@amaster.ai/employee-runtime-connector 0.1.1-beta.91 → 0.1.1-beta.93

package/dist/amaster-runtime-daemon.mjs

@@ -4,9 +4,9 @@
 // src/amaster-runtime-daemon.mjs
 import { createHash as createHash14 } from "node:crypto";
 import { createRequire } from "node:module";
-import { chmodSync as chmodSync7, copyFileSync as copyFileSync2, existsSync as existsSync13, lstatSync as lstatSync7, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync2, readFileSync as readFileSync13, readdirSync as readdirSync10, realpathSync as realpathSync5, renameSync as renameSync8, rmSync as rmSync8, statSync as statSync9, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync10 } from "node:fs";
+import { chmodSync as chmodSync7, copyFileSync as copyFileSync2, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync2, readFileSync as readFileSync13, readdirSync as readdirSync10, realpathSync as realpathSync5, renameSync as renameSync8, rmSync as rmSync8, statSync as statSync9, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync10 } from "node:fs";
 import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3, tmpdir } from "node:os";
-import { basename as basename6, delimiter as delimiter3, dirname as dirname10, extname as extname3, isAbsolute as isAbsolute7, join as join15, relative as relative7, resolve as resolve11 } from "node:path";
+import { basename as basename6, delimiter as delimiter3, dirname as dirname10, extname as extname3, isAbsolute as isAbsolute8, join as join15, relative as relative7, resolve as resolve11 } from "node:path";
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
 
 // src/amaster-runtime-daemon/common.mjs
@@ -432,10 +432,10 @@ function preparePiExecutorAccess(input) {
 
 // src/amaster-runtime-daemon/codex-managed-mcp-profile.mjs
 import { createHash } from "node:crypto";
-import { chmodSync as chmodSync2, existsSync, lstatSync as lstatSync2, mkdirSync, readFileSync, realpathSync, readdirSync as readdirSync2, rmSync, statSync, writeFileSync } from "node:fs";
+import { chmodSync as chmodSync2, existsSync as existsSync2, lstatSync as lstatSync2, mkdirSync, readFileSync, realpathSync, readdirSync as readdirSync2, rmSync, statSync, writeFileSync } from "node:fs";
 import { arch, platform } from "node:os";
-import { basename, dirname, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { spawnSync } from "node:child_process";
+import { basename, dirname, isAbsolute as isAbsolute2, join as join2, relative, resolve as resolve2 } from "node:path";
+import { spawnSync as spawnSync2 } from "node:child_process";
 
 // ../../node_modules/.pnpm/smol-toml@1.7.0/node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
@@ -1258,6 +1258,109 @@ function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false } = {}) {
   return str;
 }
 
+// src/amaster-runtime-daemon/executor-discovery.mjs
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { delimiter, isAbsolute } from "node:path";
+var KNOWN_EXECUTORS = [
+  ["codex", "codex"],
+  ["claude", "claude"],
+  ["cursor", "cursor"],
+  ["opencode", "opencode"],
+  ["hermes", "hermes"],
+  ["pi", "pi"],
+  ["openclaw", "openclaw"]
+];
+function executorDiscoveryEnv(env = process.env) {
+  const extraPaths = splitList(env.AMASTER_EXECUTOR_PATHS);
+  if (extraPaths.length === 0) return env;
+  return {
+    ...env,
+    PATH: [...extraPaths, env.PATH ?? ""].filter(Boolean).join(delimiter)
+  };
+}
+function commandExists(command, env = process.env) {
+  if (process.platform === "win32") {
+    return Boolean(resolveExecutorCommand(command, env));
+  }
+  const commandEnv = executorDiscoveryEnv(env);
+  const result3 = spawnSync("sh", ["-lc", `command -v ${quoteShell(command)} >/dev/null 2>&1`], {
+    env: commandEnv,
+    stdio: "ignore"
+  });
+  return result3.status === 0;
+}
+function commandVersion(command, env = process.env) {
+  const commandEnv = executorDiscoveryEnv(env);
+  const executable = resolveExecutorCommand(command, env);
+  if (!executable) return void 0;
+  const result3 = spawnSync(executable, ["--version"], {
+    env: commandEnv,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "ignore"],
+    timeout: 3e3,
+    ...isWindowsCommandShim(executable) ? { shell: true } : {}
+  });
+  if (result3.status !== 0) return void 0;
+  return result3.stdout.trim().split(/\r?\n/)[0]?.slice(0, 120) || void 0;
+}
+function resolveExecutorCommand(command, env = process.env) {
+  const normalized = String(command ?? "").trim();
+  if (!normalized) return null;
+  if (process.platform !== "win32") return normalized;
+  if (isAbsolute(normalized) || normalized.includes("/") || normalized.includes("\\")) {
+    if (existsSync(normalized)) return normalized;
+    for (const suffix of [".cmd", ".bat", ".exe"]) {
+      const candidate = `${normalized}${suffix}`;
+      if (existsSync(candidate)) return candidate;
+    }
+    return null;
+  }
+  const commandEnv = executorDiscoveryEnv(env);
+  const result3 = spawnSync("where.exe", [normalized], {
+    env: commandEnv,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "ignore"]
+  });
+  if (result3.status !== 0) return null;
+  const candidates = String(result3.stdout ?? "").split(/\r?\n/).map((value) => value.trim()).filter(Boolean);
+  return candidates.find((candidate) => /\.(?:cmd|bat|exe)$/i.test(candidate)) ?? candidates[0] ?? null;
+}
+function isWindowsCommandShim(command) {
+  return process.platform === "win32" && /\.(?:cmd|bat)$/i.test(String(command ?? ""));
+}
+function discoverExecutors(options = {}) {
+  const knownExecutors = options.knownExecutors ?? KNOWN_EXECUTORS;
+  const env = options.env ?? process.env;
+  return knownExecutors.filter(([, command]) => commandExists(command, env)).map(([kind, command]) => {
+    const version = commandVersion(command, env);
+    return {
+      kind,
+      command,
+      ...version ? { version } : {}
+    };
+  });
+}
+function parseExecutors(value, options = {}) {
+  const configured = splitList(value);
+  if (configured.length === 0) {
+    const discovered = discoverExecutors(options);
+    return discovered.length > 0 ? discovered : [{ kind: "custom", command: "replace-with-executor-command" }];
+  }
+  return configured.map((entry) => {
+    const [kind, command, ...versionParts] = entry.split(":");
+    if (!kind?.trim() || !command?.trim()) {
+      throw new Error(`Invalid AMASTER_EXECUTORS entry: ${entry}`);
+    }
+    const version = versionParts.join(":").trim();
+    return {
+      kind: kind.trim(),
+      command: command.trim(),
+      ...version ? { version } : {}
+    };
+  });
+}
+
 // src/amaster-runtime-daemon/codex-managed-mcp-profile.mjs
 var SUPPORTED_SCHEMA_VERSION = "amaster.governed-mcp.v1";
 var SUPPORTED_SERVER_NAME = "amaster";
@@ -1327,7 +1430,7 @@ function tomlString(value) {
 }
 function within(candidate, root) {
   const rel = relative(root, candidate);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute2(rel);
 }
 function writePrivateFile(filePath, contents) {
   writeFileSync(filePath, contents, { mode: 384, flag: "wx" });
@@ -1340,7 +1443,7 @@ function makePrivateDir(dirPath) {
   chmodSync2(dirPath, 448);
 }
 function findSessionRollout(sessionsRoot, sessionId) {
-  if (!existsSync(sessionsRoot)) return null;
+  if (!existsSync2(sessionsRoot)) return null;
   const matches = [];
   const pending = [sessionsRoot];
   while (pending.length > 0) {
@@ -1379,7 +1482,7 @@ function restoreManagedCodexSessionRollout(input, codexHome, runDir, executorHom
   const executorRelativePath = relative(runDir, executorHome);
   const cacheRoot = join2(sourceRunDirs[0], executorRelativePath, "session-rollout");
   const markerPath = join2(cacheRoot, SESSION_ROLLOUT_MARKER);
-  if (!existsSync(markerPath) || lstatSync2(markerPath).isSymbolicLink() || !lstatSync2(markerPath).isFile()) {
+  if (!existsSync2(markerPath) || lstatSync2(markerPath).isSymbolicLink() || !lstatSync2(markerPath).isFile()) {
     throw new Error("codex_managed_mcp_session_rollout_missing: source rollout marker is unavailable");
   }
   const marker = JSON.parse(readFileSync(markerPath, "utf8"));
@@ -1413,7 +1516,7 @@ function collectAuthSecretStrings(value, output = []) {
 }
 function sharedCodexModelRoute(sourceHome) {
   const configPath = join2(sourceHome, "config.toml");
-  if (!existsSync(configPath)) return { root: [], table: [], mode: "default", protectedValues: [] };
+  if (!existsSync2(configPath)) return { root: [], table: [], mode: "default", protectedValues: [] };
   if (!statSync(configPath).isFile()) throw new Error("codex_managed_mcp_source_config_invalid: config.toml is not a file");
   let config;
   try {
@@ -1495,12 +1598,14 @@ function parseCodexVersion(stdout) {
   return tuple.join(".");
 }
 function runAttestation(executorCommand, env, cwd, gatewayUrl, expectedHeaders) {
-  const versionResult = spawnSync(executorCommand, ["--version"], { cwd, env, encoding: "utf8", timeout: 1e4, maxBuffer: 1024 * 1024 });
+  const resolvedExecutorCommand = resolveExecutorCommand(executorCommand, env) ?? executorCommand;
+  const shellOptions = isWindowsCommandShim(resolvedExecutorCommand) ? { shell: true } : {};
+  const versionResult = spawnSync2(resolvedExecutorCommand, ["--version"], { cwd, env, encoding: "utf8", timeout: 1e4, maxBuffer: 1024 * 1024, ...shellOptions });
   if (versionResult.error || versionResult.status !== 0) {
     throw new Error(`codex_managed_mcp_attestation_failed: --version exit=${versionResult.status ?? "spawn_error"}`);
   }
   const executorVersion = parseCodexVersion(versionResult.stdout);
