@iaforged/context-code 1.0.72 → 1.0.74

package/dist/src/utils/claudeInChrome/mcpServer.js

@@ -0,0 +1,237 @@
+import { createClaudeForChromeMcpServer, } from '@ant/claude-for-chrome-mcp';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { format } from 'util';
+import { shutdownDatadog } from '../../services/analytics/datadog.js';
+import { shutdown1PEventLogging } from '../../services/analytics/firstPartyEventLogger.js';
+import { getFeatureValue_CACHED_MAY_BE_STALE } from '../../services/analytics/growthbook.js';
+import { logEvent, } from '../../services/analytics/index.js';
+import { initializeAnalyticsSink } from '../../services/analytics/sink.js';
+import { getClaudeAIOAuthTokens } from '../auth.js';
+import { enableConfigs, getGlobalConfig, saveGlobalConfig } from '../config.js';
+import { logForDebugging } from '../debug.js';
+import { isEnvTruthy } from '../envUtils.js';
+import { sideQuery } from '../sideQuery.js';
+import { getAllSocketPaths, getSecureSocketPath } from './common.js';
+const EXTENSION_DOWNLOAD_URL = 'https://claude.ai/chrome';
+const BUG_REPORT_URL = 'https://github.com/anthropics/claude-code/issues/new?labels=bug,claude-in-chrome';
+// String metadata keys safe to forward to analytics. Keys like error_message
+// are excluded because they could contain page content or user data.
+const SAFE_BRIDGE_STRING_KEYS = new Set([
+    'bridge_status',
+    'error_type',
+    'tool_name',
+]);
+const PERMISSION_MODES = [
+    'ask',
+    'skip_all_permission_checks',
+    'follow_a_plan',
+];
+function isPermissionMode(raw) {
+    return PERMISSION_MODES.some(m => m === raw);
+}
+/**
+ * Resolves the Chrome bridge URL based on environment and feature flag.
+ * Bridge is used when the feature flag is enabled; ant users always get
+ * bridge. API key / 3P users fall back to native messaging.
+ */
+function getChromeBridgeUrl() {
+    const bridgeEnabled = process.env.USER_TYPE === 'ant' ||
+        getFeatureValue_CACHED_MAY_BE_STALE('tengu_copper_bridge', false);
+    if (!bridgeEnabled) {
+        return undefined;
+    }
+    if (isEnvTruthy(process.env.USE_LOCAL_OAUTH) ||
+        isEnvTruthy(process.env.LOCAL_BRIDGE)) {
+        return 'ws://localhost:8765';
+    }
+    if (isEnvTruthy(process.env.USE_STAGING_OAUTH)) {
+        return 'wss://bridge-staging.claudeusercontent.com';
+    }
+    return 'wss://bridge.claudeusercontent.com';
+}
+function isLocalBridge() {
+    return (isEnvTruthy(process.env.USE_LOCAL_OAUTH) ||
+        isEnvTruthy(process.env.LOCAL_BRIDGE));
+}
+/**
+ * Build the ClaudeForChromeContext used by both the subprocess MCP server
+ * and the in-process path in the MCP client.
+ */
+export function createChromeContext(env) {
+    const logger = new DebugLogger();
+    const chromeBridgeUrl = getChromeBridgeUrl();
+    logger.info(`Bridge URL: ${chromeBridgeUrl ?? 'none (using native socket)'}`);
+    const rawPermissionMode = env?.CLAUDE_CHROME_PERMISSION_MODE ??
