@effect-agent/platform-cloudflare 0.1.0-beta.117 → 0.1.0-beta.119

package/dist/CloudflareThreadClient.d.mts

@@ -1540,50 +1540,13 @@ export declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorde
 } | {
   readonly _tag: "HostFailed";
   readonly failure: {
-    readonly _tag: "HostProtocolError";
-    readonly message: string;
-  } | {
-    readonly _tag: "AgentInputError";
-    readonly message: string;
-  } | {
-    readonly _tag: "DigestError";
+    readonly _tag: "DurableAlarmError";
+    readonly operation: string;
     readonly message: string;
     readonly cause?: Schema.Json | undefined;
   } | {
-    readonly _tag: "AdmissionConflict";
+    readonly _tag: "ThreadNotMaterialized";
     readonly threadId: string;
-    readonly principal: string;
-    readonly idempotencyKey: string;
-    readonly existingInputDigest: string;
-    readonly attemptedInputDigest: string;
-  } | {
-    readonly _tag: "AdmissionPolicyError";
-    readonly reason: "occupied" | "refused" | "unavailable";
-    readonly code: string;
-    readonly cause?: import("effect-agent/failure-diagnostic").Diagnostic | undefined;
-    readonly stack?: string | undefined;
-  } | {
-    readonly _tag: "SettlementConflict";
-    readonly submissionId: string;
-    readonly existingOutcome: "aborted" | "completed" | "failed";
-  } | {
-    readonly _tag: "ApprovalConflict";
-    readonly submissionId: string;
-    readonly toolCallId: string;
-    readonly existingDecision: "approved" | "denied";
-  } | {
-    readonly _tag: "UnknownResolutionConflict";
-    readonly submissionId: string;
-    readonly toolCallId: string;
-  } | {
-    readonly _tag: "JoinedToHost";
-    readonly submissionId: string;
-    readonly hostSubmissionId: string;
-  } | {
-    readonly _tag: "LedgerError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: import("effect-agent/failure-diagnostic").Diagnostic | undefined;
   } | {
     readonly _tag: "ThreadStoreError";
     readonly operation: string;
@@ -1597,8 +1560,10 @@ export declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorde
       readonly sequence?: number | undefined;
     } | undefined;
   } | {
-    readonly _tag: "ThreadNotMaterialized";
-    readonly threadId: string;
+    readonly _tag: "LedgerError";
+    readonly operation: string;
+    readonly message: string;
+    readonly cause?: import("effect-agent/failure-diagnostic").Diagnostic | undefined;
   } | {
     readonly _tag: "AppendConflict";
     readonly threadId: string;
@@ -1611,25 +1576,60 @@ export declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorde
     readonly threadId: string;
     readonly actualEpoch: number;
     readonly attemptedEpoch: number;
+  } | {
+    readonly _tag: "OperationDenied";
+    readonly operation: "abort" | "awaitSettlement" | "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
+    readonly reason: string;
+    readonly threadId?: string | undefined;
+    readonly submissionId?: string | undefined;
+  } | {
+    readonly _tag: "AdmissionConflict";
+    readonly threadId: string;
+    readonly principal: string;
+    readonly idempotencyKey: string;
+    readonly existingInputDigest: string;
+    readonly attemptedInputDigest: string;
+  } | {
+    readonly _tag: "AdmissionPolicyError";
+    readonly reason: "occupied" | "refused" | "unavailable";
+    readonly code: string;
+    readonly cause?: import("effect-agent/failure-diagnostic").Diagnostic | undefined;
+    readonly stack?: string | undefined;
+  } | {
+    readonly _tag: "AgentInputError";
+    readonly message: string;
+  } | {
+    readonly _tag: "DigestError";
+    readonly message: string;
+    readonly cause?: Schema.Json | undefined;
   } | {
     readonly _tag: "DurableRuntimeFailpointError";
