@wenathlan/extension 1.1.40 → 1.1.42

package/dist/index.js

@@ -196,6 +196,594 @@ function annotationplanof(input) {
   return plan;
 }
 
+// httpclient.ts
+var httpkinds = ["fetchurl", "parsejson", "parsehtml", "callrest", "callgraphql"];
+var redirectstatuses = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
+var bodilessmethods = /* @__PURE__ */ new Set(["GET", "HEAD"]);
+function statusclassof(status) {
+  if (status >= 100 && status < 200) return "informational";
+  if (status >= 200 && status < 300) return "success";
+  if (status >= 300 && status < 400) return "redirect";
+  if (status >= 400 && status < 500) return "clienterror";
+  if (status >= 500 && status < 600) return "servererror";
+  return "unknown";
+}
+function templateurl(template, values) {
+  return template.replace(/\{([a-z0-9_]+)\}/gi, (whole, name) => values[name] === void 0 ? whole : String(values[name]));
+}
+function fetchrequestof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.url !== "string" || !options.url.trim()) return void 0;
+  const request = { url: options.url.trim() };
+  if (typeof options.method === "string" && options.method.trim()) request.method = options.method.trim().toUpperCase();
+  if (options.headers && typeof options.headers === "object" && !Array.isArray(options.headers)) {
+    const headers = {};
+    for (const [name, headervalue] of Object.entries(options.headers)) {
+      if (typeof headervalue === "string") headers[name] = headervalue;
+    }
+    request.headers = headers;
+  }
+  if (typeof options.body === "string") request.body = options.body;
+  if (options.mode === "cors" || options.mode === "no-cors" || options.mode === "same-origin") request.mode = options.mode;
+  return request;
+}
+function fetchoptionsof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const normalized = {};
+  if (typeof options.timeout === "number" && Number.isFinite(options.timeout)) normalized.timeout = options.timeout;
+  if (typeof options.retries === "number" && Number.isFinite(options.retries)) normalized.retries = options.retries;
+  if (typeof options.backoff === "number" && Number.isFinite(options.backoff)) normalized.backoff = options.backoff;
+  if (typeof options.follow === "number" && Number.isFinite(options.follow)) normalized.follow = options.follow;
+  return normalized;
+}
+function streamwindowof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const window = {};
+  if (typeof options.budget === "number" && Number.isFinite(options.budget)) window.budget = options.budget;
+  return window;
+}
+function jsonpathrulesof(value) {
+  if (!Array.isArray(value)) return [];
+  const rules = [];
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) continue;
+    const entry = item;
+    if (typeof entry.name !== "string" || !entry.name.trim()) continue;
+    if (typeof entry.path !== "string" || !entry.path.trim()) continue;
+    const rule = { name: entry.name.trim(), path: entry.path.trim() };
+    if (entry.kind === "text" || entry.kind === "number" || entry.kind === "boolean" || entry.kind === "json") rule.kind = entry.kind;
+    if (entry.default !== void 0) rule.default = entry.default;
+    rules.push(rule);
+  }
+  return rules;
+}
+function htmlqueriesof(value) {
+  if (!Array.isArray(value)) return [];
+  const queries = [];
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) continue;
+    const entry = item;
+    if (typeof entry.selector !== "string" || !entry.selector.trim()) continue;
+    const query = { selector: entry.selector.trim() };
+    if (typeof entry.attribute === "string" && entry.attribute.trim()) query.attribute = entry.attribute.trim();
+    if (entry.multi === true) query.multi = true;
+    queries.push(query);
+  }
+  return queries;
+}
+function graphqlrequestof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.query !== "string" || !options.query.trim()) return void 0;
+  if (options.operationkind !== "query" && options.operationkind !== "mutation") return void 0;
+  const request = { query: options.query, operationkind: options.operationkind };
+  if (options.variables && typeof options.variables === "object" && !Array.isArray(options.variables)) request.variables = options.variables;
+  if (typeof options.operationname === "string" && options.operationname.trim()) request.operationname = options.operationname.trim();
+  return request;
+}
+var realsleep = (milliseconds) => new Promise((resolve) => setTimeout(resolve, Math.max(0, milliseconds)));
+async function sendfetch(input) {
+  const options = input.options ?? {};
+  const sleep = input.sleep ?? realsleep;
+  const now = input.now ?? Date.now;
+  const attempts = Math.max(1, Math.floor(options.retries ?? 0) + 1);
+  const backoff = options.backoff ?? 0;
+  const follow = options.follow ?? Number.POSITIVE_INFINITY;
+  let url = input.request.url;
+  let method = (input.request.method ?? "GET").toUpperCase();
+  let retries = 0;
+  let redirects = 0;
+  let lastreason = "";
+  for (let attempt = 1; attempt <= attempts; attempt += 1) {
+    let hops = 0;
+    const startedat = now();
+    let response;
+    try {
+      const init = { method, headers: { ...input.request.headers ?? {} }, ...input.request.body !== void 0 && !bodilessmethods.has(method) ? { body: input.request.body } : {}, ...input.request.mode !== void 0 ? { mode: input.request.mode } : {}, redirect: follow <= 0 ? "error" : "follow" };
+      const sent = input.transport(url, init);
+      if (options.timeout !== void 0 && Number.isFinite(options.timeout) && options.timeout >= 0) {
+        let timedout = false;
+        response = await Promise.race([sent, sleep(options.timeout).then(() => {
+          timedout = true;
+          return void 0;
+        })]).then((value) => value ?? (timedout ? (() => {
+          throw new Error(`The request timed out after ${options.timeout} milliseconds.`);
+        })() : value));
+      } else {
+        response = await sent;
+      }
+      while (response !== void 0 && redirectstatuses.has(response.status) && typeof response.location === "string" && response.location) {
+        hops += 1;
+        if (hops > follow) throw new Error(`The redirect chain exceeded the reviewed follow limit of ${follow}.`);
+        url = new URL(response.location, url).toString();
+        if (method === "POST" && [301, 302, 303].includes(response.status)) method = "GET";
+        response = await input.transport(url, { ...init, method });
+      }
+      redirects = hops;
+    } catch (error) {
+      lastreason = error instanceof Error ? error.message : String(error);
+      response = void 0;
+    }
+    if (response !== void 0) {
+      const body = response.body;
+      return { url, status: response.status, statusclass: statusclassof(response.status), headernames: Object.keys(response.headers), body, bytes: body.length, duration: now() - startedat, retries, redirects };
+    }
+    if (attempt < attempts) {
+      const wait = backoff * attempt;
+      if (wait > 0) await sleep(wait);
+      input.onretry?.(attempt, wait, lastreason);
+      retries = attempt;
+    }
+  }
+  throw new Error(`The request failed after ${attempts} attempt${attempts === 1 ? "" : "s"} with ${retries} retr${retries === 1 ? "y" : "ies"}: ${lastreason}`);
+}
+async function readstream(input) {
+  const pull = typeof input.chunks === "function" ? input.chunks : /* @__PURE__ */ ((source) => {
+    let index = 0;
+    return async () => source[index++];
+  })(input.chunks);
+  let count = 0;
+  let total = 0;
+  for (; ; ) {
+    if (input.window.abort?.() === true) return { chunks: count, bytes: total, aborted: true, reason: "The reviewed abort flag stopped the stream." };
+    const chunk = await pull();
+    if (chunk === void 0) return { chunks: count, bytes: total, aborted: false };
+    const next = total + chunk.length;
+    if (input.window.budget !== void 0 && next > input.window.budget) return { chunks: count, bytes: total, aborted: true, reason: `The stream aborted at ${next} bytes past the reviewed byte budget of ${input.window.budget}.` };
+    total = next;
+    count += 1;
+    input.window.onchunk?.(chunk, total);
+  }
+}
+function pathstep(current, segment) {
+  if (Array.isArray(current) && /^\d+$/.test(segment)) return current[Number.parseInt(segment, 10)];
+  if (current && typeof current === "object" && !Array.isArray(current)) return current[segment];
+  return void 0;
+}
+function coerce(value, kind, fallback) {
+  if (value === void 0 || value === null) return { value: fallback, missing: true };
+  if (kind === "text") return { value: String(value), missing: false };
+  if (kind === "number") {
+    const numeric = typeof value === "number" ? value : Number(value);
+    return Number.isFinite(numeric) ? { value: numeric, missing: false } : { value: fallback, missing: true };
+  }
+  if (kind === "boolean") return { value: value === true || value === "true", missing: false };
+  return { value, missing: false };
+}
+function readpath(parsed, rules) {
+  const fields = [];
+  for (const rule of rules) {
+    const kind = rule.kind ?? "text";
+    let current = parsed;
+    let missing = false;
+    for (const segment of rule.path.split(".")) {
+      const next = pathstep(current, segment);
+      if (next === void 0) {
+        missing = true;
+        break;
+      }
+      current = next;
+    }
