diff --git a/package.json b/package.json
index 667e088..6bb23a4 100644
--- a/package.json
+++ b/package.json
@@ -16,6 +16,7 @@
     "models:sync-metadata": "node scripts/sync-model-metadata.mjs",
     "test:model-metadata": "esbuild scripts/model-metadata-regression.ts --bundle --platform=node --format=esm --external:esbuild --outfile=.tmp/model-metadata-regression.mjs --log-level=warning && node .tmp/model-metadata-regression.mjs",
     "test:claude-kernel": "esbuild scripts/claude-endpoint-regression.ts scripts/claude-tool-input-regression.ts --bundle --platform=node --format=esm --out-extension:.js=.mjs --outdir=.tmp/claude-tests --log-level=warning && node .tmp/claude-tests/claude-endpoint-regression.mjs && node .tmp/claude-tests/claude-tool-input-regression.mjs && node scripts/build-claude-kernel-regression.mjs && node .tmp/claude-kernel-integration.mjs && node scripts/claude-kernel-smoke.mjs",
+    "test:browser-agent": "esbuild scripts/browser-agent-host-regression.ts --bundle --platform=node --format=cjs --external:electron --outfile=.tmp/browser-agent-host-regression.cjs --log-level=warning && electron .tmp/browser-agent-host-regression.cjs",
     "test:chat": "esbuild scripts/message-order-regression.ts scripts/chat-store-regression.ts scripts/chat-stream-committer-regression.ts --bundle --platform=node --format=esm --out-extension:.js=.mjs --outdir=.tmp/chat-tests --log-level=warning && node .tmp/chat-tests/message-order-regression.mjs && node .tmp/chat-tests/chat-store-regression.mjs && node .tmp/chat-tests/chat-stream-committer-regression.mjs",
     "test:references": "esbuild scripts/reference-content-regression.tsx --bundle --platform=node --format=cjs --jsx=automatic --loader:.css=empty --outfile=.tmp/reference-content-regression.cjs --log-level=error && node .tmp/reference-content-regression.cjs",
     "test:markdown": "esbuild scripts/markdown-regression.tsx --bundle --platform=node --format=cjs --jsx=automatic --loader:.css=empty --outfile=.tmp/markdown-regression.cjs --log-level=warning && node .tmp/markdown-regression.cjs",
diff --git a/scripts/browser-agent-host-regression.ts b/scripts/browser-agent-host-regression.ts
new file mode 100644
index 0000000..34ec72a
--- /dev/null
+++ b/scripts/browser-agent-host-regression.ts
@@ -0,0 +1,38 @@
+import assert from 'node:assert/strict'
+import { app, BrowserWindow } from 'electron'
+import {
+  browserHostView,
+  closeAgentBrowser,
+  createAgentBrowser,
+  publishBrowserHostOpened,
+  setBrowserBounds,
+  setBrowserHostEventSink
+} from '../src/main/browser-host'
+
+async function main(): Promise<void> {
+  await app.whenReady()
+  const owner = new BrowserWindow({ show: false, width: 1335, height: 916 })
+  const events: Array<{ type: string; id: string; sessionId?: string }> = []
+  setBrowserHostEventSink(event => events.push({ type: event.type, id: event.view.id, sessionId: event.view.sessionId }))
+
+  const sessionId = 'browser-agent-regression'
+  const agent = createAgentBrowser(owner, sessionId)
+  await agent.contents.loadURL('data:text/html,<title>Agent Browser</title><h1>ready</h1>')
+
+  assert.equal(browserHostView(owner, agent.id, sessionId).visible, false)
+  setBrowserBounds(owner, agent.id, { x: 20, y: 20, width: 800, height: 600 }, sessionId)
+  assert.equal(browserHostView(owner, agent.id, sessionId).visible, true)
+  publishBrowserHostOpened(owner, agent.id, sessionId)
+  assert.deepEqual(events, [{ type: 'opened', id: agent.id, sessionId }])
+
+  closeAgentBrowser(owner, agent.id, sessionId)
+  setBrowserHostEventSink(undefined)
+  owner.destroy()
+  console.log('Agent browser host lifecycle regression checks passed.')
