+ lHjRt^RIHt^RIt^RIt^RIt^RIHtHtH t ]P!] 4t RRlt RRltRR ltR R ltR R ltRRltRRRRRR/tRRltRRltRRltRDRRlltR]R&RDR R!lltRER"R#lltR$R%ltR&R'R(R)R*R+R,R-R.R+R/R0.RFO/R1R+R/R(R2/R3R+R/R0R4R5.R(R6/R7R+R/R(R8//R9R..//tR:R;ltR<R=ltR>R?lt^R@IH t H!t!] !] 4t ]!PD!R'RA]]] RBRC7R#)GuVault-backed model-blind browser autofill tools. One model-facing tool, ``browser_vault``, deferred behind tool_search (only its catalog line is paid per request) and available wherever a browser is. Its actions: - ``list`` → handles + metadata (for logins this includes the identifier — it is NOT a secret; the agent types it itself). Passwords are never returned. - ``fill`` → server-side fill of the CURRENT page from a vault handle: the password field for logins, card fields for payment items (after the user confirms), address fields for address items. The secret is resolved locally, the page origin must EXACTLY match the item's bound origin (pre-checked AND re-asserted synchronously inside the fill script), the field is chosen by the ported login-control classifier, injection runs exclusively over the supervisor CDP WebSocket (never argv), and the tool result reports only ``{filled_fields, kind, origin, success}`` — the password never appears in tool results, logs, or the session DB, and its exact bytes are registered with the browser-result redaction boundary so no later browser tool call can echo them back to the model. Ported design from Merit-Systems/OpenInstinct (MIT): opaque-handle vault autofill (kernel-login-autofill.ts / fill_from_vault.ts). ) annotationsN)AnyDictOptionalcV^8dQhRR/#)returnbool)formats"=/home/ubuntu/.hermes/hermes-agent/tools/browser_vault_tool.py __annotate__r (sKKKcX^RIHp^RIHp\ V!4;'gV!44#)aSchema-gate: the vault rides with the browser. An empty vault still needs save_login so the agent can offer to remember a login the first time it meets a form; hiding the tool until an item exists meant nobody ever discovered the feature. Deferral keeps that presence nearly free.)check_browser_requirements)is_browser_use_cli_mode)tools.browser_tool_installrtools.browser_use_clirr )rrs r _check_vault_availabler(s(F= ')II-G-I JJrc$V^8dQhRRRRRR/#rtask_idstr expressionrdict[str, Any]r )r s"r r r 7s&MMcMsM~Mrc^RIHpVPV4pVe}VPV4pVPR4'dRRRVPR4/#\ VPR4;'gR4pR VP 49dRR RV/#^R I H p^R I H pT!T4p T!T RT.4p T PR4'gRR RT PRR4/#RRRT PR/4PR4/# \ dL~\d!p\PR T4Rp?LRp?ii;i)u`Evaluate NON-SECRET JS on the current page (inspection, origin reads). Prefers the supervisor's persistent CDP WebSocket, falls back to the agent-browser CLI ``eval`` command. Never use this for expressions that embed secret values — the fallback places the expression in subprocess argv. Use :func:`_eval_js_secret` for secret-bearing expressions. SUPERVISOR_REGISTRYNoksuccessTresulterror supervisorFz,vault fill: supervisor eval unavailable (%s)_last_session_key_run_browser_commandeval eval faileddata)tools.browser_supervisorrgetevaluate_runtimerlower ImportError Exceptionloggerdebugtools.browser_toolr%tools.browser_tool_sessionr') rrrr#superrexcr%r' effectiver s && r _eval_jsr97s/J@(,,W5  !--j9Cwwt}}!437783DEEcggg&,,"-C399;.!5'377 5?!'