@qontinui/ui-bridge 0.21.0 → 0.21.1

package/dist/index.js

@@ -26949,7 +26949,7 @@ function exposeProviderOnWindow(internals) {
   if (typeof window === "undefined") return;
   const w = window;
   const root = w.__UI_BRIDGE__ ?? (w.__UI_BRIDGE__ = {});
-  root.version = "0.21.0";
+  root.version = "0.21.1";
   root.specs = { getGlobalSpecStore };
   root.registry = internals.registry;
   root.browserCapture = internals.browserCapture;

package/dist/index.mjs

@@ -26947,7 +26947,7 @@ function exposeProviderOnWindow(internals) {
   if (typeof window === "undefined") return;
   const w = window;
   const root = w.__UI_BRIDGE__ ?? (w.__UI_BRIDGE__ = {});
-  root.version = "0.21.0";
+  root.version = "0.21.1";
   root.specs = { getGlobalSpecStore };
   root.registry = internals.registry;
   root.browserCapture = internals.browserCapture;

package/dist/injected/bundle.global.js

@@ -31,5 +31,5 @@ ${l(f+p,a-30)}`);}if(e.contentChanges&&a>30){let{metricChanges:m,statusChanges:f
 `)){if(t.startsWith(":")||!t.startsWith("data:"))continue;let r=t.slice(5);r.startsWith(" ")&&(r=r.slice(1)),e.push(r);}return e.length>0?e.join(`
 `):null}function cd(n){if(!n)return null;try{let e=n();if(!e||typeof e!="object")return null;let t=e.userId,r=e.sessionId;return typeof t!="string"||t.trim().length===0||typeof r!="string"||r.trim().length===0?null:{userId:t.trim(),sessionId:r.trim()}}catch{return null}}function Ci(n){try{typeof sessionStorage<"u"&&sessionStorage.setItem(Sa,n);}catch{}}function ld(){if(typeof window>"u")return null;try{let n=window,e=n.__uiBridgeTabId;if(typeof e=="string"&&e.length>0)return e;let t=n.__uiBridgeInjectedConfig?.tabId;if(typeof t=="string"&&t.length>0)return t}catch{}return null}function ud(){let n=ld();if(n)return Ci(n),n;let e=null;try{typeof sessionStorage<"u"&&(e=sessionStorage.getItem(Sa));}catch{}if(e)return e;let t=crypto.randomUUID();return Ci(t),t}function Ta(n){let{basePath:e,execute:t,heartbeatIntervalMs:r=1e4,authHeader:i,registrationMetadata:s,appType:o,capabilities:a,appId:c,appName:l,framework:u,version:d,onError:m=(A,M)=>console.error(A,M)}=n,f=n.tabId??ud();n.tabId&&Ci(n.tabId);let p=false,h=null,y=null,b=null,E=async(A,M,T)=>{try{await fetch(`${e}/commands`,{method:"POST",headers:wa(i),body:od({commandId:A,success:M,result:T,tabId:f,error:M?void 0:T?.error})});}catch(N){m("[UIBridge] Failed to send command response:",N);}},v=async A=>{try{let M=await t(A.action,A.payload),T=M;if(T&&T.success===!1){await E(A.commandId,!1,M);return}await E(A.commandId,!0,M);}catch(M){let T=M instanceof Error?M.message:String(M),N="UNKNOWN_ERROR";T.includes("not found")?N="ELEMENT_NOT_FOUND":T.includes("timeout")?N="ACTION_TIMEOUT":T.includes("Unknown command")&&(N="UNKNOWN_COMMAND"),await E(A.commandId,false,{success:false,error:T,failureDetails:{errorCode:N,message:T,timestamp:Date.now()},durationMs:0,timestamp:Date.now()});}},w=()=>{h&&(h.abort(),h=null);},R=()=>{p||y||(y=setTimeout(()=>{y=null,p||L();},1e4));},L=()=>{if(p)return;w();let A=new AbortController;h=A;let M=`${e}/commands/stream${f?`?tabId=${encodeURIComponent(f)}`:""}`,T={Accept:"text/event-stream"},N=Ca(i);N&&(T.Authorization=`Bearer ${N}`),fetch(M,{method:"GET",headers:T,signal:A.signal,cache:"no-store"}).then(async I=>{if(!I.ok||!I.body){h===A&&(h=null),R();return}let V=I.body.getReader(),Q=new TextDecoder,W="";try{for(;;){let{value:de,done:Ce}=await V.read();if(Ce)break;W+=Q.decode(de,{stream:!0});let Te;for(;(Te=W.indexOf(`
 
