@zixt/host 0.0.109 → 0.0.111

package/README.md

@@ -86,8 +86,13 @@ Run `zixt-host --help` for logging flags.
 
 ## Teammate browsing
 
-If your teammates use the live browser, install the pinned Chromium once:
+On first start, Zixt checks for its exact Chromium revision and downloads it
+automatically when needed. If that download fails, run the matching installer
+as the same OS user that runs Zixt:
 
 ```bash
-npx playwright-core install chromium
+npx -y playwright-core@1.61.1 install chromium
 ```
+
+On Windows, use `npx.cmd` instead of `npx`; this works from Command Prompt and
+from PowerShell even when its execution policy blocks npm's `.ps1` shim.

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.109",
+  version: "0.0.111",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -14602,6 +14602,8 @@ var ID_PREFIXES = {
   org: "org",
   member: "mem",
   agent: "agt",
+  /** One bounded image owned by an AI teammate profile. */
+  agentAvatar: "aav",
   host: "hst",
   task: "tsk",
   attempt: "att",
@@ -14705,6 +14707,7 @@ var idSchema = (prefix, name) => external_exports.string().regex(idPattern(prefi
 var OrgId = idSchema(ID_PREFIXES.org, "org id");
 var MemberId = idSchema(ID_PREFIXES.member, "member id");
 var AgentId = idSchema(ID_PREFIXES.agent, "agent id");
+var AgentAvatarId = idSchema(ID_PREFIXES.agentAvatar, "agent avatar id");
 var HostId = idSchema(ID_PREFIXES.host, "host id");
 var TaskId = idSchema(ID_PREFIXES.task, "task id");
 var TaskAttemptId = idSchema(ID_PREFIXES.attempt, "task attempt id");
@@ -15480,6 +15483,8 @@ var Agent = external_exports.object({
   id: AgentId,
   orgId: OrgId,
   name: external_exports.string().min(1).max(120),
+  /** Authenticated profile artwork. Null keeps the deterministic initials fallback. */
+  avatarAssetId: AgentAvatarId.nullable().default(null),
   status: AgentStatus,
   /**
    * Archive has fenced new work but is still waiting for one or more exact
@@ -20411,6 +20416,21 @@ var GenerateAgentInstructionDraftResponse = external_exports.object({
   /** Evidence of the fixed product route; ordinary UI copy does not expose it. */
   model: external_exports.literal(MANAGER_DEFAULT_MODEL)
 }).strict();
+var GenerateManagerInstructionDraftRequest = external_exports.object({
+  existingText: external_exports.string().max(5e4),
+  organizationContext: external_exports.string().max(4e3)
+}).strict();
+var GenerateManagerInstructionDraftResponse = external_exports.object({
+  text: external_exports.string().min(1).max(5e4),
+  model: external_exports.literal(MANAGER_DEFAULT_MODEL)
+}).strict();
+var AGENT_AVATAR_MAX_BYTES = 1024 * 1024;
+var AgentAvatarMediaType = external_exports.enum(["image/png", "image/jpeg", "image/webp"]);
+var UploadAgentAvatarRequest = external_exports.object({
+  mediaType: AgentAvatarMediaType,
+  data: external_exports.string().min(4).max(Math.ceil(AGENT_AVATAR_MAX_BYTES * 4 / 3) + 4)
+}).strict();
+var UploadAgentAvatarResponse = external_exports.object({ agent: Agent, avatarAssetId: AgentAvatarId }).strict();
 var UpdateAgentRequest = external_exports.object({
   name: Agent.shape.name,
   roleDescription: external_exports.string().max(2e3),
@@ -30025,8 +30045,21 @@ var BrowserManager = class {
 };
 
 // src/browser/playwright-adapter.ts
+import { spawn as spawn6 } from "node:child_process";
 import { access as access3 } from "node:fs/promises";
-var BROWSER_INSTALL_REMEDY = "Install the browser on this Machine: run bun run browser:install in the Zixt repo root";
+import { createRequire } from "node:module";
+import { dirname as dirname7, join as join10 } from "node:path";
+var nodeRequire = createRequire(import.meta.url);
+var playwrightCoreManifestPath = nodeRequire.resolve("playwright-core/package.json");
+var playwrightCoreRoot = dirname7(playwrightCoreManifestPath);
+var playwrightCoreVersion = nodeRequire(playwrightCoreManifestPath).version;
+if (typeof playwrightCoreVersion !== "string" || !/^\d+\.\d+\.\d+$/.test(playwrightCoreVersion)) {
+  throw new Error("playwright-core package version is invalid");
+}
+var PLAYWRIGHT_CORE_VERSION = playwrightCoreVersion;
+var BROWSER_INSTALL_COMMAND = `${process.platform === "win32" ? "npx.cmd" : "npx"} -y playwright-core@${PLAYWRIGHT_CORE_VERSION} install chromium`;
+var BROWSER_INSTALL_REMEDY = `Zixt could not install its browser automatically. Run ${BROWSER_INSTALL_COMMAND} as the same user that runs Zixt, then restart Zixt.`;
+var BROWSER_INSTALL_TIMEOUT_MS = 10 * 6e4;
 var READ_TEXT_LIMIT = 4e4;
 var NAVIGATE_TIMEOUT_MS = 3e4;
 var ACTION_TIMEOUT_MS = 1e4;
@@ -30034,9 +30067,44 @@ var LOADING_GIVE_UP_MS = 2e4;
 async function loadPlaywright() {
   return import("playwright-core");
 }
+async function installChromium() {
+  const cliPath = join10(playwrightCoreRoot, "cli.js");
+  await new Promise((resolve18, reject3) => {
+    const child = spawn6(process.execPath, [cliPath, "install", "chromium"], {
+      env: process.env,
+      stdio: ["ignore", "inherit", "inherit"],
+      windowsHide: false
+    });
+    let settled = false;
+    const finish = (error52) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
+      if (error52) reject3(error52);
+      else resolve18();
+    };
+    const timeout = setTimeout(() => {
+      child.kill();
+      finish(new Error("browser download did not finish within 10 minutes"));
+    }, BROWSER_INSTALL_TIMEOUT_MS);
+    child.once("error", (error52) => finish(error52));
+    child.once("exit", (code, signal) => {
+      if (code === 0) finish();
+      else {
+        finish(
+          new Error(
+            signal ? `browser installer stopped with ${signal}` : `browser installer exited with code ${code ?? "unknown"}`
+          )
+        );
+      }
+    });
+  });
+}
 var KEY_ALIASES = { " ": "Space" };
 function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
   const load = dependencies.loadPlaywright ?? loadPlaywright;
+  const install = dependencies.installChromium ?? installChromium;
+  let installation = null;
   const runtimes = /* @__PURE__ */ new Map();
   const runtimeLocks = /* @__PURE__ */ new Map();
   const withRuntimeLock = (profileDir, work) => {
@@ -30080,15 +30148,48 @@ function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
       throw error52;
     }
   });
+  const measureCapability = async () => {
+    try {
+      const playwright = await load();
+      const executable = playwright.chromium.executablePath();
+      if (!executable) return { status: "unavailable", error: BROWSER_INSTALL_REMEDY };
+      await access3(executable);
+      return { status: "ok" };
+    } catch {
+      return { status: "unavailable", error: BROWSER_INSTALL_REMEDY };
+    }
+  };
   return {
     kind: "playwright",
     async capability() {
+      const measured = await measureCapability();
+      if (measured.status === "ok") return measured;
+      if (!installation) {
+        dependencies.onInstallEvent?.({ state: "started" });
+        const attempt = (async () => {
+          await install();
+          const installed = await measureCapability();
+          if (installed.status !== "ok") {
+            throw new Error("the browser executable is still unavailable after installation");
+          }
+          return installed;
+        })();
+        const tracked = attempt.then((installed) => {
+          dependencies.onInstallEvent?.({ state: "completed" });
+          return installed;
+        }).catch((error52) => {
+          dependencies.onInstallEvent?.({
+            state: "failed",
+            error: error52 instanceof Error ? error52.message : "unknown browser installation error"
+          });
+          throw error52;
+        }).finally(() => {
+          if (installation === tracked) installation = null;
+        });
+        installation = tracked;
+      }
       try {
-        const playwright = await load();
-        const executable = playwright.chromium.executablePath();
-        if (!executable) return { status: "unavailable", error: BROWSER_INSTALL_REMEDY };
-        await access3(executable);
-        return { status: "ok" };
+        return await installation;
       } catch {
         return { status: "unavailable", error: BROWSER_INSTALL_REMEDY };
       }
@@ -30598,11 +30699,11 @@ function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
 }
 
