@amaster.ai/employee-runtime-connector 0.1.0-beta.46 → 0.1.0-beta.48

package/dist/amaster-runtime-daemon.mjs

@@ -2,11 +2,12 @@
 // MirrorX runtime connector daemon bundle.
 
 // src/amaster-runtime-daemon.mjs
-import { createHash as createHash9 } from "node:crypto";
-import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync12, lstatSync as lstatSync7, mkdirSync as mkdirSync8, readFileSync as readFileSync10, readdirSync as readdirSync8, realpathSync as realpathSync3, renameSync as renameSync5, rmSync as rmSync7, statSync as statSync7, symlinkSync as symlinkSync4, unlinkSync, writeFileSync as writeFileSync8 } from "node:fs";
+import { createHash as createHash12 } from "node:crypto";
+import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync13, lstatSync as lstatSync7, mkdirSync as mkdirSync8, readFileSync as readFileSync10, readdirSync as readdirSync8, realpathSync as realpathSync4, renameSync as renameSync5, rmSync as rmSync7, statSync as statSync7, symlinkSync as symlinkSync4, unlinkSync, writeFileSync as writeFileSync8 } from "node:fs";
 import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3 } from "node:os";
-import { basename as basename6, delimiter as delimiter2, dirname as dirname9, extname as extname2, isAbsolute as isAbsolute8, join as join13, relative as relative8, resolve as resolve11 } from "node:path";
-import { spawn, spawnSync as spawnSync5 } from "node:child_process";
+import { basename as basename6, delimiter as delimiter2, dirname as dirname9, extname as extname2, isAbsolute as isAbsolute8, join as join14, relative as relative9, resolve as resolve12 } from "node:path";
+import { spawn, spawnSync as spawnSync6 } from "node:child_process";
+import { createRequire } from "node:module";
 
 // src/amaster-runtime-daemon/common.mjs
 import { homedir } from "node:os";
@@ -388,7 +389,7 @@ function skipVoid(str, ptr, banNewLines, banComments) {
   }
   return ptr;
 }
-function skipUntil(str, ptr, sep2, end, banNewLines = false) {
+function skipUntil(str, ptr, sep3, end, banNewLines = false) {
   if (!end) {
     ptr = indexOfNewline(str, ptr);
     return ptr < 0 ? str.length : ptr;
@@ -397,7 +398,7 @@ function skipUntil(str, ptr, sep2, end, banNewLines = false) {
     let c = str[i];
     if (c === "#") {
       i = indexOfNewline(str, i);
-    } else if (c === sep2) {
+    } else if (c === sep3) {
       return i + 1;
     } else if (c === end || banNewLines && (c === "\n" || c === "\r" && str[i + 1] === "\n")) {
       return i;
@@ -1558,6 +1559,7 @@ import {
   lstatSync as lstatSync2,
   mkdirSync as mkdirSync3,
   readFileSync as readFileSync3,
+  realpathSync,
   readdirSync as readdirSync2,
   rmSync as rmSync2,
   statSync as statSync2,
@@ -1778,7 +1780,10 @@ function syncAmasterProviderFiles(agentDir, executorEnv) {
 }
 
 // src/amaster-runtime-daemon/pi-managed-mcp-profile.mjs
-var piManagedMcpProfileApi = (() => {
+var MANAGED_PI_MCP_TOOL_MODE = "proxy_only";
+function createManagedPiMcpProfileApi(options = {}) {
+  const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync2;
+  const nowImpl = typeof options.now === "function" ? options.now : Date.now;
   const SUPPORTED_SCHEMA_VERSION2 = "amaster.governed-mcp.v1";
   const SUPPORTED_SERVER_NAME2 = "amaster";
   const MINIMUM_PI_VERSION = [0, 73, 1];
@@ -1878,6 +1883,8 @@ var piManagedMcpProfileApi = (() => {
   const DEFAULT_SESSION_ROLLOUT_TTL_MS2 = 24 * 60 * 60 * 1e3;
   const PI_ATTESTATION_TIMEOUT_MS = 1e4;
   const PI_ATTESTATION_MAX_ATTEMPTS = 2;
+  const PI_ATTESTATION_RECENT_LIVE_TTL_MS = Number.isFinite(options.recentLiveTtlMs) && options.recentLiveTtlMs > 0 ? options.recentLiveTtlMs : 30 * 60 * 1e3;
+  const recentLivePiVersionProbes = /* @__PURE__ */ new Map();
   function record4(value) {
     return value && typeof value === "object" && !Array.isArray(value) ? value : {};
   }
@@ -1983,6 +1990,33 @@ var piManagedMcpProfileApi = (() => {
     }
     return tuple.join(".");
   }
+  function currentTimeMs() {
+    const value = Number(nowImpl());
+    if (!Number.isFinite(value)) throw new Error("pi_managed_mcp_attestation_failed: invalid attestation clock");
+    return value;
+  }
+  function piExecutableIdentity(executorCommand) {
+    try {
+      const realPath = realpathSync(executorCommand);
+      const executableStat = lstatSync2(realPath);
+      if (!executableStat.isFile() || executableStat.isSymbolicLink()) {
+        throw Object.assign(new Error("Pi executable is not a regular file"), { code: "EUNSAFE" });
+      }
+      const contentSha256 = createHash2("sha256").update(readFileSync3(realPath)).digest("hex");
+      return `sha256:${createHash2("sha256").update(JSON.stringify({ realPath, contentSha256 })).digest("hex")}`;
+    } catch (error) {
+      const errorCode = typeof error?.code === "string" ? error.code : "UNKNOWN";
+      throw new Error(`pi_managed_mcp_attestation_failed: --version error=${errorCode}`);
+    }
+  }
+  function pruneRecentLivePiVersionProbes(nowMs) {
+    for (const [identity2, entry] of recentLivePiVersionProbes) {
+      const ageMs = nowMs - entry.attestedAtMs;
+      if (ageMs < 0 || ageMs > PI_ATTESTATION_RECENT_LIVE_TTL_MS) {
+        recentLivePiVersionProbes.delete(identity2);
+      }
+    }
+  }
   function validateAuthority2(input) {
     const runtimeAuth = record4(input.runtimeAuth);
     const gateway = record4(runtimeAuth.governedMcp);
@@ -2212,9 +2246,10 @@ var piManagedMcpProfileApi = (() => {
     return { adapterVersion, protectedValues };
   }
   function attestPi(executorCommand, env, configPath, expectedConfig) {
-    let result2;
+    const executorIdentity = piExecutableIdentity(executorCommand);
+    let result3;
     for (let attempt = 1; attempt <= PI_ATTESTATION_MAX_ATTEMPTS; attempt += 1) {
-      result2 = spawnSync2(executorCommand, ["--version"], {
+      result3 = spawnSyncImpl(executorCommand, ["--version"], {
         cwd: env.AMASTER_RUNTIME_EXECUTION_WORKDIR,
         env,
         encoding: "utf8",
@@ -2222,18 +2257,41 @@ var piManagedMcpProfileApi = (() => {
         killSignal: "SIGKILL",
         maxBuffer: 1024 * 1024
       });
-      if (result2.error?.code === "ETIMEDOUT" && attempt < PI_ATTESTATION_MAX_ATTEMPTS) continue;
+      if (result3.error?.code === "ETIMEDOUT" && attempt < PI_ATTESTATION_MAX_ATTEMPTS) continue;
       break;
     }
-    if (result2.error) {
-      const errorCode = typeof result2.error.code === "string" ? result2.error.code : "UNKNOWN";
+    let executorVersion;
+    let executorVersionSource;
+    let liveProbeAttestedAtMs;
+    let liveProbeAgeMs;
+    if (result3.error?.code === "ETIMEDOUT") {
+      const identityAfterTimeout = piExecutableIdentity(executorCommand);
+      const nowMs = currentTimeMs();
+      pruneRecentLivePiVersionProbes(nowMs);
+      const recentLiveProbe = identityAfterTimeout === executorIdentity ? recentLivePiVersionProbes.get(executorIdentity) : null;
+      const ageMs = recentLiveProbe ? nowMs - recentLiveProbe.attestedAtMs : Number.POSITIVE_INFINITY;
+      if (!recentLiveProbe || ageMs < 0 || ageMs > PI_ATTESTATION_RECENT_LIVE_TTL_MS) {
+        throw new Error("pi_managed_mcp_attestation_failed: --version error=ETIMEDOUT");
+      }
+      executorVersion = recentLiveProbe.executorVersion;
+      executorVersionSource = "recent_live_probe_reuse";
+      liveProbeAttestedAtMs = recentLiveProbe.attestedAtMs;
+      liveProbeAgeMs = ageMs;
+    } else if (result3.error) {
+      const errorCode = typeof result3.error.code === "string" ? result3.error.code : "UNKNOWN";
       throw new Error(`pi_managed_mcp_attestation_failed: --version error=${errorCode}`);
+    } else if (result3.status !== 0) {
+      throw new Error(`pi_managed_mcp_attestation_failed: --version exit=${result3.status ?? "unknown"}`);
+    } else {
+      executorVersion = parseVersion(`${result3.stdout ?? ""}
+${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
+      if (piExecutableIdentity(executorCommand) !== executorIdentity) {
+        throw new Error("pi_managed_mcp_attestation_failed: Pi executable changed during --version probe");
+      }
+      executorVersionSource = "live_probe";
+      liveProbeAttestedAtMs = currentTimeMs();
+      liveProbeAgeMs = 0;
     }
-    if (result2.status !== 0) {
-      throw new Error(`pi_managed_mcp_attestation_failed: --version exit=${result2.status ?? "unknown"}`);
-    }
-    const executorVersion = parseVersion(`${result2.stdout ?? ""}
-${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     let effectiveConfig;
     try {
       effectiveConfig = JSON.parse(readFileSync3(configPath, "utf8"));
@@ -2243,7 +2301,20 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     if (JSON.stringify(effectiveConfig) !== JSON.stringify(expectedConfig) || env.PI_AGENT_MCP_SERVERS_FILE !== configPath) {
       throw new Error("pi_managed_mcp_attestation_failed: effective config does not match managed amaster Gateway");
     }
-    return executorVersion;
+    if (executorVersionSource === "live_probe") {
+      pruneRecentLivePiVersionProbes(liveProbeAttestedAtMs);
+      recentLivePiVersionProbes.set(executorIdentity, {
+        executorVersion,
+        attestedAtMs: liveProbeAttestedAtMs
+      });
+    }
+    return {
+      executorVersion,
+      executorIdentity,
+      executorVersionSource,
+      liveProbeAttestedAt: new Date(liveProbeAttestedAtMs).toISOString(),
+      liveProbeAgeMs
+    };
   }
   function prepareManagedPiMcpProfile2(input) {
     assertInvocationIsolation2(input);
@@ -2300,12 +2371,13 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         PI_AGENT_MCP_SERVERS_FILE: configPath,
         TMPDIR: tmp
       };
-      const executorVersion = attestPi(nonEmpty2(input.executorCommand, "executorCommand"), env, configPath, config);
+      const executorAttestation = attestPi(nonEmpty2(input.executorCommand, "executorCommand"), env, configPath, config);
       const attestationFacts = {
         connectorVersion: nonEmpty2(input.connectorVersion, "connectorVersion"),
         executorKind: "pi",
-        executorVersion,
+        ...executorAttestation,
         mcpAdapterVersion: seededRuntime.adapterVersion,
+        mcpToolMode: MANAGED_PI_MCP_TOOL_MODE,
         configMode: "isolated_home_run_scoped_mcp_file",
         namespace: SUPPORTED_SERVER_NAME2,
         schemaVersion: SUPPORTED_SCHEMA_VERSION2,
@@ -2396,7 +2468,7 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     if (existsSync3(profileRoot)) throw new Error("pi_managed_mcp_cleanup_failed: profile root still exists");
     return { status: "removed", profileRoot };
   }
-  function reconcileManagedPiMcpProfiles2(rootPath, options = {}) {
+  function reconcileManagedPiMcpProfiles2(rootPath, options2 = {}) {
     const root = resolve2(rootPath);
     if (!existsSync3(root)) return { scanned: 0, removed: 0, removedProfiles: 0, removedRollouts: 0, failed: 0, failures: [] };
     const profileMarkers = [];
@@ -2427,8 +2499,8 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         failures.push({ profileRoot, error: error instanceof Error ? error.message : String(error) });
       }
     }
-    const nowMs = Number.isFinite(options.nowMs) ? options.nowMs : Date.now();
-    const rolloutTtlMs = Number.isFinite(options.sessionRolloutTtlMs) && options.sessionRolloutTtlMs > 0 ? options.sessionRolloutTtlMs : DEFAULT_SESSION_ROLLOUT_TTL_MS2;
+    const nowMs = Number.isFinite(options2.nowMs) ? options2.nowMs : Date.now();
+    const rolloutTtlMs = Number.isFinite(options2.sessionRolloutTtlMs) && options2.sessionRolloutTtlMs > 0 ? options2.sessionRolloutTtlMs : DEFAULT_SESSION_ROLLOUT_TTL_MS2;
     for (const markerPath of rolloutMarkers) {
       const cacheRoot = dirname3(markerPath);
       try {
@@ -2456,7 +2528,8 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     };
   }
   return { prepareManagedPiMcpProfile: prepareManagedPiMcpProfile2, preserveManagedPiSessionRollout: preserveManagedPiSessionRollout2, cleanupManagedPiMcpProfile: cleanupManagedPiMcpProfile2, reconcileManagedPiMcpProfiles: reconcileManagedPiMcpProfiles2 };
-})();
+}
+var piManagedMcpProfileApi = createManagedPiMcpProfileApi();
 var prepareManagedPiMcpProfile = piManagedMcpProfileApi.prepareManagedPiMcpProfile;
 var preserveManagedPiSessionRollout = piManagedMcpProfileApi.preserveManagedPiSessionRollout;
 var cleanupManagedPiMcpProfile = piManagedMcpProfileApi.cleanupManagedPiMcpProfile;
@@ -2528,12 +2601,12 @@ function record2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function managedChildSpawnInvocation(command, args, requestedIdentity) {
-  const identity = record2(requestedIdentity);
-  const childUmask = identity.umask;
+  const identity2 = record2(requestedIdentity);
+  const childUmask = identity2.umask;
   if (childUmask !== void 0 && (!Number.isInteger(childUmask) || childUmask < 0 || childUmask > 511)) {
     throw new Error("executor_spawn_umask_invalid");
   }
-  const spawnIdentity = { ...identity };
+  const spawnIdentity = { ...identity2 };
   delete spawnIdentity.umask;
   if (childUmask === void 0) {
     return { command, args, spawnIdentity };
@@ -2697,7 +2770,10 @@ function fixedRules(input, includeIssueLine) {
     input.managed ? `- source workspace: ${input.sourceWorkspacePath}` : "",
     input.managed ? "Use the execution workspace as cwd. Never recursively scan the source workspace, the user's home directory, or any path outside the execution workspace. Only inspect a specific external source path when the task explicitly requires that exact path." : "",
     input.wakeReason ? `- wake reason: ${input.wakeReason}` : "",
-    input.hasGovernedMcp ? "- AMaster mutations are available only through the managed amaster MCP server. Use discovered tools and immediate typed results; never call AMaster mutation REST endpoints directly." : "- No mutation channel is available for this command. Keep the run read-only and report the missing Runtime V2 capability as a blocker."
+    input.hasGovernedMcp ? "- AMaster mutations are available only through the managed amaster MCP server. Use discovered tools and immediate typed results; never call AMaster mutation REST endpoints directly." : "- No mutation channel is available for this command. Keep the run read-only and report the missing Runtime V2 capability as a blocker.",
+    "- Runtime Artifact lineage fields sourceWorkProductId and sourceWorkProductIds accept only current artifact work product ids returned as result.effectResult.workProductId by a succeeded upload_artifact action. Never pass a documentId or revisionId as artifact lineage.",
+    "- When all inputs are issue documents and there is no source artifact work product, persist the derived result with upsert_document and do not call upload_artifact for a derived or review artifact.",
+    input.hasGovernedMcp && input.executorKind === "pi" && input.managedMcpToolMode === "proxy_only" ? "- For proxy-only Pi MCP writes, put the complete target argument object directly in the actual `mcp` call's string `args` field, even for long document bodies. Do not create shell, script, or file intermediates to stage or quote a would-be tool call, and do not narrate or print it as prose. After the needed `runtime_action.describe` result, emit the write call before further planning." : ""
   ].filter(Boolean).join("\n");
 }
 function approvalContinuationText(input) {
@@ -2726,25 +2802,79 @@ function recoveryInstructionText(input) {
       "The prior successful run did not leave a terminal task disposition.",
       "Do not repeat the original source work or create or revise deliverables.",
       "Inspect the existing task and run evidence, then choose exactly one explicit disposition: done, in_review, input, blocked, delegated, or queued.",
-      "If more work remains on this issue, call `update_parent` with `status: todo`, preserve the current agent owner, and record the concrete next action.",
+      "If more work remains on this issue, choose continuation/todo and then execute the Runtime Action Continuation Option rendered below. Do not guess its transport shape.",
       "Do not keep or write `in_progress`: only the actual `todo` issue update is a recognized resume disposition and lets the control plane queue a normal-model continuation.",
       "Record the disposition with its concrete owner or next action and update the task accordingly."
     ].join("\n");
   }
   if (input.wakeReason === "source_scoped_recovery_action") {
+    const wake = asRecord(context.paperclipWake);
+    const unresolvedBlockerIssueIds = Array.isArray(wake.unresolvedBlockerIssueIds) ? wake.unresolvedBlockerIssueIds.map(readString).filter(Boolean) : [];
+    const blockedDisposition = unresolvedBlockerIssueIds.length > 0 ? `- blocked only when the issue already has an unresolved first-class blocker; name the exact blocker and wait condition from: ${unresolvedBlockerIssueIds.join(", ")};` : [
+      "- if source work remains on this issue, choose continuation/todo and then execute the Runtime Action Continuation Option rendered below so the control plane can queue a normal-model continuation;",
+      "- do not set `blocked` without an unresolved first-class blocker; a named owner or proposed next action alone is not a blocker;"
+    ].join("\n");
     return [
       "This is a status-only source recovery. Do not repeat the original source work or create or revise deliverables.",
       "Inspect the existing task and run evidence, then choose exactly one explicit disposition using task-governance actions:",
       "- done only when the existing evidence already satisfies acceptance;",
       "- in_review or input when a specific human review or answer is required;",
-      "- blocked with a named unblock owner and action;",
+      blockedDisposition,
       "- delegated or queued only with a concrete continuation path.",
       "Record the disposition in a comment and update the parent task accordingly."
