@xopcai/xopc 0.0.251 → 0.0.252

package/dist/src/gateway/hono/routes/browser.js

@@ -1,89 +1,29 @@
-import net from "node:net";
+import { decideBrowserApproval, listBrowserApprovals } from "../../../browser/policy/approval-store.js";
+import { isLoopbackClientIp } from "../../security/loopback.js";
+import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
-const DEFAULT_EXTENSION_PORT = 19820;
-const DEFAULT_EXTENSION_HOST = "127.0.0.1";
-let manualExtensionHandle = null;
-function loopbackHostnameFromUrl(input) {
-	let parsed;
+/** Browser Control status, approvals, and driver diagnostics. */
+const EXTENSION_ENDPOINT = "http://127.0.0.1:19820/";
+function isLocalOwnerRequest(c, service) {
+	if (service.currentConfig.gateway?.bind === "loopback") return true;
 	try {
-		parsed = new URL(input);
+		return isLoopbackClientIp(getConnInfo(c).remote.address);
 	} catch {
-		return null;
+		return false;
 	}
-	const proto = parsed.protocol;
-	if (proto !== "ws:" && proto !== "wss:" && proto !== "http:" && proto !== "https:") return null;
-	const host = parsed.hostname.toLowerCase();
-	if (host === "127.0.0.1" || host === "localhost" || host === "::1") return host;
-	return null;
-}
-function isLoopbackHost(host) {
-	const h = host.trim().toLowerCase();
-	return h === "127.0.0.1" || h === "localhost" || h === "::1" || h === "[::1]";
-}
-function parseExtensionProbePort(raw) {
-	if (!raw) return void 0;
-	const n = Number.parseInt(raw, 10);
-	if (!Number.isFinite(n) || n < 1024 || n > 65535) return void 0;
-	return n;
-}
-function isLoopbackPortOpen(host, port, timeoutMs = 500) {
-	return new Promise((resolve) => {
-		const socket = net.connect({
-			host,
-			port
-		});
-		const finish = (open) => {
-			socket.removeAllListeners();
-			try {
-				socket.destroy();
-			} catch {}
-			resolve(open);
-		};
-		socket.setTimeout(timeoutMs);
-		socket.once("connect", () => finish(true));
-		socket.once("timeout", () => finish(false));
-		socket.once("error", () => finish(false));
-	});
-}
-async function readExtensionBridgeSnapshot() {
-	const { getExtensionBrowserServerSnapshot } = await import("../../../browser/providers/extension-ws-acquire.js");
-	return getExtensionBrowserServerSnapshot();
-}
-async function stopExtensionBridgeFromSettings(service) {
-	if (manualExtensionHandle) {
-		try {
-			await manualExtensionHandle.release();
-		} catch {}
-		manualExtensionHandle = null;
-	}
-	await service.releaseBrowserExtensionBridge();
-	const { forceShutdownExtensionBrowserServer } = await import("../../../browser/providers/extension-ws-acquire.js");
-	return { forcedShutdown: await forceShutdownExtensionBrowserServer() };
-}
-function resolveExtensionStatusTarget(browser, query) {
-	const backend = typeof browser?.backend === "string" ? browser.backend : "extension";
-	const probe = query.probe === "1" || query.probe === "true";
-	if (!probe && backend !== "extension") return null;
-	const ext = browser?.extension;
-	const configPort = typeof ext?.port === "number" && ext.port >= 1024 && ext.port <= 65535 ? Math.floor(ext.port) : DEFAULT_EXTENSION_PORT;
-	const configHost = typeof ext?.host === "string" && ext.host.trim() ? ext.host.trim() : DEFAULT_EXTENSION_HOST;
-	const port = parseExtensionProbePort(query.port) ?? configPort;
-	const host = typeof query.host === "string" && query.host.trim() ? query.host.trim() : configHost;
-	if (!isLoopbackHost(host)) return null;
-	return {
-		host,
-		port,
-		backend: probe && backend !== "extension" ? "extension" : backend
-	};
 }
 function registerBrowserRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
 	authenticated.get("/api/browser/extension-status", async (c) => {
-		const target = resolveExtensionStatusTarget(void 0, {
-			probe: c.req.query("probe"),
-			host: c.req.query("host"),
-			port: c.req.query("port")
-		});
+		const { getExtensionBrowserServerSnapshot } = await import("../../../browser/providers/extension-ws-acquire.js");
+		const snapshot = getExtensionBrowserServerSnapshot();
