@wenathlan/extension 1.1.36 → 1.1.38

package/dist/index.js

@@ -435,20 +435,208 @@ var sessionmemory = class {
   async setcontroltab(state) {
     return this.adapter.set("controltab", state);
   }
+  /** Stores one saved form profile under its reviewed name, replacing the previous profile of that name. */
+  async setprofile(profile) {
+    const records = (await this.getprofiles()).filter((item) => item.name !== profile.name);
+    await this.adapter.set("formprofiles", [profile, ...records]);
+  }
+  /** Returns one saved form profile by its reviewed name. */
+  async getprofile(name) {
+    return (await this.getprofiles()).find((item) => item.name === name);
+  }
+  /** Returns every saved form profile with its origin grants, newest first. */
+  async getprofiles() {
+    return await this.adapter.get("formprofiles") ?? [];
+  }
+  /** Removes one saved form profile by its reviewed name. */
+  async removeprofile(name) {
+    const records = (await this.getprofiles()).filter((item) => item.name !== name);
+    await this.adapter.set("formprofiles", records);
+  }
+  /** Records one wizard state with its step history. */
+  async addwizard(state) {
+    const records = await this.getwizards();
+    await this.adapter.set("wizards", [state, ...records]);
+  }
+  /** Returns every stored wizard state with its step history, newest first. */
+  async getwizards() {
+    return await this.adapter.get("wizards") ?? [];
+  }
+  /** Stores one submission ticket with its values hash, replacing the previous ticket of that id. */
+  async setticket(ticket) {
+    const records = (await this.gettickets()).filter((item) => item.id !== ticket.id);
+    await this.adapter.set("submittickets", [ticket, ...records]);
+  }
+  /** Returns every stored submission ticket with its values hash, newest first. */
+  async gettickets() {
+    return await this.adapter.get("submittickets") ?? [];
+  }
+  /** Records one collected error report for correction loops. */
+  async adderrorreport(report) {
+    const records = await this.geterrorreports();
+    await this.adapter.set("errorreports", [report, ...records]);
+  }
+  /** Returns every stored error report, newest first. */
+  async geterrorreports() {
+    return await this.adapter.get("errorreports") ?? [];
+  }
+  /** Records one typeahead pick observed when a reviewed suggestion entry was chosen. */
+  async addpick(pick) {
+    const records = await this.getpicks();
+    await this.adapter.set("typeaheadpicks", [pick, ...records]);
+  }
+  /** Returns every recorded typeahead pick, newest first. */
+  async getpicks() {
+    return await this.adapter.get("typeaheadpicks") ?? [];
+  }
+  /** Records one captcha handoff while the plan waits for the user. */
+  async addcaptcha(handoff) {
+    const records = await this.getcaptchas();
+    await this.adapter.set("captchas", [handoff, ...records]);
+  }
+  /** Returns every captcha handoff record with its resolution state, newest first. */
+  async getcaptchas() {
+    return await this.adapter.get("captchas") ?? [];
+  }
+  /** Resolves one captcha handoff by id once the user finished it. */
+  async resolvecaptcha(id, resolvedat) {
+    const records = await this.getcaptchas();
+    await this.adapter.set("captchas", records.map((handoff) => handoff.id === id && !handoff.resolved ? { ...handoff, resolved: true, resolvedat } : handoff));
+  }
+  /** Records one login or template detection for its origin. */
+  async adddetection(record2) {
+    const records = await this.getdetections();
+    await this.adapter.set("detections", [record2, ...records]);
+  }
+  /** Returns every stored login and template detection per origin, newest first. */
+  async getdetections() {
+    return await this.adapter.get("detections") ?? [];
+  }
+  /** Stores the reviewed one time code behind the consent gate of an active session. */
+  async setcodevalue(value) {
+    return this.adapter.set("codevalue", value);
+  }
+  /** Returns the reviewed one time code, if the user stored one behind the consent gate. */
+  async getcodevalue() {
+    return this.adapter.get("codevalue");
+  }
+  /** Stores one dataset with its column specs and rows, replacing the previous record of that id. */
+  async setdataset(value) {
+    await this.adapter.set(`dataset${value.id}`, value);
+    const ids = (await this.adapter.get("datasets") ?? []).filter((id) => id !== value.id);
+    await this.adapter.set("datasets", [value.id, ...ids]);
+  }
+  /** Returns one stored dataset by its id with its column specs and row count. */
