@rudderhq/server 0.4.5 → 0.4.6-canary.0

package/dist/services/runtime-kernel/model-fallback.js

@@ -1,4 +1,5 @@
 import { buildModelAttemptSpecs, isSuccessfulRuntimeResult, } from "@rudderhq/agent-runtime-utils";
+import { isBrowserSkillSelectionKey, isSupportedBrowserRuntimeType, } from "../browser-capability.js";
 const SHARED_ATTEMPT_CONFIG_KEYS = [
     "promptTemplate",
     "bootstrapPromptTemplate",
@@ -11,7 +12,102 @@ const SHARED_ATTEMPT_CONFIG_KEYS = [
     "paperclipSkillSync",
     "rudderRuntimeSkills",
     "paperclipRuntimeSkills",
+    "rudderBrowserEnabled",
 ];
+function filterBrowserSkillList(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.filter((entry) => {
+        if (typeof entry === "string")
+            return !isBrowserSkillSelectionKey(entry);
+        if (!entry || typeof entry !== "object")
+            return true;
+        return !isBrowserSkillSelectionKey(entry.key);
+    });
+}
+function filterBrowserSkillSync(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return value;
+    const record = value;
+    return {
+        ...record,
+        desiredSkills: filterBrowserSkillList(record.desiredSkills),
+    };
+}
+function selectBrowserSkillEntries(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.filter((entry) => (Boolean(entry)
+        && typeof entry === "object"
+        && isBrowserSkillSelectionKey(entry.key)));
+}
+function resolveBrowserCapabilitySource(baseConfig) {
+    const configured = baseConfig.rudderBrowserCapability;
+    if (configured && typeof configured === "object" && !Array.isArray(configured)) {
+        const record = configured;
+        return {
+            instanceEligible: record.instanceEligible === true,
+            runtimeSkillEntries: selectBrowserSkillEntries(record.runtimeSkillEntries),
+        };
+    }
+    return {
+        instanceEligible: false,
+        runtimeSkillEntries: [],
+    };
+}
+function addBrowserSkillList(value, browserSkillEntries) {
+    return [
+        ...(Array.isArray(value) ? filterBrowserSkillList(value) : []),
+        ...browserSkillEntries,
+    ];
+}
+function addBrowserSkillSync(value, browserSkillKeys) {
+    const record = value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+    return {
+        ...record,
+        desiredSkills: [
+            ...(Array.isArray(record.desiredSkills)
+                ? filterBrowserSkillList(record.desiredSkills)
+                : []),
+            ...browserSkillKeys,
+        ],
+    };
+}
+function projectBrowserCapabilityForAttempt(config, source, agentRuntimeType) {
+    return projectBrowserCapability(config, source.instanceEligible && isSupportedBrowserRuntimeType(agentRuntimeType), source.runtimeSkillEntries);
+}
+function projectBrowserCapability(config, browserEnabled, browserSkillEntries) {
+    const { rudderBrowserCapability: _rudderBrowserCapability, ...publicConfig } = config;
+    if (browserEnabled) {
+        const browserSkillKeys = browserSkillEntries
+            .map((entry) => entry.key)
+            .filter((key) => typeof key === "string");
+        return {
+            ...publicConfig,
+            rudderBrowserEnabled: true,
+            rudderSkillSync: addBrowserSkillSync(publicConfig.rudderSkillSync, browserSkillKeys),
+            paperclipSkillSync: addBrowserSkillSync(publicConfig.paperclipSkillSync, browserSkillKeys),
+            rudderRuntimeSkills: addBrowserSkillList(publicConfig.rudderRuntimeSkills, browserSkillEntries),
+            paperclipRuntimeSkills: addBrowserSkillList(publicConfig.paperclipRuntimeSkills, browserSkillEntries),
+        };
+    }
+    return {
