@wenathlan/extension 1.1.30 → 1.1.31

package/README.md

@@ -2,17 +2,19 @@
 
 Devthink is a **consent-first browser-agent bridge** distributed as a TypeScript library and a Chromium Manifest V3 extension. It turns a user-provided browser objective into a bounded, reviewable plan. The user must start the active-tab session and approve the plan before any page action reaches the browser.
 
-Version: **1.1.30**. License: **GPL-3.0-only**. The repository is `wenathlan/extension`; the npm-compatible scoped package identifier is `@wenathlan/extension`.
+Version: **1.1.31**. License: **GPL-3.0-only**. The repository is `wenathlan/extension`; the npm-compatible scoped package identifier is `@wenathlan/extension`.
 
 ## What it does
 
-| Capability | Behavior in 1.1.30 |
+| Capability | Behavior in 1.1.31 |
 | --- | --- |
 | Active-tab session | The user starts a short-lived session for one HTTPS tab and one origin. |
 | Page observation | The extension captures a bounded semantic inventory of interactive elements and form labels. |
 | Plan proposal | A local plan can be created immediately; an optional user-configured HTTPS endpoint can return a typed plan proposal. |
 | Review gate | Every remote proposal starts in `pending`; it cannot reach the page bridge before explicit approval. |
-| Browser tools | Reviewed plans may observe, inspect, focus, click, type approved text or navigate within the same approved origin. |
+| Browser tools | Reviewed plans may observe, inspect, focus, click, type approved text, scroll, select an existing option, hover, extract bounded text or links, wait a bounded pause or navigate within the same approved origin. |
+| Session pause | The user can pause and resume the active session; a paused session blocks every execution and preview while keeping the reviewed plan alive. |
+| Plan progress | Each reviewed step is tracked, completed steps are marked in the side panel and the approved plan closes automatically once every step has executed. |
 | Stop and audit | The user can stop the session at any time. Configuration, proposals, decisions and results remain in local extension storage. |
 
 The project is deliberately **not** a hosted control platform. It does not depend on a provider-specific sandbox, server URL or browser profile. A configured endpoint is optional, has to use HTTPS and receives only the session record and bounded observation required to produce a plan.
@@ -40,7 +42,7 @@ The endpoint field intentionally has no default URL. Enter a URL such as `https:
 
 ```json
 {
-  "version": "1.1.30",
+  "version": "1.1.31",
   "objective": "User supplied objective",
   "session": { "id": "uuid", "tabid": 1, "origin": "https://example.com" },
   "observation": { "url": "https://example.com/path", "interactive": [] }

package/dist/index.js

@@ -28,6 +28,12 @@ var sessionmemory = class {
   async setdiagnostic(value) {
     return this.adapter.set("diagnostic", value);
   }
+  async getprogress() {
+    return this.adapter.get("progress");
+  }
+  async setprogress(value) {
+    return this.adapter.set("progress", value);
+  }
   async getaudit() {
     return await this.adapter.get("audit") ?? [];
   }
@@ -41,8 +47,10 @@ function randomid() {
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate"]);
-var allowedactions = /* @__PURE__ */ new Set(["observe", "inspect", "focus", "click", "type", "navigate"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select"]);
+var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover"]);
+var allowedactions = /* @__PURE__ */ new Set(["observe", "inspect", "focus", "click", "type", "navigate", "scroll", "select", "hover", "extract", "wait"]);
+var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover"]);
 function normalizeendpoint(value) {
   const endpoint = new URL(value.trim());
   if (endpoint.protocol !== "https:") throw new Error("Devthink accepts HTTPS endpoints only.");
@@ -57,12 +65,25 @@ function hostpattern(origin) {
 function actionrisk(kind) {
   if (!allowedactions.has(kind)) throw new Error("Unsupported browser action.");
   if (sensitiveactions.has(kind)) return "sensitive";
-  return kind === "focus" ? "interaction" : "read";
+  return interactionactions.has(kind) ? "interaction" : "read";
+}
+function waitduration(step) {
+  const requested = step.value ? Number.parseInt(step.value, 10) : 250;
+  if (!Number.isFinite(requested) || requested < 0) throw new Error("Wait duration must be zero or a positive number of milliseconds.");
+  return Math.min(requested, 1e4);
 }
 function validatestep(step, origin) {
   if (!allowedactions.has(step.kind)) return { allowed: false, reason: "Unsupported action kind." };
   if (!step.summary.trim()) return { allowed: false, reason: "A human-readable action summary is required." };
-  if ((step.kind === "click" || step.kind === "focus" || step.kind === "inspect" || step.kind === "type") && !step.target?.trim()) return { allowed: false, reason: "A page target is required." };
+  if (targetactions.has(step.kind) && !step.target?.trim()) return { allowed: false, reason: "A page target is required." };
+  if (step.kind === "select" && !step.value?.trim()) return { allowed: false, reason: "A reviewed option value is required." };
+  if (step.kind === "wait") {
+    try {
+      waitduration(step);
+    } catch {
+      return { allowed: false, reason: "Wait duration must be zero or a positive number of milliseconds." };
+    }
+  }
   if (step.kind === "navigate") {
     if (!step.value) return { allowed: false, reason: "A navigation URL is required." };
     try {
@@ -73,18 +94,24 @@ function validatestep(step, origin) {
   }
   return { allowed: true };
 }
+function sessiongate(input) {
+  if (!input.session || input.session.stoppedat) return { allowed: false, reason: "No active browser session exists." };
+  if (input.session.expiresat <= input.now) return { allowed: false, reason: "The browser session has expired." };
+  if (input.session.pausedat) return { allowed: false, reason: `The browser session is paused and cannot ${input.action}.` };
+  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: `The ${input.action} is outside the approved tab or origin.` };
+  return { allowed: true };
+}
 function canexecute(input) {
   const now = input.now ?? Date.now();
-  if (!input.session || input.session.stoppedat) return { allowed: false, reason: "No active browser session exists." };
-  if (input.session.expiresat <= now) return { allowed: false, reason: "The browser session has expired." };
-  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: "The action is outside the approved tab or origin." };
+  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: "execute an action" });
+  if (!gate.allowed) return gate;
   if (!input.plan || input.plan.state !== "approved") return { allowed: false, reason: "The plan has not received explicit approval." };
   if (input.plan.expiresat <= now) return { allowed: false, reason: "The approved plan has expired." };
   return validatestep(input.step, input.origin);
 }
 
 // version.ts
-var packageversion = "1.1.30";
+var packageversion = "1.1.31";
 
 // types.ts
 var protocolversion = packageversion;
@@ -103,7 +130,7 @@ function parseproposal(value, origin) {
   if (root.version !== protocolversion) throw new Error("Unsupported protocol version.");
   const planinput = record(root.plan);
   const stepsinput = planinput.steps;
-  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 20) throw new Error("A plan needs between one and twenty steps.");
+  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 50) throw new Error("A plan needs between one and fifty steps.");
   const steps = stepsinput.map((input, index) => {
     const candidate = record(input);
     const kind = text(candidate.kind, `step ${index + 1} kind`);

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../memory.ts", "../policy.ts", "../version.ts", "../types.ts", "../protocol.ts"],
-  "sourcesContent": ["import type { agentplan, agentsession, auditevent, diagnosticreport, endpointconfig } from \"./types.js\";\n\n/** Provides a small storage seam that works in browser, tests and future adapters. */\nexport interface memoryadapter {\n  get<T>(key: string): Promise<T | undefined>;\n  set<T>(key: string, value: T): Promise<void>;\n}\n\nexport class sessionmemory {\n  constructor(private readonly adapter: memoryadapter) {}\n\n  async getconfig(): Promise<endpointconfig | undefined> { return this.adapter.get<endpointconfig>(\"config\"); }\n  async setconfig(value: endpointconfig): Promise<void> { return this.adapter.set(\"config\", value); }\n  async getsession(): Promise<agentsession | undefined> { return this.adapter.get<agentsession>(\"session\"); }\n  async setsession(value: agentsession): Promise<void> { return this.adapter.set(\"session\", value); }\n  async getplan(): Promise<agentplan | undefined> { return this.adapter.get<agentplan>(\"plan\"); }\n  async setplan(value: agentplan): Promise<void> { return this.adapter.set(\"plan\", value); }\n  async getdiagnostic(): Promise<diagnosticreport | undefined> { return this.adapter.get<diagnosticreport>(\"diagnostic\"); }\n  async setdiagnostic(value: diagnosticreport): Promise<void> { return this.adapter.set(\"diagnostic\", value); }\n  async getaudit(): Promise<auditevent[]> { return (await this.adapter.get<auditevent[]>(\"audit\")) ?? []; }\n  async addaudi(event: auditevent): Promise<void> {\n    const records = await this.getaudit();\n    await this.adapter.set(\"audit\", [event, ...records].slice(0, 100));\n  }\n}\n\n/** Creates identifiers locally without a network dependency. */\nexport function randomid(): string {\n  return crypto.randomUUID();\n}\n", "import type { actionkind, agentplan, agentsession, endpointconfig, policyevaluation, toolstep } from \"./types.js\";\n\nconst sensitiveactions = new Set<actionkind>([\"click\", \"type\", \"navigate\"]);\nconst allowedactions = new Set<actionkind>([\"observe\", \"inspect\", \"focus\", \"click\", \"type\", \"navigate\"]);\n\n/** Normalizes a user supplied HTTPS endpoint without preserving a provider lock-in. */\nexport function normalizeendpoint(value: string): endpointconfig {\n  const endpoint = new URL(value.trim());\n  if (endpoint.protocol !== \"https:\") throw new Error(\"Devthink accepts HTTPS endpoints only.\");\n  if (endpoint.username || endpoint.password) throw new Error(\"Endpoint credentials are not allowed in the URL.\");\n  return { endpoint: endpoint.toString(), origin: endpoint.origin, configuredat: Date.now() };\n}\n\n/** Creates the exact optional host pattern requested from Chromium. */\nexport function hostpattern(origin: string): string {\n  const parsed = new URL(origin);\n  if (parsed.protocol !== \"https:\") throw new Error(\"Only HTTPS origins can be granted.\");\n  return `${parsed.origin}/*`;\n}\n\n/** Defines action risk from a fixed local allowlist. */\nexport function actionrisk(kind: actionkind): \"read\" | \"interaction\" | \"sensitive\" {\n  if (!allowedactions.has(kind)) throw new Error(\"Unsupported browser action.\");\n  if (sensitiveactions.has(kind)) return \"sensitive\";\n  return kind === \"focus\" ? \"interaction\" : \"read\";\n}\n\n/** Validates a single proposal against the active tab origin and local policy. */\nexport function validatestep(step: toolstep, origin: string): policyevaluation {\n  if (!allowedactions.has(step.kind)) return { allowed: false, reason: \"Unsupported action kind.\" };\n  if (!step.summary.trim()) return { allowed: false, reason: \"A human-readable action summary is required.\" };\n  if ((step.kind === \"click\" || step.kind === \"focus\" || step.kind === \"inspect\" || step.kind === \"type\") && !step.target?.trim()) return { allowed: false, reason: \"A page target is required.\" };\n  if (step.kind === \"navigate\") {\n    if (!step.value) return { allowed: false, reason: \"A navigation URL is required.\" };\n    try {\n      if (new URL(step.value).origin !== origin) return { allowed: false, reason: \"Navigation must remain within the approved origin.\" };\n    } catch {\n      return { allowed: false, reason: \"Navigation URL is invalid.\" };\n    }\n  }\n  return { allowed: true };\n}\n\n/** Applies the consent gate immediately before an action reaches the page bridge. */\nexport function canexecute(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: \"The action is outside the approved tab or origin.\" };\n  if (!input.plan || input.plan.state !== \"approved\") return { allowed: false, reason: \"The plan has not received explicit approval.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The approved plan has expired.\" };\n  return validatestep(input.step, input.origin);\n}\n\n/** Allows a non-mutating, temporary target preview during plan review. */\nexport function canpreview(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: \"The preview is outside the approved tab or origin.\" };\n  if (!input.plan || ![\"pending\", \"approved\"].includes(input.plan.state)) return { allowed: false, reason: \"Only a reviewed pending or approved plan can be previewed.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The reviewed plan has expired.\" };\n  if (![\"focus\", \"inspect\", \"click\", \"type\"].includes(input.step.kind)) return { allowed: false, reason: \"Only a target-based action can be previewed.\" };\n  return validatestep(input.step, input.origin);\n}\n", "/** Canonical package version synchronized from package.json. */\nexport const packageversion = \"1.1.30\" as const;\n", "/** Shared contracts for every Devthink target. */\nimport { packageversion } from \"./version.js\";\n\nexport const protocolversion = packageversion;\n\nexport type actionkind = \"observe\" | \"inspect\" | \"focus\" | \"click\" | \"type\" | \"navigate\";\nexport type actionrisk = \"read\" | \"interaction\" | \"sensitive\";\nexport type planstate = \"draft\" | \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"completed\" | \"cancelled\";\nexport type auditkind = \"configure\" | \"session\" | \"observe\" | \"proposal\" | \"approval\" | \"action\" | \"error\" | \"stop\";\n\nexport interface toolstep {\n  id: string;\n  kind: actionkind;\n  target?: string;\n  value?: string;\n  summary: string;\n  risk: actionrisk;\n}\n\nexport interface agentplan {\n  id: string;\n  objective: string;\n  origin: string;\n  steps: toolstep[];\n  createdat: number;\n  expiresat: number;\n  state: planstate;\n  approvedat?: number;\n}\n\nexport interface agentsession {\n  id: string;\n  tabid: number;\n  origin: string;\n  startedat: number;\n  expiresat: number;\n  stoppedat?: number;\n}\n\nexport interface endpointconfig {\n  endpoint: string;\n  origin: string;\n  configuredat: number;\n}\n\nexport interface observation {\n  url: string;\n  title: string;\n  textpreview: string;\n  textlength: number;\n  forms: Array<{ label: string; type: string; name: string }>;\n  interactive: Array<{ selector: string; role: string; label: string }>;\n  capturedat: number;\n}\n\nexport interface auditevent {\n  id: string;\n  kind: auditkind;\n  at: number;\n  summary: string;\n  sessionid?: string;\n  planid?: string;\n  stepid?: string;\n}\n\nexport interface diagnosticreport {\n  id: string;\n  sessionid: string;\n  origin: string;\n  capturedat: number;\n  tabid: number;\n  title: string;\n  textlength: number;\n  interactivecount: number;\n  formcount: number;\n  bridgeavailable: boolean;\n}\n\nexport interface proposalrequest {\n  objective: string;\n  session: agentsession;\n  observation: observation;\n}\n\nexport interface planproposal {\n  version: typeof protocolversion;\n  plan: agentplan;\n}\n\nexport interface policyevaluation {\n  allowed: boolean;\n  reason?: string;\n}\n", "import { actionrisk, validatestep } from \"./policy.js\";\nimport { protocolversion, type agentplan, type planproposal, type proposalrequest, type toolstep } from \"./types.js\";\n\nfunction record(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) throw new Error(\"Protocol message must be an object.\");\n  return value as Record<string, unknown>;\n}\n\nfunction text(value: unknown, field: string): string {\n  if (typeof value !== \"string\" || !value.trim()) throw new Error(`${field} must be a non-empty string.`);\n  return value.trim();\n}\n\n/** Validates agent output before it becomes a locally reviewable plan. */\nexport function parseproposal(value: unknown, origin: string): planproposal {\n  const root = record(value);\n  if (root.version !== protocolversion) throw new Error(\"Unsupported protocol version.\");\n  const planinput = record(root.plan);\n  const stepsinput = planinput.steps;\n  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 20) throw new Error(\"A plan needs between one and twenty steps.\");\n  const steps: toolstep[] = stepsinput.map((input, index) => {\n    const candidate = record(input);\n    const kind = text(candidate.kind, `step ${index + 1} kind`) as toolstep[\"kind\"];\n    const step: toolstep = {\n      id: typeof candidate.id === \"string\" ? candidate.id : crypto.randomUUID(),\n      kind,\n      summary: text(candidate.summary, `step ${index + 1} summary`),\n      risk: actionrisk(kind),\n      ...(typeof candidate.target === \"string\" ? { target: candidate.target } : {}),\n      ...(typeof candidate.value === \"string\" ? { value: candidate.value } : {}),\n    };\n    const evaluation = validatestep(step, origin);\n    if (!evaluation.allowed) throw new Error(evaluation.reason);\n    return step;\n  });\n  const createdat = Date.now();\n  const plan: agentplan = {\n    id: typeof planinput.id === \"string\" ? planinput.id : crypto.randomUUID(),\n    objective: text(planinput.objective, \"objective\"),\n    origin,\n    steps,\n    createdat,\n    expiresat: Math.min(typeof planinput.expiresat === \"number\" ? planinput.expiresat : createdat + 10 * 60 * 1000, createdat + 30 * 60 * 1000),\n    state: \"pending\",\n  };\n  if (plan.expiresat <= createdat) throw new Error(\"Plan expiry must be in the future.\");\n  return { version: protocolversion, plan };\n}\n\n/** Shapes the only data that may be sent to a user-configured agent endpoint. */\nexport function requestbody(input: proposalrequest): string {\n  return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation });\n}\n"],
-  "mappings": ";AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,SAAwB;AAAxB;AAAA,EAAyB;AAAA,EAAzB;AAAA,EAE7B,MAAM,YAAiD;AAAE,WAAO,KAAK,QAAQ,IAAoB,QAAQ;AAAA,EAAG;AAAA,EAC5G,MAAM,UAAU,OAAsC;AAAE,WAAO,KAAK,QAAQ,IAAI,UAAU,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,aAAgD;AAAE,WAAO,KAAK,QAAQ,IAAkB,SAAS;AAAA,EAAG;AAAA,EAC1G,MAAM,WAAW,OAAoC;AAAE,WAAO,KAAK,QAAQ,IAAI,WAAW,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,UAA0C;AAAE,WAAO,KAAK,QAAQ,IAAe,MAAM;AAAA,EAAG;AAAA,EAC9F,MAAM,QAAQ,OAAiC;AAAE,WAAO,KAAK,QAAQ,IAAI,QAAQ,KAAK;AAAA,EAAG;AAAA,EACzF,MAAM,gBAAuD;AAAE,WAAO,KAAK,QAAQ,IAAsB,YAAY;AAAA,EAAG;AAAA,EACxH,MAAM,cAAc,OAAwC;AAAE,WAAO,KAAK,QAAQ,IAAI,cAAc,KAAK;AAAA,EAAG;AAAA,EAC5G,MAAM,WAAkC;AAAE,WAAQ,MAAM,KAAK,QAAQ,IAAkB,OAAO,KAAM,CAAC;AAAA,EAAG;AAAA,EACxG,MAAM,QAAQ,OAAkC;AAC9C,UAAM,UAAU,MAAM,KAAK,SAAS;AACpC,UAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;AAAA,EACnE;AACF;AAGO,SAAS,WAAmB;AACjC,SAAO,OAAO,WAAW;AAC3B;;;AC3BA,IAAM,mBAAmB,oBAAI,IAAgB,CAAC,SAAS,QAAQ,UAAU,CAAC;AAC1E,IAAM,iBAAiB,oBAAI,IAAgB,CAAC,WAAW,WAAW,SAAS,SAAS,QAAQ,UAAU,CAAC;AAGhG,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,WAAW,IAAI,IAAI,MAAM,KAAK,CAAC;AACrC,MAAI,SAAS,aAAa,SAAU,OAAM,IAAI,MAAM,wCAAwC;AAC5F,MAAI,SAAS,YAAY,SAAS,SAAU,OAAM,IAAI,MAAM,kDAAkD;AAC9G,SAAO,EAAE,UAAU,SAAS,SAAS,GAAG,QAAQ,SAAS,QAAQ,cAAc,KAAK,IAAI,EAAE;AAC5F;AAGO,SAAS,YAAY,QAAwB;AAClD,QAAM,SAAS,IAAI,IAAI,MAAM;AAC7B,MAAI,OAAO,aAAa,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACtF,SAAO,GAAG,OAAO,MAAM;AACzB;AAGO,SAAS,WAAW,MAAwD;AACjF,MAAI,CAAC,eAAe,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,6BAA6B;AAC5E,MAAI,iBAAiB,IAAI,IAAI,EAAG,QAAO;AACvC,SAAO,SAAS,UAAU,gBAAgB;AAC5C;AAGO,SAAS,aAAa,MAAgB,QAAkC;AAC7E,MAAI,CAAC,eAAe,IAAI,KAAK,IAAI,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,2BAA2B;AAChG,MAAI,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AAC1G,OAAK,KAAK,SAAS,WAAW,KAAK,SAAS,WAAW,KAAK,SAAS,aAAa,KAAK,SAAS,WAAW,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AAC/L,MAAI,KAAK,SAAS,YAAY;AAC5B,QAAI,CAAC,KAAK,MAAO,QAAO,EAAE,SAAS,OAAO,QAAQ,gCAAgC;AAClF,QAAI;AACF,UAAI,IAAI,IAAI,KAAK,KAAK,EAAE,WAAW,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,qDAAqD;AAAA,IACnI,QAAQ;AACN,aAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AAAA,IAChE;AAAA,EACF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAGO,SAAS,WAAW,OAA0J;AACnL,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,MAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,UAAW,QAAO,EAAE,SAAS,OAAO,QAAQ,oCAAoC;AACpH,MAAI,MAAM,QAAQ,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,mCAAmC;AACxG,MAAI,MAAM,QAAQ,UAAU,MAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,oDAAoD;AACvK,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,UAAU,WAAY,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AACpI,MAAI,MAAM,KAAK,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,iCAAiC;AACnG,SAAO,aAAa,MAAM,MAAM,MAAM,MAAM;AAC9C;;;ACnDO,IAAM,iBAAiB;;;ACEvB,IAAM,kBAAkB;;;ACA/B,SAAS,OAAO,OAAyC;AACvD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACtH,SAAO;AACT;AAEA,SAAS,KAAK,OAAgB,OAAuB;AACnD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,8BAA8B;AACtG,SAAO,MAAM,KAAK;AACpB;AAGO,SAAS,cAAc,OAAgB,QAA8B;AAC1E,QAAM,OAAO,OAAO,KAAK;AACzB,MAAI,KAAK,YAAY,gBAAiB,OAAM,IAAI,MAAM,+BAA+B;AACrF,QAAM,YAAY,OAAO,KAAK,IAAI;AAClC,QAAM,aAAa,UAAU;AAC7B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,WAAW,SAAS,GAAI,OAAM,IAAI,MAAM,4CAA4C;AACjJ,QAAM,QAAoB,WAAW,IAAI,CAAC,OAAO,UAAU;AACzD,UAAM,YAAY,OAAO,KAAK;AAC9B,UAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,QAAQ,CAAC,OAAO;AAC1D,UAAM,OAAiB;AAAA,MACrB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,MACxE;AAAA,MACA,SAAS,KAAK,UAAU,SAAS,QAAQ,QAAQ,CAAC,UAAU;AAAA,MAC5D,MAAM,WAAW,IAAI;AAAA,MACrB,GAAI,OAAO,UAAU,WAAW,WAAW,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,MAC3E,GAAI,OAAO,UAAU,UAAU,WAAW,EAAE,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,aAAa,aAAa,MAAM,MAAM;AAC5C,QAAI,CAAC,WAAW,QAAS,OAAM,IAAI,MAAM,WAAW,MAAM;AAC1D,WAAO;AAAA,EACT,CAAC;AACD,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,OAAkB;AAAA,IACtB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,IACxE,WAAW,KAAK,UAAU,WAAW,WAAW;AAAA,IAChD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,KAAK,IAAI,OAAO,UAAU,cAAc,WAAW,UAAU,YAAY,YAAY,KAAK,KAAK,KAAM,YAAY,KAAK,KAAK,GAAI;AAAA,IAC1I,OAAO;AAAA,EACT;AACA,MAAI,KAAK,aAAa,UAAW,OAAM,IAAI,MAAM,oCAAoC;AACrF,SAAO,EAAE,SAAS,iBAAiB,KAAK;AAC1C;AAGO,SAAS,YAAY,OAAgC;AAC1D,SAAO,KAAK,UAAU,EAAE,SAAS,iBAAiB,WAAW,MAAM,WAAW,SAAS,MAAM,SAAS,aAAa,MAAM,YAAY,CAAC;AACxI;",
+  "sourcesContent": ["import type { agentplan, agentsession, auditevent, diagnosticreport, endpointconfig, planprogress } from \"./types.js\";\n\n/** Provides a small storage seam that works in browser, tests and future adapters. */\nexport interface memoryadapter {\n  get<T>(key: string): Promise<T | undefined>;\n  set<T>(key: string, value: T): Promise<void>;\n}\n\nexport class sessionmemory {\n  constructor(private readonly adapter: memoryadapter) {}\n\n  async getconfig(): Promise<endpointconfig | undefined> { return this.adapter.get<endpointconfig>(\"config\"); }\n  async setconfig(value: endpointconfig): Promise<void> { return this.adapter.set(\"config\", value); }\n  async getsession(): Promise<agentsession | undefined> { return this.adapter.get<agentsession>(\"session\"); }\n  async setsession(value: agentsession): Promise<void> { return this.adapter.set(\"session\", value); }\n  async getplan(): Promise<agentplan | undefined> { return this.adapter.get<agentplan>(\"plan\"); }\n  async setplan(value: agentplan): Promise<void> { return this.adapter.set(\"plan\", value); }\n  async getdiagnostic(): Promise<diagnosticreport | undefined> { return this.adapter.get<diagnosticreport>(\"diagnostic\"); }\n  async setdiagnostic(value: diagnosticreport): Promise<void> { return this.adapter.set(\"diagnostic\", value); }\n  async getprogress(): Promise<planprogress | undefined> { return this.adapter.get<planprogress>(\"progress\"); }\n  async setprogress(value: planprogress): Promise<void> { return this.adapter.set(\"progress\", value); }\n  async getaudit(): Promise<auditevent[]> { return (await this.adapter.get<auditevent[]>(\"audit\")) ?? []; }\n  async addaudi(event: auditevent): Promise<void> {\n    const records = await this.getaudit();\n    await this.adapter.set(\"audit\", [event, ...records].slice(0, 100));\n  }\n}\n\n/** Creates identifiers locally without a network dependency. */\nexport function randomid(): string {\n  return crypto.randomUUID();\n}\n", "import type { actionkind, agentplan, agentsession, endpointconfig, policyevaluation, toolstep } from \"./types.js\";\n\nconst sensitiveactions = new Set<actionkind>([\"click\", \"type\", \"navigate\", \"select\"]);\nconst interactionactions = new Set<actionkind>([\"focus\", \"scroll\", \"hover\"]);\nconst allowedactions = new Set<actionkind>([\"observe\", \"inspect\", \"focus\", \"click\", \"type\", \"navigate\", \"scroll\", \"select\", \"hover\", \"extract\", \"wait\"]);\nconst targetactions = new Set<actionkind>([\"inspect\", \"focus\", \"click\", \"type\", \"scroll\", \"select\", \"hover\"]);\n\n/** Normalizes a user supplied HTTPS endpoint without preserving a provider lock-in. */\nexport function normalizeendpoint(value: string): endpointconfig {\n  const endpoint = new URL(value.trim());\n  if (endpoint.protocol !== \"https:\") throw new Error(\"Devthink accepts HTTPS endpoints only.\");\n  if (endpoint.username || endpoint.password) throw new Error(\"Endpoint credentials are not allowed in the URL.\");\n  return { endpoint: endpoint.toString(), origin: endpoint.origin, configuredat: Date.now() };\n}\n\n/** Creates the exact optional host pattern requested from Chromium. */\nexport function hostpattern(origin: string): string {\n  const parsed = new URL(origin);\n  if (parsed.protocol !== \"https:\") throw new Error(\"Only HTTPS origins can be granted.\");\n  return `${parsed.origin}/*`;\n}\n\n/** Defines action risk from a fixed local allowlist. */\nexport function actionrisk(kind: actionkind): \"read\" | \"interaction\" | \"sensitive\" {\n  if (!allowedactions.has(kind)) throw new Error(\"Unsupported browser action.\");\n  if (sensitiveactions.has(kind)) return \"sensitive\";\n  return interactionactions.has(kind) ? \"interaction\" : \"read\";\n}\n\n/** Parses the bounded pause duration of a wait step. */\nexport function waitduration(step: toolstep): number {\n  const requested = step.value ? Number.parseInt(step.value, 10) : 250;\n  if (!Number.isFinite(requested) || requested < 0) throw new Error(\"Wait duration must be zero or a positive number of milliseconds.\");\n  return Math.min(requested, 10_000);\n}\n\n/** Validates a single proposal against the active tab origin and local policy. */\nexport function validatestep(step: toolstep, origin: string): policyevaluation {\n  if (!allowedactions.has(step.kind)) return { allowed: false, reason: \"Unsupported action kind.