@dassi_ai/cli 0.3.0 → 0.5.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "dassi",
   "description": "Drive the Dassi Chrome extension from Claude Code. Pick tabs/groups, then run AI agent or browser tools against them.",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "author": {
     "name": "Omnify Labs",
     "email": "team@dassi.ai"

package/README.md

@@ -2,6 +2,22 @@
 
 Standalone CLI for the [Dassi](../extension/README.md) Chrome extension — run browser automation from the terminal.
 
+## Quickstart
+
+```bash
+# 1. Install the Dassi extension from the Chrome Web Store and sign in.
+# 2. Open the Dassi side panel once — this wakes the extension so the CLI can reach it.
+# 3. Run a command (no install needed):
+npx @dassi_ai/cli@latest list-tabs                 # find a TAB ID
+npx @dassi_ai/cli@latest run "summarize this page" --tab <id>
+```
+
+Prefer a permanent `dassi` command? `npm install -g @dassi_ai/cli` (Node ≥ 20.11), then drop the `npx @dassi_ai/cli@latest` prefix.
+
+Two things that trip people up:
+- **`run` needs a target** — pass `--tab <id>` (or `--group <id>` / `--group-title <name>`). `--profile` only selects *which* connected Chrome, not the tab.
+- **Multiple Chrome windows/profiles connected?** Commands need `--profile <label>`; run `dassi list-profiles` to see the labels (one profile = no flag needed).
+
 ## Installation
 
 ```bash
@@ -62,9 +78,23 @@ dassi launch --label qa --dist some/dist    # custom label + dist
 dassi list-tabs --profile dev               # find a tab id in the launched profile
 dassi run "summarize this page" --tab <id> --profile dev
 dassi launch --stop                         # close the "dev" Chrome (or --stop-all)
+# Pass extra args to Chrome by appending `-- <args>` after all CLI flags
+# (forwarded verbatim in both load modes; rejected on non-launch commands):
+dassi launch -- --headless=new --remote-debugging-port=9222
 # Note: launch reuses the default daemon (port 18790). To launch on an isolated
 # port (DASSI_BRIDGE_PORT=18791 dassi launch), no default daemon may be running —
 # it errors clearly otherwise, since it can't confirm the running daemon's port.
+#
+# How the extension is loaded (auto-detected per Chrome binary):
+#  • Branded Google Chrome (137+) disabled the `--load-extension` flag, so launch
+#    installs the dist at runtime via the `Extensions.loadUnpacked` CDP command over
+#    `--remote-debugging-pipe`. Because such an extension lives only as long as the
+#    debugging pipe, launch spawns a detached `__launch-hold` helper that keeps the
+#    pipe open; `--stop` kills the helper, which closes the pipe and its Chrome.
+#  • Chrome for Testing / Chromium still honour `--load-extension` (persistent), so
+#    launch uses that directly there — no helper. Point at one with `--chrome <path>`.
+#  • The mode is auto-detected from the binary; override with `--load-mode auto|pipe|flag`
+#    (e.g. `dassi launch --chrome <cft> --load-mode pipe` to exercise the pipe path on CfT).
 
 # Show version / help
 dassi --version

package/_launch-pipe.mjs

@@ -0,0 +1,102 @@
+/**
+ * CDP-over-pipe transport for `dassi launch`. Chrome 137+ branded builds disabled the
+ * `--load-extension` flag, so the dist is installed at runtime via the
+ * `Extensions.loadUnpacked` CDP command over `--remote-debugging-pipe`. This module is
+ * the minimal, dependency-free client for that exchange.
+ *
+ * PRIVATE (underscore-prefixed): import these symbols from `launch.mjs`, which re-exports
+ * them. `launch.mjs` is the single public gateway for the launch module.
+ */
+
+/**
+ * Minimal CDP client over Chrome's `--remote-debugging-pipe` transport. Messages are
+ * JSON framed with a trailing NUL (`\0`) byte; replies are matched back by `id`.
+ * No external deps — the CLI only needs to issue a couple of commands at launch.
+ * @param {{ writable: import('stream').Writable; readable: import('stream').Readable }} pipe
+ *   `writable` = Chrome's CDP input (fd 3); `readable` = Chrome's CDP output (fd 4).
+ * @returns {{ send: (method: string, params?: object) => Promise<object>; dispose: () => void }}
+ */
+export function cdpPipeClient({ writable, readable }) {
+  let nextId = 1;
+  const pending = new Map();
+  let buf = Buffer.alloc(0);
+  const onData = (chunk) => {
+    buf = Buffer.concat([buf, chunk]);
+    let nul;
+    // Reason: a single chunk may carry several NUL-delimited frames, or a partial one —
+    // drain every complete frame and keep the remainder buffered for the next chunk.
+    while ((nul = buf.indexOf(0)) !== -1) {
+      const frame = buf.subarray(0, nul).toString('utf8');
+      buf = buf.subarray(nul + 1);
+      if (!frame) continue;
+      let msg;
+      try { msg = JSON.parse(frame); } catch { continue; }
+      const entry = msg.id != null ? pending.get(msg.id) : undefined;
+      if (!entry) continue; // an event, or a reply we're not waiting on
+      pending.delete(msg.id);
+      if (msg.error) entry.reject(new Error(msg.error.message || `CDP error ${msg.error.code ?? ''}`));
+      else entry.resolve(msg.result ?? {});
+    }
+  };
+  readable.on('data', onData);
+  return {
+    send(method, params = {}) {
+      const id = nextId++;
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        writable.write(`${JSON.stringify({ id, method, params })}\0`);
+      });
+    },
+    dispose() {
+      readable.off('data', onData);
+      for (const { reject } of pending.values()) reject(new Error('CDP pipe disposed'));
+      pending.clear();
+    },
+  };
+}
+
+/**
+ * Install the unpacked dist into the just-launched Chrome over the CDP pipe, then
+ * open the seed options page (so the extension persists label+bridgePort and dials
+ * the daemon). This is the runtime replacement for the disabled `--load-extension`.
+ *
+ * On success the pipe is left OPEN (still draining Chrome's CDP output so its buffer
+ * can't fill) and a `dispose()` is returned — the caller MUST call it once the
+ * profile has registered. Reason: branded Chrome discards an automation-created tab
+ * (the seed page) if the debugging pipe closes before it finishes loading; keeping
+ * the pipe alive until the bridge registers lets the seed run.
+ * @param {{ child: import('child_process').ChildProcess; distPath: string; label: string; bridgePort: number; timeoutMs?: number }} opts
+ * @returns {Promise<{ id: string; dispose: () => void }>} the loaded extension id + a pipe closer.
+ * @throws if the pipe fds are missing or a CDP command errors/times out.
+ */
+export async function loadExtensionOverPipe({ child, distPath, label, bridgePort, timeoutMs = 15000 }) {
+  const writable = child.stdio?.[3];
+  const readable = child.stdio?.[4];
+  if (!writable || !readable) {
+    throw new Error('Chrome was not spawned with a CDP pipe (fds 3/4 missing).');
+  }
+  const cdp = cdpPipeClient({ writable, readable });
+  // Reason: capture + clear the timer so a fast-resolving CDP command doesn't leave a
+  // pending setTimeout keeping the event loop alive for the full timeoutMs.
