@arbidocs/blocks 0.5.126 → 0.5.127

package/dist/connect/viewer.cjs

@@ -1,7 +1,7 @@
 "use client";
 'use strict';
 
-var chunkFB3JXSQT_cjs = require('../chunk-FB3JXSQT.cjs');
+var chunkJVLOIIA7_cjs = require('../chunk-JVLOIIA7.cjs');
 require('../chunk-JITYC4OS.cjs');
 require('../chunk-WVZLAAIZ.cjs');
 require('../chunk-X7ALF4MP.cjs');
@@ -17,7 +17,7 @@ require('../chunk-HYUKPHCT.cjs');
 require('../chunk-ALK3PUUB.cjs');
 require('../chunk-223D4727.cjs');
 require('../chunk-SNUBQMIS.cjs');
-require('../chunk-LOB2ATS5.cjs');
+require('../chunk-VLQCLQAS.cjs');
 require('../chunk-4ONPEVTP.cjs');
 require('../chunk-V3KLUWQQ.cjs');
 require('../chunk-P5AQYC4D.cjs');
@@ -30,7 +30,7 @@ require('../chunk-DTMBAFIL.cjs');
 require('../chunk-ZESMRGDV.cjs');
 require('../chunk-VCEX7COE.cjs');
 require('../chunk-34HQO4ZQ.cjs');
-require('../chunk-KA3F6TIH.cjs');
+require('../chunk-IWHP7FAB.cjs');
 require('../chunk-K4763GD5.cjs');
 require('../chunk-2RLA6QO2.cjs');
 require('../chunk-MZZ3SBQL.cjs');
@@ -43,7 +43,7 @@ require('../chunk-SK6HQ46Q.cjs');
 require('../chunk-MNIQDXM6.cjs');
 require('../chunk-E3Y7RI3J.cjs');
 require('../chunk-TG2GM7WJ.cjs');
-require('../chunk-CMPHJRVV.cjs');
+require('../chunk-ZYGAXD3N.cjs');
 require('../chunk-OEJQFPWO.cjs');
 require('../chunk-OYXWQTHF.cjs');
 require('../chunk-S237ORM3.cjs');
@@ -63,12 +63,12 @@ require('../chunk-VG24E4JJ.cjs');
 require('../chunk-U2FFG2B3.cjs');
 require('../chunk-KKYNTWDU.cjs');
 require('../chunk-M74FWYNL.cjs');
+require('../chunk-VZOOGA47.cjs');
 require('../chunk-HQDR43JC.cjs');
 require('../chunk-JR2YSBD5.cjs');
 require('../chunk-3YZKDCWY.cjs');
 require('../chunk-SJSGSHIT.cjs');
 require('../chunk-ZW6FPIFC.cjs');
-require('../chunk-VZOOGA47.cjs');
 require('../chunk-CT3SLXB7.cjs');
 require('../chunk-DEXUL3T6.cjs');
 require('../chunk-AFQTQC7A.cjs');
@@ -94,7 +94,7 @@ require('../chunk-PLIF5CUV.cjs');
 
 Object.defineProperty(exports, "ConnectedDocumentViewer", {
   enumerable: true,
-  get: function () { return chunkFB3JXSQT_cjs.ConnectedDocumentViewer; }
+  get: function () { return chunkJVLOIIA7_cjs.ConnectedDocumentViewer; }
 });
 Object.defineProperty(exports, "ConnectedDocumentToolsProvider", {
   enumerable: true,

package/dist/connection/remote-control/ConnectedRemoteControlConsent.js

@@ -18,6 +18,8 @@ import { useGuidedRuns } from "../../guided/useGuidedRuns.js";
 import { useRemoteControlActions } from "./remoteControl.js";
 function RunPlan({ request }) {
   const { sequences } = useGuidedRuns();
+  if (request.screenRequestId)
+    return /* @__PURE__ */ jsx("p", { "data-testid": "remote-control-consent-plan", children: request.screenQuestion });
   const steps = request.steps ?? [];
   if (steps.length === 0) {
     const label = request.sequenceId ? sequences[request.sequenceId]?.label : void 0;
@@ -75,7 +77,7 @@ function ConsentPrompt() {
             /* @__PURE__ */ jsxs("span", { children: [
               /* @__PURE__ */ jsx("span", { className: "font-semibold", "data-testid": "remote-control-consent-agent-name", children: pending.agentName }),
               " ",
-              "wants to control your screen"
+              pending.screenRequestId ? "wants to view and control your screen" : "wants to control your screen"
             ] })
           ] }),
           /* @__PURE__ */ jsxs(DialogDescription, { className: "sr-only", children: [
@@ -86,6 +88,7 @@ function ConsentPrompt() {
         /* @__PURE__ */ jsxs(ModalSection, { className: "space-y-3 text-sm text-muted-foreground", children: [
           /* @__PURE__ */ jsx("p", { children: "Remote control lets this assistant click and type in the app on your behalf \u2014 you'll see the cursor move and click as it works." }),
           /* @__PURE__ */ jsx("p", { children: "You can turn it off at any time, and it is off by default at the start of every session." }),
+          pending.screenRequestId && /* @__PURE__ */ jsx("p", { children: "Choose a tab or window to share. While sharing, the assistant can inspect fresh images, recent ARBI console errors and failed requests, and click or type inside ARBI. Stop sharing ends viewing and control together. No audio or recording is captured." }),
           /* @__PURE__ */ jsx(RunPlan, { request: pending }),
           pending.agentExtId && /* @__PURE__ */ jsxs("p", { className: "text-xs", children: [
             "Requesting agent:",
@@ -107,7 +110,7 @@ function ConsentPrompt() {
               className: "w-full",
               onClick: () => remote.grantAndRun({ forSession: true }),
               "data-testid": "remote-control-consent-allow-session",
-              children: "Allow for this session"
+              children: pending.screenRequestId ? "Start sharing" : "Allow for this session"
             }
           ),
           /* @__PURE__ */ jsx(
@@ -118,7 +121,7 @@ function ConsentPrompt() {
               className: "w-full",
               onClick: () => remote.grantAndRun({ forSession: false }),
               "data-testid": "remote-control-consent-allow-once",
-              children: "Just this once"
+              children: pending.screenRequestId ? "Share one image" : "Just this once"
             }
           ),
           /* @__PURE__ */ jsx(

