wolfpack-mcp 1.0.96 → 1.0.98

package/dist/browserTools.js

@@ -0,0 +1,146 @@
+import { z } from 'zod';
+function text(data) {
+    return JSON.stringify(data, null, 2);
+}
+/**
+ * Browser control for chatbot agents (#2288): see and drive the page the chat
+ * widget is embedded in.
+ *
+ * Gated by the `browser_control` capability, which the backend grants only to a
+ * key bound to a chat session — a scheduled run or a coder never sees these.
+ * The backend gates every call on the visitor's own grant as well, so a tool
+ * called out of turn is refused there rather than here.
+ */
+export const BROWSER_TOOLS = [
+    {
+        name: 'browser_request_control',
+        description: 'Ask the person you are chatting with for permission to drive their browser. ' +
+            'They see your reason in the conversation with Allow and Deny buttons, and this call waits for their answer. ' +
+            'You MUST call this and be granted control before any other browser tool will work — there is no way around it, ' +
+            'and asking repeatedly after a refusal is not acceptable. ' +
+            'Ask only when driving the page is genuinely the best way to help; explaining what to click is usually better.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                reason: {
+                    type: 'string',
+                    description: 'What you want to do on their page, in one plain sentence — this is what they read before deciding (e.g. "Fill in the booking form with the dates we agreed").',
+                },
+            },
+            required: ['reason'],
+        },
+    },
+    {
+        name: 'browser_snapshot',
+        description: 'See the page: its URL, title, visible text, and the interactive elements you can act on. ' +
+            'Each element comes back with a "ref" — pass that ref to browser_click or browser_type. ' +
+            'Refs are only valid until the page changes, so take a fresh snapshot after every action.',
+        inputSchema: { type: 'object', properties: {} },
+    },
+    {
+        name: 'browser_click',
+        description: 'Click an element on the page. The visitor sees the pointer travel to it before it is clicked.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                ref: { type: 'string', description: 'The ref of the element, from browser_snapshot' },
+            },
+            required: ['ref'],
+        },
+    },
+    {
+        name: 'browser_type',
+        description: 'Type text into an input, textarea or select on the page, replacing whatever it holds.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                ref: { type: 'string', description: 'The ref of the field, from browser_snapshot' },
+                text: { type: 'string', description: 'The text to enter' },
+            },
+            required: ['ref', 'text'],
+        },
+    },
+    {
+        name: 'browser_scroll',
+        description: 'Scroll the page vertically to bring more of it into view.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                deltaY: {
+                    type: 'number',
+                    description: 'Pixels to scroll by — positive scrolls down, negative up',
+                },
+            },
+            required: ['deltaY'],
+        },
+    },
+    {
+        name: 'browser_release_control',
+        description: 'Hand the browser back when you are done, so the visitor stops seeing the "agent in control" frame on their screen. ' +
+            'Always do this once the task is finished. They can also stop you themselves at any time.',
+        inputSchema: { type: 'object', properties: {} },
+    },
+];
+const RequestControlSchema = z.object({ reason: z.string() });
+const ClickSchema = z.object({ ref: z.string() });
+const TypeSchema = z.object({ ref: z.string(), text: z.string() });
+const ScrollSchema = z.object({ deltaY: z.coerce.number() });
+/** A refused or failed command is reported as a tool error, so the agent reads
+ *  it as something that did not happen rather than as a result. */
+function commandOutcome(result) {
+    if (!result.ok) {
+        return {
+            content: [{ type: 'text', text: result.error ?? 'The command failed' }],
+            isError: true,
+        };
+    }
+    return { content: [{ type: 'text', text: text(result.result ?? { done: true }) }] };
+}
+export async function handleBrowserTool(name, args, client) {
+    switch (name) {
+        case 'browser_request_control': {
+            const { reason } = RequestControlSchema.parse(args);
+            const { outcome } = await client.requestBrowserControl(reason);
+            if (outcome === 'granted') {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: 'Granted. Take a browser_snapshot to see the page, and call browser_release_control when you are done.',
+                        },
+                    ],
+                };
+            }
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: outcome === 'denied'
+                            ? 'The visitor declined. Do not ask again unless they bring it up — help them another way.'
