@xopcai/xopc 0.0.415 → 0.0.417

package/dist/src/agent/tools/xopc-use-tool.d.ts

@@ -9,12 +9,12 @@ import type { LocalAppService } from '../../local-apps/index.js';
 import type { ChatPreviewService } from '../../chat-previews/index.js';
 import { TaskApplicationService } from '../../tasks/task-application-service.js';
 declare const XopcUseToolSchema: import("@sinclair/typebox").TObject<{
-    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"context">, import("@sinclair/typebox").TLiteral<"project">, import("@sinclair/typebox").TLiteral<"automation">, import("@sinclair/typebox").TLiteral<"note">, import("@sinclair/typebox").TLiteral<"task">, import("@sinclair/typebox").TLiteral<"task_run">, import("@sinclair/typebox").TLiteral<"local_app">, import("@sinclair/typebox").TLiteral<"chat_preview">, import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"settings">]>;
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"context">, import("@sinclair/typebox").TLiteral<"project">, import("@sinclair/typebox").TLiteral<"automation">, import("@sinclair/typebox").TLiteral<"note">, import("@sinclair/typebox").TLiteral<"task">, import("@sinclair/typebox").TLiteral<"task_run">, import("@sinclair/typebox").TLiteral<"local_app">, import("@sinclair/typebox").TLiteral<"chat_preview">, import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"settings">, import("@sinclair/typebox").TLiteral<"browser_setup">, import("@sinclair/typebox").TLiteral<"phone_setup">]>;
     command: import("@sinclair/typebox").TString;
     args: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TAny>>;
     dryRun: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>;
-export type XopcUseMode = 'context' | 'project' | 'automation' | 'note' | 'task' | 'task_run' | 'chat_preview' | 'local_app' | 'agent' | 'settings';
+export type XopcUseMode = 'context' | 'project' | 'automation' | 'note' | 'task' | 'task_run' | 'chat_preview' | 'local_app' | 'agent' | 'settings' | 'browser_setup' | 'phone_setup';
 export interface XopcUseToolInput {
     mode: XopcUseMode;
     command: string;
@@ -22,6 +22,9 @@ export interface XopcUseToolInput {
     dryRun?: boolean;
 }
 export interface XopcUseToolDeps {
+    canConfigureFromConversation?: () => boolean;
+    getPhoneSetupService?: () => import('../../phone/setup/service.js').PhoneSetupService | undefined;
+    getBrowserSetupService?: () => import('../../browser/setup/service.js').BrowserSetupService | undefined;
     authorizeCapability?: CapabilityContext['authorize'];
     getWorkspace?: () => string;
     getConfig?: () => Config | undefined;