\" };\n  if (!step.summary.trim()) return { allowed: false, reason: \"A human-readable action summary is required.\" };\n  if (targetactions.has(step.kind) && !step.target?.trim()) return { allowed: false, reason: \"A page target is required.\" };\n  if (step.kind === \"select\" && !step.value?.trim()) return { allowed: false, reason: \"A reviewed option value is required.\" };\n  if (step.kind === \"wait\") {\n    try { waitduration(step); } catch { return { allowed: false, reason: \"Wait duration must be zero or a positive number of milliseconds.\" }; }\n  }\n  if (step.kind === \"navigate\") {\n    if (!step.value) return { allowed: false, reason: \"A navigation URL is required.\" };\n    try {\n      if (new URL(step.value).origin !== origin) return { allowed: false, reason: \"Navigation must remain within the approved origin.\" };\n    } catch {\n      return { allowed: false, reason: \"Navigation URL is invalid.\" };\n    }\n  }\n  return { allowed: true };\n}\n\n/** Shared session gate: a live, unpaused session that still matches the active tab. */\nfunction sessiongate(input: { session: agentsession | undefined; tabid: number; origin: string; now: number; action: string }): policyevaluation {\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= input.now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.pausedat) return { allowed: false, reason: `The browser session is paused and cannot ${input.action}.` };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: `The ${input.action} is outside the approved tab or origin.` };\n  return { allowed: true };\n}\n\n/** Applies the consent gate immediately before an action reaches the page bridge. */\nexport function canexecute(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: \"execute an action\" });\n  if (!gate.allowed) return gate;\n  if (!input.plan || input.plan.state !== \"approved\") return { allowed: false, reason: \"The plan has not received explicit approval.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The approved plan has expired.\" };\n  return validatestep(input.step, input.origin);\n}\n\n/** Allows a non-mutating, temporary target preview during plan review. */\nexport function canpreview(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: \"preview a target\" });\n  if (!gate.allowed) return gate;\n  if (!input.plan || ![\"pending\", \"approved\"].includes(input.plan.state)) return { allowed: false, reason: \"Only a reviewed pending or approved plan can be previewed.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The reviewed plan has expired.\" };\n  if (![\"focus\", \"inspect\", \"click\", \"type\", \"scroll\", \"select\", \"hover\"].includes(input.step.kind)) return { allowed: false, reason: \"Only a target-based action can be previewed.\" };\n  return validatestep(input.step, input.origin);\n}\n", "/** Canonical package version synchronized from package.json. */\nexport const packageversion = \"1.1.31\" as const;\n", "/** Shared contracts for every Devthink target. */\nimport { packageversion } from \"./version.js\";\n\nexport const protocolversion = packageversion;\n\nexport type actionkind = \"observe\" | \"inspect\" | \"focus\" | \"click\" | \"type\" | \"navigate\" | \"scroll\" | \"select\" | \"hover\" | \"extract\" | \"wait\";\nexport type actionrisk = \"read\" | \"interaction\" | \"sensitive\";\nexport type planstate = \"draft\" | \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"completed\" | \"cancelled\";\nexport type auditkind = \"configure\" | \"session\" | \"observe\" | \"proposal\" | \"approval\" | \"action\" | \"error\" | \"stop\" | \"pause\" | \"resume\" | \"complete\";\n\nexport interface toolstep {\n  id: string;\n  kind: actionkind;\n  target?: string;\n  value?: string;\n  summary: string;\n  risk: actionrisk;\n}\n\nexport interface agentplan {\n  id: string;\n  objective: string;\n  origin: string;\n  steps: toolstep[];\n  createdat: number;\n  expiresat: number;\n  state: planstate;\n  approvedat?: number;\n  completedat?: number;\n}\n\nexport interface agentsession {\n  id: string;\n  tabid: number;\n  origin: string;\n  startedat: number;\n  expiresat: number;\n  stoppedat?: number;\n  pausedat?: number;\n}\n\nexport interface endpointconfig {\n  endpoint: string;\n  origin: string;\n  configuredat: number;\n}\n\nexport interface observation {\n  url: string;\n  title: string;\n  textpreview: string;\n  textlength: number;\n  forms: Array<{ label: string; type: string; name: string; options?: string[] }>;\n  interactive: Array<{ selector: string; role: string; label: string }>;\n  capturedat: number;\n}\n\nexport interface auditevent {\n  id: string;\n  kind: auditkind;\n  at: number;\n  summary: string;\n  sessionid?: string;\n  planid?: string;\n  stepid?: string;\n}\n\nexport interface diagnosticreport {\n  id: string;\n  sessionid: string;\n  origin: string;\n  capturedat: number;\n  tabid: number;\n  title: string;\n  textlength: number;\n  interactivecount: number;\n  formcount: number;\n  bridgeavailable: boolean;\n}\n\nexport interface proposalrequest {\n  objective: string;\n  session: agentsession;\n  observation: observation;\n}\n\nexport interface planproposal {\n  version: typeof protocolversion;\n  plan: agentplan;\n}\n\nexport interface policyevaluation {\n  allowed: boolean;\n  reason?: string;\n}\n\n/** Tracks which reviewed steps of one plan have already executed locally. */\nexport interface planprogress {\n  planid: string;\n  completedsteps: string[];\n  updatedat: number;\n}\n", "import { actionrisk, validatestep } from \"./policy.js\";\nimport { protocolversion, type agentplan, type planproposal, type proposalrequest, type toolstep } from \"./types.js\";\n\nfunction record(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) throw new Error(\"Protocol message must be an object.\");\n  return value as Record<string, unknown>;\n}\n\nfunction text(value: unknown, field: string): string {\n  if (typeof value !== \"string\" || !value.trim()) throw new Error(`${field} must be a non-empty string.`);\n  return value.trim();\n}\n\n/** Validates agent output before it becomes a locally reviewable plan. */\nexport function parseproposal(value: unknown, origin: string): planproposal {\n  const root = record(value);\n  if (root.version !== protocolversion) throw new Error(\"Unsupported protocol version.\");\n  const planinput = record(root.plan);\n  const stepsinput = planinput.steps;\n  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 50) throw new Error(\"A plan needs between one and fifty steps.\");\n  const steps: toolstep[] = stepsinput.map((input, index) => {\n    const candidate = record(input);\n    const kind = text(candidate.kind, `step ${index + 1} kind`) as toolstep[\"kind\"];\n    const step: toolstep = {\n      id: typeof candidate.id === \"string\" ? candidate.id : crypto.randomUUID(),\n      kind,\n      summary: text(candidate.summary, `step ${index + 1} summary`),\n      risk: actionrisk(kind),\n      ...(typeof candidate.target === \"string\" ? { target: candidate.target } : {}),\n      ...(typeof candidate.value === \"string\" ? { value: candidate.value } : {}),\n    };\n    const evaluation = validatestep(step, origin);\n    if (!evaluation.allowed) throw new Error(evaluation.reason);\n    return step;\n  });\n  const createdat = Date.now();\n  const plan: agentplan = {\n    id: typeof planinput.id === \"string\" ? planinput.id : crypto.randomUUID(),\n    objective: text(planinput.objective, \"objective\"),\n    origin,\n    steps,\n    createdat,\n    expiresat: Math.min(typeof planinput.expiresat === \"number\" ? planinput.expiresat : createdat + 10 * 60 * 1000, createdat + 30 * 60 * 1000),\n    state: \"pending\",\n  };\n  if (plan.expiresat <= createdat) throw new Error(\"Plan expiry must be in the future.\");\n  return { version: protocolversion, plan };\n}\n\n/** Shapes the only data that may be sent to a user-configured agent endpoint. */\nexport function requestbody(input: proposalrequest): string {\n  return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation });\n}\n"],
+  "mappings": ";AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,SAAwB;AAAxB;AAAA,EAAyB;AAAA,EAAzB;AAAA,EAE7B,MAAM,YAAiD;AAAE,WAAO,KAAK,QAAQ,IAAoB,QAAQ;AAAA,EAAG;AAAA,EAC5G,MAAM,UAAU,OAAsC;AAAE,WAAO,KAAK,QAAQ,IAAI,UAAU,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,aAAgD;AAAE,WAAO,KAAK,QAAQ,IAAkB,SAAS;AAAA,EAAG;AAAA,EAC1G,MAAM,WAAW,OAAoC;AAAE,WAAO,KAAK,QAAQ,IAAI,WAAW,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,UAA0C;AAAE,WAAO,KAAK,QAAQ,IAAe,MAAM;AAAA,EAAG;AAAA,EAC9F,MAAM,QAAQ,OAAiC;AAAE,WAAO,KAAK,QAAQ,IAAI,QAAQ,KAAK;AAAA,EAAG;AAAA,EACzF,MAAM,gBAAuD;AAAE,WAAO,KAAK,QAAQ,IAAsB,YAAY;AAAA,EAAG;AAAA,EACxH,MAAM,cAAc,OAAwC;AAAE,WAAO,KAAK,QAAQ,IAAI,cAAc,KAAK;AAAA,EAAG;AAAA,EAC5G,MAAM,cAAiD;AAAE,WAAO,KAAK,QAAQ,IAAkB,UAAU;AAAA,EAAG;AAAA,EAC5G,MAAM,YAAY,OAAoC;AAAE,WAAO,KAAK,QAAQ,IAAI,YAAY,KAAK;AAAA,EAAG;AAAA,EACpG,MAAM,WAAkC;AAAE,WAAQ,MAAM,KAAK,QAAQ,IAAkB,OAAO,KAAM,CAAC;AAAA,EAAG;AAAA,EACxG,MAAM,QAAQ,OAAkC;AAC9C,UAAM,UAAU,MAAM,KAAK,SAAS;AACpC,UAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;AAAA,EACnE;AACF;AAGO,SAAS,WAAmB;AACjC,SAAO,OAAO,WAAW;AAC3B;;;AC7BA,IAAM,mBAAmB,oBAAI,IAAgB,CAAC,SAAS,QAAQ,YAAY,QAAQ,CAAC;AACpF,IAAM,qBAAqB,oBAAI,IAAgB,CAAC,SAAS,UAAU,OAAO,CAAC;AAC3E,IAAM,iBAAiB,oBAAI,IAAgB,CAAC,WAAW,WAAW,SAAS,SAAS,QAAQ,YAAY,UAAU,UAAU,SAAS,WAAW,MAAM,CAAC;AACvJ,IAAM,gBAAgB,oBAAI,IAAgB,CAAC,WAAW,SAAS,SAAS,QAAQ,UAAU,UAAU,OAAO,CAAC;AAGrG,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,WAAW,IAAI,IAAI,MAAM,KAAK,CAAC;AACrC,MAAI,SAAS,aAAa,SAAU,OAAM,IAAI,MAAM,wCAAwC;AAC5F,MAAI,SAAS,YAAY,SAAS,SAAU,OAAM,IAAI,MAAM,kDAAkD;AAC9G,SAAO,EAAE,UAAU,SAAS,SAAS,GAAG,QAAQ,SAAS,QAAQ,cAAc,KAAK,IAAI,EAAE;AAC5F;AAGO,SAAS,YAAY,QAAwB;AAClD,QAAM,SAAS,IAAI,IAAI,MAAM;AAC7B,MAAI,OAAO,aAAa,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACtF,SAAO,GAAG,OAAO,MAAM;AACzB;AAGO,SAAS,WAAW,MAAwD;AACjF,MAAI,CAAC,eAAe,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,6BAA6B;AAC5E,MAAI,iBAAiB,IAAI,IAAI,EAAG,QAAO;AACvC,SAAO,mBAAmB,IAAI,IAAI,IAAI,gBAAgB;AACxD;AAGO,SAAS,aAAa,MAAwB;AACnD,QAAM,YAAY,KAAK,QAAQ,OAAO,SAAS,KAAK,OAAO,EAAE,IAAI;AACjE,MAAI,CAAC,OAAO,SAAS,SAAS,KAAK,YAAY,EAAG,OAAM,IAAI,MAAM,kEAAkE;AACpI,SAAO,KAAK,IAAI,WAAW,GAAM;AACnC;AAGO,SAAS,aAAa,MAAgB,QAAkC;AAC7E,MAAI,CAAC,eAAe,IAAI,KAAK,IAAI,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,2BAA2B;AAChG,MAAI,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AAC1G,MAAI,cAAc,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AACxH,MAAI,KAAK,SAAS,YAAY,CAAC,KAAK,OAAO,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,uCAAuC;AAC3H,MAAI,KAAK,SAAS,QAAQ;AACxB,QAAI;AAAE,mBAAa,IAAI;AAAA,IAAG,QAAQ;AAAE,aAAO,EAAE,SAAS,OAAO,QAAQ,mEAAmE;AAAA,IAAG;AAAA,EAC7I;AACA,MAAI,KAAK,SAAS,YAAY;AAC5B,QAAI,CAAC,KAAK,MAAO,QAAO,EAAE,SAAS,OAAO,QAAQ,gCAAgC;AAClF,QAAI;AACF,UAAI,IAAI,IAAI,KAAK,KAAK,EAAE,WAAW,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,qDAAqD;AAAA,IACnI,QAAQ;AACN,aAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AAAA,IAChE;AAAA,EACF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAGA,SAAS,YAAY,OAA4H;AAC/I,MAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,UAAW,QAAO,EAAE,SAAS,OAAO,QAAQ,oCAAoC;AACpH,MAAI,MAAM,QAAQ,aAAa,MAAM,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,mCAAmC;AAC9G,MAAI,MAAM,QAAQ,SAAU,QAAO,EAAE,SAAS,OAAO,QAAQ,4CAA4C,MAAM,MAAM,IAAI;AACzH,MAAI,MAAM,QAAQ,UAAU,MAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,OAAO,MAAM,MAAM,0CAA0C;AAChL,SAAO,EAAE,SAAS,KAAK;AACzB;AAGO,SAAS,WAAW,OAA0J;AACnL,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,QAAM,OAAO,YAAY,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ,KAAK,QAAQ,oBAAoB,CAAC;AAC/H,MAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,UAAU,WAAY,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AACpI,MAAI,MAAM,KAAK,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,iCAAiC;AACnG,SAAO,aAAa,MAAM,MAAM,MAAM,MAAM;AAC9C;;;ACxEO,IAAM,iBAAiB;;;ACEvB,IAAM,kBAAkB;;;ACA/B,SAAS,OAAO,OAAyC;AACvD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACtH,SAAO;AACT;AAEA,SAAS,KAAK,OAAgB,OAAuB;AACnD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,8BAA8B;AACtG,SAAO,MAAM,KAAK;AACpB;AAGO,SAAS,cAAc,OAAgB,QAA8B;AAC1E,QAAM,OAAO,OAAO,KAAK;AACzB,MAAI,KAAK,YAAY,gBAAiB,OAAM,IAAI,MAAM,+BAA+B;AACrF,QAAM,YAAY,OAAO,KAAK,IAAI;AAClC,QAAM,aAAa,UAAU;AAC7B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,WAAW,SAAS,GAAI,OAAM,IAAI,MAAM,2CAA2C;AAChJ,QAAM,QAAoB,WAAW,IAAI,CAAC,OAAO,UAAU;AACzD,UAAM,YAAY,OAAO,KAAK;AAC9B,UAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,QAAQ,CAAC,OAAO;AAC1D,UAAM,OAAiB;AAAA,MACrB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,MACxE;AAAA,MACA,SAAS,KAAK,UAAU,SAAS,QAAQ,QAAQ,CAAC,UAAU;AAAA,MAC5D,MAAM,WAAW,IAAI;AAAA,MACrB,GAAI,OAAO,UAAU,WAAW,WAAW,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,MAC3E,GAAI,OAAO,UAAU,UAAU,WAAW,EAAE,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,aAAa,aAAa,MAAM,MAAM;AAC5C,QAAI,CAAC,WAAW,QAAS,OAAM,IAAI,MAAM,WAAW,MAAM;AAC1D,WAAO;AAAA,EACT,CAAC;AACD,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,OAAkB;AAAA,IACtB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,IACxE,WAAW,KAAK,UAAU,WAAW,WAAW;AAAA,IAChD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,KAAK,IAAI,OAAO,UAAU,cAAc,WAAW,UAAU,YAAY,YAAY,KAAK,KAAK,KAAM,YAAY,KAAK,KAAK,GAAI;AAAA,IAC1I,OAAO;AAAA,EACT;AACA,MAAI,KAAK,aAAa,UAAW,OAAM,IAAI,MAAM,oCAAoC;AACrF,SAAO,EAAE,SAAS,iBAAiB,KAAK;AAC1C;AAGO,SAAS,YAAY,OAAgC;AAC1D,SAAO,KAAK,UAAU,EAAE,SAAS,iBAAiB,WAAW,MAAM,WAAW,SAAS,MAAM,SAAS,aAAa,MAAM,YAAY,CAAC;AACxI;",
   "names": []
 }

package/dist/memory.d.ts

@@ -1,4 +1,4 @@
-import type { agentplan, agentsession, auditevent, diagnosticreport, endpointconfig } from "./types.js";
+import type { agentplan, agentsession, auditevent, diagnosticreport, endpointconfig, planprogress } from "./types.js";
 /** Provides a small storage seam that works in browser, tests and future adapters. */
 export interface memoryadapter {
     get<T>(key: string): Promise<T | undefined>;
@@ -15,6 +15,8 @@ export declare class sessionmemory {
     setplan(value: agentplan): Promise<void>;
     getdiagnostic(): Promise<diagnosticreport | undefined>;
     setdiagnostic(value: diagnosticreport): Promise<void>;
+    getprogress(): Promise<planprogress | undefined>;
+    setprogress(value: planprogress): Promise<void>;
     getaudit(): Promise<auditevent[]>;
     addaudi(event: auditevent): Promise<void>;
 }

package/dist/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAExG,sFAAsF;AACtF,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC5C,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,aAAa,EAAI;IAEjD,SAAS,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAuD;IACvG,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAA8C;IAC7F,UAAU,IAAI,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAsD;IACrG,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAA+C;IAC7F,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAgD;IACzF,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAA4C;IACpF,aAAa,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAA6D;IACnH,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAkD;IACvG,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAkE;IACnG,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9C;CACF;AAED,gEAAgE;AAChE,wBAAgB,QAAQ,IAAI,MAAM,CAEjC"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEtH,sFAAsF;AACtF,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC5C,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,aAAa,EAAI;IAEjD,SAAS,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAuD;IACvG,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAA8C;IAC7F,UAAU,IAAI,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAsD;IACrG,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAA+C;IAC7F,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAgD;IACzF,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAA4C;IACpF,aAAa,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAA6D;IACnH,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAkD;IACvG,WAAW,IAAI,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAuD;IACvG,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAgD;IAC/F,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAkE;IACnG,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9C;CACF;AAED,gEAAgE;AAChE,wBAAgB,QAAQ,IAAI,MAAM,CAEjC"}

package/dist/policy.d.ts

@@ -5,6 +5,8 @@ export declare function normalizeendpoint(value: string): endpointconfig;
 export declare function hostpattern(origin: string): string;
 /** Defines action risk from a fixed local allowlist. */
 export declare function actionrisk(kind: actionkind): "read" | "interaction" | "sensitive";
+/** Parses the bounded pause duration of a wait step. */
+export declare function waitduration(step: toolstep): number;
 /** Validates a single proposal against the active tab origin and local policy. */
 export declare function validatestep(step: toolstep, origin: string): policyevaluation;
 /** Applies the consent gate immediately before an action reaches the page bridge. */

package/dist/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAKlH,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAK/D;AAED,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,CAIjF;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAa7E;AAED,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAQnL;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CASnL"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAOlH,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAK/D;AAED,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,CAIjF;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAInD;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAiB7E;AAWD,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAOnL;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAQnL"}

package/dist/types.d.ts

@@ -1,8 +1,8 @@
-export declare const protocolversion: "1.1.30";
-export type actionkind = "observe" | "inspect" | "focus" | "click" | "type" | "navigate";
+export declare const protocolversion: "1.1.31";
+export type actionkind = "observe" | "inspect" | "focus" | "click" | "type" | "navigate" | "scroll" | "select" | "hover" | "extract" | "wait";
 export type actionrisk = "read" | "interaction" | "sensitive";
 export type planstate = "draft" | "pending" | "approved" | "rejected" | "expired" | "completed" | "cancelled";
-export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop";
+export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop" | "pause" | "resume" | "complete";
 export interface toolstep {
     id: string;
     kind: actionkind;
@@ -20,6 +20,7 @@ export interface agentplan {
     expiresat: number;
     state: planstate;
     approvedat?: number;
+    completedat?: number;
 }
 export interface agentsession {
     id: string;
@@ -28,6 +29,7 @@ export interface agentsession {
     startedat: number;
     expiresat: number;
     stoppedat?: number;
+    pausedat?: number;
 }
 export interface endpointconfig {
     endpoint: string;
@@ -43,6 +45,7 @@ export interface observation {
         label: string;
         type: string;
         name: string;
+        options?: string[];
     }>;
     interactive: Array<{
         selector: string;
@@ -85,4 +88,10 @@ export interface policyevaluation {
     allowed: boolean;
     reason?: string;
 }
+/** Tracks which reviewed steps of one plan have already executed locally. */
+export interface planprogress {
+    planid: string;
+    completedsteps: string[];
+    updatedat: number;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe,UAAiB,CAAC;AAE9C,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;AACzF,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,CAAC;AAC9D,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAC9G,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAEpH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,WAAW,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe,UAAiB,CAAC;AAE9C,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAC9I,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,CAAC;AAC9D,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAC9G,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEtJ,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAChF,WAAW,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/version.d.ts

@@ -1,3 +1,3 @@
 /** Canonical package version synchronized from package.json. */
-export declare const packageversion: "1.1.30";
+export declare const packageversion: "1.1.31";
 //# sourceMappingURL=version.d.ts.map

package/extension/dist/background.js

@@ -28,6 +28,12 @@ var sessionmemory = class {
   async setdiagnostic(value) {
     return this.adapter.set("diagnostic", value);
   }
+  async getprogress() {
+    return this.adapter.get("progress");
+  }
+  async setprogress(value) {
+    return this.adapter.set("progress", value);
+  }
   async getaudit() {
     return await this.adapter.get("audit") ?? [];
   }
@@ -41,8 +47,10 @@ function randomid() {
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate"]);
-var allowedactions = /* @__PURE__ */ new Set(["observe", "inspect", "focus", "click", "type", "navigate"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select"]);
+var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover"]);
+var allowedactions = /* @__PURE__ */ new Set(["observe", "inspect", "focus", "click", "type", "navigate", "scroll", "select", "hover", "extract", "wait"]);
+var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover"]);
 function normalizeendpoint(value) {
   const endpoint = new URL(value.trim());
   if (endpoint.protocol !== "https:") throw new Error("Devthink accepts HTTPS endpoints only.");
@@ -57,12 +65,25 @@ function hostpattern(origin) {
 function actionrisk(kind) {
   if (!allowedactions.has(kind)) throw new Error("Unsupported browser action.");
   if (sensitiveactions.has(kind)) return "sensitive";
-  return kind === "focus" ? "interaction" : "read";
+  return interactionactions.has(kind) ? "interaction" : "read";
+}
+function waitduration(step) {
+  const requested = step.value ? Number.parseInt(step.value, 10) : 250;
+  if (!Number.isFinite(requested) || requested < 0) throw new Error("Wait duration must be zero or a positive number of milliseconds.");
+  return Math.min(requested, 1e4);
 }
 function validatestep(step, origin) {
   if (!allowedactions.has(step.kind)) return { allowed: false, reason: "Unsupported action kind." };
   if (!step.summary.trim()) return { allowed: false, reason: "A human-readable action summary is required." };
-  if ((step.kind === "click" || step.kind === "focus" || step.kind === "inspect" || step.kind === "type") && !step.target?.trim()) return { allowed: false, reason: "A page target is required." };
+  if (targetactions.has(step.kind) && !step.target?.trim()) return { allowed: false, reason: "A page target is required." };
+  if (step.kind === "select" && !step.value?.trim()) return { allowed: false, reason: "A reviewed option value is required." };
+  if (step.kind === "wait") {
+    try {
+      waitduration(step);
+    } catch {
+      return { allowed: false, reason: "Wait duration must be zero or a positive number of milliseconds." };
+    }
+  }
   if (step.kind === "navigate") {
     if (!step.value) return { allowed: false, reason: "A navigation URL is required." };
     try {
@@ -73,28 +94,52 @@ function validatestep(step, origin) {
   }
   return { allowed: true };
 }
+function sessiongate(input) {
+  if (!input.session || input.session.stoppedat) return { allowed: false, reason: "No active browser session exists." };
+  if (input.session.expiresat <= input.now) return { allowed: false, reason: "The browser session has expired." };
+  if (input.session.pausedat) return { allowed: false, reason: `The browser session is paused and cannot ${input.action}.` };
+  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: `The ${input.action} is outside the approved tab or origin.` };
+  return { allowed: true };
+}
 function canexecute(input) {
   const now = input.now ?? Date.now();
-  if (!input.session || input.session.stoppedat) return { allowed: false, reason: "No active browser session exists." };
-  if (input.session.expiresat <= now) return { allowed: false, reason: "The browser session has expired." };
-  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: "The action is outside the approved tab or origin." };
+  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: "execute an action" });
+  if (!gate.allowed) return gate;
   if (!input.plan || input.plan.state !== "approved") return { allowed: false, reason: "The plan has not received explicit approval." };
   if (input.plan.expiresat <= now) return { allowed: false, reason: "The approved plan has expired." };
   return validatestep(input.step, input.origin);
 }
 function canpreview(input) {
   const now = input.now ?? Date.now();
-  if (!input.session || input.session.stoppedat) return { allowed: false, reason: "No active browser session exists." };
-  if (input.session.expiresat <= now) return { allowed: false, reason: "The browser session has expired." };
-  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: "The preview is outside the approved tab or origin." };
+  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: "preview a target" });
+  if (!gate.allowed) return gate;
   if (!input.plan || !["pending", "approved"].includes(input.plan.state)) return { allowed: false, reason: "Only a reviewed pending or approved plan can be previewed." };
   if (input.plan.expiresat <= now) return { allowed: false, reason: "The reviewed plan has expired." };
-  if (!["focus", "inspect", "click", "type"].includes(input.step.kind)) return { allowed: false, reason: "Only a target-based action can be previewed." };
+  if (!["focus", "inspect", "click", "type", "scroll", "select", "hover"].includes(input.step.kind)) return { allowed: false, reason: "Only a target-based action can be previewed." };
   return validatestep(input.step, input.origin);
 }
 
+// progress.ts
+function emptyprogress(planid, now) {
+  return { planid, completedsteps: [], updatedat: now };
+}
+function recordstep(progress, planid, stepid, now) {
+  const base = progress && progress.planid === planid ? progress : emptyprogress(planid, now);
+  if (base.completedsteps.includes(stepid)) return { ...base, updatedat: now };
+  return { planid, completedsteps: [...base.completedsteps, stepid], updatedat: now };
+}
+function iscomplete(progress, plan) {
+  if (!progress || progress.planid !== plan.id) return false;
+  const required = plan.steps.map((step) => step.id);
+  return required.length > 0 && required.every((id) => progress.completedsteps.includes(id));
+}
+function resetforplan(progress, plan, now) {
+  if (progress && progress.planid === plan.id) return progress;
+  return emptyprogress(plan.id, now);
+}
+
 // version.ts
-var packageversion = "1.1.30";
+var packageversion = "1.1.31";
 
 // types.ts
 var protocolversion = packageversion;
@@ -113,7 +158,7 @@ function parseproposal(value, origin) {
   if (root.version !== protocolversion) throw new Error("Unsupported protocol version.");
   const planinput = record(root.plan);
   const stepsinput = planinput.steps;
