@tiens.nguyen/gu-cli 1.0.834 → 1.0.836

package/gu-cli.mjs

@@ -139,7 +139,7 @@ Usage:
   gu-cli workspace revert [runId]          # undo an agent run's file edits from its backups
   gu-cli mongo migrate-from-docker         # macOS: move a Docker MongoDB to native (Homebrew)
   gu-cli clear [--scratch|--keep-history] [--yes]  # back to a fresh machine (asks first)
-  gu-cli fix-path                          # macOS/Linux: put npm's global bin folder on PATH
+  gu-cli fix-path [--check]                # put npm's global folder on PATH (Windows: check, then ask)
                                                #   (what the install does, if npm skipped it)
   gu-cli fix-powershell [--check]          # Windows: drop PowerShell's built-in \`gu\` alias
                                                #   (it is Get-Unique and shadows this CLI)
@@ -854,8 +854,9 @@ const currentApiVersion = async () => {
     }
     // RESTART LAST, and only after the new version can actually run — currentVersion() now
     // refuses a deps-less directory, so a failed install above leaves the old one serving.
-    const pid = Number((await readFile(ce.API_PID_FILE, "utf8").catch(() => "")).trim());
-    if (Number.isFinite(pid) && pid > 0) {
+    // Only while the pid on record is still the local API (#373): a stale file's id may be another program's.
+    const { pid } = await ce.apiPidToStop();
+    if (pid) {
       try { process.kill(pid, "SIGTERM"); } catch { /* already gone */ }
       // WAIT FOR THE PORT, not just for the signal. SIGTERM returns immediately and the old
       // server keeps the socket for a moment; starting the new one into that gap fails as
@@ -883,9 +884,9 @@ const currentApiVersion = async () => {
   }
 
