@amaster.ai/employee-runtime-connector 0.1.1 → 0.1.3

package/dist/amaster-runtime-daemon.mjs

@@ -4285,6 +4285,8 @@ var ISSUE_THREAD_INTERACTION_KINDS = [
   "request_confirmation",
   "request_checkbox_confirmation"
 ];
+var ASK_USER_QUESTIONS_FIELD_VALUE_MAX_LENGTH = 2e3;
+var ASK_USER_QUESTIONS_OTHER_TEXT_MAX_LENGTH = 4e3;
 var ISSUE_THREAD_INTERACTION_SETTLEMENT_PURPOSE_CODES = [
   "request_required_inputs",
   "clarify_required_scope",
@@ -4932,6 +4934,7 @@ var AMASTER_RUNTIME_CONNECTOR_CAPABILITIES = [
   "run_exit_live_path_closure_v1",
   "browser_credential_ref_fill_v1",
   "browser_credential_auth_transaction_v1",
+  "browser_credential_env_read_v1",
   "execution_lanes_v1",
   "mirrorx_initialization_context_v1",
   "mirrorx_initialization_completion_v1",
@@ -6790,6 +6793,11 @@ var goalGapCausalSourceSchema = external_exports.discriminatedUnion("kind", [
   external_exports.object({ kind: external_exports.literal("work_family"), workFamilyKey: sha256Schema }).strict(),
   external_exports.object({
     kind: external_exports.literal("board_direct"),
+    decisionStateId: external_exports.string().uuid(),
+    decisionResolutionRevision: external_exports.number().int().positive()
+  }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("legacy_task_attribution"),
     interactionId: external_exports.string().uuid(),
     resolutionRevision: external_exports.number().int().positive()
   }).strict()
@@ -6848,26 +6856,38 @@ var boardResolveGoalGapAuthoritySchema = external_exports.discriminatedUnion("de
     remindAt: external_exports.string().datetime({ offset: true }).optional()
   }).strict()
 ]);
-var boardResolveLegacyOutcomeGapBaseSchema = external_exports.object({
+var DEFAULT_ATTRIBUTE_LEGACY_OUTCOME_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u6839\u636E\u539F\u4EFB\u52A1\u4E0E\u9A8C\u6536\u8BC1\u636E\u786E\u8BA4\u8BE5\u5386\u53F2\u4EA4\u4ED8\u5F52\u5C5E\u4E8E\u6240\u9009\u8FBE\u6210\u6807\u51C6\u3002";
+var DEFAULT_NOT_GOAL_EFFECT_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u6839\u636E\u539F\u4EFB\u52A1\u4E0E\u9A8C\u6536\u8BC1\u636E\u786E\u8BA4\u8BE5\u5386\u53F2\u4EA4\u4ED8\u4E0D\u5F71\u54CD\u5F53\u524D\u76EE\u6807\u3002";
+var DEFAULT_DEFER_LEGACY_OUTCOME_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u8BBE\u7F6E\u4E86\u5386\u53F2\u4EA4\u4ED8\u5F52\u5C5E\u7684\u4E0B\u6B21\u786E\u8BA4\u65F6\u95F4\u3002";
+var DEFAULT_CORRECT_FACTS_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u786E\u8BA4\u5F53\u524D\u8BB0\u5F55\u9700\u8981\u6309\u6700\u65B0\u4E8B\u5B9E\u66F4\u6B63\u3002";
+var boardResolveLegacyOutcomeGapCommonSchema = external_exports.object({
   expectedAuthorityRevision: external_exports.number().int().min(0),
   expectedContractId: external_exports.string().uuid().nullable(),
   readinessStateId: external_exports.string().uuid(),
   expectedReadinessRevision: external_exports.number().int().positive(),
   interactionId: external_exports.string().uuid(),
   resolutionRevision: external_exports.number().int().positive(),
-  rationale: external_exports.string().trim().min(1).max(2e3),
   observedAt: external_exports.string().datetime({ offset: true }),
   idempotencyKey: external_exports.string().trim().min(1).max(200)
 });
+var optionalLegacyOutcomeRationaleSchema = (defaultValue) => external_exports.string().trim().max(2e3).optional().transform((value) => value || defaultValue);
 var boardResolveLegacyOutcomeGapSchema = external_exports.discriminatedUnion("decision", [
-  boardResolveLegacyOutcomeGapBaseSchema.extend({
+  boardResolveLegacyOutcomeGapCommonSchema.extend({
     decision: external_exports.literal("attribute_to_criterion"),
-    criterionIndex: external_exports.number().int().min(0).max(9)
+    criterionIndex: external_exports.number().int().min(0).max(9),
+    rationale: optionalLegacyOutcomeRationaleSchema(DEFAULT_ATTRIBUTE_LEGACY_OUTCOME_RATIONALE)
+  }).strict(),
+  boardResolveLegacyOutcomeGapCommonSchema.extend({
+    decision: external_exports.literal("not_goal_effect"),
+    rationale: optionalLegacyOutcomeRationaleSchema(DEFAULT_NOT_GOAL_EFFECT_RATIONALE)
+  }).strict(),
+  boardResolveLegacyOutcomeGapCommonSchema.extend({
+    decision: external_exports.literal("correct_facts"),
+    rationale: optionalLegacyOutcomeRationaleSchema(DEFAULT_CORRECT_FACTS_RATIONALE)
   }).strict(),
-  boardResolveLegacyOutcomeGapBaseSchema.extend({ decision: external_exports.literal("not_goal_effect") }).strict(),
-  boardResolveLegacyOutcomeGapBaseSchema.extend({ decision: external_exports.literal("correct_facts") }).strict(),
-  boardResolveLegacyOutcomeGapBaseSchema.extend({
+  boardResolveLegacyOutcomeGapCommonSchema.extend({
     decision: external_exports.literal("defer"),
+    rationale: optionalLegacyOutcomeRationaleSchema(DEFAULT_DEFER_LEGACY_OUTCOME_RATIONALE),
     remindAt: external_exports.string().datetime({ offset: true }).optional()
   }).strict()
 ]);
@@ -7027,13 +7047,6 @@ var goalCriterionProgressReadModelSchema = external_exports.object({
   status: external_exports.enum(GOAL_CRITERION_PROGRESS_STATUSES),
   statusLabel: external_exports.string().min(1),
   decisionKind: external_exports.enum(GOAL_CRITERION_DECISION_KINDS).nullable(),
-  decisionContext: external_exports.discriminatedUnion("kind", [
-    external_exports.object({
-      kind: external_exports.literal("legacy_outcome_attribution"),
-      sourceIssueId: external_exports.string().uuid(),
-      sourceIssueTitle: external_exports.string().min(1)
-    }).strict()
-  ]).nullable().optional(),
   question: external_exports.string().min(1).nullable(),
   factInput: external_exports.object({
     kind: external_exports.enum(["boolean", "count", "amount", "ratio"]),
@@ -7059,10 +7072,17 @@ var goalCriterionProgressReadModelSchema = external_exports.object({
   unknownSummary: external_exports.string().min(1).nullable(),
   sourceSummary: external_exports.array(external_exports.string().min(1)).max(20),
   lastCheckedAt: external_exports.string().datetime().nullable(),
+  latestDecision: external_exports.object({
+    action: external_exports.enum(GOAL_CRITERION_DECISION_ACTIONS),
+    rationale: external_exports.string().min(1),
+    actorType: external_exports.enum(["user", "agent", "system"]),
+    decidedAt: external_exports.string().datetime()
+  }).strict().nullable(),
   decisionImpact: external_exports.string().min(1),
   allowedActions: external_exports.array(external_exports.enum(GOAL_CRITERION_DECISION_ACTIONS)),
   relatedDemands: external_exports.array(goalCriterionRelatedWorkSchema).max(20),
   relatedTasks: external_exports.array(goalCriterionRelatedWorkSchema).max(20),
+  decisionStateId: external_exports.string().uuid().nullable(),
   decisionRevision: external_exports.number().int().nonnegative().nullable(),
   attentionItemKey: external_exports.string().min(1).nullable().optional(),
   expectedDecisionToken: sha256Schema.nullable(),
@@ -7093,10 +7113,10 @@ var goalCriteriaProgressReadModelSchema = external_exports.object({
