@withbuddi/buddi 0.1.0-pre.17 → 0.1.0-pre.19

package/node_modules/@buddi/tool-browser/dist/public-suffixes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-suffixes.js","sourceRoot":"","sources":["../src/public-suffixes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,yCAAyC;IACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ;IACtH,QAAQ;IACR,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAClC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC/E,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC/C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,OAAO,EAAE,QAAQ,EAAE,SAAS;IAC5B,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;IACvC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC9C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS;IACpE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS;IACvC,OAAO,EAAE,QAAQ,EAAE,QAAQ;IAC3B,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC3D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;IACrF,uBAAuB;IACvB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAC3C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW;IACrE,yCAAyC;IACzC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;IAC1I,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACpE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC/C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC3B,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAC3C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC5B,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC/C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,0BAA0B;IAC1B,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACnE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU;IACxG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAC/E,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACzD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAC7D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC3G,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;IAC3D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACnF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ;IACrD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC5B,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC5B,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACrC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACrC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,gCAAgC;IAChC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;IAC5G,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS;IACzD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC9C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC/C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC1D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC9C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAC5E,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;IAC3D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IACpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAC3C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAC3C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU;IAC1D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IAChD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACtC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACpC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACpC,OAAO,EAAE,QAAQ,EAAE,OAAO;IAC1B,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAC3B,OAAO,EAAE,QAAQ,EAAE,QAAQ;IAC3B,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;IACrC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;IACvC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAC5C,QAAQ,EAAE,SAAS;IACnB,OAAO,EAAE,QAAQ,EAAE,OAAO;IAC1B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACtE,uDAAuD;IACvD,WAAW,EAAE,uBAAuB,EAAE,WAAW,EAAE,cAAc;IACjE,WAAW,EAAE,aAAa,EAAE,mBAAmB;IAC/C,YAAY,EAAE,YAAY,EAAE,QAAQ;IACpC,aAAa,EAAE,aAAa;IAC5B,eAAe,EAAE,eAAe;IAChC,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,gBAAgB;IACnH,mBAAmB,EAAE,qBAAqB,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,uBAAuB,EAAE,oBAAoB;IACzI,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,cAAc;IAC5F,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY;IACvH,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB;IACxE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB;IAC1G,oBAAoB,EAAE,wBAAwB,EAAE,aAAa,EAAE,YAAY,EAAE,uBAAuB,EAAE,iBAAiB;IACvH,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ;IAClG,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,eAAe,EAAE,UAAU;CACtG,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/node_modules/@buddi/tool-browser/dist/secrets.d.ts

@@ -9,7 +9,10 @@
  * one thing a phishing page controls (§8). `checkTarget` compares that live
  * value against the binding in the exact canonical form `canonicalOrigin`
  * produces, so a look-alike host, a punycode spelling or the right site in a
- * frame on the wrong one is refused before any card is drawn.
+ * frame on the wrong one is refused before any card is drawn. A binding may
+ * instead name a wildcard origin, `https://*.wikimedia.org` (origin-pattern.ts):
+ * the suffix stays fixed, and the use, the card and the log still carry the
+ * real origin the field sits on, never the pattern.
  *
  * `deliver` parks the value against the use id and nothing else: the tool that
  * asked takes it the same turn and hands it straight to the driver, which is
@@ -17,7 +20,7 @@
  * owner-secrets.md §3). There is no read path and no log line carries one.
  */
 import type { SecretDestination } from '@buddi/core/plugin';
-/** The owner's password or TOTP code, into a field the page marks as a password (or an OTP field). */
+/** The owner's password, TOTP code or sign-in name, into a field of one bound origin. */
 export declare const FIELD_KIND = "browser.field";
 /** Card, account and tax numbers, into a named field on a bound origin — every use a card. */
 export declare const FORM_KIND = "browser.form.data";
@@ -56,16 +59,49 @@ export interface FormTarget {
     field: string;
 }
 /**
- * Which destination one fill takes: a TOTP code goes into `browser.field`
- * whatever the field is (OTP fields are text), a password into `browser.field`,
- * and anything else is form data (§4). The caller learns `totp` from
- * `ctx.buddi.secrets.list()` — names and flags only, there is no read path —
- * and `password` from the backend.
+ * Whether the owner bound this secret as `browser.field` to the origin the
+ * field sits on. Names, kinds and targets only — `ctx.buddi.secrets.list()`
+ * never carries a value.
