@opencode/browse 0.0.6-dev.18 → 0.0.6-dev.19

package/dist/{setup-cqjdfcy0.mjs → setup-y8pd11b8.mjs}

@@ -1,8 +1,4 @@
 import {
-  unpackedExtensionId,
-  unpackedReloadAdvice,
-  extensionProtocolSkew,
-  extensionProtocolAdvice,
   dataRoot,
   oldStoreMarker,
   cliCommand,
@@ -20,11 +16,15 @@ import {
   describeAutoUpdate,
   installVersion,
   pruneVersions,
-  switchVersion
-} from "./main-ha5bnd77.mjs";
+  switchVersion,
+  unpackedExtensionId,
+  unpackedReloadAdvice,
+  extensionProtocolSkew,
+  extensionProtocolAdvice
+} from "./main-yd50d95g.mjs";
 import {
   relayAuthorization
-} from "./main-9y22cffn.mjs";
+} from "./main-75rdz6bc.mjs";
 import {
   pairingCodeTtlMs,
   bundledPairingCodeTtlMs,
@@ -41,10 +41,10 @@ import {
   parseHostname,
   readRelayConfig,
   writeRelayConfig
-} from "./main-0egy8naa.mjs";
+} from "./main-xatp12cr.mjs";
 import {
   opencodeBrowserVersion2
-} from "./main-ppz7sv9s.mjs";
+} from "./main-ts9jjqs8.mjs";
 import { createRequire } from "node:module";
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
@@ -7082,13 +7082,13 @@ var require_src = __commonJS(function(exports, module) {
 });
 
 // src/setup.ts
-import { spawn, spawnSync } from "node:child_process";
-import { createHash, randomUUID } from "node:crypto";
-import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { homedir, networkInterfaces } from "node:os";
-import path2 from "node:path";
-import { createInterface } from "node:readline/promises";
-import { fileURLToPath } from "node:url";
+import { mkdirSync as mkdirSync3, rmSync as rmSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import path6 from "node:path";
+
+// src/setup/agent-config.ts
+import fs from "node:fs";
+import path from "node:path";
+import { isDeepStrictEqual } from "node:util";
 
 // node_modules/jsonc-parser/lib/esm/impl/scanner.js
 function createScanner(text, ignoreTrivia = false) {
@@ -8413,11 +8413,6 @@ function applyEdits(text, edits) {
   return text;
 }
 
-// src/agent-config.ts
-import fs from "node:fs";
-import path from "node:path";
-import { isDeepStrictEqual } from "node:util";
-
 // node_modules/smol-toml/dist/error.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
@@ -9434,7 +9429,7 @@ var $stringify = publicApi.stringify;
 var $visit = visit2.visit;
 var $visitAsync = visit2.visitAsync;
 
-// src/agent-config.ts
+// src/setup/agent-config.ts
 var agentLabels = {
   opencode: "OpenCode",
   claude: "Claude Code",
@@ -10244,7 +10239,7 @@ class y {
   }
 }
 
-// src/agent-picker.ts
+// src/setup/agent-picker.ts
 function agentFlags(args) {
   const requested = new Set;
   let all = args.includes("--all-agents");
@@ -10333,7 +10328,17 @@ async function pickAgents(locations, initial) {
   return isCancel(result) ? undefined : result;
 }
 
-// src/setup.ts
+// src/setup/browsers.ts
+import { spawn, spawnSync as spawnSync2 } from "node:child_process";
+import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2 } from "node:fs";
+import path3 from "node:path";
+
+// src/setup/environment.ts
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path2 from "node:path";
+import { fileURLToPath } from "node:url";
 var store = storeConfig();
 var STORE_IDS = [store.id].filter((id) => !!id);
 var STORE_URL = store.id ? storeUrl(store.id) : undefined;
@@ -10361,7 +10366,8 @@ var legacyFiles = [
   path2.join(root, "cli.mjs"),
   path2.join(configRoot, "opencode", "plugins", "opencode-browser.ts")
 ];
-var packageRoot = path2.dirname(path2.dirname(fileURLToPath(import.meta.url)));
+var here = path2.dirname(fileURLToPath(import.meta.url));
+var packageRoot = path2.basename(here) === "setup" ? path2.dirname(path2.dirname(here)) : path2.dirname(here);
 var fromSource = existsSync(path2.join(packageRoot, "src", "main.ts")) && !process.env.OPENCODE_BROWSER_PACKAGE;
 var checkoutExtensionDirs = (() => {
   const repo = path2.dirname(packageRoot);
@@ -10369,20 +10375,75 @@ var checkoutExtensionDirs = (() => {
     return [];
   return [path2.join(repo, "public"), path2.join(repo, "dist")];
 })();
+var dev = fromSource ? undefined : devExtension();
+var unpackedFolder = () => checkoutExtensionDirs[1] ?? (dev ? devExtensionFolder(root) : undefined);
+var connectedMessage = "✓ Connected. Restart your agent, then ask it to open a page.";
+var pairedOfflineMessage = "! Not connected yet. Open the browser profile already paired with Browse and make sure the extension is enabled. It reconnects automatically.";
+var manualPair = (code) => `Open the Extensions menu → Browse → Options, enter ${formatPairingCode(code)} as the pairing code, then click Pair.`;
+function flag(args, name) {
+  const index = args.indexOf(name);
+  return index === -1 ? undefined : args[index + 1];
+}
+function findOnPath(name) {
+  const found = spawnSync(windows ? "where" : "which", [name], { encoding: "utf8" });
+  return found.status === 0 ? found.stdout.split(/\r?\n/)[0]?.trim() || undefined : undefined;
+}
+function findOpencode(args) {
+  const explicit = flag(args, "--opencode") ?? process.env.OPENCODE_BIN;
+  if (explicit)
+    return path2.resolve(explicit);
+  return findOnPath("opencode");
+}
+function readJson(file) {
+  try {
+    return JSON.parse(readFileSync(file, "utf8"));
+  } catch {
+    return;
+  }
+}
+function readFileOr(file, fallback) {
+  try {
+    return readFileSync(file, "utf8");
+  } catch {
+    return fallback;
+  }
+}
+function log(line) {
+  process.stdout.write(line + `
+`);
+}
+function fail(message) {
+  process.stderr.write(message + `
+`);
+  process.exit(1);
+}
+var installWaitTimeout = (args, tty) => waitTimeout(args, tty ? 180 : 90);
+function waitTimeout(args, defaultSeconds = 180) {
+  const seconds = Number(args.includes("--wait-seconds") ? flag(args, "--wait-seconds") : defaultSeconds);
+  if (!Number.isSafeInteger(seconds) || seconds < 1 || seconds > 3600)
+    fail("--wait-seconds must be between 1 and 3600.");
+  return seconds * 1000;
+}
+
+// src/setup/browsers.ts
+var oldStoreBuild = (match) => /^0\.0\.[012]$/.test(match.version ?? "");
 function browsers() {
   if (process.platform === "darwin") {
-    const support = (dir) => path2.join(home, "Library/Application Support", dir);
+    const support = (dir) => path3.join(home, "Library/Application Support", dir);
     const browser = (name, app, bundleID, dirs) => ({
       name,
       app,
       userData: support(dirs[0]),
-      manifests: dirs.map((dir) => path2.join(support(dir), "NativeMessagingHosts")),
+      manifests: dirs.map((dir) => path3.join(support(dir), "NativeMessagingHosts")),
       defaultIDs: [bundleID],
       executables: []
     });
     return [
       browser("Google Chrome", "Google Chrome", "com.google.Chrome", ["Google/Chrome"]),
-      browser("Chrome for Testing", "Google Chrome for Testing", "com.google.chrome.for.testing", ["Google/Chrome for Testing", "Google/ChromeForTesting"]),
+      browser("Chrome for Testing", "Google Chrome for Testing", "com.google.chrome.for.testing", [
+        "Google/Chrome for Testing",
+        "Google/ChromeForTesting"
+      ]),
       browser("Google Chrome Beta", "Google Chrome Beta", "com.google.Chrome.beta", ["Google/Chrome Beta"]),
       browser("Google Chrome Canary", "Google Chrome Canary", "com.google.Chrome.canary", ["Google/Chrome Canary"]),
       browser("Chromium", "Chromium", "org.chromium.Chromium", ["Chromium"]),
@@ -10397,23 +10458,53 @@ function browsers() {
     ];
   }
   if (windows) {
-    const local = process.env.LOCALAPPDATA ?? path2.join(home, "AppData", "Local");
-    const roaming = process.env.APPDATA ?? path2.join(home, "AppData", "Roaming");
+    const local = process.env.LOCALAPPDATA ?? path3.join(home, "AppData", "Local");
+    const roaming = process.env.APPDATA ?? path3.join(home, "AppData", "Roaming");
     const programs = [process.env.ProgramFiles, process.env["ProgramFiles(x86)"], local].filter((dir) => !!dir);
-    const installs = (relative) => programs.map((dir) => path2.join(dir, relative));
+    const installs = (relative) => programs.map((dir) => path3.join(dir, relative));
     return [
-      { name: "Google Chrome", userData: path2.join(local, "Google", "Chrome", "User Data"), manifests: [], defaultIDs: ["ChromeHTML"], executables: installs("Google\\Chrome\\Application\\chrome.exe") },
-      { name: "Microsoft Edge", userData: path2.join(local, "Microsoft", "Edge", "User Data"), manifests: [], defaultIDs: ["MSEdgeHTM"], executables: installs("Microsoft\\Edge\\Application\\msedge.exe") },
-      { name: "Brave", userData: path2.join(local, "BraveSoftware", "Brave-Browser", "User Data"), manifests: [], defaultIDs: ["BraveHTML"], executables: installs("BraveSoftware\\Brave-Browser\\Application\\brave.exe") },
-      { name: "Opera", userData: path2.join(roaming, "Opera Software", "Opera Stable"), manifests: [], defaultIDs: ["OperaStable"], executables: installs("Programs\\Opera\\opera.exe") },
-      { name: "Vivaldi", userData: path2.join(local, "Vivaldi", "User Data"), manifests: [], defaultIDs: ["VivaldiHTM"], executables: installs("Vivaldi\\Application\\vivaldi.exe") }
+      {
+        name: "Google Chrome",
+        userData: path3.join(local, "Google", "Chrome", "User Data"),
+        manifests: [],
+        defaultIDs: ["ChromeHTML"],
+        executables: installs("Google\\Chrome\\Application\\chrome.exe")
+      },
+      {
+        name: "Microsoft Edge",
+        userData: path3.join(local, "Microsoft", "Edge", "User Data"),
+        manifests: [],
+        defaultIDs: ["MSEdgeHTM"],
+        executables: installs("Microsoft\\Edge\\Application\\msedge.exe")
+      },
+      {
+        name: "Brave",
+        userData: path3.join(local, "BraveSoftware", "Brave-Browser", "User Data"),
+        manifests: [],
+        defaultIDs: ["BraveHTML"],
+        executables: installs("BraveSoftware\\Brave-Browser\\Application\\brave.exe")
+      },
+      {
+        name: "Opera",
+        userData: path3.join(roaming, "Opera Software", "Opera Stable"),
+        manifests: [],
+        defaultIDs: ["OperaStable"],
+        executables: installs("Programs\\Opera\\opera.exe")
+      },
+      {
+        name: "Vivaldi",
+        userData: path3.join(local, "Vivaldi", "User Data"),
+        manifests: [],
+        defaultIDs: ["VivaldiHTM"],
+        executables: installs("Vivaldi\\Application\\vivaldi.exe")
+      }
     ];
   }
   const chrome = process.env.CHROME_CONFIG_HOME ?? configRoot;
-  const browser = (name, root, dir, executables) => ({
+  const browser = (name, rootDir, dir, executables) => ({
     name,
-    userData: path2.join(root, dir),