+  const withTimeout = (p, what) => {
+    let timer;
+    const timeout = new Promise((_, r) => {
+      timer = setTimeout(() => r(new Error(`CDP ${what} timed out after ${timeoutMs}ms`)), timeoutMs);
+    });
+    return Promise.race([p, timeout]).finally(() => clearTimeout(timer));
+  };
+  try {
+    const loaded = await withTimeout(cdp.send('Extensions.loadUnpacked', { path: distPath }), 'Extensions.loadUnpacked');
+    const id = loaded.id;
+    if (!id) throw new Error('Extensions.loadUnpacked returned no extension id.');
+    // Reason: open the seed page AFTER the extension exists (it isn't loaded at
+    // startup anymore), so the options page persists label+bridgePort and the
+    // extension's bridge connects to the daemon's actual port.
+    const seed = `chrome-extension://${id}/options.html?label=${encodeURIComponent(label)}&bridgePort=${bridgePort}`;
+    await withTimeout(cdp.send('Target.createTarget', { url: seed }), 'Target.createTarget');
+    return { id, dispose: () => cdp.dispose() };
+  } catch (err) {
+    cdp.dispose();
+    throw err;
+  }
+}

package/daemon-client.mjs

@@ -0,0 +1,227 @@
+/**
+ * Daemon client — the CLI side of the daemon protocol. Extracted from
+ * dassi.mjs to keep that file within the CLAUDE.md 500-line limit.
+ *
+ * Covers spawning the daemon, waiting for its ready file, the Unix-socket
+ * NDJSON transport, and the interactive onboarding flow (install prompt +
+ * sign-in poll loop).
+ */
+
+import * as net from 'net';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as child_process from 'child_process';
+import { fileURLToPath } from 'url';
+import {
+  getSocketPath,
+  getReadyFile,
+  isDaemonRunning,
+  parseReadyPayload,
+  DASSI_EXTENSION_ID,
+} from './dassi-shared.mjs';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const DAEMON_SCRIPT = path.join(__dirname, 'dassi-daemon.mjs');
+const READY_POLL_MS = 100;
+const READY_TIMEOUT_MS = 30_000;
+const LOGIN_POLL_MS = 2_000;
+const LOGIN_TIMEOUT_MS = 5 * 60_000;
+const CHROME_WEB_STORE_URL = `https://chromewebstore.google.com/detail/dassi-ai-browser-agent-fo/${DASSI_EXTENSION_ID}`;
+
+// ─── Daemon management ────────────────────────────────────────────────────────
+
+/**
+ * Ensures the daemon is running for the given session.
+ * Spawns it as a detached background process if the PID file is missing or stale.
+ * @param {string} session
+ */
+export function ensureDaemonRunning(session) {
+  if (isDaemonRunning(session)) return;
+
+  // Reason: detached + unref means the daemon outlives the CLI process
+  const daemon = child_process.spawn(process.execPath, [DAEMON_SCRIPT], {
+    detached: true,
+    stdio: 'ignore',
+    env: { ...process.env, DASSI_SESSION: session },
+  });
+  daemon.unref();
+}
+
+/**
+ * Polls for the ready file until it appears or the timeout elapses.
+ * Resolves with the parsed ready payload.
+ * @param {string} readyFile
+ * @param {number} [timeoutMs]
+ * @returns {Promise<{ status: string; [key: string]: unknown }>}
+ */
+export function waitForReady(readyFile, timeoutMs = READY_TIMEOUT_MS) {
+  return new Promise((resolve, reject) => {
+    const deadline = Date.now() + timeoutMs;
+    const check = () => {
+      if (fs.existsSync(readyFile)) {
+        try {
+          resolve(parseReadyPayload(fs.readFileSync(readyFile, 'utf8')));
+          return;
+        } catch { /* file may be partially written — keep polling */ }
+      }
+      if (Date.now() >= deadline) {
+        const seconds = Math.round(timeoutMs / 1000);
+        reject(new Error(`Timed out waiting for Dassi daemon to start (${seconds}s)`));
+        return;
+      }
+      setTimeout(check, READY_POLL_MS);
+    };
+    check();
+  });
+}
+
+/**
+ * Connects to the daemon Unix socket, sends one NDJSON command, and reads the response.
+ * @param {string} socketPath - Unix socket path.
+ * @param {object} command - Command object to send (will be JSON-stringified).
+ * @returns {Promise<object>} Parsed response object.
+ */
+export function sendCommand(socketPath, command) {
+  return new Promise((resolve, reject) => {
+    const socket = net.createConnection(socketPath);
+    let buffer = '';
+    let settled = false;
+
+    // Reason: guard against double-settlement since 'close' fires after socket.destroy()
+    // in the normal data path, and we don't want the close handler to re-resolve
+    const settle = (fn, val) => {
+      if (settled) return;
+      settled = true;
+      fn(val);
+    };
+
+    socket.on('connect', () => {
+      socket.write(JSON.stringify(command) + '\n');
+    });
+
+    socket.on('data', (chunk) => {
+      buffer += chunk.toString();
+      const nl = buffer.indexOf('\n');
+      if (nl !== -1) {
+        const line = buffer.slice(0, nl);
+        socket.destroy();
+        try { settle(resolve, JSON.parse(line)); }
+        catch { settle(reject, new Error(`Invalid JSON from daemon: ${line}`)); }
+      }
+    });
+
+    socket.on('error', (err) => settle(reject, err));
+
+    socket.on('close', () => {
+      if (settled) return;
+      // Reason: attempt to parse whatever arrived before the socket closed unexpectedly
+      if (buffer.trim()) {
+        try { settle(resolve, JSON.parse(buffer.trim())); }
+        catch { settle(reject, new Error(`Invalid JSON from daemon: ${buffer.trim()}`)); }
+      } else {
+        settle(reject, new Error('Daemon closed connection without a response'));
+      }
+    });
+  });
+}
+
+// ─── Login helpers ────────────────────────────────────────────────────────────
+
+/**
+ * Defense-in-depth check for `optionsUrl` before handing it to the `open`
+ * package. Legit URLs always come from `chrome.runtime.getURL('options.html')`
+ * → `chrome-extension://<id>/options.html`. Anything else is unexpected and
+ * we should not auto-launch it (the `open` package shells out to the OS URL
+ * handler).
+ * @param {unknown} optionsUrl
+ * @returns {boolean}
+ */
+export function isValidOptionsUrl(optionsUrl) {
+  return typeof optionsUrl === 'string' && /^chrome-extension:\/\/[a-z]{32}\//.test(optionsUrl);
+}
+
+/**
+ * Polls the daemon's status until the user signs in (extension reports
+ * authenticated=true) or the LOGIN_TIMEOUT_MS deadline elapses. On entry,
+ * best-effort auto-opens the extension's options page (subject to the
+ * isValidOptionsUrl guard above).
+ * @param {string} socketPath - Path to the daemon Unix socket.
+ * @param {string | undefined} optionsUrl - URL of the Dassi options page.
+ * @returns {Promise<void>} Resolves on successful login; throws on timeout.
+ */
+export async function waitForLogin(socketPath, optionsUrl) {
+  console.error(`⚠️  Dassi is installed but you're not signed in.\n    Opening the Dassi settings page...\n`);
+
+  // Auto-open the options page — best-effort (package may not be installed).
+  // Reason: only open URLs the extension would legitimately produce
+  // (chrome.runtime.getURL → `chrome-extension://<id>/options.html`).
