harnery 0.45.1 → 0.46.0

package/dist/commands/agents.js

@@ -28,6 +28,7 @@ import { agentDisplayName } from "../core/agents/state/activity-log.js";
 import { buildLifecycleSuggestedName, buildSuggestedName, readHeartbeat as readHeartbeatCache, } from "../core/agents/state/heartbeat-writer.js";
 import { describeLiveAuthorityBlockV3, liveAuthorityBlockHintV3, liveAuthorityBlockV3, readLiveCoordinationRow, readLiveCoordinationRows, } from "../core/agents/state/live-coordination-view.js";
 import { forkRelationLabels, resolveForkAncestry } from "../core/agents/state/names.js";
+import { resolveAgentParentReference, } from "../core/agents/state/parent-reference.js";
 import { foldSessionState, } from "../core/agents/state/session-state.js";
 import { turnChangesStatusRow } from "../core/agents/turn-changes.js";
 import { turnElapsedStatusRow } from "../core/agents/turn-elapsed.js";
@@ -39,13 +40,13 @@ import { nativeInstanceIdV3 } from "../core/events/v3/live-route-observer.js";
 import { liveInstanceIdV3 } from "../core/events/v3/live-routing.js";
 import { countSummarizedSinceV3, listDiagnosticSummariesV3, } from "../core/events/v3/producers/diagnostic-summaries.js";
 import { listHookIntakeGroupsV3, listHookIntakeRecordsV3, } from "../core/events/v3/producers/intake.js";
-import { listHookProducerStateRecordsV3, readHookProducerStateV3, } from "../core/events/v3/producers/recorder.js";
+import { listHookProducerStateRecordsV3, readHookProducerStateV3, scanHookProducerStateRecordsV3, } from "../core/events/v3/producers/recorder.js";
 import { readLedgerV3 } from "../core/events/v3/reader.js";
 import { EVENT_V3_LEDGER_RELATIVE_ROOT } from "../core/events/v3/writer.js";
 import { evaluateRunQualityIfDue } from "../core/guard/index.js";
 import { readRuntimeContextTelemetry, readRuntimeContextUsage, } from "../core/hooks/adapter/runtime-telemetry.js";
 import { HarneryInboxCapacityError } from "../core/inbox/contract.js";
-import { peerInbox, sendPeerMessage } from "../core/inbox/peer-messages.js";
+import { peerInbox, sendPeerMessage, } from "../core/inbox/peer-messages.js";
 import { readRemoteMachines } from "../core/presence/index.js";
 import { formatResourceSummary, readResourceStatus } from "../core/resources/status.js";
 import { registerContextCommand } from "./context.js";
@@ -290,9 +291,13 @@ export function registerAgentsCommand(program, emitParam, programContext, binNam
     cmd
         .command("ping <name> <message...>")
         .description("Queue a durable message for one known task instance by name. Stale or " +
-        "done tasks receive it when that same task resumes. Ambiguous names " +
+        "done tasks receive it when that same task resumes. A recipient on " +
+        "another machine is reached through the shared origin. Ambiguous names " +
         "require an exact instance; receipts do not confirm attention.")
         .option("--instance-id <id>", "Select the exact known recipient instance")
+        .option("--generation-id <id>", "Require the exact recipient generation")
+        .option("--operation-id <id>", "Reuse a frozen delivery operation after a caller retry")
+        .option("--operation-replay-only", "Require an existing plan after an ambiguous caller dispatch")
         .option("--require-live", "Refuse a recipient outside live presence")
         .option("--json", "JSON output")
         .action((name, message, opts) => {
@@ -1216,6 +1221,7 @@ async function runShow(name, opts) {
         tool_counts: report?.tool_counts ?? [],
         total_events: report?.total_events ?? 0,
         bq_error: bqError,
+        parent_reference: resolveAgentParentReference(root, hb),
     };
     if (opts.json) {
         emit.config({ format: "json" });
@@ -1232,6 +1238,7 @@ async function runShow(name, opts) {
     lines.push(`agent-${data.name}  ${subtitle}`);
     lines.push(`  session  ${formatAge(ageSecs)} old · kind=${data.kind} · session_id=${data.session_id.slice(0, 8)}…`);
     lines.push(`  last heartbeat: ${formatAge(heartbeatAgeSecs)} ago`);
+    lines.push(`  parent:         ${describeParentReference(data.parent_reference)}`);
     lines.push(`  activity:       ${data.activity}`);
     lines.push(`  lifecycle:      ${data.task_state}${data.task_state === "blocked" && data.task_state_reason ? `: ${data.task_state_reason}` : ""}`);
     if (data.files_held.length > 0) {
@@ -1900,6 +1907,7 @@ function runStatus(opts) {
         name: displayName,
         instance_id: hb.instance_id,
         kind: normalizeKind(hb.kind),
+        parent_reference: resolveAgentParentReference(root, hb),
         session_age_secs: ageSecs,
         turn_elapsed_secs: turnElapsed ? turnElapsed.elapsed.secs : null,
         turn_complete: turnElapsed ? turnElapsed.elapsed.complete : null,
@@ -1952,6 +1960,7 @@ function runStatus(opts) {
         ["changes", turnChanges.value],
         ["activity", activityOf(hb)],
         ["lifecycle", lifecycleLabel(hb)],
+        ["parent", describeParentReference(data.parent_reference)],
         ["context", ctxStr],
         ["resources", formatResourceSummary(resources)],
