@omercnet/paseo-shared-browser 0.4.0 → 0.4.1

package/README.md

@@ -12,13 +12,17 @@ input.
 
 ## Screenshots
 
+Both PNGs show the same isolated Chromium session from a dedicated Paseo test daemon. They were
+captured at 2× pixel density after browser DevTools verified the rendered page contained no private
+organization names.
+
 ### Wide desktop
 
-![Shared Browser showing the same live Paseo page to two viewers on desktop](docs/images/shared-browser-wide.png)
+![Shared Browser showing the same live Paseo page to two viewers on desktop](https://raw.githubusercontent.com/omercnet/paseo-plugins/main/paseo-shared-browser/docs/images/shared-browser-wide.png)
 
 ### Compact client
 
-![Shared Browser controls and the same canonical browser viewport on a compact client](docs/images/shared-browser-compact.png)
+![Shared Browser controls and the same canonical browser viewport on a compact client](https://raw.githubusercontent.com/omercnet/paseo-plugins/main/paseo-shared-browser/docs/images/shared-browser-compact.png)
 
 ## Runtime model
 
@@ -87,12 +91,16 @@ npm run prepare:runtime
 paseo plugin install "$PWD"
 ```
 
-The build requires Node.js 24 or newer and npm on the daemon host. The runtime also needs a
-Chromium-compatible executable. On Linux ARM64, where the bundled download is unavailable, the
-installer automatically uses native Chromium from `/usr/bin/chromium`. Install a non-Snap Chromium
-build with the system package manager before adding the plugin. Set
-`PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE` to an absolute path when Chromium is installed elsewhere.
-The plugin does not emulate x64 Chromium.
+The build requires Node.js 24 or newer and npm on the daemon host. On Linux x64, macOS, and
+Windows, runtime preparation installs and stages the platform's Chrome for Testing distribution. On
+Linux ARM64, where that download is unavailable, the installer automatically uses native Chromium
+from `/usr/bin/chromium`. Install a non-Snap Chromium build with the system package manager before
+adding the plugin. Set `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE` to an absolute path when Chromium
+is installed elsewhere. The plugin does not emulate x64 Chromium on Linux.
+
+On Windows, the upstream installer retains its Chrome download cache under the OS user profile.
+Before upgrading the plugin on Windows, close active Shared Browser sessions and stop the Paseo
+daemon; Windows does not allow the installer to replace runtime executables that are still running.
 
 Open a workspace, search the Command Center for **Open Shared Browser**, or tap the **Shared
 Browser** composer pill while a workspace session is open.
@@ -124,11 +132,12 @@ disconnect does not close or reset either process.
 
 The plugin recognizes only these deployment overrides:
 
-| Variable                                    | Meaning                                                                                                                                                                                                                                     |
-| ------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `PASEO_HOME`                                | Paseo data root. Defaults to `~/.paseo`; browser runtime, supervisor IPC, and profiles live below `plugin-data/shared-browser`.                                                                                                             |
-| `PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY` | Absolute path to the pinned `agent-browser` executable. Defaults to `$PASEO_HOME/plugin-data/shared-browser/runtime/node_modules/.bin/agent-browser`.                                                                                       |
-| `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE`  | Absolute path to Chromium. Defaults to `$PASEO_HOME/plugin-data/shared-browser/runtime/chromium/chrome`. On Linux ARM64, installation automatically links `/usr/bin/chromium`; use this override for another compatible, non-Snap location. |
+| Variable                                    | Meaning                                                                                                                                                                                                                                                               |
+| ------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `PASEO_HOME`                                | Paseo data root. Defaults to `~/.paseo`; browser runtime, supervisor IPC, and profiles live below `plugin-data/shared-browser`.                                                                                                                                       |
+| `PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY` | Absolute path to the pinned `agent-browser` executable. Defaults to `$PASEO_HOME/plugin-data/shared-browser/runtime/node_modules/.bin/agent-browser` (`agent-browser.exe` on Windows).                                                                                |
+| `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE`  | Absolute path to Chromium. Defaults to `$PASEO_HOME/plugin-data/shared-browser/runtime/chromium/chrome` (`chrome.exe` on Windows). On Linux ARM64, installation automatically links `/usr/bin/chromium`; use this override for another compatible, non-Snap location. |
+| `PASEO_SHARED_BROWSER_CHROMIUM_ARGS`        | Optional Chromium arguments passed through the managed runtime. Intended for host requirements such as `--no-sandbox` in an already-isolated CI runner; do not disable the browser sandbox on a general-purpose host.                                                 |
 
 User-supplied `AGENT_BROWSER_*` variables are deliberately ignored.
