viyv-browser-mcp 0.10.2 → 0.10.3

package/dist/index.js

@@ -2988,7 +2988,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve3.call(this, root, ref);
+      let _sch = resolve4.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a = root.localRefs) === null || _a === void 0 ? void 0 : _a[ref];
         const { schemaId } = this.opts;
@@ -3015,7 +3015,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve3(root, ref) {
+    function resolve4(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -3590,7 +3590,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve3(baseURI, relativeURI, options) {
+    function resolve4(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const resolved = resolveComponent(parse4(baseURI, schemelessOptions), parse4(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
@@ -3817,7 +3817,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize: normalize2,
-      resolve: resolve3,
+      resolve: resolve4,
       resolveComponent,
       equal,
       serialize,
@@ -11452,10 +11452,10 @@ var require_raw_body = __commonJS({
       if (done) {
         return readStream(stream, encoding, length, limit, wrap(done));
       }
-      return new Promise(function executor(resolve3, reject) {
+      return new Promise(function executor(resolve4, reject) {
         readStream(stream, encoding, length, limit, function onRead(err, buf) {
           if (err) return reject(err);
-          resolve3(buf);
+          resolve4(buf);
         });
       });
     }
@@ -11695,7 +11695,7 @@ var require_content_type = __commonJS({
 
 // src/native-host/bridge.ts
 import { randomUUID } from "crypto";
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 import { createServer as createServer2 } from "net";
 import { join as join2 } from "path";
 
