instar 1.3.1669 → 1.3.1671

package/dist/core/PostUpdateMigrator.js

@@ -88,7 +88,7 @@ import { matchTestIdentity, verifyAllowTestIdentity, loadTestIdentityKey, } from
 import { readRegistryHighWater, setRegistryHighWater } from './registryHighWater.js';
 import { ITERATIVE_CONVERGING_AUDIT_SKILL_CONTENT } from '../data/builtinSkillContent.js';
 import { SUBSCRIPTION_SIGNIN_SKILL_CONTENT } from '../data/builtinSkillContent.js';
-import { NORMAL_CHROME_BROWSER_SKILL_CONTENT, NORMAL_CHROME_BROWSER_SKILL_WINDOWS_APPENDIX } from '../data/builtinSkillContent.js';
+import { NORMAL_CHROME_BROWSER_LINUX_SECTION, NORMAL_CHROME_BROWSER_SKILL_CONTENT, NORMAL_CHROME_BROWSER_SKILL_WINDOWS_APPENDIX } from '../data/builtinSkillContent.js';
 import { ensureAgentOwnedMemoryAllHomes } from './AgentOwnedMemory.js';
 import { migrateStageBReleaseConfig, verifyBundledStageBReleaseEvidence } from './StageBActivationGate.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
@@ -362,7 +362,16 @@ The Codex CLI reads ONE shared user config (\`$CODEX_HOME/config.toml\`, default
  */
 export const NORMAL_CHROME_BROWSER_SKILL_V1_SHA256 = 'b440bad6f0d65c1c248dc9f2682183486dc118c74dd188194335ab4e0d3ecbd0';
 /** Present only in the cross-platform skill text: the idempotency marker for migrateNormalChromeBrowserSkill. */
-export const NORMAL_CHROME_BROWSER_SKILL_MARKER = '## Drivers by operating system';
+export const NORMAL_CHROME_BROWSER_SKILL_MARKER = '### Linux (xdrive.sh, the agent display)';
+/** The cross-platform appendix heading. An edited copy carrying it needs only its Linux subsection changed. */
+export const NORMAL_CHROME_BROWSER_SKILL_APPENDIX_HEADING = '## Drivers by operating system';
+/** The Linux subsection of the macOS + Windows text, before the driver existed. */
+export const NORMAL_CHROME_BROWSER_SKILL_OLD_LINUX_HEADING = '### Linux (no Windows underneath)';
+/**
+ * SHA-256 (LF-normalized) of the macOS + Windows SKILL.md
+ * (tests/fixtures/skills/normal-chrome-browser-v2.md pins the bytes; the unit test re-derives this).
+ */
+export const NORMAL_CHROME_BROWSER_SKILL_V2_SHA256 = '4577ca18462c0e7ef3f239ea8b14c55f5f3271dddd87042ecbf92ee8ad54451e';
 /** The full heading of the retired Jev review-flag-shadow card (spec retire-staged-features-2026-10-25). */
 export const JEV_REVIEW_FLAG_CARD_RETIRED_HEADING = '### Jev Review-Flag Shadow (log-only "does this reply need your review?" measurement)';
 /**
@@ -462,18 +471,18 @@ Some web tasks must happen as a specific signed-in account, and account pages (s
 }
 /** The heading PR 2283 shipped (spec normal-chrome-builtin-skill); replaced in place by the heading below. */
 export const NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V1 = '### Normal-Chrome browser (account-bound web tasks, macOS)';
-/** The current heading (spec normal-chrome-cross-platform); the content-sniff key for migrateClaudeMd and the shadows. */
-export const NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING = '### Normal-Chrome browser (account-bound web tasks, macOS + Windows)';
+/** The macOS + Windows heading (spec normal-chrome-cross-platform); replaced in place by the heading below. */
+export const NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V2 = '### Normal-Chrome browser (account-bound web tasks, macOS + Windows)';
+/** The current heading (spec normal-chrome-linux); the content-sniff key for migrateClaudeMd and the shadows. */
+export const NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING = '### Normal-Chrome browser (account-bound web tasks, macOS + Windows + Linux)';
 /**
- * Normal-Chrome browser awareness (specs normal-chrome-builtin-skill, normal-chrome-cross-platform).
