@addai/node 0.27.1 → 0.28.0

package/assets/vault-extension/content.js

@@ -0,0 +1,62 @@
+(function(){"use strict";const k={ITEMS_FOR_DOMAIN:"items:for-domain",ITEM_REVEAL:"item:reveal",ITEM_CREATE:"item:create",INFER_FORM:"infer:form"},$=80,E=a=>{if(typeof a!="string")return null;const e=a.replace(/\s+/g," ").trim();return e?e.length>$?e.slice(0,$):e:null},aa=a=>E(a.getAttribute("aria-label")),ea=a=>{if(!a.id)return null;const e=a.ownerDocument.querySelector(`label[for="${CSS.escape(a.id)}"]`);return e?E(e.textContent):null},ta=a=>{const e=a.closest("label");if(!e)return null;const t=e.cloneNode(!0);return t.querySelectorAll("input, textarea, select").forEach(r=>r.remove()),E(t.textContent)},ra=a=>E(a.getAttribute("placeholder")),na=a=>a&&(aa(a)||ea(a)||ta(a)||ra(a))||null,oa=new Set(["hidden"]),ia=a=>{var t,r;if(oa.has(a.type))return!0;const e=(r=(t=a.ownerDocument.defaultView)==null?void 0:t.getComputedStyle)==null?void 0:r.call(t,a);return e?e.display==="none"||e.visibility==="hidden":!1},da=a=>({_el:a,type:(a.type||a.tagName||"text").toLowerCase(),name:a.getAttribute("name")||null,autocomplete:a.getAttribute("autocomplete")||null,placeholder:a.getAttribute("placeholder")||null,label:na(a),ariaLabel:a.getAttribute("aria-label")||null,required:a.hasAttribute("required"),visible:!ia(a)}),sa=a=>{let e=2166136261;const t=a.slice().sort().join("|");for(let r=0;r<t.length;r++)e^=t.charCodeAt(r),e=e+((e<<1)+(e<<4)+(e<<7)+(e<<8)+(e<<24))>>>0;return e.toString(16).padStart(8,"0")},la=a=>sa(a.filter(e=>e.visible).map(e=>`${e.type}:${e.name||""}:${e.autocomplete||""}`)),D=(a,e)=>Array.from(a.querySelectorAll(e)).filter(t=>!t.disabled),R=(a,e)=>{const t=a.map(da),r=t.find(s=>s.type==="password"&&s.visible),i=t.find(s=>s.visible),n=r||i||t[0],d=(n==null?void 0:n._el)||null,o=t.map((s,c)=>({...s,id:`i_${c}`})),l=new Map(o.map((s,c)=>[s.id,t[c]._el]));return{formId:`form_${e}`,signature:la(o),inputs:o.map(({_el:s,...c})=>c),anchor:d,elementById:l}},ca=(a=document)=>{const e=[],t=new WeakSet;let r=0;const i=Array.from(a.querySelectorAll("form"));for(const d of i){const o=D(d,"input, select, textarea");o.length&&(o.forEach(l=>t.add(l)),e.push(R(o,r++)))}const n=D(a,'input[type="password"]').filter(d=>!t.has(d));for(const d of n){const o=d.parentElement;if(!o)continue;const l=Array.from(o.querySelectorAll("input, select, textarea")).filter(s=>!s.disabled&&!t.has(s));l.length&&(l.forEach(s=>t.add(s)),e.push(R(l,r++)))}return e},z="addai.forms",N=50;let f=null;const M=async()=>{if(f)return f;try{f=(await chrome.storage.local.get(z))[z]||{}}catch{f={}}return f},q=async a=>{f=a;try{await chrome.storage.local.set({[z]:a})}catch{}},pa=async(a,e)=>{const r=(await M())[a];if(!r)return null;const i=r.find(n=>n.signature===e);return i?i.mapping:null},ua=async(a,e,t,r)=>{const i=await M(),n=(i[a]||[]).filter(o=>o.signature!==e),d=Date.now();n.push({signature:e,mapping:t,fields:r,savedAt:d,lastUsedAt:d}),n.sort((o,l)=>l.lastUsedAt-o.lastUsedAt),n.length>N&&(n.length=N),await q({...i,[a]:n})},fa=async(a,e)=>{const t=await M(),r=t[a];if(!r)return;const i=r.findIndex(n=>n.signature===e);i<0||(r[i]={...r[i],lastUsedAt:Date.now()},await q({...t,[a]:r}))},ga=':host{--addai-brand: rgb(127, 86, 217);--addai-brand-strong: rgb(105, 65, 198);--addai-brand-soft: rgba(127, 86, 217, .12);--addai-brand-ring: rgba(127, 86, 217, .24);--addai-glass-fill: rgba(255, 255, 255, .66);--addai-glass-fill-strong: rgba(255, 255, 255, .92);--addai-glass-gloss: linear-gradient(180deg, rgba(255, 255, 255, .55) 0%, rgba(255, 255, 255, 0) 36%, rgba(255, 255, 255, 0) 70%, rgba(11, 15, 23, .04) 100%);--addai-glass-edge: rgba(11, 15, 23, .1);--addai-glass-edge-soft: rgba(11, 15, 23, .06);--addai-glass-inner: inset 0 1px 0 rgba(255, 255, 255, .7), inset 0 -1px 0 rgba(11, 15, 23, .04);--addai-glass-blur: blur(24px) saturate(180%);--addai-glass-blur-strong: blur(36px) saturate(190%);--addai-fg: rgb(16, 24, 40);--addai-fg-strong: rgb(16, 24, 40);--addai-muted: rgb(94, 100, 115);--addai-muted-strong: rgb(71, 79, 96);--addai-radius: 14px;--addai-radius-sm: 10px;--addai-radius-pill: 999px;--addai-shadow: 0 1px 2px rgba(16, 24, 40, .06), 0 12px 28px rgba(16, 24, 40, .14), 0 2px 6px rgba(16, 24, 40, .06);--addai-shadow-lifted: 0 1px 2px rgba(16, 24, 40, .06), 0 24px 48px rgba(16, 24, 40, .18), 0 4px 12px rgba(16, 24, 40, .08);--addai-font: "AddaiInter", "Open Sans", -apple-system, BlinkMacSystemFont, "SF Pro Text", "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;--addai-font-feature: "cv11", "ss01", "ss03";all:initial;font-family:var(--addai-font);font-feature-settings:var(--addai-font-feature);-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;color:var(--addai-fg)}@media(prefers-color-scheme:dark){:host{--addai-brand: rgb(176, 156, 255);--addai-brand-strong: rgb(159, 138, 245);--addai-brand-soft: rgba(176, 156, 255, .18);--addai-brand-ring: rgba(176, 156, 255, .32);--addai-glass-fill: rgba(22, 24, 31, .62);--addai-glass-fill-strong: rgba(22, 24, 31, .88);--addai-glass-gloss: linear-gradient(180deg, rgba(255, 255, 255, .1) 0%, rgba(255, 255, 255, 0) 30%, rgba(255, 255, 255, 0) 70%, rgba(0, 0, 0, .18) 100%);--addai-glass-edge: rgba(255, 255, 255, .1);--addai-glass-edge-soft: rgba(255, 255, 