agiagent-dev 2026.1.32 → 2026.1.35

package/dist/agents/bash-tools.exec.js

@@ -768,12 +768,16 @@ export function createExecTool(defaults) {
                         // Fall back to requiring approval if node approvals cannot be fetched.
                     }
                 }
-                const requiresAsk = requiresExecApproval({
-                    ask: hostAsk,
-                    security: hostSecurity,
-                    analysisOk,
-                    allowlistSatisfied,
-                });
+                // In hosted mode, skip approval entirely - commands are pre-authorized by the gateway
+                const hostedAutoApprove = process.env.AGIAGENT_HOSTED_MODE === "1";
+                const requiresAsk = hostedAutoApprove
+                    ? false
+                    : requiresExecApproval({
+                        ask: hostAsk,
+                        security: hostSecurity,
+                        analysisOk,
+                        allowlistSatisfied,
+                    });
                 const commandText = params.command;
                 const invokeTimeoutMs = Math.max(10_000, (typeof params.timeout === "number" ? params.timeout : defaultTimeoutSec) * 1000 + 5_000);
                 const buildInvokeParams = (approvedByAsk, approvalDecision, runId) => ({
@@ -782,7 +786,9 @@ export function createExecTool(defaults) {
                     params: {
                         command: argv,
                         rawCommand: params.command,
-                        cwd: workdir,
+                        // Don't pass gateway's cwd to remote nodes - use null to let node use its own cwd
+                        // The gateway's cwd (e.g., /app or /data on Fly.io) doesn't exist on user's machine
+                        cwd: params.workdir?.trim() || null,
                         env: nodeEnv,
                         timeoutMs: typeof params.timeout === "number" ? params.timeout * 1000 : undefined,
                         agentId,
@@ -790,6 +796,8 @@ export function createExecTool(defaults) {
                         approved: approvedByAsk,
                         approvalDecision: approvalDecision ?? undefined,
                         runId: runId ?? undefined,
+                        // Tell node to skip macOS app exec host and use direct spawn in hosted mode
+                        hostedMode: process.env.AGIAGENT_HOSTED_MODE === "1" ? true : undefined,
                     },
                     idempotencyKey: crypto.randomUUID(),
                 });
@@ -893,7 +901,8 @@ export function createExecTool(defaults) {
                     };
                 }
                 const startedAt = Date.now();
-                const raw = await callGatewayTool("node.invoke", { timeoutMs: invokeTimeoutMs }, buildInvokeParams(false, null));
+                // In hosted mode, hostedAutoApprove is true, so we send approved=true to the node
+                const raw = await callGatewayTool("node.invoke", { timeoutMs: invokeTimeoutMs }, buildInvokeParams(hostedAutoApprove, hostedAutoApprove ? "allow-once" : null));
                 const payload = raw && typeof raw === "object" ? raw.payload : undefined;
                 const payloadObj = payload && typeof payload === "object" ? payload : {};
                 const stdout = typeof payloadObj.stdout === "string" ? payloadObj.stdout : "";

package/dist/agents/system-prompt.js

@@ -314,6 +314,23 @@ export function buildAgentSystemPrompt(params) {
         "",
         ...skillsSection,
         ...memorySection,
+        // File type guidance for document handling
+        !isMinimal ? "## File Type Guidance" : "",
+        !isMinimal
+            ? [
+                "When working with specific file types, ALWAYS read the corresponding skill BEFORE any editing:",
+                "",
+                "### Word Documents (.docx)",
+                "1. Find the `docx` skill in <available_skills> above",
+                `2. Use \`${readToolName}\` to read the skill's SKILL.md at its <location>`,
+                "3. Follow ALL instructions in that skill - it contains CRITICAL rules",
+                "4. Use python-docx (NOT raw XML/zipfile manipulation)",
+                "5. Count paragraphs/bullets before AND after editing - counts must match unless user requested reduction",
+                "",
+                "NEVER skip reading the skill. NEVER use zipfile+ElementTree for .docx files.",
+            ].join("\n")
+            : "",
+        !isMinimal ? "" : "",
         // Skip self-update for subagent/none modes
         hasGateway && !isMinimal ? "## AGIAgent Self-Update" : "",
         hasGateway && !isMinimal

