@xopcai/xopc 0.0.265 → 0.0.267

package/dist/src/browser/providers/realtime-extension.js

@@ -0,0 +1,83 @@
+import { getBrowserTabBindingById } from "../../storage/sqlite/browser-tab-binding-repository.js";
+import { BROWSER_CONTROL_ENDPOINT_TOOL_NAME } from "../../../packages/browser-control-contract/src/index.js";
+import crypto from "node:crypto";
+//#region src/browser/providers/realtime-extension.ts
+var RealtimeExtensionBrowserProvider = class {
+	name = "extension";
+	connectionTimeout;
+	commandTimeout;
+	constructor(runtime, config = {}) {
+		this.runtime = runtime;
+		this.connectionTimeout = config.connectionTimeout ?? 3e4;
+		this.commandTimeout = config.commandTimeout ?? 3e4;
+	}
+	async start() {}
+	async waitForConnection(timeoutMs = this.connectionTimeout) {
+		const deadline = Date.now() + timeoutMs;
+		while (!this.currentEndpoint()) {
+			if (Date.now() >= deadline) throw new Error(`Extension connection timeout after ${timeoutMs}ms. Open the xopc Chrome extension and connect it to this Gateway.`);
+			await new Promise((resolve) => setTimeout(resolve, 200));
+		}
+	}
+	async send(input, timeoutMs = this.commandTimeout, visualFallback = true) {
+		const endpoint = this.endpointForInput(input);
+		if (!endpoint) throw new Error("Extension not connected to this Gateway. Open the xopc Chrome extension and connect it first.");
+		const tool = this.runtime.registry.getTool(endpoint.endpointId, BROWSER_CONTROL_ENDPOINT_TOOL_NAME);
+		if (!tool) throw new Error("Connected browser extension does not support authenticated Realtime browser control. Reload or update the extension.");
+		const id = crypto.randomUUID();
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), timeoutMs);
+		try {
+			const value = (await this.runtime.invocations.invoke({
+				endpointId: endpoint.endpointId,
+				toolCallId: `browser-control:${id}`,
+				toolName: tool.descriptor.name,
+				arguments: {
+					input,
+					timeoutMs,
+					visualFallback
+				},
+				descriptorRevision: tool.revision,
+				signal: controller.signal
+			})).content.find((item) => item.type === "json");
+			if (!value || !value.value || typeof value.value !== "object") throw new Error("Browser extension returned an invalid Realtime result");
+			return {
+				id,
+				connectionId: endpoint.endpointId,
+				result: value.value
+			};
+		} finally {
+			clearTimeout(timer);
+		}
+	}
+	isConnected() {
+		return Boolean(this.currentEndpoint());
+	}
+	getConnectionStatus() {
+		const endpoint = this.currentEndpoint();
+		return {
+			socketConnected: Boolean(endpoint),
+			connected: Boolean(endpoint),
+			protocolVersion: endpoint ? 4 : null,
+			expectedProtocolVersion: 4,
+			extensionVersion: endpoint?.appVersion ?? null,
+			principalId: endpoint?.principalId ?? null,
+			transport: "gateway-realtime"
+		};
+	}
+	async shutdown() {}
+	endpointForInput(input) {
+		if (input.target?.kind === "attached_tab") {
+			const binding = getBrowserTabBindingById(input.target.bindingId);
+			const endpoint = binding ? this.runtime.registry.get(binding.endpointId) : void 0;
+			if (!binding || !endpoint || endpoint.principalId !== binding.principalId) return void 0;
+			return endpoint;
+		}
+		return this.currentEndpoint();
+	}
+	currentEndpoint() {
+		return this.runtime.registry.list().filter((endpoint) => endpoint.kind === "browser" && endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt)[0];
+	}
+};
+//#endregion
+export { RealtimeExtensionBrowserProvider };