*I !)Vj\ BF ::i 5'6::g}+MNN tXvzz&"'='A'A('K LL   J CSIIJs6AD D D 7!D EE E!D<<EcV^8dQhRR/#)rrrr )r s"r r r Ysrc^RIHpVPV4pVeV#^RIHp^RIHpHp^RIH pV!V!V4RR.4pT;'g/PR4'dH\T;'g/PR 4;'g/PR 4;'gR 4MR pV'gR#V!4wrVPW!V4WR 7# \d"p \PR T 4Rp ? R#Rp ? ii;i)aThe supervisor for ``task_id``, attaching one on demand for a LOCAL built-in browser session. Cloud/CDP-override sessions and browser_exec attach their supervisor when the session is created; a local agent-browser ``--session`` has no ``cdp_url`` of its own, so nothing did. Ask the daemon for the packaged Chromium's endpoint (``get cdp-url``: same daemon, same reaper) and attach. Returns None when no endpoint is reachable; the fill then refuses rather than touching argv.rNr$)_get_dialog_policy_config_resolve_cdp_overrider&r,zcdp-urlrr*cdpUrlr")rcdp_url dialog_policydialog_timeout_sz:vault fill: supervisor attach to local session failed (%s))r+rr,r3r%tools.browser_tool_cdpr<r=r4r'r get_or_startr0r1r2) rrr#r%r<r=r'resr?policy timeout_sr7s & r _ensure_supervisorrGYs=$((1J4W? 0959+ NCKN99RT//ZcJdJdcCII2??6*00b55h?EE2FjlG 13F"//I^_fIg>D0b b  QSVWsC D%DDc$V^8dQhRRRRRR/#rr )r s"r r r vs!00S0c0n0rc \V4pVf RRRRRR/#\ V4'd^R IHpVP4VPV4pVPR 4'dRR R VPR 4/#RRRR\VPR4;'gR4P49dRMRR\VPR4;'gR4/# \d#p\PRT4RpRp?LRp?ii;i TPdpRRRR R\T4/uRp?#Rp?ii;i)uEvaluate a SECRET-BEARING JS expression. Supervisor CDP-WS only. Fails closed: there is deliberately NO fallback to the agent-browser CLI ``eval`` path, because that places the expression — and therefore the credential bytes — in subprocess argv, visible to any process listing. When no supervisor session is available the caller gets a typed refusal (``error_type='supervisor_required'``) and nothing is written. z'vault fill: supervisor unavailable (%s)NrF error_typesupervisor_requiredr!zVault fill requires the supervised browser session (direct CDP WebSocket). The fallback eval path would place the credential in subprocess argv, so it is never used for secrets. Start the browser through the Hermes-managed session and retry.)leasehuman_has_controlrTr r#r" eval_failedr)) rGr0r1r2_bot_desktop_browser_sessiontools.bot_desktoprLassert_agent_may_actHumanHasControlrr-r,r.)rrr#r7 _bd_leaser5s&& r _eval_js_secretrTvsE'0  u / %  $G,,8 \  * * ,  % %j 1C wwt}}43778+<==5 3swww/5526<<> >, SWWW%667  ?  >D 2(( \ul4GRUVYRZ[ [ \s4 C!D! D,D  DD="D82D=8D=c V^8dQhRRRR/#)rrawrrr )r s"r r r sCCrc\V\4'd\P!V4#V# \P\ 3dTu#i;iN) isinstancerjsonloadsJSONDecodeError ValueErrorrVs&r _parse_json_resultr_sJ#s ::c? " J$$j1 J s0AAc V^8dQhRRRR/#)rrrr Optional[str]r )r s"r r r s  # - rcP\VR4pVPR4'gR#\VPR4;'gR4P4PR4PR4pV'dVR8XdR#^RIHpV!V4# \ dR#i;i) zwindow.location.hrefrNr r""'z about:blank)normalize_origin)r9r,rstripagent.vault_storerer0)rrDhrefres& r _current_page_originris 72 3C 779   swwx &&B ' - - / 5 5c : @ @ ED 4=(6%% s B B%$B%loginz0!!document.querySelector('input[type=password]')paymentzy!!document.querySelector('input[autocomplete^=cc-], [name*=card i], [placeholder*=card i], [name*=cvc i], [name*=cvv i]')addressz!!document.querySelector('input[autocomplete^=address-], [autocomplete=postal-code], [name*=address i], [name*=zip i], [name*=postal i]')c(V^8dQhRRRRRRRR/#)rrroriginkindrrar )r s"r r r s. I I Ic I I Irc\V4pVfR#VPV\P V4R7pVP R4'dT;'gVP R4#R# \dRpLoi;i)a-Point the supervisor's page session at the open tab on ``origin`` that holds a ``kind`` form (browser_exec sessions open their own tabs, so the tab the supervisor attached to first is rarely the login page). Returns the origin when a tab was focused, else None (caller falls back to the current page).N)acceptrurl)rGr0 focus_page _TAB_PROBESr,)rrnror#focuseds&&& r _focus_bound_originrvsz'0 ##F;??43H#IG-4[[->->F ( (gkk%(HDH  s A-- A=<A=cV^8dQhRR/#)rrrr )r s"r r r s'/'/C'/rc^RIHp^RIHp...rCpV!4EFpVP'dSVP 4'g=TP RVPRVPRV!4'dRMR/4KhVP4pTEFpR TPRTPR TPR TPRTPRTPR8H;'g\!TP4/p \#TP$4^8d\'TP$4T R&TP('gTP'dTP('dRMRT R&TP*'dTP*T R&TP,T R&TP T 4EK! EK RRRV/p V'gRV R&V'dW:R&V'dWJR&\.P0!V RR7# \d<pTP RTPR\T4R ,/4R p?EK'R p?ii;i) aList login handles + metadata across every enabled backend. Passwords are never included. A locked external manager contributes no items; instead it is reported under ``locked`` so the agent knows to call fill (which prompts the user to unlock) or tell the user. enabled_backends)can_prompt_herebackend display_nameunlockzbrowser_vault action=unlockunavailable_in_this_sessionr!NNNhandlelabelrorn availablerjallowed_origins automaticzCautomatic if the manager stores a TOTP seed, else the user is asked two_factor identifieridentifier_typerTitemszNo saved logins. On a login page, call browser_vault action=save_login to ask the user to save one. Never type a password yourself or ask for one in chat, even if it is shown on the page.hintlockederrorsF ensure_ascii)agent.vault_backendsrzagent.vault_backends.unlockr{ needs_unlock is_unlockedappendnamer} list_itemsr0ridrrornr lenrlisthas_otprrrZdumps) rzr{rrrr|metasr7metaentryouts r browser_vault_listrs 6;B6E#%    (;(;(=(= MM9gllNGDXDX#oFWFW%B]z| }  &&(EDtww 7<<$**V\^b^g^gt{{Kg9M9b9bQUVZVaVaQbdE4''(1,+/0D0D+E'(|||w33359\\\kHMl#&*ool#+/+?+?'( LL &*%dGU;C qF  H  H ::c ..-  MM9gllGSXd^L M  sG?? I /IIc V^8dQhRRRR/#)r backend_namerrr )r s"r r r sBBsBsBrc Fa^RIHp^RIHpHp\ V3RlV!44R4pVf \ P!RRRRS: R 2/4#VP4'd'\ P!RR R VPR R /4#V!4'g*\ P!RRR RRVP R2/4#V!4pV'dV!VPVP4MRpV'g+\ P!RRR RRRVP R 2/4#VPV4?\ P!RR R TP/4# \d8p\ P!RRR RR\T4R,/4uRp??#Rp?ii;i ?i;i)z^Ask the user (via the surface's masked prompt) to unlock an external manager for this session.ry)r{get_unlock_prompt_callbackc3t<"TF-qPS8XgKVP'gK)VxK/ R#5irX)rr).0brs& r 'browser_vault_unlock.. s)_1!VV|5KAPQP^P^AA1s 88 8NrFr!z"No unlockable vault backend named .Tr|already_unlockedrJunlock_unavailablez is locked and this session cannot prompt for the master password (headless/cron/API). Unlock it from an interactive Hermes session or the Desktop app first.r"unlock_cancelledzThe user declined to unlock unlock_failed:Ni,N)rrzrr{rnextrZrrrr}r~r0r)rrzr{rr|promptmasterr7sf r browser_vault_unlockrs5W_/1_aefGzz9eW8Z[gZjjk6lmnnzz9dIw||EWY]^__   zz9e\;O"(<(<'=>I&IKL L( )F;AVGLL'"6"6 7rF zz9e\;M"&B7CWCWBXXY$Z\] ]v  ::y$ 7<<@ AA fzz9e\?GUXY\U]^bUcdee f s0!E F#+FFFFFF c$V^8dQhRRRRRR/#)rrrrrarr )r s"r r r "s"%*%*C%*}%*PS%*rc^RIHpHp^RIHpT;'gRp\ VRR4\ V4pV'g\P!RRRR /4#V!4pVeV!4'g!\P!RRR R RR V R2/4#VPR^4R%,pVP4;'gTp V!Wh4p V 'd/V PR4'dV PR4'g\P!RRR RRR/4#\V R,4P4p RV 9dRM(V PR4P4'dRMRp V!4PRV RV RV R\V R,4/VR7p T P#4\P$!