@ -12,13 +12,16 @@
     "storage"
   ],
   "host_permissions": [
+    "https://en.zalando.de/*",
     "https://energie.check24.de/*",
     "https://fahrplan.oebb.at/*",
+    "https://regiojet.cz/*",
     "https://shop.flixbus.de/*",
     "https://suchen.mobile.de/*",
     "https://www.11880.com/*",
     "https://www.2dehands.be/*",
     "https://www.airbnb.com/*",
+    "https://www.allrecipes.com/*",
     "https://www.alternate.de/*",
     "https://www.amazon.ca/*",
     "https://www.amazon.co.uk/*",
@@ -56,6 +59,7 @@
     "https://www.eventim.de/*",
     "https://www.finn.no/*",
     "https://www.gelbeseiten.de/*",
+    "https://www.giallozafferano.it/*",
     "https://www.gumtree.com/*",
     "https://www.hugendubel.de/*",
     "https://www.idealo.de/*",
@@ -70,10 +74,13 @@
     "https://www.kijiji.ca/*",
     "https://www.kleinanzeigen.de/*",
     "https://www.lefrecce.it/*",
+    "https://www.lidl.de/*",
     "https://www.lieferando.de/*",
+    "https://www.local.ch/*",
     "https://www.marktplaats.nl/*",
     "https://www.marmiton.org/*",
     "https://www.mvg.de/*",
+    "https://www.mydealz.de/*",
     "https://www.ns.nl/*",
     "https://www.olx.pl/*",
     "https://www.onthemarket.com/*",
@@ -84,6 +91,7 @@
     "https://www.reed.co.uk/*",
     "https://www.rightmove.co.uk/*",
     "https://www.ryanair.com/*",
+    "https://www.spareroom.co.uk/*",
     "https://www.stepstone.de/*",
     "https://www.thomann.de/*",
     "https://www.thuisbezorgd.nl/*",

package/dist/extension/sample-recipe.json

@@ -1,7 +1,7 @@
 {
   "schema": "https://wield.run/schema/recipe/v1.json",
   "id": "chefkoch.de/search-recipes",
-  "version": 1,
+  "version": 2,
   "site": {
     "id": "chefkoch.de",
     "name": "Chefkoch",
@@ -209,10 +209,10 @@
     "method": "browser-inspect",
     "recorded_at": "2026-11-07T12:27:00+01:00",
     "recorded_by": "C4",
-    "notes": "spikes/chefkoch.md. Public JSON search gateway used by chefkoch.de; CORS allows https://www.chefkoch.de (with credentials) and no cookies or tokens are needed, so credentials omit. Non-null campaign = brand-sponsored recipe; isPlus = paywalled. difficulty 1/2/3 = simpel/normal/pfiffig."
+    "notes": "spikes/chefkoch.md. Public JSON search gateway used by chefkoch.de; CORS allows https://www.chefkoch.de (with credentials) and no cookies or tokens are needed, so credentials omit. Non-null campaign = brand-sponsored recipe; isPlus = paywalled. difficulty 1/2/3 = simpel/normal/pfiffig. v2 (2026-11-07 22:38): tos.notes only; requests and output unchanged."
   },
   "tos": {
     "reviewed": false,
-    "notes": "Chefkoch's terms restrict automated use of its content. One user-initiated search at a time from the user's browser (1 request); recipe texts stay on chefkoch.de via the link."
+    "notes": "Chefkoch's robots.txt disallows AI training crawlers (ClaudeBot, anthropic-ai, Claude-Web). Chefkoch's terms restrict automated use of its content. One user-initiated search at a time from the user's browser (1 request); recipe texts stay on chefkoch.de via the link."
   }
 }

package/dist/extension/sw.js

@@ -114,12 +114,14 @@ var REGISTRY_KEYS = {
 // packages/recipe/src/features.ts
 var INTERPRETER_FEATURES = [
   /** extract.html / html_items fields with parse: "json" (and path): per-element JSON attributes (CHANGES 2026-11-07 C1). */
-  "html_json"
+  "html_json",
+  /** page.host / page.origin in templates and context expressions: the language host the run landed on (CHANGES 22:39 C4). */
+  "page_context"
 ];
 
