@wenathlan/extension 1.1.60 → 1.1.62

package/dist/redactshots.d.ts

@@ -0,0 +1,54 @@
+import type { capturesurface, redactregion, toolstep } from "./types.js";
+/**
+ * Redactshots logic of the 1.1.62 family.
+ * The capture masking rules live here: sensitive regions of the capture surface — derived from the field shapes the recognizer masks or drawn by the user — cover viewport, element and stitched captures alike, so the stored bytes never carry the sensitive regions while the record keeps the redaction evidence and the reason.
+ * The regions scope to one origin and one page template, and no geometry, region count or shape list is ever hardcoded: every region stays the user's knowledge, mirroring the maskinputs posture.
+ */
+/** Builds one redact region with its geometry in css pixels, its plain language reason and its source; the geometry stays finite and positive so the capture seam draws a real rectangle. */
+export declare function regionof(input: {
+    origin: string;
+    template: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    reason: string;
+    source: "fieldshape" | "userdrawn";
+    now: number;
+    id?: string;
+}): redactregion;
+/** Reads whether one region keeps finite, positive geometry the capture seam can draw. */
+export declare function regionvalid(region: redactregion): boolean;
+/** Reads the regions of one origin and page template: the regions bind to the page they were drawn on and never leak onto another origin or template. */
+export declare function regionsfor(regions: redactregion[], origin: string, template: string): redactregion[];
+/** Derives redact regions from the sensitive field shapes of one form layout: every field whose name matches a masked shape contributes its rectangle, so the capture masks exactly what the recognizer would mask. */
+export declare function fieldshaperegions(input: {
+    origin: string;
+    template: string;
+    fields: Array<{
+        name: string;
+        rect: {
+            x: number;
+            y: number;
+            width: number;
+            height: number;
+        };
+    }>;
+    now: number;
+}): redactregion[];
+/** Merges drawn regions into the stored set: a region of the same origin, template and geometry keeps its first record while a new geometry joins the list. */
+export declare function mergeregions(existing: redactregion[], added: redactregion[]): redactregion[];
+/** Maps one capture kind to its redactshots surface: viewport captures, element captures and stitched captures all carry the same region grammar. */
+export declare function capturesurfaceof(kind: string): capturesurface;
+/** Reads the template name of one capture step: the reviewed option template the user named, or the step kind itself as the page template baseline. */
+export declare function templateof(step: Pick<toolstep, "kind" | "options">): string;
+/** Applies the redact regions to one stored capture record: the record keeps the redaction evidence — the flag and the region count — while the capture seam draws the opaque rectangles before the bytes reach storage, across every capture kind. */
+export declare function redactedshot<T extends {
+    kind: string;
+}>(record: T, regions: redactregion[]): T & {
+    redacted?: boolean;
+    redactedregions?: number;
+};
+/** Builds the redaction evidence summary the audit trail records: the surface, the region count and the reason of every region. */
+export declare function redactionsummary(regions: redactregion[]): string;
+//# sourceMappingURL=redactshots.d.ts.map

package/dist/redactshots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactshots.d.ts","sourceRoot":"","sources":["../redactshots.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAIzE;;;;GAIG;AAEH,6LAA6L;AAC7L,wBAAgB,QAAQ,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAQrN;AAED,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAEzD;AAED,yJAAyJ;AACzJ,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAEpG;AAED,uNAAuN;AACvN,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,EAAE,CAO1M;AAED,+JAA+J;AAC/J,wBAAgB,YAAY,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAO5F;AAED,qJAAqJ;AACrJ,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAI7D;AAED,uJAAuJ;AACvJ,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAW3E;AAED,uPAAuP;AACvP,wBAAgB,YAAY,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAGjJ;AAED,mIAAmI;AACnI,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAKhE"}

package/dist/secretvault.d.ts

@@ -0,0 +1,89 @@
+import type { secretvaultentry, toolstep } from "./types.js";
+/**
+ * Secret vault logic of the 1.1.62 family.
+ * The vault seam lives here: secrets enter through put and leave through fetch at the last possible moment before a credential field, while the persisted records carry only the label, the exact origin scope, the profile workspace, the provenance and the sha-256 verification digest — no plaintext value ever reaches a storage writer, a log entry, a memory record or an export path.
+ * The scan paths refuse secrets in plain sight: a step option, a variable or a plan text whose value digests to a stored vault entry is a leak that refuses the plan, and a raw typed value behind a masked field shape never rides a step at all.
