From 8cb5b13c77cdaa04b2e3be9297fa8654c6f94905 Mon Sep 17 00:00:00 2001
From: codex <codex@local>
Date: Mon, 2 Nov 2026 02:49:33 +0100
Subject: [PATCH] Record whether the empty-profile login launcher ran.

The receipt stores only called, rejected, or opened. It does not store the address.

Assistant: grok
Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd
---
 scripts/operator-browser/xdg-open | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/scripts/operator-browser/xdg-open b/scripts/operator-browser/xdg-open
index 2f731c1..eb5277f 100755
--- a/scripts/operator-browser/xdg-open
+++ b/scripts/operator-browser/xdg-open
@@ -56,11 +56,24 @@ def launch_argv(browser, profile_dir, url):
     ]
 
 
+def stamp(result):
+    path = Path("/home/worsch/.local/state/railiance/receipts/operator-browser-last.txt")
+    try:
+        path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+        path.write_text(result + "\n", encoding="utf-8")
+        os.chmod(path, 0o600)
+    except OSError:
+        return
+
+
 def main():
+    stamp("called")
     if len(sys.argv) != 2 or not allowed(sys.argv[1]):
+        stamp("rejected")
         return 1
     browser = browser_path()
     if not browser:
+        stamp("no-browser")
         return 1
     profile = Path(tempfile.mkdtemp(prefix="operator-browser-"))
     os.chmod(profile, 0o700)
@@ -95,8 +108,13 @@ def main():
             stderr=subprocess.DEVNULL,
             timeout=20,
         )
-        return int(opened.returncode != 0)
+        if opened.returncode != 0:
+            stamp("open-failed")
+            return 1
+        stamp("opened")
+        return 0
     except (OSError, subprocess.SubprocessError):
+        stamp("open-failed")
         return 1