@nuanu-ai/agentbrowse 0.2.7 → 0.2.8

package/dist/secrets/protected-fill.js

@@ -0,0 +1,512 @@
+import { getSurface, getTarget } from '../runtime-state.js';
+import { createAcceptanceProbe, rankLocatorCandidates, waitForAcceptanceProbe, } from '../commands/action-acceptance.js';
+import { buildLocator, resolveLocatorRoot } from '../commands/action-fallbacks.js';
+import { applyActionWithFallbacks } from '../commands/action-executor.js';
+import { normalizePageSignature, readLocatorDomSignature } from '../commands/descriptor-validation.js';
+import { resolveSurfaceScopeRoot } from '../commands/target-resolution.js';
+import { resolveProtectedFieldPolicy } from './field-policy.js';
+import { protectedBindingKey } from './protected-bindings.js';
+import { resolveAssistedProtectedFieldValues } from './protected-field-values.js';
+import { sortProtectedBindingsForExecution } from './fill-ordering.js';
+function targetUsesSurfaceAsPrimaryLocator(target, surface) {
+    const surfaceCandidateKeys = new Set(surface.locatorCandidates.map((candidate) => [candidate.strategy, candidate.name ?? '', candidate.value, candidate.attribute ?? '', candidate.scope ?? ''].join(':')));
+    return target.locatorCandidates.some((candidate) => surfaceCandidateKeys.has([candidate.strategy, candidate.name ?? '', candidate.value, candidate.attribute ?? '', candidate.scope ?? ''].join(':')));
+}
+function resolveLocatorRootForCandidate(baseRoot, defaultRoot, surfaceRoot, scope) {
+    if (scope === 'root') {
+        return baseRoot;
+    }
+    if (scope === 'surface') {
+        return surfaceRoot;
+    }
+    return defaultRoot;
+}
+async function prepareLocator(locator, action, strategy, attempts, options) {
+    const count = await locator.count().catch(() => 0);
+    if (count === 0) {
+        attempts.push(`resolve.skip:${strategy}:empty`);
+        return { locator: null };
+    }
+    if (count > 1) {
+        attempts.push(`resolve.skip:${strategy}:ambiguous:${count}`);
+        return { locator: null };
+    }
+    const resolvedLocator = locator.first();
+    const visible = await resolvedLocator.isVisible().catch(() => false);
+    if (!visible) {
+        attempts.push(`resolve.skip:${strategy}:hidden`);
+        return { locator: null };
+    }
+    const disabled = await resolvedLocator.isDisabled?.().catch(() => false);
+    if (disabled) {
+        attempts.push(`resolve.skip:${strategy}:disabled`);
+        return { locator: null, blockedReason: 'disabled' };
+    }
+    if (action === 'fill' || action === 'type') {
+        const editable = await resolvedLocator.isEditable().catch(() => false);
+        if (!editable) {
+            const descendants = resolvedLocator.locator('input:not([type="hidden"]), textarea, select, [contenteditable="true"]');
+            const descendantCount = await descendants.count().catch(() => 0);
+            const visibleEditableDescendants = [];
+            for (let index = 0; index < descendantCount; index += 1) {
+                const descendant = descendants.nth(index);
+                const descendantVisible = await descendant.isVisible().catch(() => false);
+                if (!descendantVisible) {
+                    continue;
+                }
+                const descendantEditable = await descendant.isEditable().catch(() => false);
+                if (!descendantEditable) {
+                    continue;
+                }
+                visibleEditableDescendants.push(descendant);
+            }
+            if (visibleEditableDescendants.length === 1) {
+                attempts.push(`resolve.descendant-editable:${strategy}`);
+                return { locator: visibleEditableDescendants[0] ?? null };
+            }
+            if (visibleEditableDescendants.length > 1) {
+                attempts.push(`resolve.skip:${strategy}:descendant-ambiguous:${visibleEditableDescendants.length}`);
+                return { locator: null };
+            }
+            const readonly = await resolvedLocator
+                .getAttribute?.('readonly')
+                .then((value) => value !== null)
+                .catch(() => false);
+            if (readonly && !options?.allowReadonlyFallback) {
+                attempts.push(`resolve.skip:${strategy}:readonly`);
+                return { locator: null, blockedReason: 'readonly' };
+            }
+        }
+    }
