analyze_url

Added value: +{
+  "description": "Scroll to the bottom of the page in steps before capture so IntersectionObserver-driven lazy content materializes. Capped at 20 scrolls / 30 s; emits an auto-scrolled info diagnostic.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Descend into child iframes during capture (capped at 20 frames). Appends frame targets with frame-URL attribution; Chromium can recover many inaccessible cross-origin OOPIF trees via CDP. Surfaces a frames-descended info diagnostic when any frame content is captured.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Record SPA route changes (history.pushState/replaceState, popstate, hashchange) that fire during analysis. Surfaces an spa-route-changes info diagnostic when any are observed.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Capture the URL at desktop (1280×800) and mobile (375×667) viewports and diff the resulting target / landmark / heading lists. Surfaces a viewport-divergence diagnostic when content is set to display:none on small screens. Adds ~3-5 s.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Best-effort dismiss of cookie/consent/GDPR banners. Clicks safe-accept buttons (Accept / OK / Got it / Allow all); explicitly skips Decline/Manage/Customize. Emits a banners-dismissed info diagnostic.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Hover candidate triggers to surface hover-only popups/tooltips without attribute hints. Diffs ariaSnapshot before/after each hover; new content becomes _hoverContent enrichment. Default budget 10 candidates; adds ~7-8 s.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Press Tab up to 30 times and record the focused-element sequence so the analyzer can flag positive-tabindex anti-patterns and focus traps. Adds ~1-3 s.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Glob patterns for controls that should be explorable despite the safety policy.",
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

Added value: +{
+  "description": "Browser channel: chrome, chrome-beta, msedge. Bypasses shared pool.",
+  "type": "string"
+}

Added value: +{
+  "description": "Run the per-icon visibility probe across profile-declared (colorScheme × forcedColors) modes. Emits hcm-icon-invisible, low-contrast-icon, and hcm-substitution-risk findings. Undefined defers to the profile default (desktop AT profiles declare the full matrix; mobile/generic do not).",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Activate this trigger before capture/probe, then prioritize newly revealed targets.",
+  "type": "string"
+}

Previous value: -"Glob patterns to exclude targets by name/role/kind (e.g., ['*cookie*', '*notification*', 'banner']). Case-insensitive, supports * and ? wildcards."New value: +"Glob patterns to exclude targets by name/role/kind."

Previous value: -"CSS selectors to hide from analysis (e.g., ['#notifications', '.cookie-banner']). Elements are set aria-hidden before capture."New value: +"CSS selectors to hide from analysis (set aria-hidden before capture)."

Added value: +{
+  "description": "Max total actions during exploration across all branches (default: 30). Prevents pathological pages from exploding probe time. CLI default is 50; MCP default is 30 for tighter agent-loop latency.",
+  "maximum": 200,
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +{
+  "default": 2,
+  "description": "Max exploration depth (default: 2). How many levels of branches to walk when explore=true. Higher = more thorough, but each level multiplies action count. CLI defaults to 3 for power-user runs; MCP defaults to 2 for tighter agent-loop latency.",
+  "maximum": 5,
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +{
+  "description": "Max accumulated targets before exploration stops early (default: 2000).",
+  "maximum": 5000,
+  "minimum": 100,
+  "type": "integer"
+}

Added value: +{
+  "description": "Total exploration timeout in ms; includes initial/revealed probe time when probe is enabled (default: 60000).",
+  "maximum": 300000,
+  "minimum": 1000,
+  "type": "integer"
+}

Previous value: -"Only analyze targets within these landmarks (e.g., ['main', 'navigation']). Reduces noise in large pages."New value: +"Only analyze targets within these landmarks."

Previous value: -"Output format. 'sarif' (recommended) filters to actionable findings only. 'json' includes all targets."New value: +"Output format. 'sarif' (recommended) filters to actionable findings only."

Added value: +{
+  "description": "Glob pattern matched against target id/name/role/kind/selector for goal-directed probing.",
+  "type": "string"
+}

Added value: +{
+  "description": "Exact-ish target id, name, role, kind, or selector hint for goal-directed probing.",
+  "type": "string"
+}

Previous value: -"Include captured states in JSON output for passing to trace_path's statesJson parameter. Uses compact format (~5KB): state IDs, target IDs+selectors+roles, and provenance. The 'states' key in the output is the value to pass as statesJson to trace_path."New value: +"Include captured states in JSON output for passing to trace_path's statesJson parameter. Uses compact format (~5KB)."

Previous value: -"Maximum detailed findings to return (default: 15 for JSON/markdown, 25 for SARIF). Use 3-5 for quick checks, higher for thorough audits."New value: +"Maximum detailed findings to return."

Previous value: -"Run keyboard probes on interactive targets (focus, activation, Escape recovery, Tab trapping). Adds ~30-60s but detects real focus management issues. Off by default — use for deep investigation, not for triage or fix-verify loops. analyze_pages never probes."New value: +"Run keyboard probes on interactive targets. Adds ~30-60s."

Added value: +{
+  "description": "Maximum number of targets for the generic probe. Overrides probeMode's generic budget.",
+  "maximum": 200,
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +{
+  "default": "standard",
+  "description": "Probe depth preset: fast=5/5/3/5, standard=20/20/10/20 (default), deep=50/40/20/40. Budgets are generic/menu/modal/widget.",
+  "enum": [
+    "fast",
+    "standard",
+    "deep"
+  ],
+  "type": "string"
+}

Added value: +{
+  "description": "CSS selectors that narrow probes without changing capture/scoring.",
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

Added value: +{
+  "description": "Probe family intent preset. Default all; use overlay, form, composite-widget, navigation, modal-return-focus, or menu-pattern to spend budget on one class of behavior.",
+  "enum": [
+    "all",
+    "overlay",
+    "composite-widget",
+    "form",
+    "navigation",
+    "modal-return-focus",
+    "menu-pattern"
+  ],
+  "type": "string"
+}

Added value: +{
+  "description": "CSS selectors that define the subtree(s) to capture, score, and probe.",
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

Added value: +{
+  "description": "Apply anti-bot-detection defaults. Pair with channel for Cloudflare-protected sites.",
+  "type": "boolean"
+}

Previous value: -"Path to a Playwright storageState JSON file containing cookies and localStorage. Use save_auth to create this file, then pass the path here to analyze authenticated pages. Example: 'tactual-auth.json'"New value: +"Path to Playwright storageState JSON (cookies + localStorage). Must be within cwd."

Previous value: -"Return only summary stats (severity counts, top issue groups, average score) without individual findings. ~500 bytes. Use for quick page health checks before diving deeper."New value: +"Return compact summary stats. Use for quick page health checks."

Previous value: -"Page load timeout in milliseconds"New value: +"Page load timeout in ms"

Previous value: -"CSS selector to wait for before capturing (essential for SPAs). E.g., 'main', '#app', '[data-hydrated]'"New value: +"CSS selector to wait for before capturing (essential for SPAs)."

Previous value: -"Additional milliseconds to wait after page load (default: 0). Use for slow-rendering SPAs."New value: +"Additional ms to wait after page load."

Removed value: -false