@jobshimo/browser-link 0.2.0 → 0.4.1

package/dist/commands/updates.js

@@ -63,21 +63,38 @@ function isNewer(latest, current) {
     }
     return false;
 }
+const UPDATES_CLI_I18N = {
+    en: {
+        currentLabel: 'Current: ',
+        latestLabel: 'Latest:  ',
+        cantReach: 'Could not check the registry',
+        upToDate: 'You are up to date.',
+        available: (cmd) => `Update available. Run: ${cmd}`,
+    },
+    es: {
+        currentLabel: 'Instalada: ',
+        latestLabel: 'Última:    ',
+        cantReach: 'No se pudo consultar el registry',
+        upToDate: 'Estás en la última versión.',
+        available: (cmd) => `Hay una actualización disponible. Corré: ${cmd}`,
+    },
+};
 /** Plain-text formatter for the non-interactive `browser-link updates`. */
-export function formatUpdate(info) {
+export function formatUpdate(info, language = 'en') {
+    const t = UPDATES_CLI_I18N[language];
     if (info.error || info.latest === null) {
         return [
-            `Current: ${info.current}`,
-            `Could not check the registry: ${info.error ?? 'unknown error'}`,
+            `${t.currentLabel}${info.current}`,
+            `${t.cantReach}: ${info.error ?? 'unknown error'}`,
         ].join('\n');
     }
     if (info.newer) {
         return [
-            `Current: ${info.current}`,
-            `Latest:  ${info.latest}`,
-            `Update available. Run: npm install -g ${PACKAGE_NAME}@latest`,
+            `${t.currentLabel}${info.current}`,
+            `${t.latestLabel}${info.latest}`,
+            t.available(`npm install -g ${PACKAGE_NAME}@latest`),
         ].join('\n');
     }
-    return [`Current: ${info.current}`, `Latest:  ${info.latest}`, `You are up to date.`].join('\n');
+    return [`${t.currentLabel}${info.current}`, `${t.latestLabel}${info.latest}`, t.upToDate].join('\n');
 }
 //# sourceMappingURL=updates.js.map

package/dist/commands/updates.js.map

@@ -1 +1 @@
-{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../src/commands/updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAUtD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAS,GAAG,IAAI;IACjD,MAAM,GAAG,GAAG,wCAAwC,YAAY,YAAY,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,8BAA8B,GAAG,CAAC,MAAM,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,4CAA4C;aACpD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY;gBACzB,CAAC,CAAC,mBAAmB,SAAS,IAAI;gBAClC,CAAC,CAAC,GAAG,CAAC,OAAO;YACf,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACvC,OAAO;YACL,YAAY,IAAI,CAAC,OAAO,EAAE;YAC1B,iCAAiC,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE;SACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;YACL,YAAY,IAAI,CAAC,OAAO,EAAE;YAC1B,YAAY,IAAI,CAAC,MAAM,EAAE;YACzB,yCAAyC,YAAY,SAAS;SAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnG,CAAC"}
+{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../src/commands/updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAWtD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAS,GAAG,IAAI;IACjD,MAAM,GAAG,GAAG,wCAAwC,YAAY,YAAY,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,8BAA8B,GAAG,CAAC,MAAM,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,4CAA4C;aACpD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY;gBACzB,CAAC,CAAC,mBAAmB,SAAS,IAAI;gBAClC,CAAC,CAAC,GAAG,CAAC,OAAO;YACf,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAYD,MAAM,gBAAgB,GAAqC;IACzD,EAAE,EAAE;QACF,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,WAAW;QACxB,SAAS,EAAE,8BAA8B;QACzC,QAAQ,EAAE,qBAAqB;QAC/B,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,0BAA0B,GAAG,EAAE;KACpD;IACD,EAAE,EAAE;QACF,YAAY,EAAE,aAAa;QAC3B,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,kCAAkC;QAC7C,QAAQ,EAAE,6BAA6B;QACvC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,4CAA4C,GAAG,EAAE;KACtE;CACF,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,IAAgB,EAAE,WAAqB,IAAI;IACtE,MAAM,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACvC,OAAO;YACL,GAAG,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE;YAClC,GAAG,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE;SACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;YACL,GAAG,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE;YAClC,GAAG,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE;YAChC,CAAC,CAAC,SAAS,CAAC,kBAAkB,YAAY,SAAS,CAAC;SACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC5F,IAAI,CACL,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -1,11 +1,33 @@
 /**
- * Small per-user config persisted next to the map DB. Only meant for UX
- * preferences (e.g. "don't show me the welcome screen every time").
- * No domain data ever lives here.
+ * Small per-user config persisted next to the map DB. UX preferences and
+ * the tool-access deny list — never any domain data.
  */
 export interface BrowserLinkConfig {
     skipWelcome?: boolean;
     language?: 'en' | 'es';
+    /**
+     * Tool names the MCP server must not expose. Empty / undefined means
+     * "everything enabled" (default, backwards-compatible). Unknown names
+     * are dropped silently by sanitizeDisabledTools so old configs survive
+     * tool renames or removals.
+     */
+    disabledTools?: string[];
+    /**
+     * Multi-agent mode. When false (default), only one MCP client can have
+     * browser-link active at a time; a second client trying to spawn the
+     * server crashes with EADDRINUSE. When true, the second instance becomes
+     * a proxy that forwards MCP requests to the first one over an internal
+     * IPC port (127.0.0.1:17530). All agents end up sharing the same Chrome
+     * tabs and the same persistent UI map.
+     */
+    multiAgent?: boolean;
+    /**
+     * Only honoured when multiAgent === true. When false (default), if the
+     * primary's MCP client closes, secondary clients lose the bridge and
+     * have to be relaunched manually. When true, one of the secondaries
+     * takes over the primary role automatically (race on bind(17529)).
+     */
+    autoReelect?: boolean;
 }
 export declare function loadConfig(): BrowserLinkConfig;
 export declare function saveConfig(patch: Partial<BrowserLinkConfig>): BrowserLinkConfig;

