wolfpack-mcp 1.0.95 → 1.0.97

package/dist/browserTools.js

@@ -0,0 +1,146 @@
+import { z } from 'zod';
+function text(data) {
+    return JSON.stringify(data, null, 2);
+}
+/**
+ * Browser control for chatbot agents (#2288): see and drive the page the chat
+ * widget is embedded in.
+ *
+ * Gated by the `browser_control` capability, which the backend grants only to a
+ * key bound to a chat session — a scheduled run or a coder never sees these.
+ * The backend gates every call on the visitor's own grant as well, so a tool
+ * called out of turn is refused there rather than here.
+ */
+export const BROWSER_TOOLS = [
+    {
+        name: 'browser_request_control',
+        description: 'Ask the person you are chatting with for permission to drive their browser. ' +
+            'They see your reason in the conversation with Allow and Deny buttons, and this call waits for their answer. ' +
+            'You MUST call this and be granted control before any other browser tool will work — there is no way around it, ' +
+            'and asking repeatedly after a refusal is not acceptable. ' +
+            'Ask only when driving the page is genuinely the best way to help; explaining what to click is usually better.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                reason: {
+                    type: 'string',
+                    description: 'What you want to do on their page, in one plain sentence — this is what they read before deciding (e.g. "Fill in the booking form with the dates we agreed").',
+                },
+            },
+            required: ['reason'],
+        },
+    },
+    {
+        name: 'browser_snapshot',
+        description: 'See the page: its URL, title, visible text, and the interactive elements you can act on. ' +
+            'Each element comes back with a "ref" — pass that ref to browser_click or browser_type. ' +
+            'Refs are only valid until the page changes, so take a fresh snapshot after every action.',
+        inputSchema: { type: 'object', properties: {} },
+    },
+    {
+        name: 'browser_click',
+        description: 'Click an element on the page. The visitor sees the pointer travel to it before it is clicked.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                ref: { type: 'string', description: 'The ref of the element, from browser_snapshot' },
+            },
+            required: ['ref'],
+        },
+    },
+    {
+        name: 'browser_type',
+        description: 'Type text into an input, textarea or select on the page, replacing whatever it holds.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                ref: { type: 'string', description: 'The ref of the field, from browser_snapshot' },
+                text: { type: 'string', description: 'The text to enter' },
+            },
+            required: ['ref', 'text'],
+        },
+    },
+    {
+        name: 'browser_scroll',
+        description: 'Scroll the page vertically to bring more of it into view.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                deltaY: {
+                    type: 'number',
+                    description: 'Pixels to scroll by — positive scrolls down, negative up',
+                },
+            },
+            required: ['deltaY'],
+        },
+    },
+    {
+        name: 'browser_release_control',
+        description: 'Hand the browser back when you are done, so the visitor stops seeing the "agent in control" frame on their screen. ' +
+            'Always do this once the task is finished. They can also stop you themselves at any time.',
+        inputSchema: { type: 'object', properties: {} },
+    },
+];
+const RequestControlSchema = z.object({ reason: z.string() });
+const ClickSchema = z.object({ ref: z.string() });
+const TypeSchema = z.object({ ref: z.string(), text: z.string() });
+const ScrollSchema = z.object({ deltaY: z.coerce.number() });
+/** A refused or failed command is reported as a tool error, so the agent reads
+ *  it as something that did not happen rather than as a result. */
+function commandOutcome(result) {
+    if (!result.ok) {
+        return {
+            content: [{ type: 'text', text: result.error ?? 'The command failed' }],
+            isError: true,
+        };
+    }
+    return { content: [{ type: 'text', text: text(result.result ?? { done: true }) }] };
+}
+export async function handleBrowserTool(name, args, client) {
+    switch (name) {
+        case 'browser_request_control': {
+            const { reason } = RequestControlSchema.parse(args);
+            const { outcome } = await client.requestBrowserControl(reason);
+            if (outcome === 'granted') {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: 'Granted. Take a browser_snapshot to see the page, and call browser_release_control when you are done.',
+                        },
+                    ],
+                };
+            }
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: outcome === 'denied'
+                            ? 'The visitor declined. Do not ask again unless they bring it up — help them another way.'
+                            : 'The visitor did not answer. Carry on without the browser.',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        case 'browser_snapshot':
+            return commandOutcome(await client.runBrowserCommand({ action: 'snapshot' }));
+        case 'browser_click': {
+            const { ref } = ClickSchema.parse(args);
+            return commandOutcome(await client.runBrowserCommand({ action: 'click', ref }));
+        }
+        case 'browser_type': {
+            const parsed = TypeSchema.parse(args);
+            return commandOutcome(await client.runBrowserCommand({ action: 'type', ...parsed }));
+        }
+        case 'browser_scroll': {
+            const { deltaY } = ScrollSchema.parse(args);
+            return commandOutcome(await client.runBrowserCommand({ action: 'scroll', deltaY }));
+        }
+        case 'browser_release_control':
+            await client.releaseBrowserControl();
+            return { content: [{ type: 'text', text: 'Browser control handed back to the visitor.' }] };
+        default:
+            throw new Error(`Unknown browser tool: ${name}`);
+    }
+}