     ].join("\n");
   }
   return "";
 }
-function runtimeAuthorizationText(context) {
+function continuationRuntimeActionEnvelope(context) {
+  const envelope = asRecord(context.continuationRuntimeActionEnvelope);
+  const action = asRecord(envelope.action);
+  if (!readString(envelope.schemaVersion) || !readString(envelope.idempotencyKey) || action.type !== "update_parent" || action.status !== "todo" || !readString(action.comment)) return null;
+  return envelope;
+}
+function runtimeActionContinuationOptionText(input) {
+  if (!isRecoveryWakeReason(input.wakeReason)) return "";
+  const heading = "### Runtime Action Continuation Option";
+  if (!input.hasGovernedMcp) {
+    return `${heading}
+Runtime Action continuation is unavailable: managed governed MCP capability is missing. Do not guess a tool call.`;
+  }
+  const envelope = continuationRuntimeActionEnvelope(asRecord(input.context));
+  if (!envelope) {
+    return `${heading}
+Runtime Action continuation is unavailable: continuationRuntimeActionEnvelope is missing or invalid. Do not guess a tool call.`;
+  }
+  if (input.executorKind === "pi") {
+    if (input.managedMcpToolMode !== "proxy_only") {
+      return `${heading}
+Runtime Action continuation is unavailable: managed Pi MCP tool mode is not proxy_only. Do not guess a proxy or direct-tool call.`;
+    }
+    const proxyCall = {
+      server: "amaster",
+      tool: "runtime_action.submit",
+      args: JSON.stringify(envelope)
+    };
+    return [
+      heading,
+      "Only after selecting continuation/todo from the disposition menu, emit an actual `mcp` tool call with the exact proxy arguments below. Do not print this JSON as prose and do not add an outer `action` field.",
+      "```json",
+      jsonText(proxyCall),
+      "```"
+    ].join("\n");
+  }
+  if (input.executorKind === "codex") {
+    return [
+      heading,
+      "Only after selecting continuation/todo from the disposition menu, emit an actual `runtime_action.submit` tool call with the exact arguments below. Do not print this JSON as prose.",
+      "```json",
+      jsonText(envelope),
+      "```"
+    ].join("\n");
+  }
+  return `${heading}
+Runtime Action continuation is unavailable: executor kind does not support a governed Runtime Action continuation. Do not guess a tool call.`;
+}
+function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionContract = false } = {}) {
   const envelope = asRecord(context.authorizationEnvelope);
   const allowed = new Set(
     Array.isArray(envelope.allowedActionClasses) ? envelope.allowedActionClasses.filter((value) => typeof value === "string") : []
@@ -2754,13 +2884,23 @@ function runtimeAuthorizationText(context) {
     authorizationClass,
     optionId: readString(optionId)
   })).filter((entry) => entry.optionId && !allowed.has(entry.authorizationClass));
-  if (missing.length === 0) return "";
-  return [
+  const issue = asRecord(context.paperclipIssue);
+  const completion = asRecord(asRecord(issue.taskRequirements).completion);
+  const completionRole = readString(completion.role);
+  const completionDeliverable = readString(completion.deliverable);
+  const firstDocumentCheckpoint = completionDeliverable === "document_or_artifact" ? mode === "cold" ? "Before the first external browse, search, or research action, call upsert_document with a stable key. Create a checkpoint skeleton containing the acceptance criteria, a source table, and known unknowns; update the same document with each piece of verified evidence instead of waiting until broad research is complete. Immediately after upsert_document, call update_parent with status: in_progress and a concrete next action; complete both control-plane writes before the first external browse, search, or research action." : "Before the first external browse, search, or research action, read the existing stable-key document. Preserve all still-valid verified rows, source URLs, conclusions, and known unknowns; do not replace a populated document with a blank skeleton or less-informative fallback. Only when the document does not exist may you create a checkpoint skeleton. Then call update_parent with status: in_progress and a concrete next action before the first external browse, search, or research action. Update the same document with each piece of verified evidence." : "";
+  const completionContract = !suppressOrdinaryCompletionContract && completionRole && completionDeliverable ? [
+    "Before ending this run, persist durable progress through Runtime Actions and record one explicit task disposition. Browser and tool history alone are not durable progress.",
+    firstDocumentCheckpoint,
+    "If work remains in an ordinary productive run, call update_parent with status: in_progress and a concrete next action so bounded continuation recovery can preserve a live path. Status: todo does not queue a normal continuation from an ordinary productive run. Only a server-issued successful-run handoff recovery may use status: todo, and only according to its exact Recovery Instruction. Otherwise use a supported terminal or waiting disposition."
+  ].filter(Boolean).join(" ") : "";
+  const authorizationContract = missing.length > 0 ? [
     `Current allowed action classes: ${[...allowed].join(", ") || "task_governance"}.`,
     "If the task requires a missing runtime action class, create a request_checkbox_confirmation interaction using the exact option id below and wait for its accepted continuation:",
     ...missing.map((entry) => `- ${entry.authorizationClass}: ${entry.optionId}`),
     "Never use request_confirmation to authorize a runtime action class."
-  ].join("\n");
+  ].join("\n") : "";
+  return [completionContract, authorizationContract].filter(Boolean).join("\n");
 }
 function runtimeDecompositionRequirementText(context) {
   const issue = asRecord(context.paperclipIssue);
@@ -2778,7 +2918,10 @@ function runtimeDecompositionRequirementText(context) {
   }
   return [
     "This issue has a server-enforced typed decomposition requirement.",
-    "Create real direct child tasks before continuing substantial source work.",
+    "Create the complete real direct child graph before doing any substantial source work.",
+    "Before browsing, searching, commenting, or doing any source work, call runtime_action.describe for create_child_task, persist the complete child graph with runtime_action.plan, and execute it with runtime_action.commit.",
+    "Once runtime_action.commit succeeds, the committed required child graph is this parent run's durable delegated live disposition.",
+    "After runtime_action.commit succeeds, yield and end the parent run immediately. Do not browse, search, research, or execute any delegated child acceptance scope, and do not poll child runs. Child assignment runs are the sole execution path for delegated child scope.",
     "Each executable child must have an owner, dependencies where needed, and acceptance criteria. Do not create probe or test children.",
     "Preserve every parent safety and approval boundary in each child title, description, and acceptance criteria. If the parent prohibits registration, payment, booking, or external contact without later explicit authorization, create preparation or approval only children and do not assign the prohibited action.",
     `Requirement source: ${sourceType}:${sourceId}@${sourceRevision}`
@@ -2816,12 +2959,12 @@ function manifestEntry(section) {
     truncationReason: section.truncationReason ?? null
   };
 }
-function renderPrompt(sections, manifest) {
+function renderPrompt(sections, manifest, compactManifest = false) {
   return [
     ...sections.map(sectionText).filter(Boolean),
     "## Context Manifest",
     "```json",
-    jsonText(manifest),
+    compactManifest ? JSON.stringify(manifest) : jsonText(manifest),
     "```"
   ].join("\n");
 }
@@ -2845,6 +2988,10 @@ function compileCommandPromptWithManifest(input, options = {}) {
   }
   const context = asRecord(input.context);
   const mode = contextMode(input);
+  const recoveryInstruction = recoveryInstructionText(input);
+  const recoveryContinuationOption = recoveryInstruction ? runtimeActionContinuationOptionText(input) : "";
+  const completeRecoveryInstruction = [recoveryInstruction, recoveryContinuationOption].filter(Boolean).join("\n\n");
+  const suppressOrdinaryCompletionContract = completeRecoveryInstruction.length > 0;
   const governedReads = governedReadSection(context);
   const hasTask = Boolean(readString(input.taskMarkdown));
   const taskText = readString(input.taskMarkdown) ?? "";
@@ -2869,9 +3016,9 @@ function compileCommandPromptWithManifest(input, options = {}) {
   const snapshotFreshness = { kind: "run_snapshot" };
   const rawSections = [
     { name: "runtime_rules", title: "", priority: 100, sourceRef: `command:${input.commandId}`, content: fixedRules(input, !hasTask) },
-    { name: "recovery_instruction", title: "Recovery Instruction", priority: 99, sourceRef: `run:${input.runId ?? "unknown"}`, content: recoveryInstructionText(input), truncationReason: isRecoveryWakeReason(input.wakeReason) ? null : "mode_selection" },
+    { name: "recovery_instruction", title: "Recovery Instruction", priority: 100, sourceRef: `run:${input.runId ?? "unknown"}`, content: completeRecoveryInstruction, truncationReason: completeRecoveryInstruction ? null : "mode_selection" },
     { name: "approval_continuation", title: "Approved Runtime Action Continuation", priority: 99, sourceRef: `run:${input.runId ?? "unknown"}`, content: approvalContinuationText(input), truncationReason: mode === "continuation" ? null : "mode_selection" },
-    { name: "runtime_authorization", title: "Runtime Action Authorization", priority: 98, sourceRef: `run:${input.runId ?? "unknown"}`, content: runtimeAuthorizationText(context) },
+    { name: "runtime_authorization", title: "Runtime Action Contract", priority: 98, sourceRef: `run:${input.runId ?? "unknown"}`, content: runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionContract }) },
     { name: "runtime_decomposition_requirement", title: "Required Task Decomposition", priority: 98, sourceRef: `issue:${input.issueId ?? "unknown"}`, content: runtimeDecompositionRequirementText(context) },
     { name: "continuation_summary", title: "Continuation Summary", priority: 97, sourceRef: readString(asRecord(context.paperclipContinuationSummary).key) ?? `issue:${input.issueId ?? "unknown"}`, observedAt: readString(asRecord(context.paperclipContinuationSummary).updatedAt), originalContent: continuationSummary, content: mode === "cold" ? "" : continuationSummary, truncationReason: mode === "cold" ? "mode_selection" : null },
     { name: "wake_comments", title: wakeDeltaTitle, priority: interactionResolution ? 99 : 95, sourceRef: wakeDeltaSourceRefs, originalContent: wakeDeltaOriginal, content: wakeDeltaContent, truncationReason: commentsSelected ? null : "duplicate_task_context" },
@@ -2901,12 +3048,13 @@ function compileCommandPromptWithManifest(input, options = {}) {
     truncationReason: section.content ? section.truncationReason : section.truncationReason ?? "source_absent"
   }));
   let prompt = "";
+  let compactManifest = false;
   let manifest = buildManifest(mode, maxChars, sections, governedReads.provenance, 0);
   for (let pass = 0; pass < 20; pass += 1) {
     let usedChars = 0;
     for (let telemetryPass = 0; telemetryPass < 3; telemetryPass += 1) {
       manifest = buildManifest(mode, maxChars, sections, governedReads.provenance, usedChars);
-      prompt = renderPrompt(sections, manifest);
+      prompt = renderPrompt(sections, manifest, compactManifest);
       if (prompt.length === usedChars) break;
       usedChars = prompt.length;
     }
@@ -2914,8 +3062,13 @@ function compileCommandPromptWithManifest(input, options = {}) {
     const overflow = Math.max(1, prompt.length - maxChars);
     const candidate = [...sections].filter((section) => section.priority < 100 && section.content.length > 0).sort((left, right) => left.priority - right.priority)[0];
     if (!candidate) {
+      if (!compactManifest) {
+        compactManifest = true;
+        manifest = buildManifest(mode, maxChars, sections, governedReads.provenance, 0);
+        continue;
+      }
       const fixedChars = sections.filter((section) => section.priority === 100).map(sectionText).join("\n").length;
-      const manifestChars = jsonText(manifest).length;
+      const manifestChars = JSON.stringify(manifest).length;
       throw new Error(`Prompt fixed sections exceed the unified ${maxChars}-character budget: promptChars=${prompt.length} fixedChars=${fixedChars} manifestChars=${manifestChars}`);
     }
     truncateSection(candidate, Math.max(0, candidate.content.length - overflow - 32));
@@ -2954,22 +3107,22 @@ function executorDiscoveryEnv(env = process.env) {
 }
 function commandExists(command, env = process.env) {
   const commandEnv = executorDiscoveryEnv(env);
-  const result2 = spawnSync3("sh", ["-lc", `command -v ${quoteShell(command)} >/dev/null 2>&1`], {
+  const result3 = spawnSync3("sh", ["-lc", `command -v ${quoteShell(command)} >/dev/null 2>&1`], {
     env: commandEnv,
     stdio: "ignore"
   });
-  return result2.status === 0;
+  return result3.status === 0;
 }
 function commandVersion(command, env = process.env) {
   const commandEnv = executorDiscoveryEnv(env);
-  const result2 = spawnSync3(command, ["--version"], {
+  const result3 = spawnSync3(command, ["--version"], {
     env: commandEnv,
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"],
     timeout: 3e3
   });
-  if (result2.status !== 0) return void 0;
-  return result2.stdout.trim().split(/\r?\n/)[0]?.slice(0, 120) || void 0;
+  if (result3.status !== 0) return void 0;
+  return result3.stdout.trim().split(/\r?\n/)[0]?.slice(0, 120) || void 0;
 }
 function discoverExecutors(options = {}) {
   const knownExecutors = options.knownExecutors ?? KNOWN_EXECUTORS;
@@ -3053,8 +3206,8 @@ function stateFilePath(env) {
   return env.AMASTER_DAEMON_STATE_FILE ? expandHomePath(String(env.AMASTER_DAEMON_STATE_FILE)) : join5(runtimeHome(env), "runtime-connector-state.json");
 }
 function corruptStatePath(path) {
-  const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/\D/g, "").slice(0, 14);
-  const base = `${path}.corrupt-${timestamp}Z`;
+  const timestamp2 = (/* @__PURE__ */ new Date()).toISOString().replace(/\D/g, "").slice(0, 14);
+  const base = `${path}.corrupt-${timestamp2}Z`;
   let candidate = base;
   for (let suffix = 1; existsSync4(candidate); suffix += 1) {
     candidate = `${base}.${suffix}`;
@@ -3111,6 +3264,12 @@ function buildConfig(env = process.env, flags = {}) {
   const runtimeWorkspacesRoot = expandHomePath(
     String(flags.runtimeWorkspacesRoot ?? env.AMASTER_RUNTIME_WORKSPACES_ROOT ?? join5(home, "workspaces"))
   );
+  const browserSessionStateRoot = expandHomePath(String(
+    flags.browserSessionStateRoot ?? env.AMASTER_BROWSER_SESSION_STATE_ROOT ?? join5(home, "browser-auth")
+  ));
+  const browserExecutablePath = String(
+    flags.browserExecutablePath ?? env.AMASTER_BROWSER_EXECUTABLE_PATH ?? ""
+  ).trim();
   mkdirSync4(runtimeWorkspacesRoot, { recursive: true });
   const workspaceBindings = splitList(
     flags.workspaceAllowlist ?? env.AMASTER_WORKSPACE_ALLOWLIST ?? env.AMASTER_WORKSPACE_BINDINGS ?? runtimeWorkspacesRoot
@@ -3177,6 +3336,8 @@ function buildConfig(env = process.env, flags = {}) {
       flags.orphanReaperIntervalSeconds ?? env.AMASTER_RUNTIME_ORPHAN_REAPER_INTERVAL_SECONDS,
       300
     ),
+    browserSessionStateRoot,
+    browserExecutablePath: browserExecutablePath ? expandHomePath(browserExecutablePath) : "",
     runtimeWorkspacesRoot,
     state
   };
@@ -3192,6 +3353,18 @@ function tcReadString(value) {
 function tcReadNumber(value, fallback = 0) {
   return typeof value === "number" && Number.isFinite(value) ? value : fallback;
 }
+var TC_PI_ARGUMENT_VALIDATION_NODE_BUDGET = 4e3;
+function tcContainsPiArgumentValidation(value, depth = 0, seen = /* @__PURE__ */ new WeakSet(), budget = { remaining: TC_PI_ARGUMENT_VALIDATION_NODE_BUDGET }) {
+  if (budget.remaining <= 0) return false;
+  budget.remaining -= 1;
+  if (typeof value === "string") {
+    return /\binvalid(?:[_ -]+)tool(?:[_ -]+)arguments?\b|\binvalid args json\b|\btool[- ]arguments? (?:failed )?validation\b/i.test(value.slice(0, 2e4));
+  }
+  if (!value || typeof value !== "object" || depth >= 6 || seen.has(value)) return false;
+  seen.add(value);
+  const entries = Array.isArray(value) ? value.slice(0, 40).map((entry, index) => [String(index), entry]) : Object.entries(value).slice(0, 80);
+  return entries.some(([, entry]) => tcContainsPiArgumentValidation(entry, depth + 1, seen, budget));
+}
 function tcTruncateText(value, maxChars = 16e3) {
   const text = String(value ?? "");
   if (text.length <= maxChars) return text;
@@ -3310,9 +3483,9 @@ function filterExecutionStderrForResult(executorKind, stderr) {
     const trimmed = line.trim();
     return !trimmed || !isNoise(trimmed);
   });
-  const result2 = kept.join("\n");
-  return hadTrailingNewline && result2 ? `${result2}
-` : result2;
+  const result3 = kept.join("\n");
+  return hadTrailingNewline && result3 ? `${result3}
+` : result3;
 }
 function summarizeCodexEvent(event) {
   if (isProviderBookkeepingEvent(event)) return null;
@@ -3563,6 +3736,7 @@ function summarizePiEvent(event) {
   if (type === "tool_execution_start" || type === "tool_execution_end") {
     const toolName = tcReadString(event.toolName) ?? "unknown";
     const completed = type === "tool_execution_end";
+    const argumentValidationFailed = completed && event.isError === true && tcContainsPiArgumentValidation(event.result);
     return {
       stream: "system",
       level: completed && event.isError === true ? "error" : "info",
@@ -3572,7 +3746,8 @@ function summarizePiEvent(event) {
         executorEventType: type,
         toolName,
         toolCallId: tcReadString(event.toolCallId),
-        status: completed ? event.isError === true ? "failed" : "completed" : "started"
+        status: completed ? event.isError === true ? "failed" : "completed" : "started",
+        ...argumentValidationFailed ? { errorCode: "invalid_tool_arguments" } : {}
       }
     };
   }
@@ -3718,8 +3893,8 @@ var PI_TERMINAL_RUNTIME_ACTION_STATUSES = /* @__PURE__ */ new Set([
 function approvedMcpInvocationSucceeded(results, invocationId) {
   const approvedInvocationId = readString(invocationId);
   return Boolean(approvedInvocationId && (Array.isArray(results) ? results : []).some((rawResult) => {
-    const result2 = asRecord(rawResult);
-    return readString(result2.invocationId) === approvedInvocationId && readString(result2.status) === "succeeded" && !["rejected", "blocked"].includes(readString(result2.providerStatus) ?? "");
+    const result3 = asRecord(rawResult);
+    return readString(result3.invocationId) === approvedInvocationId && readString(result3.status) === "succeeded" && !["rejected", "blocked"].includes(readString(result3.providerStatus) ?? "");
   }));
 }
 function governedMcpToolResult(structuredContent) {
@@ -3733,9 +3908,9 @@ function governedMcpToolResult(structuredContent) {
   const intentId = readString(effectResult.artifactIntentId);
   const manifestId = readString(effectResult.manifestId);
   const sourceRelativePath = readString(effectResult.sourceRelativePath);
-  const sha256 = readString(effectResult.sha256);
+  const sha2563 = readString(effectResult.sha256);
   const byteSize = readNumber(effectResult.byteSize, 0);
-  const artifactIntent = providerStatus === "pending_reconcile" && intentId && manifestId && sourceRelativePath && /^[a-f0-9]{64}$/.test(sha256 ?? "") && Number.isSafeInteger(byteSize) && byteSize > 0 ? { intentId, manifestId, sourceRelativePath, sha256, byteSize } : null;
