@xopcai/xopc 0.0.274 → 0.0.276

package/dist/src/browser/providers/browser-ext-install.js

@@ -11,7 +11,7 @@ import { resolvePackageRoot } from "../../infra/update-check.js";
 import { dirname, join } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { spawn } from "node:child_process";
+import { execFileSync, spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { readFile, readdir, rm } from "node:fs/promises";
 import AdmZip from "adm-zip";
@@ -30,12 +30,15 @@ const STAGING_MAX_AGE_MS = 3600 * 1e3;
 const INSTALLED_ARTIFACT_NAMES = [
 	"manifest.json",
 	"dist",
-	"icons"
+	"icons",
+	"_locales"
 ];
 const BROWSER_EXT_REQUIRED_FILES = [
 	"manifest.json",
 	"dist/background.js",
-	"dist/sidepanel.html"
+	"dist/sidepanel.html",
+	"_locales/en/messages.json",
+	"_locales/zh_CN/messages.json"
 ];
 function moduleDir() {
 	return dirname(fileURLToPath(import.meta.url));
@@ -53,7 +56,8 @@ function browserExtContentHash(dir) {
 	const relativePaths = [
 		"manifest.json",
 		...collectFiles("dist"),
-		...collectFiles("icons")
+		...collectFiles("icons"),
+		...collectFiles("_locales")
 	].sort();
 	for (const relativePath of relativePaths) {
 		hash.update(relativePath);
@@ -220,6 +224,7 @@ function copyBundledTree(src, dest) {
 	mkdirSync(dest, { recursive: true });
 	copyBundledFile(join(src, "manifest.json"), join(dest, "manifest.json"));
 	copyBundledDirectory(join(src, "dist"), join(dest, "dist"));
+	copyBundledDirectory(join(src, "_locales"), join(dest, "_locales"));
 	for (const icon of BROWSER_EXT_ICON_FILES) {
 		const iconSrc = join(src, "icons", icon);
 		if (existsSync(iconSrc)) copyBundledFile(iconSrc, join(dest, "icons", icon));
@@ -315,6 +320,42 @@ async function ensureBrowserExtensionArtifacts(opts) {
 function shellQuote(value) {
 	return `'${value.replaceAll("'", "'\\''")}'`;
 }
+const WINDOWS_NATIVE_HOST_KEYS = [
+	"Google\\Chrome",
+	"Chromium",
+	"Microsoft\\Edge",
+	"BraveSoftware\\Brave-Browser"
+].map((browser) => `HKCU\\Software\\${browser}\\NativeMessagingHosts\\${BROWSER_NATIVE_HOST_NAME}`);
+function runNativeHostRegistry(args) {
+	return execFileSync("reg.exe", args, {
+		encoding: "utf8",
+		windowsHide: true,
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+}
+function windowsRegisteredNativeManifests() {
+	return [...new Set(WINDOWS_NATIVE_HOST_KEYS.flatMap((key) => {
+		try {
+			const path = runNativeHostRegistry([
+				"query",
+				key,
+				"/ve",
+				"/reg:32"
+			]).match(/REG_SZ\s+([^\r\n]+)/)?.[1]?.trim();
+			return path ? [path] : [];
+		} catch {
+			return [];
+		}
+	}))];
+}
+function batchQuote(value) {
+	if (/["\r\n\0]/.test(value)) throw new Error("Invalid path in Windows native host launcher");
+	return `"${value.replaceAll("%", "%%")}"`;
+}
 function browserNativeManifestDirectories(platform = process.platform, home = process.env.HOME || process.env.USERPROFILE || "") {
 	if (!home) return [];
 	if (platform === "darwin") return [
@@ -335,12 +376,12 @@ function browserNativeManifestDirectories(platform = process.platform, home = pr
 }
 function browserNativeHostDoctor(platform = process.platform, home = process.env.HOME || process.env.USERPROFILE || "") {
 	const directories = browserNativeManifestDirectories(platform, home);
-	if (directories.length === 0) return {
+	if (platform !== "win32" && directories.length === 0) return {
 		installed: false,
 		manifestPaths: [],
-		reason: "Automatic local Gateway discovery is supported on macOS and Linux"
+		reason: "Automatic local Gateway discovery is supported on Windows, macOS and Linux"
 	};
-	const manifestPaths = directories.map((directory) => join(directory, `${BROWSER_NATIVE_HOST_NAME}.json`)).filter((manifestPath) => {
+	const manifestPaths = (platform === "win32" ? windowsRegisteredNativeManifests() : directories.map((directory) => join(directory, `${BROWSER_NATIVE_HOST_NAME}.json`))).filter((manifestPath) => {
 		try {
 			const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
