@modelprofile.com/browser-runtime 1.0.0

package/dist_ts/confinement.d.ts

@@ -0,0 +1,2 @@
+import type { IBrowserConfinementProbeContext } from './interfaces.js';
+export declare const runProductionConfinementProbe: (context: IBrowserConfinementProbeContext) => Promise<void>;

package/dist_ts/confinement.js

@@ -0,0 +1,63 @@
+import * as plugins from './plugins.js';
+import { BrowserRuntimeError } from './errors.js';
+const listenOnUnsupportedPort = async (allowedPorts, onRequest) => {
+    for (let attempt = 0; attempt < 8; attempt += 1) {
+        const server = plugins.http.createServer((_request, response) => {
+            onRequest();
+            response.writeHead(204);
+            response.end();
+        });
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(0, '127.0.0.1', resolve);
+        });
+        const address = server.address();
+        if (address && typeof address !== 'string' && !allowedPorts.has(address.port)) {
+            return { server, port: address.port };
+        }
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+    throw new BrowserRuntimeError('CONFINEMENT_FAILED');
+};
+export const runProductionConfinementProbe = async (context) => {
+    let originHits = 0;
+    const fixture = await listenOnUnsupportedPort(new Set(context.proxy.allowedTargetPorts), () => { originHits += 1; });
+    const closeFixture = async () => new Promise((resolve) => {
+        fixture.server.close(() => resolve());
+    });
+    try {
+        const beforeLoopback = context.proxy.getStats();
+        await context.session.navigate({ url: `http://127.0.0.1:${fixture.port}/browser-runtime-probe`, timeoutMs: 3000 }, { signal: context.signal }).catch(() => undefined);
+        const afterLoopback = context.proxy.getStats();
+        if (originHits !== 0
+            || afterLoopback.ordinaryRequests <= beforeLoopback.ordinaryRequests
+            || afterLoopback.rejectedRequests <= beforeLoopback.rejectedRequests) {
+            throw new BrowserRuntimeError('CONFINEMENT_FAILED');
+        }
+        const beforeInvalid = context.proxy.getStats();
+        await context.session.navigate({ url: 'http://browser-runtime-confinement.invalid/', timeoutMs: 3000 }, { signal: context.signal }).catch(() => undefined);
+        const afterInvalid = context.proxy.getStats();
+        if (afterInvalid.ordinaryRequests <= beforeInvalid.ordinaryRequests
+            || afterInvalid.rejectedRequests <= beforeInvalid.rejectedRequests) {
+            throw new BrowserRuntimeError('CONFINEMENT_FAILED');
+        }
