negotium 0.1.41 → 0.1.42

package/dist/agent-helpers.js

@@ -2571,7 +2571,7 @@ var init_claude_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.41";
+var NEGOTIUM_VERSION = "0.1.42";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn3 } from "child_process";
@@ -9628,7 +9628,15 @@ var init_self_schedules = __esm(async () => {
 });
 
 // ../../packages/core/src/platform/playwright/manager-utils.ts
-import { resolve as resolve9 } from "path";
+function isLiveOwnedChildProcess(current2, expected) {
+  return current2?.process === expected && expected.exitCode === null && expected.signalCode === null && !expected.killed;
+}
+function matchesSpawnedBrowserHealth(health, expectedSpawnNonce) {
+  if (!health || typeof health !== "object")
+    return false;
+  const candidate = health;
+  return candidate.ok === true && candidate.name === "negotium-browser-gateway" && candidate.spawnNonce === expectedSpawnNonce;
+}
 function selectIdleEvictionKey(candidates, pinnedKeys, busyKeys, now, maxIdleMs) {
   const pinned = new Set(pinnedKeys);
   const busy = new Set(busyKeys);
@@ -9644,22 +9652,10 @@ function selectIdleEvictionKey(candidates, pinnedKeys, busyKeys, now, maxIdleMs)
   }
   return oldest?.key ?? null;
 }
-function selectReusablePort(minPort, maxPort, reservedPorts, isOccupied) {
-  for (let port = minPort;port <= maxPort; port++) {
-    if (reservedPorts.has(port) || isOccupied(port))
-      continue;
-    return port;
-  }
-  return null;
-}
 function extractUserDataDirArg(cmdline) {
   const match = cmdline.match(/--user-data-dir(?:\s+|=)(\S+)/);
   return match ? match[1] : null;
 }
-function browserProcessMatchesExpectedProfile(cmdline, expectedUserDataDir) {
-  const actualUserDataDir = extractUserDataDirArg(cmdline);
-  return actualUserDataDir !== null && resolve9(actualUserDataDir) === resolve9(expectedUserDataDir);
-}
 function waitForChildProcessExit(proc, timeoutMs) {
   if (proc.exitCode !== null || proc.signalCode !== null)
     return Promise.resolve(true);
@@ -9683,73 +9679,47 @@ function waitForChildProcessExit(proc, timeoutMs) {
       finish(true);
   });
 }
-function waitForChildProcessSpawnError(proc) {
-  return new Promise((_resolve, reject) => {
-    proc.once("error", reject);
-  });
-}
 var init_manager_utils = () => {};
 
 // ../../packages/core/src/platform/playwright/browser-processes.ts
 import { execFileSync as execFileSync6 } from "child_process";
 import { readdirSync as readdirSync3, unlinkSync as unlinkSync10 } from "fs";
-import { resolve as resolve10, sep } from "path";
+import { createServer } from "net";
+import { resolve as resolve9, sep } from "path";
 function isPortInUse(port) {
-  try {
-    execFileSync6("lsof", ["-i", `:${port}`, "-t"], { stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
+  return new Promise((resolveProbe) => {
+    const server = createServer();
+    let settled = false;
+    const finish = (occupied) => {
+      if (settled)
+        return;
+      settled = true;
+      server.removeAllListeners();
+      resolveProbe(occupied);
+    };
+    server.unref();
+    server.once("error", () => finish(true));
+    server.listen({ host: "127.0.0.1", port, exclusive: true }, () => {
+      server.close((error) => finish(error !== undefined));
+    });
+  });
 }
-async function killPlaywrightOnPort(port, expectedUserDataDir) {
-  try {
-    const pids = execFileSync6("lsof", ["-i", `:${port}`, "-t"], { stdio: "pipe" }).toString().trim();
-    if (!pids)
-      return;
-    for (const pid of pids.split(`
-`)) {
-      try {
-        const cmdline = execFileSync6("ps", ["-p", pid, "-o", "command="], { stdio: "pipe" }).toString().trim();
-        if (!cmdline.includes("mcp-patchright-http.mjs")) {
-          logger.warn({ port, pid, cmdline: cmdline.slice(0, 80) }, "Port occupied by non-browser-MCP process, skipping");
-          continue;
-        }
-        if (expectedUserDataDir) {
-          const otherDataDir = extractUserDataDirArg(cmdline);
-          if (!browserProcessMatchesExpectedProfile(cmdline, expectedUserDataDir)) {
