@rynx-ai/cli 0.1.11-beta.3 → 0.1.11-beta.31

package/dist/browser-cli-args.d.ts

@@ -1,5 +1,5 @@
 import type { RuntimeBrowserBootstrapCredential } from "@rynx-ai/protocol/runtime-browser-bootstrap";
-export type BrowserCliSubcommand = "install" | "update" | "version" | "clean" | "open" | "status" | "pages" | "endpoint" | "snapshot" | "navigate" | "click" | "type" | "screenshot" | "close";
+export type BrowserCliSubcommand = "install" | "update" | "version" | "clean" | "open" | "status" | "pages" | "endpoint" | "snapshot" | "navigate" | "click" | "type" | "screenshot" | "headers" | "close";
 export interface BrowserCliArgs {
     subcommand: BrowserCliSubcommand;
     json: boolean;
@@ -17,6 +17,12 @@ export interface BrowserCliArgs {
     quality?: number;
     x?: number;
     y?: number;
+    headersAction?: "get" | "set";
+    headers?: string[];
+    expectedRevision?: string;
+    headersEnabled?: boolean;
+    clearHeaders?: boolean;
+    showHeaderValues?: boolean;
 }
 export interface BrowserCliTarget {
     runtimeSelector: string;

package/dist/browser-cli-args.js

@@ -29,17 +29,23 @@ const SPECS = {
         values: ["--output", "--format", "--quality", "--session"],
         flags: ["--json"],
     },
+    headers: {
+        values: ["--session", "--runtime", "--header", "--expected-revision"],
+        flags: ["--json", "--enable", "--disable", "--clear", "--show-values"],
+        positionalAction: true,
+    },
     close: { values: ["--session", "--runtime"], flags: ["--json"] },
 };
 export function parseBrowserCliArgs(args) {
     const subcommand = args[0];
     if (!isBrowserSubcommand(subcommand)) {
         throw new Error("browser: expected install, update, version, clean, open, status, pages, endpoint, " +
-            "snapshot, navigate, click, type, screenshot, or close");
+            "snapshot, navigate, click, type, screenshot, headers, or close");
     }
     const spec = SPECS[subcommand];
     const values = new Map();
     const flags = new Set();
+    const headerValues = [];
     const positionals = [];
     for (let index = 1; index < args.length; index += 1) {
         const arg = args[index];
@@ -51,13 +57,17 @@ export function parseBrowserCliArgs(args) {
                 continue;
             }
             if (spec.values.includes(arg)) {
-                if (values.has(arg))
+                if (arg !== "--header" && values.has(arg)) {
                     throw new Error(`browser ${subcommand}: duplicate option ${arg}`);
+                }
                 const value = args[index + 1];
                 if (!value || value.startsWith("--")) {
                     throw new Error(`browser ${subcommand}: ${arg} requires a value`);
                 }
-                values.set(arg, value);
+                if (arg === "--header")
+                    headerValues.push(value);
+                else
+                    values.set(arg, value);
                 index += 1;
                 continue;
             }
@@ -65,13 +75,13 @@ export function parseBrowserCliArgs(args) {
         }
         positionals.push(arg);
     }
-    if (!spec.positionalUrl && positionals.length > 0) {
+    if (!spec.positionalUrl && !spec.positionalAction && positionals.length > 0) {
         throw new Error(`browser ${subcommand}: unexpected argument ${positionals[0]}`);
     }
     if (positionals.length > 1) {
         throw new Error(`browser ${subcommand}: unexpected extra argument ${positionals[1]}`);
     }
-    if (positionals.length === 1 && values.has("--url")) {
+    if (spec.positionalUrl && positionals.length === 1 && values.has("--url")) {
         throw new Error("browser open: pass the URL once, either positionally or with --url");
     }
     const result = {
@@ -82,10 +92,45 @@ export function parseBrowserCliArgs(args) {
         ...(values.has("--version") ? { version: values.get("--version") } : {}),
         ...(values.has("--runtime") ? { runtime: values.get("--runtime") } : {}),
         ...(values.has("--session") ? { session: values.get("--session") } : {}),
-        ...(values.has("--url") || positionals[0]
+        ...(spec.positionalUrl && (values.has("--url") || positionals[0])
             ? { url: values.get("--url") ?? positionals[0] }
             : {}),
     };
+    if (subcommand === "headers") {
+        const action = positionals[0];
+        if (action !== "get" && action !== "set") {
+            throw new Error("browser headers: expected get or set");
+        }
+        if (flags.has("--enable") && flags.has("--disable")) {
+            throw new Error("browser headers set: choose either --enable or --disable");
+        }
+        result.headersAction = action;
+        if (headerValues.length > 0)
+            result.headers = headerValues;
+        if (values.has("--expected-revision")) {
+            result.expectedRevision = nonEmpty(values.get("--expected-revision"), "--expected-revision");
+        }
+        if (flags.has("--enable"))
+            result.headersEnabled = true;
+        if (flags.has("--disable"))
+            result.headersEnabled = false;
+        if (flags.has("--clear"))
+            result.clearHeaders = true;
+        if (flags.has("--show-values"))
+            result.showHeaderValues = true;
+        if (action === "get" && (headerValues.length > 0 ||
+            result.expectedRevision !== undefined ||
+            result.headersEnabled !== undefined ||
+            result.clearHeaders)) {
+            throw new Error("browser headers get: update options are not allowed");
+        }
+        if (action === "set" && result.showHeaderValues) {
+            throw new Error("browser headers set: --show-values is only valid with get");
+        }
+        if (action === "set" && headerValues.length > 0 && result.clearHeaders) {
+            throw new Error("browser headers set: --clear cannot be combined with --header");
+        }
+    }
     if (values.has("--ref"))
         result.ref = nonEmpty(values.get("--ref"), "--ref");
     if (values.has("--selector"))