+ * Honest limit: the browser offers no vault hardware, so the seam rides the session storage area the background wires, which keeps values in memory only and never persists them to disk; the persistence layer stores metadata alone, mirroring the immutablelog seam honesty.
+ */
+/** The digest prefix every stored vault digest carries so raw values never persist anywhere. */
+export declare const vaultdigestprefix = "sha256:";
+/** Derives the sha-256 verification digest of one secret value through the platform crypto seam; the digest persists while the value never does. */
+export declare function vaultdigestof(value: string): Promise<string>;
+/** Builds one vault record from its metadata: the label, the exact origin scope, the profile workspace and the provenance; the digest verifies the value behind the seam without ever carrying it. */
+export declare function vaultentryof(input: {
+    label: string;
+    scope: string;
+    profileid: string;
+    provenance: "user" | "session";
+    digest: string;
+    now: number;
+    vaultid?: string;
+}): secretvaultentry;
+/** Creates an in memory vault seam: values live in the map only, which is the honest fallback the background wraps with the session storage area that never persists to disk. */
+export declare function inmemoryvault(): {
+    put(vaultid: string, value: string): Promise<void>;
+    fetch(vaultid: string): Promise<string | undefined>;
+    drop(vaultid: string): Promise<void>;
+};
+/** Stores one secret behind the vault seam and returns its metadata record alone: the value enters the seam and no return path carries it. */
+export declare function vaultstore(input: {
+    seam: {
+        put(vaultid: string, value: string): Promise<void>;
+    };
+    label: string;
+    scope: string;
+    profileid: string;
+    provenance: "user" | "session";
+    value: string;
+    now: number;
+}): Promise<secretvaultentry>;
+/** Reads one secret from the vault seam at the last possible moment before its credential field: the value returns to the dispatching caller only, never to a log writer, and the record stamps its last use. */
+export declare function vaultvaluefor(input: {
+    seam: {
+        fetch(vaultid: string): Promise<string | undefined>;
+    };
+    entry: secretvaultentry;
+}): Promise<{
+    ok: boolean;
+    value?: string;
+    reason: string;
+    used?: secretvaultentry;
+}>;
+/** Drops one secret from the vault seam; the metadata record leaves with it because a deleted secret leaves no trace a surface could read. */
+export declare function vaultdelete(input: {
+    seam: {
+        drop(vaultid: string): Promise<void>;
+    };
+    entry: secretvaultentry;
+}): Promise<{
+    dropped: boolean;
+    label: string;
+    reason: string;
+}>;
+/** Reads whether one vault record covers an origin: the scope binds to exactly one origin, so a secret of one site never rides another site. */
+export declare function vaultcovers(entry: secretvaultentry, origin: string): boolean;
+/** Scans candidate step values, variables and plan texts for leaked secrets: a candidate whose sha-256 digest matches a stored vault digest is a leak the plan refuses, because a plaintext secret outside the vault never rides a step, a variable or a plan. */
+export declare function secretleakscan(input: {
+    candidates: string[];
+    entries: secretvaultentry[];
+}): Promise<{
+    leaks: string[];
+    reason: string;
+}>;
+/** Reads whether one step carries a raw typed value behind a masked field shape: a credential step names its vault label instead, because a raw password or token value never rides a step option. */
+export declare function secretshapecarrying(step: Pick<toolstep, "kind" | "target" | "value" | "options">): {
+    carries: boolean;
+    reason: string;
+};
+/** Builds the vault view the surfaces render: the labels, scopes, provenance and last use times only, because no surface ever displays or exports a secret value. */
+export declare function vaultview(entries: secretvaultentry[]): Array<{
+    vaultid: string;
+    label: string;
+    scope: string;
+    provenance: string;
+    createdat: number;
+    lastusedat?: number;
+}>;
+/** Builds the plain language prompt of one credential step: the label the vault carries, never the value. */
+export declare function vaultprompttext(entry: secretvaultentry, origin: string): string;
+//# sourceMappingURL=secretvault.d.ts.map

package/dist/secretvault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretvault.d.ts","sourceRoot":"","sources":["../secretvault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI7D;;;;;GAKG;AAEH,gGAAgG;AAChG,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAE3C,oJAAoJ;AACpJ,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlE;AAED,sMAAsM;AACtM,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAKxL;AAED,iLAAiL;AACjL,wBAAgB,aAAa,IAAI;IAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAOjL;AAED,8IAA8I;AAC9I,wBAAsB,UAAU,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE;QAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAKhP;AAED,iNAAiN;AACjN,wBAAsB,aAAa,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE;QAAE,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAIxN;AAED,8IAA8I;AAC9I,wBAAsB,WAAW,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAGlL;AAED,gJAAgJ;AAChJ,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE5E;AAED,kQAAkQ;AAClQ,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAS/I;AAQD,sMAAsM;AACtM,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOvI;AAED,qKAAqK;AACrK,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3K;AAED,6GAA6G;AAC7G,wBAAgB,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/E"}

package/dist/transparency.d.ts

@@ -0,0 +1,46 @@
+import type { automationallowlistentry, connectallowentry, consentwindow, originprofile, permdiffrecord, transparencygrant } from "./types.js";
+/**
+ * Transparency logic of the 1.1.62 family.