 
@@ -143,11 +152,16 @@ User-supplied `AGENT_BROWSER_*` variables are deliberately ignored.
 ## Security boundary
 
 - Paseo plugins are trusted, unsandboxed code. The plugin server, detached supervisor,
-  `agent-browser`, and Chromium execute as the daemon OS user and can reach that user's files,
-  processes, credentials, and network.
-- Supervisor IPC uses a user-private Unix socket and token files with owner-only permissions.
-  `agent-browser` IPC metadata and workspace profile directories are also owner-only. The plugin
-  rejects a non-loopback CDP endpoint and disables the `agent-browser` stream port.
+  `agent-browser`, Chromium, and other processes running as the daemon OS user share one trust
+  boundary and can reach that user's files, processes, credentials, and network.
+- Supervisor IPC uses a user-private Unix socket on Linux and macOS or an installation-specific
+  named pipe on Windows, plus a token file under Paseo's user data root for every connection. On
+  Windows, file privacy relies on the ACL inherited from `PASEO_HOME`; custom locations must remain
+  private to the daemon user. `agent-browser` uses loopback TCP for its command and stream services
+  on Windows, so Windows support assumes a trusted single-user host; these services are not an
+  isolation boundary between local OS users.
+- `agent-browser` IPC metadata and workspace profile directories are owner-only on POSIX systems.
+  The plugin rejects a non-loopback CDP endpoint.
 - Viewer and control tokens coordinate clients already paired to the same Paseo daemon. Paseo v0.8
   plugin RPC callbacks expose no authenticated caller identity, so these human-viewer tokens are a
   workflow safeguard, not an authorization boundary. The stdio MCP adapter separately uses an

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-shared-browser",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "One real Chromium session per Paseo workspace, shared live across every connected client.",
   "keywords": [
     "browser",
@@ -22,19 +22,16 @@
     "directory": "paseo-shared-browser"
   },
   "files": [
-    "CHANGELOG.md",
     "LICENSE",
     "README.md",
     "index.client.tsx",
     "index.server.ts",
     "client",
-    "docs",
     "scripts/prepare-dependencies.mjs",
     "scripts/prepare-runtime.mjs",
     "server",
     "shared",
-    "paseo-plugin.json",
-    "tsconfig.json"
+    "paseo-plugin.json"
   ],
   "type": "module",
   "publishConfig": {
@@ -43,8 +40,8 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "lint": "oxlint --deny-warnings .",
-    "format": "oxfmt . '!CHANGELOG.md'",
-    "format:check": "oxfmt --check . '!CHANGELOG.md'",
+    "format": "oxfmt --ignore-path .formatignore .",
+    "format:check": "oxfmt --check --ignore-path .formatignore .",
     "prepare:runtime": "node scripts/prepare-runtime.mjs",
     "test:unit": "node --test scripts/prepare-dependencies.test.mjs && vitest run tests/contracts.test.ts tests/lease.test.ts tests/runtime-lifecycle.test.ts tests/agent-access.test.ts",
     "test:smoke": "vitest run tests/browser.smoke.test.ts --testTimeout=30000"

package/scripts/prepare-runtime.mjs

@@ -14,13 +14,15 @@ import {
   writeFile,
 } from "node:fs/promises";
 import { constants } from "node:fs";
-import { arch, homedir, platform } from "node:os";
+import { arch, homedir, platform, userInfo } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { promisify } from "node:util";
 import { fileURLToPath } from "node:url";
 
 const execFileAsync = promisify(execFile);
 const expectedVersion = "0.37.1";
+const hostPlatform = platform();
+const hostArch = arch();
 const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));
 const paseoHome = process.env.PASEO_HOME || join(homedir(), ".paseo");
