@mrrlin-dev/mcp 0.4.148 → 0.4.150

package/dist/bin.cjs

@@ -346,23 +346,23 @@ var require_toml_parser = __commonJS({
       [CHAR_QUOT]: '"',
       [CHAR_BSOL]: "\\"
     };
-    function isDigit(cp) {
-      return cp >= CHAR_0 && cp <= CHAR_9;
+    function isDigit(cp2) {
+      return cp2 >= CHAR_0 && cp2 <= CHAR_9;
     }
-    function isHexit(cp) {
-      return cp >= CHAR_A && cp <= CHAR_F || cp >= CHAR_a && cp <= CHAR_f || cp >= CHAR_0 && cp <= CHAR_9;
+    function isHexit(cp2) {
+      return cp2 >= CHAR_A && cp2 <= CHAR_F || cp2 >= CHAR_a && cp2 <= CHAR_f || cp2 >= CHAR_0 && cp2 <= CHAR_9;
     }
-    function isBit(cp) {
-      return cp === CHAR_1 || cp === CHAR_0;
+    function isBit(cp2) {
+      return cp2 === CHAR_1 || cp2 === CHAR_0;
     }
-    function isOctit(cp) {
-      return cp >= CHAR_0 && cp <= CHAR_7;
+    function isOctit(cp2) {
+      return cp2 >= CHAR_0 && cp2 <= CHAR_7;
     }
-    function isAlphaNumQuoteHyphen(cp) {
-      return cp >= CHAR_A && cp <= CHAR_Z || cp >= CHAR_a && cp <= CHAR_z || cp >= CHAR_0 && cp <= CHAR_9 || cp === CHAR_APOS || cp === CHAR_QUOT || cp === CHAR_LOWBAR || cp === CHAR_HYPHEN;
+    function isAlphaNumQuoteHyphen(cp2) {
+      return cp2 >= CHAR_A && cp2 <= CHAR_Z || cp2 >= CHAR_a && cp2 <= CHAR_z || cp2 >= CHAR_0 && cp2 <= CHAR_9 || cp2 === CHAR_APOS || cp2 === CHAR_QUOT || cp2 === CHAR_LOWBAR || cp2 === CHAR_HYPHEN;
     }
-    function isAlphaNumHyphen(cp) {
-      return cp >= CHAR_A && cp <= CHAR_Z || cp >= CHAR_a && cp <= CHAR_z || cp >= CHAR_0 && cp <= CHAR_9 || cp === CHAR_LOWBAR || cp === CHAR_HYPHEN;
+    function isAlphaNumHyphen(cp2) {
+      return cp2 >= CHAR_A && cp2 <= CHAR_Z || cp2 >= CHAR_a && cp2 <= CHAR_z || cp2 >= CHAR_0 && cp2 <= CHAR_9 || cp2 === CHAR_LOWBAR || cp2 === CHAR_HYPHEN;
     }
     var _type = Symbol("type");
     var _declared = Symbol("declared");
@@ -5118,14 +5118,14 @@ var require_utils = __commonJS({
         BYTE_HEX[i] = "%" + HEX_DIGITS[i >> 4] + HEX_DIGITS[i & 15];
       }
     }
-    function percentEncodeNonAscii(cp) {
-      if (cp < 2048) {
-        return BYTE_HEX[192 | cp >> 6] + BYTE_HEX[128 | cp & 63];
+    function percentEncodeNonAscii(cp2) {
+      if (cp2 < 2048) {
+        return BYTE_HEX[192 | cp2 >> 6] + BYTE_HEX[128 | cp2 & 63];
       }
-      if (cp < 65536) {
-        return BYTE_HEX[224 | cp >> 12] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+      if (cp2 < 65536) {
+        return BYTE_HEX[224 | cp2 >> 12] + BYTE_HEX[128 | cp2 >> 6 & 63] + BYTE_HEX[128 | cp2 & 63];
       }
-      return BYTE_HEX[240 | cp >> 18] + BYTE_HEX[128 | cp >> 12 & 63] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+      return BYTE_HEX[240 | cp2 >> 18] + BYTE_HEX[128 | cp2 >> 12 & 63] + BYTE_HEX[128 | cp2 >> 6 & 63] + BYTE_HEX[128 | cp2 & 63];
     }
     function stringArrayToHexStripped(input) {
       let acc = "";
@@ -5489,8 +5489,8 @@ var require_utils = __commonJS({
     function encodeFragment(input) {
       return encodeComponent(input, isQueryFragmentCharacter);
     }
-    function isEscapeSafe(cp) {
-      return cp >= 48 && cp <= 57 || cp >= 65 && cp <= 90 || cp >= 97 && cp <= 122 || cp === 42 || cp === 43 || cp === 45 || cp === 46 || cp === 47 || cp === 64 || cp === 95;
+    function isEscapeSafe(cp2) {
+      return cp2 >= 48 && cp2 <= 57 || cp2 >= 65 && cp2 <= 90 || cp2 >= 97 && cp2 <= 122 || cp2 === 42 || cp2 === 43 || cp2 === 45 || cp2 === 46 || cp2 === 47 || cp2 === 64 || cp2 === 95;
     }
     function normalizeQueryFragmentEncoding(input) {
       let output3 = "";
@@ -9733,19 +9733,19 @@ var require_enoent = __commonJS({
         spawnargs: original.args
       });
     }
-    function hookChildProcess(cp, parsed) {
+    function hookChildProcess(cp2, parsed) {
       if (!isWin) {
         return;
       }
-      const originalEmit = cp.emit;
-      cp.emit = function(name, arg1) {
+      const originalEmit = cp2.emit;
+      cp2.emit = function(name, arg1) {
         if (name === "exit") {
           const err = verifyENOENT(arg1, parsed);
           if (err) {
-            return originalEmit.call(cp, "error", err);
+            return originalEmit.call(cp2, "error", err);
           }
         }
-        return originalEmit.apply(cp, arguments);
+        return originalEmit.apply(cp2, arguments);
       };
     }
     function verifyENOENT(status, parsed) {
@@ -9773,18 +9773,18 @@ var require_enoent = __commonJS({
 var require_cross_spawn = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/index.js"(exports2, module2) {
     "use strict";
-    var cp = require("child_process");
+    var cp2 = require("child_process");
     var parse8 = require_parse2();
     var enoent = require_enoent();
     function spawn9(command, args, options) {
       const parsed = parse8(command, args, options);
-      const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
+      const spawned = cp2.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
       return spawned;
     }
     function spawnSync9(command, args, options) {
       const parsed = parse8(command, args, options);
-      const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
+      const result = cp2.spawnSync(parsed.command, parsed.args, parsed.options);
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
       return result;
     }
@@ -9863,7 +9863,7 @@ var require_polyfills = __commonJS({
       }
       if (platform === "win32") {
         fs16.rename = typeof fs16.rename !== "function" ? fs16.rename : function(fs$rename) {
-          function rename4(from, to, cb) {
+          function rename5(from, to, cb) {
             var start = Date.now();
             var backoff = 0;
             fs$rename(from, to, function CB(er) {
@@ -9883,8 +9883,8 @@ var require_polyfills = __commonJS({
               if (cb) cb(er);
             });
           }
-          if (Object.setPrototypeOf) Object.setPrototypeOf(rename4, fs$rename);
-          return rename4;
+          if (Object.setPrototypeOf) Object.setPrototypeOf(rename5, fs$rename);
+          return rename5;
         }(fs16.rename);
       }
       fs16.read = typeof fs16.read !== "function" ? fs16.read : function(fs$read) {
@@ -10288,8 +10288,8 @@ var require_graceful_fs = __commonJS({
       fs17.createReadStream = createReadStream2;
       fs17.createWriteStream = createWriteStream;
       var fs$readFile = fs17.readFile;
-      fs17.readFile = readFile9;
-      function readFile9(path34, options, cb) {
+      fs17.readFile = readFile10;
+      function readFile10(path34, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
         return go$readFile(path34, options, cb);
@@ -21663,7 +21663,7 @@ __export(bin_exports, {
 module.exports = __toCommonJS(bin_exports);
 var import_node_path47 = __toESM(require("node:path"), 1);
 var import_node_child_process27 = require("node:child_process");
-var import_node_fs30 = require("node:fs");
+var import_node_fs31 = require("node:fs");
 var import_node_os25 = require("node:os");
 var import_node_path48 = __toESM(require("node:path"), 1);
 
@@ -21791,6 +21791,7 @@ async function resolveApiBaseUrlDynamic(opts = {}) {
 var import_node_os = __toESM(require("node:os"), 1);
 var import_node_path = __toESM(require("node:path"), 1);
 var fs = __toESM(require("node:fs/promises"), 1);
+var import_node_fs = require("node:fs");
 var import_node_child_process = require("node:child_process");
 var import_node_module = require("node:module");
 var import_node_url = require("node:url");
@@ -21818,8 +21819,138 @@ function resolvePackageBin(pkg, binName) {
   if (!rel) throw new Error(`${pkg} has no bin entry to resolve a CLI from`);
   return import_node_path.default.join(import_node_path.default.dirname(pkgJsonPath), rel);
 }
-function browserServeArgs(homeDir = import_node_os.default.homedir()) {
-  const { browsersPath, profilePath } = browserPaths(homeDir);
+var BROWSER_PROFILE_DIR_ENV = "MRRLIN_BROWSER_PROFILE_DIR";
+function taskProfilesRoot(homeDir = import_node_os.default.homedir()) {
+  return import_node_path.default.join(browserPaths(homeDir).root, "tasks");
+}
+var PROJECT_SLUG_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,99}$/;
+var TASK_ID_RE = /^GT-\d{1,12}$/;
+function taskBrowserProfileDir(projectSlug, taskId, homeDir = import_node_os.default.homedir()) {
+  if (!projectSlug || !PROJECT_SLUG_RE.test(projectSlug)) return null;
+  if (!taskId || !TASK_ID_RE.test(taskId)) return null;
+  return import_node_path.default.join(taskProfilesRoot(homeDir), projectSlug, taskId);
+}
+function resolveServeProfilePath(homeDir = import_node_os.default.homedir(), env = process.env) {
+  const shared = browserPaths(homeDir).profilePath;
+  const requested = env[BROWSER_PROFILE_DIR_ENV]?.trim();
+  if (!requested || !import_node_path.default.isAbsolute(requested)) return shared;
+  const root = taskProfilesRoot(homeDir);
+  const rel = import_node_path.default.relative(root, import_node_path.default.normalize(requested));
+  if (!rel || rel.startsWith("..") || import_node_path.default.isAbsolute(rel)) return shared;
+  if (taskProfileEscapes(homeDir, rel)) return shared;
+  return import_node_path.default.normalize(requested);
+}
+function taskProfileEscapes(homeDir, rel) {
+  return hasSymlinkBelow(browserPaths(homeDir).root, import_node_path.default.join("tasks", rel));
+}
+function hasSymlinkBelow(root, rel) {
+  let current2 = root;
+  for (const part of rel.split(import_node_path.default.sep)) {
+    current2 = import_node_path.default.join(current2, part);
+    let st;
+    try {
+      st = (0, import_node_fs.lstatSync)(current2);
+    } catch {
+      return false;
+    }
+    if (st.isSymbolicLink()) return true;
+  }
+  return false;
+}
+var UNCOPIED_PROFILE_ENTRY = /^(SingletonLock|SingletonSocket|SingletonCookie|Crashpad|Cache|Code Cache|GPUCache|ShaderCache|GrShaderCache|GraphiteDawnCache|DawnCache|DawnGraphiteCache|DawnWebGPUCache)$/;
+async function ensureTaskBrowserProfile(dir, homeDir = import_node_os.default.homedir(), opts = {}) {
+  try {
+    await fs.access(dir);
+    return "existing";
+  } catch {
+  }
+  await fs.mkdir(import_node_path.default.dirname(dir), { recursive: true });
+  const shared = browserPaths(homeDir).profilePath;
+  let sharedExists = true;
+  try {
+    await fs.access(shared);
+  } catch {
+    sharedExists = false;
+  }
+  const isBusy = opts.isSharedProfileBusy ?? (() => checkBrowserBusy({ homeDir }).busy);
+  if (!sharedExists || isBusy()) {
+    await fs.mkdir(dir, { recursive: true });
+    return "empty";
+  }
+  const tmp = `${dir}.seeding-${process.pid}-${Date.now()}`;
+  try {
+    await fs.cp(shared, tmp, {
+      recursive: true,
+      errorOnExist: false,
+      force: true,
+      // A live profile can hold sockets and files that vanish mid-copy; skip the entries above and
+      // anything that is not a plain file or directory.
+      filter: async (src) => {
+        if (UNCOPIED_PROFILE_ENTRY.test(import_node_path.default.basename(src))) return false;
+        try {
+          const st = await fs.lstat(src);
+          return st.isDirectory() || st.isFile();
+        } catch {
+          return false;
+        }
+      }
+    });
+    if (isBusy()) {
+      await fs.rm(tmp, { recursive: true, force: true });
+      await fs.mkdir(dir, { recursive: true });
+      return "empty";
+    }
+    await fs.rename(tmp, dir);
+    return "seeded";
+  } catch (err) {
+    await fs.rm(tmp, { recursive: true, force: true }).catch(() => {
+    });
+    try {
+      await fs.access(dir);
+      return "existing";
+    } catch {
+      throw err;
+    }
+  }
+}
+function codexConfigDeclaresMrrlinBrowser(configToml) {
+  const withoutMultilineStrings = configToml.replace(/"""[\s\S]*?"""|'''[\s\S]*?'''/g, '""');
+  return /^[ \t]*\[mcp_servers\.(?:"mrrlin-browser"|'mrrlin-browser'|mrrlin-browser)\][ \t]*(?:#.*)?$/m.test(
+    withoutMultilineStrings
+  );
+}
+async function runBrowserThreadEnv(projectSlug, taskId, opts = {}) {
+  const homeDir = opts.homeDir ?? import_node_os.default.homedir();
+  const configPath = opts.codexConfigPath ?? import_node_path.default.join(process.env.CODEX_HOME?.trim() || import_node_path.default.join(homeDir, ".codex"), "config.toml");
+  const read = opts.readFile ?? ((p) => fs.readFile(p, "utf8"));
+  let config2;
+  try {
+    config2 = await read(configPath);
+  } catch {
+    return {};
+  }
+  if (!codexConfigDeclaresMrrlinBrowser(config2)) return {};
+  const dir = taskBrowserProfileDir(projectSlug, taskId, homeDir);
+  if (!dir) return {};
+  const root = taskProfilesRoot(homeDir);
+  const rel = import_node_path.default.relative(root, dir);
+  if (taskProfileEscapes(homeDir, rel)) return {};
+  try {
+    await ensureTaskBrowserProfile(dir, homeDir, { isSharedProfileBusy: opts.isSharedProfileBusy });
+  } catch {
+    return {};
+  }
+  if (taskProfileEscapes(homeDir, rel)) return {};
+  try {
+    if (!(await fs.lstat(dir)).isDirectory()) return {};
+  } catch {
+    return {};
+  }
+  return { [BROWSER_PROFILE_DIR_ENV]: dir };
+}
+function browserServeArgs(homeDir = import_node_os.default.homedir(), env = process.env) {
+  const { browsersPath } = browserPaths(homeDir);
+  const profilePath = resolveServeProfilePath(homeDir, env);
   const cli = resolvePackageBin("@playwright/mcp");
   return {
     command: process.execPath,
@@ -21897,7 +22028,7 @@ function reapOrphanedBrowserProcesses(opts = {}) {
 }
 function checkBrowserBusy(opts = {}) {
   const homeDir = opts.homeDir ?? import_node_os.default.homedir();
-  const { profilePath } = browserPaths(homeDir);
+  const profilePath = opts.profilePath ?? browserPaths(homeDir).profilePath;
   const listProcesses = opts.listProcesses ?? defaultListProcesses;
   const flag = `--user-data-dir=${profilePath}`;
   const flagSpaced = `--user-data-dir ${profilePath}`;
@@ -21985,7 +22116,7 @@ async function installBrowser(opts = {}) {
 }
 