package/dist/connection/remote-control/ConnectedRemoteControlConsent.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/connection/remote-control/ConnectedRemoteControlConsent.tsx"],
-  "sourcesContent": ["/**\n * ConnectedRemoteControlConsent \u2014 the consent gate for backend-driven remote control.\n *\n * Opens whenever an `agt-\u2026` agent has requested to drive the UI over the websocket and remote\n * control is not already enabled this session (the request sits in the session's remote-control\n * `pending`). It names the requesting agent explicitly (GUARANTEE #3) so the user knows which of\n * their assistants is asking, and offers three choices:\n *  - Allow for this session (primary) \u2014 enables it until the session ends.\n *  - Just this once \u2014 runs the one requested action, stays off afterwards.\n *  - Deny (cancel) \u2014 runs nothing.\n * It says what will run (the run's name, or the inline steps' notes and targets), and opens on\n * \"Just this once\", so Enter never grants the whole session. Nothing shows while the site has not\n * turned remote control on (`guided.remoteControl`).\n *\n * Mounted once by `ConnectedAppRuntime`. Its state lives in the session, so no props.\n */\n\nimport {\n  Dialog,\n  DialogContent,\n  DialogDescription,\n  DialogFooter,\n  DialogHeader,\n  DialogTitle,\n  Button,\n} from '@arbidocs/react/ui'\nimport { useRef } from 'react'\nimport { useRemoteControl, type RemoteControlRequest } from '@arbidocs/react'\nimport { MousePointerClick } from 'lucide-react'\nimport { ModalSection } from '../../settings/ModalScaffold'\nimport { REMOTE_CONTROL_SURFACE, useMountedSurface } from '../../guided/surfaces'\nimport { useGuidedRuns } from '../../guided/useGuidedRuns'\nimport { useRemoteControlActions } from './remoteControl'\n\n/** What the request will run: the registered run's name, or its inline steps. */\nfunction RunPlan({ request }: { request: RemoteControlRequest }) {\n  const { sequences } = useGuidedRuns()\n  const steps = request.steps ?? []\n  if (steps.length === 0) {\n    const label = request.sequenceId ? sequences[request.sequenceId]?.label : undefined\n    return (\n      <p data-testid=\"remote-control-consent-plan\">\n        It will run:{' '}\n        <span className=\"font-medium text-foreground\">{label ?? request.sequenceId}</span>\n      </p>\n    )\n  }\n  // Every step, however many (the list scrolls): nothing runs that the user was not shown.\n  return (\n    <div data-testid=\"remote-control-consent-plan\">\n      <p>\n        It will ({steps.length} {steps.length === 1 ? 'step' : 'steps'}):\n      </p>\n      <ol className=\"mt-1 max-h-40 list-decimal space-y-0.5 overflow-y-auto pl-5 text-xs\">\n        {steps.map((step, i) => (\n          <li key={i}>\n            {step.do === 'type' ? 'Type into' : 'Click'}{' '}\n            <span className=\"break-all font-mono text-foreground\">{step.target}</span>\n            {step.note ? <> \u2014 {step.note}</> : null}\n          </li>\n        ))}\n      </ol>\n    </div>\n  )\n}\n\nexport function ConnectedRemoteControlConsent(): React.ReactElement | null {\n  return useGuidedRuns().remoteControl ? <ConsentPrompt /> : null\n}\n\nfunction ConsentPrompt(): React.ReactElement | null {\n  const pending = useRemoteControl((s) => s.pending)\n  const remote = useRemoteControlActions()\n  const onceRef = useRef<HTMLButtonElement>(null)\n  // A remote request is refused while no prompt is on screen to ask.\n  useMountedSurface('consent')\n\n  // Closing the dialog by any means (Escape, overlay, X) is a denial.\n  const handleOpenChange = (next: boolean): void => {\n    if (!next) remote.deny()\n  }\n\n  if (!pending) return null\n\n  return (\n    <Dialog open={pending !== null} onOpenChange={handleOpenChange}>\n      <DialogContent\n        className=\"sm:max-w-md\"\n        data-testid=\"remote-control-consent-modal\"\n        {...{ [REMOTE_CONTROL_SURFACE]: '' }}\n        // The safest choice has the focus: Enter runs it once, never grants the session.\n        onOpenAutoFocus={(event) => {\n          event.preventDefault()\n          onceRef.current?.focus()\n        }}\n      >\n        <DialogHeader>\n          <DialogTitle className=\"flex items-center gap-2\">\n            <MousePointerClick className=\"h-5 w-5 text-primary\" />\n            <span>\n              <span className=\"font-semibold\" data-testid=\"remote-control-consent-agent-name\">\n                {pending.agentName}\n              </span>{' '}\n              wants to control your screen\n            </span>\n          </DialogTitle>\n          <DialogDescription className=\"sr-only\">\n            {pending.agentName} is requesting permission to click and type in the app on your\n            behalf. Choose whether to allow it for this session, just this once, or deny.\n          </DialogDescription>\n        </DialogHeader>\n\n        <ModalSection className=\"space-y-3 text-sm text-muted-foreground\">\n          <p>\n            Remote control lets this assistant click and type in the app on your behalf \u2014\n            you&apos;ll see the cursor move and click as it works.\n          </p>\n          <p>\n            You can turn it off at any time, and it is off by default at the start of every session.\n          </p>\n          <RunPlan request={pending} />\n          {pending.agentExtId && (\n            <p className=\"text-xs\">\n              Requesting agent:{' '}\n              <span\n                className=\"font-mono text-foreground\"\n                data-testid=\"remote-control-consent-agent-id\"\n              >\n                {pending.agentExtId}\n              </span>\n            </p>\n          )}\n        </ModalSection>\n\n        <DialogFooter className=\"flex-col gap-2 sm:flex-col sm:space-x-0\">\n          <Button\n            className=\"w-full\"\n            onClick={() => remote.grantAndRun({ forSession: true })}\n            data-testid=\"remote-control-consent-allow-session\"\n          >\n            Allow for this session\n          </Button>\n          <Button\n            ref={onceRef}\n            variant=\"outline\"\n            className=\"w-full\"\n            onClick={() => remote.grantAndRun({ forSession: false })}\n            data-testid=\"remote-control-consent-allow-once\"\n          >\n            Just this once\n          </Button>\n          <Button\n            variant=\"ghost\"\n            className=\"w-full\"\n            onClick={() => remote.deny()}\n            data-testid=\"remote-control-consent-deny\"\n          >\n            Deny\n          </Button>\n        </DialogFooter>\n      </DialogContent>\n    </Dialog>\n  )\n}\n"],
-  "mappings": ";AAyCM,SAiBmB,UAfjB,KAFF;AAxBN;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,wBAAmD;AAC5D,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB,yBAAyB;AAC1D,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AAGxC,SAAS,QAAQ,EAAE,QAAQ,GAAsC;AAC/D,QAAM,EAAE,UAAU,IAAI,cAAc;AACpC,QAAM,QAAQ,QAAQ,SAAS,CAAC;AAChC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,QAAQ,QAAQ,aAAa,UAAU,QAAQ,UAAU,GAAG,QAAQ;AAC1E,WACE,qBAAC,OAAE,eAAY,+BAA8B;AAAA;AAAA,MAC9B;AAAA,MACb,oBAAC,UAAK,WAAU,+BAA+B,mBAAS,QAAQ,YAAW;AAAA,OAC7E;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,eAAY,+BACf;AAAA,yBAAC,OAAE;AAAA;AAAA,MACS,MAAM;AAAA,MAAO;AAAA,MAAE,MAAM,WAAW,IAAI,SAAS;AAAA,MAAQ;AAAA,OACjE;AAAA,IACA,oBAAC,QAAG,WAAU,uEACX,gBAAM,IAAI,CAAC,MAAM,MAChB,qBAAC,QACE;AAAA,WAAK,OAAO,SAAS,cAAc;AAAA,MAAS;AAAA,MAC7C,oBAAC,UAAK,WAAU,uCAAuC,eAAK,QAAO;AAAA,MAClE,KAAK,OAAO,iCAAE;AAAA;AAAA,QAAI,KAAK;AAAA,SAAK,IAAM;AAAA,SAH5B,CAIT,CACD,GACH;AAAA,KACF;AAEJ;AAEO,SAAS,gCAA2D;AACzE,SAAO,cAAc,EAAE,gBAAgB,oBAAC,iBAAc,IAAK;AAC7D;AAEA,SAAS,gBAA2C;AAClD,QAAM,UAAU,iBAAiB,CAAC,MAAM,EAAE,OAAO;AACjD,QAAM,SAAS,wBAAwB;AACvC,QAAM,UAAU,OAA0B,IAAI;AAE9C,oBAAkB,SAAS;AAG3B,QAAM,mBAAmB,CAAC,SAAwB;AAChD,QAAI,CAAC,KAAM,QAAO,KAAK;AAAA,EACzB;AAEA,MAAI,CAAC,QAAS,QAAO;AAErB,SACE,oBAAC,UAAO,MAAM,YAAY,MAAM,cAAc,kBAC5C;AAAA,IAAC;AAAA;AAAA,MACC,WAAU;AAAA,MACV,eAAY;AAAA,MACX,GAAG,EAAE,CAAC,sBAAsB,GAAG,GAAG;AAAA,MAEnC,iBAAiB,CAAC,UAAU;AAC1B,cAAM,eAAe;AACrB,gBAAQ,SAAS,MAAM;AAAA,MACzB;AAAA,MAEA;AAAA,6BAAC,gBACC;AAAA,+BAAC,eAAY,WAAU,2BACrB;AAAA,gCAAC,qBAAkB,WAAU,wBAAuB;AAAA,YACpD,qBAAC,UACC;AAAA,kCAAC,UAAK,WAAU,iBAAgB,eAAY,qCACzC,kBAAQ,WACX;AAAA,cAAQ;AAAA,cAAI;AAAA,eAEd;AAAA,aACF;AAAA,UACA,qBAAC,qBAAkB,WAAU,WAC1B;AAAA,oBAAQ;AAAA,YAAU;AAAA,aAErB;AAAA,WACF;AAAA,QAEA,qBAAC,gBAAa,WAAU,2CACtB;AAAA,8BAAC,OAAE,kJAGH;AAAA,UACA,oBAAC,OAAE,sGAEH;AAAA,UACA,oBAAC,WAAQ,SAAS,SAAS;AAAA,UAC1B,QAAQ,cACP,qBAAC,OAAE,WAAU,WAAU;AAAA;AAAA,YACH;AAAA,YAClB;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,eAAY;AAAA,gBAEX,kBAAQ;AAAA;AAAA,YACX;AAAA,aACF;AAAA,WAEJ;AAAA,QAEA,qBAAC,gBAAa,WAAU,2CACtB;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,WAAU;AAAA,cACV,SAAS,MAAM,OAAO,YAAY,EAAE,YAAY,KAAK,CAAC;AAAA,cACtD,eAAY;AAAA,cACb;AAAA;AAAA,UAED;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,KAAK;AAAA,cACL,SAAQ;AAAA,cACR,WAAU;AAAA,cACV,SAAS,MAAM,OAAO,YAAY,EAAE,YAAY,MAAM,CAAC;AAAA,cACvD,eAAY;AAAA,cACb;AAAA;AAAA,UAED;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,WAAU;AAAA,cACV,SAAS,MAAM,OAAO,KAAK;AAAA,cAC3B,eAAY;AAAA,cACb;AAAA;AAAA,UAED;AAAA,WACF;AAAA;AAAA;AAAA,EACF,GACF;AAEJ;",
