@tea-agent/loop-agent 0.43.0-next.16 → 0.43.0-next.18

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## [Unreleased]
 
+- 修复后端标准与前端研发工作流对同一 PRD 编号风格容忍度不一致：验收标准写作 `AC1`（不加连字符）时后端一次通过、前端却在 DAG 生成期硬失败，且只报 `Invalid` 加一个 JSON 指针；需求 id 现统一规范化为 `AC-1` 形式，非法形态的报错也自带期望格式。
+- 前端实现不再对没有构建步骤的合法项目无意义失败：静态验证改为按序取项目**真实拥有**的检查（`build` → 任务声明的静态 `--verify` → 项目自身 `typecheck`/`check`），不再在 writer 已交付正确且测试全过之后才因缺少 `npm run build` 报失败；两者都没有时仍保持原有 `build` 命令，不以 no-op 伪造验证。lint 继续不进入本工作流。
+- 修复契约重复提交同一需求导致前端 Plan 节点确定性失败（`coverage must partition complete execution groups exactly once`）：覆盖率归属前对需求 id 做保序去重。
+- 修复前端 Mock 策略提示词自相矛盾（同时要求“只允许 not-needed”与“有项目证据可选安全策略”）导致 Plan 误选策略、被下游门禁拒绝后整轮失败；硬约束生效时不再输出那句许可性指令。
+
+- Operator Chat 新增对话驱动的真实浏览器自动化：右侧「浏览器」面板改为工作区级 iframe 视图并同步共享浏览器状态，登录态与下载隔离保存在仓库外应用数据；模型可操作同一浏览器进行地址导航、搜索、AI 结构化快照与元素操作、标签页、弹窗、滚动、等待和截图；面板轮询不再生成截图与结构化树，浏览保持流畅，自动化不读取或修改仓库文件，也不暴露任意页面脚本执行。
+- 模型驱动的共享浏览器默认改为可见外部窗口，并保留右侧 iframe 预览；地址、搜索和元素操作不再默认生成大截图，搜索从首页逐字填写并提交真实表单，浏览器启动降低自动化指纹，侧边栏轻量同步外部标题与地址并可聚焦窗口，拒绝嵌入的页面也提供外部状态与聚焦入口，用户可在同一持久 profile 中完成站点安全验证。
+
 - 修复前端实现因测试名称没有 VT 编号而反复失败：按测试命令与文件关联执行结果，保留已有测试名称及测试失败阻断。
 
 - 整理设置弹窗布局：当前工作区优先、待处理文件紧凑分组、详情按需展开，全局程序信息收拢；窄屏导航改为横向排列。
@@ -10,7 +18,6 @@
 
 - 前端实现恢复已有测试维护与执行：优先任务声明，否则复用项目测试入口；没有测试时不强制补框架，避免只构建通过却遗漏旧单测回归。
 
-- Operator Chat 新增对话驱动的侧边栏浏览器自动化：模型可在工作流 / Pi 会话调用 `browser_navigate` / `browser_search` / `browser_inspect` / `browser_act`，把百度等页面打开到右侧浏览器面板，执行静态搜索、GET 表单填充提交、链接点击并返回结构化页面元素；命令通道按工作区隔离，自动化不读取或修改仓库文件，也不执行页面脚本。
 
 - 修复前端 Plan 无法提交实现步骤的问题：finalize_plan 支持按 AC 绑定实施动作，缺漏在节点内返回修正，避免空计划反复进入设计审查。
 

package/dist/application/dag/args.js

@@ -34,6 +34,8 @@ export function parseDagRunTaskArgs(args, defaultCwd) {
     let profileExplicit = false;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--output" || arg === "-o") {
             outputPath = args[++i];
             if (!outputPath) {
@@ -165,6 +167,8 @@ export function parseDagValidateArgs(args) {
     let spineTaskId;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--dag") {
             dagPath = args[++i];
             if (!dagPath) {
@@ -264,6 +268,8 @@ export function parseRunDagArgs(args, defaultCwd) {
     let workerAssociation;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--dag") {
             dagPath = args[++i];
         }
@@ -398,6 +404,8 @@ export function parseDagReportArgs(args) {
     let action;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--run-id") {
             runId = args[++i];
             continue;

package/dist/build-stamp.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "0.43.0-next.16",
-  "gitSha": "237591777d28ec25d8ecb561db2bd0e64380e05c",
-  "builtAt": "2026-09-11T07:27:48.993Z"
+  "version": "0.43.0-next.18",
+  "gitSha": "bc11e1415f26468377416cbd2142982dcc6e1dc8",
+  "builtAt": "2026-09-12T15:10:11.966Z"
 }

