[comp] Production Deploy

Merged
GI
3mo ago
+16499-1996

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

Summary by cubic

Production release for browser automations: adds credential-backed auto sign-in via 1Password, a smart connect flow with live sign-in, multi-step automations with per-step evidence and live streaming, and an org-level Connections page. Also safeguards scheduled runs from changing tasks marked not_relevant, and fixes credential re-save and connection load handling.

  • New Features

    • Auto re-login using credentials stored per org in 1Password; supports extra fields and TOTP; secrets never logged (totpSeed/totpCode redacted).
    • Smart connect flow: vendor login analysis, method chooser (password or SSO), automated sign-in with a live step timeline and takeover when needed; smaller live viewport for readability.
    • Connections page: list all connections with status and automation count; reconnect, rename/change login, or remove; shows retryable errors when the list fails to load.
    • Multi-step automations: ordered steps across vendors; per-step runs with full-page and focused screenshots; rolled-up verdict; live run streaming with step timeline and live-view switching between vendors.
    • Drafts: autosave and resume in-progress automations; finalize on save.
    • Task UX: “Browser evidence” header with task-wide cadence, compact run-history ledger, improved composer and test runs; sharper captures and resilient navigation model fallback.
    • Scheduler guard: scheduled runs no longer overwrite tasks marked not_relevant; enforced via atomic conditional updates.
    • Credential storage reliability: re-saving updates the existing 1Password item in place (no orphaned items) and preserves any stored authenticator seed; write errors surface to the caller.

  • Migration

    • Required for browser automations: set BROWSERBASE_API_KEY and BROWSERBASE_PROJECT_ID.
    • Optional to enable password sign-in and unattended re-login: set OP_SERVICE_ACCOUNT_TOKEN; runtime uses @1password/sdk (loaded lazily).
    • Optional model overrides: BROWSERBASE_CUA_MODEL (navigation) and BROWSERBASE_STAGEHAND_MODEL (reading/verdicts).
    • No breaking changes if 1Password is not configured; flows fall back to manual/SSO.