-`))!==-1;){let Ct=W.slice(0,Te);W=W.slice(Te+2);let Ge=ad(Ct);if(Ge!=null)try{let ee=JSON.parse(Ge);if(ee.type==="connected")continue;ee.commandId&&ee.action&&v(ee);}catch(ee){m("[UIBridge] Failed to parse SSE message:",ee);}}}}catch{}h===A&&(h=null),!p&&!A.signal.aborted&&R();}).catch(()=>{h===A&&(h=null),!p&&!A.signal.aborted&&R();});},x=()=>{p||(w(),y&&(clearTimeout(y),y=null),L());},O=()=>{typeof document>"u"||document.visibilityState==="visible"&&(h||(y&&(clearTimeout(y),y=null),L()));},k=async()=>{try{let A={timestamp:Date.now(),tabId:f,url:typeof window<"u"?window.location.href:void 0,title:typeof document<"u"?document.title:void 0,visibility:typeof document<"u"?document.visibilityState:void 0};c!==void 0&&(A.appId=c),l!==void 0&&(A.appName=l),o!==void 0&&(A.appType=o),u!==void 0&&(A.framework=u),a!==void 0&&(A.capabilities=a),d!==void 0&&(A.version=d);let M=cd(s);M!==null&&(A.registrationMetadata=M);let T=await fetch(`${e}/heartbeat`,{method:"POST",headers:wa(i),body:JSON.stringify(A)});if(T.ok)try{let N=await T.json();(N?.tabRegistered??N?.data?.tabRegistered??null)===!1&&x();}catch{}}catch{}};return L(),typeof document<"u"&&document.addEventListener("visibilitychange",O),k(),b=setInterval(()=>{k();},r),{tabId:f,forceReconnect:x,stop(){p||(p=true,w(),y&&(clearTimeout(y),y=null),b&&(clearInterval(b),b=null),typeof document<"u"&&document.removeEventListener("visibilitychange",O));}}}function dd(n){return n.element.isConnected}function fd(n,e,t={}){let r=t.tracked,i=Ws(e),s=new Set(n.getAllElements().map(a=>a.id)),o=0;for(let a of i){if(r?.has(a.element)||!dd(a))continue;let c=a.id;if(s.has(c)){let u=2;for(;s.has(`${c}-${u}`);)u++;c=`${c}-${u}`;}let l=n.registerElement(c,a.element,{label:a.label||void 0,origin:"auto"});s.add(l.id),r?.set(a.element,l.id),o++;}return {registered:o,total:i.length}}function xa(n,e=document.body,t={}){let r=new Map,i=t.debounceMs??100,s=t.onSeed,o=null,a=()=>{let u=fd(n,e,{tracked:r});return s?.(n.getAllElements().length),u};a();let c=u=>{let d=r.get(u);d&&!u.isConnected&&(n.unregisterElement(d),r.delete(u));},l=new MutationObserver(u=>{for(let d of u)d.removedNodes.forEach(m=>{if(m.nodeType!==Node.ELEMENT_NODE)return;let f=m;c(f),f.querySelectorAll("*").forEach(c);});o&&clearTimeout(o),o=setTimeout(a,i);});return l.observe(e,{childList:true,subtree:true,attributes:true,attributeFilter:["class","style","hidden","disabled","aria-hidden"]}),()=>{l.disconnect(),o&&(clearTimeout(o),o=null);}}function Aa(n){let{quietMs:e,timeoutMs:t}=n,r=false,i=false,s=0,o=false,a=null,c=null,l=[],u=()=>({settled:r,elementCount:s,settledByTimeout:i,expectSatisfied:o}),d=()=>{a&&(clearTimeout(a),a=null);},m=()=>{c&&(clearTimeout(c),c=null);},f=p=>{if(r)return;r=true,i=p,d(),m();let h=u();for(;l.length;)l.shift()?.(h);};return {get settled(){return r},get elementCount(){return s},get settledByTimeout(){return i},get expectSatisfied(){return o},start(){r||c||(c=setTimeout(()=>f(true),t));},noteSeed(p,h){s=p,o=h??p>0,!r&&(o?