@mercuryo-ai/agentbrowse 0.2.56 → 0.2.60

package/dist/secrets/form-matcher.js

@@ -3,8 +3,8 @@ import { tryCreateAgentbrowseAssistiveLlmClient } from '../assistive-runtime.js'
 import { IDENTITY_FIELD_KEYS, LOGIN_FIELD_KEYS, PAYMENT_CARD_FIELD_KEYS } from './types.js';
 import { normalizeProtectedBindingValueHint, protectedBindingKey, protectedBindingValueHintSchema, } from './protected-bindings.js';
 import { inferProtectedFieldMeaningFromTarget } from './protected-field-semantics.js';
+import { directFieldSignalValuesOf, frameKeyOf, normalizeText, selectorRootOf, selectorSignalFragments, signalValuesOf, } from './matching-helpers.js';
 const PROMPT_VALUE_MAX_CHARS = 180;
-const PROMPT_SIGNAL_MAX_CHARS = 220;
 const PROMPT_SIGNAL_MAX_VALUES = 8;
 const PAYMENT_CARD_CORE_FIELD_KEYS = new Set([
     'pan',
@@ -27,7 +27,8 @@ const EXPLICIT_PAYMENT_CARD_NAME_SIGNAL_RE = /\b(cardholder|card holder|name on
 const PAYMENT_CARD_PAN_SIGNAL_RE = /\b(card number|card no|cc-number|cc number)\b/i;
 const PAYMENT_CARD_CVV_SIGNAL_RE = /\b(security code|cvv|cvc)\b/i;
 const STRONG_PAYMENT_CARD_EXP_SIGNAL_RE = /\b(mm\s*\/\s*yy|mmyy|card exp(?:iry)?|card expiration|cc-exp)\b/i;
-const GENERIC_SHELL_SELECTOR_ROOTS = new Set(['#__next', '#root', '#app', '#app-root']);
+const LOGIN_AUTH_CONTEXT_SIGNAL_RE = /\b(sign in|sign-in|log in|login|account(?: access| sign in| login| email| password)|member login|use password)\b/i;
+const LOGIN_NON_AUTH_CONTEXT_SIGNAL_RE = /\b(reset|forgot|recover|recovery|create password|confirm password|new password|verification|security code|one[- ]?time|otp|passkey|magic link)\b/i;
 const protectedFormPlanSchema = z.object({
     confidence: z.enum(['high', 'medium', 'low']),
     bindings: z
@@ -38,9 +39,6 @@ const protectedFormPlanSchema = z.object({
     }))
         .max(24),
 });
-function normalizeText(value) {
-    return value?.replace(/\s+/g, ' ').trim().toLowerCase() ?? '';
-}
 function compactPromptValue(value, maxChars = PROMPT_VALUE_MAX_CHARS) {
     const normalized = value?.replace(/\s+/g, ' ').trim();
     if (!normalized) {
@@ -62,83 +60,6 @@ function isTargetEligibleForProtectedFill(target) {
 function allowsProtectedAvailability(availability) {
     return availability?.state === undefined || availability.state === 'available';
 }
-function selectorSignalFragments(selector) {
-    const fragments = [];
-    for (const match of selector.matchAll(/\[name="([^"]+)"\]/g)) {
-        fragments.push(match[1] ?? '');
-    }
-    for (const match of selector.matchAll(/#([a-zA-Z0-9_-]+)/g)) {
-        fragments.push(match[1] ?? '');
-    }
-    return fragments;
-}
-function selectorRootOf(target) {
-    const selectors = [
-        target.context?.item?.selector,
-        target.context?.container?.selector,
-        target.context?.landmark?.selector,
-    ].filter((value) => typeof value === 'string' && value.length > 0);
-    for (const selector of selectors) {
-        for (const match of selector.matchAll(/#[A-Za-z0-9_-]+/g)) {
-            const candidate = match[0]?.trim().toLowerCase();
-            if (!candidate || GENERIC_SHELL_SELECTOR_ROOTS.has(candidate)) {
-                continue;
-            }
-            return match[0];
-        }
-    }
-    return null;
-}
-function signalValuesOf(target) {
-    const values = new Set();
-    const push = (value) => {
-        const normalized = normalizeText(value);
-        if (normalized) {
-            values.add(normalized.length > PROMPT_SIGNAL_MAX_CHARS
-                ? `${normalized.slice(0, PROMPT_SIGNAL_MAX_CHARS - 1)}…`
-                : normalized);
-        }
-    };
-    push(target.label);
-    push(target.displayLabel);
-    push(target.kind);
-    push(target.semantics?.role);
-    push(target.semantics?.name);
-    push(target.context?.hintText);
-    push(target.context?.group?.label);
-    push(target.context?.group?.text);
-    push(target.context?.container?.label);
-    push(target.context?.container?.text);
-    push(target.context?.landmark?.label);