+  app.quit()
+}
+
+void main().catch(error => {
+  console.error(error)
+  app.exit(1)
+})
diff --git a/scripts/verify-ui.mjs b/scripts/verify-ui.mjs
index c3dc080..7296676 100644
--- a/scripts/verify-ui.mjs
+++ b/scripts/verify-ui.mjs
@@ -109,7 +109,7 @@ const STUB = `<script>
     browser: {
       create: async()=>({id:'offline-browser',title:'离线浏览器',url:'about:blank'}),
       get: async(id)=>({id:id,title:'',url:'about:blank',canGoBack:false,canGoForward:false,loading:false}),
-      navigate: async()=>({}), back: async()=>({}), forward: async()=>({}), reload: async()=>({}), bounds: async()=>{}, close: async()=>{}, rebind: async()=>{}
+      navigate: async()=>({}), back: async()=>({}), forward: async()=>({}), reload: async()=>({}), bounds: async()=>{}, close: async()=>{}, rebind: async()=>{}, onEvent:()=>()=>{}
     },
     terminal: {
       create: async()=>({id:'offline-terminal',title:'终端'}),
diff --git a/src/main/agent/claude/claude-kernel.ts b/src/main/agent/claude/claude-kernel.ts
index 193766c..7aa7321 100644
--- a/src/main/agent/claude/claude-kernel.ts
+++ b/src/main/agent/claude/claude-kernel.ts
@@ -82,6 +82,7 @@ interface ClaudeTurnRequest {
   emit(event: ChatEvent): void
   interactions: InteractionBroker
   signal: AbortSignal
+  ownerWebContentsId?: number
 }
 
 export interface ClaudeTurnResult {
@@ -429,6 +430,7 @@ export class ClaudeKernel {
                   const result = await browserTool.run(args, {
                     workspaceRoot: this.options.workspaceRoot,
                     sessionId: this.options.sessionId,
+                    webContentsId: this.active?.request.ownerWebContentsId,
                     signal: this.active?.request.signal
                   })
                   const content: Array<
diff --git a/src/main/agent/tools/browser.ts b/src/main/agent/tools/browser.ts
index 793ac82..1879545 100644
--- a/src/main/agent/tools/browser.ts
+++ b/src/main/agent/tools/browser.ts
@@ -7,6 +7,7 @@ export interface ToolContext {
   runId?: string
   toolCallId?: string
   sessionId?: string
+  webContentsId?: number
 }
 
 export interface ToolResult {
diff --git a/src/main/browser-automation.ts b/src/main/browser-automation.ts
index a02e4bb..a9617ca 100644
--- a/src/main/browser-automation.ts
+++ b/src/main/browser-automation.ts
@@ -1,14 +1,16 @@
-import { app, BrowserWindow } from 'electron'
+import { app, BrowserWindow, webContents, type WebContents } from 'electron'
 import { randomUUID } from 'node:crypto'
 import { resolve } from 'node:path'
 import type { ToolContext, ToolResult } from './agent/tools/browser'
 import { browserDomScript } from './agent/browser-dom'
+import { browserHostView, closeAgentBrowser, createAgentBrowser, publishBrowserHostOpened } from './browser-host'
 
 interface ManagedBrowser {
   id: string
   scope: string
   sessionId?: string
-  window: BrowserWindow
+  owner: BrowserWindow
+  contents: WebContents
   documentKey: string
   pending: Promise<unknown>
 }
@@ -26,7 +28,7 @@ export function installBrowserAutomationLifecycle(): void {
   app.on('before-quit', disposeBrowserAutomation)
   app.on('browser-window-created', (_event, window) => {
     window.once('closed', () => {
-      const managed = new Set([...browsers.values()].map(browser => browser.window))
+      const managed = new Set([...browsers.values()].map(browser => browser.owner))
       if (!BrowserWindow.getAllWindows().some(candidate => !candidate.isDestroyed() && !managed.has(candidate))) disposeBrowserAutomation()
     })
   })
