@wenathlan/extension 1.1.52 → 1.1.54

package/dist/index.js

@@ -335,6 +335,14 @@ function teardowncdpsession(input) {
 
 // workflow.ts
 var workflowkinds = ["composeworkflow", "savetemplate", "runworkflow", "dryrun", "delay", "waitelement", "compute", "extractvars"];
+function nestedparamof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const candidate = value;
+  if (typeof candidate.name !== "string" || !/^[a-z][a-z0-9]*$/.test(candidate.name)) return void 0;
+  if (!variablekinds.includes(candidate.kind)) return void 0;
+  if (candidate.default !== void 0 && !["string", "number", "boolean"].includes(typeof candidate.default) && !Array.isArray(candidate.default)) return void 0;
+  return { name: candidate.name, kind: candidate.kind, ...candidate.default !== void 0 ? { default: candidate.default } : {} };
+}
 function workflowstepof(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
   const candidate = value;
@@ -344,6 +352,7 @@ function workflowstepof(value) {
   if (candidate.target !== void 0 && (typeof candidate.target !== "string" || !candidate.target)) return void 0;
   if (candidate.value !== void 0 && typeof candidate.value !== "string") return void 0;
   if (candidate.options !== void 0 && typeof candidate.options !== "string") return void 0;
+  if (candidate.breakpoint !== void 0 && typeof candidate.breakpoint !== "boolean") return void 0;
   const bindings = Array.isArray(candidate.bindings) ? candidate.bindings.flatMap((binding) => bindingof(binding) !== void 0 ? [bindingof(binding)] : []) : void 0;
   if (candidate.bindings !== void 0 && bindings === void 0) return void 0;
   if (Array.isArray(candidate.bindings) && bindings !== void 0 && bindings.length !== candidate.bindings.length) return void 0;
@@ -351,14 +360,20 @@ function workflowstepof(value) {
   if (candidate.expression !== void 0 && expression === void 0) return void 0;
   const extract = candidate.extract === void 0 ? void 0 : regexruleof(candidate.extract);
   if (candidate.extract !== void 0 && extract === void 0) return void 0;
-  return { id: candidate.id, kind: candidate.kind, label: candidate.label, ...candidate.target !== void 0 ? { target: candidate.target } : {}, ...candidate.value !== void 0 ? { value: candidate.value } : {}, ...candidate.options !== void 0 ? { options: candidate.options } : {}, ...bindings !== void 0 && bindings.length > 0 ? { bindings } : {}, ...expression !== void 0 ? { expression } : {}, ...extract !== void 0 ? { extract } : {} };
+  const params = Array.isArray(candidate.params) ? candidate.params.flatMap((param) => nestedparamof(param) !== void 0 ? [nestedparamof(param)] : []) : void 0;
+  if (candidate.params !== void 0 && params === void 0) return void 0;
+  if (Array.isArray(candidate.params) && params !== void 0 && params.length !== candidate.params.length) return void 0;
+  return { id: candidate.id, kind: candidate.kind, label: candidate.label, ...candidate.target !== void 0 ? { target: candidate.target } : {}, ...candidate.value !== void 0 ? { value: candidate.value } : {}, ...candidate.options !== void 0 ? { options: candidate.options } : {}, ...bindings !== void 0 && bindings.length > 0 ? { bindings } : {}, ...expression !== void 0 ? { expression } : {}, ...extract !== void 0 ? { extract } : {}, ...candidate.breakpoint === true ? { breakpoint: true } : {}, ...params !== void 0 && params.length > 0 ? { params } : {} };
 }
 function blockinvocationof(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
   const candidate = value;
   if (typeof candidate.block !== "string" || !candidate.block.trim()) return void 0;
   if (typeof candidate.label !== "string" || !candidate.label.trim()) return void 0;
-  return { block: candidate.block, label: candidate.label };
+  const params = Array.isArray(candidate.params) ? candidate.params.flatMap((param) => nestedparamof(param) !== void 0 ? [nestedparamof(param)] : []) : void 0;
+  if (candidate.params !== void 0 && params === void 0) return void 0;
+  if (Array.isArray(candidate.params) && params !== void 0 && params.length !== candidate.params.length) return void 0;
+  return { block: candidate.block, label: candidate.label, ...params !== void 0 && params.length > 0 ? { params } : {} };
 }
 function workflowblockof(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
@@ -437,10 +452,15 @@ function regexruleof(value) {
 function expandblocks(steps, blocks) {
   const byname = new Map(blocks.map((block) => [block.name, block]));
   const expanded = [];
-  const visit = (entries, path, inside) => {
+  const visit = (entries, path, inside, params) => {
+    let stamped = params === void 0;
     for (const entry of entries) {
       if ("kind" in entry && "label" in entry && !("block" in entry)) {
-        expanded.push(inside === void 0 ? entry : { ...entry, block: inside });
+        const marked = inside === void 0 ? entry : { ...entry, block: inside };
+        if (!stamped && params !== void 0) {
+          expanded.push({ ...marked, params });
+          stamped = true;
+        } else expanded.push(marked);
         continue;
       }
       const invocation = blockinvocationof(entry);
@@ -448,7 +468,7 @@ function expandblocks(steps, blocks) {
       if (path.includes(invocation.block)) throw new Error(`The block ${invocation.block} recurs inside itself and cannot expand.`);
       const block = byname.get(invocation.block);
       if (!block) throw new Error(`The block ${invocation.block} is not defined in the workflow.`);
-      visit(block.steps, [...path, invocation.block], invocation.block);
+      visit(block.steps, [...path, invocation.block], invocation.block, invocation.params ?? params);
     }
   };
   visit(steps, [], void 0);
@@ -816,6 +836,17 @@ async function runworkflow(input) {
     if (step.block !== void 0 && step.block !== activeblock) {
       scopes = pushscope(scopes, step.block, scopes[scopes.length - 1].name);
       activeblock = step.block;
+      if (step.params) {
+        try {
+          for (const param of step.params) {
+            if (param.default === void 0) continue;
+            scopes = setvariable(scopes, param.name, param.kind, coercevariable(param.default, param.kind), input.now);
+          }
+        } catch (error) {
+          const reason = error instanceof Error ? error.message : String(error);
+          return { run: { ...run, state: "failed", endedat: Date.now(), failreason: `The nested parameter of block ${step.block} failed: ${reason}` }, scopes, log, outputs };
+        }
+      }
     } else if (step.block === void 0 && activeblock !== void 0) {
       while (scopes.length > 1) scopes = popscope(scopes);
       activeblock = void 0;
@@ -848,6 +879,27 @@ function dryrunworkflow(input) {
   }
   return { run: { ...run, state: "done", cursor: input.record.steps.length, endedat: input.now }, scopes, log };
 }
+function watchdogpass(input) {
+  const verdicts = [];
+  for (const run of input.runs) {
+    if (run.state !== "running") continue;
+    const lastcompletedat = input.lastcompletedat[run.id] ?? run.startedat;
+    const live = input.liveexecutors.includes(run.id);
+    const silence = input.now - lastcompletedat;
+    if (!live && input.config.zombiewindow !== void 0 && silence >= input.config.zombiewindow) {
+      verdicts.push({ runid: run.id, verdict: "zombie", action: "reap", reason: `The run ${run.id} lost its executor ${silence} ms ago and reaps as a zombie of a browser shutdown at its last checkpoint ${run.cursor}.`, ...lastcompletedat !== run.startedat ? { lastcompletedat } : {} });
+      continue;
+    }
+    if (!live) continue;
+    if (silence >= input.config.stallthreshold) {
+      const action = input.config.action;
+      verdicts.push({ runid: run.id, verdict: "stalled", action, reason: `The run ${run.id} completed no step for ${silence} ms past the reviewed threshold and the watchdog recovers it with ${action} at cursor ${run.cursor}.`, ...lastcompletedat !== run.startedat ? { lastcompletedat } : {} });
+      continue;
+    }
+    verdicts.push({ runid: run.id, verdict: "healthy", action: "none", reason: `The run ${run.id} completed its last step ${silence} ms ago and stays healthy.`, ...lastcompletedat !== run.startedat ? { lastcompletedat } : {} });
+  }
+  return verdicts;
+}
 
 // controlflow.ts
 var controlflowkinds = ["condition", "branch", "loop", "repeatuntil", "whileloop", "foreach", "parallel", "trycatch"];
@@ -4434,6 +4486,162 @@ var sessionmemory = class {
   async listmanualruns() {
     return await this.adapter.get("manualruns") ?? [];
   }
+  /** Stores one workflow version record with its change note; saving the same version again replaces its note while older versions survive for the timeline. */
+  async addworkflowversion(version) {
+    const versions = (await this.listworkflowversions()).filter((entry) => !(entry.workflowid === version.workflowid && entry.version === version.version));
+    await this.adapter.set("workflowversions", [version, ...versions]);
+  }
+  /** Returns every stored workflow version record, newest first, optionally filtered to one workflow. */
+  async listworkflowversions(workflowid) {
+    const versions = await this.adapter.get("workflowversions") ?? [];
+    return workflowid === void 0 ? versions : versions.filter((entry) => entry.workflowid === workflowid);
+  }
+  /** Stores one version diff result for the history view. */
+  async addversiondiff(diff) {
+    const diffs = (await this.listversiondiffs()).filter((entry) => !(entry.workflowid === diff.workflowid && entry.from === diff.from && entry.to === diff.to));
+    await this.adapter.set("versiondiffs", [diff, ...diffs]);
+  }
+  /** Returns every stored version diff result, newest first, optionally filtered to one workflow. */
+  async listversiondiffs(workflowid) {
+    const diffs = await this.adapter.get("versiondiffs") ?? [];
+    return workflowid === void 0 ? diffs : diffs.filter((entry) => entry.workflowid === workflowid);
+  }
+  /** Records one run history entry — the outcome, duration and trigger cause of one execution — under the user configured retention window with no code ceiling. */
+  async addrunhistory(entry) {
+    const entries = await this.gethistory();
+    const combined = [entry, ...entries];
+    const retention = (await this.getsettings())?.runhistoryretention;
+    await this.adapter.set("runhistory", retention === void 0 ? combined : combined.slice(0, retention));
+  }
+  /** Returns the stored run history, newest first, filtered by workflow, outcome and time floor; the filters stay user choices. */
+  async gethistory(filter) {
+    const entries = await this.adapter.get("runhistory") ?? [];
+    let filtered = entries;
+    if (filter?.workflowid !== void 0) filtered = filtered.filter((entry) => entry.workflowid === filter.workflowid);
+    if (filter?.outcome !== void 0) filtered = filtered.filter((entry) => entry.outcome === filter.outcome);
+    if (filter?.since !== void 0) filtered = filtered.filter((entry) => entry.endedat >= filter.since);
+    if (filter?.limit !== void 0) filtered = filtered.slice(0, filter.limit);
+    return filtered;
+  }
+  /** Stores the editor layout of one workflow so the canvas reopens exactly as left. */
+  async seteditorlayout(workflowid, layout) {
+    return this.adapter.set(`editorlayout${workflowid}`, layout);
+  }
+  /** Returns the stored editor layout of one workflow. */
+  async geteditorlayout(workflowid) {
+    return await this.adapter.get(`editorlayout${workflowid}`) ?? void 0;
+  }
+  /** Stores the breakpoint step ids of one workflow. */
+  async setworkflowbreakpoints(workflowid, stepids) {
+    return this.adapter.set(`workflowbreakpoints${workflowid}`, stepids);
+  }
+  /** Returns the stored breakpoint step ids of one workflow, oldest first. */
+  async getworkflowbreakpoints(workflowid) {
+    return await this.adapter.get(`workflowbreakpoints${workflowid}`) ?? [];
+  }
+  /** Stores one per site policy override; re-adding the same id replaces its deltas. */
+  async addsiteoverride(override) {
+    const overrides = (await this.listsiteoverrides()).filter((entry) => entry.id !== override.id);
+    await this.adapter.set("siteoverrides", [override, ...overrides]);
+  }
+  /** Returns every stored per site override, newest first, optionally filtered to one workflow. */
+  async listsiteoverrides(workflowid) {
+    const overrides = await this.adapter.get("siteoverrides") ?? [];
+    return workflowid === void 0 ? overrides : overrides.filter((entry) => entry.workflowid === workflowid);
+  }
+  /** Removes one per site override when the user deletes it. */
+  async removesiteoverride(id) {
+    await this.adapter.set("siteoverrides", (await this.listsiteoverrides()).filter((entry) => entry.id !== id));
+  }
+  /** Stores one watchdog event with its recovery outcome; the event history keeps the audit trail of every scan. */
+  async addwatchdogevent(event) {
+    const events = (await this.listwatchdogevents()).filter((entry) => entry.id !== event.id);
+    await this.adapter.set("watchdogevents", [event, ...events]);
+  }
+  /** Returns every stored watchdog event, newest first. */
+  async listwatchdogevents() {
+    return await this.adapter.get("watchdogevents") ?? [];
+  }
+  /** Stores one pending workflow import held for review; approving it later stores the record as runnable. */
+  async addworkflowimport(entry) {
+    const imports = (await this.listworkflowimports()).filter((candidate) => candidate.id !== entry.id);
+    await this.adapter.set("workflowimports", [entry, ...imports]);
+  }
+  /** Returns every pending workflow import, newest first. */
+  async listworkflowimports() {
+    return await this.adapter.get("workflowimports") ?? [];
+  }
+  /** Removes one pending import when the user approves or rejects it. */
+  async removeworkflowimport(id) {
+    await this.adapter.set("workflowimports", (await this.listworkflowimports()).filter((entry) => entry.id !== id));
+  }
+  /** Stores the per workflow background run flags so a workflow keeps running with the panel closed. */
+  async setbackgroundruns(flags) {
+    return this.adapter.set("backgroundruns", flags);
+  }
+  /** Returns the per workflow background run flags. */
+  async getbackgroundruns() {
+    return await this.adapter.get("backgroundruns") ?? {};
+  }
+  /** Removes one stored workflow record version; a rejected import or rollback disappears from the library while every other version survives. */
+  async removeworkflowversion(id, version) {
+    await this.adapter.set("workflowrecords", (await this.getworkflowrecordversions()).filter((entry) => !(entry.id === id && entry.version === version)));
+  }
+  /** Returns every stored mcp client record, newest first. */
+  async getclients() {
+    return await this.adapter.get("mcpclients") ?? [];
+  }
+  /** Upserts one mcp client record by its id so one clientrecord stays per connected transport. */
+  async setclient(client) {
+    const records = (await this.getclients()).filter((entry) => entry.id !== client.id);
+    await this.adapter.set("mcpclients", [client, ...records]);
+  }
+  /** Returns the connected client records — every client whose disconnect time is absent. */
+  async listclients() {
+    return (await this.getclients()).filter((client) => client.disconnectedat === void 0);
+  }
+  /** Stores the negotiated capability set of one client on its record. */
+  async setclientcapabilities(id, capabilities) {
+    await this.adapter.set("mcpclients", (await this.getclients()).map((client) => client.id === id ? { ...client, capabilities } : client));
+  }
+  /** Drops every stored client record when the server stops. */
+  async clearclients() {
+    await this.adapter.set("mcpclients", []);
+  }
+  /** Records one stdio bridge launch event with its process id; a restart marker distinguishes the relaunch of a dead client process. */
+  async addbridgelaunch(launch) {
+    await this.adapter.set("mcbridgelaunches", [launch, ...await this.adapter.get("mcbridgelaunches") ?? []]);
+  }
+  /** Returns every stdio bridge launch event, newest first. */
+  async listbridgelaunches() {
+    return await this.adapter.get("mcbridgelaunches") ?? [];
+  }
+  /** Returns the user configured mcp server config; an absent record keeps the documented localhost default. */
+  async getmcpconfig() {
+    return this.adapter.get("mcpconfig");
+  }
+  /** Stores the user configured mcp server config: bind address, port, transports, frame size, queue depth and enablement all stay user choices. */
+  async setmcpconfig(config) {
+    return this.adapter.set("mcpconfig", config);
+  }
+  /** Returns the persisted mcp server runtime state. */
+  async getmcpstate() {
+    return this.adapter.get("mcpstate");
+  }
+  /** Stores the mcp server runtime state with the stdio bridge status. */
+  async setmcpstate(state) {
+    return this.adapter.set("mcpstate", state);
+  }
+  /** Records one mcp tool call — the client, the tool, the origin and the outcome without any payload — under the user configured call retention with no code ceiling. */
+  async addtoolcall(record2) {
+    const records = await this.listtoolcalls();
+    const retention = (await this.getmcpconfig())?.callretention;
+    await this.adapter.set("mcptoolcalls", retention === void 0 ? [record2, ...records] : [record2, ...records].slice(0, retention));
+  }
+  /** Returns every stored mcp tool call record, newest first. */
+  async listtoolcalls() {
+    return await this.adapter.get("mcptoolcalls") ?? [];
+  }
 };
 function mediakindof(record2) {
   if ("pages" in record2) return "pdf";
@@ -4477,313 +4685,333 @@ function randomid() {
   return crypto.randomUUID();
 }
 
-// netauth.ts
-function oauthflowof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (typeof options.provider !== "string" || !options.provider.trim()) return void 0;
-  if (typeof options.authorizeurl !== "string" || !options.authorizeurl.trim()) return void 0;
-  if (typeof options.tokenurl !== "string" || !options.tokenurl.trim()) return void 0;
-  if (!Array.isArray(options.scopes) || options.scopes.length === 0 || !options.scopes.every((item) => typeof item === "string" && item.trim().length > 0)) return void 0;
-  if (typeof options.redirectorigin !== "string" || !options.redirectorigin.trim()) return void 0;
-  return { provider: options.provider.trim(), authorizeurl: options.authorizeurl.trim(), tokenurl: options.tokenurl.trim(), scopes: options.scopes.map((item) => item.trim()), redirectorigin: options.redirectorigin.trim() };
+// version.ts
+var packageversion = "1.1.54";
+
+// types.ts
+var protocolversion = packageversion;
+
+// toolcatalog.ts
+var toolcatalogversion = 1;
+var toolnamespaces = ["browser", "workflow", "memory", "system"];
+var domainkinds = {
+  browser: ["observe", "extract", "readtext", "readtable", "readlinks", "a11ytree", "tablist", "windowlist", "click", "type", "presskey", "navigate", "back", "forward", "reload", "tabcreate", "tabactivate", "tabclose", "windowcreate", "windowclose", "windowresize"],
+  workflow: ["composeworkflow", "runworkflow", "dryrun", "eventrule"],
+  memory: ["listruns", "extractvars", "trailaudit"],
+  system: ["observe", "readmeta"]
+};
+function toolschemaof(properties) {
+  return { type: "object", properties, required: Object.entries(properties).filter(([, property]) => property.required === true).map(([name]) => name) };
 }
-function authorizeurl(flow, state) {
-  const url = new URL(flow.authorizeurl);
-  url.searchParams.set("response_type", "code");
-  url.searchParams.set("redirect_uri", flow.redirectorigin);
-  url.searchParams.set("scope", flow.scopes.join(" "));
-  url.searchParams.set("state", state);
-  return url.toString();
+function readtool(name, kind, description, inputs = {}) {
+  return { name, version: toolcatalogversion, description, inputschema: toolschemaof({ target: { type: "string", description: "Reviewed css selector the tool addresses." }, value: { type: "string", description: "Reviewed literal value the tool carries." }, options: { type: "object", description: "Reviewed json options of the wrapped action kind with the empty default.", default: {} }, ...inputs }), kind, risk: "read" };
 }
-function capturecode(url, redirectorigin, state) {
-  let parsed;
-  try {
-    parsed = new URL(url);
-  } catch {
-    return { error: "The redirect url does not parse for the code capture." };
-  }
-  const granted = redirectorigin.includes("/", redirectorigin.indexOf("://") + 3) ? `${parsed.origin}${parsed.pathname}`.startsWith(redirectorigin) : parsed.origin === redirectorigin;
-  if (!granted) return { error: `The redirect landed on ${parsed.origin} outside the granted redirect origin ${redirectorigin}.` };
-  const returned = parsed.searchParams.get("state");
-  if (returned !== state) return { error: "The redirect state token does not match the reviewed flow." };
-  const error = parsed.searchParams.get("error");
-  if (error) return { error: `The provider refused the flow: ${error}.` };
-  const code = parsed.searchParams.get("code");
-  if (!code) return { error: "The redirect carries no authorization code." };
-  return { code };
+function gatedtool(name, kind, risk, description, review) {
+  return { name, version: toolcatalogversion, description, inputschema: toolschemaof({ stepid: { type: "string", description: "Id of the approved plan step this tool executes.", required: true } }), kind, risk, consentmeta: { review } };
 }
-function parsetokens(body) {
-  let parsed;
-  try {
-    parsed = JSON.parse(body);
-  } catch {
-    return void 0;
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
-  const record2 = parsed;
-  const tokens = {};
-  if (typeof record2.access_token === "string" && record2.access_token) tokens.accesstoken = record2.access_token;
-  if (typeof record2.refresh_token === "string" && record2.refresh_token) tokens.refreshtoken = record2.refresh_token;
-  if (typeof record2.expires_in === "number" && Number.isFinite(record2.expires_in) && record2.expires_in >= 0) tokens.expiresin = record2.expires_in;
-  if (typeof record2.scope === "string" && record2.scope.trim()) tokens.scopes = record2.scope.trim().split(/\s+/);
-  if (tokens.accesstoken === void 0 && tokens.refreshtoken === void 0) return void 0;
-  return tokens;
+function browserdomain() {
+  return {
+    namespace: "browser",
+    version: toolcatalogversion,
+    tools: [
+      readtool("browser.snapshot", "observe", "Captures the semantic snapshot of the active tab: url, title, text preview, forms and interactive elements. Read only with no side effects; runs under the dryrun risk class once the session is approved."),
+      readtool("browser.extract", "extract", "Extracts the reviewed structured data of the page. Read only with no side effects."),
+      readtool("browser.readtext", "readtext", "Reads the text of the addressed element. Read only with no side effects.", { target: { type: "string", description: "Reviewed css selector of the element to read.", required: true } }),
+      readtool("browser.readtable", "readtable", "Reads the rows of the addressed data table. Read only with no side effects.", { target: { type: "string", description: "Reviewed css selector of the table to read.", required: true } }),
+      readtool("browser.readlinks", "readlinks", "Reads the link inventory of the page. Read only with no side effects."),
+      readtool("browser.a11ytree", "a11ytree", "Reads the accessibility tree of the page. Read only with no side effects."),
+      readtool("browser.tablist", "tablist", "Lists the open tabs. Read only with no side effects."),
+      readtool("browser.windowlist", "windowlist", "Lists the open windows. Read only with no side effects."),
+      gatedtool("browser.click", "click", "sensitive", "Clicks the addressed element. Sensitive: it changes page state, so it executes exactly one approved plan step.", "The click runs only as the approved plan step it names; a paired client can never widen the reviewed target or options."),
+      gatedtool("browser.type", "type", "sensitive", "Types the reviewed text into the addressed element. Sensitive: it changes page state, so it executes exactly one approved plan step.", "The typing runs only as the approved plan step it names; the reviewed target, text and options stay fixed."),
+      gatedtool("browser.presskey", "presskey", "sensitive", "Presses the reviewed key. Sensitive: it changes page state, so it executes exactly one approved plan step.", "The key press runs only as the approved plan step it names."),
+      gatedtool("browser.navigate", "navigate", "sensitive", "Navigates the active tab to the reviewed url. Sensitive: it changes browser state, so it executes exactly one approved plan step.", "The navigation runs only as the approved plan step it names and stays inside the session origin grants."),
+      gatedtool("browser.back", "back", "sensitive", "Navigates back in the history of the active tab. Sensitive: it changes browser state, so it executes exactly one approved plan step.", "The history navigation runs only as the approved plan step it names."),
+      gatedtool("browser.forward", "forward", "sensitive", "Navigates forward in the history of the active tab. Sensitive: it changes browser state, so it executes exactly one approved plan step.", "The history navigation runs only as the approved plan step it names."),
+      gatedtool("browser.reload", "reload", "sensitive", "Reloads the active tab. Sensitive: it changes browser state, so it executes exactly one approved plan step.", "The reload runs only as the approved plan step it names."),
+      gatedtool("browser.tabcreate", "tabcreate", "sensitive", "Opens a new tab. Sensitive: it changes browser state, so it executes exactly one approved plan step.", "The tab creation runs only as the approved plan step it names."),
+      gatedtool("browser.tabactivate", "tabactivate", "sensitive", "Activates the reviewed tab. Sensitive: it moves focus, so it executes exactly one approved plan step.", "The tab activation runs only as the approved plan step it names."),
+      gatedtool("browser.tabclose", "tabclose", "sensitive", "Closes the reviewed tab. Sensitive: it destroys browser state, so it executes exactly one approved plan step.", "The tab close runs only as the approved plan step it names."),
+      gatedtool("browser.windowcreate", "windowcreate", "sensitive", "Opens a new window. Sensitive: it changes browser state, so it executes exactly one approved plan step.", "The window creation runs only as the approved plan step it names."),
+      gatedtool("browser.windowclose", "windowclose", "sensitive", "Closes the reviewed window. Sensitive: it destroys browser state, so it executes exactly one approved plan step.", "The window close runs only as the approved plan step it names."),
+      gatedtool("browser.windowresize", "windowresize", "sensitive", "Resizes the reviewed window. Sensitive: it changes browser state, so it executes exactly one approved plan step.", "The window resize runs only as the approved plan step it names.")
