@opencode/browse 0.0.6-dev.25 → 0.0.6-dev.28

package/dist/{runtime-update-ypj67htb.mjs → runtime-update-3925nwpw.mjs}

@@ -1,4 +1,4 @@
-import"./main-sdmv8gfv.mjs";
+import"./main-4t3a1fw9.mjs";
 import {
   cliCommand,
   installCommand,
@@ -17,15 +17,15 @@ import {
   installVersion,
   pruneVersions,
   switchVersion
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 import"./main-3gthmkzw.mjs";
 import {
   Service,
   layerFetch,
   restartRelay,
   startManagedRelay
-} from "./main-7pxrvrp0.mjs";
-import"./main-tf22ynec.mjs";
+} from "./main-8h1nwn45.mjs";
+import"./main-x8w3s3rv.mjs";
 
 // src/update/runtime-update.ts
 import { Effect } from "effect";

package/dist/{setup-wwftne2g.mjs → setup-ys0qf6by.mjs}

@@ -1,6 +1,6 @@
 import {
   opencodeBrowserVersion2
-} from "./main-sdmv8gfv.mjs";
+} from "./main-4t3a1fw9.mjs";
 import {
   dataRoot,
   oldStoreMarker,
@@ -9,6 +9,7 @@ import {
   entryCommand,
   runningEntry,
   cliCommand,
+  PUBLIC_STORE_ID,
   storeConfig,
   devExtension,
   devExtensionFolder,
@@ -24,10 +25,10 @@ import {
   installVersion,
   pruneVersions,
   switchVersion
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 import {
   relayAuthorization
-} from "./main-tf22ynec.mjs";
+} from "./main-x8w3s3rv.mjs";
 import {
   parseHostname,
   readRelayConfig,
@@ -44,10 +45,9 @@ import {
   legacyPairingCode,
   removeLegacyPairingCode,
   syncDevExtension
-} from "./main-e83a20ce.mjs";
+} from "./main-xg3r1ze3.mjs";
 import {
   unpackedExtensionId,
-  unpackedReloadAdvice,
   extensionProtocolSkew,
   extensionProtocolAdvice
 } from "./main-3gthmkzw.mjs";
@@ -10803,9 +10803,9 @@ import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import path2 from "node:path";
 import { fileURLToPath } from "node:url";
-var store = storeConfig();
-var STORE_IDS = [store.id].filter((id) => !!id);
-var STORE_URL = store.id ? storeUrl(store.id) : undefined;
+var storeId = storeConfig().id ?? PUBLIC_STORE_ID;
+var STORE_IDS = [storeId];
+var STORE_URL = storeUrl(storeId);
 var PACKAGE = "@opencode/browse";
 var MCP_NAME = "browse";
 var LEGACY_MCP_NAME = "opencode-browser";
@@ -10841,7 +10841,7 @@ var checkoutExtensionDirs = (() => {
 })();
 var dev = fromSource ? undefined : devExtension();
 var unpackedFolder = () => checkoutExtensionDirs[1] ?? (dev ? devExtensionFolder(root) : undefined);
-var connectedMessage = "✓ Connected to your browser. Restart your agent, then ask it to open a page.";
+var connectedMessage = "✓ Connected to your browser. Ask your agent to open a page.";
 var pairedOfflineMessage = "! Not connected yet. Open the browser profile already paired with browse and make sure the extension is enabled. It reconnects automatically.";
 var manualPair = (code) => `Open the Extensions menu → browse → Options, enter ${formatPairingCode(code)} as the pairing code, then click Pair.`;
 function flag(args, name) {
@@ -11008,10 +11008,6 @@ function browsers() {
     browser("Helium", configRoot, "net.imput.helium", ["helium", "helium-browser"])
   ];
 }
-function extensionsPage(browser) {
-  const scheme = { "Microsoft Edge": "edge", Brave: "brave", Vivaldi: "vivaldi", Opera: "opera" }[browser.name];
-  return `${scheme ?? "chrome"}://extensions`;
-}
 function detectBrowsers() {
   return browsers().flatMap((browser) => {
     const state = readLocked(path3.join(browser.userData, "Local State"));
@@ -11298,24 +11294,11 @@ ${block}`, `
 function locateExtension(options, effects = systemEffects) {
   const { log } = effects;
   const listing = options.storeUrl ?? STORE_URL;
-  const noListing = () => log(`! This package doesn't know its Chrome Web Store item, so it can't install the extension. Install a released version (\`npx @opencode/browse install\`), or set up browse from a checkout.`);
-  const pairLater = () => log(`  Once it's added, run \`${cliCommand("install")}\` again to pair it with the relay.`);
   if (options.pairedOffline)
     return log(pairedOfflineMessage), "ready";