 var DEFAULT_CONTINUE_PROGRESS_RATIONALE = "\u516C\u53F8\u7BA1\u7406\u5458\u786E\u8BA4\u5F53\u524D\u4E1A\u52A1\u7ED3\u679C\u5C1A\u672A\u8FBE\u5230\uFF0C\u7EE7\u7EED\u63A8\u8FDB\u3002";
 var DEFAULT_KEEP_IN_GOAL_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u786E\u8BA4\u8FD9\u6761\u8FBE\u6210\u6807\u51C6\u4ECD\u9002\u7528\u4E8E\u5F53\u524D\u76EE\u6807\u3002";
 var DEFAULT_DEFER_GOAL_CRITERION_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u8BBE\u7F6E\u4E86\u4E0B\u6B21\u786E\u8BA4\u65F6\u95F4\u3002";
-var boardDecideGoalCriterionBaseSchema = external_exports.object({
-  rationale: external_exports.string().trim().min(1).max(2e3),
-  expectedDecisionToken: sha256Schema
-}).strict();
+var DEFAULT_MARK_NOT_APPLICABLE_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u786E\u8BA4\u8FD9\u6761\u8FBE\u6210\u6807\u51C6\u5F53\u524D\u4E0D\u518D\u9002\u7528\u4E8E\u76EE\u6807\u3002";
+var DEFAULT_CONFIRM_ACHIEVED_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u6839\u636E\u5F53\u524D\u7ECF\u8425\u4E8B\u5B9E\u786E\u8BA4\u8FD9\u6761\u8FBE\u6210\u6807\u51C6\u5DF2\u7ECF\u8FBE\u5230\u3002";
+var DEFAULT_SUBMIT_CORRECTED_FACT_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u63D0\u4EA4\u4E86\u7ECF\u6838\u5B9E\u7684\u6B63\u786E\u4E8B\u5B9E\u3002";
+var DEFAULT_WAIT_FOR_EXTERNAL_FACT_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u786E\u8BA4\u9700\u8981\u7B49\u5F85\u5916\u90E8\u6743\u5A01\u6570\u636E\u66F4\u65B0\u3002";
 var continueProgressRationaleSchema = external_exports.string().trim().max(2e3).optional().transform((value) => value || DEFAULT_CONTINUE_PROGRESS_RATIONALE);
 var optionalGoalCriterionRationaleSchema = (defaultValue) => external_exports.string().trim().max(2e3).optional().transform((value) => value || defaultValue);
 var correctedFactSourceSchema = external_exports.object({
@@ -7113,12 +7133,20 @@ var correctedGoalCriterionFactSchema = external_exports.object({
   source: correctedFactSourceSchema
 }).strict();
 var boardDecideGoalCriterionSchema = external_exports.discriminatedUnion("action", [
-  boardDecideGoalCriterionBaseSchema.extend({
-    action: external_exports.enum([
-      "mark_not_applicable",
-      "confirm_achieved",
-      "correct_facts"
-    ])
+  external_exports.object({
+    action: external_exports.literal("mark_not_applicable"),
+    rationale: optionalGoalCriterionRationaleSchema(DEFAULT_MARK_NOT_APPLICABLE_RATIONALE),
+    expectedDecisionToken: sha256Schema
+  }).strict(),
+  external_exports.object({
+    action: external_exports.literal("confirm_achieved"),
+    rationale: optionalGoalCriterionRationaleSchema(DEFAULT_CONFIRM_ACHIEVED_RATIONALE),
+    expectedDecisionToken: sha256Schema
+  }).strict(),
+  external_exports.object({
+    action: external_exports.literal("correct_facts"),
+    rationale: optionalGoalCriterionRationaleSchema(DEFAULT_CORRECT_FACTS_RATIONALE),
+    expectedDecisionToken: sha256Schema
   }).strict(),
   external_exports.object({
     action: external_exports.literal("keep_in_goal"),
@@ -7136,12 +7164,16 @@ var boardDecideGoalCriterionSchema = external_exports.discriminatedUnion("action
     expectedDecisionToken: sha256Schema,
     remindAt: external_exports.string().datetime({ offset: true })
   }).strict(),
-  boardDecideGoalCriterionBaseSchema.extend({
+  external_exports.object({
     action: external_exports.literal("submit_corrected_fact"),
+    rationale: optionalGoalCriterionRationaleSchema(DEFAULT_SUBMIT_CORRECTED_FACT_RATIONALE),
+    expectedDecisionToken: sha256Schema,
     correction: correctedGoalCriterionFactSchema
   }).strict(),
-  boardDecideGoalCriterionBaseSchema.extend({
+  external_exports.object({
     action: external_exports.literal("wait_for_external_fact"),
+    rationale: optionalGoalCriterionRationaleSchema(DEFAULT_WAIT_FOR_EXTERNAL_FACT_RATIONALE),
+    expectedDecisionToken: sha256Schema,
     awaitedFactKind: goalGapIndependentObservationSourceKindSchema,
     expectedAt: external_exports.string().datetime({ offset: true }).optional()
   }).strict()
@@ -7178,7 +7210,7 @@ var goalGapContractReadResponseSchema = external_exports.object({
   pendingDecisions: external_exports.array(external_exports.discriminatedUnion("kind", [
     external_exports.object({
       kind: external_exports.literal("observed_effect"),
-      interactionId: external_exports.string().uuid(),
+      decisionStateId: external_exports.string().uuid(),
       gapKey: external_exports.string(),
       criterionId: external_exports.string().uuid(),
       title: external_exports.string(),
@@ -7191,7 +7223,7 @@ var goalGapContractReadResponseSchema = external_exports.object({
     }).strict(),
     external_exports.object({
       kind: external_exports.literal("gap_authority"),
-      interactionId: external_exports.string().uuid(),
+      decisionStateId: external_exports.string().uuid(),
       gapKey: external_exports.string(),
       criterionId: external_exports.string().uuid(),
       criterionIndex: external_exports.number().int().min(0).max(9),
@@ -7203,7 +7235,7 @@ var goalGapContractReadResponseSchema = external_exports.object({
     }).strict(),
     external_exports.object({
       kind: external_exports.literal("fact_correction"),
-      interactionId: external_exports.string().uuid(),
+      decisionStateId: external_exports.string().uuid(),
       criterionId: external_exports.string().uuid(),
       title: external_exports.string(),
       summary: external_exports.string(),
@@ -9839,7 +9871,8 @@ var secureInteractionFormFieldTypeSchema = external_exports.enum([
   "email",
   "tel",
   "textarea",
-  "secret"
+  "secret",
+  "file"
 ]);
 var secureInteractionFormFieldSchema = external_exports.object({
   id: external_exports.string().trim().min(1).max(120),
@@ -11716,14 +11749,20 @@ var askUserQuestionsSecretRefSchema = secureInteractionSecretRefSchema;
 var askUserQuestionsAnswerSchema = external_exports.object({
   questionId: external_exports.string().trim().min(1).max(120),
   optionIds: external_exports.array(external_exports.string().trim().min(1).max(120)).max(20),
-  otherText: multilineTextSchema.pipe(external_exports.string().trim().max(4e3)).nullable().optional(),
+  otherText: multilineTextSchema.pipe(external_exports.string().trim().max(ASK_USER_QUESTIONS_OTHER_TEXT_MAX_LENGTH)).nullable().optional(),
   optionInputs: external_exports.record(
     external_exports.string().trim().min(1).max(120),
-    external_exports.record(external_exports.string().trim().min(1).max(120), external_exports.string().max(2e3))
+    external_exports.record(external_exports.string().trim().min(1).max(120), external_exports.string().max(ASK_USER_QUESTIONS_FIELD_VALUE_MAX_LENGTH))
   ).optional(),
   fieldValues: external_exports.record(
     external_exports.string().trim().min(1).max(120),
-    external_exports.string().max(2e3)
+    external_exports.string().max(ASK_USER_QUESTIONS_FIELD_VALUE_MAX_LENGTH)
+  ).optional(),
+  // Keys follow the secretRefs convention: fieldId for form fields,
+  // `${optionId}.${inputId}` for option inputs → 120 + 1 + 120 = 241.
