@xopcai/xopc 0.0.264 → 0.0.265

package/dist/src/browser/providers/browser-ext-install.d.ts

@@ -3,7 +3,7 @@
  * Fixed path — gateway upgrades overwrite in place so Chrome sideload paths stay stable.
  */
 import type { Config } from '../../config/schema.js';
-export declare const BROWSER_EXT_REQUIRED_FILES: readonly ["manifest.json", "popup.html", "dist/background.js", "dist/content.js", "dist/popup.js"];
+export declare const BROWSER_EXT_REQUIRED_FILES: readonly ["manifest.json", "dist/background.js", "dist/sidepanel.html"];
 export type BrowserExtBundledFrom = 'npm-dist' | 'git-dev' | 'electron-asar' | 'env-override';
 export interface BrowserExtInstallMeta {
     xopcVersion: string;
@@ -32,6 +32,11 @@ export interface EnsureBrowserExtResult {
     xopcVersion: string;
     copied: boolean;
 }
+export interface BrowserNativeHostInstallResult {
+    installed: boolean;
+    manifestPaths: string[];
+    reason?: string;
+}
 /** Validate a directory contains a loadable extension tree. */
 export declare function validateBrowserExtLayout(dir: string): boolean;
 export declare function browserExtContentHash(dir: string): string;
@@ -59,6 +64,17 @@ export declare function ensureBrowserExtensionArtifacts(opts?: {
     force?: boolean;
     cacheDir?: string;
 }): Promise<EnsureBrowserExtResult>;
+export declare function browserNativeManifestDirectories(platform?: NodeJS.Platform, home?: string): string[];
+/** Install the local-only bootstrap host used to discover and pair with a Gateway. */
+export declare function installBrowserNativeMessagingHost(opts?: {
+    cacheDir?: string;
+    cliPath?: string;
+    nodePath?: string;
+    platform?: NodeJS.Platform;
+    home?: string;
+    configPath?: string;
+    stateDir?: string;
+}): Promise<BrowserNativeHostInstallResult>;
 /** Gateway startup hook: ensure artifacts only while the extension driver is active. */
 export declare function ensureBrowserExtensionOnStartup(config: Config | undefined): Promise<void>;
 export declare function readInstalledExtensionDir(cacheDir?: string): Promise<string | null>;

