Module browser 

A dedicated Chromium profile. Verification precedes every page connection; closing uses the verified browser’s DevTools socket, never a signal to an arbitrary PID. Only verified browser and its recorded helpers are signalled individually if they outlive shutdown. Process groups and unrelated applications are never signalled.

Modules

lifetime

Application leases are backed by a supervised stdin pipe, not the application’s PID. EOF survives application crashes and avoids PID-reuse and extension-host sharing bugs. All per-browser changes use the same lock as connect/disconnect; cleanup never acts on a snapshot taken before acquiring that lock.

Structs

BrowserSystem

Functions

executable

has_saved_data

Avoid assigning a new account a port with an older browser’s saved sign-in.

login

login_with_progress

manage

preflight

Local prerequisites and (only if needed) public download metadata. No profile is created.

prerequisites

prerequisites_for

resume

Reuse an opted-in inbox’s saved session without forcing a visible login or mode switch.