@modelprofile.com/browser-runtime 1.0.0

package/dist_ts/mcp.js

@@ -0,0 +1,196 @@
+import * as plugins from './plugins.js';
+import { BrowserRuntimeError } from './errors.js';
+import { commitinfo } from './00_commitinfo_data.js';
+import { validateAgentActionResult } from './actions.js';
+import { validateBoundedString, validateInteger, } from './utils.js';
+const parseBearerToken = (request) => {
+    const authorization = request.headers.get('authorization');
+    if (!authorization?.startsWith('Bearer ') || authorization.includes(',')) {
+        throw new BrowserRuntimeError('CAPABILITY_INVALID');
+    }
+    return validateBoundedString(authorization.slice('Bearer '.length), 'bearer capability', 16, 512);
+};
+const validateStringList = (value, name) => {
+    if (value === undefined)
+        return undefined;
+    if (!Array.isArray(value) || value.length > 64)
+        throw new BrowserRuntimeError('INVALID_INPUT');
+    return value.map((entry) => validateBoundedString(entry, name, 1, 2048));
+};
+export const createBrowserRuntimeMcpHttpHandler = (runtime, options) => {
+    if (!runtime || !options || typeof options.authenticateMcpRequest !== 'function') {
+        throw new BrowserRuntimeError('INVALID_INPUT');
+    }
+    const trustedOrigins = validateStringList(options.trustedOrigins, 'trustedOrigin');
+    const allowedHosts = validateStringList(options.allowedHosts, 'allowedHost');
+    if (options.allowMissingOrigin !== undefined && typeof options.allowMissingOrigin !== 'boolean') {
+        throw new BrowserRuntimeError('INVALID_INPUT');
+    }
+    const maxRequestBytes = options.maxRequestBytes === undefined
+        ? 256 * 1024
+        : validateInteger(options.maxRequestBytes, 'maxRequestBytes', 1024, 1024 * 1024);
+    const maxToolResultBytes = options.maxToolResultBytes === undefined
+        ? 256 * 1024
+        : validateInteger(options.maxToolResultBytes, 'maxToolResultBytes', 1024, 256 * 1024);
+    const withLease = async (context, action) => {
+        const peerId = validateBoundedString(context.authInfo?.clientId, 'peerId', 1, 128);
+        const capabilityToken = parseBearerToken(context.request);
+        const signal = AbortSignal.any([context.extra.signal, context.request.signal]);
+        signal.throwIfAborted();
+        const descriptor = runtime.authorizeCapability(capabilityToken, peerId, 'agent', 'mcp');
+        if (descriptor.capabilityId !== context.authInfo?.token) {
+            throw new BrowserRuntimeError('CAPABILITY_INVALID');
+        }
+        const lease = await runtime.acquireLease({
+            capabilityToken,
+            peerId,
+            expectedRole: 'agent',
+            expectedSource: 'mcp',
+            signal,
+        });
+        try {
+            signal.throwIfAborted();
+            return await action(lease, signal);
+        }
+        finally {
+            await lease.release();
+        }
+    };
+    const tabIdSchema = plugins.smartmcp.z.string().min(1).max(128).optional();
+    const timeoutSchema = plugins.smartmcp.z.number().int().min(100).max(120_000).optional();
+    const tools = [
+        {
+            name: 'browser_snapshot',
+            description: 'Read bounded accessibility text from a browser tab.',
+            inputSchema: plugins.smartmcp.z.object({
+                tabId: tabIdSchema,
+                maxCharacters: plugins.smartmcp.z.number().int().min(256).max(50_000).optional(),
+            }).strict(),
+            annotations: { readOnlyHint: true, openWorldHint: false },
+            handler: async (args, context) => withLease(context, async (lease, signal) => (validateAgentActionResult(await lease.executeAgentAction({
+                action: 'snapshot',
+                ...(typeof args.tabId === 'string' ? { tabId: args.tabId } : {}),
+                ...(typeof args.maxCharacters === 'number'
+                    ? { maxCharacters: args.maxCharacters }
+                    : {}),
+            }, { signal })))),
+        },
+        {
+            name: 'browser_navigate',
+            description: 'Navigate a browser tab to an HTTP or HTTPS URL.',
+            inputSchema: plugins.smartmcp.z.object({
+                url: plugins.smartmcp.z.string().min(1).max(8192),
+                tabId: tabIdSchema,
+                timeoutMs: timeoutSchema,
+            }).strict(),
+            annotations: { readOnlyHint: false, openWorldHint: true },
+            handler: async (args, context) => withLease(context, async (lease, signal) => (validateAgentActionResult(await lease.executeAgentAction({
+                action: 'navigate',
+                url: String(args.url),
+                ...(typeof args.tabId === 'string' ? { tabId: args.tabId } : {}),
+                ...(typeof args.timeoutMs === 'number' ? { timeoutMs: args.timeoutMs } : {}),
