@modelprofile.com/browser-runtime 2.1.2 → 3.0.1

package/dist_ts/index.d.ts

@@ -8,4 +8,4 @@ export { BrowserRuntimeError } from './errors.js';
 export { createBrowserRuntimeMcpHttpHandler } from './mcp.js';
 export type { TAcquireBrowserRuntimeLeaseOptions } from './classes.runtime.js';
 export type { TBrowserRuntimeErrorCode } from './errors.js';
-export type { IAttachTrustedFramedPeerOptions, IApplyBrowserAttachmentBindingRequest, IBrowserAttachmentBinding, IBrowserActionStateResult, IBrowserArtifactMetadata, IBrowserArtifactStoreOptions, IBrowserMcpAuthenticatedBinding, TBrowserCapabilityAuthorizationRequest, TBrowserCapabilityDescriptor, IBrowserClickAction, IBrowserEgressConnectionOptions, IBrowserEgressProxyOptions, IBrowserEgressProxyStats, IBrowserFlexCapabilityBinding, IBrowserFlexSessionId, IBrowserFillAction, IBrowserNavigateAction, IBrowserObservationResult, IBrowserOpenCodeSessionId, IBrowserPressAction, TBrowserRuntimeAuditEvent, TBrowserRuntimeOperationIdentity, IBrowserRuntimeFlexToolProviderOptions, IBrowserRuntimeFrameSubscription, IBrowserRuntimeFramedClientOptions, IBrowserRuntimeMcpOptions, IBrowserRuntimeOperationOptions, IBrowserRuntimeOptions, IBrowserResourceKey, IBrowserResourceRegistration, IBrowserRuntimeState, IBrowserRuntimeTabState, IBrowserScreenshotAction, IBrowserScreenshotResult, IBrowserSnapshotAction, ICreateBrowserResourceRequest, TIssueBrowserCapabilityRequest, TIssuedBrowserCapability, TQualifiedBrowserSessionId, IRegisterBrowserResourceRequest, IResolvedBrowserFlexCapability, TBrowserActorRole, TBrowserAgentAction, TBrowserAgentActionResult, TBrowserCapabilitySource, TBrowserDnsResolver, TBrowserEgressConnector, TBrowserHarnessId, TBrowserRuntimeEvent, } from './interfaces.js';
+export type { IAttachTrustedFramedPeerOptions, IApplyBrowserAttachmentBindingRequest, IBrowserAttachmentBinding, IBrowserActionStateResult, IBrowserArtifactMetadata, IBrowserArtifactStoreOptions, IBrowserMcpAuthenticatedBinding, TBrowserCapabilityAuthorizationRequest, TBrowserCapabilityDescriptor, IBrowserClickAction, IBrowserEgressConnectionOptions, IBrowserEgressProxyOptions, IBrowserEgressProxyStats, IBrowserFlexCapabilityBinding, IBrowserFlexSessionId, IBrowserFillAction, IBrowserNavigateAction, IBrowserObservationResult, IBrowserOpenCodeSessionId, IBrowserPressAction, TBrowserRuntimeAuditEvent, TBrowserRuntimeLeaseAuthority, TBrowserRuntimeOperationClassification, TBrowserRuntimeOperationIdentity, IBrowserRuntimeFlexToolProviderOptions, IBrowserRuntimeFrameSubscription, IBrowserRuntimeFramedClientOptions, IBrowserRuntimeMcpOptions, IBrowserRuntimeOperationOptions, IBrowserRuntimeOptions, IBrowserResourceKey, IBrowserResourceRegistration, IBrowserRuntimeState, IBrowserRuntimeTabState, IBrowserScreenshotAction, IBrowserScreenshotResult, IBrowserSnapshotAction, ICreateBrowserResourceRequest, TIssueBrowserCapabilityRequest, TIssuedBrowserCapability, TQualifiedBrowserSessionId, IRegisterBrowserResourceRequest, IResolvedBrowserFlexCapability, TBrowserActorRole, TBrowserAgentAction, TBrowserAgentActionResult, TBrowserCapabilitySource, TBrowserDnsResolver, TBrowserEgressConnector, TBrowserHarnessId, TBrowserRuntimeEvent, } from './interfaces.js';