255, .06);--addai-glass-inner: inset 0 1px 0 rgba(255, 255, 255, .1), inset 0 -1px 0 rgba(0, 0, 0, .3);--addai-fg: rgb(248, 250, 252);--addai-fg-strong: rgb(255, 255, 255);--addai-muted: rgb(176, 184, 200);--addai-muted-strong: rgb(206, 213, 226);--addai-shadow: 0 1px 2px rgba(0, 0, 0, .35), 0 16px 36px rgba(0, 0, 0, .5), 0 2px 6px rgba(0, 0, 0, .3);--addai-shadow-lifted: 0 1px 2px rgba(0, 0, 0, .4), 0 28px 60px rgba(0, 0, 0, .55), 0 4px 12px rgba(0, 0, 0, .35)}}.addai-root,.addai-root *{box-sizing:border-box}.addai-glyph{position:fixed;width:22px;height:22px;display:inline-flex;align-items:center;justify-content:center;color:var(--addai-brand);background:var(--addai-glass-fill-strong);-webkit-backdrop-filter:var(--addai-glass-blur);backdrop-filter:var(--addai-glass-blur);border:1px solid var(--addai-glass-edge);border-radius:8px;cursor:pointer;z-index:2147483646;box-shadow:0 1px 2px #1018281f,var(--addai-glass-inner);transition:transform .18s cubic-bezier(.32,.72,0,1),box-shadow .18s ease,background .18s ease;padding:0;isolation:isolate;overflow:hidden}.addai-glyph:before{content:"";position:absolute;top:0;right:0;bottom:0;left:0;background:linear-gradient(180deg,#ffffff73,#fff0 60%);pointer-events:none;z-index:0}.addai-glyph>svg{position:relative;z-index:1;width:14px;height:14px}.addai-glyph:hover{transform:scale(1.06);background:var(--addai-glass-fill-strong);box-shadow:0 1px 2px #1018281f,0 0 0 3px var(--addai-brand-ring),var(--addai-glass-inner)}.addai-glyph:active{transform:scale(.96)}.addai-glyph:focus-visible{outline:none;box-shadow:0 1px 2px #1018281f,0 0 0 3px var(--addai-brand-ring),var(--addai-glass-inner)}.addai-panel{position:fixed;width:320px;max-height:380px;background:var(--addai-glass-fill);-webkit-backdrop-filter:var(--addai-glass-blur-strong);backdrop-filter:var(--addai-glass-blur-strong);border:1px solid var(--addai-glass-edge);border-radius:var(--addai-radius);box-shadow:var(--addai-shadow-lifted),var(--addai-glass-inner);overflow:hidden;z-index:2147483647;display:flex;flex-direction:column;font-family:var(--addai-font);color:var(--addai-fg);isolation:isolate;animation:addai-panel-in .2s cubic-bezier(.32,.72,0,1)}.addai-panel:before{content:"";position:absolute;top:0;right:0;bottom:0;left:0;background:var(--addai-glass-gloss);pointer-events:none;z-index:0}.addai-panel>*{position:relative;z-index:1}@keyframes addai-panel-in{0%{opacity:0;transform:translateY(-6px) scale(.98)}to{opacity:1;transform:translateY(0) scale(1)}}.addai-panel header{display:flex;align-items:center;gap:8px;padding:12px 16px;font-size:12px;font-weight:500;letter-spacing:-.005em;color:var(--addai-muted-strong);border-bottom:1px solid var(--addai-glass-edge-soft)}.addai-panel header .addai-mark{width:14px;height:14px;color:var(--addai-brand);display:inline-flex;align-items:center;justify-content:center}.addai-panel header .addai-mark svg{width:14px;height:14px}.addai-list{overflow:auto;padding:6px}.addai-row{display:flex;align-items:center;gap:12px;padding:10px 12px;border-radius:var(--addai-radius-sm);cursor:pointer;font-size:13px;line-height:1.35;position:relative;transition:background-color .12s ease}.addai-row:hover,.addai-row[aria-selected=true]{background:var(--addai-brand-soft)}.addai-row[aria-selected=true]:before{content:"";position:absolute;left:4px;top:10px;bottom:10px;width:3px;border-radius:999px;background:var(--addai-brand)}.addai-avatar{flex-shrink:0;width:28px;height:28px;border-radius:999px;display:inline-flex;align-items:center;justify-content:center;background:var(--addai-brand-soft);color:var(--addai-brand-strong);font-weight:600;font-size:12px;letter-spacing:-.01em;border:1px solid var(--addai-glass-edge-soft)}.addai-row .addai-rowtext{min-width:0;flex:1 1 auto}.addai-row .addai-username{font-weight:600;font-size:13.5px;color:var(--addai-fg-strong);letter-spacing:-.005em;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.addai-row .addai-meta{font-size:12px;color:var(--addai-muted);margin-top:1px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.addai-panel footer{display:flex;align-items:center;gap:8px;padding:11px 16px;font-size:12.5px;font-weight:500;border-top:1px solid var(--addai-glass-edge-soft);color:var(--addai-brand);cursor:pointer;transition:background-color .12s ease}.addai-panel footer:hover{background:var(--addai-brand-soft)}.addai-panel footer .addai-plus{width:14px;height:14px;display:inline-flex;align-items:center;justify-content:center;border-radius:999px;background:var(--addai-brand-soft);color:var(--addai-brand);font-weight:700;font-size:11px;line-height:1}.addai-toast{position:fixed;bottom:20px;right:20px;width:340px;padding:16px 18px;background:var(--addai-glass-fill);-webkit-backdrop-filter:var(--addai-glass-blur-strong);backdrop-filter:var(--addai-glass-blur-strong);border:1px solid var(--addai-glass-edge);border-radius:var(--addai-radius);box-shadow:var(--addai-shadow-lifted),var(--addai-glass-inner);z-index:2147483647;font:13px/1.4 var(--addai-font);color:var(--addai-fg);isolation:isolate;animation:addai-panel-in .22s cubic-bezier(.32,.72,0,1)}.addai-toast:before{content:"";position:absolute;top:0;right:0;bottom:0;left:0;background:var(--addai-glass-gloss);pointer-events:none;z-index:0;border-radius:inherit}.addai-toast>*{position:relative;z-index:1}.addai-toast .addai-toast-head{display:flex;align-items:center;gap:8px;font-size:12px;font-weight:500;letter-spacing:-.005em;color:var(--addai-muted-strong);margin-bottom:10px}.addai-toast .addai-toast-head .addai-mark{color:var(--addai-brand);display:inline-flex}.addai-toast .addai-toast-head .addai-mark svg{width:14px;height:14px}.addai-toast h4{margin:0 0 4px;font-size:14px;font-weight:600;letter-spacing:-.005em;color:var(--addai-fg-strong)}.addai-toast p{margin:0 0 14px;color:var(--addai-muted);font-size:12.5px}.addai-toast .addai-actions{display:flex;gap:8px;justify-content:flex-end}.addai-toast button{font:500 12.5px/1.2 var(--addai-font);padding:8px 14px;border-radius:var(--addai-radius-sm);border:1px solid var(--addai-glass-edge);background:transparent;color:var(--addai-fg);cursor:pointer;transition:background-color .12s ease,border-color .12s ease,transform .12s ease}.addai-toast button:hover{background:#1018280a}.addai-toast button:active{transform:scale(.97)}.addai-toast button.primary{background:var(--addai-brand);border-color:var(--addai-brand);color:#fff;box-shadow:0 1px 2px #10182829,inset 0 1px #ffffff2e}.addai-toast button.primary:hover{background:var(--addai-brand-strong);border-color:var(--addai-brand-strong)}.addai-toast button.primary:focus-visible{outline:none;box-shadow:0 0 0 3px var(--addai-brand-ring),0 1px 2px #10182829}@media(prefers-color-scheme:dark){.addai-toast button:hover{background:#ffffff0f}.addai-toast button.primary{color:#fff}}.addai-pill{position:fixed;top:16px;right:16px;display:inline-flex;align-items:center;gap:8px;padding:7px 14px;background:var(--addai-glass-fill);-webkit-backdrop-filter:var(--addai-glass-blur);backdrop-filter:var(--addai-glass-blur);border:1px solid var(--addai-glass-edge);border-radius:var(--addai-radius-pill);box-shadow:var(--addai-shadow),var(--addai-glass-inner);font:500 12.5px/1.2 var(--addai-font);color:var(--addai-fg-strong);z-index:2147483647;transform:translateY(-6px);opacity:0;transition:transform .22s cubic-bezier(.32,.72,0,1),opacity .22s ease;isolation:isolate}.addai-pill:before{content:"";position:absolute;top:0;right:0;bottom:0;left:0;border-radius:inherit;background:linear-gradient(180deg,#fff6,#fff0 60%);pointer-events:none;z-index:0}.addai-pill>*{position:relative;z-index:1}.addai-pill[data-visible=true]{transform:translateY(0);opacity:1}.addai-pill .addai-spinner{width:12px;height:12px;border:2px solid var(--addai-brand-soft);border-top-color:var(--addai-brand);border-radius:50%;animation:addai-spin .7s linear infinite}.addai-pill .addai-check{width:14px;height:14px;color:var(--addai-brand)}@keyframes addai-spin{to{transform:rotate(360deg)}}',H='<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="8" cy="15" r="4"/><path d="M10.85 12.15 19 4"/><path d="m18 5 2 2"/><path d="m15 8 2 2"/></svg>',O=`<span class="addai-mark" aria-hidden="true">${H}</span>`,ba=a=>{const e=String(a).trim();if(!e)return"?";const t=e[0];return/[a-z0-9]/i.test(t)?t.toLowerCase():"?"};let u=null,g=null,b=null;const ma=()=>{if(u)return g;u=document.createElement("div"),u.setAttribute("data-addai-vault",""),u.style.cssText="all: initial; position: relative; z-index: 2147483647;",document.documentElement.appendChild(u),g=u.attachShadow({mode:"closed"});const a=chrome.runtime.getURL("assets/inter.woff2"),e=document.createElement("style");e.textContent=`
+    @font-face {
+      font-family: 'AddaiInter';
+      font-style: normal;
+      font-weight: 100 900;
+      font-display: swap;
+      src: url('${a}') format('woff2-variations');
+    }
+  `,g.appendChild(e);const t=document.createElement("style");t.textContent=ga,g.appendChild(t);const r=document.createElement("div");return r.className="addai-root",g.appendChild(r),g},A=()=>ma().querySelector(".addai-root"),m=a=>String(a??"").replace(/[&<>"']/g,e=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[e]),ha=(a,e)=>{const t=A(),r=document.createElement("button");r.type="button",r.className="addai-glyph",r.innerHTML=H,r.setAttribute("aria-label","Sign in with +Ai Vault"),r.addEventListener("mousedown",o=>o.preventDefault()),r.addEventListener("click",o=>{o.preventDefault(),o.stopPropagation(),e()}),t.appendChild(r);const i=()=>{const o=a.getBoundingClientRect();r.style.top=`${o.top+(o.height-20)/2}px`,r.style.left=`${o.right-26}px`,r.style.display=o.width===0||o.height===0?"none":"inline-flex"};i();const n=new ResizeObserver(i);n.observe(a);const d=()=>i();return window.addEventListener("scroll",d,!0),window.addEventListener("resize",d),()=>{r.remove(),n.disconnect(),window.removeEventListener("scroll",d,!0),window.removeEventListener("resize",d)}},xa=(a,e)=>{const t=e.getBoundingClientRect(),i=window.innerHeight-t.bottom<200;a.style.left=`${Math.max(8,t.left)}px`,a.style.top=i?`${t.top-a.offsetHeight-4}px`:`${t.bottom+4}px`},F=a=>{b&&(a.composedPath().includes(u)||h())},h=()=>{b&&(b.remove(),b=null,document.removeEventListener("mousedown",F,!0))},va=(a,e,t)=>{const r=Array.from(a.querySelectorAll(".addai-row"));let i=0;const n=o=>{r.forEach(l=>l.removeAttribute("aria-selected")),i=(o+r.length)%r.length,r[i].setAttribute("aria-selected","true"),r[i].scrollIntoView({block:"nearest"})},d=o=>{if(!b){document.removeEventListener("keydown",d,!0);return}o.key==="ArrowDown"?(o.preventDefault(),n(i+1)):o.key==="ArrowUp"?(o.preventDefault(),n(i-1)):o.key==="Enter"?(o.preventDefault(),t(e[i])):o.key==="Escape"&&(o.preventDefault(),h())};document.addEventListener("keydown",d,!0)},wa=({anchor:a,items:e,onPick:t,onSaveNew:r})=>{h();const i=A(),n=document.createElement("div");n.className="addai-panel",n.setAttribute("role","listbox"),n.innerHTML=`