@@ -58,12 +60,12 @@ function timeout(args: Record<string, unknown>): number {
   return Math.trunc(args.timeoutMs)
 }
 function info(browser: ManagedBrowser): Record<string, unknown> {
-  const contents = browser.window.webContents
-  return { tabId: browser.id, url: contents.getURL(), title: contents.getTitle(), loading: contents.isLoadingMainFrame(), headless: true }
+  const view = browserHostView(browser.owner, browser.id, browser.sessionId)
+  return { tabId: browser.id, url: view.url, title: view.title, loading: view.loading, headless: false }
 }
 function release(browser: ManagedBrowser): void {
   browsers.delete(browser.id)
-  if (!browser.window.isDestroyed()) browser.window.destroy()
+  closeAgentBrowser(browser.owner, browser.id, browser.sessionId)
 }
 export function disposeSessionBrowsers(sessionId: string): void {
   for (const browser of [...browsers.values()]) if (browser.sessionId === sessionId) release(browser)
@@ -91,41 +93,38 @@ async function pause(milliseconds: number, ctx: ToolContext): Promise<void> {
   await bounded(new Promise<void>(done => setTimeout(done, milliseconds)), ctx, milliseconds + 1000)
 }
 function owned(args: Record<string, unknown>, key: string): ManagedBrowser {
-  const mine = [...browsers.values()].filter(browser => browser.scope === key && !browser.window.isDestroyed())
+  const mine = [...browsers.values()].filter(browser => browser.scope === key && !browser.contents.isDestroyed())
   const browser = typeof args.tabId === 'string' ? browsers.get(args.tabId) : mine.length === 1 ? mine[0] : undefined
-  if (!browser || browser.scope !== key || browser.window.isDestroyed()) throw new Error('浏览器标签不存在、不属于当前会话，或存在多个标签；请先 list 并指定 tabId')
+  if (!browser || browser.scope !== key || browser.contents.isDestroyed()) throw new Error('浏览器标签不存在、不属于当前会话，或存在多个标签；请先 list 并指定 tabId')
   return browser
 }
 async function approve(_action: string, _args: Record<string, unknown>, ctx: ToolContext): Promise<void> {
   active(ctx)
 }
+function browserOwner(ctx: ToolContext): BrowserWindow {
+  const sender = ctx.webContentsId ? webContents.fromId(ctx.webContentsId) : undefined
+  const owner = sender ? BrowserWindow.fromWebContents(sender) : BrowserWindow.getFocusedWindow()
+  if (!owner || owner.isDestroyed()) throw new Error('浏览器需要有效的 YCode 窗口')
+  return owner
+}
 function create(key: string, ctx: ToolContext): ManagedBrowser {
   if (!app.isReady()) throw new Error('Electron 浏览器尚未就绪')
   if (browsers.size >= 16 || [...browsers.values()].filter(browser => browser.scope === key).length >= 4) throw new Error('后台浏览器标签达到上限，请先 close 不再使用的标签')
-  const id = randomUUID()
-  const window = new BrowserWindow({ width: 1280, height: 800, useContentSize: true, show: false, paintWhenInitiallyHidden: true,
-    title: 'YCode 后台浏览器', webPreferences: { sandbox: true, contextIsolation: true, nodeIntegration: false,
-      webSecurity: true, allowRunningInsecureContent: false, backgroundThrottling: false, offscreen: true, partition: `ycode-agent-browser-${id}` } })
-  const browser: ManagedBrowser = { id, scope: key, sessionId: ctx.sessionId, window, documentKey: randomUUID(), pending: Promise.resolve() }
-  browsers.set(id, browser)
-  const contents = window.webContents
-  contents.session.setPermissionRequestHandler((_contents, _permission, callback) => callback(false))
-  contents.session.setPermissionCheckHandler(() => false)
-  contents.session.on('will-download', event => event.preventDefault())
-  contents.session.webRequest.onBeforeRequest((details, callback) => {
