@modelprofile.com/browser-runtime 1.0.0

package/readme.md

@@ -0,0 +1,181 @@
+# @modelprofile.com/browser-runtime
+
+Parent-owned, project-scoped Chromium runtime with authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.
+
+## Issue Reporting and Security
+
+For reporting bugs, issues, or security vulnerabilities, please visit [community.foss.global/](https://community.foss.global/). This is the central community hub for all issue reporting. Developers who sign and comply with our contribution agreement and go through identification can also get a [code.foss.global/](https://code.foss.global/) account to submit Pull Requests directly.
+
+## Install
+
+```sh
+pnpm add @modelprofile.com/browser-runtime
+```
+
+The runtime requires Node.js 24 or newer and a non-root Linux host. Production browser sessions require a sandbox-capable Chromium installation.
+
+## Runtime
+
+`BrowserRuntime` owns its lock, profile root, artifact root, project slots, Chromium sessions, egress proxies, capabilities, leases, and cleanup work. The host must make the authorization decision; there is no permissive default.
+
+```typescript
+import { BrowserRuntime } from '@modelprofile.com/browser-runtime';
+
+const runtime = new BrowserRuntime({
+  runtimeDirectory: '/var/lib/example/browser-runtime',
+  authorizeCapability: async ({ projectId, actorId, role, peerId, source }) => {
+    return hostPolicy.authorizeBrowser({ projectId, actorId, role, peerId, source });
+  },
+});
+
+await runtime.start();
+
+const issued = await runtime.issueCapability({
+  projectId: 'project-123',
+  actorId: 'agent-456',
+  role: 'agent',
+  peerId: 'worker-789',
+  source: 'mcp',
+});
+
+// Deliver capabilityToken once to the exact authenticated peer.
+const lease = await runtime.acquireLease({
+  capabilityToken: issued.capabilityToken,
+  peerId: 'worker-789',
+  expectedRole: 'agent',
+  expectedSource: 'mcp',
+});
+
+try {
+  const observation = await lease.executeAgentAction({ action: 'snapshot' });
+  const screenshot = await lease.executeAgentAction({ action: 'screenshot' });
+  console.log(observation, screenshot);
+} finally {
+  await lease.release();
+  await runtime.stop();
+}
+```
+
+Agent actions are limited to `navigate`, `snapshot`, `screenshot`, `click`, `fill`, and `press`. Screenshot results contain artifact metadata, never image bytes. Human leases additionally expose viewport, raw input, direct event/frame subscription, frame acknowledgement, and artifact read/delete methods. JavaScript evaluation is not part of either lease surface.
+
+The first session for a project starts a private authenticated loopback proxy and runs the mandatory confinement probe before the session becomes available. The production probe verifies loopback denial, synthetic DNS traversal, and WebRTC candidate suppression. Browser/session and host-fact injection are not part of the published API.
+
+## Trusted Pipe
+
+The parent attaches a trusted inherited pipe and supplies the peer, Flex scope, and Flex session identities out of band. Incoming frames cannot select a project, actor, role, source, scope, session, or peer. The capability used by the pipe must have been issued with the same immutable bindings.
+
+```typescript
+import {
+  BrowserRuntimeFramedClient,
+  type BrowserRuntime,
+} from '@modelprofile.com/browser-runtime';
+import type { Readable, Writable } from 'node:stream';
+
+declare const runtime: BrowserRuntime;
+declare const childReadable: Readable;
+declare const childWritable: Writable;
+
+const flexCapability = await runtime.issueCapability({
+  projectId: 'project-123',
+  actorId: 'agent-456',
+  role: 'agent',
+  peerId: 'worker-789',
+  source: 'flex',
+  scopeId: 'project-123',
+  sessionId: 'flex-session-1',
+});
+
+runtime.attachTrustedFramedPeer({
+  peerId: 'worker-789',
+  scopeId: 'project-123',
+  sessionId: 'flex-session-1',
+  readable: childReadable,
+  writable: childWritable,
+});
+
+const childClient = new BrowserRuntimeFramedClient({
+  scopeId: 'project-123',
+  sessionId: 'flex-session-1',
+  readable: process.stdin,
+  writable: process.stdout,
+});
+
+await childClient.acquire(flexCapability.capabilityToken);
+const result = await childClient.executeAgentAction({
+  action: 'navigate',
+  url: 'https://example.com/',
+});
+console.log(result);
+await childClient.close();
+```
+
+The framing protocol is versioned length-prefixed JSON with a 256 KiB hard frame ceiling, at most 16 pending requests, and a maximum 60-second request timeout. It supports only acquire, execute, cancel, and release.
