Slice 1: reset Tyto as a thin layer on agent-browser

[rvegajr]

Plan: docs/IMPLEMENTATION.md (draft 3). Tyto becomes a thin layer on agent-browser that adds recipes (learn once, replay with no model, repair) and a one-call page brief.

What

• Removed:

  • the old self-built browser stack: packages/{cdp,host,perch,secrets,sdk,mcp,protocol,fs,poc}, extension/, e2e/, poc/, the e2e workflow, docs/DESIGN.md, docs/USAGE.md;
  • the CDP-era parts of packages/core.

  All of it is preserved at tag archive/tyto-v0 (pushed).

• Core keeps:

  • the model, clock, redactor and page-text ports;
  • SecretRedactor, which now also masks token/password/api_key/sid values (test first: packages/core/test/redact.test.ts);
  • SystemClock;
  • FakeClock and FakeModel.

  packages/llm is unchanged.

• Import boundary: scripts/check-core-imports.mjs now also bans child_process, fs, net/http, fetch and WebSocket in core source (verified with a planted violation).

• Tooling:

  • workspaces reduced to core and llm;
  • jsdom dropped;
  • npm run test:live added (live tests in packages/*/test/live/ run only with TYTO_LIVE=1);
  • root tsconfig.json references fixed.

• Docs and rules:

  • rewritten: SPEC draft 3, IMPLEMENTATION draft 3 (packages, ports, recipe format, security rules, and the spec-sentence test list for slices 2–9), README, AGENTS, CONTRIBUTING, SECURITY, .env.example;
  • Claude and Cursor rules updated; the cdp, extension and protocol rules removed;
  • decision record addendum.

• gitleaks: the e2e/ and extension/test/ allowlist entries stay, because those fake fixtures are still in git history.

Tests

• npm run check on Node 26: import boundary clean, secret scan clean, 3 files / 13 tests, typecheck clean.
• gitleaks detect --config .gitleaks.toml --redact: no leaks.

🤖 Generated with Claude Code