@withbuddi/buddi 0.1.0-pre.37 → 0.1.0-pre.38

package/node_modules/@buddi/tool-browser/dist/controller.js

@@ -1,3 +1,4 @@
+import { existsSync, statSync } from 'node:fs';
 import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { randomUUID } from 'node:crypto';
@@ -5,88 +6,199 @@ import { ToolRefusal } from '@buddi/core/plugin';
 import { BrowserManager } from './manager.js';
 import { PlaywrightHost } from './host.js';
 import { PlaywrightDriver } from './driver.js';
-import { COMPUTER_HELPER_MISSING, ComputerDriver, computerHelperPresent, NativeComputerBridge, resolveApp, settingsSchema, spotlightApps } from './computer.js';
 import { ExtensionDriver, NOT_CONNECTED } from './extension.js';
+import { browserStoppedMessage } from './service.js';
 import { BrowserPreconditionError } from './types.js';
 import { detectBrowser, HEADLESS_NOTE, installBrowser, InstallProgressReader, missingLibrariesMessage, needsHeadless, noSandboxMessage, NO_BROWSER_STATUS, probeLaunch } from './availability.js';
+import { applySettingsChange, migrateSettings, PIN_VALUES, settingsSchema } from './settings.js';
+import { agoText, cardAnswer, ownerClock, chooseRoute, detectWall, ownerCard, RouteProviderDriver, routeNote, siteListed, siteOf } from './routes.js';
+import { BrowserTelemetry, missionMark, readTelemetry, summarize } from './telemetry.js';
+import { canonicalOrigin, fieldBoundTo } from './secrets.js';
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 /** The one control an app card carries: how long the yes lasts. */
 const REMEMBER = { key: 'remember', label: 'Allow', options: ['Once', 'Always'], default: 'Once' };
 function isAppEnvelope(value) {
     return typeof value === 'object' && value !== null && typeof value.allowApp === 'string';
 }
-/** Owner-only mode switch. No automatic fallback and no model-selected driver. */
+/** What the agent is told when an app job has no route: the one fix, never a mode. */
+/** What a mission is told when it asks for the owner's Chrome (docs/browser.md, "Missions"). */
+export const UNATTENDED_CHROME = "A mission looks only in buddi's own browser, never the owner's Chrome: nobody is there to watch it. Use the own browser, or report what needs the owner's sign-in.";
+/** What a mission is told when it asks for an app. */
+export const UNATTENDED_APPS = "A mission looks only in buddi's own browser; the owner's apps need the owner. Report what you could not do instead.";
+export const APPS_UNAVAILABLE = 'Your apps are not available to agents right now. The owner can turn them on, or repair them, in Settings → Where agents may look.';
+/** What the agent is told when no plugin provides the apps route. */
+export const APPS_NOT_INSTALLED = 'Agents cannot work in apps here: that needs the Computer plugin (macOS), which the owner installs from Settings → Plugins.';
+const asApp = (target) => ({ bundleId: target.id, name: target.name });
+const ROUTES = ['own', 'chrome', 'apps'];
+/**
+ * Where agents may look, and the runtime that picks for them
+ * (docs/browser.md).
+ *
+ * Three routes, one manager each: buddi's own browser (headless, shown in the
+ * Canvas), the owner's Chrome (background tabs through the extension) and the
+ * owner's apps (a route a plugin provides: the Computer plugin). The
+ * settings are permissions; per task the runtime chooses, falls back
+ * silently when a route cannot serve, and says one line when the route was
+ * not its own browser. The owner is asked on four occasions only, by card.
+ */
 export class HostController {
     dir;
     options;
-    #manager;
     #settings = settingsSchema.parse({});
-    #permissions;
     #enabled = false;
-    #changing = false;
-    #requests = new Map();
     #extension;
+    #providers;
     #problem;
     #install;
-    /** Apps the owner allowed Once, by conversation. Memory only: the ledger answers again after a restart. */
     #once = new Map();
-    /** The conversation whose `browser.act` is running, for the driver's app check. */
-    #acting;
+    /** The apps each conversation was let into (listed or allowed by card), for the Telegram picture check. */
+    #opened = new Map();
+    #names = new Map();
+    #managers;
+    #ownOptions;
+    #host;
+    #stop;
+    #pins = new Map();
+    #learned = new Set();
+    /** The route each conversation's page is on: `[owner, agent, conversation]`. */
+    #current = new Map();
+    /** Notes already said, so the chat line comes once per site and route. */
+    #noted = new Set();
+    /** Stop cards shown, by conversation, so a Resume tap is understood. */
+    #stopCards = new Map();
+    /** Cards already handed to a surface, so one moment is one card. */
+    #asked = new WeakSet();
+    /** Who hears that the owner gave a page back (the gateway continues the run that waited on it). */
+    #giveBack = new Set();
+    telemetry;
     constructor(dir, options = {}) {
         this.dir = dir;
         this.options = options;
         this.#extension = options.extensionBridge;
-        this.#manager = this.#create();
+        this.telemetry = new BrowserTelemetry(path.join(dir, 'telemetry.jsonl'), options.service?.now);
+        const self = this;
+        const hostOptions = {
+            profileDir: path.join(this.dir, 'profile'), channel: this.options.channel, allowedHosts: this.options.allowedHosts,
+            ...(this.options.lookup ? { lookup: this.options.lookup } : {}),
+            detect: () => this.#detect(), report: (problem) => { this.#problem = problem; },
+        };
+        // Read at launch, so Show the window applies to the next launch without a restart.
+        Object.defineProperty(hostOptions, 'headless', { enumerable: true, get: () => self.#headless });
+        this.#host = new PlaywrightHost(hostOptions);
+        const base = { ...options.service, telemetry: this.telemetry, requestTakeover: (sessionId) => { void this.control('takeover', sessionId).catch(() => undefined); } };
+        this.#ownOptions = { ...base, route: 'own', maxSessions: options.limits?.own ?? this.#settings.maxOwnPages, closeHost: () => this.#host.close(),
+            ...(options.idleEvictMs !== undefined ? { idleEvictMs: options.idleEvictMs } : {}), ...(options.queueTimeoutMs !== undefined ? { queueTimeoutMs: options.queueTimeoutMs } : {}) };
+        this.#managers = {
+            own: new BrowserManager(() => this.options.drivers?.own?.() ?? new PlaywrightDriver(this.#host.options, this.#host), this.#ownOptions),
+            chrome: new BrowserManager(() => this.options.drivers?.chrome?.() ?? new ExtensionDriver(this.#bridge(), this.options.allowedHosts), { ...base, route: 'chrome', siteLocks: true, maxSessions: options.limits?.chrome ?? 8,
+                ...(options.idleEvictMs !== undefined ? { idleEvictMs: options.idleEvictMs } : {}), ...(options.queueTimeoutMs !== undefined ? { queueTimeoutMs: options.queueTimeoutMs } : {}) }),
+            apps: new BrowserManager(() => this.#appsDriver(), { ...base, route: 'apps', allowOpen: true, maxSessions: options.limits?.apps ?? 1,
+                ...(options.idleEvictMs !== undefined ? { idleEvictMs: options.idleEvictMs } : {}), ...(options.queueTimeoutMs !== undefined ? { queueTimeoutMs: options.queueTimeoutMs } : {}) }),
+        };
     }
-    /**
-     * The gateway hands its WebSocket endpoint over once it exists.
-     *
-     * Late rather than through the constructor because `hostBrowser` is a
-     * singleton per data dir and the module that reads its manifest builds it
-     * before the gateway has a server to attach a socket to. Only the composition
-     * root calls this, and only before `enable`.