 			return manifest.name === "ai.xopc.browser" && typeof manifest.path === "string" && existsSync(manifest.path) && Array.isArray(manifest.allowed_origins) && manifest.allowed_origins.includes(`chrome-extension://gopbfhaojnnhiheiikblejnpgmfmkmgd/`);
@@ -356,11 +397,12 @@ function browserNativeHostDoctor(platform = process.platform, home = process.env
 }
 /** Install the local-only bootstrap host used to discover and pair with a Gateway. */
 async function installBrowserNativeMessagingHost(opts) {
-	const directories = browserNativeManifestDirectories(opts?.platform ?? process.platform, opts?.home);
-	if (directories.length === 0) return {
+	const platform = opts?.platform ?? process.platform;
+	const directories = browserNativeManifestDirectories(platform, opts?.home);
+	if (platform !== "win32" && directories.length === 0) return {
 		installed: false,
 		manifestPaths: [],
-		reason: "Automatic local Gateway discovery is supported on macOS and Linux"
+		reason: "Automatic local Gateway discovery is supported on Windows, macOS and Linux"
 	};
 	const cliPath = opts?.cliPath ?? process.argv[1];
 	if (!cliPath) throw new Error("Unable to resolve the xopc CLI entry point");
@@ -376,12 +418,23 @@ async function installBrowserNativeMessagingHost(opts) {
 		if (!existsSync(tsxPath)) throw new Error("Unable to install the browser native host in development: the tsx CLI entry was not found");
 		executableArgs = [realpathSync(tsxPath), ...executableArgs];
 	}
-	const hostPath = join((opts?.cacheDir?.trim() ? assertCacheDir(opts.cacheDir) : resolveBinDir()) || resolveBinDir(), "browser-native-host");
+	const hostPath = join((opts?.cacheDir?.trim() ? assertCacheDir(opts.cacheDir) : resolveBinDir()) || resolveBinDir(), platform === "win32" ? "browser-native-host.cmd" : "browser-native-host");
 	mkdirSync(dirname(hostPath), { recursive: true });
 	const stateDir = opts?.stateDir ?? resolveStateDir();
 	const configPath = opts?.configPath ?? resolveConfigPath();
-	await writeTextAtomic(hostPath, `#!/bin/sh\nexec env ELECTRON_RUN_AS_NODE=1 XOPC_STATE_DIR=${shellQuote(stateDir)} XOPC_CONFIG_PATH=${shellQuote(configPath)} XOPC_LOG_CONSOLE=false ${shellQuote(executablePath)} ${executableArgs.map(shellQuote).join(" ")}\n`);
-	chmodSync(hostPath, 493);
+	await writeTextAtomic(hostPath, platform === "win32" ? [
+		"@echo off",
+		"setlocal DisableDelayedExpansion",
+		"chcp 65001 >nul",
+		"set \"ELECTRON_RUN_AS_NODE=1\"",
+		`set ${batchQuote(`XOPC_STATE_DIR=${stateDir}`)}`,
+		`set ${batchQuote(`XOPC_CONFIG_PATH=${configPath}`)}`,
+		"set \"XOPC_LOG_CONSOLE=false\"",
+		`${batchQuote(executablePath)} ${executableArgs.map(batchQuote).join(" ")}`,
+		"exit /b %errorlevel%",
+		""
+	].join("\r\n") : `#!/bin/sh\nexec env ELECTRON_RUN_AS_NODE=1 XOPC_STATE_DIR=${shellQuote(stateDir)} XOPC_CONFIG_PATH=${shellQuote(configPath)} XOPC_LOG_CONSOLE=false ${shellQuote(executablePath)} ${executableArgs.map(shellQuote).join(" ")}\n`);
+	if (platform !== "win32") chmodSync(hostPath, 493);
 	const manifest = JSON.stringify({
 		name: BROWSER_NATIVE_HOST_NAME,
 		description: "xopc local browser pairing bootstrap",
@@ -390,12 +443,31 @@ async function installBrowserNativeMessagingHost(opts) {
 		allowed_origins: [`chrome-extension://${BROWSER_EXTENSION_ID}/`]
 	}, null, 2);
 	const manifestPaths = [];
-	for (const directory of directories) {
+	for (const directory of platform === "win32" ? [dirname(hostPath)] : directories) {
 		mkdirSync(directory, { recursive: true });
 		const manifestPath = join(directory, `${BROWSER_NATIVE_HOST_NAME}.json`);
 		await writeTextAtomic(manifestPath, manifest);
 		manifestPaths.push(manifestPath);
 	}
+	if (platform === "win32") try {
+		for (const key of WINDOWS_NATIVE_HOST_KEYS) runNativeHostRegistry([
+			"add",
+			key,
+			"/ve",
+			"/t",
+			"REG_SZ",
+			"/d",
+			manifestPaths[0],
+			"/f",
+			"/reg:32"
+		]);
+	} catch (error) {
+		return {
+			installed: false,
+			manifestPaths,
+			reason: `Windows native host registration failed: ${error instanceof Error ? error.message : String(error)}`
+		};
+	}
 	return {
 		installed: true,
 		manifestPaths

