@xopcai/xopc 0.0.264 → 0.0.265

package/dist/src/gateway/hono/middleware/auth.js

@@ -1,7 +1,7 @@
 import { logAuthEvent } from "../../../utils/logger/audit.js";
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { authenticateDeviceAccessToken } from "../../../storage/sqlite/device-access-repository.js";
+import { authenticateDeviceAccessToken, getDevice } from "../../../storage/sqlite/device-access-repository.js";
 import { safeEqualSecret } from "../../security/secret-equal.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { authPolicyConfig, buckets, resolveAuthRateLimit } from "../../rate-limit/buckets.js";
@@ -9,6 +9,7 @@ import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { resolveAuthTracking } from "../../rate-limit/auth-policy.js";
 import { isAuthRateLimitGloballyDisabled } from "../../rate-limit/env-flags.js";
 import "../../rate-limit/index.js";
+import { isChromeExtensionOrigin } from "../../security/origin-check.js";
 import { authorizeTrustedProxy } from "../../trusted-proxy.js";
 import { setGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createMiddleware } from "hono/factory";
@@ -208,7 +209,12 @@ function auth(config) {
 			clientIp
 		}, "Credential in query string rejected: use Authorization header for this endpoint");
 		const providedCredential = authHeader || queryToken;
+		const browserExtensionOrigin = isChromeExtensionOrigin(origin) ? origin.toLowerCase() : void 0;
 		if (providedCredential && validateCredential(providedCredential, expectedCredential)) {
+			if (browserExtensionOrigin) return c.json({
+				error: "Forbidden",
+				code: "device_credential_required"
+			}, 403);
 			recordSuccess(rl);
 			setGatewayPrincipal(c, {
 				kind: "owner",
@@ -220,6 +226,11 @@ function auth(config) {
 		}
 		const deviceIdentity = providedCredential?.startsWith("xopc_at_") ? authenticateDeviceAccessToken(providedCredential) : void 0;
 		if (deviceIdentity) {
+			const device = getDevice(deviceIdentity.deviceId);
+			if (browserExtensionOrigin && (device?.platform !== "chrome" || `chrome-extension://${device.extensionId}` !== browserExtensionOrigin)) return c.json({
+				error: "Forbidden",
+				code: "extension_origin_mismatch"
+			}, 403);
 			recordSuccess(rl);
 			setGatewayPrincipal(c, {
 				kind: "device",

package/dist/src/gateway/hono/routes/browser-install.js

@@ -1,5 +1,5 @@
-import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { acquireBrowserInstallLock, cancelBrowserInstall } from "../../../browser/install-lock.js";
+import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { runPlaywrightChromiumInstallWithProgress } from "../../../browser/providers/playwright-install.js";
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/browser-install.ts

