Auspex

Agents report a dashboard loaded when the page is still the login screen. Auspex checks that claim on Solari cloud Chrome, then a second machine checks it again.

Cloud Chrome check → independent sandbox verify → tear-down. ok ≠ claimOk ≠ claimOkProfile. We do not claim Alice-vs-Bob wrong-account detection. Never types passwords.

For Reviewers

The ironadamant one-liner is a measured public check (no login). It does not prove logged-in honesty. The auth-gated triad is the redacted auth-gated SaaS demo receipt (ok / claimOk / claimOkProfile). The generic recipe is login --url <https> (derives --profile from the host; override --profile <yours>) plus their URL and expect — not a named dogfood host. Frozen door sequence (not a same-session takeover): mint → human login in the door → human Save → await-login --save-editor → finalize-login (unique expect) → later check / optional --verify-with-profile. Fail-closed: expectMatchedPublicLanding, hostChanged remint, stream-expired. Timed skim: docs/REVIEWER-5MIN.md. See AGENTS.md and RECEIPTS.md. Only the live check session accepts agent page actions; profile-seeded verify is a separate read-only browser.

| Door | Open this | | --- | --- | | Watch (no clone, no key) | Landing · rrweb player (auth-gated Microsoft wall, emails/passwords stripped) | | Auth-gated evidence | Redacted SaaS receipt + receipt-only OneDrive dual pack — RECEIPTS.md | | Public check (no login) | npx auspex-solari check --name ironadamant | | Any host | npx auspex-solari check https://example.com --expect "Example Domain" | | Any Microsoft-gated host | npx auspex-solari login --url <https> (derives --profile from the host; override --profile <yours>). Open handoff.url (chooser: Phone or Desktop, same hash). Phone: handoff.mobileUrl (Auspex page, real keyboard — seed/handoff door, not a same-session VNC takeover). Desktop: handoff.desktopUrl. Show as bullets is off by default so a password manager can paste into the text field. Tap Save (copies a line; paste it in the AI chat). Then await-login --profile <yours> --save-editor, finalize-login, check. Never --record. | | MCP | npx -p auspex-solari auspex-mcp | | Autonomous agents | Prefer npx auspex-solari job --url <https> --expect "<unique>" then job-status / resume --job-id. Step tools remain for debugging. Optional AUSPEX_WAKE_WEBHOOK is operator-local (not a Solari push API). | | Login stall | After login mint, if nothing happens or login fails, read traceSummary / npx auspex-solari trace before reminting. Not a fourth primitive. | | Issues | On. Weekly public job is Monday + workflow_dispatch. Repo SOLARI_API_KEY is present (masked). Observed: Actions 35605123361 (Mon 2026-09-21) ironadamant + checkpoint ok: true. Still skips if that secret were unset. Do not remove it. | | --record + --profile | Refused unless --allow-record-profile on a public marketing host. Refused for consistencyhub. Never --record a logged-in session. | | Blame | Solari HTTP 402/429/413 not retryable; 502–504 retry once. Those are not loggedOut / needsHuman. See matrix below. | | Do not | Type passwords · --record a logged-in session · commit SOLARI_API_KEY / .env / .auspex/ |

export SOLARI_API_KEY=slr_live_…   # console.getsolari.com — env only, never commit
npx auspex-solari check --name ironadamant
npx auspex-solari check https://example.com --expect "Example Domain"
npx -p auspex-solari auspex-mcp

Do not run npm auspex (a different scraper). After a clone: npm install && npm run build:mcp (dist/ is gitignored), then npx auspex (CLI) and npx auspex-mcp (needs dist/mcp.mjs; missing dist fail-closes DistMissing). Equivalent without dist: npx tsx src/mcp.ts from examples/auspex-ts.

npm auspex-solari 0.1.3 is prepared on this tip (doors + fail-closed after published 0.1.2). Founder must publish. Agents do not npm publish.

Blame Solari vs Auspex

| Signal | Whose | Retry? | | --- | --- | --- | | 402 FeatureRequiresPlan | Solari plan | No — drop stealth/proxy/captcha/desktop or upgrade | | 429 ConcurrencyLimitExceeded | Solari slot | No — auspex_reap, then retry | | 413 profile save too large | Solari limit | No — remint; leaner Save | | 502 / 503 / 504 | Solari infra | Yes, once (5–10s). Not loggedOut / needsHuman | | loggedOut / needsHuman | Auspex page | No — human SSO / remint | | expectMatchedPublicLanding | Auspex expect | No — better URL/expect | | hostChanged / stream-expired | Auspex door | No — remint auspex_login |

Built for Pinetree Research's intern challenge (submissions close 30 Sep). Thesis: PITCH.md.

Auth-gated SaaS (redacted demo)

Redacted auth-gated SaaS demo — blurred dashboard proving the verification triad stays honest. Blur ≠ blank fail. Name in the demo path is the dogfood host, not the default recipe.