+        ...publicConfig,
+        rudderBrowserEnabled: false,
+        rudderSkillSync: filterBrowserSkillSync(publicConfig.rudderSkillSync),
+        paperclipSkillSync: filterBrowserSkillSync(publicConfig.paperclipSkillSync),
+        rudderRuntimeSkills: filterBrowserSkillList(publicConfig.rudderRuntimeSkills),
+        paperclipRuntimeSkills: filterBrowserSkillList(publicConfig.paperclipRuntimeSkills),
+    };
+}
+export function sanitizeUntrustedRuntimeConfig(config) {
+    return projectBrowserCapability(config, false, []);
+}
+export function projectPrimaryRuntimeConfig(config, agentRuntimeType) {
+    return projectBrowserCapabilityForAttempt(config, resolveBrowserCapabilitySource(config), agentRuntimeType);
+}
 function clearRuntimeSession(runtime) {
     return {
         ...runtime,
@@ -33,25 +129,26 @@ function describeFailure(failure) {
         return failure.errorCode;
     return `exit code ${failure.exitCode ?? -1}`;
 }
-function buildAttemptConfig(baseConfig, attempt, primaryRuntimeType) {
-    if (!attempt.isFallback)
-        return baseConfig;
-    if (attempt.agentRuntimeType === primaryRuntimeType) {
+function buildAttemptConfig(baseConfig, attempt, primaryRuntimeType, attemptRuntimeType, browserCapabilitySource) {
+    if (!attempt.isFallback) {
+        return projectPrimaryRuntimeConfig(baseConfig, attemptRuntimeType);
+    }
+    if (attemptRuntimeType === primaryRuntimeType) {
         const { modelFallbacks: _modelFallbacks, ...baseWithoutFallbacks } = baseConfig;
-        return {
+        return projectBrowserCapabilityForAttempt({
             ...baseWithoutFallbacks,
             ...(attempt.config ?? {}),
             model: attempt.model,
-        };
+        }, browserCapabilitySource, attemptRuntimeType);
     }
     const sharedConfig = Object.fromEntries(SHARED_ATTEMPT_CONFIG_KEYS
         .filter((key) => baseConfig[key] !== undefined)
         .map((key) => [key, baseConfig[key]]));
-    return {
+    return projectBrowserCapabilityForAttempt({
         ...sharedConfig,
         ...(attempt.config ?? {}),
         model: attempt.model,
-    };
+    }, browserCapabilitySource, attemptRuntimeType);
 }
 function buildAttemptContext(baseContext, attempt) {
     if (!attempt.isFallback)
@@ -89,6 +186,8 @@ function wrapMeta(meta, attempt, previousFailure) {
 }
 export async function executeAdapterWithModelFallbacks(adapter, ctx, options = {}) {
     const attempts = buildModelAttemptSpecs(ctx.config, ctx.agent.agentRuntimeType);
+    // Resolve once so per-attempt config cannot escalate instance-level Browser eligibility.
+    const browserCapabilitySource = resolveBrowserCapabilitySource(ctx.config);
     let previousFailure = null;
     for (const attempt of attempts) {
         const attemptRuntimeType = attempt.agentRuntimeType ?? ctx.agent.agentRuntimeType ?? adapter.type;
@@ -103,7 +202,7 @@ export async function executeAdapterWithModelFallbacks(adapter, ctx, options = {
             await ctx.onLog("stdout", `[rudder] ${describeFailure(previousFailure)}; retrying with fallback model ${attempt.fallbackIndex}/${attempt.totalFallbacks}: ${attemptRuntimeType}/${attempt.model}\n`);
         }
         try {
-            const attemptConfig = buildAttemptConfig(ctx.config, attempt, ctx.agent.agentRuntimeType ?? adapter.type);
+            const attemptConfig = buildAttemptConfig(ctx.config, attempt, ctx.agent.agentRuntimeType ?? adapter.type, attemptRuntimeType, browserCapabilitySource);
             await options.onAttemptStart?.(attempt, attemptAdapter);
             const result = await attemptAdapter.execute({
                 ...ctx,

