github-router 0.3.255 → 0.3.256

package/dist/{peer-mcp-personas-BDet588n.js → peer-mcp-personas-BPl6_V2A.js}

@@ -16556,13 +16556,27 @@ async function runUnifiedCodeSearch(input, signal) {
 //#endregion
 //#region src/lib/browser-mcp/browser-detect.ts
 let cached;
-function probeWindows() {
-	const found = [];
-	const probe = (subkey) => {
+function probeWindowsRegistry(subkey) {
+	try {
+		execFileSync("reg.exe", [
+			"query",
+			`HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\${subkey}`,
+			"/ve"
+		], {
+			windowsHide: true,
+			timeout: 3e3,
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		});
+		return true;
+	} catch {
 		try {
 			execFileSync("reg.exe", [
 				"query",
-				`HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\${subkey}`,
+				`HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\${subkey}`,
 				"/ve"
 			], {
 				windowsHide: true,
@@ -16575,43 +16589,27 @@ function probeWindows() {
 			});
 			return true;
 		} catch {
-			try {
-				execFileSync("reg.exe", [
-					"query",
-					`HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\${subkey}`,
-					"/ve"
-				], {
-					windowsHide: true,
-					timeout: 3e3,
-					stdio: [
-						"ignore",
-						"pipe",
-						"ignore"
-					]
-				});
-				return true;
-			} catch {
-				return false;
-			}
+			return false;
 		}
-	};
-	if (probe("chrome.exe")) found.push("chrome");
-	if (probe("msedge.exe")) found.push("edge");
-	if (!found.includes("chrome")) {
-		const localApp = process$1.env.LOCALAPPDATA;
-		const pf = process$1.env["PROGRAMFILES"];
-		const pf86 = process$1.env["PROGRAMFILES(X86)"];
-		if ([
-			localApp ? path.join(localApp, "Google", "Chrome", "Application", "chrome.exe") : void 0,
-			pf ? path.join(pf, "Google", "Chrome", "Application", "chrome.exe") : void 0,
-			pf86 ? path.join(pf86, "Google", "Chrome", "Application", "chrome.exe") : void 0
-		].filter((p) => typeof p === "string").some(existsSync)) found.push("chrome");
-	}
-	if (!found.includes("edge")) {
-		const pf86 = process$1.env["PROGRAMFILES(X86)"];
-		const pf = process$1.env["PROGRAMFILES"];
-		if ([pf86 ? path.join(pf86, "Microsoft", "Edge", "Application", "msedge.exe") : void 0, pf ? path.join(pf, "Microsoft", "Edge", "Application", "msedge.exe") : void 0].filter((p) => typeof p === "string").some(existsSync)) found.push("edge");
 	}
+}
+/** Well-known install locations. Per-user installs land in LocalAppData; system installs in Program Files. */
+function windowsLiteralPaths(browser) {
+	const localApp = process$1.env.LOCALAPPDATA;
+	const pf = process$1.env["PROGRAMFILES"];
+	const pf86 = process$1.env["PROGRAMFILES(X86)"];
+	return (browser === "chrome" ? [
+		localApp ? path.join(localApp, "Google", "Chrome", "Application", "chrome.exe") : void 0,
+		pf ? path.join(pf, "Google", "Chrome", "Application", "chrome.exe") : void 0,
+		pf86 ? path.join(pf86, "Google", "Chrome", "Application", "chrome.exe") : void 0
+	] : [pf86 ? path.join(pf86, "Microsoft", "Edge", "Application", "msedge.exe") : void 0, pf ? path.join(pf, "Microsoft", "Edge", "Application", "msedge.exe") : void 0]).filter((p) => typeof p === "string");
+}
+function probeWindows() {
+	const found = [];
+	if (windowsLiteralPaths("chrome").some(existsSync)) found.push("chrome");
+	if (windowsLiteralPaths("edge").some(existsSync)) found.push("edge");
+	if (!found.includes("chrome") && probeWindowsRegistry("chrome.exe")) found.push("chrome");
+	if (!found.includes("edge") && probeWindowsRegistry("msedge.exe")) found.push("edge");
 	return found;
 }
 function probeMacOS() {
@@ -17184,6 +17182,13 @@ function loadExpectedExtensionVersion() {
 */
 const DEV_VERSION_SENTINEL = "0.0.0";
 /**
+* Stand-in for `version_mismatch.loaded` when the loaded extension is
+* too old to report a version at all (it predates the `__hello__`
+* handshake). Kept human-readable because it is rendered verbatim into
+* the model-facing instructions.
