@modelprofile.com/browser-runtime 2.0.0 → 2.1.1

package/changelog.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 2026-08-13 - 2.1.1
+
+### Fixes
+
+- isolate production confinement probe in a disposable tab (confinement)
+  - Run loopback, invalid host, and WebRTC confinement checks in an inactive probe tab instead of the active session tab.
+  - Close the probe tab during cleanup and fail closed if cleanup leaves session state changed.
+  - Preserve both probe and cleanup failures with AggregateError when both occur.
+
+## 2026-08-12 - 2.1.0
+
+### Features
+
+- add a fail-closed pre-operation authorization and audit gate (runtime)
+  - Reserve and revalidate exact resource authority around an awaited host callback with an `AbortSignal` before browser side effects begin.
+  - Expose immutable operation identity and a `beforeOperationTimeoutMs` option accepting 100 through 120,000 milliseconds with a 10,000 millisecond default.
+  - Deny rejected gates, report gate timeout as `TIMEOUT`, and correlate post-cleanup best-effort terminal audit through the same operation ID.
+
 ## 2026-08-12 - 2.0.0
 
 ### Breaking Changes

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@modelprofile.com/browser-runtime',
-    version: '2.0.0',
+    version: '2.1.1',
     description: 'Parent-owned, resource-centric Chromium runtime with revisioned attachment fencing, authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxtQ0FBbUM7SUFDekMsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLDBMQUEwTDtDQUN4TSxDQUFBIn0=

package/dist_ts/classes.runtime.d.ts

@@ -37,6 +37,8 @@ interface IOperationRecord {
     controller: AbortController;
     action: string;
     startedAt: number;
+    session: ILiveBrowserSessionLike;
+    incarnationGeneration: number;
     promise: Promise<void>;
 }
 interface IFrameSubscriptionRecord {
@@ -166,6 +168,10 @@ export declare class BrowserRuntime {
     private createLeaseRecord;
     private ensureSession;
     private runOperation;
+    private normalizeOperationError;
+    private operationErrorCode;
+    private runBeforeOperation;
+    private createOperationIdentity;
     private executeAgentActionInternal;
     private resolveSemanticTarget;
     private resourceState;