browserr-mcp 0.7.1__tar.gz

browserr_mcp-0.7.1/.gitignore

@@ -0,0 +1,76 @@
+/target/
+engine/target/
+chrome/target/
+Cargo.lock
+*.tmp
+dist/
+
+engine*.log
+chrome-boot-test.log
+
+*.zip
+*.tar.gz
+
+chrome-driver-test.log
+
+tools/__pycache__/
+__pycache__/
+mcp-crash.log
+mcp-wrap.log
+tools/mcp-shots/
+tools/mcp-evidence/
+
+# icon build artifacts: sources live in scripts/, outputs are regenerable
+scripts/node_modules/
+scripts/package-lock.json
+scripts/icon-*.png
+scripts/extracted-exe-icon.png
+scripts/ci-*.log
+
+# terminal test captures and caches
+tests/__pycache__/
+term/__pycache__/
+term/*.log
+term/native-frame.png
+
+# one-off smoke probes and binary captures (reusable harnesses are committed)
+.smoke/gh-logs/
+.smoke/*.bin
+.smoke/sixel_probe.sh
+.smoke/tmux_query_test.py
+.smoke/tmux_decision_probe.py
+.smoke/tmux_env_probe.py
+.smoke/tmux_img_probe.sh
+browserr-term-engine.log
+browserr-term-geometry.log
+tools/*.html
+tools/*.bin
+tools/*-shot.png
+tools/filepicker-picked.txt
+tools/mcp-picker.txt
+tools/mcp-engine.log
+tools/net-test.html
+tools/net-api.json
+tools/net-xhr.txt
+tools/frames-test.html
+tools/frames-child.html
+tools/intercept-test.html
+tools/form-test.html
+tools/form-flow.html
+tools/annotate-test.html
+tools/annotate-shot.png
+tools/annotate-preview.png
+tools/handoff-test.html
+tools/handoff-clean.html
+tools/pay-test.html
+tools/sw-render.html
+tools/compat-probe.html
+tools/compat-probe2.html
+tools/probe_mod.js
+tools/probe_run.py
+tools/probe2_run.py
+
+tools/trust-evidence/
+tools/mcp-profiles/
+tools/mcp-evidence/
+tools/mcp-shots/

browserr_mcp-0.7.1/PKG-INFO

@@ -0,0 +1,96 @@
+Metadata-Version: 2.5
+Name: browserr-mcp
+Version: 0.7.1
+Summary: MCP server for Browserr, the Servo-based agent browser. One command; the platform engine binary is downloaded and digest-verified on first run.
+Project-URL: Homepage, https://browserr.dev/
+Project-URL: Repository, https://github.com/Omodaka9375/browserr
+Project-URL: Changelog, https://github.com/Omodaka9375/browserr/blob/main/CHANGELOG.md
+Project-URL: Issues, https://github.com/Omodaka9375/browserr/issues
+Author: Omodaka9375
+License-Expression: Apache-2.0
+Keywords: agents,ai,browser,browser-automation,headless,mcp,model-context-protocol,servo
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Rust
+Classifier: Topic :: Internet :: WWW/HTTP :: Browsers
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+
+# browserr-mcp
+
+[MCP](https://modelcontextprotocol.io) server for
+[Browserr](https://browserr.dev) — the Servo-based browser engine built
+for AI agents. One command; the platform engine binary is downloaded and
+sha256-verified on first run.
+
+```json
+{
+  "mcpServers": {
+    "browserr": {
+      "command": "uvx",
+      "args": ["browserr-mcp"]
+    }
+  }
+}
+```
+
+or, installed directly:
+
+```json
+{
+  "mcpServers": {
+    "browserr": { "command": "browserr-mcp" }
+  }
+}
+```
+
+## What you get
+
+42 tools covering navigation, token-cheap page reads, structured page
+inventories with stable element refs (`e7`), type-aware form filling,
+annotated screenshots, fail-closed request interception, HTTP-auth and
+file-picker events, evidence capture, and human handoff (pause the
+page, let a person handle the CAPTCHA, resume).
+
+The engine is a single Rust binary (Servo 0.8): CPU rendering by
+default, EasyList adblock built in, no Chromium, no CDP, no driver
+downloads. It runs on Windows, Linux (x64/ARM64) and macOS.
+
+Browserr fails closed by design: uncertain requests are blocked, not
+guessed; credentials are never logged; every run leaves timestamped
+evidence.
+
+## Environment variables
+
+| Variable | Default | Purpose |
+| --- | --- | --- |
+| `BROWSERR_VERSION` | latest release | pin a release tag, e.g. `v0.7.1` |
+| `BROWSERR_HOME` | `~/.browserr/versions/<version>` | install dir; an existing unpack with the engine binary skips the download |
+
+## First run
+
+The bootstrap queries the official GitHub release API, downloads the
+platform asset, verifies it against the sha256 digest GitHub reports
+for that asset, and unpacks it under `~/.browserr/versions/<version>`.
+A missing digest is a hard stop — the digest is the corruption guard;
+TLS only covers the transport.
+
+Prefer to install ahead of time?
+
+```sh
+uvx browserr-install
+```
+
+## Links
+
+- Browserr: https://browserr.dev/
+- Source: https://github.com/Omodaka9375/browserr
+- Changelog: https://github.com/Omodaka9375/browserr/blob/main/CHANGELOG.md
+
+Apache-2.0. Engine and Python tooling are stdlib-only; this bootstrap
+adds no third-party Python dependencies.