+        const result = await context.session.evaluate(`new Promise(async (resolve) => {
+        const pc = new RTCPeerConnection({ iceServers: [{ urls: 'stun:1.1.1.1:3478' }] });
+        let emitted = false;
+        pc.onicecandidate = (event) => { if (event.candidate) emitted = true; };
+        pc.createDataChannel('probe');
+        try { await pc.setLocalDescription(await pc.createOffer()); } catch {}
+        setTimeout(() => { pc.close(); resolve({ candidateEmitted: emitted }); }, 1000);
+      })`, { timeoutMs: 2500, maxOutputBytes: 1024 }, { signal: context.signal });
+        if (!result
+            || typeof result !== 'object'
+            || Array.isArray(result)
+            || result.candidateEmitted !== false) {
+            throw new BrowserRuntimeError('CONFINEMENT_FAILED');
+        }
+    }
+    finally {
+        await closeFixture();
+    }
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29uZmluZW1lbnQuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9jb25maW5lbWVudC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLGNBQWMsQ0FBQztBQUV4QyxPQUFPLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSxhQUFhLENBQUM7QUFFbEQsTUFBTSx1QkFBdUIsR0FBRyxLQUFLLEVBQ25DLFlBQWlDLEVBQ2pDLFNBQXFCLEVBQ21DLEVBQUU7SUFDMUQsS0FBSyxJQUFJLE9BQU8sR0FBRyxDQUFDLEVBQUUsT0FBTyxHQUFHLENBQUMsRUFBRSxPQUFPLElBQUksQ0FBQyxFQUFFLENBQUM7UUFDaEQsTUFBTSxNQUFNLEdBQUcsT0FBTyxDQUFDLElBQUksQ0FBQyxZQUFZLENBQUMsQ0FBQyxRQUFRLEVBQUUsUUFBUSxFQUFFLEVBQUU7WUFDOUQsU0FBUyxFQUFFLENBQUM7WUFDWixRQUFRLENBQUMsU0FBUyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1lBQ3hCLFFBQVEsQ0FBQyxHQUFHLEVBQUUsQ0FBQztRQUNqQixDQUFDLENBQUMsQ0FBQztRQUNILE1BQU0sSUFBSSxPQUFPLENBQU8sQ0FBQyxPQUFPLEVBQUUsTUFBTSxFQUFFLEVBQUU7WUFDMUMsTUFBTSxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsTUFBTSxDQUFDLENBQUM7WUFDN0IsTUFBTSxDQUFDLE1BQU0sQ0FBQyxDQUFDLEVBQUUsV0FBVyxFQUFFLE9BQU8sQ0FBQyxDQUFDO1FBQ3pDLENBQUMsQ0FBQyxDQUFDO1FBQ0gsTUFBTSxPQUFPLEdBQUcsTUFBTSxDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQ2pDLElBQUksT0FBTyxJQUFJLE9BQU8sT0FBTyxLQUFLLFFBQVEsSUFBSSxDQUFDLFlBQVksQ0FBQyxHQUFHLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUM7WUFDOUUsT0FBTyxFQUFFLE1BQU0sRUFBRSxJQUFJLEVBQUUsT0FBTyxDQUFDLElBQUksRUFBRSxDQUFDO1FBQ3hDLENBQUM7UUFDRCxNQUFNLElBQUksT0FBTyxDQUFPLENBQUMsT0FBTyxFQUFFLEVBQUUsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLEdBQUcsRUFBRSxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUMsQ0FBQztJQUN0RSxDQUFDO0lBQ0QsTUFBTSxJQUFJLG1CQUFtQixDQUFDLG9CQUFvQixDQUFDLENBQUM7QUFDdEQsQ0FBQyxDQUFDO0FBRUYsTUFBTSxDQUFDLE1BQU0sNkJBQTZCLEdBQUcsS0FBSyxFQUNoRCxPQUF3QyxFQUN6QixFQUFFO0lBQ2pCLElBQUksVUFBVSxHQUFHLENBQUMsQ0FBQztJQUNuQixNQUFNLE9BQU8sR0FBRyxNQUFNLHVCQUF1QixDQUMzQyxJQUFJLEdBQUcsQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLGtCQUFrQixDQUFDLEVBQ3pDLEdBQUcsRUFBRSxHQUFHLFVBQVUsSUFBSSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQzNCLENBQUM7SUFDRixNQUFNLFlBQVksR0FBRyxLQUFLLElBQW1CLEVBQUUsQ0FBQyxJQUFJLE9BQU8sQ0FBQyxDQUFDLE9BQU8sRUFBRSxFQUFFO1FBQ3RFLE9BQU8sQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLEdBQUcsRUFBRSxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUM7SUFDeEMsQ0FBQyxDQUFDLENBQUM7SUFDSCxJQUFJLENBQUM7UUFDSCxNQUFNLGNBQWMsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLFFBQVEsRUFBRSxDQUFDO1FBQ2hELE1BQU0sT0FBTyxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQzVCLEVBQUUsR0FBRyxFQUFFLG9CQUFvQixPQUFPLENBQUMsSUFBSSx3QkFBd0IsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLEVBQ2xGLEVBQUUsTUFBTSxFQUFFLE9BQU8sQ0FBQyxNQUFNLEVBQUUsQ0FDM0IsQ0FBQyxLQUFLLENBQUMsR0FBRyxFQUFFLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDekIsTUFBTSxhQUFhLEdBQUcsT0FBTyxDQUFDLEtBQUssQ0FBQyxRQUFRLEVBQUUsQ0FBQztRQUMvQyxJQUNFLFVBQVUsS0FBSyxDQUFDO2VBQ2IsYUFBYSxDQUFDLGdCQUFnQixJQUFJLGNBQWMsQ0FBQyxnQkFBZ0I7ZUFDakUsYUFBYSxDQUFDLGdCQUFnQixJQUFJLGNBQWMsQ0FBQyxnQkFBZ0IsRUFDcEUsQ0FBQztZQUNELE1BQU0sSUFBSSxtQkFBbUIsQ0FBQyxvQkFBb0IsQ0FBQyxDQUFDO1FBQ3RELENBQUM7UUFFRCxNQUFNLGFBQWEsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLFFBQVEsRUFBRSxDQUFDO1FBQy9DLE1BQU0sT0FBTyxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQzVCLEVBQUUsR0FBRyxFQUFFLDZDQUE2QyxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsRUFDdkUsRUFBRSxNQUFNLEVBQUUsT0FBTyxDQUFDLE1BQU0sRUFBRSxDQUMzQixDQUFDLEtBQUssQ0FBQyxHQUFHLEVBQUUsQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUN6QixNQUFNLFlBQVksR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLFFBQVEsRUFBRSxDQUFDO1FBQzlDLElBQ0UsWUFBWSxDQUFDLGdCQUFnQixJQUFJLGFBQWEsQ0FBQyxnQkFBZ0I7ZUFDNUQsWUFBWSxDQUFDLGdCQUFnQixJQUFJLGFBQWEsQ0FBQyxnQkFBZ0IsRUFDbEUsQ0FBQztZQUNELE1BQU0sSUFBSSxtQkFBbUIsQ0FBQyxvQkFBb0IsQ0FBQyxDQUFDO1FBQ3RELENBQUM7UUFFRCxNQUFNLE1BQU0sR0FBRyxNQUFNLE9BQU8sQ0FBQyxPQUFPLENBQUMsUUFBUSxDQUMzQzs7Ozs7OztTQU9HLEVBQ0gsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLGNBQWMsRUFBRSxJQUFJLEVBQUUsRUFDekMsRUFBRSxNQUFNLEVBQUUsT0FBTyxDQUFDLE1BQU0sRUFBRSxDQUMzQixDQUFDO1FBQ0YsSUFDRSxDQUFDLE1BQU07ZUFDSixPQUFPLE1BQU0sS0FBSyxRQUFRO2VBQzFCLEtBQUssQ0FBQyxPQUFPLENBQUMsTUFBTSxDQUFDO2VBQ3BCLE1BQWtDLENBQUMsZ0JBQWdCLEtBQUssS0FBSyxFQUNqRSxDQUFDO1lBQ0QsTUFBTSxJQUFJLG1CQUFtQixDQUFDLG9CQUFvQixDQUFDLENBQUM7UUFDdEQsQ0FBQztJQUNILENBQUM7WUFBUyxDQUFDO1FBQ1QsTUFBTSxZQUFZLEVBQUUsQ0FBQztJQUN2QixDQUFDO0FBQ0gsQ0FBQyxDQUFDIn0=