-  const listResult = spawnSync(executorCommand, ["mcp", "list", "--json"], { cwd, env, encoding: "utf8", timeout: 1e4, maxBuffer: 1024 * 1024 });
+  const listResult = spawnSync2(resolvedExecutorCommand, ["mcp", "list", "--json"], { cwd, env, encoding: "utf8", timeout: 1e4, maxBuffer: 1024 * 1024, ...shellOptions });
   if (listResult.error || listResult.status !== 0) {
     throw new Error(`codex_managed_mcp_attestation_failed: mcp list exit=${listResult.status ?? "spawn_error"}`);
   }
@@ -1632,7 +1737,7 @@ function assertNoProjectAmasterOverride(cwd, runDir) {
   if (!within(cursor, boundary)) throw new Error("codex_managed_mcp_owner_mismatch: cwd is outside the managed run");
   while (within(cursor, boundary)) {
     const configPath = join2(cursor, ".codex", "config.toml");
-    if (existsSync(configPath)) {
+    if (existsSync2(configPath)) {
       const source = readFileSync(configPath, "utf8");
       const sameName = /mcp_servers\s*(?:\.\s*(?:["']amaster["']|amaster)|=\s*\{[\s\S]*?(?:["']amaster["']|amaster)\s*=)/m.test(source);
       if (sameName) throw new Error(`codex_managed_mcp_project_override_blocked: ${configPath}`);
@@ -1651,7 +1756,7 @@ function seedCodexAuth(input, codexHome) {
   }
   const sourceHome = typeof input.baseEnv?.CODEX_HOME === "string" && input.baseEnv.CODEX_HOME.trim() ? resolve2(input.baseEnv.CODEX_HOME) : join2(typeof input.baseEnv?.HOME === "string" && input.baseEnv.HOME.trim() ? resolve2(input.baseEnv.HOME) : dirname(resolve2(input.executorHome)), ".codex");
   const source = join2(sourceHome, "auth.json");
-  if (!existsSync(source) || !statSync(source).isFile()) throw new Error("codex_managed_mcp_auth_missing: isolated Codex run has no usable auth source");
+  if (!existsSync2(source) || !statSync(source).isFile()) throw new Error("codex_managed_mcp_auth_missing: isolated Codex run has no usable auth source");
   const sourceContents = readFileSync(source);
   let parsedAuth;
   try {
@@ -1694,7 +1799,7 @@ function prepareManagedCodexMcpProfile(input) {
   if (!within(executorHome, join2(runDir, "executors"))) throw new Error("codex_managed_mcp_owner_mismatch: executorHome is outside the managed run");
   assertNoProjectAmasterOverride(nonEmpty(input.cwd, "cwd"), runDir);
   const profileRoot = join2(executorHome, "managed-mcp");
-  if (existsSync(profileRoot)) throw new Error(`codex_managed_mcp_profile_exists: ${profileRoot}`);
+  if (existsSync2(profileRoot)) throw new Error(`codex_managed_mcp_profile_exists: ${profileRoot}`);
   const home = join2(profileRoot, "home");
   const codexHome = join2(profileRoot, "codex-home");
   const tmp = join2(profileRoot, "tmp");
@@ -1788,11 +1893,11 @@ function preserveManagedCodexSessionRollout(profile, input) {
   const sessionsRoot = join2(resolve2(nonEmpty(profile?.env?.CODEX_HOME, "profile.env.CODEX_HOME")), "sessions");
   const sourceRollout = findSessionRollout(sessionsRoot, sessionId);
   const rolloutRelativePath = relative(sessionsRoot, sourceRollout);
-  if (!rolloutRelativePath || rolloutRelativePath.startsWith("..") || isAbsolute(rolloutRelativePath)) {
+  if (!rolloutRelativePath || rolloutRelativePath.startsWith("..") || isAbsolute2(rolloutRelativePath)) {
     throw new Error("codex_managed_mcp_session_rollout_unsafe: rollout escaped the managed Codex home");
   }
   const cacheRoot = join2(dirname(resolve2(profile.profileRoot)), "session-rollout");
-  if (existsSync(cacheRoot)) rmSync(cacheRoot, { recursive: true, force: false });
+  if (existsSync2(cacheRoot)) rmSync(cacheRoot, { recursive: true, force: false });
   makePrivateDir(cacheRoot);
   const targetRollout = join2(cacheRoot, rolloutRelativePath);
   makePrivateDir(dirname(targetRollout));
@@ -1817,13 +1922,13 @@ function cleanupRestoredManagedCodexSessionRollout(profile) {
   const restored = profile?.restoredNativeSession;
   if (!restored?.cacheRoot) return { status: "not_restored" };
   const cacheRoot = resolve2(restored.cacheRoot);
-  if (!existsSync(cacheRoot)) return { status: "already_removed" };
+  if (!existsSync2(cacheRoot)) return { status: "already_removed" };
   const cacheStat = lstatSync2(cacheRoot);
   if (!cacheStat.isDirectory() || cacheStat.isSymbolicLink()) {
     throw new Error("codex_managed_mcp_session_rollout_cleanup_unsafe: cache root is not a private directory");
   }
   const markerPath = join2(cacheRoot, SESSION_ROLLOUT_MARKER);
-  if (!existsSync(markerPath) || lstatSync2(markerPath).isSymbolicLink() || !lstatSync2(markerPath).isFile()) {
+  if (!existsSync2(markerPath) || lstatSync2(markerPath).isSymbolicLink() || !lstatSync2(markerPath).isFile()) {
     throw new Error("codex_managed_mcp_session_rollout_cleanup_unsafe: ownership marker is unavailable");
   }
   const marker = JSON.parse(readFileSync(markerPath, "utf8"));
@@ -1831,18 +1936,18 @@ function cleanupRestoredManagedCodexSessionRollout(profile) {
     throw new Error("codex_managed_mcp_session_rollout_cleanup_unsafe: ownership marker does not match restored authority");
   }
   rmSync(cacheRoot, { recursive: true, force: false });
-  if (existsSync(cacheRoot)) throw new Error("codex_managed_mcp_session_rollout_cleanup_failed: cache root still exists");
+  if (existsSync2(cacheRoot)) throw new Error("codex_managed_mcp_session_rollout_cleanup_failed: cache root still exists");
   return { status: "removed" };
 }
 function cleanupManagedCodexMcpProfile(profile, owner) {
   const profileRoot = resolve2(nonEmpty(profile?.profileRoot, "profileRoot"));
-  if (!existsSync(profileRoot)) return { status: "already_removed", profileRoot };
+  if (!existsSync2(profileRoot)) return { status: "already_removed", profileRoot };
   const rootStat = lstatSync2(profileRoot);
   if (!rootStat.isDirectory() || rootStat.isSymbolicLink()) {
     throw new Error("codex_managed_mcp_cleanup_owner_mismatch: profile root is not an owned directory");
   }
   const markerPath = join2(profileRoot, PROFILE_MARKER);
-  const markerStat = existsSync(markerPath) ? lstatSync2(markerPath) : null;
+  const markerStat = existsSync2(markerPath) ? lstatSync2(markerPath) : null;
   if (!markerStat?.isFile() || markerStat.isSymbolicLink()) {
     throw new Error("codex_managed_mcp_cleanup_owner_mismatch: ownership marker is missing or unsafe");
   }
@@ -1856,12 +1961,12 @@ function cleanupManagedCodexMcpProfile(profile, owner) {
     throw new Error("codex_managed_mcp_cleanup_owner_mismatch: ownership marker does not match command/run");
   }
   rmSync(profileRoot, { recursive: true, force: false });
-  if (existsSync(profileRoot)) throw new Error("codex_managed_mcp_cleanup_failed: profile root still exists");
+  if (existsSync2(profileRoot)) throw new Error("codex_managed_mcp_cleanup_failed: profile root still exists");
   return { status: "removed", profileRoot };
 }
 function reconcileManagedCodexMcpProfiles(rootPath, options = {}) {
   const root = resolve2(rootPath);
-  if (!existsSync(root)) return { scanned: 0, removed: 0, removedProfiles: 0, removedRollouts: 0, failed: 0, failures: [] };
+  if (!existsSync2(root)) return { scanned: 0, removed: 0, removedProfiles: 0, removedRollouts: 0, failed: 0, failures: [] };
   const canonicalRoot = realpathSync(root);
   const profileMarkers = [];
   const rolloutMarkers = [];
@@ -1887,7 +1992,7 @@ function reconcileManagedCodexMcpProfiles(rootPath, options = {}) {
     try {
       const marker = JSON.parse(readFileSync(markerPath, "utf8"));
       const markerProfileRoot = typeof marker?.profileRoot === "string" ? resolve2(marker.profileRoot) : null;
-      if (!markerProfileRoot || !existsSync(markerProfileRoot) || !within(realpathSync(profileRoot), canonicalRoot) || realpathSync(markerProfileRoot) !== realpathSync(profileRoot)) {
+      if (!markerProfileRoot || !existsSync2(markerProfileRoot) || !within(realpathSync(profileRoot), canonicalRoot) || realpathSync(markerProfileRoot) !== realpathSync(profileRoot)) {
         throw new Error("ownership marker root mismatch");
       }
       if (protectedCommandIds.has(marker?.commandId)) {
@@ -1909,14 +2014,14 @@ function reconcileManagedCodexMcpProfiles(rootPath, options = {}) {
       const cacheStat = lstatSync2(cacheRoot);
       const marker = JSON.parse(readFileSync(markerPath, "utf8"));
       const markerCacheRoot = typeof marker?.cacheRoot === "string" ? resolve2(marker.cacheRoot) : null;
-      if (!within(realpathSync(cacheRoot), canonicalRoot) || basename(cacheRoot) !== "session-rollout" || markerStat.isSymbolicLink() || !markerStat.isFile() || cacheStat.isSymbolicLink() || !cacheStat.isDirectory() || marker?.version !== 1 || typeof marker?.companyId !== "string" || typeof marker?.agentId !== "string" || typeof marker?.sourceRunId !== "string" || typeof marker?.sourceCommandId !== "string" || typeof marker?.sessionId !== "string" || markerCacheRoot != null && (!existsSync(markerCacheRoot) || realpathSync(markerCacheRoot) !== realpathSync(cacheRoot))) {
+      if (!within(realpathSync(cacheRoot), canonicalRoot) || basename(cacheRoot) !== "session-rollout" || markerStat.isSymbolicLink() || !markerStat.isFile() || cacheStat.isSymbolicLink() || !cacheStat.isDirectory() || marker?.version !== 1 || typeof marker?.companyId !== "string" || typeof marker?.agentId !== "string" || typeof marker?.sourceRunId !== "string" || typeof marker?.sourceCommandId !== "string" || typeof marker?.sessionId !== "string" || markerCacheRoot != null && (!existsSync2(markerCacheRoot) || realpathSync(markerCacheRoot) !== realpathSync(cacheRoot))) {
         throw new Error("session rollout ownership marker mismatch");
       }
       const preservedAtMs = typeof marker.preservedAt === "string" ? Date.parse(marker.preservedAt) : Number.NaN;