+  "sourcesContent": ["/**\n * ConnectedRemoteControlConsent \u2014 the consent gate for backend-driven remote control.\n *\n * Opens whenever an `agt-\u2026` agent has requested to drive the UI over the websocket and remote\n * control is not already enabled this session (the request sits in the session's remote-control\n * `pending`). It names the requesting agent explicitly (GUARANTEE #3) so the user knows which of\n * their assistants is asking, and offers three choices:\n *  - Allow for this session (primary) \u2014 enables it until the session ends.\n *  - Just this once \u2014 runs the one requested action, stays off afterwards.\n *  - Deny (cancel) \u2014 runs nothing.\n * It says what will run (the run's name, or the inline steps' notes and targets), and opens on\n * \"Just this once\", so Enter never grants the whole session. Nothing shows while the site has not\n * turned remote control on (`guided.remoteControl`).\n *\n * Mounted once by `ConnectedAppRuntime`. Its state lives in the session, so no props.\n */\n\nimport {\n  Dialog,\n  DialogContent,\n  DialogDescription,\n  DialogFooter,\n  DialogHeader,\n  DialogTitle,\n  Button,\n} from '@arbidocs/react/ui'\nimport { useRef } from 'react'\nimport { useRemoteControl, type RemoteControlRequest } from '@arbidocs/react'\nimport { MousePointerClick } from 'lucide-react'\nimport { ModalSection } from '../../settings/ModalScaffold'\nimport { REMOTE_CONTROL_SURFACE, useMountedSurface } from '../../guided/surfaces'\nimport { useGuidedRuns } from '../../guided/useGuidedRuns'\nimport { useRemoteControlActions } from './remoteControl'\n\n/** What the request will run: the registered run's name, or its inline steps. */\nfunction RunPlan({ request }: { request: RemoteControlRequest }) {\n  const { sequences } = useGuidedRuns()\n  if (request.screenRequestId)\n    return <p data-testid=\"remote-control-consent-plan\">{request.screenQuestion}</p>\n  const steps = request.steps ?? []\n  if (steps.length === 0) {\n    const label = request.sequenceId ? sequences[request.sequenceId]?.label : undefined\n    return (\n      <p data-testid=\"remote-control-consent-plan\">\n        It will run:{' '}\n        <span className=\"font-medium text-foreground\">{label ?? request.sequenceId}</span>\n      </p>\n    )\n  }\n  // Every step, however many (the list scrolls): nothing runs that the user was not shown.\n  return (\n    <div data-testid=\"remote-control-consent-plan\">\n      <p>\n        It will ({steps.length} {steps.length === 1 ? 'step' : 'steps'}):\n      </p>\n      <ol className=\"mt-1 max-h-40 list-decimal space-y-0.5 overflow-y-auto pl-5 text-xs\">\n        {steps.map((step, i) => (\n          <li key={i}>\n            {step.do === 'type' ? 'Type into' : 'Click'}{' '}\n            <span className=\"break-all font-mono text-foreground\">{step.target}</span>\n            {step.note ? <> \u2014 {step.note}</> : null}\n          </li>\n        ))}\n      </ol>\n    </div>\n  )\n}\n\nexport function ConnectedRemoteControlConsent(): React.ReactElement | null {\n  return useGuidedRuns().remoteControl ? <ConsentPrompt /> : null\n}\n\nfunction ConsentPrompt(): React.ReactElement | null {\n  const pending = useRemoteControl((s) => s.pending)\n  const remote = useRemoteControlActions()\n  const onceRef = useRef<HTMLButtonElement>(null)\n  // A remote request is refused while no prompt is on screen to ask.\n  useMountedSurface('consent')\n\n  // Closing the dialog by any means (Escape, overlay, X) is a denial.\n  const handleOpenChange = (next: boolean): void => {\n    if (!next) remote.deny()\n  }\n\n  if (!pending) return null\n\n  return (\n    <Dialog open={pending !== null} onOpenChange={handleOpenChange}>\n      <DialogContent\n        className=\"sm:max-w-md\"\n        data-testid=\"remote-control-consent-modal\"\n        {...{ [REMOTE_CONTROL_SURFACE]: '' }}\n        // The safest choice has the focus: Enter runs it once, never grants the session.\n        onOpenAutoFocus={(event) => {\n          event.preventDefault()\n          onceRef.current?.focus()\n        }}\n      >\n        <DialogHeader>\n          <DialogTitle className=\"flex items-center gap-2\">\n            <MousePointerClick className=\"h-5 w-5 text-primary\" />\n            <span>\n              <span className=\"font-semibold\" data-testid=\"remote-control-consent-agent-name\">\n                {pending.agentName}\n              </span>{' '}\n              {pending.screenRequestId\n                ? 'wants to view and control your screen'\n                : 'wants to control your screen'}\n            </span>\n          </DialogTitle>\n          <DialogDescription className=\"sr-only\">\n            {pending.agentName} is requesting permission to click and type in the app on your\n            behalf. Choose whether to allow it for this session, just this once, or deny.\n          </DialogDescription>\n        </DialogHeader>\n\n        <ModalSection className=\"space-y-3 text-sm text-muted-foreground\">\n          <p>\n            Remote control lets this assistant click and type in the app on your behalf \u2014\n            you&apos;ll see the cursor move and click as it works.\n          </p>\n          <p>\n            You can turn it off at any time, and it is off by default at the start of every session.\n          </p>\n          {pending.screenRequestId && (\n            <p>\n              Choose a tab or window to share. While sharing, the assistant can inspect fresh\n              images, recent ARBI console errors and failed requests, and click or type inside ARBI.\n              Stop sharing ends viewing and control together. No audio or recording is captured.\n            </p>\n          )}\n          <RunPlan request={pending} />\n          {pending.agentExtId && (\n            <p className=\"text-xs\">\n              Requesting agent:{' '}\n              <span\n                className=\"font-mono text-foreground\"\n                data-testid=\"remote-control-consent-agent-id\"\n              >\n                {pending.agentExtId}\n              </span>\n            </p>\n          )}\n        </ModalSection>\n\n        <DialogFooter className=\"flex-col gap-2 sm:flex-col sm:space-x-0\">\n          <Button\n            className=\"w-full\"\n            onClick={() => remote.grantAndRun({ forSession: true })}\n            data-testid=\"remote-control-consent-allow-session\"\n          >\n            {pending.screenRequestId ? 'Start sharing' : 'Allow for this session'}\n          </Button>\n          <Button\n            ref={onceRef}\n            variant=\"outline\"\n            className=\"w-full\"\n            onClick={() => remote.grantAndRun({ forSession: false })}\n            data-testid=\"remote-control-consent-allow-once\"\n          >\n            {pending.screenRequestId ? 'Share one image' : 'Just this once'}\n          </Button>\n          <Button\n            variant=\"ghost\"\n            className=\"w-full\"\n            onClick={() => remote.deny()}\n            data-testid=\"remote-control-consent-deny\"\n          >\n            Deny\n          </Button>\n        </DialogFooter>\n      </DialogContent>\n    </Dialog>\n  )\n}\n"],
+  "mappings": ";AAsCW,SAsBc,UAtBd,KAKL,YALK;AArBX;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,wBAAmD;AAC5D,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB,yBAAyB;AAC1D,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AAGxC,SAAS,QAAQ,EAAE,QAAQ,GAAsC;AAC/D,QAAM,EAAE,UAAU,IAAI,cAAc;AACpC,MAAI,QAAQ;AACV,WAAO,oBAAC,OAAE,eAAY,+BAA+B,kBAAQ,gBAAe;AAC9E,QAAM,QAAQ,QAAQ,SAAS,CAAC;AAChC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,QAAQ,QAAQ,aAAa,UAAU,QAAQ,UAAU,GAAG,QAAQ;AAC1E,WACE,qBAAC,OAAE,eAAY,+BAA8B;AAAA;AAAA,MAC9B;AAAA,MACb,oBAAC,UAAK,WAAU,+BAA+B,mBAAS,QAAQ,YAAW;AAAA,OAC7E;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,eAAY,+BACf;AAAA,yBAAC,OAAE;AAAA;AAAA,MACS,MAAM;AAAA,MAAO;AAAA,MAAE,MAAM,WAAW,IAAI,SAAS;AAAA,MAAQ;AAAA,OACjE;AAAA,IACA,oBAAC,QAAG,WAAU,uEACX,gBAAM,IAAI,CAAC,MAAM,MAChB,qBAAC,QACE;AAAA,WAAK,OAAO,SAAS,cAAc;AAAA,MAAS;AAAA,MAC7C,oBAAC,UAAK,WAAU,uCAAuC,eAAK,QAAO;AAAA,MAClE,KAAK,OAAO,iCAAE;AAAA;AAAA,QAAI,KAAK;AAAA,SAAK,IAAM;AAAA,SAH5B,CAIT,CACD,GACH;AAAA,KACF;AAEJ;AAEO,SAAS,gCAA2D;AACzE,SAAO,cAAc,EAAE,gBAAgB,oBAAC,iBAAc,IAAK;AAC7D;AAEA,SAAS,gBAA2C;AAClD,QAAM,UAAU,iBAAiB,CAAC,MAAM,EAAE,OAAO;AACjD,QAAM,SAAS,wBAAwB;AACvC,QAAM,UAAU,OAA0B,IAAI;AAE9C,oBAAkB,SAAS;AAG3B,QAAM,mBAAmB,CAAC,SAAwB;AAChD,QAAI,CAAC,KAAM,QAAO,KAAK;AAAA,EACzB;AAEA,MAAI,CAAC,QAAS,QAAO;AAErB,SACE,oBAAC,UAAO,MAAM,YAAY,MAAM,cAAc,kBAC5C;AAAA,IAAC;AAAA;AAAA,MACC,WAAU;AAAA,MACV,eAAY;AAAA,MACX,GAAG,EAAE,CAAC,sBAAsB,GAAG,GAAG;AAAA,MAEnC,iBAAiB,CAAC,UAAU;AAC1B,cAAM,eAAe;AACrB,gBAAQ,SAAS,MAAM;AAAA,MACzB;AAAA,MAEA;AAAA,6BAAC,gBACC;AAAA,+BAAC,eAAY,WAAU,2BACrB;AAAA,gCAAC,qBAAkB,WAAU,wBAAuB;AAAA,YACpD,qBAAC,UACC;AAAA,kCAAC,UAAK,WAAU,iBAAgB,eAAY,qCACzC,kBAAQ,WACX;AAAA,cAAQ;AAAA,cACP,QAAQ,kBACL,0CACA;AAAA,eACN;AAAA,aACF;AAAA,UACA,qBAAC,qBAAkB,WAAU,WAC1B;AAAA,oBAAQ;AAAA,YAAU;AAAA,aAErB;AAAA,WACF;AAAA,QAEA,qBAAC,gBAAa,WAAU,2CACtB;AAAA,8BAAC,OAAE,kJAGH;AAAA,UACA,oBAAC,OAAE,sGAEH;AAAA,UACC,QAAQ,mBACP,oBAAC,OAAE,uQAIH;AAAA,UAEF,oBAAC,WAAQ,SAAS,SAAS;AAAA,UAC1B,QAAQ,cACP,qBAAC,OAAE,WAAU,WAAU;AAAA;AAAA,YACH;AAAA,YAClB;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,eAAY;AAAA,gBAEX,kBAAQ;AAAA;AAAA,YACX;AAAA,aACF;AAAA,WAEJ;AAAA,QAEA,qBAAC,gBAAa,WAAU,2CACtB;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,WAAU;AAAA,cACV,SAAS,MAAM,OAAO,YAAY,EAAE,YAAY,KAAK,CAAC;AAAA,cACtD,eAAY;AAAA,cAEX,kBAAQ,kBAAkB,kBAAkB;AAAA;AAAA,UAC/C;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,KAAK;AAAA,cACL,SAAQ;AAAA,cACR,WAAU;AAAA,cACV,SAAS,MAAM,OAAO,YAAY,EAAE,YAAY,MAAM,CAAC;AAAA,cACvD,eAAY;AAAA,cAEX,kBAAQ,kBAAkB,oBAAoB;AAAA;AAAA,UACjD;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,WAAU;AAAA,cACV,SAAS,MAAM,OAAO,KAAK;AAAA,cAC3B,eAAY;AAAA,cACb;AAAA;AAAA,UAED;AAAA,WACF;AAAA;AAAA;AAAA,EACF,GACF;AAEJ;",
   "names": []
 }

