@opengeni/contracts 3.1.0-canary.1 → 3.1.2

package/dist/interaction.d.ts

@@ -13,6 +13,9 @@ export declare const INTERACTION_MAX_SEMANTIC_NODES = 10000;
 export declare const INTERACTION_MAX_CHANGED_NODES = 2000;
 export declare const INTERACTION_MAX_DIAGNOSTIC_ENTRIES = 1000;
 export declare const INTERACTION_MAX_ACTIONS_PER_BATCH = 32;
+/** A batch action resolves at most two locators (drag: from and to). */
+export declare const INTERACTION_MAX_RESOLVED_ACTION_TARGETS: number;
+export declare const INTERACTION_MAX_RESOLVED_TARGET_TEXT = 200;
 export declare const INTERACTION_MAX_WORKSPACE_FILES_PER_COMMAND = 100;
 export declare const INTERACTION_MAX_CLIPBOARD_BYTES: number;
 /**
@@ -107,6 +110,13 @@ export declare const BrowserSessionCapabilities: z.ZodObject<{
     parallelTargets: z.ZodBoolean;
 }, z.core.$strict>;
 export type BrowserSessionCapabilities = z.infer<typeof BrowserSessionCapabilities>;
+/** Versioned persistent discriminator for experimental disposable contexts. */
+export { EPHEMERAL_CHROMIUM_DRIVER_ID, browserSessionStorageMode } from "./browser-storage.js";
+export declare const BrowserStorageMode: z.ZodEnum<{
+    ephemeral_context: "ephemeral_context";
+    private_profile: "private_profile";
+}>;
+export type BrowserStorageMode = z.infer<typeof BrowserStorageMode>;
 export declare const BrowserSession: z.ZodObject<{
     id: z.ZodString;
     accountId: z.ZodString;
@@ -260,6 +270,30 @@ export declare const AttachedBrowserDeviceAnnouncement: z.ZodObject<{
     }, z.core.$strict>;
 }, z.core.$strict>;
 export type AttachedBrowserDeviceAnnouncement = z.infer<typeof AttachedBrowserDeviceAnnouncement>;
+/** Why the machine's browser bridge saw one extension connection end. */
+export declare const AttachedBrowserConnectionEndReason: z.ZodEnum<{
+    agent_rejected: "agent_rejected";
+    browser_closed_port: "browser_closed_port";
+    browser_message_invalid: "browser_message_invalid";
+    browser_output_failed: "browser_output_failed";
+    native_host_lost: "native_host_lost";
+}>;
+export type AttachedBrowserConnectionEndReason = z.infer<typeof AttachedBrowserConnectionEndReason>;
+export declare const AttachedBrowserConnectionEnd: z.ZodObject<{
+    deviceId: z.ZodString;
+    connectionGeneration: z.ZodString;
+    reason: z.ZodEnum<{
+        agent_rejected: "agent_rejected";
+        browser_closed_port: "browser_closed_port";
+        browser_message_invalid: "browser_message_invalid";
+        browser_output_failed: "browser_output_failed";
+        native_host_lost: "native_host_lost";
+    }>;
+    detail: z.ZodNullable<z.ZodString>;
+    endedAt: z.ZodString;
+    connectedMs: z.ZodNumber;
+}, z.core.$strict>;
+export type AttachedBrowserConnectionEnd = z.infer<typeof AttachedBrowserConnectionEnd>;
 export declare const AttachedBrowserInventorySnapshot: z.ZodObject<{
     bridgeGeneration: z.ZodString;
     revision: z.ZodNumber;
@@ -294,6 +328,20 @@ export declare const AttachedBrowserInventorySnapshot: z.ZodObject<{
             linkedComputer: z.ZodBoolean;
         }, z.core.$strict>;
     }, z.core.$strict>>;
+    connectionEnds: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        deviceId: z.ZodString;
+        connectionGeneration: z.ZodString;
+        reason: z.ZodEnum<{
+            agent_rejected: "agent_rejected";
+            browser_closed_port: "browser_closed_port";
+            browser_message_invalid: "browser_message_invalid";
+            browser_output_failed: "browser_output_failed";
+            native_host_lost: "native_host_lost";
+        }>;
+        detail: z.ZodNullable<z.ZodString>;
+        endedAt: z.ZodString;
+        connectedMs: z.ZodNumber;
+    }, z.core.$strict>>>;
 }, z.core.$strict>;
 export type AttachedBrowserInventorySnapshot = z.infer<typeof AttachedBrowserInventorySnapshot>;
 export declare const AttachedBrowserDevice: z.ZodObject<{
@@ -341,7 +389,7 @@ export declare const AttachedBrowserDevice: z.ZodObject<{
 export type AttachedBrowserDevice = z.infer<typeof AttachedBrowserDevice>;
 /** One enrolled machine agent currently reporting its browser-bridge inventory.
  * A bridge with zero devices is operational but has no Chrome profile connected
- * through the OpenGeni extension yet. */
+ * through the Opengeni extension yet. */
 export declare const AttachedBrowserBridge: z.ZodObject<{
     enrollmentId: z.ZodString;
     state: z.ZodEnum<{
@@ -665,7 +713,7 @@ export declare const BrowserIdentity: z.ZodObject<{
     updatedAt: z.ZodString;
 }, z.core.$strict>;
 export type BrowserIdentity = z.infer<typeof BrowserIdentity>;
-/** A non-secret reference to credential authority held by OpenGeni Connections.
+/** A non-secret reference to credential authority held by Opengeni Connections.
  * The subject and provider bindings are copied when the browser-auth resource is
  * configured so a later agent cannot swap the UUID to another credential. */
 export declare const InteractionCredentialAuthorityRef: z.ZodObject<{
@@ -1202,53 +1250,7 @@ export declare const NetworkRouteMutationResponse: z.ZodObject<{
     replayed: z.ZodBoolean;
 }, z.core.$strict>;
 export type NetworkRouteMutationResponse = z.infer<typeof NetworkRouteMutationResponse>;
-export declare const SiteAuthFieldPurpose: z.ZodEnum<{
-    identifier: "identifier";
-    password: "password";
-    secret: "secret";
-    totp: "totp";
-}>;
-export type SiteAuthFieldPurpose = z.infer<typeof SiteAuthFieldPurpose>;
 export declare const SiteAuthAuthority: z.ZodDiscriminatedUnion<[z.ZodObject<{
-    id: z.ZodString;
-    kind: z.ZodLiteral<"connection_fields">;
-    label: z.ZodString;
-    credential: z.ZodObject<{
-        connectionId: z.ZodString;
-        connectionSubjectId: z.ZodNullable<z.ZodString>;
-        providerDomain: z.ZodString;
-    }, z.core.$strict>;
-    fields: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        purpose: z.ZodEnum<{
-            identifier: "identifier";
-            password: "password";
-            secret: "secret";
-            totp: "totp";
-        }>;
-        credentialKey: z.ZodString;
-        digits: z.ZodOptional<z.ZodNumber>;
-        periodSeconds: z.ZodOptional<z.ZodNumber>;
-        algorithm: z.ZodOptional<z.ZodEnum<{
-            sha1: "sha1";
-            sha256: "sha256";
-            sha512: "sha512";
-        }>>;
-    }, z.core.$strict>>;
-}, z.core.$strict>, z.ZodObject<{
-    id: z.ZodString;
-    kind: z.ZodLiteral<"human">;
-    label: z.ZodString;
-    fields: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        purpose: z.ZodEnum<{
-            identifier: "identifier";
-            password: "password";
-            secret: "secret";
-            totp: "totp";
-        }>;
-    }, z.core.$strict>>;
-}, z.core.$strict>, z.ZodObject<{
     id: z.ZodString;
     kind: z.ZodLiteral<"external_provider">;
     label: z.ZodString;
@@ -1310,45 +1312,6 @@ export declare const SiteAuthConnection: z.ZodObject<{
     loginUrl: z.ZodNullable<z.ZodString>;
     verificationUrlPrefixes: z.ZodArray<z.ZodString>;
     authorities: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodLiteral<"connection_fields">;
-        label: z.ZodString;
-        credential: z.ZodObject<{
-            connectionId: z.ZodString;
-            connectionSubjectId: z.ZodNullable<z.ZodString>;
-            providerDomain: z.ZodString;
-        }, z.core.$strict>;
-        fields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-            credentialKey: z.ZodString;
-            digits: z.ZodOptional<z.ZodNumber>;
-            periodSeconds: z.ZodOptional<z.ZodNumber>;
-            algorithm: z.ZodOptional<z.ZodEnum<{
-                sha1: "sha1";
-                sha256: "sha256";
-                sha512: "sha512";
-            }>>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>, z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodLiteral<"human">;
-        label: z.ZodString;
-        fields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>, z.ZodObject<{
         id: z.ZodString;
         kind: z.ZodLiteral<"external_provider">;
         label: z.ZodString;
@@ -1438,45 +1401,6 @@ export declare const SiteAuthConnectionListResponse: z.ZodObject<{
         loginUrl: z.ZodNullable<z.ZodString>;
         verificationUrlPrefixes: z.ZodArray<z.ZodString>;
         authorities: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            id: z.ZodString;
-            kind: z.ZodLiteral<"connection_fields">;
-            label: z.ZodString;
-            credential: z.ZodObject<{
-                connectionId: z.ZodString;
-                connectionSubjectId: z.ZodNullable<z.ZodString>;
-                providerDomain: z.ZodString;
-            }, z.core.$strict>;
-            fields: z.ZodArray<z.ZodObject<{
-                id: z.ZodString;
-                purpose: z.ZodEnum<{
-                    identifier: "identifier";
-                    password: "password";
-                    secret: "secret";
-                    totp: "totp";
-                }>;
-                credentialKey: z.ZodString;
-                digits: z.ZodOptional<z.ZodNumber>;
-                periodSeconds: z.ZodOptional<z.ZodNumber>;
-                algorithm: z.ZodOptional<z.ZodEnum<{
-                    sha1: "sha1";
-                    sha256: "sha256";
-                    sha512: "sha512";
-                }>>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>, z.ZodObject<{
-            id: z.ZodString;
-            kind: z.ZodLiteral<"human">;
-            label: z.ZodString;
-            fields: z.ZodArray<z.ZodObject<{
-                id: z.ZodString;
-                purpose: z.ZodEnum<{
-                    identifier: "identifier";
-                    password: "password";
-                    secret: "secret";
-                    totp: "totp";
-                }>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>, z.ZodObject<{
             id: z.ZodString;
             kind: z.ZodLiteral<"external_provider">;
             label: z.ZodString;
@@ -1565,45 +1489,6 @@ export declare const CreateSiteAuthConnectionRequest: z.ZodObject<{
     loginUrl: z.ZodNullable<z.ZodString>;
     verificationUrlPrefixes: z.ZodArray<z.ZodString>;
     authorities: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodLiteral<"connection_fields">;
-        label: z.ZodString;
-        credential: z.ZodObject<{
-            connectionId: z.ZodString;
-            connectionSubjectId: z.ZodNullable<z.ZodString>;
-            providerDomain: z.ZodString;
-        }, z.core.$strict>;
-        fields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-            credentialKey: z.ZodString;
-            digits: z.ZodOptional<z.ZodNumber>;
-            periodSeconds: z.ZodOptional<z.ZodNumber>;
-            algorithm: z.ZodOptional<z.ZodEnum<{
-                sha1: "sha1";
-                sha256: "sha256";
-                sha512: "sha512";
-            }>>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>, z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodLiteral<"human">;
-        label: z.ZodString;
-        fields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>, z.ZodObject<{
         id: z.ZodString;
         kind: z.ZodLiteral<"external_provider">;
