github-router 0.3.73 → 0.3.74

package/dist/browser-ext/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "github-router browser bridge",
   "short_name": "gh-router-browser",
-  "version": "0.3.73",
+  "version": "0.3.74",
   "description": "Bridge between Claude (via github-router /mcp) and the browser. Implements tab control, navigation, clicks, form fill, downloads, screenshots, devtools eval. Blocks navigation to chrome://settings.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJElxuBlonBS3TVW9FJN0mGTtShB3L1hoaYf6k39SOr1ogGYmF90EjRxy1i21k9wQQjPf26bcBu/9X67KrQjQV0uB38CaNukgiSeoLjfptN811u+PJHx6BP+jx3Qa6/3VenNPxHC8WEU0GXql8QSjIHEyCwKb6fMASXOK94JyB5Ywov2x8mt/+9ncqBBBMVzf6r5Sagy4PL1XnryLsuADD/vOEkPet8wXgH/Oj7v5tTsQQZ7U1JT51PoDs2BFnXc5v3TkVgZwd32k3ONh+nkDw1Hof+4zwUGOyJE6eMrlYzRlKM4Qxdf9JpavQvqfieAbTRWcyKeclnHeoIfE7cDBQIDAQAB",
   "background": {

package/dist/main.js

@@ -13,7 +13,7 @@ import * as path$1 from "node:path";
 import path, { dirname, join } from "node:path";
 import process$1 from "node:process";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
-import fs$1, { chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
+import fs$1, { chmodSync, closeSync, cpSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { performance } from "node:perf_hooks";
 import { createInterface } from "node:readline";
@@ -5674,33 +5674,61 @@ function packageRoot() {
 	} catch {}
 	return process$1?.cwd?.() ?? ".";
 }
+function fileExists(p) {
+	return existsSync(p);
+}
+/** Stable materialized extension dir: `<APP_DIR>/browser-ext`. */
+function stableExtensionDir() {
+	return path.join(PATHS.APP_DIR, "browser-ext");
+}
+/** Stable materialized bridge bundle: `<APP_DIR>/browser-bridge/index.js`. */
+function stableBridgeBundlePath() {
+	return path.join(PATHS.APP_DIR, "browser-bridge", "index.js");
+}
 /**
-* Absolute path to the extension's source directory. Layouts:
+* The bundled (shipped) extension dir — the SOURCE for provisioning,
+* never the runtime load path. Layouts:
 *
 *   - Installed via npm: `<package>/dist/browser-ext/` (the published
 *     tarball ships only `dist/`, see package.json "files"). The build
-*     step copies `src/browser-ext/` → `dist/browser-ext/` so the
-*     unpacked extension is available to users.
-*   - Running from this repo: dist/browser-ext/ if it exists (after
-*     `bun run build`), else src/browser-ext/ for fresh-clone-pre-build.
+*     step copies `src/browser-ext/` → `dist/browser-ext/`.
+*   - Running from this repo: `dist/browser-ext/` if built, else
+*     `src/browser-ext/` for fresh-clone-pre-build.
+*/
+function bundledExtensionDir() {
+	const root = packageRoot();
+	const distExt = path.join(root, "dist", "browser-ext");
+	if (fileExists(path.join(distExt, "manifest.json"))) return distExt;
+	return path.join(root, "src", "browser-ext");
+}
+/** The bundled (shipped) bridge entrypoint — SOURCE for provisioning. */
+function bundledBridgeBundlePath() {
+	return path.join(packageRoot(), "dist", "browser-bridge", "index.js");
+}
+/**
+* Runtime extension directory — the path Chrome "Load unpacked"s and the
+* path the NMH manifest's stable-id derivation reads. Resolution order:
 *
-* Override with `GH_ROUTER_BROWSER_EXT_DIR=<abs path>` for development
-* (lets you point at a working copy of the extension you're editing
-* without rebuilding between iterations).
+*   1. `GH_ROUTER_BROWSER_EXT_DIR=<abs path>` dev override (lets you
+*      point at a working copy you're editing without rebuilding).
+*   2. The stable materialized copy under `<APP_DIR>` if present.
+*   3. The bundled dir (dist, then src) as the pre-provision fallback.
 */
 function extensionDir() {
 	const override = process$1.env.GH_ROUTER_BROWSER_EXT_DIR;
 	if (override && override.length > 0) return override;
-	const root = packageRoot();
-	const distExt = path.join(root, "dist", "browser-ext");
-	try {
-		if (readFileSync(path.join(distExt, "manifest.json")).length > 0) return distExt;
-	} catch {}
-	return path.join(root, "src", "browser-ext");
+	if (fileExists(path.join(stableExtensionDir(), "manifest.json"))) return stableExtensionDir();
+	return bundledExtensionDir();
 }
-/** Absolute path to the bundled bridge entrypoint. */
+/**
+* Runtime bridge bundle path — what the launcher shim invokes. Prefers
+* the stable materialized copy; falls back to the bundled bundle when
+* provisioning hasn't run yet (or couldn't, on a fresh unbuilt checkout).
+*/
 function bridgeBundlePath() {
-	return path.join(packageRoot(), "dist", "browser-bridge", "index.js");
+	const stable = stableBridgeBundlePath();
+	if (fileExists(stable)) return stable;
+	return bundledBridgeBundlePath();
 }
 function appBrowserMcpDir() {
 	const dir = path.join(PATHS.APP_DIR, "browser-mcp");
@@ -5828,6 +5856,164 @@ function installNativeHostForAll(browsers) {
 	return results;
 }
 
