@nuanu-ai/agentbrowse 0.2.7 → 0.2.8

package/dist/secrets/mock-agentpay-backend.js

@@ -0,0 +1,87 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { normalizeCatalogLookupValue, storedSecretAppliesToHost, } from './catalog-applicability.js';
+const DEFAULT_MOCK_SECRET_STORE_PATH = fileURLToPath(new URL('./mock-agentpay-stored-secrets.json', import.meta.url));
+const USER_MOCK_SECRET_STORE_PATH = join(homedir(), '.agentpay', 'mock-stored-secrets.json');
+let testMockSecretStorePath;
+export function setMockSecretStorePathForTests(storePath) {
+    testMockSecretStorePath = storePath ? resolve(storePath) : undefined;
+}
+function loadMockStoredSecretRecords() {
+    const storePath = testMockSecretStorePath
+        ? testMockSecretStorePath
+        : existsSync(USER_MOCK_SECRET_STORE_PATH)
+            ? USER_MOCK_SECRET_STORE_PATH
+            : DEFAULT_MOCK_SECRET_STORE_PATH;
+    return JSON.parse(readFileSync(storePath, 'utf-8'));
+}
+export function normalizeMerchantKey(value) {
+    return normalizeCatalogLookupValue(value);
+}
+export function resolveHostFromInput(value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        throw new Error('mock_secret_catalog_host_required');
+    }
+    try {
+        const parsed = new URL(trimmed);
+        if (!parsed.hostname) {
+            throw new Error('missing_hostname');
+        }
+        return normalizeCatalogLookupValue(parsed.hostname);
+    }
+    catch {
+        return normalizeCatalogLookupValue(trimmed);
+    }
+}
+function preferenceScore(metadata, merchantKey) {
+    return metadata.preferredForMerchantKeys?.some((candidate) => normalizeCatalogLookupValue(candidate) === merchantKey)
+        ? 1
+        : 0;
+}
+function stripValues(record) {
+    return {
+        ...record.metadata,
+        fieldKeys: [...record.metadata.fieldKeys],
+        fieldPolicies: record.metadata.fieldPolicies
+            ? { ...record.metadata.fieldPolicies }
+            : undefined,
+        preferredForMerchantKeys: record.metadata.preferredForMerchantKeys
+            ? [...record.metadata.preferredForMerchantKeys]
+            : undefined,
+    };
+}
+export function listMockStoredSecretsForHost(hostOrUrl, options = {}) {
+    const host = resolveHostFromInput(hostOrUrl);
+    const merchantKey = normalizeMerchantKey(options.merchantKey ?? host);
+    return loadMockStoredSecretRecords()
+        .filter((record) => storedSecretAppliesToHost(record.metadata, host))
+        .sort((left, right) => {
+        const preferenceDelta = preferenceScore(right.metadata, merchantKey) - preferenceScore(left.metadata, merchantKey);
+        if (preferenceDelta !== 0) {
+            return preferenceDelta;
+        }
+        return left.metadata.displayName.localeCompare(right.metadata.displayName);
+    })
+        .map(stripValues);
+}
+export function syncMockSecretCatalog(hostOrUrl, options = {}) {
+    const host = resolveHostFromInput(hostOrUrl);
+    return {
+        source: 'mock',
+        host,
+        syncedAt: options.syncedAt ?? new Date().toISOString(),
+        storedSecrets: listMockStoredSecretsForHost(host, {
+            merchantKey: options.merchantKey ?? host,
+        }),
+    };
+}
+export function resolveMockStoredSecretValues(storedSecretRef) {
+    const match = loadMockStoredSecretRecords().find((record) => record.metadata.storedSecretRef === storedSecretRef);
+    if (!match) {
+        return null;
+    }
+    return { ...match.values };
+}