-  if (options.env.ssh) {
-    if (options.connected)
-      return log(connectedMessage), "ready";
-    if (options.folder)
-      unpackedSteps({ folder: options.folder, platform: options.env.platform, log });
-    else if (listing)
-      log(`Install browse in your browser from the Chrome Web Store: ${listing}`), pairLater();
-    else
-      noListing();
-    return "guided";
-  }
   if (options.connected)
     return log(connectedMessage), "ready";
-  if (options.detections.some((detection) => detection.enabled.length))
+  if (!options.env.ssh && options.detections.some((detection) => detection.enabled.length))
     return "ready";
   const off = options.detections.flatMap((detection) => detection.disabled);
   if (off.length) {
@@ -11326,26 +11309,9 @@ function locateExtension(options, effects = systemEffects) {
   if (blocked.length)
     log(`! Couldn't check ${blocked.join(", ")} for browse (${blockedReason()})`);
   const target = options.preferred ?? options.detections.find((detection) => !detection.blocked)?.browser;
-  const interactive = options.allowOpen && options.env.display;
-  if (!options.folder) {
-    if (!listing)
-      return noListing(), "guided";
-    const opened = interactive && !blocked.length && (target ? effects.open(target, listing) : effects.openDefault?.(listing));
-    log(`Add browse to ${target?.name ?? "your browser"} from the Chrome Web Store${opened ? " (opened)" : ""}: ${listing}`);
-    return "guided";
-  }
-  const act = interactive && !blocked.length;
-  const page = target ? extensionsPage(target) : "chrome://extensions";
-  unpackedSteps({
-    folder: options.folder,
-    platform: options.env.platform,
-    log,
-    browser: target?.name,
-    page,
-    opened: act && target !== undefined && effects.open(target, page),
-    revealed: act && options.env.tty && effects.reveal(options.folder),
-    copied: act && options.env.tty && effects.copy(options.folder)
-  });
+  const interactive = options.allowOpen && options.env.display && !options.env.ssh;
+  const opened = interactive && !blocked.length && (target ? effects.open(target, listing) : effects.openDefault?.(listing));
+  log(`Add browse to ${target?.name ?? "your browser"} from the Chrome Web Store${opened ? " (opened)" : ""}: ${listing}`);
   return "guided";
 }
 function pairStoreExtension(options, effects = systemEffects) {
@@ -11362,13 +11328,6 @@ function pairStoreExtension(options, effects = systemEffects) {
   effects.log(`To connect browse in ${match.browser.name}: ${manualPair(options.code())}`);
   return "manual";
 }
-function unpackedSteps(step) {
-  const { log } = step;
-  const page = step.page ?? "chrome://extensions";
-  const fileManager = step.platform === "darwin" ? "Finder" : step.platform === "win32" ? "Explorer" : "your file manager";
-  const paste = step.platform === "darwin" ? "press Cmd+Shift+G in the folder picker and paste" : "paste it into the folder picker";
-  log(`Load browse in ${step.browser ?? "your browser"}: open ${page}${step.opened ? " (opened)" : ""}, turn on Developer mode, click Load unpacked and choose ${step.folder}${step.copied ? ` (path copied: ${paste})` : step.revealed ? ` (shown in ${fileManager})` : ""}`);
-}
 async function waitForExtension(options) {
   const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
   for (let waited = 0;; waited += options.intervalMs) {
@@ -11599,8 +11558,7 @@ async function syncDev() {
   if (!dev)
     return;
   try {
-    const result = await syncDevExtension(dev, { root });
-    log2(result === "updated" ? `✓ Downloaded the dev extension (${dev.file}) to ${devExtensionFolder(root)}` : `✓ Dev extension ${dev.file} is in ${devExtensionFolder(root)}`);
+    await syncDevExtension(dev, { root });
   } catch (error) {
     fail(`Could not get the dev extension: ${error.message}`);
   }
@@ -11873,7 +11831,7 @@ async function install(args) {
   if (!rail.active)
     return;
   rail.waiting?.stop();
