@wenathlan/extension 1.1.61 → 1.1.63

package/dist/types.d.ts

@@ -1,9 +1,9 @@
-export declare const protocolversion: "1.1.61";
+export declare const protocolversion: "1.1.63";
 /** Every reviewed action kind. Read kinds observe, interaction kinds move focus, sensitive kinds change page or browser state. */
 export type actionkind = "observe" | "inspect" | "extract" | "wait" | "waitfor" | "waittext" | "readattribute" | "readstyle" | "readgeometry" | "readvalue" | "readtext" | "readhtml" | "countelements" | "readtable" | "readlinks" | "readimages" | "readmeta" | "readforms" | "readstorage" | "highlight" | "tablist" | "windowlist" | "tabsnapshot" | "focus" | "scroll" | "hover" | "clickdeep" | "rightclick" | "doubleclick" | "scrollpage" | "scrollby" | "scrollend" | "scrolltop" | "fullscreen" | "zoomset" | "click" | "type" | "navigate" | "select" | "presskey" | "drag" | "drop" | "upload" | "clear" | "check" | "uncheck" | "toggle" | "submit" | "reload" | "back" | "forward" | "writestorage" | "setattribute" | "removeattribute" | "evaluate" | "tabcreate" | "tabactivate" | "tabclose" | "tabreload" | "windowcreate" | "windowclose" | "windowresize" | "downloadfile" | "movepointer" | "clickpoint" | "shiftclick" | "clicktext" | "clickaria" | "clickname" | "resolvexpath" | "typetime" | "appendtext" | "setvalue" | "typeedit" | "keyhold" | "keyrelease" | "submitsearch" | "selectmulti" | "chooseradio" | "setslider" | "setdate" | "setcolor" | "expanddetails" | "dismissdialog" | "pierceshadow" | "enterframe" | "retryaction" | "mapclicks" | "verifyvisible" | "verifyenabled" | "a11ytree" | "readvisible" | "readertree" | "detectlists" | "detecttables" | "readjson" | "watchmutate" | "waitquiet" | "watchbanner" | "detectinfinitescroll" | "detectvirtual" | "detectlazy" | "readscrollpos" | "readlang" | "readoutline" | "countpages" | "listshadow" | "listframes" | "classifypage" | "fingerprintsection" | "diffsnapshots" | "readselection" | "watchfocus" | "detectsticky" | "detectscrolllock" | "readopengraph" | "detectlanguage" | "deriveselector" | "openlink" | "openprivate" | "reloadcache" | "stopnav" | "waitload" | "waiturl" | "followlink" | "spanav" | "spawait" | "rewritequery" | "setfragment" | "navlist" | "navprofile" | "detecthttp" | "readredirects" | "readfinalurl" | "handleauth" | "printpdf" | "prefetch" | "preconnect" | "deeplink" | "reopentab" | "trailaudit" | "pausenav" | "navintent" | "navrate" | "openclipboard" | "checksafe" | "batchopen" | "querytabs" | "duplicatetab" | "closepattern" | "pintab" | "mutetab" | "movetab" | "movetabwindow" | "grouptabs" | "colorgroup" | "collapsegroup" | "discardtab" | "reloadtabs" | "zoomin" | "zoomout" | "watchtab" | "switchtab" | "maximizewindow" | "minimizewindow" | "restorewindow" | "focuswindow" | "scratchwindow" | "incognitowindow" | "restoretab" | "savelayout" | "restorelayout" | "findclones" | "searchtabs" | "badgetab" | "attachmeta" | "listaudio" | "reopenrun" | "snapshotsession" | "fillform" | "filllabel" | "fillplaceholder" | "detectfields" | "generatevalues" | "saveprofiles" | "asksubmit" | "submitform" | "readerrors" | "retryform" | "runwizard" | "selectchain" | "picktypeahead" | "pickdate" | "attachfile" | "handoffcaptcha" | "fillcard" | "fillcode" | "consentpassword" | "skiphoneypot" | "detectlogin" | "detecttemplate" | "scrapetable" | "exportcsv" | "exportjson" | "exportexcel" | "copytable" | "pushsheets" | "importcsv" | "looprows" | "transformvalues" | "deduperows" | "paginateextract" | "mergepages" | "stamplerows" | "previewgrid" | "streamdisk" | "resumeextract" | "logprovenance" | "batchdownload" | "pausedownload" | "resumedownload" | "verifydownload" | "interceptmime" | "exportnetlog" | "readclipboard" | "writeclipboard" | "copyscreen" | "quarantinedownload" | "scanvirus" | "namecaptures" | "cleanupartifacts" | "shotview" | "shotfullpage" | "shotelement" | "shotregion" | "contactsheet" | "capturepdf" | "recordscreen" | "captureaudio" | "captureframe" | "downloadimages" | "shotcanvas" | "probestream" | "readmedia" | "readassets" | "timelapse" | "convertimage" | "makethumbs" | "fetchurl" | "parsejson" | "parsehtml" | "callrest" | "callgraphql" | "opensocket" | "sendmessage" | "waitmessage" | "watchrequests" | "readheaders" | "capturebodies" | "subscribesse" | "longpoll" | "