llm-browser-testkit
Describe browser tests in plain English. The LLM figures out which elements to click and whether the page looks right — plus A2A agents, MCP tool-calling, cost tracking, and budgets.
llm-browser-testkit run smoke.toml
Contents
- Quick start
- Write your first test
- Step reference
- Assertion presets
- CLI reference
- Endpoints
- A2A agents
- Run as an A2A agent
- MCP tools
- MCP server
- Cost tracking & budgets
- How it works
- Use as a library
- LLM authentication
- License
Quick start
# Install
# Set your LLM credentials (OpenAI-compatible API)
# Run the built-in example (tests example.com — no account needed)
Write your first test
# hello.toml
[]
= "https://example.com"
= 30
= "/"
[[]]
= "no_errors"
= "no_error_on_page"
[[]]
= "Homepage loads"
[[]]
= "navigate"
= "/"
[[]]
= "assert"
= "no_errors"
Run it:
Step reference
Every step has a kind. Required fields depend on the kind.
kind |
What it does | Required | Optional |
|---|---|---|---|
navigate |
Open a URL | url |
wait_after_ms |
click |
Click an element | target |
selector, wait_after_ms, endpoint |
type |
Type into a field | target, text |
selector, wait_after_ms, endpoint |
wait |
Wait for an element and/or visible text | target |
selector, text, timeout_ms, endpoint |
assert |
Check the page | one of definition, preset, or prompt |
assert_text, endpoint |
screenshot |
Save a .png | — | path |
agent |
Call an A2A agent | agent, task |
definition |
mcp |
Call an MCP tool | server, tool |
args |
target is natural language ("the submit button", "the search input"). The
LLM looks at the page DOM and picks the right CSS selector at runtime. Skip the
LLM with an explicit selector.
endpoint routes this step to a specific endpoint. Use it to
send element targeting to one model and assertions to another.
wait with text waits until the page's visible text contains a
substring — no selector or LLM needed:
[[]]
= "wait"
= "the success message"
= "Welcome back"
= 5000
Set both selector and text to require both conditions. The combined wait
shares one timeout_ms budget.
Failure diagnostics & artifacts
When a step fails, the runner captures the current page state and writes a screenshot, so CI logs answer why the step failed instead of printing a bare timeout:
❌ [wait] the authenticated shell — wait for app-account-shell timed out after
30000ms: The event waited for never came — page: http://127.0.0.1:8082/auth/login
(Immosai) — visible: "Email address ⏎ Password ⏎ Sign in"
│ url: http://127.0.0.1:8082/auth/login
│ title: Immosai — Anmeldung
│ content: Email address Password ... Invalid credentials.
📸 screenshot: artifacts/account__login-and-open-account__006-wait.png
- Page state — URL, title, visible text, and any alert/error elements
(
[role="alert"],.error-message, snackbars, …) are appended to the step message and printed in full to stderr. - Screenshots — one PNG per failed step, written under
--artifacts-dir(defaultartifacts/, envHARNESS_ARTIFACTS_DIR). - Fail fast — by default the first failed step ends the test and the
remaining steps are reported as skipped (no LLM budget is burned asserting
against a page that is already known broken). Set
continue_on_failure = truein[config]or pass--continue-on-failureto keep executing every step. - LLM element targeting is verified — a response that is not a selector
(
:not(*),null, explanations, …) fails immediately with the raw LLM output; a selector that matches nothing triggers one retry with feedback. - LLM errors are specific — HTTP status, a truncated response-body snippet, and the attempt count are included, and deterministic client errors (401/403/404) fail fast instead of burning three retries.
- Assertions always see the page — custom
system+user_templatedefinitions that omit the{content}placeholder automatically get the page URL/title/content appended, so the LLM never answers "I can't determine that without seeing the page".
Vision assertions (screenshots)
Text/DOM evaluation cannot see how the page renders — overlapping elements,
clipped text, or a cookie banner covering the content are invisible to
innerText. Mark an endpoint as vision-capable and attach a screenshot to an
assert step to let the LLM evaluate the actual pixels:
[] # optional: cap the screenshot resolution
= 1400
[] # MUST declare vision = true
= "llm"
= "https://api.openai.com"
= "gpt-4o"
= "sk-..."