+    if (missing) fields.push({ name: rule.name, path: rule.path, kind, ...rule.default !== void 0 ? { value: rule.default } : {}, missing: true });
+    else {
+      const resolved = coerce(current, kind, rule.default);
+      fields.push({ name: rule.name, path: rule.path, kind, ...resolved.value !== void 0 ? { value: resolved.value } : {}, ...resolved.missing ? { missing: true } : {} });
+    }
+  }
+  return fields;
+}
+function defaultparse() {
+  const parser = globalThis.DOMParser;
+  if (!parser) throw new Error("parsehtml needs a domparser seam outside the page context.");
+  return (markup) => {
+    const document = new parser().parseFromString(markup, "text/html");
+    return { query: (selector) => Array.from(document.querySelectorAll(selector)).map((element) => ({ text: element.textContent ?? "", attributes: Object.fromEntries(Array.from(element.attributes).map((attribute) => [attribute.name, attribute.value])) })) };
+  };
+}
+function parsehtmlbody(input) {
+  const parse = input.parse ?? defaultparse();
+  const document = parse(input.body);
+  return input.queries.map((query) => {
+    const matches = document.query(query.selector);
+    const chosen = query.multi === true ? matches : matches.slice(0, 1);
+    const values = chosen.map((match) => query.attribute !== void 0 ? match.attributes[query.attribute] ?? "" : match.text);
+    return { selector: query.selector, ...query.attribute !== void 0 ? { attribute: query.attribute } : {}, multi: query.multi === true, count: matches.length, values };
+  });
+}
+function payloadvalid(payload, schema) {
+  if (!schema) return { ok: false, errors: ["The typed endpoint call needs a reviewed payload schema before it runs."] };
+  const errors = [];
+  for (const field of schema.fields) {
+    const value = payload[field.name];
+    if (value === void 0 || value === null) {
+      if (field.required === true) errors.push(`The required field ${field.name} of kind ${field.kind} is missing.`);
+      continue;
+    }
+    if (field.kind === "string" && typeof value !== "string") errors.push(`The field ${field.name} must be a string.`);
+    if (field.kind === "number" && (typeof value !== "number" || !Number.isFinite(value))) errors.push(`The field ${field.name} must be a finite number.`);
+    if (field.kind === "boolean" && typeof value !== "boolean") errors.push(`The field ${field.name} must be a boolean.`);
+  }
+  return { ok: errors.length === 0, errors };
+}
+function payloadwithdefaults(payload, schema) {
+  if (!schema) return payload;
+  const merged = { ...payload };
+  for (const field of schema.fields) {
+    if (merged[field.name] === void 0 && field.default !== void 0) merged[field.name] = field.default;
+  }
+  return merged;
+}
+function errorsof(body) {
+  try {
+    const parsed = JSON.parse(body);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return [body];
+    const record2 = parsed;
+    for (const key of ["errors", "messages", "error", "message"]) {
+      const value = record2[key];
+      if (Array.isArray(value)) return value.map((item) => typeof item === "string" ? item : item && typeof item === "object" && typeof item.message === "string" ? item.message : String(item));
+      if (typeof value === "string") return [value];
+    }
+    return [body];
+  } catch {
+    return [body];
+  }
+}
+async function callrest(input) {
+  const check = payloadvalid(input.payload, input.endpoint.schema);
+  if (!check.ok) throw new Error(check.errors.join(" "));
+  const payload = payloadwithdefaults(input.payload, input.endpoint.schema);
+  const url = templateurl(input.endpoint.url, payload);
+  const method = input.endpoint.method.toUpperCase();
+  const request = { url, method, ...input.endpoint.headers !== void 0 ? { headers: input.endpoint.headers } : {}, ...bodilessmethods.has(method) ? {} : { body: JSON.stringify(payload) } };
+  const transport = await sendfetch({ request, ...input.options !== void 0 ? { options: input.options } : {}, transport: input.transport, ...input.sleep !== void 0 ? { sleep: input.sleep } : {}, ...input.onretry !== void 0 ? { onretry: input.onretry } : {}, ...input.now !== void 0 ? { now: input.now } : {} });
+  const ok = input.success !== void 0 ? input.success.includes(transport.status) : transport.statusclass === "success";
+  return { transport, url, payload, ok, errors: ok ? [] : errorsof(transport.body) };
+}
+function graphqlopenvelope(request) {
+  return JSON.stringify({ query: request.query, ...request.variables !== void 0 ? { variables: request.variables } : {}, ...request.operationname !== void 0 ? { operationName: request.operationname } : {} });
+}
+function unwrapgraphql(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { errors: ["The graphql response is not a json object."] };
+  const record2 = value;
+  const errors = Array.isArray(record2.errors) ? record2.errors.map((item) => typeof item === "string" ? item : item && typeof item === "object" && typeof item.message === "string" ? item.message : String(item)) : [];
+  return { ...record2.data !== void 0 ? { data: record2.data } : {}, errors };
+}
+async function callgraphql(input) {
+  const request = { url: input.endpoint.url, method: "POST", ...input.endpoint.headers !== void 0 ? { headers: input.endpoint.headers } : {}, body: graphqlopenvelope(input.request) };
+  const transport = await sendfetch({ request, ...input.options !== void 0 ? { options: input.options } : {}, transport: input.transport, ...input.sleep !== void 0 ? { sleep: input.sleep } : {}, ...input.onretry !== void 0 ? { onretry: input.onretry } : {}, ...input.now !== void 0 ? { now: input.now } : {} });
+  try {
+    const unwrapped = unwrapgraphql(JSON.parse(transport.body));
+    return { transport, ...unwrapped.data !== void 0 ? { data: unwrapped.data } : {}, errors: unwrapped.errors };
+  } catch {
+    return { transport, errors: [transport.body] };
+  }
+}
+
+// media.ts
+var mediakinds = ["capturepdf", "recordscreen", "captureaudio", "captureframe", "downloadimages", "shotcanvas", "probestream", "readmedia", "readassets", "timelapse", "convertimage", "makethumbs"];
+var defaultpaperwidth = 8.5;
+var defaultpaperheight = 11;
+var defaultmargins = { top: 0.4, right: 0.4, bottom: 0.4, left: 0.4 };
+var pdfpointsperinch = 72;
+var basefontsize = 11;
+function pdfoptionsof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const normalized = {};
+  if (typeof options.paperwidth === "number" && Number.isFinite(options.paperwidth)) normalized.paperwidth = options.paperwidth;
+  if (typeof options.paperheight === "number" && Number.isFinite(options.paperheight)) normalized.paperheight = options.paperheight;
+  if (options.margins && typeof options.margins === "object" && !Array.isArray(options.margins)) {
+    const margins = options.margins;
+    const top = typeof margins.top === "number" ? margins.top : defaultmargins.top;
+    const right = typeof margins.right === "number" ? margins.right : defaultmargins.right;
+    const bottom = typeof margins.bottom === "number" ? margins.bottom : defaultmargins.bottom;
+    const left = typeof margins.left === "number" ? margins.left : defaultmargins.left;
+    normalized.margins = { top, right, bottom, left };
+  }
+  if (typeof options.scale === "number" && Number.isFinite(options.scale)) normalized.scale = options.scale;
+  if (typeof options.landscape === "boolean") normalized.landscape = options.landscape;
+  if (typeof options.paginate === "boolean") normalized.paginate = options.paginate;
+  return normalized;
+}
+function pdfpagesize(options) {
+  const width = (options.paperwidth ?? defaultpaperwidth) * pdfpointsperinch;
+  const height = (options.paperheight ?? defaultpaperheight) * pdfpointsperinch;
+  return options.landscape === true ? { width: height, height: width } : { width, height };
+}
+function pdfmargins(options) {
+  const margins = options.margins ?? defaultmargins;
+  return { top: margins.top * pdfpointsperinch, right: margins.right * pdfpointsperinch, bottom: margins.bottom * pdfpointsperinch, left: margins.left * pdfpointsperinch };
+}
+function pdffontsize(options) {
+  return basefontsize * (options.scale ?? 1);
+}
+function pdftextlayout(text2, options) {
+  const size = pdfpagesize(options);
+  const margins = pdfmargins(options);
+  const fontsize = pdffontsize(options);
+  const leading = fontsize * 1.35;
+  const linesperpage = Math.max(1, Math.floor((size.height - margins.top - margins.bottom) / leading));
+  const columns = Math.max(1, Math.floor((size.width - margins.left - margins.right) / (fontsize * 0.5)));
+  const wrapped = [];
+  for (const paragraph of text2.split(/\r?\n/)) {
+    let line = "";
+    for (const word of paragraph.split(/\s+/).filter(Boolean)) {
+      const candidate = line ? `${line} ${word}` : word;
+      if (candidate.length <= columns) {
+        line = candidate;
+        continue;
+      }
+      if (line) wrapped.push(line);
+      if (word.length <= columns) {
+        line = word;
+        continue;
+      }
+      for (let index = 0; index < word.length; index += columns) wrapped.push(word.slice(index, index + columns));
+      line = "";
+    }
+    wrapped.push(line);
+    if (wrapped.length >= linesperpage) break;
+  }
+  return wrapped.slice(0, linesperpage);
+}
+function pdfsegments(scrollheight, viewportheight, breaks) {
+  if (scrollheight <= 0) return [];
