@qoniai/qoni 0.6.0 → 0.8.0

package/dist/index.d.cts

@@ -138,11 +138,16 @@ interface UserRef {
 interface DelegateTokenBaseInput {
     /** Audit label for this delegation. Defaults to "sdk". */
     agent?: string;
+    /** Compatibility alias for agent. Supplying conflicting labels is an error. */
+    agentKey?: string;
     /** Fine-grained scopes. May be combined with `products`. */
     scopes?: readonly string[];
     /** Per-product authorization sugar — expands to the product's scope set. */
     products?: readonly QoniProductName[];
+    /** Integer seconds (60–86400), or a whole-number duration such as "15m". */
     expiresIn?: string | number;
+    /** Not supported: the delegation service does not enforce a deny policy. */
+    deniedScopes?: never;
     idempotencyKey?: string;
 }
 /**
@@ -156,11 +161,11 @@ type DelegateTokenSilentInput = DelegateTokenBaseInput & {
     state?: string;
 } & ({
     user: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId?: string;
 } | {
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId: string;
 });
 interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
@@ -168,7 +173,7 @@ interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
     redirectUri: string;
     state: string;
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id; optional for interactive authorization. */
     userId?: string;
 }
 type DelegateTokenInput = DelegateTokenSilentInput | DelegateTokenInteractiveInput;
@@ -363,7 +368,70 @@ interface Interaction<T extends InteractionType = InteractionType> {
  * supplies this (token + run addressing already bound); the handle below uses
  * it to invoke `action.endpoint` without the consumer touching HTTP.
  */
-type InteractionActionPoster = (action: Action, body: JsonObject | undefined) => Promise<void>;
+type InteractionActionPoster = (action: Action, body: JsonObject | undefined, options?: {
+    requiredScopes?: readonly string[];
+}) => Promise<unknown>;
+/** Options for {@link InteractionHandle.openLogin}. */
+interface OpenLoginOptions {
+    /**
+     * Site to sign in to — one of `interaction.payload.sites[].siteId`. May be
+     * omitted when the interaction lists exactly one site.
+     */
+    siteId?: string;
+    /** Re-login an existing browser profile in place instead of creating one. */
+    profileId?: string;
+}
+/** Interactive login session started by {@link InteractionHandle.openLogin}. */
+interface OpenLoginResult {
+    profileId: string;
+    siteId: string;
+    /** Login browser session the user signs in through. */
+    sessionId: string;
+    /** Live view URL of the login browser to show to the user. */
+    liveUrl: string;
+    /** Unmodified response body (escape hatch — shape may evolve with the API). */
+    raw: JsonObject;
+    /**
+     * Persist the login into the profile after the user signs in
+     * (`POST /profiles/{profileId}/confirm`). Confirming ends this login
+     * session and closes its browser, whatever the outcome:
+     *
+     * - `active: true` — the login is saved; call
+     *   {@link InteractionHandle.confirmSignedIn}.
+     * - `active: false` with `probeResult: "no_session"` — the backend no longer
+     *   holds the session (it may already have saved the login automatically, or
+     *   restarted). Call `confirmSignedIn()`: the agent rechecks the site and
+     *   raises a new `site_login` interaction if it is still signed out.
+     * - Rejects with a `QoniError` whose `code` is `no_pending_login` (HTTP 409)
+     *   when the backend has no pending login for this profile: the session
+     *   already ended on providers that report it this way, or the profile no
+     *   longer exists for this user. Handle it like `no_session`: call
+     *   `confirmSignedIn()`, and the agent asks again if it is still signed out.
+     * - `active: false` with any other `probeResult` — the user was not signed
+     *   in. Start a new session with `openLogin({ siteId, profileId })` and show
+     *   its new `liveUrl`; the old one no longer works.
+     *
+     * Requires `QoniScopes.SITE_LOGIN_CONFIRM`.