-    manifests: [path2.join(root, dir, "NativeMessagingHosts")],
+    userData: path3.join(rootDir, dir),
+    manifests: [path3.join(rootDir, dir, "NativeMessagingHosts")],
     defaultIDs: executables,
     executables
   });
@@ -10430,385 +10521,509 @@ function browsers() {
     browser("Helium", configRoot, "net.imput.helium", ["helium", "helium-browser"])
   ];
 }
-function findOpencode(args) {
-  const explicit = flag(args, "--opencode") ?? process.env.OPENCODE_BIN;
-  if (explicit)
-    return path2.resolve(explicit);
-  return findOnPath("opencode");
+function extensionsPage(browser) {
+  const scheme = { "Microsoft Edge": "edge", Brave: "brave", Vivaldi: "vivaldi", Opera: "opera" }[browser.name];
+  return `${scheme ?? "chrome"}://extensions`;
 }
-function flag(args, name) {
-  const index = args.indexOf(name);
-  return index === -1 ? undefined : args[index + 1];
+function detectBrowsers() {
+  return browsers().flatMap((browser) => {
+    const state = readLocked(path3.join(browser.userData, "Local State"));
+    if (state.missing)
+      return [];
+    if (state.blocked)
+      return launcher(browser) ? [{ browser, blocked: true, enabled: [], disabled: [] }] : [];
+    let blocked = false;
+    const matches = listProfiles(browser, state.text).flatMap((profile) => {
+      const settings = ["Secure Preferences", "Preferences"].map((file) => {
+        const prefs = readLocked(path3.join(browser.userData, profile.dir, file));
+        blocked ||= prefs.blocked;
+        return parseJson(prefs.text)?.extensions?.settings ?? {};
+      });
+      const id = [...STORE_IDS, unpackedExtensionId].find((candidate) => settings.some((entries) => entries[candidate]));
+      if (!id)
+        return [];
+      const setting = settings.find((entries) => entries[id])[id];
+      const version = installedExtensionVersion(id, setting);
+      return [{ browser, profile, id, ...version ? { version } : {}, enabled: !disabled(setting) }];
+    });
+    return [
+      {
+        browser,
+        blocked,
+        enabled: matches.filter((match) => match.enabled),
+        disabled: matches.filter((match) => !match.enabled)
+      }
+    ];
+  });
 }
-function readJson(file) {
-  try {
-    return JSON.parse(readFileSync(file, "utf8"));
-  } catch {
+function installedExtensionVersion(id, setting) {
+  if (setting.manifest?.version)
+    return setting.manifest.version;
+  if (!setting.path)
     return;
-  }
-}
-function configFile() {
-  const directory = path2.join(configRoot, "opencode");
-  const candidates = ["opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc"].map((name) => path2.join(directory, name));
-  return candidates.find((file) => existsSync(file) && statSync(file).isFile()) ?? candidates[0];
-}
-function fingerprint(entry) {
-  return createHash("sha256").update(readFileOr(entry, entry)).digest("hex").slice(0, 16);
+  if (path3.isAbsolute(setting.path))
+    return readJson(path3.join(setting.path, "manifest.json"))?.version;
+  const packed = /^([a-p]{32})[/\\](\d+(?:\.\d+){0,3})_\d+$/.exec(setting.path);
+  return packed?.[1] === id ? packed[2] : undefined;
 }
-function restartOutdatedRelay(entry, node) {
-  const status = spawnSync(node, [entry, "status", "--json"], { encoding: "utf8", timeout: 15000 });
-  if (!/"stale":\s*true/.test(status.stdout ?? ""))
-    return;
-  const restart = spawnSync(node, [entry, "relay", "restart"], { encoding: "utf8", timeout: 60000 });
-  if (restart.status === 0)
-    return ["✓ Relay restarted with the new version"];
-  return relayNotRestarted(status.stdout ?? "", `${restart.stderr ?? ""}
-${restart.stdout ?? ""}`);
+function disabled(setting) {
+  const reasons = setting.disable_reasons;
+  if (Array.isArray(reasons))
+    return reasons.length > 0;
+  return typeof reasons === "number" && reasons !== 0;
 }
-function relayNotRestarted(statusJson, output, command = cliCommand("relay restart")) {
-  const sessions = (() => {
+function listProfiles(browser, localState) {
+  const cache = parseJson(localState)?.profile?.info_cache;
+  if (cache && Object.keys(cache).length)
+    return Object.entries(cache).map(([dir, info]) => ({ dir, name: info.name || dir }));
+  const dirs = (() => {
     try {
-      const parsed = JSON.parse(statusJson);
-      return (parsed.sessions ?? []).filter((item) => item.connected === true && typeof item.id === "string").map((item) => item.id);
+      return readdirSync(browser.userData);
     } catch {
       return [];
     }
   })();
-  const reason = output.split(`
-`).map((line) => line.trim()).filter((line) => line && !line.startsWith("Restarting the relay leaves")).join(" ");
-  const who = sessions.length === 1 ? `an agent session is active (${sessions[0]})` : sessions.length > 1 ? `${sessions.length} agent sessions are active (${sessions.slice(0, 5).join(", ")}${sessions.length > 5 ? ", …" : ""})` : undefined;
-  const forceable = /--force/.test(reason);
-  return [
-    `! Relay not restarted: ${who ?? (reason || "it declined")}${who && reason ? ` (${reason})` : ""}.`,
-    "  It keeps running the previous version, so agents get this update only after it restarts.",
-    forceable ? `  When no agent is using the browser, run: ${command} (or ${command} --force to end what's blocking it now)` : `  When no agent is using the browser, run: ${command}`
-  ];
-}
-function mcpServers(file = configFile()) {
-  const errors = [];
-  const config = parse2(existsSync(file) ? readFileSync(file, "utf8") : "{}", errors, { allowTrailingComma: true });
-  if (errors.length || [config, config?.mcp, config?.mcp?.servers].some((v) => v !== undefined && (!v || typeof v !== "object" || Array.isArray(v))))
-    fail(`Invalid ${file}; left unchanged`);
-  return config.mcp?.servers ?? {};
-}
-function ownedMcp(server, entry) {
-  const command = server?.command;
-  return Array.isArray(command) && command.length === 3 && command[2] === "mcp" && [entry, layout.shim, path2.join(packageRoot, "dist/cli.mjs")].some((e) => e && command[1] === e);
+  return dirs.filter((dir) => /^(Default|Profile \d+)$/.test(dir)).map((dir) => ({ dir, name: dir }));
 }
-function mergedMcpServer(existing, command, runtime) {
-  const environment = typeof existing?.environment === "object" && existing.environment !== null && !Array.isArray(existing.environment) ? existing.environment : {};
-  return { ...existing, type: "local", command, environment: { ...environment, OPENCODE_BROWSER_RUNTIME: runtime } };
+function readLocked(file) {
+  try {
+    return { text: readFileSync2(file, "utf8"), missing: false, blocked: false };
+  } catch (error) {
+    const code = error.code;
+    return {
+      text: undefined,
+      missing: code === "ENOENT" || code === "ENOTDIR",
+      blocked: code === "EPERM" || code === "EACCES"
+    };
+  }
 }
-function configureMcp(file, entry, previousEntry) {
-  const existing = mcpServers(file)[MCP_NAME];
-  if (existing && !ownedMcp(existing, previousEntry))
+function parseJson(text) {
+  if (!text)
     return;
-  const renamed = removeMcp(LEGACY_MCP_NAME, previousEntry, file);
-  const server = mergedMcpServer(existing, [process.execPath, entry, "mcp"], entry === layout.shim ? "auto-update" : fingerprint(entry));
-  if (existing && JSON.stringify(existing) === JSON.stringify(server))
-    return `"${MCP_NAME}" is up to date`;
-  const text = readFileOr(file, "{}");
-  const edits = modify(text, ["mcp", "servers", MCP_NAME], server, { formattingOptions: { tabSize: 2, insertSpaces: true } });
-  mkdirSync(path2.dirname(file), { recursive: true });
-  writeFileSync(file, applyEdits(text, edits));
-  if (renamed)
-    return `"${LEGACY_MCP_NAME}" renamed to "${MCP_NAME}" in ${file}`;
-  return existing ? `"${MCP_NAME}" updated in ${file}` : `"${MCP_NAME}" added to ${file}`;
-}
-function removeMcp(name, entry, file = configFile()) {
-  const text = readFileOr(file, "");
-  if (!text || !ownedMcp(mcpServers(file)[name], entry))
-    return false;
-  writeFileSync(file, applyEdits(text, modify(text, ["mcp", "servers", name], undefined, {})));
-  return true;
-}
-function legacyBrowserControl() {
-  return Object.entries(mcpServers()).filter(([name, server]) => name === "browser-control" || JSON.stringify(server.command ?? "").includes("browser-control")).map(([name]) => name);
-}
-function readFileOr(file, fallback) {
   try {
-    return readFileSync(file, "utf8");
+    return JSON.parse(text);
   } catch {
-    return fallback;
+    return;
   }
 }
-function removeLegacyHost() {
-  const leftovers = [
-    ...browsers().flatMap((browser) => browser.manifests.map((directory) => path2.join(directory, `${LEGACY_HOST_NAME}.json`))),
-    ...legacyFiles
-  ].filter((file) => existsSync(file));
-  leftovers.forEach((file) => rmSync(file, { force: true }));
-  const keys = windows ? LEGACY_REGISTRY_ROOTS.map((root) => `${root}\\NativeMessagingHosts\\${LEGACY_HOST_NAME}`).filter((key) => spawnSync("reg", ["query", key, "/ve"]).status === 0) : [];
-  keys.forEach((key) => spawnSync("reg", ["delete", key, "/f"]));
-  return leftovers.length + keys.length > 0;
+function defaultBrowser(candidates) {
+  const id = defaultBrowserID();
+  if (!id)
+    return;
+  const known = browsers().find((browser) => browser.defaultIDs.some((name) => name.toLowerCase() === id.toLowerCase() || id.startsWith(`${name}.`)));
+  return known && (candidates.find((browser) => browser.name === known.name) ?? known);
 }
-async function installRuntime() {
-  if (fromSource) {
-    const bundle = path2.join(packageRoot, "dist", "cli.mjs");
-    if (!existsSync(bundle))
-      fail("Build the CLI first: `bun run build` in cli/ (or `bun run setup` at the top).");
-    return { entry: bundle, version: opencodeBrowserVersion2 };
+function defaultBrowserID() {
+  if (process.platform === "darwin") {
+    const plist = path3.join(home, "Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist");
+    const json = spawnSync2("plutil", ["-convert", "json", "-o", "-", plist], { encoding: "utf8" });
+    const handlers = parseJson(json.stdout)?.LSHandlers ?? [];
+    return ["https", "http"].map((scheme) => handlers.find((handler) => handler.LSHandlerURLScheme === scheme)?.LSHandlerRoleAll).find((bundle) => !!bundle);
   }
-  const spec = process.env.OPENCODE_BROWSER_PACKAGE;
-  const before = readCurrent(layout);
-  const existing = versionEntry(layout, opencodeBrowserVersion2);
-  const reuse = !spec && existsSync(existing) && readFileSync(existing).equals(readFileSync(path2.join(packageRoot, "dist", "cli.mjs"))) && spawnSync(process.execPath, [existing, "--version"], { encoding: "utf8", timeout: 30000 }).stdout?.trim() === opencodeBrowserVersion2;
