@xopcai/xopc 0.0.273 → 0.0.275

package/dist/src/agent/service.js

@@ -24,6 +24,7 @@ import { runXopcEmbeddedTurn } from "./embedded/run-turn.js";
 import { resolveResponseLanguageForSession } from "./prompt/response-language.js";
 import { normalizeSkillInstallTarget } from "./skills/install-target.js";
 import { AgentManager } from "./agent-manager.js";
+import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../gateway/chat-limits.js";
 import { maybeRefineSessionTitleWithLlm, maybeSetProvisionalSessionTitle } from "../session/session-title.js";
 import { resolveCompactionPolicy } from "./memory/compaction-policy.js";
 import { SessionStore } from "../session/store.js";
@@ -748,22 +749,25 @@ var AgentService = class {
 	* Persist inbound file attachments to the global media store.
 	*/
 	async prepareInboundAttachments(_sessionKey, attachments) {
-		return persistInboundAttachments(attachments, { resolveUri: async (uri) => {
-			const target = parseNoteAttachmentTarget(uri);
-			if (!target) return null;
-			const notesService = this.notesServiceInstance;
-			if (!notesService) return null;
-			const located = await notesService.getAttachmentPath(target.noteId, target.attachmentId);
-			if (!located) return null;
-			const buffer = await readFile(located.filePath);
-			return {
-				buffer,
-				path: located.filePath,
-				mimeType: located.mimeType,
-				name: located.fileName,
-				size: buffer.byteLength
-			};
-		} });
+		return persistInboundAttachments(attachments, {
+			maxBytes: MAX_WEBCHAT_ATTACHMENT_FILE_BYTES,
+			resolveUri: async (uri) => {
+				const target = parseNoteAttachmentTarget(uri);
+				if (!target) return null;
+				const notesService = this.notesServiceInstance;
+				if (!notesService) return null;
+				const located = await notesService.getAttachmentPath(target.noteId, target.attachmentId);
+				if (!located) return null;
+				const buffer = await readFile(located.filePath);
+				return {
+					buffer,
+					path: located.filePath,
+					mimeType: located.mimeType,
+					name: located.fileName,
+					size: buffer.byteLength
+				};
+			}
+		});
 	}
 	endDirectRequestContext() {
 		this.contextMiddleware.onResponse();

package/dist/src/agent/tools/factory.d.ts

@@ -105,6 +105,7 @@ export declare class AgentToolsFactory {
     constructor(deps: ToolFactoryDeps);
     private prepareRuntimeEnv;
     private browserReadinessKey;
+    private hasBrowserEndpoint;
     private checkBrowserReadinessCached;
     /** Invalidate the readiness cache (config hot-reload, settings-page save, etc.). */
     invalidateBrowserReadinessCache(): void;

