@wenathlan/extension 1.1.40 → 1.1.41

package/extension/dist/background.js

@@ -765,7 +765,78 @@ var sessionmemory = class {
     for (const capture of await this.getcaptures()) runs.set(capture.id, capture.runid);
     return records.filter((item) => runs.get(item.beforeid) === runid);
   }
+  /** Stores one media record of the 1.1.41 family with its bytes and step linkage, replacing the previous record of that id; the user configured media retention window expires the oldest bytes while the metadata and the recording index always survive. */
+  async addmedia(record2) {
+    const records = await this.getmediarecords();
+    const retention = (await this.getsettings())?.mediaretention;
+    const combined = [record2, ...records.filter((item) => item.id !== record2.id)];
+    const stored = retention === void 0 ? combined : combined.map((item, index) => index < retention ? item : expiremediabytes(item));
+    await this.adapter.set("media", stored);
+  }
+  /** Returns every stored media record, newest first. */
+  async getmediarecords() {
+    return await this.adapter.get("media") ?? [];
+  }
+  /** Returns the media records filtered by run and kind; an absent filter returns every record. */
+  async listmedia(filter) {
+    const records = await this.getmediarecords();
+    return records.filter((item) => (filter.runid === void 0 || item.runid === filter.runid) && (filter.kind === void 0 || mediakindof(item) === filter.kind));
+  }
+  /** Returns one media record by its id. */
+  async getmediarecord(id) {
+    return (await this.getmediarecords()).find((item) => item.id === id);
+  }
+  /** Returns one recording with its file reference and frame index by its id. */
+  async getrecording(id) {
+    const found = await this.getmediarecord(id);
+    return found !== void 0 && "startedat" in found ? found : void 0;
+  }
+  /** Removes one media record by its id; the audit trail keeps its outcome evidence. */
+  async removemedia(id) {
+    await this.adapter.set("media", (await this.getmediarecords()).filter((item) => item.id !== id));
+  }
+  /** Stores one observed image batch of a downloadimages step, replacing the previous batch of that id. */
+  async addimagebatch(batch) {
+    const records = await this.adapter.get("imagebatches") ?? [];
+    await this.adapter.set("imagebatches", [batch, ...records.filter((item) => item.id !== batch.id)]);
+  }
+  /** Returns every observed image batch with its filter match counts, newest first. */
+  async getimagebatches() {
+    return await this.adapter.get("imagebatches") ?? [];
+  }
+  /** Stores one recording consent decision of an origin, replacing the previous record of that id. */
+  async setrecordingconsent(record2) {
+    const records = (await this.adapter.get("recordingconsents") ?? []).filter((item) => item.id !== record2.id);
+    await this.adapter.set("recordingconsents", [record2, ...records]);
+  }
+  /** Returns every recording consent decision with its prompt and origin, newest first. */
+  async getrecordingconsents() {
+    return await this.adapter.get("recordingconsents") ?? [];
+  }
 };
+function mediakindof(record2) {
+  if ("pages" in record2) return "pdf";
+  if ("startedat" in record2) return "recording";
+  if ("timestamp" in record2) return "frame";
+  if ("context" in record2) return "canvas";
+  if ("tracks" in record2) return "stream";
+  return "asset";
+}
+function expiremediabytes(record2) {
+  if ("dataurl" in record2) {
+    const source = record2;
+    const copy = { ...source };
+    delete copy.dataurl;
+    return { ...copy, bytesexpired: true };
+  }
+  if ("startedat" in record2) {
+    const source = record2;
+    const copy = { ...source };
+    delete copy.bytes;
+    return { ...copy, bytesexpired: true };
+  }
+  return record2;
+}
 function expirecapturebytes(record2) {
   const { bytes, ...metadata } = record2;
   void bytes;
@@ -776,12 +847,12 @@ function randomid() {
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract", "batchdownload", "pausedownload", "resumedownload", "interceptmime", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "cleanupartifacts"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract", "batchdownload", "pausedownload", "resumedownload", "interceptmime", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "cleanupartifacts", "recordscreen", "captureaudio", "downloadimages"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet", "capturepdf", "captureframe", "readmedia", "readassets", "probestream", "timelapse", "shotcanvas", "convertimage", "makethumbs"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
 var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus", "watchtab"]);
-var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "scrapetable", "paginateextract", "shotelement"]);
+var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "scrapetable", "paginateextract", "shotelement", "captureframe", "shotcanvas"]);
 var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav", "duplicatetab", "pintab", "mutetab", "movetab", "movetabwindow", "searchtabs", "badgetab", "attachmeta", "focuswindow", "maximizewindow", "minimizewindow", "restorewindow", "incognitowindow", "asksubmit", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "pausedownload", "resumedownload", "verifydownload", "writeclipboard", "quarantinedownload", "scanvirus"]);
 var tabscommandactions = /* @__PURE__ */ new Set(["querytabs", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "watchtab", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "savelayout", "restorelayout", "findclones", "searchtabs", "badgetab", "attachmeta", "listaudio", "reopenrun", "snapshotsession"]);
 var formactions = /* @__PURE__ */ new Set(["fillform", "filllabel", "fillplaceholder", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "submitform", "readerrors", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "handoffcaptcha", "fillcard", "fillcode", "consentpassword", "skiphoneypot", "detectlogin", "detecttemplate"]);
@@ -789,6 +860,7 @@ var datasetactions = /* @__PURE__ */ new Set(["scrapetable", "exportcsv", "expor
 var exportactions = /* @__PURE__ */ new Set(["exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk"]);
 var filesactions = /* @__PURE__ */ new Set(["batchdownload", "pausedownload", "resumedownload", "verifydownload", "interceptmime", "exportnetlog", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "namecaptures", "cleanupartifacts"]);
 var captureactions = /* @__PURE__ */ new Set(["shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet"]);
+var mediaactions = /* @__PURE__ */ new Set(["capturepdf", "recordscreen", "captureaudio", "captureframe", "downloadimages", "shotcanvas", "probestream", "readmedia", "readassets", "timelapse", "convertimage", "makethumbs"]);
 var fieldkinds = ["text", "email", "phone", "date", "number", "select", "check", "radio", "file", "password", "card", "code"];
 var layoutmutationactions = /* @__PURE__ */ new Set(["grouptabs", "colorgroup", "collapsegroup", "savelayout", "restorelayout"]);
 var groupcolors = ["grey", "blue", "red", "yellow", "green", "pink", "purple", "cyan", "orange"];
@@ -827,6 +899,7 @@ function requiredcapability(kind) {
   if (kind === "batchdownload" || kind === "pausedownload" || kind === "resumedownload" || kind === "verifydownload" || kind === "interceptmime" || kind === "quarantinedownload" || kind === "scanvirus") return "downloads";
   if (kind === "readclipboard") return "clipboardRead";
   if (kind === "writeclipboard" || kind === "copyscreen") return "clipboardWrite";
+  if (kind === "downloadimages") return "downloads";
   if (kind === "openlink" || kind === "openprivate" || kind === "navlist" || kind === "batchopen" || kind === "reopentab" || kind === "deeplink") return "tabs";
   if (tabscommandactions.has(kind)) return "tabs";
   return void 0;
@@ -1514,6 +1587,144 @@ function validatetabsgrammar(step, options) {
   if (kind === "reopenrun" && !isnonempty(options.run)) return { allowed: false, reason: "A reviewed run id is required in options to reopen its tabs." };
   return { allowed: true };
 }
+function ismediakind(kind) {
+  return mediaactions.has(kind);
+}
+function isrecordingkind(kind) {
+  return kind === "recordscreen" || kind === "captureaudio";
+}
+function mediagate(session, tabid2, origin, now) {
+  if (!session || session.stoppedat) return { allowed: false, reason: "No active browser session exists for the media capture." };
+  if (session.expiresat <= now) return { allowed: false, reason: "The browser session has expired and cannot capture media." };
+  if (session.pausedat) return { allowed: false, reason: "The browser session is paused and cannot capture media." };
+  if (session.tabid !== tabid2) return { allowed: false, reason: `The media capture needs the active tab grant of session tab ${session.tabid} and refuses tab ${tabid2}.` };
+  if (!origingranted(session, origin)) return { allowed: false, reason: `The media capture of ${origin} needs the session origin grants first.` };
+  return { allowed: true };
+}
+function recordingconsentgranted(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const consentref = options.consentref;
+  if (typeof consentref !== "string" || !consentref.trim()) return { allowed: false, reason: "A recording of user activity requires a reviewed consent ref in options before it starts." };
+  return { allowed: true };
+}
+function recordingwindow(settings) {
+  const window2 = settings?.recordingwindow;
+  return typeof window2 === "number" && Number.isFinite(window2) && window2 > 0 ? window2 : void 0;
+}
+function lapsebudgetallowed(interval, duration, wait) {
+  if (!(interval > 0)) return { allowed: false, reason: "The reviewed lapse interval must be a positive number of milliseconds." };
+  if (!(duration > 0)) return { allowed: false, reason: "The reviewed lapse duration must be a positive number of milliseconds." };
+  if (wait !== void 0 && !(wait >= 0)) return { allowed: false, reason: "The reviewed wait budget must be zero or a positive number of milliseconds." };
+  if (wait !== void 0 && duration > wait) return { allowed: false, reason: `The lapse duration of ${duration} milliseconds exceeds the reviewed wait budget of ${wait} milliseconds; review a wider budget or a shorter duration.` };
+  return { allowed: true };
+}
+function validatemediagrammar(step, options) {
+  const kind = step.kind;
