@wenathlan/extension 1.1.36 → 1.1.37

package/extension/dist/background.js

@@ -435,20 +435,107 @@ var sessionmemory = class {
   async setcontroltab(state) {
     return this.adapter.set("controltab", state);
   }
+  /** Stores one saved form profile under its reviewed name, replacing the previous profile of that name. */
+  async setprofile(profile) {
+    const records = (await this.getprofiles()).filter((item) => item.name !== profile.name);
+    await this.adapter.set("formprofiles", [profile, ...records]);
+  }
+  /** Returns one saved form profile by its reviewed name. */
+  async getprofile(name) {
+    return (await this.getprofiles()).find((item) => item.name === name);
+  }
+  /** Returns every saved form profile with its origin grants, newest first. */
+  async getprofiles() {
+    return await this.adapter.get("formprofiles") ?? [];
+  }
+  /** Removes one saved form profile by its reviewed name. */
+  async removeprofile(name) {
+    const records = (await this.getprofiles()).filter((item) => item.name !== name);
+    await this.adapter.set("formprofiles", records);
+  }
+  /** Records one wizard state with its step history. */
+  async addwizard(state) {
+    const records = await this.getwizards();
+    await this.adapter.set("wizards", [state, ...records]);
+  }
+  /** Returns every stored wizard state with its step history, newest first. */
+  async getwizards() {
+    return await this.adapter.get("wizards") ?? [];
+  }
+  /** Stores one submission ticket with its values hash, replacing the previous ticket of that id. */
+  async setticket(ticket) {
+    const records = (await this.gettickets()).filter((item) => item.id !== ticket.id);
+    await this.adapter.set("submittickets", [ticket, ...records]);
+  }
+  /** Returns every stored submission ticket with its values hash, newest first. */
+  async gettickets() {
+    return await this.adapter.get("submittickets") ?? [];
+  }
+  /** Records one collected error report for correction loops. */
+  async adderrorreport(report) {
+    const records = await this.geterrorreports();
+    await this.adapter.set("errorreports", [report, ...records]);
+  }
+  /** Returns every stored error report, newest first. */
+  async geterrorreports() {
+    return await this.adapter.get("errorreports") ?? [];
+  }
+  /** Records one typeahead pick observed when a reviewed suggestion entry was chosen. */
+  async addpick(pick) {
+    const records = await this.getpicks();
+    await this.adapter.set("typeaheadpicks", [pick, ...records]);
+  }
+  /** Returns every recorded typeahead pick, newest first. */
+  async getpicks() {
+    return await this.adapter.get("typeaheadpicks") ?? [];
+  }
+  /** Records one captcha handoff while the plan waits for the user. */
+  async addcaptcha(handoff) {
+    const records = await this.getcaptchas();
+    await this.adapter.set("captchas", [handoff, ...records]);
+  }
+  /** Returns every captcha handoff record with its resolution state, newest first. */
+  async getcaptchas() {
+    return await this.adapter.get("captchas") ?? [];
+  }
+  /** Resolves one captcha handoff by id once the user finished it. */
+  async resolvecaptcha(id, resolvedat) {
+    const records = await this.getcaptchas();
+    await this.adapter.set("captchas", records.map((handoff) => handoff.id === id && !handoff.resolved ? { ...handoff, resolved: true, resolvedat } : handoff));
+  }
+  /** Records one login or template detection for its origin. */
+  async adddetection(record2) {
+    const records = await this.getdetections();
+    await this.adapter.set("detections", [record2, ...records]);
+  }
+  /** Returns every stored login and template detection per origin, newest first. */
+  async getdetections() {
+    return await this.adapter.get("detections") ?? [];
+  }
+  /** Stores the reviewed one time code behind the consent gate of an active session. */
+  async setcodevalue(value) {
+    return this.adapter.set("codevalue", value);
+  }
+  /** Returns the reviewed one time code, if the user stored one behind the consent gate. */
+  async getcodevalue() {
+    return this.adapter.get("codevalue");
+  }
 };
 function randomid() {
   return crypto.randomUUID();
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
 var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus", "watchtab"]);
-var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection"]);
-var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav", "duplicatetab", "pintab", "mutetab", "movetab", "movetabwindow", "searchtabs", "badgetab", "attachmeta", "focuswindow", "maximizewindow", "minimizewindow", "restorewindow", "incognitowindow"]);
+var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword"]);
+var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav", "duplicatetab", "pintab", "mutetab", "movetab", "movetabwindow", "searchtabs", "badgetab", "attachmeta", "focuswindow", "maximizewindow", "minimizewindow", "restorewindow", "incognitowindow", "asksubmit", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword"]);
 var tabscommandactions = /* @__PURE__ */ new Set(["querytabs", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "watchtab", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "savelayout", "restorelayout", "findclones", "searchtabs", "badgetab", "attachmeta", "listaudio", "reopenrun", "snapshotsession"]);
+var formactions = /* @__PURE__ */ new Set(["fillform", "filllabel", "fillplaceholder", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "submitform", "readerrors", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "handoffcaptcha", "fillcard", "fillcode", "consentpassword", "skiphoneypot", "detectlogin", "detecttemplate"]);
+var fieldkinds = ["text", "email", "phone", "date", "number", "select", "check", "radio", "file", "password", "card", "code"];
 var layoutmutationactions = /* @__PURE__ */ new Set(["grouptabs", "colorgroup", "collapsegroup", "savelayout", "restorelayout"]);
 var groupcolors = ["grey", "blue", "red", "yellow", "green", "pink", "purple", "cyan", "orange"];
 function normalizeendpoint(value) {
@@ -492,6 +579,147 @@ function istabscommandkind(kind) {
 function islayoutkind(kind) {
   return layoutmutationactions.has(kind);
 }
+function isformkind(kind) {