+    ]
+  };
 }
-function tokenrequest(flow, input) {
-  if (input.refreshtoken !== void 0) return { url: flow.tokenurl, body: urlencodeform([{ name: "grant_type", value: "refresh_token" }, { name: "refresh_token", value: input.refreshtoken }]) };
-  return { url: flow.tokenurl, body: urlencodeform([{ name: "grant_type", value: "authorization_code" }, { name: "code", value: input.code ?? "" }, { name: "redirect_uri", value: flow.redirectorigin }]) };
+function workflowdomain() {
+  return {
+    namespace: "workflow",
+    version: toolcatalogversion,
+    tools: [
+      readtool("workflow.list", "composeworkflow", "Lists the composed workflows with their names, versions, origins and step counts. Read only with no side effects."),
+      readtool("workflow.dryrun", "dryrun", "Runs a composed workflow as a dry run: read steps project their would be outcome and every step with side effects is refused. Read only with no side effects."),
+      gatedtool("workflow.run", "runworkflow", "sensitive", "Runs a composed workflow for real. Sensitive: it executes every step of the workflow, so it executes exactly one approved runworkflow plan step with its explicit run review.", "The workflow run needs the explicit run review: the approved runworkflow plan step with its expanded step list shown before the first step executes."),
+      gatedtool("workflow.triggers", "eventrule", "sensitive", "Lists the armed trigger rules with their schedules, cooldowns and fire counters so a client can inspect what launches runs automatically. Sensitive by its trigger family: automatic launchers stay behind the arm review class.", "The trigger listing runs behind the approved plan review because trigger rules launch runs automatically.")
+    ]
+  };
 }
-function revocationruleof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (!Array.isArray(options.tokenids) || options.tokenids.length === 0 || !options.tokenids.every((item) => typeof item === "string" && item.trim().length > 0)) return void 0;
-  if (typeof options.reason !== "string" || !options.reason.trim()) return void 0;
-  return { tokenids: options.tokenids.map((item) => item.trim()), reason: options.reason.trim(), revokedat: Date.now() };
+function memorydomain() {
+  return {
+    namespace: "memory",
+    version: toolcatalogversion,
+    tools: [
+      readtool("memory.list", "listruns", "Lists the stored workflow run records with their states and step cursors from local memory. Read only with no page access.", { target: { type: "string", description: "Unused by the memory read; kept for schema uniformity." }, value: { type: "string", description: "Unused by the memory read; kept for schema uniformity." }, state: { type: "string", description: "Optional reviewed run state filter of the listing.", default: "" } }),
+      readtool("memory.variables", "extractvars", "Reads the stored variable scopes of a run from local memory. Read only with no page access."),
+      readtool("memory.audit", "trailaudit", "Reads the audit summary of the session trail from local memory. Read only with no page access.")
+    ]
+  };
 }
-function formpayloadof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (typeof options.url !== "string" || !options.url.trim()) return void 0;
-  if (!Array.isArray(options.fields) || options.fields.length === 0) return void 0;
-  const fields = [];
-  for (const item of options.fields) {
-    if (!item || typeof item !== "object" || Array.isArray(item)) return void 0;
-    const field = item;
-    if (typeof field.name !== "string" || !field.name.trim()) return void 0;
-    if (typeof field.value !== "string") return void 0;
-    fields.push({ name: field.name.trim(), value: field.value });
-  }
-  return { url: options.url.trim(), fields };
+function systemdomain() {
+  return {
+    namespace: "system",
+    version: toolcatalogversion,
+    tools: [
+      readtool("system.status", "observe", "Reports the mcp server status, the session state and the connected clients. Read only with no side effects."),
+      readtool("system.version", "readmeta", "Reports the protocol version, the catalog version and the extension version. Read only with no side effects."),
+      readtool("system.capabilities", "observe", "Reports the optional browser capabilities the user has granted. Read only with no side effects.")
+    ]
+  };
 }
-function urlencodeform(fields) {
-  return fields.map((field) => `${formencode(field.name)}=${formencode(field.value)}`).join("&");
+function buildtoolcatalog() {
+  return { version: toolcatalogversion, domains: [browserdomain(), workflowdomain(), memorydomain(), systemdomain()] };
 }
-function formencode(value) {
-  const bytes = [...new TextEncoder().encode(value)];
-  return bytes.map((byte) => byte >= 65 && byte <= 90 || byte >= 97 && byte <= 122 || byte >= 48 && byte <= 57 || byte === 45 || byte === 95 || byte === 46 || byte === 126 ? String.fromCharCode(byte) : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`).join("");
+function alltools(catalog) {
+  return catalog.domains.flatMap((domain) => domain.tools);
 }
-function multipartpayloadof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (typeof options.url !== "string" || !options.url.trim()) return void 0;
-  if (!Array.isArray(options.files) || options.files.length === 0) return void 0;
-  const fields = [];
-  for (const item of Array.isArray(options.fields) ? options.fields : []) {
-    if (!item || typeof item !== "object" || Array.isArray(item)) return void 0;
-    const field = item;
-    if (typeof field.name !== "string" || !field.name.trim()) return void 0;
-    if (typeof field.value !== "string") return void 0;
-    fields.push({ name: field.name.trim(), value: field.value });
-  }
-  const files = [];
-  for (const item of options.files) {
-    if (!item || typeof item !== "object" || Array.isArray(item)) return void 0;
-    const file = item;
-    if (typeof file.name !== "string" || !file.name.trim()) return void 0;
-    if (typeof file.filename !== "string" || !file.filename.trim()) return void 0;
-    if (typeof file.mime !== "string" || !file.mime.trim()) return void 0;
-    if (typeof file.content !== "string") return void 0;
-    if (file.reviewed !== true) return void 0;
-    files.push({ name: file.name.trim(), filename: file.filename.trim(), mime: file.mime.trim(), content: file.content, reviewed: true });
-  }
-  const payload = { url: options.url.trim(), fields, files, ...typeof options.boundary === "string" && options.boundary.trim() ? { boundary: options.boundary.trim() } : {} };
-  return payload;
+function toolname(namespace, base) {
+  return `${namespace}.${base}`;
 }
-function newboundary() {
-  return `----devthink${Math.random().toString(16).slice(2)}${Date.now().toString(16)}`;
+function resolvetool(catalog, name) {
+  if (name.includes(".")) return alltools(catalog).find((tool) => tool.name === name);
+  const matches = alltools(catalog).filter((tool) => tool.name.split(".")[1] === name);
+  return matches.length === 1 ? matches[0] : void 0;
 }
-function multipartchunks(payload) {
-  const boundary = payload.boundary ?? newboundary();
-  const chunks = [];
-  for (const field of payload.fields) chunks.push(`--${boundary}\r
-content-disposition: form-data; name="${field.name}"\r
-\r
-${field.value}\r
-`);
-  for (const file of payload.files) chunks.push(`--${boundary}\r
-content-disposition: form-data; name="${file.name}"; filename="${file.filename}"\r
-content-type: ${file.mime}\r
-\r
-${file.content}\r
-`);
-  chunks.push(`--${boundary}--\r
-`);
-  return { chunks, boundary, bytes: chunks.reduce((total, chunk) => total + chunk.length, 0) };
+function namespaceof(name) {
+  const head = name.split(".")[0];
+  return toolnamespaces.includes(head) ? head : void 0;
 }
-
-// netcontrol.ts
-var controlkinds = ["blockrequest", "mockresponse", "rewriteheaders", "setcookies", "readcookies", "clearcookies", "authflow", "saveapikey", "routeproxy", "postform", "postfiles"];
-function patternorigin(pattern) {
-  const trimmed = pattern.trim();
-  if (!trimmed.startsWith("https://")) return void 0;
-  const rest = trimmed.slice("https://".length);
-  const host = rest.split("/")[0] ?? "";
-  if (!host.trim()) return void 0;
-  return `https://${host.toLowerCase()}`;
+function toolsbynamespace(catalog) {
+  return catalog.domains.map((domain) => ({ namespace: domain.namespace, version: domain.version, tools: domain.tools }));
 }
-function matchurlpattern(pattern, url) {
-  const origin = patternorigin(pattern);
-  if (!origin) return false;
-  let parsed;
+
+// socketbus.ts
+var socketkinds = ["opensocket", "sendmessage", "waitmessage", "subscribesse", "longpoll"];
+function channelorigin(url) {
   try {
-    parsed = new URL(url);
+    const parsed = new URL(url);
+    const protocol = parsed.protocol === "wss:" ? "https:" : parsed.protocol === "ws:" ? "http:" : parsed.protocol;
+    return `${protocol}//${parsed.host}`;
   } catch {
-    return false;
+    return "";
   }
-  if (parsed.origin !== origin) return false;
-  const patternpath = pattern.trim().slice(origin.length);
-  if (patternpath === "" || patternpath === "/") return true;
-  const segments = patternpath.split("/").filter((segment) => segment !== "");
-  if (segments.includes("**")) return true;
-  const pathsegments = parsed.pathname.split("/").filter((segment) => segment !== "");
-  if (segments.length !== pathsegments.length) return false;
-  return segments.every((segment, index) => segment === pathsegments[index] || segment.includes("*") && new RegExp(`^${segment.split("*").map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*")}$`).test(pathsegments[index] ?? ""));
 }
-function blockruleof(value) {
+function channeloptionsof(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (typeof options.urlpattern !== "string" || !options.urlpattern.trim()) return void 0;
-  const rule = { urlpattern: options.urlpattern.trim() };
-  if (Array.isArray(options.resourcetypes)) {
-    const types = options.resourcetypes.filter((item) => typeof item === "string" && item.trim().length > 0);
-    if (types.length === 0) return void 0;
-    rule.resourcetypes = types;
-  }
-  return rule;
+  const entry = value;
+  if (typeof entry.url !== "string" || !entry.url.trim()) return void 0;
+  const options = {};
+  if (Array.isArray(entry.protocols)) options.protocols = entry.protocols.filter((item) => typeof item === "string" && item.trim().length > 0);
+  if (typeof entry.reconnect === "number" && Number.isFinite(entry.reconnect)) options.reconnect = entry.reconnect;
+  if (typeof entry.backoff === "number" && Number.isFinite(entry.backoff)) options.backoff = entry.backoff;
+  if (typeof entry.backoffceiling === "number" && Number.isFinite(entry.backoffceiling)) options.backoffceiling = entry.backoffceiling;
+  if (typeof entry.lifetime === "number" && Number.isFinite(entry.lifetime)) options.lifetime = entry.lifetime;
+  return { url: entry.url.trim(), options };
 }
-function newblockrule(input) {
-  return { id: input.id, runid: input.runid, stepid: input.stepid, urlpattern: input.urlpattern, ...input.resourcetypes !== void 0 ? { resourcetypes: input.resourcetypes } : {}, hits: 0, registeredat: input.at };
+function newchannel(input) {
+  return { id: input.id, runid: input.runid, stepid: input.stepid, kind: input.kind, url: input.url, origin: channelorigin(input.url), state: "connecting", openedat: input.at, sent: 0, received: 0, reconnects: 0, ...input.protocols !== void 0 && input.protocols.length > 0 ? { protocols: [...input.protocols] } : {} };
 }
-function mockspecof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (typeof options.urlpattern !== "string" || !options.urlpattern.trim()) return void 0;
-  if (typeof options.status !== "number" || !Number.isInteger(options.status) || options.status < 100 || options.status > 599) return void 0;
-  const hasbody = typeof options.body === "string";
-  const bodyref = typeof options.bodyref === "string" ? options.bodyref.trim() : "";
-  if (!hasbody && bodyref === "") return void 0;
-  const spec = { urlpattern: options.urlpattern.trim(), status: options.status };
-  if (hasbody) spec.body = options.body;
-  if (bodyref !== "") spec.bodyref = bodyref;
-  if (options.headers && typeof options.headers === "object" && !Array.isArray(options.headers)) spec.headers = options.headers;
-  if (options.reviewed === true) spec.reviewed = true;
-  return spec;
+function reconnectwaits(attempts, base, ceiling) {
+  const count = Math.max(0, Math.floor(attempts));
+  const waits = [];
+  let wait = Math.max(0, base);
+  for (let index = 0; index < count; index += 1) {
+    waits.push(wait);
+    const next = wait * 2;
+    wait = ceiling !== void 0 && Number.isFinite(ceiling) && ceiling >= 0 ? Math.min(next, ceiling) : next;
+  }
+  return waits;
 }
-function newmockspec(input) {
-  return { id: input.id, runid: input.runid, stepid: input.stepid, urlpattern: input.urlpattern, status: input.status, ...input.headers !== void 0 ? { headers: input.headers } : {}, ...input.body !== void 0 ? { body: input.body } : {}, ...input.bodyref !== void 0 ? { bodyref: input.bodyref } : {}, reviewed: input.reviewed, hits: 0, registeredat: input.at };
+async function openchannel(input) {
+  const sleep = input.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, Math.max(0, milliseconds))));
+  const now = input.now ?? Date.now;
+  const attempts = Math.max(1, Math.floor(input.options.reconnect ?? 0) + 1);
+  const waits = reconnectwaits(attempts - 1, input.options.backoff ?? 0, input.options.backoffceiling);
+  let record2 = { ...input.record, state: "connecting" };
+  let lasterror = "";
+  for (let attempt = 0; attempt < attempts; attempt += 1) {
+    try {
+      const result = await input.connect(record2.url, record2.protocols ?? []);
+      if (result.open) return { ...record2, state: "open", openedat: now() };
+      lasterror = result.error ?? `closed with code ${result.code ?? 0}`;
+    } catch (error) {
+      lasterror = error instanceof Error ? error.message : String(error);
+    }
+    if (attempt < attempts - 1) {
+      const wait = waits[attempt] ?? 0;
+      if (wait > 0) await sleep(wait);
+      record2 = { ...record2, reconnects: record2.reconnects + 1 };
+    }
+  }
+  return { ...record2, state: "failed", error: lasterror };
 }
-function mockfor(url, specs) {
-  return specs.find((spec) => spec.revertedat === void 0 && matchurlpattern(spec.urlpattern, url));
-}
-function headeruleof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (typeof options.urlpattern !== "string" || !options.urlpattern.trim()) return void 0;
-  if (typeof options.name !== "string" || !options.name.trim()) return void 0;
-  if (options.operation !== "set" && options.operation !== "append" && options.operation !== "remove") return void 0;
-  if (options.operation === "remove" && options.value !== void 0) return void 0;
-  if (options.operation !== "remove" && typeof options.value !== "string") return void 0;
-  const rule = { urlpattern: options.urlpattern.trim(), name: options.name.trim(), operation: options.operation };
-  if (options.operation !== "remove") rule.value = typeof options.value === "string" ? options.value : "";
-  return rule;
+function closechannel(record2, at, error) {
+  const state = error !== void 0 ? "failed" : "closed";
+  return { ...record2, state, closedat: at, ...error !== void 0 ? { error } : {} };
 }
-function newheaderule(input) {
-  return { id: input.id, runid: input.runid, stepid: input.stepid, urlpattern: input.urlpattern, name: input.name, operation: input.operation, ...input.value !== void 0 ? { value: input.value } : {}, hits: 0, registeredat: input.at };
+function tagmessage(state, channelid, stream, payload, at) {
+  const sequence = (state.sequences[channelid] ?? 0) + 1;
+  const envelope = { channelid, stream, payload, sequence, at };
+  return { state: { sequences: { ...state.sequences, [channelid]: sequence }, queue: state.queue }, envelope };
 }
-function applyheaderules(url, headers, rules) {
-  const rewritten = { ...headers };
-  const applied = [];
-  for (const rule of rules) {
-    if (rule.revertedat !== void 0) continue;
-    if (!matchurlpattern(rule.urlpattern, url)) continue;
-    const name = rule.name;
-    if (rule.operation === "remove") {
-      delete rewritten[name];
-      applied.push(rule);
-      continue;
-    }
-    const value = rule.value ?? "";
-    if (rule.operation === "set") rewritten[name] = value;
-    else rewritten[name] = rewritten[name] !== void 0 ? `${rewritten[name]}, ${value}` : value;
-    applied.push(rule);
-  }
-  return { headers: rewritten, applied };
+function publishmessage(state, channelid, stream, payload, at) {
+  return tagmessage(state, channelid, stream, payload, at);
 }
-function revertrule(rule, at) {
-  if (rule.revertedat !== void 0) return rule;
-  return { ...rule, revertedat: at };
+function receivemessage(state, channelid, stream, payload, at) {
+  const tagged = tagmessage(state, channelid, stream, payload, at);
+  return { state: { ...tagged.state, queue: [...state.queue, tagged.envelope] }, envelope: tagged.envelope };
 }
-function cookierecordof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (typeof options.name !== "string" || !options.name.trim()) return void 0;
-  if (typeof options.domain !== "string" || !options.domain.trim()) return void 0;
-  if (typeof options.path !== "string" || !options.path.trim()) return void 0;
-  if (typeof options.value !== "string") return void 0;
-  const record2 = { name: options.name.trim(), domain: options.domain.trim().toLowerCase(), path: options.path.trim(), value: options.value };
-  if (typeof options.expiresat === "number" && Number.isFinite(options.expiresat)) record2.expiresat = options.expiresat;
-  return record2;
+function pathstep2(current, segment) {
+  if (Array.isArray(current) && /^\d+$/.test(segment)) return current[Number.parseInt(segment, 10)];
+  if (current && typeof current === "object" && !Array.isArray(current)) return current[segment];
+  return void 0;
 }
-function cookiedomaingranted(domain, grants) {
-  const host = domain.trim().toLowerCase().replace(/^\./, "");
-  return grants.some((grant) => {
-    let granthost = "";
+function matchmessage(filter, envelope) {
+  if (!filter) return true;
+  if (filter.stream !== void 0 && filter.stream !== envelope.stream) return false;
+  if (filter.path !== void 0) {
     try {
-      granthost = new URL(grant).hostname.toLowerCase();
+      const parsed = JSON.parse(envelope.payload);
+      let current = parsed;
+      let missing = false;
+      for (const segment of filter.path.split(".")) {
+        const next = pathstep2(current, segment);
+        if (next === void 0) {
+          missing = true;
+          break;
+        }
+        current = next;
+      }
+      if (missing) return false;
     } catch {
       return false;
     }
-    return host === granthost || host.endsWith(`.${granthost}`);
-  });
+  }
+  return true;
 }
-function redactedcookies(records) {
-  return records.map((record2) => ({ name: record2.name, domain: record2.domain, path: record2.path, ...record2.expiresat !== void 0 ? { expiresat: record2.expiresat } : {} }));
+function collectmessages(state, channelid, filter) {
+  const limit = filter?.limit !== void 0 && Number.isFinite(filter.limit) && filter.limit >= 1 ? Math.floor(filter.limit) : Number.POSITIVE_INFINITY;
+  const matched = [];
+  const queue = [];
+  for (const envelope of state.queue) {
+    if (envelope.channelid === channelid && matched.length < limit && matchmessage(filter, envelope)) matched.push(envelope);
+    else queue.push(envelope);
+  }
+  return { state: { sequences: state.sequences, queue }, matched };
 }
-function proxyrouteof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const options = value;
-  if (options.scheme !== "http" && options.scheme !== "https" && options.scheme !== "socks4" && options.scheme !== "socks5") return void 0;
-  if (typeof options.host !== "string" || !options.host.trim()) return void 0;
-  if (typeof options.port !== "number" || !Number.isInteger(options.port) || options.port < 1 || options.port > 65535) return void 0;
-  if (!Array.isArray(options.bypass) || options.bypass.length === 0 || !options.bypass.every((item) => typeof item === "string" && item.trim().length > 0)) return void 0;
-  return { scheme: options.scheme, host: options.host.trim(), port: options.port, bypass: options.bypass.map((item) => item.trim()) };
+function sequenceintegrity(envelopes) {
+  const last = /* @__PURE__ */ new Map();
+  const gaps = [];
+  for (const envelope of envelopes) {
+    const expected = (last.get(envelope.channelid) ?? 0) + 1;
+    if (envelope.sequence !== expected) gaps.push({ channelid: envelope.channelid, expected, found: envelope.sequence });
+    last.set(envelope.channelid, Math.max(envelope.sequence, expected));
+  }
+  return { ok: gaps.length === 0, gaps };