+    return { locator: resolvedLocator };
+}
+function actionForTarget(target) {
+    if (target.controlFamily === 'select') {
+        return 'select';
+    }
+    if (target.allowedActions.includes('fill')) {
+        return 'fill';
+    }
+    if (target.allowedActions.includes('type')) {
+        return 'type';
+    }
+    if (target.allowedActions.includes('select')) {
+        return 'select';
+    }
+    return 'fill';
+}
+function formatCardExpiry(month, year) {
+    const normalizedMonth = month.trim().padStart(2, '0');
+    const normalizedYear = year.trim().length > 2 ? year.trim().slice(-2) : year.trim().padStart(2, '0');
+    return `${normalizedMonth}/${normalizedYear}`;
+}
+function resolveBindingValue(fields, protectedValues, fieldPolicies, assistedValues) {
+    if (fields.length === 1) {
+        const field = fields[0];
+        const policy = resolveProtectedFieldPolicy(fieldPolicies, field.fieldKey);
+        if (policy === 'llm_assisted') {
+            const assistedValue = assistedValues.get(protectedBindingKey(field));
+            if (typeof assistedValue === 'string' && assistedValue.length > 0) {
+                return assistedValue;
+            }
+            throw new Error('assisted_value_resolution_failed');
+        }
+        if ((field.valueHint ?? 'direct') !== 'direct') {
+            throw new Error('deterministic_only_resolution_failed');
+        }
+        const value = protectedValues[field.fieldKey];
+        if (typeof value === 'string' && value.length > 0) {
+            return value;
+        }
+        throw new Error('missing_protected_value');
+    }
+    const includesExpiry = fields.some((field) => field.fieldKey === 'exp_month') &&
+        fields.some((field) => field.fieldKey === 'exp_year') &&
+        fields.length === 2;
+    if (includesExpiry) {
+        const month = protectedValues.exp_month;
+        const year = protectedValues.exp_year;
+        if (typeof month === 'string' &&
+            month.length > 0 &&
+            typeof year === 'string' &&
+            year.length > 0) {
+            return formatCardExpiry(month, year);
+        }
+        throw new Error('missing_protected_value');
+    }
+    throw new Error('unsupported_protected_field_group');
+}
+function flattenFilledFields(fieldKeys, targetRef) {
+    return fieldKeys.map((fieldKey) => ({
+        fieldKey,
+        targetRef,
+    }));
+}
+function buildProtectedValidationDetails(validationText) {
+    return validationText ? { validationTextRedacted: true } : {};
+}
+function shouldIgnoreNativeInvalidForTarget(target) {
+    return Array.isArray(target.framePath) && target.framePath.length > 0;
+}
+async function readValidationState(locator) {
+    const payload = await locator
+        .evaluate((element) => {
+        if (!(element instanceof HTMLElement)) {
+            return null;
+        }
+        const maybeControl = element instanceof HTMLInputElement ||
+            element instanceof HTMLTextAreaElement ||
+            element instanceof HTMLSelectElement
+            ? element
+            : null;
+        const validationMessage = maybeControl?.validationMessage?.trim() ?? '';
+        const describedByIds = (element.getAttribute('aria-describedby') ?? '')
+            .split(/\s+/)
+            .map((value) => value.trim())
+            .filter(Boolean);
+        const describedByText = describedByIds
+            .map((id) => element.ownerDocument?.getElementById(id)?.textContent?.trim() ?? '')
+            .filter(Boolean)
+            .join(' ');
+        const ariaInvalid = element.getAttribute('aria-invalid') === 'true';
+        const candidate = validationMessage || describedByText || '';
+        return {
+            validationText: candidate || undefined,
+            ariaInvalid,
+            invalid: ariaInvalid ||
+                Boolean(maybeControl &&
+                    typeof maybeControl.checkValidity === 'function' &&
+                    maybeControl.checkValidity() === false),
+        };
+    })
+        .catch(() => null);
+    if (!payload) {
+        return {
+            invalid: false,
+        };
+    }
+    return {
+        invalid: payload.invalid,
+        validationText: payload.validationText ||
+            (payload.ariaInvalid ? 'Field rejected by client-side validation.' : undefined),
+    };
+}
