browsentic 0.7.4 → 0.7.5

package/dist/daemon-main.js

@@ -3478,10 +3478,10 @@ var require_websocket_server = __commonJS({
             process.nextTick(emitClose, this);
           }
         } else {
-          const server = this._server;
+          const server2 = this._server;
           this._removeListeners();
           this._removeListeners = this._server = null;
-          server.close(() => {
+          server2.close(() => {
             emitClose(this);
           });
         }
@@ -3666,17 +3666,17 @@ var require_websocket_server = __commonJS({
       }
     };
     module.exports = WebSocketServer2;
-    function addListeners(server, map2) {
-      for (const event of Object.keys(map2)) server.on(event, map2[event]);
+    function addListeners(server2, map2) {
+      for (const event of Object.keys(map2)) server2.on(event, map2[event]);
       return function removeListeners() {
         for (const event of Object.keys(map2)) {
-          server.removeListener(event, map2[event]);
+          server2.removeListener(event, map2[event]);
         }
       };
     }
-    function emitClose(server) {
-      server._state = CLOSED;
-      server.emit("close");
+    function emitClose(server2) {
+      server2._state = CLOSED;
+      server2.emit("close");
     }
     function socketOnError() {
       this.destroy();
@@ -3695,11 +3695,11 @@ var require_websocket_server = __commonJS({
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
-    function abortHandshakeOrEmitwsClientError(server, req, socket, code, message, headers) {
-      if (server.listenerCount("wsClientError")) {
+    function abortHandshakeOrEmitwsClientError(server2, req, socket, code, message, headers) {
+      if (server2.listenerCount("wsClientError")) {
         const err = new Error(message);
         Error.captureStackTrace(err, abortHandshakeOrEmitwsClientError);
-        server.emit("wsClientError", err, socket, req);
+        server2.emit("wsClientError", err, socket, req);
       } else {
         abortHandshake(socket, code, message, headers);
       }
@@ -3708,7 +3708,7 @@ var require_websocket_server = __commonJS({
 });
 
 // daemon.ts
-import { randomBytes as randomBytes5, randomUUID as randomUUID14, timingSafeEqual } from "crypto";
+import { randomBytes as randomBytes5, randomUUID as randomUUID15, timingSafeEqual } from "crypto";
 import { createServer } from "http";
 
 // node_modules/ws/wrapper.mjs
@@ -4970,8 +4970,8 @@ function prefixIssues(path, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
-function finalizeIssue(iss, ctx, config4) {
-  const message = iss.message ? iss.message : unwrapMessage(iss.inst?._zod.def?.error?.(iss)) ?? unwrapMessage(ctx?.error?.(iss)) ?? unwrapMessage(config4.customError?.(iss)) ?? unwrapMessage(config4.localeError?.(iss)) ?? "Invalid input";
+function finalizeIssue(iss, ctx, config5) {
+  const message = iss.message ? iss.message : unwrapMessage(iss.inst?._zod.def?.error?.(iss)) ?? unwrapMessage(ctx?.error?.(iss)) ?? unwrapMessage(config5.customError?.(iss)) ?? unwrapMessage(config5.localeError?.(iss)) ?? "Invalid input";
   const { inst: _inst, continue: _continue, input: _input, ...rest } = iss;
   rest.path ?? (rest.path = []);
   rest.message = message;
@@ -21713,7 +21713,7 @@ var FOCUS_SHOT_ACTION = `${RESERVED_PREFIX}focusShot`;
 var READ_FILE_ACTION = `${RESERVED_PREFIX}readFile`;
 
 // ../lib/agents/catalog.ts
-var AGENT_KINDS = ["claude", "codex", "antigravity", "vibe", "grok", "cursor", "qwen"];
+var AGENT_KINDS = ["claude", "codex", "antigravity", "vibe", "grok", "cursor", "qwen", "opencode"];
 var DEFAULT_AGENT = "claude";
 var AGENTS = {
   claude: {
@@ -21785,6 +21785,18 @@ var AGENTS = {
     // subcommand lists them, so these are curated.
     models: ["qwen3-coder-plus", "qwen3.7-plus", "qwen3.6-plus", "qwen3-max-2026-01-23"],
     beta: true
+  },
+  opencode: {
+    kind: "opencode",
+    label: "OpenCode",
+    vendor: "Anomaly",
+    bin: "opencode",
+    install: "npm i -g opencode-ai",
+    docs: "https://opencode.ai/docs/cli/",
+    // Spelled provider/model, and reachable only through a provider OpenCode is signed in to: Zen's
+    // free models refuse a run whose tools are narrowed to the browser.
+    models: ["anthropic/claude-opus-5-5", "anthropic/claude-sonnet-5", "openai/gpt-5.6", "google/gemini-3.1-pro-preview"],
+    beta: true
   }
 };
 var AGENT_LIST = AGENT_KINDS.map((kind) => AGENTS[kind]);
@@ -21847,16 +21859,16 @@ function clearLockfile() {
 
 // agent/config.ts
 var CONCURRENT_RUNS = { fallback: 3, max: 8 };
-function maxConcurrentRuns(config4) {
-  return clamp2(config4.maxConcurrentRuns, CONCURRENT_RUNS);
+function maxConcurrentRuns(config5) {
+  return clamp2(config5.maxConcurrentRuns, CONCURRENT_RUNS);
 }
 var SITE_MAP_LIMITS = {
   pages: { fallback: 15, max: 40 },
   screenshots: { fallback: 10, max: 24 },
   timeoutMs: { fallback: 10 * 6e4, max: 30 * 6e4 }
 };
-function siteMapSettings(config4) {
-  const stored = config4.siteMap ?? {};
+function siteMapSettings(config5) {
+  const stored = config5.siteMap ?? {};
   return {
     research: stored.research !== false,
     allowClicks: stored.allowClicks === true,
@@ -21903,8 +21915,8 @@ function settingsFor(stored, kind) {
   };
 }
 var text = (value) => typeof value === "string" && value.trim() ? value.trim() : void 0;
-function activeAgent(config4) {
-  return { kind: config4.agent, ...config4.agents[config4.agent] };
+function activeAgent(config5) {
+  return { kind: config5.agent, ...config5.agents[config5.agent] };
 }
 function writeActiveAgent(kind) {
   const stored = readStored();
@@ -21946,9 +21958,9 @@ function writeGuardrailSetting(setting, value) {
   else delete next.guardrails;
   write(next);
 }
-function write(config4) {
+function write(config5) {
   mkdirSync2(stateDir, { recursive: true, mode: 448 });
-  writeFileSync2(configPath, `${JSON.stringify(config4, null, 2)}
+  writeFileSync2(configPath, `${JSON.stringify(config5, null, 2)}
 `, { mode: 384 });
 }
 
@@ -23062,8 +23074,8 @@ var DEFAULT_FENCE = {
   // image-specific renderer instead.
   except: ["page.closeTab", "page.stopMonitor", "page.screenshot"]
 };
-function policyFrom(config4 = {}, requireApproval = [SUBMIT_ACTION]) {
-  const overrides = config4.rules ?? {};
+function policyFrom(config5 = {}, requireApproval = [SUBMIT_ACTION]) {
+  const overrides = config5.rules ?? {};
   const rules = DEFAULT_RULES.map((rule) => {
     const legacy = rule.id === "form-submission" && !requireApproval.includes(SUBMIT_ACTION) ? "allow" : rule.effect;
     return { ...rule, effect: overrides[rule.id] ?? legacy };
@@ -23071,9 +23083,9 @@ function policyFrom(config4 = {}, requireApproval = [SUBMIT_ACTION]) {
   return {
     rules,
     requireApproval,
-    unattended: config4.unattended === "allow" ? "allow" : "deny",
-    urlPayloadBytes: typeof config4.urlPayloadBytes === "number" && config4.urlPayloadBytes >= 0 ? config4.urlPayloadBytes : DEFAULT_URL_PAYLOAD_BYTES,
-    fence: config4.fence === false ? { ...DEFAULT_FENCE, enabled: false } : DEFAULT_FENCE
+    unattended: config5.unattended === "allow" ? "allow" : "deny",
+    urlPayloadBytes: typeof config5.urlPayloadBytes === "number" && config5.urlPayloadBytes >= 0 ? config5.urlPayloadBytes : DEFAULT_URL_PAYLOAD_BYTES,
+    fence: config5.fence === false ? { ...DEFAULT_FENCE, enabled: false } : DEFAULT_FENCE
   };
 }
 var POLICY = policyFrom();
@@ -23141,9 +23153,9 @@ function sealingStream() {
 // guardrails/settings.ts
 var LOCKED = /* @__PURE__ */ new Set(["reserved-action", "non-http-navigation", "unreadable-navigation", "secret-in-url"]);
 var RULE_IDS = new Set(DEFAULT_RULES.map((rule) => rule.id));
-function guardrailSettings(config4, requireApproval, configPath2) {
-  const overrides = config4.rules ?? {};
-  const baseline = policyFrom({ ...config4, rules: {} }, requireApproval);
+function guardrailSettings(config5, requireApproval, configPath2) {
+  const overrides = config5.rules ?? {};
+  const baseline = policyFrom({ ...config5, rules: {} }, requireApproval);
   const rules = baseline.rules.map((rule) => {
     const override = overrides[rule.id];
     return {
@@ -23157,12 +23169,12 @@ function guardrailSettings(config4, requireApproval, configPath2) {
   });
   return {
     rules,
-    fence: { enabled: config4.fence !== false, overridden: config4.fence !== void 0 },
+    fence: { enabled: config5.fence !== false, overridden: config5.fence !== void 0 },
     unattended: {
-      effect: config4.unattended === "allow" ? "allow" : "deny",
-      overridden: config4.unattended !== void 0
+      effect: config5.unattended === "allow" ? "allow" : "deny",
+      overridden: config5.unattended !== void 0
     },
-    hosts: config4.hosts ?? [],
+    hosts: config5.hosts ?? [],
     configPath: configPath2
   };
 }
@@ -23194,6 +23206,8 @@ var FORBIDDEN = [
 var NEVER2 = ["Bash", "Edit", "Write", "NotebookEdit", "Glob", "Grep", "Task"];
 var NEVER_QWEN = ["Bash", "exec", "Edit", "agent", "skill", "monitor"];
 var GROK_SEALED = { GROK_MEMORY: "0", GROK_CLAUDE_MCPS_ENABLED: "false", GROK_CURSOR_MCPS_ENABLED: "false" };
+var OPENCODE_SEALED = { OPENCODE_DISABLE_PROJECT_CONFIG: "1", OPENCODE_DISABLE_CLAUDE_CODE: "1", OPENCODE_DISABLE_SHARE: "1" };
+var OPENCODE_CONFIG = ['"*":"deny"', '"share":"disabled"'];
 var CONTAINMENT = {
   claude: {
     localTools: "allowlist",
@@ -23363,6 +23377,37 @@ var CONTAINMENT = {
       denies: { flag: "--exclude-tools", tools: NEVER_QWEN },
       files: []
     }
+  },
+  opencode: {
+    localTools: "allowlist",
+    // A key in ANTHROPIC_* or OPENAI_* would be one of a dozen providers OpenCode reads; `opencode auth login` keeps them in a file.
+    keepsEnv: ["OPENCODE_"],
+    // `--auto` approves whatever is not denied, `--attach` runs the turn in a server started with someone
+    // else's config, `--dir` moves it out of the workspace, and `--share` publishes it.
+    forbidden: [/^--auto$/i, /^--attach/i, /^--dir/i, /^--share$/i],
+    note: 'a per-run permission ruleset opening on "*": "deny", which OpenCode applies after the user\u2019s own rules, so the model is offered no tool that was not named \u2014 built-in, custom, or another MCP server\u2019s; external plugins and project config stay off, but MCP servers the user gave OpenCode itself still start, with their tools hidden',
+    run: {
+      // Plugins run inside OpenCode and can add tools or answer its permission prompts.
+      required: ["--pure"],
+      pairs: [
+        ["--agent", "browsentic-contained"],
+        ["--format", "json"]
+      ],
+      env: OPENCODE_SEALED,
+      envContains: { OPENCODE_CONFIG_CONTENT: OPENCODE_CONFIG },
+      files: ["instructions.md"]
+    },
+    task: {
+      required: ["--pure"],
+      pairs: [
+        ["--agent", "browsentic-contained"],
+        ["--format", "json"]
+      ],
+      env: OPENCODE_SEALED,
+      // An empty map adds no server of ours, so a one-shot has no way to the browser.
+      envContains: { OPENCODE_CONFIG_CONTENT: [...OPENCODE_CONFIG, '"mcp":{}'] },
+      files: []
+    }
   }
 };
 function vetPlan(kind, mode, plan, home) {
@@ -23391,6 +23436,10 @@ function vetPlan(kind, mode, plan, home) {
   for (const [name, value] of Object.entries(rules.env ?? {})) {
     if (plan.env?.[name] !== value) problems.push(`${label2} is spawned without ${name}=${value}.`);
   }
+  for (const [name, needles] of Object.entries(rules.envContains ?? {})) {
+    const missing = needles.filter((needle) => !plan.env?.[name]?.includes(needle));
+    if (missing.length) problems.push(`${label2} is spawned with a ${name} missing ${missing.join(", ")}.`);
+  }
   for (const path of rules.files) {
     if (!plan.files?.some((file2) => file2.path === path)) {
       problems.push(`${label2} is spawned without ${path} in its workspace.`);
@@ -23460,6 +23509,7 @@ var SECRET_PREFIX = [
   "QWEN_",
   "DASHSCOPE_",
   "BAILIAN_",
+  "OPENCODE_",
   "VERCEL_",
   "NETLIFY_",
   "CLOUDFLARE_",
@@ -23870,7 +23920,7 @@ function revokeSessions(predicate) {
 }
 