+  fieldAttachments: external_exports.record(
+    external_exports.string().trim().min(1).max(241),
+    external_exports.array(external_exports.string().uuid()).min(1).max(5)
   ).optional(),
   // Option-input scope keys are `${optionId}.${inputId}` → 120 + 1 + 120 = 241.
   secretRefs: external_exports.record(
@@ -13698,9 +13737,6 @@ var goalWorkProgressSummarySchema = external_exports.discriminatedUnion("state",
 
 // ../shared/src/goal-action-semantics.ts
 var GOAL_ACTION_INTERACTION_PURPOSE_CODES = [
-  "goal_gap_authority_exception",
-  "goal_gap_observed_effect",
-  "goal_gap_fact_correction",
   "goal_gap_legacy_outcome_attribution",
   "goal_gap_work_purpose_catalog_candidate"
 ];
@@ -16846,12 +16882,14 @@ var companyArtifactsQuerySchema = external_exports.object({
   cursor: external_exports.string().min(1).optional()
 });
 var companyArtifactSchema = external_exports.object({
+  wikiRevisionId: external_exports.string().uuid().nullable().optional(),
   id: external_exports.string().min(1),
   source: companyArtifactSourceSchema,
   mediaKind: companyArtifactMediaKindSchema,
   title: external_exports.string(),
   previewText: external_exports.string().nullable(),
   contentType: external_exports.string().nullable(),
+  originalFilename: external_exports.string().nullable(),
   contentPath: external_exports.string().nullable(),
   openPath: external_exports.string().nullable(),
   downloadPath: external_exports.string().nullable(),
@@ -18044,6 +18082,18 @@ var API = {
   admin: `${API_PREFIX}/admin`
 };
 
+// ../shared/src/mention-context.ts
+var MENTION_CONTEXT_SCHEMA_VERSION = "mirrorx.mention-context.v1";
+var HELIGE_APPLICATION_PROVIDERS = /* @__PURE__ */ new Set(["helige", "helige-app-builder"]);
+var APPLICATION_MENTION_PROVIDERS = /* @__PURE__ */ new Set([
+  ...HELIGE_APPLICATION_PROVIDERS,
+  "amaster-app-builder"
+]);
+var MENTIONED_APPLICATION_SKILL_HINTS = {
+  "helige-app-builder": "application changes/publication",
+  "helige-runtime-cli": "data/entities/files/workflows"
+};
+
 // ../shared/src/config-schema.ts
 var configMetaSchema = external_exports.object({
   version: external_exports.literal(1),
@@ -18480,10 +18530,71 @@ var prerequisiteOperationsSchema = external_exports.object({
   }))
 });
 
+// ../shared/src/mirrorx-message-preferences.ts
+var time = external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "\u8BF7\u8F93\u5165\u6709\u6548\u65F6\u95F4");
+var messagePreferencesSchema = external_exports.object({
+  smsEnabled: external_exports.boolean().default(false),
+  // Historical wire names retained; these rules apply to all channels.
+  smsImmediateAttention: external_exports.boolean().default(false),
+  smsFrequencyHours: external_exports.union([external_exports.literal(24), external_exports.literal(12), external_exports.literal(6), external_exports.literal(1), external_exports.literal(0)]).default(24),
+  phone: external_exports.string().trim().max(24).regex(/^(?:\+?[1-9]\d{5,14})?$/, "\u8BF7\u8F93\u5165\u6709\u6548\u624B\u673A\u53F7\uFF08\u53EF\u5305\u542B\u56FD\u9645\u533A\u53F7\uFF09").default(""),
+  events: external_exports.object({
+    action: external_exports.boolean().default(true),
+    review: external_exports.boolean().default(true),
+    interrupted: external_exports.boolean().default(true),
+    completed: external_exports.boolean().default(true),
+    milestone: external_exports.boolean().default(true),
+    progress: external_exports.boolean().default(true),
+    started: external_exports.boolean().default(false),
+    daily: external_exports.boolean().default(true)
+  }).strict().default({}),
+  // Deprecated: accepted for stored preferences/older clients, no scheduling effect.
