@absolutejs/agent-exchange-local

createLocalCodeRecipient creates per-request nonexportable recipient keys, validates the authenticated exchange context, requester, service, mailbox, operation and challenge, rechecks authorization, prevents replay, and sends the plaintext only to a PrivateClipboard. The receipt contains no code. Remote hosts receive only the public key; the mailbox endpoint seals to that key using ABS E2EE. createPostgresLocalDeliveryStore carries ciphertext and receipts between authenticated endpoints with fixed recipient keys and bounded expiry. Deploy its LOCAL_DELIVERY_MIGRATION before handling requests. Hosts must recheck owner identity and current permission on every read and acknowledgement.

@absolutejs/agent-exchange-local/windows provides the Windows/WSL clipboard adapter. It feeds six digits through stdin to a fixed short-lived native helper, opts out of Windows history/cloud sync, and clears its own clipboard write after 30 seconds (LOCAL_CLIPBOARD_TTL_MS, counted from the write, not from the exchange request) using the clipboard sequence under a native clipboard lock. It does not clear a later clipboard write. No secret enters argv, env, files, stdout or stderr. Other platforms fail closed until a private adapter is supplied.