+  async getdataset(id) {
+    return this.adapter.get(`dataset${id}`);
+  }
+  /** Returns every stored dataset id, newest first. */
+  async getdatasets() {
+    const ids = await this.adapter.get("datasets") ?? [];
+    const records = [];
+    for (const id of ids) {
+      const record2 = await this.adapter.get(`dataset${id}`);
+      if (record2) records.push(record2);
+    }
+    return records;
+  }
+  /** Stores one imported csv dataset for fill loops beside the dataset store. */
+  async addimport(value) {
+    await this.setdataset(value);
+    const ids = (await this.adapter.get("imports") ?? []).filter((id) => id !== value.id);
+    await this.adapter.set("imports", [value.id, ...ids]);
+  }
+  /** Returns every imported csv dataset for fill loops, newest first. */
+  async getimports() {
+    const ids = await this.adapter.get("imports") ?? [];
+    const records = [];
+    for (const id of ids) {
+      const record2 = await this.adapter.get(`dataset${id}`);
+      if (record2) records.push(record2);
+    }
+    return records;
+  }
+  /** Stores one extraction session with its cursor and page history, replacing the previous session of that id. */
+  async setextractsession(value) {
+    await this.adapter.set(`extract${value.id}`, value);
+    const ids = (await this.adapter.get("extracts") ?? []).filter((id) => id !== value.id);
+    await this.adapter.set("extracts", [value.id, ...ids]);
+  }
+  /** Returns every extraction session with its cursor and page history, newest first. */
+  async getextractsessions() {
+    const ids = await this.adapter.get("extracts") ?? [];
+    const records = [];
+    for (const id of ids) {
+      const record2 = await this.adapter.get(`extract${id}`);
+      if (record2) records.push(record2);
+    }
+    return records;
+  }
+  /** Records one provenance record of an exported artifact. */
+  async addprovenance(record2) {
+    const records = await this.getprovenances();
+    await this.adapter.set("provenances", [record2, ...records]);
+  }
+  /** Returns every provenance record per exported artifact, newest first. */
+  async getprovenances() {
+    return await this.adapter.get("provenances") ?? [];
+  }
+  /** Stores the transform rules and dedupe keys of one task, replacing the previous record of that task. */
+  async settaskrules(value) {
+    const records = (await this.adapter.get("taskrules") ?? []).filter((item) => item.taskid !== value.taskid);
+    await this.adapter.set("taskrules", [value, ...records]);
+  }
+  /** Returns the transform rules and dedupe keys per task, newest first. */
+  async gettaskrules() {
+    return await this.adapter.get("taskrules") ?? [];
+  }
+  /** Stores one stream chunk state for resume, replacing the previous state of that dataset. */
+  async setstream(state) {
+    const records = (await this.adapter.get("streams") ?? []).filter((item) => item.datasetid !== state.datasetid);
+    await this.adapter.set("streams", [state, ...records]);
+  }
+  /** Returns every stream chunk state persisted for resume, newest first. */
+  async getstreams() {
+    return await this.adapter.get("streams") ?? [];
+  }
+  /** Stores one reviewed sheet endpoint config behind its origin grant, replacing the previous config of that origin. */
+  async setsheetendpoint(config) {
+    const records = (await this.adapter.get("sheetendpoints") ?? []).filter((item) => item.origin !== config.origin);
+    await this.adapter.set("sheetendpoints", [config, ...records]);
+  }
+  /** Returns every reviewed sheet endpoint config, newest first. */
+  async getsheetendpoints() {
+    return await this.adapter.get("sheetendpoints") ?? [];
+  }
+  /** Records one exported data artifact; artifact retention is a user setting and an absent setting keeps every artifact. */
+  async addexport(artifact) {
+    const records = await this.getexports();
+    const combined = [artifact, ...records.filter((item) => item.id !== artifact.id)];
+    const retention = (await this.getsettings())?.artifactretention;
+    await this.adapter.set("exports", retention === void 0 ? combined : combined.slice(0, retention));
+  }
+  /** Returns every exported data artifact with its content and checksum, newest first. */
+  async getexports() {
+    return await this.adapter.get("exports") ?? [];
+  }
 };
 function randomid() {
   return crypto.randomUUID();
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
 var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus", "watchtab"]);