-     */
+    /** The gateway hands its WebSocket endpoint over once it exists. */
     useExtension(bridge) { this.#extension = bridge; }
-    #create() {
-        if (this.options.manager)
-            return this.options.manager(this.#settings);
-        if (this.#settings.mode === 'extension') {
-            // Never silently fall back to another browser: with no endpoint wired,
-            // the mode the owner chose simply says it is not connected.
-            const offline = { connected: () => false, send: () => Promise.reject(new Error(NOT_CONNECTED)), close: () => { } };
-            return new BrowserManager(() => new ExtensionDriver(this.#extension?.() ?? offline, this.options.allowedHosts), { controlFile: path.join(this.dir, 'control.json') });
-        }
-        if (this.#settings.mode === 'computer')
-            return new BrowserManager(() => new ComputerDriver(this.#settings, this.options.bridge?.(), this.options.allowedHosts, (appId) => this.#allowed(appId, this.#acting), (appId) => this.#nameOf(appId)), {
-                controlFile: path.join(this.dir, 'control.json'), maxSessions: 1, allowOpen: true,
-            });
-        const host = new PlaywrightHost({ profileDir: path.join(this.dir, 'profile'), channel: this.options.channel, allowedHosts: this.options.allowedHosts, ...(this.options.lookup ? { lookup: this.options.lookup } : {}),
-            headless: this.#headless, detect: () => this.#detect(), report: (problem) => { this.#problem = problem; } });
-        return new BrowserManager(() => new PlaywrightDriver(host.options, host), { controlFile: path.join(this.dir, 'control.json'), closeHost: () => host.close() });
-    }
-    get #headless() { return needsHeadless(this.options.platform ?? process.platform, this.options.env ?? process.env); }
+    /** The routes plugins provide (core's registry), read on every choice. */
+    useRouteProviders(providers) { this.#providers = providers; }
+    /** The agents' pins from their `agent.md`. */
+    useAgentPins(pin) { this.options.agentPin = pin; }
+    #bridge() {
+        const offline = { connected: () => false, send: () => Promise.reject(new Error(NOT_CONNECTED)), close: () => { } };
+        return this.#extension?.() ?? offline;
+    }
+    get #env() { return this.options.env ?? process.env; }
+    /** Headless unless the owner asked to see the window (or BUDDI_BROWSER_HEADED=1); always headless with no display. */
+    get #headless() {
+        if (needsHeadless(this.options.platform ?? process.platform, this.#env))
+            return true;
+        return !(this.#settings.showWindow || this.#env.BUDDI_BROWSER_HEADED === '1');
+    }
     #detect() { return (this.options.detect ?? detectBrowser)(); }
-    /** The agents' own browser, said for the owner and the model alike. */
     #engine() {
         const found = this.#detect();
         const headless = this.#headless;
         const problem = found.engine === 'none' ? undefined : this.#problem;
+        const forced = needsHeadless(this.options.platform ?? process.platform, this.#env);
         const message = found.engine === 'none' ? NO_BROWSER_STATUS
             : problem === 'missing-libraries' ? missingLibrariesMessage()
                 : problem === 'no-sandbox' ? noSandboxMessage()
-                    : headless ? HEADLESS_NOTE : undefined;
+                    : forced ? HEADLESS_NOTE : undefined;
         return { engine: found.engine, headless, ...(problem ? { problem } : {}), ...(message ? { message } : {}), ...(this.#install ? { install: { ...this.#install } } : {}) };
     }
-    /**
-     * Playwright's Chromium, downloaded where `PLAYWRIGHT_BROWSERS_PATH` points (the data directory's `browser/engines` in a packaged install). Started here and
-     * followed through the status: an install takes a minute or more, far
-     * longer than a request should wait.
-     */
+    /* ---------------- the apps route ---------------- */
+    /** The plugin that provides the apps route on this platform, when one is installed. */
+    #pluginApps() {
+        const platform = this.options.platform ?? process.platform;
+        return this.#providers?.().find((provider) => provider.kind === 'apps' && (!provider.platforms || provider.platforms.includes(platform)));
+    }
+    #appsDriver() {
+        const test = this.options.drivers?.apps;
+        if (test)
+            return test();
+        const plugin = this.#pluginApps();
+        if (!plugin)
+            throw new BrowserPreconditionError(APPS_NOT_INSTALLED);
+        return new RouteProviderDriver(plugin, randomUUID());
+    }
+    /* ---------------- routes and their health ---------------- */
+    #chromeConnected() { try {
+        return this.#bridge().connected();
+    }
+    catch {
+        return false;
+    } }
+    #chromePaired() { try {
+        return this.#bridge().paired?.() ?? this.#chromeConnected();
+    }
+    catch {
+        return false;
+    } }
+    routes() {
+        const engine = this.#engine();
+        const ownOk = engine.engine !== 'none' && !engine.problem;
+        const own = { kind: 'own', allowed: true, available: ownOk || this.options.drivers?.own !== undefined, provider: 'core',
+            ...(engine.message ? { message: engine.message } : {}),
+            ...(engine.engine === 'none' ? { repair: 'install' } : engine.problem === 'no-sandbox' ? { repair: 'sandbox' } : engine.problem ? { repair: 'install' } : {}) };
+        const connected = this.#chromeConnected();
+        const paired = this.#chromePaired();
+        const chrome = { kind: 'chrome', allowed: this.#settings.yourChrome, available: this.#settings.yourChrome && connected, provider: 'core', paired, connected,
+            ...(!paired ? { message: 'Add buddi to Chrome and pair it to let agents use your Chrome.', repair: 'pair' }
+                : !connected ? { message: 'Your Chrome is paired but not connected right now: open Chrome.' } : {}) };
+        const plugin = this.#pluginApps();
+        let health;
+        if (this.options.drivers?.apps)
+            health = { ok: true };
+        else if (plugin) {
+            try {
+                const answered = plugin.health();
+                health = answered instanceof Promise ? this.#lastPluginHealth : answered;
+                if (answered instanceof Promise)
+                    void answered.then((value) => { this.#lastPluginHealth = value; }, () => undefined);
+            }
+            catch (error) {
+                health = { ok: false, message: error instanceof Error ? error.message : String(error) };
+            }
+        }
+        else
+            health = { ok: false, message: APPS_NOT_INSTALLED, repair: 'install' };
+        const installed = plugin !== undefined || this.options.drivers?.apps !== undefined;
+        const apps = { kind: 'apps', allowed: installed && this.#settings.yourApps !== 'off', available: installed && this.#settings.yourApps !== 'off' && health.ok,
+            provider: plugin?.plugin ?? (this.options.drivers?.apps ? 'test' : ''), installed, mode: this.#settings.yourApps,
+            ...(plugin ? { label: plugin.label } : {}),
+            ...(health.message ? { message: health.message } : {}), ...(health.repair ? { repair: health.repair } : {}) };
+        return [own, chrome, apps];
+    }
+    #lastPluginHealth = { ok: true };
+    #usable() {
+        const list = this.routes();
+        const allowed = Object.fromEntries(list.map((route) => [route.kind, route.allowed]));
+        const available = Object.fromEntries(list.map((route) => [route.kind, route.available]));
+        return { allowed, available };
+    }
+    /* ---------------- install and launch ---------------- */
     installBrowser() {
         if (this.#install?.state === 'running')
             return this.status();
-        // The installer's lines are read into numbers here and go no further: the
-        // page draws a bar and says it in buddi's words, never the installer's.
         const reader = new InstallProgressReader();
         const install = { state: 'running', progress: reader.progress };
         this.#install = install;
@@ -106,16 +218,8 @@ export class HostController {
         });
         return this.status();
     }
-    /**
-     * Launch the agents' browser once and close it, headed or headless as this
-     * machine dictates. Only the agents' own browser has a binary to start; the
-     * other modes answer ok, since there is nothing of buddi's to launch.