package/dist/cli/command-definitions.js

@@ -67,6 +67,8 @@ export function formatSubcommandUsageError(name, subcommands) {
 export function parseSummaryFlag(tokens) {
     for (let i = 0; i < tokens.length; i += 1) {
         const token = tokens[i];
+        if (token === undefined)
+            continue;
         if (token === "--summary") {
             return tokens[i + 1];
         }

package/dist/cli/program.js

@@ -96,7 +96,7 @@ function commandChain(command) {
 async function dispatchRegisteredCommand(commandObject, defaultRepoRoot, rawArgs) {
     const chain = commandChain(commandObject);
     const command = chain[0] ?? "";
-    const [subcommand, ...rest] = chain.length <= 1 ? rawArgs : [chain[1], ...chain.slice(2), ...rawArgs];
+    const [subcommand, ...rest] = chain.length <= 1 ? rawArgs : [chain[1] ?? "", ...chain.slice(2), ...rawArgs];
     const options = collectGlobalOptions(commandObject);
     const quiet = (command === "doctor" &&
         [...rest, ...rawArgs].some((token) => token === "--json")) ||
@@ -397,6 +397,8 @@ function compactArgs(args) {
 function parsePlanSummaryFlag(tokens) {
     for (let i = 0; i < tokens.length; i += 1) {
         const token = tokens[i];
+        if (token === undefined)
+            continue;
         if (token === "--summary") {
             return tokens[i + 1];
         }

package/dist/cli/update/init-surface-notifier.js

@@ -136,6 +136,8 @@ export function resolveInitSurfaceRepoRoot(argv, defaultRepoRoot) {
     let selected = defaultRepoRoot;
     for (let index = 0; index < argv.length; index += 1) {
         const arg = argv[index];
+        if (arg === undefined)
+            break;
         if (arg === "--repo-root") {
             const value = argv[index + 1];
             if (value && !value.startsWith("-"))

package/dist/cli/update/policy.js

@@ -81,6 +81,8 @@ export function evaluateLatestVersion(input) {
 function firstCommand(argv) {
     for (let index = 0; index < argv.length; index += 1) {
         const arg = argv[index];
+        if (arg === undefined)
+            break;
         if (GLOBAL_VALUE_FLAGS.has(arg)) {
             index += 1;
             continue;

package/dist/commands/cursor-prompt.js

@@ -64,6 +64,8 @@ export function parseCursorPromptArgs(args) {
             continue;
         }
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--stream") {
             stream = true;
         }

package/dist/commands/dag-approve.js

@@ -11,6 +11,8 @@ export function parseDagApproveArgs(args) {
     let notes;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--run-id") {
             runId = args[++i];
             continue;

package/dist/commands/dag-final-verification.js

@@ -10,6 +10,8 @@ export function parseDagFinalVerificationArgs(args) {
     let closeoutPath;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === '--output' || arg === '-o') {
             outputPath = requiredValue(args[++i], '--output');
         }

package/dist/commands/dag-init-hybrid.js

@@ -9,6 +9,8 @@ export function parseDagInitHybridArgs(args) {
     let outputPath;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--output" || arg === "-o") {
             outputPath = args[++i];
             if (!outputPath) {

package/dist/commands/dag-reconcile-tasks.js

@@ -20,6 +20,8 @@ export function parseDagReconcileTasksArgs(args) {
     let markdown = false;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === '--glob') {
             glob = requiredValue(args[++i], '--glob');
         }

package/dist/commands/dag-reject.js

@@ -8,6 +8,8 @@ export function parseDagRejectArgs(args) {
     let reason;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--run-id") {
             runId = args[++i];
             continue;

package/dist/commands/dag-report.js

@@ -29,6 +29,8 @@ export function parseDagCloseoutDraftArgs(args) {
     let outputPath;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         const requireValue = (flag) => {
             const value = args[++i];
             if (!value || value.startsWith("-")) {

package/dist/commands/dag-rerun.js

@@ -22,6 +22,8 @@ export function parseDagRerunArgs(args) {
     const promptOverrideAppendSpecs = [];
     for (let index = 0; index < args.length; index += 1) {
         const arg = args[index];
+        if (arg === undefined)
+            break;
         if (arg === "--run-id")
             parentRunId = args[++index];
         else if (arg.startsWith("--run-id="))

