Files
Teknium c9fc2793db fix(vault): run in-app browser vault fills on main's single browser_vault tool
Adapts the salvaged preview-vault commits to main, where the five vault tools
became one deferred `browser_vault` (action enum) and plugin browsers fill
through the BrowserPageBackend seam:

- `browser_vault` takes `target: browser | preview`; preview runs the same
  fill / save_login / enter_code code against a page pinned by the Desktop
  window, as a request-local BrowserPageBackend, so core's secret wrapper and
  fixed failure text apply. A preview failure never falls back to the managed
  browser.
- An omitted target means the in-app browser only when the session can drive
  it (drive_preview, eager or deferred) AND has no managed browser page of its
  own, so a Desktop turn that opened a page with browser_exec keeps filling it.
- Preview reads/actions are scrubbed against the registered vault values with
  agent.redact (the PR's redactor import no longer exists on main).
- Renderer: bindings pin (tab, document generation, runner) and re-check that
  exact document around each evaluate; the agent binding resolves the
  requesting session's own active tab (previewOwnerFor), not the focused one.
c9fc2793db · 2026-11-06 22:59:41 -08:00
History
..