pomerado 0.1.0 → 0.1.2

package/dist/typescript/src/runtime/failure-detail.js

@@ -3,15 +3,14 @@ import { authorizationCredential, awsAccessKeyIdPattern, bracketedValueSource, c
 import { isSecretKey } from "../privacy/secret-keys.js";
 import { urlSpans } from "../privacy/url-spans.js";
 /**
- * Detailed failure record shared by every host failure class. See
- * typescript/src/runtime/ERROR-LOGGING-STANDARD.md. The finite fields (`subCause`, `operation`,
- * `phase`) may reach operational logs; everything else reaches the screened diagnostic archive,
- * where the privacy broker screens it again under the diagnostics area policy, and, for a relayed
- * HTTP failure only, the sandbox's answer through `agentDetail` in `browser/http-relay.ts`.
+ * Detailed failure record shared by every host failure class. The finite fields (`subCause`,
+ * `operation`, `phase`) may reach operational logs; everything else reaches the screened
+ * diagnostic archive, where the privacy broker screens it again under the diagnostics area policy,
+ * and, for a relayed HTTP failure only, the sandbox's answer through a host's HTTP relay.
  */
 /** Stable, finite sub-causes. Add a new value rather than reusing one for a different check. */
 const failureSubCauses = [
-    // CDP transport (destinations/cdp-transport.ts)
+    // A host's CDP transport to its browser
     "cdp_endpoint_invalid",
     "cdp_connect_failed",
     "cdp_command_rejected",
@@ -24,12 +23,12 @@ const failureSubCauses = [
     "cdp_envelope_invalid",
     "cdp_transport_closed",
     "cdp_command_not_allowed",
-    // Host HTTP relay and direct sign-in (destinations/http-relay.ts, destinations/direct-login.ts)
+    // A host's HTTP relay and direct sign-in
     "http_relay_transport_failed",
     "direct_login_transport_failed",
     // Host autofill sign-in (destinations/autofill-step.ts); a failed fill keeps no error text
     "autofill_step_failed",
-    // Browser recorder (destinations/browser-recorder.ts)
+    // A host's browser recorder
     "recorder_start_incomplete",
     "recorder_context_ambiguous",
     "recorder_primary_missing",
@@ -38,26 +37,28 @@ const failureSubCauses = [
     "recorder_foreign_target_unclosed",
     "recorder_target_undetached",
     "recorder_request_unseen",
-    // Origin policy reads (worker/origin-boundary.ts, worker/browser.ts)
+    // Origin policy reads a hosted service may make before and while it browses
     "origin_route_blocked",
     "origin_policy_read_failed",
     "origin_policy_timeout",
     "origin_policy_snapshot_stale",
     "origin_url_invalid",
-    // Worker browser (worker/browser.ts)
+    // A hosted service's job browser
     "browser_origin_missing",
     "browser_initial_policy_failed",
     "browser_initial_origin_blocked",
-    // The primary origin is on the site blocklist (origin-policy/site-blocklist.ts)
+    // The primary origin is on a site blocklist a hosted service may keep
     "browser_site_not_supported",
     "browser_entry_url_invalid",
     "browser_primary_page_crashed",
     "browser_primary_page_closed",
     "browser_gone",
     "browser_unresponsive",
-    // A mint browser lost a third time with no agent command since the first (mint/host-browser-recovery.ts)
+    // The browser responded with a page-command failure, such as a script error or timeout.
+    "browser_page_call_failed",
+    // A mint browser lost a third time with no agent command since the first
     "browser_loss_repeated",
-    // Startup and job authority (worker/startup-authority.ts, worker/mint.ts, worker/run.ts)
+    // Startup and job authority a hosted service may check before and during a job
     "startup_job_read_failed",
     "startup_attempt_superseded",
     "startup_cancel_requested",
@@ -66,10 +67,10 @@ const failureSubCauses = [
     "startup_maintenance_work_failed",
     "startup_original_read_failed",
     "startup_original_cancel_requested",
-    // An attempt's unreadable authority check and the grace that bounds it (worker/authority-grace.ts)
+    // An attempt's unreadable authority check and the grace that bounds it
     "authority_check_unreadable",
     "authority_unavailable_past_grace",
-    // The attempt lease heartbeat and its thread (jobs/lease-heartbeat.ts, jobs/lease-thread.ts)
+    // The heartbeat, and its thread, that a hosted service may use to hold an attempt's lease
     "lease_attempt_inactive",
     "lease_watchdog_expired",
     "lease_thread_failed",
@@ -79,54 +80,50 @@ const failureSubCauses = [
     // A run's in-place login question went unanswered, was refused, or could not be asked.