-  outro(process.exitCode ? "browse isn't fully set up yet. Fix the steps above, then run browse install again." : byHand ? "Done. Add the MCP server above to your agent, restart it, then ask it to open a page." : "Done. Restart your agents, then ask one to open a page.");
+  outro(process.exitCode ? "browse isn't fully set up yet. Fix the steps above, then run browse install again." : byHand ? "Done. Add the MCP server above to your agent, then ask it to open a page." : "Done. Ask your agent to open a page.");
 }
 var byHand = false;
 function showManualMcp(command, caller) {
@@ -11992,8 +11950,6 @@ async function installSteps(args, tty, caller) {
     const reload = connected ? await reloadOutdatedExtension(connected, folder) : "current";
     if (reload === "reloaded")
       log2("✓ Reloaded browse in your browser");
-    if (reload === "stale")
-      return log2(`! ${unpackedReloadAdvice}`);
   }
   const reportMismatch = (status) => {
     const advice = status.nextStep ?? extensionProtocolAdvice(status.protocolVersion, { install: installCommand() });
@@ -12030,12 +11986,11 @@ async function installSteps(args, tty, caller) {
     allowOpen: !args.includes("--no-open"),
     connected: !!connected,
     pairedOffline,
-    ...folder ? { folder } : {},
     detections,
     preferred: ssh ? undefined : defaultBrowser(detections.map((detection) => detection.browser)),
     env
   });
-  if (connected || found === "off" || pairedOffline || !folder && !STORE_URL)
+  if (connected || found === "off" || pairedOffline)
     return;
   ensureRelay(entry);
   let code;
@@ -12051,11 +12006,9 @@ async function installSteps(args, tty, caller) {
   const blocked = detections.filter((d) => d.blocked).map((d) => d.browser.name);
   if (offer === "none" && blocked.length)
     log2(`Couldn't check ${blocked.join(", ")}. If browse is already installed there, pair it manually. ${manualPair(pairingCode())}`);
-  const next = folder ? `If browse is already loaded unpacked: ${unpackedReloadAdvice}` : `If browse isn't connected after you add it, run \`${cliCommand("install")}\` again to pair it.`;
+  const next = `If browse isn't connected after you add it, run \`${cliCommand("install")}\` again to pair it.`;
   const agentNext = () => {
-    if (folder && offer === "none" && !blocked.length)
-      return `Agent: if browse is already loaded unpacked, ask the user: ${unpackedReloadAdvice} Otherwise ask them to load ${folder}. Check the connection with the browse status tool.`;
-    return `Agent: ${offer === "opened" ? "ask the user to open browse's status page in their browser" : offer === "manual" || blocked.length ? "ask the user to finish pairing in browse's Options" : "ask the user to add browse in their browser"}. Then re-run \`${cliCommand("install")}\` to finish, or call the browse status tool to check the connection.`;
+    return `Agent: ${offer === "opened" ? "ask the user to open browse's status page in their browser" : offer === "manual" || blocked.length ? "ask the user to finish pairing in browse's Options" : "ask the user to add browse from the Chrome Web Store"}. Then re-run \`${cliCommand("install")}\` to finish, or call the browse status tool to check the connection.`;
   };
   if (!env.tty)
     log2(agentNext());
@@ -12088,7 +12041,7 @@ async function installSteps(args, tty, caller) {
         return log2(connectedMessage);
       if (status?.pairingState === "paired-offline")
         return log2(pairedOfflineMessage);
-      if (!folder && offer === "none") {
+      if (offer === "none") {
         const scan = detectBrowsers();
         if (!checkStore(scan))
           return;
@@ -12128,7 +12081,7 @@ async function runSetup(command, args) {
   if (command === "set")
     return set(args);
   if (command === "rollback") {
-    const { runRollback } = await import("./runtime-update-ypj67htb.mjs");
+    const { runRollback } = await import("./runtime-update-3925nwpw.mjs");
     return runRollback(args);
   }
 }