Verification triad: ok=true, claimOk=false (anonymous skipped), claimOkProfile=true (profile-seeded verify passed). See demo/consistencyhub-receipt.json and RECEIPTS.md. Schema v1 public receipt: demo/ironadamant-receipt.json (parseReceiptV1).

Full agent instructions: AGENTS.md · Package: examples/auspex-ts

What we shipped

Three primitives: browser check, sandbox verify, named sandbox desktop demo. Login / finalize / profile-status / reap / trace are the auth + hygiene doors.

• auspex_check — cloud Chrome: goto, optional wait-for (fill/click without a profile, or with --allow-page-actions), snapshot, claim check, close. Verifies by default (HTTP + OCR) except name=consistencyhub, profile=consistencyhub, or any attached profile on a non-public-marketing URL (shared shouldVerifyCheck). Public marketing still verifies with a leftover profile. No profile still verifies. --verify forces anonymous verify (poisons ok on auth-gated pages). --verify-with-profile is the dogfood claim recheck (claimOkProfile is the profile-reuse gate; ok alone is not enough to treat the profile as reusable). Frozen schema v1: schemaVersion, ok, reason, url, expect, screenshotPath.

• auspex_login / auspex_await_login — one mint, one chooser (handoff.url / oneLiner → door.html) plus labeled deep links. login --url without --profile derives a host slug and echoes it on next / phone Save paste; --profile wins. A new host must not keep a previous --profile: login, await-login, and finalize-login still run and, on a slug mismatch, set profileHostMatch false, suggestedProfile, and a remint next. Saved-check host affinity (consistencyhub on consistencyhub.io) stays a match. If the live browser host changes to a different site mid-handoff, await and finalize fail closed (hostChanged, remint auspex_login for that https origin) and do not save into the old profile. The password field is not a site picker. Phone: handoff.mobileUrl (Auspex phone page with a real text field; Save copies a line to paste in the AI chat). Computer: handoff.desktopUrl (Auspex desktop page when minted, otherwise Solari console Open editor). Those pages are seed/handoff doors for off-site typing, not a same-session VNC takeover. Click the remote address bar (or the remote field you mean to fill) before typing anything. Keys stream into Solari remote Chrome as you type (no Paste button). Enter clears the local field. Show as bullets is off by default so a password manager can paste into the text field; checking it only masks display (type=password); remote still gets real characters. ironadamant.com does not see the password or any keystrokes; the destination site logs its own login. If cookies or cache are cleared, or the remote session or saved profile is wiped, type the login again. Auspex and ironadamant.com do not host those credentials or session secrets; they live only in the remote Chrome session and on the destination site. They stay off agent chat / MCP / receipts. Solari noVNC will not open the phone keyboard. After Save on the phone or desktop page, await-login --profile <yours> --save-editor. Empty Save is not success. Soft-warns if cookies/origins exist but sessionStorage is missing, or folded expiresOn is stale. If editorSave fails (e.g. 401) or editorFold is no-cdp, next says finalize-login NOW; remint if finalize returns needsHuman. Stale/weak next remint or finalize-now — do not run --verify-with-profile on a dead fold. --save-editor does not refresh folded sessionStorage unless editorFold.ok. SPAs that keep tokens in sessionStorage still need finalize-login while the token is valid. --mobile / --device is viewport emulation on cloud Chrome, not this phone-login door.

• auspex_finalize_login — post-login one-shot: SSO + --save-profile to capture sessionStorage. Saved-check profiles (e.g. consistencyhub) supply URL and expect; unknown profiles require --url and --expect. Same as check --profile … --sso --save-profile.

• auspex_verify — only if you passed verify=false. Headless sandbox re-checks PNG + JSON. Integrity ok is separate from claim claimOk. Kills the VM.

• auspex_profile_status — loggedIn / loggedOut / needsHuman / weakSeed / emptySave. weakSeed is cookies/origins with a counted sessionStorage === 0, or folded __auspex_ss__:expiresOn past/within ~5m (leftover count is not fresh). Public marketing saved checks stay loggedOut. emptySave = profile not found or empty. Human SSO once; the agent never types a password.

• auspex_reap — list/kill leftover ledger sessions after 429. --account-wide wipes all VMs. --pack-receipts copies last receipts per URL into .auspex/pack/.

• auspex_trace — last login mint episode plus traceSummary (agents: read this if Chromium never comes up). Mint rows are event: login (API key, profile ensure, handoff POST, editor-start, editor-token). After the handoff is ready, production writes one redacted post-handoff row (status and fold reason: empty-save, editor 401, no-cdp, or finalize needsHuman). Check rows are not written. mintStage: ready only when VNC/token mint succeeded. If mint is silent or fails, read traceSummary / npx auspex-solari trace before reminting. Never tokens, passwords, excerpts, or session ids. Not a fourth primitive. Never commit .auspex/.

• auspex_desktop — named Solari sandbox Mousepad demo, not the user's Mac. 402 on Free.