mapapi" | "extractapi" | "blockrequest" | "mockresponse" | "rewriteheaders" | "setcookies" | "readcookies" | "clearcookies" | "authflow" | "saveapikey" | "routeproxy" | "postform" | "postfiles" | "watchconsole" | "watcherrors" | "watchtasks" | "attachcdp" | "detachcdp" | "cdpcmd" | "watchcdp" | "setbreakpoint" | "stepcode" | "watchexpr" | "overridescript" | "measureflow" | "heapshot" | "trackmemory" | "profilecpu" | "watchshifts" | "traceload" | "annotatetrace" | "replaytrace" | "capturesourcemaps" | "emulatedevice" | "emulatenetwork" | "emulatelocate" | "setuseragent" | "overridepermission" | "blackboxscripts" | "persiststate" | "capturesession" | "restoresession" | "namedsessions" | "diffsessions" | "searchsessions" | "exportsessions" | "importsessions" | "composeworkflow" | "savetemplate" | "runworkflow" | "dryrun" | "delay" | "waitelement" | "compute" | "extractvars" | "listruns" | "condition" | "branch" | "loop" | "repeatuntil" | "whileloop" | "foreach" | "parallel" | "trycatch" | "visitrule" | "urlrule" | "menurule" | "keyrule" | "buttonrule" | "cronrule" | "intervalrule" | "urllistrule" | "webhookrule" | "eventrule";
 export type actionrisk = "read" | "interaction" | "sensitive";
 export type planstate = "draft" | "pending" | "approved" | "rejected" | "expired" | "completed" | "cancelled";
-export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop" | "pause" | "resume" | "complete" | "capability" | "tab" | "window" | "download" | "pointer" | "dialog" | "hold" | "retry" | "observation" | "watch" | "diff" | "navigation" | "redirect" | "auth" | "prefetch" | "rate" | "group" | "layout" | "discard" | "badge" | "fill" | "submit" | "consent" | "handoff" | "scrape" | "export" | "stream" | "provenance" | "resume" | "intercept" | "clipboard" | "quarantine" | "cleanup" | "capture" | "media" | "call" | "socket" | "replay" | "control" | "timeline" | "debugger" | "profile" | "emulation" | "workflow" | "trigger" | "protocol" | "tool" | "model" | "swarm" | "environment" | "worker" | "sandbox" | "grant" | "expiry" | "revoke" | "deny" | "seal" | "mask";
+export type auditkind = "configure" | "session" | "observe" | "proposal" | "approval" | "action" | "error" | "stop" | "pause" | "resume" | "complete" | "capability" | "tab" | "window" | "download" | "pointer" | "dialog" | "hold" | "retry" | "observation" | "watch" | "diff" | "navigation" | "redirect" | "auth" | "prefetch" | "rate" | "group" | "layout" | "discard" | "badge" | "fill" | "submit" | "consent" | "handoff" | "scrape" | "export" | "stream" | "provenance" | "resume" | "intercept" | "clipboard" | "quarantine" | "cleanup" | "capture" | "media" | "call" | "socket" | "replay" | "control" | "timeline" | "debugger" | "profile" | "emulation" | "workflow" | "trigger" | "protocol" | "tool" | "model" | "swarm" | "environment" | "worker" | "sandbox" | "grant" | "expiry" | "revoke" | "deny" | "seal" | "mask" | "vault" | "gate" | "phish" | "defer" | "schema" | "inbound" | "transparency" | "notes" | "scratchpad" | "summary" | "recall" | "correction" | "consentmemory" | "cancel" | "search";
 /** Observation mode classes: passive capture, watched lifetimes and diffing passes. */
 export type observationmode = "passive" | "watching" | "diffing";
 export interface toolstep {
@@ -222,8 +222,28 @@ export interface runsettings {
     consentduration?: number;
     /** Retention window for stored sealed run logs; an absent window keeps every sealed log while the chain verification summaries always survive. */
     logretention?: number;
+    /** The phishguard lookalike distance threshold between zero and one the user chooses; a login origin whose distance to a granted origin crosses the threshold blocks the step. */
+    phishdistance?: number;
+    /** The freshness window of stored phishguard verdicts in milliseconds; an absent window keeps every verdict fresh while the records always survive for the audit trail. */
+    phishfreshness?: number;
     /** User configured mask shapes for sensitive field shapes beyond the documented password, token, card and secret families; per origin mask rules extend this list. */
     maskshapes?: string[];
+    /** Retention window for stored site notes; an absent window keeps every note. */
+    noteretention?: number;