package/dist/connection/remote-control/ConnectedRemoteControlIndicator.js

@@ -9,12 +9,22 @@ function ConnectedRemoteControlIndicator() {
 }
 function Indicator() {
   const enabled = useRemoteControl((s) => s.enabled);
+  const sharing = useRemoteControl((s) => !!s.sharing);
   const controllingAgent = useRemoteControl((s) => s.controllingAgent);
   const remote = useRemoteControlActions();
   if (!enabled && !controllingAgent) return null;
   const isActive = controllingAgent !== null;
-  const label = isActive ? `${controllingAgent.name} is controlling your screen` : "Remote control on";
-  return /* @__PURE__ */ jsx(RemoteControlPill, { isActive, label, onDisable: () => remote.disable() });
+  const label = sharing ? controllingAgent ? `${controllingAgent.name} \xB7 screen sharing and control on` : "Sharing screen \xB7 remote control on" : isActive ? `${controllingAgent.name} is controlling your screen` : "Remote control on";
+  return /* @__PURE__ */ jsx(
+    RemoteControlPill,
+    {
+      isActive: isActive || sharing,
+      label,
+      disableLabel: sharing ? "Stop sharing" : void 0,
+      showDisableLabel: sharing,
+      onDisable: () => remote.disable()
+    }
+  );
 }
 export {
   ConnectedRemoteControlIndicator

