@lssm-tech/bundle.osint
Reusable composition for all supported web-access providers and OSINT operator view models. Explicit provider plans can use Serper search, Linkup or Tavily deep research, Bright Data or Massive collection/proxy methods, and Browserbase rendered sessions. API, SDK, MCP, webhook, WebSocket/SSE, browser, and proxy capabilities remain visible in provenance rather than being flattened away. Each router is pinned to one deployment, credential namespace, and provider allowlist; bounded requests persist evidence before distinct-provider corroboration. Reusable controllers and responsive design-system screens cover loading, empty, ready, degraded, unauthorized, conflict, stale, review, and evidence states.
Operator command center
normalizeOsintCommandCenterResultV1 projects untrusted service responses into deduplicated, redacted records. It exposes only operational metadata needed for source health, acquisition, evidence, freshness, recovery, and review; unknown fields such as credentials, tokens, cookies, and personal payloads never enter the view model. Partial-provider health remains an explicit presentation state.
Mutations are rendered only from a server-returned action descriptor containing an exact operation, immutable input, authorization reference, and idempotency key. The reusable coordinator enforces an optional exact confirmation phrase and coalesces concurrent invocations with the same idempotency key. The host may further narrow operations for a route, but it never constructs an action or decides whether an effect is allowed.
GovernedDataViewV1 (./governed-data-view) is the reusable load/act container: it loads the view operation (optionally keyed by a resource parameter), keeps only allowlisted operation keys (limitGovernedActionsV1), runs actions through the coordinator and maps failures to command-center states. The host injects the call transport. ./governed-transport supplies typed failures: wrap the SDK fetch with createGovernedTransportFetchV1 so non-OK responses reject with GovernedTransportErrorV1 (401/403 → unauthorized, 409 → conflict or stale by structured error code, 412 → stale, otherwise degraded); governedErrorModelV1 maps only typed errors to states and treats anything else as degraded.
