@xopcai/xopc 0.0.264 → 0.0.266

package/dist/src/browser/runtime/browser-runtime.js

@@ -14,10 +14,14 @@ var BrowserRuntime = class {
 		this.evictExpiredSessions();
 		if (!this.options.getConfig().enabled) return failure("DRIVER_UNAVAILABLE", "Browser Control is disabled.");
 		if (signal?.aborted) return failure("ABORTED", "Operation was aborted.");
+		const effectiveInput = input.target ? input : {
+			...input,
+			target: this.options.resolveTarget?.(taskKey)
+		};
 		let session;
 		let driver;
 		try {
-			session = await this.resolveSession(taskKey, input.sessionId);
+			session = await this.resolveSession(taskKey, effectiveInput.sessionId);
 			if (!session) return failure("SESSION_NOT_FOUND", "The browser session does not belong to this task.");
 			driver = await this.getDriver();
 		} catch (error) {
@@ -30,7 +34,7 @@ var BrowserRuntime = class {
 		});
 		let result;
 		try {
-			result = await this.dispatch(driver, session, input, signal);
+			result = await this.dispatch(driver, session, effectiveInput, signal);
 			result = this.constrainResult(result);
 		} catch (error) {
 			result = failure("DRIVER_UNAVAILABLE", error instanceof Error ? error.message : String(error));

package/dist/src/cli/commands/browser.js

@@ -1,7 +1,7 @@
 import { register } from "../registry.js";
 import { Command } from "commander";
 //#region src/cli/commands/browser.ts
-function createBrowserCommand(_ctx) {
+function createBrowserCommand(ctx) {
 	const command = new Command("browser").description("Browser Control v2 diagnostics and extension setup");
 	command.command("doctor").description("Check the configured browser driver").action(async () => {
 		const { doctorCli } = await import("./browser-cli-helpers.js");
@@ -13,8 +13,18 @@ function createBrowserCommand(_ctx) {
 		console.log(JSON.stringify(await browserExtDoctor(), null, 2));
 	});
 	extension.command("install").description("Install extension artifacts").action(async () => {
-		const { ensureBrowserExtensionArtifacts } = await import("../../browser/providers/browser-ext-install.js");
-		console.log(JSON.stringify(await ensureBrowserExtensionArtifacts(), null, 2));
+		const { ensureBrowserExtensionArtifacts, installBrowserNativeMessagingHost } = await import("../../browser/providers/browser-ext-install.js");
+		const artifacts = await ensureBrowserExtensionArtifacts();
+		const nativeHost = await installBrowserNativeMessagingHost({ configPath: ctx.configPath });
+		console.log(JSON.stringify({
+			...artifacts,
+			nativeHost
+		}, null, 2));
+	});
+	extension.command("native-host").description("Run the Chrome native messaging bootstrap host").action(async () => {
+		process.env.XOPC_LOG_CONSOLE = "false";
+		const { runBrowserNativeMessagingHost } = await import("../../browser/native-messaging-host.js");
+		await runBrowserNativeMessagingHost(ctx.configPath);
 	});
 	return command;
 }

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v154).`,
+		message: `SQLite schema v${status.dbVersion} (current release v156).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "../../../../providers/env-keys.js";
+import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts
 init_loader();

package/dist/src/cli/commands/models.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";

package/dist/src/config/index.js

@@ -2,15 +2,15 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
-import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentDir as resolveAgentDir$1, resolveAgentHomeDir as resolveAgentHomeDir$1, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { init_loader, loadConfig, saveConfig } from "./loader.js";
-import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { init_loader, loadConfig, saveConfig } from "./loader.js";
+import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";

package/dist/src/config/loader.js

@@ -2,10 +2,10 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { ConfigSchema, init_schema } from "./schema.js";
-import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { assertChannelPluginConfigs, init_validate_channel_configs } from "./validate-channel-configs.js";
+import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
+import { assertChannelPluginConfigs, init_validate_channel_configs } from "./validate-channel-configs.js";
 import { dirname } from "path";
 import { existsSync, mkdirSync, promises, readFileSync } from "fs";
 import { config } from "dotenv";

