@opengeni/contracts 0.44.1 → 0.50.0

package/dist/interaction.d.ts

@@ -3,6 +3,7 @@ export declare const INTERACTION_PROTOCOL_VERSION: 1;
 export declare const BROWSER_CONTROL_PROTOCOL_VERSION: 1;
 export declare const BROWSER_CONTROL_WEBSOCKET_PROTOCOL: "opengeni.browser.v1";
 export declare const COMPUTER_CONTROL_WEBSOCKET_PROTOCOL: "opengeni.computer.v1";
+export declare const COMPUTER_RFB_WEBSOCKET_PROTOCOL: "opengeni.computer.rfb.v1";
 export declare const BROWSER_CONTROL_WEBSOCKET_BEARER_PREFIX: "opengeni.auth.";
 export declare const BROWSER_CONTROL_MAX_JSON_BYTES: number;
 export declare const BROWSER_CONTROL_MAX_FRAME_HEADER_BYTES: number;
@@ -12,6 +13,21 @@ export declare const INTERACTION_MAX_SEMANTIC_NODES = 10000;
 export declare const INTERACTION_MAX_CHANGED_NODES = 2000;
 export declare const INTERACTION_MAX_DIAGNOSTIC_ENTRIES = 1000;
 export declare const INTERACTION_MAX_ACTIONS_PER_BATCH = 32;
+export declare const INTERACTION_MAX_WORKSPACE_FILES_PER_COMMAND = 100;
+export declare const INTERACTION_MAX_CLIPBOARD_BYTES: number;
+/**
+ * Latest-wins workspace invalidation for Browser/Computer resources. This is
+ * deliberately a cursor snapshot rather than a durable event-log entry:
+ * consumers refetch authoritative resource lists whenever `revision` advances.
+ */
+export declare const WorkspaceInteractionRevisionEvent: z.ZodObject<{
+    workspaceId: z.ZodString;
+    sequence: z.ZodNumber;
+    revision: z.ZodNumber;
+    type: z.ZodLiteral<"workspace.interaction.changed">;
+    occurredAt: z.ZodString;
+}, z.core.$strict>;
+export type WorkspaceInteractionRevisionEvent = z.infer<typeof WorkspaceInteractionRevisionEvent>;
 export declare const InteractionPlacement: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"sandbox_group">;
     sandboxGroupId: z.ZodString;
@@ -82,6 +98,7 @@ export declare const BrowserSessionCapabilities: z.ZodObject<{
     downloads: z.ZodBoolean;
     uploads: z.ZodBoolean;
     clipboard: z.ZodBoolean;
+    permissions: z.ZodBoolean;
     diagnostics: z.ZodBoolean;
     rawCdp: z.ZodBoolean;
     linkedComputer: z.ZodBoolean;
@@ -150,6 +167,7 @@ export declare const BrowserSession: z.ZodObject<{
         downloads: z.ZodBoolean;
         uploads: z.ZodBoolean;
         clipboard: z.ZodBoolean;
+        permissions: z.ZodBoolean;
         diagnostics: z.ZodBoolean;
         rawCdp: z.ZodBoolean;
         linkedComputer: z.ZodBoolean;
@@ -176,6 +194,25 @@ export declare const BrowserSession: z.ZodObject<{
     failureCode: z.ZodNullable<z.ZodString>;
 }, z.core.$strict>;
 export type BrowserSession = z.infer<typeof BrowserSession>;
+/** Controller-private, BrowserSession-scoped clipboard. This is deliberately
+ * distinct from a ComputerSession/host OS clipboard so concurrent browsers do
+ * not exchange ambient machine state. */
+export declare const BrowserClipboard: z.ZodObject<{
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    revision: z.ZodNumber;
+    text: z.ZodString;
+    source: z.ZodEnum<{
+        clear: "clear";
+        copy: "copy";
+        empty: "empty";
+        paste: "paste";
+        write: "write";
+    }>;
+    sourceTargetId: z.ZodNullable<z.ZodString>;
+    updatedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type BrowserClipboard = z.infer<typeof BrowserClipboard>;
 /** One live Chrome-profile bridge installed on an enrolled machine. This is a
  *  transport endpoint, not saved browser/login state: BrowserIdentity remains
  *  the immutable, reusable state abstraction. */
@@ -593,6 +630,7 @@ export declare const BrowserIdentity: z.ZodObject<{
         active: "active";
         archived: "archived";
     }>;
+    version: z.ZodNumber;
     defaultRevisionId: z.ZodNullable<z.ZodString>;
     headGeneration: z.ZodNumber;
     revisionCount: z.ZodNumber;
@@ -692,6 +730,10 @@ export declare const NetworkRouteConsistency: z.ZodObject<{
     }>;
 }, z.core.$strict>;
 export type NetworkRouteConsistency = z.infer<typeof NetworkRouteConsistency>;
+export declare function interactionPlacementsEqual(left: InteractionPlacement, right: InteractionPlacement): boolean;
+/** One secret-free compatibility rule shared by configuration, persistence,
+ * and launch. `null` placement means the ordinary managed sandbox default. */
+export declare function networkRoutePlacementCompatibilityIssue(configuration: NetworkRouteConfiguration, consistency: NetworkRouteConsistency, placement: InteractionPlacement | null): string | null;
 export declare const NetworkRoute: z.ZodObject<{
     id: z.ZodString;
     accountId: z.ZodString;
@@ -1185,6 +1227,7 @@ export declare const SiteAuthAuthority: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"external_provider">;
     label: z.ZodString;
     adapterId: z.ZodString;
+    connectionId: z.ZodString;
     credential: z.ZodNullable<z.ZodObject<{
         connectionId: z.ZodString;
         connectionSubjectId: z.ZodNullable<z.ZodString>;
@@ -1221,6 +1264,19 @@ export declare const SiteAuthVerificationState: z.ZodEnum<{
     verified: "verified";
 }>;
 export type SiteAuthVerificationState = z.infer<typeof SiteAuthVerificationState>;
+export declare const SiteAuthMaintenance: z.ZodObject<{
+    action: z.ZodEnum<{
+        health_check: "health_check";
+        repair: "repair";
+    }>;
+    sessionId: z.ZodNullable<z.ZodString>;
+    dueAt: z.ZodString;
+    startedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type SiteAuthMaintenance = z.infer<typeof SiteAuthMaintenance>;
+/** Trusted service provenance for scheduler-authored maintenance sessions. */
+export declare const SITE_AUTH_MAINTENANCE_OPERATION_CONTEXT_KEY: "opengeniSiteAuthMaintenanceOperationId";
+export declare const SITE_AUTH_MAINTENANCE_CONNECTION_CONTEXT_KEY: "opengeniSiteAuthConnectionId";
 export declare const SiteAuthConnection: z.ZodObject<{
     name: z.ZodString;
     accountLabel: z.ZodString;
@@ -1271,6 +1327,7 @@ export declare const SiteAuthConnection: z.ZodObject<{
         kind: z.ZodLiteral<"external_provider">;
         label: z.ZodString;
         adapterId: z.ZodString;
+        connectionId: z.ZodString;
         credential: z.ZodNullable<z.ZodObject<{
             connectionId: z.ZodString;
             connectionSubjectId: z.ZodNullable<z.ZodString>;
@@ -1328,6 +1385,17 @@ export declare const SiteAuthConnection: z.ZodObject<{
     }>;
     lastVerifiedAt: z.ZodNullable<z.ZodString>;
     lastVerifiedUrl: z.ZodNullable<z.ZodString>;
+    lastCheckedAt: z.ZodNullable<z.ZodString>;
+    nextCheckAt: z.ZodNullable<z.ZodString>;
+    maintenance: z.ZodNullable<z.ZodObject<{
+        action: z.ZodEnum<{
+            health_check: "health_check";
+            repair: "repair";
+        }>;
+        sessionId: z.ZodNullable<z.ZodString>;
+        dueAt: z.ZodString;
+        startedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
     repairCode: z.ZodNullable<z.ZodString>;
     version: z.ZodNumber;
     createdBySubjectId: z.ZodString;
@@ -1387,6 +1455,7 @@ export declare const SiteAuthConnectionListResponse: z.ZodObject<{
             kind: z.ZodLiteral<"external_provider">;
             label: z.ZodString;
             adapterId: z.ZodString;
+            connectionId: z.ZodString;
             credential: z.ZodNullable<z.ZodObject<{
                 connectionId: z.ZodString;
                 connectionSubjectId: z.ZodNullable<z.ZodString>;
@@ -1444,6 +1513,17 @@ export declare const SiteAuthConnectionListResponse: z.ZodObject<{
         }>;
         lastVerifiedAt: z.ZodNullable<z.ZodString>;
         lastVerifiedUrl: z.ZodNullable<z.ZodString>;
+        lastCheckedAt: z.ZodNullable<z.ZodString>;
+        nextCheckAt: z.ZodNullable<z.ZodString>;
+        maintenance: z.ZodNullable<z.ZodObject<{
+            action: z.ZodEnum<{
+                health_check: "health_check";
+                repair: "repair";
+            }>;
+            sessionId: z.ZodNullable<z.ZodString>;
+            dueAt: z.ZodString;
+            startedAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
         repairCode: z.ZodNullable<z.ZodString>;
         version: z.ZodNumber;
         createdBySubjectId: z.ZodString;
@@ -1502,6 +1582,7 @@ export declare const CreateSiteAuthConnectionRequest: z.ZodObject<{
         kind: z.ZodLiteral<"external_provider">;
         label: z.ZodString;
         adapterId: z.ZodString;
+        connectionId: z.ZodString;
         credential: z.ZodNullable<z.ZodObject<{
             connectionId: z.ZodString;
             connectionSubjectId: z.ZodNullable<z.ZodString>;
@@ -1597,6 +1678,7 @@ export declare const UpdateSiteAuthConnectionRequest: z.ZodObject<{
         kind: z.ZodLiteral<"external_provider">;