-var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection"]);
-var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav", "duplicatetab", "pintab", "mutetab", "movetab", "movetabwindow", "searchtabs", "badgetab", "attachmeta", "focuswindow", "maximizewindow", "minimizewindow", "restorewindow", "incognitowindow"]);
+var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "scrapetable", "paginateextract"]);
+var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav", "duplicatetab", "pintab", "mutetab", "movetab", "movetabwindow", "searchtabs", "badgetab", "attachmeta", "focuswindow", "maximizewindow", "minimizewindow", "restorewindow", "incognitowindow", "asksubmit", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword"]);
 var tabscommandactions = /* @__PURE__ */ new Set(["querytabs", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "watchtab", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "savelayout", "restorelayout", "findclones", "searchtabs", "badgetab", "attachmeta", "listaudio", "reopenrun", "snapshotsession"]);
+var formactions = /* @__PURE__ */ new Set(["fillform", "filllabel", "fillplaceholder", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "submitform", "readerrors", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "handoffcaptcha", "fillcard", "fillcode", "consentpassword", "skiphoneypot", "detectlogin", "detecttemplate"]);
+var datasetactions = /* @__PURE__ */ new Set(["scrapetable", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "importcsv", "looprows", "transformvalues", "deduperows", "paginateextract", "mergepages", "stamplerows", "previewgrid", "streamdisk", "resumeextract", "logprovenance"]);
+var exportactions = /* @__PURE__ */ new Set(["exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk"]);
+var fieldkinds = ["text", "email", "phone", "date", "number", "select", "check", "radio", "file", "password", "card", "code"];
 var layoutmutationactions = /* @__PURE__ */ new Set(["grouptabs", "colorgroup", "collapsegroup", "savelayout", "restorelayout"]);
 var groupcolors = ["grey", "blue", "red", "yellow", "green", "pink", "purple", "cyan", "orange"];
 function normalizeendpoint(value) {
@@ -492,6 +680,240 @@ function istabscommandkind(kind) {
 function islayoutkind(kind) {
   return layoutmutationactions.has(kind);
 }
+function isformkind(kind) {
+  return formactions.has(kind);
+}
+function isdatasetkind(kind) {
+  return datasetactions.has(kind);
+}
+function isexportkind(kind) {
+  return exportactions.has(kind);
+}
+function exportgranted(session, origin) {
+  if (!origingranted(session, origin)) return { allowed: false, reason: `The export of extracted data from ${origin} needs the session origin grants before it leaves local memory.` };
+  return { allowed: true };
+}
+function validatefieldmatch(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed field match is required in options." };
+  const match = value;
+  if (match.mode !== "label" && match.mode !== "placeholder" && match.mode !== "arialabel" && match.mode !== "name") return { allowed: false, reason: "The reviewed field match mode must be label, placeholder, arialabel or name." };
+  const key = match.mode === "label" ? "label" : match.mode === "placeholder" ? "placeholder" : match.mode === "arialabel" ? "arialabel" : "name";
+  if (!isnonempty(match[key])) return { allowed: false, reason: `The reviewed ${match.mode} field match needs a non-empty ${key}.` };
+  return { allowed: true };
+}
+function validateformrecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed form record with entries is required in options." };
+  const record2 = value;
+  if (record2.form !== void 0 && !isnonempty(record2.form)) return { allowed: false, reason: "The reviewed form record form selector must be a non-empty string." };
+  if (!Array.isArray(record2.entries) || record2.entries.length === 0) return { allowed: false, reason: "The reviewed form record needs a non-empty list of entries." };
+  for (const item of record2.entries) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed form record entry must be an object." };
+    const entry = item;
+    const matchcheck = validatefieldmatch(entry.match);
+    if (!matchcheck.allowed) return matchcheck;
+    if (typeof entry.kind !== "string" || !fieldkinds.includes(entry.kind)) return { allowed: false, reason: "Every reviewed form record entry needs a known field kind." };
+    if (typeof entry.value !== "string") return { allowed: false, reason: "Every reviewed form record entry needs a string value." };