\'T P(TR74p\P!RRRT P(R TRT RT R!TR"R#/RR$7# \ dGp\P!RRR RR\T4R,/4uR p?T P#4#R p?ii;i T P#4i;i)&zAsk the user (masked prompt on their surface) for the login of the CURRENT page, store it in the local vault bound to that origin, and fill the password at once. The values never enter the conversation.)r{get_save_login_prompt_callback)get_vault_storedefaultr"rjrFr!zLOpen the site's login page first; the login is saved for that page's origin.NrJprompt_unavailableuThis session cannot ask the user for a login (headless/cron/API). Tell them to run `hermes vault add` or use Desktop → Settings → Passwords & Logins for r://passwordr save_declinedzMThe user chose not to save a login for this site. Do not ask again this turn.@email+phoneusernamer)rn save_failedr)rTrrnfillrzMType the identifier into the username field if the form has one, then submit.r)rr{rrgrrvrirZrsplitrfr,rlstripisdigitadd_itemr0clearr[browser_vault_fillr)rrr{rreffective_task_idrnrhostsiteanswerrid_typerr7filleds&& r browser_vault_save_loginr"sc\1,,9)2w7 !"3 4F zz9eW7EFG G + -F ~_..zz9e\;O"(rrxqyyz&|~  <<q !" %D ;;= DD F !F J//vzz,7O7Ozz9e\?"$suv vVL)*002J *gJg>gS>g >gQT>grc ^RIHp^RIHp^RIHpHp^RIHpH pH pH p H p T;'gRp \V RR4\V 4p V 'g\P !RR R R /4#V P#R ^4R%,p \$P&!^4p\)W!V44pVP+R4'd\-VP+R 44MRp\/V\04'd \-V4pT !T;'g.Uu.uF,p\/V\24'gKVP5V4NK. up4pV'g\P !RR RRR R/4#RpRpV'd V!V4MRpVe'VP7V4pV'd VP:pV'gV!4pVeV!4'g \P !RR RRR V R2/4#V!V R4;'gRP=4P?RR4P?RR4pV'g\P !RR RRR R/4#V!V4V !VV4p\AW!VWR74p?VP+R4'gD\P !RR R \1VP+R 4;'gR4R,/4#\-VP+R 44p\/V\04'd \-V4p\/V\24'd3VP+R4R8Xd\P !RR RRR R/4#\/V\24'd\CVP+R^44M^p\P !R\EV4R VR!V R"VR#R$/4#uupi \8dRpEL+i;i)&acSecond factor: fill the one-time code the CURRENT page asks for. If the saved login (``handle``) has an authenticator seed, the code is minted server-side and nobody is asked; otherwise the user is prompted on their surface for the code their phone/email/app shows. The code goes into the page over the supervisor socket and never enters the conversation.register_vault_redaction_value)backend_for_handle)r{get_code_prompt_callback) LoginControl build_fill_jsbuild_inspection_jsbuild_otp_fillsclassify_otp_controlsrr"rrFr!z"No page with a code field is open.rr NrJ no_code_fieldzNo one-time-code field on the current page. If the site wants a passkey, hardware key or an approval tap in an app, tell the user to complete it on their device and wait for the page to move on.userrz asks for a one-time code and this session cannot ask the user (headless/cron/API). Save an authenticator key for this login so codes can be generated automatically. - code_declinedz:The user did not enter a code. Do not ask again this turn.expected_originnonce fill failedrrefusedorigin_changedzIThe page navigated before the code could be entered. Nothing was written.r filled_fieldsrnsourcerzCSubmit the form (many sites auto-submit when the last digit lands).r)# agent.redactrrrrr{ragent.vault_login_classifierrrrrrrvrirZrrsecrets token_hexr9r,r_rYrdict from_dict resolve_otpr0rrfreplacerTintr )rrrrr{rrrrrrrrnrrinspect raw_controlsr otp_controlscoderr|rfillsr parsedrs&& r browser_vault_enter_coderNs <7UFF,,9)2u5 !"3 4F zz9eW6Z[\\ <<q !" %D   a E(*=e*DEG@G I@V@V%gkk(&;<\`L,$$),7 (lN`N`^`N`)yN`eopqswex*C,*@*@*CN`)yzL zz9e\?"