+        process.env.CLAUDE_CHROME_PERMISSION_MODE;
+    let initialPermissionMode;
+    if (rawPermissionMode) {
+        if (isPermissionMode(rawPermissionMode)) {
+            initialPermissionMode = rawPermissionMode;
+        }
+        else {
+            logger.warn(`Invalid CLAUDE_CHROME_PERMISSION_MODE "${rawPermissionMode}". Valid values: ${PERMISSION_MODES.join(', ')}`);
+        }
+    }
+    return {
+        serverName: 'Claude in Chrome',
+        logger,
+        socketPath: getSecureSocketPath(),
+        getSocketPaths: getAllSocketPaths,
+        clientTypeId: 'claude-code',
+        onAuthenticationError: () => {
+            logger.warn('Authentication error occurred. Please ensure you are logged into the Claude browser extension with the same claude.ai account as Context Code.');
+        },
+        onToolCallDisconnected: () => {
+            return `Browser extension is not connected. Please ensure the Claude browser extension is installed and running (${EXTENSION_DOWNLOAD_URL}), and that you are logged into claude.ai with the same account as Context Code. If this is your first time connecting to Chrome, you may need to restart Chrome for the installation to take effect. If you continue to experience issues, please report a bug: ${BUG_REPORT_URL}`;
+        },
+        onExtensionPaired: (deviceId, name) => {
+            saveGlobalConfig(config => {
+                if (config.chromeExtension?.pairedDeviceId === deviceId &&
+                    config.chromeExtension?.pairedDeviceName === name) {
+                    return config;
+                }
+                return {
+                    ...config,
+                    chromeExtension: {
+                        pairedDeviceId: deviceId,
+                        pairedDeviceName: name,
+                    },
+                };
+            });
+            logger.info(`Paired with "${name}" (${deviceId.slice(0, 8)})`);
+        },
+        getPersistedDeviceId: () => {
+            return getGlobalConfig().chromeExtension?.pairedDeviceId;
+        },
+        ...(chromeBridgeUrl && {
+            bridgeConfig: {
+                url: chromeBridgeUrl,
+                getUserId: async () => {
+                    return getGlobalConfig().oauthAccount?.accountUuid;
+                },
+                getOAuthToken: async () => {
+                    return getClaudeAIOAuthTokens()?.accessToken ?? '';
+                },
+                ...(isLocalBridge() && { devUserId: 'dev_user_local' }),
+            },
+        }),
+        ...(initialPermissionMode && { initialPermissionMode }),
+        // Wire inference for the browser_task tool — the chrome-mcp server runs
+        // a lightning-mode agent loop in Node and calls the extension's
+        // lightning_turn tool once per iteration for execution.
+        //
+        // Ant-only: the extension's lightning_turn is build-time-gated via
+        // import.meta.env.ANT_ONLY_BUILD — the whole lightning/ module graph is
+        // tree-shaken from the public extension build (build:prod greps for a
+        // marker to verify). Without this injection, the Node MCP server's
+        // ListTools also filters browser_task + lightning_turn out, so external
+        // users never see the tools advertised. Three independent gates.
+        //
+        // Types inlined: AnthropicMessagesRequest/Response live in
+        // @ant/claude-for-chrome-mcp@0.4.0 which isn't published yet. CI installs
+        // 0.3.0. The callAnthropicMessages field is also 0.4.0-only, but spreading
+        // an extra property into ClaudeForChromeContext is fine against either
+        // version — 0.3.0 sees an unknown field (allowed in spread), 0.4.0 sees a
+        // structurally-matching one. Once 0.4.0 is published, this can switch to
+        // the package's exported types and the dep can be bumped.
+        ...(process.env.USER_TYPE === 'ant' && {
+            callAnthropicMessages: async (req) => {
+                // sideQuery handles OAuth attribution fingerprint, proxy, model betas.
+                // skipSystemPromptPrefix: the lightning prompt is complete on its own;
+                // the CLI prefix would dilute the batching instructions.
+                // tools: [] is load-bearing — without it Sonnet emits
+                // <function_calls> XML before the text commands. Original
+                // lightning-harness.js (apps repo) does the same.
