@wenathlan/devthink 2.0.12 → 2.0.14

package/bridge.js

@@ -1,1877 +0,0 @@
-/*! devthink 2.0.12 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
-
-// version.ts
-var packageversion = "2.0.12";
-var protocolmajor = 2;
-
-// types.ts
-var protocolversion = packageversion;
-var protocolmajorversion = protocolmajor;
-var pinnedprotocolversion = Object.freeze({ protocolversion, protocolmajor: protocolmajorversion });
-var actionkindids = Object.freeze([
-  "observe",
-  "inspect",
-  "extract",
-  "wait",
-  "waitfor",
-  "waittext",
-  "readattribute",
-  "readstyle",
-  "readgeometry",
-  "readvalue",
-  "readtext",
-  "readhtml",
-  "countelements",
-  "readtable",
-  "readlinks",
-  "readimages",
-  "readmeta",
-  "readforms",
-  "readstorage",
-  "highlight",
-  "tablist",
-  "windowlist",
-  "tabsnapshot",
-  "focus",
-  "scroll",
-  "hover",
-  "clickdeep",
-  "rightclick",
-  "doubleclick",
-  "scrollpage",
-  "scrollby",
-  "scrollend",
-  "scrolltop",
-  "fullscreen",
-  "zoomset",
-  "click",
-  "type",
-  "navigate",
-  "select",
-  "presskey",
-  "drag",
-  "drop",
-  "upload",
-  "clear",
-  "check",
-  "uncheck",
-  "toggle",
-  "submit",
-  "reload",
-  "back",
-  "forward",
-  "writestorage",
-  "setattribute",
-  "removeattribute",
-  "evaluate",
-  "tabcreate",
-  "tabactivate",
-  "tabclose",
-  "tabreload",
-  "windowcreate",
-  "windowclose",
-  "windowresize",
-  "downloadfile",
-  "movepointer",
-  "clickpoint",
-  "shiftclick",
-  "clicktext",
-  "clickaria",
-  "clickname",
-  "resolvexpath",
-  "typetime",
-  "appendtext",
-  "setvalue",
-  "typeedit",
-  "keyhold",
-  "keyrelease",
-  "submitsearch",
-  "selectmulti",
-  "chooseradio",
-  "setslider",
-  "setdate",
-  "setcolor",
-  "expanddetails",
-  "dismissdialog",
-  "pierceshadow",
-  "enterframe",
-  "retryaction",
-  "mapclicks",
-  "verifyvisible",
-  "verifyenabled",
-  "a11ytree",
-  "readvisible",
-  "readertree",
-  "detectlists",
-  "detecttables",
-  "readjson",
-  "watchmutate",
-  "waitquiet",
-  "watchbanner",
-  "detectinfinitescroll",
-  "detectvirtual",
-  "detectlazy",
-  "readscrollpos",
-  "readlang",
-  "readoutline",
-  "countpages",
-  "listshadow",
-  "listframes",
-  "classifypage",
-  "fingerprintsection",
-  "diffsnapshots",
-  "readselection",
-  "watchfocus",
-  "detectsticky",
-  "detectscrolllock",
-  "readopengraph",
-  "detectlanguage",
-  "deriveselector",
-  "openlink",
-  "openprivate",
-  "reloadcache",
-  "stopnav",
-  "waitload",
-  "waiturl",
-  "followlink",
-  "spanav",
-  "spawait",
-  "rewritequery",
-  "setfragment",
-  "navlist",
-  "navprofile",
-  "detecthttp",
-  "readredirects",
-  "readfinalurl",
-  "handleauth",
-  "printpdf",
-  "prefetch",
-  "preconnect",
-  "deeplink",
-  "reopentab",
-  "trailaudit",
-  "pausenav",
-  "navintent",
-  "navrate",
-  "openclipboard",
-  "checksafe",
-  "batchopen",
-  "querytabs",
-  "duplicatetab",
-  "closepattern",
-  "pintab",
-  "mutetab",
-  "movetab",
-  "movetabwindow",
-  "grouptabs",
-  "colorgroup",
-  "collapsegroup",
-  "discardtab",
-  "reloadtabs",
-  "zoomin",
-  "zoomout",
-  "watchtab",
-  "switchtab",
-  "maximizewindow",
-  "minimizewindow",
-  "restorewindow",
-  "focuswindow",
-  "scratchwindow",
-  "incognitowindow",
-  "restoretab",
-  "savelayout",
-  "restorelayout",
-  "findclones",
-  "searchtabs",
-  "badgetab",
-  "attachmeta",
-  "listaudio",
-  "reopenrun",
-  "snapshotsession",
-  "fillform",
-  "filllabel",
-  "fillplaceholder",
-  "detectfields",
-  "generatevalues",
-  "saveprofiles",
-  "asksubmit",
-  "submitform",
-  "readerrors",
-  "retryform",
-  "runwizard",
-  "selectchain",
-  "picktypeahead",
-  "pickdate",
-  "attachfile",
-  "handoffcaptcha",
-  "fillcard",
-  "fillcode",
-  "consentpassword",
-  "skiphoneypot",
-  "detectlogin",
-  "detecttemplate",
-  "scrapetable",
-  "exportcsv",
-  "exportjson",
-  "exportexcel",
-  "copytable",
-  "pushsheets",
-  "importcsv",
-  "looprows",
-  "transformvalues",
-  "deduperows",
-  "paginateextract",
-  "mergepages",
-  "stamplerows",
-  "previewgrid",
-  "streamdisk",
-  "resumeextract",
-  "logprovenance",
-  "batchdownload",
-  "pausedownload",
-  "resumedownload",
-  "verifydownload",
-  "interceptmime",
-  "exportnetlog",
-  "readclipboard",
-  "writeclipboard",
-  "copyscreen",
-  "quarantinedownload",
-  "scanvirus",
-  "namecaptures",
-  "cleanupartifacts",
-  "shotview",
-  "shotfullpage",
-  "shotelement",
-  "shotregion",
-  "contactsheet",
-  "capturepdf",
-  "recordscreen",
-  "captureaudio",
-  "captureframe",
-  "downloadimages",
-  "shotcanvas",
-  "probestream",
-  "readmedia",
-  "readassets",
-  "timelapse",
-  "convertimage",
-  "makethumbs",
-  "fetchurl",
-  "parsejson",
-  "parsehtml",
-  "callrest",
-  "callgraphql",
-  "opensocket",
-  "sendmessage",
-  "waitmessage",
-  "watchrequests",
-  "readheaders",
-  "capturebodies",
-  "subscribesse",
-  "longpoll",
-  "mapapi",
-  "extractapi",
-  "blockrequest",
-  "mockresponse",
-  "rewriteheaders",
-  "setcookies",
-  "readcookies",
-  "clearcookies",
-  "authflow",
-  "saveapikey",
-  "routeproxy",
-  "postform",
-  "postfiles",
-  "watchconsole",
-  "watcherrors",
-  "watchtasks",
-  "attachcdp",
-  "detachcdp",
-  "cdpcmd",
-  "watchcdp",
-  "setbreakpoint",
-  "stepcode",
-  "watchexpr",
-  "overridescript",
-  "measureflow",
-  "heapshot",
-  "trackmemory",
-  "profilecpu",
-  "watchshifts",
-  "traceload",
-  "annotatetrace",
-  "replaytrace",
-  "capturesourcemaps",
-  "emulatedevice",
-  "emulatenetwork",
-  "emulatelocate",
-  "setuseragent",
-  "overridepermission",
-  "blackboxscripts",
-  "persiststate",
-  "capturesession",
-  "restoresession",
-  "namedsessions",
-  "diffsessions",
-  "searchsessions",
-  "exportsessions",
-  "importsessions",
-  "composeworkflow",
-  "savetemplate",
-  "runworkflow",
-  "dryrun",
-  "delay",
-  "waitelement",
-  "compute",
-  "extractvars",
-  "listruns",
-  "condition",
-  "branch",
-  "loop",
-  "repeatuntil",
-  "whileloop",
-  "foreach",
-  "parallel",
-  "trycatch",
-  "visitrule",
-  "urlrule",
-  "menurule",
-  "keyrule",
-  "buttonrule",
-  "cronrule",
-  "intervalrule",
-  "urllistrule",
-  "webhookrule",
-  "eventrule"
-]);
-var servercontractversion = 1;
-
-// auth.ts
-function pairingcountdown(record, now) {
-  const secondsleft = Math.max(0, Math.ceil((record.code.expiresat - now) / 1e3));
-  const expired = now >= record.code.expiresat || record.code.usedat !== void 0;
-  const minutes = Math.floor(secondsleft / 60);
-  const seconds = secondsleft % 60;
-  const label = expired ? `The pairing code ${record.code.code} expired.` : `The pairing code ${record.code.code} expires in ${minutes}m ${String(seconds).padStart(2, "0")}s.`;
-  return { secondsleft, expired, label };
-}
-
-// serve.ts
-function notificationframe(method, params) {
-  return { jsonrpc: "2.0", method, ...params !== void 0 ? { params } : {} };
-}
-
-// net.ts
-function reconnectwaits(attempts, base, ceiling) {
-  const count = Math.max(0, Math.floor(attempts));
-  const waits = [];
-  let wait = Math.max(0, base);
-  for (let index = 0; index < count; index += 1) {
-    waits.push(wait);
-    const next = wait * 2;
-    wait = ceiling !== void 0 && Number.isFinite(ceiling) && ceiling >= 0 ? Math.min(next, ceiling) : next;
-  }
-  return waits;
-}
-
-// bridge.ts
-var serveroperations = ["sessioncreate", "sessionjoin", "eventpost", "eventstream"];
-var servereventtypes = ["chat", "planproposal", "planreview", "progress"];
-var pagecontentkeys = [
-  "html",
-  "content",
-  "body",
-  "textpreview",
-  "preview",
-  "dom",
-  "markup",
-  "screenshot",
-  "pagetext",
-  "outerhtml",
-  "innertext"
-];
-function contractcapabilities(version = servercontractversion) {
-  return {
-    version,
-    operations: [...serveroperations],
-    events: [...servereventtypes],
-    heartbeat: true,
-    multiplex: true
-  };
-}
-function stableopid(seed, sequence) {
-  const trimmed = seed.trim();
-  if (trimmed === "")
-    throw new Error("The operation id names its sender seed; an empty seed never correlates a reply.");
-  if (!Number.isInteger(sequence) || sequence < 1)
-    throw new Error("The operation id sequence stays a positive whole number per sender.");
-  return `op-${trimmed}-${sequence}`;
-}
-function negotiatecapabilities(ours, theirs) {
-  if (!Number.isInteger(ours.version) || ours.version < 1 || !Number.isInteger(theirs.version) || theirs.version < 1)
-    return {
-      ok: false,
-      version: 0,
-      operations: [],
-      events: [],
-      heartbeat: false,
-      multiplex: false,
-      reason: "The servercontract version stays a positive whole number on both sides of the handshake."