+function groupBindingsByTarget(fillableForm, session) {
+    const grouped = new Map();
+    for (const field of fillableForm.fields) {
+        const target = getTarget(session, field.targetRef);
+        if (!target) {
+            return null;
+        }
+        const existing = grouped.get(field.targetRef);
+        if (existing) {
+            existing.fields.push(field);
+            existing.fieldKeys.push(field.fieldKey);
+            continue;
+        }
+        grouped.set(field.targetRef, {
+            targetRef: field.targetRef,
+            fields: [field],
+            fieldKeys: [field.fieldKey],
+            target,
+        });
+    }
+    return sortProtectedBindingsForExecution(fillableForm.purpose, [...grouped.values()]);
+}
+async function prepareBindings(session, page, fillableForm) {
+    const groupedBindings = groupBindingsByTarget(fillableForm, session);
+    if (!groupedBindings) {
+        const firstField = fillableForm.fields[0];
+        return {
+            kind: 'binding_stale',
+            targetRef: firstField?.targetRef ?? 'unknown',
+            fieldKeys: firstField ? [firstField.fieldKey] : [],
+            reason: 'target_missing',
+            attempts: [],
+        };
+    }
+    const preparedBindings = [];
+    for (const binding of groupedBindings) {
+        const attempts = [];
+        const { target } = binding;
+        if (target.lifecycle !== 'live') {
+            return {
+                kind: 'binding_stale',
+                targetRef: binding.targetRef,
+                fieldKeys: [...binding.fieldKeys],
+                reason: 'target_not_live',
+                attempts,
+            };
+        }
+        if (target.pageSignature && normalizePageSignature(page.url()) !== target.pageSignature) {
+            attempts.push('stale.page-signature:before-fill');
+            return {
+                kind: 'binding_stale',
+                targetRef: binding.targetRef,
+                fieldKeys: [...binding.fieldKeys],
+                reason: 'page_signature_mismatch',
+                attempts,
+            };
+        }
+        const surface = target.surfaceRef ? getSurface(session, target.surfaceRef) : null;
+        const baseRoot = resolveLocatorRoot(page, target.framePath ?? surface?.framePath);
+        let locatorRoot = baseRoot;
+        let surfaceRoot = null;
+        if (surface) {
+            surfaceRoot = await resolveSurfaceScopeRoot(page, surface, attempts).catch(() => null);
+            if (surfaceRoot && !targetUsesSurfaceAsPrimaryLocator(target, surface)) {
+                locatorRoot = surfaceRoot;
+            }
+            else if (!surfaceRoot) {
+                attempts.push('surface.resolve.fallback:page');
+            }
+        }
+        let resolvedLocator = null;
+        let sawDomSignatureMismatch = false;
+        let sawBlockedTarget = false;
+        const action = actionForTarget(target);
+        for (const candidate of rankLocatorCandidates(target.locatorCandidates, action)) {
+            const candidateRoot = resolveLocatorRootForCandidate(baseRoot, locatorRoot, surfaceRoot, candidate.scope);
+            if (!candidateRoot) {
+                attempts.push(`resolve.skip:${candidate.strategy}:surface-unavailable`);
+                continue;
+            }
+            const locator = buildLocator(candidateRoot, candidate);
+            if (!locator) {
+                continue;
+            }
+            const prepared = await prepareLocator(locator, action, candidate.strategy, attempts, {
+                allowReadonlyFallback: action === 'fill' && target.controlFamily === 'datepicker',
+            });
+            if (prepared.blockedReason === 'disabled' || prepared.blockedReason === 'readonly') {
+                sawBlockedTarget = true;
+            }
+            if (!prepared.locator) {
+                continue;
+            }
+            if (target.domSignature) {
+                const liveSignature = await readLocatorDomSignature(prepared.locator).catch(() => null);
+                if (liveSignature && liveSignature !== target.domSignature) {
+                    sawDomSignatureMismatch = true;
+                    attempts.push(`domSignature.mismatch:${candidate.strategy}`);
+                    continue;
+                }
+            }
+            resolvedLocator = prepared.locator;
