feat: add browser script skill execution

src/security/mac_policy.rs

@@ -3,7 +3,7 @@ use std::path::Path;
 
 use serde::{Deserialize, Serialize};
 
-use crate::pipe::Action;
+use crate::pipe::{Action, ExecutionSurfaceMetadata};
 use crate::security::SecurityError;
 
 #[derive(Debug, Clone, Serialize, Deserialize)]
@@ -77,6 +77,13 @@ impl MacPolicy {
         Ok(())
     }
 
+    pub fn privileged_surface_metadata(&self) -> ExecutionSurfaceMetadata {
+        let mut metadata = ExecutionSurfaceMetadata::privileged_browser_pipe("mac_policy");
+        metadata.allowed_domains = self.domains.allowed.clone();
+        metadata.allowed_actions = self.pipe_actions.allowed.clone();
+        metadata
+    }
+
     fn validate_rules(&self) -> Result<(), SecurityError> {
         if self.version.trim().is_empty() {
             return Err(SecurityError::InvalidRules(