-            logger.warn({
-              port,
-              pid,
-              otherDataDir,
-              expectedUserDataDir
-            }, "Port occupied by another topic's playwright-mcp, skipping");
-            continue;
-          }
-        }
-        const pidNum = parseInt(pid, 10);
-        if (!Number.isNaN(pidNum)) {
-          killProcessTreeChildren(pidNum);
-          process.kill(pidNum, "SIGKILL");
-        }
-        logger.info({ pid, port }, "Killed zombie mcp-patchright");
-      } catch (e) {
-        logger.warn({ err: e, port }, "Failed to inspect process occupying port");
-      }
+async function reserveAvailableLoopbackPort(minPort, maxPort, reservedPorts, probeOccupied = isPortInUse) {
+  for (let port = minPort;port <= maxPort; port++) {
+    if (reservedPorts.has(port))
+      continue;
+    reservedPorts.add(port);
+    if (await probeOccupied(port)) {
+      reservedPorts.delete(port);
+      continue;
     }
-  } catch (e) {
-    logger.warn({ err: e, port }, "Failed to check processes on port");
-  }
-  const start = Date.now();
-  while (Date.now() - start < 3000) {
-    if (!isPortInUse(port))
-      return;
-    await delay(200);
+    return port;
   }
+  return null;
 }
 function killBrowserProcsForUserDataDir(userDataDir) {
-  const target = resolve10(userDataDir);
-  const profileRoot = resolve10(BROWSER_PROFILES_DIR);
+  const target = resolve9(userDataDir);
+  const profileRoot = resolve9(BROWSER_PROFILES_DIR);
   if (target !== profileRoot && !target.startsWith(`${profileRoot}${sep}`))
     return;
   let pids;
@@ -9770,7 +9740,7 @@ function killBrowserProcsForUserDataDir(userDataDir) {
         stdio: "pipe"
       }).toString().trim();
       const argDir = extractUserDataDirArg(cmdline);
-      if (!argDir || resolve10(argDir) !== target)
+      if (!argDir || resolve9(argDir) !== target)
         continue;
       killProcessTreeChildren(pidNum);
       process.kill(pidNum, "SIGKILL");
@@ -9781,13 +9751,13 @@ function killBrowserProcsForUserDataDir(userDataDir) {
   }
 }
 function selectOrphanBrowserPids(procs, liveUserDataDirs, profileRoot, selfPid) {
-  const root = resolve10(profileRoot);
-  const live = new Set([...liveUserDataDirs].map((d) => resolve10(d)));
+  const root = resolve9(profileRoot);
+  const live = new Set([...liveUserDataDirs].map((d) => resolve9(d)));
   const out = [];
   for (const { pid, userDataDir } of procs) {
     if (pid === selfPid || !userDataDir)
       continue;
-    const dir = resolve10(userDataDir);
+    const dir = resolve9(userDataDir);
     if (dir !== root && !dir.startsWith(`${root}${sep}`))
       continue;
     if (live.has(dir))
@@ -9803,7 +9773,7 @@ function reapOrphanBrowsers(liveUserDataDirs) {
   const daemonLease = getRuntimeProcessLease("node-daemon", Date.now(), Number.POSITIVE_INFINITY);
   if (!isBrowserJanitorOwner(daemonLease?.pid ?? null, process.pid))
     return;
-  const profileRoot = resolve10(BROWSER_PROFILES_DIR);
+  const profileRoot = resolve9(BROWSER_PROFILES_DIR);
   let pids;
   try {
     pids = execFileSync6("pgrep", ["-f", "--", profileRoot], { stdio: "pipe" }).toString().trim();
@@ -9836,26 +9806,13 @@ function reapOrphanBrowsers(liveUserDataDirs) {
     }
   }
 }
-async function isHealthy(port) {
-  for (const path of ["/health", "/sse?owner=__negotium_health__"]) {
-    try {
-      const res = await fetch(`http://127.0.0.1:${port}${path}`, {
-        signal: AbortSignal.timeout(2000)
-      });
-      await res.body?.cancel();
-      if (res.ok)
-        return true;
-    } catch {}
-  }
-  return false;
-}
 function cleanSingletonFiles(userDataDir) {
   try {
     const files = readdirSync3(userDataDir);
     for (const f of files) {
       if (f.startsWith("Singleton")) {
         try {
-          unlinkSync10(resolve10(userDataDir, f));
+          unlinkSync10(resolve9(userDataDir, f));
           logger.info({ file: f, userDataDir }, "Removed stale Singleton file");
         } catch (e) {