package/dist/src/gateway/hono/routes/browser.js

@@ -1,7 +1,11 @@
+import { deleteBrowserTabBinding, getBrowserTabBinding, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
+import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
+import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
 import { decideBrowserApproval, listBrowserApprovals } from "../../../browser/policy/approval-store.js";
 import { createBrowserDriver } from "../../../browser/drivers/create-driver.js";
 import { checkBrowserReadiness } from "../../../browser/readiness.js";
 import { isLoopbackClientIp } from "../../security/loopback.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
 /** Browser Control status, approvals, and driver diagnostics. */
@@ -48,6 +52,8 @@ async function extensionStatus() {
 	};
 }
 function isLocalOwnerRequest(c, service) {
+	const principal = getGatewayPrincipal(c);
+	if (principal.kind !== "owner" && principal.kind !== "trusted-proxy") return false;
 	if (service.currentConfig.gateway?.bind === "loopback") return true;
 	try {
 		return isLoopbackClientIp(getConnInfo(c).remote.address);
@@ -55,8 +61,99 @@ function isLocalOwnerRequest(c, service) {
 		return false;
 	}
 }
+function chromeDevicePrincipal(c) {
+	const principal = getGatewayPrincipal(c);
+	if (principal.kind !== "device" || !principal.deviceId) return void 0;
+	const device = getDevice(principal.deviceId);
+	return device?.platform === "chrome" && device.revokedAt === void 0 ? principal : void 0;
+}
+function canManageBrowserSession(c, service, sessionKey) {
+	const principal = chromeDevicePrincipal(c);
+	if (principal) return getBrowserTabBinding(sessionKey)?.principalId === principal.deviceId;
+	return isLocalOwnerRequest(c, service);
+}
 function registerBrowserRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
+	authenticated.get("/api/browser/tab-bindings/:sessionKey", (c) => {
+		const sessionKey = c.req.param("sessionKey").trim();
+		const binding = getBrowserTabBinding(sessionKey);
+		if (!binding) return c.json({
+			ok: false,
+			error: {
+				code: "NOT_FOUND",
+				message: "Tab binding not found"
+			}
+		}, 404);
+		if (!canManageBrowserSession(c, service, sessionKey)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Tab binding belongs to another device"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: binding
+		});
+	});
+	authenticated.put("/api/browser/tab-bindings/:sessionKey", async (c) => {
+		const principal = chromeDevicePrincipal(c);
+		if (!principal?.deviceId) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Chrome device access required"
+			}
+		}, 403);
+		const parsed = browserTabBindingRequestSchema.safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Invalid tab binding"
+			}
+		}, 400);
+		const endpoint = service.endpointTools.registry.get(parsed.data.endpointId);
+		if (!service.endpointTools.registry.verifyTurnClaim(parsed.data.endpointId, parsed.data.turnToken) || endpoint?.kind !== "browser" || endpoint.principalId !== principal.deviceId) return c.json({
+			ok: false,
+			error: {
+				code: "INVALID_ENDPOINT",
+				message: "Browser endpoint is not active"
+			}
+		}, 401);
+		const sessionKey = c.req.param("sessionKey").trim();
+		if (!sessionKey || !await service.sessions.getSession(sessionKey)) return c.json({
+			ok: false,
+			error: {
+				code: "NOT_FOUND",
+				message: "Session not found"
+			}
+		}, 404);
+		const { turnToken: _turnToken, ...bindingInput } = parsed.data;
+		const binding = setBrowserTabBinding({
+			...bindingInput,
+			sessionKey,
+			principalId: principal.deviceId
+		});
+		return c.json({
+			ok: true,
+			payload: binding
+		});
+	});
+	authenticated.delete("/api/browser/tab-bindings/:sessionKey", (c) => {
+		const sessionKey = c.req.param("sessionKey").trim();
+		if (!canManageBrowserSession(c, service, sessionKey)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Tab binding belongs to another device"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: { removed: deleteBrowserTabBinding(sessionKey) }
+		});
+	});
 	authenticated.get("/api/browser/extension-status", async (c) => {
 		try {
 			return c.json(await extensionStatus());
@@ -169,33 +266,35 @@ function registerBrowserRoutes(authenticated, deps) {
 		}
 	});
 	authenticated.get("/api/browser/approvals", (c) => {
-		if (!isLocalOwnerRequest(c, service)) return c.json({
+		const sessionKey = c.req.query("sessionKey");
+		if (!isLocalOwnerRequest(c, service) && (!sessionKey || !canManageBrowserSession(c, service, sessionKey))) return c.json({
 			ok: false,
 			error: "Local owner access required."
 		}, 403);
 		return c.json({
 			ok: true,
-			approvals: listBrowserApprovals(c.req.query("sessionKey"))
+			approvals: listBrowserApprovals(sessionKey)
 		});
 	});
 	authenticated.post("/api/browser/approvals/respond", strictRateLimitMiddleware, async (c) => {
-		if (!isLocalOwnerRequest(c, service)) return c.json({
+		const body = await c.req.json().catch(() => null);
+		const approval = typeof body?.id === "string" ? listBrowserApprovals().find((candidate) => candidate.id === body.id) : void 0;
+		if (!isLocalOwnerRequest(c, service) && (!approval || !canManageBrowserSession(c, service, approval.sessionKey))) return c.json({
 			ok: false,
 			error: "Local owner access required."
 		}, 403);
-		const body = await c.req.json().catch(() => null);
 		if (typeof body?.id !== "string" || body.decision !== "approved" && body.decision !== "denied") return c.json({
 			ok: false,
 			error: "id and decision are required."
 		}, 400);
-		const approval = decideBrowserApproval(body.id, body.decision);
-		if (!approval) return c.json({
+		const decided = decideBrowserApproval(body.id, body.decision);
+		if (!decided) return c.json({
 			ok: false,
 			error: "Approval not found."
 		}, 404);
 		return c.json({
 			ok: true,
-			approval
+			approval: decided
 		});
 	});
 	authenticated.get("/api/browser/playwright/doctor", async (c) => {

