@muggleai/works 5.19.0-staging.131 → 5.19.0

package/dist/{chunk-U6ZACW6K.js → chunk-ZA5KHVX5.js}

@@ -1,6 +1,6 @@
-import * as fs6 from 'fs';
+import * as fs4 from 'fs';
 import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
-import * as path11 from 'path';
+import * as path13 from 'path';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
 import * as crypto from 'crypto';
@@ -10,7 +10,7 @@ import { platform } from 'os';
 import winston from 'winston';
 import { exec, spawn } from 'child_process';
 import axios, { AxiosError } from 'axios';
-import * as fs10 from 'fs/promises';
+import * as fs12 from 'fs/promises';
 import AppInsights from 'applicationinsights';
 import { z } from 'zod';
 
@@ -29,8 +29,10 @@ var __export = (target, all) => {
 // packages/mcps/src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  ACTION_SCRIPT_FILE_NAME: () => ACTION_SCRIPT_FILE_NAME,
   DEFAULT_PREFERENCES: () => DEFAULT_PREFERENCES,
   ElectronAppReleaseStream: () => ElectronAppReleaseStream,
+  HTML_VIEW_OFFER_LINE: () => HTML_VIEW_OFFER_LINE,
   ONBOARDING_BLANKET_OPTIONS: () => ONBOARDING_BLANKET_OPTIONS,
   ONBOARDING_CHOICE_GROUPS: () => ONBOARDING_CHOICE_GROUPS,
   ONBOARDING_MAX_OFFERS: () => ONBOARDING_MAX_OFFERS,
@@ -49,7 +51,11 @@ __export(src_exports, {
   PreferenceKey: () => PreferenceKey,
   PreferenceValue: () => PreferenceValue,
   ProjectPreferencesReconcileOutcome: () => ProjectPreferencesReconcileOutcome,
+  RUN_SESSIONS_DIR_NAME: () => RUN_SESSIONS_DIR_NAME,
+  RunViewError: () => RunViewError,
   RuntimeTarget: () => RuntimeTarget,
+  SCREENSHOT_DIR_RELATIVE_PATH: () => SCREENSHOT_DIR_RELATIVE_PATH,
+  SCREENSHOT_FILE_EXTENSION: () => SCREENSHOT_FILE_EXTENSION,
   WATCHER_LIFETIME_SECONDS: () => WATCHER_LIFETIME_SECONDS,
   WATCHER_LIFETIME_UNBOUNDED_SECONDS: () => WATCHER_LIFETIME_UNBOUNDED_SECONDS,
   applyOnboardingAnswers: () => applyOnboardingAnswers,
@@ -91,6 +97,7 @@ __export(src_exports, {
   getPlatformKey: () => getPlatformKey,
   getQaTools: () => getQaTools,
   getReleaseSignerIdentityUri: () => getReleaseSignerIdentityUri,
+  getRunSessionsDir: () => getRunSessionsDir,
   getValidApiKeyData: () => getValidApiKeyData,
   getValidCredentials: () => getValidCredentials,
   hasApiKey: () => hasApiKey,
@@ -108,8 +115,11 @@ __export(src_exports, {
   pollDeviceCode: () => pollDeviceCode,
   qa: () => e2e_exports2,
   readPreferencesMetadata: () => readPreferencesMetadata,
+  readRunView: () => readRunView,
   reconcileProjectPreferences: () => reconcileProjectPreferences,
   recordOnboardingSkip: () => recordOnboardingSkip,
+  renderRunViewHtml: () => renderRunViewHtml,
+  renderRunViewText: () => renderRunViewText,
   resetConfig: () => resetConfig,
   resetLogger: () => resetLogger,
   resetPreference: () => resetPreference,
@@ -120,6 +130,7 @@ __export(src_exports, {
   resolveElectronAppPathOrNull: () => resolveElectronAppPathOrNull,
   resolveOnboardingAnswers: () => resolveOnboardingAnswers,
   resolvePreferences: () => resolvePreferences,
+  resolveRunSessionPath: () => resolveRunSessionPath,
   resolveRuntimeTarget: () => resolveRuntimeTarget,
   resolveTogglePreferences: () => resolveTogglePreferences,
   saveApiKey: () => saveApiKey,
@@ -130,7 +141,8 @@ __export(src_exports, {
   validatePreference: () => validatePreference,
   verifyFileChecksum: () => verifyFileChecksum,
   writePreferences: () => writePreferences2,
-  writePreferencesWithMetadata: () => writePreferencesWithMetadata
+  writePreferencesWithMetadata: () => writePreferencesWithMetadata,
+  writeRunViewHtml: () => writeRunViewHtml
 });
 
 // packages/mcps/src/shared/runtime-target-types.ts
@@ -148,29 +160,29 @@ var ElectronAppReleaseStream = /* @__PURE__ */ ((ElectronAppReleaseStream3) => {
 var DEFAULT_AUTH0_SCOPE = "openid profile email offline_access";
 var DEFAULT_WEB_SERVICE_URL = "http://localhost:3001";
 var RUNTIME_TARGET_ENV_VAR = "MUGGLE_MCP_PROMPT_SERVICE_TARGET";
-var RUNTIME_TARGETS_FILE = path11.join("config", "runtime-targets.json");
+var RUNTIME_TARGETS_FILE = path13.join("config", "runtime-targets.json");
 function getPackageRoot() {
-  const currentDir = path11.dirname(fileURLToPath(import.meta.url));
-  if (currentDir.includes(path11.join("dist", "shared"))) {
-    return path11.resolve(currentDir, "..", "..");
+  const currentDir = path13.dirname(fileURLToPath(import.meta.url));
+  if (currentDir.includes(path13.join("dist", "shared"))) {
+    return path13.resolve(currentDir, "..", "..");
   }
   if (currentDir.endsWith("dist")) {
-    return path11.resolve(currentDir, "..");
+    return path13.resolve(currentDir, "..");
   }
-  if (currentDir.includes(path11.join("src", "shared"))) {
-    return path11.resolve(currentDir, "..", "..", "..", "..");
+  if (currentDir.includes(path13.join("src", "shared"))) {
+    return path13.resolve(currentDir, "..", "..", "..", "..");
   }
-  return path11.dirname(currentDir);
+  return path13.dirname(currentDir);
 }
 var runtimeTargetDataCache = null;
 function getRuntimeTargetData() {
   if (runtimeTargetDataCache) {
     return runtimeTargetDataCache;
   }
-  const profilesPath = path11.join(getPackageRoot(), RUNTIME_TARGETS_FILE);
+  const profilesPath = path13.join(getPackageRoot(), RUNTIME_TARGETS_FILE);
   let parsedData;
   try {
-    parsedData = JSON.parse(fs6.readFileSync(profilesPath, "utf-8"));
+    parsedData = JSON.parse(fs4.readFileSync(profilesPath, "utf-8"));
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
     throw new Error(
@@ -246,7 +258,7 @@ function assertDeviceCodeClientProvisioned(target) {
 }
 var DATA_DIR_NAME = ".muggle-ai";
 function getDataDir() {
-  return path11.join(os4.homedir(), DATA_DIR_NAME);
+  return path13.join(os4.homedir(), DATA_DIR_NAME);
 }
 var DEV_MANIFEST = {
   release: "dev",
@@ -300,27 +312,27 @@ var configInstance = null;
 var muggleConfigCache = null;
 function getPackageRoot2() {
   const currentFilePath = fileURLToPath(import.meta.url);
-  const currentDir = path11.dirname(currentFilePath);
-  if (currentDir.includes(path11.join("dist", "shared"))) {
-    return path11.resolve(currentDir, "..", "..");
+  const currentDir = path13.dirname(currentFilePath);
+  if (currentDir.includes(path13.join("dist", "shared"))) {
+    return path13.resolve(currentDir, "..", "..");
   }
   if (currentDir.endsWith("dist")) {
-    return path11.resolve(currentDir, "..");
+    return path13.resolve(currentDir, "..");
   }
-  if (currentDir.includes(path11.join("src", "shared"))) {
-    return path11.resolve(currentDir, "..", "..", "..", "..");
+  if (currentDir.includes(path13.join("src", "shared"))) {
+    return path13.resolve(currentDir, "..", "..", "..", "..");
   }
-  return path11.dirname(currentDir);
+  return path13.dirname(currentDir);
 }
 function getMuggleConfig() {
   if (muggleConfigCache) {
     return muggleConfigCache;
   }
   const packageRoot = getPackageRoot2();
-  const packageJsonPath = path11.join(packageRoot, "package.json");
+  const packageJsonPath = path13.join(packageRoot, "package.json");
   let packageJson;
   try {
-    const content = fs6.readFileSync(packageJsonPath, "utf-8");
+    const content = fs4.readFileSync(packageJsonPath, "utf-8");
     packageJson = JSON.parse(content);
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
@@ -393,7 +405,7 @@ function buildOAuthSessionFileName(params) {
 function getDownloadedElectronAppPath() {
   const platformName = os4.platform();
   const version = getElectronAppVersion();
-  const baseDir = path11.join(
+  const baseDir = path13.join(
     getDataDir2(),
     ELECTRON_APP_DIR,
     buildElectronAppDirName({
@@ -404,18 +416,18 @@ function getDownloadedElectronAppPath() {
   let binaryPath;
   switch (platformName) {
     case "darwin":
-      binaryPath = path11.join(baseDir, "MuggleAI.app", "Contents", "MacOS", "MuggleAI");
+      binaryPath = path13.join(baseDir, "MuggleAI.app", "Contents", "MacOS", "MuggleAI");
       break;
     case "win32":
-      binaryPath = path11.join(baseDir, "MuggleAI.exe");
+      binaryPath = path13.join(baseDir, "MuggleAI.exe");
       break;
     case "linux":
-      binaryPath = path11.join(baseDir, "MuggleAI");
+      binaryPath = path13.join(baseDir, "MuggleAI");
       break;
     default:
       return null;
   }
-  if (fs6.existsSync(binaryPath)) {
+  if (fs4.existsSync(binaryPath)) {
     return binaryPath;
   }
   return null;
@@ -426,25 +438,25 @@ function getSystemElectronAppPath() {
   let binaryPath;
   switch (platformName) {
     case "darwin":
-      binaryPath = path11.join(homeDir, "Applications", "MuggleAI.app", "Contents", "MacOS", "MuggleAI");
+      binaryPath = path13.join(homeDir, "Applications", "MuggleAI.app", "Contents", "MacOS", "MuggleAI");
       break;
     case "win32":
-      binaryPath = path11.join(homeDir, "AppData", "Local", "Programs", "MuggleAI", "MuggleAI.exe");
+      binaryPath = path13.join(homeDir, "AppData", "Local", "Programs", "MuggleAI", "MuggleAI.exe");
       break;
     case "linux":
-      binaryPath = path11.join(homeDir, ".local", "share", "muggle-ai", "MuggleAI");
+      binaryPath = path13.join(homeDir, ".local", "share", "muggle-ai", "MuggleAI");
       break;
     default:
       return null;
   }
-  if (fs6.existsSync(binaryPath)) {
+  if (fs4.existsSync(binaryPath)) {
     return binaryPath;
   }
   return null;
 }
 function resolveElectronAppPathOrNull() {
   const customPath = process.env.ELECTRON_APP_PATH;
-  if (customPath && fs6.existsSync(customPath)) {
+  if (customPath && fs4.existsSync(customPath)) {
     return customPath;
   }
   const downloadedPath = getDownloadedElectronAppPath();
@@ -459,12 +471,12 @@ function resolveElectronAppPathOrNull() {
 }
 function resolveWebServicePath() {
   const customPath = process.env.WEB_SERVICE_PATH;
-  if (customPath && fs6.existsSync(customPath)) {
+  if (customPath && fs4.existsSync(customPath)) {
     return customPath;
   }
   const packageRoot = getPackageRoot2();
-  const siblingPath = path11.resolve(packageRoot, "..", "web-service", "dist", "src", "index.js");
-  if (fs6.existsSync(siblingPath)) {
+  const siblingPath = path13.resolve(packageRoot, "..", "web-service", "dist", "src", "index.js");
+  if (fs4.existsSync(siblingPath)) {
     return siblingPath;
   }
   return null;
@@ -506,16 +518,16 @@ function buildLocalQaConfig() {
     webServiceUrl: process.env.WEB_SERVICE_URL ?? DEFAULT_WEB_SERVICE_URL,
     promptServiceUrl: process.env.PROMPT_SERVICE_BASE_URL ?? activeProfile.promptServiceBaseUrl,
     dataDir,
-    sessionsDir: path11.join(dataDir, "sessions"),
-    projectsDir: path11.join(dataDir, "projects"),
-    tempDir: path11.join(dataDir, "temp"),
-    apiKeyFilePath: path11.join(dataDir, API_KEY_FILE),
-    oauthSessionFilePath: path11.join(
+    sessionsDir: path13.join(dataDir, "sessions"),
+    projectsDir: path13.join(dataDir, "projects"),
+    tempDir: path13.join(dataDir, "temp"),
+    apiKeyFilePath: path13.join(dataDir, API_KEY_FILE),
+    oauthSessionFilePath: path13.join(
       dataDir,
       buildOAuthSessionFileName({ runtimeTarget: getActiveRuntimeTarget() })
     ),
     webServicePath: resolveWebServicePath(),
-    webServicePidFile: path11.join(dataDir, "web-service.pid"),
+    webServicePidFile: path13.join(dataDir, "web-service.pid"),
     auth0: {
       domain: process.env.AUTH0_DOMAIN ?? activeProfile.auth0Domain,
       clientId: process.env.AUTH0_CLIENT_ID ?? activeProfile.auth0ClientId,
@@ -550,10 +562,10 @@ function getElectronAppVersion() {
   if (envVersion && /^\d+\.\d+\.\d+$/.test(envVersion)) {
     return envVersion;
   }
-  const overridePath = path11.join(getDataDir2(), VERSION_OVERRIDE_FILE);
-  if (fs6.existsSync(overridePath)) {
+  const overridePath = path13.join(getDataDir2(), VERSION_OVERRIDE_FILE);
+  if (fs4.existsSync(overridePath)) {
     try {
-      const content = JSON.parse(fs6.readFileSync(overridePath, "utf-8"));
+      const content = JSON.parse(fs4.readFileSync(overridePath, "utf-8"));
       if (content.version && typeof content.version === "string") {
         return content.version;
       }
@@ -567,10 +579,10 @@ function getElectronAppVersionSource() {
   if (envVersion && /^\d+\.\d+\.\d+$/.test(envVersion)) {
     return "env";
   }
-  const overridePath = path11.join(getDataDir2(), VERSION_OVERRIDE_FILE);
-  if (fs6.existsSync(overridePath)) {
+  const overridePath = path13.join(getDataDir2(), VERSION_OVERRIDE_FILE);
+  if (fs4.existsSync(overridePath)) {
     try {
-      const content = JSON.parse(fs6.readFileSync(overridePath, "utf-8"));
+      const content = JSON.parse(fs4.readFileSync(overridePath, "utf-8"));
       if (content.version && typeof content.version === "string") {
         return "override";
       }
@@ -614,7 +626,7 @@ function isElectronAppInstalled() {
 }
 function getElectronAppDir(version) {
   const resolvedVersion = version ?? getElectronAppVersion();
-  return path11.join(
+  return path13.join(
     getDataDir2(),
     ELECTRON_APP_DIR,
     buildElectronAppDirName({
@@ -680,7 +692,7 @@ function getPlatformKey() {
 async function calculateFileChecksum(filePath) {
   return new Promise((resolve6, reject) => {
     const hash = crypto.createHash("sha256");
-    const stream = fs6.createReadStream(filePath);
+    const stream = fs4.createReadStream(filePath);
     stream.on("data", (data) => {
       hash.update(data);
     });
@@ -695,7 +707,7 @@ async function calculateFileChecksum(filePath) {
 async function verifyFileChecksum(filePath, expectedChecksum) {
   if (!expectedChecksum || expectedChecksum.trim() === "") {
     logger.warn("Checksum verification skipped - no checksum provided", {
-      file: path11.basename(filePath)
+      file: path13.basename(filePath)
     });
     return {
       valid: true,
@@ -711,13 +723,13 @@ async function verifyFileChecksum(filePath, expectedChecksum) {
     const valid = normalizedExpected === normalizedActual;
     if (!valid) {
       logger.error("Checksum verification failed", {
-        file: path11.basename(filePath),
+        file: path13.basename(filePath),
         expected: normalizedExpected,
         actual: normalizedActual
       });
     } else {
       logger.info("Checksum verified successfully", {
-        file: path11.basename(filePath),
+        file: path13.basename(filePath),
         checksum: normalizedActual
       });
     }
@@ -730,7 +742,7 @@ async function verifyFileChecksum(filePath, expectedChecksum) {
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
     logger.error("Checksum calculation failed", {
-      file: path11.basename(filePath),
+      file: path13.basename(filePath),
       error: errorMessage
     });
     return {
@@ -795,107 +807,13 @@ async function openBrowserUrl(options) {
     }
   });
 }
-var API_KEY_FILE2 = "api-key.json";
-function getApiKeyFilePath() {
-  return path11.join(getDataDir(), API_KEY_FILE2);
-}
-function ensureDataDir() {
-  const dataDir = getDataDir();
-  if (!fs6.existsSync(dataDir)) {
-    fs6.mkdirSync(dataDir, { recursive: true });
-  }
-}
-function loadApiKeyData() {
-  const logger6 = getLogger();
-  const apiKeyPath = getApiKeyFilePath();
-  try {
-    if (!fs6.existsSync(apiKeyPath)) {
-      logger6.debug("No API key file found", { path: apiKeyPath });
-      return null;
-    }
-    const content = fs6.readFileSync(apiKeyPath, "utf-8");
-    const data = JSON.parse(content);
-    return data;
-  } catch (error) {
-    logger6.warn("Failed to load API key data", {
-      error: error instanceof Error ? error.message : String(error)
-    });
-    return null;
-  }
-}
-function saveApiKeyData(data) {
-  const logger6 = getLogger();
-  const apiKeyPath = getApiKeyFilePath();
-  try {
-    ensureDataDir();
-    const content = JSON.stringify(data, null, 2);
-    fs6.writeFileSync(apiKeyPath, content, { mode: 384 });
-    logger6.info("API key saved", { path: apiKeyPath });
-  } catch (error) {
-    logger6.error("Failed to save API key", {
-      error: error instanceof Error ? error.message : String(error)
-    });
-    throw error;
-  }
-}
-function deleteApiKeyData() {
-  const logger6 = getLogger();
-  const apiKeyPath = getApiKeyFilePath();
-  try {
-    if (fs6.existsSync(apiKeyPath)) {
-      fs6.unlinkSync(apiKeyPath);
-      logger6.info("API key deleted", { path: apiKeyPath });
-    }
-  } catch (error) {
-    logger6.warn("Failed to delete API key", {
-      error: error instanceof Error ? error.message : String(error)
-    });
-  }
-}
-function getValidApiKeyData() {
-  const data = loadApiKeyData();
-  if (!data) {
-    return null;
-  }
-  if (data.apiKey) {
-    return data;
-  }
-  return null;
-}
-function hasApiKey() {
-  const data = loadApiKeyData();
-  return !!data?.apiKey;
-}
-function getApiKey() {
-  const data = loadApiKeyData();
-  return data?.apiKey ?? null;
-}
-function saveApiKey(params) {
-  const logger6 = getLogger();
-  const apiKeyPath = getApiKeyFilePath();
-  try {
-    ensureDataDir();
-    const data = {
-      accessToken: "",
-      expiresAt: "",
-      apiKey: params.apiKey,
-      apiKeyId: params.apiKeyId
-    };
-    const content = JSON.stringify(data, null, 2);
-    fs6.writeFileSync(apiKeyPath, content, { mode: 384 });
-    logger6.info("API key saved", { path: apiKeyPath });
-  } catch (error) {
-    logger6.error("Failed to save API key", {
-      error: error instanceof Error ? error.message : String(error)
-    });
-    throw error;
-  }
-}
-var loadCredentials = loadApiKeyData;
-var saveCredentials = saveApiKeyData;
-var deleteCredentials = deleteApiKeyData;
-var getValidCredentials = getValidApiKeyData;
-var getCredentialsFilePath = getApiKeyFilePath;
+
+// packages/mcps/src/mcp/local/services/run-view/run-view-constants.ts
+var RUN_SESSIONS_DIR_NAME = "sessions";
+var ACTION_SCRIPT_FILE_NAME = "action-script.json";
+var SCREENSHOT_DIR_RELATIVE_PATH = "electron-runtime/screenshot";
+var SCREENSHOT_FILE_EXTENSION = ".jpg";
+var HTML_VIEW_OFFER_LINE = "See the frames: re-run with --html (add --open to open it).";
 
 // packages/mcps/src/mcp/local/types/enums.ts
 var DeviceCodePollStatus = /* @__PURE__ */ ((DeviceCodePollStatus2) => {
@@ -980,1214 +898,1513 @@ var DisplayResolution = /* @__PURE__ */ ((DisplayResolution2) => {
   return DisplayResolution2;
 })(DisplayResolution || {});
 
-// packages/mcps/src/mcp/local/services/stored-auth-target.ts
-function decodeJwtPayload(token) {
-  try {
-    const parts = token.split(".");
-    if (parts.length !== 3) {
-      return null;
-    }
-    const payload = parts[1];
-    const decoded = Buffer.from(payload, "base64url").toString("utf-8");
-    return JSON.parse(decoded);
-  } catch {
-    return null;
-  }
-}
-function extractJwtIssuer(token) {
-  const payload = decodeJwtPayload(token);
-  if (!payload || typeof payload.iss !== "string") {
-    return null;
-  }
-  return payload.iss;
-}
-function normalizeIssuerHost(issuer) {
-  return issuer.replace(/^https:\/\//, "").replace(/\/$/, "");
-}
-function isStoredAuthForRuntimeTarget(params) {
-  if (params.tokenIssuer && params.expectedAuth0Domain) {
-    const issuerHost = normalizeIssuerHost(params.tokenIssuer);
-    const expectedHost = normalizeIssuerHost(params.expectedAuth0Domain);
-    if (issuerHost !== expectedHost) {
-      return false;
-    }
-  }
-  if (!params.storedRuntimeTarget) {
-    return params.activeRuntimeTarget === "production" /* Production */;
-  }
-  return params.storedRuntimeTarget === params.activeRuntimeTarget;
-}
-
-// packages/mcps/src/mcp/local/services/auth-service.ts
-var DEFAULT_LOGIN_WAIT_TIMEOUT_MS = 12e4;
-var AuthService = class {
-  /** Path to the OAuth session file. */
-  oauthSessionFilePath;
-  /** Path to the pending device code file. */
-  pendingDeviceCodePath;
+// packages/mcps/src/mcp/local/services/storage-service.ts
+var DEFAULT_SESSION_MAX_AGE_DAYS = 30;
+var StorageService = class {
+  /** Base data directory. */
+  dataDir;
+  /** Sessions directory. */
+  sessionsDir;
   /**
-   * Create a new AuthService.