package/dist/{skill-text-v35020jn.mjs → skill-text-rc6te209.mjs}

@@ -581,81 +581,6 @@ secret in a session without an allowlist adds a loud warning: set one first.
 Once typed, the value is in the page, so don't read it back or copy it
 elsewhere.
 
-### Signing in with Deadbolt
-
-When the user connected browse to Deadbolt (\`opencode-browser deadbolt
-connect\`), you can sign in with the logins they granted to agents, without
-seeing any value. \`secrets_list\` shows them for the session's allowed sites:
-title, username, \`granted\`, which \`fields\` (username, password, totp) and
-whether \`passkeys\` are allowed, plus the site's passkey accounts (\`username\`,
-\`displayName\`). Only the user grants, in Deadbolt: \`deadbolt agents allow
-<site>\` (everything for that site's logins: username, password, one-time code
-and passkeys, unless narrowed with \`--login\`, \`--fields\`, \`--no-passkeys\`,
-\`--expires\`) or
-\`deadbolt agents allow --all\` (every login).
-Never try to grant, pair or unlock yourself; Deadbolt refuses AI callers.
-
-Prefer the whole sign-in in one call (the \`signin\` tool, or in execute):
-
-\`\`\`js
-await page.goto("https://github.com/login")
-const result = await secrets.signIn()            // or { site: "github.com", username: "me@example.com" }
-// { status: "signed_in" | "needs_user" | "not_granted" | "failed", step, reason }
-\`\`\`
-
-It fills the username, submits, waits, fills the password, types an
-authenticator (TOTP) code when the site asks for one (single field or split
-boxes), follows "Use password instead", and follows Sign in with Google when
-Deadbolt grants a Google login, all inside the relay. Then:
-
-- \`signed_in\`: carry on.
-- \`needs_user\`: a captcha, a code sent by SMS or email, a push approval, a
-  new-device or "verify it's you" check, or Deadbolt is locked. Call
-  \`handoff("Finish signing in, then click Continue")\` so the user does it.
-  Don't retry in a loop.
-- \`needs_choice\`: several passkeys can sign in; \`choices\` lists their
-  \`username\` / \`displayName\`. Ask the user which one if it isn't obvious, then
-  call again with \`{ username }\`.
-- \`not_granted\`: tell the user what to allow (the reason names the site and
-  login).
-- \`failed\`: the reason says why (no form found, wrong password, the page didn't
-  move on). Don't loop.
-
-It doesn't handle security questions, image or canvas keypads, closed shadow
-roots, or sign-in providers other than Google; those return \`needs_user\` or
-\`failed\`. When it stops after a fill it empties the password and code fields
-first. For a form it misreads, type one value at a time: a username on its
-own, a password or code only with \`{ submit: true }\`, which types it, submits
-the form, waits for the page to move on and empties password and code fields
-in that frame, all in the same call:
-
-\`\`\`js
-await secrets.type("#login", "deadbolt:github.com/me@example.com", { field: "username" })
-await secrets.type("#password", "deadbolt:github.com/me@example.com", { submit: true })   // field defaults to "password"
-\`\`\`
-
-The same origin checks as stored secrets apply (the field's frame must be on
-the login's site and in the session allowlist; Deadbolt checks again), and
-values never appear in what you get back. Errors start with the code:
-\`submit_required\`, \`domain_not_allowed\`, \`not_granted\`, \`locked\`, \`forbidden\`
-(the user must reconnect), \`rate_limited\`, \`page_hooks\`. \`page_hooks\` means
-this session's code set up request interception or listeners
-(\`page.route\`, \`page.on("request")\`, \`waitForRequest\`...), init scripts,
-exposed functions or a CDP session: Deadbolt passwords and codes aren't typed
-then. Sign in first, in a fresh session (\`session_reset\`), and set those up
-afterwards. Never try to read or capture a value that was typed: the user
-grants logins on the understanding that you don't. Set a session allowlist
-before signing in.
-
-Passkeys: in tabs you opened, a site's passkey sign-in
-(\`navigator.credentials.get\`) is answered by Deadbolt when the grant allows
-passkeys. \`signIn({ username })\` picks that account's passkey; to choose one
-before your own click on a "Sign in with a passkey" button, call
-\`await secrets.usePasskey({ site: "example.com", username: "me@example.com" })\`
-(it applies to the tab's next passkey request, once). Deadbolt never verifies the user, so sites that require that fall back to
-other methods. Otherwise the request fails with NotAllowedError, as if the user
-dismissed it. WebAuthn CDP methods are blocked.
-
 For destructive UI work, use a two-phase **read, confirm, verify** flow:
 
 1. Read candidates and return exact stable identifiers or row text.
@@ -900,8 +825,7 @@ with the command it names. If the user asks you to update browse, run that
 command yourself (\`node <browse>/cli/dist/cli.mjs update\`): it fast-forwards the
 git clone and reruns setup, and refuses with the fix when the clone has local
 changes or has diverged. Pass its refusal on rather than resolving git state
-yourself. The update takes effect after the user restarts opencode, so finish
-browser work first and tell them to restart.
+yourself. Finish in-flight browser work before you run it.
 