@@ -11840,59 +11840,156 @@ function shouldBroadcastClosing(reason) {
   }
 }
 
+// ../shared/dist/util/semver.js
+function compareSemver(a, b) {
+  const pa = a.split(".").map((s) => Number.parseInt(s, 10));
+  const pb = b.split(".").map((s) => Number.parseInt(s, 10));
+  for (let i = 0; i < 3; i++) {
+    const ai = Number.isFinite(pa[i]) ? pa[i] : 0;
+    const bi = Number.isFinite(pb[i]) ? pb[i] : 0;
+    const diff = ai - bi;
+    if (diff !== 0)
+      return diff;
+  }
+  return 0;
+}
+
 // src/native-host-updater.ts
-import {
-  chmodSync,
-  copyFileSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  renameSync,
-  unlinkSync
-} from "fs";
+import { chmodSync, copyFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, unlinkSync as unlinkSync2 } from "fs";
+import { resolve as resolve2 } from "path";
+import { fileURLToPath } from "url";
+
+// src/native-host/deployment-state.ts
+import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { resolve } from "path";
-import { fileURLToPath } from "url";
+function getNativeHostDir() {
+  return resolve(homedir(), ".viyv-browser", "native-host");
+}
+function getDeploymentBinaryPath() {
+  return resolve(getNativeHostDir(), "index.js");
+}
+function getDeploymentVersionPath() {
+  return resolve(getNativeHostDir(), "version");
+}
+var SEMVER_CORE = /^\d+\.\d+\.\d+/;
+function readDeploymentState() {
+  const versionPath = getDeploymentVersionPath();
+  if (!existsSync(versionPath)) {
+    return { version: null };
+  }
+  try {
+    const raw = readFileSync(versionPath, "utf-8").trim();
+    if (!raw || !SEMVER_CORE.test(raw)) {
+      return { version: null };
+    }
+    return { version: raw };
+  } catch {
+    return { version: null };
+  }
+}
+function writeDeploymentVersion(version2) {
+  const dir = getNativeHostDir();
+  mkdirSync(dir, { recursive: true });
+  const target = getDeploymentVersionPath();
+  const tmp = resolve(dir, `version.tmp.${process.pid}`);
+  try {
+    writeFileSync(tmp, `${version2}
+`, "utf-8");
+    renameSync(tmp, target);
+  } catch (err) {
+    try {
+      unlinkSync(tmp);
+    } catch {
+    }
+    throw err;
+  }
+}
+
+// src/native-host/sync-policy.ts
+function decideSyncAction(state, selfVersion) {
+  if (state.version === null) {
+    return {
+      shouldSync: true,
+      reason: "no-deploy-version",
+      deployedVersion: null,
+      selfVersion
+    };
+  }
+  const cmp = compareSemver(selfVersion, state.version);
+  if (cmp > 0) {
+    return {
+      shouldSync: true,
+      reason: "upgrade",
+      deployedVersion: state.version,
+      selfVersion
+    };
+  }
+  if (cmp === 0) {
+    return {
+      shouldSync: true,
+      reason: "same-version-idempotent",
+      deployedVersion: state.version,
+      selfVersion
+    };
+  }
+  return {
+    shouldSync: false,
+    reason: "avoid-downgrade",
+    deployedVersion: state.version,
+    selfVersion
+  };
+}
+
+// src/native-host-updater.ts
 var PKG_VERSION = (() => {
-  if (true) return "0.10.2";
+  if (true) return "0.10.3";
   try {
     const here = fileURLToPath(import.meta.url);
-    const pkgPath = resolve(here, "..", "..", "package.json");