+   * Create a new StorageService.
    */
   constructor() {
     const config = getConfig();
-    this.oauthSessionFilePath = config.localQa.oauthSessionFilePath;
-    this.pendingDeviceCodePath = path11.join(
-      path11.dirname(config.localQa.oauthSessionFilePath),
-      "pending-device-code.json"
-    );
+    this.dataDir = config.localQa.dataDir;
+    this.sessionsDir = config.localQa.sessionsDir;
   }
   /**
-   * Get current authentication status.
+   * Ensure the base directories exist.
    */
-  getAuthStatus() {
+  ensureDirectories() {
     const logger6 = getLogger();
-    const storedAuth = this.loadStoredAuth();
-    if (!storedAuth) {
-      logger6.debug("No stored auth found");
-      return { authenticated: false };
+    if (!fs4.existsSync(this.dataDir)) {
+      fs4.mkdirSync(this.dataDir, { recursive: true });
+      logger6.info("Created data directory", { path: this.dataDir });
+    }
+    if (!fs4.existsSync(this.sessionsDir)) {
+      fs4.mkdirSync(this.sessionsDir, { recursive: true });
+      logger6.info("Created sessions directory", { path: this.sessionsDir });
     }
-    const now = /* @__PURE__ */ new Date();
-    const expiresAt = new Date(storedAuth.expiresAt);
-    const isExpired = now >= expiresAt;
-    logger6.debug("Auth status checked", {
-      email: storedAuth.email,
-      isExpired,
-      expiresAt: storedAuth.expiresAt
-    });
-    return {
-      authenticated: !isExpired,
-      email: storedAuth.email,
-      userId: storedAuth.userId,
-      expiresAt: storedAuth.expiresAt,
-      isExpired
-    };
   }
   /**
-   * Start the device code flow.
-   * @param options.forceNewSession - Clear existing Auth0 browser session before login to allow account switching.
+   * Create a new session directory.
+   * @param sessionId - Unique session ID.
+   * @returns Path to the session directory.
    */
-  async startDeviceCodeFlow(options) {
+  createSessionDirectory(sessionId) {
     const logger6 = getLogger();
-    const config = getConfig();
-    const { domain, clientId, audience, scopes } = config.localQa.auth0;
-    logger6.info("Starting device code flow");
-    const url = `https://${domain}/oauth/device/code`;
-    const body = new URLSearchParams({
-      client_id: clientId,
-      scope: scopes.join(" "),
-      audience
-    });
-    const response = await fetch(url, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded"
-      },
-      body: body.toString()
-    });
-    if (!response.ok) {
-      const errorText = await response.text();
-      logger6.error("Device code request failed", {
-        status: response.status,
-        error: errorText
-      });
-      throw new Error(`Failed to start device code flow: ${response.status} ${errorText}`);
-    }
-    const deviceCodeResponse = await response.json();
-    logger6.info("Device code flow started", {
-      userCode: deviceCodeResponse.user_code,
-      verificationUri: deviceCodeResponse.verification_uri,
-      expiresIn: deviceCodeResponse.expires_in
-    });
-    this.storePendingDeviceCode({
-      deviceCode: deviceCodeResponse.device_code,
-      userCode: deviceCodeResponse.user_code,
-      expiresAt: new Date(Date.now() + deviceCodeResponse.expires_in * 1e3).toISOString()
-    });
-    let browserUrl = deviceCodeResponse.verification_uri_complete;
-    if (options?.forceNewSession) {
-      this.logout();
-      const logoutUrl = new URL(`https://${domain}/v2/logout`);
-      logoutUrl.searchParams.set("client_id", clientId);
-      logoutUrl.searchParams.set("returnTo", deviceCodeResponse.verification_uri_complete);
-      browserUrl = logoutUrl.toString();
-      logger6.info("Force new session: cleared local token, opening logout-redirect URL", {
-        logoutUrl: browserUrl
-      });
-    }
-    const browserOpenResult = await openBrowserUrl({
-      url: browserUrl
-    });
-    if (browserOpenResult.opened) {
-      logger6.info("Browser opened for device code login");
-    } else {
-      logger6.warn("Failed to open browser for device code login", {
-        error: browserOpenResult.error,
-        url: browserUrl
-      });
+    this.ensureDirectories();
+    const sessionDir = path13.join(this.sessionsDir, sessionId);
+    if (!fs4.existsSync(sessionDir)) {
+      fs4.mkdirSync(sessionDir, { recursive: true });
+      fs4.mkdirSync(path13.join(sessionDir, "screenshots"), { recursive: true });
+      fs4.mkdirSync(path13.join(sessionDir, "logs"), { recursive: true });
+      logger6.info("Created session directory", { sessionId, path: sessionDir });
     }
-    return {
-      deviceCode: deviceCodeResponse.device_code,
-      userCode: deviceCodeResponse.user_code,
-      verificationUri: deviceCodeResponse.verification_uri,
-      verificationUriComplete: deviceCodeResponse.verification_uri_complete,
-      expiresIn: deviceCodeResponse.expires_in,
-      interval: deviceCodeResponse.interval,
-      browserOpened: browserOpenResult.opened,
-      browserOpenError: browserOpenResult.error
-    };
+    return sessionDir;
   }
   /**
-   * Store a pending device code for later retrieval.
+   * Save session metadata.
+   * @param metadata - Session metadata to save.
    */
-  storePendingDeviceCode(params) {
+  saveSessionMetadata(metadata) {
     const logger6 = getLogger();
-    const dir = path11.dirname(this.pendingDeviceCodePath);
-    if (!fs6.existsSync(dir)) {
-      fs6.mkdirSync(dir, { recursive: true });
-    }
-    fs6.writeFileSync(this.pendingDeviceCodePath, JSON.stringify(params, null, 2), {
-      encoding: "utf-8",
-      mode: 384
-    });
-    logger6.debug("Pending device code stored", { userCode: params.userCode });
+    const sessionDir = this.createSessionDirectory(metadata.sessionId);
+    const metadataPath = path13.join(sessionDir, "metadata.json");
+    fs4.writeFileSync(metadataPath, JSON.stringify(metadata, null, 2), "utf-8");
+    logger6.debug("Saved session metadata", { sessionId: metadata.sessionId });
   }
   /**
-   * Get the pending device code if one exists and is not expired.
+   * Load session metadata.
+   * @param sessionId - Session ID to load.
+   * @returns Session metadata, or null if not found.
    */
-  getPendingDeviceCode() {
+  loadSessionMetadata(sessionId) {
     const logger6 = getLogger();
-    if (!fs6.existsSync(this.pendingDeviceCodePath)) {
-      logger6.debug("No pending device code found");
+    const metadataPath = path13.join(this.sessionsDir, sessionId, "metadata.json");
+    if (!fs4.existsSync(metadataPath)) {
       return null;
     }
     try {
-      const content = fs6.readFileSync(this.pendingDeviceCodePath, "utf-8");
-      const pendingDeviceCodeData = JSON.parse(content);
-      const now = /* @__PURE__ */ new Date();
-      const expiresAt = new Date(pendingDeviceCodeData.expiresAt);
-      if (now >= expiresAt) {
-        logger6.debug("Pending device code expired");
-        this.clearPendingDeviceCode();
-        return null;
-      }
-      return pendingDeviceCodeData.deviceCode;
+      const content = fs4.readFileSync(metadataPath, "utf-8");
+      return JSON.parse(content);
     } catch (error) {
-      logger6.warn("Failed to read pending device code", {
+      logger6.error("Failed to load session metadata", {
+        sessionId,
         error: error instanceof Error ? error.message : String(error)
       });
       return null;
     }
   }
   /**
-   * Clear the pending device code file.
+   * List all sessions.
+   * @returns Array of session IDs.
    */
-  clearPendingDeviceCode() {
-    const logger6 = getLogger();
-    if (fs6.existsSync(this.pendingDeviceCodePath)) {
-      try {
-        fs6.unlinkSync(this.pendingDeviceCodePath);
-        logger6.debug("Pending device code cleared");
-      } catch (error) {
-        logger6.warn("Failed to clear pending device code", {
-          error: error instanceof Error ? error.message : String(error)
-        });
-      }
+  listSessions() {
+    if (!fs4.existsSync(this.sessionsDir)) {
+      return [];
     }
+    return fs4.readdirSync(this.sessionsDir).filter((entry) => {
+      const entryPath = path13.join(this.sessionsDir, entry);
+      return fs4.statSync(entryPath).isDirectory();
+    });
   }
   /**
-   * Poll for device code authorization completion.
+   * Get the current session ID (if any).
+   * @returns Current session ID, or null.
    */
-  async pollDeviceCode(deviceCode) {
-    const logger6 = getLogger();
-    const config = getConfig();
-    const { domain, clientId } = config.localQa.auth0;
-    logger6.debug("Polling for device code authorization");
-    const url = `https://${domain}/oauth/token`;
-    const body = new URLSearchParams({
-      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-      client_id: clientId,
-      device_code: deviceCode
-    });
+  getCurrentSessionId() {
+    const currentPath = path13.join(this.sessionsDir, "current");
+    if (!fs4.existsSync(currentPath)) {
+      return null;
+    }
     try {
-      const response = await fetch(url, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/x-www-form-urlencoded"
-        },
-        body: body.toString()
-      });
-      if (response.ok) {
-        const tokenData = await response.json();
-        const tokenResponse = {
-          accessToken: tokenData.access_token,
-          refreshToken: tokenData.refresh_token,
-          tokenType: tokenData.token_type,
-          expiresIn: tokenData.expires_in
-        };
-        const userInfo = await this.getUserInfo(tokenResponse.accessToken);
-        await this.storeAuth({
-          tokenResponse,
-          email: userInfo.email,
-          userId: userInfo.sub
-        });
-        this.clearPendingDeviceCode();
-        logger6.info("Device code authorization complete", { email: userInfo.email });
-        return {
-          status: "complete" /* Complete */,
-          message: "Authentication successful!",
-          email: userInfo.email
-        };
-      }
-      const errorData = await response.json();
-      if (errorData.error === "authorization_pending") {
-        logger6.debug("Authorization pending");
-        return {
-          status: "pending" /* Pending */,
-          message: "Waiting for user to complete authorization..."
-        };
-      }
-      if (errorData.error === "slow_down") {
-        logger6.debug("Polling too fast");
-        return {
-          status: "pending" /* Pending */,
-          message: "Polling too fast, slowing down..."
-        };
-      }
-      if (errorData.error === "expired_token") {
-        logger6.warn("Device code expired");
-        return {
-          status: "expired" /* Expired */,
-          message: "The authorization code has expired. Please start again."
-        };
-      }
-      if (errorData.error === "access_denied") {
-        logger6.warn("Access denied");
-        return {
-          status: "error" /* Error */,
-          message: "Access was denied by the user.",
-          error: errorData.error_description ?? errorData.error
-        };
-      }
-      logger6.error("Unexpected error during polling", { error: errorData });
-      return {
-        status: "error" /* Error */,
-        message: errorData.error_description ?? errorData.error,
-        error: errorData.error
-      };
-    } catch (error) {
-      const errorMessage = error instanceof Error ? error.message : String(error);
-      logger6.error("Poll request failed", { error: errorMessage });
-      return {
-        status: "error" /* Error */,
-        message: `Poll request failed: ${errorMessage}`,
-        error: errorMessage
-      };
+      const target = fs4.readlinkSync(currentPath);
+      return path13.basename(target);
+    } catch {
+      return null;
     }
   }
   /**
-   * Poll for device code authorization until completion or timeout.
+   * Set the current session.
+   * @param sessionId - Session ID to set as current.
    */
-  async waitForDeviceCodeAuthorization(params) {
+  setCurrentSession(sessionId) {
     const logger6 = getLogger();
-    const timeoutMs = params.timeoutMs ?? DEFAULT_LOGIN_WAIT_TIMEOUT_MS;
-    const pollIntervalMs = Math.max(params.intervalSeconds, 1) * 1e3;
-    const startedAt = Date.now();
-    logger6.info("Waiting for device code authorization", {
-      timeoutMs,
-      pollIntervalMs
-    });
-    while (Date.now() - startedAt < timeoutMs) {
-      const pollResult = await this.pollDeviceCode(params.deviceCode);
-      if (pollResult.status !== "pending" /* Pending */) {
-        return pollResult;
-      }
-      const remainingMs = timeoutMs - (Date.now() - startedAt);
-      if (remainingMs <= 0) {
-        break;
-      }
-      await sleep({ durationMs: Math.min(pollIntervalMs, remainingMs) });
+    const currentPath = path13.join(this.sessionsDir, "current");
+    const targetPath = path13.join(this.sessionsDir, sessionId);
+    if (fs4.existsSync(currentPath)) {
+      fs4.unlinkSync(currentPath);
     }
-    return {
-      status: "pending" /* Pending */,
-      message: "Timed out waiting for browser login confirmation. Please finish login in your browser, then call `muggle_auth_poll` to continue."
-    };
+    fs4.symlinkSync(targetPath, currentPath);
+    logger6.info("Set current session", { sessionId });
   }
   /**
-   * Get user info from Auth0.
+   * Save a screenshot to the session directory.
+   * @param params - Screenshot save parameters.
    */
-  async getUserInfo(accessToken) {
+  saveScreenshot(params) {
+    const { sessionId, filename, data } = params;
     const logger6 = getLogger();
-    const config = getConfig();
-    const { domain } = config.localQa.auth0;
-    const url = `https://${domain}/userinfo`;
-    try {
-      const response = await fetch(url, {
-        method: "GET",
-        headers: {
-          Authorization: `Bearer ${accessToken}`
-        }
-      });
-      if (!response.ok) {
-        logger6.warn("Failed to get user info", { status: response.status });
-        return {};
-      }
-      const userInfoData = await response.json();
-      return userInfoData;
-    } catch (error) {
-      logger6.warn("User info request failed", {
-        error: error instanceof Error ? error.message : String(error)
-      });
-      return {};
-    }
+    const sessionDir = this.createSessionDirectory(sessionId);
+    const screenshotPath = path13.join(sessionDir, "screenshots", filename);
+    fs4.writeFileSync(screenshotPath, data);
+    logger6.debug("Saved screenshot", { sessionId, filename });
+    return screenshotPath;
   }
   /**
-   * Store authentication tokens.