package/dist/client.js

@@ -490,6 +490,9 @@ export class WolfpackClient {
     async createWorkItemComment(workItemId, data, teamSlug) {
         return this.api.post(this.withTeamSlug(`/work-items/${workItemId}/comments`, teamSlug), data);
     }
+    async askWorkItemQuestion(workItemId, question, teamSlug) {
+        return this.api.post(this.withTeamSlug(`/work-items/${workItemId}/question`, teamSlug), { question });
+    }
     async createIssueComment(issueId, data, teamSlug) {
         return this.api.post(this.withTeamSlug(`/issues/${issueId}/comments`, teamSlug), data);
     }
@@ -978,6 +981,18 @@ export class WolfpackClient {
     async saveMemory(key, content) {
         return this.api.put(`/self/memories/${encodeURIComponent(key)}`, { content });
     }
+    // ─── Browser control (#2288) ───────────────────────────────────────────────
+    // No chat is named on any of these: the backend derives it from the session
+    // this key is bound to, so the agent cannot address another visitor's page.
+    async requestBrowserControl(reason) {
+        return this.api.post('/browser/request', { reason });
+    }
+    async runBrowserCommand(command) {
+        return this.api.post('/browser/command', command);
+    }
+    async releaseBrowserControl() {
+        await this.api.post('/browser/release', {});
+    }
     close() {
         // No cleanup needed for API client
     }

