dryhack-mcp 2.3.0__tar.gz → 2.3.2__tar.gz

{dryhack_mcp-2.3.0 → dryhack_mcp-2.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dryhack-mcp
-Version: 2.3.0
+Version: 2.3.2
 Summary: DryHack-MCP - an MCP server providing offensive-security tooling (curl, python, shell, Playwright browser) and a scope-gated authorize engine for authorized penetration testing.
 Author: Afrizal F.A
 License: MIT License
@@ -74,13 +74,19 @@ With [uv](https://docs.astral.sh/uv/) you can run the server directly from PyPI
 — no manual install needed:
 
 ```bash
-uvx dryhack-mcp
+# recommended: pull the browser extra so the `browser` tool is guaranteed
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp
 # http transport
-uvx dryhack-mcp --transport http --host 0.0.0.0 --port 8000
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp --transport http --host 0.0.0.0 --port 8000
 # pin a version
-uvx dryhack-mcp@0.1.3
+uvx --from 'dryhack-mcp[browser]==2.3.2' dryhack-mcp
 ```
 
+> `uvx dryhack-mcp` (without `--from`) also works — Playwright is a core
+> dependency — but the explicit `--from 'dryhack-mcp[browser]'` form is the
+> recommended, unambiguous way to get everything the `browser` tool needs even
+> if a stale cache is involved.
+
 For development:
 
 ```bash
@@ -90,10 +96,17 @@ python3 -m pip install -e ".[dev]"
 ### Browser tool (Playwright)
 
 Playwright is a **core dependency**, so a plain `pip install dryhack-mcp` /
-`uvx dryhack-mcp` already ships it — no extra needed. The browser *binaries*
-(Chromium/Firefox/WebKit) are not distributed via pip, so the first time the
-`browser` tool launches an engine it **auto-runs `playwright install <browser>`**
-if the binary is missing.
+`uvx dryhack-mcp` already ships it. For MCP clients using uvx, the recommended,
+unambiguous invocation is:
+
+```bash
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp
+```
+
+The browser *binaries* (Chromium/Firefox/WebKit) are not distributed via pip, so
+the first time the `browser` tool launches an engine it **auto-runs
+`playwright install <browser>`** if the binary is missing (you'll see a
+`[setup] auto-installed ...` note in the tool output on that first call).
 
 To pre-install the binaries (optional, avoids the one-time first-use download):
 
@@ -157,7 +170,7 @@ CLI options:
   "mcpServers": {
     "dryhack": {
       "command": "uvx",
-      "args": ["dryhack-mcp"],
+      "args": ["--from", "dryhack-mcp[browser]", "dryhack-mcp"],
       "env": {
         "DRYHACK_COMMAND_TIMEOUT": "120"
       }
@@ -166,6 +179,10 @@ CLI options:
 }
 ```
 
+> The `--from dryhack-mcp[browser]` args ensure the `browser` tool's Playwright
+> dependency is present. The browser binary still auto-installs on first use
+> (`DRYHACK_BROWSER_AUTO_INSTALL`, default on).
+
 ### http
 
 ```json

{dryhack_mcp-2.3.0 → dryhack_mcp-2.3.2}/README.md

@@ -28,13 +28,19 @@ With [uv](https://docs.astral.sh/uv/) you can run the server directly from PyPI
 — no manual install needed:
 
 ```bash
-uvx dryhack-mcp
+# recommended: pull the browser extra so the `browser` tool is guaranteed
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp
 # http transport
-uvx dryhack-mcp --transport http --host 0.0.0.0 --port 8000
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp --transport http --host 0.0.0.0 --port 8000
 # pin a version
-uvx dryhack-mcp@0.1.3
+uvx --from 'dryhack-mcp[browser]==2.3.2' dryhack-mcp
 ```
 
+> `uvx dryhack-mcp` (without `--from`) also works — Playwright is a core
+> dependency — but the explicit `--from 'dryhack-mcp[browser]'` form is the
+> recommended, unambiguous way to get everything the `browser` tool needs even
+> if a stale cache is involved.
+
 For development:
 
 ```bash
@@ -44,10 +50,17 @@ python3 -m pip install -e ".[dev]"
 ### Browser tool (Playwright)
 
 Playwright is a **core dependency**, so a plain `pip install dryhack-mcp` /
-`uvx dryhack-mcp` already ships it — no extra needed. The browser *binaries*
-(Chromium/Firefox/WebKit) are not distributed via pip, so the first time the
-`browser` tool launches an engine it **auto-runs `playwright install <browser>`**
-if the binary is missing.
+`uvx dryhack-mcp` already ships it. For MCP clients using uvx, the recommended,
+unambiguous invocation is:
+
+```bash
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp
+```
+
+The browser *binaries* (Chromium/Firefox/WebKit) are not distributed via pip, so
+the first time the `browser` tool launches an engine it **auto-runs
+`playwright install <browser>`** if the binary is missing (you'll see a
+`[setup] auto-installed ...` note in the tool output on that first call).
 