+   * Append to the results markdown file.
+   * @param params - Results append parameters.
    */
-  async storeAuth(params) {
-    const { tokenResponse, email, userId } = params;
+  appendToResults(params) {
+    const { sessionId, content } = params;
     const logger6 = getLogger();
-    const expiresAt = new Date(Date.now() + tokenResponse.expiresIn * 1e3).toISOString();
-    const storedAuth = {
-      accessToken: tokenResponse.accessToken,
-      refreshToken: tokenResponse.refreshToken,
-      expiresAt,
-      email,
-      userId,
-      runtimeTarget: getActiveRuntimeTarget()
-    };
-    const dir = path11.dirname(this.oauthSessionFilePath);
-    if (!fs6.existsSync(dir)) {
-      fs6.mkdirSync(dir, { recursive: true });
-    }
-    fs6.writeFileSync(this.oauthSessionFilePath, JSON.stringify(storedAuth, null, 2), {
-      encoding: "utf-8",
-      mode: 384
-    });
-    logger6.info("Auth stored successfully", { email, expiresAt });
+    const sessionDir = this.createSessionDirectory(sessionId);
+    const resultsPath = path13.join(sessionDir, "results.md");
+    fs4.appendFileSync(resultsPath, content + "\n", "utf-8");
+    logger6.debug("Appended to results", { sessionId });
   }
   /**
-   * Load stored authentication for the active runtime target.
-   * @returns Stored auth, or null when it is absent, unreadable, or was issued for another target.
+   * Get the results markdown content.
+   * @param sessionId - Session ID.
+   * @returns Results content, or null if not found.
    */
-  loadStoredAuth() {
-    const logger6 = getLogger();
-    if (!fs6.existsSync(this.oauthSessionFilePath)) {
-      return null;
-    }
-    try {
-      const content = fs6.readFileSync(this.oauthSessionFilePath, "utf-8");
-      const storedAuth = JSON.parse(content);
-      const activeRuntimeTarget = getActiveRuntimeTarget();
-      const config = getConfig();
-      const expectedAuth0Domain = config.localQa.auth0.domain;
-      const tokenIssuer = extractJwtIssuer(storedAuth.accessToken);
-      if (!isStoredAuthForRuntimeTarget({
-        storedRuntimeTarget: storedAuth.runtimeTarget,
-        activeRuntimeTarget,
-        tokenIssuer,
-        expectedAuth0Domain
-      })) {
-        logger6.warn("Ignoring stored auth issued for a different runtime target", {
-          storedRuntimeTarget: storedAuth.runtimeTarget ?? "unrecorded",
-          activeRuntimeTarget,
-          tokenIssuer: tokenIssuer ?? "undecodable",
-          expectedAuth0Domain
-        });
-        return null;
-      }
-      return storedAuth;
-    } catch (error) {
-      logger6.error("Failed to load stored auth", {
-        error: error instanceof Error ? error.message : String(error)
-      });
+  getResults(sessionId) {
+    const resultsPath = path13.join(this.sessionsDir, sessionId, "results.md");
+    if (!fs4.existsSync(resultsPath)) {
       return null;
     }
+    return fs4.readFileSync(resultsPath, "utf-8");
   }
   /**
-   * Get the current access token (if valid).
-   * Does not auto-refresh - use getValidAccessToken() for that.
+   * Get the data directory path.
+   * @returns Data directory path.
    */
-  getAccessToken() {
-    const storedAuth = this.loadStoredAuth();
-    if (!storedAuth) {
-      return null;
-    }
-    const now = /* @__PURE__ */ new Date();
-    const expiresAt = new Date(storedAuth.expiresAt);
-    if (now >= expiresAt) {
-      return null;
-    }
-    return storedAuth.accessToken;
+  getDataDir() {
+    return this.dataDir;
   }
   /**
-   * Check if the access token is expired or about to expire.
-   * Uses a 5-minute buffer for safety.
+   * Get the sessions directory path.
+   * @returns Sessions directory path.
    */
-  isAccessTokenExpired() {
-    const storedAuth = this.loadStoredAuth();
-    if (!storedAuth) {
-      return true;
-    }
-    const now = /* @__PURE__ */ new Date();
-    const expiresAt = new Date(storedAuth.expiresAt);
-    const bufferMs = 5 * 60 * 1e3;
-    return now.getTime() >= expiresAt.getTime() - bufferMs;
+  getSessionsDir() {
+    return this.sessionsDir;
   }
   /**
-   * Refresh the access token using the stored refresh token.
-   * @returns New access token or null if refresh failed.
+   * Create a new session with metadata.
+   * @param params - Session creation parameters.
+   * @returns Path to the session directory.
    */
-  async refreshAccessToken() {
+  createSession(params) {
+    const { sessionId, targetUrl, testInstructions } = params;
     const logger6 = getLogger();
-    const storedAuth = this.loadStoredAuth();
-    if (!storedAuth?.refreshToken) {
-      logger6.debug("No refresh token available");
-      return null;
-    }
-    const config = getConfig();
-    const { domain, clientId } = config.localQa.auth0;
-    logger6.info("Refreshing access token");
-    const url = `https://${domain}/oauth/token`;
-    const body = new URLSearchParams({
-      grant_type: "refresh_token",
-      client_id: clientId,
-      refresh_token: storedAuth.refreshToken
-    });
-    try {
-      const response = await fetch(url, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/x-www-form-urlencoded"
-        },
-        body: body.toString()
-      });
-      if (!response.ok) {
-        const errorText = await response.text();
-        logger6.error("Token refresh failed", {
-          status: response.status,
-          error: errorText
-        });
-        return null;
-      }
-      const tokenData = await response.json();
-      const newExpiresAt = new Date(Date.now() + tokenData.expires_in * 1e3).toISOString();
-      const updatedAuth = {
-        accessToken: tokenData.access_token,
-        refreshToken: tokenData.refresh_token ?? storedAuth.refreshToken,
-        expiresAt: newExpiresAt,
-        email: storedAuth.email,
-        userId: storedAuth.userId,
-        runtimeTarget: storedAuth.runtimeTarget ?? getActiveRuntimeTarget()
-      };
-      const dir = path11.dirname(this.oauthSessionFilePath);
-      if (!fs6.existsSync(dir)) {
-        fs6.mkdirSync(dir, { recursive: true });
-      }
-      fs6.writeFileSync(this.oauthSessionFilePath, JSON.stringify(updatedAuth, null, 2), {
-        encoding: "utf-8",
-        mode: 384
-      });
-      logger6.info("Access token refreshed", { expiresAt: newExpiresAt });
-      return tokenData.access_token;
-    } catch (error) {
-      logger6.error("Token refresh request failed", {
-        error: error instanceof Error ? error.message : String(error)
-      });
-      return null;
-    }
+    const sessionDir = this.createSessionDirectory(sessionId);
+    const metadata = {
+      sessionId,
+      workflowRunId: sessionId,
+      status: "running" /* Running */,
+      startTime: (/* @__PURE__ */ new Date()).toISOString(),
+      targetUrl,
+      testInstructions
+    };
+    this.saveSessionMetadata(metadata);
+    this.setCurrentSession(sessionId);
+    logger6.info("Created session", { sessionId, targetUrl });
+    return sessionDir;
   }
   /**
-   * Get a valid access token, refreshing if necessary.
-   * This is the preferred method for getting an access token for API calls.
-   * @returns Valid access token or null if not authenticated or refresh failed.
+   * Update the status of an existing session.
+   * @param params - Status update parameters.
    */
-  async getValidAccessToken() {
+  updateSessionStatus(params) {
+    const { sessionId, status } = params;
     const logger6 = getLogger();
-    const storedAuth = this.loadStoredAuth();
-    if (!storedAuth) {
-      logger6.debug("No stored auth, cannot get valid token");
-      return null;
-    }
-    const now = /* @__PURE__ */ new Date();
-    const expiresAt = new Date(storedAuth.expiresAt);
-    const isStrictlyExpired = now >= expiresAt;
-    if (!isStrictlyExpired && !this.isAccessTokenExpired()) {
-      return storedAuth.accessToken;
-    }
-    if (!isStrictlyExpired) {
-      logger6.debug("Access token in buffer zone, attempting proactive refresh");
-    } else {
-      logger6.info("Access token expired, attempting refresh");
-    }
-    const refreshedToken = await this.refreshAccessToken();
-    if (refreshedToken) {
-      return refreshedToken;
+    const metadata = this.loadSessionMetadata(sessionId);
+    if (!metadata) {
+      logger6.warn("Session not found for status update", { sessionId });
+      return;
     }
-    if (!isStrictlyExpired) {
-      logger6.warn("Token refresh failed, but token not yet expired - using existing token");
-      return storedAuth.accessToken;
+    metadata.status = status;
+    if (status === "completed" /* Completed */ || status === "failed" /* Failed */) {
+      metadata.endTime = (/* @__PURE__ */ new Date()).toISOString();
     }
-    logger6.warn("Token refresh failed and token is expired, user needs to re-authenticate");
-    return null;
+    this.saveSessionMetadata(metadata);
+    logger6.debug("Updated session status", { sessionId, status });
   }
   /**
-   * Clear stored authentication (logout).
+   * Initialize the results.md file with a header.
+   * @param params - Initialization parameters.
    */
-  logout() {
+  initializeResults(params) {
+    const { sessionId, targetUrl, testInstructions } = params;
     const logger6 = getLogger();
-    if (!fs6.existsSync(this.oauthSessionFilePath)) {
-      logger6.debug("No auth to clear");
-      return false;
-    }
-    try {
-      fs6.unlinkSync(this.oauthSessionFilePath);
-      logger6.info("Auth cleared successfully");
-      return true;
-    } catch (error) {
-      logger6.error("Failed to clear auth", {
-        error: error instanceof Error ? error.message : String(error)
-      });
-      return false;
-    }
+    const sessionDir = this.createSessionDirectory(sessionId);
+    const resultsPath = path13.join(sessionDir, "results.md");
+    const header = [
+      `# Test Results: ${sessionId}`,
+      "",
+      `**Target URL:** ${targetUrl}`,
+      `**Started:** ${(/* @__PURE__ */ new Date()).toISOString()}`,
+      `**Instructions:** ${testInstructions}`,
+      "",
+      "---",
+      "",
+      "## Test Steps",
+      ""
+    ].join("\n");
+    fs4.writeFileSync(resultsPath, header, "utf-8");
+    logger6.debug("Initialized results.md", { sessionId });
   }
-};
-var serviceInstance = null;
-function getAuthService() {
-  serviceInstance ??= new AuthService();
-  return serviceInstance;
-}
-function resetAuthService() {
-  serviceInstance = null;
-}
-function sleep(params) {
-  return new Promise((resolve6) => {
-    setTimeout(() => {
-      resolve6();
-    }, params.durationMs);
-  });
-}
-var DEFAULT_SESSION_MAX_AGE_DAYS = 30;
-var StorageService = class {
-  /** Base data directory. */
-  dataDir;
-  /** Sessions directory. */
-  sessionsDir;
   /**
-   * Create a new StorageService.
+   * Append a test step to the results.md file.
+   * @param params - Step parameters.
    */
-  constructor() {
-    const config = getConfig();
-    this.dataDir = config.localQa.dataDir;
-    this.sessionsDir = config.localQa.sessionsDir;
+  appendStepToResults(params) {
+    const { sessionId, step } = params;
+    const logger6 = getLogger();
+    const sessionDir = this.createSessionDirectory(sessionId);
+    const resultsPath = path13.join(sessionDir, "results.md");
+    const statusIcon = step.success ? "\u2713" : "\u2717";
+    const stepContent = [
+      `### Step ${step.stepNumber}: ${step.action}`,
+      "",
+      step.target ? `- **Target:** ${step.target}` : "",
+      `- **Result:** ${step.result} ${statusIcon}`,
+      step.screenshotPath ? `- **Screenshot:** [step-${String(step.stepNumber).padStart(3, "0")}.png](screenshots/step-${String(step.stepNumber).padStart(3, "0")}.png)` : "",
+      ""
+    ].filter(Boolean).join("\n");
+    fs4.appendFileSync(resultsPath, stepContent + "\n", "utf-8");
+    logger6.debug("Appended step to results", { sessionId, stepNumber: step.stepNumber });
+    const metadata = this.loadSessionMetadata(sessionId);
+    if (metadata) {
+      metadata.stepsCount = (metadata.stepsCount ?? 0) + 1;
+      this.saveSessionMetadata(metadata);
+    }
   }
   /**
-   * Ensure the base directories exist.
+   * Finalize the results.md file with a summary.
+   * @param params - Finalization parameters.
    */
-  ensureDirectories() {
+  finalizeResults(params) {
+    const { sessionId, status, summary } = params;
     const logger6 = getLogger();
-    if (!fs6.existsSync(this.dataDir)) {
-      fs6.mkdirSync(this.dataDir, { recursive: true });
-      logger6.info("Created data directory", { path: this.dataDir });
+    const sessionDir = path13.join(this.sessionsDir, sessionId);
+    const resultsPath = path13.join(sessionDir, "results.md");
+    if (!fs4.existsSync(resultsPath)) {
+      logger6.warn("Results file not found for finalization", { sessionId });
+      return;
     }
-    if (!fs6.existsSync(this.sessionsDir)) {
-      fs6.mkdirSync(this.sessionsDir, { recursive: true });
-      logger6.info("Created sessions directory", { path: this.sessionsDir });
+    const metadata = this.loadSessionMetadata(sessionId);
+    const endTime = /* @__PURE__ */ new Date();
+    const startTime = metadata?.startTime ? new Date(metadata.startTime) : endTime;
+    const durationMs = endTime.getTime() - startTime.getTime();
+    const durationSeconds = (durationMs / 1e3).toFixed(2);
+    const statusDisplay = status === "completed" /* Completed */ ? "\u2713 Passed" : status === "failed" /* Failed */ ? "\u2717 Failed" : "\u2014 Running";
+    const footer = [
+      "",
+      "---",
+      "",
+      "## Summary",
+      "",
+      `**Status:** ${statusDisplay}`,
+      `**Duration:** ${durationSeconds}s`,
+      `**Steps:** ${metadata?.stepsCount ?? 0}`,
+      `**Completed:** ${endTime.toISOString()}`,
+      "",
+      summary ? summary : ""
+    ].join("\n");
+    fs4.appendFileSync(resultsPath, footer, "utf-8");
+    logger6.debug("Finalized results.md", { sessionId, status });
+    if (metadata) {
+      metadata.durationMs = durationMs;
+      metadata.endTime = endTime.toISOString();
+      metadata.status = status;
+      this.saveSessionMetadata(metadata);
     }
   }
   /**
-   * Create a new session directory.
-   * @param sessionId - Unique session ID.
-   * @returns Path to the session directory.
+   * List all sessions with their metadata.
+   * @returns Array of session summaries.
    */
-  createSessionDirectory(sessionId) {
-    const logger6 = getLogger();
-    this.ensureDirectories();
-    const sessionDir = path11.join(this.sessionsDir, sessionId);
-    if (!fs6.existsSync(sessionDir)) {
-      fs6.mkdirSync(sessionDir, { recursive: true });
-      fs6.mkdirSync(path11.join(sessionDir, "screenshots"), { recursive: true });
-      fs6.mkdirSync(path11.join(sessionDir, "logs"), { recursive: true });
-      logger6.info("Created session directory", { sessionId, path: sessionDir });
+  listSessionsWithMetadata() {
+    const sessionIds = this.listSessions();
+    const summaries = [];
+    for (const sessionId of sessionIds) {
+      if (sessionId === "current") {
+        continue;
+      }
+      const metadata = this.loadSessionMetadata(sessionId);
+      if (metadata) {
+        summaries.push({
+          sessionId: metadata.sessionId,
+          status: metadata.status,
+          startTime: metadata.startTime,
+          endTime: metadata.endTime,
+          targetUrl: metadata.targetUrl,
+          durationMs: metadata.durationMs,
+          stepsCount: metadata.stepsCount
+        });
+      }
     }
-    return sessionDir;
+    summaries.sort((a, b) => new Date(b.startTime).getTime() - new Date(a.startTime).getTime());
+    return summaries;
   }
   /**
-   * Save session metadata.
-   * @param metadata - Session metadata to save.
+   * Cleanup old sessions beyond the specified age.
+   * @param params - Cleanup parameters.
+   * @returns Number of sessions deleted.
    */
-  saveSessionMetadata(metadata) {
+  cleanupOldSessions(params) {
+    const maxAgeDays = params?.maxAgeDays ?? DEFAULT_SESSION_MAX_AGE_DAYS;
     const logger6 = getLogger();
-    const sessionDir = this.createSessionDirectory(metadata.sessionId);
-    const metadataPath = path11.join(sessionDir, "metadata.json");
-    fs6.writeFileSync(metadataPath, JSON.stringify(metadata, null, 2), "utf-8");
-    logger6.debug("Saved session metadata", { sessionId: metadata.sessionId });
+    const cutoffDate = /* @__PURE__ */ new Date();
+    cutoffDate.setDate(cutoffDate.getDate() - maxAgeDays);
+    const sessionIds = this.listSessions();
+    let deletedCount = 0;
+    for (const sessionId of sessionIds) {
+      if (sessionId === "current") {
+        continue;
+      }
+      const metadata = this.loadSessionMetadata(sessionId);
+      if (!metadata) {
+        continue;
+      }
+      const sessionDate = new Date(metadata.startTime);
+      if (sessionDate < cutoffDate) {
+        const sessionDir = path13.join(this.sessionsDir, sessionId);
+        try {
+          fs4.rmSync(sessionDir, { recursive: true, force: true });
+          deletedCount++;
+          logger6.info("Deleted old session", {
+            sessionId,
+            age: Math.floor((Date.now() - sessionDate.getTime()) / (1e3 * 60 * 60 * 24))
+          });
+        } catch (error) {
+          logger6.error("Failed to delete session", {
+            sessionId,
+            error: error instanceof Error ? error.message : String(error)
+          });
+        }
+      }
+    }
+    if (deletedCount > 0) {
+      logger6.info("Session cleanup completed", {
+        deletedCount,
+        maxAgeDays
+      });
+    }
+    return deletedCount;
   }
   /**
-   * Load session metadata.
-   * @param sessionId - Session ID to load.
-   * @returns Session metadata, or null if not found.
+   * Get a session directory path.
+   * @param sessionId - Session ID.
+   * @returns Session directory path.