-  let installed;
-  try {
-    installed = reuse ? existing : await installVersion({ layout, version: opencodeBrowserVersion2, ...spec ? { spec } : { runningPackage: packageRoot } });
-  } catch (error) {
-    fail(`Could not install ${spec ?? `${PACKAGE}@${opencodeBrowserVersion2}`}: ${error.message}`);
+  if (windows) {
+    const key = "HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice";
+    const query = spawnSync2("reg", ["query", key, "/v", "ProgId"], { encoding: "utf8" });
+    return /ProgId\s+REG_SZ\s+(\S+)/.exec(query.stdout ?? "")?.[1];
   }
-  const version = path2.basename(path2.dirname(path2.dirname(path2.dirname(path2.dirname(path2.dirname(installed))))));
-  const previous = before?.version === version ? before.previous : before?.version;
-  switchVersion(layout, version, previous);
-  updateState(layout, ({ pending, skipped, ...state }) => ({
-    ...state,
-    ...pending && compareVersions(pending, version) > 0 ? { pending } : {},
-    ...skipped && skipped !== version ? { skipped } : {}
-  }));
-  pruneVersions(layout, [version, previous]);
-  for (const legacy of ["node_modules", "package.json", "package-lock.json"])
-    rmSync(path2.join(files.runtime, legacy), { recursive: true, force: true });
-  return { entry: layout.shim, version };
+  const xdg = spawnSync2("xdg-settings", ["get", "default-web-browser"], { encoding: "utf8" });
+  return xdg.status === 0 ? xdg.stdout.trim().replace(/\.desktop$/, "") || undefined : undefined;
 }
-function checkNode() {
-  if (process.versions.bun)
-    fail("Browse runs on Node.js 22.19 or newer, but this ran under Bun (`bun run` uses Bun when `node` isn't on PATH). Install Node.js from https://nodejs.org, then run setup again.");
-  const [major = 0, minor = 0] = process.versions.node.split(".").map(Number);
-  if (major < 22 || major === 22 && minor < 19)
-    fail(`Browse needs Node.js 22.19 or newer; this is ${process.version} (${process.execPath}). Update Node.js (https://nodejs.org), then run setup again.`);
+function reportDetections(detections, preferred, writeLog) {
+  writeLog(`Default browser: ${preferred?.name ?? "unknown"}`);
+  detections.forEach((detection) => {
+    const name = detection.browser.name;
+    if (detection.blocked)
+      return writeLog(`  ${name}: couldn't check (${blockedReason()})`);
+    if (detection.enabled.length)
+      return writeLog(`  ${name}: Browse in ${detection.enabled.map(describe).join(", ")}`);
+    if (detection.disabled.length)
+      return writeLog(`  ${name}: Browse turned off in ${detection.disabled.map(describe).join(", ")}`);
+    writeLog(`  ${name}: no Browse`);
+  });
 }
-var dev = fromSource ? undefined : devExtension();
-var unpackedFolder = () => checkoutExtensionDirs[1] ?? (dev ? devExtensionFolder(root) : undefined);
-async function syncDev() {
-  if (!dev)
-    return;
-  try {
-    const result = await syncDevExtension(dev, { root });
-    log(result === "updated" ? `✓ Downloaded the dev extension (${dev.file}) to ${devExtensionFolder(root)}` : `✓ Dev extension ${dev.file} is in ${devExtensionFolder(root)}`);
-  } catch (error) {
-    fail(`Could not get the dev extension: ${error.message}`);
+var describe = (match) => `${match.profile.name}${match.id === unpackedExtensionId ? " (unpacked)" : ""}`;
+var blockedReason = () => process.platform === "darwin" ? "macOS privacy protection" : "permission denied";
+function openInBrowser(browser, url, profile) {
+  const executable = launcher(browser)?.executable;
+  const web = /^https?:/.test(url);
+  if (executable) {
+    const child = spawn(executable, [...profile ? [`--profile-directory=${profile}`] : [], url], {
+      detached: true,
+      stdio: "ignore"
+    });
+    child.on("error", () => web && openWithSystem(browser, url));
+    child.unref();
+    return true;
   }
+  if (!web)
+    return false;
+  return openWithSystem(browser, url);
 }
-async function install(args) {
-  checkNode();
-  const tty = !!(process.stdin.isTTY && process.stdout.isTTY);
-  const timeoutMs = installWaitTimeout(args, tty);
-  let flags;
-  try {
-    flags = agentFlags(args);
-  } catch (error) {
-    fail(error.message);
+function openWithSystem(browser, url) {
+  if (process.platform === "darwin")
+    return spawnSync2("open", browser?.app ? ["-a", browser.app, url] : [url]).status === 0;
+  if (windows)
+    return spawnSync2("rundll32", ["url.dll,FileProtocolHandler", url]).status === 0;
+  return spawnSync2("xdg-open", [url]).status === 0;
+}
+function revealFolder(folder) {
+  const run = (command, args) => {
+    const result = spawnSync2(command, args, { stdio: "ignore", timeout: 1e4 });
+    return !result.error && (windows || result.status === 0);
+  };
+  if (process.platform === "darwin")
+    return run("open", ["-R", folder]);
+  if (windows)
+    return run("explorer", [`/select,${folder}`]);
+  return run("xdg-open", [path3.dirname(folder)]);
+}
+function copyToClipboard(text) {
+  const tools = process.platform === "darwin" ? [["pbcopy", []]] : windows ? [["clip", []]] : [
+    ...process.env.WAYLAND_DISPLAY ? [["wl-copy", []]] : [],
+    ["xclip", ["-selection", "clipboard"]],
+    ["xsel", ["--clipboard", "--input"]]
+  ];
+  return tools.some(([command, args]) => {
+    const result = spawnSync2(command, args, { input: text, stdio: ["pipe", "ignore", "ignore"], timeout: 5000 });
+    return !result.error && result.status === 0;
+  });
+}
+var systemEffects = {
+  open: openInBrowser,
+  openDefault: (url) => openWithSystem(undefined, url),
+  reveal: revealFolder,
+  copy: copyToClipboard,
+  log
+};
+function launcher(browser) {
+  if (process.platform === "darwin") {
+    const bundle = [
+      path3.join("/Applications", `${browser.app}.app`),
+      path3.join(home, "Applications", `${browser.app}.app`)
+    ].find((dir) => existsSync2(dir));
+    if (!bundle)
+      return;
+    const name = spawnSync2("plutil", ["-extract", "CFBundleExecutable", "raw", "-o", "-", path3.join(bundle, "Contents", "Info.plist")], { encoding: "utf8" }).stdout?.trim();
+    const executable = name ? path3.join(bundle, "Contents", "MacOS", name) : undefined;
+    return executable && existsSync2(executable) ? { executable } : {};
   }
-  const opencode = findOpencode(args);
-  const caller = callingAgent(process.env);
-  const locations = agentLocations(home, configRoot, findOnPath, configFile(), opencode);
-  const previous = readJson(files.settings);
-  const remembered = previous?.selectedAgents ?? (previous?.declinedAgents?.length ? locations.filter((a) => a.installed && !previous.declinedAgents.includes(a.name)).map((a) => a.name) : undefined);
-  const plan = agentPlan(locations, flags, tty, caller, remembered);
-  const selected = plan.picker ? await pickAgents(locations, plan.selected) : plan.selected;
-  if (!selected) {
-    process.exitCode = 130;
-    return;
+  const executable = windows ? browser.executables.find((file) => existsSync2(file)) : browser.executables.map(findOnPath).find((file) => !!file);
+  return executable ? { executable } : undefined;
+}
+
+// src/setup/commands.ts
+import { spawnSync as spawnSync4 } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync2, rmSync as rmSync2 } from "node:fs";
+import { networkInterfaces } from "node:os";
+import path5 from "node:path";
+import { createInterface } from "node:readline/promises";
+
+// src/setup/guidance.ts
+function locateExtension(options, effects = systemEffects) {
+  const { log } = effects;
+  const listing = options.storeUrl ?? STORE_URL;
+  const noListing = () => log(`! This package doesn't know its Chrome Web Store item, so it can't install the extension. Install a released version (\`npx @opencode/browse install\`), or set up Browse from a checkout.`);
+  const pairLater = () => log(`  Once it's added, run \`${cliCommand("install")}\` again to pair it with the relay.`);
+  if (options.pairedOffline)
+    return log(pairedOfflineMessage), "ready";
+  if (options.env.ssh) {
+    if (options.connected)
+      return log(connectedMessage), "ready";
+    if (options.folder)
+      unpackedSteps({ folder: options.folder, platform: options.env.platform, log });
+    else if (listing)
+      log(`Install Browse in your browser from the Chrome Web Store: ${listing}`), pairLater();
+    else
+      noListing();
+    return "guided";
   }
-  mkdirSync(files.dir, { recursive: true });
-  const { entry, version } = await installRuntime();
-  log(`✓ Browse ${version} installed${fromSource ? " (from source)" : ""}`);
-  const agents = previous?.agents ?? [];
-  const opencodeConfigs = previous?.opencodeConfigs ?? (previous?.entry ? [configFile()] : []);
-  const selectedAgents = plan.picker ? selected : remembered;
-  const save = () => writeFileSync(files.settings, JSON.stringify({ ...opencode ? { opencode } : {}, entry, version, agents, opencodeConfigs, ...selectedAgents && { selectedAgents } }, null, 2) + `
-`);
-  save();
-  if (removeLegacyHost())
-    log("✓ Removed the native messaging host of an earlier version");
-  const node = process.execPath;
-  for (const agent of locations) {
-    if (!selected.includes(agent.name)) {
-      if (!plan.picker && agent.installed && !flags.requested.length)
-        log(`To add ${agentLabels[agent.name]}: ${cliCommand(`install --agent ${agent.name}`)}`);
-      continue;
-    }
-    if (agent.name === "opencode") {
-      const mcp = configureMcp(agent.file, entry, previous?.entry);
-      if (mcp && !opencodeConfigs.includes(agent.file)) {
-        opencodeConfigs.push(agent.file);
-        save();
-      }
-      if (!mcp)
-        process.exitCode = 1;
-      log(mcp ? `✓ MCP server ${mcp} (OpenCode)` : `! OpenCode already has a different server named browse in ${agent.file}; left unchanged.`);
-      continue;
-    }
-    const receipt = { name: agent.name, file: agent.file, entry, node };
-    try {
-      const result = editAgentConfig(receipt);
-      if (result === "added") {
-        const i = agents.findIndex((a) => a.file === agent.file);
-        if (i !== -1)
-          agents.splice(i, 1);
-        agents.push(receipt);
-        save();
-      }
-      if (result === "conflict")
-        process.exitCode = 1;
-      log(result === "conflict" ? `! ${agent.name} already has a different browse server; left ${agent.file} unchanged.` : `✓ ${agent.name}: browse ${result} in ${agent.file}`);
-    } catch {
-      process.exitCode = 1;
-      log(`! Couldn't edit ${agent.file} for ${agent.name}. Check its syntax and permissions, then run ${cliCommand(`install --agent ${agent.name}`)}.`);
-    }