+    /** Retention window for scratchpad entries; an absent window keeps every entry. */
+    scratchpadretention?: number;
+    /** Retention window for stored run summaries; an absent window keeps every summary. */
+    summaryretention?: number;
+    /** Retention window for stored correction memory entries; an absent window keeps every correction. */
+    correctionretention?: number;
+    /** The semantic recall index window in milliseconds; an entry older than the window leaves the live index while its records stay. */
+    recallwindow?: number;
+    /** True when historysearch index building stays on; an absent value keeps the incremental index on. */
+    historyindex?: boolean;
+    /** The user cancelrun rollback preference: queued rolls the queued steps back while none stops the run without a rollback. */
+    cancelrollback?: "queued" | "none";
+    /** The runsummary length window in steps the distillation keeps; an absent window keeps every step with no fixed cap. */
+    summarywindow?: number;
 }
 export interface proposalrequest {
     objective: string;
@@ -250,6 +270,8 @@ export interface planprogress {
     environments?: Record<string, environmentkind>;
     /** The worker turnaround of every offloaded step by step id, in milliseconds. */
     turnarounds?: Record<string, number>;
+    /** The gate wait of every gated step by step id: the confirm gate the step waited at with its waited milliseconds. */
+    gatewaits?: Record<string, gatewaitevidence>;
     /** Prior progress snapshots preserved when a new plan replaces the tracked one. */
     prior?: planprogress[];
     updatedat: number;
@@ -1146,6 +1168,10 @@ export interface shotrecord {
     annotated?: boolean;
     exporttarget?: captureexport;
     target?: string;
+    /** True when redactshot regions covered the capture before storage; the masked regions never reach the stored bytes. */
+    redacted?: boolean;
+    /** The count of redactshot regions the capture seam masked before storage. */
+    redactedregions?: number;
     /** True once the retention window expired the bytes; the metadata stays for the audit trail. */
     bytesexpired?: boolean;
 }
@@ -4295,7 +4321,7 @@ export interface sealedrunstate {
 /** The sensitive classes of the 1.1.61 family: payment, credential, delete and publish steps each need one fresh consent prompt per class per origin. */
 export type sensitiveclass = "payment" | "credential" | "delete" | "publish";
 /** The event kinds of the immutable run log: step transitions, grants, window expiries, revocations, denials, suspensions, resumes and the completion seal. */
-export type logeventkind = "step" | "grant" | "expiry" | "revoke" | "deny" | "suspend" | "resume" | "seal";
+export type logeventkind = "step" | "grant" | "expiry" | "revoke" | "deny" | "suspend" | "resume" | "seal" | "gate" | "phish" | "schema" | "inbound" | "cancel";
 /** The hash chain fields of one immutable log entry: the hash of its predecessor, the entry hash written at append time and the algorithm that derives both. */
 export interface loghash {
     previous: string;
@@ -4424,5 +4450,344 @@ export interface securityview {
         sealedat?: number;
     }>;
     posture: "denydefault";
+    /** The open and resolved confirm gates of the 1.1.62 family with their payloads and human action provenance. */
+    gates?: confirmgate[];
+    /** The gate resolution events with their human action provenance. */
+    resolutions?: gateresolution[];
+    /** The deferred automation commands waiting for their ratelimit bucket reset. */
+    deferred?: deferredevent[];
+    /** The stored phishguard verdicts with their distance scores. */
+    phishverdicts?: phishverdict[];
+    /** The secretvault metadata with labels and scopes only; the values never leave the vault seam. */
+    vault?: secretvaultentry[];
+    /** The connectallow entries of external senders; the list ships empty by default. */
+    connectallow?: connectallowentry[];
+    /** The safedefaults applications with their first seen origins. */
+    safedefaults?: safedefaultapplication[];
+    /** The redactshot regions per origin and page template with their geometry and reason. */
+    redactregions?: redactregion[];
+}
+/**
+ * Security part two contracts of the 1.1.62 family.