    */
-  loadSessionMetadata(sessionId) {
+  getSessionPath(sessionId) {
+    return path13.join(this.sessionsDir, sessionId);
+  }
+  /**
+   * Delete a specific session.
+   * @param sessionId - Session ID to delete.
+   * @returns Whether deletion succeeded.
+   */
+  deleteSession(sessionId) {
     const logger6 = getLogger();
-    const metadataPath = path11.join(this.sessionsDir, sessionId, "metadata.json");
-    if (!fs6.existsSync(metadataPath)) {
-      return null;
+    const sessionDir = path13.join(this.sessionsDir, sessionId);
+    if (!fs4.existsSync(sessionDir)) {
+      logger6.warn("Session not found for deletion", { sessionId });
+      return false;
     }
     try {
-      const content = fs6.readFileSync(metadataPath, "utf-8");
-      return JSON.parse(content);
+      const currentId = this.getCurrentSessionId();
+      if (currentId === sessionId) {
+        const currentPath = path13.join(this.sessionsDir, "current");
+        if (fs4.existsSync(currentPath)) {
+          fs4.unlinkSync(currentPath);
+        }
+      }
+      fs4.rmSync(sessionDir, { recursive: true, force: true });
+      logger6.info("Deleted session", { sessionId });
+      return true;
     } catch (error) {
-      logger6.error("Failed to load session metadata", {
+      logger6.error("Failed to delete session", {
         sessionId,
         error: error instanceof Error ? error.message : String(error)
       });
-      return null;
+      return false;
+    }
+  }
+};
+var serviceInstance = null;
+function getStorageService() {
+  serviceInstance ??= new StorageService();
+  return serviceInstance;
+}
+function resetStorageService() {
+  serviceInstance = null;
+}
+
+// packages/mcps/src/mcp/local/services/run-result-storage-service.ts
+var logger3 = getLogger();
+var RunResultStorageService = class {
+  /** Base directory for run results. */
+  runResultsDir;
+  /** Base directory for test scripts. */
+  testScriptsDir;
+  constructor() {
+    const storageService = getStorageService();
+    const dataDir = storageService.getDataDir();
+    this.runResultsDir = path13.join(dataDir, "run-results");
+    this.testScriptsDir = path13.join(dataDir, "test-scripts");
+    this.ensureDirectories();
+  }
+  /**
+   * Ensure storage directories exist.
+   */
+  ensureDirectories() {
+    if (!fs4.existsSync(this.runResultsDir)) {
+      fs4.mkdirSync(this.runResultsDir, { recursive: true });
+    }
+    if (!fs4.existsSync(this.testScriptsDir)) {
+      fs4.mkdirSync(this.testScriptsDir, { recursive: true });
     }
   }
+  // ========================================
+  // Run Results
+  // ========================================
   /**
-   * List all sessions.
-   * @returns Array of session IDs.
+   * List all run results.
    */
-  listSessions() {
-    if (!fs6.existsSync(this.sessionsDir)) {
+  listRunResults() {
+    try {
+      const files = fs4.readdirSync(this.runResultsDir).filter((f) => f.endsWith(".json"));
+      const results = [];
+      for (const file of files) {
+        try {
+          const content = fs4.readFileSync(path13.join(this.runResultsDir, file), "utf-8");
+          results.push(JSON.parse(content));
+        } catch {
+          logger3.warn("Failed to read run result file", { file });
+        }
+      }
+      return results.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
+    } catch {
       return [];
     }
-    return fs6.readdirSync(this.sessionsDir).filter((entry) => {
-      const entryPath = path11.join(this.sessionsDir, entry);
-      return fs6.statSync(entryPath).isDirectory();
-    });
   }
   /**
-   * Get the current session ID (if any).
-   * @returns Current session ID, or null.
+   * Get a run result by ID.
    */
-  getCurrentSessionId() {
-    const currentPath = path11.join(this.sessionsDir, "current");
-    if (!fs6.existsSync(currentPath)) {
-      return null;
+  getRunResult(runId) {
+    const filePath = path13.join(this.runResultsDir, `${runId}.json`);
+    if (!fs4.existsSync(filePath)) {
+      return void 0;
     }
     try {
-      const target = fs6.readlinkSync(currentPath);
-      return path11.basename(target);
+      const content = fs4.readFileSync(filePath, "utf-8");
+      return JSON.parse(content);
     } catch {
-      return null;
+      return void 0;
     }
   }
   /**
-   * Set the current session.
-   * @param sessionId - Session ID to set as current.
+   * Save a run result.
    */
-  setCurrentSession(sessionId) {
-    const logger6 = getLogger();
-    const currentPath = path11.join(this.sessionsDir, "current");
-    const targetPath = path11.join(this.sessionsDir, sessionId);
-    if (fs6.existsSync(currentPath)) {
-      fs6.unlinkSync(currentPath);
-    }
-    fs6.symlinkSync(targetPath, currentPath);
-    logger6.info("Set current session", { sessionId });
+  saveRunResult(result) {
+    const filePath = path13.join(this.runResultsDir, `${result.id}.json`);
+    fs4.writeFileSync(filePath, JSON.stringify(result, null, 2));
   }
   /**
-   * Save a screenshot to the session directory.
-   * @param params - Screenshot save parameters.
+   * Create a new run result.
    */
-  saveScreenshot(params) {
-    const { sessionId, filename, data } = params;
-    const logger6 = getLogger();
-    const sessionDir = this.createSessionDirectory(sessionId);
-    const screenshotPath = path11.join(sessionDir, "screenshots", filename);
-    fs6.writeFileSync(screenshotPath, data);
-    logger6.debug("Saved screenshot", { sessionId, filename });
-    return screenshotPath;
+  createRunResult(params) {
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const id = randomUUID();
+    const result = {
+      id,
+      runType: params.runType,
+      status: "pending",
+      cloudTestCaseId: params.cloudTestCaseId,
+      projectId: params.projectId,
+      useCaseId: params.useCaseId,
+      localUrl: params.localUrl,
+      productionUrl: params.productionUrl,
+      localExecutionContext: params.localExecutionContext,
+      createdAt: now,
+      updatedAt: now
+    };
+    this.saveRunResult(result);
+    return result;
   }
   /**
-   * Append to the results markdown file.
-   * @param params - Results append parameters.
+   * Update a run result.
    */
-  appendToResults(params) {
-    const { sessionId, content } = params;
-    const logger6 = getLogger();
-    const sessionDir = this.createSessionDirectory(sessionId);
-    const resultsPath = path11.join(sessionDir, "results.md");
-    fs6.appendFileSync(resultsPath, content + "\n", "utf-8");
-    logger6.debug("Appended to results", { sessionId });
+  updateRunResult(runId, updates) {
+    const result = this.getRunResult(runId);
+    if (!result) {
+      return void 0;
+    }
+    const updated = {
+      ...result,
+      ...updates,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    this.saveRunResult(updated);
+    return updated;
   }
+  // ========================================
+  // Test Scripts
+  // ========================================
   /**
-   * Get the results markdown content.
-   * @param sessionId - Session ID.
-   * @returns Results content, or null if not found.
+   * List all test scripts.
    */
-  getResults(sessionId) {
-    const resultsPath = path11.join(this.sessionsDir, sessionId, "results.md");
-    if (!fs6.existsSync(resultsPath)) {
-      return null;
+  listTestScripts() {
+    try {
+      const files = fs4.readdirSync(this.testScriptsDir).filter((f) => f.endsWith(".json"));
+      const scripts = [];
+      for (const file of files) {
+        try {
+          const content = fs4.readFileSync(path13.join(this.testScriptsDir, file), "utf-8");
+          scripts.push(JSON.parse(content));
+        } catch {
+          logger3.warn("Failed to read test script file", { file });
+        }
+      }
+      return scripts.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
+    } catch {
+      return [];
     }
-    return fs6.readFileSync(resultsPath, "utf-8");
   }
   /**
-   * Get the data directory path.
-   * @returns Data directory path.
+   * Get a test script by ID.
    */
-  getDataDir() {
-    return this.dataDir;
+  getTestScript(testScriptId) {
+    const filePath = path13.join(this.testScriptsDir, `${testScriptId}.json`);
+    if (!fs4.existsSync(filePath)) {
+      return void 0;
+    }
+    try {
+      const content = fs4.readFileSync(filePath, "utf-8");
+      return JSON.parse(content);
+    } catch {
+      return void 0;
+    }
   }
   /**
-   * Get the sessions directory path.
-   * @returns Sessions directory path.
+   * Save a test script.
    */
-  getSessionsDir() {
-    return this.sessionsDir;
+  saveTestScript(script) {
+    const filePath = path13.join(this.testScriptsDir, `${script.id}.json`);
+    fs4.writeFileSync(filePath, JSON.stringify(script, null, 2));
+  }
+  /**
+   * Create a new test script.
+   */
+  createTestScript(params) {
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const id = randomUUID();
+    const script = {
+      id,
+      name: params.name,
+      url: params.url,
+      status: "pending",
+      cloudTestCaseId: params.cloudTestCaseId,
+      goal: params.goal,
+      createdAt: now,
+      updatedAt: now
+    };
+    this.saveTestScript(script);
+    return script;
+  }
+  /**
+   * Update a test script.
+   */
+  updateTestScript(testScriptId, updates) {
+    const script = this.getTestScript(testScriptId);
+    if (!script) {
+      return void 0;
+    }
+    const updated = {
+      ...script,
+      ...updates,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    this.saveTestScript(updated);
+    return updated;
+  }
+};
+var instance = null;
+function getRunResultStorageService() {
+  if (!instance) {
+    instance = new RunResultStorageService();
+  }
+  return instance;
+}
+function resetRunResultStorageService() {
+  instance = null;
+}
+
+// packages/mcps/src/mcp/local/services/run-view/read-run-view.ts
+function getRunSessionsDir() {
+  return path13.join(getDataDir(), RUN_SESSIONS_DIR_NAME);
+}
+var RunViewError = class extends Error {
+};
+var listSessionDirNames = (sessionsDir) => {
+  if (!fs4.existsSync(sessionsDir)) {
+    throw new RunViewError(`No runs directory at ${sessionsDir}`);
+  }
+  return fs4.readdirSync(sessionsDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+};
+function resolveRunSessionPath(runId) {
+  const sessionsDir = getRunSessionsDir();
+  const names = listSessionDirNames(sessionsDir);
+  if (names.length === 0) {
+    throw new RunViewError(`No runs found under ${sessionsDir}`);
+  }
+  if (!runId) {
+    const newest = names.map((name) => ({ name, modifiedAtMs: fs4.statSync(path13.join(sessionsDir, name)).mtimeMs })).sort((left, right) => right.modifiedAtMs - left.modifiedAtMs)[0];
+    return path13.join(sessionsDir, newest.name);
+  }
+  const exact = names.find((name) => name === runId);
+  if (exact) {
+    return path13.join(sessionsDir, exact);
+  }
+  const prefixed = names.filter((name) => name.startsWith(runId));
+  if (prefixed.length === 1) {
+    return path13.join(sessionsDir, prefixed[0]);
+  }
+  if (prefixed.length > 1) {
+    throw new RunViewError(
+      `Run id "${runId}" matches ${prefixed.length} runs (${prefixed.slice(0, 3).join(", ")}\u2026). Use more characters.`
+    );
+  }
+  throw new RunViewError(`No run matching "${runId}" under ${sessionsDir}`);
+}
+var listScreenshotFileNames = (sessionPath) => {
+  const screenshotDir = path13.join(sessionPath, ...SCREENSHOT_DIR_RELATIVE_PATH.split("/"));
+  if (!fs4.existsSync(screenshotDir)) {
+    return [];
+  }
+  return fs4.readdirSync(screenshotDir).filter((name) => name.endsWith(SCREENSHOT_FILE_EXTENSION));
+};
+var resolveScreenshotPath = (sessionPath, screenshotFileNames, recordedPath) => {
+  if (!recordedPath) {
+    return null;
+  }
+  const recordedName = recordedPath.split(/[\\/]/).pop();
+  if (!recordedName) {
+    return null;
+  }
+  const match = screenshotFileNames.find((name) => name === recordedName) ?? screenshotFileNames.find((name) => name.endsWith(recordedName));
+  return match ? path13.join(sessionPath, ...SCREENSHOT_DIR_RELATIVE_PATH.split("/"), match) : null;
+};
+function readRunView(runId) {
+  const sessionPath = resolveRunSessionPath(runId);
+  const actionScriptPath = path13.join(sessionPath, ACTION_SCRIPT_FILE_NAME);
+  if (!fs4.existsSync(actionScriptPath)) {
+    throw new RunViewError(
+      `Run ${path13.basename(sessionPath)} has no ${ACTION_SCRIPT_FILE_NAME} \u2014 it died before writing one. Looked in ${sessionPath}`
+    );
+  }
+  let actionScript;
+  try {
+    actionScript = JSON.parse(fs4.readFileSync(actionScriptPath, "utf8"));
+  } catch (parseError) {
+    throw new RunViewError(
+      `Could not read ${actionScriptPath}: ${parseError instanceof Error ? parseError.message : String(parseError)}`
+    );
+  }
+  const resolvedRunId = path13.basename(sessionPath);
+  const recordedOutcome = getRunResultStorageService().getRunResult(resolvedRunId)?.status ?? null;
+  const screenshotFileNames = listScreenshotFileNames(sessionPath);
+  const steps = (actionScript.steps ?? []).map((step, index) => ({
+    index,
+    action: step.operation?.action ?? "unknown",
+    explanation: step.briefExplanation ?? "",
+    screenshotPath: resolveScreenshotPath(sessionPath, screenshotFileNames, step.operation?.screenshot),
+    url: step.operation?.url ?? null
+  }));
+  return {
+    runId: resolvedRunId,
+    sessionPath,
+    title: actionScript.actionScriptName ?? null,
+    status: recordedOutcome,
+    verdict: actionScript.summaryStep?.briefExplanation ?? null,
+    steps,
+    screenshotCount: screenshotFileNames.length
+  };
+}
+
+// packages/mcps/src/mcp/local/services/run-view/render-run-view-text.ts
+function renderRunViewText(runView, options) {
+  const header = [
+    `Run ${runView.runId}${runView.title ? ` \u2014 ${runView.title}` : ""}`,
+    `${runView.status ?? "status unrecorded"} \xB7 ${runView.steps.length} steps \xB7 ${runView.screenshotCount} frames`,
+    runView.sessionPath,
+    ""
+  ];
+  const stepLines = runView.steps.length === 0 ? ["(no steps recorded \u2014 the run ended before writing any)"] : runView.steps.flatMap((step) => {
+    const lines = [
+      `${String(step.index).padStart(2, " ")}  ${step.action}${step.url ? `  \u2192 ${step.url}` : ""}`
+    ];
+    if (step.explanation) {
+      lines.push(`    ${step.explanation}`);
+    }
+    lines.push(`    ${step.screenshotPath ?? "(no frame recorded)"}`);
+    return lines;
+  });
+  const verdict = runView.verdict ? ["", `Verdict: ${runView.verdict}`] : [];
+  const offer = options.includeHtmlOffer ? ["", HTML_VIEW_OFFER_LINE] : [];
+  return [...header, ...stepLines, ...verdict, ...offer].join("\n");
+}
+var escapeHtml = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+var inlineFrame = (screenshotPath) => {
+  if (!screenshotPath || !fs4.existsSync(screenshotPath)) {
+    return null;
+  }
+  try {
+    return `data:image/jpeg;base64,${fs4.readFileSync(screenshotPath).toString("base64")}`;
+  } catch {
+    return null;
+  }
+};
+var renderStep = (step) => {
+  const frame = inlineFrame(step.screenshotPath);
+  const frameMarkup = frame ? `<a href="${frame}" target="_blank" rel="noreferrer"><img src="${frame}" alt="Step ${step.index} frame" loading="lazy"></a>` : `<p class="no-frame">no frame recorded</p>`;
+  return `<li class="step">
+  <div class="meta">
+    <span class="index">${step.index}</span>
+    <span class="action">${escapeHtml(step.action)}</span>
+    ${step.url ? `<span class="url">${escapeHtml(step.url)}</span>` : ""}
+  </div>
+  <p class="explanation">${escapeHtml(step.explanation || "(no explanation recorded)")}</p>
+  ${frameMarkup}
+</li>`;
+};
+function renderRunViewHtml(runView) {
+  const title = `Run ${runView.runId}${runView.title ? ` \u2014 ${runView.title}` : ""}`;
+  return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${escapeHtml(title)}</title>
+<style>
+  :root { color-scheme: light dark; --bg:#ffffff; --fg:#1a1a1a; --muted:#666; --line:#e2e2e2; --chip:#f1f1f4; }
+  @media (prefers-color-scheme: dark) {
+    :root { --bg:#16161a; --fg:#ececf0; --muted:#9a9aa5; --line:#2c2c33; --chip:#24242b; }
+  }
+  body { margin:0; padding:24px 16px 64px; background:var(--bg); color:var(--fg);
+         font:14px/1.5 system-ui,-apple-system,Segoe UI,sans-serif; }
+  .wrap { max-width: 1040px; margin: 0 auto; }
+  h1 { font-size:20px; margin:0 0 4px; }
+  .sub { color:var(--muted); margin:0 0 4px; }
+  .path { color:var(--muted); font-family:ui-monospace,Menlo,Consolas,monospace; font-size:12px;
+          word-break:break-all; margin:0 0 24px; }
+  .verdict { border:1px solid var(--line); border-left:3px solid #c0392b; border-radius:6px;
+             padding:12px 14px; margin:0 0 24px; background:var(--chip); }
+  .verdict h2 { font-size:13px; text-transform:uppercase; letter-spacing:.04em; margin:0 0 6px; color:var(--muted); }
+  ol { list-style:none; margin:0; padding:0; }
+  .step { border-top:1px solid var(--line); padding:20px 0; }
+  .meta { display:flex; gap:10px; align-items:baseline; flex-wrap:wrap; }
+  .index { font-family:ui-monospace,Menlo,Consolas,monospace; color:var(--muted); }
+  .action { font-weight:600; }
+  .url { color:var(--muted); font-family:ui-monospace,Menlo,Consolas,monospace; font-size:12px; word-break:break-all; }
+  .explanation { margin:6px 0 12px; }
+  .no-frame { color:var(--muted); font-style:italic; margin:0; }
+  img { max-width:100%; height:auto; border:1px solid var(--line); border-radius:6px; display:block; }
+</style>
+</head>
+<body>
+<div class="wrap">
+  <h1>${escapeHtml(title)}</h1>
+  <p class="sub">${escapeHtml(runView.status ?? "status unrecorded")} \xB7 ${runView.steps.length} steps \xB7 ${runView.screenshotCount} frames</p>
+  <p class="path">${escapeHtml(runView.sessionPath)}</p>
+  ${runView.verdict ? `<div class="verdict"><h2>Verdict the run recorded</h2><p>${escapeHtml(runView.verdict)}</p></div>` : ""}