  */
-export declare function secretKindFor(totp: boolean, password: boolean): typeof FIELD_KIND | typeof FORM_KIND;
+export declare function fieldBoundTo(bindings: ReadonlyArray<{
+    kind: string;
+    target: unknown;
+}>, origin: string): boolean;
+/**
+ * Which destination one fill takes (§3): a TOTP code goes into `browser.field`
+ * whatever the field is (OTP fields are text), and so does a password. A
+ * visible field takes `browser.field` too when the owner bound the secret as
+ * `browser.field` to that field's origin — a username is always a visible
+ * field — and anything else is form data, which is a card every time. So a
+ * password field never takes a form-data-only secret, and a card number bound
+ * as form data never skips its card. The caller learns `totp` and the bindings
+ * from `ctx.buddi.secrets.list()` and `password` from the backend.
+ */
+export declare function secretKindFor(totp: boolean, password: boolean, fieldBound?: boolean): typeof FIELD_KIND | typeof FORM_KIND;
+/** One secret as an agent may see it: its name, whether it is a TOTP seed, and where it may go. Never a value. */
+export interface SecretForAgent {
+    name: string;
+    totp: boolean;
+    bindings: Array<{
+        kind: string;
+        target: unknown;
+    }>;
+}
+/**
+ * What `secret.list` answers: each field copied by name, so nothing the
+ * listing ever grows (last use, rules, approvals) reaches a model by accident.
+ */
+export declare function secretsForAgent(listing: ReadonlyArray<{
+    name: string;
+    totp: boolean;
+    bindings: ReadonlyArray<{
+        kind: string;
+        target: unknown;
+    }>;
+}>): SecretForAgent[];
 /** The value one use delivered, taken exactly once. Undefined when there is none. */
 export declare function takeDelivered(use: string): string | undefined;
-/** `browser.field`: the owner's secret into one field of one exact origin. */
+/** `browser.field`: the owner's secret into a field of one exact origin, or of any origin under a wildcard one. */
 export declare const fieldDestination: SecretDestination;
 /**
  * `browser.form.data`: a named field on a bound origin. Every use a card, and

package/node_modules/@buddi/tool-browser/dist/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG5D,sGAAsG;AACtG,eAAO,MAAM,UAAU,kBAAkB,CAAC;AAC1C,8FAA8F;AAC9F,eAAO,MAAM,SAAS,sBAAsB,CAAC;AAC7C,yFAAyF;AACzF,eAAO,MAAM,WAAW,wBAAwB,CAAC;AAEjD,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,2FAA2F;IAC3F,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,QAAQ,EAAE,OAAO,CAAC;IAClB,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAMlF;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAMlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAMhG;AASD,iFAAiF;AACjF,MAAM,WAAW,UAAU;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAU7D;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,CAEpG;AAKD,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI7D;AAMD,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,EAAE,iBAM9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,iBAejC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,EAAE,iBAMnC,CAAC"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAI5D,yFAAyF;AACzF,eAAO,MAAM,UAAU,kBAAkB,CAAC;AAC1C,8FAA8F;AAC9F,eAAO,MAAM,SAAS,sBAAsB,CAAC;AAC7C,yFAAyF;AACzF,eAAO,MAAM,WAAW,wBAAwB,CAAC;AAEjD,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,2FAA2F;IAC3F,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,QAAQ,EAAE,OAAO,CAAC;IAClB,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAQlF;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAMlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAMhG;AAoBD,iFAAiF;AACjF,MAAM,WAAW,UAAU;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAW7D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhH;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,UAAQ,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,CAExH;AAED,kHAAkH;AAClH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACpD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,GAAG,cAAc,EAAE,CAMrK;AAKD,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI7D;AAkBD,mHAAmH;AACnH,eAAO,MAAM,gBAAgB,EAAE,iBAU9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,iBAejC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,EAAE,iBAMnC,CAAC"}

package/node_modules/@buddi/tool-browser/dist/secrets.js

@@ -1,5 +1,6 @@
+import { isOriginPattern, originMatchesPattern, parseOriginPattern } from './origin-pattern.js';
 import { BrowserPreconditionError } from './types.js';
-/** The owner's password or TOTP code, into a field the page marks as a password (or an OTP field). */
+/** The owner's password, TOTP code or sign-in name, into a field of one bound origin. */
 export const FIELD_KIND = 'browser.field';
 /** Card, account and tax numbers, into a named field on a bound origin — every use a card. */
 export const FORM_KIND = 'browser.form.data';
@@ -23,6 +24,9 @@ export function canonicalOrigin(url) {
     }
     if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:')
         return undefined;
+    // A `*` is a pattern's, never a real host's (origin-pattern.ts).