package/dist_ts/interfaces.d.ts

@@ -51,6 +51,7 @@ export interface IBrowserHumanCapabilityBinding extends IBrowserCapabilityBindin
     sessionId?: never;
     scopeId?: never;
     channelId?: never;
+    runId?: never;
 }
 export interface IBrowserFlexCapabilityBinding extends IBrowserCapabilityBindingBase {
     role: 'agent';
@@ -58,6 +59,7 @@ export interface IBrowserFlexCapabilityBinding extends IBrowserCapabilityBinding
     sessionId: IBrowserFlexSessionId;
     scopeId: string;
     channelId: string;
+    runId: string;
 }
 export interface IBrowserMcpCapabilityBinding extends IBrowserCapabilityBindingBase {
     role: 'agent';
@@ -65,6 +67,7 @@ export interface IBrowserMcpCapabilityBinding extends IBrowserCapabilityBindingB
     sessionId: IBrowserOpenCodeSessionId;
     scopeId?: never;
     channelId?: never;
+    runId?: never;
 }
 export type TBrowserCapabilityAuthorizationRequest = IBrowserHumanCapabilityBinding | IBrowserFlexCapabilityBinding | IBrowserMcpCapabilityBinding;
 export type TIssueBrowserCapabilityRequest = TBrowserCapabilityAuthorizationRequest & {
@@ -91,8 +94,17 @@ export type TBrowserRuntimeOperationIdentity = TReadonlyBrowserCapabilityAuthori
     readonly capabilityId: string;
     readonly leaseId: string;
     readonly action: string;
+    readonly classification: TBrowserRuntimeOperationClassification;
     readonly startedAt: number;
 };
+export type TBrowserRuntimeOperationClassification = 'raw-input' | 'viewport' | 'navigation' | 'tab' | 'agent-action';
+export type TBrowserRuntimeLeaseAuthority = TReadonlyBrowserCapabilityAuthorizationRequest & {
+    readonly runtimeAuthorityId: string;
+    readonly authorityGeneration: number;
+    readonly incarnationGeneration: number;
+    readonly capabilityId: string;
+    readonly leaseId: string;
+};
 export type TBrowserRuntimeAuditEvent = TBrowserRuntimeOperationIdentity & {
     readonly phase: 'completed' | 'failed';
     readonly finishedAt: number;
@@ -151,14 +163,17 @@ export interface IBrowserRuntimeOptions {
     authorizationTimeoutMs?: number;
     beforeOperationTimeoutMs?: number;
     maxTabsPerResource?: number;
+    maxQueuedOperationsPerLease?: number;
     operationTimeoutMs?: number;
     quiescenceTimeoutMs?: number;
     terminationGraceMs?: number;
     terminationForceMs?: number;
+    cleanupTimeoutMs?: number;
     auditTimeoutMs?: number;
     confinementProbeTimeoutMs?: number;
     idleTerminationMs?: number;
     maxFrameBytes?: number;
+    maxOutstandingFrames?: number;
     frameAcknowledgementTimeoutMs?: number;
     egress?: Omit<IBrowserEgressProxyOptions, 'projectId' | 'browserResourceId'>;
     artifacts?: Omit<IBrowserArtifactStoreOptions, 'rootDirectory'>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelprofile.com/browser-runtime",
-  "version": "2.1.2",
+  "version": "3.0.1",
   "private": false,
   "description": "Parent-owned, resource-centric Chromium runtime with revisioned attachment fencing, authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.",
   "main": "dist_ts/index.js",
@@ -29,7 +29,7 @@
     "@modelprofile.com/flexharness": "^4.0.0",
     "@push.rocks/smartagent": "^4.8.0",
     "@push.rocks/smartmcp": "^0.3.0",
-    "@push.rocks/smartpuppeteer": "^2.3.0",
+    "@push.rocks/smartpuppeteer": "^2.4.0",
     "ipaddr.js": "^2.5.0"
   },
   "devDependencies": {