+  <ol>
+${runView.steps.map(renderStep).join("\n")}
+  </ol>
+  ${runView.steps.length === 0 ? '<p class="no-frame">No steps recorded \u2014 the run ended before writing any.</p>' : ""}
+</div>
+</body>
+</html>`;
+}
+function writeRunViewHtml(runView, outputDir) {
+  const targetDir = outputDir ?? process.cwd();
+  fs4.mkdirSync(targetDir, { recursive: true });
+  const targetPath = path13.join(targetDir, `run-${runView.runId}.html`);
+  fs4.writeFileSync(targetPath, renderRunViewHtml(runView), "utf8");
+  return targetPath;
+}
+var API_KEY_FILE2 = "api-key.json";
+function getApiKeyFilePath() {
+  return path13.join(getDataDir(), API_KEY_FILE2);
+}
+function ensureDataDir() {
+  const dataDir = getDataDir();
+  if (!fs4.existsSync(dataDir)) {
+    fs4.mkdirSync(dataDir, { recursive: true });
+  }
+}
+function loadApiKeyData() {
+  const logger6 = getLogger();
+  const apiKeyPath = getApiKeyFilePath();
+  try {
+    if (!fs4.existsSync(apiKeyPath)) {
+      logger6.debug("No API key file found", { path: apiKeyPath });
+      return null;
+    }
+    const content = fs4.readFileSync(apiKeyPath, "utf-8");
+    const data = JSON.parse(content);
+    return data;
+  } catch (error) {
+    logger6.warn("Failed to load API key data", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return null;
+  }
+}
+function saveApiKeyData(data) {
+  const logger6 = getLogger();
+  const apiKeyPath = getApiKeyFilePath();
+  try {
+    ensureDataDir();
+    const content = JSON.stringify(data, null, 2);
+    fs4.writeFileSync(apiKeyPath, content, { mode: 384 });
+    logger6.info("API key saved", { path: apiKeyPath });
+  } catch (error) {
+    logger6.error("Failed to save API key", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+    throw error;
+  }
+}
+function deleteApiKeyData() {
+  const logger6 = getLogger();
+  const apiKeyPath = getApiKeyFilePath();
+  try {
+    if (fs4.existsSync(apiKeyPath)) {
+      fs4.unlinkSync(apiKeyPath);
+      logger6.info("API key deleted", { path: apiKeyPath });
+    }
+  } catch (error) {
+    logger6.warn("Failed to delete API key", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
+}
+function getValidApiKeyData() {
+  const data = loadApiKeyData();
+  if (!data) {
+    return null;
+  }
+  if (data.apiKey) {
+    return data;
+  }
+  return null;
+}
+function hasApiKey() {
+  const data = loadApiKeyData();
+  return !!data?.apiKey;
+}
+function getApiKey() {
+  const data = loadApiKeyData();
+  return data?.apiKey ?? null;
+}
+function saveApiKey(params) {
+  const logger6 = getLogger();
+  const apiKeyPath = getApiKeyFilePath();
+  try {
+    ensureDataDir();
+    const data = {
+      accessToken: "",
+      expiresAt: "",
+      apiKey: params.apiKey,
+      apiKeyId: params.apiKeyId
+    };
+    const content = JSON.stringify(data, null, 2);
+    fs4.writeFileSync(apiKeyPath, content, { mode: 384 });
+    logger6.info("API key saved", { path: apiKeyPath });
+  } catch (error) {
+    logger6.error("Failed to save API key", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+    throw error;
+  }
+}
+var loadCredentials = loadApiKeyData;
+var saveCredentials = saveApiKeyData;
+var deleteCredentials = deleteApiKeyData;
+var getValidCredentials = getValidApiKeyData;
+var getCredentialsFilePath = getApiKeyFilePath;
+
+// packages/mcps/src/mcp/local/services/stored-auth-target.ts
+function decodeJwtPayload(token) {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+      return null;
+    }
+    const payload = parts[1];
+    const decoded = Buffer.from(payload, "base64url").toString("utf-8");
+    return JSON.parse(decoded);
+  } catch {
+    return null;
+  }
+}
+function extractJwtIssuer(token) {
+  const payload = decodeJwtPayload(token);
+  if (!payload || typeof payload.iss !== "string") {
+    return null;
+  }
+  return payload.iss;
+}
+function normalizeIssuerHost(issuer) {
+  return issuer.replace(/^https:\/\//, "").replace(/\/$/, "");
+}
+function isStoredAuthForRuntimeTarget(params) {
+  if (params.tokenIssuer && params.expectedAuth0Domain) {
+    const issuerHost = normalizeIssuerHost(params.tokenIssuer);
+    const expectedHost = normalizeIssuerHost(params.expectedAuth0Domain);
+    if (issuerHost !== expectedHost) {
+      return false;
+    }
+  }
+  if (!params.storedRuntimeTarget) {
+    return params.activeRuntimeTarget === "production" /* Production */;
+  }
+  return params.storedRuntimeTarget === params.activeRuntimeTarget;
+}
+
+// packages/mcps/src/mcp/local/services/auth-service.ts
+var DEFAULT_LOGIN_WAIT_TIMEOUT_MS = 12e4;
+var AuthService = class {
+  /** Path to the OAuth session file. */
+  oauthSessionFilePath;
+  /** Path to the pending device code file. */
+  pendingDeviceCodePath;
+  /**
+   * Create a new AuthService.
+   */
+  constructor() {
+    const config = getConfig();
+    this.oauthSessionFilePath = config.localQa.oauthSessionFilePath;
+    this.pendingDeviceCodePath = path13.join(
+      path13.dirname(config.localQa.oauthSessionFilePath),
+      "pending-device-code.json"
+    );
   }
   /**
-   * Create a new session with metadata.
-   * @param params - Session creation parameters.
-   * @returns Path to the session directory.
+   * Get current authentication status.
    */
-  createSession(params) {
-    const { sessionId, targetUrl, testInstructions } = params;
+  getAuthStatus() {
     const logger6 = getLogger();
-    const sessionDir = this.createSessionDirectory(sessionId);
-    const metadata = {
-      sessionId,
-      workflowRunId: sessionId,
-      status: "running" /* Running */,
-      startTime: (/* @__PURE__ */ new Date()).toISOString(),
-      targetUrl,
-      testInstructions
+    const storedAuth = this.loadStoredAuth();
+    if (!storedAuth) {
+      logger6.debug("No stored auth found");
+      return { authenticated: false };
+    }
+    const now = /* @__PURE__ */ new Date();
+    const expiresAt = new Date(storedAuth.expiresAt);
+    const isExpired = now >= expiresAt;
+    logger6.debug("Auth status checked", {
+      email: storedAuth.email,
+      isExpired,
+      expiresAt: storedAuth.expiresAt
+    });
+    return {
+      authenticated: !isExpired,
+      email: storedAuth.email,
+      userId: storedAuth.userId,
+      expiresAt: storedAuth.expiresAt,
+      isExpired
     };
-    this.saveSessionMetadata(metadata);
-    this.setCurrentSession(sessionId);
-    logger6.info("Created session", { sessionId, targetUrl });
-    return sessionDir;
   }
   /**
-   * Update the status of an existing session.
-   * @param params - Status update parameters.
+   * Start the device code flow.
+   * @param options.forceNewSession - Clear existing Auth0 browser session before login to allow account switching.
    */
-  updateSessionStatus(params) {
-    const { sessionId, status } = params;
+  async startDeviceCodeFlow(options) {
     const logger6 = getLogger();
-    const metadata = this.loadSessionMetadata(sessionId);
-    if (!metadata) {
-      logger6.warn("Session not found for status update", { sessionId });
-      return;
+    const config = getConfig();
+    const { domain, clientId, audience, scopes } = config.localQa.auth0;
+    logger6.info("Starting device code flow");
+    const url = `https://${domain}/oauth/device/code`;
+    const body = new URLSearchParams({
+      client_id: clientId,
+      scope: scopes.join(" "),
+      audience
+    });
+    const response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: body.toString()
+    });
+    if (!response.ok) {
+      const errorText = await response.text();
+      logger6.error("Device code request failed", {
+        status: response.status,
+        error: errorText
+      });
+      throw new Error(`Failed to start device code flow: ${response.status} ${errorText}`);
     }
-    metadata.status = status;
-    if (status === "completed" /* Completed */ || status === "failed" /* Failed */) {
-      metadata.endTime = (/* @__PURE__ */ new Date()).toISOString();
+    const deviceCodeResponse = await response.json();
+    logger6.info("Device code flow started", {
+      userCode: deviceCodeResponse.user_code,
+      verificationUri: deviceCodeResponse.verification_uri,
+      expiresIn: deviceCodeResponse.expires_in
+    });
+    this.storePendingDeviceCode({
+      deviceCode: deviceCodeResponse.device_code,
+      userCode: deviceCodeResponse.user_code,
+      expiresAt: new Date(Date.now() + deviceCodeResponse.expires_in * 1e3).toISOString()
+    });
+    let browserUrl = deviceCodeResponse.verification_uri_complete;
+    if (options?.forceNewSession) {
+      this.logout();
+      const logoutUrl = new URL(`https://${domain}/v2/logout`);
+      logoutUrl.searchParams.set("client_id", clientId);
+      logoutUrl.searchParams.set("returnTo", deviceCodeResponse.verification_uri_complete);
+      browserUrl = logoutUrl.toString();
+      logger6.info("Force new session: cleared local token, opening logout-redirect URL", {
+        logoutUrl: browserUrl
+      });
     }
-    this.saveSessionMetadata(metadata);
-    logger6.debug("Updated session status", { sessionId, status });
+    const browserOpenResult = await openBrowserUrl({
+      url: browserUrl
+    });
+    if (browserOpenResult.opened) {
+      logger6.info("Browser opened for device code login");
+    } else {
+      logger6.warn("Failed to open browser for device code login", {
+        error: browserOpenResult.error,
+        url: browserUrl
+      });
+    }
+    return {
+      deviceCode: deviceCodeResponse.device_code,
+      userCode: deviceCodeResponse.user_code,
+      verificationUri: deviceCodeResponse.verification_uri,
+      verificationUriComplete: deviceCodeResponse.verification_uri_complete,
+      expiresIn: deviceCodeResponse.expires_in,
+      interval: deviceCodeResponse.interval,
+      browserOpened: browserOpenResult.opened,
+      browserOpenError: browserOpenResult.error
+    };
   }
   /**
-   * Initialize the results.md file with a header.
-   * @param params - Initialization parameters.
+   * Store a pending device code for later retrieval.
    */
-  initializeResults(params) {
-    const { sessionId, targetUrl, testInstructions } = params;
+  storePendingDeviceCode(params) {
     const logger6 = getLogger();
-    const sessionDir = this.createSessionDirectory(sessionId);
-    const resultsPath = path11.join(sessionDir, "results.md");
-    const header = [
-      `# Test Results: ${sessionId}`,
-      "",
-      `**Target URL:** ${targetUrl}`,
-      `**Started:** ${(/* @__PURE__ */ new Date()).toISOString()}`,
-      `**Instructions:** ${testInstructions}`,
-      "",
-      "---",
-      "",
-      "## Test Steps",
-      ""
-    ].join("\n");
-    fs6.writeFileSync(resultsPath, header, "utf-8");
-    logger6.debug("Initialized results.md", { sessionId });
+    const dir = path13.dirname(this.pendingDeviceCodePath);
+    if (!fs4.existsSync(dir)) {
+      fs4.mkdirSync(dir, { recursive: true });
+    }
+    fs4.writeFileSync(this.pendingDeviceCodePath, JSON.stringify(params, null, 2), {
+      encoding: "utf-8",
+      mode: 384
+    });
+    logger6.debug("Pending device code stored", { userCode: params.userCode });
   }
   /**
-   * Append a test step to the results.md file.
-   * @param params - Step parameters.
+   * Get the pending device code if one exists and is not expired.
    */
-  appendStepToResults(params) {
-    const { sessionId, step } = params;
+  getPendingDeviceCode() {
     const logger6 = getLogger();
-    const sessionDir = this.createSessionDirectory(sessionId);
-    const resultsPath = path11.join(sessionDir, "results.md");
-    const statusIcon = step.success ? "\u2713" : "\u2717";
-    const stepContent = [
-      `### Step ${step.stepNumber}: ${step.action}`,
-      "",
-      step.target ? `- **Target:** ${step.target}` : "",
-      `- **Result:** ${step.result} ${statusIcon}`,
-      step.screenshotPath ? `- **Screenshot:** [step-${String(step.stepNumber).padStart(3, "0")}.png](screenshots/step-${String(step.stepNumber).padStart(3, "0")}.png)` : "",
-      ""
-    ].filter(Boolean).join("\n");
-    fs6.appendFileSync(resultsPath, stepContent + "\n", "utf-8");
-    logger6.debug("Appended step to results", { sessionId, stepNumber: step.stepNumber });
-    const metadata = this.loadSessionMetadata(sessionId);
-    if (metadata) {
-      metadata.stepsCount = (metadata.stepsCount ?? 0) + 1;
-      this.saveSessionMetadata(metadata);
+    if (!fs4.existsSync(this.pendingDeviceCodePath)) {
+      logger6.debug("No pending device code found");
+      return null;
+    }
+    try {
+      const content = fs4.readFileSync(this.pendingDeviceCodePath, "utf-8");
+      const pendingDeviceCodeData = JSON.parse(content);
+      const now = /* @__PURE__ */ new Date();
+      const expiresAt = new Date(pendingDeviceCodeData.expiresAt);
+      if (now >= expiresAt) {
+        logger6.debug("Pending device code expired");
+        this.clearPendingDeviceCode();
+        return null;
+      }
+      return pendingDeviceCodeData.deviceCode;
+    } catch (error) {
+      logger6.warn("Failed to read pending device code", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return null;
     }
   }
   /**
-   * Finalize the results.md file with a summary.
-   * @param params - Finalization parameters.
+   * Clear the pending device code file.
    */
-  finalizeResults(params) {
-    const { sessionId, status, summary } = params;
+  clearPendingDeviceCode() {
     const logger6 = getLogger();
-    const sessionDir = path11.join(this.sessionsDir, sessionId);
-    const resultsPath = path11.join(sessionDir, "results.md");
-    if (!fs6.existsSync(resultsPath)) {
-      logger6.warn("Results file not found for finalization", { sessionId });
-      return;
-    }
-    const metadata = this.loadSessionMetadata(sessionId);
-    const endTime = /* @__PURE__ */ new Date();
-    const startTime = metadata?.startTime ? new Date(metadata.startTime) : endTime;
-    const durationMs = endTime.getTime() - startTime.getTime();
-    const durationSeconds = (durationMs / 1e3).toFixed(2);
-    const statusDisplay = status === "completed" /* Completed */ ? "\u2713 Passed" : status === "failed" /* Failed */ ? "\u2717 Failed" : "\u2014 Running";
-    const footer = [
-      "",
-      "---",
-      "",
-      "## Summary",
-      "",
-      `**Status:** ${statusDisplay}`,
-      `**Duration:** ${durationSeconds}s`,
-      `**Steps:** ${metadata?.stepsCount ?? 0}`,
-      `**Completed:** ${endTime.toISOString()}`,
-      "",
-      summary ? summary : ""
-    ].join("\n");
-    fs6.appendFileSync(resultsPath, footer, "utf-8");
-    logger6.debug("Finalized results.md", { sessionId, status });
-    if (metadata) {
-      metadata.durationMs = durationMs;
-      metadata.endTime = endTime.toISOString();
-      metadata.status = status;
-      this.saveSessionMetadata(metadata);
+    if (fs4.existsSync(this.pendingDeviceCodePath)) {
+      try {
+        fs4.unlinkSync(this.pendingDeviceCodePath);
+        logger6.debug("Pending device code cleared");
+      } catch (error) {
+        logger6.warn("Failed to clear pending device code", {
+          error: error instanceof Error ? error.message : String(error)
+        });
+      }
     }
   }
   /**
-   * List all sessions with their metadata.
-   * @returns Array of session summaries.
+   * Poll for device code authorization completion.
    */
-  listSessionsWithMetadata() {
-    const sessionIds = this.listSessions();
-    const summaries = [];
-    for (const sessionId of sessionIds) {
-      if (sessionId === "current") {
-        continue;
-      }
-      const metadata = this.loadSessionMetadata(sessionId);
-      if (metadata) {
-        summaries.push({
-          sessionId: metadata.sessionId,
-          status: metadata.status,
-          startTime: metadata.startTime,
-          endTime: metadata.endTime,
-          targetUrl: metadata.targetUrl,
-          durationMs: metadata.durationMs,
-          stepsCount: metadata.stepsCount
+  async pollDeviceCode(deviceCode) {
+    const logger6 = getLogger();
+    const config = getConfig();
+    const { domain, clientId } = config.localQa.auth0;
+    logger6.debug("Polling for device code authorization");
+    const url = `https://${domain}/oauth/token`;
+    const body = new URLSearchParams({
+      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+      client_id: clientId,
+      device_code: deviceCode
+    });
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: body.toString()
+      });
+      if (response.ok) {
+        const tokenData = await response.json();
+        const tokenResponse = {
+          accessToken: tokenData.access_token,
+          refreshToken: tokenData.refresh_token,
+          tokenType: tokenData.token_type,
+          expiresIn: tokenData.expires_in
+        };
+        const userInfo = await this.getUserInfo(tokenResponse.accessToken);
+        await this.storeAuth({
+          tokenResponse,
+          email: userInfo.email,
+          userId: userInfo.sub
         });
+        this.clearPendingDeviceCode();
+        logger6.info("Device code authorization complete", { email: userInfo.email });
+        return {
+          status: "complete" /* Complete */,
+          message: "Authentication successful!",
+          email: userInfo.email
+        };
+      }
+      const errorData = await response.json();
+      if (errorData.error === "authorization_pending") {
+        logger6.debug("Authorization pending");
+        return {
+          status: "pending" /* Pending */,
+          message: "Waiting for user to complete authorization..."
+        };
+      }
+      if (errorData.error === "slow_down") {
+        logger6.debug("Polling too fast");
+        return {
+          status: "pending" /* Pending */,
+          message: "Polling too fast, slowing down..."
