u-chan-secrets 5.0.0 → 5.0.1

package/README.md

@@ -20,6 +20,19 @@ Windows Hello and Touch ID remain [research only](docs/superpowers/research/2026
 
 ## What V5 adds
 
+### Updating an existing Windows V5 installation to 5.0.1
+
+Run these commands from a normal, non-administrator PowerShell terminal:
+
+```powershell
+npm.cmd install --global u-chan-secrets@5.0.1
+u-chan.cmd update
+u-chan.cmd setup --apply
+u-chan doctor
+```
+
+The signed service update restarts U-Chan and clears its in-memory vault unlock. Run `u-chan unlock` afterward and enter the master password only in the protected prompt. The explicit `.cmd` spelling bootstraps setup when npm's PowerShell launcher is blocked; afterward the short `u-chan` command works. Restart the AI session if setup requests it. Existing browser choice, grants, and vault data remain local; a site's success condition must be approved separately on each installation. Older versions with changed dependencies or native helpers may require the trusted administrator reinstall described below.
+
 Choose your browser from a normal Windows terminal:
 
 ```powershell
@@ -60,6 +73,8 @@ Setup reports `configured` or `needs_attention`, plus `sharing` and `restartRequ
 
 Automatic registration supports Codex on Windows only. Configure other clients manually using their documented MCP commands. macOS runtime remains unverified. `doctor` compares the actual CLI and installed service versions, both browser targets, and Windows UAC policy; missing metadata remains unknown. `manage` shows the installed service version and browser status.
 
+On Windows, `setup --apply` also makes the short `u-chan` command work when PowerShell blocks scripts. It moves the recognized npm-generated `u-chan.ps1` launcher into the npm directory's `#0 backup`, leaving `u-chan.cmd` available for PowerShell to resolve automatically. Execution policy and PowerShell profiles are unchanged. Inspection without `--apply` is read-only, and custom launchers are preserved. If the first setup command is blocked, run `u-chan.cmd setup --apply`. Rerun setup after an npm installation or update recreates the PowerShell launcher. Shell results and the backup path appear in the setup JSON report.
+
 Propose a site grant with an explicit success condition:
 
 ```sh

package/dist/cli.js

@@ -15,6 +15,7 @@ import { configureCodex, isElevated } from './client/codex-setup.js';
 import { runSetup, setupExitCode } from './client/setup.js';
 import { parseAllowArgs } from './client/allow.js';
 import { saveBrowserChoice } from './client/browser-choice.js';
+import { configureWindowsCommand } from './client/windows-command.js';
 const USAGE = 'usage: u-chan install [--mode <easy|hardcore>] [--phrase <phrase>] | uninstall | unlock | lock | mode <easy|hardcore> | import-v1 [path] | audit [limit] | update | doctor [--json] | manage';
 /** import-v1 shows one approval window per entry, each open for up to 2 minutes, one after another. */
 export const IMPORT_PROMPT_MS = 120000;
@@ -110,6 +111,7 @@ export async function main(argv, d) {
         const cfg = loadConfig(diagnosticEnv, d.platform), endpoint = cfg.cdpEndpoint;
         const r = d.setup ? await d.setup(options) : await runSetup(options, {
             platform: d.platform, endpoint, browser: cfg.browser, elevated: isElevated, doctor,
+            configureShell: apply => configureWindowsCommand(apply, d.env.PATH ?? d.env.Path ?? ''),
             selectBrowser: choice => saveBrowserChoice(cfg.browserChoicePath, choice),
             configure: opts => configureCodex({ ...opts, browser: cfg.browser, endpoint, ipcEndpoint: defaultEndpoint(d.env, d.platform), nodePath: process.execPath, entryPath: fileURLToPath(new URL('./index.js', import.meta.url)), configDir: d.env.CODEX_HOME ?? join(homedir(), '.codex') }),
             startBrowser: () => new Promise(resolve => {

package/dist/client/setup.js

@@ -19,6 +19,11 @@ export async function runSetup(o, d) {
             r.client = 'manual';
             return r;
         }
+        if (d.configureShell) {
+            r.shell = await d.configureShell(o.apply);
+            r.changed = r.shell.changed;
+            action('configure_shell', r.shell.message, !r.shell.ready);
+        }
         if (r.checks.some(c => c.id === 'browser_target' && c.state === 'fail')) {
             r.sharing = 'mismatch';
             action('configure_mcp', 'Align the desktop and service loopback browser targets before applying setup.');
@@ -26,9 +31,9 @@ export async function runSetup(o, d) {
         }
         const configured = await d.configure({ apply: o.apply, replaceExisting: o.replaceExisting, ...(o.browser ? { browser: o.browser } : {}) });
         r.client = configured.state;
-        r.changed = configured.changed;
+        r.changed ||= configured.changed;
         r.backupPath = configured.backupPath;
-        r.restartRequired = r.changed;
+        r.restartRequired = configured.changed;
         if (o.browser && o.apply && r.client === 'ready') {
             if (!d.selectBrowser)
                 throw new Error('browser selection unavailable');
@@ -48,7 +53,7 @@ export async function runSetup(o, d) {
         const pw = r.checks.find(c => c.id === 'playwright');
         const mismatch = r.checks.some(c => c.id === 'browser_target' && c.state === 'fail');
         r.sharing = mismatch || pw?.state === 'fail' ? 'mismatch' : pw?.state === 'pass' ? 'process_configured' : 'unobserved';
-        r.restartRequired = r.changed || pw?.state === 'fail';
+        r.restartRequired ||= pw?.state === 'fail';
         const ids = { registration: 'install_service', service: 'install_service', ipc: 'install_service',
             version: 'update_service', assets: 'repair_permissions', permissions: 'repair_permissions', service_browser: 'start_browser', chrome: 'start_browser',
             browser_target: 'configure_mcp', browser_identity: 'start_browser', playwright: 'configure_mcp', uac: 'review_uac' };
@@ -65,7 +70,7 @@ export async function runSetup(o, d) {
             action('restart_client', 'Restart the AI session to load saved MCP registrations.', false);
         action('configure_mcp', 'Active AI-session browser ownership is unverified; check the current client browser connection.', false);
         const requiredOk = r.checks.length > 0 && r.checks.filter(c => c.required).every(c => c.state === 'pass');
-        if (requiredOk && r.client === 'ready' && started && !mismatch)
+        if (requiredOk && r.client === 'ready' && started && !mismatch && r.shell?.ready !== false)
             r.state = 'configured';
         return r;
     }