browserr_mcp-0.7.1/README.md

@@ -0,0 +1,73 @@
+# browserr-mcp
+
+[MCP](https://modelcontextprotocol.io) server for
+[Browserr](https://browserr.dev) — the Servo-based browser engine built
+for AI agents. One command; the platform engine binary is downloaded and
+sha256-verified on first run.
+
+```json
+{
+  "mcpServers": {
+    "browserr": {
+      "command": "uvx",
+      "args": ["browserr-mcp"]
+    }
+  }
+}
+```
+
+or, installed directly:
+
+```json
+{
+  "mcpServers": {
+    "browserr": { "command": "browserr-mcp" }
+  }
+}
+```
+
+## What you get
+
+42 tools covering navigation, token-cheap page reads, structured page
+inventories with stable element refs (`e7`), type-aware form filling,
+annotated screenshots, fail-closed request interception, HTTP-auth and
+file-picker events, evidence capture, and human handoff (pause the
+page, let a person handle the CAPTCHA, resume).
+
+The engine is a single Rust binary (Servo 0.8): CPU rendering by
+default, EasyList adblock built in, no Chromium, no CDP, no driver
+downloads. It runs on Windows, Linux (x64/ARM64) and macOS.
+
+Browserr fails closed by design: uncertain requests are blocked, not
+guessed; credentials are never logged; every run leaves timestamped
+evidence.
+
+## Environment variables
+
+| Variable | Default | Purpose |
+| --- | --- | --- |
+| `BROWSERR_VERSION` | latest release | pin a release tag, e.g. `v0.7.1` |
+| `BROWSERR_HOME` | `~/.browserr/versions/<version>` | install dir; an existing unpack with the engine binary skips the download |
+
+## First run
+
+The bootstrap queries the official GitHub release API, downloads the
+platform asset, verifies it against the sha256 digest GitHub reports
+for that asset, and unpacks it under `~/.browserr/versions/<version>`.
+A missing digest is a hard stop — the digest is the corruption guard;
+TLS only covers the transport.
+
+Prefer to install ahead of time?
+
+```sh
+uvx browserr-install
+```
+
+## Links
+
+- Browserr: https://browserr.dev/
+- Source: https://github.com/Omodaka9375/browserr
+- Changelog: https://github.com/Omodaka9375/browserr/blob/main/CHANGELOG.md
+
+Apache-2.0. Engine and Python tooling are stdlib-only; this bootstrap
+adds no third-party Python dependencies.

browserr_mcp-0.7.1/pyproject.toml

@@ -0,0 +1,47 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "browserr-mcp"
+version = "0.7.1"
+description = "MCP server for Browserr, the Servo-based agent browser. One command; the platform engine binary is downloaded and digest-verified on first run."
+readme = "README.md"
+license = "Apache-2.0"
+requires-python = ">=3.10"
+authors = [{ name = "Omodaka9375" }]
+keywords = [
+  "mcp",
+  "model-context-protocol",
+  "browser",
+  "browser-automation",
+  "servo",
+  "ai",
+  "agents",
+  "headless",
+]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Intended Audience :: Developers",
+  "Operating System :: Microsoft :: Windows",
+  "Operating System :: POSIX :: Linux",
+  "Operating System :: MacOS",
+  "Programming Language :: Python :: 3 :: Only",
+  "Programming Language :: Rust",
+  "Topic :: Internet :: WWW/HTTP :: Browsers",
+  "Topic :: Software Development :: Testing",
+]
+dependencies = []
+
+[project.urls]
+Homepage = "https://browserr.dev/"
+Repository = "https://github.com/Omodaka9375/browserr"
+Changelog = "https://github.com/Omodaka9375/browserr/blob/main/CHANGELOG.md"
+Issues = "https://github.com/Omodaka9375/browserr/issues"
+
+[project.scripts]
+browserr-mcp = "browserr_bootstrap:main"
+browserr-install = "browserr_bootstrap:install_main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/browserr_bootstrap"]

