@conto_finance/sdk 0.3.1 → 0.5.0

package/dist/playwright.d.mts

@@ -0,0 +1,255 @@
+import { Browser, Page } from 'playwright-core';
+import { GuardedCheckoutInput, PrivilegedBrowserCheckoutDriver, RunGuardedCheckoutResult, AgentCheckoutActionKind, CommerceCheckoutMethod, BrowserCheckoutAction } from './index.mjs';
+
+interface PlaywrightCheckoutTargetRegistration {
+    browserSessionId: string;
+    targetFingerprint: string;
+    locator: string;
+    /** Absolute expiry enforced by both the adapter and durable store wrapper. */
+    expiresAt: string;
+}
+/**
+ * The target store belongs to the privileged runtime. Do not expose it to the
+ * model or place raw DOM data in Conto proposal metadata.
+ */
+interface PlaywrightCheckoutTargetStore {
+    put(registration: PlaywrightCheckoutTargetRegistration): Promise<void>;
+    get(input: {
+        browserSessionId: string;
+        targetFingerprint: string;
+    }): Promise<PlaywrightCheckoutTargetRegistration | null>;
+    delete(input: {
+        browserSessionId: string;
+        targetFingerprint: string;
+    }): Promise<void>;
+}
+/** Minimal durable blob port. Redis, Postgres, or another runtime store can implement it. */
+interface PlaywrightCheckoutTargetBlobStore {
+    put(input: {
+        key: string;
+        value: string;
+        expiresAt: string;
+    }): Promise<void>;
+    get(key: string): Promise<string | null>;
+    delete(key: string): Promise<void>;
+}
+interface EncryptedPlaywrightCheckoutTargetStoreConfig {
+    blobStore: PlaywrightCheckoutTargetBlobStore;
+    /** Exactly 32 random bytes. Keep this key only in the privileged runtime. */
+    encryptionKey: Uint8Array;
+    namespace?: string;
+    now?: () => Date;
+}
+interface PlaywrightCheckoutAdapterConfig {
+    /** Resolves an already isolated Page owned by the exact browser session. */
+    pageForSession(browserSessionId: string): Promise<Page | null>;
+    targetStore?: PlaywrightCheckoutTargetStore;
+    clickTimeoutMs?: number;
+    popupTimeoutMs?: number;
+    targetTtlMs?: number;
+    now?: () => Date;
+}
+interface DiscoverPlaywrightCheckoutTargetInput {
+    browserSessionId: string;
+    /** Exact Playwright locator expression retained only by the privileged runtime. */
+    locator: string;
+    kind: AgentCheckoutActionKind;
+    checkoutMethod: CommerceCheckoutMethod;
+}
+interface DiscoveredPlaywrightCheckoutTarget {
+    action: BrowserCheckoutAction;
+    targetFingerprint: string;
+}
+interface PlaywrightCheckoutDispatchResult {
+    clicked: true;
+    pageUrl: string;
+    targetFingerprint: string;
+    /** Browser evidence only. It never asserts that the merchant settled payment. */
+    browserOutcome: {
+        kind: 'NEW_PAGE' | 'PAGE_NAVIGATION' | 'SAME_PAGE';
+        observedAt: string;
+        settlement: 'UNVERIFIED';
+    };
+}
+interface PlaywrightCheckoutAdapter {
+    discover(input: DiscoverPlaywrightCheckoutTargetInput): Promise<DiscoveredPlaywrightCheckoutTarget>;
+    driver: PrivilegedBrowserCheckoutDriver<PlaywrightCheckoutDispatchResult>;
+}
+interface GuardedPlaywrightCheckoutClient {
+    runGuardedCheckoutWithDriver(input: GuardedCheckoutInput, runtime: {
+        dispatchAttemptId: string;
+        driver: PrivilegedBrowserCheckoutDriver<PlaywrightCheckoutDispatchResult>;
+    }): Promise<RunGuardedCheckoutResult<PlaywrightCheckoutDispatchResult>>;
+}
+interface GuardedPlaywrightCheckoutRuntimeConfig extends PlaywrightCheckoutAdapterConfig {
+    conto: GuardedPlaywrightCheckoutClient;
+    /** Required so runtime owners deliberately choose process-local or durable storage. */
+    targetStore: PlaywrightCheckoutTargetStore;
+    /** Atomically loads or creates a stable attempt ID in the caller's durable runtime store. */
+    dispatchAttemptFor(input: {
+        idempotencyKey: string;
+        browserSessionId: string;
+        targetFingerprint: string;
+    }): Promise<string>;
+}
+/**
+ * Safe façade to expose as the agent's checkout capability. It intentionally
+ * does not expose Page, locator registrations, or the raw dispatch driver.