package/dist/commands/browser.d.ts

@@ -1 +1,5 @@
+import type { RuntimeBrowserRequestHeadersPolicy } from "@rynx-ai/protocol/runtime-browser";
 export declare function runBrowserCommand(args: readonly string[]): Promise<number>;
+export declare function projectRequestHeadersPolicyForOutput(policy: RuntimeBrowserRequestHeadersPolicy, showValues: boolean): RuntimeBrowserRequestHeadersPolicy & {
+    valuesRedacted: boolean;
+};

package/dist/commands/browser.js

@@ -4,6 +4,7 @@ import { connectBrowserAutomation, } from "@rynx-ai/browser-cdp";
 import WebSocket from "ws";
 import { parseBrowserCliArgs, resolveBrowserCliTarget, } from "../browser-cli-args.js";
 import { callManagedRuntimeBrowser, callResidentRuntime, getResidentRuntimeLocalBrowserAutomationAccess, getResidentRuntimeLocalBrowserEndpoint, readOptionalManagedRuntimeBrowserCredential, } from "../control-client.js";
+import { createProgressDisplay } from "../progress-display.js";
 import { fail } from "./errors.js";
 export async function runBrowserCommand(args) {
     let parsed;
@@ -20,9 +21,18 @@ export async function runBrowserCommand(args) {
         const channel = browserReleaseChannel(parsed.channel);
         const { createBrowserArtifactManagementService } = await import("@rynx-ai/daemon/browser-artifacts");
         const artifacts = createBrowserArtifactManagementService();
-        const result = parsed.subcommand === "install"
-            ? await artifacts.install(parsed.version ? { version: parsed.version } : { channel }, parsed.json ? {} : { onProgress: (message) => console.error(message) })
-            : await artifacts.update({ channel }, parsed.json ? {} : { onProgress: (message) => console.error(message) });
+        const progress = parsed.json ? undefined : createProgressDisplay();
+        progress?.start(parsed.subcommand === "install" ? "正在安装 Rynx Browser" : "正在更新 Rynx Browser");
+        let result;
+        try {
+            result = parsed.subcommand === "install"
+                ? await artifacts.install(parsed.version ? { version: parsed.version } : { channel }, progress ? { onProgress: (message) => progress.update(message) } : {})
+                : await artifacts.update({ channel }, progress ? { onProgress: (message) => progress.update(message) } : {});
+        }
+        catch (error) {
+            progress?.clear();
+            throw error;
+        }
         if (parsed.json) {
             console.log(JSON.stringify({
                 resolved: result.resolved,
@@ -30,9 +40,7 @@ export async function runBrowserCommand(args) {
             }, null, 2));
         }
         else {
-            for (const message of result.messages)
-                console.log(message);
-            console.log(`Active Browser engine: Chrome for Testing ${result.installed.version}.`);
+            progress.succeed(`Rynx Browser 已就绪：Chrome for Testing ${result.installed.version}`);
         }
         return 0;
     }
@@ -75,6 +83,30 @@ export async function runBrowserCommand(args) {
         return 0;
     }
     const target = await resolveBrowserTarget(parsed);
+    if (parsed.subcommand === "headers") {
+        const current = await callBrowserRuntime(target, "browser.request-headers.get", {
+            sessionId: target.sessionId,
+        });
+        if (parsed.headersAction === "get") {
+            if (parsed.showHeaderValues && target.credential) {
+                fail("browser headers get: --show-values is unavailable inside a managed Session; " +
+                    "use the Session settings UI");
+            }
+            printRequestHeadersPolicy(current, parsed.json, parsed.showHeaderValues === true);
+            return 0;
+        }
+        const headers = parsed.clearHeaders
+            ? []
+            : parsed.headers?.map(parseCliRequestHeader) ?? current.headers;
+        const updated = await callBrowserRuntime(target, "browser.request-headers.set", {
+            sessionId: target.sessionId,
+            expectedRevision: parsed.expectedRevision ?? current.revision,
+            enabled: parsed.headersEnabled ?? current.enabled,
+            headers,
+        });
+        printRequestHeadersPolicy(updated, parsed.json, false);
+        return 0;
+    }
     if (isAutomationCommand(parsed.subcommand)) {
         return runBrowserAutomation(parsed, target);
     }
@@ -244,6 +276,43 @@ function printBrowserPages(state) {
         console.log(`${marker} ${page.pageId}  ${page.url}${title}`);
     }
 }
+function parseCliRequestHeader(value) {
+    const separator = value.indexOf(":");
+    if (separator <= 0) {
+        fail("browser headers set: --header must use 'Name: value'");
+    }
+    const name = value.slice(0, separator).trim();
+    const rawValue = value.slice(separator + 1);
+    return {
+        name,
+        value: rawValue.startsWith(" ") ? rawValue.slice(1) : rawValue,
+    };
+}
+function printRequestHeadersPolicy(policy, json, showValues) {
+    const output = projectRequestHeadersPolicyForOutput(policy, showValues);
+    if (json) {
+        console.log(JSON.stringify(output, null, 2));
+        return;
+    }
+    console.log(`Browser request headers ${output.enabled ? "enabled" : "disabled"} · revision ${output.revision}`);
+    if (output.headers.length === 0) {
+        console.log("  (no configured headers)");
+        return;
+    }
+    for (const header of output.headers)
+        console.log(`  ${header.name}: ${header.value}`);
+}
+export function projectRequestHeadersPolicyForOutput(policy, showValues) {
+    return {
+        enabled: policy.enabled,
+        revision: policy.revision,
+        valuesRedacted: !showValues,
+        headers: policy.headers.map((header) => ({
+            name: header.name,
+            value: showValues ? header.value : "[redacted]",
+        })),
+    };
+}
 function isAutomationCommand(subcommand) {
     return subcommand === "snapshot"
         || subcommand === "navigate"

