@wenathlan/extension 1.1.47 → 1.1.48

package/dist/index.js

@@ -333,6 +333,190 @@ function teardowncdpsession(input) {
   };
 }
 
+// emulation.ts
+var emulationkinds = ["emulatedevice", "emulatenetwork", "emulatelocate", "setuseragent", "overridepermission", "blackboxscripts"];
+var browserpermissions = ["geolocation", "notifications", "camera", "microphone", "clipboard-read", "clipboard-write", "midi", "persistent-storage"];
+var permissionstates = ["granted", "denied", "prompt"];
+function familyofkind(kind) {
+  if (kind === "emulatedevice") return "device";
+  if (kind === "emulatenetwork") return "network";
+  if (kind === "emulatelocate") return "location";
+  if (kind === "setuseragent") return "agent";
+  if (kind === "overridepermission") return "permission";
+  if (kind === "blackboxscripts") return "blackbox";
+  return void 0;
+}
+function devicepresetof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  const name = typeof entry.name === "string" && entry.name.trim() ? entry.name.trim() : void 0;
+  const width = typeof entry.width === "number" && Number.isInteger(entry.width) && entry.width > 0 ? entry.width : void 0;
+  const height = typeof entry.height === "number" && Number.isInteger(entry.height) && entry.height > 0 ? entry.height : void 0;
+  const pixelratio = typeof entry.pixelratio === "number" && Number.isFinite(entry.pixelratio) && entry.pixelratio > 0 ? entry.pixelratio : void 0;
+  if (name === void 0 || width === void 0 || height === void 0 || pixelratio === void 0) return void 0;
+  return { name, width, height, pixelratio, mobile: entry.mobile === true };
+}
+function networkpresetof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  const name = typeof entry.name === "string" && entry.name.trim() ? entry.name.trim() : void 0;
+  const latency = typeof entry.latency === "number" && Number.isFinite(entry.latency) && entry.latency >= 0 ? entry.latency : void 0;
+  const download = typeof entry.download === "number" && Number.isFinite(entry.download) && entry.download >= 0 ? entry.download : void 0;
+  const upload = typeof entry.upload === "number" && Number.isFinite(entry.upload) && entry.upload >= 0 ? entry.upload : void 0;
+  if (name === void 0 || latency === void 0 || download === void 0 || upload === void 0) return void 0;
+  return { name, latency, download, upload, offline: entry.offline === true };
+}
+function locationpresetof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  const name = typeof entry.name === "string" && entry.name.trim() ? entry.name.trim() : void 0;
+  const latitude = typeof entry.latitude === "number" && Number.isFinite(entry.latitude) ? entry.latitude : void 0;
+  const longitude = typeof entry.longitude === "number" && Number.isFinite(entry.longitude) ? entry.longitude : void 0;
+  const accuracy = typeof entry.accuracy === "number" && Number.isFinite(entry.accuracy) && entry.accuracy >= 0 ? entry.accuracy : void 0;
+  if (name === void 0 || latitude === void 0 || longitude === void 0 || accuracy === void 0) return void 0;
+  if (!locationrangevalid(latitude, longitude)) return void 0;
+  return { name, latitude, longitude, accuracy };
+}
+function agentpresetof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  const name = typeof entry.name === "string" && entry.name.trim() ? entry.name.trim() : void 0;
+  const useragent = typeof entry.useragent === "string" ? entry.useragent : void 0;
+  const platform = typeof entry.platform === "string" && entry.platform.trim() ? entry.platform.trim() : void 0;
+  const brands = Array.isArray(entry.brands) ? entry.brands.filter((brand) => typeof brand === "string" && brand.trim().length > 0) : [];
+  if (name === void 0 || useragent === void 0 || platform === void 0 || brands.length === 0) return void 0;
+  if (!agentgrammarvalid(useragent)) return void 0;
+  return { name, useragent, platform, brands: [...new Set(brands)] };
+}
+function permissiongrantof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  const name = typeof entry.name === "string" && browserpermissions.includes(entry.name) ? entry.name : void 0;
+  const state = typeof entry.state === "string" && permissionstates.includes(entry.state) ? entry.state : void 0;