-    const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    const pkgPath = resolve2(here, "..", "..", "package.json");
+    const pkg = JSON.parse(readFileSync2(pkgPath, "utf-8"));
     return pkg.version ?? "0.0.0-test";
   } catch {
     return "0.0.0-test";
   }
 })();
-var NATIVE_HOST_DIR = resolve(homedir(), ".viyv-browser", "native-host");
 function getSourceBinaryPath() {
   return fileURLToPath(import.meta.url);
 }
 function getNativeHostBinaryPath() {
-  return resolve(NATIVE_HOST_DIR, "index.js");
+  return getDeploymentBinaryPath();
 }
 function isNativeHostDeployed() {
-  return existsSync(getNativeHostBinaryPath());
+  return existsSync2(getNativeHostBinaryPath());
 }
 function syncNativeHostBinary() {
   const source = getSourceBinaryPath();
-  if (!existsSync(source)) {
+  if (!existsSync2(source)) {
     throw new Error(`Source binary not found: ${source}`);
   }
-  mkdirSync(NATIVE_HOST_DIR, { recursive: true });
+  const dir = getNativeHostDir();
+  mkdirSync2(dir, { recursive: true });
   const target = getNativeHostBinaryPath();
-  const tmp = resolve(NATIVE_HOST_DIR, `index.js.tmp.${process.pid}`);
+  const tmp = resolve2(dir, `index.js.tmp.${process.pid}`);
   try {
     copyFileSync(source, tmp);
     chmodSync(tmp, 493);
-    renameSync(tmp, target);
+    renameSync2(tmp, target);
   } catch (err) {
     try {
-      unlinkSync(tmp);
+      unlinkSync2(tmp);
     } catch {
     }
     throw err;
   }
+  writeDeploymentVersion(PKG_VERSION);
+}
+function syncNativeHostBinaryIfNeeded() {
+  const decision = decideSyncAction(readDeploymentState(), PKG_VERSION);
+  if (decision.shouldSync) {
+    syncNativeHostBinary();
+  }
+  return decision;
 }
 function shouldUpdateBridge(bridgeVersion) {
   return compareSemver(PKG_VERSION, bridgeVersion) > 0;
@@ -11900,20 +11997,11 @@ function shouldUpdateBridge(bridgeVersion) {
 function getPackageVersion() {
   return PKG_VERSION;
 }
-function compareSemver(a, b) {
-  const pa = a.split(".").map(Number);
-  const pb = b.split(".").map(Number);
-  for (let i = 0; i < 3; i++) {
-    const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
-    if (diff !== 0) return diff;
-  }
-  return 0;
-}
 
 // src/native-host/bridge-control.ts
 import { randomBytes } from "crypto";
 import { createServer } from "net";
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync2, writeFileSync } from "fs";
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync3, writeFileSync as writeFileSync2 } from "fs";
 import { dirname } from "path";
 var LOG_PREFIX = "[viyv-browser:native-host:control]";
 function startBridgeControl(opts) {
@@ -11923,9 +12011,9 @@ function startBridgeControl(opts) {
   const { deps, onError } = opts;
   let cookie;
   try {
-    mkdirSync2(dirname(cookiePath), { recursive: true });
+    mkdirSync3(dirname(cookiePath), { recursive: true });
     cookie = randomBytes(BRIDGE.CONTROL_COOKIE_BYTES);
-    writeFileSync(cookiePath, cookie.toString("hex"), { mode: 384 });
+    writeFileSync2(cookiePath, cookie.toString("hex"), { mode: 384 });
     try {
       chmodSync2(cookiePath, 384);
     } catch {
@@ -12063,7 +12151,7 @@ function startBridgeControl(opts) {
 }
 