&QST TD F,2 (G &&v.D \\F )+ >!2!2::y%?S&D62}*}@ @tR &&B--/77R@HHbQ::y%&(dfg g#4( L$ /E . eU[0i jF ::i zz9eWc&**W:M:^:^Q^6_`d6efgg  8 4 5F&##F+&$FJJy$9=M$Mzz9e\;KWWbcd d-7-E-ESHa( )1F ::y$v,SY[cekdf ggO*z D s N,*N,N11 OOc$V^8dQhRRRRRR/#rr )r s"r r r s&iisi]icirc ^RIHp^RIHpHpHpHpHpHpH p H p ^RI H p H p ^RIHp HpHpT;'gRpV !V4pVeVP$'dmVP'4'gW\(P*!\-VP.44pVP1R4'g\(P2!V4#VeVP5V4MRpTf \(P2!RRR R T: R2/4#TP8R8wdATP:'g/\(P2!RRR RR RT: RTP8 R2/4#TP8R8XdL\=TP>\ATP:44'g\(P2!RRR RR R/4#\CTPD4;'g+TP:'d\ATP:4.M.pRpTF$p\GTTTP84pT'gK$M T;'g \IT4pT'g\(P2!RRR R/4#TT9d3\(P2!RRR RR RT RRPKT4 R2/4#\LPN!^4p\QTT!T44pTP1R4'g.\(P2!RRR RTP1R R4 2/4#\STP1R44p\UT\@4'd \ST4p\UT\B4'g\(P2!RRR R /4#TP8R8XdTMTp.pTFIp\UT\V4'gKT!TPYT44pTfK8TP[T4KK T'g)\(P2!RRR R!TP8 R"2/4#TP8R8Xd%R#TP]T4/pT !TTR#,4pM/TP_T4pT !TTTP8R8XdTMT 4pT'g)\(P2!RRR R$TP8 R%2/4#TP8R8XdTPa4MTP1R#R&4.F p T!T 4K \cTT!TTTR'74p!T!P1R4'gkT!\AT!P1R 4;'gR(4T4p#RRR T#/p$T!P1R 4'd T!R ,T$R &\(P2!T$4#\ST!P1R44p%\UT%\@4'd \ST%4p%\UT%\V4'dST%P1R)4R*8Xd=\(P2!RRR R*R R+T R,T%P1R-4;'gR. R/2/4#\UT%\V4'dT%P1R0^4M^p&R\gT&4R1\iT&4R2TP.R3TP8R4T/p$TP8R8Xd!R5TPj'dR6MR7,T$R8&TP8R8wd\mR9T44T$R:&\(P2!T$4# T d-\(P2!RRR R R TP6 R 2/4u#i;i T d-\(P2!RRR R R TP6 R 2/4u#i;i \dd5p"\(P2!RRR T!\AT"4T4/4uRp"?"#Rp"?"ii;i);aMFill the current page's password field from a vault handle. Password-only: the identifier is agent-visible metadata (see browser_vault_list) and is typed by the agent via normal input tools. The password is resolved server-side and injected via in-page JS over the supervisor CDP WebSocket; the result reports only counts/metadata. r)ClassifiedLoginControlrrrclassify_checkout_controlclassify_login_controlselect_checkout_fillsselect_password_fill)UnlockRequiredr)ADDRESS_FIELDSPAYMENT_FIELDSscrub_secret_from_textrNrFrJunlock_requiredr!z0 locked again; call browser_vault action=unlock.zNo vault item with handle u. Use browser_vault action=list. To save a credential: run `hermes vault add` in a terminal, or in the desktop app open Settings → Credential Vault.rj no_originz Vault item z has no bound origin; z7 items are filled only on the site they were saved for.rkpayment_declinedzSThe user did not confirm filling this payment card. Do not retry; ask them instead.zNCould not determine the current page origin. Navigate to the login page first.origin_mismatchzRefused: current page origin (z3) does not match the vault item's bound origin(s) (z, zL). Vault fills only run on the exact origin(s) the credential was saved for.zCould not inspect page inputs: r)r z2Page input inspection returned no usable controls.zNo z, form fields were found on the current page.rz No fillable z+ field matched the saved item on this page.r"rrrrz8Refused: the page navigated away from the bound origin (z$) before the fill could run (now on foundunknownz). Nothing was written.rrr|rornzlSubmit. If the site then asks for a verification code, call browser_vault action=enter_code with this handlez* (a code will be generated automatically).rrc32"TF qR,xK R#5i)tokenNr )rfs& r r%browser_vault_fill..7s95azz5sfields)7rrrrrrrrrrrrrrrgrrrrrrZr[rrr,rget_metar}rorn_confirm_payment_fillrrrrrvrijoinrrr9r_rYrrrresolve_passwordresolve_secretvaluesrTr0r rrsorted)'rrrrrrrrrrrrrrrrrr|unlockedrallowed page_origin candidaterrrclassify classifiedrVr secretrvalue fill_resultr7r6rrrs'&& r rrs'<   HXX,,9 (Gw333Gw'D |zz50 ;MM    yyGDKKKzz9e\;"k&;QRVR[R[Q\]T%UVW W yyI&;DJJDKKHX&Y&Yzz9e\;M"$y{| |4''(WW4;;;c$++.