+  return formactions.has(kind);
+}
+function validatefieldmatch(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed field match is required in options." };
+  const match = value;
+  if (match.mode !== "label" && match.mode !== "placeholder" && match.mode !== "arialabel" && match.mode !== "name") return { allowed: false, reason: "The reviewed field match mode must be label, placeholder, arialabel or name." };
+  const key = match.mode === "label" ? "label" : match.mode === "placeholder" ? "placeholder" : match.mode === "arialabel" ? "arialabel" : "name";
+  if (!isnonempty(match[key])) return { allowed: false, reason: `The reviewed ${match.mode} field match needs a non-empty ${key}.` };
+  return { allowed: true };
+}
+function validateformrecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed form record with entries is required in options." };
+  const record2 = value;
+  if (record2.form !== void 0 && !isnonempty(record2.form)) return { allowed: false, reason: "The reviewed form record form selector must be a non-empty string." };
+  if (!Array.isArray(record2.entries) || record2.entries.length === 0) return { allowed: false, reason: "The reviewed form record needs a non-empty list of entries." };
+  for (const item of record2.entries) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed form record entry must be an object." };
+    const entry = item;
+    const matchcheck = validatefieldmatch(entry.match);
+    if (!matchcheck.allowed) return matchcheck;
+    if (typeof entry.kind !== "string" || !fieldkinds.includes(entry.kind)) return { allowed: false, reason: "Every reviewed form record entry needs a known field kind." };
+    if (typeof entry.value !== "string") return { allowed: false, reason: "Every reviewed form record entry needs a string value." };
+    if (entry.kind === "password") return { allowed: false, reason: "Password entries are refused inside form records; use consentpassword with a reviewed consent ref." };
+  }
+  return { allowed: true };
+}
+function validatevaluegen(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed valuegen rule with a field kind is required in options." };
+  const rule = value;
+  if (typeof rule.kind !== "string" || !fieldkinds.includes(rule.kind)) return { allowed: false, reason: "The reviewed valuegen kind must be a known field kind." };
+  if (rule.locale !== void 0 && !isnonempty(rule.locale)) return { allowed: false, reason: "The reviewed valuegen locale must be a non-empty string." };
+  if (rule.seed !== void 0 && (typeof rule.seed !== "number" || !Number.isFinite(rule.seed))) return { allowed: false, reason: "The reviewed valuegen seed must be a finite number." };
+  return { allowed: true };
+}
+function validatefieldpairs(options, mode) {
+  const pairs = options.fields;
+  if (!Array.isArray(pairs) || pairs.length === 0) return { allowed: false, reason: "A reviewed non-empty list of field pairs is required in options." };
+  for (const item of pairs) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed field pair must be an object." };
+    const pair = item;
+    if (!isnonempty(pair[mode])) return { allowed: false, reason: `Every reviewed field pair needs a non-empty ${mode}.` };
+    if (typeof pair.value !== "string" || !pair.value.trim()) return { allowed: false, reason: "Every reviewed field pair needs a non-empty value." };
+  }
+  return { allowed: true };
+}
+function validatecardsegments(value) {
+  if (!Array.isArray(value) || value.length === 0) return { allowed: false, reason: "A reviewed non-empty list of card segments is required in options." };
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed card segment must be an object." };
+    const segment = item;
+    const matchcheck = validatefieldmatch(segment.match);
+    if (!matchcheck.allowed) return matchcheck;
+    if (typeof segment.value !== "string" || !segment.value.trim()) return { allowed: false, reason: "Every reviewed card segment needs a non-empty value." };
+  }
+  return { allowed: true };
+}
+function validateformgrammar(step, options) {
+  const kind = step.kind;
+  if (kind === "fillform" || kind === "saveprofiles" && options.formrecord !== void 0) {
+    const recordcheck = validateformrecord(options.formrecord);
+    if (!recordcheck.allowed) return recordcheck;
+  }
+  if (kind === "filllabel" || kind === "fillplaceholder") {
+    const paircheck = validatefieldpairs(options, kind === "filllabel" ? "label" : "placeholder");
+    if (!paircheck.allowed) return paircheck;
+  }
+  if (kind === "generatevalues" && options.valuegen !== void 0) {
+    const rulecheck = validatevaluegen(options.valuegen);
+    if (!rulecheck.allowed) return rulecheck;
+  }
+  if (kind === "saveprofiles" && !isnonempty(options.name)) return { allowed: false, reason: "A reviewed profile name is required in options." };
+  if (kind === "submitform" && !isnonempty(options.consentref)) return { allowed: false, reason: "A reviewed consent ref of an approved asksubmit ticket is required in options." };
+  if (kind === "retryform") {
+    const backoff = options.backoff;
+    if (!backoff || typeof backoff !== "object" || Array.isArray(backoff)) return { allowed: false, reason: "A reviewed backoff rule with wait and factor is required in options." };
+    const rule = backoff;
+    if (typeof rule.wait !== "number" || !Number.isFinite(rule.wait) || rule.wait <= 0) return { allowed: false, reason: "The reviewed retry backoff wait must be a positive number of milliseconds with no code ceiling." };
+    if (typeof rule.factor !== "number" || !Number.isFinite(rule.factor) || rule.factor < 1) return { allowed: false, reason: "The reviewed retry backoff factor must be one or greater with no code ceiling." };
+    if (options.attempts !== void 0 && (typeof options.attempts !== "number" || !Number.isInteger(options.attempts) || options.attempts < 1)) return { allowed: false, reason: "The reviewed retry attempts must be a positive integer with no code ceiling." };
+  }
+  if (kind === "runwizard" && options.steps !== void 0 && (typeof options.steps !== "number" || !Number.isInteger(options.steps) || options.steps < 1)) return { allowed: false, reason: "The reviewed wizard step count must be a positive integer with no code ceiling." };
