[{"data":1,"prerenderedAt":34},["ShallowReactive",2],{"$f2cjz1ipebrmtq":3},{"href":4,"title":5,"description":6,"kind":7,"mark":7,"planned":8,"contributors":9,"provenance":7,"html":10,"headings":11},"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use","Computer-Use tools","The verbs a run can call on a Computer-Use binding: a browser for a product with no MCP server, limited to the sites the binding allows.",null,false,[],"\u003Cp>\u003Cem>Generated from the built-in tools registry. Do not edit by hand.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Some products have no MCP server. A Computer-Use binding gives a run a browser instead: a prefix the enterprise chooses, the hosts it may open, and a start URL. A task names each verb it may use under that prefix, \u003Ccode><prefix>.<verb>\u003C\u002Fcode>, and gets no browser for a bare prefix.\u003C\u002Fp>\n\u003Cp>The browser only opens the hosts the binding allows. Credentials the run uses are taken out of everything the model reads back.\u003C\u002Fp>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Tool\u003C\u002Fth>\n\u003Cth>What it does\u003C\u002Fth>\n\u003Cth>Effect\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ca href=\"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use#prefix-navigate\">\u003Ccode><prefix>.navigate\u003C\u002Fcode>\u003C\u002Fa>\u003C\u002Ftd>\n\u003Ctd>Open \u003Ccode>url\u003C\u002Fcode> in the run's browser.\u003C\u002Ftd>\n\u003Ctd>read\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ca href=\"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use#prefix-click\">\u003Ccode><prefix>.click\u003C\u002Fcode>\u003C\u002Fa>\u003C\u002Ftd>\n\u003Ctd>Click the element \u003Ccode>selector\u003C\u002Fcode> names.\u003C\u002Ftd>\n\u003Ctd>write\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ca href=\"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use#prefix-type\">\u003Ccode><prefix>.type\u003C\u002Fcode>\u003C\u002Fa>\u003C\u002Ftd>\n\u003Ctd>Type \u003Ccode>text\u003C\u002Fcode> into the element \u003Ccode>selector\u003C\u002Fcode> names.\u003C\u002Ftd>\n\u003Ctd>write\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ca href=\"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use#prefix-screenshot\">\u003Ccode><prefix>.screenshot\u003C\u002Fcode>\u003C\u002Fa>\u003C\u002Ftd>\n\u003Ctd>Take a screenshot of the page.\u003C\u002Ftd>\n\u003Ctd>read\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ca href=\"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use#prefix-extract\">\u003Ccode><prefix>.extract\u003C\u002Fcode>\u003C\u002Fa>\u003C\u002Ftd>\n\u003Ctd>Read the text of the element \u003Ccode>selector\u003C\u002Fcode> names.\u003C\u002Ftd>\n\u003Ctd>read\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ca href=\"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use#prefix-download\">\u003Ccode><prefix>.download\u003C\u002Fcode>\u003C\u002Fa>\u003C\u002Ftd>\n\u003Ctd>Download the file the site offers at \u003Ccode>url\u003C\u002Fcode>, or behind the control \u003Ccode>selector\u003C\u002Fcode> names, and keep it as a run file a person can take from the run.\u003C\u002Ftd>\n\u003Ctd>read\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ca href=\"\u002Fdocs\u002Ftools\u002Fbuilt-in\u002Fcomputer-use#prefix-upload\">\u003Ccode><prefix>.upload\u003C\u002Fcode>\u003C\u002Fa>\u003C\u002Ftd>\n\u003Ctd>Attach a run file, named by the handle (\u003Ccode>file\u003C\u002Fcode>) a download or the task gave it, to the file input \u003Ccode>selector\u003C\u002Fcode> names. Waits for a person to approve it first.\u003C\u002Ftd>\n\u003Ctd>write\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Ch2 id=\"prefix-navigate\">\u003Ccode><prefix>.navigate\u003C\u002Fcode>\u003C\u002Fh2>\n\u003Cp>Open \u003Ccode>url\u003C\u002Fcode> in the run's browser.\u003C\u002Fp>\n\u003Cp>What the model reads:\u003C\u002Fp>\n\u003Cpre>\u003Ccode class=\"language-text\">Open a page in this run's browser. Pass url, the full address, on one of the sites the <prefix> binding allows: any other host is refused. Returns the address the browser reached, after any redirect.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Field\u003C\u002Fth>\n\u003Cth>Type\u003C\u002Fth>\n\u003Cth>Required\u003C\u002Fth>\n\u003Cth>Description\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>url\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>yes\u003C\u002Ftd>\n\u003Ctd>The full address to open. Its host must be one of the sites the binding allows.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effect:\u003C\u002Fstrong> read.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Retry:\u003C\u002Fstrong> Safe: repeating the call changes nothing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Called by:\u003C\u002Fstrong> a run.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Needs:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>A Computer-Use binding on this prefix (host-only allowed sites and a start URL), a model that can drive a browser, and a task that lists \u003Ccode><prefix>.<verb>\u003C\u002Fcode> by name: a bare prefix grants no browser.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Returns:\u003C\u002Fstrong> The page reached.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Error\u003C\u002Fth>\n\u003Cth>When\u003C\u002Fth>\n\u003Cth>What happens\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_model_unsupported\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The run's model is not one trusted to drive a browser. The run is blocked before any model call.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_browser_unavailable\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>No browser could be started for the run.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_site_blocked\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The page is on a host outside the binding's allowed sites.