 // src/native-host/bridge-relay.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import { createConnection } from "net";
 import { join } from "path";
 
@@ -12165,7 +12253,7 @@ function readProfileIdFromEnv() {
   const dir = process.env.VIYV_USER_DATA_DIR;
   if (!dir) return null;
   try {
-    const raw = readFileSync2(join(dir, "viyv-profile.id"), "utf8").trim();
+    const raw = readFileSync3(join(dir, "viyv-profile.id"), "utf8").trim();
     return raw || null;
   } catch {
     return null;
@@ -12841,7 +12929,7 @@ function startBridge(options) {
     const primaryUserDataDir = process.env.VIYV_USER_DATA_DIR;
     if (primaryUserDataDir) {
       try {
-        const raw = readFileSync3(join2(primaryUserDataDir, "viyv-profile.id"), "utf8").trim();
+        const raw = readFileSync4(join2(primaryUserDataDir, "viyv-profile.id"), "utf8").trim();
         if (raw) {
           setProfileId(primaryChromeId, raw);
           process.stderr.write(
@@ -12874,7 +12962,7 @@ function startBridge(options) {
 
 // src/server.ts
 import { randomUUID as randomUUID5 } from "crypto";
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync4, statSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync5, statSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3 } from "fs";
 import http from "http";
 import { dirname as dirname2 } from "path";
 
@@ -24952,7 +25040,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve3) => setTimeout(resolve3, pollInterval));
+        await new Promise((resolve4) => setTimeout(resolve4, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error2) {
@@ -24969,7 +25057,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const earlyReject = (error2) => {
         reject(error2);
       };
@@ -25047,7 +25135,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve3(parseResult.data);
+            resolve4(parseResult.data);
           }
         } catch (error2) {
           reject(error2);
@@ -25308,12 +25396,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve3, interval);
+      const timeoutId = setTimeout(resolve4, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -26272,7 +26360,7 @@ var McpServer = class {
     let task = createTaskResult.task;
     const pollInterval = task.pollInterval ?? 5e3;
     while (task.status !== "completed" && task.status !== "failed" && task.status !== "cancelled") {
-      await new Promise((resolve3) => setTimeout(resolve3, pollInterval));
+      await new Promise((resolve4) => setTimeout(resolve4, pollInterval));
       const updatedTask = await extra.taskStore.getTask(taskId);
       if (!updatedTask) {
         throw new McpError(ErrorCode.InternalError, `Task ${taskId} not found during polling`);
@@ -27060,12 +27148,12 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message2) {
-    return new Promise((resolve3) => {
+    return new Promise((resolve4) => {
       const json = serializeMessage(message2);
       if (this._stdout.write(json)) {
-        resolve3();
+        resolve4();
       } else {
-        this._stdout.once("drain", resolve3);
+        this._stdout.once("drain", resolve4);
       }
     });
   }
@@ -27479,7 +27567,7 @@ var responseViaResponseObject = async (res, outgoing, options = {}) => {
         });
         if (!chunk) {
           if (i === 1) {
-            await new Promise((resolve3) => setTimeout(resolve3));
+            await new Promise((resolve4) => setTimeout(resolve4));
             maxReadCount = 3;
             continue;
           }
@@ -27961,9 +28049,9 @@ data:
       const initRequest = messages.find((m) => isInitializeRequest(m));
       const clientProtocolVersion = initRequest ? initRequest.params.protocolVersion : req.headers.get("mcp-protocol-version") ?? DEFAULT_NEGOTIATED_PROTOCOL_VERSION;
       if (this._enableJsonResponse) {
-        return new Promise((resolve3) => {
+        return new Promise((resolve4) => {
           this._streamMapping.set(streamId, {
-            resolveJson: resolve3,
+            resolveJson: resolve4,
             cleanup: () => {
               this._streamMapping.delete(streamId);
             }
@@ -28485,11 +28573,11 @@ var BridgeClient = class {
    * is exhausted or `timeout` if the handshake takes too long.
    */
   enqueueToolCall(line) {
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       if (this.state === "ready" && this.socket && !this.socket.destroyed) {
         try {
           this.socket.write(line.endsWith(LINE_TERMINATOR) ? line : line + LINE_TERMINATOR);
-          resolve3();
+          resolve4();
         } catch (err) {
           reject({ reason: "write-failed", detail: err instanceof Error ? err.message : String(err) });
         }
@@ -28498,7 +28586,7 @@ var BridgeClient = class {
       const enqueued = this.queue.enqueue({
         payload: {
           line: line.endsWith(LINE_TERMINATOR) ? line : line + LINE_TERMINATOR,
-          resolve: resolve3,
+          resolve: resolve4,
           reject
         },
         onFlush: (entry) => {
@@ -28677,6 +28765,20 @@ function toolCallRejectionToErrorCode(rej) {
   }
 }
 