package/dist/secrets/mock-agentpay-cabinet.d.ts

@@ -0,0 +1,43 @@
+import type { SecretIntentSnapshot } from './types.js';
+export interface MockSecretIntentRecord extends SecretIntentSnapshot {
+    approvalChannel: 'agentpay-cabinet';
+    host: string;
+    pageRef: string;
+    pollCount: number;
+}
+interface MockSecretIntentStore {
+    version: 1;
+    nextIntent: number;
+    intents: Record<string, MockSecretIntentRecord>;
+}
+interface IntentLifecycleOptions {
+    now?: string;
+}
+export interface CreateMockSecretIntentInput extends IntentLifecycleOptions {
+    fillRef: string;
+    storedSecretRef: string;
+    host: string;
+    pageRef: string;
+    scopeRef?: string;
+    expiresAt?: string;
+}
+export interface CreateMockSecretIntentResult {
+    intent: MockSecretIntentRecord;
+    reused: boolean;
+}
+declare function readMockStore(): MockSecretIntentStore;
+declare function defaultExpiry(createdAt: string): string;
+declare function progressIntentStatus(record: MockSecretIntentRecord, now: string): MockSecretIntentRecord;
+export declare function createOrReuseMockSecretIntent(input: CreateMockSecretIntentInput): CreateMockSecretIntentResult;
+export declare function getMockSecretIntent(intentId: string, options?: IntentLifecycleOptions): MockSecretIntentRecord | null;
+export declare function approveMockSecretIntent(intentId: string, options?: IntentLifecycleOptions): MockSecretIntentRecord;
+export declare function denyMockSecretIntent(intentId: string, options?: IntentLifecycleOptions): MockSecretIntentRecord;
+export declare function markMockSecretIntentCompleted(intentId: string, options?: IntentLifecycleOptions): MockSecretIntentRecord;
+export declare function resetMockSecretIntentStore(): void;
+export declare const __testMockCabinet: {
+    defaultExpiry: typeof defaultExpiry;
+    progressIntentStatus: typeof progressIntentStatus;
+    readMockStore: typeof readMockStore;
+};
+export {};
+//# sourceMappingURL=mock-agentpay-cabinet.d.ts.map

package/dist/secrets/mock-agentpay-cabinet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-agentpay-cabinet.d.ts","sourceRoot":"","sources":["../../src/secrets/mock-agentpay-cabinet.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAsB,MAAM,YAAY,CAAC;AAO3E,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;IAClE,eAAe,EAAE,kBAAkB,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,qBAAqB;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CACjD;AAED,UAAU,sBAAsB;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;CACjB;AAQD,iBAAS,aAAa,IAAI,qBAAqB,CAuB9C;AAWD,iBAAS,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEhD;AAUD,iBAAS,oBAAoB,CAC3B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,sBAAsB,CAmCxB;AAUD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,2BAA2B,GACjC,4BAA4B,CAuC9B;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,sBAA2B,GACnC,sBAAsB,GAAG,IAAI,CAW/B;AAqCD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,sBAA2B,GACnC,sBAAsB,CAExB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,sBAA2B,GACnC,sBAAsB,CAExB;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,sBAA2B,GACnC,sBAAsB,CAexB;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAIjD;AAED,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC"}