package/dist/config.js

@@ -1,9 +1,42 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { getDataDir } from './map/paths.js';
+import { sanitizeDisabledTools } from './permissions.js';
 function configFile() {
     return join(getDataDir(), 'config.json');
 }
+function normalise(cfg) {
+    // Always run the disabled-tools list through the sanitizer — both on read
+    // and on write — so unknown names from a downgraded build, a typo, or a
+    // manual edit never reach the server filter.
+    const sanitized = sanitizeDisabledTools(cfg.disabledTools);
+    let next;
+    if (sanitized.length === 0) {
+        const { disabledTools: _omit, ...rest } = cfg;
+        next = rest;
+    }
+    else {
+        next = { ...cfg, disabledTools: sanitized };
+    }
+    // autoReelect only makes sense when multiAgent is on. Drop a stray
+    // autoReelect:true if multiAgent is off, so the config file never has
+    // an inert flag advertising a behaviour it does not produce.
+    if (next.autoReelect && !next.multiAgent) {
+        const { autoReelect: _omit2, ...rest2 } = next;
+        next = rest2;
+    }
+    // Drop explicit `false` for the two new flags too — the default is false,
+    // so storing it just adds noise.
+    if (next.multiAgent === false) {
+        const { multiAgent: _omit3, ...rest3 } = next;
+        next = rest3;
+    }
+    if (next.autoReelect === false) {
+        const { autoReelect: _omit4, ...rest4 } = next;
+        next = rest4;
+    }
+    return next;
+}
 export function loadConfig() {
     const path = configFile();
     if (!existsSync(path))
@@ -12,7 +45,7 @@ export function loadConfig() {
         const raw = readFileSync(path, 'utf8');
         const parsed = JSON.parse(raw);
         if (parsed && typeof parsed === 'object')
-            return parsed;
+            return normalise(parsed);
         return {};
     }
     catch (err) {
@@ -28,7 +61,7 @@ export function saveConfig(patch) {
     const path = configFile();
     mkdirSync(dirname(path), { recursive: true });
     const current = loadConfig();
-    const next = { ...current, ...patch };
+    const next = normalise({ ...current, ...patch });
     writeFileSync(path, JSON.stringify(next, null, 2) + '\n', 'utf8');
     return next;
 }

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAY5C,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAA2B,CAAC;QAC7E,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,2CAA2C,IAAI,KAAK,OAAO,mBAAmB,CAAC,CAAC;QAC7F,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiC;IAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAsB,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IACzD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAkCzD,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,GAAsB;IACvC,0EAA0E;IAC1E,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,IAAuB,CAAC;IAC5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QAC9C,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IACD,mEAAmE;IACnE,sEAAsE;IACtE,6DAA6D;IAC7D,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,0EAA0E;IAC1E,iCAAiC;IACjC,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC9C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,MAA2B,CAAC,CAAC;QACxF,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,2CAA2C,IAAI,KAAK,OAAO,mBAAmB,CAAC,CAAC;QAC7F,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiC;IAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/messages.d.ts

