@hraness/slopcamera 3.10.1 → 3.10.3

package/PRIVACY.md

@@ -54,6 +54,8 @@ from vulnerability reports.
 Report suspected vulnerabilities through GitHub private vulnerability
 reporting at https://github.com/hraness/slopcamera/security/advisories/new.
 
+## Website analytics
+
 The public slopcamera.com website sends cookieless page views, page exits,
 performance measurements, explicit link and install-copy actions, missing-page
 reports, and rate-limited redacted client errors to PostHog. It keeps no person
@@ -61,3 +63,8 @@ profiles, analytics cookies, or session recordings and respects Do Not Track.
 Public campaign parameters are retained; other query values and credentials
 are removed. Sensitive paths collapse to `/private` and their campaign
 attribution is removed. Preview builds and the inert preview page send nothing.
+
+The site checks the shared regional analytics policy service. Analytics
+waits for acceptance where that policy requires consent, or when the region is
+unknown. Elsewhere it can run without cookies before a visitor responds.
+A stored refusal or Do Not Track keeps analytics off.

package/README.md

@@ -34,11 +34,11 @@ for prompt-only hosted images; model usage is billed separately.
 ## Install SlopCamera
 
 Install [Bun 1.3.14 or newer](https://bun.sh), then install the
-[SlopCamera v3.9.2 release](https://github.com/hraness/slopcamera/releases/tag/v3.9.2)
+[SlopCamera v3.10.1 release](https://github.com/hraness/slopcamera/releases/tag/v3.10.1)
 and its matching Agent Skill:
 
 ```sh
-bun add --global https://github.com/hraness/slopcamera/releases/download/v3.9.2/hraness-slopcamera-3.9.2.tgz
+bun add --global https://github.com/hraness/slopcamera/releases/download/v3.10.1/hraness-slopcamera-3.10.1.tgz
 slopcamera skill install --target agents
 ```
 
@@ -365,15 +365,3 @@ to support development and opens no browser. `support dismiss` opts out across
 the local suite, `support snooze` pauses the notice for 30 days, and
 `HRANESS_SUPPORT_AUDIENCE=off` disables ambient notices. Agents follow the
 [support reference](skills/slopcamera/references/support.md).
-
-## Former name
-
-<details>
-<summary>Historical Atet release evidence</summary>
-
-SlopCamera was called Atet until September 2026.
-[Atet v3.2.3](https://github.com/hraness/atet/releases/tag/v3.2.3) and its
-[original archive](https://github.com/hraness/atet/releases/download/v3.2.3/hraness-atet-3.2.3.tgz)
-still install Atet, not SlopCamera.
-
-</details>

package/apps/desktop/application/operation.ts

@@ -4,7 +4,7 @@ import type { z } from "zod";
 
 import type { ApplicationContext } from "./context";
 
-export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.10.1" as const;
+export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.10.3" as const;
 
 export const OPERATION_KINDS = [
   "scene.audit",

package/apps/desktop/cli/asset-ingest.ts

@@ -93,6 +93,31 @@ function isWithin(root: string, candidate: string): boolean {
   return pathRelative === "" || (!pathRelative.startsWith("..") && !isAbsolute(pathRelative));
 }
 