         label: z.ZodString;
         adapterId: z.ZodString;
+        connectionId: z.ZodString;
         credential: z.ZodNullable<z.ZodObject<{
             connectionId: z.ZodString;
             connectionSubjectId: z.ZodNullable<z.ZodString>;
@@ -1698,6 +1780,7 @@ export declare const SiteAuthConnectionMutationResponse: z.ZodObject<{
             kind: z.ZodLiteral<"external_provider">;
             label: z.ZodString;
             adapterId: z.ZodString;
+            connectionId: z.ZodString;
             credential: z.ZodNullable<z.ZodObject<{
                 connectionId: z.ZodString;
                 connectionSubjectId: z.ZodNullable<z.ZodString>;
@@ -1755,6 +1838,17 @@ export declare const SiteAuthConnectionMutationResponse: z.ZodObject<{
         }>;
         lastVerifiedAt: z.ZodNullable<z.ZodString>;
         lastVerifiedUrl: z.ZodNullable<z.ZodString>;
+        lastCheckedAt: z.ZodNullable<z.ZodString>;
+        nextCheckAt: z.ZodNullable<z.ZodString>;
+        maintenance: z.ZodNullable<z.ZodObject<{
+            action: z.ZodEnum<{
+                health_check: "health_check";
+                repair: "repair";
+            }>;
+            sessionId: z.ZodNullable<z.ZodString>;
+            dueAt: z.ZodString;
+            startedAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
         repairCode: z.ZodNullable<z.ZodString>;
         version: z.ZodNumber;
         createdBySubjectId: z.ZodString;
@@ -1816,6 +1910,11 @@ export declare const AuthRun: z.ZodObject<{
     controllerGeneration: z.ZodString;
     targetGeneration: z.ZodString;
     documentGeneration: z.ZodNullable<z.ZodString>;
+    purpose: z.ZodEnum<{
+        authenticate: "authenticate";
+        health_check: "health_check";
+        repair: "repair";
+    }>;
     methodId: z.ZodNullable<z.ZodString>;
     authorityId: z.ZodNullable<z.ZodString>;
     state: z.ZodEnum<{
@@ -1877,6 +1976,11 @@ export declare const AuthRunListResponse: z.ZodObject<{
         controllerGeneration: z.ZodString;
         targetGeneration: z.ZodString;
         documentGeneration: z.ZodNullable<z.ZodString>;
+        purpose: z.ZodEnum<{
+            authenticate: "authenticate";
+            health_check: "health_check";
+            repair: "repair";
+        }>;
         methodId: z.ZodNullable<z.ZodString>;
         authorityId: z.ZodNullable<z.ZodString>;
         state: z.ZodEnum<{
@@ -1939,6 +2043,11 @@ export declare const AuthRunMutationResponse: z.ZodObject<{
         controllerGeneration: z.ZodString;
         targetGeneration: z.ZodString;
         documentGeneration: z.ZodNullable<z.ZodString>;
+        purpose: z.ZodEnum<{
+            authenticate: "authenticate";
+            health_check: "health_check";
+            repair: "repair";
+        }>;
         methodId: z.ZodNullable<z.ZodString>;
         authorityId: z.ZodNullable<z.ZodString>;
         state: z.ZodEnum<{
@@ -1998,12 +2107,58 @@ export declare const StartAuthRunRequest: z.ZodObject<{
     targetId: z.ZodString;
     expectedTargetGeneration: z.ZodString;
     expectedDocumentGeneration: z.ZodNullable<z.ZodString>;
+    purpose: z.ZodOptional<z.ZodEnum<{
+        authenticate: "authenticate";
+        health_check: "health_check";
+        repair: "repair";
+    }>>;
     methodId: z.ZodOptional<z.ZodString>;
     authorityId: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export type StartAuthRunRequest = z.infer<typeof StartAuthRunRequest>;
+export declare const ReportAuthRunPayload: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    methodId: z.ZodOptional<z.ZodString>;
+    authorityId: z.ZodOptional<z.ZodString>;
+    state: z.ZodEnum<{
+        awaiting_choice: "awaiting_choice";
+        awaiting_external_action: "awaiting_external_action";
+        awaiting_secret: "awaiting_secret";
+        cancelled: "cancelled";
+        failed: "failed";
+        working: "working";
+    }>;
+    choices: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        methodId: z.ZodString;
+    }, z.core.$strict>>>;
+    pendingFields: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        purpose: z.ZodEnum<{
+            identifier: "identifier";
+            password: "password";
+            secret: "secret";
+            totp: "totp";
+        }>;
+    }, z.core.$strict>>>;
+    externalAction: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            device: "device";
+            human: "human";
+            other: "other";
+            passkey: "passkey";
+            push: "push";
+            security_key: "security_key";
+        }>;
+        label: z.ZodString;
+        expiresAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>>;
+    failureCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type ReportAuthRunPayload = z.infer<typeof ReportAuthRunPayload>;
 export declare const ReportAuthRunRequest: z.ZodObject<{
-    operationId: z.ZodString;
     expectedVersion: z.ZodNumber;
     methodId: z.ZodOptional<z.ZodString>;
     authorityId: z.ZodOptional<z.ZodString>;
@@ -2043,6 +2198,7 @@ export declare const ReportAuthRunRequest: z.ZodObject<{
         expiresAt: z.ZodNullable<z.ZodString>;
     }, z.core.$strict>>>;
     failureCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    operationId: z.ZodString;
 }, z.core.$strict>;
 export type ReportAuthRunRequest = z.infer<typeof ReportAuthRunRequest>;
 export declare const ProtectedAuthField: z.ZodObject<{
@@ -2233,6 +2389,11 @@ export declare const ProtectedAuthFillResponse: z.ZodObject<{
         controllerGeneration: z.ZodString;
         targetGeneration: z.ZodString;
         documentGeneration: z.ZodNullable<z.ZodString>;
+        purpose: z.ZodEnum<{
+            authenticate: "authenticate";
+            health_check: "health_check";
+            repair: "repair";
+        }>;
         methodId: z.ZodNullable<z.ZodString>;
         authorityId: z.ZodNullable<z.ZodString>;
         state: z.ZodEnum<{
@@ -2293,6 +2454,144 @@ export declare const ProtectedAuthFillResponse: z.ZodObject<{
     replayed: z.ZodBoolean;
 }, z.core.$strict>;
 export type ProtectedAuthFillResponse = z.infer<typeof ProtectedAuthFillResponse>;
+/** Public request for advancing a provider-managed AuthRun. Provider secrets,
+ * profile names, browser ids, and hosted-login URLs stay behind browserd. */
+export declare const ExternalAuthRunRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    expectedVersion: z.ZodNumber;
+    action: z.ZodEnum<{
+        poll: "poll";
+        start: "start";
+    }>;
+}, z.core.$strict>;
+export type ExternalAuthRunRequest = z.infer<typeof ExternalAuthRunRequest>;
+export declare const ExternalAuthRunResponse: z.ZodObject<{
+    run: z.ZodObject<{
+        id: z.ZodString;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        siteAuthConnectionId: z.ZodString;
+        browserSessionId: z.ZodString;
+        targetId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        targetGeneration: z.ZodString;
+        documentGeneration: z.ZodNullable<z.ZodString>;
+        purpose: z.ZodEnum<{
+            authenticate: "authenticate";
+            health_check: "health_check";
+            repair: "repair";
+        }>;
+        methodId: z.ZodNullable<z.ZodString>;
+        authorityId: z.ZodNullable<z.ZodString>;
+        state: z.ZodEnum<{
+            awaiting_choice: "awaiting_choice";
+            awaiting_external_action: "awaiting_external_action";
+            awaiting_secret: "awaiting_secret";
+            cancelled: "cancelled";
+            discovering: "discovering";
+            failed: "failed";
+            verified: "verified";
+            working: "working";
+        }>;
+        choices: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            methodId: z.ZodString;
+        }, z.core.$strict>>;
+        pendingFields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            purpose: z.ZodEnum<{
+                identifier: "identifier";
+                password: "password";
+                secret: "secret";
+                totp: "totp";
+            }>;
+        }, z.core.$strict>>;
+        externalAction: z.ZodNullable<z.ZodObject<{
+            kind: z.ZodEnum<{
+                device: "device";
+                human: "human";
+                other: "other";
+                passkey: "passkey";
+                push: "push";
+                security_key: "security_key";
+            }>;
+            label: z.ZodString;
+            expiresAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
+        interventionId: z.ZodNullable<z.ZodString>;
+        verifiedUrl: z.ZodNullable<z.ZodString>;
+        failureCode: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        operationId: z.ZodString;