package/dist/src/gateway/hono/routes/devices.js

@@ -1,5 +1,5 @@
 import { runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
-import { DEFAULT_MOBILE_SCOPES } from "../../security/gateway-scopes.js";
+import { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES } from "../../security/gateway-scopes.js";
 import { createDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken } from "../../../storage/sqlite/device-access-repository.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
 import { consumeDevicePairingToken, createDevicePairingSetup, isDevicePairingSetupActive } from "../../../storage/sqlite/device-pairing-repository.js";
@@ -21,7 +21,12 @@ const pairingExchangeSchema = z.strictObject({
 	pairingToken: z.string().min(1).max(256),
 	device: z.strictObject({
 		displayName: z.string().trim().min(1).max(80),
-		platform: z.enum(["ios", "android"]),
+		platform: z.enum([
+			"ios",
+			"android",
+			"chrome"
+		]),
+		extensionId: z.string().regex(/^[a-p]{32}$/).optional(),
 		publicKeyJwk: z.strictObject({
 			kty: z.literal("EC"),
 			crv: z.literal("P-256"),
@@ -29,6 +34,17 @@ const pairingExchangeSchema = z.strictObject({
 			y: z.string().min(40).max(64)
 		})
 	})
+}).superRefine((value, context) => {
+	if (value.device.platform === "chrome" && !value.device.extensionId) context.addIssue({
+		code: "custom",
+		path: ["device", "extensionId"],
+		message: "Chrome devices require an extension id"
+	});
+	if (value.device.platform !== "chrome" && value.device.extensionId) context.addIssue({
+		code: "custom",
+		path: ["device", "extensionId"],
+		message: "Only Chrome devices may set an extension id"
+	});
 });
 const pairingProbeSchema = z.strictObject({ pairingId: z.string().uuid() });
 function pairingLinkPayload(input) {
@@ -100,7 +116,8 @@ function registerDeviceAuthPublicRoutes(app) {
 				displayName: parsed.data.device.displayName,
 				platform: parsed.data.device.platform,
 				publicKeyJwk: parsed.data.device.publicKeyJwk,
-				scopes: DEFAULT_MOBILE_SCOPES
+				extensionId: parsed.data.device.extensionId,
+				scopes: parsed.data.device.platform === "chrome" ? DEFAULT_BROWSER_EXTENSION_SCOPES : DEFAULT_MOBILE_SCOPES
 			});
 			return {
 				success: true,
@@ -207,6 +224,22 @@ function registerDeviceRoutes(authenticated, deps) {
 			}
 		}, 404);
 	});
+	authenticated.delete("/api/devices/me", (c) => {
+		const principal = getGatewayPrincipal(c);
+		if (principal.kind !== "device" || !principal.deviceId) return c.json({
+			ok: false,
+			error: {
+				code: "DEVICE_REQUIRED",
+				message: "Device access required"
+			}
+		}, 403);
+		const revoked = revokeDevice(principal.deviceId);
+		if (revoked) deps.service.realtime.disconnectPrincipal(principal.deviceId);
+		return c.json({
+			ok: true,
+			revoked
+		});
+	});
 	authenticated.delete("/api/devices/:deviceId", (c) => {
 		const deviceId = c.req.param("deviceId");
 		const revoked = revokeDevice(deviceId);

