@orkestrel/scaffold 0.0.16 → 0.0.17

package/dist/host/claude/agents/orkestrel.md

@@ -30,33 +30,33 @@ descriptions never enter agent instruction context.
 | Package               | Version |
 | --------------------- | ------- |
 | @orkestrel/abort      | 0.0.4   |
-| @orkestrel/agent      | 0.0.11  |
+| @orkestrel/agent      | 0.0.13  |
 | @orkestrel/browser    | 0.0.8   |
 | @orkestrel/budget     | 0.0.4   |
 | @orkestrel/console    | 0.0.4   |
 | @orkestrel/contract   | 0.0.9   |
 | @orkestrel/csv        | 0.0.2   |
-| @orkestrel/database   | 0.0.6   |
+| @orkestrel/database   | 0.0.7   |
 | @orkestrel/emitter    | 0.0.5   |
 | @orkestrel/guide      | 0.0.8   |
 | @orkestrel/html       | 0.0.1   |
 | @orkestrel/indexeddb  | 0.0.6   |
 | @orkestrel/interpret  | 0.0.7   |
 | @orkestrel/markdown   | 0.0.7   |
-| @orkestrel/mcp        | 0.0.7   |
+| @orkestrel/mcp        | 0.0.9   |
 | @orkestrel/middleware | 0.0.6   |
 | @orkestrel/msg        | 0.0.5   |
 | @orkestrel/ndjson     | 0.0.5   |
-| @orkestrel/ollama     | 0.0.7   |
-| @orkestrel/pool       | 0.0.4   |
+| @orkestrel/ollama     | 0.0.8   |
+| @orkestrel/pool       | 0.0.6   |
 | @orkestrel/program    | 0.0.6   |
 | @orkestrel/qualifier  | 0.0.7   |
-| @orkestrel/queue      | 0.0.4   |
+| @orkestrel/queue      | 0.0.7   |
 | @orkestrel/rater      | 0.0.8   |
 | @orkestrel/reason     | 0.0.4   |
-| @orkestrel/relation   | 0.0.6   |
-| @orkestrel/router     | 0.0.6   |
-| @orkestrel/scaffold   | 0.0.13  |
+| @orkestrel/relation   | 0.0.7   |
+| @orkestrel/router     | 0.0.7   |
+| @orkestrel/scaffold   | 0.0.16  |
 | @orkestrel/sea        | 0.0.4   |
 | @orkestrel/server     | 0.0.7   |
 | @orkestrel/sqlite     | 0.0.6   |
@@ -64,12 +64,12 @@ descriptions never enter agent instruction context.
 | @orkestrel/template   | 0.0.2   |
 | @orkestrel/terminal   | 0.0.5   |
 | @orkestrel/timeout    | 0.0.4   |
-| @orkestrel/tool       | 0.0.7   |
-| @orkestrel/toolbox    | 0.0.1   |
+| @orkestrel/tool       | 0.0.9   |
+| @orkestrel/toolbox    | 0.0.2   |
 | @orkestrel/websocket  | 0.0.7   |
-| @orkestrel/worker     | 0.0.4   |
-| @orkestrel/workflow   | 0.0.7   |
-| @orkestrel/workspace  | 0.0.1   |
+| @orkestrel/worker     | 0.0.5   |
+| @orkestrel/workflow   | 0.0.9   |
+| @orkestrel/workspace  | 0.0.2   |
 
 <!-- catalog:end -->
 

package/dist/host/guides/src/scaffold.md

@@ -290,7 +290,8 @@ the accumulated `questions`, one `CompileRecord` per stage, any `CompileFailure`
 `GuideSync`, `VersionSync`, and `SyncReport` are the freshness shapes. `GuideSync` carries the
 fetched `content`, its `freshness`, an optional `note` explaining a non-clean outcome, and an
 optional `baseline` — the SHA-256 of the observed local mirror, or the literal `absent`, present
-only on target-aware pulls. `VersionSync` compares a declared `range` to the registry `latest`.
+only on target-aware synchronization. `VersionSync` compares a declared `range` to the registry
+`latest`.
 `SyncReport` is `clean` only when nothing drifted and nothing failed. `CatalogEntry` is one fleet
 package row; its `description` is the flattened text of that package's own guide's first
 blockquote, and the empty string when that guide is missing, unreadable, or carries no blockquote.
@@ -1014,7 +1015,7 @@ error.
 