package/dist/src/agent/tools/xopc-use-tool.js

@@ -9,15 +9,16 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository } from "../../tasks/task-repository.js";
 import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import "../../storage/sqlite/index.js";
 import "../../activity/index.js";
-import { CapabilityError } from "../../capabilities/runtime/errors.js";
-import "../../capabilities/runtime/dispatcher.js";
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { hasUnlocalizedTaskText, resolveTaskLocale } from "../../tasks/task-language.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { TaskOriginRepository } from "../../tasks/task-origin-repository.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { getEmbeddedExecutionRunId } from "../embedded/execution-context.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import "../../capabilities/runtime/dispatcher.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
 import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";
@@ -37,7 +38,6 @@ import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/xopc-use-tool.ts
 init_src();
 init_resolve_route();
-init_sqlite();
 init_transaction();
 const XopcUseToolSchema = Type.Object({
 	mode: Type.Union([
@@ -50,7 +50,9 @@ const XopcUseToolSchema = Type.Object({
 		Type.Literal("local_app"),
 		Type.Literal("chat_preview"),
 		Type.Literal("agent"),
-		Type.Literal("settings")
+		Type.Literal("settings"),
+		Type.Literal("browser_setup"),
+		Type.Literal("phone_setup")
 	]),
 	command: Type.String({ description: "Context resolve takes an explicit AppContextEnvelope; never guess a current page. Automation draft/repair_draft accept prompt/id, agentId?, language?, idempotencyKey?; simulate explains an automation without running it. Local_app record_acceptance records supplied checks and sourceHash, not proof that checks were executed. Agent profile-only changes: patch_profile {id, expectedRevision, patch:{name?,description?,style?,language?,...}, idempotencyKey?} preserves omitted fields. Agent commands: list, get {id}, create {id, profile, workspace?, models?, skills?, tools?, runtime?, idempotencyKey?}, update {id, expectedRevision, patch, idempotencyKey?}, set_default {id, expectedRevision, idempotencyKey?}, disable/delete/purge {id, expectedRevision, idempotencyKey?}. Purge also removes on-disk data. Project create accepts idempotencyKey; update/pin/unpin/delete accepts {projectId, expectedVersion?, idempotencyKey?}; stable retries require the original expectedVersion. Delete preserves workspace files and does not confirm external execution stopped. Project milestone writes support idempotencyKey; update_milestone/delete_milestone require original expectedRevision for stable retries, and create_update requires original expectedVersion. TaskRun cancel accepts idempotencyKey and expectedVersion, and does not confirm external execution stopped. Automation diagnostics: get_run/run_events {runId}, metrics {}, events {eventType?, source?, limit?}, deliveries {runId?, limit?}, product_events {eventType, source?, payloadKey?, payloadValue?, limit?}; payload filters require both key and value. Recovery commands: replay_event {eventId, reason, idempotencyKey}, retry_delivery {runId, destinationKey, reason, idempotencyKey}. Automation also supports cancel/read {runId, idempotencyKey?} and read_all {projectId?, idempotencyKey?}; omitted projectId means all projects. Cancel acceptance is not confirmation of stopping. Object command. Supports project list/get/create/update/resolve_workspace/list_milestones/create_milestone/update_milestone/list_updates/create_update, automation list/get/create/update/delete/run/rerun/pause/resume/history (rerun takes runId; run/rerun accept idempotencyKey), note list/get/project_summaries/history {noteId}/snapshot {noteId, timestamp}/create/append/update/preview_edit/delete, task list/get/create/update_dependencies/add_context/remove_context/command/delete, task_run list/get/cancel, chat_preview create/revise/get, local_app list/get/create/validate, and settings open." }),
 	args: Type.Optional(Type.Record(Type.String(), Type.Any())),
@@ -1915,7 +1917,7 @@ function createXopcUseTool(deps) {
 	return {
 		name: "xopc_use",
 		label: "XOPC Use",
-		description: "Operate first-class xopc objects through one safe entry point. To delegate work for immediate execution: mode task, command create, args {title:\"Short task name\", objective:\"One-sentence outcome\", body:\"Full Markdown task brief\", createMode:\"start\", agentId:\"researcher\"}; omitting createMode creates a backlog task only. To start an existing Task: mode task, command command, args {taskId, type:\"start\", expectedVersion, commandArgs:{executor:{kind:\"agent\",agentId:\"main\"}}}. Inspect an existing Task and its run before creating another Task for the same objective. For delegated work, task delegated_tasks lists this conversation's tasks; task collaboration reads the shared board; task collaboration_post writes {taskId, kind, body, causationId?, idempotencyKey?}. Workers report progress or questions; the main Agent writes instructions and answers. Use chat_preview for lightweight UI mockups in the current conversation; do not create a Local App unless the user asks for a durable app. Local App capabilities takes extensionId and discovers already granted bindings. Local App invoke requires extensionId, the discovered manifestDigest, capabilityId and a pinned call {majorVersion, descriptorDigest, input, idempotencyKey for writes}. Never manufacture grants or change a retry key after an uncertain write. Use for Agents, projects, automations, notes, tasks, TaskRuns, chat previews, local apps, and exact settings jump targets instead of editing storage files directly. For non-trivial object changes, load the built-in manual first with tool_manual({ tool: \"xopc_use\" }).",
+		description: "Use mode browser_setup for inspect/preview/start/get/advance/recheck/request_interaction/begin_verification/verification_report/cancel of local Chrome setup. Load configure-xopc for guided setup; writes require product-owner approval. Operate first-class xopc objects through one safe entry point. To delegate work for immediate execution: mode task, command create, args {title:\"Short task name\", objective:\"One-sentence outcome\", body:\"Full Markdown task brief\", createMode:\"start\", agentId:\"researcher\"}; omitting createMode creates a backlog task only. To start an existing Task: mode task, command command, args {taskId, type:\"start\", expectedVersion, commandArgs:{executor:{kind:\"agent\",agentId:\"main\"}}}. Inspect an existing Task and its run before creating another Task for the same objective. For delegated work, task delegated_tasks lists this conversation's tasks; task collaboration reads the shared board; task collaboration_post writes {taskId, kind, body, causationId?, idempotencyKey?}. Workers report progress or questions; the main Agent writes instructions and answers. Use chat_preview for lightweight UI mockups in the current conversation; do not create a Local App unless the user asks for a durable app. Local App capabilities takes extensionId and discovers already granted bindings. Local App invoke requires extensionId, the discovered manifestDigest, capabilityId and a pinned call {majorVersion, descriptorDigest, input, idempotencyKey for writes}. Never manufacture grants or change a retry key after an uncertain write. Use for Agents, projects, automations, notes, tasks, TaskRuns, chat previews, local apps, and exact settings jump targets instead of editing storage files directly. For non-trivial object changes, load the built-in manual first with tool_manual({ tool: \"xopc_use\" }).",
 		parameters: XopcUseToolSchema,
 		mutatesWorkspace: true,
 		mutationScope: "external",
@@ -1932,6 +1934,45 @@ function createXopcUseTool(deps) {
 				dryRun
 			};
 			if (!command) return errorText("command is required", details);
+			if (mode === "phone_setup") {
+				const service = deps.getPhoneSetupService?.();
+				const conversationId = deps.getCurrentConversationId?.();
+				const agentId = deps.getCurrentAgentId?.();
+				if (!service || !conversationId || !agentId) return errorText("Phone setup requires a Gateway conversation. Open Settings → Phone Use.", details);
+				if (deps.authorizeCapability && !await deps.authorizeCapability(`xopc.phone_setup.${command}`, args)) return errorText("Phone setup access denied", details);
+				try {
+					return okText({
+						...details,
+						result: await service.command(command, args, {
+							conversationId,
+							agentId,
+							canConfigure: deps.canConfigureFromConversation?.() === true,
+							runId: getEmbeddedExecutionRunId()
+						}, dryRun)
+					});
+				} catch (error) {
+					return errorText(error instanceof Error ? error.message : String(error), details);
+				}
+			}
+			if (mode === "browser_setup") {
+				const service = deps.getBrowserSetupService?.();
+				const conversationId = deps.getCurrentConversationId?.();
+				const agentId = deps.getCurrentAgentId?.();
+				if (!service || !conversationId || !agentId) return errorText("Browser setup requires a Gateway conversation. Open Settings → Browser.", details);
+				if (deps.authorizeCapability && !await deps.authorizeCapability(`xopc.browser_setup.${command}`, args)) return errorText("Browser setup access denied", details);
+				try {
+					return okText({
+						...details,
+						result: await service.command(command, args, {
+							conversationId,
+							agentId,
+							canConfigure: deps.canConfigureFromConversation?.() === true
+						}, dryRun)
+					});
+				} catch (error) {
+					return errorText(error instanceof Error ? error.message : String(error), details);
+				}
+			}
 			if (mode === "local_app" && (command === "capabilities" || command === "invoke")) {
 				const apps = deps.getLocalAppService?.();
 				if (!apps) return errorText("Local app service is unavailable", details);

