NB - Native Browser Bridge

@@ -1711,6 +1711,7 @@ const VERB_META = {   nbrowser_status: { hint: 'Connectivity check: connected profiles + active browser. Call this first if any verb errors "not connected".', related: ['nbrowser_profiles', 'nbrowser_ping', 'nbrowser_open_window'], pitfalls: ['a profile\'s extension SLEEPS when that profile has no open windows - it then shows disconnected; open a window to wake it'] },   nbrowser_readiness: { hint: 'READ-ONLY cold-start probe: is the native-browser extension connected + ready to drive? NEVER spawns work or installs anything. state:"ready" = drive now; state:"needs-extension" = offer to install it (Level-2, see installing-the-extension) or it is asleep (open a window in that profile). Also reports chromeInstalled: false does NOT mean install Chrome: nb drives whatever native browser is there (Edge ships with Windows); read nativeBrowser.chromeNeeded, which is true only when NO supported browser exists, and offer nbrowser_install_chrome only then or when the user asks for Chrome by name.', related: ['nbrowser_status', 'nbrowser_open_window', 'nbrowser_install_chrome'], pitfalls: ['"needs-extension" can mean not-installed OR installed-but-asleep - nbrowser_status\'s tooltip distinguishes', 'this verb never installs; to install, run the installing-the-extension flow', 'for a machine-wide "what do I have" answer prefer ab\'s bridge_readiness (aggregates all bridges, spawns none)'] },   nbrowser_install_chrome: { hint: 'Install NATIVE Google Chrome for the user (Windows). Downloads Google\'s official installer + runs a QUIET user-scoped install (no admin on a normal PC). NON-BLOCKING - returns immediately; poll nbrowser_chrome_status. On a locked-down box it escalates to a notify-first UAC (fires a sticky "Approve now" toast, waits for the tap, then raises the prompt). This is step 1 of getting the AI onto the user\'s REAL browser - after Chrome is in, help them sign into Google + load the extension.', related: ['nbrowser_chrome_status', 'nbrowser_readiness', 'installing-the-extension'], pitfalls: ['on a locked-down box the quiet install parks on a UAC; a fresh Windows 11 keeps Do Not Disturb on until its one-time Allow-notifications prompt is answered, so the Approve-now toast is never seen: nbrowser_chrome_status.notifications says so, and {retryUac:true} shows the prompt again for someone looking at the screen without re-downloading', 'non-blocking: do NOT expect Chrome to exist on return - POLL nbrowser_chrome_status until phase:"ready"', 'awaiting_uac means a prompt is on the user\'s desktop - relay it; do not re-trigger install', 'Windows only for now', 'this only INSTALLS Chrome; the user still signs into Google themselves (their credential) - guide them via setting-up-native-chrome'] },+  nbrowser_prewarm: { hint: 'READ-ONLY tally, run by ab once per installed version (bridge.json prewarm.verb): which browsers are on the machine, every profile, and where nbe is installed / switched off / missing, plus an offer line an AI can put to the user. Saves a timestamped snapshot; nbrowser_readiness recomputes the same tally live on every call.', related: ['nbrowser_readiness', 'nbrowser_profiles', 'installing-the-extension'], pitfalls: ['the saved snapshot can age; for the current state read nbrowser_readiness (nbe block), which is never cached', 'offer is a suggestion for the USER, never an instruction to install: install only with their OK'] },   nbrowser_chrome_status: { hint: 'READ-ONLY: is native Google Chrome installed, and how is an in-flight install going? Returns {installed, executablePath, phase, installing, awaitingUac, edgeInstalled, nativeBrowserPresent, chromeNeeded, notifications}. chromeNeeded is true ONLY when no supported browser exists at all: on an Edge-only box Chrome is optional and the hint says so, so do not install it unless the user asks for Chrome by name. phase: idle|installing|awaiting_uac|ready|failed. Poll this after nbrowser_install_chrome. Never installs or spawns.', related: ['nbrowser_install_chrome', 'nbrowser_readiness'], pitfalls: ['awaiting_uac + notifyChannel:true = a toast is on the desktop, keep polling; notifyChannel:false = relay the UAC to the user yourself', 'installed:true means Chrome.exe is present - next help the user sign into Google + load the extension'] },   nbrowser_ping: { hint: 'Round-trip liveness through to the extension.', related: ['nbrowser_status'], pitfalls: ['a pong proves the extension is reachable, NOT that any profile has a drivable window — use nbrowser_status/readiness for that'] },   nbrowser_progress: { hint: 'FAST poll for MEASURED progress of every in-flight verb: active[] carries one block per running verb (phase, stepLabel, percent, elapsedSec, estimatedSec, etaSec, confidence measured|estimated, startKind, sessionId). Estimates come from this machine\'s own rolling per-verb history (also returned as verbDurations). Poll once a second while something slow runs; empty active[] = idle.', related: ['nbrowser_activity', 'nbrowser_status'], pitfalls: ['percent is capped at 95 until the verb actually completes - the reply of the slow verb itself carries the 100% terminal block', 'confidence is estimated (draw it dimmed) until three real samples exist for that verb on this machine', 'open-ended verbs (wait, wait_for, download_wait, keepalive, record_start) report no percent: render an indeterminate sweep, never a fake 0%'] },@@ -1925,8 +1926,12 @@ function dispatch(verb, args) {         ? ` ⛔ VERSION SKEW (likely the cause of "Native host has exited"): ${staleOnDisk.map((x) => `${x.profile} has extension ${x.installed}`).join(', ')}, but this bridge (${VERSION}) expects extension ${EXPECTED_EXT}. An extension/host that old cannot complete the native-messaging handshake, so the host exits with no message and the SW never connects. FIX: update the extension in that profile to ${EXPECTED_EXT} (re-sync the extension/ + host/ folders per installing-the-extension), then nbrowser_dev_reload {"profile":"<profile>"}. Note: the extension line (${EXPECTED_EXT}) and the skills-package line (a 0.5.x number on the wiki page) are DIFFERENT version streams - match the extension against expectedExtensionVersion, not the pkg version.`         : '';       const claudeExt = claudeExtAnywhere();+      let inv = null; try { inv = nbeInventory(); } catch {}+      const offerHint = inv && inv.offer ? ` NBE TALLY: ${inv.offer}` : '';       return resolve({ success: true, output: JSON.stringify({         ready,+        // Where nbe is installed / switched off / missing, recomputed from disk on THIS call (never cached).+        nbe: inv ? { asOf: inv.asOf, browsers: inv.browsers, tally: inv.tally, installedIn: inv.installedIn, disabledIn: inv.disabledIn, missingIn: inv.missingIn, offer: inv.offer } : null,         state: ready ? 'ready' : 'needs-extension',   // a pending socket that failed its ping probe is NOT "resolving" - nothing real is coming         pendingProfiles: pend.map(([k]) => k),   // DRIVABLE, but the profile email is not resolved yet         zombieHosts: zombies,                    // always [] - see the isZombie note; kept for shape stability@@ -1949,11 +1954,11 @@ function dispatch(verb, args) {         // nb drives whatever native browser is present (adom/nb-bridge#46): on an Edge-only box Chrome is         // optional, and an AI reading chromeInstalled:false must not conclude it should install Chrome.         nativeBrowser: nativeBrowserSummary(),  // {chromeInstalled, edgeInstalled, nativeBrowserPresent, chromeNeeded, edgeProfiles, chromeProfiles}-        _hint: extensionStale+        _hint: (extensionStale           ? `STALE EXTENSION: ${staleDetail}; this bridge expects ${EXPECTED_EXT}. New verbs (wait_for/keepalive/download_wait/set_date/totp/robust-click) will return "verb not implemented yet" on the stale profile(s). SELF-HEAL: (1) refresh the unpacked extension dir to the current build (installing-the-extension -> Updating, or re-sync the extension/ folder), then (2) nbrowser_dev_reload {"profile":"<staleProfile>"} - it re-reads disk in 2 passes and reconnects in ~10s. If the on-disk build is ALREADY current, step (2) alone heals it.` + skewHint           : ready           ? `nbe (the Adom Native Browser Extension) is connected (${live.length} profile(s)) and current (v${EXPECTED_EXT || '?'}); drive it with nbrowser_open_window. Read-only probe - it never spawns work or installs.