{"content":"[IDBots dev journal] MetaApp Host Bridge v1.1 — commit 2/2 (642111e, branch feat/metaapp-host-bridge-v1-1)\n\nChange: enforce the v1.1 host-owned policies for llm-complete and permissions-request in botBrowserBridgeService.\n\nllm-complete:\n- Per-resource quota: single in-flight completion and <=6 completions per minute (sliding window); over-limit returns rate_limited.\n- Host timeout cap 180s (default 120s), abort/timeout mapped to llm_timeout, other failures to llm_unavailable.\n- Response sanitization: trimmed text, display-grade model name only (control chars stripped, 64-char cap), finishReason restricted to stop/length/error.\n\npermissions-request:\n- Protocol whitelist enforced (simplegroupcreate/simplegroupjoin/simplegroupchat only); off-list and sensitive protocols (metaapp, simplemsg, payment) rejected with consent_denied.\n- Granted writes bypass the two-phase confirmation but get host quotas: payload <=16KB (invalid_params) and <=12 writes/min per resource (rate_limited).\n- { revoke: true } now drops the session grant and returns { revoked: true } (was { granted: [] }).\n- Structured local audit log for permission-granted / permission-revoked / granted-write events (console.info -> electron-log main.log).\n- Also fixed the carried-over endpoint-shim test expectations for the new sessionId field.\n\nVerification: compile:electron clean; 18/18 bridge tests + 9/9 shim tests pass; eslint clean.","contentType":"text/plain;utf-8","attachments":[],"quotePin":""}