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v156).`,
+		message: `SQLite schema v${status.dbVersion} (current release v158).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "../../../../providers/env-keys.js";
+import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts
 init_loader();

package/dist/src/cli/commands/models.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";

package/dist/src/config/index.js

@@ -2,15 +2,15 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GatewayWebchatConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpOAuthConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, RuntimeToolsConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
-import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentDir as resolveAgentDir$1, resolveAgentHomeDir as resolveAgentHomeDir$1, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { FILENAMES, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMcpOAuthPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { init_loader, loadConfig, saveConfig } from "./loader.js";
-import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { init_loader, loadConfig, saveConfig } from "./loader.js";
+import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { extractProfileAgentId, resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";

package/dist/src/config/loader.js

@@ -2,10 +2,10 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { ConfigSchema, init_schema } from "./schema.js";
-import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
-import { assertChannelPluginConfigs, init_validate_channel_configs } from "./validate-channel-configs.js";
+import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_resolution, setActivePlatformDiscovery } from "../platform/resolution.js";
+import { assertChannelPluginConfigs, init_validate_channel_configs } from "./validate-channel-configs.js";
 import { dirname } from "path";
 import { existsSync, mkdirSync, promises, readFileSync } from "fs";
 import { config } from "dotenv";

package/dist/src/config/models-json.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
+import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { existsSync, readFileSync } from "fs";
 import { z } from "zod";
 //#region src/config/models-json.ts

package/dist/src/endpoint-tools/policy.js

@@ -1,11 +1,13 @@
 import { ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson } from "../../packages/endpoint-tools-protocol/src/index.js";
+import { BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA, BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA } from "../../packages/browser-control-contract/src/index.js";
 import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/policy.ts
 var EndpointToolPolicyError = class extends Error {};
-function contract(policyId, outputSchema, resultKinds, permissions, legacyPolicyIds = []) {
+function contract(policyId, outputSchema, resultKinds, permissions, legacyPolicyIds = [], inputSchema) {
 	return {
 		policyId,
 		legacyPolicyIds,
+		inputSchema,
 		outputSchema,
 		resultKinds,
 		permissions
@@ -31,7 +33,8 @@ const POLICY_BY_TOOL = {
 	"mobile.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
 	"mobile.device.get_info": contract("public.background-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
 	"mobile.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
-	"mobile.app.open_url": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"])
+	"mobile.app.open_url": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"]),
+	"browser.control": contract("browser.control", BROWSER_CONTROL_ENDPOINT_OUTPUT_SCHEMA, ["json"], ["browser-control"], [], BROWSER_CONTROL_ENDPOINT_INPUT_SCHEMA)
 };
 var EndpointToolPolicy = class {
 	ajv = new Ajv2020({
@@ -43,7 +46,7 @@ var EndpointToolPolicy = class {
 		const contract = POLICY_BY_TOOL[descriptor.name];
 		if (!contract) throw new EndpointToolPolicyError(`Tool ${descriptor.name} has no trusted server policy`);
 		if (descriptor.policyId !== contract.policyId && !contract.legacyPolicyIds.includes(descriptor.policyId)) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server policy`);
-		if (canonicalJson(descriptor.outputSchema) !== canonicalJson(contract.outputSchema) || canonicalJson(descriptor.resultKinds) !== canonicalJson(contract.resultKinds) || canonicalJson([...descriptor.requiredPermissions].sort()) !== canonicalJson([...contract.permissions].sort())) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server contract`);
+		if (contract.inputSchema && canonicalJson(descriptor.inputSchema) !== canonicalJson(contract.inputSchema) || canonicalJson(descriptor.outputSchema) !== canonicalJson(contract.outputSchema) || canonicalJson(descriptor.resultKinds) !== canonicalJson(contract.resultKinds) || canonicalJson([...descriptor.requiredPermissions].sort()) !== canonicalJson([...contract.permissions].sort())) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server contract`);
 		this.validatePolicyFields(descriptor);
 		try {
 			this.ajv.compile(descriptor.outputSchema);
@@ -79,6 +82,10 @@ var EndpointToolPolicy = class {
 				if (descriptor.effect === "read") throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} cannot declare a read effect`);
 				if (descriptor.confirmation !== "always" || !descriptor.requiresForeground || descriptor.sensitivity !== "personal" || descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} violates its trusted policy`);
 				return;
+			case "browser.control":
+				this.assertFields(descriptor, "write", "never", false, "personal");
+				if (descriptor.requiredPermissions.length !== 1 || descriptor.requiredPermissions[0] !== "browser-control" || descriptor.timeoutMs !== 12e4 || descriptor.maxConcurrency !== 4 || descriptor.supportsCancellation !== true || descriptor.idempotent !== false) throw new EndpointToolPolicyError(`Browser tool ${descriptor.name} violates its trusted policy`);
+				return;
 			default: throw new EndpointToolPolicyError(`Unknown endpoint policy: ${descriptor.policyId}`);
 		}
 	}