+            }, { signal })))),
+        },
+        {
+            name: 'browser_click',
+            description: 'Click an element selected from the observed page.',
+            inputSchema: plugins.smartmcp.z.object({
+                selector: plugins.smartmcp.z.string().min(1).max(4096),
+                tabId: tabIdSchema,
+                timeoutMs: timeoutSchema,
+            }).strict(),
+            annotations: { readOnlyHint: false, openWorldHint: true },
+            handler: async (args, context) => withLease(context, async (lease, signal) => (validateAgentActionResult(await lease.executeAgentAction({
+                action: 'click',
+                selector: String(args.selector),
+                ...(typeof args.tabId === 'string' ? { tabId: args.tabId } : {}),
+                ...(typeof args.timeoutMs === 'number' ? { timeoutMs: args.timeoutMs } : {}),
+            }, { signal })))),
+        },
+        {
+            name: 'browser_fill',
+            description: 'Fill an element selected from the observed page.',
+            inputSchema: plugins.smartmcp.z.object({
+                selector: plugins.smartmcp.z.string().min(1).max(4096),
+                text: plugins.smartmcp.z.string().max(100_000),
+                tabId: tabIdSchema,
+                timeoutMs: timeoutSchema,
+            }).strict(),
+            annotations: { readOnlyHint: false, openWorldHint: true },
+            handler: async (args, context) => withLease(context, async (lease, signal) => (validateAgentActionResult(await lease.executeAgentAction({
+                action: 'fill',
+                selector: String(args.selector),
+                text: String(args.text),
+                ...(typeof args.tabId === 'string' ? { tabId: args.tabId } : {}),
+                ...(typeof args.timeoutMs === 'number' ? { timeoutMs: args.timeoutMs } : {}),
+            }, { signal })))),
+        },
+        {
+            name: 'browser_press',
+            description: 'Press a key on an element selected from the observed page.',
+            inputSchema: plugins.smartmcp.z.object({
+                selector: plugins.smartmcp.z.string().min(1).max(4096),
+                key: plugins.smartmcp.z.string().min(1).max(64),
+                tabId: tabIdSchema,
+                timeoutMs: timeoutSchema,
+            }).strict(),
+            annotations: { readOnlyHint: false, openWorldHint: true },
+            handler: async (args, context) => withLease(context, async (lease, signal) => (validateAgentActionResult(await lease.executeAgentAction({
+                action: 'press',
+                selector: String(args.selector),
+                key: String(args.key),
+                ...(typeof args.tabId === 'string' ? { tabId: args.tabId } : {}),
+                ...(typeof args.timeoutMs === 'number' ? { timeoutMs: args.timeoutMs } : {}),
+            }, { signal })))),
+        },
+        {
+            name: 'browser_screenshot',
+            description: 'Capture a screenshot as bounded artifact metadata.',
+            inputSchema: plugins.smartmcp.z.object({
+                tabId: tabIdSchema,
+                format: plugins.smartmcp.z.enum(['jpeg', 'png']).optional(),
+                quality: plugins.smartmcp.z.number().int().min(0).max(100).optional(),
+            }).strict(),
+            annotations: { readOnlyHint: true, openWorldHint: false },
+            handler: async (args, context) => withLease(context, async (lease, signal) => (validateAgentActionResult(await lease.executeAgentAction({
+                action: 'screenshot',
+                ...(typeof args.tabId === 'string' ? { tabId: args.tabId } : {}),
+                ...(args.format === 'jpeg' || args.format === 'png' ? { format: args.format } : {}),
+                ...(typeof args.quality === 'number' ? { quality: args.quality } : {}),
+            }, { signal })))),
+        },
+    ];
+    return plugins.smartmcp.createSmartMcpHttpHandler({
+        name: '@modelprofile.com/browser-runtime',
+        version: commitinfo.version,
+        ...(trustedOrigins ? { trustedOrigins } : {}),
+        ...(allowedHosts ? { allowedHosts } : {}),
+        ...(options.allowMissingOrigin !== undefined
+            ? { allowMissingOrigin: options.allowMissingOrigin }
+            : {}),
+        maxRequestBytes,
+        maxToolResultBytes,
+        redactError: () => 'Browser tool execution failed.',
+        authorize: async ({ request }) => {
+            let peerId;
+            let capabilityToken;
+            try {
+                const authentication = await options.authenticateMcpRequest(request);
+                peerId = validateBoundedString(authentication?.peerId, 'peerId', 1, 128);
+                capabilityToken = parseBearerToken(request);
+                const descriptor = runtime.authorizeCapability(capabilityToken, peerId, 'agent', 'mcp');