+  if (kind === "selectchain") {
+    if (!isnonempty(options.child)) return { allowed: false, reason: "A reviewed child selector of the dependent control is required in options." };
+    if (!nonnegativeoption(options, "wait")) return { allowed: false, reason: "The reviewed dependent wait must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "picktypeahead") {
+    if (!isnonempty(options.pick)) return { allowed: false, reason: "A reviewed suggestion entry to pick is required in options." };
+    if (!nonnegativeoption(options, "timeout")) return { allowed: false, reason: "The reviewed typeahead timeout must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "pickdate" && !/^\d{4}-\d{2}-\d{2}$/.test(step.value ?? "")) return { allowed: false, reason: "The reviewed date must use the yyyy-mm-dd form." };
+  if (kind === "fillcard") {
+    const segmentcheck = validatecardsegments(options.segments);
+    if (!segmentcheck.allowed) return segmentcheck;
+    if (!nonnegativeoption(options, "pause")) return { allowed: false, reason: "The reviewed card typing pause must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "fillcode" && !isnonempty(options.source)) return { allowed: false, reason: "A reviewed one time code source is required in options." };
+  if (kind === "consentpassword" && !isnonempty(options.consentref)) return { allowed: false, reason: "A reviewed consent ref is required in options before any password is filled." };
+  return { allowed: true };
+}
+function submitreviewgranted(steps, submitid) {
+  const position = steps.findIndex((candidate) => candidate.id === submitid);
+  const asked = steps.some((candidate, index) => candidate.kind === "asksubmit" && (position === -1 || index < position));
+  return asked ? { allowed: true } : { allowed: false, reason: "Form submission requires an asksubmit review step before it." };
+}
+function passwordconsentgranted(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const consentref = options.consentref;
+  if (typeof consentref !== "string" || !consentref.trim()) return { allowed: false, reason: "A password fill requires a reviewed consent ref in options." };
+  return { allowed: true };
+}
+function luhnvalid(digits) {
+  let sum = 0;
+  let double = false;
+  for (let index = digits.length - 1; index >= 0; index -= 1) {
+    let value = Number.parseInt(digits[index] ?? "", 10);
+    if (!Number.isFinite(value)) return false;
+    if (double) {
+      value *= 2;
+      if (value > 9) value -= 9;
+    }
+    sum += value;
+    double = !double;
+  }
+  return sum % 10 === 0;
+}
+function generatedvalueallowed(value) {
+  const compact = value.replace(/[\s-]/g, "");
+  if (/^\d{13,19}$/.test(compact) && luhnvalid(compact) && !compact.startsWith("4111")) return { allowed: false, reason: "The generated value looks like a real card number and is refused; generated card values use the 4111 test prefix." };
+  if (/^\d{3}-\d{2}-\d{4}$/.test(value.trim())) return { allowed: false, reason: "The generated value looks like a personal identifier and is refused." };
+  return { allowed: true };
+}
+function profilegrantgranted(profile, origin) {
+  if (!profile.grants.includes(origin)) return { allowed: false, reason: `The saved profile ${profile.name} is not granted to ${origin}; add the origin to the profile grants first.` };
+  return { allowed: true };
+}
 function layoutmutationgranted(session, now) {
   if (!session || session.stoppedat || session.expiresat <= now) return { allowed: false, reason: "Group and layout mutations stay inside the active session." };
   return { allowed: true };
@@ -969,6 +1197,10 @@ function validatestep(step, origin) {
     const tabscheck = validatetabsgrammar(step, options);
     if (!tabscheck.allowed) return tabscheck;
   }
+  if (isformkind(step.kind)) {
+    const formcheck = validateformgrammar(step, options);
+    if (!formcheck.allowed) return formcheck;
+  }
   if (step.kind === "tabcreate") {
     if (options.background !== void 0 && typeof options.background !== "boolean") return { allowed: false, reason: "The reviewed background flag must be a boolean." };
     if (options.window !== void 0 && (typeof options.window !== "number" || !Number.isInteger(options.window) || options.window < 0)) return { allowed: false, reason: "The reviewed target window id must be a non-negative integer." };
@@ -1010,6 +1242,15 @@ function canexecute(input) {
     }
   }
   if (islayoutkind(input.step.kind) && !layoutmutationgranted(input.session, now).allowed) return { allowed: false, reason: "Group and layout mutations stay inside the active session." };
+  if (input.step.kind === "submitform" || input.step.kind === "retryform") {
+    if (!input.plan) return { allowed: false, reason: "Form submission requires an asksubmit review step before it." };
+    const reviewgate = submitreviewgranted(input.plan.steps, input.step.id);
+    if (!reviewgate.allowed) return reviewgate;
+  }
+  if (input.step.kind === "consentpassword") {
+    const consentgate = passwordconsentgranted(input.step);
+    if (!consentgate.allowed) return consentgate;
+  }
   if (input.step.kind === "openlink" || input.step.kind === "openprivate" || input.step.kind === "batchopen" || input.step.kind === "prefetch" || input.step.kind === "deeplink" || input.step.kind === "reopentab") {
     let options = {};
     try {
@@ -1091,9 +1332,20 @@ function tasktabs(progress, planid) {
   if (!progress || progress.planid !== planid) return [];
   return progress.tasktabs ?? [];
 }
+function wizardcompletion(state) {
+  if (state.steps <= 0) return 0;
+  return Math.min(1, state.completed.filter(Boolean).length / state.steps);
+}
+function recordwizardstep(progress, planid, stepid, state, now) {
+  const base = progress && progress.planid === planid ? progress : emptyprogress(planid, now);
+  const executed = Math.min(state.index, state.steps);
+  const done = executed >= state.steps;
+  const outcome = { stepid, ok: done, summary: `Wizard step ${executed} of ${state.steps} ${done ? "completed the wizard" : "executed"}.`, details: { wizard: { index: state.index, steps: state.steps, completed: [...state.completed] } }, at: now };
+  return recordoutcome(base, planid, outcome, now);
+}
 
 // version.ts