package/dist/src/extensions/lockfile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { dirname, join } from "path";
 import { existsSync } from "fs";
 import { mkdir, readFile } from "fs/promises";

package/dist/src/gateway/agents-admin.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";

package/dist/src/gateway/file-path-classifier.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId } from "../config/agent-profile.js";
 import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
+import { extractProfileAgentId } from "../config/agent-profile.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { basename, isAbsolute, resolve } from "node:path";

package/dist/src/gateway/hono/app.js

@@ -5,6 +5,7 @@ import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from ".
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
+import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
@@ -65,7 +66,11 @@ function createHonoApp(config) {
 			return [];
 		}
 	};
-	const resolveAllBrowserOrigins = () => [...resolveBrowserOrigins(), ...resolvePairedBrowserExtensionOrigins()];
+	const resolveAllBrowserOrigins = () => [
+		...resolveBrowserOrigins(),
+		`chrome-extension://${BROWSER_EXTENSION_ID}`,
+		...resolvePairedBrowserExtensionOrigins()
+	];
 	/**
 	* TCP source for the in-flight request, normalized for trusted-proxy checks.
 	* Returns undefined when the runtime doesn't expose conninfo (tests, mocks).

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,9 +1,9 @@
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";

package/dist/src/gateway/hono/routes/browser.js

@@ -1,6 +1,7 @@
 import { deleteBrowserTabBinding, getBrowserTabBinding, setBrowserTabBinding } from "../../../storage/sqlite/browser-tab-binding-repository.js";
 import { browserTabBindingRequestSchema } from "../../../../packages/gateway-contract/src/browser-tab-binding.js";
 import { getDevice } from "../../../storage/sqlite/device-access-repository.js";
+import "../../../../packages/browser-control-contract/src/index.js";
 import { decideBrowserApproval, listBrowserApprovals } from "../../../browser/policy/approval-store.js";
 import { createBrowserDriver } from "../../../browser/drivers/create-driver.js";
 import { checkBrowserReadiness } from "../../../browser/readiness.js";
@@ -9,34 +10,19 @@ import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
 /** Browser Control status, approvals, and driver diagnostics. */
-const EXTENSION_ENDPOINT = "http://127.0.0.1:19820/";
-async function extensionStatus() {
-	const { getExtensionBrowserServerSnapshot } = await import("../../../browser/providers/extension-ws-acquire.js");
-	const snapshot = getExtensionBrowserServerSnapshot();
-	let running = snapshot.active;
-	let socketConnected = false;
-	let connected = false;
-	let protocolVersion = null;
-	let expectedProtocolVersion = null;
-	let extensionVersion = null;
-	try {
-		const payload = await (await fetch(EXTENSION_ENDPOINT, { signal: AbortSignal.timeout(2e3) })).json();
-		running ||= payload.ok === true;
-		socketConnected = payload.socketConnected ?? payload.connected === true;
-		connected = payload.connected === true;
-		protocolVersion = typeof payload.protocolVersion === "number" ? payload.protocolVersion : null;
-		expectedProtocolVersion = typeof payload.expectedProtocolVersion === "number" ? payload.expectedProtocolVersion : null;
-		extensionVersion = typeof payload.extensionVersion === "string" ? payload.extensionVersion : null;
-	} catch {}
+async function extensionStatus(service) {
+	const endpoint = service.endpointTools.registry.list().filter((item) => item.kind === "browser" && item.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt)[0];
+	const connected = Boolean(endpoint);
+	const extensionVersion = endpoint?.appVersion ?? null;
