Merge pull request #1450 from feder-cr/libs-0722

image: the browser is invisible-playwright-mcp 0.72.2 (invisible-playwright 0.35.7, invisible-core 45.39.0, firefox-45)

guest/image-builder/builder/mcp-requirements.lock

@@ -463,15 +463,15 @@ httpx2==2.13.1 \
 idna==3.20 \
     --hash=sha256:a7db850025b95ded1eae8a46181a1a6c56c92c96f0e2b005d9ff8dc0210cab44 \
     --hash=sha256:ab7ae7122974553370f0bdb919e1a960b2cd1bc1ef0276416d896db81c14582c
-invisible-core==41.36.0 \
-    --hash=sha256:47306ffeb8ed9fa1dd9c9d7e6dc1e9fcf8a5e6518b7e21c953b4e00ed437621b \
-    --hash=sha256:beb7b942c3e7b3a240b7774ef8f5fbeee2c5566d785a19f306abcb65ba8e2be8
-invisible-playwright==0.35.0 \
-    --hash=sha256:03d116a1605e19c351bc6e51b246aa2b40331c9091f338b68a8e75ed2d83acf0 \
-    --hash=sha256:7721ae7d6ecf8afd9513720d82dfaaec1f8f3b975e64c2c5e0eed9095f5d4255
-invisible-playwright-mcp==0.72.1 \
-    --hash=sha256:cded8587f238f348dd77b97b5e179caa16a2077b861e7120db5f4c9d608377cc \
-    --hash=sha256:e1596ad62acab6116a9776e2e9762cb953f2ea1772f5f0d46e4ec7b1c47ae0eb
+invisible-core==45.39.0 \
+    --hash=sha256:5855e4debbe1937dd6924905723fb4c1e460e038e6045239abb63dd188584919 \
+    --hash=sha256:c53097e0aaea4aa157e44d6d8820458c9409921d21eb3ea84632144b3d89c7dd
+invisible-playwright==0.35.7 \
+    --hash=sha256:9bc56b5c4a9c7a8e2a94092e0b133d799a43da4cf97dfa0bef6b8e0ad355589d \
+    --hash=sha256:fe54800cc49095e5c1a7a8a7bed6c2feb717ea061cc7a2d66bf78b4607134702
+invisible-playwright-mcp==0.72.2 \
+    --hash=sha256:2e7bcb528454a04ed19ea3ccb53537076ee0b174d2cd13c5868e28bb70d28113 \
+    --hash=sha256:857d92272410fa2ff8a16d63a92443faee9cd9c25c84384f18a19582f71b43db
 jiter==0.17.0 \
     --hash=sha256:00b5a98df3e3a3e8cf7b619f4ac2f8bf975bbf3d95d02c5d17b8dbfe5c8b8245 \
     --hash=sha256:00d783a779c5664e16dbad5e3a3c3a75e128b07dd5f4765159658d9210a50ca5 \

guest/image-builder/test/golden.test.ts

@@ -132,8 +132,8 @@ describe("buildGoldenImage", () => {
       base: { sha256: sha256(BASE), serial: "20260926" },
       pinned: {
         uv: { version: "0.12.22", sha256: sha256(UV) },
-        "invisible-playwright-mcp": "0.72.1",
-        "invisible-playwright": "0.35.0",
+        "invisible-playwright-mcp": "0.72.2",
+        "invisible-playwright": "0.35.7",
         apt_snapshot: "20261010T000000Z",
         apt_packages: ["xvfb", "imagemagick"],
       },

invisible_engine_dots/nanobot/dots/invisible_playwright_mcp.json

@@ -1,7 +1,7 @@
 {
  "//": "What invisible-playwright-mcp tells a model, at the version builder/mcp-requirements.lock pins, started as the engine starts it (INVISIBLE_MCP_HOST_MANAGED=1): its instructions and its tools/list as served, and the sentences the engine reads in its answers (the package's OPENED, NOT_OPEN and GONE, %s being the browser). Written by guest/image-builder/builder/capture-mcp-interface.py; capture it again when the lock changes that version.",
  "package": "invisible-playwright-mcp",
- "version": "0.72.1",
+ "version": "0.72.2",
  "instructions": "Drive the page the way a person would. Everything here goes\nthrough the real pointer and the real keyboard.\n\nTry things in this order. It matters, because a page can tell the difference.\n\n1. A named tool with a selector: browser_click, browser_type,\n   browser_select_option, browser_press_key, browser_upload_files.\n   browser_snapshot gives you the selector for each element - pass it\n   verbatim, it is built to be unambiguous.\n\n2. Coordinates. browser_snapshot reports `at: [x, y]` for every element it\n   lists, in viewport pixels. browser_click_at takes exactly those and moves the\n   pointer there. This is the rung for anything a selector does not describe: a\n   canvas, a slider, a map, a custom widget built out of divs.\n\n3. Your eyes. browser_take_screenshot, find the thing in the picture, then\n   browser_click_at on where it is. For what the snapshot does not list at all.\n\n4. browser_evaluate, last, to READ what none of the tools above can.\n\nbrowser_evaluate refuses the obvious ways to act on the page, and names the tool\nto use instead: assigning to value, checked or selected, or calling click(),\ndispatchEvent(), submit() or requestSubmit(). All of those skip the keyboard and\nthe pointer, so the event arrives with isTrusted false - the single clearest\nsignal that something other than a person is driving, and avoiding it is what\nthis browser is for. When you want that, rung 2 or rung 3 is what you actually\nwant.\n\nThat refusal is a guardrail on the obvious road, not a wall around the field.\nJavaScript has unlimited ways to say the same thing and this catches the ones\nworth catching, so DO NOT read a silent pass as permission: if you find a way to\nchange the page through browser_evaluate, that is the bug, and saying so in your\nanswer is worth more than using it.\n\nYou do not need script to read state back, either. The snapshot carries\n`checked` for a checkbox or radio and `value` for a select, alongside the text.\n\nA cookie or consent dialog covers the page until it is answered: a click on\nanything under it waits and fails. When browser_snapshot shows one, click one of\nits buttons first. A date field that is a calendar wants its days clicked, not\ntyped.\n\nIf you get to the bottom of the ladder and still cannot do the thing, say so in\nyour answer. A task reported as impossible is worth more than a task completed\nin a way that gets you blocked, and a number or a fact you could not read on the\npage is not one to give.\n\nReach a page through a link you have seen or an address you were given, not one\nyou remember: sites move their pages, and an address from memory often answers\n404. browser_snapshot lists a page's links with their URLs, and a site's own\nmenu and search reach what you cannot guess. From nothing, search: navigate to\nhttps://search.brave.com/search?q=<your words> and read the results with\nbrowser_snapshot, whose URLs are real. After a 404, the next address comes from\na page that loaded or from a search, not from memory.\n\nA browser drives ONE page, and there is no way to open, list, choose or close\nanother: browser_navigate opens the page and every other tool acts on it. Going\nsomewhere else and coming back is a navigation, not a second window: to go\nback, navigate to the address you came from, and to load a page again, navigate\nto its own address.",
  "browser": "main",
  "answers": {