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -1,9 +1,11 @@
+import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
 import { endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal } from "../../../storage/sqlite/endpoint-principal-repository.js";
 import { listEndpointToolInvocationAudits } from "../../../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../../../storage/sqlite/index.js";
 import { parseEndpointPublicKey } from "../../../endpoint-tools/auth.js";
 import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError } from "../../../endpoint-tools/upload-service.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 //#region src/gateway/hono/routes/endpoint-tools.ts
 async function readBoundedBody(body, maxBytes) {
 	if (!body) return new Uint8Array();
@@ -54,6 +56,19 @@ function registerEndpointToolRoutes(authenticated, deps) {
 				message: "Invalid endpoint principal"
 			}
 		}, 400);
+		const gatewayPrincipal = getGatewayPrincipal(c);
+		if (gatewayPrincipal.kind === "device") {
+			const device = gatewayPrincipal.deviceId ? getDevice(gatewayPrincipal.deviceId) : void 0;
+			const ownsPrincipal = parsed.data.principalId === gatewayPrincipal.deviceId;
+			const compatibleKind = device?.platform === "chrome" ? parsed.data.kind === "browser" && parsed.data.platform === "chrome" : parsed.data.kind === "mobile";
+			if (!ownsPrincipal || !compatibleKind) return c.json({
+				ok: false,
+				error: {
+					code: "FORBIDDEN",
+					message: "Endpoint identity does not match this device"
+				}
+			}, 403);
+		}
 		try {
 			parseEndpointPublicKey(parsed.data.publicKey);
 		} catch {

package/dist/src/gateway/hono/routes/session-input-handler.d.ts

@@ -18,6 +18,12 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
         code: string;
         message: string;
     };
+}, 403, "json">) | (Response & import("hono").TypedResponse<{
+    ok: false;
+    error: {
+        code: string;
+        message: string;
+    };
 }, 409, "json">) | (Response & import("hono").TypedResponse<{
     ok: false;
     error: {
@@ -63,9 +69,12 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
                     title: string;
                     tokenEstimate?: number;
                     truncated?: boolean;
+                    url?: string;
+                    capturedAt?: number;
+                    documentId?: string;
                 }[];
                 contextSnapshots?: {
-                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"];
+                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "browser_page";
                     sourceId: string;
                     version: string;
                     title: string;
@@ -77,6 +86,9 @@ export declare function submitSessionInput(c: Context, deps: AuthenticatedRouteD
                     }[];
                     tokenEstimate?: number;
                     truncated?: boolean;
+                    url?: string;
+                    capturedAt?: number;
+                    documentId?: string;
                 }[];
                 thinking?: string;
                 origin: {
@@ -163,9 +175,12 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
                     title: string;
                     tokenEstimate?: number;
                     truncated?: boolean;
+                    url?: string;
+                    capturedAt?: number;
+                    documentId?: string;
                 }[];
                 contextSnapshots?: {
-                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"];
+                    kind: import("../../../agent/source-context/types.js").SessionSourceBinding["kind"] | "browser_page";
                     sourceId: string;
                     version: string;
                     title: string;
@@ -177,6 +192,9 @@ export declare function replaceLatestSessionTurn(c: Context, deps: Authenticated
                     }[];
                     tokenEstimate?: number;
                     truncated?: boolean;
+                    url?: string;
+                    capturedAt?: number;
+                    documentId?: string;
                 }[];
                 thinking?: string;
                 origin: {