 // agent/service.ts
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 
 // ../lib/actions/tool-names.ts
 function toolNameFor(actionName) {
@@ -24027,12 +24077,12 @@ function isMappableHost(host) {
 
 // agent/agent-skills.ts
 import { createHash } from "crypto";
-import { readFileSync as readFileSync9, readdirSync as readdirSync3, statSync as statSync4 } from "fs";
-import { join as join18, sep as sep2 } from "path";
+import { readFileSync as readFileSync10, readdirSync as readdirSync3, statSync as statSync4 } from "fs";
+import { join as join19, sep as sep2 } from "path";
 
 // agent/runners/index.ts
 import { spawn as spawn2 } from "child_process";
-import { dirname as dirname4, join as join17 } from "path";
+import { dirname as dirname5, join as join18 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 
 // agent/runners/antigravity.ts
@@ -24426,8 +24476,8 @@ var antigravityRunner = {
     }
   }
 };
-function mcpConfig(server) {
-  const servers = server ? { [MCP_SERVER_NAME]: server } : {};
+function mcpConfig(server2) {
+  const servers = server2 ? { [MCP_SERVER_NAME]: server2 } : {};
   return `${JSON.stringify({ mcpServers: servers }, null, 2)}
 `;
 }
@@ -24484,7 +24534,7 @@ var codexRunner = {
   skillDirs: () => [join12(homedir7(), ".codex", "skills"), join12(homedir7(), ".codex", "prompts")],
   stream(context) {
     const { settings, mcp, research } = context;
-    const server = `mcp_servers.${MCP_SERVER_NAME}`;
+    const server2 = `mcp_servers.${MCP_SERVER_NAME}`;
     const effort = effortOf(settings, this.efforts);
     return {
       cwd: this.workspace("run"),
@@ -24496,16 +24546,16 @@ var codexRunner = {
         ...SANDBOX,
         ...QUIETED,
         "-c",
-        `${server}.command=${tomlString(mcp.command)}`,
+        `${server2}.command=${tomlString(mcp.command)}`,
         "-c",
-        `${server}.args=${tomlArray(mcp.args)}`,
+        `${server2}.args=${tomlArray(mcp.args)}`,
         "-c",
-        `${server}.env=${tomlTable(mcp.env)}`,
+        `${server2}.env=${tomlTable(mcp.env)}`,
         "-c",
-        `${server}.required=true`,
+        `${server2}.required=true`,
         // Headless Codex refuses an MCP call it would have asked about; the daemon gates these tools itself.
         "-c",
-        `${server}.default_tools_approval_mode="approve"`,
+        `${server2}.default_tools_approval_mode="approve"`,
         "-c",
         `developer_instructions=${tomlString(`${context.systemPrompt.trim()}
 
@@ -24863,11 +24913,11 @@ function toolOf(event) {
   const [key, value] = Object.entries(event.tool_call ?? {}).find(([name]) => name.endsWith("ToolCall")) ?? [];
   if (!key) return void 0;
   const args = value?.args;
-  const server = args?.["server"];
-  if (typeof server === "string") {
-    if (server === MCP_SERVER_NAME) return void 0;
+  const server2 = args?.["server"];
+  if (typeof server2 === "string") {
+    if (server2 === MCP_SERVER_NAME) return void 0;
     const tool = args?.["name"];
-    return `${server}:${typeof tool === "string" ? tool : key}`;
+    return `${server2}:${typeof tool === "string" ? tool : key}`;
   }
   return key.replace(/ToolCall$/, "");
 }
@@ -25072,13 +25122,13 @@ function explain2(message) {
 }
 var oneLine = (message) => message.replace(/\s+/g, " ").slice(0, 240);
 var sentence = (message) => /[.!?]$/.test(message.trim()) ? message.trim() : `${message.trim()}.`;
-function config2(server) {
+function config2(server2) {
   const quote = (value) => JSON.stringify(value);
-  const env = Object.entries(server.env).map(([name, value]) => `${name} = ${quote(value)}`);
+  const env = Object.entries(server2.env).map(([name, value]) => `${name} = ${quote(value)}`);
   return [
     `[mcp_servers.${MCP_SERVER_NAME}]`,
-    `command = ${quote(server.command)}`,
-    `args = [${server.args.map(quote).join(", ")}]`,
+    `command = ${quote(server2.command)}`,
+    `args = [${server2.args.map(quote).join(", ")}]`,
     `env = { ${env.join(", ")} }`,
     ""
   ].join("\n");
@@ -25091,11 +25141,215 @@ function lastLine(stdout) {
   return null;
 }
 