package/dist_ts/errors.d.ts

@@ -0,0 +1,7 @@
+export type TBrowserRuntimeErrorCode = 'ABORTED' | 'AUTHORIZATION_DENIED' | 'BUSY' | 'CAPABILITY_EXPIRED' | 'CAPABILITY_INVALID' | 'CAPABILITY_REVOKED' | 'CONFINEMENT_FAILED' | 'EGRESS_DENIED' | 'FENCED' | 'FRAME_TOO_LARGE' | 'INVALID_INPUT' | 'LOCKED' | 'NOT_RUNNING' | 'PROTOCOL_ERROR' | 'QUOTA_EXCEEDED' | 'TIMEOUT';
+export declare class BrowserRuntimeError extends Error {
+    readonly code: TBrowserRuntimeErrorCode;
+    constructor(code: TBrowserRuntimeErrorCode, internalMessage?: string);
+    get publicMessage(): string;
+}
+export declare const toBrowserRuntimeError: (error: unknown) => BrowserRuntimeError;

package/dist_ts/errors.js

@@ -0,0 +1,40 @@
+const publicMessages = {
+    ABORTED: 'The operation was aborted.',
+    AUTHORIZATION_DENIED: 'Capability authorization was denied.',
+    BUSY: 'The browser project is busy.',
+    CAPABILITY_EXPIRED: 'The capability has expired.',
+    CAPABILITY_INVALID: 'The capability is invalid.',
+    CAPABILITY_REVOKED: 'The capability has been revoked.',
+    CONFINEMENT_FAILED: 'Browser confinement could not be confirmed.',
+    EGRESS_DENIED: 'The egress target was denied.',
+    FENCED: 'The browser project is permanently fenced.',
+    FRAME_TOO_LARGE: 'The browser frame exceeded its limit.',
+    INVALID_INPUT: 'The request is invalid.',
+    LOCKED: 'The browser runtime is already locked.',
+    NOT_RUNNING: 'The browser runtime is not running.',
+    PROTOCOL_ERROR: 'The framed protocol request is invalid.',
+    QUOTA_EXCEEDED: 'A browser runtime quota was exceeded.',
+    TIMEOUT: 'The operation timed out.',
+};
+export class BrowserRuntimeError extends Error {
+    code;
+    constructor(code, internalMessage) {
+        super(internalMessage ?? publicMessages[code]);
+        this.name = 'BrowserRuntimeError';
+        this.code = code;
+    }
+    get publicMessage() {
+        return publicMessages[this.code];
+    }
+}
+export const toBrowserRuntimeError = (error) => {
+    if (error instanceof BrowserRuntimeError) {
+        return error;
+    }
+    if (error instanceof Error
+        && (error.name === 'AbortError' || error.name === 'TimeoutError')) {
+        return new BrowserRuntimeError(error.name === 'TimeoutError' ? 'TIMEOUT' : 'ABORTED');
+    }
+    return new BrowserRuntimeError('ABORTED');
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/index.d.ts

@@ -0,0 +1,11 @@
+export { validateAgentAction, validateAgentActionResult } from './actions.js';
+export { BrowserArtifactStore } from './classes.artifactstore.js';
+export { BrowserEgressProxy } from './classes.egressproxy.js';
+export { BrowserRuntimeFlexToolProvider } from './classes.flexprovider.js';
+export { BrowserRuntimeFramedClient, BrowserRuntimeFramedServerPeer, } from './classes.framed.js';
+export { BrowserRuntime, BrowserRuntimeLease } from './classes.runtime.js';
+export { BrowserRuntimeError } from './errors.js';
+export { createBrowserRuntimeMcpHttpHandler } from './mcp.js';
+export type { IAcquireBrowserRuntimeLeaseOptions } from './classes.runtime.js';
+export type { TBrowserRuntimeErrorCode } from './errors.js';
+export type { IAttachTrustedFramedPeerOptions, IBrowserActionStateResult, IBrowserArtifactMetadata, IBrowserArtifactStoreOptions, IBrowserCapabilityAuthorizationRequest, IBrowserCapabilityDescriptor, IBrowserClickAction, IBrowserEgressConnectionOptions, IBrowserEgressProxyOptions, IBrowserEgressProxyStats, IBrowserFillAction, IBrowserNavigateAction, IBrowserObservationResult, IBrowserPressAction, IBrowserRuntimeAuditEvent, IBrowserRuntimeFlexToolProviderOptions, IBrowserRuntimeFrameSubscription, IBrowserRuntimeFramedClientOptions, IBrowserRuntimeMcpOptions, IBrowserRuntimeOperationOptions, IBrowserRuntimeOptions, IBrowserRuntimeState, IBrowserRuntimeTabState, IBrowserScreenshotAction, IBrowserScreenshotResult, IBrowserSnapshotAction, IIssueBrowserCapabilityRequest, IIssuedBrowserCapability, IResolvedBrowserFlexCapability, TBrowserActorRole, TBrowserAgentAction, TBrowserAgentActionResult, TBrowserCapabilitySource, TBrowserDnsResolver, TBrowserEgressConnector, TBrowserRuntimeEvent, } from './interfaces.js';