+  // Defense-in-depth: even though optionsUrl is sourced from the daemon's
+  // ready file (which lives in our owner-only ~/.dassi/ dir), validating the
+  // protocol prevents `open` from launching arbitrary URIs/shell-handlers if
+  // the file is ever tampered with.
+  if (isValidOptionsUrl(optionsUrl)) {
+    try {
+      const { default: open } = await import('open');
+      await open(String(optionsUrl));
+    } catch {
+      console.error(`    Please open: ${optionsUrl}`);
+    }
+  } else if (optionsUrl) {
+    console.error(`    Refusing to auto-open unexpected URL: ${optionsUrl}\n    Please open the Dassi settings page manually.`);
+  }
+
+  // Poll the daemon socket every LOGIN_POLL_MS until authenticated
+  console.error('    Waiting for sign-in... (Ctrl+C to cancel)');
+  const deadline = Date.now() + LOGIN_TIMEOUT_MS;
+  let pollIndex = 0;
+  while (Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, LOGIN_POLL_MS));
+    try {
+      // Reason: increment poll index so each status request has a unique id for tracing
+      const resp = await sendCommand(socketPath, { id: `poll-auth-${pollIndex++}`, action: 'status' });
+      if (resp.success && resp.data?.authenticated) {
+        console.error(`    ✓  Signed in as ${resp.data.email}\n    ✓  Ready\n`);
+        return;
+      }
+    } catch { /* daemon may not be socket-ready yet — keep polling */ }
+  }
+
+  throw new Error('Login timed out. Please sign in and try again.');
+}
+
+// ─── Daemon readiness ─────────────────────────────────────────────────────────
+
+/**
+ * Ensures the daemon is running and ready, handling onboarding if needed.
+ * @param {string} session
+ * @returns {Promise<string>} The daemon's Unix socket path.
+ */
+export async function ensureDaemonReady(session) {
+  const socketPath = getSocketPath(session);
+  const readyFile = getReadyFile(session);
+
+  // Reason: delete any stale ready file from a previous run so the new daemon
+  // writes a fresh one. Skip if a daemon is already running to avoid racing.
+  if (!isDaemonRunning(session)) {
+    try { fs.unlinkSync(readyFile); } catch { /* ok if missing */ }
+  }
+
+  ensureDaemonRunning(session);
+
+  const ready = await waitForReady(readyFile);
+
+  if (ready.status === 'extension_not_installed') {
+    console.error(
+      `❌  Dassi extension not detected.\n\n` +
+      `   Install it from:\n   ${CHROME_WEB_STORE_URL}\n\n` +
+      `   Then run this command again.`
+    );
+    process.exit(1);
+  }
+
+  if (ready.status === 'needs_login') {
+    await waitForLogin(socketPath, ready.optionsUrl ? String(ready.optionsUrl) : undefined);
+  }
+
+  return socketPath;
+}

package/dassi.mjs

@@ -4,35 +4,25 @@
  * Protocol-compatible with agent-browser: {id, action, ...} → {id, success, data/error}
  */
 
-import * as net from 'net';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as child_process from 'child_process';
 import { fileURLToPath, pathToFileURL } from 'url';
-import {
-  getSocketPath,
-  getReadyFile,
-  isDaemonRunning,
-  parseReadyPayload,
-  validateSession,
-  DASSI_EXTENSION_ID,
-  getAppDir,
-  getLaunchesFile,
-} from './dassi-shared.mjs';
-import { handleLaunch, handleStop } from './launch.mjs';
+import { getSocketPath, validateSession, getAppDir, getLaunchesFile } from './dassi-shared.mjs';
+import { ensureDaemonRunning, sendCommand, ensureDaemonReady } from './daemon-client.mjs';
+import { dispatchLaunch } from './launch.mjs';
 import { parseToolCommand, requireTarget, parseStrictInt } from './tool-commands.mjs';
 import { runWithGroupExpansion } from './group-expansion.mjs';
 import { formatResponse } from './format-response.mjs';
 import { HELP_TEXT } from './help-text.mjs';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const DAEMON_SCRIPT = path.join(__dirname, 'dassi-daemon.mjs');
 const VERSION = JSON.parse(fs.readFileSync(path.join(__dirname, 'package.json'), 'utf8')).version;
-const READY_POLL_MS = 100;
-const READY_TIMEOUT_MS = 30_000;
-const LOGIN_POLL_MS = 2_000;
-const LOGIN_TIMEOUT_MS = 5 * 60_000;
-const CHROME_WEB_STORE_URL = `https://chromewebstore.google.com/detail/dassi-ai-browser-agent-fo/${DASSI_EXTENSION_ID}`;
+
+// Reason: tests import isValidOptionsUrl from this module (it moved to
+// daemon-client.mjs with the rest of the daemon-client unit) — re-export to
+// keep the public surface and the tests unchanged.
+export { isValidOptionsUrl } from './daemon-client.mjs';
 
 // ─── Arg parsing ──────────────────────────────────────────────────────────────
 
@@ -47,6 +37,16 @@ const CHROME_WEB_STORE_URL = `https://chromewebstore.google.com/detail/dassi-ai-
 export function parseCliArgs(argv) {
   const args = [...argv];
 
+  // Reason: hoist the `--` split to BEFORE global flag parsing so that Chrome
+  // passthrough tokens like --json, --label, --profile, or --stop can never be
+  // mistakenly consumed as CLI flags. Everything after the first `--` token is
+  // sliced out here and stored verbatim in `chromeArgs`; the remaining `args`
+  // array is then parsed as usual with no risk of collision. Non-launch commands
+  // that supply a `--` separator are rejected loudly below (after the action is
+  // known) so callers get a clear error instead of silent data loss.
+  const sepIdx = args.indexOf('--');
+  const chromeArgs = sepIdx === -1 ? [] : args.splice(sepIdx).slice(1);
+
   // Reason: handle --version and --help before any flag parsing so they work
   // even when other flags like --session are incomplete (e.g. `dassi --version --session`)
   if (consumeFlag(args, '--version')) {
@@ -67,6 +67,13 @@ export function parseCliArgs(argv) {
   const command = args.shift();
   if (!command) throw new Error('No command specified. Run: dassi --help');
 
+  // Reason: chromeArgs (tokens after `--`) are only meaningful for the `launch`
+  // command. Any other command that supplies `--` tokens would have them silently
+  // dropped — fail loudly instead so the caller knows their intent was not honoured.
+  if (chromeArgs.length > 0 && command !== 'launch') {
+    throw new Error("'--' is only valid with the launch command");
+  }
+
   if (command === 'list-tabs') {
     const all = consumeFlag(args, '--all');
     return finish('list_tabs', all ? { all: true } : {});
@@ -86,10 +93,16 @@ export function parseCliArgs(argv) {
   }
 
   if (command === 'launch') {
-    if (consumeFlag(args, '--stop-all')) return finish('launch_stop', { all: true });
+    if (consumeFlag(args, '--stop-all')) {
+      // Reason: chromeArgs with --stop-all makes no sense — reject to prevent confusion.
+      if (chromeArgs.length > 0) throw new Error("'--' chrome args cannot be combined with launch --stop-all");
+      return finish('launch_stop', { all: true });
+    }
     const stopIdx = args.indexOf('--stop');
     if (stopIdx !== -1) {
       args.splice(stopIdx, 1);
+      // Reason: chromeArgs with --stop makes no sense — reject to prevent confusion.