 }
-function ratelimitreadof(headers, origin, now) {
-  const pick = (name) => {
-    for (const key of Object.keys(headers)) {
-      if (key.toLowerCase() !== name) continue;
-      const value = Number(headers[key]);
-      return Number.isFinite(value) && value >= 0 ? value : void 0;
+function messagefilterof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const entry = value;
+  const filter = {};
+  if (typeof entry.stream === "string" && entry.stream.trim()) filter.stream = entry.stream.trim();
+  if (typeof entry.path === "string" && entry.path.trim()) filter.path = entry.path.trim();
+  if (typeof entry.limit === "number" && Number.isFinite(entry.limit) && entry.limit >= 1) filter.limit = Math.floor(entry.limit);
+  return filter;
+}
+function parsessetext(text2) {
+  const separator = text2.lastIndexOf("\n\n");
+  const complete = separator === -1 ? "" : text2.slice(0, separator + 2);
+  const rest = separator === -1 ? text2 : text2.slice(separator + 2);
+  const events = [];
+  for (const block of complete.split(/\n\n/)) {
+    const id = [];
+    const names = [];
+    const data = [];
+    let retry;
+    for (const line of block.split("\n")) {
+      if (line === "" || line.startsWith(":")) continue;
+      const colon = line.indexOf(":");
+      const field = colon === -1 ? line : line.slice(0, colon);
+      let value = colon === -1 ? "" : line.slice(colon + 1);
+      if (value.startsWith(" ")) value = value.slice(1);
+      if (field === "id" && value !== "") id.push(value);
+      if (field === "event" && value !== "") names.push(value);
+      if (field === "data") data.push(value);
+      if (field === "retry" && /^\d+$/.test(value)) retry = Number.parseInt(value, 10);
     }
-    return void 0;
-  };
-  const remaining = pick("x-ratelimit-remaining");
-  const limit = pick("x-ratelimit-limit");
-  const reset = pick("x-ratelimit-reset");
-  if (remaining === void 0 && limit === void 0 && reset === void 0) return void 0;
-  const read = { origin, ...remaining !== void 0 ? { remaining } : {}, ...limit !== void 0 ? { limit } : {}, resetat: now, at: now };
-  if (reset !== void 0) read.resetat = reset > Math.floor(now / 1e3) ? reset * 1e3 : now + reset * 1e3;
-  return read;
+    if (id.length === 0 && names.length === 0 && data.length === 0) continue;
+    events.push({ ...id.length > 0 ? { id: id[id.length - 1] } : {}, ...names.length > 0 ? { event: names[names.length - 1] } : {}, data: data.join("\n"), ...retry !== void 0 ? { retry } : {} });
+  }
+  return { events, rest };
 }
-function retryafterof(status, headers) {
-  if (status !== 429 && status !== 503) return void 0;
-  for (const key of Object.keys(headers)) {
-    if (key.toLowerCase() !== "retry-after") continue;
-    const raw = headers[key];
-    if (raw === void 0) continue;
-    const value = raw.trim();
-    const seconds = Number(value);
-    if (Number.isFinite(seconds) && seconds >= 0) return seconds * 1e3;
-    const date = Date.parse(value);
-    if (Number.isFinite(date)) return Math.max(0, date - Date.now());
-    return void 0;
+function sserequestheaders(record2) {
+  return { accept: "text/event-stream", ...record2.lasteventid !== void 0 && record2.lasteventid !== "" ? { "last-event-id": record2.lasteventid } : {} };
+}
+function subscriptionoptionsof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  if (typeof entry.url !== "string" || !entry.url.trim()) return void 0;
+  const cancel = entry.cancel;
+  if (!cancel || typeof cancel !== "object" || Array.isArray(cancel)) return void 0;
+  const cancelrecord = cancel;
+  if (cancelrecord.kind !== "stop" && cancelrecord.kind !== "lifetime") return void 0;
+  if (typeof cancelrecord.value !== "string" && typeof cancelrecord.value !== "number") return void 0;
+  const result = { url: entry.url.trim(), cancel: { kind: cancelrecord.kind, value: cancelrecord.value } };
+  if (typeof entry.lifetime === "number" && Number.isFinite(entry.lifetime) && entry.lifetime > 0) result.lifetime = entry.lifetime;
+  if (typeof entry.lasteventid === "string" && entry.lasteventid.trim()) result.lasteventid = entry.lasteventid.trim();
+  return result;
+}
+function pollcursorof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const entry = value;
+  if (typeof entry.url !== "string" || !entry.url.trim()) return void 0;
+  if (typeof entry.cursorfield !== "string" || !entry.cursorfield.trim()) return void 0;
+  if (typeof entry.interval !== "number" || !Number.isFinite(entry.interval) || entry.interval <= 0) return void 0;
+  const stop = entry.stop;
+  if (!stop || typeof stop !== "object" || Array.isArray(stop)) return void 0;
+  const stoprecord = stop;
+  if (typeof stoprecord.field !== "string" || !stoprecord.field.trim()) return void 0;
+  if (typeof stoprecord.equals !== "string") return void 0;
+  const cursor = { url: entry.url.trim(), cursorfield: entry.cursorfield.trim(), interval: entry.interval, stop: { field: stoprecord.field.trim(), equals: stoprecord.equals } };
+  if (typeof entry.maxpolls === "number" && Number.isFinite(entry.maxpolls) && entry.maxpolls >= 1) cursor.maxpolls = Math.floor(entry.maxpolls);
+  if (typeof entry.param === "string" && entry.param.trim()) cursor.param = entry.param.trim();
+  return cursor;
+}
+function cursorfrom(response, field) {
+  let current = response;
+  for (const segment of field.split(".")) {
+    const next = pathstep2(current, segment);
+    if (next === void 0) return void 0;
+    current = next;
   }
-  return void 0;
+  return current === void 0 || current === null ? void 0 : String(current);
 }
-function ratelimitwait(state, now) {
-  if (!state) return 0;
-  return Math.max(0, state.resetat - now);
+function pollurl(cursor, value) {
+  if (cursor.param === void 0 || value === void 0) {
+    return { url: cursor.url, ...value !== void 0 ? { body: JSON.stringify({ [cursor.cursorfield]: value }) } : {} };
+  }
+  const url = new URL(cursor.url);
+  url.searchParams.set(cursor.param, value);
+  return { url: url.toString() };
+}
+function polldecision(input) {
+  if (input.cancelled?.() === true) return { continue: false, reason: "The long poll loop was cancelled." };
+  if (input.expiresat !== void 0 && input.now >= input.expiresat) return { continue: false, reason: "The long poll loop stopped at the reviewed plan expiry." };
+  const stopvalue = cursorfrom(input.response, input.cursor.stop.field);
+  if (stopvalue !== void 0 && stopvalue === input.cursor.stop.equals) return { continue: false, reason: `The stop condition matched ${input.cursor.stop.field} ${stopvalue}.` };
+  if (input.cursor.maxpolls !== void 0 && input.polls + 1 >= input.cursor.maxpolls) return { continue: false, reason: `The long poll loop reached the reviewed poll ceiling of ${input.cursor.maxpolls}.` };
+  const value = cursorfrom(input.response, input.cursor.cursorfield);
+  const next = pollurl(input.cursor, value);
+  return { continue: true, reason: "The long poll loop continues.", ...value !== void 0 ? { cursor: value } : {}, next: { ...next, wait: input.cursor.interval } };
 }
 
 // netwatch.ts
@@ -4970,17 +5198,191 @@ function extractvalues(body, paths) {
   return fields.map((field) => ({ path: field.path, ...field.value !== void 0 ? { value: field.value } : {}, ...field.missing ? { missing: true } : {} }));
 }
 
-// trigger.ts
-var triggerkinds = ["visitrule", "urlrule", "menurule", "keyrule", "buttonrule", "cronrule", "intervalrule", "urllistrule", "webhookrule", "eventrule"];
-var triggerfamilies = ["visit", "url", "menu", "key", "button", "cron", "interval", "urllist", "webhook", "event"];
-var triggereventcatalog = ["mutate", "focus", "banner", "console", "error", "navigate"];
-var defaulttriggercooldown = 1e4;
-function istriggerkind(kind) {
-  return triggerkinds.includes(kind);
+// netcontrol.ts
+var controlkinds = ["blockrequest", "mockresponse", "rewriteheaders", "setcookies", "readcookies", "clearcookies", "authflow", "saveapikey", "routeproxy", "postform", "postfiles"];
+function patternorigin(pattern) {
+  const trimmed = pattern.trim();
+  if (!trimmed.startsWith("https://")) return void 0;
+  const rest = trimmed.slice("https://".length);
+  const host = rest.split("/")[0] ?? "";
+  if (!host.trim()) return void 0;
+  return `https://${host.toLowerCase()}`;
 }
-function triggerfamilyof(kind) {
-  const index = triggerkinds.indexOf(kind);
-  return index >= 0 ? triggerfamilies[index] : void 0;
+function matchurlpattern(pattern, url) {
+  const origin = patternorigin(pattern);
+  if (!origin) return false;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return false;
+  }
+  if (parsed.origin !== origin) return false;
+  const patternpath = pattern.trim().slice(origin.length);
+  if (patternpath === "" || patternpath === "/") return true;
+  const segments = patternpath.split("/").filter((segment) => segment !== "");
+  if (segments.includes("**")) return true;
+  const pathsegments = parsed.pathname.split("/").filter((segment) => segment !== "");
+  if (segments.length !== pathsegments.length) return false;
+  return segments.every((segment, index) => segment === pathsegments[index] || segment.includes("*") && new RegExp(`^${segment.split("*").map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*")}$`).test(pathsegments[index] ?? ""));
+}
+function blockruleof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.urlpattern !== "string" || !options.urlpattern.trim()) return void 0;
+  const rule = { urlpattern: options.urlpattern.trim() };
+  if (Array.isArray(options.resourcetypes)) {
+    const types = options.resourcetypes.filter((item) => typeof item === "string" && item.trim().length > 0);
+    if (types.length === 0) return void 0;
+    rule.resourcetypes = types;
+  }
+  return rule;
+}
+function newblockrule(input) {
+  return { id: input.id, runid: input.runid, stepid: input.stepid, urlpattern: input.urlpattern, ...input.resourcetypes !== void 0 ? { resourcetypes: input.resourcetypes } : {}, hits: 0, registeredat: input.at };
+}
+function mockspecof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.urlpattern !== "string" || !options.urlpattern.trim()) return void 0;
+  if (typeof options.status !== "number" || !Number.isInteger(options.status) || options.status < 100 || options.status > 599) return void 0;
+  const hasbody = typeof options.body === "string";
+  const bodyref = typeof options.bodyref === "string" ? options.bodyref.trim() : "";
+  if (!hasbody && bodyref === "") return void 0;
+  const spec = { urlpattern: options.urlpattern.trim(), status: options.status };
+  if (hasbody) spec.body = options.body;
+  if (bodyref !== "") spec.bodyref = bodyref;
+  if (options.headers && typeof options.headers === "object" && !Array.isArray(options.headers)) spec.headers = options.headers;
+  if (options.reviewed === true) spec.reviewed = true;
+  return spec;
+}
+function newmockspec(input) {
+  return { id: input.id, runid: input.runid, stepid: input.stepid, urlpattern: input.urlpattern, status: input.status, ...input.headers !== void 0 ? { headers: input.headers } : {}, ...input.body !== void 0 ? { body: input.body } : {}, ...input.bodyref !== void 0 ? { bodyref: input.bodyref } : {}, reviewed: input.reviewed, hits: 0, registeredat: input.at };
+}
+function mockfor(url, specs) {
+  return specs.find((spec) => spec.revertedat === void 0 && matchurlpattern(spec.urlpattern, url));
+}
+function headeruleof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.urlpattern !== "string" || !options.urlpattern.trim()) return void 0;
+  if (typeof options.name !== "string" || !options.name.trim()) return void 0;
+  if (options.operation !== "set" && options.operation !== "append" && options.operation !== "remove") return void 0;
+  if (options.operation === "remove" && options.value !== void 0) return void 0;
+  if (options.operation !== "remove" && typeof options.value !== "string") return void 0;
+  const rule = { urlpattern: options.urlpattern.trim(), name: options.name.trim(), operation: options.operation };
+  if (options.operation !== "remove") rule.value = typeof options.value === "string" ? options.value : "";
+  return rule;
+}
+function newheaderule(input) {
+  return { id: input.id, runid: input.runid, stepid: input.stepid, urlpattern: input.urlpattern, name: input.name, operation: input.operation, ...input.value !== void 0 ? { value: input.value } : {}, hits: 0, registeredat: input.at };
+}
+function applyheaderules(url, headers, rules) {
+  const rewritten = { ...headers };
+  const applied = [];
+  for (const rule of rules) {
+    if (rule.revertedat !== void 0) continue;
+    if (!matchurlpattern(rule.urlpattern, url)) continue;
+    const name = rule.name;
+    if (rule.operation === "remove") {
+      delete rewritten[name];
+      applied.push(rule);
+      continue;
+    }
+    const value = rule.value ?? "";
+    if (rule.operation === "set") rewritten[name] = value;
+    else rewritten[name] = rewritten[name] !== void 0 ? `${rewritten[name]}, ${value}` : value;
+    applied.push(rule);
+  }
+  return { headers: rewritten, applied };
+}
+function revertrule(rule, at) {
+  if (rule.revertedat !== void 0) return rule;
+  return { ...rule, revertedat: at };
+}
+function cookierecordof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.name !== "string" || !options.name.trim()) return void 0;
+  if (typeof options.domain !== "string" || !options.domain.trim()) return void 0;
+  if (typeof options.path !== "string" || !options.path.trim()) return void 0;
+  if (typeof options.value !== "string") return void 0;
+  const record2 = { name: options.name.trim(), domain: options.domain.trim().toLowerCase(), path: options.path.trim(), value: options.value };
+  if (typeof options.expiresat === "number" && Number.isFinite(options.expiresat)) record2.expiresat = options.expiresat;
+  return record2;
+}
+function cookiedomaingranted(domain, grants) {
+  const host = domain.trim().toLowerCase().replace(/^\./, "");
+  return grants.some((grant) => {
+    let granthost = "";
+    try {
+      granthost = new URL(grant).hostname.toLowerCase();
+    } catch {
+      return false;
+    }
+    return host === granthost || host.endsWith(`.${granthost}`);
+  });
+}
+function redactedcookies(records) {
+  return records.map((record2) => ({ name: record2.name, domain: record2.domain, path: record2.path, ...record2.expiresat !== void 0 ? { expiresat: record2.expiresat } : {} }));
+}
+function proxyrouteof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (options.scheme !== "http" && options.scheme !== "https" && options.scheme !== "socks4" && options.scheme !== "socks5") return void 0;
+  if (typeof options.host !== "string" || !options.host.trim()) return void 0;
+  if (typeof options.port !== "number" || !Number.isInteger(options.port) || options.port < 1 || options.port > 65535) return void 0;
+  if (!Array.isArray(options.bypass) || options.bypass.length === 0 || !options.bypass.every((item) => typeof item === "string" && item.trim().length > 0)) return void 0;
+  return { scheme: options.scheme, host: options.host.trim(), port: options.port, bypass: options.bypass.map((item) => item.trim()) };
+}
+function ratelimitreadof(headers, origin, now) {
+  const pick = (name) => {
+    for (const key of Object.keys(headers)) {
+      if (key.toLowerCase() !== name) continue;
+      const value = Number(headers[key]);
+      return Number.isFinite(value) && value >= 0 ? value : void 0;
+    }
+    return void 0;
+  };
+  const remaining = pick("x-ratelimit-remaining");
+  const limit = pick("x-ratelimit-limit");
+  const reset = pick("x-ratelimit-reset");
+  if (remaining === void 0 && limit === void 0 && reset === void 0) return void 0;
+  const read = { origin, ...remaining !== void 0 ? { remaining } : {}, ...limit !== void 0 ? { limit } : {}, resetat: now, at: now };
+  if (reset !== void 0) read.resetat = reset > Math.floor(now / 1e3) ? reset * 1e3 : now + reset * 1e3;
+  return read;
+}
+function retryafterof(status, headers) {
+  if (status !== 429 && status !== 503) return void 0;
+  for (const key of Object.keys(headers)) {
+    if (key.toLowerCase() !== "retry-after") continue;
+    const raw = headers[key];
+    if (raw === void 0) continue;
+    const value = raw.trim();
+    const seconds = Number(value);
+    if (Number.isFinite(seconds) && seconds >= 0) return seconds * 1e3;
+    const date = Date.parse(value);
+    if (Number.isFinite(date)) return Math.max(0, date - Date.now());
+    return void 0;
+  }
+  return void 0;
+}
+function ratelimitwait(state, now) {
+  if (!state) return 0;
+  return Math.max(0, state.resetat - now);
+}
+
+// trigger.ts
+var triggerkinds = ["visitrule", "urlrule", "menurule", "keyrule", "buttonrule", "cronrule", "intervalrule", "urllistrule", "webhookrule", "eventrule"];
+var triggerfamilies = ["visit", "url", "menu", "key", "button", "cron", "interval", "urllist", "webhook", "event"];
+var triggereventcatalog = ["mutate", "focus", "banner", "console", "error", "navigate"];
+var defaulttriggercooldown = 1e4;
+function istriggerkind(kind) {
+  return triggerkinds.includes(kind);
+}
+function triggerfamilyof(kind) {
+  const index = triggerkinds.indexOf(kind);
+  return index >= 0 ? triggerfamilies[index] : void 0;
 }
 function triggerlabel(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
@@ -5365,42 +5767,177 @@ function ruleoriginsgranted(rule, workfloworigins) {
   return ruleorigins(rule).every((origin) => granted.has(origin));
 }
 
-// runtimeline.ts
-var timelinekinds = ["watchconsole", "watcherrors", "watchtasks"];
-var loglevels = ["error", "warn", "info", "log", "debug", "trace"];
-var timelinesources = ["console", "error", "rejection", "resource", "longtask", "network", "cdp"];
-function levelrank(level) {
-  return loglevels.indexOf(level);
+// netauth.ts
+function oauthflowof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.provider !== "string" || !options.provider.trim()) return void 0;
+  if (typeof options.authorizeurl !== "string" || !options.authorizeurl.trim()) return void 0;
+  if (typeof options.tokenurl !== "string" || !options.tokenurl.trim()) return void 0;
+  if (!Array.isArray(options.scopes) || options.scopes.length === 0 || !options.scopes.every((item) => typeof item === "string" && item.trim().length > 0)) return void 0;
+  if (typeof options.redirectorigin !== "string" || !options.redirectorigin.trim()) return void 0;
+  return { provider: options.provider.trim(), authorizeurl: options.authorizeurl.trim(), tokenurl: options.tokenurl.trim(), scopes: options.scopes.map((item) => item.trim()), redirectorigin: options.redirectorigin.trim() };
 }
-function redactconsoletext(text2, patterns) {
-  let redacted = text2;
-  for (const pattern of patterns) {
-    if (!pattern) continue;
-    while (redacted.includes(pattern)) redacted = redacted.replace(pattern, "[redacted]");
+function authorizeurl(flow, state) {
+  const url = new URL(flow.authorizeurl);
+  url.searchParams.set("response_type", "code");
+  url.searchParams.set("redirect_uri", flow.redirectorigin);
+  url.searchParams.set("scope", flow.scopes.join(" "));
+  url.searchParams.set("state", state);
+  return url.toString();
+}
+function capturecode(url, redirectorigin, state) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return { error: "The redirect url does not parse for the code capture." };
   }
-  return redacted;
+  const granted = redirectorigin.includes("/", redirectorigin.indexOf("://") + 3) ? `${parsed.origin}${parsed.pathname}`.startsWith(redirectorigin) : parsed.origin === redirectorigin;
+  if (!granted) return { error: `The redirect landed on ${parsed.origin} outside the granted redirect origin ${redirectorigin}.` };
+  const returned = parsed.searchParams.get("state");
+  if (returned !== state) return { error: "The redirect state token does not match the reviewed flow." };
+  const error = parsed.searchParams.get("error");
+  if (error) return { error: `The provider refused the flow: ${error}.` };
+  const code = parsed.searchParams.get("code");
+  if (!code) return { error: "The redirect carries no authorization code." };
+  return { code };
 }
-function argkind(value) {
-  if (value === null) return "null";
-  if (Array.isArray(value)) return "array";
-  if (value instanceof Error) return "error";
-  switch (typeof value) {
-    case "string":
-      return "string";
-    case "number":
-      return "number";
-    case "boolean":
-      return "boolean";
-    case "bigint":
-      return "bigint";
-    case "symbol":
-      return "symbol";
-    case "function":
-      return "function";
-    case "undefined":
-      return "undefined";
-    default:
-      return "object";
+function parsetokens(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return void 0;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
+  const record2 = parsed;
+  const tokens = {};
+  if (typeof record2.access_token === "string" && record2.access_token) tokens.accesstoken = record2.access_token;