+        };
       }
+      if (errorData.error === "expired_token") {
+        logger6.warn("Device code expired");
+        return {
+          status: "expired" /* Expired */,
+          message: "The authorization code has expired. Please start again."
+        };
+      }
+      if (errorData.error === "access_denied") {
+        logger6.warn("Access denied");
+        return {
+          status: "error" /* Error */,
+          message: "Access was denied by the user.",
+          error: errorData.error_description ?? errorData.error
+        };
+      }
+      logger6.error("Unexpected error during polling", { error: errorData });
+      return {
+        status: "error" /* Error */,
+        message: errorData.error_description ?? errorData.error,
+        error: errorData.error
+      };
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      logger6.error("Poll request failed", { error: errorMessage });
+      return {
+        status: "error" /* Error */,
+        message: `Poll request failed: ${errorMessage}`,
+        error: errorMessage
+      };
     }
-    summaries.sort((a, b) => new Date(b.startTime).getTime() - new Date(a.startTime).getTime());
-    return summaries;
   }
   /**
-   * Cleanup old sessions beyond the specified age.
-   * @param params - Cleanup parameters.
-   * @returns Number of sessions deleted.
+   * Poll for device code authorization until completion or timeout.
    */
-  cleanupOldSessions(params) {
-    const maxAgeDays = params?.maxAgeDays ?? DEFAULT_SESSION_MAX_AGE_DAYS;
+  async waitForDeviceCodeAuthorization(params) {
     const logger6 = getLogger();
-    const cutoffDate = /* @__PURE__ */ new Date();
-    cutoffDate.setDate(cutoffDate.getDate() - maxAgeDays);
-    const sessionIds = this.listSessions();
-    let deletedCount = 0;
-    for (const sessionId of sessionIds) {
-      if (sessionId === "current") {
-        continue;
-      }
-      const metadata = this.loadSessionMetadata(sessionId);
-      if (!metadata) {
-        continue;
+    const timeoutMs = params.timeoutMs ?? DEFAULT_LOGIN_WAIT_TIMEOUT_MS;
+    const pollIntervalMs = Math.max(params.intervalSeconds, 1) * 1e3;
+    const startedAt = Date.now();
+    logger6.info("Waiting for device code authorization", {
+      timeoutMs,
+      pollIntervalMs
+    });
+    while (Date.now() - startedAt < timeoutMs) {
+      const pollResult = await this.pollDeviceCode(params.deviceCode);
+      if (pollResult.status !== "pending" /* Pending */) {
+        return pollResult;
       }
-      const sessionDate = new Date(metadata.startTime);
-      if (sessionDate < cutoffDate) {
-        const sessionDir = path11.join(this.sessionsDir, sessionId);
-        try {
-          fs6.rmSync(sessionDir, { recursive: true, force: true });
-          deletedCount++;
-          logger6.info("Deleted old session", {
-            sessionId,
-            age: Math.floor((Date.now() - sessionDate.getTime()) / (1e3 * 60 * 60 * 24))
-          });
-        } catch (error) {
-          logger6.error("Failed to delete session", {
-            sessionId,
-            error: error instanceof Error ? error.message : String(error)
-          });
-        }
+      const remainingMs = timeoutMs - (Date.now() - startedAt);
+      if (remainingMs <= 0) {
+        break;
       }
+      await sleep({ durationMs: Math.min(pollIntervalMs, remainingMs) });
     }
-    if (deletedCount > 0) {
-      logger6.info("Session cleanup completed", {
-        deletedCount,
-        maxAgeDays
-      });
-    }
-    return deletedCount;
-  }
-  /**
-   * Get a session directory path.
-   * @param sessionId - Session ID.
-   * @returns Session directory path.
-   */
-  getSessionPath(sessionId) {
-    return path11.join(this.sessionsDir, sessionId);
+    return {
+      status: "pending" /* Pending */,
+      message: "Timed out waiting for browser login confirmation. Please finish login in your browser, then call `muggle_auth_poll` to continue."
+    };
   }
   /**
-   * Delete a specific session.
-   * @param sessionId - Session ID to delete.
-   * @returns Whether deletion succeeded.
+   * Get user info from Auth0.
    */
-  deleteSession(sessionId) {
+  async getUserInfo(accessToken) {
     const logger6 = getLogger();
-    const sessionDir = path11.join(this.sessionsDir, sessionId);
-    if (!fs6.existsSync(sessionDir)) {
-      logger6.warn("Session not found for deletion", { sessionId });
-      return false;
-    }
+    const config = getConfig();
+    const { domain } = config.localQa.auth0;
+    const url = `https://${domain}/userinfo`;
     try {
-      const currentId = this.getCurrentSessionId();
-      if (currentId === sessionId) {
-        const currentPath = path11.join(this.sessionsDir, "current");
-        if (fs6.existsSync(currentPath)) {
-          fs6.unlinkSync(currentPath);
+      const response = await fetch(url, {
+        method: "GET",
+        headers: {
+          Authorization: `Bearer ${accessToken}`
         }
+      });
+      if (!response.ok) {
+        logger6.warn("Failed to get user info", { status: response.status });
+        return {};
       }
-      fs6.rmSync(sessionDir, { recursive: true, force: true });
-      logger6.info("Deleted session", { sessionId });
-      return true;
+      const userInfoData = await response.json();
+      return userInfoData;
     } catch (error) {
-      logger6.error("Failed to delete session", {
-        sessionId,
+      logger6.warn("User info request failed", {
         error: error instanceof Error ? error.message : String(error)
       });
-      return false;
+      return {};
     }
   }
-};
-var serviceInstance2 = null;
-function getStorageService() {
-  serviceInstance2 ??= new StorageService();
-  return serviceInstance2;
-}
-function resetStorageService() {
-  serviceInstance2 = null;
-}
-var logger3 = getLogger();
-var RunResultStorageService = class {
-  /** Base directory for run results. */
-  runResultsDir;
-  /** Base directory for test scripts. */
-  testScriptsDir;
-  constructor() {
-    const storageService = getStorageService();
-    const dataDir = storageService.getDataDir();
-    this.runResultsDir = path11.join(dataDir, "run-results");
-    this.testScriptsDir = path11.join(dataDir, "test-scripts");
-    this.ensureDirectories();
-  }
   /**
-   * Ensure storage directories exist.
+   * Store authentication tokens.
    */
-  ensureDirectories() {
-    if (!fs6.existsSync(this.runResultsDir)) {
-      fs6.mkdirSync(this.runResultsDir, { recursive: true });
-    }
-    if (!fs6.existsSync(this.testScriptsDir)) {
-      fs6.mkdirSync(this.testScriptsDir, { recursive: true });
+  async storeAuth(params) {
+    const { tokenResponse, email, userId } = params;
+    const logger6 = getLogger();
+    const expiresAt = new Date(Date.now() + tokenResponse.expiresIn * 1e3).toISOString();
+    const storedAuth = {
+      accessToken: tokenResponse.accessToken,
+      refreshToken: tokenResponse.refreshToken,
+      expiresAt,
+      email,
+      userId,
+      runtimeTarget: getActiveRuntimeTarget()
+    };
+    const dir = path13.dirname(this.oauthSessionFilePath);
+    if (!fs4.existsSync(dir)) {
+      fs4.mkdirSync(dir, { recursive: true });
     }
+    fs4.writeFileSync(this.oauthSessionFilePath, JSON.stringify(storedAuth, null, 2), {
+      encoding: "utf-8",
+      mode: 384
+    });
+    logger6.info("Auth stored successfully", { email, expiresAt });
   }
-  // ========================================
-  // Run Results
-  // ========================================
   /**
-   * List all run results.
+   * Load stored authentication for the active runtime target.
+   * @returns Stored auth, or null when it is absent, unreadable, or was issued for another target.
    */
-  listRunResults() {
+  loadStoredAuth() {
+    const logger6 = getLogger();
+    if (!fs4.existsSync(this.oauthSessionFilePath)) {
+      return null;
+    }
     try {
-      const files = fs6.readdirSync(this.runResultsDir).filter((f) => f.endsWith(".json"));
-      const results = [];
-      for (const file of files) {
-        try {
-          const content = fs6.readFileSync(path11.join(this.runResultsDir, file), "utf-8");
-          results.push(JSON.parse(content));
-        } catch {
-          logger3.warn("Failed to read run result file", { file });
-        }
+      const content = fs4.readFileSync(this.oauthSessionFilePath, "utf-8");
+      const storedAuth = JSON.parse(content);
+      const activeRuntimeTarget = getActiveRuntimeTarget();
+      const config = getConfig();
+      const expectedAuth0Domain = config.localQa.auth0.domain;
+      const tokenIssuer = extractJwtIssuer(storedAuth.accessToken);
+      if (!isStoredAuthForRuntimeTarget({
+        storedRuntimeTarget: storedAuth.runtimeTarget,
+        activeRuntimeTarget,
+        tokenIssuer,
+        expectedAuth0Domain
+      })) {
+        logger6.warn("Ignoring stored auth issued for a different runtime target", {
+          storedRuntimeTarget: storedAuth.runtimeTarget ?? "unrecorded",
+          activeRuntimeTarget,
+          tokenIssuer: tokenIssuer ?? "undecodable",
+          expectedAuth0Domain
+        });
+        return null;
       }
-      return results.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
-    } catch {
-      return [];
+      return storedAuth;
+    } catch (error) {
+      logger6.error("Failed to load stored auth", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return null;
     }
   }
   /**
-   * Get a run result by ID.
+   * Get the current access token (if valid).
+   * Does not auto-refresh - use getValidAccessToken() for that.
    */
-  getRunResult(runId) {
-    const filePath = path11.join(this.runResultsDir, `${runId}.json`);
-    if (!fs6.existsSync(filePath)) {
-      return void 0;
+  getAccessToken() {
+    const storedAuth = this.loadStoredAuth();
+    if (!storedAuth) {
+      return null;
     }
-    try {
-      const content = fs6.readFileSync(filePath, "utf-8");
-      return JSON.parse(content);
-    } catch {
-      return void 0;
+    const now = /* @__PURE__ */ new Date();
+    const expiresAt = new Date(storedAuth.expiresAt);
+    if (now >= expiresAt) {
+      return null;
     }
+    return storedAuth.accessToken;
   }
   /**
-   * Save a run result.
-   */
-  saveRunResult(result) {
-    const filePath = path11.join(this.runResultsDir, `${result.id}.json`);
-    fs6.writeFileSync(filePath, JSON.stringify(result, null, 2));
-  }
-  /**
-   * Create a new run result.
-   */
-  createRunResult(params) {
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const id = randomUUID();
-    const result = {
-      id,
-      runType: params.runType,
-      status: "pending",
-      cloudTestCaseId: params.cloudTestCaseId,
-      projectId: params.projectId,
-      useCaseId: params.useCaseId,
-      localUrl: params.localUrl,
-      productionUrl: params.productionUrl,
-      localExecutionContext: params.localExecutionContext,
-      createdAt: now,
-      updatedAt: now
-    };
-    this.saveRunResult(result);
-    return result;
-  }
-  /**
-   * Update a run result.
+   * Check if the access token is expired or about to expire.
+   * Uses a 5-minute buffer for safety.
    */
-  updateRunResult(runId, updates) {
-    const result = this.getRunResult(runId);
-    if (!result) {
-      return void 0;
+  isAccessTokenExpired() {
+    const storedAuth = this.loadStoredAuth();
+    if (!storedAuth) {
+      return true;
     }
-    const updated = {
-      ...result,
-      ...updates,
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    this.saveRunResult(updated);
-    return updated;
+    const now = /* @__PURE__ */ new Date();
+    const expiresAt = new Date(storedAuth.expiresAt);
+    const bufferMs = 5 * 60 * 1e3;
+    return now.getTime() >= expiresAt.getTime() - bufferMs;
   }
-  // ========================================
-  // Test Scripts
-  // ========================================
   /**
-   * List all test scripts.
+   * Refresh the access token using the stored refresh token.
+   * @returns New access token or null if refresh failed.
    */
-  listTestScripts() {
+  async refreshAccessToken() {
+    const logger6 = getLogger();
+    const storedAuth = this.loadStoredAuth();
+    if (!storedAuth?.refreshToken) {
+      logger6.debug("No refresh token available");
+      return null;
+    }
+    const config = getConfig();
+    const { domain, clientId } = config.localQa.auth0;
+    logger6.info("Refreshing access token");
+    const url = `https://${domain}/oauth/token`;
+    const body = new URLSearchParams({
+      grant_type: "refresh_token",
+      client_id: clientId,
+      refresh_token: storedAuth.refreshToken
+    });
     try {
-      const files = fs6.readdirSync(this.testScriptsDir).filter((f) => f.endsWith(".json"));
-      const scripts = [];
-      for (const file of files) {
-        try {
-          const content = fs6.readFileSync(path11.join(this.testScriptsDir, file), "utf-8");
-          scripts.push(JSON.parse(content));
-        } catch {
-          logger3.warn("Failed to read test script file", { file });
-        }
+      const response = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: body.toString()
+      });
+      if (!response.ok) {
+        const errorText = await response.text();
+        logger6.error("Token refresh failed", {
+          status: response.status,
+          error: errorText
+        });
+        return null;
       }
-      return scripts.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
-    } catch {
-      return [];
+      const tokenData = await response.json();
+      const newExpiresAt = new Date(Date.now() + tokenData.expires_in * 1e3).toISOString();
+      const updatedAuth = {
+        accessToken: tokenData.access_token,
+        refreshToken: tokenData.refresh_token ?? storedAuth.refreshToken,
+        expiresAt: newExpiresAt,
+        email: storedAuth.email,
+        userId: storedAuth.userId,
+        runtimeTarget: storedAuth.runtimeTarget ?? getActiveRuntimeTarget()
+      };
+      const dir = path13.dirname(this.oauthSessionFilePath);
+      if (!fs4.existsSync(dir)) {
+        fs4.mkdirSync(dir, { recursive: true });
+      }
+      fs4.writeFileSync(this.oauthSessionFilePath, JSON.stringify(updatedAuth, null, 2), {
+        encoding: "utf-8",
+        mode: 384
+      });
+      logger6.info("Access token refreshed", { expiresAt: newExpiresAt });
+      return tokenData.access_token;
+    } catch (error) {
+      logger6.error("Token refresh request failed", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return null;
     }
   }
   /**
-   * Get a test script by ID.
+   * Get a valid access token, refreshing if necessary.
+   * This is the preferred method for getting an access token for API calls.
+   * @returns Valid access token or null if not authenticated or refresh failed.
    */
-  getTestScript(testScriptId) {
-    const filePath = path11.join(this.testScriptsDir, `${testScriptId}.json`);
-    if (!fs6.existsSync(filePath)) {
-      return void 0;
+  async getValidAccessToken() {
+    const logger6 = getLogger();
+    const storedAuth = this.loadStoredAuth();
+    if (!storedAuth) {
+      logger6.debug("No stored auth, cannot get valid token");
+      return null;
     }
-    try {
-      const content = fs6.readFileSync(filePath, "utf-8");
-      return JSON.parse(content);
-    } catch {
-      return void 0;
+    const now = /* @__PURE__ */ new Date();
+    const expiresAt = new Date(storedAuth.expiresAt);
+    const isStrictlyExpired = now >= expiresAt;
+    if (!isStrictlyExpired && !this.isAccessTokenExpired()) {
+      return storedAuth.accessToken;
     }
+    if (!isStrictlyExpired) {
+      logger6.debug("Access token in buffer zone, attempting proactive refresh");
+    } else {
+      logger6.info("Access token expired, attempting refresh");
+    }
+    const refreshedToken = await this.refreshAccessToken();
+    if (refreshedToken) {
+      return refreshedToken;
+    }
+    if (!isStrictlyExpired) {
+      logger6.warn("Token refresh failed, but token not yet expired - using existing token");
+      return storedAuth.accessToken;
+    }
+    logger6.warn("Token refresh failed and token is expired, user needs to re-authenticate");
+    return null;
   }
   /**
-   * Save a test script.
-   */
-  saveTestScript(script) {
-    const filePath = path11.join(this.testScriptsDir, `${script.id}.json`);
-    fs6.writeFileSync(filePath, JSON.stringify(script, null, 2));
-  }
-  /**
-   * Create a new test script.
-   */
-  createTestScript(params) {
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const id = randomUUID();
-    const script = {
-      id,
-      name: params.name,
-      url: params.url,
-      status: "pending",
-      cloudTestCaseId: params.cloudTestCaseId,
-      goal: params.goal,
-      createdAt: now,
-      updatedAt: now
-    };
-    this.saveTestScript(script);
-    return script;
-  }
-  /**
-   * Update a test script.
+   * Clear stored authentication (logout).