package/dist/agents/tools/browser-tool.js

@@ -19,19 +19,34 @@ async function resolveBrowserNodeTarget(params) {
     const cfg = loadConfig();
     const policy = cfg.gateway?.nodes?.browser;
     const mode = policy?.mode ?? "auto";
+    // In hosted mode, prefer node browser since there's no local browser on the gateway
+    const isHostedMode = process.env.AGIAGENT_HOSTED_MODE === "1";
     if (mode === "off") {
         if (params.target === "node" || params.requestedNode) {
             throw new Error("Node browser proxy is disabled (gateway.nodes.browser.mode=off).");
         }
-        return null;
+        // In hosted mode, we still need a node even if mode is off (no local browser)
+        if (!isHostedMode) {
+            return null;
+        }
     }
     if (params.sandboxBridgeUrl?.trim() && params.target !== "node" && !params.requestedNode) {
-        return null;
+        // Sandbox browser available, but in hosted mode prefer node if no explicit target
+        if (!isHostedMode) {
+            return null;
+        }
     }
     if (params.target && params.target !== "node") {
-        return null;
+        // Explicit non-node target requested
+        // In hosted mode with target=host, fall through to check for nodes since host won't work
+        if (params.target === "host" && isHostedMode) {
+            // Let it fall through to try node browser
+        }
+        else {
+            return null;
+        }
     }
-    if (mode === "manual" && params.target !== "node" && !params.requestedNode) {
+    if (mode === "manual" && params.target !== "node" && !params.requestedNode && !isHostedMode) {
         return null;
     }
     const nodes = await listNodes({});
@@ -40,6 +55,10 @@ async function resolveBrowserNodeTarget(params) {
         if (params.target === "node" || params.requestedNode) {
             throw new Error("No connected browser-capable nodes.");
         }
+        // In hosted mode, we need a node browser but none available
+        if (isHostedMode) {
+            throw new Error("No connected browser-capable nodes. Connect a device with browser support to use browser features.");
+        }
         return null;
     }
     const requested = params.requestedNode?.trim() || policy?.node?.trim();
@@ -48,7 +67,7 @@ async function resolveBrowserNodeTarget(params) {
         const node = browserNodes.find((entry) => entry.nodeId === nodeId);
         return { nodeId, label: node?.displayName ?? node?.remoteIp ?? nodeId };
     }
-    if (params.target === "node") {
+    if (params.target === "node" || isHostedMode) {
         if (browserNodes.length === 1) {
             const node = browserNodes[0];
             return { nodeId: node.nodeId, label: node.displayName ?? node.remoteIp ?? node.nodeId };
@@ -147,7 +166,7 @@ export function createBrowserTool(opts) {
         label: "Browser",
         name: "browser",
         description: [
-            "Control the browser via AGIAgent's browser control server (status/start/stop/profiles/tabs/open/snapshot/screenshot/actions).",
+            "Control the browser via AGIAgent's browser control server (status/start/stop/profiles/tabs/open/snapshot/screenshot/actions/list_upload_inputs/attach_file).",
             'Profiles: use profile="chrome" for Chrome extension relay takeover (your existing Chrome tabs). Use profile="agiagent" for the isolated agiagent-managed browser.',
             'If the user mentions the Chrome extension / Browser Relay / toolbar button / “attach tab”, ALWAYS use profile="chrome" (do not ask which profile).',
             'When a node-hosted browser proxy is available, the tool may auto-route to it. Pin a node with node=<id|name> or target="node".',
@@ -595,6 +614,44 @@ export function createBrowserTool(opts) {
                         throw err;
                     }
                 }
+                case "list_upload_inputs": {
+                    const targetId = typeof params.targetId === "string" ? params.targetId.trim() : undefined;
+                    if (proxyRequest) {
+                        const result = await proxyRequest({
+                            method: "GET",
+                            path: "/upload-inputs",
+                            profile,
+                            query: { targetId },
+                        });
+                        return jsonResult(result);
+                    }
+                    // Local execution not yet implemented - requires browser control server
+                    throw new Error("list_upload_inputs requires a connected browser node");
+                }
+                case "attach_file": {
+                    const targetId = typeof params.targetId === "string" ? params.targetId.trim() : undefined;
+                    const inputIndex = typeof params.inputIndex === "number" && Number.isFinite(params.inputIndex)
+                        ? params.inputIndex
+                        : undefined;
+                    const filePath = readStringParam(params, "filePath");
+                    if (inputIndex === undefined) {
+                        throw new Error("inputIndex is required");
+                    }
+                    if (!filePath) {
+                        throw new Error("filePath is required");
+                    }
+                    if (proxyRequest) {
+                        const result = await proxyRequest({
+                            method: "POST",
+                            path: "/attach-file",
+                            profile,
+                            body: { targetId, inputIndex, filePath },
+                        });
+                        return jsonResult(result);
+                    }
+                    // Local execution not yet implemented - requires browser control server
+                    throw new Error("attach_file requires a connected browser node");
+                }
                 default:
                     throw new Error(`Unknown action: ${action}`);
             }