package/dist/client/windows-command.js

@@ -0,0 +1,54 @@
+import { lstat, mkdir, readFile, rename, realpath } from 'node:fs/promises';
+import { delimiter, join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+/** Let PowerShell resolve the npm .cmd launcher without changing execution policy or loading a profile. */
+export async function configureWindowsCommand(apply, searchPath) {
+    const result = (ready, message) => ({ ready, changed: false, message });
+    try {
+        for (const entry of searchPath.split(delimiter).filter(Boolean)) {
+            const directory = resolve(entry.replace(/^"|"$/g, ''));
+            const script = join(directory, 'u-chan.ps1'), command = join(directory, 'u-chan.cmd');
+            const exists = async (file) => {
+                try {
+                    return await lstat(file);
+                }
+                catch (error) {
+                    if (error.code === 'ENOENT')
+                        return undefined;
+                    throw error;
+                }
+            };
+            const ps = await exists(script), cmd = await exists(command);
+            if (!ps && !cmd)
+                continue;
+            if (!cmd?.isFile() || cmd.isSymbolicLink() || (ps && (!ps.isFile() || ps.isSymbolicLink()))) {
+                return result(false, 'Custom or redirected u-chan launcher preserved; use u-chan.cmd unlock.');
+            }
+            const batch = await readFile(command, 'utf8');
+            if (!batch.includes('"%dp0%\\node_modules\\u-chan-secrets\\dist\\cli.js" %*')) {
+                return result(false, 'Unrecognized u-chan launcher preserved; inspect command installation manually.');
+            }
+            if (!ps)
+                return result(true, 'PowerShell can use the u-chan.cmd launcher as u-chan.');
+            const source = await readFile(script, 'utf8');
+            if (!source.startsWith('#!/usr/bin/env pwsh') || !source.includes('"$basedir/node_modules/u-chan-secrets/dist/cli.js" $args') || !source.trimEnd().endsWith('exit $ret')) {
+                return result(false, 'Custom PowerShell launcher preserved; use u-chan.cmd unlock.');
+            }
+            if (!apply)
+                return result(false, 'Run u-chan.cmd setup --apply to make u-chan work without PowerShell scripts.');
+            if ((await realpath(directory)).toLowerCase() !== directory.toLowerCase())
+                throw new Error('Redirected launcher directory.');
+            const backupDirectory = join(directory, '#0 backup');
+            await mkdir(backupDirectory, { recursive: true });
+            if ((await lstat(backupDirectory)).isSymbolicLink() || (await realpath(backupDirectory)).toLowerCase() !== backupDirectory.toLowerCase())
+                throw new Error('Redirected backup directory.');
+            const backupPath = join(backupDirectory, `u-chan-${randomUUID()}.ps1`);
+            await rename(script, backupPath);
+            return { ready: true, changed: true, backupPath, message: 'PowerShell now uses u-chan.cmd as u-chan; original .ps1 launcher retained in #0 backup.' };
+        }
+        return result(true, 'No npm u-chan launcher found on PATH; source checkout commands remain unchanged.');
+    }
+    catch {
+        return result(false, 'Could not configure the PowerShell command; use u-chan.cmd unlock and inspect launcher permissions.');
+    }
+}

package/dist/platform/windows/install.js

@@ -92,6 +92,10 @@ export async function installWindowsService(opts = {}) {
         const pkgRoot = opts.packageRoot ?? fileURLToPath(new URL('../../../', import.meta.url));
         await fs.cp(path.join(pkgRoot, 'dist'), path.join(stagedProgram, 'dist'), { recursive: true });
         await fs.cp(path.join(pkgRoot, 'package.json'), path.join(stagedProgram, 'package.json'));
+        await fs.mkdir(path.join(stagedProgram, 'scripts'));
+        for (const file of ['start-browser.ps1', 'desktop-browser.ps1']) {
+            await fs.copyFile(path.join(pkgRoot, 'scripts', file), path.join(stagedProgram, 'scripts', file));
+        }
         const srcNm = path.join(pkgRoot, 'node_modules');
         const destNm = path.join(stagedProgram, 'node_modules');
         {

package/dist/service/doctor.js

@@ -8,6 +8,9 @@ export async function diagnoseService(home, vault, platform, cdpEndpoint) {
     const paths = [join(home, 'program', 'dist', 'service', 'main.js'), join(home, 'program', 'node_modules'),
         platform === 'win32' ? join(home, 'bin', 'node.exe') : process.execPath,
         platform === 'win32' ? join(home, 'bin', 'bw.exe') : join(home, 'bin', 'bw')];
+    if (platform === 'win32')
+        for (const file of ['start-browser.ps1', 'desktop-browser.ps1'])
+            paths.push(join(home, 'program', 'scripts', file));
     const [assets, permissions, status, browser, browserKind] = await Promise.all([
         bounded(async () => {
             await privateBrowserPath(home);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "u-chan-secrets",
-  "version": "5.0.0",
+  "version": "5.0.1",
   "description": "U-Chan Secrets: local MCP server for Bitwarden-backed logins",
   "license": "MIT",
   "type": "module",