         ["files", filesStr],
@@ -2440,7 +2449,11 @@ export function collectEventLedgerHealthV3(root, nowMs = Date.now()) {
     const generations = [];
     const spanPressure = [];
     try {
-        for (const { state } of listHookProducerStateRecordsV3(root)) {
+        const scan = scanHookProducerStateRecordsV3(root);
+        for (const file of scan.invalid) {
+            collectionErrors.push(`producer state skipped (${file.adapter}/${file.session_hash}.json): ${file.reason}`);
+        }
+        for (const { state } of scan.records) {
             if (state.spans.length >= SPAN_PRESSURE_SOFT_WATERMARK) {
                 spanPressure.push({
                     instance_id: state.instance_id,
@@ -3846,6 +3859,28 @@ function formatDuration(ms) {
     const h = Math.round((ms % 86_400_000) / 3_600_000);
     return h > 0 ? `${d}d${h}h` : `${d}d`;
 }
+export function describeParentReference(reference) {
+    return reference.state === "verified"
+        ? `${reference.parent_name ?? "unnamed"} (${reference.parent_instance_id}; ${reference.source}; ${reference.addressable ? "addressable" : "not addressable"})`
+        : `${reference.state}: ${reference.reason}`;
+}
+export function formatPeerRecipientReceipt(recipient) {
+    if (!recipient.ok)
+        return `${recipient.code}: ${recipient.message}`;
+    const address = `agent-${recipient.target.name} (${recipient.target.instance_id})`;
+    if (recipient.delivery_state === "delivered")
+        return `Previously acknowledged by the recipient machine for ${address}; task attention is not confirmed.`;
+    if (recipient.delivery_state === "expired")
+        return `The prior remote message for ${address} expired; no new delivery is established.`;
+    if (recipient.target.machine)
+        return (`Stored for ${address} on ${recipient.target.machine} as ${recipient.message_id}. ` +
+            (recipient.published
+                ? "Published to origin; recipient-machine import is not confirmed."
+                : `Publication is not confirmed${recipient.publish_error ? ` (${recipient.publish_error})` : ""}.`));
+    return recipient.state === "duplicate"
+        ? `Previously stored for ${address} as ${recipient.message_id}; current surface state is not established by this receipt.`
+        : `Stored for ${address} as ${recipient.message_id}; task attention is not confirmed.`;
+}
 function runPing(name, message, opts) {
     if (!message || message.trim().length === 0) {
         emit.error({ code: "empty_message", message: "message is required (and non-empty)" });
@@ -3869,10 +3904,17 @@ function runPing(name, message, opts) {
     try {
         sent = sendPeerMessage({
             coordRoot,
-            target: { name, instanceId: opts.instanceId, requireLive: opts.requireLive },
+            target: {
+                name,
+                instanceId: opts.instanceId,
+                generationId: opts.generationId,
+                requireLive: opts.requireLive,
+            },
+            operationId: opts.operationId,
+            operationReplayOnly: opts.operationReplayOnly,
             senderName: fromName,
             senderInstanceId: myOwner,
-            body: message.trim(),
+            body: message,
         });
     }
     catch (error) {
@@ -3882,46 +3924,81 @@ function runPing(name, message, opts) {
         }
         throw error;
     }
+    if (opts.json)
+        emit.config({ format: "json" });
+    const routing = {
+        operation_id: sent.operation_id,
+        child: sent.child,
+        parent_reference: sent.parent_reference,
+        parent_copy: sent.parent_copy,
+        complete: sent.complete,
+    };
+    // Keep both actual recipient writes visible, including parent-only success.
+    for (const recipient of [sent.child, sent.parent_copy]) {
+        if (!("ok" in recipient) || !recipient.ok)
+            continue;
+        emitEventV3({
+            owner: myOwner,
+            session: nativeSessionIdentity(myHb, myOwner),
+            adapter: normalizeAdapter(myHb?.platform),
+            observation: {
+                event_type: "coord.message_observed",
+                direction: "sent",
+                subject: recipient.target.instance_id,
+                message_id: recipient.message_id,
+                body: recipient === sent.child
+                    ? message
+                    : `[Parent copy for agent-${sent.child.target?.name} (${sent.child.target?.instance_id})]\n${message}`,
+            },
+        });
+    }
     if (!sent.ok) {
-        emit.error({
+        emit.data({
+            ...routing,
+            ok: false,
             code: sent.code,
             message: sent.message,
+            from: fromName,
             ...(sent.candidates ? { candidates: sent.candidates } : {}),
         });
-        process.exit(1);
+        process.exitCode = 1;
+        return;
     }
-    // Canonical delivery record: sender is the envelope owner, recipient rides
-    // in data, so read-only observers can render the communication without
-    // joining journal files.