-    push(target.context?.landmark?.text);
-    for (const candidate of target.locatorCandidates) {
-        push(candidate.name);
-        push(candidate.value);
-        if (candidate.strategy === 'css' || candidate.strategy === 'xpath') {
-            for (const fragment of selectorSignalFragments(candidate.value)) {
-                push(fragment);
-            }
-        }
-    }
-    return [...values];
-}
-function directFieldSignalValuesOf(target) {
-    const values = new Set();
-    const push = (value) => {
-        const normalized = normalizeText(value);
-        if (normalized) {
-            values.add(normalized);
-        }
-    };
-    push(target.label);
-    push(target.displayLabel);
-    push(target.placeholder);
-    push(target.inputName);
-    push(target.inputType);
-    push(target.autocomplete);
-    push(target.semantics?.name);
-    return [...values];
-}
 function targetHasInferredProtectedMeaning(target, kind, fieldKeys) {
     return inferProtectedFieldMeaningFromTarget(target).some((hint) => {
         if (hint.kind !== kind) {
@@ -455,7 +376,48 @@ function deterministicLoginFieldKeysForTarget(target) {
         .filter((hint) => hint.kind === 'login')
         .map((hint) => hint.fieldKey);
 }
-function deterministicLoginPlan(plannerGroup, fullGroup) {
+function loginContextSignalValues(group) {
+    const values = new Set();
+    const push = (value) => {
+        const normalized = normalizeText(value);
+        if (normalized) {
+            values.add(normalized);
+        }
+    };
+    for (const target of group.targets) {
+        push(target.label);
+        push(target.displayLabel);
+        push(target.placeholder);
+        push(target.inputName);
+        push(target.context?.hintText);
+        push(target.context?.item?.label);
+        push(target.context?.item?.text);
+        push(target.context?.group?.label);
+        push(target.context?.group?.text);
+        push(target.context?.container?.label);
+        push(target.context?.container?.text);
+        push(target.context?.landmark?.label);
+        push(target.context?.landmark?.text);
+    }
+    return [...values];
+}
+function hasStrongLoginAuthContext(group) {
+    const signals = loginContextSignalValues(group);
+    if (signals.some((signal) => LOGIN_NON_AUTH_CONTEXT_SIGNAL_RE.test(signal))) {
+        return false;
+    }
+    return signals.some((signal) => LOGIN_AUTH_CONTEXT_SIGNAL_RE.test(signal));
+}
+function loginFieldBindingForTarget(fieldKey, target) {
+    return {
+        fieldKey,
+        targetRef: target.ref,
+        label: target.displayLabel ?? target.label,
+        required: target.validation?.required,
+        valueHint: 'direct',
+    };
+}
+function deterministicLoginPlan(plannerGroup, fullGroup, catalog) {
     const fieldTargets = new Map();
     for (const target of plannerGroup.targets) {
         for (const fieldKey of deterministicLoginFieldKeysForTarget(target)) {
@@ -466,32 +428,58 @@ function deterministicLoginPlan(plannerGroup, fullGroup) {
     }
     const usernameRefs = fieldTargets.get('username');
     const passwordRefs = fieldTargets.get('password');
-    if (!usernameRefs || usernameRefs.size !== 1 || !passwordRefs || passwordRefs.size !== 1) {
+    if (usernameRefs?.size === 1 && passwordRefs?.size === 1) {
+        const targetByRef = new Map(fullGroup.targets.map((target) => [target.ref, target]));
+        const fields = [
+            {
+                fieldKey: 'username',
+                targetRef: [...usernameRefs][0],
+                label: targetByRef.get([...usernameRefs][0])?.displayLabel ??
+                    targetByRef.get([...usernameRefs][0])?.label,
+                required: targetByRef.get([...usernameRefs][0])?.validation?.required,
+                valueHint: 'direct',
+            },
+            {
+                fieldKey: 'password',
+                targetRef: [...passwordRefs][0],
+                label: targetByRef.get([...passwordRefs][0])?.displayLabel ??