browserr_mcp-0.7.1/src/browserr_bootstrap/__init__.py

@@ -0,0 +1,209 @@
+"""Browserr MCP bootstrap: one-command install of the agent browser.
+
+The MCP server itself is stdlib-only Python shipped in the Browserr
+release archives; this package exists so an MCP client can be configured
+with a single command (`browserr-mcp` / `uvx browserr-mcp`) and the
+platform engine binary is fetched and verified automatically on first
+run.
+
+How it works (all stdlib):
+
+1. Resolve the install dir:
+   - $BROWSERR_HOME if set (explicit override),
+   - else ~/.browserr/versions/<version> (per-version, atomic updates).
+2. If the engine binary is missing there, download the platform asset
+   from the official GitHub release, verify its sha256 against the
+   digest GitHub reports for the asset, and unpack it in place.
+3. Exec browserr_mcp.py from the unpack in-process (runpy): it speaks
+   newline JSON-RPC on stdio and needs no third-party packages.
+
+Fail-closed rules (the whole product is fail-closed; so is this):
+- No digest published for the asset -> refuse to install (the digest is
+  the corruption/asset-swap guard; TLS only covers the transport).
+- Non-GitHub download URL -> refuse (a broken API response cannot send
+  the download off-site).
+- Unreasonably large asset -> refuse.
+
+$BROWSERR_VERSION pins a release tag ("v0.7.1" or "0.7.1"); the default
+is the latest release. $BROWSERR_HOME points at an existing unpack or
+any directory to use as the install root (skips the download when the
+engine binary is already there, e.g. a manually unpacked archive).
+"""
+
+from __future__ import annotations
+
+import hashlib
+import json
+import os
+import platform
+import runpy
+import shutil
+import stat
+import sys
+import tempfile
+import urllib.request
+import zipfile
+
+__version__ = "0.7.1"
+
+REPO = "Omodaka9375/browserr"
+API = "https://api.github.com"
+MAX_ASSET_BYTES = 500 * 1024 * 1024  # sanity ceiling, matches update.ps1/sh
+ALLOWED_HOSTS = {"github.com", "objects.githubusercontent.com"}
+
+
+def _platform_asset(version: str) -> str:
+    machine = platform.machine().lower()
+    system = platform.system().lower()
+    if system == "windows":
+        arch = "x64" if machine in ("amd64", "x86_64") else None
+        ext = "zip"
+    elif system == "linux":
+        arch = {"x86_64": "x64", "amd64": "x64", "aarch64": "arm64"}.get(machine)
+        ext = "tar.gz"
+    elif system == "darwin":
+        arch = "arm64" if machine == "arm64" else "x64"
+        ext = "tar.gz"
+    else:
+        arch = None
+    if not arch:
+        raise SystemExit(
+            f"browserr-mcp: no release asset for {system}/{machine}")
+    return f"browserr-{version}-{system}-{arch}.{ext}"
+
+
+def _get_json(url: str):
+    req = urllib.request.Request(url, headers={
+        "User-Agent": "browserr-mcp-bootstrap",
+        "Accept": "application/vnd.github+json",
+    })
+    with urllib.request.urlopen(req, timeout=30) as r:
+        return json.loads(r.read().decode("utf-8"))
+
+
+def _resolve_release() -> tuple[str, dict]:
+    pin = os.environ.get("BROWSERR_VERSION", "").strip().lstrip("v")
+    if pin:
+        rel = _get_json(f"{API}/repos/{REPO}/releases/tags/v{pin}")
+    else:
+        rel = _get_json(f"{API}/repos/{REPO}/releases/latest")
+    tag = rel.get("tag_name", "").lstrip("v")
+    if not tag:
+        raise SystemExit("browserr-mcp: release has no tag_name")
+    return tag, rel
+
+
+def _install_dir(version: str) -> str:
+    home = os.environ.get("BROWSERR_HOME")
+    if home:
+        return os.path.abspath(home)
+    base = os.path.join(os.path.expanduser("~"), ".browserr", "versions")
+    return os.path.join(base, version)
+
+
+def _engine_present(d: str) -> bool:
+    exe = "engine.exe" if os.name == "nt" else "engine"
+    return os.path.isfile(os.path.join(d, exe))
+
+
+def _unpack(path: str, dest: str) -> None:
+    if path.endswith(".zip"):
+        with zipfile.ZipFile(path) as z:
+            z.extractall(dest)
+            for info in z.infolist():
+                if info.external_attr >> 28 == 0o3:
