codex-chatgpt-control 0.5.1-alpha.1 → 0.5.1-alpha.3

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.5.1-alpha.3
+
+- Adds the transactional `operations.submit`, `collect`, `inspect`, `control`,
+  and `run` surface with durable request identity, monotonic mutation
+  boundaries, exact ownership, non-repetition, and redacted recovery receipts.
+- Adds capability-aware runtime identity, correlated multiplexed backend
+  traffic, process-scoped tab coordination, bounded DOM/file/artifact
+  observation, and deterministic configuration restoration.
+- Hardens browser acquisition and attachment input scoping, acts-then-throws
+  settlement, late deadline behavior, output path validation, journal quotas,
+  lifecycle controls, and visible blocker classification.
+- Extends release-canary coverage with exact per-scenario tab cleanup and
+  independent Chat/Work/configuration postconditions; refreshes all four plugin
+  runtime bundles from the qualified source.
+
+## 0.5.1-alpha.2
+
+- Adds confirmation-gated, fail-closed `messages.stop` lifecycle control with
+  scoped DOM evidence and a single bounded deadline.
+- Hardens uploads, explicit tab reuse, origin checks, localized selectors,
+  blocker/mode visibility, and fixture generation against the validated PR
+  review findings.
+- Qualifies effort-only simplified Chat profiles and waits for delayed scoped
+  artifact previews before selecting their exact Download control.
+- Adds behavioral stop contracts, expanded regression coverage, rebuilt plugin
+  runtimes, portable release helpers, and patched transitive dependency locks.
+
 ## 0.5.1-alpha.1
 
 - Fixes current Chat/Work switching through the visible surface-radio group and

package/README.md

@@ -29,6 +29,33 @@ const result = await chatgpt.runner.run(reviewer, {
 });
 ```
 
+## Transactional operation preview
+
+Supported Chat, Work, Runner, and Responses workflows accept an optional
+caller-owned canonical UUID `operationId`. Supplying it opts that invocation
+into durable submit-once recovery and exact-turn collection; omitting it keeps
+the compatibility path.
+
+```ts
+const result = await chatgpt.ask({
+  operationId: "123e4567-e89b-42d3-a456-426614174000",
+  prompt: "Summarize the visible thread.",
+  thread: { type: "conversationId", conversationId: "caller-owned-conversation-id" },
+  wait: false,
+  read: false
+});
+```
+
+The direct `chatgpt.operations` surface exposes `submit`, `collect`, `inspect`,
+`control`, and SDK-composed `run`. Persist and reuse the fresh returned handle
+after partial or uncertain results; never retry the same logical Send under a
+new ID. `operations.inspect` is browser-free. Browser-touching calls fail
+closed when bridge access, target evidence, or a required provider primitive
+is unavailable. See
+[Transactional browser operations](references/2026-08-16-transactional-operations.md)
+for request schemas, concurrency, recovery, privacy, transport bounds, and the
+stricter transactional artifact-provider capability matrix.
+
 Inspect the visible surface and apply verified configuration:
 
 ```ts

package/contracts/v1/fixtures/backend-capabilities.json

@@ -1,8 +1,16 @@
 {
+  "backendSessionId": "fixture-backend-session",
+  "buildDigest": "unknown",
+  "cancellation": {
+    "requests": false,
+    "streams": false,
+    "supported": false
+  },
   "commands": [
     "backend.version",
     "backend.health",
     "backend.capabilities",
+    "backend.hello",
     "runner.run",
     "runner.plan",
     "runner.stream",
@@ -44,6 +52,7 @@
     "messages.wait",
     "messages.readLatest",
     "messages.status",
+    "messages.stop",
     "messages.waitAndRead",
     "artifacts.listLatest",
     "artifacts.wait",
@@ -57,15 +66,46 @@
     "modes.set",
     "modes.get",
     "tools.select",
-    "response.copy"
+    "response.copy",
+    "operations.submit",
+    "operations.collect",
+    "operations.inspect",
+    "operations.control"
   ],
+  "multiplexing": {
+    "streams": true,
+    "unary": true
+  },
+  "packageName": "codex-chatgpt-control",
+  "packageVersion": "unknown",
   "protocolVersion": "chatgpt.browser_control.backend_request.v1",
+  "requestIds": {
+    "required": true,
+    "scope": "connection"
+  },
+  "runtime": "node",
+  "runtimeVersion": "fixture-runtime",
   "streaming": {
     "modes": [
       "ndjson"
     ],
     "tokenDeltas": false
   },
+  "supportedProtocolVersions": [
+    "chatgpt.browser_control.backend_request.v1"
+  ],
+  "tabs": {
+    "authoritativeClaim": false,
+    "concurrent": false,
+    "concurrentTabs": false,
+    "coordination": false,
+    "coordinationScope": "none",
+    "fencing": false,
+    "stableBrowserIdentity": false,
+    "stableIdentity": false,
+    "stableProviderIdentity": false,
+    "stableTabIdentity": false
+  },
   "transports": [
     "stdio"
   ]

