Commit Graph

1 Commits

Author SHA1 Message Date
ruv 5fedd1d022 feat(browser): #2041 ADR-122 Phase 0 + Phase 1 — agent-browser 0.27 + signed trajectories
Phase 0 (convergence):
- Bump agent-browser dep ^0.6.0 → ^0.27.0 (21-minor drift closed)
- Package version → 3.0.0-alpha.4
- Adapter already had full 0.27 surface (find/mouse/set/network/tabs/etc.)

Phase 1 (beyond-SOTA wedge: signed trajectory containers):
- domain/signed-trajectory.ts — envelope schema + replay types
- infrastructure/witness-signer.ts — Ed25519 sign/verify via node:crypto
- application/signed-trajectory-service.ts — seal/verify/replay-plan/replay-delta
- BrowserService.endTrajectory now optionally seals via signTrajectories:true
- 19 new tests: round-trip, tamper detection, trust list, replay planning,
  delta detection, determinism. 147/147 tests passing.

Acceptance (Phase 1):
- record → sign → distribute → verify round-trips
- forging a step/goal/screenshot-hash breaks verify (signature invalid)
- trust-list filtering accepts/rejects by signer public key
- replay planning applies replaceStepInput + skipSteps mutations
- buildReplayDelta detects action drift + outcome drift

Beyond SOTA: no other web agent (Surfer-H, Browser Use, Stagehand, Operator,
Skyvern) ships cryptographic provenance for AI browsing sessions.

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-05-18 19:28:31 -04:00