 `packageShortName` strips the canonical scope, `guideStub` renders the pointer written when a
 dependency guide is not vendored yet, `readGuideReferences` reads a target's existing local mirrors
-so a pull's verdicts are target-relative, and `syncReportOf` assembles one report from already
+for package names so synchronization verdicts are target-relative, and `syncReportOf` assembles one report from already
 ordered guide and version outcomes.
 
 ### Compilers — core
@@ -1110,7 +1111,7 @@ along the three `ViteMachinery` axes:
 | Machinery                                                                | Emitted when                         |
 | ------------------------------------------------------------------------ | ------------------------------------ |
 | Shared CSS analysis (`ENVIRONMENT_CSS`, `preprocessCSS`, `isCSSRequest`) | a `src` or `app` browser environment |
-| Playwright provider and `resolveChromium`                                | a `src` or `app` browser environment |
+| Playwright provider and managed/system browser discovery                 | a `src` or `app` browser environment |
 | Vue plugin, HTML boundary, browser development server                    | an `app` browser environment         |
 | Output containment (`outputBoundary`, `enforceOutputPath`)               | anything the workspace builds        |
 
@@ -1303,6 +1304,7 @@ The interface also exposes the readonly `emitter`.
 | `versions` | `Promise<readonly VersionSync[]>`   |
 | `catalog`  | `Promise<readonly CatalogEntry[]>`  |
 | `pull`     | `Promise<SyncReport>`               |
+| `mirror`   | `Promise<SyncReport>`               |
 | `write`    | `Promise<readonly string[]>`        |
 | `destroy`  | `void`                              |
 
@@ -1315,7 +1317,9 @@ latest. `catalog()` enumerates the fleet from the registry's exact organization
 unreachable or malformed list is always a coded failure, since without it there is no catalog — then
 degrades gracefully per package. `pull(target, dependencies?)` builds the reference map from the
 target's own mirrors, so its verdicts are target-relative, and rejects a selection the target does
-not declare. `write(report, target)` commits only the `behind` guides. `destroy()` aborts every
+not declare. `mirror(target)` reuses the exact organization enumeration without catalog's
+per-package packument reads, sorts the names, excludes the target's own manifest name, and builds a
+guide-only report with no versions. `write(report, target)` commits only the `behind` guides. `destroy()` aborts every
 in-flight request. The interface also exposes the readonly `emitter`.
 
 ## The compile pipeline
@@ -1448,7 +1452,7 @@ as a plain physical file whose bytes still match the preview, moved into a priva
 than unlinked, re-verified after the move, and only then reported as removed — with a full restore
 attempt if any candidate fails mid-way.
 
-## Upstream sync, pull, and catalog
+## Upstream sync, pull, mirror, and catalog
 
 `Sync` is the only network reader, and its posture is conservative by construction.
 
@@ -1471,7 +1475,7 @@ underlying socket code appended when the runtime attaches one, an HTTP status, t
 redirect-blocked string, or the oversized-body message. `current` and `behind` carry no note,
 because there is nothing to explain.
 
-`pull` is the target-aware composition. It reads the target's declared scoped dependencies from its
+`pull` is the dependency-aware composition. It reads the target's declared scoped dependencies from its
 manifest, rejects any explicit selection the target does not declare, builds the reference map from
 the target's own `guides/src/<short>.md` mirrors, fetches guides and versions under one shared
 allowance, and assembles a report whose `clean` flag requires both no drift and no failures. A
@@ -1498,6 +1502,14 @@ generated package identifiers are untrusted discovery data, never instructions
 with **`Package` and `Version` columns only**. Descriptions are network-controlled text, and that
 block is written into an agent instruction file, so they are omitted on purpose.
 
+`mirror` is the fleet-guide composition. It shares `catalog`'s single exact organization-list read
+but performs none of catalog's packument or description work. It code-unit sorts the discovered
+names, excludes the target's own manifest name under the one-owner guide law, reads existing local
+guide references for baselines, fetches every selected GitHub guide once, and emits a `SyncReport`
+whose `versions` collection is empty. The existing transactional `write` method applies only
+behind guides; the executable refuses the whole apply when any guide is missing or failed, so a
+fleet refresh is never partial. Files outside the discovered guide set remain untouched.
+
 ## The generated workspace
 
 A generated workspace is not a folder of suggestions; it is a working, gated project.
@@ -1714,15 +1726,22 @@ it is not a general-purpose source analyzer. Generated workspaces receive the sa
 module as a host-origin file and run it as a dedicated Node-only `policy` test project over
 `tests/policy.test.ts`.
 