package/dist/secrets/mock-agentpay-cabinet.js

@@ -0,0 +1,195 @@
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const MOCK_CABINET_DIR = join(homedir(), '.agentpay');
+const MOCK_CABINET_PATH = join(MOCK_CABINET_DIR, 'mock-secret-intents.json');
+const APPROVAL_CHANNEL = 'agentpay-cabinet';
+const TERMINAL_INTENT_STATUSES = new Set(['approved', 'denied', 'timed_out', 'completed']);
+function ensureMockCabinetDir() {
+    if (!existsSync(MOCK_CABINET_DIR)) {
+        mkdirSync(MOCK_CABINET_DIR, { recursive: true });
+    }
+}
+function readMockStore() {
+    if (!existsSync(MOCK_CABINET_PATH)) {
+        return {
+            version: 1,
+            nextIntent: 1,
+            intents: {},
+        };
+    }
+    try {
+        const raw = JSON.parse(readFileSync(MOCK_CABINET_PATH, 'utf-8'));
+        return {
+            version: 1,
+            nextIntent: Number.isFinite(raw.nextIntent) ? Number(raw.nextIntent) : 1,
+            intents: raw.intents ?? {},
+        };
+    }
+    catch {
+        return {
+            version: 1,
+            nextIntent: 1,
+            intents: {},
+        };
+    }
+}
+function writeMockStore(store) {
+    ensureMockCabinetDir();
+    writeFileSync(MOCK_CABINET_PATH, JSON.stringify(store, null, 2));
+}
+function nowIso(value) {
+    return value ?? new Date().toISOString();
+}
+function defaultExpiry(createdAt) {
+    return new Date(new Date(createdAt).getTime() + 15 * 60_000).toISOString();
+}
+function isExpired(record, now) {
+    if (!record.expiresAt || TERMINAL_INTENT_STATUSES.has(record.status)) {
+        return false;
+    }
+    return new Date(record.expiresAt).getTime() <= new Date(now).getTime();
+}
+function progressIntentStatus(record, now) {
+    if (isExpired(record, now)) {
+        return {
+            ...record,
+            status: 'timed_out',
+        };
+    }
+    switch (record.status) {
+        case 'pending':
+            return {
+                ...record,
+                status: 'checking',
+                pollCount: record.pollCount + 1,
+            };
+        case 'checking':
+            return {
+                ...record,
+                status: 'notify',
+                pollCount: record.pollCount + 1,
+            };
+        case 'notify':
+            return {
+                ...record,
+                status: 'confirmation',
+                pollCount: record.pollCount + 1,
+            };
+        case 'confirmation':
+            return {
+                ...record,
+                pollCount: record.pollCount + 1,
+            };
+        default:
+            return record;
+    }
+}
+function isActiveIntentStatus(status) {
+    return !TERMINAL_INTENT_STATUSES.has(status);
+}
+function nextIntentId(store) {
+    return `si_mock_${store.nextIntent++}`;
+}
+export function createOrReuseMockSecretIntent(input) {
+    const store = readMockStore();
+    const createdAt = nowIso(input.now);
+    const existing = Object.values(store.intents).find((intent) => intent.fillRef === input.fillRef &&
+        intent.storedSecretRef === input.storedSecretRef &&
+        isActiveIntentStatus(intent.status));
+    if (existing) {
+        return {
+            intent: existing,
+            reused: true,
+        };
+    }
+    const intentId = nextIntentId(store);
+    const intent = {
+        intentId,
+        fillRef: input.fillRef,
+        storedSecretRef: input.storedSecretRef,
+        status: 'pending',
+        approvalChannel: APPROVAL_CHANNEL,
+        host: input.host,
+        pageRef: input.pageRef,
+        scopeRef: input.scopeRef,
+        createdAt,
+        expiresAt: input.expiresAt ?? defaultExpiry(createdAt),
+        pollCount: 0,
+    };
+    store.intents[intentId] = intent;
+    writeMockStore(store);
+    return {
+        intent,
+        reused: false,
+    };
+}
+export function getMockSecretIntent(intentId, options = {}) {
+    const store = readMockStore();
+    const current = store.intents[intentId];
+    if (!current) {
+        return null;
+    }
+    const next = progressIntentStatus(current, nowIso(options.now));
+    store.intents[intentId] = next;
+    writeMockStore(store);
+    return next;
+}
+function transitionIntentDecision(intentId, status, options = {}) {
+    const store = readMockStore();
+    const current = store.intents[intentId];
+    if (!current) {
+        throw new Error('secret_intent_not_found');
+    }
+    if (isExpired(current, nowIso(options.now))) {
+        const timedOut = {
+            ...current,
+            status: 'timed_out',
+        };
+        store.intents[intentId] = timedOut;
+        writeMockStore(store);
+        throw new Error('secret_intent_timed_out');
+    }
+    if (!(current.status === 'notify' || current.status === 'confirmation')) {
+        throw new Error(`secret_intent_not_awaiting_decision:${current.status}`);
+    }
+    const decided = {
+        ...current,
+        status,
+        approvedAt: status === 'approved' ? nowIso(options.now) : current.approvedAt,
+    };
+    store.intents[intentId] = decided;
+    writeMockStore(store);
+    return decided;
+}
+export function approveMockSecretIntent(intentId, options = {}) {
+    return transitionIntentDecision(intentId, 'approved', options);
+}
+export function denyMockSecretIntent(intentId, options = {}) {
+    return transitionIntentDecision(intentId, 'denied', options);
+}
+export function markMockSecretIntentCompleted(intentId, options = {}) {
+    const store = readMockStore();
+    const current = store.intents[intentId];
+    if (!current) {
+        throw new Error('secret_intent_not_found');
+    }
+    const completed = {
+        ...current,
+        status: 'completed',
+        completedAt: nowIso(options.now),
+    };
+    store.intents[intentId] = completed;
+    writeMockStore(store);
+    return completed;
+}
+export function resetMockSecretIntentStore() {
+    if (existsSync(MOCK_CABINET_PATH)) {
+        unlinkSync(MOCK_CABINET_PATH);
+    }
+}
+export const __testMockCabinet = {
+    defaultExpiry,
+    progressIntentStatus,
+    readMockStore,
+};