package/contracts/v1/fixtures/backend-compatibility.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": "chatgpt.browser_control.backend_compatibility.v1",
+  "status": "warning",
+  "mode": "multiplexed",
+  "protocolVersion": "chatgpt.browser_control.backend_request.v1",
+  "backendSessionId": "fixture-backend-session",
+  "packageName": "codex-chatgpt-control",
+  "packageVersion": "0.5.1-alpha.2",
+  "runtime": "node",
+  "runtimeVersion": "v22.14.0",
+  "buildDigest": "sha256:backend-build",
+  "warnings": [
+    {
+      "code": "build_digest_mismatch",
+      "field": "buildDigest",
+      "expected": "sha256:expected-build",
+      "received": "sha256:backend-build",
+      "message": "Backend build digest differs from the expected runtime (sha256:expected-build versus sha256:backend-build)."
+    }
+  ]
+}

package/contracts/v1/fixtures/backend-version.json

@@ -2,9 +2,14 @@
   "ok": true,
   "requestId": "req_backend_version",
   "result": {
+    "backendSessionId": "fixture-backend-session",
+    "buildDigest": "unknown",
     "name": "codex-chatgpt-control-backend",
+    "packageName": "codex-chatgpt-control",
+    "packageVersion": "unknown",
     "protocolVersion": "chatgpt.browser_control.backend_request.v1",
-    "runtime": "node"
+    "runtime": "node",
+    "runtimeVersion": "fixture-runtime"
   },
   "schemaVersion": "chatgpt.browser_control.backend_response.v1"
 }

package/contracts/v1/fixtures/command-descriptors.json

@@ -946,6 +946,27 @@
       "risk": "medium",
       "summary": "Read a compact latest-assistant progress snapshot without treating partial text as complete."
     },
+    {
+      "args": {
+        "confirmStop": "must be true to stop a visible response",
+        "timeoutMs": "maximum time to verify generation became inactive"
+      },
+      "blockers": [
+        "browser_bridge_unavailable",
+        "login_required",
+        "captcha",
+        "rate_limit",
+        "selector_drift"
+      ],
+      "defaults": {},
+      "defaultTimeoutMs": 5000,
+      "examples": [],
+      "layer": "primitive",
+      "name": "messages.stop",
+      "retryPolicy": "Return structured CommandResult failures; retry only when the blocker is recoverable and no duplicate prompt will be submitted.",
+      "risk": "medium",
+      "summary": "Stop the current visible ChatGPT response after explicit confirmation and verify generation became inactive."
+    },
     {
       "args": {},
       "blockers": [