-var packageversion = "1.1.36";
+var packageversion = "1.1.37";
 
 // types.ts
 var protocolversion = packageversion;
@@ -1134,6 +1386,11 @@ function parseproposal(value, origin) {
     const options = parseoptions(step);
     if (typeof options.stepid === "string" && !steps.some((candidate) => candidate.id === options.stepid)) throw new Error("A retry or frame wrapper references an unknown step id.");
   }
+  for (const step of steps) {
+    if (step.kind !== "submitform" && step.kind !== "retryform") continue;
+    const review = submitreviewgranted(steps, step.id);
+    if (!review.allowed) throw new Error(review.reason);
+  }
   const createdat = Date.now();
   const expiresat = typeof planinput.expiresat === "number" ? planinput.expiresat : createdat + 10 * 60 * 1e3;
   const plan = {
@@ -1185,6 +1442,15 @@ function safetyresponse(input) {
 function layoutreport(input) {
   return { version: protocolversion, layouts: input.layouts };
 }
+function formreportresponse(input) {
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, report: input.report });
+}
+function errorreportresponse(input) {
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, report: input.report });
+}
+function wizardreport(input) {
+  return { version: protocolversion, ...input.sessionid ? { sessionid: input.sessionid } : {}, wizards: input.wizards, picks: input.picks };
+}
 
 // extension/browsertabs.ts
 var browserkinds = /* @__PURE__ */ new Set(["tablist", "tabcreate", "tabactivate", "tabclose", "tabreload", "tabsnapshot", "windowlist", "windowcreate", "windowclose", "zoomset", "windowresize", "downloadfile"]);
@@ -1840,6 +2106,113 @@ function authfor(auths, url) {
   return auths.find((record2) => record2.origin === origin);
 }
 
+// extension/pageforms.ts
+var firstnames = { en: ["alex", "jordan", "taylor", "morgan", "casey"], pt: ["ana", "bruno", "carla", "diego", "helena"] };
+var lastnames = { en: ["brooks", "carter", "diaz", "evans", "reyes"], pt: ["alves", "costa", "lima", "souza", "moraes"] };
+function localekey(locale) {
+  const normalized = locale.toLowerCase();
+  if (normalized.startsWith("pt")) return "pt";
+  return "en";
+}
+function generatevalue(kind, rule) {
+  const seed = typeof rule.seed === "number" && Number.isFinite(rule.seed) ? Math.abs(Math.floor(rule.seed)) : 1;
+  const names = firstnames[localekey(rule.locale ?? "en")] ?? firstnames.en ?? ["alex"];
+  const surnames = lastnames[localekey(rule.locale ?? "en")] ?? lastnames.en ?? ["brooks"];
+  let state = seed * 1103515245 + 12345;
+  const next = () => {
+    state = (state * 1103515245 + 12345) % 2147483648;
+    return state / 2147483648;
+  };
+  const pick = (items) => items[Math.floor(next() * items.length) % items.length] ?? items[0];
+  const digits = (count) => Array.from({ length: count }, () => String(Math.floor(next() * 10))).join("");
+  const person = `${pick(names)} ${pick(surnames)}`;
+  switch (kind) {
+    case "email":
+      return `${person.replace(" ", ".")}${digits(2)}@example.com`;
+    case "phone":
+      return localekey(rule.locale ?? "en") === "pt" ? `+55 (11) 9${digits(4)}-${digits(4)}` : `+1 (555) 010-${digits(4)}`;
+    case "date":
+      return `${2024 + Math.floor(next() * 2)}-${String(1 + Math.floor(next() * 12)).padStart(2, "0")}-${String(1 + Math.floor(next() * 28)).padStart(2, "0")}`;
+    case "number":
+      return String(Math.floor(next() * 1e3));
+    case "select":
+      return `option ${1 + Math.floor(next() * 5)}`;
+    case "check":
+      return next() > 0.5 ? "true" : "false";
+    case "radio":
+      return `choice ${1 + Math.floor(next() * 4)}`;
+    case "file":
+      return `sample${digits(2)}.pdf`;
+    case "password":
+      return `pw-${digits(6)}-${pick(names)}`;
+    case "card":
+      return `4111 ${digits(4)} ${digits(4)} ${digits(4)}`;
+    case "code":
+      return digits(6);
+    default:
+      return person;
+  }
+}
+function valueshash(values) {
+  const source = values.map((entry) => `${entry.label}=${entry.value}`).join("|");
+  let hash = 5381;
+  for (let index = 0; index < source.length; index += 1) hash = (hash * 33 ^ source.charCodeAt(index)) >>> 0;
+  return hash.toString(16);
+}
+function parseformrecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const record2 = value;
+  if (!Array.isArray(record2.entries)) return null;
+  const entries = [];
+  for (const item of record2.entries) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) continue;
+    const entry = item;
+    const match = entry.match;
+    if (!match || typeof match !== "object" || Array.isArray(match)) continue;
+    const shapes = match;
+    if (typeof shapes.mode !== "string") continue;
+    const fieldmatch = {
+      mode: shapes.mode,
+      ...typeof shapes.label === "string" ? { label: shapes.label } : {},
+      ...typeof shapes.placeholder === "string" ? { placeholder: shapes.placeholder } : {},
+      ...typeof shapes.arialabel === "string" ? { arialabel: shapes.arialabel } : {},
+      ...typeof shapes.name === "string" ? { name: shapes.name } : {}
+    };
+    if (typeof entry.kind !== "string" || typeof entry.value !== "string") continue;
+    entries.push({ match: fieldmatch, kind: entry.kind, value: entry.value });
+  }
+  if (entries.length === 0) return null;
+  return { ...typeof record2.form === "string" && record2.form ? { form: record2.form } : {}, entries };
+}
+
+// extension/pagewizards.ts
+function parsebackoff(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const backoff = options.backoff;
+  if (!backoff || typeof backoff !== "object" || Array.isArray(backoff)) return null;
+  const rule = backoff;
+  const wait = rule.wait;
+  const factor = rule.factor;
+  if (typeof wait !== "number" || !Number.isFinite(wait) || wait <= 0) return null;
+  if (typeof factor !== "number" || !Number.isFinite(factor) || factor < 1) return null;
+  const attempts = typeof options.attempts === "number" && Number.isInteger(options.attempts) && options.attempts >= 1 ? options.attempts : 2;
+  return { attempts, wait, factor };
+}
+function backoffwaits(attempts, wait, factor) {
+  const windows = [];
+  let current = wait;
+  for (let index = 1; index < attempts; index += 1) {
+    windows.push(current);
+    current *= factor;