- * Shared by generateClaudeMd (new agents) and migrateClaudeMd (existing agents) so the two never
- * drift. Content-sniff key: NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING; a section under the v1 heading
- * is replaced in place.
+ * The CLAUDE.md section exactly as the cross-platform release rendered it. Kept so the migration can
+ * prove the section it replaces IS the shipped text, and leave an edited one alone.
  */
-export function NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION() {
+export function NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V2() {
     return `
 
-${NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING}
+${NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V2}
 
 Some web tasks must happen as a specific signed-in account, and account pages (sign-in, billing, settings, usage) often refuse or behave differently for an automated browser. The \`/normal-chrome-browser\` skill is the proven method on macOS AND Windows: a NORMAL Chrome per account profile, no remote-debugging port, no automation flags. Helpers in \`.instar/scripts/browser/\`: macOS \`chrome-launch.sh\` / \`chrome-js.sh\` / \`chrome-mainworld.sh\` (pid-targeted Apple Events, JavaScript in the page); Windows \`ndrive.sh\` running \`native-drive.ps1\` (written by PP: real OS input + the UI Automation tree; an agent in WSL is on Windows for this as long as \`ndrive.sh\` reaches \`powershell.exe\`). Linux with no Windows underneath is not built (ACT-138): say so plainly. Find the profile for an account with \`GET /playwright-profiles\` (503 = registry dark here: list the profile folders instead).
 - **When to use** (PROACTIVE — this is the trigger): any web task that has to be done as a signed-in account; a page that blocks or misbehaves under Playwright/CDP; a button that stays disabled; and BEFORE ever telling the operator a browser task "can't be done".
@@ -482,6 +491,21 @@ Some web tasks must happen as a specific signed-in account, and account pages (s
 - **Two rules that hold on every framework:** on Windows compare \`url\` at the HOST boundary (the display string must start with the expected host followed by \`/\`; never a substring match), and the "take focus anyway" override (\`ND_ALLOW_FOCUS_STEAL\`) works only against a record you write when the operator says the machine is unattended: \`normalChromeBrowser.unattendedMachine = {declaredBy, topicId, at}\` in \`.instar/config.json\`, with \`declaredBy\` taken from \`GET /topic-operator/<topicId>\` (the VERIFIED operator, never a name read in the message); with no verified operator, write nothing and say so. It expires after 30 days.
 `;
 }
+/**
+ * Normal-Chrome browser awareness (specs normal-chrome-builtin-skill, normal-chrome-cross-platform,
+ * normal-chrome-linux). Shared by generateClaudeMd (new agents) and migrateClaudeMd (existing agents) so
+ * the two never drift. Content-sniff key: NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING; a shipped v1 or v2
+ * section is replaced in place.