= true # ← the flag
= { = 2.50, = 10.00 }
[[]]
= "no_overlaps"
= "visual_no_overlaps"
[[]]
= "assert"
= "no_overlaps"
= "vision"
= true # ← attach the viewport screenshot
How it works:
- The viewport is captured as PNG, downscaled in Rust (Lanczos) so its
longest edge is at most
screenshot_max_dimension(default 1400), and re-encoded as quality-85 JPEG — no page JS, deterministic, and cheap on vision tokens. - The image is sent as an OpenAI-compatible
image_urlcontent part next to the text prompt (which still includes the page text for context). - Built-in presets:
visual_no_issues,visual_no_overlaps,visual_text_visible(usesassert_text). Customscreenshot = trueprompts work too. - A
screenshot = truestep that resolves to an endpoint withoutvision = truefails immediately with a clear configuration error. - Text-only workflows are untouched: without
screenshot = truethe request keeps the plain stringcontentshape.
See examples/visual-overlays.toml + the
bundled examples/visual-test-page.html
fixture for a runnable demo that passes on a clean page and detects a cookie
banner overlay. The prompts of the visual presets are intentionally strict
("only fail on clearly visible, user-impacting defects") — tune them per app
if your overlay detection needs to be more or less sensitive.
DOM layout assertions (layout_no_issues)
Vision models see pixels but cost money per page × viewport. For cheap, deterministic layout coverage there is a DOM-only preset that never calls the LLM:
[[]]
= "assert"
= "layout_no_issues" # no endpoint, no screenshot, no tokens
It evaluates a geometry scan in the page and fails with the detected issues:
- page-overflow-x — the document is wider than the viewport (horizontal scrolling or a runaway element);
- element-out-of-viewport — a visible, non-fixed element sticks out of the right/bottom viewport edge while still partially on screen;
- text-clipped — content inside an
overflow: hiddencontainer is measurably larger than the box (cut-off text); - element-overlap — an interactive element's center point is covered by a different element that would intercept the click.
Intentional stacking (off-canvas drawers, dropdowns, badges, fixed headers, fully-offscreen scroll content) is excluded by position/relation filters. Run it after every page load — it is free, so it is also the perfect companion for the viewport matrix below.
Viewport matrix (mobile / tablet / desktop)
[config.viewport_matrix] expands every test in a scenario into one
variant per named viewport. Each variant overrides the browser viewport via
CDP device-metrics emulation and gets a — <name> suffix on the test name;
per-test budgets apply per variant.
[]
= [
{ = "mobile", = 390, = 844 },
{ = "tablet", = 768, = 1024 },
{ = "desktop", = 1280, = 720 },
]
[[]]
= "Dashboard renders"
= [
{ = "navigate", = "/dashboard", = 2000 },
{ = "assert", = "layout_no_issues" },
]
The above runs "Dashboard renders — mobile", "— tablet" and "— desktop",
each at its viewport, and the layout scan flags sticky overlays, off-screen
text, or covered controls per size. Use it with screenshot = true +
visual_no_issues on a vision endpoint for pixel-level checks on top.
Single-test overrides work too — any [[test]] may set
viewport_width / viewport_height directly, which also switches the
browser viewport via CDP for just that test:
[[]]
= "Narrow phone layout"
= 320
= 568
Assertion presets
Built-in presets you can use inline or from [[definitions]].
| Preset | What it checks |
|---|---|
no_error_on_page |
No errors, stack traces, or broken UI on the page |
text_visible |
Specific text appears on the page (assert_text) |
element_exists |
A described UI element is present |
layout_no_issues |
DOM scan, no LLM: page overflow, elements out of viewport, clipped text, covered controls |
visual_no_issues |
Screenshot: no layout/rendering defects (overlaps, clipping, cut-off content, broken images, blank panels) |
visual_no_overlaps |
Screenshot: no elements covering other content or intercepting clicks |
visual_text_visible |
Screenshot: assert_text is fully visible and readable (not clipped or covered) |
Custom assertions with prompt send any question to the LLM:
[[]]
= "assert"
= "Does the page have a heading that says 'Example Domain'?"
Custom presets with system + user_template let you define reusable assertion
logic with template variables {url}, {title}, {content}, {expected_text},
and {description}. Forgetting {content} is no longer a problem — the page
context is appended automatically whenever the template does not reference it:
[[]]
= "text_matches"
= "You are a QA tester."