package/dist/src/agent/tools/factory.js

@@ -8,6 +8,7 @@ import { getSessionTaskPlan, setSessionTaskPlan } from "../../storage/sqlite/ses
 import "../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
 import { resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
+import "../../../packages/browser-control-contract/src/index.js";
 import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { wrapToolsWithProtection } from "./executor.js";
 import { EXTERNAL_TOOL_NAMES } from "../external-tools/gateway-tools.js";
@@ -98,7 +99,13 @@ var AgentToolsFactory = class AgentToolsFactory {
 		})).env;
 	};
 	browserReadinessKey() {
-		return JSON.stringify(this.deps.getConfig?.()?.browser.driver ?? null);
+		return JSON.stringify({
+			driver: this.deps.getConfig?.()?.browser.driver ?? null,
+			extensionConnected: this.hasBrowserEndpoint()
+		});
+	}
+	hasBrowserEndpoint() {
+		return this.deps.endpointTools?.registry.list().some((endpoint) => endpoint.kind === "browser" && endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")) ?? false;
 	}
 	async checkBrowserReadinessCached() {
 		const key = this.browserReadinessKey();
@@ -106,7 +113,10 @@ var AgentToolsFactory = class AgentToolsFactory {
 		const cached = this.browserReadinessCache;
 		if (cached && cached.key === key && cached.expiresAt > now && cached.inflight === void 0) return cached.result ?? null;
 		if (cached && cached.key === key && cached.inflight) return cached.inflight;
-		const inflight = checkBrowserReadiness(this.deps.getConfig?.());
+		const inflight = checkBrowserReadiness(this.deps.getConfig?.(), {
+			extensionConnected: this.hasBrowserEndpoint(),
+			checkExtensionInstall: false
+		});
 		this.browserReadinessCache = {
 			key,
 			expiresAt: now + 3e4,
@@ -146,9 +156,14 @@ var AgentToolsFactory = class AgentToolsFactory {
 			emit: this.deps.emitBrowserEvent,
 			resolveTarget: (sessionKey) => {
 				const binding = getBrowserTabBinding(sessionKey);
-				return binding ? {
+				if (binding) return {
 					kind: "attached_tab",
 					bindingId: binding.id
+				};
+				const endpointBinding = this.deps.endpointTools?.bindings.get(sessionKey);
+				return endpointBinding ? {
+					kind: "endpoint",
+					endpointId: endpointBinding.endpointId
 				} : void 0;
 			}
 		});
@@ -401,7 +416,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 			})] : [],
 			...browserEnabled ? [createBrowserUseTool({
 				getRuntime: () => this.ensureBrowserRuntime(),
-				getTaskId: () => this.deps.getCurrentContext()?.sessionKey ?? "default",
+				getTaskId: () => options?.sessionKey ?? this.deps.getCurrentContext()?.sessionKey ?? "default",
 				getReadiness: () => this.checkBrowserReadinessCached()
 			})] : [],
 			...primary ? [createWorkflowTool({
@@ -428,11 +443,13 @@ var AgentToolsFactory = class AgentToolsFactory {
 						getCurrentContext: () => null,
 						getConfig: childOpts.getConfig,
 						getPrimaryModel: () => childOpts.model,
+						endpointTools: childOpts.endpointTools ?? this.deps.endpointTools,
 						toolExecutorConfig: childOpts.toolExecutorConfig
 					}).createAllTools({
 						workspace: childOpts.workspace,
 						getPrimaryModel: () => childOpts.model,
 						agentId: options?.agentId ?? childOpts.agentId,
+						sessionKey: childOpts.browserSessionKey,
 						disabledTools: new Set([
 							EXTERNAL_TOOL_NAMES.search,
 							EXTERNAL_TOOL_NAMES.describe,

package/dist/src/agent/workflow/workflow-child-tools.js

@@ -10,11 +10,13 @@ function buildWorkflowChildTools(childOptions) {
 		getCurrentContext: () => null,
 		getConfig: childOptions.getConfig,
 		getPrimaryModel: () => childOptions.model,
+		endpointTools: childOptions.endpointTools,
 		toolExecutorConfig: childOptions.toolExecutorConfig
 	}).createAllTools({
 		workspace: childOptions.workspace,
 		getPrimaryModel: () => childOptions.model,
 		agentId: childOptions.agentId,
+		sessionKey: childOptions.browserSessionKey,
 		disabledTools: new Set([
 			EXTERNAL_TOOL_NAMES.search,
 			EXTERNAL_TOOL_NAMES.describe,

package/dist/src/browser/native-messaging-host.d.ts

@@ -9,7 +9,7 @@ export type BrowserNativeBootstrap = {
 export type BrowserNativeBootstrapResult = {
     ok: true;
     gatewayUrl: string;
-    pairingLink: string;
+    invitation: string;
     expiresAt: number;
 };
 export declare function encodeNativeMessage(value: unknown): Buffer;