+        createdBySubjectId: z.ZodString;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        settledAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    status: z.ZodEnum<{
+        failed: "failed";
+        needs_human: "needs_human";
+        ready_to_verify: "ready_to_verify";
+        working: "working";
+    }>;
+    operationId: z.ZodString;
+    replayed: z.ZodBoolean;
+}, z.core.$strict>;
+export type ExternalAuthRunResponse = z.infer<typeof ExternalAuthRunResponse>;
+/** Human-only request for opening the provider's ephemeral hosted login UI. */
+export declare const ExternalAuthInteractiveRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>;
+export type ExternalAuthInteractiveRequest = z.infer<typeof ExternalAuthInteractiveRequest>;
+export declare const ExternalAuthInteractiveResponse: z.ZodObject<{
+    authRunId: z.ZodString;
+    url: z.ZodString;
+    expiresAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type ExternalAuthInteractiveResponse = z.infer<typeof ExternalAuthInteractiveResponse>;
+/** Controller-private Kernel/host-adapter command. This crosses only the
+ * authenticated API -> browserd control channel; it is not a model tool. */
+export declare const BrowserExternalAuthCommand: z.ZodObject<{
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    operationId: z.ZodString;
+    authRunId: z.ZodString;
+    adapterId: z.ZodString;
+    connectionId: z.ZodString;
+    action: z.ZodEnum<{
+        interactive: "interactive";
+        poll: "poll";
+        start: "start";
+    }>;
+}, z.core.$strict>;
+export type BrowserExternalAuthCommand = z.infer<typeof BrowserExternalAuthCommand>;
+export declare const BrowserExternalAuthResult: z.ZodObject<{
+    state: z.ZodEnum<{
+        authenticated: "authenticated";
+        failed: "failed";
+        in_progress: "in_progress";
+        needs_human: "needs_human";
+    }>;
+    externalAction: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            device: "device";
+            human: "human";
+            other: "other";
+            passkey: "passkey";
+            push: "push";
+            security_key: "security_key";
+        }>;
+        label: z.ZodString;
+        expiresAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+    interactiveUrl: z.ZodNullable<z.ZodString>;
+    failureCode: z.ZodNullable<z.ZodString>;
+    profileLoaded: z.ZodBoolean;
+}, z.core.$strict>;
+export type BrowserExternalAuthResult = z.infer<typeof BrowserExternalAuthResult>;
 export declare const VerifyAuthRunRequest: z.ZodObject<{
     operationId: z.ZodString;
     expectedVersion: z.ZodNumber;
@@ -2470,36 +2769,284 @@ export declare const InteractionInterventionMutationResponse: z.ZodObject<{
     replayed: z.ZodBoolean;
 }, z.core.$strict>;
 export type InteractionInterventionMutationResponse = z.infer<typeof InteractionInterventionMutationResponse>;
-export declare const BrowserIdentityListResponse: z.ZodObject<{
-    revision: z.ZodNumber;
-    identities: z.ZodArray<z.ZodObject<{
+/** Canonical model/Codemode input for one typed browser/computer human wait. */
+export declare const INTERACTION_REQUEST_HUMAN_MODEL_TOOL_NAME = "interaction__interaction_request_human";
+export declare const RequestHumanInteractionToolInput: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    operation: z.ZodLiteral<"wait">;
+    interventionId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    operation: z.ZodLiteral<"request">;
+    resourceKind: z.ZodEnum<{
+        browser_session: "browser_session";
+        computer_session: "computer_session";
+    }>;
+    resourceId: z.ZodString;
+    targetId: z.ZodString;
+    expectedControllerGeneration: z.ZodString;
+    expectedTargetGeneration: z.ZodString;
+    expectedDocumentGeneration: z.ZodNullable<z.ZodString>;
+    kind: z.ZodEnum<{
+        confirmation: "confirmation";
+        external_action: "external_action";
+        manual_login: "manual_login";
+        mfa: "mfa";
+        other: "other";
+    }>;
+    reason: z.ZodString;
+    authRunId: z.ZodOptional<z.ZodString>;
+    expiresInSeconds: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>], "operation">;
+export type RequestHumanInteractionToolInput = z.infer<typeof RequestHumanInteractionToolInput>;
+export declare const RequestHumanInteractionToolOutput: z.ZodObject<{
+    intervention: z.ZodObject<{
         id: z.ZodString;
         accountId: z.ZodString;
         workspaceId: z.ZodString;
-        name: z.ZodString;
+        resourceKind: z.ZodEnum<{
+            browser_session: "browser_session";
+            computer_session: "computer_session";
+        }>;
+        resourceId: z.ZodString;
+        targetId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        targetGeneration: z.ZodString;
+        documentGeneration: z.ZodNullable<z.ZodString>;
+        kind: z.ZodEnum<{
+            confirmation: "confirmation";
+            external_action: "external_action";
+            manual_login: "manual_login";
+            mfa: "mfa";
+            other: "other";
+        }>;
+        reason: z.ZodString;
         status: z.ZodEnum<{
-            active: "active";
-            archived: "archived";
+            cancelled: "cancelled";
+            completed: "completed";
+            dismissed: "dismissed";
+            expired: "expired";
+            open: "open";
         }>;
-        defaultRevisionId: z.ZodNullable<z.ZodString>;
-        headGeneration: z.ZodNumber;
-        revisionCount: z.ZodNumber;
-        createdBySubjectId: z.ZodString;
+        authRunId: z.ZodNullable<z.ZodString>;
+        originatingSessionId: z.ZodString;
+        originatingTurnId: z.ZodNullable<z.ZodString>;
+        originatingAttemptId: z.ZodNullable<z.ZodString>;
+        originatingToolOperationId: z.ZodNullable<z.ZodString>;
+        responseActorSubjectId: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        operationId: z.ZodString;
+        expiresAt: z.ZodString;
         createdAt: z.ZodString;
         updatedAt: z.ZodString;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export type BrowserIdentityListResponse = z.infer<typeof BrowserIdentityListResponse>;
-export declare const BrowserRevisionListResponse: z.ZodObject<{
-    identity: z.ZodObject<{
-        id: z.ZodString;
-        accountId: z.ZodString;
+        settledAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    observation: z.ZodNullable<z.ZodLazy<z.ZodUnion<readonly [z.ZodObject<{
+        protocolVersion: z.ZodLiteral<1>;
+        observationId: z.ZodString;
+        browserSessionId: z.ZodString;
+        target: z.ZodObject<{
+            id: z.ZodString;
+            browserSessionId: z.ZodString;
+            controllerGeneration: z.ZodString;
+            targetGeneration: z.ZodString;
+            documentGeneration: z.ZodNullable<z.ZodString>;
+            kind: z.ZodEnum<{
+                background_page: "background_page";
+                page: "page";
+                popup: "popup";
+                worker: "worker";
+            }>;
+            title: z.ZodString;
+            url: z.ZodString;
+            selected: z.ZodBoolean;
+            attached: z.ZodBoolean;
+            createdAt: z.ZodString;
+        }, z.core.$strict>;
+        frameId: z.ZodNullable<z.ZodString>;
+        semantic: z.ZodNullable<z.ZodUnion<readonly [z.ZodObject<{
+            kind: z.ZodLiteral<"snapshot">;
+            roots: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+            nodeCount: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"diff">;
+            baseObservationId: z.ZodString;
+            removedRefs: z.ZodArray<z.ZodString>;
+            changed: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+        }, z.core.$strict>]>>;
+        screenshot: z.ZodNullable<z.ZodObject<{
+            available: z.ZodLiteral<true>;
+            artifactId: z.ZodString;
+            kind: z.ZodEnum<{
+                assistant_completion: "assistant_completion";
+                computer_screenshot: "computer_screenshot";
+                event_media: "event_media";
+                file: "file";
+                generated_image: "generated_image";
+                generated_video: "generated_video";
+                internal_update: "internal_update";
+                tool_result: "tool_result";
+            }>;
+            contentType: z.ZodString;
+            originalBytes: z.ZodNumber;
+            sha256: z.ZodString;
+            retainedAt: z.ZodString;
+            dimensions: z.ZodOptional<z.ZodObject<{
+                width: z.ZodNumber;
+                height: z.ZodNumber;