+  frequencyMinutes: external_exports.union([external_exports.literal(30), external_exports.literal(60), external_exports.literal(120)]).default(60),
+  dailyTime: time.default("18:00"),
+  timezone: external_exports.string().max(80).refine((value) => {
+    try {
+      new Intl.DateTimeFormat("en", { timeZone: value });
+      return true;
+    } catch {
+      return false;
+    }
+  }, "\u65F6\u533A\u65E0\u6548").default("Asia/Shanghai"),
+  quiet: external_exports.boolean().default(true),
+  quietStart: time.default("22:00"),
+  quietEnd: time.default("08:00"),
+  urgentDuringQuiet: external_exports.boolean().default(false)
+}).strict().refine((value) => !value.smsEnabled || /^(?:\+86)?1[3-9]\d{9}$/.test(value.phone), {
+  message: "\u542F\u7528\u77ED\u4FE1\u524D\u8BF7\u586B\u5199\u6709\u6548\u7684\u4E2D\u56FD\u5927\u9646\u624B\u673A\u53F7",
+  path: ["phone"]
+}).refine((value) => !value.quiet || value.quietStart !== value.quietEnd, {
+  message: "\u514D\u6253\u6270\u5F00\u59CB\u548C\u7ED3\u675F\u65F6\u95F4\u4E0D\u80FD\u76F8\u540C",
+  path: ["quietEnd"]
+});
+
+// ../shared/src/wiki-mentions.ts
+var wikiMentionQuerySchema = external_exports.object({
+  q: external_exports.string().trim().max(200).optional(),
+  cursor: external_exports.string().max(1e3).optional(),
+  limit: external_exports.coerce.number().int().min(1).max(100).optional()
+}).strict();
+var wikiMentionPageSchema = external_exports.object({
+  pageId: external_exports.string().uuid(),
+  revisionId: external_exports.string().uuid(),
+  title: external_exports.string(),
+  path: external_exports.string(),
+  updatedAt: external_exports.string(),
+  contentHash: external_exports.string().regex(/^[a-f0-9]{64}$/),
+  byteSize: external_exports.number().int().nonnegative()
+});
+var wikiMentionListSchema = external_exports.object({
+  pages: external_exports.array(wikiMentionPageSchema),
+  nextCursor: external_exports.string().nullable()
+});
+
 // src/amaster-runtime-daemon.mjs
-import { chmodSync as chmodSync6, copyFileSync as copyFileSync2, existsSync as existsSync18, lstatSync as lstatSync12, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync4, readFileSync as readFileSync18, readdirSync as readdirSync12, realpathSync as realpathSync12, renameSync as renameSync9, rmSync as rmSync10, statSync as statSync12, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync12 } from "node:fs";
-import { arch as arch4, homedir as homedir5, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
-import { basename as basename8, delimiter as delimiter3, dirname as dirname11, extname as extname3, isAbsolute as isAbsolute12, join as join21, relative as relative9, resolve as resolve18 } from "node:path";
+import { chmodSync as chmodSync7, copyFileSync as copyFileSync2, existsSync as existsSync18, lstatSync as lstatSync13, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync5, readFileSync as readFileSync19, readdirSync as readdirSync12, realpathSync as realpathSync12, renameSync as renameSync10, rmSync as rmSync11, statSync as statSync12, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync13 } from "node:fs";
+import { arch as arch4, homedir as homedir6, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
+import { basename as basename8, delimiter as delimiter3, dirname as dirname11, extname as extname3, isAbsolute as isAbsolute12, join as join23, relative as relative9, resolve as resolve19 } from "node:path";
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
 
 // src/amaster-runtime-daemon/common.mjs
@@ -18992,7 +19103,7 @@ async function postRuntimeConnectorJsonWithRetry(config, path, payload, options
     } catch (error) {
       lastError = error;
       if (attempt >= maxAttempts || !retryableRuntimeConnectorPost(error)) throw error;
-      if (delayMs > 0) await new Promise((resolve19) => setTimeout(resolve19, delayMs));
+      if (delayMs > 0) await new Promise((resolve20) => setTimeout(resolve20, delayMs));
     }
   }
   throw lastError;
@@ -19128,7 +19239,7 @@ var MAX_BYTES = 20 * 1024 * 1024;
 var digest = (bytes) => createHash3("sha256").update(bytes).digest("hex");
 function buildCheckpointUpload(checkpointDir, manifest, nativeSession) {
   if (!Array.isArray(manifest?.files) || manifest.files.length > 20) throw new Error("Invalid checkpoint inventory");
-  const root = realpathSync2(join3(checkpointDir, "files"));
+  const root = manifest.files.length > 0 ? realpathSync2(join3(checkpointDir, "files")) : null;
   const paths = /* @__PURE__ */ new Set();
   let total = 0;
   const files = manifest.files.map((file) => {
@@ -19246,6 +19357,7 @@ function installCheckpoint(target, bytes, expected, kind) {
   if (existsSync(target) && (!lstatSync2(target).isDirectory() || lstatSync2(target).isSymbolicLink())) throw new Error("Checkpoint target must be a private directory");
   mkdirSync2(dirname(target), { recursive: true });
   const staging = mkdtempSync2(`${target}.restore-`);
+  mkdirSync2(join4(staging, "files"), { recursive: true, mode: 448 });
   const backup = `${target}.previous-${randomUUID()}`;
   let moved = false;
   try {
@@ -21337,48 +21449,48 @@ var FULL_DIRECT_TYPED_V1_TOOL_NAMES = /* @__PURE__ */ new Set([
 function record5(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
-function requiredString(value, label, fail2) {
-  if (typeof value !== "string" || value.trim() === "") fail2(`${label} is required`);
+function requiredString(value, label, fail3) {
+  if (typeof value !== "string" || value.trim() === "") fail3(`${label} is required`);
   return value.trim();
 }
 function validateDirectTypedMcpCatalog(catalogValue, options = {}) {
   const errorPrefix = typeof options.errorPrefix === "string" && options.errorPrefix ? options.errorPrefix : "direct_typed_mcp_invalid";
-  const fail2 = (detail) => {
+  const fail3 = (detail) => {
     throw new Error(`${errorPrefix}: ${detail}`);
   };
   const admittedToolNames = options.admittedToolNames instanceof Set ? options.admittedToolNames : options.admittedToolNames == null ? null : new Set(options.admittedToolNames);
   const catalog = record5(catalogValue);
   if (catalog.schemaVersion !== DIRECT_TYPED_MCP_CATALOG_SCHEMA_VERSION) {
-    fail2("direct tool catalog schema mismatch");
+    fail3("direct tool catalog schema mismatch");
   }
   const rawTools = Array.isArray(catalog.tools) ? catalog.tools.map(record5) : [];
   const names = /* @__PURE__ */ new Set();
   const exposedNames = /* @__PURE__ */ new Set();
   const tools = rawTools.map((tool) => {
-    const name = requiredString(tool.name, "toolCatalog.tools.name", fail2);
+    const name = requiredString(tool.name, "toolCatalog.tools.name", fail3);
     if (admittedToolNames && !admittedToolNames.has(name) || names.has(name)) {
-      fail2("direct tool catalog name mismatch");
+      fail3("direct tool catalog name mismatch");
     }
     names.add(name);
-    const exposedName = requiredString(tool.exposedName, `toolCatalog.tools.exposedName:${name}`, fail2);
+    const exposedName = requiredString(tool.exposedName, `toolCatalog.tools.exposedName:${name}`, fail3);
     if (!PROVIDER_SAFE_DIRECT_TOOL_NAME.test(exposedName)) {
-      fail2(`direct tool exposed name is unsafe for ${name}`);
+      fail3(`direct tool exposed name is unsafe for ${name}`);
     }
     if (exposedNames.has(exposedName)) {
-      fail2(`direct tool exposed name collision for ${exposedName}`);
+      fail3(`direct tool exposed name collision for ${exposedName}`);
     }
     exposedNames.add(exposedName);
     const inputSchema = record5(tool.inputSchema);
     if (inputSchema.type !== "object" || inputSchema.additionalProperties !== false) {
-      fail2(`direct tool schema is not strict for ${name}`);
+      fail3(`direct tool schema is not strict for ${name}`);
     }
     const schemaHash = stablePiToolSchemaHash(inputSchema);
     if (tool.schemaHash !== schemaHash) {
-      fail2(`direct tool schema hash mismatch for ${name}`);
+      fail3(`direct tool schema hash mismatch for ${name}`);
     }
-    const riskLevel = requiredString(tool.riskLevel, `toolCatalog.tools.riskLevel:${name}`, fail2);