package/dist/commands/plugin.js

@@ -1,14 +1,25 @@
 import { createInterface } from "node:readline/promises";
-import { cancelResidentPluginInstallation, commitResidentPluginInstallation, invokeResidentPluginCommand, listResidentPlugins, prepareResidentPluginInstallation, setResidentPluginEnabled, uninstallResidentPlugin, } from "../control-client.js";
+import { cancelResidentPluginInstallation, commitResidentPluginInstallation, prepareResidentPluginInstallation, setResidentPluginEnabled, uninstallResidentPlugin, } from "../control-client.js";
 import { fail } from "./errors.js";
-const PLUGIN_STDIN_MAX_BYTES = 256 * 1024;
 const PLUGIN_DIGEST_PATTERN = /^sha256-[A-Za-z0-9+/]{43}={0,2}$/;
 const CANONICAL_PLUGIN_ID_PATTERN = /^[a-z][a-z0-9-]{0,62}@[a-z0-9][a-z0-9-]{0,62}(?:\/[a-z0-9][a-z0-9._-]{0,99})?$/;
+const PLUGIN_USAGE = `Usage: rynx plugin <command|plugin-id>
+
+Management:
+  list
+  install <source|plugin@market> [--force] [--expect-digest <sha256-...>]
+  update <plugin@market> [--expect-digest <sha256-...>]
+  enable|disable|uninstall <plugin@market>
+
+Plugin commands:
+  <plugin-id> <command> [args...]
+  <plugin-id> --help`;
 export async function runPluginManageCommand(args, options = {}) {
     const [subcommand, pluginId] = args;
     switch (subcommand) {
         case "list": {
-            const plugins = await listResidentPlugins();
+            const { listInstalledPlugins } = await import("@rynx-ai/daemon/plugin-cli");
+            const plugins = listInstalledPlugins();
             console.log("Plugins");
             if (plugins.length === 0) {
                 console.log("  (none)");
@@ -126,23 +137,50 @@ export async function runPluginCommand(args) {
     const [pluginId, command] = args;
     if (!pluginId)
         fail("plugin: missing plugin id");
+    if (pluginId === "--help" || pluginId === "-h" || pluginId === "help") {
+        console.log(PLUGIN_USAGE);
+        return 0;
+    }
     if (["list", "install", "update", "uninstall", "enable", "disable"].includes(pluginId)) {
         return runPluginManageCommand(args);
     }
     if (!command)
         fail(`plugin ${pluginId}: missing command`);
-    const stdin = process.stdin.isTTY
-        ? undefined
-        : await readStdinBounded(PLUGIN_STDIN_MAX_BYTES);
-    const result = await invokeResidentPluginCommand(pluginId, args.slice(1), stdin === undefined ? {} : { stdin });
-    if (result.stdout)
-        process.stdout.write(result.stdout);
-    if (result.stderr)
-        process.stderr.write(result.stderr);
-    if (result.truncated) {
-        process.stderr.write("rynx: plugin command output was truncated by the daemon\n");
+    const pluginCli = await import("@rynx-ai/daemon/plugin-cli");
+    if (command === "--help" || command === "-h") {
+        console.log(pluginCli.installedPluginCommandUsage(pluginId));
+        return 0;
+    }
+    return runPluginCliWithForwardedSignals((signal) => pluginCli.runPluginCliCommand(pluginId, args.slice(1), {
+        stdio: "inherit",
+        signal,
+    }));
+}
+async function runPluginCliWithForwardedSignals(run) {
+    const controller = new AbortController();
+    let interruptedBy;
+    const interrupt = (signal) => {
+        interruptedBy ??= signal;
+        if (!controller.signal.aborted) {
+            controller.abort(new Error(`plugin command interrupted by ${signal}`));
+        }
+    };
+    const onSigint = () => interrupt("SIGINT");
+    const onSigterm = () => interrupt("SIGTERM");
+    process.on("SIGINT", onSigint);
+    process.on("SIGTERM", onSigterm);
+    try {
+        return (await run(controller.signal)).code;
+    }
+    catch (error) {
+        if (interruptedBy)
+            return interruptedBy === "SIGINT" ? 130 : 143;
+        throw error;
+    }
+    finally {
+        process.off("SIGINT", onSigint);
+        process.off("SIGTERM", onSigterm);
     }
-    return result.code;
 }
 function parseInstallationArgs(operation, args) {
     const target = args[0];
@@ -219,15 +257,3 @@ async function confirmInTerminal(message) {
         prompt.close();
     }
 }
-async function readStdinBounded(maxBytes) {
-    const chunks = [];
-    let bytes = 0;
-    for await (const chunk of process.stdin) {
-        const value = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        bytes += value.byteLength;
-        if (bytes > maxBytes)
-            fail(`plugin stdin exceeds ${maxBytes} bytes`);
-        chunks.push(value);
-    }
-    return Buffer.concat(chunks, bytes).toString("utf8");
-}