-    };
-  const version = Math.min(ours.version, theirs.version);
-  const operations = serveroperations.filter(
-    (operation) => ours.operations.includes(operation) && theirs.operations.includes(operation)
-  );
-  const events = servereventtypes.filter((event) => ours.events.includes(event) && theirs.events.includes(event));
-  if (version < 1)
-    return {
-      ok: false,
-      version: 0,
-      operations: [],
-      events: [],
-      heartbeat: false,
-      multiplex: false,
-      reason: "The two handshake sides share no servercontract version."
-    };
-  if (operations.length === 0)
-    return {
-      ok: false,
-      version,
-      operations: [],
-      events: [],
-      heartbeat: false,
-      multiplex: false,
-      reason: "The two handshake sides share no wire operation."
-    };
-  if (events.length === 0)
-    return {
-      ok: false,
-      version,
-      operations: [],
-      events: [],
-      heartbeat: false,
-      multiplex: false,
-      reason: "The two handshake sides share no event type."
-    };
-  return {
-    ok: true,
-    version,
-    operations,
-    events,
-    heartbeat: ours.heartbeat === true && theirs.heartbeat === true,
-    multiplex: ours.multiplex === true && theirs.multiplex === true
-  };
-}
-function composeenvelope(input) {
-  const opid = input.opid.trim();
-  if (opid === "")
-    throw new Error("The envelope carries its stable operation id; an empty id never correlates a reply.");
-  if (!serveroperations.includes(input.op))
-    throw new Error(`The envelope operation ${input.op} sits outside the servercontract operations.`);
-  if (!Number.isFinite(input.at)) throw new Error("The envelope carries its timestamp.");
-  return {
-    version: input.version ?? servercontractversion,
-    op: input.op,
-    opid,
-    at: input.at,
-    ...input.sessionid !== void 0 && input.sessionid.trim() !== "" ? { sessionid: input.sessionid.trim() } : {},
-    ...input.token !== void 0 && input.token.trim() !== "" ? { token: input.token.trim() } : {},
-    ...input.body !== void 0 ? { body: input.body } : {}
-  };
-}
-function parseenvelope(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value))
-    throw new Error("The servercontract envelope must be a json object.");
-  const entry = value;
-  if (!Number.isInteger(entry.version) || entry.version < 1)
-    throw new Error("The envelope version must be a positive whole number.");
-  if (typeof entry.op !== "string" || !serveroperations.includes(entry.op))
-    throw new Error(`The envelope operation ${String(entry.op)} sits outside the servercontract operations.`);
-  if (typeof entry.opid !== "string" || entry.opid.trim() === "")
-    throw new Error("The envelope operation id must be a non-empty string.");
-  if (entry.sessionid !== void 0 && (typeof entry.sessionid !== "string" || entry.sessionid.trim() === ""))
-    throw new Error("The envelope session id must be a non-empty string when present.");
-  if (entry.token !== void 0 && (typeof entry.token !== "string" || entry.token.trim() === ""))
-    throw new Error("The envelope frame token must be a non-empty string when present.");
-  if (!Number.isFinite(entry.at)) throw new Error("The envelope timestamp must be a finite number.");
-  if (entry.body !== void 0 && (!entry.body || typeof entry.body !== "object" || Array.isArray(entry.body)))
-    throw new Error("The envelope body must be a json object when present.");
-  return {
-    version: entry.version,
-    op: entry.op,
-    opid: entry.opid.trim(),
-    at: entry.at,
-    ...entry.sessionid !== void 0 ? { sessionid: entry.sessionid.trim() } : {},
-    ...entry.token !== void 0 ? { token: entry.token.trim() } : {},
-    ...entry.body !== void 0 ? { body: entry.body } : {}
-  };
-}
-function envelopeacceptance(value) {
-  try {
-    return { ok: true, envelope: parseenvelope(value) };
-  } catch (error) {
-    return { ok: false, reason: error instanceof Error ? error.message : String(error) };
-  }
-}
-function sessioncreatebody(input) {
-  const memberid = input.memberid.trim();
-  if (memberid === "") throw new Error("The sessioncreate body names its member id.");
-  if (input.role !== "extension" && input.role !== "site")
-    throw new Error("The sessioncreate role is the extension or the site side.");
-  return {
-    role: input.role,
-    memberid,
-    capabilities: input.capabilities,
-    ...input.pairingcode !== void 0 && input.pairingcode.trim() !== "" ? { pairingcode: input.pairingcode.trim() } : {}
-  };
-}
-function sessionjoinbody(input) {
-  const sessionid = (input.sessionid ?? "").trim();
-  const pairingcode = (input.pairingcode ?? "").trim();
-  if (sessionid === "" && pairingcode === "")
-    throw new Error(
-      "The sessionjoin body names its session id or rides its pairing code; one of the two identifies the join."
