Local control for user_device environments

[abonneth]

Note

Medium Risk
Breaking environment client APIs and new on-machine command execution (browser/desktop) increase integration and operational risk; session cancellation on bridge loss can surprise callers.

Overview
Adds local execution for user_device environments and expands the environment model beyond cloud-only browsers.

The OpenAPI/SDK now treat environments as a web | desktop discriminated union. Browsers gain host (cloud / user_device), optional session_id to attach to an existing runner, and persist_browser_profile; vault/profile bindings are documented as cloud-only. Create/update environment calls take typed request bodies (CreateEnvironmentRequest_* / UpdateEnvironmentRequestBody_*) instead of flat Browser kwargs—a breaking SDK shape change.

New hai_agents_local package polls the platform command channel and dispatches to hai-drivers via SeleniumBrowserBridge (Chrome remote debugging) and PyautoguiDesktopBridge. Client/AsyncClient.sessions use LocalSessionsClient, which can auto-start bridges for inline agents (stamping session_id into unclaimed user_device envs), cancel the session if a bridge dies, and respect HAI_AUTO_BRIDGE. The CLI adds hai local browser|desktop for manual bridging.

Release 1.0.6 ships optional [browser] / [desktop] extras on hai-drivers, bundles hai_agents_local in the wheel, and updates discriminator default tests for the new environment kinds.

^{Reviewed by Cursor Bugbot for commit c854c5e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5dd5a3c. Configure here.}

unblock