package/dist/src/agent-catalog/capabilities.js

@@ -1,10 +1,10 @@
 import { AgentEntrySchema, AgentProfileSchema, EffectiveAgentConfigSchema } from "../agent-config/schema.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
-import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
 import { AgentCatalogRepository, init_repository } from "./repository.js";
 import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
+import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
 import { AgentCatalogService } from "./service.js";
 import { z } from "zod";
 //#region src/agent-catalog/capabilities.ts

package/dist/src/agent-catalog/repository.js

@@ -1,9 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getSqliteDatabase, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { DEFAULT_AGENT_ID, init_id, normalizeAgentId } from "./id.js";
 import { AgentDefaultsSchema, AgentEntrySchema, DEFAULT_AGENT_MODEL_REF, DEFAULT_SKILL_POLICY } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { DEFAULT_AGENT_ID, init_id, normalizeAgentId } from "./id.js";
 import { BindingsSchema, init_binding_schema } from "../routing/binding-schema.js";
 import { randomUUID } from "node:crypto";
 //#region src/agent-catalog/repository.ts
@@ -63,7 +62,7 @@ var init_repository = __esmMin((() => {
 	init_agent_config();
 	init_id();
 	init_binding_schema();
-	init_sqlite();
+	init_transaction();
 	DEFAULT_AGENT_DEFAULTS = AgentDefaultsSchema.parse({
 		models: {
 			chat: {