 // src/runners/cli-runner.ts
-import { spawn as spawn8 } from "node:child_process";
+import { spawn as spawn9 } from "node:child_process";
 import { randomUUID as randomUUID11 } from "node:crypto";
 import { lstat as lstat11, mkdir as mkdir11, realpath as realpath8 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname8, isAbsolute as isAbsolute15, join as join15, resolve as resolve10 } from "node:path";
+import { dirname as dirname9, isAbsolute as isAbsolute15, join as join16, resolve as resolve10 } from "node:path";
 
 // src/tool-packs/browser/authentication-wall.ts
 var AUTH_PATH_SEGMENT = /(?:^|\/)(?:log[-_]?in|sign[-_]?in|sso|saml|auth|authorize|authenticate|oauth2?|session\/new|checkpoint)(?:\/|$)/i;
@@ -33420,16 +33521,16 @@ function createGithubPushOrchestrator(input) {
 }
 
 // src/tool-packs/github/git-bridge.ts
-import { spawn as spawn6 } from "node:child_process";
+import { spawn as spawn7 } from "node:child_process";
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { chmod as chmod4, lstat as lstat8, mkdir as mkdir7, realpath as realpath5, rm as rm7 } from "node:fs/promises";
-import { dirname as dirname7, isAbsolute as isAbsolute11, join as join11, relative as relative6 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute11, join as join12, relative as relative6 } from "node:path";
 