           logger.warn({ err: e, file: f }, "Failed to remove stale Chrome Singleton file");
@@ -9895,9 +9852,9 @@ var init_browser_processes = __esm(async () => {
 
 // ../../packages/core/src/platform/playwright/headed-launch.ts
 import { accessSync as accessSync2, constants as constants2 } from "fs";
-import { delimiter, isAbsolute as isAbsolute3, resolve as resolve11 } from "path";
+import { delimiter, isAbsolute as isAbsolute3, resolve as resolve10 } from "path";
 function findExecutableOnPath(command, environment = process.env) {
-  const candidates = isAbsolute3(command) ? [command] : (environment.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => resolve11(directory, command));
+  const candidates = isAbsolute3(command) ? [command] : (environment.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => resolve10(directory, command));
   for (const candidate of candidates) {
     try {
       accessSync2(candidate, constants2.X_OK);
@@ -10058,7 +10015,7 @@ import {
   unlinkSync as unlinkSync11,
   writeFileSync as writeFileSync8
 } from "fs";
-import { dirname as dirname11, join as join18, resolve as resolve12 } from "path";
+import { dirname as dirname11, join as join18, resolve as resolve11 } from "path";
 function makeInstanceKey(userId, topic) {
   return resolvePlaywrightTopicBinding(userId, topic).instanceKey;
 }
@@ -10097,7 +10054,7 @@ function migrateLegacyTopicProfile(ownerId, topic) {
   const current2 = getTopicBrowserProfile(topic);
   if (current2 !== "default" || !hasBrowserProfileTopic(topic))
     return current2;
-  const legacyDir = resolve12(BROWSER_PROFILES_DIR, sanitizeTopicName(topic));
+  const legacyDir = resolve11(BROWSER_PROFILES_DIR, sanitizeTopicName(topic));
   if (!existsSync16(legacyDir))
     return current2;
   const profile = legacyBrowserProfileName(topic);
@@ -10248,29 +10205,19 @@ function evictIdleInstance() {
   }
   return null;
 }
-async function allocatePort(expectedUserDataDir) {
-  for (let port = managerHost.basePort;port <= managerHost.maxPort; port++) {
-    if (usedPorts.has(port))
-      continue;
-    usedPorts.add(port);
-    if (isPortInUse(port)) {
-      logger.warn({ port }, "Port occupied by external process, attempting cleanup");
-      await killPlaywrightOnPort(port, expectedUserDataDir);
-      if (isPortInUse(port)) {
-        usedPorts.delete(port);
-        continue;
-      }
-    }
+async function allocatePort() {
+  const port = await reserveAvailableLoopbackPort(managerHost.basePort, managerHost.maxPort, usedPorts, async (candidate) => {
+    const occupied = await isPortInUse(candidate);
+    if (occupied)
+      logger.warn({ port: candidate }, "Port occupied by external process, skipping");
+    return occupied;
+  });
+  if (port !== null)
     return port;
-  }
   const evictedPort = evictIdleInstance();
   if (evictedPort !== null) {
     await waitForPortRelease(evictedPort);
-    const reusablePort = selectReusablePort(managerHost.basePort, managerHost.maxPort, usedPorts, isPortInUse);
-    if (reusablePort !== null) {
-      usedPorts.add(reusablePort);
-      return reusablePort;
-    }
+    return allocatePort();
   }
   throw new Error(`No available ports for Playwright MCP (${instances.size} active instances, range ${managerHost.basePort}-${managerHost.maxPort})`);
 }
@@ -10282,7 +10229,7 @@ function ownerDirectory(ownerId) {
   return `${sanitizeTopicName(ownerId).slice(0, 24)}_${digest}`;
 }
 function defaultProfileDir(ownerId, profile) {
-  return resolve12(BROWSER_PROFILES_DIR, "profiles", ownerDirectory(ownerId), profile);
+  return resolve11(BROWSER_PROFILES_DIR, "profiles", ownerDirectory(ownerId), profile);
 }
 function resolveUserDataDir(instanceKey) {
   return managerHost.resolveInstanceDataDir(instanceKey);
@@ -10308,9 +10255,53 @@ function killInstance(instanceKey, opts) {
   deletePortFile(instanceKey);
   logger.info({ instanceKey, port: inst.port, keepPort: !!opts?.keepPort }, "Killed Playwright MCP (with cleanup)");
 }
+function captureBoundedStderr(proc) {
