@deepseek-insight/dsi 0.10.0 → 0.10.2

package/build/client/_app/version.json

@@ -1 +1 @@
-{"version":"1793848049390"}
+{"version":"1794104267615"}

package/build/handler.js

@@ -2,9 +2,9 @@ import './shims.js';
 import 'node:fs';
 import 'node:path';
 import 'node:process';
-export { h as handler } from './server/chunks/handler-BtG6aVza.js';
-import './server/chunks/index.js-rGfUdWOY.js';
-import './server/chunks/manifest.js-DwQ7BEt1.js';
+export { h as handler } from './server/chunks/handler-BOqY82LA.js';
+import './server/chunks/index.js-M1GginY2.js';
+import './server/chunks/manifest.js-BEmwisii.js';
 import './env.js';
 import 'node:buffer';
 import 'node:crypto';
@@ -19,6 +19,6 @@ import 'node:url';
 import './server/chunks/chunks/index-server.js-CPkVoRxB.js';
 import './server/chunks/chunks/server.js-Dijo7DtV.js';
 import './server/chunks/chunks/internal.js-BcS47nI-.js';
-import './server/chunks/chunks/internal2.js-DRFhzPda.js';
-import './server/chunks/chunks/exports.js-DH_tjtdv.js';
+import './server/chunks/chunks/internal2.js-XxZ8wzRE.js';
+import './server/chunks/chunks/exports.js-D5zA1U7A.js';
 //# sourceMappingURL=handler.js.map

package/build/index.js

@@ -1,7 +1,7 @@
 import http from 'node:http';
 import fs__default from 'node:fs';
 import process from 'node:process';
-import { p as polka, h as handler, f as format_listening_address } from './server/chunks/handler-BtG6aVza.js';
+import { p as polka, h as handler, f as format_listening_address } from './server/chunks/handler-BOqY82LA.js';
 import { env, timeout_env } from './env.js';
 import { rm } from 'node:fs/promises';
 import './shims.js';
@@ -14,13 +14,13 @@ import 'node:stream';
 import './server/chunks/chunks/shared.js-HQ0rfhm4.js';
 import './server/chunks/chunks/uneval.js-BJ9Qq2SF.js';
 import './server/chunks/chunks/utils.js-CAdNO8Tu.js';
-import './server/chunks/index.js-rGfUdWOY.js';
+import './server/chunks/index.js-M1GginY2.js';
 import './server/chunks/chunks/index-server.js-CPkVoRxB.js';
 import './server/chunks/chunks/server.js-Dijo7DtV.js';
 import './server/chunks/chunks/internal.js-BcS47nI-.js';
-import './server/chunks/chunks/internal2.js-DRFhzPda.js';
-import './server/chunks/chunks/exports.js-DH_tjtdv.js';
-import './server/chunks/manifest.js-DwQ7BEt1.js';
+import './server/chunks/chunks/internal2.js-XxZ8wzRE.js';
+import './server/chunks/chunks/exports.js-D5zA1U7A.js';
+import './server/chunks/manifest.js-BEmwisii.js';
 import 'node:url';
 
 const path = env('SOCKET_PATH', false);

package/build/server/chunks/chunks/{db.js-f2PmBjyD.js → db.js-BGSxIVb3.js}

@@ -1,4 +1,4 @@
-import { D as DSI_CONFIG_PATH } from './insight-config.js-C5-Rhh5A.js';
+import { D as DSI_CONFIG_PATH } from './insight-config.js-ylYA2CXm.js';
 import { mkdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
@@ -117,4 +117,4 @@ function pruneTerminalBefore(cutoffMs, db = openA2aDb()) {
 }
 
 export { listRecent as a, getRow as g, insertWaiting as i, listWaiting as l, openA2aDb as o, pruneTerminalBefore as p, settleRow as s };
-//# sourceMappingURL=db.js-f2PmBjyD.js.map
+//# sourceMappingURL=db.js-BGSxIVb3.js.map

package/build/server/chunks/chunks/{db2.js-DkwY64WO.js → db2.js-vQNFcVO7.js}

@@ -1,4 +1,4 @@
-import { e as readPromptsConfig, D as DSI_CONFIG_PATH, j as joinTagWords, p as parseTagWords } from './insight-config.js-C5-Rhh5A.js';
+import { e as readPromptsConfig, D as DSI_CONFIG_PATH, j as joinTagWords, p as parseTagWords } from './insight-config.js-ylYA2CXm.js';
 import { mkdirSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
@@ -762,4 +762,4 @@ function updatePrompt(id, fields) {
 }
 
 export { countPromptUse as a, renamePromptLabel as b, createPrompt as c, deletePrompt as d, listPrompts as l, resolvePromptsDbPath as r, searchPrompts as s, updatePrompt as u };
-//# sourceMappingURL=db2.js-DkwY64WO.js.map
+//# sourceMappingURL=db2.js-vQNFcVO7.js.map

package/build/server/chunks/chunks/{dsh-connection.js-BW07Aicl.js → dsh-connection.js-Dcdxqp52.js}

