Open a browser session on a URL and report what page it landed on. The URL policy is enforced before the session is returned, so a refused address never becomes a session.

Read the current page and return the capabilities it supports, the entities it is about, and anything the compiler refused. Reuses a stored template for the page class when one binds, and compiles a new one only when none does.

List the capabilities already bound in this session, optionally filtered by category and by a maximum risk level. Inspect the page first; this reports what that inspection found.

Run one bound capability and return the complete result: the steps that ran, what changed on the page, whether the intended effect was verified, and the entities the resulting page is about. Only low-risk capabilities execute; anything else is refused with a reason.

Retrieve a stored execution result. Only the session that produced the execution can read it.

Close a session and retire its capabilities. Closing an already closed session is not an error.