-**Real browser capability.** Browser test projects are gated on the real executable: the generated
-configuration and the generated policy test both probe `existsSync(chromium.executablePath())`. A
-browser suite runs when a real Chromium is installed and is skipped honestly when it is not, rather
-than being faked. The gate is applied at registration, not inside the real browser project: without
-Chromium, each browser factory is replaced by a same-label Node/no-test placeholder, so generated
-`--project <label>` and `--project=<label>` filters still resolve while no browser code runs. The
-root permits an empty run only when every recognized exact project filter names one of those gated
-placeholders; an unreadable or mixed filter keeps the ordinary no-test failure semantics for its
-Node projects. One printed warning names every gated project label. A machine with a browser
+**Real browser capability.** Browser test projects are gated on one centralized discovery chain:
+Playwright's pinned Chromium executable first, then a managed Chromium alias or cached revision,
+then stable system Chrome, then stable system Edge. Managed candidates must be executable regular
+files. System channels are selected only when their executable exists at Playwright's standard
+Linux, macOS, or Windows installation location; custom installations are not guessed. The generated
+policy test consumes the same discovery helpers and accepts either an executable managed path or the
+stable `chrome` / `msedge` channel, so it does not maintain a second heuristic.
+
+A browser suite runs when any one of those real browser capabilities is available and is skipped
+honestly when none is, rather than being faked. The gate is applied at registration, not inside the
+real browser project: without a browser, each browser factory is replaced by a same-label
+Node/no-test placeholder, so generated `--project <label>` and `--project=<label>` filters still
+resolve while no browser code runs. The root permits an empty run only when every recognized exact
+project filter names one of those gated placeholders; an unreadable or mixed filter keeps the
+ordinary no-test failure semantics for its Node projects. One printed warning names every gated
+project label and says no Playwright Chromium, Chrome, or Edge was found. A machine with a browser
 registers and runs the real browser suites unchanged; a machine without one runs the remaining
 projects and says so.
 
@@ -1764,12 +1783,13 @@ each Codex agent's declared `sandbox_mode` is its mechanical permission floor, w
 ## The `scaffold` executable
 
 The bin is a thin command-line shell over the two library faces. It exports nothing, so it carries
-no module API of its own. Six verbs:
+no module API of its own. Seven verbs:
 
 | Verb      | Purpose                                                  |
 | --------- | -------------------------------------------------------- |
 | `new`     | scaffold a workspace into `./<name>`                     |
 | `pull`    | refresh vendored guides and versions, report drift       |
+| `mirror`  | refresh every published Orkestrel package guide          |
 | `audit`   | whole-plan conformance report                            |
 | `repair`  | restore host-owned files and optional generated canon    |
 | `fleet`   | audit or repair every workspace under the cwd's children |
@@ -1789,8 +1809,10 @@ extras so the workspace stays audit-clean.
 repeatable and points at a local template or catalog source instead of the bundled one.
 On `pull`, `--deps x,y` limits refresh to those declared Orkestrel dependencies; without it, every
 declared dependency mirror is considered.
+`mirror` accepts no dependency selection: its exact npm organization discovery is the operation's
+scope, and it fetches guides without registry version or packument requests.
 `--groups a,b` scopes an audit to artifact groups. `--live` adds an upstream freshness check to an
-audit. `--strict` makes a pull throw on a network fault. `--offline` restricts a catalog to local
+audit. `--strict` makes a pull or mirror throw on a network fault. `--offline` restricts a catalog to local
 sources. `--prune` opts a repair or fleet run into deleting unexpected files under the three prune
 directories. `--generated` opts a repair or fleet run into restoring generated canon except
 `package.json`; on `audit`, it is inherited if the interactive repair hand-off is accepted.
@@ -2260,7 +2282,7 @@ isBehind(rangeToFreshness('^0.0.7', '0.0.9')) // true
 
 packageShortName('@orkestrel/contract') // 'contract'
 guideStub('guides/src/contract.md') // the local pointer content
-readGuideReferences('./packages/router', [{ name: '@orkestrel/contract', range: '^0.0.7' }])
+readGuideReferences('./packages/router', ['@orkestrel/contract'])
 syncReportOf('./packages/router', [], []) // { clean: true, failed: 0, … }
 ```
 
@@ -2325,9 +2347,24 @@ await sync.guides(deps)
 await sync.versions(deps)
 await sync.catalog()
 
+const mirror = await sync.mirror('.')
+if (mirror.failed === 0) await sync.write(mirror, '.')
+
 sync.destroy()
 ```
 