@@ -1,4 +1,4 @@
-import { r as readDshAuthConfig, a as readServerConfig, b as readDshPresetEnglishConfig } from './insight-config.js-C5-Rhh5A.js';
+import { r as readDshAuthConfig, a as readServerConfig, b as readDshPresetEnglishConfig } from './insight-config.js-ylYA2CXm.js';
 import { z as dshBaseUrl } from './config.js-r_jw_bQQ.js';
 
 //#region src/lib/server/dsh-rpc.ts
@@ -1914,12 +1914,18 @@ var RpcRelay = class {
 		};
 	}
 	/**
-	* POC-2 W3 — session.create {cwd?, agentPreset?} → {sessionId, …}.
+	* POC-2 W3 — session.create → {sessionId, …}.
 	* Live-probed round-trip 2026-08-21 (probe7 → real session id).
+	* Birth Workspace Attach (2026-11-06, The Frozen Roster amendment D5):
+	* the location is EITHER workspaceId OR cwd — never both (the host
+	* refuses the pair gateway/bad-request; commands.js:113-115). With
+	* workspaceId the host derives the cwd from the workspace row and
+	* attaches the session to the roster at birth.
 	*/
-	async createSession(cwd, agentPreset) {
+	async createSession(cwd, agentPreset, workspaceId) {
+		const location = workspaceId !== void 0 ? { workspaceId } : cwd === void 0 ? {} : { cwd };
 		return await this.conn.rpc(DSH_METHODS.create, DSH_ARGS.create({
-			...cwd === void 0 ? {} : { cwd },
+			...location,
 			...agentPreset === void 0 ? {} : { agentPreset }
 		}));
 	}
@@ -2571,9 +2577,23 @@ var DshConnection = class {
 	async historyPage(sessionId, beforeSeq) {
 		return this.relay.historyPage(sessionId, beforeSeq);
 	}
-	/** session.create {cwd?, agentPreset?}. */
+	/**
+	* session.create {cwd?|workspaceId?, agentPreset?} — Birth Workspace
+	* Attach (2026-11-06, The Frozen Roster amendment D5/D6): an exact
+	* canonical-path match between the requested cwd and a registered
+	* workspace sends {workspaceId} so the host ATTACHES the session to
+	* the roster at birth (the cwd is omitted — the host derives it from
+	* the row). No match, empty registry, or a LOOKUP failure falls back
+	* to {cwd} exactly as before — resolution failure never fails the
+	* create (D6: no match is a silent fallback, never an auto-adopt).
+	*/
 	async createSession(cwd, agentPreset) {
-		return this.relay.createSession(cwd, agentPreset);
+		let workspaceId;
+		if (cwd !== void 0) try {
+			const { items } = await this.listWorkspaces();
+			workspaceId = items.find((w) => w.path === cwd)?.workspaceId;
+		} catch {}
+		return this.relay.createSession(cwd, agentPreset, workspaceId);
 	}
 	/** session/fork — the fork child. */
 	async forkSession(sessionId, atSeq) {
@@ -2636,4 +2656,4 @@ var DshConnection = class {
 };
 
 export { DshRpcError as D, isPromptImageMediaType as a, buildPromptContent as b, getDshConnection as g, isSubagentRejection as i, mapRpcFailure as m, statusFor as s };
-//# sourceMappingURL=dsh-connection.js-BW07Aicl.js.map
+//# sourceMappingURL=dsh-connection.js-Dcdxqp52.js.map

package/build/server/chunks/chunks/{exports.js-DH_tjtdv.js → exports.js-D5zA1U7A.js}

