@xenosystem/agent-interface-runtime 0.1.25 → 0.1.26

package/dist/accountWorkerConfiguration.d.ts

@@ -0,0 +1,10 @@
+import { type StandaloneAccountWorkerConfiguration } from '@xenosystem/agent-interface-host/node';
+export declare const STANDALONE_ACCOUNT_SCOPES: readonly string[];
+/** The production standalone/detached authority. All values are fixed source
+ * policy; no renderer field, ambient URL, token, or selected workspace can
+ * widen them. Isolated host roots keep test credentials out of the real profile. */
+export declare function canonicalStandaloneAccountWorkerConfiguration(options: {
+    homeDirectory: string;
+    hostRootDirectory?: string;
+}): StandaloneAccountWorkerConfiguration;
+//# sourceMappingURL=accountWorkerConfiguration.d.ts.map

package/dist/accountWorkerConfiguration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountWorkerConfiguration.d.ts","sourceRoot":"","sources":["../src/accountWorkerConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,oCAAoC,EAAE,MAAM,uCAAuC,CAAA;AAE7H,eAAO,MAAM,yBAAyB,mBAEpC,CAAA;AAEF;;oFAEoF;AACpF,wBAAgB,6CAA6C,CAAC,OAAO,EAAE;IACrE,aAAa,EAAE,MAAM,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B,GAAG,oCAAoC,CAUvC"}

package/dist/accountWorkerConfiguration.js

@@ -0,0 +1,19 @@
+import { resolveLocalAgentHostPaths } from '@xenosystem/agent-interface-host/node';
+export const STANDALONE_ACCOUNT_SCOPES = Object.freeze([
+    'openid', 'profile', 'email', 'offline_access', 'team:read', 'team:manage', 'collaboration:use', 'workforce:read', 'workforce:manage',
+]);
+/** The production standalone/detached authority. All values are fixed source
+ * policy; no renderer field, ambient URL, token, or selected workspace can
+ * widen them. Isolated host roots keep test credentials out of the real profile. */
+export function canonicalStandaloneAccountWorkerConfiguration(options) {
+    const paths = resolveLocalAgentHostPaths(options);
+    return {
+        clientId: 'xeno-agent-interface',
+        issuer: 'https://xenostudio.ai',
+        apiBase: 'https://api.xenostudio.ai',
+        scopes: [...STANDALONE_ACCOUNT_SCOPES],
+        protectedStateRoot: paths.stateRepositoryRoot,
+        persistencePolicy: 'require-protected',
+    };
+}
+//# sourceMappingURL=accountWorkerConfiguration.js.map

package/dist/accountWorkerConfiguration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountWorkerConfiguration.js","sourceRoot":"","sources":["../src/accountWorkerConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAA6C,MAAM,uCAAuC,CAAA;AAE7H,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB;CACtI,CAAC,CAAA;AAEF;;oFAEoF;AACpF,MAAM,UAAU,6CAA6C,CAAC,OAG7D;IACC,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAA;IACjD,OAAO;QACL,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,CAAC,GAAG,yBAAyB,CAAC;QACtC,kBAAkB,EAAE,KAAK,CAAC,mBAAmB;QAC7C,iBAAiB,EAAE,mBAAmB;KACvC,CAAA;AACH,CAAC"}

package/dist/browser/BrowserAuthorityResources.d.ts

@@ -0,0 +1,33 @@
+import type { XenoArtifactRepository } from '@xenosystem/agent-sdk';
+import { SqliteBrowserPreparationStore } from './BrowserCommandPreparationStore.js';
+import type { BrowserAuthoritySdk, BrowserCapabilityPersistence, BrowserExecutionJournal } from './SdkBrowserCommandAuthority.js';
+export interface BrowserResourceSdk extends BrowserAuthoritySdk {
+    openSqliteCapabilityLeasePersistence(path: string): Promise<BrowserCapabilityPersistence & {
+        close(): void;
+    }>;
+    openSqliteAutomationExecutionJournal(path: string): Promise<BrowserExecutionJournal & {
+        close(): void;
+    }>;
+    FileXenoArtifactRepository: new (options: {
+        directory: string;
+    }) => XenoArtifactRepository;
+}
+/** Opens canonical persistence on host-private paths. This is not an encryption claim: evidence
+ * retention and OS-protected directory authority must be supplied by the native host owner. */
+export declare function openBrowserAuthorityResources(options: {
+    sdk: BrowserResourceSdk;
+    directory: string;
+    assertPrivateDirectory(path: string): Promise<void>;
+}): Promise<{
+    preparations: SqliteBrowserPreparationStore;
+    capabilities: BrowserCapabilityPersistence & {
+        close(): void;
+    };
+    journal: BrowserExecutionJournal & {
+        close(): void;
+    };
+    artifacts: XenoArtifactRepository;
+    /** Caller MUST first confirm registry close/active command settlement. A stop request is not settlement. */
+    close(): void;
+}>;
+//# sourceMappingURL=BrowserAuthorityResources.d.ts.map

package/dist/browser/BrowserAuthorityResources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserAuthorityResources.d.ts","sourceRoot":"","sources":["../../src/browser/BrowserAuthorityResources.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAC,6BAA6B,EAAC,MAAM,qCAAqC,CAAA;AACjF,OAAO,KAAK,EAAC,mBAAmB,EAAC,4BAA4B,EAAC,uBAAuB,EAAC,MAAM,iCAAiC,CAAA;AAE7H,MAAM,WAAW,kBAAmB,SAAQ,mBAAmB;IAC7D,oCAAoC,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAAC,4BAA4B,GAAC;QAAC,KAAK,IAAG,IAAI,CAAA;KAAC,CAAC,CAAA;IACtG,oCAAoC,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAAC,uBAAuB,GAAC;QAAC,KAAK,IAAG,IAAI,CAAA;KAAC,CAAC,CAAA;IACjG,0BAA0B,EAAC,KAAI,OAAO,EAAC;QAAC,SAAS,EAAC,MAAM,CAAA;KAAC,KAAG,sBAAsB,CAAA;CACnF;AACD;+FAC+F;AAC/F,wBAAsB,6BAA6B,CAAC,OAAO,EAAC;IAAC,GAAG,EAAC,kBAAkB,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,sBAAsB,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAC;;;iBAIxC,IAAI;;;iBAAuD,IAAI;;;IASxK,4GAA4G;;GAIjH"}

package/dist/browser/BrowserAuthorityResources.js

@@ -0,0 +1,35 @@
+import { isAbsolute, join } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { SqliteBrowserPreparationStore } from './BrowserCommandPreparationStore.js';
+/** Opens canonical persistence on host-private paths. This is not an encryption claim: evidence
+ * retention and OS-protected directory authority must be supplied by the native host owner. */
+export async function openBrowserAuthorityResources(options) {
+    if (!isAbsolute(options.directory))
+        throw Error('Browser authority needs an absolute host-private directory');
+    for (const key of ['openSqliteCapabilityLeasePersistence', 'openSqliteAutomationExecutionJournal', 'FileXenoArtifactRepository', 'runDurableAutomation'])
+        if (typeof options.sdk[key] !== 'function')
+            throw Error('Qualified durable Browser SDK storage is unavailable');
+    await options.assertPrivateDirectory(options.directory);
+    let preparations, capabilities, journal;
+    try {
+        preparations = new SqliteBrowserPreparationStore(new DatabaseSync(join(options.directory, 'preparations.sqlite')));
+        capabilities = await options.sdk.openSqliteCapabilityLeasePersistence(join(options.directory, 'capabilities.sqlite'));
+        journal = await options.sdk.openSqliteAutomationExecutionJournal(join(options.directory, 'operations.sqlite'));
+        const artifactDirectory = join(options.directory, 'artifacts');
+        await options.assertPrivateDirectory(artifactDirectory);
+        const artifacts = new options.sdk.FileXenoArtifactRepository({ directory: artifactDirectory });
+        let closed = false;
+        return { preparations, capabilities, journal, artifacts,
+            /** Caller MUST first confirm registry close/active command settlement. A stop request is not settlement. */
+            close() { if (closed)
+                return; preparations.close(); capabilities.close(); journal.close(); closed = true; },
+        };
+    }
+    catch (error) {
+        preparations?.close();
+        capabilities?.close();
+        journal?.close();
+        throw error;
+    }
+}
+//# sourceMappingURL=BrowserAuthorityResources.js.map