package/scripts/debug-install.bat

@@ -1,69 +1,69 @@
-@echo off
-setlocal
-set ROOT=%~dp0..
-
-fltmc.exe >nul 2>&1
-if %errorlevel% neq 0 (
-    echo [*] Requesting Administrator elevation...
-    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
-    exit /b
-)
-
-cd /d "%ROOT%"
-echo ========================================================
-echo       U-Chan Secrets V2 Installation & Setup
-echo ========================================================
-echo.
-echo [*] Step 1: Stopping previous service (if any)...
-taskkill /F /IM prompt-helper.exe >nul 2>&1
-taskkill /F /IM auth-helper.exe >nul 2>&1
-call node dist\cli.js uninstall
-echo.
-echo [*] Step 2: Installing U-Chan Windows Service...
-call node dist\cli.js install
-if %errorlevel% neq 0 (
-    echo.
-    echo [X] Installation failed with exit code %errorlevel%.
-    pause
-    exit /b %errorlevel%
-)
-icacls C:\ProgramData\u-chan-secrets\bin /grant "Users:(OI)(CI)RX" >nul 2>&1
-echo.
-echo [*] Step 3: Checking service status...
-sc.exe query u-chan-secrets
-echo.
-
-echo [*] Step 4: Bitwarden Vault Login...
-set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
-set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
-if not exist "%BW_BIN%" (
-    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
-)
-
-if exist "%BW_BIN%" (
-    "%BW_BIN%" status > "%TEMP%\bw_stat.json" 2>&1
-    findstr /C:"\"unauthenticated\"" "%TEMP%\bw_stat.json" >nul 2>&1
-    if %errorlevel% equ 0 (
-        echo [!] Bitwarden is not logged in for the privileged service.
-        echo [*] Please log in to your Bitwarden vault below:
-        "%BW_BIN%" login
-    ) else (
-        echo [+] Bitwarden vault is already logged in.
-    )
-    del "%TEMP%\bw_stat.json" >nul 2>&1
-) else (
-    echo [!] Warning: bw.exe not found.
-)
-
-echo.
-copy /y C:\ProgramData\u-chan-secrets\service.log "%ROOT%\service-copy.log" >nul 2>&1
-copy /y C:\ProgramData\u-chan-secrets\settings.json "%ROOT%\settings-copy.json" >nul 2>&1
-echo ========================================================
-echo [+] Service and Bitwarden configuration complete!
-echo.
-echo Next: Close this window, open your normal terminal, and run:
-echo    u-chan import-v1
-echo    u-chan unlock
-echo ========================================================
-echo.
-pause
+@echo off
+setlocal
+set ROOT=%~dp0..
+
+fltmc.exe >nul 2>&1
+if %errorlevel% neq 0 (
+    echo [*] Requesting Administrator elevation...
+    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
+    exit /b
+)
+
+cd /d "%ROOT%"
+echo ========================================================
+echo       U-Chan Secrets V2 Installation & Setup
+echo ========================================================
+echo.
+echo [*] Step 1: Stopping previous service (if any)...
+taskkill /F /IM prompt-helper.exe >nul 2>&1
+taskkill /F /IM auth-helper.exe >nul 2>&1
+call node dist\cli.js uninstall
+echo.
+echo [*] Step 2: Installing U-Chan Windows Service...
+call node dist\cli.js install
+if %errorlevel% neq 0 (
+    echo.
+    echo [X] Installation failed with exit code %errorlevel%.
+    pause
+    exit /b %errorlevel%
+)
+icacls C:\ProgramData\u-chan-secrets\bin /grant "Users:(OI)(CI)RX" >nul 2>&1
+echo.
+echo [*] Step 3: Checking service status...
+sc.exe query u-chan-secrets
+echo.
+
+echo [*] Step 4: Bitwarden Vault Login...
+set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
+set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
+if not exist "%BW_BIN%" (
+    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
+)
+
+if exist "%BW_BIN%" (
+    "%BW_BIN%" status > "%TEMP%\bw_stat.json" 2>&1
+    findstr /C:"\"unauthenticated\"" "%TEMP%\bw_stat.json" >nul 2>&1
+    if %errorlevel% equ 0 (
+        echo [!] Bitwarden is not logged in for the privileged service.
+        echo [*] Please log in to your Bitwarden vault below:
+        "%BW_BIN%" login
+    ) else (
+        echo [+] Bitwarden vault is already logged in.
+    )
+    del "%TEMP%\bw_stat.json" >nul 2>&1
+) else (
+    echo [!] Warning: bw.exe not found.
+)
+
+echo.
+copy /y C:\ProgramData\u-chan-secrets\service.log "%ROOT%\service-copy.log" >nul 2>&1
+copy /y C:\ProgramData\u-chan-secrets\settings.json "%ROOT%\settings-copy.json" >nul 2>&1
+echo ========================================================
+echo [+] Service and Bitwarden configuration complete!
+echo.
+echo Next: Close this window, open your normal terminal, and run:
+echo    u-chan import-v1
+echo    u-chan unlock
+echo ========================================================
+echo.
+pause