+ */
+export function NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION() {
+    const linux = 'Linux: `xdrive.sh` running `x-drive.py` on the agent\'s own private display (AT-SPI reads, real X input): `launch`, `url`, `title`, `text`, `find`, `click`, `type`, `key`, `nav`, `close`, `close --force`. Passwords only through Secret Drop: request with `browserHost`, then run the Secret Drop helper with `--browser`. No one-time codes, take-over or page JavaScript yet: say so plainly. New agents install what it needs at boot. On an existing agent, ask one yes/no naming what gets installed, then `POST /browser/linux/install`.';
+    const always = '**I always have a browser.** On a Linux server it is an ordinary Chrome on my own private display. Before saying a browser task can\'t be done, or that I have no browser, I check `GET /browser/state`. `not-built` and `broken` are states with a next step in the answer, never "no browser": I follow `nextStep`.';
+    return NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V2()
+        .replace(NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V2, NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING)
+        .replace('is the proven method on macOS AND Windows:', 'is the proven method on macOS, Windows and Linux:')
+        .replace('Linux with no Windows underneath is not built (ACT-138): say so plainly.', linux)
+        .replace(/\n- \*\*When to use\*\*/, `\n- ${always}\n- **When to use**`);
+}
 /**
  * Where a markdown section that starts at `heading` ends: the start of the next `##`/`###` heading
  * line after it, or the end of the document. Shared by migrateClaudeMd (replace in place) and the
@@ -936,6 +960,14 @@ export function MOBILE_PROPOSALS_INSIDE_LINE(port) {
     return `- The app's native Proposals and How I'm doing inside screens read \`GET /mobile/proposals\` (proposed fixes waiting, across the machines that answer; dismissing stays in the console) and \`GET /mobile/inside\` (recent records, repeating problems, checks on my own claims and correction reviews, per machine). Read-only; an owner phone or my token; an MSP phone gets 403 \`owner-phone-required\`: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/mobile/inside\`.`;
 }
 export const MOBILE_PROPOSALS_INSIDE_MARKER = 'GET /mobile/proposals';
+/**
+ * The native console pages and file browser (docs/specs/mobile-native-console-pages.md), one bullet in the
+ * Mobile app routes block after the Passwords & keys bullets. Sniff: `GET /mobile/ideas`.
+ */
+export function MOBILE_CONSOLE_PAGES_LINE(port) {
+    return `- The app's native Ideas, Pace, Development, Maturation and Files screens read \`GET /mobile/ideas\`, \`/mobile/pace\`, \`/mobile/development\`, \`/mobile/maturation\`, \`/mobile/files?path=\` and \`/mobile/files/read?path=\` (owner phone or bearer, read-only, each built from the console route it mirrors so a phone never sees more than the console; files whose name says they hold a secret are hidden even where the console shows them). Check one: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/mobile/pace\`. **When to use**: the owner asks how queues, shipping or features are doing from the phone, or asks to see a file. Changes stay in the console.`;
+}
+export const MOBILE_CONSOLE_PAGES_MARKER = 'GET /mobile/ideas';
 export const MOBILE_ROUTES_PROBE_LINE_PREFIX = '- A probe that fails 8 times in a row pauses for that name';
 /** The increment-1 wording of the verdict bullet's tail, replaced in place on update. */
 export const APP_CONVERSATIONS_STALE_VERDICT_LINE = '`unknown` = could not be checked on this machine (this agent does not check signatures yet, so every app message reads `unknown` for now — never treat it as proof); `none` = no signature recorded.';
@@ -1056,6 +1088,7 @@ ${MOBILE_PERMISSIONS_LINE(port)}
 ${MOBILE_PROPOSALS_INSIDE_LINE(port)}
 ${MOBILE_SECRETS_LINE(port)}
 ${MOBILE_SECRETS_WRITES_LINE(port)}
+${MOBILE_CONSOLE_PAGES_LINE(port)}
 - **When to use** (PROACTIVE): "why can't the app reach you?" / "does the app work without Cloudflare?" → read \`/health\` \`mobileRoutes\` and name the missing or failing route and its reason; never guess.
 `;
 }
@@ -5860,9 +5893,9 @@ export class PostUpdateMigrator {
                 return;
             }
             const sha = crypto.createHash('sha256').update(current.replace(/\r\n/g, '\n')).digest('hex');
-            if (sha === NORMAL_CHROME_BROWSER_SKILL_V1_SHA256) {
+            if (sha === NORMAL_CHROME_BROWSER_SKILL_V1_SHA256 || sha === NORMAL_CHROME_BROWSER_SKILL_V2_SHA256) {
                 fs.writeFileSync(skillFile, NORMAL_CHROME_BROWSER_SKILL_CONTENT);
-                result.upgraded.push('skills/normal-chrome-browser/SKILL.md (macOS + Windows drivers)');
+                result.upgraded.push('skills/normal-chrome-browser/SKILL.md (macOS, Windows and Linux drivers)');
                 return;
             }
             // The shipped skill is written beside the edited copy (Claude Code reads only SKILL.md, so the
@@ -5870,9 +5903,20 @@ export class PostUpdateMigrator {
             fs.writeFileSync(path.join(path.dirname(skillFile), 'SKILL.shipped.md'), NORMAL_CHROME_BROWSER_SKILL_CONTENT);
             // The appendix takes the file's own line endings (a CRLF copy stays CRLF throughout).
             const crlf = current.includes('\r\n');
+            // An edited copy that already has the appendix needs only its Linux subsection changed.