-     * A missing-libraries or no-sandbox failure is remembered as the status's problem, as a
-     * failed launch from a real session would be.
-     */
+    /** Launch the agents' own browser once and close it: does it start on this machine? */
     async checkLaunch() {
-        if (this.#settings.mode !== 'playwright')
-            return { ok: true };
         const check = await probeLaunch({
             headless: this.#headless,
             detect: () => this.#detect(),
@@ -128,67 +232,162 @@ export class HostController {
             this.#problem = check.problem;
         return check;
     }
-    get #macOS() { return (this.options.platform ?? process.platform) === 'darwin'; }
+    /* ---------------- lifecycle and persistence ---------------- */
+    async #readJson(name) {
+        try {
+            return JSON.parse(await readFile(path.join(this.dir, name), 'utf8'));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+    }
+    async #writeJson(name, value) {
+        await mkdir(this.dir, { recursive: true, mode: 0o700 });
+        const file = path.join(this.dir, name);
+        const temp = `${file}.${randomUUID()}.tmp`;
+        await writeFile(temp, JSON.stringify(value), { mode: 0o600 });
+        await rename(temp, file);
+    }
     async enable() {
         if (this.#enabled)
             return;
-        try {
-            const stored = settingsSchema.parse(JSON.parse(await readFile(path.join(this.dir, 'settings.json'), 'utf8')));
-            // Computer control is macOS-only: elsewhere a stored choice of it runs, and reads, as the agents' own browser.
-            // The file keeps what the owner chose.
-            this.#settings = stored.mode === 'computer' && !this.#macOS ? { ...stored, mode: 'playwright' } : stored;
+        const raw = await this.#readJson('settings.json');
+        if (raw !== undefined) {
+            const { settings, migrated } = migrateSettings(raw, { paired: this.#chromePaired() });
+            this.#settings = settings;
+            if (migrated) {
+                // The first shape is kept once; a v2 file only loses the apps list the Computer plugin keeps now.
+                const v2 = raw?.version === 2;
+                await this.#writeJson(v2 ? 'settings.apps.json' : 'settings.v1.json', raw).catch(() => undefined);
+                await this.#writeJson('settings.json', settings);
+            }
         }
-        catch (error) {
-            if (error.code !== 'ENOENT')
-                throw error;
+        this.#ownOptions.maxSessions = this.options.limits?.own ?? this.#settings.maxOwnPages;
+        const control = await this.#readJson('control.json');
+        if (control?.stopped) {
+            // A Stop from before expiries: it held from when it was written, for the default hour.
+            let at = typeof control.at === 'number' ? control.at : undefined;
+            if (at === undefined) {
+                try {
+                    at = statSync(path.join(this.dir, 'control.json')).mtimeMs;
+                }
+                catch {
+                    at = this.#now();
+                }
+            }
+            const until = control.until === null ? undefined : typeof control.until === 'number' ? control.until : at + 60 * 60_000;
+            this.#stop = { at, ...(until !== undefined ? { until } : {}) };
         }
-        this.#manager = this.#create();
-        await this.#manager.enable();
+        const pins = await this.#readJson('pins.json');
+        for (const [conversation, pin] of Object.entries(pins ?? {}))
+            if (PIN_VALUES.includes(pin))
+                this.#pins.set(conversation, pin);
+        const learned = await this.#readJson('sign-in-sites.json');
+        for (const site of Array.isArray(learned) ? learned.slice(-500) : [])
+            if (typeof site === 'string')
+                this.#learned.add(site);
+        await Promise.all(ROUTES.map((route) => this.#managers[route].enable()));
         this.#enabled = true;
     }
+    #now() { return this.options.service?.now?.() ?? Date.now(); }
+    /** The global Stop, if it still holds; an expired one is cleared here. */
+    #activeStop() {
+        if (this.#stop?.until !== undefined && this.#now() >= this.#stop.until) {
+            this.#stop = undefined;
+            this.#later(this.#writeJson('control.json', { stopped: false }));
+        }
+        return this.#stop;
+    }
+    /* ---------------- status ---------------- */
+    #key(ownerId, agentId, conversationId) { return JSON.stringify([ownerId, agentId, conversationId]); }
+    #pageOf(scope) {
+        for (const route of ROUTES) {
+            const manager = this.#managers[route];
+            if (manager.child(scope))
+                return { route, manager };
+        }
+        return undefined;
+    }
     status(scope) {
-        const status = this.#manager.status(scope);
-        // On macOS, whether "Use my apps" can run at all: an install without the helper says so on that card.
-        const helper = this.#macOS ? { helper: (this.options.helperPresent ?? computerHelperPresent)() ? { present: true } : { present: false, message: COMPUTER_HELPER_MISSING } } : {};
-        const metadata = { mode: this.#settings.mode, settings: { ...this.#settings, allowedApps: [...this.#settings.allowedApps] }, permissions: this.#permissions, ...helper,
-            ...(this.#settings.mode === 'playwright' ? { browser: this.#engine() } : {}) };
+        const found = scope ? this.#pageOf(scope) : undefined;
+        let status;
+        if (scope)
+            status = found ? found.manager.status(scope) : { state: this.#enabled ? 'idle' : 'unavailable', enabled: this.#enabled, busy: false, hasScreenshot: false };
+        else {
+            const sessions = ROUTES.flatMap((route) => this.#managers[route].status().sessions ?? []);
+            const latest = sessions.at(-1) ?? { state: this.#enabled ? 'idle' : 'unavailable', enabled: this.#enabled, busy: false, hasScreenshot: false };
+            status = { ...latest, busy: sessions.some((session) => session.busy), sessions };
+        }
+        const stop = this.#activeStop();
+        if (stop && !status.session)
+            status = { ...status, state: 'stopped' };
+        const metadata = {
+            settings: { ...this.#settings, signInSites: [...this.#settings.signInSites] },
+            // The sites buddi added itself when it met their sign-in page: one list with the owner's in Settings.
+            learnedSignInSites: [...this.#learned].filter((site) => !this.#settings.signInSites.includes(site)).sort(),
+            browser: this.#engine(), routes: this.routes(),
+            ...(stop ? { stop: { at: new Date(stop.at).toISOString(), ...(stop.until !== undefined ? { until: new Date(stop.until).toISOString() } : {}) } } : {}),
+            ...(scope?.conversationId && this.#pins.has(scope.conversationId) ? { pin: this.#pins.get(scope.conversationId) } : {}),
+        };
         const once = (entry) => {
             const allowed = entry.session ? this.#once.get(entry.session.conversationId) : undefined;
-            return allowed?.size && entry.session ? { ...entry, session: { ...entry.session, allowedOnce: [...allowed] } } : entry;
+            const opened = entry.session ? this.#opened.get(entry.session.conversationId) : undefined;
+            const withMode = { ...entry, mode: entry.mode ?? 'playwright' };
+            if (!withMode.session || (!allowed?.size && !opened?.size))
+                return withMode;
+            return { ...withMode, session: { ...withMode.session, ...(allowed?.size ? { allowedOnce: [...allowed] } : {}), ...(opened?.size ? { allowedApps: [...opened] } : {}) } };
         };
         return once({ ...status, ...metadata, ...(status.sessions ? { sessions: status.sessions.map((session) => once({ ...session, ...metadata })) } : {}) });
     }
-    /** On the owner's list, or allowed Once in this conversation. */
-    #allowed(appId, conversationId) {
-        return this.#settings.allowedApps.includes(appId) || (conversationId !== undefined && this.#once.get(conversationId)?.has(appId) === true);
+    /** `buddi doctor browser`: the last week of stops, cards and routes. */
+    telemetrySummary(days = 7) {
+        const file = this.telemetry.file;
+        const events = file && existsSync(file) ? readTelemetry(file) : this.telemetry.events;
+        return summarize(events, this.#now(), days);
     }
-    /** Display names already looked up, by bundle id, for the agent's sentences. */
-    #names = new Map();
-    #remember(app) { if (app.name !== app.bundleId)
-        this.#names.set(app.bundleId, app.name); return app; }
-    /** An app's display name, from an earlier lookup or Spotlight. Undefined when not found. */
-    async #nameOf(appId) {
-        const known = this.#names.get(appId);
-        if (known)
-            return known;
+    /* ---------------- apps: names, cards, Once / Always ---------------- */
+    /**
+     * May this conversation open the app without a card? `ask` asks every
+     * time; `on` opens what the plugin lists. A Once yes counts either way.