package/dist/commands/setup.js

@@ -3,10 +3,13 @@ import { chmodSync, existsSync, mkdirSync, openSync, closeSync, readFileSync, re
 import path from "node:path";
 import * as prompts from "@clack/prompts";
 import { AGENT_RUNTIME_IDS, getRuntimeProfile, loadConfig, rynxConfigFile, } from "@rynx-ai/core";
-import { inspectDaemonDiagnostics, prepareBundledPlugins, } from "@rynx-ai/daemon/setup-service";
+import { inspectDaemonDiagnostics, inspectSystemDependencies, prepareBundledPlugins, } from "@rynx-ai/daemon/setup-service";
+import { BUNDLED_TMUX_UNAVAILABLE_MESSAGE, resolveBundledTmux, } from "@rynx-ai/tmux";
+import { createProgressDisplay } from "../progress-display.js";
 import { fail } from "./errors.js";
 export async function runSetupCommand(args) {
     const options = parseSetupOptions(args);
+    const progress = options.json ? undefined : createProgressDisplay();
     const interactive = !options.nonInteractive &&
         !options.hasConfigurationArguments &&
         Boolean(process.stdin.isTTY && process.stdout.isTTY);
@@ -50,23 +53,30 @@ export async function runSetupCommand(args) {
         },
     };
     let failed = false;
+    progress?.start("正在准备 Rynx 内置插件");
     try {
         const plugins = await prepareBundledPlugins();
         result.plugins = {
             status: plugins.status,
             changed: [...plugins.installed, ...plugins.updated],
         };
+        progress?.succeed("Rynx 内置插件已就绪");
     }
     catch (error) {
         failed = true;
+        progress?.clear();
+        const detail = errorMessage(error);
         result.plugins = {
             status: "error",
-            detail: errorMessage(error),
+            detail,
         };
+        console.error(`Rynx 内置插件准备失败：${detail}`);
     }
+    progress?.start("正在检查 Rynx Browser");
     const diagnostics = await inspectDaemonDiagnostics();
     if (!diagnostics.browser.supported) {
         result.browser = { action: options.browser, status: "unsupported" };
+        progress?.succeed("当前平台不支持 Rynx Browser");
     }
     else if (diagnostics.browser.installedVersion) {
         result.browser = {
@@ -74,29 +84,39 @@ export async function runSetupCommand(args) {
             status: "ready",
             version: diagnostics.browser.installedVersion,
         };
+        progress?.succeed(`Rynx Browser 已就绪：${diagnostics.browser.installedVersion}`);
     }
     else if (options.browser !== "skip") {
+        progress?.update("正在安装 Rynx Browser");
         try {
             const { createBrowserArtifactManagementService } = await import("@rynx-ai/daemon/browser-artifacts");
-            const installed = await createBrowserArtifactManagementService().install({ channel: "stable" }, options.json
-                ? {}
-                : { onProgress: (message) => console.error(message) });
+            const installed = await createBrowserArtifactManagementService().install({ channel: "stable" }, progress ? { onProgress: (message) => progress.update(message) } : {});
             result.browser = {
                 action: options.browser,
                 status: "ready",
                 version: installed.installed.version,
             };
+            progress?.succeed(`Rynx Browser 已就绪：${installed.installed.version}`);
         }
         catch (error) {
             failed = true;
+            progress?.clear();
+            const detail = errorMessage(error);
             result.browser = {
                 action: options.browser,
                 status: "error",
-                detail: errorMessage(error),
+                detail,
             };
+            console.error(`Rynx Browser 安装失败：${detail}`);
         }
     }
-    if (options.json) {
+    else {
+        progress?.succeed("已跳过 Rynx Browser 安装");
+    }
+    if (options.resultFile) {
+        writeJsonAtomically(options.resultFile, result);
+    }
+    else if (options.json) {
         console.log(JSON.stringify(result, null, 2));
     }
     else if (interactive) {
@@ -140,13 +160,25 @@ export async function runDoctorCommand(args) {
         return { id, installed: !probe.error && probe.status === 0 };
     });
     const daemon = await inspectDaemonDiagnostics();
+    const tmuxBin = resolveBundledTmux();
+    const systemDependencies = tmuxBin
+        ? await inspectSystemDependencies({ tmuxBin })
+        : {
+            tmux: {
+                installed: false,
+                detail: BUNDLED_TMUX_UNAVAILABLE_MESSAGE,
+            },
+        };
     const result = {
-        ok: configError === undefined && runtimes.some((runtime) => runtime.installed),
+        ok: configError === undefined &&
+            runtimes.some((runtime) => runtime.installed) &&
+            systemDependencies.tmux.installed,
         configPath: rynxConfigFile(),
         config,
         configError,
         runtimes,
         daemon,
+        systemDependencies,
     };
     if (json)
         console.log(JSON.stringify(result, null, 2));
@@ -159,6 +191,7 @@ export async function runDoctorCommand(args) {
         for (const runtime of runtimes) {
             console.log(`${runtime.id}: ${runtime.installed ? "installed" : "not installed"}`);
         }
+        console.log(`tmux: ${systemDependencies.tmux.installed ? "installed" : "not installed"}`);
         if (daemon.browser.supported) {
             console.log(`browser: ${daemon.browser.installedVersion ?? daemon.browser.error ?? "not installed"}`);
         }
@@ -186,6 +219,17 @@ function parseSetupOptions(args) {
             options.nonInteractive = true;
             continue;
         }
+        if (arg === "--result-file") {
+            if (options.resultFile !== undefined)
+                fail("setup: duplicate option --result-file");
+            const value = args[index + 1];
+            if (!value || value.startsWith("--"))
+                fail("setup: --result-file requires a value");
+            options.resultFile = path.resolve(value);
+            options.nonInteractive = true;
+            index += 1;
+            continue;
+        }
         if (arg === "--install-browser" || arg === "--skip-browser") {
             if (options.browser !== "auto")
                 fail("setup: choose only one Browser action");
@@ -225,6 +269,9 @@ function parseSetupOptions(args) {
             fail(`setup: unknown option ${arg}`);
         }
     }
+    if (options.json && options.resultFile) {
+        fail("setup: choose either --json or --result-file");
+    }
     return options;
 }
 async function collectInteractiveSetup(config) {
@@ -290,14 +337,16 @@ function readRawConfig() {
     }
 }
 function writeConfigAtomically(config) {
-    const file = rynxConfigFile();
+    writeJsonAtomically(rynxConfigFile(), config);
+}
+function writeJsonAtomically(file, value) {
     const directory = path.dirname(file);
     mkdirSync(directory, { recursive: true, mode: 0o700 });
     const temporary = path.join(directory, `.${path.basename(file)}.${process.pid}.tmp`);
     let descriptor;
     try {
         descriptor = openSync(temporary, "wx", 0o600);
-        writeFileSync(descriptor, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+        writeFileSync(descriptor, `${JSON.stringify(value, null, 2)}\n`, "utf8");
         closeSync(descriptor);
         descriptor = undefined;
         renameSync(temporary, file);

