From 73003798270a839d9ef4ed434069c19087aaaf17 Mon Sep 17 00:00:00 2001
From: garrytan <garrytan@gmail.com>
Date: Sun, 4 Oct 2026 18:29:18 +0000
Subject: [PATCH] E1: BROWSE SETUP install hint pins the tested Bun (1.4.0)

---
 scripts/resolvers/browse.ts    | 2 +-
 test/bun-version-drift.test.ts | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/scripts/resolvers/browse.ts b/scripts/resolvers/browse.ts
index c047d4e0c..ae3b48a7f 100644
--- a/scripts/resolvers/browse.ts
+++ b/scripts/resolvers/browse.ts
@@ -133,7 +133,7 @@ If \`NEEDS_SETUP\`:
 3. If \`bun\` is not installed:
    \`\`\`bash
    if ! command -v bun >/dev/null 2>&1; then
-     BUN_VERSION="1.3.10"
+     BUN_VERSION="1.4.0"
      BUN_INSTALL_SHA="bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd"
      tmpfile=$(mktemp "\${TMPDIR:-/tmp}/bun-install.XXXXXX")
      curl -fsSL "https://bun.sh/install" -o "$tmpfile"
diff --git a/test/bun-version-drift.test.ts b/test/bun-version-drift.test.ts
index c2f0a2e93..9993c8881 100644
--- a/test/bun-version-drift.test.ts
+++ b/test/bun-version-drift.test.ts
@@ -142,6 +142,11 @@ describe('Bun requirement surfaces agree (E1)', () => {
     }
   });
 
+  test('BROWSE SETUP install hint pins the tested version', () => {
+    const resolver = fs.readFileSync(path.join(ROOT, 'scripts', 'resolvers', 'browse.ts'), 'utf-8');
+    expect([...resolver.matchAll(/BUN_VERSION="([0-9][^"]*)"/g)].map((m) => m[1])).toEqual([tested]);
+  });
+
   // Compiled probe of the security floor: a binary built with the four
   // no-autoload flags must not read a .env beside it. Run by hand against
   // released binaries on 2026-10-04: Bun 1.3.2 accepted the flags and still