package/dist/connection/remote-control/ConnectedRemoteControlIndicator.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/connection/remote-control/ConnectedRemoteControlIndicator.tsx"],
-  "sourcesContent": ["/**\n * ConnectedRemoteControlIndicator: the persistent remote-control pill (`RemoteControlPill`) on the\n * session's state. Shown while remote control is enabled this session (or a run is executing);\n * labels WHO is driving while a websocket-driven run executes, and always offers an immediate\n * disable (GUARANTEE #5). Hidden entirely when remote control is off and no run is active, and\n * while the site has not turned remote control on (`guided.remoteControl`).\n */\n\nimport { useRemoteControl } from '@arbidocs/react'\nimport { RemoteControlPill } from '../../shell/RemoteControlPill'\nimport { useGuidedRuns } from '../../guided/useGuidedRuns'\nimport { useRemoteControlActions } from './remoteControl'\n\nexport function ConnectedRemoteControlIndicator(): React.ReactElement | null {\n  return useGuidedRuns().remoteControl ? <Indicator /> : null\n}\n\nfunction Indicator(): React.ReactElement | null {\n  const enabled = useRemoteControl((s) => s.enabled)\n  const controllingAgent = useRemoteControl((s) => s.controllingAgent)\n  const remote = useRemoteControlActions()\n\n  if (!enabled && !controllingAgent) return null\n\n  const isActive = controllingAgent !== null\n  const label = isActive\n    ? `${controllingAgent.name} is controlling your screen`\n    : 'Remote control on'\n\n  return <RemoteControlPill isActive={isActive} label={label} onDisable={() => remote.disable()} />\n}\n"],
-  "mappings": ";AAcyC;AANzC,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AAEjC,SAAS,kCAA6D;AAC3E,SAAO,cAAc,EAAE,gBAAgB,oBAAC,aAAU,IAAK;AACzD;AAEA,SAAS,YAAuC;AAC9C,QAAM,UAAU,iBAAiB,CAAC,MAAM,EAAE,OAAO;AACjD,QAAM,mBAAmB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB;AACnE,QAAM,SAAS,wBAAwB;AAEvC,MAAI,CAAC,WAAW,CAAC,iBAAkB,QAAO;AAE1C,QAAM,WAAW,qBAAqB;AACtC,QAAM,QAAQ,WACV,GAAG,iBAAiB,IAAI,gCACxB;AAEJ,SAAO,oBAAC,qBAAkB,UAAoB,OAAc,WAAW,MAAM,OAAO,QAAQ,GAAG;AACjG;",
+  "sourcesContent": ["/**\n * ConnectedRemoteControlIndicator: the persistent remote-control pill (`RemoteControlPill`) on the\n * session's state. Shown while remote control is enabled this session (or a run is executing);\n * labels WHO is driving while a websocket-driven run executes, and always offers an immediate\n * disable (GUARANTEE #5). Hidden entirely when remote control is off and no run is active, and\n * while the site has not turned remote control on (`guided.remoteControl`).\n */\n\nimport { useRemoteControl } from '@arbidocs/react'\nimport { RemoteControlPill } from '../../shell/RemoteControlPill'\nimport { useGuidedRuns } from '../../guided/useGuidedRuns'\nimport { useRemoteControlActions } from './remoteControl'\n\nexport function ConnectedRemoteControlIndicator(): React.ReactElement | null {\n  return useGuidedRuns().remoteControl ? <Indicator /> : null\n}\n\nfunction Indicator(): React.ReactElement | null {\n  const enabled = useRemoteControl((s) => s.enabled)\n  const sharing = useRemoteControl((s) => !!s.sharing)\n  const controllingAgent = useRemoteControl((s) => s.controllingAgent)\n  const remote = useRemoteControlActions()\n\n  if (!enabled && !controllingAgent) return null\n\n  const isActive = controllingAgent !== null\n  const label = sharing\n    ? controllingAgent\n      ? `${controllingAgent.name} \u00B7 screen sharing and control on`\n      : 'Sharing screen \u00B7 remote control on'\n    : isActive\n      ? `${controllingAgent.name} is controlling your screen`\n      : 'Remote control on'\n\n  return (\n    <RemoteControlPill\n      isActive={isActive || sharing}\n      label={label}\n      disableLabel={sharing ? 'Stop sharing' : undefined}\n      showDisableLabel={sharing}\n      onDisable={() => remote.disable()}\n    />\n  )\n}\n"],
+  "mappings": ";AAcyC;AANzC,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AAEjC,SAAS,kCAA6D;AAC3E,SAAO,cAAc,EAAE,gBAAgB,oBAAC,aAAU,IAAK;AACzD;AAEA,SAAS,YAAuC;AAC9C,QAAM,UAAU,iBAAiB,CAAC,MAAM,EAAE,OAAO;AACjD,QAAM,UAAU,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO;AACnD,QAAM,mBAAmB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB;AACnE,QAAM,SAAS,wBAAwB;AAEvC,MAAI,CAAC,WAAW,CAAC,iBAAkB,QAAO;AAE1C,QAAM,WAAW,qBAAqB;AACtC,QAAM,QAAQ,UACV,mBACE,GAAG,iBAAiB,IAAI,wCACxB,0CACF,WACE,GAAG,iBAAiB,IAAI,gCACxB;AAEN,SACE;AAAA,IAAC;AAAA;AAAA,MACC,UAAU,YAAY;AAAA,MACtB;AAAA,MACA,cAAc,UAAU,iBAAiB;AAAA,MACzC,kBAAkB;AAAA,MAClB,WAAW,MAAM,OAAO,QAAQ;AAAA;AAAA,EAClC;AAEJ;",
   "names": []
 }

package/dist/connection/remote-control/ConnectedRemoteControlSwitch.js

@@ -18,7 +18,7 @@ function RemoteControlSwitch() {
       label: "Remote control",
       labelFor: "remoteControlEnabled",
       ...{ [REMOTE_CONTROL_SURFACE]: "" },
-      description: "Let an assistant click and type in the app on your behalf. Off by default every session \u2014 you'll always see the cursor move as it works.",
+      description: "Let an assistant help in the app. Screen sharing asks you to choose a tab or window; turning this off stops both sharing and control. Off by default every session.",
       children: /* @__PURE__ */ jsx(
         Switch,
         {

package/dist/connection/remote-control/ConnectedRemoteControlSwitch.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/connection/remote-control/ConnectedRemoteControlSwitch.tsx"],
-  "sourcesContent": ["/**\n * The remote-control switch of Settings \u2192 Privacy. Letting an assistant click and type in the app\n * is a privacy-adjacent permission, so it is switched there rather than from the account menu.\n * Off by default every session. Not shown while the site has not turned remote control on\n * (`guided.remoteControl`).\n */\nimport { useRemoteControl } from '@arbidocs/react'\nimport { Switch } from '@arbidocs/react/ui'\nimport { SettingsRow } from '../../settings/SettingsPanel'\nimport { REMOTE_CONTROL_SURFACE } from '../../guided/surfaces'\nimport { useGuidedRuns } from '../../guided/useGuidedRuns'\nimport { useRemoteControlActions } from './remoteControl'\n\nexport function ConnectedRemoteControlSwitch() {\n  return useGuidedRuns().remoteControl ? <RemoteControlSwitch /> : null\n}\n\nfunction RemoteControlSwitch() {\n  const enabled = useRemoteControl((state) => state.enabled)\n  const remote = useRemoteControlActions()\n  return (\n    <SettingsRow\n      label=\"Remote control\"\n      labelFor=\"remoteControlEnabled\"\n      // The whole row, its label too, is remote control's own: a remote run never acts on it.\n      {...{ [REMOTE_CONTROL_SURFACE]: '' }}\n      description=\"Let an assistant click and type in the app on your behalf. Off by default every session \u2014 you'll always see the cursor move as it works.\"\n    >\n      <Switch\n        id=\"remoteControlEnabled\"\n        checked={enabled}\n        onCheckedChange={(value) => (value ? remote.enable() : remote.disable())}\n        data-testid=\"toggle-remote-control\"\n        {...{ [REMOTE_CONTROL_SURFACE]: '' }}\n      />\n    </SettingsRow>\n  )\n}\n"],
+  "sourcesContent": ["/**\n * The remote-control switch of Settings \u2192 Privacy. Letting an assistant click and type in the app\n * is a privacy-adjacent permission, so it is switched there rather than from the account menu.\n * Off by default every session. Not shown while the site has not turned remote control on\n * (`guided.remoteControl`).\n */\nimport { useRemoteControl } from '@arbidocs/react'\nimport { Switch } from '@arbidocs/react/ui'\nimport { SettingsRow } from '../../settings/SettingsPanel'\nimport { REMOTE_CONTROL_SURFACE } from '../../guided/surfaces'\nimport { useGuidedRuns } from '../../guided/useGuidedRuns'\nimport { useRemoteControlActions } from './remoteControl'\n\nexport function ConnectedRemoteControlSwitch() {\n  return useGuidedRuns().remoteControl ? <RemoteControlSwitch /> : null\n}\n\nfunction RemoteControlSwitch() {\n  const enabled = useRemoteControl((state) => state.enabled)\n  const remote = useRemoteControlActions()\n  return (\n    <SettingsRow\n      label=\"Remote control\"\n      labelFor=\"remoteControlEnabled\"\n      // The whole row, its label too, is remote control's own: a remote run never acts on it.\n      {...{ [REMOTE_CONTROL_SURFACE]: '' }}\n      description=\"Let an assistant help in the app. Screen sharing asks you to choose a tab or window; turning this off stops both sharing and control. Off by default every session.\"\n    >\n      <Switch\n        id=\"remoteControlEnabled\"\n        checked={enabled}\n        onCheckedChange={(value) => (value ? remote.enable() : remote.disable())}\n        data-testid=\"toggle-remote-control\"\n        {...{ [REMOTE_CONTROL_SURFACE]: '' }}\n      />\n    </SettingsRow>\n  )\n}\n"],
   "mappings": ";AAcyC;AARzC,SAAS,wBAAwB;AACjC,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,8BAA8B;AACvC,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AAEjC,SAAS,+BAA+B;AAC7C,SAAO,cAAc,EAAE,gBAAgB,oBAAC,uBAAoB,IAAK;AACnE;AAEA,SAAS,sBAAsB;AAC7B,QAAM,UAAU,iBAAiB,CAAC,UAAU,MAAM,OAAO;AACzD,QAAM,SAAS,wBAAwB;AACvC,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAM;AAAA,MACN,UAAS;AAAA,MAER,GAAG,EAAE,CAAC,sBAAsB,GAAG,GAAG;AAAA,MACnC,aAAY;AAAA,MAEZ;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,SAAS;AAAA,UACT,iBAAiB,CAAC,UAAW,QAAQ,OAAO,OAAO,IAAI,OAAO,QAAQ;AAAA,UACtE,eAAY;AAAA,UACX,GAAG,EAAE,CAAC,sBAAsB,GAAG,GAAG;AAAA;AAAA,MACrC;AAAA;AAAA,EACF;AAEJ;",
   "names": []
 }