+                const response = await sideQuery({
+                    model: req.model,
+                    system: req.system,
+                    messages: req.messages,
+                    max_tokens: req.max_tokens,
+                    stop_sequences: req.stop_sequences,
+                    signal: req.signal,
+                    skipSystemPromptPrefix: true,
+                    tools: [],
+                    querySource: 'chrome_mcp',
+                });
+                // BetaContentBlock is TextBlock | ThinkingBlock | ToolUseBlock | ...
+                // Only text blocks carry the model's command output.
+                const textBlocks = [];
+                for (const b of response.content) {
+                    if (b.type === 'text') {
+                        textBlocks.push({ type: 'text', text: b.text });
+                    }
+                }
+                return {
+                    content: textBlocks,
+                    stop_reason: response.stop_reason,
+                    usage: {
+                        input_tokens: response.usage.input_tokens,
+                        output_tokens: response.usage.output_tokens,
+                    },
+                };
+            },
+        }),
+        trackEvent: (eventName, metadata) => {
+            const safeMetadata = {};
+            if (metadata) {
+                for (const [key, value] of Object.entries(metadata)) {
+                    // Rename 'status' to 'bridge_status' to avoid Datadog's reserved field
+                    const safeKey = key === 'status' ? 'bridge_status' : key;
+                    if (typeof value === 'boolean' || typeof value === 'number') {
+                        safeMetadata[safeKey] = value;
+                    }
+                    else if (typeof value === 'string' &&
+                        SAFE_BRIDGE_STRING_KEYS.has(safeKey)) {
+                        // Only forward allowlisted string keys — fields like error_message
+                        // could contain page content or user data
+                        safeMetadata[safeKey] =
+                            value;
+                    }
+                }
+            }
+            logEvent(eventName, safeMetadata);
+        },
+    };
+}
+export async function runClaudeInChromeMcpServer() {
+    enableConfigs();
+    initializeAnalyticsSink();
+    const context = createChromeContext();
+    const server = createClaudeForChromeMcpServer(context);
+    const transport = new StdioServerTransport();
+    // Exit when parent process dies (stdin pipe closes).
+    // Flush analytics before exiting so final-batch events (e.g. disconnect) aren't lost.
+    let exiting = false;
+    const shutdownAndExit = async () => {
+        if (exiting) {
+            return;
+        }
+        exiting = true;
+        await shutdown1PEventLogging();
+        await shutdownDatadog();
+        // eslint-disable-next-line custom-rules/no-process-exit
+        process.exit(0);
+    };
+    process.stdin.on('end', () => void shutdownAndExit());
+    process.stdin.on('error', () => void shutdownAndExit());
+    logForDebugging('[Claude in Chrome] Starting MCP server');
+    await server.connect(transport);
+    logForDebugging('[Claude in Chrome] MCP server started');
+}
+class DebugLogger {
+    silly(message, ...args) {
+        logForDebugging(format(message, ...args), { level: 'debug' });
+    }
+    debug(message, ...args) {
+        logForDebugging(format(message, ...args), { level: 'debug' });
+    }
+    info(message, ...args) {
+        logForDebugging(format(message, ...args), { level: 'info' });
+    }
+    warn(message, ...args) {
+        logForDebugging(format(message, ...args), { level: 'warn' });
+    }
+    error(message, ...args) {
+        logForDebugging(format(message, ...args), { level: 'error' });
+    }
+}

package/dist/src/utils/claudeInChrome/prompt.js

@@ -0,0 +1,79 @@
+export const BASE_CHROME_PROMPT = `# Claude in Chrome browser automation
+
+You have access to browser automation tools (mcp__claude-in-chrome__*) for interacting with web pages in Chrome. Follow these guidelines for effective browser automation.
+
+## GIF recording
+
+When performing multi-step browser interactions that the user may want to review or share, use mcp__claude-in-chrome__gif_creator to record them.