+ * The transparencypage grammar lives here: every active grant reads as one row with its origin, scope and boundary, every consent window ever granted stays listed with its expiry even after it closed, the connectallow entries list with their senders, and the permdiff of each installed update records the added and removed permissions between two versions.
+ * The revoke actions stay one descriptor per grant row, because every listed grant revokes from the same page that shows it.
+ */
+/** Computes the permdiff between two permission versions: the permissions the new version added, the permissions it removed and the computed time; an unchanged set carries empty lists while the record still lands for the audit trail. */
+export declare function permissiondiff(input: {
+    from: string[];
+    to: string[];
+    fromversion: string;
+    toversion: string;
+    now: number;
+}): permdiffrecord;
+/** Reads whether one permdiff record reports a change between its versions; an unchanged permission set still records for the audit trail. */
+export declare function permdiffchanged(diff: permdiffrecord): boolean;
+/** Builds the plain language summary of one permdiff record for the transparencypage. */
+export declare function permdiffsummary(diff: permdiffrecord): string;
+/** Builds the transparency grant rows of every active grant: each allowlist origin carries its profile workspace scope and its grant time, and each originprofile carries its per kind scope. */
+export declare function transparencygrants(input: {
+    allowlist: automationallowlistentry[];
+    profiles: originprofile[];
+}): transparencygrant[];
+/** Builds the revoke action descriptor of one transparency grant row: every listed grant revokes from the same page that shows it. */
+export declare function revokeaction(grant: transparencygrant): {
+    action: "revoke";
+    origin: string;
+    scope: string;
+};
+/** Lists every consent window ever granted with its expiry: closed windows stay listed beside the active ones because the transparency page shows the whole grant history. */
+export declare function windowhistory(windows: consentwindow[]): Array<{
+    id: string;
+    origin: string;
+    state: string;
+    boundary: string;
+    startedat: number;
+    expiresat: number;
+}>;
+/** Lists the connectallow entries with their senders: the display names, the sender ids and the origin scopes the user allowed. */
+export declare function connectallowlist(entries: connectallowentry[]): Array<{
+    senderid: string;
+    displayname: string;
+    origin?: string;
+    addedat: number;
+}>;
+//# sourceMappingURL=transparency.d.ts.map

package/dist/transparency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transparency.d.ts","sourceRoot":"","sources":["../transparency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/I;;;;GAIG;AAEH,6OAA6O;AAC7O,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,CAK3I;AAED,8IAA8I;AAC9I,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAE7D;AAED,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAM5D;AAED,iMAAiM;AACjM,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,GAAG,iBAAiB,EAAE,CAMnI;AAED,sIAAsI;AACtI,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAE1G;AAED,8KAA8K;AAC9K,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAEpK;AAED,mIAAmI;AACnI,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAEjJ"}

package/dist/types.d.ts

@@ -1,9 +1,9 @@
-export declare const protocolversion: "1.1.60";
+export declare const protocolversion: "1.1.62";
 /** Every reviewed action kind. Read kinds observe, interaction kinds move focus, sensitive kinds change page or browser state. */
 export type actionkind = "observe" | "inspect" | "extract" | "wait" | "waitfor" | "waittext" | "readattribute" | "readstyle" | "readgeometry" | "readvalue" | "readtext" | "readhtml" | "countelements" | "readtable" | "readlinks" | "readimages" | "readmeta" | "readforms" | "readstorage" | "highlight" | "tablist" | "windowlist" | "tabsnapshot" | "focus" | "scroll" | "hover" | "clickdeep" | "rightclick" | "doubleclick" | "scrollpage" | "scrollby" | "scrollend" | "scrolltop" | "fullscreen" | "zoomset" | "click" | "type" | "navigate" | "select" | "presskey" | "drag" | "drop" | "upload" | "clear" | "check" | "uncheck" | "toggle" | "submit" | "reload" | "back" | "forward" | "writestorage" | "setattribute" | "removeattribute" | "evaluate" | "tabcreate" | "tabactivate" | "tabclose" | "tabreload" | "windowcreate" | "windowclose" | "windowresize" | "downloadfile" | "movepointer" | "clickpoint" | "shiftclick" | "clicktext" | "clickaria" | "clickname" | "resolvexpath" | "typetime" | "appendtext" | "setvalue" | "typeedit" | "keyhold" | "keyrelease" | "submitsearch" | "selectmulti" | "chooseradio" | "setslider" | "setdate" | "setcolor" | "expanddetails" | "dismissdialog" | "pierceshadow" | "enterframe" | "retryaction" | "mapclicks" | "verifyvisible" | "verifyenabled" | "a11ytree" | "readvisible" | "readertree" | "detectlists" | "detecttables" | "readjson" | "watchmutate" | "waitquiet" | "watchbanner" | "detectinfinitescroll" | "detectvirtual" | "detectlazy" | "readscrollpos" | "readlang" | "readoutline" | "countpages" | "listshadow" | "listframes" | "classifypage" | "fingerprintsection" | "diffsnapshots" | "readselection" | "watchfocus" | "detectsticky" | "detectscrolllock" | "readopengraph" | "detectlanguage" | "deriveselector" | "openlink" | "openprivate" | "reloadcache" | "stopnav" | "waitload" | "waiturl" | "followlink" | "spanav" | "spawait" | "rewritequery" | "setfragment" | "navlist" | "navprofile" | "detecthttp" | "readredirects" | "readfinalurl" | "handleauth" | "printpdf" | "prefetch" | "preconnect" | "deeplink" | "reopentab" | "trailaudit" | "pausenav" | "navintent" | "navrate" | "openclipboard" | "checksafe" | "batchopen" | "querytabs" | "duplicatetab" | "closepattern" | "pintab" | "mutetab" | "movetab" | "movetabwindow" | "grouptabs" | "colorgroup" | "collapsegroup" | "discardtab" | "reloadtabs" | "zoomin" | "zoomout" | "watchtab" | "switchtab" | "maximizewindow" | "minimizewindow" | "restorewindow" | "focuswindow" | "scratchwindow" | "incognitowindow" | "restoretab" | "savelayout" | "restorelayout" | "findclones" | "searchtabs" | "badgetab" | "attachmeta" | "listaudio" | "reopenrun" | "snapshotsession" | "fillform" | "filllabel" | "fillplaceholder" | "detectfields" | "generatevalues" | "saveprofiles" | "asksubmit" | "submitform" | "readerrors" | "retryform" | "runwizard" | "selectchain" | "picktypeahead" | "pickdate" | "attachfile" | "handoffcaptcha" | "fillcard" | "fillcode" | "consentpassword" | "skiphoneypot" | "detectlogin" | "detecttemplate" | "scrapetable" | "exportcsv" | "exportjson" | "exportexcel" | "copytable" | "pushsheets" | "importcsv" | "looprows" | "transformvalues" | "deduperows" | "paginateextract" | "mergepages" | "stamplerows" | "previewgrid" | "streamdisk" | "resumeextract" | "logprovenance" | "batchdownload" | "pausedownload" | "resumedownload" | "verifydownload" | "interceptmime" | "exportnetlog" | "readclipboard" | "writeclipboard" | "copyscreen" | "quarantinedownload" | "scanvirus" | "namecaptures" | "cleanupartifacts" | "shotview" | "shotfullpage" | "shotelement" | "shotregion" | "contactsheet" | "capturepdf" | "recordscreen" | "captureaudio" | "captureframe" | "downloadimages" | "shotcanvas" | "probestream" | "readmedia" | "readassets" | "timelapse" | "convertimage" | "makethumbs" | "fetchurl" | "parsejson" | "parsehtml" | "callrest" | "callgraphql" | "opensocket" | "sendmessage" | "waitmessage" | "watchrequests" | "readheaders" | "capturebodies" | "subscribesse" | "longpoll" | "mapapi" | "extractapi" | "blockrequest" | "mockresponse" | "rewriteheaders" | "setcookies" | "readcookies" | "clearcookies" | "authflow" | "saveapikey" | "routeproxy" | "postform" | "postfiles" | "watchconsole" | "watcherrors" | "watchtasks" | "attachcdp" | "detachcdp" | "cdpcmd" | "watchcdp" | "setbreakpoint" | "stepcode" | "watchexpr" | "overridescript" | "measureflow" | "heapshot" | "trackmemory" | "profilecpu" | "watchshifts" | "traceload" | "annotatetrace" | "replaytrace" | "capturesourcemaps" | "emulatedevice" | "emulatenetwork" | "emulatelocate" | "setuseragent" | "overridepermission" | "blackboxscripts" | "persiststate" | "capturesession" | "restoresession" | "namedsessions" | "diffsessions" | "searchsessions" | "exportsessions" | "importsessions" | "composeworkflow" | "savetemplate" | "runworkflow" | "dryrun" | "delay" | "waitelement" | "compute" | "extractvars" | "listruns" | "condition" | "branch" | "loop" | "repeatuntil" | "whileloop" | "foreach" | "parallel" | "trycatch" | "visitrule" | "urlrule" | "menurule" | "keyrule" | "buttonrule" | "cronrule" | "intervalrule" | "urllistrule" | "webhookrule" | "eventrule";
 export type actionrisk = "read" | "interaction" | "sensitive";