       const markerAgeMs = nowMs - (Number.isFinite(preservedAtMs) ? preservedAtMs : markerStat.mtimeMs);
       if (markerAgeMs < rolloutTtlMs) continue;
       rmSync(cacheRoot, { recursive: true, force: false });
-      if (existsSync(cacheRoot)) throw new Error("session rollout cache still exists");
+      if (existsSync2(cacheRoot)) throw new Error("session rollout cache still exists");
       removedRollouts += 1;
     } catch (error) {
       failures.push({ profileRoot: cacheRoot, error: error instanceof Error ? error.message : String(error) });
@@ -1939,7 +2044,7 @@ import {
   chmodSync as chmodSync4,
   chownSync as chownSync2,
   copyFileSync,
-  existsSync as existsSync3,
+  existsSync as existsSync4,
   lstatSync as lstatSync3,
   mkdirSync as mkdirSync3,
   readFileSync as readFileSync4,
@@ -1953,11 +2058,11 @@ import {
   writeFileSync as writeFileSync4
 } from "node:fs";
 import { arch as arch2, platform as platform2 } from "node:os";
-import { basename as basename2, delimiter, dirname as dirname4, isAbsolute as isAbsolute2, join as join5, relative as relative2, resolve as resolve3, sep as sep2 } from "node:path";
-import { spawnSync as spawnSync2 } from "node:child_process";
+import { basename as basename2, delimiter as delimiter2, dirname as dirname4, isAbsolute as isAbsolute3, join as join5, relative as relative2, resolve as resolve3, sep as sep2 } from "node:path";
+import { spawnSync as spawnSync3 } from "node:child_process";
 
 // src/amaster-runtime-daemon/pi-provider-config.mjs
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join3 } from "node:path";
 var AMASTER_API_KEY_ENV_REFERENCE = "${AMASTER_API_KEY}";
 var AMASTER_BILLING_TURN_HEADER_ENV_REFERENCE = "${AMASTER_BILLING_TURN_ID}";
@@ -2073,7 +2178,7 @@ function syncAmasterProviderSettings(agentDir, executorEnv) {
   const apiKey = readString(executorEnv.AMASTER_API_KEY);
   if (!apiKey) return false;
   const settingsPath = join3(agentDir, "settings.json");
-  if (!existsSync2(settingsPath)) return false;
+  if (!existsSync3(settingsPath)) return false;
   const settings = readJsonFile(settingsPath);
   const baseUrl = readString(executorEnv.AMASTER_PROVIDER_BASE_URL);
   const imageGenBaseUrl = imageGenBaseUrlFromProviderBaseUrl(baseUrl);
@@ -3225,7 +3330,7 @@ function applyManagedPiRunExitClosureArgs(args, profile) {
   return closureArgs;
 }
 function createManagedPiMcpProfileApi(options = {}) {
-  const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync2;
+  const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync3;
   const chownSyncImpl = typeof options.chownSync === "function" ? options.chownSync : chownSync2;
   const ownershipStatSyncImpl = typeof options.ownershipStatSync === "function" ? options.ownershipStatSync : statSync2;
   const nowImpl = typeof options.now === "function" ? options.now : Date.now;
@@ -3389,7 +3494,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     return value && typeof value === "object" && !Array.isArray(value) ? value : {};
   }
   function readJsonObjectFile(filePath) {
-    if (!existsSync3(filePath)) return {};
+    if (!existsSync4(filePath)) return {};
     try {
       const value = JSON.parse(readFileSync4(filePath, "utf8"));
       if (!value || typeof value !== "object" || Array.isArray(value)) {
@@ -3406,7 +3511,7 @@ function createManagedPiMcpProfileApi(options = {}) {
   }
   function within2(candidate, root) {
     const rel = relative2(root, candidate);
-    return rel === "" || !rel.startsWith("..") && !isAbsolute2(rel);
+    return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
   }
   function writePrivateFile2(filePath, contents) {
     writeFileSync4(filePath, contents, { mode: 384, flag: "wx" });
@@ -3415,7 +3520,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (mode !== 384) throw new Error(`pi_managed_mcp_permissions_failed: ${filePath} mode=${mode.toString(8)}`);
   }
   function copyPrivateFile(source, target) {
-    if (!existsSync3(source)) return false;
+    if (!existsSync4(source)) return false;
     const sourceStat = lstatSync3(source);
     if (!sourceStat.isFile() || sourceStat.isSymbolicLink()) {
       throw new Error(`pi_managed_mcp_source_config_unsafe: ${source}`);
@@ -3425,7 +3530,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     return true;
   }
   function findPiSessionRollout(sessionsRoot, sessionId) {
-    if (!existsSync3(sessionsRoot)) return null;
+    if (!existsSync4(sessionsRoot)) return null;
     const matches = [];
     const pending = [sessionsRoot];
     while (pending.length > 0) {
@@ -3463,7 +3568,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     }
     const cacheRoot = join5(sourceRunDirs[0], relative2(runDir, executorHome), "session-rollout");
     const markerPath = join5(cacheRoot, SESSION_ROLLOUT_MARKER2);
-    if (!existsSync3(markerPath) || lstatSync3(markerPath).isSymbolicLink() || !lstatSync3(markerPath).isFile()) {
+    if (!existsSync4(markerPath) || lstatSync3(markerPath).isSymbolicLink() || !lstatSync3(markerPath).isFile()) {
       throw new Error("pi_managed_mcp_session_rollout_missing: source rollout marker is unavailable");
     }
     const marker = JSON.parse(readFileSync4(markerPath, "utf8"));
@@ -3589,7 +3694,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     for (let depth = 0; depth < 4; depth += 1) {
       const packagePath = join5(cursor, "package.json");
       const loaderPath = join5(cursor, "dist", "core", "extensions", "loader.js");
-      if (existsSync3(packagePath) && existsSync3(loaderPath)) {
+      if (existsSync4(packagePath) && existsSync4(loaderPath)) {
         const packageJson = JSON.parse(readFileSync4(packagePath, "utf8"));
         return sha2563(stablePiJson({
           name: packageJson.name,
@@ -3636,7 +3741,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     const sourceCachePath = join5(entryPath, "jiti");
     const runCachePath = join5(tmpPath, "jiti");
     let status = "miss";
-    if (existsSync3(entryPath)) {
+    if (existsSync4(entryPath)) {
       try {
         const entryStat = lstatSync3(entryPath);
         const markerStat = lstatSync3(markerPath);
@@ -3658,12 +3763,12 @@ function createManagedPiMcpProfileApi(options = {}) {
   }
   function publishEffectiveToolsBootstrapCache(cache) {
     if (cache.status === "hit") return "hit";
-    if (!existsSync3(cache.runCachePath)) return `${cache.status}_unavailable`;
+    if (!existsSync4(cache.runCachePath)) return `${cache.status}_unavailable`;
     const runCacheStat = lstatSync3(cache.runCachePath);
     if (!runCacheStat.isDirectory() || runCacheStat.isSymbolicLink()) {
       throw new Error("pi_managed_mcp_bootstrap_cache_unsafe: run cache");
     }
-    if (existsSync3(cache.entryPath)) return "hit_raced";
+    if (existsSync4(cache.entryPath)) return "hit_raced";
     const stagingPath = `${cache.entryPath}.tmp-${process.pid}-${currentTimeMs()}`;
     try {
       mkdirSync3(stagingPath, { mode: 448 });
@@ -3682,16 +3787,16 @@ function createManagedPiMcpProfileApi(options = {}) {
         if (error?.code !== "EEXIST" && error?.code !== "ENOTEMPTY") throw error;
       }
     } finally {
-      if (existsSync3(stagingPath)) {
+      if (existsSync4(stagingPath)) {
         makeTrustedTreeWritable(stagingPath);
         rmSync3(stagingPath, { recursive: true, force: true });
       }
     }
-    return existsSync3(cache.entryPath) ? `${cache.status}_published` : `${cache.status}_unavailable`;
+    return existsSync4(cache.entryPath) ? `${cache.status}_published` : `${cache.status}_unavailable`;
   }
   function writeEffectiveToolsProbePhase(phasePath, phase, attempt) {
     let history = [];
-    if (existsSync3(phasePath)) {
+    if (existsSync4(phasePath)) {
       try {
         const parsed = JSON.parse(readFileSync4(phasePath, "utf8"));
         history = Array.isArray(parsed.history) ? parsed.history.slice(0, 16) : [];
@@ -3703,7 +3808,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     history.push({ phase, attempt, atMs });
     const contents = `${JSON.stringify({ phase, attempt, atMs, history })}
 `;
-    if (existsSync3(phasePath)) {
+    if (existsSync4(phasePath)) {
       const phaseStat = lstatSync3(phasePath);
       if (!phaseStat.isFile() || phaseStat.isSymbolicLink()) {
         throw new Error("pi_managed_mcp_probe_phase_unsafe");
@@ -3803,7 +3908,17 @@ function createManagedPiMcpProfileApi(options = {}) {
     return { setHash, tools: normalized.sort((left, right) => left.name.localeCompare(right.name)), kind: catalogKind };
   }
   function resolvePiExecutablePath(executorCommand, env) {
-    if (isAbsolute2(executorCommand) || executorCommand.includes("/") || executorCommand.includes("\\")) {
+    if (platform2() === "win32") {
+      const resolved = resolveExecutorCommand(executorCommand, env);
+      if (!resolved) throw new Error("pi_managed_mcp_attestation_failed: --version error=ENOENT");
+      try {
+        return realpathSync2(resolved);
+      } catch (error) {
+        const errorCode = typeof error?.code === "string" ? error.code : "UNKNOWN";
+        throw new Error(`pi_managed_mcp_attestation_failed: --version error=${errorCode}`);
+      }
+    }
+    if (isAbsolute3(executorCommand) || executorCommand.includes("/") || executorCommand.includes("\\")) {
       try {
         return realpathSync2(executorCommand);
       } catch (error) {
@@ -3811,7 +3926,7 @@ function createManagedPiMcpProfileApi(options = {}) {
         throw new Error(`pi_managed_mcp_attestation_failed: --version error=${errorCode}`);
       }
     }