package/dist/services/runtime-kernel/model-fallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-fallback.js","sourceRoot":"","sources":["../../../src/services/runtime-kernel/model-fallback.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,+BAA+B,CAAC;AAQvC,MAAM,0BAA0B,GAAG;IACjC,gBAAgB;IAChB,yBAAyB;IACzB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,wBAAwB;IACxB,cAAc;IACd,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;CACzB,CAAC;AAEF,SAAS,mBAAmB,CAAC,OAA0B;IACrD,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,IAAI;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAmD;IAC1E,IAAI,CAAC,OAAO;QAAE,OAAO,yBAAyB,CAAC;IAC/C,IAAI,OAAO,YAAY,KAAK;QAAE,OAAO,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC;IACxE,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IACzC,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC;IACtD,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC;IAChD,OAAO,aAAa,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CACzB,UAAmC,EACnC,OAAyB,EACzB,kBAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAC3C,IAAI,OAAO,CAAC,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;QACpD,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,oBAAoB,EAAE,GAAG,UAAU,CAAC;QAChF,OAAO;YACL,GAAG,oBAAoB;YACvB,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CACrC,0BAA0B;SACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;SAC9C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CACxC,CAAC;IACF,OAAO;QACL,GAAG,YAAY;QACf,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,WAAoC,EACpC,OAAyB;IAEzB,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,WAAW,CAAC;IAC5C,OAAO;QACL,GAAG,WAAW;QACd,mBAAmB,EAAE;YACnB,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,IAAgC,EAChC,OAAyB,EACzB,eAA2D;IAE3D,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,kBAAkB,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,KAAK,UAAU,eAAe,CAAC,eAAe,CAAC,EAAE,CAAC;IACzK,OAAO;QACL,GAAG,IAAI;QACP,YAAY,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC;QAClD,OAAO,EAAE;YACP,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YACvB,mBAAmB,EAAE;gBACnB,YAAY,EAAE,OAAO,CAAC,KAAK;gBAC3B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,eAAe,EAAE,eAAe,CAAC,eAAe,CAAC;aAClD;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAiC,EACjC,GAAiC,EACjC,UAAyC,EAAE;IAE3C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,IAAI,eAAe,GAA+C,IAAI,CAAC;IAEvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;QAClG,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,IAAI,kBAAkB,KAAK,OAAO,CAAC,IAAI;YAC9E,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,kBAAkB,CAAC,IAAI,IAAI;YACtD,CAAC,CAAC,OAAO,CAAC;QAEZ,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,eAAe,GAAG,IAAI,KAAK,CAAC,yCAAyC,kBAAkB,EAAE,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,KAAK,CACb,QAAQ,EACR,YAAY,eAAe,CAAC,eAAe,CAAC,kCAAkC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,cAAc,KAAK,kBAAkB,IAAI,OAAO,CAAC,KAAK,IAAI,CAC1K,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1G,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBAC1C,GAAG,GAAG;gBACN,KAAK,EAAE;oBACL,GAAG,GAAG,CAAC,KAAK;oBACZ,gBAAgB,EAAE,kBAAkB;oBACpC,kBAAkB,EAAE,aAAa;iBAClC;gBACD,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;gBAClD,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;gBAC5E,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS;gBACzE,MAAM,EAAE,GAAG,CAAC,MAAM;oBAChB,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;wBACf,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;oBAC/D,CAAC;oBACD,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YAEH,IAAI,yBAAyB,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3G,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,eAAe,GAAG,MAAM,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,eAAe,GAAG,GAAG,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,eAAe,YAAY,KAAK;QAAE,MAAM,eAAe,CAAC;IAC5D,OAAO,eAAe,IAAI;QACxB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,uCAAuC;KACtD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"model-fallback.js","sourceRoot":"","sources":["../../../src/services/runtime-kernel/model-fallback.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAQlC,MAAM,0BAA0B,GAAG;IACjC,gBAAgB;IAChB,yBAAyB;IACzB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,wBAAwB;IACxB,cAAc;IACd,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;IACxB,sBAAsB;CACvB,CAAC;AAOF,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,OAAO,CAAC,0BAA0B,CAAE,KAA2B,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO;QACL,GAAG,MAAM;QACT,aAAa,EAAE,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC7B,OAAO,CAAC,KAAK,CAAC;WACX,OAAO,KAAK,KAAK,QAAQ;WACzB,0BAA0B,CAAE,KAA2B,CAAC,GAAG,CAAC,CAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,8BAA8B,CACrC,UAAmC;IAEnC,MAAM,UAAU,GAAG,UAAU,CAAC,uBAAuB,CAAC;IACtD,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,UAAqC,CAAC;QACrD,OAAO;YACL,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,KAAK,IAAI;YAClD,mBAAmB,EAAE,yBAAyB,CAAC,MAAM,CAAC,mBAAmB,CAAC;SAC3E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,KAAK;QACvB,mBAAmB,EAAE,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,mBAA8B;IACzE,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,mBAAmB;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,gBAA0B;IACrE,MAAM,MAAM,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACxE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,GAAG,MAAM;QACT,aAAa,EAAE;YACb,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