[wolfiesch]

Adds browser_credentials fill_email: AgentTab retrieves an email verification code from a fresh authenticated Gmail message and enters it on the page, bound to an exact managed grant (origin, path, recipient, purpose) and to task, tab, and revision ownership.

• The page must show the exact granted recipient, or a single compatible masked recipient (for example a***t@e***m) with no conflicting full address. Otherwise it refuses with email_code_recipient_unverified before writing anything.
• MFA wording, same-form password fields, sensitive fields, and human challenges are refused before any write.
• Specific diagnostic error codes are passed through to callers rather than collapsed into a generic error.
• SDK default timeout for fill_email covers the broker wait plus one native fill.
• Page agent protocol version is bumped to 5.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-31T00:25:47.302855Z	4657765	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.