 // apps/extension/src/shared/types.ts
 var PROTOCOL_VERSION = 1;
-var BUILD_ID = "0.1.13+20261107213428.da3a";
+var BUILD_ID = "0.1.15+20261107220223.8c74";
 var RELOAD_HINT = "Reload the Wield extension once: open chrome://extensions (vivaldi://extensions in Vivaldi) and click the reload arrow on the Wield card, then try again.";
 var LIMITS2 = {
   steps: 12,
@@ -794,9 +796,14 @@ chrome.tabs.onUpdated.addListener((tabId, info) => {
 function originPattern(origin) {
   return `${origin}/*`;
 }
-async function tabsForOrigin(origin) {
-  const tabs = await chrome.tabs.query({ url: originPattern(origin) });
-  return tabs.filter((t) => t.id !== void 0 && t.url && new URL(t.url).origin === origin);
+function siteOrigins(origin, localeHosts = []) {
+  const port = new URL(origin).port;
+  return [origin, ...localeHosts.map((h) => `https://${h}${port ? `:${port}` : ""}`)];
+}
+async function tabsForOrigin(origin, localeHosts = []) {
+  const origins = siteOrigins(origin, localeHosts);
+  const tabs = await chrome.tabs.query({ url: origins.map(originPattern) });
+  return tabs.filter((t) => t.id !== void 0 && t.url && origins.includes(new URL(t.url).origin));
 }
 function waitComplete(tabId, timeoutMs) {
   return new Promise((resolve, reject) => {
@@ -839,11 +846,12 @@ async function acquireTab(origin, signal, startPath, opts = {}) {
   const url = startUrl(origin, startPath);
   const owned = await ownedTabs();
   const stale = await staleTabs();
-  const candidates = (await tabsForOrigin(origin)).filter((t) => !t.discarded && !stale.has(t.id)).sort((a, b) => score(b, owned) - score(a, owned));
+  const accepted = siteOrigins(origin, opts.localeHosts);
+  const candidates = (await tabsForOrigin(origin, opts.localeHosts)).filter((t) => !t.discarded && !stale.has(t.id)).sort((a, b) => score(b, owned) - score(a, owned));
   const pick = opts.forceNew ? void 0 : candidates[0];
   if (pick?.id !== void 0) {
     if (pick.status !== "complete") await waitComplete(pick.id, LIMITS2.tabLoadMs);
-    return { tabId: pick.id, opened: false, owned: owned.has(pick.id) };
+    return { tabId: pick.id, opened: false, owned: owned.has(pick.id), ...pick.url ? { host: new URL(pick.url).host } : {} };
   }
   let tab;
   try {
@@ -859,11 +867,11 @@ async function acquireTab(origin, signal, startPath, opts = {}) {
   });
   const done = await waitComplete(tabId, LIMITS2.tabLoadMs);
   const finalOrigin = done.url ? new URL(done.url).origin : "";
-  if (finalOrigin !== origin) {
+  if (!accepted.includes(finalOrigin)) {
     throw new ExecError("tab_error", `${origin} redirected the tab to ${finalOrigin || "a site Wield has no access to"}; the recipe's site.origin needs updating`);
   }
   if (!signal.aborted) await sleep2(LIMITS2.tabSettleMs);
-  return { tabId, opened: true, owned: true };
+  return { tabId, opened: true, owned: true, ...done.url ? { host: new URL(done.url).host } : {} };
 }
 function score(t, owned) {
   let s = 0;
@@ -923,6 +931,12 @@ function checkRecipe(r) {
   const site = recipe.site;
   if (!site || !isAllowedOrigin(site.origin)) bad("site.origin must be https://host");
   if (!Array.isArray(site.origins) || site.origins.length === 0 || !site.origins.every(isAllowedOrigin)) bad("site.origins must list https origins");
+  if (site.locale_hosts !== void 0) {
+    if (!Array.isArray(site.locale_hosts) || site.locale_hosts.length > 20) bad("site.locale_hosts must be a list of up to 20 host names");
+    for (const h of site.locale_hosts) {
+      if (typeof h !== "string" || !/^[a-z0-9-]+(\.[a-z0-9-]+)+$/.test(h) || !(h === site.id || h.endsWith(`.${site.id}`))) bad(`site.locale_hosts: "${String(h)}" must be an exact host name under ${site.id}`);
+    }
+  }
   if (!Array.isArray(recipe.steps) || recipe.steps.length < 1) bad("recipe has no steps");
   if (recipe.steps.length > LIMITS2.steps) throw new ExecError("limit_exceeded", `recipe has ${recipe.steps.length} steps; the limit is ${LIMITS2.steps}`);
   for (const s of [...recipe.steps, ...recipe.login_check ? [recipe.login_check] : []]) {
@@ -1078,13 +1092,13 @@ function execute(opts) {
     if (tabId === void 0) {
       await ensureHostAccess(recipe, opts.run_id, budget, abort.signal, opts.emit);
       const t0 = Date.now();
-      const tab = await acquireTab(recipe.site.origin, abort.signal, recipe.site.start_path, { forceNew: opts.forceNewTab });
+      const tab = await acquireTab(recipe.site.origin, abort.signal, recipe.site.start_path, { forceNew: opts.forceNewTab, localeHosts: recipe.site.locale_hosts ?? [] });
       tabId = tab.tabId;
       if (opts.meta) {
         opts.meta.owned = tab.owned;
         if (tab.opened) opts.meta.openedTabId = tab.tabId;
       }
-      const host = new URL(recipe.site.origin).host;
+      const host = tab.host ?? new URL(recipe.site.origin).host;
       opts.emit({ level: "info", kind: "tab", msg: tab.opened ? `opened background tab ${host} (${Date.now() - t0} ms)` : `using open tab ${host}` });
     }
     if (opts.meta) opts.meta.tabId = tabId;

package/dist/index.js

@@ -27797,7 +27797,7 @@ function makeCatalog(cfg, http) {
 }
 
 // src/server.ts
-var VERSION = "0.1.1";
+var VERSION = "0.1.2";
 var OFFLINE_HINT = "Open Chrome with the Wield extension installed";
 function offlineHint(home) {
   if (!existsSync7(paths(home).bridgeLauncher)) {
@@ -28116,11 +28116,17 @@ function createWieldServer(d) {
       const missing = await missingFeatures(recipe);
       if (missing.length) {
         let older;
-        if (version2 === void 0 && !fallback && lastGood && lastGood !== recipe.version) {
-          try {
-            const o = await d.source.recipe(recipe_id, lastGood);
-            if (!(await missingFeatures(o.recipe)).length) older = o;
-          } catch {
+        if (version2 === void 0 && !fallback) {
+          const candidates = [.../* @__PURE__ */ new Set([lastGood, recipe.version - 1, recipe.version - 2])].filter((v) => typeof v === "number" && v >= 1 && v < recipe.version);
+          for (const v of candidates) {
+            try {
+              const o = await d.source.recipe(recipe_id, v);
+              if (!(await missingFeatures(o.recipe)).length) {
+                older = o;
+                break;
+              }
+            } catch {
+            }
           }
         }
         if (!older) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wield-mcp",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "mcpName": "run.wield/wield",
   "description": "Websites as tools for your AI agent (MCP). Runs signed recipes in your own browser with your own session: your logins never leave your computer.",
   "keywords": [