+      if (chromeArgs.length > 0) throw new Error("'--' chrome args cannot be combined with launch --stop");
       // Reason: resolve the stop label like the start path does — a positional
       // token after --stop wins, else the global --label/--profile (parsed into
       // `profile` before this branch), else the default. Keeps `--stop --label qa`
@@ -108,15 +121,22 @@ export function parseCliArgs(argv) {
     if (!/^[a-zA-Z0-9_-]{1,64}$/.test(launchLabel)) {
       throw new Error('--label must be 1–64 characters of letters, digits, hyphen, or underscore.');
     }
+    const loadMode = getFlag(args, '--load-mode') ?? 'auto'; // auto (detect) | pipe | flag
+    if (!['auto', 'pipe', 'flag'].includes(loadMode)) throw new Error('--load-mode must be one of: auto, pipe, flag.');
     return finish('launch', {
       label: launchLabel,
       dist: getFlag(args, '--dist') ?? null,
       chrome: getFlag(args, '--chrome') ?? null,
       profileDir: getFlag(args, '--profile-dir') ?? null,
+      loadMode,
       timeoutMs: timeoutRaw ? parseStrictInt(timeoutRaw, '--timeout') : 30000,
+      chromeArgs,
     });
   }
 
+  // Hidden helper command (detached child of `dassi launch` pipe mode); config via DASSI_HOLD_* env.
+  if (command === '__launch-hold') return finish('launch_hold', {});
+
   if (command === 'run') {
     const prompt = args.shift();
     if (!prompt) throw new Error('run requires a prompt argument');
@@ -193,167 +213,6 @@ function consumeFlag(args, flag) {
   return true;
 }
 
-// ─── Daemon management ────────────────────────────────────────────────────────
-
-/**
- * Ensures the daemon is running for the given session.
- * Spawns it as a detached background process if the PID file is missing or stale.
- * @param {string} session
- */
-export function ensureDaemonRunning(session) {
-  if (isDaemonRunning(session)) return;
-
-  // Reason: detached + unref means the daemon outlives the CLI process
-  const daemon = child_process.spawn(process.execPath, [DAEMON_SCRIPT], {
-    detached: true,
-    stdio: 'ignore',
-    env: { ...process.env, DASSI_SESSION: session },
-  });
-  daemon.unref();
-}
-
-/**
- * Polls for the ready file until it appears or the timeout elapses.
- * Resolves with the parsed ready payload.
- * @param {string} readyFile
- * @param {number} [timeoutMs]
- * @returns {Promise<{ status: string; [key: string]: unknown }>}
- */
-export function waitForReady(readyFile, timeoutMs = READY_TIMEOUT_MS) {
-  return new Promise((resolve, reject) => {
-    const deadline = Date.now() + timeoutMs;
-    const check = () => {
-      if (fs.existsSync(readyFile)) {
-        try {
-          resolve(parseReadyPayload(fs.readFileSync(readyFile, 'utf8')));
-          return;
-        } catch { /* file may be partially written — keep polling */ }
-      }
-      if (Date.now() >= deadline) {
-        const seconds = Math.round(timeoutMs / 1000);
-        reject(new Error(`Timed out waiting for Dassi daemon to start (${seconds}s)`));
-        return;
-      }
-      setTimeout(check, READY_POLL_MS);
-    };
-    check();
-  });
-}
-
-/**
- * Connects to the daemon Unix socket, sends one NDJSON command, and reads the response.
- * @param {string} socketPath - Unix socket path.
- * @param {object} command - Command object to send (will be JSON-stringified).
- * @returns {Promise<object>} Parsed response object.
- */
-export function sendCommand(socketPath, command) {
-  return new Promise((resolve, reject) => {
-    const socket = net.createConnection(socketPath);
-    let buffer = '';
-    let settled = false;
-
-    // Reason: guard against double-settlement since 'close' fires after socket.destroy()
-    // in the normal data path, and we don't want the close handler to re-resolve
-    const settle = (fn, val) => {
-      if (settled) return;
-      settled = true;
-      fn(val);
-    };
-
-    socket.on('connect', () => {
-      socket.write(JSON.stringify(command) + '\n');
-    });
-
-    socket.on('data', (chunk) => {
-      buffer += chunk.toString();
-      const nl = buffer.indexOf('\n');
-      if (nl !== -1) {
-        const line = buffer.slice(0, nl);
-        socket.destroy();
-        try { settle(resolve, JSON.parse(line)); }
-        catch { settle(reject, new Error(`Invalid JSON from daemon: ${line}`)); }
-      }
-    });
-
-    socket.on('error', (err) => settle(reject, err));
-
-    socket.on('close', () => {
-      if (settled) return;
-      // Reason: attempt to parse whatever arrived before the socket closed unexpectedly
-      if (buffer.trim()) {
-        try { settle(resolve, JSON.parse(buffer.trim())); }
-        catch { settle(reject, new Error(`Invalid JSON from daemon: ${buffer.trim()}`)); }
-      } else {
-        settle(reject, new Error('Daemon closed connection without a response'));
-      }
-    });
-  });
-}
-
-// ─── Login helpers ────────────────────────────────────────────────────────────
-
-/**
- * Defense-in-depth check for `optionsUrl` before handing it to the `open`
- * package. Legit URLs always come from `chrome.runtime.getURL('options.html')`
- * → `chrome-extension://<id>/options.html`. Anything else is unexpected and
- * we should not auto-launch it (the `open` package shells out to the OS URL
- * handler).
- * @param {unknown} optionsUrl
- * @returns {boolean}
- */
-export function isValidOptionsUrl(optionsUrl) {
-  return typeof optionsUrl === 'string' && /^chrome-extension:\/\/[a-z]{32}\//.test(optionsUrl);
-}
-
-/**
- * Polls the daemon's status until the user signs in (extension reports
- * authenticated=true) or the LOGIN_TIMEOUT_MS deadline elapses. On entry,
- * best-effort auto-opens the extension's options page (subject to the
- * isValidOptionsUrl guard above).
- * @param {string} socketPath - Path to the daemon Unix socket.
- * @param {string | undefined} optionsUrl - URL of the Dassi options page.
- * @returns {Promise<void>} Resolves on successful login; throws on timeout.
- */
-export async function waitForLogin(socketPath, optionsUrl) {
-  console.error(`⚠️  Dassi is installed but you're not signed in.\n    Opening the Dassi settings page...\n`);
-
-  // Auto-open the options page — best-effort (package may not be installed).
-  // Reason: only open URLs the extension would legitimately produce
-  // (chrome.runtime.getURL → `chrome-extension://<id>/options.html`).
-  // Defense-in-depth: even though optionsUrl is sourced from the daemon's
-  // ready file (which lives in our owner-only ~/.dassi/ dir), validating the
-  // protocol prevents `open` from launching arbitrary URIs/shell-handlers if
-  // the file is ever tampered with.