package/dist/browser/BrowserAuthorityResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserAuthorityResources.js","sourceRoot":"","sources":["../../src/browser/BrowserAuthorityResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,IAAI,EAAC,MAAM,WAAW,CAAA;AACzC,OAAO,EAAC,YAAY,EAAC,MAAM,aAAa,CAAA;AAExC,OAAO,EAAC,6BAA6B,EAAC,MAAM,qCAAqC,CAAA;AAQjF;+FAC+F;AAC/F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAmG;IACrJ,IAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC3G,KAAI,MAAM,GAAG,IAAI,CAAC,sCAAsC,EAAC,sCAAsC,EAAC,4BAA4B,EAAC,sBAAsB,CAAU;QAAC,IAAG,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAG,UAAU;YAAC,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzQ,MAAM,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACvD,IAAI,YAAoD,EAAC,YAAoE,EAAC,OAA0D,CAAA;IACxL,IAAI,CAAC;QACH,YAAY,GAAC,IAAI,6BAA6B,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC/G,YAAY,GAAC,MAAM,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,qBAAqB,CAAC,CAAC,CAAA;QAClH,OAAO,GAAC,MAAM,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,mBAAmB,CAAC,CAAC,CAAA;QAC3G,MAAM,iBAAiB,GAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,WAAW,CAAC,CAAC;QAAA,MAAM,OAAO,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;QACnH,MAAM,SAAS,GAAC,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAC,SAAS,EAAC,iBAAiB,EAAC,CAAC,CAAA;QACzF,IAAI,MAAM,GAAC,KAAK,CAAA;QAChB,OAAO,EAAC,YAAY,EAAC,YAAY,EAAC,OAAO,EAAC,SAAS;YACjD,4GAA4G;YAC5G,KAAK,KAAG,IAAG,MAAM;gBAAC,OAAO,CAAA,YAAa,CAAC,KAAK,EAAE,CAAC,CAAA,YAAa,CAAC,KAAK,EAAE,CAAC,CAAA,OAAQ,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,GAAC,IAAI,CAAA,CAAA,CAAC;SACnG,CAAA;IACH,CAAC;IAAC,OAAM,KAAK,EAAC,CAAC;QAAA,YAAY,EAAE,KAAK,EAAE,CAAC;QAAA,YAAY,EAAE,KAAK,EAAE,CAAC;QAAA,OAAO,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,KAAK,CAAA;IAAA,CAAC;AAC1F,CAAC"}

package/dist/browser/BrowserCommandPreparationStore.d.ts

@@ -0,0 +1,46 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { OwnedBrowserScope } from '@xenosystem/agent-interface-host/node';
+/** No action parameters, typed text, full URL, credentials or native dialog content. */
+export interface BrowserCommandPreparation {
+    schemaVersion: 1;
+    version: number;
+    operationId: string;
+    inputFingerprint: string;
+    scope: OwnedBrowserScope & {
+        teamId?: string;
+        agentId?: string;
+    };
+    sessionId: string;
+    tabId: string;
+    origin: string;
+    targetFingerprint: string;
+    principalId: string;
+    requestedAt: string;
+    leaseId: string;
+    profileFingerprint: string;
+    contractId: string;
+    contractFingerprint: string;
+    phase: 'prepared' | 'consent-pending' | 'consent-accepted' | 'approved' | 'denied';
+    leaseVersion?: number;
+    challengeHash?: string;
+    consentOwner?: string;
+    consentReceiptId?: string;
+}
+export interface BrowserPreparationStore {
+    get(operationId: string): Promise<BrowserCommandPreparation | undefined>;
+    create(value: BrowserCommandPreparation): Promise<BrowserCommandPreparation>;
+    update(value: BrowserCommandPreparation, expectedVersion: number): Promise<BrowserCommandPreparation>;
+}
+export declare class SqliteBrowserPreparationStore implements BrowserPreparationStore {
+    private readonly database;
+    private closed;
+    /** Host supplies its own private database connection; this object owns that connection. */
+    constructor(database: DatabaseSync);
+    get(id: string): Promise<BrowserCommandPreparation | undefined>;
+    create(value: BrowserCommandPreparation): Promise<BrowserCommandPreparation>;
+    update(value: BrowserCommandPreparation, expectedVersion: number): Promise<BrowserCommandPreparation>;
+    close(): void;
+    private read;
+    private transaction;
+}
+//# sourceMappingURL=BrowserCommandPreparationStore.d.ts.map

package/dist/browser/BrowserCommandPreparationStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCommandPreparationStore.d.ts","sourceRoot":"","sources":["../../src/browser/BrowserCommandPreparationStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,aAAa,CAAA;AAC7C,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,uCAAuC,CAAA;AAE5E,wFAAwF;AACxF,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAC,CAAC,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,gBAAgB,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,iBAAiB,GAAC;QAAC,MAAM,CAAC,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAA;KAAC,CAAA;IAClI,SAAS,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,iBAAiB,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAA;IACvF,WAAW,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,kBAAkB,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,mBAAmB,EAAC,MAAM,CAAA;IACxG,KAAK,EAAC,UAAU,GAAC,iBAAiB,GAAC,kBAAkB,GAAC,UAAU,GAAC,QAAQ,CAAA;IACzE,YAAY,CAAC,EAAC,MAAM,CAAC;IAAA,aAAa,CAAC,EAAC,MAAM,CAAC;IAAA,YAAY,CAAC,EAAC,MAAM,CAAC;IAAA,gBAAgB,CAAC,EAAC,MAAM,CAAA;CACzF;AACD,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,WAAW,EAAC,MAAM,GAAE,OAAO,CAAC,yBAAyB,GAAC,SAAS,CAAC,CAAA;IACpE,MAAM,CAAC,KAAK,EAAC,yBAAyB,GAAE,OAAO,CAAC,yBAAyB,CAAC,CAAA;IAC1E,MAAM,CAAC,KAAK,EAAC,yBAAyB,EAAC,eAAe,EAAC,MAAM,GAAE,OAAO,CAAC,yBAAyB,CAAC,CAAA;CAClG;AAED,qBAAa,6BAA8B,YAAW,uBAAuB;IAG/D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,MAAM,CAAM;IACpB,2FAA2F;gBAC9D,QAAQ,EAAC,YAAY;IAOlD,GAAG,CAAC,EAAE,EAAC,MAAM;IACb,MAAM,CAAC,KAAK,EAAC,yBAAyB;IAItC,MAAM,CAAC,KAAK,EAAC,yBAAyB,EAAC,eAAe,EAAC,MAAM;IAO7D,KAAK;IACL,OAAO,CAAC,IAAI;YACE,WAAW;CAC1B"}