package/dist/src/browser/native-messaging-host.js

@@ -1,4 +1,5 @@
 import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
+import { devicePairingInvitationPayloadSchema, formatBrowserPairingInvitation } from "../../packages/gateway-contract/src/device-pairing.js";
 import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity } from "../storage/sqlite/gateway-identity-repository.js";
 import { createDevicePairingSetup } from "../storage/sqlite/device-pairing-repository.js";
 import { init_loader, loadConfig } from "../config/loader.js";
@@ -49,7 +50,7 @@ function createBrowserNativeBootstrap(configPath, request) {
 		return {
 			ok: true,
 			gatewayUrl,
-			pairingLink: `https://link.xopc.ai/connect#p=${Buffer.from(JSON.stringify({
+			invitation: formatBrowserPairingInvitation(Buffer.from(JSON.stringify(devicePairingInvitationPayloadSchema.parse({
 				version: 3,
 				pairingToken: setup.token,
 				gatewayId: identity.id,
@@ -58,7 +59,7 @@ function createBrowserNativeBootstrap(configPath, request) {
 				routes: [route],
 				targetKind: setup.targetKind,
 				expiresAt: setup.expiresAt
-			})).toString("base64url")}`,
+			}))).toString("base64url")),
 			expiresAt: setup.expiresAt
 		};
 	} finally {

package/dist/src/browser/providers/browser-ext-install.d.ts

@@ -3,7 +3,7 @@
  * Fixed path — gateway upgrades overwrite in place so Chrome sideload paths stay stable.
  */
 import type { Config } from '../../config/schema.js';
-export declare const BROWSER_EXT_REQUIRED_FILES: readonly ["manifest.json", "dist/background.js", "dist/sidepanel.html"];
+export declare const BROWSER_EXT_REQUIRED_FILES: readonly ["manifest.json", "dist/background.js", "dist/sidepanel.html", "_locales/en/messages.json", "_locales/zh_CN/messages.json"];
 export type BrowserExtBundledFrom = 'npm-dist' | 'git-dev' | 'electron-asar' | 'env-override';
 export interface BrowserExtInstallMeta {
     xopcVersion: string;

package/dist/src/browser/providers/browser-ext-install.js

@@ -30,12 +30,15 @@ const STAGING_MAX_AGE_MS = 3600 * 1e3;
 const INSTALLED_ARTIFACT_NAMES = [
 	"manifest.json",
 	"dist",
-	"icons"
+	"icons",
+	"_locales"
 ];
 const BROWSER_EXT_REQUIRED_FILES = [
 	"manifest.json",
 	"dist/background.js",
-	"dist/sidepanel.html"
+	"dist/sidepanel.html",
+	"_locales/en/messages.json",
+	"_locales/zh_CN/messages.json"
 ];
 function moduleDir() {
 	return dirname(fileURLToPath(import.meta.url));
@@ -53,7 +56,8 @@ function browserExtContentHash(dir) {
 	const relativePaths = [
 		"manifest.json",
 		...collectFiles("dist"),
-		...collectFiles("icons")
+		...collectFiles("icons"),
+		...collectFiles("_locales")
 	].sort();
 	for (const relativePath of relativePaths) {
 		hash.update(relativePath);
@@ -220,6 +224,7 @@ function copyBundledTree(src, dest) {
 	mkdirSync(dest, { recursive: true });
 	copyBundledFile(join(src, "manifest.json"), join(dest, "manifest.json"));
 	copyBundledDirectory(join(src, "dist"), join(dest, "dist"));
+	copyBundledDirectory(join(src, "_locales"), join(dest, "_locales"));
 	for (const icon of BROWSER_EXT_ICON_FILES) {
 		const iconSrc = join(src, "icons", icon);
 		if (existsSync(iconSrc)) copyBundledFile(iconSrc, join(dest, "icons", icon));