+  }
+  return windows;
+}
+
 // extension/background.ts
 var sessionduration = 15 * 60 * 1e3;
 var freshcheckkinds = /* @__PURE__ */ new Set(["focus", "inspect", "click", "type", "scroll", "select", "hover"]);
@@ -1849,6 +2222,7 @@ var observationstepkinds = /* @__PURE__ */ new Set(["a11ytree", "readvisible", "
 var navigationstepkinds = /* @__PURE__ */ new Set(["openlink", "openprivate", "reloadcache", "stopnav", "waitload", "waiturl", "followlink", "spanav", "spawait", "rewritequery", "setfragment", "navlist", "navprofile", "detecthttp", "readredirects", "readfinalurl", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "trailaudit", "pausenav", "navintent", "navrate", "openclipboard", "checksafe", "batchopen"]);
 var pausenavkinds = /* @__PURE__ */ new Set(["openlink", "openprivate", "followlink", "spanav", "navlist", "openclipboard", "batchopen", "prefetch", "preconnect", "deeplink", "reopentab"]);
 var ratecheckedkinds = /* @__PURE__ */ new Set(["openlink", "openprivate", "followlink", "spanav", "navlist", "openclipboard", "batchopen", "deeplink", "reopentab"]);
+var formfillkinds = /* @__PURE__ */ new Set(["fillform", "filllabel", "fillplaceholder", "fillcard", "fillcode", "attachfile", "saveprofiles", "runwizard", "selectchain", "picktypeahead", "pickdate"]);
 var evidencepoll = 100;
 var evidencesettle = 5e3;
 var chromestorage = {
@@ -2025,7 +2399,11 @@ function stepauditkind(step, ok) {
   }
   if (step.kind === "dismissdialog") return "dialog";
   if (step.kind === "keyhold" || step.kind === "keyrelease") return "hold";
-  if (step.kind === "retryaction") return "retry";
+  if (step.kind === "retryaction" || step.kind === "retryform") return "retry";
+  if (step.kind === "submitform" || step.kind === "asksubmit") return "submit";
+  if (step.kind === "consentpassword") return "consent";
+  if (step.kind === "handoffcaptcha") return "handoff";
+  if (formfillkinds.has(step.kind)) return "fill";
   if (pointerkinds.has(step.kind)) return "pointer";
   if (watchstepkinds.has(step.kind)) return "watch";
   if (step.kind === "diffsnapshots") return "diff";
@@ -3067,6 +3445,146 @@ async function executetabscommand(step, session, plan, sessiontabid) {
       return { ok: false, summary: "Unsupported tabs and windows command." };
   }
 }
+async function executesaveprofiles(step, session, origin) {
+  const options = stepoptions2(step);
+  const record2 = parseformrecord(options.formrecord);
+  const name = typeof options.name === "string" ? options.name : "";
+  if (!name || !record2) throw new Error("A reviewed profile name and form record are required.");
+  const grants = session?.grants ?? (session ? [session.origin] : [origin]);
+  const profile = { name, fields: record2.entries, grants, savedat: Date.now() };
+  await memory.setprofile(profile);
+  await audit("fill", `Form profile ${name} stored locally with ${profile.fields.length} field entries behind the origin grants of ${grants.join(", ")}; password entries are refused.`, { ...session ? { sessionid: session.id } : {} });
+  return { ok: true, summary: `Stored the form profile ${name} locally with ${profile.fields.length} field entries.`, details: { profile: { name: profile.name, fields: profile.fields.length, grants: profile.grants } } };
+}
+async function executeasksubmit(step, session, plan, tabid2, origin) {
+  const output = await dispatchpagestep(step, tabid2, origin, plan);
+  const values = Array.isArray(output?.details?.values) ? output?.details?.values : [];
+  const ticket = { id: randomid(), form: step.value ?? "", valueshash: valueshash(values), consentref: step.id, at: Date.now() };
+  await memory.setticket(ticket);
+  await audit("submit", `Asksubmit prompt opened for form ${ticket.form || "the reviewed form"} with the values hash ${ticket.valueshash}; the submission waits for the user approval.`, { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id });
+  await refreshbadge();
+  return { ok: true, summary: `Asksubmit prompt opened for form ${ticket.form || "the reviewed form"}; the submission waits for your approval.`, details: { ticket, values } };
+}
+async function executesubmitform(step, session, plan, tabid2, origin) {
+  const consentref = typeof stepoptions2(step).consentref === "string" ? stepoptions2(step).consentref : "";
+  const ticket = (await memory.gettickets()).find((item) => item.approved === true && (item.consentref === consentref || item.id === consentref));
+  if (!ticket) throw new Error("No approved asksubmit ticket matches the reviewed consent ref; approve the submission in the review panel first.");
+  const output = await dispatchpagestep(step, tabid2, origin, plan) ?? { ok: false, summary: "The form submission returned no result." };
+  await audit("submit", `Form ${ticket.form || "the reviewed form"} submitted through its owning form under ticket ${ticket.id} with values hash ${ticket.valueshash} and outcome ${output.ok ? "delivered" : "refused"}.`, { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id });
+  return { ...output, details: { ...output.details ?? {}, ticket: { id: ticket.id, valueshash: ticket.valueshash, consentref: ticket.consentref } } };
+}
+async function executeretryform(step, session, plan, tabid2, origin) {
+  const rule = parsebackoff(step);
+  if (!rule) throw new Error("A reviewed backoff rule with wait and factor is required.");
+  const windows = backoffwaits(rule.attempts, rule.wait, rule.factor);
+  let attempts = 0;
+  let output;
+  while (attempts < rule.attempts) {
+    attempts += 1;
+    output = await dispatchpagestep(step, tabid2, origin, plan) ?? { ok: false, summary: "The retried submission returned no result." };
+    if (output.ok) break;
+    const waitwindow = windows[attempts - 1];
+    if (waitwindow !== void 0 && attempts < rule.attempts) await new Promise((resolve) => setTimeout(resolve, waitwindow));
+  }
+  await audit("retry", `Form submission retried ${attempts} time${attempts === 1 ? "" : "s"} with the reviewed backoff windows ${windows.join(", ") || "none"} milliseconds; outcome ${output?.ok ? "delivered" : "refused"}.`, { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id });
