Addresses review findings on the dockerized stack: - Container Chrome search was dead: add --remote-debugging-port + a non-default --user-data-dir (Chrome 136+ refuses CDP on the default profile), add the playwright dep (browse-search.mjs connectOverCDP) with browser download skipped, and connect to 127.0.0.1 not "localhost" (container localhost -> ::1 while Chrome binds IPv4). Verified: browse-search returns real results. - Broadcast toggle reliability: always offer setBroadcast in screen-share mode (the embedding/keyword router dropped it for non-English utterances) and make its description force a tool call. "방송 꺼줘"->stop now 5/5; no false triggers. - Stop the broadcast on voice leave (no orphaned stream). - Security: bind VNC/noVNC to loopback by default (VNC_BIND override) and the bridge to the container loopback (BRIDGE_HOST=127.0.0.1), not published. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
21 lines
831 B
Bash
Executable File
21 lines
831 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# Wait for the desktop, then launch Chrome on :1 so the VNC screen shows a
|
|
# controllable browser (jarvis can also drive it). Runs as root -> --no-sandbox.
|
|
set -e
|
|
for i in $(seq 1 40); do
|
|
xdpyinfo -display :1 >/dev/null 2>&1 && break
|
|
sleep 1
|
|
done
|
|
sleep 3
|
|
export DISPLAY=:1
|
|
# --remote-debugging-port exposes CDP so the brain's browse-search.mjs
|
|
# (playwright connectOverCDP) can drive this on-screen Chrome for the
|
|
# broadcast-visible Google/YouTube search. Bound to loopback (same container).
|
|
exec google-chrome \
|
|
--no-sandbox --no-first-run --disable-dev-shm-usage \
|
|
--remote-debugging-port="${CDP_PORT:-9222}" \
|
|
--remote-debugging-address=127.0.0.1 \
|
|
--user-data-dir="${CHROME_PROFILE_DIR:-/root/chrome-profile}" \
|
|
--password-store=basic --start-maximized \
|
|
"${CHROME_START_URL:-about:blank}"
|