@@ -1,3 +1,43 @@
+//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_60f7eb265b11a32382764d70df8bbe24/node_modules/@sveltejs/kit/src/runtime/pathname.js
+var DATA_SUFFIX = "/__data.json";
+var HTML_DATA_SUFFIX = ".html__data.json";
+/** @param {string} pathname */
+function has_data_suffix(pathname) {
+	return pathname.endsWith(DATA_SUFFIX) || pathname.endsWith(HTML_DATA_SUFFIX);
+}
+/** @param {string} pathname */
+function add_data_suffix(pathname) {
+	if (pathname.endsWith(".html")) return pathname.replace(/\.html$/, HTML_DATA_SUFFIX);
+	return pathname.replace(/\/$/, "") + DATA_SUFFIX;
+}
+/** @param {string} pathname */
+function strip_data_suffix(pathname) {
+	if (pathname.endsWith(HTML_DATA_SUFFIX)) return pathname.slice(0, -16) + ".html";
+	return pathname.slice(0, -12);
+}
+var ROUTE_SUFFIX = "/__route.js";
+/**
+* @param {string} pathname
+* @returns {boolean}
+*/
+function has_resolution_suffix(pathname) {
+	return pathname.endsWith(ROUTE_SUFFIX);
+}
+/**
+* Convert a regular URL to a route to send to SvelteKit's server-side route resolution endpoint
+* @param {string} pathname
+* @returns {string}
+*/
+function add_resolution_suffix(pathname) {
+	return pathname.replace(/\/$/, "") + ROUTE_SUFFIX;
+}
+/**
+* @param {string} pathname
+* @returns {string}
+*/
+function strip_resolution_suffix(pathname) {
+	return pathname.slice(0, -11);
+}
 var internal = new URL("sveltekit-internal://");
 /**
 * @param {string} base
@@ -129,8 +169,6 @@ function hash(...values) {
 	} else throw new TypeError("value must be a string or TypedArray");
 	return (hash >>> 0).toString(36);
 }
-//#endregion
-//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_60f7eb265b11a32382764d70df8bbe24/node_modules/@sveltejs/kit/src/utils/routing.js
 /**
 * @param {RegExpMatchArray} match
 * @param {import('types').RouteParam[]} params
@@ -259,5 +297,5 @@ var validate_page_exports = validator(valid_page_exports);
 var validate_layout_server_exports = validator(valid_layout_server_exports);
 var validate_page_server_exports = validator(valid_page_server_exports);
 
-export { disable_search as a, validate_layout_exports as b, validate_page_server_exports as c, decode_pathname as d, validate_page_exports as e, find_route as f, hash as h, make_trackable as m, normalize_path as n, resolve as r, validate_layout_server_exports as v };
-//# sourceMappingURL=exports.js-DH_tjtdv.js.map
+export { has_data_suffix as a, strip_data_suffix as b, add_data_suffix as c, decode_pathname as d, add_resolution_suffix as e, find_route as f, disable_search as g, has_resolution_suffix as h, validate_layout_exports as i, validate_page_server_exports as j, validate_page_exports as k, hash as l, make_trackable as m, normalize_path as n, resolve as r, strip_resolution_suffix as s, validate_layout_server_exports as v };
+//# sourceMappingURL=exports.js-D5zA1U7A.js.map

package/build/server/chunks/chunks/{git-probe.js-CQqTV7XX.js → git-probe.js-BIieYqLU.js}

@@ -1,4 +1,4 @@
-import { g as getDshConnection } from './dsh-connection.js-BW07Aicl.js';
+import { g as getDshConnection } from './dsh-connection.js-Dcdxqp52.js';
 import { h as historyToEvents } from './dsh-events.js-BHf0lLZ5.js';
 import { a as foldKnobs, f as filterKnobEvents, F as FULL_ACCESS_PRESET } from './permission-state.js-B7UpAHBv.js';
 import { promises } from 'node:fs';
@@ -216,4 +216,4 @@ async function gitStatus(repo) {
 }
 
 export { GitUnavailableError as G, gitStatus as a, gitFileHead as b, detectRepos as d, gitGateEnabled as g, isInsideRoot as i, parsePorcelainStatus as p, resolveEnclosingRepo as r };
-//# sourceMappingURL=git-probe.js-CQqTV7XX.js.map
+//# sourceMappingURL=git-probe.js-BIieYqLU.js.map

package/build/server/chunks/chunks/{insight-config.js-C5-Rhh5A.js → insight-config.js-ylYA2CXm.js}