package/scripts/desktop-browser.ps1

@@ -1,103 +1,110 @@
-# Shared user-side Chrome/Edge launcher and read-only process policy. No elevation or vault access.
-function Split-UChanWindowsCommandLine([string]$CommandLine) {
-    if (-not ('UChanWindowsCommandLine' -as [type])) {
-        Add-Type -TypeDefinition @'
-using System;
-using System.Runtime.InteropServices;
-public static class UChanWindowsCommandLine {
-    [DllImport("shell32.dll", SetLastError=true, CharSet=CharSet.Unicode)] static extern IntPtr CommandLineToArgvW(string value, out int count);
-    [DllImport("kernel32.dll")] static extern IntPtr LocalFree(IntPtr value);
-    public static string[] Split(string value) {
-        int count; IntPtr memory=CommandLineToArgvW(value,out count);
-        if(memory==IntPtr.Zero) throw new InvalidOperationException("Command line is unavailable");
-        try { string[] result=new string[count]; for(int i=0;i<count;i++)result[i]=Marshal.PtrToStringUni(Marshal.ReadIntPtr(memory,i*IntPtr.Size)); return result; }
-        finally { LocalFree(memory); }
-    }
-}
-'@
-    }
-    return [UChanWindowsCommandLine]::Split($CommandLine)
-}
-function Test-UChanBrowserProcess($Observation, [string]$Executable, [string]$Profile, [string]$OwnerSid, [int]$Port) {
-    if (-not $Observation.ExecutablePath -or -not $Observation.OwnerSid -or -not $Observation.CommandLine -or -not $Observation.Addresses) { return 'unknown' }
-    if ($Observation.ExecutablePath -ine $Executable -or $Observation.OwnerSid -ne $OwnerSid) { return 'fail' }
-    foreach ($address in $Observation.Addresses) { if ($address -notin @('127.0.0.1','::1')) { return 'fail' } }
-    try { $tokens = @(Split-UChanWindowsCommandLine $Observation.CommandLine) } catch { return 'unknown' }
-    if ($tokens.Count -lt 1 -or $tokens[0] -ine $Executable) { return 'fail' }
-    $profiles = @($tokens | Where-Object { $_ -imatch '^--user-data-dir(?:=|$)' })
-    if ($profiles.Count -ne 1 -or $profiles[0] -inotmatch '^--user-data-dir=.+$') { return 'fail' }
-    $actual = $profiles[0].Substring('--user-data-dir='.Length)
-    try { if ([IO.Path]::GetFullPath($actual).TrimEnd('\') -ine [IO.Path]::GetFullPath($Profile).TrimEnd('\')) { return 'fail' } } catch { return 'fail' }
-    $ports = @($tokens | Where-Object { $_ -imatch '^--remote-debugging-port(?:=|$)' })
-    if ($ports.Count -ne 1 -or $ports[0] -inotmatch '^--remote-debugging-port=[0-9]+$' -or $ports[0].Substring('--remote-debugging-port='.Length) -ne [string]$Port) { return 'fail' }
-    return 'pass'
-}
-
-function Get-UChanBrowserConfiguration([string]$Browser, [string]$HomeOverride, [string]$OwnerOverride, [string]$LocalOverride) {
-    $userHome = if ($HomeOverride) { $HomeOverride } elseif ($env:U_CHAN_HOME) { $env:U_CHAN_HOME } else { Join-Path $env:APPDATA 'u-chan-secrets' }
-    if (-not $Browser) { $Browser = $env:U_CHAN_BROWSER }
-    if (-not $Browser) {
-        $choice = Join-Path $userHome 'browser.json'
-        if (Test-Path -LiteralPath $choice) {
-            $item = Get-Item -LiteralPath $choice -Force
-            if ($item.PSIsContainer -or ($item.Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Browser preference path is redirected.' }
-            $saved = Get-Content -LiteralPath $choice -Raw | ConvertFrom-Json
-            if (@($saved.PSObject.Properties).Count -ne 1) { throw 'Invalid browser preference.' }
-            $Browser = $saved.browser
-            if (-not $Browser) { throw 'Invalid browser preference.' }
-        } else { $Browser = 'chrome' }
-    }
-    if ($Browser -cnotin @('chrome','edge')) { throw 'Choose chrome or edge.' }
-    $profile = Join-Path $userHome ($Browser + '-profile')
-    $check = [IO.Path]::GetFullPath($profile)
-    while ($check) {
-        if ((Test-Path -LiteralPath $check) -and ((Get-Item -LiteralPath $check -Force).Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Dedicated browser profile is redirected.' }
-        $check = [IO.Path]::GetDirectoryName($check)
-    }
-    $cdp = [Uri]$(if ($env:U_CHAN_CDP) { $env:U_CHAN_CDP } else { 'http://127.0.0.1:9222' })
-    if ($cdp.Scheme -ne 'http' -or $cdp.Host -notin @('127.0.0.1','localhost','[::1]','::1') -or $cdp.UserInfo -or $cdp.AbsolutePath -ne '/' -or $cdp.Query -or $cdp.Fragment) { throw 'Use an HTTP loopback CDP origin without credentials, path, query or fragment.' }
-    $suffix = if ($Browser -eq 'edge') { 'Microsoft\Edge\Application\msedge.exe' } else { 'Google\Chrome\Application\chrome.exe' }
-    $local = if ($LocalOverride) { $LocalOverride } else { $env:LOCALAPPDATA }
-    $candidates = @(foreach ($base in @($env:ProgramFiles, ${env:ProgramFiles(x86)}, $local)) { if ($base) { Join-Path $base $suffix } })
-    $executables = @($candidates | Where-Object { Test-Path -LiteralPath $_ -PathType Leaf })
-    $owner = if ($OwnerOverride) { $OwnerOverride } else { [Security.Principal.WindowsIdentity]::GetCurrent().User.Value }
-    return @{ Browser=$Browser; Profile=$profile; Endpoint=$cdp; Executables=$executables; OwnerSid=$owner }
-}
-
-# Privileged checks derive the desktop home from the installed owner's SID, never SYSTEM's APPDATA or user preference files.
-function Get-UChanOwnerBrowserConfiguration([string]$OwnerSid, [string]$Browser) {
-    if ($OwnerSid -notmatch '^S-1-5-21-(?:[0-9]+-){3}[0-9]+$') { throw 'Installed desktop owner is invalid.' }
-    $profile = (Get-ItemProperty -LiteralPath ('HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\'+$OwnerSid) -ErrorAction Stop).ProfileImagePath