-  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 20) throw new Error("A plan needs between one and twenty steps.");
+  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 50) throw new Error("A plan needs between one and fifty steps.");
   const steps = stepsinput.map((input, index) => {
     const candidate = record(input);
     const kind = text(candidate.kind, `step ${index + 1} kind`);
@@ -218,6 +263,7 @@ async function propose(objective, remote) {
     plan = parseproposal(await response.json(), session.origin).plan;
   }
   await memory.setplan(plan);
+  await memory.setprogress(resetforplan(await memory.getprogress(), plan, Date.now()));
   await audit("proposal", `Plan proposed with ${plan.steps.length} reviewed step${plan.steps.length === 1 ? "" : "s"}.`, { sessionid: session.id, planid: plan.id });
   return plan;
 }
@@ -239,6 +285,15 @@ async function executestep(stepid) {
   const output = result[0]?.result;
   const summary = output?.summary ?? "The page action returned no result.";
   await audit(output?.ok ? "action" : "error", summary, { ...session ? { sessionid: session.id } : {}, ...plan ? { planid: plan.id } : {}, stepid });
+  if (output?.ok && plan) {
+    const progress = recordstep(await memory.getprogress(), plan.id, stepid, Date.now());
+    await memory.setprogress(progress);
+    if (iscomplete(progress, plan) && plan.state === "approved") {
+      const completed = { ...plan, state: "completed", completedat: Date.now() };
+      await memory.setplan(completed);
+      await audit("complete", "Every reviewed step of the approved plan has executed.", { ...session ? { sessionid: session.id } : {}, planid: completed.id });
+    }
+  }
   return output ?? { ok: false, summary };
 }
 async function previewstep(stepid) {
@@ -261,6 +316,26 @@ async function previewstep(stepid) {
   await audit(output?.ok ? "observe" : "error", summary, { ...session ? { sessionid: session.id } : {}, ...plan ? { planid: plan.id } : {}, stepid });
   return output ?? { ok: false, summary };
 }
+async function pausesession() {
+  const session = await memory.getsession();
+  if (!session || session.stoppedat) throw new Error("No active browser session exists.");
+  if (session.expiresat <= Date.now()) throw new Error("The browser session has expired.");
+  if (session.pausedat) throw new Error("The browser session is already paused.");
+  const paused = { ...session, pausedat: Date.now() };
+  await memory.setsession(paused);
+  await audit("pause", "The user paused the browser session; no action or preview can run.", { sessionid: session.id });
+  return paused;
+}
+async function resumesession() {
+  const session = await memory.getsession();
+  if (!session || session.stoppedat) throw new Error("No active browser session exists.");
+  if (session.expiresat <= Date.now()) throw new Error("The browser session has expired and cannot be resumed.");
+  if (!session.pausedat) throw new Error("The browser session is not paused.");
+  const resumed = { id: session.id, tabid: session.tabid, origin: session.origin, startedat: session.startedat, expiresat: session.expiresat };
+  await memory.setsession(resumed);
+  await audit("resume", "The user resumed the browser session; reviewed actions can run again.", { sessionid: session.id });
+  return resumed;
+}
 async function handlerequest(message, sender) {
   if (!extensionpage(sender)) throw new Error("Requests are accepted only from Devthink extension pages.");
   const input = message;
@@ -275,8 +350,11 @@ async function handlerequest(message, sender) {
     }
     case "startsession":
       return startsession();
-    case "context":
-      return { config: await memory.getconfig(), session: await memory.getsession(), plan: await memory.getplan(), diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit() };
+    case "context": {
+      const plan = await memory.getplan();
+      const progress = await memory.getprogress();
+      return { config: await memory.getconfig(), session: await memory.getsession(), plan, progress: plan && progress?.planid === plan.id ? progress : void 0, diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit() };
+    }
     case "diagnostic":
       return diagnostic();
     case "proposelocal":
@@ -305,6 +383,10 @@ async function handlerequest(message, sender) {
       return previewstep(input.stepid ?? "");
     case "execute":
       return executestep(input.stepid ?? "");
+    case "pausesession":
+      return pausesession();
+    case "resumesession":
+      return resumesession();
     case "stop": {
       const session = await memory.getsession();
       if (session) await memory.setsession({ ...session, stoppedat: Date.now() });

package/extension/dist/background.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../memory.ts", "../../policy.ts", "../../version.ts", "../../types.ts", "../../protocol.ts", "../background.ts"],
-  "sourcesContent": ["import type { agentplan, agentsession, auditevent, diagnosticreport, endpointconfig } from \"./types.js\";\n\n/** Provides a small storage seam that works in browser, tests and future adapters. */\nexport interface memoryadapter {\n  get<T>(key: string): Promise<T | undefined>;\n  set<T>(key: string, value: T): Promise<void>;\n}\n\nexport class sessionmemory {\n  constructor(private readonly adapter: memoryadapter) {}\n\n  async getconfig(): Promise<endpointconfig | undefined> { return this.adapter.get<endpointconfig>(\"config\"); }\n  async setconfig(value: endpointconfig): Promise<void> { return this.adapter.set(\"config\", value); }\n  async getsession(): Promise<agentsession | undefined> { return this.adapter.get<agentsession>(\"session\"); }\n  async setsession(value: agentsession): Promise<void> { return this.adapter.set(\"session\", value); }\n  async getplan(): Promise<agentplan | undefined> { return this.adapter.get<agentplan>(\"plan\"); }\n  async setplan(value: agentplan): Promise<void> { return this.adapter.set(\"plan\", value); }\n  async getdiagnostic(): Promise<diagnosticreport | undefined> { return this.adapter.get<diagnosticreport>(\"diagnostic\"); }\n  async setdiagnostic(value: diagnosticreport): Promise<void> { return this.adapter.set(\"diagnostic\", value); }\n  async getaudit(): Promise<auditevent[]> { return (await this.adapter.get<auditevent[]>(\"audit\")) ?? []; }\n  async addaudi(event: auditevent): Promise<void> {\n    const records = await this.getaudit();\n    await this.adapter.set(\"audit\", [event, ...records].slice(0, 100));\n  }\n}\n\n/** Creates identifiers locally without a network dependency. */\nexport function randomid(): string {\n  return crypto.randomUUID();\n}\n", "import type { actionkind, agentplan, agentsession, endpointconfig, policyevaluation, toolstep } from \"./types.js\";\n\nconst sensitiveactions = new Set<actionkind>([\"click\", \"type\", \"navigate\"]);\nconst allowedactions = new Set<actionkind>([\"observe\", \"inspect\", \"focus\", \"click\", \"type\", \"navigate\"]);\n\n/** Normalizes a user supplied HTTPS endpoint without preserving a provider lock-in. */\nexport function normalizeendpoint(value: string): endpointconfig {\n  const endpoint = new URL(value.trim());\n  if (endpoint.protocol !== \"https:\") throw new Error(\"Devthink accepts HTTPS endpoints only.\");\n  if (endpoint.username || endpoint.password) throw new Error(\"Endpoint credentials are not allowed in the URL.\");\n  return { endpoint: endpoint.toString(), origin: endpoint.origin, configuredat: Date.now() };\n}\n\n/** Creates the exact optional host pattern requested from Chromium. */\nexport function hostpattern(origin: string): string {\n  const parsed = new URL(origin);\n  if (parsed.protocol !== \"https:\") throw new Error(\"Only HTTPS origins can be granted.\");\n  return `${parsed.origin}/*`;\n}\n\n/** Defines action risk from a fixed local allowlist. */\nexport function actionrisk(kind: actionkind): \"read\" | \"interaction\" | \"sensitive\" {\n  if (!allowedactions.has(kind)) throw new Error(\"Unsupported browser action.\");\n  if (sensitiveactions.has(kind)) return \"sensitive\";\n  return kind === \"focus\" ? \"interaction\" : \"read\";\n}\n\n/** Validates a single proposal against the active tab origin and local policy. */\nexport function validatestep(step: toolstep, origin: string): policyevaluation {\n  if (!allowedactions.has(step.kind)) return { allowed: false, reason: \"Unsupported action kind.\" };\n  if (!step.summary.trim()) return { allowed: false, reason: \"A human-readable action summary is required.\" };\n  if ((step.kind === \"click\" || step.kind === \"focus\" || step.kind === \"inspect\" || step.kind === \"type\") && !step.target?.trim()) return { allowed: false, reason: \"A page target is required.\" };\n  if (step.kind === \"navigate\") {\n    if (!step.value) return { allowed: false, reason: \"A navigation URL is required.\" };\n    try {\n      if (new URL(step.value).origin !== origin) return { allowed: false, reason: \"Navigation must remain within the approved origin.\" };\n    } catch {\n      return { allowed: false, reason: \"Navigation URL is invalid.\" };\n    }\n  }\n  return { allowed: true };\n}\n\n/** Applies the consent gate immediately before an action reaches the page bridge. */\nexport function canexecute(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: \"The action is outside the approved tab or origin.\" };\n  if (!input.plan || input.plan.state !== \"approved\") return { allowed: false, reason: \"The plan has not received explicit approval.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The approved plan has expired.\" };\n  return validatestep(input.step, input.origin);\n}\n\n/** Allows a non-mutating, temporary target preview during plan review. */\nexport function canpreview(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: \"The preview is outside the approved tab or origin.\" };\n  if (!input.plan || ![\"pending\", \"approved\"].includes(input.plan.state)) return { allowed: false, reason: \"Only a reviewed pending or approved plan can be previewed.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The reviewed plan has expired.\" };\n  if (![\"focus\", \"inspect\", \"click\", \"type\"].includes(input.step.kind)) return { allowed: false, reason: \"Only a target-based action can be previewed.\" };\n  return validatestep(input.step, input.origin);\n}\n", "/** Canonical package version synchronized from package.json. */\nexport const packageversion = \"1.1.30\" as const;\n", "/** Shared contracts for every Devthink target. */\nimport { packageversion } from \"./version.js\";\n\nexport const protocolversion = packageversion;\n\nexport type actionkind = \"observe\" | \"inspect\" | \"focus\" | \"click\" | \"type\" | \"navigate\";\nexport type actionrisk = \"read\" | \"interaction\" | \"sensitive\";\nexport type planstate = \"draft\" | \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"completed\" | \"cancelled\";\nexport type auditkind = \"configure\" | \"session\" | \"observe\" | \"proposal\" | \"approval\" | \"action\" | \"error\" | \"stop\";\n\nexport interface toolstep {\n  id: string;\n  kind: actionkind;\n  target?: string;\n  value?: string;\n  summary: string;\n  risk: actionrisk;\n}\n\nexport interface agentplan {\n  id: string;\n  objective: string;\n  origin: string;\n  steps: toolstep[];\n  createdat: number;\n  expiresat: number;\n  state: planstate;\n  approvedat?: number;\n}\n\nexport interface agentsession {\n  id: string;\n  tabid: number;\n  origin: string;\n  startedat: number;\n  expiresat: number;\n  stoppedat?: number;\n}\n\nexport interface endpointconfig {\n  endpoint: string;\n  origin: string;\n  configuredat: number;\n}\n\nexport interface observation {\n  url: string;\n  title: string;\n  textpreview: string;\n  textlength: number;\n  forms: Array<{ label: string; type: string; name: string }>;\n  interactive: Array<{ selector: string; role: string; label: string }>;\n  capturedat: number;\n}\n\nexport interface auditevent {\n  id: string;\n  kind: auditkind;\n  at: number;\n  summary: string;\n  sessionid?: string;\n  planid?: string;\n  stepid?: string;\n}\n\nexport interface diagnosticreport {\n  id: string;\n  sessionid: string;\n  origin: string;\n  capturedat: number;\n  tabid: number;\n  title: string;\n  textlength: number;\n  interactivecount: number;\n  formcount: number;\n  bridgeavailable: boolean;\n}\n\nexport interface proposalrequest {\n  objective: string;\n  session: agentsession;\n  observation: observation;\n}\n\nexport interface planproposal {\n  version: typeof protocolversion;\n  plan: agentplan;\n}\n\nexport interface policyevaluation {\n  allowed: boolean;\n  reason?: string;\n}\n", "import { actionrisk, validatestep } from \"./policy.js\";\nimport { protocolversion, type agentplan, type planproposal, type proposalrequest, type toolstep } from \"./types.js\";\n\nfunction record(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) throw new Error(\"Protocol message must be an object.\");\n  return value as Record<string, unknown>;\n}\n\nfunction text(value: unknown, field: string): string {\n  if (typeof value !== \"string\" || !value.trim()) throw new Error(`${field} must be a non-empty string.`);\n  return value.trim();\n}\n\n/** Validates agent output before it becomes a locally reviewable plan. */\nexport function parseproposal(value: unknown, origin: string): planproposal {\n  const root = record(value);\n  if (root.version !== protocolversion) throw new Error(\"Unsupported protocol version.\");\n  const planinput = record(root.plan);\n  const stepsinput = planinput.steps;\n  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 20) throw new Error(\"A plan needs between one and twenty steps.\");\n  const steps: toolstep[] = stepsinput.map((input, index) => {\n    const candidate = record(input);\n    const kind = text(candidate.kind, `step ${index + 1} kind`) as toolstep[\"kind\"];\n    const step: toolstep = {\n      id: typeof candidate.id === \"string\" ? candidate.id : crypto.randomUUID(),\n      kind,\n      summary: text(candidate.summary, `step ${index + 1} summary`),\n      risk: actionrisk(kind),\n      ...(typeof candidate.target === \"string\" ? { target: candidate.target } : {}),\n      ...(typeof candidate.value === \"string\" ? { value: candidate.value } : {}),\n    };\n    const evaluation = validatestep(step, origin);\n    if (!evaluation.allowed) throw new Error(evaluation.reason);\n    return step;\n  });\n  const createdat = Date.now();\n  const plan: agentplan = {\n    id: typeof planinput.id === \"string\" ? planinput.id : crypto.randomUUID(),\n    objective: text(planinput.objective, \"objective\"),\n    origin,\n    steps,\n    createdat,\n    expiresat: Math.min(typeof planinput.expiresat === \"number\" ? planinput.expiresat : createdat + 10 * 60 * 1000, createdat + 30 * 60 * 1000),\n    state: \"pending\",\n  };\n  if (plan.expiresat <= createdat) throw new Error(\"Plan expiry must be in the future.\");\n  return { version: protocolversion, plan };\n}\n\n/** Shapes the only data that may be sent to a user-configured agent endpoint. */\nexport function requestbody(input: proposalrequest): string {\n  return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation });\n}\n", "import { randomid, sessionmemory } from \"../memory.js\";\nimport { canexecute, canpreview, hostpattern, normalizeendpoint } from \"../policy.js\";\nimport { parseproposal, requestbody } from \"../protocol.js\";\nimport type { agentplan, agentsession, auditevent, diagnosticreport, observation, toolstep } from \"../types.js\";\n\nconst sessionduration = 15 * 60 * 1000;\n\nconst chromestorage = {\n  async get<T>(key: string): Promise<T | undefined> { return (await chrome.storage.local.get(key))[key] as T | undefined; },\n  async set<T>(key: string, value: T): Promise<void> { await chrome.storage.local.set({ [key]: value }); },\n};\nconst memory = new sessionmemory(chromestorage);\n\nfunction extensionpage(sender: chrome.runtime.MessageSender): boolean {\n  return sender.id === chrome.runtime.id && Boolean(sender.url?.startsWith(chrome.runtime.getURL(\"\")));\n}\n\nasync function audit(kind: auditevent[\"kind\"], summary: string, extra: Partial<auditevent> = {}): Promise<void> {\n  await memory.addaudi({ id: randomid(), kind, at: Date.now(), summary, ...extra });\n}\n\nasync function activecontext(): Promise<{ tab: chrome.tabs.Tab; origin: string }> {\n  const [tab] = await chrome.tabs.query({ active: true, lastFocusedWindow: true });\n  if (!tab?.id || !tab.url) throw new Error(\"No active web tab is available.\");\n  const origin = new URL(tab.url).origin;\n  if (!origin.startsWith(\"https://\")) throw new Error(\"Devthink can work with HTTPS pages only.\");\n  return { tab, origin };\n}\n\nasync function snapshot(tabid: number): Promise<observation> {\n  await chrome.scripting.executeScript({ target: { tabId: tabid }, files: [\"pagebridge.js\"] });\n  const result = await chrome.scripting.executeScript({ target: { tabId: tabid }, func: () => {\n    const bridge = (globalThis as typeof globalThis & { devthinkbridge?: { capturesnapshot: () => observation } }).devthinkbridge;\n    if (!bridge) throw new Error(\"Devthink page bridge is unavailable.\");\n    return bridge.capturesnapshot();\n  } });\n  const value = result[0]?.result;\n  if (!value) throw new Error(\"The page did not return an observation.\");\n  return value as observation;\n}\n\nasync function startsession(): Promise<agentsession> {\n  const { tab, origin } = await activecontext();\n  const session: agentsession = { id: randomid(), tabid: tab.id as number, origin, startedat: Date.now(), expiresat: Date.now() + sessionduration };\n  await memory.setsession(session);\n  await audit(\"session\", `Session started for ${origin}.`, { sessionid: session.id });\n  return session;\n}\n\nasync function diagnostic(): Promise<diagnosticreport> {\n  const session = await memory.getsession();\n  const { tab, origin } = await activecontext();\n  if (!session || session.stoppedat || session.expiresat <= Date.now() || session.tabid !== tab.id || session.origin !== origin) throw new Error(\"Start a current session for this active tab before diagnostics.\");\n  const observation = await snapshot(session.tabid);\n  const report: diagnosticreport = { id: randomid(), sessionid: session.id, origin, capturedat: Date.now(), tabid: session.tabid, title: observation.title, textlength: observation.textlength, interactivecount: observation.interactive.length, formcount: observation.forms.length, bridgeavailable: true };\n  await memory.setdiagnostic(report);\n  await audit(\"observe\", \"Structured diagnostics captured for the approved active tab.\", { sessionid: session.id });\n  return report;\n}\n\nfunction localplan(objective: string, session: agentsession): agentplan {\n  const now = Date.now();\n  return { id: randomid(), objective, origin: session.origin, steps: [{ id: randomid(), kind: \"observe\", summary: \"Capture a bounded semantic snapshot of the approved active tab.\", risk: \"read\" }], createdat: now, expiresat: now + sessionduration, state: \"pending\" };\n}\n\nasync function propose(objective: string, remote: boolean): Promise<agentplan> {\n  if (!objective.trim()) throw new Error(\"An objective is required.\");\n  const session = await memory.getsession();\n  if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error(\"Start a current browser session before requesting a plan.\");\n  const { tab, origin } = await activecontext();\n  if (session.tabid !== tab.id || session.origin !== origin) throw new Error(\"The selected tab or origin no longer matches the approved session.\");\n  const observation = await snapshot(session.tabid);\n  const config = await memory.getconfig();\n  let plan = localplan(objective.trim(), session);\n  if (remote) {\n    if (!config) throw new Error(\"Configure an approved HTTPS endpoint before requesting a remote proposal.\");\n    const response = await fetch(config.endpoint, { method: \"POST\", headers: { \"content-type\": \"application/json\" }, credentials: \"omit\", body: requestbody({ objective: objective.trim(), session, observation }) });\n    if (!response.ok) throw new Error(`Proposal endpoint returned ${response.status}.`);\n    plan = parseproposal(await response.json(), session.origin).plan;\n  }\n  await memory.setplan(plan);\n  await audit(\"proposal\", `Plan proposed with ${plan.steps.length} reviewed step${plan.steps.length === 1 ? \"\" : \"s\"}.`, { sessionid: session.id, planid: plan.id });\n  return plan;\n}\n\nasync function executestep(stepid: string): Promise<{ ok: boolean; summary: string }> {\n  const session = await memory.getsession();\n  const plan = await memory.getplan();\n  const { tab, origin } = await activecontext();\n  const step = plan?.steps.find(candidate => candidate.id === stepid);\n  if (!step) throw new Error(\"Reviewed step was not found.\");\n  const gate = canexecute({ session, plan, step, tabid: tab.id as number, origin });\n  if (!gate.allowed) throw new Error(gate.reason);\n  const fresh = await snapshot(tab.id as number);\n  if (step.target && !fresh.interactive.some(item => item.selector === step.target)) throw new Error(\"The page changed and the target must be reviewed again.\");\n  const result = await chrome.scripting.executeScript({ target: { tabId: tab.id as number }, func: (action: toolstep, expectedorigin: string) => {\n    const bridge = (globalThis as typeof globalThis & { devthinkbridge?: { performstep: (input: toolstep, origin: string) => { ok: boolean; summary: string } } }).devthinkbridge;\n    if (!bridge) throw new Error(\"Devthink page bridge is unavailable.\");\n    return bridge.performstep(action, expectedorigin);\n  }, args: [step, origin] });\n  const output = result[0]?.result as { ok: boolean; summary: string } | undefined;\n  const summary = output?.summary ?? \"The page action returned no result.\";\n  await audit(output?.ok ? \"action\" : \"error\", summary, { ...(session ? { sessionid: session.id } : {}), ...(plan ? { planid: plan.id } : {}), stepid });\n  return output ?? { ok: false, summary };\n}\n\n/** Highlights a reviewed target without clicking, typing, navigating or transmitting page data. */\nasync function previewstep(stepid: string): Promise<{ ok: boolean; summary: string }> {\n  const session = await memory.getsession();\n  const plan = await memory.getplan();\n  const { tab, origin } = await activecontext();\n  const step = plan?.steps.find(candidate => candidate.id === stepid);\n  if (!step) throw new Error(\"Reviewed step was not found.\");\n  const gate = canpreview({ session, plan, step, tabid: tab.id as number, origin });\n  if (!gate.allowed) throw new Error(gate.reason);\n  const fresh = await snapshot(tab.id as number);\n  if (!step.target || !fresh.interactive.some(item => item.selector === step.target)) throw new Error(\"The page changed and the target must be reviewed again.\");\n  const result = await chrome.scripting.executeScript({ target: { tabId: tab.id as number }, func: (target: string, expectedorigin: string) => {\n    const bridge = (globalThis as typeof globalThis & { devthinkbridge?: { previewtarget: (selector: string, origin: string) => { ok: boolean; summary: string } } }).devthinkbridge;\n    if (!bridge) throw new Error(\"Devthink page bridge is unavailable.\");\n    return bridge.previewtarget(target, expectedorigin);\n  }, args: [step.target, origin] });\n  const output = result[0]?.result as { ok: boolean; summary: string } | undefined;\n  const summary = output?.summary ?? \"The target preview returned no result.\";\n  await audit(output?.ok ? \"observe\" : \"error\", summary, { ...(session ? { sessionid: session.id } : {}), ...(plan ? { planid: plan.id } : {}), stepid });\n  return output ?? { ok: false, summary };\n}\n\nasync function handlerequest(message: unknown, sender: chrome.runtime.MessageSender): Promise<unknown> {\n  if (!extensionpage(sender)) throw new Error(\"Requests are accepted only from Devthink extension pages.\");\n  const input = message as { kind?: string; endpoint?: string; objective?: string; stepid?: string };\n  switch (input.kind) {\n    case \"configure\": {\n      const config = normalizeendpoint(input.endpoint ?? \"\");\n      const granted = await chrome.permissions.contains({ origins: [hostpattern(config.origin)] });\n      if (!granted) throw new Error(\"The endpoint origin has not received optional permission.\");\n      await memory.setconfig(config);\n      await audit(\"configure\", `Configured user-selected endpoint ${config.origin}.`);\n      return config;\n    }\n    case \"startsession\": return startsession();\n    case \"context\": return { config: await memory.getconfig(), session: await memory.getsession(), plan: await memory.getplan(), diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit() };\n    case \"diagnostic\": return diagnostic();\n    case \"proposelocal\": return propose(input.objective ?? \"\", false);\n    case \"proposeremote\": return propose(input.objective ?? \"\", true);\n    case \"approve\": {\n      const plan = await memory.getplan();\n      if (!plan || plan.state !== \"pending\") throw new Error(\"Only a pending plan can be approved.\");\n      const approved = { ...plan, state: \"approved\" as const, approvedat: Date.now() };\n      await memory.setplan(approved);\n      const current = await memory.getsession();\n      await audit(\"approval\", \"The user approved the reviewed plan.\", { ...(current ? { sessionid: current.id } : {}), planid: approved.id });\n      return approved;\n    }\n    case \"reject\": {\n      const plan = await memory.getplan();\n      if (!plan) throw new Error(\"No plan is available to reject.\");\n      const rejected = { ...plan, state: \"rejected\" as const };\n      await memory.setplan(rejected);\n      const current = await memory.getsession();\n      await audit(\"approval\", \"The user rejected the plan.\", { ...(current ? { sessionid: current.id } : {}), planid: rejected.id });\n      return rejected;\n    }\n    case \"preview\": return previewstep(input.stepid ?? \"\");\n    case \"execute\": return executestep(input.stepid ?? \"\");\n    case \"stop\": {\n      const session = await memory.getsession();\n      if (session) await memory.setsession({ ...session, stoppedat: Date.now() });\n      const plan = await memory.getplan();\n      if (plan && [\"pending\", \"approved\"].includes(plan.state)) await memory.setplan({ ...plan, state: \"cancelled\" });\n      await audit(\"stop\", \"The user stopped the browser session.\", { ...(session ? { sessionid: session.id } : {}), ...(plan ? { planid: plan.id } : {}) });\n      return { stopped: true };\n    }\n    default: throw new Error(\"Unknown Devthink request.\");\n  }\n}\n\nchrome.runtime.onMessage.addListener((message, sender, sendresponse) => {\n  handlerequest(message, sender).then(value => sendresponse({ ok: true, value })).catch(error => sendresponse({ ok: false, error: error instanceof Error ? error.message : String(error) }));\n  return true;\n});\n\nchrome.runtime.onConnect.addListener(port => {\n  if (port.name !== \"devthinksidepanel\" || port.sender?.id !== chrome.runtime.id || !port.sender.url?.startsWith(chrome.runtime.getURL(\"\"))) return port.disconnect();\n  port.onMessage.addListener(message => { handlerequest(message, port.sender ?? {}).then(value => port.postMessage({ ok: true, value })).catch(error => port.postMessage({ ok: false, error: error instanceof Error ? error.message : String(error) })); });\n});\n"],
-  "mappings": ";AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,SAAwB;AAAxB;AAAA,EAAyB;AAAA,EAAzB;AAAA,EAE7B,MAAM,YAAiD;AAAE,WAAO,KAAK,QAAQ,IAAoB,QAAQ;AAAA,EAAG;AAAA,EAC5G,MAAM,UAAU,OAAsC;AAAE,WAAO,KAAK,QAAQ,IAAI,UAAU,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,aAAgD;AAAE,WAAO,KAAK,QAAQ,IAAkB,SAAS;AAAA,EAAG;AAAA,EAC1G,MAAM,WAAW,OAAoC;AAAE,WAAO,KAAK,QAAQ,IAAI,WAAW,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,UAA0C;AAAE,WAAO,KAAK,QAAQ,IAAe,MAAM;AAAA,EAAG;AAAA,EAC9F,MAAM,QAAQ,OAAiC;AAAE,WAAO,KAAK,QAAQ,IAAI,QAAQ,KAAK;AAAA,EAAG;AAAA,EACzF,MAAM,gBAAuD;AAAE,WAAO,KAAK,QAAQ,IAAsB,YAAY;AAAA,EAAG;AAAA,EACxH,MAAM,cAAc,OAAwC;AAAE,WAAO,KAAK,QAAQ,IAAI,cAAc,KAAK;AAAA,EAAG;AAAA,EAC5G,MAAM,WAAkC;AAAE,WAAQ,MAAM,KAAK,QAAQ,IAAkB,OAAO,KAAM,CAAC;AAAA,EAAG;AAAA,EACxG,MAAM,QAAQ,OAAkC;AAC9C,UAAM,UAAU,MAAM,KAAK,SAAS;AACpC,UAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;AAAA,EACnE;AACF;AAGO,SAAS,WAAmB;AACjC,SAAO,OAAO,WAAW;AAC3B;;;AC3BA,IAAM,mBAAmB,oBAAI,IAAgB,CAAC,SAAS,QAAQ,UAAU,CAAC;AAC1E,IAAM,iBAAiB,oBAAI,IAAgB,CAAC,WAAW,WAAW,SAAS,SAAS,QAAQ,UAAU,CAAC;AAGhG,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,WAAW,IAAI,IAAI,MAAM,KAAK,CAAC;AACrC,MAAI,SAAS,aAAa,SAAU,OAAM,IAAI,MAAM,wCAAwC;AAC5F,MAAI,SAAS,YAAY,SAAS,SAAU,OAAM,IAAI,MAAM,kDAAkD;AAC9G,SAAO,EAAE,UAAU,SAAS,SAAS,GAAG,QAAQ,SAAS,QAAQ,cAAc,KAAK,IAAI,EAAE;AAC5F;AAGO,SAAS,YAAY,QAAwB;AAClD,QAAM,SAAS,IAAI,IAAI,MAAM;AAC7B,MAAI,OAAO,aAAa,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACtF,SAAO,GAAG,OAAO,MAAM;AACzB;AAGO,SAAS,WAAW,MAAwD;AACjF,MAAI,CAAC,eAAe,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,6BAA6B;AAC5E,MAAI,iBAAiB,IAAI,IAAI,EAAG,QAAO;AACvC,SAAO,SAAS,UAAU,gBAAgB;AAC5C;AAGO,SAAS,aAAa,MAAgB,QAAkC;AAC7E,MAAI,CAAC,eAAe,IAAI,KAAK,IAAI,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,2BAA2B;AAChG,MAAI,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AAC1G,OAAK,KAAK,SAAS,WAAW,KAAK,SAAS,WAAW,KAAK,SAAS,aAAa,KAAK,SAAS,WAAW,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AAC/L,MAAI,KAAK,SAAS,YAAY;AAC5B,QAAI,CAAC,KAAK,MAAO,QAAO,EAAE,SAAS,OAAO,QAAQ,gCAAgC;AAClF,QAAI;AACF,UAAI,IAAI,IAAI,KAAK,KAAK,EAAE,WAAW,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,qDAAqD;AAAA,IACnI,QAAQ;AACN,aAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AAAA,IAChE;AAAA,EACF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAGO,SAAS,WAAW,OAA0J;AACnL,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,MAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,UAAW,QAAO,EAAE,SAAS,OAAO,QAAQ,oCAAoC;AACpH,MAAI,MAAM,QAAQ,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,mCAAmC;AACxG,MAAI,MAAM,QAAQ,UAAU,MAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,oDAAoD;AACvK,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,UAAU,WAAY,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AACpI,MAAI,MAAM,KAAK,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,iCAAiC;AACnG,SAAO,aAAa,MAAM,MAAM,MAAM,MAAM;AAC9C;AAGO,SAAS,WAAW,OAA0J;AACnL,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,MAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,UAAW,QAAO,EAAE,SAAS,OAAO,QAAQ,oCAAoC;AACpH,MAAI,MAAM,QAAQ,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,mCAAmC;AACxG,MAAI,MAAM,QAAQ,UAAU,MAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,qDAAqD;AACxK,MAAI,CAAC,MAAM,QAAQ,CAAC,CAAC,WAAW,UAAU,EAAE,SAAS,MAAM,KAAK,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,6DAA6D;AACtK,MAAI,MAAM,KAAK,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,iCAAiC;AACnG,MAAI,CAAC,CAAC,SAAS,WAAW,SAAS,MAAM,EAAE,SAAS,MAAM,KAAK,IAAI,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AACtJ,SAAO,aAAa,MAAM,MAAM,MAAM,MAAM;AAC9C;;;AC/DO,IAAM,iBAAiB;;;ACEvB,IAAM,kBAAkB;;;ACA/B,SAAS,OAAO,OAAyC;AACvD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACtH,SAAO;AACT;AAEA,SAAS,KAAK,OAAgB,OAAuB;AACnD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,8BAA8B;AACtG,SAAO,MAAM,KAAK;AACpB;AAGO,SAAS,cAAc,OAAgB,QAA8B;AAC1E,QAAM,OAAO,OAAO,KAAK;AACzB,MAAI,KAAK,YAAY,gBAAiB,OAAM,IAAI,MAAM,+BAA+B;AACrF,QAAM,YAAY,OAAO,KAAK,IAAI;AAClC,QAAM,aAAa,UAAU;AAC7B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,WAAW,SAAS,GAAI,OAAM,IAAI,MAAM,4CAA4C;AACjJ,QAAM,QAAoB,WAAW,IAAI,CAAC,OAAO,UAAU;AACzD,UAAM,YAAY,OAAO,KAAK;AAC9B,UAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,QAAQ,CAAC,OAAO;AAC1D,UAAM,OAAiB;AAAA,MACrB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,MACxE;AAAA,MACA,SAAS,KAAK,UAAU,SAAS,QAAQ,QAAQ,CAAC,UAAU;AAAA,MAC5D,MAAM,WAAW,IAAI;AAAA,MACrB,GAAI,OAAO,UAAU,WAAW,WAAW,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,MAC3E,GAAI,OAAO,UAAU,UAAU,WAAW,EAAE,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,aAAa,aAAa,MAAM,MAAM;AAC5C,QAAI,CAAC,WAAW,QAAS,OAAM,IAAI,MAAM,WAAW,MAAM;AAC1D,WAAO;AAAA,EACT,CAAC;AACD,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,OAAkB;AAAA,IACtB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,IACxE,WAAW,KAAK,UAAU,WAAW,WAAW;AAAA,IAChD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,KAAK,IAAI,OAAO,UAAU,cAAc,WAAW,UAAU,YAAY,YAAY,KAAK,KAAK,KAAM,YAAY,KAAK,KAAK,GAAI;AAAA,IAC1I,OAAO;AAAA,EACT;AACA,MAAI,KAAK,aAAa,UAAW,OAAM,IAAI,MAAM,oCAAoC;AACrF,SAAO,EAAE,SAAS,iBAAiB,KAAK;AAC1C;AAGO,SAAS,YAAY,OAAgC;AAC1D,SAAO,KAAK,UAAU,EAAE,SAAS,iBAAiB,WAAW,MAAM,WAAW,SAAS,MAAM,SAAS,aAAa,MAAM,YAAY,CAAC;AACxI;;;AC/CA,IAAM,kBAAkB,KAAK,KAAK;AAElC,IAAM,gBAAgB;AAAA,EACpB,MAAM,IAAO,KAAqC;AAAE,YAAQ,MAAM,OAAO,QAAQ,MAAM,IAAI,GAAG,GAAG,GAAG;AAAA,EAAoB;AAAA,EACxH,MAAM,IAAO,KAAa,OAAyB;AAAE,UAAM,OAAO,QAAQ,MAAM,IAAI,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC;AAAA,EAAG;AACzG;AACA,IAAM,SAAS,IAAI,cAAc,aAAa;AAE9C,SAAS,cAAc,QAA+C;AACpE,SAAO,OAAO,OAAO,OAAO,QAAQ,MAAM,QAAQ,OAAO,KAAK,WAAW,OAAO,QAAQ,OAAO,EAAE,CAAC,CAAC;AACrG;AAEA,eAAe,MAAM,MAA0B,SAAiB,QAA6B,CAAC,GAAkB;AAC9G,QAAM,OAAO,QAAQ,EAAE,IAAI,SAAS,GAAG,MAAM,IAAI,KAAK,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC;AAClF;AAEA,eAAe,gBAAmE;AAChF,QAAM,CAAC,GAAG,IAAI,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,MAAM,mBAAmB,KAAK,CAAC;AAC/E,MAAI,CAAC,KAAK,MAAM,CAAC,IAAI,IAAK,OAAM,IAAI,MAAM,iCAAiC;AAC3E,QAAM,SAAS,IAAI,IAAI,IAAI,GAAG,EAAE;AAChC,MAAI,CAAC,OAAO,WAAW,UAAU,EAAG,OAAM,IAAI,MAAM,0CAA0C;AAC9F,SAAO,EAAE,KAAK,OAAO;AACvB;AAEA,eAAe,SAAS,OAAqC;AAC3D,QAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;AAC3F,QAAM,SAAS,MAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,MAAM,GAAG,MAAM,MAAM;AAC1F,UAAM,SAAU,WAA+F;AAC/G,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sCAAsC;AACnE,WAAO,OAAO,gBAAgB;AAAA,EAChC,EAAE,CAAC;AACH,QAAM,QAAQ,OAAO,CAAC,GAAG;AACzB,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,yCAAyC;AACrE,SAAO;AACT;AAEA,eAAe,eAAsC;AACnD,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,QAAM,UAAwB,EAAE,IAAI,SAAS,GAAG,OAAO,IAAI,IAAc,QAAQ,WAAW,KAAK,IAAI,GAAG,WAAW,KAAK,IAAI,IAAI,gBAAgB;AAChJ,QAAM,OAAO,WAAW,OAAO;AAC/B,QAAM,MAAM,WAAW,uBAAuB,MAAM,KAAK,EAAE,WAAW,QAAQ,GAAG,CAAC;AAClF,SAAO;AACT;AAEA,eAAe,aAAwC;AACrD,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,MAAI,CAAC,WAAW,QAAQ,aAAa,QAAQ,aAAa,KAAK,IAAI,KAAK,QAAQ,UAAU,IAAI,MAAM,QAAQ,WAAW,OAAQ,OAAM,IAAI,MAAM,iEAAiE;AAChN,QAAM,cAAc,MAAM,SAAS,QAAQ,KAAK;AAChD,QAAM,SAA2B,EAAE,IAAI,SAAS,GAAG,WAAW,QAAQ,IAAI,QAAQ,YAAY,KAAK,IAAI,GAAG,OAAO,QAAQ,OAAO,OAAO,YAAY,OAAO,YAAY,YAAY,YAAY,kBAAkB,YAAY,YAAY,QAAQ,WAAW,YAAY,MAAM,QAAQ,iBAAiB,KAAK;AAC3S,QAAM,OAAO,cAAc,MAAM;AACjC,QAAM,MAAM,WAAW,gEAAgE,EAAE,WAAW,QAAQ,GAAG,CAAC;AAChH,SAAO;AACT;AAEA,SAAS,UAAU,WAAmB,SAAkC;AACtE,QAAM,MAAM,KAAK,IAAI;AACrB,SAAO,EAAE,IAAI,SAAS,GAAG,WAAW,QAAQ,QAAQ,QAAQ,OAAO,CAAC,EAAE,IAAI,SAAS,GAAG,MAAM,WAAW,SAAS,mEAAmE,MAAM,OAAO,CAAC,GAAG,WAAW,KAAK,WAAW,MAAM,iBAAiB,OAAO,UAAU;AACzQ;AAEA,eAAe,QAAQ,WAAmB,QAAqC;AAC7E,MAAI,CAAC,UAAU,KAAK,EAAG,OAAM,IAAI,MAAM,2BAA2B;AAClE,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,MAAI,CAAC,WAAW,QAAQ,aAAa,QAAQ,aAAa,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,2DAA2D;AACjJ,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,MAAI,QAAQ,UAAU,IAAI,MAAM,QAAQ,WAAW,OAAQ,OAAM,IAAI,MAAM,oEAAoE;AAC/I,QAAM,cAAc,MAAM,SAAS,QAAQ,KAAK;AAChD,QAAM,SAAS,MAAM,OAAO,UAAU;AACtC,MAAI,OAAO,UAAU,UAAU,KAAK,GAAG,OAAO;AAC9C,MAAI,QAAQ;AACV,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2EAA2E;AACxG,UAAM,WAAW,MAAM,MAAM,OAAO,UAAU,EAAE,QAAQ,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,GAAG,aAAa,QAAQ,MAAM,YAAY,EAAE,WAAW,UAAU,KAAK,GAAG,SAAS,YAAY,CAAC,EAAE,CAAC;AAChN,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,GAAG;AAClF,WAAO,cAAc,MAAM,SAAS,KAAK,GAAG,QAAQ,MAAM,EAAE;AAAA,EAC9D;AACA,QAAM,OAAO,QAAQ,IAAI;AACzB,QAAM,MAAM,YAAY,sBAAsB,KAAK,MAAM,MAAM,iBAAiB,KAAK,MAAM,WAAW,IAAI,KAAK,GAAG,KAAK,EAAE,WAAW,QAAQ,IAAI,QAAQ,KAAK,GAAG,CAAC;AACjK,SAAO;AACT;AAEA,eAAe,YAAY,QAA2D;AACpF,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,QAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,QAAM,OAAO,MAAM,MAAM,KAAK,eAAa,UAAU,OAAO,MAAM;AAClE,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,8BAA8B;AACzD,QAAM,OAAO,WAAW,EAAE,SAAS,MAAM,MAAM,OAAO,IAAI,IAAc,OAAO,CAAC;AAChF,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,KAAK,MAAM;AAC9C,QAAM,QAAQ,MAAM,SAAS,IAAI,EAAY;AAC7C,MAAI,KAAK,UAAU,CAAC,MAAM,YAAY,KAAK,UAAQ,KAAK,aAAa,KAAK,MAAM,EAAG,OAAM,IAAI,MAAM,yDAAyD;AAC5J,QAAM,SAAS,MAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,IAAI,GAAa,GAAG,MAAM,CAAC,QAAkB,mBAA2B;AAC7I,UAAM,SAAU,WAA+I;AAC/J,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sCAAsC;AACnE,WAAO,OAAO,YAAY,QAAQ,cAAc;AAAA,EAClD,GAAG,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC;AACzB,QAAM,SAAS,OAAO,CAAC,GAAG;AAC1B,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,MAAM,QAAQ,KAAK,WAAW,SAAS,SAAS,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,GAAI,OAAO,EAAE,QAAQ,KAAK,GAAG,IAAI,CAAC,GAAI,OAAO,CAAC;AACrJ,SAAO,UAAU,EAAE,IAAI,OAAO,QAAQ;AACxC;AAGA,eAAe,YAAY,QAA2D;AACpF,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,QAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,QAAM,OAAO,MAAM,MAAM,KAAK,eAAa,UAAU,OAAO,MAAM;AAClE,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,8BAA8B;AACzD,QAAM,OAAO,WAAW,EAAE,SAAS,MAAM,MAAM,OAAO,IAAI,IAAc,OAAO,CAAC;AAChF,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,KAAK,MAAM;AAC9C,QAAM,QAAQ,MAAM,SAAS,IAAI,EAAY;AAC7C,MAAI,CAAC,KAAK,UAAU,CAAC,MAAM,YAAY,KAAK,UAAQ,KAAK,aAAa,KAAK,MAAM,EAAG,OAAM,IAAI,MAAM,yDAAyD;AAC7J,QAAM,SAAS,MAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,IAAI,GAAa,GAAG,MAAM,CAAC,QAAgB,mBAA2B;AAC3I,UAAM,SAAU,WAAkJ;AAClK,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sCAAsC;AACnE,WAAO,OAAO,cAAc,QAAQ,cAAc;AAAA,EACpD,GAAG,MAAM,CAAC,KAAK,QAAQ,MAAM,EAAE,CAAC;AAChC,QAAM,SAAS,OAAO,CAAC,GAAG;AAC1B,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,MAAM,QAAQ,KAAK,YAAY,SAAS,SAAS,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,GAAI,OAAO,EAAE,QAAQ,KAAK,GAAG,IAAI,CAAC,GAAI,OAAO,CAAC;AACtJ,SAAO,UAAU,EAAE,IAAI,OAAO,QAAQ;AACxC;AAEA,eAAe,cAAc,SAAkB,QAAwD;AACrG,MAAI,CAAC,cAAc,MAAM,EAAG,OAAM,IAAI,MAAM,2DAA2D;AACvG,QAAM,QAAQ;AACd,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK,aAAa;AAChB,YAAM,SAAS,kBAAkB,MAAM,YAAY,EAAE;AACrD,YAAM,UAAU,MAAM,OAAO,YAAY,SAAS,EAAE,SAAS,CAAC,YAAY,OAAO,MAAM,CAAC,EAAE,CAAC;AAC3F,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,2DAA2D;AACzF,YAAM,OAAO,UAAU,MAAM;AAC7B,YAAM,MAAM,aAAa,qCAAqC,OAAO,MAAM,GAAG;AAC9E,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AAAgB,aAAO,aAAa;AAAA,IACzC,KAAK;AAAW,aAAO,EAAE,QAAQ,MAAM,OAAO,UAAU,GAAG,SAAS,MAAM,OAAO,WAAW,GAAG,MAAM,MAAM,OAAO,QAAQ,GAAG,YAAY,MAAM,OAAO,cAAc,GAAG,OAAO,MAAM,OAAO,SAAS,EAAE;AAAA,IACtM,KAAK;AAAc,aAAO,WAAW;AAAA,IACrC,KAAK;AAAgB,aAAO,QAAQ,MAAM,aAAa,IAAI,KAAK;AAAA,IAChE,KAAK;AAAiB,aAAO,QAAQ,MAAM,aAAa,IAAI,IAAI;AAAA,IAChE,KAAK,WAAW;AACd,YAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,UAAI,CAAC,QAAQ,KAAK,UAAU,UAAW,OAAM,IAAI,MAAM,sCAAsC;AAC7F,YAAM,WAAW,EAAE,GAAG,MAAM,OAAO,YAAqB,YAAY,KAAK,IAAI,EAAE;AAC/E,YAAM,OAAO,QAAQ,QAAQ;AAC7B,YAAM,UAAU,MAAM,OAAO,WAAW;AACxC,YAAM,MAAM,YAAY,wCAAwC,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,QAAQ,SAAS,GAAG,CAAC;AACtI,aAAO;AAAA,IACT;AAAA,IACA,KAAK,UAAU;AACb,YAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,UAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iCAAiC;AAC5D,YAAM,WAAW,EAAE,GAAG,MAAM,OAAO,WAAoB;AACvD,YAAM,OAAO,QAAQ,QAAQ;AAC7B,YAAM,UAAU,MAAM,OAAO,WAAW;AACxC,YAAM,MAAM,YAAY,+BAA+B,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,QAAQ,SAAS,GAAG,CAAC;AAC7H,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AAAW,aAAO,YAAY,MAAM,UAAU,EAAE;AAAA,IACrD,KAAK;AAAW,aAAO,YAAY,MAAM,UAAU,EAAE;AAAA,IACrD,KAAK,QAAQ;AACX,YAAM,UAAU,MAAM,OAAO,WAAW;AACxC,UAAI,QAAS,OAAM,OAAO,WAAW,EAAE,GAAG,SAAS,WAAW,KAAK,IAAI,EAAE,CAAC;AAC1E,YAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,UAAI,QAAQ,CAAC,WAAW,UAAU,EAAE,SAAS,KAAK,KAAK,EAAG,OAAM,OAAO,QAAQ,EAAE,GAAG,MAAM,OAAO,YAAY,CAAC;AAC9G,YAAM,MAAM,QAAQ,yCAAyC,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,GAAI,OAAO,EAAE,QAAQ,KAAK,GAAG,IAAI,CAAC,EAAG,CAAC;AACpJ,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAAA,IACA;AAAS,YAAM,IAAI,MAAM,2BAA2B;AAAA,EACtD;AACF;AAEA,OAAO,QAAQ,UAAU,YAAY,CAAC,SAAS,QAAQ,iBAAiB;AACtE,gBAAc,SAAS,MAAM,EAAE,KAAK,WAAS,aAAa,EAAE,IAAI,MAAM,MAAM,CAAC,CAAC,EAAE,MAAM,WAAS,aAAa,EAAE,IAAI,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC;AACzL,SAAO;AACT,CAAC;AAED,OAAO,QAAQ,UAAU,YAAY,UAAQ;AAC3C,MAAI,KAAK,SAAS,uBAAuB,KAAK,QAAQ,OAAO,OAAO,QAAQ,MAAM,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,QAAQ,OAAO,EAAE,CAAC,EAAG,QAAO,KAAK,WAAW;AAClK,OAAK,UAAU,YAAY,aAAW;AAAE,kBAAc,SAAS,KAAK,UAAU,CAAC,CAAC,EAAE,KAAK,WAAS,KAAK,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC,CAAC,EAAE,MAAM,WAAS,KAAK,YAAY,EAAE,IAAI,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,EAAG,CAAC;AAC1P,CAAC;",
+  "sources": ["../../memory.ts", "../../policy.ts", "../../progress.ts", "../../version.ts", "../../types.ts", "../../protocol.ts", "../background.ts"],
+  "sourcesContent": ["import type { agentplan, agentsession, auditevent, diagnosticreport, endpointconfig, planprogress } from \"./types.js\";\n\n/** Provides a small storage seam that works in browser, tests and future adapters. */\nexport interface memoryadapter {\n  get<T>(key: string): Promise<T | undefined>;\n  set<T>(key: string, value: T): Promise<void>;\n}\n\nexport class sessionmemory {\n  constructor(private readonly adapter: memoryadapter) {}\n\n  async getconfig(): Promise<endpointconfig | undefined> { return this.adapter.get<endpointconfig>(\"config\"); }\n  async setconfig(value: endpointconfig): Promise<void> { return this.adapter.set(\"config\", value); }\n  async getsession(): Promise<agentsession | undefined> { return this.adapter.get<agentsession>(\"session\"); }\n  async setsession(value: agentsession): Promise<void> { return this.adapter.set(\"session\", value); }\n  async getplan(): Promise<agentplan | undefined> { return this.adapter.get<agentplan>(\"plan\"); }\n  async setplan(value: agentplan): Promise<void> { return this.adapter.set(\"plan\", value); }\n  async getdiagnostic(): Promise<diagnosticreport | undefined> { return this.adapter.get<diagnosticreport>(\"diagnostic\"); }\n  async setdiagnostic(value: diagnosticreport): Promise<void> { return this.adapter.set(\"diagnostic\", value); }\n  async getprogress(): Promise<planprogress | undefined> { return this.adapter.get<planprogress>(\"progress\"); }\n  async setprogress(value: planprogress): Promise<void> { return this.adapter.set(\"progress\", value); }\n  async getaudit(): Promise<auditevent[]> { return (await this.adapter.get<auditevent[]>(\"audit\")) ?? []; }\n  async addaudi(event: auditevent): Promise<void> {\n    const records = await this.getaudit();\n    await this.adapter.set(\"audit\", [event, ...records].slice(0, 100));\n  }\n}\n\n/** Creates identifiers locally without a network dependency. */\nexport function randomid(): string {\n  return crypto.randomUUID();\n}\n", "import type { actionkind, agentplan, agentsession, endpointconfig, policyevaluation, toolstep } from \"./types.js\";\n\nconst sensitiveactions = new Set<actionkind>([\"click\", \"type\", \"navigate\", \"select\"]);\nconst interactionactions = new Set<actionkind>([\"focus\", \"scroll\", \"hover\"]);\nconst allowedactions = new Set<actionkind>([\"observe\", \"inspect\", \"focus\", \"click\", \"type\", \"navigate\", \"scroll\", \"select\", \"hover\", \"extract\", \"wait\"]);\nconst targetactions = new Set<actionkind>([\"inspect\", \"focus\", \"click\", \"type\", \"scroll\", \"select\", \"hover\"]);\n\n/** Normalizes a user supplied HTTPS endpoint without preserving a provider lock-in. */\nexport function normalizeendpoint(value: string): endpointconfig {\n  const endpoint = new URL(value.trim());\n  if (endpoint.protocol !== \"https:\") throw new Error(\"Devthink accepts HTTPS endpoints only.\");\n  if (endpoint.username || endpoint.password) throw new Error(\"Endpoint credentials are not allowed in the URL.\");\n  return { endpoint: endpoint.toString(), origin: endpoint.origin, configuredat: Date.now() };\n}\n\n/** Creates the exact optional host pattern requested from Chromium. */\nexport function hostpattern(origin: string): string {\n  const parsed = new URL(origin);\n  if (parsed.protocol !== \"https:\") throw new Error(\"Only HTTPS origins can be granted.\");\n  return `${parsed.origin}/*`;\n}\n\n/** Defines action risk from a fixed local allowlist. */\nexport function actionrisk(kind: actionkind): \"read\" | \"interaction\" | \"sensitive\" {\n  if (!allowedactions.has(kind)) throw new Error(\"Unsupported browser action.\");\n  if (sensitiveactions.has(kind)) return \"sensitive\";\n  return interactionactions.has(kind) ? \"interaction\" : \"read\";\n}\n\n/** Parses the bounded pause duration of a wait step. */\nexport function waitduration(step: toolstep): number {\n  const requested = step.value ? Number.parseInt(step.value, 10) : 250;\n  if (!Number.isFinite(requested) || requested < 0) throw new Error(\"Wait duration must be zero or a positive number of milliseconds.\");\n  return Math.min(requested, 10_000);\n}\n\n/** Validates a single proposal against the active tab origin and local policy. */\nexport function validatestep(step: toolstep, origin: string): policyevaluation {\n  if (!allowedactions.has(step.kind)) return { allowed: false, reason: \"Unsupported action kind.\" };\n  if (!step.summary.trim()) return { allowed: false, reason: \"A human-readable action summary is required.\" };\n  if (targetactions.has(step.kind) && !step.target?.trim()) return { allowed: false, reason: \"A page target is required.\" };\n  if (step.kind === \"select\" && !step.value?.trim()) return { allowed: false, reason: \"A reviewed option value is required.\" };\n  if (step.kind === \"wait\") {\n    try { waitduration(step); } catch { return { allowed: false, reason: \"Wait duration must be zero or a positive number of milliseconds.\" }; }\n  }\n  if (step.kind === \"navigate\") {\n    if (!step.value) return { allowed: false, reason: \"A navigation URL is required.\" };\n    try {\n      if (new URL(step.value).origin !== origin) return { allowed: false, reason: \"Navigation must remain within the approved origin.\" };\n    } catch {\n      return { allowed: false, reason: \"Navigation URL is invalid.\" };\n    }\n  }\n  return { allowed: true };\n}\n\n/** Shared session gate: a live, unpaused session that still matches the active tab. */\nfunction sessiongate(input: { session: agentsession | undefined; tabid: number; origin: string; now: number; action: string }): policyevaluation {\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= input.now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.pausedat) return { allowed: false, reason: `The browser session is paused and cannot ${input.action}.` };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: `The ${input.action} is outside the approved tab or origin.` };\n  return { allowed: true };\n}\n\n/** Applies the consent gate immediately before an action reaches the page bridge. */\nexport function canexecute(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: \"execute an action\" });\n  if (!gate.allowed) return gate;\n  if (!input.plan || input.plan.state !== \"approved\") return { allowed: false, reason: \"The plan has not received explicit approval.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The approved plan has expired.\" };\n  return validatestep(input.step, input.origin);\n}\n\n/** Allows a non-mutating, temporary target preview during plan review. */\nexport function canpreview(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: \"preview a target\" });\n  if (!gate.allowed) return gate;\n  if (!input.plan || ![\"pending\", \"approved\"].includes(input.plan.state)) return { allowed: false, reason: \"Only a reviewed pending or approved plan can be previewed.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The reviewed plan has expired.\" };\n  if (![\"focus\", \"inspect\", \"click\", \"type\", \"scroll\", \"select\", \"hover\"].includes(input.step.kind)) return { allowed: false, reason: \"Only a target-based action can be previewed.\" };\n  return validatestep(input.step, input.origin);\n}\n", "import type { agentplan, planprogress } from \"./types.js\";\n\n/**\n * Execution-progress logics for reviewed plans.\n * Every correlated rule for step completion, deduplication and plan closure lives in this file.\n */\n\n/** Returns a fresh progress record for a plan that has not executed any step yet. */\nexport function emptyprogress(planid: string, now: number): planprogress {\n  return { planid, completedsteps: [], updatedat: now };\n}\n\n/** Records one successfully executed step; repeated executions of the same step stay deduplicated. */\nexport function recordstep(progress: planprogress | undefined, planid: string, stepid: string, now: number): planprogress {\n  const base = progress && progress.planid === planid ? progress : emptyprogress(planid, now);\n  if (base.completedsteps.includes(stepid)) return { ...base, updatedat: now };\n  return { planid, completedsteps: [...base.completedsteps, stepid], updatedat: now };\n}\n\n/** True only when every step of the plan has a recorded, successful execution. */\nexport function iscomplete(progress: planprogress | undefined, plan: agentplan): boolean {\n  if (!progress || progress.planid !== plan.id) return false;\n  const required = plan.steps.map(step => step.id);\n  return required.length > 0 && required.every(id => progress.completedsteps.includes(id));\n}\n\n/** Clears progress whenever a different plan replaces the tracked one. */\nexport function resetforplan(progress: planprogress | undefined, plan: agentplan, now: number): planprogress {\n  if (progress && progress.planid === plan.id) return progress;\n  return emptyprogress(plan.id, now);\n}\n", "/** Canonical package version synchronized from package.json. */\nexport const packageversion = \"1.1.31\" as const;\n", "/** Shared contracts for every Devthink target. */\nimport { packageversion } from \"./version.js\";\n\nexport const protocolversion = packageversion;\n\nexport type actionkind = \"observe\" | \"inspect\" | \"focus\" | \"click\" | \"type\" | \"navigate\" | \"scroll\" | \"select\" | \"hover\" | \"extract\" | \"wait\";\nexport type actionrisk = \"read\" | \"interaction\" | \"sensitive\";\nexport type planstate = \"draft\" | \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"completed\" | \"cancelled\";\nexport type auditkind = \"configure\" | \"session\" | \"observe\" | \"proposal\" | \"approval\" | \"action\" | \"error\" | \"stop\" | \"pause\" | \"resume\" | \"complete\";\n\nexport interface toolstep {\n  id: string;\n  kind: actionkind;\n  target?: string;\n  value?: string;\n  summary: string;\n  risk: actionrisk;\n}\n\nexport interface agentplan {\n  id: string;\n  objective: string;\n  origin: string;\n  steps: toolstep[];\n  createdat: number;\n  expiresat: number;\n  state: planstate;\n  approvedat?: number;\n  completedat?: number;\n}\n\nexport interface agentsession {\n  id: string;\n  tabid: number;\n  origin: string;\n  startedat: number;\n  expiresat: number;\n  stoppedat?: number;\n  pausedat?: number;\n}\n\nexport interface endpointconfig {\n  endpoint: string;\n  origin: string;\n  configuredat: number;\n}\n\nexport interface observation {\n  url: string;\n  title: string;\n  textpreview: string;\n  textlength: number;\n  forms: Array<{ label: string; type: string; name: string; options?: string[] }>;\n  interactive: Array<{ selector: string; role: string; label: string }>;\n  capturedat: number;\n}\n\nexport interface auditevent {\n  id: string;\n  kind: auditkind;\n  at: number;\n  summary: string;\n  sessionid?: string;\n  planid?: string;\n  stepid?: string;\n}\n\nexport interface diagnosticreport {\n  id: string;\n  sessionid: string;\n  origin: string;\n  capturedat: number;\n  tabid: number;\n  title: string;\n  textlength: number;\n  interactivecount: number;\n  formcount: number;\n  bridgeavailable: boolean;\n}\n\nexport interface proposalrequest {\n  objective: string;\n  session: agentsession;\n  observation: observation;\n}\n\nexport interface planproposal {\n  version: typeof protocolversion;\n  plan: agentplan;\n}\n\nexport interface policyevaluation {\n  allowed: boolean;\n  reason?: string;\n}\n\n/** Tracks which reviewed steps of one plan have already executed locally. */\nexport interface planprogress {\n  planid: string;\n  completedsteps: string[];\n  updatedat: number;\n}\n", "import { actionrisk, validatestep } from \"./policy.js\";\nimport { protocolversion, type agentplan, type planproposal, type proposalrequest, type toolstep } from \"./types.js\";\n\nfunction record(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) throw new Error(\"Protocol message must be an object.\");\n  return value as Record<string, unknown>;\n}\n\nfunction text(value: unknown, field: string): string {\n  if (typeof value !== \"string\" || !value.trim()) throw new Error(`${field} must be a non-empty string.`);\n  return value.trim();\n}\n\n/** Validates agent output before it becomes a locally reviewable plan. */\nexport function parseproposal(value: unknown, origin: string): planproposal {\n  const root = record(value);\n  if (root.version !== protocolversion) throw new Error(\"Unsupported protocol version.\");\n  const planinput = record(root.plan);\n  const stepsinput = planinput.steps;\n  if (!Array.isArray(stepsinput) || stepsinput.length === 0 || stepsinput.length > 50) throw new Error(\"A plan needs between one and fifty steps.\");\n  const steps: toolstep[] = stepsinput.map((input, index) => {\n    const candidate = record(input);\n    const kind = text(candidate.kind, `step ${index + 1} kind`) as toolstep[\"kind\"];\n    const step: toolstep = {\n      id: typeof candidate.id === \"string\" ? candidate.id : crypto.randomUUID(),\n      kind,\n      summary: text(candidate.summary, `step ${index + 1} summary`),\n      risk: actionrisk(kind),\n      ...(typeof candidate.target === \"string\" ? { target: candidate.target } : {}),\n      ...(typeof candidate.value === \"string\" ? { value: candidate.value } : {}),\n    };\n    const evaluation = validatestep(step, origin);\n    if (!evaluation.allowed) throw new Error(evaluation.reason);\n    return step;\n  });\n  const createdat = Date.now();\n  const plan: agentplan = {\n    id: typeof planinput.id === \"string\" ? planinput.id : crypto.randomUUID(),\n    objective: text(planinput.objective, \"objective\"),\n    origin,\n    steps,\n    createdat,\n    expiresat: Math.min(typeof planinput.expiresat === \"number\" ? planinput.expiresat : createdat + 10 * 60 * 1000, createdat + 30 * 60 * 1000),\n    state: \"pending\",\n  };\n  if (plan.expiresat <= createdat) throw new Error(\"Plan expiry must be in the future.\");\n  return { version: protocolversion, plan };\n}\n\n/** Shapes the only data that may be sent to a user-configured agent endpoint. */\nexport function requestbody(input: proposalrequest): string {\n  return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation });\n}\n", "import { randomid, sessionmemory } from \"../memory.js\";\nimport { canexecute, canpreview, hostpattern, normalizeendpoint } from \"../policy.js\";\nimport { iscomplete, recordstep, resetforplan } from \"../progress.js\";\nimport { parseproposal, requestbody } from \"../protocol.js\";\nimport type { agentplan, agentsession, auditevent, diagnosticreport, observation, toolstep } from \"../types.js\";\n\nconst sessionduration = 15 * 60 * 1000;\n\nconst chromestorage = {\n  async get<T>(key: string): Promise<T | undefined> { return (await chrome.storage.local.get(key))[key] as T | undefined; },\n  async set<T>(key: string, value: T): Promise<void> { await chrome.storage.local.set({ [key]: value }); },\n};\nconst memory = new sessionmemory(chromestorage);\n\nfunction extensionpage(sender: chrome.runtime.MessageSender): boolean {\n  return sender.id === chrome.runtime.id && Boolean(sender.url?.startsWith(chrome.runtime.getURL(\"\")));\n}\n\nasync function audit(kind: auditevent[\"kind\"], summary: string, extra: Partial<auditevent> = {}): Promise<void> {\n  await memory.addaudi({ id: randomid(), kind, at: Date.now(), summary, ...extra });\n}\n\nasync function activecontext(): Promise<{ tab: chrome.tabs.Tab; origin: string }> {\n  const [tab] = await chrome.tabs.query({ active: true, lastFocusedWindow: true });\n  if (!tab?.id || !tab.url) throw new Error(\"No active web tab is available.\");\n  const origin = new URL(tab.url).origin;\n  if (!origin.startsWith(\"https://\")) throw new Error(\"Devthink can work with HTTPS pages only.\");\n  return { tab, origin };\n}\n\nasync function snapshot(tabid: number): Promise<observation> {\n  await chrome.scripting.executeScript({ target: { tabId: tabid }, files: [\"pagebridge.js\"] });\n  const result = await chrome.scripting.executeScript({ target: { tabId: tabid }, func: () => {\n    const bridge = (globalThis as typeof globalThis & { devthinkbridge?: { capturesnapshot: () => observation } }).devthinkbridge;\n    if (!bridge) throw new Error(\"Devthink page bridge is unavailable.\");\n    return bridge.capturesnapshot();\n  } });\n  const value = result[0]?.result;\n  if (!value) throw new Error(\"The page did not return an observation.\");\n  return value as observation;\n}\n\nasync function startsession(): Promise<agentsession> {\n  const { tab, origin } = await activecontext();\n  const session: agentsession = { id: randomid(), tabid: tab.id as number, origin, startedat: Date.now(), expiresat: Date.now() + sessionduration };\n  await memory.setsession(session);\n  await audit(\"session\", `Session started for ${origin}.`, { sessionid: session.id });\n  return session;\n}\n\nasync function diagnostic(): Promise<diagnosticreport> {\n  const session = await memory.getsession();\n  const { tab, origin } = await activecontext();\n  if (!session || session.stoppedat || session.expiresat <= Date.now() || session.tabid !== tab.id || session.origin !== origin) throw new Error(\"Start a current session for this active tab before diagnostics.\");\n  const observation = await snapshot(session.tabid);\n  const report: diagnosticreport = { id: randomid(), sessionid: session.id, origin, capturedat: Date.now(), tabid: session.tabid, title: observation.title, textlength: observation.textlength, interactivecount: observation.interactive.length, formcount: observation.forms.length, bridgeavailable: true };\n  await memory.setdiagnostic(report);\n  await audit(\"observe\", \"Structured diagnostics captured for the approved active tab.\", { sessionid: session.id });\n  return report;\n}\n\nfunction localplan(objective: string, session: agentsession): agentplan {\n  const now = Date.now();\n  return { id: randomid(), objective, origin: session.origin, steps: [{ id: randomid(), kind: \"observe\", summary: \"Capture a bounded semantic snapshot of the approved active tab.\", risk: \"read\" }], createdat: now, expiresat: now + sessionduration, state: \"pending\" };\n}\n\nasync function propose(objective: string, remote: boolean): Promise<agentplan> {\n  if (!objective.trim()) throw new Error(\"An objective is required.\");\n  const session = await memory.getsession();\n  if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error(\"Start a current browser session before requesting a plan.\");\n  const { tab, origin } = await activecontext();\n  if (session.tabid !== tab.id || session.origin !== origin) throw new Error(\"The selected tab or origin no longer matches the approved session.\");\n  const observation = await snapshot(session.tabid);\n  const config = await memory.getconfig();\n  let plan = localplan(objective.trim(), session);\n  if (remote) {\n    if (!config) throw new Error(\"Configure an approved HTTPS endpoint before requesting a remote proposal.\");\n    const response = await fetch(config.endpoint, { method: \"POST\", headers: { \"content-type\": \"application/json\" }, credentials: \"omit\", body: requestbody({ objective: objective.trim(), session, observation }) });\n    if (!response.ok) throw new Error(`Proposal endpoint returned ${response.status}.`);\n    plan = parseproposal(await response.json(), session.origin).plan;\n  }\n  await memory.setplan(plan);\n  await memory.setprogress(resetforplan(await memory.getprogress(), plan, Date.now()));\n  await audit(\"proposal\", `Plan proposed with ${plan.steps.length} reviewed step${plan.steps.length === 1 ? \"\" : \"s\"}.`, { sessionid: session.id, planid: plan.id });\n  return plan;\n}\n\nasync function executestep(stepid: string): Promise<{ ok: boolean; summary: string }> {\n  const session = await memory.getsession();\n  const plan = await memory.getplan();\n  const { tab, origin } = await activecontext();\n  const step = plan?.steps.find(candidate => candidate.id === stepid);\n  if (!step) throw new Error(\"Reviewed step was not found.\");\n  const gate = canexecute({ session, plan, step, tabid: tab.id as number, origin });\n  if (!gate.allowed) throw new Error(gate.reason);\n  const fresh = await snapshot(tab.id as number);\n  if (step.target && !fresh.interactive.some(item => item.selector === step.target)) throw new Error(\"The page changed and the target must be reviewed again.\");\n  const result = await chrome.scripting.executeScript({ target: { tabId: tab.id as number }, func: (action: toolstep, expectedorigin: string) => {\n    const bridge = (globalThis as typeof globalThis & { devthinkbridge?: { performstep: (input: toolstep, origin: string) => { ok: boolean; summary: string } | Promise<{ ok: boolean; summary: string }> } }).devthinkbridge;\n    if (!bridge) throw new Error(\"Devthink page bridge is unavailable.\");\n    return bridge.performstep(action, expectedorigin);\n  }, args: [step, origin] });\n  const output = result[0]?.result as { ok: boolean; summary: string } | undefined;\n  const summary = output?.summary ?? \"The page action returned no result.\";\n  await audit(output?.ok ? \"action\" : \"error\", summary, { ...(session ? { sessionid: session.id } : {}), ...(plan ? { planid: plan.id } : {}), stepid });\n  if (output?.ok && plan) {\n    const progress = recordstep(await memory.getprogress(), plan.id, stepid, Date.now());\n    await memory.setprogress(progress);\n    if (iscomplete(progress, plan) && plan.state === \"approved\") {\n      const completed = { ...plan, state: \"completed\" as const, completedat: Date.now() };\n      await memory.setplan(completed);\n      await audit(\"complete\", \"Every reviewed step of the approved plan has executed.\", { ...(session ? { sessionid: session.id } : {}), planid: completed.id });\n    }\n  }\n  return output ?? { ok: false, summary };\n}\n\n/** Highlights a reviewed target without clicking, typing, navigating or transmitting page data. */\nasync function previewstep(stepid: string): Promise<{ ok: boolean; summary: string }> {\n  const session = await memory.getsession();\n  const plan = await memory.getplan();\n  const { tab, origin } = await activecontext();\n  const step = plan?.steps.find(candidate => candidate.id === stepid);\n  if (!step) throw new Error(\"Reviewed step was not found.\");\n  const gate = canpreview({ session, plan, step, tabid: tab.id as number, origin });\n  if (!gate.allowed) throw new Error(gate.reason);\n  const fresh = await snapshot(tab.id as number);\n  if (!step.target || !fresh.interactive.some(item => item.selector === step.target)) throw new Error(\"The page changed and the target must be reviewed again.\");\n  const result = await chrome.scripting.executeScript({ target: { tabId: tab.id as number }, func: (target: string, expectedorigin: string) => {\n    const bridge = (globalThis as typeof globalThis & { devthinkbridge?: { previewtarget: (selector: string, origin: string) => { ok: boolean; summary: string } } }).devthinkbridge;\n    if (!bridge) throw new Error(\"Devthink page bridge is unavailable.\");\n    return bridge.previewtarget(target, expectedorigin);\n  }, args: [step.target, origin] });\n  const output = result[0]?.result as { ok: boolean; summary: string } | undefined;\n  const summary = output?.summary ?? \"The target preview returned no result.\";\n  await audit(output?.ok ? \"observe\" : \"error\", summary, { ...(session ? { sessionid: session.id } : {}), ...(plan ? { planid: plan.id } : {}), stepid });\n  return output ?? { ok: false, summary };\n}\n\nasync function pausesession(): Promise<agentsession> {\n  const session = await memory.getsession();\n  if (!session || session.stoppedat) throw new Error(\"No active browser session exists.\");\n  if (session.expiresat <= Date.now()) throw new Error(\"The browser session has expired.\");\n  if (session.pausedat) throw new Error(\"The browser session is already paused.\");\n  const paused = { ...session, pausedat: Date.now() };\n  await memory.setsession(paused);\n  await audit(\"pause\", \"The user paused the browser session; no action or preview can run.\", { sessionid: session.id });\n  return paused;\n}\n\nasync function resumesession(): Promise<agentsession> {\n  const session = await memory.getsession();\n  if (!session || session.stoppedat) throw new Error(\"No active browser session exists.\");\n  if (session.expiresat <= Date.now()) throw new Error(\"The browser session has expired and cannot be resumed.\");\n  if (!session.pausedat) throw new Error(\"The browser session is not paused.\");\n  const resumed: agentsession = { id: session.id, tabid: session.tabid, origin: session.origin, startedat: session.startedat, expiresat: session.expiresat };\n  await memory.setsession(resumed);\n  await audit(\"resume\", \"The user resumed the browser session; reviewed actions can run again.\", { sessionid: session.id });\n  return resumed;\n}\n\nasync function handlerequest(message: unknown, sender: chrome.runtime.MessageSender): Promise<unknown> {\n  if (!extensionpage(sender)) throw new Error(\"Requests are accepted only from Devthink extension pages.\");\n  const input = message as { kind?: string; endpoint?: string; objective?: string; stepid?: string };\n  switch (input.kind) {\n    case \"configure\": {\n      const config = normalizeendpoint(input.endpoint ?? \"\");\n      const granted = await chrome.permissions.contains({ origins: [hostpattern(config.origin)] });\n      if (!granted) throw new Error(\"The endpoint origin has not received optional permission.\");\n      await memory.setconfig(config);\n      await audit(\"configure\", `Configured user-selected endpoint ${config.origin}.`);\n      return config;\n    }\n    case \"startsession\": return startsession();\n    case \"context\": {\n      const plan = await memory.getplan();\n      const progress = await memory.getprogress();\n      return { config: await memory.getconfig(), session: await memory.getsession(), plan, progress: plan && progress?.planid === plan.id ? progress : undefined, diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit() };\n    }\n    case \"diagnostic\": return diagnostic();\n    case \"proposelocal\": return propose(input.objective ?? \"\", false);\n    case \"proposeremote\": return propose(input.objective ?? \"\", true);\n    case \"approve\": {\n      const plan = await memory.getplan();\n      if (!plan || plan.state !== \"pending\") throw new Error(\"Only a pending plan can be approved.\");\n      const approved = { ...plan, state: \"approved\" as const, approvedat: Date.now() };\n      await memory.setplan(approved);\n      const current = await memory.getsession();\n      await audit(\"approval\", \"The user approved the reviewed plan.\", { ...(current ? { sessionid: current.id } : {}), planid: approved.id });\n      return approved;\n    }\n    case \"reject\": {\n      const plan = await memory.getplan();\n      if (!plan) throw new Error(\"No plan is available to reject.\");\n      const rejected = { ...plan, state: \"rejected\" as const };\n      await memory.setplan(rejected);\n      const current = await memory.getsession();\n      await audit(\"approval\", \"The user rejected the plan.\", { ...(current ? { sessionid: current.id } : {}), planid: rejected.id });\n      return rejected;\n    }\n    case \"preview\": return previewstep(input.stepid ?? \"\");\n    case \"execute\": return executestep(input.stepid ?? \"\");\n    case \"pausesession\": return pausesession();\n    case \"resumesession\": return resumesession();\n    case \"stop\": {\n      const session = await memory.getsession();\n      if (session) await memory.setsession({ ...session, stoppedat: Date.now() });\n      const plan = await memory.getplan();\n      if (plan && [\"pending\", \"approved\"].includes(plan.state)) await memory.setplan({ ...plan, state: \"cancelled\" });\n      await audit(\"stop\", \"The user stopped the browser session.\", { ...(session ? { sessionid: session.id } : {}), ...(plan ? { planid: plan.id } : {}) });\n      return { stopped: true };\n    }\n    default: throw new Error(\"Unknown Devthink request.\");\n  }\n}\n\nchrome.runtime.onMessage.addListener((message, sender, sendresponse) => {\n  handlerequest(message, sender).then(value => sendresponse({ ok: true, value })).catch(error => sendresponse({ ok: false, error: error instanceof Error ? error.message : String(error) }));\n  return true;\n});\n\nchrome.runtime.onConnect.addListener(port => {\n  if (port.name !== \"devthinksidepanel\" || port.sender?.id !== chrome.runtime.id || !port.sender.url?.startsWith(chrome.runtime.getURL(\"\"))) return port.disconnect();\n  port.onMessage.addListener(message => { handlerequest(message, port.sender ?? {}).then(value => port.postMessage({ ok: true, value })).catch(error => port.postMessage({ ok: false, error: error instanceof Error ? error.message : String(error) })); });\n});\n"],
+  "mappings": ";AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,SAAwB;AAAxB;AAAA,EAAyB;AAAA,EAAzB;AAAA,EAE7B,MAAM,YAAiD;AAAE,WAAO,KAAK,QAAQ,IAAoB,QAAQ;AAAA,EAAG;AAAA,EAC5G,MAAM,UAAU,OAAsC;AAAE,WAAO,KAAK,QAAQ,IAAI,UAAU,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,aAAgD;AAAE,WAAO,KAAK,QAAQ,IAAkB,SAAS;AAAA,EAAG;AAAA,EAC1G,MAAM,WAAW,OAAoC;AAAE,WAAO,KAAK,QAAQ,IAAI,WAAW,KAAK;AAAA,EAAG;AAAA,EAClG,MAAM,UAA0C;AAAE,WAAO,KAAK,QAAQ,IAAe,MAAM;AAAA,EAAG;AAAA,EAC9F,MAAM,QAAQ,OAAiC;AAAE,WAAO,KAAK,QAAQ,IAAI,QAAQ,KAAK;AAAA,EAAG;AAAA,EACzF,MAAM,gBAAuD;AAAE,WAAO,KAAK,QAAQ,IAAsB,YAAY;AAAA,EAAG;AAAA,EACxH,MAAM,cAAc,OAAwC;AAAE,WAAO,KAAK,QAAQ,IAAI,cAAc,KAAK;AAAA,EAAG;AAAA,EAC5G,MAAM,cAAiD;AAAE,WAAO,KAAK,QAAQ,IAAkB,UAAU;AAAA,EAAG;AAAA,EAC5G,MAAM,YAAY,OAAoC;AAAE,WAAO,KAAK,QAAQ,IAAI,YAAY,KAAK;AAAA,EAAG;AAAA,EACpG,MAAM,WAAkC;AAAE,WAAQ,MAAM,KAAK,QAAQ,IAAkB,OAAO,KAAM,CAAC;AAAA,EAAG;AAAA,EACxG,MAAM,QAAQ,OAAkC;AAC9C,UAAM,UAAU,MAAM,KAAK,SAAS;AACpC,UAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;AAAA,EACnE;AACF;AAGO,SAAS,WAAmB;AACjC,SAAO,OAAO,WAAW;AAC3B;;;AC7BA,IAAM,mBAAmB,oBAAI,IAAgB,CAAC,SAAS,QAAQ,YAAY,QAAQ,CAAC;AACpF,IAAM,qBAAqB,oBAAI,IAAgB,CAAC,SAAS,UAAU,OAAO,CAAC;AAC3E,IAAM,iBAAiB,oBAAI,IAAgB,CAAC,WAAW,WAAW,SAAS,SAAS,QAAQ,YAAY,UAAU,UAAU,SAAS,WAAW,MAAM,CAAC;AACvJ,IAAM,gBAAgB,oBAAI,IAAgB,CAAC,WAAW,SAAS,SAAS,QAAQ,UAAU,UAAU,OAAO,CAAC;AAGrG,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,WAAW,IAAI,IAAI,MAAM,KAAK,CAAC;AACrC,MAAI,SAAS,aAAa,SAAU,OAAM,IAAI,MAAM,wCAAwC;AAC5F,MAAI,SAAS,YAAY,SAAS,SAAU,OAAM,IAAI,MAAM,kDAAkD;AAC9G,SAAO,EAAE,UAAU,SAAS,SAAS,GAAG,QAAQ,SAAS,QAAQ,cAAc,KAAK,IAAI,EAAE;AAC5F;AAGO,SAAS,YAAY,QAAwB;AAClD,QAAM,SAAS,IAAI,IAAI,MAAM;AAC7B,MAAI,OAAO,aAAa,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACtF,SAAO,GAAG,OAAO,MAAM;AACzB;AAGO,SAAS,WAAW,MAAwD;AACjF,MAAI,CAAC,eAAe,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,6BAA6B;AAC5E,MAAI,iBAAiB,IAAI,IAAI,EAAG,QAAO;AACvC,SAAO,mBAAmB,IAAI,IAAI,IAAI,gBAAgB;AACxD;AAGO,SAAS,aAAa,MAAwB;AACnD,QAAM,YAAY,KAAK,QAAQ,OAAO,SAAS,KAAK,OAAO,EAAE,IAAI;AACjE,MAAI,CAAC,OAAO,SAAS,SAAS,KAAK,YAAY,EAAG,OAAM,IAAI,MAAM,kEAAkE;AACpI,SAAO,KAAK,IAAI,WAAW,GAAM;AACnC;AAGO,SAAS,aAAa,MAAgB,QAAkC;AAC7E,MAAI,CAAC,eAAe,IAAI,KAAK,IAAI,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,2BAA2B;AAChG,MAAI,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AAC1G,MAAI,cAAc,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,QAAQ,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AACxH,MAAI,KAAK,SAAS,YAAY,CAAC,KAAK,OAAO,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,uCAAuC;AAC3H,MAAI,KAAK,SAAS,QAAQ;AACxB,QAAI;AAAE,mBAAa,IAAI;AAAA,IAAG,QAAQ;AAAE,aAAO,EAAE,SAAS,OAAO,QAAQ,mEAAmE;AAAA,IAAG;AAAA,EAC7I;AACA,MAAI,KAAK,SAAS,YAAY;AAC5B,QAAI,CAAC,KAAK,MAAO,QAAO,EAAE,SAAS,OAAO,QAAQ,gCAAgC;AAClF,QAAI;AACF,UAAI,IAAI,IAAI,KAAK,KAAK,EAAE,WAAW,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,qDAAqD;AAAA,IACnI,QAAQ;AACN,aAAO,EAAE,SAAS,OAAO,QAAQ,6BAA6B;AAAA,IAChE;AAAA,EACF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAGA,SAAS,YAAY,OAA4H;AAC/I,MAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,UAAW,QAAO,EAAE,SAAS,OAAO,QAAQ,oCAAoC;AACpH,MAAI,MAAM,QAAQ,aAAa,MAAM,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,mCAAmC;AAC9G,MAAI,MAAM,QAAQ,SAAU,QAAO,EAAE,SAAS,OAAO,QAAQ,4CAA4C,MAAM,MAAM,IAAI;AACzH,MAAI,MAAM,QAAQ,UAAU,MAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,OAAO,MAAM,MAAM,0CAA0C;AAChL,SAAO,EAAE,SAAS,KAAK;AACzB;AAGO,SAAS,WAAW,OAA0J;AACnL,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,QAAM,OAAO,YAAY,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ,KAAK,QAAQ,oBAAoB,CAAC;AAC/H,MAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,UAAU,WAAY,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AACpI,MAAI,MAAM,KAAK,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,iCAAiC;AACnG,SAAO,aAAa,MAAM,MAAM,MAAM,MAAM;AAC9C;AAGO,SAAS,WAAW,OAA0J;AACnL,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,QAAM,OAAO,YAAY,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ,KAAK,QAAQ,mBAAmB,CAAC;AAC9H,MAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,MAAI,CAAC,MAAM,QAAQ,CAAC,CAAC,WAAW,UAAU,EAAE,SAAS,MAAM,KAAK,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,6DAA6D;AACtK,MAAI,MAAM,KAAK,aAAa,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,iCAAiC;AACnG,MAAI,CAAC,CAAC,SAAS,WAAW,SAAS,QAAQ,UAAU,UAAU,OAAO,EAAE,SAAS,MAAM,KAAK,IAAI,EAAG,QAAO,EAAE,SAAS,OAAO,QAAQ,+CAA+C;AACnL,SAAO,aAAa,MAAM,MAAM,MAAM,MAAM;AAC9C;;;AC5EO,SAAS,cAAc,QAAgB,KAA2B;AACvE,SAAO,EAAE,QAAQ,gBAAgB,CAAC,GAAG,WAAW,IAAI;AACtD;AAGO,SAAS,WAAW,UAAoC,QAAgB,QAAgB,KAA2B;AACxH,QAAM,OAAO,YAAY,SAAS,WAAW,SAAS,WAAW,cAAc,QAAQ,GAAG;AAC1F,MAAI,KAAK,eAAe,SAAS,MAAM,EAAG,QAAO,EAAE,GAAG,MAAM,WAAW,IAAI;AAC3E,SAAO,EAAE,QAAQ,gBAAgB,CAAC,GAAG,KAAK,gBAAgB,MAAM,GAAG,WAAW,IAAI;AACpF;AAGO,SAAS,WAAW,UAAoC,MAA0B;AACvF,MAAI,CAAC,YAAY,SAAS,WAAW,KAAK,GAAI,QAAO;AACrD,QAAM,WAAW,KAAK,MAAM,IAAI,UAAQ,KAAK,EAAE;AAC/C,SAAO,SAAS,SAAS,KAAK,SAAS,MAAM,QAAM,SAAS,eAAe,SAAS,EAAE,CAAC;AACzF;AAGO,SAAS,aAAa,UAAoC,MAAiB,KAA2B;AAC3G,MAAI,YAAY,SAAS,WAAW,KAAK,GAAI,QAAO;AACpD,SAAO,cAAc,KAAK,IAAI,GAAG;AACnC;;;AC7BO,IAAM,iBAAiB;;;ACEvB,IAAM,kBAAkB;;;ACA/B,SAAS,OAAO,OAAyC;AACvD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACtH,SAAO;AACT;AAEA,SAAS,KAAK,OAAgB,OAAuB;AACnD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,8BAA8B;AACtG,SAAO,MAAM,KAAK;AACpB;AAGO,SAAS,cAAc,OAAgB,QAA8B;AAC1E,QAAM,OAAO,OAAO,KAAK;AACzB,MAAI,KAAK,YAAY,gBAAiB,OAAM,IAAI,MAAM,+BAA+B;AACrF,QAAM,YAAY,OAAO,KAAK,IAAI;AAClC,QAAM,aAAa,UAAU;AAC7B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,KAAK,WAAW,SAAS,GAAI,OAAM,IAAI,MAAM,2CAA2C;AAChJ,QAAM,QAAoB,WAAW,IAAI,CAAC,OAAO,UAAU;AACzD,UAAM,YAAY,OAAO,KAAK;AAC9B,UAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,QAAQ,CAAC,OAAO;AAC1D,UAAM,OAAiB;AAAA,MACrB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,MACxE;AAAA,MACA,SAAS,KAAK,UAAU,SAAS,QAAQ,QAAQ,CAAC,UAAU;AAAA,MAC5D,MAAM,WAAW,IAAI;AAAA,MACrB,GAAI,OAAO,UAAU,WAAW,WAAW,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,MAC3E,GAAI,OAAO,UAAU,UAAU,WAAW,EAAE,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,aAAa,aAAa,MAAM,MAAM;AAC5C,QAAI,CAAC,WAAW,QAAS,OAAM,IAAI,MAAM,WAAW,MAAM;AAC1D,WAAO;AAAA,EACT,CAAC;AACD,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,OAAkB;AAAA,IACtB,IAAI,OAAO,UAAU,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW;AAAA,IACxE,WAAW,KAAK,UAAU,WAAW,WAAW;AAAA,IAChD;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,KAAK,IAAI,OAAO,UAAU,cAAc,WAAW,UAAU,YAAY,YAAY,KAAK,KAAK,KAAM,YAAY,KAAK,KAAK,GAAI;AAAA,IAC1I,OAAO;AAAA,EACT;AACA,MAAI,KAAK,aAAa,UAAW,OAAM,IAAI,MAAM,oCAAoC;AACrF,SAAO,EAAE,SAAS,iBAAiB,KAAK;AAC1C;AAGO,SAAS,YAAY,OAAgC;AAC1D,SAAO,KAAK,UAAU,EAAE,SAAS,iBAAiB,WAAW,MAAM,WAAW,SAAS,MAAM,SAAS,aAAa,MAAM,YAAY,CAAC;AACxI;;;AC9CA,IAAM,kBAAkB,KAAK,KAAK;AAElC,IAAM,gBAAgB;AAAA,EACpB,MAAM,IAAO,KAAqC;AAAE,YAAQ,MAAM,OAAO,QAAQ,MAAM,IAAI,GAAG,GAAG,GAAG;AAAA,EAAoB;AAAA,EACxH,MAAM,IAAO,KAAa,OAAyB;AAAE,UAAM,OAAO,QAAQ,MAAM,IAAI,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC;AAAA,EAAG;AACzG;AACA,IAAM,SAAS,IAAI,cAAc,aAAa;AAE9C,SAAS,cAAc,QAA+C;AACpE,SAAO,OAAO,OAAO,OAAO,QAAQ,MAAM,QAAQ,OAAO,KAAK,WAAW,OAAO,QAAQ,OAAO,EAAE,CAAC,CAAC;AACrG;AAEA,eAAe,MAAM,MAA0B,SAAiB,QAA6B,CAAC,GAAkB;AAC9G,QAAM,OAAO,QAAQ,EAAE,IAAI,SAAS,GAAG,MAAM,IAAI,KAAK,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC;AAClF;AAEA,eAAe,gBAAmE;AAChF,QAAM,CAAC,GAAG,IAAI,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,MAAM,mBAAmB,KAAK,CAAC;AAC/E,MAAI,CAAC,KAAK,MAAM,CAAC,IAAI,IAAK,OAAM,IAAI,MAAM,iCAAiC;AAC3E,QAAM,SAAS,IAAI,IAAI,IAAI,GAAG,EAAE;AAChC,MAAI,CAAC,OAAO,WAAW,UAAU,EAAG,OAAM,IAAI,MAAM,0CAA0C;AAC9F,SAAO,EAAE,KAAK,OAAO;AACvB;AAEA,eAAe,SAAS,OAAqC;AAC3D,QAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;AAC3F,QAAM,SAAS,MAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,MAAM,GAAG,MAAM,MAAM;AAC1F,UAAM,SAAU,WAA+F;AAC/G,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sCAAsC;AACnE,WAAO,OAAO,gBAAgB;AAAA,EAChC,EAAE,CAAC;AACH,QAAM,QAAQ,OAAO,CAAC,GAAG;AACzB,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,yCAAyC;AACrE,SAAO;AACT;AAEA,eAAe,eAAsC;AACnD,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,QAAM,UAAwB,EAAE,IAAI,SAAS,GAAG,OAAO,IAAI,IAAc,QAAQ,WAAW,KAAK,IAAI,GAAG,WAAW,KAAK,IAAI,IAAI,gBAAgB;AAChJ,QAAM,OAAO,WAAW,OAAO;AAC/B,QAAM,MAAM,WAAW,uBAAuB,MAAM,KAAK,EAAE,WAAW,QAAQ,GAAG,CAAC;AAClF,SAAO;AACT;AAEA,eAAe,aAAwC;AACrD,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,MAAI,CAAC,WAAW,QAAQ,aAAa,QAAQ,aAAa,KAAK,IAAI,KAAK,QAAQ,UAAU,IAAI,MAAM,QAAQ,WAAW,OAAQ,OAAM,IAAI,MAAM,iEAAiE;AAChN,QAAM,cAAc,MAAM,SAAS,QAAQ,KAAK;AAChD,QAAM,SAA2B,EAAE,IAAI,SAAS,GAAG,WAAW,QAAQ,IAAI,QAAQ,YAAY,KAAK,IAAI,GAAG,OAAO,QAAQ,OAAO,OAAO,YAAY,OAAO,YAAY,YAAY,YAAY,kBAAkB,YAAY,YAAY,QAAQ,WAAW,YAAY,MAAM,QAAQ,iBAAiB,KAAK;AAC3S,QAAM,OAAO,cAAc,MAAM;AACjC,QAAM,MAAM,WAAW,gEAAgE,EAAE,WAAW,QAAQ,GAAG,CAAC;AAChH,SAAO;AACT;AAEA,SAAS,UAAU,WAAmB,SAAkC;AACtE,QAAM,MAAM,KAAK,IAAI;AACrB,SAAO,EAAE,IAAI,SAAS,GAAG,WAAW,QAAQ,QAAQ,QAAQ,OAAO,CAAC,EAAE,IAAI,SAAS,GAAG,MAAM,WAAW,SAAS,mEAAmE,MAAM,OAAO,CAAC,GAAG,WAAW,KAAK,WAAW,MAAM,iBAAiB,OAAO,UAAU;AACzQ;AAEA,eAAe,QAAQ,WAAmB,QAAqC;AAC7E,MAAI,CAAC,UAAU,KAAK,EAAG,OAAM,IAAI,MAAM,2BAA2B;AAClE,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,MAAI,CAAC,WAAW,QAAQ,aAAa,QAAQ,aAAa,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,2DAA2D;AACjJ,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,MAAI,QAAQ,UAAU,IAAI,MAAM,QAAQ,WAAW,OAAQ,OAAM,IAAI,MAAM,oEAAoE;AAC/I,QAAM,cAAc,MAAM,SAAS,QAAQ,KAAK;AAChD,QAAM,SAAS,MAAM,OAAO,UAAU;AACtC,MAAI,OAAO,UAAU,UAAU,KAAK,GAAG,OAAO;AAC9C,MAAI,QAAQ;AACV,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2EAA2E;AACxG,UAAM,WAAW,MAAM,MAAM,OAAO,UAAU,EAAE,QAAQ,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,GAAG,aAAa,QAAQ,MAAM,YAAY,EAAE,WAAW,UAAU,KAAK,GAAG,SAAS,YAAY,CAAC,EAAE,CAAC;AAChN,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,GAAG;AAClF,WAAO,cAAc,MAAM,SAAS,KAAK,GAAG,QAAQ,MAAM,EAAE;AAAA,EAC9D;AACA,QAAM,OAAO,QAAQ,IAAI;AACzB,QAAM,OAAO,YAAY,aAAa,MAAM,OAAO,YAAY,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC;AACnF,QAAM,MAAM,YAAY,sBAAsB,KAAK,MAAM,MAAM,iBAAiB,KAAK,MAAM,WAAW,IAAI,KAAK,GAAG,KAAK,EAAE,WAAW,QAAQ,IAAI,QAAQ,KAAK,GAAG,CAAC;AACjK,SAAO;AACT;AAEA,eAAe,YAAY,QAA2D;AACpF,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,QAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,QAAM,OAAO,MAAM,MAAM,KAAK,eAAa,UAAU,OAAO,MAAM;AAClE,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,8BAA8B;AACzD,QAAM,OAAO,WAAW,EAAE,SAAS,MAAM,MAAM,OAAO,IAAI,IAAc,OAAO,CAAC;AAChF,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,KAAK,MAAM;AAC9C,QAAM,QAAQ,MAAM,SAAS,IAAI,EAAY;AAC7C,MAAI,KAAK,UAAU,CAAC,MAAM,YAAY,KAAK,UAAQ,KAAK,aAAa,KAAK,MAAM,EAAG,OAAM,IAAI,MAAM,yDAAyD;AAC5J,QAAM,SAAS,MAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,IAAI,GAAa,GAAG,MAAM,CAAC,QAAkB,mBAA2B;AAC7I,UAAM,SAAU,WAA2L;AAC3M,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sCAAsC;AACnE,WAAO,OAAO,YAAY,QAAQ,cAAc;AAAA,EAClD,GAAG,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC;AACzB,QAAM,SAAS,OAAO,CAAC,GAAG;AAC1B,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,MAAM,QAAQ,KAAK,WAAW,SAAS,SAAS,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,GAAI,OAAO,EAAE,QAAQ,KAAK,GAAG,IAAI,CAAC,GAAI,OAAO,CAAC;AACrJ,MAAI,QAAQ,MAAM,MAAM;AACtB,UAAM,WAAW,WAAW,MAAM,OAAO,YAAY,GAAG,KAAK,IAAI,QAAQ,KAAK,IAAI,CAAC;AACnF,UAAM,OAAO,YAAY,QAAQ;AACjC,QAAI,WAAW,UAAU,IAAI,KAAK,KAAK,UAAU,YAAY;AAC3D,YAAM,YAAY,EAAE,GAAG,MAAM,OAAO,aAAsB,aAAa,KAAK,IAAI,EAAE;AAClF,YAAM,OAAO,QAAQ,SAAS;AAC9B,YAAM,MAAM,YAAY,0DAA0D,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,QAAQ,UAAU,GAAG,CAAC;AAAA,IAC3J;AAAA,EACF;AACA,SAAO,UAAU,EAAE,IAAI,OAAO,QAAQ;AACxC;AAGA,eAAe,YAAY,QAA2D;AACpF,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,QAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,QAAM,EAAE,KAAK,OAAO,IAAI,MAAM,cAAc;AAC5C,QAAM,OAAO,MAAM,MAAM,KAAK,eAAa,UAAU,OAAO,MAAM;AAClE,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,8BAA8B;AACzD,QAAM,OAAO,WAAW,EAAE,SAAS,MAAM,MAAM,OAAO,IAAI,IAAc,OAAO,CAAC;AAChF,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,KAAK,MAAM;AAC9C,QAAM,QAAQ,MAAM,SAAS,IAAI,EAAY;AAC7C,MAAI,CAAC,KAAK,UAAU,CAAC,MAAM,YAAY,KAAK,UAAQ,KAAK,aAAa,KAAK,MAAM,EAAG,OAAM,IAAI,MAAM,yDAAyD;AAC7J,QAAM,SAAS,MAAM,OAAO,UAAU,cAAc,EAAE,QAAQ,EAAE,OAAO,IAAI,GAAa,GAAG,MAAM,CAAC,QAAgB,mBAA2B;AAC3I,UAAM,SAAU,WAAkJ;AAClK,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sCAAsC;AACnE,WAAO,OAAO,cAAc,QAAQ,cAAc;AAAA,EACpD,GAAG,MAAM,CAAC,KAAK,QAAQ,MAAM,EAAE,CAAC;AAChC,QAAM,SAAS,OAAO,CAAC,GAAG;AAC1B,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,MAAM,QAAQ,KAAK,YAAY,SAAS,SAAS,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,GAAI,OAAO,EAAE,QAAQ,KAAK,GAAG,IAAI,CAAC,GAAI,OAAO,CAAC;AACtJ,SAAO,UAAU,EAAE,IAAI,OAAO,QAAQ;AACxC;AAEA,eAAe,eAAsC;AACnD,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,MAAI,CAAC,WAAW,QAAQ,UAAW,OAAM,IAAI,MAAM,mCAAmC;AACtF,MAAI,QAAQ,aAAa,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,kCAAkC;AACvF,MAAI,QAAQ,SAAU,OAAM,IAAI,MAAM,wCAAwC;AAC9E,QAAM,SAAS,EAAE,GAAG,SAAS,UAAU,KAAK,IAAI,EAAE;AAClD,QAAM,OAAO,WAAW,MAAM;AAC9B,QAAM,MAAM,SAAS,sEAAsE,EAAE,WAAW,QAAQ,GAAG,CAAC;AACpH,SAAO;AACT;AAEA,eAAe,gBAAuC;AACpD,QAAM,UAAU,MAAM,OAAO,WAAW;AACxC,MAAI,CAAC,WAAW,QAAQ,UAAW,OAAM,IAAI,MAAM,mCAAmC;AACtF,MAAI,QAAQ,aAAa,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,wDAAwD;AAC7G,MAAI,CAAC,QAAQ,SAAU,OAAM,IAAI,MAAM,oCAAoC;AAC3E,QAAM,UAAwB,EAAE,IAAI,QAAQ,IAAI,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,WAAW,QAAQ,WAAW,WAAW,QAAQ,UAAU;AACzJ,QAAM,OAAO,WAAW,OAAO;AAC/B,QAAM,MAAM,UAAU,yEAAyE,EAAE,WAAW,QAAQ,GAAG,CAAC;AACxH,SAAO;AACT;AAEA,eAAe,cAAc,SAAkB,QAAwD;AACrG,MAAI,CAAC,cAAc,MAAM,EAAG,OAAM,IAAI,MAAM,2DAA2D;AACvG,QAAM,QAAQ;AACd,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK,aAAa;AAChB,YAAM,SAAS,kBAAkB,MAAM,YAAY,EAAE;AACrD,YAAM,UAAU,MAAM,OAAO,YAAY,SAAS,EAAE,SAAS,CAAC,YAAY,OAAO,MAAM,CAAC,EAAE,CAAC;AAC3F,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,2DAA2D;AACzF,YAAM,OAAO,UAAU,MAAM;AAC7B,YAAM,MAAM,aAAa,qCAAqC,OAAO,MAAM,GAAG;AAC9E,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AAAgB,aAAO,aAAa;AAAA,IACzC,KAAK,WAAW;AACd,YAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,YAAM,WAAW,MAAM,OAAO,YAAY;AAC1C,aAAO,EAAE,QAAQ,MAAM,OAAO,UAAU,GAAG,SAAS,MAAM,OAAO,WAAW,GAAG,MAAM,UAAU,QAAQ,UAAU,WAAW,KAAK,KAAK,WAAW,QAAW,YAAY,MAAM,OAAO,cAAc,GAAG,OAAO,MAAM,OAAO,SAAS,EAAE;AAAA,IACvO;AAAA,IACA,KAAK;AAAc,aAAO,WAAW;AAAA,IACrC,KAAK;AAAgB,aAAO,QAAQ,MAAM,aAAa,IAAI,KAAK;AAAA,IAChE,KAAK;AAAiB,aAAO,QAAQ,MAAM,aAAa,IAAI,IAAI;AAAA,IAChE,KAAK,WAAW;AACd,YAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,UAAI,CAAC,QAAQ,KAAK,UAAU,UAAW,OAAM,IAAI,MAAM,sCAAsC;AAC7F,YAAM,WAAW,EAAE,GAAG,MAAM,OAAO,YAAqB,YAAY,KAAK,IAAI,EAAE;AAC/E,YAAM,OAAO,QAAQ,QAAQ;AAC7B,YAAM,UAAU,MAAM,OAAO,WAAW;AACxC,YAAM,MAAM,YAAY,wCAAwC,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,QAAQ,SAAS,GAAG,CAAC;AACtI,aAAO;AAAA,IACT;AAAA,IACA,KAAK,UAAU;AACb,YAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,UAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iCAAiC;AAC5D,YAAM,WAAW,EAAE,GAAG,MAAM,OAAO,WAAoB;AACvD,YAAM,OAAO,QAAQ,QAAQ;AAC7B,YAAM,UAAU,MAAM,OAAO,WAAW;AACxC,YAAM,MAAM,YAAY,+BAA+B,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,QAAQ,SAAS,GAAG,CAAC;AAC7H,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AAAW,aAAO,YAAY,MAAM,UAAU,EAAE;AAAA,IACrD,KAAK;AAAW,aAAO,YAAY,MAAM,UAAU,EAAE;AAAA,IACrD,KAAK;AAAgB,aAAO,aAAa;AAAA,IACzC,KAAK;AAAiB,aAAO,cAAc;AAAA,IAC3C,KAAK,QAAQ;AACX,YAAM,UAAU,MAAM,OAAO,WAAW;AACxC,UAAI,QAAS,OAAM,OAAO,WAAW,EAAE,GAAG,SAAS,WAAW,KAAK,IAAI,EAAE,CAAC;AAC1E,YAAM,OAAO,MAAM,OAAO,QAAQ;AAClC,UAAI,QAAQ,CAAC,WAAW,UAAU,EAAE,SAAS,KAAK,KAAK,EAAG,OAAM,OAAO,QAAQ,EAAE,GAAG,MAAM,OAAO,YAAY,CAAC;AAC9G,YAAM,MAAM,QAAQ,yCAAyC,EAAE,GAAI,UAAU,EAAE,WAAW,QAAQ,GAAG,IAAI,CAAC,GAAI,GAAI,OAAO,EAAE,QAAQ,KAAK,GAAG,IAAI,CAAC,EAAG,CAAC;AACpJ,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAAA,IACA;AAAS,YAAM,IAAI,MAAM,2BAA2B;AAAA,EACtD;AACF;AAEA,OAAO,QAAQ,UAAU,YAAY,CAAC,SAAS,QAAQ,iBAAiB;AACtE,gBAAc,SAAS,MAAM,EAAE,KAAK,WAAS,aAAa,EAAE,IAAI,MAAM,MAAM,CAAC,CAAC,EAAE,MAAM,WAAS,aAAa,EAAE,IAAI,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC;AACzL,SAAO;AACT,CAAC;AAED,OAAO,QAAQ,UAAU,YAAY,UAAQ;AAC3C,MAAI,KAAK,SAAS,uBAAuB,KAAK,QAAQ,OAAO,OAAO,QAAQ,MAAM,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,QAAQ,OAAO,EAAE,CAAC,EAAG,QAAO,KAAK,WAAW;AAClK,OAAK,UAAU,YAAY,aAAW;AAAE,kBAAc,SAAS,KAAK,UAAU,CAAC,CAAC,EAAE,KAAK,WAAS,KAAK,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC,CAAC,EAAE,MAAM,WAAS,KAAK,YAAY,EAAE,IAAI,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,EAAG,CAAC;AAC1P,CAAC;",
   "names": []
 }

package/extension/dist/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEjO8Z0PDgQyfvawGcaO2j+o0GLCFTLNj7TkYC/Avo9l2NenMRq7gp90Nfd7E9MViv/OMcCKSYZ5unv12QPRtv31C+a5UQWDFAOP/cH5mwMd6hsayElrSoW8ta+FwFqmr9dIFkn7cQEU3YhZr4Gcbs+ycUHOxVgDA4NBKB0rQ6e9VW5LvTw0isRYUrqM+M72vKxHk9zUIYYn/LGPvottKBYi2GLr0PHSeC2UE+Shmq7vcFIXj6hDjvD4kLJ5sKoUllEcZ1TPuBcnHUQ9ndKA5iktXDQOIJCUJmi7a0YJ2PGg7fvpYfT9k0ai/qZ+pIoRfoOEwE01bPoDn7NjeYnNQIDAQAB",
   "name": "Devthink",
-  "version": "1.1.30",
+  "version": "1.1.31",
   "description": "A consent-first bridge for reviewed browser-agent tasks.",
   "permissions": [
     "activeTab",

package/extension/dist/pagebridge.js

@@ -42,15 +42,58 @@
     return { ok: true, summary: `Previewing ${label(target) || target.tagName.toLowerCase()} for five seconds.` };
   }
   function capturesnapshot() {
-    const candidates = [...document.querySelectorAll("a[href], button, input, textarea, select, [role=button], [role=link]")].slice(0, 80);
+    const candidates = [...document.querySelectorAll("a[href], button, input, textarea, select, [role=button], [role=link], [role=combobox], [role=option], details, summary")].slice(0, 80);
     const interactive = candidates.map((element) => ({ selector: selector(element), role: element.getAttribute("role") || element.tagName.toLowerCase(), label: label(element) })).filter((item) => item.label || item.role);
-    const forms = [...document.querySelectorAll("input, textarea, select")].slice(0, 40).map((element) => ({ label: label(element), type: element.getAttribute("type") || element.tagName.toLowerCase(), name: element.getAttribute("name") || "" }));
+    const forms = [...document.querySelectorAll("input, textarea, select")].slice(0, 40).map((element) => ({
+      label: label(element),
+      type: element.getAttribute("type") || element.tagName.toLowerCase(),
+      name: element.getAttribute("name") || "",
+      ...element instanceof HTMLSelectElement ? { options: [...element.options].slice(0, 12).map((option) => bounded(option.textContent || option.value, 60)) } : {}
+    }));
     const text = bounded(document.body?.innerText || "", 2e3);
     return { url: location.href, title: bounded(document.title, 180), textpreview: text, textlength: document.body?.innerText.length ?? 0, forms, interactive, capturedat: Date.now() };
   }
+  function extractcontent(targetselector) {
+    if (!targetselector) {
+      const links = [...document.querySelectorAll("a[href]")].slice(0, 25).map((element) => {
+        const href = element instanceof HTMLAnchorElement ? element.getAttribute("href") ?? "" : "";
+        return `${bounded(element.textContent || "")} (${bounded(href, 120)})`;
+      });
+      return { ok: true, summary: `Extracted ${links.length} bounded link entries: ${links.join("; ").slice(0, 180) || "no links present"}.` };
+    }
+    const target = document.querySelector(targetselector);
+    if (!target) return { ok: false, summary: "Extraction target is no longer available." };
+    return { ok: true, summary: `Extracted: ${bounded(target.textContent || "", 180) || "empty target"}.` };
+  }
+  function scrolltarget(target) {
+    target.scrollIntoView({ block: "center", inline: "nearest", behavior: "auto" });
+    return { ok: true, summary: `Scrolled ${label(target) || target.tagName.toLowerCase()} into view.` };
+  }
+  function hovertarget(target) {
+    for (const type of ["pointerover", "mouseover", "pointerenter"]) {
+      target.dispatchEvent(new PointerEvent(type, { bubbles: type !== "pointerenter", cancelable: true, composed: true }));
+    }
+    target.dispatchEvent(new MouseEvent("mouseenter", { bubbles: false, cancelable: true }));
+    return { ok: true, summary: `Hover events delivered to ${label(target) || target.tagName.toLowerCase()}.` };
+  }
+  function selectoption(target, value) {
+    if (!(target instanceof HTMLSelectElement)) return { ok: false, summary: "Target is not a select element." };
+    const option = [...target.options].find((candidate) => candidate.value === value || candidate.textContent?.trim() === value);
+    if (!option) return { ok: false, summary: "Reviewed option is not part of the select element." };
+    target.value = option.value;
+    target.dispatchEvent(new Event("input", { bubbles: true }));
+    target.dispatchEvent(new Event("change", { bubbles: true }));
+    return { ok: true, summary: `Selected ${bounded(option.textContent || option.value, 60)}.` };
+  }
   function performstep(step, expectedorigin) {
     if (location.origin !== expectedorigin) return { ok: false, summary: "Page origin changed before action." };
     if (step.kind === "observe") return { ok: true, summary: "Observation completed." };
+    if (step.kind === "wait") {
+      const requested = step.value ? Number.parseInt(step.value, 10) : 250;
+      const duration = Number.isFinite(requested) && requested > 0 ? Math.min(requested, 1e4) : 0;
+      return new Promise((resolve) => window.setTimeout(() => resolve({ ok: true, summary: `Bounded wait of ${duration} milliseconds completed.` }), duration));
+    }
+    if (step.kind === "extract") return extractcontent(step.target);
     if (step.kind === "navigate") {
       if (!step.value || new URL(step.value).origin !== expectedorigin) return { ok: false, summary: "Navigation target is outside the approved origin." };
       location.assign(step.value);
@@ -68,6 +111,9 @@
       target.click();
       return { ok: true, summary: "Reviewed click completed." };
     }
+    if (step.kind === "scroll") return scrolltarget(target);
+    if (step.kind === "hover") return hovertarget(target);
+    if (step.kind === "select") return selectoption(target, step.value ?? "");
     if (step.kind === "type") {
       if (!(target instanceof HTMLInputElement || target instanceof HTMLTextAreaElement)) return { ok: false, summary: "Target cannot receive text." };
       if (typeof step.value !== "string") return { ok: false, summary: "Approved text is absent." };

package/extension/dist/pagebridge.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../pagebridge.ts"],
-  "sourcesContent": ["import type { observation, toolstep } from \"../types.js\";\n\nfunction bounded(value: string, length = 180): string {\n  return value.replace(/\\s+/g, \" \").trim().slice(0, length);\n}\n\nfunction label(element: Element): string {\n  const aria = element.getAttribute(\"aria-label\");\n  const labelledby = element.getAttribute(\"aria-labelledby\");\n  const linked = labelledby ? document.getElementById(labelledby)?.textContent : \"\";\n  return bounded(aria || linked || element.getAttribute(\"title\") || element.textContent || \"\");\n}\n\nfunction selector(element: Element): string {\n  if (element.id) return `#${CSS.escape(element.id)}`;\n  const role = element.getAttribute(\"role\");\n  const name = element.getAttribute(\"name\");\n  if (role && name) return `[role=\"${CSS.escape(role)}\"][name=\"${CSS.escape(name)}\"]`;\n  if (name) return `${element.tagName.toLowerCase()}[name=\"${CSS.escape(name)}\"]`;\n  const tag = element.tagName.toLowerCase();\n  const parent = element.parentElement;\n  if (!parent) return tag;\n  const peers = [...parent.children].filter(node => node.tagName === element.tagName);\n  return `${tag}:nth-of-type(${peers.indexOf(element) + 1})`;\n}\n\nconst previewid = \"devthinktargetpreview\";\n\nfunction clearpreview(): void {\n  document.getElementById(previewid)?.remove();\n}\n\n/** Shows an ephemeral outline only; it neither mutates page data nor dispatches page events. */\nexport function previewtarget(targetselector: string, expectedorigin: string): { ok: boolean; summary: string } {\n  if (location.origin !== expectedorigin) return { ok: false, summary: \"Page origin changed before preview.\" };\n  clearpreview();\n  const target = document.querySelector(targetselector);\n  if (!(target instanceof HTMLElement)) return { ok: false, summary: \"Reviewed target is no longer available.\" };\n  const rect = target.getBoundingClientRect();\n  if (rect.width <= 0 || rect.height <= 0) return { ok: false, summary: \"Reviewed target is not currently visible.\" };\n  const overlay = document.createElement(\"div\");\n  overlay.id = previewid;\n  overlay.setAttribute(\"aria-hidden\", \"true\");\n  Object.assign(overlay.style, { position: \"fixed\", left: `${Math.max(0, rect.left - 3)}px`, top: `${Math.max(0, rect.top - 3)}px`, width: `${rect.width + 6}px`, height: `${rect.height + 6}px`, border: \"3px solid #2f80ed\", borderRadius: \"6px\", boxShadow: \"0 0 0 3px rgba(47,128,237,.28)\", pointerEvents: \"none\", zIndex: \"2147483647\", boxSizing: \"border-box\" });\n  document.documentElement.append(overlay);\n  window.setTimeout(clearpreview, 5000);\n  return { ok: true, summary: `Previewing ${label(target) || target.tagName.toLowerCase()} for five seconds.` };\n}\n\n/** Captures only semantic, bounded page context for a user-approved active tab. */\nexport function capturesnapshot(): observation {\n  const candidates = [...document.querySelectorAll(\"a[href], button, input, textarea, select, [role=button], [role=link]\")].slice(0, 80);\n  const interactive = candidates.map(element => ({ selector: selector(element), role: element.getAttribute(\"role\") || element.tagName.toLowerCase(), label: label(element) })).filter(item => item.label || item.role);\n  const forms = [...document.querySelectorAll(\"input, textarea, select\")].slice(0, 40).map(element => ({ label: label(element), type: element.getAttribute(\"type\") || element.tagName.toLowerCase(), name: element.getAttribute(\"name\") || \"\" }));\n  const text = bounded(document.body?.innerText || \"\", 2000);\n  return { url: location.href, title: bounded(document.title, 180), textpreview: text, textlength: document.body?.innerText.length ?? 0, forms, interactive, capturedat: Date.now() };\n}\n\n/** Performs one local action after the background policy gate and a fresh target check. */\nexport function performstep(step: toolstep, expectedorigin: string): { ok: boolean; summary: string } {\n  if (location.origin !== expectedorigin) return { ok: false, summary: \"Page origin changed before action.\" };\n  if (step.kind === \"observe\") return { ok: true, summary: \"Observation completed.\" };\n  if (step.kind === \"navigate\") {\n    if (!step.value || new URL(step.value).origin !== expectedorigin) return { ok: false, summary: \"Navigation target is outside the approved origin.\" };\n    location.assign(step.value);\n    return { ok: true, summary: \"Navigation request sent.\" };\n  }\n  if (!step.target) return { ok: false, summary: \"Action target is absent.\" };\n  const target = document.querySelector(step.target);\n  if (!(target instanceof HTMLElement)) return { ok: false, summary: \"Action target is no longer available.\" };\n  if (step.kind === \"focus\") { target.focus(); return { ok: true, summary: \"Target focused.\" }; }\n  if (step.kind === \"inspect\") return { ok: true, summary: `Target: ${label(target) || target.tagName.toLowerCase()}.` };\n  if (step.kind === \"click\") { target.click(); return { ok: true, summary: \"Reviewed click completed.\" }; }\n  if (step.kind === \"type\") {\n    if (!(target instanceof HTMLInputElement || target instanceof HTMLTextAreaElement)) return { ok: false, summary: \"Target cannot receive text.\" };\n    if (typeof step.value !== \"string\") return { ok: false, summary: \"Approved text is absent.\" };\n    target.focus();\n    target.value = step.value;\n    target.dispatchEvent(new Event(\"input\", { bubbles: true }));\n    target.dispatchEvent(new Event(\"change\", { bubbles: true }));\n    return { ok: true, summary: \"Approved text entered.\" };\n  }\n  return { ok: false, summary: \"Unsupported action.\" };\n}\n\nObject.assign(globalThis, { devthinkbridge: { capturesnapshot, previewtarget, performstep } });\n"],
-  "mappings": ";;;AAEA,WAAS,QAAQ,OAAe,SAAS,KAAa;AACpD,WAAO,MAAM,QAAQ,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;AAAA,EAC1D;AAEA,WAAS,MAAM,SAA0B;AACvC,UAAM,OAAO,QAAQ,aAAa,YAAY;AAC9C,UAAM,aAAa,QAAQ,aAAa,iBAAiB;AACzD,UAAM,SAAS,aAAa,SAAS,eAAe,UAAU,GAAG,cAAc;AAC/E,WAAO,QAAQ,QAAQ,UAAU,QAAQ,aAAa,OAAO,KAAK,QAAQ,eAAe,EAAE;AAAA,EAC7F;AAEA,WAAS,SAAS,SAA0B;AAC1C,QAAI,QAAQ,GAAI,QAAO,IAAI,IAAI,OAAO,QAAQ,EAAE,CAAC;AACjD,UAAM,OAAO,QAAQ,aAAa,MAAM;AACxC,UAAM,OAAO,QAAQ,aAAa,MAAM;AACxC,QAAI,QAAQ,KAAM,QAAO,UAAU,IAAI,OAAO,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC;AAC/E,QAAI,KAAM,QAAO,GAAG,QAAQ,QAAQ,YAAY,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC;AAC3E,UAAM,MAAM,QAAQ,QAAQ,YAAY;AACxC,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,QAAQ,CAAC,GAAG,OAAO,QAAQ,EAAE,OAAO,UAAQ,KAAK,YAAY,QAAQ,OAAO;AAClF,WAAO,GAAG,GAAG,gBAAgB,MAAM,QAAQ,OAAO,IAAI,CAAC;AAAA,EACzD;AAEA,MAAM,YAAY;AAElB,WAAS,eAAqB;AAC5B,aAAS,eAAe,SAAS,GAAG,OAAO;AAAA,EAC7C;AAGO,WAAS,cAAc,gBAAwB,gBAA0D;AAC9G,QAAI,SAAS,WAAW,eAAgB,QAAO,EAAE,IAAI,OAAO,SAAS,sCAAsC;AAC3G,iBAAa;AACb,UAAM,SAAS,SAAS,cAAc,cAAc;AACpD,QAAI,EAAE,kBAAkB,aAAc,QAAO,EAAE,IAAI,OAAO,SAAS,0CAA0C;AAC7G,UAAM,OAAO,OAAO,sBAAsB;AAC1C,QAAI,KAAK,SAAS,KAAK,KAAK,UAAU,EAAG,QAAO,EAAE,IAAI,OAAO,SAAS,4CAA4C;AAClH,UAAM,UAAU,SAAS,cAAc,KAAK;AAC5C,YAAQ,KAAK;AACb,YAAQ,aAAa,eAAe,MAAM;AAC1C,WAAO,OAAO,QAAQ,OAAO,EAAE,UAAU,SAAS,MAAM,GAAG,KAAK,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,MAAM,OAAO,GAAG,KAAK,QAAQ,CAAC,MAAM,QAAQ,GAAG,KAAK,SAAS,CAAC,MAAM,QAAQ,qBAAqB,cAAc,OAAO,WAAW,kCAAkC,eAAe,QAAQ,QAAQ,cAAc,WAAW,aAAa,CAAC;AACrW,aAAS,gBAAgB,OAAO,OAAO;AACvC,WAAO,WAAW,cAAc,GAAI;AACpC,WAAO,EAAE,IAAI,MAAM,SAAS,cAAc,MAAM,MAAM,KAAK,OAAO,QAAQ,YAAY,CAAC,qBAAqB;AAAA,EAC9G;AAGO,WAAS,kBAA+B;AAC7C,UAAM,aAAa,CAAC,GAAG,SAAS,iBAAiB,sEAAsE,CAAC,EAAE,MAAM,GAAG,EAAE;AACrI,UAAM,cAAc,WAAW,IAAI,cAAY,EAAE,UAAU,SAAS,OAAO,GAAG,MAAM,QAAQ,aAAa,MAAM,KAAK,QAAQ,QAAQ,YAAY,GAAG,OAAO,MAAM,OAAO,EAAE,EAAE,EAAE,OAAO,UAAQ,KAAK,SAAS,KAAK,IAAI;AACnN,UAAM,QAAQ,CAAC,GAAG,SAAS,iBAAiB,yBAAyB,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,cAAY,EAAE,OAAO,MAAM,OAAO,GAAG,MAAM,QAAQ,aAAa,MAAM,KAAK,QAAQ,QAAQ,YAAY,GAAG,MAAM,QAAQ,aAAa,MAAM,KAAK,GAAG,EAAE;AAC9O,UAAM,OAAO,QAAQ,SAAS,MAAM,aAAa,IAAI,GAAI;AACzD,WAAO,EAAE,KAAK,SAAS,MAAM,OAAO,QAAQ,SAAS,OAAO,GAAG,GAAG,aAAa,MAAM,YAAY,SAAS,MAAM,UAAU,UAAU,GAAG,OAAO,aAAa,YAAY,KAAK,IAAI,EAAE;AAAA,EACpL;AAGO,WAAS,YAAY,MAAgB,gBAA0D;AACpG,QAAI,SAAS,WAAW,eAAgB,QAAO,EAAE,IAAI,OAAO,SAAS,qCAAqC;AAC1G,QAAI,KAAK,SAAS,UAAW,QAAO,EAAE,IAAI,MAAM,SAAS,yBAAyB;AAClF,QAAI,KAAK,SAAS,YAAY;AAC5B,UAAI,CAAC,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,EAAE,WAAW,eAAgB,QAAO,EAAE,IAAI,OAAO,SAAS,oDAAoD;AACnJ,eAAS,OAAO,KAAK,KAAK;AAC1B,aAAO,EAAE,IAAI,MAAM,SAAS,2BAA2B;AAAA,IACzD;AACA,QAAI,CAAC,KAAK,OAAQ,QAAO,EAAE,IAAI,OAAO,SAAS,2BAA2B;AAC1E,UAAM,SAAS,SAAS,cAAc,KAAK,MAAM;AACjD,QAAI,EAAE,kBAAkB,aAAc,QAAO,EAAE,IAAI,OAAO,SAAS,wCAAwC;AAC3G,QAAI,KAAK,SAAS,SAAS;AAAE,aAAO,MAAM;AAAG,aAAO,EAAE,IAAI,MAAM,SAAS,kBAAkB;AAAA,IAAG;AAC9F,QAAI,KAAK,SAAS,UAAW,QAAO,EAAE,IAAI,MAAM,SAAS,WAAW,MAAM,MAAM,KAAK,OAAO,QAAQ,YAAY,CAAC,IAAI;AACrH,QAAI,KAAK,SAAS,SAAS;AAAE,aAAO,MAAM;AAAG,aAAO,EAAE,IAAI,MAAM,SAAS,4BAA4B;AAAA,IAAG;AACxG,QAAI,KAAK,SAAS,QAAQ;AACxB,UAAI,EAAE,kBAAkB,oBAAoB,kBAAkB,qBAAsB,QAAO,EAAE,IAAI,OAAO,SAAS,8BAA8B;AAC/I,UAAI,OAAO,KAAK,UAAU,SAAU,QAAO,EAAE,IAAI,OAAO,SAAS,2BAA2B;AAC5F,aAAO,MAAM;AACb,aAAO,QAAQ,KAAK;AACpB,aAAO,cAAc,IAAI,MAAM,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC;AAC1D,aAAO,cAAc,IAAI,MAAM,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AAC3D,aAAO,EAAE,IAAI,MAAM,SAAS,yBAAyB;AAAA,IACvD;AACA,WAAO,EAAE,IAAI,OAAO,SAAS,sBAAsB;AAAA,EACrD;AAEA,SAAO,OAAO,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,eAAe,YAAY,EAAE,CAAC;",
+  "sourcesContent": ["import type { observation, toolstep } from \"../types.js\";\n\nfunction bounded(value: string, length = 180): string {\n  return value.replace(/\\s+/g, \" \").trim().slice(0, length);\n}\n\nfunction label(element: Element): string {\n  const aria = element.getAttribute(\"aria-label\");\n  const labelledby = element.getAttribute(\"aria-labelledby\");\n  const linked = labelledby ? document.getElementById(labelledby)?.textContent : \"\";\n  return bounded(aria || linked || element.getAttribute(\"title\") || element.textContent || \"\");\n}\n\nfunction selector(element: Element): string {\n  if (element.id) return `#${CSS.escape(element.id)}`;\n  const role = element.getAttribute(\"role\");\n  const name = element.getAttribute(\"name\");\n  if (role && name) return `[role=\"${CSS.escape(role)}\"][name=\"${CSS.escape(name)}\"]`;\n  if (name) return `${element.tagName.toLowerCase()}[name=\"${CSS.escape(name)}\"]`;\n  const tag = element.tagName.toLowerCase();\n  const parent = element.parentElement;\n  if (!parent) return tag;\n  const peers = [...parent.children].filter(node => node.tagName === element.tagName);\n  return `${tag}:nth-of-type(${peers.indexOf(element) + 1})`;\n}\n\nconst previewid = \"devthinktargetpreview\";\n\nfunction clearpreview(): void {\n  document.getElementById(previewid)?.remove();\n}\n\n/** Shows an ephemeral outline only; it neither mutates page data nor dispatches page events. */\nexport function previewtarget(targetselector: string, expectedorigin: string): { ok: boolean; summary: string } {\n  if (location.origin !== expectedorigin) return { ok: false, summary: \"Page origin changed before preview.\" };\n  clearpreview();\n  const target = document.querySelector(targetselector);\n  if (!(target instanceof HTMLElement)) return { ok: false, summary: \"Reviewed target is no longer available.\" };\n  const rect = target.getBoundingClientRect();\n  if (rect.width <= 0 || rect.height <= 0) return { ok: false, summary: \"Reviewed target is not currently visible.\" };\n  const overlay = document.createElement(\"div\");\n  overlay.id = previewid;\n  overlay.setAttribute(\"aria-hidden\", \"true\");\n  Object.assign(overlay.style, { position: \"fixed\", left: `${Math.max(0, rect.left - 3)}px`, top: `${Math.max(0, rect.top - 3)}px`, width: `${rect.width + 6}px`, height: `${rect.height + 6}px`, border: \"3px solid #2f80ed\", borderRadius: \"6px\", boxShadow: \"0 0 0 3px rgba(47,128,237,.28)\", pointerEvents: \"none\", zIndex: \"2147483647\", boxSizing: \"border-box\" });\n  document.documentElement.append(overlay);\n  window.setTimeout(clearpreview, 5000);\n  return { ok: true, summary: `Previewing ${label(target) || target.tagName.toLowerCase()} for five seconds.` };\n}\n\n/** Captures only semantic, bounded page context for a user-approved active tab. */\nexport function capturesnapshot(): observation {\n  const candidates = [...document.querySelectorAll(\"a[href], button, input, textarea, select, [role=button], [role=link], [role=combobox], [role=option], details, summary\")].slice(0, 80);\n  const interactive = candidates.map(element => ({ selector: selector(element), role: element.getAttribute(\"role\") || element.tagName.toLowerCase(), label: label(element) })).filter(item => item.label || item.role);\n  const forms = [...document.querySelectorAll(\"input, textarea, select\")].slice(0, 40).map(element => ({\n    label: label(element),\n    type: element.getAttribute(\"type\") || element.tagName.toLowerCase(),\n    name: element.getAttribute(\"name\") || \"\",\n    ...(element instanceof HTMLSelectElement ? { options: [...element.options].slice(0, 12).map(option => bounded(option.textContent || option.value, 60)) } : {}),\n  }));\n  const text = bounded(document.body?.innerText || \"\", 2000);\n  return { url: location.href, title: bounded(document.title, 180), textpreview: text, textlength: document.body?.innerText.length ?? 0, forms, interactive, capturedat: Date.now() };\n}\n\n/** Extracts bounded, read-only structured content for a reviewed extraction step. */\nfunction extractcontent(targetselector: string | undefined): { ok: boolean; summary: string } {\n  if (!targetselector) {\n    const links = [...document.querySelectorAll(\"a[href]\")].slice(0, 25).map(element => {\n      const href = element instanceof HTMLAnchorElement ? element.getAttribute(\"href\") ?? \"\" : \"\";\n      return `${bounded(element.textContent || \"\")} (${bounded(href, 120)})`;\n    });\n    return { ok: true, summary: `Extracted ${links.length} bounded link entries: ${links.join(\"; \").slice(0, 180) || \"no links present\"}.` };\n  }\n  const target = document.querySelector(targetselector);\n  if (!target) return { ok: false, summary: \"Extraction target is no longer available.\" };\n  return { ok: true, summary: `Extracted: ${bounded(target.textContent || \"\", 180) || \"empty target\"}.` };\n}\n\n/** Scrolls one reviewed target into view without reading or changing other page state. */\nfunction scrolltarget(target: HTMLElement): { ok: boolean; summary: string } {\n  target.scrollIntoView({ block: \"center\", inline: \"nearest\", behavior: \"auto\" });\n  return { ok: true, summary: `Scrolled ${label(target) || target.tagName.toLowerCase()} into view.` };\n}\n\n/** Dispatches bounded hover events on one reviewed target. */\nfunction hovertarget(target: HTMLElement): { ok: boolean; summary: string } {\n  for (const type of [\"pointerover\", \"mouseover\", \"pointerenter\"] as const) {\n    target.dispatchEvent(new PointerEvent(type, { bubbles: type !== \"pointerenter\", cancelable: true, composed: true }));\n  }\n  target.dispatchEvent(new MouseEvent(\"mouseenter\", { bubbles: false, cancelable: true }));\n  return { ok: true, summary: `Hover events delivered to ${label(target) || target.tagName.toLowerCase()}.` };\n}\n\n/** Selects one reviewed existing option; values outside the declared options are refused. */\nfunction selectoption(target: HTMLElement, value: string): { ok: boolean; summary: string } {\n  if (!(target instanceof HTMLSelectElement)) return { ok: false, summary: \"Target is not a select element.\" };\n  const option = [...target.options].find(candidate => candidate.value === value || candidate.textContent?.trim() === value);\n  if (!option) return { ok: false, summary: \"Reviewed option is not part of the select element.\" };\n  target.value = option.value;\n  target.dispatchEvent(new Event(\"input\", { bubbles: true }));\n  target.dispatchEvent(new Event(\"change\", { bubbles: true }));\n  return { ok: true, summary: `Selected ${bounded(option.textContent || option.value, 60)}.` };\n}\n\n/** Performs one local action after the background policy gate and a fresh target check. */\nexport function performstep(step: toolstep, expectedorigin: string): { ok: boolean; summary: string } | Promise<{ ok: boolean; summary: string }> {\n  if (location.origin !== expectedorigin) return { ok: false, summary: \"Page origin changed before action.\" };\n  if (step.kind === \"observe\") return { ok: true, summary: \"Observation completed.\" };\n  if (step.kind === \"wait\") {\n    const requested = step.value ? Number.parseInt(step.value, 10) : 250;\n    const duration = Number.isFinite(requested) && requested > 0 ? Math.min(requested, 10_000) : 0;\n    return new Promise(resolve => window.setTimeout(() => resolve({ ok: true, summary: `Bounded wait of ${duration} milliseconds completed.` }), duration));\n  }\n  if (step.kind === \"extract\") return extractcontent(step.target);\n  if (step.kind === \"navigate\") {\n    if (!step.value || new URL(step.value).origin !== expectedorigin) return { ok: false, summary: \"Navigation target is outside the approved origin.\" };\n    location.assign(step.value);\n    return { ok: true, summary: \"Navigation request sent.\" };\n  }\n  if (!step.target) return { ok: false, summary: \"Action target is absent.\" };\n  const target = document.querySelector(step.target);\n  if (!(target instanceof HTMLElement)) return { ok: false, summary: \"Action target is no longer available.\" };\n  if (step.kind === \"focus\") { target.focus(); return { ok: true, summary: \"Target focused.\" }; }\n  if (step.kind === \"inspect\") return { ok: true, summary: `Target: ${label(target) || target.tagName.toLowerCase()}.` };\n  if (step.kind === \"click\") { target.click(); return { ok: true, summary: \"Reviewed click completed.\" }; }\n  if (step.kind === \"scroll\") return scrolltarget(target);\n  if (step.kind === \"hover\") return hovertarget(target);\n  if (step.kind === \"select\") return selectoption(target, step.value ?? \"\");\n  if (step.kind === \"type\") {\n    if (!(target instanceof HTMLInputElement || target instanceof HTMLTextAreaElement)) return { ok: false, summary: \"Target cannot receive text.\" };\n    if (typeof step.value !== \"string\") return { ok: false, summary: \"Approved text is absent.\" };\n    target.focus();\n    target.value = step.value;\n    target.dispatchEvent(new Event(\"input\", { bubbles: true }));\n    target.dispatchEvent(new Event(\"change\", { bubbles: true }));\n    return { ok: true, summary: \"Approved text entered.\" };\n  }\n  return { ok: false, summary: \"Unsupported action.\" };\n}\n\nObject.assign(globalThis, { devthinkbridge: { capturesnapshot, previewtarget, performstep } });\n"],
+  "mappings": ";;;AAEA,WAAS,QAAQ,OAAe,SAAS,KAAa;AACpD,WAAO,MAAM,QAAQ,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;AAAA,EAC1D;AAEA,WAAS,MAAM,SAA0B;AACvC,UAAM,OAAO,QAAQ,aAAa,YAAY;AAC9C,UAAM,aAAa,QAAQ,aAAa,iBAAiB;AACzD,UAAM,SAAS,aAAa,SAAS,eAAe,UAAU,GAAG,cAAc;AAC/E,WAAO,QAAQ,QAAQ,UAAU,QAAQ,aAAa,OAAO,KAAK,QAAQ,eAAe,EAAE;AAAA,EAC7F;AAEA,WAAS,SAAS,SAA0B;AAC1C,QAAI,QAAQ,GAAI,QAAO,IAAI,IAAI,OAAO,QAAQ,EAAE,CAAC;AACjD,UAAM,OAAO,QAAQ,aAAa,MAAM;AACxC,UAAM,OAAO,QAAQ,aAAa,MAAM;AACxC,QAAI,QAAQ,KAAM,QAAO,UAAU,IAAI,OAAO,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC;AAC/E,QAAI,KAAM,QAAO,GAAG,QAAQ,QAAQ,YAAY,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC;AAC3E,UAAM,MAAM,QAAQ,QAAQ,YAAY;AACxC,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,QAAQ,CAAC,GAAG,OAAO,QAAQ,EAAE,OAAO,UAAQ,KAAK,YAAY,QAAQ,OAAO;AAClF,WAAO,GAAG,GAAG,gBAAgB,MAAM,QAAQ,OAAO,IAAI,CAAC;AAAA,EACzD;AAEA,MAAM,YAAY;AAElB,WAAS,eAAqB;AAC5B,aAAS,eAAe,SAAS,GAAG,OAAO;AAAA,EAC7C;AAGO,WAAS,cAAc,gBAAwB,gBAA0D;AAC9G,QAAI,SAAS,WAAW,eAAgB,QAAO,EAAE,IAAI,OAAO,SAAS,sCAAsC;AAC3G,iBAAa;AACb,UAAM,SAAS,SAAS,cAAc,cAAc;AACpD,QAAI,EAAE,kBAAkB,aAAc,QAAO,EAAE,IAAI,OAAO,SAAS,0CAA0C;AAC7G,UAAM,OAAO,OAAO,sBAAsB;AAC1C,QAAI,KAAK,SAAS,KAAK,KAAK,UAAU,EAAG,QAAO,EAAE,IAAI,OAAO,SAAS,4CAA4C;AAClH,UAAM,UAAU,SAAS,cAAc,KAAK;AAC5C,YAAQ,KAAK;AACb,YAAQ,aAAa,eAAe,MAAM;AAC1C,WAAO,OAAO,QAAQ,OAAO,EAAE,UAAU,SAAS,MAAM,GAAG,KAAK,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,MAAM,OAAO,GAAG,KAAK,QAAQ,CAAC,MAAM,QAAQ,GAAG,KAAK,SAAS,CAAC,MAAM,QAAQ,qBAAqB,cAAc,OAAO,WAAW,kCAAkC,eAAe,QAAQ,QAAQ,cAAc,WAAW,aAAa,CAAC;AACrW,aAAS,gBAAgB,OAAO,OAAO;AACvC,WAAO,WAAW,cAAc,GAAI;AACpC,WAAO,EAAE,IAAI,MAAM,SAAS,cAAc,MAAM,MAAM,KAAK,OAAO,QAAQ,YAAY,CAAC,qBAAqB;AAAA,EAC9G;AAGO,WAAS,kBAA+B;AAC7C,UAAM,aAAa,CAAC,GAAG,SAAS,iBAAiB,wHAAwH,CAAC,EAAE,MAAM,GAAG,EAAE;AACvL,UAAM,cAAc,WAAW,IAAI,cAAY,EAAE,UAAU,SAAS,OAAO,GAAG,MAAM,QAAQ,aAAa,MAAM,KAAK,QAAQ,QAAQ,YAAY,GAAG,OAAO,MAAM,OAAO,EAAE,EAAE,EAAE,OAAO,UAAQ,KAAK,SAAS,KAAK,IAAI;AACnN,UAAM,QAAQ,CAAC,GAAG,SAAS,iBAAiB,yBAAyB,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,cAAY;AAAA,MACnG,OAAO,MAAM,OAAO;AAAA,MACpB,MAAM,QAAQ,aAAa,MAAM,KAAK,QAAQ,QAAQ,YAAY;AAAA,MAClE,MAAM,QAAQ,aAAa,MAAM,KAAK;AAAA,MACtC,GAAI,mBAAmB,oBAAoB,EAAE,SAAS,CAAC,GAAG,QAAQ,OAAO,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,YAAU,QAAQ,OAAO,eAAe,OAAO,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC;AAAA,IAC9J,EAAE;AACF,UAAM,OAAO,QAAQ,SAAS,MAAM,aAAa,IAAI,GAAI;AACzD,WAAO,EAAE,KAAK,SAAS,MAAM,OAAO,QAAQ,SAAS,OAAO,GAAG,GAAG,aAAa,MAAM,YAAY,SAAS,MAAM,UAAU,UAAU,GAAG,OAAO,aAAa,YAAY,KAAK,IAAI,EAAE;AAAA,EACpL;AAGA,WAAS,eAAe,gBAAsE;AAC5F,QAAI,CAAC,gBAAgB;AACnB,YAAM,QAAQ,CAAC,GAAG,SAAS,iBAAiB,SAAS,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,aAAW;AAClF,cAAM,OAAO,mBAAmB,oBAAoB,QAAQ,aAAa,MAAM,KAAK,KAAK;AACzF,eAAO,GAAG,QAAQ,QAAQ,eAAe,EAAE,CAAC,KAAK,QAAQ,MAAM,GAAG,CAAC;AAAA,MACrE,CAAC;AACD,aAAO,EAAE,IAAI,MAAM,SAAS,aAAa,MAAM,MAAM,0BAA0B,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,GAAG,KAAK,kBAAkB,IAAI;AAAA,IACzI;AACA,UAAM,SAAS,SAAS,cAAc,cAAc;AACpD,QAAI,CAAC,OAAQ,QAAO,EAAE,IAAI,OAAO,SAAS,4CAA4C;AACtF,WAAO,EAAE,IAAI,MAAM,SAAS,cAAc,QAAQ,OAAO,eAAe,IAAI,GAAG,KAAK,cAAc,IAAI;AAAA,EACxG;AAGA,WAAS,aAAa,QAAuD;AAC3E,WAAO,eAAe,EAAE,OAAO,UAAU,QAAQ,WAAW,UAAU,OAAO,CAAC;AAC9E,WAAO,EAAE,IAAI,MAAM,SAAS,YAAY,MAAM,MAAM,KAAK,OAAO,QAAQ,YAAY,CAAC,cAAc;AAAA,EACrG;AAGA,WAAS,YAAY,QAAuD;AAC1E,eAAW,QAAQ,CAAC,eAAe,aAAa,cAAc,GAAY;AACxE,aAAO,cAAc,IAAI,aAAa,MAAM,EAAE,SAAS,SAAS,gBAAgB,YAAY,MAAM,UAAU,KAAK,CAAC,CAAC;AAAA,IACrH;AACA,WAAO,cAAc,IAAI,WAAW,cAAc,EAAE,SAAS,OAAO,YAAY,KAAK,CAAC,CAAC;AACvF,WAAO,EAAE,IAAI,MAAM,SAAS,6BAA6B,MAAM,MAAM,KAAK,OAAO,QAAQ,YAAY,CAAC,IAAI;AAAA,EAC5G;AAGA,WAAS,aAAa,QAAqB,OAAiD;AAC1F,QAAI,EAAE,kBAAkB,mBAAoB,QAAO,EAAE,IAAI,OAAO,SAAS,kCAAkC;AAC3G,UAAM,SAAS,CAAC,GAAG,OAAO,OAAO,EAAE,KAAK,eAAa,UAAU,UAAU,SAAS,UAAU,aAAa,KAAK,MAAM,KAAK;AACzH,QAAI,CAAC,OAAQ,QAAO,EAAE,IAAI,OAAO,SAAS,qDAAqD;AAC/F,WAAO,QAAQ,OAAO;AACtB,WAAO,cAAc,IAAI,MAAM,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC;AAC1D,WAAO,cAAc,IAAI,MAAM,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AAC3D,WAAO,EAAE,IAAI,MAAM,SAAS,YAAY,QAAQ,OAAO,eAAe,OAAO,OAAO,EAAE,CAAC,IAAI;AAAA,EAC7F;AAGO,WAAS,YAAY,MAAgB,gBAAsG;AAChJ,QAAI,SAAS,WAAW,eAAgB,QAAO,EAAE,IAAI,OAAO,SAAS,qCAAqC;AAC1G,QAAI,KAAK,SAAS,UAAW,QAAO,EAAE,IAAI,MAAM,SAAS,yBAAyB;AAClF,QAAI,KAAK,SAAS,QAAQ;AACxB,YAAM,YAAY,KAAK,QAAQ,OAAO,SAAS,KAAK,OAAO,EAAE,IAAI;AACjE,YAAM,WAAW,OAAO,SAAS,SAAS,KAAK,YAAY,IAAI,KAAK,IAAI,WAAW,GAAM,IAAI;AAC7F,aAAO,IAAI,QAAQ,aAAW,OAAO,WAAW,MAAM,QAAQ,EAAE,IAAI,MAAM,SAAS,mBAAmB,QAAQ,2BAA2B,CAAC,GAAG,QAAQ,CAAC;AAAA,IACxJ;AACA,QAAI,KAAK,SAAS,UAAW,QAAO,eAAe,KAAK,MAAM;AAC9D,QAAI,KAAK,SAAS,YAAY;AAC5B,UAAI,CAAC,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,EAAE,WAAW,eAAgB,QAAO,EAAE,IAAI,OAAO,SAAS,oDAAoD;AACnJ,eAAS,OAAO,KAAK,KAAK;AAC1B,aAAO,EAAE,IAAI,MAAM,SAAS,2BAA2B;AAAA,IACzD;AACA,QAAI,CAAC,KAAK,OAAQ,QAAO,EAAE,IAAI,OAAO,SAAS,2BAA2B;AAC1E,UAAM,SAAS,SAAS,cAAc,KAAK,MAAM;AACjD,QAAI,EAAE,kBAAkB,aAAc,QAAO,EAAE,IAAI,OAAO,SAAS,wCAAwC;AAC3G,QAAI,KAAK,SAAS,SAAS;AAAE,aAAO,MAAM;AAAG,aAAO,EAAE,IAAI,MAAM,SAAS,kBAAkB;AAAA,IAAG;AAC9F,QAAI,KAAK,SAAS,UAAW,QAAO,EAAE,IAAI,MAAM,SAAS,WAAW,MAAM,MAAM,KAAK,OAAO,QAAQ,YAAY,CAAC,IAAI;AACrH,QAAI,KAAK,SAAS,SAAS;AAAE,aAAO,MAAM;AAAG,aAAO,EAAE,IAAI,MAAM,SAAS,4BAA4B;AAAA,IAAG;AACxG,QAAI,KAAK,SAAS,SAAU,QAAO,aAAa,MAAM;AACtD,QAAI,KAAK,SAAS,QAAS,QAAO,YAAY,MAAM;AACpD,QAAI,KAAK,SAAS,SAAU,QAAO,aAAa,QAAQ,KAAK,SAAS,EAAE;AACxE,QAAI,KAAK,SAAS,QAAQ;AACxB,UAAI,EAAE,kBAAkB,oBAAoB,kBAAkB,qBAAsB,QAAO,EAAE,IAAI,OAAO,SAAS,8BAA8B;AAC/I,UAAI,OAAO,KAAK,UAAU,SAAU,QAAO,EAAE,IAAI,OAAO,SAAS,2BAA2B;AAC5F,aAAO,MAAM;AACb,aAAO,QAAQ,KAAK;AACpB,aAAO,cAAc,IAAI,MAAM,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC;AAC1D,aAAO,cAAc,IAAI,MAAM,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AAC3D,aAAO,EAAE,IAAI,MAAM,SAAS,yBAAyB;AAAA,IACvD;AACA,WAAO,EAAE,IAAI,OAAO,SAAS,sBAAsB;AAAA,EACrD;AAEA,SAAO,OAAO,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,eAAe,YAAY,EAAE,CAAC;",
   "names": []
 }

package/extension/dist/popup.html

@@ -1,5 +1,5 @@
 <!doctype html>
 <html lang="en">
 <head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Devthink</title><link rel="stylesheet" href="style.css"></head>
-<body><main><header><p class="eyebrow">DEVTHINK 1.1.30</p><h1>Browser bridge</h1><p>Consent is required before page access or action.</p></header><label for="endpoint">Optional agent endpoint</label><input id="endpoint" type="url" inputmode="url" placeholder="https://agent.example/proposal" autocomplete="off"><button id="connect">Approve endpoint origin</button><div class="actions"><button id="session">Start active tab session</button><button id="openpanel" class="secondary">Review plans</button><button id="stop" class="danger">Stop</button></div><p id="status" role="status">Loading session state.</p></main><script type="module" src="popup.js"></script></body>
+<body><main><header><p class="eyebrow">DEVTHINK 1.1.31</p><h1>Browser bridge</h1><p>Consent is required before page access or action.</p></header><label for="endpoint">Optional agent endpoint</label><input id="endpoint" type="url" inputmode="url" placeholder="https://agent.example/proposal" autocomplete="off"><button id="connect">Approve endpoint origin</button><div class="actions"><button id="session">Start active tab session</button><button id="pause" class="secondary">Pause session</button><button id="openpanel" class="secondary">Review plans</button><button id="stop" class="danger">Stop</button></div><p id="status" role="status">Loading session state.</p></main><script type="module" src="popup.js"></script></body>
 </html>

package/extension/dist/popup.js

@@ -16,6 +16,7 @@ var endpointinput = document.querySelector("#endpoint");
 var statusnode = document.querySelector("#status");
 var connectbutton = document.querySelector("#connect");
 var sessionbutton = document.querySelector("#session");
+var pausebutton = document.querySelector("#pause");
 var stopbutton = document.querySelector("#stop");
 var openbutton = document.querySelector("#openpanel");
 function status(message, error = false) {
@@ -29,11 +30,19 @@ async function request(message) {
   if (!response.ok) throw new Error(response.error);
   return response.value;
 }
+function pauselabel(paused) {
+  return paused ? "Resume session" : "Pause session";
+}
 async function restore() {
   const context = await request({ kind: "context" });
   if (endpointinput && context.config) endpointinput.value = context.config.endpoint;
   const active = context.session && !context.session.stoppedat && context.session.expiresat > Date.now();
-  status(active ? "Session active. Review the plan in the side panel." : "No active browser session.");
+  if (pausebutton) {
+    pausebutton.disabled = !active;
+    pausebutton.textContent = pauselabel(Boolean(context.session?.pausedat));
+  }
+  if (active && context.session?.pausedat) status("Session paused. Reviewed actions are blocked until resume.");
+  else status(active ? "Session active. Review the plan in the side panel." : "No active browser session.");
 }
 connectbutton?.addEventListener("click", async () => {
   try {
@@ -50,6 +59,16 @@ sessionbutton?.addEventListener("click", async () => {
   try {
     await request({ kind: "startsession" });
     status("Session started for the active HTTPS tab.");
+    await restore();
+  } catch (error) {
+    status(error instanceof Error ? error.message : String(error), true);
+  }
+});
+pausebutton?.addEventListener("click", async () => {
+  try {
+    const context = await request({ kind: "context" });
+    await request({ kind: context.session?.pausedat ? "resumesession" : "pausesession" });
+    await restore();
   } catch (error) {
     status(error instanceof Error ? error.message : String(error), true);
   }
@@ -58,6 +77,7 @@ stopbutton?.addEventListener("click", async () => {
   try {
     await request({ kind: "stop" });
     status("Session stopped. No action can continue.");
+    await restore();
   } catch (error) {
     status(error instanceof Error ? error.message : String(error), true);
   }

package/extension/dist/popup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../policy.ts", "../popup.ts"],
-  "sourcesContent": ["import type { actionkind, agentplan, agentsession, endpointconfig, policyevaluation, toolstep } from \"./types.js\";\n\nconst sensitiveactions = new Set<actionkind>([\"click\", \"type\", \"navigate\"]);\nconst allowedactions = new Set<actionkind>([\"observe\", \"inspect\", \"focus\", \"click\", \"type\", \"navigate\"]);\n\n/** Normalizes a user supplied HTTPS endpoint without preserving a provider lock-in. */\nexport function normalizeendpoint(value: string): endpointconfig {\n  const endpoint = new URL(value.trim());\n  if (endpoint.protocol !== \"https:\") throw new Error(\"Devthink accepts HTTPS endpoints only.\");\n  if (endpoint.username || endpoint.password) throw new Error(\"Endpoint credentials are not allowed in the URL.\");\n  return { endpoint: endpoint.toString(), origin: endpoint.origin, configuredat: Date.now() };\n}\n\n/** Creates the exact optional host pattern requested from Chromium. */\nexport function hostpattern(origin: string): string {\n  const parsed = new URL(origin);\n  if (parsed.protocol !== \"https:\") throw new Error(\"Only HTTPS origins can be granted.\");\n  return `${parsed.origin}/*`;\n}\n\n/** Defines action risk from a fixed local allowlist. */\nexport function actionrisk(kind: actionkind): \"read\" | \"interaction\" | \"sensitive\" {\n  if (!allowedactions.has(kind)) throw new Error(\"Unsupported browser action.\");\n  if (sensitiveactions.has(kind)) return \"sensitive\";\n  return kind === \"focus\" ? \"interaction\" : \"read\";\n}\n\n/** Validates a single proposal against the active tab origin and local policy. */\nexport function validatestep(step: toolstep, origin: string): policyevaluation {\n  if (!allowedactions.has(step.kind)) return { allowed: false, reason: \"Unsupported action kind.\" };\n  if (!step.summary.trim()) return { allowed: false, reason: \"A human-readable action summary is required.\" };\n  if ((step.kind === \"click\" || step.kind === \"focus\" || step.kind === \"inspect\" || step.kind === \"type\") && !step.target?.trim()) return { allowed: false, reason: \"A page target is required.\" };\n  if (step.kind === \"navigate\") {\n    if (!step.value) return { allowed: false, reason: \"A navigation URL is required.\" };\n    try {\n      if (new URL(step.value).origin !== origin) return { allowed: false, reason: \"Navigation must remain within the approved origin.\" };\n    } catch {\n      return { allowed: false, reason: \"Navigation URL is invalid.\" };\n    }\n  }\n  return { allowed: true };\n}\n\n/** Applies the consent gate immediately before an action reaches the page bridge. */\nexport function canexecute(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: \"The action is outside the approved tab or origin.\" };\n  if (!input.plan || input.plan.state !== \"approved\") return { allowed: false, reason: \"The plan has not received explicit approval.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The approved plan has expired.\" };\n  return validatestep(input.step, input.origin);\n}\n\n/** Allows a non-mutating, temporary target preview during plan review. */\nexport function canpreview(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: \"The preview is outside the approved tab or origin.\" };\n  if (!input.plan || ![\"pending\", \"approved\"].includes(input.plan.state)) return { allowed: false, reason: \"Only a reviewed pending or approved plan can be previewed.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The reviewed plan has expired.\" };\n  if (![\"focus\", \"inspect\", \"click\", \"type\"].includes(input.step.kind)) return { allowed: false, reason: \"Only a target-based action can be previewed.\" };\n  return validatestep(input.step, input.origin);\n}\n", "import { hostpattern, normalizeendpoint } from \"../policy.js\";\n\nconst endpointinput = document.querySelector<HTMLInputElement>(\"#endpoint\");\nconst statusnode = document.querySelector<HTMLElement>(\"#status\");\nconst connectbutton = document.querySelector<HTMLButtonElement>(\"#connect\");\nconst sessionbutton = document.querySelector<HTMLButtonElement>(\"#session\");\nconst stopbutton = document.querySelector<HTMLButtonElement>(\"#stop\");\nconst openbutton = document.querySelector<HTMLButtonElement>(\"#openpanel\");\n\nfunction status(message: string, error = false): void { if (statusnode) { statusnode.textContent = message; statusnode.dataset.state = error ? \"error\" : \"ready\"; } }\nasync function request(message: unknown): Promise<unknown> { const response = await chrome.runtime.sendMessage(message) as { ok: boolean; value?: unknown; error?: string }; if (!response.ok) throw new Error(response.error); return response.value; }\n\nasync function restore(): Promise<void> {\n  const context = await request({ kind: \"context\" }) as { config?: { endpoint: string }; session?: { stoppedat?: number; expiresat: number } };\n  if (endpointinput && context.config) endpointinput.value = context.config.endpoint;\n  const active = context.session && !context.session.stoppedat && context.session.expiresat > Date.now();\n  status(active ? \"Session active. Review the plan in the side panel.\" : \"No active browser session.\");\n}\n\nconnectbutton?.addEventListener(\"click\", async () => {\n  try {\n    const config = normalizeendpoint(endpointinput?.value ?? \"\");\n    const granted = await chrome.permissions.request({ origins: [hostpattern(config.origin)] });\n    if (!granted) throw new Error(\"Origin permission was not granted.\");\n    await request({ kind: \"configure\", endpoint: config.endpoint });\n    status(`Endpoint approved for ${config.origin}.`);\n  } catch (error) { status(error instanceof Error ? error.message : String(error), true); }\n});\nsessionbutton?.addEventListener(\"click\", async () => { try { await request({ kind: \"startsession\" }); status(\"Session started for the active HTTPS tab.\"); } catch (error) { status(error instanceof Error ? error.message : String(error), true); } });\nstopbutton?.addEventListener(\"click\", async () => { try { await request({ kind: \"stop\" }); status(\"Session stopped. No action can continue.\"); } catch (error) { status(error instanceof Error ? error.message : String(error), true); } });\nopenbutton?.addEventListener(\"click\", () => chrome.sidePanel.open({ windowId: chrome.windows.WINDOW_ID_CURRENT }));\nrestore().catch(error => status(error instanceof Error ? error.message : String(error), true));\n"],
-  "mappings": ";AAMO,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,WAAW,IAAI,IAAI,MAAM,KAAK,CAAC;AACrC,MAAI,SAAS,aAAa,SAAU,OAAM,IAAI,MAAM,wCAAwC;AAC5F,MAAI,SAAS,YAAY,SAAS,SAAU,OAAM,IAAI,MAAM,kDAAkD;AAC9G,SAAO,EAAE,UAAU,SAAS,SAAS,GAAG,QAAQ,SAAS,QAAQ,cAAc,KAAK,IAAI,EAAE;AAC5F;AAGO,SAAS,YAAY,QAAwB;AAClD,QAAM,SAAS,IAAI,IAAI,MAAM;AAC7B,MAAI,OAAO,aAAa,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACtF,SAAO,GAAG,OAAO,MAAM;AACzB;;;AChBA,IAAM,gBAAgB,SAAS,cAAgC,WAAW;AAC1E,IAAM,aAAa,SAAS,cAA2B,SAAS;AAChE,IAAM,gBAAgB,SAAS,cAAiC,UAAU;AAC1E,IAAM,gBAAgB,SAAS,cAAiC,UAAU;AAC1E,IAAM,aAAa,SAAS,cAAiC,OAAO;AACpE,IAAM,aAAa,SAAS,cAAiC,YAAY;AAEzE,SAAS,OAAO,SAAiB,QAAQ,OAAa;AAAE,MAAI,YAAY;AAAE,eAAW,cAAc;AAAS,eAAW,QAAQ,QAAQ,QAAQ,UAAU;AAAA,EAAS;AAAE;AACpK,eAAe,QAAQ,SAAoC;AAAE,QAAM,WAAW,MAAM,OAAO,QAAQ,YAAY,OAAO;AAAuD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,SAAS,KAAK;AAAG,SAAO,SAAS;AAAO;AAEvP,eAAe,UAAyB;AACtC,QAAM,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,CAAC;AACjD,MAAI,iBAAiB,QAAQ,OAAQ,eAAc,QAAQ,QAAQ,OAAO;AAC1E,QAAM,SAAS,QAAQ,WAAW,CAAC,QAAQ,QAAQ,aAAa,QAAQ,QAAQ,YAAY,KAAK,IAAI;AACrG,SAAO,SAAS,uDAAuD,4BAA4B;AACrG;AAEA,eAAe,iBAAiB,SAAS,YAAY;AACnD,MAAI;AACF,UAAM,SAAS,kBAAkB,eAAe,SAAS,EAAE;AAC3D,UAAM,UAAU,MAAM,OAAO,YAAY,QAAQ,EAAE,SAAS,CAAC,YAAY,OAAO,MAAM,CAAC,EAAE,CAAC;AAC1F,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,oCAAoC;AAClE,UAAM,QAAQ,EAAE,MAAM,aAAa,UAAU,OAAO,SAAS,CAAC;AAC9D,WAAO,yBAAyB,OAAO,MAAM,GAAG;AAAA,EAClD,SAAS,OAAO;AAAE,WAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI;AAAA,EAAG;AAC1F,CAAC;AACD,eAAe,iBAAiB,SAAS,YAAY;AAAE,MAAI;AAAE,UAAM,QAAQ,EAAE,MAAM,eAAe,CAAC;AAAG,WAAO,2CAA2C;AAAA,EAAG,SAAS,OAAO;AAAE,WAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI;AAAA,EAAG;AAAE,CAAC;AACtP,YAAY,iBAAiB,SAAS,YAAY;AAAE,MAAI;AAAE,UAAM,QAAQ,EAAE,MAAM,OAAO,CAAC;AAAG,WAAO,0CAA0C;AAAA,EAAG,SAAS,OAAO;AAAE,WAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI;AAAA,EAAG;AAAE,CAAC;AAC1O,YAAY,iBAAiB,SAAS,MAAM,OAAO,UAAU,KAAK,EAAE,UAAU,OAAO,QAAQ,kBAAkB,CAAC,CAAC;AACjH,QAAQ,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC;",
+  "sourcesContent": ["import type { actionkind, agentplan, agentsession, endpointconfig, policyevaluation, toolstep } from \"./types.js\";\n\nconst sensitiveactions = new Set<actionkind>([\"click\", \"type\", \"navigate\", \"select\"]);\nconst interactionactions = new Set<actionkind>([\"focus\", \"scroll\", \"hover\"]);\nconst allowedactions = new Set<actionkind>([\"observe\", \"inspect\", \"focus\", \"click\", \"type\", \"navigate\", \"scroll\", \"select\", \"hover\", \"extract\", \"wait\"]);\nconst targetactions = new Set<actionkind>([\"inspect\", \"focus\", \"click\", \"type\", \"scroll\", \"select\", \"hover\"]);\n\n/** Normalizes a user supplied HTTPS endpoint without preserving a provider lock-in. */\nexport function normalizeendpoint(value: string): endpointconfig {\n  const endpoint = new URL(value.trim());\n  if (endpoint.protocol !== \"https:\") throw new Error(\"Devthink accepts HTTPS endpoints only.\");\n  if (endpoint.username || endpoint.password) throw new Error(\"Endpoint credentials are not allowed in the URL.\");\n  return { endpoint: endpoint.toString(), origin: endpoint.origin, configuredat: Date.now() };\n}\n\n/** Creates the exact optional host pattern requested from Chromium. */\nexport function hostpattern(origin: string): string {\n  const parsed = new URL(origin);\n  if (parsed.protocol !== \"https:\") throw new Error(\"Only HTTPS origins can be granted.\");\n  return `${parsed.origin}/*`;\n}\n\n/** Defines action risk from a fixed local allowlist. */\nexport function actionrisk(kind: actionkind): \"read\" | \"interaction\" | \"sensitive\" {\n  if (!allowedactions.has(kind)) throw new Error(\"Unsupported browser action.\");\n  if (sensitiveactions.has(kind)) return \"sensitive\";\n  return interactionactions.has(kind) ? \"interaction\" : \"read\";\n}\n\n/** Parses the bounded pause duration of a wait step. */\nexport function waitduration(step: toolstep): number {\n  const requested = step.value ? Number.parseInt(step.value, 10) : 250;\n  if (!Number.isFinite(requested) || requested < 0) throw new Error(\"Wait duration must be zero or a positive number of milliseconds.\");\n  return Math.min(requested, 10_000);\n}\n\n/** Validates a single proposal against the active tab origin and local policy. */\nexport function validatestep(step: toolstep, origin: string): policyevaluation {\n  if (!allowedactions.has(step.kind)) return { allowed: false, reason: \"Unsupported action kind.\" };\n  if (!step.summary.trim()) return { allowed: false, reason: \"A human-readable action summary is required.\" };\n  if (targetactions.has(step.kind) && !step.target?.trim()) return { allowed: false, reason: \"A page target is required.\" };\n  if (step.kind === \"select\" && !step.value?.trim()) return { allowed: false, reason: \"A reviewed option value is required.\" };\n  if (step.kind === \"wait\") {\n    try { waitduration(step); } catch { return { allowed: false, reason: \"Wait duration must be zero or a positive number of milliseconds.\" }; }\n  }\n  if (step.kind === \"navigate\") {\n    if (!step.value) return { allowed: false, reason: \"A navigation URL is required.\" };\n    try {\n      if (new URL(step.value).origin !== origin) return { allowed: false, reason: \"Navigation must remain within the approved origin.\" };\n    } catch {\n      return { allowed: false, reason: \"Navigation URL is invalid.\" };\n    }\n  }\n  return { allowed: true };\n}\n\n/** Shared session gate: a live, unpaused session that still matches the active tab. */\nfunction sessiongate(input: { session: agentsession | undefined; tabid: number; origin: string; now: number; action: string }): policyevaluation {\n  if (!input.session || input.session.stoppedat) return { allowed: false, reason: \"No active browser session exists.\" };\n  if (input.session.expiresat <= input.now) return { allowed: false, reason: \"The browser session has expired.\" };\n  if (input.session.pausedat) return { allowed: false, reason: `The browser session is paused and cannot ${input.action}.` };\n  if (input.session.tabid !== input.tabid || input.session.origin !== input.origin) return { allowed: false, reason: `The ${input.action} is outside the approved tab or origin.` };\n  return { allowed: true };\n}\n\n/** Applies the consent gate immediately before an action reaches the page bridge. */\nexport function canexecute(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: \"execute an action\" });\n  if (!gate.allowed) return gate;\n  if (!input.plan || input.plan.state !== \"approved\") return { allowed: false, reason: \"The plan has not received explicit approval.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The approved plan has expired.\" };\n  return validatestep(input.step, input.origin);\n}\n\n/** Allows a non-mutating, temporary target preview during plan review. */\nexport function canpreview(input: { session: agentsession | undefined; plan: agentplan | undefined; step: toolstep; tabid: number; origin: string; now?: number }): policyevaluation {\n  const now = input.now ?? Date.now();\n  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: \"preview a target\" });\n  if (!gate.allowed) return gate;\n  if (!input.plan || ![\"pending\", \"approved\"].includes(input.plan.state)) return { allowed: false, reason: \"Only a reviewed pending or approved plan can be previewed.\" };\n  if (input.plan.expiresat <= now) return { allowed: false, reason: \"The reviewed plan has expired.\" };\n  if (![\"focus\", \"inspect\", \"click\", \"type\", \"scroll\", \"select\", \"hover\"].includes(input.step.kind)) return { allowed: false, reason: \"Only a target-based action can be previewed.\" };\n  return validatestep(input.step, input.origin);\n}\n", "import { hostpattern, normalizeendpoint } from \"../policy.js\";\n\nconst endpointinput = document.querySelector<HTMLInputElement>(\"#endpoint\");\nconst statusnode = document.querySelector<HTMLElement>(\"#status\");\nconst connectbutton = document.querySelector<HTMLButtonElement>(\"#connect\");\nconst sessionbutton = document.querySelector<HTMLButtonElement>(\"#session\");\nconst pausebutton = document.querySelector<HTMLButtonElement>(\"#pause\");\nconst stopbutton = document.querySelector<HTMLButtonElement>(\"#stop\");\nconst openbutton = document.querySelector<HTMLButtonElement>(\"#openpanel\");\n\nfunction status(message: string, error = false): void { if (statusnode) { statusnode.textContent = message; statusnode.dataset.state = error ? \"error\" : \"ready\"; } }\nasync function request(message: unknown): Promise<unknown> { const response = await chrome.runtime.sendMessage(message) as { ok: boolean; value?: unknown; error?: string }; if (!response.ok) throw new Error(response.error); return response.value; }\n\nfunction pauselabel(paused: boolean): string { return paused ? \"Resume session\" : \"Pause session\"; }\n\nasync function restore(): Promise<void> {\n  const context = await request({ kind: \"context\" }) as { config?: { endpoint: string }; session?: { stoppedat?: number; pausedat?: number; expiresat: number } };\n  if (endpointinput && context.config) endpointinput.value = context.config.endpoint;\n  const active = context.session && !context.session.stoppedat && context.session.expiresat > Date.now();\n  if (pausebutton) { pausebutton.disabled = !active; pausebutton.textContent = pauselabel(Boolean(context.session?.pausedat)); }\n  if (active && context.session?.pausedat) status(\"Session paused. Reviewed actions are blocked until resume.\");\n  else status(active ? \"Session active. Review the plan in the side panel.\" : \"No active browser session.\");\n}\n\nconnectbutton?.addEventListener(\"click\", async () => {\n  try {\n    const config = normalizeendpoint(endpointinput?.value ?? \"\");\n    const granted = await chrome.permissions.request({ origins: [hostpattern(config.origin)] });\n    if (!granted) throw new Error(\"Origin permission was not granted.\");\n    await request({ kind: \"configure\", endpoint: config.endpoint });\n    status(`Endpoint approved for ${config.origin}.`);\n  } catch (error) { status(error instanceof Error ? error.message : String(error), true); }\n});\nsessionbutton?.addEventListener(\"click\", async () => { try { await request({ kind: \"startsession\" }); status(\"Session started for the active HTTPS tab.\"); await restore(); } catch (error) { status(error instanceof Error ? error.message : String(error), true); } });\npausebutton?.addEventListener(\"click\", async () => { try { const context = await request({ kind: \"context\" }) as { session?: { pausedat?: number } }; await request({ kind: context.session?.pausedat ? \"resumesession\" : \"pausesession\" }); await restore(); } catch (error) { status(error instanceof Error ? error.message : String(error), true); } });\nstopbutton?.addEventListener(\"click\", async () => { try { await request({ kind: \"stop\" }); status(\"Session stopped. No action can continue.\"); await restore(); } catch (error) { status(error instanceof Error ? error.message : String(error), true); } });\nopenbutton?.addEventListener(\"click\", () => chrome.sidePanel.open({ windowId: chrome.windows.WINDOW_ID_CURRENT }));\nrestore().catch(error => status(error instanceof Error ? error.message : String(error), true));\n"],
+  "mappings": ";AAQO,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,WAAW,IAAI,IAAI,MAAM,KAAK,CAAC;AACrC,MAAI,SAAS,aAAa,SAAU,OAAM,IAAI,MAAM,wCAAwC;AAC5F,MAAI,SAAS,YAAY,SAAS,SAAU,OAAM,IAAI,MAAM,kDAAkD;AAC9G,SAAO,EAAE,UAAU,SAAS,SAAS,GAAG,QAAQ,SAAS,QAAQ,cAAc,KAAK,IAAI,EAAE;AAC5F;AAGO,SAAS,YAAY,QAAwB;AAClD,QAAM,SAAS,IAAI,IAAI,MAAM;AAC7B,MAAI,OAAO,aAAa,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACtF,SAAO,GAAG,OAAO,MAAM;AACzB;;;AClBA,IAAM,gBAAgB,SAAS,cAAgC,WAAW;AAC1E,IAAM,aAAa,SAAS,cAA2B,SAAS;AAChE,IAAM,gBAAgB,SAAS,cAAiC,UAAU;AAC1E,IAAM,gBAAgB,SAAS,cAAiC,UAAU;AAC1E,IAAM,cAAc,SAAS,cAAiC,QAAQ;AACtE,IAAM,aAAa,SAAS,cAAiC,OAAO;AACpE,IAAM,aAAa,SAAS,cAAiC,YAAY;AAEzE,SAAS,OAAO,SAAiB,QAAQ,OAAa;AAAE,MAAI,YAAY;AAAE,eAAW,cAAc;AAAS,eAAW,QAAQ,QAAQ,QAAQ,UAAU;AAAA,EAAS;AAAE;AACpK,eAAe,QAAQ,SAAoC;AAAE,QAAM,WAAW,MAAM,OAAO,QAAQ,YAAY,OAAO;AAAuD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,SAAS,KAAK;AAAG,SAAO,SAAS;AAAO;AAEvP,SAAS,WAAW,QAAyB;AAAE,SAAO,SAAS,mBAAmB;AAAiB;AAEnG,eAAe,UAAyB;AACtC,QAAM,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,CAAC;AACjD,MAAI,iBAAiB,QAAQ,OAAQ,eAAc,QAAQ,QAAQ,OAAO;AAC1E,QAAM,SAAS,QAAQ,WAAW,CAAC,QAAQ,QAAQ,aAAa,QAAQ,QAAQ,YAAY,KAAK,IAAI;AACrG,MAAI,aAAa;AAAE,gBAAY,WAAW,CAAC;AAAQ,gBAAY,cAAc,WAAW,QAAQ,QAAQ,SAAS,QAAQ,CAAC;AAAA,EAAG;AAC7H,MAAI,UAAU,QAAQ,SAAS,SAAU,QAAO,4DAA4D;AAAA,MACvG,QAAO,SAAS,uDAAuD,4BAA4B;AAC1G;AAEA,eAAe,iBAAiB,SAAS,YAAY;AACnD,MAAI;AACF,UAAM,SAAS,kBAAkB,eAAe,SAAS,EAAE;AAC3D,UAAM,UAAU,MAAM,OAAO,YAAY,QAAQ,EAAE,SAAS,CAAC,YAAY,OAAO,MAAM,CAAC,EAAE,CAAC;AAC1F,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,oCAAoC;AAClE,UAAM,QAAQ,EAAE,MAAM,aAAa,UAAU,OAAO,SAAS,CAAC;AAC9D,WAAO,yBAAyB,OAAO,MAAM,GAAG;AAAA,EAClD,SAAS,OAAO;AAAE,WAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI;AAAA,EAAG;AAC1F,CAAC;AACD,eAAe,iBAAiB,SAAS,YAAY;AAAE,MAAI;AAAE,UAAM,QAAQ,EAAE,MAAM,eAAe,CAAC;AAAG,WAAO,2CAA2C;AAAG,UAAM,QAAQ;AAAA,EAAG,SAAS,OAAO;AAAE,WAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI;AAAA,EAAG;AAAE,CAAC;AACvQ,aAAa,iBAAiB,SAAS,YAAY;AAAE,MAAI;AAAE,UAAM,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,CAAC;AAA0C,UAAM,QAAQ,EAAE,MAAM,QAAQ,SAAS,WAAW,kBAAkB,eAAe,CAAC;AAAG,UAAM,QAAQ;AAAA,EAAG,SAAS,OAAO;AAAE,WAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI;AAAA,EAAG;AAAE,CAAC;AACzV,YAAY,iBAAiB,SAAS,YAAY;AAAE,MAAI;AAAE,UAAM,QAAQ,EAAE,MAAM,OAAO,CAAC;AAAG,WAAO,0CAA0C;AAAG,UAAM,QAAQ;AAAA,EAAG,SAAS,OAAO;AAAE,WAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI;AAAA,EAAG;AAAE,CAAC;AAC3P,YAAY,iBAAiB,SAAS,MAAM,OAAO,UAAU,KAAK,EAAE,UAAU,OAAO,QAAQ,kBAAkB,CAAC,CAAC;AACjH,QAAQ,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC;",
   "names": []
 }

package/extension/dist/sidepanel.js

@@ -26,7 +26,8 @@ function button(label, action, disabled = false) {
   element.addEventListener("click", () => action().catch((error) => status(error instanceof Error ? error.message : String(error), true)));
   return element;
 }
-function renderplan(plan) {
+var previewkinds = ["focus", "inspect", "click", "type", "scroll", "select", "hover"];
+function renderplan(plan, progress) {
   if (!planroot) return;
   planroot.replaceChildren();
   if (!plan) {
@@ -36,15 +37,17 @@ function renderplan(plan) {
   const title = document.createElement("h2");
   title.textContent = `${plan.state}: ${plan.objective}`;
   planroot.append(title);
+  const completed = progress?.planid === plan.id ? progress.completedsteps : [];
   const list = document.createElement("ol");
   for (const step of plan.steps) {
     const item = document.createElement("li");
-    item.textContent = `${step.risk} \u2014 ${step.summary}`;
-    if (step.target && ["focus", "inspect", "click", "type"].includes(step.kind) && ["pending", "approved"].includes(plan.state)) item.append(" ", button("Preview current target", async () => {
+    const done = completed.includes(step.id);
+    item.textContent = `${done ? "\u2713" : step.risk} \u2014 ${step.summary}`;
+    if (!done && step.target && previewkinds.includes(step.kind) && ["pending", "approved"].includes(plan.state)) item.append(" ", button("Preview current target", async () => {
       const result = await request({ kind: "preview", stepid: step.id });
       status(result.summary);
     }));
-    if (plan.state === "approved") item.append(" ", button("Run this reviewed step", async () => {
+    if (!done && plan.state === "approved") item.append(" ", button("Run this reviewed step", async () => {
       const result = await request({ kind: "execute", stepid: step.id });
       status(result.summary);
       await refresh();
@@ -61,6 +64,11 @@ function renderplan(plan) {
       await refresh();
     }));
   }
+  if (plan.state === "completed" && plan.completedat) {
+    const note = document.createElement("p");
+    note.textContent = "Every reviewed step has executed and the plan is closed.";
+    planroot.append(note);
+  }
 }
 function renderaudit(events) {
   if (!auditroot) return;
@@ -87,10 +95,11 @@ function renderdiagnostic(report) {
 }
 async function refresh() {
   const context = await request({ kind: "context" });
-  renderplan(context.plan);
+  renderplan(context.plan, context.progress);
   renderdiagnostic(context.diagnostic);
   renderaudit(context.audit);
-  status(context.session ? "Active session is visible. The extension is waiting for review." : "No active browser session.");
+  if (context.session?.pausedat) status("Session paused. Reviewed actions are blocked until resume.");
+  else status(context.session ? "Active session is visible. The extension is waiting for review." : "No active browser session.");
 }
 async function create(kind) {
   await request({ kind, objective: objective?.value ?? "" });

package/extension/dist/sidepanel.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../sidepanel.ts"],
-  "sourcesContent": ["import type { agentplan, auditevent, diagnosticreport } from \"../types.js\";\n\nconst objective = document.querySelector<HTMLTextAreaElement>(\"#objective\");\nconst localbutton = document.querySelector<HTMLButtonElement>(\"#localplan\");\nconst remotebutton = document.querySelector<HTMLButtonElement>(\"#remoteplan\");\nconst diagnosticbutton = document.querySelector<HTMLButtonElement>(\"#diagnostic\");\nconst planroot = document.querySelector<HTMLElement>(\"#plan\");\nconst auditroot = document.querySelector<HTMLElement>(\"#audit\");\nconst diagnosticroot = document.querySelector<HTMLElement>(\"#diagnostics\");\nconst statusnode = document.querySelector<HTMLElement>(\"#status\");\n\nfunction status(message: string, error = false): void { if (statusnode) { statusnode.textContent = message; statusnode.dataset.state = error ? \"error\" : \"ready\"; } }\nasync function request(message: unknown): Promise<unknown> { const response = await chrome.runtime.sendMessage(message) as { ok: boolean; value?: unknown; error?: string }; if (!response.ok) throw new Error(response.error); return response.value; }\nfunction button(label: string, action: () => Promise<void>, disabled = false): HTMLButtonElement { const element = document.createElement(\"button\"); element.type = \"button\"; element.textContent = label; element.disabled = disabled; element.addEventListener(\"click\", () => action().catch(error => status(error instanceof Error ? error.message : String(error), true))); return element; }\nfunction renderplan(plan?: agentplan): void {\n  if (!planroot) return;\n  planroot.replaceChildren();\n  if (!plan) { planroot.textContent = \"Start a session, then request a local or endpoint plan. No task runs before review.\"; return; }\n  const title = document.createElement(\"h2\"); title.textContent = `${plan.state}: ${plan.objective}`; planroot.append(title);\n  const list = document.createElement(\"ol\");\n  for (const step of plan.steps) {\n    const item = document.createElement(\"li\");\n    item.textContent = `${step.risk} \u2014 ${step.summary}`;\n    if (step.target && [\"focus\", \"inspect\", \"click\", \"type\"].includes(step.kind) && [\"pending\", \"approved\"].includes(plan.state)) item.append(\" \", button(\"Preview current target\", async () => { const result = await request({ kind: \"preview\", stepid: step.id }) as { summary: string }; status(result.summary); }));\n    if (plan.state === \"approved\") item.append(\" \", button(\"Run this reviewed step\", async () => { const result = await request({ kind: \"execute\", stepid: step.id }) as { summary: string }; status(result.summary); await refresh(); }));\n    list.append(item);\n  }\n  planroot.append(list);\n  if (plan.state === \"pending\") { planroot.append(button(\"Approve reviewed plan\", async () => { await request({ kind: \"approve\" }); await refresh(); }), button(\"Reject plan\", async () => { await request({ kind: \"reject\" }); await refresh(); })); }\n}\nfunction renderaudit(events: auditevent[]): void { if (!auditroot) return; auditroot.replaceChildren(); for (const event of events.slice(0, 12)) { const item = document.createElement(\"li\"); item.textContent = `${new Date(event.at).toLocaleTimeString()} \u00B7 ${event.kind} \u00B7 ${event.summary}`; auditroot.append(item); } }\nfunction renderdiagnostic(report?: diagnosticreport): void { if (!diagnosticroot) return; diagnosticroot.replaceChildren(); if (!report) { diagnosticroot.textContent = \"Run a local diagnostic after starting a session to record bridge and page-shape health.\"; return; } const values = [`origin: ${report.origin}`, `title: ${report.title || \"untitled\"}`, `interactive elements: ${report.interactivecount}`, `forms: ${report.formcount}`, `page text length: ${report.textlength}`, `bridge available: ${report.bridgeavailable ? \"yes\" : \"no\"}`]; for (const value of values) { const item = document.createElement(\"li\"); item.textContent = value; diagnosticroot.append(item); } }\nasync function refresh(): Promise<void> { const context = await request({ kind: \"context\" }) as { plan?: agentplan; diagnostic?: diagnosticreport; audit: auditevent[]; session?: { id: string } }; renderplan(context.plan); renderdiagnostic(context.diagnostic); renderaudit(context.audit); status(context.session ? \"Active session is visible. The extension is waiting for review.\" : \"No active browser session.\"); }\nasync function create(kind: \"proposelocal\" | \"proposeremote\"): Promise<void> { await request({ kind, objective: objective?.value ?? \"\" }); await refresh(); }\nlocalbutton?.addEventListener(\"click\", () => create(\"proposelocal\").catch(error => status(error instanceof Error ? error.message : String(error), true)));\nremotebutton?.addEventListener(\"click\", () => create(\"proposeremote\").catch(error => status(error instanceof Error ? error.message : String(error), true)));\ndiagnosticbutton?.addEventListener(\"click\", () => request({ kind: \"diagnostic\" }).then(() => refresh()).catch(error => status(error instanceof Error ? error.message : String(error), true)));\nrefresh().catch(error => status(error instanceof Error ? error.message : String(error), true));\n"],
-  "mappings": ";AAEA,IAAM,YAAY,SAAS,cAAmC,YAAY;AAC1E,IAAM,cAAc,SAAS,cAAiC,YAAY;AAC1E,IAAM,eAAe,SAAS,cAAiC,aAAa;AAC5E,IAAM,mBAAmB,SAAS,cAAiC,aAAa;AAChF,IAAM,WAAW,SAAS,cAA2B,OAAO;AAC5D,IAAM,YAAY,SAAS,cAA2B,QAAQ;AAC9D,IAAM,iBAAiB,SAAS,cAA2B,cAAc;AACzE,IAAM,aAAa,SAAS,cAA2B,SAAS;AAEhE,SAAS,OAAO,SAAiB,QAAQ,OAAa;AAAE,MAAI,YAAY;AAAE,eAAW,cAAc;AAAS,eAAW,QAAQ,QAAQ,QAAQ,UAAU;AAAA,EAAS;AAAE;AACpK,eAAe,QAAQ,SAAoC;AAAE,QAAM,WAAW,MAAM,OAAO,QAAQ,YAAY,OAAO;AAAuD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,SAAS,KAAK;AAAG,SAAO,SAAS;AAAO;AACvP,SAAS,OAAO,OAAe,QAA6B,WAAW,OAA0B;AAAE,QAAM,UAAU,SAAS,cAAc,QAAQ;AAAG,UAAQ,OAAO;AAAU,UAAQ,cAAc;AAAO,UAAQ,WAAW;AAAU,UAAQ,iBAAiB,SAAS,MAAM,OAAO,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AAAG,SAAO;AAAS;AAChY,SAAS,WAAW,MAAwB;AAC1C,MAAI,CAAC,SAAU;AACf,WAAS,gBAAgB;AACzB,MAAI,CAAC,MAAM;AAAE,aAAS,cAAc;AAAuF;AAAA,EAAQ;AACnI,QAAM,QAAQ,SAAS,cAAc,IAAI;AAAG,QAAM,cAAc,GAAG,KAAK,KAAK,KAAK,KAAK,SAAS;AAAI,WAAS,OAAO,KAAK;AACzH,QAAM,OAAO,SAAS,cAAc,IAAI;AACxC,aAAW,QAAQ,KAAK,OAAO;AAC7B,UAAM,OAAO,SAAS,cAAc,IAAI;AACxC,SAAK,cAAc,GAAG,KAAK,IAAI,WAAM,KAAK,OAAO;AACjD,QAAI,KAAK,UAAU,CAAC,SAAS,WAAW,SAAS,MAAM,EAAE,SAAS,KAAK,IAAI,KAAK,CAAC,WAAW,UAAU,EAAE,SAAS,KAAK,KAAK,EAAG,MAAK,OAAO,KAAK,OAAO,0BAA0B,YAAY;AAAE,YAAM,SAAS,MAAM,QAAQ,EAAE,MAAM,WAAW,QAAQ,KAAK,GAAG,CAAC;AAA0B,aAAO,OAAO,OAAO;AAAA,IAAG,CAAC,CAAC;AACnT,QAAI,KAAK,UAAU,WAAY,MAAK,OAAO,KAAK,OAAO,0BAA0B,YAAY;AAAE,YAAM,SAAS,MAAM,QAAQ,EAAE,MAAM,WAAW,QAAQ,KAAK,GAAG,CAAC;AAA0B,aAAO,OAAO,OAAO;AAAG,YAAM,QAAQ;AAAA,IAAG,CAAC,CAAC;AACrO,SAAK,OAAO,IAAI;AAAA,EAClB;AACA,WAAS,OAAO,IAAI;AACpB,MAAI,KAAK,UAAU,WAAW;AAAE,aAAS,OAAO,OAAO,yBAAyB,YAAY;AAAE,YAAM,QAAQ,EAAE,MAAM,UAAU,CAAC;AAAG,YAAM,QAAQ;AAAA,IAAG,CAAC,GAAG,OAAO,eAAe,YAAY;AAAE,YAAM,QAAQ,EAAE,MAAM,SAAS,CAAC;AAAG,YAAM,QAAQ;AAAA,IAAG,CAAC,CAAC;AAAA,EAAG;AACtP;AACA,SAAS,YAAY,QAA4B;AAAE,MAAI,CAAC,UAAW;AAAQ,YAAU,gBAAgB;AAAG,aAAW,SAAS,OAAO,MAAM,GAAG,EAAE,GAAG;AAAE,UAAM,OAAO,SAAS,cAAc,IAAI;AAAG,SAAK,cAAc,GAAG,IAAI,KAAK,MAAM,EAAE,EAAE,mBAAmB,CAAC,SAAM,MAAM,IAAI,SAAM,MAAM,OAAO;AAAI,cAAU,OAAO,IAAI;AAAA,EAAG;AAAE;AAC5T,SAAS,iBAAiB,QAAiC;AAAE,MAAI,CAAC,eAAgB;AAAQ,iBAAe,gBAAgB;AAAG,MAAI,CAAC,QAAQ;AAAE,mBAAe,cAAc;AAA2F;AAAA,EAAQ;AAAE,QAAM,SAAS,CAAC,WAAW,OAAO,MAAM,IAAI,UAAU,OAAO,SAAS,UAAU,IAAI,yBAAyB,OAAO,gBAAgB,IAAI,UAAU,OAAO,SAAS,IAAI,qBAAqB,OAAO,UAAU,IAAI,qBAAqB,OAAO,kBAAkB,QAAQ,IAAI,EAAE;AAAG,aAAW,SAAS,QAAQ;AAAE,UAAM,OAAO,SAAS,cAAc,IAAI;AAAG,SAAK,cAAc;AAAO,mBAAe,OAAO,IAAI;AAAA,EAAG;AAAE;AAC9pB,eAAe,UAAyB;AAAE,QAAM,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,CAAC;AAAyG,aAAW,QAAQ,IAAI;AAAG,mBAAiB,QAAQ,UAAU;AAAG,cAAY,QAAQ,KAAK;AAAG,SAAO,QAAQ,UAAU,oEAAoE,4BAA4B;AAAG;AAC5Z,eAAe,OAAO,MAAuD;AAAE,QAAM,QAAQ,EAAE,MAAM,WAAW,WAAW,SAAS,GAAG,CAAC;AAAG,QAAM,QAAQ;AAAG;AAC5J,aAAa,iBAAiB,SAAS,MAAM,OAAO,cAAc,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AACxJ,cAAc,iBAAiB,SAAS,MAAM,OAAO,eAAe,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AAC1J,kBAAkB,iBAAiB,SAAS,MAAM,QAAQ,EAAE,MAAM,aAAa,CAAC,EAAE,KAAK,MAAM,QAAQ,CAAC,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AAC5L,QAAQ,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC;",
+  "sourcesContent": ["import type { agentplan, auditevent, diagnosticreport, planprogress } from \"../types.js\";\n\nconst objective = document.querySelector<HTMLTextAreaElement>(\"#objective\");\nconst localbutton = document.querySelector<HTMLButtonElement>(\"#localplan\");\nconst remotebutton = document.querySelector<HTMLButtonElement>(\"#remoteplan\");\nconst diagnosticbutton = document.querySelector<HTMLButtonElement>(\"#diagnostic\");\nconst planroot = document.querySelector<HTMLElement>(\"#plan\");\nconst auditroot = document.querySelector<HTMLElement>(\"#audit\");\nconst diagnosticroot = document.querySelector<HTMLElement>(\"#diagnostics\");\nconst statusnode = document.querySelector<HTMLElement>(\"#status\");\n\nfunction status(message: string, error = false): void { if (statusnode) { statusnode.textContent = message; statusnode.dataset.state = error ? \"error\" : \"ready\"; } }\nasync function request(message: unknown): Promise<unknown> { const response = await chrome.runtime.sendMessage(message) as { ok: boolean; value?: unknown; error?: string }; if (!response.ok) throw new Error(response.error); return response.value; }\nfunction button(label: string, action: () => Promise<void>, disabled = false): HTMLButtonElement { const element = document.createElement(\"button\"); element.type = \"button\"; element.textContent = label; element.disabled = disabled; element.addEventListener(\"click\", () => action().catch(error => status(error instanceof Error ? error.message : String(error), true))); return element; }\nconst previewkinds = [\"focus\", \"inspect\", \"click\", \"type\", \"scroll\", \"select\", \"hover\"];\n\nfunction renderplan(plan?: agentplan, progress?: planprogress): void {\n  if (!planroot) return;\n  planroot.replaceChildren();\n  if (!plan) { planroot.textContent = \"Start a session, then request a local or endpoint plan. No task runs before review.\"; return; }\n  const title = document.createElement(\"h2\"); title.textContent = `${plan.state}: ${plan.objective}`; planroot.append(title);\n  const completed = progress?.planid === plan.id ? progress.completedsteps : [];\n  const list = document.createElement(\"ol\");\n  for (const step of plan.steps) {\n    const item = document.createElement(\"li\");\n    const done = completed.includes(step.id);\n    item.textContent = `${done ? \"\u2713\" : step.risk} \u2014 ${step.summary}`;\n    if (!done && step.target && previewkinds.includes(step.kind) && [\"pending\", \"approved\"].includes(plan.state)) item.append(\" \", button(\"Preview current target\", async () => { const result = await request({ kind: \"preview\", stepid: step.id }) as { summary: string }; status(result.summary); }));\n    if (!done && plan.state === \"approved\") item.append(\" \", button(\"Run this reviewed step\", async () => { const result = await request({ kind: \"execute\", stepid: step.id }) as { summary: string }; status(result.summary); await refresh(); }));\n    list.append(item);\n  }\n  planroot.append(list);\n  if (plan.state === \"pending\") { planroot.append(button(\"Approve reviewed plan\", async () => { await request({ kind: \"approve\" }); await refresh(); }), button(\"Reject plan\", async () => { await request({ kind: \"reject\" }); await refresh(); })); }\n  if (plan.state === \"completed\" && plan.completedat) { const note = document.createElement(\"p\"); note.textContent = \"Every reviewed step has executed and the plan is closed.\"; planroot.append(note); }\n}\nfunction renderaudit(events: auditevent[]): void { if (!auditroot) return; auditroot.replaceChildren(); for (const event of events.slice(0, 12)) { const item = document.createElement(\"li\"); item.textContent = `${new Date(event.at).toLocaleTimeString()} \u00B7 ${event.kind} \u00B7 ${event.summary}`; auditroot.append(item); } }\nfunction renderdiagnostic(report?: diagnosticreport): void { if (!diagnosticroot) return; diagnosticroot.replaceChildren(); if (!report) { diagnosticroot.textContent = \"Run a local diagnostic after starting a session to record bridge and page-shape health.\"; return; } const values = [`origin: ${report.origin}`, `title: ${report.title || \"untitled\"}`, `interactive elements: ${report.interactivecount}`, `forms: ${report.formcount}`, `page text length: ${report.textlength}`, `bridge available: ${report.bridgeavailable ? \"yes\" : \"no\"}`]; for (const value of values) { const item = document.createElement(\"li\"); item.textContent = value; diagnosticroot.append(item); } }\nasync function refresh(): Promise<void> { const context = await request({ kind: \"context\" }) as { plan?: agentplan; progress?: planprogress; diagnostic?: diagnosticreport; audit: auditevent[]; session?: { id: string; pausedat?: number } }; renderplan(context.plan, context.progress); renderdiagnostic(context.diagnostic); renderaudit(context.audit); if (context.session?.pausedat) status(\"Session paused. Reviewed actions are blocked until resume.\"); else status(context.session ? \"Active session is visible. The extension is waiting for review.\" : \"No active browser session.\"); }\nasync function create(kind: \"proposelocal\" | \"proposeremote\"): Promise<void> { await request({ kind, objective: objective?.value ?? \"\" }); await refresh(); }\nlocalbutton?.addEventListener(\"click\", () => create(\"proposelocal\").catch(error => status(error instanceof Error ? error.message : String(error), true)));\nremotebutton?.addEventListener(\"click\", () => create(\"proposeremote\").catch(error => status(error instanceof Error ? error.message : String(error), true)));\ndiagnosticbutton?.addEventListener(\"click\", () => request({ kind: \"diagnostic\" }).then(() => refresh()).catch(error => status(error instanceof Error ? error.message : String(error), true)));\nrefresh().catch(error => status(error instanceof Error ? error.message : String(error), true));\n"],
+  "mappings": ";AAEA,IAAM,YAAY,SAAS,cAAmC,YAAY;AAC1E,IAAM,cAAc,SAAS,cAAiC,YAAY;AAC1E,IAAM,eAAe,SAAS,cAAiC,aAAa;AAC5E,IAAM,mBAAmB,SAAS,cAAiC,aAAa;AAChF,IAAM,WAAW,SAAS,cAA2B,OAAO;AAC5D,IAAM,YAAY,SAAS,cAA2B,QAAQ;AAC9D,IAAM,iBAAiB,SAAS,cAA2B,cAAc;AACzE,IAAM,aAAa,SAAS,cAA2B,SAAS;AAEhE,SAAS,OAAO,SAAiB,QAAQ,OAAa;AAAE,MAAI,YAAY;AAAE,eAAW,cAAc;AAAS,eAAW,QAAQ,QAAQ,QAAQ,UAAU;AAAA,EAAS;AAAE;AACpK,eAAe,QAAQ,SAAoC;AAAE,QAAM,WAAW,MAAM,OAAO,QAAQ,YAAY,OAAO;AAAuD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,SAAS,KAAK;AAAG,SAAO,SAAS;AAAO;AACvP,SAAS,OAAO,OAAe,QAA6B,WAAW,OAA0B;AAAE,QAAM,UAAU,SAAS,cAAc,QAAQ;AAAG,UAAQ,OAAO;AAAU,UAAQ,cAAc;AAAO,UAAQ,WAAW;AAAU,UAAQ,iBAAiB,SAAS,MAAM,OAAO,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AAAG,SAAO;AAAS;AAChY,IAAM,eAAe,CAAC,SAAS,WAAW,SAAS,QAAQ,UAAU,UAAU,OAAO;AAEtF,SAAS,WAAW,MAAkB,UAA+B;AACnE,MAAI,CAAC,SAAU;AACf,WAAS,gBAAgB;AACzB,MAAI,CAAC,MAAM;AAAE,aAAS,cAAc;AAAuF;AAAA,EAAQ;AACnI,QAAM,QAAQ,SAAS,cAAc,IAAI;AAAG,QAAM,cAAc,GAAG,KAAK,KAAK,KAAK,KAAK,SAAS;AAAI,WAAS,OAAO,KAAK;AACzH,QAAM,YAAY,UAAU,WAAW,KAAK,KAAK,SAAS,iBAAiB,CAAC;AAC5E,QAAM,OAAO,SAAS,cAAc,IAAI;AACxC,aAAW,QAAQ,KAAK,OAAO;AAC7B,UAAM,OAAO,SAAS,cAAc,IAAI;AACxC,UAAM,OAAO,UAAU,SAAS,KAAK,EAAE;AACvC,SAAK,cAAc,GAAG,OAAO,WAAM,KAAK,IAAI,WAAM,KAAK,OAAO;AAC9D,QAAI,CAAC,QAAQ,KAAK,UAAU,aAAa,SAAS,KAAK,IAAI,KAAK,CAAC,WAAW,UAAU,EAAE,SAAS,KAAK,KAAK,EAAG,MAAK,OAAO,KAAK,OAAO,0BAA0B,YAAY;AAAE,YAAM,SAAS,MAAM,QAAQ,EAAE,MAAM,WAAW,QAAQ,KAAK,GAAG,CAAC;AAA0B,aAAO,OAAO,OAAO;AAAA,IAAG,CAAC,CAAC;AACnS,QAAI,CAAC,QAAQ,KAAK,UAAU,WAAY,MAAK,OAAO,KAAK,OAAO,0BAA0B,YAAY;AAAE,YAAM,SAAS,MAAM,QAAQ,EAAE,MAAM,WAAW,QAAQ,KAAK,GAAG,CAAC;AAA0B,aAAO,OAAO,OAAO;AAAG,YAAM,QAAQ;AAAA,IAAG,CAAC,CAAC;AAC9O,SAAK,OAAO,IAAI;AAAA,EAClB;AACA,WAAS,OAAO,IAAI;AACpB,MAAI,KAAK,UAAU,WAAW;AAAE,aAAS,OAAO,OAAO,yBAAyB,YAAY;AAAE,YAAM,QAAQ,EAAE,MAAM,UAAU,CAAC;AAAG,YAAM,QAAQ;AAAA,IAAG,CAAC,GAAG,OAAO,eAAe,YAAY;AAAE,YAAM,QAAQ,EAAE,MAAM,SAAS,CAAC;AAAG,YAAM,QAAQ;AAAA,IAAG,CAAC,CAAC;AAAA,EAAG;AACpP,MAAI,KAAK,UAAU,eAAe,KAAK,aAAa;AAAE,UAAM,OAAO,SAAS,cAAc,GAAG;AAAG,SAAK,cAAc;AAA4D,aAAS,OAAO,IAAI;AAAA,EAAG;AACxM;AACA,SAAS,YAAY,QAA4B;AAAE,MAAI,CAAC,UAAW;AAAQ,YAAU,gBAAgB;AAAG,aAAW,SAAS,OAAO,MAAM,GAAG,EAAE,GAAG;AAAE,UAAM,OAAO,SAAS,cAAc,IAAI;AAAG,SAAK,cAAc,GAAG,IAAI,KAAK,MAAM,EAAE,EAAE,mBAAmB,CAAC,SAAM,MAAM,IAAI,SAAM,MAAM,OAAO;AAAI,cAAU,OAAO,IAAI;AAAA,EAAG;AAAE;AAC5T,SAAS,iBAAiB,QAAiC;AAAE,MAAI,CAAC,eAAgB;AAAQ,iBAAe,gBAAgB;AAAG,MAAI,CAAC,QAAQ;AAAE,mBAAe,cAAc;AAA2F;AAAA,EAAQ;AAAE,QAAM,SAAS,CAAC,WAAW,OAAO,MAAM,IAAI,UAAU,OAAO,SAAS,UAAU,IAAI,yBAAyB,OAAO,gBAAgB,IAAI,UAAU,OAAO,SAAS,IAAI,qBAAqB,OAAO,UAAU,IAAI,qBAAqB,OAAO,kBAAkB,QAAQ,IAAI,EAAE;AAAG,aAAW,SAAS,QAAQ;AAAE,UAAM,OAAO,SAAS,cAAc,IAAI;AAAG,SAAK,cAAc;AAAO,mBAAe,OAAO,IAAI;AAAA,EAAG;AAAE;AAC9pB,eAAe,UAAyB;AAAE,QAAM,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,CAAC;AAAqJ,aAAW,QAAQ,MAAM,QAAQ,QAAQ;AAAG,mBAAiB,QAAQ,UAAU;AAAG,cAAY,QAAQ,KAAK;AAAG,MAAI,QAAQ,SAAS,SAAU,QAAO,4DAA4D;AAAA,MAAQ,QAAO,QAAQ,UAAU,oEAAoE,4BAA4B;AAAG;AACpkB,eAAe,OAAO,MAAuD;AAAE,QAAM,QAAQ,EAAE,MAAM,WAAW,WAAW,SAAS,GAAG,CAAC;AAAG,QAAM,QAAQ;AAAG;AAC5J,aAAa,iBAAiB,SAAS,MAAM,OAAO,cAAc,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AACxJ,cAAc,iBAAiB,SAAS,MAAM,OAAO,eAAe,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AAC1J,kBAAkB,iBAAiB,SAAS,MAAM,QAAQ,EAAE,MAAM,aAAa,CAAC,EAAE,KAAK,MAAM,QAAQ,CAAC,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC;AAC5L,QAAQ,EAAE,MAAM,WAAS,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,IAAI,CAAC;",
   "names": []
 }

package/extension/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEjO8Z0PDgQyfvawGcaO2j+o0GLCFTLNj7TkYC/Avo9l2NenMRq7gp90Nfd7E9MViv/OMcCKSYZ5unv12QPRtv31C+a5UQWDFAOP/cH5mwMd6hsayElrSoW8ta+FwFqmr9dIFkn7cQEU3YhZr4Gcbs+ycUHOxVgDA4NBKB0rQ6e9VW5LvTw0isRYUrqM+M72vKxHk9zUIYYn/LGPvottKBYi2GLr0PHSeC2UE+Shmq7vcFIXj6hDjvD4kLJ5sKoUllEcZ1TPuBcnHUQ9ndKA5iktXDQOIJCUJmi7a0YJ2PGg7fvpYfT9k0ai/qZ+pIoRfoOEwE01bPoDn7NjeYnNQIDAQAB",
   "name": "Devthink",
-  "version": "1.1.30",
+  "version": "1.1.31",
   "description": "A consent-first bridge for reviewed browser-agent tasks.",
   "permissions": [
     "activeTab",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/extension",
-  "version": "1.1.30",
+  "version": "1.1.31",
   "description": "Consent-first browser agent bridge and Manifest V3 extension.",
   "type": "module",
   "license": "GPL-3.0-only",