package/dist/src/config/models-json.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
+import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { existsSync, readFileSync } from "fs";
 import { z } from "zod";
 //#region src/config/models-json.ts

package/dist/src/endpoint-tools/runtime.js

@@ -2,6 +2,7 @@ import { resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "../storage/sqlite/endpoint-session-binding-repository.js";
+import { deleteBrowserTabBindingsByEndpoint } from "../storage/sqlite/browser-tab-binding-repository.js";
 import { bindEndpointPrincipal, getEndpointPrincipal, touchEndpointPrincipal } from "../storage/sqlite/endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, startEndpointToolInvocationAudit } from "../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../storage/sqlite/index.js";
@@ -75,6 +76,7 @@ var EndpointToolRuntime = class {
 	remove(endpointId, connectionId) {
 		if (!this.registry.remove(endpointId, connectionId)) return;
 		this.invocations.failEndpoint(endpointId);
+		deleteBrowserTabBindingsByEndpoint(endpointId);
 		log.info({
 			endpointId,
 			connectionId

package/dist/src/extensions/lockfile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { dirname, join } from "path";
 import { existsSync } from "fs";
 import { mkdir, readFile } from "fs/promises";

package/dist/src/gateway/agents-admin.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";

package/dist/src/gateway/chat-stream/mapper.js

@@ -56,7 +56,7 @@ var ChatStreamMapper = class {
 				status: event.status === "error" ? "error" : "complete",
 				...typeof event.message === "string" && event.message ? { message: event.message } : {}
 			})];
-			case "user_message": return [this.make("user_message", { message: userMessageFromEvent(event) })];
+			case "user_message": return [this.make("user_message", { message: userMessageFromEvent(event, this.opts.runId) })];
 			case "user_transcript": return [this.make("user_transcript", {
 				text: String(event.text ?? ""),
 				media: event.media
@@ -427,9 +427,10 @@ var ChatStreamMapper = class {
 		}
 	}
 };
-function userMessageFromEvent(event) {
+function userMessageFromEvent(event, turnId) {
 	return {
 		role: "user",
+		turnId,
 		content: event.content ?? [],
 		attachments: event.media,
 		metadata: userMessageDisplayMetadata(event.metadata),

package/dist/src/gateway/file-path-classifier.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId } from "../config/agent-profile.js";
 import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
+import { extractProfileAgentId } from "../config/agent-profile.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { basename, isAbsolute, resolve } from "node:path";