package/dist/agents/tools/browser-tool.schema.d.ts

@@ -1,5 +1,5 @@
 export declare const BrowserToolSchema: import("@sinclair/typebox").TObject<{
-    action: import("@sinclair/typebox").TUnsafe<"close" | "status" | "start" | "open" | "navigate" | "profiles" | "upload" | "snapshot" | "stop" | "tabs" | "focus" | "screenshot" | "console" | "pdf" | "dialog" | "act">;
+    action: import("@sinclair/typebox").TUnsafe<"close" | "status" | "start" | "open" | "navigate" | "profiles" | "upload" | "snapshot" | "stop" | "tabs" | "focus" | "screenshot" | "console" | "pdf" | "dialog" | "act" | "list_upload_inputs" | "attach_file">;
     target: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnsafe<"sandbox" | "node" | "host">>;
     node: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     profile: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
@@ -47,4 +47,6 @@ export declare const BrowserToolSchema: import("@sinclair/typebox").TObject<{
         textGone: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         fn: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>>;
+    inputIndex: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+    filePath: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
 }>;

package/dist/agents/tools/browser-tool.schema.js

@@ -30,6 +30,8 @@ const BROWSER_TOOL_ACTIONS = [
     "upload",
     "dialog",
     "act",
+    "list_upload_inputs",
+    "attach_file",
 ];
 const BROWSER_TARGETS = ["sandbox", "host", "node"];
 const BROWSER_SNAPSHOT_FORMATS = ["aria", "ai"];
@@ -102,4 +104,7 @@ export const BrowserToolSchema = Type.Object({
     accept: Type.Optional(Type.Boolean()),
     promptText: Type.Optional(Type.String()),
     request: Type.Optional(BrowserActSchema),
+    // attach_file action
+    inputIndex: Type.Optional(Type.Number()),
+    filePath: Type.Optional(Type.String()),
 });

package/dist/agents/tools/nodes-tool.js

@@ -364,6 +364,8 @@ export function createNodesTool(options) {
                         const needsScreenRecording = typeof params.needsScreenRecording === "boolean"
                             ? params.needsScreenRecording
                             : undefined;
+                        // In hosted mode, auto-approve commands - they're pre-authorized by the gateway
+                        const isHostedMode = process.env.AGIAGENT_HOSTED_MODE === "1";
                         const raw = await callGatewayTool("node.invoke", gatewayOpts, {
                             nodeId,
                             command: "system.run",
@@ -375,6 +377,11 @@ export function createNodesTool(options) {
                                 needsScreenRecording,
                                 agentId,
                                 sessionKey,
+                                // Hosted mode: pass approval flags so node skips its approval check
+                                approved: isHostedMode ? true : undefined,
+                                approvalDecision: isHostedMode ? "allow-once" : undefined,
+                                // Tell node to skip macOS app exec host and use direct spawn
+                                hostedMode: isHostedMode ? true : undefined,
                             },
                             timeoutMs: invokeTimeoutMs,
                             idempotencyKey: crypto.randomUUID(),