+     */
+    async #allowed(appId, conversationId) {
+        const once = conversationId !== undefined && this.#once.get(conversationId)?.has(appId) === true;
+        if (once)
+            return true;
+        if (this.#settings.yourApps !== 'on')
+            return false;
+        const reach = this.#pluginApps()?.reach;
+        if (!reach)
+            return this.options.drivers?.apps !== undefined || this.#pluginApps() !== undefined;
         try {
-            return this.#remember(await resolveApp({ bundleId: appId }, this.options.resolveApp ?? spotlightApps)).name;
+            return (await reach.listed(appId)) === true;
         }
         catch {
-            return undefined;
+            return false;
         }
     }
-    /** The app an `open` names, as found on this Mac. An allowed bundle id needs no lookup. */
+    #remember(app) { if (app.name !== app.bundleId)
+        this.#names.set(app.bundleId, app.name); return app; }
     async #resolve(command, conversationId) {
-        const resolver = this.options.resolveApp ?? spotlightApps;
-        if (command.app !== undefined)
-            return this.#remember(await resolveApp({ name: command.app }, resolver));
-        const appId = command.appId;
-        if (this.#allowed(appId, conversationId))
-            return { bundleId: appId, name: this.#names.get(appId) ?? appId };
-        return this.#remember(await resolveApp({ bundleId: appId }, resolver));
-    }
-    /** `#resolve`, with its refusal said as the tool's own sentence. */
+        const reach = this.#pluginApps()?.reach;
+        if (command.app === undefined && await this.#allowed(command.appId, conversationId))
+            return { bundleId: command.appId, name: this.#names.get(command.appId) ?? command.appId };
+        if (!reach) {
+            if (command.app !== undefined)
+                throw new BrowserPreconditionError(`The apps route cannot look up ${command.app} by name. Ask with its id.`);
+            return { bundleId: command.appId, name: command.appId };
+        }
+        try {
+            return this.#remember(asApp(await reach.resolve(command.app !== undefined ? { name: command.app } : { id: command.appId })));
+        }
+        catch (error) {
+            if (error.precondition === true && !(error instanceof BrowserPreconditionError))
+                throw new BrowserPreconditionError(error.message);
+            throw error;
+        }
+    }
     async #resolveOrRefuse(command, conversationId) {
         try {
             return await this.#resolve(command, conversationId);
@@ -197,20 +396,33 @@ export class HostController {
             throw error instanceof BrowserPreconditionError ? new ToolRefusal(error.message) : error;
         }
     }
-    /**
-     * Session for everything but an `open`, in computer mode, of an app the
-     * owner has not allowed: that one is gated, so the owner gets a card.
-     *
-     * Asked once per app and conversation, from core's own ledger: a yes Once
-     * lets it through (remembered here, too, for the screen guards), a no is
-     * refused without a second card, and a card still waiting is not doubled.
-     */
+    /** What the plugin does with an app not on its list: a card, or a refusal. */
+    async #unlisted() {
+        const reach = this.#pluginApps()?.reach;
+        if (!reach || this.#settings.yourApps === 'ask')
+            return 'ask';
+        try {
+            return (await reach.unlisted()) === 'refuse' ? 'refuse' : 'ask';
+        }
+        catch {
+            return 'ask';
+        }
+    }
+    /** Session for everything but an `open` of an app the owner has not allowed: that one asks with a card. */
     async tierFor(command, ctx) {
-        if (command.action !== 'open' || this.#settings.mode !== 'computer')
+        if (command.action !== 'open' || this.#settings.yourApps === 'off')
+            return { tier: 'session' };
+        // No app card for a mission: nobody is there to answer it, and apps are never its route.
+        if (!ctx.ownerRequest)
+            throw new ToolRefusal(UNATTENDED_APPS);
+        // No plugin provides apps: no card either; the call itself says what to install.
+        if (!this.#pluginApps() && !this.options.drivers?.apps)
             return { tier: 'session' };
         const app = await this.#resolveOrRefuse(command, ctx.conversationId);
-        if (this.#allowed(app.bundleId, ctx.conversationId))
+        if (await this.#allowed(app.bundleId, ctx.conversationId))
             return { tier: 'session' };
+        if (await this.#unlisted() === 'refuse')
+            throw new ToolRefusal(`${app.name} is not on the owner's list of apps, and the owner said not to open others. They can add it in Settings → Computer.`);
         const conversationId = ctx.conversationId;
         if (conversationId && UUID.test(conversationId) && ctx.buddi?.approvals.decisionsInConversation) {
             const cards = (await ctx.buddi.approvals.decisionsInConversation('browser.act', conversationId))
@@ -228,15 +440,14 @@ export class HostController {
         return { tier: 'gated' };
     }
     async describe(command, ctx) {
-        // Always looked up, never read from an allowance: the executor describes
-        // again before it runs, and the card must say the same both times.
         const app = await this.#resolveOrRefuse(command, undefined);
         const agent = ctx.agentId ?? 'An agent';
         const envelope = { tool: 'browser.act', allowApp: app.bundleId, name: app.name };
+        const always = this.#settings.yourApps === 'on' && this.#pluginApps()?.reach?.remember !== undefined;
         return {
             envelope,
             preview: `Use ${app.name} on your computer?\n${agent} wants to open ${app.name} (${app.bundleId}). While it works, buddi sees that window's screen and sends it to the model, as with the apps you allowed already.`,
-            choices: [{ ...REMEMBER, options: [...REMEMBER.options] }],
+            choices: [{ ...REMEMBER, options: always ? [...REMEMBER.options] : ['Once'] }],
         };
     }
     #allowOnce(conversationId, appId) {
@@ -244,31 +455,31 @@ export class HostController {
         apps.add(appId);
         this.#once.set(conversationId, apps);
     }
-    /**
-     * The owner said yes on the card. Once: this conversation. Always: the
-     * owner's list, written the way Settings writes it — without restarting
-     * the driver, since the agent's session is usually live. A full list falls
-     * back to Once and says so.