package/dist/src/agent-catalog/test-support.js

@@ -1,8 +1,7 @@
 import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import "../storage/sqlite/index.js";
 import { AgentCatalogRepository, init_repository } from "./repository.js";
 //#region src/agent-catalog/test-support.ts
-init_sqlite();
 init_repository();
 /** Build an isolated, ready in-memory Agent catalog for a unit test. */
 function initializeTestAgentCatalog(seed = {}) {

package/dist/src/agent-matching/selection-repository.js

@@ -2,11 +2,10 @@ import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transacti
 import { init_session_instance_repository, readCurrentTranscriptId } from "../storage/sqlite/session-instance-repository.js";
 import { getSessionInputState, init_session_input_repository } from "../storage/sqlite/session-input-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import "../storage/sqlite/index.js";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/agent-matching/selection-repository.ts
 init_transaction();
-init_sqlite();
 init_session_input_repository();
 init_session_instance_repository();
 function decode(row) {

package/dist/src/automations/capabilities/drafts.js

@@ -1,12 +1,12 @@
 import { AutomationDraftOutputSchema, AutomationDraftRequestSchema, AutomationRepairDraftOutputSchema, AutomationSimulationSchema } from "../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
-import { init_trust_policy, resolveAutomationSafetyForTrust } from "../../user-context/trust-policy.js";
+import { resolveAutomationSafetyForTrust } from "../../user-context/trust-policy.js";
 import { getUserTrustPolicy } from "../../storage/sqlite/user-trust-repository.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import "../../storage/sqlite/index.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError } from "../../capabilities/runtime/external-operations.js";
 import { defineExternalCapability, defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { AutomationCreateCapabilityInputSchema } from "./write.js";
 import { simulateAutomation } from "../draft/automation-draft-validator.js";
 import { AutomationDraftService } from "../draft/automation-draft-service.js";
@@ -15,8 +15,6 @@ import { z } from "zod";
 //#region src/automations/capabilities/drafts.ts
 init_src();
 init_agent_scope();
-init_sqlite();
-init_trust_policy();
 function registerAutomationDraftCapabilities(dispatcher, service, getConfig) {
 	const policy = {
 		majorVersion: 1,

package/dist/src/bootstrap/application-state.js

@@ -1,11 +1,10 @@
 import { requireXopcDatabase } from "../storage/sqlite/connection.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import "../storage/sqlite/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
 //#region src/bootstrap/application-state.ts
 init_repository();
-init_sqlite();
 /** Initialize current application state without importing retired configuration. */
 function bootstrapApplicationStateSync() {
 	requireXopcDatabase();

package/dist/src/browser/automations/repository.js

@@ -1,7 +1,6 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import "../../storage/sqlite/index.js";
 //#region src/browser/automations/repository.ts
-init_sqlite();
 const AUTOMATION_SELECT = "SELECT a.*, EXISTS(SELECT 1 FROM browser_automation_verifications v WHERE v.automation_id=a.automation_id AND v.revision=a.revision) AS verified FROM browser_automations a";
 const RUN_SELECT = "SELECT client_request_id, business_outcome, run_id, automation_id, automation_revision, definition_json, status, inputs_json, result_json, error, created_at_ms, started_at_ms, ended_at_ms, duration_ms FROM browser_automation_runs";
 const parseAutomation = (row) => ({

package/dist/src/browser/drivers/browser-driver.d.ts

@@ -1,4 +1,4 @@
-import type { BrowserActionInput, BrowserControlResult, BrowserNavigateInput, BrowserObservation, BrowserObserveInput, BrowserTabsInput } from '@xopcai/browser-control-contract';
+import type { BrowserActionInput, BrowserControlResult, BrowserNavigateInput, BrowserObservation, BrowserObserveInput, BrowserTabsInput, BrowserTarget } from '@xopcai/browser-control-contract';
 export type BrowserPrimitiveInput = Exclude<BrowserActionInput, BrowserNavigateInput | BrowserObserveInput | BrowserTabsInput | {
     action: 'sequence';
 } | {
@@ -9,7 +9,7 @@ export interface BrowserDriver {
     connect(): Promise<void>;
     disconnect(): Promise<void>;
     createSession(sessionId: string): Promise<void>;
-    closeSession(sessionId: string): Promise<void>;
+    closeSession(sessionId: string, target?: BrowserTarget): Promise<void>;
     navigate(sessionId: string, input: BrowserNavigateInput, signal?: AbortSignal): Promise<BrowserControlResult>;
     observe(sessionId: string, input: BrowserObserveInput, signal?: AbortSignal): Promise<BrowserObservation>;
     perform(sessionId: string, input: BrowserPrimitiveInput, signal?: AbortSignal): Promise<BrowserControlResult>;