+*/
+const UNKNOWN_LOADED_VERSION = "unknown (extension reported no version)";
+/**
 * Track which `(extensionId, expectedVersion)` pairs we've already
 * tried to auto-reload in this process. Prevents an infinite reload
 * loop if the on-disk version somehow stays ahead of what the browser
@@ -17192,6 +17197,15 @@ const DEV_VERSION_SENTINEL = "0.0.0";
 */
 const attemptedReloads = /* @__PURE__ */ new Set();
 /**
+* `auto_installed` for the `extension_outdated` payloads below.
+*
+* Reaching those branches means the bridge is running and the extension is
+* connected, so the native-messaging manifest is provably already correct —
+* nothing was installed, and claiming otherwise would point the reader at a
+* step that is not the remedy. The remedy is reloading the extension.
+*/
+const NOTHING_AUTO_INSTALLED = Object.freeze([]);
+/**
 * Send POST /reload to the bridge — triggers __reload__ control frame
 * over native messaging, which the extension's handler dispatches into
 * chrome.runtime.reload(). After this returns, the OLD bridge process
@@ -17236,7 +17250,10 @@ function buildInstallRequired(reason, autoInstalled, versionMismatch) {
 	const instructions = (() => {
 		if (reason === "no_supported_browser") return "No Chrome or Edge installation was detected on this host. Install one and restart the github-router proxy.";
 		if (reason === "bridge_bundle_missing") return "The bridge bundle is missing. Run `bun run build` from the github-router checkout to produce dist/browser-bridge/index.js, then retry.";
-		if (reason === "extension_outdated" && versionMismatch) return `Your loaded github-router browser extension is version ${versionMismatch.loaded} but the github-router package shipped version ${versionMismatch.expected}. Auto-reload was attempted and did not converge — Chrome likely disabled the extension because the new manifest declares new permissions. Open chrome://extensions (or edge://extensions), find the github-router extension card, click "Enable" if it's disabled, then click the reload arrow. Retry this tool call afterwards.`;
+		if (reason === "extension_outdated" && versionMismatch) {
+			if (versionMismatch.loaded === UNKNOWN_LOADED_VERSION) return `Your loaded github-router browser extension did not report a version, so the proxy cannot confirm it is up to date and auto-reload could not fix it (the github-router package shipped version ${versionMismatch.expected}). This usually means the loaded extension predates the auto-reload support and has been silently running stale. Open chrome://extensions (or edge://extensions), find the github-router extension card, and click the reload arrow; if the card is missing, click "Load unpacked" and select the load_unpacked_dir above. If it still reports no version afterwards, restart the github-router proxy so the native bridge is refreshed too.`;
+			return `Your loaded github-router browser extension is version ${versionMismatch.loaded} but the github-router package shipped version ${versionMismatch.expected}. Auto-reload was attempted and did not converge — Chrome likely disabled the extension because the new manifest declares new permissions. Open chrome://extensions (or edge://extensions), find the github-router extension card, click "Enable" if it's disabled, then click the reload arrow. Retry this tool call afterwards.`;
+		}
 		return "Open chrome://extensions (or edge://extensions), enable Developer Mode, click 'Load unpacked', and select the load_unpacked_dir above. Then retry this tool call. If you just updated the github-router package, an extension already loaded may need to be reloaded — click the reload arrow on its card.";
 	})();
 	return {
@@ -17253,6 +17270,31 @@ function buildInstallRequired(reason, autoInstalled, versionMismatch) {
 	};
 }
 /**
+* Is the loaded extension out of date with respect to the shipped one?