 ## Troubleshooting
 
@@ -922,7 +846,7 @@ Common diagnoses:
   \`unpaired\` or \`refused\` means browse is installed: re-run install to pair it, **not** the store.
   \`paired-offline\`: reopen the paired browser profile and enable browse; its worker wakes every 30 seconds.
   \`not-seen\`: the relay hasn't heard from a browser. If browse is already added, open that browser and
-  rerun install. Otherwise follow install's store or Load unpacked steps.
+  rerun install. Otherwise follow install's store step.
 - Incompatible extension protocol: follow \`extension.nextStep\`. For an older unpacked extension after setup,
   ask the user: “Reload browse on your browser's extensions page (↻).” Running setup again does not reload older workers.
 - Competing browser/profile connections: the active browser is preserved and

package/dist/{supervisor-sdq88esk.mjs → supervisor-yb615ygt.mjs}

@@ -1,9 +1,9 @@
-import"./main-sdmv8gfv.mjs";
+import"./main-4t3a1fw9.mjs";
 import {
   versionEntry,
   readCurrent,
   npmRuntime
-} from "./main-hh2mneh8.mjs";
+} from "./main-8ncff5jp.mjs";
 
 // src/mcp/supervisor.ts
 import { spawn } from "node:child_process";
@@ -14,7 +14,7 @@ async function runBinaryMcp(args) {
   const runtime = npmRuntime();
   if (!runtime) {
     process.env[directEnvironmentVariable] = "1";
-    const { runCli } = await import("./cli-df3reayk.mjs");
+    const { runCli } = await import("./cli-wgxfjgb3.mjs");
     return runCli();
   }
   const { layout } = runtime;

package/dist/{update-fgnt6628.mjs → update-wjkqfk5f.mjs}

@@ -4,9 +4,9 @@ import {
   updateNotice2,
   createUpdateWatcher2,
   runUpdateCommand2
-} from "./main-spqvtmdy.mjs";
-import"./main-hh2mneh8.mjs";
-import"./main-sdmv8gfv.mjs";
+} from "./main-scyv26xb.mjs";
+import"./main-8ncff5jp.mjs";
+import"./main-4t3a1fw9.mjs";
 import"./main-3gthmkzw.mjs";
 export {
   createUpdateWatcher2 as createUpdateWatcher,

package/dist/{version-gv6f38gy.mjs → version-rh26jqa2.mjs}

@@ -1,7 +1,7 @@
 import {
   opencodeBrowserVersion2,
   opencodeBrowserBuildId2
-} from "./main-sdmv8gfv.mjs";
+} from "./main-4t3a1fw9.mjs";
 export {
   opencodeBrowserBuildId2 as opencodeBrowserBuildId,
   opencodeBrowserVersion2 as opencodeBrowserVersion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencode/browse",
-  "version": "0.0.6-dev.25",
+  "version": "0.0.6-dev.28",
   "description": "browse: connect the extension to opencode, and drive your browser from any agent (CLI, MCP, Playwright).",
   "type": "module",
   "license": "MIT",

package/skills/browse/SKILL.md

@@ -580,81 +580,6 @@ secret in a session without an allowlist adds a loud warning: set one first.
 Once typed, the value is in the page, so don't read it back or copy it
 elsewhere.
 