+  let tail = Buffer.alloc(0);
+  proc.stderr?.on("data", (chunk) => {
+    const next = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    tail = Buffer.concat([tail, next]);
+    if (tail.byteLength > PLAYWRIGHT_STARTUP_STDERR_LIMIT) {
+      tail = tail.subarray(tail.byteLength - PLAYWRIGHT_STARTUP_STDERR_LIMIT);
+    }
+  });
+  return () => tail.toString("utf8").trim();
+}
+function watchChildStartup(proc, stderrTail) {
+  let stopped = false;
+  let rejectFailure = () => {
+    return;
+  };
+  const diagnostics = () => {
+    const stderr = stderrTail();
+    return stderr ? `
+stderr (last ${PLAYWRIGHT_STARTUP_STDERR_LIMIT} bytes):
+${stderr}` : "";
+  };
+  const onError = (error) => {
+    rejectFailure(new Error(`Playwright MCP failed to spawn: ${error.message}${diagnostics()}`, {
+      cause: error
+    }));
+  };
+  const onExit = (code, signal) => {
+    rejectFailure(new Error(`Playwright MCP exited during startup (code=${code ?? "null"}, signal=${signal ?? "null"})${diagnostics()}`));
+  };
+  const failure = new Promise((_resolve, reject) => {
+    rejectFailure = reject;
+    proc.once("error", onError);
+    proc.once("exit", onExit);
+  });
+  const stop = () => {
+    if (stopped)
+      return;
+    stopped = true;
+    proc.off("error", onError);
+    proc.off("exit", onExit);
+  };
+  return { failure, stop };
+}
 async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin = managerHost.browserBin, allowFallback = true) {
   const userDataDir = resolveUserDataDir(instanceKey);
-  const port = reservedPort ?? await allocatePort(userDataDir);
+  const port = reservedPort ?? await allocatePort();
   mkdirSync10(userDataDir, { recursive: true });
   const mcpArgs = [
     "--port",
@@ -10323,6 +10314,7 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
   ];
   const proxy = managerHost.resolveProxy();
   const capability = randomBytes5(32).toString("hex");
+  const spawnNonce = randomBytes5(32).toString("hex");
   const childEnv = {
     ...managerHost.createChildEnvironment({
       instanceKey,
@@ -10332,7 +10324,8 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
       browserRsBin: managerHost.browserRsBin,
       environment: process.env
     }),
-    NEGOTIUM_BROWSER_CAPABILITY: capability
+    NEGOTIUM_BROWSER_CAPABILITY: capability,
+    NEGOTIUM_BROWSER_SPAWN_NONCE: spawnNonce
   };
   if (proxy) {
     logger.info({ instanceKey, proxyServer: proxy.server }, "Browser egress proxy enabled");
@@ -10349,7 +10342,7 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
   let proc;
   try {
     proc = spawn4(spawnSpec.command, spawnSpec.args, {
-      stdio: "ignore",
+      stdio: ["ignore", "ignore", "pipe"],
       detached: false,
       env: childEnv
     });
@@ -10357,14 +10350,15 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
     releasePort(port);
     throw err;
   }
-  const spawnError = waitForChildProcessSpawnError(proc);
+  const stderrTail = captureBoundedStderr(proc);
+  const startup = watchChildStartup(proc, stderrTail);
   const reapCrashedBrowser = () => {
     const userDataDir2 = resolveUserDataDir(instanceKey);
     managerHost.cleanupBrowserProcessesForDataDir(userDataDir2);
     cleanSingletonFiles(userDataDir2);
   };
   proc.once("error", (err) => {
-    logger.error({ err, instanceKey }, "Playwright MCP error");
+    logger.error({ err, instanceKey, stderr: stderrTail() || undefined }, "Playwright MCP error");
     if (instances.get(instanceKey)?.process === proc) {
       releasePort(port);
       instances.delete(instanceKey);
@@ -10376,7 +10370,7 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
     }
   });
   proc.once("exit", (code) => {
-    logger.info({ instanceKey, code }, "Playwright MCP exited");
+    logger.info({ instanceKey, code, stderr: stderrTail() || undefined }, "Playwright MCP exited");
     const wasOurs = instances.get(instanceKey)?.process === proc;
     if (wasOurs) {
       releasePort(port);
@@ -10394,18 +10388,42 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