 // src/mcp-config-reconcile.ts
-var import_node_fs = __toESM(require("node:fs"), 1);
+var import_node_fs2 = __toESM(require("node:fs"), 1);
 var import_node_os2 = __toESM(require("node:os"), 1);
 var import_node_path2 = __toESM(require("node:path"), 1);
 var toml = __toESM(require_toml(), 1);
@@ -22107,7 +22238,7 @@ function defaultMcpConfigPath() {
 function readMcpServerById(configPath, serverId) {
   let raw;
   try {
-    raw = import_node_fs.default.readFileSync(configPath, "utf8");
+    raw = import_node_fs2.default.readFileSync(configPath, "utf8");
   } catch {
     return null;
   }
@@ -22237,11 +22368,11 @@ function listDiscoveredMcpServers(customPaths) {
     { path: import_node_path2.default.join(home, ".config", "Claude", "claude_desktop_config.json"), source: "claude", format: "json" }
   ];
   if (customPaths) {
-    for (const cp of customPaths) {
+    for (const cp2 of customPaths) {
       candidatePaths.unshift({
-        path: cp,
+        path: cp2,
         source: "custom",
-        format: cp.endsWith(".toml") ? "toml" : "json"
+        format: cp2.endsWith(".toml") ? "toml" : "json"
       });
     }
   }
@@ -22249,7 +22380,7 @@ function listDiscoveredMcpServers(customPaths) {
   for (const { path: cfgPath, source, format } of candidatePaths) {
     let raw;
     try {
-      raw = import_node_fs.default.readFileSync(cfgPath, "utf8");
+      raw = import_node_fs2.default.readFileSync(cfgPath, "utf8");
     } catch {
       continue;
     }
@@ -43420,7 +43551,7 @@ async function runDeliverableGate(target, deps) {
 
 // src/consensus/wiring.ts
 var import_node_crypto4 = __toESM(require("node:crypto"), 1);
-var import_node_fs5 = __toESM(require("node:fs"), 1);
+var import_node_fs6 = __toESM(require("node:fs"), 1);
 var import_node_path10 = __toESM(require("node:path"), 1);
 var import_node_url2 = require("node:url");
 
@@ -44364,6 +44495,8 @@ function createCodexAgentHandle(client) {
   return new CodexAgentHandle(client);
 }
 var MRRLIN_MCP_SERVER = "mrrlin";
+var MRRLIN_BROWSER_MCP_SERVER = "mrrlin-browser";
+var MRRLIN_BROWSER_ENV_PREFIX = "MRRLIN_BROWSER_";
 function codexThreadConfig(env) {
   if (!env)
     return null;
@@ -44371,7 +44504,8 @@ function codexThreadConfig(env) {
   for (const [key, value] of Object.entries(env)) {
     if (!ENV_NAME.test(key))
       continue;
-    config2[`mcp_servers.${MRRLIN_MCP_SERVER}.env.${key}`] = value ?? "";
+    const server = key.startsWith(MRRLIN_BROWSER_ENV_PREFIX) ? MRRLIN_BROWSER_MCP_SERVER : MRRLIN_MCP_SERVER;
+    config2[`mcp_servers.${server}.env.${key}`] = value ?? "";
   }
   return Object.keys(config2).length > 0 ? config2 : null;
 }
@@ -46137,7 +46271,7 @@ async function mintResolvedSeat(provider, opts) {
 
 // ../../packages/agent-client/dist/verification-network-sandbox.js
 var import_node_os5 = __toESM(require("node:os"), 1);
-var import_node_fs2 = __toESM(require("node:fs"), 1);
+var import_node_fs3 = __toESM(require("node:fs"), 1);
 var import_node_net = __toESM(require("node:net"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_https = __toESM(require("node:https"), 1);
@@ -46150,9 +46284,9 @@ function loadOrGenerateVerificationHostKeypair() {
   if (activeHostKeypair)
     return activeHostKeypair;
   const envKeyPath = process.env.VERIFICATION_HOST_KEY_PATH;
-  if (envKeyPath && import_node_fs2.default.existsSync(envKeyPath)) {
+  if (envKeyPath && import_node_fs3.default.existsSync(envKeyPath)) {
     try {
-      const pem = import_node_fs2.default.readFileSync(envKeyPath, "utf8");
+      const pem = import_node_fs3.default.readFileSync(envKeyPath, "utf8");
       const priv = import_node_crypto3.default.createPrivateKey(pem);
       const pub = import_node_crypto3.default.createPublicKey(priv);
       const pubPem2 = pub.export({ type: "spki", format: "pem" });
@@ -46171,7 +46305,7 @@ function getHostPublicKeyPem() {
 }
 var DEFAULT_HOST_PUBLIC_KEY = getHostPublicKeyPem();
 function resolveSafeSandboxBaseDir() {
-  const runtimeCandidate = process.env.XDG_RUNTIME_DIR ? import_node_path7.default.join(process.env.XDG_RUNTIME_DIR, "mrrlin-sandbox") : import_node_fs2.default.existsSync("/run/user/1000") ? "/run/user/1000/mrrlin-sandbox" : void 0;
+  const runtimeCandidate = process.env.XDG_RUNTIME_DIR ? import_node_path7.default.join(process.env.XDG_RUNTIME_DIR, "mrrlin-sandbox") : import_node_fs3.default.existsSync("/run/user/1000") ? "/run/user/1000/mrrlin-sandbox" : void 0;
   const candidates = [
     runtimeCandidate,
     import_node_path7.default.join(import_node_os5.default.homedir(), ".mrrlin-sandbox")
@@ -46180,10 +46314,10 @@ function resolveSafeSandboxBaseDir() {
     if (!candidate)
       continue;
     try {
-      if (!import_node_fs2.default.existsSync(candidate)) {
-        import_node_fs2.default.mkdirSync(candidate, { recursive: true, mode: 448 });
+      if (!import_node_fs3.default.existsSync(candidate)) {
+        import_node_fs3.default.mkdirSync(candidate, { recursive: true, mode: 448 });
       }
-      const real = import_node_fs2.default.realpathSync(candidate);
+      const real = import_node_fs3.default.realpathSync(candidate);
       if (real === "/tmp" || real.startsWith("/tmp/") || real === "/var/tmp" || real.startsWith("/var/tmp/")) {
         continue;
       }
@@ -46799,14 +46933,14 @@ async function startProviderProxy(allowedHosts, options) {
     if (options?.socketPath) {
       const socketPath = options.socketPath;
       try {
-        if (import_node_fs2.default.existsSync(socketPath)) {
-          import_node_fs2.default.unlinkSync(socketPath);
+        if (import_node_fs3.default.existsSync(socketPath)) {
+          import_node_fs3.default.unlinkSync(socketPath);
         }
       } catch {
       }
       server.listen(socketPath, () => {
         try {
-          import_node_fs2.default.chmodSync(socketPath, 384);
+          import_node_fs3.default.chmodSync(socketPath, 384);
         } catch {
         }
         server.unref();
@@ -46834,8 +46968,8 @@ async function startProviderProxy(allowedHosts, options) {
       await new Promise((resolve3) => server.close(() => resolve3()));
       if (assignedSocketPath) {
         try {
-          if (import_node_fs2.default.existsSync(assignedSocketPath)) {
-            import_node_fs2.default.unlinkSync(assignedSocketPath);
+          if (import_node_fs3.default.existsSync(assignedSocketPath)) {
+            import_node_fs3.default.unlinkSync(assignedSocketPath);
           }
         } catch {
         }
@@ -46903,7 +47037,7 @@ async function createVerificationNetworkSandbox(config2) {
   let brokerSocketInherited = false;
   if (!config2.skipSocketCheck) {
     try {
-      const stat3 = import_node_fs2.default.statSync(config2.brokerSocketPath);
+      const stat3 = import_node_fs3.default.statSync(config2.brokerSocketPath);
       brokerSocketInherited = stat3.isSocket();
     } catch {
       brokerSocketInherited = false;
@@ -47019,17 +47153,17 @@ async function createVerificationNetworkSandbox(config2) {
   ];
   const sandboxBaseDir = resolveSafeSandboxBaseDir();
   try {
-    import_node_fs2.default.mkdirSync(sandboxBaseDir, { recursive: true, mode: 448 });
+    import_node_fs3.default.mkdirSync(sandboxBaseDir, { recursive: true, mode: 448 });
   } catch {
   }
   const hostsFilePath = import_node_path7.default.join(sandboxBaseDir, `mrrlin-hosts-${nonce}`);
   try {
-    import_node_fs2.default.writeFileSync(hostsFilePath, hostsLines.join("\n") + "\n", { mode: 420 });
+    import_node_fs3.default.writeFileSync(hostsFilePath, hostsLines.join("\n") + "\n", { mode: 420 });
   } catch {
   }
-  const privateDir = import_node_fs2.default.mkdtempSync(import_node_path7.default.join(sandboxBaseDir, "mrrlin-sandbox-"));
+  const privateDir = import_node_fs3.default.mkdtempSync(import_node_path7.default.join(sandboxBaseDir, "mrrlin-sandbox-"));
   try {
-    import_node_fs2.default.chmodSync(privateDir, 448);
+    import_node_fs3.default.chmodSync(privateDir, 448);
   } catch {
   }
   const providerSocketPath = import_node_path7.default.join(privateDir, "provider.sock");
@@ -47269,7 +47403,7 @@ async function createVerificationNetworkSandbox(config2) {
     "}"
   ].join("\n");
   try {
-    import_node_fs2.default.writeFileSync(proxyBootstrapPath, proxyBootstrapCode, { mode: 420 });
+    import_node_fs3.default.writeFileSync(proxyBootstrapPath, proxyBootstrapCode, { mode: 420 });
   } catch {
   }
   let commandWrapped = false;
@@ -47556,20 +47690,20 @@ exit $EXIT_CODE`,
       } catch {
       }
       try {
-        if (import_node_fs2.default.existsSync(hostsFilePath)) {
-          import_node_fs2.default.unlinkSync(hostsFilePath);
+        if (import_node_fs3.default.existsSync(hostsFilePath)) {
+          import_node_fs3.default.unlinkSync(hostsFilePath);
         }
       } catch {
       }
       try {
-        if (import_node_fs2.default.existsSync(proxyBootstrapPath)) {
-          import_node_fs2.default.unlinkSync(proxyBootstrapPath);
+        if (import_node_fs3.default.existsSync(proxyBootstrapPath)) {
+          import_node_fs3.default.unlinkSync(proxyBootstrapPath);
         }
       } catch {
       }
       try {
-        if (import_node_fs2.default.existsSync(privateDir)) {
-          import_node_fs2.default.rmSync(privateDir, { recursive: true, force: true });
+        if (import_node_fs3.default.existsSync(privateDir)) {
+          import_node_fs3.default.rmSync(privateDir, { recursive: true, force: true });
         }
       } catch {
       }
@@ -47640,13 +47774,13 @@ function verifySandboxAttestation(attestation, options) {
 }
 