     "run_login_request_failed",
     "run_expired_auth_site_mismatch",
-    // A run's lost page or browser and its retry (worker/run.ts, decided 2026-09-27)
+    // A run's lost page or browser and its retry
     "run_browser_loss_retried",
     "run_signed_in_session_cleared",
-    // A session a mode or proxy change wiped again past the attempt's relogin cap (worker/browser.ts)
+    // A session a mode or proxy change wiped again past the attempt's relogin cap
     "browser_relogin_spent",
-    // A wiped session whose latest sign-in was never verified (worker/browser.ts)
+    // A wiped session whose latest sign-in was never verified
     "browser_relogin_unverified",
     // A mint's authenticate after its attempt's sign-ins were spent: sign-in is unavailable in the
-    // build (mint/host-execution.ts)
+    // build
     "mint_sign_in_spent",
     "run_browser_loss_retry_declined",
-    // A write mint's accepted confirm it could not screen for secrets, so never kept (mint/host-evidence.ts)
+    // A write mint's accepted confirm it could not screen for secrets, so never kept
     "mint_expected_confirm_unscreened",
-    // Mint host destination authority (mint/host.ts)
+    // A mint host's destination authority
     "mint_admission_generation_changed",
     // A publication whose attempt no longer holds its job, or whose job was told to stop
-    // (registry/postgres.ts)
     "publication_attempt_stopped",
-    // Mint host managed-login identity check (mint/host.ts)
+    // A mint host's managed-login identity check
     "identity_receipt_invalid",
     "identity_check_failed",
     // The site rejected the supplied credentials during managed login; not a dependency failure.
     "managed_login_credentials_rejected",
     // A run's autofill replay: the site showed the password screen again after it took the
-    // password, or the replay did not sign in for another reason, which maintenance repairs
-    // (worker/run.ts).
+    // password, or the replay did not sign in for another reason, which maintenance repairs.
     "autofill_credentials_rejected",
     "operation_credentials_rejected",
     "run_autofill_sign_in_failed",
     // A run's sign-in found an execution VM that could still reach its browser, so nothing was
-    // filled (worker/run.ts).
+    // filled.
     "run_sign_in_executor_attached",
-    // A host resource that did not settle within its bound: the attempt's host close
-    // (mint/host-settle.ts) and a cancel or lost lease's browser stop (worker/mint.ts)
+    // A host resource that did not settle within its bound: the attempt's host close, and the
+    // browser stop after a cancel or a lost lease
     "mint_host_settle_timeout",
     "mint_outside_stop_timeout",
     // A takeover's resource that stayed unavailable for the whole recovery wait
-    // (mint/host-restore-sandbox.ts)
     "mint_recovery_wait_timeout",
-    // A takeover's step whose outcome no later try can confirm (mint/host-restore-execution.ts,
-    // mint/host-restore-browser.ts)
+    // A takeover's step whose outcome no later try can confirm
     "mint_recovery_unconfirmed",
     // The model provider refused a mint's call because the account's quota is spent (mint/openai.ts)
     "model_quota_exhausted",
-    // Input request answers and views (application/input-requests.ts): the request's protected
-    // handoff was deleted or had expired, so the request closed while it was read.
+    // Input request answers and views: the request's protected handoff was deleted or had
+    // expired, so the request closed while it was read.
     "input_request_handoff_closed",
-    // Application host (application/host.ts)
+    // A host's authority reference and its recheck
     "host_authority_reference_invalid",
     "host_authority_recheck_failed",
     // A queued attempt's server renewal and a job whose
@@ -136,9 +133,9 @@ const failureSubCauses = [
     "authority_server_renewal_stopped",
     "authority_server_renewal_unavailable",
     "authority_session_signed_out",
-    // A worker takeover that never settled ended its job as a lost lease (application/recovery-claim.ts)
+    // A takeover that never settled ended its job as a lost lease
     "recovery_unsettled",
-    // A browser create Kernel kept answering with 429 past its wait budget (providers/kernel/controller.ts)
+    // A browser create the provider kept answering with 429 past its wait budget
     "kernel_rate_limited",
     // Dependency failures wrapped by a host failure, by area. `site` names the mapping.