package/dist/src/gateway/hono/routes/session-input-handler.js

@@ -1,9 +1,11 @@
+import { browserPageContextsInputSchema } from "../../../../packages/gateway-contract/src/browser-page-context.js";
 import { endpointTurnClaimSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { init_providers, resolveModel } from "../../../providers/index.js";
 import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { getModelThinking } from "../../../providers/model-thinking.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
 import { withModelConfigLock } from "../../../session/model-config-lock.js";
+import { browserPageContextToAgentContext } from "../../../agent/source-context/browser-page.js";
 //#region src/gateway/hono/routes/session-input-handler.ts
 init_providers();
 const MAX_TURN_CONTEXTS = 5;
@@ -25,6 +27,14 @@ async function submitSessionInput(c, deps, sessionKey) {
 			message: `contextRefs must contain at most ${MAX_TURN_CONTEXTS} valid notes`
 		}
 	}, 400);
+	const browserContexts = browserPageContextsInputSchema.safeParse(body.browserContexts ?? []);
+	if (!browserContexts.success) return c.json({
+		ok: false,
+		error: {
+			code: "BAD_REQUEST",
+			message: "Invalid browser page context"
+		}
+	}, 400);
 	const content = typeof body.content === "string" ? body.content : "";
 	const contentError = validateWebchatContent(content);
 	if (contentError) return c.json({
@@ -65,6 +75,13 @@ async function submitSessionInput(c, deps, sessionKey) {
 			message: "Endpoint connection is not active"
 		}
 	}, 401);
+	if (browserContexts.data.length && deps.service.endpointTools.registry.get(origin.data.endpointId)?.kind !== "browser") return c.json({
+		ok: false,
+		error: {
+			code: "FORBIDDEN",
+			message: "Browser context requires a browser endpoint"
+		}
+	}, 403);
 	if (body.expectedSessionId !== void 0 && (typeof body.expectedSessionId !== "string" || !body.expectedSessionId || body.expectedSessionId.length > 128)) return c.json({
 		ok: false,
 		error: {
@@ -115,6 +132,7 @@ async function submitSessionInput(c, deps, sessionKey) {
 			content,
 			attachments,
 			contextRefs,
+			sourceContexts: browserContexts.data.map(browserPageContextToAgentContext),
 			thinking: selection?.thinkingLevel ?? (typeof body.thinking === "string" ? body.thinking : void 0),
 			origin: {
 				type: "endpoint",

package/dist/src/gateway/hono/routes/sessions.js

@@ -1,3 +1,4 @@
+import { deleteBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { buildSessionKey, init_session_key } from "../../../routing/session-key.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
@@ -245,6 +246,7 @@ function registerSessionsRoutes(authenticated, deps) {
 				}, 400);
 			}
 		}
+		if (body.createdSurface === "browser_extension") await service.sessions.patch(sessionKey, { customData: { createdSurface: "browser_extension" } });
 		const session = await service.sessions.getSession(sessionKey);
 		const agentConfig = channel === "webchat" ? await service.sessions.getFixedAgentConfig(sessionKey) : void 0;
 		return c.json({
@@ -657,6 +659,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			ok: false,
 			error: result.error
 		}, 404);
+		deleteBrowserTabBinding(key);
 		if (requestedProjectId !== void 0) try {
 			if (requestedProjectId) service.projects.attachSession(key, requestedProjectId);
 			else service.projects.detachSession(key);
@@ -832,12 +835,15 @@ function registerSessionsRoutes(authenticated, deps) {
 			error: "Stop the active session run before deleting its environment"
 		}, 409);
 		const result = await service.sessions.delete(key);
-		if (result.deleted) await environments.release(key).catch((error) => {
-			log.warn({
-				err: error,
-				sessionKey: key
-			}, "Session deleted but execution environment cleanup failed");
-		});
+		if (result.deleted) {
+			deleteBrowserTabBinding(key);
+			await environments.release(key).catch((error) => {
+				log.warn({
+					err: error,
+					sessionKey: key
+				}, "Session deleted but execution environment cleanup failed");
+			});
+		}
 		return c.json(result);
 	});
 	authenticated.post("/api/sessions/:key/archive", async (c) => {