 // src/consensus/gate-usage-log.ts
-var import_node_fs3 = require("node:fs");
+var import_node_fs4 = require("node:fs");
 var import_node_path8 = require("node:path");
 function recordGateCall(stateDir, projectSlug, record2) {
   try {
     const dir = (0, import_node_path8.join)(stateDir, "telemetry");
-    (0, import_node_fs3.mkdirSync)(dir, { recursive: true });
-    (0, import_node_fs3.appendFileSync)((0, import_node_path8.join)(dir, gateFileName(projectSlug, record2.day)), `${JSON.stringify(record2)}
+    (0, import_node_fs4.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs4.appendFileSync)((0, import_node_path8.join)(dir, gateFileName(projectSlug, record2.day)), `${JSON.stringify(record2)}
 `, "utf8");
   } catch {
   }
@@ -47769,12 +47903,12 @@ ${issuesBlock}`,
 }
 
 // src/consensus/sterile-cwd.ts
-var import_node_fs4 = require("node:fs");
+var import_node_fs5 = require("node:fs");
 var import_node_os6 = require("node:os");
 var import_node_path9 = require("node:path");
 var sterileDir = null;
 function sterileCwd() {
-  sterileDir ??= (0, import_node_fs4.mkdtempSync)((0, import_node_path9.join)((0, import_node_os6.tmpdir)(), "mrrlin-gate-"));
+  sterileDir ??= (0, import_node_fs5.mkdtempSync)((0, import_node_path9.join)((0, import_node_os6.tmpdir)(), "mrrlin-gate-"));
   return sterileDir;
 }
 
@@ -48018,7 +48152,7 @@ var personaCache = /* @__PURE__ */ new Map();
 function loadPersona(name) {
   const cached2 = personaCache.get(name);
   if (cached2 !== void 0) return cached2;
-  const content = import_node_fs5.default.readFileSync(import_node_path10.default.join(getPersonasDir(), `${name}.md`), "utf8");
+  const content = import_node_fs6.default.readFileSync(import_node_path10.default.join(getPersonasDir(), `${name}.md`), "utf8");
   personaCache.set(name, content);
   return content;
 }
@@ -57245,7 +57379,7 @@ var import_promises7 = require("node:fs/promises");
 var import_node_path13 = require("node:path");
 
 // src/bridge-log.ts
-var import_node_fs6 = require("node:fs");
+var import_node_fs7 = require("node:fs");
 var import_promises6 = require("node:fs/promises");
 var import_node_path12 = require("node:path");
 
@@ -57494,26 +57628,26 @@ function tightenBridgeLogPermissions(logsDir, opts = {}) {
   const uid = opts.uid ?? process.getuid?.();
   if (uid === void 0) return;
   try {
-    const dir = (0, import_node_fs6.lstatSync)(logsDir);
+    const dir = (0, import_node_fs7.lstatSync)(logsDir);
     if (!dir.isDirectory()) return;
     if (dir.uid === uid && (dir.mode & 511) !== (dir.mode & LOG_DIR_MODE)) {
-      (0, import_node_fs6.chmodSync)(logsDir, dir.mode & LOG_DIR_MODE);
+      (0, import_node_fs7.chmodSync)(logsDir, dir.mode & LOG_DIR_MODE);
     }
   } catch {
     return;
   }
   let names;
   try {
-    names = (0, import_node_fs6.readdirSync)(logsDir);
+    names = (0, import_node_fs7.readdirSync)(logsDir);
   } catch {
     return;
   }
   for (const name of names) {
     const fp = (0, import_node_path12.join)(logsDir, name);
     try {
-      const st = (0, import_node_fs6.lstatSync)(fp);
+      const st = (0, import_node_fs7.lstatSync)(fp);
       if (!st.isFile() || st.uid !== uid) continue;
-      if ((st.mode & 511) !== (st.mode & LOG_FILE_MODE)) (0, import_node_fs6.chmodSync)(fp, st.mode & LOG_FILE_MODE);
+      if ((st.mode & 511) !== (st.mode & LOG_FILE_MODE)) (0, import_node_fs7.chmodSync)(fp, st.mode & LOG_FILE_MODE);
     } catch {
     }
   }
@@ -57531,7 +57665,7 @@ function createBridgeLogger(stateDir, env = process.env) {
   tightenBridgeLogPermissions(logsDir);
   if (!resolveBridgeLogEnabled(env)) return NOOP_LOGGER;
   try {
-    (0, import_node_fs6.mkdirSync)(logsDir, { recursive: true, mode: LOG_DIR_MODE });
+    (0, import_node_fs7.mkdirSync)(logsDir, { recursive: true, mode: LOG_DIR_MODE });
   } catch {
     return NOOP_LOGGER;
   }
@@ -57580,7 +57714,7 @@ function createBridgeLogger(stateDir, env = process.env) {
     const sessionsPath = (0, import_node_path12.join)(logsDir, ".sessions.json");
     let sessionsObj = {};
     try {
-      const parsed = JSON.parse((0, import_node_fs6.readFileSync)(sessionsPath, "utf8"));
+      const parsed = JSON.parse((0, import_node_fs7.readFileSync)(sessionsPath, "utf8"));
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) sessionsObj = parsed;
     } catch {
       sessionsObj = {};
@@ -57590,8 +57724,8 @@ function createBridgeLogger(stateDir, env = process.env) {
     if (idsToday.includes(sessionId)) return;
     sessionsObj[day] = [...idsToday, sessionId];
     const tmpPath = `${sessionsPath}.tmp`;
-    (0, import_node_fs6.writeFileSync)(tmpPath, JSON.stringify(sessionsObj), { mode: LOG_FILE_MODE });
-    (0, import_node_fs6.renameSync)(tmpPath, sessionsPath);
+    (0, import_node_fs7.writeFileSync)(tmpPath, JSON.stringify(sessionsObj), { mode: LOG_FILE_MODE });
+    (0, import_node_fs7.renameSync)(tmpPath, sessionsPath);
   };
   const write = (dir, rec) => {
     try {
@@ -57682,7 +57816,7 @@ function createBridgeLogger(stateDir, env = process.env) {
         ...recordingObligationUnresolved ? { recordingObligationUnresolved } : {},
         ...recordingObligationMultiResolve ? { recordingObligationMultiResolve } : {}
       }) + "\n";
-      (0, import_node_fs6.appendFileSync)(fileFor(), line, { mode: LOG_FILE_MODE });
+      (0, import_node_fs7.appendFileSync)(fileFor(), line, { mode: LOG_FILE_MODE });
       if (rec.sessionId !== null) gainDay(rec.sessionId);
     } catch {
     }
@@ -57977,18 +58111,18 @@ async function enqueueAsyncTool(client, descriptor2, input) {
 }
 
 // src/checkout-registry.ts
-var import_node_fs7 = require("node:fs");
+var import_node_fs8 = require("node:fs");
 var import_node_path14 = require("node:path");
 var CheckoutRegistry = class {
   file;
   constructor(stateDir) {
     this.file = (0, import_node_path14.join)(stateDir, "checkouts.json");
-    (0, import_node_fs7.mkdirSync)(stateDir, { recursive: true });
+    (0, import_node_fs8.mkdirSync)(stateDir, { recursive: true });
   }
   read() {
-    if (!(0, import_node_fs7.existsSync)(this.file)) return {};
+    if (!(0, import_node_fs8.existsSync)(this.file)) return {};
     try {
-      return JSON.parse((0, import_node_fs7.readFileSync)(this.file, "utf8"));
+      return JSON.parse((0, import_node_fs8.readFileSync)(this.file, "utf8"));
     } catch {
       return {};
     }
@@ -57999,7 +58133,7 @@ var CheckoutRegistry = class {
   confirm(slug, path34, now) {
     const all = this.read();
     all[slug] = { path: path34, confirmedAt: now };
-    (0, import_node_fs7.writeFileSync)(this.file, JSON.stringify(all, null, 2));
+    (0, import_node_fs8.writeFileSync)(this.file, JSON.stringify(all, null, 2));
   }
   /**
    * Task 5.2 (github-via-capabilities): another slug whose registered path resolves, via
@@ -58022,14 +58156,14 @@ var CheckoutRegistry = class {
     if (!own) return null;
     let ownReal;
     try {
-      ownReal = (0, import_node_fs7.realpathSync)(own.path);
+      ownReal = (0, import_node_fs8.realpathSync)(own.path);
     } catch {
       return null;
     }
     for (const [otherSlug, entry] of Object.entries(this.read())) {
       if (otherSlug === slug) continue;
       try {
-        if ((0, import_node_fs7.realpathSync)(entry.path) === ownReal) return otherSlug;
+        if ((0, import_node_fs8.realpathSync)(entry.path) === ownReal) return otherSlug;
       } catch {
         continue;
       }
@@ -58040,7 +58174,7 @@ var CheckoutRegistry = class {
 
 // src/checkout-handlers.ts
 var import_node_child_process13 = require("node:child_process");
-var import_node_fs8 = require("node:fs");
+var import_node_fs9 = require("node:fs");
 var import_node_path15 = __toESM(require("node:path"), 1);
 
 // src/git-remote-match.ts
@@ -58076,7 +58210,7 @@ function validateCheckoutPath(checkoutPath, repo) {
   }
   let resolvedPath;
   try {
-    resolvedPath = (import_node_fs8.realpathSync.native ?? import_node_fs8.realpathSync)(trimmedPath);
+    resolvedPath = (import_node_fs9.realpathSync.native ?? import_node_fs9.realpathSync)(trimmedPath);
   } catch {
     return {
       ok: false,
@@ -58138,7 +58272,7 @@ function checkoutStateData(projectSlug, entry, machineLabel) {
 
