feat: add open-operator — AI agent browser automation

[jackwener]

Summary

Add opencli operate command — an AI agent that autonomously controls the browser to complete tasks described in natural language, then saves successful operations as reusable TypeScript CLI skills.

End-to-end verified: Successfully tested on example.com (data extraction) and Twitter/X (DM listing with login state reuse).

Key capabilities

• opencli operate "task" — LLM-driven browser control loop (observe → reason → act → repeat)
• opencli operate --save-as site/name — Saves successful operations as .ts adapters via LLM code generation
• Native CDP input — Input.dispatchMouseEvent/KeyEvent for isTrusted:true events, with automatic JS injection fallback
• Rich trace capture — Network interceptor captures API responses for intelligent strategy selection
• API discovery — Analyzes captured requests to find the "golden API", recommends optimal strategy (PUBLIC/COOKIE/UI)
• Self-repair — Generated adapters are syntax-validated; errors are fed back to LLM for auto-fix

Architecture

CLI → Agent Loop → DOM Snapshot + LLM → Execute Actions → Observe → Repeat
                                                              ↓
                                              Rich Trace (actions + network + auth)
                                                              ↓
                                              API Discovery → LLM Code Gen → .ts Adapter

New files

File	Purpose
src/agent/agent-loop.ts	Core LLM-driven control loop
src/agent/action-executor.ts	Action dispatch with CDP→JS fallback
src/agent/dom-context.ts	DOM snapshot + element coordinate map
src/agent/prompts.ts	System prompt & step message builder
src/agent/llm-client.ts	Anthropic SDK wrapper (supports ANTHROPIC_BASE_URL)
src/agent/types.ts	Zod schemas for actions & responses
src/agent/trace-recorder.ts	Rich context capture (network + auth + thinking)
src/agent/api-discovery.ts	API scoring & strategy recommendation
src/agent/skill-saver.ts	LLM-powered TS adapter generation + validation

Security

• CDP passthrough uses a method allowlist (22 permitted methods)
• Network response bodies are sanitized before writing to disk (tokens/passwords redacted)
• Auth tokens stored as boolean flags only, never actual values
• --save-as names validated against path traversal ([a-zA-Z0-9_-] only)

Dependencies

• zod — Runtime validation of LLM structured output
• @anthropic-ai/sdk — Anthropic API client

Test plan

• opencli operate --help shows correct usage
• opencli operate --url https://example.com "extract heading" — completes in 1 step
• opencli operate --url https://x.com "get my DMs" — navigates, extracts 10 DMs with login state
• opencli operate --save-as test/heading "extract heading" — generates .ts adapter
• TypeScript compilation passes (main project + extension)
• npm run build succeeds (392 manifest entries)
• Replay generated adapter: opencli test heading