-    try { callback({ cancel: !['http:', 'https:', 'ws:', 'wss:', 'data:', 'blob:', 'about:'].includes(new URL(details.url).protocol) }) }
-    catch { callback({ cancel: true }) }
-  })
+  const owner = browserOwner(ctx)
+  if (!ctx.sessionId) throw new Error('浏览器需要有效的会话')
+  const created = createAgentBrowser(owner, ctx.sessionId)
+  const browser: ManagedBrowser = { id: created.id, scope: key, sessionId: ctx.sessionId,
+    owner, contents: created.contents, documentKey: randomUUID(), pending: Promise.resolve() }
+  browsers.set(browser.id, browser)
+  const contents = browser.contents
   const guard = (event: { preventDefault(): void }, target: string): void => { try { url(target) } catch { event.preventDefault() } }
   contents.on('will-navigate', guard)
   contents.on('will-redirect', guard)
   contents.on('did-navigate', () => { browser.documentKey = randomUUID() })
   contents.on('render-process-gone', () => release(browser))
-  contents.setWindowOpenHandler(({ url: target }) => {
-    try { void contents.loadURL(url(target)).catch(() => undefined) } catch { /* unsupported popup URL is refused */ }
-    return { action: 'deny' }
+  contents.once('destroyed', () => {
+    if (browsers.get(browser.id) === browser) browsers.delete(browser.id)
   })
-  window.on('closed', () => browsers.delete(id))
   try {
     contents.debugger.attach('1.3')
     void contents.debugger.sendCommand('Page.enable').catch(() => undefined)
@@ -137,7 +136,7 @@ function create(key: string, ctx: ToolContext): ManagedBrowser {
 }
 async function dom(browser: ManagedBrowser, request: Record<string, unknown>, ctx: ToolContext): Promise<Record<string, unknown>> {
   active(ctx)
-  const result = await bounded(browser.window.webContents.executeJavaScriptInIsolatedWorld(WORLD,
+  const result = await bounded(browser.contents.executeJavaScriptInIsolatedWorld(WORLD,
     [{ code: browserDomScript({ ...request, documentKey: browser.documentKey }) }]), ctx, 8000, () => release(browser))
   if (result && typeof result.__ycodeBrowserError === 'string') throw new Error(result.__ycodeBrowserError)
   return result
@@ -153,19 +152,19 @@ async function snapshot(browser: ManagedBrowser, ctx: ToolContext): Promise<Tool
 async function settle(browser: ManagedBrowser, ctx: ToolContext, milliseconds: number): Promise<void> {
   await pause(80, ctx)
   const until = Date.now() + milliseconds
-  while (!browser.window.isDestroyed() && browser.window.webContents.isLoadingMainFrame()) {
+  while (!browser.contents.isDestroyed() && browser.contents.isLoadingMainFrame()) {
     if (Date.now() >= until) throw new Error('网页仍在加载；可稍后 snapshot 或 wait')
     await pause(50, ctx)
   }
   active(ctx)
-  if (browser.window.isDestroyed()) throw new Error('浏览器标签已关闭')
+  if (browser.contents.isDestroyed()) throw new Error('浏览器标签已关闭')
 }
 async function input(browser: ManagedBrowser, command: string, parameters: Record<string, unknown>, ctx: ToolContext): Promise<void> {
   active(ctx)
-  await bounded(browser.window.webContents.debugger.sendCommand(command, parameters), ctx, 8000, () => release(browser))
+  await bounded(browser.contents.debugger.sendCommand(command, parameters), ctx, 8000, () => release(browser))
 }
 async function act(browser: ManagedBrowser, action: string, args: Record<string, unknown>, ctx: ToolContext): Promise<ToolResult> {
-  const contents = browser.window.webContents
+  const contents = browser.contents
   const milliseconds = timeout(args)