package/dist/connection/remote-control/browser-diagnostics.d.ts

@@ -0,0 +1,7 @@
+/** Session-only browser evidence, collected only while the user is sharing. No bodies, headers or storage. */
+export declare function collectBrowserDiagnostics(): {
+    snapshot: () => string;
+    stop: () => void;
+};
+export declare function safeUrl(value: string): string;
+export declare function sanitizeDiagnostic(value: string): string;

package/dist/connection/remote-control/browser-diagnostics.js

@@ -0,0 +1,109 @@
+"use client";
+import { formatErrorReport } from "../../settings/error-report.js";
+function collectBrowserDiagnostics() {
+  const lines = [];
+  const add = (message) => {
+    lines.push(`${(/* @__PURE__ */ new Date()).toISOString()} ${sanitizeDiagnostic(message).slice(0, 1800)}`);
+    if (lines.length > 30) lines.shift();
+  };
+  const stringify = (value) => {
+    if (value instanceof Error)
+      return formatErrorReport({ error: value, url: safeUrl(location.href) });
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+      return String(value);
+    return "[object omitted]";
+  };
+  const originalError = console.error;
+  const originalWarn = console.warn;
+  const error = (...args) => {
+    add(`error: ${args.map(stringify).join(" ")}`);
+    originalError.apply(console, args);
+  };
+  const warn = (...args) => {
+    add(`warning: ${args.map(stringify).join(" ")}`);
+    originalWarn.apply(console, args);
+  };
+  console.error = error;
+  console.warn = warn;
+  const onError = (event) => add(`uncaught: ${stringify(event.error ?? event.message)}`);
+  const onRejection = (event) => add(`unhandled rejection: ${stringify(event.reason)}`);
+  window.addEventListener("error", onError);
+  window.addEventListener("unhandledrejection", onRejection);
+  const originalFetch = window.fetch;
+  const wrappedFetch = async (...args) => {
+    const input = args[0];
+    const url = safeUrl(
+      typeof input === "string" ? input : input instanceof URL ? input.href : input.url
+    );
+    try {
+      const response = await originalFetch.apply(window, args);
+      if (!response.ok) add(`HTTP ${response.status}: ${url}`);
+      return response;
+    } catch (failure) {
+      add(`request failed: ${url}`);
+      throw failure;
+    }
+  };
+  window.fetch = wrappedFetch;
+  let resources;
+  if (typeof PerformanceObserver !== "undefined") {
+    try {
+      resources = new PerformanceObserver((list) => {
+        for (const entry of list.getEntries()) {
+          const resource = entry;
+          if ("responseStatus" in resource && Number(resource.responseStatus) >= 400)
+            add(`HTTP ${resource.responseStatus}: ${safeUrl(resource.name)}`);
+        }
+      });
+      resources.observe({ type: "resource" });
+    } catch {
+      resources = void 0;
+    }
+  }
+  return {
+    snapshot: () => [
+      `ARBI tab: ${safeUrl(location.href)}`,
+      `Viewport: ${innerWidth} x ${innerHeight}; DPR ${devicePixelRatio}`,
+      "Visible ARBI controls (selectors for control_ui):",
+      ...Array.from(
+        document.querySelectorAll(
+          'button[data-testid],a[data-testid],input[data-testid]:not([type="password"]),select[data-testid],[role="button"][data-testid]'
+        )
+      ).filter(
+        (el) => el.getBoundingClientRect().width > 0 && !el.closest("[data-remote-control-surface]")
+      ).slice(0, 60).map(
+        (el) => `[data-testid=${JSON.stringify(el.dataset.testid)}] ${sanitizeDiagnostic(el.getAttribute("aria-label") ?? el.getAttribute("title") ?? el.textContent ?? "").slice(0, 80)}`
+      ),
+      ...lines
+    ].join("\n").slice(-18e3),
+    stop: () => {
+      if (console.error === error) console.error = originalError;
+      if (console.warn === warn) console.warn = originalWarn;
+      if (window.fetch === wrappedFetch) window.fetch = originalFetch;
+      window.removeEventListener("error", onError);
+      window.removeEventListener("unhandledrejection", onRejection);
+      resources?.disconnect();
+      lines.length = 0;
+    }
+  };
+}
+function safeUrl(value) {
+  try {
+    const url = new URL(value, location.href);
+    return `${url.origin}${url.pathname}`;
+  } catch {
+    return "[invalid URL]";
+  }
+}
+function sanitizeDiagnostic(value) {
+  return value.replace(/https?:\/\/[^\s<>"']+/g, (url) => safeUrl(url)).replace(/\bBearer\s+[^\s,;]+/gi, "Bearer [redacted]").replace(
+    /\b(token|password|secret|authorization|api[_-]?key)\s*[:=]\s*[^\s,;]+/gi,
+    "$1=[redacted]"
+  ).replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[redacted token]");
+}
+export {
+  collectBrowserDiagnostics,
+  safeUrl,
+  sanitizeDiagnostic
+};
+//# sourceMappingURL=browser-diagnostics.js.map