+  const artifactIntent = providerStatus === "pending_reconcile" && intentId && manifestId && sourceRelativePath && /^[a-f0-9]{64}$/.test(sha2563 ?? "") && Number.isSafeInteger(byteSize) && byteSize > 0 ? { intentId, manifestId, sourceRelativePath, sha256: sha2563, byteSize } : null;
   const runtimeActionToolName = readString(providerContent.toolName);
   const runtimeAction = runtimeActionToolName?.startsWith("runtime_action.") ? {
     toolName: runtimeActionToolName,
@@ -3755,21 +3930,21 @@ function durablePiRuntimeActionEvidence(results) {
   const normalizedResults = (Array.isArray(results) ? results : []).map(asRecord);
   const writeCallIds = /* @__PURE__ */ new Set();
   const writePlanIds = /* @__PURE__ */ new Set();
-  for (const result2 of normalizedResults) {
-    const runtimeAction = asRecord(result2.runtimeAction);
+  for (const result3 of normalizedResults) {
+    const runtimeAction = asRecord(result3.runtimeAction);
     const toolName = readString(runtimeAction.toolName);
     const callId = readString(runtimeAction.callId);
     const planId = readString(runtimeAction.planId);
     const resultStatus = readString(runtimeAction.resultStatus);
-    const status = readString(result2.status);
-    const providerStatus = readString(result2.providerStatus);
+    const status = readString(result3.status);
+    const providerStatus = readString(result3.providerStatus);
     if (status === "succeeded" && providerStatus === "accepted" && toolName && resultStatus && PI_TERMINAL_RUNTIME_ACTION_STATUSES.has(resultStatus)) {
       const isLinkedStatus = toolName === "runtime_action.status" && (callId && writeCallIds.has(callId) || planId && writePlanIds.has(planId));
       const isDurableWrite = toolName === "runtime_action.submit" ? Boolean(callId) : toolName === "runtime_action.commit" && Boolean(planId || callId);
       if (isLinkedStatus || isDurableWrite) {
         return {
           kind: "runtime_action",
-          ...readString(result2.invocationId) ? { invocationId: readString(result2.invocationId) } : {},
+          ...readString(result3.invocationId) ? { invocationId: readString(result3.invocationId) } : {},
           toolName,
           ...callId ? { callId } : {},
           ...planId ? { planId } : {}
@@ -3819,10 +3994,10 @@ function codexMcpToolResults(event) {
   if (event?.type !== "item.completed") return [];
   const item = asRecord(event.item);
   if (item.type !== "mcp_tool_call") return [];
-  const result2 = asRecord(item.result);
-  let structuredContent = asRecord(result2.structuredContent);
-  if (Object.keys(structuredContent).length === 0 && Array.isArray(result2.content)) {
-    for (const part of result2.content) {
+  const result3 = asRecord(item.result);
+  let structuredContent = asRecord(result3.structuredContent);
+  if (Object.keys(structuredContent).length === 0 && Array.isArray(result3.content)) {
+    for (const part of result3.content) {
       const text = readString(asRecord(part).text);
       if (!text) continue;
       try {
@@ -4497,7 +4672,7 @@ async function postRuntimeConnectorJsonWithRetry(config, path, payload, options
     } catch (error) {
       lastError = error;
       if (attempt >= maxAttempts || !retryableRuntimeConnectorPost(error)) throw error;
-      if (delayMs > 0) await new Promise((resolve12) => setTimeout(resolve12, delayMs));
+      if (delayMs > 0) await new Promise((resolve13) => setTimeout(resolve13, delayMs));
     }
   }
   throw lastError;
@@ -4522,7 +4697,7 @@ var bestEffortPostJson = bestEffortPostRuntimeConnectorJson;
 
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
 import { createHash as createHash3 } from "node:crypto";
-import { lstatSync as lstatSync3, readFileSync as readFileSync5, realpathSync } from "node:fs";
+import { lstatSync as lstatSync3, readFileSync as readFileSync5, realpathSync as realpathSync2 } from "node:fs";
 import { isAbsolute as isAbsolute3, relative as relative3, resolve as resolve3 } from "node:path";
 var SHA256_PATTERN = /^[a-f0-9]{64}$/;
 function requiredString(value, name) {
@@ -4539,10 +4714,10 @@ function pathWithin(candidate, root) {
   return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
 }
 function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
-  const root = realpathSync(resolve3(cwd));
+  const root = realpathSync2(resolve3(cwd));
   const uploads = /* @__PURE__ */ new Map();
-  for (const result2 of Array.isArray(mcpToolResults) ? mcpToolResults : []) {
-    const intent = result2 && typeof result2 === "object" && !Array.isArray(result2) ? result2.artifactIntent : null;
+  for (const result3 of Array.isArray(mcpToolResults) ? mcpToolResults : []) {
+    const intent = result3 && typeof result3 === "object" && !Array.isArray(result3) ? result3.artifactIntent : null;
     if (!intent || typeof intent !== "object" || Array.isArray(intent)) continue;
     const intentId = requiredString(intent.intentId, "intentId");
     const manifestId = requiredString(intent.manifestId, "manifestId");
@@ -4560,7 +4735,7 @@ function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
     }
     const sourcePath = resolve3(root, sourceRelativePath);
     const stat = lstatSync3(sourcePath);
-    if (!stat.isFile() || stat.isSymbolicLink() || !pathWithin(realpathSync(sourcePath), root)) {
+    if (!stat.isFile() || stat.isSymbolicLink() || !pathWithin(realpathSync2(sourcePath), root)) {
       throw new Error(`Runtime Artifact ${intentId} source is not an owned regular file`);
     }
     const body = readFileSync5(sourcePath);
@@ -4600,8 +4775,8 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
   let queue = Promise.resolve();
   return {
     enqueue(results) {
-      const pending = results.filter((result2) => {
-        const intentId = readString(asRecord(result2).artifactIntent?.intentId);
+      const pending = results.filter((result3) => {
+        const intentId = readString(asRecord(result3).artifactIntent?.intentId);
         if (!intentId || handledIntentIds.has(intentId)) return false;
         handledIntentIds.add(intentId);
         return true;
@@ -4631,7 +4806,7 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 
 // src/amaster-runtime-daemon/workspace-guard.mjs
 import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, realpathSync as realpathSync2, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, realpathSync as realpathSync3, statSync as statSync3 } from "node:fs";
 import { basename as basename4, join as join7, isAbsolute as isAbsolute4, relative as relative4, resolve as resolve4 } from "node:path";
 
 // src/amaster-runtime-daemon/workspace-manifest.mjs
@@ -4723,10 +4898,10 @@ function resolveWorkspaceCwd(config, command) {
   const payload = asRecord(command.payload);
   const requested = readString(payload.workspacePath);
   const fallback = config.workspaceBindings[0] ?? process.cwd();
-  const cwd = realpathSync2(resolve4(expandHomePath(requested ?? fallback)));
+  const cwd = realpathSync3(resolve4(expandHomePath(requested ?? fallback)));
   const allowlist = config.workspaceBindings.flatMap((entry) => {
     try {
-      return [realpathSync2(resolve4(expandHomePath(entry)))];
+      return [realpathSync3(resolve4(expandHomePath(entry)))];
     } catch {
       return [];
     }
@@ -4767,7 +4942,7 @@ function workspaceLabel(sourceWorkspacePath, payload) {
 function workspacesRoot(config) {
   const root = resolve4(expandHomePath(config.runtimeWorkspacesRoot ?? "~/.amaster-employee/workspaces"));
   mkdirSync5(root, { recursive: true });
-  return realpathSync2(root);
+  return realpathSync3(root);
 }
 function resolveExecutionWorkspace(config, command, opts = {}) {
   const sourceWorkspacePath = resolveWorkspaceCwd(config, command);
@@ -4895,7 +5070,7 @@ function planManagedWorkspaceGcDryRun(input) {
   const ttlMs = ttlHours * 60 * 60 * 1e3;
   const activeRunIds = new Set(input.activeRunIds ?? []);
   const activeCommandIds = new Set(input.activeCommandIds ?? []);
-  const result2 = {
+  const result3 = {
     dryRun: true,
     root,
     generatedAt: now.toISOString(),
@@ -4905,31 +5080,31 @@ function planManagedWorkspaceGcDryRun(input) {
     candidates: [],
     protected: []
   };
-  if (!root || !existsSync7(root)) return result2;
+  if (!root || !existsSync7(root)) return result3;
   for (const workdir of walkWorkdirs(root)) {
     const manifest = readWorkspaceManifest(workspaceManifestPath(workdir));
     if (!manifest || manifest.managed !== true) continue;
     const summary = summarizeWorkdir(workdir, manifest, nowMs);
-    result2.totalWorkdirs += 1;
+    result3.totalWorkdirs += 1;
     const lastTouchedTime = readIsoTime(summary.lastTouchedAt);
     const active = Boolean(
       summary.runId && activeRunIds.has(summary.runId) || summary.commandId && activeCommandIds.has(summary.commandId)
     );
     if (active) {
-      result2.protected.push({ ...summary, reason: "active_run_or_command" });
+      result3.protected.push({ ...summary, reason: "active_run_or_command" });
       continue;
     }
     if (lastTouchedTime !== null && nowMs - lastTouchedTime < ttlMs) {
-      result2.protected.push({ ...summary, reason: "within_ttl" });
+      result3.protected.push({ ...summary, reason: "within_ttl" });
       continue;
     }
-    result2.totalCandidateBytes += summary.sizeBytes;
-    result2.candidates.push({
+    result3.totalCandidateBytes += summary.sizeBytes;
+    result3.candidates.push({
       ...summary,
       reason: lastTouchedTime === null ? "missing_last_touched_at" : "older_than_ttl"
     });
   }
-  return result2;
+  return result3;
 }
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
@@ -6252,8 +6427,1724 @@ function readWorkspaceStatus(cwd, opts = {}) {
   };
 }
 
+// src/amaster-runtime-daemon/source-read-command.mjs
+import { createHash as createHash10 } from "node:crypto";
+
+// src/amaster-runtime-daemon/constrained-source-reader.mjs
+import { createHash as createHash9 } from "node:crypto";
+var CONSTRAINED_SOURCE_READER_CONTRACT_VERSION = "amaster.constrained-source-reader.v1";
+var DEFAULT_LIMITS = Object.freeze({
+  maxPages: 10,
+  maxSnapshotChars: 2e5,
+  maxTotalSnapshotChars: 5e5
+});
+var REQUEST_FIELDS = /* @__PURE__ */ new Set([
+  "sourceRevisionId",
+  "locator",
+  "declaredPageLocators",
+  "allowedResourceOrigins",
+  "pageId",
+  "limits"
+]);
+var LIMIT_FIELDS = new Set(Object.keys(DEFAULT_LIMITS));
+var ERROR_METADATA_FIELDS = /* @__PURE__ */ new Set([
+  "sourceRevisionId",
+  "origin",
+  "pathname",
+  "pageIndex",
+  "operation"
+]);
+function isRecord2(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function boundedMetadataValue(key, value) {
+  if (key === "pageIndex") return Number.isSafeInteger(value) && value >= 0 ? value : void 0;
+  if (typeof value !== "string" || value.length === 0) return void 0;
+  return value.slice(0, 512);
+}
+function sanitizeErrorMetadata(metadata) {
+  if (!isRecord2(metadata)) return {};
+  const sanitized = {};
+  for (const [key, value] of Object.entries(metadata)) {
+    if (!ERROR_METADATA_FIELDS.has(key)) continue;
+    const bounded = boundedMetadataValue(key, value);
+    if (bounded !== void 0) sanitized[key] = bounded;
+  }
+  return sanitized;
+}
+var ConstrainedSourceReaderError = class extends Error {
+  constructor(code, metadata = {}) {
+    super(code);
+    this.name = "ConstrainedSourceReaderError";
+    this.code = code;
+    this.metadata = sanitizeErrorMetadata(metadata);
+  }
+};
+function fail(code, metadata) {
+  throw new ConstrainedSourceReaderError(code, metadata);
+}
+function locatorMetadata(sourceRevisionId, url, pageIndex) {
+  return {
+    sourceRevisionId,
+    origin: url?.origin,
+    pathname: url?.pathname,
+    pageIndex
+  };
+}
+function parseHttpLocator(value, { sourceRevisionId, pageIndex, invalidCode }) {
+  if (typeof value !== "string" || value.trim().length === 0) {
+    fail(invalidCode, { sourceRevisionId, pageIndex });
+  }
+  const locator = value.trim();
+  let url;
+  try {
+    url = new URL(locator);
+  } catch {
+    fail(invalidCode, { sourceRevisionId, pageIndex });
+  }
+  if (url.username || url.password) {
+    fail(
+      "source_reader_locator_credentials_forbidden",
+      locatorMetadata(sourceRevisionId, url, pageIndex)
+    );
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:") {
+    fail(invalidCode, locatorMetadata(sourceRevisionId, url, pageIndex));
+  }
+  return { locator, url };
+}
+function normalizeLimits(value, sourceRevisionId) {
+  if (value === void 0) return { ...DEFAULT_LIMITS };
+  if (!isRecord2(value) || Object.keys(value).some((key) => !LIMIT_FIELDS.has(key))) {
+    fail("source_reader_limit_invalid", { sourceRevisionId });
+  }
+  const limits = { ...DEFAULT_LIMITS };
+  for (const [key, ceiling] of Object.entries(DEFAULT_LIMITS)) {
+    if (!(key in value)) continue;
+    const candidate = value[key];
+    if (!Number.isSafeInteger(candidate) || candidate <= 0 || candidate > ceiling) {
+      fail("source_reader_limit_invalid", { sourceRevisionId });
+    }
+    limits[key] = candidate;
+  }
+  return limits;
+}
+function normalizeResourceOrigins(value, sourceRevisionId) {
+  if (value === void 0) return [];
+  if (!Array.isArray(value)) {
+    fail("source_reader_request_invalid", { sourceRevisionId });
+  }
+  const normalized = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const resourceOrigin of value) {
+    const { url } = parseHttpLocator(resourceOrigin, {
+      sourceRevisionId,
+      invalidCode: "source_reader_resource_origin_invalid"
+    });
+    if (url.pathname !== "/" || url.search || url.hash) {
+      fail(
+        "source_reader_resource_origin_invalid",
+        locatorMetadata(sourceRevisionId, url)
+      );
+    }
+    if (!seen.has(url.origin)) {
+      seen.add(url.origin);
+      normalized.push(url.origin);
+    }
+  }
+  return normalized;
+}
+function normalizeConstrainedSourceReadRequest(input) {
+  if (!isRecord2(input) || Object.keys(input).some((key) => !REQUEST_FIELDS.has(key))) {
+    fail("source_reader_request_invalid");
+  }
+  const sourceRevisionId = typeof input.sourceRevisionId === "string" ? input.sourceRevisionId.trim() : "";
+  if (!sourceRevisionId) fail("source_reader_request_invalid");
+  if (!Number.isSafeInteger(input.pageId) || input.pageId <= 0) {
+    fail("source_reader_request_invalid", { sourceRevisionId });
+  }
+  if (input.declaredPageLocators !== void 0 && !Array.isArray(input.declaredPageLocators)) {
+    fail("source_reader_request_invalid", { sourceRevisionId });
+  }
+  const limits = normalizeLimits(input.limits, sourceRevisionId);
+  const primary = parseHttpLocator(input.locator, {
+    sourceRevisionId,
+    pageIndex: 0,
+    invalidCode: "source_reader_request_invalid"
+  });
+  const declaredInputs = input.declaredPageLocators ?? [];
+  const declared = declaredInputs.map((locator, index) => parseHttpLocator(locator, {
+    sourceRevisionId,
+    pageIndex: index + 1,
+    invalidCode: "source_reader_request_invalid"
+  }));
+  const locators = [primary, ...declared];
+  if (locators.length > limits.maxPages) {
+    fail("source_reader_limit_invalid", { sourceRevisionId });
+  }
+  const seenLocators = /* @__PURE__ */ new Set();
+  for (const [pageIndex, entry] of locators.entries()) {
+    if (entry.url.origin !== primary.url.origin) {
+      fail(
+        "source_reader_navigation_scope_forbidden",
+        locatorMetadata(sourceRevisionId, entry.url, pageIndex)
+      );
+    }
+    if (seenLocators.has(entry.url.href)) {
+      fail(
+        "source_reader_request_invalid",
+        locatorMetadata(sourceRevisionId, entry.url, pageIndex)
+      );
+    }
+    seenLocators.add(entry.url.href);
+  }
+  return {
+    contractVersion: CONSTRAINED_SOURCE_READER_CONTRACT_VERSION,
+    sourceRevisionId,
+    locator: primary.locator,
+    declaredPageLocators: declared.map((entry) => entry.locator),
+    locators: locators.map((entry) => entry.locator),
+    contentOrigin: primary.url.origin,
+    allowedResourceOrigins: normalizeResourceOrigins(
+      input.allowedResourceOrigins,
+      sourceRevisionId
+    ),
+    pageId: input.pageId,
+    limits
+  };
+}
+var TRANSPORT_METHODS = Object.freeze([
+  "listPages",
+  "navigatePage",
+  "takeSnapshot"
+]);
+var RESULT_OPERATION_NAMES = Object.freeze([
+  "list_pages",
+  "navigate_page",
+  "take_snapshot"
+]);
+var UNSUPPORTED_INTERACTIONS = /* @__PURE__ */ new Set([
+  "scroll_required",
+  "click_required",
+  "evaluate_required",
+  "virtualized_content"
+]);
+var SAFE_TRANSPORT_FAILURE_CODES = /* @__PURE__ */ new Set([
+  "source_reader_auth_required",
+  "source_reader_no_access",
+  "source_reader_network_scope_forbidden",
+  "source_reader_download_forbidden"
+]);
+function transportFunctionNames(transport) {
+  const names = /* @__PURE__ */ new Set();
+  let target = transport;
+  while (target && target !== Object.prototype) {
+    for (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(target))) {
+      if (name !== "constructor" && typeof descriptor.value === "function") names.add(name);
+    }
+    target = Object.getPrototypeOf(target);
+  }
+  return [...names].sort();
+}
+function assertTransportSurface(transport, sourceRevisionId) {
+  if (!isRecord2(transport) && (typeof transport !== "object" || transport === null)) {
+    fail("source_reader_transport_invalid", { sourceRevisionId });
+  }
+  const methods = transportFunctionNames(transport);
+  if (methods.length !== TRANSPORT_METHODS.length || TRANSPORT_METHODS.some((method) => !methods.includes(method))) {
+    fail("source_reader_transport_invalid", { sourceRevisionId });
+  }
+}
+function readSignal(value) {
+  if (value === void 0) return new AbortController().signal;
+  if (typeof value !== "object" || value === null || typeof value.aborted !== "boolean" || typeof value.addEventListener !== "function") {
+    fail("source_reader_request_invalid");
+  }
+  return value;
+}
+function checkAborted(signal, sourceRevisionId, operation) {
+  if (signal.aborted) fail("source_reader_aborted", { sourceRevisionId, operation });
+}
+async function callTransport({ sourceRevisionId, signal, operation, action }) {
+  checkAborted(signal, sourceRevisionId, operation);
+  try {
+    const result3 = await action();
+    checkAborted(signal, sourceRevisionId, operation);
+    if (isRecord2(result3) && result3.isError === true) {
+      fail("source_reader_transport_failed", { sourceRevisionId, operation });
+    }
+    return result3;
+  } catch (error) {
+    if (error instanceof ConstrainedSourceReaderError) throw error;
+    if (SAFE_TRANSPORT_FAILURE_CODES.has(error?.code)) {
+      fail(error.code, { sourceRevisionId, operation });
+    }
+    if (signal.aborted || error?.name === "AbortError") {
+      fail("source_reader_aborted", { sourceRevisionId, operation });
+    }
+    fail("source_reader_transport_failed", { sourceRevisionId, operation });
+  }
+}
+function normalizePageRows(value, sourceRevisionId) {
+  if (!Array.isArray(value)) {
+    fail("source_reader_transport_invalid", { sourceRevisionId, operation: "list_pages" });
+  }
+  const seen = /* @__PURE__ */ new Set();
+  return value.map((row) => {
+    if (!isRecord2(row) || !Number.isSafeInteger(row.pageId) || row.pageId <= 0 || typeof row.url !== "string" || seen.has(row.pageId)) {
+      fail("source_reader_transport_invalid", { sourceRevisionId, operation: "list_pages" });
+    }
+    seen.add(row.pageId);
+    return { pageId: row.pageId, url: row.url };
+  });
+}
+function pageIdSet(rows) {
+  return rows.map((row) => row.pageId).sort((left, right) => left - right);
+}
+function assertStableTargetSet(before, after, request) {