+  if (name === void 0 || state === void 0) return void 0;
+  return { name, state, runscope: entry.runscope !== false };
+}
+function blackboxruleof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  const urlpatterns = Array.isArray(entry.urlpatterns) ? entry.urlpatterns.filter((pattern) => typeof pattern === "string" && /^https:\/\//.test(pattern)) : [];
+  const tracescope = entry.tracescope;
+  if (urlpatterns.length === 0) return void 0;
+  if (tracescope !== "profiles" && tracescope !== "traces" && tracescope !== "both") return void 0;
+  return { urlpatterns: [...new Set(urlpatterns)], tracescope };
+}
+function revertplanof(value) {
+  const steps = Array.isArray(value) ? value.filter((step) => typeof step === "string" && step.trim().length > 0) : [];
+  return steps.length > 0 ? steps : void 0;
+}
+function newlayer(input) {
+  return { id: input.id, runid: input.runid, stepid: input.stepid, family: input.family, name: input.name, originscope: input.originscope, appliedat: input.at, ...input.prior !== void 0 ? { prior: input.prior } : {}, revertplan: [...input.revertplan] };
+}
+function emulationstateof(input) {
+  return { runid: input.runid, tabid: input.tabid, origin: input.origin, layers: [], updatedat: input.now };
+}
+function applylayer(state, layer, at) {
+  const layers = [...state.layers.filter((item) => item.id !== layer.id), layer];
+  return { ...state, layers, updatedat: at };
+}
+function revertlayer(state, layerid, at) {
+  const layers = state.layers.map((layer) => layer.id === layerid && layer.revertedat === void 0 ? { ...layer, revertedat: at } : layer);
+  return { ...state, layers, updatedat: at };
+}
+function revertalllayers(state, at) {
+  const reverted = [...state.layers].reverse().filter((layer) => layer.revertedat === void 0);
+  const layers = state.layers.map((layer) => layer.revertedat === void 0 ? { ...layer, revertedat: at } : layer);
+  return { state: { ...state, layers, updatedat: at }, reverted };
+}
+function activelayers(state) {
+  return state ? state.layers.filter((layer) => layer.revertedat === void 0) : [];
+}
+function layernames(state) {
+  return activelayers(state).map((layer) => layer.name);
+}
+function stackedcount(state) {
+  return activelayers(state).length;
+}
+function locationrangevalid(latitude, longitude) {
+  return Number.isFinite(latitude) && Number.isFinite(longitude) && latitude >= -90 && latitude <= 90 && longitude >= -180 && longitude <= 180;
+}
+function agentgrammarvalid(useragent) {
+  const text2 = useragent.trim();
+  if (text2.length === 0 || text2.length > 512) return false;
+  if (/[\r\n]/.test(text2)) return false;
+  if (!/^[A-Za-z0-9][A-Za-z0-9._+\-()/:; ,]*$/.test(text2)) return false;
+  return /\/\d/.test(text2) || /\d+\.\d+/.test(text2);
+}
+function permissiongrade(name) {
+  return name === "geolocation" || name === "camera" || name === "microphone" || name === "notifications" ? "powerful" : "standard";
+}
+function blackboxmatches(urlpattern, url) {
+  const patternmatch = /^(https:\/\/[^/]+)(\/.*)?$/.exec(urlpattern);
+  const urlmatch = /^(https:\/\/[^/]+)(\/.*)?$/.exec(url);
+  if (!patternmatch || !urlmatch) return false;
+  if (patternmatch[1] !== urlmatch[1]) return false;
+  const patternpath = (patternmatch[2] ?? "/").split("/").filter((segment) => segment.length > 0);
+  const urlpath = (urlmatch[2] ?? "/").split("/").filter((segment) => segment.length > 0);
+  const walk = (patternindex, urlindex) => {
+    if (patternindex >= patternpath.length) return urlindex >= urlpath.length;
+    const segment = patternpath[patternindex];
+    if (segment === void 0) return false;
+    if (segment === "**") return walk(patternindex + 1, urlindex) || urlindex < urlpath.length && walk(patternindex, urlindex + 1);
+    if (urlindex >= urlpath.length) return false;
+    if (segment !== "*" && segment !== urlpath[urlindex]) return false;
+    return walk(patternindex + 1, urlindex + 1);
+  };
+  return walk(0, 0);
+}
+function hideblackboxedframes(rules, frames) {
+  const patterns = rules.filter((rule) => rule.tracescope === "traces" || rule.tracescope === "both").flatMap((rule) => rule.urlpatterns);
+  if (patterns.length === 0) return frames;