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_failed\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The browser action itself failed.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Ch2 id=\"prefix-click\">\u003Ccode><prefix>.click\u003C\u002Fcode>\u003C\u002Fh2>\n\u003Cp>Click the element \u003Ccode>selector\u003C\u002Fcode> names.\u003C\u002Fp>\n\u003Cp>What the model reads:\u003C\u002Fp>\n\u003Cpre>\u003Ccode class=\"language-text\">Click one element on the page open in this run's browser. Pass selector, a CSS selector for it. Returns the address the browser is on afterwards.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Field\u003C\u002Fth>\n\u003Cth>Type\u003C\u002Fth>\n\u003Cth>Required\u003C\u002Fth>\n\u003Cth>Description\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>selector\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>yes\u003C\u002Ftd>\n\u003Ctd>A CSS selector for the element to click.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effect:\u003C\u002Fstrong> write.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Retry:\u003C\u002Fstrong> Not retry-safe: a repeat acts again.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Called by:\u003C\u002Fstrong> a run.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Needs:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>A Computer-Use binding on this prefix (host-only allowed sites and a start URL), a model that can drive a browser, and a task that lists \u003Ccode><prefix>.<verb>\u003C\u002Fcode> by name: a bare prefix grants no browser.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Error\u003C\u002Fth>\n\u003Cth>When\u003C\u002Fth>\n\u003Cth>What happens\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_model_unsupported\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The run's model is not one trusted to drive a browser. The run is blocked before any model call.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_browser_unavailable\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>No browser could be started for the run.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_site_blocked\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The page is on a host outside the binding's allowed sites.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_failed\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The browser action itself failed.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Ch2 id=\"prefix-type\">\u003Ccode><prefix>.type\u003C\u002Fcode>\u003C\u002Fh2>\n\u003Cp>Type \u003Ccode>text\u003C\u002Fcode> into the element \u003Ccode>selector\u003C\u002Fcode> names.\u003C\u002Fp>\n\u003Cp>What the model reads:\u003C\u002Fp>\n\u003Cpre>\u003Ccode class=\"language-text\">Type into one field on the page open in this run's browser. Pass selector, a CSS selector for the field, and text, which replaces what the field holds. Returns the address the browser is on afterwards.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Field\u003C\u002Fth>\n\u003Cth>Type\u003C\u002Fth>\n\u003Cth>Required\u003C\u002Fth>\n\u003Cth>Description\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>selector\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>yes\u003C\u002Ftd>\n\u003Ctd>A CSS selector for the element to type into.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>text\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>yes\u003C\u002Ftd>\n\u003Ctd>What to put in the element. It replaces what the element holds.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effect:\u003C\u002Fstrong> write.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Retry:\u003C\u002Fstrong> Not retry-safe: a repeat acts again.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Called by:\u003C\u002Fstrong> a run.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Needs:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>A Computer-Use binding on this prefix (host-only allowed sites and a start URL), a model that can drive a browser, and a task that lists \u003Ccode><prefix>.<verb>\u003C\u002Fcode> by name: a bare prefix grants no browser.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Error\u003C\u002Fth>\n\u003Cth>When\u003C\u002Fth>\n\u003Cth>What happens\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_model_unsupported\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The run's model is not one trusted to drive a browser. The run is blocked before any model call.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_browser_unavailable\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>No browser could be started for the run.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_site_blocked\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The page is on a host outside the binding's allowed sites.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_failed\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The browser action itself failed.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Ch2 id=\"prefix-screenshot\">\u003Ccode><prefix>.screenshot\u003C\u002Fcode>\u003C\u002Fh2>\n\u003Cp>Take a screenshot of the page.\u003C\u002Fp>\n\u003Cp>What the model reads:\u003C\u002Fp>\n\u003Cpre>\u003Ccode class=\"language-text\">Take a screenshot of the page open in this run's browser. Takes no arguments. The screenshot is reported by its size, not pasted into the conversation.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Takes no arguments.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effect:\u003C\u002Fstrong> read.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Retry:\u003C\u002Fstrong> Safe: repeating the call changes nothing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Called by:\u003C\u002Fstrong> a run.