@@ -9,6 +9,13 @@ export type TabId = string;
 export interface TabRegisterPayload {
     url: string;
     title: string;
+    /**
+     * Optional. The browser-link tab_id this Chrome tab last had, as
+     * remembered by the extension across primary swaps. The primary honours
+     * it if free; otherwise it assigns a new id and emits a `tab-renamed`
+     * event the agent can pick up via the `browser.events` tool.
+     */
+    previousTabId?: TabId;
 }
 export interface TabRegisteredPayload {
     tabId: TabId;

package/dist/permissions.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Tool access control — single source of truth for which MCP tools
+ * browser-link exposes and how the user can narrow that down.
+ *
+ * The runtime answer to "is this tool allowed?" is computed from the
+ * `disabledTools` list in `config.json` (default: empty = everything
+ * allowed). The catalogue below adds human-readable metadata used by
+ * the UI and the CLI subcommand — it never affects what the MCP server
+ * returns by itself.
+ */
+export type ToolFamily = 'bridge' | 'map';
+/** Coarse-grained behaviour bucket — used by presets, not by the runtime
+ * filter. The runtime only cares about the exact tool name. */
+export type ToolCategory = 'read' | 'action' | 'eval' | 'map-read' | 'map-write';
+export interface ToolMeta {
+    name: string;
+    family: ToolFamily;
+    category: ToolCategory;
+    summary: string;
+}
+export declare const TOOL_CATALOGUE: readonly ToolMeta[];
+export type PresetId = 'all' | 'readonly' | 'no-eval' | 'no-map';
+export interface PresetDef {
+    id: PresetId;
+    label: string;
+    /** Which tool names this preset disables. */
+    disabled: readonly string[];
+}
+export declare const PRESETS: readonly PresetDef[];
+/** True when the tool should be exposed in tools/list and accepted in tools/call. */
+export declare function isToolEnabled(name: string, disabled: readonly string[] | undefined): boolean;
+/** Drop entries that don't match any current tool, dedupe, and sort. Used
+ * before writing the list to disk and after reading it back, so unknown
+ * names from older or newer versions never poison the runtime. */
+export declare function sanitizeDisabledTools(input: readonly string[] | undefined): string[];
+export declare function getPreset(id: PresetId): PresetDef;
+export declare function isKnownTool(name: string): boolean;