-  if (isValidOptionsUrl(optionsUrl)) {
-    try {
-      const { default: open } = await import('open');
-      await open(String(optionsUrl));
-    } catch {
-      console.error(`    Please open: ${optionsUrl}`);
-    }
-  } else if (optionsUrl) {
-    console.error(`    Refusing to auto-open unexpected URL: ${optionsUrl}\n    Please open the Dassi settings page manually.`);
-  }
-
-  // Poll the daemon socket every LOGIN_POLL_MS until authenticated
-  console.error('    Waiting for sign-in... (Ctrl+C to cancel)');
-  const deadline = Date.now() + LOGIN_TIMEOUT_MS;
-  let pollIndex = 0;
-  while (Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, LOGIN_POLL_MS));
-    try {
-      // Reason: increment poll index so each status request has a unique id for tracing
-      const resp = await sendCommand(socketPath, { id: `poll-auth-${pollIndex++}`, action: 'status' });
-      if (resp.success && resp.data?.authenticated) {
-        console.error(`    ✓  Signed in as ${resp.data.email}\n    ✓  Ready\n`);
-        return;
-      }
-    } catch { /* daemon may not be socket-ready yet — keep polling */ }
-  }
-
-  throw new Error('Login timed out. Please sign in and try again.');
-}
-
 // ─── Immediate actions ────────────────────────────────────────────────────────
 
 // HELP_TEXT lives in ./help-text.mjs (extracted to keep this file within the size limit).
@@ -375,43 +234,6 @@ function handleImmediateAction(action) {
   return false;
 }
 
-// ─── Daemon readiness ─────────────────────────────────────────────────────────
-
-/**
- * Ensures the daemon is running and ready, handling onboarding if needed.
- * @param {string} session
- * @returns {Promise<string>} The daemon's Unix socket path.
- */
-async function ensureDaemonReady(session) {
-  const socketPath = getSocketPath(session);
-  const readyFile = getReadyFile(session);
-
-  // Reason: delete any stale ready file from a previous run so the new daemon
-  // writes a fresh one. Skip if a daemon is already running to avoid racing.
-  if (!isDaemonRunning(session)) {
-    try { fs.unlinkSync(readyFile); } catch { /* ok if missing */ }
-  }
-
-  ensureDaemonRunning(session);
-
-  const ready = await waitForReady(readyFile);
-
-  if (ready.status === 'extension_not_installed') {
-    console.error(
-      `❌  Dassi extension not detected.\n\n` +
-      `   Install it from:\n   ${CHROME_WEB_STORE_URL}\n\n` +
-      `   Then run this command again.`
-    );
-    process.exit(1);
-  }
-
-  if (ready.status === 'needs_login') {
-    await waitForLogin(socketPath, ready.optionsUrl ? String(ready.optionsUrl) : undefined);
-  }
-
-  return socketPath;
-}
-
 // ─── Entry point ──────────────────────────────────────────────────────────────
 
 /**
@@ -431,14 +253,8 @@ export async function run() {
   const { action, params, session, json, profile } = parsed;
   handleImmediateAction(action);
 
-  if (action === 'launch') {
-    await handleLaunch(params, { spawn: child_process.spawn, ensureDaemonRunning, getSocketPath, sendCommand, appDir: getAppDir(), launchesFile: getLaunchesFile() });
-    return;
-  }
-  if (action === 'launch_stop') {
-    handleStop(params, { launchesFile: getLaunchesFile() });
-    return;
-  }
+  // Launch family (launch / --stop / __launch-hold) → launch.mjs.
+  if (await dispatchLaunch(action, params, { spawn: child_process.spawn, ensureDaemonRunning, getSocketPath, sendCommand, appDir: getAppDir(), launchesFile: getLaunchesFile() })) return;
 
   const socketPath = await ensureDaemonReady(session);
 

package/help-text.mjs

@@ -27,8 +27,10 @@ export const HELP_TEXT =
   '  status                          Check extension status\n' +
   '  bug-report [-o file]             Export debug logs from all contexts\n' +
   '  raw <json>                      Send raw JSON command\n' +
-  '  launch [--label <name>] [--dist <path>]\n' +
+  '  launch [--label <name>] [--dist <path>] [--chrome <path>]\n' +
+  '         [--load-mode auto|pipe|flag] [-- <chrome args…>]\n' +
   '                                  Open Chrome with a dev dist loaded\n' +
+  '                                  (args after -- go to Chrome, e.g. --headless=new)\n' +
   '  launch --stop [label] | --stop-all\n' +
   '                                  Stop a launched Chrome\n\n' +
   'Options:\n' +

package/launch.mjs

@@ -3,8 +3,14 @@
  * building Chrome launch args, and tracking launched instances.
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
+import { execFileSync, spawn as childSpawn } from 'child_process';
 import * as path from 'path';
 import { DASSI_EXTENSION_ID, getDaemonBridgePort, DEFAULT_BRIDGE_PORT, isDaemonRunning as isDaemonRunningImpl } from './dassi-shared.mjs';
+import { loadExtensionOverPipe } from './_launch-pipe.mjs';
+// `_launch-pipe.mjs` is private (underscore-prefixed): `launch.mjs` is the SINGLE public
+// gateway for the launch module. Re-export the pipe transport here so every consumer
+// (including the unit tests) imports it from this one surface, never from the private file.
+export { cdpPipeClient, loadExtensionOverPipe } from './_launch-pipe.mjs';
 
 /**
  * Resolve the path to an installed Chrome binary.
@@ -42,18 +48,38 @@ export function resolveDistPath({ dist = null, cwd = process.cwd(), exists = exi
 }
 
 /**
- * Build the Chrome command-line args that load the dev dist into an isolated
- * profile and open the options page to seed the profile label.
- * @param {{ distPath: string; profileDir: string; label: string; bridgePort: number }} opts
- *   bridgePort: the daemon port to seed (use getDaemonBridgePort() — no default
- *   here, to avoid duplicating its canonical 18790).
+ * Build the Chrome args for a pipe-driven launch.
+ *
+ * The extension is NOT loaded via the `--load-extension` flag: Chrome 137+ branded
+ * builds reject it (`ERR_BLOCKED_BY_CLIENT`), and the `--disable-features=
+ * DisableLoadExtensionCommandLineSwitch` escape hatch is gone in Chrome 149. Instead
+ * the dist is installed at runtime over the CDP pipe via `Extensions.loadUnpacked`
+ * (see {@link loadExtensionOverPipe}). That command is only accepted over the
+ * `--remote-debugging-pipe` transport (fds 3/4) — not `--remote-debugging-port` —
+ * and requires `--enable-unsafe-extension-debugging`. Works on branded Chrome,
+ * Chrome for Testing, and Chromium alike.
+ * @param {{ profileDir: string; chromeArgs?: string[] }} opts
+ * @returns {string[]} Chrome args.
+ */
+export function buildLaunchArgs({ profileDir, chromeArgs = [] }) {
+  return [
+    '--remote-debugging-pipe',
+    '--enable-unsafe-extension-debugging',
+    `--user-data-dir=${profileDir}`,
+    '--no-first-run',
+    '--no-default-browser-check',
+    ...chromeArgs,
+  ];
+}
+
+/**
+ * Build Chrome args for the legacy `--load-extension` path (Chrome for Testing /
+ * Chromium, which still honour it and load the extension *persistently*). The dist
+ * is loaded at startup, so the seed options URL can ride along as the startup tab.
+ * @param {{ distPath: string; profileDir: string; label: string; bridgePort: number; chromeArgs?: string[] }} opts
  * @returns {string[]} Chrome args (the final entry is the seed URL to open).
  */
-export function buildLaunchArgs({ distPath, profileDir, label, bridgePort }) {
-  // Reason: seed BOTH label and bridgePort — the options page persists them so the
-  // launched extension connects to the daemon's actual port (matters when
-  // DASSI_BRIDGE_PORT moves the daemon off the default 18790; without it the
-  // extension falls back to 18790 and the isolated-port launch times out).