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Needs:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>A Computer-Use binding on this prefix (host-only allowed sites and a start URL), a model that can drive a browser, and a task that lists \u003Ccode><prefix>.<verb>\u003C\u002Fcode> by name: a bare prefix grants no browser.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Returns:\u003C\u002Fstrong> The screenshot, reported by size rather than pasted into the conversation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Error\u003C\u002Fth>\n\u003Cth>When\u003C\u002Fth>\n\u003Cth>What happens\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_model_unsupported\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The run's model is not one trusted to drive a browser. The run is blocked before any model call.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_browser_unavailable\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>No browser could be started for the run.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_site_blocked\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The page is on a host outside the binding's allowed sites.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_failed\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The browser action itself failed.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Ch2 id=\"prefix-extract\">\u003Ccode><prefix>.extract\u003C\u002Fcode>\u003C\u002Fh2>\n\u003Cp>Read the text of the element \u003Ccode>selector\u003C\u002Fcode> names.\u003C\u002Fp>\n\u003Cp>What the model reads:\u003C\u002Fp>\n\u003Cpre>\u003Ccode class=\"language-text\">Read the text of one element on the page open in this run's browser. Pass selector, a CSS selector for it. Every credential the run used is taken out of the text before you read it.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Field\u003C\u002Fth>\n\u003Cth>Type\u003C\u002Fth>\n\u003Cth>Required\u003C\u002Fth>\n\u003Cth>Description\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>selector\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>no\u003C\u002Ftd>\n\u003Ctd>A CSS selector for the element whose text to read.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effect:\u003C\u002Fstrong> read.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Retry:\u003C\u002Fstrong> Safe: repeating the call changes nothing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Called by:\u003C\u002Fstrong> a run.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Needs:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>A Computer-Use binding on this prefix (host-only allowed sites and a start URL), a model that can drive a browser, and a task that lists \u003Ccode><prefix>.<verb>\u003C\u002Fcode> by name: a bare prefix grants no browser.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Returns:\u003C\u002Fstrong> The text, with every credential the run used taken out.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Error\u003C\u002Fth>\n\u003Cth>When\u003C\u002Fth>\n\u003Cth>What happens\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_model_unsupported\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The run's model is not one trusted to drive a browser. The run is blocked before any model call.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_browser_unavailable\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>No browser could be started for the run.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_site_blocked\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The page is on a host outside the binding's allowed sites.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_failed\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The browser action itself failed.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Ch2 id=\"prefix-download\">\u003Ccode><prefix>.download\u003C\u002Fcode>\u003C\u002Fh2>\n\u003Cp>Download the file the site offers at \u003Ccode>url\u003C\u002Fcode>, or behind the control \u003Ccode>selector\u003C\u002Fcode> names, and keep it as a run file a person can take from the run.\u003C\u002Fp>\n\u003Cp>What the model reads:\u003C\u002Fp>\n\u003Cpre>\u003Ccode class=\"language-text\">Download a file from the site open in this run's browser and keep it as a run file. Pass url, the file's address on one of the sites the <prefix> binding allows, or selector, a CSS selector for the control whose click starts the download. url is used when both are given, and every redirect is checked against the allowed sites. Returns the run file's handle (id), name, size and content type, and the URL it came from, never its bytes.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Field\u003C\u002Fth>\n\u003Cth>Type\u003C\u002Fth>\n\u003Cth>Required\u003C\u002Fth>\n\u003Cth>Description\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>url\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>no\u003C\u002Ftd>\n\u003Ctd>The file's address. Its host, and every redirect's, must be one of the sites the binding allows. Used instead of selector when both are given.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>selector\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>no\u003C\u002Ftd>\n\u003Ctd>A CSS selector for the element whose click starts the download.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effect:\u003C\u002Fstrong> read.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Retry:\u003C\u002Fstrong> Safe: repeating the call changes nothing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Called by:\u003C\u002Fstrong> a run.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Needs:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>A Computer-Use binding on this prefix (host-only allowed sites and a start URL), a model that can drive a browser, and a task that lists \u003Ccode><prefix>.