-    if (-not $profile) { throw 'Installed desktop owner profile is unavailable.' }
-    $profile = [Environment]::ExpandEnvironmentVariables($profile)
-    $roaming = Join-Path $profile 'AppData\Roaming'
-    $local = Join-Path $profile 'AppData\Local'
-    $shell = Get-ItemProperty -LiteralPath ('Registry::HKEY_USERS\'+$OwnerSid+'\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders') -ErrorAction SilentlyContinue
-    if ($shell.AppData) { $roaming = [Environment]::ExpandEnvironmentVariables(($shell.AppData -ireplace '%USERPROFILE%', $profile)) }
-    if ($shell.'Local AppData') { $local = [Environment]::ExpandEnvironmentVariables(($shell.'Local AppData' -ireplace '%USERPROFILE%', $profile)) }
-    $desktopHome = if ($env:U_CHAN_DESKTOP_HOME) { $env:U_CHAN_DESKTOP_HOME } else { Join-Path $roaming 'u-chan-secrets' }
-    return Get-UChanBrowserConfiguration $Browser $desktopHome $OwnerSid $local
-}
-
-function Get-UChanBrowserState($Configuration) {
-    try {
-        $listeners = @(Get-NetTCPConnection -State Listen -ErrorAction Stop | Where-Object LocalPort -eq $Configuration.Endpoint.Port)
-        if ($listeners.Count -eq 0) { return 'missing' }
-        $owners = @($listeners.OwningProcess | Select-Object -Unique)
-        if ($owners.Count -ne 1) { return 'fail' }
-        $process = Get-CimInstance Win32_Process -Filter ("ProcessId=" + $owners[0]) -ErrorAction Stop
-        if (-not $process) { return 'unknown' }
-        $owner = Invoke-CimMethod -InputObject $process -MethodName GetOwnerSid -ErrorAction Stop
-        $observation = @{ ExecutablePath=$process.ExecutablePath; OwnerSid=$owner.Sid; CommandLine=$process.CommandLine; Addresses=@($listeners.LocalAddress) }
-        if (-not $process.ExecutablePath) { return 'unknown' }
-        if ($process.ExecutablePath -notin $Configuration.Executables) { return 'fail' }
-        $policy = Test-UChanBrowserProcess $observation $process.ExecutablePath $Configuration.Profile $Configuration.OwnerSid $Configuration.Endpoint.Port
-        if ($policy -ne 'pass') { return $policy }
-        $version = Invoke-RestMethod -Uri ([Uri]::new($Configuration.Endpoint,'/json/version')) -TimeoutSec 2 -ErrorAction Stop
-        $socket = [Uri]$version.webSocketDebuggerUrl
-        if ($socket.Scheme -ne 'ws' -or $socket.Host -notin @('127.0.0.1','localhost','[::1]','::1') -or $socket.Port -ne $Configuration.Endpoint.Port -or $socket.UserInfo) { return 'fail' }
-        $edge = $version.'User-Agent' -match '(?:Edg|Edge)/'
-        if (($Configuration.Browser -eq 'edge') -ne $edge) { return 'fail' }
-        return 'pass'
-    } catch { return 'unknown' }
-}
+# Shared user-side Chrome/Edge launcher and read-only process policy. No elevation or vault access.
+function Split-UChanWindowsCommandLine([string]$CommandLine) {
+    if (-not ('UChanWindowsCommandLine' -as [type])) {
+        Add-Type -TypeDefinition @'
+using System;
+using System.Runtime.InteropServices;
+public static class UChanWindowsCommandLine {
+    [DllImport("shell32.dll", SetLastError=true, CharSet=CharSet.Unicode)] static extern IntPtr CommandLineToArgvW(string value, out int count);
+    [DllImport("kernel32.dll")] static extern IntPtr LocalFree(IntPtr value);
+    public static string[] Split(string value) {
+        int count; IntPtr memory=CommandLineToArgvW(value,out count);
+        if(memory==IntPtr.Zero) throw new InvalidOperationException("Command line is unavailable");
+        try { string[] result=new string[count]; for(int i=0;i<count;i++)result[i]=Marshal.PtrToStringUni(Marshal.ReadIntPtr(memory,i*IntPtr.Size)); return result; }
+        finally { LocalFree(memory); }
+    }
+}
+'@
+    }
+    return [UChanWindowsCommandLine]::Split($CommandLine)
+}
+function Test-UChanBrowserProcess($Observation, [string]$Executable, [string]$Profile, [string]$OwnerSid, [int]$Port) {
+    if (-not $Observation.ExecutablePath -or -not $Observation.OwnerSid -or -not $Observation.CommandLine -or -not $Observation.Addresses) { return 'unknown' }
+    if ($Observation.ExecutablePath -ine $Executable -or $Observation.OwnerSid -ne $OwnerSid) { return 'fail' }
+    foreach ($address in $Observation.Addresses) { if ($address -notin @('127.0.0.1','::1')) { return 'fail' } }
+    try { $tokens = @(Split-UChanWindowsCommandLine $Observation.CommandLine) } catch { return 'unknown' }
+    if ($tokens.Count -lt 1 -or $tokens[0] -ine $Executable) { return 'fail' }
+    $profiles = @($tokens | Where-Object { $_ -imatch '^--user-data-dir(?:=|$)' })
+    if ($profiles.Count -ne 1 -or $profiles[0] -inotmatch '^--user-data-dir=.+$') { return 'fail' }
+    $actual = $profiles[0].Substring('--user-data-dir='.Length)
+    try { if ([IO.Path]::GetFullPath($actual).TrimEnd('\') -ine [IO.Path]::GetFullPath($Profile).TrimEnd('\')) { return 'fail' } } catch { return 'fail' }
+    $ports = @($tokens | Where-Object { $_ -imatch '^--remote-debugging-port(?:=|$)' })
+    if ($ports.Count -ne 1 -or $ports[0] -inotmatch '^--remote-debugging-port=[0-9]+$' -or $ports[0].Substring('--remote-debugging-port='.Length) -ne [string]$Port) { return 'fail' }
+    return 'pass'
+}
+
+function Get-UChanBrowserConfiguration([string]$Browser, [string]$HomeOverride, [string]$OwnerOverride, [string]$LocalOverride) {
+    $userHome = if ($HomeOverride) { $HomeOverride } elseif ($env:U_CHAN_HOME) { $env:U_CHAN_HOME } else { Join-Path $env:APPDATA 'u-chan-secrets' }
+    if (-not $Browser) { $Browser = $env:U_CHAN_BROWSER }
+    if (-not $Browser) {
+        $choice = Join-Path $userHome 'browser.json'
+        if (Test-Path -LiteralPath $choice) {