package/dist/commands/skills.js

@@ -1,8 +1,8 @@
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { isSkillPathComponent } from "@rynx-ai/core";
 import { fail } from "./errors.js";
-const SKILL_NAME_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/;
 const MAX_SKILL_BYTES = 256 * 1024;
 const BUILTIN_SKILL_NAMES = ["browser", "emulator"];
 export async function runSkillsCommand(args) {
@@ -55,7 +55,7 @@ export async function listBuiltinSkills() {
     return guides.filter((guide) => guide !== null);
 }
 export async function readBuiltinSkill(name, full = false) {
-    if (!SKILL_NAME_PATTERN.test(name))
+    if (!isSkillPathComponent(name))
         return null;
     if (!BUILTIN_SKILL_NAMES.includes(name))
         return null;

package/dist/control-client.js

@@ -437,6 +437,8 @@ const MANAGED_BROWSER_RPC_METHODS = new Set([
     "browser.page.back",
     "browser.page.forward",
     "browser.page.reload",
+    "browser.request-headers.get",
+    "browser.request-headers.set",
 ]);
 /**
  * Invoke Browser control for the caller's own managed Session. Unlike the

package/dist/desktop-browser-host-client.js

@@ -1,14 +1,36 @@
-import { DESKTOP_BROWSER_HOST_MAX_BINARY_FRAME_BYTES, DESKTOP_BROWSER_HOST_MAX_CONTROL_FRAME_BYTES, DESKTOP_BROWSER_HOST_MAX_PENDING_COMMANDS, DESKTOP_BROWSER_HOST_PATH, DESKTOP_BROWSER_HOST_PROTOCOL_VERSION, encodeDesktopBrowserHostSurfaceFrame, parseDesktopBrowserHostClientFrame, parseDesktopBrowserHostServerFrame, } from "@rynx-ai/protocol/desktop-browser-host";
+import { DESKTOP_BROWSER_HOST_MAX_BINARY_FRAME_BYTES, DESKTOP_BROWSER_HOST_MAX_CONTROL_FRAME_BYTES, DESKTOP_BROWSER_HOST_MAX_PENDING_COMMANDS, DESKTOP_BROWSER_HOST_MINIMUM_PROTOCOL_VERSION, DESKTOP_BROWSER_HOST_PATH, DESKTOP_BROWSER_HOST_PROTOCOL_VERSION, encodeDesktopBrowserHostSurfaceFrame, parseDesktopBrowserHostClientFrame, parseDesktopBrowserHostServerFrame, } from "@rynx-ai/protocol/desktop-browser-host";
 import { WebSocket } from "ws";
 import { ensureDaemonControlEndpoint } from "./control-endpoint.js";
 const CONNECT_TIMEOUT_MS = 5_000;
 const MAX_BUFFERED_BYTES = DESKTOP_BROWSER_HOST_MAX_BINARY_FRAME_BYTES + DESKTOP_BROWSER_HOST_MAX_CONTROL_FRAME_BYTES;
 /** Open the sole resident daemon's authenticated loopback Desktop Host lease. */
 export async function connectResidentDesktopBrowserHost(options) {
+    options.signal?.throwIfAborted();
+    const endpoint = options.endpoint
+        ?? await ensureDaemonControlEndpoint({ signal: options.signal });
+    assertDesktopBrowserHostEndpoint(endpoint);
+    try {
+        return await connectResidentDesktopBrowserHostVersion(options, endpoint, DESKTOP_BROWSER_HOST_PROTOCOL_VERSION);
+    }
+    catch (error) {
+        options.signal?.throwIfAborted();
+        if (!isLegacyProtocolRejection(error))
+            throw error;
+        // V1 daemons reject a V2 hello before issuing a lease. Reconnect once
+        // with their protocol so App and daemon can roll independently. Any
+        // failure after a lease is returned stays on that negotiated connection.
+        return connectResidentDesktopBrowserHostVersion(options, endpoint, DESKTOP_BROWSER_HOST_MINIMUM_PROTOCOL_VERSION).catch((legacyError) => {
+            throw new Error("Desktop Browser Host could not negotiate with the daemon", {
+                cause: new AggregateError([error, legacyError]),
+            });
+        });
+    }
+}
+async function connectResidentDesktopBrowserHostVersion(options, endpoint, protocolVersion) {
     options.signal?.throwIfAborted();
     const hello = parseDesktopBrowserHostClientFrame({
         type: "desktop.browser.host.hello",
-        protocolVersion: DESKTOP_BROWSER_HOST_PROTOCOL_VERSION,
+        protocolVersion,
         hostInstanceId: options.hostInstanceId,
         capabilities: {
             semanticPageBinding: options.capabilities.semanticPageBinding,
@@ -19,9 +41,6 @@ export async function connectResidentDesktopBrowserHost(options) {
     if (hello.type !== "desktop.browser.host.hello") {
         throw new Error("Desktop Browser Host hello parser returned the wrong frame");
     }
-    const endpoint = options.endpoint
-        ?? await ensureDaemonControlEndpoint({ signal: options.signal });
-    assertDesktopBrowserHostEndpoint(endpoint);
     const url = new URL(DESKTOP_BROWSER_HOST_PATH, `${endpoint.origin}/`);
     url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
     const socket = new WebSocket(url, {
@@ -139,7 +158,7 @@ export async function connectResidentDesktopBrowserHost(options) {
     socket.once("close", (code, reason) => {
         options.signal?.removeEventListener("abort", onAbort);
         if (!terminalError && !closing) {
-            terminalError = new Error(`Desktop Browser Host lease closed (${code})${reason.length > 0 ? `: ${reason.toString("utf8")}` : ""}`);
+            terminalError = new DesktopBrowserHostLeaseClosedError(code, `Desktop Browser Host lease closed (${code})${reason.length > 0 ? `: ${reason.toString("utf8")}` : ""}`);
         }
         if (!lease && terminalError)
             leaseReject(terminalError);
@@ -224,7 +243,7 @@ export async function connectResidentDesktopBrowserHost(options) {
                     signal: controller.signal,
                     reply: (result) => settle(command, {
                         type: "desktop.browser.host.reply",
-                        protocolVersion: DESKTOP_BROWSER_HOST_PROTOCOL_VERSION,
+                        protocolVersion: activeLease.protocolVersion,
                         leaseId: activeLease.leaseId,
                         commandId: command.commandId,
                         ok: true,
@@ -232,7 +251,7 @@ export async function connectResidentDesktopBrowserHost(options) {
                     }),
                     reject: (failure) => settle(command, {
                         type: "desktop.browser.host.reply",
-                        protocolVersion: DESKTOP_BROWSER_HOST_PROTOCOL_VERSION,
+                        protocolVersion: activeLease.protocolVersion,
                         leaseId: activeLease.leaseId,
                         commandId: command.commandId,
                         ok: false,
@@ -250,7 +269,7 @@ export async function connectResidentDesktopBrowserHost(options) {
             const nextSequence = eventSequence + 1;
             const frame = parseDesktopBrowserHostClientFrame({
                 type: "desktop.browser.host.event",
-                protocolVersion: DESKTOP_BROWSER_HOST_PROTOCOL_VERSION,
+                protocolVersion: activeLease.protocolVersion,
                 leaseId: activeLease.leaseId,
                 eventSequence: nextSequence,
                 event,
@@ -268,7 +287,7 @@ export async function connectResidentDesktopBrowserHost(options) {
             const encoded = encodeDesktopBrowserHostSurfaceFrame({
                 ...frame,
                 leaseId: activeLease.leaseId,
-            });
+            }, activeLease.protocolVersion);
             await sendBinary(socket, encoded);
         }),
         close: async () => {
@@ -285,6 +304,20 @@ export async function connectResidentDesktopBrowserHost(options) {
         },
     };
 }
+class DesktopBrowserHostLeaseClosedError extends Error {
+    closeCode;
+    constructor(closeCode, message) {
+        super(message);
+        this.closeCode = closeCode;
+        this.name = "DesktopBrowserHostLeaseClosedError";
+    }
+}
+function isLegacyProtocolRejection(error) {
+    return error instanceof DesktopBrowserHostLeaseClosedError &&
+        // 4400 is the pre-V2 daemon's generic invalid-frame response. 1002 covers
+        // standards-based V1 peers; 4406 is the explicit unsupported-version code.
+        (error.closeCode === 1002 || error.closeCode === 4400 || error.closeCode === 4406);
+}
 async function sendBinary(socket, bytes) {
     if (socket.readyState !== WebSocket.OPEN)
         throw new Error("Desktop Browser Host lease is closed");