package/dist/src/browser/providers/realtime-extension.d.ts

@@ -21,9 +21,12 @@ export declare class RealtimeExtensionBrowserProvider {
         expectedProtocolVersion: number;
         extensionVersion: string;
         principalId: string;
+        endpointCount: number;
+        selectionRequired: boolean;
         transport: "gateway-realtime";
     };
     shutdown(): Promise<void>;
     private endpointForInput;
-    private currentEndpoint;
+    private defaultEndpoint;
+    private browserEndpoints;
 }

package/dist/src/browser/providers/realtime-extension.js

@@ -14,14 +14,18 @@ var RealtimeExtensionBrowserProvider = class {
 	async start() {}
 	async waitForConnection(timeoutMs = this.connectionTimeout) {
 		const deadline = Date.now() + timeoutMs;
-		while (!this.currentEndpoint()) {
+		while (this.browserEndpoints().length === 0) {
 			if (Date.now() >= deadline) throw new Error(`Extension connection timeout after ${timeoutMs}ms. Open the xopc Chrome extension and connect it to this Gateway.`);
 			await new Promise((resolve) => setTimeout(resolve, 200));
 		}
 	}
 	async send(input, timeoutMs = this.commandTimeout, visualFallback = true) {
 		const endpoint = this.endpointForInput(input);
-		if (!endpoint) throw new Error("Extension not connected to this Gateway. Open the xopc Chrome extension and connect it first.");
+		if (!endpoint) {
+			if (input.target?.kind === "endpoint") throw new Error(`The Chrome endpoint bound to this Session is offline (${input.target.endpointId}). Reconnect that browser or bind another one.`);
+			if (this.browserEndpoints().length > 1) throw new Error("Multiple Chrome extensions are connected. Attach this Session to a tab or choose a browser device first.");
+			throw new Error("Extension not connected to this Gateway. Open the xopc Chrome extension and connect it first.");
+		}
 		const tool = this.runtime.registry.getTool(endpoint.endpointId, BROWSER_CONTROL_ENDPOINT_TOOL_NAME);
 		if (!tool) throw new Error("Connected browser extension does not support authenticated Realtime browser control. Reload or update the extension.");
 		const id = crypto.randomUUID();
@@ -51,17 +55,20 @@ var RealtimeExtensionBrowserProvider = class {
 		}
 	}
 	isConnected() {
-		return Boolean(this.currentEndpoint());
+		return this.browserEndpoints().length > 0;
 	}
 	getConnectionStatus() {
-		const endpoint = this.currentEndpoint();
+		const endpoints = this.browserEndpoints();
+		const endpoint = endpoints.length === 1 ? endpoints[0] : void 0;
 		return {
-			socketConnected: Boolean(endpoint),
-			connected: Boolean(endpoint),
-			protocolVersion: endpoint ? 4 : null,
+			socketConnected: endpoints.length > 0,
+			connected: endpoints.length > 0,
+			protocolVersion: endpoints.length > 0 ? 4 : null,
 			expectedProtocolVersion: 4,
 			extensionVersion: endpoint?.appVersion ?? null,
 			principalId: endpoint?.principalId ?? null,
+			endpointCount: endpoints.length,
+			selectionRequired: endpoints.length > 1,
 			transport: "gateway-realtime"
 		};
 	}
@@ -73,10 +80,19 @@ var RealtimeExtensionBrowserProvider = class {
 			if (!binding || !endpoint || endpoint.principalId !== binding.principalId) return void 0;
 			return endpoint;
 		}
-		return this.currentEndpoint();
+		if (input.target?.kind === "endpoint") {
+			const endpoint = this.runtime.registry.get(input.target.endpointId);
+			if (!endpoint || endpoint.kind !== "browser" || !endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")) return;
+			return endpoint;
+		}
+		return this.defaultEndpoint();
+	}
+	defaultEndpoint() {
+		const endpoints = this.browserEndpoints();
+		return endpoints.length === 1 ? endpoints[0] : void 0;
 	}
-	currentEndpoint() {
-		return this.runtime.registry.list().filter((endpoint) => endpoint.kind === "browser" && endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt)[0];
+	browserEndpoints() {
+		return this.runtime.registry.list().filter((endpoint) => endpoint.kind === "browser" && endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt);
 	}
 };
 //#endregion