+  reportDetections(options.detections, options.preferred, log);
+  if (options.connected)
+    return log(connectedMessage), "ready";
+  if (options.detections.some((detection) => detection.enabled.length))
+    return "ready";
+  const off = options.detections.flatMap((detection) => detection.disabled);
+  if (off.length) {
+    log(`! Browse is turned off in ${off.map((match) => `${match.browser.name} (${match.profile.name})`).join(", ")}. Turn it on in the browser's extensions page.`);
+    return "off";
   }
-  for (const line of restartOutdatedRelay(entry, node) ?? [])
-    log(line);
-  const legacy = selected.includes("opencode") ? legacyBrowserControl() : [];
-  if (legacy.length)
-    log(`! Browser Control MCP server${legacy.length === 1 ? "" : "s"} ${legacy.map((name) => `"${name}"`).join(", ")} also configured. Browse replaces it; remove ${legacy.length === 1 ? "it" : "them"} from ${configFile()} to avoid two sets of browser tools.`);
-  await syncDev();
-  const initial = await settledExtensionStatus(entry);
-  const connected = initial?.connected ? initial : undefined;
-  const pairedOffline = initial?.pairingState === "paired-offline";
-  const folder = unpackedFolder();
-  if (folder && !pairedOffline) {
-    pairUnpacked();
-    log("✓ Put a one-time pairing code in the unpacked extension (good for an hour)");
-    const reload = connected ? await reloadOutdatedExtension(connected, folder) : "current";
-    if (reload === "reloaded")
-      log("✓ Reloaded Browse in your browser");
-    if (reload === "stale")
-      return log(`! ${unpackedReloadAdvice}`);
+  const blocked = options.detections.filter((detection) => detection.blocked).map((detection) => detection.browser.name);
+  const target = options.preferred ?? options.detections.find((detection) => !detection.blocked)?.browser;
+  const interactive = options.allowOpen && options.env.display;
+  if (!options.folder) {
+    if (!listing)
+      return noListing(), "guided";
+    const opened = interactive && !blocked.length && (target ? effects.open(target, listing) : effects.openDefault?.(listing));
+    log(`Install Browse from the Chrome Web Store${opened ? ` (opened in ${target?.name ?? "your default browser"})` : ""}:`);
+    log(`  ${listing}`);
+    log(`  Once it's added, install pairs it with the relay (if install isn't waiting for it, run \`${cliCommand("install")}\` again).`);
+    return "guided";
   }
-  const reportMismatch = (status) => {
-    const advice = status.nextStep ?? extensionProtocolAdvice(status.protocolVersion, { install: installCommand() });
-    if (args.includes("--no-wait") && folder && status.origin === `chrome-extension://${unpackedExtensionId}` && extensionProtocolSkew(status.protocolVersion) === "extension-older")
-      return log(`! Not connected yet. ${advice}`);
-    fail(advice);
-  };
-  if (initial?.protocolCompatible === false && initial.origin)
-    return reportMismatch(initial);
-  log("");
-  const ssh = !!(process.env.SSH_CONNECTION || process.env.SSH_TTY);
-  const detections = ssh ? [] : detectBrowsers();
-  rmSync(oldStoreMarker(), { force: true });
-  const checkStore = (scanned) => {
-    const matches = scanned.flatMap((d) => d.enabled).filter((m) => STORE_IDS.includes(m.id));
-    if (!matches.length || !matches.every(oldStoreBuild))
-      return true;
-    writeFileSync(oldStoreMarker(), `2
-`);
-    ensureRelay(entry);
-    log(`! Found Browse ${matches[0].version} in ${matches[0].browser.name}. ${extensionProtocolAdvice(2, { install: cliCommand("install") }, "store")}`);
-    process.exitCode = 1;
-    return false;
-  };
-  if (!connected && !checkStore(detections))
-    return;
-  const env = {
-    ssh,
-    display: process.platform !== "linux" || !!(process.env.DISPLAY || process.env.WAYLAND_DISPLAY),
-    tty,
-    platform: process.platform
-  };
-  const found = locateExtension({
-    allowOpen: !args.includes("--no-open"),
-    connected: !!connected,
-    pairedOffline,
-    ...folder ? { folder } : {},
-    detections,
-    preferred: ssh ? undefined : defaultBrowser(detections.map((detection) => detection.browser)),
-    env
+  const act = interactive && !blocked.length;
+  const page = target ? extensionsPage(target) : "chrome://extensions";
+  unpackedSteps({
+    folder: options.folder,
+    platform: options.env.platform,
+    log,
+    browser: target?.name,
+    page,
+    opened: act && target !== undefined && effects.open(target, page),
+    revealed: act && options.env.tty && effects.reveal(options.folder),
+    copied: act && options.env.tty && effects.copy(options.folder)
   });
-  if (connected || found === "off" || pairedOffline || !folder && !STORE_URL)
+  return "guided";
+}
+function pairStoreExtension(options, effects = systemEffects) {
+  const ids = options.storeIds ?? STORE_IDS;
+  const matches = options.detections.flatMap((detection) => detection.enabled).filter((match) => ids.includes(match.id) && !oldStoreBuild(match));
+  const match = matches.find((candidate) => candidate.browser.name === options.preferred?.name) ?? matches[0];
+  if (!match)
+    return "none";
+  const interactive = options.allowOpen && options.env.display && !options.env.ssh;
+  if (interactive && effects.open(match.browser, `chrome-extension://${match.id}/welcome.html#code=${options.code()}`, match.profile.dir)) {
+    effects.log(`✓ Opened Browse's status page in ${match.browser.name} (${match.profile.name}) to pair it with the relay`);
+    return "opened";
+  }
+  effects.log(`To pair Browse in ${match.browser.name} (${match.profile.name}): ${manualPair(options.code())}`);
+  return "manual";
+}
+function unpackedSteps(step) {
+  const { log } = step;
+  const page = step.page ?? "chrome://extensions";
+  const fileManager = step.platform === "darwin" ? "Finder" : step.platform === "win32" ? "Explorer" : "your file manager";
+  const paste = step.platform === "darwin" ? "press Cmd+Shift+G in the folder picker and paste" : "paste it into the folder picker";
+  log("Load the extension in your browser (one time):");
+  log(`  1. Open ${page}${step.browser ? ` in ${step.browser}` : " (or your browser's extensions page)"}${step.opened ? " (opened)" : ""}`);
+  log("  2. Turn on Developer mode");
+  log(`  3. Click Load unpacked and choose this folder${step.copied ? ` (path copied: ${paste})` : ""}, or drag it onto the page:`);
+  log(`     ${step.folder}${step.revealed ? ` (shown in ${fileManager})` : ""}`);
+}
+async function waitForExtension(options) {
+  const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  for (let waited = 0;; waited += options.intervalMs) {
+    if (await options.connected())
+      return true;
+    if (waited >= options.timeoutMs)
+      return false;
+    await sleep(options.intervalMs);
+  }
+}
+
+// src/setup/mcp.ts
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, rmSync, statSync, writeFileSync } from "node:fs";
+import path4 from "node:path";
+function configFile() {
+  const directory = path4.join(configRoot, "opencode");
+  const candidates = ["opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc"].map((name) => path4.join(directory, name));
+  return candidates.find((file) => existsSync3(file) && statSync(file).isFile()) ?? candidates[0];
+}
+function fingerprint(entry) {
+  return createHash("sha256").update(readFileOr(entry, entry)).digest("hex").slice(0, 16);
+}
+function restartOutdatedRelay(entry, node) {
+  const status = spawnSync3(node, [entry, "status", "--json"], { encoding: "utf8", timeout: 15000 });
+  if (!/"stale":\s*true/.test(status.stdout ?? ""))
     return;
-  ensureRelay(entry);
-  let code;
-  const pairingCode = () => code && pendingPairingCodeKeys().includes(pairingCodeKey(code)) ? code : code = mintPairingCode();
-  const pairStore = (scanned) => pairStoreExtension({ detections: scanned, preferred: defaultBrowser(scanned.map((d) => d.browser)), allowOpen: !args.includes("--no-open"), env, code: pairingCode });
-  let offer = ssh ? "none" : pairStore(detections);
-  const blocked = detections.filter((d) => d.blocked).map((d) => d.browser.name);
-  if (offer === "none" && blocked.length)
-    log(`Couldn't check ${blocked.join(", ")}. If Browse is already installed there, pair it manually. ${manualPair(pairingCode())}`);
-  const next = folder ? `If Browse is already loaded unpacked: ${unpackedReloadAdvice}` : `If Browse isn't connected after you add it, run \`${cliCommand("install")}\` again to pair it.`;
-  const agentNext = () => {
-    if (folder && offer === "none" && !blocked.length)
-      return `Agent: if Browse is already loaded unpacked, ask the user: ${unpackedReloadAdvice} Otherwise ask them to load ${folder}. Check the connection with the browse status tool.`;
-    return `Agent: ${offer === "opened" ? "ask the user to open Browse's status page in their browser" : offer === "manual" || blocked.length ? "ask the user to finish pairing in Browse's Options" : "ask the user to add Browse in their browser"}. Then re-run \`${cliCommand("install")}\` to finish, or call the browse status tool to check the connection.`;
-  };
-  if (!env.tty)
-    log(agentNext());
-  if (args.includes("--no-wait") || ssh || !env.display) {
-    if (env.tty)
-      log(next);
+  const restart = spawnSync3(node, [entry, "relay", "restart"], { encoding: "utf8", timeout: 60000 });
+  if (restart.status === 0)
+    return ["✓ Relay restarted with the new version"];
+  return relayNotRestarted(status.stdout ?? "", `${restart.stderr ?? ""}
+${restart.stdout ?? ""}`);
+}
+function relayNotRestarted(statusJson, output, command = cliCommand("relay restart")) {
+  const sessions = (() => {
+    try {
+      const parsed = JSON.parse(statusJson);
+      return (parsed.sessions ?? []).filter((item) => item.connected === true && typeof item.id === "string").map((item) => item.id);
+    } catch {
+      return [];
+    }
+  })();
+  const reason = output.split(`
+`).map((line) => line.trim()).filter((line) => line && !line.startsWith("Restarting the relay leaves")).join(" ");
+  const who = sessions.length === 1 ? `an agent session is active (${sessions[0]})` : sessions.length > 1 ? `${sessions.length} agent sessions are active (${sessions.slice(0, 5).join(", ")}${sessions.length > 5 ? ", …" : ""})` : undefined;
+  const forceable = /--force/.test(reason);
+  return [
+    `! Relay not restarted: ${who ?? (reason || "it declined")}${who && reason ? ` (${reason})` : ""}.`,
+    "  It keeps running the previous version, so agents get this update only after it restarts.",