+		let running = snapshot.active;
+		let connected = false;
+		try {
+			const payload = await (await fetch(EXTENSION_ENDPOINT, { signal: AbortSignal.timeout(2e3) })).json();
+			running ||= payload.ok === true;
+			connected = payload.connected === true;
+		} catch {}
 		let artifacts;
 		try {
 			const { browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
@@ -97,518 +37,56 @@ function registerBrowserRoutes(authenticated, deps) {
 				needsChromeReload: doctor.needsChromeReload
 			};
 		} catch {}
-		if (!target) return c.json({
-			running: false,
-			connected: false,
-			backend: "extension",
-			artifacts
-		});
-		const snapshot = await readExtensionBridgeSnapshot();
-		let probeRunning = false;
-		let probeConnected = false;
-		try {
-			const data = await (await fetch(`http://${target.host}:${target.port}/`, { signal: AbortSignal.timeout(2e3) })).json();
-			probeRunning = Boolean(data.ok);
-			probeConnected = Boolean(data.connected);
-		} catch {}
-		const running = probeRunning || snapshot.active;
-		const portConflict = !running && !snapshot.active ? await isLoopbackPortOpen(target.host, target.port) : false;
 		return c.json({
 			running,
-			connected: probeConnected,
-			backend: target.backend,
+			connected,
+			driverKind: "extension",
 			artifacts,
 			bridgeHeld: snapshot.active,
-			refCount: snapshot.refCount,
-			manualBridge: manualExtensionHandle !== null,
-			portConflict
+			refCount: snapshot.refCount
 		});
 	});
-	authenticated.get("/api/browser/extension/doctor", async (c) => {
-		const cacheDirRaw = c.req.query("cacheDir");
-		try {
-			const { browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
-			const status = await browserExtDoctor({ cacheDir: cacheDirRaw && cacheDirRaw.trim() ? cacheDirRaw.trim() : void 0 });
-			return c.json({
-				ok: true,
-				payload: status
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 400);
-		}
-	});
-	authenticated.post("/api/browser/extension/install", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cacheDir = typeof input.cacheDir === "string" && input.cacheDir.trim() ? input.cacheDir.trim() : void 0;
-		const force = input.force === true;
-		try {
-			const { ensureBrowserExtensionArtifacts, browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
-			const result = await ensureBrowserExtensionArtifacts({
-				cacheDir,
-				force
-			});
-			const doctor = await browserExtDoctor({ cacheDir });
-			return c.json({
-				ok: true,
-				payload: {
-					...result,
-					doctor
-				}
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/open", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cacheDir = typeof input.cacheDir === "string" && input.cacheDir.trim() ? input.cacheDir.trim() : void 0;
-		const actionRaw = typeof input.action === "string" ? input.action.trim() : "both";
-		const action = actionRaw === "chrome" || actionRaw === "folder" || actionRaw === "both" ? actionRaw : "both";
-		try {
-			const { openBrowserExtensionInstallUi } = await import("../../../browser/providers/browser-ext-install.js");
-			const result = await openBrowserExtensionInstallUi({
-				action,
-				cacheDir
-			});
-			return c.json({
-				ok: true,
-				payload: result
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/start", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const port = typeof input.port === "number" && input.port >= 1024 && input.port <= 65535 ? Math.floor(input.port) : DEFAULT_EXTENSION_PORT;
-		const hostRaw = typeof input.host === "string" && input.host.trim() ? input.host.trim() : DEFAULT_EXTENSION_HOST;
-		if (!isLoopbackHost(hostRaw)) return c.json({
+	authenticated.get("/api/browser/approvals", (c) => {
+		if (!isLocalOwnerRequest(c, service)) return c.json({
 			ok: false,
-			error: "extension bridge host must be loopback"
-		}, 400);
-		try {
-			if (manualExtensionHandle && (manualExtensionHandle.host !== hostRaw || manualExtensionHandle.port !== port)) {
-				await manualExtensionHandle.release();
-				manualExtensionHandle = null;
-			}