+
+You must ALWAYS:
+* Capture extra frames before and after taking actions to ensure smooth playback
+* Name the file meaningfully to help the user identify it later (e.g., "login_process.gif")
+
+## Console log debugging
+
+You can use mcp__claude-in-chrome__read_console_messages to read console output. Console output may be verbose. If you are looking for specific log entries, use the 'pattern' parameter with a regex-compatible pattern. This filters results efficiently and avoids overwhelming output. For example, use pattern: "[MyApp]" to filter for application-specific logs rather than reading all console output.
+
+## Alerts and dialogs
+
+IMPORTANT: Do not trigger JavaScript alerts, confirms, prompts, or browser modal dialogs through your actions. These browser dialogs block all further browser events and will prevent the extension from receiving any subsequent commands. Instead, when possible, use console.log for debugging and then use the mcp__claude-in-chrome__read_console_messages tool to read those log messages. If a page has dialog-triggering elements:
+1. Avoid clicking buttons or links that may trigger alerts (e.g., "Delete" buttons with confirmation dialogs)
+2. If you must interact with such elements, warn the user first that this may interrupt the session
+3. Use mcp__claude-in-chrome__javascript_tool to check for and dismiss any existing dialogs before proceeding
+
+If you accidentally trigger a dialog and lose responsiveness, inform the user they need to manually dismiss it in the browser.
+
+## Avoid rabbit holes and loops
+
+When using browser automation tools, stay focused on the specific task. If you encounter any of the following, stop and ask the user for guidance:
+- Unexpected complexity or tangential browser exploration
+- Browser tool calls failing or returning errors after 2-3 attempts
+- No response from the browser extension
+- Page elements not responding to clicks or input
+- Pages not loading or timing out
+- Unable to complete the browser task despite multiple approaches
+
+Explain what you attempted, what went wrong, and ask how the user would like to proceed. Do not keep retrying the same failing browser action or explore unrelated pages without checking in first.
+
+## Tab context and session startup
+
+IMPORTANT: At the start of each browser automation session, call mcp__claude-in-chrome__tabs_context_mcp first to get information about the user's current browser tabs. Use this context to understand what the user might want to work with before creating new tabs.
+
+Never reuse tab IDs from a previous/other session. Follow these guidelines:
+1. Only reuse an existing tab if the user explicitly asks to work with it
+2. Otherwise, create a new tab with mcp__claude-in-chrome__tabs_create_mcp
+3. If a tool returns an error indicating the tab doesn't exist or is invalid, call tabs_context_mcp to get fresh tab IDs
+4. When a tab is closed by the user or a navigation error occurs, call tabs_context_mcp to see what tabs are available`;
+/**
+ * Additional instructions for chrome tools when tool search is enabled.
+ * These instruct the model to load chrome tools via ToolSearch before using them.
+ * Only injected when tool search is actually enabled (not just optimistically possible).
+ */
+export const CHROME_TOOL_SEARCH_INSTRUCTIONS = `**IMPORTANT: Before using any chrome browser tools, you MUST first load them using ToolSearch.**
+
+Chrome browser tools are MCP tools that require loading before use. Before calling any mcp__claude-in-chrome__* tool:
+1. Use ToolSearch with \`select:mcp__claude-in-chrome__<tool_name>\` to load the specific tool
+2. Then call the tool
+
+For example, to get tab context:
+1. First: ToolSearch with query "select:mcp__claude-in-chrome__tabs_context_mcp"
+2. Then: Call mcp__claude-in-chrome__tabs_context_mcp`;
+/**
+ * Get the base chrome system prompt (without tool search instructions).
+ * Tool search instructions are injected separately at request time in claude.ts
+ * based on the actual tool search enabled state.
+ */
+export function getChromeSystemPrompt() {
+    return BASE_CHROME_PROMPT;
+}
+/**
+ * Minimal hint about Claude in Chrome skill availability. This is injected at startup when the extension is installed
+ * to guide the model to invoke the skill before using the MCP tools.