+    forceable ? `  When no agent is using the browser, run: ${command} (or ${command} --force to end what's blocking it now)` : `  When no agent is using the browser, run: ${command}`
+  ];
+}
+function mcpServers(file = configFile()) {
+  const errors = [];
+  const config = parse2(existsSync3(file) ? readFileSync3(file, "utf8") : "{}", errors, { allowTrailingComma: true });
+  if (errors.length || [config, config?.mcp, config?.mcp?.servers].some((v) => v !== undefined && (!v || typeof v !== "object" || Array.isArray(v))))
+    fail(`Invalid ${file}; left unchanged`);
+  return config.mcp?.servers ?? {};
+}
+function ownedMcp(server, entry) {
+  const command = server?.command;
+  return Array.isArray(command) && command.length === 3 && command[2] === "mcp" && [entry, layout.shim, path4.join(packageRoot, "dist/cli.mjs")].some((e) => e && command[1] === e);
+}
+function mergedMcpServer(existing, command, runtime) {
+  const environment = typeof existing?.environment === "object" && existing.environment !== null && !Array.isArray(existing.environment) ? existing.environment : {};
+  return { ...existing, type: "local", command, environment: { ...environment, OPENCODE_BROWSER_RUNTIME: runtime } };
+}
+function configureMcp(file, entry, previousEntry) {
+  const existing = mcpServers(file)[MCP_NAME];
+  if (existing && !ownedMcp(existing, previousEntry))
     return;
+  const renamed = removeMcp(LEGACY_MCP_NAME, previousEntry, file);
+  const server = mergedMcpServer(existing, [process.execPath, entry, "mcp"], entry === layout.shim ? "auto-update" : fingerprint(entry));
+  if (existing && JSON.stringify(existing) === JSON.stringify(server))
+    return `"${MCP_NAME}" is up to date`;
+  const text = readFileOr(file, "{}");
+  const edits = modify(text, ["mcp", "servers", MCP_NAME], server, {
+    formattingOptions: { tabSize: 2, insertSpaces: true }
+  });
+  mkdirSync(path4.dirname(file), { recursive: true });
+  writeFileSync(file, applyEdits(text, edits));
+  if (renamed)
+    return `"${LEGACY_MCP_NAME}" renamed to "${MCP_NAME}" in ${file}`;
+  return existing ? `"${MCP_NAME}" updated in ${file}` : `"${MCP_NAME}" added to ${file}`;
+}
+function removeMcp(name, entry, file = configFile()) {
+  const text = readFileOr(file, "");
+  if (!text || !ownedMcp(mcpServers(file)[name], entry))
+    return false;
+  writeFileSync(file, applyEdits(text, modify(text, ["mcp", "servers", name], undefined, {})));
+  return true;
+}
+function legacyBrowserControl() {
+  return Object.entries(mcpServers()).filter(([name, server]) => name === "browser-control" || JSON.stringify(server.command ?? "").includes("browser-control")).map(([name]) => name);
+}
+function removeLegacyHost() {
+  const leftovers = [
+    ...browsers().flatMap((browser) => browser.manifests.map((directory) => path4.join(directory, `${LEGACY_HOST_NAME}.json`))),
+    ...legacyFiles
+  ].filter((file) => existsSync3(file));
+  leftovers.forEach((file) => rmSync(file, { force: true }));
+  const keys = windows ? LEGACY_REGISTRY_ROOTS.map((regRoot) => `${regRoot}\\NativeMessagingHosts\\${LEGACY_HOST_NAME}`).filter((key) => spawnSync3("reg", ["query", key, "/ve"]).status === 0) : [];
+  keys.forEach((key) => spawnSync3("reg", ["delete", key, "/f"]));
+  return leftovers.length + keys.length > 0;
+}
+async function installRuntime() {
+  if (fromSource) {
+    const bundle = path4.join(packageRoot, "dist", "cli.mjs");
+    if (!existsSync3(bundle))
+      fail("Build the CLI first: `bun run build` in cli/ (or `bun run setup` at the top).");
+    return { entry: bundle, version: opencodeBrowserVersion2 };
   }
-  log(`Waiting for Browse to connect (up to ${timeoutMs / 1000}s; Ctrl+C to skip)…`);
-  let stopped = false;
-  const stop = () => {
-    stopped = true;
-  };
-  process.once("SIGINT", stop);
+  const spec = process.env.OPENCODE_BROWSER_PACKAGE;
+  const before = readCurrent(layout);
+  const existing = versionEntry(layout, opencodeBrowserVersion2);
+  const reuse = !spec && existsSync3(existing) && readFileSync3(existing).equals(readFileSync3(path4.join(packageRoot, "dist", "cli.mjs"))) && spawnSync3(process.execPath, [existing, "--version"], { encoding: "utf8", timeout: 30000 }).stdout?.trim() === opencodeBrowserVersion2;
+  let installed;
   try {
-    const deadline = Date.now() + timeoutMs;
-    do {
-      const status = await extensionStatus(!args.includes("--no-open") && (offer === "opened" || offer === "none" && !blocked.length));
-      if (status?.protocolCompatible === false)
-        return reportMismatch(status);
-      if (status?.connected)
-        return log(connectedMessage);
-      if (status?.pairingState === "paired-offline")
-        return log(pairedOfflineMessage);
-      if (!folder && offer === "none") {
-        const scan = detectBrowsers();
-        if (!checkStore(scan))
-          return;
-        if (scan.some((d) => d.enabled.length))
-          offer = pairStore(scan);
-      }
-      await new Promise((resolve) => setTimeout(resolve, Math.max(0, Math.min(1000, deadline - Date.now()))));
-    } while (!stopped && Date.now() < deadline);
-    if (!env.tty)
-      return log(`! Not connected yet. ${agentNext()}`);
-    log(`! Not connected yet. ${code ? manualPair(pairingCode()) : next}`);
-    process.exitCode = 1;
-  } finally {
-    process.off("SIGINT", stop);
+    installed = reuse ? existing : await installVersion({
+      layout,
+      version: opencodeBrowserVersion2,
+      ...spec ? { spec } : { runningPackage: packageRoot }
+    });
+  } catch (error) {
+    fail(`Could not install ${spec ?? `${PACKAGE}@${opencodeBrowserVersion2}`}: ${error.message}`);
   }
+  const version = path4.relative(layout.versions, installed).split(path4.sep)[0];
+  const previous = before?.version === version ? before.previous : before?.version;
+  switchVersion(layout, version, previous);
+  updateState(layout, ({ pending, skipped, ...state }) => ({
+    ...state,
+    ...pending && compareVersions(pending, version) > 0 ? { pending } : {},
+    ...skipped && skipped !== version ? { skipped } : {}
+  }));
+  pruneVersions(layout, [version, previous]);
+  for (const legacy of ["node_modules", "package.json", "package-lock.json"])
+    rmSync(path4.join(files.runtime, legacy), { recursive: true, force: true });
+  return { entry: layout.shim, version };
 }
-var connectedMessage = "✓ Connected. Restart your agent, then ask it to open a page.";
-var pairedOfflineMessage = "! Not connected yet. Open the browser profile already paired with Browse and make sure the extension is enabled. It reconnects automatically.";
-var manualPair = (code) => `Open the Extensions menu → Browse → Options, enter ${formatPairingCode(code)} as the pairing code, then click Pair.`;
-var installWaitTimeout = (args, tty) => waitTimeout(args, tty ? 180 : 90);
-function waitTimeout(args, defaultSeconds = 180) {
-  const seconds = Number(args.includes("--wait-seconds") ? flag(args, "--wait-seconds") : defaultSeconds);
-  if (!Number.isSafeInteger(seconds) || seconds < 1 || seconds > 3600)
-    fail("--wait-seconds must be between 1 and 3600.");
-  return seconds * 1000;
+function installedRuntime(settings, server) {
+  const command = Array.isArray(server?.command) ? server.command.filter((part) => typeof part === "string") : [];
+  const entry = settings?.entry ?? command.find((part) => /cli\.m?js$/.test(part));
+  if (!entry || !settings?.version && !existsSync3(entry))
+    return;
+  const packageDir = path4.dirname(path4.dirname(entry));
+  const source = existsSync3(path4.join(packageDir, "src", "main.ts"));
+  const version = (entry === layout.shim ? readCurrent(layout)?.version : undefined) ?? settings?.version ?? (path4.resolve(entry) === path4.join(packageRoot, "dist", "cli.mjs") ? opencodeBrowserVersion2 : readJson(path4.join(packageDir, "package.json"))?.version);
+  return { entry, version, source };
 }
+
+// src/setup/commands.ts
+var relayBase = () => `http://127.0.0.1:${Number(process.env.OPENCODE_BROWSER_PORT) || 19988}`;
+var relayHeaders = () => {
+  try {
+    return { authorization: relayAuthorization() };
+  } catch {
+    return {};
+  }
+};
 function ensureRelay(entry) {
-  const started = spawnSync(process.execPath, [entry, "session", "list", "--json"], { encoding: "utf8", timeout: 30000 });
+  const started = spawnSync4(process.execPath, [entry, "session", "list", "--json"], {
+    encoding: "utf8",
+    timeout: 30000
+  });
   if (started.status !== 0)
     fail(`Couldn't start the Browse relay: ${started.stderr?.trim() || started.error?.message || `run ${cliCommand("doctor")}`}`);
 }
-function installedRuntime(settings, server) {
-  const command = Array.isArray(server?.command) ? server.command.filter((part) => typeof part === "string") : [];
-  const entry = settings?.entry ?? command.find((part) => /cli\.m?js$/.test(part));
-  if (!entry || !settings?.version && !existsSync(entry))
+var extensionStatus = (installWaiting = false) => fetch(`${relayBase()}/extension/status`, {
+  headers: { ...relayHeaders(), ...installWaiting ? { "x-browse-install": "waiting" } : {} },
+  signal: AbortSignal.timeout(3000)
+}).then((response) => response.ok ? response.json() : undefined).catch(() => {
+  return;
+});
+async function settledExtensionStatus(entry) {
+  let status = await extensionStatus();
+  if (!status && Object.keys(readBrowserPairings()).length) {
+    ensureRelay(entry);
+    status = await extensionStatus();
+  }
+  for (let attempt = 0;status?.connected === false && attempt < 10; attempt++) {
+    await new Promise((resolve) => setTimeout(resolve, 500));
+    status = await extensionStatus();
+  }
+  return status;
+}
+async function reloadOutdatedExtension(before, folder) {
+  if (before.origin !== `chrome-extension://${unpackedExtensionId}`)
+    return "current";
+  const bundled = readJson(path5.join(folder, "build.json"))?.build;
+  if (bundled && before.build === bundled)
+    return "current";
+  const sent = await fetch(`${relayBase()}/extension/reload`, {
+    method: "POST",
+    body: "{}",
+    headers: { "content-type": "application/json", ...relayHeaders() },
+    signal: AbortSignal.timeout(5000)
+  }).then((response) => response.ok, () => false);
+  if (!sent)
+    return "stale";
+  for (let attempt = 0;attempt < 20; attempt++) {
+    await new Promise((resolve) => setTimeout(resolve, 500));
+    const after = await extensionStatus();
+    if (after?.connected && after.build !== before.build)
+      return "reloaded";
+  }
+  return "stale";
+}
+async function syncDev() {
+  if (!dev)
     return;
-  const packageDir = path2.dirname(path2.dirname(entry));
-  const source = existsSync(path2.join(packageDir, "src", "main.ts"));