-			if (!manualExtensionHandle) {
-				const { acquireExtensionBrowserServer } = await import("../../../browser/providers/extension-ws-acquire.js");
-				const { release } = await acquireExtensionBrowserServer({
-					host: hostRaw,
-					port
-				});
-				manualExtensionHandle = {
-					release,
-					host: hostRaw,
-					port
-				};
-			}
-			return c.json({
-				ok: true,
-				payload: {
-					running: true,
-					host: hostRaw,
-					port
-				}
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/stop", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { forcedShutdown } = await stopExtensionBridgeFromSettings(service);
-			return c.json({
-				ok: true,
-				payload: {
-					running: false,
-					forcedShutdown
-				}
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/disconnect", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { getExtensionBrowserProvider } = await import("../../../browser/providers/extension-ws-acquire.js");
-			const provider = getExtensionBrowserProvider();
-			if (!provider?.isConnected()) return c.json({
-				ok: true,
-				payload: {
-					connected: false,
-					alreadyDisconnected: true
-				}
-			});
-			provider.disconnectClient();
-			return c.json({
-				ok: true,
-				payload: { connected: false }
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.get("/api/browser/playwright/doctor", async (c) => {
-		try {
-			const { playwrightChromiumDoctor } = await import("../../../browser/providers/playwright-doctor.js");
-			const payload = await playwrightChromiumDoctor();
-			return c.json({
-				ok: true,
-				payload
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.get("/api/browser/cloakbrowser/doctor", async (c) => {
-		const cacheDirRaw = c.req.query("cacheDir");
-		const binaryPathRaw = c.req.query("binaryPath");
-		try {
-			const { cloakBrowserDoctor } = await import("../../../browser/providers/cloakbrowser.js");
-			const status = await cloakBrowserDoctor({
-				cacheDir: cacheDirRaw && cacheDirRaw.trim() ? cacheDirRaw.trim() : void 0,
-				binaryPath: binaryPathRaw && binaryPathRaw.trim() ? binaryPathRaw.trim() : void 0
-			});
-			return c.json({
-				ok: true,
-				payload: status
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 400);
-		}
-	});
-	authenticated.get("/api/browser/cloakbrowser/status", async (c) => {
-		try {
-			const { cloakBrowserConfigFromAgentDefaults } = await import("../../../browser/backend-from-config.js");
-			const { probeCloakBrowserRuntime } = await import("../../../browser/providers/cloakbrowser.js");
-			const status = await probeCloakBrowserRuntime(cloakBrowserConfigFromAgentDefaults(service.currentConfig));
-			return c.json({
-				ok: true,
-				payload: status
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/cloakbrowser/launch", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { cloakBrowserConfigFromAgentDefaults } = await import("../../../browser/backend-from-config.js");
-			const { launchCloakBrowser } = await import("../../../browser/providers/cloakbrowser.js");
-			const config = cloakBrowserConfigFromAgentDefaults(service.currentConfig);
-			const result = await launchCloakBrowser({
-				...config,
-				skipPlaywrightConnect: true
-			});
-			return c.json({
-				ok: true,
-				payload: {
-					running: true,
-					reused: result.reused,
-					port: result.cdpPort,
-					pid: result.pid,
-					userDataDir: result.userDataDir,
-					temporaryProfile: config.temporaryProfile === true
-				}
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/cdp/ping", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: "invalid JSON body"
-			}, 400);
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cdpUrl = typeof input.cdpUrl === "string" ? input.cdpUrl.trim() : "";
-		if (!cdpUrl) return c.json({
-			ok: false,
-			error: "cdpUrl is required"
-		}, 400);
-		if (!loopbackHostnameFromUrl(cdpUrl)) return c.json({
-			ok: false,
-			error: "CDP ping only allowed for loopback hosts (127.0.0.1 / localhost / ::1)"
+			error: "Local owner access required."