 // src/local-checkout.ts
 var import_node_child_process14 = require("node:child_process");
-var import_node_fs9 = require("node:fs");
+var import_node_fs10 = require("node:fs");
 var import_node_os8 = require("node:os");
 var import_node_path16 = __toESM(require("node:path"), 1);
 var SYSTEM_PATH_PREFIXES = [
@@ -58202,7 +58336,7 @@ function checkLocalPathRules(input, options = {}) {
   if (!import_node_path16.default.isAbsolute(trimmed)) return { ok: false, code: "not_absolute", detail: `Path must be absolute, got: ${trimmed}` };
   let realPath;
   try {
-    realPath = (import_node_fs9.realpathSync.native ?? import_node_fs9.realpathSync)(trimmed);
+    realPath = (import_node_fs10.realpathSync.native ?? import_node_fs10.realpathSync)(trimmed);
   } catch {
     return { ok: false, code: "not_found", detail: `Path does not exist or is not accessible: ${trimmed}` };
   }
@@ -58211,7 +58345,7 @@ function checkLocalPathRules(input, options = {}) {
   const home = options.homeDir ?? (0, import_node_os8.homedir)();
   let realHome = home;
   try {
-    realHome = (import_node_fs9.realpathSync.native ?? import_node_fs9.realpathSync)(home);
+    realHome = (import_node_fs10.realpathSync.native ?? import_node_fs10.realpathSync)(home);
   } catch {
   }
   if (realPath === import_node_path16.default.parse(realPath).root || isUnderFolded(realHome, realPath)) {
@@ -58236,8 +58370,8 @@ function checkLocalPathRules(input, options = {}) {
   const uid = options.uid ?? (typeof process.getuid === "function" ? process.getuid() : void 0);
   let fd;
   try {
-    fd = (0, import_node_fs9.openSync)(realPath, import_node_fs9.constants.O_RDONLY | (import_node_fs9.constants.O_DIRECTORY ?? 0) | (import_node_fs9.constants.O_NOFOLLOW ?? 0));
-    const stat3 = (0, import_node_fs9.fstatSync)(fd);
+    fd = (0, import_node_fs10.openSync)(realPath, import_node_fs10.constants.O_RDONLY | (import_node_fs10.constants.O_DIRECTORY ?? 0) | (import_node_fs10.constants.O_NOFOLLOW ?? 0));
+    const stat3 = (0, import_node_fs10.fstatSync)(fd);
     if (!stat3.isDirectory()) return { ok: false, code: "not_a_directory", detail: `Not a directory: ${realPath}` };
     if (uid !== void 0 && stat3.uid !== uid) {
       return { ok: false, code: "not_owned", detail: `Directory is not owned by the bridge's user: ${realPath}` };
@@ -58247,7 +58381,7 @@ function checkLocalPathRules(input, options = {}) {
     if (code === "ENOTDIR") return { ok: false, code: "not_a_directory", detail: `Not a directory: ${realPath}` };
     return { ok: false, code: "path_changed", detail: `Could not open ${realPath} without following links (${code ?? "error"})` };
   } finally {
-    if (fd !== void 0) (0, import_node_fs9.closeSync)(fd);
+    if (fd !== void 0) (0, import_node_fs10.closeSync)(fd);
   }
   return { ok: true, realPath };
 }
@@ -58268,7 +58402,7 @@ function validateLocalCheckoutPath(input, options = {}) {
   if (!checked.ok) return checked;
   const top = gitTopLevel(checked.realPath);
   if (!top) return { ok: false, code: "not_a_git_repo", detail: `Path is not inside a git repository: ${checked.realPath}` };
-  const realTop = (import_node_fs9.realpathSync.native ?? import_node_fs9.realpathSync)(top);
+  const realTop = (import_node_fs10.realpathSync.native ?? import_node_fs10.realpathSync)(top);
   if (realTop !== checked.realPath) {
     return {
       ok: false,
@@ -58333,7 +58467,7 @@ function initLocalRepo(registry3, input, machineLabel, options = {}, now = (/* @
     runGit(realPath, ["init", "-q", "-b", "main"]);
     const gitignore = import_node_path16.default.join(realPath, ".gitignore");
     try {
-      (0, import_node_fs9.writeFileSync)(gitignore, DEFAULT_GITIGNORE, { flag: "wx" });
+      (0, import_node_fs10.writeFileSync)(gitignore, DEFAULT_GITIGNORE, { flag: "wx" });
       wroteGitignore = true;
     } catch {
     }
@@ -58361,28 +58495,28 @@ function initLocalRepo(registry3, input, machineLabel, options = {}, now = (/* @
 // src/local-apply.ts
 var import_node_child_process17 = require("node:child_process");
 var import_node_crypto13 = __toESM(require("node:crypto"), 1);
-var import_node_fs13 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 var import_node_path20 = __toESM(require("node:path"), 1);
 
 // src/checkout-lock.ts
 var import_node_crypto10 = require("node:crypto");
-var import_node_fs10 = require("node:fs");
+var import_node_fs11 = require("node:fs");
 var import_node_path17 = require("node:path");
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
 var DELIVERY_LOCK_NAME = "delivery";
 var DELIVERY_LOCK_MAX_WAIT_MS = 36e5;
 function deliveryLockKey(checkoutPath) {
   const absolute = (0, import_node_path17.resolve)(checkoutPath);
-  const canonical = (0, import_node_fs10.existsSync)(absolute) ? (0, import_node_fs10.realpathSync)(absolute) : absolute;
+  const canonical = (0, import_node_fs11.existsSync)(absolute) ? (0, import_node_fs11.realpathSync)(absolute) : absolute;
   return `checkout-${(0, import_node_crypto10.createHash)("sha256").update(canonical).digest("hex").slice(0, 24)}`;
 }
 var LOCK_RETRY_INTERVAL_MS = 100;
 var DEFAULT_LOCK_MAX_WAIT_MS = 6e4;
 async function withCheckoutLock(locksDir, slug, fn, options = {}) {
-  (0, import_node_fs10.mkdirSync)(locksDir, { recursive: true });
+  (0, import_node_fs11.mkdirSync)(locksDir, { recursive: true });
   const fileName = options.name ? `${slug}.${options.name}.lock` : `${slug}.lock`;
   const target = (0, import_node_path17.join)(locksDir, fileName);
-  if (!(0, import_node_fs10.existsSync)(target)) (0, import_node_fs10.writeFileSync)(target, "");
+  if (!(0, import_node_fs11.existsSync)(target)) (0, import_node_fs11.writeFileSync)(target, "");
   const retries = Math.ceil((options.maxWaitMs ?? DEFAULT_LOCK_MAX_WAIT_MS) / LOCK_RETRY_INTERVAL_MS);
   const release = await import_proper_lockfile.default.lock(target, {
     retries: {
@@ -58410,7 +58544,7 @@ function isDeliveryLockHeld(locksDir, key) {
 // src/delivery/local-git.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_crypto11 = require("node:crypto");
-var import_node_fs11 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 var import_node_os9 = __toESM(require("node:os"), 1);
 var import_node_path18 = __toESM(require("node:path"), 1);
 function isLocalGitRoute(route) {
@@ -58418,10 +58552,10 @@ function isLocalGitRoute(route) {
 }
 var noHooksDir = null;
 function emptyHooksDir() {
-  if (!noHooksDir || !(0, import_node_fs11.existsSync)(noHooksDir)) {
-    noHooksDir = (0, import_node_fs11.mkdtempSync)(import_node_path18.default.join(import_node_os9.default.tmpdir(), "mrrlin-no-hooks-"));
+  if (!noHooksDir || !(0, import_node_fs12.existsSync)(noHooksDir)) {
+    noHooksDir = (0, import_node_fs12.mkdtempSync)(import_node_path18.default.join(import_node_os9.default.tmpdir(), "mrrlin-no-hooks-"));
     try {
-      (0, import_node_fs11.chmodSync)(noHooksDir, 320);
+      (0, import_node_fs12.chmodSync)(noHooksDir, 320);
     } catch {
     }
   }
@@ -58579,29 +58713,29 @@ function resolveLocalDefaultBranch(checkout) {
 var NPM_PLACEHOLDER_TEST = /no test specified/i;
 function detectBuildCommands(worktree) {
   const pkgPath = import_node_path18.default.join(worktree, "package.json");
-  if ((0, import_node_fs11.existsSync)(pkgPath)) {
+  if ((0, import_node_fs12.existsSync)(pkgPath)) {
     let scripts = {};
     let hasDeps = false;
     try {
-      const pkg = JSON.parse((0, import_node_fs11.readFileSync)(pkgPath, "utf8"));
+      const pkg = JSON.parse((0, import_node_fs12.readFileSync)(pkgPath, "utf8"));
       scripts = pkg.scripts ?? {};
       hasDeps = Boolean(pkg.dependencies || pkg.devDependencies);
     } catch {
       return [];
     }
-    const pm = (0, import_node_fs11.existsSync)(import_node_path18.default.join(worktree, "pnpm-lock.yaml")) ? "pnpm" : (0, import_node_fs11.existsSync)(import_node_path18.default.join(worktree, "yarn.lock")) ? "yarn" : "npm";
+    const pm = (0, import_node_fs12.existsSync)(import_node_path18.default.join(worktree, "pnpm-lock.yaml")) ? "pnpm" : (0, import_node_fs12.existsSync)(import_node_path18.default.join(worktree, "yarn.lock")) ? "yarn" : "npm";
     const commands = [];
     const wantsBuild = typeof scripts.build === "string" && scripts.build.trim().length > 0;
     const wantsTest = typeof scripts.test === "string" && scripts.test.trim().length > 0 && !NPM_PLACEHOLDER_TEST.test(scripts.test);
-    if ((wantsBuild || wantsTest) && hasDeps && !(0, import_node_fs11.existsSync)(import_node_path18.default.join(worktree, "node_modules"))) {
+    if ((wantsBuild || wantsTest) && hasDeps && !(0, import_node_fs12.existsSync)(import_node_path18.default.join(worktree, "node_modules"))) {
       commands.push({ label: `${pm} install`, file: pm, args: ["install"] });
     }
     if (wantsBuild) commands.push({ label: `${pm} run build`, file: pm, args: ["run", "build"] });
     if (wantsTest) commands.push({ label: `${pm} run test`, file: pm, args: ["run", "test"] });
     return commands;
   }
-  const makefile = ["Makefile", "makefile", "GNUmakefile"].map((name) => import_node_path18.default.join(worktree, name)).find(import_node_fs11.existsSync);
-  if (makefile && /^test\s*:/m.test((0, import_node_fs11.readFileSync)(makefile, "utf8"))) {
+  const makefile = ["Makefile", "makefile", "GNUmakefile"].map((name) => import_node_path18.default.join(worktree, name)).find(import_node_fs12.existsSync);
+  if (makefile && /^test\s*:/m.test((0, import_node_fs12.readFileSync)(makefile, "utf8"))) {
     return [{ label: "make test", file: "make", args: ["test"] }];
   }
   return [];
@@ -58719,10 +58853,10 @@ async function deliverLocalGit(input) {
     throw new Error(`local_delivery_commit_count_unreadable: git rev-list returned ${String(commitCount)}`);
   }
   const checkoutDigest = sha256(input.checkoutRealPath);
-  (0, import_node_fs11.mkdirSync)(input.evidenceDir, { recursive: true, mode: 448 });
+  (0, import_node_fs12.mkdirSync)(input.evidenceDir, { recursive: true, mode: 448 });
   const evidenceFile = import_node_path18.default.join(input.evidenceDir, `${input.runId}.json`);
   if (!(commitCount > 0)) {
-    (0, import_node_fs11.writeFileSync)(
+    (0, import_node_fs12.writeFileSync)(
       evidenceFile,
       JSON.stringify({ checkout: input.checkoutRealPath, branch, baseSha: input.baseSha, headSha, commitCount, steps: [], ...integration }, null, 2),
       { mode: 384 }
@@ -58745,7 +58879,7 @@ async function deliverLocalGit(input) {
     noBuildStep: steps.length === 0,
     checkoutDigest
   };
-  (0, import_node_fs11.writeFileSync)(evidenceFile, JSON.stringify({ checkout: input.checkoutRealPath, ...evidence, logs, ...integration }, null, 2), { mode: 384 });
+  (0, import_node_fs12.writeFileSync)(evidenceFile, JSON.stringify({ checkout: input.checkoutRealPath, ...evidence, logs, ...integration }, null, 2), { mode: 384 });
   const problem = checkLocalBuildEvidence({ type: "build", value: headSha }, evidence);
   if (problem) {
     return { ok: false, reason: "build_failed", detail: `local_build_failed: ${problem}`, evidence, evidenceFile };
@@ -58826,7 +58960,7 @@ function verifyIntegrationResolved(input) {
   }
   const withMarkers = input.files.filter((file2) => {
     const full = import_node_path18.default.join(input.worktreePath, file2);
-    return (0, import_node_fs11.existsSync)(full) && CONFLICT_MARKER_LINE.test((0, import_node_fs11.readFileSync)(full, "utf8"));
+    return (0, import_node_fs12.existsSync)(full) && CONFLICT_MARKER_LINE.test((0, import_node_fs12.readFileSync)(full, "utf8"));
   });
   if (withMarkers.length > 0) {
     return { ok: false, reason: "conflict_markers", detail: withMarkers.join(", ") };
@@ -58991,7 +59125,7 @@ function applyLocalRun(input) {
 }
 function realpathOr(target) {
   try {
-    return (0, import_node_fs11.realpathSync)(target);
+    return (0, import_node_fs12.realpathSync)(target);
   } catch {
     return target;
   }
@@ -59002,7 +59136,7 @@ function worktreesWithBranch(repo, branch) {
     const lines2 = block.split("\n");
     const worktree = lines2.find((line) => line.startsWith("worktree "))?.slice("worktree ".length);
     if (!worktree || lines2.includes("bare") || lines2.some((line) => line.startsWith("prunable"))) continue;
-    if (lines2.includes(`branch refs/heads/${branch}`) && (0, import_node_fs11.existsSync)(worktree)) holders.push(worktree);
+    if (lines2.includes(`branch refs/heads/${branch}`) && (0, import_node_fs12.existsSync)(worktree)) holders.push(worktree);
   }
   return holders;
 }
@@ -59010,7 +59144,7 @@ function worktreesWithBranch(repo, branch) {
 // src/worktree.ts
 var import_node_child_process16 = require("node:child_process");
 var import_node_crypto12 = require("node:crypto");
-var import_node_fs12 = require("node:fs");
+var import_node_fs13 = require("node:fs");
 var import_node_path19 = require("node:path");
 function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
@@ -59023,20 +59157,20 @@ function disabledGitHooksPath(locksDir, scope) {
 function prepareDisabledGitHooksDir(locksDir, scope) {
   const hooksDir = disabledGitHooksPath(locksDir, scope);
   const hooksRoot = (0, import_node_path19.resolve)(hooksDir, "..");
-  (0, import_node_fs12.mkdirSync)(hooksRoot, { recursive: true, mode: 448 });
-  (0, import_node_fs12.mkdirSync)(hooksDir, { recursive: true, mode: 320 });
-  if ((0, import_node_fs12.readdirSync)(hooksDir).length > 0) {
+  (0, import_node_fs13.mkdirSync)(hooksRoot, { recursive: true, mode: 448 });
+  (0, import_node_fs13.mkdirSync)(hooksDir, { recursive: true, mode: 320 });
+  if ((0, import_node_fs13.readdirSync)(hooksDir).length > 0) {
     throw new Error(`disabled_git_hooks_dir_not_empty: ${hooksDir}`);
   }
   try {
-    (0, import_node_fs12.chmodSync)(hooksDir, 320);
+    (0, import_node_fs13.chmodSync)(hooksDir, 320);
   } catch {
   }
   return hooksDir;
 }
 function removeDisabledGitHooksDir(locksDir, scope) {
   try {
-    (0, import_node_fs12.rmdirSync)(disabledGitHooksPath(locksDir, scope));
+    (0, import_node_fs13.rmdirSync)(disabledGitHooksPath(locksDir, scope));
   } catch {
   }
 }
@@ -59062,11 +59196,11 @@ async function createRunWorktree(opts) {
   const worktreePath = (0, import_node_path19.join)(opts.worktreeRoot, opts.slug, opts.runId);
   const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, opts.runId);
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
-    (0, import_node_fs12.mkdirSync)(opts.worktreeRoot, { recursive: true });
+    (0, import_node_fs13.mkdirSync)(opts.worktreeRoot, { recursive: true });
     const base = opts.local ? `refs/heads/${opts.defaultBranch}` : `origin/${opts.defaultBranch}`;
     try {
       if (!opts.local) git2(opts.checkout, ["fetch", "origin", opts.defaultBranch], hooksDir);
-      if (!(0, import_node_fs12.existsSync)(worktreePath)) {
+      if (!(0, import_node_fs13.existsSync)(worktreePath)) {
         git2(opts.checkout, [
           "worktree",
           "add",
@@ -59092,11 +59226,11 @@ async function openRunWorktree(opts) {
   const branch = worktreeBranch(opts.runId);
   const env = buildLocalStepEnv();
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
-    if ((0, import_node_fs12.existsSync)(worktreePath)) {
-      const real = (0, import_node_fs12.realpathSync)(worktreePath);
+    if ((0, import_node_fs13.existsSync)(worktreePath)) {
+      const real = (0, import_node_fs13.realpathSync)(worktreePath);
       const listed = git2(opts.checkout, ["worktree", "list", "--porcelain"], hooksDir, env).split(/\n\s*\n/).map((block) => block.split("\n")).find((lines2) => {
         const listedPath = lines2.find((line) => line.startsWith("worktree "))?.slice("worktree ".length);
-        return listedPath !== void 0 && (0, import_node_fs12.existsSync)(listedPath) && (0, import_node_fs12.realpathSync)(listedPath) === real;
+        return listedPath !== void 0 && (0, import_node_fs13.existsSync)(listedPath) && (0, import_node_fs13.realpathSync)(listedPath) === real;
       });
       if (!listed) {
         throw new Error(`run_worktree_invalid: ${worktreePath} exists but is not a worktree of ${opts.checkout}`);
@@ -59111,7 +59245,7 @@ async function openRunWorktree(opts) {
     } catch {
       throw new Error(`run_branch_missing: ${opts.checkout} has no branch ${branch}`);
     }
-    (0, import_node_fs12.mkdirSync)(opts.worktreeRoot, { recursive: true });
+    (0, import_node_fs13.mkdirSync)(opts.worktreeRoot, { recursive: true });
     git2(opts.checkout, ["worktree", "prune"], hooksDir, env);
     git2(opts.checkout, ["worktree", "add", worktreePath, branch], hooksDir, env);
   });
@@ -59243,7 +59377,7 @@ async function sweepOrphanWorktrees(opts) {
   const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, `sweep:${opts.slug}`);
   const ownedPrefix = (() => {
     try {
-      return (import_node_fs12.realpathSync.native ?? import_node_fs12.realpathSync)(opts.worktreeRoot);
+      return (import_node_fs13.realpathSync.native ?? import_node_fs13.realpathSync)(opts.worktreeRoot);
     } catch {
       return opts.worktreeRoot;
     }
@@ -59257,7 +59391,7 @@ async function sweepOrphanWorktrees(opts) {
         if (!wt) continue;
         const canonicalWt = (() => {
           try {
-            return (import_node_fs12.realpathSync.native ?? import_node_fs12.realpathSync)(wt);
+            return (import_node_fs13.realpathSync.native ?? import_node_fs13.realpathSync)(wt);
           } catch {
             return wt;
           }
@@ -59285,7 +59419,7 @@ async function sweepOrphanWorktrees(opts) {
 // src/local-apply.ts
 function readIntegratedTip(localEvidenceDir, runId) {
   try {
-    const evidence = JSON.parse((0, import_node_fs13.readFileSync)(import_node_path20.default.join(localEvidenceDir, `${runId}.json`), "utf8"));
+    const evidence = JSON.parse((0, import_node_fs14.readFileSync)(import_node_path20.default.join(localEvidenceDir, `${runId}.json`), "utf8"));
     return typeof evidence.integration?.defaultTipSha === "string" ? evidence.integration.defaultTipSha : null;
   } catch {
     return null;
@@ -59308,7 +59442,7 @@ function gitRead(cwd, args) {
 }
 function isBridgeRunWorktree(worktreePath, checkout, worktreeRoot) {
   const real = (target) => {
-    const resolved = (import_node_fs13.realpathSync.native ?? import_node_fs13.realpathSync)(target);
+    const resolved = (import_node_fs14.realpathSync.native ?? import_node_fs14.realpathSync)(target);
     return process.platform === "win32" ? resolved.toLowerCase() : resolved;
   };
   try {
@@ -59473,8 +59607,8 @@ async function applyLocalRunForTool(deps, input) {
     })
   );
   const record2 = (extra) => {
-    (0, import_node_fs13.mkdirSync)(deps.localEvidenceDir, { recursive: true, mode: 448 });
-    (0, import_node_fs13.writeFileSync)(
+    (0, import_node_fs14.mkdirSync)(deps.localEvidenceDir, { recursive: true, mode: 448 });
+    (0, import_node_fs14.writeFileSync)(
       import_node_path20.default.join(deps.localEvidenceDir, `${runId}.apply.json`),
       JSON.stringify({ checkout, defaultBranch, ...extra }, null, 2),
       { mode: 384 }
@@ -59616,7 +59750,7 @@ async function applyLocalRunForTool(deps, input) {
   );
   if (landing.outcome === "applied" || landing.outcome === "already_applied") {
     const worktreePath = import_node_path20.default.join(deps.worktreeRoot, projectSlug, runId);
-    if ((0, import_node_fs13.existsSync)(worktreePath)) {
+    if ((0, import_node_fs14.existsSync)(worktreePath)) {
       await removeRunWorktree({ checkout, worktreePath, locksDir: deps.locksDir, slug: projectSlug }).catch(() => {
       });
     }
@@ -59642,7 +59776,7 @@ async function applyLocalRunForTool(deps, input) {
 }
 