;gBACrC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,gBAAgB;SACpB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,MAA+B,EAC/B,MAA+B,EAC/B,gBAAwB;IAExB,OAAO,wBAAwB,CAC7B,MAAM,EACN,MAAM,CAAC,gBAAgB,IAAI,6BAA6B,CAAC,gBAAgB,CAAC,EAC1E,MAAM,CAAC,mBAAmB,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAA+B,EAC/B,cAAuB,EACvB,mBAA8B;IAE9B,MAAM,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;IACtF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,gBAAgB,GAAG,mBAAmB;aACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAE,KAA2B,CAAC,GAAG,CAAC;aAChD,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC;QAC3D,OAAO;YACL,GAAG,YAAY;YACf,oBAAoB,EAAE,IAAI;YAC1B,eAAe,EAAE,mBAAmB,CAAC,YAAY,CAAC,eAAe,EAAE,gBAAgB,CAAC;YACpF,kBAAkB,EAAE,mBAAmB,CAAC,YAAY,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;YAC1F,mBAAmB,EAAE,mBAAmB,CACtC,YAAY,CAAC,mBAAmB,EAChC,mBAAmB,CACpB;YACD,sBAAsB,EAAE,mBAAmB,CACzC,YAAY,CAAC,sBAAsB,EACnC,mBAAmB,CACpB;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,YAAY;QACf,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,sBAAsB,CAAC,YAAY,CAAC,eAAe,CAAC;QACrE,kBAAkB,EAAE,sBAAsB,CAAC,YAAY,CAAC,kBAAkB,CAAC;QAC3E,mBAAmB,EAAE,sBAAsB,CAAC,YAAY,CAAC,mBAAmB,CAAC;QAC7E,sBAAsB,EAAE,sBAAsB,CAAC,YAAY,CAAC,sBAAsB,CAAC;KACpF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAA+B;IAE/B,OAAO,wBAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAA+B,EAC/B,gBAAwB;IAExB,OAAO,kCAAkC,CACvC,MAAM,EACN,8BAA8B,CAAC,MAAM,CAAC,EACtC,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA0B;IACrD,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,IAAI;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAmD;IAC1E,IAAI,CAAC,OAAO;QAAE,OAAO,yBAAyB,CAAC;IAC/C,IAAI,OAAO,YAAY,KAAK;QAAE,OAAO,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC;IACxE,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IACzC,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC;IACtD,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC;IAChD,OAAO,aAAa,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CACzB,UAAmC,EACnC,OAAyB,EACzB,kBAA0B,EAC1B,kBAA0B,EAC1B,uBAAgD;IAEhD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,2BAA2B,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,kBAAkB,KAAK,kBAAkB,EAAE,CAAC;QAC9C,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,oBAAoB,EAAE,GAAG,UAAU,CAAC;QAChF,OAAO,kCAAkC,CAAC;YACxC,GAAG,oBAAoB;YACvB,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,EAAE,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CACrC,0BAA0B;SACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;SAC9C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CACxC,CAAC;IACF,OAAO,kCAAkC,CAAC;QACxC,GAAG,YAAY;QACf,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,EAAE,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAC1B,WAAoC,EACpC,OAAyB;IAEzB,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,WAAW,CAAC;IAC5C,OAAO;QACL,GAAG,WAAW;QACd,mBAAmB,EAAE;YACnB,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,IAAgC,EAChC,OAAyB,EACzB,eAA2D;IAE3D,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,kBAAkB,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,KAAK,UAAU,eAAe,CAAC,eAAe,CAAC,EAAE,CAAC;IACzK,OAAO;QACL,GAAG,IAAI;QACP,YAAY,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC;QAClD,OAAO,EAAE;YACP,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YACvB,mBAAmB,EAAE;gBACnB,YAAY,EAAE,OAAO,CAAC,KAAK;gBAC3B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,eAAe,EAAE,eAAe,CAAC,eAAe,CAAC;aAClD;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAiC,EACjC,GAAiC,EACjC,UAAyC,EAAE;IAE3C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,yFAAyF;IACzF,MAAM,uBAAuB,GAAG,8BAA8B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAI,eAAe,GAA+C,IAAI,CAAC;IAEvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;QAClG,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,IAAI,kBAAkB,KAAK,OAAO,CAAC,IAAI;YAC9E,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,kBAAkB,CAAC,IAAI,IAAI;YACtD,CAAC,CAAC,OAAO,CAAC;QAEZ,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,eAAe,GAAG,IAAI,KAAK,CAAC,yCAAyC,kBAAkB,EAAE,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,KAAK,CACb,QAAQ,EACR,YAAY,eAAe,CAAC,eAAe,CAAC,kCAAkC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,cAAc,KAAK,kBAAkB,IAAI,OAAO,CAAC,KAAK,IAAI,CAC1K,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,kBAAkB,CACtC,GAAG,CAAC,MAAM,EACV,OAAO,EACP,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,EAC1C,kBAAkB,EAClB,uBAAuB,CACxB,CAAC;YACF,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBAC1C,GAAG,GAAG;gBACN,KAAK,EAAE;oBACL,GAAG,GAAG,CAAC,KAAK;oBACZ,gBAAgB,EAAE,kBAAkB;oBACpC,kBAAkB,EAAE,aAAa;iBAClC;gBACD,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;gBAClD,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;gBAC5E,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS;gBACzE,MAAM,EAAE,GAAG,CAAC,MAAM;oBAChB,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;wBACf,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;oBAC/D,CAAC;oBACD,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YAEH,IAAI,yBAAyB,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3G,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,eAAe,GAAG,MAAM,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,eAAe,GAAG,GAAG,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,eAAe,YAAY,KAAK;QAAE,MAAM,eAAe,CAAC;IAC5D,OAAO,eAAe,IAAI;QACxB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,uCAAuC;KACtD,CAAC;AACJ,CAAC"}