         label: z.ZodString;
@@ -1661,45 +1546,6 @@ export declare const UpdateSiteAuthConnectionRequest: z.ZodObject<{
     loginUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     verificationUrlPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     authorities: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodLiteral<"connection_fields">;
-        label: z.ZodString;
-        credential: z.ZodObject<{
-            connectionId: z.ZodString;
-            connectionSubjectId: z.ZodNullable<z.ZodString>;
-            providerDomain: z.ZodString;
-        }, z.core.$strict>;
-        fields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-            credentialKey: z.ZodString;
-            digits: z.ZodOptional<z.ZodNumber>;
-            periodSeconds: z.ZodOptional<z.ZodNumber>;
-            algorithm: z.ZodOptional<z.ZodEnum<{
-                sha1: "sha1";
-                sha256: "sha256";
-                sha512: "sha512";
-            }>>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>, z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodLiteral<"human">;
-        label: z.ZodString;
-        fields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>, z.ZodObject<{
         id: z.ZodString;
         kind: z.ZodLiteral<"external_provider">;
         label: z.ZodString;
@@ -1763,45 +1609,6 @@ export declare const SiteAuthConnectionMutationResponse: z.ZodObject<{
         loginUrl: z.ZodNullable<z.ZodString>;
         verificationUrlPrefixes: z.ZodArray<z.ZodString>;
         authorities: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            id: z.ZodString;
-            kind: z.ZodLiteral<"connection_fields">;
-            label: z.ZodString;
-            credential: z.ZodObject<{
-                connectionId: z.ZodString;
-                connectionSubjectId: z.ZodNullable<z.ZodString>;
-                providerDomain: z.ZodString;
-            }, z.core.$strict>;
-            fields: z.ZodArray<z.ZodObject<{
-                id: z.ZodString;
-                purpose: z.ZodEnum<{
-                    identifier: "identifier";
-                    password: "password";
-                    secret: "secret";
-                    totp: "totp";
-                }>;
-                credentialKey: z.ZodString;
-                digits: z.ZodOptional<z.ZodNumber>;
-                periodSeconds: z.ZodOptional<z.ZodNumber>;
-                algorithm: z.ZodOptional<z.ZodEnum<{
-                    sha1: "sha1";
-                    sha256: "sha256";
-                    sha512: "sha512";
-                }>>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>, z.ZodObject<{
-            id: z.ZodString;
-            kind: z.ZodLiteral<"human">;
-            label: z.ZodString;
-            fields: z.ZodArray<z.ZodObject<{
-                id: z.ZodString;
-                purpose: z.ZodEnum<{
-                    identifier: "identifier";
-                    password: "password";
-                    secret: "secret";
-                    totp: "totp";
-                }>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>, z.ZodObject<{
             id: z.ZodString;
             kind: z.ZodLiteral<"external_provider">;
             label: z.ZodString;
@@ -1888,7 +1695,6 @@ export type SiteAuthConnectionMutationResponse = z.infer<typeof SiteAuthConnecti
 export declare const AuthRunState: z.ZodEnum<{
     awaiting_choice: "awaiting_choice";
     awaiting_external_action: "awaiting_external_action";
-    awaiting_secret: "awaiting_secret";
     cancelled: "cancelled";
     discovering: "discovering";
     failed: "failed";
@@ -1902,17 +1708,6 @@ export declare const AuthRunChoice: z.ZodObject<{
     methodId: z.ZodString;
 }, z.core.$strict>;
 export type AuthRunChoice = z.infer<typeof AuthRunChoice>;
-export declare const AuthRunPendingField: z.ZodObject<{
-    id: z.ZodString;
-    label: z.ZodString;
-    purpose: z.ZodEnum<{
-        identifier: "identifier";
-        password: "password";
-        secret: "secret";
-        totp: "totp";
-    }>;
-}, z.core.$strict>;
-export type AuthRunPendingField = z.infer<typeof AuthRunPendingField>;
 export declare const AuthRunExternalAction: z.ZodObject<{
     kind: z.ZodEnum<{
         device: "device";
@@ -1946,7 +1741,6 @@ export declare const AuthRun: z.ZodObject<{
     state: z.ZodEnum<{
         awaiting_choice: "awaiting_choice";
         awaiting_external_action: "awaiting_external_action";
-        awaiting_secret: "awaiting_secret";
         cancelled: "cancelled";
         discovering: "discovering";
         failed: "failed";
@@ -1958,16 +1752,6 @@ export declare const AuthRun: z.ZodObject<{
         label: z.ZodString;
         methodId: z.ZodString;
     }, z.core.$strict>>;
-    pendingFields: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodString;
-        purpose: z.ZodEnum<{
-            identifier: "identifier";
-            password: "password";
-            secret: "secret";
-            totp: "totp";
-        }>;
-    }, z.core.$strict>>;
     externalAction: z.ZodNullable<z.ZodObject<{
         kind: z.ZodEnum<{
             device: "device";
@@ -2012,7 +1796,6 @@ export declare const AuthRunListResponse: z.ZodObject<{
         state: z.ZodEnum<{
             awaiting_choice: "awaiting_choice";
             awaiting_external_action: "awaiting_external_action";
-            awaiting_secret: "awaiting_secret";
             cancelled: "cancelled";
             discovering: "discovering";
             failed: "failed";
@@ -2024,16 +1807,6 @@ export declare const AuthRunListResponse: z.ZodObject<{
             label: z.ZodString;
             methodId: z.ZodString;
         }, z.core.$strict>>;
-        pendingFields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            label: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-        }, z.core.$strict>>;
         externalAction: z.ZodNullable<z.ZodObject<{
             kind: z.ZodEnum<{
                 device: "device";
@@ -2079,7 +1852,6 @@ export declare const AuthRunMutationResponse: z.ZodObject<{
         state: z.ZodEnum<{
             awaiting_choice: "awaiting_choice";
             awaiting_external_action: "awaiting_external_action";
-            awaiting_secret: "awaiting_secret";
             cancelled: "cancelled";
             discovering: "discovering";
             failed: "failed";
@@ -2091,16 +1863,6 @@ export declare const AuthRunMutationResponse: z.ZodObject<{
             label: z.ZodString;
             methodId: z.ZodString;
         }, z.core.$strict>>;
-        pendingFields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            label: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-        }, z.core.$strict>>;
         externalAction: z.ZodNullable<z.ZodObject<{
             kind: z.ZodEnum<{
                 device: "device";
@@ -2149,7 +1911,6 @@ export declare const ReportAuthRunPayload: z.ZodObject<{
     state: z.ZodEnum<{
         awaiting_choice: "awaiting_choice";
         awaiting_external_action: "awaiting_external_action";
-        awaiting_secret: "awaiting_secret";
         cancelled: "cancelled";
         failed: "failed";
         working: "working";
@@ -2159,16 +1920,6 @@ export declare const ReportAuthRunPayload: z.ZodObject<{
         label: z.ZodString;
         methodId: z.ZodString;
     }, z.core.$strict>>>;
-    pendingFields: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodString;
-        purpose: z.ZodEnum<{
-            identifier: "identifier";
-            password: "password";
-            secret: "secret";
-            totp: "totp";
-        }>;
-    }, z.core.$strict>>>;
     externalAction: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         kind: z.ZodEnum<{
             device: "device";
@@ -2191,7 +1942,6 @@ export declare const ReportAuthRunRequest: z.ZodObject<{
     state: z.ZodEnum<{
         awaiting_choice: "awaiting_choice";
         awaiting_external_action: "awaiting_external_action";
-        awaiting_secret: "awaiting_secret";
         cancelled: "cancelled";
         failed: "failed";
         working: "working";
@@ -2201,16 +1951,6 @@ export declare const ReportAuthRunRequest: z.ZodObject<{
         label: z.ZodString;
         methodId: z.ZodString;
     }, z.core.$strict>>>;
-    pendingFields: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodString;
-        purpose: z.ZodEnum<{
-            identifier: "identifier";
-            password: "password";
-            secret: "secret";
-            totp: "totp";
-        }>;
-    }, z.core.$strict>>>;
     externalAction: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         kind: z.ZodEnum<{
             device: "device";
@@ -2227,262 +1967,9 @@ export declare const ReportAuthRunRequest: z.ZodObject<{
     operationId: z.ZodString;
 }, z.core.$strict>;
 export type ReportAuthRunRequest = z.infer<typeof ReportAuthRunRequest>;
-export declare const ProtectedAuthField: z.ZodObject<{
-    fieldId: z.ZodString;
-    locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"ref">;
-        ref: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"role">;
-        role: z.ZodString;
-        name: z.ZodOptional<z.ZodString>;
-        exact: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"label">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"text">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"placeholder">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"test_id">;
-        value: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"css">;
-        selector: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-}, z.core.$strict>;
-export type ProtectedAuthField = z.infer<typeof ProtectedAuthField>;
-export declare const ProtectedAuthSubmit: z.ZodDiscriminatedUnion<[z.ZodObject<{
-    type: z.ZodLiteral<"none">;
-}, z.core.$strict>, z.ZodObject<{
-    type: z.ZodLiteral<"click">;
-    locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"ref">;
-        ref: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"role">;
-        role: z.ZodString;
-        name: z.ZodOptional<z.ZodString>;
-        exact: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"label">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"text">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"placeholder">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"test_id">;
-        value: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"css">;
-        selector: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-}, z.core.$strict>, z.ZodObject<{
-    type: z.ZodLiteral<"press">;
-    key: z.ZodString;
-    locator: z.ZodOptional<z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"ref">;
-        ref: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"role">;
-        role: z.ZodString;
-        name: z.ZodOptional<z.ZodString>;
-        exact: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"label">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"text">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"placeholder">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"test_id">;
-        value: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"css">;
-        selector: z.ZodString;
