@omercnet/paseo-shared-browser 1.0.1 → 1.0.2-next.179.1

package/README.md

@@ -77,9 +77,9 @@ paseo plugin ls
 ```
 
 When Paseo acquires the npm package, it runs the `npm run prepare:runtime` build hook automatically. The
-hook installs the pinned browser runtime and builds both `supervisor.cjs` and
-`shared-browser-mcp.cjs` under
-`$PASEO_HOME/plugin-data/shared-browser/runtime`.
+hook installs the pinned browser runtime, builds both `supervisor.cjs` and `shared-browser-mcp.cjs`
+under a versioned directory in `$PASEO_HOME/plugin-data/shared-browser`, then atomically updates the
+`runtime-current` pointer. Existing processes keep using their immutable runtime during an update.
 
 The build requires Node.js 24 or newer and npm on the daemon host. On Linux x64, macOS, and
 Windows, runtime preparation installs and stages the platform's Chrome for Testing distribution. On
@@ -125,8 +125,8 @@ The plugin recognizes only these deployment overrides:
 | Variable                                    | Meaning                                                                                                                                                                                                                                                               |
 | ------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `PASEO_HOME`                                | Paseo data root. Defaults to `~/.paseo`; browser runtime, supervisor IPC, and profiles live below `plugin-data/shared-browser`.                                                                                                                                       |
-| `PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY` | Absolute path to the pinned `agent-browser` executable. Defaults to `$PASEO_HOME/plugin-data/shared-browser/runtime/node_modules/.bin/agent-browser` (`agent-browser.exe` on Windows).                                                                                |
-| `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE`  | Absolute path to Chromium. Defaults to `$PASEO_HOME/plugin-data/shared-browser/runtime/chromium/chrome` (`chrome.exe` on Windows). On Linux ARM64, installation automatically links `/usr/bin/chromium`; use this override for another compatible, non-Snap location. |
+| `PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY` | Absolute path to the pinned `agent-browser` executable. Defaults to the active runtime's `node_modules/.bin/agent-browser` (`agent-browser.exe` on Windows). |
+| `PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE`  | Absolute path to Chromium. Defaults to the active runtime's `chromium/chrome` (`chrome.exe` on Windows). On Linux ARM64, installation automatically links `/usr/bin/chromium`; use this override for another compatible, non-Snap location. |
 | `PASEO_SHARED_BROWSER_CHROMIUM_ARGS`        | Optional Chromium arguments passed through the managed runtime. Intended for host requirements such as `--no-sandbox` in an already-isolated CI runner; do not disable the browser sandbox on a general-purpose host.                                                 |
 
 User-supplied `AGENT_BROWSER_*` variables are deliberately ignored.

package/index.server.ts

@@ -19,6 +19,7 @@ import {
   issueAgentTicket,
   revokeAgentBrowserAccess,
 } from "./server/browser";
+import { resolveBrowserRuntimeRoot } from "./server/runtime-path";
 import {
   acquireControlRpc,
   applyDevicePresetRpc,
@@ -62,7 +63,7 @@ function paseoHome(): string {
 }
 
 function mcpBundlePath(): string {
-  return join(paseoHome(), "plugin-data", "shared-browser", "runtime", "shared-browser-mcp.cjs");
+  return join(resolveBrowserRuntimeRoot(paseoHome()), "shared-browser-mcp.cjs");
 }
 
 export default function contribute(server: PluginServerContext) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-shared-browser",
-  "version": "1.0.1",
+  "version": "1.0.2-next.179.1",
   "description": "One real Chromium session per Paseo workspace, shared live across every connected client.",
   "keywords": [
     "browser",
@@ -29,6 +29,7 @@
     "client",
     "scripts/prepare-dependencies.mjs",
     "scripts/prepare-runtime.mjs",
+    "scripts/replace-runtime.mjs",
     "server",
     "shared",
     "paseo-plugin.json"

package/scripts/prepare-runtime.mjs

@@ -1,23 +1,14 @@
 import { execFile } from "node:child_process";
+import { randomUUID } from "node:crypto";
 import { constants } from "node:fs";
-import {
-  access,
-  chmod,
-  cp,
-  lstat,
-  mkdir,
-  readdir,
-  rename,
-  rm,
-  symlink,
-  writeFile,
-} from "node:fs/promises";
+import { access, chmod, cp, lstat, mkdir, readdir, rm, symlink, writeFile } from "node:fs/promises";
 import { createRequire } from "node:module";
 import { arch, homedir, platform, userInfo } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 import { build } from "esbuild";