+            }, z.core.$strict>>;
+            retention: z.ZodUnion<readonly [z.ZodObject<{
+                policy: z.ZodLiteral<"workspace_file">;
+                expiresAt: z.ZodNull;
+            }, z.core.$strict>, z.ZodObject<{
+                policy: z.ZodLiteral<"session_screenshot">;
+                expiresAt: z.ZodString;
+            }, z.core.$strict>]>;
+            retrieval: z.ZodObject<{
+                method: z.ZodLiteral<"GET">;
+                path: z.ZodString;
+                acceptRanges: z.ZodLiteral<"bytes">;
+                maxRangeBytes: z.ZodNumber;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        focusedRef: z.ZodNullable<z.ZodString>;
+        changedRegions: z.ZodArray<z.ZodObject<{
+            x: z.ZodNumber;
+            y: z.ZodNumber;
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strict>>;
+        diagnostics: z.ZodObject<{
+            consoleErrorCount: z.ZodNumber;
+            failedRequestCount: z.ZodNumber;
+            downloadCount: z.ZodNumber;
+            pageErrorCount: z.ZodNumber;
+        }, z.core.$strict>;
+        dialog: z.ZodNullable<z.ZodObject<{
+            type: z.ZodEnum<{
+                alert: "alert";
+                beforeunload: "beforeunload";
+                confirm: "confirm";
+                prompt: "prompt";
+            }>;
+            message: z.ZodString;
+            defaultPrompt: z.ZodString;
+            openedAt: z.ZodString;
+        }, z.core.$strict>>;
+        observedAt: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        protocolVersion: z.ZodLiteral<1>;
+        observationId: z.ZodString;
+        computerSessionId: z.ZodString;
+        target: z.ZodObject<{
+            id: z.ZodString;
+            computerSessionId: z.ZodString;
+            controllerGeneration: z.ZodString;
+            targetGeneration: z.ZodString;
+            kind: z.ZodEnum<{
+                app: "app";
+                screen: "screen";
+                window: "window";
+            }>;
+            applicationId: z.ZodNullable<z.ZodString>;
+            processId: z.ZodNullable<z.ZodNumber>;
+            title: z.ZodString;
+            bounds: z.ZodNullable<z.ZodObject<{
+                x: z.ZodNumber;
+                y: z.ZodNumber;
+                width: z.ZodNumber;
+                height: z.ZodNumber;
+            }, z.core.$strict>>;
+            focused: z.ZodBoolean;
+        }, z.core.$strict>;
+        frameId: z.ZodNullable<z.ZodString>;
+        semantic: z.ZodNullable<z.ZodUnion<readonly [z.ZodObject<{
+            kind: z.ZodLiteral<"snapshot">;
+            roots: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+            nodeCount: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"diff">;
+            baseObservationId: z.ZodString;
+            removedRefs: z.ZodArray<z.ZodString>;
+            changed: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+        }, z.core.$strict>]>>;
+        screenshot: z.ZodNullable<z.ZodObject<{
+            available: z.ZodLiteral<true>;
+            artifactId: z.ZodString;
+            kind: z.ZodEnum<{
+                assistant_completion: "assistant_completion";
+                computer_screenshot: "computer_screenshot";
+                event_media: "event_media";
+                file: "file";
+                generated_image: "generated_image";
+                generated_video: "generated_video";
+                internal_update: "internal_update";
+                tool_result: "tool_result";
+            }>;
+            contentType: z.ZodString;
+            originalBytes: z.ZodNumber;
+            sha256: z.ZodString;
+            retainedAt: z.ZodString;
+            dimensions: z.ZodOptional<z.ZodObject<{
+                width: z.ZodNumber;
+                height: z.ZodNumber;
+            }, z.core.$strict>>;
+            retention: z.ZodUnion<readonly [z.ZodObject<{
+                policy: z.ZodLiteral<"workspace_file">;
+                expiresAt: z.ZodNull;
+            }, z.core.$strict>, z.ZodObject<{
+                policy: z.ZodLiteral<"session_screenshot">;
+                expiresAt: z.ZodString;
+            }, z.core.$strict>]>;
+            retrieval: z.ZodObject<{
+                method: z.ZodLiteral<"GET">;
+                path: z.ZodString;
+                acceptRanges: z.ZodLiteral<"bytes">;
+                maxRangeBytes: z.ZodNumber;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        focusedRef: z.ZodNullable<z.ZodString>;
+        changedRegions: z.ZodArray<z.ZodObject<{
+            x: z.ZodNumber;
+            y: z.ZodNumber;
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strict>>;
+        observedAt: z.ZodString;
+    }, z.core.$strict>]>>>;
+    observationErrorCode: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type RequestHumanInteractionToolOutput = z.infer<typeof RequestHumanInteractionToolOutput>;
+export declare const BrowserIdentityListResponse: z.ZodObject<{
+    revision: z.ZodNumber;
+    identities: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        accountId: z.ZodString;
         workspaceId: z.ZodString;
         name: z.ZodString;
         status: z.ZodEnum<{
             active: "active";
             archived: "archived";
         }>;
+        version: z.ZodNumber;
+        defaultRevisionId: z.ZodNullable<z.ZodString>;
+        headGeneration: z.ZodNumber;
+        revisionCount: z.ZodNumber;
+        createdBySubjectId: z.ZodString;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type BrowserIdentityListResponse = z.infer<typeof BrowserIdentityListResponse>;
+export declare const BrowserRevisionListResponse: z.ZodObject<{
+    identity: z.ZodObject<{
+        id: z.ZodString;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        name: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            archived: "archived";
+        }>;
+        version: z.ZodNumber;
         defaultRevisionId: z.ZodNullable<z.ZodString>;
         headGeneration: z.ZodNumber;
         revisionCount: z.ZodNumber;
@@ -2585,6 +3132,17 @@ export declare const CreateBrowserIdentityRequest: z.ZodObject<{
     name: z.ZodString;
 }, z.core.$strict>;
 export type CreateBrowserIdentityRequest = z.infer<typeof CreateBrowserIdentityRequest>;
+export declare const UpdateBrowserIdentityRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    expectedVersion: z.ZodNumber;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+    }>>;
+    defaultRevisionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type UpdateBrowserIdentityRequest = z.infer<typeof UpdateBrowserIdentityRequest>;
 export declare const BrowserIdentityMutationResponse: z.ZodObject<{
     identity: z.ZodObject<{
         id: z.ZodString;
@@ -2595,6 +3153,7 @@ export declare const BrowserIdentityMutationResponse: z.ZodObject<{
             active: "active";
             archived: "archived";
         }>;
+        version: z.ZodNumber;
         defaultRevisionId: z.ZodNullable<z.ZodString>;
         headGeneration: z.ZodNumber;
         revisionCount: z.ZodNumber;
@@ -2625,6 +3184,7 @@ export declare const PublishBrowserRevisionResponse: z.ZodObject<{
             active: "active";
             archived: "archived";
         }>;
+        version: z.ZodNumber;
         defaultRevisionId: z.ZodNullable<z.ZodString>;
         headGeneration: z.ZodNumber;
         revisionCount: z.ZodNumber;
@@ -2729,6 +3289,120 @@ export declare const BrowserTarget: z.ZodObject<{
     createdAt: z.ZodString;
 }, z.core.$strict>;
 export type BrowserTarget = z.infer<typeof BrowserTarget>;
+export declare const BrowserDownloadStatus: z.ZodEnum<{
+    cancelled: "cancelled";
+    completed: "completed";
+    failed: "failed";
+    in_progress: "in_progress";
+    unavailable: "unavailable";
+}>;
+export type BrowserDownloadStatus = z.infer<typeof BrowserDownloadStatus>;
+/** One browser-produced file. Its bytes remain private to the exact controller
+ * until an explicit save publishes and materializes them. No placement path or
+ * source URL crosses this contract. */
+export declare const BrowserDownload: z.ZodObject<{
+    id: z.ZodString;
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodNullable<z.ZodString>;
+    filename: z.ZodString;
+    status: z.ZodEnum<{
+        cancelled: "cancelled";
+        completed: "completed";
+        failed: "failed";
+        in_progress: "in_progress";
+        unavailable: "unavailable";
+    }>;
+    receivedBytes: z.ZodNumber;
+    totalBytes: z.ZodNullable<z.ZodNumber>;
+    sha256: z.ZodNullable<z.ZodString>;
+    version: z.ZodNumber;
+    startedAt: z.ZodString;
+    settledAt: z.ZodNullable<z.ZodString>;
