@wenathlan/extension 1.1.59 → 1.1.61

package/dist/sandboxframe.d.ts

@@ -0,0 +1,45 @@
+import type { environmentprovenance, sandboxrender, sandboxrenderresult } from "./types.js";
+/**
+ * Sandbox frame logic of the 1.1.60 family.
+ * Correlated rules for untrusted markup live here: the render descriptor with its per render nonce, the stripping of scripts and event handlers before any render, the postmessage envelope the sandboxed page answers through, the nonce checked acceptance of every render result and the provenance each render records with its source origin.
+ * The sandboxed page carries no extension privileges: a render result never reenters the dom outside the frame, and the untrusted markup never touches the page the session granted.
+ */
+/** Strips every script and event handler from untrusted markup before render: script elements, iframe script sources, javascript urls, inline event handler attributes and style url expressions all leave the markup so the sandboxed frame renders inert content only. */
+export declare function stripscripts(markup: string): string;
+/** Issues the per render nonce of one sandbox render: every message the sandboxed page answers carries the nonce of exactly one render so a stale or replayed message never passes. */
+export declare function nonceof(seed: string): string;
+/** Builds one sandbox render descriptor: the sanitized markup, the per render nonce and the source origin of the untrusted markup, ready for the sandboxed page that holds no extension privileges. */
+export declare function sandboxrenderof(input: {
+    id: string;
+    markup: string;
+    sourceorigin: string;
+    stepid: string;
+    now: number;
+}): sandboxrender;
+/** Builds the postmessage envelope the executor posts into the sandboxed page: the render nonce and the sanitized markup travel together so the frame answers with the same nonce only. */
+export declare function rendermessage(render: sandboxrender): {
+    channel: string;
+    type: string;
+    nonce: string;
+    markup: string;
+};
+/** Accepts one sandbox render result posted back through postmessage: the nonce must answer exactly one known render, an unknown or replayed nonce refuses, and the accepted result stays plain text that never reenters the dom outside the frame. */
+export declare function acceptrenderresult(input: {
+    renders: sandboxrender[];
+    message: {
+        channel?: string;
+        type?: string;
+        nonce?: string;
+        ok?: boolean;
+        text?: string;
+        summary?: string;
+    };
+    now: number;
+}): {
+    accepted: boolean;
+    result?: sandboxrenderresult;
+    reason: string;
+};
+/** Reads the provenance of one sandbox render: the source origin, the step and the sandboxframe environment land beside the stored render so the audit reads where every untrusted markup came from. */
+export declare function renderprovenance(render: sandboxrender): environmentprovenance;
+//# sourceMappingURL=sandboxframe.d.ts.map

package/dist/sandboxframe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxframe.d.ts","sourceRoot":"","sources":["../sandboxframe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE5F;;;;GAIG;AAEH,4QAA4Q;AAC5Q,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CASnD;AAED,uLAAuL;AACvL,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAW5C;AAED,uMAAuM;AACvM,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CAKvI;AAED,2LAA2L;AAC3L,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAErH;AAED,uPAAuP;AACvP,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAQrQ;AAED,wMAAwM;AACxM,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,qBAAqB,CAE7E"}

package/dist/types.d.ts

@@ -1,9 +1,9 @@
-export declare const protocolversion: "1.1.59";
+export declare const protocolversion: "1.1.61";
 /** Every reviewed action kind. Read kinds observe, interaction kinds move focus, sensitive kinds change page or browser state. */