+export function buildFlagArgs({ distPath, profileDir, label, bridgePort, chromeArgs = [] }) {
   const seed = `options.html?label=${encodeURIComponent(label)}&bridgePort=${bridgePort}`;
   return [
     `--load-extension=${distPath}`,
@@ -61,10 +87,31 @@ export function buildLaunchArgs({ distPath, profileDir, label, bridgePort }) {
     `--user-data-dir=${profileDir}`,
     '--no-first-run',
     '--no-default-browser-check',
+    // Reason: extra args must precede the positional seed URL — Chrome treats
+    // everything after the first positional as URLs to open.
+    ...chromeArgs,
     `chrome-extension://${DASSI_EXTENSION_ID}/${seed}`,
   ];
 }
 
+/**
+ * Does this Chrome binary still support a *persistent* `--load-extension`?
+ * Branded Google Chrome 137+ disabled it (ERR_BLOCKED_BY_CLIENT); Chrome for Testing
+ * and Chromium still honour it. Detected from `--version` output. Defaults to false
+ * (→ pipe path) on any error — the pipe path works everywhere, so it's the safe
+ * fallback.
+ * @param {string} chromePath
+ * @param {(p: string) => string} [runVersion] inject for tests
+ * @returns {boolean} true → use `--load-extension`; false → use the CDP pipe.
+ */
+export function chromeSupportsLoadFlag(chromePath, runVersion = (p) => execFileSync(p, ['--version'], { encoding: 'utf8' })) {
+  try {
+    return /for testing|chromium/i.test(runVersion(chromePath));
+  } catch {
+    return false;
+  }
+}
+
 /**
  * Read the launches registry. Returns [] if the file is missing or unparseable.
  * @param {string} file
@@ -146,17 +193,47 @@ async function isLabelConnected({ sendCommand, socketPath, label }) {
 }
 
 /**
- * Launch Chrome (detached) with the dev dist loaded under a dedicated profile,
- * wait for the extension to register under `label`, then record it.
- * @param {{label:string; dist:string|null; chrome:string|null; profileDir:string|null; timeoutMs:number}} opts
- * @param {{ spawn: Function; ensureDaemonRunning: Function; getSocketPath: Function; sendCommand: Function;
- *          appDir: string; launchesFile: string;
- *          log?: Function; error?: Function; exit?: Function; mkdir?: Function }} deps
+ * Daemon pre-flight for a launch: validate the bridge port, spawn the (non-blocking)
+ * daemon, and refuse a duplicate label. Calls `exit(1)` + returns null on failure.
+ * @returns {Promise<{ bridgePort: number; socketPath: string } | null>}
+ */
+async function preflightLaunch({ ensureDaemonRunning, getSocketPath, sendCommand, isDaemonRunning, label, error, exit }) {
+  // Reason: `dassi launch` reuses the 'default' daemon session, but the session PID
+  // doesn't tell us its port. If a non-default DASSI_BRIDGE_PORT is requested while a
+  // default daemon is already running, we can't confirm it's on that port — fail clearly.
+  const bridgePort = getDaemonBridgePort();
+  if (bridgePort !== DEFAULT_BRIDGE_PORT && isDaemonRunning('default')) {
+    error(`❌  DASSI_BRIDGE_PORT=${bridgePort} is set, but a daemon is already running for the default session (it may be on a different port). Stop it first, or omit DASSI_BRIDGE_PORT to use the running daemon.`);
+    exit(1);
+    return null;
+  }
+  // Reason: only SPAWN the daemon (non-blocking) — none has connected yet.
+  ensureDaemonRunning('default');
+  const socketPath = getSocketPath('default');
+  // Reason: a same-label Chrome already running makes waitForProfile falsely succeed.
+  if (await isLabelConnected({ sendCommand, socketPath, label })) {
+    error(`❌  A profile labelled "${label}" is already connected. Run \`dassi launch --stop ${label}\` first, or use a different --label.`);
+    exit(1);
+    return null;
+  }
+  return { bridgePort, socketPath };
+}
+
+/**
+ * Launch Chrome with the dev dist loaded under a dedicated profile, wait for the
+ * extension to register under `label`, then record it. Auto-detects the load mode
+ * (pipe helper for branded Chrome / `--load-extension` for CfT/Chromium).
+ * @param {{label:string; dist:string|null; chrome:string|null; profileDir:string|null; loadMode?:string; timeoutMs:number; chromeArgs?:string[]}} opts
+ * @param {{ spawn: Function; ensureDaemonRunning: Function; getSocketPath: Function; sendCommand: Function; appDir: string; launchesFile: string; isDaemonRunning?: Function; detectLoadFlag?: Function; helperCommand?: string[]; log?: Function; error?: Function; exit?: Function; mkdir?: Function; kill?: Function }} deps
+ *   `detectLoadFlag` chooses pipe-vs-flag mode; `helperCommand` is the argv used to spawn the detached pipe-hold helper (both injectable for tests).
+ * @returns {Promise<void>} resolves once the launch is recorded (or `deps.exit` is called on failure).
  */
 export async function handleLaunch(opts, deps) {
   const {
     spawn, ensureDaemonRunning, getSocketPath, sendCommand, appDir, launchesFile,
     isDaemonRunning = isDaemonRunningImpl,
+    detectLoadFlag = chromeSupportsLoadFlag,
+    helperCommand = [process.execPath, process.argv[1]],
     log = console.log, error = console.error, exit = process.exit,
     mkdir = (d) => mkdirSync(d, { recursive: true }), kill = (pid) => process.kill(pid),
   } = deps;
@@ -165,65 +242,169 @@ export async function handleLaunch(opts, deps) {
   if (!target) return; // resolution failed (exit already called)
   const { distPath, chromePath, profileDir } = target;
 
-  // Reason: `dassi launch` reuses the 'default' daemon session, but the session PID
-  // doesn't tell us its port. If a non-default DASSI_BRIDGE_PORT is requested while a
-  // default daemon is already running, we can't confirm it's on that port — fail
-  // clearly rather than seed a port the extension can't reach (a silent timeout).
-  const bridgePort = getDaemonBridgePort();
-  if (bridgePort !== DEFAULT_BRIDGE_PORT && isDaemonRunning('default')) {
-    error(`❌  DASSI_BRIDGE_PORT=${bridgePort} is set, but a daemon is already running for the default session (it may be on a different port). Stop it first, or omit DASSI_BRIDGE_PORT to use the running daemon.`);
-    return exit(1);
-  }
-
-  // Reason: only SPAWN the daemon (non-blocking). NOT ensureDaemonReady — that waits
-  // for the ready file the daemon writes only after an extension connects; none is yet.
-  ensureDaemonRunning('default');
-  const socketPath = getSocketPath('default');
-
-  // Reason: a same-label Chrome already running makes waitForProfile falsely succeed
-  // (a second launch with the same --user-data-dir hands off to the existing process).