package/dist/src/browser/providers/realtime-extension.d.ts

@@ -21,9 +21,12 @@ export declare class RealtimeExtensionBrowserProvider {
         expectedProtocolVersion: number;
         extensionVersion: string;
         principalId: string;
+        endpointCount: number;
+        selectionRequired: boolean;
         transport: "gateway-realtime";
     };
     shutdown(): Promise<void>;
     private endpointForInput;
-    private currentEndpoint;
+    private defaultEndpoint;
+    private browserEndpoints;
 }

package/dist/src/browser/providers/realtime-extension.js

@@ -14,14 +14,18 @@ var RealtimeExtensionBrowserProvider = class {
 	async start() {}
 	async waitForConnection(timeoutMs = this.connectionTimeout) {
 		const deadline = Date.now() + timeoutMs;
-		while (!this.currentEndpoint()) {
+		while (this.browserEndpoints().length === 0) {
 			if (Date.now() >= deadline) throw new Error(`Extension connection timeout after ${timeoutMs}ms. Open the xopc Chrome extension and connect it to this Gateway.`);
 			await new Promise((resolve) => setTimeout(resolve, 200));
 		}
 	}
 	async send(input, timeoutMs = this.commandTimeout, visualFallback = true) {
 		const endpoint = this.endpointForInput(input);
-		if (!endpoint) throw new Error("Extension not connected to this Gateway. Open the xopc Chrome extension and connect it first.");
+		if (!endpoint) {
+			if (input.target?.kind === "endpoint") throw new Error(`The Chrome endpoint bound to this Session is offline (${input.target.endpointId}). Reconnect that browser or bind another one.`);
+			if (this.browserEndpoints().length > 1) throw new Error("Multiple Chrome extensions are connected. Attach this Session to a tab or choose a browser device first.");
+			throw new Error("Extension not connected to this Gateway. Open the xopc Chrome extension and connect it first.");
+		}
 		const tool = this.runtime.registry.getTool(endpoint.endpointId, BROWSER_CONTROL_ENDPOINT_TOOL_NAME);
 		if (!tool) throw new Error("Connected browser extension does not support authenticated Realtime browser control. Reload or update the extension.");
 		const id = crypto.randomUUID();
@@ -51,17 +55,20 @@ var RealtimeExtensionBrowserProvider = class {
 		}
 	}
 	isConnected() {
-		return Boolean(this.currentEndpoint());
+		return this.browserEndpoints().length > 0;
 	}
 	getConnectionStatus() {
-		const endpoint = this.currentEndpoint();
+		const endpoints = this.browserEndpoints();
+		const endpoint = endpoints.length === 1 ? endpoints[0] : void 0;
 		return {
-			socketConnected: Boolean(endpoint),
-			connected: Boolean(endpoint),
-			protocolVersion: endpoint ? 4 : null,
+			socketConnected: endpoints.length > 0,
+			connected: endpoints.length > 0,
+			protocolVersion: endpoints.length > 0 ? 4 : null,
 			expectedProtocolVersion: 4,
 			extensionVersion: endpoint?.appVersion ?? null,
 			principalId: endpoint?.principalId ?? null,
+			endpointCount: endpoints.length,
+			selectionRequired: endpoints.length > 1,