+  if (kind === "capturepdf") {
+    const pdf = options.pdf;
+    if (pdf !== void 0) {
+      if (!pdf || typeof pdf !== "object" || Array.isArray(pdf)) return { allowed: false, reason: "The reviewed pdf options must be an object in options.pdf." };
+      const pdfoptions = pdf;
+      if (pdfoptions.paperwidth !== void 0 && (typeof pdfoptions.paperwidth !== "number" || !Number.isFinite(pdfoptions.paperwidth) || pdfoptions.paperwidth <= 0)) return { allowed: false, reason: "The reviewed pdf paper width must be a positive number of inches with no code cap." };
+      if (pdfoptions.paperheight !== void 0 && (typeof pdfoptions.paperheight !== "number" || !Number.isFinite(pdfoptions.paperheight) || pdfoptions.paperheight <= 0)) return { allowed: false, reason: "The reviewed pdf paper height must be a positive number of inches with no code cap." };
+      if (pdfoptions.margins !== void 0) {
+        const margins = pdfoptions.margins;
+        if (!margins || typeof margins !== "object" || Array.isArray(margins)) return { allowed: false, reason: "The reviewed pdf margins must be an object with top, right, bottom and left inches." };
+        for (const side of ["top", "right", "bottom", "left"]) {
+          const value = margins[side];
+          if (value === void 0) continue;
+          if (typeof value !== "number" || !Number.isFinite(value) || value < 0) return { allowed: false, reason: `The reviewed pdf ${side} margin must be zero or a positive number of inches; negative margins are refused.` };
+        }
+      }
+      if (pdfoptions.scale !== void 0 && (typeof pdfoptions.scale !== "number" || !Number.isFinite(pdfoptions.scale) || pdfoptions.scale <= 0)) return { allowed: false, reason: "The reviewed pdf scale must be a positive number with no code cap." };
+      if (pdfoptions.landscape !== void 0 && typeof pdfoptions.landscape !== "boolean") return { allowed: false, reason: "The reviewed pdf landscape flag must be a boolean." };
+      if (pdfoptions.paginate !== void 0 && typeof pdfoptions.paginate !== "boolean") return { allowed: false, reason: "The reviewed pdf paginate flag must be a boolean." };
+    }
+    if (options.breakpoints !== void 0 && (!Array.isArray(options.breakpoints) || options.breakpoints.length === 0 || !options.breakpoints.every((item) => isnonempty(item)))) return { allowed: false, reason: "The reviewed pdf break points must be a non-empty list of selectors when present." };
+    if (options.exporttarget !== void 0 && options.exporttarget !== "memory" && options.exporttarget !== "download") return { allowed: false, reason: "The reviewed pdf export target must be memory or download; pdf documents do not route to the clipboard." };
+    if (options.name !== void 0 && !isnonempty(options.name)) return { allowed: false, reason: "The reviewed pdf artifact name must be a non-empty string." };
+  }
+  if (kind === "recordscreen" || kind === "captureaudio") {
+    const recording = options.recording;
+    if (recording !== void 0) {
+      if (!recording || typeof recording !== "object" || Array.isArray(recording)) return { allowed: false, reason: "The reviewed recording options must be an object in options.recording." };
+      const recordoptions = recording;
+      if (recordoptions.scope !== void 0 && recordoptions.scope !== "tab" && recordoptions.scope !== "run") return { allowed: false, reason: "The reviewed recording scope must be tab or run." };
+      if (recordoptions.fps !== void 0 && (typeof recordoptions.fps !== "number" || !Number.isFinite(recordoptions.fps) || recordoptions.fps <= 0)) return { allowed: false, reason: "The reviewed recording fps must be a positive number with no code ceiling." };
+      if (recordoptions.bitrate !== void 0 && (typeof recordoptions.bitrate !== "number" || !Number.isFinite(recordoptions.bitrate) || recordoptions.bitrate <= 0)) return { allowed: false, reason: "The reviewed recording bitrate must be a positive number with no code ceiling." };
+      if (recordoptions.audio !== void 0 && typeof recordoptions.audio !== "boolean") return { allowed: false, reason: "The reviewed recording audio flag must be a boolean." };
+    }
+    if (options.duration !== void 0 && (typeof options.duration !== "number" || !Number.isFinite(options.duration) || options.duration <= 0)) return { allowed: false, reason: "The reviewed recording duration must be a positive number of milliseconds with no code ceiling." };
+    const consent = recordingconsentgranted(step);
+    if (!consent.allowed) return consent;
+  }
+  if (kind === "captureframe") {
+    if (options.timestamp !== void 0 && (typeof options.timestamp !== "number" || !Number.isFinite(options.timestamp) || options.timestamp < 0)) return { allowed: false, reason: "The reviewed frame timestamp must be zero or a positive number of seconds." };
+    if (options.poster !== void 0 && typeof options.poster !== "boolean") return { allowed: false, reason: "The reviewed poster flag must be a boolean." };
+    const capturecheck = validatecaptureoptions(options.capture);
+    if (!capturecheck.allowed) return capturecheck;
+  }
+  if (kind === "downloadimages") {
+    const filter = options.imagefilter;
+    if (!filter || typeof filter !== "object" || Array.isArray(filter)) return { allowed: false, reason: "A reviewed imagefilter is required in options before any image downloads." };
+    const imagefilter = filter;
+    if (imagefilter.selector !== void 0 && !isnonempty(imagefilter.selector)) return { allowed: false, reason: "The reviewed imagefilter selector must be a non-empty selector from the reviewed selector grammar." };
+    if (imagefilter.minwidth !== void 0 && (typeof imagefilter.minwidth !== "number" || !Number.isFinite(imagefilter.minwidth) || imagefilter.minwidth < 0)) return { allowed: false, reason: "The reviewed imagefilter minimum width must be zero or a positive number of pixels." };
+    if (imagefilter.minheight !== void 0 && (typeof imagefilter.minheight !== "number" || !Number.isFinite(imagefilter.minheight) || imagefilter.minheight < 0)) return { allowed: false, reason: "The reviewed imagefilter minimum height must be zero or a positive number of pixels." };
+    if (imagefilter.formats !== void 0 && (!Array.isArray(imagefilter.formats) || imagefilter.formats.length === 0 || !imagefilter.formats.every((item) => isnonempty(item)))) return { allowed: false, reason: "The reviewed imagefilter format list must be a non-empty list of mime or extension patterns when present." };
+    if (options.naming !== void 0) {
+      const namingcheck = validatecapturenaming(options.naming);
+      if (!namingcheck.allowed) return namingcheck;
+    }
+  }
+  if (kind === "shotcanvas") {
+    const capturecheck = validatecaptureoptions(options.capture);
+    if (!capturecheck.allowed) return capturecheck;
+  }
+  if (kind === "probestream" && options.selector !== void 0 && !isnonempty(options.selector)) return { allowed: false, reason: "The reviewed stream probe scope selector must be a non-empty string." };
+  if (kind === "timelapse") {
+    const lapse = options.lapse;
+    if (!lapse || typeof lapse !== "object" || Array.isArray(lapse)) return { allowed: false, reason: "A reviewed lapse plan with interval, duration and format is required in options." };
+    const plan = lapse;
+    if (typeof plan.interval !== "number" || !Number.isFinite(plan.interval) || plan.interval <= 0) return { allowed: false, reason: "The reviewed lapse interval must be a positive number of milliseconds with no code ceiling." };
+    if (typeof plan.duration !== "number" || !Number.isFinite(plan.duration) || plan.duration <= 0) return { allowed: false, reason: "The reviewed lapse duration must be a positive number of milliseconds with no code ceiling." };
+    if (plan.format !== void 0 && plan.format !== "png" && plan.format !== "jpeg" && plan.format !== "webp") return { allowed: false, reason: "The reviewed lapse format must be png, jpeg or webp." };
+    const budget = lapsebudgetallowed(plan.interval, plan.duration, typeof options.wait === "number" ? options.wait : void 0);
+    if (!budget.allowed) return budget;
+    const capturecheck = validatecaptureoptions(options.capture);
+    if (!capturecheck.allowed) return capturecheck;
+  }
+  if (kind === "convertimage" || kind === "makethumbs") {
+    const single = options.capture;
+    const list = options.captures;
+    const hasone = isnonempty(single);
+    const haslist = Array.isArray(list) && list.length > 0 && list.every((item) => isnonempty(item));
+    if (!hasone && !haslist) return { allowed: false, reason: "A reviewed capture id or a reviewed non-empty capture id list is required in options." };
+    if (hasone && haslist) return { allowed: false, reason: "The reviewed step needs one capture id or a capture id list, not both." };
+  }
+  if (kind === "convertimage") {
+    const convert = options.convert;
+    if (!convert || typeof convert !== "object" || Array.isArray(convert)) return { allowed: false, reason: "A reviewed convert directive with a target format is required in options." };
+    const directive = convert;
+    if (directive.target !== "png" && directive.target !== "jpeg" && directive.target !== "webp") return { allowed: false, reason: "The reviewed conversion target must be png, jpeg or webp." };
+    if (directive.source !== void 0 && directive.source !== "png" && directive.source !== "jpeg" && directive.source !== "webp") return { allowed: false, reason: "The reviewed conversion source must be png, jpeg or webp." };
+    if (directive.quality !== void 0 && (typeof directive.quality !== "number" || !Number.isFinite(directive.quality) || directive.quality < 0 || directive.quality > 100)) return { allowed: false, reason: "The reviewed conversion quality must stay between zero and one hundred with no code cap inside that range." };
+  }
+  if (kind === "makethumbs") {
+    const thumb = options.thumb;
+    if (!thumb || typeof thumb !== "object" || Array.isArray(thumb)) return { allowed: false, reason: "A reviewed thumb directive with size, fit and suffix is required in options." };
+    const directive = thumb;
+    if (typeof directive.size !== "number" || !Number.isFinite(directive.size) || directive.size <= 0) return { allowed: false, reason: "The reviewed thumbnail size must be a positive number of pixels with no fixed set." };