@@ -1,5 +1,5 @@
 import { r as resolveA2aConfig, n as intWithin, i as isConfigRecord, D as DEFAULT_PROMPT_TAGS, o as resolveSidebarPlacement, p as resolveWidthBounds, q as resolvePanelPresets, s as resolveZoomBounds, t as resolveConversationFlags, u as resolveStatsBarMode, a as DEFAULT_SIDEBAR_PLACEMENT, c as DEFAULT_PANEL_MAX_ZOOM, d as DEFAULT_PANEL_MIN_ZOOM, e as DEFAULT_A2A_WATCH_TIMEOUT_MS, f as DEFAULT_A2A_FAST_POLL_MS, h as DEFAULT_HOME_REFRESH_MS, j as DEFAULT_HEARTBEAT_TYPE, k as DEFAULT_STATS_BAR_MODE, l as DEFAULT_POLL_IDLE_MS, m as DEFAULT_ACCESS_CONFIRM_TIMEOUT_MS, v as DEFAULT_TERMINAL_IDLE_MS, w as DEFAULT_TERMINAL_GRACE_MS, x as DEFAULT_TERMINAL_SPILL_BYTES, y as DEFAULT_TERMINAL_TAIL_BYTES } from './config.js-r_jw_bQQ.js';
-import { e as ensureDsiHome, m as migrateLegacyDsiConfig, p as parseYamlSettings } from './settings-document.js-DxKURfc_.js';
+import { e as ensureDsiHome, m as migrateLegacyDsiConfig, p as parseYamlSettings } from './settings-document.js-BIxaivJ1.js';
 import { s as settingsHomeDir } from './settings-home2.js-f75-B6RI.js';
 import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
@@ -353,4 +353,4 @@ function readBrowserConfig(configPath) {
 }
 
 export { DEFAULT_CHAT_CONFIG as A, readTerminalConfig as B, DSI_CONFIG_PATH as D, readServerConfig as a, readDshPresetEnglishConfig as b, readA2aConfig as c, readBrowserConfig as d, readPromptsConfig as e, readSettingsHomes as f, readJobsConfig as g, readSidebarConfig as h, readPanelPresets as i, joinTagWords as j, readPanelConfig as k, readHomeConfig as l, readConversationConfig as m, readChatConfig as n, readDshSessionsRootConfig as o, parseTagWords as p, isValidTagWord as q, readDshAuthConfig as r, DEFAULT_DSH_PRESET_ENGLISH as s, DEFAULT_SERVER_CONFIG as t, DEFAULT_PROMPTS_CONFIG as u, DEFAULT_SIDEBAR_CONFIG as v, DEFAULT_PANEL_CONFIG as w, DEFAULT_A2A_CONFIG as x, DEFAULT_HOME_CONFIG as y, DEFAULT_CONVERSATION_CONFIG as z };
-//# sourceMappingURL=insight-config.js-C5-Rhh5A.js.map
+//# sourceMappingURL=insight-config.js-ylYA2CXm.js.map

package/build/server/chunks/chunks/{internal2.js-DRFhzPda.js → internal2.js-XxZ8wzRE.js}

@@ -580,7 +580,7 @@ var options = {
 		app: ({ head, body, assets, nonce, env }) => "<!doctype html>\n<html lang=\"%paraglide.locale%\">\n	<head>\n		<meta charset=\"utf-8\" />\n		<link rel=\"icon\" href=\"" + assets + "/favicon.svg\" />\n		<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n		<script>\n			/* The Three-State Lamp pre-paint (ADR-0023 D3, 2026-10-11): resolve\n			 * the choice and set html[data-theme] BEFORE the bundle paints —\n			 * no flash of light on a dark reload. The key 'dsi-theme' is\n			 * pinned identical to src/lib/utils/theme-prefs.svelte.ts by\n			 * tests/unit/theme-prefs.test.ts; change both together. */\n			try {\n				var m = location.search.match(/[?&]profile=([^&]*)/);\n				var prof = m ? m[1].replace(/[^A-Za-z0-9_-]/g, '').slice(0, 40) : '';\n				var k = 'dsi-theme' + (prof ? '_' + prof : '');\n				var t = localStorage.getItem(k);\n				if (t !== 'light' && t !== 'dark' && t !== 'system') t = 'system';\n				document.documentElement.dataset.theme =\n					t === 'dark' || (t === 'system' && window.matchMedia && matchMedia('(prefers-color-scheme: dark)').matches)\n						? 'dark'\n						: 'light';\n			} catch (e) {\n				document.documentElement.dataset.theme = 'light';\n			}\n		<\/script>\n		" + head + "\n	</head>\n	<body data-sveltekit-preload-data=\"tap\">\n		<div style=\"display: contents\">" + body + "</div>\n	</body>\n</html>\n",
 		error: error_template_default
 	},
-	version_hash: "1gjqxay"
+	version_hash: "1uhloe2"
 };
 async function get_hooks() {
 	let handle;
@@ -588,7 +588,7 @@ async function get_hooks() {
 	let handleError;
 	let handleValidationError;
 	let init;
-	({handle, handleFetch, handleError, handleValidationError, init} = await import('../entries/hooks.server.js-CU2RE5vs.js'));
+	({handle, handleFetch, handleError, handleValidationError, init} = await import('../entries/hooks.server.js-YJQlamhk.js'));
 	let reroute;
 	let transport;
 	return {
@@ -603,4 +603,4 @@ async function get_hooks() {
 }
 