    */
-  updateTestScript(testScriptId, updates) {
-    const script = this.getTestScript(testScriptId);
-    if (!script) {
-      return void 0;
+  logout() {
+    const logger6 = getLogger();
+    if (!fs4.existsSync(this.oauthSessionFilePath)) {
+      logger6.debug("No auth to clear");
+      return false;
+    }
+    try {
+      fs4.unlinkSync(this.oauthSessionFilePath);
+      logger6.info("Auth cleared successfully");
+      return true;
+    } catch (error) {
+      logger6.error("Failed to clear auth", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return false;
     }
-    const updated = {
-      ...script,
-      ...updates,
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    this.saveTestScript(updated);
-    return updated;
   }
 };
-var instance = null;
-function getRunResultStorageService() {
-  if (!instance) {
-    instance = new RunResultStorageService();
-  }
-  return instance;
+var serviceInstance2 = null;
+function getAuthService() {
+  serviceInstance2 ??= new AuthService();
+  return serviceInstance2;
 }
-function resetRunResultStorageService() {
-  instance = null;
+function resetAuthService() {
+  serviceInstance2 = null;
+}
+function sleep(params) {
+  return new Promise((resolve6) => {
+    setTimeout(() => {
+      resolve6();
+    }, params.durationMs);
+  });
 }
 
 // packages/mcps/src/shared/llm-env-constants.ts
@@ -2406,13 +2623,13 @@ var PREFERENCES_SCHEMA = {
 
 // packages/mcps/src/shared/llm-env-service.ts
 function resolveLlmEnvOverrides(dataDirOverride2) {
-  const filePath = path11.join(getDataDir(), PREFERENCES_FILE_NAME);
+  const filePath = path13.join(getDataDir(), PREFERENCES_FILE_NAME);
   let block;
   try {
-    if (!fs6.existsSync(filePath)) {
+    if (!fs4.existsSync(filePath)) {
       return {};
     }
-    const raw = JSON.parse(fs6.readFileSync(filePath, "utf-8"));
+    const raw = JSON.parse(fs4.readFileSync(filePath, "utf-8"));
     block = raw[LLM_ENV_PREFERENCE_KEY];
   } catch {
     return {};
@@ -2647,13 +2864,13 @@ var MODIFY_LOCK_STALE_MS = 5e3;
 
 // packages/mcps/src/mcp/local/services/local-execution-lock.ts
 function lockFilePath() {
-  return path11.join(getDataDir(), LOCK_FILE_NAME);
+  return path13.join(getDataDir(), LOCK_FILE_NAME);
 }
 function modifyLockPath() {
   return lockFilePath() + MODIFY_LOCK_SUFFIX;
 }
 function normalizeCwd(cwd) {
-  const resolved = path11.resolve(cwd);
+  const resolved = path13.resolve(cwd);
   return os4.platform() === "win32" ? resolved.toLowerCase() : resolved;
 }
 function pidIsAlive(pid) {
@@ -2669,7 +2886,7 @@ function pidIsAlive(pid) {
 }
 async function readState() {
   try {
-    const raw = await fs10.readFile(lockFilePath(), "utf-8");
+    const raw = await fs12.readFile(lockFilePath(), "utf-8");
     return JSON.parse(raw);
   } catch (error) {
     if (error.code === "ENOENT") return null;
@@ -2677,28 +2894,28 @@ async function readState() {
   }
 }
 async function writeState(state2) {
-  await fs10.writeFile(lockFilePath(), JSON.stringify(state2, null, 2), "utf-8");
+  await fs12.writeFile(lockFilePath(), JSON.stringify(state2, null, 2), "utf-8");
 }
 async function deleteStateFile() {
   try {
-    await fs10.unlink(lockFilePath());
+    await fs12.unlink(lockFilePath());
   } catch (error) {
     if (error.code !== "ENOENT") throw error;
   }
 }
 async function withModifyLock(fn) {
-  await fs10.mkdir(path11.dirname(modifyLockPath()), { recursive: true });
+  await fs12.mkdir(path13.dirname(modifyLockPath()), { recursive: true });
   const modifyPath = modifyLockPath();
   let fileHandle = null;
   while (fileHandle === null) {
     try {
-      fileHandle = await fs10.open(modifyPath, "wx");
+      fileHandle = await fs12.open(modifyPath, "wx");
     } catch (error) {
       if (error.code !== "EEXIST") throw error;
       try {
-        const stat3 = await fs10.stat(modifyPath);
+        const stat3 = await fs12.stat(modifyPath);
         if (Date.now() - stat3.mtimeMs > MODIFY_LOCK_STALE_MS) {
-          await fs10.unlink(modifyPath).catch(() => void 0);
+          await fs12.unlink(modifyPath).catch(() => void 0);
           continue;
         }
       } catch {
@@ -2711,7 +2928,7 @@ async function withModifyLock(fn) {
     return await fn();
   } finally {
     await fileHandle.close().catch(() => void 0);
-    await fs10.unlink(modifyPath).catch(() => void 0);
+    await fs12.unlink(modifyPath).catch(() => void 0);
   }
 }
 async function tryAcquireOnce(params) {
@@ -2850,12 +3067,12 @@ function extractStudioCloudRefs(studioReturnedResult) {
   return refs;
 }
 async function readCloudRefsFile(inputFilePath) {
-  const cloudRefsPath = path11.join(
-    path11.dirname(inputFilePath),
-    `cloudrefs_${path11.basename(inputFilePath)}`
+  const cloudRefsPath = path13.join(
+    path13.dirname(inputFilePath),
+    `cloudrefs_${path13.basename(inputFilePath)}`
   );
   try {
-    return JSON.parse(await fs10.readFile(cloudRefsPath, "utf-8"));
+    return JSON.parse(await fs12.readFile(cloudRefsPath, "utf-8"));
   } catch {
     return void 0;
   }
@@ -2874,15 +3091,15 @@ function getAuthenticatedUserId() {
 }
 async function findPackageJsonAsync() {
   const currentFileUrl = import.meta.url;
-  const currentDir = path11.dirname(fileURLToPath(currentFileUrl));
+  const currentDir = path13.dirname(fileURLToPath(currentFileUrl));
   const candidatePaths = [
-    path11.resolve(currentDir, "../../../package.json"),
-    path11.resolve(currentDir, "../package.json"),
-    path11.resolve(currentDir, "../../package.json")
+    path13.resolve(currentDir, "../../../package.json"),
+    path13.resolve(currentDir, "../package.json"),
+    path13.resolve(currentDir, "../../package.json")
   ];
   for (const candidatePath of candidatePaths) {
     try {
-      const packageJsonRaw = await fs10.readFile(candidatePath, "utf-8");
+      const packageJsonRaw = await fs12.readFile(candidatePath, "utf-8");
       const packageJson = JSON.parse(packageJsonRaw);
       if (packageJson.name === "@muggleai/works" && packageJson.version && packageJson.muggleConfig?.electronAppVersion) {
         return {
@@ -2928,20 +3145,20 @@ function buildStudioAuthContent() {
 }
 async function ensureTempDir() {
   const config = getConfig();
-  const tempDir = path11.join(config.localQa.dataDir, "temp");
-  await fs10.mkdir(tempDir, { recursive: true });
+  const tempDir = path13.join(config.localQa.dataDir, "temp");
+  await fs12.mkdir(tempDir, { recursive: true });
   return tempDir;
 }
 async function writeTempFile(params) {
   const tempDir = await ensureTempDir();
-  const filePath = path11.join(tempDir, params.filename);
-  await fs10.writeFile(filePath, JSON.stringify(params.data, null, 2));
+  const filePath = path13.join(tempDir, params.filename);
+  await fs12.writeFile(filePath, JSON.stringify(params.data, null, 2));
   return filePath;
 }
 async function cleanupTempFiles(params) {
   for (const filePath of params.filePaths) {
     try {
-      await fs10.unlink(filePath);
+      await fs12.unlink(filePath);
     } catch {
     }
   }
@@ -2949,12 +3166,12 @@ async function cleanupTempFiles(params) {
 async function moveResultsToArtifacts(params) {
   const storageService = getStorageService();
   const sessionsDir = storageService.getSessionsDir();
-  const artifactsDir = path11.join(sessionsDir, params.runId);
-  const actionScriptPath = path11.join(artifactsDir, "action-script.json");
-  await fs10.mkdir(artifactsDir, { recursive: true });
-  await fs10.copyFile(params.generatedScriptPath, actionScriptPath);
+  const artifactsDir = path13.join(sessionsDir, params.runId);
+  const actionScriptPath = path13.join(artifactsDir, "action-script.json");
+  await fs12.mkdir(artifactsDir, { recursive: true });
+  await fs12.copyFile(params.generatedScriptPath, actionScriptPath);
   try {
-    await fs10.unlink(params.generatedScriptPath);
+    await fs12.unlink(params.generatedScriptPath);
   } catch {
   }
   return artifactsDir;
@@ -2962,13 +3179,13 @@ async function moveResultsToArtifacts(params) {
 async function writeExecutionLogs(params) {
   const storageService = getStorageService();
   const sessionsDir = storageService.getSessionsDir();
-  const artifactsDir = path11.join(sessionsDir, params.runId);
-  await fs10.mkdir(artifactsDir, { recursive: true });
-  const stdoutPath = path11.join(artifactsDir, "stdout.log");
-  const stderrPath = path11.join(artifactsDir, "stderr.log");
+  const artifactsDir = path13.join(sessionsDir, params.runId);
+  await fs12.mkdir(artifactsDir, { recursive: true });
+  const stdoutPath = path13.join(artifactsDir, "stdout.log");
+  const stderrPath = path13.join(artifactsDir, "stderr.log");
   await Promise.all([
-    fs10.writeFile(stdoutPath, params.stdout, "utf-8"),
-    fs10.writeFile(stderrPath, params.stderr, "utf-8")
+    fs12.writeFile(stdoutPath, params.stdout, "utf-8"),
+    fs12.writeFile(stderrPath, params.stderr, "utf-8")
   ]);
   logger4.info("Wrote execution logs to artifacts directory", {
     runId: params.runId,
@@ -2978,10 +3195,10 @@ async function writeExecutionLogs(params) {
 async function preserveElectronRuntimeArtifacts(params) {
   try {
     const tempDir = await ensureTempDir();
-    const markerPath = path11.join(tempDir, `${params.runId}_runtime_dir.txt`);
+    const markerPath = path13.join(tempDir, `${params.runId}_runtime_dir.txt`);
     let runtimeDir = null;
     try {
-      const marker = await fs10.readFile(markerPath, "utf-8");
+      const marker = await fs12.readFile(markerPath, "utf-8");
       const trimmed = marker.trim();
       if (trimmed.length > 0) runtimeDir = trimmed;
     } catch (markerReadError) {
@@ -3003,25 +3220,25 @@ async function preserveElectronRuntimeArtifacts(params) {
       return;
     }
     try {
-      await fs10.access(runtimeDir);
+      await fs12.access(runtimeDir);
     } catch {
       logger4.warn("Electron runtime dir referenced but missing on disk", {
         runId: params.runId,
         runtimeDir
       });
-      await fs10.unlink(markerPath).catch(() => void 0);
+      await fs12.unlink(markerPath).catch(() => void 0);
       return;
     }
     const storage = getStorageService();
-    const destDir = path11.join(storage.getSessionsDir(), params.runId, "electron-runtime");
-    await fs10.mkdir(destDir, { recursive: true });
-    await fs10.cp(runtimeDir, destDir, { recursive: true });
+    const destDir = path13.join(storage.getSessionsDir(), params.runId, "electron-runtime");
+    await fs12.mkdir(destDir, { recursive: true });
+    await fs12.cp(runtimeDir, destDir, { recursive: true });
     logger4.info("Preserved Electron runtime artifacts", {
       runId: params.runId,
       sourceDir: runtimeDir,
       destDir
     });
-    await fs10.unlink(markerPath).catch(() => void 0);
+    await fs12.unlink(markerPath).catch(() => void 0);
   } catch (preserveError) {
     logger4.warn("Failed to preserve Electron runtime artifacts", {
       runId: params.runId,
@@ -3030,14 +3247,14 @@ async function preserveElectronRuntimeArtifacts(params) {
   }
 }
 async function scanForRuntimeDirByMtime(params) {
-  const runtimeRoot = path11.join(params.electronCwd, "user_data", "runtime");
+  const runtimeRoot = path13.join(params.electronCwd, "user_data", "runtime");
   try {
-    const entries = await fs10.readdir(runtimeRoot, { withFileTypes: true });
+    const entries = await fs12.readdir(runtimeRoot, { withFileTypes: true });
     let bestCandidate = null;
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = path11.join(runtimeRoot, entry.name);
-      const stat3 = await fs10.stat(fullPath);
+      const fullPath = path13.join(runtimeRoot, entry.name);
+      const stat3 = await fs12.stat(fullPath);
       if (stat3.mtimeMs < params.spawnAtMs) continue;
       if (bestCandidate === null || stat3.mtimeMs > bestCandidate.mtimeMs) {
         bestCandidate = { path: fullPath, mtimeMs: stat3.mtimeMs };
@@ -3093,7 +3310,7 @@ async function executeElectronAppAsync(params) {
     spawnArgs,
     llmEnvOverrideNames
   });
-  const electronCwd = path11.dirname(electronAppPath);
+  const electronCwd = path13.dirname(electronAppPath);
   const child = spawn(electronAppPath, spawnArgs, {
     stdio: ["ignore", "pipe", "pipe"],
     env: electronEnv,
@@ -3276,17 +3493,17 @@ ${executionResult.stdout}
 STDERR:
 ${executionResult.stderr}`;
         const sessionsDir = getStorageService().getSessionsDir();
-        const artifactsDir2 = path11.join(sessionsDir, runId);
-        const generatedScriptPath2 = path11.join(
-          path11.dirname(inputFilePath),
-          `gen_${path11.basename(inputFilePath)}`
+        const artifactsDir2 = path13.join(sessionsDir, runId);
+        const generatedScriptPath2 = path13.join(
+          path13.dirname(inputFilePath),
+          `gen_${path13.basename(inputFilePath)}`
         );
         let failedStudioResult;
         try {
-          const failedScriptRaw = await fs10.readFile(generatedScriptPath2, "utf-8");
+          const failedScriptRaw = await fs12.readFile(generatedScriptPath2, "utf-8");
           failedStudioResult = JSON.parse(failedScriptRaw);
-          await fs10.copyFile(generatedScriptPath2, path11.join(artifactsDir2, "action-script.json"));
-          await fs10.unlink(generatedScriptPath2).catch(() => {
+          await fs12.copyFile(generatedScriptPath2, path13.join(artifactsDir2, "action-script.json"));
+          await fs12.unlink(generatedScriptPath2).catch(() => {
           });
         } catch {
         }
@@ -3315,11 +3532,11 @@ ${executionResult.stderr}`;
           errorMessage: failureMessage
         };
       }
-      const generatedScriptPath = path11.join(
-        path11.dirname(inputFilePath),
-        `gen_${path11.basename(inputFilePath)}`
+      const generatedScriptPath = path13.join(
+        path13.dirname(inputFilePath),
+        `gen_${path13.basename(inputFilePath)}`
       );
-      const generatedScriptRaw = await fs10.readFile(generatedScriptPath, "utf-8");
+      const generatedScriptRaw = await fs12.readFile(generatedScriptPath, "utf-8");
       const generatedScript = JSON.parse(generatedScriptRaw);
       const generatedSteps = generatedScript.steps;
       if (!Array.isArray(generatedSteps)) {
@@ -3463,7 +3680,7 @@ STDOUT:
 ${executionResult.stdout}
 STDERR:
 ${executionResult.stderr}`;
-        const artifactsDir2 = path11.join(getStorageService().getSessionsDir(), runId);
+        const artifactsDir2 = path13.join(getStorageService().getSessionsDir(), runId);
         storage.updateRunResult(runId, {
           status: "failed",
           executionTimeMs,
@@ -3481,7 +3698,7 @@ ${executionResult.stderr}`;
           errorMessage: failureMessage
         };
       }
-      const artifactsDir = path11.join(getStorageService().getSessionsDir(), runId);
+      const artifactsDir = path13.join(getStorageService().getSessionsDir(), runId);
       const replayStudioResult = await readCloudRefsFile(inputFilePath);
       const replayStudioCloudRefs = extractStudioCloudRefs(replayStudioResult);
       storage.updateRunResult(runId, {
@@ -4011,7 +4228,7 @@ var PREFS_FILENAME = "preferences.json";
 var OAUTH_SESSION_FILENAME = "oauth-session.json";
 var RELEASE_MANIFEST_FILENAME = "release-manifest.json";
 function getDataDir3() {
-  return path11.join(os4.homedir(), DATA_DIR_NAME2);
+  return path13.join(os4.homedir(), DATA_DIR_NAME2);
 }
 
 var cachedInstallId2;
@@ -4076,9 +4293,9 @@ function isValid3(value) {
 function readReleaseManifest2() {
   if (cachedManifest2 !== void 0)
     return cachedManifest2;
-  const path17 = MANIFEST_PATH2;
+  const path19 = MANIFEST_PATH2;
   try {
-    const raw = readFileSync(path17, "utf8");
+    const raw = readFileSync(path19, "utf8");
     const parsed = JSON.parse(raw);
     cachedManifest2 = isValid3(parsed) ? parsed : DEV_MANIFEST2;
     return cachedManifest2;
@@ -4845,17 +5062,17 @@ var PromptServiceClient = class {
    * @param path - Path to validate.
    * @throws GatewayError if path is not allowed.
    */
-  validatePath(path17) {
-    const isAllowed = ALLOWED_UPSTREAM_PREFIXES.some((prefix) => path17.startsWith(prefix));
+  validatePath(path19) {
+    const isAllowed = ALLOWED_UPSTREAM_PREFIXES.some((prefix) => path19.startsWith(prefix));
     if (!isAllowed) {
       const logger6 = getLogger();
       logger6.error("Path not in allowlist", {
-        path: path17,
+        path: path19,
         allowedPrefixes: ALLOWED_UPSTREAM_PREFIXES
       });
       throw new GatewayError({
         code: "FORBIDDEN" /* FORBIDDEN */,
-        message: `Path '${path17}' is not allowed`
+        message: `Path '${path19}' is not allowed`
       });
     }
   }
@@ -6935,6 +7152,9 @@ var RunResultListInputSchema = z.object({
 var RunResultGetInputSchema = z.object({
   runId: MuggleEntityIdSchema.describe("Run result ID (UUID) to retrieve")
 });
+var RunStepsGetInputSchema = z.object({
+  runId: z.string().min(1).optional().describe("Run id, or a unique prefix of one. Omit to read the most recent run.")