+            attempts.push(`resolve:${candidate.strategy}`);
+            break;
+        }
+        if (!resolvedLocator) {
+            return {
+                kind: 'binding_stale',
+                targetRef: binding.targetRef,
+                fieldKeys: [...binding.fieldKeys],
+                reason: sawDomSignatureMismatch
+                    ? 'dom_signature_mismatch'
+                    : sawBlockedTarget
+                        ? 'target_blocked'
+                        : 'locator_resolution_failed',
+                attempts,
+            };
+        }
+        preparedBindings.push({
+            targetRef: binding.targetRef,
+            fields: [...binding.fields],
+            fieldKeys: [...binding.fieldKeys],
+            action,
+            target,
+            root: locatorRoot,
+            locator: resolvedLocator,
+            attempts,
+        });
+    }
+    return preparedBindings;
+}
+async function assertBindingStillValid(page, binding, stage) {
+    if (binding.target.pageSignature &&
+        normalizePageSignature(page.url()) !== binding.target.pageSignature) {
+        throw new Error(`binding_stale:page_signature_mismatch:${stage}`);
+    }
+    const liveCount = await binding.locator.count().catch(() => 0);
+    if (liveCount === 0) {
+        throw new Error(`binding_stale:locator_resolution_failed:${stage}`);
+    }
+    if (binding.target.domSignature) {
+        const liveSignature = await readLocatorDomSignature(binding.locator).catch(() => null);
+        if (liveSignature && liveSignature !== binding.target.domSignature) {
+            throw new Error(`binding_stale:dom_signature_mismatch:${stage}`);
+        }
+    }
+}
+function staleReasonFromError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (message.includes('page_signature_mismatch')) {
+        return 'page_signature_mismatch';
+    }
+    if (message.includes('dom_signature_mismatch')) {
+        return 'dom_signature_mismatch';
+    }
+    if (message.includes('locator_resolution_failed')) {
+        return 'locator_resolution_failed';
+    }
+    return null;
+}
+export async function executeProtectedFill(params) {
+    const preparedBindings = await prepareBindings(params.session, params.page, params.fillableForm);
+    if (!Array.isArray(preparedBindings)) {
+        return preparedBindings;
+    }
+    let assistedValues;
+    try {
+        assistedValues = await resolveAssistedProtectedFieldValues({
+            page: params.page,
+            bindings: preparedBindings.map((binding) => ({
+                binding: binding.fields[0],
+                target: binding.target,
+            })),
+            protectedValues: params.protectedValues,
+            fieldPolicies: params.fieldPolicies,
+        });
+    }
+    catch {
+        return {
+            kind: 'unexpected_error',
+            reason: 'assisted_value_resolution_failed',
+        };
+    }
+    const filledFields = [];
+    for (const binding of preparedBindings) {
+        let actionValue;
+        let acceptanceProbe = null;
+        let acceptanceResult = null;
+        try {
+            actionValue = resolveBindingValue(binding.fields, params.protectedValues, params.fieldPolicies, assistedValues);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (message === 'missing_protected_value') {
+                return {
+                    kind: 'unexpected_error',
+                    reason: 'missing_protected_value',
+                };
+            }
+            if (message === 'deterministic_only_resolution_failed') {
+                return {
+                    kind: 'unexpected_error',
+                    reason: 'deterministic_only_resolution_failed',
+                };
+            }
+            if (message === 'assisted_value_resolution_failed') {
+                return {
+                    kind: 'unexpected_error',
+                    reason: 'assisted_value_resolution_failed',
+                };
+            }
+            return {
+                kind: 'unexpected_error',
+                reason: 'unsupported_protected_field_group',
+            };
+        }
+        try {
+            acceptanceProbe = await createAcceptanceProbe({
+                session: params.session,
+                page: params.page,
+                target: binding.target,
+                action: binding.action,
+                actionValue,