= "Does the page at {url} contain the text: {expected_text}?"
= "Welcome back"
CLI reference
llm-browser-testkit run <scenario.toml> [OPTIONS]
| Flag | Default | Description |
|---|---|---|
--llm-url |
$HARNESS_LLM_TEST_URL or http://localhost:8080 |
OpenAI-compatible endpoint |
--llm-model |
$HARNESS_LLM_TEST_MODEL or deepseek |
Model name |
--llm-api-key |
$HARNESS_LLM_API_KEY |
API key (Bearer token) |
--llm-header |
— | Custom header Name:Value (repeatable) |
--model-param |
— | Provider param key=value (repeatable) |
--base-url |
$HARNESS_BROWSER_BASE_URL or http://localhost:4200 |
App under test |
--headless |
true |
Run Chrome headlessly |
--timeout |
60 |
Seconds per action |
--viewport-width |
1280 |
Browser width |
--viewport-height |
720 |
Browser height |
--start-url |
/dashboard |
First page to load |
--max-cost |
— | Global budget: max USD across all tests |
--max-tokens |
— | Global budget: max tokens across all tests |
--budget-enforcement |
hard |
Budget mode: hard (abort) or soft (warn) |
--artifacts-dir |
$HARNESS_ARTIFACTS_DIR or artifacts |
Directory for failure screenshots |
--continue-on-failure |
off | Keep running remaining steps after a step failure (default: fail fast) |
CLI flags override the scenario [config].
Endpoints
Define multiple named endpoints — LLM providers, MCP servers, and A2A agents — each with their own pricing, and route test steps to them automatically or explicitly.
[]
= "llm"
= "https://api.openai.com"
= "gpt-4o-mini"
= "sk-..."
= { = 0.15, = 0.60 }
= ["targeting", "assertion"]
[]
= "llm"
= "https://api.openai.com"
= "gpt-4o"
= "sk-..."
= { = 2.50, = 10.00 }
= []
[]
= "mcp"
= "npx"
= ["-y", "@modelcontextprotocol/server-postgres", "postgresql://localhost/mydb"]
= { = 0.001 }
[]
= "a2a"
= "http://localhost:9090"
= { = 0.01 }
[[]]
= "Dashboard with vision"
[[]]
= "navigate"
= "/dashboard"
# Use the vision endpoint just for this assertion
[[]]
= "assert"
= "no_error_on_page"
= "vision"
Endpoint types:
llm— OpenAI-compatible chat completions API. Pricing is per-token (input_per_1m_tokens,output_per_1m_tokens).mcp— Model Context Protocol server. Launched as a subprocess viacommand+args. Pricing isper_call.a2a— Agent-to-Agent Protocol agent. Communicates via JSON-RPC over HTTP at the givenurl. Pricing isper_call.
Routing:
default_forlists which task types an endpoint serves automatically (targetingfor element resolution,assertionfor assertions).- Add
endpoint = "name"on any step or[[test]]group to override routing.
A2A agents
Call remote A2A agents in your test scenarios as steps, or use them inside assertion definitions for reusable agent-backed checks.
Agent step
[]
= "a2a"
= "http://localhost:9090"
= { = 0.01 }
[[]]
= "Audit trail check"
= [
{ = "navigate", = "/admin/audit" },
{ = "agent", = "audit_bot", = "Check if user 'admin' appears in the recent audit log" },
]
Agent-backed assertions
Define reusable agent assertions with task_template:
[[]]
= "audit_verify"
= "audit_bot"
= "Verify that {expected_text} is true for the page at {url}"
[[]]
= "assert"
= "audit_verify"
= "the user can see the dashboard"
Template variables available: {url}, {title}, {content}, {expected_text},
{description}, {task}.
Run as an A2A agent
Enable the a2a-server feature to expose the framework as an A2A agent that
other agents or orchestrators can call. The server listens on a port and accepts
tasks/send JSON-RPC requests.
[]
= true
= 3100
# Build and run with the a2a-server feature
Or via CLI without modifying the TOML:
Docker deployment
A Dockerfile is included in the repository — it uses a multi-stage build with
Alpine and Chromium.
