NB - Native Browser Bridge

@@ -62,20 +62,51 @@ chrome.tabs.onRemoved.addListener((tabId, info) => {   _emit({ event: 'tab_closed', tabId: String(tabId), windowId: info.windowId, windowClosing: !!info.isWindowClosing }); }); +// ⛔ FIRST-CLASS PWA GUARD — never hijack an installed app window.+// Installed PWAs / "Add to taskbar" apps (Google Chat, Google Messages, Gmail-as-app, etc.) run in+// their OWN window, which Chrome reports as type:'app' (standalone apps are 'app'; popups 'popup';+// ordinary browsing 'normal'). Driving or NAVIGATING a tab inside an 'app' window would seize the+// user's standalone application — exactly the regression we hit (the Google Chat PWA got navigated to+// Gusto). HARD RULE: refuse to target a non-'normal' window unless the caller EXPLICITLY opts in with+// allowPwa:true (i.e. the user specifically asked to drive that exact app window).+async function assertDriveableWindow(tabId, args) {+  const allow = !!(args && (args.allowPwa === true || args.allowAppWindow === true));+  if (allow) return;+  let tab, win;+  try {+    tab = await chrome.tabs.get(Number(tabId));+    win = await chrome.windows.get(tab.windowId);+  } catch { return; } // lookup failed for an unrelated reason — let the real verb surface it+  if (win && win.type && win.type !== 'normal') {+    const kind = win.type === 'app' ? 'PWA / installed-app' : `${win.type}`;+    throw new Error(+      `⛔ refusing to drive a ${kind} window (tab ${tabId}: "${(tab.title || '').slice(0, 60)}") — ` ++      `this would hijack the user's standalone app (e.g. a taskbar PWA like Google Chat/Messages). ` ++      `Open a dedicated browser window with nbrowser_open_window and target THAT. ` ++      `Pass allowPwa:true ONLY if the user explicitly asked to drive this specific app window.`);+  }+}+ // Resolve which tab a verb targets: explicit tabId > active tab of the session > active tab overall. async function resolveTabId(args) {   await ensureLoaded();-  if (args && args.tabId != null) return Number(args.tabId);-  if (args && args.sessionId != null && !sessionWindows.has(args.sessionId)) {-    const c = _closedSessions.get(args.sessionId);-    if (c) throw new Error(`session '${args.sessionId}' was closed ${c.byUser ? 'BY THE USER' : 'by the agent'} — open a new window with nbrowser_open_window`);+  let tabId;+  if (args && args.tabId != null) {+    tabId = Number(args.tabId);+  } else {+    if (args && args.sessionId != null && !sessionWindows.has(args.sessionId)) {+      const c = _closedSessions.get(args.sessionId);+      if (c) throw new Error(`session '${args.sessionId}' was closed ${c.byUser ? 'BY THE USER' : 'by the agent'} — open a new window with nbrowser_open_window`);+    }+    let windowId;+    if (args && args.sessionId != null && sessionWindows.has(args.sessionId)) windowId = sessionWindows.get(args.sessionId);+    const q = windowId != null ? { active: true, windowId } : { active: true, lastFocusedWindow: true };+    const [tab] = await chrome.tabs.query(q);+    if (!tab) throw new Error('no target tab found');+    tabId = tab.id;   }-  let windowId;-  if (args && args.sessionId != null && sessionWindows.has(args.sessionId)) windowId = sessionWindows.get(args.sessionId);-  const q = windowId != null ? { active: true, windowId } : { active: true, lastFocusedWindow: true };-  const [tab] = await chrome.tabs.query(q);-  if (!tab) throw new Error('no target tab found');-  return tab.id;+  await assertDriveableWindow(tabId, args); // ⛔ PWA guard on EVERY resolution path+  return tabId; }  function resolveWindowId(args) {@@ -130,8 +161,12 @@ export async function switchWindow(args = {}) {   await ensureLoaded();   const winId = resolveWindowId(args);   if (winId == null) throw new Error('unknown sessionId');-  await chrome.windows.update(winId, { focused: true });-  return { ok: true };+  // BACKGROUND by default — switching which window the agent targets must NEVER raise it into the+  // user's face. Every verb already targets a window by its sessionId, so this is a no-op for+  // driving; only raise it when the USER explicitly asked to see it (focused:true), or use AD+  // desktop_bring_to_front for that.+  if (args.focused === true) await chrome.windows.update(winId, { focused: true });+  return { ok: true, focused: args.focused === true, _hint: args.focused === true ? 'Raised for the user (explicit focus).' : 'Targeted in the BACKGROUND, not raised — drive it by passing this sessionId. Surface it only on explicit user request (focused:true or desktop_bring_to_front).' }; }  // Window state — fullscreen / maximized / normal / minimized, via chrome.windows.update.@@ -189,8 +224,11 @@ export async function rescan() { export async function openTab(args = {}) {   await ensureLoaded();   const windowId = resolveWindowId(args);-  const tab = await chrome.tabs.create(windowId != null ? { windowId, url: args.url } : { url: args.url });-  return { ok: true, sessionId: args.sessionId, tabId: String(tab.id), url: tab.url, title: tab.title };+  // BACKGROUND by default — a new tab must not steal the user's focus or yank their active tab.+  // chrome.tabs.create defaults to active:true; force active:false unless the user asked (focused:true).+  const base = { url: args.url, active: args.focused === true };+  const tab = await chrome.tabs.create(windowId != null ? { windowId, ...base } : base);+  return { ok: true, sessionId: args.sessionId, tabId: String(tab.id), url: tab.url, title: tab.title, _hint: 'Opened in the BACKGROUND (active:false) — drive it by tabId. Pass focused:true only if the user asked to see it.' }; }  export async function closeTab(args = {}) {