 To pre-install the binaries (optional, avoids the one-time first-use download):
 
@@ -111,7 +124,7 @@ CLI options:
   "mcpServers": {
     "dryhack": {
       "command": "uvx",
-      "args": ["dryhack-mcp"],
+      "args": ["--from", "dryhack-mcp[browser]", "dryhack-mcp"],
       "env": {
         "DRYHACK_COMMAND_TIMEOUT": "120"
       }
@@ -120,6 +133,10 @@ CLI options:
 }
 ```
 
+> The `--from dryhack-mcp[browser]` args ensure the `browser` tool's Playwright
+> dependency is present. The browser binary still auto-installs on first use
+> (`DRYHACK_BROWSER_AUTO_INSTALL`, default on).
+
 ### http
 
 ```json

{dryhack_mcp-2.3.0 → dryhack_mcp-2.3.2}/dryhack_mcp/__init__.py

@@ -1,3 +1,3 @@
 """DryHack-MCP: offensive-security MCP server for authorized penetration testing."""
 
-__version__ = "2.3.0"
+__version__ = "2.3.2"

{dryhack_mcp-2.3.0 → dryhack_mcp-2.3.2}/dryhack_mcp/tools/browser_tool.py

@@ -449,8 +449,18 @@ def _auto_install_browser(browser_name: str) -> Tuple[bool, str]:
         return False, f"{type(exc).__name__}: {exc}"
 
 
-def _launch_browser(browser_type, browser_name: str, launch_kwargs: Dict[str, Any]):
-    """Launch the browser, auto-installing its binary on first use if missing."""
+def _launch_browser(
+    browser_type,
+    browser_name: str,
+    launch_kwargs: Dict[str, Any],
+    session: Optional[Dict[str, Any]] = None,
+):
+    """Launch the browser, auto-installing its binary on first use if missing.
+
+    On a successful on-demand install, records a human-readable note in
+    ``session["_install_note"]`` so the caller can surface the one-time download
+    in the tool output (otherwise the first call looks like a silent hang).
+    """
     try:
         return browser_type.launch(**launch_kwargs)
     except Exception as exc:  # noqa: BLE001
@@ -463,6 +473,11 @@ def _launch_browser(browser_type, browser_name: str, launch_kwargs: Dict[str, An
         if binary_missing and config.BROWSER_AUTO_INSTALL:
             ok, log = _auto_install_browser(browser_name)
             if ok:
+                if session is not None:
+                    session["_install_note"] = (
+                        f"auto-installed the '{browser_name}' browser binary on "
+                        "first use (one-time download)"
+                    )
                 return browser_type.launch(**launch_kwargs)
             raise RuntimeError(
                 f"{browser_name} binary missing and auto-install failed. "
@@ -504,7 +519,7 @@ def _run_session(
         if session.get("proxy") is not None:
             launch_kwargs["proxy"] = session["proxy"]
 
-        browser = _launch_browser(browser_type, browser_name, launch_kwargs)
+        browser = _launch_browser(browser_type, browser_name, launch_kwargs, session)
         try:
             context = browser.new_context(**_build_context_options(session))
             if default_timeout is not None:
@@ -690,6 +705,9 @@ def browser(
         f"$ browser[{session['browser_type']}, "
         f"headless={session['headless']}] {len(normalized)} step(s)"
     )
+    install_note = session.get("_install_note")
+    if install_note:
+        header = f"{header}\n[setup] {install_note}"
     if error:
         return f"{header}\n[error] {error}"
 