+// src/bridge-protocol/shutdown-request-gate.ts
+var SHUTDOWN_REQUEST_COOLDOWN_MS = 3e4;
+function createShutdownGateState() {
+  return { lastSentAt: null, lastVersion: null };
+}
+function shouldSendShutdownRequest(state, observedVersion, now, cooldownMs = SHUTDOWN_REQUEST_COOLDOWN_MS) {
+  if (state.lastSentAt === null) return true;
+  if (state.lastVersion !== observedVersion) return true;
+  return now - state.lastSentAt >= cooldownMs;
+}
+function markSent(state, version2, now) {
+  return { lastSentAt: now, lastVersion: version2 };
+}
+
 // ../shared/dist/bearer-equals.js
 import { timingSafeEqual } from "crypto";
 function bearerEquals(header, expectedToken) {
@@ -34205,6 +34307,7 @@ function computeToolTimeout(tool, input) {
 var pendingRequests = /* @__PURE__ */ new Map();
 var bridgeClient = null;
 var bridgeUpdateInfo = null;
+var shutdownGate = createShutdownGateState();
 function getBridgeSocket() {
   return bridgeClient?.getSocket() ?? null;
 }
@@ -34325,7 +34428,7 @@ function coerceShape(shape) {
   return result;
 }
 function handleFileExport(filePath, result) {
-  mkdirSync3(dirname2(filePath), { recursive: true });
+  mkdirSync4(dirname2(filePath), { recursive: true });
   let content;
   let metadata;
   if (typeof result.data === "string") {
@@ -34345,7 +34448,7 @@ function handleFileExport(filePath, result) {
     const pages = Array.isArray(result.pages) ? result.pages : [];
     metadata = { ok: true, file_path: filePath, page_count: pages.length };
   }
-  writeFileSync2(filePath, content, "utf-8");
+  writeFileSync3(filePath, content, "utf-8");
   metadata.file_size = Buffer.byteLength(content, "utf-8");
   return metadata;
 }
@@ -34733,7 +34836,7 @@ async function handleStreamableHttpRequest(req, res, sessions2) {
 }
 var MAX_BODY_SIZE = 4 * 1024 * 1024;
 function parseJsonBody(req) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const chunks = [];
     let size = 0;
     let destroyed = false;
@@ -34751,7 +34854,7 @@ function parseJsonBody(req) {
     req.on("end", () => {
       if (destroyed) return;
       try {
-        resolve3(JSON.parse(Buffer.concat(chunks).toString("utf-8")));
+        resolve4(JSON.parse(Buffer.concat(chunks).toString("utf-8")));
       } catch (error2) {
         reject(new Error(`Invalid JSON: ${error2.message}`));
       }
@@ -34919,15 +35022,24 @@ function handleExtensionMessage(message2) {
     const bridgeVersion = typeof msg.bridgeVersion === "string" ? msg.bridgeVersion : null;
     if (bridgeVersion && shouldUpdateBridge(bridgeVersion)) {
       const serverVersion = getPackageVersion();
-      process.stderr.write(
-        `[viyv-browser:mcp] Bridge version mismatch (bridge=${bridgeVersion}, server=${serverVersion}), requesting restart
+      const nowMs = Date.now();
+      if (shouldSendShutdownRequest(shutdownGate, bridgeVersion, nowMs)) {
+        process.stderr.write(
+          `[viyv-browser:mcp] Bridge version mismatch (bridge=${bridgeVersion}, server=${serverVersion}), requesting restart
 `
-      );
-      bridgeUpdateInfo = { from: bridgeVersion, to: serverVersion };
-      const shutdownSock = getBridgeSocket();
-      if (shutdownSock) {
-        shutdownSock.write(
-          `${JSON.stringify({ type: "bridge_shutdown_request", timestamp: Date.now() })}
+        );
+        bridgeUpdateInfo = { from: bridgeVersion, to: serverVersion };
+        const shutdownSock = getBridgeSocket();
+        if (shutdownSock) {
+          shutdownSock.write(
+            `${JSON.stringify({ type: "bridge_shutdown_request", timestamp: nowMs })}
+`
+          );
+          shutdownGate = markSent(shutdownGate, bridgeVersion, nowMs);
+        }
+      } else {
+        process.stderr.write(
+          `[viyv-browser:mcp] Skipping bridge_shutdown_request \u2014 same version ${bridgeVersion} within cooldown (orphan MCP or external tampering is re-seeding the deploy binary; check for stale viyv-browser-mcp processes)
 `
         );
       }
@@ -35070,7 +35182,7 @@ async function callExtensionTool(tool, input) {
     if (paths) {
       for (const p of paths) {
         try {
-          if (!existsSync2(p) || !statSync(p).isFile()) {
+          if (!existsSync3(p) || !statSync(p).isFile()) {
             return {
               content: [
                 {
@@ -35102,7 +35214,7 @@ async function callExtensionTool(tool, input) {
     let csvData;
     if (typeof input.file_path === "string") {
       const fp = input.file_path;