 export type planstate = "draft" | "pending" | "approved" | "rejected" | "expired" | "completed" | "cancelled";
-export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop" | "pause" | "resume" | "complete" | "capability" | "tab" | "window" | "download" | "pointer" | "dialog" | "hold" | "retry" | "observation" | "watch" | "diff" | "navigation" | "redirect" | "auth" | "prefetch" | "rate" | "group" | "layout" | "discard" | "badge" | "fill" | "submit" | "consent" | "handoff" | "scrape" | "export" | "stream" | "provenance" | "resume" | "intercept" | "clipboard" | "quarantine" | "cleanup" | "capture" | "media" | "call" | "socket" | "replay" | "control" | "timeline" | "debugger" | "profile" | "emulation" | "workflow" | "trigger" | "protocol" | "tool" | "model" | "swarm" | "environment" | "worker" | "sandbox";
+export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop" | "pause" | "resume" | "complete" | "capability" | "tab" | "window" | "download" | "pointer" | "dialog" | "hold" | "retry" | "observation" | "watch" | "diff" | "navigation" | "redirect" | "auth" | "prefetch" | "rate" | "group" | "layout" | "discard" | "badge" | "fill" | "submit" | "consent" | "handoff" | "scrape" | "export" | "stream" | "provenance" | "resume" | "intercept" | "clipboard" | "quarantine" | "cleanup" | "capture" | "media" | "call" | "socket" | "replay" | "control" | "timeline" | "debugger" | "profile" | "emulation" | "workflow" | "trigger" | "protocol" | "tool" | "model" | "swarm" | "environment" | "worker" | "sandbox" | "grant" | "expiry" | "revoke" | "deny" | "seal" | "mask" | "vault" | "gate" | "phish" | "defer" | "schema" | "inbound" | "transparency";
 /** Observation mode classes: passive capture, watched lifetimes and diffing passes. */
 export type observationmode = "passive" | "watching" | "diffing";
 export interface toolstep {
@@ -218,6 +218,16 @@ export interface runsettings {
     zombieintervals?: number;
     /** User configured byte ceiling for the stored run state; an absent value never prunes because the pressure response stays a user choice only. */
     runstatebytes?: number;
+    /** The consent window duration the consent prompt offers, in milliseconds; the prompt always names a boundary and never defaults to unlimited, and every window stays the user's choice. */
+    consentduration?: number;
+    /** Retention window for stored sealed run logs; an absent window keeps every sealed log while the chain verification summaries always survive. */
+    logretention?: number;
+    /** The phishguard lookalike distance threshold between zero and one the user chooses; a login origin whose distance to a granted origin crosses the threshold blocks the step. */
+    phishdistance?: number;
+    /** The freshness window of stored phishguard verdicts in milliseconds; an absent window keeps every verdict fresh while the records always survive for the audit trail. */
+    phishfreshness?: number;
+    /** User configured mask shapes for sensitive field shapes beyond the documented password, token, card and secret families; per origin mask rules extend this list. */
+    maskshapes?: string[];
 }
 export interface proposalrequest {
     objective: string;
@@ -244,6 +254,8 @@ export interface planprogress {
     environments?: Record<string, environmentkind>;
     /** The worker turnaround of every offloaded step by step id, in milliseconds. */
     turnarounds?: Record<string, number>;
+    /** The gate wait of every gated step by step id: the confirm gate the step waited at with its waited milliseconds. */
+    gatewaits?: Record<string, gatewaitevidence>;
     /** Prior progress snapshots preserved when a new plan replaces the tracked one. */
     prior?: planprogress[];
     updatedat: number;
@@ -1140,6 +1152,10 @@ export interface shotrecord {
     annotated?: boolean;
     exporttarget?: captureexport;
     target?: string;
+    /** True when redactshot regions covered the capture before storage; the masked regions never reach the stored bytes. */
+    redacted?: boolean;
+    /** The count of redactshot regions the capture seam masked before storage. */
+    redactedregions?: number;
     /** True once the retention window expired the bytes; the metadata stays for the audit trail. */
     bytesexpired?: boolean;
 }
@@ -4281,4 +4297,302 @@ export interface sealedrunstate {
     digest: string;
     sealedat: number;
 }
+/**
+ * Security part one contracts of the 1.1.61 family.