 		}, 403);
-		let httpBase;
-		try {
-			httpBase = new URL(cdpUrl);
-			httpBase.protocol = httpBase.protocol === "wss:" ? "https:" : "http:";
-			httpBase.pathname = "/json/version";
-			httpBase.search = "";
-			httpBase.hash = "";
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : "invalid cdpUrl"
-			}, 400);
-		}
-		try {
-			const res = await fetch(httpBase.toString(), { signal: AbortSignal.timeout(2e3) });
-			if (!res.ok) return c.json({
-				ok: true,
-				payload: {
-					reachable: false,
-					status: res.status
-				}
-			});
-			const data = await res.json();
-			return c.json({
-				ok: true,
-				payload: {
-					reachable: true,
-					browser: data.Browser ?? null,
-					protocolVersion: data["Protocol-Version"] ?? null,
-					webSocketDebuggerUrl: data.webSocketDebuggerUrl ?? null
-				}
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: true,
-				payload: {
-					reachable: false,
-					error: message
-				}
-			});
-		}
-	});
-	authenticated.post("/api/browser/cdp/launch", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const executablePath = typeof input.executablePath === "string" && input.executablePath.trim() ? input.executablePath.trim() : void 0;
-		try {
-			const { launchLocalCdpChrome } = await import("../../../browser/cdp-local-launcher.js");
-			const result = await launchLocalCdpChrome({ executablePath });
-			return c.json({
-				ok: true,
-				payload: result
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/cdp/stop", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: "invalid JSON body"
-			}, 400);
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const port = typeof input.port === "number" && Number.isInteger(input.port) ? input.port : NaN;
-		if (!Number.isFinite(port) || port < 1024 || port > 65535) return c.json({
-			ok: false,
-			error: "port must be an integer in [1024, 65535]"
-		}, 400);
-		const { stopLocalCdpChrome } = await import("../../../browser/cdp-local-launcher.js");
-		const stopped = await stopLocalCdpChrome(port);
 		return c.json({
 			ok: true,
-			payload: { stopped }
+			approvals: listBrowserApprovals(c.req.query("sessionKey"))
 		});
 	});
-	authenticated.get("/api/browser/cdp/instances", async (c) => {
-		const { listLocalCdpInstances } = await import("../../../browser/cdp-local-launcher.js");
+	authenticated.post("/api/browser/approvals/respond", strictRateLimitMiddleware, async (c) => {
+		if (!isLocalOwnerRequest(c, service)) return c.json({
+			ok: false,
+			error: "Local owner access required."
+		}, 403);
+		const body = await c.req.json().catch(() => null);
+		if (typeof body?.id !== "string" || body.decision !== "approved" && body.decision !== "denied") return c.json({
+			ok: false,
+			error: "id and decision are required."
+		}, 400);
+		const approval = decideBrowserApproval(body.id, body.decision);
+		if (!approval) return c.json({
+			ok: false,
+			error: "Approval not found."
+		}, 404);
 		return c.json({
 			ok: true,
-			payload: { instances: listLocalCdpInstances() }
-		});
-	});
-	authenticated.post("/api/browser/cloud/test-connection", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: "invalid JSON body"
-			}, 400);
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const provider = input.provider;
-		let apiKey = typeof input.apiKey === "string" ? input.apiKey.trim() : "";
-		if (apiKey === "***" || apiKey === "••••••••••••") apiKey = "";
-		if (!apiKey) {
-			if (provider === "browserbase") apiKey = process.env.BROWSERBASE_API_KEY ?? "";
-			else if (provider === "browser-use") apiKey = process.env.BROWSER_USE_API_KEY ?? "";
-		}
-		if (!apiKey) return c.json({
-			ok: true,
-			payload: {
-				reachable: false,
-				error: "No API key configured"
-			}
+			approval
 		});
-		try {
-			if (provider === "browserbase") {
-				const res = await fetch("https://api.browserbase.com/v1/projects", {
-					headers: { "x-bb-api-key": apiKey },
-					signal: AbortSignal.timeout(5e3)
-				});
-				if (!res.ok) return c.json({
-					ok: true,
-					payload: {
-						reachable: false,
-						status: res.status,
-						error: await res.text().catch(() => "")
-					}
-				});
-				const data = await res.json().catch(() => null);
-				const projects = Array.isArray(data) ? data : Array.isArray(data?.data) ? data.data : [];
-				return c.json({
