@modelprofile.com/browser-runtime 4.3.0 → 5.0.0

package/changelog.md

@@ -1,5 +1,39 @@
 # Changelog
 
+## 2026-09-08 - 5.0.0
+
+### Breaking Changes
+
+- share browser incarnations across agents and human viewers (runtime)
+  - Replaces exclusive same-resource admission with shared participant leases and a resource-wide operation FIFO.
+  - Keeps human leases valid across attachment changes while fencing agent authority by exact session binding.
+  - Returns effective viewport results from setViewport() and recomputes shared viewport/input state per participant.
+  - Adds Codex MCP session authentication while preserving exact namespace validation.
+  - Tightens empty /proc command-line recovery by revalidating process status and PID departure.
+  - Bumps @push.rocks/smartpuppeteer to ^2.7.1.
+
+### Fixes
+
+- bump pnpm to 12.2.1 (package-manager)
+  - Updates packageManager from pnpm@11.25.0 to pnpm@12.2.1.
+
+### Features
+
+- support Flex session IDs for MCP agent bindings (mcp)
+  - Allow independently authenticated MCP bindings to use qualified Flex session IDs.
+  - Widen MCP capability and authenticated binding types to qualified browser session IDs.
+  - Add runtime and adapter coverage for Flex MCP namespace isolation.
+
+## 2026-09-05 - 4.4.0
+
+### Features
+
+- add live lease renewal support (leases)
+  - Expose BrowserRuntimeLease.renew() and expiresAt with exported renewal options.
+  - Reauthorize active leases to extend capability expiry without replacing the browser incarnation or frame subscription.
+  - Reject expired, released, revoked, fenced, denied, timed-out, or concurrent renewals while keeping failed renewals from extending expiry.
+  - Document renewal behavior and add coverage for renewal expiry, denial, timeout, release, attachment changes, and shutdown.
+
 ## 2026-09-04 - 4.3.0
 
 ### Features

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@modelprofile.com/browser-runtime',
-    version: '4.3.0',
+    version: '5.0.0',
     description: 'Parent-owned, resource-centric Chromium runtime with revisioned attachment fencing, authenticated human and agent control, fail-closed egress, bounded artifacts, and Flex/MCP adapters.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxtQ0FBbUM7SUFDekMsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLDBMQUEwTDtDQUN4TSxDQUFBIn0=