-    const pathEntries = String(env?.PATH ?? "").split(delimiter).filter(Boolean);
+    const pathEntries = String(env?.PATH ?? "").split(delimiter2).filter(Boolean);
     for (const entry of pathEntries) {
       try {
         const candidate = realpathSync2(join5(entry, executorCommand));
@@ -3965,7 +4080,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (sourceAcquisition?.profile?.transport?.browserMode === "existing") {
       const userDataDir = sourceAcquisition.userDataDir;
       const leaseId = sourceAcquisition.profile?.access?.browserLeaseId;
-      if (!isAbsolute2(userDataDir ?? "") || typeof leaseId !== "string" || !leaseId) {
+      if (!isAbsolute3(userDataDir ?? "") || typeof leaseId !== "string" || !leaseId) {
         throw new Error("source_acquisition_browser_profile_invalid");
       }
       return {
@@ -3976,7 +4091,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     }
     if (sourceAcquisition?.profile?.transport?.browserMode !== "isolated") return env;
     const executable = typeof baseEnv?.AMASTER_BROWSER_EXECUTABLE_PATH === "string" ? baseEnv.AMASTER_BROWSER_EXECUTABLE_PATH.trim() : "";
-    if (!executable || !isAbsolute2(executable)) {
+    if (!executable || !isAbsolute3(executable)) {
       throw new Error("source_acquisition_browser_executable_unavailable");
     }
     let stat;
@@ -3994,7 +4109,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     };
   }
   function projectMcpConfigHasContent(filePath) {
-    if (!existsSync3(filePath)) return false;
+    if (!existsSync4(filePath)) return false;
     let parsed;
     try {
       parsed = JSON.parse(readFileSync4(filePath, "utf8"));
@@ -4052,7 +4167,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     return isWorkspaceMcpConfigPath(target) && within2(target, managedRunRootForProfile(profileRoot));
   }
   function writeOwnedFileAtomic(filePath, contents) {
-    if (existsSync3(filePath)) {
+    if (existsSync4(filePath)) {
       const stat = lstatSync3(filePath);
       if (!stat.isFile() || stat.isSymbolicLink()) {
         throw new Error(`pi_managed_mcp_workspace_config_unsafe: ${filePath}`);
@@ -4074,7 +4189,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     }
     const settingsPath = join5(home, "settings.json");
     let settings = {};
-    if (existsSync3(settingsPath)) {
+    if (existsSync4(settingsPath)) {
       try {
         settings = record6(JSON.parse(readFileSync4(settingsPath, "utf8")));
       } catch {
@@ -4092,7 +4207,7 @@ function createManagedPiMcpProfileApi(options = {}) {
   function readSkillProfile(piHome, skillProfile) {
     const agentsRoot = resolve3(piHome, "agents");
     const agentFile = resolve3(agentsRoot, `${skillProfile}.md`);
-    if (!SKILL_PROFILE_NAME.test(skillProfile) || !within2(agentFile, agentsRoot) || !existsSync3(agentFile)) {
+    if (!SKILL_PROFILE_NAME.test(skillProfile) || !within2(agentFile, agentsRoot) || !existsSync4(agentFile)) {
       throw new Error(`pi_managed_mcp_skill_profile_unknown:${skillProfile}`);
     }
     const declared = readFileSync4(agentFile, "utf8").match(/^---\r?\n([\s\S]*?)\r?\n---/)?.[1].match(/^skills:\s*(.+)$/m)?.[1].split(",").map((entry) => entry.trim()).filter(Boolean) ?? [];
@@ -4100,12 +4215,12 @@ function createManagedPiMcpProfileApi(options = {}) {
     const profile = [];
     for (const name of declared) {
       let source = join5(bundlesRoot, skillProfile, "skills", name);
-      if (!existsSync3(join5(source, "SKILL.md"))) {
+      if (!existsSync4(join5(source, "SKILL.md"))) {
         const candidates = [];
         for (const category of readdirSync3(bundlesRoot).sort()) {
           if (category === skillProfile) continue;
           const candidate = join5(bundlesRoot, category, "skills", name);
-          if (existsSync3(join5(candidate, "SKILL.md"))) candidates.push(candidate);
+          if (existsSync4(join5(candidate, "SKILL.md"))) candidates.push(candidate);
         }
         if (candidates.length > 1) {
           throw new Error(`pi_managed_mcp_skill_profile_ambiguous:${skillProfile}:${name}`);
@@ -4121,10 +4236,10 @@ function createManagedPiMcpProfileApi(options = {}) {
   }
   function readCommonRoleSkills(piHome) {
     const skillsRoot = resolve3(piHome, "bundles", "common", "skills");
-    if (!existsSync3(skillsRoot)) return [];
+    if (!existsSync4(skillsRoot)) return [];
     return readdirSync3(skillsRoot).sort().flatMap((name) => {
       const source = join5(skillsRoot, name);
-      return existsSync3(join5(source, "SKILL.md")) ? [{ name, source }] : [];
+      return existsSync4(join5(source, "SKILL.md")) ? [{ name, source }] : [];
     });
   }
   function resolveManagedRoleSkills(piHome, skillProfiles) {
@@ -4191,7 +4306,7 @@ function createManagedPiMcpProfileApi(options = {}) {
       }
     }
     const authSource = join5(source, "auth.json");
-    if (existsSync3(authSource)) {
+    if (existsSync4(authSource)) {
       try {
         collectAuthSecretStrings2(JSON.parse(readFileSync4(authSource, "utf8")), protectedValues);
       } catch {
@@ -4212,6 +4327,7 @@ function createManagedPiMcpProfileApi(options = {}) {
         timeout: PI_VERSION_ATTESTATION_TIMEOUT_MS,
         killSignal: "SIGKILL",
         maxBuffer: 1024 * 1024,
+        ...isWindowsCommandShim(resolvedExecutorCommand) ? { shell: true } : {},
         ...spawnIdentity ?? {}
       });
       if (result3.error?.code === "ETIMEDOUT" && attempt < PI_ATTESTATION_MAX_ATTEMPTS) continue;
@@ -4276,7 +4392,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
   function inspectEffectiveToolsProbeReceipt(receiptPath, phasePath) {
     let phase = "missing";
     let history = [];
-    if (existsSync3(phasePath)) {
+    if (existsSync4(phasePath)) {
       try {
         const phaseState = JSON.parse(readFileSync4(phasePath, "utf8"));
         phase = typeof phaseState.phase === "string" ? phaseState.phase : "present";
@@ -4285,7 +4401,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         phase = "invalid";
       }
     }
-    if (!existsSync3(receiptPath)) return { phase, history, receipt: null };
+    if (!existsSync4(receiptPath)) return { phase, history, receipt: null };
     try {
       const receipt = JSON.parse(readFileSync4(receiptPath, "utf8"));
       const receiptPhase = receipt?.status === "attested" || receipt?.status === "rejected" ? receipt.status : phase === "missing" ? "present" : phase;
@@ -4330,7 +4446,8 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       const timeout = attempts[index];
       completedAttempts = attempt;
       writeEffectiveToolsProbePhase(input.phasePath, "spawned", attempt);
-      result3 = spawnSyncImpl(executorCommand, [
+      const resolvedExecutorCommand = resolveExecutorCommand(executorCommand, env) ?? executorCommand;
+      result3 = spawnSyncImpl(resolvedExecutorCommand, [
         "--no-session",
         "--no-approve",
         "--no-skills",
@@ -4352,6 +4469,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         timeout,
         killSignal: "SIGKILL",
         maxBuffer: 1024 * 1024,
+        ...isWindowsCommandShim(resolvedExecutorCommand) ? { shell: true } : {},
         ...spawnIdentity ?? {}
       });
       if (result3.error?.code === "ETIMEDOUT" && attempt < attempts.length) continue;
@@ -4446,7 +4564,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     if (!within2(executorHome, join5(runDir, "executors"))) throw new Error("pi_managed_mcp_owner_mismatch: executorHome is outside the managed run");
     assertWorkspaceMcpOverrideClear(cwd, runDir);
     const profileRoot = join5(executorHome, "managed-mcp");
-    if (existsSync3(profileRoot)) throw new Error(`pi_managed_mcp_profile_exists: ${profileRoot}`);
+    if (existsSync4(profileRoot)) throw new Error(`pi_managed_mcp_profile_exists: ${profileRoot}`);
     const home = join5(profileRoot, "home");
     const piAgentHome = join5(profileRoot, "pi-agent-home");
     const sessionsRoot = join5(profileRoot, "sessions");
@@ -4511,7 +4629,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
           "pi-mcp-adapter",
           "index.ts"
         );
-        if (!existsSync3(adapterExtensionPath)) {
+        if (!existsSync4(adapterExtensionPath)) {
           throw new Error("pi_managed_mcp_adapter_extension_missing");
         }
         const adapterExtensionStat = lstatSync3(adapterExtensionPath);
@@ -4823,7 +4941,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       if (!within2(path, profileRoot)) throw new Error("pi_run_exit_closure_baseline_path_mismatch");
     }
     for (const path of [cachePath, manifestPath, configPath, receiptPath]) {
-      if (existsSync3(path)) {
+      if (existsSync4(path)) {
         const stat = lstatSync3(path);
         if (!stat.isFile() || stat.isSymbolicLink()) {
           throw new Error(`pi_run_exit_closure_baseline_unsafe: ${path}`);
@@ -4840,7 +4958,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       throw new Error("pi_run_exit_closure_baseline_cache_digest_mismatch");
     }
     const baselineCacheOwnership = record6(baseline.cacheOwnership);
-    const cacheOwnership = Number.isSafeInteger(baselineCacheOwnership.uid) && baselineCacheOwnership.uid >= 0 && Number.isSafeInteger(baselineCacheOwnership.gid) && baselineCacheOwnership.gid >= 0 ? { uid: baselineCacheOwnership.uid, gid: baselineCacheOwnership.gid } : existsSync3(cachePath) ? ownershipStatSyncImpl(cachePath) : null;
