@opencode/browse 0.0.6-dev.25 → 0.0.6-dev.28

package/dist/{main-spqvtmdy.mjs → main-scyv26xb.mjs}

@@ -6,7 +6,7 @@ import {
   compareVersions,
   npmRuntime,
   autoUpdateStatus
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 import {
   unpackedReloadAdvice
 } from "./main-3gthmkzw.mjs";
@@ -315,7 +315,7 @@ function runUpdate(args, deps) {
 async function runUpdateCommand2(args) {
   const log = (line) => process.stdout.write(line + `
 `);
-  const { runNpmUpdate } = await import("./runtime-update-ypj67htb.mjs");
+  const { runNpmUpdate } = await import("./runtime-update-3925nwpw.mjs");
   if (await runNpmUpdate(args))
     return;
   if (compiledBinary()) {

package/dist/{main-mm82qqzb.mjs → main-tfkqwwrb.mjs}

@@ -1,12 +1,12 @@
 import {
   isNodeError
-} from "./main-tf22ynec.mjs";
+} from "./main-x8w3s3rv.mjs";
 import {
   isValidSessionId2
-} from "./main-7pxrvrp0.mjs";
+} from "./main-8h1nwn45.mjs";
 import {
   dataRoot
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 
 // src/session-manager/journal.ts
 import fs from "node:fs";

package/dist/{main-tf22ynec.mjs → main-x8w3s3rv.mjs}

@@ -1,6 +1,6 @@
 import {
   dataRoot
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 
 // src/relay/secrets.ts
 import crypto2 from "node:crypto";

package/dist/{main-e83a20ce.mjs → main-xg3r1ze3.mjs}

@@ -1,11 +1,11 @@
 import {
   writePrivateJsonFileSync
-} from "./main-tf22ynec.mjs";
+} from "./main-x8w3s3rv.mjs";
 import {
   dataRoot,
   devExtensionUrl,
   devExtensionFolder
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 
 // src/relay/browser-pairing.ts
 import crypto from "node:crypto";

package/dist/{mcp-dm33x3m1.mjs → mcp-7jjntfwf.mjs}

@@ -1,9 +1,9 @@
 import {
   opencodeBrowserVersion2
-} from "./main-sdmv8gfv.mjs";
+} from "./main-4t3a1fw9.mjs";
 import {
   autoUpdateStatus
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 import"./main-3gthmkzw.mjs";
 import {
   getObject2,
@@ -12,12 +12,12 @@ import {
   relayBuildProblem,
   ensureRelay,
   ensureExtensionConnected
-} from "./main-7pxrvrp0.mjs";
-import"./main-tf22ynec.mjs";
+} from "./main-8h1nwn45.mjs";
+import"./main-x8w3s3rv.mjs";
 import {
   updateJson2,
   createUpdateWatcher2
-} from "./main-spqvtmdy.mjs";
+} from "./main-scyv26xb.mjs";
 import {
   settingKeys,
   settingSpecs,
@@ -41,9 +41,8 @@ import {
   toolResultForValue2,
   mcpErrorMessage2,
   toolResult,
-  readClient,
   listSecrets
-} from "./main-xj8td7qw.mjs";
+} from "./main-rsqahh12.mjs";
 