 // src/tool-packs/github/git-credential-broker.ts
 import { createServer } from "node:http";
 import { randomBytes, randomUUID as randomUUID7, timingSafeEqual } from "node:crypto";
 import { chmod as chmod3, lstat as lstat7, realpath as realpath4, writeFile as writeFile3 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, join as join10, relative as relative5 } from "node:path";
+import { isAbsolute as isAbsolute10, join as join11, relative as relative5 } from "node:path";
 var MAX_REQUEST_BYTES = 16 * 1024;
 var FILE_MODE2 = 384;
 var HELPER_SOURCE = String.raw`'use strict';
@@ -33558,7 +33659,7 @@ async function createGithubGitCredentialBroker(input) {
     throw new Error("Git credential broker requires a private real run directory");
   }
   const runRoot = await realpath4(input.runArtifactsRoot);
-  const helperPath = join10(runRoot, `git-credential-${randomUUID7()}.cjs`);
+  const helperPath = join11(runRoot, `git-credential-${randomUUID7()}.cjs`);
   assertChildPath(runRoot, helperPath);
   await writeFile3(helperPath, HELPER_SOURCE, { flag: "wx", mode: FILE_MODE2 });
   await chmod3(helperPath, FILE_MODE2);
@@ -33674,7 +33775,7 @@ async function requireRealDirectory2(path, label) {
 async function validateTokenlessPaths(command) {
   if (command.kind === "clone-from-bridge") {
     if (!isAbsolute11(command.destination)) throw new GithubGitProcessError("invalid_input");
-    const parent = await requireRealDirectory2(dirname7(command.destination), "clone parent");
+    const parent = await requireRealDirectory2(dirname8(command.destination), "clone parent");
     assertBelow2(parent, command.destination, "clone destination");
     const destination = await lstat8(command.destination).catch((error52) => {
       if (error52.code === "ENOENT") return null;
@@ -33770,7 +33871,7 @@ async function runGit(input, args, env) {
     throw new GithubGitProcessError("invalid_input");
   }
   return new Promise((resolvePromise, rejectPromise) => {
-    const child = spawn6(input.executablePath, [...input.commandPrefixArgs ?? [], ...args], {
+    const child = spawn7(input.executablePath, [...input.commandPrefixArgs ?? [], ...args], {
       cwd: input.trustedCwd,
       env,
       shell: false,
@@ -33962,7 +34063,7 @@ function createGithubGitBridge(input) {
     async createPrivateBridge() {
       if (closed) throw new GithubGitProcessError("cancelled");
       const current = await roots();
-      const path = join11(current.bridges, `${randomUUID8()}.git`);
+      const path = join12(current.bridges, `${randomUUID8()}.git`);
       assertBelow2(current.bridges, path, "git bridge");
       await mkdir7(path, { mode: DIRECTORY_MODE2 });
       await chmod4(path, DIRECTORY_MODE2);
@@ -33980,11 +34081,11 @@ function createGithubGitBridge(input) {
         );
         const real = await requireRealDirectory2(path, "git bridge");
         assertBelow2(current.bridges, real, "git bridge");
-        const hooks = join11(real, "hooks");
+        const hooks = join12(real, "hooks");
         await rm7(hooks, { recursive: true, force: true });
         await mkdir7(hooks, { mode: DIRECTORY_MODE2 });
         await chmod4(hooks, DIRECTORY_MODE2);
-        const config2 = join11(real, "config");
+        const config2 = join12(real, "config");
         await chmod4(config2, 384);
         active.add(real);
         return real;
@@ -34433,7 +34534,7 @@ function createRepositoryTools(runtime) {
 // src/tool-packs/github/workspace.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { chmod as chmod5, lstat as lstat9, mkdir as mkdir8, readFile as readFile9, realpath as realpath6, rename as rename5, rm as rm8, writeFile as writeFile4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute12, join as join12, relative as relative7, resolve as resolve8 } from "node:path";
+import { isAbsolute as isAbsolute12, join as join13, relative as relative7, resolve as resolve8 } from "node:path";
 var SAFE_LOCAL_ID = /^[A-Za-z0-9_-]{1,200}$/;
 var FULL_NAME2 = /^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/;
 var DIRECTORY_MODE3 = 448;
@@ -34470,7 +34571,7 @@ async function requireRealDirectory3(path, label) {
   return real;
 }
 async function createOrRequirePrivateDirectory(parent, name, label) {
-  const path = join12(parent, name);
+  const path = join13(parent, name);
   assertBelow3(parent, path, label);
   try {
     await mkdir8(path, { mode: DIRECTORY_MODE3 });
@@ -34553,8 +34654,8 @@ async function createGithubWorkspaceService(input) {
     if (expectedFullName !== void 0 && repository.fullName !== expectedFullName) {
       throw new Error("GitHub repository name does not match this task grant");
     }
-    const destination = join12(repositoriesRoot, parsed.data);
-    const metadataPath = join12(metadataRoot, `${parsed.data}.json`);
+    const destination = join13(repositoriesRoot, parsed.data);
+    const metadataPath = join13(metadataRoot, `${parsed.data}.json`);
     if (!await pathExists(destination) || !await pathExists(metadataPath)) {
       throw new Error("GitHub repository workspace has not been prepared");
     }
@@ -34571,14 +34672,14 @@ async function createGithubWorkspaceService(input) {
     return real;
   };
   const cloneRepository = async (clone2) => {
-    const destination = join12(repositoriesRoot, clone2.repositoryId);
-    const metadataPath = join12(metadataRoot, `${clone2.repositoryId}.json`);
+    const destination = join13(repositoriesRoot, clone2.repositoryId);
+    const metadataPath = join13(metadataRoot, `${clone2.repositoryId}.json`);
     assertBelow3(repositoriesRoot, destination, "repository path");
     assertBelow3(metadataRoot, metadataPath, "repository metadata");
     if (await pathExists(destination) || await pathExists(metadataPath)) {
       throw new Error("GitHub repository workspace already exists or is inconsistent");
     }
-    const temporary = join12(repositoriesRoot, `.clone-${randomUUID9()}`);
+    const temporary = join13(repositoriesRoot, `.clone-${randomUUID9()}`);
     assertBelow3(repositoriesRoot, temporary, "temporary clone");
     try {
       await input.git.clone({
@@ -34603,7 +34704,7 @@ async function createGithubWorkspaceService(input) {
         path: destination,
         ...clone2.createIntentId === void 0 ? {} : { createIntentId: clone2.createIntentId }
       };
-      const metadataTemporary = join12(metadataRoot, `.${clone2.repositoryId}-${randomUUID9()}.tmp`);
+      const metadataTemporary = join13(metadataRoot, `.${clone2.repositoryId}-${randomUUID9()}.tmp`);
       assertBelow3(metadataRoot, metadataTemporary, "temporary repository metadata");
       await writeFile4(metadataTemporary, `${JSON.stringify(metadata)}
 `, {
@@ -34638,8 +34739,8 @@ async function createGithubWorkspaceService(input) {
   };
   const prepareRepository = async (authority) => {
     const { repository } = authority;
-    const destination = join12(repositoriesRoot, repository.repositoryId);
-    const metadataPath = join12(metadataRoot, `${repository.repositoryId}.json`);
+    const destination = join13(repositoriesRoot, repository.repositoryId);
+    const metadataPath = join13(metadataRoot, `${repository.repositoryId}.json`);
     assertBelow3(repositoriesRoot, destination, "repository path");
     assertBelow3(metadataRoot, metadataPath, "repository metadata");
     return withWorkspaceLock(destination, async () => {
@@ -34804,7 +34905,7 @@ async function createGithubWorkspaceService(input) {
         throw new Error("GitHub created repository is outside this installation");
       }
       parseGitRef(cloneInput.repository.defaultBranch, "default branch");
-      return withWorkspaceLock(join12(repositoriesRoot, repositoryId2), async () => {
+      return withWorkspaceLock(join13(repositoriesRoot, repositoryId2), async () => {
         const prepared = await cloneRepository({
           repositoryId: repositoryId2,
           fullName: cloneInput.repository.fullName,
@@ -36929,7 +37030,7 @@ function createCommsToolPacks(grants, context) {
 