+ */
+interface GuardedPlaywrightCheckoutRuntime {
+    discover(input: DiscoverPlaywrightCheckoutTargetInput): Promise<DiscoveredPlaywrightCheckoutTarget>;
+    run(input: GuardedCheckoutInput): Promise<RunGuardedCheckoutResult<PlaywrightCheckoutDispatchResult>>;
+}
+/**
+ * Agent-prepared checkout handoff. The agent owns shopping and cart construction; this request
+ * gives the privileged runtime only the exact proposed payment action and policy facts.
+ */
+interface GuardedPlaywrightCheckoutHttpRequest {
+    idempotencyKey: string;
+    browserSessionId: string;
+    locator: string;
+    actionKind: AgentCheckoutActionKind;
+    checkoutMethod: CommerceCheckoutMethod;
+    amountMinor: number;
+    currency: 'USD';
+    purpose: string;
+    category?: string;
+    counterparty: {
+        canonicalId: string;
+        displayName: string;
+        checkoutUrl: string;
+    };
+    cart: GuardedCheckoutInput['cart'];
+    providerPresentation: GuardedCheckoutInput['providerPresentation'];
+}
+interface GuardedPlaywrightCheckoutHttpHandlerConfig {
+    runtime: GuardedPlaywrightCheckoutRuntime;
+    /** Dedicated service credential. Conto API keys are rejected. */
+    token: string;
+    /** Defaults to 64 KiB and may not exceed 1 MiB. */
+    maxBodyBytes?: number;
+}
+type GuardedPlaywrightCheckoutHttpHandler = (request: Request) => Promise<Response>;
+interface PlaywrightCdpSessionRegistryConfig {
+    /**
+     * Returns a fresh provider connection URL only when this runtime owns the session.
+     * Never expose this URL to the model or include it in logs.
+     */
+    connectUrlForSession(browserSessionId: string): Promise<string | null>;
+    /** Usually `(url) => chromium.connectOverCDP(url)`. Injected to keep Playwright optional. */
+    connectOverCDP(connectUrl: string): Promise<Browser>;
+    /** Exact secure origins accepted for provider connection URLs. */
+    allowedConnectOrigins: readonly string[];
+    /** Defaults to requiring exactly one open page in the remote browser. */
+    selectPage?(input: {
+        browserSessionId: string;
+        pages: readonly Page[];
+    }): Page | null | Promise<Page | null>;
+    /** Maximum simultaneously connected remote sessions. Defaults to 100. */
+    maxSessions?: number;
+}
+interface PlaywrightCdpSessionRegistry {
+    pageForSession(browserSessionId: string): Promise<Page | null>;
+    /** Closes the Playwright browser connection and may end the provider session. */
+    closeSession(browserSessionId: string): Promise<void>;
+    /** Closes every tracked browser connection. */
+    close(): Promise<void>;
+}
+interface PlaywrightSessionInteractiveTarget {
+    /** Opaque positional locator for the guarded checkout request; it is not an execution grant. */
+    locator: string;
+    role: 'BUTTON' | 'LINK';
+    label: string;
+    disabled: boolean;
+    /** Exact HTTPS origin only. Paths, queries, fragments, and credentials are never returned. */
+    destinationOrigin?: string;
+}
+/**
+ * Deliberately narrow model-visible projection of one owned page. It excludes page text, DOM,
+ * form values, screenshots, cookies, storage, URL paths/queries, and provider capabilities.