package/dist/src/browser/providers/browser-ext-install.js

@@ -1,12 +1,14 @@
 import { PACKAGE_VERSION, init_package_version } from "../../package-version.js";
+import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths, resolveBinDir } from "../../config/paths.js";
+import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
-import { resolvePackageRoot } from "../../infra/update-check.js";
 import { assertCacheDir } from "../cache-dir-policy.js";
+import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "../native-messaging-host.js";
+import { resolvePackageRoot } from "../../infra/update-check.js";
 import { dirname, join } from "node:path";
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
@@ -25,16 +27,13 @@ const META_FILENAME = ".meta.json";
 const STAGING_MAX_AGE_MS = 3600 * 1e3;
 const INSTALLED_ARTIFACT_NAMES = [
 	"manifest.json",
-	"popup.html",
 	"dist",
 	"icons"
 ];
 const BROWSER_EXT_REQUIRED_FILES = [
 	"manifest.json",
-	"popup.html",
 	"dist/background.js",
-	"dist/content.js",
-	"dist/popup.js"
+	"dist/sidepanel.html"
 ];
 function moduleDir() {
 	return dirname(fileURLToPath(import.meta.url));
@@ -45,7 +44,16 @@ function validateBrowserExtLayout(dir) {
 }
 function browserExtContentHash(dir) {
 	const hash = createHash("sha256");
-	for (const relativePath of BROWSER_EXT_REQUIRED_FILES) {
+	const collectFiles = (relativeDir) => readdirSync(join(dir, relativeDir), { withFileTypes: true }).flatMap((entry) => {
+		const relativePath = join(relativeDir, entry.name);
+		return entry.isDirectory() ? collectFiles(relativePath) : [relativePath];
+	});
+	const relativePaths = [
+		"manifest.json",
+		...collectFiles("dist"),
+		...collectFiles("icons")
+	].sort();
+	for (const relativePath of relativePaths) {
 		hash.update(relativePath);
 		hash.update(readFileSync(join(dir, relativePath)));
 	}
@@ -177,21 +185,25 @@ function copyBundledFile(src, dest) {
 	mkdirSync(dirname(dest), { recursive: true });
 	writeFileSync(dest, readFileSync(src));
 }
-const BROWSER_EXT_DIST_FILES = [
-	"background.js",
-	"content.js",
-	"popup.js"
-];
 const BROWSER_EXT_ICON_FILES = [
 	"icon-16.png",
 	"icon-32.png",
 	"icon-48.png",
 	"icon-128.png"
 ];
+function copyBundledDirectory(src, dest) {
+	mkdirSync(dest, { recursive: true });
+	for (const entry of readdirSync(src, { withFileTypes: true })) {
+		const sourcePath = join(src, entry.name);
+		const destinationPath = join(dest, entry.name);
+		if (entry.isDirectory()) copyBundledDirectory(sourcePath, destinationPath);
+		else copyBundledFile(sourcePath, destinationPath);
+	}
+}
 function copyBundledTree(src, dest) {
 	mkdirSync(dest, { recursive: true });
-	for (const name of ["manifest.json", "popup.html"]) copyBundledFile(join(src, name), join(dest, name));
-	for (const file of BROWSER_EXT_DIST_FILES) copyBundledFile(join(src, "dist", file), join(dest, "dist", file));
+	copyBundledFile(join(src, "manifest.json"), join(dest, "manifest.json"));
+	copyBundledDirectory(join(src, "dist"), join(dest, "dist"));
 	for (const icon of BROWSER_EXT_ICON_FILES) {
 		const iconSrc = join(src, "icons", icon);
 		if (existsSync(iconSrc)) copyBundledFile(iconSrc, join(dest, "icons", icon));
@@ -283,6 +295,60 @@ async function ensureBrowserExtensionArtifacts(opts) {
 		copied: true
 	};
 }
+function shellQuote(value) {
+	return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function browserNativeManifestDirectories(platform = process.platform, home = process.env.HOME || process.env.USERPROFILE || "") {
+	if (!home) return [];
