@hover-dev/core 0.7.0 → 0.7.2

package/dist/agents/claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/agents/claude.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA2C,MAAM,YAAY,CAAC;AAsF3F,eAAO,MAAM,WAAW,EAAE,eAyHzB,CAAC"}
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/agents/claude.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA2C,MAAM,YAAY,CAAC;AA6G3F,eAAO,MAAM,WAAW,EAAE,eA0HzB,CAAC"}

package/dist/agents/claude.js

@@ -39,12 +39,35 @@ function claudeState(state) {
     }
     return state;
 }
+/** Every built-in claude-code tool that has nothing to do with driving a
+ *  browser. Combined with `--strict-mcp-config` + an allow-list of mcp__*
+ *  ids, this leaves Claude with only the Playwright MCP (plus any
+ *  plugin-contributed MCPs) as a usable tool surface. */
+const CLAUDE_DEFAULT_DISALLOWED_TOOLS = [
+    // file / shell / data access — never appropriate for browser driving
+    'Bash', 'BashOutput', 'KillBash',
+    'Edit', 'MultiEdit', 'Write', 'Read', 'NotebookEdit',
+    'Grep', 'Glob', 'Task', 'TodoWrite',
+    'WebFetch', 'WebSearch',
+    // plan / worktree / cron / notification — irrelevant in -p mode
+    'EnterPlanMode', 'ExitPlanMode',
+    'EnterWorktree', 'ExitWorktree',
+    'CronCreate', 'CronDelete', 'CronList',
+    'PushNotification', 'RemoteTrigger',
+    // task & tool introspection added in claude 2.1.x — let through and
+    // the agent will burn turns exploring instead of executing
+    'ToolSearch',
+    'Monitor', 'TaskOutput', 'TaskStop',
+    'AskUserQuestion',
+    'ShareOnboardingGuide',
+];
 export const claudeAgent = {
     id: 'claude',
     binName: 'claude',
     protocol: 'argv',
     streamFormat: 'stream-json',
     sandboxStrength: 'hard',
+    defaultDisallowedTools: CLAUDE_DEFAULT_DISALLOWED_TOOLS,
     display: {
         label: 'Claude Code',
         tagline: 'Anthropic — best-in-class browser driving, hard tool sandbox',

package/dist/agents/types.d.ts

@@ -146,6 +146,11 @@ export interface AgentDescriptor {
     streamFormat: StreamFormat;
     sandboxStrength: SandboxStrength;
     display: AgentDisplay;
+    /** Hard-sandbox agents pass this list to `disallowedTools` when the
+     *  service-level allow/deny config isn't explicitly overridden. Lets the
+     *  per-CLI deny list live alongside its descriptor instead of as a magic
+     *  array in the service. Soft-sandbox agents leave this undefined. */
+    defaultDisallowedTools?: readonly string[];
     buildArgs(opts: InvokeOptions): string[];
     /**
      * Parse a single line of agent stdout into normalised InvokeEvents.

package/dist/agents/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,OAAO,GACP,KAAK,GACL,QAAQ,CAAC;AAEb,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,KAAK,GACL,YAAY,GACZ,YAAY,CAAC;AAEjB,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;aACnB,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAI5C;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;yCAGqC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;6EACyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;qEAGqE;GACnE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACrD;;;;;;;;GAQG;GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACnH;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9C;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;4DACwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;mEAC+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,YAAY,CAAC;IAC3B,eAAe,EAAE,eAAe,CAAC;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,EAAE,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IAC7D;;;;;;;;;OASG;IACH,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;CAChF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,OAAO,GACP,KAAK,GACL,QAAQ,CAAC;AAEb,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,KAAK,GACL,YAAY,GACZ,YAAY,CAAC;AAEjB,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;aACnB,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAI5C;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;yCAGqC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;6EACyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;qEAGqE;GACnE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACrD;;;;;;;;GAQG;GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACnH;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9C;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;4DACwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;mEAC+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,YAAY,CAAC;IAC3B,eAAe,EAAE,eAAe,CAAC;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB;;;0EAGsE;IACtE,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,EAAE,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IAC7D;;;;;;;;;OASG;IACH,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;CAChF"}