package/dist/progress-display.d.ts

@@ -0,0 +1,7 @@
+export interface ProgressDisplay {
+    start(message: string): void;
+    update(message: string): void;
+    succeed(message: string): void;
+    clear(): void;
+}
+export declare function createProgressDisplay(): ProgressDisplay;

package/dist/progress-display.js

@@ -0,0 +1,78 @@
+import * as prompts from "@clack/prompts";
+const DOWNLOAD_PERCENT_PATTERN = /下载进度：(\d{1,3})%$/u;
+export function createProgressDisplay() {
+    if (!prompts.isTTY(process.stdout) || prompts.isCI()) {
+        return {
+            start: (message) => console.log(message),
+            update: (message) => console.log(message),
+            succeed: (message) => console.log(message),
+            clear: () => undefined,
+        };
+    }
+    const spinner = prompts.spinner({ output: process.stdout });
+    const progress = prompts.progress({
+        output: process.stdout,
+        max: 100,
+        size: 28,
+        style: "block",
+    });
+    let spinnerActive = false;
+    let progressActive = false;
+    let completedPercent = 0;
+    const clear = () => {
+        if (progressActive)
+            progress.clear();
+        if (spinnerActive)
+            spinner.clear();
+        progressActive = false;
+        spinnerActive = false;
+        completedPercent = 0;
+    };
+    const finishDownload = () => {
+        if (!progressActive)
+            return;
+        progress.stop("Chrome for Testing 下载完成");
+        progressActive = false;
+        completedPercent = 0;
+    };
+    return {
+        start(message) {
+            clear();
+            spinner.start(message);
+            spinnerActive = true;
+        },
+        update(message) {
+            const match = DOWNLOAD_PERCENT_PATTERN.exec(message);
+            if (match) {
+                const percent = Math.min(100, Number(match[1]));
+                if (spinnerActive) {
+                    spinner.clear();
+                    spinnerActive = false;
+                }
+                if (!progressActive) {
+                    progress.start(message);
+                    progressActive = true;
+                }
+                progress.advance(percent - completedPercent, message);
+                completedPercent = percent;
+                return;
+            }
+            finishDownload();
+            if (spinnerActive)
+                spinner.message(message);
+            else {
+                spinner.start(message);
+                spinnerActive = true;
+            }
+        },
+        succeed(message) {
+            finishDownload();
+            if (spinnerActive)
+                spinner.stop(message);
+            else
+                prompts.log.success(message);
+            spinnerActive = false;
+        },
+        clear,
+    };
+}