+
+## Flex Provider
+
+`BrowserRuntimeFlexToolProvider<TScope>` implements `IFlexToolProvider<TScope>` for one supervised Flex child run. Its resolver returns only the capability token; the framed server validates that token against the parent-bound peer, source, scope, and session. The provider exposes SmartAgent browser tools with only the six allowed agent actions and maps side-effect permissions to `browser.<action>` Flex permissions. Closing or aborting the run releases the lease and closes the inherited-pipe client.
+
+## MCP Handler
+
+`createBrowserRuntimeMcpHttpHandler()` creates a stateless SmartMCP POST handler. Independent client proof is mandatory and the bearer capability must match the authenticated peer with role `agent` and source `mcp`.
+
+```typescript
+import { createBrowserRuntimeMcpHttpHandler } from '@modelprofile.com/browser-runtime';
+
+const mcp = createBrowserRuntimeMcpHttpHandler(runtime, {
+  authenticateMcpRequest: async (request) => {
+    const peerId = await verifyClientCertificateOrSignedRequest(request);
+    return { peerId };
+  },
+  allowedHosts: ['browser.example.com'],
+  trustedOrigins: ['https://browser.example.com'],
+});
+
+export const fetch = (request: Request): Promise<Response> => mcp.handleRequest(request);
+```
+
+The MCP tool list is exactly `browser_navigate`, `browser_snapshot`, `browser_screenshot`, `browser_click`, `browser_fill`, and `browser_press`. It does not expose state-only helpers, tab lifecycle, history, evaluation, frame streaming, artifact reads, raw input, or image bytes.
+
+## Egress And Artifacts
+
+`BrowserEgressProxy` is exported for testing and advanced composition. It uses Basic proxy authentication, one strict DNS/IP validation path for HTTP, WebSocket Upgrade, and CONNECT, public-global-only targets, numeric selected-IP dialing, default ports `80` and `443`, and bounded DNS, request, response, connection, and tunnel lifetimes. WebSocket tunneling starts only after a bounded valid `101` response.
+
+`BrowserArtifactStore` exclusively creates and owns its root, writes generated artifact IDs below keyed project-digest directories, and removes the root on `stop()`. Directories use mode `0700`; files use mode `0600`. Serialized admission enforces per-file, per-project, project-count, aggregate-count, aggregate-byte, and TTL limits before writes. Reads use no-follow file handles and verify size plus SHA-256 integrity before returning trusted-host bytes. Agent, Flex, and MCP surfaces receive metadata only.
+
+## Verification
+
+```sh
+pnpm install
+pnpm run build
+pnpm run check:test
+pnpm test
+```
+
+The real Chromium release check is intentionally separate:
+
+```sh
+pnpm run test:real-chrome
+```
+
+That command sets `BROWSER_RUNTIME_REAL_CHROME=1` and runs the production `LiveBrowserSession`, sandbox requirement, mandatory confinement probe, screenshot artifact path, confirmed shutdown, and profile deletion check.
+
+## License and Legal Information
+
+This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the repository license file.
+
+**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.
+
+### Trademarks
+
+This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.
+
+Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.
+
+### Company Information
+
+Task Venture Capital GmbH<br>
+Registered at District Court Bremen HRB 35230 HB, Germany
+
+For any legal inquiries or further information, please contact us via email at hello@task.vc.
+
+By using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.

package/ts/00_commitinfo_data.ts

@@ -0,0 +1,8 @@
+/**
+ * autocreated commitinfo by @push.rocks/commitinfo
+ */
+export const commitinfo = {
+  name: '@modelprofile.com/browser-runtime',
+  version: '1.0.0',
+  description: 'Parent-owned, project-scoped Chromium runtime with authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.'