+                return {
+                    token: descriptor.capabilityId,
+                    clientId: peerId,
+                    scopes: ['browser'],
+                    expiresAt: descriptor.expiresAt,
+                };
+            }
+            catch {
+                return new Response('Unauthorized', { status: 401 });
+            }
+        },
+        tools,
+    });
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWNwLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvbWNwLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sY0FBYyxDQUFDO0FBRXhDLE9BQU8sRUFBRSxtQkFBbUIsRUFBRSxNQUFNLGFBQWEsQ0FBQztBQUNsRCxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0seUJBQXlCLENBQUM7QUFFckQsT0FBTyxFQUFFLHlCQUF5QixFQUFFLE1BQU0sY0FBYyxDQUFDO0FBQ3pELE9BQU8sRUFDTCxxQkFBcUIsRUFDckIsZUFBZSxHQUNoQixNQUFNLFlBQVksQ0FBQztBQUVwQixNQUFNLGdCQUFnQixHQUFHLENBQUMsT0FBZ0IsRUFBVSxFQUFFO0lBQ3BELE1BQU0sYUFBYSxHQUFHLE9BQU8sQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLGVBQWUsQ0FBQyxDQUFDO0lBQzNELElBQUksQ0FBQyxhQUFhLEVBQUUsVUFBVSxDQUFDLFNBQVMsQ0FBQyxJQUFJLGFBQWEsQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQztRQUN6RSxNQUFNLElBQUksbUJBQW1CLENBQUMsb0JBQW9CLENBQUMsQ0FBQztJQUN0RCxDQUFDO0lBQ0QsT0FBTyxxQkFBcUIsQ0FDMUIsYUFBYSxDQUFDLEtBQUssQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLEVBQ3JDLG1CQUFtQixFQUNuQixFQUFFLEVBQ0YsR0FBRyxDQUNKLENBQUM7QUFDSixDQUFDLENBQUM7QUFFRixNQUFNLGtCQUFrQixHQUFHLENBQUMsS0FBYyxFQUFFLElBQVksRUFBd0IsRUFBRTtJQUNoRixJQUFJLEtBQUssS0FBSyxTQUFTO1FBQUUsT0FBTyxTQUFTLENBQUM7SUFDMUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLElBQUksS0FBSyxDQUFDLE1BQU0sR0FBRyxFQUFFO1FBQUUsTUFBTSxJQUFJLG1CQUFtQixDQUFDLGVBQWUsQ0FBQyxDQUFDO0lBQy9GLE9BQU8sS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFDLEtBQUssRUFBRSxFQUFFLENBQUMscUJBQXFCLENBQUMsS0FBSyxFQUFFLElBQUksRUFBRSxDQUFDLEVBQUUsSUFBSSxDQUFDLENBQUMsQ0FBQztBQUMzRSxDQUFDLENBQUM7QUFFRixNQUFNLENBQUMsTUFBTSxrQ0FBa0MsR0FBRyxDQUNoRCxPQUF1QixFQUN2QixPQUFrQyxFQUNLLEVBQUU7SUFDekMsSUFBSSxDQUFDLE9BQU8sSUFBSSxDQUFDLE9BQU8sSUFBSSxPQUFPLE9BQU8sQ0FBQyxzQkFBc0IsS0FBSyxVQUFVLEVBQUUsQ0FBQztRQUNqRixNQUFNLElBQUksbUJBQW1CLENBQUMsZUFBZSxDQUFDLENBQUM7SUFDakQsQ0FBQztJQUNELE1BQU0sY0FBYyxHQUFHLGtCQUFrQixDQUFDLE9BQU8sQ0FBQyxjQUFjLEVBQUUsZUFBZSxDQUFDLENBQUM7SUFDbkYsTUFBTSxZQUFZLEdBQUcsa0JBQWtCLENBQUMsT0FBTyxDQUFDLFlBQVksRUFBRSxhQUFhLENBQUMsQ0FBQztJQUM3RSxJQUFJLE9BQU8sQ0FBQyxrQkFBa0IsS0FBSyxTQUFTLElBQUksT0FBTyxPQUFPLENBQUMsa0JBQWtCLEtBQUssU0FBUyxFQUFFLENBQUM7UUFDaEcsTUFBTSxJQUFJLG1CQUFtQixDQUFDLGVBQWUsQ0FBQyxDQUFDO0lBQ2pELENBQUM7SUFDRCxNQUFNLGVBQWUsR0FBRyxPQUFPLENBQUMsZUFBZSxLQUFLLFNBQVM7UUFDM0QsQ0FBQyxDQUFDLEdBQUcsR0FBRyxJQUFJO1FBQ1osQ0FBQyxDQUFDLGVBQWUsQ0FBQyxPQUFPLENBQUMsZUFBZSxFQUFFLGlCQUFpQixFQUFFLElBQUksRUFBRSxJQUFJLEdBQUcsSUFBSSxDQUFDLENBQUM7SUFDbkYsTUFBTSxrQkFBa0IsR0FBRyxPQUFPLENBQUMsa0JBQWtCLEtBQUssU0FBUztRQUNqRSxDQUFDLENBQUMsR0FBRyxHQUFHLElBQUk7UUFDWixDQUFDLENBQUMsZUFBZSxDQUFDLE9BQU8sQ0FBQyxrQkFBa0IsRUFBRSxvQkFBb0IsRUFBRSxJQUFJLEVBQUUsR0FBRyxHQUFHLElBQUksQ0FBQyxDQUFDO0lBRXhGLE1BQU0sU0FBUyxHQUFHLEtBQUssRUFDckIsT0FBOEMsRUFDOUMsTUFBdUUsRUFDM0QsRUFBRTtRQUNkLE1BQU0sTUFBTSxHQUFHLHFCQUFxQixDQUFDLE9BQU8sQ0FBQyxRQUFRLEVBQUUsUUFBUSxFQUFFLFFBQVEsRUFBRSxDQUFDLEVBQUUsR0FBRyxDQUFDLENBQUM7UUFDbkYsTUFBTSxlQUFlLEdBQUcsZ0JBQWdCLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQzFELE1BQU0sTUFBTSxHQUFHLFdBQVcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLE1BQU0sRUFBRSxPQUFPLENBQUMsT0FBTyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUM7UUFDL0UsTUFBTSxDQUFDLGNBQWMsRUFBRSxDQUFDO1FBQ3hCLE1BQU0sVUFBVSxHQUFHLE9BQU8sQ0FBQyxtQkFBbUIsQ0FBQyxlQUFlLEVBQUUsTUFBTSxFQUFFLE9BQU8sRUFBRSxLQUFLLENBQUMsQ0FBQztRQUN4RixJQUFJLFVBQVUsQ0FBQyxZQUFZLEtBQUssT0FBTyxDQUFDLFFBQVEsRUFBRSxLQUFLLEVBQUUsQ0FBQztZQUN4RCxNQUFNLElBQUksbUJBQW1CLENBQUMsb0JBQW9CLENBQUMsQ0FBQztRQUN0RCxDQUFDO1FBQ0QsTUFBTSxLQUFLLEdBQUcsTUFBTSxPQUFPLENBQUMsWUFBWSxDQUFDO1lBQ3ZDLGVBQWU7WUFDZixNQUFNO1lBQ04sWUFBWSxFQUFFLE9BQU87WUFDckIsY0FBYyxFQUFFLEtBQUs7WUFDckIsTUFBTTtTQUNQLENBQUMsQ0FBQztRQUNILElBQUksQ0FBQztZQUNILE1BQU0sQ0FBQyxjQUFjLEVBQUUsQ0FBQztZQUN4QixPQUFPLE1BQU0sTUFBTSxDQUFDLEtBQUssRUFBRSxNQUFNLENBQUMsQ0FBQztRQUNyQyxDQUFDO2dCQUFTLENBQUM7WUFDVCxNQUFNLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUN4QixDQUFDO0lBQ0gsQ0FBQyxDQUFDO0lBRUYsTUFBTSxXQUFXLEdBQUcsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsTUFBTSxFQUFFLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxRQUFRLEVBQUUsQ0FBQztJQUMzRSxNQUFNLGFBQWEsR0FBRyxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxHQUFHLEVBQUUsQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLENBQUMsR0FBRyxDQUFDLE9BQU8sQ0FBQyxDQUFDLFFBQVEsRUFBRSxDQUFDO0lBQ3pGLE1BQU0sS0FBSyxHQUErQztRQUN4RDtZQUNFLElBQUksRUFBRSxrQkFBa0I7WUFDeEIsV0FBVyxFQUFFLHFEQUFxRDtZQUNsRSxXQUFXLEVBQUUsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDO2dCQUNyQyxLQUFLLEVBQUUsV0FBVztnQkFDbEIsYUFBYSxFQUFFLE9BQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDLEdBQUcsRUFBRSxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDLENBQUMsUUFBUSxFQUFFO2FBQ2pGLENBQUMsQ0FBQyxNQUFNLEVBQUU7WUFDWCxXQUFXLEVBQUUsRUFBRSxZQUFZLEVBQUUsSUFBSSxFQUFFLGFBQWEsRUFBRSxLQUFLLEVBQUU7WUFDekQsT0FBTyxFQUFFLEtBQUssRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFFLEVBQUUsQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLEtBQUssRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUM1RSx5QkFBeUIsQ0FBQyxNQUFNLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQztnQkFDdkQsTUFBTSxFQUFFLFVBQVU7Z0JBQ2xCLEdBQUcsQ0FBQyxPQUFPLElBQUksQ0FBQyxLQUFLLEtBQUssUUFBUSxDQUFDLENBQUMsQ0FBQyxFQUFFLEtBQUssRUFBRSxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztnQkFDaEUsR0FBRyxDQUFDLE9BQU8sSUFBSSxDQUFDLGFBQWEsS0FBSyxRQUFRO29CQUN4QyxDQUFDLENBQUMsRUFBRSxhQUFhLEVBQUUsSUFBSSxDQUFDLGFBQWEsRUFBRTtvQkFDdkMsQ0FBQyxDQUFDLEVBQUUsQ0FBQzthQUNSLEVBQUUsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQ2hCLENBQUM7U0FDSDtRQUNEO1lBQ0UsSUFBSSxFQUFFLGtCQUFrQjtZQUN4QixXQUFXLEVBQUUsaURBQWlEO1lBQzlELFdBQVcsRUFBRSxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUM7Z0JBQ3JDLEdBQUcsRUFBRSxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQztnQkFDakQsS0FBSyxFQUFFLFdBQVc7Z0JBQ2xCLFNBQVMsRUFBRSxhQUFhO2FBQ3pCLENBQUMsQ0FBQyxNQUFNLEVBQUU7WUFDWCxXQUFXLEVBQUUsRUFBRSxZQUFZLEVBQUUsS0FBSyxFQUFFLGFBQWEsRUFBRSxJQUFJLEVBQUU7WUFDekQsT0FBTyxFQUFFLEtBQUssRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFFLEVBQUUsQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLEtBQUssRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUM1RSx5QkFBeUIsQ0FBQyxNQUFNLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQztnQkFDdkQsTUFBTSxFQUFFLFVBQVU7Z0JBQ2xCLEdBQUcsRUFBRSxNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQztnQkFDckIsR0FBRyxDQUFDLE9BQU8sSUFBSSxDQUFDLEtBQUssS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDLEVBQUUsS0FBSyxFQUFFLElBQUksQ0FBQyxLQUFLLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO2dCQUNoRSxHQUFHLENBQUMsT0FBTyxJQUFJLENBQUMsU0FBUyxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsRUFBRSxTQUFTLEVBQUUsSUFBSSxDQUFDLFNBQVMsRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7YUFDN0UsRUFBRSxFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FDaEIsQ0FBQztTQUNIO1FBQ0Q7WUFDRSxJQUFJLEVBQUUsZUFBZTtZQUNyQixXQUFXLEVBQUUsbURBQW1EO1lBQ2hFLFdBQVcsRUFBRSxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUM7Z0JBQ3JDLFFBQVEsRUFBRSxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQztnQkFDdEQsS0FBSyxFQUFFLFdBQVc7Z0JBQ2xCLFNBQVMsRUFBRSxhQUFhO2FBQ3pCLENBQUMsQ0FBQyxNQUFNLEVBQUU7WUFDWCxXQUFXLEVBQUUsRUFBRSxZQUFZLEVBQUUsS0FBSyxFQUFFLGFBQWEsRUFBRSxJQUFJLEVBQUU7WUFDekQsT0FBTyxFQUFFLEtBQUssRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFFLEVBQUUsQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLEtBQUssRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUM1RSx5QkFBeUIsQ0FBQyxNQUFNLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQztnQkFDdkQsTUFBTSxFQUFFLE9BQU87Z0JBQ2YsUUFBUSxFQUFFLE1BQU0sQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDO2dCQUMvQixHQUFHLENBQUMsT0FBTyxJQUFJLENBQUMsS0FBSyxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsRUFBRSxLQUFLLEVBQUUsSUFBSSxDQUFDLEtBQUssRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7Z0JBQ2hFLEdBQUcsQ0FBQyxPQUFPLElBQUksQ0FBQyxTQUFTLEtBQUssUUFBUSxDQUFDLENBQUMsQ0FBQyxFQUFFLFNBQVMsRUFBRSxJQUFJLENBQUMsU0FBUyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQzthQUM3RSxFQUFFLEVBQUUsTUFBTSxFQUFFLENBQUMsQ0FBQyxDQUNoQixDQUFDO1NBQ0g7UUFDRDtZQUNFLElBQUksRUFBRSxjQUFjO1lBQ3BCLFdBQVcsRUFBRSxrREFBa0Q7WUFDL0QsV0FBVyxFQUFFLE9BQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQztnQkFDckMsUUFBUSxFQUFFLE9BQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDO2dCQUN0RCxJQUFJLEVBQUUsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsTUFBTSxFQUFFLENBQUMsR0FBRyxDQUFDLE9BQU8sQ0FBQztnQkFDOUMsS0FBSyxFQUFFLFdBQVc7Z0JBQ2xCLFNBQVMsRUFBRSxhQUFhO2FBQ3pCLENBQUMsQ0FBQyxNQUFNLEVBQUU7WUFDWCxXQUFXLEVBQUUsRUFBRSxZQUFZLEVBQUUsS0FBSyxFQUFFLGFBQWEsRUFBRSxJQUFJLEVBQUU7WUFDekQsT0FBTyxFQUFFLEtBQUssRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFFLEVBQUUsQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLEtBQUssRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUM1RSx5QkFBeUIsQ0FBQyxNQUFNLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQztnQkFDdkQsTUFBTSxFQUFFLE1BQU07Z0JBQ2QsUUFBUSxFQUFFLE1BQU0sQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDO2dCQUMvQixJQUFJLEVBQUUsTUFBTSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUM7Z0JBQ3ZCLEdBQUcsQ0FBQyxPQUFPLElBQUksQ0FBQyxLQUFLLEtBQUssUUFBUSxDQUFDLENBQUMsQ0FBQyxFQUFFLEtBQUssRUFBRSxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztnQkFDaEUsR0FBRyxDQUFDLE9BQU8sSUFBSSxDQUFDLFNBQVMsS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDLEVBQUUsU0FBUyxFQUFFLElBQUksQ0FBQyxTQUFTLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO2FBQzdFLEVBQUUsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQ2hCLENBQUM7U0FDSDtRQUNEO1lBQ0UsSUFBSSxFQUFFLGVBQWU7WUFDckIsV0FBVyxFQUFFLDREQUE0RDtZQUN6RSxXQUFXLEVBQUUsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDO2dCQUNyQyxRQUFRLEVBQUUsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsTUFBTSxFQUFFLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUM7Z0JBQ3RELEdBQUcsRUFBRSxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQztnQkFDL0MsS0FBSyxFQUFFLFdBQVc7Z0JBQ2xCLFNBQVMsRUFBRSxhQUFhO2FBQ3pCLENBQUMsQ0FBQyxNQUFNLEVBQUU7WUFDWCxXQUFXLEVBQUUsRUFBRSxZQUFZLEVBQUUsS0FBSyxFQUFFLGFBQWEsRUFBRSxJQUFJLEVBQUU7WUFDekQsT0FBTyxFQUFFLEtBQUssRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFFLEVBQUUsQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLEtBQUssRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUM1RSx5QkFBeUIsQ0FBQyxNQUFNLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQztnQkFDdkQsTUFBTSxFQUFFLE9BQU87Z0JBQ2YsUUFBUSxFQUFFLE1BQU0sQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDO2dCQUMvQixHQUFHLEVBQUUsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUM7Z0JBQ3JCLEdBQUcsQ0FBQyxPQUFPLElBQUksQ0FBQyxLQUFLLEtBQUssUUFBUSxDQUFDLENBQUMsQ0FBQyxFQUFFLEtBQUssRUFBRSxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztnQkFDaEUsR0FBRyxDQUFDLE9BQU8sSUFBSSxDQUFDLFNBQVMsS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDLEVBQUUsU0FBUyxFQUFFLElBQUksQ0FBQyxTQUFTLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO2FBQzdFLEVBQUUsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQ2hCLENBQUM7U0FDSDtRQUNEO1lBQ0UsSUFBSSxFQUFFLG9CQUFvQjtZQUMxQixXQUFXLEVBQUUsb0RBQW9EO1lBQ2pFLFdBQVcsRUFBRSxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUM7Z0JBQ3JDLEtBQUssRUFBRSxXQUFXO2dCQUNsQixNQUFNLEVBQUUsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDLENBQUMsTUFBTSxFQUFFLEtBQUssQ0FBQyxDQUFDLENBQUMsUUFBUSxFQUFFO2dCQUMzRCxPQUFPLEVBQUUsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsTUFBTSxFQUFFLENBQUMsR0FBRyxFQUFFLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxRQUFRLEVBQUU7YUFDdEUsQ0FBQyxDQUFDLE1BQU0sRUFBRTtZQUNYLFdBQVcsRUFBRSxFQUFFLFlBQVksRUFBRSxJQUFJLEVBQUUsYUFBYSxFQUFFLEtBQUssRUFBRTtZQUN6RCxPQUFPLEVBQUUsS0FBSyxFQUFFLElBQUksRUFBRSxPQUFPLEVBQUUsRUFBRSxDQUFDLFNBQVMsQ0FBQyxPQUFPLEVBQUUsS0FBSyxFQUFFLEtBQUssRUFBRSxNQUFNLEVBQUUsRUFBRSxDQUFDLENBQzVFLHlCQUF5QixDQUFDLE1BQU0sS0FBSyxDQUFDLGtCQUFrQixDQUFDO2dCQUN2RCxNQUFNLEVBQUUsWUFBWTtnQkFDcEIsR0FBRyxDQUFDLE9BQU8sSUFBSSxDQUFDLEtBQUssS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDLEVBQUUsS0FBSyxFQUFFLElBQUksQ0FBQyxLQUFLLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO2dCQUNoRSxHQUFHLENBQUMsSUFBSSxDQUFDLE1BQU0sS0FBSyxNQUFNLElBQUksSUFBSSxDQUFDLE1BQU0sS0FBSyxLQUFLLENBQUMsQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLElBQUksQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO2dCQUNuRixHQUFHLENBQUMsT0FBTyxJQUFJLENBQUMsT0FBTyxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsRUFBRSxPQUFPLEVBQUUsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7YUFDdkUsRUFBRSxFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FDaEIsQ0FBQztTQUNIO0tBQ0YsQ0FBQztJQUVGLE9BQU8sT0FBTyxDQUFDLFFBQVEsQ0FBQyx5QkFBeUIsQ0FBQztRQUNoRCxJQUFJLEVBQUUsbUNBQW1DO1FBQ3pDLE9BQU8sRUFBRSxVQUFVLENBQUMsT0FBTztRQUMzQixHQUFHLENBQUMsY0FBYyxDQUFDLENBQUMsQ0FBQyxFQUFFLGNBQWMsRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7UUFDN0MsR0FBRyxDQUFDLFlBQVksQ0FBQyxDQUFDLENBQUMsRUFBRSxZQUFZLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1FBQ3pDLEdBQUcsQ0FBQyxPQUFPLENBQUMsa0JBQWtCLEtBQUssU0FBUztZQUMxQyxDQUFDLENBQUMsRUFBRSxrQkFBa0IsRUFBRSxPQUFPLENBQUMsa0JBQWtCLEVBQUU7WUFDcEQsQ0FBQyxDQUFDLEVBQUUsQ0FBQztRQUNQLGVBQWU7UUFDZixrQkFBa0I7UUFDbEIsV0FBVyxFQUFFLEdBQUcsRUFBRSxDQUFDLGdDQUFnQztRQUNuRCxTQUFTLEVBQUUsS0FBSyxFQUFFLEVBQUUsT0FBTyxFQUFFLEVBQUUsRUFBRTtZQUMvQixJQUFJLE1BQWMsQ0FBQztZQUNuQixJQUFJLGVBQXVCLENBQUM7WUFDNUIsSUFBSSxDQUFDO2dCQUNILE1BQU0sY0FBYyxHQUFHLE1BQU0sT0FBTyxDQUFDLHNCQUFzQixDQUFDLE9BQU8sQ0FBQyxDQUFDO2dCQUNyRSxNQUFNLEdBQUcscUJBQXFCLENBQUMsY0FBYyxFQUFFLE1BQU0sRUFBRSxRQUFRLEVBQUUsQ0FBQyxFQUFFLEdBQUcsQ0FBQyxDQUFDO2dCQUN6RSxlQUFlLEdBQUcsZ0JBQWdCLENBQUMsT0FBTyxDQUFDLENBQUM7Z0JBQzVDLE1BQU0sVUFBVSxHQUFHLE9BQU8sQ0FBQyxtQkFBbUIsQ0FDNUMsZUFBZSxFQUNmLE1BQU0sRUFDTixPQUFPLEVBQ1AsS0FBSyxDQUNOLENBQUM7Z0JBQ0YsT0FBTztvQkFDTCxLQUFLLEVBQUUsVUFBVSxDQUFDLFlBQVk7b0JBQzlCLFFBQVEsRUFBRSxNQUFNO29CQUNoQixNQUFNLEVBQUUsQ0FBQyxTQUFTLENBQUM7b0JBQ25CLFNBQVMsRUFBRSxVQUFVLENBQUMsU0FBUztpQkFDaEMsQ0FBQztZQUNKLENBQUM7WUFBQyxNQUFNLENBQUM7Z0JBQ1AsT0FBTyxJQUFJLFFBQVEsQ0FBQyxjQUFjLEVBQUUsRUFBRSxNQUFNLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQztZQUN2RCxDQUFDO1FBQ0gsQ0FBQztRQUNELEtBQUs7S0FDTixDQUFDLENBQUM7QUFDTCxDQUFDLENBQUMifQ==

package/dist_ts/plugins.d.ts

@@ -0,0 +1,20 @@
+import { Buffer } from 'node:buffer';
+import * as crypto from 'node:crypto';
+import * as dns from 'node:dns';