-    );
-  const memberid = input.memberid.trim();
-  if (memberid === "") throw new Error("The sessionjoin body names its member id.");
-  if (input.role !== "extension" && input.role !== "site")
-    throw new Error("The sessionjoin role is the extension or the site side.");
-  return {
-    ...sessionid !== "" ? { sessionid } : {},
-    role: input.role,
-    memberid,
-    capabilities: input.capabilities,
-    ...pairingcode !== "" ? { pairingcode } : {}
-  };
-}
-function eventpostbody(input) {
-  if (!servereventtypes.includes(input.event.kind))
-    throw new Error(`The event type ${input.event.kind} sits outside the servercontract event types.`);
-  const stream = input.event.stream.trim();
-  if (stream === "") throw new Error("The eventpost body names its multiplexed stream.");
-  if (!input.event.payload || typeof input.event.payload !== "object" || Array.isArray(input.event.payload))
-    throw new Error("The eventpost payload must be a json object.");
-  return { kind: input.event.kind, stream, payload: input.event.payload };
-}
-function eventstreambody(input) {
-  const streams = input.streams.map((stream) => stream.trim()).filter((stream) => stream !== "");
-  if (streams.length === 0) throw new Error("The eventstream body names at least one multiplexed stream.");
-  if (input.since !== void 0 && !Number.isFinite(input.since))
-    throw new Error("The eventstream resume timestamp stays a finite number.");
-  return { streams, ...input.since !== void 0 ? { since: input.since } : {} };
-}
-function chateventpayload(input) {
-  const text = input.text.trim();
-  if (text === "") throw new Error("The chat event carries its task text.");
-  const from = input.from.trim();
-  if (from === "") throw new Error("The chat event names its sender.");
-  return { text, from };
-}
-function planproposaleventpayload(card) {
-  const proposalid = card.proposalid.trim();
-  if (proposalid === "") throw new Error("The plan proposal names its proposal id.");
-  const title = card.title.trim();
-  if (title === "") throw new Error("The plan proposal names its plan title.");
-  if (card.steps.length === 0) throw new Error("The plan proposal carries at least one step of its digest.");
-  return {
-    proposalid,
-    title,
-    steps: card.steps.map((step) => ({ id: step.id, kind: step.kind, origin: step.origin, sensitive: step.sensitive })),
-    ...card.timeoutat !== void 0 ? { timeoutat: card.timeoutat } : {}
-  };
-}
-function planrevieweventpayload(decision) {
-  const proposalid = decision.proposalid.trim();
-  if (proposalid === "") throw new Error("The plan review names its proposal id.");
-  if (decision.decision !== "approved" && decision.decision !== "changes" && decision.decision !== "refused")
-    throw new Error("The plan review decision is approved, changes or refused.");
-  const by = decision.by.trim();
-  if (by === "") throw new Error("The plan review names its reviewer.");
-  return {
-    proposalid,
-    decision: decision.decision,
-    by,
-    ...decision.note !== void 0 && decision.note.trim() !== "" ? { note: decision.note.trim() } : {}
-  };
-}
-function progresseventpayload(input) {
-  const stepid = input.stepid.trim();
-  if (stepid === "") throw new Error("The progress event names its step id.");
-  const status = input.status.trim();
-  if (status === "") throw new Error("The progress event names its status word.");
-  return { stepid, status };
-}
-function heartbeatevent(now) {
-  if (!Number.isFinite(now)) throw new Error("The heartbeat event carries its timestamp.");
-  return {
-    kind: "progress",
-    stream: "heartbeat",
-    payload: progresseventpayload({ stepid: "heartbeat", status: "alive" })
-  };
-}
-function bridgepayload(kind, payload, pageconsent) {
-  if (kind === "chat") return { payload, held: [] };
-  const held = [];
-  const minimized = {};
-  for (const [key, value] of Object.entries(payload)) {
-    if (pagecontentkeys.includes(key) && pageconsent !== true) {
-      held.push(key);
-      continue;
-    }
-    minimized[key] = value;
-  }
-  return { payload: minimized, held };
-}
-function minimalplandigest(plan, statuses = {}) {
-  const objective = plan.objective.trim();
-  if (objective === "") throw new Error("The plan digest names its objective.");
-  return {
-    title: objective,
-    steps: plan.steps.map((step) => ({ id: step.id, kind: step.kind, status: statuses[step.id] ?? "pending" }))
-  };
-}
-function frameof(envelope) {
-  return JSON.stringify(envelope);
-}
-function parsewireframe(text) {
-  let parsed;
-  try {
-    parsed = JSON.parse(text);
-  } catch {
-    throw new Error("The wire frame must be json text.");
-  }
-  return parseenvelope(parsed);
-}
-function sitemanifestof(version = servercontractversion) {
-  return { name: "devthink site", servercontract: version, capabilities: contractcapabilities(version) };
-}
-function relayorigin(url) {
-  try {
-    const parsed = new URL(url.trim());
-    if (parsed.protocol !== "wss:" && parsed.protocol !== "ws:") return "";
-    const protocol = parsed.protocol === "wss:" ? "https:" : "http:";
-    return `${protocol}//${parsed.host}`;
-  } catch {
-    return "";
-  }
-}
-function newrelayclient(input) {
-  const memberid = input.memberid.trim();
-  if (memberid === "") throw new Error("The bridge client names its member id.");
-  const url = input.url.trim();
-  if (url !== "" && relayorigin(url) === "") throw new Error("The relay url must be a wss or ws url the user chose.");
-  return {
-    url,
-    origin: relayorigin(url),
-    sessionid: (input.sessionid ?? "").trim(),
-    token: (input.token ?? "").trim(),
-    memberid,
-    role: input.role,
-    state: url === "" ? "idle" : "connecting",
-    attempts: 0,
-    rotations: 0,
-    sent: 0,
-    received: 0,
-    lastframeat: input.now,
-    lastheartbeatat: input.now,
-    streams: {},
-    acks: [],
-    queue: [],
-    capabilities: input.capabilities,
-    rate: { used: 0, windowstartedat: input.now },
-    sequence: 0
-  };
-}
-function verifyframeauth(envelope, state) {
-  if (state.sessionid === "" || state.token === "") return false;
-  return envelope.sessionid === state.sessionid && envelope.token === state.token;
-}
-function frameauth(envelope, state) {
-  return { ...envelope, sessionid: state.sessionid, token: state.token };
-}
-function bridgeframerate(input) {
-  const window = input.window !== void 0 && Number.isFinite(input.window) && input.window > 0 ? input.window : void 0;
-  if (window === void 0)
-    return { allowed: true, used: input.rate.used, windowstartedat: input.rate.windowstartedat };
-  if (input.now - input.rate.windowstartedat >= window)
-    return {
-      allowed: input.cap === void 0 || input.cap >= 1,
-      used: input.cap === void 0 ? input.rate.used : 1,
-      windowstartedat: input.now,
-      resetsat: input.now + window
-    };
-  const used = input.rate.used + 1;
-  if (input.cap !== void 0 && Number.isFinite(input.cap) && input.cap >= 1 && used > input.cap)
-    return {
-      allowed: false,
-      used: input.rate.used,
-      windowstartedat: input.rate.windowstartedat,
-      resetsat: input.rate.windowstartedat + window
-    };
-  return {
-    allowed: true,
-    used,
-    windowstartedat: input.rate.windowstartedat,
-    resetsat: input.rate.windowstartedat + window
-  };
-}
-function sendframe(state, socket, envelope, now) {
-  if (state.state !== "connected")
-    return { state, sent: false, reason: "The bridge socket stays down; the frame waits in the offline queue." };
-  const stamped = frameauth(envelope, state);
-  socket.send(frameof(stamped));
-  return { state: { ...state, sent: state.sent + 1, lastframeat: now }, sent: true };
-}
-function receiveframe(state, frame, now) {
-  let envelope;
-  try {
-    envelope = parsewireframe(frame);
-  } catch (error) {
-    return { state, rejection: error instanceof Error ? error.message : String(error) };
-  }
-  if (!verifyframeauth(envelope, state))
-    return {
-      state,
-      rejection: `The frame ${envelope.opid} failed the frame authentication of the session ${state.sessionid}.`
-    };
-  if (envelope.op === "eventpost" && envelope.body !== void 0) {
-    const stream = typeof envelope.body.stream === "string" ? envelope.body.stream.trim() : "";
-    const kind = typeof envelope.body.kind === "string" ? envelope.body.kind : "";
-    if (stream !== "") {
-      const record = {
-        id: envelope.opid,
-        sessionid: state.sessionid,
-        kind,
-        opid: envelope.opid,
-        stream,
-        payload: envelope.body.payload ?? {},
-        at: envelope.at,
-        delivered: true
-      };
-      const next = {
-        ...state,
-        received: state.received + 1,
-        lastframeat: now,
-        acks: [...state.acks, envelope],
-        streams: { ...state.streams, [stream]: [...state.streams[stream] ?? [], record] }
-      };
-      return { state: next, envelope };
-    }
-  }
-  return {
-    state: { ...state, received: state.received + 1, lastframeat: now, acks: [...state.acks, envelope] },
-    envelope
-  };
-}
-function enqueuebridge(state, input) {
-  if (state.queue.some((record2) => record2.opid === input.opid)) return state;
-  const record = {
-    opid: input.opid,
-    op: input.op,
-    sessionid: state.sessionid,
-    body: input.body,
-    queuedat: input.now,
-    attempts: 0
-  };
-  return { ...state, queue: [...state.queue, record] };
-}
-function replaybridgequeue(state, socket, now) {
-  let replayed = 0;
-  let deduped = 0;
-  const seen = /* @__PURE__ */ new Set();
-  const queue = [];
-  let sent = state.sent;
-  for (const record of state.queue) {
-    if (seen.has(record.opid)) {
-      deduped += 1;
-      continue;
-    }
-    seen.add(record.opid);
-    if (record.sentat !== void 0 || state.state !== "connected") {
-      queue.push(record);
-      continue;
-    }
-    socket.send(
-      frameof(frameauth(composeenvelope({ op: record.op, opid: record.opid, at: now, body: record.body }), state))
-    );
-    queue.push({ ...record, attempts: record.attempts + 1, sentat: now });
-    replayed += 1;
-    sent += 1;
-  }
-  return { state: { ...state, queue, sent, lastframeat: now }, replayed, deduped };
-}
-function postevent(state, socket, event, now, rate) {
-  const opid = `op-${state.memberid}-${state.sequence + 1}`;
-  const body = eventpostbody({ event });
-  if (state.state !== "connected" || socket === void 0) {
-    return {
-      state: enqueuebridge({ ...state, sequence: state.sequence + 1 }, { op: "eventpost", opid, body, now }),
-      sent: false,
-      queued: true,
-      reason: "The bridge socket stays down; the event waits in the offline queue."