+    if (parsed.hostname.includes('*'))
+        return undefined;
     return parsed.origin;
 }
 /**
@@ -48,32 +52,67 @@ export function checkSecretOrigin(url, expectedOrigin) {
     }
     return origin;
 }
-/** Two origins bind to each other only when both are canonical and equal. */
-function sameOrigin(a, b) {
-    if (typeof a !== 'string' || typeof b !== 'string')
+/**
+ * A real origin binds to a bound one when both are canonical and equal, or
+ * when the bound one is a wildcard origin the real one sits under. The real
+ * side is never a pattern.
+ */
+function originBinds(real, bound) {
+    if (typeof real !== 'string' || typeof bound !== 'string')
         return false;
-    const left = canonicalOrigin(a);
-    return left !== undefined && left === canonicalOrigin(b);
+    const left = canonicalOrigin(real);
+    if (left === undefined)
+        return false;
+    if (isOriginPattern(bound))
+        return originMatchesPattern(left, bound);
+    return left === canonicalOrigin(bound);
+}
+/** A bound origin as a binding may hold it: a canonical origin, or a valid wildcard origin. */
+function boundOrigin(origin) {
+    return isOriginPattern(origin) ? parseOriginPattern(origin).ok : canonicalOrigin(origin) !== undefined;
 }
-function formTarget(target) {
+/** A form.data target; `bound` lets the origin be a wildcard, which only a binding may be. */
+function formTarget(target, bound = false) {
     if (!target || typeof target !== 'object' || Array.isArray(target))
         return undefined;
     const { origin, field } = target;
     if (typeof origin !== 'string' || typeof field !== 'string')
         return undefined;
-    if (canonicalOrigin(origin) === undefined)
+    if (!(bound ? boundOrigin(origin) : canonicalOrigin(origin) !== undefined))
         return undefined;
     return { origin, field };
 }
 /**
- * Which destination one fill takes: a TOTP code goes into `browser.field`
- * whatever the field is (OTP fields are text), a password into `browser.field`,
- * and anything else is form data (§4). The caller learns `totp` from
- * `ctx.buddi.secrets.list()` — names and flags only, there is no read path —
- * and `password` from the backend.
+ * Whether the owner bound this secret as `browser.field` to the origin the
+ * field sits on. Names, kinds and targets only — `ctx.buddi.secrets.list()`
+ * never carries a value.
+ */
+export function fieldBoundTo(bindings, origin) {
+    return bindings.some((binding) => binding.kind === FIELD_KIND && originBinds(origin, binding.target));
+}
+/**
+ * Which destination one fill takes (§3): a TOTP code goes into `browser.field`
+ * whatever the field is (OTP fields are text), and so does a password. A
+ * visible field takes `browser.field` too when the owner bound the secret as
+ * `browser.field` to that field's origin — a username is always a visible
+ * field — and anything else is form data, which is a card every time. So a
+ * password field never takes a form-data-only secret, and a card number bound
+ * as form data never skips its card. The caller learns `totp` and the bindings
+ * from `ctx.buddi.secrets.list()` and `password` from the backend.
+ */
+export function secretKindFor(totp, password, fieldBound = false) {
+    return totp || password || fieldBound ? FIELD_KIND : FORM_KIND;
+}
+/**
+ * What `secret.list` answers: each field copied by name, so nothing the
+ * listing ever grows (last use, rules, approvals) reaches a model by accident.
  */
-export function secretKindFor(totp, password) {
-    return totp || password ? FIELD_KIND : FORM_KIND;
+export function secretsForAgent(listing) {
+    return listing.map((secret) => ({
+        name: secret.name,
+        totp: secret.totp === true,
+        bindings: secret.bindings.map((binding) => ({ kind: binding.kind, target: binding.target })),
+    }));
 }
 /** Values delivered and not yet taken, by use id — `email`'s credentials pattern. */
 const handed = new Map();
@@ -86,12 +125,30 @@ export function takeDelivered(use) {
 function deliver(value, _target, { use }) {
     handed.set(use, value);
 }
-/** `browser.field`: the owner's secret into one field of one exact origin. */
+/**
+ * A `browser.field` use's target: the origin, or for a visible field the
+ * origin and the field's name, so the card says exactly where it goes. The
+ * binding is always the origin alone.