-    }, z.core.$strict>], "kind">>>;
-}, z.core.$strict>], "type">;
-export type ProtectedAuthSubmit = z.infer<typeof ProtectedAuthSubmit>;
-export declare const ProtectedAuthFillRequest: z.ZodObject<{
-    operationId: z.ZodString;
-    expectedVersion: z.ZodNumber;
-    expectedTargetGeneration: z.ZodString;
-    expectedDocumentGeneration: z.ZodNullable<z.ZodString>;
-    expectedFrameId: z.ZodNullable<z.ZodString>;
-    authorityId: z.ZodString;
-    fields: z.ZodArray<z.ZodObject<{
-        fieldId: z.ZodString;
-        locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"ref">;
-            ref: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"role">;
-            role: z.ZodString;
-            name: z.ZodOptional<z.ZodString>;
-            exact: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"label">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"text">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"placeholder">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"test_id">;
-            value: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"css">;
-            selector: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-    }, z.core.$strict>>;
-    submit: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"none">;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"click">;
-        locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"ref">;
-            ref: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"role">;
-            role: z.ZodString;
-            name: z.ZodOptional<z.ZodString>;
-            exact: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"label">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"text">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"placeholder">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"test_id">;
-            value: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"css">;
-            selector: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"press">;
-        key: z.ZodString;
-        locator: z.ZodOptional<z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"ref">;
-            ref: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"role">;
-            role: z.ZodString;
-            name: z.ZodOptional<z.ZodString>;
-            exact: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"label">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"text">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"placeholder">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"test_id">;
-            value: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"css">;
-            selector: z.ZodString;
-        }, z.core.$strict>], "kind">>>;
-    }, z.core.$strict>], "type">>;
-}, z.core.$strict>;
-export type ProtectedAuthFillRequest = z.infer<typeof ProtectedAuthFillRequest>;
-export declare const ProtectedAuthFillResponse: z.ZodObject<{
-    run: z.ZodObject<{
-        id: z.ZodString;
-        accountId: z.ZodString;
-        workspaceId: z.ZodString;
-        siteAuthConnectionId: z.ZodString;
-        browserSessionId: z.ZodString;
-        targetId: z.ZodString;
-        controllerGeneration: z.ZodString;
-        targetGeneration: z.ZodString;
-        documentGeneration: z.ZodNullable<z.ZodString>;
-        purpose: z.ZodEnum<{
-            authenticate: "authenticate";
-            health_check: "health_check";
-            repair: "repair";
-        }>;
-        methodId: z.ZodNullable<z.ZodString>;
-        authorityId: z.ZodNullable<z.ZodString>;
-        state: z.ZodEnum<{
-            awaiting_choice: "awaiting_choice";
-            awaiting_external_action: "awaiting_external_action";
-            awaiting_secret: "awaiting_secret";
-            cancelled: "cancelled";
-            discovering: "discovering";
-            failed: "failed";
-            verified: "verified";
-            working: "working";
-        }>;
-        choices: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            label: z.ZodString;
-            methodId: z.ZodString;
-        }, z.core.$strict>>;
-        pendingFields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            label: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-        }, z.core.$strict>>;
-        externalAction: z.ZodNullable<z.ZodObject<{
-            kind: z.ZodEnum<{
-                device: "device";
-                human: "human";
-                other: "other";
-                passkey: "passkey";
-                push: "push";
-                security_key: "security_key";
-            }>;
-            label: z.ZodString;
-            expiresAt: z.ZodNullable<z.ZodString>;
-        }, z.core.$strict>>;
-        interventionId: z.ZodNullable<z.ZodString>;
-        verifiedUrl: z.ZodNullable<z.ZodString>;
-        failureCode: z.ZodNullable<z.ZodString>;
-        version: z.ZodNumber;
-        operationId: z.ZodString;
-        createdBySubjectId: z.ZodString;
-        createdAt: z.ZodString;
-        updatedAt: z.ZodString;
-        settledAt: z.ZodNullable<z.ZodString>;
-    }, z.core.$strict>;
-    status: z.ZodEnum<{
-        failed: "failed";
-        needs_human: "needs_human";
-        stale: "stale";
-        submitted: "submitted";
-        working: "working";
-    }>;
-    operationId: z.ZodString;
-    replayed: z.ZodBoolean;
-}, z.core.$strict>;
-export type ProtectedAuthFillResponse = z.infer<typeof ProtectedAuthFillResponse>;
-/** Public request for advancing a provider-managed AuthRun. Provider secrets,
- * profile names, browser ids, and hosted-login URLs stay behind browserd. */
-export declare const ExternalAuthRunRequest: z.ZodObject<{
+/** Public request for advancing a provider-managed AuthRun. Provider secrets,
+ * profile names, browser ids, and hosted-login URLs stay behind browserd. */
+export declare const ExternalAuthRunRequest: z.ZodObject<{
     operationId: z.ZodString;
     expectedVersion: z.ZodNumber;
     action: z.ZodEnum<{
@@ -2512,7 +1999,6 @@ export declare const ExternalAuthRunResponse: z.ZodObject<{
         state: z.ZodEnum<{
             awaiting_choice: "awaiting_choice";
             awaiting_external_action: "awaiting_external_action";
-            awaiting_secret: "awaiting_secret";
             cancelled: "cancelled";
             discovering: "discovering";
             failed: "failed";
@@ -2524,16 +2010,6 @@ export declare const ExternalAuthRunResponse: z.ZodObject<{
             label: z.ZodString;
             methodId: z.ZodString;
         }, z.core.$strict>>;
-        pendingFields: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            label: z.ZodString;
-            purpose: z.ZodEnum<{
-                identifier: "identifier";
-                password: "password";
-                secret: "secret";
-                totp: "totp";
-            }>;
-        }, z.core.$strict>>;
         externalAction: z.ZodNullable<z.ZodObject<{
             kind: z.ZodEnum<{
                 device: "device";
@@ -2903,6 +2379,7 @@ export declare const RequestHumanInteractionToolOutput: z.ZodObject<{
             artifactId: z.ZodString;
             kind: z.ZodEnum<{
                 assistant_completion: "assistant_completion";
+                browser_screenshot: "browser_screenshot";
                 computer_screenshot: "computer_screenshot";
                 event_media: "event_media";
                 file: "file";
@@ -2933,6 +2410,14 @@ export declare const RequestHumanInteractionToolOutput: z.ZodObject<{
                 maxRangeBytes: z.ZodNumber;
             }, z.core.$strict>;
         }, z.core.$strict>>;
+        viewport: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+            visualWidth: z.ZodNumber;
+            visualHeight: z.ZodNumber;
+            deviceScaleFactor: z.ZodNumber;
+            maxTouchPoints: z.ZodNumber;
+        }, z.core.$strict>>>;
         focusedRef: z.ZodNullable<z.ZodString>;
         changedRegions: z.ZodArray<z.ZodObject<{
             x: z.ZodNumber;
@@ -2999,6 +2484,7 @@ export declare const RequestHumanInteractionToolOutput: z.ZodObject<{
             artifactId: z.ZodString;
             kind: z.ZodEnum<{
                 assistant_completion: "assistant_completion";
+                browser_screenshot: "browser_screenshot";
                 computer_screenshot: "computer_screenshot";
                 event_media: "event_media";
                 file: "file";
@@ -3530,6 +3016,7 @@ export declare const BrowserObservation: z.ZodObject<{
         artifactId: z.ZodString;
         kind: z.ZodEnum<{
             assistant_completion: "assistant_completion";
+            browser_screenshot: "browser_screenshot";
             computer_screenshot: "computer_screenshot";
             event_media: "event_media";
             file: "file";
@@ -3560,6 +3047,14 @@ export declare const BrowserObservation: z.ZodObject<{
             maxRangeBytes: z.ZodNumber;
         }, z.core.$strict>;
     }, z.core.$strict>>;
+    viewport: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        visualWidth: z.ZodNumber;
+        visualHeight: z.ZodNumber;
+        deviceScaleFactor: z.ZodNumber;
+        maxTouchPoints: z.ZodNumber;
+    }, z.core.$strict>>>;
     focusedRef: z.ZodNullable<z.ZodString>;
     changedRegions: z.ZodArray<z.ZodObject<{
         x: z.ZodNumber;
@@ -3671,6 +3166,134 @@ export declare const BrowserLocator: z.ZodDiscriminatedUnion<[z.ZodObject<{
     selector: z.ZodString;
 }, z.core.$strict>], "kind">;
 export type BrowserLocator = z.infer<typeof BrowserLocator>;
+/** Cheap causal state for a target. This is intentionally independent of an
+ * accessibility observation, which can require a full tree for every frame. */
+export declare const BrowserTargetState: z.ZodObject<{
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodString;
+    targetGeneration: z.ZodString;
+    documentGeneration: z.ZodNullable<z.ZodString>;
+    frameId: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type BrowserTargetState = z.infer<typeof BrowserTargetState>;
+export declare const BrowserDomSafeAttribute: z.ZodEnum<{
+    alt: "alt";
+    "aria-checked": "aria-checked";
+    "aria-expanded": "aria-expanded";
+    "aria-label": "aria-label";
+    "aria-selected": "aria-selected";
+    "data-testid": "data-testid";
+    href: "href";
+    name: "name";
+    placeholder: "placeholder";
+    role: "role";
+    src: "src";
+    title: "title";
+    type: "type";
+}>;
+export type BrowserDomSafeAttribute = z.infer<typeof BrowserDomSafeAttribute>;
+export declare const BrowserDomReadSelector: z.ZodString;
+/** DOM extraction avoids content-matching locators, which can probe redacted text. */
+export declare const BrowserDomReadLocator: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"ref">;
+    ref: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"placeholder">;
+    text: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"test_id">;
+    value: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"css">;
+    selector: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type BrowserDomReadLocator = z.infer<typeof BrowserDomReadLocator>;
+/** A fixed, read-only query. The caller never supplies executable JavaScript.