+    const cacheOwnership = Number.isSafeInteger(baselineCacheOwnership.uid) && baselineCacheOwnership.uid >= 0 && Number.isSafeInteger(baselineCacheOwnership.gid) && baselineCacheOwnership.gid >= 0 ? { uid: baselineCacheOwnership.uid, gid: baselineCacheOwnership.gid } : existsSync4(cachePath) ? ownershipStatSyncImpl(cachePath) : null;
     if (!cacheOwnership) {
       throw new Error("pi_run_exit_closure_baseline_cache_owner_missing");
     }
@@ -4894,7 +5012,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       ownership: baselineCacheOwnership,
       label: "cache"
     }];
-    if (existsSync3(receiptPath)) rmSync3(receiptPath);
+    if (existsSync4(receiptPath)) rmSync3(receiptPath);
     for (const entry of phaseContents) {
       if (sha2563(entry.bytes) !== entry.expectedSha256) {
         throw new Error(`pi_run_exit_closure_${entry.label}_digest_mismatch`);
@@ -4929,7 +5047,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     const profileRoot = resolve3(nonEmpty2(baseline.profileRoot, "runExitClosureBaseline.profileRoot"));
     const receiptPath = resolve3(nonEmpty2(baseline.receiptPath, "runExitClosureBaseline.receiptPath"));
     if (!within2(receiptPath, profileRoot)) throw new Error("pi_run_exit_closure_baseline_path_mismatch");
-    if (!existsSync3(receiptPath)) return { status: "missing" };
+    if (!existsSync4(receiptPath)) return { status: "missing" };
     const stat = lstatSync3(receiptPath);
     if (!stat.isFile() || stat.isSymbolicLink()) {
       throw new Error(`pi_run_exit_closure_baseline_unsafe: ${receiptPath}`);
@@ -4959,7 +5077,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     const executorHome = resolve3(nonEmpty2(input.executorHome, "executorHome"));
     if (!within2(executorHome, join5(runDir, "executors"))) throw new Error("pi_delegated_mcp_owner_mismatch: executorHome is outside the managed run");
     const profileRoot = join5(executorHome, "delegated-mcp");
-    if (existsSync3(profileRoot)) throw new Error(`pi_delegated_mcp_profile_exists: ${profileRoot}`);
+    if (existsSync4(profileRoot)) throw new Error(`pi_delegated_mcp_profile_exists: ${profileRoot}`);
     const piCodingAgentDir = join5(profileRoot, "pi-coding-agent-dir");
     const sessionsRoot = join5(profileRoot, "sessions");
     const tmp = join5(profileRoot, "tmp");
@@ -5078,11 +5196,11 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     const sessionsRoot = resolve3(nonEmpty2(profile?.env?.["AMASTER-CLI_CODING_AGENT_SESSION_DIR"], "profile session dir"));
     const sourceRollout = findPiSessionRollout(sessionsRoot, sessionId);
     const rolloutRelativePath = relative2(sessionsRoot, sourceRollout);
-    if (!rolloutRelativePath || rolloutRelativePath.startsWith("..") || isAbsolute2(rolloutRelativePath)) {
+    if (!rolloutRelativePath || rolloutRelativePath.startsWith("..") || isAbsolute3(rolloutRelativePath)) {
       throw new Error("pi_managed_mcp_session_rollout_unsafe: rollout escaped the managed Pi home");
     }
     const cacheRoot = join5(dirname4(resolve3(profile.profileRoot)), "session-rollout");
-    if (existsSync3(cacheRoot)) rmSync3(cacheRoot, { recursive: true, force: false });
+    if (existsSync4(cacheRoot)) rmSync3(cacheRoot, { recursive: true, force: false });
     mkdirSync3(cacheRoot, { recursive: true, mode: 448 });
     const targetRollout = join5(cacheRoot, rolloutRelativePath);
     mkdirSync3(dirname4(targetRollout), { recursive: true, mode: 448 });
@@ -5122,7 +5240,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
   }
   function cleanupManagedPiMcpProfile2(profile, owner) {
     const profileRoot = resolve3(nonEmpty2(profile?.profileRoot, "profileRoot"));
-    if (!existsSync3(profileRoot)) {
+    if (!existsSync4(profileRoot)) {
       if (typeof profile?.workspaceMcpConfigPath === "string") {
         removeWorkspaceMcpConfig(profile.workspaceMcpConfigPath, profileRoot);
       }
@@ -5133,7 +5251,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       throw new Error("pi_managed_mcp_cleanup_owner_mismatch: profile root is not an owned directory");
     }
     const markerPath = join5(profileRoot, PROFILE_MARKER2);
-    const markerStat = existsSync3(markerPath) ? lstatSync3(markerPath) : null;
+    const markerStat = existsSync4(markerPath) ? lstatSync3(markerPath) : null;
     if (!markerStat?.isFile() || markerStat.isSymbolicLink()) {
       throw new Error("pi_managed_mcp_cleanup_owner_mismatch: ownership marker is missing or unsafe");
     }
@@ -5147,7 +5265,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       throw new Error("pi_managed_mcp_cleanup_owner_mismatch: ownership marker does not match command/run");
     }
     rmSync3(profileRoot, { recursive: true, force: false });
-    if (existsSync3(profileRoot)) throw new Error("pi_managed_mcp_cleanup_failed: profile root still exists");
+    if (existsSync4(profileRoot)) throw new Error("pi_managed_mcp_cleanup_failed: profile root still exists");
     if (typeof profile?.workspaceMcpConfigPath === "string") {
       removeWorkspaceMcpConfig(profile.workspaceMcpConfigPath, profileRoot);
     }
@@ -5155,13 +5273,13 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
   }
   function cleanupDelegatedPiMcpProfile2(profile, owner) {
     const profileRoot = resolve3(nonEmpty2(profile?.profileRoot, "profileRoot"));
-    if (!existsSync3(profileRoot)) return { status: "already_removed", profileRoot };
+    if (!existsSync4(profileRoot)) return { status: "already_removed", profileRoot };
     const rootStat = lstatSync3(profileRoot);
     if (!rootStat.isDirectory() || rootStat.isSymbolicLink()) {
       throw new Error("pi_delegated_mcp_cleanup_owner_mismatch: profile root is not an owned directory");
     }
     const markerPath = join5(profileRoot, DELEGATED_PROFILE_MARKER);
-    const markerStat = existsSync3(markerPath) ? lstatSync3(markerPath) : null;
+    const markerStat = existsSync4(markerPath) ? lstatSync3(markerPath) : null;
     if (!markerStat?.isFile() || markerStat.isSymbolicLink()) {
       throw new Error("pi_delegated_mcp_cleanup_owner_mismatch: ownership marker is missing or unsafe");
     }
@@ -5175,12 +5293,12 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       throw new Error("pi_delegated_mcp_cleanup_owner_mismatch: ownership marker does not match command/run");
     }
     rmSync3(profileRoot, { recursive: true, force: false });
-    if (existsSync3(profileRoot)) throw new Error("pi_delegated_mcp_cleanup_failed: profile root still exists");
+    if (existsSync4(profileRoot)) throw new Error("pi_delegated_mcp_cleanup_failed: profile root still exists");
     return { status: "removed", profileRoot };
   }
   function reconcileManagedPiMcpProfiles2(rootPath, options2 = {}) {
     const root = resolve3(rootPath);
-    if (!existsSync3(root)) return { scanned: 0, removed: 0, removedProfiles: 0, removedRollouts: 0, failed: 0, failures: [] };
+    if (!existsSync4(root)) return { scanned: 0, removed: 0, removedProfiles: 0, removedRollouts: 0, failed: 0, failures: [] };
     const canonicalRoot = realpathSync2(root);
     const profileMarkers = [];
     const rolloutMarkers = [];
@@ -5206,7 +5324,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       try {
         const marker = JSON.parse(readFileSync4(markerPath, "utf8"));
         const markerProfileRoot = typeof marker?.profileRoot === "string" ? resolve3(marker.profileRoot) : null;
-        if (!markerProfileRoot || !existsSync3(markerProfileRoot) || !within2(realpathSync2(profileRoot), canonicalRoot) || realpathSync2(markerProfileRoot) !== realpathSync2(profileRoot)) throw new Error("ownership marker root mismatch");
+        if (!markerProfileRoot || !existsSync4(markerProfileRoot) || !within2(realpathSync2(profileRoot), canonicalRoot) || realpathSync2(markerProfileRoot) !== realpathSync2(profileRoot)) throw new Error("ownership marker root mismatch");
         if (protectedCommandIds.has(marker?.commandId)) {
           preservedProfiles += 1;
           continue;
@@ -5233,12 +5351,12 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         const cacheStat = lstatSync3(cacheRoot);
         const marker = JSON.parse(readFileSync4(markerPath, "utf8"));
         const markerCacheRoot = typeof marker?.cacheRoot === "string" ? resolve3(marker.cacheRoot) : null;
-        if (!within2(realpathSync2(cacheRoot), canonicalRoot) || basename2(cacheRoot) !== "session-rollout" || markerStat.isSymbolicLink() || !markerStat.isFile() || cacheStat.isSymbolicLink() || !cacheStat.isDirectory() || marker?.version !== 1 || typeof marker?.companyId !== "string" || typeof marker?.agentId !== "string" || typeof marker?.sourceRunId !== "string" || typeof marker?.sourceCommandId !== "string" || typeof marker?.sessionId !== "string" || !markerCacheRoot || !existsSync3(markerCacheRoot) || realpathSync2(markerCacheRoot) !== realpathSync2(cacheRoot)) throw new Error("session rollout ownership marker mismatch");
+        if (!within2(realpathSync2(cacheRoot), canonicalRoot) || basename2(cacheRoot) !== "session-rollout" || markerStat.isSymbolicLink() || !markerStat.isFile() || cacheStat.isSymbolicLink() || !cacheStat.isDirectory() || marker?.version !== 1 || typeof marker?.companyId !== "string" || typeof marker?.agentId !== "string" || typeof marker?.sourceRunId !== "string" || typeof marker?.sourceCommandId !== "string" || typeof marker?.sessionId !== "string" || !markerCacheRoot || !existsSync4(markerCacheRoot) || realpathSync2(markerCacheRoot) !== realpathSync2(cacheRoot)) throw new Error("session rollout ownership marker mismatch");
         const preservedAtMs = typeof marker.preservedAt === "string" ? Date.parse(marker.preservedAt) : Number.NaN;