+     */
+    confirm(options?: ConfirmLoginOptions): Promise<ConfirmLoginResult>;
+}
+/** Options for {@link OpenLoginResult.confirm}. */
+interface ConfirmLoginOptions {
+    /** Optional human-readable label stored on the profile. */
+    displayLabel?: string;
+}
+/** Result of {@link OpenLoginResult.confirm}. */
+interface ConfirmLoginResult {
+    profileId: string;
+    /** True only when the profile is now `active` (the login was captured). */
+    active: boolean;
+    /** Profile state after confirmation: `active`, or `pending_login` when no signed-in session was detected. */
+    state: string;
+    /** Outcome of the backend's signed-in probe, for example `no_session`. */
+    probeResult: string;
+    /** Unmodified response body (escape hatch — shape may evolve with the API). */
+    raw: JsonObject;
+}
 /**
  * Typed wrapper over an {@link Interaction} that exposes one method per
  * action kind. Each method finds the matching declared action and posts to its
@@ -372,6 +440,7 @@ type InteractionActionPoster = (action: Action, body: JsonObject | undefined) =>
  * backend offered it).
  */
 declare class InteractionHandle<T extends InteractionType = InteractionType> {
+    #private;
     private readonly post;
     readonly interaction: Interaction<T>;
     constructor(interaction: Interaction<T>, post: InteractionActionPoster);
@@ -389,8 +458,16 @@ declare class InteractionHandle<T extends InteractionType = InteractionType> {
     confirm(): Promise<void>;
     /** Reject a pending confirmation. */
     reject(): Promise<void>;
-    /** Open the login surface for a site_login interaction. */
-    openLogin(): Promise<void>;
+    /**
+     * Start an interactive login session for a `site_login` interaction. The
+     * backend needs the site to sign in to: pass `siteId`, or omit it when the
+     * interaction lists exactly one site. Show `liveUrl` to the user; when they
+     * finish, call `confirm()` on the result to save the login, and act on its
+     * outcome (see {@link OpenLoginResult.confirm}) before {@link confirmSignedIn}.
+     * The delegation must include `QoniScopes.SITE_LOGIN_REQUEST` and
+     * `QoniScopes.SITE_LOGIN_CONFIRM`; the AccessKey policy must allow both.
+     */
+    openLogin(options?: OpenLoginOptions): Promise<OpenLoginResult>;
     /** Tell the agent the user has finished signing in. */
     confirmSignedIn(): Promise<void>;
     /** Connect to the live browser for a take_control interaction. */
@@ -663,7 +740,9 @@ interface RunWireOps {
      * Interaction model's `actions[]` carry the endpoint + method, so the SDK
      * never hard-codes a HITL route — it forwards what the backend declared.
      */
-    postAction(action: Action, body: JsonObject | undefined): Promise<void>;
+    postAction(action: Action, body: JsonObject | undefined, options?: {
+        requiredScopes?: readonly string[];
+    }): Promise<unknown>;
     cancel(reason?: string): Promise<JsonObject>;
     /** Products without artifacts leave this undefined → `result.artifacts` is []. */
     listArtifacts?(signal?: AbortSignal): Promise<Artifact[]>;
@@ -1000,7 +1079,13 @@ type GenAuthUserDeleteBatchInput = GenAuthAdminTokenOverrideInput & {
 };
 declare function createGenAuthNamespace(transport: QoniTransport, options?: {
     adminTokenFor?: GenAuthAdminTokenProvider;
+    delegateTokenFor?: (input: DelegateTokenInput) => Promise<QoniResponse<DelegateAgentResponse>>;
 }): {
+    delegateAgent: {
+        (input: DelegateTokenSilentInput): Promise<DelegateTokenSilentResponse>;
+        (input: DelegateTokenInteractiveInput): Promise<InteractiveDelegationResponse>;
+        (input: DelegateTokenInput): Promise<DelegateAgentResponse>;
+    };
     userInfo: <T = unknown>(input: GenAuthAccessTokenInput) => Promise<QoniResponse<T>>;
     jwks: <T = unknown>() => Promise<QoniResponse<T>>;
     discovery: <T = unknown>() => Promise<QoniResponse<T>>;
@@ -1090,10 +1175,12 @@ interface MonitorRunsOptions {
 /** A monitor's check cadence. */
 type MonitorSchedule = {
     kind: "cron";
-    expr: string;
+    expr: string; /** IANA time zone for the cron expression. */
+    tz?: string;
 } | {
     kind: "interval";