-    };
-  }
-  const window = bridgeframerate({
-    rate: state.rate,
-    ...rate?.cap !== void 0 ? { cap: rate.cap } : {},
-    ...rate?.window !== void 0 ? { window: rate.window } : {},
-    now
-  });
-  if (!window.allowed) {
-    return {
-      state: enqueuebridge(
-        {
-          ...state,
-          sequence: state.sequence + 1,
-          rate: { used: window.used, windowstartedat: window.windowstartedat }
-        },
-        { op: "eventpost", opid, body, now }
-      ),
-      sent: false,
-      queued: true,
-      reason: `The bridge rate window holds its ${rate?.cap} frame cap; the event waits for the window reset.`
-    };
-  }
-  const sent = sendframe(
-    { ...state, sequence: state.sequence + 1, rate: { used: window.used, windowstartedat: window.windowstartedat } },
-    socket,
-    composeenvelope({ op: "eventpost", opid, at: now, body }),
-    now
-  );
-  return { state: sent.state, sent: true, queued: false };
-}
-function heartbeattick(state, socket, now, interval) {
-  if (state.state !== "connected" || socket === void 0) return { state, beat: false };
-  if (interval === void 0 || !Number.isFinite(interval) || interval <= 0) return { state, beat: false };
-  if (now - state.lastheartbeatat < interval) return { state, beat: false };
-  const event = heartbeatevent(now);
-  const opid = `op-${state.memberid}-heartbeat-${state.sent + 1}`;
-  const sent = sendframe(
-    state,
-    socket,
-    composeenvelope({ op: "eventpost", opid, at: now, body: eventpostbody({ event }) }),
-    now
-  );
-  return { state: { ...sent.state, lastheartbeatat: now }, beat: true };
-}
-function idleexpired(state, now, idlewindow) {
-  if (idlewindow === void 0 || !Number.isFinite(idlewindow) || idlewindow <= 0) return false;
-  return now - state.lastframeat >= idlewindow;
-}
-function disconnectrelay(state, now, reason) {
-  return { ...state, state: "closed", closedat: now, ...reason !== void 0 ? { lasterror: reason } : {} };
-}
-function bridgestatusview(state) {
-  if (state.url === "")
-    return {
-      status: "disabled",
-      paired: false,
-      queued: state.queue.filter((record) => record.sentat === void 0).length
-    };
-  const paired = state.sessionid !== "" && state.token !== "";
-  if (state.state === "connected")
-    return { status: "connected", paired, queued: state.queue.filter((record) => record.sentat === void 0).length };
-  if (paired)
-    return {
-      status: "paired",
-      paired: true,
-      queued: state.queue.filter((record) => record.sentat === void 0).length
-    };
-  return {
-    status: "offline",
-    paired: false,
-    queued: state.queue.filter((record) => record.sentat === void 0).length
-  };
-}
-async function connectrelay(input) {
-  const sleep = input.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, Math.max(0, milliseconds))));
-  const now = input.now ?? Date.now;
-  if (input.state.url.trim() === "")
-    return {
-      state: {
-        ...input.state,
-        state: "idle",
-        lasterror: "The bridge stays disabled because no relay url is configured; the url is always the user's setting."
-      },
-      error: "The bridge stays disabled because no relay url is configured; the url is always the user's setting."
-    };
-  const budget = Math.max(1, Math.floor(input.attempts ?? 1));
-  const waits = reconnectwaits(budget - 1, input.backoffbase ?? 0, input.backoffceiling);
-  let state = { ...input.state, state: "connecting" };
-  let lasterror = "";
-  for (let attempt = 0; attempt < budget; attempt += 1) {
-    let socket;
-    try {
-      socket = await input.open(state.url);
-    } catch (error) {
-      lasterror = error instanceof Error ? error.message : String(error);
-      if (attempt < budget - 1) {
-        const wait = waits[attempt] ?? 0;
-        if (wait > 0) await sleep(wait);
-        state = { ...state, attempts: state.attempts + 1, state: "reconnecting" };
-        if (input.rotate !== void 0) {
-          try {
-            state = { ...state, token: await input.rotate(), rotations: state.rotations + 1 };
-          } catch {
-          }
-        }
-      }
-      continue;
-    }
-    state = { ...state, state: "authenticating" };
-    const opid = `op-${state.memberid}-join-${state.attempts + 1}`;
-    const firstjoin = state.sessionid === "";
-    const reply = await new Promise((resolve) => {
-      socket.onmessage = (frame) => resolve({ frame });
-      socket.onclose = (code) => resolve({
-        error: `The relay socket closed with code ${code} before the ${firstjoin ? "session create" : "join"} reply.`
-      });
-      socket.onerror = (error) => resolve({ error });
-      const createsession = firstjoin && state.role === "extension";
-      const body = createsession ? {
-        role: state.role,
-        memberid: state.memberid,
-        capabilities: state.capabilities,
-        ...input.pairingcode !== void 0 && input.pairingcode.trim() !== "" ? { pairingcode: input.pairingcode.trim() } : {}
-      } : firstjoin ? {
-        role: state.role,
-        memberid: state.memberid,
-        capabilities: state.capabilities,
-        ...input.pairingcode !== void 0 && input.pairingcode.trim() !== "" ? { pairingcode: input.pairingcode.trim() } : {}
-      } : {
-        sessionid: state.sessionid,
-        role: state.role,
-        memberid: state.memberid,
-        capabilities: state.capabilities
-      };
-      socket.send(
-        frameof(
-          frameauth(composeenvelope({ op: createsession ? "sessioncreate" : "sessionjoin", opid, at: now(), body }), {
-            ...state,
-            token: state.token
-          })
-        )
-      );
-    });
-    if (reply.frame === void 0) {
-      lasterror = reply.error ?? "The relay socket closed before the join reply.";
-      try {
-        socket.close(1e3);
-      } catch {
-      }
-      if (attempt < budget - 1) {
-        const wait = waits[attempt] ?? 0;
-        if (wait > 0) await sleep(wait);
-        state = { ...state, attempts: state.attempts + 1, state: "reconnecting" };
-        if (input.rotate !== void 0) {
-          try {
-            state = { ...state, token: await input.rotate(), rotations: state.rotations + 1 };
-          } catch {
-          }
-        }
-      }
-      continue;
-    }
-    let envelope;
-    try {
-      envelope = parsewireframe(reply.frame);
-    } catch (error) {
-      lasterror = error instanceof Error ? error.message : String(error);
-      try {
-        socket.close(1e3);
-      } catch {
-      }
-      continue;
-    }
-    if (envelope.opid !== opid) {
-      lasterror = `The join reply ${envelope.opid} does not correlate the join request ${opid}.`;
-      try {
-        socket.close(1e3);
-      } catch {
-      }
-      continue;
-    }
-    if (envelope.body !== void 0 && typeof envelope.body.error === "string" && envelope.body.error.trim() !== "") {
-      lasterror = envelope.body.error;
-      try {
-        socket.close(1e3);
-      } catch {
-      }
-      if (attempt < budget - 1) {
-        const wait = waits[attempt] ?? 0;
-        if (wait > 0) await sleep(wait);
-        state = { ...state, attempts: state.attempts + 1, state: "reconnecting" };
-      }
-      continue;
-    }
-    const rotatedtoken = envelope.body !== void 0 && typeof envelope.body.token === "string" ? envelope.body.token.trim() : "";
-    const sessionid = envelope.body !== void 0 && typeof envelope.body.sessionid === "string" ? envelope.body.sessionid.trim() : state.sessionid;