package/dist/playwright/raiseWindow.js

@@ -103,22 +103,37 @@ export async function raiseChromeWindow(pid) {
 function runCapture(cmd, args) {
     return new Promise(resolve => {
         let out = '';
+        let settled = false;
+        const finish = (v) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(v);
+        };
         const child = spawn(cmd, args, { stdio: ['ignore', 'pipe', 'ignore'] });
         child.stdout.on('data', chunk => {
             out += chunk.toString();
         });
-        child.on('error', () => resolve(null));
-        child.on('close', code => resolve(code === 0 ? out : null));
+        child.on('error', () => finish(null));
+        child.on('close', code => finish(code === 0 ? out : null));
     });
 }
 function runDetached(cmd, args) {
     return new Promise((resolve, reject) => {
+        let settled = false;
         const child = spawn(cmd, args, { stdio: 'ignore' });
-        child.on('error', reject);
-        child.on('close', code => {
+        child.on('error', err => {
+            if (settled)
+                return;
+            settled = true;
+            reject(err);
+        });
+        child.on('close', () => {
+            if (settled)
+                return;
+            settled = true;
             // Don't treat non-zero as fatal — caller already wraps in try/catch.
             resolve();
-            void code;
         });
     });
 }

package/dist/service/cdpHandlers.d.ts

@@ -11,7 +11,16 @@
  * file can be a thin orchestrator.
  */
 import type { WebSocket } from 'ws';
+import { type LaunchOptions } from '../playwright/launchChrome.js';
 import { type ClientMessage } from './types.js';
+/** Extra launch options surfaced from the active mode (security plugin
+ *  needs proxy + spki + separate profile + non-default CDP port). When
+ *  none are set, behaviour is identical to pre-v0.7 normal-mode launch. */
+export type LaunchExtras = Pick<LaunchOptions, 'userDataDir' | 'proxy'> & {
+    /** Override CDP port (mode-specific, e.g. 9333 for security). When set,
+     *  this also wins over the `port` parsed from cdpUrl. */
+    cdpPort?: number;
+};
 /**
  * "Is this widget running inside the debug Chrome?" The widget asks this on
  * connect (and after every status-changing event) so it can render itself as
@@ -20,14 +29,14 @@ import { type ClientMessage } from './types.js';
  *   - wrong-window → disabled, with a "use the other window" notice
  *   - no-cdp       → enabled but click triggers launch-chrome instead
  */
-export declare function handleCheckCdp(ws: WebSocket, msg: ClientMessage, cdpUrl: string): Promise<void>;
+export declare function handleCheckCdp(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
 /**
  * Launch a debug Chrome navigated to `pageUrl`, then re-check status. The
  * re-check usually returns 'wrong-window' (because the widget asking is in
  * the user's regular Chrome, not the freshly-launched one) — the widget then
  * displays the "use the other window" state.
  */
-export declare function handleLaunchChrome(ws: WebSocket, msg: ClientMessage, cdpUrl: string): Promise<void>;
+export declare function handleLaunchChrome(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
 /**
  * bringToFront the debug-Chrome tab matching `pageUrl`'s origin (or open one
  * if none exists). Used by the wrong-window UI's "switch to debug Chrome"
@@ -35,5 +44,5 @@ export declare function handleLaunchChrome(ws: WebSocket, msg: ClientMessage, cd
  * the widget cares about, and the widget the user is about to focus is a
  * different page (and will run its own check-cdp on its own ws connection).
  */
-export declare function handleFocusDebug(ws: WebSocket, msg: ClientMessage, cdpUrl: string): Promise<void>;
+export declare function handleFocusDebug(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
 //# sourceMappingURL=cdpHandlers.d.ts.map

package/dist/service/cdpHandlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdpHandlers.d.ts","sourceRoot":"","sources":["../../src/service/cdpHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAGpC,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAUf"}
+{"version":3,"file":"cdpHandlers.d.ts","sourceRoot":"","sources":["../../src/service/cdpHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD;;2EAE2E;AAC3E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG;IACxE;6DACyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/service/cdpHandlers.js