 	const { browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
 	const doctor = await browserExtDoctor({ runtimeExtensionVersion: extensionVersion ?? void 0 });
 	return {
-		running,
-		socketConnected,
+		running: true,
+		socketConnected: connected,
 		connected,
 		driverKind: "extension",
-		protocolVersion,
-		expectedProtocolVersion,
+		protocolVersion: connected ? 4 : null,
+		expectedProtocolVersion: 4,
 		extensionVersion,
 		artifacts: {
 			installed: doctor.installed,
@@ -45,10 +31,12 @@ async function extensionStatus() {
 			xopcVersion: doctor.xopcVersion,
 			installedVersion: doctor.installedVersion,
 			needsRefresh: doctor.needsRefresh,
-			needsChromeReload: doctor.needsChromeReload || socketConnected && !connected
+			needsChromeReload: doctor.needsChromeReload,
+			nativeHost: doctor.nativeHost
 		},
-		bridgeHeld: snapshot.active,
-		refCount: snapshot.refCount
+		bridgeHeld: false,
+		refCount: connected ? 1 : 0,
+		transport: "gateway-realtime"
 	};
 }
 function isLocalOwnerRequest(c, service) {
@@ -156,7 +144,7 @@ function registerBrowserRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/browser/extension-status", async (c) => {
 		try {
-			return c.json(await extensionStatus());
+			return c.json(await extensionStatus(service));
 		} catch (error) {
 			return c.json({
 				running: false,
@@ -177,7 +165,7 @@ function registerBrowserRoutes(authenticated, deps) {
 			}
 		});
 		const readiness = await checkBrowserReadiness(service.currentConfig);
-		const driverStatus = config.driver.kind === "extension" ? await extensionStatus().catch((error) => ({ error: error instanceof Error ? error.message : String(error) })) : config.driver.kind === "playwright" ? await import("../../../browser/providers/playwright-doctor.js").then(({ playwrightChromiumDoctor }) => playwrightChromiumDoctor()) : void 0;
+		const driverStatus = config.driver.kind === "extension" ? await extensionStatus(service).catch((error) => ({ error: error instanceof Error ? error.message : String(error) })) : config.driver.kind === "playwright" ? await import("../../../browser/providers/playwright-doctor.js").then(({ playwrightChromiumDoctor }) => playwrightChromiumDoctor()) : void 0;
 		const extensionConnected = config.driver.kind === "extension" ? driverStatus.connected === true : true;
 		const extensionProtocolDetail = config.driver.kind === "extension" && "socketConnected" in driverStatus && driverStatus.socketConnected && !driverStatus.connected ? `Chrome extension protocol ${driverStatus.protocolVersion ?? "unknown"} does not match ${driverStatus.expectedProtocolVersion ?? "the gateway"}. Reload the extension in Chrome.` : void 0;
 		return c.json({
@@ -204,7 +192,7 @@ function registerBrowserRoutes(authenticated, deps) {
 		const startedAt = Date.now();
 		let driver;
 		try {
-			driver = await createBrowserDriver(service.currentConfig.browser);
+			driver = await createBrowserDriver(service.currentConfig.browser, service.endpointTools);
 			await driver.connect();
 			return c.json({
 				ok: true,
@@ -229,12 +217,14 @@ function registerBrowserRoutes(authenticated, deps) {
 		}, 403);
 		const body = await c.req.json().catch(() => ({}));
 		try {
-			const { browserExtDoctor, ensureBrowserExtensionArtifacts } = await import("../../../browser/providers/browser-ext-install.js");
+			const { browserExtDoctor, ensureBrowserExtensionArtifacts, installBrowserNativeMessagingHost } = await import("../../../browser/providers/browser-ext-install.js");
 			const result = await ensureBrowserExtensionArtifacts({ force: body.force === true });
+			const nativeHost = await installBrowserNativeMessagingHost({ configPath: service.getHealth().configPath });
 			return c.json({
 				ok: true,
 				payload: {
 					...result,
+					nativeHost,
 					doctor: await browserExtDoctor()
 				}
 			});