package/dist_ts/index.js

@@ -0,0 +1,9 @@
+export { validateAgentAction, validateAgentActionResult } from './actions.js';
+export { BrowserArtifactStore } from './classes.artifactstore.js';
+export { BrowserEgressProxy } from './classes.egressproxy.js';
+export { BrowserRuntimeFlexToolProvider } from './classes.flexprovider.js';
+export { BrowserRuntimeFramedClient, BrowserRuntimeFramedServerPeer, } from './classes.framed.js';
+export { BrowserRuntime, BrowserRuntimeLease } from './classes.runtime.js';
+export { BrowserRuntimeError } from './errors.js';
+export { createBrowserRuntimeMcpHttpHandler } from './mcp.js';
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/interfaces.d.ts

@@ -0,0 +1,287 @@
+import type * as plugins from './plugins.js';
+export type TBrowserActorRole = 'human' | 'agent';
+export type TBrowserCapabilitySource = 'human' | 'flex' | 'mcp';
+export interface IBrowserCapabilityAuthorizationRequest {
+    projectId: string;
+    actorId: string;
+    role: TBrowserActorRole;
+    peerId: string;
+    source: TBrowserCapabilitySource;
+    scopeId?: string;
+    sessionId?: string;
+}
+export interface IIssueBrowserCapabilityRequest extends IBrowserCapabilityAuthorizationRequest {
+    expiresInMs?: number;
+    disconnect?: (signal: AbortSignal) => Promise<void> | void;
+}
+export interface IBrowserCapabilityDescriptor extends IBrowserCapabilityAuthorizationRequest {
+    capabilityId: string;
+    expiresAt: number;
+}
+export interface IIssuedBrowserCapability extends IBrowserCapabilityDescriptor {
+    capabilityToken: string;
+}
+export interface IResolvedBrowserFlexCapability {
+    capabilityToken: string;
+}
+export interface IBrowserRuntimeAuditEvent {
+    operationId: string;
+    capabilityId: string;
+    projectId: string;
+    actorId: string;
+    role: TBrowserActorRole;
+    source: TBrowserCapabilitySource;
+    action: string;
+    phase: 'completed' | 'failed';
+    startedAt: number;
+    finishedAt: number;
+    errorCode?: string;
+}
+export interface ILiveBrowserSessionLike {
+    start(options?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    stop(): Promise<void>;
+    terminate(options?: plugins.smartpuppeteer.ILiveBrowserTerminationOptions): Promise<plugins.smartpuppeteer.ILiveBrowserTerminationResult>;
+    getState(): plugins.smartpuppeteer.ILiveBrowserState;
+    getProcessState(): plugins.smartpuppeteer.ILiveBrowserProcessState;
+    onEvent(listener: plugins.smartpuppeteer.TLiveBrowserEventListener): () => void;
+    acknowledgeFrame(request: plugins.smartpuppeteer.ILiveBrowserFrameAcknowledgementRequest): Promise<plugins.smartpuppeteer.ILiveBrowserFrameAcknowledgement>;
+    createTab(options?: plugins.smartpuppeteer.ILiveBrowserCreateTabOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<plugins.smartpuppeteer.ILiveBrowserTabState>;
+    activateTab(tabId: string, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    closeTab(tabId: string, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    navigate(options: plugins.smartpuppeteer.ILiveBrowserNavigateOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    back(options?: plugins.smartpuppeteer.ILiveBrowserNavigationOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    forward(options?: plugins.smartpuppeteer.ILiveBrowserNavigationOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    reload(options?: plugins.smartpuppeteer.ILiveBrowserNavigationOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    setViewport(viewport: plugins.smartpuppeteer.ILiveBrowserViewport, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    dispatchMouse(input: plugins.smartpuppeteer.ILiveBrowserMouseInput): Promise<void>;
+    dispatchWheel(input: plugins.smartpuppeteer.ILiveBrowserWheelInput): Promise<void>;
+    dispatchKey(input: plugins.smartpuppeteer.ILiveBrowserKeyInput): Promise<void>;