@@ -21,13 +21,16 @@ import { send } from './types.js';
  *   - wrong-window → disabled, with a "use the other window" notice
  *   - no-cdp       → enabled but click triggers launch-chrome instead
  */
-export async function handleCheckCdp(ws, msg, cdpUrl) {
+export async function handleCheckCdp(ws, msg, cdpUrl, extras) {
     const pageUrl = msg.payload?.pageUrl;
     if (typeof pageUrl !== 'string' || !pageUrl) {
         send(ws, { type: 'error', payload: { message: 'check-cdp: pageUrl is required' } });
         return;
     }
-    const status = await checkCdpStatus(cdpUrl, pageUrl);
+    const effectiveCdpUrl = extras?.cdpPort
+        ? `http://localhost:${extras.cdpPort}`
+        : cdpUrl;
+    const status = await checkCdpStatus(effectiveCdpUrl, pageUrl);
     send(ws, { type: 'cdp-status', payload: status });
 }
 /**
@@ -36,7 +39,7 @@ export async function handleCheckCdp(ws, msg, cdpUrl) {
  * the user's regular Chrome, not the freshly-launched one) — the widget then
  * displays the "use the other window" state.
  */
-export async function handleLaunchChrome(ws, msg, cdpUrl) {
+export async function handleLaunchChrome(ws, msg, cdpUrl, extras) {
     const pageUrl = msg.payload?.pageUrl;
     if (typeof pageUrl !== 'string' || !pageUrl) {
         send(ws, { type: 'error', payload: { message: 'launch-chrome: pageUrl is required' } });
@@ -45,7 +48,7 @@ export async function handleLaunchChrome(ws, msg, cdpUrl) {
     // Tell the widget we're launching so it can render a spinner immediately —
     // findChromeBinary + spawn + ready-poll can take a few seconds.
     send(ws, { type: 'cdp-status', payload: { state: 'no-cdp', launching: true } });
-    const port = (() => {
+    const port = extras?.cdpPort ?? (() => {
         try {
             return Number(new URL(cdpUrl).port) || 9222;
         }
@@ -53,13 +56,22 @@ export async function handleLaunchChrome(ws, msg, cdpUrl) {
             return 9222;
         }
     })();
-    const result = await launchDebugChrome({ url: pageUrl, port });
+    const result = await launchDebugChrome({
+        url: pageUrl,
+        port,
+        userDataDir: extras?.userDataDir,
+        proxy: extras?.proxy,
+    });
     if (!result.ok) {
         send(ws, { type: 'cdp-status', payload: { state: 'no-cdp', reason: result.reason } });
         return;
     }
-    // Re-check after launch so the widget gets the real status.
-    const status = await checkCdpStatus(cdpUrl, pageUrl);
+    // Re-check status against the port we actually launched on, so a mode-
+    // specific port (9333 for security) doesn't get probed at 9222.
+    const effectiveCdpUrl = extras?.cdpPort
+        ? `http://localhost:${extras.cdpPort}`
+        : cdpUrl;
+    const status = await checkCdpStatus(effectiveCdpUrl, pageUrl);
     send(ws, { type: 'cdp-status', payload: status });
 }
 /**
@@ -69,13 +81,16 @@ export async function handleLaunchChrome(ws, msg, cdpUrl) {
  * the widget cares about, and the widget the user is about to focus is a
  * different page (and will run its own check-cdp on its own ws connection).
  */
-export async function handleFocusDebug(ws, msg, cdpUrl) {
+export async function handleFocusDebug(ws, msg, cdpUrl, extras) {
     const pageUrl = msg.payload?.pageUrl;
     if (typeof pageUrl !== 'string' || !pageUrl) {
         send(ws, { type: 'error', payload: { message: 'focus-debug: pageUrl is required' } });
         return;
     }
-    const result = await focusDebugTab(cdpUrl, pageUrl);
+    const effectiveCdpUrl = extras?.cdpPort
+        ? `http://localhost:${extras.cdpPort}`
+        : cdpUrl;
+    const result = await focusDebugTab(effectiveCdpUrl, pageUrl);
     if (!result.ok) {
         send(ws, { type: 'error', payload: { message: `focus-debug: ${result.reason}` } });
     }

package/dist/service/saveHandlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"saveHandlers.d.ts","sourceRoot":"","sources":["../../src/service/saveHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,UAAU,EAAgC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAmB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAsB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD,UAAU,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC9E,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,WAAW,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAC9E,wEAAwE;IACxE,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,SAAS,EAAE,CAAC;QACnB,UAAU,EAAE,aAAa,EAAE,CAAC;QAC5B,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC;KACpB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1F,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,eAAO,MAAM,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAanF,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAOjF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAYxF,CAAC"}
+{"version":3,"file":"saveHandlers.d.ts","sourceRoot":"","sources":["../../src/service/saveHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,UAAU,EAAgC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAmB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAsB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD,UAAU,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC9E,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,WAAW,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAC9E,wEAAwE;IACxE,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,SAAS,EAAE,CAAC;QACnB,UAAU,EAAE,aAAa,EAAE,CAAC;QAC5B,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC;KACpB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1F,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,eAAO,MAAM,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAanF,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAOjF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAYxF,CAAC"}