+  if (!after.some((row) => row.pageId === request.pageId)) {
+    fail("source_reader_target_missing", { sourceRevisionId: request.sourceRevisionId });
+  }
+  if (before.length !== after.length || pageIdSet(before).some((pageId, index) => pageId !== pageIdSet(after)[index])) {
+    fail("source_reader_target_set_changed", { sourceRevisionId: request.sourceRevisionId });
+  }
+}
+function parseObservedUrl(value, request, pageIndex, operation) {
+  const { url } = parseHttpLocator(value, {
+    sourceRevisionId: request.sourceRevisionId,
+    pageIndex,
+    invalidCode: "source_reader_transport_invalid"
+  });
+  if (url.origin !== request.contentOrigin) {
+    fail(
+      "source_reader_cross_scope_redirect",
+      { ...locatorMetadata(request.sourceRevisionId, url, pageIndex), operation }
+    );
+  }
+  return url;
+}
+async function assertNetworkAllowed(locator, dependencies, request, pageIndex, operation) {
+  let allowed;
+  try {
+    allowed = await dependencies.assertNetworkAddressAllowed(locator);
+  } catch {
+    const url = (() => {
+      try {
+        return new URL(locator);
+      } catch {
+        return null;
+      }
+    })();
+    fail(
+      "source_reader_network_scope_forbidden",
+      { ...locatorMetadata(request.sourceRevisionId, url, pageIndex), operation }
+    );
+  }
+  if (allowed === false) {
+    const url = new URL(locator);
+    fail(
+      "source_reader_network_scope_forbidden",
+      { ...locatorMetadata(request.sourceRevisionId, url, pageIndex), operation }
+    );
+  }
+}
+function normalizeNavigationResult(value, request, pageIndex) {
+  if (!isRecord2(value) || typeof value.finalUrl !== "string" || !Array.isArray(value.redirectChain) || value.redirectChain.some((entry) => typeof entry !== "string") || !Array.isArray(value.resourceOrigins) || value.resourceOrigins.some((entry) => typeof entry !== "string") || typeof value.downloadAttempted !== "boolean") {
+    fail("source_reader_transport_invalid", {
+      sourceRevisionId: request.sourceRevisionId,
+      pageIndex,
+      operation: "navigate_page"
+    });
+  }
+  return {
+    finalUrl: value.finalUrl,
+    redirectChain: [...value.redirectChain],
+    resourceOrigins: [...value.resourceOrigins],
+    downloadAttempted: value.downloadAttempted
+  };
+}
+function normalizeSnapshotResult(value, request, pageIndex) {
+  if (!isRecord2(value) || typeof value.text !== "string" || typeof value.truncated !== "boolean" || !(value.unsupportedInteraction === null || UNSUPPORTED_INTERACTIONS.has(value.unsupportedInteraction))) {
+    fail("source_reader_transport_invalid", {
+      sourceRevisionId: request.sourceRevisionId,
+      pageIndex,
+      operation: "take_snapshot"
+    });
+  }
+  return {
+    text: value.text,
+    truncated: value.truncated,
+    unsupportedInteraction: value.unsupportedInteraction
+  };
+}
+function timestamp(now, sourceRevisionId) {
+  const value = now();
+  const date = value instanceof Date ? value : new Date(value);
+  if (!Number.isFinite(date.getTime())) {
+    fail("source_reader_request_invalid", { sourceRevisionId });
+  }
+  return date.toISOString();
+}
+async function listPages(dependencies, request, signal) {
+  const value = await callTransport({
+    sourceRevisionId: request.sourceRevisionId,
+    signal,
+    operation: "list_pages",
+    action: () => dependencies.transport.listPages({ signal })
+  });
+  return normalizePageRows(value, request.sourceRevisionId);
+}
+async function validateNavigationResult(result3, dependencies, request, pageIndex) {
+  if (result3.downloadAttempted) {
+    fail("source_reader_download_forbidden", {
+      sourceRevisionId: request.sourceRevisionId,
+      pageIndex,
+      operation: "navigate_page"
+    });
+  }
+  for (const locator of [...result3.redirectChain, result3.finalUrl]) {
+    parseObservedUrl(locator, request, pageIndex, "navigate_page");
+    await assertNetworkAllowed(locator, dependencies, request, pageIndex, "navigate_page");
+  }
+  const allowedOrigins = /* @__PURE__ */ new Set([request.contentOrigin, ...request.allowedResourceOrigins]);
+  for (const resourceOrigin of result3.resourceOrigins) {
+    const { url } = parseHttpLocator(resourceOrigin, {
+      sourceRevisionId: request.sourceRevisionId,
+      pageIndex,
+      invalidCode: "source_reader_transport_invalid"
+    });
+    if (url.pathname !== "/" || url.search || url.hash) {
+      fail("source_reader_transport_invalid", {
+        ...locatorMetadata(request.sourceRevisionId, url, pageIndex),
+        operation: "navigate_page"
+      });
+    }
+    if (!allowedOrigins.has(url.origin)) {
+      fail("source_reader_resource_origin_forbidden", {
+        ...locatorMetadata(request.sourceRevisionId, url, pageIndex),
+        operation: "navigate_page"
+      });
+    }
+    await assertNetworkAllowed(url.origin, dependencies, request, pageIndex, "navigate_page");
+  }
+}
+async function readConstrainedSource(input, dependencies) {
+  const request = normalizeConstrainedSourceReadRequest(input);
+  if (!isRecord2(dependencies) || typeof dependencies.assertNetworkAddressAllowed !== "function" || dependencies.now !== void 0 && typeof dependencies.now !== "function") {
+    fail("source_reader_request_invalid", { sourceRevisionId: request.sourceRevisionId });
+  }
+  assertTransportSurface(dependencies.transport, request.sourceRevisionId);
+  const signal = readSignal(dependencies.signal);
+  const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
+  const startedAt = timestamp(now, request.sourceRevisionId);
+  const pages = [];
+  let totalSnapshotChars = 0;
+  let coverageGap = null;
+  for (const [pageIndex, locator] of request.locators.entries()) {
+    checkAborted(signal, request.sourceRevisionId, "navigate_page");
+    await assertNetworkAllowed(locator, dependencies, request, pageIndex, "navigate_page");
+    const beforeNavigation = await listPages(dependencies, request, signal);
+    if (!beforeNavigation.some((row) => row.pageId === request.pageId)) {
+      fail("source_reader_target_missing", {
+        sourceRevisionId: request.sourceRevisionId,
+        pageIndex,
+        operation: "list_pages"
+      });
+    }
+    const navigationValue = await callTransport({
+      sourceRevisionId: request.sourceRevisionId,
+      signal,
+      operation: "navigate_page",
+      action: () => dependencies.transport.navigatePage({
+        pageId: request.pageId,
+        locator,
+        allowedResourceOrigins: [...request.allowedResourceOrigins],
+        signal
+      })
+    });
+    const navigation = normalizeNavigationResult(navigationValue, request, pageIndex);
+    await validateNavigationResult(navigation, dependencies, request, pageIndex);
+    const afterNavigation = await listPages(dependencies, request, signal);
+    assertStableTargetSet(beforeNavigation, afterNavigation, request);
+    const snapshotValue = await callTransport({
+      sourceRevisionId: request.sourceRevisionId,
+      signal,
+      operation: "take_snapshot",
+      action: () => dependencies.transport.takeSnapshot({ pageId: request.pageId, signal })
+    });
+    const snapshot = normalizeSnapshotResult(snapshotValue, request, pageIndex);
+    const afterSnapshot = await listPages(dependencies, request, signal);
+    assertStableTargetSet(beforeNavigation, afterSnapshot, request);
+    if (snapshot.text.length > request.limits.maxSnapshotChars || totalSnapshotChars + snapshot.text.length > request.limits.maxTotalSnapshotChars) {
+      fail("source_reader_snapshot_oversized", {
+        sourceRevisionId: request.sourceRevisionId,
+        pageIndex,
+        operation: "take_snapshot"
+      });
+    }
+    totalSnapshotChars += snapshot.text.length;
+    pages.push({
+      pageIndex,
+      locator,
+      finalUrl: navigation.finalUrl,
+      capturedAt: timestamp(now, request.sourceRevisionId),
+      text: snapshot.text,
+      charCount: snapshot.text.length,
+      contentHash: createHash9("sha256").update(snapshot.text, "utf8").digest("hex")
+    });
+    if (snapshot.truncated || snapshot.unsupportedInteraction) {
+      coverageGap = {
+        code: "unsupported_interaction",
+        pageIndex,
+        reason: snapshot.unsupportedInteraction ?? "scroll_required"
+      };
+      break;
+    }
+  }
+  const result3 = {
+    contractVersion: CONSTRAINED_SOURCE_READER_CONTRACT_VERSION,
+    sourceRevisionId: request.sourceRevisionId,
+    status: coverageGap ? "partial" : "complete",
+    pages,
+    totalSnapshotChars,
+    operationNames: [...RESULT_OPERATION_NAMES],
+    startedAt,
+    completedAt: timestamp(now, request.sourceRevisionId),
+    passiveEffectsPossible: true
+  };
+  if (coverageGap) result3.coverageGap = coverageGap;
+  return result3;
+}
+
+// src/amaster-runtime-daemon/source-read-command.mjs
+var SOURCE_SNAPSHOT_REDACTION_VERSION = "amaster.source-snapshot-redaction.v1";
+var COMMAND_PAYLOAD_FIELDS = /* @__PURE__ */ new Set([
+  "contractVersion",
+  "companyId",
+  "sourceId",
+  "sourceRevisionId",
+  "sourceRevision",
+  "locator",
+  "declaredPageLocators",
+  "allowedResourceOrigins",
+  "limits",
+  "authentication"
+]);
+var AUTHENTICATION_FIELDS = /* @__PURE__ */ new Set([
+  "bindingId",
+  "actionId",
+  "interactionId",
+  "localOpaqueRef",
+  "provider",
+  "origin",
+  "leaseId",
+  "leaseExpiresAt"
+]);
+var RESULT_OPERATION_NAMES2 = Object.freeze([
+  "list_pages",
+  "navigate_page",
+  "take_snapshot"
+]);
+var REDACTION_CATEGORIES = Object.freeze([
+  "credential",
+  "token",
+  "privateKey",
+  "urlSecret",
+  "highEntropy"
+]);
+var REDACTED = "[REDACTED]";
+function isRecord3(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function readIdentityString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function normalizeAuthentication(value) {
+  if (value === void 0) return void 0;
+  if (!isRecord3(value) || Object.keys(value).some((key) => !AUTHENTICATION_FIELDS.has(key)) || !readIdentityString(value.bindingId) || !readIdentityString(value.actionId) || !readIdentityString(value.interactionId) || typeof value.localOpaqueRef !== "string" || !/^profile_[a-z0-9]{16,64}$/u.test(value.localOpaqueRef) || !readIdentityString(value.provider) || !readIdentityString(value.origin) || !readIdentityString(value.leaseId) || !readIdentityString(value.leaseExpiresAt) || !Number.isFinite(Date.parse(value.leaseExpiresAt))) {
+    throw Object.assign(new Error("source_reader_command_invalid"), {
+      code: "source_reader_command_invalid"
+    });
+  }
+  return { ...value };
+}
+function sha256(value) {
+  return createHash10("sha256").update(value, "utf8").digest("hex");
+}
+function safeTimestamp(now) {
+  try {
+    const value = now();
+    const date = value instanceof Date ? value : new Date(value);
+    if (Number.isFinite(date.getTime())) return date.toISOString();
+  } catch {
+  }
+  return "1970-01-01T00:00:00.000Z";
+}
+function emptyRedactionSummary() {
+  return {
+    replacements: 0,
+    categories: Object.fromEntries(REDACTION_CATEGORIES.map((category) => [category, 0]))
+  };
+}
+function scrubSnapshotText(input) {
+  let text = input;
+  const summary = emptyRedactionSummary();
+  const replace = (category, pattern, replacement) => {
+    text = text.replace(pattern, (...args) => {
+      summary.replacements += 1;
+      summary.categories[category] += 1;
+      return typeof replacement === "function" ? replacement(...args) : replacement;
+    });
+  };
+  replace(
+    "privateKey",
+    /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/gu,
+    REDACTED
+  );
+  replace(
+    "urlSecret",
+    /([?&](?:access_token|api[_-]?key|auth|code|credential|key|password|secret|signature|token)=)[^&#\s]+/giu,
+    (_match, prefix) => `${prefix}${REDACTED}`
+  );
+  replace(
+    "token",
+    /\b(?:authorization\s*:\s*)?bearer\s+[A-Za-z0-9._~+/=-]{8,}/giu,
+    REDACTED
+  );
+  replace(
+    "token",
+    /\b(api[_-]?key|access[_-]?token|auth[_-]?token)\s*[:=]\s*[^\s,;]+/giu,
+    (_match, label) => `${label}=${REDACTED}`
+  );
+  replace(
+    "credential",
+    /\b(password|passwd|pwd|credential|client[_-]?secret)\s*[:=]\s*[^\s,;]+/giu,
+    (_match, label) => `${label}=${REDACTED}`
+  );
+  text = text.replace(/[A-Za-z0-9_-]{32,}/gu, (candidate) => {
+    if (!/[A-Za-z]/u.test(candidate) || !/[0-9]/u.test(candidate)) return candidate;
+    summary.replacements += 1;
+    summary.categories.highEntropy += 1;
+    return REDACTED;
+  });
+  return { text, summary };
+}
+function normalizeCommand(command) {
+  if (!isRecord3(command) || !isRecord3(command.payload)) throw Object.assign(new Error("source_reader_command_invalid"), { code: "source_reader_command_invalid" });
+  const payload = command.payload;
+  if (Object.keys(payload).some((key) => !COMMAND_PAYLOAD_FIELDS.has(key)) || payload.contractVersion !== CONSTRAINED_SOURCE_READER_CONTRACT_VERSION || !readIdentityString(command.commandId) || !readIdentityString(command.connectorId) || !readIdentityString(payload.companyId) || !readIdentityString(payload.sourceId) || !readIdentityString(payload.sourceRevisionId) || !Number.isSafeInteger(payload.sourceRevision) || payload.sourceRevision <= 0) {
+    throw Object.assign(new Error("source_reader_command_invalid"), { code: "source_reader_command_invalid" });
+  }
+  return {
+    commandId: command.commandId.trim(),
+    connectorId: command.connectorId.trim(),
+    payload: {
+      ...payload,
+      ...payload.authentication === void 0 ? {} : { authentication: normalizeAuthentication(payload.authentication) }
+    }
+  };
+}
+function baseResult(command, startedAt, completedAt) {
+  const payload = command.payload;
+  return {
+    contractVersion: CONSTRAINED_SOURCE_READER_CONTRACT_VERSION,
+    redactionVersion: SOURCE_SNAPSHOT_REDACTION_VERSION,
+    companyId: payload.companyId,
+    sourceId: payload.sourceId,
+    sourceRevisionId: payload.sourceRevisionId,
+    sourceRevision: payload.sourceRevision,
+    connectorId: command.connectorId,
+    commandId: command.commandId,
+    operationNames: [...RESULT_OPERATION_NAMES2],
+    startedAt,
+    completedAt,
+    passiveEffectsPossible: true
+  };
+}
+function failureCode(error) {
+  const code = readIdentityString(error?.code);
+  return code && /^source_reader_[a-z0-9_]{1,110}$/u.test(code) ? code : "source_reader_transport_failed";
+}
+function failedResult(command, startedAt, completedAt, error) {
+  return {
+    ...baseResult(command, startedAt, completedAt),
+    status: "failed",
+    pages: [],
+    totalSnapshotChars: 0,
+    aggregateContentHash: sha256(""),
+    redaction: emptyRedactionSummary(),
+    failureCode: failureCode(error)
+  };
+}
+async function unavailableSourceReadBindingResolver() {
+  throw Object.assign(new Error("source_reader_transport_unavailable"), {
+    code: "source_reader_transport_unavailable"
+  });
+}
+async function executeSourceReadCommand(commandInput, dependencies = {}) {
+  const now = typeof dependencies.now === "function" ? dependencies.now : () => /* @__PURE__ */ new Date();
+  const startedAt = safeTimestamp(now);
+  let command;
+  let binding;
+  let bindingReleased = false;
+  const releaseBinding = async () => {
+    if (bindingReleased || typeof binding?.release !== "function") return;
+    bindingReleased = true;
+    await binding.release();
+  };
+  try {
+    command = normalizeCommand(commandInput);
+  } catch (error) {
+    const fallback = {
+      commandId: readIdentityString(commandInput?.commandId) ?? "00000000-0000-4000-8000-000000000000",
+      connectorId: readIdentityString(commandInput?.connectorId) ?? "00000000-0000-4000-8000-000000000000",
+      payload: isRecord3(commandInput?.payload) ? commandInput.payload : {}
+    };
+    return failedResult(fallback, startedAt, safeTimestamp(now), error);
+  }
+  try {
+    if (typeof dependencies.resolveBinding !== "function") {
+      throw Object.assign(new Error("source_reader_transport_unavailable"), {
+        code: "source_reader_transport_unavailable"
+      });
+    }
+    const signal = dependencies.signal ?? new AbortController().signal;
+    binding = await dependencies.resolveBinding({
+      companyId: command.payload.companyId,
+      sourceId: command.payload.sourceId,
+      sourceRevisionId: command.payload.sourceRevisionId,
+      sourceRevision: command.payload.sourceRevision,
+      locator: command.payload.locator,
+      declaredPageLocators: command.payload.declaredPageLocators,
+      allowedResourceOrigins: command.payload.allowedResourceOrigins,
+      limits: command.payload.limits,
+      ...command.payload.authentication ? { authentication: command.payload.authentication } : {},
+      signal
+    });
+    if (!isRecord3(binding) || !Number.isSafeInteger(binding.pageId) || binding.pageId <= 0 || typeof binding.assertNetworkAddressAllowed !== "function") {
+      throw Object.assign(new Error("source_reader_transport_invalid"), {
+        code: "source_reader_transport_invalid"
+      });
+    }
+    const read = await readConstrainedSource({
+      sourceRevisionId: command.payload.sourceRevisionId,
+      locator: command.payload.locator,
+      declaredPageLocators: command.payload.declaredPageLocators,
+      allowedResourceOrigins: command.payload.allowedResourceOrigins,
+      pageId: binding.pageId,
+      limits: command.payload.limits
+    }, {
+      transport: binding.transport,
+      assertNetworkAddressAllowed: binding.assertNetworkAddressAllowed,
+      signal,
+      now
+    });
+    const redaction = emptyRedactionSummary();
+    const processedPages = read.pages.map((page) => {
+      const scrubbed = scrubSnapshotText(page.text);
+      redaction.replacements += scrubbed.summary.replacements;
+      for (const category of REDACTION_CATEGORIES) {
+        redaction.categories[category] += scrubbed.summary.categories[category];
+      }
+      return {
+        metadata: {
+          pageIndex: page.pageIndex,
+          capturedAt: page.capturedAt,
+          charCount: scrubbed.text.length,
+          contentHash: sha256(scrubbed.text)
+        },
+        content: scrubbed.text
+      };
+    });
+    const pages = processedPages.map((page) => page.metadata);
+    const aggregateContentHash = sha256(pages.map((page) => `${page.pageIndex}:${page.contentHash}:${page.charCount}`).join("\n"));
+    const result3 = {
+      ...baseResult(command, read.startedAt, read.completedAt),
+      status: read.status,
+      pages,
+      totalSnapshotChars: pages.reduce((total, page) => total + page.charCount, 0),
+      aggregateContentHash,
+      redaction
+    };
+    if (read.status === "partial") result3.coverageGap = read.coverageGap;
+    if (read.status === "complete") {
+      result3.knowledge = {
+        format: "text",
+        pages: processedPages.map((page) => ({
+          pageIndex: page.metadata.pageIndex,
+          content: page.content
+        }))
+      };
+    }
+    await releaseBinding();
+    return result3;
+  } catch (error) {
+    let terminalError = error;
+    try {
+      await releaseBinding();
+    } catch {
+      terminalError = Object.assign(new Error("source_reader_release_failed"), {
+        code: "source_reader_release_failed"
+      });
+    }
+    return failedResult(command, startedAt, safeTimestamp(now), terminalError);
+  }
+}
+
+// src/amaster-runtime-daemon/browser-session-broker.mjs
+import { createHash as createHash11 } from "node:crypto";
+import { spawnSync as spawnSync5 } from "node:child_process";
+import { existsSync as existsSync12 } from "node:fs";
+import {
+  chmod,
+  lstat,
+  mkdir,
+  readFile,
+  readdir,
+  realpath,
+  rename,
+  rm,
+  writeFile
+} from "node:fs/promises";