+  return { ok: Boolean(output?.ok), summary: output?.summary ?? "The retried submission returned no result.", details: { attempts, windows, ok: Boolean(output?.ok) } };
+}
+async function executeconsentpassword(step, session, plan, tabid2, origin) {
+  const consentref = typeof stepoptions2(step).consentref === "string" ? stepoptions2(step).consentref : "";
+  const gate = passwordconsentgranted(step);
+  if (!gate.allowed) throw new Error(gate.reason ?? "A password fill requires a reviewed consent ref.");
+  const output = await dispatchpagestep(step, tabid2, origin, plan);
+  await audit("consent", `Password field filled after the explicit consent ref ${consentref}; the value never appears in the audit trail.`, { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id });
+  return output ?? { ok: false, summary: "The password fill returned no result." };
+}
+async function executeattachfile(step, session, plan, tabid2, origin) {
+  const name = step.value ?? "";
+  const artifacts = await memory.getartifacts();
+  const artifact = artifacts.find((item) => item.name === name || item.id === name);
+  if (!artifact) throw new Error(`No generated artifact named ${name} exists in the run store yet.`);
+  const derived = { ...step, options: JSON.stringify({ ...stepoptions2(step), artifact: artifact.id, artifactname: artifact.name }) };
+  const output = await dispatchpagestep(derived, tabid2, origin, plan);
+  await audit("fill", `Artifact ${artifact.name} of kind ${artifact.kind} attached to the reviewed file input inside the form submission.`, { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id });
+  return { ...output ?? { ok: false, summary: "The artifact attachment returned no result." }, details: { ...output?.details ?? {}, artifact } };
+}
+async function executecaptchahandoff(step, session, plan, tabid2, origin) {
+  const output = await dispatchpagestep(step, tabid2, origin, plan) ?? { ok: false, summary: "The captcha probe returned no result." };
+  if (output.details?.captcha !== true) return { ok: true, summary: "No captcha was detected; the plan continues.", details: { captcha: false } };
+  const handoff = { id: randomid(), origin, resolved: false, openedat: Date.now() };
+  await memory.addcaptcha(handoff);
+  if (session && !session.pausedat && !session.stoppedat) await memory.setsession({ ...session, pausedat: Date.now() });
+  await audit("handoff", `Captcha detected on ${origin}; control handed back to the user and the plan pauses until the handoff ${handoff.id} resolves.`, { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id });
+  await refreshbadge();
+  return { ok: true, summary: "Captcha detected; control is yours and the plan waits until you resolve the handoff.", details: { captcha: true, handoff } };
+}
+async function executeformstep(step, session, plan, tabid2, origin) {
+  switch (step.kind) {
+    case "saveprofiles":
+      return executesaveprofiles(step, session, origin);
+    case "asksubmit":
+      return executeasksubmit(step, session, plan, tabid2, origin);
+    case "submitform":
+      return executesubmitform(step, session, plan, tabid2, origin);
+    case "retryform":
+      return executeretryform(step, session, plan, tabid2, origin);
+    case "consentpassword":
+      return executeconsentpassword(step, session, plan, tabid2, origin);
+    case "attachfile":
+      return executeattachfile(step, session, plan, tabid2, origin);
+    case "handoffcaptcha":
+      return executecaptchahandoff(step, session, plan, tabid2, origin);
+    case "fillcode": {
+      const stored = await memory.getcodevalue();
+      const source = typeof stepoptions2(step).source === "string" ? stepoptions2(step).source : "";
+      const derived = stored !== void 0 && source === "reviewed" ? { ...step, value: stored } : step;
+      const output = await dispatchpagestep(derived, tabid2, origin, plan);
+      await audit("fill", `One time code typed from the reviewed source ${source}${stored !== void 0 ? " through the consent gated code entry" : ""}.`, { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id });
+      return output ?? { ok: false, summary: "The one time code fill returned no result." };
+    }
+    default: {
+      const output = await dispatchpagestep(step, tabid2, origin, plan);
+      const extra = { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id };
+      if (step.kind === "runwizard" && output?.details?.wizard && typeof output.details.wizard === "object") {
+        const state = output.details.wizard;
+        await memory.addwizard(state);
+        await memory.setprogress(recordwizardstep(await memory.getprogress(), plan.id, step.id, state, Date.now()));
+        await audit("fill", `Wizard advanced to step ${Math.min(state.index, state.steps)} of ${state.steps} with a completion share of ${Math.round(wizardcompletion(state) * 100)} percent.`, extra);
+      }
+      if (step.kind === "picktypeahead" && typeof output?.details?.pick === "string") {
+        const pick = { field: step.target ?? "", query: step.value ?? "", pick: output.details.pick, at: Date.now() };
+        await memory.addpick(pick);
+      }
+      if (step.kind === "readerrors" && Array.isArray(output?.details?.errors)) {
+        const report = { form: step.target ?? "", errors: output?.details?.errors, at: Date.now() };
+        await memory.adderrorreport(report);
+        await audit("fill", `Collected ${report.errors.length} inline validation message${report.errors.length === 1 ? "" : "s"} for the correction loop.`, extra);
+      }
+      if ((step.kind === "detectlogin" || step.kind === "detecttemplate") && output?.ok) {
+        const detected = step.kind === "detectlogin" ? output.details?.login === true : output.details?.template === "signup" || output.details?.template === "checkout";
+        if (detected) {
+          const kind = step.kind === "detectlogin" ? "login" : output.details?.template === "checkout" ? "checkout" : "signup";
+          const markers = Array.isArray(output.details?.markers) ? output.details?.markers : [];
+          const record2 = { origin, kind, markers, at: Date.now() };
+          await memory.adddetection(record2);
+          await audit("fill", `${kind} shape detected on ${origin} with markers ${markers.join(", ") || "none"}; sensitive work stays behind the consent gates.`, extra);