+	if (platform === "darwin") return [
+		join(home, "Library/Application Support/Google/Chrome/NativeMessagingHosts"),
+		join(home, "Library/Application Support/Chromium/NativeMessagingHosts"),
+		join(home, "Library/Application Support/Microsoft Edge/NativeMessagingHosts"),
+		join(home, "Library/Application Support/BraveSoftware/Brave-Browser/NativeMessagingHosts")
+	];
+	if (platform === "linux") return [
+		join(home, ".config/google-chrome/NativeMessagingHosts"),
+		join(home, ".config/chromium/NativeMessagingHosts"),
+		join(home, ".config/microsoft-edge/NativeMessagingHosts"),
+		join(home, ".config/BraveSoftware/Brave-Browser/NativeMessagingHosts")
+	];
+	return [];
+}
+/** Install the local-only bootstrap host used to discover and pair with a Gateway. */
+async function installBrowserNativeMessagingHost(opts) {
+	const directories = browserNativeManifestDirectories(opts?.platform ?? process.platform, opts?.home);
+	if (directories.length === 0) return {
+		installed: false,
+		manifestPaths: [],
+		reason: "Native bootstrap installation is supported on macOS and Linux"
+	};
+	const cliPath = opts?.cliPath ?? process.argv[1];
+	if (!cliPath) throw new Error("Unable to resolve the xopc CLI entry point");
+	const hostPath = join((opts?.cacheDir?.trim() ? assertCacheDir(opts.cacheDir) : resolveBinDir()) || resolveBinDir(), "browser-native-host");
+	mkdirSync(dirname(hostPath), { recursive: true });
+	const stateDir = opts?.stateDir ?? resolveStateDir();
+	const configPath = opts?.configPath ?? resolveConfigPath();
+	await writeTextAtomic(hostPath, `#!/bin/sh\nexec env XOPC_STATE_DIR=${shellQuote(stateDir)} XOPC_CONFIG_PATH=${shellQuote(configPath)} XOPC_LOG_CONSOLE=false ${shellQuote(opts?.nodePath ?? process.execPath)} ${shellQuote(cliPath)} browser extension native-host\n`);
+	chmodSync(hostPath, 493);
+	const manifest = JSON.stringify({
+		name: BROWSER_NATIVE_HOST_NAME,
+		description: "xopc local browser pairing bootstrap",
+		path: hostPath,
+		type: "stdio",
+		allowed_origins: [`chrome-extension://${BROWSER_EXTENSION_ID}/`]
+	}, null, 2);
+	const manifestPaths = [];
+	for (const directory of directories) {
+		mkdirSync(directory, { recursive: true });
+		const manifestPath = join(directory, `${BROWSER_NATIVE_HOST_NAME}.json`);
+		await writeTextAtomic(manifestPath, manifest);
+		manifestPaths.push(manifestPath);
+	}
+	return {
+		installed: true,
+		manifestPaths
+	};
+}
 /** Gateway startup hook: ensure artifacts only while the extension driver is active. */
 async function ensureBrowserExtensionOnStartup(config) {
 	if (config?.browser.enabled === false || config?.browser.driver.kind !== "extension") return;
@@ -366,4 +432,4 @@ async function openBrowserExtensionInstallUi(opts) {
 	};
 }
 //#endregion
-export { BROWSER_EXT_REQUIRED_FILES, browserExtContentHash, browserExtDoctor, computeNeedsRefresh, ensureBrowserExtensionArtifacts, ensureBrowserExtensionOnStartup, openBrowserExtensionInstallUi, readInstalledExtensionDir, resolveBundledBrowserExtDir, resolveInstalledExtensionPath, resolveWindowsExtensionManager, validateBrowserExtLayout };
+export { BROWSER_EXT_REQUIRED_FILES, browserExtContentHash, browserExtDoctor, browserNativeManifestDirectories, computeNeedsRefresh, ensureBrowserExtensionArtifacts, ensureBrowserExtensionOnStartup, installBrowserNativeMessagingHost, openBrowserExtensionInstallUi, readInstalledExtensionDir, resolveBundledBrowserExtDir, resolveInstalledExtensionPath, resolveWindowsExtensionManager, validateBrowserExtLayout };