+  const step = viewportheight > 0 ? viewportheight : scrollheight;
+  const cuts = [0, ...breaks.filter((top) => Number.isFinite(top) && top > 0 && top < scrollheight).map((top) => Math.round(top))].filter((top, index2, list) => list.indexOf(top) === index2).sort((left, right) => left - right);
+  const segments = [];
+  let index = 0;
+  let cursor = 0;
+  while (cursor < scrollheight) {
+    while (index < cuts.length && (cuts[index] ?? 0) <= cursor) index += 1;
+    const nextcut = index < cuts.length ? cuts[index] : void 0;
+    const next = nextcut !== void 0 ? Math.min(nextcut, scrollheight) : Math.min(cursor + step, scrollheight);
+    if (next <= cursor) break;
+    segments.push({ top: cursor, height: next - cursor });
+    cursor = next;
+  }
+  return segments.length > 0 ? segments : [{ top: 0, height: scrollheight }];
+}
+function pdfescape(text2) {
+  let escaped = "";
+  for (const character of text2) {
+    const code = character.charCodeAt(0);
+    if (character === "(" || character === ")" || character === "\\") escaped += `\\${character}`;
+    else if (code >= 32 && code <= 255) escaped += character;
+    else escaped += "?";
+  }
+  return escaped;
+}
+function buildpdf(pages, options) {
+  const size = pdfpagesize(options);
+  const margins = pdfmargins(options);
+  const fontsize = pdffontsize(options);
+  const leading = fontsize * 1.35;
+  const laidout = (pages.length > 0 ? pages : [""]).map((text2) => pdftextlayout(text2, options));
+  const objects = [];
+  const kids = laidout.map((_, index) => `${4 + index * 2} 0 R`).join(" ");
+  objects.push(`<< /Type /Catalog /Pages 2 0 R >>`);
+  objects.push(`<< /Type /Pages /Kids [${kids}] /Count ${laidout.length} >>`);
+  objects.push(`<< /Type /Font /Subtype /Type1 /BaseFont /Helvetica >>`);
+  for (let pageindex = 0; pageindex < laidout.length; pageindex += 1) {
+    const lines = laidout[pageindex] ?? [];
+    const operators = ["BT", `/F1 ${fontsize} Tf`, `${leading.toFixed(2)} TL`, `${margins.left.toFixed(2)} ${(size.height - margins.top - fontsize).toFixed(2)} Td`];
+    for (let lineindex = 0; lineindex < lines.length; lineindex += 1) {
+      if (lineindex > 0) operators.push("T*");
+      operators.push(`(${pdfescape(lines[lineindex] ?? "")}) Tj`);
+    }
+    operators.push("ET");
+    const content = operators.join("\n");
+    objects.push(`<< /Type /Page /Parent 2 0 R /MediaBox [0 0 ${size.width.toFixed(2)} ${size.height.toFixed(2)}] /Resources << /Font << /F1 3 0 R >> >> /Contents ${5 + pageindex * 2} 0 R >>`);
+    objects.push(`<< /Length ${content.length} >>
+stream
+${content}
+endstream`);
+  }
+  let document = "%PDF-1.4\n";
+  const offsets = [];
+  for (let index = 0; index < objects.length; index += 1) {
+    offsets.push(document.length);
+    document += `${index + 1} 0 obj
+${objects[index]}
+endobj
+`;
+  }
+  const xrefstart = document.length;
+  document += `xref
+0 ${objects.length + 1}
+0000000000 65535 f 
+`;
+  for (const offset of offsets) document += `${String(offset).padStart(10, "0")} 00000 n 
+`;
+  document += `trailer
+<< /Size ${objects.length + 1} /Root 1 0 R >>
+startxref
+${xrefstart}
+%%EOF
+`;
+  return { document, bytes: document.length, pages: laidout.length, pagewidth: Math.round(size.width), pageheight: Math.round(size.height) };
+}
+function recordingoptionsof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const normalized = {};
+  if (options.scope === "tab" || options.scope === "run") normalized.scope = options.scope;
+  if (typeof options.fps === "number" && Number.isFinite(options.fps)) normalized.fps = options.fps;
+  if (typeof options.bitrate === "number" && Number.isFinite(options.bitrate)) normalized.bitrate = options.bitrate;
+  if (typeof options.audio === "boolean") normalized.audio = options.audio;
+  return normalized;
+}
+function newrecording(input) {
+  return {
+    id: input.id,
+    runid: input.runid,
+    stepid: input.stepid,
+    tabid: input.tabid,
+    kind: input.kind,
+    scope: input.options.scope ?? "tab",
+    format: input.kind === "audio" ? "evidence" : "frames",
+    startedat: input.at,
+    at: input.at,
+    ...input.options.fps !== void 0 ? { fps: input.options.fps } : {},
+    ...input.options.bitrate !== void 0 ? { bitrate: input.options.bitrate } : {},
+    ...input.options.audio !== void 0 ? { audio: input.options.audio } : {},
+    frames: []
+  };
+}
+function finishrecording(record2, endat) {
+  return { ...record2, endedat: endat, duration: Math.max(0, endat - record2.startedat) };
+}
+function frameinterval(fps) {
+  if (!Number.isFinite(fps) || fps <= 0) return 1e3;
+  return Math.max(1, Math.round(1e3 / fps));
+}
+function imagefilterof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  const normalized = {};
+  if (typeof options.selector === "string" && options.selector.trim()) normalized.selector = options.selector.trim();
+  if (typeof options.minwidth === "number" && Number.isFinite(options.minwidth)) normalized.minwidth = options.minwidth;
+  if (typeof options.minheight === "number" && Number.isFinite(options.minheight)) normalized.minheight = options.minheight;
+  if (Array.isArray(options.formats) && options.formats.every((item) => typeof item === "string" && item.trim())) normalized.formats = options.formats;
+  return normalized;
+}
+function imagematches(image, filter) {
+  if (filter.minwidth !== void 0 && image.width < filter.minwidth) return false;
+  if (filter.minheight !== void 0 && image.height < filter.minheight) return false;
+  if (filter.formats !== void 0 && filter.formats.length > 0) {
+    const mime = image.mime.toLowerCase();
+    const matches = filter.formats.some((format) => {
+      const wanted = format.toLowerCase().trim();
+      return mime === wanted || mime === `image/${wanted}` || mime.endsWith(`/${wanted}`);
+    });
+    if (!matches) return false;
+  }
+  return true;
+}
+function dedupeimages(images) {
+  const seen = /* @__PURE__ */ new Set();
+  const unique = [];
+  for (const image of images) {
+    if (seen.has(image.url)) continue;
+    seen.add(image.url);
+    unique.push(image);
+  }
+  return unique;
+}
+function imagenames(rule, run, step, count, extension) {
+  const names = [];
+  for (let index = 1; index <= Math.max(0, Math.round(count)); index += 1) names.push(buildname(rule, { run, step, sequence: index, kind: "image" }, extension));
+  return names;
+}
+function lapseplanof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.interval !== "number" || !Number.isFinite(options.interval)) return void 0;
+  if (typeof options.duration !== "number" || !Number.isFinite(options.duration)) return void 0;
+  const format = options.format === "jpeg" || options.format === "webp" ? options.format : "png";
+  return { interval: options.interval, duration: options.duration, format };
+}
+function lapseframes(plan) {
+  if (!(plan.interval > 0) || !(plan.duration > 0)) return [];
+  const frames = [];
+  for (let time = 0; time < plan.duration; time += plan.interval) frames.push(Math.round(time));
+  return frames;
+}
+function convertdirectiveof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (options.target !== "png" && options.target !== "jpeg" && options.target !== "webp") return void 0;
+  const normalized = { target: options.target };
+  if (options.source === "png" || options.source === "jpeg" || options.source === "webp") normalized.source = options.source;
+  if (typeof options.quality === "number" && Number.isFinite(options.quality)) normalized.quality = options.quality;
+  return normalized;
+}
+function thumbdirectiveof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.size !== "number" || !Number.isFinite(options.size) || options.size <= 0) return void 0;
+  if (options.fit !== "cover" && options.fit !== "contain") return void 0;
+  if (typeof options.suffix !== "string" || !options.suffix.trim()) return void 0;
+  return { size: options.size, fit: options.fit, suffix: options.suffix.trim() };
+}
+function thumbgeometry(source, directive) {
+  const size = Math.max(1, Math.round(directive.size));
+  if (directive.fit === "contain") {
+    const scale2 = Math.min(size / Math.max(1, source.width), size / Math.max(1, source.height));
+    const dw = Math.max(1, Math.round(source.width * scale2));
+    const dh = Math.max(1, Math.round(source.height * scale2));
+    return { sx: 0, sy: 0, sw: source.width, sh: source.height, dx: Math.floor((size - dw) / 2), dy: Math.floor((size - dh) / 2), dw, dh, width: size, height: size };
+  }
+  const scale = Math.max(size / Math.max(1, source.width), size / Math.max(1, source.height));
+  const sw = Math.min(source.width, Math.round(size / scale));
+  const sh = Math.min(source.height, Math.round(size / scale));
+  return { sx: Math.floor((source.width - sw) / 2), sy: Math.floor((source.height - sh) / 2), sw, sh, dx: 0, dy: 0, dw: size, dh: size, width: size, height: size };
+}
+function mediaentries(raw) {
+  return raw.map((entry) => ({
+    url: typeof entry.url === "string" ? entry.url : "",
+    mime: typeof entry.mime === "string" ? entry.mime : "",
+    duration: typeof entry.duration === "number" && Number.isFinite(entry.duration) ? entry.duration : 0,
+    width: typeof entry.width === "number" && Number.isFinite(entry.width) ? Math.round(entry.width) : 0,