   if (action === 'close') { const data = info(browser); release(browser); return { ok: true, content: '浏览器标签已关闭', data } }
   if (action === 'open' || action === 'navigate') {
@@ -235,10 +234,14 @@ export async function executeBrowserTool(args: Record<string, unknown>, ctx: Too
   const browser = existing ?? create(key, ctx)
   const operation = browser.pending.catch(() => undefined).then(async () => {
     active(ctx)
-    if (browsers.get(browser.id) !== browser || browser.window.isDestroyed()) throw new Error('浏览器标签已关闭')
+    if (browsers.get(browser.id) !== browser || browser.contents.isDestroyed()) throw new Error('浏览器标签已关闭')
     return act(browser, action, args, ctx)
   })
   browser.pending = operation.catch(() => undefined)
-  try { return await bounded(operation, ctx, timeout(args) + 10000) }
+  try {
+    const result = await bounded(operation, ctx, timeout(args) + 10000)
+    if (action === 'open' || action === 'navigate') publishBrowserHostOpened(browser.owner, browser.id, browser.sessionId)
+    return result
+  }
   catch (error) { if (action === 'open') release(browser); throw error }
 }
diff --git a/src/main/browser-host.ts b/src/main/browser-host.ts
index 5391be8..78f76b8 100644
--- a/src/main/browser-host.ts
+++ b/src/main/browser-host.ts
@@ -1,10 +1,14 @@
-import { WebContentsView, type BrowserWindow } from 'electron'
+import { WebContentsView, type BrowserWindow, type WebContents } from 'electron'
 import { randomUUID } from 'node:crypto'
-import { clampBrowserHostBounds, normalizeBrowserHostUrl, type BrowserHostBounds, type BrowserHostView } from '../shared/browser-host'
+import { clampBrowserHostBounds, normalizeBrowserHostUrl, type BrowserHostBounds, type BrowserHostEvent, type BrowserHostView } from '../shared/browser-host'
 
 interface BrowserRecord { id: string; owner: BrowserWindow; sessionId?: string; view: WebContentsView; visible: boolean; error?: string; navigationVersion: number }
 const browsers = new Map<string, BrowserRecord>()
 const owners = new Set<number>()
+let eventSink: ((event: BrowserHostEvent) => void) | undefined
+export function setBrowserHostEventSink(sink: ((event: BrowserHostEvent) => void) | undefined): void {
+  eventSink = sink
+}
 function requireBrowser(owner: BrowserWindow, id: string, sessionId?: string): BrowserRecord {
   const browser = browsers.get(id)
   if (!browser || browser.owner !== owner || browser.sessionId !== sessionId || owner.isDestroyed() || browser.view.webContents.isDestroyed()) throw new Error('浏览器标签不存在或不属于当前任务')
@@ -32,13 +36,14 @@ async function load(browser: BrowserRecord, url: string): Promise<void> {
   try { await browser.view.webContents.loadURL(url) }
   catch (error) { if (version === browser.navigationVersion && !browser.view.webContents.isDestroyed() && !aborted(error)) browser.error = error instanceof Error ? error.message : String(error) }
 }
-export function createBrowser(owner: BrowserWindow, sessionId?: string, initialUrl = 'about:blank'): BrowserHostView {
+function createRecord(owner: BrowserWindow, sessionId: string | undefined, initialUrl: string, background: boolean): BrowserRecord {
   if (owner.isDestroyed()) throw new Error('宿主窗口已关闭')
   if (sessionId !== undefined && (typeof sessionId !== 'string' || sessionId.length > 256 || !sessionId)) throw new Error('任务标识无效')
   const url = normalizeBrowserHostUrl(initialUrl)
   const id = randomUUID()
   const view = new WebContentsView({ webPreferences: { sandbox: true, contextIsolation: true, nodeIntegration: false,
-    webSecurity: true, allowRunningInsecureContent: false, partition: `ycode-browser-${id}` } })