+ * The trust boundary hardens here: automation runs behind a per origin allowlist under a denydefault posture that refuses every ungranted origin, per site originprofiles grant and deny single action kinds, consentwindows bind every grant in time with a named boundary that never defaults to unlimited, revokerun halts a run mid step as a terminal session event, and every decision lands in an immutable append only run log whose loghash chain makes tampering detectable at read time while maskinputs keeps typed secrets out of every record.
+ * The consent gates do not move: every security operation rides the same session, plan and origin review, and no security record ever bypasses the human review.
+ */
+/** The sensitive classes of the 1.1.61 family: payment, credential, delete and publish steps each need one fresh consent prompt per class per origin. */
+export type sensitiveclass = "payment" | "credential" | "delete" | "publish";
+/** The event kinds of the immutable run log: step transitions, grants, window expiries, revocations, denials, suspensions, resumes and the completion seal. */
+export type logeventkind = "step" | "grant" | "expiry" | "revoke" | "deny" | "suspend" | "resume" | "seal" | "gate" | "phish" | "schema" | "inbound";
+/** The hash chain fields of one immutable log entry: the hash of its predecessor, the entry hash written at append time and the algorithm that derives both. */
+export interface loghash {
+    previous: string;
+    current: string;
+    algorithm: "sha-256";
+}
+/** One append only immutable log entry: the run it belongs to, the event kind, the summary in plain language, the origin and step provenance, the time and the hash chain link written at append time with no later rewrite. */
+export interface immutablelogentry {
+    id: string;
+    runid: string;
+    kind: logeventkind;
+    summary: string;
+    origin: string;
+    /** The step the entry names when it records one step transition, denial or revocation halt. */
+    stepid?: string;
+    at: number;
+    hash: loghash;
+}
+/** The sealed completion record of one run log: the entry count, the final hash that chains the seal to the last entry and the seal time; the seal closes the log with no later append. */
+export interface sealedlog {
+    runid: string;
+    entries: number;
+    sealhash: loghash;
+    sealedat: number;
+}
+/** The stored run log of one run: the append only entries beside the seal that closes them at completion; an unsealed log still accepts appends while a sealed log refuses them. */
+export interface storedrunlog {
+    runid: string;
+    sessionid: string;
+    entries: immutablelogentry[];
+    seal?: sealedlog;
+    updatedat: number;
+}
+/** One per site origin profile: the exact origin, the action kinds the user granted and denied on it, and the review times; the profile consults before every sensitive kind. */
+export interface originprofile {
+    profileid: string;
+    origin: string;
+    grants: actionkind[];
+    denials: actionkind[];
+    createdat: number;
+    updatedat: number;
+}
+/** One allowlist entry of automation origins: the exact origin with no wildcard expansion, the profile workspace it belongs to and the grant time; the active tab grant counts as one explicit single origin entry. */
+export interface automationallowlistentry {
+    origin: string;
+    profileid: string;
+    grantedat: number;
+}
+/** One consent window bound in time: the session and the exact origin it scopes, the user chosen duration with the boundary it names, the kinds it covers and the state; the window expires at its duration boundary and never defaults to unlimited. */
+export interface consentwindow {
+    id: string;
+    sessionid: string;
+    origin: string;
+    startedat: number;
+    /** The user chosen duration in milliseconds; the boundary stays the user's choice with no engine default. */
+    duration: number;
+    expiresat: number;
+    /** The named boundary in plain language such as the duration the prompt offered; the prompt never defaults to unlimited. */
+    boundary: string;
+    kinds: actionkind[];
+    state: "active" | "closed";
+    closedat?: number;
+}
+/** One consent scope grant naming the origin, the kinds and the boundary in a single record; the session start writes it into the immutable log. */
+export interface consentscope {
+    origin: string;
+    kinds: actionkind[];
+    boundary: string;
+    grantedat: number;
+}
