@withbuddi/buddi 0.1.0-pre.50 → 0.1.0-pre.52

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withbuddi/buddi",
-  "version": "0.1.0-pre.50",
+  "version": "0.1.0-pre.52",
   "type": "module",
   "description": "Your personal agents, on your computer",
   "repository": {
@@ -17,7 +17,7 @@
     "buddi": "packages/install/dist/launcher.js"
   },
   "buddi": {
-    "notes": "### Fixed\n\n- Plugins installed under an earlier version load again after an upgrade: buddi relinks each plugin to the running version at every start and once the upgrade is in place, and a plugin still left behind says \"Restart buddi to repair it\" instead of a missing-file path."
+    "notes": "### Added\n\n- Secrets in the sign-in flow, in place: an agent on a sign-in form with nothing saved for the site calls `secret.request` and a card in the chat asks for the fields it saw (username, password), with the site as a chip. Save and fill saves them for that site and fills the form at once, one approval for the set; Save only saves and hands you the page; I'll sign in myself hands it over; More options opens a sheet beside the page with a code field and more fields. The agent hears only the names saved and whether the form was filled. The thread says \"Filled username and password on wikipedia.org\", and Keys and secrets links each saved secret back to its conversation. On Telegram the card says to open the dashboard, with Decline. `POST /api/secrets` saves a set for one site in one call; `POST /api/secrets/request/decline`.\n- Capture on the Page tab's window bar: a full-resolution PNG of the page as it is now (password fields masked), whoever holds it, saved to Files under the page's title and the time, with Open in Files. `POST /api/browser/capture`.\n- A page in your Chrome is live on the Canvas: the extension paints the agent's background tab (focus emulated, so a hidden tab paints) two frames a second while the agent works, and Take over is the remote hand there as in buddi's own browser, from your phone or any other device: the picture at the link's quality (sharp, normal, fast), clicks, wheel, keys, paste, copy (never a password field) and the window's back, forward, reload and address. **Bring the tab to the front** is the secondary action in the bar for when you are at the computer (`POST /api/browser/front`), and Capture works there too. Chrome's \"buddi started debugging this browser\" bar shows while a page is open; it goes when the page closes or you close the tab. Frames cross the extension socket as binary messages.\n- One extension, several buddis: the popup lists every buddi this Chrome works for, each with its name (from its handshake: `buddi`, `buddi-dev`), address, colour, state and a switch, plus **Add a buddi** and **Remove** per row. Each buddi has its own socket, pairing code and tab groups, named after it in its colour, and a tab belongs to exactly one of them. An existing pairing becomes the first buddi, switched on. A buddi that answers and turns this browser away (paired with another copy of the extension) says so instead of *did not answer*, and is not retried until you press Try again; a token it no longer takes is dropped for a fresh code; retries back off to 30 seconds and the popup no longer flickers; a buddi from before this release connects and says *older buddi: live view off*. Settings → Browser & apps says *paired with this buddi and 1 other* instead of asking to re-point the extension, and *off in Chrome* for a buddi switched off there.\n\n### Changed\n\n- A `secret.fill` for a site with nothing saved now tells the agent to ask with the sign-in card (`secret.request`) instead of asking you in chat where the password is; a set of secrets saved together asks once for the set the first time an agent fills it there, not once per field.\n- The Canvas no longer takes the screen from a live page. While an agent has a page open in the conversation the Page tab stays in front: results open behind it with a quiet dot that clears when you open them, and only the agent's own `canvas.show` brings something forward (on a phone the sheet behaves as before). Only results with a view open a tab at all (tables, lists, charts, stories, documents, diffs, pictures, audio, previews, terminal output, a structured result with real content); a browser step, a `secret.*` fill or list, a `mission.*` report and `owner.notify` stay in their chat row, which still opens them on the canvas. When you start a new turn, the previous turn's tabs fold into the **N more** menu unless you opened them yourself.\n- The live picture of a page you hold gets sharp on a link that keeps up: after a few seconds of frames going out promptly it grows to the page's own size (up to 1440×900) at JPEG quality 70, and steps back down on lag, waiting longer each time before trying again. The window bar says *sharp* or *fast*.\n\n### Fixed\n\n- Save and fill no longer types a password into the wrong element: fields are filled by their label on the latest page (Wikipedia's login redraws after the first fill and its refs land on the Appearance radios), a ref that names a radio, checkbox or button is refused before anything is entered, and the agent is told to observe once and fill again by label before asking you; afterwards it presses the form's sign-in button itself.\n- A login wall in buddi's browser now raises the sign-in card (the fields in the card, Save and fill, with Use my Chrome beside it when that route exists) instead of the old card whose \"Save a login for next time\" sent you to Settings; a code page's card opens the sign-in card in place. A tool call the turn never ran because it stopped on a card first reads \"not run\" instead of failed.\n- Give it back starts a turn only when an agent was waiting on the page (its card was answered with Take over, the take-over interrupted it, or it tried to act while you held the page). A page taken from an idle conversation is given back with the \"Gave the page back\" stamp and no model call.\n- Take over and Give it back no longer flash or take the page back by themselves: the Page tab ignores a status still in flight for a page it just gave back or stopped, keeps its buttons asleep until the status after the action has arrived, and keeps showing the last picture the hand drew instead of an empty frame.\n- Scrolling a page you hold no longer shakes: the wheel goes to the host once per animation frame with its deltas summed, frames are drawn in the order they came (an older one finishing its decode late is dropped), a frame that only scrolls back against your gesture waits until the gesture ends, and the dashboard no longer scrolls under the picture.\n- Cmd/Ctrl+C and Cmd/Ctrl+V work on a page you hold. Copy puts the host page's selection (or the focused field's, never a password field's) on your own clipboard instead of the headless browser's; paste fires again on macOS Chrome, where the shortcut's keydown was being cancelled before the browser could paste.\n- A question can always be answered from the chat: it now stands above any approval waiting there instead of behind it, and an approval decided elsewhere, expired, or an owner secret's use that went through (`secret.fill`) leaves the dock instead of hiding the question and the composer behind a card that drew nothing."
   },
   "files": [
     "packages",