+        }
+      }
+      if (step.kind === "skiphoneypot" && Array.isArray(output?.details?.skipped)) {
+        await audit("fill", `Honeypot survey flagged ${output.details.skipped.length} field${output.details.skipped.length === 1 ? "" : "s"} as skipped so fills never trip them.`, extra);
+      }
+      if (step.kind === "fillform" || step.kind === "filllabel" || step.kind === "fillplaceholder") {
+        const filled = typeof output?.details?.filled === "number" ? output.details.filled : 0;
+        const skipped = Array.isArray(output?.details?.skipped) ? output.details.skipped.length : 0;
+        await audit("fill", `Filled ${filled} reviewed field${filled === 1 ? "" : "s"}${skipped > 0 ? ` and skipped ${skipped} honeypot field${skipped === 1 ? "" : "s"}` : ""}.`, extra);
+      }
+      if (step.kind === "generatevalues") {
+        const count = Array.isArray(output?.details?.values) ? output.details.values.length : 0;
+        await audit("fill", `Generated ${count} realistic value${count === 1 ? "" : "s"} with the reviewed seed and locale; real looking card numbers and personal identifiers are refused.`, extra);
+      }
+      return output ?? { ok: false, summary: "The forms and data step returned no result." };
+    }
+  }
+}
 async function enforcewindowreview(step, session, plan) {
   const windowid = step.value && /^\d+$/.test(step.value) ? Number.parseInt(step.value, 10) : 0;
   const progress = plan ? await memory.getprogress() : void 0;
@@ -3101,8 +3619,9 @@ async function togglecontroltab(enabled) {
 async function refreshbadge() {
   const queues = await memory.getnavqueues();
   const badges = await memory.getbadges();
+  const prompts = (await memory.gettickets()).filter((ticket) => ticket.approved === void 0).length;
   const tasktabs2 = new Set(badges.map((badge) => badge.tabid)).size;
-  const total = (queues?.prefetch ?? 0) + (queues?.batchopen ?? 0) + tasktabs2;
+  const total = (queues?.prefetch ?? 0) + (queues?.batchopen ?? 0) + tasktabs2 + prompts;
   await chrome.action.setBadgeText({ text: total > 0 ? String(total) : "" }).catch(() => {
   });
 }
@@ -3126,6 +3645,8 @@ async function executestep(stepid) {
   }
   if (istabscommandkind(step.kind)) {
     output = await executetabscommand(step, session, plan, tab.id);
+  } else if (isformkind(step.kind)) {
+    output = await executeformstep(step, session, plan, tab.id, origin);
   } else if (isbrowserkind(step.kind)) {
     output = await runbrowseraction(step, tab.id, tab.windowId ?? chrome.windows.WINDOW_ID_CURRENT);
   } else if (step.kind === "keyhold") {
@@ -3275,13 +3796,21 @@ async function handlerequest(message, sender) {
       const closedtabs = await memory.getclosedtabs();
       const controltab = await memory.getcontroltab();
       const tabwatchevents = await memory.gettabwatchevents();
+      const profiles = await memory.getprofiles();
+      const tickets = await memory.gettickets();
+      const wizards = await memory.getwizards();
+      const picks = await memory.getpicks();
+      const errorreports = await memory.geterrorreports();
+      const captchas = await memory.getcaptchas();
+      const detections = await memory.getdetections();
+      const codeentry = await memory.getcodevalue();
       const clones = clonetabs(tabs);
       const taskgauge = tasktabgauge(tabs.filter((tab) => badges.some((badge) => badge.tabid === tab.tabid)).length, tasktabceiling(await memory.getsettings()));
       const report = await buildtabreport(tabs);
       const livetab = session ? await chrome.tabs.get(session.tabid).catch(() => void 0) : void 0;
       const waitprofile = session ? waitprofiles.find((record2) => record2.origin === session.origin) : void 0;
       const livestate = { phase: livetab?.status === "loading" ? "loading" : "complete", ...navrecords[0] ? { finalurl: navrecords[0].finalurl, redirects: navrecords[0].chain } : {} };
-      return { config: await memory.getconfig(), session, plan, progress: plan && progress?.planid === plan.id ? progress : void 0, diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit(), capabilities: await refreshcapabilities(), outcomes: await memory.getoutcomes(), holds: heldkeysreport({ tabid: session?.tabid ?? 0, holds }), dialogs: await memory.getdialogs(), retries: await memory.getretries(), ...signals ? { signals: signalsreport({ signals }) } : { signals: signalsreport({}) }, banners: await memory.getbanners(), mutationevents: await memory.getmutationevents(), focusevents: await memory.getfocusevents(), diffs: await memory.getdiffs(), selectors: await memory.getselectors(), ...a11y ? { a11y } : {}, ...reader ? { reader } : {}, ...map ? { map } : {}, trail: trailreport({ ...session ? { sessionid: session.id } : {}, trail }), navrecords, ratestates, safeties, curated, waitprofiles, auths, navcontrol, navqueues, artifacts, navstate: livestate, ...waitprofile ? { waitprofile } : {}, offline: !navigator.onLine, tabs, windows, layouts: layoutreport({ layouts }), tabgroups, tabmetas, badges, snapshots, closedtabs, tabwatchevents, clones, tasktabgauge: taskgauge, ...controltab ? { controltab } : {}, tabreport: report };
+      return { config: await memory.getconfig(), session, plan, progress: plan && progress?.planid === plan.id ? progress : void 0, diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit(), capabilities: await refreshcapabilities(), outcomes: await memory.getoutcomes(), holds: heldkeysreport({ tabid: session?.tabid ?? 0, holds }), dialogs: await memory.getdialogs(), retries: await memory.getretries(), ...signals ? { signals: signalsreport({ signals }) } : { signals: signalsreport({}) }, banners: await memory.getbanners(), mutationevents: await memory.getmutationevents(), focusevents: await memory.getfocusevents(), diffs: await memory.getdiffs(), selectors: await memory.getselectors(), ...a11y ? { a11y } : {}, ...reader ? { reader } : {}, ...map ? { map } : {}, trail: trailreport({ ...session ? { sessionid: session.id } : {}, trail }), navrecords, ratestates, safeties, curated, waitprofiles, auths, navcontrol, navqueues, artifacts, navstate: livestate, ...waitprofile ? { waitprofile } : {}, offline: !navigator.onLine, tabs, windows, layouts: layoutreport({ layouts }), tabgroups, tabmetas, badges, snapshots, closedtabs, tabwatchevents, clones, tasktabgauge: taskgauge, ...controltab ? { controltab } : {}, tabreport: report, profiles, tickets, wizards: wizardreport({ ...session ? { sessionid: session.id } : {}, wizards, picks }), picks, errorreports, captchas, detections, ...codeentry !== void 0 ? { codeentry: true } : {} };