+    height: typeof entry.height === "number" && Number.isFinite(entry.height) ? Math.round(entry.height) : 0,
+    codecs: typeof entry.codecs === "string" ? entry.codecs : "",
+    tracks: Array.isArray(entry.tracks) ? entry.tracks.filter((item) => typeof item === "string") : []
+  }));
+}
+function assetentries(raw) {
+  return raw.map((entry) => ({
+    kind: entry.kind === "logo" ? "logo" : "favicon",
+    url: typeof entry.url === "string" ? entry.url : "",
+    bytes: typeof entry.bytes === "number" && Number.isFinite(entry.bytes) ? entry.bytes : 0,
+    ...typeof entry.sizes === "string" && entry.sizes.trim() ? { sizes: entry.sizes.trim() } : {}
+  }));
+}
+function streamsummaries(raw) {
+  return raw.map((entry) => {
+    const tracks = Array.isArray(entry.tracks) ? entry.tracks : [];
+    return {
+      kind: typeof entry.kind === "string" ? entry.kind : "stream",
+      tracks: tracks.length,
+      label: typeof entry.label === "string" ? entry.label : "",
+      live: entry.live === true,
+      detail: tracks.map((track) => {
+        const item = track;
+        return {
+          kind: typeof item.kind === "string" ? item.kind : "",
+          label: typeof item.label === "string" ? item.label : "",
+          ...typeof item.width === "number" && Number.isFinite(item.width) ? { width: Math.round(item.width) } : {},
+          ...typeof item.height === "number" && Number.isFinite(item.height) ? { height: Math.round(item.height) } : {},
+          ...typeof item.framerate === "number" && Number.isFinite(item.framerate) ? { framerate: item.framerate } : {},
+          state: typeof item.state === "string" ? item.state : ""
+        };
+      })
+    };
+  });
+}
+
 // memory.ts
 var sessionmemory = class {
   constructor(adapter) {
@@ -963,23 +1551,172 @@ var sessionmemory = class {
     for (const capture of await this.getcaptures()) runs.set(capture.id, capture.runid);
     return records.filter((item) => runs.get(item.beforeid) === runid);
   }
+  /** Stores one media record of the 1.1.41 family with its bytes and step linkage, replacing the previous record of that id; the user configured media retention window expires the oldest bytes while the metadata and the recording index always survive. */
+  async addmedia(record2) {
+    const records = await this.getmediarecords();
+    const retention = (await this.getsettings())?.mediaretention;
+    const combined = [record2, ...records.filter((item) => item.id !== record2.id)];
+    const stored = retention === void 0 ? combined : combined.map((item, index) => index < retention ? item : expiremediabytes(item));
+    await this.adapter.set("media", stored);
+  }
+  /** Returns every stored media record, newest first. */
+  async getmediarecords() {
+    return await this.adapter.get("media") ?? [];
+  }
+  /** Returns the media records filtered by run and kind; an absent filter returns every record. */
+  async listmedia(filter) {
+    const records = await this.getmediarecords();
+    return records.filter((item) => (filter.runid === void 0 || item.runid === filter.runid) && (filter.kind === void 0 || mediakindof(item) === filter.kind));
+  }
+  /** Returns one media record by its id. */
+  async getmediarecord(id) {
+    return (await this.getmediarecords()).find((item) => item.id === id);
+  }
+  /** Returns one recording with its file reference and frame index by its id. */
+  async getrecording(id) {
+    const found = await this.getmediarecord(id);
+    return found !== void 0 && "startedat" in found ? found : void 0;
+  }
+  /** Removes one media record by its id; the audit trail keeps its outcome evidence. */
+  async removemedia(id) {
+    await this.adapter.set("media", (await this.getmediarecords()).filter((item) => item.id !== id));
+  }
+  /** Stores one observed image batch of a downloadimages step, replacing the previous batch of that id. */
+  async addimagebatch(batch) {
+    const records = await this.adapter.get("imagebatches") ?? [];
+    await this.adapter.set("imagebatches", [batch, ...records.filter((item) => item.id !== batch.id)]);
+  }
+  /** Returns every observed image batch with its filter match counts, newest first. */
+  async getimagebatches() {
+    return await this.adapter.get("imagebatches") ?? [];
+  }
+  /** Stores one recording consent decision of an origin, replacing the previous record of that id. */
+  async setrecordingconsent(record2) {
+    const records = (await this.adapter.get("recordingconsents") ?? []).filter((item) => item.id !== record2.id);
+    await this.adapter.set("recordingconsents", [record2, ...records]);
+  }
+  /** Returns every recording consent decision with its prompt and origin, newest first. */
+  async getrecordingconsents() {
+    return await this.adapter.get("recordingconsents") ?? [];
+  }
+  /** Stores one outbound call record with its transport facts and body, replacing the previous record of that id; the user configured call retention window expires the oldest bodies while the metadata always survives. */
+  async addcall(record2) {
+    const records = await this.getcalls();
+    const retention = (await this.getsettings())?.callretention;
+    const combined = [record2, ...records.filter((item) => item.id !== record2.id)];
+    const stored = retention === void 0 ? combined : combined.map((item, index) => index < retention ? item : expirecallbody(item));
+    await this.adapter.set("calls", stored);
+  }
+  /** Returns every stored outbound call record, newest first. */
+  async getcalls() {
+    return await this.adapter.get("calls") ?? [];
+  }
+  /** Returns one outbound call record with its body by its id. */
+  async getcall(id) {
+    return (await this.getcalls()).find((item) => item.id === id);
+  }
+  /** Returns the outbound call records filtered by run and origin; an absent filter returns every call. */
+  async listcalls(filter) {
+    const records = await this.getcalls();
+    return records.filter((item) => (filter.runid === void 0 || item.runid === filter.runid) && (filter.origin === void 0 || item.origin === filter.origin));
+  }
+  /** Stores one typed endpoint definition version, appending to the version history of that endpoint name. */
+  async setendpoint(record2) {
+    const records = await this.adapter.get("endpoints") ?? [];
+    const prior = records.filter((item) => item.name === record2.name);
+    const version = prior.length > 0 ? Math.max(...prior.map((item) => item.version)) + 1 : 1;
+    await this.adapter.set("endpoints", [{ ...record2, version, at: record2.at }, ...records]);
+  }
+  /** Returns the newest endpointrecord definition of one name with its payload schema and version. */
+  async getendpoint(name) {
+    const records = await this.adapter.get("endpoints") ?? [];
+    return records.find((item) => item.name === name);
+  }
+  /** Returns the newest definition of every typed endpoint name with its schema and version history. */
+  async getendpoints() {
+    const records = await this.adapter.get("endpoints") ?? [];
+    const latest = /* @__PURE__ */ new Map();
+    for (const record2 of records) if (!latest.has(record2.name)) latest.set(record2.name, record2);
+    return [...latest.values()];
+  }
+  /** Stores one fetch consent decision per origin with its reviewed header names and values and its expiry window. */
+  async setfetchconsent(consent) {
+    const records = (await this.adapter.get("fetchconsents") ?? []).filter((item) => item.id !== consent.id);
+    await this.adapter.set("fetchconsents", [consent, ...records]);
+  }
+  /** Returns every fetch consent decision with its origin, header names and expiry window, newest first. */
+  async getfetchconsents() {
+    return await this.adapter.get("fetchconsents") ?? [];
+  }
+  /** Stores one api key reference record without any key material; the secret value stays behind its storage id. */
+  async setapikey(ref) {
+    const records = (await this.adapter.get("apikeys") ?? []).filter((item) => item.name !== ref.name);
+    await this.adapter.set("apikeys", [ref, ...records]);
+  }
+  /** Returns every stored api key reference with its origin scope, header name and storage id; key material never loads here. */
+  async getapikeys() {
+    return await this.adapter.get("apikeys") ?? [];
+  }
+  /** Removes one api key reference and its stored secret together. */
+  async removeapikey(name) {
+    const records = await this.getapikeys();
+    const ref = records.find((item) => item.name === name);
+    if (ref) await this.adapter.set(ref.storageid, void 0);
+    await this.adapter.set("apikeys", records.filter((item) => item.name !== name));
+  }
+  /** Stores one api key secret under its storage id; the value never appears in reports, outcomes or the audit trail. */
+  async setsecret(storageid, value) {
+    return this.adapter.set(storageid, value);
+  }
+  /** Loads one api key secret under its storage id for the executor only. */
+  async getsecret(storageid) {
+    return this.adapter.get(storageid);
+  }
 };
+function mediakindof(record2) {
+  if ("pages" in record2) return "pdf";
+  if ("startedat" in record2) return "recording";
+  if ("timestamp" in record2) return "frame";
+  if ("context" in record2) return "canvas";
+  if ("tracks" in record2) return "stream";
+  return "asset";
+}
+function expiremediabytes(record2) {
+  if ("dataurl" in record2) {
+    const source = record2;
+    const copy = { ...source };