-     */
     async #grant(command, ctx) {
-        if (this.#settings.mode !== 'computer')
-            throw new BrowserPreconditionError('Computer control is no longer on, so there is no app to allow. Ask the owner.');
+        if (this.#settings.yourApps === 'off' || !this.#pluginApps())
+            throw new BrowserPreconditionError('Your apps are off, so there is no app to allow. Ask the owner.');
         if (!ctx.conversationId)
             throw new Error('An app is allowed for a conversation, and this call has none.');
         const app = await this.#resolve(command, undefined);
         let remember = ctx.choices?.remember === 'Always' ? 'Always' : 'Once';
         let note = '';
-        if (remember === 'Always' && !this.#settings.allowedApps.includes(app.bundleId)) {
-            if (this.#settings.allowedApps.length >= 32) {
+        const reach = this.#pluginApps()?.reach;
+        if (remember === 'Always') {
+            let kept = false;
+            try {
+                kept = reach?.remember ? await reach.remember({ id: app.bundleId, name: app.name }) : false;
+            }
+            catch {
+                kept = false;
+            }
+            if (!kept) {
                 remember = 'Once';
-                note = ' The list of apps is full (32), so it is allowed for this conversation only.';
+                note = ' The list of apps could not take it (it may be full), so it is allowed for this conversation only.';
             }
-            else
-                await this.#writeSettings({ ...this.#settings, allowedApps: [...this.#settings.allowedApps, app.bundleId] });
         }
         if (remember === 'Once')
             this.#allowOnce(ctx.conversationId, app.bundleId);
-        const how = remember === 'Always' ? 'Always: it is now on the list in Settings' : 'Once: for this conversation';
+        const how = remember === 'Always' ? 'Always: it is now on the list in Settings → Computer' : 'Once: for this conversation';
         return {
             allowed: { appId: app.bundleId, name: app.name, remember },
             message: `Allowed ${app.name} (${how}).${note}`,
@@ -277,143 +488,464 @@ export class HostController {
     }
     async #writeSettings(next) {
         const parsed = settingsSchema.parse(next);
-        await mkdir(this.dir, { recursive: true, mode: 0o700 });
-        const file = path.join(this.dir, 'settings.json');
-        const temp = `${file}.${randomUUID()}.tmp`;
-        await writeFile(temp, JSON.stringify(parsed), { mode: 0o600 });
-        await rename(temp, file);
+        await this.#writeJson('settings.json', parsed);
         this.#settings = parsed;
+        this.#ownOptions.maxSessions = this.options.limits?.own ?? parsed.maxOwnPages;
+    }
+    /* ---------------- pages ---------------- */
+    screenshot(sessionId) {
+        if (sessionId)
+            return this.#pageOf({ sessionId })?.manager.screenshot(sessionId);
+        const latest = this.status().session?.id;
+        return latest ? this.#pageOf({ sessionId: latest })?.manager.screenshot(latest) : undefined;
     }
-    screenshot(sessionId) { return this.#manager.screenshot(sessionId); }
     hand(scope) {
-        if (this.#changing)
-            return { supported: true, message: 'Control settings are changing. Wait before driving.' };
-        return this.#manager.hand(scope);
+        const found = scope ? this.#pageOf(scope) : undefined;
+        if (!found)
+            return { supported: true, message: 'That page changed. Refresh before driving it.' };
+        return found.manager.hand(scope);
     }
     rollover(input) {
-        if (this.#changing)
-            throw new Error('Control settings are changing. Wait before continuing.');
-        const moved = this.#manager.rollover(input);
+        let moved = false;
+        for (const route of ROUTES)
+            moved = this.#managers[route].rollover(input) || moved;
+        const oldKey = this.#key(input.ownerId, input.agentId, input.previousConversationId);
+        const current = this.#current.get(oldKey);
+        if (moved && current) {
+            this.#current.delete(oldKey);
+            this.#current.set(this.#key(input.ownerId, input.agentId, input.conversationId), current);
+        }
         const once = this.#once.get(input.previousConversationId);
         if (moved && once) {
             this.#once.delete(input.previousConversationId);
             this.#once.set(input.conversationId, once);
         }
+        const opened = this.#opened.get(input.previousConversationId);
+        if (moved && opened) {
+            this.#opened.delete(input.previousConversationId);
+            this.#opened.set(input.conversationId, opened);
+        }
+        const pin = this.#pins.get(input.previousConversationId);
+        if (pin) {
+            this.#pins.set(input.conversationId, pin);
+            this.#later(this.#savePins());
+        }
         return moved;
     }
+    /** The owner's own sign-in list, plus the sites buddi met a login wall on. */
+    #signInSite(site) {
+        return siteListed(site, this.#settings.signInSites) || siteListed(site, this.#learned);
+    }
+    #learn(site) {
+        if (!site || this.#learned.has(site))
+            return;
+        this.#learned.add(site);
+        this.#later(this.#saveLearned());
+    }
+    #learnedWrite = Promise.resolve();
+    /** One write at a time, each of the list as it is then: a late write never brings back a forgotten site. */
+    #saveLearned() {
+        const next = this.#learnedWrite.catch(() => undefined).then(() => this.#writeJson('sign-in-sites.json', [...this.#learned].slice(-500)));
+        this.#learnedWrite = next;
+        return next;
+    }
+    async #storedLogin(ctx, url) {
+        const origin = canonicalOrigin(url);
+        if (!origin || !ctx.buddi?.secrets)
+            return false;
+        try {
+            return (await ctx.buddi.secrets.list()).some((secret) => fieldBoundTo(secret.bindings, origin));
+        }
+        catch {
+            return false;
+        }
+    }
+    #pinFor(ctx) {
+        return {
+            conversation: ctx.conversationId ? this.#pins.get(ctx.conversationId) : undefined,
+            agent: ctx.agentId ? this.options.agentPin?.(ctx.agentId) : undefined,
+            global: this.#settings.defaultRoute,
+        };
+    }
+    /** Hand a card to the surface once, as a question with choices. */
+    #ask(ctx, card) {
+        if (this.#asked.has(card))
+            return;
+        this.#asked.add(card);
+        try {
+            ctx.ask?.({ question: card.question, options: card.options.map((option) => ({ label: option.label, ...(option.hint ? { hint: option.hint } : {}), ...(option.recommended ? { recommended: true } : {}) })), allowOther: false });
+        }
+        catch { /* a surface's drawing never decides a run */ }
+    }
+    /** How long a mission run waits on a card for the owner, in milliseconds (settings `missionWaitMinutes`). */
+    missionWaitMs() {
+        return this.#settings.missionWaitMinutes * 60_000;
+    }
     async execute(command, ctx) {
-        if (this.#changing)
-            throw new Error('Computer/browser settings are changing. Wait for the owner.');
-        for (const [id, record] of this.#requests)
-            if (record.expiresAt <= Date.now())
-                this.#requests.delete(id);
-        if (ctx.ownerRequest) {
-            if (this.#requests.get(ctx.ownerRequest.id)?.revoked)
-                throw new Error('Control settings changed. A new owner request is required.');
-            this.#requests.set(ctx.ownerRequest.id, { expiresAt: ctx.ownerRequest.expiresAt, revoked: false });
-        }
-        if (this.#settings.mode !== 'computer' && (command.action === 'open' || command.target?.x !== undefined))
-            throw new Error('Native apps and coordinate targets require Computer mode. Only the owner can change modes.');
+        ctx.signal?.throwIfAborted();
+        if (!this.#enabled)
+            throw new Error('Browser driving is available through buddi serve.');
+        if (!ctx.agentId || !ctx.conversationId || !ctx.buddi)
+            throw new Error('A browser action belongs to an agent and a conversation.');
+        const unattended = !ctx.ownerRequest;
+        // The owner's Stop: one card with Resume, never a Settings trip.