+ * The protections for secrets, messages and money live here: the secretvault keeps passwords and tokens behind a vault seam with only labels, scopes, provenance and digests persisting, redactshots mask sensitive capture regions across every capture kind, schemastrict rejects every inbound command field the grammar never declared, origincheck and connectallow guard every runtime message and port connection while dropping unknown senders, ratelimit buckets bound automation commands per origin and per session with deferral until the window resets, confirmpay, confirmdelete and confirmcreds put one distinct human action in front of payments, deletions and credential use with no batch approval and no timeout, phishguard watches login targets for lookalike origins against the granted origins under the user threshold, safedefaults profile unknown origins as reads only, and permdiff records every installed permission change for the transparencypage.
+ * The consent gates do not move: every security operation rides the same session, plan and origin review, and no security record ever bypasses the human review.
+ */
+/** The provenance of one secretvault record: the user typed the secret, or a reviewed session step stored it. */
+export type secretprovenance = "user" | "session";
+/** One secretvault record: the label, the exact origin scope, the profile workspace, the provenance and the sha-256 verification digest; the value itself lives behind the vault seam and never persists in any storage area, log or export. */
+export interface secretvaultentry {
+    vaultid: string;
+    label: string;
+    scope: string;
+    profileid: string;
+    provenance: secretprovenance;
+    algorithm: "sha-256";
+    digest: string;
+    createdat: number;
+    lastusedat?: number;
+}
+/** The vault seam the background implements: values enter and leave through put, fetch and drop only, so no plaintext value ever reaches a storage writer, a log entry or an export path. */
+export interface vaultseam {
+    put(vaultid: string, value: string): Promise<void>;
+    fetch(vaultid: string): Promise<string | undefined>;
+    drop(vaultid: string): Promise<void>;
+}
+/** One redactshot region: the geometry on the capture surface in css pixels, the plain language reason and whether the user drew it or a sensitive field shape derived it. */
+export interface redactregion {
+    id: string;
+    origin: string;
+    template: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    reason: string;
+    source: "fieldshape" | "userdrawn";
+    createdat: number;
+}
+/** The capture surfaces redactshots covers: viewport, element and stitched captures alike. */
+export type capturesurface = "viewport" | "element" | "stitched";
+/** One schemastrict error: the path inside the command, the expected shape, the found shape and the reason in plain language; the error echoes no payload. */
+export interface schemaerror {
+    path: string;
+    expected: string;
+    found: string;
+    reason: string;
+}
+/** One origincheck verdict of an inbound runtime message or port connection: accepted, or dropped with the sender and its origin named. */
+export interface origincheckverdict {
+    accepted: boolean;
+    sender: string;
+    origin: string;
+    reason: string;
+}
+/** One connectallow entry: the external sender the user allowed with its display name and optional origin; the list ships empty by default and holds user managed entries only. */
+export interface connectallowentry {
+    senderid: string;
+    displayname: string;
+    origin?: string;
+    addedat: number;
+}
+/** One ratelimit bucket of automation commands per origin and per session: the user configured bound and window, the used count, the window start and the reset time. */
+export interface ratelimitbucket {
+    origin: string;
+    sessionid: string;
+    limit: number;
+    window: number;
+    used: number;
+    windowstartedat: number;
+    resetsat: number;
+}
+/** One deferred command event: the step the bucket deferred, the reason and the reset time it waits for. */
+export interface deferredevent {
+    id: string;
+    stepid: string;
+    kind: string;
+    origin: string;
+    reason: string;
+    resetsat: number;
+    at: number;
+}
+/** The gated step families of the 1.1.62 family: payments, destructive deletions and credential use each pause in front of a human. */
+export type gatekind = "confirmpay" | "confirmdelete" | "confirmcreds";
+/** One confirm gate: the step it holds, the payload the human reviews and the state only one explicit human action resolves; no timeout ever resolves a gate and no batch approval resolves two. */
+export interface confirmgate {
+    gateid: string;
+    kind: gatekind;
+    stepid: string;
+    runid: string;
+    origin: string;
+    /** confirmpay carries the amount, the payee origin and the target element; confirmdelete carries the target, the scope and the irreversibility; confirmcreds carries the credential label only, never its value. */