+    const riskLevel = requiredString(tool.riskLevel, `toolCatalog.tools.riskLevel:${name}`, fail3);
     if (!(/* @__PURE__ */ new Set(["read", "write", "destructive"])).has(riskLevel)) {
-      fail2(`direct tool risk level mismatch for ${name}`);
+      fail3(`direct tool risk level mismatch for ${name}`);
     }
     return {
       name,
@@ -21396,7 +21508,7 @@ function validateDirectTypedMcpCatalog(catalogValue, options = {}) {
     schemaHash: tool.schemaHash,
     riskLevel: tool.riskLevel
   })));
-  if (catalog.setHash !== setHash) fail2("direct tool catalog set hash mismatch");
+  if (catalog.setHash !== setHash) fail3("direct tool catalog set hash mismatch");
   return {
     setHash,
     tools: tools.sort((left, right) => left.name.localeCompare(right.name))
@@ -22639,14 +22751,14 @@ async function runInitializationCompletion({ plan, authority, call, sleep, now,
   const receipts = [];
   let stage = "upload";
   let callId;
-  const fail2 = (code, detail) => {
+  const fail3 = (code, detail) => {
     throw Object.assign(new Error(code), { detail });
   };
   async function invoke(name, args) {
-    if (now() >= deadline) fail2("initialization_completion_deadline");
+    if (now() >= deadline) fail3("initialization_completion_deadline");
     let envelope;
     for (let transportFailures = 0; ; ) {
-      if (now() >= deadline) fail2("initialization_completion_deadline");
+      if (now() >= deadline) fail3("initialization_completion_deadline");
       try {
         envelope = await call(name, args, Math.min(45e3, deadline - now()));
         break;
@@ -22659,12 +22771,11 @@ async function runInitializationCompletion({ plan, authority, call, sleep, now,
       }
     }
     const content = envelope?.content;
-    const provider = envelope?.providerReceipt;
-    if (!envelope?.invocationId || provider?.invocationId !== envelope.invocationId || provider?.provider !== "amaster_actions" || !["runId", "commandId", "issueId"].every((key) => authority[key] && provider[key] === authority[key]) || content?.schemaVersion !== "runtime-action-v1" || content?.toolName !== name.replace("runtime_action_", "runtime_action.")) {
-      fail2("initialization_completion_receipt_mismatch");
+    if (!envelope?.invocationId || !content || typeof content !== "object" || content?.toolName !== name.replace("runtime_action_", "runtime_action.")) {
+      fail3("initialization_completion_receipt_mismatch");
     }
     if (envelope.status !== "succeeded" || !["accepted", "pending_reconcile"].includes(content.status)) {
-      fail2("initialization_completion_action_not_accepted", content.error ?? { status: envelope.status });
+      fail3("initialization_completion_action_not_accepted", content.error ?? { status: envelope.status });
     }
     const result2 = content.result;
     await onReceipt(envelope);
@@ -22675,19 +22786,19 @@ async function runInitializationCompletion({ plan, authority, call, sleep, now,
       planId: result2?.planId,
       status: result2?.status
     });
-    if (!result2 || result2.error) fail2("initialization_completion_action_failed", result2?.error);
+    if (!result2 || result2.error) fail3("initialization_completion_action_failed", result2?.error);
     return result2;
   }
   async function settleCall(value, actionType) {
     callId = value.callId;
-    if (!callId || value.actionType !== actionType) fail2("initialization_completion_call_mismatch");
+    if (!callId || value.actionType !== actionType) fail3("initialization_completion_call_mismatch");
     for (let attempt = 0; ; attempt++) {
-      if (value.callId !== callId || value.actionType !== actionType) fail2("initialization_completion_call_mismatch");
+      if (value.callId !== callId || value.actionType !== actionType) fail3("initialization_completion_call_mismatch");
       if (value.status === "succeeded") return value;
       if (!["pending_reconcile", "claimed", "executing"].includes(value.status)) {
-        fail2("initialization_completion_action_incomplete", { status: value.status, error: value.error });
+        fail3("initialization_completion_action_incomplete", { status: value.status, error: value.error });
       }
-      if (now() >= deadline) fail2("initialization_completion_deadline");
+      if (now() >= deadline) fail3("initialization_completion_deadline");
       await sleep(Math.min(1e3 * (attempt + 1), 5e3));
       value = await invoke("runtime_action_status", { callId });
     }
@@ -22696,7 +22807,7 @@ async function runInitializationCompletion({ plan, authority, call, sleep, now,
     const doc = plan.initializationDocument;
     const materialized = plan.initializationDocumentMaterialization;
     if (!plan.planId || !plan.revision || !["planned", "committing", "pending_reconcile", "completed"].includes(plan.status) || materialized?.status !== "materialized" || materialized.planId !== plan.planId || materialized.revision !== plan.revision || materialized.sha256 !== doc?.sha256 || materialized.byteSize !== doc?.byteSize || materialized.path !== doc?.path) {
-      fail2("initialization_completion_invalid_plan");
+      fail3("initialization_completion_invalid_plan");
     }
     const prefix = "initialization-complete:" + plan.planId;
     const { createHash: createHash20 } = await import("node:crypto");
@@ -22717,13 +22828,13 @@ async function runInitializationCompletion({ plan, authority, call, sleep, now,
       }
     }), "upload_artifact");
     if (upload.postcondition?.artifactFinalized !== true || upload.postcondition?.attachmentReadback !== true || upload.postcondition?.workProductReadback !== true || upload.effectResult?.sha256 !== doc.sha256 || upload.effectResult?.byteSize !== doc.byteSize || !upload.effectResult?.attachmentId || !upload.effectResult?.workProductId) {
-      fail2("initialization_completion_artifact_mismatch");
+      fail3("initialization_completion_artifact_mismatch");
     }
     stage = "commit";
     callId = void 0;
     const committed = await invoke("runtime_action_commit", { planId: plan.planId, revision: plan.revision });
     if (committed.planId !== plan.planId || committed.revision !== plan.revision || committed.status !== "completed" || committed.failure || committed.nextActionIndex !== committed.actionCount) {
-      fail2("initialization_completion_plan_incomplete", { status: committed.status, failure: committed.failure });
+      fail3("initialization_completion_plan_incomplete", { status: committed.status, failure: committed.failure });
     }
     stage = "ready";
     const completed = await settleCall(await invoke("runtime_action_submit", {
@@ -22731,7 +22842,7 @@ async function runInitializationCompletion({ plan, authority, call, sleep, now,
       action: { type: "update_parent", status: "done" }
     }), "update_parent");
     if (completed.effectResult?.issueId !== authority.issueId || completed.effectResult?.status !== "done" || completed.postcondition?.issuePersisted !== true || completed.postcondition?.status !== "done" || completed.postcondition?.issueTerminalizationDeferred === true) {
-      fail2("initialization_completion_ready_not_confirmed");
+      fail3("initialization_completion_ready_not_confirmed");
     }
     return {
       status: "completed",
@@ -22817,8 +22928,7 @@ export default function(pi) {
     const result = call?.result;
     const doc = result?.initializationDocument;
     if (envelope?.status !== "succeeded" || call?.status !== "accepted"
-      || call?.schemaVersion !== "runtime-action-v1"
-      || !["runtime_action.plan", "runtime_action.status"].includes(call?.toolName) || !doc) return;
+      || call?.toolName !== event.toolName.replace("runtime_action_", "runtime_action.") || !doc) return;
     let root, parent, file, temp;
     const canonicalName = "organization-plan-" + result.planId + ".md";
     let targetName = canonicalName;
@@ -22968,12 +23078,10 @@ export default function(pi) {
       if (root !== undefined) fs.closeSync(root);
     }
     // Only an explicitly negotiated planning call starts effects. Status/document reads stay reads.
