@hraness/wordcell 0.26.0 → 0.26.2

package/README.md

@@ -9,14 +9,26 @@ sources as Markdown files beside your code, and agents find them by exact
 words, by meaning with an optional local model, or from the file they are
 about to change.
 
-A new coding-agent session can read your code, but not the decisions that
-stayed in the last session's chat. Wordcell keeps those decisions as Markdown
-files beside the repository, with the plans that depend on them and the web
-pages and PDFs that informed them. Tie a note to the paths it explains, and an
-agent about to change that code runs one command to get the notes and plans
-for that path. Exact search, backlinks, and Git history run on your machine
-with no account or model, and every index rebuilds from files you can read in
-any editor. Wordcell is free and open source.
+A new coding-agent session needs the reasons behind the code it is changing.
+Wordcell keeps the decision, its supporting sources, and the plan that puts it
+into practice in a connected set of Markdown files. Tie a note to a repository
+path, and the next agent can recover that context before it edits the file.
+When an assumption changes, update the decision and keep its earlier reasoning
+in Git.
+
+Captured sources preserve what you read, maintained notes explain what you
+currently understand, and plans record the work and its results. Named
+relationships such as `evidenced-by` and `supersedes` make those connections
+available to the embedded Oh graph engine, whose results point back to the
+supporting files. Optional local semantic search helps when the words in a
+question differ from the note; Git history connects the explanation to its
+commits and accompanying code changes.
+
+Use the CLI, local MCP server, or TypeScript SDK from your existing agent and
+editor. The public Agent Skill teaches agents to recover context, maintain
+plans, and leave reusable decisions for later sessions. Exact search, backlinks,
+and Git history need no account or model. Every index rebuilds from files you
+can read in Obsidian or any text editor. Wordcell is free and open source.
 
 Web capture, optional hosted reranking, and your agent's provider reach other
 services; [Privacy and boundaries](#privacy-and-boundaries) says what each one
@@ -54,14 +66,14 @@ Wordcell keeps the record in Markdown files you own, rebuilds every index from t
 The CLI and TypeScript SDK run with Bun. Install the versioned GitHub archive:
 
 ```sh
-bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.0/hraness-wordcell-0.26.0.tgz
+bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.2/hraness-wordcell-0.26.2.tgz
 wordcell --help
 ```
 
 Prefer npm? The same release is [mirrored there](https://www.npmjs.com/package/@hraness/wordcell):
 
 ```sh
-npm install --global --ignore-scripts @hraness/wordcell@0.26.0
+npm install --global --ignore-scripts @hraness/wordcell@0.26.2
 wordcell --help
 ```
 
@@ -125,7 +137,7 @@ After trying the CLI, install the public Agent Skill into a compatible agent,
 such as Claude Code, Codex, Cursor, or GitHub Copilot:
 
 ```sh
-bunx skills add hraness/wordcell#v0.26.0 --skill wordcell
+bunx skills add hraness/wordcell#v0.26.2 --skill wordcell
 ```
 
 Then ask:
@@ -336,7 +348,7 @@ exist. [Graph queries and proof limits](https://github.com/hraness/wordcell/blob
 Add the same immutable release to a Bun project:
 
 ```sh
-bun add --exact --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.0/hraness-wordcell-0.26.0.tgz
+bun add --exact --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.2/hraness-wordcell-0.26.2.tgz
 ```
 
 The SDK provides read-only vault sessions, metadata queries, search, graph

package/dist/capture.js

@@ -5,7 +5,7 @@ import {
   captureSummary,
   main,
   runCapture
-} from "./index-zbv70qmk.js";
+} from "./index-h9vyd03z.js";
 import"./index-hacpnaew.js";
 import"./index-k86wepd8.js";
 import {
@@ -13,7 +13,7 @@ import {
   inspectClipEnvironment,
   renderDoctorReport
 } from "./index-nd8v7r0z.js";
-import"./index-5n05se68.js";
+import"./index-hnvx7m1j.js";
 import"./index-ncwzmsge.js";
 import"./index-cd75vky9.js";
 import"./index-2gv8y733.js";

package/dist/cli-bin.js

@@ -2,7 +2,7 @@
 // @bun
 import {
   runWordcellBin
-} from "./index-ncgdaja4.js";
+} from "./index-82r6g4py.js";
 import"./index-3t0v457d.js";
 import"./index-8pabwzqg.js";
 import"./index-4knsp9qj.js";