(d(),a=setTimeout(()=>f(false),e)):d());},whenSettled(p){return r?Promise.resolve(u()):new Promise(h=>{let y=false,b=v=>{y||(y=true,h(v));};l.push(b),setTimeout(()=>b(u()),typeof p=="number"?p:t);})},dispose(){d(),m();}}}function Ra(n){return {get elements(){return n.getAllElements()},getElement:e=>n.getElement(e),get components(){return n.getAllComponents()},get workflows(){return n.getAllWorkflows()}}}(function(){if(typeof window>"u"||window.__uiBridgeInjected)return;let e=new Je;ps(e);let t=Ra(e),r=window.__uiBridgeInjectedConfig,i=Aa({quietMs:typeof r?.settleQuietMs=="number"?r.settleQuietMs:500,timeoutMs:typeof r?.settleTimeoutMs=="number"?r.settleTimeoutMs:1e4}),s=typeof r?.expectSelector=="string"&&r.expectSelector.length>0?r.expectSelector:null,o=()=>{if(!s)return  true;try{return document.querySelector(s)!==null}catch{return  true}},a=()=>{c.settled=i.settled,c.settledByTimeout=i.settledByTimeout,c.expectSatisfied=i.expectSatisfied;},c={ready:false,settled:false,settledByTimeout:false,expectSatisfied:false,expectSelector:s,elementCount:0,version:"0.21.0",whenSettled:u=>i.whenSettled(u),execute:(u,d)=>Promise.resolve(Hn(u,d,t))};window.__uiBridgeInjected=c;let l=()=>{i.start(),xa(e,document.body,{onSeed:u=>{c.elementCount=u,i.noteSeed(u,s?o():void 0),a();}}),c.ready=true,i.whenSettled().then(a),r?.uiBridgeBase&&Ta({basePath:r.uiBridgeBase,execute:c.execute,tabId:r.tabId,authHeader:()=>r.authToken??null,registrationMetadata:()=>r.registrationMetadata??null,appType:"injected",capabilities:["control","discovery"],appId:r.appId,appName:r.appName,version:c.version});};document.body?l():typeof document<"u"&&document.addEventListener("DOMContentLoaded",l,{once:true});})();})();//# sourceMappingURL=bundle.global.js.map
+`))!==-1;){let Ct=W.slice(0,Te);W=W.slice(Te+2);let Ge=ad(Ct);if(Ge!=null)try{let ee=JSON.parse(Ge);if(ee.type==="connected")continue;ee.commandId&&ee.action&&v(ee);}catch(ee){m("[UIBridge] Failed to parse SSE message:",ee);}}}}catch{}h===A&&(h=null),!p&&!A.signal.aborted&&R();}).catch(()=>{h===A&&(h=null),!p&&!A.signal.aborted&&R();});},x=()=>{p||(w(),y&&(clearTimeout(y),y=null),L());},O=()=>{typeof document>"u"||document.visibilityState==="visible"&&(h||(y&&(clearTimeout(y),y=null),L()));},k=async()=>{try{let A={timestamp:Date.now(),tabId:f,url:typeof window<"u"?window.location.href:void 0,title:typeof document<"u"?document.title:void 0,visibility:typeof document<"u"?document.visibilityState:void 0};c!==void 0&&(A.appId=c),l!==void 0&&(A.appName=l),o!==void 0&&(A.appType=o),u!==void 0&&(A.framework=u),a!==void 0&&(A.capabilities=a),d!==void 0&&(A.version=d);let M=cd(s);M!==null&&(A.registrationMetadata=M);let T=await fetch(`${e}/heartbeat`,{method:"POST",headers:wa(i),body:JSON.stringify(A)});if(T.ok)try{let N=await T.json();(N?.tabRegistered??N?.data?.tabRegistered??null)===!1&&x();}catch{}}catch{}};return L(),typeof document<"u"&&document.addEventListener("visibilitychange",O),k(),b=setInterval(()=>{k();},r),{tabId:f,forceReconnect:x,stop(){p||(p=true,w(),y&&(clearTimeout(y),y=null),b&&(clearInterval(b),b=null),typeof document<"u"&&document.removeEventListener("visibilitychange",O));}}}function dd(n){return n.element.isConnected}function fd(n,e,t={}){let r=t.tracked,i=Ws(e),s=new Set(n.getAllElements().map(a=>a.id)),o=0;for(let a of i){if(r?.has(a.element)||!dd(a))continue;let c=a.id;if(s.has(c)){let u=2;for(;s.has(`${c}-${u}`);)u++;c=`${c}-${u}`;}let l=n.registerElement(c,a.element,{label:a.label||void 0,origin:"auto"});s.add(l.id),r?.set(a.element,l.id),o++;}return {registered:o,total:i.length}}function xa(n,e=document.body,t={}){let r=new Map,i=t.debounceMs??100,s=t.onSeed,o=null,a=()=>{let u=fd(n,e,{tracked:r});return s?.