+        const stop = this.#activeStop();
+        if (stop && command.action !== 'close') {
+            this.telemetry.stop('owner-stop', { route: 'own', agent: ctx.agentId, ...missionMark(ctx), ...(ctx.surface?.id ? { surface: ctx.surface.id } : {}) });
+            // The core context carries the owner's zone; the plugin type does not name it.
+            const clock = (at) => ownerClock(at, ctx.timezone);
+            const wanted = command.action === 'navigate' ? siteOf(command.url) : undefined;
+            const card = ownerCard('stopped', { since: clock(stop.at), stoppedAgo: agoText(this.#now() - stop.at), ...(stop.until !== undefined ? { until: clock(stop.until) } : {}), ...(wanted ? { site: wanted } : {}) });
+            this.#stopCards.set(ctx.conversationId, card);
+            // The owner's own Stop is not a moment to park a mission on: it says so and ends.
+            if (!unattended)
+                this.#ask(ctx, card);
+            return { completed: false, dispatched: false, needsOwner: card, message: `${browserStoppedMessage(ctx.surface)} Say that in one sentence and stop.` };
+        }
         // The owner's yes on an app card, run by core's executor: record it; the agent opens next.
         if (ctx.actionId !== undefined && command.action === 'open')
             return this.#grant(command, ctx);
+        if (unattended && command.action === 'open') {
+            this.telemetry.stop('apps-unavailable', { route: 'apps', agent: ctx.agentId, ...missionMark(ctx) });
+            throw new ToolRefusal(UNATTENDED_APPS);
+        }
+        const key = this.#key(ctx.buddi.owner.id, ctx.agentId, ctx.conversationId);
+        if (command.action === 'close') {
+            for (const route of ROUTES)
+                await this.#managers[route].execute(command, ctx);
+            this.#current.delete(key);
+            return { closed: true };
+        }
+        if (command.target?.x !== undefined && this.#current.get(key) !== 'apps') {
+            throw new BrowserPreconditionError('Coordinates are for an app window. On a web page, use a ref from the page.');
+        }
         let run = command;
+        let appName;
         if (command.action === 'open') {
+            if (!this.#pluginApps() && !this.options.drivers?.apps) {
+                this.telemetry.stop('apps-unavailable', { route: 'apps', agent: ctx.agentId });
+                throw new Error(APPS_NOT_INSTALLED);
+            }
+            if (this.#settings.yourApps === 'off') {
+                this.telemetry.stop('apps-unavailable', { route: 'apps', agent: ctx.agentId, ...missionMark(ctx) });
+                throw new Error(APPS_UNAVAILABLE);
+            }
             const app = await this.#resolve(command, ctx.conversationId);
-            if (!this.#allowed(app.bundleId, ctx.conversationId))
+            if (!await this.#allowed(app.bundleId, ctx.conversationId))
                 throw new BrowserPreconditionError(`${app.name} is not allowed yet. Ask to open it again so the owner gets a card.`);
             run = { ...command, appId: app.bundleId, app: undefined };
+            appName = app.name;
+            const opened = this.#opened.get(ctx.conversationId) ?? new Set();
+            opened.add(app.bundleId);
+            this.#opened.set(ctx.conversationId, opened);
         }
-        this.#acting = ctx.conversationId;
-        try {
-            return await this.#manager.execute(run, ctx);
+        // A mission browses in buddi's own browser only: asked for the owner's Chrome, it is told so plainly (no pin changes that).
+        if (unattended && command.prefer === 'yours') {
+            this.telemetry.stop('route-unavailable', { route: 'chrome', agent: ctx.agentId, ...missionMark(ctx) });
+            throw new ToolRefusal(UNATTENDED_CHROME);
+        }
+        let route = this.#current.get(key);
+        let choice = { route, reason: 'continuing' };
+        const site = siteOf(command.url);
+        if (!route || command.action === 'navigate' || command.action === 'open') {
+            const { allowed, available } = this.#usable();
+            choice = chooseRoute({ command: run, prefer: command.prefer, pins: this.#pinFor(ctx), allowed, available, signInSite: this.#signInSite(site), unattended });
+            // A task already in the owner's Chrome stays there for its next page (a checkout on
+            // another domain keeps his sign-in), unless something asked for another route.
+            if (route === 'chrome' && command.action === 'navigate' && choice.route === 'own' && choice.reason === 'default' && allowed.chrome && available.chrome) {
+                choice = { route: 'chrome', reason: 'continuing' };
+            }
+            if (!choice.route) {
+                this.telemetry.stop('apps-unavailable', { route: 'apps', agent: ctx.agentId, ...missionMark(ctx) });
+                throw new Error(unattended ? UNATTENDED_APPS : APPS_UNAVAILABLE);
+            }
+            if (choice.fallbackFrom)
+                this.telemetry.stop('route-unavailable', { route: choice.route, agent: ctx.agentId, ...missionMark(ctx), ...(site ? { host: site } : {}) });
+            if (route && route !== choice.route)
+                await this.#managers[route].release(ctx.conversationId, ctx.agentId);
+            if (route !== choice.route)
+                this.telemetry.record({ type: 'browser.route', chosen: choice.route, reason: choice.reason, ...(choice.fallbackFrom ? { fallbackFrom: choice.fallbackFrom } : {}), agent: ctx.agentId, ...missionMark(ctx), ...(site ? { host: site } : {}) });
+            route = choice.route;
+            this.#current.set(key, route);
         }
-        finally {
-            if (this.#acting === ctx.conversationId)
-                this.#acting = undefined;
+        let result;
+        {
+            try {
+                result = await this.#managers[route].execute(run, ctx);
+            }
+            catch (error) {
+                // The owner's Chrome went away: the same page in buddi's own browser, silently.
+                if (route !== 'chrome' || !(error instanceof Error) || !error.message.includes(NOT_CONNECTED.slice(0, 30)))
+                    throw error;
+                this.telemetry.stop('not-connected', { route: 'chrome', agent: ctx.agentId, ...missionMark(ctx), ...(site ? { host: site } : {}) });
+                const last = this.#managers.chrome.child({ agentId: ctx.agentId, conversationId: ctx.conversationId })?.lastUrl;
+                await this.#managers.chrome.release(ctx.conversationId, ctx.agentId);
+                route = 'own';
+                this.#current.set(key, route);
+                choice = { route, reason: 'chrome-unavailable', fallbackFrom: 'chrome' };
+                const url = run.action === 'navigate' ? run.url : last;
+                if (!url)
+                    throw error;
+                result = await this.#managers.own.execute({ action: 'navigate', url }, ctx);
+            }
+            ({ result, route, choice } = await this.#walls(result, route, choice, ctx, unattended));
         }
+        return this.#annotate(result, route, choice, ctx, appName);
     }
     /**
-     * The gates `execute` runs before anything reaches a manager, secret uses
-     * included: settings are not changing mid-flight, and a request the owner
-     * revoked while changing them is not one a secret can ride.
+     * A login wall or a human check on the page just returned. In buddi's own
+     * browser a sign-in moves to the owner's Chrome when it is allowed and
+     * connected (the site is remembered as one that needs his sign-in); a
+     * stored login is pointed at; otherwise one Sign in card. A captcha is a
+     * Human check card wherever it appears.
