fix: recover CI and runtime contracts

Author: Curry

.github/workflows/ci.yml

@@ -154,6 +154,9 @@ jobs:
         with:
           python-version-file: ".python-version"
 
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v7
+
       - name: Setup pnpm for frontend contract checks
         uses: pnpm/action-setup@v4
         with:
@@ -277,8 +280,8 @@ jobs:
       # rot (dropped columns with no re-add, wrong op order, etc.).
       - name: alembic downgrade/upgrade smoke test
         run: |
-          alembic downgrade p3q4r5s6t7u8
-          alembic upgrade head
+          uv run alembic downgrade p3q4r5s6t7u8
+          uv run alembic upgrade head
 
       - name: Native intelligence and event spine PostgreSQL conformance
         run: >-

agent/Dockerfile

@@ -61,6 +61,7 @@ ARG PI_VERSION=0.83.0
 COPY scripts/patch-opencli.js /tmp/patch-opencli.js
 RUN npm install -g @jackwener/opencli@${OPENCLI_VERSION} \
         @earendil-works/pi-coding-agent@${PI_VERSION} \
+        @browserbridge/bbx@${BBX_VERSION} \
     && node /tmp/patch-opencli.js \
     && rm /tmp/patch-opencli.js \
     && rm -rf /root/.npm
@@ -98,6 +99,9 @@ RUN set -eux; \
 COPY scripts/resolve-browser-runtime-bundle.mjs /usr/local/bin/resolve-browser-runtime-bundle.mjs
 COPY scripts/ensure-script-host.mjs /usr/local/bin/ensure-script-host.mjs
 COPY scripts/ensure-violentmonkey-userscripts-access.mjs /usr/local/bin/ensure-violentmonkey-userscripts-access.mjs
+COPY --from=browser-bridge-extension /src/browser-bridge/dist/browser-bridge-extension /opt/browser-bridge-extension
+COPY --from=browser-bridge-extension /src/browser-bridge/dist/browser-bridge-extension-id /etc/browser-bridge-extension-id
+COPY chrome/nginx-cdp.conf.template /etc/nginx/conf.d/cdp.conf.template
 
 # Agent server source plus the runtime adapters it imports at startup.
 WORKDIR /app

agent/entrypoint.sh

@@ -28,6 +28,7 @@ if [ -n "${BROWSER_STARTUP_PAGES:-}" ]; then
   STARTUP_PAGE_OUTPUT="$(node -e 'const pages=JSON.parse(process.argv[1]); if(!Array.isArray(pages)||pages.length>10||pages.some((item)=>typeof item!=="string"||!/^https?:\/\//.test(item))) process.exit(1); process.stdout.write(pages.join("\n"));' "$BROWSER_STARTUP_PAGES")"
   if [ -n "$STARTUP_PAGE_OUTPUT" ]; then mapfile -t STARTUP_PAGES <<< "$STARTUP_PAGE_OUTPUT"; fi
 fi
+if [ "${#STARTUP_PAGES[@]}" -eq 0 ]; then STARTUP_PAGES=(https://www.doubao.com/chat); fi
 
 if [ "$HAVE_CHROME" = "true" ]; then
   export OPENCLI_CDP_ENDPOINT="http://localhost:9222"
@@ -41,12 +42,34 @@ if [ "$HAVE_CHROME" = "true" ]; then
   Xvfb :99 -screen 0 1280x900x24 -nolisten tcp &
   export DISPLAY=:99
   sleep 1
+  export CHROME_HOSTNAME="${CHROME_HOSTNAME:-${HOSTNAME:-agent-1}}"
+  envsubst '${CHROME_HOSTNAME}' \
+    < /etc/nginx/conf.d/cdp.conf.template \
+    > /etc/nginx/conf.d/cdp.conf
+  nginx -g 'daemon off;' &
+  x11vnc -display :99 -nopw -listen 0.0.0.0 -xkb -forever -shared &
+  websockify --web /usr/share/novnc 6080 localhost:5900 &
+
+  BBX_EXTENSION_ID="$(tr -d '\r\n' < /etc/browser-bridge-extension-id)"
+  if [ -n "$BBX_EXTENSION_ID" ]; then
+    bbx install "$BBX_EXTENSION_ID" --browser chromium \
+      || echo "[agent] WARNING: Browser Bridge native host install failed"
+  else
+    echo "[agent] WARNING: Browser Bridge extension ID is missing"
+  fi
+  (while true; do
+    bbx-daemon
+    echo "[agent] BBX daemon exited, restarting in 1s..."
+    sleep 1
+  done) &
+  echo "[agent] BBX daemon started on ${BBX_TCP_HOST:-127.0.0.1}:${BBX_TCP_PORT:-19826}"
+
   find "$CHROME_PROFILE" -name 'SingletonLock' -o -name 'SingletonCookie' -o -name 'SingletonSocket' 2>/dev/null | xargs rm -f 2>/dev/null || true
 