package/dist/secrets/protected-artifact-guard.d.ts

@@ -0,0 +1,25 @@
+import type { ProtectedExposureState } from '../runtime-state.js';
+export interface ProtectedArtifactsSuppressed {
+    suppressed: true;
+    outcomeType: 'protected_exposure_active';
+    reason: string;
+    pageRef: string;
+    fillRef: string;
+    intentId: string;
+    activatedAt: string;
+    exposureReason: ProtectedExposureState['reason'];
+    message: string;
+}
+export declare function buildProtectedArtifactsSuppressed(exposure: ProtectedExposureState): ProtectedArtifactsSuppressed;
+export declare function buildProtectedScreenshotBlockedResult(exposure: ProtectedExposureState): {
+    error: string;
+    outcomeType: string;
+    reason: string;
+    pageRef: string;
+    fillRef: string;
+    intentId: string;
+    activatedAt: string;
+    exposureReason: "protected_fill_success" | "protected_fill_binding_stale" | "protected_fill_validation_failed" | "protected_fill_unexpected_error";
+    message: string;
+};
+//# sourceMappingURL=protected-artifact-guard.d.ts.map

package/dist/secrets/protected-artifact-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-artifact-guard.d.ts","sourceRoot":"","sources":["../../src/secrets/protected-artifact-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,IAAI,CAAC;IACjB,WAAW,EAAE,2BAA2B,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,sBAAsB,GAC/B,4BAA4B,CAc9B;AAED,wBAAgB,qCAAqC,CAAC,QAAQ,EAAE,sBAAsB;;;;;;;;;;EAcrF"}

package/dist/secrets/protected-artifact-guard.js

@@ -0,0 +1,26 @@
+export function buildProtectedArtifactsSuppressed(exposure) {
+    return {
+        suppressed: true,
+        outcomeType: 'protected_exposure_active',
+        reason: 'Failure artifacts were suppressed because protected values may still be visible on the page.',
+        pageRef: exposure.pageRef,
+        fillRef: exposure.fillRef,
+        intentId: exposure.intentId,
+        activatedAt: exposure.activatedAt,
+        exposureReason: exposure.reason,
+        message: 'Failure artifacts were suppressed because protected values may still be visible on the page.',
+    };
+}
+export function buildProtectedScreenshotBlockedResult(exposure) {
+    return {
+        error: 'protected_screenshot_blocked',
+        outcomeType: 'protected_exposure_active',
+        reason: 'Screenshot capture is currently restricted because protected values may still be visible on the page.',
+        pageRef: exposure.pageRef,
+        fillRef: exposure.fillRef,
+        intentId: exposure.intentId,
+        activatedAt: exposure.activatedAt,
+        exposureReason: exposure.reason,
+        message: 'Screenshot capture is blocked because protected values may still be visible on the page.',
+    };
+}