package/dist/connection/remote-control/browser-diagnostics.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/connection/remote-control/browser-diagnostics.ts"],
+  "sourcesContent": ["import { formatErrorReport } from '../../settings/error-report'\n\n/** Session-only browser evidence, collected only while the user is sharing. No bodies, headers or storage. */\nexport function collectBrowserDiagnostics() {\n  const lines: string[] = []\n  const add = (message: string) => {\n    lines.push(`${new Date().toISOString()} ${sanitizeDiagnostic(message).slice(0, 1800)}`)\n    if (lines.length > 30) lines.shift()\n  }\n  const stringify = (value: unknown): string => {\n    if (value instanceof Error)\n      return formatErrorReport({ error: value, url: safeUrl(location.href) })\n    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean')\n      return String(value)\n    return '[object omitted]'\n  }\n  const originalError = console.error\n  const originalWarn = console.warn\n  const error = (...args: unknown[]) => {\n    add(`error: ${args.map(stringify).join(' ')}`)\n    originalError.apply(console, args)\n  }\n  const warn = (...args: unknown[]) => {\n    add(`warning: ${args.map(stringify).join(' ')}`)\n    originalWarn.apply(console, args)\n  }\n  console.error = error\n  console.warn = warn\n  const onError = (event: ErrorEvent) => add(`uncaught: ${stringify(event.error ?? event.message)}`)\n  const onRejection = (event: PromiseRejectionEvent) =>\n    add(`unhandled rejection: ${stringify(event.reason)}`)\n  window.addEventListener('error', onError)\n  window.addEventListener('unhandledrejection', onRejection)\n  const originalFetch = window.fetch\n  const wrappedFetch: typeof fetch = async (...args) => {\n    const input = args[0]\n    const url = safeUrl(\n      typeof input === 'string' ? input : input instanceof URL ? input.href : input.url\n    )\n    try {\n      const response = await originalFetch.apply(window, args)\n      if (!response.ok) add(`HTTP ${response.status}: ${url}`)\n      return response\n    } catch (failure) {\n      add(`request failed: ${url}`)\n      throw failure\n    }\n  }\n  window.fetch = wrappedFetch\n  // Resource timing also catches failures made through fetch references captured before sharing.\n  let resources: PerformanceObserver | undefined\n  if (typeof PerformanceObserver !== 'undefined') {\n    try {\n      resources = new PerformanceObserver((list) => {\n        for (const entry of list.getEntries()) {\n          const resource = entry as PerformanceResourceTiming\n          if ('responseStatus' in resource && Number(resource.responseStatus) >= 400)\n            add(`HTTP ${resource.responseStatus}: ${safeUrl(resource.name)}`)\n        }\n      })\n      resources.observe({ type: 'resource' })\n    } catch {\n      resources = undefined\n    }\n  }\n  return {\n    snapshot: () =>\n      [\n        `ARBI tab: ${safeUrl(location.href)}`,\n        `Viewport: ${innerWidth} x ${innerHeight}; DPR ${devicePixelRatio}`,\n        'Visible ARBI controls (selectors for control_ui):',\n        ...Array.from(\n          document.querySelectorAll<HTMLElement>(\n            'button[data-testid],a[data-testid],input[data-testid]:not([type=\"password\"]),select[data-testid],[role=\"button\"][data-testid]'\n          )\n        )\n          .filter(\n            (el) =>\n              el.getBoundingClientRect().width > 0 && !el.closest('[data-remote-control-surface]')\n          )\n          .slice(0, 60)\n          .map(\n            (el) =>\n              `[data-testid=${JSON.stringify(el.dataset.testid)}] ${sanitizeDiagnostic(el.getAttribute('aria-label') ?? el.getAttribute('title') ?? el.textContent ?? '').slice(0, 80)}`\n          ),\n        ...lines,\n      ]\n        .join('\\n')\n        .slice(-18_000),\n    stop: () => {\n      if (console.error === error) console.error = originalError\n      if (console.warn === warn) console.warn = originalWarn\n      if (window.fetch === wrappedFetch) window.fetch = originalFetch\n      window.removeEventListener('error', onError)\n      window.removeEventListener('unhandledrejection', onRejection)\n      resources?.disconnect()\n      lines.length = 0\n    },\n  }\n}\n\nexport function safeUrl(value: string): string {\n  try {\n    const url = new URL(value, location.href)\n    return `${url.origin}${url.pathname}`\n  } catch {\n    return '[invalid URL]'\n  }\n}\nexport function sanitizeDiagnostic(value: string): string {\n  return value\n    .replace(/https?:\\/\\/[^\\s<>\"']+/g, (url) => safeUrl(url))\n    .replace(/\\bBearer\\s+[^\\s,;]+/gi, 'Bearer [redacted]')\n    .replace(\n      /\\b(token|password|secret|authorization|api[_-]?key)\\s*[:=]\\s*[^\\s,;]+/gi,\n      '$1=[redacted]'\n    )\n    .replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/g, '[redacted token]')\n}\n"],
+  "mappings": ";AAAA,SAAS,yBAAyB;AAG3B,SAAS,4BAA4B;AAC1C,QAAM,QAAkB,CAAC;AACzB,QAAM,MAAM,CAAC,YAAoB;AAC/B,UAAM,KAAK,IAAG,oBAAI,KAAK,GAAE,YAAY,CAAC,IAAI,mBAAmB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,EAAE;AACtF,QAAI,MAAM,SAAS,GAAI,OAAM,MAAM;AAAA,EACrC;AACA,QAAM,YAAY,CAAC,UAA2B;AAC5C,QAAI,iBAAiB;AACnB,aAAO,kBAAkB,EAAE,OAAO,OAAO,KAAK,QAAQ,SAAS,IAAI,EAAE,CAAC;AACxE,QAAI,OAAO,UAAU,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU;AAC7E,aAAO,OAAO,KAAK;AACrB,WAAO;AAAA,EACT;AACA,QAAM,gBAAgB,QAAQ;AAC9B,QAAM,eAAe,QAAQ;AAC7B,QAAM,QAAQ,IAAI,SAAoB;AACpC,QAAI,UAAU,KAAK,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE;AAC7C,kBAAc,MAAM,SAAS,IAAI;AAAA,EACnC;AACA,QAAM,OAAO,IAAI,SAAoB;AACnC,QAAI,YAAY,KAAK,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE;AAC/C,iBAAa,MAAM,SAAS,IAAI;AAAA,EAClC;AACA,UAAQ,QAAQ;AAChB,UAAQ,OAAO;AACf,QAAM,UAAU,CAAC,UAAsB,IAAI,aAAa,UAAU,MAAM,SAAS,MAAM,OAAO,CAAC,EAAE;AACjG,QAAM,cAAc,CAAC,UACnB,IAAI,wBAAwB,UAAU,MAAM,MAAM,CAAC,EAAE;AACvD,SAAO,iBAAiB,SAAS,OAAO;AACxC,SAAO,iBAAiB,sBAAsB,WAAW;AACzD,QAAM,gBAAgB,OAAO;AAC7B,QAAM,eAA6B,UAAU,SAAS;AACpD,UAAM,QAAQ,KAAK,CAAC;AACpB,UAAM,MAAM;AAAA,MACV,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,OAAO,MAAM;AAAA,IAChF;AACA,QAAI;AACF,YAAM,WAAW,MAAM,cAAc,MAAM,QAAQ,IAAI;AACvD,UAAI,CAAC,SAAS,GAAI,KAAI,QAAQ,SAAS,MAAM,KAAK,GAAG,EAAE;AACvD,aAAO;AAAA,IACT,SAAS,SAAS;AAChB,UAAI,mBAAmB,GAAG,EAAE;AAC5B,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO,QAAQ;AAEf,MAAI;AACJ,MAAI,OAAO,wBAAwB,aAAa;AAC9C,QAAI;AACF,kBAAY,IAAI,oBAAoB,CAAC,SAAS;AAC5C,mBAAW,SAAS,KAAK,WAAW,GAAG;AACrC,gBAAM,WAAW;AACjB,cAAI,oBAAoB,YAAY,OAAO,SAAS,cAAc,KAAK;AACrE,gBAAI,QAAQ,SAAS,cAAc,KAAK,QAAQ,SAAS,IAAI,CAAC,EAAE;AAAA,QACpE;AAAA,MACF,CAAC;AACD,gBAAU,QAAQ,EAAE,MAAM,WAAW,CAAC;AAAA,IACxC,QAAQ;AACN,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AAAA,IACL,UAAU,MACR;AAAA,MACE,aAAa,QAAQ,SAAS,IAAI,CAAC;AAAA,MACnC,aAAa,UAAU,MAAM,WAAW,SAAS,gBAAgB;AAAA,MACjE;AAAA,MACA,GAAG,MAAM;AAAA,QACP,SAAS;AAAA,UACP;AAAA,QACF;AAAA,MACF,EACG;AAAA,QACC,CAAC,OACC,GAAG,sBAAsB,EAAE,QAAQ,KAAK,CAAC,GAAG,QAAQ,+BAA+B;AAAA,MACvF,EACC,MAAM,GAAG,EAAE,EACX;AAAA,QACC,CAAC,OACC,gBAAgB,KAAK,UAAU,GAAG,QAAQ,MAAM,CAAC,KAAK,mBAAmB,GAAG,aAAa,YAAY,KAAK,GAAG,aAAa,OAAO,KAAK,GAAG,eAAe,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,MAC5K;AAAA,MACF,GAAG;AAAA,IACL,EACG,KAAK,IAAI,EACT,MAAM,KAAO;AAAA,IAClB,MAAM,MAAM;AACV,UAAI,QAAQ,UAAU,MAAO,SAAQ,QAAQ;AAC7C,UAAI,QAAQ,SAAS,KAAM,SAAQ,OAAO;AAC1C,UAAI,OAAO,UAAU,aAAc,QAAO,QAAQ;AAClD,aAAO,oBAAoB,SAAS,OAAO;AAC3C,aAAO,oBAAoB,sBAAsB,WAAW;AAC5D,iBAAW,WAAW;AACtB,YAAM,SAAS;AAAA,IACjB;AAAA,EACF;AACF;AAEO,SAAS,QAAQ,OAAuB;AAC7C,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,WAAO,GAAG,IAAI,MAAM,GAAG,IAAI,QAAQ;AAAA,EACrC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACO,SAAS,mBAAmB,OAAuB;AACxD,SAAO,MACJ,QAAQ,0BAA0B,CAAC,QAAQ,QAAQ,GAAG,CAAC,EACvD,QAAQ,yBAAyB,mBAAmB,EACpD;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,QAAQ,0DAA0D,kBAAkB;AACzF;",
+  "names": []
+}

