fix(browser): harden runtime policy edge cases

tests/unit/utils/browser/browser-policy.test.ts

@@ -22,6 +22,13 @@ describe('browser policy', () => {
     );
   });
 
+  it('stops parsing browser launch flags after the option terminator', () => {
+    expect(resolveBrowserLaunchFlagResolution(['glm', '--', '--browser', 'literal'])).toEqual({
+      override: undefined,
+      argsWithoutFlags: ['glm', '--', '--browser', 'literal'],
+    });
+  });
+
   it('resolves browser exposure from saved policy and one-run overrides', () => {
     expect(resolveBrowserExposure({ enabled: true, policy: 'auto' })).toMatchObject({
       exposeByDefault: true,

tests/unit/utils/browser/browser-status.test.ts

@@ -88,6 +88,7 @@ describe('browser status', () => {
         serverName: 'ccs_browser',
         supportsConfigOverrides: true,
       });
+      expect(existsSync(join(tempHome, '.ccs', 'browser', 'chrome-user-data'))).toBe(false);
     } finally {
       codexSpy.mockRestore();
     }