package/dist/src/browser/drivers/extension-driver.d.ts

@@ -1,4 +1,4 @@
-import type { BrowserControlResult, BrowserNavigateInput, BrowserObservation, BrowserObserveInput, BrowserTabsInput } from '@xopcai/browser-control-contract';
+import type { BrowserControlResult, BrowserNavigateInput, BrowserObservation, BrowserObserveInput, BrowserTabsInput, BrowserTarget } from '@xopcai/browser-control-contract';
 import type { BrowserDriver, BrowserPrimitiveInput } from './browser-driver.js';
 type ExtensionProvider = {
     start(): Promise<void>;
@@ -15,7 +15,7 @@ export declare class ExtensionDriver implements BrowserDriver {
     connect(): Promise<void>;
     disconnect(): Promise<void>;
     createSession(_sessionId: string): Promise<void>;
-    closeSession(sessionId: string): Promise<void>;
+    closeSession(sessionId: string, target?: BrowserTarget): Promise<void>;
     navigate(sessionId: string, input: BrowserNavigateInput, signal?: AbortSignal): Promise<BrowserControlResult>;
     observe(sessionId: string, input: BrowserObserveInput, signal?: AbortSignal): Promise<BrowserObservation>;
     perform(sessionId: string, input: BrowserPrimitiveInput, signal?: AbortSignal): Promise<BrowserControlResult>;

package/dist/src/browser/drivers/extension-driver.js

@@ -17,11 +17,14 @@ var ExtensionDriver = class {
 	async createSession(_sessionId) {
 		await this.connect();
 	}
-	async closeSession(sessionId) {
-		await this.send({
+	async closeSession(sessionId, target) {
+		const result = await this.send({
 			action: "close",
-			sessionId
+			sessionId,
+			...target ? { target } : {}
 		});
+		if ("error" in result) throw new Error(result.error.message);
+		if (!result.receipt.verified) throw new Error("Browser control release was not verified");
 	}
 	navigate(sessionId, input, signal) {
 		return this.send({

package/dist/src/browser/native-messaging-host.js

@@ -1,8 +1,8 @@
 import { closeXopcDatabase, init_connection, openXopcDatabase } from "../storage/sqlite/connection.js";
 import { browserPairingInvitationPayloadSchema, formatBrowserPairingInvitation } from "../../packages/gateway-contract/src/device-pairing.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity, init_gateway_identity_repository } from "../storage/sqlite/gateway-identity-repository.js";
-import { createDevicePairingSetup, init_device_pairing_repository } from "../storage/sqlite/device-pairing-repository.js";
+import { getGatewayIdentityPublicKeyRaw, getOrCreateGatewayIdentity } from "../storage/sqlite/gateway-identity-repository.js";
+import { createDevicePairingSetup } from "../storage/sqlite/device-pairing-repository.js";
 import { loadConfig } from "../config/loader.js";
 import { browserEnrollmentPublicKeyThumbprint } from "./enrollment.js";
 import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "./extension-identity.js";
@@ -10,8 +10,6 @@ import os from "node:os";
 //#region src/browser/native-messaging-host.ts
 init_src();
 init_connection();
-init_device_pairing_repository();
-init_gateway_identity_repository();
 function gatewayLoopbackUrl(port) {
 	return `http://127.0.0.1:${port}`;
 }