package/contracts/v1/fixtures/doctor-bridge-upload.json

@@ -13,11 +13,11 @@
             "severity": "blocked",
             "userActionRequired": true
           },
-          "message": "Codex cannot access the ChatGPT browser bridge from this backend process. In an ordinary shell this is expected; for a live Codex Chrome run, bootstrap the Chrome plugin runtime with setupBrowserRuntime({ globals: globalThis }) before using globalThis.agent.",
+          "message": "Codex cannot access the ChatGPT browser bridge from this backend process. In an ordinary shell this is expected; for a live Codex Chrome run, assign the Chrome plugin runtime returned by setupBrowserRuntime() to globalThis.agent before using it.",
           "nextCommand": "session.bootstrap",
           "remediation": [
             "Ordinary shell: Treat browser_bridge_unavailable from a plain shell as an expected protocol/blocker-path result, not proof that Chrome, ChatGPT, or the Codex extension is broken.",
-            "Codex Chrome bootstrap: For a live run, initialize the Chrome plugin runtime in node_repl with setupBrowserRuntime({ globals: globalThis }), then set globalThis.browser = await agent.browsers.get(\"extension\") before calling createChatGPT({ agent: globalThis.agent }).",
+            "Codex Chrome bootstrap: For a live run, initialize the Chrome plugin runtime in node_repl with globalThis.agent = await setupBrowserRuntime(), then set globalThis.browser = await agent.browsers.get(\"extension\") before calling createChatGPT({ agent: globalThis.agent }).",
             "Python live bridge: For Python browser-bridge smokes, keep the bridge-hosted Node backend JS execution alive and run scripts/http_stdio_relay.mjs with CHATGPT_BROWSER_BACKEND_HTTP_URL; a plain Python-spawned Node subprocess cannot inherit globalThis.agent.",
             "Extension availability: If this command was already running inside a bootstrapped bridge host, verify the Codex Chrome extension is installed and enabled, then restart Chrome or Codex before retrying."
           ],

package/contracts/v1/fixtures/doctor-scenario-preflight.json

@@ -70,8 +70,30 @@
         },
         "localization": {
           "details": {
+            "configurationAxisIds": [
+              "power",
+              "model",
+              "intelligence",
+              "effort",
+              "speed",
+              "advanced"
+            ],
+            "configurationOptionIds": [
+              "instant",
+              "light",
+              "medium",
+              "high",
+              "extraHigh",
+              "max",
+              "ultra",
+              "pro",
+              "standard",
+              "fast"
+            ],
             "englishCanonicalPresent": true,
-            "labelCandidateCount": 1544,
+            "labelCandidateCount": 2439,
+            "missingConfigurationAxisIds": [],
+            "missingConfigurationOptionIds": [],
             "missingModeOptionIds": [],
             "missingToolIds": [],
             "modeOptionIds": [
@@ -108,11 +130,11 @@
             "requiredKeysMissing": [],
             "runningStateLabelCoverage": {
               "nonEnglishLocaleCount": 64,
-              "nonEnglishStopControlLocaleCount": 64,
+              "nonEnglishStopControlLocaleCount": 63,
               "nonEnglishStoppedAssistantLocaleCount": 0,
               "registeredLocaleCount": 65,
-              "stopControlCandidateCount": 65,
-              "stopControlLocaleCount": 65,
+              "stopControlCandidateCount": 63,
+              "stopControlLocaleCount": 64,
               "stoppedAssistantCandidateCount": 3,
               "stoppedAssistantLocaleCount": 1,
               "support": "partial"

package/contracts/v1/fixtures/files-attach-indeterminate.json

@@ -0,0 +1,30 @@
+{
+  "ok": true,
+  "requestId": "req_files_attach_indeterminate",
+  "result": {
+    "blocker": {
+      "code": "attachment_outcome_indeterminate",
+      "kind": "upload_failed",
+      "message": "The native file handoff started, but its outcome could not be verified. The browser request is no longer in flight, though the file may already be present. Inspect the current composer; do not submit or retry automatically.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "files": [
+        {
+          "bytes": 18,
+          "name": "handoff.txt",
+          "path": "/tmp/contract-fixtures/handoff.txt"
+        }
+      ]
+    },
+    "ok": false,
+    "status": "partial",
+    "warnings": [
+      "File-chooser handoff exceeded the single attachment deadline."
+    ]
+  },
+  "schemaVersion": "chatgpt.browser_control.backend_response.v1"
+}