-    const provider = envelope.providerReceipt;
+    // The session token in the run config binds every call to this run's
+    // authority, so receipt authority is established by transport.
     if (completionAuthority && event.toolName === "runtime_action_plan"
-      && result.initializationDocumentMaterialization?.status === "materialized"
-      && provider?.provider === "amaster_actions" && provider.invocationId === envelope.invocationId
-      && provider.planId === result.planId
-      && ["runId", "commandId", "issueId"].every((key) => completionAuthority[key] && provider[key] === completionAuthority[key])) {
+      && result.initializationDocumentMaterialization?.status === "materialized") {
       result.initializationCompletion = await runInitializationCompletion({ plan: result, authority: completionAuthority,
         call: initializationCompletionCall, sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)), now: Date.now,
         // Pi redirects extension stdout.write to stderr. This is an explicit
@@ -23530,25 +23638,20 @@ const terminalActionDispositions = new Map([
   ["schedule_monitor", new Set(["scheduled_monitor"])],
   ["continue_task", new Set(["continuation_scheduled"])],
 ]);
-const terminalToolNames = new Set(["runtime_action.submit", "runtime_action.status"]);
-
-function shouldStopFromReceipt(rawResult) {
-  const expectedRunId = readString(process.env.AMASTER_RUNTIME_RUN_ID);
-  const expectedCommandId = readString(process.env.AMASTER_RUNTIME_COMMAND_ID);
-  const expectedIssueId = readString(process.env.AMASTER_RUNTIME_ISSUE_ID);
-  if (!expectedRunId || !expectedCommandId || !expectedIssueId) return false;
+const terminalToolNames = new Set(["runtime_action_submit", "runtime_action_status"]);
 
+// Receipt authority fields never travel in the executor-facing envelope: within
+// a session every receipt is bound to that session's run/command/issue, so this
+// in-process check trusts the slim receipt by shape and event identity.
+function shouldStopFromReceipt(rawResult, eventToolName) {
   const result = asRecord(rawResult);
   const structured = asRecord(result.structuredContent);
   const providerContent = asRecord(structured.content);
   const providerResult = asRecord(providerContent.result);
   const effectResult = asRecord(providerResult.effectResult);
-  const providerReceipt = asRecord(structured.providerReceipt);
   const invocationId = readString(structured.invocationId);
   const callId = readString(providerResult.callId);
-  const receiptInvocationId = readString(providerReceipt.invocationId);
-  const receiptCallId = readString(providerReceipt.callId);
-  const actionType = readString(providerReceipt.actionType);
+  const actionType = readString(providerResult.actionType);
   const disposition = readString(effectResult.runDisposition);
   const existingOwner = asRecord(effectResult.existingOwner);
   const existingOwnerEpoch = Number(existingOwner.executionEpoch);
@@ -23564,7 +23667,7 @@ function shouldStopFromReceipt(rawResult) {
     && continuationCount > 0
     && Number.isSafeInteger(maxContinuations)
     && continuationCount <= maxContinuations;
-  if (!invocationId || !receiptInvocationId || !callId || !receiptCallId) return false;
+  if (!invocationId || !callId) return false;
 
   const exactQueuedWakeHandoff = disposition === "handoff_existing_live_path"
     && readString(existingOwner.kind) === "queued_wake"
@@ -23577,16 +23680,9 @@ function shouldStopFromReceipt(rawResult) {
   return readString(structured.status) === "succeeded"
     && readString(providerContent.status) === "accepted"
     && ["succeeded", "completed"].includes(readString(providerResult.status) ?? "")
-    && terminalToolNames.has(readString(providerContent.toolName) ?? "")
+    && terminalToolNames.has(readString(eventToolName) ?? "")
     && effectResult.mustEndRun === true
     && Boolean(terminalActionDispositions.get(actionType ?? "")?.has(disposition ?? ""))
-    && readString(providerReceipt.provider) === "amaster_actions"
-    && readString(providerReceipt.status) === "accepted"
-    && receiptInvocationId === invocationId
-    && readString(providerReceipt.runId) === expectedRunId
-    && readString(providerReceipt.commandId) === expectedCommandId
-    && readString(providerReceipt.issueId) === expectedIssueId
-    && receiptCallId === callId
     && (disposition !== "waiting_human"
       || Boolean(readString(effectResult.interactionId) && readString(effectResult.epochKey)))
     && (disposition !== "handoff_existing_live_path"
@@ -23598,7 +23694,7 @@ export default function mirrorxRunTermination(pi) {
   pi.on("tool_result", (event) => {
     if (event.isError === true) return undefined;
     const rawResult = asRecord(event.details).mcpResult;
-    return shouldStopFromReceipt(rawResult) ? { stopAfterTurn: true } : undefined;
+    return shouldStopFromReceipt(rawResult, event.toolName) ? { stopAfterTurn: true } : undefined;
   });
 }
 `;
@@ -23760,6 +23856,7 @@ function createManagedPiMcpProfileApi(options = {}) {
   const SESSION_ROLLOUT_MARKER3 = ".amaster-pi-session-rollout.json";
   const DEFAULT_SESSION_ROLLOUT_TTL_MS3 = 24 * 60 * 60 * 1e3;
   const PI_VERSION_ATTESTATION_TIMEOUT_MS = 3e4;
+  const MANAGED_PI_GOVERNED_MCP_REQUEST_TIMEOUT_MS = 66e4;
   const PI_ATTESTATION_MAX_ATTEMPTS = 2;
   const livePiVersionProbes = /* @__PURE__ */ new Map();
   function record11(value) {
@@ -24562,7 +24659,7 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         schema: tool.inputSchema
       })))
     );
-    const cache = {
+    const cache2 = {
       version: 1,
       servers: {
         [SUPPORTED_SERVER_NAME3]: {
@@ -24577,7 +24674,7 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         }
       }
     };
-    const cacheBytes = Buffer.from(`${JSON.stringify(cache, null, 2)}
+    const cacheBytes = Buffer.from(`${JSON.stringify(cache2, null, 2)}
 `);
     writeOwnedFileAtomic(cachePath, cacheBytes);
     const toolSchemaBytes = input.directCatalog.tools.reduce((total, tool) => total + Buffer.byteLength(JSON.stringify({
@@ -24680,6 +24777,7 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         url: gatewayUrl,
         headers: { Authorization: `Bearer ${sessionToken}`, ...headers },
         lifecycle: directCatalog ? "lazy" : "eager",
+        requestTimeoutMs: MANAGED_PI_GOVERNED_MCP_REQUEST_TIMEOUT_MS,
         ...directCatalog ? { exposeResources: false, directTools: directToolNames } : {}
       };
       const config = {
@@ -24987,6 +25085,7 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         url: gatewayUrl,
         headers: { Authorization: `Bearer ${sessionToken}`, ...headers },
         lifecycle: directCatalog ? "lazy" : "eager",
+        requestTimeoutMs: MANAGED_PI_GOVERNED_MCP_REQUEST_TIMEOUT_MS,
         ...directCatalog ? { exposeResources: false, directTools: directToolNames } : {}
       };
       const config = {
@@ -26564,7 +26663,6 @@ function governedMcpToolResult(structuredContent) {
   if (!status) return null;
   const invocationId = readString(structuredContent.invocationId);
   const providerContent = asRecord(structuredContent.content);
-  const providerReceipt = asRecord(structuredContent.providerReceipt);
   const providerStatus = readString(providerContent.status);
   const providerResult = asRecord(providerContent.result);
   const effectResult = asRecord(providerResult.effectResult);
@@ -26598,13 +26696,9 @@ function governedMcpToolResult(structuredContent) {
     ...runtimeActionResultStatus ? { resultStatus: runtimeActionResultStatus } : {},
     ...readString(providerResult.errorCode) ?? readString(runtimeActionError.code) ? { errorCode: readString(providerResult.errorCode) ?? readString(runtimeActionError.code) } : {}
   } : null;
-  const receiptActionType = readString(providerReceipt.actionType);
+  const actionType = readString(providerResult.actionType);