+*
+* `loaded === undefined` means the extension reported no version. The
+* bridge has echoed `extension_loaded_version` since the very release
+* that added the `__hello__` handshake, so on any bridge new enough to
+* run this code, a CONNECTED extension that reports no version is one
+* that predates the handshake — the most stale state there is. Treating
+* that absence as "not checkable" failed open permanently for exactly
+* the extensions this check exists to catch: one months out of date kept
+* serving requests while silently ignoring newer arguments, and nothing
+* ever said so. Absence is a staleness signal.
+*
+* The dev sentinel is exempt on both sides: a source checkout loads at
+* "0.0.0" and is expected to diverge.
+*
+* Exported for tests — this predicate is the whole invariant, and it had
+* no coverage when it silently regressed.
+*/
+function isExtensionStale(expected, loaded) {
+	if (typeof expected !== "string" || expected === DEV_VERSION_SENTINEL) return false;
+	if (typeof loaded !== "string") return true;
+	if (loaded === DEV_VERSION_SENTINEL) return false;
+	return loaded !== expected;
+}
+/**
 * Full pre-flight. Returns either `{install_required: false, port,
 * token, pid}` (bridge ready, extension connected) or an
 * `install_required` payload the dispatcher hands directly to the
@@ -17317,28 +17359,30 @@ async function _ensureBridgeReadyImpl() {
 	const browsers = detectSupportedBrowsers();
 	if (browsers.length === 0) return buildInstallRequired("no_supported_browser", []);
 	if (!bridgeBundleExists()) return buildInstallRequired("bridge_bundle_missing", []);
-	const autoInstalled = installNativeHostForAll(browsers).flatMap((r) => [`nmh_manifest_${r.browser}`]);
+	const installNow = () => installNativeHostForAll(browsers).map((r) => `nmh_manifest_${r.browser}`);
 	const discovery = readBridgeDiscovery();
-	if (!discovery) return buildInstallRequired("bridge_not_running", autoInstalled);
+	if (!discovery) return buildInstallRequired("bridge_not_running", installNow());
 	const health = await probeHealth(discovery.port, discovery.token);
-	if (!health || !health.ok) return buildInstallRequired("bridge_not_running", autoInstalled);
-	if (!health.extension_connected) return buildInstallRequired("extension_not_loaded", autoInstalled);
+	if (!health || !health.ok) return buildInstallRequired("bridge_not_running", installNow());
+	if (!health.extension_connected) return buildInstallRequired("extension_not_loaded", installNow());
 	const expectedVersion = loadExpectedExtensionVersion();
 	const loadedVersion = health.extension_loaded_version;
-	if (typeof expectedVersion === "string" && typeof loadedVersion === "string" && expectedVersion !== DEV_VERSION_SENTINEL && loadedVersion !== DEV_VERSION_SENTINEL && expectedVersion !== loadedVersion) {
+	const loadedUnknown = typeof loadedVersion !== "string";
+	if (typeof expectedVersion === "string" && isExtensionStale(expectedVersion, loadedVersion)) {
+		const loadedLabel = loadedUnknown ? UNKNOWN_LOADED_VERSION : loadedVersion;
 		const reloadKey = `${loadStableExtensionId()}::${expectedVersion}`;
-		if (attemptedReloads.has(reloadKey)) return buildInstallRequired("extension_outdated", autoInstalled, {
-			loaded: loadedVersion,
+		if (attemptedReloads.has(reloadKey)) return buildInstallRequired("extension_outdated", NOTHING_AUTO_INSTALLED, {
+			loaded: loadedLabel,
 			expected: expectedVersion
 		});
 		attemptedReloads.add(reloadKey);
-		if (!await postReload(discovery.port, discovery.token)) return buildInstallRequired("extension_outdated", autoInstalled, {
-			loaded: loadedVersion,
+		if (!await postReload(discovery.port, discovery.token)) return buildInstallRequired("extension_outdated", NOTHING_AUTO_INSTALLED, {
+			loaded: loadedLabel,
 			expected: expectedVersion
 		});
 		const newDiscovery = await pollUntilExtensionVersion(expectedVersion, 3e3, 150);
-		if (!newDiscovery) return buildInstallRequired("extension_outdated", autoInstalled, {
-			loaded: loadedVersion,
+		if (!newDiscovery) return buildInstallRequired("extension_outdated", NOTHING_AUTO_INSTALLED, {
+			loaded: loadedLabel,
 			expected: expectedVersion
 		});
 		return {
@@ -17855,6 +17899,30 @@ async function browserPreflight(tool, args) {
 	if (ready.install_required) return { envelope: installRequiredToolResult(ready) };
 	return { envelope: void 0 };
 }
+const WINDOW_POLICIES = [
+	"deny",
+	"restore",
+	"foreground"
+];
+const DEFAULT_WINDOW_POLICY = "foreground";
+/**
+* Resolve the window-remediation policy for pixel capture.