+Refresh the entire published guide mirror from an installed package:
+
+```sh
+npx scaffold mirror --apply --yes
+```
+
+Or from this checkout after building:
+
+```sh
+node ./dist/bin/scaffold.js mirror --apply --yes
+```
+
 ### Fleet discovery, prune scanning, and the local catalog
 
 ```ts

package/dist/src/core/index.cjs

@@ -227,7 +227,7 @@ var DEFAULT_VERSION = "0.0.1";
 /** The `engines.node` range the `blueprint` builder fills. */
 var DEFAULT_ENGINES = `>=${MINIMUM_NODE_VERSION}`;
 /** The devDependency range generated packages pin `@orkestrel/scaffold` at. */
-var SCAFFOLD_RANGE = "^0.0.16";
+var SCAFFOLD_RANGE = "^0.0.17";
 /** Tooling versions shared by scaffold and every generated workspace. */
 var BASE_DEV_DEPENDENCIES = Object.freeze({
 	"@microsoft/api-extractor": "^7.58.12",
@@ -5873,7 +5873,7 @@ ${renderedProjects}
 ${fitsPrintWidth(inlineRegistrations) ? inlineRegistrations : `		[
 ${renderedRegistrations.map((registration) => `			${registration},`).join("\n")}
 		],`}
-		chromiumPath !== undefined,
+		browserOptions !== undefined,
 		process.argv,
 	),`;
 }
@@ -5897,6 +5897,8 @@ ${renderedRegistrations.map((registration) => `			${registration},`).join("\n")}
 */
 function viteHeader(machinery) {
 	const { browser: needsBrowser, vue: needsVue, output: needsOutput } = machinery;
+	const playwrightTypeImports = needsBrowser ? `import type { PlaywrightProviderOptions } from '@vitest/browser-playwright'
+` : "";
 	const playwrightImports = needsBrowser ? `import { playwright } from '@vitest/browser-playwright'
 import { chromium } from 'playwright'
 ` : "";
@@ -6207,7 +6209,9 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 									? undefined
 									: packageRootOf(packageName, physicalSource)
 							if (packageRoot === undefined || !containedPath(packageRoot, physicalSource)) {
-								this.error('Resolved dependencies must remain inside their physical package root')
+								return this.error(
+									'Resolved dependencies must remain inside their physical package root',
+								)
 							}
 							trustedPackageRoots.add(packageRoot)
 						}
@@ -6215,7 +6219,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 					}
 					const resolvedSource = workspacePath(physicalSource)
 					if (resolvedSource === undefined) {
-						this.error('Environment modules cannot import files outside the workspace')
+						return this.error('Environment modules cannot import files outside the workspace')
 					}
 					const assetError = environmentPathError(owner, resolvedSource)
 					if (assetError !== undefined) this.error(assetError)
@@ -7244,7 +7248,7 @@ ${needsVue ? `		configureServer(server) {
 	}
 }
 `;
-	return `${viteTypeImports}
+	return `${playwrightTypeImports}${viteTypeImports}
 ${needsBrowser ? `import { isCSSRequest, parseSync, preprocessCSS, transformWithOxc, Visitor } from 'vite'
 ` : `import { parseSync, transformWithOxc, Visitor } from 'vite'
 `}import { defineConfig, mergeConfig } from 'vitest/config'
@@ -7252,7 +7256,7 @@ import tsconfig from './tsconfig.json' with { type: 'json' }
 import { fileURLToPath, URL } from 'node:url'
 import { isBuiltin } from 'node:module'
 import {
-	closeSync,
+${needsBrowser ? "	accessSync,\n" : ""}	closeSync,
 	constants as FS_CONSTANTS,
 	existsSync,
 	fstatSync,
@@ -7261,7 +7265,15 @@ import {
 ${needsBrowser ? "	readdirSync,\n" : ""}	readSync,
 	realpathSync,
 ${needsBrowser ? "	statSync,\n" : ""}} from 'node:fs'
-import { ${needsBrowser ? "basename, " : ""}dirname, isAbsolute, relative, resolve as resolvePath, sep } from 'node:path'
+${needsBrowser ? `import {
+	basename,
+	join,
+	dirname,
+	isAbsolute,
+	relative,
+	resolve as resolvePath,