+    <header>${O}<span>+Ai vault</span></header>
+    <div class="addai-list"></div>
+    <footer><span class="addai-plus" aria-hidden="true">+</span><span>Save new credential</span></footer>
+  `;const d=n.querySelector(".addai-list");return e.forEach((o,l)=>{var W,X,J,Q,Z;const s=document.createElement("div");s.className="addai-row",s.setAttribute("role","option"),s.dataset.idx=String(l),l===0&&s.setAttribute("aria-selected","true");const c=((W=o.data)==null?void 0:W.username)||((X=o.data)==null?void 0:X.email)||o.name||"(saved login)",C=[(J=o.data)!=null&&J.username||(Q=o.data)!=null&&Q.email?o.name:null,(Z=o.shared_from_workspace)!=null&&Z.name?`from ${o.shared_from_workspace.name}`:null,o.domain||null,o.folderName||null].filter(Boolean);s.innerHTML=`
+      <div class="addai-avatar" aria-hidden="true">${m(ba(c))}</div>
+      <div class="addai-rowtext">
+        <div class="addai-username">${m(c)}</div>
+        <div class="addai-meta">${m(C.join(" · "))}</div>
+      </div>
+    `,s.addEventListener("mousedown",Da=>Da.preventDefault()),s.addEventListener("click",()=>t(o)),d.appendChild(s)}),n.querySelector("footer").addEventListener("click",()=>r()),i.appendChild(n),xa(n,a),va(n,e,t),document.addEventListener("mousedown",F,!0),b=n,n},ya=({domain:a,username:e,onSave:t,onDismiss:r})=>{const i=A(),n=document.createElement("div");n.className="addai-toast",n.innerHTML=`
+    <div class="addai-toast-head">${O}<span>+Ai vault</span></div>
+    <h4>Save this credential?</h4>
+    <p>${m(a)} · ${m(e||"(no username)")}</p>
+    <div class="addai-actions">
+      <button data-act="dismiss">Not now</button>
+      <button data-act="save" class="primary">Save to vault</button>
+    </div>
+  `,n.querySelector('[data-act="save"]').addEventListener("click",()=>{n.remove(),t()}),n.querySelector('[data-act="dismiss"]').addEventListener("click",()=>{n.remove(),r()}),i.appendChild(n),setTimeout(()=>{n.isConnected&&n.remove()},3e4)},ka='<svg class="addai-check" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="5 12 10 17 19 7"/></svg>';let p=null,S=null;const Ea=()=>{const a=A();return p&&p.isConnected||(p=document.createElement("div"),p.className="addai-pill",p.setAttribute("data-visible","false"),p.setAttribute("role","status"),p.setAttribute("aria-live","polite"),a.appendChild(p)),p},x=(a,e={})=>{if(S&&(clearTimeout(S),S=null),a==="hidden"){if(!p)return;p.setAttribute("data-visible","false"),S=setTimeout(()=>{p==null||p.remove(),p=null},220);return}const t=Ea();if(a==="thinking")t.innerHTML='<span class="addai-spinner" aria-hidden="true"></span><span>Reading form…</span>';else if(a==="recognized"){const r=e.count??0;t.innerHTML=`${ka}<span>Recognized ${r} field${r===1?"":"s"}</span>`}t.offsetWidth,t.setAttribute("data-visible","true")},Aa=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,"value").set,Sa=(a,e)=>{a&&(Aa.call(a,e??""),a.dispatchEvent(new Event("input",{bubbles:!0})),a.dispatchEvent(new Event("change",{bubbles:!0})))};let j=!1;async function La(a){var n,d;if(j)return;const e=location.hostname;if(!e)return;let t;try{t=await a("keepalive:for-host",{host:e})}catch{return}const r=t!=null&&t.ok?(n=t.data)==null?void 0:n.credential:null,i=t!=null&&t.ok?(d=t.data)==null?void 0:d.provider:null;!r&&!i||(j=!0,_a(a,e,r,i))}function _a(a,e,t,r){const i=document.createElement("div");i.setAttribute("data-addai-keepalive",""),document.documentElement.appendChild(i);const n=i.attachShadow({mode:"closed"}),d=[];t&&d.push({key:"refresh",label:`Refresh &ldquo;${L(t.name)}&rdquo;`,busy:"Capturing session…",msg:"keepalive:capture",done:o=>`✓ Refreshed · ${o.count} cookies`}),r&&d.push({key:"create",label:t?`+ New ${L(r.label)}`:`Save ${L(r.label)} to Vault`,busy:"Creating credential…",msg:"keepalive:create",done:o=>`✓ Created &ldquo;${L(o.name)}&rdquo;`}),n.innerHTML=`
+    <style>
+      .wrap { position: fixed; bottom: 16px; right: 16px; z-index: 2147483647;
+        font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; }
+      .card { display: inline-flex; flex-direction: column; gap: 6px;
+        background: #1d1f29; color: #fff; border: 1px solid #2d2f3c; border-radius: 14px;
+        padding: 10px; box-shadow: 0 6px 20px rgba(0,0,0,.3); }
+      .head { display: flex; align-items: center; gap: 8px; padding: 2px 4px 0; }
+      .head .dot { width: 7px; height: 7px; border-radius: 50%; background: #34d399; flex: none; }
+      .head .t { font-size: 11px; opacity: .7; }
+      .head .x { margin-left: auto; opacity: .45; font-size: 11px; cursor: pointer; }
+      .head .x:hover { opacity: .9; }
+      .btn { display: inline-flex; align-items: center; gap: 8px; cursor: pointer;
+        background: #2a2d3a; color: #fff; border: 1px solid #353848; border-radius: 999px;