 const pluginDataRoot = join(paseoHome, "plugin-data", "shared-browser");
@@ -28,7 +30,16 @@ const runtimeRoot = join(pluginDataRoot, "runtime");
 const stagingRoot = join(pluginDataRoot, `.runtime-${process.pid}`);
 const runtimeModules = join(stagingRoot, "node_modules");
 const packagedAgentBrowser = resolveDependencyRoot("agent-browser");
-const runtimeEntry = join(runtimeModules, ".bin", "agent-browser");
+const runtimeEntry = join(
+  runtimeModules,
+  ".bin",
+  hostPlatform === "win32" ? "agent-browser.exe" : "agent-browser",
+);
+const runtimeChromiumEntry = join(
+  stagingRoot,
+  "chromium",
+  hostPlatform === "win32" ? "chrome.exe" : "chrome",
+);
 const supervisorEntry = join(projectRoot, "server", "supervisor-entry.ts");
 const mcpEntry = join(projectRoot, "server", "mcp-entry.ts");
 
@@ -49,6 +60,15 @@ async function validateAgentBrowser(path) {
     throw new Error(`Expected agent-browser ${expectedVersion}, received ${version ?? "unknown"}`);
   }
 }
+
+async function validateChromium(path) {
+  await execFileAsync(path, ["--version"], {
+    encoding: "utf8",
+    timeout: 15_000,
+    windowsHide: true,
+  });
+}
+
 async function bundleRuntimeEntries() {
   await build({
     entryPoints: {
@@ -81,11 +101,18 @@ async function applyPrivatePermissions(path) {
 async function stageChromiumExecutable(executable) {
   const chromiumRoot = join(stagingRoot, "chromium");
   await mkdir(chromiumRoot, { recursive: true, mode: 0o700 });
-  await symlink(executable, join(chromiumRoot, "chrome"));
+  if (hostPlatform === "darwin") {
+    const quotedExecutable = `'${executable.replaceAll("'", `'"'"'`)}'`;
+    await writeFile(runtimeChromiumEntry, `#!/bin/sh\nexec ${quotedExecutable} "$@"\n`);
+    await chmod(runtimeChromiumEntry, 0o700);
+  } else {
+    await symlink(executable, runtimeChromiumEntry);
+  }
+  return runtimeChromiumEntry;
 }
 
 async function findLinuxArm64Chromium() {
-  if (platform() !== "linux" || arch() !== "arm64") return null;
+  if (hostPlatform !== "linux" || hostArch !== "arm64") return null;
 
   const candidate = "/usr/bin/chromium";
   try {
@@ -99,6 +126,25 @@ async function findLinuxArm64Chromium() {
   }
 }
 
+function installedChromiumExecutable(releaseDir) {
+  switch (hostPlatform) {
+    case "darwin":
+      return join(
+        releaseDir,
+        "Google Chrome for Testing.app",
+        "Contents",
+        "MacOS",
+        "Google Chrome for Testing",
+      );
+    case "linux":
+      return join(releaseDir, "chrome");
+    case "win32":
+      return join(releaseDir, "chrome.exe");
+    default:
+      throw new Error(`Unsupported Chromium platform: ${hostPlatform}`);
+  }
+}
+
 async function installChromium() {
   const override = process.env.PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE;
   if (override) {
@@ -106,35 +152,70 @@ async function installChromium() {
       override,
       "PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE",
     );
-    await stageChromiumExecutable(executable);
-    return;
+    if (hostPlatform === "win32") return executable;
+    return stageChromiumExecutable(executable);
   }
 
   const systemChromium = await findLinuxArm64Chromium();
   if (systemChromium) {
-    await stageChromiumExecutable(systemChromium);
+    const executable = await stageChromiumExecutable(systemChromium);
     console.log(`Using system Chromium at ${systemChromium}`);
-    return;
+    return executable;
   }
 
-  const installHome = join(stagingRoot, "install-home");
-  await mkdir(installHome, { recursive: true, mode: 0o700 });
+  // Rust's dirs::home_dir() ignores HOME on Windows and resolves the profile
+  // through SHGetKnownFolderPath. Use that cache there; Unix stays isolated.
