@rtrvr-ai/rover 4.0.0 → 4.1.0

package/README.md

@@ -20,7 +20,7 @@ Before you test Rover on arbitrary websites, get your site config from Workspace
 Add this snippet before `</body>` on any page:
 
 ```html
-<script type="application/agent+json">{"task":"https://agent.rtrvr.ai/v1/tasks"}</script>
+<script type="application/agent+json">{"a2w":"https://agent.rtrvr.ai/v1/a2w/runs","run":"https://agent.rtrvr.ai/v1/a2w/runs"}</script>
 <script>
   (function(){
     var r = window.rover = window.rover || function(){
@@ -39,12 +39,14 @@ Add this snippet before `</body>` on any page:
 <script src="https://rover.rtrvr.ai/embed.js" async></script>
 ```
 
-If RoverBook is enabled for the site in Rover Workspace, the generated install snippet also includes `https://rover.rtrvr.ai/roverbook.js` plus an inline attach block that calls `window.RoverBook.enableRoverBook(window.rover, ...)`. Copy the Workspace snippet as-is for production installs.
+If Agent analytics is enabled for the site in Rover Workspace, the generated install snippet also includes `https://rover.rtrvr.ai/roverbook.js` plus an inline attach block that calls `window.RoverBook.enableRoverBook(window.rover, ...)`. Copy the Workspace snippet as-is for production installs.
 
 Workspace also controls site mode:
 
-- `Full Rover agent`: action-capable Rover runtime
-- `RoverBook analytics-only`: embed-oriented RoverBook deployment with action tools disabled
+- `Rover Agent`: action-capable Rover runtime plus Agent analytics
+- `Agent Analytics`: embed-oriented analytics deployment with action tools disabled
+
+Workspace onboarding now also gives site owners a dedicated Journeys step for shortcuts, defaults new production site keys to `No expiry`, and exposes `Cloud sandboxes` as the single owner-facing switch for cloud execution plus approved third-party browsing.
 
 Get `siteId`, `publicKey` (`pk_site_*`), and optional `siteKeyId` from Rover Workspace:
 
@@ -100,7 +102,7 @@ Use `createRoverConsoleSnippet(...)` and `createRoverBookmarklet(...)` to genera
 Before you use any of these helpers on another website:
 
 1. Open Rover Workspace.
-2. Create or rotate a site key so Workspace reveals the full `pk_site_*` value.
+2. Create a site key. Workspace keeps the full owner-readable `pk_site_*` install material available whenever you reopen Install or Scripts by fetching the canonical owner install material from the backend control plane.
 3. Copy the **test config JSON** from Workspace.
 4. Either paste that JSON into the Rover website's "Try on Other Sites" tool, or pass the same values into the SDK helpers below.
 