package/dist/permissions.js

@@ -0,0 +1,156 @@
+/**
+ * Tool access control — single source of truth for which MCP tools
+ * browser-link exposes and how the user can narrow that down.
+ *
+ * The runtime answer to "is this tool allowed?" is computed from the
+ * `disabledTools` list in `config.json` (default: empty = everything
+ * allowed). The catalogue below adds human-readable metadata used by
+ * the UI and the CLI subcommand — it never affects what the MCP server
+ * returns by itself.
+ */
+export const TOOL_CATALOGUE = [
+    // Browser bridge — read-only
+    { name: 'browser.list_tabs', family: 'bridge', category: 'read', summary: 'List connected tabs' },
+    {
+        name: 'browser.ping',
+        family: 'bridge',
+        category: 'read',
+        summary: 'Verify the bridge to a tab',
+    },
+    {
+        name: 'browser.snapshot',
+        family: 'bridge',
+        category: 'read',
+        summary: 'Dump DOM, text and interactive elements',
+    },
+    {
+        name: 'browser.console',
+        family: 'bridge',
+        category: 'read',
+        summary: 'Read recent console messages',
+    },
+    {
+        name: 'browser.network',
+        family: 'bridge',
+        category: 'read',
+        summary: 'Read recent network requests',
+    },
+    {
+        name: 'browser.network_body',
+        family: 'bridge',
+        category: 'read',
+        summary: 'Fetch the body of a specific request',
+    },
+    // Browser bridge — actions
+    {
+        name: 'browser.navigate',
+        family: 'bridge',
+        category: 'action',
+        summary: 'Navigate the tab to a URL',
+    },
+    {
+        name: 'browser.click',
+        family: 'bridge',
+        category: 'action',
+        summary: 'Click an element by CSS selector',
+    },
+    {
+        name: 'browser.type',
+        family: 'bridge',
+        category: 'action',
+        summary: 'Type text into an input',
+    },
+    // Browser bridge — arbitrary code
+    {
+        name: 'browser.evaluate',
+        family: 'bridge',
+        category: 'eval',
+        summary: 'Run arbitrary JavaScript in the page',
+    },
+    // Persistent map — reads
+    {
+        name: 'browser.map.recall',
+        family: 'map',
+        category: 'map-read',
+        summary: 'Recall selectors / flows / gotchas for an app',
+    },
+    { name: 'browser.map.apps', family: 'map', category: 'map-read', summary: 'List known apps' },
+    // Persistent map — writes
+    {
+        name: 'browser.map.save',
+        family: 'map',
+        category: 'map-write',
+        summary: 'Persist a selector / flow / gotcha',
+    },
+    {
+        name: 'browser.map.record_use',
+        family: 'map',
+        category: 'map-write',
+        summary: 'Mark an entry verified or failed',
+    },
+    {
+        name: 'browser.map.forget',
+        family: 'map',
+        category: 'map-write',
+        summary: 'Delete an entry or a whole app',
+    },
+    {
+        name: 'browser.map.rename_app',
+        family: 'map',
+        category: 'map-write',
+        summary: 'Rename an app_key',
+    },
+];
+function namesWhere(predicate) {
+    return TOOL_CATALOGUE.filter(predicate)
+        .map((m) => m.name)
+        .sort();
+}
+export const PRESETS = [
+    { id: 'all', label: 'All enabled', disabled: [] },
+    {
+        id: 'readonly',
+        label: 'Read-only (no actions, no JS, no map writes)',
+        disabled: namesWhere((m) => m.category === 'action' || m.category === 'eval' || m.category === 'map-write'),
+    },
+    {
+        id: 'no-eval',
+        label: 'No evaluate (everything except arbitrary JS)',
+        disabled: ['browser.evaluate'],
+    },
+    {
+        id: 'no-map',
+        label: 'No persistent map (all bridge tools on)',
+        disabled: namesWhere((m) => m.family === 'map'),
+    },
+];
+const KNOWN_NAMES = new Set(TOOL_CATALOGUE.map((m) => m.name));
+/** True when the tool should be exposed in tools/list and accepted in tools/call. */
+export function isToolEnabled(name, disabled) {
+    if (!disabled || disabled.length === 0)
+        return true;
+    return !disabled.includes(name);
+}
+/** Drop entries that don't match any current tool, dedupe, and sort. Used
+ * before writing the list to disk and after reading it back, so unknown
+ * names from older or newer versions never poison the runtime. */
+export function sanitizeDisabledTools(input) {
+    if (!input || input.length === 0)
+        return [];
+    const out = new Set();
+    for (const name of input) {
+        if (typeof name === 'string' && KNOWN_NAMES.has(name))
+            out.add(name);
+    }
+    return [...out].sort();
+}
+export function getPreset(id) {
+    const found = PRESETS.find((p) => p.id === id);
+    if (!found)
+        throw new Error(`Unknown preset: ${id}`);
+    return found;
+}
+export function isKnownTool(name) {
+    return KNOWN_NAMES.has(name);
+}
+//# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAeH,MAAM,CAAC,MAAM,cAAc,GAAwB;IACjD,6BAA6B;IAC7B,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE;IACjG;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,4BAA4B;KACtC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,yCAAyC;KACnD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,8BAA8B;KACxC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,8BAA8B;KACxC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,sCAAsC;KAChD;IAED,2BAA2B;IAC3B;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,2BAA2B;KACrC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,kCAAkC;KAC5C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,yBAAyB;KACnC;IAED,kCAAkC;IAClC;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,sCAAsC;KAChD;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,+CAA+C;KACzD;IACD,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAE7F,0BAA0B;IAC1B;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,oCAAoC;KAC9C;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,kCAAkC;KAC5C;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,gCAAgC;KAC1C;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAC;AAWF,SAAS,UAAU,CAAC,SAAmC;IACrD,OAAO,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAyB;IAC3C,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,8CAA8C;QACrD,QAAQ,EAAE,UAAU,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,CACtF;KACF;IACD;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,8CAA8C;QACrD,QAAQ,EAAE,CAAC,kBAAkB,CAAC;KAC/B;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,yCAAyC;QAChD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;KAChD;CACF,CAAC;AAEF,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAEpF,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAAuC;IACjF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;kEAEkE;AAClE,MAAM,UAAU,qBAAqB,CAAC,KAAoC;IACxE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAY;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/server.d.ts

@@ -1,6 +1,10 @@
 export declare const WS_HOST = "127.0.0.1";
 export declare const WS_PORT = 17529;
-/** Start the MCP server (stdio transport) and the WebSocket bridge.
- * Resolves only when both are ready. If the WebSocket bind fails the
- * MCP transport is never exposed and the caller sees a clear error. */
+/**
+ * Entry point used by the MCP client over stdio. Decides whether THIS
+ * process becomes the primary (binds 17529, runs the WS bridge + MCP
+ * server + optional IPC server) or — when multi-agent mode is enabled
+ * and another primary is already running — becomes a thin proxy that
+ * forwards MCP stdio frames to the primary over IPC.
+ */
 export declare function runServer(): Promise<void>;