package/dist/src/browser/providers/browser-ext-install.js

@@ -9,12 +9,12 @@ import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "../extension-ide
 import "../native-messaging-host.js";
 import { resolvePackageRoot } from "../../infra/update-check.js";
 import { dirname, join } from "node:path";
-import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { accessSync, chmodSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { createHash } from "node:crypto";
 import { execFileSync, spawn } from "node:child_process";
-import { readFile, readdir, rm } from "node:fs/promises";
 import AdmZip from "adm-zip";
+import { readFile, readdir, rm } from "node:fs/promises";
 //#region src/browser/providers/browser-ext-install.ts
 /**
 * Install bundled Chrome extension artifacts into {resolveBinDir()}/browser-ext/.
@@ -384,6 +384,7 @@ function browserNativeHostDoctor(platform = process.platform, home = process.env
 	const manifestPaths = (platform === "win32" ? windowsRegisteredNativeManifests() : directories.map((directory) => join(directory, `${BROWSER_NATIVE_HOST_NAME}.json`))).filter((manifestPath) => {
 		try {
 			const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+			if (typeof manifest.path === "string" && platform !== "win32") accessSync(manifest.path, constants.X_OK);
 			return manifest.name === "ai.xopc.browser" && typeof manifest.path === "string" && existsSync(manifest.path) && Array.isArray(manifest.allowed_origins) && manifest.allowed_origins.includes(`chrome-extension://gopbfhaojnnhiheiikblejnpgmfmkmgd/`);
 		} catch {
 			return false;

package/dist/src/browser/providers/realtime-extension.js

@@ -1,8 +1,7 @@
-import { getBrowserTabBindingById, init_browser_tab_binding_repository } from "../../storage/sqlite/browser-tab-binding-repository.js";
+import { getBrowserTabBindingById } from "../../storage/sqlite/browser-tab-binding-repository.js";
 import { BROWSER_CONTROL_ENDPOINT_TOOL_NAME } from "../../../packages/browser-control-contract/src/index.js";
 import crypto from "node:crypto";
 //#region src/browser/providers/realtime-extension.ts
-init_browser_tab_binding_repository();
 var RealtimeExtensionBrowserProvider = class {
 	name = "extension";
 	connectionTimeout;

package/dist/src/browser/recordings/service.js

@@ -1,8 +1,7 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import "../../storage/sqlite/index.js";
 import { z } from "zod";
 //#region src/browser/recordings/service.ts
-init_sqlite();
 const Target = z.object({
 	role: z.string().min(1),
 	name: z.string().max(240).optional(),

package/dist/src/browser/runtime/browser-runtime.d.ts

@@ -5,6 +5,8 @@ export interface BrowserRuntimeOptions {
     getConfig: () => Config['browser'];
     createDriver: () => Promise<BrowserDriver>;
     allowedUploadRoots?: string[];
+    canRestoreSetupSession?: (taskKey: string, sessionId: string) => boolean;
+    isTrustedSetupUrl?: (taskKey: string, url: string) => boolean;
     emit?: (type: string, payload: unknown) => void;
     resolveTarget?: (taskKey: string) => BrowserTarget | undefined;
 }
@@ -14,8 +16,9 @@ export declare class BrowserRuntime {
     private sessionsByTask;
     constructor(options: BrowserRuntimeOptions);
     execute(taskKey: string, input: BrowserActionInput, signal?: AbortSignal): Promise<BrowserControlResult>;
+    hasSessions(): boolean;
     shutdown(): Promise<void>;
-    closeTaskSession(taskKey: string): Promise<void>;
+    closeTaskSession(taskKey: string, target?: BrowserTarget): Promise<void>;
     private dispatch;
     private executeSequence;
     private actionDenied;