   if (sub === "stop") {
-    const pid = Number((await readFile(ce.API_PID_FILE, "utf8").catch(() => "")).trim());
-    if (!Number.isFinite(pid) || pid <= 0) {
-      console.log("\n  No local API pid on record.\n");
+    const { pid, why } = await ce.apiPidToStop();
+    if (!pid) {
+      console.log(`\n  Nothing stopped: ${why}.\n`);
       process.exit(0);
     }
     try {
@@ -946,9 +947,9 @@ const currentApiVersion = async () => {
    * ANSWERING before starting the new one.
    */
   if (sub === "restart") {
-    const pid = Number((await readFile(ce.API_PID_FILE, "utf8").catch(() => "")).trim());
+    const { pid } = await ce.apiPidToStop();
     const before = await ce.probeLocalApi();
-    if (Number.isFinite(pid) && pid > 0) {
+    if (pid) {
       try {
         process.kill(pid, "SIGTERM");
         console.log(`\n  Stopping the local API (pid ${pid})…`);
@@ -964,7 +965,7 @@ const currentApiVersion = async () => {
       // Answering, but we have no pid to signal — started by hand, or the file was lost. Say so
       // rather than starting a SECOND one on the same port and reporting success.
       console.log(
-        `\n  The API is answering on ${ce.LOCAL_API_BASE} but there is no pid on record,` +
+        `\n  The API is answering on ${ce.LOCAL_API_BASE} but no pid on record is still it,` +
           "\n  so it cannot be stopped from here. Stop it yourself, then: gu-cli api start\n"
       );
       process.exit(1);
@@ -1067,8 +1068,39 @@ if (args[0] === "token-usage" || args[0] === "tokens") {
 // prefix worked out from where this file is installed, so there is one implementation.
 if (args[0] === "fix-path") {
   if (process.platform === "win32") {
-    console.log("  Nothing to fix here — on Windows npm's folder is on PATH through the registry.");
-    console.log("  If `gu` is not found in PowerShell: gu-cli fix-powershell");
+    // #375 (GitHub #156): Windows keeps PATH in the registry — check the SAVED one (what a new
+    // terminal reads), say what to do the way the installer does, and add it only on a yes.
+    const wp = await import("./win-path.mjs");
+    const { fileURLToPath } = await import("node:url");
+    const { dirname, join } = await import("node:path");
+    const { readFileSync } = await import("node:fs");
+    const here = dirname(fileURLToPath(import.meta.url));
+    const dir = wp.windowsPrefixOf(here) || String(process.env.npm_config_prefix || "");
+    if (!dir) {
+      console.log(`  gu is not installed globally with npm (${here}) — there is no PATH to fix.`);
+      console.log("  Install it with: irm https://gu.getmarsic.cc/install.ps1 | iex");
+      process.exit(0);
+    }
+    let version = "?";
+    try { version = JSON.parse(readFileSync(join(here, "package.json"), "utf8")).version; } catch { /* shown as ? */ }
+    const saved = wp.readSavedPaths();
+    const status = wp.pathStatus({ dir, sessionPath: process.env.Path || process.env.PATH || "", ...saved });
+    const psHost = Boolean(process.env.PSModulePath) && !process.env.PROMPT; // cmd.exe sets PROMPT
+    let summary = wp.installSummary({ version, location: wp.guLocation(dir), dir, status, powershell: psHost });
+    if (!status.saved && !args.includes("--check") && process.stdin.isTTY) {
+      const { createInterface } = await import("node:readline/promises");
+      const rl = createInterface({ input: process.stdin, output: process.stdout });
+      const answer = (await rl.question(`  Add ${dir} to your user PATH now? [Y/n] `)).trim().toLowerCase();
+      rl.close();
+      if (answer === "" || answer === "y" || answer === "yes") {
+        const r = wp.addToUserPath(dir);
+        if (r.ok) {
+          console.log("  Added. Open a new terminal and gu is there.");
+          summary = wp.installSummary({ version, location: wp.guLocation(dir), dir, status: { saved: true, session: status.session }, powershell: psHost });
+        } else console.log(`  Could not change PATH: ${r.error || "PowerShell refused"}`);
+      }
+    }
+    console.log(wp.formatSummary(summary, { color: Boolean(process.stdout.isTTY) }).replace(/^/gm, "  "));
     process.exit(0);
   }
   const { fixPathPrefix } = await import("./install-path.mjs");
@@ -1292,10 +1324,8 @@ if (args[0] === "clear" || args[0] === "reset") {
   // nothing on the machine any longer knows about.
   if (groups.includes("identity")) {
     const ce = await import("./client-expert-api.mjs");
-    const pid = Number(
-      (await readFile(ce.API_PID_FILE, "utf8").catch(() => "")).trim()
-    );
-    if (Number.isFinite(pid) && pid > 0) {
+    const { pid } = await ce.apiPidToStop();
+    if (pid) {
       try {
         process.kill(pid, "SIGTERM");
         console.log(`stopped the local API (pid ${pid})`);