+  if (typeof record2.refresh_token === "string" && record2.refresh_token) tokens.refreshtoken = record2.refresh_token;
+  if (typeof record2.expires_in === "number" && Number.isFinite(record2.expires_in) && record2.expires_in >= 0) tokens.expiresin = record2.expires_in;
+  if (typeof record2.scope === "string" && record2.scope.trim()) tokens.scopes = record2.scope.trim().split(/\s+/);
+  if (tokens.accesstoken === void 0 && tokens.refreshtoken === void 0) return void 0;
+  return tokens;
+}
+function tokenrequest(flow, input) {
+  if (input.refreshtoken !== void 0) return { url: flow.tokenurl, body: urlencodeform([{ name: "grant_type", value: "refresh_token" }, { name: "refresh_token", value: input.refreshtoken }]) };
+  return { url: flow.tokenurl, body: urlencodeform([{ name: "grant_type", value: "authorization_code" }, { name: "code", value: input.code ?? "" }, { name: "redirect_uri", value: flow.redirectorigin }]) };
+}
+function revocationruleof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (!Array.isArray(options.tokenids) || options.tokenids.length === 0 || !options.tokenids.every((item) => typeof item === "string" && item.trim().length > 0)) return void 0;
+  if (typeof options.reason !== "string" || !options.reason.trim()) return void 0;
+  return { tokenids: options.tokenids.map((item) => item.trim()), reason: options.reason.trim(), revokedat: Date.now() };
+}
+function formpayloadof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.url !== "string" || !options.url.trim()) return void 0;
+  if (!Array.isArray(options.fields) || options.fields.length === 0) return void 0;
+  const fields = [];
+  for (const item of options.fields) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return void 0;
+    const field = item;
+    if (typeof field.name !== "string" || !field.name.trim()) return void 0;
+    if (typeof field.value !== "string") return void 0;
+    fields.push({ name: field.name.trim(), value: field.value });
+  }
+  return { url: options.url.trim(), fields };
+}
+function urlencodeform(fields) {
+  return fields.map((field) => `${formencode(field.name)}=${formencode(field.value)}`).join("&");
+}
+function formencode(value) {
+  const bytes = [...new TextEncoder().encode(value)];
+  return bytes.map((byte) => byte >= 65 && byte <= 90 || byte >= 97 && byte <= 122 || byte >= 48 && byte <= 57 || byte === 45 || byte === 95 || byte === 46 || byte === 126 ? String.fromCharCode(byte) : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`).join("");
+}
+function multipartpayloadof(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const options = value;
+  if (typeof options.url !== "string" || !options.url.trim()) return void 0;
+  if (!Array.isArray(options.files) || options.files.length === 0) return void 0;
+  const fields = [];
+  for (const item of Array.isArray(options.fields) ? options.fields : []) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return void 0;
+    const field = item;
+    if (typeof field.name !== "string" || !field.name.trim()) return void 0;
+    if (typeof field.value !== "string") return void 0;
+    fields.push({ name: field.name.trim(), value: field.value });
+  }
+  const files = [];
+  for (const item of options.files) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return void 0;
+    const file = item;
+    if (typeof file.name !== "string" || !file.name.trim()) return void 0;
+    if (typeof file.filename !== "string" || !file.filename.trim()) return void 0;
+    if (typeof file.mime !== "string" || !file.mime.trim()) return void 0;
+    if (typeof file.content !== "string") return void 0;
+    if (file.reviewed !== true) return void 0;
+    files.push({ name: file.name.trim(), filename: file.filename.trim(), mime: file.mime.trim(), content: file.content, reviewed: true });
+  }
+  const payload = { url: options.url.trim(), fields, files, ...typeof options.boundary === "string" && options.boundary.trim() ? { boundary: options.boundary.trim() } : {} };
+  return payload;
+}
+function newboundary() {
+  return `----devthink${Math.random().toString(16).slice(2)}${Date.now().toString(16)}`;
+}
+function multipartchunks(payload) {
+  const boundary = payload.boundary ?? newboundary();
+  const chunks = [];
+  for (const field of payload.fields) chunks.push(`--${boundary}\r
+content-disposition: form-data; name="${field.name}"\r
+\r
+${field.value}\r
+`);
+  for (const file of payload.files) chunks.push(`--${boundary}\r
+content-disposition: form-data; name="${file.name}"; filename="${file.filename}"\r
+content-type: ${file.mime}\r
+\r
+${file.content}\r
+`);
+  chunks.push(`--${boundary}--\r
+`);
+  return { chunks, boundary, bytes: chunks.reduce((total, chunk) => total + chunk.length, 0) };
+}
+
+// runtimeline.ts
+var timelinekinds = ["watchconsole", "watcherrors", "watchtasks"];
+var loglevels = ["error", "warn", "info", "log", "debug", "trace"];
+var timelinesources = ["console", "error", "rejection", "resource", "longtask", "network", "cdp"];
+function levelrank(level) {
+  return loglevels.indexOf(level);
+}
+function redactconsoletext(text2, patterns) {
+  let redacted = text2;
+  for (const pattern of patterns) {
+    if (!pattern) continue;
+    while (redacted.includes(pattern)) redacted = redacted.replace(pattern, "[redacted]");
+  }
+  return redacted;
+}
+function argkind(value) {
+  if (value === null) return "null";
+  if (Array.isArray(value)) return "array";
+  if (value instanceof Error) return "error";
+  switch (typeof value) {
+    case "string":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "bigint":
+      return "bigint";
+    case "symbol":
+      return "symbol";
+    case "function":
+      return "function";
+    case "undefined":
+      return "undefined";
+    default:
+      return "object";
   }
 }
 function serializearg(value, depth) {
@@ -5498,286 +6035,66 @@ function timelinecounts(entries) {
   for (const entry of entries) counts[entry.level] = (counts[entry.level] ?? 0) + 1;
   return counts;
 }
-function blockingduration(tasks, stepid, window) {
-  const inside = tasks.filter((task) => task.starttime >= window.startedat && task.starttime <= window.endedat);
-  return { stepid, blocking: inside.reduce((total, task) => total + task.duration, 0), tasks: inside.length };
-}
-function netfailureentryof(input) {
-  const exchange = input.exchange;
-  if (exchange.errorclass === void 0 && exchange.status < 400) return null;
-  return { id: input.id, runid: exchange.runid, stepid: exchange.stepid, url: exchange.url, status: exchange.status, errorclass: exchange.errorclass ?? "httperror", correlationid: exchange.correlationid, at: input.at };
-}
-function watcherdetached(input) {
-  for (const navigation of input.navigations) {
-    if (navigation >= input.startedat && navigation <= input.startedat + input.lifetime) return { detached: true, at: navigation };
-  }
-  return { detached: false };
-}
-function consolediff(input) {
-  const base = input.baselines;
-  const target = input.targetlines;
-  const basemap = /* @__PURE__ */ new Map();
-  for (const line of base) basemap.set(line, (basemap.get(line) ?? 0) + 1);
-  const targetmap = /* @__PURE__ */ new Map();
-  for (const line of target) targetmap.set(line, (targetmap.get(line) ?? 0) + 1);
-  const lines = [];
-  const added = [];
-  const removed = [];
-  const repeated = [];
-  for (const [line, count] of targetmap) {
-    const basecount = basemap.get(line) ?? 0;
-    if (basecount === 0) {
-      for (let index = 0; index < count; index += 1) {
-        lines.push({ kind: "added", text: line });
-        added.push(line);
-      }
-      continue;
-    }
-    const share = Math.min(basecount, count);
-    for (let index = 0; index < share; index += 1) {
-      lines.push({ kind: "repeated", text: line, count: share });
-      repeated.push(line);
-    }
-    for (let index = share; index < count; index += 1) {
-      lines.push({ kind: "added", text: line });
-      added.push(line);
-    }
-  }
-  for (const [line, count] of basemap) {
-    const targetcount = targetmap.get(line) ?? 0;
-    const missing = Math.max(0, count - targetcount);
-    for (let index = 0; index < missing; index += 1) {
-      lines.push({ kind: "removed", text: line });
-      removed.push(line);
-    }
-  }
-  return { base: input.baseid, target: input.targetid, lines, added: added.length, removed: removed.length, repeated: repeated.length, at: input.now };
-}
-
-// socketbus.ts
-var socketkinds = ["opensocket", "sendmessage", "waitmessage", "subscribesse", "longpoll"];
-function channelorigin(url) {
-  try {
-    const parsed = new URL(url);
-    const protocol = parsed.protocol === "wss:" ? "https:" : parsed.protocol === "ws:" ? "http:" : parsed.protocol;
-    return `${protocol}//${parsed.host}`;
-  } catch {
-    return "";
-  }
-}
-function channeloptionsof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const entry = value;
-  if (typeof entry.url !== "string" || !entry.url.trim()) return void 0;
-  const options = {};
-  if (Array.isArray(entry.protocols)) options.protocols = entry.protocols.filter((item) => typeof item === "string" && item.trim().length > 0);
-  if (typeof entry.reconnect === "number" && Number.isFinite(entry.reconnect)) options.reconnect = entry.reconnect;
-  if (typeof entry.backoff === "number" && Number.isFinite(entry.backoff)) options.backoff = entry.backoff;
-  if (typeof entry.backoffceiling === "number" && Number.isFinite(entry.backoffceiling)) options.backoffceiling = entry.backoffceiling;
-  if (typeof entry.lifetime === "number" && Number.isFinite(entry.lifetime)) options.lifetime = entry.lifetime;
-  return { url: entry.url.trim(), options };
-}
-function newchannel(input) {
-  return { id: input.id, runid: input.runid, stepid: input.stepid, kind: input.kind, url: input.url, origin: channelorigin(input.url), state: "connecting", openedat: input.at, sent: 0, received: 0, reconnects: 0, ...input.protocols !== void 0 && input.protocols.length > 0 ? { protocols: [...input.protocols] } : {} };
-}
-function reconnectwaits(attempts, base, ceiling) {
-  const count = Math.max(0, Math.floor(attempts));
-  const waits = [];
-  let wait = Math.max(0, base);
-  for (let index = 0; index < count; index += 1) {
-    waits.push(wait);
-    const next = wait * 2;
-    wait = ceiling !== void 0 && Number.isFinite(ceiling) && ceiling >= 0 ? Math.min(next, ceiling) : next;
-  }
-  return waits;
-}
-async function openchannel(input) {
-  const sleep = input.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, Math.max(0, milliseconds))));
-  const now = input.now ?? Date.now;
-  const attempts = Math.max(1, Math.floor(input.options.reconnect ?? 0) + 1);
-  const waits = reconnectwaits(attempts - 1, input.options.backoff ?? 0, input.options.backoffceiling);
-  let record2 = { ...input.record, state: "connecting" };
-  let lasterror = "";
-  for (let attempt = 0; attempt < attempts; attempt += 1) {
-    try {
-      const result = await input.connect(record2.url, record2.protocols ?? []);
-      if (result.open) return { ...record2, state: "open", openedat: now() };
-      lasterror = result.error ?? `closed with code ${result.code ?? 0}`;
-    } catch (error) {
-      lasterror = error instanceof Error ? error.message : String(error);
-    }
-    if (attempt < attempts - 1) {
-      const wait = waits[attempt] ?? 0;
-      if (wait > 0) await sleep(wait);
-      record2 = { ...record2, reconnects: record2.reconnects + 1 };
-    }
-  }
-  return { ...record2, state: "failed", error: lasterror };
-}
-function closechannel(record2, at, error) {
-  const state = error !== void 0 ? "failed" : "closed";
-  return { ...record2, state, closedat: at, ...error !== void 0 ? { error } : {} };
-}
-function tagmessage(state, channelid, stream, payload, at) {
-  const sequence = (state.sequences[channelid] ?? 0) + 1;
-  const envelope = { channelid, stream, payload, sequence, at };
-  return { state: { sequences: { ...state.sequences, [channelid]: sequence }, queue: state.queue }, envelope };
-}
-function publishmessage(state, channelid, stream, payload, at) {
-  return tagmessage(state, channelid, stream, payload, at);
-}
-function receivemessage(state, channelid, stream, payload, at) {
-  const tagged = tagmessage(state, channelid, stream, payload, at);
-  return { state: { ...tagged.state, queue: [...state.queue, tagged.envelope] }, envelope: tagged.envelope };
-}
-function pathstep2(current, segment) {
-  if (Array.isArray(current) && /^\d+$/.test(segment)) return current[Number.parseInt(segment, 10)];
-  if (current && typeof current === "object" && !Array.isArray(current)) return current[segment];
-  return void 0;
-}
-function matchmessage(filter, envelope) {
-  if (!filter) return true;
-  if (filter.stream !== void 0 && filter.stream !== envelope.stream) return false;
-  if (filter.path !== void 0) {
-    try {
-      const parsed = JSON.parse(envelope.payload);
-      let current = parsed;
-      let missing = false;
-      for (const segment of filter.path.split(".")) {
-        const next = pathstep2(current, segment);
-        if (next === void 0) {
-          missing = true;
-          break;
-        }
-        current = next;
-      }
-      if (missing) return false;
-    } catch {
-      return false;
-    }
-  }
-  return true;
-}
-function collectmessages(state, channelid, filter) {
-  const limit = filter?.limit !== void 0 && Number.isFinite(filter.limit) && filter.limit >= 1 ? Math.floor(filter.limit) : Number.POSITIVE_INFINITY;
-  const matched = [];
-  const queue = [];
-  for (const envelope of state.queue) {
-    if (envelope.channelid === channelid && matched.length < limit && matchmessage(filter, envelope)) matched.push(envelope);
-    else queue.push(envelope);
-  }
-  return { state: { sequences: state.sequences, queue }, matched };
-}
-function sequenceintegrity(envelopes) {
-  const last = /* @__PURE__ */ new Map();
-  const gaps = [];
-  for (const envelope of envelopes) {
-    const expected = (last.get(envelope.channelid) ?? 0) + 1;
-    if (envelope.sequence !== expected) gaps.push({ channelid: envelope.channelid, expected, found: envelope.sequence });
-    last.set(envelope.channelid, Math.max(envelope.sequence, expected));
-  }
-  return { ok: gaps.length === 0, gaps };
-}
-function messagefilterof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
-  const entry = value;
-  const filter = {};
-  if (typeof entry.stream === "string" && entry.stream.trim()) filter.stream = entry.stream.trim();
-  if (typeof entry.path === "string" && entry.path.trim()) filter.path = entry.path.trim();
-  if (typeof entry.limit === "number" && Number.isFinite(entry.limit) && entry.limit >= 1) filter.limit = Math.floor(entry.limit);
-  return filter;
-}
-function parsessetext(text2) {
-  const separator = text2.lastIndexOf("\n\n");
-  const complete = separator === -1 ? "" : text2.slice(0, separator + 2);
-  const rest = separator === -1 ? text2 : text2.slice(separator + 2);
-  const events = [];
-  for (const block of complete.split(/\n\n/)) {
-    const id = [];
-    const names = [];
-    const data = [];
-    let retry;
-    for (const line of block.split("\n")) {
-      if (line === "" || line.startsWith(":")) continue;
-      const colon = line.indexOf(":");
-      const field = colon === -1 ? line : line.slice(0, colon);
-      let value = colon === -1 ? "" : line.slice(colon + 1);
-      if (value.startsWith(" ")) value = value.slice(1);
-      if (field === "id" && value !== "") id.push(value);
-      if (field === "event" && value !== "") names.push(value);
-      if (field === "data") data.push(value);
-      if (field === "retry" && /^\d+$/.test(value)) retry = Number.parseInt(value, 10);
-    }
-    if (id.length === 0 && names.length === 0 && data.length === 0) continue;
-    events.push({ ...id.length > 0 ? { id: id[id.length - 1] } : {}, ...names.length > 0 ? { event: names[names.length - 1] } : {}, data: data.join("\n"), ...retry !== void 0 ? { retry } : {} });
-  }
-  return { events, rest };
-}
-function sserequestheaders(record2) {
-  return { accept: "text/event-stream", ...record2.lasteventid !== void 0 && record2.lasteventid !== "" ? { "last-event-id": record2.lasteventid } : {} };
-}
-function subscriptionoptionsof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const entry = value;
-  if (typeof entry.url !== "string" || !entry.url.trim()) return void 0;
-  const cancel = entry.cancel;
-  if (!cancel || typeof cancel !== "object" || Array.isArray(cancel)) return void 0;
-  const cancelrecord = cancel;
-  if (cancelrecord.kind !== "stop" && cancelrecord.kind !== "lifetime") return void 0;
-  if (typeof cancelrecord.value !== "string" && typeof cancelrecord.value !== "number") return void 0;
-  const result = { url: entry.url.trim(), cancel: { kind: cancelrecord.kind, value: cancelrecord.value } };
-  if (typeof entry.lifetime === "number" && Number.isFinite(entry.lifetime) && entry.lifetime > 0) result.lifetime = entry.lifetime;
-  if (typeof entry.lasteventid === "string" && entry.lasteventid.trim()) result.lasteventid = entry.lasteventid.trim();
-  return result;
-}
-function pollcursorof(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const entry = value;
-  if (typeof entry.url !== "string" || !entry.url.trim()) return void 0;
-  if (typeof entry.cursorfield !== "string" || !entry.cursorfield.trim()) return void 0;
-  if (typeof entry.interval !== "number" || !Number.isFinite(entry.interval) || entry.interval <= 0) return void 0;
-  const stop = entry.stop;
-  if (!stop || typeof stop !== "object" || Array.isArray(stop)) return void 0;
-  const stoprecord = stop;
-  if (typeof stoprecord.field !== "string" || !stoprecord.field.trim()) return void 0;
-  if (typeof stoprecord.equals !== "string") return void 0;
-  const cursor = { url: entry.url.trim(), cursorfield: entry.cursorfield.trim(), interval: entry.interval, stop: { field: stoprecord.field.trim(), equals: stoprecord.equals } };
-  if (typeof entry.maxpolls === "number" && Number.isFinite(entry.maxpolls) && entry.maxpolls >= 1) cursor.maxpolls = Math.floor(entry.maxpolls);
-  if (typeof entry.param === "string" && entry.param.trim()) cursor.param = entry.param.trim();
-  return cursor;
-}
-function cursorfrom(response, field) {
-  let current = response;
-  for (const segment of field.split(".")) {
-    const next = pathstep2(current, segment);
-    if (next === void 0) return void 0;
-    current = next;
-  }
-  return current === void 0 || current === null ? void 0 : String(current);
+function blockingduration(tasks, stepid, window) {
+  const inside = tasks.filter((task) => task.starttime >= window.startedat && task.starttime <= window.endedat);
+  return { stepid, blocking: inside.reduce((total, task) => total + task.duration, 0), tasks: inside.length };
 }
-function pollurl(cursor, value) {
-  if (cursor.param === void 0 || value === void 0) {
-    return { url: cursor.url, ...value !== void 0 ? { body: JSON.stringify({ [cursor.cursorfield]: value }) } : {} };
+function netfailureentryof(input) {
+  const exchange = input.exchange;
+  if (exchange.errorclass === void 0 && exchange.status < 400) return null;
+  return { id: input.id, runid: exchange.runid, stepid: exchange.stepid, url: exchange.url, status: exchange.status, errorclass: exchange.errorclass ?? "httperror", correlationid: exchange.correlationid, at: input.at };
+}
+function watcherdetached(input) {
+  for (const navigation of input.navigations) {
+    if (navigation >= input.startedat && navigation <= input.startedat + input.lifetime) return { detached: true, at: navigation };
   }
-  const url = new URL(cursor.url);
-  url.searchParams.set(cursor.param, value);
-  return { url: url.toString() };
+  return { detached: false };
 }
-function polldecision(input) {
-  if (input.cancelled?.() === true) return { continue: false, reason: "The long poll loop was cancelled." };
-  if (input.expiresat !== void 0 && input.now >= input.expiresat) return { continue: false, reason: "The long poll loop stopped at the reviewed plan expiry." };
-  const stopvalue = cursorfrom(input.response, input.cursor.stop.field);
-  if (stopvalue !== void 0 && stopvalue === input.cursor.stop.equals) return { continue: false, reason: `The stop condition matched ${input.cursor.stop.field} ${stopvalue}.` };
-  if (input.cursor.maxpolls !== void 0 && input.polls + 1 >= input.cursor.maxpolls) return { continue: false, reason: `The long poll loop reached the reviewed poll ceiling of ${input.cursor.maxpolls}.` };
-  const value = cursorfrom(input.response, input.cursor.cursorfield);
-  const next = pollurl(input.cursor, value);
-  return { continue: true, reason: "The long poll loop continues.", ...value !== void 0 ? { cursor: value } : {}, next: { ...next, wait: input.cursor.interval } };
+function consolediff(input) {
+  const base = input.baselines;
+  const target = input.targetlines;