@@ -187,6 +189,12 @@ const bundle = createRoverOwnerInstallBundle({
     siteKeyId: 'key_123',
     allowedDomains: ['example.com'],
     domainScopeMode: 'registrable_domain',
+    cloudSandboxEnabled: true,
+    ui: {
+      shortcuts: [
+        { id: 'book_demo', label: 'Book demo', prompt: 'Help me book a demo.' },
+      ],
+    },
   },
   discovery: {
     siteId: 'site_123',
@@ -414,8 +422,6 @@ const RoverWidget = dynamic(() => import('./RoverWidget'), { ssr: false });
 | `apiBase` | `string` | `https://agent.rtrvr.ai` | Optional API base override. Rover uses `/v2/rover/*` under this base. |
 | `allowedDomains` | `string[]` | `[]` | Hostnames or patterns where Rover may operate. In `registrable_domain`, plain `example.com` covers the apex host and subdomains. |
 | `domainScopeMode` | `'registrable_domain' \| 'host_only'` | `'registrable_domain'` | How Rover interprets plain `allowedDomains` entries: `registrable_domain` = apex + subdomains, `host_only` = exact host only unless you explicitly allow more hosts. |
-| `externalNavigationPolicy` | `'open_new_tab_notice' \| 'block' \| 'allow'` | `'open_new_tab_notice'` | External navigation policy |
-| `navigation.crossHostPolicy` | `'same_tab' \| 'open_new_tab'` | `'same_tab'` | In-scope cross-host navigation policy |
 | `mode` | `'full' \| 'safe'` | `'full'` | Runtime mode |
 | `allowActions` | `boolean` | `true` | Enable or disable action tools |
 | `openOnInit` | `boolean` | `false` | Open panel immediately on boot |
@@ -499,15 +505,17 @@ const RoverWidget = dynamic(() => import('./RoverWidget'), { ssr: false });
 | Option | Type | Default | Description |
 |---|---|---|---|
 | `ui.agent.name` | `string` | `'Rover'` | Custom assistant name |
-| `ui.mascot.disabled` | `boolean` | `false` | Disable mascot video |
-| `ui.mascot.mp4Url` | `string` | default | Custom mascot MP4 URL |
-| `ui.mascot.webmUrl` | `string` | default | Custom mascot WebM URL |
-| `ui.mascot.soundEnabled` | `boolean` | `false` | Owner gate for mascot sound. Rover keeps mascot audio unavailable unless this is explicitly `true`. |
+| `ui.mascot.disabled` | `boolean` | `false` | Hide mascot media entirely |
+| `ui.mascot.imageUrl` | `string` | default | Custom mascot image URL. Works by itself or as the fallback/poster for custom video mascots |
+| `ui.mascot.mp4Url` | `string` | default | Custom mascot MP4 URL. Video is preferred when MP4 or WebM is provided |
+| `ui.mascot.webmUrl` | `string` | default | Custom mascot WebM URL. Video is preferred when MP4 or WebM is provided |
+| `ui.mascot.soundEnabled` | `boolean` | `false` | Owner gate for mascot sound. Video mascots stay silent unless this is explicitly `true`; image-only mascots remain silent |
 | `ui.muted` | `boolean` | `true` | Initial mute state only when mascot sound is enabled. Visitor preference is stored per Rover site after they toggle sound. |
 | `ui.thoughtStyle` | `'concise_cards' \| 'minimal'` | `'concise_cards'` | Thought rendering style |
 | `ui.panel.resizable` | `boolean` | `true` | Enables desktop freeform resizing plus phone/tablet snap-height resizing with per-device memory |
 | `ui.showTaskControls` | `boolean` | `true` | Show new/end task controls |
 | `ui.shortcuts` | `RoverShortcut[]` | `[]` | Suggested journeys (max 100 stored, max 12 rendered by default; lower site-key policy caps are enforced). Shortcuts can also publish agent-facing metadata such as `tags`, `examples`, `inputSchema`, `outputSchema`, `sideEffect`, and `requiresConfirmation`. |
+| `cloudSandboxEnabled` | `boolean` | `false` | Owner-facing shorthand for cloud execution plus approved third-party browsing. When `true`, Rover materializes `tools.web.enableExternalWebContext=true` and `tools.web.scrapeMode='on_demand'`. |
 | `ui.greeting` | `{ text?, delay?, duration?, disabled? }` | — | Greeting bubble config (`{name}` token supported) |
 | `ui.voice` | `{ enabled?: boolean; language?: string; autoStopMs?: number }` | — | Browser dictation for supported Chromium browsers. Rover fills the draft live, waits for post-speech silence before stopping, and the user still sends manually. |
 
@@ -549,33 +557,33 @@ https://example.com?rover_shortcut=checkout_flow
 
 For AI or CLI-triggered entrypoints, prefer exact shortcut IDs for repeatable flows.
 
-When a site key or session token is used, Rover fetches cloud site config via `/v2/rover/session/open` (shortcuts + `businessType` + sparse `experience` overrides + legacy voice compatibility + `aiAccess` + `pageConfig`).
+When a site key or session token is used, Rover fetches cloud site config via `/v2/rover/session/open` (shortcuts + `businessType` + sparse `experience` overrides + voice compatibility + `aiAccess` + `pageConfig`).
 If the same field exists in both cloud config and boot config, boot config wins.
 `siteConfig.aiAccess.enabled` is the canonical owner-facing launch switch persisted from Workspace/Webflow. `deepLink` stays boot/runtime only for advanced manual overrides such as custom param names, explicit enable/disable, or disabling URL param consumption.
 