package/dist/src/browser/readiness.d.ts

@@ -12,4 +12,7 @@ export declare class BrowserNotReadyError extends Error {
     constructor(hint: BrowserSetupHint);
 }
 export declare function buildBrowserSetupDeepLink(driver: BrowserDriverKind): string;
-export declare function checkBrowserReadiness(cfg: Config | undefined): Promise<BrowserNotReadyError | null>;
+export declare function checkBrowserReadiness(cfg: Config | undefined, options?: {
+    extensionConnected?: boolean;
+    checkExtensionInstall?: boolean;
+}): Promise<BrowserNotReadyError | null>;

package/dist/src/browser/readiness.js

@@ -14,17 +14,23 @@ var BrowserNotReadyError = class extends Error {
 function buildBrowserSetupDeepLink(driver) {
 	return `/settings/agent-browser?driver=${driver}`;
 }
-async function checkBrowserReadiness(cfg) {
+async function checkBrowserReadiness(cfg, options = {}) {
 	if (!cfg?.browser.enabled) return null;
 	const driver = cfg.browser.driver;
 	let detail = null;
 	let reason = null;
 	try {
 		if (driver.kind === "extension") {
-			const { browserExtDoctor } = await import("./providers/browser-ext-install.js");
-			if (!(await browserExtDoctor()).installed) {
-				reason = "extension_not_installed";
-				detail = "Chrome extension artifacts are not installed.";
+			if (options.extensionConnected) return null;
+			if (options.checkExtensionInstall === false) {
+				reason = "extension_not_connected";
+				detail = "No authenticated Chrome extension endpoint is connected.";
+			} else {
+				const { browserExtDoctor } = await import("./providers/browser-ext-install.js");
+				if (!(await browserExtDoctor()).installed) {
+					reason = "extension_not_installed";
+					detail = "Chrome extension artifacts are not installed.";
+				}
 			}
 		} else if (driver.kind === "playwright") if (driver.executablePath) await access(driver.executablePath);
 		else {

package/dist/src/cli/commands/onboard.js

@@ -4,8 +4,8 @@ import { saveConfig } from "../../config/loader.js";
 import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
 import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
-import { provisionEagerRuntimes } from "../../runtime-tools/bootstrap.js";
 import { colors } from "../utils/colors.js";
+import { provisionEagerRuntimes } from "../../runtime-tools/bootstrap.js";
 import { initWorkspace } from "../utils/init-workspace.js";
 import { setupModel } from "./onboard/model.js";
 import { getChannelConfigurators } from "./onboard/channels/registry.js";

package/dist/src/gateway/gateway-workflow-host.types.d.ts

@@ -1,4 +1,5 @@
 import type { Config } from '../config/schema.js';
+import type { EndpointToolRuntime } from '../endpoint-tools/index.js';
 import type { MessageBus } from '../infra/bus/index.js';
 import type { SessionStore } from '../session/store.js';
 export interface GatewayWorkflowAgentSurface {
@@ -10,6 +11,7 @@ export interface GatewayWorkflowHost {
     readonly currentWorkspacePath: string;
     readonly messageBusInstance: MessageBus;
     readonly agentService: GatewayWorkflowAgentSurface;
+    readonly endpointTools?: EndpointToolRuntime;
     emit(event: string, payload: unknown): void;
     readonly sessionIndexInstance: {
         getStore(): SessionStore;