package/dist/browser/pw-ai.d.ts

@@ -1,2 +1,3 @@
 export { type BrowserConsoleMessage, closePageByTargetIdViaPlaywright, closePlaywrightBrowserConnection, createPageViaPlaywright, ensurePageState, focusPageByTargetIdViaPlaywright, getPageForTargetId, listPagesViaPlaywright, refLocator, type WithSnapshotForAI, } from "./pw-session.js";
 export { armDialogViaPlaywright, armFileUploadViaPlaywright, clickViaPlaywright, closePageViaPlaywright, cookiesClearViaPlaywright, cookiesGetViaPlaywright, cookiesSetViaPlaywright, downloadViaPlaywright, dragViaPlaywright, emulateMediaViaPlaywright, evaluateViaPlaywright, fillFormViaPlaywright, getConsoleMessagesViaPlaywright, getNetworkRequestsViaPlaywright, getPageErrorsViaPlaywright, highlightViaPlaywright, hoverViaPlaywright, navigateViaPlaywright, pdfViaPlaywright, pressKeyViaPlaywright, resizeViewportViaPlaywright, responseBodyViaPlaywright, scrollIntoViewViaPlaywright, selectOptionViaPlaywright, setDeviceViaPlaywright, setExtraHTTPHeadersViaPlaywright, setGeolocationViaPlaywright, setHttpCredentialsViaPlaywright, setInputFilesViaPlaywright, setLocaleViaPlaywright, setOfflineViaPlaywright, setTimezoneViaPlaywright, snapshotAiViaPlaywright, snapshotAriaViaPlaywright, snapshotRoleViaPlaywright, screenshotWithLabelsViaPlaywright, storageClearViaPlaywright, storageGetViaPlaywright, storageSetViaPlaywright, takeScreenshotViaPlaywright, traceStartViaPlaywright, traceStopViaPlaywright, typeViaPlaywright, waitForDownloadViaPlaywright, waitForViaPlaywright, } from "./pw-tools-core.js";
+export { type FileInputInfo, type ListFileInputsResult, type AttachFileResult, listFileInputsViaPlaywright, attachFileToInputViaPlaywright, isFileTypeAccepted, } from "./pw-tools-core.uploads.js";

package/dist/browser/pw-ai.js

@@ -1,2 +1,3 @@
 export { closePageByTargetIdViaPlaywright, closePlaywrightBrowserConnection, createPageViaPlaywright, ensurePageState, focusPageByTargetIdViaPlaywright, getPageForTargetId, listPagesViaPlaywright, refLocator, } from "./pw-session.js";
 export { armDialogViaPlaywright, armFileUploadViaPlaywright, clickViaPlaywright, closePageViaPlaywright, cookiesClearViaPlaywright, cookiesGetViaPlaywright, cookiesSetViaPlaywright, downloadViaPlaywright, dragViaPlaywright, emulateMediaViaPlaywright, evaluateViaPlaywright, fillFormViaPlaywright, getConsoleMessagesViaPlaywright, getNetworkRequestsViaPlaywright, getPageErrorsViaPlaywright, highlightViaPlaywright, hoverViaPlaywright, navigateViaPlaywright, pdfViaPlaywright, pressKeyViaPlaywright, resizeViewportViaPlaywright, responseBodyViaPlaywright, scrollIntoViewViaPlaywright, selectOptionViaPlaywright, setDeviceViaPlaywright, setExtraHTTPHeadersViaPlaywright, setGeolocationViaPlaywright, setHttpCredentialsViaPlaywright, setInputFilesViaPlaywright, setLocaleViaPlaywright, setOfflineViaPlaywright, setTimezoneViaPlaywright, snapshotAiViaPlaywright, snapshotAriaViaPlaywright, snapshotRoleViaPlaywright, screenshotWithLabelsViaPlaywright, storageClearViaPlaywright, storageGetViaPlaywright, storageSetViaPlaywright, takeScreenshotViaPlaywright, traceStartViaPlaywright, traceStopViaPlaywright, typeViaPlaywright, waitForDownloadViaPlaywright, waitForViaPlaywright, } from "./pw-tools-core.js";
+export { listFileInputsViaPlaywright, attachFileToInputViaPlaywright, isFileTypeAccepted, } from "./pw-tools-core.uploads.js";