package/dist/src/gateway/hono/app.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { listDevices } from "../../storage/sqlite/device-access-repository.js";
 import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
@@ -7,7 +8,7 @@ import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
-import { checkBrowserOrigin } from "../security/origin-check.js";
+import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
 import { auth } from "./middleware/auth.js";
 import { gatewayScopes } from "./middleware/scopes.js";
 import { createChannelRateLimitMiddleware, createChatRateLimitMiddleware, createMediaRateLimitMiddleware, createStrictRateLimitMiddleware, createTaskRateLimitMiddleware, createXopcCloudPollRateLimitMiddleware } from "./middleware/strict-rate-limit.js";
@@ -52,6 +53,19 @@ function createHonoApp(config) {
 		tunnelPublicUrl: loadTunnelState()?.publicUrl,
 		reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig)
 	});
+	let loggedUnavailableDeviceStore = false;
+	const resolvePairedBrowserExtensionOrigins = () => {
+		try {
+			return listDevices().filter((device) => device.platform === "chrome" && !device.revokedAt && device.extensionId).map((device) => `chrome-extension://${device.extensionId}`);
+		} catch (cause) {
+			if (!loggedUnavailableDeviceStore) {
+				loggedUnavailableDeviceStore = true;
+				log.warn({ err: cause }, "Browser extension origins unavailable until the device store opens");
+			}
+			return [];
+		}
+	};
+	const resolveAllBrowserOrigins = () => [...resolveBrowserOrigins(), ...resolvePairedBrowserExtensionOrigins()];
 	/**
 	* TCP source for the in-flight request, normalized for trusted-proxy checks.
 	* Returns undefined when the runtime doesn't expose conninfo (tests, mocks).
@@ -84,9 +98,10 @@ function createHonoApp(config) {
 	registerSiteShareMiddleware(app, service);
 	app.use(cors({
 		origin: (origin) => {
-			const allowed = resolveBrowserOrigins();
+			const allowed = resolveAllBrowserOrigins();
 			if (!origin) return allowed[0] ?? `http://127.0.0.1:${gatewayPort}`;
 			const normalized = origin.toLowerCase();
+			if (isChromeExtensionOrigin(normalized)) return origin;
 			if (allowed.find((entry) => entry.toLowerCase() === normalized)) return origin;
 			return allowed.includes("*") ? "*" : "";
 		},
@@ -123,10 +138,11 @@ function createHonoApp(config) {
 		if (isExtensionGatewayUiAssetPath(c.req.path)) return next();
 		const origin = c.req.header("origin");
 		if (!origin || origin.trim().toLowerCase() === "null") return next();
+		if (isChromeExtensionOrigin(origin) && (c.req.path.startsWith("/api/device-pairing/") || c.req.path === "/api/device-auth/refresh")) return next();
 		const result = checkBrowserOrigin({
 			requestHost: c.req.header("host"),
 			origin,
-			allowedOrigins: resolveBrowserOrigins(),
+			allowedOrigins: resolveAllBrowserOrigins(),
 			allowHostHeaderOriginFallback,
 			autoAllowSameHostFromTrustedProxy: isRequestFromTrustedProxy(c),
 			isLocalClient: false

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,9 +1,9 @@
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";

package/dist/src/gateway/hono/middleware/auth.d.ts

@@ -19,4 +19,7 @@ export declare function auth(config?: AuthConfig): import("hono").MiddlewareHand
 }, 429, "json">) | (Response & import("hono").TypedResponse<{
     error: string;
     code: string;
-}, 401, "json">)>;
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
+    error: string;
+    code: string;
+}, 403, "json">)>;

package/dist/src/gateway/hono/middleware/auth.js

@@ -1,7 +1,7 @@
 import { logAuthEvent } from "../../../utils/logger/audit.js";
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { authenticateDeviceAccessToken } from "../../../storage/sqlite/device-access-repository.js";
+import { authenticateDeviceAccessToken, getDevice } from "../../../storage/sqlite/device-access-repository.js";
 import { safeEqualSecret } from "../../security/secret-equal.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { authPolicyConfig, buckets, resolveAuthRateLimit } from "../../rate-limit/buckets.js";
@@ -9,6 +9,7 @@ import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { resolveAuthTracking } from "../../rate-limit/auth-policy.js";
 import { isAuthRateLimitGloballyDisabled } from "../../rate-limit/env-flags.js";
 import "../../rate-limit/index.js";
+import { isChromeExtensionOrigin } from "../../security/origin-check.js";
 import { authorizeTrustedProxy } from "../../trusted-proxy.js";
 import { setGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createMiddleware } from "hono/factory";
@@ -208,7 +209,12 @@ function auth(config) {
 			clientIp
 		}, "Credential in query string rejected: use Authorization header for this endpoint");
 		const providedCredential = authHeader || queryToken;
+		const browserExtensionOrigin = isChromeExtensionOrigin(origin) ? origin.toLowerCase() : void 0;
 		if (providedCredential && validateCredential(providedCredential, expectedCredential)) {
+			if (browserExtensionOrigin) return c.json({
+				error: "Forbidden",
+				code: "device_credential_required"
+			}, 403);
 			recordSuccess(rl);
 			setGatewayPrincipal(c, {
 				kind: "owner",
@@ -220,6 +226,11 @@ function auth(config) {
 		}
 		const deviceIdentity = providedCredential?.startsWith("xopc_at_") ? authenticateDeviceAccessToken(providedCredential) : void 0;
 		if (deviceIdentity) {
+			const device = getDevice(deviceIdentity.deviceId);
+			if (browserExtensionOrigin && (device?.platform !== "chrome" || `chrome-extension://${device.extensionId}` !== browserExtensionOrigin)) return c.json({
+				error: "Forbidden",
+				code: "extension_origin_mismatch"
+			}, 403);
 			recordSuccess(rl);
 			setGatewayPrincipal(c, {
 				kind: "device",