     lastUsedAt: now,
     capability
   });
-  const ready = await Promise.race([
-    (async () => await waitForServer(port, 1e4) && await supportsOwnerCleanup(port, capability) && await probePlaywrightMcpTransports(port, capability))(),
-    spawnError
-  ]);
+  let startupError;
+  let ready = false;
+  try {
+    ready = await Promise.race([
+      (async () => await waitForServer(port, spawnNonce, 1e4) && await supportsOwnerCleanup(port, capability) && await probePlaywrightMcpTransports(port, capability))(),
+      startup.failure
+    ]);
+  } catch (error) {
+    startupError = error instanceof Error ? error : new Error(String(error));
+  } finally {
+    startup.stop();
+  }
+  if (ready && !isLiveOwnedChildProcess(instances.get(instanceKey), proc)) {
+    ready = false;
+    startupError = new Error(`Playwright MCP exited after readiness but before publication on port ${port}` + (stderrTail() ? `
+stderr:
+${stderrTail()}` : ""));
+  }
   if (!ready) {
     const exitCode = proc.exitCode;
     killInstance(instanceKey);
     if (allowFallback && browserBin !== managerHost.fallbackBrowserBin) {
-      logger.warn({ instanceKey, browserBin, fallback: managerHost.fallbackBrowserBin }, "Preferred browser MCP unavailable or lacks owner isolation; using Patchright fallback");
+      logger.warn({
+        err: startupError,
+        instanceKey,
+        browserBin,
+        fallback: managerHost.fallbackBrowserBin,
+        stderr: stderrTail() || undefined
+      }, "Preferred browser MCP unavailable or lacks owner isolation; using Patchright fallback");
       return spawnPlaywright(instanceKey, ownerId, undefined, managerHost.fallbackBrowserBin, false);
     }
-    throw new Error(`Playwright MCP failed health check after spawn on port ${port}` + (exitCode === null ? "" : ` (exitCode=${exitCode})`));
+    if (startupError)
+      throw startupError;
+    throw new Error(`Playwright MCP failed health check after spawn on port ${port}` + (exitCode === null ? "" : ` (exitCode=${exitCode})`) + (stderrTail() ? `
+stderr:
+${stderrTail()}` : ""));
   }
   writePortFile(instanceKey, port);
   logger.info({ instanceKey, port, pid: proc.pid, ready, virtualDisplay: spawnSpec.virtualDisplay }, "Playwright MCP started");
@@ -10469,7 +10487,7 @@ async function ensurePlaywright(userId, topic) {
 async function waitForPortRelease(port, timeoutMs = 3000) {
   const start = Date.now();
   while (Date.now() - start < timeoutMs) {
-    if (!isPortInUse(port))
+    if (!await isPortInUse(port))
       return;
     await delay(200);
   }
@@ -10498,11 +10516,22 @@ async function closeBrowserOwnerTabs(ownerId, rawProfile, owner) {
   const result = await response.json();
   return typeof result.closed === "number" ? result.closed : 0;
 }
-async function waitForServer(port, timeoutMs) {
+async function waitForServer(port, expectedSpawnNonce, timeoutMs) {
   const start = Date.now();
   while (Date.now() - start < timeoutMs) {
-    if (await isHealthy(port))
-      return true;
+    try {
+      const response = await fetch(`http://127.0.0.1:${port}/health`, {
+        signal: AbortSignal.timeout(1000)
+      });
+      if (response.ok) {
+        const health = await response.json();
+        if (matchesSpawnedBrowserHealth(health, expectedSpawnNonce)) {
+          return true;
+        }
+      } else {
+        await response.body?.cancel();
+      }
+    } catch {}
     await delay(300);
   }
   logger.warn({ port, timeoutMs }, "Playwright MCP not ready before timeout");
@@ -10576,7 +10605,7 @@ async function cloneProfileForChild(opts) {
     cleanSingletonFiles(dstDir);
     for (const f of ["DevToolsActivePort", "LOCK"]) {
       try {
-        unlinkSync11(resolve12(dstDir, f));
+        unlinkSync11(resolve11(dstDir, f));
       } catch {}
     }
     logger.info({ srcKey, dstKey, srcDir, dstDir }, "Cloned Playwright profile for child topic");
@@ -10589,7 +10618,7 @@ function deleteTopicProfileDir(userId, topic) {
   logger.info({ dir, userId, topic }, "Preserved shared browser profile on topic deletion");