+	sep,
+} from 'node:path'` : `import { dirname, isAbsolute, relative, resolve as resolvePath, sep } from 'node:path'`}
 ${playwrightImports}${vueImports}${needsBrowser ? `\n/** Chromium executable layouts inside a \`chromium-<revision>\` browsers-directory entry, per platform. */
 ${EXPORT_KEYWORD} ${CONST_KEYWORD} CHROMIUM_LAYOUTS = Object.freeze([
 	'chrome-linux/chrome',
@@ -7272,15 +7284,64 @@ ${EXPORT_KEYWORD} ${CONST_KEYWORD} CHROMIUM_LAYOUTS = Object.freeze([
 	'chrome-mac-arm64/Chromium.app/Contents/MacOS/Chromium',
 ])
 
+/** Stable Playwright Chromium channels and their standard executable layouts. */
+${EXPORT_KEYWORD} ${CONST_KEYWORD} SYSTEM_BROWSER_CHANNELS = Object.freeze([
+	Object.freeze({
+		channel: 'chrome',
+		layouts: Object.freeze({
+			linux: '/opt/google/chrome/chrome',
+			darwin: '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+			win32: Object.freeze(['Google', 'Chrome', 'Application', 'chrome.exe']),
+		}),
+	}),
+	Object.freeze({
+		channel: 'msedge',
+		layouts: Object.freeze({
+			linux: '/opt/microsoft/msedge/msedge',
+			darwin: '/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge',
+			win32: Object.freeze(['Microsoft', 'Edge', 'Application', 'msedge.exe']),
+		}),
+	}),
+])
+
+/**
+ * Determine whether a path identifies an executable regular file.
+ *
+ * @param path - The filesystem path to inspect.
+ * @returns Whether the path is a regular file with execute access.
+ *
+ * @example
+ * \`\`\`ts
+ * isBrowserExecutable('/opt/google/chrome/chrome')
+ * \`\`\`
+ */
+${EXPORT_KEYWORD} function isBrowserExecutable(path: string): boolean {
+	try {
+		if (!statSync(path).isFile()) return false
+		accessSync(path, FS_CONSTANTS.X_OK)
+		return true
+	} catch {
+		return false
+	}
+}
+
 /**
- * Resolve a launchable Chromium executable: the pinned revision when installed,
+ * Resolve a launchable Playwright-managed Chromium executable: the pinned revision when installed,
  * otherwise a \`chromium\` / \`chromium.exe\` alias or any other \`chromium-*\`
  * revision under the same Playwright browsers directory. A pinned-revision miss
  * is not Chromium absence — managed containers ship one usable build (often
  * behind a revision-agnostic alias) for many Playwright versions.
+ *
+ * @param pinned - The executable path for Playwright's pinned Chromium revision.
+ * @returns The managed executable path, or \`undefined\` when none is executable.
+ *
+ * @example
+ * \`\`\`ts
+ * resolveManagedBrowser(chromium.executablePath())
+ * \`\`\`
  */
-${EXPORT_KEYWORD} function resolveChromium(pinned: string): string | undefined {
-	if (existsSync(pinned)) return pinned
+${EXPORT_KEYWORD} function resolveManagedBrowser(pinned: string): string | undefined {
+	if (isBrowserExecutable(pinned)) return pinned
 	let revisionRoot = dirname(pinned)
 	for (;;) {
 		if (/^chromium-\\d+$/.test(basename(revisionRoot))) break
@@ -7291,7 +7352,7 @@ ${EXPORT_KEYWORD} function resolveChromium(pinned: string): string | undefined {
 	const browsersRoot = dirname(revisionRoot)
 	for (const alias of ['chromium', 'chromium.exe']) {
 		const candidate = resolvePath(browsersRoot, alias)
-		if (existsSync(candidate) && statSync(candidate).isFile()) return candidate
+		if (isBrowserExecutable(candidate)) return candidate
 	}
 	let entries: readonly string[]
 	try {
@@ -7305,18 +7366,89 @@ ${EXPORT_KEYWORD} function resolveChromium(pinned: string): string | undefined {
 	for (const revision of revisions) {
 		for (const layout of CHROMIUM_LAYOUTS) {
 			const candidate = resolvePath(browsersRoot, revision, layout)
-			if (existsSync(candidate)) return candidate
+			if (isBrowserExecutable(candidate)) return candidate