     readonly location: "abort:after-intent" | "approval:after-request-append" | "approval:after-suspend" | "checkpoint:after-save" | "checkpoint:before-save" | "claim:after-claim" | "compaction:after-canonical-append" | "compaction:before-canonical-append" | "input:after-canonical-append" | "join:after-canonical-append" | "join:after-claim" | "policy:after-reservation-append" | "policy:before-reservation-append" | "resolve:after-intent" | "run:after-duration-append" | "run:after-start-append" | "run:before-duration-append" | "run:before-start-append" | "step:after-step-append" | "subagent:after-admit" | "subagent:after-child-abort-intent" | "subagent:after-child-ready" | "subagent:after-join-append" | "subagent:after-release" | "subagent:after-release-pending" | "subagent:after-request-append" | "subagent:after-reserve" | "subagent:after-sibling-settle" | "subagent:after-start-append" | "subagent:after-suspend" | "subagent:before-join-append" | "submit:after-admit" | "submit:after-materialize" | "terminalize:after-canonical-append" | "terminalize:after-reserve" | "tools:after-prepared-append" | "tools:after-unavailable-append" | "tools:before-prepared-append" | "tools:before-unavailable-append" | "turn:after-canonical-append" | "turn:after-response-append" | "turn:after-results-append" | "update:after-canonical-append" | "update:after-delivery-insert" | "update:before-canonical-append" | "update:before-delivery-insert" | "worker:after-completion-append" | "worker:after-origin-append" | "worker:after-report-append" | "worker:after-report-delivery" | "worker:after-source-append" | "worker:after-stop-append" | "worker:after-stop-seal" | "worker:after-subtree-append" | "worker:before-completion-append" | "worker:before-origin-append" | "worker:before-report-append" | "worker:before-report-delivery" | "worker:before-source-append" | "worker:before-stop-append" | "worker:before-stop-seal" | "worker:before-subtree-append";
+  } | {
+    readonly _tag: "SettlementConflict";
+    readonly submissionId: string;
+    readonly existingOutcome: "aborted" | "completed" | "failed";
+  } | {
+    readonly _tag: "JoinedToHost";
+    readonly submissionId: string;
+    readonly hostSubmissionId: string;
   } | {
     readonly _tag: "AdmissionLimitExceeded";
     readonly limit: "database-bytes" | "input-bytes" | "queue-depth";
     readonly actual: number;
     readonly maximum: number;
   } | {
-    readonly _tag: "DurableAlarmError";
-    readonly operation: string;
+    readonly _tag: "HostProtocolError";
     readonly message: string;
-    readonly cause?: Schema.Json | undefined;
   } | {
-    readonly _tag: "OperationDenied";
-    readonly operation: "abort" | "awaitSettlement" | "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
-    readonly reason: string;
-    readonly threadId?: string | undefined;
-    readonly submissionId?: string | undefined;
+    readonly _tag: "ApprovalConflict";
+    readonly submissionId: string;
+    readonly toolCallId: string;
+    readonly existingDecision: "approved" | "denied";
+  } | {
+    readonly _tag: "UnknownResolutionConflict";
+    readonly submissionId: string;
+    readonly toolCallId: string;
   };
 }, Schema.SchemaError, never>;
 export declare const decodeHostResponse: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<AbortRecorded | ApprovalRecorded | HostFailed | ObservedPage | ProgressCancelled | ProgressObserved | SettlementReached | SubmissionStatusResponse | SubmitSucceeded | UnknownResolutionRecorded, Schema.SchemaError, never>;

package/dist/ProtectedBrowser.d.mts

@@ -9,6 +9,8 @@ declare const ProtectedTransportError_base: Schema.Class<ProtectedTransportError
 declare class ProtectedTransportError extends ProtectedTransportError_base {}
 declare const ProtectedBrowserDispatch_base: Context.ServiceClass<ProtectedBrowserDispatch, "@effect-agent/platform-cloudflare/ProtectedBrowserDispatch", {
   readonly mark: Effect.Effect<void>;
+  /** Only an acknowledged reply before assignment may restore the preceding dispatch evidence. */
+  readonly confirmNoWrite: Effect.Effect<void>;
 }>;
 /** Per-write evidence authority, provided by the policy immediately around a transport fill. */
 declare class ProtectedBrowserDispatch extends ProtectedBrowserDispatch_base {}
@@ -96,7 +98,10 @@ interface BrowserRunProtectedSession {
   readonly getHandoffState: Effect.Effect<BrowserRunHandoffState, ProtectedBrowserError>;
   /** Read only the exact page’s current origin after its recorded handoff completes; tools remain paused. */
   readonly getReturnOrigin: Effect.Effect<typeof CredentialOrigin.Type, ProtectedBrowserError>;
-  /** Resume a committed pause; human handoffs also require provider completion. Observe before acting. */
+  /**
+   * Resume a committed pause; human handoffs also require provider completion. Returns no page data.
+   * A fresh authorized observation must succeed before page actions or credential operations.