+  const installHome =
+    hostPlatform === "win32" ? userInfo().homedir : join(stagingRoot, "install-home");
+  if (hostPlatform !== "win32") {
+    await mkdir(installHome, { recursive: true, mode: 0o700 });
+  }
   await execFileAsync(runtimeEntry, ["install"], {
-    env: { ...process.env, HOME: installHome },
+    env: hostPlatform === "win32" ? process.env : { ...process.env, HOME: installHome },
     timeout: 180_000,
+    windowsHide: true,
   });
 
   const browsersRoot = join(installHome, ".agent-browser", "browsers");
   const releases = (await readdir(browsersRoot, { withFileTypes: true }))
     .filter((entry) => entry.isDirectory() && entry.name.startsWith("chrome-"))
     .map((entry) => entry.name)
-    .sort()
-    .reverse();
-  const chrome = releases[0] && join(browsersRoot, releases[0], "chrome");
-  if (!chrome) throw new Error("agent-browser install did not produce a Chromium release");
+    .sort((left, right) => right.localeCompare(left, undefined, { numeric: true }));
+  const releaseDir = releases[0] && join(browsersRoot, releases[0]);
+  if (!releaseDir) throw new Error("agent-browser install did not produce a Chromium release");
+  const chrome = installedChromiumExecutable(releaseDir);
   await requireExecutable(chrome, "Installed Chromium executable");
-  await cp(dirname(chrome), join(stagingRoot, "chromium"), { recursive: true, force: true });
-  await rm(installHome, { recursive: true, force: true });
+  await cp(releaseDir, join(stagingRoot, "chromium"), { recursive: true, force: true });
+  if (hostPlatform === "darwin") {
+    // chrome can't be a symlink to the .app's real binary here: macOS dyld
+    // resolves @executable_path from the invoked path's own directory, so a
+    // symlink at chromium/chrome would break the bundle's relative Frameworks
+    // lookup. Exec the real binary by its actual path instead.
+    await writeFile(
+      runtimeChromiumEntry,
+      `#!/bin/sh\nexec "$(cd "$(dirname "$0")" && pwd)/Google Chrome for Testing.app/Contents/MacOS/Google Chrome for Testing" "$@"\n`,
+    );
+    await chmod(runtimeChromiumEntry, 0o700);
+  }
+  if (hostPlatform !== "win32") await rm(installHome, { recursive: true, force: true });
+  return runtimeChromiumEntry;
+}
+
+async function stageAgentBrowserEntry() {
+  if (hostPlatform === "win32") {
+    const executableArch = hostArch === "arm64" ? "x64" : hostArch;
+    if (executableArch !== "x64") {
+      throw new Error(`Unsupported agent-browser Windows architecture: ${hostArch}`);
+    }
+    await cp(
+      join(packagedAgentBrowser, "bin", `agent-browser-win32-${executableArch}.exe`),
+      runtimeEntry,
+      { force: true },
+    );
+  } else {
+    await symlink("../agent-browser/bin/agent-browser.js", runtimeEntry);
+  }
+  await chmod(runtimeEntry, 0o700);
 }
 
 await rm(stagingRoot, { recursive: true, force: true });
@@ -144,8 +225,7 @@ await cp(packagedAgentBrowser, join(runtimeModules, "agent-browser"), {
   recursive: true,
   force: true,
 });
-await symlink("../agent-browser/bin/agent-browser.js", runtimeEntry);
-await chmod(runtimeEntry, 0o700);
+await stageAgentBrowserEntry();
 
 const binaryOverride = process.env.PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY;
 if (binaryOverride)
@@ -153,7 +233,7 @@ if (binaryOverride)
     await requireExecutable(binaryOverride, "PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY"),
   );
 await validateAgentBrowser(await requireExecutable(runtimeEntry, "Packaged agent-browser entry"));
-await installChromium();
+const chromiumEntry = await installChromium();
 await bundleRuntimeEntries();
 
 await writeFile(
@@ -162,7 +242,9 @@ await writeFile(
   { mode: 0o600 },
 );
 await applyPrivatePermissions(stagingRoot);
-await rm(runtimeRoot, { recursive: true, force: true });
+if (hostPlatform !== "win32") {
+  await validateChromium(await requireExecutable(chromiumEntry, "Staged Chromium executable"));