+ * CSS reads accept only simple tag, class, id, descendant, and child selectors
+ * so predicate queries cannot probe protected attribute values. CSS count is
+ * scoped to the target's main document; child frames and shadow roots are not
+ * part of its count. */
+export declare const BrowserDomReadRequest: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    expectedTargetGeneration: z.ZodString;
+    expectedDocumentGeneration: z.ZodString;
+    expectedFrameId: z.ZodString;
+    kind: z.ZodLiteral<"element">;
+    locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ref">;
+        ref: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"placeholder">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"test_id">;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"css">;
+        selector: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    attributes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        alt: "alt";
+        "aria-checked": "aria-checked";
+        "aria-expanded": "aria-expanded";
+        "aria-label": "aria-label";
+        "aria-selected": "aria-selected";
+        "data-testid": "data-testid";
+        href: "href";
+        name: "name";
+        placeholder: "placeholder";
+        role: "role";
+        src: "src";
+        title: "title";
+        type: "type";
+    }>>>;
+    maxChars: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+    expectedTargetGeneration: z.ZodString;
+    expectedDocumentGeneration: z.ZodString;
+    expectedFrameId: z.ZodString;
+    kind: z.ZodLiteral<"count">;
+    selector: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type BrowserDomReadRequest = z.infer<typeof BrowserDomReadRequest>;
+export declare const BrowserDomReadResponse: z.ZodObject<{
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodString;
+    targetGeneration: z.ZodString;
+    documentGeneration: z.ZodNullable<z.ZodString>;
+    frameId: z.ZodNullable<z.ZodString>;
+    kind: z.ZodEnum<{
+        count: "count";
+        element: "element";
+    }>;
+    count: z.ZodNumber;
+    text: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    value: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    attributes: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+        alt: "alt";
+        "aria-checked": "aria-checked";
+        "aria-expanded": "aria-expanded";
+        "aria-label": "aria-label";
+        "aria-selected": "aria-selected";
+        "data-testid": "data-testid";
+        href: "href";
+        name: "name";
+        placeholder: "placeholder";
+        role: "role";
+        src: "src";
+        title: "title";
+        type: "type";
+    }> & z.core.$partial, z.ZodNullable<z.ZodString>>>;
+    redacted: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        password: "password";
+        payment: "payment";
+        policy: "policy";
+        private: "private";
+    }>>>;
+    truncated: z.ZodBoolean;
+}, z.core.$strict>;
+export type BrowserDomReadResponse = z.infer<typeof BrowserDomReadResponse>;
 /** Provider-neutral locator for native accessibility trees. Native automation
  * identifiers are intentionally distinct from DOM selectors/test ids: AX,
  * AT-SPI, and UIA adapters resolve them inside the exact observed target. */
@@ -3720,6 +3343,20 @@ export type BrowserPermissionSetting = z.infer<typeof BrowserPermissionSetting>;
 export declare const BrowserAction: z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
     type: z.ZodLiteral<"navigate">;
     url: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"history">;
+    direction: z.ZodEnum<{
+        back: "back";
+        forward: "forward";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"activate">;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"viewport">;
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    mobile: z.ZodBoolean;
+    deviceScaleFactor: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"click">;
     locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -3857,6 +3494,10 @@ export declare const BrowserAction: z.ZodDiscriminatedUnion<readonly [z.ZodObjec
         selector: z.ZodString;
     }, z.core.$strict>], "kind">>;
     text: z.ZodString;
+    mode: z.ZodOptional<z.ZodEnum<{
+        insert: "insert";
+        keys: "keys";
+    }>>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"press">;
     locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -4168,6 +3809,20 @@ export declare const BrowserActionBatch: z.ZodObject<{
     actions: z.ZodArray<z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"navigate">;
         url: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"history">;
+        direction: z.ZodEnum<{
+            back: "back";
+            forward: "forward";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"activate">;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"viewport">;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        mobile: z.ZodBoolean;
+        deviceScaleFactor: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"click">;
         locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -4305,6 +3960,10 @@ export declare const BrowserActionBatch: z.ZodObject<{
             selector: z.ZodString;
         }, z.core.$strict>], "kind">>;
         text: z.ZodString;
+        mode: z.ZodOptional<z.ZodEnum<{
+            insert: "insert";
+            keys: "keys";
+        }>>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"press">;
         locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -4610,6 +4269,7 @@ export declare const BrowserActionBatch: z.ZodObject<{
         }, z.core.$strict>], "kind">>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>], "type">>;
+    fenceEachAction: z.ZodOptional<z.ZodLiteral<true>>;
 }, z.core.$strict>;
 export type BrowserActionBatch = z.infer<typeof BrowserActionBatch>;
 /** Secret-safe projection of a connected-machine control failure carried in a
@@ -4672,6 +4332,8 @@ export declare const InteractionError: z.ZodObject<{
         permission_denied: "permission_denied";
         resource_not_found: "resource_not_found";
         resource_unavailable: "resource_unavailable";
+        tab_crashed: "tab_crashed";
+        tab_not_responding: "tab_not_responding";
         target_not_found: "target_not_found";
         target_stale: "target_stale";
         timeout: "timeout";
@@ -4682,6 +4344,13 @@ export declare const InteractionError: z.ZodObject<{
     details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
 }, z.core.$strict>;
 export type InteractionError = z.infer<typeof InteractionError>;
+/** Upper bound on distinct secret references one interaction command may carry. */
+export declare const INTERACTION_MAX_SECRET_VALUES = 64;
+/** Controller-private plaintext for the `{{secret:…}}` references in one
+ * interaction command, keyed by `referenceKey(reference)`. TOTP references
+ * carry the code computed at dispatch, never the seed. */
+export declare const InteractionSecretValues: z.ZodRecord<z.ZodString, z.ZodString>;
+export type InteractionSecretValues = z.infer<typeof InteractionSecretValues>;
 export declare const BrowserActionCommand: z.ZodObject<{
     protocolVersion: z.ZodLiteral<1>;
     operationId: z.ZodString;
@@ -4705,11 +4374,26 @@ export declare const BrowserActionCommand: z.ZodObject<{
     }, z.core.$strict>;
     observationMode: z.ZodOptional<z.ZodEnum<{
         full: "full";
+        input: "input";
         none: "none";
     }>>;
     action: z.ZodUnion<readonly [z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"navigate">;
         url: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"history">;
+        direction: z.ZodEnum<{
+            back: "back";
+            forward: "forward";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"activate">;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"viewport">;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        mobile: z.ZodBoolean;
+        deviceScaleFactor: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"click">;
         locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -4847,6 +4531,10 @@ export declare const BrowserActionCommand: z.ZodObject<{
             selector: z.ZodString;
         }, z.core.$strict>], "kind">>;
         text: z.ZodString;
+        mode: z.ZodOptional<z.ZodEnum<{
+            insert: "insert";
+            keys: "keys";
+        }>>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"press">;
         locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -5156,6 +4844,20 @@ export declare const BrowserActionCommand: z.ZodObject<{
         actions: z.ZodArray<z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
             type: z.ZodLiteral<"navigate">;
             url: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"history">;
+            direction: z.ZodEnum<{
+                back: "back";
+                forward: "forward";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"activate">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"viewport">;
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+            mobile: z.ZodBoolean;
+            deviceScaleFactor: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"click">;
             locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -5293,6 +4995,10 @@ export declare const BrowserActionCommand: z.ZodObject<{
                 selector: z.ZodString;
             }, z.core.$strict>], "kind">>;
             text: z.ZodString;
+            mode: z.ZodOptional<z.ZodEnum<{
+                insert: "insert";
+                keys: "keys";
+            }>>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"press">;
             locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -5598,7 +5304,9 @@ export declare const BrowserActionCommand: z.ZodObject<{
             }, z.core.$strict>], "kind">>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>], "type">>;
+        fenceEachAction: z.ZodOptional<z.ZodLiteral<true>>;
     }, z.core.$strict>]>;
+    secretValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strict>;
 export type BrowserActionCommand = z.infer<typeof BrowserActionCommand>;
 /** Controller-private authority used to materialize immutable workspace files
@@ -5691,6 +5399,8 @@ export declare const InteractionLifecycleOperationReceipt: z.ZodObject<{
             permission_denied: "permission_denied";
             resource_not_found: "resource_not_found";
             resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
             target_not_found: "target_not_found";
             target_stale: "target_stale";
             timeout: "timeout";
@@ -5711,6 +5421,10 @@ export declare const CreateBrowserSessionRequest: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     initialUrl: z.ZodOptional<z.ZodString>;
     headless: z.ZodDefault<z.ZodBoolean>;
+    storageMode: z.ZodDefault<z.ZodEnum<{
+        ephemeral_context: "ephemeral_context";
+        private_profile: "private_profile";
+    }>>;
     engine: z.ZodDefault<z.ZodEnum<{
         chromium: "chromium";
         lightpanda: "lightpanda";
@@ -5952,6 +5666,8 @@ export declare const BrowserSessionMutationResponse: z.ZodObject<{
                 permission_denied: "permission_denied";
                 resource_not_found: "resource_not_found";
                 resource_unavailable: "resource_unavailable";
+                tab_crashed: "tab_crashed";
+                tab_not_responding: "tab_not_responding";
                 target_not_found: "target_not_found";
                 target_stale: "target_stale";
                 timeout: "timeout";
@@ -6045,6 +5761,7 @@ export declare const ComputerFrameStreamAttachment: z.ZodDiscriminatedUnion<[z.Z
     kind: z.ZodLiteral<"direct_rfb">;
     url: z.ZodString;
     protocols: z.ZodArray<z.ZodString>;
+    inputAllowed: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"relay">;
     url: z.ZodString;
@@ -6081,6 +5798,7 @@ export declare const InteractionFrameStreamAttachment: z.ZodUnion<readonly [z.Zo
     kind: z.ZodLiteral<"direct_rfb">;
     url: z.ZodString;
     protocols: z.ZodArray<z.ZodString>;
+    inputAllowed: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"relay">;
     url: z.ZodString;
@@ -6114,6 +5832,8 @@ export declare const BrowserSessionAttachment: z.ZodObject<{
             port: z.ZodNumber;
         }, z.core.$strict>;
     }, z.core.$strict>], "kind">;
+    fencedInputBatches: z.ZodOptional<z.ZodLiteral<true>>;
+    focusedInputObservations: z.ZodOptional<z.ZodLiteral<true>>;
     expiresAt: z.ZodString;
 }, z.core.$strict>;
 export type BrowserSessionAttachment = z.infer<typeof BrowserSessionAttachment>;
@@ -6138,16 +5858,31 @@ export type BrowserSessionAttachmentRequest = z.infer<typeof BrowserSessionAttac
 export declare const BrowserActionRequest: z.ZodObject<{
     operationId: z.ZodString;
     targetId: z.ZodString;
-    expectedTargetGeneration: z.ZodString;
-    expectedDocumentGeneration: z.ZodNullable<z.ZodString>;
-    expectedFrameId: z.ZodNullable<z.ZodString>;
+    expectedTargetGeneration: z.ZodOptional<z.ZodString>;
+    expectedDocumentGeneration: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    expectedFrameId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     observationMode: z.ZodDefault<z.ZodEnum<{
         full: "full";
+        input: "input";
         none: "none";
     }>>;
     action: z.ZodUnion<readonly [z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"navigate">;
         url: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"history">;
+        direction: z.ZodEnum<{
+            back: "back";
+            forward: "forward";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"activate">;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"viewport">;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        mobile: z.ZodBoolean;
+        deviceScaleFactor: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"click">;
         locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -6285,6 +6020,10 @@ export declare const BrowserActionRequest: z.ZodObject<{
             selector: z.ZodString;
         }, z.core.$strict>], "kind">>;
         text: z.ZodString;
+        mode: z.ZodOptional<z.ZodEnum<{
+            insert: "insert";
+            keys: "keys";
+        }>>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"press">;
         locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -6594,6 +6333,20 @@ export declare const BrowserActionRequest: z.ZodObject<{
         actions: z.ZodArray<z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
             type: z.ZodLiteral<"navigate">;
             url: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"history">;
+            direction: z.ZodEnum<{
+                back: "back";
+                forward: "forward";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"activate">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"viewport">;
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+            mobile: z.ZodBoolean;
+            deviceScaleFactor: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"click">;
             locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -6731,6 +6484,10 @@ export declare const BrowserActionRequest: z.ZodObject<{
                 selector: z.ZodString;
             }, z.core.$strict>], "kind">>;
             text: z.ZodString;
+            mode: z.ZodOptional<z.ZodEnum<{
+                insert: "insert";
+                keys: "keys";
+            }>>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"press">;
             locator: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -7036,6 +6793,7 @@ export declare const BrowserActionRequest: z.ZodObject<{
             }, z.core.$strict>], "kind">>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>], "type">>;
+        fenceEachAction: z.ZodOptional<z.ZodLiteral<true>>;
     }, z.core.$strict>]>;
 }, z.core.$strict>;
 export type BrowserActionRequest = z.infer<typeof BrowserActionRequest>;
@@ -7045,6 +6803,24 @@ export declare const BrowserSessionHeartbeatResponse: z.ZodObject<{
     alive: z.ZodLiteral<true>;
 }, z.core.$strict>;
 export type BrowserSessionHeartbeatResponse = z.infer<typeof BrowserSessionHeartbeatResponse>;
+/** The element one locator of an action resolved to, captured before input.