 export { set_public_env as a, set_read_implementation as b, get_hooks as g, options as o, public_env as p, read_implementation as r, set_private_env as s };
-//# sourceMappingURL=internal2.js-DRFhzPda.js.map
+//# sourceMappingURL=internal2.js-XxZ8wzRE.js.map

package/build/server/chunks/chunks/{registry.js-CWnRQ4vx.js → registry.js-ClhrzR6O.js}

@@ -1,5 +1,5 @@
-import { d as readBrowserConfig } from './insight-config.js-C5-Rhh5A.js';
-import { mkdirSync, rmSync, readdirSync } from 'node:fs';
+import { d as readBrowserConfig } from './insight-config.js-ylYA2CXm.js';
+import { mkdirSync, writeFileSync, rmSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { spawn, spawnSync } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
@@ -180,6 +180,14 @@ function clampZoom(z) {
 	if (z < .5 || z > 1.25) return null;
 	return z;
 }
+/** The plain-open identity spoofs (ADR-0046 D3 reasoning, kept for plain
+*  launches;
+*  ADR-0047 D3). */
+var PLAIN_IDENTITY = {
+	userAgent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
+	timezoneId: "America/New_York",
+	locale: "en-US"
+};
 /** The reaper's ONLY test — pure: a session is reaper-eligible when nobody
 *  watches its stream AND its last MCP tool traffic is older than idleMs.
 *  An active agent (traffic younger than idleMs) is NEVER eligible (D2). */
@@ -304,11 +312,35 @@ function state() {
 *  close (crash, kill -9, reaper miss). keep = prefixes of LIVE entries —
 *  a module hot reload re-runs state() init against a process-global map
 *  that may hold live sessions, and this sweep must never delete one. */
+var OWNER_MARKER = ".dsi-owner.json";
+/** Fix 2026-11-05 (browser-proxy-verbs profile-dir flake): every profile dir
+*  open() creates carries an OWNER MARKER (the creating process's pid). Under
+*  vitest, parallel workers boot at staggered times and an empty keep-set
+*  would rmSync a SIBLING worker's LIVE profile dir mid-test (the sibling's
+*  entry map is invisible here) — existsSync then flips false between open()
+*  and the leak-guard assertion. The marker makes ownership visible across
+*  processes: a dir whose marker pid is STILL ALIVE and is not ours is a live
+*  foreign session and must be skipped; a dead-pid marker (crashed worker) or
+*  no marker (the mop pins this arm — legacy/production leftovers) is swept
+*  exactly as before. Production (one registry per machine) is unaffected:
+*  markers only exist for pids this rule would protect, and dead owners sweep. */
+function foreignLiveOwner(dir) {
+	try {
+		const raw = readFileSync(join(dir, OWNER_MARKER), "utf8");
+		const pid = JSON.parse(raw).pid;
+		if (typeof pid !== "number" || pid === process.pid) return false;
+		process.kill(pid, 0);
+		return true;
+	} catch {
+		return false;
+	}
+}
 function sweepOrphanProfiles(keep) {
 	try {
 		const root = readBrowserConfig().profileRoot;
 		for (const name of readdirSync(root)) {
 			if (keep.has(name)) continue;
+			if (foreignLiveOwner(join(root, name))) continue;
 			if (!process.env.VITEST) killOrphanChrome(name, {
 				listPids: () => spawnSync("ps", ["axo", "pid=,command="], {
 					encoding: "utf8",
@@ -375,11 +407,46 @@ function evictBrainPort(brainPort, exceptId) {
 				await brain.connection?.close?.();
 			} catch {}
 		})();
+		e.mcpInProcess?.release?.();
 		e.mcpInProcess = null;
 		e.mcpHealth = "down";
 		e.mcpError = "brain re-homed to a newer glass";
 	}
 }
+/** A6 D7e — the built floor now carries the brain, so a LATE failure must
+*  demote the brain, never kill the floor. Two guards per brain:
+*  1. an 'error' listener on the sibling http listener (node's default for a
+*     stray server error event is a process exit — that default is fatal to a
+*     production floor);
+*  2. a scoped unhandledRejection guard for the brain's lifetime, filtering
+*     to brain-sourced rejections (playwright/mcp or MCP-SDK frames in the
+*     stack) so unrelated crashes still surface loudly. release() removes the
+*     process-level guard at teardown (evict + D8 close call it). */
+function attachBrainGuards(entry) {
+	const brain = entry.mcpInProcess;
+	if (!brain) return;
+	const demote = (what, err) => {
+		entry.mcpHealth = "down";
+		entry.mcpError = what + ": " + (err instanceof Error ? err.message : String(err));
+		entry.mcpInProcess = null;
+		release();
+	};