+ */
+function fieldTargetOrigin(target) {
+    if (typeof target === 'string')
+        return target;
+    if (!target || typeof target !== 'object' || Array.isArray(target))
+        return undefined;
+    const { origin, field } = target;
+    return typeof origin === 'string' && typeof field === 'string' ? origin : undefined;
+}
+/** `browser.field`: the owner's secret into a field of one exact origin, or of any origin under a wildcard one. */
 export const fieldDestination = {
     kind: FIELD_KIND,
     maxRule: 'pre-approved',
-    checkTarget: (target, bound) => typeof target === 'string' && typeof bound === 'string' && sameOrigin(target, bound),
-    describe: (target) => `the page at ${String(target)}`,
+    checkTarget: (target, bound) => typeof bound === 'string' && originBinds(fieldTargetOrigin(target), bound),
+    describe(target) {
+        if (typeof target === 'string')
+            return `the page at ${target}`;
+        const asked = formTarget(target);
+        return asked === undefined ? 'a page field' : `the ${asked.field} field on ${asked.origin}`;
+    },
     deliver,
 };
 /**
@@ -103,10 +160,10 @@ export const formDataDestination = {
     maxRule: 'every-time',
     checkTarget(target, bound) {
         const asked = formTarget(target);
-        const owned = formTarget(bound);
+        const owned = formTarget(bound, true);
         if (asked === undefined || owned === undefined)
             return false;
-        if (!sameOrigin(asked.origin, owned.origin))
+        if (!originBinds(asked.origin, owned.origin))
             return false;
         return asked.field === owned.field;
     },

package/node_modules/@buddi/tool-browser/dist/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,sGAAsG;AACtG,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAC;AAC1C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAC7C,yFAAyF;AACzF,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAYjD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAA8B;IAC5D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAA8B;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,wBAAwB,CAAC,wKAAwK,CAAC,CAAC;IAC/M,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAA8B,EAAE,cAAsB;IACtF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QACtD,MAAM,IAAI,wBAAwB,CAAC,4GAA4G,CAAC,CAAC;IACnJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,CAAU,EAAE,CAAU;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAKD,SAAS,UAAU,CAAC,MAAe;IACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAiC,CAAC;IAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9E,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,QAAiB;IAC5D,OAAO,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEzC,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,OAAgB,EAAE,EAAE,GAAG,EAAmB;IACxE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC;IACpH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,EAAE;IACrD,OAAO;CACR,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,YAAY;IACrB,WAAW,CAAC,MAAM,EAAE,KAAK;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;IACrC,CAAC;IACD,QAAQ,CAAC,MAAM;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;IAChG,CAAC;IACD,OAAO;CACR,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,YAAY;IACrB,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,KAAK;IACvI,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,EAAE;IACjD,OAAO;CACR,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,yFAAyF;AACzF,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAC;AAC1C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAC7C,yFAAyF;AACzF,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAYjD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAA8B;IAC5D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAClF,iEAAiE;IACjE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAA8B;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,wBAAwB,CAAC,wKAAwK,CAAC,CAAC;IAC/M,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAA8B,EAAE,cAAsB;IACtF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QACtD,MAAM,IAAI,wBAAwB,CAAC,4GAA4G,CAAC,CAAC;IACnJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAa,EAAE,KAAc;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,+FAA+F;AAC/F,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;AACzG,CAAC;AAKD,8FAA8F;AAC9F,SAAS,UAAU,CAAC,MAAe,EAAE,KAAK,GAAG,KAAK;IAChD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAiC,CAAC;IAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9E,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAA0D,EAAE,MAAc;IACrG,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACxG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,QAAiB,EAAE,UAAU,GAAG,KAAK;IAChF,OAAO,IAAI,IAAI,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAmH;IACjJ,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;KAC7F,CAAC,CAAC,CAAC;AACN,CAAC;AAED,qFAAqF;AACrF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEzC,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,OAAgB,EAAE,EAAE,GAAG,EAAmB;IACxE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAiC,CAAC;IAC5D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC1G,QAAQ,CAAC,MAAM;QACb,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,eAAe,MAAM,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO;CACR,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,YAAY;IACrB,WAAW,CAAC,MAAM,EAAE,KAAK;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3D,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;IACrC,CAAC;IACD,QAAQ,CAAC,MAAM;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;IAChG,CAAC;IACD,OAAO;CACR,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,YAAY;IACrB,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,KAAK;IACvI,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,EAAE;IACjD,OAAO;CACR,CAAC"}

package/node_modules/@buddi/tool-browser/dist/service.d.ts

@@ -10,6 +10,16 @@ import type { BrowserCommand, BrowserDriver, BrowserHand, Observation } from './
  * same chat; everywhere else it is the dashboard's own Settings page, which is
  * where the Stop button lives.