package/dist/standalone.js

@@ -1,5 +1,6 @@
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { resolveBundledTmux } from "@rynx-ai/tmux";
 import { installedVersion } from "./version.js";
 import { ensureDaemonControlEndpoint, resolveDaemonControlEndpoint, } from "./control-endpoint.js";
 /** Resolve the canonical Builtin Skill directory shipped by this exact CLI. */
@@ -8,6 +9,7 @@ export function standaloneBuiltinSkillsDirectory(moduleUrl = import.meta.url) {
 }
 export async function startStandaloneDaemon(options = {}) {
     const cliVersion = installedVersion();
+    const tmuxBin = resolveBundledTmux();
     const { startDaemon } = await import("@rynx-ai/daemon/lifecycle");
     return startDaemon({
         force: options.restart ?? false,
@@ -16,6 +18,7 @@ export async function startStandaloneDaemon(options = {}) {
             builtinSkillsDir: standaloneBuiltinSkillsDirectory(),
             cliVersion,
             productVersion: cliVersion,
+            ...(tmuxBin ? { tmuxBin } : {}),
         },
     });
 }

package/dist/usage.d.ts

@@ -1 +1 @@
-export declare const USAGE = "Usage: rynx <command>\n\nGeneral:\n  version [--json] | --version\n                     print the installed Rynx version\n\nSetup:\n  setup [--non-interactive] [--default-runtime <codex|traex|claude>]\n        [--host <host>] [--port <port>] [--log-level <level>]\n        [--install-browser|--skip-browser] [--json]\n                     initialize configuration and local dependencies\n  doctor             read-only health check\n\nLifecycle:\n  start | restart | stop | status | logs\n  update [version] [--check] [--json]\n\nPlugins:\n  market list\n  market add <git-or-local-source> [--alias <id>]\n  market refresh [market-id]\n  market remove <market-id>\n  plugin list\n  plugin install <source|plugin@market> [--force] [--expect-digest <sha256-...>]\n  plugin update <plugin@market> [--expect-digest <sha256-...>]\n  plugin enable|disable|uninstall <plugin@market>\n  plugin <plugin@market> <command>  invoke a plugin-owned command\n\nAgents:\n  agent list\n  agent show <id>\n  agent add <id>\n  agent rm <id>\n\nBuiltin Skills:\n  skills list [--json]\n  skills get <browser|emulator> [--full] [--json]\n\nMaintenance:\n  cleanup sessions [--dry-run]\n\nEmulator:\n  emulator <args...>\n\nRemote Runtime:\n  runtime share --address <host|ws-url> [--label <label>] [--json]\n  runtime add --pairing-code <rynx://...> [--name <name>]\n  runtime list [--json]\n  runtime test <local|daemon-id> [--json]\n  runtime forget <daemon-id>\n  runtime clients list [--json]\n  runtime clients revoke <grant-id>\n\nSessions:\n  session fork <session-id> [--title <title>] [--json]\n\nBrowser:\n  browser install|update|version|clean [...]\n  browser open [url] [--session <id>] [--runtime <local|daemon-id>] [--json]\n  browser status|pages|close [--session <id>] [--runtime <local|daemon-id>] [--json]\n  browser endpoint [--ensure] [--session <local-id>] [--json]\n  browser snapshot [--session <local-id>] [--json]\n  browser navigate <url> [--session <local-id>] [--json]\n  browser click (--ref <ref>|--selector <css>|--x <n> --y <n>) [--session <local-id>] [--json]\n  browser type (--ref <ref>|--selector <css>) --text <text> [--session <local-id>] [--json]\n  browser screenshot --output <absolute-path> [--session <local-id>] [--json]\n";
+export declare const USAGE = "Usage: rynx <command>\n\nGeneral:\n  version [--json] | --version\n                     print the installed Rynx version\n\nSetup:\n  setup [--non-interactive] [--default-runtime <codex|traex|claude>]\n        [--host <host>] [--port <port>] [--log-level <level>]\n        [--install-browser|--skip-browser] [--json|--result-file <path>]\n                     initialize configuration and local dependencies\n  doctor             read-only health check\n\nLifecycle:\n  start | restart | stop | status | logs\n  update [version] [--check] [--json]\n\nPlugins:\n  market list\n  market add <git-or-local-source> [--alias <id>]\n  market refresh [market-id]\n  market remove <market-id>\n  plugin list\n  plugin install <source|plugin@market> [--force] [--expect-digest <sha256-...>]\n  plugin update <plugin@market> [--expect-digest <sha256-...>]\n  plugin enable|disable|uninstall <plugin@market>\n  plugin <plugin@market> <command>  invoke a plugin-owned command\n\nAgents:\n  agent list\n  agent show <id>\n  agent add <id>\n  agent rm <id>\n\nBuiltin Skills:\n  skills list [--json]\n  skills get <browser|emulator> [--full] [--json]\n\nMaintenance:\n  cleanup sessions [--dry-run]\n\nEmulator:\n  emulator <args...>\n\nRemote Runtime:\n  runtime share --address <host|ws-url> [--label <label>] [--json]\n  runtime add --pairing-code <rynx://...> [--name <name>]\n  runtime list [--json]\n  runtime test <local|daemon-id> [--json]\n  runtime forget <daemon-id>\n  runtime clients list [--json]\n  runtime clients revoke <grant-id>\n\nSessions:\n  session fork <session-id> [--title <title>] [--json]\n\nBrowser:\n  browser install|update|version|clean [...]\n  browser open [url] [--session <id>] [--runtime <local|daemon-id>] [--json]\n  browser status|pages|close [--session <id>] [--runtime <local|daemon-id>] [--json]\n  browser endpoint [--ensure] [--session <local-id>] [--json]\n  browser snapshot [--session <local-id>] [--json]\n  browser navigate <url> [--session <local-id>] [--json]\n  browser click (--ref <ref>|--selector <css>|--x <n> --y <n>) [--session <local-id>] [--json]\n  browser type (--ref <ref>|--selector <css>) --text <text> [--session <local-id>] [--json]\n  browser screenshot --output <absolute-path> [--session <local-id>] [--json]\n";