+    failureCode: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type BrowserDownload = z.infer<typeof BrowserDownload>;
+export declare const BrowserDownloadListResponse: z.ZodObject<{
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    downloads: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        browserSessionId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        targetId: z.ZodNullable<z.ZodString>;
+        filename: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            completed: "completed";
+            failed: "failed";
+            in_progress: "in_progress";
+            unavailable: "unavailable";
+        }>;
+        receivedBytes: z.ZodNumber;
+        totalBytes: z.ZodNullable<z.ZodNumber>;
+        sha256: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        startedAt: z.ZodString;
+        settledAt: z.ZodNullable<z.ZodString>;
+        failureCode: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type BrowserDownloadListResponse = z.infer<typeof BrowserDownloadListResponse>;
+export declare const BrowserDownloadSaveRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    destinationPath: z.ZodString;
+    overwrite: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export type BrowserDownloadSaveRequest = z.infer<typeof BrowserDownloadSaveRequest>;
+export declare const BrowserDownloadSaveResponse: z.ZodObject<{
+    download: z.ZodObject<{
+        id: z.ZodString;
+        browserSessionId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        targetId: z.ZodNullable<z.ZodString>;
+        filename: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            completed: "completed";
+            failed: "failed";
+            in_progress: "in_progress";
+            unavailable: "unavailable";
+        }>;
+        receivedBytes: z.ZodNumber;
+        totalBytes: z.ZodNullable<z.ZodNumber>;
+        sha256: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        startedAt: z.ZodString;
+        settledAt: z.ZodNullable<z.ZodString>;
+        failureCode: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    destinationPath: z.ZodString;
+    fileId: z.ZodString;
+    operationId: z.ZodString;
+    replayed: z.ZodBoolean;
+}, z.core.$strict>;
+export type BrowserDownloadSaveResponse = z.infer<typeof BrowserDownloadSaveResponse>;
+/** Controller-private, narrow object authority for publishing one exact
+ * completed download. Signed URLs and headers never appear in public SDK or
+ * durable controller receipts. */
+export declare const BrowserDownloadExportRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    downloadId: z.ZodString;
+    upload: z.ZodObject<{
+        url: z.ZodString;
+        requiredHeaders: z.ZodRecord<z.ZodString, z.ZodString>;
+        expiresAt: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type BrowserDownloadExportRequest = z.infer<typeof BrowserDownloadExportRequest>;
+export declare const BrowserDownloadExportReceipt: z.ZodObject<{
+    operationId: z.ZodString;
+    downloadId: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    sha256: z.ZodString;
+    replayed: z.ZodBoolean;
+}, z.core.$strict>;
+export type BrowserDownloadExportReceipt = z.infer<typeof BrowserDownloadExportReceipt>;
 export declare const InteractionRect: z.ZodObject<{
     x: z.ZodNumber;
     y: z.ZodNumber;
@@ -2995,6 +3669,28 @@ export declare const ComputerLocator: z.ZodDiscriminatedUnion<[z.ZodObject<{
     value: z.ZodString;
 }, z.core.$strict>], "kind">;
 export type ComputerLocator = z.infer<typeof ComputerLocator>;
+/** Web-platform permissions which a managed browser can set for the exact
+ * top-level origin currently fenced by a BrowserActionCommand. Names remain
+ * provider-neutral; drivers map them to their native permission descriptors. */
+export declare const BrowserPermission: z.ZodEnum<{
+    camera: "camera";
+    geolocation: "geolocation";
+    idle_detection: "idle_detection";
+    local_fonts: "local_fonts";
+    microphone: "microphone";
+    midi: "midi";
+    midi_sysex: "midi_sysex";
+    notifications: "notifications";
+    sensors: "sensors";
+    window_management: "window_management";
+}>;
+export type BrowserPermission = z.infer<typeof BrowserPermission>;
+export declare const BrowserPermissionSetting: z.ZodEnum<{
+    denied: "denied";
+    granted: "granted";
+    prompt: "prompt";
+}>;
+export type BrowserPermissionSetting = z.infer<typeof BrowserPermissionSetting>;
 export declare const BrowserAction: z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
     type: z.ZodLiteral<"navigate">;
     url: z.ZodString;
@@ -3314,6 +4010,7 @@ export declare const BrowserAction: z.ZodDiscriminatedUnion<readonly [z.ZodObjec
         middle: "middle";
         right: "right";
     }>>;
+    clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"handle_dialog">;
     response: z.ZodEnum<{
@@ -3348,6 +4045,63 @@ export declare const BrowserAction: z.ZodDiscriminatedUnion<readonly [z.ZodObjec
         selector: z.ZodString;
     }, z.core.$strict>], "kind">;
     workspaceFileIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"clipboard">;
+    operation: z.ZodEnum<{
+        clear: "clear";
+        copy: "copy";
+        paste: "paste";
+        write: "write";
+    }>;
+    text: z.ZodOptional<z.ZodString>;
+    locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ref">;
+        ref: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"role">;
+        role: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        exact: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"label">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"text">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"placeholder">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"test_id">;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"css">;
+        selector: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    content: z.ZodOptional<z.ZodEnum<{
+        selection: "selection";
+        text: "text";
+        value: "value";
+    }>>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"permission">;
+    permission: z.ZodEnum<{
+        camera: "camera";
+        geolocation: "geolocation";
+        idle_detection: "idle_detection";
+        local_fonts: "local_fonts";
+        microphone: "microphone";
+        midi: "midi";
+        midi_sysex: "midi_sysex";
+        notifications: "notifications";
+        sensors: "sensors";
+        window_management: "window_management";
+    }>;
+    setting: z.ZodEnum<{
+        denied: "denied";
+        granted: "granted";
+        prompt: "prompt";
+    }>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"wait">;
     condition: z.ZodEnum<{
@@ -3704,6 +4458,7 @@ export declare const BrowserActionBatch: z.ZodObject<{
             middle: "middle";
             right: "right";
         }>>;
+        clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"handle_dialog">;
         response: z.ZodEnum<{
@@ -3738,6 +4493,63 @@ export declare const BrowserActionBatch: z.ZodObject<{
             selector: z.ZodString;
         }, z.core.$strict>], "kind">;
         workspaceFileIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"clipboard">;
+        operation: z.ZodEnum<{
+            clear: "clear";
+            copy: "copy";
+            paste: "paste";
+            write: "write";
+        }>;
+        text: z.ZodOptional<z.ZodString>;
+        locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ref">;
+            ref: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"role">;
+            role: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"label">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"text">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"placeholder">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"test_id">;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"css">;
+            selector: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        content: z.ZodOptional<z.ZodEnum<{
+            selection: "selection";
+            text: "text";
+            value: "value";
+        }>>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"permission">;
+        permission: z.ZodEnum<{
+            camera: "camera";
+            geolocation: "geolocation";
+            idle_detection: "idle_detection";
+            local_fonts: "local_fonts";
+            microphone: "microphone";
+            midi: "midi";
+            midi_sysex: "midi_sysex";
+            notifications: "notifications";
+            sensors: "sensors";
+            window_management: "window_management";
+        }>;
+        setting: z.ZodEnum<{