 export type actionkind = "observe" | "inspect" | "extract" | "wait" | "waitfor" | "waittext" | "readattribute" | "readstyle" | "readgeometry" | "readvalue" | "readtext" | "readhtml" | "countelements" | "readtable" | "readlinks" | "readimages" | "readmeta" | "readforms" | "readstorage" | "highlight" | "tablist" | "windowlist" | "tabsnapshot" | "focus" | "scroll" | "hover" | "clickdeep" | "rightclick" | "doubleclick" | "scrollpage" | "scrollby" | "scrollend" | "scrolltop" | "fullscreen" | "zoomset" | "click" | "type" | "navigate" | "select" | "presskey" | "drag" | "drop" | "upload" | "clear" | "check" | "uncheck" | "toggle" | "submit" | "reload" | "back" | "forward" | "writestorage" | "setattribute" | "removeattribute" | "evaluate" | "tabcreate" | "tabactivate" | "tabclose" | "tabreload" | "windowcreate" | "windowclose" | "windowresize" | "downloadfile" | "movepointer" | "clickpoint" | "shiftclick" | "clicktext" | "clickaria" | "clickname" | "resolvexpath" | "typetime" | "appendtext" | "setvalue" | "typeedit" | "keyhold" | "keyrelease" | "submitsearch" | "selectmulti" | "chooseradio" | "setslider" | "setdate" | "setcolor" | "expanddetails" | "dismissdialog" | "pierceshadow" | "enterframe" | "retryaction" | "mapclicks" | "verifyvisible" | "verifyenabled" | "a11ytree" | "readvisible" | "readertree" | "detectlists" | "detecttables" | "readjson" | "watchmutate" | "waitquiet" | "watchbanner" | "detectinfinitescroll" | "detectvirtual" | "detectlazy" | "readscrollpos" | "readlang" | "readoutline" | "countpages" | "listshadow" | "listframes" | "classifypage" | "fingerprintsection" | "diffsnapshots" | "readselection" | "watchfocus" | "detectsticky" | "detectscrolllock" | "readopengraph" | "detectlanguage" | "deriveselector" | "openlink" | "openprivate" | "reloadcache" | "stopnav" | "waitload" | "waiturl" | "followlink" | "spanav" | "spawait" | "rewritequery" | "setfragment" | "navlist" | "navprofile" | "detecthttp" | "readredirects" | "readfinalurl" | "handleauth" | "printpdf" | "prefetch" | "preconnect" | "deeplink" | "reopentab" | "trailaudit" | "pausenav" | "navintent" | "navrate" | "openclipboard" | "checksafe" | "batchopen" | "querytabs" | "duplicatetab" | "closepattern" | "pintab" | "mutetab" | "movetab" | "movetabwindow" | "grouptabs" | "colorgroup" | "collapsegroup" | "discardtab" | "reloadtabs" | "zoomin" | "zoomout" | "watchtab" | "switchtab" | "maximizewindow" | "minimizewindow" | "restorewindow" | "focuswindow" | "scratchwindow" | "incognitowindow" | "restoretab" | "savelayout" | "restorelayout" | "findclones" | "searchtabs" | "badgetab" | "attachmeta" | "listaudio" | "reopenrun" | "snapshotsession" | "fillform" | "filllabel" | "fillplaceholder" | "detectfields" | "generatevalues" | "saveprofiles" | "asksubmit" | "submitform" | "readerrors" | "retryform" | "runwizard" | "selectchain" | "picktypeahead" | "pickdate" | "attachfile" | "handoffcaptcha" | "fillcard" | "fillcode" | "consentpassword" | "skiphoneypot" | "detectlogin" | "detecttemplate" | "scrapetable" | "exportcsv" | "exportjson" | "exportexcel" | "copytable" | "pushsheets" | "importcsv" | "looprows" | "transformvalues" | "deduperows" | "paginateextract" | "mergepages" | "stamplerows" | "previewgrid" | "streamdisk" | "resumeextract" | "logprovenance" | "batchdownload" | "pausedownload" | "resumedownload" | "verifydownload" | "interceptmime" | "exportnetlog" | "readclipboard" | "writeclipboard" | "copyscreen" | "quarantinedownload" | "scanvirus" | "namecaptures" | "cleanupartifacts" | "shotview" | "shotfullpage" | "shotelement" | "shotregion" | "contactsheet" | "capturepdf" | "recordscreen" | "captureaudio" | "captureframe" | "downloadimages" | "shotcanvas" | "probestream" | "readmedia" | "readassets" | "timelapse" | "convertimage" | "makethumbs" | "fetchurl" | "parsejson" | "parsehtml" | "callrest" | "callgraphql" | "opensocket" | "sendmessage" | "waitmessage" | "watchrequests" | "readheaders" | "capturebodies" | "subscribesse" | "longpoll" | "mapapi" | "extractapi" | "blockrequest" | "mockresponse" | "rewriteheaders" | "setcookies" | "readcookies" | "clearcookies" | "authflow" | "saveapikey" | "routeproxy" | "postform" | "postfiles" | "watchconsole" | "watcherrors" | "watchtasks" | "attachcdp" | "detachcdp" | "cdpcmd" | "watchcdp" | "setbreakpoint" | "stepcode" | "watchexpr" | "overridescript" | "measureflow" | "heapshot" | "trackmemory" | "profilecpu" | "watchshifts" | "traceload" | "annotatetrace" | "replaytrace" | "capturesourcemaps" | "emulatedevice" | "emulatenetwork" | "emulatelocate" | "setuseragent" | "overridepermission" | "blackboxscripts" | "persiststate" | "capturesession" | "restoresession" | "namedsessions" | "diffsessions" | "searchsessions" | "exportsessions" | "importsessions" | "composeworkflow" | "savetemplate" | "runworkflow" | "dryrun" | "delay" | "waitelement" | "compute" | "extractvars" | "listruns" | "condition" | "branch" | "loop" | "repeatuntil" | "whileloop" | "foreach" | "parallel" | "trycatch" | "visitrule" | "urlrule" | "menurule" | "keyrule" | "buttonrule" | "cronrule" | "intervalrule" | "urllistrule" | "webhookrule" | "eventrule";
 export type actionrisk = "read" | "interaction" | "sensitive";
 export type planstate = "draft" | "pending" | "approved" | "rejected" | "expired" | "completed" | "cancelled";
-export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop" | "pause" | "resume" | "complete" | "capability" | "tab" | "window" | "download" | "pointer" | "dialog" | "hold" | "retry" | "observation" | "watch" | "diff" | "navigation" | "redirect" | "auth" | "prefetch" | "rate" | "group" | "layout" | "discard" | "badge" | "fill" | "submit" | "consent" | "handoff" | "scrape" | "export" | "stream" | "provenance" | "resume" | "intercept" | "clipboard" | "quarantine" | "cleanup" | "capture" | "media" | "call" | "socket" | "replay" | "control" | "timeline" | "debugger" | "profile" | "emulation" | "workflow" | "trigger" | "protocol" | "tool" | "model" | "swarm";
+export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop" | "pause" | "resume" | "complete" | "capability" | "tab" | "window" | "download" | "pointer" | "dialog" | "hold" | "retry" | "observation" | "watch" | "diff" | "navigation" | "redirect" | "auth" | "prefetch" | "rate" | "group" | "layout" | "discard" | "badge" | "fill" | "submit" | "consent" | "handoff" | "scrape" | "export" | "stream" | "provenance" | "resume" | "intercept" | "clipboard" | "quarantine" | "cleanup" | "capture" | "media" | "call" | "socket" | "replay" | "control" | "timeline" | "debugger" | "profile" | "emulation" | "workflow" | "trigger" | "protocol" | "tool" | "model" | "swarm" | "environment" | "worker" | "sandbox" | "grant" | "expiry" | "revoke" | "deny" | "seal" | "mask";
 /** Observation mode classes: passive capture, watched lifetimes and diffing passes. */
 export type observationmode = "passive" | "watching" | "diffing";
 export interface toolstep {
@@ -15,6 +15,8 @@ export interface toolstep {
     options?: string;
     summary: string;
     risk: actionrisk;
+    /** The execution environment this step names: pagecontext, isolatedworld, offscreenworker or sandboxframe; an absent field routes to the default environment of the kind. */
+    environment?: environmentkind;
 }
 export interface agentplan {
     id: string;
@@ -37,6 +39,8 @@ export interface agentsession {
     pausedat?: number;
     /** Origins granted to this session; prepared for multi origin work. */
     grants?: string[];
+    /** Execution environments granted to this session beside the origin grants: pagecontext, isolatedworld, offscreenworker and sandboxframe; an absent list keeps the documented default posture while a configured list narrows every step to its entries. */
+    environmentgrants?: environmentkind[];
 }
 export interface endpointconfig {
