@zixt/host 0.0.146 → 0.0.148

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir4 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.146",
+  version: "0.0.148",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -14826,6 +14826,7 @@ var BrowserTab = external_exports.object({
   loading: external_exports.boolean()
 }).strict();
 var BROWSER_MAX_TABS = 12;
+var ApprovalSignIn = external_exports.object({ origin: external_exports.string().min(1).max(300) }).strict();
 var TeammateQuestionAttention = external_exports.enum(["browser", "answer"]);
 var BrowserSessionState = external_exports.object({
   browserSessionId: BrowserSessionId,
@@ -15093,6 +15094,12 @@ var Approval = external_exports.object({
   questionnaire: Questionnaire.optional(),
   /** Exact submitted questionnaire response, once answered. */
   questionnaireAnswers: QuestionnaireAnswers.optional(),
+  /**
+   * Present when the Host raised this ask from a run stopped at a sign-in
+   * wall. Every "a person is needed at the Browser" surface reads this rather
+   * than hunting for the word "browser" in text the model wrote.
+   */
+  signIn: ApprovalSignIn.optional(),
   status: ApprovalStatus,
   deliveryStatus: ApprovalDeliveryStatus,
   /** Why delivery became impossible; null while pending or after delivery. */
@@ -19605,7 +19612,13 @@ var ApprovalRequest = external_exports.object({
   /** Optional structured answers for agent.question; absent means free text. */
   questionChoices: QuestionChoices.optional(),
   /** Optional submit-once questionnaire for agent.question. */
-  questionnaire: Questionnaire.optional()
+  questionnaire: Questionnaire.optional(),
+  /**
+   * Set by the Host when this ask comes from a run stopped at a sign-in wall
+   * its own Browser detected. This is what makes "a person is needed at the
+   * Browser" a fact on the wire rather than a word the model had to type.
+   */
+  signIn: ApprovalSignIn.optional()
 });
 var JournalAppend = external_exports.object({
   type: external_exports.literal("journal.append"),
@@ -21535,6 +21548,14 @@ var AttentionItem = external_exports.object({
     version: external_exports.string().min(1)
   }),
   href: external_exports.string().min(1),
+  /**
+   * This item is a teammate waiting at a sign-in it cannot pass. The
+   * destination is therefore the teammate's Browser rather than a thread, and
+   * every surface that rebuilds an item's link has to leave `href` alone —
+   * sending someone to the conversation is exactly the dead end that made a
+   * person go find the Browser themselves.
+   */
+  needsBrowser: external_exports.boolean().optional(),
   actions: external_exports.array(
     external_exports.object({
       kind: external_exports.enum([
@@ -26103,7 +26124,7 @@ var HostClient = class _HostClient {
       const { provider: _provider, ...legacyGrant } = grant;
       return legacyGrant;
     };
-    const requestApproval = (category, summary, payload, questionChoices, questionnaire) => {
+    const requestApproval = (category, summary, payload, questionChoices, questionnaire, signIn) => {
       if (authorityController.signal.aborted) {
         return Promise.resolve({ approved: false, guidance: "task was cancelled" });
       }
@@ -26117,7 +26138,8 @@ var HostClient = class _HostClient {
         summary: safe(summary, 500),
         payload: safe(payload, 5e4),
         ...questionChoices ? { questionChoices: [...questionChoices] } : {},
-        ...questionnaire ? { questionnaire } : {}
+        ...questionnaire ? { questionnaire } : {},
+        ...signIn ? { signIn: { origin: safe(signIn.origin, 300) } } : {}
       });
       return new Promise((resolve20) => {
         const waiters = this.approvalWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
@@ -31500,6 +31522,47 @@ async function installChromium() {
   });
 }
 var KEY_ALIASES = { " ": "Space" };
+async function captureUserAgentMetadata(context) {
+  let probe = null;
+  try {
+    probe = await context.newPage();
+    await probe.route(
+      "**/*",
+      (route) => route.fulfill({ status: 200, contentType: "text/html", body: "<!doctype html>" })
+    );
+    await probe.goto("https://user-agent.zixt.invalid/", { waitUntil: "domcontentloaded" });
+    return await probe.evaluate(async () => {
+      const data = navigator.userAgentData;
+      if (!data) return null;
+      const hints = await data.getHighEntropyValues([
+        "architecture",
+        "bitness",
+        "model",
+        "platformVersion",
+        "uaFullVersion",
+        "fullVersionList",
+        "wow64"
+      ]);
+      return {
+        brands: hints["brands"] ?? [],
+        fullVersionList: hints["fullVersionList"] ?? [],
+        fullVersion: String(hints["uaFullVersion"] ?? ""),
+        platform: String(hints["platform"] ?? ""),
+        platformVersion: String(hints["platformVersion"] ?? ""),
+        architecture: String(hints["architecture"] ?? ""),
+        model: String(hints["model"] ?? ""),
+        mobile: Boolean(hints["mobile"]),
+        bitness: String(hints["bitness"] ?? ""),
+        wow64: Boolean(hints["wow64"])
+      };
+    });
+  } catch {
+    return null;
+  } finally {
+    if (probe) await probe.close().catch(() => {
+    });
+  }
+}
 function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
   const load = dependencies.loadPlaywright ?? loadPlaywright;
   const install = dependencies.installChromium ?? installChromium;
@@ -31529,7 +31592,8 @@ function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
         args: ["--disable-blink-features=AutomationControlled"]
       });
       await Promise.all(context.pages().map((page2) => page2.close()));