+ * `container` is the nearest dialog, landmark, menu or toolbar around it, so a
+ * reader can tell a dialog's "Close" from a page header's "Close". */
+export declare const BrowserActionResolvedTarget: z.ZodObject<{
+    actionIndex: z.ZodNumber;
+    ref: z.ZodNullable<z.ZodString>;
+    role: z.ZodString;
+    name: z.ZodNullable<z.ZodString>;
+    container: z.ZodNullable<z.ZodObject<{
+        role: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type BrowserActionResolvedTarget = z.infer<typeof BrowserActionResolvedTarget>;
+/** Query parameter by which a caller asks a browser controller to include
+ * `targets` in an action receipt. Controllers that predate the field ignore it,
+ * and callers that do not send it receive receipts without the field. */
+export declare const BROWSER_ACTION_RECEIPT_TARGETS_PARAMETER = "receiptTargets";
 export declare const BrowserActionReceipt: z.ZodObject<{
     protocolVersion: z.ZodLiteral<1>;
     operationId: z.ZodString;
@@ -7098,6 +6874,7 @@ export declare const BrowserActionReceipt: z.ZodObject<{
             artifactId: z.ZodString;
             kind: z.ZodEnum<{
                 assistant_completion: "assistant_completion";
+                browser_screenshot: "browser_screenshot";
                 computer_screenshot: "computer_screenshot";
                 event_media: "event_media";
                 file: "file";
@@ -7128,6 +6905,14 @@ export declare const BrowserActionReceipt: z.ZodObject<{
                 maxRangeBytes: z.ZodNumber;
             }, z.core.$strict>;
         }, z.core.$strict>>;
+        viewport: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+            visualWidth: z.ZodNumber;
+            visualHeight: z.ZodNumber;
+            deviceScaleFactor: z.ZodNumber;
+            maxTouchPoints: z.ZodNumber;
+        }, z.core.$strict>>>;
         focusedRef: z.ZodNullable<z.ZodString>;
         changedRegions: z.ZodArray<z.ZodObject<{
             x: z.ZodNumber;
@@ -7172,6 +6957,8 @@ export declare const BrowserActionReceipt: z.ZodObject<{
             permission_denied: "permission_denied";
             resource_not_found: "resource_not_found";
             resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
             target_not_found: "target_not_found";
             target_stale: "target_stale";
             timeout: "timeout";
@@ -7181,257 +6968,18 @@ export declare const BrowserActionReceipt: z.ZodObject<{
         retryable: z.ZodBoolean;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
     }, z.core.$strict>>;
+    targets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        actionIndex: z.ZodNumber;
+        ref: z.ZodNullable<z.ZodString>;
+        role: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        container: z.ZodNullable<z.ZodObject<{
+            role: z.ZodString;
+            name: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
 }, z.core.$strict>;
 export type BrowserActionReceipt = z.infer<typeof BrowserActionReceipt>;
-/** Controller-private protected-fill wire contract. Secret values cross only
- * the credential broker -> exact placement controller boundary; this command
- * is never projected into model MCP, Codemode, public action history, or UI. */
-export declare const BrowserProtectedAuthFieldValue: z.ZodObject<{
-    fieldId: z.ZodString;
-    locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"ref">;
-        ref: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"role">;
-        role: z.ZodString;
-        name: z.ZodOptional<z.ZodString>;
-        exact: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"label">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"text">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"placeholder">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"test_id">;
-        value: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"css">;
-        selector: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-    purpose: z.ZodEnum<{
-        identifier: "identifier";
-        password: "password";
-        secret: "secret";
-        totp: "totp";
-    }>;
-    value: z.ZodString;
-}, z.core.$strict>;
-export type BrowserProtectedAuthFieldValue = z.infer<typeof BrowserProtectedAuthFieldValue>;
-export declare const BrowserProtectedAuthFillCommand: z.ZodObject<{
-    protocolVersion: z.ZodLiteral<1>;
-    operationId: z.ZodString;
-    browserSessionId: z.ZodString;
-    controllerGeneration: z.ZodString;
-    targetId: z.ZodString;
-    expectedTargetGeneration: z.ZodString;
-    expectedDocumentGeneration: z.ZodString;
-    expectedFrameId: z.ZodString;
-    actor: z.ZodObject<{
-        kind: z.ZodEnum<{
-            agent: "agent";
-            human: "human";
-            system: "system";
-        }>;
-        subjectId: z.ZodString;
-        sessionId: z.ZodOptional<z.ZodString>;
-        turnId: z.ZodOptional<z.ZodString>;
-        attemptId: z.ZodOptional<z.ZodString>;
-        executionGeneration: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>;
-    authorityId: z.ZodString;
-    credentialVersion: z.ZodNumber;
-    allowedOrigins: z.ZodArray<z.ZodString>;
-    fields: z.ZodArray<z.ZodObject<{
-        fieldId: z.ZodString;
-        locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"ref">;
-            ref: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"role">;
-            role: z.ZodString;
-            name: z.ZodOptional<z.ZodString>;
-            exact: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"label">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"text">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"placeholder">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"test_id">;
-            value: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"css">;
-            selector: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        purpose: z.ZodEnum<{
-            identifier: "identifier";
-            password: "password";
-            secret: "secret";
-            totp: "totp";
-        }>;
-        value: z.ZodString;
-    }, z.core.$strict>>;
-    submit: z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"none">;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"click">;
-        locator: z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"ref">;
-            ref: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"role">;
-            role: z.ZodString;
-            name: z.ZodOptional<z.ZodString>;
-            exact: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"label">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"text">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"placeholder">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"test_id">;
-            value: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"css">;
-            selector: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"press">;
-        key: z.ZodString;
-        locator: z.ZodOptional<z.ZodLazy<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"ref">;
-            ref: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"role">;
-            role: z.ZodString;
-            name: z.ZodOptional<z.ZodString>;
-            exact: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"label">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"text">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"placeholder">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"test_id">;
-            value: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"css">;
-            selector: z.ZodString;
-        }, z.core.$strict>], "kind">>>;
-    }, z.core.$strict>], "type">;
-}, z.core.$strict>;
-export type BrowserProtectedAuthFillCommand = z.infer<typeof BrowserProtectedAuthFillCommand>;
-export declare const BrowserProtectedAuthObservation: z.ZodObject<{
-    target: z.ZodObject<{
-        id: z.ZodString;
-        browserSessionId: z.ZodString;
-        controllerGeneration: z.ZodString;
-        targetGeneration: z.ZodString;
-        documentGeneration: z.ZodNullable<z.ZodString>;
-        kind: z.ZodEnum<{
-            background_page: "background_page";
-            page: "page";
-            popup: "popup";
-            worker: "worker";
-        }>;
-        title: z.ZodString;
-        url: z.ZodString;
-        selected: z.ZodBoolean;
-        attached: z.ZodBoolean;
-        createdAt: z.ZodString;
-    }, z.core.$strict>;
-    status: z.ZodEnum<{
-        submitted: "submitted";
-        working: "working";
-    }>;
-}, z.core.$strict>;
-export type BrowserProtectedAuthObservation = z.infer<typeof BrowserProtectedAuthObservation>;
-/** Secret-free placement receipt. It can be journaled, replayed, and returned
- * to the broker without retaining any field value or model-visible page tree. */
-export declare const BrowserProtectedAuthFillReceipt: z.ZodObject<{
-    protocolVersion: z.ZodLiteral<1>;
-    operationId: z.ZodString;
-    browserSessionId: z.ZodString;
-    controllerGeneration: z.ZodString;
-    targetId: z.ZodString;
-    state: z.ZodEnum<{
-        completed: "completed";
-        dispatched: "dispatched";
-        failed: "failed";
-        outcome_unknown: "outcome_unknown";
-        prepared: "prepared";
-    }>;
-    dispatchedAt: z.ZodNullable<z.ZodString>;
-    settledAt: z.ZodNullable<z.ZodString>;
-    observation: z.ZodNullable<z.ZodObject<{
-        target: z.ZodObject<{
-            id: z.ZodString;
-            browserSessionId: z.ZodString;
-            controllerGeneration: z.ZodString;
-            targetGeneration: z.ZodString;
-            documentGeneration: z.ZodNullable<z.ZodString>;
-            kind: z.ZodEnum<{
-                background_page: "background_page";
-                page: "page";
-                popup: "popup";
-                worker: "worker";
-            }>;
-            title: z.ZodString;
-            url: z.ZodString;
-            selected: z.ZodBoolean;
-            attached: z.ZodBoolean;
-            createdAt: z.ZodString;
-        }, z.core.$strict>;
-        status: z.ZodEnum<{
-            submitted: "submitted";
-            working: "working";
-        }>;
-    }, z.core.$strict>>;
-    error: z.ZodNullable<z.ZodObject<{
-        code: z.ZodEnum<{
-            attempt_stale: "attempt_stale";
-            controller_lost: "controller_lost";
-            controller_stale: "controller_stale";
-            document_stale: "document_stale";
-            driver_failed: "driver_failed";
-            frame_stale: "frame_stale";
-            invalid_action: "invalid_action";
-            locator_ambiguous: "locator_ambiguous";
-            locator_not_found: "locator_not_found";
-            machine_locked: "machine_locked";
-            observation_stale: "observation_stale";
-            operation_conflict: "operation_conflict";
-            outcome_unknown: "outcome_unknown";
-            permission_denied: "permission_denied";
-            resource_not_found: "resource_not_found";
-            resource_unavailable: "resource_unavailable";
-            target_not_found: "target_not_found";
-            target_stale: "target_stale";
-            timeout: "timeout";
-            unsupported: "unsupported";
-        }>;
-        message: z.ZodString;
-        retryable: z.ZodBoolean;
-        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export type BrowserProtectedAuthFillReceipt = z.infer<typeof BrowserProtectedAuthFillReceipt>;
 export declare const ComputerSessionCapabilities: z.ZodObject<{
     semanticObservation: z.ZodBoolean;
     appDiscovery: z.ZodBoolean;
@@ -7440,9 +6988,11 @@ export declare const ComputerSessionCapabilities: z.ZodObject<{
     screenCapture: z.ZodBoolean;
     semanticActions: z.ZodBoolean;
     pointerInput: z.ZodBoolean;
+    pointerClickContinuation: z.ZodOptional<z.ZodBoolean>;
     keyboardInput: z.ZodBoolean;
     clipboard: z.ZodBoolean;
     backgroundActions: z.ZodBoolean;
+    backgroundInput: z.ZodOptional<z.ZodBoolean>;
     parallelApps: z.ZodBoolean;
 }, z.core.$strict>;
 export type ComputerSessionCapabilities = z.infer<typeof ComputerSessionCapabilities>;
@@ -7509,9 +7059,11 @@ export declare const ComputerSession: z.ZodObject<{