     "mint_execution_failed",
@@ -150,14 +147,14 @@ const failureSubCauses = [
     "executor_boundary_failed",
     "sandbox_workspace_failed",
     "credential_connector_failed",
-    // A credential launcher's refused worker start (credentials/workload/launcher.ts): the
-    // Kubernetes API refused the worker Job, by admission policy or webhook, the namespace quota,
-    // a webhook that can't judge a dry run, or otherwise (authorization, an invalid template)
+    // A hosted service may refuse to start a credential worker: the Kubernetes API refused the
+    // worker, by admission policy or webhook, a quota, a webhook that can't judge a dry run, or
+    // otherwise (authorization, an invalid template)
     "admission_rejected",
     "quota_exceeded",
     "dry_run_unsupported",
     "kubernetes_create_rejected",
-    // ...or the launcher refused before creating one
+    // ...or the service refused before creating one
     "launcher_draining",
     "launcher_at_capacity",
     "launcher_tenant_at_capacity",
@@ -165,11 +162,10 @@ const failureSubCauses = [
     "controller_operation_forbidden",
     "workload_identity_mismatch",
     "launch_superseded",
-    // ...or the start's gateway-signed capability did not cover it (credentials/capability.ts)
+    // ...or the start's signed capability did not cover it
     "capability_refused",
-    // A credential worker's launcher call that never reached the launcher: DNS, connection or TLS
-    // failed, as when the namespace's default deny ships without the worker egress allow
-    // (credentials/workload/worker.ts)
+    // A credential worker's call to start work that never arrived: DNS, connection or TLS failed,
+    // as when network policy blocks the worker's egress
     "worker_launcher_unreachable",
     "job_storage_failed",
     "private_input_storage_failed",
@@ -852,7 +848,7 @@ export const withCauseEntry = (detail, error) => {
  * A detail nested in a failure object is invisible to JSON serialization: RPC encoders,
  * public responses and `JSON.stringify(failure)` omit it. Only `failureDetailMetadata` and
  * `failureDetailOf` project it, into the archive and the maintenance evidence files, and
- * `agentDetail` in `browser/http-relay.ts`, into a relayed HTTP failure's answer to the sandbox,
+ * a host's HTTP relay, into a relayed HTTP failure's answer to the sandbox,
  * which the agent's execution result carries. The detail itself, serialized at the top level,
  * keeps every field.
  */

package/dist/typescript/tests/support/credential-masking-corpus.js

@@ -56,7 +56,7 @@ export const credentials = [
         "MIIfakeKeyMaterial",
         both,
     ],
-    // Review round 1: cookie shapes, Azure account keys, Digest params and bracketed values.
+    // Cookie shapes, Azure account keys, Digest params and bracketed values.
     ['Cookie: sid="FAKEq0t3dCookie123"; theme=dark', "FAKEq0t3dCookie123", both],
     [
         "upstream set-cookie: theme=dark; Path=/, session=FAKEsess0123abc; HttpOnly",
@@ -69,7 +69,7 @@ export const credentials = [
         both,
     ],
     ["Cookie: FAKEopaquecookie0123456789", "FAKEopaquecookie0123456789", both],
-    // Review round 2: a comma inside a cookie value continues it (consent-manager cookies).
+    // A comma inside a cookie value continues it (consent-manager cookies).
     ["Cookie: consent=analytics,ads; sid=SEKRETcomma02; theme=dark", "SEKRETcomma02", both],
     [
         "Cookie: cookieyes-consent=consentid:abc,consent:yes,action:yes; __Host-sid=SEKRETcy01",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pomerado",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Pomerado's integration minter and Guardian with local compute and native Playwright",
   "type": "module",
   "license": "AGPL-3.0-only",
@@ -586,12 +586,19 @@
       "types": "./dist/typescript/authoring/examples/write-session.d.ts",
       "import": "./dist/typescript/authoring/examples/write-session.js",
       "default": "./dist/typescript/authoring/examples/write-session.js"
+    },
+    "./core/registry/site-naming": {
+      "types": "./dist/typescript/src/registry/site-naming.d.ts",
+      "import": "./dist/typescript/src/registry/site-naming.js",
+      "default": "./dist/typescript/src/registry/site-naming.js"
     }
   },
   "files": [
     "dist",
     "LICENSE",
-    "README.md"
+    "README.md",
+    "third-party/codex/LICENSE",
+    "third-party/codex/NOTICE"
   ],
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.json && node tools/copy-assets.ts",

package/third-party/codex/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1.  Definitions.