  */
+/** Said when control paused: the tab or window is gone, or the page kept failing to answer. The way back depends on where the owner is. */
+export declare function browserPausedMessage(surface?: SurfaceProfile): string;
+/**
+ * Said when an observation did not answer and control stays with the agent.
+ * A slow page is something the model can wait out itself, so there is nothing
+ * for the owner to do and the wording is the same on every surface.
+ */
+export declare function browserWaitMessage(_surface?: SurfaceProfile): string;
+/** What the model is told instead: one ask of the owner, not a retry. */
+export declare const OWNER_WATCHING_MESSAGE = "The owner is looking at that tab. Ask them to switch to another tab or window, then try once more.";
 export declare function browserStoppedMessage(surface?: SurfaceProfile): string;
 /** The three ways an agent can get a screen. */
 export type BrowserMode = 'computer' | 'playwright' | 'extension';
@@ -55,8 +65,8 @@ export interface BrowserEngineStatus {
     engine: 'chromium' | 'chrome' | 'none';
     /** No display on this Linux machine, so it runs headless. */
     headless: boolean;
-    /** The last launch failed for missing Linux libraries. */
-    problem?: 'missing-libraries';
+    /** The last launch failed for missing Linux libraries, or because the system would not let Chromium start its sandbox. */
+    problem?: 'missing-libraries' | 'no-sandbox';
     /** One or two sentences for the owner, when there is something to say. */
     message?: string;
     /**

package/node_modules/@buddi/tool-browser/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAItE,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG1F;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,CAItE;AAED,gDAAgD;AAChD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrG,WAAW,CAAC,EAAE;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzG,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACpG,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACvJ,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,8FAA8F;IAC9F,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AACD,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAC;IAClB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CAC/F;AACD,MAAM,WAAW,YAAY;IAAG,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE;AAC/F;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAAG,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,WAAW,CAAA;CAAE;AAC9F,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AAC7H,2GAA2G;AAC3G,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AACnF,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAA;CAAE;AACjD,MAAM,WAAW,iBAAiB;IAChC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC;IAC5C,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,4FAA4F;IAC5F,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACxG,gFAAgF;IAChF,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAAC;IAC9C,SAAS,CAAC,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5D,6FAA6F;IAC7F,cAAc,CAAC,IAAI,aAAa,CAAC;IACjC,kGAAkG;IAClG,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACrC,QAAQ,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;CAC5C;AAED;6EAC6E;AAC7E,qBAAa,cAAc;;IAyBb,QAAQ,CAAC,MAAM,EAAE,aAAa;IAAE,QAAQ,CAAC,OAAO,EAAE;QAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB;gBANoB,MAAM,EAAE,aAAa,EAAW,OAAO,GAAE;QAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KAChB;IAGA,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAc7B,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,aAAa;IAS5C,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAEnD;;;;;;OAMG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,gBAAgB;IAe7C,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO;IAcnC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAqN1E;;;;;;;;;;;;;OAaG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IA6B5E;;;;;;;;;;OAUG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAmE5E,+EAA+E;IAC/E,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA0DzG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAIhC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAItE,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG1F;;;;;;;;GAQG;AACH,2IAA2I;AAC3I,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,CAIrE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,MAAM,CAEpE;AAQD,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,uGAAuG,CAAC;AAI3I,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,CAItE;AAED,gDAAgD;AAChD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrG,WAAW,CAAC,EAAE;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzG,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACpG,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACvJ,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,8FAA8F;IAC9F,