package/dist/commands/dag-resume.js

@@ -6,6 +6,8 @@ export function parseDagResumeArgs(args) {
     let runId;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--run-id") {
             runId = args[++i];
             continue;

package/dist/commands/dag-workflow-compile.js

@@ -12,6 +12,8 @@ export function parseDagWorkflowCompileArgs(args) {
     let manifestPath;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--workflow") {
             workflowPath = args[++i];
             if (!workflowPath) {

package/dist/commands/dag-workflow-plan.js

@@ -21,6 +21,8 @@ export function parseDagWorkflowPlanArgs(args) {
     const changedFiles = [];
     for (let i = 0; i < rest.length; i += 1) {
         const arg = rest[i];
+        if (arg === undefined)
+            break;
         if (arg === "--profile") {
             const value = rest[++i];
             if (!value)

package/dist/commands/dag-workflow-validate.js

@@ -11,6 +11,8 @@ export function parseDagWorkflowValidateArgs(args) {
     let strictGovernance = false;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--workflow") {
             workflowPath = args[++i];
             if (!workflowPath) {

package/dist/commands/delegate.js

@@ -16,6 +16,8 @@ export function parseDelegateArgs(args) {
     let autoRun = false;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--base") {
             base = args[i + 1];
             if (!base)

package/dist/commands/examples.js

@@ -57,6 +57,8 @@ function parseExamplesArgs(args) {
     let output;
     for (let i = 0; i < rest.length; i += 1) {
         const arg = rest[i];
+        if (arg === undefined)
+            break;
         if (arg === "--output" || arg === "-o") {
             output = rest[++i];
             continue;

package/dist/commands/import-prd.js

@@ -5,6 +5,8 @@ export function parseImportPrdArgs(args) {
     const positional = [];
     for (let index = 0; index < args.length; index += 1) {
         const token = args[index];
+        if (token === undefined)
+            continue;
         if (token === "--file" || token === "-f") {
             options.file = args[index + 1];
             index += 1;

package/dist/commands/init-model-catalog.js

@@ -252,6 +252,8 @@ export function parseOpenCodeModelReferences(value, credentialProviders = new Se
         if (!match)
             continue;
         const [, provider, modelId] = match;
+        if (provider === undefined || modelId === undefined)
+            continue;
         const model = createCatalogEntry({
             source: "opencode",
             provider,

package/dist/commands/init.js

@@ -2842,7 +2842,7 @@ function modelMergeTaskFor(pathName, state, allPaths, recordedState) {
         taskId: `init-merge-${sha256Text(pathName).slice(0, 12)}`,
         path: pathName,
         reason: "target file exists but does not match the current loop-agent initialization surface",
-        sourcePath: state.sourcePath,
+        sourcePath: state?.sourcePath,
         allowedPaths: [pathName],
         forbiddenPaths: [
             ...allPaths.filter((candidate) => candidate !== pathName),
@@ -2861,9 +2861,9 @@ function modelMergeTaskFor(pathName, state, allPaths, recordedState) {
         ],
         evidence: {
             baseSha256: recordedState?.files[pathName]?.currentSha256,
-            currentSha256: state.currentSha256,
-            desiredSha256: state.sourceSha256,
-            sourceAnchorSha256: state.sourceAnchorSha256,
+            currentSha256: state?.currentSha256,
+            desiredSha256: state?.sourceSha256,
+            sourceAnchorSha256: state?.sourceAnchorSha256,
         },
     };
 }
@@ -3743,6 +3743,8 @@ function parseInitArgs(repoRoot, args) {
     let versionChoice;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if ((arg === "instructions" ||
             arg === "doctor" ||
             arg === "model-catalog" ||

package/dist/commands/instructions.js

@@ -18,6 +18,8 @@ export function parseInstructionsArgs(args) {
     let json = false;
     for (let i = 0; i < rest.length; i += 1) {
         const arg = rest[i];
+        if (arg === undefined)
+            break;
         if (arg === "--task") {
             taskId = rest[++i];
             if (!taskId)

package/dist/commands/knowledge.js

@@ -68,6 +68,8 @@ export function parseKnowledgeArgs(args) {
         let markdown = false;
         for (let i = 0; i < rest.length; i += 1) {
             const arg = rest[i];
+            if (arg === undefined)
+                break;
             if (arg === "--json") {
                 json = true;
                 continue;