package/gu-repl.mjs

@@ -139,8 +139,8 @@ import {
 import { completedFlush, splitLiveStream } from "./completed-flush.mjs";
 import { isScaffoldStep, isGroupableStep, stepGroupRows, relativizePaths } from "./step-group.mjs";
 import { clearLogsNoticeText } from "./clear-logs.mjs";
-import { browserReport, bridgeStatus, extensionDir, helpInstall, installExtensionFiles } from "./browser-command.mjs";
-import { commandLogFile, killShell, logTail, markAnnounced, readShells, recapQuestion, shellsToRecap, statusText as shellStatusText, renderShellDetails, shellPickerLabel, shellState, shellsNotice } from "./shell-details.mjs";
+import { allowIn, allowedIn, bridgeCommand, browserReport, bridgeStatus, extensionDir, findDevInstalls, helpInstall, installExtensionFiles, installSteps, localLeftovers, openExtensionsPage, removeLocalFiles, STORE_URL, stopBridge } from "./browser-command.mjs";
+import { commandLogFile, killShell, logTail, markAnnounced, readShells, recapQuestion, shellsToRecap, statusText as shellStatusText, renderShellDetails, shellPanelRows, shellPickerLabel, shellState, shellsNotice } from "./shell-details.mjs";
 import { discoverSkills, matchSkillCommand } from "./skills.mjs";
 import { appendNew, archivePathFor, archivedWorkspaceKey, markReset, seedArchive } from "./conversation-archive.mjs";
 import { addAllowRule, listServers as listMcpServers } from "./mcp-config.mjs";
@@ -954,7 +954,7 @@ const COMMANDS = [
   { name: "/open-presets", usage: "/open-presets [name]", desc: "your whole setup now, keys included, read-only in your editor — to copy to another computer; with a name, edit that preset" },
   { name: "/use-presets", usage: "/use-presets [name]", desc: "pick a saved preset and apply it — shows what changes, backs up your setup, asks first" },
   { name: "/doctor", desc: "check every configured model ANSWERS — especially the embedder, which a turn only reaches after several steps" },
-  { name: "/browser", desc: "the gu Chrome extension the agent uses to open and click web pages (UI tests) — is it connected, and how to install it" },
+  { name: "/browser", usage: "/browser [allow|forget|install|cleanup]", desc: "the gu Chrome extension the agent uses to open and click web pages (UI tests) — is it connected, and how to install it" },
   { name: "/shells", desc: "long commands the agent left running in the background — status, runtime, command, output; stop one" },
   { name: "/tokens", desc: "break down the last prompt sent to the coding model — how much of it was RAG" },
   { name: "/clear-logs", desc: "show what gu's logs, RAG indexes and old API versions take on disk, then ask what to clear — the logs first" },
@@ -9565,21 +9565,87 @@ function printShellDetails(rec) {
  */
 // /browser (#363): the extension's connection, else how to install it.
 async function showBrowser() {
+  const st = await bridgeStatus().catch(() => ({ running: false, connected: false }));
+  const lines = browserReport(st, { allowed: allowedIn(resolve(process.cwd())) });
+  console.log("");
+  for (const [i, l] of lines.entries()) console.log(GUTTER + (i === 0 && st.connected ? accent(l) : l.startsWith("⚠") ? yellow(l) : dim(l)));
+  console.log("");
+  paintBar();
+}
+
+// /browser install (#150): the extension, for the agent to use YOUR Chrome. Optional — gu's own
+// window needs nothing. The store page once published; until then the developer way.
+async function browserInstall() {
   let folder = extensionDir();
-  try {
-    folder = installExtensionFiles();
-  } catch (e) {
-    console.log(GUTTER + yellow(`could not copy the extension to ${folder}: ${e.message}`));
+  if (!STORE_URL) {
+    try {
+      folder = installExtensionFiles();
+    } catch (e) {
+      console.log(GUTTER + yellow(`could not copy the extension to ${folder}: ${e.message}`));
+    }
   }
-  const st = await bridgeStatus().catch(() => ({ running: false, connected: false }));
-  const lines = browserReport(st, folder);
+  await bridgeStatus().catch(() => null); // running, so a fresh install has something to connect to
   console.log("");
-  for (const [i, l] of lines.entries()) console.log(GUTTER + (i === 0 ? (st.connected ? accent(l) : l) : dim(l)));
-  if (!st.connected && st.running && helpInstall(folder)) console.log(GUTTER + dim("(Opened chrome://extensions and copied the folder to your clipboard.)"));
+  for (const l of installSteps(folder)) console.log(GUTTER + dim(l));
+  if (STORE_URL ? openExtensionsPage() : helpInstall(folder)) console.log(GUTTER + dim(STORE_URL ? "(Opened Chrome.)" : "(Opened chrome://extensions and copied the folder to your clipboard.)"));
   console.log("");
   paintBar();
 }
 