-  if (await isLabelConnected({ sendCommand, socketPath, label: opts.label })) {
-    error(`❌  A profile labelled "${opts.label}" is already connected. Run \`dassi launch --stop ${opts.label}\` first, or use a different --label.`);
-    return exit(1);
-  }
+  const pre = await preflightLaunch({ ensureDaemonRunning, getSocketPath, sendCommand, isDaemonRunning, label: opts.label, error, exit });
+  if (!pre) return; // a guard failed (exit already called)
+  const { bridgePort, socketPath } = pre;
 
-  const pid = await spawnAndConnect({ spawn, kill, sendCommand, socketPath, chromePath, distPath, profileDir, bridgePort, opts, error });
+  // Reason: branded Chrome 137+ disabled --load-extension, so install over the CDP pipe via
+  // a persistent helper. CfT/Chromium still honour --load-extension. --load-mode forces it;
+  // 'auto' (default) detects from the binary's --version.
+  const useFlag = opts.loadMode === 'flag' ? true : opts.loadMode === 'pipe' ? false : detectLoadFlag(chromePath);
+  const common = { spawn, kill, sendCommand, socketPath, chromePath, distPath, profileDir, bridgePort, opts, error };
+  const pid = useFlag ? await spawnFlagAndConnect(common) : await spawnHelperAndConnect({ ...common, helperCommand });
   if (pid === null) return exit(1);
 
-  recordLaunch(launchesFile, { label: opts.label, pid, profileDir, startedAt: Date.now() });
+  recordLaunch(launchesFile, { label: opts.label, pid, profileDir, mode: useFlag ? 'flag' : 'pipe', startedAt: Date.now() });
   log(`✅  launched "${opts.label}" (pid ${pid}) — drive it with: dassi run "…" --profile ${opts.label}`);
 }
 
 /**
- * Spawn the detached Chrome and wait for `label` to register on the daemon.
- * @returns {Promise<number|null>} the Chrome pid on success, or null (after
- *   killing any orphan + logging) on a failed spawn or connect-timeout.
+ * Entry for the hidden `dassi __launch-hold` subcommand: reads the DASSI_HOLD_* env vars
+ * (set by spawnHelperAndConnect) and runs the pipe-holding helper. Never returns.
+ * @param {Record<string,string|undefined>} [env] Environment variables; defaults to process.env.
+ * @param {Function} [run] Pipe-hold runner; defaults to runPipeHoldHelper (injectable for tests).
+ * @returns {Promise<void>}
  */
-async function spawnAndConnect({ spawn, kill, sendCommand, socketPath, chromePath, distPath, profileDir, bridgePort, opts, error }) {
-  // Reason: bridgePort (the daemon's actual port) is seeded so the launched extension
-  // connects to it — the daemon inherits DASSI_BRIDGE_PORT via ensureDaemonRunning.
-  const child = spawn(chromePath, buildLaunchArgs({ distPath, profileDir, label: opts.label, bridgePort }), {
-    detached: true,
-    stdio: 'ignore',
+export async function handleLaunchHold(env = process.env, run = runPipeHoldHelper) {
+  let chromeArgs = [];
+  // Reason: fail-open to [] — a malformed env var must not strand the helper.
+  try { chromeArgs = JSON.parse(env.DASSI_HOLD_CHROME_ARGS ?? '[]'); } catch { process.stderr.write('⚠️  Ignoring malformed DASSI_HOLD_CHROME_ARGS (expected JSON array).\n'); }
+  if (!Array.isArray(chromeArgs)) chromeArgs = [];
+  await run({
+    label: env.DASSI_HOLD_LABEL,
+    distPath: env.DASSI_HOLD_DIST,
+    profileDir: env.DASSI_HOLD_PROFILE_DIR,
+    bridgePort: Number(env.DASSI_HOLD_BRIDGE_PORT),
+    chromePath: env.DASSI_HOLD_CHROME,
+    chromeArgs,
   });
-  // Reason: a missing/invalid binary leaves pid undefined and emits 'error' async —
-  // swallow the event (else it throws) and fast-fail on the synchronous pid check.
+}
+
+/**
+ * Route a `launch*` CLI action to its handler. Returns true if it was a launch action
+ * (so the caller can `return`), false otherwise. Keeps the launch surface out of dassi.mjs.
+ * @param {string} action
+ * @param {object} params
+ * @param {{ spawn:Function; ensureDaemonRunning:Function; getSocketPath:Function; sendCommand:Function; appDir:string; launchesFile:string; kill?:Function; handleHold?:Function }} deps
+ *   `handleHold` overrides the `__launch-hold` runner (injectable for tests; defaults to handleLaunchHold).
+ * @returns {Promise<boolean>}
+ */
+export async function dispatchLaunch(action, params, deps) {
+  if (action === 'launch') { await handleLaunch(params, deps); return true; }
+  if (action === 'launch_stop') { handleStop(params, { launchesFile: deps.launchesFile, kill: deps.kill }); return true; }
+  if (action === 'launch_hold') { await (deps.handleHold ?? handleLaunchHold)(); return true; }
+  return false;
+}
+
+/**
+ * Flag mode (Chrome for Testing / Chromium): detached Chrome with a persistent
+ * `--load-extension`. The browser keeps the extension after this CLI exits.
+ * @returns {Promise<number|null>} the Chrome pid, or null on spawn/connect failure.
+ */
+async function spawnFlagAndConnect({ spawn, kill, sendCommand, socketPath, chromePath, distPath, profileDir, bridgePort, opts, error }) {
+  const child = spawn(chromePath, buildFlagArgs({ distPath, profileDir, label: opts.label, bridgePort, chromeArgs: opts.chromeArgs ?? [] }), { detached: true, stdio: 'ignore' });
   child.on('error', () => {});
   child.unref();
   if (typeof child.pid !== 'number') {
     error('❌  Failed to launch Chrome — check the Chrome path (--chrome).');
     return null;
   }
-
   error(`Launching Chrome (pid ${child.pid}) with ${distPath} — waiting for "${opts.label}" to connect…`);
   if (await waitForProfile({ sendCommand, socketPath, label: opts.label, timeoutMs: opts.timeoutMs })) return child.pid;
-
-  // Reason: kill the detached Chrome we started so a connect-timeout never orphans a browser.
   try { kill(child.pid); } catch { /* already gone */ }
-  error(`❌  "${opts.label}" did not connect within ${opts.timeoutMs}ms (Chrome already using ${profileDir}, bridge disabled, or dist too old).`);
+  error(`❌  "${opts.label}" did not connect within ${opts.timeoutMs}ms (Chrome already using ${profileDir}, or a stale profile).`);
+  return null;
+}
+
+/**
+ * Pipe mode (branded Chrome): spawn a detached `dassi __launch-hold` helper that holds the
+ * CDP pipe open so the loadUnpacked extension persists. The recorded pid is the HELPER's —
+ * `dassi launch --stop` SIGTERMs it, and it closes the pipe + kills its Chrome child.
+ * @returns {Promise<number|null>} the helper pid, or null on spawn/connect failure.
+ */
+async function spawnHelperAndConnect({ spawn, kill, sendCommand, socketPath, chromePath, distPath, profileDir, bridgePort, opts, error, helperCommand }) {
+  const [node, cli] = helperCommand;
+  // Reason: pass the helper's config via env (not flags) so it can't collide with the
+  // CLI's global --label/--profile parsing.
+  const helper = spawn(node, [cli, '__launch-hold'], {
+    detached: true,
+    stdio: 'ignore',
+    env: {
+      ...process.env,
+      DASSI_HOLD_LABEL: opts.label,
+      DASSI_HOLD_DIST: distPath,
+      DASSI_HOLD_PROFILE_DIR: profileDir,
+      DASSI_HOLD_BRIDGE_PORT: String(bridgePort),
+      DASSI_HOLD_CHROME: chromePath,
+      // Reason: JSON, not space-joined — Chrome args may contain spaces.