+}

package/ts/actions.ts

@@ -0,0 +1,241 @@
+import type {
+  IBrowserClickAction,
+  IBrowserFillAction,
+  IBrowserNavigateAction,
+  IBrowserPressAction,
+  IBrowserScreenshotAction,
+  IBrowserSnapshotAction,
+  IBrowserRuntimeState,
+  TBrowserAgentAction,
+  TBrowserAgentActionResult,
+} from './interfaces.js';
+import { BrowserRuntimeError } from './errors.js';
+import {
+  validateBoundedString,
+  validateExactKeys,
+  validateInteger,
+} from './utils.js';
+
+const optionalTabId = (value: unknown): string | undefined => value === undefined
+  ? undefined
+  : validateBoundedString(value, 'tabId', 1, 128);
+
+const optionalTimeout = (value: unknown): number | undefined => value === undefined
+  ? undefined
+  : validateInteger(value, 'timeoutMs', 100, 120_000);
+
+export const validateAgentAction = (value: unknown): TBrowserAgentAction => {
+  const base = validateExactKeys(value, [
+    'action',
+    'url',
+    'selector',
+    'text',
+    'key',
+    'tabId',
+    'timeoutMs',
+    'maxCharacters',
+    'format',
+    'quality',
+  ], 'agent action');
+  const action = base.action;
+  if (typeof action !== 'string') throw new BrowserRuntimeError('INVALID_INPUT');
+  switch (action) {
+    case 'navigate': {
+      validateExactKeys(value, ['action', 'url', 'tabId', 'timeoutMs'], 'navigate action');
+      const result: IBrowserNavigateAction = {
+        action,
+        url: validateBoundedString(base.url, 'url', 1, 8192),
+      };
+      const tabId = optionalTabId(base.tabId);
+      const timeoutMs = optionalTimeout(base.timeoutMs);
+      if (tabId !== undefined) result.tabId = tabId;
+      if (timeoutMs !== undefined) result.timeoutMs = timeoutMs;
+      return result;
+    }
+    case 'snapshot': {
+      validateExactKeys(value, ['action', 'tabId', 'maxCharacters'], 'snapshot action');
+      const result: IBrowserSnapshotAction = { action };
+      const tabId = optionalTabId(base.tabId);
+      const maxCharacters = base.maxCharacters === undefined
+        ? undefined
+        : validateInteger(base.maxCharacters, 'maxCharacters', 256, 50_000);
+      if (tabId !== undefined) result.tabId = tabId;
+      if (maxCharacters !== undefined) result.maxCharacters = maxCharacters;
+      return result;
+    }
+    case 'screenshot': {
+      validateExactKeys(value, ['action', 'tabId', 'format', 'quality'], 'screenshot action');
+      const result: IBrowserScreenshotAction = { action };
+      const tabId = optionalTabId(base.tabId);
+      if (tabId !== undefined) result.tabId = tabId;
+      if (base.format !== undefined) {
+        if (base.format !== 'jpeg' && base.format !== 'png') {
+          throw new BrowserRuntimeError('INVALID_INPUT');
+        }
+        result.format = base.format;
+      }
+      if (base.quality !== undefined) {
+        result.quality = validateInteger(base.quality, 'quality', 0, 100);
+      }
+      if (result.format === 'png' && result.quality !== undefined) {
+        throw new BrowserRuntimeError('INVALID_INPUT');
+      }
+      return result;
+    }
+    case 'click': {
+      validateExactKeys(value, ['action', 'selector', 'tabId', 'timeoutMs'], 'click action');
+      const result: IBrowserClickAction = {
+        action,
+        selector: validateBoundedString(base.selector, 'selector', 1, 4096),
+      };
+      const tabId = optionalTabId(base.tabId);
+      const timeoutMs = optionalTimeout(base.timeoutMs);
+      if (tabId !== undefined) result.tabId = tabId;
+      if (timeoutMs !== undefined) result.timeoutMs = timeoutMs;
+      return result;
+    }
+    case 'fill': {
+      validateExactKeys(value, ['action', 'selector', 'text', 'tabId', 'timeoutMs'], 'fill action');
+      const result: IBrowserFillAction = {
+        action,
+        selector: validateBoundedString(base.selector, 'selector', 1, 4096),
+        text: typeof base.text === 'string' && base.text.length <= 100_000
+          ? base.text
+          : (() => { throw new BrowserRuntimeError('INVALID_INPUT'); })(),
+      };
+      const tabId = optionalTabId(base.tabId);
+      const timeoutMs = optionalTimeout(base.timeoutMs);
+      if (tabId !== undefined) result.tabId = tabId;
+      if (timeoutMs !== undefined) result.timeoutMs = timeoutMs;
+      return result;
+    }
+    case 'press': {
+      validateExactKeys(value, ['action', 'selector', 'key', 'tabId', 'timeoutMs'], 'press action');
+      const result: IBrowserPressAction = {
+        action,
+        selector: validateBoundedString(base.selector, 'selector', 1, 4096),
+        key: validateBoundedString(base.key, 'key', 1, 64),
+      };
+      const tabId = optionalTabId(base.tabId);
+      const timeoutMs = optionalTimeout(base.timeoutMs);
+      if (tabId !== undefined) result.tabId = tabId;
+      if (timeoutMs !== undefined) result.timeoutMs = timeoutMs;
+      return result;
+    }
+    default:
+      throw new BrowserRuntimeError('INVALID_INPUT');
+  }
+};
+
+const validateRuntimeState = (value: unknown): IBrowserRuntimeState => {