+// /browser cleanup (#145, #147): remove the developer (unpacked) install so the Chrome Web Store
+// one can take its place. Chrome lets no other program uninstall an extension, so: the connected
+// developer copy removes itself (chrome.management.uninstallSelf), other profiles get a Remove
+// click from you, and then gu's own files go.
+async function browserCleanup() {
+  if (listPickerActive || approvalActive) return;
+  const out = (l = "") => console.log(l ? GUTTER + l : "");
+  const st = await bridgeStatus({ start: false, waitMs: 0 }).catch(() => ({ connected: false }));
+  const devConnected = st.connected && st.installType === "development";
+  const installs = findDevInstalls();
+  const files = localLeftovers();
+  out();
+  if (!installs.length && !devConnected && !files.length) {
+    out(accent("✓ Nothing of the gu extension's developer install is left."));
+    out();
+    paintBar();
+    return;
+  }
+  out("The gu extension's developer install — what this removes:");
+  for (const f of installs) out(dim(`  • ${f.browser} — ${f.profile}: gu browser, unpacked (${f.id})`));
+  if (devConnected && !installs.some((f) => f.id === st.id)) out(dim(`  • the connected developer copy (${st.id})`));
+  for (const f of files) out(dim(`  • ${f.replace(homedir(), "~")}`));
+  if (st.connected && st.installType === "normal") out(dim("  (The Chrome Web Store copy is connected — it stays.)"));
+  out();
+  const go = await pickFromList(["Clean up", "Cancel"], 0);
+  if (go !== 0) {
+    out(dim("(cancelled)"));
+    out();
+    paintBar();
+    return;
+  }
+  if (devConnected) {
+    const r = await bridgeCommand({ action: "uninstall_self" });
+    out(r.ok ? accent(`✓ Removed from Chrome: the connected developer copy (${st.id}).`) : yellow(`could not remove the connected copy: ${r.error}`));
+    await new Promise((res) => setTimeout(res, 1500)); // Chrome writes its profile a moment later
+  }
+  const left = findDevInstalls().filter((f) => !(devConnected && f.id === st.id));
+  if (left.length) {
+    out("Chrome does not let gu remove an extension in another profile. In each of these,");
+    out("open chrome://extensions, find \"gu browser\" and click Remove:");
+    for (const f of left) out(dim(`  • ${f.browser} — ${f.profile}`));
+    if (openExtensionsPage()) out(dim("(Opened chrome://extensions.)"));
+    await pickFromList(["Done — I removed it", "Skip — leave it in that browser"], 0);
+  }
+  stopBridge();
+  await new Promise((res) => setTimeout(res, 300));
+  const gone = removeLocalFiles();
+  if (gone.length) out(accent(`✓ Deleted ${gone.length} of gu's file(s) in ~/.gonext.`));
+  const still = [...findDevInstalls().filter((f) => !(devConnected && f.id === st.id)).map((f) => `${f.browser} — ${f.profile}`), ...localLeftovers()];
+  out(still.length ? yellow(`Still there: ${still.join(", ")}`) : accent("✓ The developer install is gone. Install the Chrome Web Store copy, then /browser."));
+  out();
+  paintBar();
+}
+
 async function showShells() {
   if (listPickerActive || approvalActive) return;
   const width = Math.max(20, process.stdout.columns || 80);
@@ -9602,20 +9668,49 @@ async function showShells() {
     }
   }
   const rec = entries[pick].rec;
-  for (;;) {
-    const st = printShellDetails(rec);
-    if (following) break;
-    const actions = [{ id: "refresh", label: "Refresh" }];
-    if (st.state === "running") actions.push({ id: "kill", label: "Stop it", note: "kills the command and everything it started" });
-    actions.push({ id: "close", label: "Close" });
-    const act = await pickFromList(actions.map((a) => a.label + (a.note ? dim(`  · ${a.note}`) : "")), 0);
-    const id = act < 0 ? "close" : actions[act].id;
-    if (id === "refresh") continue;
-    if (id === "kill") {
-      await killShell(rec);
-      console.log(GUTTER + accent("✓ stopped") + dim(" — the agent sees it as killed next turn.\n"));
-    }
-    break;
+  // During a turn a picker would fight the turn for the keyboard: the details are printed instead.
+  if (following) {
+    printShellDetails(rec);
+    refreshShells();