+   */
   readonly returnControl: Effect.Effect<void, ProtectedBrowserError>;
   /** Release this attachment only after committing its suspended checkpoint; preserve the remote browser. */
   readonly detach: Effect.Effect<void, ProtectedBrowserError>;

package/dist/ProtectedBrowser.mjs

@@ -173,7 +173,7 @@ const makeProtectedBrowserPolicy = Effect.fn("ProtectedBrowser.open")(function*
 			const error = cause.reasons.find((reason) => reason._tag === "Fail" && Schema.is(ProtectedBrowserError)(reason.error));
 			const reason = unexpected.length === 0 && error?._tag === "Fail" && Schema.is(ProtectedBrowserError)(error.error) ? error.error.reason : "provider";
 			const interrupt = cause.reasons.some((reason) => reason._tag === "Interrupt");
-			if (dispatch !== "not-dispatched" || interrupt || reason === "provider" || reason === "timeout") yield* close;
+			if (dispatch === "possibly-dispatched" || dispatch === "dispatched" && reason !== "busy" || interrupt || reason === "provider" || reason === "timeout") yield* close;
 			if (interrupt) return yield* Effect.interrupt;
 			const outcome = fail(dispatch === "possibly-dispatched" && reason === "provider" ? "outcome-unknown" : reason);
 			return yield* unexpected.length > 0 ? reportedBrowserError(outcome) : inheritBrowserReport(error?._tag === "Fail" ? error.error : void 0, outcome);
@@ -267,9 +267,15 @@ const makeProtectedBrowserPolicy = Effect.fn("ProtectedBrowser.open")(function*
 				target: control.target,
 				role: control.role
 			});
-			yield* publicFailure(driver.fill(decoded.ref, control.role, Redacted.make(decoded.value))).pipe(Effect.provideService(ProtectedBrowserDispatch, { mark: Effect.sync(() => {
-				dispatch = "possibly-dispatched";
-			}) }));
+			const previousDispatch = dispatch;
+			yield* publicFailure(driver.fill(decoded.ref, control.role, Redacted.make(decoded.value))).pipe(Effect.provideService(ProtectedBrowserDispatch, {
+				mark: Effect.sync(() => {
+					dispatch = "possibly-dispatched";
+				}),
+				confirmNoWrite: Effect.sync(() => {
+					dispatch = previousDispatch;
+				})
+			}));
 			dispatch = "dispatched";
 			milestone = "filled";
 			yield* permitObservation;
@@ -356,11 +362,17 @@ const makeProtectedBrowserPolicy = Effect.fn("ProtectedBrowser.open")(function*
 				yield* authorize;
 				const value = secretFor(material, field.role);
 				if (value === void 0) return yield* fail("missing-credential");
+				const previousDispatch = dispatch;
 				observation = "protected";
-				yield* publicFailure(driver.fill(field.ref, field.role, value)).pipe(Effect.provideService(ProtectedBrowserDispatch, { mark: Effect.sync(() => {
-					dispatch = "possibly-dispatched";
-					if (!exposures.some((target) => sameTarget(target, offer.target))) exposures.push(offer.target);
-				}) }));
+				yield* publicFailure(driver.fill(field.ref, field.role, value)).pipe(Effect.provideService(ProtectedBrowserDispatch, {
+					mark: Effect.sync(() => {
+						dispatch = "possibly-dispatched";
+						if (!exposures.some((target) => sameTarget(target, offer.target))) exposures.push(offer.target);
+					}),
+					confirmNoWrite: Effect.sync(() => {
+						dispatch = previousDispatch;
+					})
+				}));
 				dispatch = "dispatched";
 				milestone = "partial-fill";
 			}
@@ -422,7 +434,6 @@ const makeProtectedBrowserPolicy = Effect.fn("ProtectedBrowser.open")(function*
 		returnControl: locked(Effect.gen(function* () {
 			if (detached || observation === "closed") return yield* fail("closed");
 			if (!suspended) return yield* fail("denied");
-			yield* permitObservation;
 			offers.clear();
 			driver.resetReferences();
 			needsObservation = true;
@@ -505,12 +516,26 @@ const inspectFrame = `(() => {
     } else if (el instanceof HTMLButtonElement || (el instanceof HTMLInputElement && ['submit','button'].includes(type))) {
       if (!el.matches(':disabled')) role = type === 'submit' && form ? 'submit' : type === 'button' ? 'button' : 'unsupported';
     } else if (el instanceof HTMLAnchorElement) role = 'link';
+    const options = [];
+    let truncated = false;
+    if (role === 'select') {
+      for (let index = 0; index < el.options.length; index++) {
+        if (index === 256) { truncated = true; break; }
+        const option = el.options[index];
+        const label = option.label.trim();
+        // Never publish a shortened label as an exact fill choice.