 // src/mcp.ts
 import { NodeStdio } from "@effect/platform-node";
@@ -179,7 +178,7 @@ registerMcpTools({
       destructive: false,
       idempotent: true,
       handle: () => Effect.tryPromise({
-        try: () => import("./skill-text-v35020jn.mjs").then((module) => module.skillText),
+        try: () => import("./skill-text-rc6te209.mjs").then((module) => module.skillText),
         catch: (cause) => new Error("read opencode-browser skill", { cause })
       })
     }
@@ -198,7 +197,7 @@ registerMcpTools({
       inputSchema: objectSchema({
         code: {
           type: "string",
-          description: `JavaScript code to execute. It receives browser, context, page, state, modules (path, url, util, crypto, buffer, zlib, events, stream), files (dir, path, write, read), fillInput, fillInputs, snapshot(options?) for compact semantic outlines (options: find to search them, diff or delta for changes), persistent compatible ref(id) locators, webmcp (list/call), screenshot helpers, ariaSnapshot, ghostCursor, handoff, demonstrate, network capture, pageConsole (start/stop capturing the page's own console messages and errors, off by default because pages can detect it), secrets.type(locator, name) to type a stored site secret or a granted Deadbolt login ("deadbolt:<site>[/<username>]", { field: "username" }, or a password/code with { submit: true }; see secrets_list) only on its allowed origins, without seeing it, secrets.signIn({ site?, username? }) for a whole sign-in (same as the signin tool), and secrets.usePasskey({ site, username }) to pick the passkey account for the tab's next passkey request.`
+          description: "JavaScript code to execute. It receives browser, context, page, state, modules (path, url, util, crypto, buffer, zlib, events, stream), files (dir, path, write, read), fillInput, fillInputs, snapshot(options?) for compact semantic outlines (options: find to search them, diff or delta for changes), persistent compatible ref(id) locators, webmcp (list/call), screenshot helpers, ariaSnapshot, ghostCursor, handoff, demonstrate, network capture, pageConsole (start/stop capturing the page's own console messages and errors, off by default because pages can detect it), and secrets.type(locator, name) to type a stored site secret (see secrets_list) only on its allowed origins, without seeing it."
         },
         session: {
           type: "string",
@@ -564,80 +563,14 @@ registerMcpTools({
     {
       name: "secrets_list",
       requiresRelayCompatibility: false,
-      description: 'List what agents may type without seeing: site secrets the user stored (names, kinds and allowed origins; type them with secrets.type(target, name) in execute; only the user adds them with `opencode-browser secrets add`), and Deadbolt logins the user granted to browse for this session\'s allowed sites (title, username, which values and passkeys, never values; sign in with the signin tool or secrets.signIn(), or type one value with secrets.type(target, "deadbolt:<site>[/<username>]", { field })). Passkeys are listed by account (username, displayName). Only the user grants Deadbolt logins, in Deadbolt (`deadbolt agents allow <site>`, or `deadbolt agents allow --all`).',
+      description: "List what agents may type without seeing: site secrets the user stored (names, kinds and allowed origins; type them with secrets.type(target, name) in execute; only the user adds them with `opencode-browser secrets add`).",
       inputSchema: sessionOnlyInputSchema,
       readOnly: true,
       destructive: false,
       idempotent: true,
-      handle: (input) => Effect5.gen(function* () {
+      handle: () => Effect5.gen(function* () {
         const secrets = yield* listSecrets();
-        if (!readClient()) {
-          return {
-            secrets,
-            deadbolt: {
-              connected: false,
-              logins: [],
-              passkeys: [],
-              note: "browse isn't connected to Deadbolt. The user can connect it with `opencode-browser deadbolt connect` and grant logins with `deadbolt agents allow <site>`."
-            }
-          };
-        }
-        const deadbolt = yield* ctx.relay.deadboltLogins({ sessionId: ctx.resolveSessionId(input) }).pipe(Effect5.catch((error) => Effect5.succeed({
-          connected: true,
-          origins: [],
-          logins: [],
-          passkeys: [],
-          error: { code: "unavailable", message: error.message }
-        })));
-        return { secrets, deadbolt };
-      })
-    },
-    {
-      name: "signin",
-      description: 'Sign in to a site in the session\'s page with a Deadbolt login the user granted to browse, without seeing any value. The relay does the whole sign-in in one call: username, submit, password, an authenticator (TOTP) code when asked (split boxes too), "Use password instead" toggles, and Sign in with Google when a Google login is granted. A username also picks the passkey account when the site signs in with a passkey. Returns only {status: signed_in | needs_user | needs_choice | not_granted | failed, step, reason}; needs_choice comes with choices [{username, displayName}] when several passkeys could sign in: call again with one username. needs_user means a captcha, a code sent by SMS or email, a push approval or a new-device check: hand it to the user with handoff() in execute. not_granted: tell the user what to allow (`deadbolt agents allow <site>`). Navigate to the sign-in page first, or pass site.',
-      inputSchema: objectSchema({
-        site: {
-          type: "string",
-          description: "The login's site: a host like github.com, or an exact origin. Defaults to the page's site; the page goes there first when it is elsewhere."
-        },
-        username: {
-          type: "string",
-          description: "Which login (and which passkey account), when several are granted for the site."
-        },
-        session: sessionSchemaProperty,
-        timeoutMs: { type: "integer", minimum: 1, description: "Overall limit. Defaults to 90000." }
-      }),
-      readOnly: false,
-      destructive: true,
-      idempotent: false,
-      handle: (input) => Effect5.gen(function* () {
-        const object = input === undefined ? {} : requireObject(input);
-        const site = optionalStringField(object, "site");
-        const username = optionalStringField(object, "username");
-        const timeoutMs = optionalPositiveIntegerField(object, "timeoutMs");
-        const explicitSession = optionalStringField(object, "session");
-        const sessionId = explicitSession ?? ctx.currentSession.id;
-        yield* ensureExtensionConnected({ relay: ctx.relay, sessionId, waitForReconnect: true });
-        const options = {
-          ...site ? { site } : {},
-          ...username ? { username } : {},
-          ...timeoutMs === undefined ? {} : { timeoutMs }
-        };
-        const outerTimeoutMs = timeoutMs === undefined ? 120000 : Math.max(60000, timeoutMs + 1e4);
-        const result = yield* ctx.relay.execute({
-          sessionId,
-          code: `return await secrets.signIn(${JSON.stringify(options)})`,
-          createIfMissing: !explicitSession,
-          timeoutMs: outerTimeoutMs
-        });
-        ctx.establishCurrentSession(sessionId);
-        if (result.isError)
-          return yield* Effect5.fail(new Error(result.text));
-        return {
-          ...result.value,
-          ...result.aftermath?.endUrl ? { url: result.aftermath.endUrl } : {},
-          ...result.warnings?.length ? { warnings: result.warnings } : {}
-        };
+        return { secrets };
       })
     },
     {