-    emitEventV3({
-        owner: myOwner,
-        session: nativeSessionIdentity(myHb, myOwner),
-        adapter: normalizeAdapter(myHb?.platform),
-        observation: {
-            event_type: "coord.message_observed",
-            direction: "sent",
-            subject: sent.target.instance_id,
-            message_id: sent.message_id,
-            body: message.trim(),
-        },
-    });
+    const remote = "published" in sent ? sent : null;
     const data = {
+        ...routing,
         peer: sent.target.name,
         peer_instance_id: sent.target.instance_id,
+        ...(sent.target.machine ? { peer_machine: sent.target.machine } : {}),
         state: sent.state,
         message_id: sent.message_id,
         synced: sent.synced,
         body_bytes: sent.body_bytes,
         from: fromName,
+        ...(remote
+            ? {
+                published: remote.published,
+                ...(remote.delivery_state ? { delivery_state: remote.delivery_state } : {}),
+                ...(remote.publish_error ? { publish_error: remote.publish_error } : {}),
+            }
+            : {}),
     };
     if (opts.json) {
         emit.config({ format: "json" });
         emit.data(data);
+        if (!sent.complete)
+            process.exitCode = 1;
         return;
     }
     emit.data(data);
-    emit.text(`${data.state} for agent-${data.peer} (${data.peer_instance_id}); ` +
-        `stored as ${data.message_id}, pending until surfaced to that task.\n`);
+    if (!sent.complete)
+        process.exitCode = 1;
+    emit.text(`parent copy: ${"ok" in sent.parent_copy
+        ? sent.parent_copy.ok
+            ? formatPeerRecipientReceipt(sent.parent_copy)
+            : `${sent.parent_copy.code}: ${sent.parent_copy.message}`
+        : `skipped (${sent.parent_copy.reason})`}\n`);
+    emit.text(`${formatPeerRecipientReceipt(sent.child)}\n`);
 }
 async function runWait(name, opts) {
     const timeoutMs = parseDurationToMs(opts.timeout);

package/dist/commands/browse.d.ts

@@ -50,6 +50,7 @@ interface BrowseOpts {
     collectOut?: string;
     networkHar?: string;
     login?: boolean;
+    syncLogin?: boolean;
     attached?: boolean;
     loginCloseFile?: string;
     controlFile?: string;
@@ -79,7 +80,9 @@ interface BrowseOpts {
     checkWidthFail?: boolean;
     checkWidthAnnotate?: boolean;
     checkRunts?: boolean | string;
+    checkScanNodeBudget?: string;
     checkRuntsMinChars?: string;
+    checkRuntsMaxFindings?: string;
     checkRuntsFail?: boolean;
     checkRuntsAnnotate?: boolean;
     checkOverflow?: boolean;

package/dist/commands/browse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../../src/commands/browse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAmE1E,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC9B,MAAM,yCAAyC,CAAC;AA2FjD,UAAU,UAAU;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B,CAAC,EAAE,2BAA2B,CAAC;IAC3D,kBAAkB,CAAC,EAAE;QACnB,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,qBAAqB,CAAC,EAAE,wBAAwB,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC;IAIb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,UAAU,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAcD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,WAAW,EACtB,OAAO,CAAC,EAAE,qBAAqB,EAC/B,OAAO,SAAmB,GACzB,IAAI,CAqmBN;AAg+DD;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,qCAAqC,CAAC;AAwXxE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAAC,GAC9E,MAAM,GAAG,OAAO,GAAG,UAAU,CAW/B"}
+{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../../src/commands/browse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAmE1E,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC9B,MAAM,yCAAyC,CAAC;AAoGjD,UAAU,UAAU;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B,CAAC,EAAE,2BAA2B,CAAC;IAC3D,kBAAkB,CAAC,EAAE;QACnB,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,qBAAqB,CAAC,EAAE,wBAAwB,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC;IAIb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,UAAU,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAeD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,WAAW,EACtB,OAAO,CAAC,EAAE,qBAAqB,EAC/B,OAAO,SAAmB,GACzB,IAAI,CAwnBN;AAwgED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,qCAAqC,CAAC;AAwXxE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAAC,GAC9E,MAAM,GAAG,OAAO,GAAG,UAAU,CAW/B"}

package/dist/commands/browse.js

@@ -11,7 +11,7 @@ import { createPageDriver, createRng, DEFAULT_COLLECT_LIMITS, PACING_LIMITS, par