+function svgRootAttributes(contents: string): string | undefined {
+  let offset = 0;
+  const whitespace = /\s+/uy;
+  const skipWhitespace = (): void => {
+    whitespace.lastIndex = offset;
+    offset += whitespace.exec(contents)?.[0].length ?? 0;
+  };
+  skipWhitespace();
+  const declaration = /<\?xml[^>]*>\s*/iuy;
+  declaration.lastIndex = offset;
+  offset += declaration.exec(contents)?.[0].length ?? 0;
+
+  // Consume each comment once. A repeated lazy regex can reconsider every
+  // earlier comment terminator when the SVG root is missing.
+  while (contents.startsWith("<!--", offset)) {
+    const end = contents.indexOf("-->", offset + 4);
+    if (end === -1) return undefined;
+    offset = end + 3;
+    skipWhitespace();
+  }
+  const root = /<svg(?=[\s>])([^>]*)>/iuy;
+  root.lastIndex = offset;
+  return root.exec(contents)?.[1];
+}
+
 function validateSvg(bytes: Uint8Array): boolean {
   if (bytes.length > MAX_SVG_BYTES) return false;
   let contents: string;
@@ -101,8 +126,7 @@ function validateSvg(bytes: Uint8Array): boolean {
   } catch {
     return false;
   }
-  const start = contents.trimStart();
-  if (!/^(?:<\?xml[^>]*>\s*)?(?:<!--[\s\S]*?-->\s*)*<svg(?:\s|>)/iu.test(start)) return false;
+  if (svgRootAttributes(contents) === undefined) return false;
   if (
     /<!DOCTYPE|<!ENTITY|<\?xml-stylesheet|<\s*(?:script|foreignObject|iframe|object|embed)\b/iu.test(contents)
     || /\s+on[a-z][a-z0-9_-]*\s*=/iu.test(contents)
@@ -227,13 +251,13 @@ export function parseSvgIntrinsicSize(bytes: Uint8Array): OverlayIntrinsicSize {
     throw new CliError("invalid-data", "SVG overlay is not valid UTF-8.");
   }
   if (!validateSvg(bytes)) throw new CliError("invalid-data", "SVG overlay failed the safe SVG profile.");
-  const root = /^(?:<\?xml[^>]*>\s*)?(?:<!--[\s\S]*?-->\s*)*<svg\b(?<attributes>[^>]*)>/iu.exec(contents.trimStart());
-  if (root?.groups?.attributes === undefined) {
+  const attributes = svgRootAttributes(contents);
+  if (attributes === undefined) {
     throw new CliError("invalid-data", "SVG overlay omits its root element.");
   }
-  const width = svgLength(svgAttribute(root.groups.attributes, "width"));
-  const height = svgLength(svgAttribute(root.groups.attributes, "height"));
-  const viewBox = svgAttribute(root.groups.attributes, "viewBox")
+  const width = svgLength(svgAttribute(attributes, "width"));
+  const height = svgLength(svgAttribute(attributes, "height"));
+  const viewBox = svgAttribute(attributes, "viewBox")
     ?.split(/[\s,]+/u)
     .filter(Boolean)
     .map(Number);

package/apps/desktop/cli/commands.ts

@@ -365,7 +365,7 @@ import {
   workflowRunStore,
 } from "./workflow-runs";
 
-export const SLOPCAMERA_VERSION = "3.10.1";
+export const SLOPCAMERA_VERSION = "3.10.3";
 
 // Legacy direct renders predate per-target output contracts. Keep them
 // bounded generously enough for long-form production while preventing one