package/dist/usage.js

@@ -7,7 +7,7 @@ General:
 Setup:
   setup [--non-interactive] [--default-runtime <codex|traex|claude>]
         [--host <host>] [--port <port>] [--log-level <level>]
-        [--install-browser|--skip-browser] [--json]
+        [--install-browser|--skip-browser] [--json|--result-file <path>]
                      initialize configuration and local dependencies
   doctor             read-only health check
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynx-ai/cli",
-  "version": "0.1.11-beta.3",
+  "version": "0.1.11-beta.31",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rynx-ai/rynx.git",
@@ -10,7 +10,7 @@
   "license": "MIT",
   "type": "module",
   "engines": {
-    "node": ">=22"
+    "node": ">=22.16"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -51,11 +51,12 @@
   "dependencies": {
     "@clack/prompts": "^1.6.0",
     "ws": "^8.21.0",
-    "@rynx-ai/core": "0.1.11-beta.3",
-    "@rynx-ai/browser-cdp": "0.1.11-beta.3",
-    "@rynx-ai/emulator": "0.1.11-beta.3",
-    "@rynx-ai/daemon": "0.1.11-beta.3",
-    "@rynx-ai/protocol": "0.1.11-beta.3"
+    "@rynx-ai/core": "0.1.11-beta.31",
+    "@rynx-ai/daemon": "0.1.11-beta.31",
+    "@rynx-ai/browser-cdp": "0.1.11-beta.31",
+    "@rynx-ai/emulator": "0.1.11-beta.31",
+    "@rynx-ai/protocol": "0.1.11-beta.31",
+    "@rynx-ai/tmux": "0.1.11-beta.31"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"

package/skill-guides/browser.md

@@ -1,6 +1,6 @@
 ---
 name: browser
-description: Use the bundled Rynx CLI to inspect and automate the Browser owned by the active Rynx Session with snapshots, accessibility refs, navigation, clicks, typing, screenshots, page inspection, and safe failure handling.
+description: Use the bundled Rynx CLI to inspect and automate the Browser owned by the active Rynx Session, and to read or update the Session-wide Browser request-header policy, with safe failure handling.
 ---
 
 # Rynx Browser
@@ -61,6 +61,46 @@ rynx browser screenshot --output /absolute/path/page.png --json
 Do not request or connect to the raw CDP endpoint unless diagnosing Rynx itself.
 Do not close a Browser generation the user still needs.
 
+## Session-wide request headers
+
+Inspect the current policy when needed. Header values are redacted in the
+managed Session CLI so secrets do not enter the Agent transcript:
+
+```sh
+rynx browser headers get --json
+```
+
+Set headers for every current and future Browser page in this Rynx Session.
+The policy covers document and subresource requests to every origin:
+
+```sh
+rynx browser headers set \
+  --enable \
+  --header 'X-Environment: staging' \
+  --header 'X-Request-Source: rynx' \
+  --json
+```
+
+Changes take effect immediately. Existing pages use the new values on their
+next request or refresh; requests already in flight are unchanged. Closing and
+reopening the Session Browser keeps the policy. Deleting the Session or
+restarting the resident daemon removes it, and a forked Session starts with no
+header policy.
+
+`set` reads the current policy internally, so `--disable` without `--header`
+stops sending headers while retaining configured rows without exposing their
+values. Use `--clear` to remove all rows. When an earlier `get` is the basis for
+an edited update, pass its opaque revision with
+`--expected-revision <revision>`; a conflict means another actor changed the
+policy, so fetch it again instead of retrying stale values.
+
+Header names are case-insensitively unique. Browser-controlled or unsafe names
+such as `Authorization`, `Cookie`, `Host`, `Origin`, `Referer`, `User-Agent`,
+`Content-Length`, `Proxy-*`, and `Sec-*` are rejected. Do not put header values
+in logs, chat messages, or error reports. Both text and JSON CLI output use
+`[redacted]`; use the Session settings UI when a human must inspect or edit a
+sensitive value. Do not attempt to bypass this boundary from an active Session.
+
 ## Failure handling
 
 - On endpoint access failure, follow **Sandbox boundary** and make no fallback

package/skills/rynx-cli/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: rynx-cli
-description: Use the bundled `rynx` CLI when a task needs to inspect or automate the Browser or Emulator owned by the active Rynx Session. Load the version-matched Browser or Emulator guide from the CLI before operating it. Prefer this over direct CDP, browser drivers, `serve-sim`, `simctl`, adb, guessed ports, or guessed App installations.
+description: Use the bundled `rynx` CLI when a task needs to inspect or automate the Browser or Emulator owned by the active Rynx Session, or configure Session-wide Browser request headers. Load the version-matched Browser or Emulator guide from the CLI before operating it. Prefer this over direct CDP, browser drivers, Header-modifying extensions, `serve-sim`, `simctl`, adb, guessed ports, or guessed App installations.
 ---
 
 # Rynx CLI
@@ -21,9 +21,14 @@ rynx skills get browser
 rynx skills get emulator
 ```
 
-Use `browser` for Browser inspection/automation and `emulator` for mobile device
-inspection/control. Do not load an unrelated guide. These commands read guides
-shipped in the exact CLI npm package and do not contact the daemon or network.
+Use `browser` for Browser inspection/automation and Session-wide Browser request
+headers, and `emulator` for mobile device inspection/control. Do not load an
+unrelated guide. These commands read guides shipped in the exact CLI npm
+package and do not contact the daemon or network.
+
+The managed Session CLI redacts configured Browser Header values. Do not try to
+recover them through alternate endpoints or tools; a human can inspect or edit
+sensitive values in Session settings.
 
 If `rynx skills get <topic>` itself cannot execute, report its exact error and
 stop. Do not scan `/Applications`, use `find` or `mdfind`, run `open`, `open -a`,