     endpoint: string;
@@ -62,6 +66,8 @@ export interface observation {
         label: string;
     }>;
     capturedat: number;
+    /** The execution environment of the capture: pagecontext snapshots read the live page while offscreenworker parses hand the heavy shaping to the worker pool. */
+    environment?: environmentkind;
     /** Observation mode of this capture: passive, watching or diffing. */
     mode?: observationmode;
     /** Accessibility tree section captured by the page walker. */
@@ -130,6 +136,8 @@ export interface stepoutcome {
     ok: boolean;
     summary: string;
     details?: Record<string, unknown>;
+    /** The execution environment the step ran in, reported beside the outcome. */
+    environment?: environmentkind;
     at: number;
 }
 /** User chosen retention windows; an absent value keeps everything forever. */
@@ -196,6 +204,26 @@ export interface runsettings {
     boardretention?: number;
     /** The verification methods the user allows the verifier agents to use; an empty or absent list keeps every method open as the documented user choice. */
     verifiermethods?: string[];
+    /** True when the user turns the parse offload on: heavy parsing steps route into the offscreen worker pool instead of the page; an absent value keeps every parse inside the page. */
+    parseoffload?: boolean;
+    /** The worker pool size of the offscreen document as a user choice with no hard cap; an absent value lets the pool follow the pending parse queue alone. */
+    workerpoolsize?: number;
+    /** Retention window for stored run state records; an absent window keeps every run state while the keepalive summaries always survive. */
+    runstateretention?: number;
+    /** The origins the user allows to render untrusted markup inside the sandboxframe; an absent list keeps every origin open as the documented user choice. */
+    sandboxorigins?: string[];
+    /** The keepalive heartbeat interval in milliseconds; the roadmap documents thirty seconds while the interval stays the user's choice. */
+    keepaliveinterval?: number;
+    /** The number of silent heartbeat intervals the zombie reaper tolerates before it reaps a run; the roadmap documents three while the number stays the user's choice. */
+    zombieintervals?: number;
+    /** User configured byte ceiling for the stored run state; an absent value never prunes because the pressure response stays a user choice only. */
+    runstatebytes?: number;
+    /** The consent window duration the consent prompt offers, in milliseconds; the prompt always names a boundary and never defaults to unlimited, and every window stays the user's choice. */
+    consentduration?: number;
+    /** Retention window for stored sealed run logs; an absent window keeps every sealed log while the chain verification summaries always survive. */
+    logretention?: number;
+    /** User configured mask shapes for sensitive field shapes beyond the documented password, token, card and secret families; per origin mask rules extend this list. */
+    maskshapes?: string[];
 }
 export interface proposalrequest {
     objective: string;
@@ -218,6 +246,10 @@ export interface planprogress {
     outcomes?: stepoutcome[];
     /** Tabs assigned to the running task so progress tracks work across its tabs. */
     tasktabs?: number[];
+    /** The execution environment of every completed step by step id. */
+    environments?: Record<string, environmentkind>;
+    /** The worker turnaround of every offloaded step by step id, in milliseconds. */
+    turnarounds?: Record<string, number>;
     /** Prior progress snapshots preserved when a new plan replaces the tracked one. */
     prior?: planprogress[];
     updatedat: number;
@@ -4115,4 +4147,282 @@ export interface outputcomparison {
     differences: string[];
     comparedat: number;
 }
+/**
+ * Execution environment contracts of the 1.1.60 family.