+    delete copy.dataurl;
+    return { ...copy, bytesexpired: true };
+  }
+  if ("startedat" in record2) {
+    const source = record2;
+    const copy = { ...source };
+    delete copy.bytes;
+    return { ...copy, bytesexpired: true };
+  }
+  return record2;
+}
 function expirecapturebytes(record2) {
   const { bytes, ...metadata } = record2;
   void bytes;
   return { ...metadata, bytesexpired: true };
 }
+function expirecallbody(record2) {
+  const { body, ...metadata } = record2;
+  void body;
+  return { ...metadata, bodyexpired: true };
+}
 function randomid() {
   return crypto.randomUUID();
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract", "batchdownload", "pausedownload", "resumedownload", "interceptmime", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "cleanupartifacts"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract", "batchdownload", "pausedownload", "resumedownload", "interceptmime", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "cleanupartifacts", "recordscreen", "captureaudio", "downloadimages", "callrest", "callgraphql"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet", "capturepdf", "captureframe", "readmedia", "readassets", "probestream", "timelapse", "shotcanvas", "convertimage", "makethumbs", "fetchurl", "parsejson", "parsehtml"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
 var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus", "watchtab"]);
-var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "scrapetable", "paginateextract", "shotelement"]);
+var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "scrapetable", "paginateextract", "shotelement", "captureframe", "shotcanvas"]);
 var valueactions = /* @__PURE__ */ new Set(["presskey", "drag", "drop", "upload", "readattribute", "removeattribute", "waittext", "evaluate", "zoomset", "tabactivate", "tabclose", "tabreload", "windowclose", "windowresize", "tabcreate", "windowcreate", "downloadfile", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "chooseradio", "setslider", "setdate", "setcolor", "followlink", "setfragment", "handleauth", "navintent", "openclipboard", "checksafe", "reopentab", "spanav", "duplicatetab", "pintab", "mutetab", "movetab", "movetabwindow", "searchtabs", "badgetab", "attachmeta", "focuswindow", "maximizewindow", "minimizewindow", "restorewindow", "incognitowindow", "asksubmit", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "pausedownload", "resumedownload", "verifydownload", "writeclipboard", "quarantinedownload", "scanvirus"]);
 var tabscommandactions = /* @__PURE__ */ new Set(["querytabs", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "watchtab", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "savelayout", "restorelayout", "findclones", "searchtabs", "badgetab", "attachmeta", "listaudio", "reopenrun", "snapshotsession"]);
 var formactions = /* @__PURE__ */ new Set(["fillform", "filllabel", "fillplaceholder", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "submitform", "readerrors", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "handoffcaptcha", "fillcard", "fillcode", "consentpassword", "skiphoneypot", "detectlogin", "detecttemplate"]);
@@ -987,6 +1724,9 @@ var datasetactions = /* @__PURE__ */ new Set(["scrapetable", "exportcsv", "expor
 var exportactions = /* @__PURE__ */ new Set(["exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk"]);
 var filesactions = /* @__PURE__ */ new Set(["batchdownload", "pausedownload", "resumedownload", "verifydownload", "interceptmime", "exportnetlog", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "namecaptures", "cleanupartifacts"]);
 var captureactions = /* @__PURE__ */ new Set(["shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet"]);
+var mediaactions = /* @__PURE__ */ new Set(["capturepdf", "recordscreen", "captureaudio", "captureframe", "downloadimages", "shotcanvas", "probestream", "readmedia", "readassets", "timelapse", "convertimage", "makethumbs"]);
+var httpactions = /* @__PURE__ */ new Set(["fetchurl", "parsejson", "parsehtml", "callrest", "callgraphql"]);
+var credentialheaders = /* @__PURE__ */ new Set(["authorization", "proxy-authorization", "cookie", "cookie2", "set-cookie", "api-key", "x-api-key", "x-auth-token", "x-session-token", "proxy-authorization"]);
 var fieldkinds = ["text", "email", "phone", "date", "number", "select", "check", "radio", "file", "password", "card", "code"];
 var layoutmutationactions = /* @__PURE__ */ new Set(["grouptabs", "colorgroup", "collapsegroup", "savelayout", "restorelayout"]);
 var groupcolors = ["grey", "blue", "red", "yellow", "green", "pink", "purple", "cyan", "orange"];
@@ -1688,6 +2428,305 @@ function validatetabsgrammar(step, options) {
   if (kind === "reopenrun" && !isnonempty(options.run)) return { allowed: false, reason: "A reviewed run id is required in options to reopen its tabs." };
   return { allowed: true };
 }
+function ismediakind(kind) {
+  return mediaactions.has(kind);
+}
+function ishttpkind(kind) {
+  return httpactions.has(kind);
+}
+function origincheck(session, url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return { allowed: false, reason: "The outbound request needs a valid url before it can be reviewed." };
+  }
+  if (parsed.protocol !== "https:") return { allowed: false, reason: "Outbound requests use HTTPS urls only." };
+  if (parsed.username || parsed.password) return { allowed: false, reason: "Endpoint credentials are not allowed in the url." };
+  if (!origingranted(session, parsed.origin)) return { allowed: false, reason: `The outbound request to ${parsed.origin} stays outside the session origin grants.` };
+  return { allowed: true };
+}
+function credentialheadername(name) {
+  return credentialheaders.has(name.trim().toLowerCase());
+}
+function fetchconsentrefgranted(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const request = options.fetch;
+  const headers = request && typeof request === "object" && !Array.isArray(request) ? request.headers : void 0;
+  const names = headers && typeof headers === "object" && !Array.isArray(headers) ? Object.keys(headers) : [];
+  if (names.length === 0) return { allowed: true };
+  const empty = names.some((name) => !name.trim());
+  if (empty) return { allowed: false, reason: "Header allowlists with empty names are refused." };
+  const credential = names.find((name) => credentialheadername(name));
+  if (credential !== void 0 && !isnonempty(options.consentref)) return { allowed: false, reason: `The credential bearing header ${credential} needs the explicit reviewed consent that names it before it is sent.` };
+  if (!isnonempty(options.consentref)) return { allowed: false, reason: `The ${names.length} reviewed custom header${names.length === 1 ? "" : "s"} need a reviewed consent ref in options before any send.` };
+  return { allowed: true };
+}
+function fetchbudgetallowed(timeout, retries, backoff, wait) {
+  for (const [label, value] of [["timeout", timeout], ["retries", retries], ["backoff", backoff]]) {
+    if (value !== void 0 && (typeof value !== "number" || !Number.isFinite(value) || value < 0)) return { allowed: false, reason: `The reviewed fetch ${label} must be zero or a positive number with no code ceiling.` };
+  }
+  if (wait !== void 0 && (typeof wait !== "number" || !Number.isFinite(wait) || wait < 0)) return { allowed: false, reason: "The reviewed fetch wait budget must be zero or a positive number of milliseconds." };
+  if (wait === void 0 || timeout === void 0) return { allowed: true };
+  const attempts = Math.max(1, Math.floor(retries ?? 0) + 1);
+  const waits = (backoff ?? 0) * (attempts * (attempts - 1)) / 2;
+  const worstcase = timeout * attempts + waits;
+  if (worstcase > wait) return { allowed: false, reason: `The fetch worst case of ${worstcase} milliseconds exceeds the reviewed wait budget of ${wait} milliseconds; review a wider budget or fewer retries.` };
+  return { allowed: true };
+}
+function outboundtarget(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const request = options.fetch;
+  if (request && typeof request === "object" && !Array.isArray(request)) {
+    const url = request.url;
+    if (typeof url === "string" && url.trim()) return url.trim();
+  }
+  return void 0;
+}
+function validpath(path) {
+  return path.split(".").every((segment) => /^[A-Za-z0-9_-]+$/.test(segment));
+}
+function validatehttpgrammar(step, options) {
+  const kind = step.kind;
+  if (kind === "fetchurl") {
+    const request = options.fetch;
+    if (!request || typeof request !== "object" || Array.isArray(request)) return { allowed: false, reason: "A reviewed fetch request with a url is required in options.fetch." };
+    const fetchrequest = request;
+    if (typeof fetchrequest.url !== "string" || !fetchrequest.url.trim()) return { allowed: false, reason: "The reviewed fetch request needs a non-empty url." };
+    if (fetchrequest.method !== void 0 && (typeof fetchrequest.method !== "string" || !["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"].includes(fetchrequest.method.trim().toUpperCase()))) return { allowed: false, reason: "The reviewed fetch method must be a known HTTP verb." };
+    if (fetchrequest.headers !== void 0) {
+      if (!fetchrequest.headers || typeof fetchrequest.headers !== "object" || Array.isArray(fetchrequest.headers)) return { allowed: false, reason: "The reviewed header allowlist must be an object of custom headers." };