+
+    "License" shall mean the terms and conditions for use, reproduction,
+    and distribution as defined by Sections 1 through 9 of this document.
+
+    "Licensor" shall mean the copyright owner or entity authorized by
+    the copyright owner that is granting the License.
+
+    "Legal Entity" shall mean the union of the acting entity and all
+    other entities that control, are controlled by, or are under common
+    control with that entity. For the purposes of this definition,
+    "control" means (i) the power, direct or indirect, to cause the
+    direction or management of such entity, whether by contract or
+    otherwise, or (ii) ownership of fifty percent (50%) or more of the
+    outstanding shares, or (iii) beneficial ownership of such entity.
+
+    "You" (or "Your") shall mean an individual or Legal Entity
+    exercising permissions granted by this License.
+
+    "Source" form shall mean the preferred form for making modifications,
+    including but not limited to software source code, documentation
+    source, and configuration files.
+
+    "Object" form shall mean any form resulting from mechanical
+    transformation or translation of a Source form, including but
+    not limited to compiled object code, generated documentation,
+    and conversions to other media types.
+
+    "Work" shall mean the work of authorship, whether in Source or
+    Object form, made available under the License, as indicated by a
+    copyright notice that is included in or attached to the work
+    (an example is provided in the Appendix below).
+
+    "Derivative Works" shall mean any work, whether in Source or Object
+    form, that is based on (or derived from) the Work and for which the
+    editorial revisions, annotations, elaborations, or other modifications
+    represent, as a whole, an original work of authorship. For the purposes
+    of this License, Derivative Works shall not include works that remain
+    separable from, or merely link (or bind by name) to the interfaces of,
+    the Work and Derivative Works thereof.
+
+    "Contribution" shall mean any work of authorship, including
+    the original version of the Work and any modifications or additions
+    to that Work or Derivative Works thereof, that is intentionally
+    submitted to Licensor for inclusion in the Work by the copyright owner
+    or by an individual or Legal Entity authorized to submit on behalf of
+    the copyright owner. For the purposes of this definition, "submitted"
+    means any form of electronic, verbal, or written communication sent
+    to the Licensor or its representatives, including but not limited to
+    communication on electronic mailing lists, source code control systems,
+    and issue tracking systems that are managed by, or on behalf of, the
+    Licensor for the purpose of discussing and improving the Work, but
+    excluding communication that is conspicuously marked or otherwise
+    designated in writing by the copyright owner as "Not a Contribution."
+
+    "Contributor" shall mean Licensor and any individual or Legal Entity
+    on behalf of whom a Contribution has been received by Licensor and
+    subsequently incorporated within the Work.
+
+2.  Grant of Copyright License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    copyright license to reproduce, prepare Derivative Works of,
+    publicly display, publicly perform, sublicense, and distribute the
+    Work and such Derivative Works in Source or Object form.
+
+3.  Grant of Patent License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    (except as stated in this section) patent license to make, have made,
+    use, offer to sell, sell, import, and otherwise transfer the Work,
+    where such license applies only to those patent claims licensable
+    by such Contributor that are necessarily infringed by their
+    Contribution(s) alone or by combination of their Contribution(s)
+    with the Work to which such Contribution(s) was submitted. If You
+    institute patent litigation against any entity (including a
+    cross-claim or counterclaim in a lawsuit) alleging that the Work
+    or a Contribution incorporated within the Work constitutes direct
+    or contributory patent infringement, then any patent licenses
+    granted to You under this License for that Work shall terminate
+    as of the date such litigation is filed.