 import { Browser, browserProxyFromEnv, browserProxyGateFromEnv, captureDevOverlay, chromeMajorFromExecutable, DEFAULT_CRITIQUE_RUBRIC, extractObservedIp, installedChromeChannel, installedChromePath, parseAssertSpec, resolveUserAgent, runCritique, tilesFromFullPage, WEBRTC_PROXY_ONLY_ARG, writeNetscapeCookieFile, wslHeadedLaunchArgs, } from "../lib/browser/index.js";
 import { isWSL } from "../lib/browser/launch-args.js";
 import { allocateTileBudget, validatePageReviewAllocation, } from "../lib/browser/page-review-budget.js";
-import { PAGE_REVIEW_CAPTURE_PLAN_SCHEMA, } from "../lib/browser/page-review-contracts.js";
+import { PAGE_REVIEW_CAPTURE_PLAN_SCHEMA, PAGE_REVIEW_MAX_TILE_BUDGET, } from "../lib/browser/page-review-contracts.js";
 import { findPackTile, gateHitsFromEnvelope, readPackContext, tileId, writePackContext, writePackExpandedTile, } from "../lib/browser/page-review-pack.js";
 import { retainPageReviewSourceIdentity } from "../lib/browser/page-review-source.js";
 import { buildQaManifest, classifySignatures, } from "../lib/browser/qa-plan.js";
@@ -22,7 +22,8 @@ import { startBrowserSessionServer, } from "../lib/browser/session-control.js";
 import { captureThumbnailFingerprint, registerCaptureThumbnail, } from "../lib/browser/thumbnail-association.js";
 import { reviewCandidateRects } from "../lib/browser/tiling.js";
 import { diffAgainstBaseline, saveBaseline, } from "../lib/browser/visual-diff.js";
-import { harvestDomain, harvestWindowsChromeCookies, keepWindowsChromeSession, stopWindowsChromeProfile, windowsChromePath, windowsLocalAppData, windowsPlainProfile, wslPathToWindows, } from "../lib/browser/windows-chrome.js";
+import { harvestDomain, harvestWindowsChromeCookies, keepWindowsChromeSession, stopWindowsChromeProfile, windowsChromePath, windowsChromeProfileProcesses, windowsLocalAppData, windowsPathToWsl, windowsPlainProfile, wslPathToWindows, } from "../lib/browser/windows-chrome.js";
+import { profileCookieDbMtimeMs, recordLoginSync, syncLoginCookies, } from "../lib/browser/windows-login-sync.js";
 import { applyExtraCookies, CookieJar, mergeCookies } from "../lib/cookies/index.js";
 import { commandPaceGate } from "../lib/pace/index.js";
 /**
@@ -57,8 +58,10 @@ const VIEWPORT_PRESETS = {
 // cookies/read: the many helper functions in this large file close over
 // `emit` so action callbacks stay concise.
 let emit;
+let browseBinName = "harn";
 export function registerBrowseCommand(program, emitParam, context, binName = resolveBinName()) {
     emit = emitParam;
+    browseBinName = binName;
     program
         .command("browse <url>")
         .description("Headless Chromium with persistent profile + cookie jar. Default writes a trio of files (last.png, last.html, last.json) for the LLM iteration loop; --snapshot/--html/--json switch to stdout-print mode.")
@@ -108,9 +111,14 @@ export function registerBrowseCommand(program, emitParam, context, binName = res
         "Renders theme-aware pages in that scheme without page-specific toggles. " +
         "Absent = browser default (unchanged behavior).")
         .option("--login", "Open the URL in the installed Google Chrome with nothing attached (no DevTools protocol, no " +
-        "Playwright) so a person can sign in; under WSL this is the Windows host's Chrome. Sign in, then " +
-        "close the window or create the --login-close-file; later browse and browse-session runs reuse " +
-        "the cookies. Sites cannot tell this window from the person's own browser.")
+        "Playwright) so a person can sign in; under WSL this is the Windows host's Chrome on a dedicated " +
+        "sign-in profile. Sign in, then close the window or create the --login-close-file; later browse " +
+        "and browse-session runs reuse the cookies. Under WSL the profile can also stay in use as an " +
+        "ordinary browser: each headless browse copies the target site's cookies from it when it changed " +
+        "and is closed, and an open profile is left alone (see --sync-login). Sites cannot tell this " +
+        "window from the person's own browser.")
+        .option("--sync-login", "WSL only: copy the URL's site cookies from the Windows sign-in profile into the cookie store " +
+        "now, then exit without loading the page. Refuses while Chrome is open on that profile.")
         .option("--attached", "With --login: open an automation-controlled Chrome that this process and --control-file can drive. " +
         "Sites can detect it and may lock the account, so use it only for agent-driven headed sessions on " +
         "sites you own. Never use it to sign in to a third-party account.")