+      for (const name of Object.keys(fetchrequest.headers)) {
+        if (!name.trim()) return { allowed: false, reason: "Header allowlists with empty names are refused." };
+        if (typeof fetchrequest.headers[name] !== "string") return { allowed: false, reason: `The reviewed header ${name} needs a string value.` };
+      }
+    }
+    if (fetchrequest.body !== void 0 && typeof fetchrequest.body !== "string") return { allowed: false, reason: "The reviewed fetch body must be a string." };
+    if (fetchrequest.mode !== void 0 && fetchrequest.mode !== "cors" && fetchrequest.mode !== "no-cors" && fetchrequest.mode !== "same-origin") return { allowed: false, reason: "The reviewed fetch mode must be cors, no-cors or same-origin." };
+    const consentgate = fetchconsentrefgranted(step);
+    if (!consentgate.allowed) return consentgate;
+    const policycheck = validatefetchoptions(options.fetchoptions);
+    if (!policycheck.allowed) return policycheck;
+    const fetchpolicy = fetchoptionsvalues(options.fetchoptions);
+    const budget = fetchbudgetallowed(fetchpolicy.timeout, fetchpolicy.retries, fetchpolicy.backoff, fetchnumeric(options, "wait"));
+    if (!budget.allowed) return budget;
+    if (options.stream !== void 0) {
+      if (!options.stream || typeof options.stream !== "object" || Array.isArray(options.stream)) return { allowed: false, reason: "The reviewed stream window must be an object with an optional byte budget." };
+      const streambudget = options.stream.budget;
+      if (streambudget !== void 0 && (typeof streambudget !== "number" || !Number.isFinite(streambudget) || streambudget < 0)) return { allowed: false, reason: "The reviewed stream byte budget must be zero or a positive number of bytes with no code ceiling." };
+    }
+  }
+  if (kind === "parsejson") {
+    if (!isnonempty(options.call)) return { allowed: false, reason: "A reviewed stored call id is required in options.call before the body parses." };
+    const fields = options.fields;
+    if (!Array.isArray(fields) || fields.length === 0) return { allowed: false, reason: "A reviewed non-empty list of json path rules is required in options.fields." };
+    for (const item of fields) {
+      if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every json path rule must be an object." };
+      const rule = item;
+      if (!isnonempty(rule.name)) return { allowed: false, reason: "Every json path rule needs a non-empty field name." };
+      if (typeof rule.path !== "string" || !rule.path.trim() || !validpath(rule.path.trim())) return { allowed: false, reason: `The json path of ${rule.name} must be a dotted path of non-empty segments.` };
+      if (rule.kind !== void 0 && rule.kind !== "text" && rule.kind !== "number" && rule.kind !== "boolean" && rule.kind !== "json") return { allowed: false, reason: `The json path kind of ${rule.name} must be text, number, boolean or json.` };
+    }
+  }
+  if (kind === "parsehtml") {
+    if (!isnonempty(options.call)) return { allowed: false, reason: "A reviewed stored call id is required in options.call before the markup parses." };
+    const queries = options.queries;
+    if (!Array.isArray(queries) || queries.length === 0) return { allowed: false, reason: "A reviewed non-empty list of html queries is required in options.queries." };
+    for (const item of queries) {
+      if (!item || typeof item !== "object" || Array.isArray(item)) return { allowed: false, reason: "Every html query must be an object." };
+      const query = item;
+      if (!isnonempty(query.selector)) return { allowed: false, reason: "Every html query needs a selector from the reviewed selector grammar." };
+      if (query.attribute !== void 0 && !isnonempty(query.attribute)) return { allowed: false, reason: "The reviewed html query attribute must be a non-empty attribute name." };
+      if (query.multi !== void 0 && typeof query.multi !== "boolean") return { allowed: false, reason: "The reviewed html query multi flag must be a boolean." };
+    }
+  }
+  if (kind === "callrest" || kind === "callgraphql") {
+    if (!isnonempty(options.endpoint)) return { allowed: false, reason: "A reviewed typed endpoint name is required in options.endpoint." };
+    if (kind === "callrest") {
+      if (options.payload !== void 0 && (!options.payload || typeof options.payload !== "object" || Array.isArray(options.payload))) return { allowed: false, reason: "The reviewed rest payload must be an object of reviewed values." };
+      if (options.method !== void 0 && (typeof options.method !== "string" || !["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"].includes(options.method.trim().toUpperCase()))) return { allowed: false, reason: "The reviewed endpoint method override must be a known HTTP verb." };
+      if (options.success !== void 0 && (!Array.isArray(options.success) || !options.success.every((code) => typeof code === "number" && Number.isInteger(code)))) return { allowed: false, reason: "The reviewed success status list must be a list of integer status codes." };
+    }
+    if (kind === "callgraphql") {
+      const request = options.graphql;
+      if (!request || typeof request !== "object" || Array.isArray(request)) return { allowed: false, reason: "A reviewed graphql request with an operation is required in options.graphql." };
+      const graphql = request;
+      if (typeof graphql.query !== "string" || !graphql.query.trim()) return { allowed: false, reason: "The reviewed graphql operation text must be a non-empty string." };
+      if (graphql.operationkind !== "query" && graphql.operationkind !== "mutation") return { allowed: false, reason: "The reviewed graphql operation kind must be query or mutation; unknown operation kinds are refused." };
+      if (graphql.variables !== void 0 && (!graphql.variables || typeof graphql.variables !== "object" || Array.isArray(graphql.variables))) return { allowed: false, reason: "The reviewed graphql variables must be an object of reviewed values." };
+      if (graphql.operationname !== void 0 && !isnonempty(graphql.operationname)) return { allowed: false, reason: "The reviewed graphql operation name must be a non-empty string." };
+    }
+    if (options.apikeys !== void 0 && (!Array.isArray(options.apikeys) || !options.apikeys.every((name) => isnonempty(name)))) return { allowed: false, reason: "The reviewed api key reference list must be a list of non-empty stored names." };
+    const policycheck = validatefetchoptions(options.fetchoptions);
+    if (!policycheck.allowed) return policycheck;
+    const fetchpolicy = fetchoptionsvalues(options.fetchoptions);
+    const budget = fetchbudgetallowed(fetchpolicy.timeout, fetchpolicy.retries, fetchpolicy.backoff, fetchnumeric(options, "wait"));
+    if (!budget.allowed) return budget;
+  }
+  return { allowed: true };
+}
+function validatefetchoptions(value) {
+  if (value === void 0) return { allowed: true };
+  if (!value || typeof value !== "object" || Array.isArray(value)) return { allowed: false, reason: "The reviewed fetch options must be an object with timeout, retries, backoff and follow." };
+  const options = value;
+  for (const key of ["timeout", "backoff"]) {
+    if (options[key] !== void 0 && (typeof options[key] !== "number" || !Number.isFinite(options[key]) || options[key] < 0)) return { allowed: false, reason: `The reviewed fetch ${key} must be zero or a positive number with no code ceiling.` };
+  }
+  for (const key of ["retries", "follow"]) {
+    if (options[key] !== void 0 && (typeof options[key] !== "number" || !Number.isInteger(options[key]) || options[key] < 0)) return { allowed: false, reason: `The reviewed fetch ${key} must be zero or a positive integer with no code ceiling.` };
+  }
+  return { allowed: true };
+}
+function fetchoptionsvalues(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const options = value;
+  return { timeout: fetchnumeric(options, "timeout"), retries: fetchnumeric(options, "retries"), backoff: fetchnumeric(options, "backoff") };
+}
+function fetchnumeric(options, key) {
+  const value = options[key];
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function isrecordingkind(kind) {
+  return kind === "recordscreen" || kind === "captureaudio";
+}
+function mediagate(session, tabid, origin, now) {
+  if (!session || session.stoppedat) return { allowed: false, reason: "No active browser session exists for the media capture." };
+  if (session.expiresat <= now) return { allowed: false, reason: "The browser session has expired and cannot capture media." };
+  if (session.pausedat) return { allowed: false, reason: "The browser session is paused and cannot capture media." };
+  if (session.tabid !== tabid) return { allowed: false, reason: `The media capture needs the active tab grant of session tab ${session.tabid} and refuses tab ${tabid}.` };
+  if (!origingranted(session, origin)) return { allowed: false, reason: `The media capture of ${origin} needs the session origin grants first.` };
+  return { allowed: true };
+}
+function recordingconsentgranted(step) {
+  let options = {};
+  try {
+    options = parseoptions(step);
+  } catch {
+    options = {};
+  }
+  const consentref = options.consentref;