+import * as fs from 'node:fs';
+import * as fsPromises from 'node:fs/promises';
+import * as http from 'node:http';
+import * as net from 'node:net';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import * as stream from 'node:stream';
+import * as tls from 'node:tls';
+import * as url from 'node:url';
+export { Buffer, crypto, dns, fs, fsPromises, http, net, os, path, stream, tls, url };
+import * as flexharness from '@modelprofile.com/flexharness';
+import * as smartagent from '@push.rocks/smartagent';
+import * as smartmcp from '@push.rocks/smartmcp';
+import * as smartpuppeteer from '@push.rocks/smartpuppeteer';
+export { flexharness, smartagent, smartmcp, smartpuppeteer };
+import ipaddr from 'ipaddr.js';
+export { ipaddr };

package/dist_ts/plugins.js

@@ -0,0 +1,24 @@
+// node native scope
+import { Buffer } from 'node:buffer';
+import * as crypto from 'node:crypto';
+import * as dns from 'node:dns';
+import * as fs from 'node:fs';
+import * as fsPromises from 'node:fs/promises';
+import * as http from 'node:http';
+import * as net from 'node:net';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import * as stream from 'node:stream';
+import * as tls from 'node:tls';
+import * as url from 'node:url';
+export { Buffer, crypto, dns, fs, fsPromises, http, net, os, path, stream, tls, url };
+// foss.global scopes
+import * as flexharness from '@modelprofile.com/flexharness';
+import * as smartagent from '@push.rocks/smartagent';
+import * as smartmcp from '@push.rocks/smartmcp';
+import * as smartpuppeteer from '@push.rocks/smartpuppeteer';
+export { flexharness, smartagent, smartmcp, smartpuppeteer };
+// third-party scope
+import ipaddr from 'ipaddr.js';
+export { ipaddr };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/utils.d.ts

@@ -0,0 +1,25 @@
+import * as plugins from './plugins.js';
+export declare const validateBoundedString: (value: unknown, name: string, minimum: number, maximum: number) => string;
+export declare const validateInteger: (value: unknown, name: string, minimum: number, maximum: number) => number;
+export declare const validateOptionalInteger: (value: unknown, name: string, minimum: number, maximum: number, defaultValue: number) => number;
+export declare const validateExactKeys: (value: unknown, allowedKeys: readonly string[], name: string) => Record<string, unknown>;
+export declare const randomId: (bytes?: number) => string;
+export declare const digestToken: (token: string) => plugins.Buffer;
+export declare const digestsEqual: (left: plugins.Buffer, right: plugins.Buffer) => boolean;
+export declare const delay: (milliseconds: number) => Promise<void>;
+export declare const waitBounded: <T>(promise: Promise<T>, timeoutMs: number) => Promise<{
+    settled: true;
+    value: T;
+} | {
+    settled: false;
+}>;
+export declare const truncateString: (value: string, maximum?: number) => string;
+export declare const assertJsonWithoutBytes: (value: unknown, maxBytes?: number) => void;
+export declare class TransitionMutex {
+    private locked;
+    private waiters;
+    tryAcquire(): (() => void) | undefined;
+    acquire(): Promise<() => void>;
+    get busy(): boolean;
+    private createRelease;
+}

package/dist_ts/utils.js

@@ -0,0 +1,143 @@
+import * as plugins from './plugins.js';
+import { BrowserRuntimeError } from './errors.js';
+export const validateBoundedString = (value, name, minimum, maximum) => {
+    if (typeof value !== 'string') {
+        throw new BrowserRuntimeError('INVALID_INPUT', `${name} must be a string`);
+    }
+    const normalized = value.trim();
+    if (normalized.length < minimum || normalized.length > maximum) {
+        throw new BrowserRuntimeError('INVALID_INPUT', `${name} must contain between ${minimum} and ${maximum} characters`);
+    }
+    return normalized;
+};
+export const validateInteger = (value, name, minimum, maximum) => {
+    if (!Number.isInteger(value) || value < minimum || value > maximum) {
+        throw new BrowserRuntimeError('INVALID_INPUT', `${name} must be an integer between ${minimum} and ${maximum}`);
+    }
+    return value;
+};
+export const validateOptionalInteger = (value, name, minimum, maximum, defaultValue) => value === undefined
+    ? defaultValue
+    : validateInteger(value, name, minimum, maximum);
+export const validateExactKeys = (value, allowedKeys, name) => {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new BrowserRuntimeError('INVALID_INPUT', `${name} must be an object`);
+    }
+    const record = value;
+    const allowed = new Set(allowedKeys);
+    for (const key of Object.keys(record)) {
+        if (!allowed.has(key)) {
+            throw new BrowserRuntimeError('INVALID_INPUT', `${name} contains an unsupported field`);
+        }
+    }
+    return record;
+};
+export const randomId = (bytes = 24) => plugins.crypto.randomBytes(bytes).toString('base64url');