package/dist/service/saveHandlers.js

@@ -28,14 +28,12 @@ export async function handleSaveArtifact(ws, msg, devRoot, cfg) {
         send(ws, { type: 'error', payload: { message: `${cfg.requestName}: no steps to save` } });
         return;
     }
+    let result;
     try {
-        const result = await cfg.write({
+        result = await cfg.write({
             devRoot, name, description, steps, assertions,
             payload: msg.payload, overwrite,
         });
-        send(ws, { type: cfg.savedType, payload: { name: result.slug, path: result.path } });
-        if (cfg.onSaved)
-            await cfg.onSaved(ws, devRoot);
     }
     catch (err) {
         if (err instanceof cfg.ExistsError) {
@@ -44,6 +42,19 @@ export async function handleSaveArtifact(ws, msg, devRoot, cfg) {
         }
         const message = err instanceof Error ? err.message : String(err);
         send(ws, { type: 'error', payload: { message: `${cfg.requestName} failed: ${message}` } });
+        return;
+    }
+    send(ws, { type: cfg.savedType, payload: { name: result.slug, path: result.path } });
+    // The artifact is already on disk; an onSaved failure (e.g. listSkills
+    // re-scan) shouldn't surface as if the save itself failed — log and move on.
+    if (cfg.onSaved) {
+        try {
+            await cfg.onSaved(ws, devRoot);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            console.warn(`[hover] ${cfg.requestName} onSaved failed: ${message}`);
+        }
     }
 }
 export const SKILL_CONFIG = {

package/dist/service/types.d.ts

@@ -9,7 +9,7 @@
  * back to the widget. Centralised so the JSON.stringify happens in exactly
  * one place.
  */
-import type { WebSocket } from 'ws';
+import { WebSocket } from 'ws';
 import type { SkillStep } from '../skills/writeSkill.js';
 import type { SpecAssertion } from '../specs/writeSpec.js';
 export interface ClientMessage {
@@ -41,4 +41,13 @@ export declare function send(ws: WebSocket, message: {
     type: string;
     payload?: unknown;
 }): void;
+/** Send a message only if the socket is still open. Use this from delayed
+ *  callbacks (promise `.then`, timers) where the client may have disconnected
+ *  between scheduling and firing — calling `ws.send` on a closed socket
+ *  is a silent no-op for some states and throws for others, so a single
+ *  guarded helper makes the intent obvious and prevents surprises. */
+export declare function sendIfOpen(ws: WebSocket, message: {
+    type: string;
+    payload?: unknown;
+}): boolean;
 //# sourceMappingURL=types.d.ts.map

package/dist/service/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/service/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB;uDAC+C;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;2DAEmD;QACnD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;+DACuD;QACvD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEtF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/service/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB;uDAC+C;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;2DAEmD;QACnD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;+DACuD;QACvD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEtF;AAED;;;;sEAIsE;AACtE,wBAAgB,UAAU,CACxB,EAAE,EAAE,SAAS,EACb,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3C,OAAO,CAIT"}

package/dist/service/types.js

@@ -9,6 +9,18 @@
  * back to the widget. Centralised so the JSON.stringify happens in exactly
  * one place.
  */
+import { WebSocket } from 'ws';
 export function send(ws, message) {
     ws.send(JSON.stringify(message));
 }
+/** Send a message only if the socket is still open. Use this from delayed
+ *  callbacks (promise `.then`, timers) where the client may have disconnected
+ *  between scheduling and firing — calling `ws.send` on a closed socket
+ *  is a silent no-op for some states and throws for others, so a single
+ *  guarded helper makes the intent obvious and prevents surprises. */
+export function sendIfOpen(ws, message) {
+    if (ws.readyState !== WebSocket.OPEN)
+        return false;
+    ws.send(JSON.stringify(message));
+    return true;
+}