 			transport: "gateway-realtime"
 		};
 	}
@@ -73,10 +80,19 @@ var RealtimeExtensionBrowserProvider = class {
 			if (!binding || !endpoint || endpoint.principalId !== binding.principalId) return void 0;
 			return endpoint;
 		}
-		return this.currentEndpoint();
+		if (input.target?.kind === "endpoint") {
+			const endpoint = this.runtime.registry.get(input.target.endpointId);
+			if (!endpoint || endpoint.kind !== "browser" || !endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")) return;
+			return endpoint;
+		}
+		return this.defaultEndpoint();
+	}
+	defaultEndpoint() {
+		const endpoints = this.browserEndpoints();
+		return endpoints.length === 1 ? endpoints[0] : void 0;
 	}
-	currentEndpoint() {
-		return this.runtime.registry.list().filter((endpoint) => endpoint.kind === "browser" && endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt)[0];
+	browserEndpoints() {
+		return this.runtime.registry.list().filter((endpoint) => endpoint.kind === "browser" && endpoint.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt);
 	}
 };
 //#endregion

package/dist/src/browser/readiness.d.ts

@@ -12,4 +12,7 @@ export declare class BrowserNotReadyError extends Error {
     constructor(hint: BrowserSetupHint);
 }
 export declare function buildBrowserSetupDeepLink(driver: BrowserDriverKind): string;
-export declare function checkBrowserReadiness(cfg: Config | undefined): Promise<BrowserNotReadyError | null>;
+export declare function checkBrowserReadiness(cfg: Config | undefined, options?: {
+    extensionConnected?: boolean;
+    checkExtensionInstall?: boolean;
+}): Promise<BrowserNotReadyError | null>;

package/dist/src/browser/readiness.js

@@ -14,17 +14,23 @@ var BrowserNotReadyError = class extends Error {
 function buildBrowserSetupDeepLink(driver) {
 	return `/settings/agent-browser?driver=${driver}`;
 }
-async function checkBrowserReadiness(cfg) {
+async function checkBrowserReadiness(cfg, options = {}) {
 	if (!cfg?.browser.enabled) return null;
 	const driver = cfg.browser.driver;
 	let detail = null;
 	let reason = null;
 	try {
 		if (driver.kind === "extension") {
-			const { browserExtDoctor } = await import("./providers/browser-ext-install.js");
-			if (!(await browserExtDoctor()).installed) {
-				reason = "extension_not_installed";
-				detail = "Chrome extension artifacts are not installed.";
+			if (options.extensionConnected) return null;
+			if (options.checkExtensionInstall === false) {
+				reason = "extension_not_connected";
+				detail = "No authenticated Chrome extension endpoint is connected.";
+			} else {
+				const { browserExtDoctor } = await import("./providers/browser-ext-install.js");
+				if (!(await browserExtDoctor()).installed) {
+					reason = "extension_not_installed";
+					detail = "Chrome extension artifacts are not installed.";
+				}
 			}
 		} else if (driver.kind === "playwright") if (driver.executablePath) await access(driver.executablePath);
 		else {

