set -uo pipefail

OID="${1:?outbox id}"; OUT="${2:?outbox path}"

[ "${PM_APPROVED:-0}" = "1" ] || { echo "refuse: not an approved flush"; exit 2; }

PM="/shared/projects/zion-pm"

SPEC=$(jq -r --arg id "$OID" '.history[] | select(.id==$id) | .preview' "$OUT")

echo "$SPEC" | jq . >/dev/null 2>&1 || { echo "execute-browser: preview is not valid JSON spec for $OID. Manual."; exit 3; }

RUNNER="${PM_BROWSER_HOST:-local}"

if [ "$RUNNER" = "local" ]; then

  echo "$SPEC" | python3 "$PM/hands/browser/run.py"

else

  echo "$SPEC" | ssh "$RUNNER" "python3 - " < "$PM/hands/browser/run.py"

fi