package/readme.hints.md

@@ -5,7 +5,7 @@ Durable implementation findings for `@modelprofile.com/browser-runtime`.
 ## Ownership and lifecycle
 
 - Controller durable truth is a logical resource with immutable `projectId`, stable random `browserResourceId`, and a revisioned attachment binding. Runtime state is process-local and must be re-registered after every restart.
-- A resource slot owns only incarnation and arbitration state: its transition mutex, arbitration and incarnation generations, lease, operation, frame subscriber, Chromium session, authenticated egress proxy, private profile, and idle termination timer.
+- A resource slot owns only incarnation and arbitration state: its transition mutex, arbitration, incarnation, and process-local authority generations, lease, bounded operation FIFO, bounded frame window, Chromium session, authenticated egress proxy, private profile, and idle termination timer.
 - `terminateResource()` and idle termination remove only the incarnation. They preserve registration, attachment, capabilities, and artifacts. `retireResource()` permanently fences, revokes, terminates, purges exact-resource artifacts, then unregisters only after all cleanup succeeds. Durable retirement remains Controller truth; Runtime tombstones are bounded and process-local.
 - Failed retirement retains a fenced, retryable registration. Unknown profile, lock, or artifact ownership remains fail closed.
 - Launch quota admission uses synchronous pending reservations across global and per-project running-resource limits.
@@ -16,8 +16,10 @@ Durable implementation findings for `@modelprofile.com/browser-runtime`.
 - Any `sessionId: null` binding is detached; revision zero is specifically the initial detached/no-agent-authority state. A newer attachment synchronously closes admission before waiting for the resource mutex, revokes its capabilities, and quiesces its active work. Work that ignores cancellation escalates only that resource incarnation.
 - Agent capabilities require the exact current non-detached qualified session. Human capabilities bind the exact resource, project, attachment authority, and revision but intentionally carry no session ID and may be issued while detached. Any attachment advance revokes both human and agent capabilities.
 - Capability tokens are returned once. Runtime records retain only SHA-256 digests and use `timingSafeEqual`. Authorization is rechecked after asynchronous host authorization, during lease acquisition, and before and after every operation.
-- Capability, audit, and lease identity includes immutable project, resource, attachment authority and revision, actor, peer, role, source, qualified agent session, and Flex scope/channel where applicable.
-- `beforeOperation` reserves the exact resource and lets the host persist policy/audit through an awaited fail-closed gate. Runtime then atomically revalidates lease, attachment, session, arbitration generation, and incarnation before starting the side effect. Terminal audit remains best effort, uses the same operation ID, and runs after bounded cleanup releases or fences the exact reservation.
+- Capability, audit, and lease identity includes immutable project, resource, attachment authority and revision, actor, peer, role, source, qualified agent session, and Flex scope/channel/run where applicable.
+- Same-lease operations use a strict bounded FIFO. Queue cancellation composes external abort, lease revocation, attachment transition, resource termination, and runtime shutdown. Only dequeued work reaches `beforeOperation`; started uncertain work must quiesce or fence its exact incarnation before terminal audit and queue advancement.
+- `beforeOperation` reserves the exact resource and lets the host persist policy/audit through an awaited fail-closed gate. Runtime then atomically revalidates lease, attachment, session, arbitration generation, and incarnation before starting the side effect. Both host hooks carry the same exact operation ID and classification; terminal audit remains best effort and runs after bounded cleanup releases or fences the exact reservation.
+- Lease authority snapshots are immutable process-local revalidation tokens. They expose `authorityGeneration` and bind the runtime instance, incarnation, exact `capabilityId`, exact `leaseId`, and attachment, but never replace Controller durable attachment truth.
 
 ## Browser confinement
 
@@ -34,7 +36,9 @@ Durable implementation findings for `@modelprofile.com/browser-runtime`.
 
 ## Adapter boundary
 
-- Framed messages contain no identity selectors. The parent binds project, resource, attachment authority/revision, actor, peer, role, source, qualified session, Flex scope, and channel out of band.
+- Framed messages contain no identity selectors. The parent binds project, resource, attachment authority/revision, actor, peer, role, source, qualified session, Flex scope, channel, and exact run out of band.
 - One qualified session can own multiple resource-specific framed channels. Capability revocation owns server-peer disconnect; peer-initiated release/close revokes only that channel's capability without recursively disconnecting itself.
-- Flex resolves only a capability token. SmartAgent exposes exactly navigate, snapshot, screenshot, click, fill, and press.
+- Framed request counts and queued write bytes are bounded. Runtime shutdown has a bounded caller-visible cleanup deadline while retaining in-flight cleanup ownership for retry.
+- Frame delivery owns a bounded map of exact identities and configures SmartPuppeteer's separate private CDP-to-ack map to the same limit. Equal limits prevent private eviction while the application map has spare capacity, but private-first retirement at full capacity can make an exact acknowledgement fulfill `{ accepted: false }`. Both fulfilled booleans settle the application entry without proving successful upstream retirement; rejection or timeout fails closed. Application acknowledgement timeout and failed delivery deliberately fail the lease regardless of a fulfilled boolean. There is no cumulative frame protocol.
+- Flex resolves only a capability token, and the provider's run must exactly match its trusted framed client. SmartAgent exposes exactly navigate, snapshot, screenshot, click, fill, and press.
 - MCP independent authentication returns the complete expected binding. The binding is retained in server-owned auth context and tool schemas expose no resource, session, revision, or authority selector.

package/readme.md

@@ -71,9 +71,9 @@ try {
 }
 ```
 
-Projects and qualified sessions may each own many resources. Human/agent arbitration, mutexes, leases, operations, profiles, proxies, frame subscriptions, and idle timers are per resource.
+Projects and qualified sessions may each own many resources. Human/agent arbitration, mutexes, leases, operation queues, profiles, proxies, frame subscriptions, and idle timers are per resource.
 
-`registerResource()` is idempotent only for the same project/resource key and identical attachment. `listResources()` reports process-local registration and incarnation metadata. `terminateResource()` terminates only the current incarnation and preserves registration, attachment, and artifacts. `retireResource()` permanently fences the process-local registration, revokes and quiesces authority, terminates its incarnation, purges exact-resource artifacts, and unregisters only after cleanup succeeds. The Controller separately owns durable retirement truth and must not rehydrate retired resources. Runtime tombstones and registrations are ephemeral, bounded process state. `stop()` revokes all process-local capabilities, terminates every incarnation, removes the Runtime-owned artifact root and registrations, and releases the lock without deleting Controller durable truth.
+`registerResource()` is idempotent only for the same project/resource key and identical attachment. `listResources()` reports process-local registration and incarnation metadata. `terminateResource()` terminates only the current incarnation and preserves registration, attachment, and artifacts. `retireResource()` permanently fences the process-local registration, revokes and quiesces authority, terminates its incarnation, purges exact-resource artifacts, and unregisters only after cleanup succeeds. The Controller separately owns durable retirement truth and must not rehydrate retired resources. Runtime tombstones and registrations are ephemeral, bounded process state. `stop()` revokes all process-local capabilities, terminates every incarnation, removes the Runtime-owned artifact root and registrations, and releases the lock without deleting Controller durable truth. `cleanupTimeoutMs` defaults to 30,000 milliseconds and accepts values from 100 through 120,000. If that caller-visible deadline expires, `stop()` rejects with `TIMEOUT` while Runtime retains ownership of the cleanup still in flight; a later `stop()` rejoins it, and `start()` waits for it to finish before restarting.
 
 ## Attachment Fencing
 
@@ -97,13 +97,19 @@ Agent capabilities require the exact current non-detached qualified session. Hum
 
 Agent actions are exactly `navigate`, `snapshot`, `screenshot`, `click`, `fill`, and `press`. Human leases additionally expose tab lifecycle, viewport, raw input, frame subscription/acknowledgement, and exact-resource artifact reads/deletes. JavaScript evaluation is not public.
 
-`beforeOperation` is an optional awaited fail-closed gate. It receives the complete immutable authority, operation/capability/lease IDs, action, start time, and an `AbortSignal` after resource admission but before the browser side effect starts. Hosts that require durable attempt-before-side-effect auditing should persist the attempt there. Rejection denies the operation. The default `beforeOperationTimeoutMs` is 10,000 milliseconds and accepts values from 100 through 120,000; timeout fails with `TIMEOUT`. The terminal `audit` callback remains a best-effort `completed`/`failed` notification correlated by the same operation ID and runs after bounded operation cleanup releases or fences the exact reservation.
+Operations from one valid lease enter a strict bounded FIFO. `maxQueuedOperationsPerLease` defaults to 128 and accepts values from 1 through 1,024. Queue overflow fails with `QUOTA_EXCEEDED`; `BUSY` remains resource arbitration. A queued operation aborted by its caller, lease revocation, attachment transition, resource termination, or runtime shutdown never starts. Started work is never superseded, and cancellation does not complete until the work quiesces or the exact resource incarnation is fenced.
+
+`beforeOperation` is an optional awaited fail-closed gate. It receives the complete immutable authority, operation/capability/lease IDs, action, classification, start time, and an `AbortSignal` after dequeue but before the browser side effect starts. Classifications are `raw-input`, `viewport`, `navigation`, `tab`, and `agent-action`. Hosts that require durable attempt-before-side-effect auditing should persist the attempt there. Rejection denies the operation. The default `beforeOperationTimeoutMs` is 10,000 milliseconds and accepts values from 100 through 120,000; timeout fails with `TIMEOUT`. The terminal `audit` callback remains a best-effort `completed`/`failed` notification correlated by the same operation ID and classification and runs after bounded operation cleanup releases or fences the exact reservation.
+
+`lease.getAuthority()` returns an immutable process-local lease authority containing the runtime authority ID, exported `authorityGeneration`, incarnation generation, and complete capability binding. Every snapshot also binds the exact `capabilityId` and `leaseId`. `lease.isAuthorityCurrent(authority)` performs an exact synchronous revalidation suitable for a host-owned virtual stream. These values are not durable Controller state and do not replace attachment checks against the Controller database.
+
+Human frame delivery keeps a bounded exact-identity application window. `maxOutstandingFrames` defaults to 4 and accepts values from 1 through 32. Runtime passes the same bound to SmartPuppeteer's private CDP-to-ack window; the windows remain separately owned, but equal limits prevent private eviction while the application window still has spare capacity. At full capacity SmartPuppeteer retires its oldest private entry before publishing the next frame, so a later exact acknowledgement can fulfill with `{ accepted: false }`. A fulfilled `true` or `false` settles the Runtime entry locally without fencing; `false` does not prove that upstream retirement succeeded. Rejected or timed-out acknowledgement operations fail closed, as do application acknowledgement timeout and failed-delivery retirement regardless of a fulfilled boolean. Frame acknowledgement stays outside the operation FIFO.
 
 ## Trusted Pipe And Flex
 
-Trusted framed peers and clients receive the complete authority out of band: project, resource, attachment authority/revision, actor, peer, role, source, qualified session, Flex scope, and resource-specific channel. Incoming frames cannot select identity. One session may use multiple resource-specific channels concurrently.
+Trusted framed peers and clients receive the complete authority out of band: project, resource, attachment authority/revision, actor, peer, role, source, qualified session, Flex scope, exact run, and resource-specific channel. Incoming frames cannot select identity. One session may use multiple resource-specific channels concurrently. Framed client/server request work and queued writes are bounded under backpressure.
 
-`BrowserRuntimeFlexToolProvider<TScope>` resolves only a capability token and exposes the six approved SmartAgent actions. The framed server validates the token against its complete trusted binding.
+`BrowserRuntimeFlexToolProvider<TScope>` resolves only a capability token and exposes the six approved SmartAgent actions. The provider requires its client run ID to match the exact Flex tool-provider context, and every runtime operation hook retains that run ID. The framed server validates the token against its complete trusted binding.
 
 ## MCP Handler
 

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@modelprofile.com/browser-runtime',
-  version: '2.1.2',
+  version: '3.0.1',
   description: 'Parent-owned, resource-centric Chromium runtime with revisioned attachment fencing, authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.'
 }

package/ts/classes.flexprovider.ts

@@ -34,17 +34,16 @@ implements plugins.flexharness.IFlexToolProvider<TScope> {
   ): Promise<plugins.flexharness.IFlexToolHandle> {
     if (this.state !== 'unused') throw new BrowserRuntimeError('BUSY');
     this.state = 'provisioning';
-    const scopeId = validateBoundedString(context.scopeId, 'scopeId', 1, 128);
-    const sessionId = validateBoundedString(context.sessionId, 'sessionId', 1, 128);
-    if (
-      this.client.scopeId !== scopeId
-      || this.client.sessionId.harnessId !== 'flex'
-      || this.client.sessionId.nativeId !== sessionId
-    ) {
-      this.state = 'closed';
-      throw new BrowserRuntimeError('CAPABILITY_INVALID');
-    }
     try {
+      const scopeId = validateBoundedString(context.scopeId, 'scopeId', 1, 128);
+      const sessionId = validateBoundedString(context.sessionId, 'sessionId', 1, 128);
+      const runId = validateBoundedString(context.runId, 'runId', 1, 256);
+      if (
+        this.client.scopeId !== scopeId
+        || this.client.sessionId.harnessId !== 'flex'
+        || this.client.sessionId.nativeId !== sessionId
+        || this.client.runId !== runId
+      ) throw new BrowserRuntimeError('CAPABILITY_INVALID');
       context.signal.throwIfAborted();
       const resolved = validateExactKeys(
         await this.resolveCapability(context),
@@ -61,9 +60,9 @@ implements plugins.flexharness.IFlexToolProvider<TScope> {
       await this.client.acquire(capabilityToken, context.signal);
       context.signal.throwIfAborted();
     } catch (error) {
+      this.state = 'closed';
       await this.client.release().catch(() => undefined);
       await this.client.close().catch(() => undefined);
-      this.state = 'closed';
       throw error;
     }
     this.state = 'active';

package/ts/classes.framed.ts

@@ -207,6 +207,7 @@ export class BrowserRuntimeFramedServerPeer {
   private readonly trustedSource: 'flex';
   private readonly trustedScopeId: string;
   private readonly trustedChannelId: string;
+  private readonly trustedRunId: string;
   private readonly trustedSessionId: IBrowserFlexSessionId;
   private readonly channel: JsonFramedChannel;
   private readonly activeRequests = new Map<string, AbortController>();
@@ -253,6 +254,7 @@ export class BrowserRuntimeFramedServerPeer {
     this.trustedSource = options.source;
     this.trustedScopeId = validateBoundedString(options.scopeId, 'scopeId', 1, 256);
     this.trustedChannelId = validateBoundedString(options.channelId, 'channelId', 1, 256);
+    this.trustedRunId = validateBoundedString(options.runId, 'runId', 1, 256);
     if (options.sessionId?.harnessId !== 'flex') throw new BrowserRuntimeError('INVALID_INPUT');
     this.trustedSessionId = {
       harnessId: 'flex',
@@ -353,7 +355,7 @@ export class BrowserRuntimeFramedServerPeer {
       const method = validateBoundedString(request.method, 'method', 1, 32);
       if (
         this.activeRequests.size >= hardMaxPendingRequests
-        && (method !== 'cancel' || this.activeRequests.size >= hardMaxPendingRequests + 4)
+        && (method !== 'cancel' || this.activeRequests.size >= hardMaxPendingRequests * 2)
       ) {
         throw new BrowserRuntimeError('BUSY');
       }
@@ -399,6 +401,7 @@ export class BrowserRuntimeFramedServerPeer {
           source: this.trustedSource,
           scopeId: this.trustedScopeId,
           channelId: this.trustedChannelId,
+          runId: this.trustedRunId,
           sessionId: this.trustedSessionId,
         } as const;
         const descriptor = this.runtime.authorizeCapability(capabilityToken, authority);
@@ -446,6 +449,7 @@ export class BrowserRuntimeFramedServerPeer {
           attachmentRevision: this.trustedAttachmentRevision,
           scopeId: this.trustedScopeId,
           channelId: this.trustedChannelId,
+          runId: this.trustedRunId,
           sessionId: { ...this.trustedSessionId },
         };
       } else if (method === 'execute') {
@@ -562,6 +566,7 @@ export class BrowserRuntimeFramedClient {
   private closePromise?: Promise<void>;
   private readonly scopeIdValue: string;
   private readonly channelIdValue: string;
+  private readonly runIdValue: string;
   private readonly sessionIdValue: IBrowserFlexSessionId;
   private readonly authority: TBrowserCapabilityAuthorizationRequest;
   private readonly afterAcquireResponse?: IBrowserRuntimeFramedClientTestingOptions['afterAcquireResponse'];
@@ -572,6 +577,7 @@ export class BrowserRuntimeFramedClient {
     }
     this.scopeIdValue = validateBoundedString(options.scopeId, 'scopeId', 1, 256);
     this.channelIdValue = validateBoundedString(options.channelId, 'channelId', 1, 256);
+    this.runIdValue = validateBoundedString(options.runId, 'runId', 1, 256);
     this.sessionIdValue = {
       harnessId: 'flex',
       nativeId: validateBoundedString(options.sessionId.nativeId, 'sessionId.nativeId', 1, 256),
@@ -597,6 +603,7 @@ export class BrowserRuntimeFramedClient {
       source: 'flex',
       scopeId: this.scopeIdValue,
       channelId: this.channelIdValue,
+      runId: this.runIdValue,
       sessionId: this.sessionIdValue,
     };
     this.afterAcquireResponse = browserRuntimeTesting in options
@@ -647,6 +654,10 @@ export class BrowserRuntimeFramedClient {
     return this.channelIdValue;
   }
 
+  public get runId(): string {
+    return this.runIdValue;
+  }
+
   public get sessionId(): IBrowserFlexSessionId {
     return { ...this.sessionIdValue };
   }
@@ -790,7 +801,10 @@ export class BrowserRuntimeFramedClient {
     fields: Record<string, unknown>,
   ): Promise<unknown> {
     this.start();
-    if (this.pending.size >= this.maxPendingRequests) throw new BrowserRuntimeError('BUSY');
+    const pendingLimit = method === 'cancel'
+      ? this.maxPendingRequests * 2
+      : this.maxPendingRequests;
+    if (this.pending.size >= pendingLimit) throw new BrowserRuntimeError('BUSY');
     const responsePromise = new Promise<unknown>((resolve, reject) => {
       const timer = setTimeout(() => {
         this.pending.delete(id);