feat(browser): ship camofox v1.17.0 in compose, verified on a real instance

- compose: camofox service on by default (internal only, volume umt-camofox,
  healthcheck, CAMOFOX_REPLICAS=0 to skip); app depends on it with
  service_started/required=false and auto-registers camofox-env from
  BROWSER_PROVIDER_URL / BROWSER_ACCESS_KEY / BROWSER_ENABLED
- docker/camofox/Dockerfile: builds upstream tag v1.17.0 (389c996); fixes the
  upstream Dockerfile (missing postinstall.js before npm ci, sh -c not
  forwarding SIGTERM so logins were never persisted on restart)
- adapter fixes from the real container: coordinate click via evaluate +
  selector, focus typing with mode=keyboard, password values redacted from
  ARIA snapshots/extract, downloads field names, 410 after browser restart
  treated as lost tab; navigate reopens a tab in the same session
- verified-capability table keyed by upstream version (1.17.0 all ten);
  other versions stay unverified; probe reports auth failures
- settings: browser providers block (create/edit/delete/probe, capability
  table); API POST/PATCH/DELETE /browser/providers, POST .../probe
- scripts/browser-verify: umtbr stack + mock NexusPHP run of REQ 4.7.4 items
- docs: runbook browser §1/§7 (real-instance record), deploy §2.1

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/src/modules/browser/capabilities.ts

@@ -91,6 +91,17 @@ export function registerBrowserCapabilities(registry: CapabilityRegistry, svc: (
         agent(ctx.actorId),
         async (p, ref, x) => {
           await svc().limited(x.site);
+          // 标签页全被上游回收(重启 / 空闲超时,已对账为 lost):在同一会话(同一 profile)里开新标签页,不重放旧引用
+          if (!input.tabId && !p.sessionInfo(sid)?.tabs.some((t) => t.status === "open")) {
+            const tab = await p.openTab(sid, { url: input.url, budget: x.budget, as: "automation" });
+            return {
+              url: tab.url ?? "",
+              httpStatus: null,
+              ok: true,
+              attempts: 1,
+              loginRequired: p.sessionInfo(sid)?.loginPage ?? false,
+            };
+          }
           const r = await p.navigate(ref, input.url, x.budget);
           return { ...r, loginRequired: p.sessionInfo(sid)?.loginPage ?? false };
         },