   const runDisposition = readString(effectResult.runDisposition);
-  const expectedDispositions = PI_TERMINATING_RUNTIME_ACTION_TO_DISPOSITION.get(receiptActionType ?? "");
-  const receiptRunId = readString(providerReceipt.runId);
-  const receiptCommandId = readString(providerReceipt.commandId);
-  const receiptIssueId = readString(providerReceipt.issueId);
-  const receiptCallId = readString(providerReceipt.callId);
+  const expectedDispositions = PI_TERMINATING_RUNTIME_ACTION_TO_DISPOSITION.get(actionType ?? "");
   const interactionId = readString(effectResult.interactionId);
   const epochKey = readString(effectResult.epochKey);
   const existingOwner = asRecord(effectResult.existingOwner);
@@ -26620,15 +26714,12 @@ function governedMcpToolResult(structuredContent) {
   const exactQueuedWakeHandoff = runDisposition === "handoff_existing_live_path" && readString(existingOwner.kind) === "queued_wake" && Boolean(readString(existingOwner.id)) && ["pending_dispatch", "queued", "deferred_issue_execution"].includes(
     readString(existingOwner.status) ?? ""
   ) && Number.isSafeInteger(existingOwnerEpoch) && existingOwnerEpoch > 0 && readString(existingOwner.nextAction) === "end_current_run";
-  const terminalRunDisposition = status === "succeeded" && providerStatus === "accepted" && PI_TERMINAL_RUNTIME_ACTION_STATUSES.has(runtimeActionResultStatus ?? "") && PI_TERMINATING_RUNTIME_ACTION_TOOLS.has(runtimeActionToolName ?? "") && effectResult.mustEndRun === true && Boolean(expectedDispositions?.has(runDisposition ?? "")) && invocationId && readString(providerReceipt.provider) === "amaster_actions" && readString(providerReceipt.invocationId) === invocationId && readString(providerReceipt.status) === "accepted" && receiptRunId && receiptCommandId && receiptIssueId && runtimeActionCallId && receiptCallId === runtimeActionCallId && (runDisposition !== "waiting_human" || Boolean(interactionId && epochKey)) && (runDisposition !== "handoff_existing_live_path" || Boolean(epochKey && exactQueuedWakeHandoff)) && (runDisposition !== "continuation_scheduled" || Boolean(exactContinuation)) ? {
+  const terminalRunDisposition = status === "succeeded" && providerStatus === "accepted" && PI_TERMINAL_RUNTIME_ACTION_STATUSES.has(runtimeActionResultStatus ?? "") && PI_TERMINATING_RUNTIME_ACTION_TOOLS.has(runtimeActionToolName ?? "") && effectResult.mustEndRun === true && Boolean(expectedDispositions?.has(runDisposition ?? "")) && invocationId && runtimeActionCallId && (runDisposition !== "waiting_human" || Boolean(interactionId && epochKey)) && (runDisposition !== "handoff_existing_live_path" || Boolean(epochKey && exactQueuedWakeHandoff)) && (runDisposition !== "continuation_scheduled" || Boolean(exactContinuation)) ? {
     disposition: runDisposition,
-    actionType: receiptActionType,
+    actionType,
     toolName: runtimeActionToolName,
     invocationId,
     callId: runtimeActionCallId,
-    runId: receiptRunId,
-    commandId: receiptCommandId,
-    issueId: receiptIssueId,
     ...interactionId ? { interactionId } : {},
     ...epochKey ? { epochKey } : {},
     ...exactContinuation ? {
@@ -26703,10 +26794,7 @@ function terminatingRunDispositionEvidence(results, expected = {}) {
   const expectedCommandId = readString(expected.commandId);
   const expectedIssueId = readString(expected.issueId);
   if (!expectedRunId || !expectedCommandId || !expectedIssueId) return null;
-  const result2 = (Array.isArray(results) ? results : []).map(asRecord).find((entry) => {
-    const disposition2 = asRecord(entry.terminalRunDisposition);
-    return readString(entry.status) === "succeeded" && readString(disposition2.runId) === expectedRunId && readString(disposition2.commandId) === expectedCommandId && readString(disposition2.issueId) === expectedIssueId;
-  });
+  const result2 = (Array.isArray(results) ? results : []).map(asRecord).find((entry) => readString(entry.status) === "succeeded" && Object.keys(asRecord(entry.terminalRunDisposition)).length > 0);
   if (!result2) return null;
   const disposition = asRecord(result2.terminalRunDisposition);
   const existingOwner = asRecord(disposition.existingOwner);
@@ -28228,7 +28316,7 @@ function maybeCapturePiMessage(event, messages, usage) {
   }
   return capturedAssistantOutput;
 }
-function piMcpToolResults(event, expectedAuthority = null) {
+function piMcpToolResults(event) {
   const results = [];
   const seen = /* @__PURE__ */ new Set();
   const retain = (parsed) => {
@@ -28257,15 +28345,7 @@ function piMcpToolResults(event, expectedAuthority = null) {
         const invocationId = readString(directStructuredContent.invocationId);
         const status = readString(directStructuredContent.status);
         if (!invocationId || !status) continue;
-        const providerReceipt = asRecord(directStructuredContent.providerReceipt);
-        const trustedProviderReceipt = readString(providerReceipt.provider) === "amaster_actions" && readString(providerReceipt.invocationId) === invocationId && Boolean(readString(providerReceipt.status));
-        retain(governedMcpToolResult(trustedProviderReceipt ? directStructuredContent : {
-          invocationId,
-          status,
-          // Never let a receipt-free success satisfy approved-action
-          // completion; non-success states remain useful for control flow.
-          ...status === "succeeded" ? { content: { status: "blocked" } } : {}
-        }));
+        retain(governedMcpToolResult(directStructuredContent));
       } catch {
       }
     }
@@ -28283,11 +28363,10 @@ function piMcpToolResults(event, expectedAuthority = null) {
   if (readString(event?.type) === "tool_execution_end") {
     retainMcpResult(event?.result);
   }
-  if (readString(event?.type) === "mirrorx_initialization_action_receipt" && expectedAuthority) {
+  if (readString(event?.type) === "mirrorx_initialization_action_receipt") {
     const receipt = asRecord(event.receipt);
-    const provider = asRecord(receipt.providerReceipt);
     const content = asRecord(receipt.content);
-    if (content.schemaVersion === "runtime-action-v1" && ["runtime_action.submit", "runtime_action.status", "runtime_action.commit"].includes(content.toolName) && ["runId", "commandId", "issueId"].every((key) => readString(expectedAuthority[key]) && provider[key] === expectedAuthority[key])) {
+    if (readString(receipt.invocationId) && readString(receipt.status) && readString(content.status)) {
       retainMcpResult({ details: { server: "amaster" }, content: [{ type: "text", text: JSON.stringify(receipt) }] });
     }
   }
@@ -28618,9 +28697,9 @@ function parseOpenCodeJsonl(stdout) {
     if (event.type === "step_finish") {
       const part = asRecord(event.part);
       const tokens = asRecord(part.tokens);
-      const cache = asRecord(tokens.cache);
+      const cache2 = asRecord(tokens.cache);
       usage.inputTokens += readNumber(tokens.input, 0);
-      usage.cachedInputTokens += readNumber(cache.read, 0);
+      usage.cachedInputTokens += readNumber(cache2.read, 0);
       usage.outputTokens += readNumber(tokens.output, 0) + readNumber(tokens.reasoning, 0);
       continue;
     }
@@ -29019,7 +29098,7 @@ function createRunCompletionRuntimePorts(input) {
     outbox,
     limits,
     now = () => (/* @__PURE__ */ new Date()).toISOString(),
-    sleep = (delayMs) => new Promise((resolve19) => setTimeout(resolve19, delayMs)),
+    sleep = (delayMs) => new Promise((resolve20) => setTimeout(resolve20, delayMs)),
     diagnostic = (message) => process.stderr.write(`${message}
 `)
   } = input;
@@ -30247,6 +30326,30 @@ function fixedRules(input, includeIssueLine, runContract = "producer") {
     "- A URL mentioned only in an Issue document, comment, assistant message, or provider tool output is not a collected work product. Persist the typed work product and use its returned workProductId as the durable receipt before marking the task done."