-    state = {
-      ...state,
-      state: "connected",
-      sessionid: sessionid !== "" ? sessionid : state.sessionid,
-      token: rotatedtoken !== "" ? rotatedtoken : state.token,
-      rotations: rotatedtoken !== "" ? state.rotations + 1 : state.rotations,
-      openedat: now(),
-      lastframeat: now(),
-      lastheartbeatat: now(),
-      acks: [...state.acks, envelope]
-    };
-    return { state, socket };
-  }
-  return {
-    state: { ...state, state: "closed", attempts: state.attempts, closedat: now(), lasterror },
-    error: lasterror
-  };
-}
-function chatrowsof(events, memberid) {
-  return events.filter((event) => event.kind === "chat").map((event) => ({
-    from: typeof event.payload.from === "string" ? event.payload.from : "",
-    text: typeof event.payload.text === "string" ? event.payload.text : "",
-    mine: typeof event.payload.from === "string" && event.payload.from === memberid,
-    at: event.at
-  }));
-}
-function reviewcardsof(events) {
-  return events.filter((event) => event.kind === "planproposal").map((event) => {
-    const steps = Array.isArray(event.payload.steps) ? event.payload.steps.filter((step) => typeof step.id === "string" && typeof step.kind === "string").map((step) => ({
-      id: String(step.id),
-      kind: String(step.kind),
-      origin: typeof step.origin === "string" ? step.origin : "",
-      sensitive: step.sensitive === true
-    })) : [];
-    return {
-      proposalid: typeof event.payload.proposalid === "string" ? event.payload.proposalid : "",
-      title: typeof event.payload.title === "string" ? event.payload.title : "",
-      steps,
-      ...typeof event.payload.timeoutat === "number" ? { timeoutat: event.payload.timeoutat } : {},
-      at: event.at
-    };
-  }).filter((card) => card.proposalid !== "" && card.title !== "");
-}
-function carddecision(card, decision, by, now, note) {
-  if (card.proposalid.trim() === "") throw new Error("The review decision names its proposal.");
-  if (decision !== "approved" && decision !== "changes" && decision !== "refused")
-    throw new Error("The review decision is approved, changes or refused.");
-  const reviewer = by.trim();
-  if (reviewer === "") throw new Error("The review decision names its reviewer.");
-  return {
-    proposalid: card.proposalid,
-    decision,
-    by: reviewer,
-    ...note !== void 0 && note.trim() !== "" ? { note: note.trim() } : {},
-    at: now
-  };
-}
-function decisionpayload(decision) {
-  return planrevieweventpayload(decision);
-}
-function reviewgateoutcome(decision) {
-  if (decision.decision === "approved")
-    return {
-      state: "approved",
-      reason: `The site review approved the plan proposal ${decision.proposalid}${decision.note !== void 0 ? ` with the note ${decision.note}` : ""}; the extension review gate resolves as approved and the extension stays the only executor.`
-    };
-  return {
-    state: "refused",
-    reason: `The site review returned ${decision.decision} for the plan proposal ${decision.proposalid}${decision.note !== void 0 ? ` with the note ${decision.note}` : ""}; the proposal returns to the review surface and no step executes.`
-  };
-}
-function chateventof(text, from) {
-  return { kind: "chat", stream: "chat", payload: chateventpayload({ text, from }) };
-}
-function planproposaleventof(card) {
-  return { kind: "planproposal", stream: "review", payload: planproposaleventpayload(card) };
-}
-function widgetview(input) {
-  const cards = reviewcardsof(input.events);
-  const answered = new Set(
-    input.events.filter((event) => event.kind === "planreview").map((event) => typeof event.payload.proposalid === "string" ? event.payload.proposalid : "").filter((id) => id !== "")
-  );
-  return {
-    status: input.status,
-    rows: chatrowsof(input.events, input.memberid),
-    cards,
-    pending: cards.filter((card) => !answered.has(card.proposalid)).length
-  };
-}
-function pairingpanel(record, now) {
-  const countdown = pairingcountdown(record, now);
-  return {
-    code: record.code.code,
-    secondsleft: countdown.secondsleft,
-    expired: countdown.expired,
-    label: countdown.label
-  };
-}
-function sitemanifest() {
-  return sitemanifestof();
-}
-function bridgestatuslabel(view) {
-  if (view.status === "connected")
-    return `Bridge: connected${view.paired ? " and paired" : ""}${view.queued > 0 ? ` \xB7 ${view.queued} queued frame${view.queued === 1 ? "" : "s"}` : ""}.`;
-  if (view.status === "paired")
-    return `Bridge: paired, socket offline${view.queued > 0 ? ` \xB7 ${view.queued} queued frame${view.queued === 1 ? "" : "s"}` : ""}.`;
-  if (view.status === "offline")
-    return `Bridge: offline${view.queued > 0 ? ` \xB7 ${view.queued} queued frame${view.queued === 1 ? "" : "s"}` : ""}.`;
-  return "Bridge: disabled (no relay url set).";
-}
-var wsbridgelocalhosts = ["127.0.0.1", "localhost", "::1", "[::1]"];
-var wsbridgestreamname = "nativetransport";
-function wsbridgebindcheck(input) {
-  const bind = (input.bind ?? "").trim() === "" ? "127.0.0.1" : (input.bind ?? "").trim();
-  if (!wsbridgelocalhosts.includes(bind))
-    return {
-      ok: false,
-      bind,
-      port: 0,
-      reason: `The wsbridge binds a localhost address only; the ${bind} address accepts connections from other machines and the bridge never leaves the machine.`
-    };
-  const port = input.port ?? 0;
-  if (!Number.isInteger(port) || port < 0 || port > 65535)
-    return {
-      ok: false,
-      bind,
-      port: 0,
-      reason: `The wsbridge port stays a whole number between zero and 65535; the zero port asks the socket for a random free port.`
-    };
-  return { ok: true, bind, port };
-}
-function wsbridgesessionstart(input) {
-  if (!Number.isInteger(input.port) || input.port < 0 || input.port > 65535)
-    throw new Error("The wsbridge session port stays a whole number between zero and 65535.");
-  const token = input.token.trim();
-  if (token === "")
-    throw new Error("The wsbridge session carries its per session token; an empty token authenticates nothing.");
-  if (input.idlewindow !== void 0 && (!Number.isFinite(input.idlewindow) || input.idlewindow <= 0))
-    throw new Error("The wsbridge idle window stays a positive millisecond count the user chose.");
-  return {
-    id: input.id ?? `wsbridge-${input.now}`,
-    port: input.port,
-    tokenhash: input.hashof(token),
-    boundat: input.now,
-    ...input.idlewindow !== void 0 ? { idlewindow: input.idlewindow, expiresat: input.now + input.idlewindow } : {},
-    extensionconnected: false,
-    connections: 0,
-    received: 0,
-    sent: 0
-  };
-}
-function wsbridgeconnection(session, now) {
-  const idlewindow = session.idlewindow;
-  return {
-    ...session,
-    connections: session.connections + 1,
-    lastframeat: now,
-    ...idlewindow !== void 0 ? { expiresat: now + idlewindow } : {}
-  };
-}
-function wsbridgeextensionconnect(session, now) {
-  if (session.extensionconnected)
-    return {
-      refused: `The wsbridge session holds one extension connection at a time; the extension side of the session ${session.id} stays taken.`
-    };
-  const connected = wsbridgeconnection(session, now);
-  return { session: { ...connected, extensionconnected: true } };
-}
-function wsbridgeframeauth(session, token, hashof) {
-  const trimmed = (token ?? "").trim();
-  if (trimmed === "")
-    return {
-      ok: false,
-      reason: "The wsbridge frame carries its session token; an anonymous frame refuses at the door."