+export const digestToken = (token) => plugins.crypto
+    .createHash('sha256')
+    .update(token, 'utf8')
+    .digest();
+export const digestsEqual = (left, right) => (left.byteLength === right.byteLength && plugins.crypto.timingSafeEqual(left, right));
+export const delay = (milliseconds) => new Promise((resolve) => {
+    const timer = setTimeout(resolve, milliseconds);
+    timer.unref();
+});
+export const waitBounded = async (promise, timeoutMs) => {
+    const timeout = Symbol('timeout');
+    let timer;
+    const timeoutPromise = new Promise((resolve) => {
+        timer = setTimeout(() => resolve(timeout), timeoutMs);
+        timer.unref();
+    });
+    try {
+        const result = await Promise.race([promise, timeoutPromise]);
+        return result === timeout
+            ? { settled: false }
+            : { settled: true, value: result };
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+};
+export const truncateString = (value, maximum = 2048) => (value.length <= maximum ? value : value.slice(0, maximum));
+export const assertJsonWithoutBytes = (value, maxBytes = 256 * 1024) => {
+    const seen = new WeakSet();
+    const visit = (current, depth) => {
+        if (depth > 24) {
+            throw new BrowserRuntimeError('PROTOCOL_ERROR');
+        }
+        if (current instanceof Uint8Array
+            || current instanceof ArrayBuffer
+            || ArrayBuffer.isView(current)) {
+            throw new BrowserRuntimeError('PROTOCOL_ERROR');
+        }
+        if (!current || typeof current !== 'object') {
+            if (typeof current === 'bigint'
+                || typeof current === 'function'
+                || typeof current === 'symbol'
+                || typeof current === 'undefined'
+                || (typeof current === 'number' && !Number.isFinite(current))) {
+                throw new BrowserRuntimeError('PROTOCOL_ERROR');
+            }
+            return;
+        }
+        if (seen.has(current)) {
+            throw new BrowserRuntimeError('PROTOCOL_ERROR');
+        }
+        seen.add(current);
+        if (Array.isArray(current)) {
+            for (const entry of current)
+                visit(entry, depth + 1);
+            return;
+        }
+        const prototype = Object.getPrototypeOf(current);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new BrowserRuntimeError('PROTOCOL_ERROR');
+        }
+        for (const entry of Object.values(current)) {
+            visit(entry, depth + 1);
+        }
+    };
+    visit(value, 0);
+    const serialized = JSON.stringify(value);
+    if (plugins.Buffer.byteLength(serialized, 'utf8') > maxBytes) {
+        throw new BrowserRuntimeError('PROTOCOL_ERROR');
+    }
+};
+export class TransitionMutex {
+    locked = false;
+    waiters = [];
+    tryAcquire() {
+        if (this.locked)
+            return undefined;
+        this.locked = true;
+        return this.createRelease();
+    }
+    async acquire() {
+        const immediate = this.tryAcquire();
+        if (immediate)
+            return immediate;
+        await new Promise((resolve) => this.waiters.push(resolve));
+        return this.createRelease();
+    }
+    get busy() {
+        return this.locked;
+    }
+    createRelease() {
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            const next = this.waiters.shift();
+            if (next) {
+                next();
+            }
+            else {
+                this.locked = false;
+            }
+        };
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/license.md

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Task Venture Capital GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@modelprofile.com/browser-runtime",
+  "version": "1.0.0",
+  "private": false,
+  "description": "Parent-owned, project-scoped Chromium runtime with authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.",
+  "main": "dist_ts/index.js",
+  "typings": "dist_ts/index.d.ts",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist_ts/index.d.ts",
+      "import": "./dist_ts/index.js"
+    }
+  },
+  "author": "Task Venture Capital GmbH",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://code.foss.global/modelprofile.com/browser-runtime.git"
+  },
+  "homepage": "https://code.foss.global/modelprofile.com/browser-runtime",
+  "bugs": {
+    "url": "https://community.foss.global/"
+  },
+  "os": [
+    "linux"
+  ],
+  "engines": {
+    "node": ">=24"
+  },
+  "dependencies": {
+    "@modelprofile.com/flexharness": "^3.1.0",
+    "@push.rocks/smartagent": "^4.8.0",
+    "@push.rocks/smartmcp": "^0.3.0",
+    "@push.rocks/smartpuppeteer": "^2.3.0",
+    "ipaddr.js": "^2.5.0"
+  },
+  "devDependencies": {
+    "@git.zone/tsbuild": "4.4.2",
+    "@git.zone/tsrun": "2.0.6",
+    "@git.zone/tstest": "4.0.0",