+    if (directive.fit !== "cover" && directive.fit !== "contain") return { allowed: false, reason: "The reviewed thumbnail fit must be cover or contain." };
+    if (!isnonempty(directive.suffix)) return { allowed: false, reason: "The reviewed thumbnail naming suffix must be a non-empty string." };
+  }
+  return { allowed: true };
+}
 function validatestep(step, origin) {
   if (!allowedactions.has(step.kind)) return { allowed: false, reason: "Unsupported action kind." };
   if (!step.summary.trim()) return { allowed: false, reason: "A human-readable action summary is required." };
@@ -1735,6 +1946,10 @@ function validatestep(step, origin) {
     const capturecheck = validatecapturegrammar(step, options);
     if (!capturecheck.allowed) return capturecheck;
   }
+  if (ismediakind(step.kind)) {
+    const mediacheck = validatemediagrammar(step, options);
+    if (!mediacheck.allowed) return mediacheck;
+  }
   if (step.kind === "tabcreate") {
     if (options.background !== void 0 && typeof options.background !== "boolean") return { allowed: false, reason: "The reviewed background flag must be a boolean." };
     if (options.window !== void 0 && (typeof options.window !== "number" || !Number.isInteger(options.window) || options.window < 0)) return { allowed: false, reason: "The reviewed target window id must be a non-negative integer." };
@@ -1806,6 +2021,14 @@ function canexecute(input) {
     const target = captureoptions.capture?.exporttarget;
     if (target !== void 0 && target !== "memory" && target !== "download" && target !== "clipboard") return { allowed: false, reason: "The capture export target must be memory, download or clipboard." };
   }
+  if (ismediakind(input.step.kind)) {
+    const mediagatecheck = mediagate(input.session, input.tabid, input.origin, now);
+    if (!mediagatecheck.allowed) return mediagatecheck;
+  }
+  if (isrecordingkind(input.step.kind)) {
+    const recordinggate = recordingconsentgranted(input.step);
+    if (!recordinggate.allowed) return recordinggate;
+  }
   if (input.step.kind === "openlink" || input.step.kind === "openprivate" || input.step.kind === "batchopen" || input.step.kind === "prefetch" || input.step.kind === "deeplink" || input.step.kind === "reopentab") {
     let options = {};
     try {
@@ -1927,9 +2150,14 @@ function recordpair(progress, planid, stepid, pair, now) {
   const outcome = { stepid, ok: true, summary: `Paired the before shot ${pair.beforeid} with the after shot ${pair.afterid} around the ${pair.actionkind} action.`, details: { shotpair: { id: pair.id, beforeid: pair.beforeid, afterid: pair.afterid, actionkind: pair.actionkind, ...pair.target !== void 0 ? { target: pair.target } : {}, ...pair.domsnapshotid !== void 0 ? { domsnapshotid: pair.domsnapshotid } : {} } }, at: now };
   return recordoutcome(base, planid, outcome, now);
 }
+function recordmedia(progress, planid, stepid, media, now) {
+  const base = progress && progress.planid === planid ? progress : emptyprogress(planid, now);
+  const outcome = { stepid, ok: true, summary: `Captured a ${media.kind} media record of ${media.scope} scope with ${media.bytes} character${media.bytes === 1 ? "" : "s"} of media data.`, details: { media }, at: now };
+  return recordoutcome(base, planid, outcome, now);
+}
 
 // version.ts
-var packageversion = "1.1.40";
+var packageversion = "1.1.41";
 
 // types.ts
 var protocolversion = packageversion;
@@ -1993,7 +2221,7 @@ function requestbody(input) {
   return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation, capabilities: input.capabilities });
 }
 function outcomeresponse(input) {
-  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {} });
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {}, ...input.media ? { media: input.media } : {} });
 }
 function mapresponse(input) {
   return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, map: input.map });
@@ -2058,6 +2286,9 @@ function quarantinereport(input) {
 function capturereport(input) {
   return { version: protocolversion, records: input.records, pairs: input.pairs };
 }
+function mediareport(input) {
+  return { version: protocolversion, records: input.records, images: input.images };
+}
 
 // capture.ts
 var capturekinds = ["shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet"];
@@ -2245,6 +2476,308 @@ function annotationplanof(input) {
   return plan;
 }
 
+// media.ts
+var mediakinds = ["capturepdf", "recordscreen", "captureaudio", "captureframe", "downloadimages", "shotcanvas", "probestream", "readmedia", "readassets", "timelapse", "convertimage", "makethumbs"];
+var defaultpaperwidth = 8.5;
+var defaultpaperheight = 11;
+var defaultmargins = { top: 0.4, right: 0.4, bottom: 0.4, left: 0.4 };
+var pdfpointsperinch = 72;
+var basefontsize = 11;
+function pdfoptionsof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const normalized = {};
+  if (typeof options.paperwidth === "number" && Number.isFinite(options.paperwidth)) normalized.paperwidth = options.paperwidth;
+  if (typeof options.paperheight === "number" && Number.isFinite(options.paperheight)) normalized.paperheight = options.paperheight;
+  if (options.margins && typeof options.margins === "object" && !Array.isArray(options.margins)) {
+    const margins = options.margins;
+    const top = typeof margins.top === "number" ? margins.top : defaultmargins.top;
+    const right = typeof margins.right === "number" ? margins.right : defaultmargins.right;
+    const bottom = typeof margins.bottom === "number" ? margins.bottom : defaultmargins.bottom;
+    const left = typeof margins.left === "number" ? margins.left : defaultmargins.left;
+    normalized.margins = { top, right, bottom, left };
+  }
+  if (typeof options.scale === "number" && Number.isFinite(options.scale)) normalized.scale = options.scale;
+  if (typeof options.landscape === "boolean") normalized.landscape = options.landscape;
+  if (typeof options.paginate === "boolean") normalized.paginate = options.paginate;
+  return normalized;
+}
+function pdfpagesize(options) {
+  const width = (options.paperwidth ?? defaultpaperwidth) * pdfpointsperinch;
+  const height = (options.paperheight ?? defaultpaperheight) * pdfpointsperinch;
+  return options.landscape === true ? { width: height, height: width } : { width, height };
+}
+function pdfmargins(options) {
+  const margins = options.margins ?? defaultmargins;
+  return { top: margins.top * pdfpointsperinch, right: margins.right * pdfpointsperinch, bottom: margins.bottom * pdfpointsperinch, left: margins.left * pdfpointsperinch };
+}
+function pdffontsize(options) {
+  return basefontsize * (options.scale ?? 1);
+}
+function pdftextlayout(text2, options) {
+  const size = pdfpagesize(options);
+  const margins = pdfmargins(options);
+  const fontsize = pdffontsize(options);
+  const leading = fontsize * 1.35;
+  const linesperpage = Math.max(1, Math.floor((size.height - margins.top - margins.bottom) / leading));
+  const columns = Math.max(1, Math.floor((size.width - margins.left - margins.right) / (fontsize * 0.5)));
+  const wrapped = [];
+  for (const paragraph of text2.split(/\r?\n/)) {
+    let line = "";
+    for (const word of paragraph.split(/\s+/).filter(Boolean)) {
+      const candidate = line ? `${line} ${word}` : word;
+      if (candidate.length <= columns) {
+        line = candidate;
+        continue;
+      }
+      if (line) wrapped.push(line);
+      if (word.length <= columns) {
+        line = word;
+        continue;
+      }
+      for (let index = 0; index < word.length; index += columns) wrapped.push(word.slice(index, index + columns));
+      line = "";
+    }
+    wrapped.push(line);
+    if (wrapped.length >= linesperpage) break;
+  }
+  return wrapped.slice(0, linesperpage);
+}
+function pdfsegments(scrollheight, viewportheight, breaks) {
+  if (scrollheight <= 0) return [];
+  const step = viewportheight > 0 ? viewportheight : scrollheight;
+  const cuts = [0, ...breaks.filter((top) => Number.isFinite(top) && top > 0 && top < scrollheight).map((top) => Math.round(top))].filter((top, index2, list) => list.indexOf(top) === index2).sort((left, right) => left - right);
+  const segments = [];
+  let index = 0;
+  let cursor = 0;
+  while (cursor < scrollheight) {
+    while (index < cuts.length && (cuts[index] ?? 0) <= cursor) index += 1;
+    const nextcut = index < cuts.length ? cuts[index] : void 0;
+    const next = nextcut !== void 0 ? Math.min(nextcut, scrollheight) : Math.min(cursor + step, scrollheight);
+    if (next <= cursor) break;
+    segments.push({ top: cursor, height: next - cursor });
+    cursor = next;
+  }
+  return segments.length > 0 ? segments : [{ top: 0, height: scrollheight }];
+}
+function pdfescape(text2) {
+  let escaped = "";
+  for (const character of text2) {
+    const code = character.charCodeAt(0);
+    if (character === "(" || character === ")" || character === "\\") escaped += `\\${character}`;
+    else if (code >= 32 && code <= 255) escaped += character;
+    else escaped += "?";
+  }
+  return escaped;
+}
+function buildpdf(pages, options) {
+  const size = pdfpagesize(options);
+  const margins = pdfmargins(options);
+  const fontsize = pdffontsize(options);
+  const leading = fontsize * 1.35;
+  const laidout = (pages.length > 0 ? pages : [""]).map((text2) => pdftextlayout(text2, options));
+  const objects = [];
+  const kids = laidout.map((_, index) => `${4 + index * 2} 0 R`).join(" ");
+  objects.push(`<< /Type /Catalog /Pages 2 0 R >>`);
+  objects.push(`<< /Type /Pages /Kids [${kids}] /Count ${laidout.length} >>`);
+  objects.push(`<< /Type /Font /Subtype /Type1 /BaseFont /Helvetica >>`);
+  for (let pageindex = 0; pageindex < laidout.length; pageindex += 1) {
+    const lines = laidout[pageindex] ?? [];
+    const operators = ["BT", `/F1 ${fontsize} Tf`, `${leading.toFixed(2)} TL`, `${margins.left.toFixed(2)} ${(size.height - margins.top - fontsize).toFixed(2)} Td`];
+    for (let lineindex = 0; lineindex < lines.length; lineindex += 1) {
+      if (lineindex > 0) operators.push("T*");
+      operators.push(`(${pdfescape(lines[lineindex] ?? "")}) Tj`);
+    }
+    operators.push("ET");
+    const content = operators.join("\n");
+    objects.push(`<< /Type /Page /Parent 2 0 R /MediaBox [0 0 ${size.width.toFixed(2)} ${size.height.toFixed(2)}] /Resources << /Font << /F1 3 0 R >> >> /Contents ${5 + pageindex * 2} 0 R >>`);
+    objects.push(`<< /Length ${content.length} >>