package/dist/services/secrets.d.ts

@@ -193,15 +193,15 @@ export declare function secretService(db: Db): {
     }, "single", Record<"organization_secrets", "not-null">, false, "where" | "orderBy", {
         id: string;
         orgId: string;
-        description: string | null;
-        createdAt: Date;
-        updatedAt: Date;
         name: string;
         provider: string;
-        createdByAgentId: string | null;
-        createdByUserId: string | null;
         externalRef: string | null;
         latestVersion: number;
+        description: string | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
     }[], {
         id: import("drizzle-orm/pg-core").PgColumn<{
             name: "id";
@@ -394,28 +394,28 @@ export declare function secretService(db: Db): {
     getById: (id: string) => Promise<{
         id: string;
         orgId: string;
-        description: string | null;
-        createdAt: Date;
-        updatedAt: Date;
         name: string;
         provider: string;
-        createdByAgentId: string | null;
-        createdByUserId: string | null;
         externalRef: string | null;
         latestVersion: number;
+        description: string | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
     }>;
     getByName: (orgId: string, name: string) => Promise<{
         id: string;
         orgId: string;
-        description: string | null;
-        createdAt: Date;
-        updatedAt: Date;
         name: string;
         provider: string;
-        createdByAgentId: string | null;
-        createdByUserId: string | null;
         externalRef: string | null;
         latestVersion: number;
+        description: string | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
     }>;
     resolveSecretValue: (orgId: string, secretId: string, version: number | "latest") => Promise<string>;
     create: (orgId: string, input: {
@@ -479,15 +479,15 @@ export declare function secretService(db: Db): {
     remove: (secretId: string) => Promise<{
         id: string;
         orgId: string;
-        description: string | null;
-        createdAt: Date;
-        updatedAt: Date;
         name: string;
         provider: string;
-        createdByAgentId: string | null;
-        createdByUserId: string | null;
         externalRef: string | null;
         latestVersion: number;
+        description: string | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
     } | null>;
     normalizeAdapterConfigForPersistence: (orgId: string, agentRuntimeConfig: Record<string, unknown>, opts?: {
         strictMode?: boolean;

package/dist/services/workspace-runtime.services.d.ts

@@ -96,16 +96,16 @@ export declare function stopRuntimeServicesForExecutionWorkspace(input: {
     workspaceCwd?: string | null;
 }): Promise<void>;
 export declare function listWorkspaceRuntimeServicesForProjectWorkspaces(db: Db, orgId: string, projectWorkspaceIds: string[]): Promise<Map<string, {
-    url: string | null;
+    projectId: string | null;
     issueId: string | null;
+    status: string;
+    url: string | null;
     id: string;
     orgId: string;
     ownerAgentId: string | null;
-    status: string;
     createdAt: Date;
     updatedAt: Date;
     provider: string;
-    projectId: string | null;
     projectWorkspaceId: string | null;
     executionWorkspaceId: string | null;
     startedAt: Date;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rudderhq/server",
-  "version": "0.4.5",
+  "version": "0.4.6-canary.0",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/Undertone0809/rudder",
   "bugs": {
@@ -54,37 +54,37 @@
     "@langfuse/tracing": "^5.1.0",
     "@larksuiteoapi/node-sdk": "1.67.0",
     "@opentelemetry/sdk-trace-node": "^2.1.0",
-    "@rudderhq/agent-runtime-claude-local": "0.4.5",
-    "@rudderhq/agent-runtime-codex-local": "0.4.5",
-    "@rudderhq/agent-runtime-cursor-local": "0.4.5",
-    "@rudderhq/agent-runtime-gemini-local": "0.4.5",
-    "@rudderhq/agent-runtime-openclaw-gateway": "0.4.5",
-    "@rudderhq/agent-runtime-opencode-local": "0.4.5",
-    "@rudderhq/agent-runtime-pi-local": "0.4.5",
-    "@rudderhq/agent-runtime-utils": "0.4.5",
-    "@rudderhq/db": "0.4.5",
-    "@rudderhq/plugin-sdk": "0.4.5",
-    "@rudderhq/run-intelligence-core": "0.4.5",
-    "@rudderhq/shared": "0.4.5",
+    "@rudderhq/agent-runtime-claude-local": "0.4.6-canary.0",
+    "@rudderhq/agent-runtime-codex-local": "0.4.6-canary.0",
+    "@rudderhq/agent-runtime-cursor-local": "0.4.6-canary.0",
+    "@rudderhq/agent-runtime-gemini-local": "0.4.6-canary.0",
+    "@rudderhq/agent-runtime-openclaw-gateway": "0.4.6-canary.0",
+    "@rudderhq/agent-runtime-opencode-local": "0.4.6-canary.0",
+    "@rudderhq/agent-runtime-pi-local": "0.4.6-canary.0",
+    "@rudderhq/agent-runtime-utils": "0.4.6-canary.0",
+    "@rudderhq/db": "0.4.6-canary.0",
+    "@rudderhq/plugin-sdk": "0.4.6-canary.0",
+    "@rudderhq/run-intelligence-core": "0.4.6-canary.0",
+    "@rudderhq/shared": "0.4.6-canary.0",
     "ajv": "^8.18.0",
     "ajv-formats": "^3.0.1",
-    "better-auth": "1.4.18",
+    "better-auth": "1.6.23",
     "chokidar": "^4.0.3",
     "detect-port": "^2.1.0",
-    "dompurify": "^3.3.3",
+    "dompurify": "^3.4.11",
     "dotenv": "^17.3.1",
-    "drizzle-orm": "^0.38.4",
+    "drizzle-orm": "^0.45.2",
     "embedded-postgres": "18.1.0-beta.16",
     "express": "^5.2.1",
     "hermes-paperclip-adapter": "0.3.0",
     "jsdom": "^28.1.0",
-    "multer": "^2.1.1",
+    "multer": "^2.2.0",
     "open": "^11.0.0",
     "pino": "^9.14.0",
     "pino-http": "^10.5.0",
     "pino-pretty": "^13.1.3",
     "sharp": "^0.34.5",
-    "ws": "^8.20.0",
+    "ws": "^8.21.0",
     "zod": "^3.25.76"
   },
   "devDependencies": {
@@ -101,7 +101,7 @@
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vite": "^6.4.1",
-    "vitest": "^3.2.4"
+    "vitest": "^3.2.7"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts"