+ * Every reviewed step names the concrete environment it executes in: pagecontext runs inside the live page, isolatedworld runs injected logic that page scripts cannot touch, offscreenworker moves heavy parsing into an offscreen document worker pool and sandboxframe renders untrusted markup inside a sandboxed page with no extension privileges.
+ * The consent gates do not move: every environment executes only reviewed steps against granted origins, and no environment ever bypasses the human review.
+ */
+/** The execution environments of the 1.1.60 family: the live page, the isolated world of the scripting api, the offscreen document worker pool and the sandboxed frame. */
+export type environmentkind = "pagecontext" | "isolatedworld" | "offscreenworker" | "sandboxframe";
+/** The per kind environment profile the policy exposes: the environments the kind may run in and the default the executor routes to. */
+export interface environmentrequirement {
+    kind: actionkind;
+    environments: environmentkind[];
+    defaultenvironment: environmentkind;
+}
+/** One executor traffic envelope for the offscreen worker pool: the parse family, the payload reference and the keys the executor moves as transferable buffers. */
+export interface workerrequest {
+    id: string;
+    runid: string;
+    stepid: string;
+    /** The parse family the worker executes such as htmlsnapshot, jsonpayload, tablerows, a11ytree, complexselector or stitchshots. */
+    task: string;
+    payload: string;
+    /** The payload keys the executor moves as transferable buffers where the payload carries them. */
+    transferables: string[];
+    sentat: number;
+}
+/** One worker answer to the executor: the finished result or one streamed partial chunk with its sequence number. */
+export interface workerresponse {
+    id: string;
+    requestid: string;
+    ok: boolean;
+    /** The finished result payload; a partial answer carries its chunk in the partial field instead. */
+    result?: string;
+    /** The sequence number of one streamed partial result; the final answer carries none. */
+    partial?: number;
+    summary: string;
+    receivedat: number;
+}
+/** One sandbox render descriptor: the sanitized markup, the per render nonce and the source origin of the untrusted markup. */
+export interface sandboxrender {
+    id: string;
+    nonce: string;
+    markup: string;
+    sourceorigin: string;
+    stepid: string;
+    renderedat: number;
+}
+/** The result of one sandbox render posted back through postmessage: the nonce it answers, the sanitized text and the render facts. */
+export interface sandboxrenderresult {
+    nonce: string;
+    ok: boolean;
+    text: string;
+    summary: string;
+    at: number;
+}
+/** One keepalive run state with start and stop events: the typed run state that holds a runtime port open while a run stays active and emits a heartbeat on every interval. */
+export interface keepalivestate {
+    runid: string;
+    sessionid: string;
+    state: "active" | "stopped";
+    startedat: number;
+    stoppedat?: number;
+    /** The user configured heartbeat interval in milliseconds; the roadmap documents thirty seconds while the interval stays the user's choice. */
+    interval: number;
+    beats: number;
+    lastbeatat: number;
+    portopen: boolean;
+    events: keepaliveevent[];
+}
+/** One keepalive lifecycle event: the start, a heartbeat, the stop or the reattach after a service worker restart. */
+export interface keepaliveevent {
+    kind: "start" | "heartbeat" | "stop" | "reattach";
+    at: number;
+    detail?: string;
+}
+/** One url history entry of a run: the url, the step that navigated and the time it landed in the run record. */
+export interface urlhistoryentry {
+    url: string;
+    stepid: string;
+    at: number;
+}
+/** The provenance attached to every persisted environment event: the origin, the step and the environment it names. */
+export interface environmentprovenance {
+    origin: string;
+    stepid: string;
+    environment: environmentkind;
+}
+/** The persisted run state of one run: the pending step for restart recovery, the url history, the environment and worker turnaround of every step, the keepalive trail and the zombie view. */
+export interface runstaterecord {
+    runid: string;
+    sessionid: string;
+    planid: string;
+    profileid: string;