package/dist/{cli-release-c74c5m3k.js → cli-release-cf48w61z.js}

@@ -409,12 +409,15 @@ function verifyAttestations(directory, manifest) {
 }
 var canonicalJobs = ["Authorize owner release tag", "Verify", "Attest verified artifact", "Publish"];
 var npmJobs = ["Publish exact npm package", "Admit the public npm package"];
+function releaseActor(actor) {
+  return actor.id === 894119 && actor.type === "User" || actor.id === 337004703 && actor.type === "Bot";
+}
 function canonicalRunIdentity(value, manifest, attempt) {
   const run = record(value, "Canonical release run");
   const owner = record(run.actor, "Canonical release actor");
   const triggering = record(run.triggering_actor, "Canonical triggering actor");
   const source = record(run.repository, "Canonical run repository");
-  if (run.id !== manifest.runId || run.run_attempt !== attempt || run.workflow_id !== 320004141 || run.name !== "Release" || run.path !== manifest.workflow || run.status !== "completed" || !["success", "failure"].includes(String(run.conclusion)) || run.event !== "push" || run.head_branch !== manifest.tag || run.head_sha !== manifest.sourceSha || owner.id !== 894119 || owner.type !== "User" || triggering.id !== 894119 || triggering.type !== "User" || source.id !== repositoryId || source.full_name !== repository || source.private !== false) {
+  if (run.id !== manifest.runId || run.run_attempt !== attempt || run.workflow_id !== 320004141 || run.name !== "Release" || run.path !== manifest.workflow || run.status !== "completed" || !["success", "failure"].includes(String(run.conclusion)) || run.event !== "push" || run.head_branch !== manifest.tag || run.head_sha !== manifest.sourceSha || !releaseActor(owner) || !releaseActor(triggering) || source.id !== repositoryId || source.full_name !== repository || source.private !== false) {
     throw new Error("Canonical release does not have the exact completed source and owner identity");
   }
   return run;

package/dist/cli.js

@@ -6,17 +6,17 @@ import {
   parseArguments,
   runExecutable,
   usage
-} from "./index-8w1zsgcm.js";
+} from "./index-mp5y3ty3.js";
 import"./index-5h5awwh4.js";
 import"./index-m9p2a4mj.js";
 import"./index-9paxge84.js";
 import"./index-j4zgmzjr.js";
 import"./index-npg9z1a4.js";
-import"./index-zbv70qmk.js";
+import"./index-h9vyd03z.js";
 import"./index-hacpnaew.js";
 import"./index-k86wepd8.js";
 import"./index-nd8v7r0z.js";
-import"./index-5n05se68.js";
+import"./index-hnvx7m1j.js";
 import"./index-8pabwzqg.js";
 import"./index-ncwzmsge.js";
 import"./index-cd75vky9.js";
@@ -64,7 +64,7 @@ import {
 
 // src/cli.ts
 async function runStandaloneCli(args = process.argv.slice(2)) {
-  const { standaloneSupportEnvironment, isUsefulSupportResult, runProductSupportCommand, showProductSupportInvitation } = await import("./support-ym4mpf7w.js");
+  const { standaloneSupportEnvironment, isUsefulSupportResult, runProductSupportCommand, showProductSupportInvitation } = await import("./support-9qdr4hb8.js");
   const env = standaloneSupportEnvironment();
   if (args[0] === "support") {
     return await runProductSupportCommand(args.slice(1), { env });

package/dist/clip/browser-profiles.js

@@ -6,7 +6,7 @@ import {
   copyBoundedLocalState,
   isSafeNamedProfile,
   profilePath
-} from "../index-5n05se68.js";
+} from "../index-hnvx7m1j.js";
 import"../index-z1w83f81.js";
 export {
   profilePath,

package/dist/clip/cli.js

@@ -5,11 +5,11 @@ import {
   captureSucceeded,
   captureSummary,
   main
-} from "../index-zbv70qmk.js";
+} from "../index-h9vyd03z.js";
 import"../index-hacpnaew.js";
 import"../index-k86wepd8.js";
 import"../index-nd8v7r0z.js";
-import"../index-5n05se68.js";
+import"../index-hnvx7m1j.js";
 import"../index-ncwzmsge.js";
 import"../index-cd75vky9.js";
 import"../index-2gv8y733.js";