+ */
+interface PlaywrightSessionObservation {
+    browserSessionId: string;
+    pageOrigin: string | null;
+    title: string;
+    targets: readonly PlaywrightSessionInteractiveTarget[];
+    truncated: boolean;
+    observedAt: string;
+}
+interface PlaywrightSessionObserverConfig {
+    pageForSession(browserSessionId: string): Promise<Page | null>;
+    now?: () => Date;
+}
+interface PlaywrightSessionObserver {
+    observe(browserSessionId: string): Promise<PlaywrightSessionObservation>;
+}
+interface GuardedPlaywrightCheckoutRuntimeHostConfig {
+    conto: GuardedPlaywrightCheckoutClient;
+    /** Privileged provider connection and session-ownership boundary. */
+    browserSessions: PlaywrightCdpSessionRegistryConfig;
+    /** Encrypted durable target storage retained only by this host. */
+    targetStore: EncryptedPlaywrightCheckoutTargetStoreConfig;
+    /** Atomically loads or creates one stable attempt for the checkout intent. */
+    dispatchAttemptFor: GuardedPlaywrightCheckoutRuntimeConfig['dispatchAttemptFor'];
+    /** Dedicated service credential. Conto API keys are rejected. */
+    token: string;
+    maxBodyBytes?: number;
+    clickTimeoutMs?: number;
+    popupTimeoutMs?: number;
+    targetTtlMs?: number;
+    now?: () => Date;
+}
+/**
+ * Closed façade for a separately operated browser runtime. It intentionally
+ * exposes no page, target store, discovery primitive, or raw dispatch driver.
+ */
+interface GuardedPlaywrightCheckoutRuntimeHost {
+    handler: GuardedPlaywrightCheckoutHttpHandler;
+    /** Read-only, bounded projection of the exact runtime-owned page. */
+    observeSession(browserSessionId: string): Promise<PlaywrightSessionObservation>;
+    closeSession(browserSessionId: string): Promise<void>;
+    close(): Promise<void>;
+}
+declare function createInMemoryPlaywrightCheckoutTargetStore(): PlaywrightCheckoutTargetStore;
+/**
+ * Encrypts locator registrations before writing them to caller-owned durable
+ * storage. Blob keys are hashed so session IDs and fingerprints are not stored
+ * in plaintext. Expired records are deleted and fail closed.
+ */
+declare function createEncryptedPlaywrightCheckoutTargetStore(config: EncryptedPlaywrightCheckoutTargetStoreConfig): PlaywrightCheckoutTargetStore;
+/**
+ * Playwright and Browserbase-compatible adapter. The model receives only the
+ * discovered action and the caller's guarded checkout tool; Page, locator,
+ * element handle, store, and driver remain in the privileged process.
+ */
+declare function createPlaywrightCheckoutAdapter(config: PlaywrightCheckoutAdapterConfig): PlaywrightCheckoutAdapter;
+/**
+ * Composes target discovery and Conto's one-use sequence without returning the
+ * low-level driver. Expose `run` to the model, not the underlying adapter.
+ */
+declare function createGuardedPlaywrightCheckoutRuntime(config: GuardedPlaywrightCheckoutRuntimeConfig): GuardedPlaywrightCheckoutRuntime;
+/**
+ * Resolves agent-owned remote CDP sessions into Playwright pages without ever
+ * returning provider connection URLs to the caller. The ownership callback is
+ * the authorization boundary: it must return null for every unowned session.
+ */
+declare function createPlaywrightCdpSessionRegistry(config: PlaywrightCdpSessionRegistryConfig): PlaywrightCdpSessionRegistry;
+/**
+ * Creates a read-only observer for the runtime-owned page. This is the first safe building block
+ * for agent exploration: it returns a small interactive outline, while retaining every browser
+ * mutation behind a separate privileged capability.