-// agent/runners/qwen.ts
+// agent/runners/opencode.ts
 import { randomUUID as randomUUID6 } from "crypto";
 import { readFileSync as readFileSync8 } from "fs";
 import { homedir as homedir10 } from "os";
-import { join as join15 } from "path";
+import { dirname as dirname4, join as join15, relative } from "path";
+var AGENT = "browsentic-contained";
+var INSTRUCTIONS2 = "instructions.md";
+var WEB_TOOLS3 = ["webfetch", "websearch"];
+var RESULT_BYTES = 1e5;
+var TOOL_TIMEOUT_MS = 30 * 6e4;
+var TRUNCATION = `A tool result over ${RESULT_BYTES / 1e3} KB comes back cut, and the saved copy OpenCode points to cannot be opened in this run, so ask for less at a time \u2014 \`page_getPageInfo\` with a small \`maxPerKind\`, \`page_extractText\` with the cursor it hands back.`;
+var SEALED2 = { OPENCODE_DISABLE_PROJECT_CONFIG: "1", OPENCODE_DISABLE_CLAUDE_CODE: "1", OPENCODE_DISABLE_SHARE: "1" };
+var sessionsDb = () => join15(stateDir, "agents", "opencode", "sessions.db");
+var configHome = () => join15(process.env.XDG_CONFIG_HOME || join15(homedir10(), ".config"), "opencode");
+var INSTALL = "npm i -g opencode-ai";
+var opencodeRunner = {
+  kind: "opencode",
+  versionArgs: ["--version"],
+  // Passed as --variant, whose names each model defines; a model ignores one it lacks.
+  efforts: ["none", "minimal", "low", "medium", "high", "xhigh", "max"],
+  endsOnExit: true,
+  workspace: (mode) => join15(stateDir, "agents", "opencode", mode),
+  skillDirs: () => [
+    join15(configHome(), "skills"),
+    join15(configHome(), "skill"),
+    join15(homedir10(), ".opencode", "skills"),
+    join15(homedir10(), ".agents", "skills"),
+    join15(homedir10(), ".claude", "skills")
+  ],
+  stream(context) {
+    const { settings, research } = context;
+    const base = this.workspace("run");
+    sweepRunDirs(base);
+    const cwd = conversationDir(base, context.conversation ?? context.runId);
+    const allowed2 = [...context.mcpTools.map((tool) => `${MCP_SERVER_NAME}_${tool}`), ...research ? WEB_TOOLS3 : []];
+    const effort = effortOf(settings, this.efforts);
+    return {
+      cwd,
+      env: {
+        ...SEALED2,
+        OPENCODE_DB: sessionsDb(),
+        OPENCODE_CONFIG_CONTENT: config3({
+          mcp: { [MCP_SERVER_NAME]: server(context.mcp) },
+          instructions: [join15(cwd, INSTRUCTIONS2)],
+          permission: { "*": "deny", ...Object.fromEntries(allowed2.map((tool) => [tool, "allow"])) }
+        }),
+        BROWSENTIC_AGENT_RUN: context.runId
+      },
+      files: [{ path: INSTRUCTIONS2, content: `${context.systemPrompt.trim()}
+
+${TRUNCATION}
+` }],
+      args: [
+        ...invocation(),
+        ...context.sessionId ? ["--session", context.sessionId] : [],
+        ...settings.model ? ["--model", settings.model] : [],
+        ...effort ? ["--variant", effort] : [],
+        "--",
+        context.instruction
+      ]
+    };
+  },
+  reader() {
+    let spoke = false;
+    let generated = 0;
+    const report = (tokens, sink) => {
+      const made = (tokens.output ?? 0) + (tokens.reasoning ?? 0);
+      const prompt = (tokens.input ?? 0) + (tokens.cache?.read ?? 0) + (tokens.cache?.write ?? 0);
+      generated += made;
+      sink.usage({ contextTokens: prompt + made, outputTokens: generated });
+    };
+    return (line2, sink) => {
+      const event = parseJsonLine(line2);
+      if (!event) return;
+      if (event.sessionID) sink.session(event.sessionID);
+      const part = event.part;
+      switch (event.type) {
+        case "text":
+          if (!part?.text) return;
+          sink.text(spoke ? `
+
+${part.text}` : part.text);
+          spoke = true;
+          return;
+        case "tool_use": {
+          const name = part?.tool;
+          if (!name || ownTool3(name)) return;
+          if (WEB_TOOLS3.includes(name)) return sink.tool(part.callID ?? randomUUID6(), name);
+          if (part.state?.status !== "completed") return;
+          return sink.fail(
+            "AGENT_UNSAFE",
+            `OpenCode ran its own ${name} tool in this run, which Browsentic denied, so the run was stopped. Update OpenCode and Browsentic; if it persists, please report it.`
+          );
+        }
+        case "step_finish":
+          if (part?.tokens) report(part.tokens, sink);
+          return;
+        case "error":
+          return sink.fail("AGENT_FAILED", explain3(event.error));
+      }
+    };
+  },
+  json(context) {
+    const { settings, reads } = context;
+    const cwd = this.workspace("task");
+    const permission = { "*": "deny", ...reads ? { read: scratchReads(cwd) } : {} };
+    return {
+      cwd,
+      env: {
+        ...SEALED2,
+        OPENCODE_DB: sessionsDb(),
+        // Merged over the user's servers rather than replacing them: it adds none, and the ruleset hides theirs.
+        OPENCODE_CONFIG_CONTENT: config3({ mcp: {}, permission })
+      },
+      args: [...invocation(), ...settings.model ? ["--model", settings.model] : [], "--", context.prompt]
+    };
+  },
+  answer(stdout) {
+    let said = [];
+    for (const line2 of stdout.split("\n")) {
+      const event = parseJsonLine(line2);
+      if (event?.type === "error") return { error: explain3(event.error) };
+      if (event?.type === "step_start") said = [];
+      if (event?.type === "text" && event.part?.text) said.push(event.part.text);
+    }
+    return { text: said.length ? said.join("\n\n") : void 0 };
+  },
+  hint(stderrTail) {
+    if (/Unknown arguments?|Not enough arguments|Invalid values/i.test(stderrTail)) {
+      return `Your OpenCode does not understand the flags Browsentic uses. Update it (${INSTALL}), then try again. (${stderrTail.trim()})`;
+    }
+    return null;
+  },
+  async check() {
+    if (process.env.OPENCODE_API_KEY || process.env.OPENCODE_AUTH_CONTENT || signedIn2() || declaresProvider()) return null;
+    return {
+      code: "AGENT_NEEDS_PERMISSION",
+      message: "OpenCode is signed in to no model provider, and its free OpenCode Zen models refuse a run whose tools Browsentic has narrowed to the browser.",
+      fix: "opencode auth login"
+    };
+  }
+};
+var invocation = () => ["run", "--format", "json", "--pure", "--agent", AGENT];
+var ownTool3 = (name) => name.startsWith(`${MCP_SERVER_NAME}_`);
+var server = (mcp) => ({
+  type: "local",
+  command: [mcp.command, ...mcp.args],
+  environment: mcp.env,
+  enabled: true,
+  timeout: TOOL_TIMEOUT_MS
+});
+function config3({ mcp, instructions, permission }) {
+  return JSON.stringify({
+    share: "disabled",
+    autoupdate: false,
+    snapshot: false,
+    tool_output: { max_bytes: RESULT_BYTES, max_lines: RESULT_BYTES },
+    mcp,
+    ...instructions ? { instructions } : {},
+    agent: { title: { disable: true }, [AGENT]: { mode: "primary", permission } }
+  });
+}
+function scratchReads(workspace) {
+  const scratch = join15(workspace, "tmp");
+  const rules = { "*": "deny" };
+  for (let root = dirname4(workspace); ; root = dirname4(root)) {
+    rules[`${relative(root, scratch)}/*`] = "allow";
+    if (root === dirname4(root)) return rules;
+  }
+}
+function explain3(failure2) {
+  const message = oneLine2(failure2?.data?.message ?? failure2?.name ?? "OpenCode reported an error");
+  const status = failure2?.data?.statusCode;
+  if (failure2?.data?.responseBody?.includes("FreeTierError")) {
+    return `OpenCode Zen's free models refuse a run whose tools Browsentic has narrowed to the browser. Run "opencode auth login" to sign in to a provider, then pick one of its models in the Browsentic popup. (${message})`;
+  }
+  if (failure2?.name === "ProviderAuthError" || status === 401 || status === 403) {
+    return `${message} If that is a login problem, run "opencode auth login" \u2014 a key kept only in an environment variable is not passed to a Browsentic run.`;
+  }
+  if (status === 429) return `The provider behind OpenCode is rate-limiting this account. Wait and try again. (${message})`;
+  if (failure2?.name === "UnknownError") {
+    return `OpenCode could not start this turn, most often because it does not know the model. Pick one in the Browsentic popup as "opencode models" lists it \u2014 provider/model \u2014 then try again. (${message})`;
+  }
+  return message;
+}
+var oneLine2 = (message) => message.replace(/\s+/g, " ").trim().slice(0, 240);
+var dataHome = () => join15(process.env.XDG_DATA_HOME || join15(homedir10(), ".local", "share"), "opencode");
+function signedIn2() {
+  try {
+    return Object.keys(JSON.parse(readFileSync8(join15(dataHome(), "auth.json"), "utf8"))).length > 0;
+  } catch (error51) {
+    return error51.code !== "ENOENT";
+  }
+}
+function declaresProvider() {
+  return ["opencode.json", "opencode.jsonc", "config.json"].some((name) => {
+    try {
+      return /"provider"\s*:/.test(readFileSync8(join15(configHome(), name), "utf8"));
+    } catch {
+      return false;
+    }
+  });
+}
+
+// agent/runners/qwen.ts
+import { randomUUID as randomUUID7 } from "crypto";
+import { readFileSync as readFileSync9 } from "fs";
+import { homedir as homedir11 } from "os";
+import { join as join16 } from "path";
 var MACHINE = ["Bash", "exec", "Edit", "Read", "zoom_image", "monitor", "lsp", "save_memory"];
 var ESCAPES = [
   "skill",
@@ -25116,13 +25370,13 @@ var ESCAPES = [
   "image_gen",
   "read_mcp_resource"
 ];
-var WEB_TOOLS3 = ["web_search", "web_fetch"];
+var WEB_TOOLS4 = ["web_search", "web_fetch"];
 var READ_TOOL2 = "read_file";
 var OTHER_READS = ["grep_search", "glob", "list_directory"];
 var APPROVAL = "default";
 var DANGEROUS = /^(run_shell_command|exec|edit|write_file|notebook_edit|read_file|grep_search|glob|list_directory|agent|skill|monitor|save_memory|lsp|zoom_image|image_gen|workflow|send_message|create_sub_session|propose_goal|cron_|team_|computer_use__|omni_)/;
-var qwenHome = () => process.env.QWEN_HOME || join15(homedir10(), ".qwen");
-var INSTALL = "npm i -g @qwen-code/qwen-code";
+var qwenHome = () => process.env.QWEN_HOME || join16(homedir11(), ".qwen");
+var INSTALL2 = "npm i -g @qwen-code/qwen-code";
 var AUTH_KEYS = ["QWEN_API_KEY", "OPENAI_API_KEY", "DASHSCOPE_API_KEY"];
 var AUTH_PREFIX = /^(QWEN_|DASHSCOPE_|BAILIAN_|OPENAI_).*(API_KEY|TOKEN)$/;
 var qwenRunner = {
@@ -25132,8 +25386,8 @@ var qwenRunner = {
   efforts: [],
   // Sessions are filed under ~/.qwen/projects/<sanitized-cwd>, so a resume only finds the
   // conversation it began in when this stays put.
-  workspace: (mode) => join15(stateDir, "agents", "qwen", mode),
-  skillDirs: () => [join15(qwenHome(), "skills"), join15(homedir10(), ".agents", "skills")],
+  workspace: (mode) => join16(stateDir, "agents", "qwen", mode),
+  skillDirs: () => [join16(qwenHome(), "skills"), join16(homedir11(), ".agents", "skills")],
   stream(context) {
     const { settings, research } = context;
     return {
@@ -25159,14 +25413,14 @@ var qwenRunner = {
         // to be auto-approved by name. One entry covers every tool the server offers.
         "--allowed-tools",
         `mcp__${MCP_SERVER_NAME}`,
-        ...research ? WEB_TOOLS3 : [],
+        ...research ? WEB_TOOLS4 : [],
         "--exclude-tools",
         ...MACHINE,
         ...ESCAPES,
-        ...research ? [] : WEB_TOOLS3,
+        ...research ? [] : WEB_TOOLS4,
         "--append-system-prompt",
         context.systemPrompt,
-        ...context.sessionId ? ["--resume", context.sessionId] : ["--session-id", randomUUID6()],
+        ...context.sessionId ? ["--resume", context.sessionId] : ["--session-id", randomUUID7()],
         ...settings.model ? ["--model", settings.model] : []
       ]
     };
@@ -25202,7 +25456,7 @@ var qwenRunner = {
           }
           if (event?.type === "content_block_start" && event.content_block?.type === "tool_use") {
             const name = event.content_block.name ?? "tool";
-            if (WEB_TOOLS3.includes(name)) sink.tool(event.content_block.id ?? randomUUID6(), name);
+            if (WEB_TOOLS4.includes(name)) sink.tool(event.content_block.id ?? randomUUID7(), name);
           }
           return;
         }
@@ -25216,7 +25470,7 @@ var qwenRunner = {
           if (message.is_error) {
             return sink.fail(
               "AGENT_FAILED",
-              explain3(message.error?.message) ?? (message.result?.trim() || "Qwen Code reported an error")
+              explain4(message.error?.message) ?? (message.result?.trim() || "Qwen Code reported an error")
             );
           }
           return sink.done(message.subtype === "success" ? "end_turn" : message.subtype || "end_turn");
@@ -25244,7 +25498,7 @@ var qwenRunner = {
         "--exclude-tools",
         ...denied,
         ...ESCAPES,
-        ...WEB_TOOLS3,
+        ...WEB_TOOLS4,
         ...settings.model ? ["--model", settings.model] : []
       ]
     };
@@ -25253,7 +25507,7 @@ var qwenRunner = {
     const answer = lastResult2(stdout);
     if (!answer) return {};
     if (answer.is_error) {
-      return { error: explain3(answer.error?.message) ?? (answer.result?.trim() || "Qwen Code reported an error") };
+      return { error: explain4(answer.error?.message) ?? (answer.result?.trim() || "Qwen Code reported an error") };
     }
     return { text: typeof answer.result === "string" ? answer.result : void 0 };
   },
@@ -25266,7 +25520,7 @@ var qwenRunner = {
       return `Qwen Code refused the session id Browsentic minted. This is a bug in Browsentic \u2014 please report it. (${tail2})`;
     }
     if (/unknown argument|unknown option|invalid values|not a valid choice/i.test(tail2)) {
-      return `Your Qwen Code does not understand the flags Browsentic uses. Update it (${INSTALL}), then try again. (${tail2})`;
+      return `Your Qwen Code does not understand the flags Browsentic uses. Update it (${INSTALL2}), then try again. (${tail2})`;
     }
     return null;
   },
@@ -25289,7 +25543,7 @@ function escaped(init) {
   if (live.length) {
     return `Qwen Code registered ${live.join(", ")} for this run, which Browsentic denied, so the run was stopped before the model saw them. Update Qwen Code and Browsentic; if it persists, please report it.`;
   }
-  const others = (init.mcp_servers ?? []).map((server) => server.name).filter((name) => name && name !== MCP_SERVER_NAME);
+  const others = (init.mcp_servers ?? []).map((server2) => server2.name).filter((name) => name && name !== MCP_SERVER_NAME);
   if (others.length) {
     return `Qwen Code loaded the MCP server${others.length > 1 ? "s" : ""} ${others.join(", ")} beside Browsentic's own, which would reach the browser outside this run's gate, so the run was stopped. Update Qwen Code and Browsentic; if it persists, please report it.`;
   }
@@ -25298,27 +25552,27 @@ function escaped(init) {
   }
   return void 0;
 }
-function explain3(message) {
+function explain4(message) {
   if (!message) return void 0;
   if (/No auth type is selected|API key not found/i.test(message)) {
-    return `Qwen Code has no model provider configured. Run "qwen" and use /auth, or export OPENAI_API_KEY with OPENAI_BASE_URL, then try again. (${oneLine2(message)})`;
+    return `Qwen Code has no model provider configured. Run "qwen" and use /auth, or export OPENAI_API_KEY with OPENAI_BASE_URL, then try again. (${oneLine3(message)})`;
   }
   if (/qwen-oauth|Qwen OAuth/i.test(message)) {
-    return `Qwen OAuth's free tier was discontinued, so its requests are rejected. Configure another provider with /auth. (${oneLine2(message)})`;
+    return `Qwen OAuth's free tier was discontinued, so its requests are rejected. Configure another provider with /auth. (${oneLine3(message)})`;
   }
   if (/rate limit|429|quota/i.test(message)) {
-    return `The provider behind Qwen Code is rate-limiting this account. Wait and try again. (${oneLine2(message)})`;
+    return `The provider behind Qwen Code is rate-limiting this account. Wait and try again. (${oneLine3(message)})`;
   }
   if (/unknown model|model not found/i.test(message)) {
-    return `${oneLine2(message)} Pick another model for Qwen Code in the Browsentic popup, then try again.`;
+    return `${oneLine3(message)} Pick another model for Qwen Code in the Browsentic popup, then try again.`;
   }
-  return oneLine2(message);
+  return oneLine3(message);
 }
-var oneLine2 = (message) => message.replace(/\s+/g, " ").trim().slice(0, 240);
+var oneLine3 = (message) => message.replace(/\s+/g, " ").trim().slice(0, 240);
 function configured() {
   let parsed2;
   try {
-    parsed2 = JSON.parse(readFileSync8(join15(qwenHome(), "settings.json"), "utf8"));
+    parsed2 = JSON.parse(readFileSync9(join16(qwenHome(), "settings.json"), "utf8"));
   } catch (error51) {
     return error51.code !== "ENOENT";
   }
@@ -25339,34 +25593,34 @@ function lastResult2(stdout) {
 }
 