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/app.js

@@ -5,8 +5,8 @@ import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from ".
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
-import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
+import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
@@ -217,7 +217,10 @@ function createHonoApp(config) {
 	});
 	registerPublicGatewayRoutes(app, service);
 	registerPublicHtmlPreviewRoute(app);
-	registerDeviceAuthPublicRoutes(app);
+	registerDeviceAuthPublicRoutes(app, { getTrustedProxyContext: () => ({
+		trustedProxies: service.currentConfig.gateway?.trustedProxies,
+		allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true
+	}) });
 	registerPublicExtensionAssetRoutes(app, service);
 	registerPublicLocalAppPreviewRoutes(app, service);
 	const authenticated = new Hono();

package/dist/src/gateway/hono/routes/agent-stream.js

@@ -1,5 +1,5 @@
-import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
+import { parseTurnContextRefs } from "../../../agent/source-context/types.js";
 import { replaceLatestSessionTurn, submitSessionInput } from "./session-input-handler.js";
 //#region src/gateway/hono/routes/agent-stream.ts
 function registerAgentStreamRoutes(authenticated, deps) {

package/dist/src/gateway/hono/routes/browser.js

@@ -10,12 +10,12 @@ import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
 /** Browser Control status, approvals, and driver diagnostics. */
-async function extensionStatus(service) {
-	const endpoint = service.endpointTools.registry.list().filter((item) => item.kind === "browser" && item.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt)[0];
-	const connected = Boolean(endpoint);
+async function extensionStatus(service, includeLocalArtifacts) {
+	const endpoints = service.endpointTools.registry.list().filter((item) => item.kind === "browser" && item.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt);
+	const endpoint = endpoints[0];
+	const connected = endpoints.length > 0;
 	const extensionVersion = endpoint?.appVersion ?? null;
-	const { browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
-	const doctor = await browserExtDoctor({ runtimeExtensionVersion: extensionVersion ?? void 0 });
+	const doctor = includeLocalArtifacts ? await import("../../../browser/providers/browser-ext-install.js").then(({ browserExtDoctor }) => browserExtDoctor({ runtimeExtensionVersion: extensionVersion ?? void 0 })) : void 0;
 	return {
 		running: true,
 		socketConnected: connected,
@@ -24,7 +24,15 @@ async function extensionStatus(service) {
 		protocolVersion: connected ? 4 : null,
 		expectedProtocolVersion: 4,
 		extensionVersion,
-		artifacts: {
+		endpoints: endpoints.map((item) => ({
+			endpointId: item.endpointId,
+			principalId: item.principalId,
+			displayName: item.displayName,
+			platform: item.platform,
+			appVersion: item.appVersion,
+			lastHeartbeatAt: item.lastHeartbeatAt
+		})),
+		artifacts: { ...doctor ? {
 			installed: doctor.installed,