+ */
+declare function createPlaywrightSessionObserver(config: PlaywrightSessionObserverConfig): PlaywrightSessionObserver;
+/**
+ * Composes the secure CDP registry, encrypted target store, guarded runtime,
+ * and authenticated HTTP handler without returning any bypass-capable piece.
+ */
+declare function createGuardedPlaywrightCheckoutRuntimeHost(config: GuardedPlaywrightCheckoutRuntimeHostConfig): GuardedPlaywrightCheckoutRuntimeHost;
+/**
+ * Mounts a guarded Playwright runtime behind the authenticated HTTP contract
+ * consumed by @conto_finance/mcp-server. The handler owns discovery and run as
+ * one request and returns only the evidence needed by the MCP projection.
+ */
+declare function createGuardedPlaywrightCheckoutHttpHandler(config: GuardedPlaywrightCheckoutHttpHandlerConfig): GuardedPlaywrightCheckoutHttpHandler;
+
+export { type DiscoverPlaywrightCheckoutTargetInput, type DiscoveredPlaywrightCheckoutTarget, type EncryptedPlaywrightCheckoutTargetStoreConfig, type GuardedPlaywrightCheckoutClient, type GuardedPlaywrightCheckoutHttpHandler, type GuardedPlaywrightCheckoutHttpHandlerConfig, type GuardedPlaywrightCheckoutHttpRequest, type GuardedPlaywrightCheckoutRuntime, type GuardedPlaywrightCheckoutRuntimeConfig, type GuardedPlaywrightCheckoutRuntimeHost, type GuardedPlaywrightCheckoutRuntimeHostConfig, type PlaywrightCdpSessionRegistry, type PlaywrightCdpSessionRegistryConfig, type PlaywrightCheckoutAdapter, type PlaywrightCheckoutAdapterConfig, type PlaywrightCheckoutDispatchResult, type PlaywrightCheckoutTargetBlobStore, type PlaywrightCheckoutTargetRegistration, type PlaywrightCheckoutTargetStore, type PlaywrightSessionInteractiveTarget, type PlaywrightSessionObservation, type PlaywrightSessionObserver, type PlaywrightSessionObserverConfig, createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };

package/dist/playwright.d.ts

@@ -0,0 +1,255 @@
+import { Browser, Page } from 'playwright-core';
+import { GuardedCheckoutInput, PrivilegedBrowserCheckoutDriver, RunGuardedCheckoutResult, AgentCheckoutActionKind, CommerceCheckoutMethod, BrowserCheckoutAction } from './index.js';
+
+interface PlaywrightCheckoutTargetRegistration {
+    browserSessionId: string;
+    targetFingerprint: string;
+    locator: string;
+    /** Absolute expiry enforced by both the adapter and durable store wrapper. */
+    expiresAt: string;
+}
+/**
+ * The target store belongs to the privileged runtime. Do not expose it to the
+ * model or place raw DOM data in Conto proposal metadata.
+ */
+interface PlaywrightCheckoutTargetStore {
+    put(registration: PlaywrightCheckoutTargetRegistration): Promise<void>;
+    get(input: {
+        browserSessionId: string;
+        targetFingerprint: string;
+    }): Promise<PlaywrightCheckoutTargetRegistration | null>;
+    delete(input: {
+        browserSessionId: string;
+        targetFingerprint: string;
+    }): Promise<void>;
+}
+/** Minimal durable blob port. Redis, Postgres, or another runtime store can implement it. */
+interface PlaywrightCheckoutTargetBlobStore {
+    put(input: {
+        key: string;
+        value: string;
+        expiresAt: string;
+    }): Promise<void>;
+    get(key: string): Promise<string | null>;
+    delete(key: string): Promise<void>;
+}
+interface EncryptedPlaywrightCheckoutTargetStoreConfig {
+    blobStore: PlaywrightCheckoutTargetBlobStore;
+    /** Exactly 32 random bytes. Keep this key only in the privileged runtime. */
+    encryptionKey: Uint8Array;
+    namespace?: string;
+    now?: () => Date;
+}
+interface PlaywrightCheckoutAdapterConfig {
+    /** Resolves an already isolated Page owned by the exact browser session. */
+    pageForSession(browserSessionId: string): Promise<Page | null>;
