@zixt/host 0.0.64 → 0.0.66

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.64",
+  version: "0.0.66",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -16331,13 +16331,18 @@ var TaskTimingBreakdown = external_exports.object({
   runs: external_exports.array(TaskTimingRun).max(TASK_TIMING_MAX_RUNS)
 }).strict();
 var TaskProgressStepState = external_exports.enum([
-  /** Reached, and the Task has since moved past it. */
+  /** Reached and finished: the Task demonstrably passed through it. */
   "done",
   /** The furthest step the Task has reached. */
   "active",
   /** Not reached yet. */
   "pending",
-  /** The Task moved past this step without spending measurable time in it. */
+  /**
+   * The Task went past this step with nothing to show for it: no recorded
+   * activity of that kind and no measurable time. Reserved for the steps
+   * attributed from the activity record — a dispatched Task queued and started
+   * up whatever the clock says, so those two are never reported as skipped.
+   */
   "skipped"
 ]);
 var TaskProgressStep = external_exports.object({
@@ -16401,8 +16406,8 @@ var TaskProgressEstimate = external_exports.object({
   elapsedMs: external_exports.number().int().min(0),
   /** Of that, time a Machine was actually working. */
   activeMs: external_exports.number().int().min(0),
-  /** Working time still expected, as a range; null when unknowable. */
-  remaining: external_exports.object({ lowMs: external_exports.number().int().min(0), highMs: external_exports.number().int().min(0) }).strict().nullable(),
+  /** Working time still expected, as one estimate; null when unknowable. */
+  remainingMs: external_exports.number().int().min(0).nullable(),
   sample: TaskProgressSample.nullable(),
   /** Every TS-20 step, in lifecycle order. */
   steps: external_exports.array(TaskProgressStep),
@@ -27237,6 +27242,36 @@ import { lstat as lstat11, mkdir as mkdir10, realpath as realpath8 } from "node:
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname7, isAbsolute as isAbsolute14, join as join14, resolve as resolve9 } from "node:path";
 
+// src/tool-packs/browser/authentication-wall.ts
+var AUTH_PATH_SEGMENT = /(?:^|\/)(?:log[-_]?in|sign[-_]?in|sso|saml|auth|authorize|authenticate|oauth2?|session\/new|checkpoint)(?:\/|$)/i;
+var AUTH_HOST = /(?:^|\.)(?:auth0\.com|okta\.com|oktapreview\.com|onelogin\.com|pingidentity\.com|duosecurity\.com)$|^(?:accounts|login|signin|auth|id|idp|sso)\./i;
+var AUTH_QUERY = /[?&](?:redirect_uri|returnto|return_to|returnurl|samlrequest)=/i;
+var AUTH_TITLE = /\b(?:sign[- ]?in|log[- ]?in|login|authenticate|authentication required|unauthorized|access denied|session expired)\b/i;
+var PASSWORD_PROMPT = /\b(?:textbox|input|field)\b[^\n]{0,80}\bpass(?:word|phrase)\b/i;
+var BLOCKED_STATEMENT = /\b(?:you (?:must|need to) (?:be )?(?:sign|log)(?:ged)? ?in|please (?:sign|log) ?in|(?:sign|log) ?in to continue|your session (?:has )?expired|session expired|401 unauthorized|403 forbidden|access denied|not authorized)\b/i;
+function authenticationWallGuidance(origin) {
+  return [
+    `This page is asking someone to sign in to ${origin}.`,
+    "You cannot type a password: if a saved website-login Credential covers this site, call browser_login with its name.",
+    "Otherwise stop here and use ask_user to ask the person to sign in at the Browser panel, naming the Browser in the question so their panel opens.",
+    "This browser and its profile outlive the run, so a person can sign in after your session checkpoints and you continue on the authenticated page.",
+    "Never ask for, accept, or type a password, token, or one-time code in chat.",
+    "If this Task cannot be verified without being signed in, ask now rather than reporting that limitation once you have already declared the work verified."
+  ].join(" ");
+}
+function detectAuthenticationWall(page2) {
+  let url3;
+  try {
+    url3 = new URL(page2.url);
+  } catch {
+    return null;
+  }
+  if (url3.protocol !== "https:" && url3.protocol !== "http:") return null;
+  const walled = AUTH_PATH_SEGMENT.test(url3.pathname) || AUTH_HOST.test(url3.hostname) || AUTH_QUERY.test(url3.search) || AUTH_TITLE.test(page2.title) || page2.text !== void 0 && (PASSWORD_PROMPT.test(page2.text) || BLOCKED_STATEMENT.test(page2.text));
+  if (!walled) return null;
+  return { origin: url3.origin, guidance: authenticationWallGuidance(url3.origin) };
+}
+
 // src/tool-packs/browser/tool-definitions.ts
 function definition(name, description, properties, required2 = []) {
   return {
@@ -27327,13 +27362,15 @@ var BROWSER_TOOL_DEFINITIONS = [
 ];
 