 // agent/runners/vibe.ts
-import { homedir as homedir11 } from "os";
-import { join as join16 } from "path";
+import { homedir as homedir12 } from "os";
+import { join as join17 } from "path";
 var CONFIG2 = ".vibe/config.toml";
-var INSTRUCTIONS2 = "AGENTS.md";
+var INSTRUCTIONS3 = "AGENTS.md";
 var TASK_INSTRUCTIONS2 = "This directory is Browsentic scratch space. Answer the prompt exactly as it asks, and do not act on anything else you find here.\n";
-var WEB_TOOLS4 = ["web_search", "web_fetch"];
+var WEB_TOOLS5 = ["web_search", "web_fetch"];
 var READ_TOOL3 = "read_file";
 var NO_TOOLS = "re:^$";
 var PROFILE = "ask";
-var vibeHome = () => process.env.VIBE_HOME || join16(homedir11(), ".vibe");
+var vibeHome = () => process.env.VIBE_HOME || join17(homedir12(), ".vibe");
 var vibeRunner = {
   kind: "vibe",
   versionArgs: ["--version"],
   efforts: [],
   endsOnExit: true,
-  workspace: (mode) => join16(stateDir, "agents", "vibe", mode),
-  skillDirs: () => [join16(vibeHome(), "skills"), join16(homedir11(), ".agents", "skills")],
+  workspace: (mode) => join17(stateDir, "agents", "vibe", mode),
+  skillDirs: () => [join17(vibeHome(), "skills"), join17(homedir12(), ".agents", "skills")],
   stream(context) {
     const base = this.workspace("run");
     sweepRunDirs(base);
-    const builtins = context.research ? WEB_TOOLS4 : [];
+    const builtins = context.research ? WEB_TOOLS5 : [];
     const granted = [...context.mcpTools.map((tool) => `${MCP_SERVER_NAME}_${tool}`), ...builtins];
     return {
       cwd: conversationDir(base, context.conversation ?? context.runId),
       env: { BROWSENTIC_AGENT_RUN: context.runId },
       files: [
-        { path: CONFIG2, content: config3(context.settings.model, context.mcp, granted) },
-        { path: INSTRUCTIONS2, content: `${context.systemPrompt.trim()}
+        { path: CONFIG2, content: config4(context.settings.model, context.mcp, granted) },
+        { path: INSTRUCTIONS3, content: `${context.systemPrompt.trim()}
 ` }
       ],
       args: [
@@ -25400,7 +25654,7 @@ ${text2}` : text2);
         return;
       }
       const tool = entry.type === "effect" ? entry.detail?.toolName : void 0;
-      if (tool && entry.id && !ownTool3(tool)) sink.tool(entry.id, tool);
+      if (tool && entry.id && !ownTool4(tool)) sink.tool(entry.id, tool);
     };
   },
   json(context) {
@@ -25408,8 +25662,8 @@ ${text2}` : text2);
     return {
       cwd: this.workspace("task"),
       files: [
-        { path: CONFIG2, content: config3(context.settings.model, null, allowed2) },
-        { path: INSTRUCTIONS2, content: TASK_INSTRUCTIONS2 }
+        { path: CONFIG2, content: config4(context.settings.model, null, allowed2) },
+        { path: INSTRUCTIONS3, content: TASK_INSTRUCTIONS2 }
       ],
       args: [
         "--prompt",
@@ -25431,7 +25685,7 @@ ${text2}` : text2);
   },
   hint(stderrTail) {
     if (/Missing \w+ environment variable/i.test(stderrTail)) {
-      return `Mistral Vibe is installed but has no API key. Run "vibe --setup", or put MISTRAL_API_KEY in ${join16(vibeHome(), ".env")}, then try again. (${stderrTail.trim()})`;
+      return `Mistral Vibe is installed but has no API key. Run "vibe --setup", or put MISTRAL_API_KEY in ${join17(vibeHome(), ".env")}, then try again. (${stderrTail.trim()})`;
     }
     if (/unrecognized arguments|invalid choice/i.test(stderrTail)) {
       return `Your Mistral Vibe does not understand the flags Browsentic uses. Update it, then try again. (${stderrTail.trim()})`;
@@ -25441,20 +25695,20 @@ ${text2}` : text2);
 };
 var enabling = (patterns) => patterns.flatMap((pattern) => ["--enabled-tools", pattern]);
 var textOf2 = (entry) => (entry.content ?? []).filter((block) => block.type === "text" && block.text).map((block) => block.text).join("\n\n");
-var ownTool3 = (name) => name.startsWith(`${MCP_SERVER_NAME}_`);
-function config3(model, server, granted) {
+var ownTool4 = (name) => name.startsWith(`${MCP_SERVER_NAME}_`);
+function config4(model, server2, granted) {
   const quote = (value) => JSON.stringify(value);
   const lines = model ? [`active_model = ${quote(model)}`, ""] : [];
-  if (server) {
+  if (server2) {
     lines.push(
       "[[mcp_servers]]",
       `name = ${quote(MCP_SERVER_NAME)}`,
       'transport = "stdio"',
-      `command = [${quote(server.command)}]`,
-      `args = [${server.args.map(quote).join(", ")}]`,
+      `command = [${quote(server2.command)}]`,
+      `args = [${server2.args.map(quote).join(", ")}]`,
       "",
       "[mcp_servers.env]",
-      ...Object.entries(server.env).map(([name, value]) => `${name} = ${quote(value)}`),
+      ...Object.entries(server2.env).map(([name, value]) => `${name} = ${quote(value)}`),
       ""
     );
   }
@@ -25470,26 +25724,27 @@ var RUNNERS = {
   vibe: vibeRunner,
   grok: grokRunner,
   cursor: cursorRunner,
-  qwen: qwenRunner
+  qwen: qwenRunner,
+  opencode: opencodeRunner
 };
-var cliPath = join17(dirname4(fileURLToPath3(import.meta.url)), "cli.js");
+var cliPath = join18(dirname5(fileURLToPath3(import.meta.url)), "cli.js");
 function mcpServerFor(runId) {
   return { command: process.execPath, args: [cliPath, "mcp"], env: { BROWSENTIC_AGENT_RUN: runId } };
 }
-function runnerFor(config4) {
-  const active = activeAgent(config4);
+function runnerFor(config5) {
+  const active = activeAgent(config5);
   return { runner: RUNNERS[active.kind], settings: active };
 }
 var PROBE_TIMEOUT_MS = 8e3;
 var PROBE_TTL_MS = 3e4;
 var cached2 = null;
-async function agentState(config4, { refresh = false } = {}) {
-  const signature = JSON.stringify(config4.agents);
+async function agentState(config5, { refresh = false } = {}) {
+  const signature = JSON.stringify(config5.agents);
   if (!refresh && cached2 && cached2.signature === signature && Date.now() - cached2.at < PROBE_TTL_MS) {
-    return { ...cached2.state, active: config4.agent };
+    return { ...cached2.state, active: config5.agent };
   }
-  const runners = await Promise.all(AGENT_KINDS.map((kind) => probe2(RUNNERS[kind], config4.agents[kind])));
-  const state = { active: config4.agent, runners };
+  const runners = await Promise.all(AGENT_KINDS.map((kind) => probe2(RUNNERS[kind], config5.agents[kind])));
+  const state = { active: config5.agent, runners };
   cached2 = { at: Date.now(), signature, state };
   return state;
 }
@@ -25582,8 +25837,8 @@ var TTL_MS = 3e4;
 var ID_RE = /^[0-9a-f]{16}$/;
 var cached3 = null;
 var known = /* @__PURE__ */ new Map();
-function agentSkills(config4, { refresh = false } = {}) {
-  const agent = config4.agent;
+function agentSkills(config5, { refresh = false } = {}) {
+  const agent = config5.agent;
   const dirs = RUNNERS[agent].skillDirs?.() ?? [];
   const signature = dirs.join("\n");
   if (!refresh && cached3 && cached3.agent === agent && cached3.dirs === signature && Date.now() - cached3.at < TTL_MS) {
@@ -25599,12 +25854,12 @@ function agentSkills(config4, { refresh = false } = {}) {
   cached3 = { at: Date.now(), agent, dirs: signature, skills };
   return skills.map(meta3);
 }
-function resolveAgentSkill(id, config4) {
+function resolveAgentSkill(id, config5) {
   if (!ID_RE.test(id)) return unknown2();
-  if (!known.has(id)) agentSkills(config4, { refresh: true });
+  if (!known.has(id)) agentSkills(config5, { refresh: true });
   const entry = known.get(id);
-  if (!entry || entry.agent !== config4.agent) return unknown2();
-  const dirs = RUNNERS[config4.agent].skillDirs?.() ?? [];
+  if (!entry || entry.agent !== config5.agent) return unknown2();
+  const dirs = RUNNERS[config5.agent].skillDirs?.() ?? [];
   if (!dirs.some((dir) => entry.path.startsWith(dir + sep2))) return unknown2();
   try {
     const stats = statSync4(entry.path);
@@ -25617,7 +25872,7 @@ function resolveAgentSkill(id, config4) {
         }
       };
     }
-    const body = splitFrontMatter(readFileSync9(entry.path, "utf8")).body.trim();
+    const body = splitFrontMatter(readFileSync10(entry.path, "utf8")).body.trim();
     if (!body) return unknown2();
     return { skill: { name: entry.name, body } };
   } catch {
@@ -25643,11 +25898,11 @@ function scan(dir, agent, out) {
     return;
   }
   for (const entry of entries) {
-    const path = entry.name.endsWith(".md") ? join18(dir, entry.name) : join18(dir, entry.name, SKILL_FILE);
+    const path = entry.name.endsWith(".md") ? join19(dir, entry.name) : join19(dir, entry.name, SKILL_FILE);
     try {
       const stats = statSync4(path);
       if (!stats.isFile() || stats.size > MAX_SKILL_BYTES) continue;
-      const { fields, body } = splitFrontMatter(readFileSync9(path, "utf8"));
+      const { fields, body } = splitFrontMatter(readFileSync10(path, "utf8"));
       if (!body.trim()) continue;
       const name = clean(unquote(fields.name) || entry.name.replace(/\.md$/, ""), MAX_NAME);
       if (!name) continue;
@@ -25668,13 +25923,13 @@ function idOf(path) {
 }
 
 // agent/approvals.ts
-import { chmodSync as chmodSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync7 } from "fs";
-import { join as join19 } from "path";
-var approvalsPath = join19(stateDir, "approvals.json");
+import { chmodSync as chmodSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "fs";
+import { join as join20 } from "path";
+var approvalsPath = join20(stateDir, "approvals.json");
 var MAX_GRANTS = 200;
 function read2() {
   try {
-    const parsed2 = JSON.parse(readFileSync10(approvalsPath, "utf8"));
+    const parsed2 = JSON.parse(readFileSync11(approvalsPath, "utf8"));
     if (!Array.isArray(parsed2.grants)) return [];
     return parsed2.grants.filter(
       (grant) => !!grant && typeof grant.action === "string" && typeof grant.host === "string" && typeof grant.at === "string"
@@ -25822,7 +26077,7 @@ function landedUrl(action, data) {
 }
 
 // agent/attachments.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 
 // ../lib/files/report.ts
 var FILE_KINDS = ["text", "pdf", "image"];
@@ -25931,7 +26186,7 @@ async function reportOn(file2, deps) {
     const checked = validateFileReport(file2.report);
     return checked.ok ? checked.report : refusal("failed", deps.agent, "AGENT_FAILED", "The report on this file was damaged; re-attach it.");
   }
-  const toolId = randomUUID7();
+  const toolId = randomUUID8();
   deps.emit({ kind: "tool", toolId, action: READ_FILE_ACTION, input: { name: file2.name } });
   const report = await deps.wait(file2.id, deps.signal) ?? refusal("failed", deps.agent, "AGENT_FAILED", "Browsentic lost track of this file\u2019s analysis \u2014 remove it and attach it again.");
   deps.emit({
@@ -26124,12 +26379,12 @@ ${overlay.body.trim()}`;
 }
 
 // agent/runner.ts
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 
 // agent/runners/drive.ts
 import { spawn as spawn3 } from "child_process";
 import { mkdirSync as mkdirSync9, utimesSync, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname5, join as join20 } from "path";
+import { dirname as dirname6, join as join21 } from "path";
 import { createInterface } from "readline";
 
 // agent/runners/types.ts
@@ -26156,8 +26411,8 @@ function launch(kind, mode, settings, plan, signal) {
   log(describeContainment(kind));
   mkdirSync9(plan.cwd, { recursive: true, mode: 448 });
   for (const file2 of plan.files ?? []) {
-    const path = join20(plan.cwd, file2.path);
-    mkdirSync9(dirname5(path), { recursive: true, mode: 448 });
+    const path = join21(plan.cwd, file2.path);
+    mkdirSync9(dirname6(path), { recursive: true, mode: 448 });
     writeFileSync8(path, file2.content, { mode: 384 });
   }
   const now = /* @__PURE__ */ new Date();
@@ -26327,18 +26582,18 @@ function runInstruction(request) {
     request.emit
   );
 }
-function runAgentJson(prompt, config4, signal, { reads = false, ...options }) {
-  const { runner, settings } = runnerFor(config4);
+function runAgentJson(prompt, config5, signal, { reads = false, ...options }) {
+  const { runner, settings } = runnerFor(config5);
   return runJson(runner, { prompt, settings, reads, workspace: runner.workspace("task") }, signal, options);
 }
-function taskDir(config4) {
-  return join21(runnerFor(config4).runner.workspace("task"), "tmp");
+function taskDir(config5) {
+  return join22(runnerFor(config5).runner.workspace("task"), "tmp");
 }
 