      */
-    #secret(run, ctx) {
-        if (this.#changing)
-            throw new Error('Computer/browser settings are changing. Wait for the owner.');
-        for (const [id, record] of this.#requests)
-            if (record.expiresAt <= Date.now())
-                this.#requests.delete(id);
-        if (ctx.ownerRequest) {
-            if (this.#requests.get(ctx.ownerRequest.id)?.revoked)
-                throw new Error('Control settings changed. A new owner request is required.');
-            this.#requests.set(ctx.ownerRequest.id, { expiresAt: ctx.ownerRequest.expiresAt, revoked: false });
-        }
-        return run(this.#manager);
+    async #walls(result, route, choice, ctx, unattended) {
+        const observation = result;
+        if (!observation?.observation || observation.needsOwner)
+            return { result, route, choice };
+        const wall = detectWall(observation.observation);
+        if (!wall)
+            return { result, route, choice };
+        const scope = { agentId: ctx.agentId, conversationId: ctx.conversationId };
+        const child = this.#managers[route].child(scope);
+        if (!child)
+            return { result, route, choice };
+        const url = observation.observation.url;
+        const site = siteOf(url);
+        if (wall === 'human') {
+            this.telemetry.stop('human-check', { route, agent: ctx.agentId, ...missionMark(ctx), ...(site ? { host: site } : {}) });
+            const card = child.park('human');
+            return { result: { ...observation, completed: false, needsOwner: card, message: `${site ?? 'This page'} asks for a human. Say so in one sentence and stop; the card asks the owner to take over.` }, route, choice };
+        }
+        this.#learn(site);
+        const { allowed, available } = this.#usable();
+        const chromeUsable = allowed.chrome && available.chrome && !unattended;
+        // A pin to another route (the conversation's, the agent's, the default) holds here too:
+        // the move to the owner's Chrome is then his choice on the card, never automatic.
+        const pins = this.#pinFor(ctx);
+        const pin = [pins.conversation, pins.agent, pins.global].find((value) => value !== undefined && value !== 'auto');
+        if (route === 'own' && chromeUsable && (pin === undefined || pin === 'chrome')) {
+            // The owner is signed in there: the same address, in a background tab of his Chrome.
+            await this.#managers.own.release(ctx.conversationId, ctx.agentId);
+            const key = this.#key(ctx.buddi.owner.id, ctx.agentId, ctx.conversationId);
+            this.#current.set(key, 'chrome');
+            this.telemetry.record({ type: 'browser.route', chosen: 'chrome', reason: 'sign-in-fallback', fallbackFrom: 'own', agent: ctx.agentId, ...missionMark(ctx), ...(site ? { host: site } : {}) });
+            const moved = await this.#managers.chrome.execute({ action: 'navigate', url }, ctx);
+            return this.#walls(moved, 'chrome', { route: 'chrome', reason: 'sign-in-fallback', fallbackFrom: 'own' }, ctx, unattended);
+        }
+        if (await this.#storedLogin(ctx, url)) {
+            return { result: { ...observation, message: `${observation.message ?? ''} This is a sign-in page and the owner keeps a login for it: secret.list, then secret.fill (a TOTP secret answers a code).`.trim() }, route, choice };
+        }
+        // A mission's sign-in is one of the four moments too: the card parks the run until the owner answers (Take over, or a saved login).
+        this.telemetry.stop('sign-in', { route, agent: ctx.agentId, ...missionMark(ctx), ...(site ? { host: site } : {}) });
+        const card = child.park(wall === 'code' ? 'code' : 'sign-in', { chrome: route === 'chrome' ? 'none' : chromeUsable ? 'usable' : allowed.chrome && !available.chrome ? 'offline' : 'none', storedLogin: false });
+        return { result: { ...observation, completed: false, needsOwner: card, message: `${card.title}. Say that in one sentence and stop; the card has Take over. You continue when the owner gives the page back.` }, route, choice };
+    }
+    #annotate(result, route, choice, ctx, appName) {
+        if (!result || typeof result !== 'object')
+            return result;
+        const value = result;
+        const site = siteOf(value.observation?.url) ?? undefined;
+        let note;
+        const reason = choice.reason;
+        if (route !== 'own' || choice.fallbackFrom) {
+            const candidate = routeNote(route, reason, site, appName);
+            const said = `${ctx.conversationId}|${route}|${site ?? appName ?? ''}`;
+            if (candidate && !this.#noted.has(said) && reason !== 'continuing') {
+                this.#noted.add(said);
+                note = candidate;
+            }
+        }
+        if (value.needsOwner)
+            this.#ask(ctx, value.needsOwner);
+        return { ...value, route, ...(note ? { routeNote: note } : {}) };
+    }
+    /** The secret tools act on the page the conversation is already on, whichever route it is. */
+    async #secretRoute(ctx) {
+        if (!this.#enabled)
+            throw new Error('Browser driving is available through buddi serve.');
+        if (this.#activeStop())
+            throw new Error(browserStoppedMessage(ctx.surface));
+        const found = ctx.agentId && ctx.conversationId ? this.#pageOf({ agentId: ctx.agentId, conversationId: ctx.conversationId }) : undefined;
+        return found?.manager ?? this.#managers.own;
     }
     async secretFill(input, ctx) {
-        return this.#secret((manager) => manager.secretFill(input, ctx), ctx);
+        const manager = await this.#secretRoute(ctx);
+        const result = await manager.secretFill(input, ctx);
+        const card = result?.needsOwner;
+        if (card)
+            this.#ask(ctx, card);
+        return result;
     }
     async secretType(input, ctx) {
-        return this.#secret((manager) => manager.secretType(input, ctx), ctx);
+        const manager = await this.#secretRoute(ctx);
+        const result = await manager.secretType(input, ctx);
+        const card = result?.needsOwner;
+        if (card)
+            this.#ask(ctx, card);
+        return result;
     }
-    async control(action, sessionId) {
-        if (this.#changing)
-            throw new Error('Wait for the settings change to finish.');
-        await this.#manager.control(action, sessionId);
-        return this.status();
+    /**
+     * The owner spoke or tapped in a conversation. Every page there gets a
+     * fresh budget and its card is answered: Look / Take over hands the page
+     * over, Use my Chrome pins the conversation to it, Resume lifts the Stop.