+    if (entry.kind === "password") return { allowed: false, reason: "Password entries are refused inside form records; use consentpassword with a reviewed consent ref." };
+  }
+  return { allowed: true };
+}
+function validatevaluegen(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed valuegen rule with a field kind is required in options." };
+  const rule = value;
+  if (typeof rule.kind !== "string" || !fieldkinds.includes(rule.kind)) return { allowed: false, reason: "The reviewed valuegen kind must be a known field kind." };
+  if (rule.locale !== void 0 && !isnonempty(rule.locale)) return { allowed: false, reason: "The reviewed valuegen locale must be a non-empty string." };
+  if (rule.seed !== void 0 && (typeof rule.seed !== "number" || !Number.isFinite(rule.seed))) return { allowed: false, reason: "The reviewed valuegen seed must be a finite number." };
+  return { allowed: true };
+}
+function validatefieldpairs(options, mode) {
+  const pairs = options.fields;
+  if (!Array.isArray(pairs) || pairs.length === 0) return { allowed: false, reason: "A reviewed non-empty list of field pairs is required in options." };
+  for (const item of pairs) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed field pair must be an object." };
+    const pair = item;
+    if (!isnonempty(pair[mode])) return { allowed: false, reason: `Every reviewed field pair needs a non-empty ${mode}.` };
+    if (typeof pair.value !== "string" || !pair.value.trim()) return { allowed: false, reason: "Every reviewed field pair needs a non-empty value." };
+  }
+  return { allowed: true };
+}
+function validatecardsegments(value) {
+  if (!Array.isArray(value) || value.length === 0) return { allowed: false, reason: "A reviewed non-empty list of card segments is required in options." };
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every reviewed card segment must be an object." };
+    const segment = item;
+    const matchcheck = validatefieldmatch(segment.match);
+    if (!matchcheck.allowed) return matchcheck;
+    if (typeof segment.value !== "string" || !segment.value.trim()) return { allowed: false, reason: "Every reviewed card segment needs a non-empty value." };
+  }
+  return { allowed: true };
+}
+function validateformgrammar(step, options) {
+  const kind = step.kind;
+  if (kind === "fillform" || kind === "saveprofiles" && options.formrecord !== void 0) {
+    const recordcheck = validateformrecord(options.formrecord);
+    if (!recordcheck.allowed) return recordcheck;
+  }
+  if (kind === "filllabel" || kind === "fillplaceholder") {
+    const paircheck = validatefieldpairs(options, kind === "filllabel" ? "label" : "placeholder");
+    if (!paircheck.allowed) return paircheck;
+  }
+  if (kind === "generatevalues" && options.valuegen !== void 0) {
+    const rulecheck = validatevaluegen(options.valuegen);
+    if (!rulecheck.allowed) return rulecheck;
+  }
+  if (kind === "saveprofiles" && !isnonempty(options.name)) return { allowed: false, reason: "A reviewed profile name is required in options." };
+  if (kind === "submitform" && !isnonempty(options.consentref)) return { allowed: false, reason: "A reviewed consent ref of an approved asksubmit ticket is required in options." };
+  if (kind === "retryform") {
+    const backoff = options.backoff;
+    if (!backoff || typeof backoff !== "object" || Array.isArray(backoff)) return { allowed: false, reason: "A reviewed backoff rule with wait and factor is required in options." };
+    const rule = backoff;
+    if (typeof rule.wait !== "number" || !Number.isFinite(rule.wait) || rule.wait <= 0) return { allowed: false, reason: "The reviewed retry backoff wait must be a positive number of milliseconds with no code ceiling." };
+    if (typeof rule.factor !== "number" || !Number.isFinite(rule.factor) || rule.factor < 1) return { allowed: false, reason: "The reviewed retry backoff factor must be one or greater with no code ceiling." };
+    if (options.attempts !== void 0 && (typeof options.attempts !== "number" || !Number.isInteger(options.attempts) || options.attempts < 1)) return { allowed: false, reason: "The reviewed retry attempts must be a positive integer with no code ceiling." };
+  }
+  if (kind === "runwizard" && options.steps !== void 0 && (typeof options.steps !== "number" || !Number.isInteger(options.steps) || options.steps < 1)) return { allowed: false, reason: "The reviewed wizard step count must be a positive integer with no code ceiling." };