-    };
-  if (hashof(trimmed) !== session.tokenhash)
-    return {
-      ok: false,
-      reason: `The wsbridge frame token fails the session ${session.id} authentication; a wrong token never reaches the body.`
-    };
-  return { ok: true };
-}
-function wsbridgeidlesweep(session, now) {
-  if (session.idlewindow === void 0 || session.expiresat === void 0) return { expired: false, session };
-  if (session.lastframeat !== void 0 && session.lastframeat > session.expiresat - session.idlewindow) {
-    const slid = { ...session, expiresat: session.lastframeat + session.idlewindow };
-    if (now < slid.expiresat) return { expired: false, session: slid };
-  }
-  if (now >= session.expiresat)
-    return {
-      expired: true,
-      session,
-      reason: `The wsbridge session ${session.id} sat quiet past its ${session.idlewindow} millisecond idle window; the session expired and the token stopped verifying.`
-    };
-  return { expired: false, session };
-}
-function wsbridgeenvelopeof(input) {
-  return composeenvelope({
-    op: "eventpost",
-    opid: input.opid,
-    at: input.at,
-    version: input.version ?? servercontractversion,
-    ...input.sessionid !== void 0 && input.sessionid !== "" ? { sessionid: input.sessionid } : {},
-    ...input.token !== void 0 && input.token !== "" ? { token: input.token } : {},
-    body: { kind: "progress", stream: wsbridgestreamname, payload: { frame: input.frame } }
-  });
-}
-function wsbridgeframeof(envelope) {
-  if (envelope.op !== "eventpost")
-    return {
-      reason: `The wsbridge envelope carries the eventpost operation; a ${envelope.op} envelope never reaches the native transport.`
-    };
-  const body = envelope.body ?? {};
-  if (body.stream !== wsbridgestreamname)
-    return {
-      reason: `The wsbridge envelope rides the ${wsbridgestreamname} stream; a ${String(body.stream)} envelope stays outside the native transport.`
-    };
-  const frame = body.payload;
-  if (frame === void 0 || frame === null || typeof frame !== "object" || Array.isArray(frame))
-    return { reason: "The wsbridge envelope payload carries the native frame object." };
-  const candidate = frame.frame;
-  if (candidate === void 0 || candidate === null || typeof candidate !== "object" || Array.isArray(candidate))
-    return { reason: "The wsbridge envelope payload wraps its native frame under the frame key." };
-  const typed = candidate;
-  if (typeof typed.kind !== "string" || typeof typed.correlationid !== "string")
-    return { reason: "The wsbridge native frame carries its kind and its correlation id." };
-  return {
-    frame: {
-      kind: typed.kind,
-      correlationid: typed.correlationid,
-      ...typeof typed.sessionid === "string" ? { sessionid: typed.sessionid } : {},
-      ...typed.body !== void 0 && typed.body !== null && typeof typed.body === "object" && !Array.isArray(typed.body) ? { body: typed.body } : {}
-    }
-  };
-}
-function wsbridgeadvertiseframe(session, token, correlationid) {
-  const trimmed = token.trim();
-  if (trimmed === "")
-    throw new Error("The wsbridge advertisement carries the per session token; an empty token advertises nothing.");
-  return {
-    kind: "advertisement",
-    correlationid,
-    body: {
-      port: session.port,
-      token: trimmed,
-      ...session.idlewindow !== void 0 ? { idlewindow: session.idlewindow } : {}
-    }
-  };
-}
-function wsbridgereport(session, now) {
-  const sweep = wsbridgeidlesweep(session, now);
-  return {
-    id: session.id,
-    port: session.port,
-    connections: session.connections,
-    extensionconnected: session.extensionconnected,
-    expired: sweep.expired,
-    received: session.received,
-    sent: session.sent
-  };
-}
-function wsbridgeframecounted(session, direction, now) {
-  const idlewindow = session.idlewindow;
-  return {
-    ...session,
-    received: session.received + (direction === "received" ? 1 : 0),
-    sent: session.sent + (direction === "sent" ? 1 : 0),
-    lastframeat: now,
-    ...idlewindow !== void 0 ? { expiresat: now + idlewindow } : {}
-  };
-}
-var nativebridgeprotocolmajor = 1;
-var nativehostinstallerversion = protocolversion;
-var nativehostidplaceholder = "__generated_extension_id__";
-var nativemessagingdirname = "NativeMessagingHosts";
-function nativesurfacecatalog() {
-  return [
-    {
-      surface: "osdialog",
-      callclass: "sensitive",
-      description: "Opens one os dialog on the user desktop; the surface addresses the user directly, so the call class stays sensitive and the surface asks for its own consent grant."
-    },
-    {
-      surface: "notification",
-      callclass: "interaction",
-      description: "Posts one os notification on the user desktop; the surface writes outside the browser, so the call class stays interaction and the surface asks for its own consent grant."
-    }
-  ];
-}
-function nativehostcapabilities() {
-  return {
-    protocol: nativebridgeprotocolmajor,
-    surfaces: nativesurfacecatalog().map((entry) => entry.surface),
-    heartbeat: true
-  };
-}
-function nativehostmanifesttemplate(input) {
-  const hostname = input.hostname.trim();
-  if (hostname === "") throw new Error("The native host manifest names its host; an empty host name never registers.");
-  if (!/^[a-z0-9][a-z0-9._-]*$/.test(hostname))
-    throw new Error(
-      `The native host name ${hostname} stays a plain dns style token; a name with spaces or capitals never registers.`
-    );
-  const companionpath = input.companionpath.trim();
-  if (companionpath === "")
-    throw new Error(
-      "The native host manifest carries the companion path the user chose; an empty path never launches a host."
-    );
-  const extensionid = (input.extensionid ?? "").trim();
-  const scheme = "chrome-extension:";
-  const origin = extensionid === "" ? `${scheme}//${nativehostidplaceholder}/` : `${scheme}//${extensionid}/`;
-  const manifest = {
-    name: hostname,
-    description: "The devthink companion process: an optional native host that speaks length prefixed json over stdio and never runs until the user installs it.",
-    path: companionpath,
-    type: "stdio",
-    allowed_origins: [origin]
-  };
-  return { manifest, text: `${JSON.stringify(manifest, null, 2)}
-` };
-}
-function trailslashes(value) {
-  let end = value.length;
-  while (end > 0) {
-    const last = value.charCodeAt(end - 1);
-    if (last !== 47 && last !== 92) break;
-    end -= 1;
-  }
-  return value.slice(0, end);
-}
-function hostmanifestdestination(input) {
-  const hostname = input.hostname.trim();
-  if (hostname === "")
-    return {
-      path: "",
-      systemwide: false,
-      refused: "The host manifest destination names its host; an empty host name never writes."
-    };
-  const systemwide = input.systemwide === true;
-  const profiledir = (input.profiledir ?? "").trim();
-  if (!systemwide && profiledir === "")
-    return {
-      path: "",
-      systemwide: false,
-      refused: "The installer writes the host manifest into the user profile directory; a system wide install needs the explicit flag and the user never gets one silently."
-    };
-  if (systemwide) {
-    const platform = input.platform ?? "linux";
-    const base = platform === "linux" ? "/etc/opt/chrome/native-messaging-hosts" : platform === "macos" ? "/Library/Google/Chrome/NativeMessagingHosts" : "C:\\Program Files\\Google\\Chrome\\Application\\native-messaging-hosts";
-    return { path: `${base}/${hostname}.json`, systemwide: true };
-  }
-  return { path: `${trailslashes(profiledir)}/${nativemessagingdirname}/${hostname}.json`, systemwide: false };
-}
-async function installnativehost(input) {
-  if (!input.consent)
-    return {
-      state: nativedefaultstate(),
-      manifestpath: "",
-      refused: "The install consent gate explains the scope before any host registration; the installer writes no manifest without the recorded consent."
-    };
-  const extensionid = input.extensionid.trim();
-  if (extensionid === "")
-    return {
-      state: nativedefaultstate(),
-      manifestpath: "",
-      refused: "The host manifest allows the origins of one extension id; an empty id never registers a host."
-    };
-  if (input.systemwide === true && (input.profiledir ?? "").trim() !== "")
-    return {
-      state: nativedefaultstate(),
-      manifestpath: "",
-      refused: "The install targets either the user profile directory or, with the explicit flag, the system directory; never both at once."