package/dist/src/cli/commands/channels.js

@@ -1,8 +1,8 @@
 import { buildChannelCatalogForConfig, init_channel_catalog_service } from "../../channels/catalog/channel-catalog-service.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import { listChannelPairingState } from "../../channels/pairing/pairing-service.js";
 import { approveChannelPairingFromCli } from "../../channels/pairing/approve-cli.js";
-import { formatExamples, register } from "../registry.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 //#region src/cli/commands/channels.ts

package/dist/src/cli/commands/connectors.js

@@ -1,8 +1,8 @@
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
 import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { register } from "../registry.js";
-import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
+import { confirm } from "@inquirer/prompts";
 //#region src/cli/commands/connectors.ts
 init_loader();
 function parsePairs(values, option) {

package/dist/src/cli/commands/extension-marketplace.js

@@ -3,9 +3,9 @@ import { init_loader, loadConfig } from "../../config/loader.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getContextWithOpts } from "../context.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
 import { installFromLocal, installFromNpm, peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionStoreZip } from "../../extensions/install-transaction.js";
-import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
 import { colors } from "../utils/colors.js";
 import { validateExtensionPackageDirectory } from "./extension-pack.js";
 import { join, resolve } from "node:path";
@@ -13,8 +13,8 @@ import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
 import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import semver from "semver";
-import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
+import { confirm } from "@inquirer/prompts";
 //#region src/cli/commands/extension-marketplace.ts
 init_loader();
 init_paths();

package/dist/src/cli/commands/models.js

@@ -9,8 +9,8 @@ import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
-import { input } from "@inquirer/prompts";
 import { Command } from "commander";
+import { input } from "@inquirer/prompts";
 //#region src/cli/commands/models.ts
 init_credentials();
 init_schema();

package/dist/src/cli/commands/onboard.js

@@ -10,8 +10,8 @@ import { initWorkspace } from "../utils/init-workspace.js";
 import { setupModel } from "./onboard/model.js";
 import { getChannelConfigurators } from "./onboard/channels/registry.js";
 import { setupChannels } from "./onboard/channels/index.js";
-import { select } from "@inquirer/prompts";
 import { Command } from "commander";
+import { select } from "@inquirer/prompts";
 //#region src/cli/commands/onboard.ts
 init_schema();
 init_paths_state();

package/dist/src/extensions/sdk/index.js

@@ -7,8 +7,8 @@ import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import "../loader.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
-import { defineChannelPluginEntry } from "./channel-entry.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
+import { defineChannelPluginEntry } from "./channel-entry.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts

package/dist/src/extensions/update.js

@@ -4,8 +4,8 @@ import { init_paths, resolveBundledExtensionsDir, resolveExtensionsDir } from ".
 import { init_loader, loadConfig } from "../config/loader.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getExtensionLockfileManager } from "./lockfile.js";
-import { installExtensionFromStoreZip, installFromNpm } from "./install.js";
 import { findExtension } from "./marketplace.js";
+import { installExtensionFromStoreZip, installFromNpm } from "./install.js";
 import { join } from "node:path";
 import { existsSync, readFileSync, readdirSync, rmSync } from "node:fs";
 import semver from "semver";

package/dist/src/gateway/gateway-workflow-host.types.d.ts

@@ -1,4 +1,5 @@
 import type { Config } from '../config/schema.js';
+import type { EndpointToolRuntime } from '../endpoint-tools/index.js';
 import type { MessageBus } from '../infra/bus/index.js';
 import type { SessionStore } from '../session/store.js';
 export interface GatewayWorkflowAgentSurface {
@@ -10,6 +11,7 @@ export interface GatewayWorkflowHost {
     readonly currentWorkspacePath: string;
     readonly messageBusInstance: MessageBus;
     readonly agentService: GatewayWorkflowAgentSurface;
+    readonly endpointTools?: EndpointToolRuntime;
     emit(event: string, payload: unknown): void;
     readonly sessionIndexInstance: {
         getStore(): SessionStore;