+  return frames.filter((frame) => !patterns.some((pattern) => blackboxmatches(pattern, frame.url)));
+}
+function blackboxedurls(rules, urls) {
+  const patterns = rules.flatMap((rule) => rule.urlpatterns);
+  return urls.filter((url) => patterns.some((pattern) => blackboxmatches(pattern, url)));
+}
+function expirelayers(state, retention, now) {
+  if (retention === void 0) return state;
+  const layers = state.layers.map((layer) => {
+    if (layer.revertedat === void 0 || layer.prior === void 0 || layer.priorexpired === true) return layer;
+    if (now - layer.revertedat <= retention) return layer;
+    const { prior, ...metadata } = layer;
+    void prior;
+    return { ...metadata, priorexpired: true };
+  });
+  return { ...state, layers, updatedat: now };
+}
+function exportpresetlibrary(input) {
+  return { version: 1, devices: [...input.devices], networks: [...input.networks], locations: [...input.locations], agents: [...input.agents], exportedat: input.now };
+}
+function importpresetlibrary(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  const devices = (Array.isArray(entry.devices) ? entry.devices : []).flatMap((preset) => {
+    const parsed = devicepresetof(preset);
+    return parsed !== void 0 ? [parsed] : [];
+  });
+  const networks = (Array.isArray(entry.networks) ? entry.networks : []).flatMap((preset) => {
+    const parsed = networkpresetof(preset);
+    return parsed !== void 0 ? [parsed] : [];
+  });
+  const locations = (Array.isArray(entry.locations) ? entry.locations : []).flatMap((preset) => {
+    const parsed = locationpresetof(preset);
+    return parsed !== void 0 ? [parsed] : [];
+  });
+  const agents = (Array.isArray(entry.agents) ? entry.agents : []).flatMap((preset) => {
+    const parsed = agentpresetof(preset);
+    return parsed !== void 0 ? [parsed] : [];
+  });
+  if (devices.length + networks.length + locations.length + agents.length === 0) return void 0;
+  return { version: typeof entry.version === "number" && Number.isInteger(entry.version) && entry.version >= 1 ? entry.version : 1, devices, networks, locations, agents, exportedat: typeof entry.exportedat === "number" ? entry.exportedat : Date.now() };
+}
+function locationconsentcovers(origin, latitude, longitude, consents) {
+  return consents.some((consent) => consent.origin === origin && consent.approved === true && consent.revokedat === void 0 && consent.latitude === latitude && consent.longitude === longitude);
+}
+
 // httpclient.ts
 var httpkinds = ["fetchurl", "parsejson", "parsehtml", "callrest", "callgraphql"];
 var redirectstatuses = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
@@ -2517,6 +2701,83 @@ var sessionmemory = class {
     await this.adapter.set("sourcemapconsents", updated);
     return revoked;
   }
+  /** Stores the emulation state of one run keyed by its run id; the reverted layer prior states expire after the user configured retention window while the layer history always survives. */
+  async setemulationstate(state) {
+    const retention = (await this.getsettings())?.emulationretention;
+    await this.adapter.set(`emulationstate${state.runid}`, expirelayers(state, retention, Date.now()));
+  }
+  /** Returns the persisted emulation state of one run so the layers survive service worker restarts. */
+  async getemulationstate(runid) {
+    return this.adapter.get(`emulationstate${runid}`);
+  }
+  /** Returns the active and past layers of one run, newest last in apply order; the listlayers accessor of the emulation memory. */
+  async listlayers(runid) {
+    const state = await this.getemulationstate(runid);
+    return state?.layers ?? [];
+  }
+  /** Stores one user curated device preset by its name so the preset library stays user data instead of a hardcoded list. */
+  async setdevicepreset(preset) {
+    const records = (await this.adapter.get("devicepresets") ?? []).filter((item) => item.name !== preset.name);
+    await this.adapter.set("devicepresets", [...records, preset]);
+  }
+  /** Returns every user curated device preset. */
+  async getdevicepresets() {
+    return await this.adapter.get("devicepresets") ?? [];
+  }
+  /** Stores one user curated network preset by its name with editable values. */
+  async setnetworkpreset(preset) {