+    targetStore?: PlaywrightCheckoutTargetStore;
+    clickTimeoutMs?: number;
+    popupTimeoutMs?: number;
+    targetTtlMs?: number;
+    now?: () => Date;
+}
+interface DiscoverPlaywrightCheckoutTargetInput {
+    browserSessionId: string;
+    /** Exact Playwright locator expression retained only by the privileged runtime. */
+    locator: string;
+    kind: AgentCheckoutActionKind;
+    checkoutMethod: CommerceCheckoutMethod;
+}
+interface DiscoveredPlaywrightCheckoutTarget {
+    action: BrowserCheckoutAction;
+    targetFingerprint: string;
+}
+interface PlaywrightCheckoutDispatchResult {
+    clicked: true;
+    pageUrl: string;
+    targetFingerprint: string;
+    /** Browser evidence only. It never asserts that the merchant settled payment. */
+    browserOutcome: {
+        kind: 'NEW_PAGE' | 'PAGE_NAVIGATION' | 'SAME_PAGE';
+        observedAt: string;
+        settlement: 'UNVERIFIED';
+    };
+}
+interface PlaywrightCheckoutAdapter {
+    discover(input: DiscoverPlaywrightCheckoutTargetInput): Promise<DiscoveredPlaywrightCheckoutTarget>;
+    driver: PrivilegedBrowserCheckoutDriver<PlaywrightCheckoutDispatchResult>;
+}
+interface GuardedPlaywrightCheckoutClient {
+    runGuardedCheckoutWithDriver(input: GuardedCheckoutInput, runtime: {
+        dispatchAttemptId: string;
+        driver: PrivilegedBrowserCheckoutDriver<PlaywrightCheckoutDispatchResult>;
+    }): Promise<RunGuardedCheckoutResult<PlaywrightCheckoutDispatchResult>>;
+}
+interface GuardedPlaywrightCheckoutRuntimeConfig extends PlaywrightCheckoutAdapterConfig {
+    conto: GuardedPlaywrightCheckoutClient;
+    /** Required so runtime owners deliberately choose process-local or durable storage. */
+    targetStore: PlaywrightCheckoutTargetStore;
+    /** Atomically loads or creates a stable attempt ID in the caller's durable runtime store. */
+    dispatchAttemptFor(input: {
+        idempotencyKey: string;
+        browserSessionId: string;
+        targetFingerprint: string;
+    }): Promise<string>;
+}
+/**
+ * Safe façade to expose as the agent's checkout capability. It intentionally
+ * does not expose Page, locator registrations, or the raw dispatch driver.
+ */
+interface GuardedPlaywrightCheckoutRuntime {
+    discover(input: DiscoverPlaywrightCheckoutTargetInput): Promise<DiscoveredPlaywrightCheckoutTarget>;
+    run(input: GuardedCheckoutInput): Promise<RunGuardedCheckoutResult<PlaywrightCheckoutDispatchResult>>;
+}
+/**
+ * Agent-prepared checkout handoff. The agent owns shopping and cart construction; this request
+ * gives the privileged runtime only the exact proposed payment action and policy facts.
+ */
+interface GuardedPlaywrightCheckoutHttpRequest {
+    idempotencyKey: string;
+    browserSessionId: string;
+    locator: string;
+    actionKind: AgentCheckoutActionKind;
+    checkoutMethod: CommerceCheckoutMethod;
+    amountMinor: number;
+    currency: 'USD';
+    purpose: string;
+    category?: string;
+    counterparty: {
+        canonicalId: string;
+        displayName: string;
+        checkoutUrl: string;
+    };
+    cart: GuardedCheckoutInput['cart'];
+    providerPresentation: GuardedCheckoutInput['providerPresentation'];
+}
+interface GuardedPlaywrightCheckoutHttpHandlerConfig {
+    runtime: GuardedPlaywrightCheckoutRuntime;
+    /** Dedicated service credential. Conto API keys are rejected. */
+    token: string;
+    /** Defaults to 64 KiB and may not exceed 1 MiB. */
+    maxBodyBytes?: number;
+}
+type GuardedPlaywrightCheckoutHttpHandler = (request: Request) => Promise<Response>;
+interface PlaywrightCdpSessionRegistryConfig {
+    /**
+     * Returns a fresh provider connection URL only when this runtime owns the session.