-If you enable `tools.web.scrapeMode: 'on_demand'`, use a site key capability profile that includes cloud scrape support.
+For owner-facing installs, prefer `cloudSandboxEnabled: true` instead of hand-wiring low-level scrape/browser flags. Rover materializes the current runtime fields from that shorthand for you.
 
 See [full configuration reference](https://github.com/rtrvr-ai/rover/blob/main/docs/INTEGRATION.md#configuration-reference).
 
-## Public Agent Tasks (ATP)
+## Agent-to-Web Protocol (A2W)
 
 Rover-enabled sites expose two public entrypoints:
 
 - browser-first convenience via `?rover=` and `?rover_shortcut=`
-- machine-first task resources via `POST https://agent.rtrvr.ai/v1/tasks`
+- machine-first A2W runs via `POST https://agent.rtrvr.ai/v1/a2w/runs`
 
-Use `/v1/tasks` when you need structured progress, continuation, or the final result back.
+Use `/v1/a2w/runs` when you need structured progress, continuation, or the final result back.
 
 The source-visible marker is optional but recommended:
 
 ```html
-<script type="application/agent+json">{"task":"https://agent.rtrvr.ai/v1/tasks"}</script>
+<script type="application/agent+json">{"a2w":"https://agent.rtrvr.ai/v1/a2w/runs","run":"https://agent.rtrvr.ai/v1/a2w/runs"}</script>
 ```
 
 For stronger pre-task discovery, publish `/.well-known/rover-site.json` as Rover's authoritative rich profile, publish `/.well-known/agent-card.json` as the interop card, add a `Link: </.well-known/agent-card.json>; rel="service-desc"` header, and include inline discovery tags generated by `createRoverAgentDiscoveryTags(...)`.
 
 ```http
-POST https://agent.rtrvr.ai/v1/tasks
+POST https://agent.rtrvr.ai/v1/a2w/runs
 Content-Type: application/json
 
 {
@@ -586,12 +594,12 @@ Content-Type: application/json
 }
 ```
 
-Compatibility aliases such as `{ "url": "...", "prompt": "..." }` and `{ "url": "...", "shortcutId": "..." }` still work, but the richer task envelope is the canonical contract.
+Use the explicit A2W run envelope with `goal` for natural-language instructions and `shortcut` for saved journeys.
 