 // src/runners/attachments.ts
 import { mkdir as mkdir9, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 var WINDOWS_RESERVED = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\..*)?$/i;
 function sanitizeAttachmentFileName(name) {
   const base = name.split(/[/\\]/).pop() ?? "";
@@ -36958,9 +37059,9 @@ async function materializeAttachments(task, taskRoot) {
         `attached file "${attachment.name}" arrived incomplete (${bytes.byteLength} of ${attachment.size} bytes)`
       );
     }
-    const directory = join13(taskRoot, ".zixt-attachments", task.taskId, attachment.id);
+    const directory = join14(taskRoot, ".zixt-attachments", task.taskId, attachment.id);
     await mkdir9(directory, { recursive: true });
-    const path = join13(directory, sanitizeAttachmentFileName(attachment.name));
+    const path = join14(directory, sanitizeAttachmentFileName(attachment.name));
     await writeFile5(path, bytes);
     materialized.push({
       path,
@@ -38119,7 +38220,7 @@ import { execFile } from "node:child_process";
 import { randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { chmod as chmod6, lstat as lstat10, mkdir as mkdir10, realpath as realpath7, writeFile as writeFile6 } from "node:fs/promises";
 import { createServer as createServer3 } from "node:http";
-import { isAbsolute as isAbsolute14, join as join14, relative as relative8 } from "node:path";
+import { isAbsolute as isAbsolute14, join as join15, relative as relative8 } from "node:path";
 var MAX_REQUEST_BYTES2 = 16 * 1024;
 var DIRECTORY_MODE4 = 448;
 var PRIVATE_FILE_MODE = 384;
@@ -38507,7 +38608,7 @@ async function prepareHelpers(input) {
     throw new Error("GitHub shell authentication requires a private real run directory");
   }
   const runRoot = await realpath7(input.runRoot);
-  const helperPath = join14(runRoot, "github-shell-git-credential.cjs");
+  const helperPath = join15(runRoot, "github-shell-git-credential.cjs");
   assertChildPath2(runRoot, helperPath);
   await writePrivate(helperPath, GIT_HELPER_SOURCE);
   if (!input.ghExecutablePath) {
@@ -38518,14 +38619,14 @@ async function prepareHelpers(input) {
       wrapperSourcePath: null
     };
   }
-  const shellToolsDirectory = join14(runRoot, "shell-tools");
+  const shellToolsDirectory = join15(runRoot, "shell-tools");
   assertChildPath2(runRoot, shellToolsDirectory);
   await mkdir10(shellToolsDirectory, { mode: DIRECTORY_MODE4 });
   await chmod6(shellToolsDirectory, DIRECTORY_MODE4);
-  const wrapperSourcePath = join14(runRoot, "github-shell-gh-wrapper.cjs");
+  const wrapperSourcePath = join15(runRoot, "github-shell-gh-wrapper.cjs");
   assertChildPath2(runRoot, wrapperSourcePath);
   await writePrivate(wrapperSourcePath, GH_WRAPPER_SOURCE);
-  const wrapperPath = join14(shellToolsDirectory, process.platform === "win32" ? "gh.cmd" : "gh");
+  const wrapperPath = join15(shellToolsDirectory, process.platform === "win32" ? "gh.cmd" : "gh");
   assertChildPath2(runRoot, wrapperPath);
   const launcher = process.platform === "win32" ? `@"${process.execPath.replaceAll('"', '""')}" "${wrapperSourcePath.replaceAll('"', '""')}" %*\r
 ` : `#!/bin/sh
@@ -38748,7 +38849,7 @@ password=${credential.accessToken}
 }
 