         const markerAgeMs = nowMs - (Number.isFinite(preservedAtMs) ? preservedAtMs : markerStat.mtimeMs);
         if (markerAgeMs < rolloutTtlMs) continue;
         rmSync3(cacheRoot, { recursive: true, force: false });
-        if (existsSync3(cacheRoot)) throw new Error("session rollout cache still exists");
+        if (existsSync4(cacheRoot)) throw new Error("session rollout cache still exists");
         removedRollouts += 1;
       } catch (error) {
         failures.push({ profileRoot: cacheRoot, error: error instanceof Error ? error.message : String(error) });
@@ -5391,7 +5509,7 @@ function isTerminalResultOutboxStatus(status) {
 }
 
 // src/amaster-runtime-daemon/run-completion-state.mjs
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync6, readdirSync as readdirSync5, renameSync as renameSync4, unlinkSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync6, readdirSync as readdirSync5, renameSync as renameSync4, unlinkSync, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join6 } from "node:path";
 var RUN_COMPLETION_STATE_VERSION = 1;
 var RUN_COMPLETION_USAGE_SCHEMA_VERSION = "runtime-command-usage-v1";
@@ -5656,12 +5774,12 @@ function readRunCompletionState(filePath) {
   return assertValidRunCompletionState(JSON.parse(readFileSync6(filePath, "utf8")));
 }
 function listRunCompletionStateFiles(directory) {
-  if (!existsSync4(directory)) return [];
+  if (!existsSync5(directory)) return [];
   return readdirSync5(directory).filter((name) => name.endsWith(".json")).sort().map((name) => join6(directory, name));
 }
 function removeRunCompletionState(directory, commandId) {
   const filePath = join6(directory, runCompletionStateFileName(commandId));
-  if (existsSync4(filePath)) unlinkSync(filePath);
+  if (existsSync5(filePath)) unlinkSync(filePath);
 }
 
 // src/amaster-runtime-daemon/source-output-retention.mjs
@@ -8059,82 +8177,9 @@ function resolveAgentInstructionSystemKernelBundle(bundle, options = {}) {
 }
 
 // src/amaster-runtime-daemon/config-state.mjs
-import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync7, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync7, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir2, hostname } from "node:os";
 import { dirname as dirname5, join as join7 } from "node:path";
-
-// src/amaster-runtime-daemon/executor-discovery.mjs
-import { spawnSync as spawnSync3 } from "node:child_process";
-import { delimiter as delimiter2 } from "node:path";
-var KNOWN_EXECUTORS = [
-  ["codex", "codex"],
-  ["claude", "claude"],
-  ["cursor", "cursor"],
-  ["opencode", "opencode"],
-  ["hermes", "hermes"],
-  ["pi", "pi"],
-  ["openclaw", "openclaw"]
-];
-function executorDiscoveryEnv(env = process.env) {
-  const extraPaths = splitList(env.AMASTER_EXECUTOR_PATHS);
-  if (extraPaths.length === 0) return env;
-  return {
-    ...env,
-    PATH: [...extraPaths, env.PATH ?? ""].filter(Boolean).join(delimiter2)
-  };
-}
-function commandExists(command, env = process.env) {
-  const commandEnv = executorDiscoveryEnv(env);
-  const result3 = spawnSync3("sh", ["-lc", `command -v ${quoteShell(command)} >/dev/null 2>&1`], {
-    env: commandEnv,
-    stdio: "ignore"
-  });
-  return result3.status === 0;
-}
-function commandVersion(command, env = process.env) {
-  const commandEnv = executorDiscoveryEnv(env);
-  const result3 = spawnSync3(command, ["--version"], {
-    env: commandEnv,
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "ignore"],
-    timeout: 3e3
-  });
-  if (result3.status !== 0) return void 0;
-  return result3.stdout.trim().split(/\r?\n/)[0]?.slice(0, 120) || void 0;
-}
-function discoverExecutors(options = {}) {
-  const knownExecutors = options.knownExecutors ?? KNOWN_EXECUTORS;
-  const env = options.env ?? process.env;
-  return knownExecutors.filter(([, command]) => commandExists(command, env)).map(([kind, command]) => {
-    const version = commandVersion(command, env);
-    return {
-      kind,
-      command,
-      ...version ? { version } : {}
-    };
-  });
-}
-function parseExecutors(value, options = {}) {
-  const configured = splitList(value);
-  if (configured.length === 0) {
-    const discovered = discoverExecutors(options);
-    return discovered.length > 0 ? discovered : [{ kind: "custom", command: "replace-with-executor-command" }];
-  }
-  return configured.map((entry) => {
-    const [kind, command, ...versionParts] = entry.split(":");
-    if (!kind?.trim() || !command?.trim()) {
-      throw new Error(`Invalid AMASTER_EXECUTORS entry: ${entry}`);
-    }
-    const version = versionParts.join(":").trim();
-    return {
-      kind: kind.trim(),
-      command: command.trim(),
-      ...version ? { version } : {}
-    };
-  });
-}
-
-// src/amaster-runtime-daemon/config-state.mjs
 var CAPABILITIES = [
   "remote_registration",
   "heartbeat",
@@ -8204,14 +8249,14 @@ function corruptStatePath(path) {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/\D/g, "").slice(0, 14);
   const base = `${path}.corrupt-${timestamp}Z`;
   let candidate = base;
-  for (let suffix = 1; existsSync5(candidate); suffix += 1) {
+  for (let suffix = 1; existsSync6(candidate); suffix += 1) {
     candidate = `${base}.${suffix}`;
   }
   return candidate;
 }
 function readState(env) {
   const path = stateFilePath(env);
-  if (!existsSync5(path)) return {};
+  if (!existsSync6(path)) return {};
   try {
     const state = JSON.parse(readFileSync7(path, "utf8"));
     if (!state || typeof state !== "object" || Array.isArray(state)) {
@@ -10052,7 +10097,7 @@ var bestEffortPostJson = bestEffortPostRuntimeConnectorJson;
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
 import { createHash as createHash8 } from "node:crypto";
 import { closeSync, constants, fstatSync, lstatSync as lstatSync4, openSync, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
-import { isAbsolute as isAbsolute3, relative as relative3, resolve as resolve4 } from "node:path";
+import { isAbsolute as isAbsolute4, relative as relative3, resolve as resolve4 } from "node:path";
 var SHA256_PATTERN = /^[a-f0-9]{64}$/;
 function requiredString(value, name) {
   if (typeof value !== "string" || !value.trim()) throw new Error(`Runtime Artifact ${name} is required`);
@@ -10065,7 +10110,7 @@ function ownedRelativePath(value) {
 }
 function pathWithin(candidate, root) {
   const rel = relative3(root, candidate);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
 }
 function sameFileSnapshot(left, right) {
   return left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeMs === right.mtimeMs && left.ctimeMs === right.ctimeMs;
@@ -10388,11 +10433,11 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 
 // src/amaster-runtime-daemon/workspace-guard.mjs
 import { createHash as createHash10 } from "node:crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync6, realpathSync as realpathSync4, statSync as statSync4 } from "node:fs";
-import { basename as basename4, join as join9, isAbsolute as isAbsolute4, relative as relative4, resolve as resolve5 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync6, realpathSync as realpathSync4, statSync as statSync4 } from "node:fs";
+import { basename as basename4, join as join9, isAbsolute as isAbsolute5, relative as relative4, resolve as resolve5 } from "node:path";
 
 // src/amaster-runtime-daemon/workspace-manifest.mjs
-import { chownSync as chownSync3, existsSync as existsSync6, readFileSync as readFileSync9, renameSync as renameSync6, rmSync as rmSync5, statSync as statSync3, writeFileSync as writeFileSync7 } from "node:fs";
+import { chownSync as chownSync3, existsSync as existsSync7, readFileSync as readFileSync9, renameSync as renameSync6, rmSync as rmSync5, statSync as statSync3, writeFileSync as writeFileSync7 } from "node:fs";
 import { basename as basename3, dirname as dirname6, join as join8 } from "node:path";
 var WORKSPACE_MANIFEST_FILENAME = ".amaster-runtime.json";
 function syncManifestDirOwnership(manifestPath, deps = {}) {
@@ -10419,7 +10464,7 @@ function workspaceManifestPath(workspaceOrCwd) {
   return null;
 }
 function readWorkspaceManifest(manifestPath) {
-  if (!manifestPath || !existsSync6(manifestPath)) return null;
+  if (!manifestPath || !existsSync7(manifestPath)) return null;
   try {
     const parsed = JSON.parse(readFileSync9(manifestPath, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
@@ -10489,7 +10534,7 @@ function updateWorkspaceManifest(workspaceOrManifestPath, patch = {}) {
 // src/amaster-runtime-daemon/workspace-guard.mjs
 function pathWithin2(candidate, root) {
   const rel = relative4(root, candidate);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute5(rel);
 }
 function resolveWorkspaceCwd(config, command) {
   const payload = asRecord(command.payload);
@@ -10507,7 +10552,7 @@ function resolveWorkspaceCwd(config, command) {
   if (!allowed) {
     throw new Error(`Workspace path is outside AMASTER_WORKSPACE_ALLOWLIST: ${cwd}`);
   }
-  if (!existsSync7(cwd) || !statSync4(cwd).isDirectory()) {
+  if (!existsSync8(cwd) || !statSync4(cwd).isDirectory()) {
     throw new Error(`Workspace path does not exist or is not a directory: ${cwd}`);
   }
   return cwd;
@@ -10577,7 +10622,7 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
 }
 
 // src/amaster-runtime-daemon/workspace-gc.mjs
-import { existsSync as existsSync8, readdirSync as readdirSync6, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync9, readdirSync as readdirSync6, statSync as statSync5 } from "node:fs";
 import { join as join10, resolve as resolve6 } from "node:path";
 function readIsoTime(value) {
   if (typeof value !== "string" || !value.trim()) return null;