+stream
+${content}
+endstream`);
+  }
+  let document2 = "%PDF-1.4\n";
+  const offsets = [];
+  for (let index = 0; index < objects.length; index += 1) {
+    offsets.push(document2.length);
+    document2 += `${index + 1} 0 obj
+${objects[index]}
+endobj
+`;
+  }
+  const xrefstart = document2.length;
+  document2 += `xref
+0 ${objects.length + 1}
+0000000000 65535 f 
+`;
+  for (const offset of offsets) document2 += `${String(offset).padStart(10, "0")} 00000 n 
+`;
+  document2 += `trailer
+<< /Size ${objects.length + 1} /Root 1 0 R >>
+startxref
+${xrefstart}
+%%EOF
+`;
+  return { document: document2, bytes: document2.length, pages: laidout.length, pagewidth: Math.round(size.width), pageheight: Math.round(size.height) };
+}
+function recordingoptionsof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const normalized = {};
+  if (options.scope === "tab" || options.scope === "run") normalized.scope = options.scope;
+  if (typeof options.fps === "number" && Number.isFinite(options.fps)) normalized.fps = options.fps;
+  if (typeof options.bitrate === "number" && Number.isFinite(options.bitrate)) normalized.bitrate = options.bitrate;
+  if (typeof options.audio === "boolean") normalized.audio = options.audio;
+  return normalized;
+}
+function newrecording(input) {
+  return {
+    id: input.id,
+    runid: input.runid,
+    stepid: input.stepid,
+    tabid: input.tabid,
+    kind: input.kind,
+    scope: input.options.scope ?? "tab",
+    format: input.kind === "audio" ? "evidence" : "frames",
+    startedat: input.at,
+    at: input.at,
+    ...input.options.fps !== void 0 ? { fps: input.options.fps } : {},
+    ...input.options.bitrate !== void 0 ? { bitrate: input.options.bitrate } : {},
+    ...input.options.audio !== void 0 ? { audio: input.options.audio } : {},
+    frames: []
+  };
+}
+function finishrecording(record2, endat) {
+  return { ...record2, endedat: endat, duration: Math.max(0, endat - record2.startedat) };
+}
+function frameinterval(fps) {
+  if (!Number.isFinite(fps) || fps <= 0) return 1e3;
+  return Math.max(1, Math.round(1e3 / fps));
+}
+function imagefilterof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const normalized = {};
+  if (typeof options.selector === "string" && options.selector.trim()) normalized.selector = options.selector.trim();
+  if (typeof options.minwidth === "number" && Number.isFinite(options.minwidth)) normalized.minwidth = options.minwidth;
+  if (typeof options.minheight === "number" && Number.isFinite(options.minheight)) normalized.minheight = options.minheight;
+  if (Array.isArray(options.formats) && options.formats.every((item) => typeof item === "string" && item.trim())) normalized.formats = options.formats;
+  return normalized;
+}
+function imagematches(image, filter) {
+  if (filter.minwidth !== void 0 && image.width < filter.minwidth) return false;
+  if (filter.minheight !== void 0 && image.height < filter.minheight) return false;
+  if (filter.formats !== void 0 && filter.formats.length > 0) {
+    const mime = image.mime.toLowerCase();
+    const matches = filter.formats.some((format) => {
+      const wanted = format.toLowerCase().trim();
+      return mime === wanted || mime === `image/${wanted}` || mime.endsWith(`/${wanted}`);
+    });
+    if (!matches) return false;
+  }
+  return true;
+}
+function dedupeimages(images) {
+  const seen = /* @__PURE__ */ new Set();
+  const unique = [];
+  for (const image of images) {
+    if (seen.has(image.url)) continue;
+    seen.add(image.url);
+    unique.push(image);
+  }
+  return unique;
+}
+function imagenames(rule, run, step, count, extension) {
+  const names = [];
+  for (let index = 1; index <= Math.max(0, Math.round(count)); index += 1) names.push(buildname(rule, { run, step, sequence: index, kind: "image" }, extension));
+  return names;
+}
+function lapseplanof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.interval !== "number" || !Number.isFinite(options.interval)) return void 0;
+  if (typeof options.duration !== "number" || !Number.isFinite(options.duration)) return void 0;
+  const format = options.format === "jpeg" || options.format === "webp" ? options.format : "png";
+  return { interval: options.interval, duration: options.duration, format };
+}
+function lapseframes(plan) {
+  if (!(plan.interval > 0) || !(plan.duration > 0)) return [];
+  const frames = [];
+  for (let time = 0; time < plan.duration; time += plan.interval) frames.push(Math.round(time));
+  return frames;
+}
+function convertdirectiveof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (options.target !== "png" && options.target !== "jpeg" && options.target !== "webp") return void 0;
+  const normalized = { target: options.target };
+  if (options.source === "png" || options.source === "jpeg" || options.source === "webp") normalized.source = options.source;
+  if (typeof options.quality === "number" && Number.isFinite(options.quality)) normalized.quality = options.quality;
+  return normalized;
+}
+function thumbdirectiveof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.size !== "number" || !Number.isFinite(options.size) || options.size <= 0) return void 0;
+  if (options.fit !== "cover" && options.fit !== "contain") return void 0;
+  if (typeof options.suffix !== "string" || !options.suffix.trim()) return void 0;
+  return { size: options.size, fit: options.fit, suffix: options.suffix.trim() };
+}
+function thumbgeometry(source, directive) {
+  const size = Math.max(1, Math.round(directive.size));
+  if (directive.fit === "contain") {
+    const scale2 = Math.min(size / Math.max(1, source.width), size / Math.max(1, source.height));
+    const dw = Math.max(1, Math.round(source.width * scale2));
+    const dh = Math.max(1, Math.round(source.height * scale2));
+    return { sx: 0, sy: 0, sw: source.width, sh: source.height, dx: Math.floor((size - dw) / 2), dy: Math.floor((size - dh) / 2), dw, dh, width: size, height: size };
+  }
+  const scale = Math.max(size / Math.max(1, source.width), size / Math.max(1, source.height));
+  const sw = Math.min(source.width, Math.round(size / scale));
+  const sh = Math.min(source.height, Math.round(size / scale));
+  return { sx: Math.floor((source.width - sw) / 2), sy: Math.floor((source.height - sh) / 2), sw, sh, dx: 0, dy: 0, dw: size, dh: size, width: size, height: size };
+}
+function mediaentries(raw) {
+  return raw.map((entry) => ({
+    url: typeof entry.url === "string" ? entry.url : "",
+    mime: typeof entry.mime === "string" ? entry.mime : "",
+    duration: typeof entry.duration === "number" && Number.isFinite(entry.duration) ? entry.duration : 0,
+    width: typeof entry.width === "number" && Number.isFinite(entry.width) ? Math.round(entry.width) : 0,
+    height: typeof entry.height === "number" && Number.isFinite(entry.height) ? Math.round(entry.height) : 0,
+    codecs: typeof entry.codecs === "string" ? entry.codecs : "",
+    tracks: Array.isArray(entry.tracks) ? entry.tracks.filter((item) => typeof item === "string") : []
+  }));
+}
+function assetentries(raw) {
+  return raw.map((entry) => ({
+    kind: entry.kind === "logo" ? "logo" : "favicon",
+    url: typeof entry.url === "string" ? entry.url : "",
+    bytes: typeof entry.bytes === "number" && Number.isFinite(entry.bytes) ? entry.bytes : 0,
+    ...typeof entry.sizes === "string" && entry.sizes.trim() ? { sizes: entry.sizes.trim() } : {}
+  }));
+}
+function streamsummaries(raw) {
+  return raw.map((entry) => {
+    const tracks = Array.isArray(entry.tracks) ? entry.tracks : [];
+    return {
+      kind: typeof entry.kind === "string" ? entry.kind : "stream",
+      tracks: tracks.length,
+      label: typeof entry.label === "string" ? entry.label : "",
+      live: entry.live === true,
+      detail: tracks.map((track) => {
+        const item = track;
+        return {
+          kind: typeof item.kind === "string" ? item.kind : "",
+          label: typeof item.label === "string" ? item.label : "",
+          ...typeof item.width === "number" && Number.isFinite(item.width) ? { width: Math.round(item.width) } : {},
+          ...typeof item.height === "number" && Number.isFinite(item.height) ? { height: Math.round(item.height) } : {},
+          ...typeof item.framerate === "number" && Number.isFinite(item.framerate) ? { framerate: item.framerate } : {},
+          state: typeof item.state === "string" ? item.state : ""
+        };
+      })
+    };
+  });
+}
+
 // extension/browsertabs.ts
 var browserkinds = /* @__PURE__ */ new Set(["tablist", "tabcreate", "tabactivate", "tabclose", "tabreload", "tabsnapshot", "windowlist", "windowcreate", "windowclose", "zoomset", "windowresize", "downloadfile"]);
 function isbrowserkind(kind) {
@@ -3444,9 +3977,9 @@ function stepoptions2(step) {
 }
 async function refreshcapabilities() {
   const report = await readcapabilities();
-  const withcaptures = { ...report, captures: [...capturekinds] };
-  await memory.setcapabilities(withcaptures);
-  return withcaptures;
+  const withmedia = { ...report, captures: [...capturekinds], media: [...mediakinds] };
+  await memory.setcapabilities(withmedia);
+  return withmedia;
 }
 async function activecontext() {
   const [tab] = await chrome.tabs.query({ active: true, lastFocusedWindow: true });
@@ -3600,6 +4133,7 @@ function stepauditkind(step, ok) {
   if (step.kind === "consentpassword") return "consent";
   if (step.kind === "handoffcaptcha") return "handoff";
   if (iscapturekind(step.kind)) return "capture";
+  if (ismediakind(step.kind)) return "media";
   if (isfileskind(step.kind)) {
     if (step.kind === "interceptmime") return "intercept";
     if (step.kind === "readclipboard" || step.kind === "writeclipboard" || step.kind === "copyscreen") return "clipboard";
@@ -5653,6 +6187,277 @@ async function executecapturestep(step, session, plan, tabid2, origin) {
   }
   throw new Error("Unsupported capture kind.");
 }
+var activerecordings = /* @__PURE__ */ new Map();
+async function stoprecordingsforrun(runid) {
+  for (const [id, active] of [...activerecordings.entries()]) {
+    if (active.record.runid !== runid) continue;
+    const finished = finishrecording(active.record, Date.now());
+    await memory.addmedia(finished);
+    activerecordings.delete(id);
+    await audit("media", `Recording ${finished.id} of kind ${finished.kind} stopped cleanly at run end after ${finished.duration ?? 0} milliseconds.`, { planid: runid, stepid: finished.stepid });