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,5 @@
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";

package/dist/src/gateway/security/origin-check.js

@@ -15,6 +15,11 @@ function isLoopbackHost(hostname) {
 function parseOriginHost(originRaw) {
 	const trimmed = (originRaw ?? "").trim();
 	if (!trimmed || trimmed === "null") return null;
+	if (isChromeExtensionOrigin(trimmed)) return {
+		origin: trimmed.toLowerCase(),
+		host: "",
+		hostname: ""
+	};
 	try {
 		const url = new URL(trimmed);
 		return {

package/dist/src/gateway/service/config-coordinator.d.ts

@@ -41,8 +41,6 @@ export interface GatewayConfigCoordinatorOptions {
     getChannelManager: () => ChannelManager;
     getHeartbeatService: () => HeartbeatService | null;
     getExtensionLoader: () => ExtensionLoader | null;
-    /** Re-evaluate browser-extension server attachment after agent defaults change. */
-    reconcileBrowserExtensionServer: () => Promise<void>;
     /** Sync deterministic user-model maintenance automations after config changes. */
     reconcileMemoryMaintenanceAutomations: () => Promise<void>;
     /** Latest channel status snapshot for the `channels.status` event. */

package/dist/src/gateway/service/config-coordinator.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getModelRegistry } from "../../providers/model-registry.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";
@@ -223,7 +223,6 @@ var GatewayConfigCoordinator = class {
 		log.debug("Reloading agent defaults...");
 		this.opts.setConfig(newConfig);
 		this.opts.getAgentService().applyAgentDefaultsFromConfig(newConfig);
-		this.opts.reconcileBrowserExtensionServer();
 		this.opts.reconcileMemoryMaintenanceAutomations().catch((err) => {
 			const em = err instanceof Error ? err.message : String(err);
 			log.warn({
@@ -350,7 +349,6 @@ var GatewayConfigCoordinator = class {
 		this.opts.setConfig(reloaded);
 		if (sanitizeTunnelConfig(reloaded)) await saveConfig(reloaded, this.opts.configPath);
 		this.opts.getAgentService().applyAgentDefaultsFromConfig(reloaded);
-		await this.opts.reconcileBrowserExtensionServer();
 		await this.opts.reconcileMemoryMaintenanceAutomations().catch((err) => {
 			const em = err instanceof Error ? err.message : String(err);
 			log.warn({

package/dist/src/gateway/service.d.ts

@@ -39,10 +39,6 @@ export declare class GatewayService {
     private notesService;
     private extensionLoader;
     private extensionMetadataSnapshot;
-    private browserExtensionProvider;
-    private browserExtensionRelease;
-    /** `${host}:${port}` when the gateway holds the extension bridge listener. */
-    private browserExtensionBindKey;
     private heartbeatService;
     private sessionIndex;
     private running;
@@ -198,13 +194,6 @@ export declare class GatewayService {
      */
     onHttpListening(): Promise<void>;
     stop(): Promise<void>;
-    /** Start the browser extension WebSocket server when its driver is active. */
-    private startBrowserExtensionServerIfNeeded;
-    /**
-     * Start/stop/rebind the Chrome extension bridge.
-     * PATCH saves update config in memory without re-running gateway startup, so this must run on save too.
-     */
-    reconcileBrowserExtensionServer(): Promise<void>;
     /**
      * Start processing outbound messages and send through channels
      */