+  const basemap = /* @__PURE__ */ new Map();
+  for (const line of base) basemap.set(line, (basemap.get(line) ?? 0) + 1);
+  const targetmap = /* @__PURE__ */ new Map();
+  for (const line of target) targetmap.set(line, (targetmap.get(line) ?? 0) + 1);
+  const lines = [];
+  const added = [];
+  const removed = [];
+  const repeated = [];
+  for (const [line, count] of targetmap) {
+    const basecount = basemap.get(line) ?? 0;
+    if (basecount === 0) {
+      for (let index = 0; index < count; index += 1) {
+        lines.push({ kind: "added", text: line });
+        added.push(line);
+      }
+      continue;
+    }
+    const share = Math.min(basecount, count);
+    for (let index = 0; index < share; index += 1) {
+      lines.push({ kind: "repeated", text: line, count: share });
+      repeated.push(line);
+    }
+    for (let index = share; index < count; index += 1) {
+      lines.push({ kind: "added", text: line });
+      added.push(line);
+    }
+  }
+  for (const [line, count] of basemap) {
+    const targetcount = targetmap.get(line) ?? 0;
+    const missing = Math.max(0, count - targetcount);
+    for (let index = 0; index < missing; index += 1) {
+      lines.push({ kind: "removed", text: line });
+      removed.push(line);
+    }
+  }
+  return { base: input.baseid, target: input.targetid, lines, added: added.length, removed: removed.length, repeated: repeated.length, at: input.now };
 }
 
 // policy.ts
 var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword", "exportcsv", "exportjson", "exportexcel", "copytable", "pushsheets", "streamdisk", "paginateextract", "resumeextract", "batchdownload", "pausedownload", "resumedownload", "interceptmime", "readclipboard", "writeclipboard", "copyscreen", "quarantinedownload", "scanvirus", "cleanupartifacts", "recordscreen", "captureaudio", "downloadimages", "callrest", "callgraphql", "sendmessage", "blockrequest", "mockresponse", "rewriteheaders", "setcookies", "clearcookies", "authflow", "saveapikey", "routeproxy", "postform", "postfiles", "attachcdp", "detachcdp", "cdpcmd", "overridescript", "heapshot", "profilecpu", "capturesourcemaps", "emulatedevice", "emulatenetwork", "emulatelocate", "setuseragent", "overridepermission", "restoresession", "exportsessions", "importsessions", "runworkflow", "visitrule", "urlrule", "menurule", "keyrule", "buttonrule", "cronrule", "intervalrule", "urllistrule", "webhookrule", "eventrule"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction", "capturebodies", "setbreakpoint", "stepcode", "watchexpr", "loop", "repeatuntil", "whileloop", "foreach", "parallel", "trycatch"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet", "capturepdf", "captureframe", "readmedia", "readassets", "probestream", "timelapse", "shotcanvas", "convertimage", "makethumbs", "fetchurl", "parsejson", "parsehtml", "opensocket", "waitmessage", "watchrequests", "readheaders", "mapapi", "subscribesse", "longpoll", "extractapi", "readcookies", "watchconsole", "watcherrors", "watchtasks", "watchcdp", "measureflow", "trackmemory", "watchshifts", "traceload", "annotatetrace", "replaytrace", "blackboxscripts", "persiststate", "capturesession", "namedsessions", "diffsessions", "searchsessions", "composeworkflow", "savetemplate", "dryrun", "delay", "waitelement", "compute", "extractvars", "condition", "branch"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha", "scrapetable", "importcsv", "looprows", "transformvalues", "deduperows", "mergepages", "stamplerows", "previewgrid", "logprovenance", "verifydownload", "exportnetlog", "namecaptures", "shotview", "shotfullpage", "shotelement", "shotregion", "contactsheet", "capturepdf", "captureframe", "readmedia", "readassets", "probestream", "timelapse", "shotcanvas", "convertimage", "makethumbs", "fetchurl", "parsejson", "parsehtml", "opensocket", "waitmessage", "watchrequests", "readheaders", "mapapi", "subscribesse", "longpoll", "extractapi", "readcookies", "watchconsole", "watcherrors", "watchtasks", "watchcdp", "measureflow", "trackmemory", "watchshifts", "traceload", "annotatetrace", "replaytrace", "blackboxscripts", "persiststate", "capturesession", "namedsessions", "diffsessions", "searchsessions", "composeworkflow", "savetemplate", "dryrun", "delay", "waitelement", "compute", "extractvars", "listruns", "condition", "branch"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
 var watchactions = /* @__PURE__ */ new Set(["watchmutate", "watchbanner", "watchfocus", "watchtab"]);
 var targetactions = /* @__PURE__ */ new Set(["inspect", "focus", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword", "scrapetable", "paginateextract", "shotelement", "captureframe", "shotcanvas"]);
@@ -8450,12 +8767,375 @@ function canexecute(input) {
   }
   return validatestep(input.step, input.origin);
 }
+function reviewedkinds() {
+  return [...allowedactions].sort();
+}
+function editorsavegate(input) {
+  const gate = sessiongate({ session: input.session, tabid: input.session?.tabid ?? 0, origin: input.session?.origin ?? "https://example.com", now: input.now, action: "save the workflow editor canvas" });
+  if (!gate.allowed) return gate;
+  if (!input.plan || input.plan.state !== "approved") return { allowed: false, reason: "Editor saves need the approved plan review before a new workflow version composes." };
+  const model = input.model;
+  if (typeof model.name !== "string" || !model.name.trim()) return { allowed: false, reason: "The workflow name of the canvas must be a non-empty string." };
+  if (typeof model.version !== "number" || !Number.isInteger(model.version) || model.version < 1) return { allowed: false, reason: "The workflow version of the canvas must be a positive integer." };
+  if (!Array.isArray(model.origins) || model.origins.length === 0) return { allowed: false, reason: "The canvas needs at least one granted HTTPS origin." };
+  const ids = /* @__PURE__ */ new Set();
+  for (const node of model.nodes) {
+    if (node.step === void 0 === (node.invocation === void 0)) return { allowed: false, reason: "Every canvas node must be exactly one workflow step or one block invocation." };
+    const id = node.id ?? (node.step !== void 0 ? node.step.id : node.invocation.block);
+    if (!id || ids.has(id)) return { allowed: false, reason: `The canvas node id ${id || "(empty)"} must be unique.` };
+    ids.add(id);
+  }
+  const reachable = /* @__PURE__ */ new Set();
+  for (const node of model.nodes) {
+    if (node.step !== void 0) {
+      reachable.add(node.step.id);
+      continue;
+    }
+    const walk = (entries) => {
+      for (const entry of entries) {
+        if (typeof entry.id === "string" && typeof entry.kind === "string") {
+          reachable.add(entry.id);
+          continue;
+        }
+        if (typeof entry.block === "string") {
+          const nested = model.blocks.find((candidate) => candidate.name === entry.block);
+          if (nested) walk(nested.steps);
+        }
+      }
+    };
+    const block = model.blocks.find((candidate) => candidate.name === node.invocation.block);
+    if (!block) return { allowed: false, reason: `The block ${node.invocation.block} of the canvas has no definition.` };
+    walk(block.steps);
+  }
+  let order = 0;
+  const positionof = /* @__PURE__ */ new Map();
+  for (const node of model.nodes) {
+    if (node.step !== void 0) {
+      positionof.set(node.step.id, order);
+      order += 1;
+      continue;
+    }
+    const walk = (entries) => {
+      for (const entry of entries) {
+        if (typeof entry.id === "string" && typeof entry.kind === "string") {
+          positionof.set(entry.id, order);
+          order += 1;
+          continue;
+        }
+        if (typeof entry.block === "string") {
+          const nested = model.blocks.find((candidate) => candidate.name === entry.block);
+          if (nested) walk(nested.steps);
+        }
+      }
+    };
+    walk(model.blocks.find((candidate) => candidate.name === node.invocation.block).steps);
+  }
+  for (const edge of model.edges) {
+    if (!reachable.has(edge.from)) return { allowed: false, reason: `The canvas edge of ${edge.variable} references the unknown source step ${edge.from}.` };
+    if (!reachable.has(edge.to)) return { allowed: false, reason: `The canvas edge of ${edge.variable} references the unknown target step ${edge.to}.` };
+    if ((positionof.get(edge.from) ?? -1) >= (positionof.get(edge.to) ?? -1)) return { allowed: false, reason: `The canvas edge of ${edge.variable} runs backwards and would form a cycle.` };
+  }
+  return { allowed: true };
+}
+function runreviewgranted(record2) {
+  if (record2.reviewstate === "pending") return { allowed: false, reason: "The workflow stays unreviewed: the import or rollback review must approve its expanded step list before any run." };
+  return { allowed: true };
+}
+var overrideknobs = ["loopbound", "stepms", "runms", "waitms", "delaybase"];
+function validatesiteoverride(override) {
+  if (typeof override.pattern !== "string" || !override.pattern.startsWith("https://") || !/[a-z0-9.-]+/i.test(override.pattern.slice(8))) return { allowed: false, reason: "The override pattern must be an https origin or a `*` subdomain glob of one." };
+  if (!override.pattern.includes("*")) {
+    try {
+      if (new URL(override.pattern).origin !== override.pattern) return { allowed: false, reason: "The override pattern must be a bare https origin or a `*` subdomain glob, never a path." };
+    } catch {
+      return { allowed: false, reason: "The override pattern must parse as an https origin or a `*` subdomain glob of one." };
+    }
+  }
+  for (const [knob, delta] of Object.entries(override.deltas)) {
+    if (!overrideknobs.includes(knob)) return { allowed: false, reason: `The override knob ${knob} is not one of the reviewed knobs: ${overrideknobs.join(", ")}.` };
+    if (typeof delta !== "number" || !Number.isFinite(delta) || delta <= 0) return { allowed: false, reason: `The override delta of ${knob} must be a positive user value with no code ceiling.` };
+  }
+  return { allowed: true };
+}
+function exportcontentreview(file) {
+  const secretkeys = /(secret|token|apikey|api_key|password|authorization|credential)/i;
+  const scan = (label, options) => {
+    if (options === void 0) return void 0;
+    let payload;
+    try {
+      payload = JSON.parse(options);
+    } catch {
+      return void 0;
+    }
+    const walk = (value, path) => {
+      if (!value || typeof value !== "object") return void 0;
+      for (const [key, entry] of Object.entries(value)) {
+        if (secretkeys.test(key)) return { allowed: false, reason: `The export of ${label} carries the secret field ${path}${key} and secrets never leave the browser.` };
+        const nested = walk(entry, `${path}${key}.`);
+        if (nested !== void 0) return nested;
+      }
+      return void 0;
+    };
+    return walk(payload, "");
+  };
+  for (const step of file.workflow.steps) {
+    const refusal = scan(`the step ${step.id}`, step.options);
+    if (refusal !== void 0) return refusal;
+  }
+  for (const template of file.templates) {
+    const refusal = scan(`the template ${template.name}`, template.step.options);
+    if (refusal !== void 0) return refusal;
+  }
+  return { allowed: true };
+}
+function watchdogconfigvalid(config) {
+  if (typeof config.enabled !== "boolean") return { allowed: false, reason: "The watchdog enabled flag must be a boolean." };
+  if (typeof config.stallthreshold !== "number" || !Number.isFinite(config.stallthreshold) || config.stallthreshold <= 0) return { allowed: false, reason: "The watchdog stall threshold must be a positive number of milliseconds with no code ceiling." };
+  if (!["retry", "pause", "cancel"].includes(config.action)) return { allowed: false, reason: "The watchdog recovery action must be retry, pause or cancel." };
+  if (config.zombiewindow !== void 0 && (typeof config.zombiewindow !== "number" || !Number.isFinite(config.zombiewindow) || config.zombiewindow <= 0)) return { allowed: false, reason: "The watchdog zombie window, when configured, must be a positive number of milliseconds with no code ceiling." };
+  return { allowed: true };
+}
+function validatetoolcatalog(catalog) {
+  if (!Array.isArray(catalog.domains) || catalog.domains.length === 0) return { allowed: false, reason: "The tool catalog needs its tool domains." };
+  const seen = /* @__PURE__ */ new Set();
+  for (const domain of catalog.domains) {
+    if (!toolnamespaces.includes(domain.namespace)) return { allowed: false, reason: `The tool domain ${String(domain.namespace)} is not a reviewed namespace.` };
+    if (!Array.isArray(domain.tools) || domain.tools.length === 0) return { allowed: false, reason: `The ${domain.namespace} domain exposes no tools.` };
+    for (const tool of domain.tools) {
+      if (typeof tool.name !== "string" || !tool.name.startsWith(`${domain.namespace}.`)) return { allowed: false, reason: `The tool ${String(tool.name)} does not carry its ${domain.namespace} namespace prefix.` };
+      if (seen.has(tool.name)) return { allowed: false, reason: `The tool name ${tool.name} is not unique across the catalog.` };
+      seen.add(tool.name);
+      if (!allowedactions.has(tool.kind)) return { allowed: false, reason: `The tool ${tool.name} wraps ${String(tool.kind)} which is outside the reviewed action kind grammar.` };
+      if (!domainkinds[domain.namespace].includes(tool.kind)) return { allowed: false, reason: `The tool ${tool.name} wraps ${String(tool.kind)} which does not belong to the ${domain.namespace} domain.` };
+      if (typeof tool.description !== "string" || tool.description.trim() === "") return { allowed: false, reason: `The tool ${tool.name} needs its plain language description.` };
+      const schema = tool.inputschema;
+      if (!schema || schema.type !== "object" || schema.properties === void 0 || schema.properties === null || typeof schema.properties !== "object" || Array.isArray(schema.properties) || Object.keys(schema.properties).length === 0) return { allowed: false, reason: `The tool ${tool.name} needs its json schema inputs of at least one typed property.` };
+      for (const [name, property] of Object.entries(schema.properties)) {
+        if (!["string", "number", "boolean", "object", "array"].includes(property.type)) return { allowed: false, reason: `The ${tool.name} input ${name} carries an untyped property.` };
+        if (typeof property.description !== "string" || property.description.trim() === "") return { allowed: false, reason: `The ${tool.name} input ${name} needs its plain language description.` };
+      }
+      for (const name of schema.required) {
+        if (!(name in schema.properties)) return { allowed: false, reason: `The tool ${tool.name} marks ${name} required outside its properties.` };
+      }
+    }
+  }
+  return { allowed: true };
+}
+function toolriskgrade(tool) {
+  const grade = actionrisk(tool.kind);
+  if (grade !== tool.risk) return { allowed: false, reason: `The tool ${tool.name} declares the ${tool.risk} grade while its kind ${String(tool.kind)} grades ${grade}.` };
+  return { allowed: true };
+}
+function toolconsentrequired(tool) {
+  if (tool.risk === "read") return { allowed: true };
+  if (tool.consentmeta === void 0 || typeof tool.consentmeta.review !== "string" || tool.consentmeta.review.trim() === "") return { allowed: false, reason: `The tool ${tool.name} has side effects and needs its consent metadata with the review requirement.` };
+  return { allowed: true };
+}
+function serverbindgate(config) {
+  const bind = config.bind !== void 0 && config.bind.trim() !== "" ? config.bind.trim() : "127.0.0.1";
+  const local = bind === "127.0.0.1" || bind === "localhost" || bind === "::1";
+  if (!local && config.remote !== true) return { allowed: false, reason: `The bind ${bind} leaves localhost and grades sensitive: the explicit remote review must approve it first.` };
+  return { allowed: true };
+}
+function toolversionfloor(tool, floor) {
+  if (typeof floor === "number" && Number.isFinite(floor) && tool.version < floor) return { allowed: false, reason: `The tool ${tool.name} of version ${tool.version} stays below the negotiated compatibility floor of ${floor}.` };
+  return { allowed: true };
+}
+function serverenablementgate(config) {
+  if (config.enabled !== true) return { allowed: false, reason: "The mcp server starts only after the user enables it; the protocol surface stays closed by default." };
+  const bind = serverbindgate(config);
+  if (!bind.allowed) return bind;
+  if (!Array.isArray(config.transports) || config.transports.length === 0) return { allowed: false, reason: "The mcp server needs at least one allowed transport of stdio or http." };
+  if (!config.transports.every((transport) => transport === "stdio" || transport === "http")) return { allowed: false, reason: "The allowed transports of the mcp server are stdio and http." };
+  if (typeof config.port !== "number" || !Number.isFinite(config.port) || config.port <= 0 || config.port > 65535) return { allowed: false, reason: "The http listener port must be a valid port number." };
+  if (config.framesize !== void 0 && (typeof config.framesize !== "number" || !Number.isFinite(config.framesize) || config.framesize <= 0)) return { allowed: false, reason: "The user configured frame size must stay a positive number with no code ceiling." };
+  if (config.queuedepth !== void 0 && (typeof config.queuedepth !== "number" || !Number.isFinite(config.queuedepth) || config.queuedepth <= 0)) return { allowed: false, reason: "The user configured queue depth must stay a positive number with no code ceiling." };
+  return { allowed: true };
+}
+function toolnamespacegate(tool) {
+  const namespace = tool.name.split(".")[0];
+  if (!toolnamespaces.includes(namespace)) return { allowed: false, reason: `The tool ${tool.name} carries no reviewed namespace prefix.` };
+  if (!domainkinds[namespace].includes(tool.kind)) return { allowed: false, reason: `The tool ${tool.name} wraps ${String(tool.kind)} which does not belong to the ${namespace} domain.` };
+  return { allowed: true };
+}
+function tooldispatchgate(input) {
+  if (input.client.disconnectedat !== void 0) return { allowed: false, reason: "The mcp client is disconnected and its tool calls are refused." };
+  if (!input.client.paired) return { allowed: false, reason: "The mcp client waits for the user pairing approval; unpaired clients never dispatch tools." };
+  if (!input.session || input.session.stoppedat || input.session.pausedat) return { allowed: false, reason: "Tool dispatch needs the live browser session behind the consent gates." };
+  if (input.session.expiresat <= input.now) return { allowed: false, reason: "The browser session has expired and tool dispatch is refused." };
+  if (!input.plan || input.plan.state !== "approved") return { allowed: false, reason: "Tool dispatch needs the approved plan review before any tool runs." };
+  if (!origingranted(input.session, input.origin)) return { allowed: false, reason: `The tool call origin ${input.origin} stays outside the session grants and is refused.` };
+  if (input.tool.risk === "read") return { allowed: true };
+  if (input.stepid === void 0 || input.stepid.trim() === "") return { allowed: false, reason: `The ${input.tool.name} tool has side effects and needs the id of the approved plan step it executes.` };
+  const step = input.plan.steps.find((candidate) => candidate.id === input.stepid);
+  if (step === void 0) return { allowed: false, reason: `The tool call names the step ${input.stepid} which the approved plan does not carry.` };
+  if (step.kind !== input.tool.kind) return { allowed: false, reason: `The tool call names the step ${input.stepid} whose kind ${String(step.kind)} does not match the ${input.tool.name} tool.` };
+  return { allowed: true };
+}
 
-// version.ts
-var packageversion = "1.1.52";
-
-// types.ts
-var protocolversion = packageversion;
+// mcpserver.ts
+var localhostbind = "127.0.0.1";
+var defaultmcpport = 7436;
+var rpcerrornumbers = { parse: -32700, method: -32601, params: -32602, internal: -32603, consentrefused: -32001 };
+function rpcerrorof(code, message, data) {
+  return { code, message, ...data !== void 0 ? { data } : {} };
+}
+function rpcerrorcodeof(number) {
+  const entry = Object.entries(rpcerrornumbers).find(([, value]) => value === number);
+  return entry?.[0];
+}
+function defaultmcpconfig() {
+  return { port: defaultmcpport, transports: ["stdio", "http"], enabled: false };
+}
+function unwraphttppost(value) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    const candidate = value;
+    if (candidate.transport === "http" && candidate.frame && typeof candidate.frame === "object" && !Array.isArray(candidate.frame)) return candidate.frame;
+  }
+  return value;
+}
+function parseframe(raw) {
+  const parsed = unwraphttppost(JSON.parse(raw));
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("A json rpc frame must be an object.");