package/dist/src/gateway/hono/routes/browser-install.js

@@ -1,5 +1,5 @@
-import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { acquireBrowserInstallLock, cancelBrowserInstall } from "../../../browser/install-lock.js";
+import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { runPlaywrightChromiumInstallWithProgress } from "../../../browser/providers/playwright-install.js";
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/browser-install.ts

package/dist/src/gateway/hono/routes/browser.js

@@ -1,7 +1,11 @@
+import { deleteBrowserTabBinding, getBrowserTabBinding, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
+import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
+import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
 import { decideBrowserApproval, listBrowserApprovals } from "../../../browser/policy/approval-store.js";
 import { createBrowserDriver } from "../../../browser/drivers/create-driver.js";
 import { checkBrowserReadiness } from "../../../browser/readiness.js";
 import { isLoopbackClientIp } from "../../security/loopback.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
 /** Browser Control status, approvals, and driver diagnostics. */
@@ -48,6 +52,8 @@ async function extensionStatus() {
 	};
 }
 function isLocalOwnerRequest(c, service) {
+	const principal = getGatewayPrincipal(c);
+	if (principal.kind !== "owner" && principal.kind !== "trusted-proxy") return false;
 	if (service.currentConfig.gateway?.bind === "loopback") return true;
 	try {
 		return isLoopbackClientIp(getConnInfo(c).remote.address);
@@ -55,8 +61,99 @@ function isLocalOwnerRequest(c, service) {
 		return false;
 	}
 }
+function chromeDevicePrincipal(c) {
+	const principal = getGatewayPrincipal(c);
+	if (principal.kind !== "device" || !principal.deviceId) return void 0;
+	const device = getDevice(principal.deviceId);
+	return device?.platform === "chrome" && device.revokedAt === void 0 ? principal : void 0;
+}
+function canManageBrowserSession(c, service, sessionKey) {
+	const principal = chromeDevicePrincipal(c);
+	if (principal) return getBrowserTabBinding(sessionKey)?.principalId === principal.deviceId;
+	return isLocalOwnerRequest(c, service);
+}
 function registerBrowserRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
+	authenticated.get("/api/browser/tab-bindings/:sessionKey", (c) => {
+		const sessionKey = c.req.param("sessionKey").trim();
+		const binding = getBrowserTabBinding(sessionKey);
+		if (!binding) return c.json({
+			ok: false,
+			error: {
+				code: "NOT_FOUND",
+				message: "Tab binding not found"
+			}
+		}, 404);
+		if (!canManageBrowserSession(c, service, sessionKey)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Tab binding belongs to another device"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: binding
+		});
+	});
+	authenticated.put("/api/browser/tab-bindings/:sessionKey", async (c) => {
+		const principal = chromeDevicePrincipal(c);
+		if (!principal?.deviceId) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Chrome device access required"
+			}
+		}, 403);
+		const parsed = browserTabBindingRequestSchema.safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Invalid tab binding"
+			}
+		}, 400);