package/contracts/v1/fixtures/help-root.json

@@ -1,6 +1,6 @@
 {
   "ok": true,
   "requestId": "req_help",
-  "result": "ChatGPT browser-control SDK commands\n\nworkflow:\n- ask: Ask ChatGPT in a new or selected thread, optionally with files, wait/read, downloads, and reports.\n- askInThread: Open or claim an existing thread by URL, conversation id, title, or search query, then ask and read.\n- askWithFiles: Attach absolute local file paths, optionally open/configure Chat or Work, ask, wait, and read.\n- askAndDownload: Ask ChatGPT to produce a visible downloadable output and save the latest exposed file.\n- runMessages: Run sequential prompts where later prompts can use earlier step data.\n- runner.run: Agents-style facade: run a visible ChatGPT agent against input, files, thread, existing-tab, experience, configuration, legacy mode, and response options.\n- responses.create: Narrow Responses-shaped adapter over the visible ChatGPT browser-control runner; rejects unsupported API-only fields before prompt submission.\n- work.start: Open Work, optionally apply model/effort/speed configuration, submit one task, and optionally wait/read without blind resubmission.\n- copyLatest: Copy or DOM-read the latest assistant response with Markdown-first fidelity.\n- runPlan: Execute an inline SequencePlan or named macro through the existing sequence engine.\n- new-ask-read: Named macro: open a new thread, ask, wait, and read Markdown.\n- find-open-ask-read: Named macro: search history, open the first match, ask, wait, and read Markdown.\n- find-open-copy-latest: Named macro: search history, open the first match, and copy/read the latest response.\n- attach-ask-read: Named macro: open a new thread, attach files, ask, wait, and read Markdown.\n- ask-and-download: Named macro: ask in a new thread and download the latest file affordance.\n- two-turn: Named macro: run two sequential prompts in a new thread.\ndiagnostic:\n- doctor-upload: Named macro: preflight bridge, login, and upload permission remediation.\n- doctor: Preflight browser bridge, login, upload, local files, existing-tab, artifact, localization, report, and selector readiness.\nreport:\n- redacted-run-report: Named macro: create a redacted report for a supplied CommandResult.\n- createReport: Write a durable redacted run report for a command result.\nprimitive:\n- session.bootstrap: Attach to ChatGPT in Chrome and detect login/blocker state.\n- experience.detect: Detect whether the scoped visible composer is Chat, Work, or unknown and return its selector profile.\n- experience.open: Open Chat or Work and verify the target surface from scoped composer evidence.\n- configuration.inspect: Inspect the active Chat or Work selector profile, axes, options, and selected values.\n- configuration.apply: Apply model/intelligence/effort/speed configuration one axis at a time and verify the final visible state.\n- work.status: Read current Work task progress and optionally enumerate visible artifacts.\n- work.wait: Wait for the current Work task response to stabilize.\n- work.steer: Submit a visible steering message to the current Work task without opening a new task.\n- work.readLatest: Read the latest response from the current Work task.\n- threads.new: Open a new ChatGPT thread.\n- threads.search: Search visible ChatGPT history by query.\n- threads.open: Open a thread by URL, conversation id, title, or search result.\n- messages.compose: Fill the composer without submitting.\n- messages.submit: Submit the current composer contents.\n- messages.ask: Compose, submit, optionally wait, and optionally read.\n- messages.wait: Wait for the latest assistant response to stabilize.\n- messages.readLatest: Read the latest message as Markdown, normalized text, blocks, or HTML.\n- messages.status: Read a compact latest-assistant progress snapshot without treating partial text as complete.\n- messages.waitAndRead: Wait for completion and read the latest message.\n- artifacts.listLatest: Detect the latest visible generated ChatGPT artifact, such as an image-only result.\n- artifacts.wait: Wait for a visible generated ChatGPT artifact to appear and stabilize.\n- artifacts.downloadLatest: Download or save the latest visible generated ChatGPT artifact.\n- files.preflight: Validate local file paths, size limits, duplicates, zero-byte files, and extension-based MIME/category guesses without opening ChatGPT.\n- files.attach: Attach absolute local file paths through visible ChatGPT upload controls.\n- files.downloadLatest: Download the latest visible ChatGPT file affordance.\n- projects.sources.list: Open or claim a visible ChatGPT Project Sources tab and list source names/statuses without source contents.\n- projects.sources.planAdd: Dry-run an append-only Project Sources file add from explicit local files without opening ChatGPT.\n- projects.sources.add: Append explicit local files to a visible ChatGPT Project Sources list after confirmMutation: true.\n- response.copy: Click Copy response and return clipboard Markdown, with DOM fallback.\n- modes.set: Legacy compatibility command: select a visible model/intelligence/effort/version candidate with historical warning-oriented verification.\n- modes.get: Legacy compatibility command: read mode labels shown on visible composer controls without changing them.\n- tools.select: Select a visible ChatGPT tool when unambiguous.",