         screenCapture: z.ZodBoolean;
         semanticActions: z.ZodBoolean;
         pointerInput: z.ZodBoolean;
+        pointerClickContinuation: z.ZodOptional<z.ZodBoolean>;
         keyboardInput: z.ZodBoolean;
         clipboard: z.ZodBoolean;
         backgroundActions: z.ZodBoolean;
+        backgroundInput: z.ZodOptional<z.ZodBoolean>;
         parallelApps: z.ZodBoolean;
     }, z.core.$strict>>;
     associations: z.ZodArray<z.ZodObject<{
@@ -7596,6 +7148,7 @@ export declare const ComputerObservation: z.ZodObject<{
         artifactId: z.ZodString;
         kind: z.ZodEnum<{
             assistant_completion: "assistant_completion";
+            browser_screenshot: "browser_screenshot";
             computer_screenshot: "computer_screenshot";
             event_media: "event_media";
             file: "file";
@@ -7693,6 +7246,8 @@ export declare const ComputerAction: z.ZodDiscriminatedUnion<[z.ZodObject<{
         middle: "middle";
         right: "right";
     }>>;
+    clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
+    continuationOfOperationId: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"keyboard">;
     action: z.ZodEnum<{
@@ -7795,6 +7350,8 @@ export declare const ComputerActionCommand: z.ZodObject<{
             middle: "middle";
             right: "right";
         }>>;
+        clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
+        continuationOfOperationId: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"keyboard">;
         action: z.ZodEnum<{
@@ -7818,6 +7375,7 @@ export declare const ComputerActionCommand: z.ZodObject<{
         type: z.ZodLiteral<"launch">;
         applicationId: z.ZodString;
     }, z.core.$strict>], "type">;
+    secretValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strict>;
 export type ComputerActionCommand = z.infer<typeof ComputerActionCommand>;
 export declare const ComputerActionReceipt: z.ZodObject<{
@@ -7876,6 +7434,7 @@ export declare const ComputerActionReceipt: z.ZodObject<{
             artifactId: z.ZodString;
             kind: z.ZodEnum<{
                 assistant_completion: "assistant_completion";
+                browser_screenshot: "browser_screenshot";
                 computer_screenshot: "computer_screenshot";
                 event_media: "event_media";
                 file: "file";
@@ -7933,6 +7492,8 @@ export declare const ComputerActionReceipt: z.ZodObject<{
             permission_denied: "permission_denied";
             resource_not_found: "resource_not_found";
             resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
             target_not_found: "target_not_found";
             target_stale: "target_stale";
             timeout: "timeout";
@@ -8021,9 +7582,11 @@ export declare const ComputerSessionListResponse: z.ZodObject<{
             screenCapture: z.ZodBoolean;
             semanticActions: z.ZodBoolean;
             pointerInput: z.ZodBoolean;
+            pointerClickContinuation: z.ZodOptional<z.ZodBoolean>;
             keyboardInput: z.ZodBoolean;
             clipboard: z.ZodBoolean;
             backgroundActions: z.ZodBoolean;
+            backgroundInput: z.ZodOptional<z.ZodBoolean>;
             parallelApps: z.ZodBoolean;
         }, z.core.$strict>>;
         associations: z.ZodArray<z.ZodObject<{
@@ -8099,9 +7662,11 @@ export declare const ComputerSessionMutationResponse: z.ZodObject<{
             screenCapture: z.ZodBoolean;
             semanticActions: z.ZodBoolean;
             pointerInput: z.ZodBoolean;
+            pointerClickContinuation: z.ZodOptional<z.ZodBoolean>;
             keyboardInput: z.ZodBoolean;
             clipboard: z.ZodBoolean;
             backgroundActions: z.ZodBoolean;
+            backgroundInput: z.ZodOptional<z.ZodBoolean>;
             parallelApps: z.ZodBoolean;
         }, z.core.$strict>>;
         associations: z.ZodArray<z.ZodObject<{
@@ -8162,6 +7727,8 @@ export declare const ComputerSessionMutationResponse: z.ZodObject<{
                 permission_denied: "permission_denied";
                 resource_not_found: "resource_not_found";
                 resource_unavailable: "resource_unavailable";
+                tab_crashed: "tab_crashed";
+                tab_not_responding: "tab_not_responding";
                 target_not_found: "target_not_found";
                 target_stale: "target_stale";
                 timeout: "timeout";
@@ -8222,6 +7789,7 @@ export declare const ComputerSessionAttachment: z.ZodObject<{
     computerSessionId: z.ZodString;
     controllerGeneration: z.ZodString;
     targetId: z.ZodString;
+    inputAllowed: z.ZodOptional<z.ZodBoolean>;
     stream: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"direct_websocket">;
         url: z.ZodString;
@@ -8230,6 +7798,7 @@ export declare const ComputerSessionAttachment: z.ZodObject<{
         kind: z.ZodLiteral<"direct_rfb">;
         url: z.ZodString;
         protocols: z.ZodArray<z.ZodString>;
+        inputAllowed: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"relay">;
         url: z.ZodString;
@@ -8245,6 +7814,14 @@ export declare const ComputerSessionAttachment: z.ZodObject<{
     expiresAt: z.ZodString;
 }, z.core.$strict>;
 export type ComputerSessionAttachment = z.infer<typeof ComputerSessionAttachment>;
+/** Caller-specific human input posture, independent of media/native capability.
+ * It is a current-controller hint; every action still reauthorizes. */
+export declare const ComputerSessionInputPosture: z.ZodObject<{
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    inputAllowed: z.ZodBoolean;
+}, z.core.$strict>;
+export type ComputerSessionInputPosture = z.infer<typeof ComputerSessionInputPosture>;
 export declare const ComputerSessionAttachmentRequest: z.ZodObject<{
     targetId: z.ZodString;
     expiresInSeconds: z.ZodDefault<z.ZodNumber>;
@@ -8325,6 +7902,8 @@ export declare const ComputerActionRequest: z.ZodObject<{
             middle: "middle";
             right: "right";
         }>>;
+        clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
+        continuationOfOperationId: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"keyboard">;
         action: z.ZodEnum<{
@@ -8356,3 +7935,771 @@ export declare const ComputerSessionHeartbeatResponse: z.ZodObject<{
     alive: z.ZodLiteral<true>;
 }, z.core.$strict>;
 export type ComputerSessionHeartbeatResponse = z.infer<typeof ComputerSessionHeartbeatResponse>;
+/** Native desktop calls share ComputerSession authority and its operation journal.
+ * CUA owns argument schemas; session/lifecycle authority never comes from callers. */
+export declare const ComputerNativeCallRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    tool: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strict>;
+export type ComputerNativeCallRequest = z.infer<typeof ComputerNativeCallRequest>;
+export declare const ComputerNativeCommand: z.ZodObject<{
+    operationId: z.ZodString;
+    tool: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    protocolVersion: z.ZodLiteral<1>;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodNull;
+    actor: z.ZodObject<{
+        kind: z.ZodEnum<{
+            agent: "agent";
+            human: "human";
+            system: "system";
+        }>;
+        subjectId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+        turnId: z.ZodOptional<z.ZodString>;
+        attemptId: z.ZodOptional<z.ZodString>;
+        executionGeneration: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    secretValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>;
+export type ComputerNativeCommand = z.infer<typeof ComputerNativeCommand>;
+export declare const ComputerNativeResult: z.ZodObject<{
+    target: z.ZodNull;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    tool: z.ZodString;
+    result: z.ZodObject<{
+        content: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        structuredContent: z.ZodOptional<z.ZodUnknown>;
+        isError: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$loose>;
+    outcome: z.ZodEnum<{
+        completed: "completed";
+        failed: "failed";
+        outcome_unknown: "outcome_unknown";
+    }>;
+    error: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            attempt_stale: "attempt_stale";
+            controller_lost: "controller_lost";
+            controller_stale: "controller_stale";
+            document_stale: "document_stale";
+            driver_failed: "driver_failed";
+            frame_stale: "frame_stale";
+            invalid_action: "invalid_action";
+            locator_ambiguous: "locator_ambiguous";
+            locator_not_found: "locator_not_found";
+            machine_locked: "machine_locked";
+            observation_stale: "observation_stale";
+            operation_conflict: "operation_conflict";
+            outcome_unknown: "outcome_unknown";
+            permission_denied: "permission_denied";
+            resource_not_found: "resource_not_found";
+            resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
+            target_not_found: "target_not_found";
+            target_stale: "target_stale";
+            timeout: "timeout";
+            unsupported: "unsupported";
+        }>;
+        message: z.ZodString;
+        retryable: z.ZodBoolean;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ComputerNativeResult = z.infer<typeof ComputerNativeResult>;
+export declare const ComputerNativeReceipt: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodNull;
+    state: z.ZodEnum<{
+        completed: "completed";
+        dispatched: "dispatched";
+        failed: "failed";
+        outcome_unknown: "outcome_unknown";
+        prepared: "prepared";
+    }>;
+    dispatchedAt: z.ZodNullable<z.ZodString>;
+    settledAt: z.ZodNullable<z.ZodString>;
+    observation: z.ZodNullable<z.ZodObject<{
+        target: z.ZodNull;
+        computerSessionId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        tool: z.ZodString;
+        result: z.ZodObject<{
+            content: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            structuredContent: z.ZodOptional<z.ZodUnknown>;
+            isError: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$loose>;
+        outcome: z.ZodEnum<{
+            completed: "completed";
+            failed: "failed";
+            outcome_unknown: "outcome_unknown";
+        }>;
+        error: z.ZodNullable<z.ZodObject<{
+            code: z.ZodEnum<{
+                attempt_stale: "attempt_stale";
+                controller_lost: "controller_lost";
+                controller_stale: "controller_stale";
+                document_stale: "document_stale";
+                driver_failed: "driver_failed";
+                frame_stale: "frame_stale";
+                invalid_action: "invalid_action";
+                locator_ambiguous: "locator_ambiguous";
+                locator_not_found: "locator_not_found";
+                machine_locked: "machine_locked";
+                observation_stale: "observation_stale";
+                operation_conflict: "operation_conflict";
+                outcome_unknown: "outcome_unknown";
+                permission_denied: "permission_denied";
+                resource_not_found: "resource_not_found";
+                resource_unavailable: "resource_unavailable";
+                tab_crashed: "tab_crashed";
+                tab_not_responding: "tab_not_responding";
+                target_not_found: "target_not_found";
+                target_stale: "target_stale";
+                timeout: "timeout";
+                unsupported: "unsupported";
+            }>;
+            message: z.ZodString;
+            retryable: z.ZodBoolean;
+            details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    error: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            attempt_stale: "attempt_stale";
+            controller_lost: "controller_lost";
+            controller_stale: "controller_stale";
+            document_stale: "document_stale";
+            driver_failed: "driver_failed";
+            frame_stale: "frame_stale";
+            invalid_action: "invalid_action";