{dryhack_mcp-2.3.0 → dryhack_mcp-2.3.2}/dryhack_mcp.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dryhack-mcp
-Version: 2.3.0
+Version: 2.3.2
 Summary: DryHack-MCP - an MCP server providing offensive-security tooling (curl, python, shell, Playwright browser) and a scope-gated authorize engine for authorized penetration testing.
 Author: Afrizal F.A
 License: MIT License
@@ -74,13 +74,19 @@ With [uv](https://docs.astral.sh/uv/) you can run the server directly from PyPI
 — no manual install needed:
 
 ```bash
-uvx dryhack-mcp
+# recommended: pull the browser extra so the `browser` tool is guaranteed
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp
 # http transport
-uvx dryhack-mcp --transport http --host 0.0.0.0 --port 8000
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp --transport http --host 0.0.0.0 --port 8000
 # pin a version
-uvx dryhack-mcp@0.1.3
+uvx --from 'dryhack-mcp[browser]==2.3.2' dryhack-mcp
 ```
 
+> `uvx dryhack-mcp` (without `--from`) also works — Playwright is a core
+> dependency — but the explicit `--from 'dryhack-mcp[browser]'` form is the
+> recommended, unambiguous way to get everything the `browser` tool needs even
+> if a stale cache is involved.
+
 For development:
 
 ```bash
@@ -90,10 +96,17 @@ python3 -m pip install -e ".[dev]"
 ### Browser tool (Playwright)
 
 Playwright is a **core dependency**, so a plain `pip install dryhack-mcp` /
-`uvx dryhack-mcp` already ships it — no extra needed. The browser *binaries*
-(Chromium/Firefox/WebKit) are not distributed via pip, so the first time the
-`browser` tool launches an engine it **auto-runs `playwright install <browser>`**
-if the binary is missing.
+`uvx dryhack-mcp` already ships it. For MCP clients using uvx, the recommended,
+unambiguous invocation is:
+
+```bash
+uvx --from 'dryhack-mcp[browser]' dryhack-mcp
+```
+
+The browser *binaries* (Chromium/Firefox/WebKit) are not distributed via pip, so
+the first time the `browser` tool launches an engine it **auto-runs
+`playwright install <browser>`** if the binary is missing (you'll see a
+`[setup] auto-installed ...` note in the tool output on that first call).
 
 To pre-install the binaries (optional, avoids the one-time first-use download):
 
@@ -157,7 +170,7 @@ CLI options:
   "mcpServers": {
     "dryhack": {
       "command": "uvx",
-      "args": ["dryhack-mcp"],
+      "args": ["--from", "dryhack-mcp[browser]", "dryhack-mcp"],
       "env": {
         "DRYHACK_COMMAND_TIMEOUT": "120"
       }
@@ -166,6 +179,10 @@ CLI options:
 }
 ```
 
+> The `--from dryhack-mcp[browser]` args ensure the `browser` tool's Playwright
+> dependency is present. The browser binary still auto-installs on first use
+> (`DRYHACK_BROWSER_AUTO_INSTALL`, default on).
+
 ### http
 
 ```json

{dryhack_mcp-2.3.0 → dryhack_mcp-2.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dryhack-mcp"
-version = "2.3.0"
+version = "2.3.2"
 description = "DryHack-MCP - an MCP server providing offensive-security tooling (curl, python, shell, Playwright browser) and a scope-gated authorize engine for authorized penetration testing."
 readme = "README.md"
 license = { file = "LICENSE" }

{dryhack_mcp-2.3.0 → dryhack_mcp-2.3.2}/tests/test_browser.py

@@ -124,6 +124,30 @@ class BrowserToolTests(unittest.TestCase):
         self.assertEqual(calls["launch"], 2)  # failed once, retried once
         self.assertEqual(calls["install"], 1)
 
+    def test_launch_records_install_note_in_session(self):
+        state = {"launch": 0}
+
+        class FakeBrowserType:
+            def launch(self, **kwargs):
+                state["launch"] += 1
+                if state["launch"] == 1:
+                    raise RuntimeError("Executable doesn't exist; playwright install")
+                return "handle"
+
+        session = {}
+        original = browser_tool._auto_install_browser
+        browser_tool._auto_install_browser = lambda name: (True, "ok")
+        original_flag = browser_tool.config.BROWSER_AUTO_INSTALL
+        browser_tool.config.BROWSER_AUTO_INSTALL = True
+        try:
+            browser_tool._launch_browser(FakeBrowserType(), "chromium", {}, session)
+        finally:
+            browser_tool._auto_install_browser = original
+            browser_tool.config.BROWSER_AUTO_INSTALL = original_flag
+
+        self.assertIn("_install_note", session)
+        self.assertIn("chromium", session["_install_note"])
+
     def test_launch_does_not_autoinstall_when_disabled(self):
         class FakeBrowserType:
             def launch(self, **kwargs):