@proagentstore/cli 0.4.134 → 0.4.135

package/dist/browser-runner/local-apply/bridge.js

@@ -94,6 +94,7 @@ export const INSPECT_PAGE = `() => {
 		unavailable: new RegExp(UNAVAILABLE_TEXT_SOURCE, "i").test(text) ? (new RegExp(EXPIRED_TEXT_SOURCE, "i").test(text) ? "expired" : "unavailable") : null,
 	};
 }`;
+const signInQuestion = (site) => `Sign in to ${site} on this machine's application browser, then retry. Nothing was submitted.`;
 const text = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...(isError ? { isError: true } : {}) });
 const textOf = (r) => (r.content ?? []).map((c) => c.text ?? "").join("\n");
 const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -283,7 +284,9 @@ export class ApplyBridge {
         if (!v || typeof v.url !== "string")
             return null;
         const unavailable = v.unavailable === "expired" || v.unavailable === "unavailable" ? v.unavailable : null;
-        return { url: v.url, title: String(v.title ?? ""), captcha: !!v.captcha, login: !!v.login, duplicate: !!v.duplicate, antiBot: !!v.antiBot, confirmed: !!v.confirmed, unavailable };
+        // A sign-in page by its ADDRESS too (#1100): SEEK's `login.seek.com/login` has no password field, so an
+        // "Apply" that bounced there ran on to `awaiting_review` with nothing filled. Same rule as the submit path.
+        return { url: v.url, title: String(v.title ?? ""), captcha: !!v.captcha, login: looksLikeSignIn(v.url, !!v.login), duplicate: !!v.duplicate, antiBot: !!v.antiBot, confirmed: !!v.confirmed, unavailable };
     }
     blockerOf(s) {
         return s.captcha ? "captcha" : s.antiBot ? "anti_bot" : s.duplicate ? "duplicate_application" : s.login ? "login_required" : null;
@@ -314,15 +317,19 @@ export class ApplyBridge {
         const blocker = this.blockerOf(state);
         if (!blocker)
             return text(toolText);
+        return this.holdFor(blocker, state);
+    }
+    /** A page that needs a person: pause for the owner, and remember a sign-in they complete (#1094). */
+    async holdFor(blocker, state) {
+        const host = hostOf(state.url) ?? "";
         this.host.emit({ type: "browser.blocked", url: state.url, domain: host, detail: { reason: blocker } });
         const site = blocker === "login_required" && host ? siteKeyOf(host) : null;
         if (site)
             await this.host.sessions?.beginSignIn(site).catch(() => undefined);
-        const ok = await this.pauseFor({ reason: blocker, url: state.url, domain: host }, async () => {
+        const ok = await this.pauseFor({ reason: blocker, url: state.url, domain: host, ...(site ? { question: signInQuestion(site) } : {}) }, async () => {
             const after = await this.inspect();
             return !!after && this.blockerOf(after) === null;
         });
-        // A sign-in the owner completed here is remembered for this browser profile (#1094).
         if (ok && site)
             await this.recordSignIn(site);
         if (!ok)
@@ -533,6 +540,12 @@ export class ApplyBridge {
         if (!phase)
             return text("supervisor_checkpoint needs phase initial, post_navigation, before_submit or uncertain.", true);
         const state = await this.inspect();
+        // A sign-in reached after the last landing — a late redirect (#1100, run 804bed49): hold for the owner as
+        // on landing. Reported to the cloud as a blocker it was stopped, and ended `incomplete`.
+        if (state?.login && !this.blocked) {
+            const held = await this.holdFor("login_required", state);
+            return held.isError ? held : text("The owner signed in. Take a browser_snapshot to read the page, then call supervisor_checkpoint again.");
+        }
         const blockers = new Set();
         if (state?.captcha)
             blockers.add("captcha");
@@ -588,8 +601,16 @@ export class ApplyBridge {
         this.host.emit({ type: "job.unavailable", url, domain, detail: { reason, source: "page_notice" } });
         return text(`Recorded the runner-verified ${reason} listing notice. Stop now.`);
     }
-    review(summary) {
+    async review(summary) {
         this.summary = summary; // bounded where the result is built (runtime.ts `end`)
+        // Nothing entered, on a sign-in page (#1100; runs abb37433, 7fb1e4f5): the outcome is the owner's sign-in,
+        // not an empty form "awaiting review" — a card that is not `login_required` offers them no sign-in at all.
+        const state = !this.filled && !this.uploaded.size && !this.blocked ? await this.inspect() : null;
+        const host = state?.login ? hostOf(state.url) : null;
+        if (state && host) {
+            this.host.emit({ type: "browser.blocked", url: state.url, domain: host, detail: { reason: "login_required" } });
+            this.blocked = { reason: "login_required", questions: [signInQuestion(siteKeyOf(host))] };
+        }
         // #989: "ready for review" with nothing entered is not a review state.
         //
         // The live run ended `awaiting_review` with `filled: 0, uploaded: 0` seconds after the cloud
@@ -655,7 +676,7 @@ export class ApplyBridge {
                     ],
                 };
             }
-            this.review(oneClick ? "Stopped at a one-click apply control: it can send the application outright, and this run fills and waits for review." : "Stopped at the final submit: this run fills and waits for review.");
+            await this.review(oneClick ? "Stopped at a one-click apply control: it can send the application outright, and this run fills and waits for review." : "Stopped at the final submit: this run fills and waits for review.");
             return text(oneClick
                 ? 'That control ("' + String(forward.element ?? "") + '") can send the application in one click, and this run is fill-and-review: it was NOT pressed. Approve this application if you want it sent. Stop now.'
                 : "That control submits the application, and this run is fill-and-review: it was NOT pressed. The application waits for the owner's review. Stop now.");