+     * Never expose this URL to the model or include it in logs.
+     */
+    connectUrlForSession(browserSessionId: string): Promise<string | null>;
+    /** Usually `(url) => chromium.connectOverCDP(url)`. Injected to keep Playwright optional. */
+    connectOverCDP(connectUrl: string): Promise<Browser>;
+    /** Exact secure origins accepted for provider connection URLs. */
+    allowedConnectOrigins: readonly string[];
+    /** Defaults to requiring exactly one open page in the remote browser. */
+    selectPage?(input: {
+        browserSessionId: string;
+        pages: readonly Page[];
+    }): Page | null | Promise<Page | null>;
+    /** Maximum simultaneously connected remote sessions. Defaults to 100. */
+    maxSessions?: number;
+}
+interface PlaywrightCdpSessionRegistry {
+    pageForSession(browserSessionId: string): Promise<Page | null>;
+    /** Closes the Playwright browser connection and may end the provider session. */
+    closeSession(browserSessionId: string): Promise<void>;
+    /** Closes every tracked browser connection. */
+    close(): Promise<void>;
+}
+interface PlaywrightSessionInteractiveTarget {
+    /** Opaque positional locator for the guarded checkout request; it is not an execution grant. */
+    locator: string;
+    role: 'BUTTON' | 'LINK';
+    label: string;
+    disabled: boolean;
+    /** Exact HTTPS origin only. Paths, queries, fragments, and credentials are never returned. */
+    destinationOrigin?: string;
+}
+/**
+ * Deliberately narrow model-visible projection of one owned page. It excludes page text, DOM,
+ * form values, screenshots, cookies, storage, URL paths/queries, and provider capabilities.
+ */
+interface PlaywrightSessionObservation {
+    browserSessionId: string;
+    pageOrigin: string | null;
+    title: string;
+    targets: readonly PlaywrightSessionInteractiveTarget[];
+    truncated: boolean;
+    observedAt: string;
+}
+interface PlaywrightSessionObserverConfig {
+    pageForSession(browserSessionId: string): Promise<Page | null>;
+    now?: () => Date;
+}
+interface PlaywrightSessionObserver {
+    observe(browserSessionId: string): Promise<PlaywrightSessionObservation>;
+}
+interface GuardedPlaywrightCheckoutRuntimeHostConfig {
+    conto: GuardedPlaywrightCheckoutClient;
+    /** Privileged provider connection and session-ownership boundary. */
+    browserSessions: PlaywrightCdpSessionRegistryConfig;
+    /** Encrypted durable target storage retained only by this host. */
+    targetStore: EncryptedPlaywrightCheckoutTargetStoreConfig;
+    /** Atomically loads or creates one stable attempt for the checkout intent. */
+    dispatchAttemptFor: GuardedPlaywrightCheckoutRuntimeConfig['dispatchAttemptFor'];
+    /** Dedicated service credential. Conto API keys are rejected. */
+    token: string;
+    maxBodyBytes?: number;
+    clickTimeoutMs?: number;
+    popupTimeoutMs?: number;
+    targetTtlMs?: number;
+    now?: () => Date;
+}
+/**
+ * Closed façade for a separately operated browser runtime. It intentionally
+ * exposes no page, target store, discovery primitive, or raw dispatch driver.