+                    target = os.path.join(dest, info.filename)
+                    if os.path.exists(target):
+                        os.chmod(target, os.stat(target).st_mode | stat.S_IXUSR)
+    else:
+        import tarfile
+        with tarfile.open(path) as t:
+            t.extractall(dest)
+            for m in t.getmembers():
+                if m.mode & 0o111 and m.isfile():
+                    target = os.path.join(dest, m.name)
+                    if os.path.exists(target):
+                        os.chmod(target, os.stat(target).st_mode | stat.S_IXUSR)
+
+
+def ensure_engine() -> str:
+    """Return the unpack dir; download+verify the engine if missing."""
+    tag, release = _resolve_release()
+    dest = _install_dir(tag)
+    if _engine_present(dest):
+        return dest
+
+    asset_name = _platform_asset(tag)
+    asset = next((a for a in release.get("assets", [])
+                  if a.get("name") == asset_name), None)
+    if not asset:
+        raise SystemExit(f"browserr-mcp: release v{tag} has no asset {asset_name}")
+
+    url = asset.get("browser_download_url", "")
+    host = urllib.request.urlparse(url).hostname or ""
+    if urllib.request.urlparse(url).scheme != "https" or host not in ALLOWED_HOSTS:
+        raise SystemExit(f"browserr-mcp: refusing non-GitHub download URL: {url}")
+    if asset.get("size", 0) > MAX_ASSET_BYTES:
+        raise SystemExit("browserr-mcp: refusing implausibly large asset")
+
+    expected = (asset.get("digest") or "").removeprefix("sha256:").lower()
+    if not expected:
+        raise SystemExit(
+            "browserr-mcp: release asset carries no sha256 digest; refusing "
+            "to install unverified (the digest is the corruption guard; "
+            "TLS only covers the transport)")
+
+    os.makedirs(dest, exist_ok=True)
+    tmp = tempfile.mkdtemp(prefix="browserr-bootstrap-")
+    try:
+        archive = os.path.join(tmp, asset_name)
+        print(f"browserr-mcp: downloading {asset_name} "
+              f"({asset.get('size', 0) // (1024*1024)} MB)...", file=sys.stderr)
+        req = urllib.request.Request(url, headers={"User-Agent": "browserr-mcp-bootstrap"})
+        with urllib.request.urlopen(req, timeout=600) as r, open(archive, "wb") as f:
+            shutil.copyfileobj(r, f)
+
+        h = hashlib.sha256()
+        with open(archive, "rb") as f:
+            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+                h.update(chunk)
+        actual = h.hexdigest()
+        if actual != expected:
+            raise SystemExit(f"browserr-mcp: sha256 mismatch: expected {expected}, got {actual}")
+
+        # unpack to a staging dir, then move into place (all-or-nothing)
+        stage = os.path.join(tmp, "unpacked")
+        os.makedirs(stage)
+        _unpack(archive, stage)
+        if not _engine_present(stage):
+            raise SystemExit("browserr-mcp: archive has no engine binary; not a browserr release?")
+        for entry in os.listdir(stage):
+            shutil.move(os.path.join(stage, entry), os.path.join(dest, entry))
+        return dest
+    finally:
+        shutil.rmtree(tmp, ignore_errors=True)
+
+
+def main() -> None:
+    """MCP server entry point: ensure the engine, then run browserr_mcp."""
+    dest = ensure_engine()
+    mcp = os.path.join(dest, "browserr_mcp.py")
+    if not os.path.isfile(mcp):
+        raise SystemExit(f"browserr-mcp: browserr_mcp.py missing in {dest}")
+    os.environ["BROWSERR_ENGINE"] = os.path.join(
+        dest, "engine.exe" if os.name == "nt" else "engine")
+    sys.argv = [mcp] + sys.argv[1:]
+    sys.path.insert(0, dest)
+    runpy.run_path(mcp, run_name="__main__")
+
+
+def install_main() -> None:
+    """Standalone installer entry point: download + verify, then exit."""
+    tag, _ = _resolve_release()
+    dest = _install_dir(tag)
+    if _engine_present(dest):
+        print(f"browserr-install: v{tag} already present at {dest}")
+        return
+    ensure_engine()
+    print(f"browserr-install: v{tag} installed at {dest}")
+    print('MCP config: {"command": "browserr-mcp"}')