 Callers may also provide structured visiting-agent metadata:
 
 ```http
-POST https://agent.rtrvr.ai/v1/tasks
+POST https://agent.rtrvr.ai/v1/a2w/runs
 Content-Type: application/json
 
 {
@@ -610,34 +618,34 @@ Content-Type: application/json
 
 Anonymous AI callers do **not** need `siteId`, `publicKey`, or `siteKeyId`.
 
-The returned task URL is the canonical resource:
+The returned run URL is the canonical resource:
 
 - `GET` + `Accept: application/json` for polling or final result
 - `GET` + `Accept: text/event-stream` for SSE
 - `GET` + `Accept: application/x-ndjson` for CLI-friendly streaming
 - `POST { "input": "..." }` for continuation when the task asks for more input
 - `DELETE` to cancel
-- a `workflow` URL when the task belongs to an aggregated multi-site workflow
+- a `workflow` URL when the run belongs to an aggregated multi-site workflow
 
-Task creation may also return browser handoff URLs:
+Run creation may also return browser handoff URLs:
 
 - `open`: clean receipt URL for browser attach
 - `browserLink`: optional readable alias with visible `?rover=` or `?rover_shortcut=` when it fits the URL budget
 
-The task URL remains canonical; receipt links are only a browser handoff layer over that same task.
+The run URL remains canonical; receipt links are only a browser handoff layer over that same run.
 
 - `Prefer: execution=browser` keeps execution browser-first
 - `Prefer: execution=cloud` is the explicit browserless path today
 - `Prefer: execution=auto` prefers browser attach first; delayed cloud auto-promotion is a follow-up robustness phase
 
-Rover deep links like `?rover=` and `?rover_shortcut=` remain the simple browser-first entrypoints; `/v1/tasks` is the machine-oriented protocol. Cross-site workflows and handoffs extend that same public contract rather than replacing it.
+Rover deep links like `?rover=` and `?rover_shortcut=` remain the simple browser-first entrypoints; `/v1/a2w/runs` is the machine-oriented protocol. Cross-site workflows and handoffs extend that same public contract rather than replacing it.
 
 ### Agent identity attribution
 
 Rover normalizes visiting-agent attribution in this order:
 
 1. verified signed signal
-2. explicit `agent` object on public task creation or handoffs
+2. explicit `agent` object on A2W run creation or handoffs
 3. heuristic headers such as `User-Agent`, `Signature-Agent`, `Signature`, `Signature-Input`, and `X-RTRVR-Client-Id`
 4. advanced local fallbacks such as RoverBook `identityResolver`
 5. anonymous fallback
@@ -646,13 +654,13 @@ Trust tiers are `verified_signed`, `signed_directory_only`, `self_reported`, `he
 
 ### Cross-site workflows and handoffs
 
-Public tasks can delegate to Rover on another Rover-enabled site without leaving the same protocol surface.
+A2W runs can delegate to Rover on another Rover-enabled site without leaving the same protocol surface.
 
-- `POST /v1/tasks/{id}/handoffs` creates a child task on another site
-- `GET /v1/workflows/{id}` returns aggregated workflow state or stream
-- child tasks inherit the same workflow lineage as the parent
+- `POST /v1/a2w/runs/{id}/handoffs` creates a child run on another site
+- `GET /v1/a2w/workflows/{id}` returns aggregated workflow state or stream
+- child runs inherit the same workflow lineage as the parent
 
-Handoff creation also accepts the optional `agent` object so a child task can inherit or explicitly override visiting-agent attribution.
+Handoff creation also accepts the optional `agent` object so a child run can inherit or explicitly override visiting-agent attribution.
 
 Receiving sites must explicitly opt in through Workspace/site config:
 
@@ -680,7 +688,7 @@ Runtime contract notes:
 - `plannerOnActError` applies only in `auto` mode and only when ACT has no usable outcome.
 - Typed conflicts: `stale_seq`, `stale_epoch`, `active_run_exists`.
 - `POST /command` stale/missing run is non-fatal for tab navigation decisions (`decision='stale_run'`).
-- Cross-registrable navigation preflight is resilient: if command-tab decision checks are unavailable, Rover falls back to local policy (in-scope targets follow `navigation.crossHostPolicy`, default `same_tab`; out-of-scope targets follow `externalNavigationPolicy`).