-  const version = (entry === layout.shim ? readCurrent(layout)?.version : undefined) ?? settings?.version ?? (path2.resolve(entry) === path2.join(packageRoot, "dist", "cli.mjs") ? opencodeBrowserVersion2 : readJson(path2.join(packageDir, "package.json"))?.version);
-  return { entry, version, source };
+  try {
+    const result = await syncDevExtension(dev, { root });
+    log(result === "updated" ? `✓ Downloaded the dev extension (${dev.file}) to ${devExtensionFolder(root)}` : `✓ Dev extension ${dev.file} is in ${devExtensionFolder(root)}`);
+  } catch (error) {
+    fail(`Could not get the dev extension: ${error.message}`);
+  }
 }
-function printSetupStatus() {
-  const settings = readJson(files.settings);
-  const runtime = installedRuntime(settings, mcpServers()[MCP_NAME]);
-  log(runtime ? `Setup:     installed${runtime.source ? " (from source)" : ""}` : `Setup:     not installed. Run \`${installCommand()}\`.`);
-  log(`Version:   ${runtime ? `${runtime.version ?? "unknown"} (${runtime.entry})` : "not installed"}`);
-  log(`opencode:  ${settings?.opencode ?? findOpencode([]) ?? "not found"}`);
-  log(mcpServers()[MCP_NAME] ? `MCP:       "${MCP_NAME}" configured` : "MCP:       not configured");
-  log(describeAutoUpdate(autoUpdateStatus({ layout })));
-  log(`Logs:      ${path2.join(files.dir, "logs")}`);
-  log("");
+function pairUnpacked() {
+  const directories = [...checkoutExtensionDirs, ...dev ? [devExtensionFolder(root)] : []].filter((directory) => existsSync4(path5.join(directory, "manifest.json")));
+  if (directories.length === 0)
+    return;
+  const code = mintPairingCode(undefined, { ttlMs: bundledPairingCodeTtlMs });
+  for (const directory of directories)
+    writeExtensionPairing(directory, code);
 }
 async function extension() {
   const folder = unpackedFolder();
@@ -10820,22 +11035,14 @@ async function extension() {
     return;
   }
   await syncDev();
-  if (!existsSync(path2.join(folder, "manifest.json")))
+  if (!existsSync4(path5.join(folder, "manifest.json")))
     fail(`${folder} has no built extension. Run \`${installCommand()}\` first.`);
   pairUnpacked();
   revealFolder(folder);
   log(`Load unpacked from: ${folder}`);
 }
-function pairUnpacked() {
-  const directories = [...checkoutExtensionDirs, ...dev ? [devExtensionFolder(root)] : []].filter((directory) => existsSync(path2.join(directory, "manifest.json")));
-  if (directories.length === 0)
-    return;
-  const code = mintPairingCode(undefined, { ttlMs: bundledPairingCodeTtlMs });
-  for (const directory of directories)
-    writeExtensionPairing(directory, code);
-}
 async function pair(args) {
-  mkdirSync(files.dir, { recursive: true });
+  mkdirSync2(files.dir, { recursive: true });
   if (args[0] === "--list")
     return listPairings();
   if (args[0] === "--revoke")
@@ -10853,18 +11060,22 @@ async function pair(args) {
   log(`${manualPair(code)} It works once, within ${pairingCodeTtlMs / 60000} minutes.`);
   log(`Waiting up to ${timeoutMs / 1000}s for that browser. Later, \`${cliCommand("pair --list")}\` shows paired browsers.`);
   let paired;
-  await waitForExtension({ timeoutMs, intervalMs: 500, connected: async () => {
-    const match = Object.values(readBrowserPairings()).find((browser) => browser.receipt === receipt && browser.lastSeen !== undefined);
-    paired = match?.name ?? match?.id;
-    return paired !== undefined;
-  } });
+  await waitForExtension({
+    timeoutMs,
+    intervalMs: 500,
+    connected: async () => {
+      const match = Object.values(readBrowserPairings()).find((browser) => browser.receipt === receipt && browser.lastSeen !== undefined);
+      paired = match?.name ?? match?.id;
+      return paired !== undefined;
+    }
+  });
   if (paired)
     return log(`✓ Paired ${paired}.`);
   log(`! Pairing not confirmed. For a fresh code run \`${cliCommand("pair")}\`.`);
   process.exitCode = 1;
 }
 function pairedBrowsers() {
-  const known = readJson(path2.join(files.dir, "browsers.json")) ?? {};
+  const known = readJson(path5.join(files.dir, "browsers.json")) ?? {};
   return Object.entries(readBrowserPairings()).map(([key, entry]) => ({
     key,
     id: known[key]?.id ?? entry.id,
@@ -10929,7 +11140,7 @@ async function set(args) {
   log(`✓ hostname is ${hostname}`);
   const running = await fetch(`${relayBase()}/version`, { signal: AbortSignal.timeout(2000) }).then((response) => response.ok, () => false);
   if (running) {
-    const restarted = spawnSync(process.execPath, [process.argv[1], "relay", "restart"], { stdio: "inherit" });
+    const restarted = spawnSync4(process.execPath, [process.argv[1], "relay", "restart"], { stdio: "inherit" });
     if (restarted.status !== 0)
       log(`! The relay is still running with the old hostname. Run \`${cliCommand("relay restart --force")}\` to apply it.`);
   }
@@ -10944,8 +11155,8 @@ async function set(args) {
   log("The connection isn't encrypted by Browse: use it over Tailscale or a LAN you trust, not the open internet.");
 }
 async function confirmSecretRemoval(args) {
-  const secrets = path2.join(files.dir, "secrets");
-  const profiles = existsSync(secrets) ? readdirSync(secrets).filter((name) => name.endsWith(".json")) : [];
+  const secrets = path5.join(files.dir, "secrets");
+  const profiles = existsSync4(secrets) ? readdirSync2(secrets).filter((name) => name.endsWith(".json")) : [];
   if (profiles.length === 0 || args.includes("--yes") || args.includes("-y"))
     return;
   const notice = `Uninstalling deletes ${profiles.length} stored secret profile${profiles.length === 1 ? "" : "s"} in ${secrets}.`;
@@ -10969,7 +11180,7 @@ async function uninstall(args) {
       fail(`Couldn't safely remove Browse from ${receipt.file}. Check its syntax and permissions, then re-run uninstall.`);
     }
   }
-  rmSync(files.dir, { recursive: true, force: true });
+  rmSync2(files.dir, { recursive: true, force: true });
   log(`✓ Removed ${files.dir}`);
   if (host)
     log("✓ Removed the native messaging host of an earlier version");
@@ -10977,326 +11188,221 @@ async function uninstall(args) {
     log(`✓ Removed the ${mcp.map((name) => `"${name}"`).join(" and ")} MCP server${mcp.length === 1 ? "" : "s"}`);
   log("Remove the extension from your browser to finish.");
 }
-var relayBase = () => `http://127.0.0.1:${Number(process.env.OPENCODE_BROWSER_PORT) || 19988}`;
-var relayHeaders = () => {
-  try {
-    return { authorization: relayAuthorization() };
-  } catch {
-    return {};
-  }
-};
-var extensionStatus = (installWaiting = false) => fetch(`${relayBase()}/extension/status`, { headers: { ...relayHeaders(), ...installWaiting ? { "x-browse-install": "waiting" } : {} }, signal: AbortSignal.timeout(3000) }).then((response) => response.ok ? response.json() : undefined).catch(() => {
-  return;
-});
-async function settledExtensionStatus(entry) {
-  let status = await extensionStatus();
-  if (!status && Object.keys(readBrowserPairings()).length) {
-    ensureRelay(entry);
-    status = await extensionStatus();
-  }
-  for (let attempt = 0;status?.connected === false && attempt < 10; attempt++) {
-    await new Promise((resolve) => setTimeout(resolve, 500));
-    status = await extensionStatus();
-  }
-  return status;
-}
-async function reloadOutdatedExtension(before, folder) {
-  if (before.origin !== `chrome-extension://${unpackedExtensionId}`)
-    return "current";
-  const bundled = readJson(path2.join(folder, "build.json"))?.build;
-  if (bundled && before.build === bundled)
-    return "current";
-  const sent = await fetch(`${relayBase()}/extension/reload`, {
-    method: "POST",
-    body: "{}",
-    headers: { "content-type": "application/json", ...relayHeaders() },
-    signal: AbortSignal.timeout(5000)
-  }).then((response) => response.ok, () => false);
-  if (!sent)
-    return "stale";
-  for (let attempt = 0;attempt < 20; attempt++) {
-    await new Promise((resolve) => setTimeout(resolve, 500));
-    const after = await extensionStatus();
-    if (after?.connected && after.build !== before.build)
-      return "reloaded";
-  }
-  return "stale";
-}
-function findOnPath(name) {
-  const found = spawnSync(windows ? "where" : "which", [name], { encoding: "utf8" });
-  return found.status === 0 ? found.stdout.split(/\r?\n/)[0]?.trim() || undefined : undefined;
-}
-var oldStoreBuild = (match) => /^0\.0\.[012]$/.test(match.version ?? "");
-function locateExtension(options, effects = systemEffects) {
-  const { log } = effects;
-  const listing = options.storeUrl ?? STORE_URL;
-  const noListing = () => log(`! This package doesn't know its Chrome Web Store item, so it can't install the extension. Install a released version (\`npx @opencode/browse install\`), or set up Browse from a checkout.`);
-  const pairLater = () => log(`  Once it's added, run \`${cliCommand("install")}\` again to pair it with the relay.`);
-  if (options.pairedOffline)
-    return log(pairedOfflineMessage), "ready";
-  if (options.env.ssh) {
-    if (options.connected)
-      return log(connectedMessage), "ready";
-    if (options.folder)
-      unpackedSteps({ folder: options.folder, platform: options.env.platform, log });
-    else if (listing)
-      log(`Install Browse in your browser from the Chrome Web Store: ${listing}`), pairLater();
-    else
-      noListing();
-    return "guided";
-  }
-  reportDetections(options.detections, options.preferred, log);
-  if (options.connected)
-    return log(connectedMessage), "ready";
-  if (options.detections.some((detection) => detection.enabled.length))
-    return "ready";
-  const off = options.detections.flatMap((detection) => detection.disabled);
-  if (off.length) {
-    log(`! Browse is turned off in ${off.map((match) => `${match.browser.name} (${match.profile.name})`).join(", ")}. Turn it on in the browser's extensions page.`);
-    return "off";
-  }
-  const blocked = options.detections.filter((detection) => detection.blocked).map((detection) => detection.browser.name);
-  const target = options.preferred ?? options.detections.find((detection) => !detection.blocked)?.browser;
-  const interactive = options.allowOpen && options.env.display;
-  if (!options.folder) {
-    if (!listing)
-      return noListing(), "guided";
-    const opened = interactive && !blocked.length && (target ? effects.open(target, listing) : effects.openDefault?.(listing));
-    log(`Install Browse from the Chrome Web Store${opened ? ` (opened in ${target?.name ?? "your default browser"})` : ""}:`);
-    log(`  ${listing}`);
-    log(`  Once it's added, install pairs it with the relay (if install isn't waiting for it, run \`${cliCommand("install")}\` again).`);