package/dist/secrets/protected-bindings.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import { type ProtectedBindingValueHint } from './types.js';
+export declare const protectedBindingValueHintSchema: z.ZodEnum<["direct", "full_name.given", "full_name.family"]>;
+export declare function normalizeProtectedBindingValueHint(fieldKey: string, valueHint?: string | null): ProtectedBindingValueHint;
+export declare function protectedBindingKey(binding: {
+    targetRef: string;
+    fieldKey: string;
+    valueHint?: string | null;
+}): string;
+//# sourceMappingURL=protected-bindings.d.ts.map

package/dist/secrets/protected-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-bindings.d.ts","sourceRoot":"","sources":["../../src/secrets/protected-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,+BAA+B,8DAAwC,CAAC;AAErF,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,yBAAyB,CAS3B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GACA,MAAM,CAMR"}

package/dist/secrets/protected-bindings.js

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+import { PROTECTED_BINDING_VALUE_HINTS, } from './types.js';
+export const protectedBindingValueHintSchema = z.enum(PROTECTED_BINDING_VALUE_HINTS);
+export function normalizeProtectedBindingValueHint(fieldKey, valueHint) {
+    if (fieldKey === 'full_name' &&
+        (valueHint === 'full_name.given' || valueHint === 'full_name.family')) {
+        return valueHint;
+    }
+    return 'direct';
+}
+export function protectedBindingKey(binding) {
+    return [
+        binding.targetRef,
+        binding.fieldKey,
+        normalizeProtectedBindingValueHint(binding.fieldKey, binding.valueHint),
+    ].join(':');
+}

package/dist/secrets/protected-field-values.d.ts

@@ -0,0 +1,13 @@
+import type { Page } from 'playwright-core';
+import type { TargetDescriptor } from '../runtime-state.js';
+import type { FillableFormFieldBinding, StoredSecretFieldPolicies } from './types.js';
+export declare function resolveAssistedProtectedFieldValues(params: {
+    page: Page;
+    bindings: ReadonlyArray<{
+        binding: FillableFormFieldBinding;
+        target: TargetDescriptor | null;
+    }>;
+    protectedValues: Record<string, string>;
+    fieldPolicies?: StoredSecretFieldPolicies;
+}): Promise<Map<string, string>>;
+//# sourceMappingURL=protected-field-values.d.ts.map

package/dist/secrets/protected-field-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-field-values.d.ts","sourceRoot":"","sources":["../../src/secrets/protected-field-values.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAM5D,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AA0CpB,wBAAsB,mCAAmC,CAAC,MAAM,EAAE;IAChE,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,aAAa,CAAC;QACtB,OAAO,EAAE,wBAAwB,CAAC;QAClC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;KACjC,CAAC,CAAC;IACH,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,yBAAyB,CAAC;CAC3C,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiE/B"}