package/dist/commands/loop-benchmark.js

@@ -6,6 +6,8 @@ export function parseLoopBenchmarkArgs(args) {
     let outputPath;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--json") {
             json = true;
             continue;

package/dist/commands/pi-prompt.js

@@ -66,6 +66,8 @@ export function parsePiPromptArgs(args) {
             continue;
         }
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--provider") {
             provider = args[i + 1];
             if (!provider)

package/dist/commands/pi-reuse-benchmark.js

@@ -11,6 +11,8 @@ export function parsePiReuseBenchmarkArgs(args) {
     let markdown = false;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === "--json") {
             json = true;
             continue;

package/dist/commands/promote-run.js

@@ -6,6 +6,8 @@ export function parsePromoteRunArgs(args) {
     let runId;
     for (let i = 0; i < rest.length; i += 1) {
         const arg = rest[i];
+        if (arg === undefined)
+            break;
         if (arg === '--run-id') {
             runId = rest[++i];
             if (!runId)

package/dist/commands/stats.js

@@ -6,7 +6,7 @@ function percentile(values, p) {
         return null;
     const sorted = [...values].sort((a, b) => a - b);
     const index = Math.ceil((p / 100) * sorted.length) - 1;
-    return sorted[Math.max(0, index)];
+    return sorted[Math.max(0, index)] ?? null;
 }
 function formatMs(ms) {
     if (ms >= 60_000)

package/dist/commands/study-init.js

@@ -16,6 +16,8 @@ function parseStudyInitArgs(args) {
     const positional = [];
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
+        if (arg === undefined)
+            break;
         if (arg === '--reference-repo') {
             const value = args[i + 1];
             if (!value)

package/dist/commands/task-advance.js

@@ -84,6 +84,8 @@ export function parseTaskAdvanceArgs(args) {
     const positional = [];
     for (let i = 0; i < args.length; i += 1) {
         const token = args[i];
+        if (token === undefined)
+            continue;
         const next = () => {
             const value = args[i + 1];
             if (value === undefined || value.startsWith("-")) {

package/dist/commands/task-source-prepare.js

@@ -43,6 +43,8 @@ export function parseTaskSourcePrepareArgs(args) {
     const positional = [];
     for (let i = 0; i < args.length; i += 1) {
         const token = args[i];
+        if (token === undefined)
+            continue;
         const next = () => {
             const value = args[i + 1];
             if (value === undefined || value.startsWith("-")) {

package/dist/commands/worktree-create.js

@@ -7,6 +7,8 @@ export async function runWorktreeCreate(repoRoot, args) {
     const positionalArgs = [];
     for (let i = 0; i < args.length; i++) {
         const token = args[i];
+        if (token === undefined)
+            continue;
         if (token === '--base') {
             base = args[++i];
             if (!base)

package/dist/commands/worktree-remove.js

@@ -6,6 +6,8 @@ export async function runWorktreeRemove(repoRoot, args) {
     const positionalArgs = [];
     for (let i = 0; i < args.length; i++) {
         const token = args[i];
+        if (token === undefined)
+            continue;
         if (token === '--force') {
             force = true;
         }