 // src/operator-token.ts
-var import_node_fs14 = require("node:fs");
+var import_node_fs15 = require("node:fs");
 var import_node_os10 = __toESM(require("node:os"), 1);
 var import_node_path21 = __toESM(require("node:path"), 1);
 function operatorDir() {
@@ -59654,7 +59788,7 @@ function operatorTokenPath() {
 }
 function readOperatorToken() {
   try {
-    const token = (0, import_node_fs14.readFileSync)(operatorTokenPath(), "utf8").trim();
+    const token = (0, import_node_fs15.readFileSync)(operatorTokenPath(), "utf8").trim();
     return token.length > 0 ? token : null;
   } catch {
     return null;
@@ -59662,8 +59796,8 @@ function readOperatorToken() {
 }
 function persistOperatorToken(token) {
   const dir = operatorDir();
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs14.writeFileSync)(operatorTokenPath(), `${token.trim()}
+  (0, import_node_fs15.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs15.writeFileSync)(operatorTokenPath(), `${token.trim()}
 `, { encoding: "utf8", mode: 384 });
 }
 function agentCredentialPath() {
@@ -59671,15 +59805,15 @@ function agentCredentialPath() {
 }
 function persistAgentSecret(secret) {
   const dir = operatorDir();
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true, mode: 448 });
-  (0, import_node_fs14.writeFileSync)(agentCredentialPath(), `${secret.trim()}
+  (0, import_node_fs15.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs15.writeFileSync)(agentCredentialPath(), `${secret.trim()}
 `, { encoding: "utf8", mode: 384 });
 }
 function readAgentSecret() {
   const fromEnv = process.env.MRRLIN_AGENT_SECRET?.trim();
   if (fromEnv) return fromEnv;
   try {
-    const raw = (0, import_node_fs14.readFileSync)(agentCredentialPath(), "utf8").trim();
+    const raw = (0, import_node_fs15.readFileSync)(agentCredentialPath(), "utf8").trim();
     return raw || void 0;
   } catch {
     return void 0;
@@ -59688,7 +59822,7 @@ function readAgentSecret() {
 
 // src/worker-token.ts
 var import_node_crypto14 = require("node:crypto");
-var import_node_fs15 = require("node:fs");
+var import_node_fs16 = require("node:fs");
 var import_node_os11 = __toESM(require("node:os"), 1);
 var import_node_path22 = __toESM(require("node:path"), 1);
 var DEFAULT_WORKER_PORT = 8792;
@@ -59707,7 +59841,7 @@ function workerTokenPath() {
 }
 function readWorkerToken() {
   try {
-    const token = (0, import_node_fs15.readFileSync)(workerTokenPath(), "utf8").trim();
+    const token = (0, import_node_fs16.readFileSync)(workerTokenPath(), "utf8").trim();
     return token.length > 0 ? token : null;
   } catch {
     return null;
@@ -59717,9 +59851,9 @@ function readOrCreateWorkerToken() {
   const existing = readWorkerToken();
   if (existing) return existing;
   const dir = workerDir();
-  (0, import_node_fs15.mkdirSync)(dir, { recursive: true, mode: 448 });
+  (0, import_node_fs16.mkdirSync)(dir, { recursive: true, mode: 448 });
   const token = (0, import_node_crypto14.randomBytes)(32).toString("hex");
-  (0, import_node_fs15.writeFileSync)(workerTokenPath(), `${token}
+  (0, import_node_fs16.writeFileSync)(workerTokenPath(), `${token}
 `, { encoding: "utf8", mode: 384 });
   return token;
 }
@@ -59867,7 +60001,7 @@ function threadRetireDisabled(env = process.env) {
 // src/context-compact/handles.ts
 var MRRLIN_HANDLE_SCHEME = "mrrlin://";
 var SLUG_RE = /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/;
-var TASK_ID_RE = /^GT-[A-Za-z0-9-]+$/;
+var TASK_ID_RE2 = /^GT-[A-Za-z0-9-]+$/;
 var WIKI_ID_RE = /^WK-[A-Za-z0-9-]+$/;
 var RUN_ID_RE = /^ER-[A-Za-z0-9-]+$/;
 function isProjectSlug(value) {
@@ -59903,7 +60037,7 @@ function parseMrrlinHandle(value) {
     case "task": {
       if (tail2.length < 1 || tail2.length > 2) return null;
       const taskId = tail2[0] ?? "";
-      if (!TASK_ID_RE.test(taskId)) return null;
+      if (!TASK_ID_RE2.test(taskId)) return null;
       if (tail2.length === 1) return { kind: "task", projectSlug: slug, taskId };
       if (tail2[1] !== "events") return null;
       return { kind: "task-events", projectSlug: slug, taskId };
@@ -62197,7 +62331,7 @@ async function installAgy(options) {
 