+	const isBrainSourced = (reason) => {
+		const stack = reason instanceof Error ? reason.stack ?? "" : String(reason);
+		return stack.includes("@playwright/mcp") || stack.includes("modelcontextprotocol") || stack.includes("startInProcessMcp");
+	};
+	const rejectionGuard = (reason) => {
+		if (entry.mcpInProcess !== brain) return;
+		if (isBrainSourced(reason)) demote("unhandled rejection", reason);
+	};
+	const release = () => {
+		process.off("unhandledRejection", rejectionGuard);
+		if (entry.mcpInProcess === brain) brain.release = void 0;
+	};
+	process.prependListener("unhandledRejection", rejectionGuard);
+	brain.release = release;
+	brain.httpServer.on?.("error", (e) => demote("brain listener", e));
+}
 /** The in-process brain (D7): createConnection attached to the SAME headed
 *  browser via cdpEndpoint, served over a SIBLING http listener (SSE +
 *  messages endpoints) so a streamable-http MCP client (the DSH agent) can
@@ -473,6 +540,7 @@ var BrowserRegistry = class {
 			profileDir: e.profileDir,
 			createdAt: e.createdAt,
 			ownerSessionId: e.ownerSessionId ?? null,
+			headedOpen: e.headedOpen === true,
 			mcp: e.mcpChild ? "child" : e.mcpInProcess ? "in-process" : "none",
 			mcpHealth: e.mcpHealth,
 			mcpError: e.mcpError
@@ -792,16 +860,24 @@ var BrowserRegistry = class {
 		const cfg = readBrowserConfig();
 		const id = randomUUID();
 		const port = freePort(options.port);
+		const headless = options.headedOpen ? false : options.headless ?? cfg.headless;
 		const profileDir = join(cfg.profileRoot, id.slice(0, 8));
 		mkdirSync(profileDir, { recursive: true });
+		try {
+			writeFileSync(join(profileDir, OWNER_MARKER), JSON.stringify({
+				pid: process.pid,
+				at: Date.now()
+			}));
+		} catch {}
 		const ignoreDefaultArgs = [
 			"--enable-automation",
 			"--mute-audio",
 			"--hide-scrollbars"
 		];
+		const identity = PLAIN_IDENTITY;
 		const launch = (useChrome) => chromium.launchPersistentContext(profileDir, {
 			...useChrome ? { channel: "chrome" } : {},
-			headless: options.headless ?? cfg.headless,
+			headless,
 			ignoreDefaultArgs,
 			args: [
 				"--no-first-run",
@@ -815,19 +891,23 @@ var BrowserRegistry = class {
 				"--autoplay-policy=no-user-gesture-required",
 				"--window-size=" + (Math.max(200, Math.min(1920, options.width ?? 730)) + 6) + "," + (Math.max(120, Math.min(1080, options.height ?? 830)) + 70)
 			],
-			viewport: options.headless ?? cfg.headless ? {
+			viewport: headless ? {
 				width: Math.max(200, Math.min(1920, options.width ?? 730)),
 				height: Math.max(120, Math.min(1080, options.height ?? 830))
 			} : null,
-			userAgent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
-			timezoneId: "America/New_York",
-			locale: "en-US"
+			...{ userAgent: identity.userAgent } ,
+			...{ timezoneId: identity.timezoneId } ,
+			...{ locale: identity.locale } 
 		});
 		let context;
 		try {
 			context = await launch(true);
 		} catch (chromeErr) {
-			context = await launch(false);
+			try {
+				context = await launch(false);
+			} catch (chromiumErr) {
+				throw new Error("Glass browser: no browser binary. System Google Chrome failed (" + String(chromeErr?.message ?? chromeErr).slice(0, 120) + ") and the bundled chromium is missing (" + String(chromiumErr?.message ?? chromiumErr).slice(0, 120) + "). Cures: install Google Chrome, or run `npx playwright@<playwright-core version from package.json> install chromium` (the revision must match this playwright-core pin).");
+			}
 		}
 		context.browser();
 		const pid = pidOfPort(port);
@@ -897,7 +977,8 @@ var BrowserRegistry = class {
 				height: Math.max(120, Math.min(1080, options.height ?? 830))
 			},
 			zoom: cfg.contentZoom,
-			headless: options.headless ?? cfg.headless,
+			headless,
+			headedOpen: options.headedOpen === true,
 			port,
 			pid,
 			profileDir,
@@ -980,6 +1061,7 @@ var BrowserRegistry = class {
 					entry.mcpInProcess = await startInProcessMcp(entry.port, brainPort, () => {
 						entry.lastMcpActivity = Date.now();
 					});
+					attachBrainGuards(entry);
 				} catch (e) {
 					entry.mcpHealth = "down";
 					entry.mcpError = e.message;
@@ -992,6 +1074,7 @@ var BrowserRegistry = class {
 			pid,
 			profileDir,
 			createdAt: entry.createdAt,
+			headedOpen: entry.headedOpen === true,
 			ownerSessionId: entry.ownerSessionId,