@@ -173,6 +181,8 @@ export function registerBrowseCommand(program, emitParam, context, binName = res
         "Atomic tokens (URLs, emails, phone numbers) are excluded. Reports hits in the JSON " +
         "envelope under `runts` and annotates them on the screenshot.")
         .option("--check-runts-min-chars <n>", "Minimum block text length to scan (default 40; smaller labels can't meaningfully wrap).", "40")
+        .option("--check-runts-max-findings <n>", "Maximum runt findings to retain (integer 1..5000, default 50). Reaching the limit " +
+        "still marks the sweep incomplete; the separate 5000-block scan cap is unchanged.", "50")
         .option("--check-runts-fail", "Run a document-wide runt check when needed; exit 2 on a runt, missing scope, or incomplete sweep.")
         .option("--no-check-runts-annotate", "Skip drawing runt boxes on the screenshot (JSON still emitted).")
         .option("--check-align <selector>", "Check rendered child-content alignment inside this container (repeatable).", (value, previous = []) => [...previous, value], [])
@@ -206,6 +216,7 @@ export function registerBrowseCommand(program, emitParam, context, binName = res
         "Pairs closer than this are flagged; negative separation (overlap) always flags.", "6")
         .option("--check-crowd-fail", "Exit 2 when a crowd target fails, is unknown, or is missing.")
         .option("--no-check-crowd-annotate", "Skip crowd screenshot annotations.")
+        .option("--check-scan-node-budget <n>", "Explicit geometry/content traversal budget per scope (1–100000 nodes). Omit to keep each rule's existing limit; incomplete scans remain unknown.")
         .option("--check-placeholder [selector]", "Scan rendered text for unrendered template tokens and bound-value tells: " +
         "JS template literals, `{{x}}` handlebars, `[object Object]`, `Invalid Date`, " +
         "`NaN`, or an element whose whole text is literally 'undefined' / 'null'. Optional selector " +
@@ -241,7 +252,7 @@ export function registerBrowseCommand(program, emitParam, context, binName = res
         "reports `skipped`. Findings land under `critique` in the JSON envelope.")
         .option("--check-critique-band <px>", "Band height for default tiling (default 1400).", "1400")
         .option("--check-critique-overlap <px>", "Vertical overlap between bands so a finding at a seam stays visible (default 120).", "120")
-        .option("--check-critique-max-tiles <n>", "Cap on tiles sent to the model, to bound cost (default 24).", "24")
+        .option("--check-critique-max-tiles <n>", `Cap on tiles sent to the model, to bound cost (default 24, at most ${PAGE_REVIEW_MAX_TILE_BUDGET}).`, "24")
         .option("--check-critique-rubric <text>", "Override the default critique rubric.")
         .option("--check-critique-fail", "Run a whole-page critique when needed; exit 2 unless the critique conclusively passes.")
         .option("--assert <expr>", "Assert a page value (repeatable). Grammar: '<op> <selector> => <expected>', where op is " +
@@ -336,6 +347,17 @@ async function runBrowse(url, opts, context) {
     const clipThreshold = parseNonNegativeNumber(opts.checkClipThreshold ?? "0", "--check-clip-threshold");
     const overlapThreshold = parseNonNegativeNumber(opts.checkOverlapThreshold ?? "0", "--check-overlap-threshold");
     const crowdMin = parseNonNegativeNumber(opts.checkCrowdMin ?? "6", "--check-crowd-min");
+    const scanNodeBudget = opts.checkScanNodeBudget === undefined
+        ? undefined
+        : parsePositiveInt(opts.checkScanNodeBudget, "--check-scan-node-budget");
+    if (scanNodeBudget !== undefined &&
+        (!Number.isSafeInteger(scanNodeBudget) || scanNodeBudget > 100_000)) {
+        throw new Error("--check-scan-node-budget must be an integer from 1 to 100000.");
+    }
+    const runtsMaxFindings = parsePositiveInt(opts.checkRuntsMaxFindings ?? "50", "--check-runts-max-findings");
+    if (runtsMaxFindings > 5000) {
+        throw new Error("--check-runts-max-findings must be an integer from 1 to 5000.");
+    }
     const hitProfile = parseTargetSizeProfile(opts.checkHitProfile ?? "wcag-aa");
     // Commander: `--no-cookies` turns `opts.cookies` into `false`. Default is `true`.