package/dist/src/gateway/hono/routes/voice.js

@@ -133,12 +133,13 @@ function registerVoiceRoutes(authenticated, deps) {
 				enabled,
 				capabilities: {
 					dictation: availability(Boolean(stt)),
-					agent: availability(Boolean(stt && tts)),
-					omni: availability(Boolean(omni)),
+					assistant: availability(Boolean(stt && tts)),
+					natural: availability(Boolean(omni)),
 					languages: ["zh", "en"],
-					bargeIn: config.voice?.realtime?.bargeIn ?? true
+					bargeIn: config.voice?.realtime?.bargeIn ?? true,
+					mediaTransports: ["websocket-pcm"]
 				},
-				defaultEngine: config.voice?.realtime?.defaultEngine ?? "agent",
+				defaultMode: config.voice?.realtime?.defaultEngine === "omni" ? "natural" : "assistant",
 				omni: omni?.route ?? null,
 				stt: stt?.route ?? null,
 				tts: tts ? {

package/dist/src/gateway/security/gateway-scopes.d.ts

@@ -1,6 +1,7 @@
 export declare const GATEWAY_SCOPES: readonly ["gateway.status", "agents.read", "agents.run", "sessions.read", "sessions.write", "workspace.read", "workspace.write", "tasks.read", "tasks.write", "automations.read", "automations.write", "notifications.self", "device.self", "gateway.admin"];
 export type GatewayScope = typeof GATEWAY_SCOPES[number];
 export declare const DEFAULT_MOBILE_SCOPES: readonly GatewayScope[];
+export declare const DEFAULT_BROWSER_EXTENSION_SCOPES: readonly GatewayScope[];
 export declare function isGatewayScope(value: unknown): value is GatewayScope;
 export declare function parseGatewayScopes(value: string): GatewayScope[];
 export declare function requiredGatewayScope(method: string, path: string): GatewayScope;

package/dist/src/gateway/security/gateway-scopes.js

@@ -31,6 +31,14 @@ const DEFAULT_MOBILE_SCOPES = [
 	"notifications.self",
 	"device.self"
 ];
+const DEFAULT_BROWSER_EXTENSION_SCOPES = [
+	"gateway.status",
+	"agents.read",
+	"agents.run",
+	"sessions.read",
+	"sessions.write",
+	"device.self"
+];
 function isGatewayScope(value) {
 	return typeof value === "string" && KNOWN_GATEWAY_SCOPES.has(value);
 }
@@ -48,6 +56,7 @@ function requiredGatewayScope(method, path) {
 	if (path === "/api/device-auth/refresh" || path === "/api/devices/me") return "device.self";
 	if (path.startsWith("/api/devices/me/push")) return "notifications.self";
 	if (path.startsWith("/api/endpoint-tools")) return "device.self";
+	if (path.startsWith("/api/browser/tab-bindings") || path.startsWith("/api/browser/approvals")) return methodScope(method, "sessions.read", "sessions.write");
 	if (method === "GET" && path === "/api/connectors/approvals") return "sessions.read";
 	if (method === "POST" && path === "/api/connectors/approvals/respond") return "sessions.write";
 	if (path === "/api/agent" || path.startsWith("/api/agent/")) return "agents.run";
@@ -66,4 +75,4 @@ function hasGatewayScope(granted, required) {
 	return granted.includes("gateway.admin") || granted.includes(required);
 }
 //#endregion
-export { DEFAULT_MOBILE_SCOPES, GATEWAY_SCOPES, hasGatewayScope, isGatewayScope, parseGatewayScopes, requiredGatewayScope };
+export { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES, GATEWAY_SCOPES, hasGatewayScope, isGatewayScope, parseGatewayScopes, requiredGatewayScope };

package/dist/src/gateway/security/origin-check.d.ts

@@ -11,6 +11,7 @@ type OriginCheckResult = {
     ok: false;
     reason: string;
 };
+export declare function isChromeExtensionOrigin(origin: string | undefined): boolean;
 export declare function checkBrowserOrigin(params: {
     requestHost?: string;
     origin?: string;