 			mcp: entry.mcpChild ? "child" : entry.mcpInProcess ? "in-process" : "none",
 			mcpHealth: entry.mcpHealth,
@@ -1051,6 +1134,7 @@ var BrowserRegistry = class {
 				setTimeout(res, 2e3);
 			});
 			await brain.connection?.close?.();
+			brain.release?.();
 			entry.mcpInProcess = null;
 		} catch (e) {
 			errs.push(e);
@@ -1072,10 +1156,12 @@ var BrowserRegistry = class {
 			errs.push(e);
 		}
 		try {
-			rmSync(entry.profileDir, {
+			const disposableRoot = readBrowserConfig().profileRoot;
+			if (entry.profileDir.startsWith(disposableRoot)) rmSync(entry.profileDir, {
 				recursive: true,
 				force: true
 			});
+			else console.warn("profile cleanup skipped - dir outside disposable root: " + entry.profileDir);
 		} catch (e) {
 			errs.push(e);
 		}
@@ -1313,54 +1399,57 @@ var BrowserRegistry = class {
 					w: cw,
 					h: ch
 				};
-				await race(anyCdp.send("Browser.setWindowBounds", {
-					windowId: win.windowId,
-					bounds: { windowState: "minimized" }
-				}), null);
-				await race(anyCdp.send("Browser.setWindowBounds", {
-					windowId: win.windowId,
-					bounds: { windowState: "normal" }
-				}), null);
-				await race(anyCdp.send("Browser.setWindowBounds", {
-					windowId: win.windowId,
-					bounds: {
+				if (e.headedOpen === true) console.log("[surface] headed session — bounce+flash skipped (ADR-0041 Amendment 5)");
+				else {
+					await race(anyCdp.send("Browser.setWindowBounds", {
+						windowId: win.windowId,
+						bounds: { windowState: "minimized" }
+					}), null);
+					await race(anyCdp.send("Browser.setWindowBounds", {
+						windowId: win.windowId,
+						bounds: { windowState: "normal" }
+					}), null);
+					await race(anyCdp.send("Browser.setWindowBounds", {
+						windowId: win.windowId,
+						bounds: {
+							width: Math.max(200, want.w + cw),
+							height: Math.max(120, want.h + ch),
+							windowState: "normal"
+						}
+					}), null);
+					await new Promise((r) => setTimeout(r, 300));
+					for (let i = 0; i < 10 && !matched(); i += 1) await new Promise((r) => setTimeout(r, 100));
+					if (matched()) return;
+					const parked = {
 						width: Math.max(200, want.w + cw),
 						height: Math.max(120, want.h + ch),
 						windowState: "normal"
-					}
-				}), null);
-				await new Promise((r) => setTimeout(r, 300));
-				for (let i = 0; i < 10 && !matched(); i += 1) await new Promise((r) => setTimeout(r, 100));
-				if (matched()) return;
-				const parked = {
-					width: Math.max(200, want.w + cw),
-					height: Math.max(120, want.h + ch),
-					windowState: "normal"
-				};
-				await race(anyCdp.send("Browser.setWindowBounds", {
-					windowId: win.windowId,
-					bounds: {
-						...parked,
-						left: 10,
-						top: 10
-					}
-				}), null);
-				await new Promise((r) => setTimeout(r, 400));
-				await race(anyCdp.send("Browser.setWindowBounds", {
-					windowId: win.windowId,
-					bounds: {
-						...parked,
-						left: -32e3,
-						top: -32e3
-					}
-				}), null);
-				await new Promise((r) => setTimeout(r, 300));
-				for (let i = 0; i < 10 && !matched(); i += 1) await new Promise((r) => setTimeout(r, 100));
-				if (matched()) return;
-				console.log("[surface] ladder exhausted: bounce+flash ran, stream frames still", (() => {
-					const d = dimsOf(handle.relay.latestFrame());
-					return d ? d.w + "x" + d.h : "unknown";
-				})());
+					};
+					await race(anyCdp.send("Browser.setWindowBounds", {
+						windowId: win.windowId,
+						bounds: {
+							...parked,
+							left: 10,
+							top: 10
+						}
+					}), null);
+					await new Promise((r) => setTimeout(r, 400));
+					await race(anyCdp.send("Browser.setWindowBounds", {
+						windowId: win.windowId,
+						bounds: {
+							...parked,
+							left: -32e3,
+							top: -32e3
+						}
+					}), null);
+					await new Promise((r) => setTimeout(r, 300));
+					for (let i = 0; i < 10 && !matched(); i += 1) await new Promise((r) => setTimeout(r, 100));
+					if (matched()) return;
+					console.log("[surface] ladder exhausted: bounce+flash ran, stream frames still", (() => {
+						const d = dimsOf(handle.relay.latestFrame());
+						return d ? d.w + "x" + d.h : "unknown";
+					})());
+				}
 			}
 		}
 		const cfg = readBrowserConfig();
@@ -1698,4 +1787,4 @@ var BrowserRegistry = class {
 var browserRegistry = new BrowserRegistry();
 