-    };
-  const destination = hostmanifestdestination({
-    hostname: input.hostname,
-    ...input.profiledir !== void 0 ? { profiledir: input.profiledir } : {},
-    ...input.systemwide !== void 0 ? { systemwide: input.systemwide } : {},
-    ...input.platform !== void 0 ? { platform: input.platform } : {}
-  });
-  if (destination.refused !== void 0)
-    return { state: nativedefaultstate(), manifestpath: "", refused: destination.refused };
-  const template = nativehostmanifesttemplate({
-    hostname: input.hostname,
-    companionpath: input.companionpath,
-    extensionid
-  });
-  const dir = destination.path.slice(0, destination.path.lastIndexOf("/"));
-  await input.io.mkdir(dir);
-  await input.io.writefile(destination.path, template.text);
-  const state = {
-    installed: true,
-    hostname: template.manifest.name,
-    extensionid,
-    installerversion: nativehostinstallerversion,
-    port: "detached",
-    installedat: input.now,
-    updatedat: input.now,
-    lasterrors: []
-  };
-  return { state, manifestpath: destination.path };
-}
-async function uninstallnativehost(input) {
-  const destination = hostmanifestdestination({
-    hostname: input.hostname,
-    ...input.profiledir !== void 0 ? { profiledir: input.profiledir } : {},
-    ...input.systemwide !== void 0 ? { systemwide: input.systemwide } : {},
-    ...input.platform !== void 0 ? { platform: input.platform } : {}
-  });
-  if (destination.refused !== void 0)
-    return { state: nativedefaultstate(), manifestpath: "", removed: false, refused: destination.refused };
-  const present = await input.io.exists(destination.path);
-  if (present) await input.io.removefile(destination.path);
-  return { state: nativedefaultstate(), manifestpath: destination.path, removed: present };
-}
-function nativedefaultstate() {
-  return { installed: false, port: "detached", lasterrors: [] };
-}
-function nativechoices(settings) {
-  const current = settings ?? {};
-  return {
-    ...current.nativeinstallconsent !== void 0 ? { nativeinstallconsent: current.nativeinstallconsent } : {},
-    ...current.nativetransportconsent !== void 0 ? { nativetransportconsent: current.nativetransportconsent } : {},
-    ...current.nativecallclassconsents !== void 0 ? { nativecallclassconsents: current.nativecallclassconsents } : {},
-    ...current.nativesurfaceconsents !== void 0 ? { nativesurfaceconsents: current.nativesurfaceconsents } : {},
-    ...current.nativeidlewindow !== void 0 ? { nativeidlewindow: current.nativeidlewindow } : {},
-    ...current.nativeheartbeatinterval !== void 0 ? { nativeheartbeatinterval: current.nativeheartbeatinterval } : {},
-    ...current.nativecallratelimit !== void 0 ? { nativecallratelimit: current.nativecallratelimit } : {},
-    ...current.nativecallratewindow !== void 0 ? { nativecallratewindow: current.nativecallratewindow } : {}
-  };
-}
-function nativetransportenabled(state, settings) {
-  return (state?.installed ?? false) && settings?.nativetransportconsent === true;
-}
-function nativecorrelationid(seed, sequence) {
-  const trimmed = seed.trim();
-  if (trimmed === "")
-    throw new Error("The correlation id names its sender seed; an empty seed never correlates a frame.");
-  if (!Number.isInteger(sequence) || sequence < 1)
-    throw new Error("The correlation id sequence stays a positive whole number per run.");
-  return `run-${trimmed}-${sequence}`;
-}
-function nativeframeof(kind, correlationid, body, sessionid) {
-  const trimmed = correlationid.trim();
-  if (trimmed === "")
-    throw new Error("The native frame carries its correlation id; an empty id never correlates a frame.");
-  return {
-    kind,
-    correlationid: trimmed,
-    ...sessionid !== void 0 && sessionid !== "" ? { sessionid } : {},
-    ...body !== void 0 ? { body } : {}
-  };
-}
-function companionhandshakeframe(correlationid) {
-  return nativeframeof("handshake", correlationid, { protocol: nativebridgeprotocolmajor });
-}
-function parsecompanionhandshake(frame, now) {
-  if (frame.kind !== "handshake")
-    return {
-      error: nativeerrorof(
-        "handshake",
-        `The handshake answer carries the handshake kind; a ${frame.kind} frame never completes a handshake.`,
-        "reconnect",
-        now
-      )
-    };
-  const body = frame.body ?? {};
-  const build = typeof body.build === "string" ? body.build.trim() : "";
-  if (build === "")
-    return {
-      error: nativeerrorof(
-        "handshake",
-        "The handshake answer carries the companion build version; an empty version never attaches.",
-        "reconnect",
-        now
-      )
-    };
-  const protocol = typeof body.protocol === "number" ? body.protocol : Number.parseInt(String(body.protocol ?? ""), 10);
-  if (!Number.isInteger(protocol) || protocol < 1)
-    return {
-      error: nativeerrorof(
-        "handshake",
-        "The handshake answer carries its native bridge protocol version as a positive whole number.",
-        "reconnect",
-        now
-      )
-    };
-  const surfaces = Array.isArray(body.surfaces) ? body.surfaces.filter(
-    (surface) => surface === "osdialog" || surface === "notification"
-  ) : [];
-  const wsbridgeport = typeof body.wsbridgeport === "number" ? body.wsbridgeport : 0;
-  if (!Number.isInteger(wsbridgeport) || wsbridgeport < 0)
-    return {
-      error: nativeerrorof(
-        "handshake",
-        "The handshake answer carries the wsbridge port as a whole number; zero keeps the bridge down.",
-        "reconnect",
-        now
-      )
-    };
-  return { handshake: { build, protocol: String(protocol), surfaces, wsbridgeport } };
-}
-function nativemajorversion(protocol) {
-  const value = typeof protocol === "number" ? String(protocol) : protocol.trim();
-  const major = Number.parseInt(value.split(/[.\s]/)[0] ?? "", 10);
-  return Number.isInteger(major) && major >= 1 ? major : 0;
-}
-function nativeprotocolcompatible(ours, theirs) {
-  const ourmajor = nativemajorversion(ours);
-  const theirmajor = nativemajorversion(theirs);
-  return { ok: ourmajor === theirmajor && ourmajor >= 1, ours: ourmajor, theirs: theirmajor };
-}
-function negotiatenativecapabilities(input) {
-  const ours = input.ours ?? nativehostcapabilities();
-  const compat = nativeprotocolcompatible(ours.protocol, input.theirs.protocol);
-  if (!compat.ok)
-    return {
-      ok: false,
-      protocol: 0,
-      surfaces: [],
-      heartbeat: false,
-      reason: `The companion speaks the native bridge protocol major version ${compat.theirs} while this build speaks ${compat.ours}; the upgrade path keeps compatibility for one major version and the run degrades with the transport off.`
-    };
-  const order = nativesurfacecatalog().map((entry) => entry.surface);
-  const surfaces = order.filter((surface) => input.theirs.surfaces.includes(surface));
-  return { ok: true, protocol: compat.ours, surfaces, heartbeat: ours.heartbeat && input.theirs.heartbeat === true };
-}
-function attachnativehost(state, handshake, now) {
-  return {
-    ...state,
-    installed: true,
-    port: "attached",
-    companionversion: handshake.build,
-    companionprotocol: handshake.protocol,
-    wsbridgeport: handshake.wsbridgeport,
-    attachedat: now,
-    updatedat: now
-  };
-}
-function crashnativehost(state, now) {
-  return {
-    ...state,
-    port: "crashed",
-    updatedat: now,
-    lasterrors: [
-      nativeerrorof(
-        "port",
-        "The companion process crashed under the native port; the run stays alive and the extension reattaches on the next host start.",
-        "reconnect",
-        now
-      ),
-      ...state.lasterrors ?? []
-    ].slice(0, 10)
-  };
-}
-function reattachnativehost(state, handshake, now) {
-  return { ...attachnativehost(state, handshake, now), updatedat: now };
-}
-function detachnativehost(state, now) {
-  return { ...state, port: "detached", updatedat: now };
-}
-function nativeheartbeatframe(correlationid, now) {
-  return nativeframeof("heartbeat", correlationid, { at: now });
-}
-function nativeportliveness(input) {
-  if (input.interval === void 0)
-    return {
-      alive: true,
-      reason: "The heartbeat interval stays unset; the liveness check never expires a host without the user configured cadence."
-    };
-  if (input.lastheartbeatat === void 0)
-    return {
-      alive: false,
-      reason: "The native port heard no heartbeat yet; the host stays silent under the configured interval."
-    };
-  if (input.now - input.lastheartbeatat > input.interval)
-    return {
-      alive: false,
-      reason: `The last heartbeat sits ${input.now - input.lastheartbeatat} milliseconds back, past the ${input.interval} millisecond interval; the host process stays silent and the extension reattaches on its restart.`
-    };
-  return { alive: true };
-}
-function nativeframecheck(frame, sessionid) {
-  if (frame.correlationid.trim() === "")
-    return {
-      allowed: false,
-      reason: "The native frame carries its correlation id; an anonymous frame never reaches the engine."
-    };
-  if (sessionid.trim() === "")
-    return {
-      allowed: false,
-      reason: "The native transport pairs its frames with the session id; a transport without a session never accepts a frame."
-    };
-  if (frame.sessionid !== void 0 && frame.sessionid !== sessionid)
-    return {
-      allowed: false,
-      reason: `The native frame session ${frame.sessionid} sits outside the paired session ${sessionid}; the origin and session checks refuse the frame.`
-    };
-  return { allowed: true };
-}
-var nativesecretkeys = [
-  "apikey",
-  "api_key",
-  "key",
-  "token",
-  "secret",
-  "password",
-  "authorization",
-  "credential",
-  "privatekey"
-];
-function nativesecretexclusion(frame) {
-  const body = frame.body ?? {};
-  const held = Object.keys(body).filter(
-    (key) => nativesecretkeys.includes(key.toLowerCase().replaceAll(" ", "").replaceAll("-", ""))
-  );
-  return { ok: held.length === 0, held };
-}
-function redactnativeframe(frame) {
-  const body = frame.body ?? {};
-  const redacted = {};
-  for (const [key, value] of Object.entries(body))
-    if (!nativesecretkeys.includes(key.toLowerCase().replaceAll(" ", "").replaceAll("-", ""))) redacted[key] = value;
-  return { ...frame, body: redacted };
-}
-function nativeerrorof(family, message, retry, now) {
-  return { family, message, retry, at: now };
-}
-function nativefailureof(error) {
-  const retryhint = error.retry === "reconnect" ? "retry" : error.retry === "reinstall" ? "wait" : "none";
-  return { retryhint, reason: `${error.family} failure: ${error.message}` };
-}
-function nativedegradationof(input) {
-  if ((input.state?.installed ?? false) === false)
-    return {
-      degraded: true,
-      reason: "The native host stays absent: nothing installed, the transport disabled and the run alive with every step inside the browser."