package/apps/desktop/cli/html-overlay-kqueue.ts

@@ -0,0 +1,184 @@
+import { fstatSync, lstatSync, type BigIntStats } from "node:fs";
+import { endianness } from "node:os";
+import { basename, join } from "node:path";
+import { ApplicationError } from "../application/errors";
+
+export interface BrowserWatchIdentity {
+  readonly path: string;
+  readonly dev: string;
+  readonly ino: string;
+  readonly mode: number;
+  readonly size?: string;
+  readonly ctimeNs?: string;
+  readonly mtimeNs?: string;
+  readonly uid?: string;
+  readonly gid?: string;
+  readonly nlink?: string;
+}
+
+const metadataKeys = ["size", "ctimeNs", "mtimeNs", "uid", "gid", "nlink"] as const;
+function matchesIdentity(details: BigIntStats, identity: BrowserWatchIdentity): boolean {
+  return details.dev.toString() === identity.dev && details.ino.toString() === identity.ino
+    && Number(details.mode & 0o177777n) === identity.mode
+    && metadataKeys.every(key => identity[key] === undefined || details[key].toString() === identity[key]);
+}
+
+interface WatchTarget {
+  readonly absolute: string;
+  readonly identity: BrowserWatchIdentity;
+  readonly label: string;
+  readonly kind: "anchor" | "container" | "payload" | "runtime-root";
+}
+
+/** Kernel vnode notes persist until read, including writes whose bytes were restored. */
+export async function createBrowserRuntimeKqueue(options: {
+  readonly anchor: string;
+  readonly anchorIdentity: BrowserWatchIdentity;
+  readonly container: string;
+  readonly containerIdentity: BrowserWatchIdentity;
+  readonly runtimeRoot: string;
+  readonly identities: readonly BrowserWatchIdentity[];
+}): Promise<{ poll: (mutations: Set<string>) => void; close: () => void }> {
+  if (process.platform !== "darwin") throw new ApplicationError("unavailable", "Browser vnode watches require macOS.");
+  if (!["arm64", "x64"].includes(process.arch) || endianness() !== "LE") throw new ApplicationError("unavailable", "Unsupported browser vnode watch ABI.");
+  const { dlopen, FFIType: T, ptr } = await import("bun:ffi");
+  const native = dlopen("/usr/lib/libSystem.B.dylib", {
+    kqueue: { args: [], returns: T.i32 },
+    kevent64: { args: [T.i32, T.ptr, T.i32, T.ptr, T.i32, T.u32, T.ptr], returns: T.i32 },
+    open: { args: [T.ptr, T.i32], returns: T.i32 },
+    close: { args: [T.i32], returns: T.i32 },
+    fcntl: { args: [T.i32, T.i32, T.i32], returns: T.i32 },
+    getrlimit: { args: [T.i32, T.ptr], returns: T.i32 },
+    fgetattrlist: { args: [T.i32, T.ptr, T.ptr, T.u64, T.u32], returns: T.i32 },
+  });
+  const targets: WatchTarget[] = [
+    { absolute: options.anchor, identity: options.anchorIdentity, label: "<snapshot-anchor>", kind: "anchor" },
+    { absolute: options.container, identity: options.containerIdentity, label: "<snapshot-container>", kind: "container" },
+    ...options.identities.map(identity => ({ absolute: identity.path === "." ? options.runtimeRoot : join(options.runtimeRoot, identity.path), identity, label: identity.path, kind: identity.path === "." ? "runtime-root" as const : "payload" as const })),
+  ];
+  let queue = -1;
+  let closed = false;
+  let closeFailure: unknown;
+  let failure: unknown;
+  const descriptors = new Map<number, WatchTarget>();
+  const payloadAccess = new Map<number, { atimeNs: bigint; readonly flags: number }>();
+  const immutableFlags = (descriptor: number): number => {
+    // Darwin attrlist: five attribute groups, requesting only ATTR_CMN_FLAGS.
+    const request = Buffer.alloc(24), result = Buffer.alloc(8);
+    request.writeUInt16LE(5, 0);
+    request.writeUInt32LE(0x00040000, 4);
+    if (native.symbols.fgetattrlist(descriptor, ptr(request), ptr(result), 8n, 0) !== 0
+      || result.readUInt32LE(0) !== 8) {
+      throw new ApplicationError("unavailable", "Browser vnode immutable flags could not be read completely.");
+    }
+    return result.readUInt32LE(4);
+  };
+  const close = () => {
+    if (closed) { if (closeFailure !== undefined) throw closeFailure; return; }
+    // A failed close may already have released its numeric descriptor. Never
+    // retry it: the number could belong to a different resource afterwards.
+    closed = true;
+    let failed = false;
+    for (const descriptor of descriptors.keys()) {
+      if (native.symbols.close(descriptor) === 0) descriptors.delete(descriptor);
+      else failed = true;
+    }
+    if (queue !== -1) {
+      if (native.symbols.close(queue) === 0) queue = -1;
+      else failed = true;
+    }
+    if (failed) {
+      closeFailure = new ApplicationError("unavailable", "Browser vnode descriptor collection is unproven.", { unresolvedDescriptors: descriptors.size + (queue === -1 ? 0 : 1) });
+      throw closeFailure;
+    }
+    native.close();
+  };
+  const reject = (message: string): never => { throw new ApplicationError("conflict", message); };
+  try {
+    const limits = new BigUint64Array(2);
+    // RLIMIT_NOFILE; never modify process or host resource limits.
+    if (targets.length > 8192 || native.symbols.getrlimit(8, ptr(limits)) !== 0 || limits[0]! < BigInt(targets.length + 64)) {