+            locator_ambiguous: "locator_ambiguous";
+            locator_not_found: "locator_not_found";
+            machine_locked: "machine_locked";
+            observation_stale: "observation_stale";
+            operation_conflict: "operation_conflict";
+            outcome_unknown: "outcome_unknown";
+            permission_denied: "permission_denied";
+            resource_not_found: "resource_not_found";
+            resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
+            target_not_found: "target_not_found";
+            target_stale: "target_stale";
+            timeout: "timeout";
+            unsupported: "unsupported";
+        }>;
+        message: z.ZodString;
+        retryable: z.ZodBoolean;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ComputerNativeReceipt = z.infer<typeof ComputerNativeReceipt>;
+export declare const ComputerOperationCommand: z.ZodUnion<readonly [z.ZodObject<{
+    operationId: z.ZodString;
+    tool: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    protocolVersion: z.ZodLiteral<1>;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodNull;
+    actor: z.ZodObject<{
+        kind: z.ZodEnum<{
+            agent: "agent";
+            human: "human";
+            system: "system";
+        }>;
+        subjectId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+        turnId: z.ZodOptional<z.ZodString>;
+        attemptId: z.ZodOptional<z.ZodString>;
+        executionGeneration: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    secretValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodString;
+    expectedTargetGeneration: z.ZodString;
+    expectedObservationId: z.ZodNullable<z.ZodString>;
+    expectedFrameId: z.ZodNullable<z.ZodString>;
+    actor: z.ZodObject<{
+        kind: z.ZodEnum<{
+            agent: "agent";
+            human: "human";
+            system: "system";
+        }>;
+        subjectId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+        turnId: z.ZodOptional<z.ZodString>;
+        attemptId: z.ZodOptional<z.ZodString>;
+        executionGeneration: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    action: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"semantic">;
+        locator: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ref">;
+            ref: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"role">;
+            role: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"label">;
+            text: z.ZodString;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"text">;
+            text: z.ZodString;
+            exact: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"identifier">;
+            value: z.ZodString;
+        }, z.core.$strict>], "kind">;
+        action: z.ZodEnum<{
+            collapse: "collapse";
+            decrement: "decrement";
+            deselect: "deselect";
+            expand: "expand";
+            focus: "focus";
+            increment: "increment";
+            invoke: "invoke";
+            scroll_into_view: "scroll_into_view";
+            select: "select";
+            set_value: "set_value";
+            show_menu: "show_menu";
+        }>;
+        value: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"pointer">;
+        frameId: z.ZodString;
+        action: z.ZodEnum<{
+            click: "click";
+            double_click: "double_click";
+            drag: "drag";
+            move: "move";
+            scroll: "scroll";
+        }>;
+        x: z.ZodNumber;
+        y: z.ZodNumber;
+        endX: z.ZodOptional<z.ZodNumber>;
+        endY: z.ZodOptional<z.ZodNumber>;
+        deltaX: z.ZodOptional<z.ZodNumber>;
+        deltaY: z.ZodOptional<z.ZodNumber>;
+        button: z.ZodOptional<z.ZodEnum<{
+            left: "left";
+            middle: "middle";
+            right: "right";
+        }>>;
+        clickCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>>;
+        continuationOfOperationId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"keyboard">;
+        action: z.ZodEnum<{
+            press: "press";
+            type: "type";
+        }>;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"clipboard">;
+        operation: z.ZodEnum<{
+            clear: "clear";
+            copy: "copy";
+            paste: "paste";
+            write: "write";
+        }>;
+        text: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"focus">;
+        targetId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"launch">;
+        applicationId: z.ZodString;
+    }, z.core.$strict>], "type">;
+    secretValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>]>;
+export type ComputerOperationCommand = z.infer<typeof ComputerOperationCommand>;
+export declare const ComputerOperationReceipt: z.ZodUnion<readonly [z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodNull;
+    state: z.ZodEnum<{
+        completed: "completed";
+        dispatched: "dispatched";
+        failed: "failed";
+        outcome_unknown: "outcome_unknown";
+        prepared: "prepared";
+    }>;
+    dispatchedAt: z.ZodNullable<z.ZodString>;
+    settledAt: z.ZodNullable<z.ZodString>;
+    observation: z.ZodNullable<z.ZodObject<{
+        target: z.ZodNull;
+        computerSessionId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        tool: z.ZodString;
+        result: z.ZodObject<{
+            content: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            structuredContent: z.ZodOptional<z.ZodUnknown>;
+            isError: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$loose>;
+        outcome: z.ZodEnum<{
+            completed: "completed";
+            failed: "failed";
+            outcome_unknown: "outcome_unknown";
+        }>;
+        error: z.ZodNullable<z.ZodObject<{
+            code: z.ZodEnum<{
+                attempt_stale: "attempt_stale";
+                controller_lost: "controller_lost";
+                controller_stale: "controller_stale";
+                document_stale: "document_stale";
+                driver_failed: "driver_failed";
+                frame_stale: "frame_stale";
+                invalid_action: "invalid_action";
+                locator_ambiguous: "locator_ambiguous";
+                locator_not_found: "locator_not_found";
+                machine_locked: "machine_locked";
+                observation_stale: "observation_stale";
+                operation_conflict: "operation_conflict";
+                outcome_unknown: "outcome_unknown";
+                permission_denied: "permission_denied";
+                resource_not_found: "resource_not_found";
+                resource_unavailable: "resource_unavailable";
+                tab_crashed: "tab_crashed";
+                tab_not_responding: "tab_not_responding";
+                target_not_found: "target_not_found";
+                target_stale: "target_stale";
+                timeout: "timeout";
+                unsupported: "unsupported";
+            }>;
+            message: z.ZodString;
+            retryable: z.ZodBoolean;
+            details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    error: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            attempt_stale: "attempt_stale";
+            controller_lost: "controller_lost";
+            controller_stale: "controller_stale";
+            document_stale: "document_stale";
+            driver_failed: "driver_failed";
+            frame_stale: "frame_stale";
+            invalid_action: "invalid_action";
+            locator_ambiguous: "locator_ambiguous";
+            locator_not_found: "locator_not_found";
+            machine_locked: "machine_locked";
+            observation_stale: "observation_stale";
+            operation_conflict: "operation_conflict";
+            outcome_unknown: "outcome_unknown";
+            permission_denied: "permission_denied";
+            resource_not_found: "resource_not_found";
+            resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
+            target_not_found: "target_not_found";
+            target_stale: "target_stale";
+            timeout: "timeout";
+            unsupported: "unsupported";
+        }>;
+        message: z.ZodString;
+        retryable: z.ZodBoolean;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    targetId: z.ZodString;
+    state: z.ZodEnum<{
+        completed: "completed";
+        dispatched: "dispatched";
+        failed: "failed";
+        outcome_unknown: "outcome_unknown";
+        prepared: "prepared";
+    }>;
+    dispatchedAt: z.ZodNullable<z.ZodString>;
+    settledAt: z.ZodNullable<z.ZodString>;
+    observation: z.ZodNullable<z.ZodObject<{
+        protocolVersion: z.ZodLiteral<1>;
+        observationId: z.ZodString;
+        computerSessionId: z.ZodString;
+        target: z.ZodObject<{
+            id: z.ZodString;
+            computerSessionId: z.ZodString;
+            controllerGeneration: z.ZodString;
+            targetGeneration: z.ZodString;
+            kind: z.ZodEnum<{
+                app: "app";
+                screen: "screen";
+                window: "window";
+            }>;
+            applicationId: z.ZodNullable<z.ZodString>;
+            processId: z.ZodNullable<z.ZodNumber>;
+            title: z.ZodString;
+            bounds: z.ZodNullable<z.ZodObject<{
+                x: z.ZodNumber;
+                y: z.ZodNumber;
+                width: z.ZodNumber;
+                height: z.ZodNumber;
+            }, z.core.$strict>>;
+            focused: z.ZodBoolean;
+        }, z.core.$strict>;
+        frameId: z.ZodNullable<z.ZodString>;
+        semantic: z.ZodNullable<z.ZodUnion<readonly [z.ZodObject<{
+            kind: z.ZodLiteral<"snapshot">;
+            roots: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+            nodeCount: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"diff">;
+            baseObservationId: z.ZodString;
+            removedRefs: z.ZodArray<z.ZodString>;
+            changed: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+        }, z.core.$strict>]>>;
+        screenshot: z.ZodNullable<z.ZodObject<{
+            available: z.ZodLiteral<true>;
+            artifactId: z.ZodString;
+            kind: z.ZodEnum<{
+                assistant_completion: "assistant_completion";
+                browser_screenshot: "browser_screenshot";
+                computer_screenshot: "computer_screenshot";
+                event_media: "event_media";
+                file: "file";
+                generated_image: "generated_image";
+                generated_video: "generated_video";
+                internal_update: "internal_update";
+                tool_result: "tool_result";
+            }>;
+            contentType: z.ZodString;
+            originalBytes: z.ZodNumber;
+            sha256: z.ZodString;
+            retainedAt: z.ZodString;
+            dimensions: z.ZodOptional<z.ZodObject<{
+                width: z.ZodNumber;
+                height: z.ZodNumber;
+            }, z.core.$strict>>;
+            retention: z.ZodUnion<readonly [z.ZodObject<{
+                policy: z.ZodLiteral<"workspace_file">;
+                expiresAt: z.ZodNull;
+            }, z.core.$strict>, z.ZodObject<{
+                policy: z.ZodLiteral<"session_screenshot">;
+                expiresAt: z.ZodString;
+            }, z.core.$strict>]>;
+            retrieval: z.ZodObject<{
+                method: z.ZodLiteral<"GET">;
+                path: z.ZodString;
+                acceptRanges: z.ZodLiteral<"bytes">;
+                maxRangeBytes: z.ZodNumber;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        focusedRef: z.ZodNullable<z.ZodString>;
+        changedRegions: z.ZodArray<z.ZodObject<{
+            x: z.ZodNumber;
+            y: z.ZodNumber;
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strict>>;
+        observedAt: z.ZodString;
+    }, z.core.$strict>>;
+    error: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            attempt_stale: "attempt_stale";
+            controller_lost: "controller_lost";
+            controller_stale: "controller_stale";
+            document_stale: "document_stale";