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AACD,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAC;IAClB,0HAA0H;IAC1H,OAAO,CAAC,EAAE,mBAAmB,GAAG,YAAY,CAAC;IAC7C,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CAC/F;AACD,MAAM,WAAW,YAAY;IAAG,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE;AAC/F;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAAG,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,WAAW,CAAA;CAAE;AAC9F,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AAC7H,2GAA2G;AAC3G,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AACnF,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAA;CAAE;AACjD,MAAM,WAAW,iBAAiB;IAChC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC;IAC5C,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,4FAA4F;IAC5F,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACxG,gFAAgF;IAChF,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAAC;IAC9C,SAAS,CAAC,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5D,6FAA6F;IAC7F,cAAc,CAAC,IAAI,aAAa,CAAC;IACjC,kGAAkG;IAClG,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACrC,QAAQ,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;CAC5C;AAED;6EAC6E;AAC7E,qBAAa,cAAc;;IA0Bb,QAAQ,CAAC,MAAM,EAAE,aAAa;IAAE,QAAQ,CAAC,OAAO,EAAE;QAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB;gBANoB,MAAM,EAAE,aAAa,EAAW,OAAO,GAAE;QAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KAChB;IAOA,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAc7B,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,aAAa;IAS5C,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAEnD;;;;;;OAMG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,gBAAgB;IAe7C,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO;IAcnC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAiP1E;;;;;;;;;;;;;OAaG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAkC5E;;;;;;;;;;OAUG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAoE5E,+EAA+E;IAC/E,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA2DzG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAIhC"}

package/node_modules/@buddi/tool-browser/dist/service.js

@@ -1,8 +1,8 @@
 import { randomUUID } from 'node:crypto';
 import { mkdir, readFile, writeFile, rename } from 'node:fs/promises';
 import path from 'node:path';
-import { FORM_KIND, NATIVE_KIND, secretKindFor, takeDelivered } from './secrets.js';
-import { BrowserPreconditionError, UNTRUSTED } from './types.js';
+import { FORM_KIND, NATIVE_KIND, fieldBoundTo, secretKindFor, takeDelivered } from './secrets.js';
+import { BrowserPreconditionError, UNTRUSTED, observedLine } from './types.js';
 /**
  * "The owner stopped the browser", said where the owner can undo it.
  *
@@ -12,6 +12,30 @@ import { BrowserPreconditionError, UNTRUSTED } from './types.js';
  * same chat; everywhere else it is the dashboard's own Settings page, which is
  * where the Stop button lives.
  */
+/** Said when control paused: the tab or window is gone, or the page kept failing to answer. The way back depends on where the owner is. */
+export function browserPausedMessage(surface) {
+    return surface?.id === 'telegram'
+        ? 'Control is paused: the page closed or stopped answering. Send /browser resume here, then ask again for a fresh look.'
+        : 'Control is paused. Ask the owner to inspect the selected app/window and the reported cause, then use Resume access and ask for a fresh observation.';
+}
+/**
+ * Said when an observation did not answer and control stays with the agent.
+ * A slow page is something the model can wait out itself, so there is nothing
+ * for the owner to do and the wording is the same on every surface.
+ */
+export function browserWaitMessage(_surface) {
+    return 'The page has not answered yet. Wait a few seconds and observe again.';
+}
+/** An observation failure that no waiting fixes: the tab or window it was reading is gone. */
+const SCREEN_GONE = /\b(tab|window)\b[^.]*\b(closed|gone)\b|has been closed|target closed/i;
+/** A gone tab the driver can replace by itself ("observe again to continue in a new one") is not a screen lost. */
+const SCREEN_REPLACEABLE = /observe again to continue in a new one/i;
+/** The extension's refusal to act in the tab the owner is viewing (extension commands.ts, `WATCHED`). */
+const OWNER_WATCHING = /You are looking at this tab/i;
+/** What the model is told instead: one ask of the owner, not a retry. */
+export const OWNER_WATCHING_MESSAGE = 'The owner is looking at that tab. Ask them to switch to another tab or window, then try once more.';
+/** Consecutive observation failures on one session before control pauses. */
+const MAX_OBSERVATION_FAILURES = 3;
 export function browserStoppedMessage(surface) {
     return surface?.id === 'telegram'
         ? 'The owner stopped the browser. Only the owner can enable it again — send /browser resume here.'