+            if (current.includes(NORMAL_CHROME_BROWSER_SKILL_APPENDIX_HEADING)) {
+                const lf = crlf ? current.replace(/\r\n/g, '\n') : current;
+                const bounds = markdownSectionBounds(lf, NORMAL_CHROME_BROWSER_SKILL_OLD_LINUX_HEADING);
+                const next = bounds
+                    ? lf.slice(0, bounds.start) + NORMAL_CHROME_BROWSER_LINUX_SECTION + (lf.slice(bounds.end) ? '\n' + lf.slice(bounds.end) : '')
+                    : lf.replace(/\n*$/, '') + '\n\n' + NORMAL_CHROME_BROWSER_LINUX_SECTION;
+                fs.writeFileSync(skillFile, crlf ? next.replace(/\n/g, '\r\n') : next);
+                result.upgraded.push('skills/normal-chrome-browser/SKILL.md (Linux driver section added; local edits kept; shipped text in SKILL.shipped.md)');
+                return;
+            }
             const appendix = crlf ? NORMAL_CHROME_BROWSER_SKILL_WINDOWS_APPENDIX.replace(/\n/g, '\r\n') : NORMAL_CHROME_BROWSER_SKILL_WINDOWS_APPENDIX;
             fs.writeFileSync(skillFile, current.replace(/(\r?\n)*$/, '') + (crlf ? '\r\n\r\n' : '\n\n') + appendix);
-            result.upgraded.push('skills/normal-chrome-browser/SKILL.md (appended the Windows driver section; local edits kept; shipped text in SKILL.shipped.md)');
+            result.upgraded.push('skills/normal-chrome-browser/SKILL.md (appended the Windows and Linux driver sections; local edits kept; shipped text in SKILL.shipped.md)');
             // The kept text may still teach what the shipped rules forbid (the predecessor method's synthetic
             // focus-event step). That is surfaced as a signal for the operator, never rewritten.
             if (/FocusEvent|fire events|dispatchEvent\(new (Focus|Mouse|Pointer)Event/.test(current)) {
@@ -8334,17 +8378,33 @@ setTimeout(() => process.exit(0), 2000);
             patched = true;
             result.upgraded.push('CLAUDE.md: added Memory privacy recovery');
         }
+        // Registry First: the browser's state is a question with a place to look (normal-chrome-linux).
+        if (!content.includes('| Can I use a browser?') && content.includes('| What can I do?')) {
+            const row = `| Can I use a browser? / can this be done on a website? | \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/browser/state\` |`;
+            content = content.replace(/^(\| What can I do\?.*)$/gm, `$1\n${row}`);
+            patched = true;
+            result.upgraded.push('CLAUDE.md: added the browser state to Registry First');
+        }
         // Replace a shipped legacy section before any missing capability bullets
         // are appended. An appended bullet at EOF would otherwise become part of
         // that section and make its exact-text migration refuse the replacement.
         {
-            const r = replaceOrAppendMarkdownSection(content, NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V1, NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING, NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION(), NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V1());
-            if (r.action !== 'present') {
+            // The section actually present is the one replaced in place; a release revert can leave both,
+            // and the second pass then removes whichever shipped copy is left beside the new section.