 // src/provider-readiness.ts
 var import_promises10 = require("node:fs/promises");
-var import_node_fs16 = require("node:fs");
+var import_node_fs17 = require("node:fs");
 var import_node_os14 = __toESM(require("node:os"), 1);
 var import_node_path25 = __toESM(require("node:path"), 1);
 var import_semver2 = __toESM(require_semver2(), 1);
@@ -62367,7 +62501,7 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
   if (provider === "codex") {
     const authPath = import_node_path25.default.join(resolveCodexHome2(opts), "auth.json");
     try {
-      await (0, import_promises10.access)(authPath, import_node_fs16.constants.F_OK);
+      await (0, import_promises10.access)(authPath, import_node_fs17.constants.F_OK);
       checks.auth = true;
     } catch {
       details.push(`auth: ${authPath} not found`);
@@ -62663,7 +62797,7 @@ async function runBrowserServeProxy(opts) {
 }
 
 // src/director-bridge.ts
-var import_node_fs28 = __toESM(require("node:fs"), 1);
+var import_node_fs29 = __toESM(require("node:fs"), 1);
 var import_node_http3 = __toESM(require("node:http"), 1);
 var import_node_os22 = __toESM(require("node:os"), 1);
 var import_node_path43 = __toESM(require("node:path"), 1);
@@ -63223,13 +63357,13 @@ function directorThreadEnv(projectSlug) {
 // src/self-update.ts
 var import_node_child_process21 = require("node:child_process");
 var import_node_crypto16 = require("node:crypto");
-var import_node_fs18 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_node_path27 = __toESM(require("node:path"), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 
 // src/codex-auth-preflight.ts
 var import_node_child_process20 = require("node:child_process");
-var import_node_fs17 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_node_os16 = __toESM(require("node:os"), 1);
 var import_node_path26 = __toESM(require("node:path"), 1);
 var DEFAULT_CODEX_AUTH_MIN_TTL_SECONDS = 15 * 60;
@@ -63371,10 +63505,10 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
   const nowMs = opts.nowMs ?? Date.now();
   const minTtlSeconds = opts.minTtlSeconds ?? codexAuthMinTtlSeconds(env);
   const authPath = resolveCodexAuthPath({ env, homeDir: opts.homeDir });
-  const readFile9 = opts.readFileSyncImpl ?? ((p, encoding) => (0, import_node_fs17.readFileSync)(p, encoding));
+  const readFile10 = opts.readFileSyncImpl ?? ((p, encoding) => (0, import_node_fs18.readFileSync)(p, encoding));
   let raw;
   try {
-    raw = readFile9(authPath, "utf8");
+    raw = readFile10(authPath, "utf8");
   } catch (e) {
     const code = typeof e === "object" && e !== null && "code" in e ? String(e.code) : "";
     const status = code === "ENOENT" ? "missing" : "unreadable";
@@ -63495,7 +63629,7 @@ function resolveBinPath(opts) {
       return null;
     }
   });
-  const existsSync7 = opts.existsSync ?? import_node_fs18.existsSync;
+  const existsSync7 = opts.existsSync ?? import_node_fs19.existsSync;
   const resolved = whichSync(BIN_NAME);
   if (resolved && existsSync7(resolved)) {
     return { path: resolved, source: "which" };
@@ -63535,7 +63669,7 @@ function sha2562(buf) {
 function startSelfUpdate(deps) {
   const log = deps.log ?? (() => {
   });
-  const readFile9 = deps.readFileSyncImpl ?? ((p) => (0, import_node_fs18.readFileSync)(p));
+  const readFile10 = deps.readFileSyncImpl ?? ((p) => (0, import_node_fs19.readFileSync)(p));
   const setIntervalFn = deps.setIntervalImpl ?? setInterval;
   const clearIntervalFn = deps.clearIntervalImpl ?? clearInterval;
   const intervalMs = deps.intervalMs ?? readIntervalEnv("MRRLIN_DIRECTOR_BRIDGE_SELF_UPDATE_INTERVAL_MS", DEFAULT_INTERVAL_MS);
@@ -63661,7 +63795,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
   }
   let startupBinSha = null;
   try {
-    startupBinSha = sha2562(readFile9(deps.binPath));
+    startupBinSha = sha2562(readFile10(deps.binPath));
   } catch (e) {
     log("warn", "bridge.self_update.startup_hash_read_failed", {
       err: String(e?.message ?? e)
@@ -63740,14 +63874,14 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
       try {
         if (!startupBinSha) {
           try {
-            startupBinSha = sha2562(readFile9(deps.binPath));
+            startupBinSha = sha2562(readFile10(deps.binPath));
           } catch {
             return;
           }
         }
         let currentBinSha;
         try {
-          currentBinSha = sha2562(readFile9(deps.binPath));
+          currentBinSha = sha2562(readFile10(deps.binPath));
         } catch {
           return;
         }
@@ -63826,7 +63960,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.148";
+var PKG_VERSION = "0.4.150";
 
 // src/bridge-allowed-origins.ts
 var DEFAULT_DIRECTOR_BRIDGE_ALLOWED_ORIGINS = [
@@ -64736,7 +64870,7 @@ function parseLedger(value) {
 }
 
 // src/api-base-url-migrate.ts
-var import_node_fs19 = __toESM(require("node:fs"), 1);
+var import_node_fs20 = __toESM(require("node:fs"), 1);
 var import_node_os17 = __toESM(require("node:os"), 1);
 var import_node_path29 = __toESM(require("node:path"), 1);
 
@@ -64819,16 +64953,16 @@ function defaultDeps(deps) {
   return {
     home,
     codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path29.default.join(home, ".codex"),
-    readFile: deps.readFile ?? ((p) => import_node_fs19.default.readFileSync(p, "utf8")),
+    readFile: deps.readFile ?? ((p) => import_node_fs20.default.readFileSync(p, "utf8")),
     // Temp-file + atomic rename so a concurrent `serve` and `director-bridge` startup can never
     // interleave partial writes into a config the next start has to parse. Note this normalizes the
     // file to 0o600 — deliberate, since both files can carry a credential-bearing URL.
     writeFile: deps.writeFile ?? ((p, c) => {
       const tmp = `${p}.tmp-${process.pid}`;
-      import_node_fs19.default.writeFileSync(tmp, c, { mode: 384 });
-      import_node_fs19.default.renameSync(tmp, p);
+      import_node_fs20.default.writeFileSync(tmp, c, { mode: 384 });
+      import_node_fs20.default.renameSync(tmp, p);
     }),
-    exists: deps.exists ?? ((p) => import_node_fs19.default.existsSync(p)),
+    exists: deps.exists ?? ((p) => import_node_fs20.default.existsSync(p)),
     log: deps.log ?? ((m) => process.stderr.write(`${m}
 `))
   };
@@ -65181,7 +65315,7 @@ function migrateRetiredApiBaseUrls(deps = {}) {
 }
 
 // src/bridge-health.ts
-var import_node_fs20 = require("node:fs");
+var import_node_fs21 = require("node:fs");
 var import_node_path30 = __toESM(require("node:path"), 1);
 var SENTINEL_FILE_NAME = "bridge-health-circuit-breaker.json";
 var CRASH_WINDOW_MS = 60 * 60 * 1e3;
@@ -65196,7 +65330,7 @@ function isCrashSentinel(value) {
 async function readCrashSentinel(stateDir, now = Date.now) {
   const sentinelPath = import_node_path30.default.join(stateDir, SENTINEL_FILE_NAME);
   try {
-    const raw = await import_node_fs20.promises.readFile(sentinelPath, "utf8");
+    const raw = await import_node_fs21.promises.readFile(sentinelPath, "utf8");
     const parsed = JSON.parse(raw);
     if (isCrashSentinel(parsed)) return parsed;
   } catch {
@@ -65204,11 +65338,11 @@ async function readCrashSentinel(stateDir, now = Date.now) {
   return { crashCount: 0, windowStartedAt: new Date(now()).toISOString() };
 }
 async function writeCrashSentinel(stateDir, sentinel) {
-  await import_node_fs20.promises.mkdir(stateDir, { recursive: true });
+  await import_node_fs21.promises.mkdir(stateDir, { recursive: true });
   const sentinelPath = import_node_path30.default.join(stateDir, SENTINEL_FILE_NAME);
   const tmpPath = `${sentinelPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
-  await import_node_fs20.promises.writeFile(tmpPath, JSON.stringify(sentinel), "utf8");
-  await import_node_fs20.promises.rename(tmpPath, sentinelPath);
+  await import_node_fs21.promises.writeFile(tmpPath, JSON.stringify(sentinel), "utf8");
+  await import_node_fs21.promises.rename(tmpPath, sentinelPath);
 }
 function withTimeout(fn, ms = DEFAULT_OPERATION_TIMEOUT_MS) {
   const controller = new AbortController();
@@ -65840,7 +65974,7 @@ var import_node_path34 = require("node:path");
 
 // src/telemetry/installation-id.ts
 var import_node_crypto19 = require("node:crypto");
-var import_node_fs21 = require("node:fs");
+var import_node_fs22 = require("node:fs");
 var import_node_path33 = require("node:path");
 var FILE_NAME = "installation-id";
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
@@ -65851,12 +65985,12 @@ function resolveInstallationId(stateDir) {
   const path34 = (0, import_node_path33.join)(stateDir, FILE_NAME);
   let id;
   try {
-    id = (0, import_node_fs21.readFileSync)(path34, "utf8").trim();
+    id = (0, import_node_fs22.readFileSync)(path34, "utf8").trim();
     if (!UUID.test(id)) throw new Error("unusable");
   } catch {
     id = (0, import_node_crypto19.randomUUID)();
-    (0, import_node_fs21.mkdirSync)((0, import_node_path33.dirname)(path34), { recursive: true });
-    (0, import_node_fs21.writeFileSync)(path34, `${id}
+    (0, import_node_fs22.mkdirSync)((0, import_node_path33.dirname)(path34), { recursive: true });
+    (0, import_node_fs22.writeFileSync)(path34, `${id}
 `, "utf8");
   }
   cache.set(stateDir, id);
@@ -67640,7 +67774,8 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "  browser_snapshot, browser_type, etc. Never invoke the same-named tools from any other",
   "  browser MCP (`playwright`, `chrome-devtools`, `puppeteer`, ...) that may also be connected.",
   "- Only `mrrlin-browser` uses this project's dedicated, version-pinned Chromium + persistent",
-  "  operator profile (`~/.mrrlin/browser/profile`). Others share the default Playwright profile",
+  "  operator profile (`~/.mrrlin/browser/profile`; a code run uses its task's own copy of it).",
+  "  Others share the default Playwright profile",
   "  and lose login/cookie state across runs.",
   "- If tool listings show duplicate names across servers, prefer the `mrrlin-browser` one",
   "  unconditionally. Do not switch mid-run.",
@@ -67687,6 +67822,26 @@ var EXECUTOR_BASE_INSTRUCTIONS = [
   // Dogfood v2 F-20: "stop the turn after the next increment" made runs stop after one small step;
   // see workTurnInstruction.
   "turn: carry the task as far as you can and stop only when it is complete or you are genuinely blocked.",
+  // Dogfood v2 F-26: a login check failed in the run's own browser because the executor's page set
+  // `Referrer-Policy: no-referrer` -- under the Fetch spec ("append a request `Origin` header") a
+  // non-GET/HEAD request with that policy carries `Origin: null` -- and its own Origin guard rejected
+  // it. The executor blamed the automation browser and handed the operator a flow that fails in
+  // every Chrome.
+  "When a check you run fails \u2014 a test, a request, a browser flow \u2014 treat it as a defect in your own",
+  "change until you have evidence otherwise. Before blaming the browser, a tool, or the environment,",
+  "find the concrete cause: inspect what your code sends and receives, and reproduce the failure another",
+  "way. Only concrete evidence proves an environment cause: a log or response that shows an outage or",
+  "a platform restriction (a provider outage, a rate limit, a network or DNS failure, a sandbox or OS",
+  "restriction), or the same failure reproduced with that browser or tool on a minimal case outside the project",
+  "together with evidence that the project cannot remove the trigger within the task without weakening security.",
+  "A browser or tool behaving as its specification says is your code's problem, not the environment's;",
+  "an environment cause shown that way is a legitimate blocker, and an unproven environment",
+  "problem is not a blocker. A failure that also happens without your change is a defect already in the",
+  "project, not an environment problem: fix it if the task covers it, otherwise report it as a defect.",
+  "Fix the cause without removing or relaxing a security",
+  "check (origin, CSRF, authentication, authorization) just to make a check pass. Never hand the operator",
+  "a flow to verify that failed when you ran it unless you name the evidence that it will behave",
+  "differently for them.",
   // ADR 0022 Phase 3: the executor is the orchestrator, not the sole worker. It has the
   // external-agents `pick`/`dispatch` MCP tools (a pool of cheap/free models) and should
   // delegate judgment-requiring work to them, keeping itself as judge. If external-agents
@@ -68101,10 +68256,16 @@ async function driveRun(deps, projectSlug, runId) {
       if (kind === "code_change") localGitMode = isLocalGitRoute(routeResolution.route);
     }
   }
+  let browserEnv = {};
+  try {
+    browserEnv = await deps.runBrowserThreadEnv?.(projectSlug, task.id) ?? {};
+  } catch {
+    browserEnv = {};
+  }
+  const runProfilePath = browserEnv[BROWSER_PROFILE_DIR_ENV];
   const needsBrowser = claimed.prerequisites?.some((p) => p.mcp === "mrrlin-browser") || task.domains?.includes("browser");
   if (needsBrowser) {
-    const checkBusy = deps.checkBrowserBusy ?? checkBrowserBusy;
-    const busy = checkBusy();
+    const busy = deps.checkBrowserBusy ? deps.checkBrowserBusy(runProfilePath) : checkBrowserBusy(runProfilePath ? { profilePath: runProfilePath } : {});
     if (busy.busy) {
       await failRun(
         deps,
@@ -68513,7 +68674,8 @@ ${renderTaskStateSection(taskState)}`;
       // (acquireExecutorAgent) never reached them and every project tool refused the run with "no
       // active workspace bound". The adapter applies this per thread (codexThreadConfig), and a
       // resumed thread loaded with another binding is refused and restarted fresh.
-      env: directorThreadEnv(projectSlug)
+      // Dogfood v2 F-21: plus the run's own per-task browser profile (routed to `mrrlin-browser`).
+      env: { ...directorThreadEnv(projectSlug), ...browserEnv }
     };
     let resumed = true;
     let acquireResult;
@@ -70560,7 +70722,7 @@ async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJo
 }
 