+    state: "active" | "recovered" | "reaped" | "completed" | "expired";
+    /** The step that waits when a service worker restart interrupts the run; the executor resumes exactly it. */
+    pendingstepid?: string;
+    urlhistory: urlhistoryentry[];
+    /** The execution environment of every executed step by step id. */
+    environments: Record<string, environmentkind>;
+    /** The worker turnaround of every offloaded step by step id, in milliseconds. */
+    turnarounds: Record<string, number>;
+    keepalive: keepalivestate;
+    /** The provenance of the last persisted environment event. */
+    lastprovenance?: environmentprovenance;
+    updatedat: number;
+}
+/** One worker spawn or teardown event recorded beside step outcomes: the worker count of the pool and the reason of the change. */
+export interface workerevent {
+    id: string;
+    runid: string;
+    kind: "spawn" | "teardown";
+    workers: number;
+    reason: string;
+    provenance: environmentprovenance;
+    at: number;
+}
+/** One spawned offscreen document registry entry: the document, its reasons, its justification and its close time. */
+export interface offscreenregistryentry {
+    document: string;
+    runid: string;
+    reasons: string[];
+    justification: string;
+    createdat: number;
+    closedat?: number;
+}
+/** One storage level run lock that holds a session against concurrent runs. */
+export interface runlock {
+    sessionid: string;
+    runid: string;
+    holder: string;
+    acquiredat: number;
+    /** The user configured lock expiry; an absent expiry keeps the lock until its run releases it. */
+    expiresat?: number;
+}
+/** The sealed persistence envelope of one run state: the payload beside its sha-256 integrity digest so tampering with the persisted run state stays detectable at rest. */
+export interface sealedrunstate {
+    payload: string;
+    algorithm: "sha-256";
+    digest: string;
+    sealedat: number;
+}
+/**
+ * Security part one contracts of the 1.1.61 family.
+ * The trust boundary hardens here: automation runs behind a per origin allowlist under a denydefault posture that refuses every ungranted origin, per site originprofiles grant and deny single action kinds, consentwindows bind every grant in time with a named boundary that never defaults to unlimited, revokerun halts a run mid step as a terminal session event, and every decision lands in an immutable append only run log whose loghash chain makes tampering detectable at read time while maskinputs keeps typed secrets out of every record.
+ * The consent gates do not move: every security operation rides the same session, plan and origin review, and no security record ever bypasses the human review.
+ */
+/** The sensitive classes of the 1.1.61 family: payment, credential, delete and publish steps each need one fresh consent prompt per class per origin. */
+export type sensitiveclass = "payment" | "credential" | "delete" | "publish";
+/** The event kinds of the immutable run log: step transitions, grants, window expiries, revocations, denials, suspensions, resumes and the completion seal. */
+export type logeventkind = "step" | "grant" | "expiry" | "revoke" | "deny" | "suspend" | "resume" | "seal";
+/** The hash chain fields of one immutable log entry: the hash of its predecessor, the entry hash written at append time and the algorithm that derives both. */
+export interface loghash {
+    previous: string;
+    current: string;
+    algorithm: "sha-256";
+}
+/** One append only immutable log entry: the run it belongs to, the event kind, the summary in plain language, the origin and step provenance, the time and the hash chain link written at append time with no later rewrite. */
+export interface immutablelogentry {
+    id: string;
+    runid: string;
+    kind: logeventkind;
+    summary: string;
+    origin: string;
+    /** The step the entry names when it records one step transition, denial or revocation halt. */
+    stepid?: string;
+    at: number;
+    hash: loghash;
+}
+/** The sealed completion record of one run log: the entry count, the final hash that chains the seal to the last entry and the seal time; the seal closes the log with no later append. */
+export interface sealedlog {
+    runid: string;
+    entries: number;
+    sealhash: loghash;
+    sealedat: number;
+}
+/** The stored run log of one run: the append only entries beside the seal that closes them at completion; an unsealed log still accepts appends while a sealed log refuses them. */