+      reject("Insufficient bounded descriptor capacity for complete browser vnode watches.");
+    }
+    queue = native.symbols.kqueue();
+    if (queue < 0) reject("Could not create browser vnode event queue.");
+    if (native.symbols.fcntl(queue, 2, 1) !== 0) reject("Could not prevent browser vnode queue inheritance.");
+    for (const target of targets) {
+      const path = Buffer.from(`${target.absolute}\0`);
+      // O_EVTONLY | O_SYMLINK | O_CLOEXEC. Symlinks bind their own vnode.
+      const descriptor = native.symbols.open(ptr(path), 0x8000 | 0x200000 | 0x1000000);
+      if (descriptor < 0) reject(`Could not open browser vnode watch: ${target.label}`);
+      descriptors.set(descriptor, target);
+      const details = fstatSync(descriptor, { bigint: true });
+      const identity = target.identity;
+      if (!matchesIdentity(details, identity)) {
+        reject(`Browser vnode identity changed before registration: ${target.label}`);
+      }
+      if (target.kind === "payload" && details.isFile()) {
+        payloadAccess.set(descriptor, { atimeNs: details.atimeNs, flags: immutableFlags(descriptor) });
+      }
+      const change = Buffer.alloc(48);
+      const receipt = Buffer.alloc(48);
+      change.writeBigUInt64LE(BigInt(descriptor), 0);
+      change.writeInt16LE(-4, 8); // EVFILT_VNODE
+      change.writeUInt16LE(1 | 0x20 | 0x40, 10); // EV_ADD | EV_CLEAR | EV_RECEIPT
+      // Unrelated children of /private/tmp are not this snapshot. Its own
+      // replacement/revocation/attribute changes remain observed; container
+      // and all payload directories independently retain child-write notes.
+      change.writeUInt32LE(target.kind === "anchor" ? 0x69 : 0x7f, 12);
+      const count = native.symbols.kevent64(queue, ptr(change), 1, ptr(receipt), 1, 1, null);
+      if (count !== 1 || receipt.readBigUInt64LE(0) !== BigInt(descriptor)
+        || receipt.readInt16LE(8) !== -4 || !(receipt.readUInt16LE(10) & 0x4000)
+        || receipt.readBigInt64LE(16) !== 0n) reject(`Browser vnode registration failed: ${target.label}`);
+    }
+    return {
+      close,
+      poll(mutations) {
+        if (failure !== undefined) throw failure;
+        if (closed) reject("Browser vnode event queue was closed before verification.");
+        try {
+          // One pending entry per registered vnode; aggregate flags are sticky
+          // in the caller before the next read can clear kernel state.
+          const output = Buffer.alloc(48 * targets.length);
+          const count = native.symbols.kevent64(queue, null, 0, ptr(output), targets.length, 1, null);
+          if (count < 0 || count > targets.length) reject("Browser vnode event queue could not be read completely.");
+          for (let index = 0; index < count; index += 1) {
+            const offset = index * 48;
+            const descriptor = Number(output.readBigUInt64LE(offset));
+            const target = descriptors.get(descriptor);
+            const flags = output.readUInt16LE(offset + 10);
+            const notes = output.readUInt32LE(offset + 12);
+            if (target === undefined) throw new ApplicationError("conflict", "Browser vnode event has an unknown descriptor.");
+            if (output.readInt16LE(offset + 8) !== -4 || flags & (0x4000 | 0x8000) || notes === 0 || notes & ~0x7f) {
+              reject("Browser vnode event queue returned an untrusted event.");
+            }
+            // Preserve the existing launch-managed app-root ATTRIB exception.
+            // No WRITE/RENAME/DELETE/LINK combination becomes a metadata event.
+            if (target.kind === "runtime-root" && notes === 8) {
+              mutations.add(`change:${basename(options.runtimeRoot)}`);
+              continue;
+            }
+            const access = payloadAccess.get(descriptor);
+            if (target.kind === "payload" && notes === 8 && access !== undefined
+              && (access.flags & 2) !== 0 && metadataKeys.every(key => target.identity[key] !== undefined)) {
+              const details = fstatSync(descriptor, { bigint: true });
+              const pathDetails = lstatSync(target.absolute, { bigint: true });
+              // mmap can emit pure ATTRIB for access-time updates on immutable
+              // files. Original ctime and all status identity remain fixed:
+              // restored flags, xattrs, permissions, and times still reject.
+              // The renderer also retains its full content-manifest checks.
+              if (details.isFile() && pathDetails.isFile()
+                && matchesIdentity(details, target.identity) && matchesIdentity(pathDetails, target.identity)
+                && details.atimeNs > access.atimeNs && pathDetails.atimeNs >= details.atimeNs
+                && immutableFlags(descriptor) === access.flags) {
+                access.atimeNs = pathDetails.atimeNs;
+                continue;
+              }
+            }
+            mutations.add(`vnode-${String(notes)}:${target.label}`);
+          }
+        } catch (error) { failure = error; throw error; }
+      },
+    };
+  } catch (error) { close(); throw error; }
+}

