Record browser endpoints for mac-5 and mac-7

shared/long-term/decisions/browser-endpoints-mac5-mac7.md

@@ -0,0 +1,73 @@
+# Browser endpoints registry for mac-5 takeover and mac-7 automation
+
+Date: 2026-03-18
+Status: accepted
+
+## Purpose
+
+Record the currently validated browser control endpoints so future automation and browser takeover tasks can reuse the right path without re-discovering ports.
+
+## mac-5 local intelligent browser takeover
+
+Use OpenClaw local browser attach on mac-5 for takeover of the real local Chrome session.
+
+### Validated profile
+
+- OpenClaw browser profile: `user`
+- Driver/transport: `existing-session` via `chrome-mcp`
+
+### Validation result
+
+Validated on 2026-03-18:
+
+- `openclaw browser --browser-profile user status` returned `running: true`
+- `openclaw browser --browser-profile user tabs` listed live local tabs
+
+### Operational meaning
+
+This is the preferred path for smart takeover of the browser running on mac-5 itself.
+
+## mac-7 browser automation service
+
+mac-7 hosts the dedicated automation Chrome instance.
+
+### Persistent local CDP service
+
+- LaunchAgent plist:
+  - `~/Library/LaunchAgents/com.lingyuzeng.chrome-cdp-mac7.plist`
+- Chrome executable:
+  - `/Applications/Google Chrome.app/Contents/MacOS/Google Chrome`
+- Dedicated profile dir:
+  - `~/.openclaw/browser/mac7-automation-profile`
+- Persistent local CDP listen address:
+  - `127.0.0.1:9333`
+- Validation:
+  - `http://127.0.0.1:9333/json/version` returns standard CDP metadata and `webSocketDebuggerUrl`
+
+### Current tailnet-facing listener status
+
+Observed on 2026-03-18:
+
+- Tailscale IP on mac-7: `100.64.0.23`
+- A temporary Python TCP proxy was listening on:
+  - `100.64.0.23:9223`
+- That proxy was forwarding toward a Chrome debug port for network reachability testing.
+
+### Important caveat
+
+The `100.64.0.23:9223` listener was observed as a temporary proxy, not yet confirmed as a durable/persistent service managed by LaunchAgent or `tailscale serve`.
+
+Also, `tailscale serve status` showed:
+
+- `No serve config`
+
+So future tasks should treat the endpoints as:
+
+- **stable local automation endpoint on mac-7:** `127.0.0.1:9333`
+- **temporary observed tailnet endpoint on mac-7:** `100.64.0.23:9223`
+
+## Usage guidance
+
+- For mac-5 intelligent browser takeover: use OpenClaw local `user` profile.
+- For mac-7 automation on the same machine: use CDP on `127.0.0.1:9333`.
+- For mac-5 controlling mac-7 across the tailnet, do not assume `100.64.0.23:9223` is durable unless a persistent proxy/serve configuration is explicitly installed later.