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -1,8 +1,8 @@
 import { getAllModels, getAvailableModels, init_providers } from "../../../providers/index.js";
 import { ActivationPlanner } from "../../../extensions/activation-planner.js";
 import { mergeActivationContext } from "../../../extensions/activation-context.js";
-import { fetchRegistry, listExtensions, searchExtensions } from "../../../extensions/marketplace.js";
 import { buildWhenContextSnapshot } from "../../../extensions/when-context.js";
+import { fetchRegistry, listExtensions, searchExtensions } from "../../../extensions/marketplace.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";
 import { createOAuthHandler } from "../oauth.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";

package/dist/src/gateway/hono/routes/browser.js

@@ -10,12 +10,12 @@ import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/routes/browser.ts
 /** Browser Control status, approvals, and driver diagnostics. */
-async function extensionStatus(service) {
-	const endpoint = service.endpointTools.registry.list().filter((item) => item.kind === "browser" && item.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt)[0];
-	const connected = Boolean(endpoint);
+async function extensionStatus(service, includeLocalArtifacts) {
+	const endpoints = service.endpointTools.registry.list().filter((item) => item.kind === "browser" && item.tools.some((tool) => tool.descriptor.name === "browser.control")).sort((left, right) => right.lastHeartbeatAt - left.lastHeartbeatAt);
+	const endpoint = endpoints[0];
+	const connected = endpoints.length > 0;
 	const extensionVersion = endpoint?.appVersion ?? null;
-	const { browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
-	const doctor = await browserExtDoctor({ runtimeExtensionVersion: extensionVersion ?? void 0 });
+	const doctor = includeLocalArtifacts ? await import("../../../browser/providers/browser-ext-install.js").then(({ browserExtDoctor }) => browserExtDoctor({ runtimeExtensionVersion: extensionVersion ?? void 0 })) : void 0;
 	return {
 		running: true,
 		socketConnected: connected,
@@ -24,7 +24,15 @@ async function extensionStatus(service) {
 		protocolVersion: connected ? 4 : null,
 		expectedProtocolVersion: 4,
 		extensionVersion,
-		artifacts: {
+		endpoints: endpoints.map((item) => ({
+			endpointId: item.endpointId,
+			principalId: item.principalId,
+			displayName: item.displayName,
+			platform: item.platform,
+			appVersion: item.appVersion,
+			lastHeartbeatAt: item.lastHeartbeatAt
+		})),
+		artifacts: { ...doctor ? {
 			installed: doctor.installed,
 			bundledAvailable: doctor.bundledAvailable,
 			extensionDir: doctor.extensionDir,
@@ -33,9 +41,9 @@ async function extensionStatus(service) {
 			needsRefresh: doctor.needsRefresh,
 			needsChromeReload: doctor.needsChromeReload,
 			nativeHost: doctor.nativeHost
-		},
+		} : {} },
 		bridgeHeld: false,
-		refCount: connected ? 1 : 0,
+		refCount: endpoints.length,
 		transport: "gateway-realtime"
 	};
 }
@@ -148,7 +156,7 @@ function registerBrowserRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/browser/extension-status", async (c) => {
 		try {
-			return c.json(await extensionStatus(service));
+			return c.json(await extensionStatus(service, isLocalOwnerRequest(c, service)));
 		} catch (error) {
 			return c.json({
 				running: false,
@@ -160,6 +168,7 @@ function registerBrowserRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/browser/status", async (c) => {
 		const config = service.currentConfig.browser;
+		const localManagementAvailable = isLocalOwnerRequest(c, service);
 		if (!config.enabled) return c.json({
 			ok: true,
 			payload: {
@@ -168,15 +177,19 @@ function registerBrowserRoutes(authenticated, deps) {
 				state: "disabled"
 			}
 		});
-		const readiness = await checkBrowserReadiness(service.currentConfig);
-		const driverStatus = config.driver.kind === "extension" ? await extensionStatus(service).catch((error) => ({ error: error instanceof Error ? error.message : String(error) })) : config.driver.kind === "playwright" ? await import("../../../browser/providers/playwright-doctor.js").then(({ playwrightChromiumDoctor }) => playwrightChromiumDoctor()) : void 0;
+		const driverStatus = config.driver.kind === "extension" ? await extensionStatus(service, localManagementAvailable).catch((error) => ({ error: error instanceof Error ? error.message : String(error) })) : config.driver.kind === "playwright" ? await import("../../../browser/providers/playwright-doctor.js").then(({ playwrightChromiumDoctor }) => playwrightChromiumDoctor()) : void 0;
 		const extensionConnected = config.driver.kind === "extension" ? driverStatus.connected === true : true;
+		const readiness = await checkBrowserReadiness(service.currentConfig, {
+			extensionConnected,
+			checkExtensionInstall: localManagementAvailable
+		});
 		const extensionProtocolDetail = config.driver.kind === "extension" && "socketConnected" in driverStatus && driverStatus.socketConnected && !driverStatus.connected ? `Chrome extension protocol ${driverStatus.protocolVersion ?? "unknown"} does not match ${driverStatus.expectedProtocolVersion ?? "the gateway"}. Reload the extension in Chrome.` : void 0;
 		return c.json({
 			ok: true,
 			payload: {
 				enabled: true,
 				driverKind: config.driver.kind,
+				localManagementAvailable,
 				state: !readiness && extensionConnected ? "ready" : "needs_attention",
 				reason: readiness?.hint.reason ?? (extensionConnected ? void 0 : "extension_not_connected"),
 				detail: readiness?.hint.detail ?? extensionProtocolDetail,