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAoEA,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;6EAGyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;uBAImB;IACnB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B;4EACwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAiDD,wBAAsB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAknB/E"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAqEA,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;6EAGyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;uBAImB;IACnB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B;4EACwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAiDD,wBAAsB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAmrB/E"}

package/dist/service.js

@@ -48,7 +48,7 @@ import { getAgent } from './agents/registry.js';
 import { getPreflight, invalidatePreflight } from './playwright/preflightCache.js';
 import { resolveMcpConfig } from './playwright/resolveMcpConfig.js';
 import { listSkills } from './skills/writeSkill.js';
-import { send } from './service/types.js';
+import { send, sendIfOpen } from './service/types.js';
 import { buildCdpHint, buildCdpHintResume } from './service/cdpHint.js';
 import { handleCheckCdp, handleLaunchChrome, handleFocusDebug, } from './service/cdpHandlers.js';
 import { handleSaveArtifact, SKILL_CONFIG, SPEC_CONFIG, CASE_CSV_CONFIG, } from './service/saveHandlers.js';
@@ -167,8 +167,15 @@ export async function startService(opts) {
                 }
             }
         }
+        // In an active mode, the Playwright MCP must point at THAT mode's
+        // Chrome (e.g. security mode's 9333), not the default 9222.
+        // effectiveLaunchExtras().cdpPort is the source of truth.
+        const extras = effectiveLaunchExtras();
+        const effectiveCdpUrl = extras?.cdpPort
+            ? `http://localhost:${extras.cdpPort}`
+            : cdpUrl;
         return resolveMcpConfig({
-            cdpUrl,
+            cdpUrl: effectiveCdpUrl,
             port,
             extra,
             // Suffix the filename by the mode so different mode toggles within
@@ -209,14 +216,44 @@ export async function startService(opts) {
     /** id of the currently-active mode, or null for normal (unmoded) mode. */
     let currentModeId = null;
     /** Chrome-proxy settings the active mode's activate hook set on us.
-     *  Surfaced to launchDebugChrome calls when the widget asks us to
-     *  launch a debug Chrome. */
+     *  Read by `effectiveLaunchExtras()` and threaded into the cdp handlers
+     *  (check-cdp / launch-chrome / focus-debug) so the secured Chrome on
+     *  9333 actually gets `--proxy-server` + SPKI pin when the user clicks
+     *  Launch from the widget. */
     let modeChromeProxy = null;
     /** Runtime env overrides keyed by mcpServer id, set by plugin
      *  activate hooks (via ctx.setMcpServerEnv). Cleared on mode change.
      *  Merged with the manifest-declared env when the agent's spawn-time
      *  MCP config is built. */
     const mcpEnvOverrides = new Map();
+    /** The cdp-handler extras (port, userDataDir, proxy) for the active
+     *  mode's chromeFlags manifest field, or undefined when no mode is
+     *  active. The widget's launch-chrome / check-cdp / focus-debug paths
+     *  all consume these so a Chrome relaunch obeys the mode's needs. */
+    const effectiveLaunchExtras = () => {
+        if (!currentModeId)
+            return undefined;
+        const plugin = pluginsByModeId.get(currentModeId);
+        const flags = plugin?.chromeFlags;
+        if (!flags && !modeChromeProxy)
+            return undefined;
+        // Belt + suspenders — flags.activeInModes is honoured if set, but
+        // since chromeFlags lives on the plugin that contributed this mode,
+        // the default of "applies in own mode" matches what we want.
+        if (flags?.activeInModes && !flags.activeInModes.includes('*') && !flags.activeInModes.includes(currentModeId)) {
+            // Plugin explicitly restricted its chromeFlags to a different mode.
+            // Honour that and only carry modeChromeProxy (set by setChromeProxy).
+            return modeChromeProxy ? { proxy: modeChromeProxy } : undefined;
+        }
+        return {
+            cdpPort: flags?.cdpPort,
+            userDataDir: flags?.userDataDir,
+            // modeChromeProxy wins over flags.proxy because it's the runtime
+            // value the activate hook computed (after starting mockttp);
+            // flags.proxy is only ever set by tests stubbing the manifest.
+            proxy: modeChromeProxy ?? flags?.proxy,
+        };
+    };
     /** Send the current mode catalogue to one ws (or all if undefined). */
     const broadcastModes = (target) => {
         const available = plugins
@@ -286,7 +323,21 @@ export async function startService(opts) {
                         mcpEnvOverrides.set(id, env);
                     },
                 };
-                await next.hooks['hover:mode:activate'](ctx);
+                try {
+                    await next.hooks['hover:mode:activate'](ctx);
+                }
+                catch (err) {
+                    // Activate failed half-way — roll back state so we don't