package/dist/src/browser/providers/extension.d.ts

@@ -31,6 +31,8 @@ export declare class ExtensionBrowserProvider {
     private connected;
     private extensionProtocolVersion;
     private extensionVersion;
+    private connectionId;
+    private principalId;
     private readonly config;
     private connectionWaiters;
     constructor(config?: ExtensionProviderConfig);
@@ -48,10 +50,12 @@ export declare class ExtensionBrowserProvider {
         protocolVersion: number | null;
         expectedProtocolVersion: number;
         extensionVersion: string | null;
+        principalId: string | null;
     };
     private protocolMismatchMessage;
     /** Shutdown the WebSocket server. */
     shutdown(): Promise<void>;
     private _handleMessage;
+    private _authenticateCandidate;
 }
 export declare function isBrowserWireResult(value: unknown): value is BrowserWireResult;

package/dist/src/browser/providers/extension.js

@@ -1,5 +1,10 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { deleteBrowserTabBindingsByPrincipal, getBrowserTabBindingById } from "../../storage/sqlite/browser-tab-binding-repository.js";
+import { getDevice } from "../../storage/sqlite/device-access-repository.js";
+import { isChromeExtensionOrigin } from "../../gateway/security/origin-check.js";
+import { browserWireAuthenticationPayload } from "../../../packages/browser-control-contract/src/index.js";
+import crypto from "node:crypto";
 //#region src/browser/providers/extension.ts
 /**
 * Extension browser provider — connects to the xopc Chrome Extension via WebSocket.
@@ -29,6 +34,8 @@ var ExtensionBrowserProvider = class {
 	connected = false;
 	extensionProtocolVersion = null;
 	extensionVersion = null;
+	connectionId = null;
+	principalId = null;
 	config;
 	connectionWaiters = [];
 	constructor(config) {
@@ -62,20 +69,56 @@ var ExtensionBrowserProvider = class {
 			server: this.server,
 			path: "/browser-ext"
 		});
-		this.wss.on("connection", (ws) => {
-			log.info("Chrome Extension connected");
-			const previousClient = this.clientWs;
-			this.clientWs = ws;
-			this.socketConnected = true;
-			this.handshakeReceived = false;
-			this.connected = false;
-			this.extensionProtocolVersion = null;
-			this.extensionVersion = null;
-			if (previousClient && previousClient !== ws) try {
-				previousClient.close();
-			} catch {}
+		this.wss.on("connection", (ws, request) => {
+			const origin = request.headers.origin?.toLowerCase();
+			if (!isChromeExtensionOrigin(origin)) {
+				ws.close(4403, "Chrome extension origin required");
+				return;
+			}
+			const challenge = {
+				type: "auth_challenge",
+				protocolVersion: 4,
+				connectionId: crypto.randomUUID(),
+				challenge: crypto.randomBytes(32).toString("base64url"),
+				issuedAt: Date.now()
+			};
+			let authenticated = false;
+			const authenticationTimer = setTimeout(() => {
+				if (!authenticated) ws.close(4401, "Browser authentication timed out");
+			}, 5e3);
+			ws.send(JSON.stringify(challenge));
 			ws.on("message", (data) => {
-				this._handleMessage(data.toString(), ws);
+				if (authenticated) {
+					this._handleMessage(data.toString(), ws);
+					return;
+				}
+				if (!this._authenticateCandidate(data.toString(), origin, challenge)) {
+					clearTimeout(authenticationTimer);
+					ws.close(4401, "Browser authentication failed");
+					return;
+				}
+				authenticated = true;
+				clearTimeout(authenticationTimer);
+				const message = JSON.parse(data.toString());
+				const previousClient = this.clientWs;
+				this.clientWs = ws;
+				this.socketConnected = true;
+				this.handshakeReceived = true;
+				this.connected = true;
+				this.extensionProtocolVersion = message.protocolVersion;
+				this.extensionVersion = message.extensionVersion;
+				this.connectionId = message.connectionId;
+				this.principalId = message.principalId;
+				if (previousClient && previousClient !== ws) try {
+					previousClient.close(4001, "Connection replaced");
+				} catch {}
+				for (const waiter of this.connectionWaiters) waiter.resolve();
+				this.connectionWaiters = [];
+				log.info({
+					principalId: message.principalId,
+					extensionId: message.extensionId,
+					connectionId: message.connectionId
+				}, "Chrome extension authenticated");
 			});
 			ws.on("close", (code, reason) => {
 				if (this.clientWs !== ws) return;
@@ -84,12 +127,16 @@ var ExtensionBrowserProvider = class {
 					reason: reason.toString(),
 					pendingCount: this.pending.size
 				}, "Chrome Extension disconnected");
+				const disconnectedPrincipalId = this.principalId;
 				this.clientWs = null;
 				this.socketConnected = false;
 				this.handshakeReceived = false;
 				this.connected = false;
 				this.extensionProtocolVersion = null;
 				this.extensionVersion = null;
+				this.connectionId = null;
+				this.principalId = null;
+				if (disconnectedPrincipalId) deleteBrowserTabBindingsByPrincipal(disconnectedPrincipalId);
 				for (const [id, req] of this.pending) {
 					clearTimeout(req.timer);
 					req.reject(/* @__PURE__ */ new Error("Extension disconnected"));
@@ -145,7 +192,7 @@ var ExtensionBrowserProvider = class {
 	/** Wait for the Chrome Extension to connect. */
 	async waitForConnection(timeoutMs) {
 		if (this.connected) return;
-		if (this.socketConnected && this.handshakeReceived && this.extensionProtocolVersion !== 3) throw new Error(this.protocolMismatchMessage());
+		if (this.socketConnected && this.handshakeReceived && this.extensionProtocolVersion !== 4) throw new Error(this.protocolMismatchMessage());