+- Cross-registrable navigation preflight is resilient: if decision checks are unavailable, Rover falls back to local runtime behavior. Standard installs open outside-domain pages in a new tab with notice and choose the right tab automatically for allowed-host hops.
 - External intent routing: `/context/external` uses `read_context` (read/navigation-context prompts) or `act` (mutation prompts). Navigation-only external opens are represented by `POST /command` with `type='TAB_EVENT'` plus external placeholder tab handling.
 - Any normal user send starts a fresh task boundary (fresh `prevSteps`, fresh run-scoped tab order/scope).
 - `ask_user` answer submissions are the only continuation path and keep the same task boundary.
@@ -743,11 +751,9 @@ rover.on('error', (err) => console.error(err));
 | `close` | — | Panel closed |
 | `mode_change` | `{ mode }` | Execution mode changed |
 | `navigation_guardrail` | `{ url, policy }` | Out-of-scope navigation intercepted |
-| `task_started` | `{ reason }` | New task started |
-| `task_ended` | `{ reason }` | Task ended |
-| `run_started` | `{ taskId, runId, taskBoundaryId, state, taskComplete, needsUserInput, summary? }` | Public run lifecycle start event |
-| `run_state_transition` | `{ taskId, runId, taskBoundaryId, state, taskComplete, needsUserInput, summary?, error? }` | Public run lifecycle transition |
-| `run_completed` | `{ taskId, runId, taskBoundaryId, state, taskComplete, needsUserInput, summary?, error? }` | Terminal public run lifecycle event |
+| `run_started` | `{ runId, executionId, runBoundaryId, state, runComplete, needsUserInput, summary? }` | Public run lifecycle start event |
+| `run_state_transition` | `{ runId, executionId, runBoundaryId, state, runComplete, needsUserInput, summary?, error? }` | Public run lifecycle transition |
+| `run_completed` | `{ runId, executionId, runBoundaryId, state, runComplete, needsUserInput, summary?, error? }` | Terminal public run lifecycle event |
 | `checkpoint_state` | `{ state, reason?, action?, code?, message? }` | Checkpoint sync state updates |
 | `checkpoint_error` | `{ action, code?, message, ... }` | Checkpoint request failure details |
 | `tab_event_conflict_retry` | `{ runId, conflict?, ... }` | One stale seq/epoch tab-event conflict was recovered by silent retry |

package/dist/agentDiscovery.d.ts

@@ -6,6 +6,8 @@ export declare const DEFAULT_ROVER_SITE_PATH = "/.well-known/rover-site.json";
 export declare const DEFAULT_LLMS_PATH = "/llms.txt";
 export declare const ROVER_WEBMCP_DISCOVERY_GLOBAL = "__ROVER_WEBMCP_TOOL_DEFS__";
 export declare const ROVER_DISCOVERY_ACTION_SHEET_MAX_ACTIONS = 3;
+export declare const A2W_RUNS_PATH = "/v1/a2w/runs";
+export declare const A2W_WORKFLOWS_PATH = "/v1/a2w/workflows";
 type JsonSchema = Record<string, any>;
 export type RoverDiscoveryExecutionPreference = 'auto' | 'browser' | 'cloud';
 export type RoverDiscoverySurfaceMode = 'silent' | 'beacon' | 'integrated' | 'debug';
@@ -14,7 +16,7 @@ export type RoverDiscoveryHostSurface = 'auto' | 'existing-assistant' | 'floatin
 export type RoverDiscoveryActionReveal = 'click' | 'focus' | 'keyboard' | 'agent-handshake';
 export type RoverCapabilityResultMode = 'text' | 'markdown' | 'json' | 'observation' | 'artifacts';
 export type RoverSkillSideEffect = 'none' | 'read' | 'write' | 'transactional';
-export type RoverSkillInterface = 'task' | 'shortcut' | 'client_tool' | 'webmcp';
+export type RoverSkillInterface = 'run' | 'shortcut' | 'client_tool' | 'webmcp';
 export type RoverDiscoverySurfacePolicy = {
     mode?: RoverDiscoverySurfaceMode;
     branding?: RoverDiscoverySurfaceBranding;
@@ -62,7 +64,7 @@ export type RoverPublicSkillDefinition = {
         prompt?: string;
         routing?: 'auto' | 'act' | 'planner';
         toolName?: string;
-        task?: {
+        run?: {
             endpoint: string;
             payload: Record<string, unknown>;
             preferExecution: RoverDiscoveryExecutionPreference;
@@ -114,20 +116,19 @@ export type RoverSiteProfile = {
     pages: RoverPageDefinition[];
     policies: {
         preferredExecution: RoverDiscoveryExecutionPreference;
-        promptLaunchEnabled: boolean;
-        shortcutLaunchEnabled: boolean;
+        a2wRunsEnabled: boolean;
         cloudBrowserAllowed: boolean;
         delegatedHandoffs: boolean;
     };