+  "result": "ChatGPT browser-control SDK commands\n\nworkflow:\n- ask: Ask ChatGPT in a new or selected thread, optionally with files, wait/read, downloads, and reports.\n- askInThread: Open or claim an existing thread by URL, conversation id, title, or search query, then ask and read.\n- askWithFiles: Attach absolute local file paths, optionally open/configure Chat or Work, ask, wait, and read.\n- askAndDownload: Ask ChatGPT to produce a visible downloadable output and save the latest exposed file.\n- runMessages: Run sequential prompts where later prompts can use earlier step data.\n- runner.run: Agents-style facade: run a visible ChatGPT agent against input, files, thread, existing-tab, experience, configuration, legacy mode, and response options.\n- responses.create: Narrow Responses-shaped adapter over the visible ChatGPT browser-control runner; rejects unsupported API-only fields before prompt submission.\n- work.start: Open Work, optionally apply model/effort/speed configuration, submit one task, and optionally wait/read without blind resubmission.\n- copyLatest: Copy or DOM-read the latest assistant response with Markdown-first fidelity.\n- runPlan: Execute an inline SequencePlan or named macro through the existing sequence engine.\n- new-ask-read: Named macro: open a new thread, ask, wait, and read Markdown.\n- find-open-ask-read: Named macro: search history, open the first match, ask, wait, and read Markdown.\n- find-open-copy-latest: Named macro: search history, open the first match, and copy/read the latest response.\n- attach-ask-read: Named macro: open a new thread, attach files, ask, wait, and read Markdown.\n- ask-and-download: Named macro: ask in a new thread and download the latest file affordance.\n- two-turn: Named macro: run two sequential prompts in a new thread.\ndiagnostic:\n- doctor-upload: Named macro: preflight bridge, login, and upload permission remediation.\n- doctor: Preflight browser bridge, login, upload, local files, existing-tab, artifact, localization, report, and selector readiness.\nreport:\n- redacted-run-report: Named macro: create a redacted report for a supplied CommandResult.\n- createReport: Write a durable redacted run report for a command result.\nprimitive:\n- session.bootstrap: Attach to ChatGPT in Chrome and detect login/blocker state.\n- experience.detect: Detect whether the scoped visible composer is Chat, Work, or unknown and return its selector profile.\n- experience.open: Open Chat or Work and verify the target surface from scoped composer evidence.\n- configuration.inspect: Inspect the active Chat or Work selector profile, axes, options, and selected values.\n- configuration.apply: Apply model/intelligence/effort/speed configuration one axis at a time and verify the final visible state.\n- work.status: Read current Work task progress and optionally enumerate visible artifacts.\n- work.wait: Wait for the current Work task response to stabilize.\n- work.steer: Submit a visible steering message to the current Work task without opening a new task.\n- work.readLatest: Read the latest response from the current Work task.\n- threads.new: Open a new ChatGPT thread.\n- threads.search: Search visible ChatGPT history by query.\n- threads.open: Open a thread by URL, conversation id, title, or search result.\n- messages.compose: Fill the composer without submitting.\n- messages.submit: Submit the current composer contents.\n- messages.ask: Compose, submit, optionally wait, and optionally read.\n- messages.wait: Wait for the latest assistant response to stabilize.\n- messages.readLatest: Read the latest message as Markdown, normalized text, blocks, or HTML.\n- messages.status: Read a compact latest-assistant progress snapshot without treating partial text as complete.\n- messages.stop: Stop the current visible ChatGPT response after explicit confirmation and verify generation became inactive.\n- messages.waitAndRead: Wait for completion and read the latest message.\n- artifacts.listLatest: Detect the latest visible generated ChatGPT artifact, such as an image-only result.\n- artifacts.wait: Wait for a visible generated ChatGPT artifact to appear and stabilize.\n- artifacts.downloadLatest: Download or save the latest visible generated ChatGPT artifact.\n- files.preflight: Validate local file paths, size limits, duplicates, zero-byte files, and extension-based MIME/category guesses without opening ChatGPT.\n- files.attach: Attach absolute local file paths through visible ChatGPT upload controls.\n- files.downloadLatest: Download the latest visible ChatGPT file affordance.\n- projects.sources.list: Open or claim a visible ChatGPT Project Sources tab and list source names/statuses without source contents.\n- projects.sources.planAdd: Dry-run an append-only Project Sources file add from explicit local files without opening ChatGPT.\n- projects.sources.add: Append explicit local files to a visible ChatGPT Project Sources list after confirmMutation: true.\n- response.copy: Click Copy response and return clipboard Markdown, with DOM fallback.\n- modes.set: Legacy compatibility command: select a visible model/intelligence/effort/version candidate with historical warning-oriented verification.\n- modes.get: Legacy compatibility command: read mode labels shown on visible composer controls without changing them.\n- tools.select: Select a visible ChatGPT tool when unambiguous.",
   "schemaVersion": "chatgpt.browser_control.backend_response.v1"
 }