package/dist_ts/classes.runtime.d.ts

@@ -3,7 +3,7 @@ import { BrowserArtifactStore } from './classes.artifactstore.js';
 import { BrowserEgressProxy } from './classes.egressproxy.js';
 import { BrowserRuntimeError } from './errors.js';
 import { type IBrowserRuntimeTestingOptions } from './internal.testing.js';
-import type { IAttachTrustedFramedPeerOptions, IApplyBrowserAttachmentBindingRequest, IBrowserAttachmentBinding, TBrowserCapabilityDescriptor, TBrowserCapabilityAuthorizationRequest, TBrowserRuntimeLeaseAuthority, TBrowserRuntimeOperationClassification, IBrowserRuntimeFrameSubscription, IBrowserRuntimeOperationOptions, IBrowserRuntimeOptions, IBrowserResourceRegistration, IBrowserRuntimeState, ICreateBrowserResourceRequest, IRegisterBrowserResourceRequest, TIssueBrowserCapabilityRequest, TIssuedBrowserCapability, ILiveBrowserSessionLike, TBrowserActorRole, TBrowserAgentAction, TBrowserAgentActionResult, TBrowserRuntimeEvent } from './interfaces.js';
+import type { IAttachTrustedFramedPeerOptions, IApplyBrowserAttachmentBindingRequest, IBrowserAttachmentBinding, TBrowserCapabilityDescriptor, TBrowserCapabilityAuthorizationRequest, TBrowserRuntimeLeaseAuthority, TBrowserRuntimeOperationClassification, IBrowserRuntimeFrameSubscription, IBrowserRuntimeOperationOptions, IBrowserRuntimeOptions, IBrowserResourceRegistration, IBrowserRuntimeState, IBrowserRuntimeViewportResult, ICreateBrowserResourceRequest, IRegisterBrowserResourceRequest, TIssueBrowserCapabilityRequest, TIssuedBrowserCapability, ILiveBrowserSessionLike, TBrowserActorRole, TBrowserAgentAction, TBrowserAgentActionResult, TBrowserRuntimeEvent } from './interfaces.js';
 import { TransitionMutex } from './utils.js';
 import { BrowserRuntimeFramedServerPeer } from './classes.framed.js';
 type TCapabilityRecord = TBrowserCapabilityDescriptor & {
@@ -12,6 +12,7 @@ type TCapabilityRecord = TBrowserCapabilityDescriptor & {
     expiryTimer: ReturnType<typeof setTimeout>;
     disconnect?: (signal: AbortSignal) => Promise<void> | void;
     lease?: ILeaseRecord;
+    acquiring?: boolean;
     revocationPromise?: Promise<void>;
     revocationInvokeDisconnect?: boolean;
     revocationComplete?: boolean;
@@ -30,8 +31,14 @@ interface ILeaseRecord {
     authorityGeneration: number;
     released: boolean;
     releasePromise?: Promise<void>;
-    releaseGeneration?: number;
-    releaseOwnsFence?: boolean;
+    preferredViewport?: plugins.smartpuppeteer.ILiveBrowserViewport;
+    heldKeys: Map<string, plugins.smartpuppeteer.ILiveBrowserKeyInput>;
+    heldButtons: Map<string, plugins.smartpuppeteer.ILiveBrowserMouseInput>;
+}
+export interface IBrowserRuntimeLeaseRenewalOptions {
+    signal?: AbortSignal;
+    /** Lifetime from successful reauthorization; defaults to the runtime capability lifetime. */
+    expiresInMs?: number;
 }
 interface IOperationRecord {
     operationId: string;
@@ -58,12 +65,15 @@ interface IQueuedOperationRecord {
     reject(error: unknown): void;
     state: 'queued' | 'starting' | 'active' | 'settled';
     onQueuedAbort?: () => void;
+    /** Resource-owned cleanup, admitted only for this exact released participant. */
+    participantCleanup?: boolean;
 }
 interface IOutstandingFrameRecord {
     acknowledgement: plugins.smartpuppeteer.ILiveBrowserFrameAcknowledgementRequest;
     timer?: ReturnType<typeof setTimeout>;
     session: ILiveBrowserSessionLike;
     incarnationGeneration: number;
+    producerAcknowledgement: Promise<TFrameAcknowledgementOutcome>;
 }
 type TFrameAcknowledgementOutcome = {
     status: 'fulfilled';
@@ -95,6 +105,7 @@ interface IFrameRefreshRecord {
     abandoned: boolean;
     boundaryCandidate?: plugins.smartpuppeteer.ILiveBrowserFrameIdentity;
     failure?: BrowserRuntimeError;
+    producerFailure?: Promise<boolean>;
 }
 interface IResourceSlot {
     projectId: string;
@@ -114,12 +125,18 @@ interface IResourceSlot {
     proxy?: BrowserEgressProxy;
     profileDirectory?: string;
     unsubscribeSession?: () => void;
-    lease?: ILeaseRecord;
+    leases: Map<string, ILeaseRecord>;
     operation?: IOperationRecord;
     operationQueue: IQueuedOperationRecord[];
     operationSchedulerRunning: boolean;
-    frameSubscription?: IFrameSubscriptionRecord;
+    frameSubscriptions: Map<string, IFrameSubscriptionRecord>;
+    highestFrameSequence: number;
+    producerAcknowledgements: Set<Promise<TFrameAcknowledgementOutcome>>;
     frameRefresh?: IFrameRefreshRecord;
+    frameFailure?: {
+        session: ILiveBrowserSessionLike;
+        promise: Promise<boolean>;
+    };
     idleTimer?: ReturnType<typeof setTimeout>;
     lifecycleTail: Promise<void>;
     lifecycleOperationCount: number;
@@ -147,6 +164,7 @@ export declare class BrowserRuntime {
     private readonly failedRevocations;
     private readonly capabilityMutex;
     private readonly cleanupOperations;
+    private readonly leaseRenewals;
     private readonly framedPeers;
     private startPromise?;
     private stopPromise?;
@@ -185,6 +203,8 @@ export declare class BrowserRuntime {
     /** @internal */
     getLeaseAuthority(lease: ILeaseRecord): TBrowserRuntimeLeaseAuthority;
     /** @internal */
+    renewLease(lease: ILeaseRecord, optionsArg?: IBrowserRuntimeLeaseRenewalOptions): Promise<number>;
+    /** @internal */
     isLeaseAuthorityCurrent(lease: ILeaseRecord, authorityArg: TBrowserRuntimeLeaseAuthority): boolean;
     /** @internal */
     executeLeaseAgentAction(lease: ILeaseRecord, actionArg: unknown, operationOptions?: IBrowserRuntimeOperationOptions): Promise<TBrowserAgentActionResult>;
@@ -199,11 +219,21 @@ export declare class BrowserRuntime {
     /** @internal */
     leaseHumanAgentAction(lease: ILeaseRecord, actionArg: unknown, operationOptions?: IBrowserRuntimeOperationOptions): Promise<TBrowserAgentActionResult>;
     /** @internal */
-    leaseSetViewport(lease: ILeaseRecord, viewport: plugins.smartpuppeteer.ILiveBrowserViewport, operationOptions?: IBrowserRuntimeOperationOptions): Promise<void>;
+    leaseSetViewport(lease: ILeaseRecord, viewport: plugins.smartpuppeteer.ILiveBrowserViewport, operationOptions?: IBrowserRuntimeOperationOptions): Promise<IBrowserRuntimeViewportResult>;
+    private validatePreferredViewport;
+    private applySharedViewport;
     /** @internal */
     leaseRefreshFrameStream(lease: ILeaseRecord, operationOptions?: IBrowserRuntimeOperationOptions): Promise<void>;
     /** @internal */
     leaseDispatchRawInput(lease: ILeaseRecord, action: 'dispatchMouse' | 'dispatchWheel' | 'dispatchKey' | 'insertText', input: plugins.smartpuppeteer.ILiveBrowserMouseInput | plugins.smartpuppeteer.ILiveBrowserWheelInput | plugins.smartpuppeteer.ILiveBrowserKeyInput | plugins.smartpuppeteer.ILiveBrowserInsertTextInput, operationOptions?: IBrowserRuntimeOperationOptions): Promise<void>;
+    private keyOwnershipKey;
+    private validateHeldInputTarget;
+    private mouseOwnershipKey;
+    private otherParticipantHolds;
+    private sharedMouseButtons;
+    private sharedModifiers;
+    private releaseAllParticipantInput;
+    private releaseParticipantInput;
     /** @internal */
     subscribeLeaseEvents(lease: ILeaseRecord, listener: (event: TBrowserRuntimeEvent) => void): Promise<IBrowserRuntimeFrameSubscription>;
     /** @internal */
@@ -224,8 +254,7 @@ export declare class BrowserRuntime {
     private requireArtifactStore;
     private handleOwnershipLost;
     private stopAfterOwnershipLoss;
-    private acquireAgentLease;
-    private acquireHumanLease;
+    private acquireParticipantLease;
     private createLeaseRecord;
     private ensureSession;
     private runOperation;
@@ -252,7 +281,6 @@ export declare class BrowserRuntime {
     private finalizeFrameRefresh;
     private abandonFrameRefresh;
     private armFrameAcknowledgementTimer;
-    private matchingFrameRefresh;
     private handleSessionEvent;
     private pushToSubscription;
     private closeFrameSubscription;
@@ -260,9 +288,10 @@ export declare class BrowserRuntime {
     private validateFrameAcknowledgement;
     private frameAcknowledgementKey;
     private waitForFrameAcknowledgement;
-    private acknowledgeFrameInBackground;
     private handleFrameFailure;
+    private handleFrameFailureInternal;
     private trackFrameCapabilityRevocation;
+    private requireQueuedLease;
     private requireValidLease;
     private resolveCapability;
     private describeCapability;
@@ -319,6 +348,9 @@ export declare class BrowserRuntimeLease {
     constructor(runtime: BrowserRuntime, record: ILeaseRecord);
     get leaseId(): string;
     get capabilityId(): string;
+    get expiresAt(): number;
+    /** Reauthorize this exact live lease without replacing its frame stream or browser incarnation. */
+    renew(options?: IBrowserRuntimeLeaseRenewalOptions): Promise<number>;
     get role(): TBrowserActorRole;
     get projectId(): string;
     get browserResourceId(): string;
@@ -335,7 +367,7 @@ export declare class BrowserRuntimeLease {
     back(options?: plugins.smartpuppeteer.ILiveBrowserNavigationOptions, operationOptions?: IBrowserRuntimeOperationOptions): Promise<IBrowserRuntimeState>;
     forward(options?: plugins.smartpuppeteer.ILiveBrowserNavigationOptions, operationOptions?: IBrowserRuntimeOperationOptions): Promise<IBrowserRuntimeState>;
     reload(options?: plugins.smartpuppeteer.ILiveBrowserNavigationOptions, operationOptions?: IBrowserRuntimeOperationOptions): Promise<IBrowserRuntimeState>;
-    setViewport(viewport: plugins.smartpuppeteer.ILiveBrowserViewport, operationOptions?: IBrowserRuntimeOperationOptions): Promise<void>;
+    setViewport(viewport: plugins.smartpuppeteer.ILiveBrowserViewport, operationOptions?: IBrowserRuntimeOperationOptions): Promise<IBrowserRuntimeViewportResult>;
     dispatchMouse(input: plugins.smartpuppeteer.ILiveBrowserMouseInput, operationOptions?: IBrowserRuntimeOperationOptions): Promise<void>;
     dispatchWheel(input: plugins.smartpuppeteer.ILiveBrowserWheelInput, operationOptions?: IBrowserRuntimeOperationOptions): Promise<void>;
     dispatchKey(input: plugins.smartpuppeteer.ILiveBrowserKeyInput, operationOptions?: IBrowserRuntimeOperationOptions): Promise<void>;