 		const timeout = timeoutMs ?? this.config.connectionTimeout;
 		return new Promise((resolve, reject) => {
 			const timer = setTimeout(() => {
@@ -171,10 +218,15 @@ var ExtensionBrowserProvider = class {
 			const detail = this.socketConnected ? this.protocolMismatchMessage() : "Extension not connected. Ensure the Chrome Extension is installed and connected.";
 			throw new Error(detail);
 		}
+		if (input.target?.kind === "attached_tab") {
+			const binding = getBrowserTabBindingById(input.target.bindingId);
+			if (!binding || binding.principalId !== this.principalId) throw new Error("Attached tab binding does not belong to the connected browser");
+		}
 		const id = `cmd_${++this.commandCounter}_${Date.now()}`;
 		const cmd = {
 			id,
-			protocolVersion: 3,
+			protocolVersion: 4,
+			connectionId: this.connectionId,
 			input,
 			timeoutMs: timeoutMs ?? this.config.commandTimeout,
 			visualFallback
@@ -207,12 +259,13 @@ var ExtensionBrowserProvider = class {
 			socketConnected: this.socketConnected,
 			connected: this.connected,
 			protocolVersion: this.extensionProtocolVersion,
-			expectedProtocolVersion: 3,
-			extensionVersion: this.extensionVersion
+			expectedProtocolVersion: 4,
+			extensionVersion: this.extensionVersion,
+			principalId: this.principalId
 		};
 	}
 	protocolMismatchMessage() {
-		return `Browser extension protocol mismatch (expected 3, received ${this.extensionProtocolVersion ?? "unknown"}). Reload the extension in Chrome.`;
+		return `Browser extension protocol mismatch (expected 4, received ${this.extensionProtocolVersion ?? "unknown"}). Reload the extension in Chrome.`;
 	}
 	/** Shutdown the WebSocket server. */
 	async shutdown() {
@@ -246,32 +299,19 @@ var ExtensionBrowserProvider = class {
 		this.handshakeReceived = false;
 		this.extensionProtocolVersion = null;
 		this.extensionVersion = null;
+		this.connectionId = null;
+		this.principalId = null;
 		log.info("Extension provider shut down");
 	}
 	_handleMessage(raw, sourceWs) {
 		if (sourceWs !== this.clientWs) return;
 		try {
 			const msg = JSON.parse(raw);
+			if (!this.connectionId || msg.connectionId !== this.connectionId) return;
 			if (msg.type === "status") {
 				const status = msg;
-				this.handshakeReceived = true;
-				this.extensionProtocolVersion = typeof status.protocolVersion === "number" ? status.protocolVersion : null;
-				this.extensionVersion = typeof status.extensionVersion === "string" ? status.extensionVersion : null;
-				this.connected = status.protocolVersion === 3;
-				if (this.connected) {
-					for (const waiter of this.connectionWaiters) waiter.resolve();
-					this.connectionWaiters = [];
-					log.debug(msg, "Compatible browser extension connected");
-				} else {
-					const error = new Error(this.protocolMismatchMessage());
-					for (const waiter of this.connectionWaiters) waiter.reject(error);
-					this.connectionWaiters = [];
-					log.warn({
-						expectedProtocolVersion: 3,
-						extensionProtocolVersion: this.extensionProtocolVersion,
-						extensionVersion: this.extensionVersion
-					}, "Browser extension protocol mismatch; reload the extension");
-				}
+				if (status.principalId !== this.principalId) return;
+				log.debug({ sessionCount: status.sessionCount }, "Browser extension status updated");
 				return;
 			}
 			if (isBrowserWireKeepAlive(msg)) return;
@@ -297,14 +337,40 @@ var ExtensionBrowserProvider = class {
 			log.error({ err: e }, "Failed to parse extension message");
 		}
 	}
+	_authenticateCandidate(raw, origin, challenge) {
+		try {
+			const message = JSON.parse(raw);
+			if (message.type !== "authenticate" || message.protocolVersion !== 4 || message.connectionId !== challenge.connectionId || `chrome-extension://${message.extensionId}` !== origin || Math.abs(Date.now() - challenge.issuedAt) > 5e3) return false;
+			const device = getDevice(message.principalId);
+			if (!device || device.revokedAt !== void 0 || device.platform !== "chrome" || device.extensionId !== message.extensionId) return false;
+			const payload = browserWireAuthenticationPayload({
+				protocolVersion: message.protocolVersion,
+				connectionId: message.connectionId,
+				challenge: challenge.challenge,
+				issuedAt: challenge.issuedAt,
+				principalId: message.principalId,
+				extensionId: message.extensionId,
+				extensionVersion: message.extensionVersion
+			});
+			return crypto.verify("sha256", Buffer.from(payload), {
+				key: crypto.createPublicKey({
+					key: device.publicKeyJwk,
+					format: "jwk"
+				}),
+				dsaEncoding: "ieee-p1363"
+			}, Buffer.from(message.signature, "base64url"));
+		} catch {
+			return false;
+		}
+	}
 };
 function isBrowserWireResult(value) {
 	if (!value || typeof value !== "object") return false;
 	const result = value.result;
-	return typeof value.id === "string" && Boolean(result) && typeof result === "object" && typeof result.ok === "boolean";
+	return typeof value.id === "string" && typeof value.connectionId === "string" && Boolean(result) && typeof result === "object" && typeof result.ok === "boolean";
 }
 function isBrowserWireKeepAlive(value) {
-	return Boolean(value) && typeof value === "object" && value.type === "keepalive" && typeof value.timestamp === "number";
+	return Boolean(value) && typeof value === "object" && value.type === "keepalive" && typeof value.connectionId === "string" && typeof value.timestamp === "number";
 }
 //#endregion
 export { ExtensionBrowserProvider, isBrowserWireResult };