+
+4.  Redistribution. You may reproduce and distribute copies of the
+    Work or Derivative Works thereof in any medium, with or without
+    modifications, and in Source or Object form, provided that You
+    meet the following conditions:
+
+    (a) You must give any other recipients of the Work or
+    Derivative Works a copy of this License; and
+
+    (b) You must cause any modified files to carry prominent notices
+    stating that You changed the files; and
+
+    (c) You must retain, in the Source form of any Derivative Works
+    that You distribute, all copyright, patent, trademark, and
+    attribution notices from the Source form of the Work,
+    excluding those notices that do not pertain to any part of
+    the Derivative Works; and
+
+    (d) If the Work includes a "NOTICE" text file as part of its
+    distribution, then any Derivative Works that You distribute must
+    include a readable copy of the attribution notices contained
+    within such NOTICE file, excluding those notices that do not
+    pertain to any part of the Derivative Works, in at least one
+    of the following places: within a NOTICE text file distributed
+    as part of the Derivative Works; within the Source form or
+    documentation, if provided along with the Derivative Works; or,
+    within a display generated by the Derivative Works, if and
+    wherever such third-party notices normally appear. The contents
+    of the NOTICE file are for informational purposes only and
+    do not modify the License. You may add Your own attribution
+    notices within Derivative Works that You distribute, alongside
+    or as an addendum to the NOTICE text from the Work, provided
+    that such additional attribution notices cannot be construed
+    as modifying the License.
+
+    You may add Your own copyright statement to Your modifications and
+    may provide additional or different license terms and conditions
+    for use, reproduction, or distribution of Your modifications, or
+    for any such Derivative Works as a whole, provided Your use,
+    reproduction, and distribution of the Work otherwise complies with
+    the conditions stated in this License.
+
+5.  Submission of Contributions. Unless You explicitly state otherwise,
+    any Contribution intentionally submitted for inclusion in the Work
+    by You to the Licensor shall be under the terms and conditions of
+    this License, without any additional terms or conditions.
+    Notwithstanding the above, nothing herein shall supersede or modify
+    the terms of any separate license agreement you may have executed
+    with Licensor regarding such Contributions.
+
+6.  Trademarks. This License does not grant permission to use the trade
+    names, trademarks, service marks, or product names of the Licensor,
+    except as required for reasonable and customary use in describing the
+    origin of the Work and reproducing the content of the NOTICE file.
+
+7.  Disclaimer of Warranty. Unless required by applicable law or
+    agreed to in writing, Licensor provides the Work (and each
+    Contributor provides its Contributions) on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+    implied, including, without limitation, any warranties or conditions
+    of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+    PARTICULAR PURPOSE. You are solely responsible for determining the
+    appropriateness of using or redistributing the Work and assume any
+    risks associated with Your exercise of permissions under this License.
+
+8.  Limitation of Liability. In no event and under no legal theory,
+    whether in tort (including negligence), contract, or otherwise,
+    unless required by applicable law (such as deliberate and grossly
+    negligent acts) or agreed to in writing, shall any Contributor be
+    liable to You for damages, including any direct, indirect, special,
+    incidental, or consequential damages of any character arising as a
+    result of this License or out of the use or inability to use the
+    Work (including but not limited to damages for loss of goodwill,
+    work stoppage, computer failure or malfunction, or any and all
+    other commercial damages or losses), even if such Contributor
+    has been advised of the possibility of such damages.
+
+9.  Accepting Warranty or Additional Liability. While redistributing
+    the Work or Derivative Works thereof, You may choose to offer,
+    and charge a fee for, acceptance of support, warranty, indemnity,
+    or other liability obligations and/or rights consistent with this
+    License. However, in accepting such obligations, You may act only
+    on Your own behalf and on Your sole responsibility, not on behalf
+    of any other Contributor, and only if You agree to indemnify,
+    defend, and hold each Contributor harmless for any liability
+    incurred by, or claims asserted against, such Contributor by reason
+    of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+Copyright 2025 OpenAI
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/third-party/codex/NOTICE

@@ -0,0 +1,6 @@
+OpenAI Codex
+Copyright 2025 OpenAI
+
+This project includes code derived from [Ratatui](https://github.com/ratatui/ratatui), licensed under the MIT license.
+Copyright (c) 2016-2022 Florian Dehau
+Copyright (c) 2023-2025 The Ratatui Developers