+}
 await rename(stagingRoot, runtimeRoot);
 
 console.log(`Prepared immutable Shared Browser runtime assets in ${runtimeRoot}`);

package/server/agent-browser-runtime.ts

@@ -139,6 +139,15 @@ function runtimeEnvironment(ipcDirectory: string): NodeJS.ProcessEnv {
     "DISPLAY",
     "WAYLAND_DISPLAY",
     "XAUTHORITY",
+    "APPDATA",
+    "LOCALAPPDATA",
+    "USERPROFILE",
+    "HOMEDRIVE",
+    "HOMEPATH",
+    "SYSTEMROOT",
+    "WINDIR",
+    "COMSPEC",
+    "PATHEXT",
   ]) {
     const value = process.env[key];
     if (value !== undefined) environment[key] = value;
@@ -221,6 +230,7 @@ export class AgentBrowserRuntime {
       chmod(this.ipcDirectory, PRIVATE_DIRECTORY_MODE),
     ]);
     await this.assertVersion();
+    const chromiumArguments = process.env.PASEO_SHARED_BROWSER_CHROMIUM_ARGS;
     const opened = await this.invoke([
       "--session",
       this.session,
@@ -228,6 +238,7 @@ export class AgentBrowserRuntime {
       this.profilePath,
       "--executable-path",
       this.executablePath,
+      ...(chromiumArguments ? ["--args", chromiumArguments] : []),
       "--json",
       "open",
       this.initialUrl,

package/server/runtime-owner.ts

@@ -18,12 +18,25 @@ function paseoHome(): string {
 
 export async function createRuntimeOwner(): Promise<RuntimeOwner<OwnedRuntime>> {
   const root = join(paseoHome(), "plugin-data", "shared-browser");
+  const ipcDirectory =
+    process.platform === "win32"
+      ? join(root, "ipc")
+      : join(
+          "/tmp",
+          `paseo-shared-browser-${createHash("sha256").update(root).digest("hex").slice(0, 16)}`,
+        );
   const binaryPath =
     process.env.PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY ??
-    join(root, "runtime", "node_modules", ".bin", "agent-browser");
+    join(
+      root,
+      "runtime",
+      "node_modules",
+      ".bin",
+      process.platform === "win32" ? "agent-browser.exe" : "agent-browser",
+    );
   const executablePath =
     process.env.PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE ??
-    join(root, "runtime", "chromium", "chrome");
+    join(root, "runtime", "chromium", process.platform === "win32" ? "chrome.exe" : "chrome");
   return {
     async create(workspaceId) {
       const hash = createHash("sha256").update(workspaceId).digest("hex");
@@ -31,7 +44,7 @@ export async function createRuntimeOwner(): Promise<RuntimeOwner<OwnedRuntime>>
         binaryPath,
         executablePath,
         profilePath: join(root, "profiles", hash),
-        ipcDirectory: join(root, "ipc"),
+        ipcDirectory,
         session: `ws-${hash.slice(0, 16)}`,
         initialUrl: DEFAULT_BROWSER_URL,
       });

package/server/supervisor-client.ts

@@ -393,10 +393,12 @@ export class AgentSupervisorClient {
 }
 
 async function readPrivateFile(path: string): Promise<string> {
-  const metadata = await stat(path);
-  if ((metadata.mode & 0o077) !== 0) throw new Error(`Supervisor file is not private: ${path}`);
-  if (typeof process.getuid === "function" && metadata.uid !== process.getuid()) {
-    throw new Error(`Supervisor file is owned by another user: ${path}`);
+  if (process.platform !== "win32") {
+    const metadata = await stat(path);
+    if ((metadata.mode & 0o077) !== 0) throw new Error(`Supervisor file is not private: ${path}`);
+    if (typeof process.getuid === "function" && metadata.uid !== process.getuid()) {
+      throw new Error(`Supervisor file is owned by another user: ${path}`);
+    }
   }
   return await readFile(path, "utf8");
 }

package/server/supervisor.ts

@@ -1,7 +1,7 @@
-import { randomBytes, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { chmod, mkdir, open, readFile, rm, writeFile } from "node:fs/promises";
 import { createServer, type Socket } from "node:net";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import type { BrowserFrame, BrowserInputEvent, BrowserState, Viewport } from "../shared/browser";