+            $item = Get-Item -LiteralPath $choice -Force
+            if ($item.PSIsContainer -or ($item.Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Browser preference path is redirected.' }
+            $saved = Get-Content -LiteralPath $choice -Raw | ConvertFrom-Json
+            if (@($saved.PSObject.Properties).Count -ne 1) { throw 'Invalid browser preference.' }
+            $Browser = $saved.browser
+            if (-not $Browser) { throw 'Invalid browser preference.' }
+        } else { $Browser = 'chrome' }
+    }
+    if ($Browser -cnotin @('chrome','edge')) { throw 'Choose chrome or edge.' }
+    $profile = Join-Path $userHome ($Browser + '-profile')
+    $check = [IO.Path]::GetFullPath($profile)
+    while ($check) {
+        if ((Test-Path -LiteralPath $check) -and ((Get-Item -LiteralPath $check -Force).Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Dedicated browser profile is redirected.' }
+        $check = [IO.Path]::GetDirectoryName($check)
+    }
+    $cdp = [Uri]$(if ($env:U_CHAN_CDP) { $env:U_CHAN_CDP } else { 'http://127.0.0.1:9222' })
+    if ($cdp.Scheme -ne 'http' -or $cdp.Host -notin @('127.0.0.1','localhost','[::1]','::1') -or $cdp.UserInfo -or $cdp.AbsolutePath -ne '/' -or $cdp.Query -or $cdp.Fragment) { throw 'Use an HTTP loopback CDP origin without credentials, path, query or fragment.' }
+    $suffix = if ($Browser -eq 'edge') { 'Microsoft\Edge\Application\msedge.exe' } else { 'Google\Chrome\Application\chrome.exe' }
+    $local = if ($LocalOverride) { $LocalOverride } else { $env:LOCALAPPDATA }
+    $candidates = @(foreach ($base in @($env:ProgramFiles, ${env:ProgramFiles(x86)}, $local)) { if ($base) { Join-Path $base $suffix } })
+    $executables = @($candidates | Where-Object { Test-Path -LiteralPath $_ -PathType Leaf })
+    $owner = if ($OwnerOverride) { $OwnerOverride } else { [Security.Principal.WindowsIdentity]::GetCurrent().User.Value }
+    return @{ Browser=$Browser; Profile=$profile; Endpoint=$cdp; Executables=$executables; OwnerSid=$owner }
+}
+
+# Privileged checks derive the desktop home from the installed owner's SID, never SYSTEM's APPDATA or user preference files.
+function Get-UChanOwnerBrowserConfiguration([string]$OwnerSid, [string]$Browser) {
+    if ($OwnerSid -notmatch '^S-1-5-21-(?:[0-9]+-){3}[0-9]+$') { throw 'Installed desktop owner is invalid.' }
+    $profile = (Get-ItemProperty -LiteralPath ('HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\'+$OwnerSid) -ErrorAction Stop).ProfileImagePath
+    if (-not $profile) { throw 'Installed desktop owner profile is unavailable.' }
+    $profile = [Environment]::ExpandEnvironmentVariables($profile)
+    $roaming = Join-Path $profile 'AppData\Roaming'
+    $local = Join-Path $profile 'AppData\Local'
+    $shell = Get-Item -LiteralPath ('Registry::HKEY_USERS\'+$OwnerSid+'\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders') -ErrorAction SilentlyContinue
+    if ($shell) {
+        # Read REG_EXPAND_SZ literally; Registry providers otherwise expand USERPROFILE as SYSTEM before substitution.
+        try {
+            $rawRoaming = $shell.GetValue('AppData', $null, [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)
+            $rawLocal = $shell.GetValue('Local AppData', $null, [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)
+        } finally { $shell.Close() }
+        if ($rawRoaming) { $roaming = [Environment]::ExpandEnvironmentVariables(($rawRoaming -ireplace '%USERPROFILE%', $profile)) }
+        if ($rawLocal) { $local = [Environment]::ExpandEnvironmentVariables(($rawLocal -ireplace '%USERPROFILE%', $profile)) }
+    }
+    $desktopHome = if ($env:U_CHAN_DESKTOP_HOME) { $env:U_CHAN_DESKTOP_HOME } else { Join-Path $roaming 'u-chan-secrets' }
+    return Get-UChanBrowserConfiguration $Browser $desktopHome $OwnerSid $local
+}
+
+function Get-UChanBrowserState($Configuration) {
+    try {
+        $listeners = @(Get-NetTCPConnection -State Listen -ErrorAction Stop | Where-Object LocalPort -eq $Configuration.Endpoint.Port)
+        if ($listeners.Count -eq 0) { return 'missing' }
+        $owners = @($listeners.OwningProcess | Select-Object -Unique)
+        if ($owners.Count -ne 1) { return 'fail' }
+        $process = Get-CimInstance Win32_Process -Filter ("ProcessId=" + $owners[0]) -ErrorAction Stop
+        if (-not $process) { return 'unknown' }
+        $owner = Invoke-CimMethod -InputObject $process -MethodName GetOwnerSid -ErrorAction Stop
+        $observation = @{ ExecutablePath=$process.ExecutablePath; OwnerSid=$owner.Sid; CommandLine=$process.CommandLine; Addresses=@($listeners.LocalAddress) }
+        if (-not $process.ExecutablePath) { return 'unknown' }
+        if ($process.ExecutablePath -notin $Configuration.Executables) { return 'fail' }
+        $policy = Test-UChanBrowserProcess $observation $process.ExecutablePath $Configuration.Profile $Configuration.OwnerSid $Configuration.Endpoint.Port
+        if ($policy -ne 'pass') { return $policy }
+        $version = Invoke-RestMethod -Uri ([Uri]::new($Configuration.Endpoint,'/json/version')) -TimeoutSec 2 -ErrorAction Stop
+        $socket = [Uri]$version.webSocketDebuggerUrl
+        if ($socket.Scheme -ne 'ws' -or $socket.Host -notin @('127.0.0.1','localhost','[::1]','::1') -or $socket.Port -ne $Configuration.Endpoint.Port -or $socket.UserInfo) { return 'fail' }
+        $edge = $version.'User-Agent' -match '(?:Edg|Edge)/'
+        if (($Configuration.Browser -eq 'edge') -ne $edge) { return 'fail' }
+        return 'pass'
+    } catch { return 'unknown' }
+}