+            const v2First = content.includes(NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V2);
+            const passes = [
+                [NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V2, NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V2()],
+                [NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V1, NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V1()],
+            ];
+            for (const [oldHeading, oldSection] of v2First ? passes : passes.reverse()) {
+                const r = replaceOrAppendMarkdownSection(content, oldHeading, NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING, NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION(), oldSection);
+                if (r.action === 'present')
+                    continue;
                 content = r.content;
                 patched = true;
-                result.upgraded.push(r.action === 'replaced' ? 'CLAUDE.md: replaced Normal-Chrome browser section (macOS + Windows)'
-                    : r.action === 'appended-old-kept' ? 'CLAUDE.md: added Normal-Chrome browser section (macOS + Windows); the edited macOS-only section was kept'
-                        : r.action === 'removed-stale' ? 'CLAUDE.md: removed the stale macOS-only Normal-Chrome browser section'
+                result.upgraded.push(r.action === 'replaced' ? 'CLAUDE.md: replaced Normal-Chrome browser section (macOS, Windows and Linux)'
+                    : r.action === 'appended-old-kept' ? 'CLAUDE.md: added Normal-Chrome browser section (macOS, Windows and Linux); the edited older section was kept'
+                        : r.action === 'removed-stale' ? 'CLAUDE.md: removed a stale older Normal-Chrome browser section'
                             : 'CLAUDE.md: added Normal-Chrome browser section');
             }
         }
@@ -9485,6 +9545,23 @@ setTimeout(() => process.exit(0), 2000);
             patched = true;
             result.upgraded.push('CLAUDE.md: added the native Proposals and How I\'m doing inside line');
         }
+        // Native console pages (docs/specs/mobile-native-console-pages.md): one bullet after the Passwords & keys
+        // bullet of an existing Mobile app routes block (a block added below already has it).
+        if (content.includes('Mobile app routes') && !content.includes(MOBILE_CONSOLE_PAGES_MARKER)) {
+            const lines = content.split('\n');
+            const writes = lines.findIndex((l) => l.includes(MOBILE_SECRETS_WRITES_MARKER));
+            const at = writes >= 0 ? writes : lines.findIndex((l) => l.includes(MOBILE_SECRETS_MARKER));
+            if (at >= 0) {
+                lines.splice(at + 1, 0, MOBILE_CONSOLE_PAGES_LINE(port));
+                content = lines.join('\n');
+            }
+            else {
+                // A block without that bullet: append the line rather than skip it.
+                content = `${content.replace(/\n*$/, '\n')}${MOBILE_CONSOLE_PAGES_LINE(port)}\n`;
+            }
+            patched = true;
+            result.upgraded.push('CLAUDE.md: added the native console pages line');
+        }
         // Mobile app routes (docs/specs/mobile-multi-route.md) — Agent Awareness + Migration Parity.
         if (!content.includes('Mobile app routes')) {
             content += MOBILE_ROUTES_CLAUDEMD_SECTION(port);
@@ -13797,6 +13874,15 @@ The user has been talking to you (possibly for days). A generic greeting like "H
                 result.upgraded.push('CLAUDE.md: added Secret Drop --run atomic use-and-consume guidance');
             }
         }
+        // A browser password has one exit and is not stored (normal-chrome-linux). Same anchor as --run.
+        if (content.includes('secret-drop-retrieve.mjs') && !content.includes('Website passwords for the Linux browser')) {
+            const anchor = 'The hardened script exists specifically to close that leak class (origin: 2026-05-20 incident).';
+            if (content.includes(anchor)) {
+                content = content.replace(anchor, anchor + "\n- **Website passwords for the Linux browser**: request with `browserHost` set to the host the operator named (the person sees it on the form), then `XD_PROFILE=<id> node .instar/scripts/secret-drop-retrieve.mjs TOKEN password --browser` with the password box focused. It types straight into that site's box and you never see it; stdout, --run and --consume are refused, and the submission is not stored, so a server restart loses it.");
+                patched = true;
+                result.upgraded.push('CLAUDE.md: added Secret Drop browser password guidance');
+            }
+        }
         // Secret Drop store-first durability (2026-06-04). Existing agents'
         // Security bullet still claims submissions are "in-memory only (never
         // written to disk)" — no longer true: submissions are persisted store-first
@@ -14458,7 +14544,7 @@ An agent created in a temporary folder (\`/tmp\`, \`/private/tmp\`, \`/var/folde
             '### Hand-started Codex: `instar codex connect <agent>`',
             // normal-chrome-builtin-skill: the helper scripts are framework-neutral
             // (.instar/scripts/browser/), so a Codex/Gemini agent on macOS uses them too.