     auth: {
-        taskEndpoint: string;
+        runEndpoint: string;
         workflowEndpoint: string;
         acceptsHttpMessageSignatures: boolean;
         supportsUnsignedSelfReportedIdentity: boolean;
     };
     analytics: {
         layer: 'roverbook';
-        taskIdField: 'taskId';
+        runIdField: 'runId';
         workflowIdField: 'workflowId';
         capabilityIdField: 'capabilityId';
         pageIdField: 'pageId';
@@ -159,14 +160,14 @@ export type RoverAgentCard = {
     defaultOutputModes: string[];
     capabilities: {
         streaming: boolean;
-        publicTasks: boolean;
+        a2wRuns: boolean;
         stateTransitions: boolean;
         delegatedHandoffs: boolean;
         webmcp: boolean;
     };
     skills: RoverPublicSkillDefinition[];
     interfaces?: Array<{
-        type: 'task' | 'workflow' | 'site' | 'deep_link' | 'webmcp';
+        type: 'run' | 'workflow' | 'site' | 'deep_link' | 'webmcp';
         url: string;
         description?: string;
         available?: boolean;
@@ -175,14 +176,13 @@ export type RoverAgentCard = {
         rover: {
             siteId?: string;
             siteUrl: string;
-            taskEndpoint: string;
+            runEndpoint: string;
             workflowEndpoint: string;
             serviceDescUrl: string;
             roverSiteUrl: string;
             llmsUrl?: string;
             preferredExecution: RoverDiscoveryExecutionPreference;
-            promptLaunchEnabled: boolean;
-            shortcutLaunchEnabled: boolean;
+            a2wRunsEnabled: boolean;
             cloudBrowserAllowed: boolean;
             delegatedHandoffs: boolean;
             instructions: string[];
@@ -238,8 +238,6 @@ export type RoverAgentDiscoveryConfig = {
     };
     aiAccess?: {
         enabled?: boolean;
-        allowPromptLaunch?: boolean;
-        allowShortcutLaunch?: boolean;
         allowCloudBrowser?: boolean;
         allowDelegatedHandoffs?: boolean;
     };
@@ -261,7 +259,8 @@ export declare function buildRoverAgentDiscoveryPayloads(config: RoverAgentDisco
     pageManifestJson: string;
     llmsUrl?: string;
     marker: {
-        task?: string;
+        a2w?: string;
+        run?: string;
         card: string;
         roverSite: string;
         site?: string;

package/dist/agentDiscovery.js

@@ -6,25 +6,27 @@ export const DEFAULT_ROVER_SITE_PATH = '/.well-known/rover-site.json';
 export const DEFAULT_LLMS_PATH = '/llms.txt';
 export const ROVER_WEBMCP_DISCOVERY_GLOBAL = '__ROVER_WEBMCP_TOOL_DEFS__';
 export const ROVER_DISCOVERY_ACTION_SHEET_MAX_ACTIONS = 3;
+export const A2W_RUNS_PATH = '/v1/a2w/runs';
+export const A2W_WORKFLOWS_PATH = '/v1/a2w/workflows';
 const ROVER_DISCOVERY_SHORTCUT_PROMPT_MAX_CHARS = 2000;
 const DEFAULT_SKILL_OUTPUT_SCHEMA = {
     type: 'object',
     properties: {
         status: {
             type: 'string',
-            description: 'Task status returned by Rover.',
+            description: 'A2W run status returned by Rover.',
         },
         summary: {
             type: 'string',
             description: 'High-level summary of what Rover completed or observed.',
         },
-        task: {
+        run: {
             type: 'string',
-            description: 'Canonical Rover task URL.',
+            description: 'Canonical A2W run URL.',
         },
         workflow: {
             type: 'string',
-            description: 'Canonical Rover workflow URL when delegation occurs.',
+            description: 'Canonical A2W workflow URL when delegation occurs.',
         },
     },
 };
@@ -157,11 +159,11 @@ function defaultAgentModeEntryHints(policy) {
     if (policy.hostSurface === 'existing-assistant' || policy.mode === 'integrated') {
         return [
             'Use the site assistant or chat entrypoint first when it is present on the page.',
-            'Prefer Rover task and shortcut surfaces over selector or screenshot guessing once the assistant surface is active.',
+            'Prefer Rover A2W run and shortcut surfaces over selector or screenshot guessing once the assistant surface is active.',
         ];
     }
     return [
-        'Use the page beacon or task endpoint before attempting generic DOM automation.',
+        'Use the page beacon or A2W run endpoint before attempting generic DOM automation.',