-      if (!existsSync2(fp) || !statSync(fp).isFile()) {
+      if (!existsSync3(fp) || !statSync(fp).isFile()) {
         return {
           content: [
             {
@@ -35114,7 +35226,7 @@ async function callExtensionTool(tool, input) {
           ]
         };
       }
-      csvData = readFileSync4(fp, "utf-8");
+      csvData = readFileSync5(fp, "utf-8");
     } else if (typeof input.data === "string") {
       csvData = input.data;
     }
@@ -35160,13 +35272,13 @@ async function callExtensionTool(tool, input) {
   touchSession(agentId);
   const client = bridgeClient;
   const toolTimeout = computeToolTimeout(tool, input);
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const removeErrorListener = () => {
     };
     const timer = setTimeout(() => {
       pendingRequests.delete(requestId);
       removeErrorListener();
-      resolve3({
+      resolve4({
         content: [
           {
             type: "text",
@@ -35193,12 +35305,12 @@ async function callExtensionTool(tool, input) {
         if (FILE_EXPORT_TOOLS.has(tool) && typeof filePath === "string" && ("data" in result || "pages" in result)) {
           try {
             const metadata = handleFileExport(filePath, result);
-            resolve3({
+            resolve4({
               content: [{ type: "text", text: JSON.stringify(metadata) }]
             });
           } catch (e) {
             const msg = e instanceof Error ? e.message : String(e);
-            resolve3({
+            resolve4({
               content: [
                 {
                   type: "text",
@@ -35217,9 +35329,9 @@ async function callExtensionTool(tool, input) {
         if (RESULT_EXPORT_TOOLS.has(tool) && typeof filePath === "string") {
           try {
             const content = JSON.stringify(result, null, 2);
-            mkdirSync3(dirname2(filePath), { recursive: true });
-            writeFileSync2(filePath, content, "utf-8");
-            resolve3({
+            mkdirSync4(dirname2(filePath), { recursive: true });
+            writeFileSync3(filePath, content, "utf-8");
+            resolve4({
               content: [
                 {
                   type: "text",
@@ -35232,7 +35344,7 @@ async function callExtensionTool(tool, input) {
             });
           } catch (e) {
             const msg = e instanceof Error ? e.message : String(e);
-            resolve3({
+            resolve4({
               content: [
                 {
                   type: "text",
@@ -35259,21 +35371,21 @@ async function callExtensionTool(tool, input) {
         }
         if (tempImportFile) {
           try {
-            unlinkSync2(tempImportFile);
+            unlinkSync3(tempImportFile);
           } catch {
           }
         }
-        resolve3({ content: buildResponseContent(tool, finalResult) });
+        resolve4({ content: buildResponseContent(tool, finalResult) });
       },
       reject: (error2) => {
         removeErrorListener();
         if (tempImportFile) {
           try {
-            unlinkSync2(tempImportFile);
+            unlinkSync3(tempImportFile);
           } catch {
           }
         }
-        resolve3({
+        resolve4({
           content: [
             {
               type: "text",
@@ -35314,7 +35426,7 @@ async function callExtensionTool(tool, input) {
       clearTimeout(pending.timer);
       pendingRequests.delete(requestId);
       const { code, message: message2 } = toolCallRejectionToErrorCode(rej);
-      resolve3({
+      resolve4({
         content: [{ type: "text", text: JSON.stringify({ error: { code, message: message2 } }) }]
       });
     });
@@ -35338,12 +35450,12 @@ async function handleSwitchBrowser() {
     setExtensionConnected(false);
   }
   process.stderr.write("[viyv-browser:mcp] switch_browser: waiting for bridge reconnection...\n");
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const checkInterval = setInterval(() => {
       if (bridgeClient?.isReady() && isExtensionConnected()) {
         clearInterval(checkInterval);
         clearTimeout(timer);
-        resolve3({
+        resolve4({
           content: [
             {
               type: "text",
@@ -35358,7 +35470,7 @@ async function handleSwitchBrowser() {
     }, 500);
     const timer = setTimeout(() => {
       clearInterval(checkInterval);
-      resolve3({
+      resolve4({
         content: [
           {
             type: "text",
@@ -35377,9 +35489,9 @@ async function handleSwitchBrowser() {
 