+        padding: 8px 14px; font-size: 12px; line-height: 1; user-select: none;
+        transition: transform .1s ease, background .15s ease; }
+      .btn:hover { transform: translateY(-1px); background: #323548; }
+      .btn[disabled] { cursor: default; opacity: .8; }
+      .btn .bdot { width: 8px; height: 8px; border-radius: 50%; background: #34d399; flex: none; }
+      .btn.err .bdot { background: #f87171; }
+    </style>
+    <div class="wrap">
+      <div class="card">
+        <div class="head">
+          <span class="dot"></span>
+          <span class="t">+Ai Vault</span>
+          <span class="x" data-x>&#10005;</span>
+        </div>
+        ${d.map((o,l)=>`
+          <div class="btn" role="button" tabindex="0" data-i="${l}">
+            <span class="bdot"></span>
+            <span class="label">${o.label}</span>
+          </div>`).join("")}
+      </div>
+    </div>`,n.querySelector("[data-x]").addEventListener("click",()=>i.remove()),n.querySelectorAll(".btn").forEach(o=>{const l=d[Number(o.dataset.i)],s=o.querySelector(".label");o.addEventListener("click",async()=>{if(o.hasAttribute("disabled"))return;o.setAttribute("disabled",""),s.textContent=l.busy;const c=await a(l.msg,{host:e});c!=null&&c.ok?(s.innerHTML=l.done(c.data),setTimeout(()=>i.remove(),2800)):(o.classList.add("err"),s.textContent=c!=null&&c.error?`Failed: ${c.error}`:"Failed",o.removeAttribute("disabled"))})})}function L(a){return String(a).replace(/[&<>"']/g,e=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[e])}const v="addai.suppress",B=new WeakSet,P=new WeakSet,I=new Map;let w=!0;const y=(a,e)=>new Promise(t=>{if(!w){t(null);return}try{chrome.runtime.sendMessage({type:a,payload:e},r=>{if(chrome.runtime.lastError){/context invalidated/i.test(chrome.runtime.lastError.message||"")&&(w=!1,T.disconnect()),t(null);return}t(r)})}catch(r){/context invalidated/i.test((r==null?void 0:r.message)||"")&&(w=!1,T.disconnect()),t(null)}}),U=async(a,e)=>{if(!w)return e;try{return await a()}catch{return e}},Ca=async a=>U(async()=>{const r=((await chrome.storage.local.get(v))[v]||{})[a];return r&&r>Date.now()},!1),za=async a=>U(async()=>{const t=(await chrome.storage.local.get(v))[v]||{};t[a]=Date.now()+1440*60*1e3,await chrome.storage.local.set({[v]:t})},void 0),Ma={password:["username","password"],credential:["username","password"]},Ia=a=>a?Array.isArray(a)?a.map(e=>(e==null?void 0:e.key)||(e==null?void 0:e.name)).filter(Boolean):typeof a=="object"?Object.keys(a):[]:[],Ta=a=>{const e=a!=null&&a.data?Object.keys(a.data).filter(n=>n!=="url"):[],t=Ia(a==null?void 0:a.field_schema).filter(n=>n!=="url"),r=Array.isArray(a==null?void 0:a.custom_fields)?a.custom_fields.map(n=>(n==null?void 0:n.key)||(n==null?void 0:n.name)).filter(Boolean):[],i=Ma[a==null?void 0:a.item_type]||[];return Array.from(new Set([...e,...t,...r,...i]))},$a=(a,e)=>Object.values(a).filter(t=>typeof t=="string").every(t=>e.elementById.has(t)),Y=a=>Object.values(a).filter(e=>typeof e=="string").length,V=(a,e,t)=>{const r=async n=>{h();const d=await y(k.ITEM_REVEAL,{itemId:n.id});if(!(d!=null&&d.ok))return;const o=d.data;for(const[l,s]of Object.entries(e)){if(!s)continue;const c=a.elementById.get(s);if(!c)continue;const C=o[l];typeof C=="string"&&Sa(c,C)}},i=n=>{wa({anchor:n,items:t,onPick:r,onSaveNew:()=>h()})};for(const[,n]of Object.entries(e)){if(!n)continue;const d=a.elementById.get(n);!d||B.has(d)||(B.add(d),ha(d,()=>i(d)))}},K=a=>{var t;const e=(t=a.anchor)==null?void 0:t.closest("form");!e||P.has(e)||(P.add(e),e.addEventListener("submit",async()=>{const r=window.location.hostname;if(!r||await Ca(r))return;const i=Array.from(e.querySelectorAll('input[type="password"]'))[0],n=i==null?void 0:i.value;if(!n||n.length<4)return;const d=a.anchor&&a.anchor!==i?a.anchor:Array.from(e.querySelectorAll('input[type="email"], input[type="text"]'))[0],o=(d==null?void 0:d.value)||"";ya({domain:r,username:o,onSave:async()=>{await y(k.ITEM_CREATE,{name:r,url:window.location.origin,username:o,password:n})},onDismiss:()=>za(r)})},{capture:!0}))},_=async()=>{var n,d,o;if(!w)return;const a=window.location.hostname;if(!a)return;const e=ca(document);if(!e.length)return;const t=await y(k.ITEMS_FOR_DOMAIN,{domain:a});if(!(t!=null&&t.ok)||!t.data.items.length)return;const r=t.data.items,i=Array.from(new Set(r.flatMap(Ta)));if(i.length)for(const l of e){if(I.has(l.signature)){V(l,I.get(l.signature),r),K(l);continue}let s=await pa(a,l.signature);if(s&&!$a(s,l)&&(s=null),s)await fa(a,l.signature),x("recognized",{count:Y(s)});else{x("thinking");const c=await y(k.INFER_FORM,{fields:i,inputs:l.inputs,itemId:r[0].id,context:{host:a,title:document.title.slice(0,120),formAction:((o=(d=(n=l.anchor)==null?void 0:n.form)==null?void 0:d.getAttribute("action"))==null?void 0:o.slice(0,200))||null}});if(!(c!=null&&c.ok)){x("hidden");continue}s=c.data.mapping,await ua(a,l.signature,s,i),x("recognized",{count:Y(s)})}I.set(l.signature,s),V(l,s,r),K(l),setTimeout(()=>x("hidden"),2e3)}},T=new MutationObserver(()=>{clearTimeout(_.__t),_.__t=setTimeout(_,350)}),G=async()=>{await _(),T.observe(document.body,{childList:!0,subtree:!0}),La(y).catch(()=>{})};document.readyState==="loading"?document.addEventListener("DOMContentLoaded",G):G()})();
+//# sourceMappingURL=content.js.map

