jevpilot v0.4.0

Downloads reach the agent, a call stops before the client's own timeout and keeps its session, and the package now installs from npm: npx -y --package jevpilot@0.4.0 jevpilot-mcp (see the README quick start). The same package is attached below with SHA256SUMS.txt.

Two behavior changes:

• browser_run and browser_resume now stop after 45 seconds by default and return BUDGET_EXHAUSTED with reason call_deadline_exceeded; browser_resume continues the session. Set JEVPILOT_CALL_DEADLINE_MS=0 for the old behavior when your client waits longer than budget.seconds.
• browser_act's allow_irreversible approves only the first irreversible operation of the call, as documented.

Added

• Every tool declares the four MCP annotation hints (read-only, destructive, idempotent, open-world); see docs/tools.md.
• Session results list the session's downloads (downloads: name, state, and for a verified complete file its server-local path and size), and browser_run accepts success.download_completed.
• JEVPILOT_DOWNLOAD_DIR sets a persistent download directory for the managed browser profiles.
• A per-call deadline, 45 seconds by default (JEVPILOT_CALL_DEADLINE_MS; 0 turns it off): browser_run and browser_resume stop at the next safe point before the client's own timeout, return BUDGET_EXHAUSTED with reason call_deadline_exceeded and keep the session for browser_resume. It bounds initial navigation, waits after actions, and observation waits; a call during a cold browser start may return The browser is still starting; call browser_run again. jevpilot-mcp doctor shows the effective value.

Changed

• README installs from npm (jevpilot); the GitHub release package remains available.
• browser_act's allow_irreversible approves only the first irreversible operation of the call, as documented. It used to approve every irreversible operation in the batch; a later one now stops with CONFIRM_REQUIRED.
• browser_observe's description says that screenshot=true saves a temporary JPEG of the viewport, that screenshot files are deleted when the session closes, and that browser_screenshot is the tool for looking at the page.
• browser_observe's description says that it may reopen an unresponsive page in a new tab.

Fixed

• A click that starts a download no longer waits for a navigation that never comes; it used to take the whole navigation timeout (30 s by default).
• A server that refuses to start because of an invalid setting no longer leaves an empty temp directory behind.