 // src/runners/working-context.ts
-import { spawn as spawn7 } from "node:child_process";
+import { spawn as spawn8 } from "node:child_process";
 import { resolve as resolve9 } from "node:path";
 var COMMAND_TIMEOUT_MS = 5e3;
 var OUTPUT_LIMIT_BYTES = 128 * 1024;
@@ -38879,7 +38980,7 @@ async function stopWorkingContextCommand(child, childExited, options = {}) {
 function run(command, args, cwd, env, signal) {
   if (signal?.aborted) return Promise.resolve(null);
   return new Promise((resolvePromise) => {
-    const child = spawn7(command, [...args], {
+    const child = spawn8(command, [...args], {
       cwd,
       env: { ...env, GIT_OPTIONAL_LOCKS: "0" },
       detached: process.platform !== "win32",
@@ -39319,7 +39420,7 @@ async function settlesWithin(promise2, timeoutMs) {
   }
 }
 function defaultRunnerWorkspaceRoot() {
-  return join15(homedir6(), ".zixt", "workspaces");
+  return join16(homedir6(), ".zixt", "workspaces");
 }
 function defaultRunnerArtifactRoot() {
   return defaultRunArtifactRoot();
@@ -39368,7 +39469,7 @@ function createCliRunner(adapter, opts = {}) {
   const prefixArgs = opts.commandPrefixArgs ?? [];
   const maxWallTimeMs = opts.maxWallTimeMs;
   const workspaceRoot = opts.workspaceRoot ?? defaultRunnerWorkspaceRoot();
-  const artifactRoot = opts.artifactRoot ?? (opts.workspaceRoot === void 0 ? defaultRunnerArtifactRoot() : join15(dirname8(workspaceRoot), "run-artifacts"));
+  const artifactRoot = opts.artifactRoot ?? (opts.workspaceRoot === void 0 ? defaultRunnerArtifactRoot() : join16(dirname9(workspaceRoot), "run-artifacts"));
   const runRegistryRoot2 = opts.runRegistryRoot ?? defaultRunRegistryRoot();
   const createArtifacts = opts.createArtifacts ?? createRunArtifacts;
   const toolPackRegistry2 = opts.toolPackRegistry ?? createDefaultToolPackRegistry();
@@ -39386,7 +39487,7 @@ function createCliRunner(adapter, opts = {}) {
   };
   const askUserServer = createAskUserServer();
   const windowsRoot = process.env.SystemRoot ?? process.env.WINDIR;
-  const windowsComspecCandidate = process.platform === "win32" && windowsRoot ? join15(windowsRoot, "System32", "cmd.exe") : void 0;
+  const windowsComspecCandidate = process.platform === "win32" && windowsRoot ? join16(windowsRoot, "System32", "cmd.exe") : void 0;
   let safetyFailure;
   return async (task) => {
     if (safetyFailure) {
@@ -39426,7 +39527,7 @@ function createCliRunner(adapter, opts = {}) {
         usage: { inputTokens: 0, outputTokens: 0 }
       };
     }
-    const taskRoot = join15(workspaceRoot, task.agentId);
+    const taskRoot = join16(workspaceRoot, task.agentId);
     await mkdir11(taskRoot, { recursive: true });
     if (task.cancelledNow()) return cancelledBeforeRun();
     const configuredWorkspace = task.spec.workspace;
@@ -39764,7 +39865,7 @@ ${attachmentSection}` : prompt;
         for (const path of paths) {
           if (!path || path.length > 4096) continue;
           const absolutePath = isAbsolute15(path) ? path : resolve10(cwd, path);
-          const directory = dirname8(absolutePath);
+          const directory = dirname9(absolutePath);
           observedWorkingDirectories.delete(directory);
           observedWorkingDirectories.add(directory);
           while (observedWorkingDirectories.size > 19) {
@@ -40199,7 +40300,7 @@ function runCliProcess(options) {
   return new Promise((resolve18) => {
     const platform = options.platform ?? process.platform;
     const containmentGateNonce = options.guardian && platform === "win32" ? randomUUID11() : void 0;
-    const child = options.guardian ? spawn8(
+    const child = options.guardian ? spawn9(
       options.guardian.nodeCommand,
       [
         options.guardian.scriptPath,
@@ -40210,7 +40311,7 @@ function runCliProcess(options) {
         // The idle pre-assignment guardian must never load from or depend
         // on an untrusted Task checkout. Only the post-gate target enters
         // the requested working directory from its private release frame.
-        cwd: dirname8(options.guardian.scriptPath),
+        cwd: dirname9(options.guardian.scriptPath),
         env: runnerGuardianEnv(process.env, containmentGateNonce),
         stdio: ["pipe", "pipe", "pipe"],
         windowsHide: true,
@@ -40492,7 +40593,7 @@ import { randomUUID as randomUUID12 } from "node:crypto";
 // src/runners/runtime-observation.ts
 import { open as open6, readdir as readdir5, realpath as realpath9 } from "node:fs/promises";
 import { homedir as homedir7 } from "node:os";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 var READ_WINDOW_BYTES = 1024 * 1024;
 var CATALOG_TIMEOUT_MS = 15e3;
 var CATALOG_OUTPUT_LIMIT_BYTES = 4 * 1024 * 1024;
@@ -40552,9 +40653,9 @@ function displayValue(value, maxLength) {
   return trimmed;
 }
 function claudeTranscriptPath(input) {
-  const configDir = input.env["CLAUDE_CONFIG_DIR"] || join16(homeFrom(input.env), ".claude");
+  const configDir = input.env["CLAUDE_CONFIG_DIR"] || join17(homeFrom(input.env), ".claude");
   const slug = input.resolvedCwd.replace(/[^a-zA-Z0-9]/g, "-");
-  return join16(configDir, "projects", slug, `${input.sessionId}.jsonl`);
+  return join17(configDir, "projects", slug, `${input.sessionId}.jsonl`);
 }
 async function readClaudeSessionEffort(input) {
   const resolvedCwd = await realpath9(input.cwd).catch(() => input.cwd);
@@ -40570,18 +40671,18 @@ async function readClaudeSessionEffort(input) {
 }
 async function newestDirectories(root, limit) {
   const entries = await readdir5(root, { withFileTypes: true }).catch(() => []);
-  return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort((left, right) => right.localeCompare(left)).slice(0, limit).map((name) => join16(root, name));
+  return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort((left, right) => right.localeCompare(left)).slice(0, limit).map((name) => join17(root, name));
 }
 async function findCodexRolloutPath(input) {
-  const codexHome = input.env["CODEX_HOME"] || join16(homeFrom(input.env), ".codex");
-  const sessions = join16(codexHome, "sessions");
+  const codexHome = input.env["CODEX_HOME"] || join17(homeFrom(input.env), ".codex");
+  const sessions = join17(codexHome, "sessions");
   const suffix = `-${input.threadId}.jsonl`;
   for (const year of await newestDirectories(sessions, 2)) {
     for (const month of await newestDirectories(year, 2)) {
       for (const day of await newestDirectories(month, 3)) {
         const files = await readdir5(day).catch(() => []);
         const match = files.find((name) => name.endsWith(suffix));
-        if (match) return join16(day, match);
+        if (match) return join17(day, match);
       }
     }
   }
@@ -40978,15 +41079,15 @@ function improveErrorMessage(error52) {
 import { mkdir as mkdir12, readFile as readFile10, writeFile as writeFile7 } from "node:fs/promises";
 import { randomUUID as randomUUID13 } from "node:crypto";
 import { homedir as homedir8 } from "node:os";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var CODEX_NOT_FOUND_MESSAGE = "The `codex` CLI was not found on this Machine. Install it (npm install -g @openai/codex) and sign in with `codex login`, or switch the agent to API-key auth.";
 function defaultCodexThreadIndexRoot() {
-  return join17(homedir8(), ".zixt", "codex-threads");
+  return join18(homedir8(), ".zixt", "codex-threads");
 }
 var SAFE_SEGMENT3 = /^[A-Za-z0-9_-]{1,200}$/;
 function threadIndexPath(root, agentId, sessionKey) {
   if (!SAFE_SEGMENT3.test(agentId) || !SAFE_SEGMENT3.test(sessionKey)) return null;
-  return join17(root, agentId, `${sessionKey}.json`);
+  return join18(root, agentId, `${sessionKey}.json`);
 }
 async function readThreadId(path) {
   try {
@@ -41090,7 +41191,7 @@ ${value}` : value;
       const recordedThreadId = indexPath ? await readThreadId(indexPath) : null;
       const rememberThread = (threadId) => {
         if (!indexPath) return;
-        void mkdir12(join17(threadIndexRoot, task.agentId), { recursive: true }).then(() => writeFile7(indexPath, JSON.stringify({ threadId }), "utf8")).catch(() => {
+        void mkdir12(join18(threadIndexRoot, task.agentId), { recursive: true }).then(() => writeFile7(indexPath, JSON.stringify({ threadId }), "utf8")).catch(() => {
         });
       };
       const observeRuntime = (threadId) => {
@@ -41553,7 +41654,7 @@ function improveCodexErrorMessage(error52) {
 }
 
 // src/runners/git-preflight.ts
-import { spawn as spawn9 } from "node:child_process";
+import { spawn as spawn10 } from "node:child_process";
 import { realpath as realpath10 } from "node:fs/promises";
 import { isAbsolute as isAbsolute16, resolve as resolve11 } from "node:path";
 var OUTPUT_LIMIT = 8192;
@@ -41602,7 +41703,7 @@ async function preflightGit(options = {}) {
 }
 async function runVersionProbe(input) {
   return new Promise((resolvePromise) => {
-    const child = spawn9(input.executablePath, input.args, {
+    const child = spawn10(input.executablePath, input.args, {
       cwd: input.cwd,
       env: {
         ...process.env.SystemRoot ? { SystemRoot: process.env.SystemRoot } : {},
@@ -41824,11 +41925,11 @@ function run2(command, args) {
 }
 