     }
     case "capabilities":
       return refreshcapabilities();
@@ -3477,6 +4006,86 @@ async function handlerequest(message, sender) {
       await audit("window", `The review panel closed window ${inputclose.windowid}${count > 0 ? ` while holding ${count} task tab${count === 1 ? "" : "s"} under explicit review` : ""}.`, { ...session ? { sessionid: session.id } : {} });
       return { windowid: inputclose.windowid, closed: true };
     }
+    case "applyprofile": {
+      const session = await memory.getsession();
+      if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error("Profile application stays inside the consent gate of an active session.");
+      const inputprofile = message;
+      const profile = await memory.getprofile(inputprofile.name ?? "");
+      if (!profile) throw new Error(`No form profile named ${inputprofile.name ?? ""} is stored yet.`);
+      const gate = profilegrantgranted(profile, session.origin);
+      if (!gate.allowed) throw new Error(gate.reason);
+      await audit("fill", `Form profile ${profile.name} applied as the reviewed field map for ${session.origin} under its origin grants.`, { sessionid: session.id });
+      return { profile: { name: profile.name, fields: profile.fields, grants: profile.grants } };
+    }
+    case "approvesubmit": {
+      const inputticket = message;
+      const tickets = await memory.gettickets();
+      const ticket = tickets.find((item) => item.id === inputticket.id);
+      if (!ticket) throw new Error("No submission ticket matches the requested id.");
+      const updated = { ...ticket, approved: inputticket.approved !== false };
+      await memory.setticket(updated);
+      const session = await memory.getsession();
+      await audit("submit", `Submission ticket ${ticket.id} for form ${ticket.form} ${updated.approved ? "approved" : "declined"} by the user with values hash ${ticket.valueshash}.`, { ...session ? { sessionid: session.id } : {} });
+      await refreshbadge();
+      return updated;
+    }
+    case "resolvecaptcha": {
+      const open = (await memory.getcaptchas()).find((item) => !item.resolved);
+      if (!open) throw new Error("No open captcha handoff exists.");
+      await memory.resolvecaptcha(open.id, Date.now());
+      const session = await memory.getsession();
+      if (session?.pausedat && !session.stoppedat) {
+        const resumed = { id: session.id, tabid: session.tabid, origin: session.origin, startedat: session.startedat, expiresat: session.expiresat, ...session.grants ? { grants: session.grants } : {} };
+        await memory.setsession(resumed);
+      }
+      await audit("handoff", `Captcha handoff ${open.id} resolved by the user after ${Date.now() - open.openedat} milliseconds; the plan continues.`, { ...session ? { sessionid: session.id } : {} });
+      await refreshbadge();
+      return { resolved: true, id: open.id };
+    }
+    case "storecode": {
+      const session = await memory.getsession();
+      if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error("The one time code entry stays behind the consent gate of an active session.");
+      const inputcode = message;
+      if (!inputcode.code?.trim()) throw new Error("A non-empty one time code is required.");
+      await memory.setcodevalue(inputcode.code.trim());
+      await audit("consent", `A one time code was stored behind the consent gate of the active session; the value never appears in the audit trail.`, { sessionid: session.id });
+      return { stored: true };
+    }
+    case "regeneratevalue": {
+      const inputvalue = message;
+      if (typeof inputvalue.field !== "string" || !inputvalue.field) throw new Error("A field kind is required to regenerate a value.");
+      const rule = {};
+      if (typeof inputvalue.locale === "string" && inputvalue.locale) rule.locale = inputvalue.locale;
+      if (typeof inputvalue.seed === "number" && Number.isFinite(inputvalue.seed)) rule.seed = inputvalue.seed;
+      const value = generatevalue(inputvalue.field, rule);
+      const verdict = generatedvalueallowed(value);
+      if (!verdict.allowed) throw new Error(verdict.reason ?? "The regenerated value was refused.");
+      return { kind: inputvalue.field, value, locale: rule.locale ?? "en", seed: rule.seed ?? 1 };
+    }
+    case "removeprofile": {
+      const inputprofile = message;
+      const profile = await memory.getprofile(inputprofile.name ?? "");
+      if (!profile) throw new Error(`No form profile named ${inputprofile.name ?? ""} is stored yet.`);
+      await memory.removeprofile(profile.name);
+      const session = await memory.getsession();
+      await audit("fill", `Form profile ${profile.name} removed from local memory by the user.`, { ...session ? { sessionid: session.id } : {} });
+      return { removed: true, name: profile.name };
+    }
+    case "formreport": {
+      const plan = await memory.getplan();
+      if (!plan) throw new Error("No plan is available for a form report envelope.");
+      const outcome = (await memory.getoutcomes()).find((candidate) => plan.steps.some((step) => step.id === candidate.stepid && step.kind === "detectfields"));
+      const report = outcome?.details?.report;
+      if (!report) throw new Error("No form report has been captured yet.");
+      return JSON.parse(formreportresponse({ report, plan }));
+    }
+    case "errorreport": {
+      const plan = await memory.getplan();
+      if (!plan) throw new Error("No plan is available for an error report envelope.");
+      const report = (await memory.geterrorreports())[0];
+      if (!report) throw new Error("No error report has been collected yet.");
+      return JSON.parse(errorreportresponse({ report, plan }));
+    }
     case "stop": {
       const session = await memory.getsession();
       if (session) await memory.setsession({ ...session, stoppedat: Date.now() });