package/dist/src/gateway/security/origin-check.js

@@ -5,6 +5,10 @@ const LOOPBACK_HOSTNAMES = new Set([
 	"::1",
 	"[::1]"
 ]);
+const CHROME_EXTENSION_ORIGIN = /^chrome-extension:\/\/[a-p]{32}$/;
+function isChromeExtensionOrigin(origin) {
+	return CHROME_EXTENSION_ORIGIN.test((origin ?? "").trim().toLowerCase());
+}
 function isLoopbackHost(hostname) {
 	return LOOPBACK_HOSTNAMES.has(hostname.toLowerCase());
 }
@@ -55,4 +59,4 @@ function checkBrowserOrigin(params) {
 	};
 }
 //#endregion
-export { checkBrowserOrigin };
+export { checkBrowserOrigin, isChromeExtensionOrigin };

package/dist/src/gateway/service/agent-runner.js

@@ -50,7 +50,8 @@ var GatewayAgentRunner = class {
 				const generator = this.runAgent(input.content, "webchat", input.sessionKey, input.origin, input.attachments, input.thinking, {
 					runId: input.runId,
 					taskRunId: input.taskRunId,
-					sourceContexts: input.sourceContexts
+					sourceContexts: input.sourceContexts,
+					...input.origin.type === "channel" && input.origin.channel === "voice" ? { presentation: "voice" } : {}
 				});
 				let result;
 				while (true) {

package/dist/src/gateway/service/session-input-coordinator.d.ts

@@ -11,6 +11,7 @@ export type SubmitSessionInput = {
     content: string;
     attachments?: UserTurnAttachment[];
     contextRefs?: TurnContextRef[];
+    sourceContexts?: AgentSourceContext[];
     thinking?: string;
     origin: TurnOrigin;
 };

package/dist/src/gateway/service/session-input-coordinator.js

@@ -7,6 +7,7 @@ import { cancelConnectionObjective, consumeConnectionResume, invalidateConnectio
 import "../../storage/sqlite/index.js";
 import { summarizeSourceContext } from "../../agent/source-context/types.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../media/session-references.js";
+import { fitSourceContextsToBudget } from "../../agent/source-context/budget.js";
 import crypto from "node:crypto";
 //#region src/gateway/service/session-input-coordinator.ts
 init_logger();
@@ -70,7 +71,7 @@ var SessionInputCoordinator = class {
 			const clientMessageId = input.clientMessageId.trim();
 			const content = input.content.trim();
 			const targetTurnId = input.targetTurnId.trim();
-			if (!sessionKey || !clientMessageId || !targetTurnId || !content && !input.attachments?.length) return {
+			if (!sessionKey || !clientMessageId || !targetTurnId || !content && !input.attachments?.length && !input.sourceContexts?.length) return {
 				ok: false,
 				code: "BAD_REQUEST"
 			};
@@ -89,7 +90,7 @@ var SessionInputCoordinator = class {
 			const attachments = await this.deps.prepareAttachments(sessionKey, input.attachments);
 			let sourceContexts;
 			try {
-				sourceContexts = await this.deps.prepareContexts(input.contextRefs);
+				sourceContexts = fitSourceContextsToBudget([...await this.deps.prepareContexts(input.contextRefs) ?? [], ...input.sourceContexts ?? []]);
 			} catch (err) {
 				log.warn({
 					err,
@@ -137,7 +138,7 @@ var SessionInputCoordinator = class {
 		const sessionKey = input.sessionKey;
 		const clientMessageId = input.clientMessageId.trim();
 		const content = input.content.trim();
-		if (!sessionKey || !clientMessageId || !content && !input.attachments?.length) return {
+		if (!sessionKey || !clientMessageId || !content && !input.attachments?.length && !input.sourceContexts?.length) return {
 			ok: false,
 			code: "BAD_REQUEST"
 		};
@@ -158,7 +159,7 @@ var SessionInputCoordinator = class {
 		const attachments = await this.deps.prepareAttachments(sessionKey, input.attachments);
 		let sourceContexts;
 		try {
-			sourceContexts = await this.deps.prepareContexts(input.contextRefs);
+			sourceContexts = fitSourceContextsToBudget([...await this.deps.prepareContexts(input.contextRefs) ?? [], ...input.sourceContexts ?? []]);
 		} catch (err) {
 			log.warn({
 				err,