package/assets/vault-extension/manifest.json

@@ -0,0 +1,39 @@
+{
+  "manifest_version": 3,
+  "name": "+Ai Vault",
+  "short_name": "+Ai Vault",
+  "version": "0.1.0",
+  "description": "Autofill credentials from your +Ai Vault.",
+  "icons": {
+    "16": "icons/icon-16.png",
+    "32": "icons/icon-32.png",
+    "48": "icons/icon-48.png",
+    "128": "icons/icon-128.png"
+  },
+  "permissions": ["cookies", "storage", "activeTab", "scripting", "tabs"],
+  "host_permissions": ["https://*.add.ai/*", "<all_urls>"],
+  "background": {
+    "service_worker": "background.js",
+    "type": "module"
+  },
+  "content_scripts": [
+    {
+      "matches": ["<all_urls>"],
+      "js": ["content.js"],
+      "run_at": "document_idle",
+      "all_frames": false
+    }
+  ],
+  "action": {
+    "default_icon": {
+      "16": "icons/icon-16.png",
+      "32": "icons/icon-32.png"
+    }
+  },
+  "web_accessible_resources": [
+    {
+      "resources": ["assets/*"],
+      "matches": ["<all_urls>"]
+    }
+  ]
+}

package/dist/capabilities.js

@@ -393,7 +393,8 @@ async function probeFlows() {
     let sandbox = {
         kind: 'not-loaded',
         isolated: false,
-        note: 'The engine loads when flows are switched on for this machine.',
+        note: 'Loads on the first run this machine takes — until then there is '
+            + 'nothing to report.',
     };
     if ((0, engine_loader_1.engineLoaded)()) {
         try {