     const jar = opts.cookies === false
@@ -374,6 +396,14 @@ async function runBrowse(url, opts, context) {
     if (loginCloseFile && existsSync(loginCloseFile)) {
         throw new Error(`Login close signal already exists at ${loginCloseFile}. Remove the stale file before launching.`);
     }
+    if (opts.syncLogin) {
+        if (opts.login)
+            throw new Error("--sync-login cannot run with --login.");
+        if (!jar)
+            throw new Error("--sync-login needs the cookie store; drop --no-cookies.");
+        runSyncLogin(url, jar.path);
+        return;
+    }
     const collectPlan = opts.collect ? buildCollectPlan(opts) : null;
     const pace = commandPaceGate(opts.pace !== false, (message) => emit.log(message, "info"));
     if (loginMode === "plain") {
@@ -391,12 +421,15 @@ async function runBrowse(url, opts, context) {
         await runPlainLogin(url, opts.profile ?? DEFAULT_PROFILE, loginCloseFile, plainUa, emit);
         return;
     }
+    if (jar && loginMode === "none")
+        autoSyncLoginCookies(url, jar.path);
     const channel = resolveBrowserChannel(opts, Boolean(headed));
     const userAgent = resolveUserAgent({
         requested: opts.userAgent,
         env: process.env.HARNERY_BROWSER_UA,
         chromeMajor: launchedChromeMajor(channel),
     });
+    const cookieGuard = context?.cookieGuard?.();
     const browser = new Browser({
         profileDir: opts.profile ?? DEFAULT_PROFILE,
         headed,
@@ -408,6 +441,7 @@ async function runBrowse(url, opts, context) {
         waitUntil: opts.waitUntil,
         recordHarPath: opts.networkHar ? resolve(opts.networkHar) : undefined,
         extraHeaders: context?.extraHeaders,
+        ...(cookieGuard ? { cookieGuard } : {}),
         pace,
         launchArgs: resolveLaunchArgs(opts, Boolean(headed), Boolean(proxy)),
         ...(channel ? { channel } : {}),
@@ -498,6 +532,7 @@ async function runBrowse(url, opts, context) {
                 runts = await browser.checkRunts({
                     scope: typeof opts.checkRunts === "string" ? opts.checkRunts : null,
                     minChars: Number.parseInt(opts.checkRuntsMinChars ?? "40", 10),
+                    maxFindings: runtsMaxFindings,
                 });
             }
             const hasLayoutLint = (opts.checkAlign?.length ?? 0) > 0 ||
@@ -508,6 +543,7 @@ async function runBrowse(url, opts, context) {
             let layoutLint;
             if (hasLayoutLint) {
                 layoutLint = await browser.checkLayoutLint({
+                    scanNodeBudget,
                     align: (opts.checkAlign ?? []).map((selector) => ({
                         selector,
                         axis: alignAxis,
@@ -544,6 +580,7 @@ async function runBrowse(url, opts, context) {
             let content;
             if (hasContentChecks) {
                 content = await browser.checkContent({
+                    scanNodeBudget,
                     placeholder: opts.checkPlaceholder !== undefined
                         ? { scope: contentScope(opts.checkPlaceholder) }
                         : null,
@@ -983,6 +1020,10 @@ async function runBrowse(url, opts, context) {
                 process.exitCode = 2;
         }
     }
+    catch (error) {
+        // A cookie guard that stopped the session is the real failure, not the closed-page errors it caused.
+        throw browser.cookieGuardFault ?? error;
+    }
     finally {
         process.removeListener("SIGINT", handleSigint);
         process.removeListener("SIGTERM", handleSigterm);
@@ -991,6 +1032,8 @@ async function runBrowse(url, opts, context) {
         if (receivedSignal)
             process.exitCode = receivedSignal === "SIGINT" ? 130 : 143;
     }
+    if (browser.cookieGuardFault)
+        throw browser.cookieGuardFault;
 }
 function parsePositiveInt(raw, flag) {
     if (!/^\d+$/.test(raw.trim()) || Number.parseInt(raw, 10) < 1) {
@@ -1822,7 +1865,7 @@ async function runQaPlanning(browser, targetArg, renderedUrl, opts) {
         const pageHeight = await browser.currentPage.evaluate(() => Math.max(document.documentElement.scrollHeight, document.body?.scrollHeight ?? 0));
         const band = Number.parseInt(opts.checkCritiqueBand ?? "1400", 10);
         const overlap = Number.parseInt(opts.checkCritiqueOverlap ?? "120", 10);
-        const maxTiles = Number.parseInt(opts.checkCritiqueMaxTiles ?? "24", 10);
+        const maxTiles = critiqueTilingKnobs(opts).maxTiles;
         const estimatedFullPageTiles = Math.min(maxTiles, Math.max(1, Math.ceil(pageHeight / Math.max(1, band - overlap))));
         const explicitScopes = [];
         for (const selector of opts.qaScope ?? []) {
@@ -1844,7 +1887,9 @@ async function runQaPlanning(browser, targetArg, renderedUrl, opts) {
  * routed provider's vision long-edge budget caps band height so tiles are
  * never silently downscaled by the model. */
 function critiqueTilingKnobs(opts, tileBudgetPx) {
-    const maxTiles = Math.max(1, Number.parseInt(opts.checkCritiqueMaxTiles ?? "24", 10));
+    // No flag value can exceed the hard per-invocation ceiling.