+                    // pretend to be in `newModeId` with no sidecars running.
+                    // Widget still trusts the broadcast below to learn we're back
+                    // to default. The error is rethrown so the caller can surface
+                    // it to the user.
+                    modeChromeProxy = null;
+                    mcpEnvOverrides.clear();
+                    currentModeId = null;
+                    broadcastModes();
+                    throw err;
+                }
             }
         }
         broadcastModes();
@@ -321,9 +372,19 @@ export async function startService(opts) {
             payload: { agentId: currentAgentId, model, version: PROTOCOL_VERSION },
         });
         // Send the agent list as a follow-up event so the widget can render the
-        // dropdown immediately on connect / reconnect (e.g. after HMR).
-        void getAvailability(false).then(available => {
-            send(ws, { type: 'agents', payload: { current: currentAgentId, available } });
+        // dropdown immediately on connect / reconnect (e.g. after HMR). The
+        // socket may have closed between scheduling and firing, so guard the
+        // send and catch any availability-probe rejection — otherwise it
+        // surfaces as an unhandled rejection in strict-mode Node.
+        void getAvailability(false)
+            .then(available => {
+            sendIfOpen(ws, {
+                type: 'agents',
+                payload: { current: currentAgentId, available },
+            });
+        })
+            .catch(err => {
+            console.warn('[hover] agents broadcast failed:', err);
         });
         // Send the mode catalogue too, so the widget can render the mode
         // toggle immediately. Empty list when no plugins are loaded.
@@ -473,15 +534,15 @@ export async function startService(opts) {
                 return;
             }
             if (msg.type === 'check-cdp') {
-                await handleCheckCdp(ws, msg, cdpUrl);
+                await handleCheckCdp(ws, msg, cdpUrl, effectiveLaunchExtras());
                 return;
             }
             if (msg.type === 'launch-chrome') {
-                await handleLaunchChrome(ws, msg, cdpUrl);
+                await handleLaunchChrome(ws, msg, cdpUrl, effectiveLaunchExtras());
                 return;
             }
             if (msg.type === 'focus-debug') {
-                await handleFocusDebug(ws, msg, cdpUrl);
+                await handleFocusDebug(ws, msg, cdpUrl, effectiveLaunchExtras());
                 return;
             }
             if (msg.type !== 'command')
@@ -512,7 +573,13 @@ export async function startService(opts) {
                 // Playwright MCP server would silently launch its own Chromium —
                 // and Hover's premise is to drive the user's existing Chrome (with
                 // their dev state, cookies, devtools open), never spawn a fresh one.
-                const cdp = await getPreflight(cdpUrl);
+                // In an active mode, the relevant CDP endpoint may be the mode's
+                // own port (e.g. 9333 for security), not the default cdpUrl.
+                const preflightExtras = effectiveLaunchExtras();
+                const preflightCdpUrl = preflightExtras?.cdpPort
+                    ? `http://localhost:${preflightExtras.cdpPort}`
+                    : cdpUrl;
+                const cdp = await getPreflight(preflightCdpUrl);
                 if (!cdp.ok) {
                     send(ws, {
                         type: 'event',
@@ -539,18 +606,21 @@ export async function startService(opts) {
                 let appendSystemPrompt = resumeSessionId
                     ? buildCdpHintResume(cdp.tabs)
                     : buildCdpHint(cdp.tabs);
-                // Add the active mode's plugin prompt additions, if any. We only
-                // include additions whose `activeInModes` is the current mode or
-                // '*' (always-on); plugins that contribute prompts but no mode
-                // are treated as mode-scoped to their own plugin's mode by
-                // default (handled by the empty activeInModes case below).
-                const activePlugin = currentModeId ? pluginsByModeId.get(currentModeId) : null;
-                if (activePlugin?.systemPromptAdditions) {
-                    for (const add of activePlugin.systemPromptAdditions) {
-                        const inMode = !add.activeInModes ||
-                            add.activeInModes.includes('*') ||
-                            (currentModeId !== null && add.activeInModes.includes(currentModeId));
-                        if (inMode) {
+                // Add plugin-contributed prompt additions whose scope includes the
+                // current mode (or '*' for always-on). Walks ALL loaded plugins,
+                // not just the active-mode plugin — a plugin that contributes
+                // an always-on prompt without contributing a mode is a valid
+                // shape (e.g. a future "always remind the agent of these
+                // project conventions" plugin).
+                for (const p of plugins) {