+import { join as join13, relative as relative8, resolve as resolve11, sep as sep2 } from "node:path";
+
+// src/amaster-runtime-daemon/playwright-source-browser.mjs
+var LOGIN_CONTROL_SELECTORS = Object.freeze([
+  'input[type="password"]',
+  'input[autocomplete="one-time-code"]',
+  '[data-amaster-auth-required="true"]'
+]);
+var ACCESS_DENIED_SELECTOR = '[data-amaster-access-denied="true"]';
+function fail2(code) {
+  throw Object.assign(new Error(code), { code });
+}
+function checkSignal(signal) {
+  if (signal?.aborted) fail2("source_reader_aborted");
+}
+function pageIds(context, ids, nextId) {
+  return context.pages().map((page) => {
+    if (!ids.has(page)) ids.set(page, nextId.value++);
+    return { pageId: ids.get(page), url: page.url() };
+  });
+}
+function selectedPage(context, ids, pageId) {
+  const page = context.pages().find((candidate) => ids.get(candidate) === pageId);
+  if (!page) fail2("source_reader_target_missing");
+  return page;
+}
+function redirectChain(response) {
+  const chain = [];
+  let request = response?.request?.()?.redirectedFrom?.() ?? null;
+  while (request) {
+    const locator = request.url?.();
+    if (typeof locator !== "string") fail2("source_reader_transport_invalid");
+    chain.push(locator);
+    request = request.redirectedFrom?.() ?? null;
+  }
+  return chain.reverse();
+}
+function originOf(locator) {
+  try {
+    const url = new URL(locator);
+    if (url.protocol !== "https:" && url.protocol !== "http:") return null;
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
+async function locatorVisible(page, selector) {
+  const locator = page.locator(selector);
+  if (await locator.count() === 0) return false;
+  const target = typeof locator.first === "function" ? locator.first() : locator;
+  return target.isVisible();
+}
+async function createPlaywrightSourceBrowser(options) {
+  if (!options?.context || !options?.page || typeof options.assertNetworkAddressAllowed !== "function") {
+    fail2("source_reader_transport_invalid");
+  }
+  const { context, page, assertNetworkAddressAllowed } = options;
+  const maxSnapshotChars = Number.isSafeInteger(options.maxSnapshotChars) && options.maxSnapshotChars > 0 ? options.maxSnapshotChars : 2e5;
+  const ids = /* @__PURE__ */ new WeakMap();
+  const nextId = { value: 1 };
+  ids.set(page, nextId.value++);
+  let networkFailure = null;
+  let allowedOrigins = new Set(Array.isArray(options.allowedOrigins) ? options.allowedOrigins : []);
+  const accessDeniedPages = /* @__PURE__ */ new WeakSet();
+  if (typeof context.route !== "function") {
+    fail2("source_reader_transport_invalid");
+  }
+  await context.route("**/*", async (route) => {
+    try {
+      const locator = route.request().url();
+      const origin = originOf(locator);
+      if (!origin || !allowedOrigins.has(origin)) {
+        networkFailure = "source_reader_resource_origin_forbidden";
+        await route.abort("blockedbyclient");
+        return;
+      }
+      await assertNetworkAddressAllowed(locator);
+      await route.continue();
+    } catch {
+      networkFailure = "source_reader_network_scope_forbidden";
+      await route.abort("blockedbyclient");
+    }
+  });
+  if (typeof context.routeWebSocket !== "function") {
+    fail2("source_reader_transport_invalid");
+  }
+  await context.routeWebSocket("**/*", async (webSocket) => {
+    networkFailure = "source_reader_network_scope_forbidden";
+    await webSocket.close({
+      code: 1008,
+      reason: "source_reader_websocket_forbidden"
+    });
+  });
+  const transport = {
+    async listPages({ signal } = {}) {
+      checkSignal(signal);
+      if (networkFailure) fail2(networkFailure);
+      return pageIds(context, ids, nextId);
+    },
+    async navigatePage({ pageId, locator, allowedResourceOrigins = [], signal } = {}) {
+      checkSignal(signal);
+      const target = selectedPage(context, ids, pageId);
+      await assertNetworkAddressAllowed(locator);
+      const contentOrigin = originOf(locator);
+      if (!contentOrigin || !Array.isArray(allowedResourceOrigins)) {
+        fail2("source_reader_transport_invalid");
+      }
+      allowedOrigins = /* @__PURE__ */ new Set([contentOrigin, ...allowedResourceOrigins]);
+      const resources = /* @__PURE__ */ new Set();
+      const checks = [];
+      let downloadAttempted = false;
+      const onRequest = (request) => {
+        const resourceLocator = request.url();
+        checks.push(Promise.resolve(assertNetworkAddressAllowed(resourceLocator)));
+        try {
+          resources.add(new URL(resourceLocator).origin);
+        } catch {
+          networkFailure = "source_reader_network_scope_forbidden";
+        }
+      };
+      const onDownload = () => {
+        downloadAttempted = true;
+      };
+      target.on("request", onRequest);
+      target.on("download", onDownload);
+      let response;
+      try {
+        response = await target.goto(locator, { waitUntil: "domcontentloaded" });
+        await Promise.all(checks);
+      } catch (error) {
+        if (networkFailure || error?.code === "source_reader_network_scope_forbidden") {
+          fail2("source_reader_network_scope_forbidden");
+        }
+        fail2("source_reader_transport_failed");
+      } finally {
+        target.off("request", onRequest);
+        target.off("download", onDownload);
+      }
+      checkSignal(signal);
+      if (networkFailure) fail2(networkFailure);
+      const status = response?.status?.();
+      if (status === 401 || status === 403) accessDeniedPages.add(target);
+      const finalUrl = response?.url?.() ?? target.url();
+      const redirects = redirectChain(response);
+      for (const redirect of redirects) await assertNetworkAddressAllowed(redirect);
+      await assertNetworkAddressAllowed(finalUrl);
+      return {
+        finalUrl,
+        redirectChain: redirects,
+        resourceOrigins: [...resources].sort(),
+        downloadAttempted
+      };
+    },
+    async takeSnapshot({ pageId, signal } = {}) {
+      checkSignal(signal);
+      if (networkFailure) fail2(networkFailure);
+      const target = selectedPage(context, ids, pageId);
+      if (accessDeniedPages.has(target) || await locatorVisible(target, ACCESS_DENIED_SELECTOR)) {
+        fail2("source_reader_no_access");
+      }
+      for (const selector of LOGIN_CONTROL_SELECTORS) {
+        if (await locatorVisible(target, selector)) fail2("source_reader_auth_required");
+      }
+      const text = await target.locator("body").innerText();
+      if (typeof text !== "string") fail2("source_reader_transport_invalid");
+      checkSignal(signal);
+      if (networkFailure) fail2(networkFailure);
+      return {
+        text: text.slice(0, maxSnapshotChars),
+        truncated: text.length > maxSnapshotChars,
+        unsupportedInteraction: null
+      };
+    }
+  };
+  return Object.freeze({
+    pageId: ids.get(page),
+    transport: Object.freeze(transport),
+    assertNetworkAddressAllowed
+  });
+}
+
+// src/amaster-runtime-daemon/browser-session-broker.mjs
+var MARKER_NAME = ".amaster-browser-session.json";
+var MARKER_VERSION = 1;
+var SUPPORTED_BROWSER_VERSION = /(?:Google Chrome|Chromium|Microsoft Edge|Chrome for Testing)/iu;
+function fail3(code) {
+  throw Object.assign(new Error(code), { code });
+}
+function sha2562(value) {
+  return createHash11("sha256").update(value, "utf8").digest("hex");
+}
+function configuredBrowserExecutableReady(executablePath) {
+  if (!executablePath || !existsSync12(executablePath)) return false;
+  const probe = spawnSync5(executablePath, ["--version"], {
+    encoding: "utf8",
+    env: { PATH: process.env.PATH ?? "" },
+    maxBuffer: 64 * 1024,
+    timeout: 5e3,
+    windowsHide: true
+  });
+  if (probe.error || probe.signal || probe.status !== 0) return false;
+  const output = `${probe.stdout ?? ""}
+${probe.stderr ?? ""}`.slice(0, 64 * 1024);
+  return SUPPORTED_BROWSER_VERSION.test(output);
+}
+function profileName(identity2) {
+  return sha2562(`${identity2.companyId}\0${identity2.bindingId}\0${identity2.localOpaqueRef}`);
+}
+function expectedMarker(identity2) {
+  return {
+    version: MARKER_VERSION,
+    companyId: identity2.companyId,
+    bindingId: identity2.bindingId,
+    localOpaqueRef: identity2.localOpaqueRef
+  };
+}
+function markerMatches(marker, identity2) {
+  const expected = expectedMarker(identity2);
+  return marker?.version === expected.version && marker?.companyId === expected.companyId && marker?.bindingId === expected.bindingId && marker?.localOpaqueRef === expected.localOpaqueRef && Object.keys(marker).length === Object.keys(expected).length;
+}
+function validLease(input, now) {
+  const expiresAt = Date.parse(input.leaseExpiresAt);
+  if (typeof input.leaseId !== "string" || !input.leaseId || !Number.isFinite(expiresAt) || expiresAt <= now.getTime()) {
+    fail3("browser_session_lease_expired");
+  }
+  return new Date(expiresAt);
+}
+async function pathStat(path, missingAllowed = false) {
+  try {
+    return await lstat(path);
+  } catch (error) {
+    if (missingAllowed && error?.code === "ENOENT") return null;
+    throw error;
+  }
+}
+async function ensureProtectedDirectory(path) {
+  await mkdir(path, { recursive: true, mode: 448 });
+  const metadata = await lstat(path);
+  if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+    fail3("browser_session_profile_path_forbidden");
+  }
+  await chmod(path, 448);
+  return realpath(path);
+}
+function assertWithinRoot(root, target) {
+  const pathFromRoot = relative8(root, target);
+  if (pathFromRoot === "" || pathFromRoot === ".." || pathFromRoot.startsWith(`..${sep2}`) || resolve11(root, pathFromRoot) !== target) {
+    fail3("browser_session_profile_path_forbidden");
+  }
+}
+async function readMarker(profilePath) {
+  const markerPath = join13(profilePath, MARKER_NAME);
+  const metadata = await pathStat(markerPath, true);
+  if (!metadata || !metadata.isFile() || metadata.isSymbolicLink()) {
+    fail3("browser_session_profile_owner_mismatch");
+  }
+  try {
+    const marker = JSON.parse(await readFile(markerPath, "utf8"));
+    if (!marker || typeof marker !== "object" || Array.isArray(marker)) throw new Error();
+    return marker;
+  } catch {
+    fail3("browser_session_profile_owner_mismatch");
+  }
+}
+async function verifyOwnedProfile(root, profilePath, identity2) {
+  const metadata = await pathStat(profilePath, true);
+  if (!metadata) return false;
+  if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+    fail3("browser_session_profile_path_forbidden");
+  }
+  const canonical = await realpath(profilePath);
+  assertWithinRoot(root, canonical);
+  if (!markerMatches(await readMarker(canonical), identity2)) {
+    fail3("browser_session_profile_owner_mismatch");
+  }
+  return true;
+}
+async function writeMarker(profilePath, identity2) {
+  const markerPath = join13(profilePath, MARKER_NAME);
+  const temporaryPath = `${markerPath}.tmp-${process.pid}-${Date.now()}`;
+  try {
+    await writeFile(temporaryPath, `${JSON.stringify(expectedMarker(identity2))}
+`, {
+      flag: "wx",
+      mode: 384
+    });
+    await rename(temporaryPath, markerPath);
+  } finally {
+    await rm(temporaryPath, { force: true });
+  }
+}
+async function ensureOwnedProfile(root, identity2) {
+  const profilePath = join13(root, profileName(identity2));
+  const exists = await verifyOwnedProfile(root, profilePath, identity2);
+  if (exists) return { profilePath, reusedProfile: true };
+  await mkdir(profilePath, { mode: 448 });
+  await chmod(profilePath, 448);
+  await writeMarker(profilePath, identity2);
+  await verifyOwnedProfile(root, profilePath, identity2);
+  return { profilePath, reusedProfile: false };
+}
+async function assertNoSymlinks(path) {
+  for (const entry of await readdir(path, { withFileTypes: true })) {
+    const entryPath = join13(path, entry.name);
+    if (entry.isSymbolicLink()) fail3("browser_session_profile_symlink_forbidden");
+    if (entry.isDirectory()) await assertNoSymlinks(entryPath);
+  }
+}
+async function removeOwnedProfile(root, identity2) {
+  const profilePath = join13(root, profileName(identity2));
+  if (!await verifyOwnedProfile(root, profilePath, identity2)) return false;
+  await assertNoSymlinks(profilePath);
+  await rm(profilePath, { recursive: true });
+  return true;
+}
+async function closeQuietly(context) {
+  try {
+    await context?.close?.();
+  } catch {
+  }
+}
+function resolverHost(locator) {
+  try {
+    return new URL(locator).hostname.toLowerCase().replace(/\.$/u, "");
+  } catch {
+    fail3("source_reader_network_scope_forbidden");
+  }
+}
+function resolverAddress(address) {
+  return address.includes(":") ? `[${address}]` : address;
+}
+function httpNetworkLocator(locator) {
+  try {
+    const url = new URL(locator);
+    if (url.protocol === "ws:") url.protocol = "http:";
+    else if (url.protocol === "wss:") url.protocol = "https:";
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      fail3("browser_session_network_scope_forbidden");
+    }
+    return url.href;
+  } catch (error) {
+    if (error?.code === "browser_session_network_scope_forbidden") throw error;
+    fail3("browser_session_network_scope_forbidden");
+  }
+}
+function createBrowserSessionBroker(options) {
+  const now = typeof options?.now === "function" ? options.now : () => /* @__PURE__ */ new Date();
+  const playwright = options?.playwright;
+  const browserExecutablePath = typeof options?.browserExecutablePath === "string" && options.browserExecutablePath.trim() ? resolve11(options.browserExecutablePath) : null;
+  const browserExecutableReady = browserExecutablePath ? configuredBrowserExecutableReady(browserExecutablePath) : null;
+  const networkScope = options?.publicNetworkScope;
+  if (!options?.stateRoot || typeof networkScope?.assertNetworkAddressAllowed !== "function" || typeof networkScope?.resolveNetworkAddresses !== "function") {
+    fail3("browser_session_broker_config_invalid");
+  }
+  const scheduleTimeout = typeof options.setTimeout === "function" ? options.setTimeout : setTimeout;
+  const cancelTimeout = typeof options.clearTimeout === "function" ? options.clearTimeout : clearTimeout;
+  const rootPromise = (async () => {
+    const stateRoot = await ensureProtectedDirectory(resolve11(options.stateRoot));
+    return ensureProtectedDirectory(join13(stateRoot, "browser-sessions"));
+  })();
+  const sessions = /* @__PURE__ */ new Map();
+  async function closeBinding(bindingId) {
+    const active = sessions.get(bindingId);
+    if (!active) return;
+    sessions.delete(bindingId);
+    if (active.leaseTimer) cancelTimeout(active.leaseTimer);
+    active.removeAbortListener?.();
+    await closeQuietly(active.context);
+  }
+  function scheduleLeaseDeadline(session) {
+    if (session.leaseTimer) cancelTimeout(session.leaseTimer);
+    const delay = Math.max(0, session.leaseExpiresAt.getTime() - now().getTime());
+    const timer = scheduleTimeout(async () => {
+      const active = sessions.get(session.bindingId);
+      if (active?.leaseId !== session.leaseId) return;
+      await closeBinding(session.bindingId);
+    }, delay);
+    timer?.unref?.();
+    session.leaseTimer = timer;
+  }
+  function attachAbortSignal(session, signal) {
+    session.removeAbortListener?.();
+    if (!signal || typeof signal.addEventListener !== "function") return;
+    const abort = () => {
+      void closeBinding(session.bindingId);
+    };
+    signal.addEventListener("abort", abort, { once: true });
+    session.removeAbortListener = () => signal.removeEventListener?.("abort", abort);
+    if (signal.aborted) abort();
+  }
+  async function installHumanNetworkGuard(context, pinnedHosts) {
+    if (typeof context?.route !== "function" || typeof context?.routeWebSocket !== "function") {
+      fail3("browser_session_network_guard_unavailable");
+    }
+    let failure = null;
+    await context.route("**/*", async (route) => {
+      try {
+        const locator = httpNetworkLocator(route.request().url());
+        if (!pinnedHosts.has(resolverHost(locator))) {
+          fail3("browser_session_network_scope_forbidden");
+        }
+        await networkScope.assertNetworkAddressAllowed(locator);
+        await route.continue();
+      } catch {
+        failure = "browser_session_network_scope_forbidden";
+        await route.abort("blockedbyclient");
+      }
+    });
+    await context.routeWebSocket("**/*", async (webSocket) => {
+      try {
+        const locator = httpNetworkLocator(webSocket.url());
+        if (!pinnedHosts.has(resolverHost(locator))) {
+          fail3("browser_session_network_scope_forbidden");
+        }
+        await networkScope.assertNetworkAddressAllowed(locator);
+        webSocket.connectToServer();
+      } catch {
+        failure = "browser_session_network_scope_forbidden";
+        await webSocket.close({
+          code: 1008,
+          reason: "browser_session_network_scope_forbidden"
+        });
+      }
+    });
+    return () => {
+      if (failure) fail3(failure);
+    };
+  }
+  async function browserLaunchArgs(input) {
+    const locators = [
+      input.locator,
+      ...Array.isArray(input.declaredPageLocators) ? input.declaredPageLocators : [],
+      ...Array.isArray(input.allowedResourceOrigins) ? input.allowedResourceOrigins : []
+    ];
+    const pinned = /* @__PURE__ */ new Map();
+    for (const locator of locators) {
+      if (typeof locator !== "string" || !locator) continue;
+      const addresses = await networkScope.resolveNetworkAddresses(locator);
+      if (!Array.isArray(addresses) || addresses.length === 0) {
+        fail3("source_reader_network_scope_forbidden");
+      }
+      const host = resolverHost(locator);
+      const address = addresses[0];
+      if (typeof address !== "string" || !address) fail3("source_reader_network_scope_forbidden");
+      pinned.set(host, resolverAddress(address));
+    }
+    const rules = [...pinned.entries()].sort(([left], [right]) => left.localeCompare(right)).map(([host, address]) => `MAP ${host} ${address}`);
+    return rules.length > 0 ? [`--host-resolver-rules=${[...rules, "EXCLUDE localhost"].join(",")}`] : [];
+  }
+  function pinnedNetworkHosts(input) {
+    return new Set([
+      input.locator,
+      ...Array.isArray(input.declaredPageLocators) ? input.declaredPageLocators : [],
+      ...Array.isArray(input.allowedResourceOrigins) ? input.allowedResourceOrigins : []
+    ].filter((locator) => typeof locator === "string" && locator).map(resolverHost));
+  }
+  async function launchPersistent(identity2, leaseKind, leaseId, leaseExpiresAt) {
+    const root = await rootPromise;
+    const profile = await ensureOwnedProfile(root, identity2);
+    if (typeof playwright?.chromium?.launchPersistentContext !== "function") {
+      fail3("browser_session_runtime_unavailable");
+    }
+    let context;
+    try {
+      const args = await browserLaunchArgs(identity2);
+      context = await playwright.chromium.launchPersistentContext(profile.profilePath, {
+        headless: false,
+        acceptDownloads: false,
+        serviceWorkers: "block",
+        args,
+        ...browserExecutablePath ? { executablePath: browserExecutablePath } : {}
+      });
+      const page = context.pages()[0] ?? await context.newPage();
+      const session = {
+        ...identity2,
+        context,
+        page,
+        leaseKind,
+        leaseId,
+        leaseExpiresAt
+      };
+      sessions.set(identity2.bindingId, session);
+      scheduleLeaseDeadline(session);
+      return { session, reusedProfile: profile.reusedProfile };
+    } catch (error) {
+      await closeQuietly(context);
+      if (error?.code?.startsWith?.("browser_session_")) throw error;