 // agent/site-map-store.ts
-import { randomUUID as randomUUID8 } from "crypto";
-import { existsSync as existsSync5, mkdirSync as mkdirSync10, readFileSync as readFileSync11, readdirSync as readdirSync4, renameSync as renameSync3, rmSync as rmSync5, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname6, join as join22, resolve as resolve2, sep as sep3 } from "path";
+import { randomUUID as randomUUID9 } from "crypto";
+import { existsSync as existsSync5, mkdirSync as mkdirSync10, readFileSync as readFileSync12, readdirSync as readdirSync4, renameSync as renameSync3, rmSync as rmSync5, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname7, join as join23, resolve as resolve2, sep as sep3 } from "path";
 var STAGING = ".staging";
 function mapTargetFor(url2) {
   let parsed2;
@@ -26380,21 +26635,21 @@ function uniqueName(domain2, host) {
 }
 function mappedHostOf(name) {
   try {
-    const meta4 = JSON.parse(readFileSync11(join22(uploadedSkillsDir(), name, "meta.json"), "utf8"));
+    const meta4 = JSON.parse(readFileSync12(join23(uploadedSkillsDir(), name, "meta.json"), "utf8"));
     return typeof meta4.host === "string" ? meta4.host : "";
   } catch {
-    return existsSync5(join22(uploadedSkillsDir(), name, SKILL_FILE)) ? "" : null;
+    return existsSync5(join23(uploadedSkillsDir(), name, SKILL_FILE)) ? "" : null;
   }
 }
 function prepareStaging() {
-  const id = randomUUID8();
-  const dir = join22(uploadedSkillsDir(), STAGING, id);
+  const id = randomUUID9();
+  const dir = join23(uploadedSkillsDir(), STAGING, id);
   const staging = {
     id,
     dir,
-    screenshots: join22(dir, "screenshots"),
-    evidence: join22(dir, "evidence"),
-    pages: join22(dir, "pages")
+    screenshots: join23(dir, "screenshots"),
+    evidence: join23(dir, "evidence"),
+    pages: join23(dir, "pages")
   };
   for (const path of [dir, staging.screenshots, staging.evidence, staging.pages]) {
     mkdirSync10(path, { recursive: true, mode: 448 });
@@ -26410,7 +26665,7 @@ function stagedScreenshots(staging) {
 }
 function writeEvidence(staging, name, body) {
   if (!body.trim()) return;
-  writeFileSync9(join22(staging.evidence, name), body, { mode: 384 });
+  writeFileSync9(join23(staging.evidence, name), body, { mode: 384 });
 }
 function stageSiteMap(args) {
   const { staging, target, report, index, background, warnings, runId } = args;
@@ -26429,17 +26684,17 @@ generatedAt: ${generatedAt}
 ---
 
 `);
-  writeFileSync9(join22(staging.dir, SKILL_FILE), markdown, { mode: 384 });
-  writeFileSync9(join22(staging.dir, "map.json"), JSON.stringify(report, null, 2), { mode: 384 });
+  writeFileSync9(join23(staging.dir, SKILL_FILE), markdown, { mode: 384 });
+  writeFileSync9(join23(staging.dir, "map.json"), JSON.stringify(report, null, 2), { mode: 384 });
   writeFileSync9(
-    join22(staging.dir, "meta.json"),
+    join23(staging.dir, "meta.json"),
     JSON.stringify({ name: target.name, host: target.host, domain: target.domain, generatedAt, runId }, null, 2),
     { mode: 384 }
   );
   for (const [index_, page] of report.pages.entries()) {
     if (!page.notes) continue;
     const file2 = `${String(index_ + 1).padStart(2, "0")}-${skillNameForHost(page.path) || "page"}.md`;
-    writeFileSync9(join22(staging.pages, file2), `# ${page.title}
+    writeFileSync9(join23(staging.pages, file2), `# ${page.title}
 
 ${page.path}
 
@@ -26451,7 +26706,7 @@ ${page.notes}
     name: target.name,
     host: target.host,
     domain: target.domain,
-    directory: join22(uploadedSkillsDir(), target.name),
+    directory: join23(uploadedSkillsDir(), target.name),
     markdown,
     pages: report.pages.length,
     screenshots: stagedScreenshots(staging).length,
@@ -26502,7 +26757,7 @@ function renderSiteMapBody(args) {
   }
   const shots = report.pages.filter((page) => page.screenshot).length;
   if (shots) {
-    out.push("", "## Screenshots", "", `Full-size captures: ${join22(uploadedSkillsDir(), target.name, "screenshots")}`);
+    out.push("", "## Screenshots", "", `Full-size captures: ${join23(uploadedSkillsDir(), target.name, "screenshots")}`);
   }
   const body = out.join("\n");
   return body.length > MAX_MAP_BODY_BYTES ? `${body.slice(0, MAX_MAP_BODY_BYTES - 40)}
@@ -26514,7 +26769,7 @@ function commitStaging(stagingId, exactHost = false) {
   if (!staging) return failure("NOT_FOUND", "That mapping run is no longer staged.");
   let meta4;
   try {
-    meta4 = JSON.parse(readFileSync11(join22(staging, "meta.json"), "utf8"));
+    meta4 = JSON.parse(readFileSync12(join23(staging, "meta.json"), "utf8"));
   } catch {
     return failure("NOT_FOUND", "That staged map is incomplete.");
   }
@@ -26526,15 +26781,15 @@ function commitStaging(stagingId, exactHost = false) {
     return failure("NAME_TAKEN", `"${name}" is now a skill you wrote by hand. Remove it first, or discard this map.`);
   }
   if (exactHost && host !== domain2) {
-    const path = join22(staging, SKILL_FILE);
-    writeFileSync9(path, readFileSync11(path, "utf8").replace(`domains: [${domain2}]`, `domains: [${host}]`), {
+    const path = join23(staging, SKILL_FILE);
+    writeFileSync9(path, readFileSync12(path, "utf8").replace(`domains: [${domain2}]`, `domains: [${host}]`), {
       mode: 384
     });
   }
-  const destination = join22(uploadedSkillsDir(), name);
+  const destination = join23(uploadedSkillsDir(), name);
   if (!contained(destination)) return failure("INVALID_INPUT", "Refusing to write outside the skills directory.");
   if (existsSync5(destination)) {
-    renameSync3(destination, join22(uploadedSkillsDir(), STAGING, `${name}-replaced-${randomUUID8().slice(0, 8)}`));
+    renameSync3(destination, join23(uploadedSkillsDir(), STAGING, `${name}-replaced-${randomUUID9().slice(0, 8)}`));
   }
   renameSync3(staging, destination);
   log(`activated site map ${name} (${host})`);
@@ -26549,9 +26804,9 @@ function discardStaging(stagingId) {
 }
 function stagingDirFor(stagingId) {
   if (!/^[0-9a-f-]{36}$/i.test(stagingId)) return null;
-  const dir = resolve2(join22(uploadedSkillsDir(), STAGING, stagingId));
-  if (dirname6(dir) !== resolve2(join22(uploadedSkillsDir(), STAGING))) return null;
-  return existsSync5(join22(dir, SKILL_FILE)) ? dir : null;
+  const dir = resolve2(join23(uploadedSkillsDir(), STAGING, stagingId));
+  if (dirname7(dir) !== resolve2(join23(uploadedSkillsDir(), STAGING))) return null;
+  return existsSync5(join23(dir, SKILL_FILE)) ? dir : null;
 }
 function contained(path) {
   const root = resolve2(uploadedSkillsDir());
@@ -26559,7 +26814,7 @@ function contained(path) {
   return target === root || target.startsWith(root + sep3);
 }
 function sweepStaging(maxAgeMs = 24 * 60 * 60 * 1e3, now = Date.now()) {
-  const root = join22(uploadedSkillsDir(), STAGING);
+  const root = join23(uploadedSkillsDir(), STAGING);
   let entries;
   try {
     entries = readdirSync4(root);
@@ -26568,12 +26823,12 @@ function sweepStaging(maxAgeMs = 24 * 60 * 60 * 1e3, now = Date.now()) {
   }
   for (const entry of entries) {
     try {
-      const meta4 = JSON.parse(readFileSync11(join22(root, entry, "meta.json"), "utf8"));
+      const meta4 = JSON.parse(readFileSync12(join23(root, entry, "meta.json"), "utf8"));
       const at = typeof meta4.generatedAt === "string" ? Date.parse(meta4.generatedAt) : 0;
       if (at && now - at < maxAgeMs) continue;
     } catch {
     }
-    rmSync5(join22(root, entry), { recursive: true, force: true });
+    rmSync5(join23(root, entry), { recursive: true, force: true });
     log(`swept abandoned staging ${entry}`);
   }
 }
@@ -26970,7 +27225,7 @@ var AgentSession = class {
       return failure("RUN_INACTIVE", "This agent run is no longer active");
     }
     const emit = (event) => this.deps.emit(runId, event);
-    const toolId = randomUUID9();
+    const toolId = randomUUID10();
     emit({ kind: "tool", toolId, action, input: input2 });
     if (action === SAVE_SITE_MAP_ACTION) {
       if (!run.map) {
@@ -27064,8 +27319,8 @@ var AgentSession = class {
         message: `No skills found. Looked in ${skillDirNames().join(" and ")} \u2014 reinstall the package, or add a skill of your own.`
       });
     }
-    const config4 = readAgentConfig();
-    const limit = maxConcurrentRuns(config4);
+    const config5 = readAgentConfig();
+    const limit = maxConcurrentRuns(config5);
     if ((this.deps.running?.() ?? this.runs.size) >= limit) {
       return emit({
         kind: "error",
@@ -27086,24 +27341,24 @@ var AgentSession = class {
       if (mapping) {
         log(`agent run ${runId}: ignoring the attached agent skill \u2014 mapping runs build their own prompt`);
       } else {
-        const resolved = resolveAgentSkill(context.agentSkillId, config4);
+        const resolved = resolveAgentSkill(context.agentSkillId, config5);
         if ("error" in resolved) return emit({ kind: "error", ...resolved.error });
         attached = resolved.skill;
       }
     }
     const overlayNames = routed.overlays.map((overlay) => overlay.name);
-    const policy = policyFrom(config4.guardrails, config4.requireApproval);
+    const policy = policyFrom(config5.guardrails, config5.requireApproval);
     const scope = scopeFor({
       url: context?.url,
       tabId: context?.tabId,
       instruction: text2,
-      extraHosts: config4.guardrails?.hosts,
+      extraHosts: config5.guardrails?.hosts,
       pinTab: true
     });
     const run = {
       id: runId,
       sessionId: sessionId2,
-      config: config4,
+      config: config5,
       policy,
       scope,
       site: siteOf(context?.url),
@@ -27116,20 +27371,20 @@ var AgentSession = class {
     };
     this.runs.set(runId, run);
     if (run.liveTools && sessionId2) this.codeListed.add(sessionId2);
-    const runner = activeRunner(await agentState(config4));
+    const runner = activeRunner(await agentState(config5));
     if (!runner?.ready) {
       const problem = runner?.problem;
       this.release(run);
-      log(`agent run ${runId} refused: ${AGENTS[config4.agent].label} is not ready`);
+      log(`agent run ${runId} refused: ${AGENTS[config5.agent].label} is not ready`);
       return emit({
         kind: "error",
         code: problem?.code ?? "AGENT_MISSING",
-        message: `${AGENTS[config4.agent].label} cannot run. ${problem?.message ?? "It is not available."}${problem?.fix ? ` ${problem.fix}` : ""}`
+        message: `${AGENTS[config5.agent].label} cannot run. ${problem?.message ?? "It is not available."}${problem?.fix ? ` ${problem.fix}` : ""}`
       });
     }
     const holding = sessionId2 ? this.held.get(sessionId2) : void 0;
-    const held = holding?.agent === config4.agent ? holding.sessionId : null;
-    const supplied = mapping ? null : sessionFrom(context, config4.agent);
+    const held = holding?.agent === config5.agent ? holding.sessionId : null;
+    const supplied = mapping ? null : sessionFrom(context, config5.agent);
     const resuming = mapping ? null : supplied ?? held;
     let built;
     let instructionText = routed.text;
@@ -27143,7 +27398,7 @@ var AgentSession = class {
       } else {
         const files = resuming ? context?.files : context?.files?.map((file2) => ({ ...file2, delivered: false }));
         handover = await handOver(files, {
-          agent: config4.agent,
+          agent: config5.agent,
           signal: run.abort.signal,
           emit,
           wait: (fileId, signal) => this.deps.awaitAnalysis?.(fileId, signal) ?? Promise.resolve(null)
@@ -27191,11 +27446,11 @@ var AgentSession = class {
       });
       if (!mapping) {
         if (sessionId2) {
-          if (outcome.sessionId) this.held.set(sessionId2, { agent: config4.agent, sessionId: outcome.sessionId });
+          if (outcome.sessionId) this.held.set(sessionId2, { agent: config5.agent, sessionId: outcome.sessionId });
           else this.held.delete(sessionId2);
         }
         if (outcome.sessionId !== resuming) {
-          emit({ kind: "session", agent: config4.agent, agentSessionId: outcome.sessionId });
+          emit({ kind: "session", agent: config5.agent, agentSessionId: outcome.sessionId });
         }
       }
       log(`agent run ${runId} finished (${outcome.stopReason})`);
@@ -27228,7 +27483,7 @@ var AgentSession = class {
     sweepStaging();
     const settings = siteMapSettings(run.config);
     const staging = prepareStaging();
-    const toolId = randomUUID9();
+    const toolId = randomUUID10();
     emit({ kind: "tool", toolId, action: READ_SITEMAP_ACTION, input: { origin: target.target.origin } });
     let index;
     try {
@@ -27431,27 +27686,27 @@ function clip2(text2) {
 }
 