+  if (kind === "selectchain") {
+    if (!isnonempty(options.child)) return { allowed: false, reason: "A reviewed child selector of the dependent control is required in options." };
+    if (!nonnegativeoption(options, "wait")) return { allowed: false, reason: "The reviewed dependent wait must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "picktypeahead") {
+    if (!isnonempty(options.pick)) return { allowed: false, reason: "A reviewed suggestion entry to pick is required in options." };
+    if (!nonnegativeoption(options, "timeout")) return { allowed: false, reason: "The reviewed typeahead timeout must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "pickdate" && !/^\d{4}-\d{2}-\d{2}$/.test(step.value ?? "")) return { allowed: false, reason: "The reviewed date must use the yyyy-mm-dd form." };
+  if (kind === "fillcard") {
+    const segmentcheck = validatecardsegments(options.segments);
+    if (!segmentcheck.allowed) return segmentcheck;
+    if (!nonnegativeoption(options, "pause")) return { allowed: false, reason: "The reviewed card typing pause must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "fillcode" && !isnonempty(options.source)) return { allowed: false, reason: "A reviewed one time code source is required in options." };
+  if (kind === "consentpassword" && !isnonempty(options.consentref)) return { allowed: false, reason: "A reviewed consent ref is required in options before any password is filled." };
+  return { allowed: true };
+}
+function validatetransformrule(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "A reviewed transform rule with an expression, sources and a target is required in options." };
+  const rule = value;
+  const expression = rule.expression;
+  if (typeof expression !== "string" || !/^(trim|upper|lower|number|prefix|suffix|replace)(?::.+)?$/.test(expression)) return { allowed: false, reason: "The reviewed transform expression must be trim, upper, lower, number, prefix, suffix or replace with an optional argument." };
+  if (expression.startsWith("replace") && !expression.slice("replace".length).includes("=>")) return { allowed: false, reason: "The reviewed replace expression needs the from=>to separator." };
+  if (expression.startsWith("replace") && expression.slice("replace:".length).split("=>")[0] === "") return { allowed: false, reason: "The reviewed replace expression needs a non-empty from part." };
+  if (!Array.isArray(rule.sources) || rule.sources.length === 0 || !rule.sources.every((source) => isnonempty(source))) return { allowed: false, reason: "Every reviewed transform rule needs a non-empty list of source columns." };
+  if (!isnonempty(rule.target)) return { allowed: false, reason: "Every reviewed transform rule needs a non-empty target column." };
+  return { allowed: true };
+}
+function validatedatasetids(options, key) {
+  const ids = options[key];
+  if (!Array.isArray(ids) || ids.length === 0 || !ids.every((id) => isnonempty(id))) return { allowed: false, reason: `A reviewed non-empty list of dataset ids is required in options as ${key}.` };
+  return { allowed: true };
+}
+function validatedatagrammar(step, options, origin) {
+  const kind = step.kind;
+  if (kind === "scrapetable") {
+    if (options.name !== void 0 && !isnonempty(options.name)) return { allowed: false, reason: "The reviewed dataset name must be a non-empty string." };
+    if (options.rowlimit !== void 0 && (typeof options.rowlimit !== "number" || !Number.isInteger(options.rowlimit) || options.rowlimit < 1)) return { allowed: false, reason: "The reviewed row limit must be a positive integer with no code ceiling." };
+  }
+  if (kind === "paginateextract") {
+    if (!isnonempty(options.next)) return { allowed: false, reason: "A reviewed next control selector is required in options." };
+    if (options.pages !== void 0 && (typeof options.pages !== "number" || !Number.isInteger(options.pages) || options.pages < 1)) return { allowed: false, reason: "The reviewed page count must be a positive integer with no code ceiling." };
+    if (!nonnegativeoption(options, "wait")) return { allowed: false, reason: "The reviewed row freshness wait must be zero or a positive number of milliseconds." };
+  }
+  if (kind === "exportcsv" || kind === "exportjson" || kind === "exportexcel" || kind === "copytable" || kind === "streamdisk") {
+    if (!isnonempty(options.dataset)) return { allowed: false, reason: "A reviewed dataset id is required in options." };
+    if (options.name !== void 0 && !isnonempty(options.name)) return { allowed: false, reason: "The reviewed artifact name must be a non-empty string." };
+  }
+  if (kind === "exportcsv" && options.delimiter !== void 0 && (typeof options.delimiter !== "string" || options.delimiter.length !== 1)) return { allowed: false, reason: "The reviewed csv delimiter must be a single character." };
+  if (kind === "streamdisk" && (typeof options.chunk !== "number" || !Number.isInteger(options.chunk) || options.chunk < 1)) return { allowed: false, reason: "The reviewed streaming chunk size must be a positive integer with no code ceiling." };
+  if (kind === "pushsheets") {
+    if (!isnonempty(options.dataset)) return { allowed: false, reason: "A reviewed dataset id is required in options." };
+    if (!isnonempty(options.sheet)) return { allowed: false, reason: "A reviewed sheet endpoint url is required in options." };
+    if (!ishttpsurl(options.sheet)) return { allowed: false, reason: "The reviewed sheet endpoint url must use HTTPS." };
+    if (options.reviewed !== true) return { allowed: false, reason: "The sheet push needs the explicit reviewed flag before any data leaves local memory." };
+  }
+  if (kind === "importcsv") {
+    if (typeof options.csv !== "string" || !options.csv.trim()) return { allowed: false, reason: "Reviewed csv content is required in options." };
+    if (options.name !== void 0 && !isnonempty(options.name)) return { allowed: false, reason: "The reviewed dataset name must be a non-empty string." };
+    if (options.mapping !== void 0) {
+      const mapping = options.mapping;
+      if (!mapping || typeof mapping !== "object" || Array.isArray(mapping) || !Object.values(mapping).every((item) => typeof item === "string")) return { allowed: false, reason: "The reviewed csv column mapping must be an object of string values." };
+    }
+  }
+  if (kind === "looprows") {
+    if (!isnonempty(options.dataset)) return { allowed: false, reason: "A reviewed dataset id is required in options." };
+    if (options.variable !== void 0 && !isnonempty(options.variable)) return { allowed: false, reason: "The reviewed row variable name must be a non-empty string." };
+    const inner = validateinnerstep(options, origin);
+    if (!inner.allowed) return inner;
+  }
+  if (kind === "transformvalues") {
+    if (!isnonempty(options.dataset)) return { allowed: false, reason: "A reviewed dataset id is required in options." };
+    const rules = options.rules;
+    if (!Array.isArray(rules) || rules.length === 0) return { allowed: false, reason: "A reviewed non-empty list of transform rules is required in options." };
+    for (const item of rules) {
+      const rulecheck = validatetransformrule(item);
+      if (!rulecheck.allowed) return rulecheck;
+    }
+  }
+  if (kind === "deduperows") {
+    if (!isnonempty(options.dataset)) return { allowed: false, reason: "A reviewed dataset id is required in options." };
+    const keys = options.keys;
+    if (!Array.isArray(keys) || keys.length === 0 || !keys.every((key) => isnonempty(key))) return { allowed: false, reason: "A reviewed non-empty list of dedupe column keys is required in options." };
+  }
+  if (kind === "mergepages") {
+    const listcheck = validatedatasetids(options, "datasets");
+    if (!listcheck.allowed) return listcheck;
+  }
+  if (kind === "stamplerows") {
+    if (!isnonempty(options.dataset)) return { allowed: false, reason: "A reviewed dataset id is required in options." };
+    if (options.url !== void 0 && !ishttpsurl(options.url)) return { allowed: false, reason: "The reviewed source url must use HTTPS." };
+  }
+  if (kind === "previewgrid") {
+    if (!isnonempty(options.dataset)) return { allowed: false, reason: "A reviewed dataset id is required in options." };
+    if (options.sample !== void 0 && (typeof options.sample !== "number" || !Number.isInteger(options.sample) || options.sample < 1)) return { allowed: false, reason: "The reviewed sample row count must be a positive integer with no code ceiling." };
+  }
+  if (kind === "resumeextract" && !isnonempty(options.session)) return { allowed: false, reason: "A reviewed extract session id is required in options." };
+  if (kind === "logprovenance" && !isnonempty(options.artifact)) return { allowed: false, reason: "A reviewed artifact id or name is required in options." };
+  return { allowed: true };
+}
+function submitreviewgranted(steps, submitid) {
+  const position = steps.findIndex((candidate) => candidate.id === submitid);