package/dist/command-runner.js

@@ -66,6 +66,10 @@ const manager_1 = require("./desktop/manager");
 const creds_1 = require("./desktop/creds");
 const install_engine_1 = require("./desktop/install-engine");
 const engine_1 = require("./desktop/engine");
+const session_1 = require("./desktop/learn/session");
+const browser_1 = require("./desktop/learn/browser");
+const vault_extension_1 = require("./desktop/vault-extension");
+const vault_session_1 = require("./desktop/vault-session");
 const COMMAND_TIMEOUT_MS = 10 * 60 * 1000;
 /** Own version, read the same way index.ts does. Resolved here rather than
  *  imported from index.ts, which already imports this module. */
@@ -577,8 +581,70 @@ async function runSetAutostart(cmd) {
 const DESKTOP_KINDS = [
     'desktop_create', 'desktop_start', 'desktop_stop',
     'desktop_delete', 'desktop_rebuild', 'desktop_sync_logins',
-    'desktop_exec',
+    'desktop_exec', 'desktop_record_start', 'desktop_record_stop',
 ];
+/** A desktop's browser has to be started with a debugging port for +Ai Learn
+ *  to see which control was clicked, and with the vault extension loaded for
+ *  logins to be fillable — both are read only at launch. Applying the wrapper
+ *  whenever a desktop comes up means the fleet acquires them without anyone
+ *  doing anything, and a rebuild cannot lose them. */
+async function armBrowserForLearning(provider, row, onLog) {
+    try {
+        const { confDir } = (0, manager_1.ensureDirs)(row.id);
+        // The extension is staged first: the wrapper's --load-extension has to
+        // point at something that is already on disk, or the browser starts once
+        // without it and nobody knows why.
+        const vault = (0, vault_extension_1.ensureVaultExtension)(confDir);
+        if (vault.available)
+            await signDesktopIn(row, confDir, onLog);
+        const res = await (0, browser_1.ensureBrowserWrapper)(async (cmd) => {
+            const r = await (0, creds_1.execInDesktopCapture)(provider, row, cmd, 20_000);
+            return { ok: r.exitCode === 0, out: r.stdout.toString('utf8') };
+        }, confDir, vault.available ? vault_extension_1.EXTENSION_DIR : null);
+        if (res.changed) {
+            onLog(vault.available
+                ? 'browser set up so lessons can watch it, with the +Ai Vault loaded\n'
+                : 'browser set up so lessons can watch it\n');
+        }
+        if (res.note)
+            onLog(`${res.note}\n`);
+    }
+    catch (err) {
+        // Never fatal. A desktop that works but cannot be taught is much better
+        // than a create that fails over an optional feature.
+        onLog(`could not prepare the browser for lessons: ${err.message}\n`);
+    }
+}
+/** Leave a live add.ai session where the desktop's browser will find it.
+ *
+ *  An installed vault with nobody signed in is an empty vault, and "empty"
+ *  reads as broken. This is best-effort by design: a desktop whose entity has
+ *  browser login switched off, or which two entities share with no default,
+ *  gets a working browser and no session rather than a failed start. */
+async function signDesktopIn(row, confDir, onLog) {
+    try {
+        const t = token();
+        if (!t)
+            return;
+        const res = await (0, vault_session_1.ensureVaultSession)(confDir, (desktopId, rotate) => (0, supabase_client_1.rpc)('runtime_desktop_login', { p_token: t, p_desktop_id: desktopId, p_rotate: rotate }), row.id);
+        if (res.session) {
+            onLog(res.rotated
+                ? `signed the browser in as ${res.session.entity_name ?? 'the entity'}\n`
+                : 'the browser\u2019s vault session is still good\n');
+            return;
+        }
+        // Said out loud, because every one of these is a thing somebody can fix.
+        const why = {
+            no_entity_assigned: 'no entity is assigned to this desktop',
+            shared_desktop_no_default: 'more than one entity works here and none is the default, so the vault stays signed out',
+            browser_login_disabled: 'browser login is switched off for this entity',
+        };
+        onLog(`the vault is installed but signed out: ${why[res.reason ?? ''] ?? res.reason}\n`);
+    }
+    catch (err) {
+        onLog(`could not sign the browser in: ${err.message}\n`);
+    }
+}
 /** Setup scripts run as a FILE, never as a `sh -c` string: a script with
  *  quotes or newlines must not need escaping to survive. */
 async function runSetupScript(provider, row, onLog) {
@@ -641,6 +707,7 @@ async function runDesktopCommand(cmd) {
                     vnc_password: vncPassword,
                 });
                 await (0, creds_1.syncCredentials)(provider, built, onLog);
+                await armBrowserForLearning(provider, built, onLog);
                 if (row.setup_script) {
                     onLog('running setup script\n');
                     try {
@@ -666,6 +733,35 @@ async function runDesktopCommand(cmd) {
                 await (0, manager_1.setStatus)(row.id, { status: 'starting' });
                 await provider.start(row);
                 await (0, manager_1.setStatus)(row.id, { status: 'running', status_message: null });
+                await armBrowserForLearning(provider, row, onLog);
+                break;
+            }
+            case 'desktop_record_start': {
+                const recordingId = String(cmd.input?.recording_id ?? '');
+                if (!recordingId)
+                    throw new Error('no recording on command');
+                const t = token();
+                const res = await (0, session_1.startLesson)({
+                    provider, row, recordingId, onLog,
+                    send: async (events) => {
+                        if (!t)
+                            return null;
+                        return await (0, supabase_client_1.rpc)('desktop_recording_page_events', { p_token: t, p_recording_id: recordingId, p_events: events });
+                    },
+                });
+                onLog(res.browserTrack
+                    ? 'watching this desktop\'s browser\n'
+                    : `${res.note ?? 'the browser could not be watched'}\n`);
+                // The command completes immediately: the recorder outlives it, and the
+                // stop command is what ends it. A command left running for the length
+                // of a lesson would look like a hang and would block the queue.
+                break;
+            }
+            case 'desktop_record_stop': {
+                const recordingId = String(cmd.input?.recording_id ?? '');
+                if (recordingId)
+                    await (0, session_1.stopLesson)(recordingId);
+                onLog('stopped watching\n');
                 break;
             }
             case 'desktop_stop':
@@ -829,7 +925,18 @@ async function runInstallEngine(cmd) {
             }
             return;
         }
-        const engine = await (0, docker_1.getProvider)(true);
+        let engine = await (0, docker_1.getProvider)(true);
+        // The mac installer lays the app down and stops — nothing is running yet.
+        // Opening it is the rest of the same job, not a second errand for someone
+        // who pressed one button, so finish it here rather than reporting a
+        // half-done install as a failure.
+        if (!engine && process.platform === 'darwin') {
+            onLog('\nDocker Desktop installs closed. Opening it…\n');
+            if (await (0, start_engine_1.startEngine)(onLog, async () => null)) {
+                (0, docker_1.resetProviderCache)();
+                engine = await (0, docker_1.getProvider)(true);
+            }
+        }
         if (!engine) {
             await update(cmd.id, 'failed', { log }, 'Installed, but no engine is answering yet. On macOS, Docker Desktop has to be opened once before its daemon runs.');
             return;

package/dist/desktop/docker.d.ts

@@ -3,7 +3,10 @@ import { DesktopProvider, EngineInfo, CreateOpts } from './provider';
 export declare class CliProvider implements DesktopProvider {
     readonly id: 'docker' | 'podman';
     private version;
-    constructor(id: 'docker' | 'podman', version: string);
+    private binary;
+    /** `binary` defaults to the bare name for callers (and tests) that have no
+     *  resolved path — on a machine where PATH is enough, they are the same. */
+    constructor(id: 'docker' | 'podman', version: string, binary?: string);
     private run;
     probe(): Promise<EngineInfo | null>;
     create(row: DesktopRow, opts: CreateOpts, onLog: (c: string) => void): Promise<string>;

package/dist/desktop/docker.js

@@ -12,15 +12,19 @@ const engine_1 = require("./engine");
 class CliProvider {
     id;
     version;
-    constructor(id, version) {
+    binary;
+    /** `binary` defaults to the bare name for callers (and tests) that have no
+     *  resolved path — on a machine where PATH is enough, they are the same. */
+    constructor(id, version, binary = id) {
         this.id = id;
         this.version = version;
+        this.binary = binary;
     }
     run(args, onLog, timeoutMs = 15 * 60_000) {
         return new Promise(resolve => {
             let stdout = '', stderr = '';
             try {
-                const inv = (0, win_1.resolveCliInvocation)(this.id, args);
+                const inv = (0, win_1.resolveCliInvocation)(this.binary, args);
                 const child = (0, child_process_1.spawn)(inv.file, inv.args, {
                     env: process.env, windowsHide: true, timeout: timeoutMs,
                 });
@@ -96,7 +100,7 @@ async function getProvider(force = false) {
     // An engine whose daemon is not answering is not a provider: every call
     // through it would fail at the socket. Studio reports the reason from the
     // capability probe instead.
-    cached = info?.running ? new CliProvider(info.id, info.version) : null;
+    cached = info?.running ? new CliProvider(info.id, info.version, info.binary ?? info.id) : null;
     return cached;
 }
 function resetProviderCache() { cached = undefined; }