+    payload: Record<string, string>;
+    state: "open" | "resolved" | "refused";
+    openedat: number;
+    resolvedat?: number;
+    actor?: string;
+}
+/** One gate resolution event with its human action provenance: one gate, one decision, one acting user. */
+export interface gateresolution {
+    gateid: string;
+    kind: gatekind;
+    stepid: string;
+    decision: "resolved" | "refused";
+    actor: string;
+    at: number;
+}
+/** One gate wait evidence of the progress log: the gate the step waited at and the milliseconds it waited. */
+export interface gatewaitevidence {
+    gateid: string;
+    kind: string;
+    openedat: number;
+    resolvedat: number;
+    waitedms: number;
+}
+/** One phishguard verdict: the login origin checked, the closest granted origin with the lookalike distance, the user threshold and the block decision that names the matched origin. */
+export interface phishverdict {
+    origin: string;
+    matchedorigin?: string;
+    distance: number;
+    threshold: number;
+    blocked: boolean;
+    reason: string;
+    at: number;
+}
+/** One permdiff record between two installed permission versions: the added and removed permissions with the computed time. */
+export interface permdiffrecord {
+    fromversion: string;
+    toversion: string;
+    added: string[];
+    removed: string[];
+    computedat: number;
+}
+/** One safedefaults application: the unknown origin that received the reads only profile with its first seen time. */
+export interface safedefaultapplication {
+    origin: string;
+    firstseenat: number;
+}
+/** One transparency grant row of the transparencypage: the origin, the scope, the boundary and the revoke action it offers. */
+export interface transparencygrant {
+    origin: string;
+    scope: string;
+    boundary: string;
+    grantedat: number;
+}
+/**
+ * Session interface contracts of the 1.1.63 family.
+ * The session becomes the primary interface here: sitenotes keep one note record per origin with title, body and author provenance while sensitive bodies seal at rest, the scratchpad holds append only entries per task with step provenance, runsummary distills a completed run into the origins visited, the kinds executed and the per step outcomes inside the user configured window, semanticrecall embeds past extraction records into a local fingerprint indexed corpus ranked by text similarity with run and step provenance, correctionmemory captures every plan review edit and rejection per origin and kind, consentmemory keeps every grant, denial, expiry and revocation per origin as advisory history that never auto grants, sessiongrid rows derive from the existing session stores with no new state, historysearch indexes session metadata, notes and summaries into one incremental corpus, errorsurface classifies every failed step cause as page, network, policy or gate with a retry hint carrying the policy verdict, and cancelrun rolls the queued steps back only while the executed steps stay untouched in the sealed log.
+ * The consent gates do not move: every interface action rides the same session, plan and origin review, and no interface surface ever bypasses the human review.
+ */
+/** One site note per origin: the title, the plain or sealed body, the author provenance and the timestamps; a sensitive note seals its body at rest so the plain text never persists. */
+export interface sitenote {
+    id: string;
+    origin: string;
+    title: string;
+    /** The plain body of a non sensitive note; a sensitive note carries its sealedbody instead. */
+    body?: string;
+    /** The locally sealed body of a sensitive note; the sealing stays an at rest measure and never replaces the user keychain. */
+    sealedbody?: string;
+    author: string;
+    sensitive: boolean;
+    createdat: number;
+    updatedat: number;
+}
+/** One append only scratchpad entry of one task: the text, its optional step provenance and the timestamp. */
+export interface scratchpadentry {
+    id: string;
+    taskid: string;
+    sessionid: string;
+    text: string;
+    /** The step the entry was written beside; an entry the user writes carries none. */
+    stepid?: string;
+    author: string;
+    at: number;
+}
+/** One distilled run summary of a completed run: the origins visited, the kinds executed, the per step outcomes inside the user configured window and the distillation provenance that names the offscreen worker task. */
+export interface runsummary {
+    runid: string;
+    sessionid: string;
+    origins: string[];
+    kinds: string[];
+    steps: Array<{
+        stepid: string;
+        kind: string;
+        ok: boolean;
+        summary: string;
+    }>;
+    /** The user configured step window the summary keeps; an absent window keeps every step with no fixed cap. */
+    window?: number;
+    task: "runsummary";
+    /** The distillation provenance: the offscreen worker pool or the inline fallback beside the page. */
+    provenance: "offscreenworker" | "inline";
+    distilledat: number;
+}