package/dist/executors/dag-pi-executor.js

@@ -4560,6 +4560,27 @@ function buildFrontendPlanWorkload(input) {
             countFrontendPlanTargetSurfaces(input.basePrompt) === 1,
     };
 }
+/**
+ * Requirement ids the plan coverage layout must own, in first-commit order.
+ *
+ * The contract ledger is append-only and `record_requirement` is incremental, so
+ * the same id can legitimately be committed more than once. Deduplicating here is
+ * load-bearing: `buildFrontendPlanWorkload` seeds one `unclassified` work group per
+ * list entry without re-checking membership, so a repeated id produced two groups,
+ * `buildWorkBatches` emitted the id twice, and the coverage-layout validator then
+ * rejected the layout the runtime had derived itself (members 8 !== owners 7) as
+ * FRONTEND_PLAN_LAYOUT_INVALID with failureCategory tool-policy - killing the run
+ * at the plan node over a completely ordinary ledger.
+ */
+export function collectFrontendPlanRequirementIds(contractFacts) {
+    return [
+        ...new Set(contractFacts
+            .filter((record) => record.fact?.kind ===
+            "requirement")
+            .map((record) => record.fact?.id)
+            .filter((id) => typeof id === "string")),
+    ];
+}
 const frontendPlanCoverageLayoutSchema = z.object({
     schemaVersion: z.literal(1),
     bindingSha256: z.string(),
@@ -4901,6 +4922,8 @@ export async function runFrontendPlanSegmentedSessions(input) {
     let lastDurableCount = input.committedFactCount();
     while (index < queue.length) {
         const session = queue[index];
+        if (!session)
+            break;
         if (input.attempt > 1 && input.committedFacts && session.id === "ux-registry" &&
             collectFrontendPlanPhaseMissingFacts({ phase: "ux-registry", requirementIds: allRequirementIds, committedFacts: input.committedFacts() }).length === 0) {
             index += 1;
@@ -5112,7 +5135,7 @@ export async function runFrontendPlanSegmentedSessions(input) {
         if (recovery === "stop")
             return { ...result, ok: false };
         if ((recovery === "output" || (session.atomicRecovery && result.ok)) && input.committedFacts &&
-            !(missingPhaseFacts.length === 1 && missingPhaseFacts[0].kind === "plan-requirement") &&
+            !(missingPhaseFacts.length === 1 && missingPhaseFacts[0]?.kind === "plan-requirement") &&
             (session.coverageOnly || isUxRegistrySession || isUxLocalSession || session.id.startsWith("global-mock-data"))) {
             if (missingPhaseFacts.length === 0) {
                 // A complete validated slice does not need a successful prose turn.
@@ -6042,11 +6065,7 @@ export async function executeDagPiNode(input, meta, piStepFn = executePiStep, wr
                 // (SPLIT-*) that all have ids — feeding those into the coverage
                 // batches made the model record non-frozen plan-requirement ids
                 // that finalize's canonical-coverage gate then rejected (r-ext2).
-                planRequirementIds = contractFacts
-                    .filter((record) => record.fact
-                    ?.kind === "requirement")
-                    .map((record) => record.fact?.id)
-                    .filter((id) => typeof id === "string");
+                planRequirementIds = collectFrontendPlanRequirementIds(contractFacts);
                 for (const fact of resolveFrontendContractRequirements(contractFacts.map((record) => record.fact))) {
                     if (fact.evidence.behavior === "required")
                         behaviorRequiredRequirementIds.push(fact.id);

package/dist/executors/shell-verification.js

@@ -138,6 +138,9 @@ export function renderVerifyReport(results) {
 export async function executeCommand(command, defaultTimeoutMs = DEFAULT_VERIFY_TIMEOUT_MS) {
     return new Promise((resolve, reject) => {
         const [binary, ...args] = command.args;
+        if (binary === undefined) {
+            throw new Error("verify command requires a non-empty args array");
+        }
         const timeoutMs = command.timeoutMs ?? defaultTimeoutMs;
         const startedAt = Date.now();
         const child = spawn(binary, args, {

package/dist/governance/exec-plans.js

@@ -174,7 +174,7 @@ function localIndexReference(rawReference) {
         .trim()
         .replace(/^<|>$/g, "")
         .split(/[?#]/, 1)[0]
-        .replaceAll("\\", "/");
+        ?.replaceAll("\\", "/") ?? "";
     if (!normalized.endsWith(".md") || normalized.includes("/"))
         return null;
     // Naming-convention placeholders (e.g. `YYYY-MM-DD-<topic>.md`) and other
@@ -332,6 +332,8 @@ function findInsertionPointForActiveEntry(lines) {
     // trailing section (blank-line separated context), or at the end.
     for (let i = 0; i < lines.length; i += 1) {
         const line = lines[i];
+        if (line === undefined)
+            break;
         if (/^[-*]\s+已归档/.test(line))
             return i;
         if (/^[-*]\s+`[^`]+\.md`/.test(line)) {
@@ -357,7 +359,8 @@ function removeIndexEntries(indexContent, file) {
     const lines = indexContent.split(/\r?\n/);
     const filtered = lines.filter((line) => {
         const linkMatch = line.match(/\[[^\]]*\]\(([^)]+)\)/);
-        if (linkMatch && path.basename(linkMatch[1]) === file)
+        const linkTarget = linkMatch?.[1];
+        if (linkTarget !== undefined && path.basename(linkTarget) === file)
             return false;
         if (line.includes(`\`${file}\``))
             return false;
@@ -375,7 +378,7 @@ function collapseBlankRuns(lines) {
         result.push(line);
         prevBlank = isBlank;
     }
-    while (result.length > 0 && result[result.length - 1].trim() === "") {
+    while (result.length > 0 && result[result.length - 1]?.trim() === "") {
         result.pop();
     }
     return result;