package/dist/browser/pw-tools-core.uploads.d.ts

@@ -0,0 +1,51 @@
+/**
+ * File upload discovery and attachment functions for browser automation.
+ *
+ * These functions support the LLM-driven file upload workflow:
+ * 1. listFileInputsViaPlaywright() - discovers all file inputs on page + iframes
+ * 2. attachFileToInputViaPlaywright() - uploads file to a specific input by index
+ */
+export type FileInputInfo = {
+    index: number;
+    id: string;
+    name: string;
+    accept: string;
+    multiple: boolean;
+    frameUrl: string;
+    nearbyText: string;
+    ariaLabel: string | null;
+};
+export type ListFileInputsResult = {
+    inputs: FileInputInfo[];
+    targetId?: string;
+};
+export type AttachFileResult = {
+    success: boolean;
+    inputIndex: number;
+    inputId: string;
+    fileName: string;
+    frameUrl: string;
+};
+/**
+ * Discovers all file inputs on the page and all iframes.
+ * Returns structured metadata that the LLM can use to decide which input to target.
+ */
+export declare function listFileInputsViaPlaywright(opts: {
+    cdpUrl: string;
+    targetId?: string;
+}): Promise<ListFileInputsResult>;
+/**
+ * Attaches a file to a specific file input by index.
+ * The index corresponds to the index returned by listFileInputsViaPlaywright.
+ */
+export declare function attachFileToInputViaPlaywright(opts: {
+    cdpUrl: string;
+    targetId?: string;
+    inputIndex: number;
+    filePath: string;
+}): Promise<AttachFileResult>;
+/**
+ * Validates that a file extension matches an accept attribute.
+ * Returns true if the file is allowed, false otherwise.
+ */
+export declare function isFileTypeAccepted(filePath: string, accept: string): boolean;