+*
+* `captureVisibleTab` cannot produce a frame for a window the browser
+* is not painting, so capturing against a minimized window requires
+* making it paintable first. Whether the proxy is allowed to touch the
+* user's window state is the user's call, not the model's — so it comes
+* from the environment and is injected here, rather than being an
+* argument the model chooses. Note this is a usability control, not a
+* security boundary: the default is the permissive setting, so a model
+* that simply omits the argument already gets the most intrusive
+* behavior. The lever that actually restrains the proxy is setting this
+* env var to `deny`.
+*/
+function resolveWindowPolicy() {
+	const raw = process.env.GH_ROUTER_BROWSER_WINDOW_POLICY?.trim().toLowerCase();
+	return WINDOW_POLICIES.includes(raw ?? "") ? raw : DEFAULT_WINDOW_POLICY;
+}
 /**
 * Real dispatcher for any browser_* tool. Used by the entries in
 * src/lib/browser-mcp/index.ts. Returns the standard MCP tool-result
@@ -17869,10 +17937,14 @@ async function dispatchBrowserTool(tool, args, signal, opts = {}) {
 	const { defaultMs, maxMs } = pickTimeout(tool);
 	const callerTimeout = typeof opts.timeoutMs === "number" && opts.timeoutMs > 0 ? Math.min(opts.timeoutMs, maxMs) : defaultMs;
 	try {
+		const callArgs = tool === "browser_screenshot" ? {
+			...args,
+			windowPolicy: resolveWindowPolicy()
+		} : args;
 		const resp = await bridgeCall({
 			port: ready.port,
 			token: ready.token
-		}, tool, args, callerTimeout, signal);
+		}, tool, callArgs, callerTimeout, signal);
 		if (resp.ok) {
 			logAudit$1({
 				tool,
@@ -19883,7 +19955,7 @@ const BROWSER_TOOLS = Object.freeze([
 	},
 	{
 		toolNameHttp: "browser_screenshot",
-		description: "Captures a screenshot of the visible area of a tab and returns it as an image you can actually look at, plus a small text envelope of capture metadata. It takes a tab id, an optional format (PNG default, JPEG for smaller bytes), and an optional JPEG quality. The tab must be active in its window, so this tool auto-activates the tab if needed and that changes which tab is focused. If a capture is rejected for exceeding a model's image-size limit, the most reliable lever is a smaller browser window; PNG is usually SMALLER than JPEG for ordinary UI and text pages, so switching format is not a dependable way to shrink one. JPEG plus a low quality helps mainly for photographic or dense-colour content. Use screenshot for visual layout, canvas, SVG, maps, or image-only regions; prefer browser_observe when page text and actionable state are enough.",
+		description: "Captures a screenshot of the visible area of a tab and returns it as an image you can actually look at, plus a small text envelope of capture metadata. It takes a tab id, an optional format (PNG default, JPEG for smaller bytes), and an optional JPEG quality. The tab must be active in its window, so this tool auto-activates the tab if needed and that changes which tab is focused. The browser does not paint a minimized window, so a capture needs one that is on screen: by default the tool un-minimizes and raises the target window, which takes focus (the operator can set GH_ROUTER_BROWSER_WINDOW_POLICY=restore to un-minimize without taking focus, or =deny to leave window state untouched and fail instead). If a capture still cannot produce a frame it fails fast with a named code rather than