+  return parsed;
+}
+function parsewire(raw) {
+  return raw.split("\n").map((line) => line.trim()).filter((line) => line.length > 0).map((line) => parseframe(line));
+}
+function serializeframe(frame) {
+  return JSON.stringify(frame);
+}
+function wireformat(frame, format) {
+  return format === "newline" ? `${serializeframe(frame)}
+` : JSON.stringify({ transport: "http", frame });
+}
+function validateframe(frame, methods, config) {
+  if (frame.jsonrpc !== "2.0") return rpcerrorof("parse", "The frame must carry the jsonrpc 2.0 tag.");
+  if (frame.id !== void 0 && typeof frame.id !== "number" && typeof frame.id !== "string" && frame.id !== null) return rpcerrorof("parse", "The frame id must be a number, a string or null.");
+  if (frame.method === void 0 || frame.method.trim() === "") return rpcerrorof("method", "The frame carries no method to route.");
+  if (!methods.some((entry) => entry.method === frame.method)) return rpcerrorof("method", `The server routes no method named ${frame.method}.`);
+  if (frame.params !== void 0 && (typeof frame.params !== "object" || Array.isArray(frame.params))) return rpcerrorof("params", "The frame params must be an object.");
+  if (config?.framesize !== void 0 && serializeframe(frame).length > config.framesize) return rpcerrorof("params", `The serialized frame exceeds the user configured frame size of ${config.framesize} characters.`);
+  return void 0;
+}
+function respond(input) {
+  return { jsonrpc: "2.0", ...input.id === void 0 ? input.error !== void 0 ? { id: null } : {} : { id: input.id }, ...input.error !== void 0 ? { error: input.error } : { result: input.result } };
+}
+function servermethods() {
+  return [
+    { method: "initialize", handler: "initialize", description: "Completes the mcp handshake and returns the server info." },
+    { method: "ping", handler: "ping", description: "Answers keepalive frames with pong." },
+    { method: "tools/list", handler: "listtools", description: "Returns every tool with its version and json schema inputs." },
+    { method: "negotiate", handler: "negotiate", description: "Exchanges capability sets with the client." },
+    { method: "tools/call", handler: "dispatch", description: "Invokes one tool behind the consent gates." }
+  ];
+}
+function servercapabilities(input) {
+  return { protocolversion, name: "devthink", version: protocolversion, toolversion: input.catalog.version, tools: alltools(input.catalog).length, namespaces: toolnamespaces, transports: input.config.transports };
+}
+function initialize(input) {
+  void input.params;
+  return { serverinfo: servercapabilities({ config: input.config, catalog: input.catalog }), protocolversion, instructions: "Devthink serves browser tools behind the human review gates: read only tools run once a session is approved while every tool with side effects executes exactly the approved plan step it names. No endpoint, provider or key is hardcoded; the user pairs every client." };
+}
+function ping(input) {
+  return { pong: true, at: input.now };
+}
+function listtools(catalog) {
+  return { tools: alltools(catalog).map((tool) => ({ name: tool.name, version: tool.version, description: tool.description, inputschema: tool.inputschema, risk: tool.risk, ...tool.consentmeta !== void 0 ? { consentmeta: tool.consentmeta.review } : {} })) };
+}
+function negotiate(input) {
+  const client = input.client;
+  if (client?.protocolversion !== void 0 && client.protocolversion !== input.server.protocolversion) return { agreed: false, mismatch: `The client speaks protocol version ${String(client.protocolversion)} while the server offers ${input.server.protocolversion}.` };
+  if (client?.toolversion !== void 0 && client.toolversion > input.server.toolversion) return { agreed: false, mismatch: `The client requires tool version ${String(client.toolversion)} while the server offers ${String(input.server.toolversion)}.` };
+  if (client?.transports !== void 0 && client.transports.some((transport) => !input.server.transports.includes(transport))) return { agreed: false, mismatch: "The client requires a transport the server configuration does not allow." };
+  return { agreed: true, capabilities: input.server };
+}
+function connectclient(input) {
+  return { id: input.id ?? `client-${input.now}`, transport: input.transport, paired: false, connectedat: input.now };
+}
+function pairclient(clients, id, approved, now) {
+  return clients.map((client) => client.id !== id || client.disconnectedat !== void 0 ? client : approved ? { ...client, paired: true, pairedat: now } : { ...client, paired: false, disconnectedat: now });
+}
+function disconnectclient(clients, id, now) {
+  return clients.map((client) => client.id === id && client.disconnectedat === void 0 ? { ...client, disconnectedat: now } : client);
+}
+function enqueuerequest(input) {
+  if (input.depth !== void 0 && input.queue.length + 1 > input.depth) return void 0;
+  return [...input.queue, input.frame];
+}
+function nextrequest(queue) {
+  return queue.length === 0 ? void 0 : { frame: queue[0], remaining: queue.slice(1) };
+}
+async function dispatchtool(input) {
+  const params = input.params;
+  if (!params || typeof params !== "object" || Array.isArray(params)) return { error: rpcerrorof("params", "The tool call needs its params object.") };
+  if (typeof params.name !== "string" || !params.name.trim()) return { error: rpcerrorof("params", "The tool call needs the namespaced name of the tool it invokes.") };
+  const tool = resolvetool(input.catalog, params.name.trim());
+  if (tool === void 0) return { error: rpcerrorof("params", `The catalog holds no unambiguous tool named ${params.name.trim()}.`) };
+  const floor = input.client.capabilities?.toolversion ?? input.catalog.version;
+  if (tool.version < floor) return { error: rpcerrorof("params", `The tool ${tool.name} of version ${tool.version} stays below the negotiated compatibility floor of ${floor}.`) };
+  const stepid = typeof params.stepid === "string" ? params.stepid : void 0;
+  const gate = tooldispatchgate({ client: input.client, tool, session: input.session, plan: input.plan, origin: input.origin, ...stepid !== void 0 ? { stepid } : {}, now: input.now });
+  if (!gate.allowed) return { error: rpcerrorof("consentrefused", gate.reason ?? "The consent gates refused the tool call.") };
+  const step = tool.risk === "read" ? { id: `mcp-${input.client.id}-${input.now}`, kind: tool.kind, summary: tool.description.split(".")[0] ?? tool.description, risk: "read", ...typeof params.target === "string" ? { target: params.target } : {}, ...typeof params.value === "string" ? { value: params.value } : {}, ...params.options !== void 0 && typeof params.options === "object" && !Array.isArray(params.options) ? { options: JSON.stringify(params.options) } : {} } : input.plan?.steps.find((candidate) => candidate.id === stepid);
+  if (step === void 0) return { error: rpcerrorof("consentrefused", "The tool call names a step the approved plan does not carry.") };
+  try {
+    const result = await input.execute(step);
+    return { result, step };
+  } catch (error) {
+    return { error: rpcerrorof("internal", error instanceof Error ? error.message : String(error)) };
+  }
+}
+async function handleframe(input) {
+  if (input.raw !== void 0 && input.config.framesize !== void 0 && input.raw.length > input.config.framesize) return respond({ id: null, error: rpcerrorof("params", `The wire frame exceeds the user configured frame size of ${input.config.framesize} characters.`) });
+  let frame;
+  if (input.raw !== void 0) {
+    try {
+      frame = parseframe(input.raw);
+    } catch {
+      return respond({ id: null, error: rpcerrorof("parse", "The wire frame does not parse as json.") });
+    }
+  } else if (input.frame !== void 0) {
+    frame = input.frame;
+  } else {
+    return respond({ id: null, error: rpcerrorof("parse", "The server received no frame to route.") });
+  }
+  const invalid = validateframe(frame, servermethods(), input.config);
+  if (invalid !== void 0) return respond({ ...frame.id !== void 0 ? { id: frame.id } : {}, error: invalid });
+  const entry = servermethods().find((candidate) => candidate.method === frame.method);
+  if (entry === void 0) return respond({ ...frame.id !== void 0 ? { id: frame.id } : {}, error: rpcerrorof("method", `The server routes no method named ${String(frame.method)}.`) });
+  const params = frame.params;
+  if (entry.handler === "initialize") return respond({ ...frame.id !== void 0 ? { id: frame.id } : {}, result: initialize({ ...params !== void 0 ? { params } : {}, config: input.config, catalog: input.catalog }) });
+  if (entry.handler === "ping") return respond({ ...frame.id !== void 0 ? { id: frame.id } : {}, result: ping({ now: input.now }) });
+  if (entry.handler === "listtools") return respond({ ...frame.id !== void 0 ? { id: frame.id } : {}, result: listtools(input.catalog) });
+  if (entry.handler === "negotiate") {
+    const server = servercapabilities({ config: input.config, catalog: input.catalog });
+    const clientcaps = params?.capabilities && typeof params.capabilities === "object" && !Array.isArray(params.capabilities) ? params.capabilities : void 0;
+    const outcome = negotiate({ ...clientcaps !== void 0 ? { client: clientcaps } : {}, server });
+    return respond({ ...frame.id !== void 0 ? { id: frame.id } : {}, ...outcome.agreed ? { result: outcome.capabilities } : { error: rpcerrorof("params", outcome.mismatch ?? "The capability negotiation did not agree.") } });
+  }
+  const dispatched = await dispatchtool({ ...params !== void 0 ? { params } : {}, client: input.client, catalog: input.catalog, ...input.session !== void 0 ? { session: input.session } : {}, ...input.plan !== void 0 ? { plan: input.plan } : {}, origin: input.origin, now: input.now, execute: input.execute });
+  return respond({ ...frame.id !== void 0 ? { id: frame.id } : {}, ...dispatched.error !== void 0 ? { error: dispatched.error } : { result: dispatched.result } });
+}
+function bindlocalhost(config) {
+  const bind = config.bind !== void 0 && config.bind.trim() !== "" ? config.bind.trim() : localhostbind;
+  return { bind, port: config.port, localhost: bind === localhostbind || bind === "localhost" || bind === "::1" };
+}
+function launchbridge(input) {
+  return { id: input.id ?? `bridge-${input.now}`, host: input.host, connected: true, ...input.pid !== void 0 ? { pid: input.pid } : {}, startedat: input.now, restarts: 0, received: 0, sent: 0 };
+}
+function relayframe(input) {
+  return { ...input.bridge, connected: true, received: input.bridge.received + (input.direction === "inbound" ? 1 : 0), sent: input.bridge.sent + (input.direction === "outbound" ? 1 : 0), lastframeat: input.now };
+}
+function restartbridge(input) {
+  return { ...input.bridge, connected: true, pid: input.pid, restarts: input.bridge.restarts + 1, startedat: input.now };
+}
+function framedlog(event, at, fields) {
+  return JSON.stringify({ at, event, ...fields ?? {} });
+}
+function toolcallevent(input) {
+  return { id: input.id, clientid: input.clientid, tool: input.tool, origin: input.origin, ok: input.ok, ...input.code !== void 0 ? { code: input.code } : {}, at: input.now };
+}
 
 // protocol.ts
 function record(value) {
@@ -8852,7 +9532,7 @@ function requestbody(input) {
   return JSON.stringify({ version: protocolversion, objective: input.objective, session: input.session, observation: input.observation, capabilities: input.capabilities });
 }
 function outcomeresponse(input) {
-  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {}, ...input.media ? { media: input.media } : {}, ...input.transport ? { transport: input.transport } : {}, ...input.network ? { network: input.network } : {}, ...input.control ? { control: input.control } : {}, ...input.timeline ? { timeline: input.timeline } : {}, ...input.cdp ? { cdp: input.cdp } : {}, ...input.profile ? { profile: input.profile } : {}, ...input.emulation ? { emulation: input.emulation } : {}, ...input.session ? { session: input.session } : {}, ...input.workflow ? { workflow: { runid: input.workflow.runid, state: input.workflow.state, ...input.workflow.dryrun === true ? { dryrun: true } : {}, produced: input.workflow.produced, consumed: input.workflow.consumed, ...input.workflow.timeout !== void 0 ? { timeout: input.workflow.timeout } : {}, ...input.workflow.retry !== void 0 ? { retry: input.workflow.retry } : {} } } : {}, ...input.trigger ? { trigger: { ruleid: input.trigger.ruleid, kind: input.trigger.kind, enabled: input.trigger.enabled, ...input.trigger.nextfireat !== void 0 ? { nextfireat: input.trigger.nextfireat } : {} } } : {} });
+  return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, outcome: input.outcome, ...input.resolvedtarget ? { resolvedtarget: input.resolvedtarget } : {}, ...input.capture ? { capture: input.capture } : {}, ...input.media ? { media: input.media } : {}, ...input.transport ? { transport: input.transport } : {}, ...input.network ? { network: input.network } : {}, ...input.control ? { control: input.control } : {}, ...input.timeline ? { timeline: input.timeline } : {}, ...input.cdp ? { cdp: input.cdp } : {}, ...input.profile ? { profile: input.profile } : {}, ...input.emulation ? { emulation: input.emulation } : {}, ...input.session ? { session: input.session } : {}, ...input.workflow ? { workflow: { runid: input.workflow.runid, state: input.workflow.state, ...input.workflow.dryrun === true ? { dryrun: true } : {}, produced: input.workflow.produced, consumed: input.workflow.consumed, ...input.workflow.timeout !== void 0 ? { timeout: input.workflow.timeout } : {}, ...input.workflow.retry !== void 0 ? { retry: input.workflow.retry } : {} } } : {}, ...input.trigger ? { trigger: { ruleid: input.trigger.ruleid, kind: input.trigger.kind, enabled: input.trigger.enabled, ...input.trigger.nextfireat !== void 0 ? { nextfireat: input.trigger.nextfireat } : {} } } : {}, ...input.tool ? { tool: { clientid: input.tool.clientid, tool: input.tool.tool, origin: input.tool.origin, ok: input.tool.ok, ...input.tool.code !== void 0 ? { code: input.tool.code } : {} } } : {} });
 }
 function mapresponse(input) {
   return JSON.stringify({ version: protocolversion, planid: input.plan.id, planstate: input.plan.state, map: input.map });
@@ -9049,11 +9729,754 @@ function triggerfired(input) {
 function manualrunpreview(input) {
   return { version: protocolversion, manualrun: input.preview, ...input.workflowname !== void 0 ? { workflowname: input.workflowname } : {} };
 }
+function toolcallframe(input) {
+  return { jsonrpc: "2.0", id: input.id, method: "tools/call", params: { ...input.params ?? {}, name: input.name } };
+}
+function toolresultframe(input) {
+  return { jsonrpc: "2.0", id: input.id, ...input.error !== void 0 ? { error: input.error } : { result: input.result } };
+}
+var workflowfileversion = 1;
+function editorstate(input) {
+  const editor = { versions: input.versions, diffs: input.diffs ?? [], history: input.history, breakpoints: input.breakpoints ?? [], overrides: input.overrides, imports: input.imports, backgroundruns: input.backgroundruns ?? {}, watchdog: { ...input.watchdog.config !== void 0 ? { config: input.watchdog.config } : {}, events: input.watchdog.events } };
+  return { version: protocolversion, editor, ...input.model !== void 0 ? { model: input.model } : {} };
+}
+function runhistoryquery(value) {
+  if (value === void 0 || value === null) return {};
+  const candidate = record(value);
+  const query = {};
+  if (candidate.workflowid !== void 0) {
+    if (typeof candidate.workflowid !== "string" || !candidate.workflowid.trim()) throw new Error("The run history workflow filter must be a non-empty string.");
+    query.workflowid = candidate.workflowid;
+  }
+  if (candidate.outcome !== void 0) {
+    if (typeof candidate.outcome !== "string" || !candidate.outcome.trim()) throw new Error("The run history outcome filter must be a non-empty string.");
+    query.outcome = candidate.outcome;
+  }
+  if (candidate.since !== void 0) {
+    if (typeof candidate.since !== "number" || !Number.isFinite(candidate.since)) throw new Error("The run history time floor must be a finite timestamp.");
+    query.since = candidate.since;
+  }
+  if (candidate.limit !== void 0) {
+    if (typeof candidate.limit !== "number" || !Number.isInteger(candidate.limit) || candidate.limit < 1) throw new Error("The run history entry count must be a positive integer with no code ceiling.");
+    query.limit = candidate.limit;
+  }
+  return query;
+}
+function runhistoryreport(input) {
+  return { version: protocolversion, entries: input.entries, query: input.query ?? {} };
+}
+
+// workfloweditor.ts
+var palettecategories = ["actions", "controlflow", "waits", "variables", "triggers"];
+var palettenodes = [
+  { kind: "click", label: "Click an element", category: "actions", description: "Clicks the reviewed selector target." },
+  { kind: "type", label: "Type text", category: "actions", description: "Types the reviewed text into the target field." },
+  { kind: "navigate", label: "Navigate", category: "actions", description: "Navigates the tab to the reviewed url." },
+  { kind: "readtext", label: "Read text", category: "actions", description: "Reads the text of the target element." },
+  { kind: "scrapetable", label: "Scrape a table", category: "actions", description: "Extracts the reviewed table into a dataset." },
+  { kind: "fillform", label: "Fill a form", category: "actions", description: "Fills the reviewed form fields from a saved profile." },
+  { kind: "querytabs", label: "Query tabs", category: "actions", description: "Lists the tabs matching the reviewed query." },
+  { kind: "fetchurl", label: "Fetch a url", category: "actions", description: "Fetches the reviewed endpoint behind the call consent." },
+  { kind: "condition", label: "Condition", category: "controlflow", description: "Evaluates one reviewed boolean expression with no page side effect." },
+  { kind: "branch", label: "Branch", category: "controlflow", description: "Chooses one reviewed path by page state with a mandatory else path." },
+  { kind: "loop", label: "Loop a list", category: "controlflow", description: "Iterates a list variable binding the item and index per pass." },
+  { kind: "repeatuntil", label: "Repeat until", category: "controlflow", description: "Reruns the body until the convergence expression holds." },
+  { kind: "whileloop", label: "While loop", category: "controlflow", description: "Loops while the condition holds inside the reviewed bound." },
+  { kind: "foreach", label: "For each element", category: "controlflow", description: "Iterates the elements of the reviewed selector." },
+  { kind: "parallel", label: "Parallel branches", category: "controlflow", description: "Runs branches concurrently and joins them under the reviewed strategy." },
+  { kind: "trycatch", label: "Try catch", category: "controlflow", description: "Wraps fragile steps with a catch handler, retries and timeouts." },
+  { kind: "delay", label: "Delay", category: "waits", description: "Sleeps the reviewed base inside the jitter window." },
+  { kind: "waitelement", label: "Wait for element", category: "waits", description: "Polls the reviewed selector until appearance or timeout." },
+  { kind: "wait", label: "Wait", category: "waits", description: "Waits the reviewed duration." },
+  { kind: "waitfor", label: "Wait for target", category: "waits", description: "Waits until the reviewed target exists." },
+  { kind: "waittext", label: "Wait for text", category: "waits", description: "Waits until the reviewed text appears." },
+  { kind: "waitquiet", label: "Wait for quiet", category: "waits", description: "Waits until the page stops mutating." },
+  { kind: "waitload", label: "Wait for load", category: "waits", description: "Waits until the navigation settles." },
+  { kind: "compute", label: "Compute", category: "variables", description: "Evaluates one reviewed expression into the result variable." },
+  { kind: "extractvars", label: "Extract variables", category: "variables", description: "Applies the reviewed regex and stores the named captures." },
+  { kind: "savetemplate", label: "Save template", category: "variables", description: "Shares the reviewed step as a reusable template." },
+  { kind: "visitrule", label: "Visit rule", category: "triggers", description: "Fires on navigations to the reviewed origins." },
+  { kind: "urlrule", label: "Url rule", category: "triggers", description: "Fires when the url matches the reviewed glob pattern." },
+  { kind: "cronrule", label: "Cron rule", category: "triggers", description: "Fires on the reviewed five field cron schedule." },
+  { kind: "intervalrule", label: "Interval rule", category: "triggers", description: "Fires every reviewed period with the jitter spread." },
+  { kind: "webhookrule", label: "Webhook rule", category: "triggers", description: "Fires on a secret verified webhook delivery." },