+ */
+export const CLAUDE_IN_CHROME_SKILL_HINT = `**Browser Automation**: Chrome browser tools are available via the "claude-in-chrome" skill. CRITICAL: Before using any mcp__claude-in-chrome__* tools, invoke the skill by calling the Skill tool with skill: "claude-in-chrome". The skill provides browser automation instructions and enables the tools.`;
+/**
+ * Variant when the built-in WebBrowser tool is also available — steer
+ * dev-loop tasks to WebBrowser and reserve the extension for the user's
+ * authenticated Chrome (logged-in sites, OAuth, computer-use).
+ */
+export const CLAUDE_IN_CHROME_SKILL_HINT_WITH_WEBBROWSER = `**Browser Automation**: Use WebBrowser for development (dev servers, JS eval, console, screenshots). Use claude-in-chrome for the user's real Chrome when you need logged-in sessions, OAuth, or computer-use — invoke Skill(skill: "claude-in-chrome") before any mcp__claude-in-chrome__* tool.`;

package/dist/src/utils/claudeInChrome/setup.js

@@ -0,0 +1,320 @@
+import { chmod, mkdir, readFile, writeFile } from 'fs/promises';
+import { createRequire } from 'module';
+import { homedir } from 'os';
+import { join } from 'path';
+import { fileURLToPath } from 'url';
+import { getIsInteractive, getIsNonInteractiveSession, getSessionBypassPermissionsMode, } from '../../bootstrap/state.js';
+import { getFeatureValue_CACHED_MAY_BE_STALE } from '../../services/analytics/growthbook.js';
+import { isInBundledMode } from '../bundledMode.js';
+import { getGlobalConfig, saveGlobalConfig } from '../config.js';
+import { logForDebugging } from '../debug.js';
+import { getClaudeConfigHomeDir, isEnvDefinedFalsy, isEnvTruthy, } from '../envUtils.js';
+import { execFileNoThrowWithCwd } from '../execFileNoThrow.js';
+import { getPlatform } from '../platform.js';
+import { jsonStringify } from '../slowOperations.js';
+import { CLAUDE_IN_CHROME_MCP_SERVER_NAME, getAllBrowserDataPaths, getAllNativeMessagingHostsDirs, getAllWindowsRegistryKeys, openInChrome, } from './common.js';
+import { getChromeSystemPrompt } from './prompt.js';
+import { isChromeExtensionInstalledPortable } from './setupPortable.js';
+const CHROME_EXTENSION_RECONNECT_URL = 'https://clau.de/chrome/reconnect';
+const require = createRequire(import.meta.url);
+let cachedBrowserTools;
+const NATIVE_HOST_IDENTIFIER = 'com.anthropic.claude_code_browser_extension';
+const NATIVE_HOST_MANIFEST_NAME = `${NATIVE_HOST_IDENTIFIER}.json`;
+function getBrowserTools() {
+    if (cachedBrowserTools) {
+        return cachedBrowserTools;
+    }
+    try {
+        const mod = require('@ant/claude-for-chrome-mcp');
+        cachedBrowserTools = mod.BROWSER_TOOLS ?? [];
+    }
+    catch (error) {
+        logForDebugging(`[Claude in Chrome] Optional package @ant/claude-for-chrome-mcp is unavailable: ${error}`, { level: 'debug' });
+        cachedBrowserTools = [];
+    }
+    return cachedBrowserTools;
+}
+export function shouldEnableClaudeInChrome(chromeFlag) {
+    // Disable by default in non-interactive sessions (e.g., SDK, CI)
+    if (getIsNonInteractiveSession() && chromeFlag !== true) {
+        return false;
+    }
+    // Check CLI flags
+    if (chromeFlag === true) {
+        return true;
+    }
+    if (chromeFlag === false) {
+        return false;
+    }
+    // Check environment variables
+    if (isEnvTruthy(process.env.CLAUDE_CODE_ENABLE_CFC)) {
+        return true;
+    }
+    if (isEnvDefinedFalsy(process.env.CLAUDE_CODE_ENABLE_CFC)) {
+        return false;
+    }
+    // Check default config settings
+    const config = getGlobalConfig();
+    if (config.claudeInChromeDefaultEnabled !== undefined) {
+        return config.claudeInChromeDefaultEnabled;
+    }
+    return false;
+}
+let shouldAutoEnable = undefined;
+export function shouldAutoEnableClaudeInChrome() {
+    if (shouldAutoEnable !== undefined) {