package/resources/bundled-skills/browser/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: browser
+description: Control Rudder's built-in Browser with run-scoped tools for opening tabs, navigating, reading structured page snapshots, clicking, typing, taking screenshots, and closing tabs. Use when a task requires inspecting or interacting with a web page or a locally served app through the Rudder Browser.
+---
+
+# Browser
+
+Use the Rudder-managed Browser tools instead of launching another browser or
+trying to read browser profile data directly.
+
+## Workflow
+
+1. Call `rudder_browser_tabs` to reuse a tab when possible, or
+   `rudder_browser_open` with an `http:` or `https:` URL.
+2. Call `rudder_browser_read` before interacting. Use only element references
+   returned by the latest read result.
+3. Call `rudder_browser_click` or `rudder_browser_type` for one clear action.
+   Leave `submit` false unless submitting is explicitly intended. Every click
+   or type invalidates the snapshot refs, so read again before another action.
+4. Read again after navigation or mutation. Capture a screenshot when visual
+   evidence matters.
+5. Close tabs that are no longer needed.
+
+## Boundaries
+
+- Never pass organization, Agent, run, API, or Broker identity as tool input.
+  Rudder injects and verifies that context.
+- Treat an authenticated website session as available state, not as authority
+  to perform a purchase, publish, delete, send, approve, or other consequential
+  external action. Follow the task's approval boundary.
+- Do not request, expose, copy, or infer cookies, session tokens, passwords, or
+  Browser profile paths.
+- Do not use arbitrary JavaScript, CDP, custom protocols, `file:` URLs, or
+  `data:` navigation.
+- A tab belongs to one Rudder run. Do not guess or reuse a tab id from another
+  run.
+- If a tool returns `browser_disabled`, stop and report that Browser is disabled
+  in Settings. If it returns `browser_unavailable`, report that Rudder Desktop
+  is not connected. Do not work around either state with another browser unless
+  the user explicitly asks for that alternative.
+- If a tool returns `browser_runtime_unsupported`, report that the current
+  runtime cannot control Rudder Browser. Do not simulate Browser control with
+  shell requests or another browser.
+- If a ref is stale, covered, disabled, or changed, call `rudder_browser_read`
+  again instead of guessing. If a tab reaches a timeout or disappears, list
+  tabs before retrying so a late action is not duplicated.
+
+Read [references/tool-contract.md](references/tool-contract.md) when exact tool
+arguments, result fields, or stable error meanings are needed.

package/resources/bundled-skills/browser/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Browser"
+  short_description: "Control Rudder built-in Browser tabs safely"
+  default_prompt: "Use $browser to open and interact with a web page in the Rudder built-in Browser."