+    insertText(input: plugins.smartpuppeteer.ILiveBrowserInsertTextInput): Promise<void>;
+    captureSnapshot(options?: plugins.smartpuppeteer.ILiveBrowserSnapshotOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<plugins.smartpuppeteer.ILiveBrowserSnapshot>;
+    observe(options?: plugins.smartpuppeteer.ILiveBrowserObserveOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<plugins.smartpuppeteer.ILiveBrowserObservation>;
+    evaluate(expression: string, options?: plugins.smartpuppeteer.ILiveBrowserEvaluateOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<plugins.smartpuppeteer.TLiveBrowserJsonValue>;
+    click(options: plugins.smartpuppeteer.ILiveBrowserClickOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    fill(options: plugins.smartpuppeteer.ILiveBrowserFillOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+    press(options: plugins.smartpuppeteer.ILiveBrowserPressOptions, operationOptions?: plugins.smartpuppeteer.ILiveBrowserOperationOptions): Promise<void>;
+}
+export interface IBrowserConfinementProbeContext {
+    session: ILiveBrowserSessionLike;
+    proxy: import('./classes.egressproxy.js').BrowserEgressProxy;
+    signal: AbortSignal;
+}
+export interface IBrowserRuntimeEnvironment {
+    platform: NodeJS.Platform;
+    uid: number | undefined;
+}
+export interface IBrowserRuntimeOptions {
+    runtimeDirectory: string;
+    authorizeCapability(request: IBrowserCapabilityAuthorizationRequest, signal: AbortSignal): Promise<boolean> | boolean;
+    audit?(event: IBrowserRuntimeAuditEvent, signal: AbortSignal): Promise<void> | void;
+    maxProjectSlots?: number;
+    maxCapabilities?: number;
+    maxCapabilitiesPerProject?: number;
+    capabilityDefaultTtlMs?: number;
+    capabilityMaximumTtlMs?: number;
+    authorizationTimeoutMs?: number;
+    maxTabsPerProject?: number;
+    operationTimeoutMs?: number;
+    quiescenceTimeoutMs?: number;
+    terminationGraceMs?: number;
+    terminationForceMs?: number;
+    auditTimeoutMs?: number;
+    confinementProbeTimeoutMs?: number;
+    idleRetirementMs?: number;
+    maxFrameBytes?: number;
+    frameAcknowledgementTimeoutMs?: number;
+    egress?: Omit<IBrowserEgressProxyOptions, 'projectId'>;
+    artifacts?: Omit<IBrowserArtifactStoreOptions, 'rootDirectory'>;
+}
+export interface IBrowserRuntimeTabState {
+    id: string;
+    url: string;
+    title: string;
+    active: boolean;
+    status: 'open' | 'crashed';
+    generation: number;
+    appliedViewportRevision: number;
+    streaming: boolean;
+}
+export interface IBrowserRuntimeState {
+    status: 'stopped' | 'starting' | 'running' | 'stopping';
+    activeTabId: string | null;
+    viewportRevision: number;
+    viewport: {
+        width: number;
+        height: number;
+        deviceScaleFactor: number;
+    };
+    tabs: IBrowserRuntimeTabState[];
+    lastError?: {
+        code: string;
+        fatal: boolean;
+        tabId?: string;
+    };
+}
+export interface IBrowserArtifactMetadata {
+    artifactId: string;
+    projectId: string;
+    mimeType: string;
+    size: number;
+    createdAt: number;
+    expiresAt: number;
+}
+export interface IBrowserArtifactStoreOptions {
+    rootDirectory: string;
+    maxFileBytes?: number;
+    maxArtifactsPerProject?: number;
+    maxProjectBytes?: number;
+    maxProjects?: number;
+    maxTotalArtifacts?: number;
+    maxTotalBytes?: number;
+    artifactTtlMs?: number;
+    now?: () => number;
+}
+export interface IBrowserNavigateAction {
+    action: 'navigate';
+    url: string;
+    tabId?: string;
+    timeoutMs?: number;
+}
+export interface IBrowserSnapshotAction {
+    action: 'snapshot';
+    tabId?: string;
+    maxCharacters?: number;
+}
+export interface IBrowserScreenshotAction {
+    action: 'screenshot';
+    tabId?: string;
+    format?: 'jpeg' | 'png';
+    quality?: number;
+}
+export interface IBrowserClickAction {
+    action: 'click';