package/dist/secrets/protected-field-values.js

@@ -0,0 +1,100 @@
+import { z } from 'zod';
+import { AgentpayStagehandLlmClient } from '../agentpay-stagehand-llm.js';
+import { tryResolveAgentpayGatewayConfig } from '../agentpay-gateway.js';
+import { resolveProtectedFieldPolicy } from './field-policy.js';
+import { protectedBindingKey, protectedBindingValueHintSchema, } from './protected-bindings.js';
+const protectedFieldValuesSchema = z.object({
+    values: z
+        .array(z.object({
+        targetRef: z.string(),
+        fieldKey: z.string(),
+        valueHint: protectedBindingValueHintSchema.optional(),
+        value: z.string(),
+        confidence: z.enum(['high', 'medium', 'low']),
+    }))
+        .max(24),
+});
+function buildBindingSummary(binding, target) {
+    const parts = [
+        `targetRef=${JSON.stringify(binding.targetRef)}`,
+        `fieldKey=${JSON.stringify(binding.fieldKey)}`,
+        `valueHint=${JSON.stringify(binding.valueHint ?? 'direct')}`,
+    ];
+    if (target?.label)
+        parts.push(`label=${JSON.stringify(target.label)}`);
+    if (target?.displayLabel)
+        parts.push(`displayLabel=${JSON.stringify(target.displayLabel)}`);
+    if (target?.kind)
+        parts.push(`kind=${JSON.stringify(target.kind)}`);
+    if (target?.semantics?.role)
+        parts.push(`role=${JSON.stringify(target.semantics.role)}`);
+    if (target?.controlFamily)
+        parts.push(`controlFamily=${JSON.stringify(target.controlFamily)}`);
+    if (target?.context?.hintText)
+        parts.push(`hintText=${JSON.stringify(target.context.hintText)}`);
+    if (target?.context?.group?.label) {
+        parts.push(`groupLabel=${JSON.stringify(target.context.group.label)}`);
+    }
+    if (target?.context?.container?.label) {
+        parts.push(`containerLabel=${JSON.stringify(target.context.container.label)}`);
+    }
+    return parts.join(' | ');
+}
+export async function resolveAssistedProtectedFieldValues(params) {
+    const assistedBindings = params.bindings.filter(({ binding }) => {
+        return resolveProtectedFieldPolicy(params.fieldPolicies, binding.fieldKey) === 'llm_assisted';
+    });
+    if (assistedBindings.length === 0) {
+        return new Map();
+    }
+    const gateway = tryResolveAgentpayGatewayConfig();
+    if (!gateway) {
+        throw new Error('protected_field_value_resolver_gateway_missing');
+    }
+    const client = new AgentpayStagehandLlmClient(gateway);
+    const pageLocale = await params.page
+        .evaluate(() => document.documentElement.lang || document.body?.lang || '')
+        .catch(() => '');
+    const prompt = [
+        'You are resolving UI-ready values for already matched protected fields.',
+        'Do not invent new bindings. Use only the provided targetRef values.',
+        'Return one resolved value per binding.',
+        'Use page language, target labels, and field hints to adapt the stored value to the visible UI representation.',
+        'Examples:',
+        '- full_name + valueHint=full_name.given -> return only the given/first-name part',
+        '- full_name + valueHint=full_name.family -> return only the family/last-name part',
+        '- nationality or issuing_country may require a localized UI value such as Россия for RU',
+        'If unsure, return confidence=low for that binding.',
+        '',
+        `pageLocale=${JSON.stringify(pageLocale)}`,
+        'Bindings:',
+        ...assistedBindings.map(({ binding, target }) => {
+            const storedValue = params.protectedValues[binding.fieldKey] ?? '';
+            return `${buildBindingSummary(binding, target)} | storedValue=${JSON.stringify(storedValue)}`;
+        }),
+    ].join('\n');
+    const result = await client.createChatCompletion({
+        logger: () => { },
+        options: {
+            messages: [{ role: 'user', content: prompt }],
+            response_model: {
+                name: 'ProtectedFieldValues',
+                schema: protectedFieldValuesSchema,
+            },
+        },
+    });
+    const allowedKeys = new Set(assistedBindings.map(({ binding }) => protectedBindingKey(binding)));
+    const resolvedValues = new Map();
+    for (const entry of result.data.values) {
+        const key = protectedBindingKey(entry);
+        if (!allowedKeys.has(key) || entry.confidence === 'low') {
+            continue;
+        }
+        const value = entry.value.trim();
+        if (!value) {
+            continue;
+        }
+        resolvedValues.set(key, value);
+    }
+    return resolvedValues;
+}