@@ -45,6 +69,7 @@ export class BrowserService {
     #lastAction;
     #message;
     #preconditionFailures = 0;
+    #observationFailures = 0;
     #needsObservation = false;
     #spent = new Set();
     #controlTail = Promise.resolve();
@@ -54,6 +79,10 @@ export class BrowserService {
         this.options = options;
     }
     #now() { return this.options.now?.() ?? Date.now(); }
+    /** When buddi took this observation, so the model can tell the newest from an older one. */
+    #stamp(observation) {
+        return { ...observation, observedAt: new Date(this.#now()).toISOString() };
+    }
     async enable() {
         if (this.#enabled)
             return;
@@ -186,27 +215,27 @@ export class BrowserService {
                 const observation = await this.driver.observe();
                 const picture = await this.driver.screenshot();
                 controller.signal.throwIfAborted();
-                this.#observation = observation;
+                this.#observation = this.#stamp(observation);
                 this.#picture = picture;
                 this.#needsObservation = false;
+                this.#observationFailures = 0;
             }
             catch (error) {
                 controller.signal.throwIfAborted();
-                this.#observation = undefined;
-                this.#picture = undefined;
-                this.#needsObservation = true;
-                this.#state = 'paused';
                 const cause = error instanceof Error ? error.message : String(error);
-                const recovery = 'Control is paused. Ask the owner to inspect the selected app/window and the reported cause, then use Resume access and ask for a fresh observation. Do not retry while paused or guess targets. This is an observation failure, not an ownership conflict.';
-                this.#message = `${command.action === 'observe' ? 'Observation failed' : 'Action completed, but observation failed'}: ${cause}. ${recovery}${command.action === 'observe' ? '' : ' Do not repeat the action; its effect may already have happened.'}`;
+                const paused = this.#observationFailed(cause);
+                // The extension's final error already says to wait and observe again; do not say it twice.
+                const recovery = paused ? browserPausedMessage(ctx.surface) : /observe again\.?$/i.test(cause.trim()) ? '' : browserWaitMessage(ctx.surface);
+                this.#message = `${command.action === 'observe' ? 'Observation failed' : 'Action completed, but observation failed'}: ${cause.replace(/\.$/, '')}.${recovery ? ` ${recovery}` : ''}${command.action === 'observe' ? '' : ' Do not repeat the action; its effect may already have happened.'}`;
                 const result = { completed: command.action !== 'observe', observed: false, error: cause,
-                    state: 'paused', recovery, message: this.#message, notice: UNTRUSTED };
+                    state: this.#state, recovery, message: this.#message, notice: UNTRUSTED };
                 if (command.action === 'observe')
                     throw new ObservationFailure(JSON.stringify(result));
                 return result;
             }
             controller.signal.throwIfAborted();
-            return { completed: true, notice: UNTRUSTED, observation: this.#observation, message: this.#message };
+            const observed = observedLine(this.#observation.observedAt);
+            return { completed: true, notice: UNTRUSTED, observation: this.#observation, message: this.#message ? `${observed} ${this.#message}` : observed };
         }
         catch (error) {
             if (error instanceof ObservationFailure)
@@ -228,6 +257,21 @@ export class BrowserService {
             this.#busy = false;
         }
     }
+    /**
+     * An observation that did not come back. Usually a page still loading or
+     * busy, which the agent can wait out and observe again, so control stays
+     * with it and the next action must be a fresh observation. Control pauses
+     * only when the tab or window is gone, or on the third failure in a row.
+     * Returns whether it paused.
+     */
+    #observationFailed(cause) {
+        this.#observation = undefined;
+        this.#picture = undefined;
+        this.#needsObservation = true;
+        const paused = ++this.#observationFailures >= MAX_OBSERVATION_FAILURES || (SCREEN_GONE.test(cause) && !SCREEN_REPLACEABLE.test(cause));
+        this.#state = paused ? 'paused' : 'running';
+        return paused;
+    }
     /**
      * A new owner message continues the session under that message's request:
      * the old one is spent, the step budget and the failure count reset, and the
@@ -253,6 +297,16 @@ export class BrowserService {
      * than on the stale arguments. Nothing was dispatched for any of these.
      */
     async #precondition(controller, error) {
+        if (OWNER_WATCHING.test(error.message)) {
+            // Not a targeting failure and nothing waiting fixes: only the owner
+            // moving to another tab does. No pause and no count; the next action
+            // must observe first, so the model asks once instead of retrying.