package/dist/src/gateway/service.js

@@ -12,16 +12,16 @@ import { getSessionConfig } from "../storage/sqlite/config-repository.js";
 import "../storage/sqlite/index.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
+import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { areExtensionsGloballyDisabled } from "../extensions/discover-extensions.js";
 import { buildExtensionMetadataSnapshot } from "../extensions/extension-metadata-snapshot.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, init_channel_catalog_service } from "../channels/catalog/channel-catalog-service.js";
 import { loadConfig, saveConfig } from "../config/loader.js";
-import { prewarmModelRegistry } from "../providers/model-registry.js";
+import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_providers, providers_exports } from "../providers/index.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { getEmbeddedExecutionSession } from "../agent/embedded/execution-context.js";
@@ -152,10 +152,6 @@ var GatewayService = class {
 	notesService;
 	extensionLoader = null;
 	extensionMetadataSnapshot = null;
-	browserExtensionProvider = null;
-	browserExtensionRelease = null;
-	/** `${host}:${port}` when the gateway holds the extension bridge listener. */
-	browserExtensionBindKey = null;
 	heartbeatService = null;
 	sessionIndex;
 	running = false;
@@ -249,6 +245,7 @@ var GatewayService = class {
 	get browserAutomations() {
 		if (!this.browserAutomationService) this.browserAutomationService = createRuntimeBrowserAutomationService({
 			getConfig: () => this.config,
+			endpointTools: this.endpointTools,
 			emit: (type, payload) => this.emit(type, payload)
 		});
 		return this.browserAutomationService;
@@ -520,7 +517,6 @@ var GatewayService = class {
 			getChannelManager: () => this.channelManager,
 			getHeartbeatService: () => this.heartbeatService,
 			getExtensionLoader: () => this.extensionLoader,
-			reconcileBrowserExtensionServer: () => this.reconcileBrowserExtensionServer(),
 			reconcileMemoryMaintenanceAutomations: () => this.reconcileMemoryMaintenanceAutomations(),
 			getChannelsStatus: () => this.getChannelsStatus(),
 			emit: (type, payload) => this.emit(type, payload)
@@ -1099,7 +1095,6 @@ var GatewayService = class {
 			workspaceId: this.currentWorkspacePath
 		}) });
 		import("../browser/providers/browser-ext-install.js").then(({ ensureBrowserExtensionOnStartup }) => ensureBrowserExtensionOnStartup(this.config)).catch((err) => log.warn({ err }, "Browser extension artifact ensure failed"));
-		await trace.measure("browser-extension.start", () => this.startBrowserExtensionServerIfNeeded());
 		this.agentService.start().catch((err) => {
 			log.error({ err }, "Agent service error");
 		});
@@ -1260,12 +1255,6 @@ var GatewayService = class {
 		this.connectedKnowledgeCoordinator?.stop();
 		this.connectedKnowledgeCoordinator = null;
 		await this.browserAutomationService?.shutdown();
-		if (this.browserExtensionRelease) {
-			await this.browserExtensionRelease();
-			this.browserExtensionRelease = null;
-		}
-		this.browserExtensionProvider = null;
-		this.browserExtensionBindKey = null;
 		registerClarificationChannelRuntime(null);
 		this.connectionRecovery.stop();
 		this.agentRunner.disposeClarifications();
@@ -1288,73 +1277,6 @@ var GatewayService = class {
 		closeXopcDatabase();
 		log.debug("Gateway service stopped");
 	}
-	/** Start the browser extension WebSocket server when its driver is active. */
-	async startBrowserExtensionServerIfNeeded() {
-		await this.reconcileBrowserExtensionServer();
-	}
-	/**
-	* Start/stop/rebind the Chrome extension bridge.
-	* PATCH saves update config in memory without re-running gateway startup, so this must run on save too.
-	*/
-	async reconcileBrowserExtensionServer() {
-		const driver = this.config.browser.driver;
-		const bridgeConfig = this.config.browser.enabled && driver.kind === "extension" ? {
-			host: "127.0.0.1",
-			port: 19820,
-			connectionTimeout: this.config.browser.limits.actionTimeoutMs,
-			commandTimeout: this.config.browser.limits.actionTimeoutMs
-		} : null;
-		if (!bridgeConfig) {
-			if (this.browserExtensionRelease) {
-				await this.browserExtensionRelease();
-				this.browserExtensionRelease = null;
-				this.browserExtensionProvider = null;
-				this.browserExtensionBindKey = null;
-				log.debug("Browser extension WebSocket server stopped because its driver is inactive");
-			}
-			return;
-		}
-		const { port, host, connectionTimeout, commandTimeout } = bridgeConfig;
-		const bindKey = `${host}:${port}`;
-		if (this.browserExtensionRelease && this.browserExtensionBindKey === bindKey) return;
-		if (this.browserExtensionRelease) {
-			await this.browserExtensionRelease();
-			this.browserExtensionRelease = null;
-			this.browserExtensionProvider = null;
-			this.browserExtensionBindKey = null;
-		}
-		try {
-			const { acquireExtensionBrowserServer } = await import("../browser/providers/extension-ws-acquire.js");
-			const { provider, release } = await acquireExtensionBrowserServer({
-				port,
-				host,
-				connectionTimeout,
-				commandTimeout
-			});
-			this.browserExtensionProvider = provider;
-			this.browserExtensionRelease = release;
-			this.browserExtensionBindKey = bindKey;
-			log.info({
-				port,
-				host
-			}, "Browser extension WS server started");
-		} catch (err) {
-			if ((err && typeof err === "object" && "code" in err ? err.code : void 0) === "EADDRINUSE") {
-				log.warn({
-					err,
-					phase: "browser_extension_ws",
-					bindPort: port,
-					bindHost: host,
-					hint: "Another process holds the browser extension bridge port 19820. Stop it before starting xopc."
-				}, `Browser extension WS server port is already in use: ${host}:${port}`);
-				return;
-			}
-			log.error({
-				err,
-				phase: "browser_extension_ws"
-			}, `Failed to start browser extension WS server: ${err instanceof Error ? err.message : String(err)}`);
-		}
-	}
 	/**
 	* Start processing outbound messages and send through channels
 	*/