+export interface storedrunlog {
+    runid: string;
+    sessionid: string;
+    entries: immutablelogentry[];
+    seal?: sealedlog;
+    updatedat: number;
+}
+/** One per site origin profile: the exact origin, the action kinds the user granted and denied on it, and the review times; the profile consults before every sensitive kind. */
+export interface originprofile {
+    profileid: string;
+    origin: string;
+    grants: actionkind[];
+    denials: actionkind[];
+    createdat: number;
+    updatedat: number;
+}
+/** One allowlist entry of automation origins: the exact origin with no wildcard expansion, the profile workspace it belongs to and the grant time; the active tab grant counts as one explicit single origin entry. */
+export interface automationallowlistentry {
+    origin: string;
+    profileid: string;
+    grantedat: number;
+}
+/** One consent window bound in time: the session and the exact origin it scopes, the user chosen duration with the boundary it names, the kinds it covers and the state; the window expires at its duration boundary and never defaults to unlimited. */
+export interface consentwindow {
+    id: string;
+    sessionid: string;
+    origin: string;
+    startedat: number;
+    /** The user chosen duration in milliseconds; the boundary stays the user's choice with no engine default. */
+    duration: number;
+    expiresat: number;
+    /** The named boundary in plain language such as the duration the prompt offered; the prompt never defaults to unlimited. */
+    boundary: string;
+    kinds: actionkind[];
+    state: "active" | "closed";
+    closedat?: number;
+}
+/** One consent scope grant naming the origin, the kinds and the boundary in a single record; the session start writes it into the immutable log. */
+export interface consentscope {
+    origin: string;
+    kinds: actionkind[];
+    boundary: string;
+    grantedat: number;
+}
+/** One mid run revocation: the terminal session event that halts the pending step and every queued step without executing them, the acting user and the reason. */
+export interface revokerunevent {
+    id: string;
+    sessionid: string;
+    runid: string;
+    haltedstepids: string[];
+    actor: string;
+    reason: string;
+    at: number;
+}
+/** One fresh sensitive class consent per origin: the class the user consented to, the grant time and the optional expiry; each sensitive class needs its own fresh prompt per origin. */
+export interface classconsent {
+    id: string;
+    origin: string;
+    sensitiveclass: sensitiveclass;
+    grantedat: number;
+    expiresat?: number;
+}
+/** One mask rule for sensitive field shapes: the documented password, token, card and secret families extended by the user, optionally scoped to one origin. */
+export interface maskrule {
+    id: string;
+    /** The origin the rule scopes to; an absent origin keeps the rule global. */
+    origin?: string;
+    shapes: string[];
+    createdat: number;
+}
+/** One denied step evidence: the origin, the action kind and the deny reason in plain language, recorded without navigation. */
+export interface deniedevidence {
+    origin: string;
+    kind: string;
+    reason: string;
+    at: number;
+}
+/** One revocation evidence of the plan progress: the halted steps and the revoked step the run stopped at. */
+export interface revocationevidence {
+    haltedstepids: string[];
+    revokedstepid?: string;
+    reason: string;
+    at: number;
+}
+/** The security view of the 1.1.61 family served to the sidepanel and the popup: the automation allowlist, the per origin profiles, the active consent windows with their remaining time, the fresh class consents, the revocation history, the mask rules, the per run chain verification status with the seal hash and the denydefault posture notice. */
+export interface securityview {
+    allowlist: automationallowlistentry[];
+    profiles: originprofile[];
+    windows: consentwindow[];
+    consents: classconsent[];
+    revocations: revokerunevent[];
+    maskrules: maskrule[];
+    chain: Array<{
+        runid: string;
+        valid: boolean;
+        entries: number;
+        brokenat?: number;
+        reason: string;
+        sealhash?: string;
+        sealedat?: number;
+    }>;
+    posture: "denydefault";
+}
 //# sourceMappingURL=types.d.ts.map