+});
 var TestScriptListInputSchema2 = z.object({
   cloudTestCaseId: MuggleEntityIdSchema.optional().describe("Optional cloud test case ID (UUID) to filter by")
 });
@@ -7028,11 +7248,11 @@ var TELEMETRY_DIR_NAME = "telemetry";
 var FAILURE_EVENTS_FILE_NAME = "failure-events.jsonl";
 function appendFailureEvent(record) {
   try {
-    const dir = path11.join(getDataDir(), TELEMETRY_DIR_NAME);
-    fs6.mkdirSync(dir, { recursive: true });
-    const filePath = path11.join(dir, FAILURE_EVENTS_FILE_NAME);
+    const dir = path13.join(getDataDir(), TELEMETRY_DIR_NAME);
+    fs4.mkdirSync(dir, { recursive: true });
+    const filePath = path13.join(dir, FAILURE_EVENTS_FILE_NAME);
     const full = { ts: (/* @__PURE__ */ new Date()).toISOString(), ...record };
-    fs6.appendFileSync(filePath, `${JSON.stringify(full)}
+    fs4.appendFileSync(filePath, `${JSON.stringify(full)}
 `, "utf-8");
   } catch (error) {
     getLogger().warn("Failed to append failure event", {
@@ -7051,17 +7271,17 @@ var ProjectPreferencesReconcileOutcome = /* @__PURE__ */ ((ProjectPreferencesRec
 
 // packages/mcps/src/shared/preferences-service.ts
 function getGlobalPreferencesFilePath(dataDirOverride2) {
-  return path11.join(dataDirOverride2 ?? getDataDir(), PREFERENCES_FILE_NAME);
+  return path13.join(dataDirOverride2 ?? getDataDir(), PREFERENCES_FILE_NAME);
 }
 function isFirstRun(dataDirOverride2) {
-  return !fs6.existsSync(getGlobalPreferencesFilePath(dataDirOverride2));
+  return !fs4.existsSync(getGlobalPreferencesFilePath(dataDirOverride2));
 }
 function readPreferencesFile(filePath) {
   try {
-    if (!fs6.existsSync(filePath)) {
+    if (!fs4.existsSync(filePath)) {
       return {};
     }
-    const raw = JSON.parse(fs6.readFileSync(filePath, "utf-8"));
+    const raw = JSON.parse(fs4.readFileSync(filePath, "utf-8"));
     return raw.preferences ?? {};
   } catch (error) {
     getLogger().warn("Failed to read preferences file", {
@@ -7077,15 +7297,15 @@ function writePreferencesFile(filePath, prefs) {
     version: PREFERENCES_VERSION,
     preferences: prefs
   };
-  fs6.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}
+  fs4.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}
 `, "utf-8");
 }
 function readRawPreferencesFile(filePath) {
   try {
-    if (!fs6.existsSync(filePath)) {
+    if (!fs4.existsSync(filePath)) {
       return {};
     }
-    return JSON.parse(fs6.readFileSync(filePath, "utf-8"));
+    return JSON.parse(fs4.readFileSync(filePath, "utf-8"));
   } catch {
     return {};
   }
@@ -7096,8 +7316,8 @@ function resolvePreferences(dataDirOverride2) {
 }
 function writePreferences2(prefs, dataDirOverride2) {
   const dir = dataDirOverride2 ?? getDataDir();
-  fs6.mkdirSync(dir, { recursive: true });
-  const filePath = path11.join(dir, PREFERENCES_FILE_NAME);
+  fs4.mkdirSync(dir, { recursive: true });
+  const filePath = path13.join(dir, PREFERENCES_FILE_NAME);
   const existing = readPreferencesFile(filePath);
   writePreferencesFile(filePath, { ...existing, ...prefs });
 }
@@ -7110,8 +7330,8 @@ function readPreferencesMetadata(dataDirOverride2) {
 }
 function writePreferencesWithMetadata(prefs, metadata, dataDirOverride2) {
   const dir = dataDirOverride2 ?? getDataDir();
-  fs6.mkdirSync(dir, { recursive: true });
-  const filePath = path11.join(dir, PREFERENCES_FILE_NAME);
+  fs4.mkdirSync(dir, { recursive: true });
+  const filePath = path13.join(dir, PREFERENCES_FILE_NAME);
   const existing = readRawPreferencesFile(filePath);
   const file = {
     ...existing,
@@ -7119,12 +7339,12 @@ function writePreferencesWithMetadata(prefs, metadata, dataDirOverride2) {
     version: PREFERENCES_VERSION,
     preferences: { ...existing.preferences ?? {}, ...prefs }
   };
-  fs6.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}
+  fs4.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}
 `, "utf-8");
 }
 function resetPreference(key, dataDirOverride2) {
   const filePath = getGlobalPreferencesFilePath(dataDirOverride2);
-  if (!fs6.existsSync(filePath)) {
+  if (!fs4.existsSync(filePath)) {
     return;
   }
   if (!key) {
@@ -7136,7 +7356,7 @@ function resetPreference(key, dataDirOverride2) {
   writePreferencesFile(filePath, existing);
 }
 function reconcileProjectPreferences(cwd, dataDirOverride2) {
-  const projectFilePath = path11.join(cwd, PREFERENCES_PROJECT_DIR_NAME, PREFERENCES_FILE_NAME);
+  const projectFilePath = path13.join(cwd, PREFERENCES_PROJECT_DIR_NAME, PREFERENCES_FILE_NAME);
   const projectPreferences = readPreferencesFile(projectFilePath);
   const projectKeys = Object.keys(projectPreferences);
   if (projectKeys.length === 0) {
@@ -7181,17 +7401,17 @@ var MUGGLE_HOME_DISPLAY_DIR = "~/.muggle-ai";
 
 // packages/mcps/src/shared/cwd-keyed-cache.ts
 function resolveHomeFilePath(cache) {
-  return path11.join(getDataDir(), cache.fileName);
+  return path13.join(getDataDir(), cache.fileName);
 }
 function resolveLegacyFilePath(cache, cwd) {
-  return path11.join(cwd, LEGACY_CACHE_DIR_NAME, cache.fileName);
+  return path13.join(cwd, LEGACY_CACHE_DIR_NAME, cache.fileName);
 }
 function parseJsonFile(filePath) {
   try {
-    if (!fs6.existsSync(filePath)) {
+    if (!fs4.existsSync(filePath)) {
       return null;
     }
-    return JSON.parse(fs6.readFileSync(filePath, "utf-8"));
+    return JSON.parse(fs4.readFileSync(filePath, "utf-8"));
   } catch (error) {
     getLogger().warn("Failed to read cache file", {
       path: filePath,
@@ -7205,12 +7425,12 @@ function readHomeEntries(cache) {
   return parsed?.entries ?? {};
 }
 function writeHomeEntries(cache, entries) {
-  fs6.mkdirSync(getDataDir(), { recursive: true });
+  fs4.mkdirSync(getDataDir(), { recursive: true });
   const file = {
     version: CWD_KEYED_CACHE_VERSION,
     entries
   };
-  fs6.writeFileSync(
+  fs4.writeFileSync(
     resolveHomeFilePath(cache),
     `${JSON.stringify(file, null, 2)}
 `,
@@ -7224,7 +7444,7 @@ function readLegacyEntry(cache, cwd) {
   return parsed?.[cache.legacyEntryKey] ?? null;
 }
 function readCwdEntry(cache, cwd) {
-  const cwdKey = path11.resolve(cwd);
+  const cwdKey = path13.resolve(cwd);
   const entries = readHomeEntries(cache);
   const homeEntry = entries[cwdKey];
   if (homeEntry) {
@@ -7246,18 +7466,18 @@ function readCwdEntry(cache, cwd) {
 }
 function writeCwdEntry(cache, cwd, entry) {
   const entries = readHomeEntries(cache);
-  writeHomeEntries(cache, { ...entries, [path11.resolve(cwd)]: entry });
+  writeHomeEntries(cache, { ...entries, [path13.resolve(cwd)]: entry });
 }
 function clearCwdEntry(cache, cwd) {
   const entries = readHomeEntries(cache);
-  const cwdKey = path11.resolve(cwd);
+  const cwdKey = path13.resolve(cwd);
   if (cwdKey in entries) {
     delete entries[cwdKey];
     writeHomeEntries(cache, entries);
   }
   const legacyFilePath = resolveLegacyFilePath(cache, cwd);
-  if (fs6.existsSync(legacyFilePath)) {
-    fs6.unlinkSync(legacyFilePath);
+  if (fs4.existsSync(legacyFilePath)) {
+    fs4.unlinkSync(legacyFilePath);
   }
 }
 
@@ -7390,6 +7610,29 @@ var runResultListTool = {
     return { content, isError: false, data: { results } };
   }
 };
+var runStepsGetTool = {
+  name: "muggle-local-run-steps-get",
+  description: "Read a local run's steps beside the frames they produced, so the run's own verdict can be shown against its own evidence. Returns the ordered steps (action, the agent's explanation, screenshot path) plus the run's status and closing verdict. Takes a run id or a unique prefix; omit it for the most recent run. Read-only \u2014 it never modifies a session. Reach for this after a failed local run instead of parsing action-script.json by hand.",
+  inputSchema: RunStepsGetInputSchema,
+  execute: async (ctx) => {
+    const logger6 = createChildLogger2(ctx.correlationId);
+    logger6.info("Executing muggle-local-run-steps-get");
+    const input = RunStepsGetInputSchema.parse(ctx.input);
+    try {
+      const runView = readRunView(input.runId);
+      return {
+        content: renderRunViewText(runView, { includeHtmlOffer: false }),
+        isError: false,
+        data: { run: runView }
+      };
+    } catch (error) {
+      if (error instanceof RunViewError) {
+        return { content: error.message, isError: true };
+      }
+      throw error;
+    }
+  }
+};
 var runResultGetTool = {
   name: "muggle-local-run-result-get",
   description: "Get detailed information about a run result including screenshots and action script output.",
@@ -7422,7 +7665,7 @@ var runResultGetTool = {
       const testScript = storage.getTestScript(storedRunResult.testScriptId);
       testScriptSteps = testScript?.actionScript?.length;
     }
-    if (storedRunResult.artifactsDir && fs6.existsSync(storedRunResult.artifactsDir)) {
+    if (storedRunResult.artifactsDir && fs4.existsSync(storedRunResult.artifactsDir)) {
       contentParts.push(
         "",
         "### Artifacts (view action script + screenshots)",
@@ -7430,26 +7673,26 @@ var runResultGetTool = {
         `**Location:** \`${storedRunResult.artifactsDir}\``,
         ""
       );
-      const actionScriptPath = path11.join(storedRunResult.artifactsDir, "action-script.json");
-      const resultsMdPath = path11.join(storedRunResult.artifactsDir, "results.md");
-      const screenshotsDir = path11.join(storedRunResult.artifactsDir, "screenshots");
-      const stdoutLogPath = path11.join(storedRunResult.artifactsDir, "stdout.log");
-      const stderrLogPath = path11.join(storedRunResult.artifactsDir, "stderr.log");
+      const actionScriptPath = path13.join(storedRunResult.artifactsDir, "action-script.json");
+      const resultsMdPath = path13.join(storedRunResult.artifactsDir, "results.md");
+      const screenshotsDir = path13.join(storedRunResult.artifactsDir, "screenshots");
+      const stdoutLogPath = path13.join(storedRunResult.artifactsDir, "stdout.log");
+      const stderrLogPath = path13.join(storedRunResult.artifactsDir, "stderr.log");
       const artifactItems = [];
-      if (fs6.existsSync(actionScriptPath)) {
+      if (fs4.existsSync(actionScriptPath)) {
         artifactItems.push("- `action-script.json` \u2014 generated test steps");
       }
-      if (fs6.existsSync(resultsMdPath)) {
+      if (fs4.existsSync(resultsMdPath)) {
         artifactItems.push("- `results.md` \u2014 step-by-step report with screenshot links");
       }
-      if (fs6.existsSync(screenshotsDir)) {
-        const screenshots = fs6.readdirSync(screenshotsDir).filter((f) => /\.(png|jpg|jpeg|webp)$/i.test(f));
+      if (fs4.existsSync(screenshotsDir)) {
+        const screenshots = fs4.readdirSync(screenshotsDir).filter((f) => /\.(png|jpg|jpeg|webp)$/i.test(f));
         artifactItems.push(`- \`screenshots/\` \u2014 ${screenshots.length} image(s)`);
       }
-      if (fs6.existsSync(stdoutLogPath)) {
+      if (fs4.existsSync(stdoutLogPath)) {
         artifactItems.push("- `stdout.log` \u2014 electron-app stdout output");
       }
-      if (fs6.existsSync(stderrLogPath)) {
+      if (fs4.existsSync(stderrLogPath)) {
         artifactItems.push("- `stderr.log` \u2014 electron-app stderr output");
       }
       if (artifactItems.length > 0) {
@@ -7798,6 +8041,7 @@ var allLocalQaTools = [
   // Run result tools
   runResultListTool,
   runResultGetTool,
+  runStepsGetTool,
   // Test script tools (read-only)
   testScriptListTool,
   testScriptGetTool,
@@ -8032,6 +8276,7 @@ __export(local_exports2, {
   RunResultGetInputSchema: () => RunResultGetInputSchema,
   RunResultListInputSchema: () => RunResultListInputSchema,
   RunResultStorageService: () => RunResultStorageService,
+  RunStepsGetInputSchema: () => RunStepsGetInputSchema,
   SessionStatus: () => SessionStatus,
   SkillTelemetryEmitInputSchema: () => SkillTelemetryEmitInputSchema,
   StorageService: () => StorageService,
@@ -8355,4 +8600,4 @@ function applyOnboardingAnswers(answers, dataDirOverride2, now = /* @__PURE__ */
   return { isCompleted: true, preferences: prefs };
 }
 
-export { DEFAULT_PREFERENCES, ElectronAppReleaseStream, EventName, ONBOARDING_BLANKET_OPTIONS, ONBOARDING_CHOICE_GROUPS, ONBOARDING_MAX_OFFERS, ONBOARDING_PRIMER_BULLETS, ONBOARDING_PRIMER_HEADLINE, ONBOARDING_TOGGLE_GROUPS, ONBOARDING_TOGGLE_PROMPT, ONBOARDING_UNSELECTED_TOGGLE_VALUE, OnboardingBlanketChoice, OnboardingGroupKind, PREFERENCES_FILE_NAME, PREFERENCES_PROJECT_DIR_NAME, PREFERENCES_SCHEMA, PREFERENCES_VERSION, PREFERENCE_ALLOWED_VALUES, PreferenceKey, PreferenceValue, ProjectPreferencesReconcileOutcome, RuntimeTarget, ServiceName, Surface, WATCHER_LIFETIME_SECONDS, WATCHER_LIFETIME_UNBOUNDED_SECONDS, __export, __require, applyOnboardingAnswers, assertDeviceCodeClientProvisioned, buildElectronAppChecksumsUrl, buildElectronAppReleaseAssetUrl, buildElectronAppReleaseTag, buildOnboardingPlan, calculateFileChecksum, completeOnboarding, createApiKeyWithToken, createChildLogger, deleteApiKeyData, deleteCredentials, e2e_exports2 as e2e_exports, formatPreferencesOneLiner, getActiveElectronAppReleaseStream, getActiveRuntimeTarget, getApiKey, getApiKeyFilePath, getAuthService, getBundledElectronAppVersion, getCallerCredentials, getCallerCredentialsAsync, getChecksumForPlatform, getConfig, getCredentialsFilePath, getDataDir2 as getDataDir, getDisclosureCopy, getDownloadBaseUrl, getElectronAppChecksums, getElectronAppDir, getElectronAppReleaseTagPrefix, getElectronAppSignedFromVersion, getElectronAppVersion, getElectronAppVersionSource, getLocalQaTools, getLogger, getOnboardingToggleKeys, getPlatformKey, getQaTools, getReleaseSignerIdentityUri, getValidApiKeyData, getValidCredentials, hasApiKey, hasShownDisclosure, initTelemetry, isElectronAppInstalled, isFirstRun, loadApiKeyData, loadCredentials, local_exports2 as local_exports, markDisclosureShown, markOnboardingCompleted, mcp_exports, needsOnboarding, openBrowserUrl, performLogin, performLogout, pollDeviceCode, readPreferencesMetadata, reconcileProjectPreferences, recordOnboardingSkip, resetConfig, resetLogger, resetPreference, resolveActiveProfile, resolveActiveReleaseStream, resolveActiveReleaseTagPrefix, resolveBlanketPreferences, resolveElectronAppPathOrNull, resolveOnboardingAnswers, resolvePreferences, resolveRuntimeTarget, resolveTogglePreferences, saveApiKey, saveApiKeyData, saveCredentials, src_exports, startDeviceCodeFlow, toolRequiresAuth, track, validatePreference, verifyFileChecksum, writePreferences2 as writePreferences, writePreferencesWithMetadata };
+export { ACTION_SCRIPT_FILE_NAME, DEFAULT_PREFERENCES, ElectronAppReleaseStream, EventName, HTML_VIEW_OFFER_LINE, ONBOARDING_BLANKET_OPTIONS, ONBOARDING_CHOICE_GROUPS, ONBOARDING_MAX_OFFERS, ONBOARDING_PRIMER_BULLETS, ONBOARDING_PRIMER_HEADLINE, ONBOARDING_TOGGLE_GROUPS, ONBOARDING_TOGGLE_PROMPT, ONBOARDING_UNSELECTED_TOGGLE_VALUE, OnboardingBlanketChoice, OnboardingGroupKind, PREFERENCES_FILE_NAME, PREFERENCES_PROJECT_DIR_NAME, PREFERENCES_SCHEMA, PREFERENCES_VERSION, PREFERENCE_ALLOWED_VALUES, PreferenceKey, PreferenceValue, ProjectPreferencesReconcileOutcome, RUN_SESSIONS_DIR_NAME, RunViewError, RuntimeTarget, SCREENSHOT_DIR_RELATIVE_PATH, SCREENSHOT_FILE_EXTENSION, ServiceName, Surface, WATCHER_LIFETIME_SECONDS, WATCHER_LIFETIME_UNBOUNDED_SECONDS, __export, __require, applyOnboardingAnswers, assertDeviceCodeClientProvisioned, buildElectronAppChecksumsUrl, buildElectronAppReleaseAssetUrl, buildElectronAppReleaseTag, buildOnboardingPlan, calculateFileChecksum, completeOnboarding, createApiKeyWithToken, createChildLogger, deleteApiKeyData, deleteCredentials, e2e_exports2 as e2e_exports, formatPreferencesOneLiner, getActiveElectronAppReleaseStream, getActiveRuntimeTarget, getApiKey, getApiKeyFilePath, getAuthService, getBundledElectronAppVersion, getCallerCredentials, getCallerCredentialsAsync, getChecksumForPlatform, getConfig, getCredentialsFilePath, getDataDir2 as getDataDir, getDisclosureCopy, getDownloadBaseUrl, getElectronAppChecksums, getElectronAppDir, getElectronAppReleaseTagPrefix, getElectronAppSignedFromVersion, getElectronAppVersion, getElectronAppVersionSource, getLocalQaTools, getLogger, getOnboardingToggleKeys, getPlatformKey, getQaTools, getReleaseSignerIdentityUri, getRunSessionsDir, getValidApiKeyData, getValidCredentials, hasApiKey, hasShownDisclosure, initTelemetry, isElectronAppInstalled, isFirstRun, loadApiKeyData, loadCredentials, local_exports2 as local_exports, markDisclosureShown, markOnboardingCompleted, mcp_exports, needsOnboarding, openBrowserUrl, performLogin, performLogout, pollDeviceCode, readPreferencesMetadata, readRunView, reconcileProjectPreferences, recordOnboardingSkip, renderRunViewHtml, renderRunViewText, resetConfig, resetLogger, resetPreference, resolveActiveProfile, resolveActiveReleaseStream, resolveActiveReleaseTagPrefix, resolveBlanketPreferences, resolveElectronAppPathOrNull, resolveOnboardingAnswers, resolvePreferences, resolveRunSessionPath, resolveRuntimeTarget, resolveTogglePreferences, saveApiKey, saveApiKeyData, saveCredentials, src_exports, startDeviceCodeFlow, toolRequiresAuth, track, validatePreference, verifyFileChecksum, writePreferences2 as writePreferences, writePreferencesWithMetadata, writeRunViewHtml };