+     */
+    async touch(input) {
+        const text = input.text ?? '';
+        let answered;
+        const stopCard = this.#stopCards.get(input.conversationId);
+        if (stopCard) {
+            const answer = cardAnswer(stopCard, text);
+            if (answer)
+                this.#stopCards.delete(input.conversationId);
+            if (answer === 'resume') {
+                await this.control('resume');
+                answered = 'resume';
+            }
+        }
+        for (const route of ROUTES) {
+            for (const { child, card } of this.#managers[route].renew(input.conversationId, input.agentId)) {
+                if (!card)
+                    continue;
+                const answer = cardAnswer(card, text);
+                if (answer === 'takeover') {
+                    const id = child.status().session?.id;
+                    if (id) {
+                        await this.control('takeover', id).catch(() => undefined);
+                        answered = 'takeover';
+                    }
+                }
+                else if (answer === 'chrome') {
+                    this.#pins.set(input.conversationId, 'chrome');
+                    this.#later(this.#savePins());
+                    const session = child.status().session;
+                    const last = child.lastUrl;
+                    if (session && route !== 'chrome') {
+                        await this.#managers[route].release(input.conversationId, session.agentId);
+                        for (const [key] of this.#current)
+                            if (key.endsWith(JSON.stringify(input.conversationId) + ']'))
+                                this.#current.delete(key);
+                        if (last)
+                            this.#managers.chrome.remember(session.agentId, input.conversationId, last);
+                    }
+                    answered = 'chrome';
+                }
+                else if (answer)
+                    answered = answer;
+            }
+        }
+        return answered ? { answered } : {};
     }
-    async configure(input) {
-        const next = settingsSchema.parse(input);
-        if (next.mode === 'computer' && !this.#macOS)
-            throw new Error('Computer control is macOS-only. Choose another mode.');
+    /** Writes nobody waits for, finished before shutdown so a closing process loses none. */
+    #pending = new Set();
+    #later(work) {
+        const tracked = work.catch(() => undefined).finally(() => { this.#pending.delete(tracked); });
+        this.#pending.add(tracked);
+    }
+    async #savePins() { await this.#writeJson('pins.json', Object.fromEntries(this.#pins)).catch(() => undefined); }
+    /** Pin a conversation to a route (`/use browser:chrome`), or clear it with `auto`. */
+    async pin(conversationId, pin) {
+        if (!PIN_VALUES.includes(pin))
+            throw new Error(`A pin is one of ${PIN_VALUES.join(', ')}.`);
+        if (pin === 'auto')
+            this.#pins.delete(conversationId);
+        else
+            this.#pins.set(conversationId, pin);
+        await this.#savePins();
+        return this.status({ conversationId });
+    }
+    async control(action, sessionId, options = {}) {
         if (!this.#enabled)
-            throw new Error('Host control is unavailable. Start buddi serve.');
-        if (this.#changing)
-            throw new Error('Settings are already changing.');
-        const current = this.#manager.status();
-        if (current.busy || current.sessions?.length)
-            throw new Error('Release all active sessions before changing control settings.');
-        this.#changing = true;
-        try {
-            await mkdir(this.dir, { recursive: true, mode: 0o700 });
-            const file = path.join(this.dir, 'settings.json');
-            const temp = `${file}.${randomUUID()}.tmp`;
-            await writeFile(temp, JSON.stringify(next), { mode: 0o600 });
-            await rename(temp, file);
-            for (const record of this.#requests.values())
-                record.revoked = true;
-            await this.#manager.shutdown();
-            this.#settings = next;
-            this.#manager = this.#create();
-            await this.#manager.enable();
+            throw new Error('The host browser service is unavailable.');
+        if (!sessionId && action === 'stop') {
+            // Stop agents' browsing: every page closes, and it expires (an hour by default) unless "until I say".
+            const minutes = options.forever ? 0 : this.#settings.stopExpiryMinutes;
+            const at = this.#now();
+            this.#stop = { at, ...(minutes > 0 ? { until: at + minutes * 60_000 } : {}) };
+            await this.#writeJson('control.json', { stopped: true, at, until: this.#stop.until ?? null });
+            await Promise.all(ROUTES.map((route) => this.#managers[route].control('stop')));
+            this.#current.clear();
             return this.status();
         }
-        finally {
-            this.#changing = false;
+        if (!sessionId && action === 'resume') {
+            this.#stop = undefined;
+            this.#stopCards.clear();
+            await this.#writeJson('control.json', { stopped: false });
+            return this.status();
         }
-    }
-    async checkPermissions(prompt = false) {
-        if (this.#changing || this.#manager.status().busy || this.#manager.status().sessions?.length)
-            throw new Error('Release computer/browser sessions before checking permissions.');
-        this.#changing = true;
-        try {
-            if (!this.#macOS)
-                this.#permissions = { supported: false, accessibility: false, screenRecording: false, message: 'Computer mode requires macOS 14+. Browser automation remains an explicit alternative.' };
-            // No helper on disk: a fact the "Use my apps" card already shows, not a failure to shout about.
-            else if (!this.options.bridge && !(this.options.helperPresent ?? computerHelperPresent)())
-                this.#permissions = { supported: false, accessibility: false, screenRecording: false, message: COMPUTER_HELPER_MISSING };
-            else {
-                const bridge = this.options.bridge?.() ?? new NativeComputerBridge();
-                const result = await bridge.run({ operation: 'permissions', prompt });
-                this.#permissions = { supported: result.supported === true, accessibility: result.accessibility === true, screenRecording: result.screenRecording === true };
+        if (!sessionId) {
+            const pages = ROUTES.flatMap((route) => this.#managers[route].pages());
+            if (pages.length === 0 && action === 'release')
+                return this.status();
+            throw new Error('Select a page before using this control.');
+        }
+        const found = this.#pageOf({ sessionId });
+        if (!found)
+            throw new Error('That page changed. Refresh before controlling it.');
+        if (action === 'takeover') {
+            // One page in the owner's hands at a time.
+            const held = ROUTES.flatMap((route) => this.#managers[route].pages()).find((page) => page.status().state === 'paused' && page.status().session?.id !== sessionId);
+            if (held)
+                throw new Error('You already have a page in your hands. Give it back first.');
+        }
+        const before = found.manager.status({ sessionId });
+        await found.manager.control(action, sessionId);
+        // Given back: the run that waited on the owner carries on (a parked mission, a held conversation).
+        if (action === 'resume' && before.state === 'paused' && before.session) {
+            const info = { sessionId, agentId: before.session.agentId, conversationId: before.session.conversationId };
+            for (const listener of this.#giveBack) {
+                try {
+                    listener(info);
+                }
+                catch { /* a listener never fails the give-back */ }
             }
-            return this.status();
         }
-        finally {
-            this.#changing = false;
+        // The page asked about, not whichever page changed last.
+        return this.status({ sessionId });
+    }
+    /** Hear every give-back of a page the owner held. Returns the unsubscribe. */
+    onGiveBack(listener) {
+        this.#giveBack.add(listener);
+        return () => { this.#giveBack.delete(listener); };
+    }
+    /**
+     * Change what agents may use. No lock: a page already open keeps working,
+     * and turning a route off closes its pages.
+     */
+    async configure(input) {
+        if (!this.#enabled)
+            throw new Error('Host control is unavailable. Start buddi serve.');
+        // Removing a sign-in site removes it wherever it is kept: the owner's list and the sites buddi learned.
+        let change = input;
+        if (change && typeof change === 'object' && !Array.isArray(change) && 'forgetSignInSite' in change) {
+            const { forgetSignInSite, ...rest } = change;
+            if (typeof forgetSignInSite !== 'string' || forgetSignInSite.trim() === '')
+                throw new Error('forgetSignInSite is a site, like amazon.com.');
+            const site = forgetSignInSite.trim().toLowerCase();
+            if (this.#learned.delete(site))
+                await this.#saveLearned();
+            const listed = Array.isArray(rest.signInSites) ? rest.signInSites : this.#settings.signInSites;
+            change = { ...rest, signInSites: listed.filter((entry) => entry !== site) };
         }
+        const next = applySettingsChange(this.#settings, change);
+        if (next.yourApps !== 'off' && this.#settings.yourApps === 'off' && !this.#pluginApps() && !this.options.drivers?.apps)
+            throw new Error('Your apps need the Computer plugin. Install it from Settings → Plugins first.');
+        const chromeOff = this.#settings.yourChrome && !next.yourChrome;
+        const appsOff = this.#settings.yourApps !== 'off' && next.yourApps === 'off';
+        await this.#writeSettings(next);
+        if (chromeOff)
+            await this.#managers.chrome.control('stop');
+        if (appsOff)
+            await this.#managers.apps.control('stop');
+        for (const [key, route] of this.#current)
+            if ((chromeOff && route === 'chrome') || (appsOff && route === 'apps'))
+                this.#current.delete(key);
+        return this.status();
+    }
+    async shutdown() {
+        this.#enabled = false;
+        await Promise.all(ROUTES.map((route) => this.#managers[route].shutdown()));
+        await Promise.all([...this.#pending]);
     }
-    async shutdown() { this.#enabled = false; await this.#manager.shutdown(); }
 }
 //# sourceMappingURL=controller.js.map