package/scripts/login-bw.bat

@@ -1,21 +1,21 @@
-@echo off
-setlocal
-set ROOT=%~dp0..
-
-fltmc.exe >nul 2>&1
-if %errorlevel% neq 0 (
-    echo [*] Requesting Administrator elevation...
-    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
-    exit /b
-)
-
-set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
-set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
-if not exist "%BW_BIN%" (
-    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
-)
-
-echo [*] Logging in to Bitwarden for U-Chan Service Store...
-"%BW_BIN%" login
-echo.
-pause
+@echo off
+setlocal
+set ROOT=%~dp0..
+
+fltmc.exe >nul 2>&1
+if %errorlevel% neq 0 (
+    echo [*] Requesting Administrator elevation...
+    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
+    exit /b
+)
+
+set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
+set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
+if not exist "%BW_BIN%" (
+    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
+)
+
+echo [*] Logging in to Bitwarden for U-Chan Service Store...
+"%BW_BIN%" login
+echo.
+pause

package/scripts/migrate.bat

@@ -1,4 +1,4 @@
-@echo off
-setlocal
-call "%~dp0debug-install.bat" %*
-
+@echo off
+setlocal
+call "%~dp0debug-install.bat" %*
+

package/scripts/start-browser.ps1

@@ -1,33 +1,33 @@
-param([ValidateSet('chrome','edge')][string]$Browser, [switch]$Background, [switch]$CheckOnly, [string]$DesktopOwnerSid)
-$ErrorActionPreference='Stop'
-. (Join-Path $PSScriptRoot 'desktop-browser.ps1')
-if ($DesktopOwnerSid) {
-    if (-not $CheckOnly) { throw 'An owner-specific inspection cannot launch a desktop browser.' }
-    $observed = 'unknown'
-    $kinds = if ($Browser) { @($Browser) } else { @('chrome','edge') }
-    foreach ($kind in $kinds) {
-        $configuration = Get-UChanOwnerBrowserConfiguration $DesktopOwnerSid $kind
-        $candidate = Get-UChanBrowserState $configuration
-        if ($candidate -eq 'pass') { 'pass'; return }
-        if ($candidate -eq 'fail' -or $candidate -eq 'missing') { $observed = 'fail' }
-    }
-    $observed; return
-}
-$configuration=Get-UChanBrowserConfiguration $Browser
-$state=Get-UChanBrowserState $configuration
-if ($CheckOnly) { if ($state -eq 'missing') { 'fail' } else { $state }; return }
-if ($state -eq 'pass') { Write-Host ($configuration.Browser + ' dedicated browser is ready.'); return }
-if ($state -ne 'missing') { throw 'The browser endpoint is occupied, mismatched, or unverifiable. Close only the previous dedicated U-Chan browser before switching; keep personal windows open.' }
-if ($configuration.Executables.Count -eq 0) { throw ($configuration.Browser + ' is not installed. Install it or explicitly select the other supported browser.') }
-New-Item -ItemType Directory -Force -Path $configuration.Profile | Out-Null
-$arguments=@(('--remote-debugging-port='+$configuration.Endpoint.Port), '--remote-debugging-address=127.0.0.1', ('--user-data-dir="'+$configuration.Profile+'"'), '--no-first-run')
-if ($Background) { $arguments += '--no-startup-window' }
-Start-Process -FilePath $configuration.Executables[0] -ArgumentList $arguments -WindowStyle Hidden
-$deadline=[DateTime]::UtcNow.AddSeconds(15)
-do {
-    Start-Sleep -Milliseconds 300
-    $state=Get-UChanBrowserState $configuration
-    if ($state -eq 'pass') { Write-Host ($configuration.Browser + ' dedicated browser started.'); return }
-    if ($state -eq 'fail') { break }
-} while ([DateTime]::UtcNow -lt $deadline)
-throw 'Selected dedicated browser did not become verifiably ready. Check browser policy and run setup again.'
+param([ValidateSet('chrome','edge')][string]$Browser, [switch]$Background, [switch]$CheckOnly, [string]$DesktopOwnerSid)
+$ErrorActionPreference='Stop'
+. (Join-Path $PSScriptRoot 'desktop-browser.ps1')
+if ($DesktopOwnerSid) {
+    if (-not $CheckOnly) { throw 'An owner-specific inspection cannot launch a desktop browser.' }
+    $observed = 'unknown'
+    $kinds = if ($Browser) { @($Browser) } else { @('chrome','edge') }
+    foreach ($kind in $kinds) {
+        $configuration = Get-UChanOwnerBrowserConfiguration $DesktopOwnerSid $kind
+        $candidate = Get-UChanBrowserState $configuration
+        if ($candidate -eq 'pass') { 'pass'; return }
+        if ($candidate -eq 'fail' -or $candidate -eq 'missing') { $observed = 'fail' }
+    }
+    $observed; return
+}
+$configuration=Get-UChanBrowserConfiguration $Browser
+$state=Get-UChanBrowserState $configuration
+if ($CheckOnly) { if ($state -eq 'missing') { 'fail' } else { $state }; return }
+if ($state -eq 'pass') { Write-Host ($configuration.Browser + ' dedicated browser is ready.'); return }
+if ($state -ne 'missing') { throw 'The browser endpoint is occupied, mismatched, or unverifiable. Close only the previous dedicated U-Chan browser before switching; keep personal windows open.' }
+if ($configuration.Executables.Count -eq 0) { throw ($configuration.Browser + ' is not installed. Install it or explicitly select the other supported browser.') }
+New-Item -ItemType Directory -Force -Path $configuration.Profile | Out-Null
+$arguments=@(('--remote-debugging-port='+$configuration.Endpoint.Port), '--remote-debugging-address=127.0.0.1', ('--user-data-dir="'+$configuration.Profile+'"'), '--no-first-run')
+if ($Background) { $arguments += '--no-startup-window' }
+Start-Process -FilePath $configuration.Executables[0] -ArgumentList $arguments -WindowStyle Hidden
+$deadline=[DateTime]::UtcNow.AddSeconds(15)
+do {
+    Start-Sleep -Milliseconds 300
+    $state=Get-UChanBrowserState $configuration
+    if ($state -eq 'pass') { Write-Host ($configuration.Browser + ' dedicated browser started.'); return }
+    if ($state -eq 'fail') { break }
+} while ([DateTime]::UtcNow -lt $deadline)
+throw 'Selected dedicated browser did not become verifiably ready. Check browser policy and run setup again.'