(n.getAllElements().length),u};a();let c=u=>{let d=r.get(u);d&&!u.isConnected&&(n.unregisterElement(d),r.delete(u));},l=new MutationObserver(u=>{for(let d of u)d.removedNodes.forEach(m=>{if(m.nodeType!==Node.ELEMENT_NODE)return;let f=m;c(f),f.querySelectorAll("*").forEach(c);});o&&clearTimeout(o),o=setTimeout(a,i);});return l.observe(e,{childList:true,subtree:true,attributes:true,attributeFilter:["class","style","hidden","disabled","aria-hidden"]}),()=>{l.disconnect(),o&&(clearTimeout(o),o=null);}}function Aa(n){let{quietMs:e,timeoutMs:t}=n,r=false,i=false,s=0,o=false,a=null,c=null,l=[],u=()=>({settled:r,elementCount:s,settledByTimeout:i,expectSatisfied:o}),d=()=>{a&&(clearTimeout(a),a=null);},m=()=>{c&&(clearTimeout(c),c=null);},f=p=>{if(r)return;r=true,i=p,d(),m();let h=u();for(;l.length;)l.shift()?.(h);};return {get settled(){return r},get elementCount(){return s},get settledByTimeout(){return i},get expectSatisfied(){return o},start(){r||c||(c=setTimeout(()=>f(true),t));},noteSeed(p,h){s=p,o=h??p>0,!r&&(o?(d(),a=setTimeout(()=>f(false),e)):d());},whenSettled(p){return r?Promise.resolve(u()):new Promise(h=>{let y=false,b=v=>{y||(y=true,h(v));};l.push(b),setTimeout(()=>b(u()),typeof p=="number"?p:t);})},dispose(){d(),m();}}}function Ra(n){return {get elements(){return n.getAllElements()},getElement:e=>n.getElement(e),get components(){return n.getAllComponents()},get workflows(){return n.getAllWorkflows()}}}(function(){if(typeof window>"u"||window.__uiBridgeInjected)return;let e=new Je;ps(e);let t=Ra(e),r=window.__uiBridgeInjectedConfig,i=Aa({quietMs:typeof r?.settleQuietMs=="number"?r.settleQuietMs:500,timeoutMs:typeof r?.settleTimeoutMs=="number"?r.settleTimeoutMs:1e4}),s=typeof r?.expectSelector=="string"&&r.expectSelector.length>0?r.expectSelector:null,o=()=>{if(!s)return  true;try{return document.querySelector(s)!==null}catch{return  true}},a=()=>{c.settled=i.settled,c.settledByTimeout=i.settledByTimeout,c.expectSatisfied=i.expectSatisfied;},c={ready:false,settled:false,settledByTimeout:false,expectSatisfied:false,expectSelector:s,elementCount:0,version:"0.21.1",whenSettled:u=>i.whenSettled(u),execute:(u,d)=>Promise.resolve(Hn(u,d,t))};window.__uiBridgeInjected=c;let l=()=>{i.start(),xa(e,document.body,{onSeed:u=>{c.elementCount=u,i.noteSeed(u,s?o():void 0),a();}}),c.ready=true,i.whenSettled().then(a),r?.uiBridgeBase&&Ta({basePath:r.uiBridgeBase,execute:c.execute,tabId:r.tabId,authHeader:()=>r.authToken??null,registrationMetadata:()=>r.registrationMetadata??null,appType:"injected",capabilities:["control","discovery"],appId:r.appId,appName:r.appName,version:c.version});};document.body?l():typeof document<"u"&&document.addEventListener("DOMContentLoaded",l,{once:true});})();})();//# sourceMappingURL=bundle.global.js.map
 //# sourceMappingURL=bundle.global.js.map

package/dist/{nextjs-NxTdtHhA.d.ts → nextjs-Bu7ZGwGe.d.ts}

@@ -495,17 +495,45 @@ declare class CommandRelay {
      * has been called for it. `listOwnedTabs`, `assertOwnership`, and the
      * bus-envelope receiver check all key off this map.
      *
-     * Re-registration under a DIFFERENT `userId` is permitted (e.g. a tab
-     * survives a re-login) — the entry is overwritten in place. This is
-     * the safe path: the alternative (reject + force a reconnect) would
-     * leave the tab unaddressable until the SSE stream re-establishes,
-     * which is strictly worse for the operator UX. The new ownership
-     * takes effect on the next dispatch.
+     * Re-registration under a DIFFERENT `userId` (e.g. a tab survives a
+     * re-login) is permitted ONLY when the new user is AUTH-PROVEN, not
+     * merely asserted. `metadata.userId` rides in the (browser-supplied)
+     * heartbeat body and is therefore untrusted on its own: without a
+     * proof gate, anyone who learns a victim's `tabId` could POST a
+     * heartbeat claiming any `userId` and silently seize ownership of the
+     * tab (and with it the ability to drive it / settle its commands).
+     *
+     * `options.callerUserId` is the identity the consumer's auth gate
+     * proved and injected as `X-Caller-User-Id` (never a browser value).
+     * The rule:
+     *
+     *   - Same-owner heartbeat (existing owner === claimed userId): always
+     *     a refresh — `sessionId`/`lastSeen` updated in place. No proof
+     *     needed; you already hold the tab and the claim matches.
+     *   - TRANSFER (a DIFFERENT user already owns the tab): the claimed
+     *     `userId` MUST be auth-proven and equal to `callerUserId`. An
+     *     unauthenticated (`callerUserId` absent) or mismatched claim is
+     *     REFUSED and the prior owner is left untouched — this is the
+     *     takeover primitive being closed. A genuine re-login carries the
+     *     new user's proven identity and therefore still transfers.
+     *   - First CLAIM (tab has no owner yet — bootstrap): honored, so a
+     *     header-less / single-trust-domain deployment can still register
+     *     tabs. A *present* proven identity must still match the claimed
+     *     `userId` (you cannot bootstrap a tab under an identity you
+     *     cannot back).
+     *
+     * Returns whether ownership was (re)assigned so the HTTP layer can
+     * surface the refusal without bricking the heartbeat loop.
      */
     recordRegistration(tabId: string, metadata: {
         userId: string;
         sessionId: string;
-    }): void;
+    }, options?: {
+        callerUserId?: string | null;
+    }): {
+        ownershipAssigned: boolean;
+        rejectedReason?: 'OWNER_CHANGE_UNVERIFIED';
+    };
     /**
      * Return the stored ownership record for a tab, or `null` if the tab
      * has not registered yet. The full record (including timestamps) is

package/dist/{nextjs-DZf4_LXo.d.mts → nextjs-DCLP7WgI.d.mts}

@@ -495,17 +495,45 @@ declare class CommandRelay {
      * has been called for it. `listOwnedTabs`, `assertOwnership`, and the
      * bus-envelope receiver check all key off this map.
      *
-     * Re-registration under a DIFFERENT `userId` is permitted (e.g. a tab
-     * survives a re-login) — the entry is overwritten in place. This is
-     * the safe path: the alternative (reject + force a reconnect) would
-     * leave the tab unaddressable until the SSE stream re-establishes,
-     * which is strictly worse for the operator UX. The new ownership
-     * takes effect on the next dispatch.
+     * Re-registration under a DIFFERENT `userId` (e.g. a tab survives a
+     * re-login) is permitted ONLY when the new user is AUTH-PROVEN, not
+     * merely asserted. `metadata.userId` rides in the (browser-supplied)
+     * heartbeat body and is therefore untrusted on its own: without a
+     * proof gate, anyone who learns a victim's `tabId` could POST a
+     * heartbeat claiming any `userId` and silently seize ownership of the
+     * tab (and with it the ability to drive it / settle its commands).
+     *
+     * `options.callerUserId` is the identity the consumer's auth gate
+     * proved and injected as `X-Caller-User-Id` (never a browser value).
+     * The rule:
+     *
+     *   - Same-owner heartbeat (existing owner === claimed userId): always
+     *     a refresh — `sessionId`/`lastSeen` updated in place. No proof
+     *     needed; you already hold the tab and the claim matches.
+     *   - TRANSFER (a DIFFERENT user already owns the tab): the claimed
+     *     `userId` MUST be auth-proven and equal to `callerUserId`. An
+     *     unauthenticated (`callerUserId` absent) or mismatched claim is
+     *     REFUSED and the prior owner is left untouched — this is the
+     *     takeover primitive being closed. A genuine re-login carries the
+     *     new user's proven identity and therefore still transfers.
+     *   - First CLAIM (tab has no owner yet — bootstrap): honored, so a
+     *     header-less / single-trust-domain deployment can still register
+     *     tabs. A *present* proven identity must still match the claimed
+     *     `userId` (you cannot bootstrap a tab under an identity you
+     *     cannot back).
+     *
+     * Returns whether ownership was (re)assigned so the HTTP layer can
+     * surface the refusal without bricking the heartbeat loop.
      */
     recordRegistration(tabId: string, metadata: {
         userId: string;
         sessionId: string;
-    }): void;
+    }, options?: {
+        callerUserId?: string | null;
+    }): {
+        ownershipAssigned: boolean;
+        rejectedReason?: 'OWNER_CHANGE_UNVERIFIED';
+    };
     /**
      * Return the stored ownership record for a tab, or `null` if the tab
      * has not registered yet. The full record (including timestamps) is

package/dist/react/index.js

@@ -26035,7 +26035,7 @@ function exposeProviderOnWindow(internals) {
   if (typeof window === "undefined") return;
   const w = window;
   const root = w.__UI_BRIDGE__ ?? (w.__UI_BRIDGE__ = {});
-  root.version = "0.21.0";
+  root.version = "0.21.1";
   root.specs = { getGlobalSpecStore };
   root.registry = internals.registry;
   root.browserCapture = internals.browserCapture;

package/dist/react/index.mjs

@@ -26033,7 +26033,7 @@ function exposeProviderOnWindow(internals) {
   if (typeof window === "undefined") return;
   const w = window;
   const root = w.__UI_BRIDGE__ ?? (w.__UI_BRIDGE__ = {});
-  root.version = "0.21.0";
+  root.version = "0.21.1";
   root.specs = { getGlobalSpecStore };
   root.registry = internals.registry;
   root.browserCapture = internals.browserCapture;

package/dist/server/index.d.mts

@@ -2,8 +2,8 @@ import { a as UIBridgeServerHandlers, H as HandlerContext } from '../types-DHctE
 export { A as APIResponse, B as BrowserEventsResponse, C as CORSOptions, b as CapabilitiesResponse, c as ControlBatchRequest, d as ControlBatchResponse, e as ControlBatchStep, f as ControlBatchStepResult, D as DOMChangeEvent, E as ElementConditionSelector, g as ElementExpectRequest, h as ElementExpectResponse, i as EndpointCategory, j as EndpointInfo, I as INTERACTION_RELAY_COMMAND_ACTIONS, k as InteractionRelayCommandAction, P as PageEvaluateRequest, R as RateLimitOptions, l as RenderLogQuery, m as RouteDefinition, n as RunnerWindow, o as RunnerWindowsList, S as SpawnHeadlessRequest, p as SpawnHeadlessResponse, q as StateSummary, U as UIBridgeServerConfig, r as UI_BRIDGE_ROUTES, s as WaitForElementByConditionRequest, t as WaitForElementByConditionResponse, u as WaitForElementPredicate, v as WaitForElementRequest, w as WaitForElementSuccessResponse, x as WaitForRouteChangeRequest, y as WaitForRouteChangeResponse, W as WebSocketMessage, z as WebSocketMessageType } from '../types-DHctEsDy.mjs';
 export { ActionExecutorLike, CreateHandlersConfig, RegistryLike, closeAllSpawnedHeadlessTabs, createAIHandlers, createHandlers } from './handlers.mjs';
 export { ExpressAdapterConfig, createExpressApp, createExpressRouter, uiBridgeMiddleware } from './express.mjs';
-import { C as CommandRelay } from '../nextjs-DZf4_LXo.mjs';
-export { a as CommandListener, b as CommandRelayOptions, N as NextJSAdapterConfig, c as NextRouteHandler, P as PendingCommand, Q as QueuedCommand, R as RedisRelayBus, d as RelayBus, e as RelayCommandEnvelope, f as RelayResponseEnvelope, T as TabInfo, g as TabListener, h as TabRoutingError, i as TransportDiagnostics, W as WebSocketClient, j as createControlHandlers, k as createDebugHandlers, l as createNextRouteHandlers, m as createRedisRelayBus, n as createRenderLogHandlers, o as createUIBridgeHandler } from '../nextjs-DZf4_LXo.mjs';
+import { C as CommandRelay } from '../nextjs-DCLP7WgI.mjs';
+export { a as CommandListener, b as CommandRelayOptions, N as NextJSAdapterConfig, c as NextRouteHandler, P as PendingCommand, Q as QueuedCommand, R as RedisRelayBus, d as RelayBus, e as RelayCommandEnvelope, f as RelayResponseEnvelope, T as TabInfo, g as TabListener, h as TabRoutingError, i as TransportDiagnostics, W as WebSocketClient, j as createControlHandlers, k as createDebugHandlers, l as createNextRouteHandlers, m as createRedisRelayBus, n as createRenderLogHandlers, o as createUIBridgeHandler } from '../nextjs-DCLP7WgI.mjs';
 import { U as UIBridgeWSHandler } from '../standalone-Bz312WSC.mjs';
 export { S as StandaloneServer, a as StandaloneServerConfig, W as WebSocketLike, c as createStandaloneServer, s as startCLI } from '../standalone-Bz312WSC.mjs';
 import { e as BridgeEvent, i as AnyCapturedEvent, Q as ControlActionRequest } from '../types-CDn2gSl_.mjs';

package/dist/server/index.d.ts

@@ -2,8 +2,8 @@ import { a as UIBridgeServerHandlers, H as HandlerContext } from '../types-DRCea
 export { A as APIResponse, B as BrowserEventsResponse, C as CORSOptions, b as CapabilitiesResponse, c as ControlBatchRequest, d as ControlBatchResponse, e as ControlBatchStep, f as ControlBatchStepResult, D as DOMChangeEvent, E as ElementConditionSelector, g as ElementExpectRequest, h as ElementExpectResponse, i as EndpointCategory, j as EndpointInfo, I as INTERACTION_RELAY_COMMAND_ACTIONS, k as InteractionRelayCommandAction, P as PageEvaluateRequest, R as RateLimitOptions, l as RenderLogQuery, m as RouteDefinition, n as RunnerWindow, o as RunnerWindowsList, S as SpawnHeadlessRequest, p as SpawnHeadlessResponse, q as StateSummary, U as UIBridgeServerConfig, r as UI_BRIDGE_ROUTES, s as WaitForElementByConditionRequest, t as WaitForElementByConditionResponse, u as WaitForElementPredicate, v as WaitForElementRequest, w as WaitForElementSuccessResponse, x as WaitForRouteChangeRequest, y as WaitForRouteChangeResponse, W as WebSocketMessage, z as WebSocketMessageType } from '../types-DRCeaV6_.js';
 export { ActionExecutorLike, CreateHandlersConfig, RegistryLike, closeAllSpawnedHeadlessTabs, createAIHandlers, createHandlers } from './handlers.js';
 export { ExpressAdapterConfig, createExpressApp, createExpressRouter, uiBridgeMiddleware } from './express.js';
-import { C as CommandRelay } from '../nextjs-NxTdtHhA.js';
-export { a as CommandListener, b as CommandRelayOptions, N as NextJSAdapterConfig, c as NextRouteHandler, P as PendingCommand, Q as QueuedCommand, R as RedisRelayBus, d as RelayBus, e as RelayCommandEnvelope, f as RelayResponseEnvelope, T as TabInfo, g as TabListener, h as TabRoutingError, i as TransportDiagnostics, W as WebSocketClient, j as createControlHandlers, k as createDebugHandlers, l as createNextRouteHandlers, m as createRedisRelayBus, n as createRenderLogHandlers, o as createUIBridgeHandler } from '../nextjs-NxTdtHhA.js';
+import { C as CommandRelay } from '../nextjs-Bu7ZGwGe.js';
+export { a as CommandListener, b as CommandRelayOptions, N as NextJSAdapterConfig, c as NextRouteHandler, P as PendingCommand, Q as QueuedCommand, R as RedisRelayBus, d as RelayBus, e as RelayCommandEnvelope, f as RelayResponseEnvelope, T as TabInfo, g as TabListener, h as TabRoutingError, i as TransportDiagnostics, W as WebSocketClient, j as createControlHandlers, k as createDebugHandlers, l as createNextRouteHandlers, m as createRedisRelayBus, n as createRenderLogHandlers, o as createUIBridgeHandler } from '../nextjs-Bu7ZGwGe.js';
 import { U as UIBridgeWSHandler } from '../standalone-Q5b8CZwc.js';
 export { S as StandaloneServer, a as StandaloneServerConfig, W as WebSocketLike, c as createStandaloneServer, s as startCLI } from '../standalone-Q5b8CZwc.js';
 import { e as BridgeEvent, i as AnyCapturedEvent, Q as ControlActionRequest } from '../types-DJO1izBV.js';

package/dist/server/index.js

@@ -25867,7 +25867,12 @@ function handleRelayRoute(method, path, request, relay, config) {
           400
         );
       }
-      relay.recordRegistration(heartbeatTabId, { userId, sessionId });
+      const callerUserId = request.headers.get("x-caller-user-id") ?? request.headers.get("X-Caller-User-Id") ?? void 0;
+      const registration = relay.recordRegistration(
+        heartbeatTabId,
+        { userId, sessionId },
+        { callerUserId }
+      );
       relay.receiveHeartbeat(heartbeatTabId, {
         url: typeof body?.url === "string" ? body.url : void 0,
         title: typeof body?.title === "string" ? body.title : void 0,
@@ -25877,7 +25882,15 @@ function handleRelayRoute(method, path, request, relay, config) {
       const tabRegistered = diag.connectedTabs.includes(heartbeatTabId);
       return jsonResponse({
         success: true,
-        data: { received: true, tabRegistered },
+        data: {
+          received: true,
+          tabRegistered,
+          // Observability: signals an ownership claim/transfer was refused
+          // because the claimed userId was not auth-proven. Not a fatal
+          // heartbeat error — the loop continues; the tab simply keeps its
+          // prior (or no) owner. Absent when ownership was assigned.
+          ...registration.ownershipAssigned ? {} : { ownershipAssigned: false, ownerChangeRejected: registration.rejectedReason }
+        },
         timestamp: Date.now()
       });
     })();
@@ -29127,20 +29140,52 @@ var CommandRelay = class {
    * has been called for it. `listOwnedTabs`, `assertOwnership`, and the
    * bus-envelope receiver check all key off this map.
    *
-   * Re-registration under a DIFFERENT `userId` is permitted (e.g. a tab
-   * survives a re-login) — the entry is overwritten in place. This is
-   * the safe path: the alternative (reject + force a reconnect) would
-   * leave the tab unaddressable until the SSE stream re-establishes,
-   * which is strictly worse for the operator UX. The new ownership
-   * takes effect on the next dispatch.
-   */
-  recordRegistration(tabId, metadata) {
+   * Re-registration under a DIFFERENT `userId` (e.g. a tab survives a
+   * re-login) is permitted ONLY when the new user is AUTH-PROVEN, not
+   * merely asserted. `metadata.userId` rides in the (browser-supplied)
+   * heartbeat body and is therefore untrusted on its own: without a
+   * proof gate, anyone who learns a victim's `tabId` could POST a
+   * heartbeat claiming any `userId` and silently seize ownership of the
+   * tab (and with it the ability to drive it / settle its commands).
+   *
+   * `options.callerUserId` is the identity the consumer's auth gate
+   * proved and injected as `X-Caller-User-Id` (never a browser value).
+   * The rule:
+   *
+   *   - Same-owner heartbeat (existing owner === claimed userId): always
+   *     a refresh — `sessionId`/`lastSeen` updated in place. No proof
+   *     needed; you already hold the tab and the claim matches.
+   *   - TRANSFER (a DIFFERENT user already owns the tab): the claimed
+   *     `userId` MUST be auth-proven and equal to `callerUserId`. An
+   *     unauthenticated (`callerUserId` absent) or mismatched claim is
+   *     REFUSED and the prior owner is left untouched — this is the
+   *     takeover primitive being closed. A genuine re-login carries the
+   *     new user's proven identity and therefore still transfers.
+   *   - First CLAIM (tab has no owner yet — bootstrap): honored, so a
+   *     header-less / single-trust-domain deployment can still register
+   *     tabs. A *present* proven identity must still match the claimed
+   *     `userId` (you cannot bootstrap a tab under an identity you
+   *     cannot back).
+   *
+   * Returns whether ownership was (re)assigned so the HTTP layer can
+   * surface the refusal without bricking the heartbeat loop.
+   */
+  recordRegistration(tabId, metadata, options) {
     const now = Date.now();
+    const proven = options?.callerUserId;
+    if (proven != null && proven !== metadata.userId) {
+      return { ownershipAssigned: false, rejectedReason: "OWNER_CHANGE_UNVERIFIED" };
+    }
     const existing = this.tabOwnership.get(tabId);
     if (existing && existing.userId === metadata.userId) {
       existing.sessionId = metadata.sessionId;
       existing.lastSeen = now;
-      return;
+      return { ownershipAssigned: true };
+    }
+    if (existing) {
+      if (proven == null) {
+        return { ownershipAssigned: false, rejectedReason: "OWNER_CHANGE_UNVERIFIED" };
+      }
     }
     this.tabOwnership.set(tabId, {
       userId: metadata.userId,
@@ -29148,6 +29193,7 @@ var CommandRelay = class {
       firstSeen: existing?.firstSeen ?? now,
       lastSeen: now
     });
+    return { ownershipAssigned: true };
   }
   /**
    * Return the stored ownership record for a tab, or `null` if the tab