     intervalSeconds: number;
+    tz?: string;
 };
 /**
  * Fields to change on a monitor via {@link MonitorHandle.refine}. Pass any
@@ -1115,7 +1202,9 @@ interface MonitorWireOps {
     update(input: JsonObject): Promise<JsonObject>;
     runNow(): Promise<JsonObject>;
     streamEvents(opts: MonitorEventsOptions): AsyncIterable<QoniEvent<unknown>>;
-    postAction(action: Action, body: JsonObject | undefined): Promise<void>;
+    postAction(action: Action, body: JsonObject | undefined, options?: {
+        requiredScopes?: readonly string[];
+    }): Promise<unknown>;
     listRuns(opts: MonitorRunsOptions): Promise<JsonObject>;
     getRun(runId: string): Promise<JsonObject>;
     delete(): Promise<void>;
@@ -1388,6 +1477,8 @@ declare const QoniScopes: {
     readonly DEEP_RESEARCH_MANAGE: "webagent.deep_research:manage";
     readonly TRACK_READ: "webagent.track:read";
     readonly TRACK_MANAGE: "webagent.track:manage";
+    readonly SITE_LOGIN_REQUEST: "webagent.site_login:request";
+    readonly SITE_LOGIN_CONFIRM: "webagent.site_login:confirm";
 };
 type QoniScope = (typeof QoniScopes)[keyof typeof QoniScopes];
 /** Product names accepted by `delegateToken({ products })`. */
@@ -1407,4 +1498,4 @@ declare const QoniScopeBundles: {
     readonly TRACK: readonly ["webagent.track:read", "webagent.track:manage"];
 };
 
-export { type Action, type ActionKind, ActionKinds, type Artifact, type BrowserProxyOptions, type BrowserbaseRegion, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunBrowserLiveUrlChangedData, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };
+export { type Action, type ActionKind, ActionKinds, type Artifact, type BrowserProxyOptions, type BrowserbaseRegion, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmLoginOptions, type ConfirmLoginResult, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, type OpenLoginOptions, type OpenLoginResult, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunBrowserLiveUrlChangedData, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };

package/dist/index.d.ts

@@ -138,11 +138,16 @@ interface UserRef {
 interface DelegateTokenBaseInput {
     /** Audit label for this delegation. Defaults to "sdk". */
     agent?: string;
+    /** Compatibility alias for agent. Supplying conflicting labels is an error. */
+    agentKey?: string;
     /** Fine-grained scopes. May be combined with `products`. */
     scopes?: readonly string[];
     /** Per-product authorization sugar — expands to the product's scope set. */
     products?: readonly QoniProductName[];
+    /** Integer seconds (60–86400), or a whole-number duration such as "15m". */
     expiresIn?: string | number;
+    /** Not supported: the delegation service does not enforce a deny policy. */
+    deniedScopes?: never;
     idempotencyKey?: string;
 }
 /**
@@ -156,11 +161,11 @@ type DelegateTokenSilentInput = DelegateTokenBaseInput & {
     state?: string;
 } & ({
     user: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId?: string;
 } | {
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId: string;
 });
 interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
@@ -168,7 +173,7 @@ interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
     redirectUri: string;
     state: string;
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id; optional for interactive authorization. */
     userId?: string;
 }
 type DelegateTokenInput = DelegateTokenSilentInput | DelegateTokenInteractiveInput;
@@ -363,7 +368,70 @@ interface Interaction<T extends InteractionType = InteractionType> {
  * supplies this (token + run addressing already bound); the handle below uses
  * it to invoke `action.endpoint` without the consumer touching HTTP.
  */
-type InteractionActionPoster = (action: Action, body: JsonObject | undefined) => Promise<void>;
+type InteractionActionPoster = (action: Action, body: JsonObject | undefined, options?: {
+    requiredScopes?: readonly string[];
+}) => Promise<unknown>;
+/** Options for {@link InteractionHandle.openLogin}. */
+interface OpenLoginOptions {
+    /**
+     * Site to sign in to — one of `interaction.payload.sites[].siteId`. May be
+     * omitted when the interaction lists exactly one site.