+      DASSI_HOLD_CHROME_ARGS: JSON.stringify(opts.chromeArgs ?? []),
+    },
+  });
+  helper.on('error', () => {});
+  helper.unref();
+  if (typeof helper.pid !== 'number') {
+    error('❌  Failed to start the launch helper.');
+    return null;
+  }
+  error(`Launching Chrome via pipe helper (pid ${helper.pid}) with ${distPath} — waiting for "${opts.label}" to connect…`);
+  if (await waitForProfile({ sendCommand, socketPath, label: opts.label, timeoutMs: opts.timeoutMs })) return helper.pid;
+  try { kill(helper.pid); } catch { /* already gone */ }
+  error(`❌  "${opts.label}" did not connect within ${opts.timeoutMs}ms (extension installed but the bridge didn't register — daemon port mismatch or a stale profile).`);
   return null;
 }
 
+/**
+ * Long-lived `dassi __launch-hold` helper (a detached child of `dassi launch` on branded
+ * Chrome): spawns Chrome with the CDP pipe, installs the dist, signals readiness, then
+ * HOLDS the pipe open until killed — a loadUnpacked extension lives only as long as its
+ * debugging session. On SIGTERM/SIGINT (from `dassi launch --stop`) or if Chrome exits, it
+ * tears down and exits.
+ * @param {{ distPath:string; profileDir:string; label:string; bridgePort:number; chromePath:string;
+ *          chromeArgs?:string[];
+ *          spawn?:Function; loadExtension?:Function; onReady?:Function; hold?:()=>Promise<void>;
+ *          error?:Function; exit?:Function }} o
+ * @returns {Promise<void>} In production never resolves (hold() is infinite until killed);
+ *   resolves after calling exit(1) on extension-install failure.
+ */
+export async function runPipeHoldHelper(o) {
+  const {
+    distPath, profileDir, label, bridgePort, chromePath,
+    chromeArgs = [],
+    spawn = childSpawn, loadExtension = loadExtensionOverPipe,
+    onReady = () => {}, hold = () => new Promise(() => {}),
+    error = (m) => process.stderr.write(`${m}\n`), exit = process.exit,
+  } = o;
+  const child = spawn(chromePath, buildLaunchArgs({ profileDir, chromeArgs }), { stdio: ['ignore', 'ignore', 'ignore', 'pipe', 'pipe'] });
+  let dispose = () => {};
+  let shuttingDown = false;
+  const shutdown = () => {
+    if (shuttingDown) return;
+    shuttingDown = true;
+    try { dispose(); } catch { /* ignore */ }
+    try { child.kill('SIGTERM'); } catch { /* already gone */ }
+    exit(0);
+  };
+  // Reason: this helper runs as a detached process whose whole job is to hold the CDP
+  // pipe open. SIGTERM is how `dassi launch --stop` tears it down; SIGINT covers Ctrl-C.
+  // Without these handlers the Chrome child (and its loaded extension) would be orphaned.
+  process.on('SIGTERM', shutdown);
+  process.on('SIGINT', shutdown);
+  child.on('error', () => {});
+  child.on('exit', () => { if (!shuttingDown) exit(0); }); // Chrome died → stop holding
+  try {
+    ({ dispose } = await loadExtension({ child, distPath, label, bridgePort }));
+  } catch (err) {
+    // Reason: set shuttingDown FIRST so the child.on('exit') guard above can't win the
+    // race and call exit(0) — a failed install must surface as exit(1), not false success.
+    shuttingDown = true;
+    error(`launch-hold: failed to install extension: ${err.message}`);
+    try { child.kill('SIGTERM'); } catch { /* already gone */ }
+    return exit(1);
+  }
+  onReady();
+  await hold(); // hold the pipe open (draining) until killed
+}
+
 /**
  * Resolve the dist dir, Chrome binary, and profile dir for a launch.
  * Calls `exit(1)` and returns null on any failure (extracted to keep

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dassi_ai/cli",
-  "version": "0.3.0",
-  "description": "CLI for the Dassi Chrome extension — run browser automation from the terminal",
+  "version": "0.5.0",
+  "description": "CLI for the Dassi Chrome extension \u2014 run browser automation from the terminal",
   "type": "module",
   "bin": {
     "dassi": "./dassi.mjs"
@@ -9,11 +9,13 @@
   "files": [
     "dassi.mjs",
     "dassi-daemon.mjs",
+    "daemon-client.mjs",
     "dassi-shared.mjs",
     "tool-commands.mjs",
     "format-response.mjs",
     "group-expansion.mjs",
     "launch.mjs",
+    "_launch-pipe.mjs",
     "help-text.mjs",
     ".claude-plugin/",
     "skills/",

package/skills/operate/command-reference.md

@@ -32,11 +32,26 @@ Each accepts `--tab <id>` OR `--group <id>` OR `--group-title <name>`, except wh
 | `open [url]` | url? | **Single-target only** (`--tab` required). Opens new tab in current group. |
 | `close` | — | Close tab. Fans out across a group = close all member tabs. |
 
+## Dev launch commands (loading a local build for testing)
+
+| Command | Args | Notes |
+|---|---|---|
+| `dassi launch` | `--label <name>` (default `dev`), `--dist <path>` (default `extension/dist`), `--chrome <path>`, `--load-mode auto\|pipe\|flag`, `--timeout <ms>` | Open a dedicated Chrome with a locally-built dev dist loaded, registered under `--label`. Then drive it by adding `--profile <label>` to any command. |
+| `dassi launch --stop [label]` / `--stop-all` | label? | Close a launched Chrome (default label `dev`). |
+| `dassi list-profiles` | `--json` | List connected Chrome instances (profiles), by `label`/id. |
+
+**How the extension is loaded** (`--load-mode`, default `auto`):
+- **Branded Google Chrome 137+** disabled the `--load-extension` flag (`ERR_BLOCKED_BY_CLIENT`), so launch installs the dist at runtime via the `Extensions.loadUnpacked` CDP command over `--remote-debugging-pipe`. Such an extension is tied to the debugging session, so launch spawns a detached helper that holds the pipe open; `--stop` kills the helper (which closes the pipe + its Chrome).
+- **Chrome for Testing / Chromium** still honour `--load-extension` (persistent) → used directly, no helper.
+- `--load-mode pipe|flag` forces a mode (e.g. `--chrome <cft> --load-mode pipe` exercises the pipe path on Chrome for Testing); `auto` detects from the binary's `--version`.
+- A freshly launched profile is **signed out** — sign in to that Chrome before `dassi run`/agent commands work in it.
+
 ## Global options
 
 | Flag | Effect |
 |---|---|
 | `--session <name>` | Daemon session name (default `default`). Selects which per-session daemon process and Unix socket the CLI connects to. Each distinct `--session` value spawns its own daemon; only one can be running at a time because they all bind the same WebSocket port (see the "Multi-tab dispatch is sequential" note below). |
+| `--profile <label>` (alias `--label`) | Target a specific connected Chrome instance (e.g. one started by `dassi launch --label qa`). Required when multiple profiles are connected. |
 | `--json` | Raw JSON output (in group fan-out: single JSON array of `{tabId, response}` entries). |
 | `--version`, `--help` | Self-explanatory. |