+    const records = (await this.adapter.get("networkpresets") ?? []).filter((item) => item.name !== preset.name);
+    await this.adapter.set("networkpresets", [...records, preset]);
+  }
+  /** Returns every user curated network preset. */
+  async getnetworkpresets() {
+    return await this.adapter.get("networkpresets") ?? [];
+  }
+  /** Stores one user curated location preset by its name. */
+  async setlocationpreset(preset) {
+    const records = (await this.adapter.get("locationpresets") ?? []).filter((item) => item.name !== preset.name);
+    await this.adapter.set("locationpresets", [...records, preset]);
+  }
+  /** Returns every user curated location preset. */
+  async getlocationpresets() {
+    return await this.adapter.get("locationpresets") ?? [];
+  }
+  /** Stores one user curated agent preset by its name. */
+  async setagentpreset(preset) {
+    const records = (await this.adapter.get("agentpresets") ?? []).filter((item) => item.name !== preset.name);
+    await this.adapter.set("agentpresets", [...records, preset]);
+  }
+  /** Returns every user curated agent preset. */
+  async getagentpresets() {
+    return await this.adapter.get("agentpresets") ?? [];
+  }
+  /** Replaces the blackbox rule set of one origin so third party script blackboxing stays scoped per origin. */
+  async setblackboxrules(origin, rules) {
+    const records = (await this.adapter.get("blackboxrules") ?? []).filter((item) => item.origin !== origin);
+    await this.adapter.set("blackboxrules", [...records, { origin, rules }]);
+  }
+  /** Returns every stored blackbox rule set with its origin. */
+  async getblackboxrules() {
+    return await this.adapter.get("blackboxrules") ?? [];
+  }
+  /** Records one permission override of a run with its prior state captured for the exact restore. */
+  async addpermissionoverride(record2) {
+    const records = (await this.adapter.get("permissionoverrides") ?? []).filter((item) => item.id !== record2.id);
+    await this.adapter.set("permissionoverrides", [record2, ...records]);
+  }
+  /** Returns the permission override history with restore states, newest first. */
+  async getpermissionoverrides() {
+    return await this.adapter.get("permissionoverrides") ?? [];
+  }
+  /** Stores one location consent decision per origin, replacing the previous decision of its id. */
+  async setlocationconsent(consent) {
+    const records = (await this.adapter.get("locationconsents") ?? []).filter((item) => item.id !== consent.id);
+    await this.adapter.set("locationconsents", [consent, ...records]);
+  }
+  /** Returns every location consent decision, newest first. */
+  async getlocationconsents() {
+    return await this.adapter.get("locationconsents") ?? [];
+  }
 };
 function mediakindof(record2) {
   if ("pages" in record2) return "pdf";
@@ -3463,9 +3724,9 @@ function polldecision(input) {
 }
 
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract", "batchdownload", "pausedownload", "resumedownload", "interceptmime", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "cleanupartifacts", "recordscreen", "captureaudio", "downloadimages", "callrest", "callgraphql", "sendmessage", "blockrequest", "mockresponse", "rewriteheaders", "setcookies", "clearcookies", "authflow", "saveapikey", "routeproxy", "postform", "postfiles", "attachcdp", "detachcdp", "cdpcmd", "overridescript", "heapshot", "profilecpu", "capturesourcemaps"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract", "batchdownload", "pausedownload", "resumedownload", "interceptmime", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "cleanupartifacts", "recordscreen", "captureaudio", "downloadimages", "callrest", "callgraphql", "sendmessage", "blockrequest", "mockresponse", "rewriteheaders", "setcookies", "clearcookies", "authflow", "saveapikey", "routeproxy", "postform", "postfiles", "attachcdp", "detachcdp", "cdpcmd", "overridescript", "heapshot", "profilecpu", "capturesourcemaps", "emulatedevice", "emulatenetwork", "emulatelocate", "setuseragent", "overridepermission"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction", "capturebodies", "setbreakpoint", "stepcode", "watchexpr"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet", "capturepdf", "captureframe", "readmedia", "readassets", "probestream", "timelapse", "shotcanvas", "convertimage", "makethumbs", "fetchurl", "parsejson", "parsehtml", "opensocket", "waitmessage", "watchrequests", "readheaders", "mapapi", "subscribesse", "longpoll", "extractapi", "readcookies", "watchconsole", "watcherrors", "watchtasks", "watchcdp", "measureflow", "trackmemory", "watchshifts", "traceload", "annotatetrace", "replaytrace"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet", "capturepdf", "captureframe", "readmedia", "readassets", "probestream", "timelapse", "shotcanvas", "convertimage", "makethumbs", "fetchurl", "parsejson", "parsehtml", "opensocket", "waitmessage", "watchrequests", "readheaders", "mapapi", "subscribesse", "longpoll", "extractapi", "readcookies", "watchconsole", "watcherrors", "watchtasks", "watchcdp", "measureflow", "trackmemory", "watchshifts", "traceload", "annotatetrace", "replaytrace", "blackboxscripts"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
 var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus", "watchtab"]);
 var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "scrapetable", "paginateextract", "shotelement", "captureframe", "shotcanvas"]);
@@ -3484,6 +3745,7 @@ var controlactions = /* @__PURE__ */ new Set(["blockrequest", "mockresponse", "r
 var debugactions = /* @__PURE__ */ new Set(["watchconsole", "watcherrors", "watchtasks"]);
 var cdpactions = /* @__PURE__ */ new Set(["attachcdp", "detachcdp", "cdpcmd", "watchcdp", "setbreakpoint", "stepcode", "watchexpr", "overridescript"]);
 var profileractions = /* @__PURE__ */ new Set(["measureflow", "heapshot", "trackmemory", "profilecpu", "watchshifts", "traceload", "annotatetrace", "replaytrace", "capturesourcemaps"]);
+var emulationactions = /* @__PURE__ */ new Set(["emulatedevice", "emulatenetwork", "emulatelocate", "setuseragent", "overridepermission", "blackboxscripts"]);
 var credentialheaders = /* @__PURE__ */ new Set(["authorization", "proxy-authorization", "cookie", "cookie2", "set-cookie", "api-key", "x-api-key", "x-auth-token", "x-session-token", "proxy-authorization"]);
 var fieldkinds = ["text", "email", "phone", "date", "number", "select", "check", "radio", "file", "password", "card", "code"];
 var layoutmutationactions = /* @__PURE__ */ new Set(["grouptabs", "colorgroup", "collapsegroup", "savelayout", "restorelayout"]);
@@ -3511,6 +3773,9 @@ function iscdpkind(kind) {
 function isprofilekind(kind) {
   return profileractions.has(kind);
 }
+function isemulationkind(kind) {
+  return emulationactions.has(kind);
+}
 function observationmodeof(kind) {
   if (watchactions.has(kind) || debugactions.has(kind) || profileractions.has(kind) && kind !== "heapshot" && kind !== "replaytrace" && kind !== "annotatetrace" && kind !== "capturesourcemaps" && kind !== "profilecpu" || cdpactions.has(kind) && kind === "watchcdp" || kind === "waitquiet") return "watching";
   if (kind === "diffsnapshots") return "diffing";
@@ -4795,6 +5060,85 @@ function pauseretentionwindow(settings) {
 function breakpointceilingof(settings) {
   return settings?.breakpointceiling;
 }
+function emugate(input) {
+  const gate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now: input.now, action: "emulate the run tab" });
+  if (!gate.allowed) return gate;
+  if (!input.plan || input.plan.state !== "approved") return { allowed: false, reason: "Emulation layers need an approved plan before they apply." };
+  let options = {};
+  try {
+    options = parseoptions(input.step);
+  } catch {
+    options = {};
+  }
+  if (options.reviewed !== true) return { allowed: false, reason: `The ${input.step.kind} layer needs the explicit reviewed flag before any mask applies.` };
+  if (revertplanof(options.revertplan) === void 0) return { allowed: false, reason: `Every ${input.step.kind} layer needs a reviewed revert plan beside it before any mask applies.` };
+  return { allowed: true };
+}
+function emulationstackallowed(plan, kind, active) {
+  if (!plan) return { allowed: false, reason: "Layer stacking needs the reviewed plan first." };
+  const listed = plan.steps.filter((step) => step.kind === kind).length;