package/dist/src/browser/runtime/browser-runtime.js

@@ -11,7 +11,7 @@ var BrowserRuntime = class {
 	}
 	async execute(taskKey, input, signal) {
 		this.evictExpiredSessions();
-		if (!this.options.getConfig().enabled) return failure("DRIVER_UNAVAILABLE", "Browser Control is disabled.");
+		if (!this.options.getConfig().enabled && input.action !== "close") return failure("DRIVER_UNAVAILABLE", "Browser Control is disabled.");
 		if (signal?.aborted) return failure("ABORTED", "Operation was aborted.");
 		const resolvedTarget = input.target ? void 0 : this.options.resolveTarget?.(taskKey);
 		const effectiveInput = input.target || !resolvedTarget ? input : {
@@ -55,21 +55,24 @@ var BrowserRuntime = class {
 		}
 		return result;
 	}
+	hasSessions() {
+		return this.sessionsByTask.size > 0;
+	}
 	async shutdown() {
 		await this.driver?.disconnect();
 		this.driver = null;
 		this.sessionsByTask.clear();
 	}
-	async closeTaskSession(taskKey) {
+	async closeTaskSession(taskKey, target) {
 		const session = this.sessionsByTask.get(taskKey);
 		if (!session) return;
-		await this.driver?.closeSession(session.id);
+		await this.driver?.closeSession(session.id, target);
 		this.sessionsByTask.delete(taskKey);
 		this.options.emit?.("browser.session.closed", { sessionId: session.id });
 	}
 	async dispatch(driver, session, input, signal) {
 		if (input.action === "close") {
-			await this.closeTaskSession(session.taskKey);
+			await this.closeTaskSession(session.taskKey, input.target);
 			return {
 				ok: true,
 				receipt: {
@@ -91,22 +94,22 @@ var BrowserRuntime = class {
 			}
 		};
 		if (input.action === "navigate") {
-			const blocked = this.validateUrl(input.url);
+			const blocked = this.validateUrl(input.url, session.taskKey);
 			if (blocked) return failure("BLOCKED_URL", blocked);
 			if (this.crossDomainPolicy(session.observation?.url, input.url) === "deny") return failure("BLOCKED_URL", "Cross-domain navigation is denied by policy.");
 			const result = await driver.navigate(session.id, input, signal);
-			return this.validateRedirect(input.url, result);
+			return this.validateRedirect(input.url, result, session.taskKey);
 		}
 		if (input.action === "tabs") {
 			if (input.url) {
-				const blocked = this.validateUrl(input.url);
+				const blocked = this.validateUrl(input.url, session.taskKey);
 				if (blocked) return failure("BLOCKED_URL", blocked);
 				if (this.crossDomainPolicy(session.observation?.url, input.url) === "deny") return failure("BLOCKED_URL", "Cross-domain navigation is denied by policy.");
 			}
 			const result = await driver.tabs(session.id, input, signal);
 			if (!input.url || !result.ok) return result;
 			const finalUrl = result.receipt.tabs?.find((tab) => tab.active)?.url;
-			const blocked = finalUrl ? this.blockedRedirect(finalUrl) : "The created tab did not report its final URL.";
+			const blocked = finalUrl ? this.blockedRedirect(finalUrl, session.taskKey) : "The created tab did not report its final URL.";
 			return blocked ? failure("BLOCKED_URL", blocked) : result;
 		}
 		if (input.action === "sequence") return this.executeSequence(driver, session, input, signal);
@@ -119,12 +122,12 @@ var BrowserRuntime = class {
 		}
 		if (this.actionDenied(input, risk)) return failure("INVALID_INPUT", `Browser action is denied by policy (${risk}).`);
 		if (input.action === "click" && target?.href) {
-			const blocked = this.validateUrl(target.href);
+			const blocked = this.validateUrl(target.href, session.taskKey);
 			if (blocked) return failure("BLOCKED_URL", blocked);
 			if (this.crossDomainPolicy(session.observation?.url, target.href) === "deny") return failure("BLOCKED_URL", "Cross-domain navigation is denied by policy.");
 		}
 		const result = await driver.perform(session.id, input, signal);
-		return withRisk(this.validateRedirect(session.observation?.url ?? "", result), risk);
+		return withRisk(this.validateRedirect(session.observation?.url ?? "", result, session.taskKey), risk);
 	}
 	async executeSequence(driver, session, input, signal) {
 		const config = this.options.getConfig();
@@ -171,27 +174,27 @@ var BrowserRuntime = class {
 			"sensitive"
 		].includes(risk);
 	}
-	validateUrl(url) {
+	validateUrl(url, taskKey) {
 		if (containsApiKeyPattern(url)) return "URL contains a credential-like value.";
 		try {
 			const host = new URL(url).hostname.toLowerCase();
-			assertBrowserUrlAllowed(url, { privateHostAllowed: this.options.getConfig().security.allowedPrivateHosts.some((candidate) => candidate.toLowerCase() === host) });
+			assertBrowserUrlAllowed(url, { privateHostAllowed: this.options.getConfig().security.allowedPrivateHosts.some((candidate) => candidate.toLowerCase() === host) || this.options.isTrustedSetupUrl?.(taskKey, url) === true });
 			return null;
 		} catch (error) {
 			return error instanceof Error ? error.message : String(error);
 		}
 	}
-	validateRedirect(requestedUrl, result) {
+	validateRedirect(requestedUrl, result, taskKey) {
 		if (!result.ok || !result.receipt.observation) return result;
 		const finalUrl = result.receipt.observation.url;
 		if (finalUrl === requestedUrl) return result;
-		const blocked = this.blockedRedirect(finalUrl);
+		const blocked = this.blockedRedirect(finalUrl, taskKey);
 		return blocked ? failure("BLOCKED_URL", blocked, result.receipt.observation) : result;
 	}
-	blockedRedirect(finalUrl) {
+	blockedRedirect(finalUrl, taskKey) {
 		try {
 			const host = new URL(finalUrl).hostname.toLowerCase();
-			return checkPostRedirectUrl(finalUrl, { privateHostAllowed: this.options.getConfig().security.allowedPrivateHosts.some((candidate) => candidate.toLowerCase() === host) });
+			return checkPostRedirectUrl(finalUrl, { privateHostAllowed: this.options.getConfig().security.allowedPrivateHosts.some((candidate) => candidate.toLowerCase() === host) || this.options.isTrustedSetupUrl?.(taskKey, finalUrl) === true });
 		} catch {
 			return "Browser returned an invalid final URL.";
 		}
@@ -222,7 +225,16 @@ var BrowserRuntime = class {
 	async resolveSession(taskKey, requestedId) {
 		const existing = this.sessionsByTask.get(taskKey);
 		if (existing) return !requestedId || requestedId === existing.id ? existing : null;
-		if (requestedId) return null;
+		if (requestedId) {
+			if (!this.options.canRestoreSetupSession?.(taskKey, requestedId)) return null;
+			const restored = {
+				id: requestedId,
+				taskKey,
+				lastUsedAt: Date.now()
+			};
+			this.sessionsByTask.set(taskKey, restored);
+			return restored;
+		}
 		const session = {
 			id: randomUUID(),
 			taskKey,