+        return shouldAutoEnable;
+    }
+    shouldAutoEnable =
+        getIsInteractive() &&
+            isChromeExtensionInstalled_CACHED_MAY_BE_STALE() &&
+            (process.env.USER_TYPE === 'ant' ||
+                getFeatureValue_CACHED_MAY_BE_STALE('tengu_chrome_auto_enable', false));
+    return shouldAutoEnable;
+}
+/**
+ * Setup Claude in Chrome MCP server and tools
+ *
+ * @returns MCP config and allowed tools, or throws an error if platform is unsupported
+ */
+export function setupClaudeInChrome() {
+    const isNativeBuild = isInBundledMode();
+    const allowedTools = getBrowserTools().map(tool => `mcp__claude-in-chrome__${tool.name}`);
+    const env = {};
+    if (getSessionBypassPermissionsMode()) {
+        env.CLAUDE_CHROME_PERMISSION_MODE = 'skip_all_permission_checks';
+    }
+    const hasEnv = Object.keys(env).length > 0;
+    if (isNativeBuild) {
+        // Create a wrapper script that calls the same binary with --chrome-native-host. This
+        // is needed because the native host manifest "path" field cannot contain arguments.
+        const execCommand = `"${process.execPath}" --chrome-native-host`;
+        // Run asynchronously without blocking; best-effort so swallow errors
+        void createWrapperScript(execCommand)
+            .then(manifestBinaryPath => installChromeNativeHostManifest(manifestBinaryPath))
+            .catch(e => logForDebugging(`[Claude in Chrome] Failed to install native host: ${e}`, { level: 'error' }));
+        return {
+            mcpConfig: {
+                [CLAUDE_IN_CHROME_MCP_SERVER_NAME]: {
+                    type: 'stdio',
+                    command: process.execPath,
+                    args: ['--claude-in-chrome-mcp'],
+                    scope: 'dynamic',
+                    ...(hasEnv && { env }),
+                },
+            },
+            allowedTools,
+            systemPrompt: getChromeSystemPrompt(),
+        };
+    }
+    else {
+        const __filename = fileURLToPath(import.meta.url);
+        const __dirname = join(__filename, '..');
+        const cliPath = join(__dirname, 'cli.js');
+        void createWrapperScript(`"${process.execPath}" "${cliPath}" --chrome-native-host`)
+            .then(manifestBinaryPath => installChromeNativeHostManifest(manifestBinaryPath))
+            .catch(e => logForDebugging(`[Claude in Chrome] Failed to install native host: ${e}`, { level: 'error' }));
+        const mcpConfig = {
+            [CLAUDE_IN_CHROME_MCP_SERVER_NAME]: {
+                type: 'stdio',
+                command: process.execPath,
+                args: [`${cliPath}`, '--claude-in-chrome-mcp'],
+                scope: 'dynamic',
+                ...(hasEnv && { env }),
+            },
+        };
+        return {
+            mcpConfig,
+            allowedTools,
+            systemPrompt: getChromeSystemPrompt(),
+        };
+    }
+}
+/**
+ * Get native messaging hosts directories for all supported browsers
+ * Returns an array of directories where the native host manifest should be installed
+ */
+function getNativeMessagingHostsDirs() {
+    const platform = getPlatform();
+    if (platform === 'windows') {
+        // Windows uses a single location with registry entries pointing to it
+        const home = homedir();
+        const appData = process.env.APPDATA || join(home, 'AppData', 'Local');
+        return [join(appData, 'Context Code', 'ChromeNativeHost')];
+    }
+    // macOS and Linux: return all browser native messaging directories
+    return getAllNativeMessagingHostsDirs().map(({ path }) => path);
+}
+export async function installChromeNativeHostManifest(manifestBinaryPath) {
+    const manifestDirs = getNativeMessagingHostsDirs();
+    if (manifestDirs.length === 0) {
+        throw Error('Claude in Chrome Native Host not supported on this platform');