package/dist/src/browser/runtime/browser-runtime.d.ts

@@ -1,4 +1,4 @@
-import type { BrowserActionInput, BrowserControlResult } from '@xopcai/browser-control-contract';
+import type { BrowserActionInput, BrowserControlResult, BrowserTarget } from '@xopcai/browser-control-contract';
 import type { Config } from '../../config/schema.js';
 import type { BrowserDriver } from '../drivers/browser-driver.js';
 export interface BrowserRuntimeOptions {
@@ -6,6 +6,7 @@ export interface BrowserRuntimeOptions {
     createDriver: () => Promise<BrowserDriver>;
     allowedUploadRoots?: string[];
     emit?: (type: string, payload: unknown) => void;
+    resolveTarget?: (taskKey: string) => BrowserTarget | undefined;
 }
 export declare class BrowserRuntime {
     private readonly options;

package/dist/src/browser/runtime/browser-runtime.js

@@ -14,10 +14,14 @@ var BrowserRuntime = class {
 		this.evictExpiredSessions();
 		if (!this.options.getConfig().enabled) return failure("DRIVER_UNAVAILABLE", "Browser Control is disabled.");
 		if (signal?.aborted) return failure("ABORTED", "Operation was aborted.");
+		const effectiveInput = input.target ? input : {
+			...input,
+			target: this.options.resolveTarget?.(taskKey)
+		};
 		let session;
 		let driver;
 		try {
-			session = await this.resolveSession(taskKey, input.sessionId);
+			session = await this.resolveSession(taskKey, effectiveInput.sessionId);
 			if (!session) return failure("SESSION_NOT_FOUND", "The browser session does not belong to this task.");
 			driver = await this.getDriver();
 		} catch (error) {
@@ -30,7 +34,7 @@ var BrowserRuntime = class {
 		});
 		let result;
 		try {
-			result = await this.dispatch(driver, session, input, signal);
+			result = await this.dispatch(driver, session, effectiveInput, signal);
 			result = this.constrainResult(result);
 		} catch (error) {
 			result = failure("DRIVER_UNAVAILABLE", error instanceof Error ? error.message : String(error));