package/dist/evaluation-builder-bin.js

@@ -2,7 +2,7 @@
 // @bun
 import {
   runWordcellBin
-} from "./index-ncgdaja4.js";
+} from "./index-82r6g4py.js";
 import"./index-3t0v457d.js";
 import"./index-8pabwzqg.js";
 import"./index-4knsp9qj.js";

package/dist/{index-ncgdaja4.js → index-82r6g4py.js}

@@ -34,7 +34,7 @@ function wordcellUpdateOptions(bin, entrypoint, argv) {
     effectFree,
     suppressAutomatic: bin === "wordcell" && argv[0] === "support",
     async verifyArtifact(artifact) {
-      const { verifyUpdateArtifact } = await import("./cli-release-c74c5m3k.js");
+      const { verifyUpdateArtifact } = await import("./cli-release-cf48w61z.js");
       await verifyUpdateArtifact(artifact);
     }
   };

package/dist/{index-zbv70qmk.js → index-h9vyd03z.js}

@@ -21,7 +21,7 @@ import {
 } from "./index-nd8v7r0z.js";
 import {
   cloneBrowserProfile
-} from "./index-5n05se68.js";
+} from "./index-hnvx7m1j.js";
 import {
   CONFIRM_LINE,
   acquireBrowser,

package/dist/{index-5n05se68.js → index-hnvx7m1j.js}

@@ -11,13 +11,15 @@ import {
   mkdirSync,
   openSync,
   readdirSync,
+  readlinkSync,
   readSync,
   realpathSync,
   rmSync,
   unlinkSync,
   writeSync
 } from "fs";
-import { homedir } from "os";
+import { spawnSync } from "child_process";
+import { homedir, hostname, tmpdir } from "os";
 import { basename, dirname, isAbsolute, join, resolve, sep } from "path";
 var profileSkipNames = new Set([
   "Cache",
@@ -185,15 +187,82 @@ function localStateEntry(path) {
     throw new BrowserProfileSnapshotError("Chromium Local State is unavailable or unsafe");
   }
 }
+var activeProfileMessage = "Chromium profile is active or retains a stale process lock; fully quit the browser and retry";
+function assertPidAbsent(pid) {
+  try {
+    process.kill(pid, 0);
+  } catch (error) {
+    if (typeof error === "object" && error !== null && "code" in error && error.code === "ESRCH")
+      return;
+  }
+  throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
+function assertSocketUnavailable(path) {
+  const script = `const fs = require("node:fs");
+const net = require("node:net");
+const socket = net.createConnection({ path: fs.readFileSync(0, "utf8") });
+socket.setTimeout(500, () => { socket.destroy(); process.exit(1); });
+socket.once("connect", () => { socket.destroy(); process.exit(1); });
+socket.once("error", error => process.exit(error.code === "ENOENT" || error.code === "ECONNREFUSED" ? 0 : 1));`;
+  const result = spawnSync(process.execPath, ["--no-env-file", "--no-install", "--no-macros", "--no-addons", "--eval", script], {
+    input: path,
+    cwd: tmpdir(),
+    env: {},
+    timeout: 2000,
+    maxBuffer: 1024,
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  if (result.error || result.status !== 0)
+    throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
 function assertChromiumUserDataIdle(userDataRoot) {
-  let names;
   try {
-    names = readdirSync(userDataRoot);
+    const root = lstatSync(userDataRoot);
+    if (!root.isDirectory() || root.isSymbolicLink() || root.uid !== process.getuid?.())
+      throw new Error;
+    const rootProof = { dev: root.dev, ino: root.ino, ctime: root.ctimeMs };
+    const names = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (names.length === 0)
+      return JSON.stringify({ root: rootProof, locks: [] });
+    if (names.join(",") !== "SingletonCookie,SingletonLock,SingletonSocket")
+      throw new Error;
+    const proof = names.map((name) => {
+      const path = join(userDataRoot, name);
+      const entry = lstatSync(path);
+      if (!entry.isSymbolicLink() || entry.uid !== process.getuid?.())
+        throw new Error;
+      return { name, target: readlinkSync(path), dev: entry.dev, ino: entry.ino, ctime: entry.ctimeMs };
+    });
+    const lock = proof.find((entry) => entry.name === "SingletonLock").target;
+    const prefix = `${hostname()}-`;
+    if (!lock.startsWith(prefix) || !/^[1-9][0-9]*$/.test(lock.slice(prefix.length)))
+      throw new Error;