package/dist/browser/pw-tools-core.uploads.js

@@ -0,0 +1,225 @@
+/**
+ * File upload discovery and attachment functions for browser automation.
+ *
+ * These functions support the LLM-driven file upload workflow:
+ * 1. listFileInputsViaPlaywright() - discovers all file inputs on page + iframes
+ * 2. attachFileToInputViaPlaywright() - uploads file to a specific input by index
+ */
+import { existsSync } from "node:fs";
+import { basename, extname } from "node:path";
+import { getPageForTargetId, ensurePageState } from "./pw-session.js";
+/**
+ * Extracts metadata about file inputs from a page or frame.
+ */
+async function extractFileInputsFromFrame(frame, frameUrl, startIndex) {
+    try {
+        const inputs = await frame.$$("input[type='file']");
+        const results = [];
+        for (let i = 0; i < inputs.length; i++) {
+            try {
+                const info = await inputs[i].evaluate((el) => {
+                    // Get nearby text for context (parent, siblings, labels)
+                    let nearbyText = "";
+                    // Check for associated label
+                    const labelFor = el.id ? document.querySelector(`label[for="${el.id}"]`) : null;
+                    if (labelFor) {
+                        nearbyText = labelFor.textContent?.trim().substring(0, 100) || "";
+                    }
+                    // Check parent for text
+                    if (!nearbyText && el.parentElement) {
+                        const parentText = el.parentElement.textContent?.trim() || "";
+                        // Only use if not too long (avoid grabbing entire page text)
+                        if (parentText.length < 200) {
+                            nearbyText = parentText.substring(0, 100);
+                        }
+                    }
+                    // Check previous sibling
+                    if (!nearbyText && el.previousElementSibling) {
+                        nearbyText = el.previousElementSibling.textContent?.trim().substring(0, 100) || "";
+                    }
+                    return {
+                        id: el.id || "",
+                        name: el.name || "",
+                        accept: el.accept || "",
+                        multiple: el.multiple,
+                        ariaLabel: el.getAttribute("aria-label"),
+                        nearbyText,
+                    };
+                });
+                results.push({
+                    index: startIndex + i,
+                    id: info.id,
+                    name: info.name,
+                    accept: info.accept,
+                    multiple: info.multiple,
+                    frameUrl,
+                    nearbyText: info.nearbyText,
+                    ariaLabel: info.ariaLabel,
+                });
+            }
+            catch {
+                // Skip inputs that can't be accessed
+            }
+        }
+        return results;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Discovers all file inputs on the page and all iframes.
+ * Returns structured metadata that the LLM can use to decide which input to target.
+ */
+export async function listFileInputsViaPlaywright(opts) {
+    const page = await getPageForTargetId(opts);
+    ensurePageState(page);
+    const allInputs = [];
+    // Get inputs from main page
+    const mainInputs = await extractFileInputsFromFrame(page, page.url(), 0);
+    allInputs.push(...mainInputs);
+    // Get inputs from all frames
+    const frames = page.frames();
+    for (const frame of frames) {
+        // Skip main frame (already processed) and empty frames
+        if (frame === page.mainFrame()) {
+            continue;
+        }
+        const frameUrl = frame.url();
+        if (!frameUrl || frameUrl === "about:blank") {
+            continue;
+        }
+        const frameInputs = await extractFileInputsFromFrame(frame, frameUrl, allInputs.length);
+        allInputs.push(...frameInputs);
+    }
+    return {
+        inputs: allInputs,
+        targetId: opts.targetId,
+    };
+}
+/**
+ * Internal: find the file input element by index across page and iframes.
+ */
+async function findInputByIndex(page, targetIndex) {
+    let currentIndex = 0;
+    // Check main page first
+    const mainInputs = await page.$$("input[type='file']");
+    if (targetIndex < currentIndex + mainInputs.length) {
+        const localIndex = targetIndex - currentIndex;
+        return { element: mainInputs[localIndex], frame: page };
+    }
+    currentIndex += mainInputs.length;
+    // Check frames
+    const frames = page.frames();
+    for (const frame of frames) {
+        if (frame === page.mainFrame()) {
+            continue;
+        }
+        const frameUrl = frame.url();
+        if (!frameUrl || frameUrl === "about:blank") {
+            continue;
+        }
+        try {
+            const frameInputs = await frame.$$("input[type='file']");
+            if (targetIndex < currentIndex + frameInputs.length) {
+                const localIndex = targetIndex - currentIndex;
+                return { element: frameInputs[localIndex], frame };
+            }
+            currentIndex += frameInputs.length;
+        }
+        catch {
+            // Frame might be detached, continue
+        }
+    }
+    return null;
+}
+/**
+ * Attaches a file to a specific file input by index.
+ * The index corresponds to the index returned by listFileInputsViaPlaywright.
+ */
+export async function attachFileToInputViaPlaywright(opts) {
+    const page = await getPageForTargetId(opts);
+    ensurePageState(page);
+    // Validate file exists
+    if (!existsSync(opts.filePath)) {
+        throw new Error(`File not found: ${opts.filePath}`);
+    }
+    // Find the input by index
+    const found = await findInputByIndex(page, opts.inputIndex);
+    if (!found || !found.element) {
+        throw new Error(`No file input found at index ${opts.inputIndex}. Run list_upload_inputs first.`);
+    }
+    const { element, frame } = found;
+    // Get input ID for the response
+    const inputId = await element.evaluate((el) => el.id || "(no id)");
+    // Set the file
+    await element.setInputFiles(opts.filePath);
+    // Dispatch change/input events for sites that need them
+    try {
+        await element.evaluate((el) => {
+            el.dispatchEvent(new Event("input", { bubbles: true }));
+            el.dispatchEvent(new Event("change", { bubbles: true }));
+        });
+    }
+    catch {
+        // Best-effort event dispatch
+    }
+    return {
+        success: true,
+        inputIndex: opts.inputIndex,
+        inputId,
+        fileName: basename(opts.filePath),
+        frameUrl: "url" in frame && typeof frame.url === "function" ? frame.url() : page.url(),
+    };
+}
+/**
+ * Validates that a file extension matches an accept attribute.
+ * Returns true if the file is allowed, false otherwise.
+ */
+export function isFileTypeAccepted(filePath, accept) {
+    if (!accept || accept.trim() === "") {
+        return true; // No restriction
+    }
+    const fileExt = extname(filePath).toLowerCase();
+    const acceptedTypes = accept.split(",").map((t) => t.trim().toLowerCase());
+    for (const accepted of acceptedTypes) {
+        // Handle extension matches (.pdf, .doc, etc)
+        if (accepted.startsWith(".") && fileExt === accepted) {
+            return true;
+        }
+        // Handle MIME type matches (application/pdf, image/*, etc)
+        if (accepted.includes("/")) {
+            // Map common extensions to MIME types for basic matching
+            const mimeMap = {
+                ".pdf": ["application/pdf"],
+                ".doc": ["application/msword"],
+                ".docx": ["application/vnd.openxmlformats-officedocument.wordprocessingml.document"],
+                ".xls": ["application/vnd.ms-excel"],
+                ".xlsx": ["application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"],
+                ".png": ["image/png"],
+                ".jpg": ["image/jpeg"],
+                ".jpeg": ["image/jpeg"],
+                ".gif": ["image/gif"],
+                ".webp": ["image/webp"],
+                ".txt": ["text/plain"],
+                ".md": ["text/markdown", "text/plain"],
+                ".csv": ["text/csv"],
+            };
+            const fileMimes = mimeMap[fileExt] || [];
+            if (accepted.endsWith("/*")) {
+                // Wildcard like image/*
+                const prefix = accepted.replace("/*", "/");
+                if (fileMimes.some((m) => m.startsWith(prefix))) {
+                    return true;
+                }
+            }
+            else {
+                // Exact MIME match
+                if (fileMimes.includes(accepted)) {
+                    return true;
+                }
+            }
+        }
+    }
+    return false;
+}