package/dist/browser-runner/local-apply/contract.js

@@ -37,39 +37,6 @@ export const LOCAL_APPLY_CANCEL_PATH = "/local-apply/cancel";
 export const LOCAL_APPLY_PREFLIGHT_PATH = "/local-apply/preflight";
 /** Delivers a cloud-persisted supervisory decision to one paused checkpoint. */
 export const LOCAL_APPLY_DIRECTIVE_PATH = "/local-apply/directive";
-/**
- * A short-lived, owner-authorized view of the *existing* browser page for one local-apply run.
- * The id is opaque and carries no browser/profile material.  It deliberately is not a task id:
- * local-apply runs are not generic runner tasks.
- */
-export const LOCAL_APPLY_HANDOFF_PATH = "/local-apply/handoff";
-export const LOCAL_APPLY_HANDOFF_STATUS_PATH = "/local-apply/handoff-status";
-export const LOCAL_APPLY_HANDOFF_FRAME_PATH = "/local-apply/handoff/frame";
-export const LOCAL_APPLY_HANDOFF_INPUT_PATH = "/local-apply/handoff/input";
-export const LOCAL_APPLY_HANDOFF_RESUME_PATH = "/local-apply/handoff/resume";
-export const LOCAL_APPLY_HANDOFF_END_PATH = "/local-apply/handoff/end";
-/**
- * A separate, browser-only receipt/history check for an already-ended uncertain attempt.  This is
- * deliberately not an application run: it receives no engine, sources, artifacts or submit gate.
- */
-export const LOCAL_APPLY_RECONCILIATION_RUN_PATH = "/local-apply/reconciliation/run";
-export const LOCAL_APPLY_RECONCILIATION_STATUS_PATH = "/local-apply/reconciliation/status";
-export const LOCAL_APPLY_RECONCILIATION_HANDOFF_PATH = "/local-apply/reconciliation/handoff";
-export const LOCAL_APPLY_RECONCILIATION_HANDOFF_STATUS_PATH = "/local-apply/reconciliation/handoff-status";
-export const LOCAL_APPLY_RECONCILIATION_HANDOFF_FRAME_PATH = "/local-apply/reconciliation/handoff/frame";
-export const LOCAL_APPLY_RECONCILIATION_HANDOFF_INPUT_PATH = "/local-apply/reconciliation/handoff/input";
-export const LOCAL_APPLY_RECONCILIATION_HANDOFF_RESUME_PATH = "/local-apply/reconciliation/handoff/resume";
-export const LOCAL_APPLY_RECONCILIATION_HANDOFF_END_PATH = "/local-apply/reconciliation/handoff/end";
-/**
- * A sign-in to the job's site in this machine's application browser profile, AFTER a fill ended
- * `blocked` on `login_required` (#1100). Not a run and not a run's handoff: there is no engine, no
- * source, no artifact and no submit gate — only the profile's page at the job's site, for the owner
- * to sign in, and the profile's sign-in ledger (#1094) to record that they did.
- */
-export const LOCAL_APPLY_SIGN_IN_PATH = "/local-apply/sign-in";
-export const LOCAL_APPLY_SIGN_IN_FRAME_PATH = "/local-apply/sign-in/frame";
-export const LOCAL_APPLY_SIGN_IN_INPUT_PATH = "/local-apply/sign-in/input";
-export const LOCAL_APPLY_SIGN_IN_END_PATH = "/local-apply/sign-in/end";
 export const LOCAL_APPLY_ENGINES = ["claude", "codex"];
 export const LOCAL_APPLY_AUTH_MODES = ["machine", "subscription"];
 export const LOCAL_APPLY_MODES = ["fill_and_review", "auto_submit"];
@@ -176,7 +143,6 @@ export const LOCAL_APPLY_EVENT_TYPES = [
 export const LOCAL_APPLY_ENGINE_AUTHS = ["machine-login", "subscription", "api-key", "missing_login", "unknown"];
 export const LOCAL_APPLY_SUPERVISOR_DIRECTIVES = ["continue", "request_review", "stop"];
 export const LOCAL_APPLY_SUPERVISOR_PHASES = ["initial", "before_submit", "post_navigation", "uncertain"];
-export const LOCAL_APPLY_HANDOFF_TERMINAL_REASONS = ["unavailable", "profile_unavailable", "profile_mismatch", "page_lost", "expired", "run_ended", "runner_restarted"];
 export const LOCAL_APPLY_CAPS = { questions: 20, questionChars: 300, answers: 20, answerChars: 2000, summary: 2000 };
 const str = (v, max) => (typeof v === "string" && v.trim() ? v.trim().slice(0, max) : null);
 const oneOf = (list, v) => (list.includes(v) ? v : null);