+  }
+}
+async function recordingwriter(record2, exporttarget) {
+  const manifest = {
+    id: record2.id,
+    runid: record2.runid,
+    stepid: record2.stepid,
+    kind: record2.kind,
+    scope: record2.scope,
+    fps: record2.fps,
+    bitrate: record2.bitrate,
+    startedat: record2.startedat,
+    endedat: record2.endedat,
+    duration: record2.duration,
+    derivation: "tab screencast apis stay outside the reviewed manifest, so recordscreen derives an ordered frame sequence from viewport captures and captureaudio derives audio element evidence; no encoded video or audio bytes exist",
+    frames: (record2.frames ?? []).map((id) => ({ id }))
+  };
+  const file = `${(record2.file ?? record2.id).replace(/\.[a-z0-9]+$/i, "")}.json`;
+  const bytes = JSON.stringify(manifest).length;
+  if (exporttarget === "download") {
+    const granted = await chrome.permissions.contains({ permissions: ["downloads"] }).catch(() => false);
+    if (!granted) throw new Error("The recording download needs the downloads capability; request it from the review panel.");
+    await chrome.downloads.download({ url: `data:application/json;base64,${btoa(JSON.stringify(manifest))}`, filename: file });
+  }
+  return { written: exporttarget === "download", file, bytes };
+}
+async function convertonecapture(source, directive, plan, step) {
+  if (!source.bytes) throw new Error(`The capture bytes of ${source.id} expired from the retention window; conversions need live bytes.`);
+  const blob = await (await fetch(source.bytes)).blob();
+  const bitmap = await createImageBitmap(blob);
+  const dataurl = await encodecanvas(bitmap.width, bitmap.height, (context) => {
+    context.drawImage(bitmap, 0, 0);
+  }, { format: directive.target, quality: directive.quality });
+  const name = await capturenamefor(step, plan, "convertimage", directive.target);
+  return { id: randomid(), runid: plan.id, stepid: step.id, kind: "convertimage", format: directive.target, width: bitmap.width, height: bitmap.height, capturedat: Date.now(), bytes: dataurl, name, target: source.id };
+}
+async function thumbonecapture(source, directive, plan, step) {
+  if (!source.bytes) throw new Error(`The capture bytes of ${source.id} expired from the retention window; thumbnails need live bytes.`);
+  const blob = await (await fetch(source.bytes)).blob();
+  const bitmap = await createImageBitmap(blob);
+  const geometry = thumbgeometry({ width: bitmap.width, height: bitmap.height }, directive);
+  const format = source.format === "jpeg" || source.format === "webp" ? source.format : "png";
+  const dataurl = await encodecanvas(geometry.width, geometry.height, (context) => {
+    context.drawImage(bitmap, geometry.sx, geometry.sy, geometry.sw, geometry.sh, geometry.dx, geometry.dy, geometry.dw, geometry.dh);
+  }, { format });
+  const name = (await capturenamefor(step, plan, "makethumbs", format)).replace(/(\.[a-z0-9]+)?$/, `-${directive.suffix}$1`);
+  return { id: randomid(), runid: plan.id, stepid: step.id, kind: "makethumbs", format, width: geometry.width, height: geometry.height, capturedat: Date.now(), bytes: dataurl, name, target: source.id };
+}
+async function executemediastep(step, session, plan, tabid2, origin) {
+  const options = stepoptions2(step);
+  const extra = { ...session ? { sessionid: session.id } : {}, planid: plan.id, stepid: step.id };
+  const gate = mediagate(session, tabid2, origin, Date.now());
+  if (!gate.allowed) throw new Error(gate.reason ?? "The media capture needs the active session tab grant.");
+  if (step.kind === "capturepdf") {
+    const pdfoptions = pdfoptionsof(options.pdf);
+    const paginate = pdfoptions.paginate === true;
+    const measured = await bridgecall(tabid2, "measurepage");
+    const breakpoints = (Array.isArray(options.breakpoints) ? options.breakpoints : []).filter((item) => typeof item === "string" && item.trim().length > 0);
+    const resolvedbreaks = breakpoints.length > 0 ? (await bridgecall(tabid2, "pdfbreaks", breakpoints)).map((entry) => entry.top) : [];
+    const segments = paginate ? pdfsegments(measured.scrollheight, measured.viewportheight, resolvedbreaks) : [{ top: 0, height: measured.scrollheight }];
+    const texts = [];
+    for (const segment of segments) {
+      const collected = await bridgecall(tabid2, "pdfsegment", segment.top, segment.height);
+      if (!collected.ok) throw new Error(collected.summary);
+      texts.push(collected.text || " ");
+    }
+    const composed = buildpdf(texts, pdfoptions);
+    const dataurl = `data:application/pdf;base64,${btoa(composed.document)}`;
+    const name = await capturenamefor(step, plan, "capturepdf", "pdf");
+    const record2 = { id: randomid(), runid: plan.id, stepid: step.id, pages: composed.pages, pagewidth: composed.pagewidth, pageheight: composed.pageheight, margins: pdfoptions.margins ?? { top: 0.4, right: 0.4, bottom: 0.4, left: 0.4 }, landscape: pdfoptions.landscape === true, scale: pdfoptions.scale ?? 1, bytes: composed.bytes, at: Date.now(), dataurl, name };
+    await memory.addmedia(record2);
+    await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: record2.id, kind: "pdf", scope: "tab", bytes: record2.bytes }, Date.now()));
+    const exporttarget = options.exporttarget === "download" ? "download" : "memory";
+    if (exporttarget === "download") {
+      const granted = await chrome.permissions.contains({ permissions: ["downloads"] }).catch(() => false);
+      if (!granted) throw new Error("The pdf download export needs the downloads capability; request it from the review panel.");
+      await chrome.downloads.download({ url: dataurl, filename: name });
+    }
+    await refreshbadge();
+    await audit("media", `Composed a derived pdf report of ${record2.pages} page${record2.pages === 1 ? "" : "s"} at ${record2.pagewidth} by ${record2.pageheight} points from ${segments.length} report segment${segments.length === 1 ? "" : "s"}, routed to ${exporttarget === "download" ? "the reviewed download flow" : "session memory"}.`, extra);
+    return { ok: true, summary: `Composed a derived pdf report of ${record2.pages} page${record2.pages === 1 ? "" : "s"}.`, details: { media: { id: record2.id, kind: "pdf", bytes: record2.bytes }, pages: record2.pages, pagewidth: record2.pagewidth, pageheight: record2.pageheight, landscape: record2.landscape, scale: record2.scale, segments: segments.length, exporttarget, derivation: "the pdf is a text layer composed from the page segments because browser print apis stay outside the reviewed manifest" } };
+  }
+  if (step.kind === "recordscreen" || step.kind === "captureaudio") {
+    const recordingoptions = recordingoptionsof(options.recording);
+    const consentref = typeof options.consentref === "string" ? options.consentref : "";
+    const consents = await memory.getrecordingconsents();
+    const consent = consents.find((item) => item.id === consentref && item.approved === true && item.usedat === void 0);
+    if (!consent) {
+      const pending = { id: consentref || randomid(), prompt: typeof options.prompt === "string" && options.prompt ? options.prompt : step.summary, origin, stepid: step.id, at: Date.now() };
+      await memory.setrecordingconsent(pending);
+      await refreshbadge();
+      await audit("media", `Recording consent prompt ${pending.id} opened for step ${step.id} on ${origin}; the recording waits for the user approval and every start needs its own prompt.`, extra);
+      return { ok: false, summary: `The ${step.kind} waits for your recording consent approval${consentref ? ` under ref ${consentref}` : ""}; approve it in the review panel and run the step again.`, details: { consent: { id: pending.id, prompt: pending.prompt, origin, stepid: step.id, approved: false } } };
+    }
+    await memory.setrecordingconsent({ ...consent, usedat: Date.now() });
+    const duration = typeof options.duration === "number" ? options.duration : recordingwindow(await memory.getsettings());
+    if (duration === void 0) throw new Error("The recording needs a reviewed duration window in options or the user configured recording window before it starts.");
+    const kind = step.kind === "recordscreen" ? "screen" : "audio";
+    const recordoptions = { ...recordingoptions };
+    if (kind === "audio" && recordoptions.audio === void 0) recordoptions.audio = true;
+    const record2 = newrecording({ id: randomid(), runid: plan.id, stepid: step.id, tabid: tabid2, kind, options: recordoptions, at: Date.now() });
+    activerecordings.set(record2.id, { record: record2, tabid: tabid2, stopat: Date.now() + duration });
+    const interval = frameinterval(recordingoptions.fps ?? 1);
+    const frames = [];
+    let missed = 0;
+    const deadline = Date.now() + duration;
+    try {
+      while (Date.now() < deadline && activerecordings.has(record2.id) && Date.now() < (activerecordings.get(record2.id)?.stopat ?? deadline)) {
+        if (kind === "screen") {
+          try {
+            const shot = await tabshot("png", void 0);
+            const measured = await bridgecall(tabid2, "measurepage");
+            const frame = { id: randomid(), runid: plan.id, stepid: step.id, kind: "recordscreen", format: "png", width: measured.viewportwidth, height: measured.viewportheight, capturedat: Date.now(), bytes: shot, name: await capturenamefor(step, plan, "recordscreen", "png") };
+            await memory.addcapture(frame);
+            frames.push(frame.id);
+          } catch {
+            missed += 1;
+          }
+        } else {
+          const elementstate = await bridgecall(tabid2, "mediaelements").catch(() => []);
+          frames.push(`${Date.now()}:${elementstate.length}`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, interval));
+      }
+      const finished = finishrecording({ ...record2, frames }, Date.now());
+      const written = await recordingwriter(finished, options.exporttarget === "download" ? "download" : "memory");
+      const stored = { ...finished, file: written.file, bytes: written.bytes };
+      await memory.addmedia(stored);
+      await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: stored.id, kind: stored.kind === "screen" ? "recording" : "audio", scope: stored.scope, bytes: stored.bytes ?? 0 }, Date.now()));
+      await refreshbadge();