+                    targetByRef.get([...passwordRefs][0])?.label,
+                required: targetByRef.get([...passwordRefs][0])?.validation?.required,
+                valueHint: 'direct',
+            },
+        ];
+        return {
+            confidence: 'high',
+            fields,
+            loginStep: 'full',
+        };
+    }
+    if (!catalog ||
+        !hasApplicableStoredSecretKind(catalog, 'login') ||
+        fullGroup.targets.length !== 1 ||
+        plannerGroup.targets.length !== 1 ||
+        !hasStrongLoginAuthContext(fullGroup)) {
         return null;
     }
-    const targetByRef = new Map(fullGroup.targets.map((target) => [target.ref, target]));
-    const fields = [
-        {
-            fieldKey: 'username',
-            targetRef: [...usernameRefs][0],
-            label: targetByRef.get([...usernameRefs][0])?.displayLabel ??
-                targetByRef.get([...usernameRefs][0])?.label,
-            required: targetByRef.get([...usernameRefs][0])?.validation?.required,
-            valueHint: 'direct',
-        },
-        {
-            fieldKey: 'password',
-            targetRef: [...passwordRefs][0],
-            label: targetByRef.get([...passwordRefs][0])?.displayLabel ??
-                targetByRef.get([...passwordRefs][0])?.label,
-            required: targetByRef.get([...passwordRefs][0])?.validation?.required,
-            valueHint: 'direct',
-        },
-    ];
-    return {
-        confidence: 'high',
-        fields,
-    };
+    const [onlyTarget] = plannerGroup.targets;
+    if (!onlyTarget) {
+        return null;
+    }
+    if (usernameRefs?.size === 1 && !passwordRefs) {
+        return {
+            confidence: 'medium',
+            fields: [loginFieldBindingForTarget('username', onlyTarget)],
+            loginStep: 'identifier',
+        };
+    }
+    if (!usernameRefs && passwordRefs?.size === 1) {
+        return {
+            confidence: 'medium',
+            fields: [loginFieldBindingForTarget('password', onlyTarget)],
+            loginStep: 'password',
+        };
+    }
+    return null;
 }
 function loginPlannerGroup(group) {
     const relevantTargets = group.targets.filter((target) => targetLooksLikeLoginUsernameTarget(target) || targetLooksLikeLoginPasswordTarget(target));
@@ -499,7 +487,7 @@ function loginPlannerGroup(group) {
         return null;
     }
     const hasPasswordAnchor = relevantTargets.some((target) => targetLooksLikeLoginPasswordTarget(target));
-    if (!hasPasswordAnchor) {
+    if (!hasPasswordAnchor && !(relevantTargets.length === 1 && group.targets.length === 1)) {
         return null;
     }
     return {
@@ -577,6 +565,9 @@ function formGroupKeyOf(target) {
     if (selectorRoot) {
         return `selector-root:${selectorRoot}`;
     }
+    if (target.pageFormSelector) {
+        return `page-form:${target.pageFormSelector}`;
+    }
     if (target.surfaceRef) {
         return `surface:${target.surfaceRef}`;
     }
@@ -733,13 +724,19 @@ function sanitizeBindings(kind, group, bindings) {
         return left.targetRef.localeCompare(right.targetRef);
     });
 }
-function isCredibleKindMatch(kind, fieldBindings) {
+function isCredibleKindMatch(kind, fieldBindings, loginStep) {
     if (fieldBindings.length === 0) {
         return false;
     }
     const fieldKeys = new Set(fieldBindings.map((field) => field.fieldKey));
     switch (kind) {
         case 'login':
+            if (loginStep === 'identifier') {
+                return fieldKeys.size === 1 && fieldKeys.has('username');
+            }
+            if (loginStep === 'password') {
+                return fieldKeys.size === 1 && fieldKeys.has('password');
+            }
             return fieldKeys.has('username') && fieldKeys.has('password');
         case 'payment_card':
             return fieldKeys.has('pan') && fieldKeys.has('exp_month') && fieldKeys.has('exp_year');
@@ -761,12 +758,6 @@ function isCredibleKindMatch(kind, fieldBindings) {
         }
     }
 }
-function frameKeyOf(target) {
-    if (!target.framePath || target.framePath.length === 0) {
-        return null;
-    }
-    return target.framePath.join('>');
-}
 function targetLooksLikeIframeEnrollmentField(target) {
     const autocomplete = normalizeText(target.autocomplete);
     const signals = signalValuesOf(target);
@@ -818,6 +809,16 @@ function formScopeRef(fields, targetByRef) {
     }
     return surfaceRefs.size === 1 ? [...surfaceRefs][0] : undefined;