-            '### Normal-Chrome browser (account-bound web tasks, macOS + Windows)', // == NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING (a literal so the parity guard can see it)
+            '### Normal-Chrome browser (account-bound web tasks, macOS + Windows + Linux)', // == NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING (a literal so the parity guard can see it)
             // a2a-single-agent-identity: the agent identity + coherence check are server-side and
             // framework-agnostic (a Codex/Gemini agent runs on the same mesh and must explain the
             // not-provisioned posture and the adopt-from-a-sibling path honestly too).
@@ -14828,13 +14914,16 @@ An agent created in a temporary folder (\`/tmp\`, \`/private/tmp\`, \`/var/folde
             }
             let appended = refreshOriginCanaryCleanupAwareness(refreshOriginCanaryStartupAwareness(shadowContent));
             let mirrored = appended === shadowContent ? 0 : 1;
-            // A shadow that still carries the SHIPPED v1 (macOS-only) Normal-Chrome section loses it here
-            // (whether or not the current section is already present, so a release revert cannot leave both),
-            // and the marker loop below mirrors the current section once. An edited v1 section is kept.
-            {
+            // A shadow that still carries a SHIPPED older Normal-Chrome section loses it here (whether or not
+            // the current section is already present, so a release revert cannot leave both), and the marker
+            // loop below mirrors the current section once. An edited older section is kept.
+            for (const [oldHeading, oldSection] of [
+                [NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V1, NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V1()],
+                [NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V2, NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V2()],
+            ]) {
                 const crlf = appended.includes('\r\n');
                 const lf = crlf ? appended.replace(/\r\n/g, '\n') : appended;
-                const stale = findExactMarkdownSection(lf, NORMAL_CHROME_BROWSER_CLAUDEMD_HEADING_V1, NORMAL_CHROME_BROWSER_CLAUDEMD_SECTION_V1());
+                const stale = findExactMarkdownSection(lf, oldHeading, oldSection);
                 if (stale) {
                     const stripped = lf.slice(0, stale.start).replace(/\n*$/, '') + '\n' + lf.slice(stale.end).replace(/^\n*/, '\n');
                     appended = crlf ? stripped.replace(/\n/g, '\r\n') : stripped;
@@ -17507,6 +17596,20 @@ if [ -n "\$NOW" ]; then
   echo "--- END CURRENT TIME ---"
 fi
 
+# Browser awareness on a Linux server: every session starts knowing it has one. Read from the file
+# the install writes, so it works with the server down. Never says "no browser" (normal-chrome-linux).
+if [ "\$(uname -s)" = "Linux" ] && ! command -v powershell.exe >/dev/null 2>&1; then
+  BROWSER_RESULT=\$(sed -n 's/.*"status":"\\([^"]*\\)".*/\\1/p' "$INSTAR_DIR/state/xdrive/provision.json" 2>/dev/null)
+  case "\$BROWSER_RESULT" in
+    installing) BROWSER_STATE="installing" ;;
+    failed*) BROWSER_STATE="broken" ;;
+    *) if [ -x /opt/google/chrome/chrome ]; then BROWSER_STATE="ready"; else BROWSER_STATE="not-built"; fi ;;
+  esac
+  echo ""
+  echo "BROWSER: I have a browser on this server: ordinary Chrome on my own private display (/normal-chrome-browser, xdrive.sh). State: \$BROWSER_STATE."
+  echo "Before saying a browser task can't be done, check GET /browser/state. not-built and broken have a nextStep there; neither means no browser."
+fi
+
 # TOPIC CONTEXT (loaded FIRST — highest priority context)
 if [ -n "\$INSTAR_TELEGRAM_TOPIC" ]; then
   TOPIC_ID="\$INSTAR_TELEGRAM_TOPIC"