 // src/bridge-artifacts.ts
-var import_node_fs22 = __toESM(require("node:fs"), 1);
+var import_node_fs23 = __toESM(require("node:fs"), 1);
 var import_promises14 = __toESM(require("node:fs/promises"), 1);
 var import_node_path36 = __toESM(require("node:path"), 1);
 var DEFAULT_MAX_ARTIFACTS_BYTES = 500 * 1024 * 1024;
@@ -70570,9 +70732,9 @@ function resolveArtifactsDir(baseStateDir) {
   return import_node_path36.default.join(stateDir, "artifacts");
 }
 function ensureDir(dir) {
-  import_node_fs22.default.mkdirSync(dir, { recursive: true, mode: 448 });
+  import_node_fs23.default.mkdirSync(dir, { recursive: true, mode: 448 });
   try {
-    import_node_fs22.default.chmodSync(dir, 448);
+    import_node_fs23.default.chmodSync(dir, 448);
   } catch {
   }
 }
@@ -70872,7 +71034,7 @@ function agentIdleMs(provider) {
 }
 
 // src/thread-index.ts
-var import_node_fs23 = require("node:fs");
+var import_node_fs24 = require("node:fs");
 var import_node_path37 = __toESM(require("node:path"), 1);
 function threadIndexPath(stateDir) {
   return import_node_path37.default.join(stateDir, "threads.json");
@@ -70881,7 +71043,7 @@ function loadThreadIndex(stateDir, ttlMs, now) {
   const result = /* @__PURE__ */ new Map();
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs23.readFileSync)(threadIndexPath(stateDir), "utf8"));
+    parsed = JSON.parse((0, import_node_fs24.readFileSync)(threadIndexPath(stateDir), "utf8"));
   } catch {
     return result;
   }
@@ -70906,8 +71068,8 @@ function loadThreadIndex(stateDir, ttlMs, now) {
   return result;
 }
 function saveThreadIndex(stateDir, entries) {
-  (0, import_node_fs23.mkdirSync)(stateDir, { recursive: true, mode: 448 });
-  (0, import_node_fs23.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
+  (0, import_node_fs24.mkdirSync)(stateDir, { recursive: true, mode: 448 });
+  (0, import_node_fs24.writeFileSync)(threadIndexPath(stateDir), `${JSON.stringify(Object.fromEntries(entries), null, 2)}
 `, {
     encoding: "utf8",
     mode: 384
@@ -71043,7 +71205,7 @@ function createToolBusyClock(opts) {
 
 // src/remote-phone-relay.ts
 var import_node_events3 = require("node:events");
-var import_node_fs24 = require("node:fs");
+var import_node_fs25 = require("node:fs");
 var import_node_os18 = require("node:os");
 var import_node_path38 = require("node:path");
 
@@ -74618,7 +74780,7 @@ var DirectorRelay = class {
 function loadOrCreateAgentDeviceKey() {
   const path34 = (0, import_node_path38.join)((0, import_node_os18.homedir)(), ".mrrlin", "agent-device-key");
   try {
-    const raw = JSON.parse((0, import_node_fs24.readFileSync)(path34, "utf8"));
+    const raw = JSON.parse((0, import_node_fs25.readFileSync)(path34, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
       return { privateKey: fromBase64Url(raw.priv), publicKey: fromBase64Url(raw.pub) };
     }
@@ -74626,8 +74788,8 @@ function loadOrCreateAgentDeviceKey() {
   }
   const kp = generateIdentityKeyPair();
   try {
-    (0, import_node_fs24.mkdirSync)((0, import_node_path38.join)((0, import_node_os18.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs24.writeFileSync)(
+    (0, import_node_fs25.mkdirSync)((0, import_node_path38.join)((0, import_node_os18.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs25.writeFileSync)(
       path34,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
       { mode: 384 }
@@ -74639,7 +74801,7 @@ function loadOrCreateAgentDeviceKey() {
 var AGENT_PAIRING_PATH = (0, import_node_path38.join)((0, import_node_os18.homedir)(), ".mrrlin", "agent-pairing.json");
 function loadAgentPairing() {
   try {
-    const raw = JSON.parse((0, import_node_fs24.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
+    const raw = JSON.parse((0, import_node_fs25.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
     if (typeof raw.channelId === "string" && typeof raw.agentControlSecret === "string" && typeof raw.relayAuth === "string" && typeof raw.peerIdentityKey === "string") {
       return {
         channelId: raw.channelId,
@@ -74654,8 +74816,8 @@ function loadAgentPairing() {
 }
 function saveAgentPairing(record2) {
   try {
-    (0, import_node_fs24.mkdirSync)((0, import_node_path38.join)((0, import_node_os18.homedir)(), ".mrrlin"), { recursive: true });
-    (0, import_node_fs24.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
+    (0, import_node_fs25.mkdirSync)((0, import_node_path38.join)((0, import_node_os18.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs25.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
   } catch {
   }
 }
@@ -75102,7 +75264,7 @@ var import_node_http2 = __toESM(require("node:http"), 1);
 var import_node_https2 = __toESM(require("node:https"), 1);
 var import_node_net2 = __toESM(require("node:net"), 1);
 var import_node_tls = __toESM(require("node:tls"), 1);
-var import_node_fs25 = __toESM(require("node:fs"), 1);
+var import_node_fs26 = __toESM(require("node:fs"), 1);
 var import_node_os19 = __toESM(require("node:os"), 1);
 var import_node_path39 = __toESM(require("node:path"), 1);
 var import_node_crypto22 = __toESM(require("node:crypto"), 1);
@@ -75447,16 +75609,16 @@ async function createVerificationBrokerSession(options) {
   let createdDir = null;
   let socketPath = options.socketPath;
   if (!socketPath) {
-    createdDir = import_node_fs25.default.mkdtempSync(import_node_path39.default.join(import_node_os19.default.tmpdir(), "mrrlin-broker-"));
-    import_node_fs25.default.chmodSync(createdDir, 448);
+    createdDir = import_node_fs26.default.mkdtempSync(import_node_path39.default.join(import_node_os19.default.tmpdir(), "mrrlin-broker-"));
+    import_node_fs26.default.chmodSync(createdDir, 448);
     socketPath = import_node_path39.default.join(
       createdDir,
       `broker-${options.runId.replace(/[^a-zA-Z0-9_-]/g, "")}-${nonce}.sock`
     );
   }
   try {
-    if (import_node_fs25.default.existsSync(socketPath)) {
-      import_node_fs25.default.unlinkSync(socketPath);
+    if (import_node_fs26.default.existsSync(socketPath)) {
+      import_node_fs26.default.unlinkSync(socketPath);
     }
   } catch {
   }
@@ -75744,12 +75906,12 @@ async function createVerificationBrokerSession(options) {
   } catch (err) {
     server.close();
     try {
-      if (import_node_fs25.default.existsSync(socketPath)) import_node_fs25.default.unlinkSync(socketPath);
+      if (import_node_fs26.default.existsSync(socketPath)) import_node_fs26.default.unlinkSync(socketPath);
     } catch (error51) {
     }
     if (createdDir) {
       try {
-        import_node_fs25.default.rmSync(createdDir, { recursive: true, force: true });
+        import_node_fs26.default.rmSync(createdDir, { recursive: true, force: true });
       } catch (error51) {
       }
     }
@@ -75777,14 +75939,14 @@ async function createVerificationBrokerSession(options) {
         server.close(() => resolve3());
       });
       try {
-        if (import_node_fs25.default.existsSync(socketPath)) {
-          import_node_fs25.default.unlinkSync(socketPath);
+        if (import_node_fs26.default.existsSync(socketPath)) {
+          import_node_fs26.default.unlinkSync(socketPath);
         }
       } catch {
       }
       if (createdDir) {
         try {
-          import_node_fs25.default.rmSync(createdDir, { recursive: true, force: true });
+          import_node_fs26.default.rmSync(createdDir, { recursive: true, force: true });
         } catch {
         }
       }
@@ -76280,7 +76442,7 @@ function extractVerificationSection(markdown) {
 }
 
 // src/director-reseed.ts
-var import_node_fs26 = require("node:fs");
+var import_node_fs27 = require("node:fs");
 var import_node_readline2 = require("node:readline");
 var import_node_path40 = require("node:path");
 function estimateTokens(s) {
@@ -76433,7 +76595,7 @@ async function readSessionRows(logsDir, files, sessionIds) {
   for (const f of files) {
     const filePath = (0, import_node_path40.join)(logsDir, f);
     try {
-      const stream = (0, import_node_fs26.createReadStream)(filePath, { encoding: "utf8" });
+      const stream = (0, import_node_fs27.createReadStream)(filePath, { encoding: "utf8" });
       const rl = (0, import_node_readline2.createInterface)({ input: stream, crlfDelay: Infinity });
       try {
         for await (const line of rl) {
@@ -76457,7 +76619,7 @@ async function readSessionRows(logsDir, files, sessionIds) {
 }
 