 }
+function formPageFormSelector(fields, targetByRef) {
+    const selectors = new Set();
+    for (const field of fields) {
+        const pageFormSelector = targetByRef.get(field.targetRef)?.pageFormSelector?.trim();
+        if (pageFormSelector) {
+            selectors.add(pageFormSelector);
+        }
+    }
+    return selectors.size === 1 ? [...selectors][0] : undefined;
+}
 function buildStoredSecretCandidates(catalog, kind, confidence, matchedFieldKeys) {
     return catalog.storedSecrets
         .filter((secret) => secret.kind === kind && secret.fieldKeys.some((fieldKey) => matchedFieldKeys.has(fieldKey)))
@@ -842,12 +843,15 @@ function purposesByPriority(catalog) {
     }
     return ORDERED_PROTECTED_KINDS.filter((kind) => hasApplicableStoredSecretKind(catalog, kind));
 }
-async function planBindingsForGroup(getClient, kind, plannerGroup, fullGroup) {
+async function planBindingsForGroup(getClient, kind, plannerGroup, fullGroup, catalog) {
     if (kind === 'login') {
-        const deterministicPlan = deterministicLoginPlan(plannerGroup, fullGroup);
+        const deterministicPlan = deterministicLoginPlan(plannerGroup, fullGroup, catalog);
         if (deterministicPlan) {
             return deterministicPlan;
         }
+        if (plannerGroup.targets.length === 1 && fullGroup.targets.length === 1) {
+            return null;
+        }
     }
     if (kind === 'payment_card') {
         const deterministicPlan = deterministicPaymentCardPlan(plannerGroup, fullGroup);
@@ -913,11 +917,11 @@ export async function matchStoredSecretsToObservedTargets(pageRef, targets, cata
     const forms = [];
     for (const group of groups) {
         for (const { kind, plannerGroup } of plannerGroupsForGroup(group, catalog)) {
-            const planned = await planBindingsForGroup(catalog || kind === 'payment_card' ? getClient : null, kind, plannerGroup, group).catch(() => null);
+            const planned = await planBindingsForGroup(catalog || kind === 'payment_card' ? getClient : null, kind, plannerGroup, group, catalog).catch(() => null);
             if (!planned || planned.confidence === 'low') {
                 continue;
             }
-            if (!isCredibleKindMatch(kind, planned.fields)) {
+            if (!isCredibleKindMatch(kind, planned.fields, planned.loginStep)) {
                 continue;
             }
             const matchedFieldKeys = new Set(planned.fields.map((field) => field.fieldKey));
@@ -927,7 +931,9 @@ export async function matchStoredSecretsToObservedTargets(pageRef, targets, cata
             forms.push({
                 pageRef,
                 scopeRef: formScopeRef(planned.fields, targetByRef),
+                pageFormSelector: formPageFormSelector(planned.fields, targetByRef),
                 purpose: kind,
+                ...(kind === 'login' ? { loginStep: planned.loginStep ?? 'full' } : {}),
                 fields: planned.fields,
                 storedSecretCandidates,
                 observedAt: nextObservedAt,

package/dist/secrets/matching-helpers.d.ts

@@ -0,0 +1,13 @@
+import type { TargetDescriptor } from '../runtime-state.js';
+export declare function normalizeText(value: string | undefined): string;
+export declare function normalizeFieldKey(value: string | undefined): string;
+export declare function canonicalFieldKeyOf(value: string | undefined): string;
+export declare function fieldKeyEvidenceTerms(value: string | undefined): string[];
+export declare function selectorSignalFragments(selector: string): string[];
+export declare function selectorRootOf(target: Pick<TargetDescriptor, 'context'>): string | null;
+export declare function signalValuesOf(target: TargetDescriptor, options?: {
+    maxChars?: number;
+}): string[];
+export declare function directFieldSignalValuesOf(target: TargetDescriptor): string[];
+export declare function frameKeyOf(target: Pick<TargetDescriptor, 'framePath'>): string | null;
+//# sourceMappingURL=matching-helpers.d.ts.map

package/dist/secrets/matching-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matching-helpers.d.ts","sourceRoot":"","sources":["../../src/secrets/matching-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAmC5D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAE/D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAInE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAOrE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAuBzE;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CASlE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,CAkBvF;AAqBD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,MAAM,EAAE,CA4BV;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAY5E;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,GAAG,MAAM,GAAG,IAAI,CAMrF"}