-      runtime = { context, references: 0 };
+      const userAgentMetadata = await captureUserAgentMetadata(context);
+      runtime = { context, references: 0, userAgentMetadata };
       runtimes.set(profileDir, runtime);
     }
     runtime.references += 1;
@@ -31703,7 +31767,8 @@ function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
             realisticUserAgent = reported.replace("HeadlessChrome/", "Chrome/");
           }
           await tab.cdp.send("Emulation.setUserAgentOverride", {
-            userAgent: realisticUserAgent
+            userAgent: realisticUserAgent,
+            ...runtime.userAgentMetadata ? { userAgentMetadata: runtime.userAgentMetadata } : {}
           });
         } catch {
         }
@@ -31959,7 +32024,11 @@ function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
           };
         },
         async screenshot() {
-          const image = await requireActive().page.screenshot({ type: "jpeg", quality: 70 });
+          const image = await requireActive().page.screenshot({
+            type: "jpeg",
+            quality: 70,
+            caret: "initial"
+          });
           return {
             jpegBase64: image.toString("base64"),
             width: liveViewport.width,
@@ -32115,7 +32184,7 @@ function authenticationWallGuidance(origin) {
   return [
     `This page is asking someone to sign in to ${origin}.`,
     "If a saved website-login Credential covers this site, call browser_login with its name.",
-    "Otherwise stop here and use ask_user to ask the person to sign in at the Browser panel, naming the Browser in the question so their panel opens.",
+    "Otherwise stop here and use ask_user to ask the person to sign in at the Browser panel; say plainly which site and why you are stopped, and their panel opens on this page for them.",
     "That is the route to ask for, because a saved login is filled by Host code, is never shown to you, and is scrubbed from anything you write.",
     "This browser and its profile outlive the run, so a person can sign in after your session checkpoints and you continue on the authenticated page.",
     "A one-time code expires and a person is faster at their own password prompt, so do not ask for either instead of the handoff; if they choose to send you a credential anyway, use it without repeating it.",
@@ -32252,8 +32321,7 @@ var BROWSER_TOOL_DEFINITIONS = [
 ];
 
 // src/tool-packs/browser/index.ts
-function externalPage(page2, data, truncated = false) {
-  const wall = detectAuthenticationWall(page2);
+function externalPageOutcome(page2, data, truncated, wall) {
   return {
     ok: true,
     result: {
@@ -32269,6 +32337,11 @@ var asNumber = (value) => typeof value === "number" && Number.isFinite(value) ?
 function createBrowserToolPack(deps) {
   const { manager, taskId, agentId } = deps;
   let detached = false;
+  let signInWall = null;
+  const externalPage = (page2, data, truncated = false) => {
+    signInWall = detectAuthenticationWall(page2);
+    return externalPageOutcome(page2, data, truncated, signInWall);
+  };
   const guard = () => {
     if (detached) return "this run has ended; the browser tool is detached";
     if (deps.authoritySignal.aborted || deps.cancelledNow()) return "task was cancelled";
@@ -32477,6 +32550,7 @@ function createBrowserToolPack(deps) {
     version: 1,
     tools: BROWSER_TOOL_DEFINITIONS,
     call,
+    currentSignInWall: () => signInWall ? { origin: signInWall.origin } : null,
     async close() {
       detached = true;
     }
@@ -42014,18 +42088,18 @@ function createCliRunner(adapter, opts = {}) {
           "This Task needs a web browser, but the Browser is no longer available on this Machine. Install the pinned Chromium build or continue the Task on a Browser-ready Machine."
         );
       }
+      let browserPack = null;
       if (task.spec.requiresBrowser && opts.browserManager && browserAvailable) {
-        toolPacks.push(
-          createBrowserToolPack({
-            manager: opts.browserManager,
-            taskId: task.taskId,
-            agentId: task.agentId,
-            authoritySignal: task.authoritySignal,
-            cancelledNow: task.cancelledNow,
-            requestWebLogin: task.requestWebLogin,
-            event: task.event
-          })
-        );
+        browserPack = createBrowserToolPack({
+          manager: opts.browserManager,
+          taskId: task.taskId,
+          agentId: task.agentId,
+          authoritySignal: task.authoritySignal,
+          cancelledNow: task.cancelledNow,
+          requestWebLogin: task.requestWebLogin,
+          event: task.event
+        });
+        toolPacks.push(browserPack);
       }
       let preparedWorkspace = null;
       if (task.spec.providerWorkspace) {
@@ -42044,12 +42118,14 @@ function createCliRunner(adapter, opts = {}) {
         askUser: async (question, context, choices, questionnaire) => {
           pendingAsks++;
           try {
+            const signInWall = browserPack?.currentSignInWall?.() ?? null;
             const decision = await task.requestApproval(
               "agent.question",
               question.slice(0, 500),
               (context || question).slice(0, MAX_APPROVAL_PAYLOAD),
               choices,
-              questionnaire
+              questionnaire,
+              signInWall ?? void 0
             );
             return decision.guidance ?? (decision.approved ? "Approved. Proceed." : "No. Do not proceed.");
           } finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.146",
+  "version": "0.0.148",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",