package/dist/connection/remote-control/remoteControl.d.ts

@@ -21,8 +21,16 @@ export interface RemoteControl {
     /** Turn remote control ON directly — the user's own explicit choice. Runs nothing by itself. */
     enable(): void;
 }
+export interface ScreenTransport {
+    reply(requestId: string, result: {
+        status: 'captured' | 'denied' | 'stopped' | 'unavailable' | 'action_finished';
+        screenshot_png?: string;
+        diagnostics?: string;
+    }): Promise<void>;
+    diagnose?(): Promise<string>;
+}
 /** Remote control on a session's state, running the site's guided runs. */
-export declare function createRemoteControl(session: RemoteControlSession, guided: Pick<GuidedRuns, 'isSequenceId' | 'run' | 'remoteControl'>): RemoteControl;
+export declare function createRemoteControl(session: RemoteControlSession, guided: Pick<GuidedRuns, 'isSequenceId' | 'run' | 'remoteControl'>, screenTransport?: ScreenTransport): RemoteControl;
 /** Remote control on the host's session and guided runs. */
 export declare function useRemoteControlActions(): RemoteControl;
 /**

package/dist/connection/remote-control/remoteControl.js

@@ -7,25 +7,115 @@ import {
   toRemoteControlRequest,
   useArbiHost,
   useArbiSession,
-  useArbiSessionStore
+  useArbiSessionStore,
+  useArbiSessionState
 } from "@arbidocs/react";
 import { cancelGuidedRun } from "../../guided/runner.js";
 import { useGuidedRuns } from "../../guided/useGuidedRuns.js";
 import { isSurfaceMounted } from "../../guided/surfaces.js";
-function createRemoteControl(session, guided) {
+import { createScreenSharing } from "./screen-sharing.js";
+const screenRuntimes = /* @__PURE__ */ new WeakMap();
+function screenRuntime(session) {
+  let runtime = screenRuntimes.get(session);
+  if (!runtime) {
+    runtime = { sharing: createScreenSharing(), generation: 0, setup: "" };
+    screenRuntimes.set(session, runtime);
+  }
+  return runtime;
+}
+function stopScreen(session) {
+  const runtime = screenRuntimes.get(session);
+  if (!runtime) return;
+  runtime.generation++;
+  runtime.sharing.stop();
+  runtime.setup = "";
+  const actions = remoteControlActions(session);
+  if (remoteControlStateOf(session.getState()).sharing) actions.setSharing(false);
+}
+function createRemoteControl(session, guided, screenTransport) {
   const actions = remoteControlActions(session);
   const state = () => remoteControlStateOf(session.getState());
+  const runtime = screenRuntime(session);
+  const reply = async (req, status) => {
+    if ((req.screenRequestId || req.actionRequestId) && screenTransport) {
+      await screenTransport.reply(req.screenRequestId || req.actionRequestId, { status }).catch(() => {
+      });
+    }
+  };
+  const disable = () => {
+    const pending = state().pending;
+    if (pending) void reply(pending, "stopped");
+    stopScreen(session);
+    actions.setEnabled(false);
+    cancelGuidedRun();
+  };
+  const inspect = async (req, keepSharing) => {
+    if (!req.screenRequestId || !screenTransport) return;
+    const workspace = session.getState().workspaceId;
+    if (workspace !== req.workspaceExtId) {
+      await reply(req, "unavailable");
+      return;
+    }
+    const token = runtime.generation;
+    const current = () => token === runtime.generation && session.getState().workspaceId === workspace;
+    actions.setControllingAgent({ name: req.agentName, extId: req.agentExtId });
+    try {
+      if (!runtime.sharing.active) {
+        await runtime.sharing.start(disable);
+        if (!current()) {
+          runtime.sharing.stop();
+          await reply(req, "stopped");
+          return;
+        }
+        actions.setSharing(true);
+        if (screenTransport.diagnose)
+          runtime.setup = await screenTransport.diagnose().catch(() => "Setup checks unavailable.");
+      }
+      if (!current()) {
+        await reply(req, "stopped");
+        return;
+      }
+      const frame = await runtime.sharing.frame();
+      if (!current()) {
+        await reply(req, "stopped");
+        return;
+      }
+      await screenTransport.reply(req.screenRequestId, {
+        status: "captured",
+        ...frame,
+        diagnostics: `${frame.diagnostics}
+${runtime.setup}`.slice(0, 24e3)
+      });
+    } catch {
+      await reply(req, current() ? "unavailable" : "stopped");
+      if (current()) disable();
+    } finally {
+      if (current()) {
+        actions.setControllingAgent(null);
+        if (!keepSharing) disable();
+      }
+    }
+  };
   const resolveRun = (req) => {
     if (req.steps && req.steps.length > 0) return req.steps;
     if (req.sequenceId && guided.isSequenceId(req.sequenceId)) return req.sequenceId;
     return null;
   };
-  const runRemoteRequest = async (req) => {
+  const runRemoteRequest = async (req, keepSharing = state().enabled) => {
+    if (req.screenRequestId) {
+      await inspect(req, keepSharing);
+      return;
+    }
     const run = resolveRun(req);
     if (!run) return;
+    const token = runtime.generation;
     actions.setControllingAgent({ name: req.agentName, extId: req.agentExtId });
     try {
       await guided.run(run, { remote: true });
+      if (req.actionRequestId)
+        await reply(req, token === runtime.generation ? "action_finished" : "stopped");
+    } catch {
+      await reply(req, "unavailable");
     } finally {
       const current = state().controllingAgent;
       if (current && current.name === req.agentName && current.extId === req.agentExtId) {
@@ -45,31 +135,49 @@ function createRemoteControl(session, guided) {
       }
       const req = toRemoteControlRequest(msg, guided.isSequenceId);
       if (!req) return;
-      if (state().enabled) {
+      if ((req.screenRequestId || req.actionRequestId) && (!screenTransport || session.getState().workspaceId !== req.workspaceExtId)) {
+        void reply(req, "unavailable");
+        return;
+      }
+      if (state().enabled && (!req.screenRequestId || runtime.sharing.active)) {
         logger.info("[RemoteControl] Enabled \u2014 running requested action from", req.agentName);
         void runRemoteRequest(req);
         return;
       }
       logger.info("[RemoteControl] Consent required \u2014 prompting for", req.agentName);
+      if (state().pending) void reply(state().pending, "denied");
       actions.request(req);
     },
     grantAndRun(opts) {
       const pending = state().pending;
+      const keepSharing = opts.forSession || state().enabled;
       actions.grant(opts);
-      if (pending) void runRemoteRequest(pending);
+      if (pending) void runRemoteRequest(pending, keepSharing);
     },
-    deny: () => actions.deny(),
-    disable() {
-      actions.setEnabled(false);
-      cancelGuidedRun();
+    deny: () => {
+      const pending = state().pending;
+      actions.deny();
+      if (pending) void reply(pending, "denied");
     },
+    disable,
     enable: () => actions.setEnabled(true)
   };
 }
 function useRemoteControlActions() {
   const session = useArbiSessionStore();
   const guided = useGuidedRuns();
-  return useMemo(() => createRemoteControl(session, guided), [session, guided]);
+  const { arbi } = useArbiHost();
+  return useMemo(
+    () => createRemoteControl(
+      session,
+      guided,
+      arbi ? {
+        reply: (id, result) => arbi.remoteControl.replyScreen(id, result),
+        diagnose: async () => JSON.stringify(await arbi.diagnose())
+      } : void 0
+    ),
+    [session, guided, arbi]
+  );
 }
 function useRemoteControlSessionReset() {
   const session = useArbiSessionStore();
@@ -77,6 +185,7 @@ function useRemoteControlSessionReset() {
   const userId = useArbiSession().user?.external_id ?? null;
   useEffect(() => {
     const reset = () => {
+      stopScreen(session);
       remoteControlActions(session).reset();
       cancelGuidedRun();
     };
@@ -92,6 +201,7 @@ function useRemoteControlSessionReset() {
   useEffect(() => {
     if (lastUser.current === userId) return;
     lastUser.current = userId;
+    stopScreen(session);
     remoteControlActions(session).reset();
     cancelGuidedRun();
   }, [userId, session]);
@@ -100,6 +210,16 @@ function useRemoteControlHandlers() {
   useRemoteControlSessionReset();
   const remote = useRemoteControlActions();
   const { remoteControl } = useGuidedRuns();
+  const session = useArbiSessionStore();
+  const workspaceId = useArbiSessionState((s) => s.workspaceId);
+  useEffect(
+    () => () => {
+      stopScreen(session);
+      remoteControlActions(session).setEnabled(false);
+      cancelGuidedRun();
+    },
+    [session, workspaceId]
+  );
   return useMemo(
     () => remoteControl ? {
       remote_control: (message) => remote.handleMessage(message)