+//#endregion
+//#region src/lib/browser-mcp/provision.ts
+/** Sidecar holding the content signature of the last materialized copy. */
+const SIGNATURE_FILE = ".provisioned";
+/** Source files excluded from both the copy and the content signature. */
+const EXCLUDED_FILES = new Set(["README.md", SIGNATURE_FILE]);
+let _provisioned = false;
+let _inFlight;
+/**
+* Materialize the extension + bridge into the stable app-dir and stamp
+* the running version. Single-flight + once-guarded so the startup fire-
+* and-forget and the lazy install-check call collapse to one run per
+* process. Resolves (never rejects) regardless of outcome.
+*/
+function provisionBrowserAssets() {
+	if (_provisioned) return Promise.resolve();
+	if (_inFlight) return _inFlight;
+	_inFlight = _provisionImpl().finally(() => {
+		_inFlight = void 0;
+	});
+	return _inFlight;
+}
+async function _provisionImpl() {
+	try {
+		if (process.env.GH_ROUTER_DISABLE_BROWSER_PROVISION === "1") return;
+		const srcExtDir = bundledExtensionDir();
+		const srcBridge = bundledBridgeBundlePath();
+		if (!existsSync(srcBridge)) return;
+		const destExtDir = stableExtensionDir();
+		const destBridge = stableBridgeBundlePath();
+		const sigPath = path.join(destExtDir, SIGNATURE_FILE);
+		const signature = computeSignature(srcExtDir, srcBridge);
+		const upToDate = existsSync(path.join(destExtDir, "manifest.json")) && existsSync(destBridge) && readSignature(sigPath) === signature;
+		let fullySynced = true;
+		if (!upToDate) {
+			materializeExtension(srcExtDir, destExtDir);
+			const stampOk = stampVersion(destExtDir);
+			const bridgeUpdated = tryMaterializeBridge(srcBridge, destBridge);
+			if (stampOk && bridgeUpdated) writeSignature(sigPath, signature);
+			else fullySynced = false;
+		}
+		let hostOk = true;
+		try {
+			const browsers = detectSupportedBrowsers();
+			if (browsers.length > 0) installNativeHostForAll(browsers);
+		} catch (err) {
+			hostOk = false;
+			consola.debug("[browser-mcp] native-host install during provision failed:", err);
+		}
+		if (fullySynced && hostOk) _provisioned = true;
+	} catch (err) {
+		consola.debug("[browser-mcp] provisionBrowserAssets failed:", err);
+	}
+}
+function computeSignature(srcExtDir, srcBridge) {
+	const h = createHash("sha256");
+	let names;
+	try {
+		names = readdirSync(srcExtDir).filter((n) => !EXCLUDED_FILES.has(n)).sort();
+	} catch {
+		names = [];
+	}
+	for (const name$1 of names) {
+		h.update(name$1);
+		try {
+			h.update(readFileSync(path.join(srcExtDir, name$1)));
+		} catch {
+			h.update(`\x00unreadable:${name$1}\x00`);
+		}
+	}
+	h.update("bridge");
+	try {
+		h.update(readFileSync(srcBridge));
+	} catch {
+		h.update("\0missing:bridge\0");
+	}
+	h.update(`\x00version:${getPackageVersion()}\x00`);
+	return h.digest("hex");
+}
+function readSignature(sigPath) {
+	try {
+		return readFileSync(sigPath, "utf8").trim();
+	} catch {
+		return;
+	}
+}
+function writeSignature(sigPath, signature) {
+	writeFileSync(sigPath, signature, "utf8");
+}
+/**
+* Copy the bundled extension dir into the stable dir, overwriting in
+* place. README and our sidecar are filtered out. We do NOT prune extra
+* files in the destination (a stale file left from an older version is
+* harmless — Chrome loads only what the manifest references).
+*/
+function materializeExtension(srcDir, destDir) {
+	mkdirSync(destDir, { recursive: true });
+	cpSync(srcDir, destDir, {
+		recursive: true,
+		force: true,
+		filter: (s) => !EXCLUDED_FILES.has(path.basename(s))
+	});
+}
+/**
+* Copy the bridge bundle into the stable path via temp-write + atomic
+* rename. Returns true on update; false when the destination couldn't be
+* replaced but a usable stable bridge already exists (e.g. Windows
+* EBUSY because a bridge process holds the old file — acceptable, the
+* old bridge is the version about to be reloaded). Throws only when there
+* is no usable bridge at all.
+*/
+function tryMaterializeBridge(srcBridge, destBridge) {
+	mkdirSync(path.dirname(destBridge), { recursive: true });
+	const tmp = `${destBridge}.tmp-${process.pid}`;
+	try {
+		writeFileSync(tmp, readFileSync(srcBridge));
+		renameSync(tmp, destBridge);
+		return true;
+	} catch (err) {
+		try {
+			rmSync(tmp, { force: true });
+		} catch {}
+		if (existsSync(destBridge)) {
+			consola.debug("[browser-mcp] bridge update deferred (file in use?):", err);
+			return false;
+		}
+		throw err;
+	}
+}
+/**
+* Stamp the running proxy version into the materialized manifest — the
+* single place the version is set on launch. Returns true when the
+* manifest is in its intended end state (stamped, already-correct, or
+* deliberately left at the bundled stamp for a non-Chrome-compliant
+* version), false only when a read/write threw. Chrome requires
+* `manifest.version` to be 1-4 dot-separated integers, so a non-numeric
+* value (`"unknown"`, a prerelease/build semver) is left as the bundled
+* build-time stamp rather than written (which would make the unpacked
+* extension fail to load).
+*/
+function stampVersion(destExtDir) {
+	const version$2 = getPackageVersion();
+	if (!/^\d{1,9}(\.\d{1,9}){0,3}$/.test(version$2)) return true;
+	const manifestPath = path.join(destExtDir, "manifest.json");
+	try {
+		const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+		if (manifest.version === version$2) return true;
+		manifest.version = version$2;
+		const tmp = `${manifestPath}.tmp-${process.pid}`;
+		writeFileSync(tmp, `${JSON.stringify(manifest, null, 2)}\n`);
+		renameSync(tmp, manifestPath);
+		return true;
+	} catch (err) {
+		consola.debug("[browser-mcp] manifest version stamp failed:", err);
+		return false;
+	}
+}
+
 //#endregion
 //#region src/lib/browser-mcp/install-check.ts
 function readBridgeDiscovery() {
@@ -5988,6 +6174,7 @@ async function ensureBridgeReady() {
 }
 async function _ensureBridgeReadyImpl() {
 	__implInvocationsForTests++;
+	await provisionBrowserAssets();
 	const browsers = detectSupportedBrowsers();
 	if (browsers.length === 0) return buildInstallRequired("no_supported_browser", []);
 	if (!bridgeBundleExists()) return buildInstallRequired("bridge_bundle_missing", []);
@@ -17786,7 +17973,7 @@ function initProxyFromEnv() {
 //#endregion
 //#region package.json
 var name = "github-router";
-var version$1 = "0.3.73";
+var version$1 = "0.3.74";
 