-					ok: true,
-					payload: {
-						reachable: true,
-						projectCount: projects.length
-					}
-				});
-			}
-			if (provider === "browser-use") {
-				const res = await fetch("https://api.browser-use.com/api/v1/users/me", {
-					headers: { Authorization: `Bearer ${apiKey}` },
-					signal: AbortSignal.timeout(5e3)
-				});
-				if (!res.ok) return c.json({
-					ok: true,
-					payload: {
-						reachable: false,
-						status: res.status,
-						error: await res.text().catch(() => "")
-					}
-				});
-				return c.json({
-					ok: true,
-					payload: { reachable: true }
-				});
-			}
-			return c.json({
-				ok: false,
-				error: "provider must be browserbase or browser-use"
-			}, 400);
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: true,
-				payload: {
-					reachable: false,
-					error: message
-				}
-			});
-		}
-	});
-	authenticated.post("/api/browser/playwright/install", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { installPlaywrightChromium } = await import("../../../browser/providers/playwright-install.js");
-			const payload = await installPlaywrightChromium();
-			return c.json({
-				ok: true,
-				payload
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message || "Failed to install Playwright Chromium"
-			}, 500);
-		}
 	});
-	authenticated.post("/api/browser/cloakbrowser/install", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cacheDir = typeof input.cacheDir === "string" && input.cacheDir.trim() ? input.cacheDir.trim() : void 0;
-		const binaryPath = typeof input.binaryPath === "string" && input.binaryPath.trim() ? input.binaryPath.trim() : void 0;
+	authenticated.get("/api/browser/playwright/doctor", async (c) => {
 		try {
-			const { installCloakBrowser } = await import("../../../browser/providers/cloakbrowser.js");
-			const status = await installCloakBrowser({
-				cacheDir,
-				binaryPath
-			});
+			const { playwrightChromiumDoctor } = await import("../../../browser/providers/playwright-doctor.js");
 			return c.json({
 				ok: true,
-				payload: status
+				payload: await playwrightChromiumDoctor()
 			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
+		} catch (error) {
 			return c.json({
 				ok: false,
-				error: message
+				error: error instanceof Error ? error.message : String(error)
 			}, 500);
 		}
 	});

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -126,7 +126,14 @@ async function applyMiscPatch(config, body) {
 	}
 	if (body.browser !== void 0) {
 		if (typeof body.browser !== "object" || body.browser === null || Array.isArray(body.browser)) return patchError("browser must be an object");
-		const parsed = BrowserConfigSchema.safeParse(body.browser);
+		const browserPatch = structuredClone(body.browser);
+		const driver = browserPatch.driver && typeof browserPatch.driver === "object" && !Array.isArray(browserPatch.driver) ? browserPatch.driver : void 0;
+		if (driver?.kind === "remote" && typeof driver.apiKey === "string" && isMaskedSecretPatchValue(driver.apiKey)) {
+			const currentKey = config.browser.driver.kind === "remote" ? config.browser.driver.apiKey : void 0;
+			if (currentKey) driver.apiKey = currentKey;
+			else delete driver.apiKey;
+		}
+		const parsed = BrowserConfigSchema.safeParse(browserPatch);
 		if (!parsed.success) return patchError(parsed.error.issues.map((i) => i.message).join("; "));
 		config.browser = parsed.data;
 	}

package/dist/src/gateway/hono/routes/config.js

@@ -116,17 +116,6 @@ function registerConfigRoutes(authenticated, deps) {
 	*/
 	authenticated.post("/api/gateway/reveal-auth-secret/:field", strictRateLimitMiddleware, revealGatewayAuthSecretHandler);
 	authenticated.post("/api/gateway/reveal-auth-secret", strictRateLimitMiddleware, revealGatewayAuthSecretHandler);
-	/** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */
-	authenticated.post("/api/agents/browser/reveal-cloud-api-key", strictRateLimitMiddleware, async (c) => {
-		const apiKey = service.currentConfig.browser?.cloud?.apiKey?.trim() || null;
-		return c.json({
-			ok: true,
-			payload: {
-				apiKey,
-				source: apiKey ? "config" : "none"
-			}
-		});
-	});
 	/** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */
 	authenticated.post("/api/tools/web/reveal-search-api-key", strictRateLimitMiddleware, async (c) => {
 		let index = -1;