package/dist/infrastructure/console/app-data.js

@@ -45,6 +45,9 @@ export function openConsoleAppData(options) {
         chats: path.join(repoNamespace, "chats"),
         chatSessions: path.join(repoNamespace, "chat-sessions"),
         chatEvents: path.join(repoNamespace, "chat-events"),
+        browserProfile: path.join(repoNamespace, "browser-profile"),
+        browserDownloads: path.join(repoNamespace, "browser-downloads"),
+        browserScreenshots: path.join(repoNamespace, "browser-screenshots"),
         resourcePreferences: path.join(repoNamespace, "resource-preferences.json"),
     };
     for (const dir of [
@@ -60,6 +63,9 @@ export function openConsoleAppData(options) {
         paths.chats,
         paths.chatSessions,
         paths.chatEvents,
+        paths.browserProfile,
+        paths.browserDownloads,
+        paths.browserScreenshots,
         path.dirname(paths.resourcePreferences),
     ]) {
         ensureSecureDir(dir);

package/dist/shared/artifacts-core.js

@@ -81,6 +81,8 @@ function isUnchangedNewTaskTemplate(step, content) {
 }
 function firstRequiredSectionIsEmpty(step, content) {
     const [, firstSectionHeading] = REQUIRED_HEADINGS[step];
+    if (!firstSectionHeading)
+        return false;
     const headingIndex = content.indexOf(firstSectionHeading);
     if (headingIndex < 0) {
         return false;

package/dist/shared/git-progress.js

@@ -112,6 +112,8 @@ function globToRegExp(pattern) {
     let regex = '^';
     for (let i = 0; i < normalized.length; i += 1) {
         const char = normalized[i];
+        if (char === undefined)
+            continue;
         const next = normalized[i + 1];
         if (char === '*' && next === '*') {
             const afterGlobstar = normalized[i + 2];

package/dist/shared/one-shot-prompt-args.js

@@ -8,6 +8,8 @@ export function createOneShotPromptParseAccum() {
 }
 export function parseOneShotCommonFlag(args, index, accum) {
     const arg = args[index];
+    if (arg === undefined)
+        return { kind: "not-common" };
     if (arg === "--stdin") {
         accum.fromStdin = true;
         return { kind: "consumed", nextIndex: index };

package/dist/shared/package-metadata.js

@@ -134,8 +134,10 @@ export function computePackageFingerprint(packageRoot) {
         const bBuf = Buffer.from(b.relativePath, "utf-8");
         const minLen = Math.min(aBuf.length, bBuf.length);
         for (let i = 0; i < minLen; i++) {
-            if (aBuf[i] !== bBuf[i])
-                return aBuf[i] - bBuf[i];
+            const aByte = aBuf[i];
+            const bByte = bBuf[i];
+            if (aByte !== bByte)
+                return (aByte ?? 0) - (bByte ?? 0);
         }
         return aBuf.length - bBuf.length;
     });
@@ -183,8 +185,8 @@ export function resolveBinPaths(requested, resolvedAt, inputs) {
     // Search PATH
     const pathEnv = env.PATH ?? env.Path ?? env.path ?? "";
     const candidates = resolveFromPath(requested, pathEnv, osPlatform, env.PATHEXT ?? env.Pathext ?? env.pathext, cwd);
-    if (candidates.length > 0) {
-        const entry = candidates[0];
+    const entry = candidates[0];
+    if (entry !== undefined) {
         assertRegularFile(entry, requested);
         return { requested, entry, realEntry: realpathSync(entry), resolvedAt };
     }

package/dist/shared/pi-context-pressure/sift-bridge.js

@@ -268,7 +268,7 @@ export function sliceUtf8Range(text, offset, maxBytes) {
     }
     const buffer = Buffer.from(text, "utf8");
     let end = Math.min(totalBytes, start + limit);
-    while (end > start && (buffer[end] & 0b1100_0000) === 0b1000_0000) {
+    while (end > start && ((buffer[end] ?? 0) & 0b1100_0000) === 0b1000_0000) {
         end -= 1;
     }
     const slice = buffer.subarray(start, end).toString("utf8");

package/dist/shared/reference-context.js

@@ -186,6 +186,8 @@ function globToRegExp(glob) {
     let regex = '^';
     for (let i = 0; i < glob.length; i += 1) {
         const char = glob[i];
+        if (char === undefined)
+            continue;
         if (char === '*') {
             const next = glob[i + 1];
             if (next === '*') {