 export { BrowserRegistryRefusal as B, browserRegistry as b, clampZoom as c };
-//# sourceMappingURL=registry.js-CWnRQ4vx.js.map
+//# sourceMappingURL=registry.js-ClhrzR6O.js.map

package/build/server/chunks/chunks/{registry2.js-CFzpvj9c.js → registry2.js-BZfrwsOy.js}

@@ -529,6 +529,25 @@ var TerminalRegistry = class {
 			lingeringPids: result.lingeringPids
 		};
 	}
+	/** Destroy: run the close ladder, then PRUNE the entry (ADR amendment
+	*  2026-11-07, D2 extension). The desk's clear chord is the caller —
+	*  an exited session prunes without re-killing (close is idempotent
+	*  on a settled session); the fence applies like every tokened verb. */
+	async destroy(sessionId, token) {
+		const entry = this.entries.get(sessionId);
+		if (!entry) throw new TerminalRegistryRefusal("NO_SESSION", "no such terminal session");
+		if (entry.token !== token) throw new TerminalRegistryRefusal("FOREIGN_SESSION", "this tab does not own the terminal");
+		const result = await entry.session.close();
+		this.entries.delete(sessionId);
+		return result.quiescent ? {
+			quiescent: true,
+			pruned: true
+		} : {
+			quiescent: false,
+			lingeringPids: result.lingeringPids,
+			pruned: true
+		};
+	}
 	readFrom(sessionId, fromByte) {
 		const entry = this.entries.get(sessionId);
 		if (!entry) throw new TerminalRegistryRefusal("NO_SESSION", "no such terminal session");
@@ -558,4 +577,4 @@ var TerminalRegistry = class {
 var terminalRegistry = new TerminalRegistry();
 
 export { TerminalRegistryRefusal as T, TerminalSendRefusal as a, terminalRegistry as t };
-//# sourceMappingURL=registry2.js-CFzpvj9c.js.map
+//# sourceMappingURL=registry2.js-BZfrwsOy.js.map