+    selector: string;
+    tabId?: string;
+    timeoutMs?: number;
+}
+export interface IBrowserFillAction {
+    action: 'fill';
+    selector: string;
+    text: string;
+    tabId?: string;
+    timeoutMs?: number;
+}
+export interface IBrowserPressAction {
+    action: 'press';
+    selector: string;
+    key: string;
+    tabId?: string;
+    timeoutMs?: number;
+}
+export type TBrowserAgentAction = IBrowserNavigateAction | IBrowserSnapshotAction | IBrowserScreenshotAction | IBrowserClickAction | IBrowserFillAction | IBrowserPressAction;
+export interface IBrowserActionStateResult {
+    action: 'navigate' | 'click' | 'fill' | 'press';
+    state: IBrowserRuntimeState;
+}
+export interface IBrowserObservationResult {
+    action: 'snapshot';
+    tabId: string;
+    url: string;
+    title: string;
+    text: string;
+    truncated: boolean;
+    state: IBrowserRuntimeState;
+}
+export interface IBrowserScreenshotResult {
+    action: 'screenshot';
+    artifact: IBrowserArtifactMetadata;
+}
+export type TBrowserAgentActionResult = IBrowserActionStateResult | IBrowserObservationResult | IBrowserScreenshotResult;
+export type TBrowserRuntimeEvent = {
+    type: 'state';
+    state: IBrowserRuntimeState;
+} | {
+    type: 'error';
+    error: {
+        code: string;
+        fatal: boolean;
+        tabId?: string;
+    };
+} | {
+    type: 'frame';
+    frame: plugins.smartpuppeteer.ILiveBrowserFrame;
+};
+export interface IBrowserRuntimeOperationOptions {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    onOperationStarted?(operationId: string): void;
+}
+export interface IBrowserRuntimeFrameSubscription {
+    close(): Promise<void>;
+}
+export type TBrowserDnsResolver = (hostname: string, options: {
+    all: true;
+    verbatim: true;
+    signal: AbortSignal;
+}) => Promise<plugins.dns.LookupAddress[]>;
+export interface IBrowserEgressConnectionOptions {
+    address: string;
+    family: 4 | 6;
+    port: number;
+    hostname: string;
+    signal: AbortSignal;
+}
+export type TBrowserEgressConnector = (options: IBrowserEgressConnectionOptions) => plugins.net.Socket;
+export interface IBrowserEgressProxyOptions {
+    projectId: string;
+    allowedPorts?: number[];
+    maxConnections?: number;
+    maxActiveRequests?: number;
+    maxHeaderBytes?: number;
+    connectTimeoutMs?: number;
+    idleTimeoutMs?: number;
+    tunnelLifetimeMs?: number;
+    requestTimeoutMs?: number;
+    maxRequestBytes?: number;
+    maxResponseBytes?: number;
+    maxTunnelBytes?: number;
+    resolver?: TBrowserDnsResolver;
+    connector?: TBrowserEgressConnector;
+}
+export interface IBrowserEgressProxyStats {
+    ordinaryRequests: number;
+    upgradeRequests: number;
+    connectRequests: number;
+    rejectedRequests: number;
+    activeConnections: number;
+}
+export interface IAttachTrustedFramedPeerOptions {
+    peerId: string;
+    scopeId: string;
+    sessionId: string;
+    readable: plugins.stream.Readable;
+    writable: plugins.stream.Writable;
+}
+export interface IBrowserRuntimeFramedClientOptions {
+    scopeId: string;
+    sessionId: string;
+    readable: plugins.stream.Readable;
+    writable: plugins.stream.Writable;
+    maxFrameBytes?: number;
+    maxPendingRequests?: number;
+    requestTimeoutMs?: number;
+}
+export interface IBrowserRuntimeMcpOptions {
+    authenticateMcpRequest(request: Request): Promise<{
+        peerId: string;
+    }>;
+    trustedOrigins?: string[];
+    allowedHosts?: string[];
+    allowMissingOrigin?: boolean;
+    maxRequestBytes?: number;
+    maxToolResultBytes?: number;
+}
+export interface IBrowserRuntimeFlexToolProviderOptions<TScope> {
+    client: import('./classes.framed.js').BrowserRuntimeFramedClient;
+    resolveCapability(context: plugins.flexharness.IFlexToolProviderContext<TScope>): Promise<IResolvedBrowserFlexCapability> | IResolvedBrowserFlexCapability;
+}