package/dist/src/cli/commands/browser.js

@@ -1,7 +1,7 @@
 import { register } from "../registry.js";
 import { Command } from "commander";
 //#region src/cli/commands/browser.ts
-function createBrowserCommand(_ctx) {
+function createBrowserCommand(ctx) {
 	const command = new Command("browser").description("Browser Control v2 diagnostics and extension setup");
 	command.command("doctor").description("Check the configured browser driver").action(async () => {
 		const { doctorCli } = await import("./browser-cli-helpers.js");
@@ -13,8 +13,18 @@ function createBrowserCommand(_ctx) {
 		console.log(JSON.stringify(await browserExtDoctor(), null, 2));
 	});
 	extension.command("install").description("Install extension artifacts").action(async () => {
-		const { ensureBrowserExtensionArtifacts } = await import("../../browser/providers/browser-ext-install.js");
-		console.log(JSON.stringify(await ensureBrowserExtensionArtifacts(), null, 2));
+		const { ensureBrowserExtensionArtifacts, installBrowserNativeMessagingHost } = await import("../../browser/providers/browser-ext-install.js");
+		const artifacts = await ensureBrowserExtensionArtifacts();
+		const nativeHost = await installBrowserNativeMessagingHost({ configPath: ctx.configPath });
+		console.log(JSON.stringify({
+			...artifacts,
+			nativeHost
+		}, null, 2));
+	});
+	extension.command("native-host").description("Run the Chrome native messaging bootstrap host").action(async () => {
+		process.env.XOPC_LOG_CONSOLE = "false";
+		const { runBrowserNativeMessagingHost } = await import("../../browser/native-messaging-host.js");
+		await runBrowserNativeMessagingHost(ctx.configPath);
 	});
 	return command;
 }

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v154).`,
+		message: `SQLite schema v${status.dbVersion} (current release v156).`,
 		hints: []
 	};
 }

package/dist/src/endpoint-tools/runtime.js

@@ -2,6 +2,7 @@ import { resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "../storage/sqlite/endpoint-session-binding-repository.js";
+import { deleteBrowserTabBindingsByEndpoint } from "../storage/sqlite/browser-tab-binding-repository.js";
 import { bindEndpointPrincipal, getEndpointPrincipal, touchEndpointPrincipal } from "../storage/sqlite/endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, startEndpointToolInvocationAudit } from "../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../storage/sqlite/index.js";
@@ -75,6 +76,7 @@ var EndpointToolRuntime = class {
 	remove(endpointId, connectionId) {
 		if (!this.registry.remove(endpointId, connectionId)) return;
 		this.invocations.failEndpoint(endpointId);
+		deleteBrowserTabBindingsByEndpoint(endpointId);
 		log.info({
 			endpointId,
 			connectionId

package/dist/src/gateway/chat-stream/mapper.js

@@ -56,7 +56,7 @@ var ChatStreamMapper = class {
 				status: event.status === "error" ? "error" : "complete",
 				...typeof event.message === "string" && event.message ? { message: event.message } : {}
 			})];
-			case "user_message": return [this.make("user_message", { message: userMessageFromEvent(event) })];
+			case "user_message": return [this.make("user_message", { message: userMessageFromEvent(event, this.opts.runId) })];
 			case "user_transcript": return [this.make("user_transcript", {
 				text: String(event.text ?? ""),
 				media: event.media
@@ -427,9 +427,10 @@ var ChatStreamMapper = class {
 		}
 	}
 };
-function userMessageFromEvent(event) {
+function userMessageFromEvent(event, turnId) {
 	return {
 		role: "user",
+		turnId,
 		content: event.content ?? [],
 		attachments: event.media,
 		metadata: userMessageDisplayMetadata(event.metadata),

