friend-assistant 0.1.36 → 0.1.37

package/README.md

@@ -154,6 +154,7 @@ Example: `friend config set voice.speakTyped false` keeps typed messages silent.
 | `FRIEND_ANTHROPIC_KEY` | An API key to use when none is saved. |
 | `FRIEND_PYTHON` | The Python program to use for voice, if the usual ones are not the right version. |
 | `FRIEND_WEB_DIR`, `FRIEND_PLUGIN_CATALOG`, `FRIEND_VOICE_DIR`, `FRIEND_CHROME_CONTROL` | Where the web app, the bundled plugins, the Python voice code and the Chrome control program (its `index.js`) are, for unusual installs. |
+| `CHROME_BRIDGE_PORT`, `CHROME_BRIDGE_HTTP_PORT` | Where Chrome control itself listens on this PC (its extension port, default 8765, and its MCP port, default 8766). Friend reaches both for you: other PCs only need Friend's own address. |
 | `FRIEND_DEMO_PORT` | The port `pnpm demo` listens on (default 8788). |
 
 ### From the source code
@@ -225,7 +226,7 @@ pnpm friend claude status
 
 A connector gives Friend the tools of an outside program or service through the MCP standard. Open **Esc, then Connectors** (or type `/connectors`). Ready-made entries:
 
-- **Chrome control** is a plugin that comes with Friend, so there is nothing else to install (no npm package, no `claude mcp add`). Open **Plugins**, install **Chrome control** (PIN), and Friend sets it up by itself from the copy inside it: the small helper Chrome needs and the extension folder. The one step only you can do is loading that folder in Chrome (chrome://extensions, Developer mode, Load unpacked; Configure shows the folder with a Copy button) and switching the extension on from its icon. Then switch the plugin on (PIN); Friend connects, and the plugin page shows whether the extension is linked. Every browser action still asks for your approval. Removing the plugin only removes Friend's connection; the helper and the extension stay, because other programs on your PC may use them. See [docs/guides/chrome-control.md](docs/guides/chrome-control.md).
+- **Chrome control** is a plugin that comes with Friend, so there is nothing else to install (no npm package, no `claude mcp add`). Open **Plugins**, install **Chrome control** (PIN), and Friend sets it up by itself from the copy inside it: the small helper Chrome needs and the extension folder. The one step only you can do is loading that folder in Chrome (chrome://extensions, Developer mode, Load unpacked; Configure shows the folder with a Copy button) and switching the extension on from its icon. Then switch the plugin on (PIN); Friend connects, and the plugin page shows whether the extension is linked. Every browser action still asks for your approval. Removing the plugin only removes Friend's connection; the helper and the extension stay, because other programs on your PC may use them. See [docs/guides/chrome-control.md](docs/guides/chrome-control.md). **From another PC** it needs no extra port: switch on *Allow other PCs* in Configure and Friend serves Chrome control on its own address (`/chrome/mcp` for apps, `/chrome/ws` for the extension), with a download link for the extension and the key shown only after your PIN.
 - **Gmail**: a community Gmail MCP server (`@gongrzhe/server-gmail-autoauth-mcp`). You create the Google OAuth credentials and sign in on Google's own page; **Friend never sees your Google password**. More mail and calendar connectors can be added the same way ("Something else": any program or any server by address).
 
 How it is kept safe:

package/dist/BUILD.json

@@ -1,5 +1,5 @@
 {
   "name": "friend-assistant",
-  "version": "0.1.36",
-  "builtAt": "2026-10-11T16:24:06.938Z"
+  "version": "0.1.37",
+  "builtAt": "2026-10-12T00:38:16.709Z"
 }

package/dist/chrome-control/extension/background.js

@@ -32,19 +32,33 @@ function parseTarget(c) {
     scheme = m[1].toLowerCase();
     raw = raw.slice(m[0].length);
   }
-  raw = raw.replace(/\/+$/, "");
+  // An address with a path (Friend's own, wss://name/chrome/ws) is used as it is: its port is the one in the address, not the port box.
+  let path = "";
+  const slash = raw.indexOf("/");
+  if (slash >= 0) {
+    path = raw.slice(slash).replace(/\/{2,}/g, "/").replace(/\/+$/, "");
+    raw = raw.slice(0, slash);
+    if (path && !/^\/[A-Za-z0-9._~/-]*$/.test(path)) return null;
+  }
   if (!raw) raw = "127.0.0.1";
+  let own = null;
+  const hp = /^(\[[0-9a-f:.]+\]|[^:[\]]+):(\d{1,5})$/i.exec(raw);
+  if (hp) {
+    raw = hp[1];
+    own = Number(hp[2]);
+  }
   if (/^[0-9a-f:]*:[0-9a-f:]*$/i.test(raw)) raw = `[${raw}]`; // bare IPv6
   const valid = /^[a-z0-9]([a-z0-9.-]*[a-z0-9])?$/i.test(raw) || /^\[[0-9a-f:.]+\]$/i.test(raw);
   if (!valid) return null;
-  const port = Number(c.port) || 8765;
-  const url = `${scheme}://${raw}:${port}`;
+  const port = own ?? (path ? null : Number(c.port) || 8765);
+  const where = `${raw}${port ? ":" + port : ""}${path}`;
+  const base = `${scheme}://${where}${path ? "" : "/"}`;
   try {
-    new URL(url);
+    new URL(base);
   } catch {
     return null;
   }
-  return { url, label: `${raw}:${port}`, local: LOCAL_HOSTS.has(raw.toLowerCase()) };
+  return { base, label: where, local: LOCAL_HOSTS.has(raw.toLowerCase()) && !path };
 }
 
 let ws = null;
@@ -290,7 +304,7 @@ async function doConnect() {
   if (!c.token) return setStatus("no token");
   if (nameTaken) return setStatus("name in use");
   setStatus("connecting");
-  const sock = new WebSocket(`${target.url}/?token=${encodeURIComponent(c.token)}&name=${encodeURIComponent(c.name)}`);
+  const sock = new WebSocket(`${target.base}?token=${encodeURIComponent(c.token)}&name=${encodeURIComponent(c.name)}`);
   ws = sock;
   sock.onopen = () => {
     stats = { attached: attached.size, commands: 0, last: "", lastAt: 0 };

package/dist/chrome-control/extension/popup.js

@@ -31,8 +31,8 @@ function look(s) {
     return { cls: "state-nokey", word: "NO KEY", sub: isRemote(s.host) ? "PASTE THE SERVER'S ACCESS KEY" : "RUN: NPX CHROME-CONTROL-MCP SETUP" };
   }
   if (s.status === "name in use") return { cls: "state-nokey", word: "NAME TAKEN", sub: "ANOTHER CHROME USES THIS NAME. RENAME THIS ONE" };
-  if (s.status === "bad host") return { cls: "state-nokey", word: "BAD HOST", sub: "USE A DOMAIN OR IP, NO PATH" };
-  const where = isRemote(s.host) ? `${hostName(s.host).toUpperCase()}:${port}` : `PORT ${port}`;
+  if (s.status === "bad host") return { cls: "state-nokey", word: "BAD HOST", sub: "USE A DOMAIN, AN IP, OR WSS://NAME/CHROME/WS" };
+  const where = isRemote(s.host) ? (hostName(s.host).includes("/") ? hostName(s.host).toUpperCase() : `${hostName(s.host).toUpperCase()}:${port}`) : `PORT ${port}`;
   return { cls: "state-nosig", word: "NO SIGNAL", sub: `MCP SERVER NOT FOUND ON ${where}` };
 }