package/apps/desktop/cli/html-overlay-renderer.ts

@@ -24,6 +24,7 @@ import { basename, dirname, join } from "node:path";
 import { z } from "zod";
 
 import { verifyStableBrowserWatcherBaseline } from "./html-overlay-watcher-baseline";
+import { createBrowserRuntimeKqueue } from "./html-overlay-kqueue";
 
 import {
   chromium,
@@ -391,10 +392,14 @@ interface SnapshotAnchorIdentity {
 interface SnapshotPathIdentity {
   readonly ctimeNs: string;
   readonly dev: string;
+  readonly gid: string;
   readonly ino: string;
   readonly mode: number;
+  readonly mtimeNs: string;
+  readonly nlink: string;
   readonly path: string;
   readonly size: string;
+  readonly uid: string;
 }
 
 interface SnapshotDirectChildIdentity {
@@ -545,10 +550,14 @@ async function captureBrowserRuntimeSnapshotIdentity(
     identities.push({
       ctimeNs: details.ctimeNs.toString(),
       dev: details.dev.toString(),
+      gid: details.gid.toString(),
       ino: details.ino.toString(),
       mode: Number(details.mode & 0o177777n),
+      mtimeNs: details.mtimeNs.toString(),
+      nlink: details.nlink.toString(),
       path: entry.path,
       size: details.size.toString(),
+      uid: details.uid.toString(),
     });
   }
   return identities;
@@ -569,10 +578,14 @@ async function captureBrowserRuntimeSnapshotContainerIdentity(
   return {
     ctimeNs: details.ctimeNs.toString(),
     dev: details.dev.toString(),
+    gid: details.gid.toString(),
     ino: details.ino.toString(),
     mode: Number(details.mode & 0o177777n),
+    mtimeNs: details.mtimeNs.toString(),
+    nlink: details.nlink.toString(),
     path: "<snapshot-container>",
     size: details.size.toString(),
+    uid: details.uid.toString(),
   };
 }
 