package/dist/index.js

@@ -12,6 +12,7 @@ import { validateConfig, config } from './config.js';
 import { AGENT_BUILDER_TOOLS, handleAgentBuilderTool } from './agentBuilderTools.js';
 import { PROCEDURE_TOOLS, handleProcedureTool } from './procedureTools.js';
 import { AGENT_SELF_TOOLS, AGENT_MEMORY_TOOLS, handleAgentSelfTool } from './agentSelfTools.js';
+import { BROWSER_TOOLS, handleBrowserTool } from './browserTools.js';
 import { resolveRadarItemId } from './resolveRadarItemId.js';
 import { SERVER_INSTRUCTIONS } from './serverInstructions.js';
 import { fetch as proxyFetch } from './proxyFetch.js';
@@ -538,6 +539,14 @@ const CreateWorkItemCommentSchema = z.object({
         .optional()
         .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
 });
+const AskWorkItemQuestionSchema = z.object({
+    work_item_id: refIdString().describe('The work item refId (number)'),
+    question: z.string().describe('The question (markdown)'),
+    project_slug: z
+        .string()
+        .optional()
+        .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
+});
 const CreateIssueCommentSchema = z.object({
     issue_id: refIdString().describe('The issue refId (number)'),
     content: z.string().describe('Comment content (markdown)'),
@@ -1814,6 +1823,8 @@ class WolfpackMCPServer {
                             '2) Completion summaries when moving to "review" (what was done, files changed, testing notes). ' +
                             '3) Important observations or decisions that should be visible in the activity history. ' +
                             'USE DESCRIPTION (update_work_progress) FOR: Plans, checklists, and progress tracking that need to be updated over time. ' +
+                            'NOT FOR QUESTIONS you need answered before you can continue the item you are working: a reply cannot reach a ' +
+                            'running session, so a question asked here is one you keep working past. Use ask_work_item_question, which pauses the work. ' +
                             'Comments are typically not used in personal projects. ' +
                             CONTENT_LINKING_HELP,
                         inputSchema: {
@@ -1832,6 +1843,35 @@ class WolfpackMCPServer {
                             required: ['work_item_id', 'content'],
                         },
                     },
+                    {
+                        name: 'ask_work_item_question',
+                        description: 'Ask a question about the work item you are working on and PAUSE until it is answered. ' +
+                            'For when you cannot sensibly continue without an answer from a person — an ambiguous requirement, a decision ' +
+                            'that is theirs to make, something only they know. The question is posted as a comment addressed to the ' +
+                            'item\'s creator, and the item is marked as waiting: it stays in "doing" with you, your schedule does not ' +
+                            'wake you for it until someone else comments (that comment is the answer), and the session ending on it is ' +
+                            'not counted as an abandonment. AFTER CALLING THIS, STOP: commit and push anything worth keeping, make sure ' +
+                            'the plan in the description records where you got to, and end your session without taking other work — ' +
+                            'a reply cannot reach a running session, and pull_work_item refuses while the item waits. When you are ' +
+                            "woken again, get_work_item shows the question and its answer. Only the item's leading user may ask, and " +
+                            'only while the item is in "doing". In a chat session ask in your reply instead — the next message is the answer. ' +
+                            'Requires mcp:work_items:update permission.',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                work_item_id: { type: 'string', description: 'The work item refId (number)' },
+                                question: {
+                                    type: 'string',
+                                    description: 'The question (markdown). Give the context a reader needs to answer it in one reply: what you found, the options you see, what you would do by default.',
+                                },
+                                project_slug: {
+                                    type: 'string',
+                                    description: 'Project slug (required for multi-project users, use list_projects to get slugs)',
+                                },
+                            },
+                            required: ['work_item_id', 'question'],
+                        },
+                    },
                     {
                         name: 'create_issue_comment',
                         description: 'Add a comment to an issue. Requires mcp:comments:create permission. ' +
@@ -2428,6 +2468,7 @@ class WolfpackMCPServer {
                     ...(this.capabilities.includes('agent_self') ? AGENT_SELF_TOOLS : []),
                     ...(this.capabilities.includes('agent_memory') ? AGENT_MEMORY_TOOLS : []),
                     ...(this.capabilities.includes('agent_builder') ? AGENT_BUILDER_TOOLS : []),
+                    ...(this.capabilities.includes('browser_control') ? BROWSER_TOOLS : []),
                 ],
             };
         });
@@ -2512,7 +2553,7 @@ class WolfpackMCPServer {
                         const workItem = await this.client.getWorkItem(parsed.work_item_id, parsed.project_slug || this.client.getProjectSlug() || undefined);
                         if (workItem) {
                             let text = JSON.stringify(stripUuids(workItem), null, 2);
-                            const reminders = getWorkItemReminders(workItem.status, workItem.description, workItem.approved);
+                            const reminders = getWorkItemReminders(workItem.status, workItem.description, workItem.approved, workItem.question);
                             if (reminders.length > 0) {
                                 text = `${reminders.join('\n\n')}\n\n${text}`;
                             }
@@ -3089,6 +3130,19 @@ class WolfpackMCPServer {
                             ],
                         };
                     }
+                    case 'ask_work_item_question': {
+                        const parsed = AskWorkItemQuestionSchema.parse(args);
+                        const teamSlug = parsed.project_slug || this.client.getProjectSlug() || undefined;
+                        const result = await this.client.askWorkItemQuestion(parsed.work_item_id, parsed.question, teamSlug);
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `${result.notice}\n\n${JSON.stringify(stripUuids(result.comment), null, 2)}`,
+                                },
+                            ],
+                        };
+                    }
                     case 'create_issue_comment': {
                         const parsed = CreateIssueCommentSchema.parse(args);
                         const teamSlug = parsed.project_slug || this.client.getProjectSlug() || undefined;
@@ -3485,6 +3539,13 @@ class WolfpackMCPServer {
                                 return handleAgentSelfTool(name, args, this.client);
                             }
                         }
+                        // Check browser control tools (#2288 — chat sessions only)
+                        if (this.capabilities.includes('browser_control')) {
+                            const browserToolNames = BROWSER_TOOLS.map((t) => t.name);
+                            if (browserToolNames.includes(name)) {
+                                return handleBrowserTool(name, args, this.client);
+                            }
+                        }
                         // Check agent builder tools
                         if (this.capabilities.includes('agent_builder')) {
                             return handleAgentBuilderTool(name, args, this.client);