package/dist/secrets/protected-fill.d.ts

@@ -0,0 +1,47 @@
+import type { Page } from 'playwright-core';
+import type { BrowseSession } from '../session.js';
+import { type TargetDescriptor } from '../runtime-state.js';
+import type { PersistedFillableForm, StoredSecretFieldPolicies, StoredSecretFieldKey } from './types.js';
+type ProtectedFillAction = 'fill' | 'select' | 'type';
+export interface ProtectedFilledField {
+    fieldKey: StoredSecretFieldKey;
+    targetRef: string;
+}
+export interface ProtectedFieldError extends ProtectedFilledField {
+    reason: 'client_validation_rejected' | 'value_not_applied';
+    validationTextRedacted?: true;
+}
+type ProtectedBindingStaleReason = 'target_missing' | 'target_not_live' | 'page_signature_mismatch' | 'dom_signature_mismatch' | 'locator_resolution_failed' | 'target_blocked';
+export type ProtectedFillExecutionResult = {
+    kind: 'success';
+    filledFields: ProtectedFilledField[];
+} | {
+    kind: 'binding_stale';
+    targetRef: string;
+    fieldKeys: StoredSecretFieldKey[];
+    reason: ProtectedBindingStaleReason;
+    attempts: string[];
+} | {
+    kind: 'validation_failed';
+    filledFields: ProtectedFilledField[];
+    fieldErrors: ProtectedFieldError[];
+} | {
+    kind: 'unexpected_error';
+    reason: 'missing_protected_value' | 'unsupported_protected_field_group' | 'deterministic_only_resolution_failed' | 'assisted_value_resolution_failed' | 'action_failed';
+};
+declare function actionForTarget(target: TargetDescriptor): ProtectedFillAction;
+declare function formatCardExpiry(month: string, year: string): string;
+export declare function executeProtectedFill(params: {
+    session: BrowseSession;
+    page: Page;
+    fillableForm: PersistedFillableForm;
+    protectedValues: Record<string, string>;
+    fieldPolicies?: StoredSecretFieldPolicies;
+}): Promise<ProtectedFillExecutionResult>;
+export declare const __testProtectedFill: {
+    actionForTarget: typeof actionForTarget;
+    formatCardExpiry: typeof formatCardExpiry;
+    resolveBindingValue: (fieldKeys: ReadonlyArray<StoredSecretFieldKey>, protectedValues: Record<string, string>) => string;
+};
+export {};
+//# sourceMappingURL=protected-fill.d.ts.map

package/dist/secrets/protected-fill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-fill.d.ts","sourceRoot":"","sources":["../../src/secrets/protected-fill.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAanF,OAAO,KAAK,EAEV,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAGpB,KAAK,mBAAmB,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,MAAM,EAAE,4BAA4B,GAAG,mBAAmB,CAAC;IAC3D,sBAAsB,CAAC,EAAE,IAAI,CAAC;CAC/B;AAED,KAAK,2BAA2B,GAC5B,gBAAgB,GAChB,iBAAiB,GACjB,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,gBAAgB,CAAC;AAarB,MAAM,MAAM,4BAA4B,GACpC;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,YAAY,EAAE,oBAAoB,EAAE,CAAC;CACtC,GACC;IACA,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC,MAAM,EAAE,2BAA2B,CAAC;IACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,GACD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,YAAY,EAAE,oBAAoB,EAAE,CAAC;IACrC,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACpC,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EACF,yBAAyB,GACzB,mCAAmC,GACnC,sCAAsC,GACtC,kCAAkC,GAClC,eAAe,CAAC;CACrB,CAAC;AAwHN,iBAAS,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,CActE;AAED,iBAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAI7D;AAkVD,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,IAAI,CAAC;IACX,YAAY,EAAE,qBAAqB,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,yBAAyB,CAAC;CAC3C,GAAG,OAAO,CAAC,4BAA4B,CAAC,CA4KxC;AAED,eAAO,MAAM,mBAAmB;;;qCAIjB,aAAa,CAAC,oBAAoB,CAAC,mBAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CAY1C,CAAC"}