+    const pid = Number(lock.slice(prefix.length));
+    if (!Number.isSafeInteger(pid) || pid > 2147483647)
+      throw new Error;
+    const socket = proof.find((entry) => entry.name === "SingletonSocket").target;
+    if (!isAbsolute(socket) || resolve(socket) !== socket || basename(socket) !== "SingletonSocket" || !socket.startsWith(`${tmpdir()}${sep}`))
+      throw new Error;
+    if (!/^[0-9]{1,32}$/.test(proof.find((entry) => entry.name === "SingletonCookie").target))
+      throw new Error;
+    assertPidAbsent(pid);
+    assertSocketUnavailable(socket);
+    assertPidAbsent(pid);
+    const finalRoot = lstatSync(userDataRoot);
+    if (!sameEntry(root, finalRoot) || finalRoot.ctimeMs !== root.ctimeMs)
+      throw new Error;
+    const finalNames = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (finalNames.join(",") !== names.join(","))
+      throw new Error;
+    for (const entry of proof) {
+      const path = join(userDataRoot, entry.name);
+      const current = lstatSync(path);
+      if (!current.isSymbolicLink() || current.dev !== entry.dev || current.ino !== entry.ino || current.ctimeMs !== entry.ctime || readlinkSync(path) !== entry.target)
+        throw new Error;
+    }
+    return JSON.stringify({ root: rootProof, locks: proof });
   } catch {
-    throw new BrowserProfileSnapshotError("Chromium user-data root could not be inspected");
-  }
-  if (names.some((name) => name.startsWith("Singleton") || name === "DevToolsActivePort")) {
-    throw new BrowserProfileSnapshotError("Chromium profile is active or retains a stale process lock; fully quit the browser and retry");
+    throw new BrowserProfileSnapshotError(activeProfileMessage);
   }
 }
 function copyBoundedLocalState(source, destination) {
@@ -289,7 +358,7 @@ function cloneBrowserProfile(source, privateDirectory) {
   if (stateEntry.size > maxLocalStateBytes) {
     throw new BrowserProfileSnapshotError("Chromium Local State exceeds its safety bound");
   }
-  assertChromiumUserDataIdle(userDataRoot);
+  const idleProof = assertChromiumUserDataIdle(userDataRoot);
   const userData = join(privateDirectory, "profile-user-data");
   mkdirSync(userData, { mode: 448 });
   chmodSync(userData, 448);
@@ -297,6 +366,9 @@ function cloneBrowserProfile(source, privateDirectory) {
   try {
     cloneProfile(selectedSource, selectedProfile);
     copyBoundedLocalState(localState, join(userData, "Local State"));
+    if (assertChromiumUserDataIdle(userDataRoot) !== idleProof) {
+      throw new BrowserProfileSnapshotError("Chromium profile lock changed while it was copied");
+    }
     return { userDataPath: userData, profileDirectory: "Default" };
   } catch (error) {
     rmSync(userData, { recursive: true, force: true });

package/dist/{index-8w1zsgcm.js → index-mp5y3ty3.js}

@@ -22,7 +22,7 @@ import {
 } from "./index-npg9z1a4.js";
 import {
   main
-} from "./index-zbv70qmk.js";
+} from "./index-h9vyd03z.js";
 import {
   advancedHelp,
   closestMatch,

package/dist/{support-ym4mpf7w.js → support-9qdr4hb8.js}

@@ -2,7 +2,7 @@
 import {
   parseArguments as parseArguments2,
   parseUrlMetadataArguments
-} from "./index-8w1zsgcm.js";
+} from "./index-mp5y3ty3.js";
 import"./index-5h5awwh4.js";
 import {
   parsePdfArguments
@@ -10,11 +10,11 @@ import {
 import"./index-9paxge84.js";
 import"./index-j4zgmzjr.js";
 import"./index-npg9z1a4.js";
-import"./index-zbv70qmk.js";
+import"./index-h9vyd03z.js";
 import"./index-hacpnaew.js";
 import"./index-k86wepd8.js";
 import"./index-nd8v7r0z.js";
-import"./index-5n05se68.js";
+import"./index-hnvx7m1j.js";
 import"./index-8pabwzqg.js";
 import"./index-ncwzmsge.js";
 import"./index-cd75vky9.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hraness/wordcell",
-  "version": "0.26.0",
+  "version": "0.26.2",
   "description": "Wordcell keeps decisions, plans, and sources as Markdown beside your code, so coding agents can find them from the file they are about to change.",
   "license": "MIT",
   "type": "module",