 // agent/captcha-analyst.ts
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID11 } from "crypto";
 import { mkdirSync as mkdirSync11, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 var MAX_POINTS = 16;
 var ANSWER_TIMEOUT_MS = 45e3;
 var OPEN2 = "=== ANSWER ===";
 var QUICK_EFFORT = "low";
-var analystSees = (config4) => runnerFor(config4).runner.opens?.includes("image") === true;
-async function answerChallenge(challenge, config4, signal) {
+var analystSees = (config5) => runnerFor(config5).runner.opens?.includes("image") === true;
+async function answerChallenge(challenge, config5, signal) {
   const picture = decodeImage(challenge.image);
-  if (!picture || !analystSees(config4) || signal.aborted) return null;
-  const dir = taskDir(config4);
+  if (!picture || !analystSees(config5) || signal.aborted) return null;
+  const dir = taskDir(config5);
   mkdirSync11(dir, { recursive: true, mode: 448 });
-  const path = join23(dir, `${randomUUID10()}-captcha.${picture.extension}`);
+  const path = join24(dir, `${randomUUID11()}-captcha.${picture.extension}`);
   writeFileSync10(path, picture.bytes, { mode: 384 });
   const stop = new AbortController();
   const timer = setTimeout(() => stop.abort(new RunError("TIMEOUT", "The captcha analyst took too long.")), ANSWER_TIMEOUT_MS);
   const cancelled = () => stop.abort(signal.reason);
   signal.addEventListener("abort", cancelled, { once: true });
   try {
-    const output = await runAgentJson(promptFor(path, challenge), quick(config4), stop.signal, {
+    const output = await runAgentJson(promptFor(path, challenge), quick(config5), stop.signal, {
       reads: true,
       timedOut: "The captcha analyst took too long.",
       empty: "The captcha analyst returned nothing.",
@@ -27540,10 +27795,10 @@ ${OPEN2}
   ].filter(Boolean).join("\n\n");
 }
 var refusal2 = (errors) => errors?.length ? `The last answer was refused with: ${JSON.stringify(scrub(errors.join(" "), 200))}. Look again more carefully.` : "";
-function quick(config4) {
-  const { runner } = runnerFor(config4);
-  if (!runner.efforts.includes(QUICK_EFFORT)) return config4;
-  return { ...config4, agents: { ...config4.agents, [runner.kind]: { ...config4.agents[runner.kind], effort: QUICK_EFFORT } } };
+function quick(config5) {
+  const { runner } = runnerFor(config5);
+  if (!runner.efforts.includes(QUICK_EFFORT)) return config5;
+  return { ...config5, agents: { ...config5.agents, [runner.kind]: { ...config5.agents[runner.kind], effort: QUICK_EFFORT } } };
 }
 function decodeImage(dataUrl) {
   const match = dataUrl ? /^data:image\/(jpeg|png|webp);base64,(.+)$/s.exec(dataUrl) : null;
@@ -27555,12 +27810,12 @@ function decodeImage(dataUrl) {
 var MAX_ROUNDS = 10;
 var ROUND_FLOOR_MS = 12e3;
 var CLICK_RESERVE_MS = 8e3;
-async function solveCaptchaWithAnalyst(invoke, input2, config4, answer = answerChallenge) {
+async function solveCaptchaWithAnalyst(invoke, input2, config5, answer = answerChallenge) {
   const asked = input2 ?? {};
   const budget = typeof asked.timeoutMs === "number" ? asked.timeoutMs : SOLVE_CAPTCHA_TIMEOUT_MS;
   const until = Date.now() + budget;
   const first = await invoke({ ...asked, timeoutMs: budget });
-  if (asked.tiles !== void 0 || asked.reload !== void 0 || !analystSees(config4)) return first;
+  if (asked.tiles !== void 0 || asked.reload !== void 0 || !analystSees(config5)) return first;
   let result = first;
   const answers = [];
   let stopped;
@@ -27574,7 +27829,7 @@ async function solveCaptchaWithAnalyst(invoke, input2, config4, answer = answerC
       stopped = "ran out of time";
       break;
     }
-    const given = await answerWithin(answer, openChallenge(result), config4, left - CLICK_RESERVE_MS);
+    const given = await answerWithin(answer, openChallenge(result), config5, left - CLICK_RESERVE_MS);
     if (!given) {
       stopped = "could not answer this round";
       break;
@@ -27595,11 +27850,11 @@ function openChallenge(result) {
   const data = result.data;
   return data?.state === "challenge" && data.challenge?.image ? data.challenge : null;
 }
-async function answerWithin(answer, challenge, config4, ms) {
+async function answerWithin(answer, challenge, config5, ms) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), ms);
   try {
-    return await answer(challenge, config4, controller.signal);
+    return await answer(challenge, config5, controller.signal);
   } finally {
     clearTimeout(timer);
   }
@@ -27628,9 +27883,9 @@ function handBack(result, rounds, why) {
 }
 
 // agent/file-analyst.ts
-import { randomUUID as randomUUID11 } from "crypto";
+import { randomUUID as randomUUID12 } from "crypto";
 import { mkdirSync as mkdirSync12, unlinkSync as unlinkSync3, writeFileSync as writeFileSync11 } from "fs";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 
 // agent/file-screen.ts
 var SAMPLE_BYTES = 64 * 1024;
@@ -27713,12 +27968,12 @@ var FileAnalyses = class {
   kept = /* @__PURE__ */ new Map();
   running = 0;
   waiting = [];
-  start(req, config4, owner) {
+  start(req, config5, owner) {
     this.cancel(req.fileId);
     this.take(req.fileId);
     const controller = new AbortController();
     const report = this.acquire(controller.signal).then(
-      (release) => analyzeFile(req, config4, controller.signal).finally(release)
+      (release) => analyzeFile(req, config5, controller.signal).finally(release)
     );
     const analysis = { owner, controller, report };
     this.live.set(req.fileId, analysis);
@@ -27796,8 +28051,8 @@ var FileAnalyses = class {
     });
   }
 };
-async function analyzeFile(req, config4, signal) {
-  const { runner } = runnerFor(config4);
+async function analyzeFile(req, config5, signal) {
+  const { runner } = runnerFor(config5);
   const agent = runner.kind;
   if (signal.aborted) return failedWith(agent, signal.reason);
   const bytes = Buffer.from(typeof req.content === "string" ? req.content : "", "base64");
@@ -27811,9 +28066,9 @@ async function analyzeFile(req, config4, signal) {
     return refusal("rejected", agent, screened.code, screened.message, screened.kind);
   }
   const { kind, extension: extension2 } = screened;
-  const tmpDir = taskDir(config4);
+  const tmpDir = taskDir(config5);
   mkdirSync12(tmpDir, { recursive: true, mode: 448 });
-  const path = join24(tmpDir, `${randomUUID11()}-${safeName2(req.name)}.${extension2}`);
+  const path = join25(tmpDir, `${randomUUID12()}-${safeName2(req.name)}.${extension2}`);
   writeFileSync11(path, bytes, { mode: 384 });
   const stop = new AbortController();
   const timer = setTimeout(() => stop.abort(new RunError("TIMEOUT", "Reading the file took too long.")), ANALYZE_TIMEOUT_MS);
@@ -27821,7 +28076,7 @@ async function analyzeFile(req, config4, signal) {
   signal.addEventListener("abort", cancelled, { once: true });
   log(`file analyst reading ${req.name} (${bytes.length} bytes, ${kind}) with ${AGENTS[agent].label}`);
   try {
-    const output = await runAgentJson(promptFor2(path, req.name, kind), config4, stop.signal, {
+    const output = await runAgentJson(promptFor2(path, req.name, kind), config5, stop.signal, {
       reads: true,
       timedOut: "Reading the file took too long.",
       empty: "The file analyst returned nothing.",
@@ -27905,9 +28160,9 @@ function safeName2(name) {
 }
 