   DAEMON_JS="$(npm root -g)/@jackwener/opencli/dist/src/daemon.js"
   if [ -f "$DAEMON_JS" ]; then
     (while true; do
-      OPENCLI_DAEMON_LISTEN=127.0.0.1 node "$DAEMON_JS"
+      env -u OPENCLI_DAEMON_PORT OPENCLI_DAEMON_LISTEN=127.0.0.1 node "$DAEMON_JS"
       echo "[agent] Bridge daemon exited, restarting in 1s..."
       sleep 1
     done) &
@@ -57,7 +80,7 @@ if [ "$HAVE_CHROME" = "true" ]; then
 
   start_chrome() {
     find "$CHROME_PROFILE" -name 'SingletonLock' -o -name 'SingletonCookie' -o -name 'SingletonSocket' 2>/dev/null | xargs rm -f 2>/dev/null || true
-    chromium --remote-debugging-port=9222 --remote-debugging-address=127.0.0.1 --remote-allow-origins='*' --no-sandbox --disable-dev-shm-usage --user-data-dir="$CHROME_PROFILE" "${CHROME_EXTRA_FLAGS[@]}" "$@"
+    chromium --remote-debugging-port=9222 --remote-debugging-address=127.0.0.1 --remote-allow-origins='*' --no-sandbox --disable-dev-shm-usage --no-first-run --no-default-browser-check --disable-session-crashed-bubble --user-data-dir="$CHROME_PROFILE" --profile-directory=Default "${CHROME_EXTRA_FLAGS[@]}" --window-size=1280,900 "$@"
   }
   run_runtime_self_check() {
     for _ in $(seq 1 30); do

backend/agent_runtime_dispatch.py

@@ -208,16 +208,19 @@ async def invoke_runtime(
     if config_errors:
         raise HTTPException(status_code=400, detail="; ".join(config_errors))
     terminal_event: dict | None = None
-    async for event in adapter.invoke(task):
-        if not isinstance(event, dict):
-            raise HTTPException(status_code=502, detail="runtime produced an invalid event")
-        if terminal_event is not None:
-            raise HTTPException(
-                status_code=502,
-                detail="runtime produced events after its terminal event",
-            )
-        if event.get("type") in {"done", "error"}:
-            terminal_event = event
+    try:
+        async for event in adapter.invoke(task):
+            if not isinstance(event, dict):
+                raise HTTPException(status_code=502, detail="runtime produced an invalid event")
+            if terminal_event is not None:
+                raise HTTPException(
+                    status_code=502,
+                    detail="runtime produced events after its terminal event",
+                )
+            if event.get("type") in {"done", "error"}:
+                terminal_event = event
+    except RuntimeInvocationError as exc:
+        raise HTTPException(status_code=502, detail=str(exc)) from exc
     if terminal_event is None:
         raise HTTPException(
             status_code=502,

backend/agent_server.py

@@ -135,11 +135,14 @@ def _bundle_declared_runtimes() -> set[str]:
     capabilities = manifest.get("capabilities", [])
     if not isinstance(capabilities, list):
         return set()
-    return {
-        capability.get("runtime")
-        for capability in capabilities
-        if isinstance(capability, dict) and isinstance(capability.get("runtime"), str)
-    }
+    declared: set[str] = set()
+    for capability in capabilities:
+        if not isinstance(capability, dict):
+            continue
+        runtime = capability.get("runtime", "opentabs")
+        if isinstance(runtime, str):
+            declared.add(runtime)
+    return declared
 
 
 def _available_agent_runtimes() -> list[str]:
@@ -150,8 +153,28 @@ def _available_agent_runtimes() -> list[str]:
     return runtimes
 
 
-_EDGE_RUNTIME_CONFIG_KEYS = frozenset(
-    {"binary", "args", "env", "cwd", "project_root", "provider_dir", "usage_file"}
+_EDGE_RUNTIME_TASK_CONFIG_KEYS = frozenset(
+    {
+        "action",
+        "agent_id",
+        "base_delay",
+        "breaker_threshold",
+        "chrome",
+        "input_wait_seconds",
+        "local",
+        "max_attempts",
+        "model",
+        "pack",
+        "permission_mode",
+        "plugin",
+        "poll_interval",
+        "provider",
+        "response_timeout_seconds",
+        "settle_seconds",
+        "suggested_wait_seconds",
+        "tab_id",
+        "timeout_seconds",
+    }
 )
 
 
@@ -525,14 +548,19 @@ async def _register_via_ws(advertise_url: str) -> None:
     _proxy = _HTTPS_PROXY or _HTTP_PROXY or None
     # Computed once (not per reconnect attempt): runtime availability includes
     # fixed-binary compatibility probes and does not change without a restart.
+    runtimes = _available_agent_runtimes()
+    runtime_capabilities = available_runtime_capabilities()
+    for runtime in runtimes:
+        runtime_capabilities.setdefault(runtime, [])
     register_payload = json.dumps(
         {
             "type": "register",
             "agent_url": advertise_url,
             "mode": _AGENT_MODE,
             "node_type": _AGENT_DEPLOY_TYPE,
             "label": _AGENT_LABEL,
-            "runtimes": _available_agent_runtimes(),
+            "runtimes": runtimes,
+            "runtime_capabilities": runtime_capabilities,
             "profile_kind": _BROWSER_PROFILE_KIND,
         }
     )
@@ -687,7 +715,7 @@ async def invoke_runtime_http(
             status_code=403,
             detail=f"runtime {req.runtime!r} is not declared by the installed bundle",
         )
-    unsafe_keys = sorted(_EDGE_RUNTIME_CONFIG_KEYS.intersection(req.config))
+    unsafe_keys = sorted(set(req.config) - _EDGE_RUNTIME_TASK_CONFIG_KEYS)
     if unsafe_keys:
         raise HTTPException(
             status_code=400,

backend/api/v1/__init__.py

@@ -70,7 +70,6 @@
 v1_router.include_router(browser_containers.router)
 v1_router.include_router(browsers.router)
 v1_router.include_router(browsers.runtime_router)
-v1_router.include_router(agent_conversations.router)
 v1_router.include_router(chat.router)
 v1_router.include_router(control.router)
 v1_router.include_router(browser_spaces.router)
@@ -111,3 +110,6 @@
 v1_router.include_router(delivery_execution_routes.router)
 v1_router.include_router(controlled_receiver_routes.router)
 v1_router.include_router(research_graph_v2_routes.router)
+v1_router.include_router(internal_agent_runs.router)
+v1_router.include_router(internal_automations.router)
+v1_router.include_router(internal_collaboration.router)