+                            : 'The visitor did not answer. Carry on without the browser.',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        case 'browser_snapshot':
+            return commandOutcome(await client.runBrowserCommand({ action: 'snapshot' }));
+        case 'browser_click': {
+            const { ref } = ClickSchema.parse(args);
+            return commandOutcome(await client.runBrowserCommand({ action: 'click', ref }));
+        }
+        case 'browser_type': {
+            const parsed = TypeSchema.parse(args);
+            return commandOutcome(await client.runBrowserCommand({ action: 'type', ...parsed }));
+        }
+        case 'browser_scroll': {
+            const { deltaY } = ScrollSchema.parse(args);
+            return commandOutcome(await client.runBrowserCommand({ action: 'scroll', deltaY }));
+        }
+        case 'browser_release_control':
+            await client.releaseBrowserControl();
+            return { content: [{ type: 'text', text: 'Browser control handed back to the visitor.' }] };
+        default:
+            throw new Error(`Unknown browser tool: ${name}`);
+    }
+}

package/dist/client.js

@@ -240,6 +240,13 @@ export class WolfpackClient {
             throw error;
         }
     }
+    // Dependency methods (#2331)
+    async setWorkItemDependencies(workItemId, dependsOnRefIds, teamSlug) {
+        return this.api.put(this.withTeamSlug(`/work-items/${workItemId}/dependencies`, teamSlug), { dependsOnRefIds });
+    }
+    async getWorkItemDependencyGraph(workItemId, teamSlug) {
+        return this.api.get(this.withTeamSlug(`/work-items/${workItemId}/dependency-graph`, teamSlug));
+    }
     // Review check methods
     async listWorkItemChecks(filter, teamSlug) {
         const params = new URLSearchParams();
@@ -981,6 +988,18 @@ export class WolfpackClient {
     async saveMemory(key, content) {
         return this.api.put(`/self/memories/${encodeURIComponent(key)}`, { content });
     }
+    // ─── Browser control (#2288) ───────────────────────────────────────────────
+    // No chat is named on any of these: the backend derives it from the session
+    // this key is bound to, so the agent cannot address another visitor's page.
+    async requestBrowserControl(reason) {
+        return this.api.post('/browser/request', { reason });
+    }
+    async runBrowserCommand(command) {
+        return this.api.post('/browser/command', command);
+    }
+    async releaseBrowserControl() {
+        await this.api.post('/browser/release', {});
+    }
     close() {
         // No cleanup needed for API client
     }

package/dist/index.js

@@ -12,6 +12,7 @@ import { validateConfig, config } from './config.js';
 import { AGENT_BUILDER_TOOLS, handleAgentBuilderTool } from './agentBuilderTools.js';
 import { PROCEDURE_TOOLS, handleProcedureTool } from './procedureTools.js';
 import { AGENT_SELF_TOOLS, AGENT_MEMORY_TOOLS, handleAgentSelfTool } from './agentSelfTools.js';
+import { BROWSER_TOOLS, handleBrowserTool } from './browserTools.js';
 import { resolveRadarItemId } from './resolveRadarItemId.js';
 import { SERVER_INSTRUCTIONS } from './serverInstructions.js';
 import { fetch as proxyFetch } from './proxyFetch.js';
@@ -215,6 +216,29 @@ const SubmitWorkItemFormSchema = z.object({
         .optional()
         .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
 });
+// #2331 — reference numbers, accepted as numbers or as "#2322" the way agents
+// write them, so an ordered plan can be transcribed without reformatting.
