feat(computer_use): align cua-driver 0.9 contracts
Salvaged from PR #67807 by @f-trycua onto current main.
- Foreground gate: discover delivery_mode support from the live tools/list
inputSchema.properties (fail closed), not the never-shipped
input.delivery_mode capability token
- bring_to_front: standalone strict-schema MCP tool (inject_session=False),
separate approval scope, requires foreground
- Verdict precedence: confirmed > unverifiable (verify before retry) >
suspected_noop/refusal (escalate); surfaced as explicit verdict field
- Typed cua_browser_* route inside computer_use (browser_route.py) with
exact-binding, adapter-injected session, snapshot-scoped refs
- Per-Hermes-session backend isolation + release_computer_use_session seam
wired into AIAgent.close()
- Recorded 0.9 tools/list fixture replaces fabricated capability tokens
Francesco Bonacci
847e401b74