+                    for (const add of p.systemPromptAdditions ?? []) {
+                        // Default scope: if the plugin has a mode, the prompt is
+                        // gated to that mode; if it doesn't have a mode, the prompt
+                        // is always-on (treated as if activeInModes was '*').
+                        const scope = add.activeInModes ?? (p.mode ? [p.mode.id] : ['*']);
+                        const inScope = scope.includes('*') ||
+                            (currentModeId !== null && scope.includes(currentModeId));
+                        if (inScope) {
                             appendSystemPrompt = `${appendSystemPrompt}\n\n${add.text}`;
                         }
                     }
@@ -603,24 +673,9 @@ export async function startService(opts) {
                         ? ['mcp__playwright', 'Skill', ...activePluginMcpIds]
                         : undefined,
                     disallowedTools: isHardSandbox
-                        ? [
-                            // file / shell / data access — never appropriate for browser driving
-                            'Bash', 'BashOutput', 'KillBash',
-                            'Edit', 'MultiEdit', 'Write', 'Read', 'NotebookEdit',
-                            'Grep', 'Glob', 'Task', 'TodoWrite',
-                            'WebFetch', 'WebSearch',
-                            // plan / worktree / cron / notification — irrelevant in -p mode
-                            'EnterPlanMode', 'ExitPlanMode',
-                            'EnterWorktree', 'ExitWorktree',
-                            'CronCreate', 'CronDelete', 'CronList',
-                            'PushNotification', 'RemoteTrigger',
-                            // task & tool introspection added in claude 2.1.x — let through and
-                            // the agent will burn turns exploring instead of executing
-                            'ToolSearch',
-                            'Monitor', 'TaskOutput', 'TaskStop',
-                            'AskUserQuestion',
-                            'ShareOnboardingGuide',
-                        ]
+                        ? (invokedDescriptor?.defaultDisallowedTools
+                            ? [...invokedDescriptor.defaultDisallowedTools]
+                            : undefined)
                         : undefined,
                     maxBudgetUsd,
                     model,
@@ -632,20 +687,32 @@ export async function startService(opts) {
                 }
             }
             catch (err) {
-                const message = err instanceof Error ? err.message : String(err);
-                const errorEvent = {
-                    kind: 'session_end',
-                    isError: true,
-                    summary: message,
-                };
-                if (ws.readyState === WebSocket.OPEN) {
-                    send(ws, { type: 'event', payload: errorEvent });
+                // A user-initiated cancel() already sent a synthetic session_end
+                // {cancelled:true}. The subsequent AbortError surfacing here would
+                // otherwise produce a second session_end{isError:true}, leaving the
+                // widget to reconcile two terminal events for one run. CDP isn't
+                // suspect either — the user just stopped — so skip preflight
+                // invalidation too.
+                if (!cancelled) {
+                    const message = err instanceof Error ? err.message : String(err);
+                    const errorEvent = {
+                        kind: 'session_end',
+                        isError: true,
+                        summary: message,
+                    };
+                    sendIfOpen(ws, { type: 'event', payload: errorEvent });
+                    // Force the next command to re-probe CDP. The error could be from
+                    // Chrome dying, MCP spawning a stray Chromium, the user closing
+                    // their debug window — anything that would make a cached "all
+                    // healthy" result lie. Invalidate the mode-effective URL (see
+                    // preflightCdpUrl above) — not the static cdpUrl — so security
+                    // mode invalidations don't no-op against the default port.
+                    const invalExtras = effectiveLaunchExtras();
+                    const invalCdpUrl = invalExtras?.cdpPort
+                        ? `http://localhost:${invalExtras.cdpPort}`
+                        : cdpUrl;
+                    invalidatePreflight(invalCdpUrl);
                 }
-                // Force the next command to re-probe CDP. The error could be from
-                // Chrome dying, MCP spawning a stray Chromium, the user closing
-                // their debug window — anything that would make a cached "all
-                // healthy" result lie.
-                invalidatePreflight(cdpUrl);
             }
             finally {
                 busy = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hover-dev/core",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Hover's local Node service: agent invocation, Playwright CDP preflight, WebSocket bridge.",
   "license": "Apache-2.0",
   "author": "Hyperyond",