+		const endpoint = service.endpointTools.registry.get(parsed.data.endpointId);
+		if (!service.endpointTools.registry.verifyTurnClaim(parsed.data.endpointId, parsed.data.turnToken) || endpoint?.kind !== "browser" || endpoint.principalId !== principal.deviceId) return c.json({
+			ok: false,
+			error: {
+				code: "INVALID_ENDPOINT",
+				message: "Browser endpoint is not active"
+			}
+		}, 401);
+		const sessionKey = c.req.param("sessionKey").trim();
+		if (!sessionKey || !await service.sessions.getSession(sessionKey)) return c.json({
+			ok: false,
+			error: {
+				code: "NOT_FOUND",
+				message: "Session not found"
+			}
+		}, 404);
+		const { turnToken: _turnToken, ...bindingInput } = parsed.data;
+		const binding = setBrowserTabBinding({
+			...bindingInput,
+			sessionKey,
+			principalId: principal.deviceId
+		});
+		return c.json({
+			ok: true,
+			payload: binding
+		});
+	});
+	authenticated.delete("/api/browser/tab-bindings/:sessionKey", (c) => {
+		const sessionKey = c.req.param("sessionKey").trim();
+		if (!canManageBrowserSession(c, service, sessionKey)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Tab binding belongs to another device"
+			}
+		}, 403);
+		return c.json({
+			ok: true,
+			payload: { removed: deleteBrowserTabBinding(sessionKey) }
+		});
+	});
 	authenticated.get("/api/browser/extension-status", async (c) => {
 		try {
 			return c.json(await extensionStatus());
@@ -169,33 +266,35 @@ function registerBrowserRoutes(authenticated, deps) {
 		}
 	});
 	authenticated.get("/api/browser/approvals", (c) => {
-		if (!isLocalOwnerRequest(c, service)) return c.json({
+		const sessionKey = c.req.query("sessionKey");
+		if (!isLocalOwnerRequest(c, service) && (!sessionKey || !canManageBrowserSession(c, service, sessionKey))) return c.json({
 			ok: false,
 			error: "Local owner access required."
 		}, 403);
 		return c.json({
 			ok: true,
-			approvals: listBrowserApprovals(c.req.query("sessionKey"))
+			approvals: listBrowserApprovals(sessionKey)
 		});
 	});
 	authenticated.post("/api/browser/approvals/respond", strictRateLimitMiddleware, async (c) => {
-		if (!isLocalOwnerRequest(c, service)) return c.json({
+		const body = await c.req.json().catch(() => null);
+		const approval = typeof body?.id === "string" ? listBrowserApprovals().find((candidate) => candidate.id === body.id) : void 0;
+		if (!isLocalOwnerRequest(c, service) && (!approval || !canManageBrowserSession(c, service, approval.sessionKey))) return c.json({
 			ok: false,
 			error: "Local owner access required."
 		}, 403);
-		const body = await c.req.json().catch(() => null);
 		if (typeof body?.id !== "string" || body.decision !== "approved" && body.decision !== "denied") return c.json({
 			ok: false,
 			error: "id and decision are required."
 		}, 400);
-		const approval = decideBrowserApproval(body.id, body.decision);
-		if (!approval) return c.json({
+		const decided = decideBrowserApproval(body.id, body.decision);
+		if (!decided) return c.json({
 			ok: false,
 			error: "Approval not found."
 		}, 404);
 		return c.json({
 			ok: true,
-			approval
+			approval: decided
 		});
 	});
 	authenticated.get("/api/browser/playwright/doctor", async (c) => {