+  if (active >= listed) return { allowed: false, reason: `The plan lists ${listed} reviewed ${kind} step${listed === 1 ? "" : "s"} and ${active} layer${active === 1 ? "" : "s"} of that family are already active; stacking beyond the reviewed plan is refused.` };
+  return { allowed: true };
+}
+function locationconsentgate(origin, latitude, longitude, consents) {
+  if (consents.some((consent) => consent.origin === origin && consent.revokedat !== void 0)) return { allowed: false, reason: `The location consent on ${origin} was revoked; approve a new prompt before the location override runs again.` };
+  if (locationconsentcovers(origin, latitude, longitude, consents)) return { allowed: true };
+  return { allowed: false, reason: `The location override of ${latitude}, ${longitude} on ${origin} needs the reviewed location consent first; approve the prompt with the coordinates shown in the review panel.` };
+}
+function emulationretentionwindow(settings) {
+  return settings?.emulationretention;
+}
+function validateemulationgrammar(step, options) {
+  const kind = step.kind;
+  if (revertplanof(options.revertplan) === void 0) return { allowed: false, reason: `Every ${kind} layer needs a reviewed revert plan before any mask applies.` };
+  if (kind === "emulatedevice") {
+    const preset = devicepresetof(options.device);
+    if (!preset) return { allowed: false, reason: "The device layer needs a reviewed preset with a name, positive integer width and height and a positive pixel ratio." };
+    if (options.reload !== void 0 && typeof options.reload !== "boolean") return { allowed: false, reason: "The reviewed reload flag must be a boolean; the page reloads only when the reviewed plan asks." };
+    return { allowed: true };
+  }
+  if (kind === "emulatenetwork") {
+    const preset = networkpresetof(options.network);
+    if (!preset) return { allowed: false, reason: "The network layer needs a reviewed preset with a name and zero or positive latency, download and upload bounds." };
+    if (options.window !== void 0 && (typeof options.window !== "number" || !Number.isFinite(options.window) || options.window < 0)) return { allowed: false, reason: "The reviewed offline window must be zero or a positive number of milliseconds with no code ceiling." };
+    return { allowed: true };
+  }
+  if (kind === "emulatelocate") {
+    const preset = locationpresetof(options.location);
+    if (!preset) return { allowed: false, reason: "The location layer needs a reviewed preset with a name, a latitude inside -90 and 90, a longitude inside -180 and 180 and a zero or positive accuracy radius." };
+    if (!locationrangevalid(preset.latitude, preset.longitude)) return { allowed: false, reason: "The reviewed latitude must stay inside -90 and 90 degrees and the longitude inside -180 and 180 degrees." };
+    return { allowed: true };
+  }
+  if (kind === "setuseragent") {
+    const preset = agentpresetof(options.agent);
+    if (!preset) return { allowed: false, reason: "The agent layer needs a reviewed preset with a user agent string of the reviewed grammar, a platform and a non-empty brand list." };
+    if (!agentgrammarvalid(preset.useragent)) return { allowed: false, reason: "The reviewed user agent string must use the reviewed grammar of tokens, separators and version marks without line breaks." };
+    return { allowed: true };
+  }
+  if (kind === "overridepermission") {
+    const grant = permissiongrantof(options.permission);
+    if (!grant) return { allowed: false, reason: `The permission override needs a reviewed name of the browser permission set (${browserpermissions.join(", ")}) and a state of ${permissionstates.join(", ")}.` };
+    void permissiongrade(grant.name);
+    return { allowed: true };
+  }
+  if (kind === "blackboxscripts") {
+    const rules = Array.isArray(options.rules) ? options.rules.flatMap((rule) => {
+      const parsed = blackboxruleof(rule);
+      return parsed !== void 0 ? [parsed] : [];
+    }) : [];
+    if (rules.length === 0) return { allowed: false, reason: "The blackbox layer needs a reviewed non-empty rule list where every pattern names its origin explicitly and carries a trace scope." };
+    return { allowed: true };
+  }
+  return { allowed: true };
+}
+function permissionnamevalid(name) {