+    const requested = Number.parseInt(opts.checkCritiqueMaxTiles ?? "24", 10);
+    const maxTiles = Math.min(PAGE_REVIEW_MAX_TILE_BUDGET, Math.max(1, Number.isFinite(requested) ? requested : 24));
     const bandFlag = Math.max(200, Number.parseInt(opts.checkCritiqueBand ?? "1400", 10));
     const band = tileBudgetPx ? Math.max(200, Math.min(bandFlag, tileBudgetPx)) : bandFlag;
     const overlap = Math.max(0, Number.parseInt(opts.checkCritiqueOverlap ?? "120", 10));
@@ -2356,6 +2401,114 @@ async function runPlainLogin(url, profileDir, loginCloseFile, userAgent, emit) {
     }
     emit.log(`[--login] Chrome closed; cookies persisted in ${profileDir}.`, "info");
 }
+/**
+ * The WSL sign-in profile and the operations the cookie sync needs, or
+ * `undefined` when this machine has none (not WSL, no Windows Chrome, or
+ * `HARNERY_BROWSER_WSL_PLAIN=linux`).
+ */
+function windowsLoginProfile() {
+    if (!useWindowsPlainLogin())
+        return undefined;
+    const chromeLinux = windowsChromePath();
+    const localAppData = windowsLocalAppData();
+    if (!chromeLinux || !localAppData)
+        return undefined;
+    const chromeWindows = wslPathToWindows(chromeLinux);
+    const profileWindows = windowsPlainProfile(localAppData);
+    const profileLinux = windowsPathToWsl(profileWindows);
+    return {
+        profileWindows,
+        deps: {
+            cookieDbMtimeMs: () => profileCookieDbMtimeMs(profileLinux),
+            profileProcesses: () => windowsChromeProfileProcesses(profileWindows),
+            harvest: (domain) => harvestWindowsChromeCookies({
+                chromeWindows,
+                profileWindows,
+                domain,
+                pageTimeoutSeconds: 0,
+            }),
+        },
+    };
+}
+/** One-line summary of a sync that read cookies. Names only, never values. */
+function loginSyncSummary(result, storePath) {
+    if (result.status === "synced") {
+        return `Copied ${result.merged} ${result.domain} cookies (${result.sessionCookies} browser-session) from the sign-in profile into ${storePath}: ${result.names.join(", ")}.`;
+    }
+    return `The sign-in profile's ${result.domain} cookies (${result.cookies}) match the last copy; the cookie store was left as it is.`;
+}
+/**
+ * Before a headless run under WSL, copy the target site's cookies from the
+ * sign-in profile when the profile changed since the last copy and no
+ * Chrome is open on it. Failures are warnings; the run continues.
+ * `HARNERY_BROWSER_LOGIN_SYNC=off` turns it off.
+ */
+function autoSyncLoginCookies(url, storePath) {
+    if ((process.env.HARNERY_BROWSER_LOGIN_SYNC ?? "").toLowerCase() === "off")
+        return;
+    let profile;
+    let domain;
+    try {
+        profile = windowsLoginProfile();
+        domain = harvestDomain(url);
+    }
+    catch {
+        return;
+    }
+    if (!profile)
+        return;
+    try {
+        const result = syncLoginCookies({ domain, storePath, deps: profile.deps });
+        if (result.status === "open") {
+            emit.log(`[login-sync] The shared sign-in window (Windows Chrome on ${profile.profileWindows}) is open and changed since ${domain} cookies were last copied; this run uses the cookie store as it is. Its ${domain} session reaches headless runs after you close that window, or run \`${browseBinName} browse --sync-login ${url}\` once it is closed.`, "info");
+        }
+        else if (result.status === "busy") {
+            emit.log("[login-sync] Another run is copying sign-in cookies; this run did not wait.", "debug");
+        }
+        else if (result.status === "synced" || result.status === "unchanged") {
+            emit.log(`[login-sync] ${loginSyncSummary(result, storePath)}`, "info");
+        }
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        emit.log(`[login-sync] Could not copy ${domain} cookies from the sign-in profile; continuing with the cookie store as it is. ${message}`, "warn");
+    }
+}
+/** `--sync-login`: copy the URL's site cookies from the sign-in profile now. */
+function runSyncLogin(url, storePath) {
+    const profile = windowsLoginProfile();
+    if (!profile) {
+        throw new Error("--sync-login needs WSL with the Windows Google Chrome; this machine has no Windows sign-in profile.");
+    }
+    const domain = harvestDomain(url);
+    const result = syncLoginCookies({ domain, storePath, deps: profile.deps, force: true });
+    if (result.status === "no-profile") {
+        throw new Error(`The sign-in profile ${profile.profileWindows} has no cookies yet; sign in with \`${browseBinName} browse --login ${url}\` first.`);
+    }
+    if (result.status === "open") {
+        throw new Error(`Chrome is open on the sign-in profile ${profile.profileWindows} (process ${result.processes.join(", ")}). Close that window, then run --sync-login again.`);
+    }
+    if (result.status === "busy") {
+        throw new Error("Another run is copying sign-in cookies right now; try again in a moment.");
+    }
+    if (result.cookies === 0) {
+        emit.log(`[--sync-login] No ${domain} cookies were found in the sign-in profile.`, "warn");
+    }
+    else {
+        emit.log(`[--sync-login] ${loginSyncSummary(result, storePath)}`, "info");
+    }
+    emit.data({
+        loginSync: {
+            domain,
+            store: storePath,
+            status: result.status,
+            cookies: result.cookies,
+            merged: result.merged,
+            sessionCookies: result.sessionCookies,
+            names: result.names,
+        },
+    });
+}
 /**
  * Under WSL, `--login` opens the Windows host's Google Chrome when one
  * is installed. Some sign-in flows reject every browser running inside WSL,
@@ -2411,6 +2564,17 @@ async function runWindowsPlainLogin(url, storePath, loginCloseFile, emit) {
     await Promise.race([exited, new Promise((r) => setTimeout(r, 5000))]);
     const domain = harvestDomain(url);
     const { cookies, pages } = harvestWindowsChromeCookies({ chromeWindows, profileWindows, domain });
+    try {
+        recordLoginSync({
+            domain,
+            storePath,
+            cookies,
+            cookieDbMtimeMs: profileCookieDbMtimeMs(windowsPathToWsl(profileWindows)),
+        });
+    }
+    catch {
+        // The record only saves the next headless run a repeat read.
+    }
     const lastPage = pages[0] ?? null;
     const names = [...new Set(cookies.map((cookie) => cookie.name))].sort();
     const sessionCookies = cookies.filter((cookie) => cookie.expires <= 0).length;

package/dist/commands/fetch.js

@@ -74,6 +74,7 @@ async function runFetch(url, opts, emit, context) {
             signal: ac.signal,
             extraHeaders: context?.extraHeaders,
             extraCookies: context?.extraCookies,
+            clientRedirects: context?.clientRedirects?.() || undefined,
             responseType: "bytes",
         });
     }

package/dist/commands/ledger-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-v3.d.ts","sourceRoot":"","sources":["../../src/commands/ledger-v3.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAwC1E,2DAA2D;AAC3D,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAgbN"}
+{"version":3,"file":"ledger-v3.d.ts","sourceRoot":"","sources":["../../src/commands/ledger-v3.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAwC1E,2DAA2D;AAC3D,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAsbN"}

package/dist/commands/ledger-v3.js

@@ -3,7 +3,7 @@ import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { compressSealedLegacyV1Segments, inventoryLegacyV1Segments, streamLegacyV1Rows, verifyLegacyV1HardFence, writeLegacyV1Canary, } from "../core/events/legacy-storage/index.js";
-import { cleanEventV3Archives, initializeEventLedgerV3, inventoryEventV3Archives, listHookProducerStateRecordsV3, readEventV3ControlState, recoverInvalidEventLedgerV3, sha256V3, } from "../core/events/v3/index.js";
+import { cleanEventV3Archives, initializeEventLedgerV3, inventoryEventV3Archives, readEventV3ControlState, recoverInvalidEventLedgerV3, scanHookProducerStateRecordsV3, sha256V3, } from "../core/events/v3/index.js";
 import { authorizeEventV3SupportReplacement, inventoryEventV3Support, planEventV3SupportReplacement, planEventV3SupportTransaction, readEventV3SupportPackManifest, readEventV3SupportTransaction, streamEventV3SupportPackRecords, unpackEventV3SupportPack, verifyEventV3SupportTransactionShadow, writeEventV3SupportTransactionShadow, } from "../core/events/v3/support-storage/index.js";
 import { stateDirMode } from "../core/storage/modes.js";
 /** Inspect or initialize the universal V3 event ledger. */
@@ -19,7 +19,8 @@ export function registerLedgerV3Command(program, emit, context) {
         try {
             const root = resolve(options.root ?? coordRoot(context));
             const control = readEventV3ControlState(root);
-            const producers = listHookProducerStateRecordsV3(root, { includeTerminal: true });
+            const scan = scanHookProducerStateRecordsV3(root, { includeTerminal: true });
+            const producers = scan.records;
             const counts = producers.reduce((summary, record) => {
                 summary[record.state.adapter] = (summary[record.state.adapter] ?? 0) + 1;
                 return summary;
@@ -30,6 +31,11 @@ export function registerLedgerV3Command(program, emit, context) {
                     adapters: Object.keys(counts).sort(),
                     producer_states: producers.length,
                     producer_states_by_adapter: counts,
+                    invalid_producer_states: scan.invalid.map((file) => ({
+                        adapter: file.adapter,
+                        session_hash: file.session_hash,
+                        reason: file.reason,
+                    })),
                 },
             });
         }