package/dist/browser/routes/agent.act.js

@@ -474,6 +474,61 @@ export function registerBrowserAgentActRoutes(app, ctx) {
             handleRouteError(ctx, res, err);
         }
     });
+    app.get("/upload-inputs", async (req, res) => {
+        const profileCtx = resolveProfileContext(req, res, ctx);
+        if (!profileCtx) {
+            return;
+        }
+        const targetId = toStringOrEmpty(req.query.targetId) || undefined;
+        try {
+            const tab = await profileCtx.ensureTabAvailable(targetId);
+            const pw = await requirePwAi(res, "list upload inputs");
+            if (!pw) {
+                return;
+            }
+            const result = await pw.listFileInputsViaPlaywright({
+                cdpUrl: profileCtx.profile.cdpUrl,
+                targetId: tab.targetId,
+            });
+            res.json({ ok: true, targetId: tab.targetId, ...result });
+        }
+        catch (err) {
+            handleRouteError(ctx, res, err);
+        }
+    });
+    app.post("/attach-file", async (req, res) => {
+        const profileCtx = resolveProfileContext(req, res, ctx);
+        if (!profileCtx) {
+            return;
+        }
+        const body = readBody(req);
+        const targetId = toStringOrEmpty(body.targetId) || undefined;
+        const inputIndex = toNumber(body.inputIndex);
+        const filePath = toStringOrEmpty(body.filePath);
+        if (inputIndex === undefined || inputIndex === null) {
+            return jsonError(res, 400, "inputIndex is required");
+        }
+        if (!filePath) {
+            return jsonError(res, 400, "filePath is required");
+        }
+        try {
+            const tab = await profileCtx.ensureTabAvailable(targetId);
+            const pw = await requirePwAi(res, "attach file");
+            if (!pw) {
+                return;
+            }
+            const result = await pw.attachFileToInputViaPlaywright({
+                cdpUrl: profileCtx.profile.cdpUrl,
+                targetId: tab.targetId,
+                inputIndex,
+                filePath,
+            });
+            res.json({ ok: true, targetId: tab.targetId, ...result });
+        }
+        catch (err) {
+            handleRouteError(ctx, res, err);
+        }
+    });
     app.post("/highlight", async (req, res) => {
         const profileCtx = resolveProfileContext(req, res, ctx);
         if (!profileCtx) {

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.1.32",
-  "commit": "63a5a6cdc28f72ec1bb0ec415ff148eba790b2d8",
-  "builtAt": "2026-02-02T03:31:57.234Z"
+  "version": "2026.1.35",
+  "commit": "60d46f62b6417f469753f0bc785f4481b74c76eb",
+  "builtAt": "2026-02-03T06:50:10.937Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-0c8337264f78308ab09fce8a670fbfae17efd8cad8a60f1d46a50e9a48a5eec6
+c2e45112d75a09927b99786eaa6500c5433a73d88440d47ec00a0598c2359d7f

package/dist/cli/connect-cli/register.js

@@ -44,7 +44,11 @@ ${theme.muted("Your WhatsApp messages will trigger AI that runs commands on this
                 if (gatewayUrl.includes("://")) {
                     const url = new URL(gatewayUrl);
                     host = url.hostname;
-                    port = url.port ? parseInt(url.port, 10) : (url.protocol === "wss:" || url.protocol === "https:" ? 443 : 80);
+                    port = url.port
+                        ? parseInt(url.port, 10)
+                        : url.protocol === "wss:" || url.protocol === "https:"
+                            ? 443
+                            : 80;
                     useTls = url.protocol === "wss:" || url.protocol === "https:";
                 }
                 else if (gatewayUrl.includes(":")) {