+    paintBar();
+    return;
+  }
+  // AT THE BOTTOM, ABOVE THE BAR, LIVE; Esc closes (#376, GitHub #157) — Claude Code's Shell
+  // details. Nothing goes into the scrollback: the panel and its choices are one block that the
+  // picker wipes when it closes. Its height is fixed when it opens (what the screen allows, at most
+  // the details plus 15 output lines) and it redraws once a second, so a build's runtime and
+  // newest output move while you watch.
+  shellsViewed.add(String(rec.id));
+  const panel = (rowsWanted) => {
+    const st = shellState(rec);
+    let output = logTail(rec.log, { lines: 40 });
+    let outputFrom = "";
+    if (!output.length) {
+      const lf = commandLogFile(rec.command, rec.workdir);
+      if (lf) {
+        output = logTail(lf, { lines: 40 });
+        outputFrom = lf.startsWith(String(rec.workdir || "\0") + "/") ? lf.slice(String(rec.workdir).length + 1) : lf;
+      }
+    }
+    return shellPanelRows({
+      rec, st, output, outputFrom, width: Math.max(20, process.stdout.columns || 80) - 1, gutter: GUTTER, rows: rowsWanted,
+      footer: "Esc to close",
+      style: { title: (t) => bold(accent(t)), label: bold, running: accent, ok: accent, bad: red, dim },
+    });
+  };
+  const running = shellState(rec).state === "running";
+  const actions = running
+    ? [{ id: "kill", label: "Stop it", note: "kills the command and everything it started" }, { id: "close", label: "Close" }]
+    : [{ id: "close", label: "Close" }];
+  const headerRows = Math.max(8, Math.min(24, viewportHeight() - 3 - actions.length));
+  const act = await pickFromList(
+    actions.map((a) => a.label + (a.note ? dim(`  · ${a.note}`) : "")),
+    actions.length - 1, // Close: Enter on its own never stops a build
+    { header: panel, headerRows, refreshMs: 1000 },
+  );
+  if (act >= 0 && actions[act].id === "kill") {
+    await killShell(rec);
+    console.log(GUTTER + accent(`✓ stopped shell ${rec.id}`) + dim(" — the agent sees it as killed next turn.\n"));
   }
   refreshShells();
   paintBar();
@@ -10540,6 +10635,9 @@ const S3SETUP_PREFIX = "__S3SETUP__::";
 // "Always" writes an allow rule to ~/.gonext/mcp.json — the agent re-reads that file before every
 // call, so it counts from the next call of this same turn, and for every turn after.
 const MCPTOOL_PREFIX = "__MCPTOOL__::";
+// The agent's first use of the browser in a turn (#150): "<folder>\t<what it is about to do>".
+// "Always" puts the folder on ~/.gonext/browser-allow.json, which the agent reads before asking.
+const BROWSER_PREFIX = "__BROWSER__::";
 async function approvalPrompt(command) {
   // Wipe the live "thinking" status block BEFORE any picker draws, and stop the ticker from
   // redrawing it (the tick early-returns while a picker is active) — otherwise the block
@@ -10597,6 +10695,25 @@ async function approvalPrompt(command) {
     );
     return { allow: idx === 0, dontAsk: false };
   }
+  if (command.startsWith(BROWSER_PREFIX)) {
+    const [folder = "", what = ""] = command.slice(BROWSER_PREFIX.length).split("\t");
+    if (!process.stdin.isTTY) return { allow: false, dontAsk: false };
+    process.stdout.write(
+      "\n" + yellow("🌐 Allow gu to use a web browser?") + dim("  (no answer in ~3 min = No)") + "\n" +
+        dim(`  It wants to: ${what || "open a page"}`) + "\n" +
+        dim("  In your Chrome if the gu extension is there, else in gu's own Chrome window.") + "\n"
+    );
+    const idx = await pickFromList(["Yes, this time", "Yes, always in this folder", "No"], 0, { timeoutMs: 170000, timeoutIndex: 2 });
+    if (idx === 1) {
+      try {
+        allowIn(folder || resolve(process.cwd()), true);
+        process.stdout.write(dim("  (won't ask again here — /browser forget undoes it)\n"));
+      } catch (e) {
+        process.stdout.write(yellow(`  could not save that (${e?.message || e}) — allowed this once\n`));
+      }
+    }
+    return { allow: idx === 0 || idx === 1, dontAsk: false };
+  }
   if (command.startsWith(MCPTOOL_PREFIX)) {
     const [server = "", tool = "", preview = ""] = command.slice(MCPTOOL_PREFIX.length).split("\t");