 // src/linux-service.ts
-import { spawn as spawn10 } from "node:child_process";
+import { spawn as spawn11 } from "node:child_process";
 import { constants as constants2 } from "node:fs";
 import { access as access4, chmod as chmod7, mkdir as mkdir13, open as open7, rename as rename6, rm as rm9 } from "node:fs/promises";
 import { homedir as homedir9, userInfo } from "node:os";
-import { basename as basename4, dirname as dirname9, join as join18, relative as relative9, resolve as resolve12, sep as sep5 } from "node:path";
+import { basename as basename4, dirname as dirname10, join as join19, relative as relative9, resolve as resolve12, sep as sep5 } from "node:path";
 var SERVICE_NAME = "zixt-host.service";
 var SYSTEM_SERVICE_COMMAND_TIMEOUT_MS = 7e4;
 var SERVICE_STABILITY_DELAY_MS = 2e3;
@@ -41857,7 +41958,7 @@ function boundedAppend(current, chunk) {
 async function defaultRunCommand(command, args) {
   const commandEnvironment3 = systemServiceCommandEnvironment();
   return new Promise((resolve18) => {
-    const child = spawn10(command, [...args], {
+    const child = spawn11(command, [...args], {
       stdio: ["ignore", "pipe", "pipe"],
       env: commandEnvironment3,
       windowsHide: true
@@ -41933,18 +42034,18 @@ async function ensureDirectory(path, mode, syncDirectory8) {
   if (!firstCreated) return;
   const first = resolve12(firstCreated);
   const target = resolve12(path);
-  await syncDirectory8(dirname9(first));
+  await syncDirectory8(dirname10(first));
   let current = first;
   const descendants = relative9(first, target);
   for (const part of descendants ? descendants.split(sep5) : []) {
     await syncDirectory8(current);
-    current = join18(current, part);
+    current = join19(current, part);
   }
 }
 async function replacePrivateFile(path, contents, mode, syncDirectory8) {
-  const parent = dirname9(path);
+  const parent = dirname10(path);
   await ensureDirectory(parent, 448, syncDirectory8);
-  const temporary = join18(parent, `.${basename4(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join19(parent, `.${basename4(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open7(temporary, "wx", mode);
   try {
     await handle.writeFile(contents, "utf8");
@@ -41996,11 +42097,11 @@ async function installLinuxService(options) {
     "command search path"
   );
   const cloudUrl = options.cloudUrl ? oneLine(options.cloudUrl, "Zixt Cloud address") : void 0;
-  const xdgConfigHome = env.XDG_CONFIG_HOME ? oneLine(env.XDG_CONFIG_HOME, "Linux configuration path") : join18(home, ".config");
-  const configRoot = options.serviceConfigRoot ?? join18(xdgConfigHome, "zixt");
-  const unitRoot = options.userUnitRoot ?? join18(xdgConfigHome, "systemd", "user");
-  const environmentPath = join18(configRoot, "host.env");
-  const unitPath = join18(unitRoot, SERVICE_NAME);
+  const xdgConfigHome = env.XDG_CONFIG_HOME ? oneLine(env.XDG_CONFIG_HOME, "Linux configuration path") : join19(home, ".config");
+  const configRoot = options.serviceConfigRoot ?? join19(xdgConfigHome, "zixt");
+  const unitRoot = options.userUnitRoot ?? join19(xdgConfigHome, "systemd", "user");
+  const environmentPath = join19(configRoot, "host.env");
+  const unitPath = join19(unitRoot, SERVICE_NAME);
   const installVersion = options.installVersion ?? installRelease;
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : activateInstalledRelease);
   const resolveCommand = options.resolveCommand ?? defaultResolveCommand;
@@ -42117,11 +42218,11 @@ async function installLinuxService(options) {
 }
 
 // src/macos-service.ts
-import { spawn as spawn11 } from "node:child_process";
+import { spawn as spawn12 } from "node:child_process";
 import { constants as constants3 } from "node:fs";
 import { access as access5, chmod as chmod8, mkdir as mkdir14, open as open8, rename as rename7, rm as rm10 } from "node:fs/promises";
 import { homedir as homedir10, userInfo as userInfo2 } from "node:os";
-import { basename as basename5, dirname as dirname10, join as join19, relative as relative10, resolve as resolve13, sep as sep6 } from "node:path";
+import { basename as basename5, dirname as dirname11, join as join20, relative as relative10, resolve as resolve13, sep as sep6 } from "node:path";
 var LAUNCH_AGENT_LABEL = "ai.zixt.host";
 var SERVICE_STABILITY_DELAY_MS2 = 2e3;
 var COMMAND_TIMEOUT_MS2 = 7e4;
@@ -42149,17 +42250,17 @@ async function ensureDirectory2(path, sync) {
   if (!firstCreated) return;
   const first = resolve13(firstCreated);
   const target = resolve13(path);
-  await sync(dirname10(first));
+  await sync(dirname11(first));
   let current = first;
   for (const part of relative10(first, target).split(sep6).filter(Boolean)) {
     await sync(current);
-    current = join19(current, part);
+    current = join20(current, part);
   }
 }
 async function replacePrivateFile2(path, contents, mode, sync) {
-  const parent = dirname10(path);
+  const parent = dirname11(path);
   await ensureDirectory2(parent, sync);
-  const temporary = join19(parent, `.${basename5(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join20(parent, `.${basename5(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open8(temporary, "wx", mode);
   try {
     await handle.writeFile(contents, "utf8");
@@ -42184,7 +42285,7 @@ function commandEnvironment(env) {
 }
 async function defaultRunCommand2(command, args, env) {
   return new Promise((resolveResult) => {
-    const child = spawn11(command, [...args], {
+    const child = spawn12(command, [...args], {
       stdio: ["ignore", "pipe", "pipe"],
       env: commandEnvironment(env)
     });
@@ -42256,14 +42357,14 @@ async function installMacosService(options) {
     options.path ?? env.PATH ?? "/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin",
     "command search path"
   );
-  const configRoot = options.configRoot ?? join19(home, "Library", "Application Support", "Zixt");
-  const launchAgentsRoot = options.launchAgentsRoot ?? join19(home, "Library", "LaunchAgents");
-  const logRoot = options.logRoot ?? join19(home, "Library", "Logs", "Zixt");
-  const configPath = join19(configRoot, "host.env");
-  const launcherPath = join19(configRoot, "host-launcher.sh");
-  const plistPath = join19(launchAgentsRoot, `${LAUNCH_AGENT_LABEL}.plist`);
-  const stdoutPath = join19(logRoot, "host.log");
-  const stderrPath = join19(logRoot, "host-error.log");
+  const configRoot = options.configRoot ?? join20(home, "Library", "Application Support", "Zixt");
+  const launchAgentsRoot = options.launchAgentsRoot ?? join20(home, "Library", "LaunchAgents");
+  const logRoot = options.logRoot ?? join20(home, "Library", "Logs", "Zixt");
+  const configPath = join20(configRoot, "host.env");
+  const launcherPath = join20(configRoot, "host-launcher.sh");
+  const plistPath = join20(launchAgentsRoot, `${LAUNCH_AGENT_LABEL}.plist`);
+  const stdoutPath = join20(logRoot, "host.log");
+  const stderrPath = join20(logRoot, "host-error.log");
   const installVersion = options.installVersion ?? installRelease;
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? (async () => defaultResolveCommand2());
@@ -42348,11 +42449,11 @@ async function installMacosService(options) {
 }
 