+            driver_failed: "driver_failed";
+            frame_stale: "frame_stale";
+            invalid_action: "invalid_action";
+            locator_ambiguous: "locator_ambiguous";
+            locator_not_found: "locator_not_found";
+            machine_locked: "machine_locked";
+            observation_stale: "observation_stale";
+            operation_conflict: "operation_conflict";
+            outcome_unknown: "outcome_unknown";
+            permission_denied: "permission_denied";
+            resource_not_found: "resource_not_found";
+            resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
+            target_not_found: "target_not_found";
+            target_stale: "target_stale";
+            timeout: "timeout";
+            unsupported: "unsupported";
+        }>;
+        message: z.ZodString;
+        retryable: z.ZodBoolean;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>]>;
+export type ComputerOperationReceipt = z.infer<typeof ComputerOperationReceipt>;
+export declare const ComputerOperationObservation: z.ZodUnion<readonly [z.ZodObject<{
+    target: z.ZodNull;
+    computerSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    tool: z.ZodString;
+    result: z.ZodObject<{
+        content: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        structuredContent: z.ZodOptional<z.ZodUnknown>;
+        isError: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$loose>;
+    outcome: z.ZodEnum<{
+        completed: "completed";
+        failed: "failed";
+        outcome_unknown: "outcome_unknown";
+    }>;
+    error: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            attempt_stale: "attempt_stale";
+            controller_lost: "controller_lost";
+            controller_stale: "controller_stale";
+            document_stale: "document_stale";
+            driver_failed: "driver_failed";
+            frame_stale: "frame_stale";
+            invalid_action: "invalid_action";
+            locator_ambiguous: "locator_ambiguous";
+            locator_not_found: "locator_not_found";
+            machine_locked: "machine_locked";
+            observation_stale: "observation_stale";
+            operation_conflict: "operation_conflict";
+            outcome_unknown: "outcome_unknown";
+            permission_denied: "permission_denied";
+            resource_not_found: "resource_not_found";
+            resource_unavailable: "resource_unavailable";
+            tab_crashed: "tab_crashed";
+            tab_not_responding: "tab_not_responding";
+            target_not_found: "target_not_found";
+            target_stale: "target_stale";
+            timeout: "timeout";
+            unsupported: "unsupported";
+        }>;
+        message: z.ZodString;
+        retryable: z.ZodBoolean;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    observationId: z.ZodString;
+    computerSessionId: z.ZodString;
+    target: z.ZodObject<{
+        id: z.ZodString;
+        computerSessionId: z.ZodString;
+        controllerGeneration: z.ZodString;
+        targetGeneration: z.ZodString;
+        kind: z.ZodEnum<{
+            app: "app";
+            screen: "screen";
+            window: "window";
+        }>;
+        applicationId: z.ZodNullable<z.ZodString>;
+        processId: z.ZodNullable<z.ZodNumber>;
+        title: z.ZodString;
+        bounds: z.ZodNullable<z.ZodObject<{
+            x: z.ZodNumber;
+            y: z.ZodNumber;
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strict>>;
+        focused: z.ZodBoolean;
+    }, z.core.$strict>;
+    frameId: z.ZodNullable<z.ZodString>;
+    semantic: z.ZodNullable<z.ZodUnion<readonly [z.ZodObject<{
+        kind: z.ZodLiteral<"snapshot">;
+        roots: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+        nodeCount: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"diff">;
+        baseObservationId: z.ZodString;
+        removedRefs: z.ZodArray<z.ZodString>;
+        changed: z.ZodArray<z.ZodType<InteractionSemanticNodeValue, unknown, z.core.$ZodTypeInternals<InteractionSemanticNodeValue, unknown>>>;
+    }, z.core.$strict>]>>;
+    screenshot: z.ZodNullable<z.ZodObject<{
+        available: z.ZodLiteral<true>;
+        artifactId: z.ZodString;
+        kind: z.ZodEnum<{
+            assistant_completion: "assistant_completion";
+            browser_screenshot: "browser_screenshot";
+            computer_screenshot: "computer_screenshot";
+            event_media: "event_media";
+            file: "file";
+            generated_image: "generated_image";
+            generated_video: "generated_video";
+            internal_update: "internal_update";
+            tool_result: "tool_result";
+        }>;
+        contentType: z.ZodString;
+        originalBytes: z.ZodNumber;
+        sha256: z.ZodString;
+        retainedAt: z.ZodString;
+        dimensions: z.ZodOptional<z.ZodObject<{
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strict>>;
+        retention: z.ZodUnion<readonly [z.ZodObject<{
+            policy: z.ZodLiteral<"workspace_file">;
+            expiresAt: z.ZodNull;
+        }, z.core.$strict>, z.ZodObject<{
+            policy: z.ZodLiteral<"session_screenshot">;
+            expiresAt: z.ZodString;
+        }, z.core.$strict>]>;
+        retrieval: z.ZodObject<{
+            method: z.ZodLiteral<"GET">;
+            path: z.ZodString;
+            acceptRanges: z.ZodLiteral<"bytes">;
+            maxRangeBytes: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    focusedRef: z.ZodNullable<z.ZodString>;
+    changedRegions: z.ZodArray<z.ZodObject<{
+        x: z.ZodNumber;
+        y: z.ZodNumber;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+    }, z.core.$strict>>;
+    observedAt: z.ZodString;
+}, z.core.$strict>]>;
+export type ComputerOperationObservation = z.infer<typeof ComputerOperationObservation>;
+export declare class InteractionSecretValueError extends Error {
+    constructor(message: string);
+}
+/** Replace each reference with its value from `values` and remove escapes.
+ * Throws when a reference has no value or a candidate is malformed; the
+ * message never contains a value. */
+export declare function substituteSecretText(text: string, values: InteractionSecretValues): string;
+/** The text fields of a browser action that may carry secret references. */
+export declare function browserActionSecretTexts(action: BrowserAction | BrowserActionBatch): string[];
+/** The action to dispatch: references replaced when the command carries
+ * `secretValues`; otherwise the action exactly as written (literal text). */
+export declare function materializeBrowserActionSecrets(command: Pick<BrowserActionCommand, "action" | "secretValues">): BrowserAction | BrowserActionBatch;
+/** The text fields of a computer action that may carry secret references. */
+export declare function computerActionSecretTexts(action: ComputerAction): string[];
+export declare function materializeComputerActionSecrets(command: Pick<ComputerActionCommand, "action" | "secretValues">): ComputerAction;
+/** Native desktop call arguments with every reference in every string replaced. */
+export declare function materializeComputerNativeSecrets(command: Pick<ComputerNativeCommand, "arguments" | "secretValues">): Record<string, unknown>;
+/** The command without its private side map: what digests and journals bind. */
+export declare function withoutInteractionSecretValues<T extends {
+    secretValues?: unknown;
+}>(command: T): Omit<T, "secretValues">;
+export declare const INTERACTION_REDACTED_SECRET = "[secret]";
+/** Values shorter than this are not searched for: they would redact noise. */
+export declare const INTERACTION_MIN_REDACTED_SECRET_CHARS = 4;
+/** Deep copy with every occurrence of a supplied secret value in a text
+ * string replaced by `[secret]`. Used on results a driver returns after
+ * dispatching materialized values (CUA tools echo typed text; desktop
+ * accessibility trees expose field values). */
+export declare function redactInteractionSecretValues<T>(value: T, secretValues: InteractionSecretValues | undefined): T;
+/** A WebAuthn credential as the virtual authenticator holds it. Binary fields
+ * use the CDP encoding (base64). `privateKey` is PKCS#8. */
+export declare const BrowserPasskeyCredentialMaterial: z.ZodObject<{
+    rpId: z.ZodString;
+    credentialId: z.ZodString;
+    userHandle: z.ZodNullable<z.ZodString>;
+    userName: z.ZodNullable<z.ZodString>;
+    userDisplayName: z.ZodNullable<z.ZodString>;
+    privateKey: z.ZodString;
+    signCount: z.ZodNumber;
+}, z.core.$strict>;
+export type BrowserPasskeyCredentialMaterial = z.infer<typeof BrowserPasskeyCredentialMaterial>;
+/** A vault passkey item loaded into the session's authenticators. */
+export declare const BrowserPasskeyCredential: z.ZodObject<{
+    rpId: z.ZodString;
+    credentialId: z.ZodString;
+    userHandle: z.ZodNullable<z.ZodString>;
+    userName: z.ZodNullable<z.ZodString>;
+    userDisplayName: z.ZodNullable<z.ZodString>;
+    privateKey: z.ZodString;
+    signCount: z.ZodNumber;
+    itemId: z.ZodString;
+}, z.core.$strict>;
+export type BrowserPasskeyCredential = z.infer<typeof BrowserPasskeyCredential>;
+export declare const BrowserPasskeyEvent: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"registered">;
+    eventId: z.ZodString;
+    occurredAt: z.ZodString;
+    targetId: z.ZodString;
+    origin: z.ZodNullable<z.ZodString>;
+    credential: z.ZodObject<{
+        rpId: z.ZodString;
+        credentialId: z.ZodString;
+        userHandle: z.ZodNullable<z.ZodString>;
+        userName: z.ZodNullable<z.ZodString>;
+        userDisplayName: z.ZodNullable<z.ZodString>;
+        privateKey: z.ZodString;
+        signCount: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"asserted">;
+    eventId: z.ZodString;
+    occurredAt: z.ZodString;
+    targetId: z.ZodString;
+    rpId: z.ZodString;
+    credentialId: z.ZodString;
+    itemId: z.ZodNullable<z.ZodString>;
+    signCount: z.ZodNumber;
+}, z.core.$strict>], "type">;
+export type BrowserPasskeyEvent = z.infer<typeof BrowserPasskeyEvent>;
+export declare const BROWSER_MAX_PASSKEY_CREDENTIALS = 256;
+export declare const BROWSER_MAX_PASSKEY_EVENTS = 256;
+/** Controller-private. `credentials` replaces the loaded set (null keeps it).
+ * Events stay pending in browserd until a later sync acknowledges them. */
+export declare const BrowserPasskeySyncRequest: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    credentials: z.ZodNullable<z.ZodArray<z.ZodObject<{
+        rpId: z.ZodString;
+        credentialId: z.ZodString;
+        userHandle: z.ZodNullable<z.ZodString>;
+        userName: z.ZodNullable<z.ZodString>;
+        userDisplayName: z.ZodNullable<z.ZodString>;
+        privateKey: z.ZodString;
+        signCount: z.ZodNumber;
+        itemId: z.ZodString;
+    }, z.core.$strict>>>;
+    acknowledgeEventIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type BrowserPasskeySyncRequest = z.infer<typeof BrowserPasskeySyncRequest>;
+export declare const BrowserPasskeySyncResponse: z.ZodObject<{
+    browserSessionId: z.ZodString;
+    controllerGeneration: z.ZodString;
+    authenticators: z.ZodNumber;
+    events: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"registered">;
+        eventId: z.ZodString;
+        occurredAt: z.ZodString;
+        targetId: z.ZodString;
+        origin: z.ZodNullable<z.ZodString>;
+        credential: z.ZodObject<{
+            rpId: z.ZodString;
+            credentialId: z.ZodString;
+            userHandle: z.ZodNullable<z.ZodString>;
+            userName: z.ZodNullable<z.ZodString>;
+            userDisplayName: z.ZodNullable<z.ZodString>;
+            privateKey: z.ZodString;
+            signCount: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"asserted">;
+        eventId: z.ZodString;
+        occurredAt: z.ZodString;
+        targetId: z.ZodString;
+        rpId: z.ZodString;
+        credentialId: z.ZodString;
+        itemId: z.ZodNullable<z.ZodString>;
+        signCount: z.ZodNumber;
+    }, z.core.$strict>], "type">>;
+}, z.core.$strict>;
+export type BrowserPasskeySyncResponse = z.infer<typeof BrowserPasskeySyncResponse>;