+  const asked = steps.some((candidate, index) => candidate.kind === "asksubmit" && (position === -1 || index < position));
+  return asked ? { allowed: true } : { allowed: false, reason: "Form submission requires an asksubmit review step before it." };
+}
+function passwordconsentgranted(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const consentref = options.consentref;
+  if (typeof consentref !== "string" || !consentref.trim()) return { allowed: false, reason: "A password fill requires a reviewed consent ref in options." };
+  return { allowed: true };
+}
+function luhnvalid(digits) {
+  let sum = 0;
+  let double = false;
+  for (let index = digits.length - 1; index >= 0; index -= 1) {
+    let value = Number.parseInt(digits[index] ?? "", 10);
+    if (!Number.isFinite(value)) return false;
+    if (double) {
+      value *= 2;
+      if (value > 9) value -= 9;
+    }
+    sum += value;
+    double = !double;
+  }
+  return sum % 10 === 0;
+}
+function generatedvalueallowed(value) {
+  const compact = value.replace(/[\s-]/g, "");
+  if (/^\d{13,19}$/.test(compact) && luhnvalid(compact) && !compact.startsWith("4111")) return { allowed: false, reason: "The generated value looks like a real card number and is refused; generated card values use the 4111 test prefix." };
+  if (/^\d{3}-\d{2}-\d{4}$/.test(value.trim())) return { allowed: false, reason: "The generated value looks like a personal identifier and is refused." };
+  return { allowed: true };
+}
+function profilegrantgranted(profile, origin) {
+  if (!profile.grants.includes(origin)) return { allowed: false, reason: `The saved profile ${profile.name} is not granted to ${origin}; add the origin to the profile grants first.` };
+  return { allowed: true };
+}
 function layoutmutationgranted(session, now) {
   if (!session || session.stoppedat || session.expiresat <= now) return { allowed: false, reason: "Group and layout mutations stay inside the active session." };
   return { allowed: true };
@@ -585,7 +1007,7 @@ function validateinnerstep(options, origin) {
     return { allowed: true };
   }
   if (typeof kind !== "string" || !kind.trim()) return { allowed: false, reason: "A reviewed step id or inline step kind is required in options." };
-  if (kind === "retryaction" || kind === "enterframe") return { allowed: false, reason: "The reviewed inner step cannot be another wrapper kind." };
+  if (kind === "retryaction" || kind === "enterframe" || kind === "looprows") return { allowed: false, reason: "The reviewed inner step cannot be another wrapper kind." };
   if (!allowedactions.has(kind)) return { allowed: false, reason: "The reviewed inner step kind is unsupported." };
   const inneroptions = options.options;
   if (inneroptions !== void 0 && (!inneroptions || typeof inneroptions !== "object" || Array.isArray(inneroptions))) return { allowed: false, reason: "The reviewed inner step options must be an object." };
@@ -965,6 +1387,14 @@ function validatestep(step, origin) {
     const tabscheck = validatetabsgrammar(step, options);
     if (!tabscheck.allowed) return tabscheck;
   }
+  if (isformkind(step.kind)) {
+    const formcheck = validateformgrammar(step, options);
+    if (!formcheck.allowed) return formcheck;
+  }
+  if (isdatasetkind(step.kind)) {
+    const datacheck = validatedatagrammar(step, options, origin);
+    if (!datacheck.allowed) return datacheck;
+  }
   if (step.kind === "tabcreate") {
     if (options.background !== void 0 && typeof options.background !== "boolean") return { allowed: false, reason: "The reviewed background flag must be a boolean." };
     if (options.window !== void 0 && (typeof options.window !== "number" || !Number.isInteger(options.window) || options.window < 0)) return { allowed: false, reason: "The reviewed target window id must be a non-negative integer." };
@@ -992,6 +1422,10 @@ function canexecute(input) {
   if (input.plan.expiresat <= now) return { allowed: false, reason: "The approved plan has expired." };
   if ((input.step.kind === "pierceshadow" || input.step.kind === "enterframe") && !origingranted(input.session, input.origin)) return { allowed: false, reason: "The shadow or frame step is outside the session origin grants." };
   if (input.step.kind === "readjson" && !origingranted(input.session, input.origin)) return { allowed: false, reason: "The json state read is outside the session origin grants." };
+  if (isexportkind(input.step.kind)) {
+    const exportgate = exportgranted(input.session, input.origin);
+    if (!exportgate.allowed) return exportgate;