+    webSecurity: true, allowRunningInsecureContent: false, backgroundThrottling: false,
+    partition: `ycode-browser-${id}` } })
   const browser: BrowserRecord = { id, owner, sessionId, view, visible: false, navigationVersion: 0 }
   browsers.set(id, browser)
   const contents = view.webContents
@@ -58,6 +63,10 @@ export function createBrowser(owner: BrowserWindow, sessionId?: string, initialU
   contents.on('render-process-gone', (_event, details) => { browser.error = `浏览器进程已结束：${details.reason}` })
   contents.on('destroyed', () => browsers.delete(id))
   owner.contentView.addChildView(view)
+  if (background) {
+    const [width, height] = owner.getContentSize()
+    view.setBounds({ x: 0, y: 0, width: Math.min(1280, width), height: Math.min(800, height) })
+  }
   view.setVisible(false)
   if (!owners.has(owner.id)) {
     owners.add(owner.id)
@@ -68,7 +77,28 @@ export function createBrowser(owner: BrowserWindow, sessionId?: string, initialU
     } })
   }
   if (url !== 'about:blank') void load(browser, url)
-  return snapshot(browser)
+  return browser
+}
+export function createBrowser(owner: BrowserWindow, sessionId?: string, initialUrl = 'about:blank'): BrowserHostView {
+  return snapshot(createRecord(owner, sessionId, initialUrl, false))
+}
+export function createAgentBrowser(owner: BrowserWindow, sessionId: string, initialUrl = 'about:blank'): { id: string; contents: WebContents } {
+  const browser = createRecord(owner, sessionId, initialUrl, true)
+  return { id: browser.id, contents: browser.view.webContents }
+}
+export function publishBrowserHostOpened(owner: BrowserWindow, id: string, sessionId?: string): void {
+  const browser = requireBrowser(owner, id, sessionId)
+  eventSink?.({ type: 'opened', view: snapshot(browser) })
+}
+export function browserHostView(owner: BrowserWindow, id: string, sessionId?: string): BrowserHostView {
+  return snapshot(requireBrowser(owner, id, sessionId))
+}
+export function closeAgentBrowser(owner: BrowserWindow, id: string, sessionId?: string): void {
+  const browser = browsers.get(id)
+  if (!browser) return
+  if (browser.owner !== owner || browser.sessionId !== sessionId) throw new Error('浏览器标签不存在或不属于当前任务')
+  if (owner.isDestroyed()) browsers.delete(id)
+  else release(browser)
 }
 export function getBrowserState(owner: BrowserWindow, id: string, sessionId?: string): BrowserHostView { return snapshot(requireBrowser(owner, id, sessionId)) }
 /** The IPC caller validates the destination YCode session before transferring a draft tab. */
diff --git a/src/main/chat-turn-service.ts b/src/main/chat-turn-service.ts
index de5c03a..0616029 100644
--- a/src/main/chat-turn-service.ts
+++ b/src/main/chat-turn-service.ts
@@ -246,7 +246,7 @@ export function createChatTurnService({ projects: projectRepository, sessionRoot
         await kernel.setPolicy(permissionMode, mode)
         const result = await kernel.runTurn({
           runId, userMessageId: userMessage.id, prompt: promptText, images: promptAttachments.images,
-          emit, interactions: interactionBroker, signal: controller.signal
+          emit, interactions: interactionBroker, signal: controller.signal, ownerWebContentsId: recipient?.id
         })
         assistant.content = result.content
         assistant.tools = result.tools
diff --git a/src/main/ipc.ts b/src/main/ipc.ts
index 1fc3d72..233839b 100644
--- a/src/main/ipc.ts
+++ b/src/main/ipc.ts
@@ -73,6 +73,7 @@ export function registerIpc(getWindow: () => BrowserWindow | null): void {