         'When Rover is already active, prefer the current-page actions over screenshot loops.',
     ];
 }
@@ -323,11 +325,11 @@ function normalizePageDefinition(value, defaults) {
         capabilitySummary: uniqueStrings(page.capabilitySummary, { max: 12, maxLen: 180 }),
     };
 }
-function buildTaskEndpoint(apiBase) {
-    return `${toBaseUrl(apiBase)}/v1/tasks`;
+function buildRunEndpoint(apiBase) {
+    return `${toBaseUrl(apiBase)}${A2W_RUNS_PATH}`;
 }
 function buildWorkflowEndpoint(apiBase) {
-    return `${toBaseUrl(apiBase)}/v1/workflows`;
+    return `${toBaseUrl(apiBase)}${A2W_WORKFLOWS_PATH}`;
 }
 function buildDeepLink(siteUrl, shortcutId) {
     try {
@@ -472,7 +474,7 @@ function normalizePublishedShortcut(shortcut) {
         ...(shortcut.routing ? { routing: shortcut.routing } : {}),
     };
 }
-function buildShortcutSkill(shortcut, config, taskEndpoint) {
+function buildShortcutSkill(shortcut, config, runEndpoint) {
     const publishedShortcut = normalizePublishedShortcut(shortcut);
     if (!publishedShortcut)
         return null;
@@ -498,7 +500,7 @@ function buildShortcutSkill(shortcut, config, taskEndpoint) {
             whenToUse: annotations.whenToUse
                 || 'Use this when the user wants this exact site outcome and you want a stable path that avoids brittle DOM guessing.',
             whyUse: annotations.whyUse
-                || 'Rover shortcuts are explicit site-owned entrypoints with structured task progress and cleaner recovery than generic DOM automation.',
+                || 'Rover shortcuts are explicit site-owned entrypoints with structured A2W run progress and cleaner recovery than generic DOM automation.',
         }, preferredInterface),
         tags,
         examples,
@@ -517,8 +519,8 @@ function buildShortcutSkill(shortcut, config, taskEndpoint) {
             prompt,
             routing: shortcut.routing,
             deepLink: buildDeepLink(config.siteUrl, id),
-            task: {
-                endpoint: taskEndpoint,
+            run: {
+                endpoint: runEndpoint,
                 payload: {
                     url: normalizeSiteUrl(config.siteUrl),
                     shortcut: id,
@@ -764,19 +766,17 @@ function buildInlineDataUrl(json) {
 }
 export function createRoverAgentCard(config) {
     const siteUrl = normalizeSiteUrl(config.siteUrl);
-    const taskEndpoint = buildTaskEndpoint(config.apiBase);
+    const runEndpoint = buildRunEndpoint(config.apiBase);
     const workflowEndpoint = buildWorkflowEndpoint(config.apiBase);
     const serviceDescUrl = text(config.agentCardUrl) || DEFAULT_AGENT_CARD_PATH;
     const roverSiteUrl = text(config.roverSiteUrl) || DEFAULT_ROVER_SITE_PATH;
     const llmsUrl = text(config.llmsUrl);
     const launchAccess = resolveAiLaunchAccess(config.aiAccess);
-    const promptLaunchEnabled = launchAccess.promptLaunchEnabled;
-    const shortcutLaunchEnabled = launchAccess.shortcutLaunchEnabled;
-    const publicTaskEnabled = promptLaunchEnabled || shortcutLaunchEnabled;
+    const publicRunEnabled = launchAccess.enabled;
     const cloudBrowserAllowed = config.aiAccess?.allowCloudBrowser !== false;
     const delegatedHandoffs = config.aiAccess?.allowDelegatedHandoffs === true;
     const shortcutSkills = (config.shortcuts || [])
-        .map(shortcut => buildShortcutSkill(shortcut, config, taskEndpoint))
+        .map(shortcut => buildShortcutSkill(shortcut, config, runEndpoint))
         .filter((skill) => !!skill);
     const toolSkills = (config.tools || [])
         .map(tool => buildToolSkill(tool, 'client_tool'))
@@ -819,29 +819,29 @@ export function createRoverAgentCard(config) {
     return {
         name: siteName,
         description,
-        url: taskEndpoint,
+        url: runEndpoint,
         version: text(config.version, 80) || '1.0.0',
         defaultInputModes: ['text/plain', 'application/json'],
         defaultOutputModes: ['text/plain', 'application/json'],
         capabilities: {
-            streaming: publicTaskEnabled,
-            publicTasks: publicTaskEnabled,
-            stateTransitions: publicTaskEnabled,
+            streaming: publicRunEnabled,
+            a2wRuns: publicRunEnabled,
+            stateTransitions: publicRunEnabled,