+      await audit("media", `Recorded ${stored.duration ?? 0} milliseconds of ${stored.kind} activity of ${stored.scope} scope with ${frames.length - missed} frame${frames.length - missed === 1 ? "" : "s"}${missed > 0 ? ` and ${missed} missed capture${missed === 1 ? "" : "s"}` : ""} at ${stored.fps ?? 1} fps, stored as derived evidence with ${stored.bytes ?? 0} manifest bytes.`, extra);
+      return { ok: true, summary: `Recorded ${stored.duration ?? 0} milliseconds of ${stored.kind} activity with ${frames.length - missed} frames.`, details: { media: { id: stored.id, kind: stored.kind === "screen" ? "recording" : "audio", bytes: stored.bytes ?? 0 }, recording: { id: stored.id, duration: stored.duration, scope: stored.scope, fps: stored.fps }, frames: frames.length, missed, derivation: "tab screencast stays outside the reviewed manifest, so the recording derives an ordered frame sequence and an honest manifest instead of encoded media bytes" } };
+    } finally {
+      activerecordings.delete(record2.id);
+    }
+  }
+  if (step.kind === "captureframe") {
+    const timestamp = typeof options.timestamp === "number" ? options.timestamp : void 0;
+    const poster = options.poster === true;
+    const grabbed = await bridgecall(tabid2, "videoframe", step.target ?? "", timestamp, poster);
+    if (!grabbed.ok || !grabbed.dataurl) throw new Error(grabbed.summary);
+    const capture = captureoptionsof(options.capture);
+    const format = capture.format ?? "png";
+    const record2 = { id: randomid(), runid: plan.id, stepid: step.id, source: step.target ?? "", timestamp: timestamp ?? 0, poster, format, width: grabbed.width ?? 0, height: grabbed.height ?? 0, at: Date.now(), dataurl: grabbed.dataurl, name: await capturenamefor(step, plan, "captureframe", format) };
+    await memory.addmedia(record2);
+    await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: record2.id, kind: "frame", scope: step.target ?? "", bytes: (record2.dataurl ?? "").length }, Date.now()));
+    await refreshbadge();
+    await audit("media", `Grabbed a video frame of ${record2.width} by ${record2.height} pixels at ${record2.timestamp} seconds from ${step.target ?? "the video element"}${poster ? " as the poster frame" : ""}.`, extra);
+    return { ok: true, summary: `Grabbed the video frame at ${record2.timestamp} seconds.`, details: { media: { id: record2.id, kind: "frame", bytes: (record2.dataurl ?? "").length }, source: record2.source, timestamp: record2.timestamp, poster, width: record2.width, height: record2.height } };
+  }
+  if (step.kind === "downloadimages") {
+    const filter = imagefilterof(options.imagefilter);
+    const observed = await bridgecall(tabid2, "pageimages", filter.selector);
+    const descriptors = observed.map((entry) => ({ url: typeof entry.url === "string" ? entry.url : "", alt: typeof entry.alt === "string" ? entry.alt : "", width: typeof entry.width === "number" ? entry.width : 0, height: typeof entry.height === "number" ? entry.height : 0, bytes: typeof entry.bytes === "number" ? entry.bytes : 0, mime: typeof entry.mime === "string" ? entry.mime : "" }));
+    const matched = descriptors.filter((image) => imagematches(image, filter));
+    const unique = dedupeimages(matched);
+    const naming = options.naming && typeof options.naming === "object" && !Array.isArray(options.naming) ? options.naming : { run: true, step: true, sequence: true, kind: true };
+    const names = imagenames(naming, plan.id, step.id, unique.length, "png");
+    let downloaded = 0;
+    for (let index = 0; index < unique.length; index += 1) {
+      const image = unique[index];
+      if (!image) continue;
+      const rawextension = image.url.split("?")[0]?.split(".").pop()?.toLowerCase() ?? "";
+      const extension = /^[a-z0-9]{2,5}$/.test(rawextension) ? rawextension : "png";
+      const name = `${(names[index] ?? `image-${index + 1}`).replace(/\.[a-z0-9]+$/i, "")}.${extension}`;
+      const downloadid = await chrome.downloads.download({ url: image.url, filename: name }).catch(() => void 0);
+      if (downloadid !== void 0) downloaded += 1;
+    }
+    const batch = { id: randomid(), runid: plan.id, stepid: step.id, images: descriptors, matched: matched.length, downloaded, at: Date.now() };
+    await memory.addimagebatch(batch);
+    await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: batch.id, kind: "images", scope: filter.selector ?? "page", bytes: descriptors.reduce((total, image) => total + image.bytes, 0) }, Date.now()));
+    await refreshbadge();
+    await audit("media", `Detected ${descriptors.length} image${descriptors.length === 1 ? "" : "s"} on the page, matched ${matched.length} against the reviewed filter, deduplicated to ${unique.length} urls and downloaded ${downloaded} through the reviewed download flow.`, extra);
+    return { ok: true, summary: `Downloaded ${downloaded} of ${unique.length} deduplicated matching images.`, details: { media: { id: batch.id, kind: "images", bytes: descriptors.reduce((total, image) => total + image.bytes, 0) }, observed: descriptors.length, matched: matched.length, unique: unique.length, downloaded, filter } };
+  }
+  if (step.kind === "shotcanvas") {
+    const read = await bridgecall(tabid2, "canvasdata", step.target ?? "");
+    if (!read.ok || !read.dataurl) throw new Error(read.summary);
+    const capture = captureoptionsof(options.capture);
+    const format = capture.format ?? "png";
+    const record2 = { id: randomid(), runid: plan.id, stepid: step.id, element: step.target ?? "", context: read.context, width: read.width ?? 0, height: read.height ?? 0, format, at: Date.now(), dataurl: read.dataurl, name: await capturenamefor(step, plan, "shotcanvas", format) };
+    await memory.addmedia(record2);
+    await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: record2.id, kind: "canvas", scope: record2.element, bytes: (record2.dataurl ?? "").length }, Date.now()));
+    await refreshbadge();
+    await audit("media", `Read the ${record2.context} canvas buffer of ${step.target ?? "the canvas"} at ${record2.width} by ${record2.height} pixels${read.preserved === true ? " through a preserved readPixels pass" : ""}.`, extra);
+    return { ok: true, summary: `Captured the ${record2.context} canvas content.`, details: { media: { id: record2.id, kind: "canvas", bytes: (record2.dataurl ?? "").length }, context: record2.context, preserved: read.preserved === true, element: record2.element, width: record2.width, height: record2.height } };
+  }
+  if (step.kind === "probestream") {
+    const selector = typeof options.selector === "string" && options.selector ? options.selector : void 0;
+    const raw = await bridgecall(tabid2, "streamelements", selector);
+    const summaries = streamsummaries(raw);
+    const records = summaries.map((summary) => ({ id: randomid(), runid: plan.id, stepid: step.id, kind: summary.kind, tracks: summary.tracks, label: summary.label, live: summary.live, at: Date.now(), ...summary.detail !== void 0 ? { detail: summary.detail } : {} }));
+    for (const record2 of records) await memory.addmedia(record2);
+    if (records.length > 0) await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: records[0]?.id ?? "", kind: "stream", scope: selector ?? "page", bytes: 0 }, Date.now()));
+    await refreshbadge();
+    await audit("media", `Probed ${records.length} media stream${records.length === 1 ? "" : "s"} of the page with ${records.reduce((total, record2) => total + record2.tracks, 0)} tracks; peer connection statistics stay outside the isolated world bridge.`, extra);
+    return { ok: true, summary: `Probed ${records.length} media stream${records.length === 1 ? "" : "s"} with track details.`, details: { media: { id: records[0]?.id ?? "", kind: "stream", bytes: 0 }, streams: records, note: "peer connection statistics such as round trip time and frame drops need main world access that stays outside the reviewed bridge" } };
+  }
+  if (step.kind === "readmedia") {
+    const raw = await bridgecall(tabid2, "mediaelements");
+    const media = mediaentries(raw);
+    await audit("media", `Read ${media.length} embedded media source${media.length === 1 ? "" : "s"} with formats, durations, dimensions, codecs and track lists.`, extra);
+    return { ok: true, summary: `Read ${media.length} embedded media source${media.length === 1 ? "" : "s"}.`, details: { media: { id: step.id, kind: "media", bytes: 0 }, sources: media } };
+  }
+  if (step.kind === "readassets") {
+    const raw = await bridgecall(tabid2, "pageassets");
+    const entries = assetentries(raw);
+    const records = entries.map((entry) => ({ id: randomid(), runid: plan.id, stepid: step.id, kind: entry.kind, url: entry.url, bytes: entry.bytes, at: Date.now(), ...entry.sizes !== void 0 ? { sizes: entry.sizes } : {} }));
+    for (const record2 of records) await memory.addmedia(record2);
+    if (records.length > 0) await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: records[0]?.id ?? "", kind: "asset", scope: "page", bytes: 0 }, Date.now()));
+    await refreshbadge();
+    await audit("media", `Collected ${records.length} page asset${records.length === 1 ? "" : "s"}: ${records.filter((record2) => record2.kind === "favicon").length} favicon and ${records.filter((record2) => record2.kind === "logo").length} logo entries with declared icon sizes.`, extra);
+    return { ok: true, summary: `Collected ${records.length} page asset${records.length === 1 ? "" : "s"}.`, details: { media: { id: records[0]?.id ?? "", kind: "asset", bytes: 0 }, assets: records } };
+  }
+  if (step.kind === "timelapse") {
+    const lapse = lapseplanof(options.lapse);
+    if (!lapse) throw new Error("A reviewed lapse plan with interval, duration and format is required in options.");
+    const timestamps = lapseframes(lapse);
+    const capture = captureoptionsof(options.capture);
+    const format = lapse.format ?? capture.format ?? "png";
+    const frameids = [];
+    for (let index = 0; index < timestamps.length; index += 1) {
+      if (index > 0) await new Promise((resolve) => setTimeout(resolve, lapse.interval));
+      const shot = await tabshot(format === "png" || format === "jpeg" ? format : "png", capture.quality);
+      const measured = await bridgecall(tabid2, "measurepage");