+  const state = validateExactKeys(
+    value,
+    ['status', 'activeTabId', 'viewportRevision', 'viewport', 'tabs', 'lastError'],
+    'browser state',
+  );
+  if (
+    state.status !== 'stopped'
+    && state.status !== 'starting'
+    && state.status !== 'running'
+    && state.status !== 'stopping'
+  ) throw new BrowserRuntimeError('PROTOCOL_ERROR');
+  if (state.activeTabId !== null) validateBoundedString(state.activeTabId, 'activeTabId', 1, 128);
+  validateInteger(state.viewportRevision, 'viewportRevision', 0, Number.MAX_SAFE_INTEGER);
+  const viewport = validateExactKeys(
+    state.viewport,
+    ['width', 'height', 'deviceScaleFactor'],
+    'viewport',
+  );
+  validateInteger(viewport.width, 'viewport.width', 1, 16_384);
+  validateInteger(viewport.height, 'viewport.height', 1, 16_384);
+  if (
+    typeof viewport.deviceScaleFactor !== 'number'
+    || !Number.isFinite(viewport.deviceScaleFactor)
+    || viewport.deviceScaleFactor <= 0
+    || viewport.deviceScaleFactor > 8
+  ) throw new BrowserRuntimeError('PROTOCOL_ERROR');
+  if (!Array.isArray(state.tabs) || state.tabs.length > 256) {
+    throw new BrowserRuntimeError('PROTOCOL_ERROR');
+  }
+  for (const tabValue of state.tabs) {
+    const tab = validateExactKeys(tabValue, [
+      'id',
+      'url',
+      'title',
+      'active',
+      'status',
+      'generation',
+      'appliedViewportRevision',
+      'streaming',
+    ], 'tab');
+    validateBoundedString(tab.id, 'tab.id', 1, 128);
+    if (typeof tab.url !== 'string' || tab.url.length > 8192) throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    if (typeof tab.title !== 'string' || tab.title.length > 2048) throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    if (typeof tab.active !== 'boolean' || typeof tab.streaming !== 'boolean') {
+      throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    }
+    if (tab.status !== 'open' && tab.status !== 'crashed') throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    validateInteger(tab.generation, 'tab.generation', 0, Number.MAX_SAFE_INTEGER);
+    validateInteger(
+      tab.appliedViewportRevision,
+      'tab.appliedViewportRevision',
+      0,
+      Number.MAX_SAFE_INTEGER,
+    );
+  }
+  if (state.lastError !== undefined) {
+    const lastError = validateExactKeys(state.lastError, ['code', 'fatal', 'tabId'], 'lastError');
+    validateBoundedString(lastError.code, 'lastError.code', 1, 128);
+    if (typeof lastError.fatal !== 'boolean') throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    if (lastError.tabId !== undefined) validateBoundedString(lastError.tabId, 'lastError.tabId', 1, 128);
+  }
+  return value as IBrowserRuntimeState;
+};
+
+export const validateAgentActionResult = (value: unknown): TBrowserAgentActionResult => {
+  const result = validateExactKeys(
+    value,
+    ['action', 'state', 'tabId', 'url', 'title', 'text', 'truncated', 'artifact'],
+    'agent action result',
+  );
+  if (
+    result.action === 'navigate'
+    || result.action === 'click'
+    || result.action === 'fill'
+    || result.action === 'press'
+  ) {
+    validateExactKeys(value, ['action', 'state'], 'state action result');
+    validateRuntimeState(result.state);
+    return value as TBrowserAgentActionResult;
+  }
+  if (result.action === 'snapshot') {
+    validateExactKeys(
+      value,
+      ['action', 'tabId', 'url', 'title', 'text', 'truncated', 'state'],
+      'snapshot result',
+    );
+    validateBoundedString(result.tabId, 'tabId', 1, 128);
+    if (typeof result.url !== 'string' || result.url.length > 8192) throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    if (typeof result.title !== 'string' || result.title.length > 2048) throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    if (typeof result.text !== 'string' || result.text.length > 50_000) throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    if (typeof result.truncated !== 'boolean') throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    validateRuntimeState(result.state);
+    return value as TBrowserAgentActionResult;
+  }
+  if (result.action === 'screenshot') {
+    validateExactKeys(value, ['action', 'artifact'], 'screenshot result');
+    const artifact = validateExactKeys(
+      result.artifact,
+      ['artifactId', 'projectId', 'mimeType', 'size', 'createdAt', 'expiresAt'],
+      'artifact metadata',
+    );
+    validateBoundedString(artifact.artifactId, 'artifactId', 1, 128);
+    validateBoundedString(artifact.projectId, 'projectId', 1, 128);
+    validateBoundedString(artifact.mimeType, 'mimeType', 1, 128);
+    validateInteger(artifact.size, 'artifact.size', 0, 64 * 1024 * 1024);
+    validateInteger(artifact.createdAt, 'artifact.createdAt', 0, Number.MAX_SAFE_INTEGER);
+    validateInteger(artifact.expiresAt, 'artifact.expiresAt', 0, Number.MAX_SAFE_INTEGER);
+    return value as TBrowserAgentActionResult;
+  }
+  throw new BrowserRuntimeError('PROTOCOL_ERROR');
+};