Actions
Feature #3835
openAdd convertPasswordToPasskey orchestrator for automated passkey enrollment
Start date:
07/05/2026
Due date:
% Done:
100%
Estimated time:
Description
Summary¶
New agent tool `identity_vault_convert_to_passkey` that automates the full password-to-passkey conversion flow: look up stored password, log in, navigate to passkey settings, enable virtual authenticator, register passkey, then verify by re-authenticating with passkey only.
Implementation¶
- New file `src/convert-flow.ts` (~210 LOC): site-specific flow definitions and CDP page automation helpers
- GitHub flow defined with selectors and JS expressions for login, security settings navigation, passkey registration, logout, and passkey login verification
- Uses CDP Target/Page/Runtime domains via SessionCdpClient for browser control
- Integrates with getCdpManager (T2) for virtual authenticator and handleCredentialAdded (T1) for credential persistence
- Tool registered unconditionally in tools.ts as `identity_vault_convert_to_passkey`
Architecture¶
- Extensible site flow registry (`FLOWS` map) — add new sites by defining a `SiteFlow` config
- CDP page helpers: navigateTo, fillInput, clickSelector, evaluate, poll
- Shares CdpConnection with CdpWebAuthnManager via getCdpConnection factory
- Returns structured ConvertResult with success/failure status, step log, and error details
Files changed¶
- `src/convert-flow.ts` — new orchestrator module
- `src/tools.ts` — register convert tool, accept getCdpConnection param
- `src/index.ts` — extract getCdpConnection factory, pass to registerTools
Actions