+      const frame = { id: randomid(), runid: plan.id, stepid: step.id, kind: "timelapse", format, width: measured.viewportwidth, height: measured.viewportheight, capturedat: Date.now(), bytes: shot, name: await capturenamefor(step, plan, "timelapse", format), target: `frame-${index + 1}` };
+      await memory.addcapture(frame);
+      frameids.push(frame.id);
+    }
+    await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: frameids[0] ?? "", kind: "timelapse", scope: "page", bytes: 0 }, Date.now()));
+    await refreshbadge();
+    await audit("media", `Captured a time lapse of ${frameids.length} frame${frameids.length === 1 ? "" : "s"} at ${lapse.interval} millisecond intervals over ${lapse.duration} milliseconds in ${format}.`, extra);
+    return { ok: true, summary: `Captured a time lapse of ${frameids.length} frames.`, details: { media: { id: frameids[0] ?? "", kind: "timelapse", bytes: 0 }, frames: frameids, interval: lapse.interval, duration: lapse.duration, format } };
+  }
+  if (step.kind === "convertimage" || step.kind === "makethumbs") {
+    const single = typeof options.capture === "string" ? options.capture : void 0;
+    const list = Array.isArray(options.captures) ? options.captures.filter((item) => typeof item === "string" && item.trim().length > 0) : [];
+    const ids = single !== void 0 ? [single] : list;
+    const converted = [];
+    for (const id of ids) {
+      const source = await memory.getcapture(id);
+      if (!source) throw new Error(`No stored capture matches ${id}.`);
+      if (step.kind === "convertimage") {
+        const directive = convertdirectiveof(options.convert);
+        if (!directive) throw new Error("A reviewed convert directive with a target format is required in options.");
+        const record2 = await convertonecapture(source, directive, plan, step);
+        await memory.addcapture(record2);
+        converted.push({ id: record2.id, format: record2.format, width: record2.width, height: record2.height, name: record2.name ?? "" });
+      } else {
+        const directive = thumbdirectiveof(options.thumb);
+        if (!directive) throw new Error("A reviewed thumb directive with size, fit and suffix is required in options.");
+        const record2 = await thumbonecapture(source, directive, plan, step);
+        await memory.addcapture(record2);
+        converted.push({ id: record2.id, format: record2.format, width: record2.width, height: record2.height, name: record2.name ?? "" });
+      }
+    }
+    await memory.setprogress(recordmedia(await memory.getprogress(), plan.id, step.id, { id: converted[0]?.id ?? "", kind: step.kind === "convertimage" ? "convert" : "thumb", scope: "store", bytes: 0 }, Date.now()));
+    await refreshbadge();
+    await audit("media", `${step.kind === "convertimage" ? "Converted" : "Thumbnailed"} ${converted.length} stored capture${converted.length === 1 ? "" : "s"} into new derived capture records.`, extra);
+    return { ok: true, summary: `${step.kind === "convertimage" ? "Converted" : "Thumbnailed"} ${converted.length} stored capture${converted.length === 1 ? "" : "s"}.`, details: { media: { id: converted[0]?.id ?? "", kind: step.kind === "convertimage" ? "convert" : "thumb", bytes: 0 }, converted } };
+  }
+  throw new Error("Unsupported media kind.");
+}
 async function enforcewindowreview(step, session, plan) {
   const windowid = step.value && /^\d+$/.test(step.value) ? Number.parseInt(step.value, 10) : 0;
   const progress = plan ? await memory.getprogress() : void 0;
@@ -5692,8 +6497,10 @@ async function refreshbadge() {
   const quarantined = (await memory.getquarantines()).filter((entry) => entry.scan === "pending").length;
   const datasets = (await memory.getdatasets()).length;
   const captures = (await memory.getcaptures()).length;
+  const media = (await memory.getmediarecords()).length + (await memory.getimagebatches()).length;
+  const recordingprompts = (await memory.getrecordingconsents()).filter((record2) => record2.approved === void 0).length;
   const tasktabs2 = new Set(badges.map((badge) => badge.tabid)).size;
-  const total = (queues?.prefetch ?? 0) + (queues?.batchopen ?? 0) + tasktabs2 + prompts + consents + quarantined + datasets + captures;
+  const total = (queues?.prefetch ?? 0) + (queues?.batchopen ?? 0) + tasktabs2 + prompts + consents + quarantined + datasets + captures + media + recordingprompts;
   await chrome.action.setBadgeText({ text: total > 0 ? String(total) : "" }).catch(() => {
   });
 }
@@ -5749,6 +6556,8 @@ async function executestep(stepid) {
       output = await executenavigationkind(step, session, plan, tab.id, origin);
     } else if (iscapturekind(step.kind)) {
       output = await executecapturestep(step, session, plan, tab.id, origin);
+    } else if (ismediakind(step.kind)) {
+      output = await executemediastep(step, session, plan, tab.id, origin);
     } else {
       if (step.target && freshcheckkinds.has(step.kind)) {
         const fresh = await snapshot(tab.id);
@@ -5798,6 +6607,8 @@ async function executestep(stepid) {
     await updatetaskbadges(plan, tracked);
     await refreshbadge();
     if (iscomplete(tracked, plan) && plan.state === "approved") {
+      await stoprecordingsforrun(plan.id).catch(() => {
+      });
       const done = { ...plan, state: "completed", completedat: Date.now() };
       await memory.setplan(done);
       await audit("complete", "Every reviewed step of the approved plan has executed.", { ...session ? { sessionid: session.id } : {}, planid: done.id });
@@ -5938,6 +6749,13 @@ async function handlerequest(message, sender) {
         return meta;
       });
       const capturepairs = await memory.getpairs();
+      const mediarecords = (await memory.getmediarecords()).map((record2) => {
+        const { dataurl, ...meta } = record2;
+        void dataurl;
+        return meta;
+      });
+      const imagebatches = await memory.getimagebatches();
+      const recordingconsents = await memory.getrecordingconsents();
       const runsettings = await memory.getsettings();
       const scanhooks = [];
       for (const hook of await memory.getscanhooks()) {
@@ -5949,7 +6767,7 @@ async function handlerequest(message, sender) {
       const livetab = session ? await chrome.tabs.get(session.tabid).catch(() => void 0) : void 0;
       const waitprofile = session ? waitprofiles.find((record2) => record2.origin === session.origin) : void 0;
       const livestate = { phase: livetab?.status === "loading" ? "loading" : "complete", ...navrecords[0] ? { finalurl: navrecords[0].finalurl, redirects: navrecords[0].chain } : {} };
-      return { config: await memory.getconfig(), session, plan, progress: plan && progress?.planid === plan.id ? progress : void 0, diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit(), capabilities: await refreshcapabilities(), outcomes: await memory.getoutcomes(), holds: heldkeysreport({ tabid: session?.tabid ?? 0, holds }), dialogs: await memory.getdialogs(), retries: await memory.getretries(), ...signals ? { signals: signalsreport({ signals }) } : { signals: signalsreport({}) }, banners: await memory.getbanners(), mutationevents: await memory.getmutationevents(), focusevents: await memory.getfocusevents(), diffs: await memory.getdiffs(), selectors: await memory.getselectors(), ...a11y ? { a11y } : {}, ...reader ? { reader } : {}, ...map ? { map } : {}, trail: trailreport({ ...session ? { sessionid: session.id } : {}, trail }), navrecords, ratestates, safeties, curated, waitprofiles, auths, navcontrol, navqueues, artifacts, navstate: livestate, ...waitprofile ? { waitprofile } : {}, offline: !navigator.onLine, tabs, windows, layouts: layoutreport({ layouts }), tabgroups, tabmetas, badges, snapshots, closedtabs, tabwatchevents, clones, tasktabgauge: taskgauge, ...controltab ? { controltab } : {}, tabreport: report, profiles, tickets, wizards: wizardreport({ ...session ? { sessionid: session.id } : {}, wizards, picks }), picks, errorreports, captchas, detections, ...codeentry !== void 0 ? { codeentry: true } : {}, datasets, imports, extractsessions, streams, exports, provenances, taskrules, sheetendpoints: sheetgrants, downloads, netlogs, clipconsents, clips, quarantines, cleanuprules, cleanupruns, capturecounters, inventory, mimefilters, scanhooks, captures: capturemetadata, capturepairs, capturepolicy: runsettings?.capturepolicy ?? "manual", ...stitchprogress.size > 0 ? { stitchprogress: [...stitchprogress.values()] } : {} };
+      return { config: await memory.getconfig(), session, plan, progress: plan && progress?.planid === plan.id ? progress : void 0, diagnostic: await memory.getdiagnostic(), audit: await memory.getaudit(), capabilities: await refreshcapabilities(), outcomes: await memory.getoutcomes(), holds: heldkeysreport({ tabid: session?.tabid ?? 0, holds }), dialogs: await memory.getdialogs(), retries: await memory.getretries(), ...signals ? { signals: signalsreport({ signals }) } : { signals: signalsreport({}) }, banners: await memory.getbanners(), mutationevents: await memory.getmutationevents(), focusevents: await memory.getfocusevents(), diffs: await memory.getdiffs(), selectors: await memory.getselectors(), ...a11y ? { a11y } : {}, ...reader ? { reader } : {}, ...map ? { map } : {}, trail: trailreport({ ...session ? { sessionid: session.id } : {}, trail }), navrecords, ratestates, safeties, curated, waitprofiles, auths, navcontrol, navqueues, artifacts, navstate: livestate, ...waitprofile ? { waitprofile } : {}, offline: !navigator.onLine, tabs, windows, layouts: layoutreport({ layouts }), tabgroups, tabmetas, badges, snapshots, closedtabs, tabwatchevents, clones, tasktabgauge: taskgauge, ...controltab ? { controltab } : {}, tabreport: report, profiles, tickets, wizards: wizardreport({ ...session ? { sessionid: session.id } : {}, wizards, picks }), picks, errorreports, captchas, detections, ...codeentry !== void 0 ? { codeentry: true } : {}, datasets, imports, extractsessions, streams, exports, provenances, taskrules, sheetendpoints: sheetgrants, downloads, netlogs, clipconsents, clips, quarantines, cleanuprules, cleanupruns, capturecounters, inventory, mimefilters, scanhooks, captures: capturemetadata, capturepairs, capturepolicy: runsettings?.capturepolicy ?? "manual", media: mediarecords, imagebatches, recordingconsents, recordingactive: [...activerecordings.values()].map((active) => ({ id: active.record.id, kind: active.record.kind, scope: active.record.scope, startedat: active.record.startedat, stopat: active.stopat })), recordingwindow: runsettings?.recordingwindow, ...stitchprogress.size > 0 ? { stitchprogress: [...stitchprogress.values()] } : {} };