     if (!process.stdin.isTTY) return { allow: false, dontAsk: false };
@@ -10707,6 +10824,12 @@ let listDeleteRequested = false;
 // /use-presets' { o: "open" } (#312, #322). Null unless a caller asks, like ctrl+d above.
 let listKeys = null;
 let listKeyAction = "";
+// A PANEL ABOVE THE CHOICES (#376): `listHeader(rows)` returns exactly `listHeaderRows` rows, drawn
+// at the top of the same in-place block — Shell details sits at the bottom of the screen with its
+// actions under it, and goes with them (Esc) without leaving a line in the scrollback. A fixed
+// height, so the once-a-second redraw walks up the same rows it drew.
+let listHeader = null;
+let listHeaderRows = 0;
 /** #321: the screen under a picker when it opened (content rows, pad, region height), and its tallest draw. */
 let listOpenedOver = null;
 let listMaxRows = 0;
@@ -10719,7 +10842,7 @@ function drawList(redraw) {
   // provider's /v1/models was taller than the terminal: the screen scrolled, the highlighted row
   // went off the top, and the ESC[nA walk below then counted rows that had moved — "cannot scroll
   // up or down, stuck here". Two rows of margin keep the block clear of the line above it.
-  const maxBlock = Math.max(5, viewportHeight() - 2) - (listNote ? 1 : 0);
+  const maxBlock = Math.max(5, viewportHeight() - 2) - (listNote ? 1 : 0) - (listHeader ? listHeaderRows : 0);
   const win = listWindow(listItems.length, listSel, listTop, maxBlock);
   listTop = win.top;
   const row = (i) => {
@@ -10733,6 +10856,11 @@ function drawList(redraw) {
   };
   const marker = (text) => clipVisible(GUTTER + dim(text), width - 1);
   const rows = [];
+  if (listHeader) {
+    let head = [];
+    try { head = listHeader(listHeaderRows) || []; } catch { /* a panel that fails to draw is blank */ }
+    for (let i = 0; i < listHeaderRows; i++) rows.push(clipVisible(head[i] ?? "", width - 1));
+  }
   // Drawn even when empty, so the block keeps a CONSTANT height: every redraw walks up exactly as
   // many rows as it drew, and a block that changed height at the ends would leave that walk out
   // by a row — the bug physicalRows() exists to prevent.
@@ -10775,6 +10903,8 @@ function finishList(index) {
   listMaxRows = 0;
   listRowsDrawn = [];
   listTop = 0;
+  listHeader = null;
+  listHeaderRows = 0;
   const r = listResolve;
   const multi = listMulti;
   const checked = [...listChecked].sort((a, b) => a - b);
@@ -10919,6 +11049,19 @@ function pickFromList(items, initialSel = 0, opts = {}) {
     listPickerActive = true;
     listDeadline = 0;
     listTimeoutIndex = -1;
+    listHeader = typeof opts.header === "function" ? opts.header : null;
+    listHeaderRows = listHeader ? Math.max(0, opts.headerRows | 0) : 0;
+    if (listHeader && opts.refreshMs > 0) {
+      // A live panel (#376): redrawn in place until the picker closes.
+      const live = setInterval(() => {
+        if (listPickerActive && listHeader) drawList(true);
+      }, opts.refreshMs);
+      const done = listResolve;
+      listResolve = (v) => {
+        clearInterval(live);
+        done(v);
+      };
+    }
     if (opts && opts.timeoutMs > 0 && (opts.timeoutIndex ?? -1) >= 0) {
       listDeadline = Date.now() + opts.timeoutMs;
       listTimeoutIndex = opts.timeoutIndex;
@@ -14211,6 +14354,22 @@ async function main() {
       await showBrowser();
       continue;
     }
+    if (line === "/browser cleanup") {
+      await browserCleanup();
+      continue;
+    }
+    if (line === "/browser install") {
+      await browserInstall();
+      continue;
+    }
+    if (line === "/browser allow" || line === "/browser forget") {
+      allowIn(cwd, line === "/browser allow");
+      console.log("\n" + GUTTER + (line === "/browser allow"
+        ? accent("✓ The agent may use the browser in this folder without asking.") + dim(" (/browser forget undoes it)")
+        : accent("✓ The agent asks again before it uses the browser in this folder.")) + "\n");
+      paintBar();
+      continue;
+    }
     if (line === "/model") {
       await chooseModel();
       continue;