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -177,6 +177,15 @@ function registerEndpointToolRoutes(authenticated, deps) {
 				message: "Invalid endpoint binding"
 			}
 		}, 400);
+		const gatewayPrincipal = getGatewayPrincipal(c);
+		const endpoint = deps.service.endpointTools.registry.get(parsed.data.endpointId);
+		if (gatewayPrincipal.kind === "device" && (!endpoint || !gatewayPrincipal.deviceId || endpoint.principalId !== gatewayPrincipal.deviceId)) return c.json({
+			ok: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "Endpoint does not belong to this device"
+			}
+		}, 403);
 		try {
 			const binding = deps.service.endpointTools.bindings.bind(c.req.param("sessionKey"), parsed.data.endpointId);
 			return c.json({

package/dist/src/gateway/hono/routes/models.js

@@ -28,6 +28,10 @@ init_providers();
 init_credentials();
 init_model_catalog_store();
 init_plugin_registry();
+function catalogDisplayNames(providerId, modelId) {
+	const model = getModelCatalogStore().getSource(providerId)?.models.find((item) => item.id === modelId);
+	return model?.displayNames ? { displayNames: model.displayNames } : {};
+}
 function readModelsJsonProviderApiKey(providerId) {
 	const { config } = loadModelsJson(resolveModelsJsonPath());
 	const key = (config.providers?.[providerId.trim()])?.apiKey;
@@ -292,6 +296,7 @@ function registerModelsRoutes(authenticated, deps) {
 		const models = sortModelsForPicker(await getAvailableModels()).map((m) => ({
 			id: `${m.provider}/${m.id}`,
 			name: m.name,
+			...catalogDisplayNames(m.provider, m.id),
 			provider: m.provider,
 			contextWindow: m.contextWindow ?? 128e3,
 			maxTokens: m.maxTokens ?? 4096,
@@ -656,6 +661,7 @@ function registerModelsRoutes(authenticated, deps) {
 		const models = sortModelsForPicker(allModels).map((m) => ({
 			id: `${m.provider}/${m.id}`,
 			name: m.name,
+			...catalogDisplayNames(m.provider, m.id),
 			provider: m.provider,
 			contextWindow: m.contextWindow ?? 128e3,
 			maxTokens: m.maxTokens ?? 4096,