package/dist/src/gateway/hono/app.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { listDevices } from "../../storage/sqlite/device-access-repository.js";
 import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
@@ -7,7 +8,7 @@ import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
-import { checkBrowserOrigin } from "../security/origin-check.js";
+import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
 import { auth } from "./middleware/auth.js";
 import { gatewayScopes } from "./middleware/scopes.js";
 import { createChannelRateLimitMiddleware, createChatRateLimitMiddleware, createMediaRateLimitMiddleware, createStrictRateLimitMiddleware, createTaskRateLimitMiddleware, createXopcCloudPollRateLimitMiddleware } from "./middleware/strict-rate-limit.js";
@@ -52,6 +53,19 @@ function createHonoApp(config) {
 		tunnelPublicUrl: loadTunnelState()?.publicUrl,
 		reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig)
 	});
+	let loggedUnavailableDeviceStore = false;
+	const resolvePairedBrowserExtensionOrigins = () => {
+		try {
+			return listDevices().filter((device) => device.platform === "chrome" && !device.revokedAt && device.extensionId).map((device) => `chrome-extension://${device.extensionId}`);
+		} catch (cause) {
+			if (!loggedUnavailableDeviceStore) {
+				loggedUnavailableDeviceStore = true;
+				log.warn({ err: cause }, "Browser extension origins unavailable until the device store opens");
+			}
+			return [];
+		}
+	};
+	const resolveAllBrowserOrigins = () => [...resolveBrowserOrigins(), ...resolvePairedBrowserExtensionOrigins()];
 	/**
 	* TCP source for the in-flight request, normalized for trusted-proxy checks.
 	* Returns undefined when the runtime doesn't expose conninfo (tests, mocks).
@@ -84,9 +98,10 @@ function createHonoApp(config) {
 	registerSiteShareMiddleware(app, service);
 	app.use(cors({
 		origin: (origin) => {
-			const allowed = resolveBrowserOrigins();
+			const allowed = resolveAllBrowserOrigins();
 			if (!origin) return allowed[0] ?? `http://127.0.0.1:${gatewayPort}`;
 			const normalized = origin.toLowerCase();
+			if (isChromeExtensionOrigin(normalized)) return origin;
 			if (allowed.find((entry) => entry.toLowerCase() === normalized)) return origin;
 			return allowed.includes("*") ? "*" : "";
 		},
@@ -123,10 +138,11 @@ function createHonoApp(config) {
 		if (isExtensionGatewayUiAssetPath(c.req.path)) return next();
 		const origin = c.req.header("origin");
 		if (!origin || origin.trim().toLowerCase() === "null") return next();
+		if (isChromeExtensionOrigin(origin) && (c.req.path.startsWith("/api/device-pairing/") || c.req.path === "/api/device-auth/refresh")) return next();
 		const result = checkBrowserOrigin({
 			requestHost: c.req.header("host"),
 			origin,
-			allowedOrigins: resolveBrowserOrigins(),
+			allowedOrigins: resolveAllBrowserOrigins(),
 			allowHostHeaderOriginFallback,
 			autoAllowSameHostFromTrustedProxy: isRequestFromTrustedProxy(c),
 			isLocalClient: false

package/dist/src/gateway/hono/middleware/auth.d.ts

@@ -19,4 +19,7 @@ export declare function auth(config?: AuthConfig): import("hono").MiddlewareHand
 }, 429, "json">) | (Response & import("hono").TypedResponse<{
     error: string;
     code: string;
-}, 401, "json">)>;
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
+    error: string;
+    code: string;
+}, 403, "json">)>;