+/** One mid run revocation: the terminal session event that halts the pending step and every queued step without executing them, the acting user and the reason. */
+export interface revokerunevent {
+    id: string;
+    sessionid: string;
+    runid: string;
+    haltedstepids: string[];
+    actor: string;
+    reason: string;
+    at: number;
+}
+/** One fresh sensitive class consent per origin: the class the user consented to, the grant time and the optional expiry; each sensitive class needs its own fresh prompt per origin. */
+export interface classconsent {
+    id: string;
+    origin: string;
+    sensitiveclass: sensitiveclass;
+    grantedat: number;
+    expiresat?: number;
+}
+/** One mask rule for sensitive field shapes: the documented password, token, card and secret families extended by the user, optionally scoped to one origin. */
+export interface maskrule {
+    id: string;
+    /** The origin the rule scopes to; an absent origin keeps the rule global. */
+    origin?: string;
+    shapes: string[];
+    createdat: number;
+}
+/** One denied step evidence: the origin, the action kind and the deny reason in plain language, recorded without navigation. */
+export interface deniedevidence {
+    origin: string;
+    kind: string;
+    reason: string;
+    at: number;
+}
+/** One revocation evidence of the plan progress: the halted steps and the revoked step the run stopped at. */
+export interface revocationevidence {
+    haltedstepids: string[];
+    revokedstepid?: string;
+    reason: string;
+    at: number;
+}
+/** The security view of the 1.1.61 family served to the sidepanel and the popup: the automation allowlist, the per origin profiles, the active consent windows with their remaining time, the fresh class consents, the revocation history, the mask rules, the per run chain verification status with the seal hash and the denydefault posture notice. */
+export interface securityview {
+    allowlist: automationallowlistentry[];
+    profiles: originprofile[];
+    windows: consentwindow[];
+    consents: classconsent[];
+    revocations: revokerunevent[];
+    maskrules: maskrule[];
+    chain: Array<{
+        runid: string;
+        valid: boolean;
+        entries: number;
+        brokenat?: number;
+        reason: string;
+        sealhash?: string;
+        sealedat?: number;
+    }>;
+    posture: "denydefault";
+    /** The open and resolved confirm gates of the 1.1.62 family with their payloads and human action provenance. */
+    gates?: confirmgate[];
+    /** The gate resolution events with their human action provenance. */
+    resolutions?: gateresolution[];
+    /** The deferred automation commands waiting for their ratelimit bucket reset. */
+    deferred?: deferredevent[];
+    /** The stored phishguard verdicts with their distance scores. */
+    phishverdicts?: phishverdict[];
+    /** The secretvault metadata with labels and scopes only; the values never leave the vault seam. */
+    vault?: secretvaultentry[];
+    /** The connectallow entries of external senders; the list ships empty by default. */
+    connectallow?: connectallowentry[];
+    /** The safedefaults applications with their first seen origins. */
+    safedefaults?: safedefaultapplication[];
+    /** The redactshot regions per origin and page template with their geometry and reason. */
+    redactregions?: redactregion[];
+}
+/**
+ * Security part two contracts of the 1.1.62 family.
+ * The protections for secrets, messages and money live here: the secretvault keeps passwords and tokens behind a vault seam with only labels, scopes, provenance and digests persisting, redactshots mask sensitive capture regions across every capture kind, schemastrict rejects every inbound command field the grammar never declared, origincheck and connectallow guard every runtime message and port connection while dropping unknown senders, ratelimit buckets bound automation commands per origin and per session with deferral until the window resets, confirmpay, confirmdelete and confirmcreds put one distinct human action in front of payments, deletions and credential use with no batch approval and no timeout, phishguard watches login targets for lookalike origins against the granted origins under the user threshold, safedefaults profile unknown origins as reads only, and permdiff records every installed permission change for the transparencypage.
+ * The consent gates do not move: every security operation rides the same session, plan and origin review, and no security record ever bypasses the human review.