+                locator: binding.locator,
+                beforePageObservation: null,
+            });
+            await applyActionWithFallbacks(params.page, binding.root, binding.locator, binding.action, actionValue, binding.attempts, binding.target.controlFamily, {
+                guards: {
+                    assertStillValid: async (stage) => {
+                        await assertBindingStillValid(params.page, binding, stage);
+                    },
+                },
+            });
+            if (acceptanceProbe) {
+                acceptanceResult = await waitForAcceptanceProbe(acceptanceProbe);
+                const acceptance = acceptanceResult;
+                if (!acceptance.accepted) {
+                    const validationState = await readValidationState(acceptanceProbe.readLocator);
+                    return {
+                        kind: 'validation_failed',
+                        filledFields,
+                        fieldErrors: binding.fieldKeys.map((fieldKey) => ({
+                            fieldKey,
+                            targetRef: binding.targetRef,
+                            reason: validationState.validationText
+                                ? 'client_validation_rejected'
+                                : 'value_not_applied',
+                            ...buildProtectedValidationDetails(validationState.validationText),
+                        })),
+                    };
+                }
+                const validationState = await readValidationState(acceptanceProbe.readLocator);
+                if (validationState.invalid && !shouldIgnoreNativeInvalidForTarget(binding.target)) {
+                    return {
+                        kind: 'validation_failed',
+                        filledFields,
+                        fieldErrors: binding.fieldKeys.map((fieldKey) => ({
+                            fieldKey,
+                            targetRef: binding.targetRef,
+                            reason: 'client_validation_rejected',
+                            ...buildProtectedValidationDetails(validationState.validationText),
+                        })),
+                    };
+                }
+            }
+            filledFields.push(...flattenFilledFields(binding.fieldKeys, binding.targetRef));
+        }
+        catch (error) {
+            if (acceptanceProbe) {
+                acceptanceResult =
+                    acceptanceResult ?? (await waitForAcceptanceProbe(acceptanceProbe).catch(() => null));
+                if (acceptanceResult?.accepted) {
+                    const validationState = await readValidationState(acceptanceProbe.readLocator);
+                    if (validationState.invalid && !shouldIgnoreNativeInvalidForTarget(binding.target)) {
+                        return {
+                            kind: 'validation_failed',
+                            filledFields,
+                            fieldErrors: binding.fieldKeys.map((fieldKey) => ({
+                                fieldKey,
+                                targetRef: binding.targetRef,
+                                reason: 'client_validation_rejected',
+                                ...buildProtectedValidationDetails(validationState.validationText),
+                            })),
+                        };
+                    }
+                    filledFields.push(...flattenFilledFields(binding.fieldKeys, binding.targetRef));
+                    continue;
+                }
+            }
+            const staleReason = staleReasonFromError(error);
+            if (staleReason) {
+                return {
+                    kind: 'binding_stale',
+                    targetRef: binding.targetRef,
+                    fieldKeys: [...binding.fieldKeys],
+                    reason: staleReason,
+                    attempts: [...binding.attempts],
+                };
+            }
+            return {
+                kind: 'unexpected_error',
+                reason: 'action_failed',
+            };
+        }
+    }
+    return {
+        kind: 'success',
+        filledFields,
+    };
+}
+export const __testProtectedFill = {
+    actionForTarget,
+    formatCardExpiry,
+    resolveBindingValue: (fieldKeys, protectedValues) => resolveBindingValue(fieldKeys.map((fieldKey) => ({
+        fieldKey,
+        targetRef: 't_test',
+        valueHint: 'direct',
+    })), protectedValues, undefined, new Map()),
+};

package/dist/secrets/types.d.ts

@@ -0,0 +1,84 @@
+export declare const LOGIN_FIELD_KEYS: readonly ["username", "password"];
+export declare const IDENTITY_FIELD_KEYS: readonly ["full_name", "document_number", "date_of_birth", "nationality", "issue_date", "expiry_date", "issuing_country"];
+export declare const PAYMENT_CARD_FIELD_KEYS: readonly ["cardholder", "pan", "exp_month", "exp_year", "cvv"];
+export type StoredSecretKind = 'login' | 'identity' | 'payment_card';
+export declare const STORED_SECRET_FIELD_KEYS_BY_KIND: {
+    readonly login: readonly ["username", "password"];
+    readonly identity: readonly ["full_name", "document_number", "date_of_birth", "nationality", "issue_date", "expiry_date", "issuing_country"];
+    readonly payment_card: readonly ["cardholder", "pan", "exp_month", "exp_year", "cvv"];
+};
+export type LoginFieldKey = (typeof LOGIN_FIELD_KEYS)[number];
+export type IdentityFieldKey = (typeof IDENTITY_FIELD_KEYS)[number];
+export type PaymentCardFieldKey = (typeof PAYMENT_CARD_FIELD_KEYS)[number];
+export type StoredSecretFieldKey = LoginFieldKey | IdentityFieldKey | PaymentCardFieldKey;
+export type StoredSecretScope = 'site' | 'global';
+export type ProtectedFieldPolicy = 'deterministic_only' | 'llm_assisted';
+export declare const PROTECTED_BINDING_VALUE_HINTS: readonly ["direct", "full_name.given", "full_name.family"];
+export type ProtectedBindingValueHint = (typeof PROTECTED_BINDING_VALUE_HINTS)[number];
+export type StoredSecretApplicabilityTarget = 'host' | 'site' | 'global';
+export interface StoredSecretApplicability {
+    target: StoredSecretApplicabilityTarget;
+    value?: string;
+}
+export type StoredSecretFieldPolicies = Partial<Record<StoredSecretFieldKey, ProtectedFieldPolicy>>;
+export interface StoredSecretMetadata {
+    storedSecretRef: string;
+    kind: StoredSecretKind;
+    scope: StoredSecretScope;
+    displayName: string;
+    fieldKeys: StoredSecretFieldKey[];
+    fieldPolicies?: StoredSecretFieldPolicies;
+    intentRequired: boolean;
+    applicability: StoredSecretApplicability;
+    preferredForMerchantKeys?: string[];
+}
+export interface SecretCatalogSnapshot {
+    source: 'mock' | 'agentpay_api';
+    host: string;
+    syncedAt: string;
+    storedSecrets: StoredSecretMetadata[];
+}
+export interface FillableFormFieldBinding {
+    fieldKey: StoredSecretFieldKey;
+    targetRef: string;
+    label?: string;
+    required?: boolean;
+    valueHint?: ProtectedBindingValueHint;
+}
+export interface FillableFormStoredSecretCandidate {
+    storedSecretRef: string;
+    kind: StoredSecretKind;
+    scope: StoredSecretScope;
+    displayName: string;
+    matchConfidence: 'high' | 'medium' | 'low';
+    intentRequired: boolean;
+    fieldKeys?: StoredSecretFieldKey[];
+    fieldPolicies?: StoredSecretFieldPolicies;
+}
+export type FillableFormRecommendedTiming = 'late';
+export interface PersistedFillableForm {
+    fillRef: string;
+    pageRef: string;
+    scopeRef?: string;
+    purpose: string;
+    recommendedTiming?: FillableFormRecommendedTiming;
+    fields: FillableFormFieldBinding[];
+    storedSecretCandidates: FillableFormStoredSecretCandidate[];
+    observedAt: string;
+}
+export type SecretIntentStatus = 'pending' | 'checking' | 'notify' | 'confirmation' | 'approved' | 'denied' | 'timed_out' | 'completed';
+export interface SecretIntentSnapshot {
+    intentId: string;
+    fillRef: string;
+    storedSecretRef: string;
+    status: SecretIntentStatus;
+    approvalChannel?: 'agentpay-cabinet';
+    host?: string;
+    pageRef?: string;
+    scopeRef?: string;
+    createdAt: string;
+    expiresAt?: string;
+    approvedAt?: string;