 // src/windows-service.ts
-import { spawn as spawn12 } from "node:child_process";
+import { spawn as spawn13 } from "node:child_process";
 import { constants as constants4 } from "node:fs";
 import { access as access6, mkdir as mkdir15, open as open9, readFile as readFile11, rename as rename8, rm as rm11 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
-import { basename as basename6, dirname as dirname11, isAbsolute as isAbsolute17, join as join20, relative as relative11, resolve as resolve14, sep as sep7 } from "node:path";
+import { basename as basename6, dirname as dirname12, isAbsolute as isAbsolute17, join as join21, relative as relative11, resolve as resolve14, sep as sep7 } from "node:path";
 var TASK_NAME = "Zixt Host";
 var COMMAND_TIMEOUT_MS3 = 7e4;
 var SERVICE_STABILITY_DELAY_MS3 = 2e3;
@@ -42382,17 +42483,17 @@ async function ensureDirectory3(path, sync) {
   if (!firstCreated) return;
   const first = resolve14(firstCreated);
   const target = resolve14(path);
-  await sync(dirname11(first));
+  await sync(dirname12(first));
   let current = first;
   for (const part of relative11(first, target).split(sep7).filter(Boolean)) {
     await sync(current);
-    current = join20(current, part);
+    current = join21(current, part);
   }
 }
 async function replacePrivateFile3(path, contents, sync) {
-  const parent = dirname11(path);
+  const parent = dirname12(path);
   await ensureDirectory3(parent, sync);
-  const temporary = join20(parent, `.${basename6(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join21(parent, `.${basename6(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open9(temporary, "wx", 384);
   try {
     await handle.writeFile(contents, "utf8");
@@ -42413,7 +42514,7 @@ function commandEnvironment2(env) {
 }
 async function runChild(command, args, env, input) {
   return new Promise((resolveResult) => {
-    const child = spawn12(command, [...args], {
+    const child = spawn13(command, [...args], {
       stdio: [input === void 0 ? "ignore" : "pipe", "pipe", "pipe"],
       env: commandEnvironment2(env),
       windowsHide: true
@@ -42447,7 +42548,7 @@ async function runChild(command, args, env, input) {
 async function defaultResolveCommand3(name, env) {
   const root = env.SYSTEMROOT ?? env.WINDIR;
   if (!root || !isAbsolute17(root)) return null;
-  const candidate = name === "powershell" ? join20(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : join20(root, "System32", `${name}.exe`);
+  const candidate = name === "powershell" ? join21(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : join21(root, "System32", `${name}.exe`);
   return access6(candidate, constants4.X_OK).then(
     () => candidate,
     () => null
@@ -42584,11 +42685,11 @@ async function installWindowsService(options) {
   const token2 = oneLine3(options.token, "pairing code");
   const cloudUrl = options.cloudUrl ? oneLine3(options.cloudUrl, "Zixt Cloud address") : void 0;
   const path = oneLine3(options.path ?? env.PATH ?? "", "command search path");
-  const configRoot = options.configRoot ?? join20(localAppData, "Zixt", "Host");
-  const configPath = join20(configRoot, "host.json");
-  const launcherPath = join20(configRoot, "host-launcher.ps1");
-  const taskXmlPath = join20(configRoot, "host-task.xml");
-  const statusPath = join20(configRoot, "host-status.json");
+  const configRoot = options.configRoot ?? join21(localAppData, "Zixt", "Host");
+  const configPath = join21(configRoot, "host.json");
+  const launcherPath = join21(configRoot, "host-launcher.ps1");
+  const taskXmlPath = join21(configRoot, "host-task.xml");
+  const statusPath = join21(configRoot, "host-status.json");
   const installVersion = options.installVersion ?? installRelease;
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? ((name) => defaultResolveCommand3(name, env));
@@ -42691,21 +42792,21 @@ async function installSystemService(options) {
 // src/terminal-outcomes.ts
 import { chmod as chmod9, lstat as lstat12, mkdir as mkdir16, open as open10, readdir as readdir6, readFile as readFile12, rename as rename9, rm as rm12 } from "node:fs/promises";
 import { homedir as homedir12 } from "node:os";
-import { dirname as dirname12, join as join21, relative as relative12, resolve as resolve15, sep as sep8 } from "node:path";
+import { dirname as dirname13, join as join22, relative as relative12, resolve as resolve15, sep as sep8 } from "node:path";
 var DIRECTORY_MODE5 = 448;
 var FILE_MODE4 = 384;
 var MAX_OUTCOME_BYTES = 4 * 1024 * 1024;
 var HOST_DIRECTORY = /^hst_[0-9a-f]{32}$/;
 var OUTCOME_FILE = /^(tsk_[0-9a-f]{32})\.([1-9][0-9]*)\.json$/;
 function defaultTerminalOutcomeRoot() {
-  return join21(homedir12(), ".zixt", "terminal-outcomes");
+  return join22(homedir12(), ".zixt", "terminal-outcomes");
 }
 function hostOutcomeRoot(root, hostId) {
   if (!HOST_DIRECTORY.test(hostId)) throw new Error("terminal outcome Host identity is malformed");
-  return join21(root, hostId);
+  return join22(root, hostId);
 }
 function outcomePath(root, hostId, taskId, epoch) {
-  return join21(hostOutcomeRoot(root, hostId), `${taskId}.${epoch}.json`);
+  return join22(hostOutcomeRoot(root, hostId), `${taskId}.${epoch}.json`);
 }
 async function syncDirectory6(root) {
   if (process.platform === "win32") return;
@@ -42721,11 +42822,11 @@ async function requirePrivateRoot(root, sync = syncDirectory6) {
   if (firstCreated) {
     const first = resolve15(firstCreated);
     const target = resolve15(root);
-    await sync(dirname12(first));
+    await sync(dirname13(first));
     let current = first;
     for (const part of relative12(first, target).split(sep8).filter(Boolean)) {
       await sync(current);
-      current = join21(current, part);
+      current = join22(current, part);
     }
   }
   const stat3 = await lstat12(root);
@@ -42765,7 +42866,7 @@ async function recordTerminalOutcome(hostId, input, root = defaultTerminalOutcom
   } catch (error52) {
     if (error52.code !== "ENOENT") throw error52;
   }
-  const temporary = join21(
+  const temporary = join22(
     scopedRoot,
     `.${outcome.taskId}.${outcome.epoch}.${process.pid}.${Date.now()}.${outcome.resultId}.tmp`
   );
@@ -42818,7 +42919,7 @@ async function readTerminalOutcomesStrict(root = defaultTerminalOutcomeRoot()) {
       if (!match || !entry.isFile() || entry.isSymbolicLink()) {
         throw new Error("committed terminal outcome is not a trusted regular file");
       }
-      const path = join21(scopedRoot, entry.name);
+      const path = join22(scopedRoot, entry.name);
       const stat3 = await lstat12(path);
       if (!stat3.isFile() || stat3.isSymbolicLink() || stat3.size > MAX_OUTCOME_BYTES) {
         throw new Error("committed terminal outcome is not a trusted regular file");
@@ -42872,13 +42973,13 @@ async function forgetSupersededTerminalOutcomes(hostId, taskId, epoch, root = de
 // src/accepted-assignments.ts
 import { chmod as chmod10, lstat as lstat13, mkdir as mkdir17, open as open11, readdir as readdir7, rename as rename10, rm as rm13 } from "node:fs/promises";
 import { homedir as homedir13 } from "node:os";
-import { dirname as dirname13, join as join22, relative as relative13, resolve as resolve16, sep as sep9 } from "node:path";
+import { dirname as dirname14, join as join23, relative as relative13, resolve as resolve16, sep as sep9 } from "node:path";
 var DIRECTORY_MODE6 = 448;
 var FILE_MODE5 = 384;
 var CLAIM_FILE = /^(tsk_[0-9a-f]{32})\.([1-9][0-9]*)\.json$/;
 var TASK_ID = /^tsk_[0-9a-f]{32}$/;
 function defaultAcceptedAssignmentRoot() {
-  return join22(homedir13(), ".zixt", "accepted-assignments");
+  return join23(homedir13(), ".zixt", "accepted-assignments");
 }
 async function syncDirectory7(root) {
   if (process.platform === "win32") return;
@@ -42894,11 +42995,11 @@ async function requirePrivateRoot2(root, sync = syncDirectory7) {
   if (firstCreated) {
     const first = resolve16(firstCreated);
     const target = resolve16(root);
-    await sync(dirname13(first));
+    await sync(dirname14(first));
     let current = first;
     for (const part of relative13(first, target).split(sep9).filter(Boolean)) {
       await sync(current);
-      current = join22(current, part);
+      current = join23(current, part);
     }
   }
   const stat3 = await lstat13(root);
@@ -42912,7 +43013,7 @@ function claimPath(root, taskId, epoch) {
   if (!Number.isSafeInteger(epoch) || epoch < 1) {
     throw new Error("accepted assignment epoch is malformed");
   }
-  return join22(root, `${taskId}.${epoch}.json`);
+  return join23(root, `${taskId}.${epoch}.json`);
 }
 async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssignmentRoot(), options = {}) {
   const sync = options.syncDirectory ?? syncDirectory7;
@@ -42922,7 +43023,7 @@ async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssign
   } catch {
     return false;
   }
-  const temporary = join22(
+  const temporary = join23(
     root,
     `.${assignment.taskId}.${assignment.epoch}.${process.pid}.${Date.now()}.tmp`
   );
@@ -43085,7 +43186,7 @@ function createHostLogger(options = {}) {
 }
 
 // src/demo-state.ts
-import { isAbsolute as isAbsolute18, join as join23, parse as parse3, resolve as resolve17 } from "node:path";
+import { isAbsolute as isAbsolute18, join as join24, parse as parse3, resolve as resolve17 } from "node:path";
 var DEMO_STATE_ROOT_ENV = "ZIXT_DEMO_STATE_ROOT";
 function resolveDemoHostStatePaths(env = process.env) {
   const configured = env.ZIXT_RUNNER === "demo" ? env[DEMO_STATE_ROOT_ENV] : void 0;
@@ -43095,13 +43196,13 @@ function resolveDemoHostStatePaths(env = process.env) {
     throw new Error(`${DEMO_STATE_ROOT_ENV} must be a dedicated absolute directory`);
   }
   return {
-    runRegistryRoot: join23(root, "run-registry"),
-    terminalOutcomeRoot: join23(root, "terminal-outcomes"),
-    acceptedAssignmentRoot: join23(root, "accepted-assignments"),
-    runArtifactRoot: join23(root, "run-artifacts"),
-    browserProfileRoot: join23(root, "browser-profiles"),
-    runnerWorkspaceRoot: join23(root, "workspaces"),
-    codexThreadIndexRoot: join23(root, "codex-threads")
+    runRegistryRoot: join24(root, "run-registry"),
+    terminalOutcomeRoot: join24(root, "terminal-outcomes"),
+    acceptedAssignmentRoot: join24(root, "accepted-assignments"),
+    runArtifactRoot: join24(root, "run-artifacts"),
+    browserProfileRoot: join24(root, "browser-profiles"),
+    runnerWorkspaceRoot: join24(root, "workspaces"),
+    codexThreadIndexRoot: join24(root, "codex-threads")
   };
 }
 
@@ -43430,7 +43531,22 @@ var restartAfterUnsafeRunnerCleanup = (reason) => {
 };
 var browserManager = new BrowserManager({
   ...browserProfileRoot ? { profileRoot: browserProfileRoot } : {},
-  factory: process.env.ZIXT_BROWSER === "demo" ? createDemoBrowserAdapterFactory() : createPlaywrightBrowserAdapterFactory()
+  factory: process.env.ZIXT_BROWSER === "demo" ? createDemoBrowserAdapterFactory() : createPlaywrightBrowserAdapterFactory({
+    onInstallEvent: (event) => {
+      if (event.state === "started") {
+        log.info("Browser not found; installing Chromium for this Zixt version", {
+          machine
+        });
+      } else if (event.state === "completed") {
+        log.success("Browser installation complete", { machine });
+      } else {
+        log.warn("Browser installation failed", {
+          machine,
+          ...event.error ? { error: event.error } : {}
+        });
+      }
+    }
+  })
 });
 var claudeCode = createClaudeCodeRunner({
   ...runnerWorkspaceRoot ? { workspaceRoot: runnerWorkspaceRoot } : {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.109",
+  "version": "0.0.111",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",