package/skills/wordcell/SKILL.md

@@ -58,7 +58,7 @@ missing:
 ```sh
 command -v wordcell >/dev/null 2>&1 || {
   command -v bun >/dev/null 2>&1 || exit 1
-  bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.0/hraness-wordcell-0.26.0.tgz
+  bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.2/hraness-wordcell-0.26.2.tgz
 }
 wordcell --help
 ```

package/src/cli-release.ts

@@ -397,6 +397,11 @@ export function verifyAttestations(directory: string, manifest: ReleaseManifest)
 const canonicalJobs = ["Authorize owner release tag", "Verify", "Attest verified artifact", "Publish"];
 const npmJobs = ["Publish exact npm package", "Admit the public npm package"];
 
+// The owner, or the hraness-release-tagger App bot that tags version bumps on main.
+function releaseActor(actor: Record<string, unknown>): boolean {
+  return (actor.id === 894119 && actor.type === "User") || (actor.id === 337004703 && actor.type === "Bot");
+}
+
 function canonicalRunIdentity(value: unknown, manifest: ReleaseManifest, attempt: number): Record<string, unknown> {
   const run = record(value, "Canonical release run");
   const owner = record(run.actor, "Canonical release actor");
@@ -406,7 +411,7 @@ function canonicalRunIdentity(value: unknown, manifest: ReleaseManifest, attempt
     || run.workflow_id !== 320004141 || run.name !== "Release" || run.path !== manifest.workflow
     || run.status !== "completed" || !["success", "failure"].includes(String(run.conclusion)) || run.event !== "push"
     || run.head_branch !== manifest.tag || run.head_sha !== manifest.sourceSha
-    || owner.id !== 894119 || owner.type !== "User" || triggering.id !== 894119 || triggering.type !== "User"
+    || !releaseActor(owner) || !releaseActor(triggering)
     || source.id !== repositoryId || source.full_name !== repository || source.private !== false) {
     throw new Error("Canonical release does not have the exact completed source and owner identity");
   }

package/src/clip/browser-profiles.ts

@@ -9,6 +9,7 @@ import {
   mkdirSync,
   openSync,
   readdirSync,
+  readlinkSync,
   readSync,
   realpathSync,
   rmSync,
@@ -16,7 +17,8 @@ import {
   unlinkSync,
   writeSync,
 } from "node:fs";
-import { homedir } from "node:os";
+import { spawnSync } from "node:child_process";
+import { homedir, hostname, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
 
 const profileSkipNames = new Set([
@@ -236,17 +238,67 @@ function localStateEntry(path: string): Stats | null {
   }
 }
 