+/** One semantic recall query: the text to recall and the optional origin scope that stays inside the run scope. */
+export interface recallquery {
+    text: string;
+    origin?: string;
+    /** The user chosen match limit; an absent limit keeps every ranked match. */
+    limit?: number;
+}
+/** One semantic recall index entry: the extraction fingerprint, the origin, the run and step provenance and the indexed text. */
+export interface recallindexentry {
+    fingerprint: string;
+    origin: string;
+    runid: string;
+    stepid: string;
+    text: string;
+    at: number;
+}
+/** One ranked semantic recall match: the indexed entry, the text similarity score and the plain language reason. */
+export interface recallmatch {
+    entry: recallindexentry;
+    score: number;
+    reason: string;
+}
+/** One correction memory entry: the plan review edit or rejection captured per origin and kind, linking the step to its correction. */
+export interface correctionentry {
+    id: string;
+    origin: string;
+    kind: string;
+    stepid: string;
+    source: "edited" | "rejected";
+    /** The step shape before the correction. */
+    original: string;
+    /** The corrected step shape; a rejected step carries none. */
+    corrected?: string;
+    reason: string;
+    at: number;
+}
+/** One consent memory entry per origin: the grant, denial, expiry or revocation decision with its boundary, its kinds and its optional expiry; the record stays advisory and never auto grants. */
+export interface consentmemoryentry {
+    id: string;
+    origin: string;
+    decision: "grant" | "deny" | "expire" | "revoke";
+    boundary: string;
+    kinds: string[];
+    at: number;
+    /** The expiry the decision carried; an absent expiry keeps the record as history only. */
+    expiresat?: number;
+}
+/** One session grid row derived from the session stores with no new state: the session and run ids, the origin set, the live or saved state, the outcome, the step counts, the per tab lock state, the seal hash link of the sealed log chain and the actions the row offers. */
+export interface sessiongridrow {
+    sessionid: string;
+    runid: string;
+    origins: string[];
+    state: "live" | "saved";
+    outcome: string;
+    steps: number;
+    completed: number;
+    lock: "held" | "free";
+    tabid?: number;
+    sealhash?: string;
+    updatedat: number;
+    actions: Array<"resume" | "cancelrun" | "reopen">;
+}
+/** One history search query: the text with the optional origin, time range and outcome filters. */
+export interface historysearchquery {
+    text: string;
+    origin?: string;
+    from?: number;
+    to?: number;
+    outcome?: string;
+}
+/** The corpus sources historysearch indexes: session metadata, site notes and run summaries in one corpus. */
+export type historysource = "session" | "note" | "summary";
+/** One history search corpus entry written incrementally on each store write. */
+export interface historyindexentry {
+    source: historysource;
+    id: string;
+    origin?: string;
+    title: string;
+    text: string;
+    outcome?: string;
+    at: number;
+}
+/** One history search hit with the matched terms highlighted and the sealed run link. */
+export interface historysearchhit {
+    source: historysource;
+    id: string;
+    title: string;
+    excerpt: string;
+    highlights: string[];
+    origin?: string;
+    outcome?: string;
+    at: number;
+}
+/** The cause classes of one error surface: the page, the network, the policy or a confirm gate. */
+export type errorcause = "page" | "network" | "policy" | "gate";
+/** One error surface payload of a failed step: the cause class, the message in plain language, the retry hint with its policy verdict and the context facts. */
+export interface errorsurface {
+    stepid: string;
+    runid: string;
+    cause: errorcause;
+    message: string;
+    retry: {
+        allowed: boolean;
+        reason: string;
+    };
+    context: Record<string, string>;
+    at: number;
+}
+/** The rollback option descriptor of a cancelrun action: the queued steps it rolls back while the executed steps stay untouched. */
+export interface rollbackdescriptor {
+    scope: "queued" | "none";
+    label: string;
+    queuedstepids: string[];
+}
+/** The cancelrun action of one run: the run and the session it stops with its rollback option descriptor. */
+export interface cancelrunaction {
+    runid: string;
+    sessionid: string;
+    rollback: rollbackdescriptor;
+}
+/** The empty state surfaces of the session interface: the session grid, the history search box, the site notes and the scratchpad. */
+export type emptystatesurface = "sessiongrid" | "historysearch" | "sitenotes" | "scratchpad";
+/** One per tab session reference that isolates parallel tabs: the tab, its session, its optional run and its origin. */
+export interface tabsessionref {
+    tabid: number;
+    sessionid: string;
+    runid?: string;
+    origin: string;
+    updatedat: number;
 }
 //# sourceMappingURL=types.d.ts.map