+    "@types/node": "26.2.0"
+  },
+  "files": [
+    "ts/**/*",
+    "dist_ts/**/*",
+    ".smartconfig.json",
+    "readme.md",
+    "readme.hints.md",
+    "changelog.md",
+    "license.md"
+  ],
+  "scripts": {
+    "build": "tsbuild",
+    "test": "pnpm run build && tstest test/ --verbose --logfile",
+    "check:test": "tsbuild check 'test/**/*'",
+    "test:real-chrome": "BROWSER_RUNTIME_REAL_CHROME=1 tstest test/test.realchrome.node.ts --verbose --logfile --timeout 180"
+  }
+}

package/readme.hints.md

@@ -0,0 +1,35 @@
+# readme.hints.md
+
+Durable implementation findings for `@modelprofile.com/browser-runtime`.
+
+## Ownership and lifecycle
+
+- Capability authorization uses bounded pending reservations. A project slot is inserted only after host authorization succeeds, so denied project IDs cannot consume slot quota. Its transition mutex, generation, lease, active operation, frame subscriber, browser session, proxy, profile, and idle timer form one ownership domain.
+- Agent lease admission and every agent operation use try-lock semantics. A transition, lease, or operation returns `BUSY`; work is never queued behind another agent operation.
+- Human admission marks a fencing generation, aborts an agent lease and operation, releases the mutex while waiting, and verifies the same generation before publishing the human lease. Work that does not quiesce is escalated through `LiveBrowserSession.terminate()`.
+- Profiles are deleted or reused only after confirmed process-group death. An unconfirmed termination permanently fences the slot and leaves the session/profile ownership reachable for a later retirement or `stop()` retry.
+- The runtime lock is created with `open(..., 'wx')` and is never treated as stale. A failed start after lock acquisition retains lock ownership so the same runtime object can retry or stop cleanly.
+
+## Capability boundary
+
+- Capability tokens are returned once. Runtime records retain only SHA-256 digests and compare exact digests with `timingSafeEqual`; project, actor, role, peer, source, optional Flex scope/session, and expiry are immutable server-owned bindings.
+- Expiry and revocation abort work, close frame state, release the lease, and invoke the host disconnect callback or close the exact trusted framed peer. Cleanup remains tracked and `stop()` drains it.
+- Operation IDs are generated independently from capability, lease, framed request, tab, and artifact IDs. Audit callbacks receive bounded metadata and are time-bounded.
+
+## Browser confinement
+
+- Production session options are assembled only inside `BrowserRuntime`: sandbox required, random private user data directory, authenticated project proxy, fixed network-reduction arguments, external browser DNS failure rules, denied downloads/file choosers/permissions, and HTTP(S)-only public navigation. Deterministic injection uses a non-root-exported test symbol and is not part of the package API.
+- `allowEvaluation` exists only to run the private confinement probe. No runtime lease, framed message, Flex tool, or MCP tool projects evaluation.
+- The production probe owns a random loopback origin on a port outside the project allowlist, checks proxy traversal plus zero origin hits, checks synthetic `.invalid` traversal, and checks forced WebRTC policy by observing ICE candidates.
+
+## Egress and artifacts
+
+- HTTP absolute-form, WebSocket Upgrade, and CONNECT all use the same canonical target resolver. Every DNS answer must be public unicast; one bad answer rejects the entire set. The selected answer is dialed numerically through the connector seam.
+- Origin host semantics remain in `Host`; CONNECT leaves end-to-end TLS/SNI untouched. Proxy authorization and inherited hop-by-hop headers never reach upstreams.
+- Artifact path components are generated or keyed digests, never caller IDs. The store exclusively owns its root; serialized admission enforces project and aggregate quotas. Writes are private, temporary, synced, and atomically renamed; reads use no-follow handles and verify size plus SHA-256.
+
+## Adapter boundary
+
+- Framed messages contain no project, actor, role, source, scope, session, or peer selectors. The parent supplies peer, Flex scope, and Flex session out of band, and only one attached framed peer may own a peer ID.
+- Flex resolves only a token; framed acquisition validates its immutable server-side `flex` source and scope/session bindings. SmartAgent's browser tool is configured with exactly navigate, snapshot, screenshot, click, fill, and press.
+- MCP performs independent request authentication before bearer validation. Its tool list contains exactly the same six actions. Every call verifies the immutable authorization identity, acquires and releases an MCP-source agent lease, and combines SmartMCP's tool signal with the Web request signal.