Tier-B, browser family. Removes the self-contained browser-automation modules
and untangles their one external call site.
Deleted (with tests):
- browser-orchestrator, browser-session-registry, browser-credentials-store,
browser-grant-tokens
- browser-backend/ (chromium, http, index, schemas, types)
Untangled:
- controlplane-db.ts: dropped the 3 ensureBrowser*Schema imports + their calls
in the schema-init sequence (the only external importers of the family).
Verified: no remaining `import ... from './browser-*'` anywhere → compile-safe;
controlplane-db has no browser refs left.
NOT in this PR (orphaned-but-compiling; needs its own PR): the hostd jail-clone
subsystem that deployed/managed the backend in Bastille jails —
hostd/privileged-commands.ts (createBrowserClone/destroy/...),
hostd-authorization.ts (browser-clone-* op cases), and the controlplane-pages
"keep this browser signed in" UI. These reference browser-backend by path, not
import, so they still build; removing them touches privileged/security code and
should be reviewed separately.
GATE (host with deps): npm run typecheck && npm run test.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>