Implement managed browser security, individual agents and observability

apps/browser/preload.cjs

@@ -1,6 +1,8 @@
 const { contextBridge, ipcRenderer } = require('electron');
 contextBridge.exposeInMainWorld('safetynet', {
   mutateBookmarks:input=>ipcRenderer.invoke('managed:bookmarks-mutate',input),
+  organizeLibrary:()=>ipcRenderer.invoke('managed:library-organize'),
+  applyLibraryOrganization:input=>ipcRenderer.invoke('managed:library-apply',input),
   state:()=>ipcRenderer.invoke('managed:state'),
   authorizeSetting:section=>ipcRenderer.invoke('managed:authorize-setting',section),
   updateSettings:input=>ipcRenderer.invoke('managed:settings-update',input),
@@ -17,7 +19,7 @@ contextBridge.exposeInMainWorld('safetynet', {
   back:()=>ipcRenderer.invoke('managed:back'),forward:()=>ipcRenderer.invoke('managed:forward'),reload:()=>ipcRenderer.invoke('managed:reload'),
   ai:prompt=>ipcRenderer.invoke('managed:ai',prompt),
   inspectFile:()=>ipcRenderer.invoke('managed:inspect-file'),
-  agentConnection:()=>ipcRenderer.invoke('managed:agent-connection'),
+  agentConnection:principalId=>ipcRenderer.invoke('managed:agent-connection',principalId),
   toggleAI:open=>ipcRenderer.invoke('managed:ai-panel',open),
   toggleVault:open=>ipcRenderer.invoke('managed:vault-panel',open),
   vaultStatus:()=>ipcRenderer.invoke('managed:vault-status'),