+    completedAt?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/secrets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/secrets/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,mCAAoC,CAAC;AAClE,eAAO,MAAM,mBAAmB,2HAQtB,CAAC;AACX,eAAO,MAAM,uBAAuB,gEAM1B,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;AAErE,eAAO,MAAM,gCAAgC;;;;CAInC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,gBAAgB,GAAG,mBAAmB,CAAC;AAE1F,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAClD,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,cAAc,CAAC;AACzE,eAAO,MAAM,6BAA6B,4DAIhC,CAAC;AACX,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvF,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzE,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,+BAA+B,CAAC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAEpG,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,yBAAyB,CAAC;IACzC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,oBAAoB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,yBAAyB,CAAC;CACvC;AAED,MAAM,WAAW,iCAAiC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC3C,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAClD,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACnC,sBAAsB,EAAE,iCAAiC,EAAE,CAAC;IAC5D,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,UAAU,GACV,QAAQ,GACR,cAAc,GACd,UAAU,GACV,QAAQ,GACR,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB"}

package/dist/secrets/types.js

@@ -0,0 +1,27 @@
+export const LOGIN_FIELD_KEYS = ['username', 'password'];
+export const IDENTITY_FIELD_KEYS = [
+    'full_name',
+    'document_number',
+    'date_of_birth',
+    'nationality',
+    'issue_date',
+    'expiry_date',
+    'issuing_country',
+];
+export const PAYMENT_CARD_FIELD_KEYS = [
+    'cardholder',
+    'pan',
+    'exp_month',
+    'exp_year',
+    'cvv',
+];
+export const STORED_SECRET_FIELD_KEYS_BY_KIND = {
+    login: LOGIN_FIELD_KEYS,
+    identity: IDENTITY_FIELD_KEYS,
+    payment_card: PAYMENT_CARD_FIELD_KEYS,
+};
+export const PROTECTED_BINDING_VALUE_HINTS = [
+    'direct',
+    'full_name.given',
+    'full_name.family',
+];

package/dist/session.d.ts

@@ -2,6 +2,17 @@
  * Session persistence for agentbrowse.
  * Stores CDP URL + Chrome PID in ~/.agentpay/browse-session.json
  */
+import type { BrowseRuntimeState } from './runtime-state.js';
+import type { StoredSecretFieldKey } from './secrets/types.js';
+export interface CachedTransientSecretEntry {
+    intentId: string;
+    fillRef: string;
+    storedSecretRef: string;
+    cachedAt: string;
+    approvedAt?: string;
+    expiresAt?: string;
+    values: Partial<Record<StoredSecretFieldKey, string>>;
+}
 export interface BrowseSession {
     cdpUrl: string;
     pid: number;
@@ -11,7 +22,18 @@ export interface BrowseSession {
     capabilities?: {
         captchaSolve?: boolean;
     };
+    runtime?: BrowseRuntimeState;
+    transientSecretCache?: Record<string, CachedTransientSecretEntry>;
 }
+export declare function cleanupTransientSecretCache(session: BrowseSession, options?: {
+    now?: string;
+}): boolean;
+export declare function cacheTransientSecret(session: BrowseSession, entry: CachedTransientSecretEntry): CachedTransientSecretEntry;
+export declare function getCachedTransientSecret(session: BrowseSession, intentId: string, options?: {
+    now?: string;
+}): CachedTransientSecretEntry | null;
+export declare function deleteCachedTransientSecret(session: BrowseSession, intentId: string): boolean;
+export declare function serializeSession(session: BrowseSession): string;
 export declare function saveSession(session: BrowseSession): void;
 export declare function loadSession(): BrowseSession | null;
 export declare function getSessionPort(session: BrowseSession | null): number;

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE;QACb,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;CACH;AAQD,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAGxD;AAED,wBAAgB,WAAW,IAAI,aAAa,GAAG,IAAI,CASlD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,CAapE;AAED,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAE3E;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAO9D"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAK/D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE;QACb,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;CACnE;AAyBD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,OAAO,CAqBT;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,0BAA0B,GAChC,0BAA0B,CAQ5B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,0BAA0B,GAAG,IAAI,CAMnC;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAW7F;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAW/D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAGxD;AAED,wBAAgB,WAAW,IAAI,aAAa,GAAG,IAAI,CAclD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,CAapE;AAED,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAE3E;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAO9D"}