-    };
-  if (input.negotiated !== void 0 && !input.negotiated.ok)
-    return {
-      degraded: true,
-      reason: input.negotiated.reason ?? "The native host speaks another native bridge protocol major version; the run stays alive with the transport off."
-    };
-  if (input.state?.port === "crashed")
-    return {
-      degraded: true,
-      reason: "The native host crashed under the port; the run stays alive and waits for the reattach on the host restart."
-    };
-  return {
-    degraded: false,
-    reason: "The native host sits attached with a negotiated capability set; the transport carries the consented call classes."
-  };
-}
-function nativeratecheck(input) {
-  if (input.cap === void 0) return { allowed: true, used: input.calls.length };
-  if (!Number.isFinite(input.cap) || input.cap < 1)
-    return {
-      allowed: false,
-      used: input.calls.length,
-      cap: input.cap,
-      reason: `The native transport rate cap of ${String(input.cap)} stays a finite positive count.`
-    };
-  const window = input.window ?? Number.POSITIVE_INFINITY;
-  const used = input.calls.filter(
-    (record) => window === Number.POSITIVE_INFINITY || input.now - record.at <= window
-  ).length;
-  if (used >= input.cap)
-    return {
-      allowed: false,
-      used,
-      cap: input.cap,
-      reason: `The native transport hit its ${input.cap} call cap with ${used} calls inside the window; the cap stays the user's choice and the session waits.`
-    };
-  return { allowed: true, used, cap: input.cap };
-}
-function nativecallrecordof(input) {
-  return {
-    id: input.id,
-    correlationid: input.correlationid,
-    surface: input.surface,
-    callclass: input.callclass,
-    outcome: input.outcome,
-    ...input.reason !== void 0 && input.reason !== "" ? { reason: input.reason } : {},
-    at: input.now
-  };
-}
-function recordnativecall(records, record) {
-  return [record, ...records.filter((candidate) => candidate.id !== record.id)];
-}
-function nativecallevent(record) {
-  return notificationframe("native/call", {
-    surface: record.surface,
-    callclass: record.callclass,
-    outcome: record.outcome,
-    correlationid: record.correlationid,
-    at: record.at
-  });
-}
-function nativesurfacegrant(surface, settings) {
-  const known = nativesurfacecatalog().find((entry) => entry.surface === surface);
-  if (known === void 0)
-    return {
-      allowed: false,
-      reason: `The native surface ${surface} sits outside the surface catalog; an unknown surface never grants.`
-    };
-  if ((settings?.nativesurfaceconsents ?? []).includes(known.surface))
-    return {
-      allowed: true,
-      reason: `The user granted the ${known.surface} surface its own consent stamp; the surface runs behind the class gate too.`
-    };
-  return {
-    allowed: false,
-    reason: `The native surface ${known.surface} holds no consent grant; a desktop surface never opens from a class grant alone.`
-  };
-}
-function nativeclassgrant(callclass, settings) {
-  if ((settings?.nativecallclassconsents ?? []).includes(callclass))
-    return { allowed: true, reason: `The user consented to the ${callclass} call class over the native transport.` };
-  return {
-    allowed: false,
-    reason: `The ${callclass} call class holds no consent grant over the native transport; the gate asks per class and never widens a read grant.`
-  };
-}
-function nativesurfaceresult(input) {
-  const catalog = nativesurfacecatalog().find((entry) => entry.surface === input.surface);
-  const callclass = catalog?.callclass ?? input.callclass;
-  const held = Object.keys(input.details).filter(
-    (key) => nativesecretkeys.includes(key.toLowerCase().replaceAll(" ", "").replaceAll("-", ""))
-  );
-  const details = { ...input.details };
-  for (const key of held) delete details[key];
-  return { surface: input.surface, callclass, details, at: input.now };
-}
-function nativediagnostics(input) {
-  const state = input.state ?? nativedefaultstate();
-  const settings = input.settings;
-  const sessions = (input.sessions ?? []).map((session) => ({
-    port: session.port,
-    connections: session.connections,
-    expired: session.expiresat !== void 0 && session.expiresat <= input.now
-  }));
-  return {
-    installed: state.installed,
-    port: state.port,
-    ...state.hostname !== void 0 ? { hostname: state.hostname } : {},
-    ...state.extensionid !== void 0 ? { extensionid: state.extensionid } : {},
-    ...state.installerversion !== void 0 ? { installerversion: state.installerversion } : {},
-    ...state.companionversion !== void 0 ? { companionversion: state.companionversion } : {},
-    ...state.companionprotocol !== void 0 ? { companionprotocol: state.companionprotocol } : {},
-    ...state.wsbridgeport !== void 0 ? { wsbridgeport: state.wsbridgeport } : {},
-    nativebridgeprotocol: nativebridgeprotocolmajor,
-    degraded: nativedegradationof({
-      state,
-      ...input.negotiated !== void 0 ? { negotiated: input.negotiated } : {}
-    }),
-    transportconsent: settings?.nativetransportconsent === true,
-    classconsents: settings?.nativecallclassconsents ?? [],
-    surfaceconsents: settings?.nativesurfaceconsents ?? [],
-    sessions,
-    lasterrors: state.lasterrors ?? []
-  };
-}
-export {
-  attachnativehost,
-  bridgeframerate,
-  bridgepayload,
-  bridgestatuslabel,
-  bridgestatusview,
-  carddecision,
-  chateventof,
-  chateventpayload,
-  chatrowsof,
-  companionhandshakeframe,
-  composeenvelope,
-  connectrelay,
-  contractcapabilities,
-  crashnativehost,
-  decisionpayload,
-  detachnativehost,
-  disconnectrelay,
-  enqueuebridge,
-  envelopeacceptance,
-  eventpostbody,
-  eventstreambody,
-  frameauth,
-  frameof,
-  heartbeatevent,
-  heartbeattick,
-  hostmanifestdestination,
-  idleexpired,
-  installnativehost,
-  minimalplandigest,
-  nativebridgeprotocolmajor,
-  nativecallevent,
-  nativecallrecordof,
-  nativechoices,
-  nativeclassgrant,
-  nativecorrelationid,
-  nativedefaultstate,
-  nativedegradationof,
-  nativediagnostics,
-  nativeerrorof,
-  nativefailureof,
-  nativeframecheck,
-  nativeframeof,
-  nativeheartbeatframe,
-  nativehostcapabilities,
-  nativehostidplaceholder,
-  nativehostinstallerversion,
-  nativehostmanifesttemplate,
-  nativemajorversion,
-  nativemessagingdirname,
-  nativeportliveness,
-  nativeprotocolcompatible,
-  nativeratecheck,
-  nativesecretexclusion,
-  nativesecretkeys,
-  nativesurfacecatalog,
-  nativesurfacegrant,
-  nativesurfaceresult,
-  nativetransportenabled,
-  negotiatecapabilities,
-  negotiatenativecapabilities,
-  newrelayclient,
-  pagecontentkeys,
-  pairingpanel,
-  parsecompanionhandshake,
-  parseenvelope,
-  parsewireframe,
-  planproposaleventof,
-  planproposaleventpayload,
-  planrevieweventpayload,
-  postevent,
-  progresseventpayload,
-  reattachnativehost,
-  receiveframe,
-  recordnativecall,
-  redactnativeframe,
-  relayorigin,
-  replaybridgequeue,
-  reviewcardsof,
-  reviewgateoutcome,
-  sendframe,
-  servercontractversion,
-  servereventtypes,
-  serveroperations,
-  sessioncreatebody,
-  sessionjoinbody,
-  sitemanifest,
-  sitemanifestof,
-  stableopid,
-  uninstallnativehost,
-  verifyframeauth,
-  widgetview,
-  wsbridgeadvertiseframe,
-  wsbridgebindcheck,
-  wsbridgeconnection,
-  wsbridgeenvelopeof,
-  wsbridgeextensionconnect,
-  wsbridgeframeauth,
-  wsbridgeframecounted,
-  wsbridgeframeof,
-  wsbridgeidlesweep,
-  wsbridgelocalhosts,
-  wsbridgereport,
-  wsbridgesessionstart,
-  wsbridgestreamname
-};
-//# sourceMappingURL=bridge.js.map