package/dist/src/browser/setup/repository.d.ts

@@ -0,0 +1,5 @@
+import type { BrowserSetup } from './types.js';
+export declare function readBrowserSetup(id: string): BrowserSetup | undefined;
+export declare function findBrowserSetup(conversationId: string, agentId: string): BrowserSetup | undefined;
+export declare function createBrowserSetup(conversationId: string, agentId: string, configRevision: string): BrowserSetup;
+export declare function saveBrowserSetup(next: BrowserSetup, expectedRevision: number): BrowserSetup;

package/dist/src/browser/setup/repository.js

@@ -0,0 +1,42 @@
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { randomUUID } from "node:crypto";
+//#region src/browser/setup/repository.ts
+init_transaction();
+function readBrowserSetup(id) {
+	const row = getSqliteDatabase().prepare("SELECT payload_json FROM browser_setup_runs WHERE id = ?").get(id);
+	return row ? JSON.parse(row.payload_json) : void 0;
+}
+function findBrowserSetup(conversationId, agentId) {
+	const row = getSqliteDatabase().prepare("SELECT payload_json FROM browser_setup_runs WHERE conversation_id = ? AND agent_id = ? ORDER BY updated_at DESC, rowid DESC LIMIT 1").get(conversationId, agentId);
+	return row ? JSON.parse(row.payload_json) : void 0;
+}
+function createBrowserSetup(conversationId, agentId, configRevision) {
+	return runSqliteWriteTransaction((db) => {
+		const existing = findBrowserSetup(conversationId, agentId);
+		if (existing && existing.state !== "cancelled" && existing.state !== "completed") return existing;
+		const now = Date.now();
+		const setup = {
+			id: randomUUID(),
+			conversationId,
+			agentId,
+			configRevision,
+			state: "plan_ready",
+			revision: 1,
+			createdAt: now,
+			updatedAt: now
+		};
+		db.prepare("INSERT INTO browser_setup_runs (id, conversation_id, agent_id, revision, updated_at, payload_json) VALUES (?, ?, ?, ?, ?, ?)").run(setup.id, conversationId, agentId, setup.revision, now, JSON.stringify(setup));
+		return setup;
+	});
+}
+function saveBrowserSetup(next, expectedRevision) {
+	next = {
+		...next,
+		revision: expectedRevision + 1,
+		updatedAt: Date.now()
+	};
+	if (getSqliteDatabase().prepare("UPDATE browser_setup_runs SET revision = ?, updated_at = ?, payload_json = ? WHERE id = ? AND revision = ?").run(next.revision, next.updatedAt, JSON.stringify(next), next.id, expectedRevision).changes !== 1) throw new Error("SETUP_CONFLICT: Configuration progress changed. Read it again.");
+	return next;
+}
+//#endregion
+export { createBrowserSetup, findBrowserSetup, readBrowserSetup, saveBrowserSetup };