package/contracts/v1/fixtures/messages-stop-indeterminate.json

@@ -0,0 +1,31 @@
+{
+  "ok": true,
+  "requestId": "req_messages_stop_indeterminate",
+  "result": {
+    "blocker": {
+      "code": "stop_generation_unverified",
+      "kind": "selector_drift",
+      "message": "Stop activation reached its browser-native deadline and was terminated, but the click may already have taken effect. Inspect the visible generation state and do not retry automatically.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "signalsAfter": [
+        "stop answering"
+      ],
+      "signalsBefore": [
+        "stop answering"
+      ],
+      "stopped": false,
+      "wasGenerating": true
+    },
+    "ok": false,
+    "status": "timeout",
+    "warnings": [
+      "Stop control click could not complete before the messages.stop deadline."
+    ]
+  },
+  "schemaVersion": "chatgpt.browser_control.backend_response.v1"
+}

package/contracts/v1/fixtures/messages-stop-needs-confirmation.json

@@ -0,0 +1,20 @@
+{
+  "ok": true,
+  "requestId": "req_messages_stop",
+  "result": {
+    "blocker": {
+      "code": "stop_generation_confirmation_required",
+      "fieldPath": "confirmStop",
+      "kind": "confirmation",
+      "message": "Stopping the visible ChatGPT response requires an explicit caller decision.",
+      "resumable": true
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "ok": false,
+    "status": "needs_confirmation",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.backend_response.v1"
+}

package/contracts/v1/fixtures/messages-stop-noop.json

@@ -0,0 +1,19 @@
+{
+  "ok": true,
+  "requestId": "req_messages_stop",
+  "result": {
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "signalsAfter": [],
+      "signalsBefore": [],
+      "stopped": false,
+      "wasGenerating": false
+    },
+    "ok": true,
+    "status": "ok",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.backend_response.v1"
+}

package/contracts/v1/fixtures/messages-stop-success.json

@@ -0,0 +1,21 @@
+{
+  "ok": true,
+  "requestId": "req_messages_stop",
+  "result": {
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "signalsAfter": [],
+      "signalsBefore": [
+        "stop answering"
+      ],
+      "stopped": true,
+      "wasGenerating": true
+    },
+    "ok": true,
+    "status": "ok",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.backend_response.v1"
+}

