Module browser_identity 

Which cookie jar a browser tab browses as: its block’s browser:identity (docs/specs/SPEC_BROWSER_PANE_PROFILES_MENU_2026_10_09.md §5–§6). Absent for Personal; incognito:<jar> for an in-memory jar of its own, which the CEF host makes on first use. Set when the tab is opened and never changed: to browse as someone else, open another tab.

Constants

IDENTITY_META_KEY 🔒

MAX_INCOGNITO_JARS 🔒

Most Incognito jars open at once: each is its own Chrome profile with its own renderer (identities spec §4.3). The host keeps the same cap.

Functions

check_agent_may_use 🔒

An agent opening a browser tab some other way (pane.open, the HTTP pane open) with a browser:identity: a named profile only if agents may use it.

check_new_tab 🔒

Check the identity a client gives a new browser tab (pane.open): an Incognito one that is well formed, within the cap unless it shares a jar already open. Anything else fails the open rather than quietly browsing in the shared jar.

for_agent_open 🔒

OpenBrowser’s profile: give the agent’s new tab the identity it asked for, checked like any new tab (the platform, the Incognito cap).

identity_for_agent 🔒

The identity an agent’s OpenBrowser asked for by profile browses as: none (Personal) for “personal” or nothing; a fresh Incognito jar for “incognito”, always allowed since it gives the agent less, not more; and a named profile (by name, any case, or id) only when the user switched on “Agents may use it” for it in Settings → Browser (profiles spec §5).

identity_of 🔒

inherit 🔒

A popup pane browses as the tab that opened it: same jar, so a sign-in in it signs in the tab.

is_incognito 🔒

Is identity a well-formed Incognito identity?

jars_available 🔒

How many more Incognito jars a layout replay may open: the cap less those open now (none when they can’t be counted).

live_jars 🔒

The Incognito identities blocks use now: the jars the host must keep. None when the store can’t be read: the host then keeps every jar, rather than taking an empty list as “no tab uses any” and signing them all out.

profile_id 🔒

The profile id of a profile:<id> identity.

profile_ids 🔒

The ids of the named profiles there are, or None when they can’t be read.

refresh_for_replay 🔒

For a layout being replayed: each Incognito identity becomes a fresh one, so the replay doesn’t share a jar with a tab still open. Tabs that shared a jar keep sharing one. fresh maps old to new across the replay; at most available fresh jars are made. Returns false for a tab that would need one more: it is left out of the replay, not opened as a blank pane or in the shared jar.