Agent Browser needs a functional provider bridge alongside the isolated desktop runtime proposed in the browser adoption stack (#63 contracts and #64 policy helpers).
Proposed server slice: process-local, authenticated loopback MCP for current Codex and Claude; bounded requests; exact thread/provider/session ownership; default thread access only to an operator-shared origin; durable per-thread disable; and revocation on origin, session, provider, or renderer changes. Bearer credentials must not enter persisted configuration or diagnostics.
This will be a draft adoption proposal coordinated with the desktop/browser renderer lane, tested together on synthetic pages. It will preserve current provider versions and existing session lifecycle behavior. The source implementation is from Club Code, adapted to current Cafe dev rather than replacing provider adapters.
Agent Browser needs a functional provider bridge alongside the isolated desktop runtime proposed in the browser adoption stack (#63 contracts and #64 policy helpers).
Proposed server slice: process-local, authenticated loopback MCP for current Codex and Claude; bounded requests; exact thread/provider/session ownership; default thread access only to an operator-shared origin; durable per-thread disable; and revocation on origin, session, provider, or renderer changes. Bearer credentials must not enter persisted configuration or diagnostics.
This will be a draft adoption proposal coordinated with the desktop/browser renderer lane, tested together on synthetic pages. It will preserve current provider versions and existing session lifecycle behavior. The source implementation is from Club Code, adapted to current Cafe dev rather than replacing provider adapters.