@@ -1458,8 +1471,10 @@ export async function removeBrowserRuntimeSnapshot(
 async function assertNoBrowserRuntimeMutationEvents(
   mutations: ReadonlySet<string>,
   label: string,
+  poll?: () => void,
 ): Promise<void> {
   await new Promise<void>(resolve => setImmediate(resolve));
+  poll?.();
   if (mutations.size > 0) {
     throw new ApplicationError(
       "conflict",
@@ -2011,6 +2026,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
     let browserRuntimeSnapshot: PreparedBrowserRuntimeSnapshot | undefined;
     const browserRuntimeWatchers: FSWatcher[] = [];
     const browserRuntimeMutations = new Set<string>();
+    let kernelWatcher: Awaited<ReturnType<typeof createBrowserRuntimeKqueue>> | undefined;
     let renderFailure: Readonly<{ error: unknown }> | undefined;
     let renderResult: HtmlOverlayFrameRenderResult | undefined;
     let gpuEvidence: HtmlOverlayGpuEvidence | undefined;
@@ -2026,71 +2042,82 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
       let watcherFailure: Error | undefined;
       const runtimeName = basename(preparedBrowserRuntime.runtimeRoot);
       const snapshotName = basename(preparedBrowserRuntime.directory);
-      const anchorWatcher = watch(
-        preparedBrowserRuntime.anchorPath,
-        { persistent: false },
-        (eventType, filename) => {
-          const path = filename?.toString() ?? "<snapshot-anchor>";
-          if (path === snapshotName) {
+      if (process.platform === "darwin") {
+        kernelWatcher = await createBrowserRuntimeKqueue({
+          anchor: preparedBrowserRuntime.anchorPath,
+          anchorIdentity: preparedBrowserRuntime.anchorIdentity,
+          container: preparedBrowserRuntime.directory,
+          containerIdentity: preparedBrowserRuntime.containerIdentity,
+          runtimeRoot: preparedBrowserRuntime.runtimeRoot,
+          identities: preparedBrowserRuntime.identity,
+        });
+      } else {
+        const anchorWatcher = watch(
+          preparedBrowserRuntime.anchorPath,
+          { persistent: false },
+          (eventType, filename) => {
+            const path = filename?.toString() ?? "<snapshot-anchor>";
+            if (path === snapshotName) {
+              watcherVersion += 1;
+              browserRuntimeMutations.add(`anchor-${eventType}:${path}`);
+            }
+          },
+        );
+        anchorWatcher.on("error", error => {
+          watcherFailure = error;
+          browserRuntimeMutations.add(`anchor-watch-error:${error.message}`);
+        });
+        browserRuntimeWatchers.push(anchorWatcher);
+        const containerWatcher = watch(
+          preparedBrowserRuntime.directory,
+          { persistent: false, recursive: false },
+          (eventType, filename) => {
+            const path = filename?.toString().replaceAll("\\", "/")
+              ?? "<snapshot-container>";
+            if (
+              path === "home"
+              || path.startsWith("home/")
+              || path === "tmp"
+              || path.startsWith("tmp/")
+            ) return;
+            if (path === runtimeName && eventType === "change") {
+              // Gatekeeper may change the app root's first-launch metadata. The
+              // immutable parent and its exact ctime identity independently
+              // prove that this pathname was never removed or replaced.
+              return;
+            }
+            if (
+              request.browserRuntime.provenance.kind === "test-only-unverified"
+              && request.browserRuntime.manifest.layout === "single-executable"
+              && path === runtimeName
+              && eventType === "rename"
+            ) {
+              // Darwin reports synthetic rename events for accesses to the
+              // test-only single-file fixture. Production rejects this layout;
+              // its exact path identity still detects fixture substitution.
+              return;
+            }
             watcherVersion += 1;
-            browserRuntimeMutations.add(`anchor-${eventType}:${path}`);
-          }
-        },
-      );
-      anchorWatcher.on("error", error => {
-        watcherFailure = error;
-        browserRuntimeMutations.add(`anchor-watch-error:${error.message}`);
-      });
-      browserRuntimeWatchers.push(anchorWatcher);
-      const containerWatcher = watch(
-        preparedBrowserRuntime.directory,
-        { persistent: false, recursive: process.platform === "darwin" },
-        (eventType, filename) => {
-          const path = filename?.toString().replaceAll("\\", "/")
-            ?? "<snapshot-container>";
-          if (
-            path === "home"
-            || path.startsWith("home/")
-            || path === "tmp"
-            || path.startsWith("tmp/")
-          ) return;
-          if (path === runtimeName && eventType === "change") {
-            // Gatekeeper may change the app root's first-launch metadata. The
-            // immutable parent and its exact ctime identity independently
-            // prove that this pathname was never removed or replaced.
-            return;
-          }
-          if (
-            request.browserRuntime.provenance.kind === "test-only-unverified"