+            this.#message = OWNER_WATCHING_MESSAGE;
+            this.#state = 'running';
+            this.#needsObservation = true;
+            throw new BrowserPreconditionError(JSON.stringify({ error: OWNER_WATCHING_MESSAGE, dispatched: false,
+                recovery: 'Ask the owner now and wait for their answer. Do not retry by yourself.' }));
+        }
         this.#message = error.message;
         this.#state = ++this.#preconditionFailures >= 3 ? 'paused' : 'running';
         if (this.#state === 'paused')
@@ -263,19 +317,22 @@ export class BrowserService {
             const observation = await this.driver.observe();
             const picture = await this.driver.screenshot();
             controller.signal.throwIfAborted();
-            this.#observation = observation;
+            this.#observation = this.#stamp(observation);
             this.#picture = picture;
+            this.#observationFailures = 0;
         }
         catch (observationError) {
             controller.signal.throwIfAborted();
-            this.#observation = undefined;
-            this.#picture = undefined;
-            this.#needsObservation = true;
-            this.#state = 'paused';
-            this.#message += ` Recovery observation failed: ${observationError instanceof Error ? observationError.message : String(observationError)}. Inspect the selected app/window and this error, then resume and observe. Do not retry while paused.`;
+            const cause = observationError instanceof Error ? observationError.message : String(observationError);
+            const targeting = this.#state === 'paused';
+            const paused = this.#observationFailed(cause) || targeting;
+            if (paused)
+                this.#state = 'paused';
+            this.#message += ` Recovery observation failed: ${cause.replace(/\.$/, '')}. ${paused ? 'Inspect the selected app/window and this error, then resume and observe. Do not retry while paused.' : browserWaitMessage()}`;
         }
         throw new BrowserPreconditionError(JSON.stringify({ error: this.#message, dispatched: false,
-            recovery: this.#state === 'paused' ? 'Wait for owner resume. Do not retry.' : 'Re-evaluate using the fresh observation below. Prefer target:{ref:"..."} and this observation.id. Do not guess an index or reuse the previous observation.',
+            ...(this.#observation?.observedAt ? { message: observedLine(this.#observation.observedAt) } : {}),
+            recovery: this.#state === 'paused' ? 'Wait for owner resume. Do not retry.' : this.#needsObservation ? browserWaitMessage() : 'Re-evaluate using the fresh observation below. Prefer target:{ref:"..."} and this observation.id. Do not guess an index or reuse the previous observation.',
             observation: this.#observation }));
     }
     /**
@@ -384,11 +441,16 @@ export class BrowserService {
             if (secret === undefined) {
                 throw new BrowserPreconditionError(`There is no secret named "${input.name}" bound to this browser's destinations. The owner keeps one in Settings, under Keys and secrets.`);
             }
-            const kind = secretKindFor(secret.totp, facts.password);
+            // A visible field on an origin the owner bound as browser.field takes
+            // that binding; the card then names the field (§3).
+            const visibleField = !secret.totp && !facts.password && fieldBoundTo(secret.bindings, facts.origin);
+            const kind = secretKindFor(secret.totp, facts.password, visibleField);
             if (kind === FORM_KIND && facts.name.trim() === '') {
                 throw new BrowserPreconditionError('That field has no name the page gives it, so it cannot be a form-field destination. Observe again, or ask the owner to bind the secret to the page instead.');
             }
-            const outcome = await secrets.use(input.name, kind, kind === FORM_KIND ? { origin: facts.origin, field: facts.name } : facts.origin);
+            const named = { origin: facts.origin, field: facts.name };
+            const target = kind === FORM_KIND || (visibleField && facts.name.trim() !== '') ? named : facts.origin;
+            const outcome = await secrets.use(input.name, kind, target);
             if ('pending' in outcome) {
                 return { pending: true, actionId: outcome.pending, message: 'The owner has a decision card for this use. Nothing was filled; ask again once it is decided.' };
             }
@@ -488,6 +550,7 @@ export class BrowserService {
         this.#lastAction = undefined;
         this.#message = undefined;
         this.#preconditionFailures = 0;
+        this.#observationFailures = 0;
         await this.driver.close();
     }
     /** Only authenticated owner UI handlers call this; it is not an agent tool. */
@@ -537,6 +600,7 @@ export class BrowserService {
                 this.driver.resume?.();
                 this.#handless = false;
                 this.#preconditionFailures = 0;
+                this.#observationFailures = 0;
                 this.#observation = undefined;
                 this.#picture = undefined;
                 this.#needsObservation = !!this.#session;