`-          : `nbe (the Adom Native Browser Extension) is NOT connected. ${pend.length ? `(${pend.length} host socket(s) - ${pend.map(([k]) => k).join(', ')} - are open but FAILED a live ping probe: a native host is connect-looping with no working extension behind it. Do NOT wait on these; treat this box as needs-extension.) ` : ''}${NBE_PITCH}${chExe ? '' : 'This box has NO native Google Chrome (Edge may be present). If the user wants the AI to drive their REAL Chrome, offer nbrowser_install_chrome (installs Google Chrome, mostly no prompt). '}${claudeExt.installed ? `NOTE: the user HAS the Claude for Chrome extension (${claudeExt.profiles.join(', ')}) - you cannot drive it (closed control plane), but the honest interim is real: they can ask Claude in their browser to work a page interactively, while you offer nbe for full automation from any AI thread. ` : ''}It may be not-yet-installed (a Level-2 proactively-offered install: OFFER to install it, then run installing-the-extension - never make them do it) OR installed-but-asleep (the SW sleeps when a profile has no open window). Full onboarding: the setting-up-native-chrome skill. Read-only: never installs or spawns.` + skewHint + hostHint,+          : `nbe (the Adom Native Browser Extension) is NOT connected. ${pend.length ? `(${pend.length} host socket(s) - ${pend.map(([k]) => k).join(', ')} - are open but FAILED a live ping probe: a native host is connect-looping with no working extension behind it. Do NOT wait on these; treat this box as needs-extension.) ` : ''}${NBE_PITCH}${chExe ? '' : 'This box has NO native Google Chrome (Edge may be present). If the user wants the AI to drive their REAL Chrome, offer nbrowser_install_chrome (installs Google Chrome, mostly no prompt). '}${claudeExt.installed ? `NOTE: the user HAS the Claude for Chrome extension (${claudeExt.profiles.join(', ')}) - you cannot drive it (closed control plane), but the honest interim is real: they can ask Claude in their browser to work a page interactively, while you offer nbe for full automation from any AI thread. ` : ''}It may be not-yet-installed (a Level-2 proactively-offered install: OFFER to install it, then run installing-the-extension - never make them do it) OR installed-but-asleep (the SW sleeps when a profile has no open window). Full onboarding: the setting-up-native-chrome skill. Read-only: never installs or spawns.` + skewHint + hostHint) + offerHint,       }) });       });   // end probe.then     }@@ -1991,6 +1996,16 @@ function dispatch(verb, args) {       return resolve({ success: true, output: JSON.stringify({ ok: true, installing: true, phase: 'installing', edgeInstalled: nbSum.edgeInstalled, chromeNeeded: nbSum.chromeNeeded, _note: nbSum.edgeInstalled ? 'Edge is already on this box and nb drives it; Chrome is optional. Continuing because you asked.' : undefined, _hint: 'Installing Google Chrome in the BACKGROUND (downloading Google\'s official installer, then a quiet user-scoped install). On a normal PC this is silent, NO prompt. On a locked-down box (VM/managed) it needs a Windows approval - the bridge fires a sticky "Approve now" toast and waits for the user to tap it, then raises the UAC. Poll nbrowser_chrome_status: phase goes installing -> awaiting_uac -> ready. Then help the user sign into Google + load the extension (setting-up-native-chrome).', statusVerb: 'nbrowser_chrome_status' }) });     }     // nbrowser_chrome_status - READ-ONLY: is native Chrome installed / how's an in-flight install going?+    // nbrowser_prewarm - ab calls this once per installed version (~20s after the first boot after an install+    // or update; adom/nb-bridge#50). nb has no assets to fetch; what is worth doing early is the tally.+    if (verb === 'nbrowser_prewarm') {+      let inv; try { inv = nbeInventory(); } catch (e) { return resolve({ success: false, error: 'inventory failed: ' + String((e && e.message) || e) }); }+      const t = inv.tally;+      const summary = `${[inv.browsers.chrome && 'Chrome', inv.browsers.edge && 'Edge'].filter(Boolean).join(' + ') || 'no supported browser'}; ` ++        `${t.profiles} profile(s): nbe installed in ${t.installed}, switched off in ${t.disabled}, missing from ${t.missing}`;+      return resolve({ success: true, output: JSON.stringify({ ok: true, summary, ...inv,+        _hint: `Tally taken ${inv.asOf} and saved to ${INVENTORY_FILE}. It is a snapshot: nbrowser_readiness recomputes it live on every call, so read that (its nbe block) for the current state.