File mcp-browser-approval-ownership.test.ts

e2e/selfhost/mcp-browser-approval-ownership.test.ts:None–None

// Selfhost-only: the browser-approval HTTP endpoints are session-scoped. A
// signed-in user who does not own the MCP session must not be able to read the
// paused execution or record the human decision for it.
import { randomBytes } from "node:crypto";