+import { replaceRuntime } from "./replace-runtime.mjs";
 
 const require = createRequire(import.meta.url);
 
@@ -34,7 +25,7 @@ const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));
 const paseoHome = process.env.PASEO_HOME || join(homedir(), ".paseo");
 const pluginDataRoot = join(paseoHome, "plugin-data", "shared-browser");
 const runtimeRoot = join(pluginDataRoot, "runtime");
-const stagingRoot = join(pluginDataRoot, `.runtime-${process.pid}`);
+const stagingRoot = join(pluginDataRoot, `.runtime-${randomUUID()}`);
 const runtimeModules = join(stagingRoot, "node_modules");
 const packagedAgentBrowser = resolveDependencyRoot("agent-browser");
 const runtimeEntry = join(
@@ -257,6 +248,6 @@ await applyPrivatePermissions(stagingRoot);
 if (hostPlatform !== "win32") {
   await validateChromium(await requireExecutable(chromiumEntry, "Staged Chromium executable"));
 }
-await rename(stagingRoot, runtimeRoot);
+await replaceRuntime(stagingRoot, runtimeRoot);
 
-console.log(`Prepared immutable Shared Browser runtime assets in ${runtimeRoot}`);
+console.log(`Prepared immutable Shared Browser runtime assets in ${stagingRoot}`);

package/scripts/replace-runtime.mjs

@@ -0,0 +1,15 @@
+import { access, rename, rm, writeFile } from "node:fs/promises";
+import { basename, dirname, join } from "node:path";
+
+export async function replaceRuntime(stagingRoot, runtimeRoot) {
+  await access(stagingRoot);
+  const pluginDataRoot = dirname(runtimeRoot);
+  const pointer = join(pluginDataRoot, "runtime-current");
+  const pendingPointer = join(pluginDataRoot, `.runtime-current-${process.pid}`);
+  await writeFile(pendingPointer, `${basename(stagingRoot)}\n`, { mode: 0o600 });
+  try {
+    await rename(pendingPointer, pointer);
+  } finally {
+    await rm(pendingPointer, { force: true });
+  }
+}

package/server/browser.ts

@@ -17,6 +17,7 @@ import type {
   resizeBrowserRpc,
   sendBrowserInputRpc,
 } from "../shared/browser";
+import { resolveBrowserRuntimeRoot } from "./runtime-path";
 import type { JsonValue } from "./runtime-protocol";
 import { resolveSupervisorPaths } from "./supervisor";
 import { SupervisorClient } from "./supervisor-client";
@@ -156,13 +157,7 @@ let productionStart: Promise<RemoteBrowserManager> | null = null;
 let productionStopped = false;
 
 async function launchSupervisor(): Promise<void> {
-  const supervisorPath = join(
-    paseoHome(),
-    "plugin-data",
-    "shared-browser",
-    "runtime",
-    "supervisor.cjs",
-  );
+  const supervisorPath = join(resolveBrowserRuntimeRoot(paseoHome()), "supervisor.cjs");
   try {
     await access(supervisorPath);
   } catch {

package/server/runtime-owner.ts

@@ -2,6 +2,7 @@ import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { AgentBrowserRuntime, type BrowserViewport } from "./agent-browser-runtime";
+import { resolveBrowserRuntimeRoot } from "./runtime-path";
 import type { JsonValue } from "./runtime-protocol";
 import type { RuntimeOwner } from "./supervisor";
 
@@ -23,7 +24,9 @@ function paseoHome(): string {
 export async function createRuntimeOwner(
   options: RuntimeOwnerOptions = {},
 ): Promise<RuntimeOwner<OwnedRuntime>> {
-  const root = join(paseoHome(), "plugin-data", "shared-browser");
+  const home = paseoHome();
+  const root = join(home, "plugin-data", "shared-browser");
+  const runtimeRoot = resolveBrowserRuntimeRoot(home);
   const ipcDirectory =
     process.platform === "win32"
       ? join(root, "ipc")
@@ -34,15 +37,14 @@ export async function createRuntimeOwner(
   const binaryPath =
     process.env.PASEO_SHARED_BROWSER_AGENT_BROWSER_BINARY ??
     join(
-      root,
-      "runtime",
+      runtimeRoot,
       "node_modules",
       ".bin",
       process.platform === "win32" ? "agent-browser.exe" : "agent-browser",
     );
   const executablePath =
     process.env.PASEO_SHARED_BROWSER_CHROMIUM_EXECUTABLE ??
-    join(root, "runtime", "chromium", process.platform === "win32" ? "chrome.exe" : "chrome");
+    join(runtimeRoot, "chromium", process.platform === "win32" ? "chrome.exe" : "chrome");
   return {
     async create(workspaceId) {
       const hash = createHash("sha256").update(workspaceId).digest("hex");

package/server/runtime-path.ts

@@ -0,0 +1,21 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+export function resolveBrowserRuntimeRoot(paseoHome: string): string {
+  const pluginDataRoot = join(paseoHome, "plugin-data", "shared-browser");
+  let directory: string;
+  try {
+    directory = readFileSync(join(pluginDataRoot, "runtime-current"), "utf8").trim();
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") return join(pluginDataRoot, "runtime");
+    throw error;
+  }
+  if (
+    !/^\.runtime-[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u.test(
+      directory,
+    )
+  ) {
+    throw new Error("Shared Browser runtime pointer is invalid");
+  }
+  return join(pluginDataRoot, directory);
+}