${inv.offer ? ' ' + inv.offer : ''}` }) });+    }     if (verb === 'nbrowser_chrome_status') {       const st = chromeStatus();       const nb = nativeBrowserSummary();@@ -2030,6 +2045,7 @@ function dispatch(verb, args) {         d('nbrowser_activity', 'Bounded "who drove what, when" activity trail (max 600 entries / ~1h, in-memory, resets on bridge restart). Returns recent verb entries + a per-session summary. Debug a stray badge or see what is running.', { sessionId: 'optional str', thread: 'optional str', profile: 'optional str', verb: 'optional str', errorsOnly: 'optional bool', sinceMs: 'optional int', limit: 'optional int (<=600)' }, { ok: 'bool', entries: '[{agoMs,verb,sessionId,thread,profile,ok,errorCode}]', activeSessions: '[{sessionId,thread,purpose,count,lastAgoMs}]' }, 15, { example: {} }),         d('nbrowser_readiness', 'READ-ONLY cold-start probe: is the native-browser extension connected + ready to drive? Never spawns work or installs. Use for "is it ready / do I have the browser extension" instead of nbrowser_status. Also flags a STALE extension (loaded build older than this bridge expects) so you fix it up-front instead of hitting "verb not implemented yet" mid-task.', {}, { ready: 'bool', state: '"ready"|"needs-extension"', installing: 'bool', extensionConnected: 'bool', profiles: '[str]', extensionVersions: '{profile:version}', expectedExtensionVersion: 'str|null', extensionStale: 'bool', staleProfiles: '[str]', chromeInstalled: 'bool', chromeInstallPhase: 'str', claudeExtension: '{installed:bool, profiles:[str]} - Claude for Chrome presence (human fallback; never drivable)' }, 15, { example: {} }),         d('nbrowser_install_chrome', 'Install NATIVE Google Chrome for the user (Windows). Downloads Google\'s official installer + runs a quiet user-scoped install (no admin on a normal PC); escalates to a notify-first UAC on a locked-down box. NON-BLOCKING - poll nbrowser_chrome_status. Step 1 of putting the AI onto the user\'s real signed-in browser.', { elevate: 'optional "auto"(default) | true (skip quiet, straight to UAC) | false (quiet only, no prompt)', retryUac: 'optional bool - re-raise the Windows security prompt from the installer already on this PC (no re-download), for a caller with eyes on the screen when the toast could not be seen' }, { ok: 'bool', installing: 'bool', installed: 'bool?', alreadyInstalled: 'bool?', executablePath: 'str?', statusVerb: 'str' }, 30, { statusVerb: 'nbrowser_chrome_status', example: {} }),+        d('nbrowser_prewarm', 'READ-ONLY tally of browsers, profiles and where nbe is installed / off / missing (ab runs it after an install). readiness recomputes it live.', {}, { ok: 'bool', summary: 'str', asOf: 'str', browsers: 'obj', tally: 'obj', installedIn: 'arr', disabledIn: 'arr', missingIn: 'arr', profiles: 'arr', offer: 'str?' }, 60, { example: {} }),         d('nbrowser_chrome_status', 'READ-ONLY: is native Google Chrome installed / how is an install going? Poll after nbrowser_install_chrome.', {}, { notifications: '{checked,toastsEnabled,adomBridgeEnabled,toastMayBeMuted,_hint} - Windows toast switches, so a caller knows when the Approve-now toast could not have been seen', canRetryUac: 'bool', installed: 'bool', executablePath: 'str?', phase: '"idle"|"installing"|"awaiting_uac"|"ready"|"failed"', installing: 'bool', awaitingUac: 'bool', errorCode: 'str?' }, 15, { example: {} }),         d('nbrowser_ping', 'Round-trip liveness check through to the extension.', {}, { ok: 'bool', pong: 'bool' }, 15),         d('nbrowser_open_window', 'Open a NEW window in the BACKGROUND (unfocused) and return a sessionId to drive it. REGISTRATION REQUIRED: sessionId + thread + purpose, or refused (session_unregistered). Never steals focus; a topmost driven window is auto-reverted (focus_violation).', { left: 'optional int (logical px)', top: 'optional int', width: 'optional int (default: the newWindowSize setting; fill = the work area inset 10 px, pup R1)', height: 'optional int', state: 'optional "maximized"|"normal"', sessionId: 'required str (your short task id)', thread: 'required str (which AI thread you are)', purpose: 'required str (human-readable, e.g. "finishing John\'s IRS signup")', url: 'required str', profile: P, userRequestedForeground: 