package/resources/bundled-skills/browser/references/tool-contract.md

@@ -0,0 +1,73 @@
+# Rudder Browser Tool Contract
+
+Browser tools are exposed by the first-party `rudder-control-plane` transport
+only when the deployment is `local_trusted`, the instance Browser capability is
+enabled, and the current adapter is `claude_local`, `codex_local`,
+`opencode_local`, or `pi_local`. Runtime fallback recomputes this gate and removes
+the Browser skill, capability flag, and tools together when the target runtime is
+not eligible.
+
+## Tools
+
+- `rudder_browser_tabs`: list tabs owned by the current run.
+- `rudder_browser_open`: open an HTTP(S) URL and return its `tabId`.
+- `rudder_browser_navigate`: navigate a run-owned `tabId` to an HTTP(S) URL.
+- `rudder_browser_read`: return the current URL, title, readable text, and
+  interactive elements with opaque `ref` values.
+- `rudder_browser_click`: click one `ref` from the latest page snapshot.
+- `rudder_browser_type`: replace the value at one `ref`; optional `submit`
+  submits the owning form after input events are dispatched.
+- `rudder_browser_screenshot`: return a PNG capture for the current tab.
+- `rudder_browser_close`: close one run-owned tab.
+
+All tools derive `orgId`, `agentId`, and `runId` from Rudder runtime context.
+Those values are never valid model arguments. Browser authorization requires a
+run-scoped Agent JWT; the JWT's signed run is authoritative and any transport
+run header is only a matching assertion.
+
+## Stable Errors
+
+- `browser_disabled` (`409`): Browser is disabled in instance Settings. Do not
+  retry until the operator enables it.
+- `browser_unavailable` (`503`): no live Rudder Desktop Browser Broker is
+  accepting commands. Retry only after Desktop reconnects.
+- `browser_runtime_unsupported` (`403`): the current Agent runtime is not one of
+  the supported local Browser adapters. Do not retry through the same runtime.
+- `browser_run_required` (`400`): the runtime did not provide a run id.
+- `agent_run_context_mismatch` (`403`): a transport run header does not match
+  the run signed into the runtime credential. Do not retry with another run id.
+- `browser_run_credential_required` (`403`): the request used a credential that
+  is not bound to one run. Browser cannot be authorized with a long-lived Agent
+  API key plus a caller-supplied run id.
+- `browser_run_forbidden` (`403`): the run identity does not match the authenticated
+  organization and Agent. Do not retry with guessed identity.
+- `browser_run_inactive` (`409`): the run has already ended. Do not retry from
+  that run.
+- `browser_tab_not_found` (`404`): the tab no longer exists. List tabs and open
+  a replacement when needed.
+- `browser_tab_forbidden` (`403`): the tab belongs to another run. Never probe
+  or reuse it.
+- `browser_ref_not_found` (`404`): the element ref is stale, changed, hidden,
+  covered, disabled, or no longer belongs to the latest snapshot. Read again;
+  refs are intentionally invalidated after every click or type action.
+- `browser_unsafe_url` (`422`): the URL, protocol, or Rudder control-plane
+  origin is not allowed. Correct the URL instead of retrying it unchanged.
+- `browser_invalid_argument` (`400` or `422`): a tool argument is malformed or
+  outside its bound. Correct the request before retrying.
+- `browser_navigation_failed` (`502`): Chromium could not complete navigation.
+  Inspect or list the tab before deciding whether to retry.
+- `browser_tab_limit` (`429`): the run or Desktop tab limit was reached. Reuse
+  or close an owned tab before opening another. V1 permits eight tabs per run
+  and 32 Agent Browser tabs per Desktop process.
+- `browser_timeout` (`504`): the command expired in a queue or timed out during
+  execution. List tabs before retrying because an active timed-out tab is
+  closed to prevent late side effects.
+- `browser_result_too_large` (`413`): the screenshot exceeded the bounded
+  response size. Use `read` or another narrower evidence path.
+- `browser_broker_protocol_error` / `browser_broker_error` (`502`): Desktop
+  returned an invalid or internal Broker result. Do not blindly retry a
+  consequential action; inspect the tab or report the failure.
+
+The Browser profile may contain sessions shared by organizations in the same
+local Rudder instance. Tab ownership remains isolated by organization, Agent,
+and run. Shared login state never broadens the task's authorization boundary.

package/resources/bundled-skills/rudder/SKILL.md

@@ -9,7 +9,7 @@ This is the control-plane practice skill for agents working under Rudder. Rudder
 work is not only "run a command"; it is a governed loop:
 
 ```text
-Goal -> Issue -> Agent run -> Review -> Feedback -> Learning -> Better future runs
+Goal -> Plan -> Chat or Issue -> Agent run -> Review -> Feedback -> Learning -> Better future runs
 ```
 
 Runtime-owned heartbeat prompts provide the fixed heartbeat execution flow only
@@ -31,7 +31,10 @@ organization-skill operations.
 
 ## Control-Plane Rails
 
-- Always checkout before doing task work.
+- Chat and issues are parallel execution surfaces. Continue chat-scoped work in
+  Chat unless the operator explicitly asks for issue structure or team policy
+  requires governed issue fields.
+- For issue-scoped task work, always checkout before starting execution.
 - Never retry a `409` from checkout.
 - Never look for unassigned work.
 - In issue comments, use `[Agent Name](agent://agent-id?intent=wake)` only when

package/resources/bundled-skills/rudder/references/cli-reference.md

@@ -2,6 +2,15 @@
 
 Stable compatibility contract for agents using the bundled `rudder` skill. Prefer first-party Rudder MCP tools when the runtime exposes them; use these CLI commands as fallback when MCP is unavailable or a Rudder MCP tool returns a transport/configuration error.
 