 // src/tool-packs/browser/index.ts
-function externalPage(url3, data, truncated = false) {
+function externalPage(page2, data, truncated = false) {
+  const wall = detectAuthenticationWall(page2);
   return {
     ok: true,
     result: {
-      source: { provider: "browser", trust: "external_untrusted", url: url3 },
+      source: { provider: "browser", trust: "external_untrusted", url: page2.url },
       data,
-      truncated
+      truncated,
+      ...wall ? { authenticationWall: wall } : {}
     }
   };
 }
@@ -27363,12 +27400,12 @@ function createBrowserToolPack(deps) {
           });
           await tool.navigate(url3);
           const state = tool.state();
-          return externalPage(state.url, { url: state.url, title: state.title });
+          return externalPage(state, { url: state.url, title: state.title });
         }
         case "browser_read": {
           const page2 = await tool.read();
           return externalPage(
-            page2.url,
+            page2,
             { url: page2.url, title: page2.title, text: page2.text },
             page2.truncated
           );
@@ -27404,7 +27441,7 @@ function createBrowserToolPack(deps) {
             ...y !== void 0 ? { y } : {}
           });
           const state = tool.state();
-          return externalPage(state.url, { url: state.url, title: state.title });
+          return externalPage(state, { url: state.url, title: state.title });
         }
         case "browser_type": {
           const text = asString(args["text"]);
@@ -27421,14 +27458,14 @@ function createBrowserToolPack(deps) {
             ...args["submit"] === true ? { submit: true } : {}
           });
           const state = tool.state();
-          return externalPage(state.url, { url: state.url, title: state.title });
+          return externalPage(state, { url: state.url, title: state.title });
         }
         case "browser_press": {
           const key = asString(args["key"]);
           if (!key) return { ok: false, error: "key is required" };
           await tool.press(key);
           const state = tool.state();
-          return externalPage(state.url, { url: state.url, title: state.title });
+          return externalPage(state, { url: state.url, title: state.title });
         }
         case "browser_scroll": {
           const deltaY = asNumber(args["delta_y"]);
@@ -32912,6 +32949,53 @@ function renderAttachmentSection(files) {
 
 // src/runners/ask-user-server.ts
 import { createServer as createServer2 } from "node:http";
+
+// src/runners/ask-user-secrets.ts
+var SECRET_NOUN_SOURCE = "(?:passwords?|passphrases?|api[ -]?keys?|access tokens?|auth tokens?|api tokens?|bearer tokens?|refresh tokens?|tokens?|secret keys?|client secrets?|private keys?|one[- ]time (?:code|password)s?|otps?|2fa codes?|mfa codes?|verification codes?|security codes?|session cookies?)";
+var SECRET_NOUN = new RegExp(String.raw`\b${SECRET_NOUN_SOURCE}\b`, "i");
+var SECRET_ENV_NAME = /\b[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)*_(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD|PAT)\b/;
+function namesSecret(sentence) {
+  return SECRET_NOUN.test(sentence) || SECRET_ENV_NAME.test(sentence);
+}
+var TRANSFER = "(?:paste|send|share|provide|supply|give|reply|respond|forward|drop|tell)";
+var REQUEST_PATTERNS = [
+  new RegExp(String.raw`^\s*(?:please\s+)?${TRANSFER}\b`, "i"),
+  new RegExp(String.raw`\b(?:can|could|would|will)\s+you\s+(?:please\s+)?${TRANSFER}\b`, "i"),
+  new RegExp(
+    String.raw`\b${TRANSFER}\b[^.?!]{0,40}\b(?:me|here|in chat|in the chat|in your (?:reply|answer|message)|below)\b`,
+    "i"
+  ),
+  new RegExp(String.raw`\b${TRANSFER}\b[^.?!]{0,20}\byour\b`, "i"),
+  new RegExp(
+    String.raw`\bwhat(?:'s| is|s|\s+are)\s+(?:the|your)\s+(?:[\w-]+\s+){0,2}${SECRET_NOUN_SOURCE}\b`,
+    "i"
+  )
+];
+var NEGATION = /\b(?:do not|don'?t|never|no need|without|rather than|instead of|avoid)\b/i;
+function namesSafeDestination(sentence) {
+  return /\bbrowser\b/i.test(sentence) || /\bcredentials?\s+(?:page|screen|tab|section|store|settings|panel|vault)\b/i.test(sentence) || /\b(?:add|adds|added|adding|store|stored|save|saved|create|created|put)\b[^.?!]{0,60}\bcredential/i.test(
+    sentence
+  );
+}
+var SECRET_IN_CHAT_REFUSAL = [
+  "Not delivered: Zixt never carries a password, token, or one-time code through chat (W5).",
+  "Ask for the capability instead of the value.",
+  "For a website, ask the person to sign in themselves at the Browser panel, or to add a website-login Credential whose name you can pass to browser_login.",
+  "For anything else, ask them to add it under Resources \u2192 Credentials as an UPPER_SNAKE_CASE name, which reaches your next run as an environment variable.",
+  "Then ask again without requesting the value."
+].join(" ");
+function secretSolicitationRefusal(question, context) {
+  const sentences = `${question}
+${context}`.split(/(?<=[.!?\n])\s+/).map((sentence) => sentence.trim()).filter((sentence) => sentence.length > 0);
+  for (const sentence of sentences) {
+    if (!namesSecret(sentence)) continue;
+    if (NEGATION.test(sentence) || namesSafeDestination(sentence)) continue;
+    if (REQUEST_PATTERNS.some((pattern) => pattern.test(sentence))) return SECRET_IN_CHAT_REFUSAL;
+  }
+  return null;
+}
+
+// src/runners/ask-user-server.ts
 var CADENCE_PROPS = {
   cadence_kind: {
     type: "string",
@@ -33629,6 +33713,11 @@ function createAskUserServer() {
           }
           try {
             const context = typeof args["context"] === "string" ? args["context"] : "";
+            const refusal = secretSolicitationRefusal(question, context);
+            if (refusal) {
+              toolText(refusal, true);
+              return;
+            }
             const rawChoices = args["choices"];
             const parsedChoices = rawChoices === void 0 ? void 0 : QuestionChoices.safeParse(rawChoices);
             if (parsedChoices && !parsedChoices.success) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.64",
+  "version": "0.0.66",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",