 //#endregion
 //#region src/lib/approval.ts
@@ -19905,6 +20092,7 @@ const claude = defineCommand({
 			}
 		}
 		provisionAndIndexColbert();
+		if (browserToolsEnabled()) provisionBrowserAssets().catch((err) => consola.debug("Browser extension provisioning failed:", err));
 		const baseShutdown = async () => {
 			await removeOwnClaudeConfigMirror();
 		};
@@ -20017,6 +20205,7 @@ const codex = defineCommand({
 		runSelfUpdate({ selfUpdate: args["self-update"] !== false });
 		if (toolbeltEnabled()) provisionToolbelt().catch(() => {});
 		provisionAndIndexColbert();
+		if ((state.browseEnabled || process$1.env.GH_ROUTER_ENABLE_BROWSE === "1") && hasSupportedBrowserInstalled()) provisionBrowserAssets().catch((err) => consola.debug("Browser extension provisioning failed:", err));
 		const usingDefault = !args.model;
 		const requestedModel = args.model ?? DEFAULT_CODEX_MODEL;
 		enableFileLogging();
@@ -20391,6 +20580,7 @@ const start = defineCommand({
 		});
 		runSelfUpdate({ selfUpdate: args["self-update"] !== false });
 		provisionAndIndexColbert();
+		if (browserToolsEnabled()) provisionBrowserAssets().catch((err) => consola.debug("Browser extension provisioning failed:", err));
 		if (args.cc) generateClaudeCodeCommand(serverUrl, args.model);
 		if (args.cx) generateCodexCommand(serverUrl, args.model);
 		consola.box(`🌐 Usage Viewer: https://animeshkundu.github.io/github-router/dashboard.html?endpoint=${serverUrl}/usage`);