+      fail3("browser_session_launch_failed");
+    }
+  }
+  async function openHumanSession(input) {
+    const expiresAt = validLease(input, now());
+    await networkScope.assertNetworkAddressAllowed(input.locator);
+    const existing = sessions.get(input.bindingId);
+    if (existing && existing.companyId === input.companyId && existing.localOpaqueRef === input.localOpaqueRef && existing.leaseKind === "human" && existing.leaseId === input.leaseId) {
+      return {
+        bindingId: input.bindingId,
+        leaseId: input.leaseId,
+        reusedProfile: true,
+        status: "human_lease"
+      };
+    }
+    await closeBinding(input.bindingId);
+    const { session, reusedProfile } = await launchPersistent(
+      input,
+      "human",
+      input.leaseId,
+      expiresAt
+    );
+    try {
+      const assertNetworkGuardHealthy = await installHumanNetworkGuard(
+        session.context,
+        pinnedNetworkHosts(input)
+      );
+      await session.page.goto(input.locator, { waitUntil: "domcontentloaded" });
+      assertNetworkGuardHealthy();
+    } catch {
+      await closeBinding(input.bindingId);
+      fail3("browser_session_navigation_failed");
+    }
+    return {
+      bindingId: input.bindingId,
+      leaseId: input.leaseId,
+      reusedProfile,
+      status: "human_lease"
+    };
+  }
+  async function switchAccount(input) {
+    validLease(input, now());
+    const previous = input.previousBinding;
+    if (!previous || previous.bindingId === input.bindingId || typeof previous.localOpaqueRef !== "string") {
+      fail3("browser_session_command_invalid");
+    }
+    const previousSession = sessions.get(previous.bindingId);
+    if (previousSession && (previousSession.companyId !== input.companyId || previousSession.localOpaqueRef !== previous.localOpaqueRef)) {
+      fail3("browser_session_profile_owner_mismatch");
+    }
+    await closeBinding(previous.bindingId);
+    await closeBinding(input.bindingId);
+    const root = await rootPromise;
+    await removeOwnedProfile(root, {
+      companyId: input.companyId,
+      bindingId: previous.bindingId,
+      localOpaqueRef: previous.localOpaqueRef
+    });
+    return openHumanSession(input);
+  }
+  async function revokeBinding(input) {
+    await closeBinding(input.bindingId);
+    const root = await rootPromise;
+    await removeOwnedProfile(root, input);
+    return { bindingId: input.bindingId, status: "revoked" };
+  }
+  async function resolveAuthenticatedBinding(input) {
+    const expiresAt = validLease(input, now());
+    await networkScope.assertNetworkAddressAllowed(input.locator);
+    let session = sessions.get(input.bindingId);
+    if (session) {
+      if (session.companyId !== input.companyId || session.localOpaqueRef !== input.localOpaqueRef) {
+        fail3("browser_session_profile_owner_mismatch");
+      }
+      if (session.leaseKind === "human" && session.leaseId === input.leaseId) {
+        fail3("source_reader_human_lease_active");
+      }
+      if (session.leaseKind === "human") {
+        await closeBinding(input.bindingId);
+        session = (await launchPersistent(
+          input,
+          "agent_read",
+          input.leaseId,
+          expiresAt
+        )).session;
+      } else if (session.leaseKind === "agent_read" && session.leaseId !== input.leaseId) {
+        fail3("source_reader_lease_conflict");
+      } else {
+        session.leaseKind = "agent_read";
+        session.leaseId = input.leaseId;
+        session.leaseExpiresAt = expiresAt;
+        scheduleLeaseDeadline(session);
+      }
+    } else {
+      const root = await rootPromise;
+      const profilePath = join13(root, profileName(input));
+      if (!await verifyOwnedProfile(root, profilePath, input)) {
+        fail3("browser_session_profile_missing");
+      }
+      session = (await launchPersistent(
+        input,
+        "agent_read",
+        input.leaseId,
+        expiresAt
+      )).session;
+    }
+    try {
+      const binding = await createPlaywrightSourceBrowser({
+        context: session.context,
+        page: session.page,
+        maxSnapshotChars: input.limits?.maxSnapshotChars,
+        assertNetworkAddressAllowed: networkScope.assertNetworkAddressAllowed
+      });
+      attachAbortSignal(session, input.signal);
+      await binding.transport.takeSnapshot({ pageId: binding.pageId });
+      return {
+        ...binding,
+        release: () => closeBinding(input.bindingId)
+      };
+    } catch (error) {
+      await closeBinding(input.bindingId);
+      throw error;
+    }
+  }
+  async function resolvePublicBinding(input) {
+    if (typeof playwright?.chromium?.launch !== "function") {
+      fail3("browser_session_runtime_unavailable");
+    }
+    await networkScope.assertNetworkAddressAllowed(input.locator);
+    const args = await browserLaunchArgs(input);
+    const browser = await playwright.chromium.launch({
+      headless: true,
+      args,
+      ...browserExecutablePath ? { executablePath: browserExecutablePath } : {}
+    });
+    const context = await browser.newContext({
+      acceptDownloads: false,
+      serviceWorkers: "block"
+    });
+    const page = await context.newPage();
+    const binding = await createPlaywrightSourceBrowser({
+      context,
+      page,
+      maxSnapshotChars: input.limits?.maxSnapshotChars,
+      assertNetworkAddressAllowed: networkScope.assertNetworkAddressAllowed
+    });
+    return {
+      ...binding,
+      release: async () => {
+        await closeQuietly(context);
+        await closeQuietly(browser);
+      }
+    };
+  }
+  return Object.freeze({
+    readiness() {
+      if (typeof playwright?.chromium?.launchPersistentContext !== "function") {
+        return { ready: false, reason: "playwright_unavailable" };
+      }
+      if (browserExecutablePath && !browserExecutableReady) {
+        return { ready: false, reason: "chrome_unavailable" };
+      }
+      if (!browserExecutablePath && typeof playwright.chromium.executablePath === "function") {
+        const executablePath = playwright.chromium.executablePath();
+        if (!executablePath || !existsSync12(executablePath)) {
+          return { ready: false, reason: "chrome_unavailable" };
+        }
+      }
+      return { ready: true, reason: null };
+    },
+    openHumanSession,
+    reopenHumanSession: openHumanSession,
+    switchAccount,
+    revokeBinding,
+    resolveAuthenticatedBinding,
+    resolvePublicBinding,
+    async releaseLease({ bindingId, leaseId }) {
+      const session = sessions.get(bindingId);
+      if (!session || session.leaseId !== leaseId) return false;
+      await closeBinding(bindingId);
+      return true;
+    },
+    async shutdown() {
+      await Promise.all([...sessions.keys()].map(closeBinding));
+    }
+  });
+}
+
+// src/amaster-runtime-daemon/browser-session-command.mjs
+var BROWSER_SESSION_CONTRACT_VERSION = "amaster.browser-session.v1";
+var PAYLOAD_FIELDS = /* @__PURE__ */ new Set([
+  "contractVersion",
+  "actionId",
+  "companyId",
+  "bindingId",
+  "localOpaqueRef",
+  "provider",
+  "origin",
+  "locator",
+  "operation",
+  "previousBinding",
+  "leaseId",
+  "leaseExpiresAt"
+]);
+var OPERATIONS = /* @__PURE__ */ new Set(["open", "reopen", "switch_account", "revoke"]);
+var PROVIDERS = /* @__PURE__ */ new Set([
+  "feishu",
+  "dingtalk",
+  "wechat_work",
+  "notion",
+  "github_gitlab",
+  "crm",
+  "erp",
+  "custom",
+  "other"
+]);
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
+var ZERO_UUID = "00000000-0000-4000-8000-000000000000";
+function isRecord4(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function identity(value) {
+  return typeof value === "string" && UUID.test(value.trim()) ? value.trim() : null;
+}
+function safeTimestamp2(now) {
+  try {
+    const value = now();
+    const date = value instanceof Date ? value : new Date(value);
+    if (Number.isFinite(date.getTime())) return date.toISOString();
+  } catch {
+  }
+  return "1970-01-01T00:00:00.000Z";
+}
+function parseLocator(value, exactOrigin = false) {
+  if (typeof value !== "string" || !value.trim() || value.length > 8192) return null;
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:" || url.username || url.password) return null;
+  if (exactOrigin && (value !== url.origin || url.pathname !== "/" || url.search || url.hash)) {
+    return null;
+  }
+  return value;
+}
+function normalizePayload(value) {
+  if (!isRecord4(value) || Object.keys(value).some((field) => !PAYLOAD_FIELDS.has(field)) || value.contractVersion !== BROWSER_SESSION_CONTRACT_VERSION || !identity(value.actionId) || !identity(value.companyId) || !identity(value.bindingId) || typeof value.localOpaqueRef !== "string" || !/^profile_[a-z0-9]{16,64}$/u.test(value.localOpaqueRef) || !PROVIDERS.has(value.provider) || !OPERATIONS.has(value.operation) || typeof value.leaseId !== "string" || !value.leaseId.trim() || value.leaseId.length > 255 || typeof value.leaseExpiresAt !== "string" || !Number.isFinite(Date.parse(value.leaseExpiresAt))) return null;
+  const previousBinding = isRecord4(value.previousBinding) && Object.keys(value.previousBinding).length === 2 && identity(value.previousBinding.bindingId) && /^profile_[a-z0-9]{16,64}$/u.test(value.previousBinding.localOpaqueRef) ? {
+    bindingId: identity(value.previousBinding.bindingId),
+    localOpaqueRef: value.previousBinding.localOpaqueRef
+  } : null;
+  if (value.operation === "switch_account" ? !previousBinding || previousBinding.bindingId === value.bindingId : value.previousBinding !== void 0) return null;
+  const origin = parseLocator(value.origin, true);
+  const locator = parseLocator(value.locator);
+  if (!origin || !locator || new URL(locator).origin !== origin) return null;
+  return {
+    contractVersion: BROWSER_SESSION_CONTRACT_VERSION,
+    actionId: value.actionId,
+    companyId: value.companyId,
+    bindingId: value.bindingId,
+    localOpaqueRef: value.localOpaqueRef,
+    provider: value.provider,
+    origin,
+    locator,
+    operation: value.operation,
+    ...previousBinding ? { previousBinding } : {},
+    leaseId: value.leaseId.trim(),
+    leaseExpiresAt: new Date(value.leaseExpiresAt).toISOString()
+  };
+}
+function safeContext(command) {
+  const payload = isRecord4(command?.payload) ? command.payload : {};
+  return {
+    actionId: identity(payload.actionId) ?? ZERO_UUID,
+    companyId: identity(payload.companyId) ?? ZERO_UUID,
+    bindingId: identity(payload.bindingId) ?? ZERO_UUID,
+    connectorId: identity(command?.connectorId) ?? ZERO_UUID,
+    commandId: identity(command?.commandId) ?? ZERO_UUID,
+    operation: OPERATIONS.has(payload.operation) ? payload.operation : "open"
+  };
+}
+function failureCode2(error) {
+  const code = typeof error?.code === "string" ? error.code : "";
+  if (/^browser_auth_[a-z0-9_]{1,110}$/u.test(code)) return code;
+  if (/^browser_session_[a-z0-9_]{1,102}$/u.test(code)) {
+    return `browser_auth_${code.slice("browser_session_".length)}`;
+  }
+  return "browser_auth_runtime_failed";
+}
+function result(context, startedAt, completedAt, outcome, code = null) {
+  return {
+    contractVersion: BROWSER_SESSION_CONTRACT_VERSION,
+    actionId: context.actionId,
+    companyId: context.companyId,
+    bindingId: context.bindingId,
+    connectorId: context.connectorId,
+    commandId: context.commandId,
+    operation: context.operation,
+    outcome,
+    startedAt,
+    completedAt,
+    passiveEffectsPossible: true,
+    failureCode: code
+  };
+}
+async function executeBrowserSessionCommand(command, dependencies = {}) {
+  const now = typeof dependencies.now === "function" ? dependencies.now : () => /* @__PURE__ */ new Date();
+  const startedAt = safeTimestamp2(now);
+  const context = safeContext(command);
+  const payload = normalizePayload(command?.payload);
+  if (!payload || !identity(command?.commandId) || !identity(command?.connectorId)) {
+    return result(
+      context,
+      startedAt,
+      safeTimestamp2(now),
+      "failed",
+      "browser_auth_command_invalid"
+    );
+  }
+  const broker = dependencies.broker;
+  const method = payload.operation === "open" ? "openHumanSession" : payload.operation === "reopen" ? "reopenHumanSession" : payload.operation === "switch_account" ? "switchAccount" : "revokeBinding";
+  try {
+    if (typeof broker?.[method] !== "function") {
+      throw Object.assign(new Error("browser_session_runtime_unavailable"), {
+        code: "browser_session_runtime_unavailable"
+      });
+    }
+    await broker[method](payload);
+    return result(
+      context,
+      startedAt,
+      safeTimestamp2(now),
+      payload.operation === "revoke" ? "revoked" : "ready"
+    );
+  } catch (error) {
+    return result(
+      context,
+      startedAt,
+      safeTimestamp2(now),
+      "failed",
+      failureCode2(error)
+    );
+  }
+}
+
+// src/amaster-runtime-daemon/public-network-scope.mjs
+import { lookup as dnsLookup } from "node:dns/promises";
+import { BlockList, isIP } from "node:net";
+var blockedV4Addresses = new BlockList();
+for (const [network, prefix] of [
+  ["0.0.0.0", 8],
+  ["10.0.0.0", 8],
+  ["100.64.0.0", 10],
+  ["127.0.0.0", 8],
+  ["169.254.0.0", 16],
+  ["172.16.0.0", 12],
+  ["192.0.0.0", 24],
+  ["192.0.2.0", 24],
+  ["192.88.99.0", 24],
+  ["192.168.0.0", 16],
+  ["198.18.0.0", 15],
+  ["198.51.100.0", 24],
+  ["203.0.113.0", 24],
+  ["224.0.0.0", 4],
+  ["240.0.0.0", 4]
+]) {
+  blockedV4Addresses.addSubnet(network, prefix, "ipv4");
+}
+var blockedV6Addresses = new BlockList();
+for (const [network, prefix] of [
+  ["::", 128],
+  ["::1", 128],
+  ["::", 96],
+  ["::ffff:0:0", 96],
+  ["64:ff9b::", 96],
+  ["64:ff9b:1::", 48],
+  ["100::", 64],
+  ["2001::", 32],
+  ["2001:2::", 48],
+  ["2001:db8::", 32],
+  ["2001:10::", 28],
+  ["2001:20::", 28],
+  ["2002::", 16],
+  ["fc00::", 7],
+  ["fe80::", 10],
+  ["fec0::", 10],
+  ["ff00::", 8]
+]) {
+  blockedV6Addresses.addSubnet(network, prefix, "ipv6");
+}
+function forbidden() {
+  return Object.assign(new Error("source_reader_network_scope_forbidden"), {
+    code: "source_reader_network_scope_forbidden"
+  });
+}
+function parsePublicLocator(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw forbidden();
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:" || url.username || url.password || !url.hostname) {
+    throw forbidden();
+  }
+  const hostname3 = url.hostname.toLowerCase().replace(/\.$/u, "");
+  if (hostname3 === "localhost" || hostname3.endsWith(".localhost") || hostname3.endsWith(".local")) {
+    throw forbidden();
+  }
+  return { url, hostname: hostname3 };
+}
+function addressIsPublic(address) {
+  const family = isIP(address);
+  if (family === 4) return !blockedV4Addresses.check(address, "ipv4");
+  if (family === 6) return !blockedV6Addresses.check(address, "ipv6");
+  return false;
+}
+function createPublicNetworkScope(options = {}) {
+  const lookup = options.lookup ?? ((hostname3) => dnsLookup(hostname3, {
+    all: true,
+    verbatim: true
+  }));
+  async function resolveNetworkAddresses(locator) {
+    const { hostname: hostname3 } = parsePublicLocator(locator);
+    let addresses;
+    try {
+      addresses = await lookup(hostname3);
+    } catch {
+      throw forbidden();
+    }
+    if (!Array.isArray(addresses) || addresses.length === 0 || addresses.some((entry) => !entry || typeof entry.address !== "string" || !addressIsPublic(entry.address))) {
+      throw forbidden();
+    }
+    return [...new Set(addresses.map((entry) => entry.address))].sort();
+  }
+  return Object.freeze({
+    resolveNetworkAddresses,
+    async assertNetworkAddressAllowed(locator) {
+      await resolveNetworkAddresses(locator);
+      return true;
+    }
+  });
+}
+
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.0-beta.46";
+var CONNECTOR_VERSION = "0.1.0-beta.48";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -6278,6 +8169,56 @@ var piChildIdentityAllocator = null;
 var piChildIdentityAllocatorKey = null;
 var trustedPiRuntimeProvenanceCache = createTrustedPiRuntimeProvenanceCache();
 var lastPartialTrustedPiRuntimeSourceWarningKey = null;
+var browserSessionBroker = null;
+var browserSessionBrokerKey = null;
+var playwrightRuntime;
+function configuredPlaywrightRuntime() {
+  if (playwrightRuntime !== void 0) return playwrightRuntime;
+  try {
+    const loaded = createRequire(import.meta.url)("playwright-core");
+    playwrightRuntime = typeof loaded?.chromium?.launchPersistentContext === "function" ? { chromium: loaded.chromium } : null;
+  } catch {
+    playwrightRuntime = null;
+  }
+  return playwrightRuntime;
+}
+function configuredBrowserExecutablePath(config) {
+  const explicit = readString(config.browserExecutablePath);
+  const candidates = [
+    explicit,
+    process.platform === "darwin" ? "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" : null,
+    process.platform === "darwin" ? "/Applications/Chromium.app/Contents/MacOS/Chromium" : null,
+    process.platform === "darwin" ? "/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge" : null,
+    process.platform === "linux" ? "/usr/bin/google-chrome-stable" : null,
+    process.platform === "linux" ? "/usr/bin/google-chrome" : null,
+    process.platform === "linux" ? "/usr/bin/chromium" : null,
+    process.platform === "linux" ? "/usr/bin/chromium-browser" : null,
+    process.platform === "win32" && process.env.PROGRAMFILES ? join14(process.env.PROGRAMFILES, "Google", "Chrome", "Application", "chrome.exe") : null
+  ].filter(Boolean);
+  return candidates.find((candidate) => existsSync13(candidate)) ?? explicit ?? null;
+}
+function runtimeBrowserSessionBroker(config) {
+  const executablePath = configuredBrowserExecutablePath(config);
+  const key = `${resolve12(config.browserSessionStateRoot)}:${executablePath ?? "missing"}`;
+  if (!browserSessionBroker || browserSessionBrokerKey !== key) {
+    browserSessionBroker = createBrowserSessionBroker({
+      stateRoot: config.browserSessionStateRoot,
+      playwright: configuredPlaywrightRuntime(),
+      browserExecutablePath: executablePath,
+      publicNetworkScope: createPublicNetworkScope()
+    });
+    browserSessionBrokerKey = key;
+  }
+  return browserSessionBroker;
+}
+function browserCapabilityStatus(config, capability) {
+  const advertised = config.capabilities.includes(capability);
+  if (!advertised) {
+    return { advertised, ready: false, reason: "capability_not_advertised" };
+  }
+  const readiness = runtimeBrowserSessionBroker(config).readiness();
+  return { advertised, ...readiness };
+}
 function configuredPiChildIdentityAllocator(config) {
   if (!(config.piChildUidBase > 0)) return null;
   const key = `${config.piChildUidBase}:${config.piChildUidSpan}`;
@@ -6301,11 +8242,11 @@ function updateActiveRunWorkspaceManifest(commandId, manifestPath, patch = {}) {
 }
 function resultOutboxPendingCount(config) {
   const dir = resultOutboxDir(config);
-  if (!existsSync12(dir)) return 0;
+  if (!existsSync13(dir)) return 0;
   try {
     let pending = 0;
     for (const file of readdirSync8(dir).filter((name) => name.endsWith(".json"))) {
-      if (readValidResultOutboxEntryOrQuarantine(config, file, join13(dir, file))) {
+      if (readValidResultOutboxEntryOrQuarantine(config, file, join14(dir, file))) {
         pending += 1;
       }
     }
@@ -6317,15 +8258,15 @@ function resultOutboxPendingCount(config) {
 function piCompletionOutputType(event) {
   const type = readString(asRecord(event).type);
   if (PI_COMPLETION_OUTPUT_TYPES.has(type ?? "")) return type;
-  return piMcpToolResults(event).some((result2) => result2.status === "approval_required") ? "approval_required" : null;
+  return piMcpToolResults(event).some((result3) => result3.status === "approval_required") ? "approval_required" : null;