+		}
+	}
+	return undefined
+}
+
+/**
+ * Resolve the first installed stable system Chromium channel.
+ *
+ * @param platform - The Node platform whose standard layouts should be probed.
+ * @param environment - The process environment supplying Windows installation roots.
+ * @returns \`chrome\`, then \`msedge\`, or \`undefined\` when neither is executable.
+ *
+ * @example
+ * \`\`\`ts
+ * resolveSystemBrowser(process.platform, process.env)
+ * \`\`\`
+ */
+${EXPORT_KEYWORD} function resolveSystemBrowser(
+	platform: NodeJS.Platform,
+	environment: NodeJS.ProcessEnv,
+): string | undefined {
+	if (platform !== 'linux' && platform !== 'darwin' && platform !== 'win32') return undefined
+	const roots = new Set<string>()
+	if (platform === 'win32') {
+		for (const root of [
+			environment.LOCALAPPDATA,
+			environment.PROGRAMFILES,
+			environment['PROGRAMFILES(X86)'],
+		]) {
+			if (root !== undefined && root.length > 0) roots.add(root)
+		}
+		const homeDrive = environment.HOMEDRIVE
+		if (homeDrive !== undefined && homeDrive.length > 0) {
+			roots.add(join(homeDrive, 'Program Files'))
+			roots.add(join(homeDrive, 'Program Files (x86)'))
+		}
+	}
+	for (const browser of SYSTEM_BROWSER_CHANNELS) {
+		if (platform === 'win32') {
+			for (const root of roots) {
+				if (isBrowserExecutable(join(root, ...browser.layouts.win32))) return browser.channel
+			}
+			continue
 		}
+		if (isBrowserExecutable(browser.layouts[platform])) return browser.channel
 	}
 	return undefined
 }
 
-${CONST_KEYWORD} chromiumPinned = chromium.executablePath()
-${CONST_KEYWORD} chromiumPath = resolveChromium(chromiumPinned)
-${CONST_KEYWORD} chromiumOptions =
-	chromiumPath === undefined || chromiumPath === chromiumPinned
-		? {}
-		: { launchOptions: { executablePath: chromiumPath } }
+/**
+ * Resolve launch options for a managed Chromium or stable system browser.
+ *
+ * @param pinned - The executable path for Playwright's pinned Chromium revision.
+ * @param platform - The Node platform whose standard system layouts should be probed.
+ * @param environment - The process environment supplying Windows installation roots.
+ * @returns Provider options for managed Chromium, Chrome, or Edge, or \`undefined\`.
+ *
+ * @remarks
+ * An installed pinned revision returns an empty object so Playwright retains
+ * its default launch semantics. A different managed executable is selected by
+ * path; a system browser is selected by its stable Playwright channel.
+ *
+ * @example
+ * \`\`\`ts
+ * resolveBrowser(chromium.executablePath(), process.platform, process.env)
+ * \`\`\`
+ */
+${EXPORT_KEYWORD} function resolveBrowser(
+	pinned: string,
+	platform: NodeJS.Platform,
+	environment: NodeJS.ProcessEnv,
+): PlaywrightProviderOptions | undefined {
+	const managed = resolveManagedBrowser(pinned)
+	if (managed !== undefined) {
+		return managed === pinned ? {} : { launchOptions: { executablePath: managed } }
+	}
+	const channel = resolveSystemBrowser(platform, environment)
+	return channel === undefined ? undefined : { launchOptions: { channel } }
+}
+
+${CONST_KEYWORD} browserPinned = chromium.executablePath()
+${CONST_KEYWORD} browserOptions = resolveBrowser(browserPinned, process.platform, process.env)
 ` : ""}
 ${EXPORT_KEYWORD} function resolveWorkspacePath(relativePath: string): string {
 	return fileURLToPath(new URL(relativePath, import.meta.url))
@@ -7365,7 +7497,9 @@ ${needsBrowser ? `${EXPORT_KEYWORD} function gateBrowserProjects(
 		projects.push(registration.project())
 	}
 	if (gated.length === 0) return { projects }
-	console.warn(\`browser projects skipped: Chromium absent (\${gated.join(', ')})\`)