package/dist/desktop/engine.d.ts

@@ -1,5 +1,18 @@
 import { EngineInfo } from './provider';
 export declare function parseEngineVersion(stdout: string): string | null;
+/**
+ * Where an engine's CLI actually is.
+ *
+ * Docker Desktop puts `docker` in /usr/local/bin, and Homebrew's podman in
+ * its own prefix — neither is on the PATH of a daemon launchd started, which
+ * hands a job `PATH=/usr/bin:/bin:/usr/sbin:/sbin`. Probing the bare name
+ * there reports "no container engine" on a machine that has one, and the
+ * Desktops tab goes dark for a reason nobody can see. Look properly.
+ *
+ * Windows keeps its own resolution (`where`, then the npm shim candidates)
+ * inside findCliBinary, so this is one call for both.
+ */
+export declare function engineBinary(id: 'docker' | 'podman'): string | null;
 /** Why an installed engine still cannot run anything. The three causes are
  *  worth telling apart, because the fix for each is different and none of
  *  them is "install Docker". */

package/dist/desktop/engine.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseEngineVersion = parseEngineVersion;
+exports.engineBinary = engineBinary;
 exports.explainUnreachable = explainUnreachable;
 exports.detectEngine = detectEngine;
 // Which container engine is on this machine? Docker first (the verified
@@ -13,6 +14,33 @@ function parseEngineVersion(stdout) {
     const m = /version\s+v?(\d+\.\d+\.\d+)/i.exec(stdout);
     return m ? m[1] : null;
 }
+/**
+ * Where an engine's CLI actually is.
+ *
+ * Docker Desktop puts `docker` in /usr/local/bin, and Homebrew's podman in
+ * its own prefix — neither is on the PATH of a daemon launchd started, which
+ * hands a job `PATH=/usr/bin:/bin:/usr/sbin:/sbin`. Probing the bare name
+ * there reports "no container engine" on a machine that has one, and the
+ * Desktops tab goes dark for a reason nobody can see. Look properly.
+ *
+ * Windows keeps its own resolution (`where`, then the npm shim candidates)
+ * inside findCliBinary, so this is one call for both.
+ */
+function engineBinary(id) {
+    return (0, win_1.findCliBinary)(id, {
+        posixCandidates: [
+            `/usr/local/bin/${id}`,
+            `/opt/homebrew/bin/${id}`,
+            `/usr/bin/${id}`,
+            // Docker Desktop ships its own copy and only symlinks it into
+            // /usr/local/bin when the user lets it — this one is always there.
+            ...(id === 'docker' ? ['/Applications/Docker.app/Contents/Resources/bin/docker'] : []),
+        ],
+        win32Candidates: id === 'docker'
+            ? ['C:\\Program Files\\Docker\\Docker\\resources\\bin\\docker.exe']
+            : [],
+    });
+}
 /** Run a command and hand back exit code + output. */
 function run(binary, args) {
     return new Promise(resolve => {
@@ -58,16 +86,19 @@ function explainUnreachable(output, platform) {
  */
 async function detectEngine() {
     for (const id of ['docker', 'podman']) {
-        const v = await run(id, ['--version']);
+        const bin = engineBinary(id);
+        if (!bin)
+            continue;
+        const v = await run(bin, ['--version']);
         if (!v.ok)
             continue;
         const version = parseEngineVersion(v.out);
         if (!version)
             continue;
-        const info = await run(id, ['info', '--format', '{{.ServerVersion}}']);
+        const info = await run(bin, ['info', '--format', '{{.ServerVersion}}']);
         if (info.ok)
-            return { id, version, running: true };
-        return { id, version, running: false, reason: explainUnreachable(info.out, process.platform) };
+            return { id, version, running: true, binary: bin };
+        return { id, version, running: false, binary: bin, reason: explainUnreachable(info.out, process.platform) };
     }
     return null;
 }

package/dist/desktop/install-engine.d.ts

@@ -6,8 +6,39 @@ export interface InstallPlan {
     manual: string;
     needsRoot: boolean;
 }
-/** Pure, so the choice is testable on any machine. */
-export declare function installPlan(platform: NodeJS.Platform, isRoot: boolean): InstallPlan;
+/**
+ * Where Homebrew actually lives.
+ *
+ * `brew` is not on the PATH of a daemon that did not come from a login shell —
+ * launchd hands a job `PATH=/usr/bin:/bin:/usr/sbin:/sbin`, and neither
+ * Homebrew prefix is in it. Spawning the bare name then fails ENOENT and the
+ * install reports "brew is not available here" on a machine that has brew,
+ * which is a lie the user cannot act on. Look where it really is instead.
+ */
+export declare function findBrew(platform?: NodeJS.Platform): string | null;
+/**
+ * Install Docker Desktop from Docker's own disk image.
+ *
+ * The path for a Mac with no Homebrew — which is most Macs. This is the same
+ * download the `docker` cask fetches, driven by the installer Docker ships
+ * inside the app, so it is the vendor's supported unattended install rather
+ * than something we invented.
+ *
+ * Root is needed for one step: putting the app in /Applications and laying
+ * down its privileged helper. `--user` is what stops that cost being paid
+ * twice — without it, the first launch stops at an admin prompt on a machine
+ * nobody is sitting at.
+ */
+export declare function macDmgScript(user: string): string;
+/** The current login name, for the `--user` the Docker installer wants. Never
+ *  root: under `sudo` that would hand the app to the wrong account. */
+export declare function installingUser(env?: NodeJS.ProcessEnv): string;
+/**
+ * Pure, so the choice is testable on any machine — the two impure lookups
+ * (is brew here, who are we) are parameters with defaults rather than calls
+ * inside the body.
+ */
+export declare function installPlan(platform: NodeJS.Platform, isRoot: boolean, brew?: string | null, user?: string): InstallPlan;
 /** Docker is there but this user cannot reach its socket. The fix is group
  *  membership, not another install — and it needs root, so it takes the same
  *  password round trip. */