+const dependsOnRefIds = () => z
+    .array(z.union([z.number(), z.string()]))
+    .transform((refs) => refs.map((ref) => Number(String(ref).replace(/^#/, ''))))
+    .refine((refs) => refs.every(Number.isInteger), {
+    message: 'depends_on must be work item reference numbers, e.g. [2322] or ["#2322"]',
+});
+const SetWorkItemDependenciesSchema = z.object({
+    work_item_id: refIdString().describe('The refId of the work item that follows the others'),
+    depends_on: dependsOnRefIds().describe('Reference numbers of the prerequisites. Replaces the whole set; pass [] to clear.'),
+    project_slug: z
+        .string()
+        .optional()
+        .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
+});
+const GetWorkItemDependencyGraphSchema = z.object({
+    work_item_id: refIdString().describe('The refId of the work item'),
+    project_slug: z
+        .string()
+        .optional()
+        .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
+});
 const WorkPoolMemberSchema = z.object({
     work_pool: z.string().describe('Work pool id or name'),
     user_id: z.string().describe('The user id to add or remove'),
@@ -368,6 +392,9 @@ const CreateWorkItemSchema = z.object({
         .string()
         .optional()
         .describe('Link to a radar/initiative item. Accepts refId ("5" or "#r5") or UUID.'),
+    depends_on: dependsOnRefIds()
+        .optional()
+        .describe('Reference numbers of work items that must finish before this one starts'),
 });
 const CreateIssueSchema = z.object({
     project_slug: z
@@ -1268,6 +1295,56 @@ class WolfpackMCPServer {
                             required: ['work_item_id', 'check_id', 'status'],
                         },
                     },
+                    {
+                        name: 'set_work_item_dependencies',
+                        description: 'Record which work items must finish before this one can start, so the board knows the order ' +
+                            'and the pickup gate enforces it. Use this when you file or plan a set of ordered items, instead ' +
+                            'of writing "Follows #2322" into a description — a description is prose nothing enforces. ' +
+                            'A bare #N is a WORK ITEM refId, and depends_on takes those reference numbers. ' +
+                            'REPLACES the whole set: pass every prerequisite you want the item to have, and [] to clear it. ' +
+                            'An item may not depend on itself, nor on anything that already depends on it — either would leave ' +
+                            'it permanently blocked, and both are refused with 400 naming the item. ' +
+                            'Requires the mcp:work_items:manage_dependencies permission, which is separate from ' +
+                            "mcp:work_items:update: updating your own item does not let you order other people's work. " +
+                            'Returns what the item now depends on, what follows it, and which prerequisites are still unfinished.',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                work_item_id: {
+                                    type: 'string',
+                                    description: 'The refId of the work item that follows the others',
+                                },
+                                depends_on: {
+                                    type: 'array',
+                                    items: { type: ['number', 'string'] },
+                                    description: 'Reference numbers of the prerequisites, as 2322 or "#2322". Replaces the whole set; pass [] to clear.',
+                                },
+                                project_slug: {
+                                    type: 'string',
+                                    description: 'Project slug (required for multi-project users, use list_projects to get slugs)',
+                                },
+                            },
+                            required: ['work_item_id', 'depends_on'],
+                        },
+                    },
+                    {
+                        name: 'get_work_item_dependency_graph',
+                        description: 'The whole chain of ordered work around one work item — the prerequisites above it and the work ' +
+                            'that follows below — as nodes and edges, each item appearing exactly once. An edge runs from the ' +
+                            "item that must finish to the item that waits on it. Use it to see a plan's shape; " +
+                            "get_work_item already gives one item's own dependsOn, nextItems and blockedBy.",
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                work_item_id: { type: 'string', description: 'The refId of the work item' },
+                                project_slug: {
+                                    type: 'string',
+                                    description: 'Project slug (required for multi-project users, use list_projects to get slugs)',
+                                },
+                            },
+                            required: ['work_item_id'],
+                        },
+                    },
                     // Radar Item (Initiative/Roadmap) tools
                     {
                         name: 'list_radar_items',
@@ -1458,6 +1535,9 @@ class WolfpackMCPServer {
                         name: 'create_work_item',
                         description: 'Create a new work item in your current project (auto-selected for single-project users, or use list_projects first for multi-project). Requires mcp:work_items:create permission. ' +
                             'Agents: work you file lands unassigned in the backlog, whatever status you ask for, and waits there for the Delivery Lead to approve and assign it. ' +
+                            'ORDERED WORK: when you file a set of items that must happen in order, give each one depends_on ' +