+## Chat And Issue Surface Boundary
+
+Chat and issues are parallel ways to advance real tasks. Chat supports
+conversation-driven execution; issues add explicit ownership, status, priority,
+dependencies, and review structure. Do not create or require an issue merely
+because Chat work is executable, long-running, reviewable, or durable. Use the
+issue checkout and close-out commands below only for issue-scoped work, or when
+operator intent or team governance requires that structure.
+
 ## Defaults
 
 - First-party MCP tools use the stable `rudder_<capability_id>` naming convention, for example `rudder_issue_checkout` for `issue.checkout`.
@@ -59,6 +68,14 @@ Direct API fallback is allowed for heartbeat close-out only when a required CLI
 | `rudder_skill_import` | `rudder skill import --org-id <id> --source <source>` | Import a skill package into the organization skill library. | yes | required | no | attached when available |
 | `rudder_skill_scan_local` | `rudder skill scan-local --org-id <id> [--roots <csv>]` | Scan local roots for skill packages and import new ones. | yes | required | no | attached when available |
 | `rudder_skill_scan_projects` | `rudder skill scan-projects --org-id <id> [--project-ids <csv>] [--workspace-ids <csv>]` | Scan the org workspace and any legacy project workspace records for skill packages and import new ones. | yes | required | no | attached when available |
+| `rudder_browser_tabs` | `rudder browser tabs` | List Browser tabs owned by the current Rudder agent run. | no | required | required | required |
+| `rudder_browser_open` | `rudder browser open <url>` | Open a run-owned tab in the Rudder Browser. | yes | required | required | required |
+| `rudder_browser_navigate` | `rudder browser navigate <tab-id> <url>` | Navigate a run-owned Rudder Browser tab. | yes | required | required | required |
+| `rudder_browser_read` | `rudder browser read <tab-id>` | Read a structured snapshot from a run-owned Rudder Browser tab. | no | required | required | required |
+| `rudder_browser_click` | `rudder browser click <tab-id> <ref>` | Click an element reference returned by Rudder Browser read. | yes | required | required | required |
+| `rudder_browser_type` | `rudder browser type <tab-id> <ref> --text <text>` | Type into an element reference in a run-owned Rudder Browser tab. | yes | required | required | required |
+| `rudder_browser_screenshot` | `rudder browser screenshot <tab-id>` | Capture a screenshot of a run-owned Rudder Browser tab. | no | required | required | required |
+| `rudder_browser_close` | `rudder browser close <tab-id>` | Close a run-owned Rudder Browser tab. | yes | required | required | required |
 | `rudder_automation_list` | `rudder automation list --org-id <id>` | List automations for an organization with compact local filters. | no | required | no | no |
 | `rudder_automation_get` | `rudder automation get <automation-id>` | Read one automation detail including triggers and recent runs. | no | no | no | no |
 | `rudder_automation_runs` | `rudder automation runs <automation-id>` | List recent runs for one automation. | no | no | no | no |

package/skills/browser/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: browser
+description: Control Rudder's built-in Browser with run-scoped tools for opening tabs, navigating, reading structured page snapshots, clicking, typing, taking screenshots, and closing tabs. Use when a task requires inspecting or interacting with a web page or a locally served app through the Rudder Browser.
+---
+
+# Browser
+
+Use the Rudder-managed Browser tools instead of launching another browser or
+trying to read browser profile data directly.
+
+## Workflow
+
+1. Call `rudder_browser_tabs` to reuse a tab when possible, or
+   `rudder_browser_open` with an `http:` or `https:` URL.
+2. Call `rudder_browser_read` before interacting. Use only element references
+   returned by the latest read result.
+3. Call `rudder_browser_click` or `rudder_browser_type` for one clear action.
+   Leave `submit` false unless submitting is explicitly intended. Every click
+   or type invalidates the snapshot refs, so read again before another action.
+4. Read again after navigation or mutation. Capture a screenshot when visual
+   evidence matters.
+5. Close tabs that are no longer needed.
+
+## Boundaries
+
+- Never pass organization, Agent, run, API, or Broker identity as tool input.
+  Rudder injects and verifies that context.
+- Treat an authenticated website session as available state, not as authority
+  to perform a purchase, publish, delete, send, approve, or other consequential
+  external action. Follow the task's approval boundary.
+- Do not request, expose, copy, or infer cookies, session tokens, passwords, or
+  Browser profile paths.
+- Do not use arbitrary JavaScript, CDP, custom protocols, `file:` URLs, or
+  `data:` navigation.
+- A tab belongs to one Rudder run. Do not guess or reuse a tab id from another
+  run.
+- If a tool returns `browser_disabled`, stop and report that Browser is disabled
+  in Settings. If it returns `browser_unavailable`, report that Rudder Desktop
+  is not connected. Do not work around either state with another browser unless
+  the user explicitly asks for that alternative.
+- If a tool returns `browser_runtime_unsupported`, report that the current
+  runtime cannot control Rudder Browser. Do not simulate Browser control with
+  shell requests or another browser.
+- If a ref is stale, covered, disabled, or changed, call `rudder_browser_read`
+  again instead of guessing. If a tab reaches a timeout or disappears, list
+  tabs before retrying so a late action is not duplicated.
+
+Read [references/tool-contract.md](references/tool-contract.md) when exact tool
+arguments, result fields, or stable error meanings are needed.

package/skills/browser/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Browser"
+  short_description: "Control Rudder built-in Browser tabs safely"
+  default_prompt: "Use $browser to open and interact with a web page in the Rudder built-in Browser."