+     */
+    siteId?: string;
+    /** Re-login an existing browser profile in place instead of creating one. */
+    profileId?: string;
+}
+/** Interactive login session started by {@link InteractionHandle.openLogin}. */
+interface OpenLoginResult {
+    profileId: string;
+    siteId: string;
+    /** Login browser session the user signs in through. */
+    sessionId: string;
+    /** Live view URL of the login browser to show to the user. */
+    liveUrl: string;
+    /** Unmodified response body (escape hatch — shape may evolve with the API). */
+    raw: JsonObject;
+    /**
+     * Persist the login into the profile after the user signs in
+     * (`POST /profiles/{profileId}/confirm`). Confirming ends this login
+     * session and closes its browser, whatever the outcome:
+     *
+     * - `active: true` — the login is saved; call
+     *   {@link InteractionHandle.confirmSignedIn}.
+     * - `active: false` with `probeResult: "no_session"` — the backend no longer
+     *   holds the session (it may already have saved the login automatically, or
+     *   restarted). Call `confirmSignedIn()`: the agent rechecks the site and
+     *   raises a new `site_login` interaction if it is still signed out.
+     * - Rejects with a `QoniError` whose `code` is `no_pending_login` (HTTP 409)
+     *   when the backend has no pending login for this profile: the session
+     *   already ended on providers that report it this way, or the profile no
+     *   longer exists for this user. Handle it like `no_session`: call
+     *   `confirmSignedIn()`, and the agent asks again if it is still signed out.
+     * - `active: false` with any other `probeResult` — the user was not signed
+     *   in. Start a new session with `openLogin({ siteId, profileId })` and show
+     *   its new `liveUrl`; the old one no longer works.
+     *
+     * Requires `QoniScopes.SITE_LOGIN_CONFIRM`.
+     */
+    confirm(options?: ConfirmLoginOptions): Promise<ConfirmLoginResult>;
+}
+/** Options for {@link OpenLoginResult.confirm}. */
+interface ConfirmLoginOptions {
+    /** Optional human-readable label stored on the profile. */
+    displayLabel?: string;
+}
+/** Result of {@link OpenLoginResult.confirm}. */
+interface ConfirmLoginResult {
+    profileId: string;
+    /** True only when the profile is now `active` (the login was captured). */
+    active: boolean;
+    /** Profile state after confirmation: `active`, or `pending_login` when no signed-in session was detected. */
+    state: string;
+    /** Outcome of the backend's signed-in probe, for example `no_session`. */
+    probeResult: string;
+    /** Unmodified response body (escape hatch — shape may evolve with the API). */
+    raw: JsonObject;
+}
 /**
  * Typed wrapper over an {@link Interaction} that exposes one method per
  * action kind. Each method finds the matching declared action and posts to its
@@ -372,6 +440,7 @@ type InteractionActionPoster = (action: Action, body: JsonObject | undefined) =>
  * backend offered it).
  */
 declare class InteractionHandle<T extends InteractionType = InteractionType> {
+    #private;
     private readonly post;
     readonly interaction: Interaction<T>;
     constructor(interaction: Interaction<T>, post: InteractionActionPoster);
@@ -389,8 +458,16 @@ declare class InteractionHandle<T extends InteractionType = InteractionType> {
     confirm(): Promise<void>;
     /** Reject a pending confirmation. */
     reject(): Promise<void>;
-    /** Open the login surface for a site_login interaction. */
-    openLogin(): Promise<void>;
+    /**
+     * Start an interactive login session for a `site_login` interaction. The
+     * backend needs the site to sign in to: pass `siteId`, or omit it when the
+     * interaction lists exactly one site. Show `liveUrl` to the user; when they
+     * finish, call `confirm()` on the result to save the login, and act on its
+     * outcome (see {@link OpenLoginResult.confirm}) before {@link confirmSignedIn}.
+     * The delegation must include `QoniScopes.SITE_LOGIN_REQUEST` and
+     * `QoniScopes.SITE_LOGIN_CONFIRM`; the AccessKey policy must allow both.