package/dist/browser/BrowserCommandPreparationStore.js

@@ -0,0 +1,135 @@
+const KEYS = ['schemaVersion', 'version', 'operationId', 'inputFingerprint', 'scope', 'sessionId', 'tabId', 'origin', 'targetFingerprint', 'principalId', 'requestedAt', 'leaseId', 'profileFingerprint', 'contractId', 'contractFingerprint', 'phase', 'leaseVersion', 'challengeHash', 'consentOwner', 'consentReceiptId'];
+export class SqliteBrowserPreparationStore {
+    database;
+    closed = false;
+    /** Host supplies its own private database connection; this object owns that connection. */
+    constructor(database) {
+        this.database = database;
+        try {
+            database.exec('PRAGMA busy_timeout=0; PRAGMA synchronous=FULL; CREATE TABLE IF NOT EXISTS browser_preparation_schema(id INTEGER PRIMARY KEY CHECK(id=1),version INTEGER NOT NULL); INSERT OR IGNORE INTO browser_preparation_schema VALUES(1,1)');
+            if (database.prepare('SELECT version FROM browser_preparation_schema WHERE id=1').get()?.version !== 1)
+                throw Error('Unsupported Browser preparation schema');
+            database.exec('CREATE TABLE IF NOT EXISTS browser_preparations(id TEXT PRIMARY KEY,version INTEGER NOT NULL,body TEXT NOT NULL)');
+        }
+        catch (error) {
+            database.close();
+            this.closed = true;
+            throw error;
+        }
+    }
+    get(id) { checkText(id); return this.transaction(() => this.read(id)); }
+    create(value) {
+        value = structuredClone(value);
+        validate(value);
+        if (value.version !== 1 || value.phase !== 'prepared')
+            throw Error('Browser preparation must begin at version one');
+        return this.transaction(() => {
+            const prior = this.read(value.operationId);
+            if (prior) {
+                if (prior.inputFingerprint !== value.inputFingerprint)
+                    throw Error('Browser operation was reused for different input');
+                return prior;
+            }
+            const count = this.database.prepare('SELECT COUNT(*) AS count FROM browser_preparations').get()?.count;
+            if (typeof count !== 'number' || count >= 100000)
+                throw Error('Browser preparation capacity reached');
+            this.database.prepare('INSERT INTO browser_preparations(id,version,body) VALUES(?,?,?)').run(value.operationId, value.version, encode(value));
+            return structuredClone(value);
+        });
+    }
+    update(value, expectedVersion) {
+        value = structuredClone(value);
+        validate(value);
+        if (value.version !== expectedVersion + 1)
+            throw Error('Browser preparation version must advance once');
+        return this.transaction(() => {
+            const prior = this.read(value.operationId);
+            if (!prior || prior.version !== expectedVersion)
+                throw Error('Browser preparation changed');
+            const mutable = new Set(['phase', 'version', 'leaseVersion', 'challengeHash', 'consentOwner', 'consentReceiptId']);
+            for (const key of KEYS)
+                if (!mutable.has(key) && JSON.stringify(prior[key]) !== JSON.stringify(value[key]))
+                    throw Error('Browser preparation immutable identity changed');
+            const transitions = { prepared: ['consent-pending'], 'consent-pending': ['consent-accepted', 'denied'], 'consent-accepted': ['approved'], approved: [], denied: [] };
+            if (!transitions[prior.phase].includes(value.phase))
+                throw Error('Browser preparation phase cannot be replayed');
+            this.database.prepare('UPDATE browser_preparations SET version=?,body=? WHERE id=?').run(value.version, encode(value), value.operationId);
+            return structuredClone(value);
+        });
+    }
+    close() { if (!this.closed) {
+        this.closed = true;
+        this.database.close();
+    } }
+    read(id) { const row = this.database.prepare('SELECT CASE WHEN length(body)<=262144 THEN body ELSE NULL END AS body FROM browser_preparations WHERE id=?').get(id); if (!row)
+        return undefined; if (typeof row.body !== 'string')
+        throw Error('Browser preparation is corrupt'); const value = JSON.parse(row.body); validate(value); if (value.operationId !== id)
+        throw Error('Browser preparation identity differs'); return value; }
+    async transaction(call) { const deadline = Date.now() + 1000; for (;;) {
+        if (this.closed)
+            throw Error('Browser preparation store closed');
+        let began = false;
+        try {
+            this.database.exec('BEGIN IMMEDIATE');
+            began = true;
+            const value = call();
+            this.database.exec('COMMIT');
+            return value;
+        }
+        catch (error) {
+            if (began)
+                try {
+                    this.database.exec('ROLLBACK');
+                }
+                catch { }
+            if (Date.now() >= deadline || !/SQLITE_BUSY|database is locked/.test(String(error)))
+                throw error;
+            await new Promise(resolve => setTimeout(resolve, 10));
+        }
+    } }
+}
+function checkText(value) { if (typeof value !== 'string' || !value.trim() || value.length > 1024)
+    throw Error('Invalid Browser preparation identity'); }
+function validate(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value) || Object.keys(value).some(key => !KEYS.includes(key)))
+        throw Error('Unexpected Browser preparation fields');
+    const v = value;
+    for (const text of [v.operationId, v.sessionId, v.tabId, v.principalId, v.leaseId, v.requestedAt, v.contractId])
+        checkText(text);
+    if (v.schemaVersion !== 1 || !Number.isSafeInteger(v.version) || v.version < 1 || !['prepared', 'consent-pending', 'consent-accepted', 'approved', 'denied'].includes(v.phase))
+        throw Error('Invalid Browser preparation schema');
+    for (const hash of [v.inputFingerprint, v.targetFingerprint, v.profileFingerprint, v.contractFingerprint])
+        if (!/^[a-f0-9]{64}$/.test(hash))
+            throw Error('Invalid Browser preparation fingerprint');
+    const origin = new URL(v.origin);
+    if (!['http:', 'https:'].includes(origin.protocol) || origin.origin !== v.origin)
+        throw Error('Browser preparation requires an exact web origin');
+    if (!v.scope || !Number.isFinite(Date.parse(v.requestedAt)))
+        throw Error('Browser preparation scope or time is missing');
+    if (Object.keys(v.scope).some(key => !['workspaceId', 'workspaceIncarnation', 'conversationId', 'clientInstanceId', 'teamId', 'agentId'].includes(key)))
+        throw Error('Unexpected Browser scope fields');
+    for (const text of [v.scope.workspaceId, v.scope.workspaceIncarnation, v.scope.conversationId, v.scope.clientInstanceId])
+        checkText(text);
+    if (v.scope.teamId !== undefined)
+        checkText(v.scope.teamId);
+    if (v.scope.agentId !== undefined)
+        checkText(v.scope.agentId);
+    if (v.phase === 'prepared') {
+        if (v.leaseVersion !== undefined || v.challengeHash !== undefined || v.consentOwner !== undefined || v.consentReceiptId !== undefined)
+            throw Error('Unapproved preparation contains consent fields');
+    }
+    else {
+        if (!Number.isSafeInteger(v.leaseVersion) || v.leaseVersion < 1 || !v.challengeHash || !/^[a-f0-9]{64}$/.test(v.challengeHash))
+            throw Error('Invalid consent binding');
+        checkText(v.consentOwner);
+        if (v.phase === 'consent-pending') {
+            if (v.consentReceiptId !== undefined)
+                throw Error('Pending consent contains a receipt');
+        }
+        else
+            checkText(v.consentReceiptId);
+    }
+}
+function encode(value) { const text = JSON.stringify(value); if (text.length > 262144)
+    throw Error('Browser preparation exceeds bound'); return text; }
+//# sourceMappingURL=BrowserCommandPreparationStore.js.map

package/dist/browser/BrowserCommandPreparationStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCommandPreparationStore.js","sourceRoot":"","sources":["../../src/browser/BrowserCommandPreparationStore.ts"],"names":[],"mappings":"AAgBA,MAAM,IAAI,GAAC,CAAC,eAAe,EAAC,SAAS,EAAC,aAAa,EAAC,kBAAkB,EAAC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAC,QAAQ,EAAC,mBAAmB,EAAC,aAAa,EAAC,aAAa,EAAC,SAAS,EAAC,oBAAoB,EAAC,YAAY,EAAC,qBAAqB,EAAC,OAAO,EAAC,cAAc,EAAC,eAAe,EAAC,cAAc,EAAC,kBAAkB,CAAC,CAAA;AACvS,MAAM,OAAO,6BAA6B;IAGX;IAFrB,MAAM,GAAC,KAAK,CAAA;IACpB,2FAA2F;IAC3F,YAA6B,QAAqB;QAArB,aAAQ,GAAR,QAAQ,CAAa;QAChD,IAAI,CAAC;YACL,QAAQ,CAAC,IAAI,CAAC,kOAAkO,CAAC,CAAA;YACjP,IAAG,QAAQ,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,KAAG,CAAC;gBAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACzJ,QAAQ,CAAC,IAAI,CAAC,kHAAkH,CAAC,CAAA;QACjI,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,GAAC,IAAI,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;IACpE,CAAC;IACD,GAAG,CAAC,EAAS,IAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA,OAAO,IAAI,CAAC,WAAW,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA,CAAA,CAAC;IACxE,MAAM,CAAC,KAA+B;QAAE,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,KAAK,CAAC,KAAK,KAAG,UAAU;YAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC9L,OAAO,IAAI,CAAC,WAAW,CAAC,GAAE,EAAE;YAAC,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAA,IAAG,KAAK,EAAC,CAAC;gBAAA,IAAG,KAAK,CAAC,gBAAgB,KAAG,KAAK,CAAC,gBAAgB;oBAAC,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBAAA,OAAO,KAAK,CAAA;YAAA,CAAC;YAC9M,MAAM,KAAK,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC;YAAA,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,IAAE,MAAM;gBAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAA;YAClM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAA,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;QAAA,CAAC,CAAC,CAAA;IAAA,CAAC;IAChL,MAAM,CAAC,KAA+B,EAAC,eAAsB;QAAE,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,OAAO,KAAG,eAAe,GAAC,CAAC;YAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC3M,OAAO,IAAI,CAAC,WAAW,CAAC,GAAE,EAAE;YAAC,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAA,IAAG,CAAC,KAAK,IAAE,KAAK,CAAC,OAAO,KAAG,eAAe;gBAAC,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAA;YACzJ,MAAM,OAAO,GAAC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAC,SAAS,EAAC,cAAc,EAAC,eAAe,EAAC,cAAc,EAAC,kBAAkB,CAAC,CAAC,CAAA;YAC3G,KAAI,MAAM,GAAG,IAAI,IAAI;gBAAC,IAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAsC,CAAC,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAsC,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAA;YACvO,MAAM,WAAW,GAAC,EAAC,QAAQ,EAAC,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,EAAC,CAAC,kBAAkB,EAAC,QAAQ,CAAC,EAAC,kBAAkB,EAAC,CAAC,UAAU,CAAC,EAAC,QAAQ,EAAC,EAAE,EAAC,MAAM,EAAC,EAAE,EAAC,CAAA;YACvJ,IAAG,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAc,CAAC;gBAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAA;YACvH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAC,MAAM,CAAC,KAAK,CAAC,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAA,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;QAAA,CAAC,CAAC,CAAA;IAAA,CAAC;IAC5K,KAAK,KAAG,IAAG,CAAC,IAAI,CAAC,MAAM,EAAC,CAAC;QAAA,IAAI,CAAC,MAAM,GAAC,IAAI,CAAC;QAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;IAAA,CAAC,CAAA,CAAC;IACzD,IAAI,CAAC,EAAS,IAAE,MAAM,GAAG,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,4GAA4G,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,IAAG,CAAC,GAAG;QAAC,OAAO,SAAS,CAAC,CAAA,IAAG,OAAO,GAAG,CAAC,IAAI,KAAG,QAAQ;QAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA,MAAM,KAAK,GAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA,IAAG,KAAK,CAAC,WAAW,KAAG,EAAE;QAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAA,OAAO,KAAK,CAAA,CAAA,CAAC;IAC/Z,KAAK,CAAC,WAAW,CAAI,IAAU,IAAa,MAAM,QAAQ,GAAC,IAAI,CAAC,GAAG,EAAE,GAAC,IAAI,CAAC,CAAA,SAAO,CAAC;QAAA,IAAG,IAAI,CAAC,MAAM;YAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAAA,IAAI,KAAK,GAAC,KAAK,CAAC;QAAA,IAAG,CAAC;YAAA,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAA,KAAK,GAAC,IAAI,CAAC;YAAA,MAAM,KAAK,GAAC,IAAI,EAAE,CAAC;YAAA,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAA,OAAO,KAAK,CAAA;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAG,KAAK;gBAAC,IAAG,CAAC;oBAAA,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,CAAC;YAAA,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,QAAQ,IAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAA,MAAM,IAAI,OAAO,CAAC,OAAO,CAAA,EAAE,CAAA,UAAU,CAAC,OAAO,EAAC,EAAE,CAAC,CAAC,CAAA;QAAA,CAAC;IAAA,CAAC,CAAA,CAAC;CAC7e;AACD,SAAS,SAAS,CAAC,KAAa,IAAE,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAE,KAAK,CAAC,MAAM,GAAC,IAAI;IAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAA,CAAA,CAAC;AACnJ,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAG,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAChK,MAAM,CAAC,GAAC,KAAkC,CAAC;IAAA,KAAI,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,SAAS,EAAC,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,OAAO,EAAC,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,UAAU,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACnK,IAAG,CAAC,CAAC,aAAa,KAAG,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAE,CAAC,CAAC,OAAO,GAAC,CAAC,IAAE,CAAC,CAAC,UAAU,EAAC,iBAAiB,EAAC,kBAAkB,EAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACjN,KAAI,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAC,CAAC,CAAC,iBAAiB,EAAC,CAAC,CAAC,kBAAkB,EAAC,CAAC,CAAC,mBAAmB,CAAC;QAAC,IAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5L,MAAM,MAAM,GAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAAA,IAAG,CAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,MAAM,CAAC,MAAM,KAAG,CAAC,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACzK,IAAG,CAAC,CAAC,CAAC,KAAK,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACpH,IAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,CAAC,aAAa,EAAC,sBAAsB,EAAC,gBAAgB,EAAC,kBAAkB,EAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAC9L,KAAI,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACpI,IAAG,CAAC,CAAC,KAAK,CAAC,MAAM,KAAG,SAAS;QAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAA,IAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAG,SAAS;QAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACjH,IAAG,CAAC,CAAC,KAAK,KAAG,UAAU,EAAE,CAAC;QAAA,IAAG,CAAC,CAAC,YAAY,KAAG,SAAS,IAAE,CAAC,CAAC,aAAa,KAAG,SAAS,IAAE,CAAC,CAAC,YAAY,KAAG,SAAS,IAAE,CAAC,CAAC,gBAAgB,KAAG,SAAS;YAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAAA,CAAC;SAC1M,CAAC;QAAA,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAE,CAAC,CAAC,YAAa,GAAC,CAAC,IAAE,CAAC,CAAC,CAAC,aAAa,IAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;YAAC,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAAA,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,KAAK,KAAG,iBAAiB,EAAC,CAAC;YAAA,IAAG,CAAC,CAAC,gBAAgB,KAAG,SAAS;gBAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAAA,CAAC;;YAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA;IAAA,CAAC;AACvV,CAAC;AACD,SAAS,MAAM,CAAC,KAA+B,IAAE,MAAM,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA,IAAG,IAAI,CAAC,MAAM,GAAC,MAAM;IAAC,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA,OAAO,IAAI,CAAA,CAAA,CAAC"}

package/dist/browser/BrowserConsentController.d.ts

@@ -0,0 +1,38 @@
+import type { BrowserCommandPreparation, BrowserPreparationStore } from './BrowserCommandPreparationStore.js';
+export interface BrowserConsentChallenge {
+    operationId: string;
+    inputFingerprint: string;
+    targetFingerprint: string;
+    challengeHash: string;
+    principalId: string;
+    workspaceId: string;
+    workspaceIncarnation: string;
+    clientInstanceId: string;
+    sessionId: string;
+    tabId: string;
+    origin: string;
+    leaseId: string;
+    leaseVersion: number;
+    operation: string;
+}
+export interface BrowserPrincipalConsentPort {
+    /** An authenticated native surface, not a Boolean copied from renderer IPC. */
+    available(): boolean;
+    request(challenge: Readonly<BrowserConsentChallenge>, signal: AbortSignal): Promise<{
+        decision: 'approve' | 'deny';
+        challengeHash: string;
+        principalId: string;
+        receiptId: string;
+    }>;
+}
+export declare class BrowserConsentController {
+    private readonly store;
+    private readonly port;
+    private readonly assertCurrent;
+    private readonly timeoutMs;
+    private readonly abort;
+    cancel(): void;
+    constructor(store: BrowserPreparationStore, port: BrowserPrincipalConsentPort, assertCurrent: () => Promise<void>, timeoutMs?: number);
+    obtain(record: BrowserCommandPreparation, leaseVersion: number, operation: string): Promise<BrowserCommandPreparation>;
+}
+//# sourceMappingURL=BrowserConsentController.d.ts.map

package/dist/browser/BrowserConsentController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserConsentController.d.ts","sourceRoot":"","sources":["../../src/browser/BrowserConsentController.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,yBAAyB,EAAC,uBAAuB,EAAC,MAAM,qCAAqC,CAAA;AAC1G,MAAM,WAAW,uBAAuB;IAAE,WAAW,EAAC,MAAM,CAAC;IAAA,gBAAgB,EAAC,MAAM,CAAC;IAAA,iBAAiB,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,oBAAoB,EAAC,MAAM,CAAC;IAAA,gBAAgB,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC;AAC7T,MAAM,WAAW,2BAA2B;IAC1C,+EAA+E;IAC/E,SAAS,IAAG,OAAO,CAAA;IACnB,OAAO,CAAC,SAAS,EAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAC,MAAM,EAAC,WAAW,GAAE,OAAO,CAAC;QAAC,QAAQ,EAAC,SAAS,GAAC,MAAM,CAAC;QAAA,aAAa,EAAC,MAAM,CAAC;QAAA,WAAW,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,CAAC,CAAA;CACtK;AACD,qBAAa,wBAAwB;IAGvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAyB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAA6B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAAmB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAFxL,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,MAAM;gBACuB,KAAK,EAAC,uBAAuB,EAAkB,IAAI,EAAC,2BAA2B,EAAkB,aAAa,EAAC,MAAI,OAAO,CAAC,IAAI,CAAC,EAAkB,SAAS,SAAO;IACzL,MAAM,CAAC,MAAM,EAAC,yBAAyB,EAAC,YAAY,EAAC,MAAM,EAAC,SAAS,EAAC,MAAM,GAAE,OAAO,CAAC,yBAAyB,CAAC;CAgBvH"}

package/dist/browser/BrowserConsentController.js

@@ -0,0 +1,46 @@
+import { createHash, randomUUID } from 'node:crypto';
+export class BrowserConsentController {
+    store;
+    port;
+    assertCurrent;
+    timeoutMs;
+    abort = new AbortController();
+    cancel() { this.abort.abort(); }
+    constructor(store, port, assertCurrent, timeoutMs = 120000) {
+        this.store = store;
+        this.port = port;
+        this.assertCurrent = assertCurrent;
+        this.timeoutMs = timeoutMs;
+        if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 10 || timeoutMs > 120000)
+            throw Error('Invalid consent timeout');
+    }
+    async obtain(record, leaseVersion, operation) {
+        if (record.phase !== 'prepared')
+            throw Error('Browser consent is already pending or decided');
+        await this.assertCurrent();
+        if (!this.port.available())
+            throw Error('An authenticated native consent surface is unavailable');
+        const challengeData = { operationId: record.operationId, inputFingerprint: record.inputFingerprint, targetFingerprint: record.targetFingerprint, principalId: record.principalId, workspaceId: record.scope.workspaceId, workspaceIncarnation: record.scope.workspaceIncarnation, clientInstanceId: record.scope.clientInstanceId, sessionId: record.sessionId, tabId: record.tabId, origin: record.origin, leaseId: record.leaseId, leaseVersion, operation };
+        const challengeHash = createHash('sha256').update(JSON.stringify(challengeData)).digest('hex'), challenge = Object.freeze({ ...challengeData, challengeHash });
+        const pending = await this.store.update({ ...record, version: record.version + 1, phase: 'consent-pending', leaseVersion, challengeHash, consentOwner: randomUUID() }, record.version);
+        const controller = this.abort;
+        let timer;
+        let onAbort;
+        try {
+            if (controller.signal.aborted)
+                throw Error('Browser consent response remains pending');
+            const cancelled = new Promise((_, reject) => { onAbort = () => reject(Error('Browser consent response remains pending')); controller.signal.addEventListener('abort', onAbort, { once: true }); timer = setTimeout(() => controller.abort(), this.timeoutMs); });
+            const response = await Promise.race([this.port.request(challenge, controller.signal), cancelled]);
+            await this.assertCurrent();
+            if (response.challengeHash !== challengeHash || response.principalId !== record.principalId || !['approve', 'deny'].includes(response.decision) || typeof response.receiptId !== 'string' || !response.receiptId.trim() || response.receiptId.length > 1024)
+                throw Error('Browser consent receipt did not match its authenticated challenge');
+            return await this.store.update({ ...pending, version: pending.version + 1, phase: response.decision === 'approve' ? 'consent-accepted' : 'denied', consentReceiptId: response.receiptId }, pending.version);
+        }
+        finally {
+            clearTimeout(timer);
+            if (onAbort)
+                controller.signal.removeEventListener('abort', onAbort);
+        }
+    }
+}
+//# sourceMappingURL=BrowserConsentController.js.map

package/dist/browser/BrowserConsentController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserConsentController.js","sourceRoot":"","sources":["../../src/browser/BrowserConsentController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAQjD,MAAM,OAAO,wBAAwB;IAGN;IAA+C;IAAkD;IAAiD;IAF9J,KAAK,GAAC,IAAI,eAAe,EAAE,CAAA;IAC5C,MAAM,KAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA,CAAA,CAAC;IAC5B,YAA6B,KAA6B,EAAkB,IAAgC,EAAkB,aAA+B,EAAkB,YAAU,MAAM;QAAlK,UAAK,GAAL,KAAK,CAAwB;QAAkB,SAAI,GAAJ,IAAI,CAA4B;QAAkB,kBAAa,GAAb,aAAa,CAAkB;QAAkB,cAAS,GAAT,SAAS,CAAO;QAAE,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAE,SAAS,GAAC,EAAE,IAAE,SAAS,GAAC,MAAM;YAAC,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAAA,CAAC;IAC5S,KAAK,CAAC,MAAM,CAAC,MAAgC,EAAC,YAAmB,EAAC,SAAgB;QAChF,IAAG,MAAM,CAAC,KAAK,KAAG,UAAU;YAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAA;QACzF,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC1H,MAAM,aAAa,GAAC,EAAC,WAAW,EAAC,MAAM,CAAC,WAAW,EAAC,gBAAgB,EAAC,MAAM,CAAC,gBAAgB,EAAC,iBAAiB,EAAC,MAAM,CAAC,iBAAiB,EAAC,WAAW,EAAC,MAAM,CAAC,WAAW,EAAC,WAAW,EAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAC,oBAAoB,EAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAC,gBAAgB,EAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,YAAY,EAAC,SAAS,EAAC,CAAA;QACna,MAAM,aAAa,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,aAAa,EAAC,aAAa,EAAC,CAAC,CAAA;QACtJ,MAAM,OAAO,GAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAC,GAAG,MAAM,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,GAAC,CAAC,EAAC,KAAK,EAAC,iBAAiB,EAAC,YAAY,EAAC,aAAa,EAAC,YAAY,EAAC,UAAU,EAAE,EAAC,EAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACvK,MAAM,UAAU,GAAC,IAAI,CAAC,KAAK,CAAC;QAAA,IAAI,KAA6C,CAAC;QAAA,IAAI,OAA4B,CAAA;QAC9G,IAAG,CAAC;YACF,IAAG,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAC,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAA;YACpF,MAAM,SAAS,GAAC,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAC,MAAM,EAAC,EAAE,GAAC,OAAO,GAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC,CAAA,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC,CAAA,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,CAAA,UAAU,CAAC,KAAK,EAAE,EAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAA,CAAC,CAAC,CAAA;YAC/O,MAAM,QAAQ,GAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,UAAU,CAAC,MAAM,CAAC,EAAC,SAAS,CAAC,CAAC,CAAA;YAC7F,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;YAC1B,IAAG,QAAQ,CAAC,aAAa,KAAG,aAAa,IAAE,QAAQ,CAAC,WAAW,KAAG,MAAM,CAAC,WAAW,IAAE,CAAC,CAAC,SAAS,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAE,OAAO,QAAQ,CAAC,SAAS,KAAG,QAAQ,IAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,IAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAC,IAAI;gBAAC,MAAM,KAAK,CAAC,mEAAmE,CAAC,CAAA;YACxT,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAC,GAAG,OAAO,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,GAAC,CAAC,EAAC,KAAK,EAAC,QAAQ,CAAC,QAAQ,KAAG,SAAS,CAAA,CAAC,CAAA,kBAAkB,CAAA,CAAC,CAAA,QAAQ,EAAC,gBAAgB,EAAC,QAAQ,CAAC,SAAS,EAAC,EAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5L,CAAC;gBAAO,CAAC;YAAA,YAAY,CAAC,KAAK,CAAC,CAAC;YAAA,IAAG,OAAO;gBAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,OAAO,CAAC,CAAA;QAAA,CAAC;IACjG,CAAC;CACF"}

package/dist/browser/BrowserInteractiveConsent.d.ts

@@ -0,0 +1,24 @@
+import type { BrowserPrincipalConsentPort, BrowserConsentChallenge } from './BrowserConsentController.js';
+export interface BrowserPermissionAnswer {
+    permissionId: string;
+    granted: boolean;
+}
+/** Host-owned adapter onto the existing native permission event/answer surface.
+ * A renderer can answer an existing opaque id; it cannot choose the principal,
+ * challenge binding, receipt identity or operation being approved. */
+export declare class BrowserInteractiveConsent implements BrowserPrincipalConsentPort {
+    private readonly send?;
+    private readonly pending;
+    constructor(send?: ((channel: string, payload: Record<string, unknown>) => boolean | void) | undefined);
+    available(): boolean;
+    request(challenge: Readonly<BrowserConsentChallenge>, signal: AbortSignal): Promise<{
+        decision: 'approve' | 'deny';
+        challengeHash: string;
+        principalId: string;
+        receiptId: string;
+    }>;
+    answer(answer: BrowserPermissionAnswer): {
+        handled: boolean;
+    };
+}
+//# sourceMappingURL=BrowserInteractiveConsent.d.ts.map

package/dist/browser/BrowserInteractiveConsent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserInteractiveConsent.d.ts","sourceRoot":"","sources":["../../src/browser/BrowserInteractiveConsent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,2BAA2B,EAAC,uBAAuB,EAAC,MAAM,+BAA+B,CAAA;AAEtG,MAAM,WAAW,uBAAuB;IAAE,YAAY,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,OAAO,CAAA;CAAC;AAG9E;;sEAEsE;AACtE,qBAAa,yBAA0B,YAAW,2BAA2B;IAE/D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IADlC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;gBACrB,IAAI,CAAC,GAAE,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,KAAG,OAAO,GAAC,IAAI,aAAA;IACjG,SAAS,IAAG,OAAO;IACnB,OAAO,CAAC,SAAS,EAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAC,MAAM,EAAC,WAAW,GAAE,OAAO,CAAC;QAAC,QAAQ,EAAC,SAAS,GAAC,MAAM,CAAC;QAAA,aAAa,EAAC,MAAM,CAAC;QAAA,WAAW,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,CAAC;IAYrK,MAAM,CAAC,MAAM,EAAC,uBAAuB,GAAE;QAAC,OAAO,EAAC,OAAO,CAAA;KAAC;CAQzD"}

package/dist/browser/BrowserInteractiveConsent.js

@@ -0,0 +1,45 @@
+import { randomUUID } from 'node:crypto';
+/** Host-owned adapter onto the existing native permission event/answer surface.
+ * A renderer can answer an existing opaque id; it cannot choose the principal,
+ * challenge binding, receipt identity or operation being approved. */
+export class BrowserInteractiveConsent {
+    send;
+    pending = new Map();
+    constructor(send) {
+        this.send = send;
+    }
+    available() { return typeof this.send === 'function'; }
+    request(challenge, signal) {
+        if (!this.send)
+            throw Error('An authenticated native consent surface is unavailable');
+        const permissionId = 'browser-permission-' + challenge.challengeHash;
+        if (this.pending.has(permissionId))
+            throw Error('Browser consent challenge is already pending');
+        return new Promise((resolve, reject) => {
+            const abort = () => { if (this.pending.delete(permissionId))
+                reject(Error('Browser consent response remains pending')); };
+            const entry = { challenge, resolve, reject, abort, signal };
+            this.pending.set(permissionId, entry);
+            signal.addEventListener('abort', abort, { once: true });
+            try {
+                if (this.send('agent:permission-request', { requestId: challenge.operationId, permissionId, source: 'owned-browser', sessionId: challenge.sessionId, toolName: `Browser ${challenge.operation}`, toolKind: challenge.operation, path: challenge.origin, directory: '', browserOrigin: challenge.origin }) === false)
+                    throw Error('An authenticated native consent surface is unavailable');
+            }
+            catch (error) {
+                this.pending.delete(permissionId);
+                signal.removeEventListener('abort', abort);
+                reject(error instanceof Error ? error : Error('Browser consent surface is unavailable'));
+            }
+        });
+    }
+    answer(answer) {
+        const entry = this.pending.get(answer.permissionId);
+        if (!entry)
+            return { handled: false };
+        this.pending.delete(answer.permissionId);
+        entry.signal.removeEventListener('abort', entry.abort);
+        entry.resolve({ decision: answer.granted ? 'approve' : 'deny', challengeHash: entry.challenge.challengeHash, principalId: entry.challenge.principalId, receiptId: 'browser-consent-' + randomUUID() });
+        return { handled: true };
+    }
+}
+//# sourceMappingURL=BrowserInteractiveConsent.js.map

package/dist/browser/BrowserInteractiveConsent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserInteractiveConsent.js","sourceRoot":"","sources":["../../src/browser/BrowserInteractiveConsent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAMtC;;sEAEsE;AACtE,MAAM,OAAO,yBAAyB;IAEP;IADZ,OAAO,GAAC,IAAI,GAAG,EAAkB,CAAA;IAClD,YAA6B,IAAoE;QAApE,SAAI,GAAJ,IAAI,CAAgE;IAAG,CAAC;IACrG,SAAS,KAAW,OAAO,OAAO,IAAI,CAAC,IAAI,KAAG,UAAU,CAAA,CAAA,CAAC;IACzD,OAAO,CAAC,SAA2C,EAAC,MAAkB;QACpE,IAAG,CAAC,IAAI,CAAC,IAAI;YAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAA;QACnF,MAAM,YAAY,GAAC,qBAAqB,GAAC,SAAS,CAAC,aAAa,CAAA;QAChE,IAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAA;QAC7F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;YACnC,MAAM,KAAK,GAAC,GAAE,EAAE,GAAC,IAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAA,CAAA,CAAC,CAAA;YAChH,MAAM,KAAK,GAAC,EAAC,SAAS,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,CAAC;YAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAC,KAAK,CAAC,CAAA;YACxF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAA;YAClD,IAAG,CAAC;gBAAA,IAAG,IAAI,CAAC,IAAK,CAAC,0BAA0B,EAAC,EAAC,SAAS,EAAC,SAAS,CAAC,WAAW,EAAC,YAAY,EAAC,MAAM,EAAC,eAAe,EAAC,SAAS,EAAC,SAAS,CAAC,SAAS,EAAC,QAAQ,EAAC,WAAW,SAAS,CAAC,SAAS,EAAE,EAAC,QAAQ,EAAC,SAAS,CAAC,SAAS,EAAC,IAAI,EAAC,SAAS,CAAC,MAAM,EAAC,SAAS,EAAC,EAAE,EAAC,aAAa,EAAC,SAAS,CAAC,MAAM,EAAC,CAAC,KAAG,KAAK;oBAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAA;YAAA,CAAC;YACzW,OAAM,KAAK,EAAC,CAAC;gBAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;gBAAA,MAAM,CAAC,KAAK,YAAY,KAAK,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAA;YAAA,CAAC;QAChL,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,CAAC,MAA8B;QACnC,MAAM,KAAK,GAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACjD,IAAG,CAAC,KAAK;YAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,CAAA;QAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACxC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACrD,KAAK,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAC,MAAM,CAAC,OAAO,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,MAAM,EAAC,aAAa,EAAC,KAAK,CAAC,SAAS,CAAC,aAAa,EAAC,WAAW,EAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAC,SAAS,EAAC,kBAAkB,GAAC,UAAU,EAAE,EAAC,CAAC,CAAA;QACvL,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,CAAA;IACvB,CAAC;CACF"}

package/dist/browser/OwnedBrowserHostServices.d.ts

@@ -0,0 +1,38 @@
+import type { AgentHostClientIdentity } from '@xenosystem/agent-interface-contract';
+import { BrowserScopeResolver, OwnedBrowserSessionRegistry, OwnedBrowserSessionService, OwnedBrowserCommandService, type BrowserScopeRepository, type BrowserAdmissionRepository, type BrowserCommandAuthority, type PackedBrowserLauncherPort, type OwnedBrowserSessionRegistryOptions } from '@xenosystem/agent-interface-host/node';
+export interface OwnedBrowserAuthorityOwner extends BrowserCommandAuthority {
+    assertConsumption: OwnedBrowserSessionRegistryOptions['assertConsumption'];
+    /** Cancel prompts and settle active executor calls before closing owned journals. */
+    close(): Promise<void>;
+}
+export interface OwnedBrowserAuthorityContext {
+    repository: BrowserScopeRepository;
+    scopes: BrowserScopeResolver;
+    sessions: Pick<OwnedBrowserSessionRegistry, 'resolveSession'>;
+    principal(clientInstanceId: string): Promise<string>;
+    consent: import('./BrowserConsentController.js').BrowserPrincipalConsentPort;
+}
+/** Privileged composition configuration, never a renderer DTO. The launcher is
+ * backed by the qualified /owned package and the authority by canonical SDK
+ * policy/lease/artifact stores. Neither can be substituted by a UI Boolean. */
+export interface OwnedBrowserHostConfiguration {
+    launcher: PackedBrowserLauncherPort;
+    createAuthority(context: OwnedBrowserAuthorityContext): Promise<OwnedBrowserAuthorityOwner>;
+}
+export declare function createOwnedBrowserHostServices(options: OwnedBrowserHostConfiguration & {
+    hostInstanceId: string;
+    assertHostOwner(): Promise<void>;
+    repository: BrowserScopeRepository & BrowserAdmissionRepository;
+    assertClient(client: AgentHostClientIdentity): Promise<void>;
+    principal(clientInstanceId: string): Promise<string>;
+    consent: import('./BrowserConsentController.js').BrowserPrincipalConsentPort;
+}): Promise<{
+    commandService: OwnedBrowserCommandService;
+    sessionService: OwnedBrowserSessionService;
+    owner: {
+        quiesceScope: (scope: import("@xenosystem/agent-interface-contract").AgentWorkspaceLifecycleScope) => Promise<void>;
+        quiesceClient: (instanceId: string) => Promise<void>;
+        close(): Promise<void>;
+    };
+}>;
+//# sourceMappingURL=OwnedBrowserHostServices.d.ts.map

package/dist/browser/OwnedBrowserHostServices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnedBrowserHostServices.d.ts","sourceRoot":"","sources":["../../src/browser/OwnedBrowserHostServices.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,sCAAsC,CAAA;AACjF,OAAO,EACL,oBAAoB,EAAC,2BAA2B,EAAC,0BAA0B,EAAC,0BAA0B,EACtG,KAAK,sBAAsB,EAAC,KAAK,0BAA0B,EAAC,KAAK,uBAAuB,EACxF,KAAK,yBAAyB,EAAC,KAAK,kCAAkC,EACvE,MAAM,uCAAuC,CAAA;AAE9C,MAAM,WAAW,0BAA2B,SAAQ,uBAAuB;IACzE,iBAAiB,EAAC,kCAAkC,CAAC,mBAAmB,CAAC,CAAA;IACzE,qFAAqF;IACrF,KAAK,IAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AACD,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAC,sBAAsB,CAAA;IACjC,MAAM,EAAC,oBAAoB,CAAA;IAC3B,QAAQ,EAAC,IAAI,CAAC,2BAA2B,EAAC,gBAAgB,CAAC,CAAA;IAC3D,SAAS,CAAC,gBAAgB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAClD,OAAO,EAAC,OAAO,+BAA+B,EAAE,2BAA2B,CAAA;CAC5E;AACD;;+EAE+E;AAC/E,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAC,yBAAyB,CAAA;IAClC,eAAe,CAAC,OAAO,EAAC,4BAA4B,GAAE,OAAO,CAAC,0BAA0B,CAAC,CAAA;CAC1F;AACD,wBAAsB,8BAA8B,CAAC,OAAO,EAAC,6BAA6B,GAAG;IAC3F,cAAc,EAAC,MAAM,CAAA;IACrB,eAAe,IAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,UAAU,EAAC,sBAAsB,GAAG,0BAA0B,CAAA;IAC9D,YAAY,CAAC,MAAM,EAAC,uBAAuB,GAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,SAAS,CAAC,gBAAgB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAClD,OAAO,EAAC,OAAO,+BAA+B,EAAE,2BAA2B,CAAA;CAC5E;;;;;;iBAcW,OAAO,CAAC,IAAI,CAAC;;GASxB"}

package/dist/browser/OwnedBrowserHostServices.js

@@ -0,0 +1,31 @@
+import { BrowserScopeResolver, OwnedBrowserSessionRegistry, OwnedBrowserSessionService, OwnedBrowserCommandService, createBrowserAdmissionLedger, } from '@xenosystem/agent-interface-host/node';
+export async function createOwnedBrowserHostServices(options) {
+    const scopes = new BrowserScopeResolver({ repository: options.repository, assertHostOwner: options.assertHostOwner, assertClient: options.assertClient });
+    let authority;
+    const registry = new OwnedBrowserSessionRegistry({ hostInstanceId: options.hostInstanceId, scopes, launcher: options.launcher,
+        admissions: createBrowserAdmissionLedger(options.repository),
+        assertConsumption: async (...args) => { if (!authority)
+            throw Error('Browser authority is unavailable'); await authority.assertConsumption(...args); },
+    });
+    authority = await options.createAuthority({ scopes, sessions: registry, repository: options.repository, principal: options.principal, consent: options.consent });
+    const commandService = new OwnedBrowserCommandService({ resolveScope: request => scopes.resolve(request), resolveSession: id => registry.resolveSession(id), authority });
+    const sessionService = new OwnedBrowserSessionService(registry);
+    let closeAttempt, closed = false;
+    return { commandService, sessionService, owner: {
+            quiesceScope: registry.quiesceScope.bind(registry),
+            quiesceClient: registry.quiesceClient.bind(registry),
+            close() {
+                if (closed)
+                    return Promise.resolve();
+                if (closeAttempt)
+                    return closeAttempt;
+                // Process ownership and durable admissions remain available when close
+                // fails. A retry does not lose the authority or its journals.
+                const attempt = (async () => { await registry.close(); await authority.close(); closed = true; })().finally(() => { if (closeAttempt === attempt)
+                    closeAttempt = undefined; });
+                closeAttempt = attempt;
+                return attempt;
+            },
+        } };
+}
+//# sourceMappingURL=OwnedBrowserHostServices.js.map

package/dist/browser/OwnedBrowserHostServices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnedBrowserHostServices.js","sourceRoot":"","sources":["../../src/browser/OwnedBrowserHostServices.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EAAC,2BAA2B,EAAC,0BAA0B,EAAC,0BAA0B,EAAC,4BAA4B,GAGpI,MAAM,uCAAuC,CAAA;AAqB9C,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,OAOpD;IACC,MAAM,MAAM,GAAC,IAAI,oBAAoB,CAAC,EAAC,UAAU,EAAC,OAAO,CAAC,UAAU,EAAC,eAAe,EAAC,OAAO,CAAC,eAAe,EAAC,YAAY,EAAC,OAAO,CAAC,YAAY,EAAC,CAAC,CAAA;IAChJ,IAAI,SAA8C,CAAA;IAClD,MAAM,QAAQ,GAAC,IAAI,2BAA2B,CAAC,EAAC,cAAc,EAAC,OAAO,CAAC,cAAc,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ;QACpH,UAAU,EAAC,4BAA4B,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3D,iBAAiB,EAAC,KAAK,EAAC,GAAG,IAAI,EAAC,EAAE,GAAC,IAAG,CAAC,SAAS;YAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAA,CAAA,CAAC;KAC7I,CAAC,CAAA;IACF,SAAS,GAAC,MAAM,OAAO,CAAC,eAAe,CAAC,EAAC,MAAM,EAAC,QAAQ,EAAC,QAAQ,EAAC,UAAU,EAAC,OAAO,CAAC,UAAU,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,CAAC,CAAA;IACrJ,MAAM,cAAc,GAAC,IAAI,0BAA0B,CAAC,EAAC,YAAY,EAAC,OAAO,CAAA,EAAE,CAAA,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,cAAc,EAAC,EAAE,CAAA,EAAE,CAAA,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,EAAC,SAAS,EAAC,CAAC,CAAA;IAC7J,MAAM,cAAc,GAAC,IAAI,0BAA0B,CAAC,QAAQ,CAAC,CAAA;IAC7D,IAAI,YAAoC,EAAC,MAAM,GAAC,KAAK,CAAA;IACrD,OAAO,EAAC,cAAc,EAAC,cAAc,EAAC,KAAK,EAAC;YAC1C,YAAY,EAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACjD,aAAa,EAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnD,KAAK;gBACH,IAAG,MAAM;oBAAC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;gBAClC,IAAG,YAAY;oBAAC,OAAO,YAAY,CAAA;gBACnC,uEAAuE;gBACvE,8DAA8D;gBAC9D,MAAM,OAAO,GAAC,CAAC,KAAK,IAAE,EAAE,GAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,SAAU,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,GAAC,IAAI,CAAA,CAAA,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,IAAG,YAAY,KAAG,OAAO;oBAAC,YAAY,GAAC,SAAS,CAAA,CAAA,CAAC,CAAC,CAAA;gBACxJ,YAAY,GAAC,OAAO,CAAC;gBAAA,OAAO,OAAO,CAAA;YACrC,CAAC;SACF,EAAC,CAAA;AACJ,CAAC"}

package/dist/browser/PersistedBrowserPolicyResolver.d.ts

@@ -0,0 +1,22 @@
+import { BrowserScopeResolver, type BrowserScopeRepository } from '@xenosystem/agent-interface-host/node';
+import type { SdkBrowserAuthorityOptions } from './SdkBrowserCommandAuthority.js';
+export interface BrowserPolicySdk {
+    compileAgentProfile: typeof import('@xenosystem/agent-sdk').compileAgentProfile;
+    resolveBuiltInAgentProfile: typeof import('@xenosystem/agent-sdk').resolveBuiltInAgentProfile;
+    buildXenoSecureExecutionContract: typeof import('@xenosystem/agent-sdk').buildXenoSecureExecutionContract;
+}
+export interface PersistedBrowserPolicyOptions {
+    sdk: BrowserPolicySdk;
+    repository: BrowserScopeRepository;
+    scopes: BrowserScopeResolver;
+    /** Resolves the actual native user's identity from connected-client custody, never IPC input. */
+    principal(clientInstanceId: string): Promise<string>;
+    assertOwnedTab(command: Parameters<SdkBrowserAuthorityOptions['resolve']>[0]): Promise<void>;
+    /** Actual owning Browser metadata endpoint, never a renderer URL or arbitrary active tab.
+     * Undefined refuses non-navigation work. Navigation bootstraps via its explicitly requested URL. */
+    currentOrigin(command: Parameters<SdkBrowserAuthorityOptions['resolve']>[0]): Promise<string | undefined>;
+}
+/** Current schema has tool/capability and permission-profile policy, not a browser-domain allowlist.
+ * Consent may narrow an enabled Browser to one origin; it never overrides persisted denies. */
+export declare function createPersistedBrowserPolicyResolver(options: PersistedBrowserPolicyOptions): SdkBrowserAuthorityOptions['resolve'];
+//# sourceMappingURL=PersistedBrowserPolicyResolver.d.ts.map