package/gu_browser.py

@@ -18,7 +18,7 @@ import urllib.request
 
 HERE = os.path.dirname(os.path.abspath(__file__))
 EXT_SRC = os.path.join(HERE, "browser-extension")
-EXT_FILES = ("manifest.json", "background.js", "popup.html", "popup.js",
+EXT_FILES = ("manifest.json", "background.js", "actions.js", "popup.html", "popup.js",
              "icons/icon16.png", "icons/icon48.png", "icons/icon128.png")
 BRIDGE = os.path.join(HERE, "browser-bridge.mjs")
 
@@ -69,18 +69,75 @@ def install_extension_files():
     return dst
 
 
+# The Chrome Web Store page of the gu extension, once it is published (#149/#150). Until then the
+# extension is the developer path only — and nobody needs it: gu's own Chrome window works without.
+STORE_URL = os.environ.get("GU_BROWSER_STORE_URL", "")
+
+
+def allow_path():
+    return os.path.join(os.path.dirname(state_path()), "browser-allow.json")
+
+
+def _real(folder):
+    try:
+        return os.path.realpath(folder)
+    except OSError:
+        return folder
+
+
+def allowed_in(folder):
+    """Has the user said "always allow the browser" for this folder (#150)?"""
+    try:
+        with open(allow_path(), encoding="utf-8") as f:
+            return _real(folder) in (json.load(f).get("folders") or [])
+    except (OSError, ValueError):
+        return False
+
+
+def allow_in(folder, allow=True):
+    """Add (or remove) a folder on the "always allow" list. The terminal writes it on "Always"."""
+    try:
+        with open(allow_path(), encoding="utf-8") as f:
+            folders = json.load(f).get("folders") or []
+    except (OSError, ValueError):
+        folders = []
+    f_ = _real(folder)
+    folders = [x for x in folders if x != f_] + ([f_] if allow else [])
+    os.makedirs(os.path.dirname(allow_path()), exist_ok=True)
+    with open(allow_path(), "w", encoding="utf-8") as f:
+        json.dump({"folders": folders}, f, indent=2)
+
+
+def last_seen():
+    """{version, installType} of the extension that last connected, or {} (#146). An older marker
+    holds only the version."""
+    try:
+        with open(seen_path(), encoding="utf-8") as f:
+            raw = f.read().strip()
+        try:
+            return json.loads(raw) if raw.startswith("{") else {"version": raw}
+        except ValueError:
+            return {"version": raw}
+    except OSError:
+        return {}
+
+
 def install_text(reason="not connected"):
     """What the model is told when the extension is not there: stop and ask the user."""
-    folder = install_extension_files()
+    if last_seen().get("installType") == "normal":
+        # The Chrome Web Store copy is installed: never point at the developer folder again (#145).
+        return (f"BROWSER NOT AVAILABLE ({reason}): the gu Chrome extension (Chrome Web Store) is "
+                "installed but not connected — Chrome is probably closed. STOP and ask the user to "
+                "open Chrome (the extension reconnects within 30 seconds, or its icon → Connect now), "
+                "then continue. /browser in the gu terminal shows the status.")
+    # gu's own Chrome window needs no extension (#150), so this is reached only when there is no
+    # Chrome to start at all.
     return (
-        f"BROWSER NOT AVAILABLE ({reason}): the gu Chrome extension is not installed, or Chrome is "
-        "not running. Do NOT try to work around it with curl or a headless script for a UI check — "
-        "STOP and ask the user to install it, then continue when they say it is done. Tell them:\n"
-        "  1. Open Chrome and go to chrome://extensions\n"
-        "  2. Turn on Developer mode (top right)\n"
-        f"  3. Click \"Load unpacked\" and choose the folder {folder}\n"
-        "  4. (Or type /browser in the gu terminal for these steps and the connection status.)\n"
-        "gu only uses its own tabs (a tab group named \"gu\"); the user's other tabs are never touched.")
+        f"BROWSER NOT AVAILABLE ({reason}). gu opens its own Chrome window when the gu extension is "
+        "not there, and it found no Chrome, Chromium, Edge or Brave on this computer. Do NOT work "
+        "around it with curl or a headless script for a UI check — STOP and tell the user: install "
+        "Google Chrome (or set GU_BROWSER_CHROME to a Chromium-based browser), then ask again."
+        + (f" To use their own Chrome instead, they can add the gu extension: {STORE_URL}" if STORE_URL else ""))
 