+            denied: "denied";
+            granted: "granted";
+            prompt: "prompt";
+        }>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"wait">;
         condition: z.ZodEnum<{
@@ -3823,6 +4635,10 @@ export declare const BrowserActionCommand: z.ZodObject<{
         attemptId: z.ZodOptional<z.ZodString>;
         executionGeneration: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>;
+    observationMode: z.ZodOptional<z.ZodEnum<{
+        full: "full";
+        none: "none";
+    }>>;
     action: z.ZodUnion<readonly [z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"navigate">;
         url: z.ZodString;
@@ -4142,6 +4958,7 @@ export declare const BrowserActionCommand: z.ZodObject<{
             middle: "middle";
             right: "right";
         }>>;
+        clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"handle_dialog">;
         response: z.ZodEnum<{
@@ -4176,6 +4993,63 @@ export declare const BrowserActionCommand: z.ZodObject<{
             selector: z.ZodString;
         }, z.core.$strict>], "kind">;
         workspaceFileIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"clipboard">;
+        operation: z.ZodEnum<{
+            clear: "clear";
+            copy: "copy";
+            paste: "paste";
+            write: "write";
+        }>;
+        text: z.ZodOptional<z.ZodString>;
+        locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ref">;
+            ref: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"role">;
+            role: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"label">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"text">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"placeholder">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"test_id">;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"css">;
+            selector: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        content: z.ZodOptional<z.ZodEnum<{
+            selection: "selection";
+            text: "text";
+            value: "value";
+        }>>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"permission">;
+        permission: z.ZodEnum<{
+            camera: "camera";
+            geolocation: "geolocation";
+            idle_detection: "idle_detection";
+            local_fonts: "local_fonts";
+            microphone: "microphone";
+            midi: "midi";
+            midi_sysex: "midi_sysex";
+            notifications: "notifications";
+            sensors: "sensors";
+            window_management: "window_management";
+        }>;
+        setting: z.ZodEnum<{
+            denied: "denied";
+            granted: "granted";
+            prompt: "prompt";
+        }>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"wait">;
         condition: z.ZodEnum<{
@@ -4530,6 +5404,7 @@ export declare const BrowserActionCommand: z.ZodObject<{
                 middle: "middle";
                 right: "right";
             }>>;
+            clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"handle_dialog">;
             response: z.ZodEnum<{
@@ -4564,6 +5439,63 @@ export declare const BrowserActionCommand: z.ZodObject<{
                 selector: z.ZodString;
             }, z.core.$strict>], "kind">;
             workspaceFileIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"clipboard">;
+            operation: z.ZodEnum<{
+                clear: "clear";
+                copy: "copy";
+                paste: "paste";
+                write: "write";
+            }>;
+            text: z.ZodOptional<z.ZodString>;
+            locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"ref">;
+                ref: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"role">;
+                role: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                exact: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"label">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"text">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"placeholder">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"test_id">;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"css">;
+                selector: z.ZodString;
+            }, z.core.$strict>], "kind">>;
+            content: z.ZodOptional<z.ZodEnum<{
+                selection: "selection";
+                text: "text";
+                value: "value";
+            }>>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"permission">;
+            permission: z.ZodEnum<{
+                camera: "camera";
+                geolocation: "geolocation";
+                idle_detection: "idle_detection";
+                local_fonts: "local_fonts";
+                microphone: "microphone";
+                midi: "midi";
+                midi_sysex: "midi_sysex";
+                notifications: "notifications";
+                sensors: "sensors";
+                window_management: "window_management";
+            }>;
+            setting: z.ZodEnum<{
+                denied: "denied";
+                granted: "granted";
+                prompt: "prompt";
+            }>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"wait">;
             condition: z.ZodEnum<{
@@ -4601,6 +5533,40 @@ export declare const BrowserActionCommand: z.ZodObject<{
     }, z.core.$strict>]>;
 }, z.core.$strict>;
 export type BrowserActionCommand = z.infer<typeof BrowserActionCommand>;
+/** Controller-private authority used to materialize immutable workspace files
+ * beside a BrowserSession before an upload action dispatches. Signed URLs and
+ * placement paths never appear in the public BrowserAction or its receipt. */
+export declare const BrowserWorkspaceFileAuthority: z.ZodObject<{
+    fileId: z.ZodString;
+    safeFilename: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    sha256: z.ZodNullable<z.ZodString>;
+    download: z.ZodObject<{
+        url: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type BrowserWorkspaceFileAuthority = z.infer<typeof BrowserWorkspaceFileAuthority>;
+export declare const BrowserWorkspaceFileStageRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    files: z.ZodArray<z.ZodObject<{
+        fileId: z.ZodString;
+        safeFilename: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        sha256: z.ZodNullable<z.ZodString>;
+        download: z.ZodObject<{
+            url: z.ZodString;
+            expiresAt: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type BrowserWorkspaceFileStageRequest = z.infer<typeof BrowserWorkspaceFileStageRequest>;
+export declare const BrowserWorkspaceFileStageResponse: z.ZodObject<{
+    operationId: z.ZodString;
+    fileIds: z.ZodArray<z.ZodString>;
+    replayed: z.ZodBoolean;
+}, z.core.$strict>;
+export type BrowserWorkspaceFileStageResponse = z.infer<typeof BrowserWorkspaceFileStageResponse>;
 export declare const InteractionOperationState: z.ZodEnum<{
     completed: "completed";
     dispatched: "dispatched";
@@ -4677,6 +5643,10 @@ export declare const CreateBrowserSessionRequest: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     initialUrl: z.ZodOptional<z.ZodString>;
     headless: z.ZodDefault<z.ZodBoolean>;
+    engine: z.ZodDefault<z.ZodEnum<{
+        chromium: "chromium";
+        lightpanda: "lightpanda";
+    }>>;
     placement: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"sandbox_group">;
         sandboxGroupId: z.ZodString;
@@ -4759,6 +5729,7 @@ export declare const BrowserSessionListResponse: z.ZodObject<{
             downloads: z.ZodBoolean;
             uploads: z.ZodBoolean;
             clipboard: z.ZodBoolean;
+            permissions: z.ZodBoolean;
             diagnostics: z.ZodBoolean;
             rawCdp: z.ZodBoolean;
             linkedComputer: z.ZodBoolean;
@@ -4847,6 +5818,7 @@ export declare const BrowserSessionMutationResponse: z.ZodObject<{
             downloads: z.ZodBoolean;
             uploads: z.ZodBoolean;
             clipboard: z.ZodBoolean;
+            permissions: z.ZodBoolean;
             diagnostics: z.ZodBoolean;
             rawCdp: z.ZodBoolean;
             linkedComputer: z.ZodBoolean;
@@ -5001,6 +5973,10 @@ export declare const ComputerFrameStreamAttachment: z.ZodDiscriminatedUnion<[z.Z
     kind: z.ZodLiteral<"direct_websocket">;
     url: z.ZodString;
     protocols: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"direct_rfb">;
+    url: z.ZodString;
+    protocols: z.ZodArray<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"relay">;
     url: z.ZodString;
@@ -5033,6 +6009,10 @@ export declare const InteractionFrameStreamAttachment: z.ZodUnion<readonly [z.Zo
     kind: z.ZodLiteral<"direct_websocket">;
     url: z.ZodString;