+  if (!browserpermissions.includes(name)) return { allowed: false, reason: `The permission ${name} stays outside the reviewed browser permission set: ${browserpermissions.join(", ")}.` };
+  return { allowed: true };
+}
+function permissionstatevalid(state) {
+  if (!permissionstates.includes(state)) return { allowed: false, reason: `The reviewed permission state must be one of ${permissionstates.join(", ")}.` };
+  return { allowed: true };
+}
 function validatecdpgrammar(step, options) {
   const kind = step.kind;
   if (kind === "attachcdp") {
@@ -5352,6 +5696,10 @@ function validatestep(step, origin) {
     const profilecheck = validateprofilegrammar(step, options);
     if (!profilecheck.allowed) return profilecheck;
   }
+  if (isemulationkind(step.kind)) {
+    const emulationcheck = validateemulationgrammar(step, options);
+    if (!emulationcheck.allowed) return emulationcheck;
+  }
   if (step.kind === "tabcreate") {
     if (options.background !== void 0 && typeof options.background !== "boolean") return { allowed: false, reason: "The reviewed background flag must be a boolean." };
     if (options.window !== void 0 && (typeof options.window !== "number" || !Number.isInteger(options.window) || options.window < 0)) return { allowed: false, reason: "The reviewed target window id must be a non-negative integer." };
@@ -5521,6 +5869,10 @@ function canexecute(input) {
       }
     }
   }
+  if (isemulationkind(input.step.kind)) {
+    const emugatecheck = emugate({ session: input.session, plan: input.plan, step: input.step, tabid: input.tabid, origin: input.origin, now });
+    if (!emugatecheck.allowed) return emugatecheck;
+  }
   if (iscontrolkind(input.step.kind)) {
     const controlgate = sessiongate({ session: input.session, tabid: input.tabid, origin: input.origin, now, action: "control the network" });
     if (!controlgate.allowed) return controlgate;
@@ -5604,7 +5956,7 @@ function canexecute(input) {
 }
 
 // version.ts
-var packageversion = "1.1.47";
+var packageversion = "1.1.48";
 
 // types.ts
 var protocolversion = packageversion;
@@ -5776,6 +6128,28 @@ function parseproposal(value, origin, grants) {
       }
       if (step.kind === "annotatetrace" && (!Array.isArray(profileoptions.annotations) || profileoptions.annotations.length === 0 || !profileoptions.annotations.every((annotation) => annotationof(annotation) !== void 0))) throw new Error("Trace annotation steps without reviewed step annotations are refused.");
     }
+    if (isemulationkind(step.kind)) {
+      const granted = covered.some((pattern) => {
+        try {
+          return new URL(origin).origin === new URL(pattern).origin;
+        } catch {
+          return false;
+        }
+      });
+      if (!granted) throw new Error(`The ${step.kind} step of ${origin} targets an origin outside the grants.`);
+      let emulationoptions = {};
+      try {
+        emulationoptions = parseoptions(step);
+      } catch {
+        emulationoptions = {};
+      }
+      if (revertplanof(emulationoptions.revertplan) === void 0) throw new Error("Emulation steps without a reviewed revert plan are refused.");
+      if (step.kind === "emulatelocate") {
+        const preset = locationpresetof(emulationoptions.location);
+        if (preset === void 0) throw new Error("Location emulation needs a reviewed preset with coordinates inside the latitude and longitude ranges.");
+      }
+      if (step.kind === "overridepermission" && permissiongrantof(emulationoptions.permission) === void 0) throw new Error("Permission overrides of unknown permission names are refused.");
+    }
     const evaluation = validatestep(step, origin);
     if (!evaluation.allowed) throw new Error(evaluation.reason);
     const target = outboundtarget(step);
@@ -5850,7 +6224,7 @@ function requestbody(input) {
   return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation, capabilities: input.capabilities });
 }
 function outcomeresponse(input) {
-  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {}, ...input.media ? { media: input.media } : {}, ...input.transport ? { transport: input.transport } : {}, ...input.network ? { network: input.network } : {}, ...input.control ? { control: input.control } : {}, ...input.timeline ? { timeline: input.timeline } : {}, ...input.cdp ? { cdp: input.cdp } : {}, ...input.profile ? { profile: input.profile } : {} });