 // src/setup.ts
 import { execSync } from "child_process";
-import { chmodSync as chmodSync3, existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync as chmodSync3, existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir2, platform } from "os";
-import { dirname as dirname3, resolve as resolve2 } from "path";
+import { dirname as dirname3, resolve as resolve3 } from "path";
 function runSetup(options = {}) {
   const os = platform();
   console.log("Viyv Browser MCP - Native Messaging Host Setup");
@@ -35411,8 +35523,8 @@ function runSetup(options = {}) {
   console.log(`Wrapper: ${wrapperPath}`);
   for (const manifestPath of manifestPaths) {
     console.log(`Manifest path: ${manifestPath}`);
-    mkdirSync4(dirname3(manifestPath), { recursive: true });
-    writeFileSync3(manifestPath, JSON.stringify(manifest, null, 2));
+    mkdirSync5(dirname3(manifestPath), { recursive: true });
+    writeFileSync4(manifestPath, JSON.stringify(manifest, null, 2));
     chmodSync3(manifestPath, 420);
   }
   console.log("\nNative Messaging Host registered successfully!");
@@ -35426,17 +35538,17 @@ function runSetup(options = {}) {
 }
 function createNativeHostWrapper(os, binaryPath, dockerMode) {
   const manifestDir = dockerMode ? "/etc/chromium/native-messaging-hosts" : dirname3(getManifestPath(os));
-  mkdirSync4(manifestDir, { recursive: true });
+  mkdirSync5(manifestDir, { recursive: true });
   const nodePath = getNodePath();
   if (os === "win32") {
-    const wrapperPath2 = resolve2(manifestDir, `${NATIVE_HOST_NAME}.bat`);
-    writeFileSync3(wrapperPath2, `@echo off\r
+    const wrapperPath2 = resolve3(manifestDir, `${NATIVE_HOST_NAME}.bat`);
+    writeFileSync4(wrapperPath2, `@echo off\r
 "${nodePath}" "${binaryPath}" --native-host\r
 `);
     return wrapperPath2;
   }
-  const wrapperPath = resolve2(manifestDir, `${NATIVE_HOST_NAME}.sh`);
-  writeFileSync3(wrapperPath, `#!/bin/bash
+  const wrapperPath = resolve3(manifestDir, `${NATIVE_HOST_NAME}.sh`);
+  writeFileSync4(wrapperPath, `#!/bin/bash
 exec "${nodePath}" "${binaryPath}" --native-host
 `);
   chmodSync3(wrapperPath, 493);
@@ -35451,23 +35563,23 @@ function getNodePath() {
 }
 function getDockerManifestPaths() {
   return [
-    resolve2("/etc/chromium/native-messaging-hosts", `${NATIVE_HOST_NAME}.json`),
-    resolve2(homedir2(), ".config/chromium/NativeMessagingHosts", `${NATIVE_HOST_NAME}.json`)
+    resolve3("/etc/chromium/native-messaging-hosts", `${NATIVE_HOST_NAME}.json`),
+    resolve3(homedir2(), ".config/chromium/NativeMessagingHosts", `${NATIVE_HOST_NAME}.json`)
   ];
 }
 function getManifestPath(os) {
   const home = homedir2();
   switch (os) {
     case "darwin":
-      return resolve2(
+      return resolve3(
         home,
         "Library/Application Support/Google/Chrome/NativeMessagingHosts",
         `${NATIVE_HOST_NAME}.json`
       );
     case "linux":
-      return resolve2(home, ".config/google-chrome/NativeMessagingHosts", `${NATIVE_HOST_NAME}.json`);
+      return resolve3(home, ".config/google-chrome/NativeMessagingHosts", `${NATIVE_HOST_NAME}.json`);
     case "win32":
-      return resolve2(
+      return resolve3(
         home,
         "AppData/Local/Google/Chrome/User Data/NativeMessagingHosts",
         `${NATIVE_HOST_NAME}.json`
@@ -35487,9 +35599,9 @@ function setupClaudeDesktopConfig() {
   const configPath = getClaudeDesktopConfigPath();
   console.log(`Config path: ${configPath}`);
   let config2 = {};
-  if (existsSync3(configPath)) {
+  if (existsSync4(configPath)) {
     try {
-      config2 = JSON.parse(readFileSync5(configPath, "utf-8"));
+      config2 = JSON.parse(readFileSync6(configPath, "utf-8"));
     } catch {
       console.error(
         `ERROR: Failed to parse ${configPath}. Fix the JSON manually or delete the file.`
@@ -35509,8 +35621,8 @@ function setupClaudeDesktopConfig() {
     env: { PATH: envPath }
   };
   const configDir = dirname3(configPath);
-  mkdirSync4(configDir, { recursive: true });
-  writeFileSync3(configPath, JSON.stringify(config2, null, 2));
+  mkdirSync5(configDir, { recursive: true });
+  writeFileSync4(configPath, JSON.stringify(config2, null, 2));
   console.log(`npx path: ${npxPath}`);
   console.log("\nClaude Desktop config updated successfully!");
   console.log("Please restart Claude Desktop for changes to take effect.");
@@ -35527,13 +35639,13 @@ function getClaudeDesktopConfigPath() {
   const home = homedir2();
   switch (process.platform) {
     case "darwin":
-      return resolve2(home, "Library/Application Support/Claude/claude_desktop_config.json");
+      return resolve3(home, "Library/Application Support/Claude/claude_desktop_config.json");
     case "linux":
-      return resolve2(home, ".config/Claude/claude_desktop_config.json");
+      return resolve3(home, ".config/Claude/claude_desktop_config.json");
     case "win32":
-      return resolve2(home, "AppData/Roaming/Claude/claude_desktop_config.json");
+      return resolve3(home, "AppData/Roaming/Claude/claude_desktop_config.json");
     default:
-      return resolve2(home, ".config/Claude/claude_desktop_config.json");
+      return resolve3(home, ".config/Claude/claude_desktop_config.json");
   }
 }
 
@@ -35575,7 +35687,18 @@ if (args.includes("setup")) {
   const authBearer = authIdx >= 0 ? args[authIdx + 1] : process.env.VIYV_MCP_AUTH_BEARER;
   if (isNativeHostDeployed()) {
     try {
-      syncNativeHostBinary();
+      const decision = syncNativeHostBinaryIfNeeded();
+      if (decision.shouldSync) {
+        process.stderr.write(
+          `[viyv-browser:mcp] Native host binary synced (self=${decision.selfVersion}, was=${decision.deployedVersion ?? "unknown"}, reason=${decision.reason})
+`
+        );
+      } else {
+        process.stderr.write(
+          `[viyv-browser:mcp] Native host sync skipped \u2014 deployed v${decision.deployedVersion} is newer than self v${decision.selfVersion} (preventing downgrade by orphan MCP)
+`
+        );
+      }
     } catch (err) {
       process.stderr.write(
         `[viyv-browser:mcp] WARNING: Failed to update native host binary: ${err.message}