 // src/external-agents-scrub.ts
-var import_node_fs27 = __toESM(require("node:fs"), 1);
+var import_node_fs28 = __toESM(require("node:fs"), 1);
 var import_node_os20 = __toESM(require("node:os"), 1);
 var import_node_path41 = __toESM(require("node:path"), 1);
 var REDACTION = "[REDACTED]";
@@ -76468,7 +76630,7 @@ function readKeysEnv() {
   const filePath = KEYS_ENV_PATH();
   let mtimeMs = 0;
   try {
-    mtimeMs = import_node_fs27.default.statSync(filePath).mtimeMs;
+    mtimeMs = import_node_fs28.default.statSync(filePath).mtimeMs;
   } catch {
     mtimeMs = 0;
   }
@@ -76477,7 +76639,7 @@ function readKeysEnv() {
   }
   const map2 = /* @__PURE__ */ new Map();
   try {
-    const content = import_node_fs27.default.readFileSync(filePath, "utf8");
+    const content = import_node_fs28.default.readFileSync(filePath, "utf8");
     for (const rawLine of content.split(/\r?\n/)) {
       const line = rawLine.trim();
       if (line === "" || line.startsWith("#")) continue;
@@ -76883,7 +77045,7 @@ function addBridgeModel(target, model) {
 }
 function readTextIfExists(filePath) {
   try {
-    return import_node_fs28.default.readFileSync(filePath, "utf8");
+    return import_node_fs29.default.readFileSync(filePath, "utf8");
   } catch {
     return null;
   }
@@ -76962,7 +77124,7 @@ function readCodexFallbackModels() {
   }
   const automationsDir = import_node_path43.default.join(codexHome, "automations");
   try {
-    for (const entry of import_node_fs28.default.readdirSync(automationsDir, { withFileTypes: true })) {
+    for (const entry of import_node_fs29.default.readdirSync(automationsDir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       for (const slug of readKnownGptSlugsFromTomlFile(import_node_path43.default.join(automationsDir, entry.name, "automation.toml"))) {
         addBridgeModel(
@@ -76992,8 +77154,8 @@ function selfUpdateInboxItemId(offeredVersion) {
 function neutralCheckoutCwd(stateDir) {
   const dir = import_node_path43.default.join(stateDir, "no-checkout");
   try {
-    import_node_fs28.default.mkdirSync(dir, { recursive: true });
-    if (!import_node_fs28.default.existsSync(import_node_path43.default.join(dir, ".git"))) {
+    import_node_fs29.default.mkdirSync(dir, { recursive: true });
+    if (!import_node_fs29.default.existsSync(import_node_path43.default.join(dir, ".git"))) {
       try {
         (0, import_node_child_process26.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
       } catch {
@@ -77185,7 +77347,7 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- When creating a task, classify and supply the `domain` field explicitly based on the nature of the work: pass `domain:'code'` for software engineering work, `domain:'seo'` for SEO/optimization, `domain:'marketing'` for marketing/growth, or `domain:'content'` for content creation/writing \u2014 the same way you select category/subcategory. A follow-up task spawned with `parentTaskId` inherits its parent's domain automatically and requires no explicit domain.",
     '- When a task needs a browser (login flows, UI verification/clicks, scraping), pass `prerequisites:[{mcp:"mrrlin-browser",reason:"..."}]` to `create_execution_run`. If that run later fails into a handoff, the operator gets a one-click "Launch browser & resume" that brings up the dedicated browser as the turn starts.',
     "- When you actually drive a browser (calling `browser_navigate`, `browser_click`, `browser_snapshot`, `browser_type`, etc.), invoke those tools from the **`mrrlin-browser`** MCP server ONLY. Do NOT use tools from any other browser MCP (`playwright`, `chrome-devtools`, `puppeteer`, etc.) even if they are also connected on this operator's box \u2014 those use a shared/default Playwright profile that is fragile across runs. Only `mrrlin-browser` uses this project's dedicated Chromium + persistent operator profile (`~/.mrrlin/browser/profile`). If your host exposes multiple browser MCPs with overlapping tool names, prefer the `mrrlin-browser` server unconditionally.",
-    "- Exactly one browser session exists for this operator, shared across every concurrent chat and task on their box \u2014 a deliberate tradeoff, not a bug, so a second concurrent user of the browser is expected, not exceptional. If a `mrrlin-browser` call fails with `Browser is already in use for ...`, that means another one of the operator's own chats or tasks is driving the browser RIGHT NOW. Do not present this as a broken tool or a mysterious error: tell the operator plainly that the browser is busy with another task, ask them to wait for it to finish (or close it), and offer to retry shortly. Never retry-loop this silently.",
+    "- One browser session is shared by every concurrent chat on this operator's box (a code run drives its task's own copy) \u2014 a deliberate tradeoff, so a second user is expected, not exceptional. If a `mrrlin-browser` call fails with `Browser is already in use for ...`, that means another one of the operator's own chats or tasks is driving the browser RIGHT NOW. Do not present this as a broken tool or a mysterious error: tell the operator plainly that the browser is busy with another task, ask them to wait for it to finish (or close it), and offer to retry shortly. Never retry-loop this silently.",
     '- If a mrrlin-browser call result additionally contains the text "Self-collision recovered", that is a DIFFERENT case from the one above: it was YOUR OWN earlier turn in THIS SAME chat that left the browser open, not another task. It has already been closed automatically \u2014 briefly tell the operator that, then immediately retry the exact same browser action once without asking first.',
     "",
     'Research playbook \u2014 when the user asks about a topic, an area, or "what do we have on X":',
@@ -77560,7 +77722,7 @@ async function runOrphanWorktreeSweep(client, opts) {
   const cutoff = Date.now() - worktreeRetentionMs();
   const isReapable = (worktreePath) => {
     try {
-      return import_node_fs28.default.statSync(worktreePath).mtimeMs < cutoff;
+      return import_node_fs29.default.statSync(worktreePath).mtimeMs < cutoff;
     } catch {
       return false;
     }
@@ -79545,6 +79707,9 @@ async function startDirectorBridge() {
     // fail. If the resolved branch does not exist on origin, createRunWorktree surfaces a
     // `default_branch_unresolved` error which the consumer routes to a clean operator handoff.
     getDefaultBranch: (projectSlug) => Promise.resolve(resolveDefaultBranch(checkoutRegistry.get(projectSlug)?.path ?? null)),
+    // Dogfood v2 F-21: each task's runs drive their own browser profile, so another session's
+    // long-lived `mrrlin-browser` holding the shared one cannot block a run's browser.
+    runBrowserThreadEnv: (projectSlug, taskId) => runBrowserThreadEnv(projectSlug, taskId),
     // ADR 0007 self-review: critique the committed diff on the executor's own agent handle before
     // push/PR. Reuses the collected-turn runner (startThread + collect assistant text).
     selfReviewTurn: createSelfReviewTurn({
@@ -79568,7 +79733,7 @@ async function startDirectorBridge() {
       runVerificationTurn: createRunVerificationTurn({
         startSandbox: async (egressDomains, providerId, opts) => {
           opts?.wrapCommand?.(["node"]);
-          const scratchDir = import_node_fs28.default.mkdtempSync(import_node_path43.default.join(import_node_os22.default.tmpdir(), "mrrlin-verify-"));
+          const scratchDir = import_node_fs29.default.mkdtempSync(import_node_path43.default.join(import_node_os22.default.tmpdir(), "mrrlin-verify-"));
           const executor = await startExecutorServer({
             worktree: scratchDir,
             disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path43.default.join(config2.stateDir, "locks"), import_node_path43.default.basename(scratchDir)),
@@ -79584,7 +79749,7 @@ async function startDirectorBridge() {
             dispose: () => {
               executor.dispose();
               try {
-                import_node_fs28.default.rmSync(scratchDir, { recursive: true, force: true });
+                import_node_fs29.default.rmSync(scratchDir, { recursive: true, force: true });
               } catch {
               }
             },
@@ -79943,7 +80108,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto23.default.createHash("sha256").update(import_node_fs28.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto23.default.createHash("sha256").update(import_node_fs29.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -80413,13 +80578,13 @@ function readOrCreateBridgeToken(stateDir) {
   if (explicit) return explicit;
   const tokenPath = import_node_path43.default.join(stateDir, "token.txt");
   try {
-    const existing = import_node_fs28.default.readFileSync(tokenPath, "utf8").trim();
+    const existing = import_node_fs29.default.readFileSync(tokenPath, "utf8").trim();
     if (existing) return existing;
   } catch {
   }
-  import_node_fs28.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
+  import_node_fs29.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
   const token = import_node_crypto23.default.randomBytes(32).toString("base64url");
-  import_node_fs28.default.writeFileSync(tokenPath, `${token}
+  import_node_fs29.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
 }
@@ -81328,7 +81493,7 @@ function runSetCredential(args) {
 
 // src/install-service.ts
 var import_node_os23 = __toESM(require("node:os"), 1);
-var import_node_fs29 = require("node:fs");
+var import_node_fs30 = require("node:fs");
 var import_node_path44 = __toESM(require("node:path"), 1);
 function parseEnvLine(line, env) {
   const trimmed = line.trim();
@@ -81765,7 +81930,7 @@ function performConfigBackup(deps, ecoPath, existingText) {
 var SYSTEM_PATH_DIRS = ["/usr/bin", "/bin", "/usr/sbin", "/sbin"];
 function defaultHomeOwnerUid(home) {
   try {
-    return (0, import_node_fs29.statSync)(home).uid;
+    return (0, import_node_fs30.statSync)(home).uid;
   } catch {
     return null;
   }
@@ -82117,7 +82282,7 @@ function augmentProcessPathWithCommonDirs() {
   ];
   const existing = (process.env.PATH || "").split(import_node_path48.default.delimiter).filter(Boolean);
   const existingSet = new Set(existing);
-  const toAdd = candidates.filter((d) => !existingSet.has(d) && (0, import_node_fs30.existsSync)(d));
+  const toAdd = candidates.filter((d) => !existingSet.has(d) && (0, import_node_fs31.existsSync)(d));
   if (toAdd.length > 0) {
     process.env.PATH = [...existing, ...toAdd].join(import_node_path48.default.delimiter);
   }
@@ -82147,7 +82312,7 @@ function bootHookStatus() {
   for (const candidate of candidates) {
     const printed = (0, import_node_child_process27.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
-    if (!(0, import_node_fs30.existsSync)(candidate.plist)) continue;
+    if (!(0, import_node_fs31.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
     const runs = /^\s*runs\s*=\s*(\d+)/m.exec(out);
     const exitCode = /^\s*last exit code\s*=\s*(-?\d+)/m.exec(out);
@@ -82426,7 +82591,7 @@ async function main() {
       }
       try {
         const codexHome = process.env.CODEX_HOME ?? import_node_path48.default.join(process.env.HOME ?? (0, import_node_os25.homedir)(), ".codex");
-        (0, import_node_fs30.rmSync)(import_node_path48.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
+        (0, import_node_fs31.rmSync)(import_node_path48.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
       } catch {
       }
       const claudeResult = await installClaude({ binPath, force, serveEnv });
@@ -82496,13 +82661,13 @@ async function main() {
         env: process.env,
         cwd: process.cwd(),
         writeFile: (p, c) => {
-          (0, import_node_fs30.mkdirSync)(import_node_path48.default.dirname(p), { recursive: true, mode: 448 });
-          (0, import_node_fs30.writeFileSync)(p, c, { mode: 384 });
+          (0, import_node_fs31.mkdirSync)(import_node_path48.default.dirname(p), { recursive: true, mode: 448 });
+          (0, import_node_fs31.writeFileSync)(p, c, { mode: 384 });
         },
-        writeExclusiveFile: (p, c) => (0, import_node_fs30.writeFileSync)(p, c, { flag: "wx", mode: 384 }),
+        writeExclusiveFile: (p, c) => (0, import_node_fs31.writeFileSync)(p, c, { flag: "wx", mode: 384 }),
         listDir: (p) => {
           try {
-            return (0, import_node_fs30.readdirSync)(p);
+            return (0, import_node_fs31.readdirSync)(p);
           } catch {
             return null;
           }
@@ -82513,7 +82678,7 @@ async function main() {
         // value", never a failed install. See readExistingTelemetryDefaultProject.
         readFile: (p) => {
           try {
-            return (0, import_node_fs30.readFileSync)(p, "utf8");
+            return (0, import_node_fs31.readFileSync)(p, "utf8");
           } catch {
             return null;
           }
@@ -82534,7 +82699,7 @@ async function main() {
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs30.rmSync)(p, { force: true });
+            (0, import_node_fs31.rmSync)(p, { force: true });
           } catch {
           }
         },
@@ -82555,7 +82720,7 @@ async function main() {
         runPm2: (a) => ({ code: pm2Runner(a).code }),
         removeFile: (p) => {
           try {
-            (0, import_node_fs30.rmSync)(p, { force: true });
+            (0, import_node_fs31.rmSync)(p, { force: true });
           } catch {
           }
         },
@@ -82582,7 +82747,7 @@ async function main() {
         log(`codex config NOT modified: ${error51 instanceof Error ? error51.message : String(error51)}`);
       }
       try {
-        (0, import_node_fs30.rmSync)(import_node_path48.default.join(home, ".mrrlin"), { recursive: true, force: true });
+        (0, import_node_fs31.rmSync)(import_node_path48.default.join(home, ".mrrlin"), { recursive: true, force: true });
       } catch {
       }
       log("removed ~/.mrrlin");