• auspex_job / auspex_job_status — durable compose of mint→await→finalize→check for autonomous agents (not a fourth primitive). Resume with jobId. Optional operator-local wake webhook. Step tools remain for debugging.

Fail-closed design

• No password typing: SSO handoff URL (human signs in once); --fill refused on input[type=password]; Microsoft/Google walls return needsHuman. Desktop --type refuses password/OTP-like strings.
• No logged-in recording by default: --record + --profile is forbidden unless --allow-record-profile on a public marketing host. Refused for consistencyhub.
• No page actions with profiles by default: --fill / --click with a profile requires --allow-page-actions.
• Schema v1 frozen: schemaVersion: 1 on stdout. CLI and MCP are the same contract.
• ok ≠ claimOk ≠ claimOkProfile: After --verify-with-profile, claimOkProfile is the reuse gate — ok alone is not enough to treat the profile as reusable.

Worked example (dogfood)

ConsistencyHub and OneDrive are evidence — not the default recipe. Use login --url (or --profile <yours>) plus their URL and expect first. This named check is the verified auth-gated example. Do not invent that any host works without dogfood.

Console Save and --save-editor do not refresh folded sessionStorage unless editorFold.ok. SPAs that keep tokens in sessionStorage still need finalize-login while the token is valid. If await-login/profile-status says stale or weakSeed, remint or finalize-now — do not expect --verify-with-profile to succeed on a dead fold.

npx auspex-solari login --profile consistencyhub
# human: open handoff.url (chooser) → Phone or Desktop, Microsoft + OneDrive consent, tap Save (copies a paste line). Do not intern-ping.
npx auspex-solari await-login --profile consistencyhub --save-editor
npx auspex-solari finalize-login --profile consistencyhub
npx auspex-solari check --name consistencyhub
npx auspex-solari check --name consistencyhub --verify-with-profile

Same Microsoft profile on OneDrive is receipt-only evidence (examples/auspex-ts/demo/onedrive-receipt.json, claimOkProfile=true) — no raw OneDrive PNG. Dual pack is evidence, not the default recipe. See RECEIPTS.md.

MCP first (Cursor / Claude / Grok)

.cursor/mcp.json is committed. Auspex tools are the product; official Solari MCP is an optional gated sibling.

npx -p auspex-solari auspex-mcp   # published tarball includes dist/
# after a clone (dist/ is gitignored — do not commit it):
npm install
npm run build:mcp
npx auspex-mcp
# equivalent without dist: npx tsx src/mcp.ts   # from examples/auspex-ts

Official @solarisdk/mcp exits unless SOLARI_API_KEY is set so hosts do not list empty solari_* tools. Prefer Auspex for check → verify → tear-down; use optional solari_* only for ad-hoc cloud browser / sandbox / desktop. Prefer auspex_reap for 429 recovery.

The GitHub Actions public job is Monday + workflow_dispatch. Repo secret SOLARI_API_KEY is present (masked in logs). Observed live success: Actions run 35605123361 (Mon 2026-09-21 schedule) — ironadamant One office job. and checkpoint Checkpoint both ok: true. The step still skips with exit 0 if that secret were unset, so missing it would not fail PRs. Do not remove the secret. The workflow does not commit artifacts; demo files are refreshed by hand. Run locally: npx auspex-solari check --name ironadamant and --name checkpoint, or npm run public-check from examples/auspex-ts.

Links

• Pitch (hiring managers): PITCH.md
• Reviewer 5-minute path: docs/REVIEWER-5MIN.md
• Official apply path (Harry Chow, LinkedIn 2026-08-31): fork cookbook → real Solari use case → public GitHub → tag @harrychow_ @getsolari on LinkedIn or X. Discord is Solari setup help, not a substitute. The tagged post itself is founder-only.
• Agent instructions (any host): AGENTS.md
• Public receipts: RECEIPTS.md
• Issues is on. Weekly public runs with repo SOLARI_API_KEY present (masked). Observed: Actions 35605123361 (2026-09-21) ironadamant + checkpoint ok: true. Still skips if unset. Do not remove the secret.
• Console — console.getsolari.com
• Docs — docs.getsolari.com

Upstream cookbook (unmodified, not the submission)

This repo is a public fork of the Solari cookbook. GitHub's behind count is other cookbook examples added upstream after this fork. The submission is examples/auspex-ts. Directories under examples/ other than auspex-ts (the intern-challenge product) are the original Solari samples, unmodified, with no Auspex CI. Run them from their own folders for raw SDK patterns. One slr_live_ key works across browsers, sandboxes, and desktops.

Gotchas the samples encode: call await solari.close() in TypeScript or the process hangs; recording is per session (recording: true at create); Auspex --record never puts a presigned replayUrl on stdout; sandbox run("ls -la") looks for a binary named ls -la; kill(), not close(), ends a VM; timeoutMs is a rolling idle window; 429 is not retryable — call auspex_reap.

MIT licensed.