package/dist/workItemReminders.js

@@ -30,9 +30,23 @@ const STATUS_REMINDERS = {
         'starting, so the board shows the work is under way again. If you are reviewing it, leave it where it is.',
 };
 // Reminders to prepend to a get_work_item response, most urgent first.
-export function getWorkItemReminders(status, description, approved) {
+export function getWorkItemReminders(status, description, approved, question) {
     const reminders = [];
-    if (status === 'pending' && approved === false) {
+    // A question replaces the status reminder: "doing" would say to finish the work,
+    // and the work is paused until someone answers (#2289)
+    if (status === 'doing' && question) {
+        if (question.answer === null) {
+            reminders.push('REMINDER: This work item is waiting for an answer to the question its leading agent asked ' +
+                '(see "question" below). Nobody has answered yet. If you are that agent, do not work on it ' +
+                'and do not take other work: end your session, and your schedule wakes you once the answer is in.');
+        }
+        else {
+            reminders.push('REMINDER: The question asked on this work item has been answered — the answer is in ' +
+                '"question.answer" below, and the comments carry any discussion since. Resume the work with ' +
+                'that answer; the plan in the description says where it got to.');
+        }
+    }
+    else if (status === 'pending' && approved === false) {
         // Overrides the generic pending reminder: approval only gates unassigned items
         reminders.push('REMINDER: This backlog item has NOT been approved. If it is assigned to you, that assignment ' +
             'overrides approval — pull it with pull_work_item and start work. If it is not assigned to you, ' +

package/dist/workItemReminders.test.js

@@ -55,6 +55,17 @@ describe('getWorkItemReminders', () => {
         expect(reminders).toEqual([expect.stringContaining('set status to "doing"')]);
         expect(reminders[0]).toContain('If you are reviewing it, leave it where it is');
     });
+    // #2289: a question outranks the "doing" reminder — the work is paused until answered
+    it('tells an agent whose question is unanswered to stop and wait', () => {
+        const reminders = getWorkItemReminders('doing', PLAN, undefined, { answer: null });
+        expect(reminders).toEqual([expect.stringContaining('waiting for an answer')]);
+        expect(reminders[0]).toContain('end your session');
+    });
+    it('points an agent whose question was answered at the answer', () => {
+        const reminders = getWorkItemReminders('doing', PLAN, undefined, { answer: 'Option B.' });
+        expect(reminders).toEqual([expect.stringContaining('has been answered')]);
+        expect(reminders[0]).toContain('"question.answer"');
+    });
     it('adds the no-plan reminder when the description has no plan', () => {
         const reminders = getWorkItemReminders('new', 'Just a description');
         expect(reminders).toHaveLength(2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolfpack-mcp",
-  "version": "1.0.95",
+  "version": "1.0.97",
   "description": "MCP server for Wolfpack AI-enhanced software delivery tools",
   "main": "dist/index.js",
   "type": "module",