+  { kind: "eventrule", label: "Event rule", category: "triggers", description: "Fires on the observed page events of the catalog." }
+];
+var optionschemas = {
+  delay: [{ name: "base", kind: "number", required: true }, { name: "jitter", kind: "number" }],
+  waitelement: [{ name: "timeout", kind: "number" }, { name: "poll", kind: "number" }],
+  compute: [{ name: "expression", kind: "string", required: true }],
+  extractvars: [{ name: "rule", kind: "string", required: true }],
+  composeworkflow: [{ name: "name", kind: "string", required: true }, { name: "version", kind: "number" }],
+  runworkflow: [{ name: "workflowid", kind: "string", required: true }, { name: "reviewed", kind: "boolean", required: true }, { name: "variables", kind: "string" }, { name: "background", kind: "boolean" }],
+  dryrun: [{ name: "workflowid", kind: "string", required: true }],
+  loop: [{ name: "loop", kind: "string", required: true }],
+  repeatuntil: [{ name: "repeatuntil", kind: "string", required: true }],
+  whileloop: [{ name: "whileloop", kind: "string", required: true }],
+  foreach: [{ name: "foreach", kind: "string", required: true }],
+  parallel: [{ name: "parallel", kind: "string", required: true }],
+  trycatch: [{ name: "trycatch", kind: "string", required: true }]
+};
+function stepcategory(kind) {
+  if (triggerkinds.includes(kind)) return "triggers";
+  if (controlflowkinds.includes(kind)) return "controlflow";
+  if (kind.startsWith("wait") || kind === "spawait" || kind === "delay") return "waits";
+  if (kind === "compute" || kind === "extractvars" || kind === "savetemplate") return "variables";
+  return "actions";
+}
+function buildsteplibrary(kinds) {
+  return [...new Set(kinds)].sort().map((kind) => ({ kind, category: stepcategory(kind), optionschema: optionschemas[kind] ?? [] }));
+}
+var noderowheight = 96;
+var blockcolumnwidth = 280;
+var canvasoriginx = 40;
+function snapshotof(model) {
+  const { undo, redo, dirty, ...rest } = model;
+  void undo;
+  void redo;
+  void dirty;
+  return { ...rest, dirty: true };
+}
+function withundo(model, next) {
+  const undo = [...model.undo ?? [], snapshotof(model)];
+  const { redo, ...rest } = next;
+  void redo;
+  return { ...rest, dirty: true, undo };
+}
+function nodeidof(node) {
+  return node.id ?? (node.step !== void 0 ? node.step.id : node.invocation !== void 0 ? node.invocation.block : "");
+}
+function layoutsizeof(nodes) {
+  const width = Math.max(640, ...nodes.map((node) => node.x + blockcolumnwidth)) + 40;
+  const height = Math.max(480, ...nodes.map((node) => node.y + noderowheight)) + 40;
+  return { width, height };
+}
+function loadworkflow(record2, layout) {
+  const blocks = record2.blocks.map((block) => ({ ...block, steps: block.steps.map((entry) => ({ ...entry })) }));
+  const blockcolumn = (blockname) => {
+    const index2 = blocks.findIndex((block) => block.name === blockname);
+    return index2 < 0 ? canvasoriginx : canvasoriginx + (index2 + 1) * blockcolumnwidth;
+  };
+  const invocationcount = /* @__PURE__ */ new Map();
+  const nodes = [];
+  const edges = [];
+  let index = 0;
+  while (index < record2.steps.length) {
+    const step = record2.steps[index];
+    for (const binding of step.bindings ?? []) edges.push({ from: binding.stepid, to: step.id, variable: binding.variable, kind: binding.kind, ...binding.path !== void 0 ? { path: binding.path } : {} });
+    if (step.block === void 0) {
+      const { bindings, block, params: params2, ...rest } = step;
+      void bindings;
+      void block;
+      void params2;
+      nodes.push({ step: { ...rest }, x: canvasoriginx, y: 60 + nodes.length * noderowheight });
+      index += 1;
+      continue;
+    }
+    const blockname = step.block;
+    let end = index;
+    while (end < record2.steps.length && record2.steps[end].block === blockname) end += 1;
+    const region = record2.steps.slice(index, end);
+    const count = (invocationcount.get(blockname) ?? 0) + 1;
+    invocationcount.set(blockname, count);
+    const params = region.flatMap((entry) => entry.params ?? []);
+    nodes.push({ id: count === 1 ? blockname : `${blockname}${count}`, invocation: { block: blockname, label: blockname, ...params.length > 0 ? { params: params.map((param) => ({ ...param })) } : {} }, x: blockcolumn(blockname), y: 60 + nodes.length * noderowheight });
+    index = end;
+  }
+  const size = layouttypeof(nodes, layout);
+  const model = { workflowid: record2.id, name: record2.name, version: record2.version, origins: [...record2.origins], nodes, edges, blocks, layout: size, minimap: emptyminimap(), dirty: false };
+  return { ...model, minimap: renderminimap(model).minimap };
+}
+function layouttypeof(nodes, layout) {
+  const size = layoutsizeof(nodes);
+  if (!layout) return { width: size.width, height: size.height, viewportx: 0, viewporty: 0, zoom: 1 };
+  return { width: Math.max(size.width, layout.width), height: Math.max(size.height, layout.height), viewportx: layout.viewportx, viewporty: layout.viewporty, zoom: layout.zoom };
+}
+function emptyminimap() {
+  return { width: 160, height: 100, scale: 0, zoom: 1, viewport: { x: 0, y: 0, width: 0, height: 0 } };
+}
+function saveworkflow(model, input) {
+  if (typeof model.name !== "string" || !model.name.trim()) throw new Error("The workflow name must be a non-empty string.");
+  if (typeof model.version !== "number" || !Number.isInteger(model.version) || model.version < 1) throw new Error("The workflow version must be a positive integer.");
+  if (!Array.isArray(model.origins) || model.origins.length === 0) throw new Error("A workflow needs at least one granted HTTPS origin.");
+  const ids = /* @__PURE__ */ new Set();
+  for (const node of model.nodes) {
+    if (node.step === void 0 === (node.invocation === void 0)) throw new Error("Every canvas node must be exactly one workflow step or one block invocation.");
+    const id = nodeidof(node);
+    if (!id || ids.has(id)) throw new Error(`The canvas node id ${id || "(empty)"} must be unique.`);
+    ids.add(id);
+  }
+  const positionof = /* @__PURE__ */ new Map();
+  let position = 0;
+  for (const node of model.nodes) {
+    if (node.step !== void 0) {
+      positionof.set(node.step.id, position);
+      position += 1;
+      continue;
+    }
+    const block = model.blocks.find((entry) => entry.name === node.invocation?.block);
+    if (!block) throw new Error(`The block ${node.invocation?.block ?? ""} of the canvas has no definition.`);
+    const walk = (entries2) => {
+      for (const entry of entries2) {
+        if ("kind" in entry && "label" in entry && !("block" in entry)) {
+          positionof.set(entry.id, position);
+          position += 1;
+          continue;
+        }
+        const nested = model.blocks.find((candidate) => candidate.name === entry.block);
+        if (!nested) throw new Error(`The block ${entry.block} of the canvas has no definition.`);
+        walk(nested.steps);
+      }
+    };
+    walk(block.steps);
+  }
+  for (const edge of model.edges) {
+    if (!positionof.has(edge.from)) throw new Error(`The edge of ${edge.variable} references the unknown source step ${edge.from}.`);
+    if (!positionof.has(edge.to)) throw new Error(`The edge of ${edge.variable} references the unknown target step ${edge.to}.`);
+    if (positionof.get(edge.from) >= positionof.get(edge.to)) throw new Error(`The edge of ${edge.variable} runs backwards from ${edge.from} into ${edge.to} and would form a cycle.`);
+  }
+  const bindingsof = (stepid) => model.edges.filter((edge) => edge.to === stepid).map((edge) => ({ variable: edge.variable, kind: edge.kind, stepid: edge.from, ...edge.path !== void 0 ? { path: edge.path } : {} }));
+  const entries = [];
+  const attached = /* @__PURE__ */ new Map();
+  for (const node of model.nodes) {
+    if (node.invocation !== void 0) {
+      entries.push({ ...node.invocation });
+      continue;
+    }
+    const step = node.step;
+    const bindings = bindingsof(step.id);
+    const { block, params, ...rest } = { ...step, ...bindings.length > 0 ? { bindings } : {} };
+    void params;
+    const carried = rest;
+    if (block !== void 0) {
+      if (!model.blocks.some((candidate) => candidate.name === block)) throw new Error(`The step ${step.id} attaches to the unknown block ${block}.`);
+      const list = attached.get(block) ?? [];
+      list.push(carried);
+      attached.set(block, list);
+      continue;
+    }
+    entries.push(carried);
+  }
+  const blocks = model.blocks.map((block) => {
+    const snapped = attached.get(block.name) ?? [];
+    const snappedids = new Set(snapped.map((step) => step.id));
+    const carried = [];
+    for (const entry of block.steps) {
+      if ("kind" in entry && "label" in entry && !("block" in entry) && snappedids.has(entry.id)) continue;
+      carried.push(entry);
+    }
+    const steps = [...carried, ...snapped];
+    const withbindings = [];
+    for (const entry of steps) {
+      if (!("kind" in entry && "label" in entry && !("block" in entry))) {
+        withbindings.push(entry);
+        continue;
+      }
+      const bindings = bindingsof(entry.id);
+      const { block: inner, params, ...rest } = { ...entry, ...bindings.length > 0 ? { bindings } : {} };
+      void inner;
+      void params;
+      withbindings.push(rest);
+    }
+    return { ...block, steps: withbindings };
+  });
+  const composed = composeworkflow({ id: model.workflowid, name: model.name, version: model.version, origins: [...model.origins], steps: entries, blocks: blocks.map((block) => ({ ...block })), now: input.now, ...input.kindallowed !== void 0 ? { kindallowed: input.kindallowed } : {}, ...input.riskof !== void 0 ? { riskof: input.riskof } : {} });
+  const checked = validateworkflow(composed, input.kindallowed !== void 0 ? { kindallowed: input.kindallowed } : {});
+  if (!checked.allowed) throw new Error(checked.reason ?? "The canvas model failed the workflow grammar.");
+  return composed;
+}
+function snapnode(model, nodeid, x, y, grid = 20) {
+  if (!Number.isFinite(grid) || grid <= 0) throw new Error("The snap grid must be a positive number.");
+  const index = model.nodes.findIndex((node2) => nodeidof(node2) === nodeid);
+  if (index < 0) throw new Error(`No canvas node matches ${nodeid}.`);
+  const node = model.nodes[index];
+  if (node.step === void 0) throw new Error("A block invocation node attaches through its own definition, not through snapping.");
+  const snappedx = Math.round(x / grid) * grid;
+  const snappedy = Math.round(y / grid) * grid;
+  let attached;
+  for (const [blockindex, block] of model.blocks.entries()) {
+    const columnx = canvasoriginx + (blockindex + 1) * blockcolumnwidth;
+    if (Math.abs(snappedx - columnx) <= blockcolumnwidth / 2) attached = block.name;
+  }
+  const { block: priorblock, ...rest } = node.step;
+  void priorblock;
+  const step = { ...rest, ...attached !== void 0 ? { block: attached } : {} };
+  const nodes = model.nodes.map((candidate, position) => position === index ? { step, x: snappedx, y: snappedy } : candidate);
+  const size = layouttypeof(nodes, model.layout);
+  const next = { ...model, nodes, layout: size };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function reordersteps(model, nodeid, index) {
+  const current = model.nodes.findIndex((node) => nodeidof(node) === nodeid);
+  if (current < 0) throw new Error(`No canvas node matches ${nodeid}.`);
+  if (!Number.isInteger(index) || index < 0 || index > model.nodes.length - 1) throw new Error("The reorder index must address an existing position of the canvas list.");
+  const nodes = [...model.nodes];
+  const [moved] = nodes.splice(current, 1);
+  if (!moved) throw new Error("The reordered canvas node vanished.");
+  nodes.splice(index, 0, moved);
+  const next = { ...model, nodes };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function groupselect(model, nodeids, blockname) {
+  if (!/^[a-z][a-z0-9]*$/.test(blockname)) throw new Error("The block name must be a unique lowercase word.");
+  if (model.blocks.some((block) => block.name === blockname)) throw new Error(`The block name ${blockname} already exists on the canvas.`);
+  const selected = nodeids.map((id) => {
+    const node = model.nodes.find((candidate) => nodeidof(candidate) === id);
+    if (!node || node.step === void 0) throw new Error(`The grouping selection must address step nodes; ${id} is not one.`);
+    return node;
+  });
+  if (selected.length === 0) throw new Error("The grouping selection needs at least one step node.");
+  const steps = selected.map((node) => node.step);
+  const blocks = [...model.blocks, { name: blockname, label: blockname, steps: steps.map((step) => ({ ...step })) }];
+  const firstindex = model.nodes.findIndex((node) => nodeidof(node) === nodeids[0]);
+  const invocationnode = { id: blockname, invocation: { block: blockname, label: blockname }, x: selected[0].x, y: selected[0].y };
+  const nodes = [];
+  model.nodes.forEach((node, index) => {
+    if (nodeids.includes(nodeidof(node))) {
+      if (index === firstindex) nodes.push(invocationnode);
+      return;
+    }
+    nodes.push(node);
+  });
+  const next = { ...model, nodes, blocks };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function expandtemplate(model, template, params = [], index) {
+  const parsed = steptemplateof(template);
+  if (!parsed) throw new Error("The template does not carry one reviewed workflow step.");
+  let id = parsed.step.id;
+  let suffix = 2;
+  const taken = new Set(model.nodes.map((node) => nodeidof(node)));
+  while (taken.has(id)) {
+    id = `${parsed.step.id}${suffix}`;
+    suffix += 1;
+  }
+  const step = { ...parsed.step, id, ...params.length > 0 ? { params: params.map((param) => ({ ...param })) } : {} };
+  const position = index !== void 0 && Number.isInteger(index) && index >= 0 && index <= model.nodes.length ? index : model.nodes.length;
+  const nodes = [...model.nodes.slice(0, position), { step, x: canvasoriginx, y: 60 + position * noderowheight }, ...model.nodes.slice(position)];
+  const next = { ...model, nodes };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function addnode(model, step, index) {
+  const normalized = workflowstepof(step);
+  if (!normalized) throw new Error("The canvas insertion needs one reviewed workflow step.");
+  let id = normalized.id;
+  let suffix = 2;
+  const taken = new Set(model.nodes.map((node) => nodeidof(node)));
+  while (taken.has(id)) {
+    id = `${normalized.id}${suffix}`;
+    suffix += 1;
+  }
+  const position = index !== void 0 && Number.isInteger(index) && index >= 0 && index <= model.nodes.length ? index : model.nodes.length;
+  const nodes = [...model.nodes.slice(0, position), { step: { ...normalized, id }, x: canvasoriginx, y: 60 + position * noderowheight }, ...model.nodes.slice(position)];
+  const next = { ...model, nodes };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function editstep(model, step) {
+  const normalized = workflowstepof(step);
+  if (!normalized) throw new Error("The step inspector edit needs one reviewed workflow step.");
+  const index = model.nodes.findIndex((node2) => node2.step?.id === normalized.id);
+  if (index < 0) throw new Error(`No canvas step matches ${normalized.id}.`);
+  const node = model.nodes[index];
+  const nodes = model.nodes.map((candidate, position) => position === index ? { step: { ...normalized, ...node.step?.block !== void 0 ? { block: node.step.block } : {}, ...node.step?.breakpoint === true ? { breakpoint: true } : {} }, x: node.x, y: node.y } : candidate);
+  const next = { ...model, nodes };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function renderminimap(model, width = 160, height = 100) {
+  if (!Number.isFinite(width) || width <= 0 || !Number.isFinite(height) || height <= 0) throw new Error("The mini map size must be positive.");
+  const canvaswidth = Math.max(1, model.layout.width);
+  const canvasheight = Math.max(1, model.layout.height);
+  const scale = Math.min(width / canvaswidth, height / canvasheight);
+  const zoom = model.layout.zoom > 0 ? model.layout.zoom : 1;
+  const visiblewidth = canvaswidth / zoom;
+  const visibleheight = canvasheight / zoom;
+  const viewport = {
+    x: Math.max(0, Math.min(model.layout.viewportx, canvaswidth)) * scale,
+    y: Math.max(0, Math.min(model.layout.viewporty, canvasheight)) * scale,
+    width: visiblewidth * scale,
+    height: visibleheight * scale
+  };
+  const nodes = model.nodes.map((node) => ({ id: nodeidof(node), x: node.x * scale, y: node.y * scale }));
+  return { minimap: { width, height, scale, zoom, viewport }, nodes };
+}
+function minimapfocus(model, x, y, width = 160, height = 100) {
+  const projection = renderminimap(model, width, height);
+  if (projection.minimap.scale <= 0) return model;
+  const canvasx = x / projection.minimap.scale;
+  const canvasy = y / projection.minimap.scale;
+  const zoom = model.layout.zoom > 0 ? model.layout.zoom : 1;
+  const visiblewidth = model.layout.width / zoom;
+  const visibleheight = model.layout.height / zoom;
+  const viewportx = Math.max(0, Math.min(canvasx - visiblewidth / 2, Math.max(0, model.layout.width - visiblewidth)));
+  const viewporty = Math.max(0, Math.min(canvasy - visibleheight / 2, Math.max(0, model.layout.height - visibleheight)));
+  const next = { ...model, layout: { ...model.layout, viewportx, viewporty } };
+  return { ...next, minimap: renderminimap(next).minimap };
+}
+function zoomcanvas(model, zoom) {
+  if (!Number.isFinite(zoom) || zoom <= 0) throw new Error("The canvas zoom must be a positive number with no code ceiling.");
+  const next = { ...model, layout: { ...model.layout, zoom } };
+  const labelscale = zoom < 1 ? 1 / zoom : 1;
+  return { model: { ...next, minimap: renderminimap(next).minimap }, labelscale };
+}
+function searchsteps(model, query) {
+  const needle = query.trim().toLowerCase();
+  if (!needle) return [];
+  const results = [];
+  for (const node of model.nodes) {
+    if (node.step === void 0) continue;
+    const matched = [];
+    if (node.step.label.toLowerCase().includes(needle)) matched.push("label");
+    if (node.step.kind.toLowerCase().includes(needle)) matched.push("kind");
+    const variables = [
+      ...model.edges.filter((edge) => edge.to === node.step?.id || edge.from === node.step?.id).map((edge) => edge.variable),
+      ...node.step.expression !== void 0 ? [node.step.expression.result] : [],
+      ...node.step.extract !== void 0 ? node.step.extract.groups : []
+    ];
+    if (variables.some((name) => name.toLowerCase().includes(needle))) matched.push("variable");
+    if (matched.length > 0) results.push({ id: node.step.id, label: node.step.label, kind: node.step.kind, matched });
+  }
+  return results;
+}
+function markbreakpoint(model, stepid) {
+  const toggle = (step) => {
+    const { breakpoint, ...rest } = step;
+    void breakpoint;
+    return breakpoint === true ? rest : { ...rest, breakpoint: true };
+  };
+  const index = model.nodes.findIndex((node) => node.step?.id === stepid);
+  if (index >= 0) {
+    const node = model.nodes[index];
+    const step = node.step;
+    const nodes = model.nodes.map((candidate, position) => position === index ? { step: toggle(step), x: candidate.x, y: candidate.y } : candidate);
+    const next2 = { ...model, nodes };
+    return withundo(model, { ...next2, minimap: renderminimap(next2).minimap });
+  }
+  const blocks = model.blocks.map((block) => {
+    const stepindex = block.steps.findIndex((entry) => "kind" in entry && "label" in entry && !("block" in entry) && entry.id === stepid);
+    if (stepindex < 0) return block;
+    const steps = block.steps.map((entry, position) => position === stepindex ? toggle(entry) : entry);
+    return { ...block, steps };
+  });
+  if (blocks.every((block, position) => block === model.blocks[position])) throw new Error(`No canvas step matches ${stepid}.`);
+  const next = { ...model, blocks };
+  return withundo(model, next);
+}
+function runtobreakpoint(input) {
+  const cursor = input.cursor !== void 0 && Number.isInteger(input.cursor) && input.cursor >= 0 ? input.cursor : 0;
+  const marked = new Set(input.breakpoints);
+  for (let index = cursor; index < input.record.steps.length; index += 1) {
+    const step = input.record.steps[index];
+    if (step.breakpoint === true || marked.has(step.id)) {
+      return { until: index, pausat: step.id, remaining: input.record.steps.length - index };
+    }
+  }
+  return { until: input.record.steps.length, pausat: void 0, remaining: 0 };
+}
+function diffversions(from, to, now) {
+  const fromsteps = new Map(from.steps.map((step) => [step.id, step]));
+  const tosteps = new Map(to.steps.map((step) => [step.id, step]));
+  const added = [];
+  const removed = [];
+  const changed = [];
+  for (const step of to.steps) {
+    const prior = fromsteps.get(step.id);
