fix(browser): let the host own control request IDs

[tamashi095]

The browser host now allocates request IDs for all public control and observation calls. SDK console calls and direct host calls can interleave without maintaining competing counters, while typed acknowledgements retain the assigned ID and existing backpressure semantics.

This isolates the Astra-approved #393 capability and the separately Astra-approved #409 CI fixture correction. It excludes the unqualified PCM ownership move in #398. Rust, WASM, ABI identities and raw worklet messages are unchanged.

Validation: #393 dedicated review passed request/exhaustion mutations, packed type and runtime consumers, and Chromium/Firefox/Playwright WebKit qualification. #409 dedicated review passed the Node22.23.2 host suite, vocabulary mutations and deterministic zero/one-miss telemetry discriminators. The dedicated Astra isolated-branch audit passed at 1814bab9; all host/SDK/crate trees match the approved #393 checkpoint and the CI fixture matches approved #409. All required CI passed in run 33937802586 at the same head, including Chromium, Firefox and Playwright WebKit. No merge or package publication is claimed.

Related completed issues: #393, #409.

[tamashi095]

PR #413 delivery isolation — dedicated Astra review

PASS — delivery isolation only. Audited clean head 1814bab9d43a710b9edb09be7a1c0f97d88f0a00 on codex/dx-host-control. GitHub PR #413 independently reports that exact head, base main, OPEN/draft. Required remote qualification is still in progress; this is not a CI-green, merge, publication, or new product-qualification claim.

Scope and identity

• Read repository AGENTS.md, issue Give the browser host sole ownership of its request-id ledger #393/Document host exhaustion test seam and make telemetry fixture deterministic #409 specs, and their dedicated Astra PASS reports (/private/tmp/dx-393-astra-review-attempt3.md, /private/tmp/dx-409-astra-review-attempt1.md).
• The complete hosts, sdk, and crates trees, Cargo manifests/lock, wrapper, and observation vocabulary checker are byte-identical to Give the browser host sole ownership of its request-id ledger #393 PASS bed7634c7bb86ede24b577dc09ab9895208d803f. This includes runtime host/declarations, browser qualification, every SDK test/type/packed-consumer probe, raw worklet, Rust, and artifact pin. There are no Move the existing browser PCM feed into the TypeScript SDK #405 PCM changes or added PCM paths.
• The only four paths differing from Give the browser host sole ownership of its request-id ledger #393 PASS are the Give the browser host sole ownership of its request-id ledger #393 delivery record, Document host exhaustion test seam and make telemetry fixture deterministic #409 spec, environment vocabulary, and hermetic .mjs fixture. Vocabulary blob e99c709cceaea1c17bf9aecd1d23b2545414c606 and fixture blob cbe905574a7325ca2aa192776f076ce2c340a8d1 exactly match Document host exhaustion test seam and make telemetry fixture deterministic #409 reviewed 04bbf4e5eccbc2c141ed7ead44629edfd0aefde3. The Document host exhaustion test seam and make telemetry fixture deterministic #409 spec differs only by the subsequent truthful Astra PASS record; Give the browser host sole ownership of its request-id ledger #393 adds its verdict and isolation record.
• Inspected the fixture delta: only the deterministic clock/helper and telemetry window replacement; all Give the browser host sole ownership of its request-id ledger #393 request-ID/source ownership coverage survives unchanged. Zero misses and exactly one injected miss remain exact assertions, with stronger finite-field and post-release read assertions.
• PR GitHub file list independently matches the union of approved Give the browser host sole ownership of its request-id ledger #393/Document host exhaustion test seam and make telemetry fixture deterministic #409 paths. No workflow, generated artifact, dependency, or additional source change is present. The separate package-evidence checkout is exactly bed7634c; unchanged SDK/product trees preserve its prior reviewed qualification applicability without a redundant rebuild.

Independent focused execution

On Node v22.23.2, with GNU sed selected for shell vocabulary mutations:

• Hermetic AudioWorklet suite PASS: 250 result-zero, send IDs 2..251, adjacent, observe single allocation.
• Private transformed-host safe-integer exhaustion PASS; unchecked-increment red mutation fails with an assertion as required.
• Environment vocabulary PASS (99 names), and its unchanged mutation suite PASS.
• Command-reason vocabulary and all 20 self-test red mutations PASS.
• git diff --check PASS; working tree remains clean.

No full Rust/browser/package rebuild was needed for this content-identical delivery. The previously reviewed full wrapper, SDK/type/packed consumer, and actual-browser evidence remains applicable to unchanged files. This audit preserves closed #393 product PASS and independent #409 tooling PASS; it is not a fourth implementation attempt. Root owns review-ready marking, required remote qualification, and final GitHub synchronization. No repository edits, commits, pushes, merge, or publication were made by this reviewer.

[tamashi095]

All required CI is green at reviewed head 1814bab9d43a710b9edb09be7a1c0f97d88f0a00: qualification run 33937802586. This includes SDK packaging, AudioWorklet gates, policy/lint, native/WASM checks and Chromium/Firefox/Playwright WebKit qualification. Dedicated Astra delivery audit also passed. No merge or publication has been performed.