+        if (label.length > 200) { truncated = true; continue; }
+        options.push({label, selected: option.selected, disabled: option.matches(':disabled')});
+      }
+    }
     const fingerprint = JSON.stringify([role, action, method, enctype, name, completion, type, choiceValue]);
     return { role, formIndex, action, fingerprint, ...(isChoice(el) ? {checked: el.checked} : {}),
+      ...(role === 'select' ? {options, truncated} : {}),
       label: (labelText(el) ?? (nativeField ? '' : el.textContent) ?? '').slice(0,200) };
   };
-  const expose = ({role, formIndex, action, label, checked}) =>
-    ({role, formIndex, action, label, ...(checked === undefined ? {} : {checked})});
+  const expose = ({role, formIndex, action, label, checked, options, truncated}) =>
+    ({role, formIndex, action, label, ...(checked === undefined ? {} : {checked}),
+      ...(options === undefined ? {} : {options, truncated})});
   const original = elements.map(describe);
   const validate = (index) => {
     const current = describe(elements[index]);
@@ -540,13 +565,13 @@ const inspectFrame = `(() => {
       const current = validate(index);
       if (!current || current.role !== role) return false;
       const el = elements[index];
-      if (role === 'select') {
+      if (el instanceof HTMLSelectElement) {
         const options = [...el.options].filter(option => !option.matches(':disabled'));
-        const values = options.filter(option => option.value === value);
-        const matches = values.length > 0 ? values : options.filter(option => option.textContent?.trim() === value);
-        if (matches.length !== 1) return 'unsupported';
+        // Ordinary fills name the visible choice; credential material stays a private value.
+        const matches = options.filter(option => (role === 'select' ? option.label.trim() : option.value) === value);
+        if (matches.length !== 1) return 'unsupported-before-write';
         value = matches[0].value;
-        if ([...el.options].filter(option => option.value === value).length !== 1) return 'unsupported';
+        if ([...el.options].filter(option => option.value === value).length !== 1) return 'unsupported-before-write';
       }
       let prototype = Object.getPrototypeOf(el);
       let setter;
@@ -576,9 +601,17 @@ const Description = Schema.Struct({
 	formIndex: Schema.Natural,
 	action: Schema.String.check(Schema.isMaxLength(maxAttributeLength)),
 	label: Schema.String.check(Schema.isMaxLength(200)),
-	checked: Schema.optionalKey(Schema.Boolean)
+	checked: Schema.optionalKey(Schema.Boolean),
+	options: ProtectedBrowserControl.fields.options,
+	truncated: Schema.optionalKey(Schema.Boolean)
 });
 const Descriptions = Schema.Array(Schema.NullOr(Description)).check(Schema.isMaxLength(65));
+const FillResult = Schema.Literals([
+	true,
+	false,
+	"unsupported-before-write",
+	"unsupported"
+]);
 /** One host-private acquired session. The SDK handles and exact-session cleanup have one owner. */
 var ProtectedNativeSession = class extends Context.Service()("@effect-agent/platform-cloudflare/ProtectedNativeSession") {};
 const transportError = (reason) => new ProtectedTransportError({ reason });
@@ -749,6 +782,7 @@ const makeProtectedNativeTransport = Effect.fn("ProtectedNativeTransport.make")(
 				for (let index = 0; index < descriptions.length; index++) {
 					const desc = descriptions[index];
 					if (!desc) continue;
+					if (desc.truncated) truncated = true;
 					if (discovered.length === 64) {
 						truncated = true;
 						break;
@@ -765,6 +799,7 @@ const makeProtectedNativeTransport = Effect.fn("ProtectedNativeTransport.make")(
 						role: desc.role,
 						label: desc.label,
 						...desc.checked === void 0 ? {} : { checked: desc.checked },
+						...desc.options === void 0 ? {} : { options: desc.options },
 						...desc.role === "link" ? { url: desc.action } : {},
 						target: CredentialTarget.make({
 							topOrigin: before.topOrigin,
@@ -806,7 +841,7 @@ const makeProtectedNativeTransport = Effect.fn("ProtectedNativeTransport.make")(
 			const dispatch = yield* ProtectedBrowserDispatch;
 			const state = yield* get(ref);
 			yield* dispatch.mark;
-			const filled = yield* remote("protected.fill", () => state.frame.handle.evaluate((held, index, expectedRole, secret) => {
+			const raw = yield* remote("protected.fill", () => state.frame.handle.evaluate((held, index, expectedRole, secret) => {
 				if (typeof held !== "object" || held === null) return false;
 				return Reflect.apply(Reflect.get(held, "fill"), held, [
 					index,
@@ -814,8 +849,12 @@ const makeProtectedNativeTransport = Effect.fn("ProtectedNativeTransport.make")(
 					secret
 				]);
 			}, state.index, role, Redacted.value(value)));
+			const filled = yield* decode(FillResult, raw);
+			if (filled === false || filled === "unsupported-before-write") {
+				yield* dispatch.confirmNoWrite;
+				return yield* transportError(filled === false ? "stale-reference" : "unsupported");
+			}
 			if (filled === "unsupported") return yield* transportError("unsupported");
-			if (filled !== true) return yield* transportError("stale-reference");
 		}),
 		click: Effect.fn("ProtectedNativeTransport.click")(function* (ref) {
 			const state = yield* get(ref);