Harden route-aware browser lifecycle

This commit is contained in:
jwinterm
2026-07-08 12:55:31 -04:00
parent 3c1183507c
commit 97a43f8572
7 changed files with 190 additions and 19 deletions
+5 -4
View File
@@ -1,6 +1,6 @@
# Open Flow
> Status: draft | Updated 2026-07-05 | Applies to: AMPB users and implementers
> Status: draft | Updated 2026-07-08 | Applies to: AMPB users and implementers
`ampbrowser open` prepares a safe launch plan for one URL. It routes the URL, checks only
the selected transport, and reports whether the browser can open immediately or needs a
@@ -36,9 +36,10 @@ launches through the same transport runner after approval.
`ampbrowser open <url> --route-aware --launch` creates one desktop profile for clearnet,
Tor, and I2P. The profile uses a PAC file for `.onion` and `.i2p` routing, installs the
AMPB route-helper extension, and starts a loopback AMPB helper. If a user clicks an
alternate-network link before its local transport is ready, the extension shows a setup
page and asks the helper to start the AMPB-managed transport after approval.
AMPB route-helper extension, and starts a token-gated loopback helper tied to the browser
process. If a user clicks an alternate-network link before its local transport is ready,
the extension shows a setup page and asks the helper to start the AMPB-managed transport
after approval.
## Examples
+3 -2
View File
@@ -1,6 +1,6 @@
# Transport Management
> Status: draft | Updated 2026-07-07 | Applies to: AMPB transport adapters
> Status: draft | Updated 2026-07-08 | Applies to: AMPB transport adapters
Transport management follows one rule: use what is already healthy, and manage missing
transports only after the user opens a URL that needs them and approves setup.
@@ -20,7 +20,8 @@ user or system daemons.
Route-aware desktop launches add a local helper process for in-browser setup prompts. The
helper accepts token-gated loopback requests from the AMPB profile extension, reports
transport status, and starts only supported AMPB-managed transports. It does not expose a
public network listener or manage adopted daemons.
public network listener or manage adopted daemons. The helper watches the browser process
and exits when that isolated browser exits.
## Lifecycle