hanging. WINDOW_MINIMIZED and CAPTURE_STALLED mean the window is not visible (minimized, fully covered, on another virtual desktop, or a locked session) and will keep failing until that changes, so make the window visible instead of retrying; TARGET_CHANGED and QUEUE_BUSY mean another tab switch or capture got in the way and a plain retry is the right response. If a capture is rejected for exceeding a model's image-size limit, the most reliable lever is a smaller browser window; PNG is usually SMALLER than JPEG for ordinary UI and text pages, so switching format is not a dependable way to shrink one. JPEG plus a low quality helps mainly for photographic or dense-colour content. Use screenshot for visual layout, canvas, SVG, maps, or image-only regions; prefer browser_observe when page text and actionable state are enough.",
 		inputSchema: {
 			type: "object",
 			required: ["tabId"],
@@ -33694,4 +33766,4 @@ function enumerateInjectedMcpToolNames(groupKeys, opts = {}) {
 //#endregion
 export { scoutModel as $, ADVISOR_INTERNAL_TOOL_NAME as A, UPSTREAM_FETCH_TIMEOUT_MS as At, relayAnthropicStream as B, buildToolbeltAwareness as C, shouldUseInsecureTls as Ct, TOOLBELT_TOOLS$1 as D, DEFAULT_CODEX_MODEL as Dt, vscodeRipgrepPath as E, DEFAULT_CLAUDE_MODEL_FALLBACKS as Et, buildAnthropicErrorEvent as F, brainstormModel as G, handleMcpPost as H, buildOpenAIErrorEvent as I, browserToolsEnabled as J, browseAgentEnabled as K, isControllerClosedError as L, buildAdvisorStream as M, generateRandomPort as Mt, injectAdvisorTool as N, pickClaudeDefault as Nt, assetFor as O, DEFAULT_CODEX_MODEL_FALLBACKS as Ot, isAdvisorRequested as P, withInstallLock as Pt, reviewerModel as Q, logStreamError as R, availableToolCommands as S, DEFINITION_OF_GREATNESS as St, toolbeltSkipSet as T, toolbeltPathOverride as Tt, agentToolsEnabled as U, handleMcpDelete as V, artifactToolsEnabled as W, geminiAvailable as X, fleetToolsEnabled as Y, nativeSubagentModel as Z, appendPlanReminder as _, provisionAndIndexColbert as _t, buildPeerAwarenessSnippet as a, createMessages as at, runWorkerAgent as b, warmTreeSitterPool as bt, personasFor as c, resolveMcpToolTimeoutMs as ct, EXPLORE_DEFAULT_MODEL as d, createChatCompletions as dt, scribeModel as et, EXPLORE_DEFAULT_THINKING as f, MAX_RESPONSE_BODY_BYTES as ft, TEST_DEFAULT_MODEL as g, hasSupportedBrowserInstalled as gt, REVIEW_DEFAULT_MODEL as h, provisionBrowserAssets as ht, buildAgentPrompt as i, countTokens as it, ADVISOR_TOOL_INSTRUCTIONS as j, UPSTREAM_INACTIVITY_TIMEOUT_MS as jt, searchWeb as k, DEFAULT_PORT as kt, BROWSE_DEFAULT_MODEL as l, pickEndpoint as lt, PLAN_DEFAULT_MODEL as m, parseJsonOrDiagnose as mt, MCP_GROUPS as n, workerToolsEnabled as nt, buildPeerAwarenessSummary as o, getTokenCount as ot, IMPLEMENT_DEFAULT_MODEL as p, readResponseBodyCapped as pt, browserCompoundToolsEnabled as q, assertMcpToolSurfaceConsistent as r, shimDefaultsToXhigh as rt, enumerateInjectedMcpToolNames as s, assembleResponsesPayload as st, GROUP_META as t, standInToolEnabled as tt, DEFAULT_MODEL as u, createResponses as ut, resolveModeDefaults as v, extractTarGzMember as vt, toolbeltEnabled as w, collapsePathKeys as wt, buildEnv as x, CONDENSED_OPERATING_SEQUENCE as xt, resolveWorkerRunOpts as y, extractZipMember as yt, readIteratorWithTimeout as z };
 
-//# sourceMappingURL=peer-mcp-personas-BDet588n.js.map
+//# sourceMappingURL=peer-mcp-personas-BPl6_V2A.js.map