+  }
   if (input.step.kind === "navlist") {
     let options = {};
     try {
@@ -1006,6 +1440,15 @@ function canexecute(input) {
     }
   }
   if (islayoutkind(input.step.kind) && !layoutmutationgranted(input.session, now).allowed) return { allowed: false, reason: "Group and layout mutations stay inside the active session." };
+  if (input.step.kind === "submitform" || input.step.kind === "retryform") {
+    if (!input.plan) return { allowed: false, reason: "Form submission requires an asksubmit review step before it." };
+    const reviewgate = submitreviewgranted(input.plan.steps, input.step.id);
+    if (!reviewgate.allowed) return reviewgate;
+  }
+  if (input.step.kind === "consentpassword") {
+    const consentgate = passwordconsentgranted(input.step);
+    if (!consentgate.allowed) return consentgate;
+  }
   if (input.step.kind === "openlink" || input.step.kind === "openprivate" || input.step.kind === "batchopen" || input.step.kind === "prefetch" || input.step.kind === "deeplink" || input.step.kind === "reopentab") {
     let options = {};
     try {
@@ -1027,7 +1470,7 @@ function canexecute(input) {
 }
 
 // version.ts
-var packageversion = "1.1.36";
+var packageversion = "1.1.38";
 
 // types.ts
 var protocolversion = packageversion;
@@ -1064,9 +1507,14 @@ function parseproposal(value, origin) {
     return step;
   });
   for (const step of steps) {
-    if (step.kind !== "retryaction" && step.kind !== "enterframe") continue;
+    if (step.kind !== "retryaction" && step.kind !== "enterframe" && step.kind !== "looprows") continue;
     const options = parseoptions(step);
-    if (typeof options.stepid === "string" && !steps.some((candidate) => candidate.id === options.stepid)) throw new Error("A retry or frame wrapper references an unknown step id.");
+    if (typeof options.stepid === "string" && !steps.some((candidate) => candidate.id === options.stepid)) throw new Error("A retry, frame or loop wrapper references an unknown step id.");
+  }
+  for (const step of steps) {
+    if (step.kind !== "submitform" && step.kind !== "retryform") continue;
+    const review = submitreviewgranted(steps, step.id);
+    if (!review.allowed) throw new Error(review.reason);
   }
   const createdat = Date.now();
   const expiresat = typeof planinput.expiresat === "number" ? planinput.expiresat : createdat + 10 * 60 * 1e3;
@@ -1131,13 +1579,42 @@ function tabreportresponse(input) {
 function layoutreport(input) {
   return { version: protocolversion, layouts: input.layouts };
 }
+function formreportresponse(input) {
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, report: input.report });
+}
+function errorreportresponse(input) {
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, report: input.report });
+}
+function wizardreport(input) {
+  return { version: protocolversion, ...input.sessionid ? { sessionid: input.sessionid } : {}, wizards: input.wizards, picks: input.picks };
+}
+function datasetresponse(input) {
+  const sample = Math.max(0, Math.floor(input.sample ?? 10));
+  const payload = { ...input.dataset, rows: input.dataset.rows.slice(0, sample), totalrows: input.dataset.rows.length };
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, dataset: payload });
+}
+function extractionreport(input) {
+  return { version: protocolversion, sessions: input.sessions };
+}
+function provenancereport(input) {
+  return { version: protocolversion, records: input.records };
+}
+function transformgrammar(rules) {
+  return JSON.stringify({ rules: rules.map((rule) => ({ expression: rule.expression, sources: rule.sources, target: rule.target })) });
+}
 export {
   canexecute,
+  datasetresponse,
   actionrisk as deriveactionrisk,
   diffresponse,
+  errorreportresponse,
   eventresponse,
+  extractionreport,
+  formreportresponse,
+  generatedvalueallowed,
   heldkeysreport,
   hostpattern,
+  isformkind,
   iswatchkind,
   layoutreport,
   mapresponse,
@@ -1147,7 +1624,10 @@ export {
   observationresponse,
   outcomeresponse,
   parseproposal,
+  passwordconsentgranted,
+  profilegrantgranted,
   protocolversion,
+  provenancereport,
   randomid,
   requestbody,
   resolutionverdict,
@@ -1155,9 +1635,15 @@ export {
   selectorresponse,
   sessionmemory,
   signalsreport,
+  submitreviewgranted,
   tabreportresponse,
   trailreport,
+  transformgrammar,
+  validatefieldmatch,
+  validateformrecord,
   validatestep,
-  validatetargetref
+  validatetargetref,
+  validatevaluegen,
+  wizardreport
 };
 //# sourceMappingURL=index.js.map