package/dist/secrets/matching-helpers.js

@@ -0,0 +1,147 @@
+const TARGET_SIGNAL_MAX_CHARS = 220;
+const GENERIC_SHELL_SELECTOR_ROOTS = new Set(['#__next', '#root', '#app', '#app-root']);
+const CANONICAL_FIELD_KEY_VARIANTS = {
+    email: ['email', 'e_mail', 'email_address', 'account_email', 'contact_email'],
+    first_name: ['first_name', 'given_name', 'forename'],
+    last_name: ['last_name', 'family_name', 'surname'],
+    full_name: ['full_name'],
+    date_of_birth: ['date_of_birth', 'birth_date', 'dob', 'birthday'],
+    phone: ['phone', 'phone_number', 'mobile'],
+    country: ['country', 'country_region'],
+    nationality: ['nationality', 'citizenship'],
+};
+const CANONICAL_FIELD_KEY_LABELS = {
+    email: ['email', 'email address', 'account email', 'contact email'],
+    first_name: ['first name', 'given name', 'forename'],
+    last_name: ['last name', 'family name', 'surname'],
+    full_name: ['full name'],
+    date_of_birth: ['date of birth', 'birth date', 'dob', 'birthday'],
+    phone: ['phone', 'phone number', 'mobile'],
+    country: ['country', 'country region'],
+    nationality: ['nationality', 'citizenship'],
+};
+const FIELD_KEY_CANONICAL_MAP = new Map();
+for (const [canonicalFieldKey, variants] of Object.entries(CANONICAL_FIELD_KEY_VARIANTS)) {
+    FIELD_KEY_CANONICAL_MAP.set(canonicalFieldKey, canonicalFieldKey);
+    for (const variant of variants) {
+        FIELD_KEY_CANONICAL_MAP.set(variant, canonicalFieldKey);
+    }
+}
+export function normalizeText(value) {
+    return value?.replace(/\s+/g, ' ').trim().toLowerCase() ?? '';
+}
+export function normalizeFieldKey(value) {
+    return normalizeText(value)
+        .replace(/[^a-z0-9]+/g, '_')
+        .replace(/^_+|_+$/g, '');
+}
+export function canonicalFieldKeyOf(value) {
+    const normalized = normalizeFieldKey(value);
+    if (!normalized) {
+        return '';
+    }
+    return FIELD_KEY_CANONICAL_MAP.get(normalized) ?? normalized;
+}
+export function fieldKeyEvidenceTerms(value) {
+    const terms = new Set();
+    const normalized = normalizeFieldKey(value);
+    const canonical = canonicalFieldKeyOf(value);
+    const push = (candidate) => {
+        const next = normalizeText(candidate);
+        if (next) {
+            terms.add(next);
+        }
+    };
+    if (normalized) {
+        push(normalized.replace(/_/g, ' '));
+    }
+    if (canonical) {
+        push(canonical.replace(/_/g, ' '));
+    }
+    for (const label of CANONICAL_FIELD_KEY_LABELS[canonical] ?? []) {
+        push(label);
+    }
+    return [...terms];
+}
+export function selectorSignalFragments(selector) {
+    const fragments = [];
+    for (const match of selector.matchAll(/\[name="([^"]+)"\]/g)) {
+        fragments.push(match[1] ?? '');
+    }
+    for (const match of selector.matchAll(/#([a-zA-Z0-9_-]+)/g)) {
+        fragments.push(match[1] ?? '');
+    }
+    return fragments;
+}
+export function selectorRootOf(target) {
+    const selectors = [
+        target.context?.item?.selector,
+        target.context?.container?.selector,
+        target.context?.landmark?.selector,
+    ].filter((value) => typeof value === 'string' && value.length > 0);
+    for (const selector of selectors) {
+        for (const match of selector.matchAll(/#[A-Za-z0-9_-]+/g)) {
+            const candidate = match[0]?.trim().toLowerCase();
+            if (!candidate || GENERIC_SHELL_SELECTOR_ROOTS.has(candidate)) {
+                continue;
+            }
+            return match[0];
+        }
+    }
+    return null;
+}
+function pushSignalValue(values, value, options = {}) {
+    const normalized = normalizeText(value);
+    if (!normalized) {
+        return;
+    }
+    const maxChars = options.maxChars;
+    if (maxChars && normalized.length > maxChars) {
+        values.add(`${normalized.slice(0, maxChars - 1)}…`);
+        return;
+    }
+    values.add(normalized);
+}
+export function signalValuesOf(target, options = {}) {
+    const values = new Set();
+    const maxChars = options.maxChars ?? TARGET_SIGNAL_MAX_CHARS;
+    pushSignalValue(values, target.label, { maxChars });