       catch { /* All access to a destroyed Electron object must stay outside the execution path. */ }
     }
   }
+  browserHost.setBrowserHostEventSink(event => broadcastChat('browser:event', event))
   const projects = new ProjectRepository(join(app.getPath('userData'), 'projects.json'))
   const chatTurns = createChatTurnService({ projects, sessionRoot, broadcastChat, getDefaultRecipient: () => getWindow()?.webContents })
   const automation = createAutomationHost({ userData: app.getPath('userData'), projects, chatTurns,
diff --git a/src/preload/index.ts b/src/preload/index.ts
index bd38c37..b1aac4a 100644
--- a/src/preload/index.ts
+++ b/src/preload/index.ts
@@ -63,7 +63,12 @@ const api: YCodeApi = {
     forward: (id, sessionId) => ipcRenderer.invoke('browser:forward', id, sessionId),
     reload: (id, sessionId) => ipcRenderer.invoke('browser:reload', id, sessionId),
     bounds: (id, bounds, sessionId) => ipcRenderer.invoke('browser:bounds', id, bounds, sessionId),
-    close: (id, sessionId) => ipcRenderer.invoke('browser:close', id, sessionId)
+    close: (id, sessionId) => ipcRenderer.invoke('browser:close', id, sessionId),
+    onEvent: (listener) => {
+      const handler = (_event: unknown, payload: Parameters<typeof listener>[0]): void => listener(payload)
+      ipcRenderer.on('browser:event', handler)
+      return () => ipcRenderer.removeListener('browser:event', handler)
+    }
   },
   window: {
     minimize: () => ipcRenderer.invoke('window:minimize'),
diff --git a/src/renderer/src/App.tsx b/src/renderer/src/App.tsx
index fe9632f..94189e2 100644
--- a/src/renderer/src/App.tsx
+++ b/src/renderer/src/App.tsx
@@ -233,6 +233,15 @@ export default function App(): React.JSX.Element {
     })
     return () => { closeRemovedHosts(); stopChat() }
   }, [])
+  useEffect(() => window.ycode.browser.onEvent((event) => {
+    if (event.type !== 'opened' || !event.view.sessionId) return
+    const sessionId = event.view.sessionId
+    const store = useWorkbenchStore.getState()
+    store.openHost(sessionId, 'browser', event.view.id, event.view.title || '浏览器')
+    if (useChatStore.getState().currentSessionId !== sessionId) return
+    store.select(sessionId, `browser:${event.view.id}`)
+    store.setPanel(sessionId, { open: true, width: store.sessions[sessionId]?.width ?? Vw.MIN_WIDTH })
+  }), [])
   useEffect(() => {
     const onPreview = (event: Event): void => {
       const detail = (event as CustomEvent<{ path?: string; range?: ResourceRange; resource?: WorkspaceResource }>).detail
diff --git a/src/shared/browser-host.ts b/src/shared/browser-host.ts
index 08ad1e4..3b364c8 100644
--- a/src/shared/browser-host.ts
+++ b/src/shared/browser-host.ts
@@ -10,6 +10,10 @@ export interface BrowserHostView {
   visible: boolean
   error?: string
 }
+export interface BrowserHostEvent {
+  type: 'opened'
+  view: BrowserHostView
+}
 export interface BrowserHostApi {
   create(sessionId?: string, initialUrl?: string): Promise<BrowserHostView>
   get(id: string, sessionId?: string): Promise<BrowserHostView>
@@ -20,6 +24,7 @@ export interface BrowserHostApi {
   bounds(id: string, bounds: BrowserHostBounds | null, sessionId?: string): Promise<void>
   close(id: string, sessionId?: string): Promise<void>
   rebind(id: string, previousSessionId: string | undefined, nextSessionId: string): Promise<BrowserHostView>
+  onEvent(listener: (event: BrowserHostEvent) => void): () => void
 }
 
 export function normalizeBrowserHostUrl(value: string): string {