-### Signing in with Deadbolt
-
-When the user connected browse to Deadbolt (`opencode-browser deadbolt
-connect`), you can sign in with the logins they granted to agents, without
-seeing any value. `secrets_list` shows them for the session's allowed sites:
-title, username, `granted`, which `fields` (username, password, totp) and
-whether `passkeys` are allowed, plus the site's passkey accounts (`username`,
-`displayName`). Only the user grants, in Deadbolt: `deadbolt agents allow
-<site>` (everything for that site's logins: username, password, one-time code
-and passkeys, unless narrowed with `--login`, `--fields`, `--no-passkeys`,
-`--expires`) or
-`deadbolt agents allow --all` (every login).
-Never try to grant, pair or unlock yourself; Deadbolt refuses AI callers.
-
-Prefer the whole sign-in in one call (the `signin` tool, or in execute):
-
-```js
-await page.goto("https://github.com/login")
-const result = await secrets.signIn()            // or { site: "github.com", username: "me@example.com" }
-// { status: "signed_in" | "needs_user" | "not_granted" | "failed", step, reason }
-```
-
-It fills the username, submits, waits, fills the password, types an
-authenticator (TOTP) code when the site asks for one (single field or split
-boxes), follows "Use password instead", and follows Sign in with Google when
-Deadbolt grants a Google login, all inside the relay. Then:
-
-- `signed_in`: carry on.
-- `needs_user`: a captcha, a code sent by SMS or email, a push approval, a
-  new-device or "verify it's you" check, or Deadbolt is locked. Call
-  `handoff("Finish signing in, then click Continue")` so the user does it.
-  Don't retry in a loop.
-- `needs_choice`: several passkeys can sign in; `choices` lists their
-  `username` / `displayName`. Ask the user which one if it isn't obvious, then
-  call again with `{ username }`.
-- `not_granted`: tell the user what to allow (the reason names the site and
-  login).
-- `failed`: the reason says why (no form found, wrong password, the page didn't
-  move on). Don't loop.
-
-It doesn't handle security questions, image or canvas keypads, closed shadow
-roots, or sign-in providers other than Google; those return `needs_user` or
-`failed`. When it stops after a fill it empties the password and code fields
-first. For a form it misreads, type one value at a time: a username on its
-own, a password or code only with `{ submit: true }`, which types it, submits
-the form, waits for the page to move on and empties password and code fields
-in that frame, all in the same call:
-
-```js
-await secrets.type("#login", "deadbolt:github.com/me@example.com", { field: "username" })
-await secrets.type("#password", "deadbolt:github.com/me@example.com", { submit: true })   // field defaults to "password"
-```
-
-The same origin checks as stored secrets apply (the field's frame must be on
-the login's site and in the session allowlist; Deadbolt checks again), and
-values never appear in what you get back. Errors start with the code:
-`submit_required`, `domain_not_allowed`, `not_granted`, `locked`, `forbidden`
-(the user must reconnect), `rate_limited`, `page_hooks`. `page_hooks` means
-this session's code set up request interception or listeners
-(`page.route`, `page.on("request")`, `waitForRequest`...), init scripts,
-exposed functions or a CDP session: Deadbolt passwords and codes aren't typed
-then. Sign in first, in a fresh session (`session_reset`), and set those up
-afterwards. Never try to read or capture a value that was typed: the user
-grants logins on the understanding that you don't. Set a session allowlist
-before signing in.
-
-Passkeys: in tabs you opened, a site's passkey sign-in
-(`navigator.credentials.get`) is answered by Deadbolt when the grant allows
-passkeys. `signIn({ username })` picks that account's passkey; to choose one
-before your own click on a "Sign in with a passkey" button, call
-`await secrets.usePasskey({ site: "example.com", username: "me@example.com" })`
-(it applies to the tab's next passkey request, once). Deadbolt never verifies the user, so sites that require that fall back to
-other methods. Otherwise the request fails with NotAllowedError, as if the user
-dismissed it. WebAuthn CDP methods are blocked.
-
 For destructive UI work, use a two-phase **read, confirm, verify** flow:
 
 1. Read candidates and return exact stable identifiers or row text.
@@ -899,8 +824,7 @@ with the command it names. If the user asks you to update browse, run that
 command yourself (`node <browse>/cli/dist/cli.mjs update`): it fast-forwards the
 git clone and reruns setup, and refuses with the fix when the clone has local
 changes or has diverged. Pass its refusal on rather than resolving git state
-yourself. The update takes effect after the user restarts opencode, so finish
-browser work first and tell them to restart.
+yourself. Finish in-flight browser work before you run it.
 
 ## Troubleshooting
 
@@ -921,7 +845,7 @@ Common diagnoses:
   `unpaired` or `refused` means browse is installed: re-run install to pair it, **not** the store.
   `paired-offline`: reopen the paired browser profile and enable browse; its worker wakes every 30 seconds.
   `not-seen`: the relay hasn't heard from a browser. If browse is already added, open that browser and
-  rerun install. Otherwise follow install's store or Load unpacked steps.
+  rerun install. Otherwise follow install's store step.
 - Incompatible extension protocol: follow `extension.nextStep`. For an older unpacked extension after setup,
   ask the user: “Reload browse on your browser's extensions page (↻).” Running setup again does not reload older workers.
 - Competing browser/profile connections: the active browser is preserved and

package/dist/main-sdmv8gfv.mjs

@@ -1,4 +0,0 @@
-// src/version.ts
-var opencodeBrowserVersion2 = "0.0.6-dev.25";
-var opencodeBrowserBuildId2 = "2026-11-04T19:22:13.572Z";
-export { opencodeBrowserVersion2, opencodeBrowserBuildId2 };