+ */
+/** The provenance of one secretvault record: the user typed the secret, or a reviewed session step stored it. */
+export type secretprovenance = "user" | "session";
+/** One secretvault record: the label, the exact origin scope, the profile workspace, the provenance and the sha-256 verification digest; the value itself lives behind the vault seam and never persists in any storage area, log or export. */
+export interface secretvaultentry {
+    vaultid: string;
+    label: string;
+    scope: string;
+    profileid: string;
+    provenance: secretprovenance;
+    algorithm: "sha-256";
+    digest: string;
+    createdat: number;
+    lastusedat?: number;
+}
+/** The vault seam the background implements: values enter and leave through put, fetch and drop only, so no plaintext value ever reaches a storage writer, a log entry or an export path. */
+export interface vaultseam {
+    put(vaultid: string, value: string): Promise<void>;
+    fetch(vaultid: string): Promise<string | undefined>;
+    drop(vaultid: string): Promise<void>;
+}
+/** One redactshot region: the geometry on the capture surface in css pixels, the plain language reason and whether the user drew it or a sensitive field shape derived it. */
+export interface redactregion {
+    id: string;
+    origin: string;
+    template: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    reason: string;
+    source: "fieldshape" | "userdrawn";
+    createdat: number;
+}
+/** The capture surfaces redactshots covers: viewport, element and stitched captures alike. */
+export type capturesurface = "viewport" | "element" | "stitched";
+/** One schemastrict error: the path inside the command, the expected shape, the found shape and the reason in plain language; the error echoes no payload. */
+export interface schemaerror {
+    path: string;
+    expected: string;
+    found: string;
+    reason: string;
+}
+/** One origincheck verdict of an inbound runtime message or port connection: accepted, or dropped with the sender and its origin named. */
+export interface origincheckverdict {
+    accepted: boolean;
+    sender: string;
+    origin: string;
+    reason: string;
+}
+/** One connectallow entry: the external sender the user allowed with its display name and optional origin; the list ships empty by default and holds user managed entries only. */
+export interface connectallowentry {
+    senderid: string;
+    displayname: string;
+    origin?: string;
+    addedat: number;
+}
+/** One ratelimit bucket of automation commands per origin and per session: the user configured bound and window, the used count, the window start and the reset time. */
+export interface ratelimitbucket {
+    origin: string;
+    sessionid: string;
+    limit: number;
+    window: number;
+    used: number;
+    windowstartedat: number;
+    resetsat: number;
+}
+/** One deferred command event: the step the bucket deferred, the reason and the reset time it waits for. */
+export interface deferredevent {
+    id: string;
+    stepid: string;
+    kind: string;
+    origin: string;
+    reason: string;
+    resetsat: number;
+    at: number;
+}
+/** The gated step families of the 1.1.62 family: payments, destructive deletions and credential use each pause in front of a human. */
+export type gatekind = "confirmpay" | "confirmdelete" | "confirmcreds";
+/** One confirm gate: the step it holds, the payload the human reviews and the state only one explicit human action resolves; no timeout ever resolves a gate and no batch approval resolves two. */
+export interface confirmgate {
+    gateid: string;
+    kind: gatekind;
+    stepid: string;
+    runid: string;
+    origin: string;
+    /** confirmpay carries the amount, the payee origin and the target element; confirmdelete carries the target, the scope and the irreversibility; confirmcreds carries the credential label only, never its value. */
+    payload: Record<string, string>;
+    state: "open" | "resolved" | "refused";
+    openedat: number;
+    resolvedat?: number;
+    actor?: string;
+}
+/** One gate resolution event with its human action provenance: one gate, one decision, one acting user. */
+export interface gateresolution {
+    gateid: string;
+    kind: gatekind;
+    stepid: string;
+    decision: "resolved" | "refused";
+    actor: string;
+    at: number;
+}
+/** One gate wait evidence of the progress log: the gate the step waited at and the milliseconds it waited. */
+export interface gatewaitevidence {
+    gateid: string;
+    kind: string;
+    openedat: number;
+    resolvedat: number;
+    waitedms: number;
+}
+/** One phishguard verdict: the login origin checked, the closest granted origin with the lookalike distance, the user threshold and the block decision that names the matched origin. */
+export interface phishverdict {
+    origin: string;
+    matchedorigin?: string;
+    distance: number;
+    threshold: number;
+    blocked: boolean;
+    reason: string;
+    at: number;
+}
+/** One permdiff record between two installed permission versions: the added and removed permissions with the computed time. */
+export interface permdiffrecord {
+    fromversion: string;
+    toversion: string;
+    added: string[];
+    removed: string[];
+    computedat: number;
+}
+/** One safedefaults application: the unknown origin that received the reads only profile with its first seen time. */
+export interface safedefaultapplication {
+    origin: string;
+    firstseenat: number;
+}
+/** One transparency grant row of the transparencypage: the origin, the scope, the boundary and the revoke action it offers. */
+export interface transparencygrant {
+    origin: string;
+    scope: string;
+    boundary: string;
+    grantedat: number;
+}
 //# sourceMappingURL=types.d.ts.map