+    }
+    const manifest = {
+        name: NATIVE_HOST_IDENTIFIER,
+        description: 'Context Code Browser Extension Native Host',
+        path: manifestBinaryPath,
+        type: 'stdio',
+        allowed_origins: [
+            `chrome-extension://fcoeoabgfenejglbffodgkkbkcdhcgfn/`, // PROD_EXTENSION_ID
+            ...(process.env.USER_TYPE === 'ant'
+                ? [
+                    'chrome-extension://dihbgbndebgnbjfmelmegjepbnkhlgni/', // DEV_EXTENSION_ID
+                    'chrome-extension://dngcpimnedloihjnnfngkgjoidhnaolf/', // ANT_EXTENSION_ID
+                ]
+                : []),
+        ],
+    };
+    const manifestContent = jsonStringify(manifest, null, 2);
+    let anyManifestUpdated = false;
+    // Install manifest to all browser directories
+    for (const manifestDir of manifestDirs) {
+        const manifestPath = join(manifestDir, NATIVE_HOST_MANIFEST_NAME);
+        // Check if content matches to avoid unnecessary writes
+        const existingContent = await readFile(manifestPath, 'utf-8').catch(() => null);
+        if (existingContent === manifestContent) {
+            continue;
+        }
+        try {
+            await mkdir(manifestDir, { recursive: true });
+            await writeFile(manifestPath, manifestContent);
+            logForDebugging(`[Claude in Chrome] Installed native host manifest at: ${manifestPath}`);
+            anyManifestUpdated = true;
+        }
+        catch (error) {
+            // Log but don't fail - the browser might not be installed
+            logForDebugging(`[Claude in Chrome] Failed to install manifest at ${manifestPath}: ${error}`);
+        }
+    }
+    // Windows requires registry entries pointing to the manifest for each browser
+    if (getPlatform() === 'windows') {
+        const manifestPath = join(manifestDirs[0], NATIVE_HOST_MANIFEST_NAME);
+        registerWindowsNativeHosts(manifestPath);
+    }
+    // Restart the native host if we have rewritten any manifest
+    if (anyManifestUpdated) {
+        void isChromeExtensionInstalled().then(isInstalled => {
+            if (isInstalled) {
+                logForDebugging(`[Claude in Chrome] First-time install detected, opening reconnect page in browser`);
+                void openInChrome(CHROME_EXTENSION_RECONNECT_URL);
+            }
+            else {
+                logForDebugging(`[Claude in Chrome] First-time install detected, but extension not installed, skipping reconnect`);
+            }
+        });
+    }
+}
+/**
+ * Register the native host in Windows registry for all supported browsers
+ */
+function registerWindowsNativeHosts(manifestPath) {
+    const registryKeys = getAllWindowsRegistryKeys();
+    for (const { browser, key } of registryKeys) {
+        const fullKey = `${key}\\${NATIVE_HOST_IDENTIFIER}`;
+        // Use reg.exe to add the registry entry
+        // https://developer.chrome.com/docs/extensions/develop/concepts/native-messaging
+        void execFileNoThrowWithCwd('reg', [
+            'add',
+            fullKey,
+            '/ve', // Set the default (unnamed) value
+            '/t',
+            'REG_SZ',
+            '/d',
+            manifestPath,
+            '/f', // Force overwrite without prompt
+        ]).then(result => {
+            if (result.code === 0) {
+                logForDebugging(`[Claude in Chrome] Registered native host for ${browser} in Windows registry: ${fullKey}`);
+            }
+            else {
+                logForDebugging(`[Claude in Chrome] Failed to register native host for ${browser} in Windows registry: ${result.stderr}`);
+            }
+        });
+    }
+}
+/**
+ * Create a wrapper script in ~/.context/chrome/ that invokes the given command. This is
+ * necessary because Chrome's native host manifest "path" field cannot contain arguments.