-function assertChromiumUserDataIdle(userDataRoot: string): void {
-  let names: string[];
+const activeProfileMessage = "Chromium profile is active or retains a stale process lock; fully quit the browser and retry";
+
+function assertPidAbsent(pid: number): void {
   try {
-    names = readdirSync(userDataRoot);
-  } catch {
-    throw new BrowserProfileSnapshotError("Chromium user-data root could not be inspected");
+    process.kill(pid, 0);
+  } catch (error) {
+    if (typeof error === "object" && error !== null && "code" in error && error.code === "ESRCH") return;
   }
-  if (names.some((name) => name.startsWith("Singleton") || name === "DevToolsActivePort")) {
-    throw new BrowserProfileSnapshotError(
-      "Chromium profile is active or retains a stale process lock; fully quit the browser and retry",
-    );
+  throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
+
+function assertSocketUnavailable(path: string): void {
+  const script = `const fs = require("node:fs");
+const net = require("node:net");
+const socket = net.createConnection({ path: fs.readFileSync(0, "utf8") });
+socket.setTimeout(500, () => { socket.destroy(); process.exit(1); });
+socket.once("connect", () => { socket.destroy(); process.exit(1); });
+socket.once("error", error => process.exit(error.code === "ENOENT" || error.code === "ECONNREFUSED" ? 0 : 1));`;
+  const result = spawnSync(process.execPath, ["--no-env-file", "--no-install", "--no-macros", "--no-addons", "--eval", script], {
+    input: path, cwd: tmpdir(), env: {}, timeout: 2000, maxBuffer: 1024, stdio: ["pipe", "pipe", "pipe"],
+  });
+  if (result.error || result.status !== 0) throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
+
+function assertChromiumUserDataIdle(userDataRoot: string): string {
+  try {
+    const root = lstatSync(userDataRoot);
+    if (!root.isDirectory() || root.isSymbolicLink() || root.uid !== process.getuid?.()) throw new Error();
+    const rootProof = { dev: root.dev, ino: root.ino, ctime: root.ctimeMs };
+    const names = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (names.length === 0) return JSON.stringify({ root: rootProof, locks: [] });
+    if (names.join(",") !== "SingletonCookie,SingletonLock,SingletonSocket") throw new Error();
+    const proof = names.map((name) => {
+      const path = join(userDataRoot, name);
+      const entry = lstatSync(path);
+      if (!entry.isSymbolicLink() || entry.uid !== process.getuid?.()) throw new Error();
+      return { name, target: readlinkSync(path), dev: entry.dev, ino: entry.ino, ctime: entry.ctimeMs };
+    });
+    const lock = proof.find((entry) => entry.name === "SingletonLock")!.target;
+    const prefix = `${hostname()}-`;
+    if (!lock.startsWith(prefix) || !/^[1-9][0-9]*$/.test(lock.slice(prefix.length))) throw new Error();
+    const pid = Number(lock.slice(prefix.length));
+    if (!Number.isSafeInteger(pid) || pid > 2147483647) throw new Error();
+    const socket = proof.find((entry) => entry.name === "SingletonSocket")!.target;
+    if (!isAbsolute(socket) || resolve(socket) !== socket || basename(socket) !== "SingletonSocket" || !socket.startsWith(`${tmpdir()}${sep}`)) throw new Error();
+    if (!/^[0-9]{1,32}$/.test(proof.find((entry) => entry.name === "SingletonCookie")!.target)) throw new Error();
+    assertPidAbsent(pid);
+    assertSocketUnavailable(socket);
+    assertPidAbsent(pid);
+    const finalRoot = lstatSync(userDataRoot);
+    if (!sameEntry(root, finalRoot) || finalRoot.ctimeMs !== root.ctimeMs) throw new Error();
+    const finalNames = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (finalNames.join(",") !== names.join(",")) throw new Error();
+    for (const entry of proof) {
+      const path = join(userDataRoot, entry.name);
+      const current = lstatSync(path);
+      if (!current.isSymbolicLink() || current.dev !== entry.dev || current.ino !== entry.ino || current.ctimeMs !== entry.ctime || readlinkSync(path) !== entry.target) throw new Error();
+    }
+    return JSON.stringify({ root: rootProof, locks: proof });
+  } catch {
+    throw new BrowserProfileSnapshotError(activeProfileMessage);
   }
 }
 
@@ -356,7 +408,7 @@ export function cloneBrowserProfile(source: string, privateDirectory: string): C
   if (stateEntry.size > maxLocalStateBytes) {
     throw new BrowserProfileSnapshotError("Chromium Local State exceeds its safety bound");
   }
-  assertChromiumUserDataIdle(userDataRoot);
+  const idleProof = assertChromiumUserDataIdle(userDataRoot);
   const userData = join(privateDirectory, "profile-user-data");
   mkdirSync(userData, { mode: 0o700 });
   chmodSync(userData, 0o700);
@@ -364,6 +416,9 @@ export function cloneBrowserProfile(source: string, privateDirectory: string): C
   try {
     cloneProfile(selectedSource, selectedProfile);
     copyBoundedLocalState(localState, join(userData, "Local State"));
+    if (assertChromiumUserDataIdle(userDataRoot) !== idleProof) {
+      throw new BrowserProfileSnapshotError("Chromium profile lock changed while it was copied");
+    }
     return { userDataPath: userData, profileDirectory: "Default" };
   } catch (error) {
     rmSync(userData, { recursive: true, force: true });