-            && request.browserRuntime.manifest.layout === "single-executable"
-            && path === runtimeName
-            && eventType === "rename"
-          ) {
-            // Darwin reports synthetic rename events for accesses to the
-            // test-only single-file fixture. Production rejects this layout;
-            // its exact path identity still detects fixture substitution.
-            return;
-          }
-          watcherVersion += 1;
-          if (path === runtimeName || path.startsWith(`${runtimeName}/`)) {
+            if (path === runtimeName || path.startsWith(`${runtimeName}/`)) {
+              browserRuntimeMutations.add(`${eventType}:${path}`);
+              return;
+            }
             browserRuntimeMutations.add(`${eventType}:${path}`);
-            return;
-          }
-          browserRuntimeMutations.add(`${eventType}:${path}`);
-        },
-      );
-      containerWatcher.on("error", error => {
-        watcherFailure = error;
-        browserRuntimeMutations.add(`watch-error:${error.message}`);
-      });
-      browserRuntimeWatchers.push(containerWatcher);
+          },
+        );
+        containerWatcher.on("error", error => {
+          watcherFailure = error;
+          browserRuntimeMutations.add(`watch-error:${error.message}`);
+        });
+        browserRuntimeWatchers.push(containerWatcher);
+      }
       let browser: Browser | undefined;
       let browserFailure: Readonly<{ error: unknown }> | undefined;
       try {
         // Delayed preparation notifications can arrive during full verification.
         // Recheck the SAME pre-wait identities until one pass is stable. Nothing
         // after the synchronous baseline commit is discarded.
-        await verifyStableBrowserWatcherBaseline({
+        const baselineOptions = {
           signal,
           version: () => watcherVersion,
           failure: () => watcherFailure,
@@ -2121,7 +2148,16 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
             );
           },
           commit: () => { browserRuntimeMutations.clear(); },
-        });
+        };
+        if (kernelWatcher !== undefined) {
+          // Vnode notes begin at registration, not an asynchronous history
+          // stream. Never clear a payload event, including during baseline.
+          await baselineOptions.verify();
+          kernelWatcher.poll(browserRuntimeMutations);
+        } else {
+          await verifyStableBrowserWatcherBaseline(baselineOptions);
+        }
+        kernelWatcher?.poll(browserRuntimeMutations);
         discardProvenLaunchManagedRootMetadataEvent(
           browserRuntimeMutations,
           runtimeName,
@@ -2129,6 +2165,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
         await assertNoBrowserRuntimeMutationEvents(
           browserRuntimeMutations,
           "before browser launch",
+          () => kernelWatcher?.poll(browserRuntimeMutations),
         );
         const launchedBrowser = await boundedBrowserStep(
           async () => {
@@ -2188,6 +2225,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
           "during browser launch",
           signal,
         );
+        kernelWatcher?.poll(browserRuntimeMutations);
         discardProvenLaunchManagedRootMetadataEvent(
           browserRuntimeMutations,
           runtimeName,
@@ -2195,6 +2233,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
         await assertNoBrowserRuntimeMutationEvents(
           browserRuntimeMutations,
           "during browser launch",
+          () => kernelWatcher?.poll(browserRuntimeMutations),
         );
         const contextContract = HTML_OVERLAY_RENDERER_CONTRACT.browserContext;
         const context = await boundedBrowserStep(
@@ -2489,6 +2528,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
         "through browser shutdown",
         signal,
       );
+      kernelWatcher?.poll(browserRuntimeMutations);
       discardProvenLaunchManagedRootMetadataEvent(
         browserRuntimeMutations,
         runtimeName,
@@ -2496,6 +2536,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
       await assertNoBrowserRuntimeMutationEvents(
         browserRuntimeMutations,
         "through browser shutdown",
+        () => kernelWatcher?.poll(browserRuntimeMutations),
       );
       renderResult = {
         ...(gpuEvidence === undefined ? {} : { gpuEvidence }),
@@ -2510,6 +2551,12 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
         .catch(() => undefined);
     } finally {
       for (const watcher of browserRuntimeWatchers) watcher.close();
+      try { kernelWatcher?.close(); } catch (error) {
+        renderFailure = { error: new ApplicationError("unavailable", "Browser vnode watch cleanup failed; frames were not published.", {
+          cause: error,
+          ...(renderFailure === undefined ? {} : { renderFailure: renderFailure.error }),
+        }) };
+      }
       if (browserRuntimeSnapshot !== undefined) {
         if (browserShutdownRequired) {
           const retainedError = new ApplicationError("unavailable", "HTML overlay browser shutdown is unproven; its active runtime snapshot was retained and frames were not published.", {