     protocols: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"direct_rfb">;
+    url: z.ZodString;
+    protocols: z.ZodArray<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"relay">;
     url: z.ZodString;
@@ -5093,6 +6073,10 @@ export declare const BrowserActionRequest: z.ZodObject<{
     expectedTargetGeneration: z.ZodString;
     expectedDocumentGeneration: z.ZodNullable<z.ZodString>;
     expectedFrameId: z.ZodNullable<z.ZodString>;
+    observationMode: z.ZodDefault<z.ZodEnum<{
+        full: "full";
+        none: "none";
+    }>>;
     action: z.ZodUnion<readonly [z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"navigate">;
         url: z.ZodString;
@@ -5412,6 +6396,7 @@ export declare const BrowserActionRequest: z.ZodObject<{
             middle: "middle";
             right: "right";
         }>>;
+        clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"handle_dialog">;
         response: z.ZodEnum<{
@@ -5446,6 +6431,63 @@ export declare const BrowserActionRequest: z.ZodObject<{
             selector: z.ZodString;
         }, z.core.$strict>], "kind">;
         workspaceFileIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"clipboard">;
+        operation: z.ZodEnum<{
+            clear: "clear";
+            copy: "copy";
+            paste: "paste";
+            write: "write";
+        }>;
+        text: z.ZodOptional<z.ZodString>;
+        locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ref">;
+            ref: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"role">;
+            role: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"label">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"text">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"placeholder">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"test_id">;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"css">;
+            selector: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        content: z.ZodOptional<z.ZodEnum<{
+            selection: "selection";
+            text: "text";
+            value: "value";
+        }>>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"permission">;
+        permission: z.ZodEnum<{
+            camera: "camera";
+            geolocation: "geolocation";
+            idle_detection: "idle_detection";
+            local_fonts: "local_fonts";
+            microphone: "microphone";
+            midi: "midi";
+            midi_sysex: "midi_sysex";
+            notifications: "notifications";
+            sensors: "sensors";
+            window_management: "window_management";
+        }>;
+        setting: z.ZodEnum<{
+            denied: "denied";
+            granted: "granted";
+            prompt: "prompt";
+        }>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"wait">;
         condition: z.ZodEnum<{
@@ -5800,6 +6842,7 @@ export declare const BrowserActionRequest: z.ZodObject<{
                 middle: "middle";
                 right: "right";
             }>>;
+            clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"handle_dialog">;
             response: z.ZodEnum<{
@@ -5832,8 +6875,65 @@ export declare const BrowserActionRequest: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"css">;
                 selector: z.ZodString;
-            }, z.core.$strict>], "kind">;
-            workspaceFileIds: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>], "kind">;
+            workspaceFileIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"clipboard">;
+            operation: z.ZodEnum<{
+                clear: "clear";
+                copy: "copy";
+                paste: "paste";
+                write: "write";
+            }>;
+            text: z.ZodOptional<z.ZodString>;
+            locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"ref">;
+                ref: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"role">;
+                role: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                exact: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"label">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"text">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"placeholder">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"test_id">;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"css">;
+                selector: z.ZodString;
+            }, z.core.$strict>], "kind">>;
+            content: z.ZodOptional<z.ZodEnum<{
+                selection: "selection";
+                text: "text";
+                value: "value";
+            }>>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"permission">;
+            permission: z.ZodEnum<{
+                camera: "camera";
+                geolocation: "geolocation";
+                idle_detection: "idle_detection";
+                local_fonts: "local_fonts";
+                microphone: "microphone";
+                midi: "midi";
+                midi_sysex: "midi_sysex";
+                notifications: "notifications";
+                sensors: "sensors";
+                window_management: "window_management";
+            }>;
+            setting: z.ZodEnum<{
+                denied: "denied";
+                granted: "granted";
+                prompt: "prompt";
+            }>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"wait">;
             condition: z.ZodEnum<{
@@ -6015,6 +7115,255 @@ export declare const BrowserActionReceipt: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type BrowserActionReceipt = z.infer<typeof BrowserActionReceipt>;
+/** Controller-private protected-fill wire contract. Secret values cross only
+ * the credential broker -> exact placement controller boundary; this command
+ * is never projected into model MCP, Codemode, public action history, or UI. */
+export declare const BrowserProtectedAuthFieldValue: z.ZodObject<{
+    fieldId: z.ZodString;
+    locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ref">;
+        ref: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"role">;
+        role: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        exact: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"label">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"text">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"placeholder">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"test_id">;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"css">;
+        selector: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    purpose: z.ZodEnum<{
+        identifier: "identifier";
+        password: "password";
+        secret: "secret";
+        totp: "totp";
+    }>;
+    value: z.ZodString;
+}, z.core.$strict>;
+export type BrowserProtectedAuthFieldValue = z.infer<typeof BrowserProtectedAuthFieldValue>;
+export declare const BrowserProtectedAuthFillCommand: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodString;
+    expectedTargetGeneration: z.ZodString;
+    expectedDocumentGeneration: z.ZodString;
+    expectedFrameId: z.ZodString;
+    actor: z.ZodObject<{
+        kind: z.ZodEnum<{
+            agent: "agent";
+            human: "human";
+            system: "system";
+        }>;
+        subjectId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+        turnId: z.ZodOptional<z.ZodString>;
+        attemptId: z.ZodOptional<z.ZodString>;
+        executionGeneration: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    authorityId: z.ZodString;
+    credentialVersion: z.ZodNumber;
+    allowedOrigins: z.ZodArray<z.ZodString>;
+    fields: z.ZodArray<z.ZodObject<{
+        fieldId: z.ZodString;
+        locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ref">;
+            ref: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"role">;
+            role: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"label">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"text">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"placeholder">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"test_id">;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"css">;
+            selector: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        purpose: z.ZodEnum<{
+            identifier: "identifier";
+            password: "password";
+            secret: "secret";
+            totp: "totp";
+        }>;
+        value: z.ZodString;
+    }, z.core.$strict>>;
+    submit: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"none">;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"click">;
+        locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ref">;
+            ref: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"role">;