 			bundledAvailable: doctor.bundledAvailable,
 			extensionDir: doctor.extensionDir,
@@ -33,9 +41,9 @@ async function extensionStatus(service) {
 			needsRefresh: doctor.needsRefresh,
 			needsChromeReload: doctor.needsChromeReload,
 			nativeHost: doctor.nativeHost
-		},
+		} : {} },
 		bridgeHeld: false,
-		refCount: connected ? 1 : 0,
+		refCount: endpoints.length,
 		transport: "gateway-realtime"
 	};
 }
@@ -148,7 +156,7 @@ function registerBrowserRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/browser/extension-status", async (c) => {
 		try {
-			return c.json(await extensionStatus(service));
+			return c.json(await extensionStatus(service, isLocalOwnerRequest(c, service)));
 		} catch (error) {
 			return c.json({
 				running: false,
@@ -160,6 +168,7 @@ function registerBrowserRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/browser/status", async (c) => {
 		const config = service.currentConfig.browser;
+		const localManagementAvailable = isLocalOwnerRequest(c, service);
 		if (!config.enabled) return c.json({
 			ok: true,
 			payload: {
@@ -168,15 +177,19 @@ function registerBrowserRoutes(authenticated, deps) {
 				state: "disabled"
 			}
 		});
-		const readiness = await checkBrowserReadiness(service.currentConfig);
-		const driverStatus = config.driver.kind === "extension" ? await extensionStatus(service).catch((error) => ({ error: error instanceof Error ? error.message : String(error) })) : config.driver.kind === "playwright" ? await import("../../../browser/providers/playwright-doctor.js").then(({ playwrightChromiumDoctor }) => playwrightChromiumDoctor()) : void 0;
+		const driverStatus = config.driver.kind === "extension" ? await extensionStatus(service, localManagementAvailable).catch((error) => ({ error: error instanceof Error ? error.message : String(error) })) : config.driver.kind === "playwright" ? await import("../../../browser/providers/playwright-doctor.js").then(({ playwrightChromiumDoctor }) => playwrightChromiumDoctor()) : void 0;
 		const extensionConnected = config.driver.kind === "extension" ? driverStatus.connected === true : true;
+		const readiness = await checkBrowserReadiness(service.currentConfig, {
+			extensionConnected,
+			checkExtensionInstall: localManagementAvailable
+		});
 		const extensionProtocolDetail = config.driver.kind === "extension" && "socketConnected" in driverStatus && driverStatus.socketConnected && !driverStatus.connected ? `Chrome extension protocol ${driverStatus.protocolVersion ?? "unknown"} does not match ${driverStatus.expectedProtocolVersion ?? "the gateway"}. Reload the extension in Chrome.` : void 0;
 		return c.json({
 			ok: true,
 			payload: {
 				enabled: true,
 				driverKind: config.driver.kind,
+				localManagementAvailable,
 				state: !readiness && extensionConnected ? "ready" : "needs_attention",
 				reason: readiness?.hint.reason ?? (extensionConnected ? void 0 : "extension_not_connected"),
 				detail: readiness?.hint.detail ?? extensionProtocolDetail,