+    pushSignalValue(values, target.displayLabel, { maxChars });
+    pushSignalValue(values, target.kind, { maxChars });
+    pushSignalValue(values, target.semantics?.role, { maxChars });
+    pushSignalValue(values, target.semantics?.name, { maxChars });
+    pushSignalValue(values, target.context?.hintText, { maxChars });
+    pushSignalValue(values, target.context?.group?.label, { maxChars });
+    pushSignalValue(values, target.context?.group?.text, { maxChars });
+    pushSignalValue(values, target.context?.container?.label, { maxChars });
+    pushSignalValue(values, target.context?.container?.text, { maxChars });
+    pushSignalValue(values, target.context?.landmark?.label, { maxChars });
+    pushSignalValue(values, target.context?.landmark?.text, { maxChars });
+    for (const candidate of target.locatorCandidates) {
+        pushSignalValue(values, candidate.name, { maxChars });
+        pushSignalValue(values, candidate.value, { maxChars });
+        if (candidate.strategy === 'css' || candidate.strategy === 'xpath') {
+            for (const fragment of selectorSignalFragments(candidate.value)) {
+                pushSignalValue(values, fragment, { maxChars });
+            }
+        }
+    }
+    return [...values];
+}
+export function directFieldSignalValuesOf(target) {
+    const values = new Set();
+    pushSignalValue(values, target.label);
+    pushSignalValue(values, target.displayLabel);
+    pushSignalValue(values, target.placeholder);
+    pushSignalValue(values, target.inputName);
+    pushSignalValue(values, target.inputType);
+    pushSignalValue(values, target.autocomplete);
+    pushSignalValue(values, target.semantics?.name);
+    return [...values];
+}
+export function frameKeyOf(target) {
+    if (!target.framePath || target.framePath.length === 0) {
+        return null;
+    }
+    return target.framePath.join('>');
+}

package/dist/secrets/observed-field-resolution.d.ts

@@ -0,0 +1,43 @@
+import type { TargetDescriptor } from '../runtime-state.js';
+export type ObservedFieldValueType = 'text' | 'secret' | 'date' | 'number' | 'email' | 'url';
+export type ObservedFieldValueSource = 'profile_facts' | 'session_open_value';
+export interface ObservedFieldCandidate {
+    candidateRef: string;
+    fieldKey: string;
+    value: unknown;
+    source: ObservedFieldValueSource;
+    type?: ObservedFieldValueType;
+    label?: string;
+    semanticTags?: string[];
+    applicability?: {
+        target: 'global' | 'host';
+        value?: string;
+    };
+    pageFormSelector?: string;
+    selectorRoot?: string;
+}
+export interface ResolveObservedFieldOptions {
+    host?: string;
+    protectedTargetRefs?: ReadonlySet<string>;
+    minimumScore?: number;
+    clearWinnerDelta?: number;
+}
+export type ResolveObservedFieldResult = {
+    status: 'matched';
+    targetRef: string;
+    fieldKey: string;
+    value: string | number;
+    source: ObservedFieldValueSource;
+    confidence: 'high' | 'medium';
+    candidateRef: string;
+} | {
+    status: 'no_match';
+    targetRef: string;
+    reason: 'protected_target' | 'no_candidate' | 'scope_ineligible' | 'incompatible_shape' | 'low_confidence';
+} | {
+    status: 'ambiguous';
+    targetRef: string;
+    candidates: string[];
+};
+export declare function resolveObservedField(target: TargetDescriptor, candidates: ReadonlyArray<ObservedFieldCandidate>, options?: ResolveObservedFieldOptions): ResolveObservedFieldResult;
+//# sourceMappingURL=observed-field-resolution.d.ts.map

package/dist/secrets/observed-field-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observed-field-resolution.d.ts","sourceRoot":"","sources":["../../src/secrets/observed-field-resolution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAU5D,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;AAC7F,MAAM,MAAM,wBAAwB,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAE9E,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,wBAAwB,CAAC;IACjC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE;QACd,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,0BAA0B,GAClC;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,MAAM,EAAE,wBAAwB,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EACF,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,oBAAoB,GACpB,gBAAgB,CAAC;CACtB,GACD;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AA2ON,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,aAAa,CAAC,sBAAsB,CAAC,EACjD,OAAO,GAAE,2BAAgC,GACxC,0BAA0B,CAsE5B"}