 }
 function resultOutboxActiveRunCommands(config) {
   const dir = resultOutboxDir(config);
-  if (!existsSync12(dir)) return [];
+  if (!existsSync13(dir)) return [];
   const outboxPending = resultOutboxPendingCount(config);
   const entries = [];
   for (const file of readdirSync8(dir).filter((name) => name.endsWith(".json")).sort()) {
-    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join13(dir, file));
+    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join14(dir, file));
     if (!entry) continue;
     const activeRun = asRecord(entry.activeRun);
     const commandId = readString(activeRun.commandId) ?? readString(entry.commandId);
@@ -6355,12 +8296,12 @@ function resultOutboxActiveRunCommands(config) {
 }
 function resultOutboxFailedRunCommands(config) {
   const dir = resultOutboxInvalidDir(config);
-  if (!existsSync12(dir)) return [];
+  if (!existsSync13(dir)) return [];
   const entries = [];
   for (const file of readdirSync8(dir).filter((name) => name.endsWith(".json")).sort().slice(-100)) {
     let entry;
     try {
-      entry = asRecord(JSON.parse(readFileSync10(join13(dir, file), "utf8")));
+      entry = asRecord(JSON.parse(readFileSync10(join14(dir, file), "utf8")));
     } catch {
       continue;
     }
@@ -6420,7 +8361,7 @@ function piExtraArgsDiagnostics(value) {
 }
 function safeExpandPath(value) {
   const text = readString(value);
-  return text ? resolve11(expandHomePath(text)) : null;
+  return text ? resolve12(expandHomePath(text)) : null;
 }
 function safeJsonObjectFromFile(filePath) {
   try {
@@ -6467,10 +8408,10 @@ function safeSkillRootSummary(kind, source, pathValue) {
     try {
       for (const name of readdirSync8(pathValue)) {
         if (name.startsWith(".")) continue;
-        const skillDir = join13(pathValue, name);
+        const skillDir = join14(pathValue, name);
         try {
           if (!statSync7(skillDir).isDirectory()) continue;
-          if (!existsSync12(join13(skillDir, "SKILL.md"))) continue;
+          if (!existsSync13(join14(skillDir, "SKILL.md"))) continue;
           skillCount += 1;
           if (skillCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
             truncated = true;
@@ -6521,7 +8462,7 @@ function objectKeyCount(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? Object.keys(value).length : 0;
 }
 function defaultPiCodingAgentDir() {
-  return join13(homedir3(), ".pi", "agent");
+  return join14(homedir3(), ".pi", "agent");
 }
 function piCapabilitySourcesDiagnostics() {
   const configuredPiCodingAgentDir = safeExpandPath(process.env.PI_CODING_AGENT_DIR);
@@ -6530,14 +8471,14 @@ function piCapabilitySourcesDiagnostics() {
   const configuredPiAgentHome = safeExpandPath(process.env.PI_AGENT_HOME);
   const piAgentHome = configuredPiAgentHome ?? piCodingAgentDir;
   const piAgentHomeSource = configuredPiAgentHome ? "PI_AGENT_HOME" : piCodingAgentDirSource;
-  const userSkillsPath = piAgentHome ? join13(piAgentHome, "skills") : null;
+  const userSkillsPath = piAgentHome ? join14(piAgentHome, "skills") : null;
   const configuredMarketplaceSkillsPath = safeExpandPath(
     process.env.PI_AGENT_MARKETPLACE_SKILLS_DIR
   );
-  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join13(piAgentHome, "marketplace", "skills") : null);
+  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join14(piAgentHome, "marketplace", "skills") : null);
   const builtinSkillsPath = safeExpandPath(process.env.PI_AGENT_BUILTIN_SKILLS_DIR) ?? safeExpandPath(process.env.AMASTER_BUILTIN_SKILLS);
-  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join13(piAgentHome, "mcp.json") : null);
-  const settingsConfigPath = piCodingAgentDir ? join13(piCodingAgentDir, "settings.json") : null;
+  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join14(piAgentHome, "mcp.json") : null);
+  const settingsConfigPath = piCodingAgentDir ? join14(piCodingAgentDir, "settings.json") : null;
   const skillRoots = [
     safeSkillRootSummary("user", `${piAgentHomeSource}/skills`, userSkillsPath),
     safeSkillRootSummary(
@@ -6731,6 +8672,8 @@ function buildHeartbeatPayload(config, options = {}) {
   const activeRunCommandList = Array.from(activeRunCommandById.values()).map((entry) => buildActiveRunCommandStatus(config, entry));
   const executorReadiness = buildExecutorReadiness(config);
   const platformCredential = piAgentLocalPlatformCredentialStatus(config);
+  const headedBrowserAuth = browserCapabilityStatus(config, "headed_browser_auth");
+  const constrainedSourceRead = browserCapabilityStatus(config, "constrained_source_read");
   return {
     status: "online",
     workspaceBindings: config.workspaceBindings,
@@ -6757,6 +8700,14 @@ function buildHeartbeatPayload(config, options = {}) {
       stateFile: stateFilePath(process.env),
       ...executorReadiness.length > 0 ? { executorReadiness } : {},
       ...platformCredential ? { platformCredential } : {},
+      constrainedSourceReader: {
+        capability: "constrained_source_read",
+        ...constrainedSourceRead
+      },
+      browserSessionBroker: {
+        capability: "headed_browser_auth",
+        ...headedBrowserAuth
+      },
       ...versionDrift.versionDrift || versionDrift.bundleDrift ? versionDrift : {}
     },
     metadata: {
@@ -6770,13 +8721,13 @@ function piAgentLocalPlatformRunnerEnabled(config) {
 }
 function piAgentSystemDataDir(config) {
   const configured = readString(config.AMASTER_PI_AGENT_SYSTEM_DATA_DIR ?? process.env.AMASTER_PI_AGENT_SYSTEM_DATA_DIR);
-  return configured ? resolve11(expandHomePath(configured)) : null;
+  return configured ? resolve12(expandHomePath(configured)) : null;
 }
 function readPiAgentLocalPlatformCredential(credentialsDir) {
-  const pointer = readJsonFile3(join13(credentialsDir, "latest.json"));
+  const pointer = readJsonFile3(join14(credentialsDir, "latest.json"));
   const credentialRef = readString(pointer.credentialRef);
   if (!credentialRef || !/^[a-f0-9]{64}$/i.test(credentialRef)) return null;
-  const credential = readJsonFile3(join13(credentialsDir, `${credentialRef}.json`));
+  const credential = readJsonFile3(join14(credentialsDir, `${credentialRef}.json`));
   const organizationId = readString(credential.organizationId);
   const apiKey = readString(credential.apiKey);
   if (credential.version !== 1 || !organizationId || !apiKey) return null;
@@ -6792,7 +8743,7 @@ function piAgentLocalPlatformCredentials(config) {
   if (!piAgentLocalPlatformRunnerEnabled(config)) return [];
   const systemDataDir = piAgentSystemDataDir(config);
   if (!systemDataDir) return [];
-  const companiesDir = join13(systemDataDir, "companies");
+  const companiesDir = join14(systemDataDir, "companies");
   let entries = [];
   try {
     entries = readdirSync8(companiesDir, { withFileTypes: true });
@@ -6802,7 +8753,7 @@ function piAgentLocalPlatformCredentials(config) {
   const credentialsByOrganizationId = /* @__PURE__ */ new Map();
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const credential = readPiAgentLocalPlatformCredential(join13(companiesDir, entry.name, "model-credentials"));
+    const credential = readPiAgentLocalPlatformCredential(join14(companiesDir, entry.name, "model-credentials"));
     if (credential) credentialsByOrganizationId.set(credential.organizationId, credential);
   }
   return [...credentialsByOrganizationId.values()];
@@ -6976,7 +8927,7 @@ AMASTER_WORKSPACE_ALLOWLIST=${quoteShell(config.workspaceBindings.join(","))}
 AMASTER_EXECUTORS=${quoteShell(executorEnv)}
 AMASTER_CAPABILITIES=${quoteShell(config.capabilities.join(","))}
 AMASTER_NETWORK_DOMAINS=${quoteShell(config.networkDomains.join(","))}
-AMASTER_DAEMON_STATE_FILE=${quoteShell(join13(homedir3(), ".amaster-employee", "runtime-connector-state.json"))}
+AMASTER_DAEMON_STATE_FILE=${quoteShell(join14(homedir3(), ".amaster-employee", "runtime-connector-state.json"))}
 EOF
 
 set -a
@@ -7164,10 +9115,10 @@ function buildActiveRunCommandStatus(config, entry) {
   const base = {
     ...entry,
     phase: readString(entry.phase) ?? "executing",
-    managedWorkdirPresent: entry.workspacePath ? existsSync12(entry.workspacePath) : false,
+    managedWorkdirPresent: entry.workspacePath ? existsSync13(entry.workspacePath) : false,
     outboxPending: resultOutboxPendingCount(config)
   };
-  if (!entry.workspacePath || !existsSync12(entry.workspacePath)) return base;
+  if (!entry.workspacePath || !existsSync13(entry.workspacePath)) return base;
   const manifestPath = entry.manifestPath ?? workspaceManifestPath(entry.workspacePath);
   const status = readWorkspaceStatus(entry.workspacePath, { hashCache: workspaceStatusHashCache });
   const artifactCandidates = status.artifacts.slice(0, 20);
@@ -7421,7 +9372,7 @@ function safeAgentInstructionMaterializationTarget(workspace, filePath) {
   const segments = normalized.split("/").filter(Boolean);
   if (segments.length === 0 || segments.some((segment) => segment === "." || segment === "..")) return null;
   const relativePath = segments.join("/");
-  const targetPath = resolve11(workspace.cwd, relativePath);
+  const targetPath = resolve12(workspace.cwd, relativePath);
   if (!pathWithin2(targetPath, workspace.cwd)) return null;
   return { relativePath, targetPath };
 }
@@ -7493,6 +9444,8 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
     sourceWorkspacePath: workspaceContext.sourceWorkspacePath,
     wakeReason: readString(context.wakeReason),
     hasGovernedMcp,
+    executorKind: options.executorKind,
+    managedMcpToolMode: options.managedMcpToolMode,
     agentInstructions,
     taskMarkdown,
     attachmentsText,
@@ -7503,16 +9456,16 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
 }
 function companyPiHomeRoot(baseEnv) {
   const explicitRoot = readString(baseEnv.AMASTER_COMPANY_PI_HOME_ROOT);
-  if (explicitRoot) return resolve11(expandHomePath(explicitRoot));
+  if (explicitRoot) return resolve12(expandHomePath(explicitRoot));
   const configuredPiHome = readString(baseEnv.PI_AGENT_HOME) ?? readString(baseEnv.PI_CODING_AGENT_DIR);
-  if (configuredPiHome) return join13(dirname9(resolve11(expandHomePath(configuredPiHome))), "companies");
-  return join13(homedir3(), ".amaster-employee", "companies");
+  if (configuredPiHome) return join14(dirname9(resolve12(expandHomePath(configuredPiHome))), "companies");
+  return join14(homedir3(), ".amaster-employee", "companies");
 }
 function companyPiAgentHome(baseEnv, companyId) {
   const rawCompanyId = readString(companyId);
   if (!rawCompanyId) return null;
   const segment = safeCompanyPiHomeSegment(rawCompanyId);
-  return join13(companyPiHomeRoot(baseEnv), segment, ".pi");
+  return join14(companyPiHomeRoot(baseEnv), segment, ".pi");
 }
 function commandUsesPiExecutor(command) {
   return readString(asRecord(command.payload).executorKind) === "pi";
@@ -7579,9 +9532,9 @@ function resolveNativeSessionRequest(command, workspace) {
   let cwdMatched = false;
   if (requestedCwd && sourceWorkspacePath) {
     try {
-      cwdMatched = realpathSync3(requestedCwd) === realpathSync3(sourceWorkspacePath);
+      cwdMatched = realpathSync4(requestedCwd) === realpathSync4(sourceWorkspacePath);
     } catch {
-      cwdMatched = resolve11(requestedCwd) === resolve11(sourceWorkspacePath);
+      cwdMatched = resolve12(requestedCwd) === resolve12(sourceWorkspacePath);
     }
   }
   const used = Boolean(enabled && requested && sessionId && requestedCwd && cwdMatched);
@@ -8003,13 +9956,13 @@ function sampleProcessGroupRssBytes(processGroupId) {
   if (process.platform === "win32" || processGroupId === null) return null;
   const now = Date.now();
   if (!processGroupRssSampleCache || now - processGroupRssSampleCache.sampledAtMs >= PROCESS_GROUP_RSS_SAMPLE_MIN_INTERVAL_MS) {
-    const result2 = spawnSync5("ps", ["-axo", "pgid=,rss="], {
+    const result3 = spawnSync6("ps", ["-axo", "pgid=,rss="], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });
-    if (result2.status !== 0) return null;
+    if (result3.status !== 0) return null;
     const rssKbByProcessGroup = /* @__PURE__ */ new Map();
-    for (const line of String(result2.stdout ?? "").split(/\r?\n/)) {
+    for (const line of String(result3.stdout ?? "").split(/\r?\n/)) {
       const match = line.trim().match(/^(\d+)\s+(\d+)$/);
       if (!match) continue;
       const pgid = Number.parseInt(match[1], 10);
@@ -8024,27 +9977,27 @@ function sampleProcessGroupRssBytes(processGroupId) {
 }
 function realOrResolvedPath(value) {
   try {
-    return realpathSync3(value);
+    return realpathSync4(value);
   } catch {
-    return resolve11(value);
+    return resolve12(value);
   }
 }
-var LSOF_COMMAND = process.platform === "darwin" && existsSync12("/usr/sbin/lsof") ? "/usr/sbin/lsof" : "lsof";
+var LSOF_COMMAND = process.platform === "darwin" && existsSync13("/usr/sbin/lsof") ? "/usr/sbin/lsof" : "lsof";
 function processCwdForPid(pid) {
   if (process.platform === "linux") {
     try {
-      return realpathSync3(`/proc/${pid}/cwd`);
+      return realpathSync4(`/proc/${pid}/cwd`);
     } catch {
       return null;
     }
   }
   if (process.platform === "darwin") {
-    const result2 = spawnSync5(LSOF_COMMAND, ["-a", "-p", String(pid), "-d", "cwd", "-Fn"], {
+    const result3 = spawnSync6(LSOF_COMMAND, ["-a", "-p", String(pid), "-d", "cwd", "-Fn"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });
-    if (result2.status !== 0) return null;
-    const cwdLine = String(result2.stdout ?? "").split(/\r?\n/).find((line) => line.startsWith("n"));
+    if (result3.status !== 0) return null;
+    const cwdLine = String(result3.stdout ?? "").split(/\r?\n/).find((line) => line.startsWith("n"));
     const cwd = cwdLine?.slice(1);
     return cwd ? realOrResolvedPath(cwd) : null;
   }
@@ -8069,13 +10022,13 @@ function allProcessCwdsByPid() {
     return cwds;
   }
   if (process.platform === "darwin") {
-    const result2 = spawnSync5(LSOF_COMMAND, ["-nP", "-d", "cwd", "-Fp", "-Fn"], {
+    const result3 = spawnSync6(LSOF_COMMAND, ["-nP", "-d", "cwd", "-Fp", "-Fn"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });
-    if (result2.status !== 0) return cwds;
+    if (result3.status !== 0) return cwds;
     let currentPid = null;
-    for (const line of String(result2.stdout ?? "").split(/\r?\n/)) {
+    for (const line of String(result3.stdout ?? "").split(/\r?\n/)) {
       if (line.startsWith("p")) {
         const parsed = Number.parseInt(line.slice(1), 10);
         currentPid = Number.isFinite(parsed) ? parsed : null;
@@ -8090,13 +10043,13 @@ function allProcessCwdsByPid() {
 }
 function allProcessRows() {
   if (process.platform === "win32") return [];
-  const result2 = spawnSync5("ps", ["-axo", "pid=,pgid=,command="], {
+  const result3 = spawnSync6("ps", ["-axo", "pid=,pgid=,command="], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"]
   });
-  if (result2.status !== 0) return [];
+  if (result3.status !== 0) return [];
   const rows = [];
-  for (const line of String(result2.stdout ?? "").split(/\r?\n/)) {
+  for (const line of String(result3.stdout ?? "").split(/\r?\n/)) {
     const match = line.trim().match(/^(\d+)\s+(\d+)\s+(.+)$/);
     if (!match) continue;
     const pid = Number.parseInt(match[1], 10);
@@ -8151,7 +10104,7 @@ function killWorkspaceResidentProcesses(cwd, processGroupId, options = {}) {
 }
 function walkManagedWorkdirs(root) {
   const workdirs = [];
-  if (!root || !existsSync12(root)) return workdirs;
+  if (!root || !existsSync13(root)) return workdirs;
   const stack = [root];
   while (stack.length > 0) {
     const current = stack.pop();
@@ -8164,8 +10117,8 @@ function walkManagedWorkdirs(root) {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join13(current, entry.name);
-      if (entry.name === "workdir" && existsSync12(workspaceManifestPath(fullPath))) {
+      const fullPath = join14(current, entry.name);
+      if (entry.name === "workdir" && existsSync13(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
       }
@@ -8203,7 +10156,7 @@ function manifestMatchesActiveRuntimeRef(manifest, refs, workdir = null) {
 }
 function buildOrphanReaperSample(root, workdir, manifest, residents) {
   const relativeWorkdir = (() => {
-    const value = relative8(root, workdir);
+    const value = relative9(root, workdir);
     return value && !value.startsWith("..") && !isAbsolute8(value) ? value : basename6(workdir);
   })();
   return {
@@ -8316,7 +10269,7 @@ function runExecutor(command, args, options) {
       ...spawnInvocation.spawnIdentity
     });
     const processGroupId = processGroupIdForChild(child);
-    const finish = (result2) => {
+    const finish = (result3) => {
       if (settled) return;
       settled = true;
       if (timer) clearTimeout(timer);
@@ -8335,7 +10288,7 @@ function runExecutor(command, args, options) {
         completionOutputType,
         killedWorkspaceResidents,
         ...outputDrainForcedClosed ? { outputDrainForcedClosed: true } : {},
-        ...result2
+        ...result3
       });
     };
     const scheduleStopKill = () => {
@@ -8676,12 +10629,12 @@ function resultOutboxActiveRunSnapshot(command) {
     ...readString(current.childExitSignal) ? { childExitSignal: readString(current.childExitSignal) } : {}
   };
 }
-async function completeCommand(config, command, status, result2, error) {
+async function completeCommand(config, command, status, result3, error) {
   const connectorId = requireConnectorId(config);
   const payload = {
     leaseId: command.leaseId,
     status,
-    result: result2,
+    result: result3,
     ...error ? { error: truncateText(error, 4e3) } : {}
   };
   const path = `/api/amaster/runtime-connectors/${connectorId}/commands/${command.commandId}/result`;
@@ -8703,11 +10656,11 @@ async function completeCommand(config, command, status, result2, error) {
 }
 function resultOutboxDir(config) {
   const explicit = readString(process.env.AMASTER_RESULT_OUTBOX_DIR);
-  if (explicit) return resolve11(expandHomePath(explicit));
-  return join13(dirname9(stateFilePath(process.env)), "result-outbox");
+  if (explicit) return resolve12(expandHomePath(explicit));
+  return join14(dirname9(stateFilePath(process.env)), "result-outbox");
 }
 function resultOutboxInvalidDir(config) {
-  return join13(resultOutboxDir(config), "invalid");
+  return join14(resultOutboxDir(config), "invalid");
 }
 function writeResultOutboxEntry(config, entry) {
   const dir = resultOutboxDir(config);
@@ -8719,13 +10672,13 @@ function writeResultOutboxEntry(config, entry) {
     lastAttemptAt: null,
     ...entry
   };
-  writeFileSync8(join13(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
+  writeFileSync8(join14(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
 }
 function moveResultOutboxEntryToInvalid(config, file, fullPath, reason, detail, original) {
   const invalidDir = resultOutboxInvalidDir(config);
   mkdirSync8(invalidDir, { recursive: true });
-  const invalidPath = join13(invalidDir, file);
+  const invalidPath = join14(invalidDir, file);
   if (original === void 0) {
     try {
       renameSync5(fullPath, invalidPath);
@@ -8792,7 +10745,7 @@ function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err)
     ...typeof err?.httpStatus === "number" ? { httpStatus: err.httpStatus } : {},
     lastError: truncateText(err instanceof Error ? err.message : String(err), 1e3)
   };
-  const invalidPath = join13(invalidDir, file);
+  const invalidPath = join14(invalidDir, file);
   writeFileSync8(invalidPath, `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
   try {
@@ -8806,11 +10759,11 @@ function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err)
 }
 async function flushResultOutbox(config) {