package/dist/src/gateway/service/config-coordinator.js

@@ -8,8 +8,8 @@ import { reloadImageGenerationProviders } from "../../agent/image/generation/pro
 import "../../agent/mcp/bundle-mcp-tools.js";
 import { ConfigHotReloader } from "../../config/reload.js";
 import "../../config/index.js";
-import { computeBundledExtensionExtensionsPatch } from "../../extensions/bundled-extension-activation.js";
 import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
+import { computeBundledExtensionExtensionsPatch } from "../../extensions/bundled-extension-activation.js";
 //#region src/gateway/service/config-coordinator.ts
 init_providers();
 init_logger();

package/dist/src/gateway/service.js

@@ -51,9 +51,6 @@ import { MessageBus, MessageBusShutdownError } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
 import { AgentService } from "../agent/service.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
-import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
-import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
-import { ChannelManager } from "../channels/manager.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
@@ -71,6 +68,9 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
+import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
+import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
+import { ChannelManager } from "../channels/manager.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";

package/dist/src/infra/update-runner.js

@@ -1,6 +1,6 @@
-import { runPostUpdateExtensionSync } from "../extensions/update.js";
 import "./update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "./update-check.js";
+import { runPostUpdateExtensionSync } from "../extensions/update.js";
 import { readPackageName, readPackageVersion } from "./package-json.js";
 import { createDefaultCommandRunner, runCommandWithTimeout } from "./run-command.js";
 import { XOPC_PACKAGE_NAME, cleanupGlobalRenameDirs, createGlobalInstallEnv, detectGlobalInstallManagerForRoot, resolveGlobalInstallSpec, resolveGlobalInstallTarget } from "./update-global.js";

package/dist/src/providers/model-catalog-persistence.js

@@ -62,6 +62,10 @@ var init_model_catalog_persistence = __esmMin((() => {
 	catalogModelSchema = z.object({
 		id: z.string().min(1),
 		name: z.string().min(1),
+		displayNames: z.object({
+			"zh-CN": z.string().min(1).optional(),
+			en: z.string().min(1).optional()
+		}).strict().optional(),
 		availability: z.enum(["available", "unavailable"]),
 		kind: z.enum([
 			"language",

package/dist/src/providers/model-catalog-types.d.ts

@@ -1,6 +1,7 @@
 export interface CatalogModel {
     id: string;
     name: string;
+    displayNames?: Partial<Record<'zh-CN' | 'en', string>>;
     availability: 'available' | 'unavailable';
     kind: 'language' | 'image' | 'stt' | 'tts';
     input: Array<'text' | 'image' | 'audio'>;

package/dist/src/providers/xopc-cloud-model-source.js

@@ -52,7 +52,8 @@ var XopcCloudModelSource = class {
 			const tts = kind === "tts" ? parseTtsCapabilities(model.xopc?.capabilities, model.xopc?.defaultVoice) : void 0;
 			const catalogModel = {
 				id: model.id,
-				name: model.id,
+				name: typeof model.xopc?.displayName === "string" && model.xopc.displayName.trim() ? model.xopc.displayName.trim() : model.id,
+				...parseDisplayNames(model.xopc?.displayNames),
 				kind,
 				input,
 				output,
@@ -180,5 +181,15 @@ function parseImageGenerationCapabilities(value) {
 		maxInputImages: Number.isSafeInteger(raw.maxInputImages) && Number(raw.maxInputImages) > 0 ? Number(raw.maxInputImages) : 0
 	};
 }
+function parseDisplayNames(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+	const raw = value;
+	const displayNames = {};
+	for (const locale of ["zh-CN", "en"]) {
+		const name = raw[locale];
+		if (typeof name === "string" && name.trim()) displayNames[locale] = name.trim();
+	}
+	return Object.keys(displayNames).length ? { displayNames } : {};
+}
 //#endregion
 export { XopcCloudModelError, XopcCloudModelSource };