@@ -10602,7 +10647,7 @@ function walkWorkdirs(root) {
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       const fullPath = join10(current, entry.name);
-      if (entry.name === "workdir" && existsSync8(workspaceManifestPath(fullPath))) {
+      if (entry.name === "workdir" && existsSync9(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
       }
@@ -10677,7 +10722,7 @@ function planManagedWorkspaceGcDryRun(input) {
     candidates: [],
     protected: []
   };
-  if (!root || !existsSync8(root)) return result3;
+  if (!root || !existsSync9(root)) return result3;
   for (const workdir of walkWorkdirs(root)) {
     const manifest = readWorkspaceManifest(workspaceManifestPath(workdir));
     if (!manifest || manifest.managed !== true) continue;
@@ -10708,7 +10753,7 @@ function planManagedWorkspaceGcDryRun(input) {
 import { createHash as createHash11 } from "node:crypto";
 import {
   chmodSync as chmodSync5,
-  existsSync as existsSync9,
+  existsSync as existsSync10,
   lstatSync as lstatSync5,
   mkdirSync as mkdirSync7,
   mkdtempSync,
@@ -10719,7 +10764,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync8
 } from "node:fs";
-import { dirname as dirname7, extname, isAbsolute as isAbsolute5, join as join11, parse as parse2, resolve as resolve7, sep as sep3 } from "node:path";
+import { dirname as dirname7, extname, isAbsolute as isAbsolute6, join as join11, parse as parse2, resolve as resolve7, sep as sep3 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PRESET_TEMPLATE_MANIFEST_FILE = ".mirrorx-preset-templates.json";
 var MAX_PRESET_TEMPLATE_FILES = 256;
@@ -10737,7 +10782,7 @@ function lstatIfExists(path) {
   }
 }
 function validTemplateName(value) {
-  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute5(value) && parse2(value).base === value && extname(value).toLowerCase() === ".md";
+  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute6(value) && parse2(value).base === value && extname(value).toLowerCase() === ".md";
 }
 function readManifest(manifestPath, { strict }) {
   try {
@@ -10785,7 +10830,7 @@ function removeRetiredPresetFiles(targetDir, previousManifest, nextNames) {
   for (const entry of previousManifest.files) {
     if (nextNames.has(entry.name)) continue;
     const targetPath = join11(targetDir, entry.name);
-    if (!existsSync9(targetPath)) continue;
+    if (!existsSync10(targetPath)) continue;
     const stat = lstatSync5(targetPath);
     if (stat.isDirectory()) {
       throw new Error(`preset_template_target_conflict: ${entry.name}`);
@@ -10852,7 +10897,7 @@ function materializeRuntimePresetTemplates(env = process.env, options = {}) {
 }
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
-import { existsSync as existsSync10, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
+import { existsSync as existsSync11, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
 import { dirname as dirname8, join as join12, resolve as resolve8 } from "node:path";
 function runtimeStatusDirectoryEntries(path) {
   try {
@@ -10886,7 +10931,7 @@ function runtimeStatusDirectorySizeBytes(path) {
 }
 function walkRuntimeStatusManagedWorkdirs(root) {
   const workdirs = [];
-  if (!root || !existsSync10(root)) return workdirs;
+  if (!root || !existsSync11(root)) return workdirs;
   const stack = [root];
   while (stack.length > 0) {
     const current = stack.pop();
@@ -10894,7 +10939,7 @@ function walkRuntimeStatusManagedWorkdirs(root) {
     for (const entry of runtimeStatusDirectoryEntries(current)) {
       if (!entry.isDirectory()) continue;
       const fullPath = join12(current, entry.name);
-      if (entry.name === "workdir" && existsSync10(workspaceManifestPath(fullPath))) {
+      if (entry.name === "workdir" && existsSync11(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
       }
@@ -10948,7 +10993,7 @@ function runtimeStatusRunCompletionDir(config) {
   })), "run-completion-state");
 }
 function countRuntimeStatusJsonEntries(dir) {
-  if (!existsSync10(dir)) return 0;
+  if (!existsSync11(dir)) return 0;
   return runtimeStatusDirectoryEntries(dir).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).length;
 }
 function summarizeRuntimeLocalState(input) {
@@ -11106,8 +11151,8 @@ function summarizeAmasterRuntimeVersionDrift(input = {}) {
 // src/amaster-runtime-daemon/workspace-status.mjs
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash12 } from "node:crypto";
-import { existsSync as existsSync11, readdirSync as readdirSync9, readFileSync as readFileSync11, statSync as statSync7 } from "node:fs";
-import { basename as basename5, extname as extname2, isAbsolute as isAbsolute6, join as join13, relative as relative5, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync12, readdirSync as readdirSync9, readFileSync as readFileSync11, statSync as statSync7 } from "node:fs";
+import { basename as basename5, extname as extname2, isAbsolute as isAbsolute7, join as join13, relative as relative5, resolve as resolve9 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Map([
   [".md", "markdown"],
@@ -11153,7 +11198,7 @@ var SAFE_RUNTIME_SERVICE_HEALTH_STATUSES = /* @__PURE__ */ new Set(["unknown", "
 var SAFE_RUNTIME_SERVICE_LIFECYCLES = /* @__PURE__ */ new Set(["shared", "ephemeral"]);
 function statusPathWithin(candidate, root) {
   const rel = relative5(root, candidate);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
 }
 function normalizeRelativePath(root, filePath) {
   return relative5(root, filePath).split(/[\\/]+/).join("/");
@@ -11304,7 +11349,7 @@ function sanitizeRuntimeService(entry) {
 }
 function readRuntimeServicesSnapshot(cwd) {
   const snapshotPath = join13(resolve9(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
-  if (!existsSync11(snapshotPath)) return [];
+  if (!existsSync12(snapshotPath)) return [];
   try {
     const parsed = JSON.parse(readFileSync11(snapshotPath, "utf8"));
     const rawServices = Array.isArray(parsed) ? parsed : Array.isArray(parsed?.services) ? parsed.services : [];
@@ -11539,7 +11584,7 @@ async function executeBrowserSessionCommand(command, dependencies = {}) {
 import { createHash as createHash13 } from "node:crypto";
 import {
   chmodSync as chmodSync6,
-  existsSync as existsSync12,
+  existsSync as existsSync13,
   lstatSync as lstatSync6,
   mkdirSync as mkdirSync8,
   readFileSync as readFileSync12,
@@ -11568,7 +11613,7 @@ function ensureExecutable(path) {
 }
 function ensurePrivateRoot(stateRoot) {
   const root = resolve10(stateRoot);
-  if (existsSync12(root) && lstatSync6(root).isSymbolicLink()) {
+  if (existsSync13(root) && lstatSync6(root).isSymbolicLink()) {
     throw brokerError("browser_session_profile_root_symlink");
   }
   mkdirSync8(root, { recursive: true, mode: 448 });
@@ -11597,10 +11642,10 @@ function exactProfile(stateRoot, payload, { create = false } = {}) {
   if (!pathWithin3(profilePath, root) || dirname9(profilePath) !== root) {
     throw brokerError("browser_session_profile_path_invalid");
   }
-  if (existsSync12(profilePath) && lstatSync6(profilePath).isSymbolicLink()) {
+  if (existsSync13(profilePath) && lstatSync6(profilePath).isSymbolicLink()) {
     throw brokerError("browser_session_profile_symlink");
   }
-  if (!existsSync12(profilePath)) {
+  if (!existsSync13(profilePath)) {
     if (!create) throw brokerError("browser_session_profile_not_found");
     mkdirSync8(profilePath, { mode: 448 });
     chmodSync6(profilePath, 448);
@@ -11846,7 +11891,7 @@ var source_acquisition_compatibility_default = {
 };
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.91";
+var CONNECTOR_VERSION = "0.1.1-beta.93";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);
@@ -11886,7 +11931,7 @@ function updateActiveRunWorkspaceManifest(commandId, manifestPath, patch = {}) {
 }
 function resultOutboxPendingCount(config) {
   const dir = resultOutboxDir(config);
-  if (!existsSync13(dir)) return 0;
+  if (!existsSync14(dir)) return 0;
   try {
     let pending = 0;
     for (const file of readdirSync10(dir).filter((name) => name.endsWith(".json"))) {
@@ -11963,7 +12008,7 @@ function piCompletionOutputType(event) {
 }
 function resultOutboxActiveRunCommands(config) {
   const dir = resultOutboxDir(config);
-  if (!existsSync13(dir)) return [];
+  if (!existsSync14(dir)) return [];
   const outboxPending = resultOutboxPendingCount(config);
   const entries = [];
   for (const file of readdirSync10(dir).filter((name) => name.endsWith(".json")).sort()) {
@@ -11997,7 +12042,7 @@ function resultOutboxActiveRunCommands(config) {
 }
 function resultOutboxFailedRunCommands(config) {
   const dir = resultOutboxInvalidDir(config);
-  if (!existsSync13(dir)) return [];
+  if (!existsSync14(dir)) return [];
   const entries = [];
   for (const file of readdirSync10(dir).filter((name) => name.endsWith(".json")).sort().slice(-100)) {
     let entry;
@@ -12115,7 +12160,7 @@ function safeSkillRootSummary(kind, source, pathValue) {
         const skillDir = join15(pathValue, name);
         try {
           if (!statSync9(skillDir).isDirectory()) continue;
-          if (!existsSync13(join15(skillDir, "SKILL.md"))) continue;
+          if (!existsSync14(join15(skillDir, "SKILL.md"))) continue;
           skillCount += 1;
           if (skillCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
             truncated = true;
@@ -12309,7 +12354,7 @@ function sourceAcquisitionPackageMetadata(packageName) {
     ...packageName.split("/"),
     "package.json"
   );
-  if (!existsSync13(packagePath)) return null;
+  if (!existsSync14(packagePath)) return null;
   const stat = lstatSync7(packagePath);