             delegatedHandoffs,
             webmcp: webmcpSkills.length > 0,
         },
         skills,
         interfaces: [
             {
-                type: 'task',
-                url: taskEndpoint,
-                description: 'Canonical Rover ATP task creation endpoint.',
-                available: promptLaunchEnabled,
+                type: 'run',
+                url: runEndpoint,
+                description: 'Canonical Agent-to-Web Protocol (A2W) run creation endpoint.',
+                available: publicRunEnabled,
             },
             {
                 type: 'workflow',
                 url: workflowEndpoint,
-                description: 'Aggregated Rover workflow resource for delegated tasks.',
+                description: 'Aggregated Rover workflow resource for delegated runs.',
                 available: true,
             },
             {
@@ -854,7 +854,7 @@ export function createRoverAgentCard(config) {
                 type: 'deep_link',
                 url: siteUrl,
                 description: 'Browser-first Rover deep link surface using rover= or rover_shortcut= query params.',
-                available: publicTaskEnabled,
+                available: publicRunEnabled,
             },
             {
                 type: 'webmcp',
@@ -867,19 +867,18 @@ export function createRoverAgentCard(config) {
             rover: {
                 siteId: text(config.siteId, 120) || undefined,
                 siteUrl,
-                taskEndpoint,
+                runEndpoint,
                 workflowEndpoint,
                 serviceDescUrl,
                 roverSiteUrl,
                 ...(llmsUrl ? { llmsUrl } : {}),
                 preferredExecution: config.preferExecution || 'auto',
-                promptLaunchEnabled,
-                shortcutLaunchEnabled,
+                a2wRunsEnabled: publicRunEnabled,
                 cloudBrowserAllowed,
                 delegatedHandoffs,
                 instructions: [
                     'Prefer exact Rover shortcuts and explicit site tools over raw DOM automation when the user goal matches a published skill.',
-                    'Use POST /v1/tasks when you need structured progress, continuation input, or a stable final result channel.',
+                    'Use POST /v1/a2w/runs when you need structured A2W progress, continuation input, or a stable final result channel.',
                     'Fall back to generic DOM automation only when no matching Rover shortcut or explicit tool exists for the requested outcome.',
                 ],
                 capabilitiesGraph: capabilityGraph.capabilities,
@@ -912,20 +911,19 @@ export function createRoverSiteProfile(config) {
         pages: rover?.pages || [],
         policies: {
             preferredExecution: rover?.preferredExecution || 'auto',
-            promptLaunchEnabled: rover?.promptLaunchEnabled !== false,
-            shortcutLaunchEnabled: rover?.shortcutLaunchEnabled !== false,
+            a2wRunsEnabled: rover?.a2wRunsEnabled !== false,
             cloudBrowserAllowed: rover?.cloudBrowserAllowed !== false,
             delegatedHandoffs: rover?.delegatedHandoffs === true,
         },
         auth: {
-            taskEndpoint: rover?.taskEndpoint || buildTaskEndpoint(config.apiBase),
+            runEndpoint: rover?.runEndpoint || buildRunEndpoint(config.apiBase),
             workflowEndpoint: rover?.workflowEndpoint || buildWorkflowEndpoint(config.apiBase),
             acceptsHttpMessageSignatures: true,
             supportsUnsignedSelfReportedIdentity: true,
         },
         analytics: {
             layer: 'roverbook',
-            taskIdField: 'taskId',
+            runIdField: 'runId',
             workflowIdField: 'workflowId',
             capabilityIdField: 'capabilityId',
             pageIdField: 'pageId',
@@ -964,7 +962,8 @@ export function buildRoverAgentDiscoveryPayloads(config) {
     };
     const pageManifestJson = JSON.stringify(pageManifest, null, 2);
     const marker = {
-        task: card.extensions?.rover.taskEndpoint,
+        a2w: card.extensions?.rover.runEndpoint,
+        run: card.extensions?.rover.runEndpoint,
         card: serviceDescHref,
         roverSite: roverSiteHref,
         site: card.extensions?.rover.siteUrl,