package/dist/browser-runner/local-apply/handoff-contract.js

@@ -0,0 +1,34 @@
+/**
+ * A short-lived, owner-authorized view of the *existing* browser page for one local-apply run.
+ * The id is opaque and carries no browser/profile material.  It deliberately is not a task id:
+ * local-apply runs are not generic runner tasks.
+ */
+export const LOCAL_APPLY_HANDOFF_PATH = "/local-apply/handoff";
+export const LOCAL_APPLY_HANDOFF_STATUS_PATH = "/local-apply/handoff-status";
+export const LOCAL_APPLY_HANDOFF_FRAME_PATH = "/local-apply/handoff/frame";
+export const LOCAL_APPLY_HANDOFF_INPUT_PATH = "/local-apply/handoff/input";
+export const LOCAL_APPLY_HANDOFF_RESUME_PATH = "/local-apply/handoff/resume";
+export const LOCAL_APPLY_HANDOFF_END_PATH = "/local-apply/handoff/end";
+/**
+ * A separate, browser-only receipt/history check for an already-ended uncertain attempt.  This is
+ * deliberately not an application run: it receives no engine, sources, artifacts or submit gate.
+ */
+export const LOCAL_APPLY_RECONCILIATION_RUN_PATH = "/local-apply/reconciliation/run";
+export const LOCAL_APPLY_RECONCILIATION_STATUS_PATH = "/local-apply/reconciliation/status";
+export const LOCAL_APPLY_RECONCILIATION_HANDOFF_PATH = "/local-apply/reconciliation/handoff";
+export const LOCAL_APPLY_RECONCILIATION_HANDOFF_STATUS_PATH = "/local-apply/reconciliation/handoff-status";
+export const LOCAL_APPLY_RECONCILIATION_HANDOFF_FRAME_PATH = "/local-apply/reconciliation/handoff/frame";
+export const LOCAL_APPLY_RECONCILIATION_HANDOFF_INPUT_PATH = "/local-apply/reconciliation/handoff/input";
+export const LOCAL_APPLY_RECONCILIATION_HANDOFF_RESUME_PATH = "/local-apply/reconciliation/handoff/resume";
+export const LOCAL_APPLY_RECONCILIATION_HANDOFF_END_PATH = "/local-apply/reconciliation/handoff/end";
+/**
+ * A sign-in to the job's site in this machine's application browser profile, AFTER a fill ended
+ * `blocked` on `login_required` (#1100). Not a run and not a run's handoff: there is no engine, no
+ * source, no artifact and no submit gate — only the profile's page at the job's site, for the owner
+ * to sign in, and the profile's sign-in ledger (#1094) to record that they did.
+ */
+export const LOCAL_APPLY_SIGN_IN_PATH = "/local-apply/sign-in";
+export const LOCAL_APPLY_SIGN_IN_FRAME_PATH = "/local-apply/sign-in/frame";
+export const LOCAL_APPLY_SIGN_IN_INPUT_PATH = "/local-apply/sign-in/input";
+export const LOCAL_APPLY_SIGN_IN_END_PATH = "/local-apply/sign-in/end";
+export const LOCAL_APPLY_HANDOFF_TERMINAL_REASONS = ["unavailable", "profile_unavailable", "profile_mismatch", "page_lost", "expired", "run_ended", "runner_restarted"];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.134",
+  "version": "0.4.135",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",