 // agent/recording.ts
-import { randomUUID as randomUUID12 } from "crypto";
+import { randomUUID as randomUUID13 } from "crypto";
 import { mkdirSync as mkdirSync13, unlinkSync as unlinkSync4, writeFileSync as writeFileSync12 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 
 // ../lib/recordings/workflow.ts
 var MAX_STEPS = 80;
@@ -28064,22 +28319,22 @@ function trimToBudget2(workflow, warnings) {
 var ANALYZE_TIMEOUT_MS2 = 11e4;
 var MAX_TRACE_BYTES = 4 * 1024 * 1024;
 var OPEN4 = "=== WORKFLOW ===";
-async function analyzeRecording(req, config4) {
+async function analyzeRecording(req, config5) {
   const recording = req.recording;
   if (!recording?.events?.length) return failure("INVALID_INPUT", "The recording has no steps.");
   const trace = JSON.stringify({ ...recording, events: recording.events }, null, 1);
   if (Buffer.byteLength(trace) > MAX_TRACE_BYTES) {
     return failure("RECORDING_TOO_LARGE", "The recorded trace is too large to summarize.");
   }
-  const tmpDir = taskDir(config4);
+  const tmpDir = taskDir(config5);
   mkdirSync13(tmpDir, { recursive: true, mode: 448 });
-  const path = join25(tmpDir, `${randomUUID12()}-recording.json`);
+  const path = join26(tmpDir, `${randomUUID13()}-recording.json`);
   writeFileSync12(path, trace, { mode: 384 });
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), ANALYZE_TIMEOUT_MS2);
   log(`analyzing recording ${recording.name} (${recording.events.length} events on ${recording.host})`);
   try {
-    const output = await runAgentJson(promptFor3(path, recording), config4, controller.signal, {
+    const output = await runAgentJson(promptFor3(path, recording), config5, controller.signal, {
       reads: true,
       timedOut: "Splitting the recording into steps took too long.",
       empty: "The agent returned an empty workflow."
@@ -28151,13 +28406,13 @@ var MAX_TITLE_CHARS = 60;
 var MAX_MESSAGES = 12;
 var MAX_MESSAGE_CHARS = 400;
 var NAME_TIMEOUT_MS = 3e4;
-async function nameSession(req, config4) {
+async function nameSession(req, config5) {
   const messages = (Array.isArray(req.messages) ? req.messages : []).filter((message) => typeof message === "string" && message.trim().length > 0).slice(-MAX_MESSAGES).map((message) => message.trim().slice(0, MAX_MESSAGE_CHARS));
   if (!messages.length) return failure("INVALID_INPUT", "Nothing was said in that conversation yet.");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), NAME_TIMEOUT_MS);
   try {
-    const output = await runAgentJson(promptFor4(messages, req.host), config4, controller.signal, {
+    const output = await runAgentJson(promptFor4(messages, req.host), config5, controller.signal, {
       timedOut: "Naming the conversation took too long.",
       empty: "The agent returned an empty name."
     });
@@ -28186,7 +28441,7 @@ function clamp3(output) {
 
 // agent/skill-store.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync14, readdirSync as readdirSync5, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync13, chmodSync as chmodSync6 } from "fs";
-import { dirname as dirname7, join as join26, resolve as resolve3 } from "path";
+import { dirname as dirname8, join as join27, resolve as resolve3 } from "path";
 var MAX_SKILL_FILES = 50;
 function saveSkill(draft) {
   const checked = validateSkillDraft(draft, { reservedNames: bundledSkillNames() });
@@ -28201,7 +28456,7 @@ function saveSkill(draft) {
   const dir = uploadedSkillsDir();
   const path = pathIn(dir, skill.name);
   if (!path) return failure("INVALID_INPUT", `"${skill.name}" is not a usable skill name.`);
-  if (existsSync6(join26(dir, skill.name, SKILL_FILE))) {
+  if (existsSync6(join27(dir, skill.name, SKILL_FILE))) {
     return failure(
       "NAME_TAKEN",
       `"${skill.name}" is a mapped site. Remove that map first, or give this skill another name.`
@@ -28242,7 +28497,7 @@ function deleteSiteMap(name) {
   const path = pathIn(dir, name);
   if (!path) return failure("INVALID_INPUT", `"${name}" is not a usable skill name.`);
   const mapDir = path.replace(/\.md$/, "");
-  if (!existsSync6(join26(mapDir, SKILL_FILE))) {
+  if (!existsSync6(join27(mapDir, SKILL_FILE))) {
     return failure("NOT_FOUND", `No mapped site called "${name}".`);
   }
   try {
@@ -28256,13 +28511,13 @@ function deleteSiteMap(name) {
 }
 function pathIn(dir, name) {
   if (!SKILL_NAME_RE.test(name)) return null;
-  const candidate = resolve3(join26(dir, `${name}.md`));
-  return dirname7(candidate) === resolve3(dir) ? candidate : null;
+  const candidate = resolve3(join27(dir, `${name}.md`));
+  return dirname8(candidate) === resolve3(dir) ? candidate : null;
 }
 function countSkills(dir) {
   try {
     return readdirSync5(dir, { withFileTypes: true }).filter(
-      (entry) => !entry.name.startsWith(".") && (entry.isFile() ? entry.name.endsWith(".md") : entry.isDirectory() && existsSync6(join26(dir, entry.name, SKILL_FILE)))
+      (entry) => !entry.name.startsWith(".") && (entry.isFile() ? entry.name.endsWith(".md") : entry.isDirectory() && existsSync6(join27(dir, entry.name, SKILL_FILE)))
     ).length;
   } catch {
     return 0;
@@ -28270,7 +28525,7 @@ function countSkills(dir) {
 }
 
 // extension-link.ts
-import { randomUUID as randomUUID13 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 var PING_INTERVAL_MS = 2e4;
 var DEFAULT_TIMEOUT_MS2 = 3e4;
 var DESCRIBE_TIMEOUT_MS = 1e4;
@@ -28292,7 +28547,7 @@ var ExtensionLink = class {
       log("extension socket error", error51);
       this.dispose("socket error");
     });
-    this.ping = setInterval(() => this.send({ t: "ping", id: randomUUID13() }), PING_INTERVAL_MS);
+    this.ping = setInterval(() => this.send({ t: "ping", id: randomUUID14() }), PING_INTERVAL_MS);
   }
   socket;
   onClose;
@@ -28316,11 +28571,11 @@ var ExtensionLink = class {
     return !this.closed && this.socket.readyState === this.socket.OPEN;
   }
   invoke(action, input2, opts) {
-    const frame = { t: "invoke", id: randomUUID13(), action, input: input2, ...opts };
+    const frame = { t: "invoke", id: randomUUID14(), action, input: input2, ...opts };
     return this.request(frame, timeoutFor(action, input2));
   }
   async describe() {
-    const result = await this.request({ t: "describe", id: randomUUID13() }, DESCRIBE_TIMEOUT_MS);
+    const result = await this.request({ t: "describe", id: randomUUID14() }, DESCRIBE_TIMEOUT_MS);
     return result.ok ? result.data : null;
   }
   send(frame) {
@@ -28771,8 +29026,8 @@ async function startDaemon({ version: version3, idleExit = true }) {
       writeGuardrailSetting(request.setting, request.value);
       log(`guardrail ${request.setting} \u2192 ${request.value === null ? "default" : String(request.value)}`);
     }
-    const config4 = readAgentConfig();
-    return success(guardrailSettings(config4.guardrails ?? {}, config4.requireApproval, configPath));
+    const config5 = readAgentConfig();
+    return success(guardrailSettings(config5.guardrails ?? {}, config5.requireApproval, configPath));
   }
   async function pushAgentState(target) {
     const state = await agentState(readAgentConfig());
@@ -28780,7 +29035,7 @@ async function startDaemon({ version: version3, idleExit = true }) {
   }
   function skillCatalogNow(refresh = false) {
     try {
-      const config4 = readAgentConfig();
+      const config5 = readAgentConfig();
       const skills = loadSkills().map((skill) => ({
         name: skill.name,
         description: skill.description,
@@ -28788,7 +29043,7 @@ async function startDaemon({ version: version3, idleExit = true }) {
         domains: skill.domains,
         source: skill.source
       }));
-      return success({ agent: config4.agent, skills, agentSkills: agentSkills(config4, { refresh }) });
+      return success({ agent: config5.agent, skills, agentSkills: agentSkills(config5, { refresh }) });
     } catch (error51) {
       return failure("AGENT_FAILED", String(error51));
     }
@@ -28849,8 +29104,8 @@ async function startDaemon({ version: version3, idleExit = true }) {
       return { tools: running[0].tools.filter(({ name }) => !offer.withheld.includes(name)), reserved: offer.reserved };
     }
     const tools = routeFor(binding)?.tools ?? bundled;
-    const config4 = readAgentConfig();
-    const policy = policyFrom(config4.guardrails, config4.requireApproval);
+    const config5 = readAgentConfig();
+    const policy = policyFrom(config5.guardrails, config5.requireApproval);
     const denied = (action) => decide({ action, input: {}, caller: "external", scope: ANYWHERE }, policy).effect === "deny";
     return {
       tools: tools.filter(({ name }) => !((name === INJECT_ACTION || name === RUN_CODE_ACTION) && denied(name))),
@@ -28971,15 +29226,15 @@ async function startDaemon({ version: version3, idleExit = true }) {
     return persistDownload(action, persistScreenshot(action, input2, result, opts?.saveTo), opts?.hosts);
   }
   async function invokeExternal(target, action, input2, client) {
-    const toolId = randomUUID14();
+    const toolId = randomUUID15();
     const tell = (event) => {
       if (target?.isOpen) target.send({ t: "run", id: EXTERNAL_RUN_ID, event });
     };
     tell({ kind: "tool", toolId, action, input: input2, source: "external" });
-    const config4 = readAgentConfig();
+    const config5 = readAgentConfig();
     const decision = decide(
       { action, input: input2, caller: "external", scope: ANYWHERE },
-      policyFrom(config4.guardrails, config4.requireApproval)
+      policyFrom(config5.guardrails, config5.requireApproval)
     );
     if (decision.effect === "deny") {
       log(`external ${client} \u2192 ${action} blocked: ${describe4(decision)}`);
@@ -29084,7 +29339,8 @@ X-Browsentic-Reason: ${reason}\r
 // package.json
 var package_default = {
   name: "browsentic",
-  version: "0.7.4",
+  mcpName: "io.github.imshaikot/browsentic",
+  version: "0.7.5",
   description: "A browser extension with an AI side panel that hands your real, logged-in browser to the AI agent you already run. Installs the extension, runs the local daemon, and optionally speaks MCP.",
   type: "module",
   license: "MIT",