package/dist/src/gateway/hono/routes/devices.js

@@ -1,5 +1,5 @@
 import { runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
-import { DEFAULT_MOBILE_SCOPES } from "../../security/gateway-scopes.js";
+import { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES } from "../../security/gateway-scopes.js";
 import { createDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken } from "../../../storage/sqlite/device-access-repository.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
 import { consumeDevicePairingToken, createDevicePairingSetup, isDevicePairingSetupActive } from "../../../storage/sqlite/device-pairing-repository.js";
@@ -21,7 +21,12 @@ const pairingExchangeSchema = z.strictObject({
 	pairingToken: z.string().min(1).max(256),
 	device: z.strictObject({
 		displayName: z.string().trim().min(1).max(80),
-		platform: z.enum(["ios", "android"]),
+		platform: z.enum([
+			"ios",
+			"android",
+			"chrome"
+		]),
+		extensionId: z.string().regex(/^[a-p]{32}$/).optional(),
 		publicKeyJwk: z.strictObject({
 			kty: z.literal("EC"),
 			crv: z.literal("P-256"),
@@ -29,6 +34,17 @@ const pairingExchangeSchema = z.strictObject({
 			y: z.string().min(40).max(64)
 		})
 	})
+}).superRefine((value, context) => {
+	if (value.device.platform === "chrome" && !value.device.extensionId) context.addIssue({
+		code: "custom",
+		path: ["device", "extensionId"],
+		message: "Chrome devices require an extension id"
+	});
+	if (value.device.platform !== "chrome" && value.device.extensionId) context.addIssue({
+		code: "custom",
+		path: ["device", "extensionId"],
+		message: "Only Chrome devices may set an extension id"
+	});
 });
 const pairingProbeSchema = z.strictObject({ pairingId: z.string().uuid() });
 function pairingLinkPayload(input) {
@@ -100,7 +116,8 @@ function registerDeviceAuthPublicRoutes(app) {
 				displayName: parsed.data.device.displayName,
 				platform: parsed.data.device.platform,
 				publicKeyJwk: parsed.data.device.publicKeyJwk,
-				scopes: DEFAULT_MOBILE_SCOPES
+				extensionId: parsed.data.device.extensionId,
+				scopes: parsed.data.device.platform === "chrome" ? DEFAULT_BROWSER_EXTENSION_SCOPES : DEFAULT_MOBILE_SCOPES
 			});
 			return {
 				success: true,
@@ -207,6 +224,22 @@ function registerDeviceRoutes(authenticated, deps) {
 			}
 		}, 404);
 	});
+	authenticated.delete("/api/devices/me", (c) => {
+		const principal = getGatewayPrincipal(c);
+		if (principal.kind !== "device" || !principal.deviceId) return c.json({
+			ok: false,
+			error: {
+				code: "DEVICE_REQUIRED",
+				message: "Device access required"
+			}
+		}, 403);
+		const revoked = revokeDevice(principal.deviceId);
+		if (revoked) deps.service.realtime.disconnectPrincipal(principal.deviceId);
+		return c.json({
+			ok: true,
+			revoked
+		});
+	});
 	authenticated.delete("/api/devices/:deviceId", (c) => {
 		const deviceId = c.req.param("deviceId");
 		const revoked = revokeDevice(deviceId);

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -1,9 +1,11 @@
+import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
 import { endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal } from "../../../storage/sqlite/endpoint-principal-repository.js";
 import { listEndpointToolInvocationAudits } from "../../../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../../../storage/sqlite/index.js";
 import { parseEndpointPublicKey } from "../../../endpoint-tools/auth.js";
 import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError } from "../../../endpoint-tools/upload-service.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 //#region src/gateway/hono/routes/endpoint-tools.ts
 async function readBoundedBody(body, maxBytes) {
 	if (!body) return new Uint8Array();
@@ -54,6 +56,19 @@ function registerEndpointToolRoutes(authenticated, deps) {
 				message: "Invalid endpoint principal"
 			}
 		}, 400);
+		const gatewayPrincipal = getGatewayPrincipal(c);
+		if (gatewayPrincipal.kind === "device") {
+			const device = gatewayPrincipal.deviceId ? getDevice(gatewayPrincipal.deviceId) : void 0;
+			const ownsPrincipal = parsed.data.principalId === gatewayPrincipal.deviceId;
+			const compatibleKind = device?.platform === "chrome" ? parsed.data.kind === "browser" && parsed.data.platform === "chrome" : parsed.data.kind === "mobile";
+			if (!ownsPrincipal || !compatibleKind) return c.json({
+				ok: false,
+				error: {
+					code: "FORBIDDEN",
+					message: "Endpoint identity does not match this device"
+				}
+			}, 403);
+		}
 		try {
 			parseEndpointPublicKey(parsed.data.publicKey);
 		} catch {

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,5 @@
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";