package/dist_ts/interfaces.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW50ZXJmYWNlcy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzL2ludGVyZmFjZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiJ9

package/dist_ts/internal.testing.d.ts

@@ -0,0 +1,9 @@
+import type * as plugins from './plugins.js';
+import type { IBrowserConfinementProbeContext, IBrowserRuntimeOptions, IBrowserRuntimeEnvironment, ILiveBrowserSessionLike } from './interfaces.js';
+export declare const browserRuntimeTesting: unique symbol;
+export interface IBrowserRuntimeTestingOptions extends IBrowserRuntimeOptions {
+    [browserRuntimeTesting]: true;
+    environment: IBrowserRuntimeEnvironment;
+    sessionFactory(options: plugins.smartpuppeteer.ILiveBrowserSessionOptions): ILiveBrowserSessionLike;
+    confinementProbe(context: IBrowserConfinementProbeContext): Promise<void>;
+}

package/dist_ts/internal.testing.js

@@ -0,0 +1,2 @@
+export const browserRuntimeTesting = Symbol('browserRuntimeTesting');
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW50ZXJuYWwudGVzdGluZy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzL2ludGVybmFsLnRlc3RpbmcudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBUUEsTUFBTSxDQUFDLE1BQU0scUJBQXFCLEdBQUcsTUFBTSxDQUFDLHVCQUF1QixDQUFDLENBQUMifQ==

package/dist_ts/mcp.d.ts

@@ -0,0 +1,4 @@
+import * as plugins from './plugins.js';
+import type { BrowserRuntime } from './classes.runtime.js';
+import type { IBrowserRuntimeMcpOptions } from './interfaces.js';
+export declare const createBrowserRuntimeMcpHttpHandler: (runtime: BrowserRuntime, options: IBrowserRuntimeMcpOptions) => plugins.smartmcp.ISmartMcpHttpHandler;