+ */
+interface GuardedPlaywrightCheckoutRuntimeHost {
+    handler: GuardedPlaywrightCheckoutHttpHandler;
+    /** Read-only, bounded projection of the exact runtime-owned page. */
+    observeSession(browserSessionId: string): Promise<PlaywrightSessionObservation>;
+    closeSession(browserSessionId: string): Promise<void>;
+    close(): Promise<void>;
+}
+declare function createInMemoryPlaywrightCheckoutTargetStore(): PlaywrightCheckoutTargetStore;
+/**
+ * Encrypts locator registrations before writing them to caller-owned durable
+ * storage. Blob keys are hashed so session IDs and fingerprints are not stored
+ * in plaintext. Expired records are deleted and fail closed.
+ */
+declare function createEncryptedPlaywrightCheckoutTargetStore(config: EncryptedPlaywrightCheckoutTargetStoreConfig): PlaywrightCheckoutTargetStore;
+/**
+ * Playwright and Browserbase-compatible adapter. The model receives only the
+ * discovered action and the caller's guarded checkout tool; Page, locator,
+ * element handle, store, and driver remain in the privileged process.
+ */
+declare function createPlaywrightCheckoutAdapter(config: PlaywrightCheckoutAdapterConfig): PlaywrightCheckoutAdapter;
+/**
+ * Composes target discovery and Conto's one-use sequence without returning the
+ * low-level driver. Expose `run` to the model, not the underlying adapter.
+ */
+declare function createGuardedPlaywrightCheckoutRuntime(config: GuardedPlaywrightCheckoutRuntimeConfig): GuardedPlaywrightCheckoutRuntime;
+/**
+ * Resolves agent-owned remote CDP sessions into Playwright pages without ever
+ * returning provider connection URLs to the caller. The ownership callback is
+ * the authorization boundary: it must return null for every unowned session.
+ */
+declare function createPlaywrightCdpSessionRegistry(config: PlaywrightCdpSessionRegistryConfig): PlaywrightCdpSessionRegistry;
+/**
+ * Creates a read-only observer for the runtime-owned page. This is the first safe building block
+ * for agent exploration: it returns a small interactive outline, while retaining every browser
+ * mutation behind a separate privileged capability.
+ */
+declare function createPlaywrightSessionObserver(config: PlaywrightSessionObserverConfig): PlaywrightSessionObserver;
+/**
+ * Composes the secure CDP registry, encrypted target store, guarded runtime,
+ * and authenticated HTTP handler without returning any bypass-capable piece.
+ */
+declare function createGuardedPlaywrightCheckoutRuntimeHost(config: GuardedPlaywrightCheckoutRuntimeHostConfig): GuardedPlaywrightCheckoutRuntimeHost;
+/**
+ * Mounts a guarded Playwright runtime behind the authenticated HTTP contract
+ * consumed by @conto_finance/mcp-server. The handler owns discovery and run as
+ * one request and returns only the evidence needed by the MCP projection.
+ */
+declare function createGuardedPlaywrightCheckoutHttpHandler(config: GuardedPlaywrightCheckoutHttpHandlerConfig): GuardedPlaywrightCheckoutHttpHandler;
+
+export { type DiscoverPlaywrightCheckoutTargetInput, type DiscoveredPlaywrightCheckoutTarget, type EncryptedPlaywrightCheckoutTargetStoreConfig, type GuardedPlaywrightCheckoutClient, type GuardedPlaywrightCheckoutHttpHandler, type GuardedPlaywrightCheckoutHttpHandlerConfig, type GuardedPlaywrightCheckoutHttpRequest, type GuardedPlaywrightCheckoutRuntime, type GuardedPlaywrightCheckoutRuntimeConfig, type GuardedPlaywrightCheckoutRuntimeHost, type GuardedPlaywrightCheckoutRuntimeHostConfig, type PlaywrightCdpSessionRegistry, type PlaywrightCdpSessionRegistryConfig, type PlaywrightCheckoutAdapter, type PlaywrightCheckoutAdapterConfig, type PlaywrightCheckoutDispatchResult, type PlaywrightCheckoutTargetBlobStore, type PlaywrightCheckoutTargetRegistration, type PlaywrightCheckoutTargetStore, type PlaywrightSessionInteractiveTarget, type PlaywrightSessionObservation, type PlaywrightSessionObserver, type PlaywrightSessionObserverConfig, createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };