@wenathlan/extension 1.1.35 → 1.1.37

package/dist/index.js

@@ -352,19 +352,192 @@ var sessionmemory = class {
   async setnavstate(tabid, state) {
     return this.adapter.set(`navstate${tabid}`, state);
   }
+  /** Stores one named tab layout with its window bounds and group states, replacing the previous layout of that name. */
+  async setlayout(layout) {
+    const records = (await this.getlayouts()).filter((item) => item.name !== layout.name);
+    await this.adapter.set("layouts", [layout, ...records]);
+  }
+  /** Returns one saved tab layout by name with its timestamp. */
+  async getlayout(name) {
+    return (await this.getlayouts()).find((item) => item.name === name);
+  }
+  /** Returns every saved tab layout with its window bounds and group states. */
+  async getlayouts() {
+    return await this.adapter.get("layouts") ?? [];
+  }
+  /** Stores one tab group definition with its color choice and member tabs, replacing the previous definition of that name. */
+  async settabgroup(group) {
+    const records = (await this.gettabgroups()).filter((item) => item.name !== group.name);
+    await this.adapter.set("tabgroups", [...records, group]);
+  }
+  /** Returns every stored tab group definition with its color choice, newest first. */
+  async gettabgroups() {
+    return await this.adapter.get("tabgroups") ?? [];
+  }
+  /** Records one tabmeta record with task provenance, replacing the previous metadata of that tab. */
+  async settabmeta(meta) {
+    const records = (await this.gettabmetas()).filter((item) => item.tabid !== meta.tabid);
+    await this.adapter.set("tabmetas", [...records, meta]);
+  }
+  /** Returns every stored tabmeta record with task provenance. */
+  async gettabmetas() {
+    return await this.adapter.get("tabmetas") ?? [];
+  }
+  /** Records one session snapshot of tabs and windows for later restore. */
+  async addsnapshot(snapshot) {
+    const records = await this.getsnapshots();
+    await this.adapter.set("snapshots", [snapshot, ...records]);
+  }
+  /** Returns every stored session snapshot, newest first. */
+  async getsnapshots() {
+    return await this.adapter.get("snapshots") ?? [];
+  }
+  /** Records one closed tab in the history kept for restoretab and reopenrun. */
+  async addclosedtab(tab) {
+    const records = await this.getclosedtabs();
+    await this.adapter.set("closedtabs", [tab, ...records]);
+  }
+  /** Returns the closed tab history, newest first. */
+  async getclosedtabs() {
+    return await this.adapter.get("closedtabs") ?? [];
+  }
+  /** Stores one badge state per task, replacing the previous badge of that task. */
+  async setbadge(badge) {
+    const records = (await this.getbadges()).filter((item) => item.taskid !== badge.taskid);
+    await this.adapter.set("badges", [...records, badge]);
+  }
+  /** Returns every stored badge state per task. */
+  async getbadges() {
+    return await this.adapter.get("badges") ?? [];
+  }
+  /** Records one tab event observed inside a reviewed watchtab registration. */
+  async addtabwatchevent(event) {
+    const records = await this.gettabwatchevents();
+    await this.adapter.set("tabwatchevents", [event, ...records]);
+  }
+  /** Returns the tab event stream of every reviewed watchtab registration, newest first. */
+  async gettabwatchevents() {
+    return await this.adapter.get("tabwatchevents") ?? [];
+  }
+  /** Returns the ids of the scratch windows opened for split work. */
+  async getscratchwindows() {
+    return await this.adapter.get("scratchwindows") ?? [];
+  }
+  /** Replaces the scratch window id list after one scratch window opens or closes. */
+  async setscratchwindows(ids) {
+    return this.adapter.set("scratchwindows", ids);
+  }
+  /** Returns the pinned control tab state with the live task feed. */
+  async getcontroltab() {
+    return this.adapter.get("controltab");
+  }
+  /** Replaces the pinned control tab state. */
+  async setcontroltab(state) {
+    return this.adapter.set("controltab", state);
+  }
+  /** Stores one saved form profile under its reviewed name, replacing the previous profile of that name. */
+  async setprofile(profile) {
+    const records = (await this.getprofiles()).filter((item) => item.name !== profile.name);
+    await this.adapter.set("formprofiles", [profile, ...records]);
+  }
+  /** Returns one saved form profile by its reviewed name. */
+  async getprofile(name) {
+    return (await this.getprofiles()).find((item) => item.name === name);
+  }
+  /** Returns every saved form profile with its origin grants, newest first. */
+  async getprofiles() {
+    return await this.adapter.get("formprofiles") ?? [];
+  }
+  /** Removes one saved form profile by its reviewed name. */
+  async removeprofile(name) {
+    const records = (await this.getprofiles()).filter((item) => item.name !== name);
+    await this.adapter.set("formprofiles", records);
+  }
+  /** Records one wizard state with its step history. */
+  async addwizard(state) {
+    const records = await this.getwizards();
+    await this.adapter.set("wizards", [state, ...records]);
+  }
+  /** Returns every stored wizard state with its step history, newest first. */
+  async getwizards() {
+    return await this.adapter.get("wizards") ?? [];
+  }
+  /** Stores one submission ticket with its values hash, replacing the previous ticket of that id. */
+  async setticket(ticket) {
+    const records = (await this.gettickets()).filter((item) => item.id !== ticket.id);
+    await this.adapter.set("submittickets", [ticket, ...records]);
+  }
+  /** Returns every stored submission ticket with its values hash, newest first. */
+  async gettickets() {
+    return await this.adapter.get("submittickets") ?? [];
+  }
+  /** Records one collected error report for correction loops. */
+  async adderrorreport(report) {
+    const records = await this.geterrorreports();
+    await this.adapter.set("errorreports", [report, ...records]);
+  }
+  /** Returns every stored error report, newest first. */
+  async geterrorreports() {
+    return await this.adapter.get("errorreports") ?? [];
+  }
+  /** Records one typeahead pick observed when a reviewed suggestion entry was chosen. */
+  async addpick(pick) {
+    const records = await this.getpicks();
+    await this.adapter.set("typeaheadpicks", [pick, ...records]);
+  }
+  /** Returns every recorded typeahead pick, newest first. */
+  async getpicks() {
+    return await this.adapter.get("typeaheadpicks") ?? [];
+  }
+  /** Records one captcha handoff while the plan waits for the user. */
+  async addcaptcha(handoff) {
+    const records = await this.getcaptchas();
+    await this.adapter.set("captchas", [handoff, ...records]);
+  }
+  /** Returns every captcha handoff record with its resolution state, newest first. */
+  async getcaptchas() {
+    return await this.adapter.get("captchas") ?? [];
+  }
+  /** Resolves one captcha handoff by id once the user finished it. */
+  async resolvecaptcha(id, resolvedat) {
+    const records = await this.getcaptchas();
+    await this.adapter.set("captchas", records.map((handoff) => handoff.id === id && !handoff.resolved ? { ...handoff, resolved: true, resolvedat } : handoff));
+  }
+  /** Records one login or template detection for its origin. */
+  async adddetection(record2) {
+    const records = await this.getdetections();
+    await this.adapter.set("detections", [record2, ...records]);
+  }
+  /** Returns every stored login and template detection per origin, newest first. */
+  async getdetections() {
+    return await this.adapter.get("detections") ?? [];
+  }
+  /** Stores the reviewed one time code behind the consent gate of an active session. */
+  async setcodevalue(value) {
+    return this.adapter.set("codevalue", value);
+  }
+  /** Returns the reviewed one time code, if the user stored one behind the consent gate. */
+  async getcodevalue() {
+    return this.adapter.get("codevalue");
+  }
 };
 function randomid() {
   return crypto.randomUUID();
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
-var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus"]);
-var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection"]);
-var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav"]);
+var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus", "watchtab"]);
+var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword"]);
+var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav", "duplicatetab", "pintab", "mutetab", "movetab", "movetabwindow", "searchtabs", "badgetab", "attachmeta", "focuswindow", "maximizewindow", "minimizewindow", "restorewindow", "incognitowindow", "asksubmit", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword"]);
+var tabscommandactions = /* @__PURE__ */ new Set(["querytabs", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "watchtab", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "savelayout", "restorelayout", "findclones", "searchtabs", "badgetab", "attachmeta", "listaudio", "reopenrun", "snapshotsession"]);
+var formactions = /* @__PURE__ */ new Set(["fillform", "filllabel", "fillplaceholder", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "submitform", "readerrors", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "handoffcaptcha", "fillcard", "fillcode", "consentpassword", "skiphoneypot", "detectlogin", "detecttemplate"]);
+var fieldkinds = ["text", "email", "phone", "date", "number", "select", "check", "radio", "file", "password", "card", "code"];
+var layoutmutationactions = /* @__PURE__ */ new Set(["grouptabs", "colorgroup", "collapsegroup", "savelayout", "restorelayout"]);
+var groupcolors = ["grey", "blue", "red", "yellow", "green", "pink", "purple", "cyan", "orange"];
 function normalizeendpoint(value) {
   const endpoint = new URL(value.trim());
   if (endpoint.protocol !== "https:") throw new Error("Devthink accepts HTTPS endpoints only.");
@@ -400,6 +573,157 @@ function parseoptions(step) {
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Step options must be a JSON object.");
   return parsed;
 }
+function istabscommandkind(kind) {
+  return tabscommandactions.has(kind);
+}
+function islayoutkind(kind) {
+  return layoutmutationactions.has(kind);
+}
+function isformkind(kind) {
+  return formactions.has(kind);
+}
+function validatefieldmatch(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed field match is required in options." };
+  const match = value;
+  if (match.mode !== "label" && match.mode !== "placeholder" && match.mode !== "arialabel" && match.mode !== "name") return { allowed: false, reason: "The reviewed field match mode must be label, placeholder, arialabel or name." };
+  const key = match.mode === "label" ? "label" : match.mode === "placeholder" ? "placeholder" : match.mode === "arialabel" ? "arialabel" : "name";
+  if (!isnonempty(match[key])) return { allowed: false, reason: `The reviewed ${match.mode} field match needs a non-empty ${key}.` };
+  return { allowed: true };
+}
+function validateformrecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed form record with entries is required in options." };
+  const record2 = value;
+  if (record2.form !== void 0 && !isnonempty(record2.form)) return { allowed: false, reason: "The reviewed form record form selector must be a non-empty string." };
+  if (!Array.isArray(record2.entries) || record2.entries.length === 0) return { allowed: false, reason: "The reviewed form record needs a non-empty list of entries." };
+  for (const item of record2.entries) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed form record entry must be an object." };
+    const entry = item;
+    const matchcheck = validatefieldmatch(entry.match);
+    if (!matchcheck.allowed) return matchcheck;
+    if (typeof entry.kind !== "string" || !fieldkinds.includes(entry.kind)) return { allowed: false, reason: "Every reviewed form record entry needs a known field kind." };
+    if (typeof entry.value !== "string") return { allowed: false, reason: "Every reviewed form record entry needs a string value." };
+    if (entry.kind === "password") return { allowed: false, reason: "Password entries are refused inside form records; use consentpassword with a reviewed consent ref." };
+  }
+  return { allowed: true };
+}
+function validatevaluegen(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed valuegen rule with a field kind is required in options." };
+  const rule = value;
+  if (typeof rule.kind !== "string" || !fieldkinds.includes(rule.kind)) return { allowed: false, reason: "The reviewed valuegen kind must be a known field kind." };
+  if (rule.locale !== void 0 && !isnonempty(rule.locale)) return { allowed: false, reason: "The reviewed valuegen locale must be a non-empty string." };
+  if (rule.seed !== void 0 && (typeof rule.seed !== "number" || !Number.isFinite(rule.seed))) return { allowed: false, reason: "The reviewed valuegen seed must be a finite number." };
+  return { allowed: true };
+}
+function validatefieldpairs(options, mode) {
+  const pairs = options.fields;
+  if (!Array.isArray(pairs) || pairs.length === 0) return { allowed: false, reason: "A reviewed non-empty list of field pairs is required in options." };
+  for (const item of pairs) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed field pair must be an object." };
+    const pair = item;
+    if (!isnonempty(pair[mode])) return { allowed: false, reason: `Every reviewed field pair needs a non-empty ${mode}.` };
+    if (typeof pair.value !== "string" || !pair.value.trim()) return { allowed: false, reason: "Every reviewed field pair needs a non-empty value." };
+  }
+  return { allowed: true };
+}
+function validatecardsegments(value) {
+  if (!Array.isArray(value) || value.length === 0) return { allowed: false, reason: "A reviewed non-empty list of card segments is required in options." };
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed card segment must be an object." };
+    const segment = item;
+    const matchcheck = validatefieldmatch(segment.match);
+    if (!matchcheck.allowed) return matchcheck;
+    if (typeof segment.value !== "string" || !segment.value.trim()) return { allowed: false, reason: "Every reviewed card segment needs a non-empty value." };
+  }
+  return { allowed: true };
+}
+function validateformgrammar(step, options) {
+  const kind = step.kind;
+  if (kind === "fillform" || kind === "saveprofiles" && options.formrecord !== void 0) {
+    const recordcheck = validateformrecord(options.formrecord);
+    if (!recordcheck.allowed) return recordcheck;
+  }
+  if (kind === "filllabel" || kind === "fillplaceholder") {
+    const paircheck = validatefieldpairs(options, kind === "filllabel" ? "label" : "placeholder");
+    if (!paircheck.allowed) return paircheck;
+  }
+  if (kind === "generatevalues" && options.valuegen !== void 0) {
+    const rulecheck = validatevaluegen(options.valuegen);
+    if (!rulecheck.allowed) return rulecheck;
+  }
+  if (kind === "saveprofiles" && !isnonempty(options.name)) return { allowed: false, reason: "A reviewed profile name is required in options." };
+  if (kind === "submitform" && !isnonempty(options.consentref)) return { allowed: false, reason: "A reviewed consent ref of an approved asksubmit ticket is required in options." };
+  if (kind === "retryform") {
+    const backoff = options.backoff;
+    if (!backoff || typeof backoff !== "object" || Array.isArray(backoff)) return { allowed: false, reason: "A reviewed backoff rule with wait and factor is required in options." };
+    const rule = backoff;
+    if (typeof rule.wait !== "number" || !Number.isFinite(rule.wait) || rule.wait <= 0) return { allowed: false, reason: "The reviewed retry backoff wait must be a positive number of milliseconds with no code ceiling." };
+    if (typeof rule.factor !== "number" || !Number.isFinite(rule.factor) || rule.factor < 1) return { allowed: false, reason: "The reviewed retry backoff factor must be one or greater with no code ceiling." };
+    if (options.attempts !== void 0 && (typeof options.attempts !== "number" || !Number.isInteger(options.attempts) || options.attempts < 1)) return { allowed: false, reason: "The reviewed retry attempts must be a positive integer with no code ceiling." };
+  }
+  if (kind === "runwizard" && options.steps !== void 0 && (typeof options.steps !== "number" || !Number.isInteger(options.steps) || options.steps < 1)) return { allowed: false, reason: "The reviewed wizard step count must be a positive integer with no code ceiling." };
+  if (kind === "selectchain") {
+    if (!isnonempty(options.child)) return { allowed: false, reason: "A reviewed child selector of the dependent control is required in options." };
+    if (!nonnegativeoption(options, "wait")) return { allowed: false, reason: "The reviewed dependent wait must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "picktypeahead") {
+    if (!isnonempty(options.pick)) return { allowed: false, reason: "A reviewed suggestion entry to pick is required in options." };
+    if (!nonnegativeoption(options, "timeout")) return { allowed: false, reason: "The reviewed typeahead timeout must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "pickdate" && !/^\d{4}-\d{2}-\d{2}$/.test(step.value ?? "")) return { allowed: false, reason: "The reviewed date must use the yyyy-mm-dd form." };
+  if (kind === "fillcard") {
+    const segmentcheck = validatecardsegments(options.segments);
+    if (!segmentcheck.allowed) return segmentcheck;
+    if (!nonnegativeoption(options, "pause")) return { allowed: false, reason: "The reviewed card typing pause must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "fillcode" && !isnonempty(options.source)) return { allowed: false, reason: "A reviewed one time code source is required in options." };
+  if (kind === "consentpassword" && !isnonempty(options.consentref)) return { allowed: false, reason: "A reviewed consent ref is required in options before any password is filled." };
+  return { allowed: true };
+}
+function submitreviewgranted(steps, submitid) {
+  const position = steps.findIndex((candidate) => candidate.id === submitid);
+  const asked = steps.some((candidate, index) => candidate.kind === "asksubmit" && (position === -1 || index < position));
+  return asked ? { allowed: true } : { allowed: false, reason: "Form submission requires an asksubmit review step before it." };
+}
+function passwordconsentgranted(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const consentref = options.consentref;
+  if (typeof consentref !== "string" || !consentref.trim()) return { allowed: false, reason: "A password fill requires a reviewed consent ref in options." };
+  return { allowed: true };
+}
+function luhnvalid(digits) {
+  let sum = 0;
+  let double = false;
+  for (let index = digits.length - 1; index >= 0; index -= 1) {
+    let value = Number.parseInt(digits[index] ?? "", 10);
+    if (!Number.isFinite(value)) return false;
+    if (double) {
+      value *= 2;
+      if (value > 9) value -= 9;
+    }
+    sum += value;
+    double = !double;
+  }
+  return sum % 10 === 0;
+}
+function generatedvalueallowed(value) {
+  const compact = value.replace(/[\s-]/g, "");
+  if (/^\d{13,19}$/.test(compact) && luhnvalid(compact) && !compact.startsWith("4111")) return { allowed: false, reason: "The generated value looks like a real card number and is refused; generated card values use the 4111 test prefix." };
+  if (/^\d{3}-\d{2}-\d{4}$/.test(value.trim())) return { allowed: false, reason: "The generated value looks like a personal identifier and is refused." };
+  return { allowed: true };
+}
+function profilegrantgranted(profile, origin) {
+  if (!profile.grants.includes(origin)) return { allowed: false, reason: `The saved profile ${profile.name} is not granted to ${origin}; add the origin to the profile grants first.` };
+  return { allowed: true };
+}
+function layoutmutationgranted(session, now) {
+  if (!session || session.stoppedat || session.expiresat <= now) return { allowed: false, reason: "Group and layout mutations stay inside the active session." };
+  return { allowed: true };
+}
 function waitduration(step) {
   const requested = step.value ? Number.parseInt(step.value, 10) : 250;
   if (!Number.isFinite(requested) || requested < 0) throw new Error("Wait duration must be zero or a positive number of milliseconds.");
@@ -566,6 +890,104 @@ function validateratelimit(value) {
   if (typeof limit.ceiling !== "number" || !Number.isInteger(limit.ceiling) || limit.ceiling < 1) return { allowed: false, reason: "The reviewed ratelimit ceiling must be a positive integer with no code ceiling." };
   return { allowed: true };
 }
+function validatetabquery(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed tabquery with at least one matcher is required in options." };
+  const query = value;
+  const hasmatcher = query.url !== void 0 || query.title !== void 0 || query.id !== void 0 || query.pattern !== void 0;
+  if (!hasmatcher) return { allowed: false, reason: "The reviewed tabquery needs a url, title, id or pattern matcher." };
+  if (query.url !== void 0 && !isnonempty(query.url)) return { allowed: false, reason: "The reviewed tabquery url matcher must be a non-empty string." };
+  if (query.title !== void 0 && !isnonempty(query.title)) return { allowed: false, reason: "The reviewed tabquery title matcher must be a non-empty string." };
+  if (query.pattern !== void 0 && !isnonempty(query.pattern)) return { allowed: false, reason: "The reviewed tabquery pattern matcher must be a non-empty string." };
+  if (query.id !== void 0 && (typeof query.id !== "number" || !Number.isInteger(query.id) || query.id < 0)) return { allowed: false, reason: "The reviewed tabquery id matcher must be a non-negative integer tab id." };
+  return { allowed: true };
+}
+function validategroupcolor(value) {
+  return typeof value === "string" && groupcolors.includes(value);
+}
+function validateidlist(options, key) {
+  const ids = options[key];
+  return Array.isArray(ids) && ids.length > 0 && ids.every((id) => typeof id === "number" && Number.isInteger(id) && id >= 0);
+}
+function validatetabsgrammar(step, options) {
+  const kind = step.kind;
+  if (kind === "querytabs" || kind === "closepattern") {
+    const querycheck = validatetabquery(options.tabquery);
+    if (!querycheck.allowed) return querycheck;
+    if (kind === "closepattern" && options.reviewed !== true) return { allowed: false, reason: "The close pattern needs the explicit reviewed flag before any tab closes." };
+  }
+  if (kind === "duplicatetab" || kind === "pintab" || kind === "mutetab" || kind === "movetab" || kind === "movetabwindow" || kind === "badgetab" || kind === "attachmeta") {
+    if (!isnumericid(step.value)) return { allowed: false, reason: "A numeric browser tab id is required." };
+  }
+  if (kind === "focuswindow" || kind === "maximizewindow" || kind === "minimizewindow" || kind === "restorewindow") {
+    if (!isnumericid(step.value)) return { allowed: false, reason: "A numeric browser window id is required." };
+  }
+  if (kind === "pintab" && typeof options.pinned !== "boolean") return { allowed: false, reason: "A reviewed pinned flag is required in options." };
+  if (kind === "mutetab" && typeof options.muted !== "boolean") return { allowed: false, reason: "A reviewed muted flag is required in options." };
+  if (kind === "movetab") {
+    if (typeof options.index !== "number" || !Number.isInteger(options.index) || options.index < 0) return { allowed: false, reason: "A reviewed non-negative target index is required in options." };
+  }
+  if (kind === "movetabwindow") {
+    if (typeof options.windowid !== "number" || !Number.isInteger(options.windowid) || options.windowid < 0) return { allowed: false, reason: "A reviewed target window id is required in options." };
+  }
+  if (kind === "grouptabs") {
+    const group = options.group;
+    if (!group || typeof group !== "object" || Array.isArray(group)) return { allowed: false, reason: "A reviewed group with a name is required in options." };
+    const spec = group;
+    if (!isnonempty(spec.name)) return { allowed: false, reason: "The reviewed group needs a non-empty name." };
+    if (!validategroupcolor(spec.color)) return { allowed: false, reason: "The reviewed group color must be a Chromium tab group color." };
+    if (!validateidlist(spec, "tabids")) return { allowed: false, reason: "The reviewed group needs a non-empty list of member tab ids." };
+  }
+  if (kind === "colorgroup") {
+    if (!isnonempty(options.name)) return { allowed: false, reason: "A reviewed group name is required in options." };
+    if (!validategroupcolor(options.color)) return { allowed: false, reason: "The reviewed group color must be a Chromium tab group color." };
+  }
+  if (kind === "collapsegroup") {
+    if (!isnonempty(options.name)) return { allowed: false, reason: "A reviewed group name is required in options." };
+    if (typeof options.collapsed !== "boolean") return { allowed: false, reason: "A reviewed collapsed flag is required in options." };
+  }
+  if (kind === "discardtab" || kind === "reloadtabs") {
+    if (!isnumericid(step.value) && !validateidlist(options, "tabs")) return { allowed: false, reason: "A numeric tab id or a reviewed list of tab ids is required." };
+  }
+  if (kind === "zoomin" || kind === "zoomout") {
+    if (options.step !== void 0 && (typeof options.step !== "number" || !Number.isFinite(options.step) || options.step <= 0)) return { allowed: false, reason: "The reviewed zoom step must be a positive number with no code ceiling." };
+    if (step.value !== void 0 && step.value !== "" && !isnumericid(step.value)) return { allowed: false, reason: "The reviewed zoom target must be a numeric tab id." };
+  }
+  if (kind === "switchtab") {
+    if (options.direction !== "next" && options.direction !== "previous") return { allowed: false, reason: "A reviewed switch direction of next or previous is required in options." };
+  }
+  if (kind === "restorewindow") {
+    const bounds = options.bounds;
+    if (bounds !== void 0) {
+      if (!bounds || typeof bounds !== "object" || Array.isArray(bounds)) return { allowed: false, reason: "The reviewed window bounds must be an object." };
+      const shape = bounds;
+      for (const field of ["left", "top", "width", "height"]) {
+        if (typeof shape[field] !== "number" || !Number.isFinite(shape[field])) return { allowed: false, reason: "The reviewed window bounds need numeric left, top, width and height." };
+      }
+    }
+  }
+  if (kind === "scratchwindow") {
+    if (step.value !== void 0 && step.value !== "" && !ishttpsurl(step.value)) return { allowed: false, reason: "The reviewed scratch window url must use HTTPS." };
+  }
+  if (kind === "incognitowindow" && !ishttpsurl(step.value)) return { allowed: false, reason: "A reviewed HTTPS url is required to open an incognito window." };
+  if (kind === "restoretab" && step.value !== void 0 && step.value !== "" && !ishttpsurl(step.value)) return { allowed: false, reason: "The reviewed restore url must use HTTPS." };
+  if (kind === "savelayout" || kind === "restorelayout") {
+    if (!isnonempty(options.name)) return { allowed: false, reason: "A reviewed layout name is required in options." };
+  }
+  if (kind === "badgetab") {
+    if (!isnonempty(options.label)) return { allowed: false, reason: "A reviewed badge label is required in options." };
+    if (options.taskid !== void 0 && !isnonempty(options.taskid)) return { allowed: false, reason: "The reviewed badge task id must be a non-empty string." };
+  }
+  if (kind === "attachmeta") {
+    const labels = options.labels;
+    const taskrefs = options.taskrefs;
+    const haslabels = Array.isArray(labels) && labels.length > 0 && labels.every((label) => isnonempty(label));
+    const hastaskrefs = Array.isArray(taskrefs) && taskrefs.length > 0 && taskrefs.every((ref) => isnonempty(ref));
+    if (!haslabels && !hastaskrefs) return { allowed: false, reason: "Reviewed labels or task refs are required in options to attach metadata." };
+    if (options.provenance !== void 0 && !isnonempty(options.provenance)) return { allowed: false, reason: "The reviewed provenance must be a non-empty string." };
+  }
+  if (kind === "reopenrun" && !isnonempty(options.run)) return { allowed: false, reason: "A reviewed run id is required in options to reopen its tabs." };
+  return { allowed: true };
+}
 function validatestep(step, origin) {
   if (!allowedactions.has(step.kind)) return { allowed: false, reason: "Unsupported action kind." };
   if (!step.summary.trim()) return { allowed: false, reason: "A human-readable action summary is required." };
@@ -767,6 +1189,24 @@ function validatestep(step, origin) {
     const listcheck = validateurllist(options, "urls");
     if (!listcheck.allowed) return listcheck;
   }
+  if (istabscommandkind(step.kind)) {
+    const tabscheck = validatetabsgrammar(step, options);
+    if (!tabscheck.allowed) return tabscheck;
+  }
+  if (isformkind(step.kind)) {
+    const formcheck = validateformgrammar(step, options);
+    if (!formcheck.allowed) return formcheck;
+  }
+  if (step.kind === "tabcreate") {
+    if (options.background !== void 0 && typeof options.background !== "boolean") return { allowed: false, reason: "The reviewed background flag must be a boolean." };
+    if (options.window !== void 0 && (typeof options.window !== "number" || !Number.isInteger(options.window) || options.window < 0)) return { allowed: false, reason: "The reviewed target window id must be a non-negative integer." };
+  }
+  if (step.kind === "windowcreate") {
+    for (const field of ["left", "top", "width", "height"]) {
+      if (options[field] !== void 0 && (typeof options[field] !== "number" || !Number.isFinite(options[field]))) return { allowed: false, reason: `The reviewed window ${field} must be a number.` };
+    }
+    if (options.state !== void 0 && !["normal", "maximized", "minimized", "fullscreen"].includes(options.state)) return { allowed: false, reason: "The reviewed window state must be normal, maximized, minimized or fullscreen." };
+  }
   return { allowed: true };
 }
 function sessiongate(input) {
@@ -797,6 +1237,16 @@ function canexecute(input) {
       if (!navigation.allowed) return navigation;
     }
   }
+  if (islayoutkind(input.step.kind) && !layoutmutationgranted(input.session, now).allowed) return { allowed: false, reason: "Group and layout mutations stay inside the active session." };
+  if (input.step.kind === "submitform" || input.step.kind === "retryform") {
+    if (!input.plan) return { allowed: false, reason: "Form submission requires an asksubmit review step before it." };
+    const reviewgate = submitreviewgranted(input.plan.steps, input.step.id);
+    if (!reviewgate.allowed) return reviewgate;
+  }
+  if (input.step.kind === "consentpassword") {
+    const consentgate = passwordconsentgranted(input.step);
+    if (!consentgate.allowed) return consentgate;
+  }
   if (input.step.kind === "openlink" || input.step.kind === "openprivate" || input.step.kind === "batchopen" || input.step.kind === "prefetch" || input.step.kind === "deeplink" || input.step.kind === "reopentab") {
     let options = {};
     try {
@@ -818,7 +1268,7 @@ function canexecute(input) {
 }
 
 // version.ts
-var packageversion = "1.1.35";
+var packageversion = "1.1.37";
 
 // types.ts
 var protocolversion = packageversion;
@@ -859,6 +1309,11 @@ function parseproposal(value, origin) {
     const options = parseoptions(step);
     if (typeof options.stepid === "string" && !steps.some((candidate) => candidate.id === options.stepid)) throw new Error("A retry or frame wrapper references an unknown step id.");
   }
+  for (const step of steps) {
+    if (step.kind !== "submitform" && step.kind !== "retryform") continue;
+    const review = submitreviewgranted(steps, step.id);
+    if (!review.allowed) throw new Error(review.reason);
+  }
   const createdat = Date.now();
   const expiresat = typeof planinput.expiresat === "number" ? planinput.expiresat : createdat + 10 * 60 * 1e3;
   const plan = {
@@ -916,14 +1371,34 @@ function trailreport(input) {
 function safetyresponse(input) {
   return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, verdicts: input.verdicts });
 }
+function tabreportresponse(input) {
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, report: input.report });
+}
+function layoutreport(input) {
+  return { version: protocolversion, layouts: input.layouts };
+}
+function formreportresponse(input) {
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, report: input.report });
+}
+function errorreportresponse(input) {
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, report: input.report });
+}
+function wizardreport(input) {
+  return { version: protocolversion, ...input.sessionid ? { sessionid: input.sessionid } : {}, wizards: input.wizards, picks: input.picks };
+}
 export {
   canexecute,
   actionrisk as deriveactionrisk,
   diffresponse,
+  errorreportresponse,
   eventresponse,
+  formreportresponse,
+  generatedvalueallowed,
   heldkeysreport,
   hostpattern,
+  isformkind,
   iswatchkind,
+  layoutreport,
   mapresponse,
   navstateresponse,
   normalizeendpoint,
@@ -931,6 +1406,8 @@ export {
   observationresponse,
   outcomeresponse,
   parseproposal,
+  passwordconsentgranted,
+  profilegrantgranted,
   protocolversion,
   randomid,
   requestbody,
@@ -939,8 +1416,14 @@ export {
   selectorresponse,
   sessionmemory,
   signalsreport,
+  submitreviewgranted,
+  tabreportresponse,
   trailreport,
+  validatefieldmatch,
+  validateformrecord,
   validatestep,
-  validatetargetref
+  validatetargetref,
+  validatevaluegen,
+  wizardreport
 };
 //# sourceMappingURL=index.js.map