<verb>\u003C\u002Fcode> by name: a bare prefix grants no browser.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Returns:\u003C\u002Fstrong> The run file's handle (\u003Ccode>id\u003C\u002Fcode>), name, size and content type, and the URL it came from. Never its bytes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Error\u003C\u002Fth>\n\u003Cth>When\u003C\u002Fth>\n\u003Cth>What happens\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_model_unsupported\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The run's model is not one trusted to drive a browser. The run is blocked before any model call.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_browser_unavailable\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>No browser could be started for the run.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_site_blocked\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The page is on a host outside the binding's allowed sites.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_failed\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The browser action itself failed.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_file_not_saved\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The downloaded file could not be kept, for example because the artifact store refused its size.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Ch2 id=\"prefix-upload\">\u003Ccode><prefix>.upload\u003C\u002Fcode>\u003C\u002Fh2>\n\u003Cp>Attach a run file, named by the handle (\u003Ccode>file\u003C\u002Fcode>) a download or the task gave it, to the file input \u003Ccode>selector\u003C\u002Fcode> names. Waits for a person to approve it first.\u003C\u002Fp>\n\u003Cp>What the model reads:\u003C\u002Fp>\n\u003Cpre>\u003Ccode class=\"language-text\">Attach a file this run holds to a file input on the page open in this run's browser. Pass selector, a CSS selector for the file input, and file, the handle of a run file: the id a download returned, or the handle of a file the task was given. A path or a URL is refused. A person approves every upload before the file is attached. Returns the address the browser is on afterwards.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Field\u003C\u002Fth>\n\u003Cth>Type\u003C\u002Fth>\n\u003Cth>Required\u003C\u002Fth>\n\u003Cth>Description\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>selector\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>yes\u003C\u002Ftd>\n\u003Ctd>A CSS selector for the element to attach the file to.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>file\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>string\u003C\u002Ftd>\n\u003Ctd>yes\u003C\u002Ftd>\n\u003Ctd>The handle of a file this run holds: the id a download returned, or the handle of a file the task was given. A path or a URL is refused.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effect:\u003C\u002Fstrong> write.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Retry:\u003C\u002Fstrong> Not retry-safe: a repeat acts again.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Called by:\u003C\u002Fstrong> a run.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Needs:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>A Computer-Use binding on this prefix (host-only allowed sites and a start URL), a model that can drive a browser, and a task that lists \u003Ccode><prefix>.<verb>\u003C\u002Fcode> by name: a bare prefix grants no browser.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Returns:\u003C\u002Fstrong> The page the file was attached on.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"prose__table\">\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Error\u003C\u002Fth>\n\u003Cth>When\u003C\u002Fth>\n\u003Cth>What happens\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_model_unsupported\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The run's model is not one trusted to drive a browser. The run is blocked before any model call.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_browser_unavailable\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>No browser could be started for the run.\u003C\u002Ftd>\n\u003Ctd>Run fails\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_site_blocked\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The page is on a host outside the binding's allowed sites.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_failed\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The browser action itself failed.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_upload_refused\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>The upload named something that is not a file this run holds: a path, a URL, or a handle no file has.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_upload_rejected\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>A person rejected the upload. Nothing was attached.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>\u003Ccode>computer_use_upload_timed_out\u003C\u002Fcode>\u003C\u002Ftd>\n\u003Ctd>Nobody answered the upload's gate before the enterprise timeout. Nothing was attached.\u003C\u002Ftd>\n\u003Ctd>Tool error\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003C\u002Fdiv>\n",[12,16,19,22,25,28,31],{"id":13,"text":14,"level":15,"planned":8},"prefix-navigate","\u003Cprefix>.navigate",2,{"id":17,"text":18,"level":15,"planned":8},"prefix-click","\u003Cprefix>.click",{"id":20,"text":21,"level":15,"planned":8},"prefix-type","\u003Cprefix>.type",{"id":23,"text":24,"level":15,"planned":8},"prefix-screenshot","\u003Cprefix>.screenshot",{"id":26,"text":27,"level":15,"planned":8},"prefix-extract","\u003Cprefix>.extract",{"id":29,"text":30,"level":15,"planned":8},"prefix-download","\u003Cprefix>.download",{"id":32,"text":33,"level":15,"planned":8},"prefix-upload","\u003Cprefix>.upload",1791124519730]