+  if (typeof consentref !== "string" || !consentref.trim()) return { allowed: false, reason: "A recording of user activity requires a reviewed consent ref in options before it starts." };
+  return { allowed: true };
+}
+function lapsebudgetallowed(interval, duration, wait) {
+  if (!(interval > 0)) return { allowed: false, reason: "The reviewed lapse interval must be a positive number of milliseconds." };
+  if (!(duration > 0)) return { allowed: false, reason: "The reviewed lapse duration must be a positive number of milliseconds." };
+  if (wait !== void 0 && !(wait >= 0)) return { allowed: false, reason: "The reviewed wait budget must be zero or a positive number of milliseconds." };
+  if (wait !== void 0 && duration > wait) return { allowed: false, reason: `The lapse duration of ${duration} milliseconds exceeds the reviewed wait budget of ${wait} milliseconds; review a wider budget or a shorter duration.` };
+  return { allowed: true };
+}
+function validatemediagrammar(step, options) {
+  const kind = step.kind;
+  if (kind === "capturepdf") {
+    const pdf = options.pdf;
+    if (pdf !== void 0) {
+      if (!pdf || typeof pdf !== "object" || Array.isArray(pdf)) return { allowed: false, reason: "The reviewed pdf options must be an object in options.pdf." };
+      const pdfoptions = pdf;
+      if (pdfoptions.paperwidth !== void 0 && (typeof pdfoptions.paperwidth !== "number" || !Number.isFinite(pdfoptions.paperwidth) || pdfoptions.paperwidth <= 0)) return { allowed: false, reason: "The reviewed pdf paper width must be a positive number of inches with no code cap." };
+      if (pdfoptions.paperheight !== void 0 && (typeof pdfoptions.paperheight !== "number" || !Number.isFinite(pdfoptions.paperheight) || pdfoptions.paperheight <= 0)) return { allowed: false, reason: "The reviewed pdf paper height must be a positive number of inches with no code cap." };
+      if (pdfoptions.margins !== void 0) {
+        const margins = pdfoptions.margins;
+        if (!margins || typeof margins !== "object" || Array.isArray(margins)) return { allowed: false, reason: "The reviewed pdf margins must be an object with top, right, bottom and left inches." };
+        for (const side of ["top", "right", "bottom", "left"]) {
+          const value = margins[side];
+          if (value === void 0) continue;
+          if (typeof value !== "number" || !Number.isFinite(value) || value < 0) return { allowed: false, reason: `The reviewed pdf ${side} margin must be zero or a positive number of inches; negative margins are refused.` };
+        }
+      }
+      if (pdfoptions.scale !== void 0 && (typeof pdfoptions.scale !== "number" || !Number.isFinite(pdfoptions.scale) || pdfoptions.scale <= 0)) return { allowed: false, reason: "The reviewed pdf scale must be a positive number with no code cap." };
+      if (pdfoptions.landscape !== void 0 && typeof pdfoptions.landscape !== "boolean") return { allowed: false, reason: "The reviewed pdf landscape flag must be a boolean." };
+      if (pdfoptions.paginate !== void 0 && typeof pdfoptions.paginate !== "boolean") return { allowed: false, reason: "The reviewed pdf paginate flag must be a boolean." };
+    }
+    if (options.breakpoints !== void 0 && (!Array.isArray(options.breakpoints) || options.breakpoints.length === 0 || !options.breakpoints.every((item) => isnonempty(item)))) return { allowed: false, reason: "The reviewed pdf break points must be a non-empty list of selectors when present." };
+    if (options.exporttarget !== void 0 && options.exporttarget !== "memory" && options.exporttarget !== "download") return { allowed: false, reason: "The reviewed pdf export target must be memory or download; pdf documents do not route to the clipboard." };
+    if (options.name !== void 0 && !isnonempty(options.name)) return { allowed: false, reason: "The reviewed pdf artifact name must be a non-empty string." };
+  }
+  if (kind === "recordscreen" || kind === "captureaudio") {
+    const recording = options.recording;
+    if (recording !== void 0) {
+      if (!recording || typeof recording !== "object" || Array.isArray(recording)) return { allowed: false, reason: "The reviewed recording options must be an object in options.recording." };
+      const recordoptions = recording;
+      if (recordoptions.scope !== void 0 && recordoptions.scope !== "tab" && recordoptions.scope !== "run") return { allowed: false, reason: "The reviewed recording scope must be tab or run." };
+      if (recordoptions.fps !== void 0 && (typeof recordoptions.fps !== "number" || !Number.isFinite(recordoptions.fps) || recordoptions.fps <= 0)) return { allowed: false, reason: "The reviewed recording fps must be a positive number with no code ceiling." };
+      if (recordoptions.bitrate !== void 0 && (typeof recordoptions.bitrate !== "number" || !Number.isFinite(recordoptions.bitrate) || recordoptions.bitrate <= 0)) return { allowed: false, reason: "The reviewed recording bitrate must be a positive number with no code ceiling." };
+      if (recordoptions.audio !== void 0 && typeof recordoptions.audio !== "boolean") return { allowed: false, reason: "The reviewed recording audio flag must be a boolean." };
+    }
+    if (options.duration !== void 0 && (typeof options.duration !== "number" || !Number.isFinite(options.duration) || options.duration <= 0)) return { allowed: false, reason: "The reviewed recording duration must be a positive number of milliseconds with no code ceiling." };
+    const consent = recordingconsentgranted(step);
+    if (!consent.allowed) return consent;
+  }
+  if (kind === "captureframe") {
+    if (options.timestamp !== void 0 && (typeof options.timestamp !== "number" || !Number.isFinite(options.timestamp) || options.timestamp < 0)) return { allowed: false, reason: "The reviewed frame timestamp must be zero or a positive number of seconds." };
+    if (options.poster !== void 0 && typeof options.poster !== "boolean") return { allowed: false, reason: "The reviewed poster flag must be a boolean." };
+    const capturecheck = validatecaptureoptions(options.capture);
+    if (!capturecheck.allowed) return capturecheck;
+  }
+  if (kind === "downloadimages") {
+    const filter = options.imagefilter;
+    if (!filter || typeof filter !== "object" || Array.isArray(filter)) return { allowed: false, reason: "A reviewed imagefilter is required in options before any image downloads." };
+    const imagefilter = filter;
+    if (imagefilter.selector !== void 0 && !isnonempty(imagefilter.selector)) return { allowed: false, reason: "The reviewed imagefilter selector must be a non-empty selector from the reviewed selector grammar." };
+    if (imagefilter.minwidth !== void 0 && (typeof imagefilter.minwidth !== "number" || !Number.isFinite(imagefilter.minwidth) || imagefilter.minwidth < 0)) return { allowed: false, reason: "The reviewed imagefilter minimum width must be zero or a positive number of pixels." };
+    if (imagefilter.minheight !== void 0 && (typeof imagefilter.minheight !== "number" || !Number.isFinite(imagefilter.minheight) || imagefilter.minheight < 0)) return { allowed: false, reason: "The reviewed imagefilter minimum height must be zero or a positive number of pixels." };
+    if (imagefilter.formats !== void 0 && (!Array.isArray(imagefilter.formats) || imagefilter.formats.length === 0 || !imagefilter.formats.every((item) => isnonempty(item)))) return { allowed: false, reason: "The reviewed imagefilter format list must be a non-empty list of mime or extension patterns when present." };
+    if (options.naming !== void 0) {
+      const namingcheck = validatecapturenaming(options.naming);
+      if (!namingcheck.allowed) return namingcheck;
+    }
+  }
+  if (kind === "shotcanvas") {
+    const capturecheck = validatecaptureoptions(options.capture);
+    if (!capturecheck.allowed) return capturecheck;
+  }
+  if (kind === "probestream" && options.selector !== void 0 && !isnonempty(options.selector)) return { allowed: false, reason: "The reviewed stream probe scope selector must be a non-empty string." };
+  if (kind === "timelapse") {
+    const lapse = options.lapse;
+    if (!lapse || typeof lapse !== "object" || Array.isArray(lapse)) return { allowed: false, reason: "A reviewed lapse plan with interval, duration and format is required in options." };
+    const plan = lapse;
+    if (typeof plan.interval !== "number" || !Number.isFinite(plan.interval) || plan.interval <= 0) return { allowed: false, reason: "The reviewed lapse interval must be a positive number of milliseconds with no code ceiling." };
+    if (typeof plan.duration !== "number" || !Number.isFinite(plan.duration) || plan.duration <= 0) return { allowed: false, reason: "The reviewed lapse duration must be a positive number of milliseconds with no code ceiling." };
+    if (plan.format !== void 0 && plan.format !== "png" && plan.format !== "jpeg" && plan.format !== "webp") return { allowed: false, reason: "The reviewed lapse format must be png, jpeg or webp." };
+    const budget = lapsebudgetallowed(plan.interval, plan.duration, typeof options.wait === "number" ? options.wait : void 0);
+    if (!budget.allowed) return budget;
+    const capturecheck = validatecaptureoptions(options.capture);
+    if (!capturecheck.allowed) return capturecheck;
+  }
+  if (kind === "convertimage" || kind === "makethumbs") {
+    const single = options.capture;
+    const list = options.captures;