     }
     case "capabilities":
       return refreshcapabilities();
@@ -5992,7 +6810,8 @@ async function handlerequest(message, sender) {
       if (!outcome) throw new Error("No outcome exists for the reviewed step.");
       const resolved = outcome.details?.resolvedtarget;
       const capture = outcome.details?.capture;
-      return JSON.parse(outcomeresponse({ outcome, plan, ...resolved ? { resolvedtarget: resolved } : {}, ...capture ? { capture } : {} }));
+      const media = outcome.details?.media;
+      return JSON.parse(outcomeresponse({ outcome, plan, ...resolved ? { resolvedtarget: resolved } : {}, ...capture ? { capture } : {}, ...media ? { media } : {} }));
     }
     case "map": {
       const plan = await memory.getplan();
@@ -6403,8 +7222,133 @@ async function handlerequest(message, sender) {
       await refreshbadge();
       return { capturepolicy: mode };
     }
+    case "mediareport": {
+      const records = (await memory.getmediarecords()).map((record2) => {
+        const { dataurl, ...meta } = record2;
+        void dataurl;
+        return meta;
+      });
+      return mediareport({ records, images: await memory.getimagebatches() });
+    }
+    case "mediabytes": {
+      const inputmedia = message;
+      const record2 = await memory.getmediarecord(inputmedia.id ?? "");
+      if (!record2) throw new Error("No stored media record matches the requested id.");
+      const bytes = "dataurl" in record2 ? record2.dataurl : void 0;
+      if (!bytes) throw new Error("The media bytes expired from the retention window; the metadata stays for the audit trail.");
+      const kind = "pages" in record2 ? "pdf" : "timestamp" in record2 ? "frame" : "canvas";
+      return { id: record2.id, kind, bytes };
+    }
+    case "downloadmedia": {
+      const inputmedia = message;
+      const session = await memory.getsession();
+      if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error("Media downloads stay behind the consent gate of an active session.");
+      const record2 = await memory.getmediarecord(inputmedia.id ?? "");
+      if (!record2) throw new Error("No stored media record matches the requested id.");
+      const bytes = "dataurl" in record2 ? record2.dataurl : void 0;
+      if (!bytes) throw new Error("The media bytes expired from the retention window; the metadata stays for the audit trail.");
+      const granted = await chrome.permissions.contains({ permissions: ["downloads"] }).catch(() => false);
+      if (!granted) throw new Error("The media download needs the downloads capability; request it from the review panel.");
+      const name = "name" in record2 ? record2.name ?? `media-${record2.id}` : `media-${record2.id}`;
+      await chrome.downloads.download({ url: bytes, filename: name });
+      await audit("media", `The review panel downloaded media record ${record2.id} through the reviewed download flow.`, { sessionid: session.id });
+      return { id: record2.id, downloaded: true };
+    }
+    case "approverecordingconsent": {
+      const inputrecordingconsent = message;
+      const record2 = (await memory.getrecordingconsents()).find((item) => item.id === inputrecordingconsent.id);
+      if (!record2) throw new Error("No recording consent prompt matches the requested id.");
+      await memory.setrecordingconsent({ ...record2, approved: inputrecordingconsent.approved !== false });
+      const session = await memory.getsession();
+      await audit("media", `Recording consent prompt ${record2.id} for step ${record2.stepid} on ${record2.origin} ${inputrecordingconsent.approved !== false ? "approved" : "declined"} by the user; every recording start consumes its own prompt.`, { ...session ? { sessionid: session.id } : {} });
+      await refreshbadge();
+      return { id: record2.id, approved: inputrecordingconsent.approved !== false };
+    }
+    case "stoprecording": {
+      const inputstop = message;
+      const active = activerecordings.get(inputstop.id ?? "");
+      if (!active) throw new Error("No active recording matches the requested id.");
+      active.stopat = Date.now();
+      const session = await memory.getsession();
+      await audit("media", `The review panel requested a clean stop of recording ${active.record.id} of kind ${active.record.kind}.`, { ...session ? { sessionid: session.id } : {} });
+      return { id: active.record.id, stopping: true };
+    }
+    case "recordingframes": {
+      const inputframes = message;
+      const record2 = await memory.getrecording(inputframes.id ?? "");
+      if (!record2) throw new Error("No stored recording matches the requested id.");
+      return { id: record2.id, kind: record2.kind, frames: record2.frames ?? [], interval: frameinterval(record2.fps ?? 1), scope: record2.scope, duration: record2.duration };
+    }
+    case "downloadrecording": {
+      const inputrecording = message;
+      const session = await memory.getsession();
+      if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error("Recording downloads stay behind the consent gate of an active session.");
+      const record2 = await memory.getrecording(inputrecording.id ?? "");
+      if (!record2) throw new Error("No stored recording matches the requested id.");
+      const written = await recordingwriter(record2, "download");
+      await memory.addmedia({ ...record2, file: written.file, bytes: written.bytes });
+      await audit("media", `The review panel downloaded the recording manifest ${record2.id} of kind ${record2.kind} through the reviewed download flow.`, { sessionid: session.id });
+      return { id: record2.id, downloaded: true, file: written.file };
+    }
+    case "deleterecording": {
+      const inputdelete = message;
+      const session = await memory.getsession();
+      if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error("Recording deletion stays behind the consent gate of an active session.");
+      const record2 = await memory.getrecording(inputdelete.id ?? "");
+      if (!record2) throw new Error("No stored recording matches the requested id.");
+      await memory.removemedia(record2.id);
+      await audit("media", `The review panel deleted the recording ${record2.id} of kind ${record2.kind}; the outcome evidence stays in the audit trail.`, { sessionid: session.id });
+      await refreshbadge();
+      return { id: record2.id, deleted: true };
+    }
+    case "convertcapture": {
+      const inputconvert = message;
+      const session = await memory.getsession();
+      if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error("Capture conversions stay behind the consent gate of an active session.");
+      const plan = await memory.getplan();
+      if (!plan) throw new Error("No plan is available for the capture conversion.");
+      const source = await memory.getcapture(inputconvert.id ?? "");
+      if (!source) throw new Error("No stored capture matches the requested id.");
+      if (inputconvert.target !== "png" && inputconvert.target !== "jpeg" && inputconvert.target !== "webp") throw new Error("The conversion target must be png, jpeg or webp.");
+      const record2 = await convertonecapture(source, { target: inputconvert.target, ...typeof inputconvert.quality === "number" ? { quality: inputconvert.quality } : {} }, plan, { id: `panel-${source.id}`, kind: "convertimage", summary: `Panel conversion of capture ${source.id}.`, risk: "read" });
+      await memory.addcapture(record2);
+      await audit("media", `The review panel converted capture ${source.id} from ${source.format} to ${record2.format}.`, { sessionid: session.id });
+      await refreshbadge();
+      return { id: record2.id, format: record2.format, name: record2.name };
+    }
+    case "thumbcapture": {
+      const inputthumb = message;
+      const session = await memory.getsession();
+      if (!session || session.stoppedat || session.expiresat <= Date.now()) throw new Error("Capture thumbnails stay behind the consent gate of an active session.");
+      const plan = await memory.getplan();
+      if (!plan) throw new Error("No plan is available for the capture thumbnail.");
+      const source = await memory.getcapture(inputthumb.id ?? "");
+      if (!source) throw new Error("No stored capture matches the requested id.");
+      const directive = thumbdirectiveof({ size: inputthumb.size, fit: inputthumb.fit, suffix: inputthumb.suffix });
+      if (!directive) throw new Error("The thumbnail needs a reviewed size, a cover or contain fit and a naming suffix.");
+      const record2 = await thumbonecapture(source, directive, plan, { id: `panel-${source.id}`, kind: "makethumbs", summary: `Panel thumbnail of capture ${source.id}.`, risk: "read" });
+      await memory.addcapture(record2);
+      await audit("media", `The review panel thumbnailed capture ${source.id} to ${record2.width} by ${record2.height} pixels with the ${directive.fit} fit.`, { sessionid: session.id });
+      await refreshbadge();
+      return { id: record2.id, width: record2.width, height: record2.height, name: record2.name };
+    }
+    case "setrecordingwindow": {
+      const inputwindow = message;
+      const window2 = inputwindow.window;
+      if (typeof window2 !== "number" || !Number.isFinite(window2) || window2 <= 0) throw new Error("The recording window must be a positive number of milliseconds with no code ceiling.");
+      const settings = await memory.getsettings();
+      await memory.setsettings({ ...settings, recordingwindow: window2 });
+      await audit("configure", `The user set the recording duration window of the run to ${window2} milliseconds; recordings never run past it.`);
+      return { recordingwindow: window2 };
+    }
     case "stop": {
       const session = await memory.getsession();
+      for (const [id, active] of [...activerecordings.entries()]) {
+        const finished = finishrecording(active.record, Date.now());
+        await memory.addmedia(finished).catch(() => {
+        });
+        activerecordings.delete(id);
+      }
       if (session) await memory.setsession({ ...session, stoppedat: Date.now() });
       const plan = await memory.getplan();
       if (plan && ["pending", "approved"].includes(plan.state)) await memory.setplan({ ...plan, state: "cancelled" });