+                            'naming the reference numbers it follows, rather than writing "Follows #2322" into the description — ' +
+                            'that way the board knows the order and the pickup gate enforces it. ' +
                             CONTENT_LINKING_HELP,
                         inputSchema: {
                             type: 'object',
@@ -1507,6 +1587,11 @@ class WolfpackMCPServer {
                                     type: 'string',
                                     description: 'Link to a radar/initiative item. Accepts refId (e.g. "5" or "#r5") or UUID.',
                                 },
+                                depends_on: {
+                                    type: 'array',
+                                    items: { type: ['number', 'string'] },
+                                    description: 'Reference numbers of work items that must finish before this one starts, as 2322 or "#2322". Filing an ordered set one call each needs mcp:work_items:manage_dependencies.',
+                                },
                             },
                             required: ['title'],
                         },
@@ -2467,6 +2552,7 @@ class WolfpackMCPServer {
                     ...(this.capabilities.includes('agent_self') ? AGENT_SELF_TOOLS : []),
                     ...(this.capabilities.includes('agent_memory') ? AGENT_MEMORY_TOOLS : []),
                     ...(this.capabilities.includes('agent_builder') ? AGENT_BUILDER_TOOLS : []),
+                    ...(this.capabilities.includes('browser_control') ? BROWSER_TOOLS : []),
                 ],
             };
         });
@@ -2785,6 +2871,48 @@ class WolfpackMCPServer {
                             ],
                         };
                     }
+                    case 'set_work_item_dependencies': {
+                        const parsed = SetWorkItemDependenciesSchema.parse(args);
+                        const teamSlug = parsed.project_slug || this.client.getProjectSlug() || undefined;
+                        const dependencies = await this.client.setWorkItemDependencies(parsed.work_item_id, parsed.depends_on, teamSlug);
+                        const name = (items) => items.map((item) => `#${item.refId} "${item.title}"`).join(', ');
+                        const summary = dependencies.dependsOn.length === 0
+                            ? `#${parsed.work_item_id} now depends on nothing`
+                            : `#${parsed.work_item_id} now depends on ${name(dependencies.dependsOn)}` +
+                                (dependencies.blockedBy.length > 0
+                                    ? `, and cannot start until ${name(dependencies.blockedBy)} finishes`
+                                    : ', all of which have finished');
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `${summary}\n\n${JSON.stringify(stripUuids(dependencies), null, 2)}`,
+                                },
+                            ],
+                        };
+                    }
+                    case 'get_work_item_dependency_graph': {
+                        const parsed = GetWorkItemDependencyGraphSchema.parse(args);
+                        const teamSlug = parsed.project_slug || this.client.getProjectSlug() || undefined;
+                        const graph = await this.client.getWorkItemDependencyGraph(parsed.work_item_id, teamSlug);
+                        // Edges name nodes by UUID, which agents never see, so they are
+                        // rewritten as reference numbers before the UUIDs are stripped —
+                        // dropping them would leave a list of items and no order at all
+                        const byId = new Map(graph.nodes.map((node) => [node.id, node.refId]));
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: JSON.stringify({
+                                        root: `#${byId.get(graph.rootId)}`,
+                                        items: stripUuids(graph.nodes),
+                                        // Each entry reads "A must finish before B can start"
+                                        mustFinishBefore: graph.edges.map((edge) => `#${byId.get(edge.from)} → #${byId.get(edge.to)}`),
+                                    }, null, 2),
+                                },
+                            ],
+                        };
+                    }
                     // Radar Item handlers
                     case 'list_radar_items': {
                         const parsed = ListRadarItemsSchema.parse(args);
@@ -2904,6 +3032,7 @@ class WolfpackMCPServer {
                             leadingUserId: parsed.leading_user_id,
                             categoryId: parsed.category_id,
                             radarItemId,
+                            dependsOnRefIds: parsed.depends_on,
                             teamSlug,
                         });
                         return {
@@ -3537,6 +3666,13 @@ class WolfpackMCPServer {
                                 return handleAgentSelfTool(name, args, this.client);
                             }
                         }
+                        // Check browser control tools (#2288 — chat sessions only)
+                        if (this.capabilities.includes('browser_control')) {
+                            const browserToolNames = BROWSER_TOOLS.map((t) => t.name);
+                            if (browserToolNames.includes(name)) {
+                                return handleBrowserTool(name, args, this.client);
+                            }
+                        }
                         // Check agent builder tools
                         if (this.capabilities.includes('agent_builder')) {
                             return handleAgentBuilderTool(name, args, this.client);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolfpack-mcp",
-  "version": "1.0.96",
+  "version": "1.0.98",
   "description": "MCP server for Wolfpack AI-enhanced software delivery tools",
   "main": "dist/index.js",
   "type": "module",