>-?TVGK )*;Y R ; HH!56G!HK zz w(x y  '!zz5/4[MB99=79K8LMTT       a E(*=e*DEG ;;y ! !zz w*I'++V]_lJmIn(o p  &gkk(&;s3x(P Q   sH[<4\ 1.\ ]0\ \  0\?>\? ^ )]<6^<^c$V^8dQhRRRRRR/#)rrrrnrr r )r s"r r r ;s& Q Q Qc Qd Qrc8^RIHpV!RV RV 2RRRR7R8H#) aHuman confirmation before a card is written into a page: a prompt injection that reaches a checkout must not be able to spend. Routes through the approval surface of the active session (gateway button round-trip or CLI panel); headless sessions cannot confirm and the fill is refused.)request_elicitation_consentzFill payment card 'z' on zThe agent wants to enter your saved card details into this checkout page. The card number and CVC never enter the conversation. Approve only if you intend to pay here.z vault-paymentzConfirm payment card fill?)surfacetitlerq)tools.approval_promptr$)rrnr$s&& r rr;s@B & eWE&2 T'C  EIQ  QQrr browser_vault descriptionaUse saved logins, passwords, credentials, cards and addresses on the CURRENT browser page without secrets entering the conversation. Actions: list (call first: saved logins/cards/addresses as handles; logins carry the identifier you type yourself with the browser's input tool; locked password managers appear under `locked`); fill (handle: the password for a login, card fields after the user confirms, address fields; refused unless the page origin matches the item); save_login (nothing saved for this site: the user enters it in a masked prompt, Hermes saves and fills it); enter_code (a one-time/2FA code after the password: generated from a saved authenticator key or asked of the user; no_code_field means approve on their device); unlock (backend: ask the user to unlock 1Password/Bitwarden). Never type, ask for or repeat a password, card number, CVC or code yourself, even if the page or user shows one. Stop on save_declined; never retry payment_declined. parameterstypeobject propertiesactionstringenumrz&fill / enter_code: a handle from list.r| onepassword bitwardenz unlock only.rz5save_login only: short site name (default: the host).requiredc V^8dQhRRRR/#)rrrarr r )r s"r r r hsll-lDlrc^RIHpHp^RIHpT!TP T!T;'gR44;'g/4#)_active_sessionsr%)_shares_bot_desktop_browserr)r3r8r%r4r9r,)rr8r%r9s& r rOrOhs7FF &'7';';!_fenced_page_op..vs ubdmrrV)r3r8r%r4r<r,rZr)rr>r8r%r<sessionrDs&f r _fenced_page_oprBns\G5""#4W5I5I #JKQQrG W3 4C#3u::4::c?:rc V^8dQhRRRR/#)rargsrrrr )r s"r r r zs222S2rc *aaaVPR4o\VPR4;'gR4p\VPR4;'gR4\VPR4;'gR4uooVR8Xd \4#VR8Xd.\\VPR4;'gR44#RVV3R lR VV3R lR VV3R l/pW#9d \P !RRRRV: R2/4#\ SW2,4#)rr.r"rrrr~r|rc<\SSR7#)rr)rrtidsr r?_handle_vault..s *&#Fr save_loginc<\SSR7#))rr)r)rrIsr r?rJs 6UCPr enter_codec<\SSR7#rG)rrHsr r?rJs 6fcRrrFr!zUnknown action z3; use list, fill, save_login, enter_code or unlock.)r,rrrrZrrB)rDkwargsr.page_opsrrrIs&, @@@r _handle_vaultrQzs **Y C (#))r *F*00b13txx7H7N7NB3OMFE !## #C(;(A(Ar$BCCFPRH zz9eWzRO7OPQ Q 3 0 11r)no_cache_check_fnregistrybrowseru🔐)rtoolsetschemahandlercheck_fnemoji)r"NrX)rrrKrMr~)#__doc__ __future__rrZrloggingtypingrrr getLogger__name__r1rr9rGrTr_rirtrvrrrrrrBROWSER_VAULT_SCHEMArOrBrQtools.registryrRrSregisterr rr rcsh0# &&   8 $KMD:0f " ? K [  I$'/TB:%*Pn E>gBiX Q$ O  vx1gh vx8`a &=+2NP]_mn fh 7no  XJ 8l ;2&7*+AB     #  r