   const dir = resultOutboxDir(config);
-  if (!existsSync12(dir)) return { attempted: 0, completed: 0 };
+  if (!existsSync13(dir)) return { attempted: 0, completed: 0 };
   const files = readdirSync8(dir).filter((name) => name.endsWith(".json")).sort();
   let completed = 0;
   for (const file of files) {
-    const fullPath = join13(dir, file);
+    const fullPath = join14(dir, file);
     const entry = readValidResultOutboxEntryOrQuarantine(config, file, fullPath);
     if (!entry) continue;
     try {
@@ -9007,7 +10960,7 @@ async function materializeIssueAttachments(config, command, workspace) {
     runtimeAuth,
     issueId
   );
-  const targetDir = join13(workspace.cwd, "input-attachments");
+  const targetDir = join14(workspace.cwd, "input-attachments");
   mkdirSync8(targetDir, { recursive: true });
   const usedFilenames = /* @__PURE__ */ new Set();
   const materialized = [];
@@ -9022,11 +10975,11 @@ async function materializeIssueAttachments(config, command, workspace) {
       filename = `${stem}-${index + 1}${ext}`;
     }
     usedFilenames.add(filename);
-    const targetPath = join13(targetDir, filename);
+    const targetPath = join14(targetDir, filename);
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
     writeFileSync8(targetPath, body);
     const attachmentId = readString(attachment.id);
-    const actualSha256 = createHash9("sha256").update(body).digest("hex");
+    const actualSha256 = createHash12("sha256").update(body).digest("hex");
     const lineageCandidates = lineageCandidatesByAttachmentId.get(attachmentId) ?? [];
     const lineage = selectAttachmentLineage(lineageCandidates, actualSha256);
     if (lineageCandidates.length > 0 && !lineage) {
@@ -9049,7 +11002,7 @@ async function materializeIssueAttachments(config, command, workspace) {
       id: attachmentId,
       name: readString(attachment.originalFilename) ?? filename,
       path: targetPath,
-      relativePath: relative8(workspace.cwd, targetPath),
+      relativePath: relative9(workspace.cwd, targetPath),
       contentType: readString(attachment.contentType),
       byteSize: body.byteLength,
       contentPath,
@@ -9098,7 +11051,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
   if (manifest.version !== 1 || !Array.isArray(manifest.entries)) {
     throw new Error("artifact_input_manifest_invalid: expected version 1 entries array");
   }
-  const targetRoot = join13(workspace.cwd, "input-artifacts");
+  const targetRoot = join14(workspace.cwd, "input-artifacts");
   rmSync7(targetRoot, { recursive: true, force: true });
   mkdirSync8(targetRoot, { recursive: true });
   const usedPaths = /* @__PURE__ */ new Set();
@@ -9107,10 +11060,10 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
     const entry = asRecord(rawEntry);
     const workProductId = readString(entry.workProductId);
     const attachmentId = readString(entry.attachmentId);
-    const sha256 = readString(entry.sha256);
+    const sha2563 = readString(entry.sha256);
     const contentPath = readString(entry.contentPath);
     const byteSize = readNumber(entry.byteSize, null);
-    if (!workProductId || !attachmentId || !/^[a-f0-9]{64}$/i.test(sha256 ?? "") || !contentPath || byteSize === null) {
+    if (!workProductId || !attachmentId || !/^[a-f0-9]{64}$/i.test(sha2563 ?? "") || !contentPath || byteSize === null) {
       throw new Error(`artifact_input_manifest_invalid: entry ${index} is incomplete`);
     }
     const expectedContentPath = `/api/attachments/${attachmentId}/content`;
@@ -9118,10 +11071,10 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       throw new Error(`artifact_input_manifest_invalid: entry ${index} contentPath does not match attachmentId`);
     }
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
-    const actualSha256 = createHash9("sha256").update(body).digest("hex");
-    if (body.byteLength !== byteSize || actualSha256 !== sha256) {
+    const actualSha256 = createHash12("sha256").update(body).digest("hex");
+    if (body.byteLength !== byteSize || actualSha256 !== sha2563) {
       throw new Error(
-        `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha256} actualSha256=${actualSha256}`
+        `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha2563} actualSha256=${actualSha256}`
       );
     }
     const sourceDir = safeArtifactInputSourceDir(entry, index);
@@ -9129,15 +11082,15 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       id: attachmentId,
       originalFilename: readString(entry.originalFilename)
     }, index);
-    let relativePath = join13("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    let relativePath = join14("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     if (usedPaths.has(relativePath)) {
       const ext = extname2(filename);
       const stem = ext ? filename.slice(0, -ext.length) : filename;
       filename = `${stem}-${index + 1}${ext}`;
-      relativePath = join13("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+      relativePath = join14("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     }
     usedPaths.add(relativePath);
-    const targetPath = join13(workspace.cwd, relativePath);
+    const targetPath = join14(workspace.cwd, relativePath);
     mkdirSync8(dirname9(targetPath), { recursive: true });
     writeFileSync8(targetPath, body);
     chmodSync6(targetPath, 292);
@@ -9151,7 +11104,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       relativePath,
       contentType: readString(entry.contentType),
       byteSize: body.byteLength,
-      sha256,
+      sha256: sha2563,
       contentPath
     });
   }
@@ -9159,7 +11112,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
     version: 1,
     entries: materialized.map(({ path: _path, relativePath, ...entry }) => ({ ...entry, path: relativePath }))
   };
-  const manifestPath = join13(targetRoot, "artifact-input-manifest.json");
+  const manifestPath = join14(targetRoot, "artifact-input-manifest.json");
   writeFileSync8(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
   chmodSync6(manifestPath, 292);
   updateWorkspaceManifest(workspaceManifestPath(workspace), { artifactInputManifest: localManifest });
@@ -9170,11 +11123,11 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
   return materialized;
 }
 function issueCheckpointDir(workspace) {
-  return join13(dirname9(workspace.runDir), "checkpoint");
+  return join14(dirname9(workspace.runDir), "checkpoint");
 }
 async function clearIssueCheckpoint(config, command, workspace, reason) {
   const checkpointDir = issueCheckpointDir(workspace);
-  if (!existsSync12(checkpointDir)) return false;
+  if (!existsSync13(checkpointDir)) return false;
   rmSync7(checkpointDir, { recursive: true, force: true });
   await ingestLog(config, command, "system", "info", "Cleared issue continuation checkpoint", { reason });
   return true;
@@ -9188,12 +11141,12 @@ function safeCheckpointRelativePath(rawPath) {
   return normalized;
 }
 function hashFileSha256(filePath) {
-  return createHash9("sha256").update(readFileSync10(filePath)).digest("hex");
+  return createHash12("sha256").update(readFileSync10(filePath)).digest("hex");
 }
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);
-  const manifestPath = join13(checkpointDir, "manifest.json");
-  if (!existsSync12(manifestPath)) return [];
+  const manifestPath = join14(checkpointDir, "manifest.json");
+  if (!existsSync13(manifestPath)) return [];
   let manifest;
   try {
     manifest = asRecord(JSON.parse(readFileSync10(manifestPath, "utf8")));
@@ -9209,21 +11162,21 @@ async function materializeIssueCheckpoint(config, command, workspace) {
   try {
     const files = Array.isArray(manifest.files) ? manifest.files : [];
     if (files.length > 20) throw new Error("issue checkpoint manifest exceeds the limit of 20 files");
-    const filesRoot = realpathSync3(join13(checkpointDir, "files"));
-    const workspaceRoot = realpathSync3(workspace.cwd);
+    const filesRoot = realpathSync4(join14(checkpointDir, "files"));
+    const workspaceRoot = realpathSync4(workspace.cwd);
     const validated = [];
     let totalBytes = 0;
     for (const rawFile of files) {
       const file = asRecord(rawFile);
       const relativePath = safeCheckpointRelativePath(readString(file.path));
       if (!relativePath) throw new Error("issue checkpoint manifest contains an invalid file path");
-      const sourceCandidate = resolve11(filesRoot, relativePath);
-      const target = resolve11(workspaceRoot, relativePath);
+      const sourceCandidate = resolve12(filesRoot, relativePath);
+      const target = resolve12(workspaceRoot, relativePath);
       if (!pathWithin2(sourceCandidate, filesRoot) || !pathWithin2(target, workspaceRoot)) {
         throw new Error(`issue checkpoint path escapes its workspace: ${relativePath}`);
       }
-      if (!existsSync12(sourceCandidate)) throw new Error(`issue checkpoint file is missing: ${relativePath}`);
-      const source = realpathSync3(sourceCandidate);
+      if (!existsSync13(sourceCandidate)) throw new Error(`issue checkpoint file is missing: ${relativePath}`);
+      const source = realpathSync4(sourceCandidate);
       if (!pathWithin2(source, filesRoot) || !statSync7(source).isFile()) {
         throw new Error(`issue checkpoint source escapes its storage root: ${relativePath}`);
       }
@@ -9248,7 +11201,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
         if (err?.code !== "ENOENT") throw err;
       }
       mkdirSync8(dirname9(target), { recursive: true });
-      const targetParent = realpathSync3(dirname9(target));
+      const targetParent = realpathSync4(dirname9(target));
       if (!pathWithin2(targetParent, workspaceRoot)) {
         throw new Error(`issue checkpoint target escapes its workspace: ${relativePath}`);
       }
@@ -9276,23 +11229,23 @@ async function materializeIssueCheckpoint(config, command, workspace) {
 }
 async function saveIssueCheckpoint(config, command, workspace, candidates) {
   const checkpointDir = issueCheckpointDir(workspace);
-  const filesDir = join13(checkpointDir, "files");
+  const filesDir = join14(checkpointDir, "files");
   rmSync7(checkpointDir, { recursive: true, force: true });
   mkdirSync8(filesDir, { recursive: true });
   const files = [];
   let totalBytes = 0;
-  const workspaceRoot = realpathSync3(workspace.cwd);
+  const workspaceRoot = realpathSync4(workspace.cwd);
   for (const candidate of candidates.slice(0, 20)) {
     const relativePath = safeCheckpointRelativePath(candidate.rawPath);
     const source = readString(candidate.filePath);
-    if (!relativePath || !source || !existsSync12(source) || !statSync7(source).isFile()) continue;
-    const ownedSource = realpathSync3(source);
+    if (!relativePath || !source || !existsSync13(source) || !statSync7(source).isFile()) continue;
+    const ownedSource = realpathSync4(source);
     if (!pathWithin2(ownedSource, workspaceRoot)) {
       throw new Error(`issue checkpoint source escapes its execution workspace: ${relativePath}`);
     }
     const byteSize = statSync7(ownedSource).size;
     if (byteSize <= 0 || totalBytes + byteSize > MAX_CHECKPOINT_BYTES) continue;
-    const target = resolve11(filesDir, relativePath);
+    const target = resolve12(filesDir, relativePath);
     if (!pathWithin2(target, filesDir)) continue;
     mkdirSync8(dirname9(target), { recursive: true });
     copyFileSync3(ownedSource, target);
@@ -9312,7 +11265,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates) {
     totalBytes,
     files
   };
-  writeFileSync8(join13(checkpointDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
+  writeFileSync8(join14(checkpointDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
 `);
   await ingestLog(config, command, "system", "warn", `Saved ${files.length} required deliverable(s) for continuation recovery`, manifest);
   return manifest;
@@ -9374,6 +11327,7 @@ async function executeRunCommand(config, command) {
   await ingestWorkspaceStatus(config, command, cwd);
   const promptCompilation = buildCommandPrompt(command, workspace, materializedAttachments, {
     executorKind: executor.kind,
+    managedMcpToolMode: executor.kind === "pi" && Object.keys(governedMcp).length > 0 ? MANAGED_PI_MCP_TOOL_MODE : null,
     artifactVerifierCommands: config.artifactVerifierCommands
   });
   const nativeSessionRequest = asRecord(asRecord(command.payload).nativeSession);
@@ -9491,7 +11445,7 @@ async function executeRunCommand(config, command) {
         executorEnv = {
           ...executorEnv,
           AMASTER_MANAGED_RUNTIME_ASSERTION_FD: "3",
-          AMASTER_MANAGED_RUNTIME_AUDIT_FILE: join13(
+          AMASTER_MANAGED_RUNTIME_AUDIT_FILE: join14(
             managedMcpProfile.env.HOME,
             ".amaster-managed-runtime-audit.jsonl"
           ),
@@ -9741,12 +11695,12 @@ async function executeRunCommand(config, command) {
       config,
       command,
       cwd,
-      mcpToolResults.filter((result3) => {
-        const intentId = readString(asRecord(result3).artifactIntent?.intentId);
+      mcpToolResults.filter((result4) => {
+        const intentId = readString(asRecord(result4).artifactIntent?.intentId);
         return !intentId || !runtimeArtifactIngest.hasHandled(intentId);
       })
     ));
-    const shouldPreserveNativeSession = managedMcpProfile && parsed.sessionId && (execution.exitCode === 0 || execution.completionOutputType === "approval_required") && !execution.timedOut && execution.cancelled !== true && !execution.spawnError && ["codex", "pi"].includes(executor.kind) && mcpToolResults.some((result3) => readString(result3.status) === "approval_required");
+    const shouldPreserveNativeSession = managedMcpProfile && parsed.sessionId && (execution.exitCode === 0 || execution.completionOutputType === "approval_required") && !execution.timedOut && execution.cancelled !== true && !execution.spawnError && ["codex", "pi"].includes(executor.kind) && mcpToolResults.some((result4) => readString(result4.status) === "approval_required");
     if (shouldPreserveNativeSession) {
       try {
         const preserveSessionRollout = executor.kind === "pi" ? preserveManagedPiSessionRollout : preserveManagedCodexSessionRollout;
@@ -9760,7 +11714,7 @@ async function executeRunCommand(config, command) {
           workspace,
           workspaceStatus.artifacts.map((artifact) => ({
             rawPath: artifact.relativePath,
-            filePath: resolve11(cwd, artifact.relativePath)
+            filePath: resolve12(cwd, artifact.relativePath)
           }))
         );
         nativeSessionRollout = {
@@ -9855,7 +11809,7 @@ async function executeRunCommand(config, command) {
         status: managedMcpCleanup.status
       });
     }
-    const result2 = {
+    const result3 = {
       evidenceContract: { version: 1 },
       executorKind: executor.kind,
       command: invocation.command,
@@ -9944,7 +11898,7 @@ async function executeRunCommand(config, command) {
         }
       } : {}
     };
-    const completion = await completeCommand(config, command, cancelled ? "cancelled" : succeeded ? "succeeded" : "failed", result2, error ?? void 0);
+    const completion = await completeCommand(config, command, cancelled ? "cancelled" : succeeded ? "succeeded" : "failed", result3, error ?? void 0);
     if (!completion) {
       rememberPendingResultOutboxRunCommand(command, {
         phase: "result_outbox",
@@ -9990,6 +11944,52 @@ async function processCommand(config, command) {
       await executeTrackedModelCallCommand(config, command);
       return;
     }
+    if (command.commandType === "source_read") {
+      const sourceReadStatus = browserCapabilityStatus(config, "constrained_source_read");
+      const broker = sourceReadStatus.ready ? runtimeBrowserSessionBroker(config) : null;
+      await ackCommand(config, command, "spawned");
+      const result3 = await executeSourceReadCommand(command, {
+        resolveBinding: broker ? async (input) => input.authentication ? broker.resolveAuthenticatedBinding({
+          companyId: input.companyId,
+          locator: input.locator,
+          declaredPageLocators: input.declaredPageLocators,
+          allowedResourceOrigins: input.allowedResourceOrigins,
+          limits: input.limits,
+          signal: input.signal,
+          ...input.authentication
+        }) : broker.resolvePublicBinding({
+          locator: input.locator,
+          declaredPageLocators: input.declaredPageLocators,
+          allowedResourceOrigins: input.allowedResourceOrigins,
+          limits: input.limits
+        }) : unavailableSourceReadBindingResolver
+      });
+      const failed = result3.status === "failed";
+      await completeCommand(
+        config,
+        command,
+        failed ? "failed" : "succeeded",
+        result3,
+        failed ? result3.failureCode : void 0
+      );
+      return;
+    }
+    if (command.commandType === "browser_session") {
+      const status = browserCapabilityStatus(config, "headed_browser_auth");
+      await ackCommand(config, command, "spawned");
+      const result3 = await executeBrowserSessionCommand(command, {
+        broker: status.ready ? runtimeBrowserSessionBroker(config) : null
+      });
+      const failed = result3.outcome === "failed";
+      await completeCommand(
+        config,
+        command,
+        failed ? "failed" : "succeeded",
+        result3,
+        failed ? result3.failureCode : void 0
+      );
+      return;
+    }
     await completeCommand(config, command, "succeeded", {
       summary: `Command ${command.commandType} acknowledged by amaster-runtime-daemon.`,
       commandType: command.commandType
@@ -10026,12 +12026,12 @@ function reconcileStaleManagedMcpProfiles(config) {
     ["Codex", reconcileManagedCodexMcpProfiles],
     ["Pi", reconcileManagedPiMcpProfiles]
   ]) {
-    const result2 = reconcile(config.runtimeWorkspacesRoot);
-    if (result2.failed > 0) {
-      throw new Error(`${executorKind.toLowerCase()}_managed_mcp_restart_cleanup_failed: ${result2.failed}/${result2.scanned} owned profile(s) could not be reconciled`);
+    const result3 = reconcile(config.runtimeWorkspacesRoot);
+    if (result3.failed > 0) {
+      throw new Error(`${executorKind.toLowerCase()}_managed_mcp_restart_cleanup_failed: ${result3.failed}/${result3.scanned} owned profile(s) could not be reconciled`);
     }
-    if (result2.removed > 0) {
-      process.stderr.write(`AMaster daemon removed ${result2.removed} stale marker-owned ${executorKind} managed MCP artifact(s) during startup reconciliation.
+    if (result3.removed > 0) {
+      process.stderr.write(`AMaster daemon removed ${result3.removed} stale marker-owned ${executorKind} managed MCP artifact(s) during startup reconciliation.
 `);
     }
   }
@@ -10118,7 +12118,7 @@ async function ack(config, flags) {
   process.stdout.write(`${JSON.stringify(body, null, 2)}
 `);
 }
-async function result(config, flags) {
+async function result2(config, flags) {
   const connectorId = requireConnectorId(config);
   const commandId = flags.commandId ?? process.env.AMASTER_COMMAND_ID;
   if (!commandId) throw new Error("--command-id or AMASTER_COMMAND_ID is required");
@@ -10174,7 +12174,7 @@ async function runLoop(config) {
 ${message}
 `);
     }
-    await new Promise((resolve12) => setTimeout(resolve12, config.pollIntervalSeconds * 1e3));
+    await new Promise((resolve13) => setTimeout(resolve13, config.pollIntervalSeconds * 1e3));
   }
 }
 function help() {
@@ -10234,7 +12234,7 @@ async function main() {
       await ack(config, flags);
       break;
     case "result":
-      await result(config, flags);
+      await result2(config, flags);
       break;
     case "run-once":
       await runOnce(config);