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {}, ...input.media ? { media: input.media } : {}, ...input.transport ? { transport: input.transport } : {}, ...input.network ? { network: input.network } : {}, ...input.control ? { control: input.control } : {}, ...input.timeline ? { timeline: input.timeline } : {}, ...input.cdp ? { cdp: input.cdp } : {}, ...input.profile ? { profile: input.profile } : {}, ...input.emulation ? { emulation: input.emulation } : {} });
 }
 function mapresponse(input) {
   return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, map: input.map });
@@ -5988,7 +6362,18 @@ function profilereport(input) {
   });
   return { version: protocolversion, flows: input.flows, heaps: input.heaps, samples: input.samples, trends: input.trends, profiles: input.profiles, shifts: input.shifts, traces: input.traces, sourcemaps: input.sourcemaps, consents };
 }
+function emulationreport(input) {
+  const consents = input.consents.map((consent) => {
+    const { prompt, ...metadata } = consent;
+    void prompt;
+    return metadata;
+  });
+  return { version: protocolversion, ...input.state !== void 0 ? { state: input.state } : {}, layers: input.state?.layers ?? [], devices: input.devices, networks: input.networks, locations: input.locations, agents: input.agents, blackbox: input.blackbox, permissions: input.permissions, consents };
+}
 export {
+  activelayers,
+  agentgrammarvalid,
+  agentpresetof,
   allowlistcovers,
   annotatetrace,
   annotationof,
@@ -5997,6 +6382,7 @@ export {
   apikeyconsentgranted,
   apireplayspecof,
   applyheaderules,
+  applylayer,
   argkind,
   assetentries,
   attachcdpsession,
@@ -6005,6 +6391,9 @@ export {
   authconsentgranted,
   authorizeurl,
   authreport,
+  blackboxedurls,
+  blackboxmatches,
+  blackboxruleof,
   blendrows,
   blockgate,
   blockingduration,
@@ -6014,6 +6403,7 @@ export {
   breakpointbudgetallowed,
   breakpointceilingof,
   breakpointinputof,
+  browserpermissions,
   buildname,
   buildpdf,
   buildsheet,
@@ -6069,17 +6459,27 @@ export {
   dedupeimages,
   actionrisk as deriveactionrisk,
   detachcdpsession,
+  devicepresetof,
   diffresponse,
   diffreviewgrade,
   downloadreport,
+  emugate,
+  emulationkinds,
+  emulationreport,
+  emulationretentionwindow,
+  emulationstackallowed,
+  emulationstateof,
   errorcapture,
   errorreportresponse,
   eventresponse,
   exchangesreport,
+  expirelayers,
   expireprofilerecords,
+  exportpresetlibrary,
   extractionreport,
   extractvalues,
   failureclass,
+  familyofkind,
   fetchoptionsof,
   fetchrequestof,
   filterentries,
@@ -6101,15 +6501,18 @@ export {
   heapintervalallowed,
   heapsnap,
   heldkeysreport,
+  hideblackboxedframes,
   hostpattern,
   htmlqueriesof,
   httpkinds,
   imagefilterof,
   imagematches,
   imagenames,
+  importpresetlibrary,
   iscdpkind,
   iscontrolkind,
   isdebugkind,
+  isemulationkind,
   isformkind,
   isnetwatchkind,
   isprofilekind,
@@ -6118,8 +6521,13 @@ export {
   jsonpathrulesof,
   lapseframes,
   lapseplanof,
+  layernames,
   layoutreport,
   levelrank,
+  locationconsentcovers,
+  locationconsentgate,
+  locationpresetof,
+  locationrangevalid,
   loglevels,
   longtaskcapture,
   mapresponse,
@@ -6140,10 +6548,12 @@ export {
   netfailureentryof,
   netlogreport,
   netwatchkinds,
+  networkpresetof,
   newblockrule,
   newchannel,
   newexchange,
   newheaderule,
+  newlayer,
   newmockspec,
   newrecording,
   normalizeendpoint,
@@ -6170,6 +6580,11 @@ export {
   pdfpagesize,
   pdfsegments,
   pdftextlayout,
+  permissiongrade,
+  permissiongrantof,
+  permissionnamevalid,
+  permissionstates,
+  permissionstatevalid,
   planallowlist,
   pollcursorof,
   polldecision,
@@ -6207,6 +6622,9 @@ export {
   resolvedrisk,
   resourcefacts,
   retryafterof,
+  revertalllayers,
+  revertlayer,
+  revertplanof,
   revertrule,
   revocationruleof,
   rewritesourcelocation,
@@ -6230,6 +6648,7 @@ export {
   spamdetect,
   spamruleof,
   sserequestheaders,
+  stackedcount,
   stackframes,
   stackgate,
   statusclassof,