   if (!stat.isFile() || stat.isSymbolicLink()) return null;
   const metadata = readJsonFile2(packagePath);
@@ -12317,7 +12362,7 @@ function sourceAcquisitionPackageMetadata(packageName) {
 }
 function sourceAcquisitionBrowserExecutableReady() {
   const executable = readString(process.env.AMASTER_BROWSER_EXECUTABLE_PATH);
-  if (!executable || !isAbsolute7(executable)) return false;
+  if (!executable || !isAbsolute8(executable)) return false;
   try {
     const stat = statSync9(executable);
     return stat.isFile() && (stat.mode & 73) !== 0;
@@ -12915,10 +12960,10 @@ function buildActiveRunCommandStatus(config, entry) {
   const base = {
     ...entry,
     phase: readString(entry.phase) ?? "executing",
-    managedWorkdirPresent: entry.workspacePath ? existsSync13(entry.workspacePath) : false,
+    managedWorkdirPresent: entry.workspacePath ? existsSync14(entry.workspacePath) : false,
     outboxPending: resultOutboxPendingCount(config)
   };
-  if (!entry.workspacePath || !existsSync13(entry.workspacePath)) return base;
+  if (!entry.workspacePath || !existsSync14(entry.workspacePath)) return base;
   const manifestPath = entry.manifestPath ?? workspaceManifestPath(entry.workspacePath);
   const status = readWorkspaceStatus(entry.workspacePath, { hashCache: workspaceStatusHashCache });
   const artifactCandidates = status.artifacts.slice(0, 20);
@@ -13146,7 +13191,7 @@ async function sourceAcquisitionRuntimeProfile(config, command) {
   const userDataDir = resolve11(stateRoot, profileName2);
   if (!pathWithin2(userDataDir, stateRoot)) throw new Error("source_acquisition_browser_profile_invalid");
   const markerPath = join15(userDataDir, ".amaster-browser-session.json");
-  if (!existsSync13(userDataDir) || lstatSync7(userDataDir).isSymbolicLink() || !lstatSync7(userDataDir).isDirectory() || !existsSync13(markerPath) || lstatSync7(markerPath).isSymbolicLink()) throw new Error("source_acquisition_browser_profile_invalid");
+  if (!existsSync14(userDataDir) || lstatSync7(userDataDir).isSymbolicLink() || !lstatSync7(userDataDir).isDirectory() || !existsSync14(markerPath) || lstatSync7(markerPath).isSymbolicLink()) throw new Error("source_acquisition_browser_profile_invalid");
   const marker = readJsonFile2(markerPath);
   if (marker.version !== 1 || marker.companyId !== companyId || marker.bindingId !== bindingId || marker.localOpaqueRef !== localOpaqueRef || !readString(marker.provider) || marker.origin !== exactOrigin || Object.keys(marker).length !== 6) {
     throw new Error("source_acquisition_browser_profile_invalid");
@@ -13205,7 +13250,7 @@ function safeAgentInstructionMaterializationTarget(workspace, filePath) {
   const raw = readString(filePath);
   if (!raw || raw.includes("\0")) return null;
   const normalized = raw.replace(/\\/g, "/");
-  if (isAbsolute7(normalized)) return null;
+  if (isAbsolute8(normalized)) return null;
   const segments = normalized.split("/").filter(Boolean);
   if (segments.length === 0 || segments.some((segment) => segment === "." || segment === "..")) return null;
   const relativePath = segments.join("/");
@@ -13255,7 +13300,7 @@ function wikiTreePathForCommand(command, workspaceBindings) {
     }
     for (const candidate of candidates) {
       try {
-        if (existsSync13(candidate)) return candidate;
+        if (existsSync14(candidate)) return candidate;
       } catch {
       }
     }
@@ -14059,7 +14104,7 @@ function realOrResolvedPath(value) {
     return resolve11(value);
   }
 }
-var LSOF_COMMAND = process.platform === "darwin" && existsSync13("/usr/sbin/lsof") ? "/usr/sbin/lsof" : "lsof";
+var LSOF_COMMAND = process.platform === "darwin" && existsSync14("/usr/sbin/lsof") ? "/usr/sbin/lsof" : "lsof";
 function processCwdForPid(pid) {
   if (process.platform === "linux") {
     try {
@@ -14181,7 +14226,7 @@ function killWorkspaceResidentProcesses(cwd, processGroupId, options = {}) {
 }
 function walkManagedWorkdirs(root) {
   const workdirs = [];
-  if (!root || !existsSync13(root)) return workdirs;
+  if (!root || !existsSync14(root)) return workdirs;
   const stack = [root];
   while (stack.length > 0) {
     const current = stack.pop();
@@ -14195,7 +14240,7 @@ function walkManagedWorkdirs(root) {
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       const fullPath = join15(current, entry.name);
-      if (entry.name === "workdir" && existsSync13(workspaceManifestPath(fullPath))) {
+      if (entry.name === "workdir" && existsSync14(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
       }
@@ -14234,7 +14279,7 @@ function manifestMatchesActiveRuntimeRef(manifest, refs, workdir = null) {
 function buildOrphanReaperSample(root, workdir, manifest, residents) {
   const relativeWorkdir = (() => {
     const value = relative7(root, workdir);
-    return value && !value.startsWith("..") && !isAbsolute7(value) ? value : basename6(workdir);
+    return value && !value.startsWith("..") && !isAbsolute8(value) ? value : basename6(workdir);
   })();
   return {
     workdir: relativeWorkdir,
@@ -14345,10 +14390,12 @@ function runExecutor(command, args, options) {
     const maxRssBytes = maxRssMb * 1024 * 1024;
     const managedInputs = sourceAcquisitionManagedInputs(options);
     const spawnIdentity = asRecord(options.spawnIdentity);
-    const child = spawn(command, args, {
+    const executable = process.platform === "win32" ? resolveExecutorCommand(command, options.env) ?? command : command;
+    const child = spawn(executable, args, {
       cwd: options.cwd,
       env: options.env,
       detached: process.platform !== "win32",
+      ...isWindowsCommandShim(executable) ? { shell: true } : {},
       stdio: sourceAcquisitionManagedStdio(managedInputs),
       ...Number.isSafeInteger(spawnIdentity.uid) && Number.isSafeInteger(spawnIdentity.gid) ? { uid: spawnIdentity.uid, gid: spawnIdentity.gid } : {}
     });
@@ -15699,7 +15746,7 @@ async function flushRunCompletionStates(config) {
   for (const { filePath, state: listedState } of runCompletionStateEntries(config)) {
     try {
       if (runCompletionFlights.has(listedState.commandId)) continue;
-      if (!existsSync13(filePath)) continue;
+      if (!existsSync14(filePath)) continue;
       const state = readValidRunCompletionStateOrQuarantine(config, filePath);
       if (!state) continue;
       const outcome = await coordinateRunCompletionSingleFlight(config, state);
@@ -15990,7 +16037,7 @@ function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err)
 }
 async function flushResultOutbox(config) {
   const dir = resultOutboxDir(config);
-  if (!existsSync13(dir)) return { attempted: 0, completed: 0 };
+  if (!existsSync14(dir)) return { attempted: 0, completed: 0 };
   const files = readdirSync10(dir).filter((name) => name.endsWith(".json")).sort();
   let completed = 0;
   for (const file of files) {
@@ -16358,14 +16405,14 @@ function issueCheckpointDir(workspace) {
 }
 async function clearIssueCheckpoint(config, command, workspace, reason) {
   const checkpointDir = issueCheckpointDir(workspace);
-  if (!existsSync13(checkpointDir)) return false;
+  if (!existsSync14(checkpointDir)) return false;
   rmSync8(checkpointDir, { recursive: true, force: true });
   await ingestLog(config, command, "system", "info", "Cleared issue continuation checkpoint", { reason });
   return true;
 }
 function safeCheckpointRelativePath(rawPath) {
   const raw = String(rawPath ?? "").trim();
-  if (isAbsolute7(raw) || /^[A-Za-z]:[\\/]/.test(raw)) return null;
+  if (isAbsolute8(raw) || /^[A-Za-z]:[\\/]/.test(raw)) return null;
   const normalized = raw.split(/[\\/]+/).filter(Boolean).join("/");
   if (!normalized || normalized.startsWith("../") || normalized.split("/").some((segment) => segment.startsWith("."))) return null;
   if (normalized.startsWith("input-attachments/") || isRuntimeMetadataArtifactPath(normalized)) return null;
@@ -16377,7 +16424,7 @@ function hashFileSha256(filePath) {
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);
   const manifestPath = join15(checkpointDir, "manifest.json");
-  if (!existsSync13(manifestPath)) return [];
+  if (!existsSync14(manifestPath)) return [];
   let manifest;
   try {
     manifest = asRecord(JSON.parse(readFileSync13(manifestPath, "utf8")));
@@ -16406,7 +16453,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       if (!pathWithin2(sourceCandidate, filesRoot) || !pathWithin2(target, workspaceRoot)) {
         throw new Error(`issue checkpoint path escapes its workspace: ${relativePath}`);
       }
-      if (!existsSync13(sourceCandidate)) throw new Error(`issue checkpoint file is missing: ${relativePath}`);
+      if (!existsSync14(sourceCandidate)) throw new Error(`issue checkpoint file is missing: ${relativePath}`);
       const source = realpathSync5(sourceCandidate);
       if (!pathWithin2(source, filesRoot) || !statSync9(source).isFile()) {
         throw new Error(`issue checkpoint source escapes its storage root: ${relativePath}`);
@@ -16469,7 +16516,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates) {
   for (const candidate of candidates.slice(0, 20)) {
     const relativePath = safeCheckpointRelativePath(candidate.rawPath);
     const source = readString(candidate.filePath);
-    if (!relativePath || !source || !existsSync13(source) || !statSync9(source).isFile()) continue;
+    if (!relativePath || !source || !existsSync14(source) || !statSync9(source).isFile()) continue;
     const ownedSource = realpathSync5(source);
     if (!pathWithin2(ownedSource, workspaceRoot)) {
       throw new Error(`issue checkpoint source escapes its execution workspace: ${relativePath}`);