 import { SessionManager } from "./browser-policy";
@@ -826,15 +826,24 @@ export function resolveSupervisorPaths(
     "shared-browser",
     `supervisor-v${RUNTIME_PROTOCOL_VERSION}`,
   );
+  const socketId = createHash("sha256").update(root).digest("hex");
+  const socket =
+    process.platform === "win32"
+      ? String.raw`\\.\pipe\paseo-shared-browser-${socketId}`
+      : join(tmpdir(), `psb-${socketId.slice(0, 16)}.sock`);
   return {
     root,
-    socket: join(root, "runtime.sock"),
+    socket,
     token: join(root, "runtime.token"),
     endpoint: join(root, "runtime.json"),
     lock: join(root, "startup.lock"),
   };
 }
 
+async function removeSupervisorSocket(path: string): Promise<void> {
+  if (process.platform !== "win32") await rm(path, { force: true });
+}
+
 export async function acquireStartupLock(path: string): Promise<() => Promise<void>> {
   await mkdir(dirname(path), { recursive: true, mode: DIRECTORY_MODE });
   await chmod(dirname(path), DIRECTORY_MODE);
@@ -956,7 +965,7 @@ export async function startSupervisorServer<Runtime extends RuntimeInstance>(
       await tokenHandle.close();
     }
     await chmod(paths.token, FILE_MODE);
-    await rm(paths.socket, { force: true });
+    await removeSupervisorSocket(paths.socket);
     await new Promise<void>((resolve, reject) => {
       server.once("error", reject);
       server.listen(paths.socket, () => {
@@ -964,7 +973,7 @@ export async function startSupervisorServer<Runtime extends RuntimeInstance>(
         resolve();
       });
     });
-    await chmod(paths.socket, SOCKET_MODE);
+    if (process.platform !== "win32") await chmod(paths.socket, SOCKET_MODE);
     await writeFile(
       paths.endpoint,
       JSON.stringify({ version: RUNTIME_PROTOCOL_VERSION, socket: paths.socket }),
@@ -974,7 +983,7 @@ export async function startSupervisorServer<Runtime extends RuntimeInstance>(
   } catch (error) {
     server.close();
     await Promise.allSettled([
-      rm(paths.socket, { force: true }),
+      removeSupervisorSocket(paths.socket),
       rm(paths.endpoint, { force: true }),
       rm(paths.token, { force: true }),
       releaseLock(),
@@ -1006,7 +1015,7 @@ export async function startSupervisorServer<Runtime extends RuntimeInstance>(
           );
       } finally {
         await Promise.allSettled([
-          rm(paths.socket, { force: true }),
+          removeSupervisorSocket(paths.socket),
           rm(paths.endpoint, { force: true }),
           rm(paths.token, { force: true }),
           releaseLock(),

package/CHANGELOG.md

@@ -1,83 +0,0 @@
-# Changelog
-
-## [0.4.0](https://github.com/omercnet/paseo-plugins/compare/shared-browser-v0.3.1...shared-browser-v0.4.0) (2026-09-18)
-
-
-### Features
-
-* **release:** publish plugins to npm ([#80](https://github.com/omercnet/paseo-plugins/issues/80)) ([3c93048](https://github.com/omercnet/paseo-plugins/commit/3c93048cfefda97d8c2bc1631e3428fb64bdad09))
-
-
-### Bug Fixes
-
-* **shared-browser:** support Paseo 0.9 beta ([#86](https://github.com/omercnet/paseo-plugins/issues/86)) ([3af209f](https://github.com/omercnet/paseo-plugins/commit/3af209f3a8fa347ba7dc05c300061a682d809f88))
-
-## [0.3.1](https://github.com/omercnet/paseo-plugins/compare/shared-browser-v0.3.0...shared-browser-v0.3.1) (2026-09-15)
-
-
-### Bug Fixes
-
-* **shared-browser:** support system Chromium on Linux ARM64 ([#58](https://github.com/omercnet/paseo-plugins/issues/58)) ([f9c3dcb](https://github.com/omercnet/paseo-plugins/commit/f9c3dcb1031840c7cd0aed4a70f984d9d9bd24c1))
-
-## [0.3.0](https://github.com/omercnet/paseo-plugins/compare/shared-browser-v0.2.2...shared-browser-v0.3.0) (2026-09-12)
-
-
-### Features
-
-* **shared-browser:** adopt agent-browser runtime ([#18](https://github.com/omercnet/paseo-plugins/issues/18)) ([09623f3](https://github.com/omercnet/paseo-plugins/commit/09623f34f2b93943c19f809a865813fa37f467bd))