-    return "guided";
-  }
-  const act = interactive && !blocked.length;
-  const page = target ? extensionsPage(target) : "chrome://extensions";
-  unpackedSteps({
-    folder: options.folder,
-    platform: options.env.platform,
-    log,
-    browser: target?.name,
-    page,
-    opened: act && target !== undefined && effects.open(target, page),
-    revealed: act && options.env.tty && effects.reveal(options.folder),
-    copied: act && options.env.tty && effects.copy(options.folder)
-  });
-  return "guided";
-}
-function pairStoreExtension(options, effects = systemEffects) {
-  const ids = options.storeIds ?? STORE_IDS;
-  const matches = options.detections.flatMap((detection) => detection.enabled).filter((match) => ids.includes(match.id) && !oldStoreBuild(match));
-  const match = matches.find((candidate) => candidate.browser.name === options.preferred?.name) ?? matches[0];
-  if (!match)
-    return "none";
-  const interactive = options.allowOpen && options.env.display && !options.env.ssh;
-  if (interactive && effects.open(match.browser, `chrome-extension://${match.id}/welcome.html#code=${options.code()}`, match.profile.dir)) {
-    effects.log(`✓ Opened Browse's status page in ${match.browser.name} (${match.profile.name}) to pair it with the relay`);
-    return "opened";
-  }
-  effects.log(`To pair Browse in ${match.browser.name} (${match.profile.name}): ${manualPair(options.code())}`);
-  return "manual";
-}
-function unpackedSteps(step) {
-  const { log } = step;
-  const page = step.page ?? "chrome://extensions";
-  const fileManager = step.platform === "darwin" ? "Finder" : step.platform === "win32" ? "Explorer" : "your file manager";
-  const paste = step.platform === "darwin" ? "press Cmd+Shift+G in the folder picker and paste" : "paste it into the folder picker";
-  log("Load the extension in your browser (one time):");
-  log(`  1. Open ${page}${step.browser ? ` in ${step.browser}` : " (or your browser's extensions page)"}${step.opened ? " (opened)" : ""}`);
-  log("  2. Turn on Developer mode");
-  log(`  3. Click Load unpacked and choose this folder${step.copied ? ` (path copied: ${paste})` : ""}, or drag it onto the page:`);
-  log(`     ${step.folder}${step.revealed ? ` (shown in ${fileManager})` : ""}`);
-}
-function extensionsPage(browser) {
-  const scheme = { "Microsoft Edge": "edge", Brave: "brave", Vivaldi: "vivaldi", Opera: "opera" }[browser.name];
-  return `${scheme ?? "chrome"}://extensions`;
-}
-async function waitForExtension(options) {
-  const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-  for (let waited = 0;; waited += options.intervalMs) {
-    if (await options.connected())
-      return true;
-    if (waited >= options.timeoutMs)
-      return false;
-    await sleep(options.intervalMs);
-  }
-}
-function detectBrowsers() {
-  return browsers().flatMap((browser) => {
-    const state = readLocked(path2.join(browser.userData, "Local State"));
-    if (state.missing)
-      return [];
-    if (state.blocked)
-      return launcher(browser) ? [{ browser, blocked: true, enabled: [], disabled: [] }] : [];
-    let blocked = false;
-    const matches = listProfiles(browser, state.text).flatMap((profile) => {
-      const settings = ["Secure Preferences", "Preferences"].map((file) => {
-        const prefs = readLocked(path2.join(browser.userData, profile.dir, file));
-        blocked ||= prefs.blocked;
-        return parseJson(prefs.text)?.extensions?.settings ?? {};
-      });
-      const id = [...STORE_IDS, unpackedExtensionId].find((candidate) => settings.some((entries) => entries[candidate]));
-      if (!id)
-        return [];
-      const setting = settings.find((entries) => entries[id])[id];
-      const version = installedExtensionVersion(id, setting);
-      return [{ browser, profile, id, ...version ? { version } : {}, enabled: !disabled(setting) }];
-    });
-    return [
-      {
-        browser,
-        blocked,
-        enabled: matches.filter((match) => match.enabled),
-        disabled: matches.filter((match) => !match.enabled)
-      }
-    ];
-  });
-}
-function installedExtensionVersion(id, setting) {
-  if (setting.manifest?.version)
-    return setting.manifest.version;
-  if (!setting.path)
-    return;
-  if (path2.isAbsolute(setting.path))
-    return readJson(path2.join(setting.path, "manifest.json"))?.version;
-  const packed = /^([a-p]{32})[/\\](\d+(?:\.\d+){0,3})_\d+$/.exec(setting.path);
-  return packed?.[1] === id ? packed[2] : undefined;
-}
-function disabled(setting) {
-  const reasons = setting.disable_reasons;
-  if (Array.isArray(reasons))
-    return reasons.length > 0;
-  return typeof reasons === "number" && reasons !== 0;
-}
-function listProfiles(browser, localState) {
-  const cache = parseJson(localState)?.profile?.info_cache;
-  if (cache && Object.keys(cache).length)
-    return Object.entries(cache).map(([dir, info]) => ({ dir, name: info.name || dir }));
-  const dirs = (() => {
-    try {
-      return readdirSync(browser.userData);
-    } catch {
-      return [];
-    }
-  })();
-  return dirs.filter((dir) => /^(Default|Profile \d+)$/.test(dir)).map((dir) => ({ dir, name: dir }));
-}
-function readLocked(file) {
-  try {
-    return { text: readFileSync(file, "utf8"), missing: false, blocked: false };
-  } catch (error) {
-    const code = error.code;
-    return { text: undefined, missing: code === "ENOENT" || code === "ENOTDIR", blocked: code === "EPERM" || code === "EACCES" };
-  }
+
+// src/setup.ts
+function checkNode() {
+  if (process.versions.bun)
+    fail("Browse runs on Node.js 22.19 or newer, but this ran under Bun (`bun run` uses Bun when `node` isn't on PATH). Install Node.js from https://nodejs.org, then run setup again.");
+  const [major = 0, minor = 0] = process.versions.node.split(".").map(Number);
+  if (major < 22 || major === 22 && minor < 19)
+    fail(`Browse needs Node.js 22.19 or newer; this is ${process.version} (${process.execPath}). Update Node.js (https://nodejs.org), then run setup again.`);
 }
-function parseJson(text) {
-  if (!text)
-    return;
+async function install(args) {
+  checkNode();
+  const tty = !!(process.stdin.isTTY && process.stdout.isTTY);
+  const timeoutMs = installWaitTimeout(args, tty);
+  let flags;
   try {
-    return JSON.parse(text);
-  } catch {
-    return;
+    flags = agentFlags(args);
+  } catch (error) {
+    fail(error.message);
   }
-}
-function defaultBrowser(candidates) {
-  const id = defaultBrowserID();
-  if (!id)
+  const opencode = findOpencode(args);
+  const caller = callingAgent(process.env);
+  const locations = agentLocations(home, configRoot, findOnPath, configFile(), opencode);
+  const previous = readJson(files.settings);
+  const remembered = previous?.selectedAgents ?? (previous?.declinedAgents?.length ? locations.filter((a) => a.installed && !previous.declinedAgents.includes(a.name)).map((a) => a.name) : undefined);
+  const plan = agentPlan(locations, flags, tty, caller, remembered);
+  const selected = plan.picker ? await pickAgents(locations, plan.selected) : plan.selected;
+  if (!selected) {
+    process.exitCode = 130;
     return;
-  const known = browsers().find((browser) => browser.defaultIDs.some((name) => name.toLowerCase() === id.toLowerCase() || id.startsWith(`${name}.`)));
-  return known && (candidates.find((browser) => browser.name === known.name) ?? known);
-}
-function defaultBrowserID() {
-  if (process.platform === "darwin") {
-    const plist = path2.join(home, "Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist");
-    const json = spawnSync("plutil", ["-convert", "json", "-o", "-", plist], { encoding: "utf8" });
-    const handlers = parseJson(json.stdout)?.LSHandlers ?? [];
-    return ["https", "http"].map((scheme) => handlers.find((handler) => handler.LSHandlerURLScheme === scheme)?.LSHandlerRoleAll).find((bundle) => !!bundle);
   }
-  if (windows) {
-    const key = "HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice";
-    const query = spawnSync("reg", ["query", key, "/v", "ProgId"], { encoding: "utf8" });
-    return /ProgId\s+REG_SZ\s+(\S+)/.exec(query.stdout ?? "")?.[1];
+  mkdirSync3(files.dir, { recursive: true });
+  const { entry, version } = await installRuntime();
+  log(`✓ Browse ${version} installed${fromSource ? " (from source)" : ""}`);
+  const agents = previous?.agents ?? [];
+  const opencodeConfigs = previous?.opencodeConfigs ?? (previous?.entry ? [configFile()] : []);
+  const selectedAgents = plan.picker ? selected : remembered;
+  const save = () => writeFileSync2(files.settings, JSON.stringify({
+    ...opencode ? { opencode } : {},
+    entry,
+    version,
+    agents,
+    opencodeConfigs,
+    ...selectedAgents && { selectedAgents }
+  }, null, 2) + `
+`);
+  save();
+  if (removeLegacyHost())
+    log("✓ Removed the native messaging host of an earlier version");
+  const node = process.execPath;
+  for (const agent of locations) {
+    if (!selected.includes(agent.name)) {
+      if (!plan.picker && agent.installed && !flags.requested.length)
+        log(`To add ${agentLabels[agent.name]}: ${cliCommand(`install --agent ${agent.name}`)}`);
+      continue;
+    }
+    if (agent.name === "opencode") {
+      const mcp = configureMcp(agent.file, entry, previous?.entry);
+      if (mcp && !opencodeConfigs.includes(agent.file)) {
+        opencodeConfigs.push(agent.file);
+        save();
+      }
+      if (!mcp)
+        process.exitCode = 1;
+      log(mcp ? `✓ MCP server ${mcp} (OpenCode)` : `! OpenCode already has a different server named browse in ${agent.file}; left unchanged.`);
+      continue;
+    }
+    const receipt = { name: agent.name, file: agent.file, entry, node };
+    try {
+      const result = editAgentConfig(receipt);
+      if (result === "added") {
+        const i = agents.findIndex((a) => a.file === agent.file);
+        if (i !== -1)
+          agents.splice(i, 1);
+        agents.push(receipt);
+        save();
+      }
+      if (result === "conflict")
+        process.exitCode = 1;
+      log(result === "conflict" ? `! ${agent.name} already has a different browse server; left ${agent.file} unchanged.` : `✓ ${agent.name}: browse ${result} in ${agent.file}`);
+    } catch {
+      process.exitCode = 1;
+      log(`! Couldn't edit ${agent.file} for ${agent.name}. Check its syntax and permissions, then run ${cliCommand(`install --agent ${agent.name}`)}.`);
+    }
   }
-  const xdg = spawnSync("xdg-settings", ["get", "default-web-browser"], { encoding: "utf8" });
-  return xdg.status === 0 ? xdg.stdout.trim().replace(/\.desktop$/, "") || undefined : undefined;