+    const hasone = isnonempty(single);
+    const haslist = Array.isArray(list) && list.length > 0 && list.every((item) => isnonempty(item));
+    if (!hasone && !haslist) return { allowed: false, reason: "A reviewed capture id or a reviewed non-empty capture id list is required in options." };
+    if (hasone && haslist) return { allowed: false, reason: "The reviewed step needs one capture id or a capture id list, not both." };
+  }
+  if (kind === "convertimage") {
+    const convert = options.convert;
+    if (!convert || typeof convert !== "object" || Array.isArray(convert)) return { allowed: false, reason: "A reviewed convert directive with a target format is required in options." };
+    const directive = convert;
+    if (directive.target !== "png" && directive.target !== "jpeg" && directive.target !== "webp") return { allowed: false, reason: "The reviewed conversion target must be png, jpeg or webp." };
+    if (directive.source !== void 0 && directive.source !== "png" && directive.source !== "jpeg" && directive.source !== "webp") return { allowed: false, reason: "The reviewed conversion source must be png, jpeg or webp." };
+    if (directive.quality !== void 0 && (typeof directive.quality !== "number" || !Number.isFinite(directive.quality) || directive.quality < 0 || directive.quality > 100)) return { allowed: false, reason: "The reviewed conversion quality must stay between zero and one hundred with no code cap inside that range." };
+  }
+  if (kind === "makethumbs") {
+    const thumb = options.thumb;
+    if (!thumb || typeof thumb !== "object" || Array.isArray(thumb)) return { allowed: false, reason: "A reviewed thumb directive with size, fit and suffix is required in options." };
+    const directive = thumb;
+    if (typeof directive.size !== "number" || !Number.isFinite(directive.size) || directive.size <= 0) return { allowed: false, reason: "The reviewed thumbnail size must be a positive number of pixels with no fixed set." };
+    if (directive.fit !== "cover" && directive.fit !== "contain") return { allowed: false, reason: "The reviewed thumbnail fit must be cover or contain." };
+    if (!isnonempty(directive.suffix)) return { allowed: false, reason: "The reviewed thumbnail naming suffix must be a non-empty string." };
+  }
+  return { allowed: true };
+}
 function validatestep(step, origin) {
   if (!allowedactions.has(step.kind)) return { allowed: false, reason: "Unsupported action kind." };
   if (!step.summary.trim()) return { allowed: false, reason: "A human-readable action summary is required." };
@@ -1909,6 +2948,14 @@ function validatestep(step, origin) {
     const capturecheck = validatecapturegrammar(step, options);
     if (!capturecheck.allowed) return capturecheck;
   }
+  if (ismediakind(step.kind)) {
+    const mediacheck = validatemediagrammar(step, options);
+    if (!mediacheck.allowed) return mediacheck;
+  }
+  if (ishttpkind(step.kind)) {
+    const httpcheck = validatehttpgrammar(step, options);
+    if (!httpcheck.allowed) return httpcheck;
+  }
   if (step.kind === "tabcreate") {
     if (options.background !== void 0 && typeof options.background !== "boolean") return { allowed: false, reason: "The reviewed background flag must be a boolean." };
     if (options.window !== void 0 && (typeof options.window !== "number" || !Number.isInteger(options.window) || options.window < 0)) return { allowed: false, reason: "The reviewed target window id must be a non-negative integer." };
@@ -1980,6 +3027,25 @@ function canexecute(input) {
     const target = captureoptions.capture?.exporttarget;
     if (target !== void 0 && target !== "memory" && target !== "download" && target !== "clipboard") return { allowed: false, reason: "The capture export target must be memory, download or clipboard." };
   }
+  if (ismediakind(input.step.kind)) {
+    const mediagatecheck = mediagate(input.session, input.tabid, input.origin, now);
+    if (!mediagatecheck.allowed) return mediagatecheck;
+  }
+  if (isrecordingkind(input.step.kind)) {
+    const recordinggate = recordingconsentgranted(input.step);
+    if (!recordinggate.allowed) return recordinggate;
+  }
+  if (ishttpkind(input.step.kind)) {
+    const target = outboundtarget(input.step);
+    if (target !== void 0) {
+      const outboundgate = origincheck(input.session, target);
+      if (!outboundgate.allowed) return outboundgate;
+    }
+    if (input.step.kind === "fetchurl" || input.step.kind === "callrest" || input.step.kind === "callgraphql") {
+      const consentgate = fetchconsentrefgranted(input.step);
+      if (!consentgate.allowed) return consentgate;
+    }
+  }
   if (input.step.kind === "openlink" || input.step.kind === "openprivate" || input.step.kind === "batchopen" || input.step.kind === "prefetch" || input.step.kind === "deeplink" || input.step.kind === "reopentab") {
     let options = {};
     try {
@@ -2001,7 +3067,7 @@ function canexecute(input) {
 }
 
 // version.ts
-var packageversion = "1.1.40";
+var packageversion = "1.1.42";
 
 // types.ts
 var protocolversion = packageversion;
@@ -2015,9 +3081,10 @@ function text(value, field) {
   if (typeof value !== "string" || !value.trim()) throw new Error(`${field} must be a non-empty string.`);
   return value.trim();
 }
-function parseproposal(value, origin) {
+function parseproposal(value, origin, grants) {
   const root = record(value);
   if (root.version !== protocolversion) throw new Error("Unsupported protocol version.");
+  const covered = grants !== void 0 && grants.length > 0 ? grants : [origin];
   const planinput = record(root.plan);
   const stepsinput = planinput.steps;
   if (!Array.isArray(stepsinput) || stepsinput.length === 0) throw new Error("A plan needs at least one step.");
@@ -2035,6 +3102,17 @@ function parseproposal(value, origin) {
     };
     const evaluation = validatestep(step, origin);
     if (!evaluation.allowed) throw new Error(evaluation.reason);
+    const target = outboundtarget(step);
+    if (target !== void 0) {
+      const granted = covered.some((pattern) => {
+        try {
+          return new URL(target).origin === new URL(pattern).origin;
+        } catch {
+          return false;
+        }
+      });
+      if (!granted) throw new Error(`The fetch request to ${target} targets an origin outside the grants.`);
+    }
     return step;
   });
   for (const step of steps) {
@@ -2065,7 +3143,7 @@ function requestbody(input) {
   return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation, capabilities: input.capabilities });
 }
 function outcomeresponse(input) {
-  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {} });
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {}, ...input.media ? { media: input.media } : {}, ...input.transport ? { transport: input.transport } : {} });
 }
 function mapresponse(input) {
   return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, map: input.map });
@@ -2145,12 +3223,28 @@ function quarantinereport(input) {
 function capturereport(input) {
   return { version: protocolversion, records: input.records, pairs: input.pairs };
 }
+function mediareport(input) {
+  return { version: protocolversion, records: input.records, images: input.images };
+}
+function callsreport(input) {
+  const calls = input.calls.map((call) => {
+    const { body, ...metadata } = call;
+    void body;
+    return metadata;
+  });
+  return { version: protocolversion, calls };
+}
 export {
   annotationplanof,
+  assetentries,
   blendrows,
   buildname,
+  buildpdf,
   buildsheet,
   buildstitchplan,
+  callgraphql,
+  callrest,
+  callsreport,
   canexecute,
   captureelement,
   captureformats,
@@ -2162,38 +3256,68 @@ export {
   capturestitched,
   capturetargets,
   capturevisible,
+  convertdirectiveof,
   croprect,
   crossesviewport,
   datasetresponse,
+  dedupeimages,
   actionrisk as deriveactionrisk,
   diffresponse,
   downloadreport,
   errorreportresponse,
   eventresponse,
   extractionreport,
+  fetchoptionsof,
+  fetchrequestof,
+  finishrecording,
   fixedheadermatch,
   formreportresponse,
+  frameinterval,
   generatedvalueallowed,
+  graphqlopenvelope,
+  graphqlrequestof,
   heldkeysreport,
   hostpattern,
+  htmlqueriesof,
+  httpkinds,
+  imagefilterof,
+  imagematches,
+  imagenames,
   isformkind,
   iswatchkind,
+  jsonpathrulesof,
+  lapseframes,
+  lapseplanof,
   layoutreport,
   mapresponse,
+  mediaentries,
+  mediakinds,
+  mediareport,
   navstateresponse,
   netlogreport,
+  newrecording,
   normalizeendpoint,
   observationmodeof,
   observationresponse,
   outcomeresponse,
   pairstates,
+  parsehtmlbody,
   parseproposal,
   passwordconsentgranted,
+  payloadvalid,
+  payloadwithdefaults,
+  pdfoptionsof,
+  pdfpagesize,
+  pdfsegments,
+  pdftextlayout,
   profilegrantgranted,
   protocolversion,
   provenancereport,
   quarantinereport,
   randomid,
+  readpath,
+  readstream,
+  recordingoptionsof,
   regionsteps,
   requestbody,
   resolutionverdict,
@@ -2201,12 +3325,20 @@ export {
   scaledrect,
   seamweights,
   selectorresponse,
+  sendfetch,
   sessionmemory,
   signalsreport,
+  statusclassof,
+  streamsummaries,
+  streamwindowof,
   submitreviewgranted,
   tabreportresponse,
+  templateurl,
+  thumbdirectiveof,
+  thumbgeometry,
   trailreport,
   transformgrammar,
+  unwrapgraphql,
   validatefieldmatch,
   validateformrecord,
   validatestep,