+    if (!prior) {
+      added.push({ stepid: step.id, kind: step.kind, label: step.label });
+      continue;
+    }
+    const changes = [];
+    if (prior.label !== step.label) changes.push("label");
+    if (prior.kind !== step.kind) changes.push("kind");
+    if (prior.target !== step.target) changes.push("target");
+    if (prior.value !== step.value) changes.push("value");
+    if (prior.options !== step.options) changes.push("options");
+    if (JSON.stringify(prior.expression) !== JSON.stringify(step.expression)) changes.push("expression");
+    if (JSON.stringify(prior.extract) !== JSON.stringify(step.extract)) changes.push("extract");
+    if (JSON.stringify(prior.bindings) !== JSON.stringify(step.bindings)) changes.push("bindings");
+    if (changes.length > 0) changed.push({ stepid: step.id, kind: step.kind, label: step.label, changes });
+  }
+  for (const step of from.steps) {
+    if (!tosteps.has(step.id)) removed.push({ stepid: step.id, kind: step.kind, label: step.label });
+  }
+  return { workflowid: to.id, from: from.version, to: to.version, added, removed, changed, at: now };
+}
+function exportworkflow(record2, format, note, now) {
+  const file = { format: workflowfileversion, exportedat: now ?? Date.now(), workflow: record2, ...note !== void 0 && note.trim() !== "" ? { note } : {}, templates: [] };
+  return { format, contents: serializefile(file, format), file };
+}
+function shareworkflow(record2, templates, format, note, now) {
+  const file = { format: workflowfileversion, exportedat: now ?? Date.now(), workflow: record2, ...note !== void 0 && note.trim() !== "" ? { note } : {}, templates: templates.map((template) => ({ ...template })) };
+  return { format, contents: serializefile(file, format), file };
+}
+function importworkflow(input) {
+  const format = input.format ?? (input.contents.trimStart().startsWith("{") ? "json" : "yaml");
+  const parsed = parsefile(input.contents, format);
+  if (parsed.format !== workflowfileversion) throw new Error(`The workflow file format ${String(parsed.format)} is not the reviewed format ${workflowfileversion}.`);
+  const candidate = parsed.workflow;
+  if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) throw new Error("The workflow file carries no workflow record.");
+  const fields = candidate;
+  const stepsvalue = fields.steps;
+  if (!Array.isArray(stepsvalue) || stepsvalue.length === 0) throw new Error("An imported workflow needs at least one step.");
+  const steps = [];
+  for (const entry of stepsvalue) {
+    const step = workflowstepof(entry);
+    if (step) {
+      steps.push(step);
+      continue;
+    }
+    throw new Error("Every imported workflow entry must be a reviewed step.");
+  }
+  const composed = composeworkflow({
+    id: typeof fields.id === "string" && fields.id.trim() !== "" ? fields.id : crypto.randomUUID(),
+    name: typeof fields.name === "string" ? fields.name : "",
+    version: typeof fields.version === "number" ? fields.version : 1,
+    origins: Array.isArray(fields.origins) ? fields.origins.filter((origin) => typeof origin === "string") : [],
+    steps,
+    now: input.now ?? Date.now(),
+    ...input.kindallowed !== void 0 ? { kindallowed: input.kindallowed } : {},
+    ...input.riskof !== void 0 ? { riskof: input.riskof } : {}
+  });
+  const templatesvalue = parsed.templates;
+  if (templatesvalue !== void 0 && !Array.isArray(templatesvalue)) throw new Error("The packed templates of the workflow file must be a list.");
+  const templates = [];
+  for (const entry of templatesvalue ?? []) {
+    const template = steptemplateof(entry);
+    if (!template) throw new Error("A packed template of the workflow file does not carry one reviewed step.");
+    templates.push(template);
+  }
+  const record2 = { ...composed, reviewstate: "pending" };
+  return { record: record2, templates, file: { ...parsed, workflow: record2 } };
+}
+function bindparam(model, blockname, param) {
+  if (!/^[a-z][a-z0-9]*$/.test(param.name)) throw new Error("The nested parameter name must be a lowercase word.");
+  const index = model.nodes.findIndex((node2) => node2.invocation?.block === blockname);
+  if (index < 0) throw new Error(`No block invocation of ${blockname} sits on the canvas.`);
+  const node = model.nodes[index];
+  const invocation = node.invocation;
+  const params = [...(invocation.params ?? []).filter((existing) => existing.name !== param.name), { ...param }];
+  const nodes = model.nodes.map((candidate, position) => position === index ? { invocation: { ...invocation, params }, x: candidate.x, y: candidate.y } : candidate);
+  const next = { ...model, nodes };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function originmatches(pattern, origin) {
+  if (pattern === origin) return true;
+  const glob = pattern.replace(/\./g, "\\.").replace(/\*/g, "[^.]+");
+  if (!glob.startsWith("https://")) return false;
+  return new RegExp(`^${glob}$`).test(origin);
+}
+function applyoverride(record2, override) {
+  const matching = record2.origins.filter((origin) => originmatches(override.pattern, origin));
+  if (matching.length === 0) throw new Error(`The override pattern ${override.pattern} matches none of the workflow origins ${record2.origins.join(", ")}.`);
+  const knobs = /* @__PURE__ */ new Set(["loopbound", "stepms", "runms", "waitms", "delaybase"]);
+  for (const knob of Object.keys(override.deltas)) {
+    if (!knobs.has(knob)) throw new Error(`The override knob ${knob} is not one of the reviewed knobs: ${[...knobs].join(", ")}.`);
+    if (typeof override.deltas[knob] !== "number" || !Number.isFinite(override.deltas[knob]) || override.deltas[knob] <= 0) throw new Error(`The override delta of ${knob} must be a positive number with no code ceiling.`);
+  }
+  const apply = (step) => {
+    if (Object.keys(override.deltas).length === 0) return step;
+    let payload = {};
+    try {
+      payload = step.options !== void 0 ? JSON.parse(step.options) : {};
+    } catch {
+      payload = {};
+    }
+    const bodyof = (key) => payload[key] !== void 0 && typeof payload[key] === "object" && !Array.isArray(payload[key]) ? payload[key] : {};
+    if (override.deltas.loopbound !== void 0 && ["loop", "repeatuntil", "whileloop"].includes(step.kind)) {
+      const body = bodyof(step.kind);
+      body.bound = override.deltas.loopbound;
+      payload[step.kind] = body;
+    }
+    if ((override.deltas.stepms !== void 0 || override.deltas.runms !== void 0) && step.kind === "trycatch") {
+      const body = bodyof("trycatch");
+      const timeout = body.timeout !== void 0 && typeof body.timeout === "object" && !Array.isArray(body.timeout) ? body.timeout : {};
+      if (override.deltas.stepms !== void 0) timeout.stepms = override.deltas.stepms;
+      if (override.deltas.runms !== void 0) timeout.runms = override.deltas.runms;
+      body.timeout = timeout;
+      payload.trycatch = body;
+    }
+    if (override.deltas.waitms !== void 0 && step.kind === "waitelement") {
+      payload.timeout = override.deltas.waitms;
+    }
+    if (override.deltas.delaybase !== void 0 && step.kind === "delay") {
+      payload.base = override.deltas.delaybase;
+    }
+    const changed = Object.keys(payload).length > 0;
+    return changed ? { ...step, options: JSON.stringify(payload) } : step;
+  };
+  return { ...record2, steps: record2.steps.map(apply) };
+}
+function addedge(model, edge) {
+  const from = model.nodes.findIndex((node) => nodeidof(node) === edge.from);
+  const to = model.nodes.findIndex((node) => nodeidof(node) === edge.to);
+  if (from < 0) throw new Error(`The canvas edge references the unknown source step ${edge.from}.`);
+  if (to < 0) throw new Error(`The canvas edge references the unknown target step ${edge.to}.`);
+  if (from >= to) throw new Error(`The canvas edge of ${edge.variable} would run backwards from ${edge.from} into ${edge.to} and form a cycle.`);
+  if (!/^[a-z][a-z0-9]*$/.test(edge.variable)) throw new Error("The bound variable name must be a lowercase word.");
+  const edges = [...model.edges.filter((candidate) => !(candidate.from === edge.from && candidate.to === edge.to && candidate.variable === edge.variable)), { ...edge, ...edge.path !== void 0 ? { path: edge.path } : {} }];
+  const next = { ...model, edges };
+  return withundo(model, next);
+}
+function removeedge(model, from, to, variable) {
+  const edges = model.edges.filter((candidate) => !(candidate.from === from && candidate.to === to && candidate.variable === variable));
+  if (edges.length === model.edges.length) throw new Error(`No canvas edge of ${variable} links ${from} into ${to}.`);
+  const next = { ...model, edges };
+  return withundo(model, next);
+}
+function removenode(model, nodeid) {
+  const index = model.nodes.findIndex((node) => nodeidof(node) === nodeid);
+  if (index < 0) throw new Error(`No canvas node matches ${nodeid}.`);
+  const nodes = model.nodes.filter((_, position) => position !== index);
+  const edges = model.edges.filter((edge) => edge.from !== nodeid && edge.to !== nodeid);
+  const next = { ...model, nodes, edges };
+  return withundo(model, { ...next, minimap: renderminimap(next).minimap });
+}
+function undoedit(model) {
+  const undo = model.undo ?? [];
+  if (undo.length === 0) return model;
+  const previous = undo[undo.length - 1];
+  const current = snapshotof(model);
+  return { ...previous, undo: undo.slice(0, -1), redo: [...model.redo ?? [], current] };
+}
+function redoedit(model) {
+  const redo = model.redo ?? [];
+  if (redo.length === 0) return model;
+  const next = redo[redo.length - 1];
+  const current = snapshotof(model);
+  return { ...next, redo: redo.slice(0, -1), undo: [...model.undo ?? [], current] };
+}
+function serializefile(file, format) {
+  if (format === "json") return JSON.stringify(file, null, 2);
+  return yamlvalue(file, 0).join("\n") + "\n";
+}
+function parsefile(contents, format) {
+  if (format === "json") {
+    const parsed = JSON.parse(contents);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("The workflow file is not a json object.");
+    return parsed;
+  }
+  const lines = contents.split(/\r?\n/).map((line) => line.replace(/\t/g, "  ")).filter((line) => line.trim() !== "" && !line.trim().startsWith("#"));
+  if (lines.length === 0) throw new Error("The yaml workflow file is empty.");
+  const { value, next } = yamlblock(lines, 0, indentof(lines[0]));
+  if (next < lines.length) throw new Error("The yaml workflow file carries content outside the documented subset.");
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("The yaml workflow file is not a mapping.");
+  return value;
+}
+function indentof(line) {
+  const match = /^ */.exec(line);
+  return match ? match[0].length : 0;
+}
+function yamlscalar(value) {
+  if (value === null || value === void 0) return "null";
+  if (typeof value === "number" || typeof value === "boolean") return String(value);
+  return JSON.stringify(String(value));
+}
+function yamlvalue(value, indent) {
+  const pad = " ".repeat(indent);
+  if (value === null || value === void 0 || typeof value !== "object") return [`${pad}${yamlscalar(value)}`];
+  if (Array.isArray(value)) {
+    if (value.length === 0) return [`${pad}[]`];
+    const lines2 = [];
+    for (const item of value) {
+      if (item !== null && typeof item === "object") {
+        lines2.push(`${pad}-`);
+        lines2.push(...yamlvalue(item, indent + 2));
+      } else {
+        lines2.push(`${pad}- ${yamlscalar(item)}`);
+      }
+    }
+    return lines2;
+  }
+  const entries = Object.entries(value);
+  if (entries.length === 0) return [`${pad}{}`];
+  const lines = [];
+  for (const [key, entry] of entries) {
+    if (entry !== null && typeof entry === "object") {
+      if (Array.isArray(entry) && entry.length === 0) {
+        lines.push(`${pad}${key}: []`);
+        continue;
+      }
+      if (!Array.isArray(entry) && Object.keys(entry).length === 0) {
+        lines.push(`${pad}${key}: {}`);
+        continue;
+      }
+      lines.push(`${pad}${key}:`);
+      lines.push(...yamlvalue(entry, indent + 2));
+    } else {
+      lines.push(`${pad}${key}: ${yamlscalar(entry)}`);
+    }
+  }
+  return lines;
+}
+function yamlblock(lines, start, indent) {
+  const first = lines[start];
+  if (/^\s*-\s/.test(first) || /^\s*-$/.test(first)) {
+    const items = [];
+    let index2 = start;
+    while (index2 < lines.length) {
+      const line = lines[index2];
+      if (indentof(line) !== indent || !/^\s*-\s?/.test(line)) break;
+      const rest = line.slice(indent + 1).trim();
+      if (rest !== "") {
+        items.push(yamlscalarvalue(rest));
+        index2 += 1;
+        continue;
+      }
+      const nested = yamlblock(lines, index2 + 1, indent + 2);
+      items.push(nested.value);
+      index2 = nested.next;
+    }
+    return { value: items, next: index2 };
+  }
+  const mapping = {};
+  let index = start;
+  while (index < lines.length) {
+    const line = lines[index];
+    if (indentof(line) !== indent) break;
+    const match = /^([A-Za-z][A-Za-z0-9]*):(?:\s(.*))?$/.exec(line.slice(indent));
+    if (!match) break;
+    const key = match[1];
+    const rest = match[2];
+    if (rest !== void 0 && rest !== "") {
+      if (rest === "[]") {
+        mapping[key] = [];
+        index += 1;
+        continue;
+      }
+      if (rest === "{}") {
+        mapping[key] = {};
+        index += 1;
+        continue;
+      }
+      mapping[key] = yamlscalarvalue(rest);
+      index += 1;
+      continue;
+    }
+    const nested = yamlblock(lines, index + 1, indent + 2);
+    mapping[key] = nested.value;
+    index = nested.next;
+  }
+  if (index === start) throw new Error("The yaml workflow file left the documented subset.");
+  return { value: mapping, next: index };
+}
+function yamlscalarvalue(text2) {
+  if (text2.startsWith('"')) {
+    const parsed = JSON.parse(text2);
+    return typeof parsed === "string" ? parsed : text2;
+  }
+  if (text2 === "true") return true;
+  if (text2 === "false") return false;
+  if (text2 === "null") return null;
+  if (/^-?\d+(?:\.\d+)?$/.test(text2)) return Number(text2);
+  return text2;
+}
 export {
   activelayers,
+  addedge,
+  addnode,
   agentgrammarvalid,
   agentpresetof,
   allowlistcovers,
+  alltools,
   annotatetrace,
   annotationof,
   annotationplanof,
@@ -9063,6 +10486,7 @@ export {
   applycooldown,
   applyheaderules,
   applylayer,
+  applyoverride,
   applyretry,
   applyruntimeout,
   applytimeout,
@@ -9077,6 +10501,8 @@ export {
   authreport,
   autointervalof,
   backoffdelay,
+  bindlocalhost,
+  bindparam,
   bindvariables,
   blackboxedurls,
   blackboxmatches,
@@ -9096,7 +10522,9 @@ export {
   buildname,
   buildpdf,
   buildsheet,
+  buildsteplibrary,
   buildstitchplan,
+  buildtoolcatalog,
   callgraphql,
   callrest,
   callsreport,
@@ -9131,6 +10559,7 @@ export {
   composeworkflow,
   conditionof,
   confirmmanualrun,
+  connectclient,
   consolecapture,
   consoleconsentcovers,
   consolediff,
@@ -9160,6 +10589,8 @@ export {
   debugwaitbudgetallowed,
   dedupeimages,
   defaultloopbound,
+  defaultmcpconfig,
+  defaultmcpport,
   defaulttriggercooldown,
   delayjitter,
   actionrisk as deriveactionrisk,
@@ -9168,16 +10599,24 @@ export {
   diffresponse,
   diffreviewgrade,
   diffsessionrecords,
+  diffversions,
+  disconnectclient,
+  dispatchtool,
+  domainkinds,
   downloadreport,
   drainqueue,
   dryrunprojection,
   dryrunworkflow,
+  editorsavegate,
+  editorstate,
+  editstep,
   emugate,
   emulationkinds,
   emulationreport,
   emulationretentionwindow,
   emulationstackallowed,
   emulationstateof,
+  enqueuerequest,
   errorcapture,
   errorreportresponse,
   evaluatecondition,
@@ -9186,11 +10625,14 @@ export {
   eventrulematches,
   exchangesreport,
   expandblocks,
+  expandtemplate,
   expirelayers,
   expireprofilerecords,
   expiresessions,
+  exportcontentreview,
   exportpresetlibrary,
   exportsessionfile,
+  exportworkflow,
   expressioneval,
   expressionof,
   expressionoperators,
@@ -9210,12 +10652,15 @@ export {
   foreachof,
   formpayloadof,
   formreportresponse,
+  framedlog,
   frameinterval,
   generatedvalueallowed,
   graphqlopenvelope,
   graphqlrequestof,
+  groupselect,
   growsampleof,
   growthtrend,
+  handleframe,
   headerfilterof,
   headeruleof,
   heapintervalallowed,
@@ -9230,6 +10675,8 @@ export {
   imagenames,
   importpresetlibrary,
   importsessionfile,
+  importworkflow,
+  initialize,
   iscdpkind,
   iscontrolflowkind,
   iscontrolkind,
@@ -9248,10 +10695,14 @@ export {
   jsonpathrulesof,
   lapseframes,
   lapseplanof,
+  launchbridge,
   layernames,
   layoutreport,
   levelrank,
   listdue,
+  listtools,
+  loadworkflow,
+  localhostbind,
   locationconsentcovers,
   locationconsentgate,
   locationpresetof,
@@ -9263,6 +10714,7 @@ export {
   manualrunpreview,
   mapresponse,
   mapurlof,
+  markbreakpoint,
   matchmessage,
   matchurl,
   matchurlpattern,
@@ -9272,11 +10724,14 @@ export {
   mediareport,
   messagefilterof,
   methoddomain,
+  minimapfocus,
   mockfor,
   mockspecof,
   multipartchunks,
   multipartpayloadof,
+  namespaceof,
   navstateresponse,
+  negotiate,
   netfailureentryof,
   netlogreport,
   netwatchkinds,
@@ -9291,6 +10746,7 @@ export {
   newsessiondiff,
   newsessionrecord,
   newworkflowrun,
+  nextrequest,
   normalizeendpoint,
   oauthflowof,
   observationmodeof,
@@ -9300,13 +10756,18 @@ export {
   outcomeresponse,
   overrideinputof,
   overridematches,
+  pairclient,
   pairexchange,
   pairstates,
+  palettecategories,
+  palettenodes,
   parallelof,
+  parseframe,
   parsehtmlbody,
   parseproposal,
   parsessetext,
   parsetokens,
+  parsewire,
   parseworkflowproposal,
   passwordconsentgranted,
   patternorigin,
@@ -9325,6 +10786,7 @@ export {
   permissionnamevalid,
   permissionstates,
   permissionstatevalid,
+  ping,
   planallowlist,
   pollcursorof,
   polldecision,
@@ -9356,18 +10818,27 @@ export {
   recordwatchvalue,
   redactconsoletext,
   redactedcookies,
+  redoedit,
   regexextract,
   regexruleof,
   regionsteps,
   rejectioncapture,
+  relayframe,
+  removeedge,
+  removenode,
+  renderminimap,
+  reordersteps,
   repeatuntilof,
   replaytrace,
   replayurl,
   requestbody,
   resolutionverdict,
   resolvedrisk,
+  resolvetool,
   resolvevariable,
   resourcefacts,
+  respond,
+  restartbridge,
   restoreoriginsgranted,
   restoreplanof,
   restorereviewgranted,
@@ -9377,24 +10848,33 @@ export {
   revertlayer,
   revertplanof,
   revertrule,
+  reviewedkinds,
   revocationruleof,
   rewritesourcelocation,
   rotatelogs,
   rotationruleof,
+  rpcerrorcodeof,
+  rpcerrornumbers,
+  rpcerrorof,
   ruleorigins,
   ruleoriginsgranted,
   runcatch,
   runcontrolstep,
   runforeach,
+  runhistoryquery,
+  runhistoryreport,
   runloop,
   runparallel,
   runrepeatuntil,
+  runreviewgranted,
   runstep,
+  runtobreakpoint,
   runtry,
   runurllist,
   runwhile,
   runworkflow,
   safetyresponse,
+  saveworkflow,
   scaledrect,
   schedulecron,
   scheduleinterval,
@@ -9402,6 +10882,7 @@ export {
   searchfields,
   searchqueryof,
   searchsessionrecords,
+  searchsteps,
   seededrandom,
   selectorresponse,
   sendcdpcommand,
@@ -9409,6 +10890,11 @@ export {
   sequenceintegrity,
   serializearg,
   serializecdpcommand,
+  serializeframe,
+  serverbindgate,
+  servercapabilities,
+  serverenablementgate,
+  servermethods,
   sessionfileversion,
   sessionfolderof,
   sessionfolderunique,
@@ -9419,8 +10905,10 @@ export {
   sessionrestoregate,
   sessiontabof,
   setvariable,
+  shareworkflow,
   shiftentryof,
   signalsreport,
+  snapnode,
   snapshotplanof,
   snapshotretentionwindow,
   snapshotsections,
@@ -9459,6 +10947,19 @@ export {
   timelinesources,
   timezonevalid,
   tokenrequest,
+  toolcallevent,
+  toolcallframe,
+  toolcatalogversion,
+  toolconsentrequired,
+  tooldispatchgate,
+  toolname,
+  toolnamespacegate,
+  toolnamespaces,
+  toolresultframe,
+  toolriskgrade,
+  toolsbynamespace,
+  toolschemaof,
+  toolversionfloor,
   tracecategories,
   traceceilingof,
   tracestart,
@@ -9476,6 +10977,7 @@ export {
   triggerpayloadof,
   triggersummary,
   tryof,
+  undoedit,
   unwrapgraphql,
   updaterule,
   urlencodeform,
@@ -9483,26 +10985,34 @@ export {
   validatecontrolpayload,
   validatefieldmatch,
   validateformrecord,
+  validateframe,
   validateregexrule,
+  validatesiteoverride,
   validatestep,
   validatetargetref,
+  validatetoolcatalog,
   validatevaluegen,
   validateworkflow,
   verifywebhook,
   visitmatch,
   waitelementplan,
   watchcdpevents,
+  watchdogconfigvalid,
+  watchdogpass,
   watcherdetached,
   watchexpressionof,
   watchgate,
   webhooksecretok,
   whileof,
+  wireformat,
   wizardreport,
   workflowblockof,
+  workflowfileversion,
   workflowgate,
   workflowkinds,
   workflowoutcome,
   workflowreport,
-  workflowstepof
+  workflowstepof,
+  zoomcanvas
 };
 //# sourceMappingURL=index.js.map