package/scripts/windows-security/desktop-matrix.mjs

@@ -1,54 +1,54 @@
-// User-side half of the disposable Windows browser matrix. The administrator runs the SYSTEM fixture separately.
-import fs from 'node:fs/promises'
-import path from 'node:path'
-import os from 'node:os'
-import { fileURLToPath } from 'node:url'
-import { createServer } from 'node:net'
-import { execFile } from 'node:child_process'
-import { promisify } from 'node:util'
-import { chromium } from 'playwright'
-import { Client } from '@modelcontextprotocol/sdk/client/index.js'
-import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js'
-import { isElevated } from '../../dist/client/codex-setup.js'
-import { inspectDesktopBrowser } from '../../dist/platform/windows/desktop-browser.js'
-const [command, browser, runId] = process.argv.slice(2)
-if (process.platform !== 'win32' || command !== '--prepare' || !['chrome','edge'].includes(browser) || !/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(runId ?? '')) throw new Error('Use --prepare chrome|edge <fresh UUID> on Windows')
-if (await isElevated()) throw new Error('Prepare must run as the non-elevated desktop owner')
-const root = path.join(os.tmpdir(), 'u-chan-v5-matrix-' + runId), home = path.join(root, browser)
-await fs.mkdir(root) // A fresh UUID must never reuse another fixture or personal profile.
-await fs.mkdir(home)
-const port = await new Promise((resolve, reject) => { const server = createServer(); server.once('error', reject); server.listen(0, '127.0.0.1', () => { const selected = server.address().port; server.close(() => resolve(selected)) }) })
-const endpoint = 'http://127.0.0.1:' + port, environment = { ...process.env, U_CHAN_HOME: home, U_CHAN_CDP: endpoint, U_CHAN_BROWSER: browser }
-const report = { runId, browser, ok: false }, exec = promisify(execFile)
-let connection
-try {
-  await exec('powershell.exe', ['-NoProfile','-NonInteractive','-ExecutionPolicy','Bypass','-File',fileURLToPath(new URL('../start-browser.ps1',import.meta.url)),'-Browser',browser,'-Background'], { env: environment, windowsHide: true, timeout: 30000 })
-  report.desktopIdentity = await inspectDesktopBrowser({ endpoint, browser, profile: path.join(home,browser+'-profile') },environment)
-  if (report.desktopIdentity !== 'pass') throw new Error('Disposable browser identity failed')
-  connection = await chromium.connectOverCDP(endpoint)
-  await fs.writeFile(path.join(root,'prepared.json'),JSON.stringify({runId,browser,home,endpoint}),{flag:'wx'})
-  console.log(JSON.stringify({prepared:true,runId,browser,endpoint}))
-  const receipt = path.join(process.env.ProgramData ?? 'C:\\ProgramData','UChanSecurityChecks',runId,'report.json'), deadline=Date.now()+600000
-  while(Date.now()<deadline&&!await fs.stat(receipt).catch(()=>null))await new Promise(resolve=>setTimeout(resolve,500))
-  const native = JSON.parse(await fs.readFile(receipt,'utf8'))
-  report.systemFixturePassed = native.ok === true && native.fixtureBrowser === browser && native.desktopIdentity === 'pass'
-  const client = new Client({name:'u-chan-browser-matrix',version:'1.0.0'})
-  const transport = new StdioClientTransport({command:process.execPath,args:[path.join(path.dirname(process.execPath),'node_modules/npm/bin/npx-cli.js'),'@playwright/mcp@latest','--cdp-endpoint',endpoint],stderr:'pipe'})
-  try {
-    await client.connect(transport)
-    report.playwrightTools=(await client.listTools()).tools.length
-    report.sharedBrowserListing=!(await client.callTool({name:'browser_tabs',arguments:{action:'list'}})).isError
-  } finally {await client.close().catch(()=>{});await transport.close().catch(()=>{})}
-  report.ok=report.systemFixturePassed&&report.playwrightTools>0&&report.sharedBrowserListing
-}catch(error){report.errorType=error.name}
-finally{
-  // Only this verified disposable instance may be closed; never enumerate or terminate other browsers.
-  if(connection&&await inspectDesktopBrowser({endpoint,browser,profile:path.join(home,browser+'-profile')},environment)==='pass') {
-    const session=await connection.newBrowserCDPSession().catch(()=>null)
-    await session?.send('Browser.close').catch(()=>{})
-  }
-  await connection?.close().catch(()=>{})
-  await fs.writeFile(path.join(root,'complete.json'),JSON.stringify(report,null,2),{flag:'wx'})
-}
-console.log(JSON.stringify(report))
-if(!report.ok)process.exitCode=1
+// User-side half of the disposable Windows browser matrix. The administrator runs the SYSTEM fixture separately.
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import os from 'node:os'
+import { fileURLToPath } from 'node:url'
+import { createServer } from 'node:net'
+import { execFile } from 'node:child_process'
+import { promisify } from 'node:util'
+import { chromium } from 'playwright'
+import { Client } from '@modelcontextprotocol/sdk/client/index.js'
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js'
+import { isElevated } from '../../dist/client/codex-setup.js'
+import { inspectDesktopBrowser } from '../../dist/platform/windows/desktop-browser.js'
+const [command, browser, runId] = process.argv.slice(2)
+if (process.platform !== 'win32' || command !== '--prepare' || !['chrome','edge'].includes(browser) || !/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(runId ?? '')) throw new Error('Use --prepare chrome|edge <fresh UUID> on Windows')
+if (await isElevated()) throw new Error('Prepare must run as the non-elevated desktop owner')
+const root = path.join(os.tmpdir(), 'u-chan-v5-matrix-' + runId), home = path.join(root, browser)
+await fs.mkdir(root) // A fresh UUID must never reuse another fixture or personal profile.
+await fs.mkdir(home)
+const port = await new Promise((resolve, reject) => { const server = createServer(); server.once('error', reject); server.listen(0, '127.0.0.1', () => { const selected = server.address().port; server.close(() => resolve(selected)) }) })
+const endpoint = 'http://127.0.0.1:' + port, environment = { ...process.env, U_CHAN_HOME: home, U_CHAN_CDP: endpoint, U_CHAN_BROWSER: browser }
+const report = { runId, browser, ok: false }, exec = promisify(execFile)
+let connection
+try {
+  await exec('powershell.exe', ['-NoProfile','-NonInteractive','-ExecutionPolicy','Bypass','-File',fileURLToPath(new URL('../start-browser.ps1',import.meta.url)),'-Browser',browser,'-Background'], { env: environment, windowsHide: true, timeout: 30000 })
+  report.desktopIdentity = await inspectDesktopBrowser({ endpoint, browser, profile: path.join(home,browser+'-profile') },environment)
+  if (report.desktopIdentity !== 'pass') throw new Error('Disposable browser identity failed')
+  connection = await chromium.connectOverCDP(endpoint)
+  await fs.writeFile(path.join(root,'prepared.json'),JSON.stringify({runId,browser,home,endpoint}),{flag:'wx'})
+  console.log(JSON.stringify({prepared:true,runId,browser,endpoint}))
+  const receipt = path.join(process.env.ProgramData ?? 'C:\\ProgramData','UChanSecurityChecks',runId,'report.json'), deadline=Date.now()+600000
+  while(Date.now()<deadline&&!await fs.stat(receipt).catch(()=>null))await new Promise(resolve=>setTimeout(resolve,500))
+  const native = JSON.parse(await fs.readFile(receipt,'utf8'))
+  report.systemFixturePassed = native.ok === true && native.fixtureBrowser === browser && native.desktopIdentity === 'pass'
+  const client = new Client({name:'u-chan-browser-matrix',version:'1.0.0'})
+  const transport = new StdioClientTransport({command:process.execPath,args:[path.join(path.dirname(process.execPath),'node_modules/npm/bin/npx-cli.js'),'@playwright/mcp@latest','--cdp-endpoint',endpoint],stderr:'pipe'})
+  try {
+    await client.connect(transport)
+    report.playwrightTools=(await client.listTools()).tools.length
+    report.sharedBrowserListing=!(await client.callTool({name:'browser_tabs',arguments:{action:'list'}})).isError
+  } finally {await client.close().catch(()=>{});await transport.close().catch(()=>{})}
+  report.ok=report.systemFixturePassed&&report.playwrightTools>0&&report.sharedBrowserListing
+}catch(error){report.errorType=error.name}
+finally{
+  // Only this verified disposable instance may be closed; never enumerate or terminate other browsers.
+  if(connection&&await inspectDesktopBrowser({endpoint,browser,profile:path.join(home,browser+'-profile')},environment)==='pass') {
+    const session=await connection.newBrowserCDPSession().catch(()=>null)
+    await session?.send('Browser.close').catch(()=>{})
+  }
+  await connection?.close().catch(()=>{})
+  await fs.writeFile(path.join(root,'complete.json'),JSON.stringify(report,null,2),{flag:'wx'})
+}
+console.log(JSON.stringify(report))
+if(!report.ok)process.exitCode=1