MCP tools
Call MCP server tools directly from test steps to query databases, read files, or invoke any tool an MCP server exposes.
[]
= "mcp"
= "npx"
= ["-y", "@modelcontextprotocol/server-postgres", "postgresql://localhost/mydb"]
= { = 0.001 }
[[]]
= "Database smoke test"
= [
{ = "navigate", = "/dashboard" },
{ = "mcp", = "db", = "query", = { = "SELECT count(*) FROM users" } },
{ = "assert", = "no_error_on_page" },
]
MCP servers are launched as subprocesses via the configured command and args.
The framework handles the MCP initialize handshake, tool listing, and invocation
automatically.
MCP server exposure
Enable the mcp-server feature to expose the framework as an MCP server so
other tools can invoke it remotely.
[]
= true
= 3000
When enabled, other MCP clients can call tools like run_scenario and
get_page_state on port 3000.
Cost tracking & budgets
Every LLM call, agent invocation, and MCP tool call is tracked. After the run completes, a cost report is printed with per-test and per-endpoint breakdowns.
Per-test default budget
[]
= 1.0
= 100_000
= 50
= "hard"
Per-test override
[[]]
= "Expensive test"
= { = 2.0, = 200_000, = "soft" }
Global budget
[]
= 5.0
= 500_000
= "hard"
Enforcement
| Mode | Behavior |
|---|---|
hard |
Abort the test or run immediately when budget is exceeded |
soft |
Print a warning but continue executing remaining steps |
CLI budgets
Sample report output
═══════════════════════════════════════════════
COST REPORT
═══════════════════════════════════════════════
Test: "Homepage loads" — $0.0123 | 1,234 tokens | 4 calls
endpoint.default: 4 calls, 1,234 tokens, $0.0123
Test: "Dashboard smoke" — $0.0891 | 4,567 tokens | 6 calls
endpoint.vision: 2 calls, 3,000 tokens, $0.0450
endpoint.default: 3 calls, 1,567 tokens, $0.0441
endpoint.audit_bot: 1 call, 0 tokens, $0.0000
───────────────────────────────────────────────
GLOBAL SUMMARY
Total cost: $0.1014
Total tokens: 5,801
Total calls: 10
═══════════════════════════════════════════════
How it works
Four pieces:
-
Chrome — launched via the Chrome DevTools Protocol (
headless_chromecrate). It navigates, clicks, types, and extracts page content. -
LLM — any OpenAI-compatible API. Used in two places:
- Element targeting: when a step says
target = "the login button", the runner sends the page's interactive elements to the LLM and asks for a CSS selector. - Assertions: the runner sends page content to the LLM with a QA prompt
and expects
PASSorFAIL: <reason>.
- Element targeting: when a step says
-
A2A + MCP — connect to remote agents via the Agent-to-Agent Protocol and to MCP servers for tool-calling. Both are first-class step kinds.
-
TOML scenarios — declarative test files. No code, no CSS selectors required. Just describe what you want in English.
TOML file → CLI runner → Chrome (CDP) → LLM API
→ A2A agent
→ MCP server
Use as a library
[]
= { = "0.1", = ["macros", "mcp-server"] }
use ScenarioRunner;
use Scenario;
let scenario: Scenario = from_str?;
let runner = new;
let report = runner.run?;
println!;
// Access cost/usage data
let usage = runner.usage_tracker;
let global = usage.global_snapshot;
println!;
// Print the cost report
print_report;
Macros: #[browser_test] in cargo test
Enable the macros feature to write browser tests directly in your Rust test
modules:
[]
= { = "0.1", = ["macros"] }
use browser_test;
use browser_test_inline;
// Run a TOML scenario file
browser_test!;
// Inline small scenarios
browser_test_inline!;
Tests auto-skip when no LLM endpoint or Chrome is available — safe to include in
every CI run. They only execute with real PASS/FAIL when infrastructure is
present.
LLM authentication
The runner supports API keys and custom headers for SSO or alternative auth:
[]
= "sk-..."
= { = "acme", = "qa" }
Endpoints can also carry their own credentials:
[]
= "llm"
= "https://api.openai.com"
= "sk-prod-..."
= "gpt-4o"
Via CLI:
Via env:
License
Apache-2.0 OR MIT