   return { deleted: false, dir };
 }
-var defaultManagerHost, managerHost, MAX_IDLE_MS, instances, usedPorts, spawning, pinnedInstances, playwrightFailureHandlers;
+var defaultManagerHost, managerHost, MAX_IDLE_MS, instances, usedPorts, spawning, pinnedInstances, playwrightFailureHandlers, PLAYWRIGHT_STARTUP_STDERR_LIMIT;
 var init_manager2 = __esm(async () => {
   init_config();
   init_logger();
@@ -10626,6 +10655,7 @@ var init_manager2 = __esm(async () => {
   spawning = new Map;
   pinnedInstances = new Map;
   playwrightFailureHandlers = new Set;
+  PLAYWRIGHT_STARTUP_STDERR_LIMIT = 8 * 1024;
   setInterval(() => {
     while (evictIdleInstance() !== null) {}
     try {
@@ -13188,12 +13218,12 @@ var init_errors = __esm(() => {
 
 // ../../packages/core/src/runtime/event-heartbeat.ts
 function nextOrHeartbeat(pending, intervalMs) {
-  return new Promise((resolve13, reject) => {
-    const timer = setTimeout(() => resolve13({ kind: "heartbeat" }), intervalMs);
+  return new Promise((resolve12, reject) => {
+    const timer = setTimeout(() => resolve12({ kind: "heartbeat" }), intervalMs);
     timer.unref?.();
     pending.then((result) => {
       clearTimeout(timer);
-      resolve13({ kind: "event", result });
+      resolve12({ kind: "event", result });
     }, (error) => {
       clearTimeout(timer);
       reject(error);
@@ -13448,7 +13478,7 @@ var init_visual_html = __esm(() => {
 
 // ../../packages/core/src/runtime/visuals.ts
 import { realpathSync as realpathSync4 } from "fs";
-import { isAbsolute as isAbsolute4, resolve as resolve13 } from "path";
+import { isAbsolute as isAbsolute4, resolve as resolve12 } from "path";
 function activeVisualHtmlForPrompt(html) {
   if (html.length <= ACTIVE_VISUAL_PROMPT_MAX_CHARS) {
     return { html, omittedChars: 0 };
@@ -13499,8 +13529,8 @@ function topicAllowsVisualFileId(topicId, fileId) {
   return topicHasAttachmentFileId(topicId, fileId) || topicHasVisualFileId(topicId, fileId);
 }
 function isPathInside(baseDir, filePath) {
-  const base = resolve13(baseDir);
-  const normalized = resolve13(filePath);
+  const base = resolve12(baseDir);
+  const normalized = resolve12(filePath);
   try {
     const realBase = realpathSync4(base);
     const real = realpathSync4(normalized);
@@ -13562,7 +13592,7 @@ function resolveVisualMediaInput(topicId, input) {
   }
   const rawPath = input.file_path.trim();
   const cwd = workspaceCwdFor(topicId);
-  const candidate = isAbsolute4(rawPath) ? rawPath : resolve13(cwd, rawPath);
+  const candidate = isAbsolute4(rawPath) ? rawPath : resolve12(cwd, rawPath);
   if (!isPathInside(cwd, candidate)) {
     return { error: "file_path must be inside the topic workspace" };
   }
@@ -13635,7 +13665,7 @@ var init_token_stats = __esm(async () => {
 // ../../packages/core/src/runtime/turn-event-stream.ts
 import { randomUUID as randomUUID15 } from "crypto";
 import { realpathSync as realpathSync5, statSync as statSync8 } from "fs";
-import { isAbsolute as isAbsolute5, resolve as resolve14 } from "path";
+import { isAbsolute as isAbsolute5, resolve as resolve13 } from "path";
 function sessionEventMatchesCurrentExecution(topicId, queryId, agent, model) {
   if (getRoomQuery(topicId)?.queryId !== queryId)
     return false;
@@ -13942,7 +13972,7 @@ async function runTurnEventStream(topicId, topicTitle, queryId, events, control,
         case "file":
           if (!silent && peerBridge) {
             const cwd = workspaceCwdFor(topicId);
-            const path = isAbsolute5(event.path) ? event.path : resolve14(cwd, event.path);
+            const path = isAbsolute5(event.path) ? event.path : resolve13(cwd, event.path);
             if (!isPathInside(cwd, path)) {
               logger.warn({ topicId, path }, "peer output file is outside the topic workspace");
               break;
@@ -17100,4 +17130,4 @@ export {
   DEFAULT_SELF_CONFIG_PRODUCT
 };
 
-//# debugId=819C25A6CBDCEB1764756E2164756E21
+//# debugId=B58744AF223B7C9664756E2164756E21