+     */
+    openLogin(options?: OpenLoginOptions): Promise<OpenLoginResult>;
     /** Tell the agent the user has finished signing in. */
     confirmSignedIn(): Promise<void>;
     /** Connect to the live browser for a take_control interaction. */
@@ -663,7 +740,9 @@ interface RunWireOps {
      * Interaction model's `actions[]` carry the endpoint + method, so the SDK
      * never hard-codes a HITL route — it forwards what the backend declared.
      */
-    postAction(action: Action, body: JsonObject | undefined): Promise<void>;
+    postAction(action: Action, body: JsonObject | undefined, options?: {
+        requiredScopes?: readonly string[];
+    }): Promise<unknown>;
     cancel(reason?: string): Promise<JsonObject>;
     /** Products without artifacts leave this undefined → `result.artifacts` is []. */
     listArtifacts?(signal?: AbortSignal): Promise<Artifact[]>;
@@ -1000,7 +1079,13 @@ type GenAuthUserDeleteBatchInput = GenAuthAdminTokenOverrideInput & {
 };
 declare function createGenAuthNamespace(transport: QoniTransport, options?: {
     adminTokenFor?: GenAuthAdminTokenProvider;
+    delegateTokenFor?: (input: DelegateTokenInput) => Promise<QoniResponse<DelegateAgentResponse>>;
 }): {
+    delegateAgent: {
+        (input: DelegateTokenSilentInput): Promise<DelegateTokenSilentResponse>;
+        (input: DelegateTokenInteractiveInput): Promise<InteractiveDelegationResponse>;
+        (input: DelegateTokenInput): Promise<DelegateAgentResponse>;
+    };
     userInfo: <T = unknown>(input: GenAuthAccessTokenInput) => Promise<QoniResponse<T>>;
     jwks: <T = unknown>() => Promise<QoniResponse<T>>;
     discovery: <T = unknown>() => Promise<QoniResponse<T>>;
@@ -1090,10 +1175,12 @@ interface MonitorRunsOptions {
 /** A monitor's check cadence. */
 type MonitorSchedule = {
     kind: "cron";
-    expr: string;
+    expr: string; /** IANA time zone for the cron expression. */
+    tz?: string;
 } | {
     kind: "interval";
     intervalSeconds: number;
+    tz?: string;
 };
 /**
  * Fields to change on a monitor via {@link MonitorHandle.refine}. Pass any
@@ -1115,7 +1202,9 @@ interface MonitorWireOps {
     update(input: JsonObject): Promise<JsonObject>;
     runNow(): Promise<JsonObject>;
     streamEvents(opts: MonitorEventsOptions): AsyncIterable<QoniEvent<unknown>>;
-    postAction(action: Action, body: JsonObject | undefined): Promise<void>;
+    postAction(action: Action, body: JsonObject | undefined, options?: {
+        requiredScopes?: readonly string[];
+    }): Promise<unknown>;
     listRuns(opts: MonitorRunsOptions): Promise<JsonObject>;
     getRun(runId: string): Promise<JsonObject>;
     delete(): Promise<void>;
@@ -1388,6 +1477,8 @@ declare const QoniScopes: {
     readonly DEEP_RESEARCH_MANAGE: "webagent.deep_research:manage";
     readonly TRACK_READ: "webagent.track:read";
     readonly TRACK_MANAGE: "webagent.track:manage";
+    readonly SITE_LOGIN_REQUEST: "webagent.site_login:request";
+    readonly SITE_LOGIN_CONFIRM: "webagent.site_login:confirm";
 };
 type QoniScope = (typeof QoniScopes)[keyof typeof QoniScopes];
 /** Product names accepted by `delegateToken({ products })`. */
@@ -1407,4 +1498,4 @@ declare const QoniScopeBundles: {
     readonly TRACK: readonly ["webagent.track:read", "webagent.track:manage"];
 };
 
-export { type Action, type ActionKind, ActionKinds, type Artifact, type BrowserProxyOptions, type BrowserbaseRegion, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunBrowserLiveUrlChangedData, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };
+export { type Action, type ActionKind, ActionKinds, type Artifact, type BrowserProxyOptions, type BrowserbaseRegion, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmLoginOptions, type ConfirmLoginResult, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, type OpenLoginOptions, type OpenLoginResult, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunBrowserLiveUrlChangedData, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };