@xenosystem/agent-interface-runtime 0.1.25 → 0.1.26

package/dist/browser/PersistedBrowserPolicyResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersistedBrowserPolicyResolver.d.ts","sourceRoot":"","sources":["../../src/browser/PersistedBrowserPolicyResolver.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,oBAAoB,EAAsF,KAAK,sBAAsB,EAAC,MAAM,uCAAuC,CAAA;AAC3L,OAAO,KAAK,EAAC,0BAA0B,EAAyB,MAAM,iCAAiC,CAAA;AAEvG,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAC,cAAc,uBAAuB,EAAE,mBAAmB,CAAA;IAC9E,0BAA0B,EAAC,cAAc,uBAAuB,EAAE,0BAA0B,CAAA;IAC5F,gCAAgC,EAAC,cAAc,uBAAuB,EAAE,gCAAgC,CAAA;CACzG;AACD,MAAM,WAAW,6BAA6B;IAC5C,GAAG,EAAC,gBAAgB,CAAA;IACpB,UAAU,EAAC,sBAAsB,CAAA;IACjC,MAAM,EAAC,oBAAoB,CAAA;IAC3B,iGAAiG;IACjG,SAAS,CAAC,gBAAgB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAClD,cAAc,CAAC,OAAO,EAAC,UAAU,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1F;wGACoG;IACpG,aAAa,CAAC,OAAO,EAAC,UAAU,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CACtG;AACD;+FAC+F;AAC/F,wBAAgB,oCAAoC,CAAC,OAAO,EAAC,6BAA6B,GAAE,0BAA0B,CAAC,SAAS,CAAC,CAwChI"}

package/dist/browser/PersistedBrowserPolicyResolver.js

@@ -0,0 +1,62 @@
+import { createHash } from 'node:crypto';
+import { BrowserScopeResolver, sameOwnedBrowserScope, resolvePersistedToolCapabilities, resolveAgentPermissionProfile } from '@xenosystem/agent-interface-host/node';
+/** Current schema has tool/capability and permission-profile policy, not a browser-domain allowlist.
+ * Consent may narrow an enabled Browser to one origin; it never overrides persisted denies. */
+export function createPersistedBrowserPolicyResolver(options) {
+    return async (command, identity) => {
+        command = structuredClone(command);
+        identity = { ...identity };
+        const scope = await options.scopes.resolve(command.request);
+        if (!sameOwnedBrowserScope(scope, command.scope))
+            throw Error('Browser policy owned scope changed');
+        await options.assertOwnedTab(command);
+        const state = await options.repository.loadWorkspaces(), conversation = await options.repository.loadConversationForHost(command.request.conversationId);
+        if (!conversation)
+            throw Error('Browser conversation disappeared');
+        const workspace = rows(state.workspaces).find(row => row.id === scope.workspaceId), team = rows(workspace?.teams).find(row => row.id === scope.teamId), agent = rows(team?.agents).find(row => row.id === scope.agentId);
+        if (!workspace || String(workspace.createdAt) !== scope.workspaceIncarnation || workspace.isArchived || team?.isArchived || agent?.isArchived || (scope.teamId && !team) || (scope.agentId && !agent))
+            throw Error('Browser persisted policy scope changed');
+        const capabilities = resolvePersistedToolCapabilities(state.workspaces, scope);
+        if (capabilities?.browser !== true)
+            throw Error('Persisted policies do not explicitly enable Browser');
+        for (const row of [workspace, team, agent, conversation]) {
+            const permission = resolveAgentPermissionProfile({ requestedProfile: row?.permissionProfile, capabilities, isProduction: true, allowDebugBypass: false });
+            if (permission.capabilities.browser !== true)
+                throw Error('Persisted permission profile refuses Browser');
+        }
+        const executionProfile = conversation.permissionProfile ?? agent?.permissionProfile ?? team?.permissionProfile ?? workspace.permissionProfile;
+        if (executionProfile !== 'trusted-workspace')
+            throw Error('Browser policy-only execution requires the persisted trusted-workspace permission profile; untrusted execution requires certified containment');
+        const requestedOrigin = command.request.action.kind === 'navigate' ? origin(command.request.action.url) : await options.currentOrigin(command);
+        if (!requestedOrigin)
+            throw Error('An acknowledged owned-tab origin is required before this Browser action');
+        const target = origin(requestedOrigin), url = new URL(target), port = Number(url.port || (url.protocol === 'https:' ? 443 : 80));
+        const base = options.sdk.resolveBuiltInAgentProfile('assistant');
+        if (!base)
+            throw Error('Canonical assistant capability profile is unavailable');
+        const profile = options.sdk.compileAgentProfile(base, { boundaries: [{ source: 'xeno-agent:persisted-owned-browser', tools: { mode: 'inherit', allow: ['Browser'] }, permissionProfile: 'default', externalActions: { default: 'deny' } }] });
+        const principalId = await options.principal(scope.clientInstanceId);
+        if (!principalId.trim())
+            throw Error('Native Browser principal is unavailable');
+        const contract = options.sdk.buildXenoSecureExecutionContract({
+            contractId: identity.contractId, identity: { runId: 'browser-' + hash(command.request.requestId), agentId: scope.agentId ?? 'browser-human-' + hash(principalId), workspaceId: scope.workspaceId, sessionId: command.request.sessionId }, profile,
+            now: () => identity.requestedAt, platform: process.platform, architecture: process.arch,
+            policy: { allowedDirectories: [], capabilities: { fileRead: false, fileWrite: false, terminal: false, appLaunch: false }, executionLevel: 'policy-only', trustMode: 'trusted-workspace', allowNetwork: false },
+            filesystem: { readRoots: [], writeRoots: [], executeRoots: [] },
+            network: { default: 'deny', allowDestinations: [{ scheme: url.protocol === 'https:' ? 'https' : 'http', host: url.hostname, port }], downloads: 'deny' },
+            browser: { mode: 'act', allowedDomains: [url.hostname], readAllowedDomains: [url.hostname], actAllowedDomains: [url.hostname], allowedSchemes: [url.protocol === 'https:' ? 'https' : 'http'], allowedPorts: [port], redirectPolicy: 'same-origin', downloads: 'deny', uploads: 'deny', recording: 'bounded' },
+            computer: { mode: 'none' }, capabilityLeaseIds: [identity.leaseId], secrets: [],
+        });
+        // Validate again after all asynchronous reads; authority also repeats this resolver before use.
+        const latest = await options.scopes.resolve(command.request);
+        if (!sameOwnedBrowserScope(latest, scope))
+            throw Error('Browser policy scope changed while resolving');
+        await options.assertOwnedTab(command);
+        return { principalId, profile, contract };
+    };
+}
+function rows(value) { return Array.isArray(value) ? value.filter((row) => !!row && typeof row === 'object' && !Array.isArray(row)) : []; }
+function origin(value) { const url = new URL(value); if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password)
+    throw Error('Browser requires an HTTP(S) origin without URL credentials'); return url.origin; }
+function hash(value) { return createHash('sha256').update(value).digest('hex'); }
+//# sourceMappingURL=PersistedBrowserPolicyResolver.js.map

package/dist/browser/PersistedBrowserPolicyResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersistedBrowserPolicyResolver.js","sourceRoot":"","sources":["../../src/browser/PersistedBrowserPolicyResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AACtC,OAAO,EAAC,oBAAoB,EAAC,qBAAqB,EAAC,gCAAgC,EAAC,6BAA6B,EAA6B,MAAM,uCAAuC,CAAA;AAmB3L;+FAC+F;AAC/F,MAAM,UAAU,oCAAoC,CAAC,OAAqC;IACxF,OAAO,KAAK,EAAC,OAAO,EAAC,QAAQ,EAAkC,EAAE;QAC/D,OAAO,GAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAAA,QAAQ,GAAC,EAAC,GAAG,QAAQ,EAAC,CAAA;QACvD,MAAM,KAAK,GAAC,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACzD,IAAG,CAAC,qBAAqB,CAAC,KAAK,EAAC,OAAO,CAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAChG,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,KAAK,GAAC,MAAM,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,EAAC,YAAY,GAAC,MAAM,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACnJ,IAAG,CAAC,YAAY;YAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAChE,MAAM,SAAS,GAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,CAAC,EAAE,KAAG,KAAK,CAAC,WAAW,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,CAAC,EAAE,KAAG,KAAK,CAAC,MAAM,CAAC,EAAC,KAAK,GAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,CAAC,EAAE,KAAG,KAAK,CAAC,OAAO,CAAC,CAAA;QACpM,IAAG,CAAC,SAAS,IAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAG,KAAK,CAAC,oBAAoB,IAAE,SAAS,CAAC,UAAU,IAAE,IAAI,EAAE,UAAU,IAAE,KAAK,EAAE,UAAU,IAAE,CAAC,KAAK,CAAC,MAAM,IAAE,CAAC,IAAI,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,IAAE,CAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAA;QACxO,MAAM,YAAY,GAAC,gCAAgC,CAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,CAAA;QAC3E,IAAG,YAAY,EAAE,OAAO,KAAG,IAAI;YAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAClG,KAAI,MAAM,GAAG,IAAI,CAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,YAAY,CAAC,EAAC,CAAC;YACpD,MAAM,UAAU,GAAC,6BAA6B,CAAC,EAAC,gBAAgB,EAAC,GAAG,EAAE,iBAAiB,EAAC,YAAY,EAAC,YAAY,EAAC,IAAI,EAAC,gBAAgB,EAAC,KAAK,EAAC,CAAC,CAAA;YAC/I,IAAG,UAAU,CAAC,YAAY,CAAC,OAAO,KAAG,IAAI;gBAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACvG,CAAC;QACD,MAAM,gBAAgB,GAAC,YAAY,CAAC,iBAAiB,IAAE,KAAK,EAAE,iBAAiB,IAAE,IAAI,EAAE,iBAAiB,IAAE,SAAS,CAAC,iBAAiB,CAAA;QACrI,IAAG,gBAAgB,KAAG,mBAAmB;YAAC,MAAM,KAAK,CAAC,+IAA+I,CAAC,CAAA;QACtM,MAAM,eAAe,GAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAG,UAAU,CAAA,CAAC,CAAA,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACtI,IAAG,CAAC,eAAe;YAAC,MAAM,KAAK,CAAC,yEAAyE,CAAC,CAAA;QAC1G,MAAM,MAAM,GAAC,MAAM,CAAC,eAAe,CAAC,EAAC,GAAG,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAC,IAAI,GAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAE,CAAC,GAAG,CAAC,QAAQ,KAAG,QAAQ,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAA;QAChH,MAAM,IAAI,GAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI;YAAC,MAAM,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC5I,MAAM,OAAO,GAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAC,EAAC,UAAU,EAAC,CAAC,EAAC,MAAM,EAAC,oCAAoC,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,CAAC,SAAS,CAAC,EAAC,EAAC,iBAAiB,EAAC,SAAS,EAAC,eAAe,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,EAAC,CAAC,EAAC,CAAC,CAAA;QACtN,MAAM,WAAW,GAAC,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QACjE,IAAG,CAAC,WAAW,CAAC,IAAI,EAAE;YAAC,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC7E,MAAM,QAAQ,GAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;YAC1D,UAAU,EAAC,QAAQ,CAAC,UAAU,EAAC,QAAQ,EAAC,EAAC,KAAK,EAAC,UAAU,GAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,IAAE,gBAAgB,GAAC,IAAI,CAAC,WAAW,CAAC,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,SAAS,EAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,EAAC,OAAO;YAC9N,GAAG,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,WAAW,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,YAAY,EAAC,OAAO,CAAC,IAAI;YAChF,MAAM,EAAC,EAAC,kBAAkB,EAAC,EAAE,EAAC,YAAY,EAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,KAAK,EAAC,EAAC,cAAc,EAAC,aAAa,EAAC,SAAS,EAAC,mBAAmB,EAAC,YAAY,EAAC,KAAK,EAAC;YACzL,UAAU,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,UAAU,EAAC,EAAE,EAAC,YAAY,EAAC,EAAE,EAAC;YACvD,OAAO,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,iBAAiB,EAAC,CAAC,EAAC,MAAM,EAAC,GAAG,CAAC,QAAQ,KAAG,QAAQ,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,MAAM,EAAC,IAAI,EAAC,GAAG,CAAC,QAAQ,EAAC,IAAI,EAAC,CAAC,EAAC,SAAS,EAAC,MAAM,EAAC;YACpI,OAAO,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,cAAc,EAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,kBAAkB,EAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,iBAAiB,EAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,cAAc,EAAC,CAAC,GAAG,CAAC,QAAQ,KAAG,QAAQ,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,MAAM,CAAC,EAAC,YAAY,EAAC,CAAC,IAAI,CAAC,EAAC,cAAc,EAAC,aAAa,EAAC,SAAS,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,SAAS,EAAC;YAClR,QAAQ,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,EAAC,kBAAkB,EAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAC,OAAO,EAAC,EAAE;SACxE,CAAC,CAAA;QACF,gGAAgG;QAChG,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC1D,IAAG,CAAC,qBAAqB,CAAC,MAAM,EAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACnG,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACrC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAC,QAAQ,EAAC,CAAA;IACvC,CAAC,CAAA;AACH,CAAC;AACD,SAAS,IAAI,CAAC,KAAa,IAA4B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAA+B,EAAE,CAAA,CAAC,CAAC,GAAG,IAAE,OAAO,GAAG,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAA,EAAE,CAAA,CAAA,CAAC;AAC3L,SAAS,MAAM,CAAC,KAAY,IAAE,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ;IAAC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC,CAAA,OAAO,GAAG,CAAC,MAAM,CAAA,CAAA,CAAC;AAC7N,SAAS,IAAI,CAAC,KAAY,IAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAA,CAAC"}

package/dist/browser/SdkBrowserCommandAuthority.d.ts

@@ -0,0 +1,152 @@
+import type { CompiledAgentProfile, XenoSecureExecutionContract, XenoAutomationRequest, XenoAutomationAdapter, XenoAutomationExecutionResult, XenoCapabilityLease, XenoCapabilityUse, XenoCapabilityLeaseRequest, XenoCapabilityLeaseApprovalRequest, XenoCapabilityLeaseDenialRequest, XenoArtifactRepository } from '@xenosystem/agent-sdk';
+import type { BrowserCommandAuthority, BrowserConsumptionPermit, BrowserWireRequest } from '@xenosystem/agent-interface-host/node';
+import type { BrowserPreparationStore } from './BrowserCommandPreparationStore.js';
+import { type BrowserPrincipalConsentPort } from './BrowserConsentController.js';
+type Command = Parameters<BrowserCommandAuthority['execute']>[0];
+type Transport = Parameters<BrowserCommandAuthority['execute']>[1];
+interface MutationAck {
+    lease: XenoCapabilityLease;
+    replayed: boolean;
+    executionDisposition: 'dispatch-once' | 'receipt-only';
+}
+interface Registry {
+    request(id: string, request: XenoCapabilityLeaseRequest & {
+        leaseId: string;
+    }, profile: CompiledAgentProfile): Promise<MutationAck>;
+    approve(id: string, request: XenoCapabilityLeaseApprovalRequest): Promise<MutationAck>;
+    deny(id: string, request: XenoCapabilityLeaseDenialRequest): Promise<MutationAck>;
+    consume(id: string, leaseId: string, version: number, use: XenoCapabilityUse): Promise<MutationAck>;
+    get(id: string): Promise<XenoCapabilityLease | undefined>;
+    inspect?(id: string): Promise<XenoCapabilityLease | undefined>;
+}
+/** Additive R5 contract. Checked against the actual packed SDK in the candidate integration test. */
+export interface BrowserCapabilityPersistence {
+    transaction<T>(callback: (transaction: {
+        lease(id: string): unknown;
+        receipt(id: string): unknown;
+        writeLease(lease: XenoCapabilityLease, expectedVersion: number | null): void;
+        writeReceipt(receipt: {
+            schemaVersion: 1;
+            commandId: string;
+            fingerprint: string;
+            lease: XenoCapabilityLease;
+        }): void;
+    }) => T): Promise<T>;
+}
+interface BrowserJournalRecord {
+    schemaVersion: 1;
+    operationId: string;
+    fingerprint: string;
+    ownerToken: string;
+    outcome: {
+        kind: 'pending';
+    } | {
+        kind: 'result';
+        artifactId: string;
+        sha256: string;
+    } | {
+        kind: 'failed';
+        code: string;
+    };
+}
+export interface BrowserExecutionJournal {
+    get(id: string): Promise<BrowserJournalRecord | undefined>;
+    begin(identity: {
+        operationId: string;
+        fingerprint: string;
+        ownerToken: string;
+    }): Promise<{
+        claimed: boolean;
+        record: BrowserJournalRecord;
+    }>;
+    finish(identity: {
+        operationId: string;
+        fingerprint: string;
+        ownerToken: string;
+    }, outcome: {
+        kind: 'result';
+        artifactId: string;
+        sha256: string;
+    } | {
+        kind: 'failed';
+        code: string;
+    }): Promise<void>;
+}
+export interface BrowserAuthoritySdk {
+    DurableXenoCapabilityLeaseRegistry: new (options: {
+        persistence: BrowserCapabilityPersistence;
+        now: () => string;
+        authorizeMutation: (command: unknown) => boolean;
+    }) => Registry;
+    XenoGovernedAutomationExecutor: new (options: {
+        adapter: XenoAutomationAdapter;
+        now: () => string;
+        durable: {
+            journal: BrowserExecutionJournal;
+            artifactRepository: XenoArtifactRepository;
+            assertCurrent(request: Readonly<XenoAutomationRequest>): Promise<void>;
+            consume(id: string, leaseId: string, version: number, use: XenoCapabilityUse): Promise<MutationAck>;
+        };
+    }) => {
+        execute(request: XenoAutomationRequest): Promise<XenoAutomationExecutionResult & {
+            replayed?: boolean;
+        }>;
+    };
+    buildXenoAutomationCapabilityUse: typeof import('@xenosystem/agent-sdk').buildXenoAutomationCapabilityUse;
+    describeXenoAutomationOperation: typeof import('@xenosystem/agent-sdk').describeXenoAutomationOperation;
+    assertValidXenoAutomationRequest: typeof import('@xenosystem/agent-sdk').assertValidXenoAutomationRequest;
+    assertXenoAutomationAuthority: typeof import('@xenosystem/agent-sdk').assertXenoAutomationAuthority;
+    /** Feature-presence checks prevent the older, identically versioned installed SDK being used. */
+    runDurableAutomation: Function;
+    openSqliteAutomationExecutionJournal: Function;
+}
+export interface BrowserAuthorityContext {
+    principalId: string;
+    profile: CompiledAgentProfile;
+    contract: XenoSecureExecutionContract;
+}
+export interface SdkBrowserAuthorityOptions {
+    sdk: BrowserAuthoritySdk;
+    preparations: BrowserPreparationStore;
+    capabilities: BrowserCapabilityPersistence;
+    journal: BrowserExecutionJournal;
+    artifacts: XenoArtifactRepository;
+    consent: BrowserPrincipalConsentPort;
+    /** Must authenticate actual caller/session/tab custody and reload persisted policy/incarnation.
+     * Reconstruct the same canonical contract using the supplied stable IDs/time, not wall-clock now.
+     * Never accept a renderer-provided profile, principal, approval or contract. */
+    resolve(command: Readonly<Command>, identity: {
+        requestedAt: string;
+        leaseId: string;
+        contractId: string;
+    }): Promise<BrowserAuthorityContext>;
+    now?: () => string;
+    consentTimeoutMs?: number;
+}
+/** Host-private orchestration only; all capability eligibility/consume/result replay belongs to SDK R5. */
+export declare class SdkBrowserCommandAuthority implements BrowserCommandAuthority {
+    private readonly options;
+    private readonly active;
+    private readonly claims;
+    private readonly consents;
+    private closing;
+    private readonly now;
+    constructor(options: SdkBrowserAuthorityOptions);
+    execute(command: Command, transport: Transport): Promise<{
+        publishFrame?: () => Promise<import("@xenosystem/agent-interface-host/node").AgentBrowserFrame>;
+        receipt: unknown;
+        replayed: boolean;
+    }>;
+    /** Stop admission/pending native prompts and wait actual operations. Close owned Browser registry
+     * before awaiting this when an operation is in the owning native process. Keep storage alive. */
+    close(): Promise<void>;
+    /** Wire the owned session registry's mandatory verifier here. Only a live original consume ACK
+     * may pass. Recovered receipts validate history but can never authorize a second dispatch. */
+    assertConsumption(permit: BrowserConsumptionPermit, request: BrowserWireRequest): Promise<void>;
+    private revalidate;
+    private context;
+    private executeFresh;
+    private request;
+}
+export {};
+//# sourceMappingURL=SdkBrowserCommandAuthority.d.ts.map

package/dist/browser/SdkBrowserCommandAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SdkBrowserCommandAuthority.d.ts","sourceRoot":"","sources":["../../src/browser/SdkBrowserCommandAuthority.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EAAC,2BAA2B,EAAC,qBAAqB,EAAC,qBAAqB,EAC5F,6BAA6B,EAA8B,mBAAmB,EAAC,iBAAiB,EAChG,0BAA0B,EAAC,kCAAkC,EAAC,gCAAgC,EAC9F,sBAAsB,EACvB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAC,uBAAuB,EAAC,wBAAwB,EAAC,kBAAkB,EAAsB,MAAM,uCAAuC,CAAA;AACnJ,OAAO,KAAK,EAA2B,uBAAuB,EAAC,MAAM,qCAAqC,CAAA;AAC1G,OAAO,EAA0B,KAAK,2BAA2B,EAAC,MAAM,+BAA+B,CAAA;AAEvG,KAAK,OAAO,GAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9D,KAAK,SAAS,GAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAChE,UAAU,WAAW;IAAE,KAAK,EAAC,mBAAmB,CAAC;IAAA,QAAQ,EAAC,OAAO,CAAC;IAAA,oBAAoB,EAAC,eAAe,GAAC,cAAc,CAAA;CAAC;AACtH,UAAU,QAAQ;IAChB,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,OAAO,EAAC,0BAA0B,GAAC;QAAC,OAAO,EAAC,MAAM,CAAA;KAAC,EAAC,OAAO,EAAC,oBAAoB,GAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IACxH,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,OAAO,EAAC,kCAAkC,GAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAClF,IAAI,CAAC,EAAE,EAAC,MAAM,EAAC,OAAO,EAAC,gCAAgC,GAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAC7E,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,GAAG,EAAC,iBAAiB,GAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3F,GAAG,CAAC,EAAE,EAAC,MAAM,GAAE,OAAO,CAAC,mBAAmB,GAAC,SAAS,CAAC,CAAA;IACrD,OAAO,CAAC,CAAC,EAAE,EAAC,MAAM,GAAE,OAAO,CAAC,mBAAmB,GAAC,SAAS,CAAC,CAAA;CAC3D;AACD,qGAAqG;AACrG,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAC,CAAC,WAAW,EAAC;QAAC,KAAK,CAAC,EAAE,EAAC,MAAM,GAAE,OAAO,CAAC;QAAA,OAAO,CAAC,EAAE,EAAC,MAAM,GAAE,OAAO,CAAC;QAAA,UAAU,CAAC,KAAK,EAAC,mBAAmB,EAAC,eAAe,EAAC,MAAM,GAAC,IAAI,GAAE,IAAI,CAAC;QAAA,YAAY,CAAC,OAAO,EAAC;YAAC,aAAa,EAAC,CAAC,CAAC;YAAA,SAAS,EAAC,MAAM,CAAC;YAAA,WAAW,EAAC,MAAM,CAAC;YAAA,KAAK,EAAC,mBAAmB,CAAA;SAAC,GAAE,IAAI,CAAA;KAAC,KAAG,CAAC,GAAE,OAAO,CAAC,CAAC,CAAC,CAAA;CAC7R;AACD,UAAU,oBAAoB;IAAE,aAAa,EAAC,CAAC,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC;QAAC,IAAI,EAAC,SAAS,CAAA;KAAC,GAAC;QAAC,IAAI,EAAC,QAAQ,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,GAAC;QAAC,IAAI,EAAC,QAAQ,CAAC;QAAA,IAAI,EAAC,MAAM,CAAA;KAAC,CAAA;CAAC;AAC7M,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,EAAC,MAAM,GAAE,OAAO,CAAC,oBAAoB,GAAC,SAAS,CAAC,CAAA;IACtD,KAAK,CAAC,QAAQ,EAAC;QAAC,WAAW,EAAC,MAAM,CAAC;QAAA,WAAW,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC;QAAC,OAAO,EAAC,OAAO,CAAC;QAAA,MAAM,EAAC,oBAAoB,CAAA;KAAC,CAAC,CAAA;IAChI,MAAM,CAAC,QAAQ,EAAC;QAAC,WAAW,EAAC,MAAM,CAAC;QAAA,WAAW,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAA;KAAC,EAAC,OAAO,EAAC;QAAC,IAAI,EAAC,QAAQ,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,GAAC;QAAC,IAAI,EAAC,QAAQ,CAAC;QAAA,IAAI,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7K;AACD,MAAM,WAAW,mBAAmB;IAClC,kCAAkC,EAAC,KAAI,OAAO,EAAC;QAAC,WAAW,EAAC,4BAA4B,CAAC;QAAA,GAAG,EAAC,MAAI,MAAM,CAAC;QAAA,iBAAiB,EAAC,CAAC,OAAO,EAAC,OAAO,KAAG,OAAO,CAAA;KAAC,KAAG,QAAQ,CAAA;IAChK,8BAA8B,EAAC,KAAI,OAAO,EAAC;QAAC,OAAO,EAAC,qBAAqB,CAAC;QAAA,GAAG,EAAC,MAAI,MAAM,CAAC;QAAA,OAAO,EAAC;YAAC,OAAO,EAAC,uBAAuB,CAAC;YAAA,kBAAkB,EAAC,sBAAsB,CAAC;YAAA,aAAa,CAAC,OAAO,EAAC,QAAQ,CAAC,qBAAqB,CAAC,GAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAAA,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,GAAG,EAAC,iBAAiB,GAAE,OAAO,CAAC,WAAW,CAAC,CAAA;SAAC,CAAA;KAAC,KAAG;QAAC,OAAO,CAAC,OAAO,EAAC,qBAAqB,GAAE,OAAO,CAAC,6BAA6B,GAAC;YAAC,QAAQ,CAAC,EAAC,OAAO,CAAA;SAAC,CAAC,CAAA;KAAC,CAAA;IACpb,gCAAgC,EAAC,cAAc,uBAAuB,EAAE,gCAAgC,CAAA;IACxG,+BAA+B,EAAC,cAAc,uBAAuB,EAAE,+BAA+B,CAAA;IACtG,gCAAgC,EAAC,cAAc,uBAAuB,EAAE,gCAAgC,CAAA;IACxG,6BAA6B,EAAC,cAAc,uBAAuB,EAAE,6BAA6B,CAAA;IAClG,iGAAiG;IACjG,oBAAoB,EAAC,QAAQ,CAAA;IAC7B,oCAAoC,EAAC,QAAQ,CAAA;CAC9C;AACD,MAAM,WAAW,uBAAuB;IAAE,WAAW,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,oBAAoB,CAAC;IAAA,QAAQ,EAAC,2BAA2B,CAAA;CAAC;AAC/H,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAC,mBAAmB,CAAA;IACvB,YAAY,EAAC,uBAAuB,CAAA;IACpC,YAAY,EAAC,4BAA4B,CAAA;IACzC,OAAO,EAAC,uBAAuB,CAAA;IAC/B,SAAS,EAAC,sBAAsB,CAAA;IAChC,OAAO,EAAC,2BAA2B,CAAA;IACnC;;oFAEgF;IAChF,OAAO,CAAC,OAAO,EAAC,QAAQ,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAC;QAAC,WAAW,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAClI,GAAG,CAAC,EAAC,MAAI,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAC,MAAM,CAAA;CACzB;AAGD,2GAA2G;AAC3G,qBAAa,0BAA2B,YAAW,uBAAuB;IAM5D,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8F;IACrH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,OAAO,CAAM;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAW;gBACF,OAAO,EAAC,0BAA0B;IAIzD,OAAO,CAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,SAAS;;;;;IASjD;qGACiG;IAC3F,KAAK;IACX;kGAC8F;IACxF,iBAAiB,CAAC,MAAM,EAAC,wBAAwB,EAAC,OAAO,EAAC,kBAAkB;YASpE,UAAU;YACV,OAAO;YAKP,YAAY;IA2E1B,OAAO,CAAC,OAAO;CAIhB"}

package/dist/browser/SdkBrowserCommandAuthority.js

@@ -0,0 +1,181 @@
+import { createHash } from 'node:crypto';
+import { BrowserConsentController } from './BrowserConsentController.js';
+/** Host-private orchestration only; all capability eligibility/consume/result replay belongs to SDK R5. */
+export class SdkBrowserCommandAuthority {
+    options;
+    active = new Map();
+    claims = new Map();
+    consents = new Set();
+    closing = false;
+    now;
+    constructor(options) {
+        this.options = options;
+        for (const key of ['DurableXenoCapabilityLeaseRegistry', 'XenoGovernedAutomationExecutor', 'runDurableAutomation', 'openSqliteAutomationExecutionJournal', 'buildXenoAutomationCapabilityUse', 'describeXenoAutomationOperation', 'assertValidXenoAutomationRequest', 'assertXenoAutomationAuthority'])
+            if (typeof options.sdk?.[key] !== 'function')
+                throw Error('Durable Browser authority requires the qualified SDK capability surface');
+        this.now = options.now ?? (() => new Date().toISOString());
+    }
+    async execute(command, transport) {
+        if (this.closing)
+            throw Error('Browser authority is closing');
+        command = structuredClone(command);
+        const fingerprint = digest(command), id = command.request.requestId;
+        const existing = this.active.get(id);
+        if (existing) {
+            if (existing.fingerprint !== fingerprint)
+                throw Error('Browser operation identity was reused');
+            await this.revalidate(command);
+            const result = await existing.promise;
+            await this.revalidate(command);
+            return { ...structuredClone({ receipt: result.receipt, replayed: result.replayed }), ...result.publishFrame ? { publishFrame: result.publishFrame } : {} };
+        }
+        if (this.active.size >= 128)
+            throw Error('Browser authority has too many active operations');
+        const promise = this.executeFresh(command, transport, fingerprint);
+        this.active.set(id, { fingerprint, promise });
+        try {
+            return await promise;
+        }
+        finally {
+            this.active.delete(id);
+            this.claims.delete(id);
+        }
+    }
+    /** Stop admission/pending native prompts and wait actual operations. Close owned Browser registry
+     * before awaiting this when an operation is in the owning native process. Keep storage alive. */
+    async close() { this.closing = true; for (const consent of this.consents)
+        consent.cancel(); await Promise.allSettled([...this.active.values()].map(entry => entry.promise)); }
+    /** Wire the owned session registry's mandatory verifier here. Only a live original consume ACK
+     * may pass. Recovered receipts validate history but can never authorize a second dispatch. */
+    async assertConsumption(permit, request) {
+        const claim = this.claims.get(request.operationId);
+        if (!claim || claim.checked || permit.executionDisposition !== 'dispatch-once' || permit.commandId !== claim.commandId || digest(request) !== claim.requestFingerprint || digest(permit.grant) !== digest(claim.grant))
+            throw Error('Browser dispatch has no original canonical consume authority');
+        claim.checked = true;
+        await claim.assertCurrent();
+        const lease = await claim.registry.get(claim.grant.lease.leaseId);
+        if (!lease || digest(lease) !== digest(claim.grant.lease) || !['active', 'exhausted'].includes(lease.state))
+            throw Error('Browser consumed authority changed before dispatch');
+        await claim.assertCurrent();
+    }
+    async revalidate(command) { const record = await this.options.preparations.get(command.request.requestId); if (!record)
+        throw Error('Browser preparation is not yet acknowledged'); await this.context(command, record); }
+    async context(command, record) {
+        const context = await this.options.resolve(structuredClone(command), { requestedAt: record.requestedAt, leaseId: record.leaseId, contractId: record.contractId });
+        if (record.inputFingerprint !== digest(command) || digest(record.scope) !== digest(command.scope) || record.sessionId !== command.request.sessionId || record.tabId !== command.request.tabId || context.principalId !== record.principalId || context.profile.fingerprint !== record.profileFingerprint || context.contract.fingerprint !== record.contractFingerprint || context.contract.contractId !== record.contractId)
+            throw Error('Browser preparation no longer matches authenticated ownership or policy');
+        return context;
+    }
+    async executeFresh(command, transport, inputFingerprint) {
+        const { sdk, preparations } = this.options, id = command.request.requestId;
+        let record = await preparations.get(id);
+        let consentPreflight;
+        let context;
+        if (!record) {
+            const identity = { requestedAt: this.now(), leaseId: 'browser-lease-' + digest(id), contractId: 'browser-contract-' + digest(id) };
+            context = await this.options.resolve(structuredClone(command), identity);
+            const request = this.request(command, context.contract, identity.requestedAt, identity.leaseId, 2);
+            sdk.assertValidXenoAutomationRequest(request);
+            const manifest = await transport.manifest(), preflight = await transport.preflight(wire(request));
+            sdk.assertXenoAutomationAuthority(request, manifest, preflight.observedTarget);
+            const target = targetIdentity(preflight, command.request.tabId);
+            consentPreflight = preflight;
+            record = await preparations.create({ schemaVersion: 1, version: 1, operationId: id, inputFingerprint, scope: command.scope, sessionId: command.request.sessionId, tabId: command.request.tabId, origin: target.origin, targetFingerprint: target.fingerprint, principalId: context.principalId, ...identity, profileFingerprint: context.profile.fingerprint, contractFingerprint: context.contract.fingerprint, phase: 'prepared' });
+        }
+        context = await this.context(command, record);
+        const current = async () => { if (this.closing)
+            throw Error('Browser authority is closing'); await this.context(command, record); };
+        // A registry instance authorizes only the exact mutation currently initiated by this host path.
+        // The actual principal approval is produced solely by the native controller below.
+        let allowedMutation;
+        const registry = new sdk.DurableXenoCapabilityLeaseRegistry({ persistence: this.options.capabilities, now: this.now, authorizeMutation: mutation => allowedMutation !== undefined && digest(mutation) === allowedMutation });
+        if (command.request.action.kind === 'frame' && typeof registry.inspect !== 'function')
+            throw Error('Browser frames require canonical read-only lease inspection');
+        const mutate = async (mutation, invoke) => { await current(); allowedMutation = digest(mutation); try {
+            return await invoke();
+        }
+        finally {
+            allowedMutation = undefined;
+        } };
+        const stableRequest = () => this.request(command, context.contract, record.requestedAt, record.leaseId, (record.leaseVersion ?? 1) + 1);
+        if (record.phase === 'prepared') {
+            if (!consentPreflight || targetIdentity(consentPreflight, record.tabId).fingerprint !== record.targetFingerprint)
+                throw Error('Original Browser preflight is unavailable; no action may be resumed from URL alone');
+            const use = sdk.buildXenoAutomationCapabilityUse(stableRequest(), { tabId: record.tabId, origin: record.origin });
+            const descriptor = sdk.describeXenoAutomationOperation(stableRequest().operation);
+            const request = { leaseId: record.leaseId, subject: use.subject, scope: { kind: use.kind, effect: descriptor.effect === 'act' ? 'external' : 'read', operations: [use.operation], resources: [record.tabId], destinations: [record.origin], governingToolName: 'Browser' }, reason: 'Principal consent for this exact owned Browser operation', requestedBy: { kind: 'user', id: record.principalId }, durationMs: 120000, requestTtlMs: 120000, maxUses: 1, childInheritance: 'none' };
+            const ack = await mutate({ kind: 'request', request, profile: context.profile }, () => registry.request('browser-request-' + digest(id), request, context.profile));
+            if (ack.lease.state !== 'requested')
+                throw Error('Browser approval state cannot be restarted');
+            const consent = new BrowserConsentController(preparations, this.options.consent, current, this.options.consentTimeoutMs);
+            this.consents.add(consent);
+            try {
+                record = await consent.obtain(record, ack.lease.version, command.operation);
+            }
+            finally {
+                this.consents.delete(consent);
+            }
+        }
+        if (record.phase === 'denied') {
+            const request = { leaseId: record.leaseId, expectedVersion: record.leaseVersion, deniedBy: { kind: 'user', id: record.principalId } };
+            await mutate({ kind: 'deny', request }, () => registry.deny('browser-deny-' + digest(id), request));
+            throw Error('Browser operation was declined');
+        }
+        if (record.phase === 'consent-pending')
+            throw Error('Browser consent outcome is pending; no action was dispatched');
+        if (record.phase === 'consent-accepted') {
+            const request = { leaseId: record.leaseId, expectedVersion: record.leaseVersion, approvedBy: { kind: 'user', id: record.principalId }, approvalContext: { surface: 'custom:xeno-agent-browser', promptHash: record.challengeHash, messageId: record.consentReceiptId } };
+            const ack = await mutate({ kind: 'approve', request }, () => registry.approve('browser-approve-' + digest(id), request));
+            if (ack.lease.version !== record.leaseVersion + 1 || ack.lease.approvalContext?.promptHash !== record.challengeHash)
+                throw Error('Canonical Browser approval acknowledgement differs');
+            record = await preparations.update({ ...record, version: record.version + 1, phase: 'approved' }, record.version);
+        }
+        if (record.phase !== 'approved')
+            throw Error('Browser operation has no approved preparation');
+        let consumption;
+        const adapter = {
+            manifest: async () => await transport.manifest(),
+            // Never refresh this token after approval: the owning Browser holds its captured
+            // WebContents/document epoch. Same-URL navigation cannot silently rebind consent.
+            preflight: async () => { await current(); if (!consentPreflight)
+                throw Error('Original Browser preflight is unavailable; recover the durable outcome only'); return consentPreflight; },
+            execute: async (request, preflight, grant, signal) => {
+                if (!consumption || consumption.ack.replayed || consumption.ack.executionDisposition !== 'dispatch-once' || digest(consumption.ack.lease) !== digest(grant.lease))
+                    throw Error('Original Browser consumption acknowledgement is absent');
+                this.claims.set(id, { commandId: consumption.commandId, requestFingerprint: digest(wire(request)), grant: structuredClone(grant), checked: false, assertCurrent: current, registry });
+                return await transport.execute(wire(request), preflight, { commandId: consumption.commandId, executionDisposition: 'dispatch-once', grant }, signal);
+            }, stop: async (_id, reason) => transport.stop(reason),
+        };
+        const executor = new sdk.XenoGovernedAutomationExecutor({ adapter, now: this.now, durable: { journal: this.options.journal, artifactRepository: this.options.artifacts, assertCurrent: current, consume: async (commandId, leaseId, expectedVersion, use) => {
+                    const request = { leaseId, expectedVersion, use }, ack = await mutate({ kind: 'consume', request }, () => registry.consume(commandId, leaseId, expectedVersion, use));
+                    consumption = { commandId, ack };
+                    return ack;
+                } } });
+        const result = await executor.execute(stableRequest());
+        await current();
+        const publishFrame = command.request.action.kind === 'frame' && result.replayed !== true && result.status === 'ok' ? async () => transport.publishFrame(async () => {
+            await current();
+            sdk.assertValidXenoAutomationRequest(stableRequest());
+            if (!consumption || typeof registry.inspect !== 'function')
+                throw Error('Original consumed Browser lease is unavailable');
+            const lease = await registry.inspect(consumption.ack.lease.leaseId);
+            const inspectedAt = Date.parse(this.now());
+            const expiresAt = typeof lease?.expiresAt === 'string' ? Date.parse(lease.expiresAt) : Number.NaN;
+            if (!lease || !['active', 'exhausted'].includes(lease.state) || !Number.isFinite(inspectedAt) || !Number.isFinite(expiresAt) || expiresAt <= inspectedAt || digest(lease) !== digest(consumption.ack.lease))
+                throw Error('Browser consumed lease changed after capture');
+            await current();
+        }) : undefined;
+        return { receipt: result, replayed: result.replayed === true, ...publishFrame ? { publishFrame } : {} };
+    }
+    request(command, contract, requestedAt, leaseId, version) {
+        if (contract.identity.workspaceId !== command.scope.workspaceId || contract.identity.sessionId !== command.request.sessionId)
+            throw Error('Browser contract is not bound to this workspace/session');
+        return { protocolVersion: 1, operationId: command.request.requestId, idempotencyKey: command.request.requestId, requestedAt, identity: contract.identity, governingToolName: 'Browser', operation: command.operation, parameters: structuredClone(command.parameters), declaredTarget: { tabId: command.request.tabId }, executionContract: contract, capabilityLeaseId: leaseId, expectedLeaseVersion: version };
+    }
+}
+function wire(request) { return request; }
+function targetIdentity(preflight, tabId) { const value = preflight.observedTarget; if (value.tabId !== tabId || typeof value.url !== 'string')
+    throw Error('Owned Browser did not return its exact target URL'); const url = new URL(value.url); if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password)
+    throw Error('Browser consent target is not a safe web origin'); return { origin: url.origin, fingerprint: digest({ tabId, url: url.href, token: preflight.token }) }; }
+function digest(value) { const canonical = (v) => Array.isArray(v) ? v.map(canonical) : v && typeof v === 'object' ? Object.fromEntries(Object.entries(v).filter(([, item]) => item !== undefined && typeof item !== 'function').sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, canonical(item)])) : v; return createHash('sha256').update(JSON.stringify(canonical(value))).digest('hex'); }
+//# sourceMappingURL=SdkBrowserCommandAuthority.js.map

package/dist/browser/SdkBrowserCommandAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SdkBrowserCommandAuthority.js","sourceRoot":"","sources":["../../src/browser/SdkBrowserCommandAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAStC,OAAO,EAAC,wBAAwB,EAAkC,MAAM,+BAA+B,CAAA;AAmDvG,2GAA2G;AAC3G,MAAM,OAAO,0BAA0B;IAMR;IALZ,MAAM,GAAC,IAAI,GAAG,EAAsF,CAAA;IACpG,MAAM,GAAC,IAAI,GAAG,EAAwB,CAAA;IACtC,QAAQ,GAAC,IAAI,GAAG,EAA4B,CAAA;IACrD,OAAO,GAAC,KAAK,CAAA;IACJ,GAAG,CAAW;IAC/B,YAA6B,OAAkC;QAAlC,YAAO,GAAP,OAAO,CAA2B;QAC7D,KAAI,MAAM,GAAG,IAAI,CAAC,oCAAoC,EAAC,gCAAgC,EAAC,sBAAsB,EAAC,sCAAsC,EAAC,kCAAkC,EAAC,iCAAiC,EAAC,kCAAkC,EAAC,+BAA+B,CAAU;YAAC,IAAG,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAG,UAAU;gBAAC,MAAM,KAAK,CAAC,yEAAyE,CAAC,CAAA;QACxa,IAAI,CAAC,GAAG,GAAC,OAAO,CAAC,GAAG,IAAE,CAAC,GAAE,EAAE,CAAA,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAe,EAAC,SAAmB;QAC/C,IAAG,IAAI,CAAC,OAAO;YAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC3D,OAAO,GAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAAA,MAAM,WAAW,GAAC,MAAM,CAAC,OAAO,CAAC,EAAC,EAAE,GAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAA;QAC/F,MAAM,QAAQ,GAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAClC,IAAG,QAAQ,EAAC,CAAC;YAAA,IAAG,QAAQ,CAAC,WAAW,KAAG,WAAW;gBAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAAA,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,OAAO,CAAC;YAAA,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAA,OAAO,EAAC,GAAG,eAAe,CAAC,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,CAAC,QAAQ,EAAC,CAAC,EAAC,GAAG,MAAM,CAAC,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,YAAY,EAAC,CAAA,CAAC,CAAA,EAAE,EAAC,CAAA;QAAA,CAAC;QACtV,IAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAE,GAAG;YAAC,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACxF,MAAM,OAAO,GAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAC,SAAS,EAAC,WAAW,CAAC,CAAC;QAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,WAAW,EAAC,OAAO,EAAC,CAAC,CAAA;QACxG,IAAG,CAAC;YAAA,OAAO,MAAM,OAAO,CAAA;QAAA,CAAC;gBAAO,CAAC;YAAA,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAA,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAAA,CAAC;IACjF,CAAC;IACD;qGACiG;IACjG,KAAK,CAAC,KAAK,KAAG,IAAI,CAAC,OAAO,GAAC,IAAI,CAAC,CAAA,KAAI,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;QAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA,CAAA,CAAC;IAClK;kGAC8F;IAC9F,KAAK,CAAC,iBAAiB,CAAC,MAA+B,EAAC,OAA0B;QAChF,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAChD,IAAG,CAAC,KAAK,IAAE,KAAK,CAAC,OAAO,IAAE,MAAM,CAAC,oBAAoB,KAAG,eAAe,IAAE,MAAM,CAAC,SAAS,KAAG,KAAK,CAAC,SAAS,IAAE,MAAM,CAAC,OAAO,CAAC,KAAG,KAAK,CAAC,kBAAkB,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,8DAA8D,CAAC,CAAA;QAC/Q,KAAK,CAAC,OAAO,GAAC,IAAI,CAAA;QAClB,MAAM,KAAK,CAAC,aAAa,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC/D,IAAG,CAAC,KAAK,IAAE,MAAM,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,QAAQ,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACrK,MAAM,KAAK,CAAC,aAAa,EAAE,CAAA;IAC7B,CAAC;IACO,KAAK,CAAC,UAAU,CAAC,OAAe,IAAE,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA,IAAG,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAA,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,MAAM,CAAC,CAAA,CAAA,CAAC;IACvN,KAAK,CAAC,OAAO,CAAC,OAAe,EAAC,MAAgC;QACpE,MAAM,OAAO,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAC,EAAC,WAAW,EAAC,MAAM,CAAC,WAAW,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,EAAC,CAAC,CAAA;QACvJ,IAAG,MAAM,CAAC,gBAAgB,KAAG,MAAM,CAAC,OAAO,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,MAAM,CAAC,SAAS,KAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAE,MAAM,CAAC,KAAK,KAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAE,OAAO,CAAC,WAAW,KAAG,MAAM,CAAC,WAAW,IAAE,OAAO,CAAC,OAAO,CAAC,WAAW,KAAG,MAAM,CAAC,kBAAkB,IAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAG,MAAM,CAAC,mBAAmB,IAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,KAAG,MAAM,CAAC,UAAU;YAAC,MAAM,KAAK,CAAC,yEAAyE,CAAC,CAAA;QACpd,OAAO,OAAO,CAAA;IAChB,CAAC;IACO,KAAK,CAAC,YAAY,CAAC,OAAe,EAAC,SAAmB,EAAC,gBAAuB;QACpF,MAAM,EAAC,GAAG,EAAC,YAAY,EAAC,GAAC,IAAI,CAAC,OAAO,EAAC,EAAE,GAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAA;QAClE,IAAI,MAAM,GAAC,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,gBAA+C,CAAA;QACnD,IAAI,OAA+B,CAAA;QACnC,IAAG,CAAC,MAAM,EAAC,CAAC;YACV,MAAM,QAAQ,GAAC,EAAC,WAAW,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,OAAO,EAAC,gBAAgB,GAAC,MAAM,CAAC,EAAE,CAAC,EAAC,UAAU,EAAC,mBAAmB,GAAC,MAAM,CAAC,EAAE,CAAC,EAAC,CAAA;YACrH,OAAO,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAC,QAAQ,CAAC,CAAA;YACrE,MAAM,OAAO,GAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,OAAO,CAAC,QAAQ,EAAC,QAAQ,CAAC,WAAW,EAAC,QAAQ,CAAC,OAAO,EAAC,CAAC,CAAC,CAAA;YAC5F,GAAG,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAC,SAAS,GAAC,MAAM,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;YAC5F,GAAG,CAAC,6BAA6B,CAAC,OAAO,EAAC,QAA6E,EAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YACjJ,MAAM,MAAM,GAAC,cAAc,CAAC,SAAS,EAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5D,gBAAgB,GAAC,SAAS,CAAA;YAC1B,MAAM,GAAC,MAAM,YAAY,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,WAAW,EAAC,EAAE,EAAC,gBAAgB,EAAC,KAAK,EAAC,OAAO,CAAC,KAAK,EAAC,SAAS,EAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,EAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,iBAAiB,EAAC,MAAM,CAAC,WAAW,EAAC,WAAW,EAAC,OAAO,CAAC,WAAW,EAAC,GAAG,QAAQ,EAAC,kBAAkB,EAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAC,mBAAmB,EAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAC,KAAK,EAAC,UAAU,EAAC,CAAC,CAAA;QAC1Y,CAAC;QACD,OAAO,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAC,KAAK,IAAE,EAAE,GAAC,IAAG,IAAI,CAAC,OAAO;YAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,MAAO,CAAC,CAAA,CAAA,CAAC,CAAA;QACxH,gGAAgG;QAChG,mFAAmF;QACnF,IAAI,eAAgC,CAAA;QACpC,MAAM,QAAQ,GAAC,IAAI,GAAG,CAAC,kCAAkC,CAAC,EAAC,WAAW,EAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAC,GAAG,EAAC,IAAI,CAAC,GAAG,EAAC,iBAAiB,EAAC,QAAQ,CAAA,EAAE,CAAA,eAAe,KAAG,SAAS,IAAE,MAAM,CAAC,QAAQ,CAAC,KAAG,eAAe,EAAC,CAAC,CAAA;QAC3M,IAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAG,OAAO,IAAE,OAAO,QAAQ,CAAC,OAAO,KAAG,UAAU;YAAC,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAA;QACzJ,MAAM,MAAM,GAAC,KAAK,EAAI,QAAgB,EAAC,MAAqB,EAAY,EAAE,GAAC,MAAM,OAAO,EAAE,CAAC,CAAA,eAAe,GAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA,IAAG,CAAC;YAAA,OAAO,MAAM,MAAM,EAAE,CAAA;QAAA,CAAC;gBAAO,CAAC;YAAA,eAAe,GAAC,SAAS,CAAA;QAAA,CAAC,CAAA,CAAC,CAAA;QACzL,MAAM,aAAa,GAAC,GAAE,EAAE,CAAA,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,OAAO,CAAC,QAAQ,EAAC,MAAO,CAAC,WAAW,EAAC,MAAO,CAAC,OAAO,EAAC,CAAC,MAAO,CAAC,YAAY,IAAE,CAAC,CAAC,GAAC,CAAC,CAAC,CAAA;QAC9H,IAAG,MAAM,CAAC,KAAK,KAAG,UAAU,EAAC,CAAC;YAC5B,IAAG,CAAC,gBAAgB,IAAE,cAAc,CAAC,gBAAgB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,KAAG,MAAM,CAAC,iBAAiB;gBAAC,MAAM,KAAK,CAAC,oFAAoF,CAAC,CAAA;YAC5M,MAAM,GAAG,GAAC,GAAG,CAAC,gCAAgC,CAAC,aAAa,EAAE,EAAC,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,CAAC,CAAA;YACzG,MAAM,UAAU,GAAC,GAAG,CAAC,+BAA+B,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAA;YAC/E,MAAM,OAAO,GAA6C,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,OAAO,EAAC,GAAG,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,GAAG,CAAC,IAAI,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,KAAG,KAAK,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,MAAM,EAAC,UAAU,EAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAC,SAAS,EAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,YAAY,EAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAC,iBAAiB,EAAC,SAAS,EAAC,EAAC,MAAM,EAAC,0DAA0D,EAAC,WAAW,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,EAAE,EAAC,MAAM,CAAC,WAAW,EAAC,EAAC,UAAU,EAAC,MAAM,EAAC,YAAY,EAAC,MAAM,EAAC,OAAO,EAAC,CAAC,EAAC,gBAAgB,EAAC,MAAM,EAAC,CAAA;YACtd,MAAM,GAAG,GAAC,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,OAAO,CAAC,kBAAkB,GAAC,MAAM,CAAC,EAAE,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;YACpJ,IAAG,GAAG,CAAC,KAAK,CAAC,KAAK,KAAG,WAAW;gBAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAA;YAC1F,MAAM,OAAO,GAAC,IAAI,wBAAwB,CAAC,YAAY,EAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC9I,IAAG,CAAC;gBAAA,MAAM,GAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAAA,CAAC;oBAAO,CAAC;gBAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAAA,CAAC;QACpH,CAAC;QACD,IAAG,MAAM,CAAC,KAAK,KAAG,QAAQ,EAAC,CAAC;YAC1B,MAAM,OAAO,GAAC,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,eAAe,EAAC,MAAM,CAAC,YAAa,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,MAAe,EAAC,EAAE,EAAC,MAAM,CAAC,WAAW,EAAC,EAAC,CAAA;YACjI,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAC,MAAM,CAAC,EAAE,CAAC,EAAC,OAAO,CAAC,CAAC,CAAC;YAAA,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACzI,CAAC;QACD,IAAG,MAAM,CAAC,KAAK,KAAG,iBAAiB;YAAC,MAAM,KAAK,CAAC,8DAA8D,CAAC,CAAA;QAC/G,IAAG,MAAM,CAAC,KAAK,KAAG,kBAAkB,EAAC,CAAC;YACpC,MAAM,OAAO,GAAoC,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,eAAe,EAAC,MAAM,CAAC,YAAa,EAAC,UAAU,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,EAAE,EAAC,MAAM,CAAC,WAAW,EAAC,EAAC,eAAe,EAAC,EAAC,OAAO,EAAC,2BAA2B,EAAC,UAAU,EAAC,MAAM,CAAC,aAAc,EAAC,SAAS,EAAC,MAAM,CAAC,gBAAiB,EAAC,EAAC,CAAA;YACvR,MAAM,GAAG,GAAC,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,OAAO,CAAC,kBAAkB,GAAC,MAAM,CAAC,EAAE,CAAC,EAAC,OAAO,CAAC,CAAC,CAAA;YAC5G,IAAG,GAAG,CAAC,KAAK,CAAC,OAAO,KAAG,MAAM,CAAC,YAAa,GAAC,CAAC,IAAE,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,UAAU,KAAG,MAAM,CAAC,aAAa;gBAAC,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAA;YAC7K,MAAM,GAAC,MAAM,YAAY,CAAC,MAAM,CAAC,EAAC,GAAG,MAAM,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,GAAC,CAAC,EAAC,KAAK,EAAC,UAAU,EAAC,EAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACxG,CAAC;QACD,IAAG,MAAM,CAAC,KAAK,KAAG,UAAU;YAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAA;QACzF,IAAI,WAAwD,CAAA;QAC5D,MAAM,OAAO,GAAuB;YAClC,QAAQ,EAAC,KAAK,IAAE,EAAE,CAAA,MAAM,SAAS,CAAC,QAAQ,EAAuE;YACjH,iFAAiF;YACjF,kFAAkF;YAClF,SAAS,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,OAAO,EAAE,CAAC,CAAA,IAAG,CAAC,gBAAgB;gBAAC,MAAM,KAAK,CAAC,6EAA6E,CAAC,CAAC,CAAA,OAAO,gBAAsD,CAAA,CAAA,CAAC;YAClN,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,MAAM,EAAC,EAAE;gBAC7C,IAAG,CAAC,WAAW,IAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,IAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,KAAG,eAAe,IAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAA;gBAC5N,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,SAAS,EAAC,WAAW,CAAC,SAAS,EAAC,kBAAkB,EAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAC,KAAK,EAAC,eAAe,CAAC,KAAK,CAAC,EAAC,OAAO,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,EAAC,QAAQ,EAAC,CAAC,CAAA;gBACxK,OAAO,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAC,SAA4C,EAAC,EAAC,SAAS,EAAC,WAAW,CAAC,SAAS,EAAC,oBAAoB,EAAC,eAAe,EAAC,KAAK,EAAC,EAAC,MAAM,CAAqE,CAAA;YACpP,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,EAAE,CAAA,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;SACjD,CAAA;QACD,MAAM,QAAQ,GAAC,IAAI,GAAG,CAAC,8BAA8B,CAAC,EAAC,OAAO,EAAC,GAAG,EAAC,IAAI,CAAC,GAAG,EAAC,OAAO,EAAC,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,kBAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,aAAa,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,OAAO,EAAC,eAAe,EAAC,GAAG,EAAC,EAAE;oBACtO,MAAM,OAAO,GAAC,EAAC,OAAO,EAAC,eAAe,EAAC,GAAG,EAAC,EAAC,GAAG,GAAC,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAC,OAAO,EAAC,eAAe,EAAC,GAAG,CAAC,CAAC,CAAC;oBAAA,WAAW,GAAC,EAAC,SAAS,EAAC,GAAG,EAAC,CAAC;oBAAA,OAAO,GAAG,CAAA;gBAC3L,CAAC,EAAC,EAAC,CAAC,CAAA;QACJ,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QAAA,MAAM,OAAO,EAAE,CAAA;QACpE,MAAM,YAAY,GAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAG,OAAO,IAAE,MAAM,CAAC,QAAQ,KAAG,IAAI,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAA,CAAC,CAAA,KAAK,IAAE,EAAE,CAAA,SAAS,CAAC,YAAY,CAAC,KAAK,IAAE,EAAE;YAC9I,MAAM,OAAO,EAAE,CAAA;YACf,GAAG,CAAC,gCAAgC,CAAC,aAAa,EAAE,CAAC,CAAA;YACrD,IAAG,CAAC,WAAW,IAAE,OAAO,QAAQ,CAAC,OAAO,KAAG,UAAU;gBAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAA;YACnH,MAAM,KAAK,GAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACjE,MAAM,WAAW,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;YACxC,MAAM,SAAS,GAAC,OAAO,KAAK,EAAE,SAAS,KAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;YAC7F,IAAG,CAAC,KAAK,IAAE,CAAC,CAAC,QAAQ,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAE,SAAS,IAAE,WAAW,IAAE,MAAM,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAA;YACvP,MAAM,OAAO,EAAE,CAAA;QACjB,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAA;QACZ,OAAO,EAAC,OAAO,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,CAAC,QAAQ,KAAG,IAAI,EAAC,GAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,CAAA,CAAC,CAAA,EAAE,EAAC,CAAA;IAC3F,CAAC;IACO,OAAO,CAAC,OAAe,EAAC,QAAoC,EAAC,WAAkB,EAAC,OAAc,EAAC,OAAc;QACnH,IAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,KAAG,OAAO,CAAC,KAAK,CAAC,WAAW,IAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAG,OAAO,CAAC,OAAO,CAAC,SAAS;YAAC,MAAM,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5L,OAAO,EAAC,eAAe,EAAC,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,cAAc,EAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,WAAW,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,iBAAiB,EAAC,SAAS,EAAC,SAAS,EAAC,OAAO,CAAC,SAA+C,EAAC,UAAU,EAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAwC,EAAC,cAAc,EAAC,EAAC,KAAK,EAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,EAAC,iBAAiB,EAAC,QAAQ,EAAC,iBAAiB,EAAC,OAAO,EAAC,oBAAoB,EAAC,OAAO,EAAC,CAAA;IACrc,CAAC;CACF;AACD,SAAS,IAAI,CAAC,OAA6B,IAAE,OAAO,OAAwC,CAAA,CAAA,CAAC;AAC7F,SAAS,cAAc,CAAC,SAA8B,EAAC,KAAY,IAAE,MAAM,KAAK,GAAC,SAAS,CAAC,cAAc,CAAC,CAAA,IAAG,KAAK,CAAC,KAAK,KAAG,KAAK,IAAE,OAAO,KAAK,CAAC,GAAG,KAAG,QAAQ;IAAC,MAAM,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAA,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ;IAAC,MAAM,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAA,OAAO,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,EAAC,WAAW,EAAC,MAAM,CAAC,EAAC,KAAK,EAAC,GAAG,EAAC,GAAG,CAAC,IAAI,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,EAAC,CAAC,EAAC,CAAA,CAAA,CAAC;AAC/d,SAAS,MAAM,CAAC,KAAa,IAAU,MAAM,SAAS,GAAC,CAAC,CAAS,EAAS,EAAE,CAAA,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,CAAC,IAAE,OAAO,CAAC,KAAG,QAAQ,CAAA,CAAC,CAAA,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,IAAI,CAAC,EAAC,EAAE,CAAA,IAAI,KAAG,SAAS,IAAE,OAAO,IAAI,KAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAC,IAAI,CAAC,EAAC,EAAE,CAAA,CAAC,GAAG,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,CAAA,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAA,CAAC"}

package/dist/browser/createSdkBrowserAuthority.d.ts

@@ -0,0 +1,14 @@
+import { type BrowserResourceSdk } from './BrowserAuthorityResources.js';
+import { type BrowserPolicySdk } from './PersistedBrowserPolicyResolver.js';
+import type { OwnedBrowserHostConfiguration } from './OwnedBrowserHostServices.js';
+/** The managed Browser consumer is wired through the host-private qualified-artifact
+ * loader. Installed/public activation remains deliberately unavailable until those
+ * exact Browser and SDK artifacts are released under unique public versions. */
+/** The production composition seam. Inject the actual qualified package module and native host
+ * capabilities; no renderer configuration, SDK source path, fixed principal or automatic approval. */
+export declare function createSdkBrowserAuthorityFactory(options: {
+    sdk: BrowserResourceSdk & BrowserPolicySdk;
+    directory: string;
+    assertPrivateDirectory(path: string): Promise<void>;
+}): OwnedBrowserHostConfiguration['createAuthority'];
+//# sourceMappingURL=createSdkBrowserAuthority.d.ts.map

package/dist/browser/createSdkBrowserAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSdkBrowserAuthority.d.ts","sourceRoot":"","sources":["../../src/browser/createSdkBrowserAuthority.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,KAAK,kBAAkB,EAAC,MAAM,gCAAgC,CAAA;AACpG,OAAO,EAAsC,KAAK,gBAAgB,EAAC,MAAM,qCAAqC,CAAA;AAE9G,OAAO,KAAK,EAAC,6BAA6B,EAAC,MAAM,+BAA+B,CAAA;AAEhF;;gFAEgF;AAEhF;sGACsG;AACtG,wBAAgB,gCAAgC,CAAC,OAAO,EAAC;IACvD,GAAG,EAAC,kBAAkB,GAAC,gBAAgB,CAAA;IACvC,SAAS,EAAC,MAAM,CAAA;IAChB,sBAAsB,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD,GAAE,6BAA6B,CAAC,iBAAiB,CAAC,CAyBlD"}

package/dist/browser/createSdkBrowserAuthority.js

@@ -0,0 +1,43 @@
+import { BrowserAutomationHttpTransport, sameOwnedBrowserScope } from '@xenosystem/agent-interface-host/node';
+import { openBrowserAuthorityResources } from './BrowserAuthorityResources.js';
+import { createPersistedBrowserPolicyResolver } from './PersistedBrowserPolicyResolver.js';
+import { SdkBrowserCommandAuthority } from './SdkBrowserCommandAuthority.js';
+/** The managed Browser consumer is wired through the host-private qualified-artifact
+ * loader. Installed/public activation remains deliberately unavailable until those
+ * exact Browser and SDK artifacts are released under unique public versions. */
+/** The production composition seam. Inject the actual qualified package module and native host
+ * capabilities; no renderer configuration, SDK source path, fixed principal or automatic approval. */
+export function createSdkBrowserAuthorityFactory(options) {
+    return async ({ scopes, sessions, repository, principal, consent }) => {
+        const resources = await openBrowserAuthorityResources(options);
+        try {
+            const sessionFor = async (command) => {
+                const session = await sessions.resolveSession(command.request.sessionId);
+                if (!session || !session.ownsTab(command.request.tabId) || !sameOwnedBrowserScope(session.scope, command.scope))
+                    throw Error('Browser policy has no exact owned session/tab');
+                await session.assertCurrent();
+                return session;
+            };
+            const resolve = createPersistedBrowserPolicyResolver({ sdk: options.sdk, repository, scopes, principal,
+                assertOwnedTab: async (command) => { await sessionFor(command); },
+                currentOrigin: async (command) => { const session = await sessionFor(command); return (await new BrowserAutomationHttpTransport(session, command.request.tabId, command.request.requestId, command.operation).target()).origin ?? undefined; },
+            });
+            const authority = new SdkBrowserCommandAuthority({ sdk: options.sdk, ...resources, consent, resolve });
+            return {
+                execute: authority.execute.bind(authority),
+                assertConsumption: async (scope, sessionId, permit, wire) => {
+                    const record = await resources.preparations.get(wire.operationId);
+                    if (!record || record.sessionId !== sessionId || !sameOwnedBrowserScope(record.scope, scope))
+                        throw Error('Browser consume receipt belongs to another owned scope');
+                    await authority.assertConsumption(permit, wire);
+                },
+                close: async () => { await authority.close(); resources.close(); },
+            };
+        }
+        catch (error) {
+            resources.close();
+            throw error;
+        }
+    };
+}
+//# sourceMappingURL=createSdkBrowserAuthority.js.map

package/dist/browser/createSdkBrowserAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSdkBrowserAuthority.js","sourceRoot":"","sources":["../../src/browser/createSdkBrowserAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,8BAA8B,EAAC,qBAAqB,EAAC,MAAM,uCAAuC,CAAA;AAC1G,OAAO,EAAC,6BAA6B,EAAyB,MAAM,gCAAgC,CAAA;AACpG,OAAO,EAAC,oCAAoC,EAAuB,MAAM,qCAAqC,CAAA;AAC9G,OAAO,EAAC,0BAA0B,EAAC,MAAM,iCAAiC,CAAA;AAG1E;;gFAEgF;AAEhF;sGACsG;AACtG,MAAM,UAAU,gCAAgC,CAAC,OAIhD;IACC,OAAO,KAAK,EAAC,EAAC,MAAM,EAAC,QAAQ,EAAC,UAAU,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,EAAE;QAC5D,MAAM,SAAS,GAAC,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAA;QAC5D,IAAI,CAAC;YACH,MAAM,UAAU,GAAC,KAAK,EAAC,OAA4D,EAAC,EAAE;gBACpF,MAAM,OAAO,GAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;gBACtE,IAAG,CAAC,OAAO,IAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAC,OAAO,CAAC,KAAK,CAAC;oBAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAA;gBACtK,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;gBAAA,OAAO,OAAO,CAAA;YAC9C,CAAC,CAAA;YACD,MAAM,OAAO,GAAC,oCAAoC,CAAC,EAAC,GAAG,EAAC,OAAO,CAAC,GAAG,EAAC,UAAU,EAAC,MAAM,EAAC,SAAS;gBAC7F,cAAc,EAAC,KAAK,EAAC,OAAO,EAAA,EAAE,GAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA,CAAA,CAAC;gBACzD,aAAa,EAAC,KAAK,EAAC,OAAO,EAAA,EAAE,GAAC,MAAM,OAAO,GAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA,OAAO,CAAC,MAAM,IAAI,8BAA8B,CAAC,OAAO,EAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAE,SAAS,CAAA,CAAA,CAAC;aAC/N,CAAC,CAAA;YACF,MAAM,SAAS,GAAC,IAAI,0BAA0B,CAAC,EAAC,GAAG,EAAC,OAAO,CAAC,GAAG,EAAC,GAAG,SAAS,EAAC,OAAO,EAAC,OAAO,EAAC,CAAC,CAAA;YAC9F,OAAO;gBACL,OAAO,EAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzC,iBAAiB,EAAC,KAAK,EAAC,KAAK,EAAC,SAAS,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE;oBACpD,MAAM,MAAM,GAAC,MAAM,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;oBAC/D,IAAG,CAAC,MAAM,IAAE,MAAM,CAAC,SAAS,KAAG,SAAS,IAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAC,KAAK,CAAC;wBAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAA;oBAC1J,MAAM,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAC,IAAI,CAAC,CAAA;gBAChD,CAAC;gBACD,KAAK,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA,SAAS,CAAC,KAAK,EAAE,CAAA,CAAA,CAAC;aAC3D,CAAA;QACH,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,SAAS,CAAC,KAAK,EAAE,CAAC;YAAA,MAAM,KAAK,CAAA;QAAA,CAAC;IAC9C,CAAC,CAAA;AACH,CAAC"}

package/dist/browser/managedBrowserConfiguration.d.ts

@@ -0,0 +1,22 @@
+import type { OwnedBrowserHostConfiguration } from './OwnedBrowserHostServices.js';
+/** Exact local source cohort qualified on 2026-09-04. These pins deliberately
+ * refuse another same-version SDK or a rebuilt Browser with different bytes. */
+export declare const MANAGED_BROWSER_COHORT: {
+    readonly browserSource: "9637751e285370e1c5a0c3f59b14e2163caf004cdc252993cb2bad62c1c08fbe";
+    readonly browserSdkTree: "5571553bc0d48ec7cf94b0936a42bd7f331b6aee87bc62dd888acd7d258971ae";
+    readonly browserApplication: "03b147f7934e8073c434e2e4fe3cab6f87cd129c937e41e36ab68712c8ee1d2d";
+    readonly browserMain: "6b54b5fa1ebf4de5dd6eea8b7ef81aaebe6c4f72f2a74f6cdf66d5faa6205699";
+    readonly browserExecutable: "d6001225dce0df502929ab1ed85c5a9a24ce3e4ac86f6d2d7e4c9e55e5d146d3";
+    readonly authoritySdkArchive: "184a7d48757edb7db4ca30fc2549f3c150b6efc2b5168e338f1470f03f316d56";
+    readonly authoritySdkDistTree: "56fbee9b789678383d40f5efa5b6e78e2846e0819b64c5e060123645dbef0c8c";
+    readonly authoritySdkEntry: "ae6f71575d77be2bc882f7c54597135bb456d01d1d2b355b1f890f94a6d2864e";
+};
+/** Host-private candidate activation. Absence is an explicit unavailable state;
+ * partial/non-matching configuration refuses before loading or launching code.
+ * The archive pin is evidence binding only: this source cohort is not a public
+ * install because the SDK tarball reuses nominal version 0.9.25. */
+export declare function loadManagedBrowserConfiguration(input: {
+    env: NodeJS.ProcessEnv;
+    hostRoot: string;
+}): Promise<OwnedBrowserHostConfiguration | undefined>;
+//# sourceMappingURL=managedBrowserConfiguration.d.ts.map

package/dist/browser/managedBrowserConfiguration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managedBrowserConfiguration.d.ts","sourceRoot":"","sources":["../../src/browser/managedBrowserConfiguration.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAC,6BAA6B,EAAC,MAAM,+BAA+B,CAAA;AAEhF;gFACgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;;CASzB,CAAA;AA0BV;;;oEAGoE;AACpE,wBAAsB,+BAA+B,CAAC,KAAK,EAAC;IAAC,GAAG,EAAC,MAAM,CAAC,UAAU,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAA;CAAC,GAAE,OAAO,CAAC,6BAA6B,GAAC,SAAS,CAAC,CAqBpJ"}