package/dist/src/providers/auth-runtime/resolve-auth.js

@@ -1,5 +1,5 @@
-import { init_sync_provider_auth, resolveProviderApiKeyForAgentSync } from "../../auth/sync-provider-auth.js";
 import { getApiKeyFromEnv, init_env_keys } from "../env-keys.js";
+import { init_sync_provider_auth, resolveProviderApiKeyForAgentSync } from "../../auth/sync-provider-auth.js";
 import { getDefaultAuthProfileStore } from "./auth-profile-store.js";
 //#region src/providers/auth-runtime/resolve-auth.ts
 init_env_keys();

package/dist/src/providers/index.js

@@ -1,11 +1,11 @@
 import { __esmMin, __exportAll } from "../../_virtual/_rolldown/runtime.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { getModelOAuthProviderIds, init_registry } from "../auth/oauth/registry.js";
-import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { init_model_ref, splitProviderModelRef } from "./model-ref.js";
 import { ModelRegistry, getModelRegistry, init_model_registry, prewarmModelRegistry, resetModelRegistry } from "./model-registry.js";
+import { getModelOAuthProviderIds, init_registry } from "../auth/oauth/registry.js";
 import { CredentialResolver, hasCredentials, init_credentials } from "../auth/credentials.js";
+import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
 import { EXTENSION_PROVIDER_BASE_URL, init_constants } from "./constants.js";
 import { applyOfficialModelMetadataCorrections, getSupplementalModels, init_model_supplements } from "./model-supplements.js";
 import { getProviderRegistry, init_plugin_registry } from "./plugin-registry.js";