@proagentstore/cli 0.4.78 → 0.4.80

package/dist/browser-runner/runner.js

@@ -16,6 +16,8 @@ import { LocalBrowserRuntime } from "./local-browser/runtime.js";
 import { LOCAL_BROWSER_TASK_TYPE } from "./local-browser/contract.js";
 import { LocalArtifactRuntime } from "./local-artifact/runtime.js";
 import { LOCAL_ARTIFACT_TASK_TYPE } from "./local-artifact/contract.js";
+import { LocalApplyRuntime } from "./local-apply/runtime.js";
+import { LOCAL_APPLY_TASK_TYPE } from "./local-apply/contract.js";
 import { WORKFLOW_DRIVEN_TASKS } from "./task-types.js";
 /** True for a plain object. */
 function isRecord(value) {
@@ -81,6 +83,8 @@ export class LocalRunner {
     localBrowser;
     /** Local artifact generation (#956): the Application Tailor's résumé + cover letter, from the owner's own files. */
     localArtifact;
+    /** Local application execution (#957): a signed-in CLI filling one application through the apply bridge. */
+    localApply;
     /** This runner's own local URL, once the server listens — the bridge forwarder calls back to it. */
     selfUrl = null;
     /** Live human-takeover sessions, keyed by task id (the page is kept alive). */
@@ -90,20 +94,18 @@ export class LocalRunner {
         mkdirSync(config.dataDir, { recursive: true });
         this.store = new RunnerStore(config.dataDir);
         this.coding = new CodingRuntime(join(config.dataDir, "repos"));
-        this.localBrowser = new LocalBrowserRuntime({
-            dataDir: config.dataDir,
-            selfUrl: () => this.selfUrl,
-            // `default` is the runner's own signed-in browser, shared and never closed by a run;
-            // `isolated` is a fresh profile inside the run's folder, removed with it.
-            browserFor: async (profile, runDir) => {
-                if (profile === "default")
-                    return { tools: await this.getMcp(), stop: async () => undefined };
-                const mcp = new McpRuntime();
-                await mcp.start({ userDataDir: join(runDir, "profile"), headless: config.headless });
-                return { tools: mcp, stop: () => mcp.stop() };
-            },
-        });
+        // `default` is the runner's own signed-in browser, shared and never closed by a run;
+        // `isolated` is a fresh profile inside the run's folder, removed with it.
+        const browserFor = async (profile, runDir) => {
+            if (profile === "default")
+                return { tools: await this.getMcp(), stop: async () => undefined };
+            const mcp = new McpRuntime();
+            await mcp.start({ userDataDir: join(runDir, "profile"), headless: config.headless });
+            return { tools: mcp, stop: () => mcp.stop() };
+        };
+        this.localBrowser = new LocalBrowserRuntime({ dataDir: config.dataDir, selfUrl: () => this.selfUrl, browserFor });
         this.localArtifact = new LocalArtifactRuntime({ dataDir: config.dataDir });
+        this.localApply = new LocalApplyRuntime({ dataDir: config.dataDir, selfUrl: () => this.selfUrl, browserFor });
         // Tasks paused/running on a previous process are orphaned now — their
         // pages and takeover sessions are gone. Fail them so the board is clean.
         const expired = this.store.expireInFlightTasks();
@@ -118,7 +120,7 @@ export class LocalRunner {
             runtimePlane: "pags",
             runnerRole: "tool-executor",
             capabilities: [...CAPABILITIES, ...CodingRuntime.capabilities()],
-            taskTypes: ["echo", "browser.open", "job.apply_agent", "site_builder_runtime", LOCAL_BROWSER_TASK_TYPE, LOCAL_ARTIFACT_TASK_TYPE, ...CodingRuntime.taskTypes()],
+            taskTypes: ["echo", "browser.open", "job.apply_agent", "site_builder_runtime", LOCAL_BROWSER_TASK_TYPE, LOCAL_ARTIFACT_TASK_TYPE, LOCAL_APPLY_TASK_TYPE, ...CodingRuntime.taskTypes()],
             approvalRequiredFor: [...APPROVAL_REQUIRED_TASKS],
         };
     }
@@ -256,6 +258,7 @@ export class LocalRunner {
     async close() {
         this.localBrowser.closeAll();
         this.localArtifact.closeAll();
+        this.localApply.closeAll();
         try {
             this.coding.closeAll();
         }

package/dist/browser-runner/server.js

@@ -12,7 +12,11 @@ export function createRunnerServer(runner) {
             if (!req.headers.origin && req.method === "POST" && (req.url || "").split("?")[0] === "/local-browser/bridge") {
                 const body = await readJson(req);
                 const token = String(req.headers["x-pags-bridge-token"] || "");
-                if (!runner.localBrowser.authorizeBridge(String(body.runId ?? ""), token))
+                const runId = String(body.runId ?? "");
+                // The same forwarder serves application runs (#957); each runtime knows only its own tokens.
+                if (runner.localApply.authorizeBridge(runId, token))
+                    return json(res, 200, await runner.localApply.bridge(body));
+                if (!runner.localBrowser.authorizeBridge(runId, token))
                     return json(res, 401, { error: "Unauthorized" });
                 return json(res, 200, await runner.localBrowser.bridge(body));
             }
@@ -187,6 +191,19 @@ async function route(runner, req, res) {
     if (req.method === "POST" && path === "/local-artifact/cancel") {
         return json(res, 200, runner.localArtifact.cancel(await readJson(req)));
     }
+    // Local application execution (#957) — run, status, resume, cancel; PULL like research.
+    if (req.method === "POST" && path === "/local-apply/run") {
+        return json(res, 202, runner.localApply.start(await readJson(req)));
+    }
+    if (req.method === "POST" && path === "/local-apply/status") {
+        return json(res, 200, runner.localApply.status(await readJson(req)));
+    }
+    if (req.method === "POST" && path === "/local-apply/resume") {
+        return json(res, 200, runner.localApply.resume(await readJson(req)));
+    }
+    if (req.method === "POST" && path === "/local-apply/cancel") {
+        return json(res, 200, runner.localApply.cancel(await readJson(req)));
+    }
     if (req.method === "POST" && path === "/coding/start") {
         const b = await readJson(req);
         return json(res, 200, runner.coding.start(b));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.78",
+  "version": "0.4.80",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",