@zixt/host 0.0.84 → 0.0.85

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.84",
+  version: "0.0.85",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -28465,10 +28465,11 @@ var BLOCKED_STATEMENT = /\b(?:you (?:must|need to) (?:be )?(?:sign|log)(?:ged)?
 function authenticationWallGuidance(origin) {
   return [
     `This page is asking someone to sign in to ${origin}.`,
-    "You cannot type a password: if a saved website-login Credential covers this site, call browser_login with its name.",
+    "If a saved website-login Credential covers this site, call browser_login with its name.",
     "Otherwise stop here and use ask_user to ask the person to sign in at the Browser panel, naming the Browser in the question so their panel opens.",
+    "That is the route to ask for, because a saved login is filled by Host code, is never shown to you, and is scrubbed from anything you write.",
     "This browser and its profile outlive the run, so a person can sign in after your session checkpoints and you continue on the authenticated page.",
-    "Never ask for, accept, or type a password, token, or one-time code in chat.",
+    "A one-time code expires and a person is faster at their own password prompt, so do not ask for either instead of the handoff; if they choose to send you a credential anyway, use it without repeating it.",
     "If this Task cannot be verified without being signed in, ask now rather than reporting that limitation once you have already declared the work verified."
   ].join(" ");
 }
@@ -34256,53 +34257,6 @@ function renderAttachmentSection(files) {
 
 // src/runners/ask-user-server.ts
 import { createServer as createServer2 } from "node:http";
-
-// src/runners/ask-user-secrets.ts
-var SECRET_NOUN_SOURCE = "(?:passwords?|passphrases?|api[ -]?keys?|access tokens?|auth tokens?|api tokens?|bearer tokens?|refresh tokens?|tokens?|secret keys?|client secrets?|private keys?|one[- ]time (?:code|password)s?|otps?|2fa codes?|mfa codes?|verification codes?|security codes?|session cookies?)";
-var SECRET_NOUN = new RegExp(String.raw`\b${SECRET_NOUN_SOURCE}\b`, "i");
-var SECRET_ENV_NAME = /\b[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)*_(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD|PAT)\b/;
-function namesSecret(sentence) {
-  return SECRET_NOUN.test(sentence) || SECRET_ENV_NAME.test(sentence);
-}
-var TRANSFER = "(?:paste|send|share|provide|supply|give|reply|respond|forward|drop|tell)";
-var REQUEST_PATTERNS = [
-  new RegExp(String.raw`^\s*(?:please\s+)?${TRANSFER}\b`, "i"),
-  new RegExp(String.raw`\b(?:can|could|would|will)\s+you\s+(?:please\s+)?${TRANSFER}\b`, "i"),
-  new RegExp(
-    String.raw`\b${TRANSFER}\b[^.?!]{0,40}\b(?:me|here|in chat|in the chat|in your (?:reply|answer|message)|below)\b`,
-    "i"
-  ),
-  new RegExp(String.raw`\b${TRANSFER}\b[^.?!]{0,20}\byour\b`, "i"),
-  new RegExp(
-    String.raw`\bwhat(?:'s| is|s|\s+are)\s+(?:the|your)\s+(?:[\w-]+\s+){0,2}${SECRET_NOUN_SOURCE}\b`,
-    "i"
-  )
-];
-var NEGATION = /\b(?:do not|don'?t|never|no need|without|rather than|instead of|avoid)\b/i;
-function namesSafeDestination(sentence) {
-  return /\bbrowser\b/i.test(sentence) || /\bcredentials?\s+(?:page|screen|tab|section|store|settings|panel|vault)\b/i.test(sentence) || /\b(?:add|adds|added|adding|store|stored|save|saved|create|created|put)\b[^.?!]{0,60}\bcredential/i.test(
-    sentence
-  );
-}
-var SECRET_IN_CHAT_REFUSAL = [
-  "Not delivered: Zixt never carries a password, token, or one-time code through chat (W5).",
-  "Ask for the capability instead of the value.",
-  "For a website, ask the person to sign in themselves at the Browser panel, or to add a website-login Credential whose name you can pass to browser_login.",
-  "For anything else, ask them to add it under Resources \u2192 Credentials as an UPPER_SNAKE_CASE name, which reaches your next run as an environment variable.",
-  "Then ask again without requesting the value."
-].join(" ");
-function secretSolicitationRefusal(question, context) {
-  const sentences = `${question}
-${context}`.split(/(?<=[.!?\n])\s+/).map((sentence) => sentence.trim()).filter((sentence) => sentence.length > 0);
-  for (const sentence of sentences) {
-    if (!namesSecret(sentence)) continue;
-    if (NEGATION.test(sentence) || namesSafeDestination(sentence)) continue;
-    if (REQUEST_PATTERNS.some((pattern) => pattern.test(sentence))) return SECRET_IN_CHAT_REFUSAL;
-  }
-  return null;
-}
-
-// src/runners/ask-user-server.ts
 var CADENCE_PROPS = {
   cadence_kind: {
     type: "string",
@@ -34322,7 +34276,7 @@ var CADENCE_PROPS = {
 var TOOLS = [
   {
     name: "ask_user",
-    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. When there are 2-5 concrete alternatives, provide them as choices; the person can still enter another answer. The answer arrives as text.",
+    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. When there are 2-5 concrete alternatives, provide them as choices; the person can still enter another answer. The answer arrives as text. For a credential, ask for the capability rather than the value: a Credential added under Resources reaches your next run as an environment variable and is scrubbed from everything you write, and a website sign-in belongs at the Browser panel. If the person chooses to send you a value here anyway, use it for this task and store it with set_secret if it should persist, but never print it, write it into a file you commit, or repeat it in your report.",
     inputSchema: {
       type: "object",
       properties: {
@@ -35020,11 +34974,6 @@ function createAskUserServer() {
           }
           try {
             const context = typeof args["context"] === "string" ? args["context"] : "";
-            const refusal = secretSolicitationRefusal(question, context);
-            if (refusal) {
-              toolText(refusal, true);
-              return;
-            }
             const rawChoices = args["choices"];
             const parsedChoices = rawChoices === void 0 ? void 0 : QuestionChoices.safeParse(rawChoices);
             if (parsedChoices && !parsedChoices.success) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.84",
+  "version": "0.0.85",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",