 
 def _node():
@@ -135,8 +192,10 @@ def _start_bridge(log=None):
     return None
 
 
-def connect(wait=True, log=None, on_wait=None):
-    """→ (state, None) when the extension is connected, else (None, reason)."""
+def connect(wait=True, log=None, on_wait=None, own=False):
+    """→ (state, None) when the extension is connected, else (None, reason).
+    own=True (#150): gu's own Chrome window may stand in, so a missing extension is no failure —
+    → (state, None) either way, and the wait for a sleeping extension is shorter."""
     st = _read_state()
     started = False
     try:
@@ -151,7 +210,10 @@ def connect(wait=True, log=None, on_wait=None):
     # A Chrome extension's worker sleeps; its alarm wakes it to reconnect within 30 s. Wait that
     # long only when an extension has connected before — otherwise it is most likely not installed.
     seen = os.path.exists(seen_path())
-    wait_ms = (35000 if (seen and started) else 8000 if seen else 4000) if wait else 0
+    if own:
+        wait_ms = (8000 if seen else 0) if wait else 0  # then gu's own window
+    else:
+        wait_ms = (35000 if (seen and started) else 8000 if seen else 4000) if wait else 0
     if wait_ms >= 8000 and on_wait:
         on_wait()
     try:
@@ -159,21 +221,26 @@ def connect(wait=True, log=None, on_wait=None):
     except OSError as e:
         return None, f"the gu browser bridge is not answering ({e})"
     if not s.get("connected"):
-        return None, "extension not connected"
-    if not seen:
+        return (st, None) if own else (None, "extension not connected")
+    mark = {"version": s.get("version"), "installType": s.get("installType")}
+    if last_seen() != mark:
         try:
             with open(seen_path(), "w") as f:
-                f.write(str(s.get("version") or ""))
+                json.dump(mark, f)
         except OSError:
             pass
     return st, None
 
 
-def command(cmd, log=None, on_wait=None):
-    """Send one command. → (ok, result_or_error, not_connected)."""
-    st, why = connect(log=log, on_wait=on_wait)
+def command(cmd, log=None, on_wait=None, own=False):
+    """Send one command. → (ok, result_or_error, not_connected).
+    own=True: without the extension, the bridge uses gu's own Chrome window (#150). The result
+    then carries "_backend": "chrome"."""
+    st, why = connect(log=log, on_wait=on_wait, own=own)
     if not st:
         return False, why, True
+    if own:
+        cmd = dict(cmd, backend="auto")
     timeout_s = 75 if cmd.get("action") in ("open", "wait", "js") else 40
     try:
         r = _http(st, "POST", "/cmd", body=dict(cmd, timeout_ms=(timeout_s - 5) * 1000), timeout=timeout_s)
@@ -181,9 +248,14 @@ def command(cmd, log=None, on_wait=None):
         return False, f"the browser bridge did not answer ({e})", False
     if r.get("_status") == 503:
         return False, "extension not connected", True
+    if r.get("noChrome"):
+        return False, str(r.get("error")), True  # nothing to drive: the install answer applies
     if not r.get("ok"):
         return False, str(r.get("error") or "failed"), False
-    return True, r.get("result") or {}, False
+    res = r.get("result") or {}
+    if isinstance(res, dict) and r.get("backend"):
+        res["_backend"] = r["backend"]
+    return True, res, False
 
 
 # ── what the model reads ────────────────────────────────────────────────────────────────────