@proagentstore/cli 0.4.71 → 0.4.73

package/dist/browser-runner/server.js

@@ -7,6 +7,15 @@ import { listGithubOrgs, listGithubRepos, searchGithubRepos, getGithubRepoDetail
 export function createRunnerServer(runner) {
     return createServer(async (req, res) => {
         try {
+            // The research CLI's bridge forwarder (#944) holds a run-scoped token, not the runner's —
+            // accepted for this one path and that one run only, and still never from a browser origin.
+            if (!req.headers.origin && req.method === "POST" && (req.url || "").split("?")[0] === "/local-browser/bridge") {
+                const body = await readJson(req);
+                const token = String(req.headers["x-pags-bridge-token"] || "");
+                if (!runner.localBrowser.authorizeBridge(String(body.runId ?? ""), token))
+                    return json(res, 401, { error: "Unauthorized" });
+                return json(res, 200, await runner.localBrowser.bridge(body));
+            }
             if (!authorize(req, runner.config)) {
                 return json(res, 401, { error: "Unauthorized" });
             }
@@ -28,6 +37,7 @@ export async function startRunnerServer(config) {
     });
     const address = server.address();
     const actualPort = address.port;
+    runner.selfUrl = `http://${config.host}:${actualPort}`;
     return {
         runner,
         url: `http://${config.host}:${actualPort}`,
@@ -154,6 +164,19 @@ async function route(runner, req, res) {
     }
     // ── Brain-driven coding control (remote LLM drives a tmux coding CLI) ────
     // The tmux analogue of the /browser/* surface: start → capture → act → end.
+    // Local CLI browser research (#944). The API pulls state with /status — the runner never pushes.
+    if (req.method === "POST" && path === "/local-browser/run") {
+        return json(res, 202, runner.localBrowser.start(await readJson(req)));
+    }
+    if (req.method === "POST" && path === "/local-browser/status") {
+        return json(res, 200, runner.localBrowser.status(await readJson(req)));
+    }
+    if (req.method === "POST" && path === "/local-browser/resume") {
+        return json(res, 200, runner.localBrowser.resume(await readJson(req)));
+    }
+    if (req.method === "POST" && path === "/local-browser/cancel") {
+        return json(res, 200, runner.localBrowser.cancel(await readJson(req)));
+    }
     if (req.method === "POST" && path === "/coding/start") {
         const b = await readJson(req);
         return json(res, 200, runner.coding.start(b));

package/dist/browser-runner/task-types.js

@@ -19,4 +19,7 @@ export const WORKFLOW_DRIVEN_TASKS = new Set([
     "browser.handoff",
     // #841: local Claude/Codex authors an FWS draft; PAGS retains the audit and deployment gate.
     "site_builder_runtime",
+    // #944: local CLI browser research. Its state is the LocalBrowserRuntime's run, not a task the
+    // runner executes from its task list, so a restart must not expire a card for it.
+    "local_browser.research",
 ]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.71",
+  "version": "0.4.73",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",