+            role: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"label">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"text">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"placeholder">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"test_id">;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"css">;
+            selector: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"press">;
+        key: z.ZodString;
+        locator: z.ZodOptional<z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ref">;
+            ref: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"role">;
+            role: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"label">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"text">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"placeholder">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"test_id">;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"css">;
+            selector: z.ZodString;
+        }, z.core.$strict>], "kind">>>;
+    }, z.core.$strict>], "type">;
+}, z.core.$strict>;
+export type BrowserProtectedAuthFillCommand = z.infer<typeof BrowserProtectedAuthFillCommand>;
+export declare const BrowserProtectedAuthObservation: z.ZodObject<{
+    target: z.ZodObject<{
+        id: z.ZodString;
+        browserSessionId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        targetGeneration: z.ZodString;
+        documentGeneration: z.ZodNullable<z.ZodString>;
+        kind: z.ZodEnum<{
+            background_page: "background_page";
+            page: "page";
+            popup: "popup";
+            worker: "worker";
+        }>;
+        title: z.ZodString;
+        url: z.ZodString;
+        selected: z.ZodBoolean;
+        attached: z.ZodBoolean;
+        createdAt: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodEnum<{
+        submitted: "submitted";
+        working: "working";
+    }>;
+}, z.core.$strict>;
+export type BrowserProtectedAuthObservation = z.infer<typeof BrowserProtectedAuthObservation>;
+/** Secret-free placement receipt. It can be journaled, replayed, and returned
+ * to the broker without retaining any field value or model-visible page tree. */
+export declare const BrowserProtectedAuthFillReceipt: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodString;
+    state: z.ZodEnum<{
+        completed: "completed";
+        dispatched: "dispatched";
+        failed: "failed";
+        outcome_unknown: "outcome_unknown";
+        prepared: "prepared";
+    }>;
+    dispatchedAt: z.ZodNullable<z.ZodString>;
+    settledAt: z.ZodNullable<z.ZodString>;
+    observation: z.ZodNullable<z.ZodObject<{
+        target: z.ZodObject<{
+            id: z.ZodString;
+            browserSessionId: z.ZodString;
+            controllerGeneration: z.ZodString;
+            targetGeneration: z.ZodString;
+            documentGeneration: z.ZodNullable<z.ZodString>;
+            kind: z.ZodEnum<{
+                background_page: "background_page";
+                page: "page";
+                popup: "popup";
+                worker: "worker";
+            }>;
+            title: z.ZodString;
+            url: z.ZodString;
+            selected: z.ZodBoolean;
+            attached: z.ZodBoolean;
+            createdAt: z.ZodString;
+        }, z.core.$strict>;
+        status: z.ZodEnum<{
+            submitted: "submitted";
+            working: "working";
+        }>;
+    }, z.core.$strict>>;
+    error: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            attempt_stale: "attempt_stale";
+            controller_lost: "controller_lost";
+            controller_stale: "controller_stale";
+            document_stale: "document_stale";
+            driver_failed: "driver_failed";
+            frame_stale: "frame_stale";
+            invalid_action: "invalid_action";
+            locator_ambiguous: "locator_ambiguous";
+            locator_not_found: "locator_not_found";
+            machine_locked: "machine_locked";
+            observation_stale: "observation_stale";
+            operation_conflict: "operation_conflict";
+            outcome_unknown: "outcome_unknown";
+            permission_denied: "permission_denied";
+            resource_not_found: "resource_not_found";
+            resource_unavailable: "resource_unavailable";
+            target_not_found: "target_not_found";
+            target_stale: "target_stale";
+            timeout: "timeout";
+            unsupported: "unsupported";
+        }>;
+        message: z.ZodString;
+        retryable: z.ZodBoolean;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type BrowserProtectedAuthFillReceipt = z.infer<typeof BrowserProtectedAuthFillReceipt>;
 export declare const ComputerSessionCapabilities: z.ZodObject<{
     semanticObservation: z.ZodBoolean;
     appDiscovery: z.ZodBoolean;
@@ -6024,10 +7373,22 @@ export declare const ComputerSessionCapabilities: z.ZodObject<{
     semanticActions: z.ZodBoolean;
     pointerInput: z.ZodBoolean;
     keyboardInput: z.ZodBoolean;
+    clipboard: z.ZodBoolean;
     backgroundActions: z.ZodBoolean;
     parallelApps: z.ZodBoolean;
 }, z.core.$strict>;
 export type ComputerSessionCapabilities = z.infer<typeof ComputerSessionCapabilities>;
+/** A fresh bounded read of the native clipboard for the ComputerSession's
+ * graphical seat. Physical ComputerSessions on the same login seat intentionally
+ * observe the same OS clipboard; BrowserSession private clipboards never do. */
+export declare const ComputerClipboard: z.ZodObject<{
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    text: z.ZodNullable<z.ZodString>;
+    truncated: z.ZodBoolean;
+    observedAt: z.ZodString;
+}, z.core.$strict>;
+export type ComputerClipboard = z.infer<typeof ComputerClipboard>;
 export declare const ComputerSession: z.ZodObject<{
     id: z.ZodString;
     accountId: z.ZodString;
@@ -6081,6 +7442,7 @@ export declare const ComputerSession: z.ZodObject<{
         semanticActions: z.ZodBoolean;
         pointerInput: z.ZodBoolean;
         keyboardInput: z.ZodBoolean;
+        clipboard: z.ZodBoolean;
         backgroundActions: z.ZodBoolean;
         parallelApps: z.ZodBoolean;
     }, z.core.$strict>>;
@@ -6270,6 +7632,15 @@ export declare const ComputerAction: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: "type";
     }>;
     value: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"clipboard">;
+    operation: z.ZodEnum<{
+        clear: "clear";
+        copy: "copy";
+        paste: "paste";
+        write: "write";
+    }>;
+    text: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"focus">;
     targetId: z.ZodString;
@@ -6363,6 +7734,15 @@ export declare const ComputerActionCommand: z.ZodObject<{
             type: "type";
         }>;
         value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"clipboard">;
+        operation: z.ZodEnum<{
+            clear: "clear";
+            copy: "copy";
+            paste: "paste";
+            write: "write";
+        }>;
+        text: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"focus">;
         targetId: z.ZodString;
@@ -6574,6 +7954,7 @@ export declare const ComputerSessionListResponse: z.ZodObject<{
             semanticActions: z.ZodBoolean;
             pointerInput: z.ZodBoolean;
             keyboardInput: z.ZodBoolean;
+            clipboard: z.ZodBoolean;
             backgroundActions: z.ZodBoolean;
             parallelApps: z.ZodBoolean;
         }, z.core.$strict>>;
@@ -6651,6 +8032,7 @@ export declare const ComputerSessionMutationResponse: z.ZodObject<{
             semanticActions: z.ZodBoolean;
             pointerInput: z.ZodBoolean;
             keyboardInput: z.ZodBoolean;
+            clipboard: z.ZodBoolean;
             backgroundActions: z.ZodBoolean;
             parallelApps: z.ZodBoolean;
         }, z.core.$strict>>;
@@ -6776,6 +8158,10 @@ export declare const ComputerSessionAttachment: z.ZodObject<{
         kind: z.ZodLiteral<"direct_websocket">;
         url: z.ZodString;
         protocols: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"direct_rfb">;
+        url: z.ZodString;
+        protocols: z.ZodArray<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"relay">;
         url: z.ZodString;
@@ -6878,6 +8264,15 @@ export declare const ComputerActionRequest: z.ZodObject<{
             type: "type";
         }>;
         value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"clipboard">;
+        operation: z.ZodEnum<{
+            clear: "clear";
+            copy: "copy";
+            paste: "paste";
+            write: "write";
+        }>;
+        text: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"focus">;
         targetId: z.ZodString;