package/dist/src/gateway/hono/routes/device-pairing-approval.d.ts

@@ -1,3 +1,10 @@
-import type { Hono } from 'hono';
-export declare function registerPairingApprovalPublicRoutes(app: Hono): void;
+import type { Context, Hono } from 'hono';
+export type PairingPublicRouteOptions = {
+    getTrustedProxyContext?: () => {
+        trustedProxies?: string[];
+        allowRealIpFallback?: boolean;
+    };
+};
+export declare function pairingClientKey(c: Context, options?: PairingPublicRouteOptions): string;
+export declare function registerPairingApprovalPublicRoutes(app: Hono, options?: PairingPublicRouteOptions): void;
 export declare function registerPairingApprovalAdminRoutes(app: Hono): void;

package/dist/src/gateway/hono/routes/device-pairing-approval.js

@@ -1,9 +1,41 @@
 import { devicePairingCompleteSchema, devicePairingProofSchema, devicePairingRequestSchema } from "../../../../packages/gateway-contract/src/device-pairing.js";
 import { getOrCreateGatewayIdentity, signGatewayPayload } from "../../../storage/sqlite/gateway-identity-repository.js";
+import { resolveClientIpFromRequest } from "../../client-ip.js";
+import { buckets } from "../../rate-limit/buckets.js";
+import "../../rate-limit/index.js";
 import { DevicePairingError, cancelDevicePairingSetup, decideDevicePairingRequest, operateDevicePairingRequest, readDevicePairingSetup, submitDevicePairingRequest } from "../../../storage/sqlite/device-pairing-approval.js";
 import os from "node:os";
 import { z } from "zod";
+import { bodyLimit } from "hono/body-limit";
+import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/device-pairing-approval.ts
+function pairingClientKey(c, options) {
+	let remoteAddress;
+	try {
+		remoteAddress = getConnInfo(c).remote.address;
+	} catch {
+		remoteAddress = void 0;
+	}
+	const proxy = options?.getTrustedProxyContext?.();
+	return resolveClientIpFromRequest({
+		remoteAddress,
+		getHeader: (name) => c.req.header(name),
+		trustedProxies: proxy?.trustedProxies,
+		allowRealIpFallback: proxy?.allowRealIpFallback
+	});
+}
+function pairingBlocked(c, key) {
+	const blocked = buckets.pairingExchange().check(key);
+	if (!blocked.blocked) return void 0;
+	c.header("Retry-After", String(blocked.retryAfterSec));
+	return c.json({
+		ok: false,
+		error: {
+			code: "PAIRING_RATE_LIMITED",
+			message: "Too many failed pairing attempts"
+		}
+	}, 429);
+}
 function pairingError(c, error) {
 	if (error instanceof DevicePairingError) return c.json({
 		ok: false,
@@ -20,7 +52,7 @@ function pairingError(c, error) {
 		}
 	}, 500);
 }
-function registerPairingApprovalPublicRoutes(app) {
+function registerPairingApprovalPublicRoutes(app, options) {
 	for (const action of [
 		"request",
 		"status",
@@ -28,15 +60,21 @@ function registerPairingApprovalPublicRoutes(app) {
 		"cancel"
 	]) {
 		const path = action === "request" ? "/api/device-pairing/requests" : `/api/device-pairing/requests/:id/${action}`;
-		app.post(path, async (c) => {
+		app.post(path, bodyLimit({ maxSize: 4 * 1024 }), async (c) => {
+			const clientKey = pairingClientKey(c, options);
+			const blocked = pairingBlocked(c, clientKey);
+			if (blocked) return blocked;
 			const parsed = (action === "request" ? devicePairingRequestSchema : action === "complete" ? devicePairingCompleteSchema : devicePairingProofSchema).safeParse(await c.req.json().catch(() => null));
-			if (!parsed.success || action !== "request" && parsed.data.requestId !== c.req.param("id")) return c.json({
-				ok: false,
-				error: {
-					code: "BAD_REQUEST",
-					message: "Invalid pairing request"
-				}
-			}, 400);
+			if (!parsed.success || action !== "request" && parsed.data.requestId !== c.req.param("id")) {
+				buckets.pairingExchange().fail(clientKey);
+				return c.json({
+					ok: false,
+					error: {
+						code: "BAD_REQUEST",
+						message: "Invalid pairing request"
+					}
+				}, 400);
+			}
 			try {
 				const result = action === "request" ? { request: submitDevicePairingRequest(parsed.data) } : operateDevicePairingRequest(action, parsed.data);
 				const signedPayload = Buffer.from(JSON.stringify({
@@ -48,12 +86,14 @@ function registerPairingApprovalPublicRoutes(app) {
 					nonce: parsed.data.nonce,
 					issuedAt: Date.now()
 				})).toString("base64url");
+				buckets.pairingExchange().succeed(clientKey);
 				return c.json({
 					ok: true,
 					signedPayload,
 					signature: signGatewayPayload(signedPayload)
 				});
 			} catch (error) {
+				buckets.pairingExchange().fail(clientKey);
 				return pairingError(c, error);
 			}
 		});
@@ -97,4 +137,4 @@ function registerPairingApprovalAdminRoutes(app) {
 	});
 }
 //#endregion
-export { registerPairingApprovalAdminRoutes, registerPairingApprovalPublicRoutes };
+export { pairingClientKey, registerPairingApprovalAdminRoutes, registerPairingApprovalPublicRoutes };

package/dist/src/gateway/hono/routes/devices.d.ts

@@ -1,4 +1,5 @@
 import type { Hono } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
-export declare function registerDeviceAuthPublicRoutes(app: Hono): void;
+import { type PairingPublicRouteOptions } from './device-pairing-approval.js';
+export declare function registerDeviceAuthPublicRoutes(app: Hono, options?: PairingPublicRouteOptions): void;
 export declare function registerDeviceRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;