-
-
-### Bug Fixes
-
-* **shared-browser:** skip MCP injection for OMP ([#21](https://github.com/omercnet/paseo-plugins/issues/21)) ([ee2db08](https://github.com/omercnet/paseo-plugins/commit/ee2db08243640600c5592debe72f680446fa26d0))
-
-## [1.0.0](https://github.com/omercnet/paseo-plugins/compare/shared-browser-v0.2.2...shared-browser-v1.0.0) (2026-09-12)
-
-### ⚠ BREAKING CHANGES
-
-* replace the browser runtime in place with plugin-owned `agent-browser` 0.37.1 and a detached daemon-host supervisor; deployments must provide the packaged runtime and a compatible Chromium executable, with Linux ARM64 deployments supplying native Chromium through `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE`
-
-### Bug Fixes
-
-* leave OMP agent creation unchanged because the provider rejects external MCP servers
-
-### Features
-
-* preserve workspace browser processes across client disconnects and plugin reloads during a 120-second orphan grace, while retaining per-workspace profiles and tearing down active runtimes when workspace archive events are received
-* add daemon-local runtime overrides through `PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY` and `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE`
-
-## [0.2.2](https://github.com/omercnet/paseo-plugins/compare/shared-browser-v0.2.1...shared-browser-v0.2.2) (2026-09-10)
-
-
-### Bug Fixes
-
-* upgrade plugins to Paseo 0.8.0 ([c6b4e40](https://github.com/omercnet/paseo-plugins/commit/c6b4e4081fc9527de0ca6183a3903ff5ec4f93c4))
-* upgrade plugins to Paseo 0.8.0 ([d7ad454](https://github.com/omercnet/paseo-plugins/commit/d7ad4540d2e1875bdf4a4d21f76ded25cac2f3dc))
-
-## [0.2.1](https://github.com/omercnet/paseo-shared-browser/compare/v0.2.0...v0.2.1) (2026-09-08)
-
-
-### Bug Fixes
-
-* address Paseo 0.8 migration review feedback ([#10](https://github.com/omercnet/paseo-shared-browser/issues/10)) ([15d2515](https://github.com/omercnet/paseo-shared-browser/commit/15d25157503b7fb70d02c5e420522764250cab62))
-
-## [0.2.0](https://github.com/omercnet/paseo-shared-browser/compare/v0.1.1...v0.2.0) (2026-09-08)
-
-### Features
-
-* migrate shared browser to Paseo 0.8 ([#8](https://github.com/omercnet/paseo-shared-browser/issues/8)) ([36f27ab](https://github.com/omercnet/paseo-shared-browser/commit/36f27abc5dab4a16c9770d6296916631965af333))
-## [0.1.1](https://github.com/omercnet/paseo-shared-browser/compare/v0.1.0...v0.1.1) (2026-09-07)
-
-### Bug Fixes
-
-* include README screenshots in release archives ([#6](https://github.com/omercnet/paseo-shared-browser/issues/6)) ([a231db4](https://github.com/omercnet/paseo-shared-browser/commit/a231db4b20e9c52ebe8624ad69e34e907037ac0a))
-
-## 0.1.0 (2026-09-07)
-
-### Features
-
-* share one live Chromium session per Paseo workspace ([b1e9fac](https://github.com/omercnet/paseo-shared-browser/commit/b1e9fac5021746cf2dc09f7bfb9ccf0cb3b82e5d))
-
-### Bug Fixes
-
-* keep format check off the generated changelog ([#4](https://github.com/omercnet/paseo-shared-browser/issues/4)) ([2219adf](https://github.com/omercnet/paseo-shared-browser/commit/2219adf3c11591a88dc54b899dece76003f313c4))

package/tsconfig.json

@@ -1,29 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2020",
-    "module": "ESNext",
-    "moduleResolution": "Bundler",
-    "paths": {
-      "electron": ["./server/electron.d.ts"]
-    },
-    "lib": ["ES2024"],
-    "types": ["node", "react"],
-    "jsx": "react-jsx",
-    "strict": true,
-    "noUncheckedIndexedAccess": true,
-    "exactOptionalPropertyTypes": true,
-    "skipLibCheck": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "allowSyntheticDefaultImports": true
-  },
-  "include": [
-    "index.client.tsx",
-    "index.server.ts",
-    "client/**/*.ts",
-    "client/**/*.tsx",
-    "server/**/*.ts",
-    "shared/**/*.ts",
-    "tests/**/*.ts"
-  ]
-}