package/contracts/v1/fixtures/operation-action-prepared-event.json

@@ -0,0 +1,42 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_event.v1",
+  "revision": 5,
+  "previousEventDigest": "hmac-sha256:3333333333333333333333333333333333333333333333333333333333333333",
+  "eventDigest": "hmac-sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "event": {
+    "type": "action_prepared",
+    "action": {
+      "actionId": "33333333-3333-4333-8333-333333333333",
+      "kind": "send",
+      "repeatPolicy": "observe_only_after_intent",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    "intentAt": "2026-08-16T00:00:01.000Z",
+    "baseline": {
+      "schemaVersion": "chatgpt.browser_control.operation_ownership_baseline.v1",
+      "operationId": "11111111-1111-4111-8111-111111111111",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetBindingDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "actionId": "33333333-3333-4333-8333-333333333333",
+      "baseline": {
+        "schemaVersion": "chatgpt.browser_control.turn_ownership.v1",
+        "snapshotDigest": "hmac-sha256:1212121212121212121212121212121212121212121212121212121212121212",
+        "target": {
+          "provider": { "status": "available", "value": "chrome" },
+          "browser": { "status": "available", "value": "browser-1" },
+          "tab": { "status": "available", "value": "tab-1" },
+          "thread": { "status": "available", "value": "conversation-1" },
+          "conversation": { "status": "available", "value": "conversation-1" },
+          "canonicalThreadUrl": { "status": "available", "value": "https://chatgpt.com/c/sanitized" },
+          "authoritativeTabClaim": { "status": "unavailable", "reason": "not_exposed" },
+          "coordinationScope": "process"
+        },
+        "userTurns": [],
+        "assistantTurns": [],
+        "completeness": "complete"
+      },
+      "observedAt": "2026-08-16T00:00:01.000Z"
+    }
+  }
+}

package/contracts/v1/fixtures/operation-action.json

@@ -0,0 +1,13 @@
+{
+  "actionId": "33333333-3333-4333-8333-333333333333",
+  "kind": "file_handoff",
+  "repeatPolicy": "observe_only_after_intent",
+  "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "targetDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "intentRevision": 4,
+  "intentAt": "2026-08-16T00:00:01.000Z",
+  "outcome": "satisfied",
+  "receiptRevision": 5,
+  "receiptAt": "2026-08-16T00:00:02.000Z",
+  "evidenceDigest": "hmac-sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+}

package/contracts/v1/fixtures/operation-artifact-receipt.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_artifact_receipt.v1",
+  "operationId": "11111111-1111-4111-8111-111111111111",
+  "artifactKey": "artifact-0",
+  "assistantTurnId": "assistant-turn-1",
+  "sourceIdentityDigest": "hmac-sha256:abababababababababababababababababababababababababababababababab",
+  "kind": "file",
+  "ordinal": 0,
+  "outputKey": "operation-11111111-result.bin",
+  "mimeType": "application/octet-stream",
+  "bytes": 32,
+  "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "status": "transferred"
+}

package/contracts/v1/fixtures/operation-artifact-transfer-intent-event.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_event.v1",
+  "revision": 5,
+  "previousEventDigest": "hmac-sha256:3333333333333333333333333333333333333333333333333333333333333333",
+  "eventDigest": "hmac-sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "event": {
+    "type": "artifact_transfer_intent",
+    "intent": {
+      "schemaVersion": "chatgpt.browser_control.artifact_transfer_intent.v1",
+      "operationId": "11111111-1111-4111-8111-111111111111",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetBindingDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "assistantTurnId": "assistant-turn-1",
+      "sourceIdentityDigest": "hmac-sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "kind": "file",
+      "ordinal": 0,
+      "transferActionId": "66666666-6666-4666-8666-666666666666",
+      "destinationIdentityDigest": "hmac-sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "actionKind": "local_output_commit",
+      "repeatPolicy": "reconcile_local_effect",
+      "intentAt": "2026-08-16T00:00:03.000Z"
+    }
+  }
+}

package/contracts/v1/fixtures/operation-artifact-transfer-receipt-event.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_event.v1",
+  "revision": 6,
+  "previousEventDigest": "hmac-sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "eventDigest": "hmac-sha256:5555555555555555555555555555555555555555555555555555555555555555",
+  "event": {
+    "type": "artifact_transfer_receipt",
+    "receipt": {
+      "schemaVersion": "chatgpt.browser_control.artifact_transfer_receipt.v1",
+      "operationId": "11111111-1111-4111-8111-111111111111",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetBindingDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "assistantTurnId": "assistant-turn-1",
+      "sourceIdentityDigest": "hmac-sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "kind": "file",
+      "ordinal": 0,
+      "transferActionId": "66666666-6666-4666-8666-666666666666",
+      "destinationIdentityDigest": "hmac-sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "outputKey": "artifact-transfer-1",
+      "bytes": 12,
+      "sha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+      "status": "transferred",
+      "observedAt": "2026-08-16T00:00:04.000Z"
+    }
+  }
+}