+ *
+ * @param command - The full command to execute (e.g., "/path/to/context --chrome-native-host")
+ * @returns The path to the wrapper script
+ */
+async function createWrapperScript(command) {
+    const platform = getPlatform();
+    const chromeDir = join(getClaudeConfigHomeDir(), 'chrome');
+    const wrapperPath = platform === 'windows'
+        ? join(chromeDir, 'chrome-native-host.bat')
+        : join(chromeDir, 'chrome-native-host');
+    const scriptContent = platform === 'windows'
+        ? `@echo off
+REM Chrome native host wrapper script
+REM Generated by Context Code - do not edit manually
+${command}
+`
+        : `#!/bin/sh
+# Chrome native host wrapper script
+# Generated by Context Code - do not edit manually
+exec ${command}
+`;
+    // Check if content matches to avoid unnecessary writes
+    const existingContent = await readFile(wrapperPath, 'utf-8').catch(() => null);
+    if (existingContent === scriptContent) {
+        return wrapperPath;
+    }
+    await mkdir(chromeDir, { recursive: true });
+    await writeFile(wrapperPath, scriptContent);
+    if (platform !== 'windows') {
+        await chmod(wrapperPath, 0o755);
+    }
+    logForDebugging(`[Claude in Chrome] Created Chrome native host wrapper script: ${wrapperPath}`);
+    return wrapperPath;
+}
+/**
+ * Get cached value of whether Chrome extension is installed. Returns
+ * from disk cache immediately, updates cache in background.
+ *
+ * Use this for sync/startup-critical paths where blocking on filesystem
+ * access is not acceptable. The value may be stale if the cache hasn't
+ * been updated recently.
+ *
+ * Only positive detections are persisted. A negative result from the
+ * filesystem scan is not cached, because it may come from a machine that
+ * shares ~/.context.json but has no local Chrome (e.g. a remote dev
+ * environment using the bridge), and caching it would permanently poison
+ * auto-enable for every session on every machine that reads that config.
+ */
+function isChromeExtensionInstalled_CACHED_MAY_BE_STALE() {
+    // Update cache in background without blocking
+    void isChromeExtensionInstalled().then(isInstalled => {
+        // Only persist positive detections — see docstring. The cost of a stale
+        // `true` is one silent MCP connection attempt per session; the cost of a
+        // stale `false` is auto-enable never working again without manual repair.
+        if (!isInstalled) {
+            return;
+        }
+        const config = getGlobalConfig();
+        if (config.cachedChromeExtensionInstalled !== isInstalled) {
+            saveGlobalConfig(prev => ({
+                ...prev,
+                cachedChromeExtensionInstalled: isInstalled,
+            }));
+        }
+    });
+    // Return cached value immediately from disk
+    const cached = getGlobalConfig().cachedChromeExtensionInstalled;
+    return cached ?? false;
+}
+/**
+ * Detects if the Claude in Chrome extension is installed by checking the Extensions
+ * directory across all supported Chromium-based browsers and their profiles.
+ *
+ * @returns Object with isInstalled boolean and the browser where the extension was found
+ */
+export async function isChromeExtensionInstalled() {
+    const browserPaths = getAllBrowserDataPaths();
+    if (browserPaths.length === 0) {
+        logForDebugging(`[Claude in Chrome] Unsupported platform for extension detection: ${getPlatform()}`);
+        return false;
+    }
+    return isChromeExtensionInstalledPortable(browserPaths, logForDebugging);
+}