-}
-function reportDetections(detections, preferred, log) {
-  log(`Default browser: ${preferred?.name ?? "unknown"}`);
-  detections.forEach((detection) => {
-    const name = detection.browser.name;
-    if (detection.blocked)
-      return log(`  ${name}: couldn't check (${blockedReason()})`);
-    if (detection.enabled.length)
-      return log(`  ${name}: Browse in ${detection.enabled.map(describe).join(", ")}`);
-    if (detection.disabled.length)
-      return log(`  ${name}: Browse turned off in ${detection.disabled.map(describe).join(", ")}`);
-    log(`  ${name}: no Browse`);
-  });
-}
-var describe = (match) => `${match.profile.name}${match.id === unpackedExtensionId ? " (unpacked)" : ""}`;
-var blockedReason = () => process.platform === "darwin" ? "macOS privacy protection" : "permission denied";
-function openInBrowser(browser, url, profile) {
-  const executable = launcher(browser)?.executable;
-  const web = /^https?:/.test(url);
-  if (executable) {
-    const child = spawn(executable, [...profile ? [`--profile-directory=${profile}`] : [], url], { detached: true, stdio: "ignore" });
-    child.on("error", () => web && openWithSystem(browser, url));
-    child.unref();
-    return true;
+  for (const line of restartOutdatedRelay(entry, node) ?? [])
+    log(line);
+  const legacy = selected.includes("opencode") ? legacyBrowserControl() : [];
+  if (legacy.length)
+    log(`! Browser Control MCP server${legacy.length === 1 ? "" : "s"} ${legacy.map((name) => `"${name}"`).join(", ")} also configured. Browse replaces it; remove ${legacy.length === 1 ? "it" : "them"} from ${configFile()} to avoid two sets of browser tools.`);
+  await syncDev();
+  const initial = await settledExtensionStatus(entry);
+  const connected = initial?.connected ? initial : undefined;
+  const pairedOffline = initial?.pairingState === "paired-offline";
+  const folder = unpackedFolder();
+  if (folder && !pairedOffline) {
+    pairUnpacked();
+    log("✓ Put a one-time pairing code in the unpacked extension (good for an hour)");
+    const reload = connected ? await reloadOutdatedExtension(connected, folder) : "current";
+    if (reload === "reloaded")
+      log("✓ Reloaded Browse in your browser");
+    if (reload === "stale")
+      return log(`! ${unpackedReloadAdvice}`);
   }
-  if (!web)
+  const reportMismatch = (status) => {
+    const advice = status.nextStep ?? extensionProtocolAdvice(status.protocolVersion, { install: installCommand() });
+    if (args.includes("--no-wait") && folder && status.origin === `chrome-extension://${unpackedExtensionId}` && extensionProtocolSkew(status.protocolVersion) === "extension-older")
+      return log(`! Not connected yet. ${advice}`);
+    fail(advice);
+  };
+  if (initial?.protocolCompatible === false && initial.origin)
+    return reportMismatch(initial);
+  log("");
+  const ssh = !!(process.env.SSH_CONNECTION || process.env.SSH_TTY);
+  const detections = ssh ? [] : detectBrowsers();
+  rmSync3(oldStoreMarker(), { force: true });
+  const checkStore = (scanned) => {
+    const matches = scanned.flatMap((d) => d.enabled).filter((m) => STORE_IDS.includes(m.id));
+    if (!matches.length || !matches.every(oldStoreBuild))
+      return true;
+    writeFileSync2(oldStoreMarker(), `2
+`);
+    ensureRelay(entry);
+    log(`! Found Browse ${matches[0].version} in ${matches[0].browser.name}. ${extensionProtocolAdvice(2, { install: cliCommand("install") }, "store")}`);
+    process.exitCode = 1;
     return false;
-  return openWithSystem(browser, url);
-}
-function openWithSystem(browser, url) {
-  if (process.platform === "darwin")
-    return spawnSync("open", browser?.app ? ["-a", browser.app, url] : [url]).status === 0;
-  if (windows)
-    return spawnSync("rundll32", ["url.dll,FileProtocolHandler", url]).status === 0;
-  return spawnSync("xdg-open", [url]).status === 0;
-}
-function revealFolder(folder) {
-  const run = (command, args) => {
-    const result = spawnSync(command, args, { stdio: "ignore", timeout: 1e4 });
-    return !result.error && (windows || result.status === 0);
   };
-  if (process.platform === "darwin")
-    return run("open", ["-R", folder]);
-  if (windows)
-    return run("explorer", [`/select,${folder}`]);
-  return run("xdg-open", [path2.dirname(folder)]);
-}
-function copyToClipboard(text) {
-  const tools = process.platform === "darwin" ? [["pbcopy", []]] : windows ? [["clip", []]] : [
-    ...process.env.WAYLAND_DISPLAY ? [["wl-copy", []]] : [],
-    ["xclip", ["-selection", "clipboard"]],
-    ["xsel", ["--clipboard", "--input"]]
-  ];
-  return tools.some(([command, args]) => {
-    const result = spawnSync(command, args, { input: text, stdio: ["pipe", "ignore", "ignore"], timeout: 5000 });
-    return !result.error && result.status === 0;
+  if (!connected && !checkStore(detections))
+    return;
+  const env = {
+    ssh,
+    display: process.platform !== "linux" || !!(process.env.DISPLAY || process.env.WAYLAND_DISPLAY),
+    tty,
+    platform: process.platform
+  };
+  const found = locateExtension({
+    allowOpen: !args.includes("--no-open"),
+    connected: !!connected,
+    pairedOffline,
+    ...folder ? { folder } : {},
+    detections,
+    preferred: ssh ? undefined : defaultBrowser(detections.map((detection) => detection.browser)),
+    env
   });
-}
-var systemEffects = { open: openInBrowser, openDefault: (url) => openWithSystem(undefined, url), reveal: revealFolder, copy: copyToClipboard, log };
-function launcher(browser) {
-  if (process.platform === "darwin") {
-    const bundle = [path2.join("/Applications", `${browser.app}.app`), path2.join(home, "Applications", `${browser.app}.app`)].find((dir) => existsSync(dir));
-    if (!bundle)
-      return;
-    const name = spawnSync("plutil", ["-extract", "CFBundleExecutable", "raw", "-o", "-", path2.join(bundle, "Contents", "Info.plist")], { encoding: "utf8" }).stdout?.trim();
-    const executable = name ? path2.join(bundle, "Contents", "MacOS", name) : undefined;
-    return executable && existsSync(executable) ? { executable } : {};
+  if (connected || found === "off" || pairedOffline || !folder && !STORE_URL)
+    return;
+  ensureRelay(entry);
+  let code;
+  const pairingCode = () => code && pendingPairingCodeKeys().includes(pairingCodeKey(code)) ? code : code = mintPairingCode();
+  const pairStore = (scanned) => pairStoreExtension({
+    detections: scanned,
+    preferred: defaultBrowser(scanned.map((d) => d.browser)),
+    allowOpen: !args.includes("--no-open"),
+    env,
+    code: pairingCode
+  });
+  let offer = ssh ? "none" : pairStore(detections);
+  const blocked = detections.filter((d) => d.blocked).map((d) => d.browser.name);
+  if (offer === "none" && blocked.length)
+    log(`Couldn't check ${blocked.join(", ")}. If Browse is already installed there, pair it manually. ${manualPair(pairingCode())}`);
+  const next = folder ? `If Browse is already loaded unpacked: ${unpackedReloadAdvice}` : `If Browse isn't connected after you add it, run \`${cliCommand("install")}\` again to pair it.`;
+  const agentNext = () => {
+    if (folder && offer === "none" && !blocked.length)
+      return `Agent: if Browse is already loaded unpacked, ask the user: ${unpackedReloadAdvice} Otherwise ask them to load ${folder}. Check the connection with the browse status tool.`;
+    return `Agent: ${offer === "opened" ? "ask the user to open Browse's status page in their browser" : offer === "manual" || blocked.length ? "ask the user to finish pairing in Browse's Options" : "ask the user to add Browse in their browser"}. Then re-run \`${cliCommand("install")}\` to finish, or call the browse status tool to check the connection.`;
+  };
+  if (!env.tty)
+    log(agentNext());
+  if (args.includes("--no-wait") || ssh || !env.display) {
+    if (env.tty)
+      log(next);
+    return;
+  }
+  log(`Waiting for Browse to connect (up to ${timeoutMs / 1000}s; Ctrl+C to skip)…`);
+  let stopped = false;
+  const stop = () => {
+    stopped = true;
+  };
+  process.once("SIGINT", stop);
+  try {
+    const deadline = Date.now() + timeoutMs;
+    do {
+      const status = await extensionStatus(!args.includes("--no-open") && (offer === "opened" || offer === "none" && !blocked.length));
+      if (status?.protocolCompatible === false)
+        return reportMismatch(status);
+      if (status?.connected)
+        return log(connectedMessage);
+      if (status?.pairingState === "paired-offline")
+        return log(pairedOfflineMessage);
+      if (!folder && offer === "none") {
+        const scan = detectBrowsers();
+        if (!checkStore(scan))
+          return;
+        if (scan.some((d) => d.enabled.length))
+          offer = pairStore(scan);
+      }
+      await new Promise((resolve) => setTimeout(resolve, Math.max(0, Math.min(1000, deadline - Date.now()))));
+    } while (!stopped && Date.now() < deadline);
+    if (!env.tty)
+      return log(`! Not connected yet. ${agentNext()}`);
+    log(`! Not connected yet. ${code ? manualPair(pairingCode()) : next}`);
+    process.exitCode = 1;
+  } finally {
+    process.off("SIGINT", stop);
   }
-  const executable = windows ? browser.executables.find((file) => existsSync(file)) : browser.executables.map(findOnPath).find((file) => !!file);
-  return executable ? { executable } : undefined;
-}
-function log(line) {
-  process.stdout.write(line + `
-`);
 }
-function fail(message) {
-  process.stderr.write(message + `
-`);
-  process.exit(1);
+function printSetupStatus() {
+  const settings = readJson(files.settings);
+  const runtime = installedRuntime(settings, mcpServers()[MCP_NAME]);
+  log(runtime ? `Setup:     installed${runtime.source ? " (from source)" : ""}` : `Setup:     not installed. Run \`${installCommand()}\`.`);
+  log(`Version:   ${runtime ? `${runtime.version ?? "unknown"} (${runtime.entry})` : "not installed"}`);
+  log(`opencode:  ${settings?.opencode ?? findOpencode([]) ?? "not found"}`);
+  log(mcpServers()[MCP_NAME] ? `MCP:       "${MCP_NAME}" configured` : "MCP:       not configured");
+  log(describeAutoUpdate(autoUpdateStatus({ layout })));
+  log(`Logs:      ${path6.join(files.dir, "logs")}`);
+  log("");
 }
 async function runSetup(command, args) {
   if (command === "install")
@@ -11310,7 +11416,7 @@ async function runSetup(command, args) {
   if (command === "set")
     return set(args);
   if (command === "rollback") {
-    const { runRollback } = await import("./runtime-update-8wte78jj.mjs");
+    const { runRollback } = await import("./runtime-update-pxbj49tf.mjs");
     return runRollback(args);
   }
 }