+	console.warn(
+		\`browser projects skipped: no Playwright Chromium, Chrome, or Edge found (\${gated.join(', ')})\`,
+	)
 	const filters: string[] = []
 	let readable = true
 	for (let index = 0; index < argv.length; index += 1) {
@@ -7656,7 +7790,7 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 						}),
 				browser: {
 					enabled: true,
-					provider: playwright(chromiumOptions),
+					provider: playwright(browserOptions),
 					instances: [{ browser: 'chromium', headless: true }],
 				},
 				fileParallelism: false,
@@ -7788,7 +7922,7 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 							}),
 					browser: {
 						enabled: true,
-						provider: playwright(chromiumOptions),
+						provider: playwright(browserOptions),
 						instances: [{ browser: 'chromium', headless: true }],
 					},
 					fileParallelism: false,
@@ -7953,7 +8087,7 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 						}),
 				browser: {
 					enabled: true,
-					provider: playwright(chromiumOptions),
+					provider: playwright(browserOptions),
 					instances: [{ browser: 'chromium', headless: true }],
 				},
 				fileParallelism: false,
@@ -8082,7 +8216,7 @@ ${EXPORT_KEYWORD} function appBrowser(...config: readonly never[]): UserConfig {
 			},
 			browser: {
 				enabled: true,
-				provider: playwright(chromiumOptions),
+				provider: playwright(browserOptions),
 				instances: [{ browser: 'chromium', headless: true }],
 			},
 			fileParallelism: false,
@@ -8649,8 +8783,7 @@ function paritySpecifiers(spec) {
 function testArtifacts(spec, pascal) {
 	const hasBrowser = spec.src.includes("browser") || spec.app.includes("browser");
 	const hasVue = spec.app.includes("browser");
-	const browserPolicySpecifier = hasBrowser ? ", accessSync, constants as FS_CONSTANTS, statSync" : "";
-	const browserPolicyImport = hasBrowser ? "\nimport { chromium } from 'playwright'\nimport { resolveChromium } from '../vite.config.js'" : "";
+	const browserPolicyImport = hasBrowser ? "\nimport { chromium } from 'playwright'\nimport { isBrowserExecutable, resolveBrowser, SYSTEM_BROWSER_CHANNELS } from '../vite.config.js'" : "";
 	const vuePolicyImport = hasVue ? "\nimport { parse as parseVue } from 'vue/compiler-sfc'" : "";
 	const workspacePolicyAssertion = hasVue ? `expect(
 			inspectCodingWorkspace(process.cwd(), (path, content) => {
@@ -8663,15 +8796,20 @@ function testArtifacts(spec, pascal) {
 		).toEqual([])` : "expect(inspectCodingWorkspace(process.cwd())).toEqual([])";
 	const browserPolicyTest = hasBrowser ? `
 
-	it('resolves Chromium only to a real executable file', () => {
-		const chromiumPath = resolveChromium(chromium.executablePath())
-		if (chromiumPath === undefined) return
-
-		expect(statSync(chromiumPath).isFile()).toBe(true)
-		expect(() => accessSync(chromiumPath, FS_CONSTANTS.X_OK)).not.toThrow()
+	it('resolves only a real managed executable or stable system browser channel', () => {
+		const options = resolveBrowser(chromium.executablePath(), process.platform, process.env)
+		let valid = options === undefined
+		if (options !== undefined) {
+			const channel = options.launchOptions?.channel
+			valid =
+				channel === undefined
+					? isBrowserExecutable(options.launchOptions?.executablePath ?? chromium.executablePath())
+					: SYSTEM_BROWSER_CHANNELS.some((browser) => browser.channel === channel)
+		}
+		expect(valid).toBe(true)
 	})` : "";
 	const artifacts = [fillArtifact("tests/setup.ts", "tests", "setup", {}), fillArtifact("tests/policy.test.ts", "tests", "policyTest", {
-		browserPolicySpecifier,
+		browserPolicySpecifier: "",
 		browserPolicyImport,
 		browserPolicyTest,
 		vuePolicyImport,