'optional bool - raise to foreground ONLY when the user asked or a browser/auth feature requires it (default false)', foregroundReason: 'REQUIRED with userRequestedForeground - human-readable why; without it the window STAYS background. Warn the user via ab notify_user FIRST.' }, { ok: 'bool', sessionId: 'str', tabId: 'str', windowId: 'int', hwnd: 'int (OS window handle - use with desktop_screenshot_window to capture the window+chrome+child popups)', url: 'str', _warning: 'str?', keptBackground: 'bool?' }, 30, { example: { sessionId: 'irs', thread: 'thread-7', purpose: 'finishing John IRS signup', url: 'https://wiki.adom.inc' } }),@@ -3319,6 +3335,46 @@ startHttp(argPort());  // Enumerate all Chrome + Edge profiles from each browser's Local State (info_cache: dir -> {user_name}), // so we can map a live window (its OS title carries the signed-in email on Google pages) back to a KEY.+// THE NBE TALLY (John, 2026-09-22): which browsers are on this machine, every profile in them, and where+// the Adom extension (nbe) is installed, switched off, or missing - so an AI can offer the install ("want me+// to add the extension to your Edge work profile so I can do more?") instead of guessing. NEVER CACHED:+// it is re-read from the browsers' own files on every call (a few ms), so a profile added or an extension+// loaded a minute ago shows up at once. nbrowser_prewarm runs the same read early and saves a timestamped+// snapshot (inventory.json) for anything that reads the file; readiness always recomputes.+const INVENTORY_FILE = path.join(os.homedir(), '.adom', 'bridges', BRIDGE, 'inventory.json');+function nbeInventory() {+  const nb = nativeBrowserSummary();+  const liveKeys = new Set(userConns().map(([k]) => k));+  const profiles = [];+  for (const kp of knownProfiles()) {+    let st = {}; try { st = adomExtStateForProfile(kp.browser, kp.profileDir) || {}; } catch {}+    const nbe = !st.checked ? 'unknown' : !st.installed ? 'missing' : !st.enabled ? 'disabled' : 'installed';+    profiles.push({ profile: kp.key, browser: kp.browser, label: kp.displayName || null, profileDir: kp.profileDir, nbe,+      nbeVersion: st.version || null, connected: liveKeys.has(kp.key),+      stale: !!(st.version && EXPECTED_EXT && cmpVer(st.version, EXPECTED_EXT) < 0) });+  }+  const keys = (state) => profiles.filter((x) => x.nbe === state).map((x) => x.profile);+  const installedIn = keys('installed'), disabledIn = keys('disabled'), missingIn = keys('missing');+  const name = (k) => { const x = profiles.find((y) => y.profile === k); return x && x.label ? `${k} ("${x.label}")` : k; };+  let offer = null;+  if (profiles.length && !installedIn.length && !disabledIn.length) {+    offer = `The Adom extension (nbe) is not in any browser profile on this machine (${profiles.map((x) => name(x.profile)).join(', ')}). ` ++      'Worth offering the user, once, in plain words: "Want me to add the Adom extension to your browser? Then I can work in your real, signed-in ' ++      'browser directly: read pages, click, fill forms and take screenshots." Only with their OK; the installing-the-extension skill does the rest.';+  } else if (missingIn.length || disabledIn.length) {+    offer = `nbe is installed in ${installedIn.length ? installedIn.map(name).join(', ') : 'no profile'}` ++      `${missingIn.length ? `, missing from ${missingIn.map(name).join(', ')}` : ''}` ++      `${disabledIn.length ? `, and switched off by the user in ${disabledIn.map(name).join(', ')}` : ''}. ` ++      'If the user works in one of the missing profiles, you could offer: "Want me to add the Adom extension there too?" Only with their OK. ' ++      'Never switch a disabled one back on without asking: they may have turned it off on purpose.';+  }+  const inv = { asOf: new Date().toISOString(),+    browsers: { chrome: !!nb.chromeInstalled, edge: !!nb.edgeInstalled },+    tally: { profiles: profiles.length, installed: installedIn.length, disabled: disabledIn.length, missing: missingIn.length },+    installedIn, disabledIn, missingIn, profiles, offer };+  try { fs.mkdirSync(path.dirname(INVENTORY_FILE), { recursive: true }); fs.writeFileSync(INVENTORY_FILE, JSON.stringify(inv, null, 1)); } catch {}+  return inv;+} function knownProfiles() {   const out = [];   const local = process.env.LOCALAPPDATA;