   ].filter(Boolean).join("\n");
 }
+function conversationAgentRosterText(context) {
+  const roster = asRecord(context.paperclipCompanyAgentRoster);
+  const agents = Array.isArray(roster.agents) ? roster.agents : [];
+  if (agents.length === 0) return "";
+  const lines = agents.map((agent) => {
+    const record11 = asRecord(agent);
+    const name = readString(record11.name) ?? "unknown";
+    const id = readString(record11.id) ?? "unknown";
+    const role = readString(record11.role);
+    const title = readString(record11.title);
+    const details = [
+      role ? `role: ${role}` : "",
+      title ? `title: ${title}` : ""
+    ].filter(Boolean).join(", ");
+    const status = readString(record11.status);
+    return `- ${name} (agentId: ${id})${details ? ` \u2014 ${details}` : ""}${status && status !== "active" ? ` [${status}]` : ""}`;
+  });
+  return [
+    "Company agent roster:",
+    'When the user refers to a Company employee by name, role, or pronoun (e.g. @-mention or "\u95EE\u4ED6"), resolve them from this roster and invoke them with the invoke_employee runtime action using their exact agentId. Never substitute a local subagent for a Company employee.',
+    ...lines,
+    ...roster.truncated === true ? ["(roster truncated; use the governed member-list read for the full roster)"] : []
+  ].join("\n");
+}
 function compileConversationPrompt(input, context, maxChars) {
   const mode = promptContextMode(input);
   const taskText = readString(input.taskMarkdown) ?? "";
@@ -30267,9 +30370,12 @@ function compileConversationPrompt(input, context, maxChars) {
   if (!userPrompt) throw new Error("conversation_user_message_missing");
   const rawSections = [
     { name: "task", title: "Conversation History", priority: 90, sourceRef: "conversation", originalContent: taskText, content: mode === "cold" ? taskText : "", truncationReason: mode === "cold" ? null : "mode_selection" },
+    ...readString(input.browserCredentialEnv) ? [{ name: "browser_credential_env", title: "Browser Credential Access", priority: 100, sourceRef: `command:${input.commandId}:browser-credentials`, content: readString(input.browserCredentialEnv) }] : [],
     { name: "runtime_safety", title: "Runtime Safety", priority: 100, sourceRef: `command:${input.commandId}`, content: runtimeSafety },
     ...piGovernedTools ? [{ name: "pi_governed_tools", title: "Pi Governed Tools", priority: 96, sourceRef: "amaster_governed_mcp_direct_typed_contract", content: piGovernedTools }] : [],
     { name: "agent_instructions", title: "Agent Instructions", priority: 100, sourceRef: "agent_instructions_bundle", content: readString(input.agentInstructions) ?? "" },
+    { name: "agent_roster", title: "Company Agent Roster", priority: 86, sourceRef: "company_agent_roster", content: conversationAgentRosterText(context) },
+    { name: "mention_context", title: "Mentioned Context", priority: 85, sourceRef: "paperclip_mention_context", content: readString(input.mentionContextText) ?? "" },
     { name: "attachments", title: "Materialized Inputs", priority: 80, sourceRef: "materialized_attachments", content: readString(input.attachmentsText) ?? "" },
     { name: "raw_snapshot", title: "Raw Context Snapshot", priority: 0, sourceRef: `run:${input.runId ?? "unknown"}`, originalChars: jsonCharLength(context), content: "", truncationReason: "on_demand_large_object" }
   ];
@@ -30959,9 +31065,12 @@ var COMPANY_INITIALIZATION_PRE_AUTHORITY_SECTIONS = /* @__PURE__ */ new Set([
   "verified_company_context",
   "governed_reads",
   "optional_task_wiki_context",
+  "mention_context",
+  "agent_roster",
   "attachments"
 ]);
 var COMPANY_INITIALIZATION_POST_AUTHORITY_SECTIONS = /* @__PURE__ */ new Set([
+  "browser_credential_env",
   "runtime_rules",
   "runtime_authorization",
   "runtime_decomposition_requirement",
@@ -31135,6 +31244,8 @@ var CONTEXT_AVAILABILITY_SECTION_TITLES = Object.freeze({
   governed_reads: "Governed External Reads",
   optional_task_wiki_context: "Optional Company Wiki Context",
   agent_instructions: "Agent Instructions",
+  mention_context: "Mentioned Context",
+  agent_roster: "Company Agent Roster",
   attachments: "Materialized Inputs",
   on_demand_refs: "On-demand Context References",
   raw_snapshot: "Raw Context Snapshot"
@@ -31390,6 +31501,7 @@ ${resolvedDependencies.details.content}` : resolvedDependencies.details.content
   } : fallbackTemplateCatalog;
   const rawSections = [
     { name: "recovery_instruction", title: "Recovery Instruction", priority: 100, sourceRef: `run:${input.runId ?? "unknown"}`, content: completeRecoveryInstruction, truncationReason: completeRecoveryInstruction ? null : "mode_selection" },
+    ...readString(input.browserCredentialEnv) ? [{ name: "browser_credential_env", title: "Browser Credential Access", priority: 100, sourceRef: `command:${input.commandId}:browser-credentials`, content: readString(input.browserCredentialEnv) }] : [],
     { name: "approval_continuation", title: "Approved Runtime Action Continuation", priority: 100, sourceRef: `run:${input.runId ?? "unknown"}`, content: approvalContinuationText(input), truncationReason: mode === "continuation" ? null : "mode_selection" },
     ...continuationNextAction ? [{ name: "continuation_next_action", title: "Authoritative Continuation Next Action", priority: 100, ...continuationNextAction }] : [],
     { name: "wake_comments", title: wakeDeltaTitle, priority: interactionResolution ? 99 : 95, sourceRef: wakeDeltaSourceRefs, originalContent: wakeDeltaOriginal, content: wakeDeltaContent, truncationReason: commentsSelected ? null : "duplicate_task_context" },
@@ -31431,6 +31543,7 @@ ${resolvedDependencies.details.content}` : resolvedDependencies.details.content
     ...optionalTaskWikiContext ? [optionalTaskWikiContext] : [],
     ...runtimeTemplateCatalog ? [{ name: "runtime_template_catalog", title: "Runtime Template Catalog", priority: 100, ...runtimeTemplateCatalog }] : [],
     { name: "agent_instructions", title: "Agent Instructions", priority: 100, sourceRef: "agent_instructions_bundle", content: readString(input.agentInstructions) ?? "" },
+    { name: "mention_context", title: "Mentioned Context", priority: 85, sourceRef: "paperclip_mention_context", content: readString(input.mentionContextText) ?? "" },
     { name: "attachments", title: "Materialized Inputs", priority: 80, sourceRef: "materialized_attachments", content: readString(input.attachmentsText) ?? "" },
     {
       name: "on_demand_refs",
@@ -31927,12 +32040,17 @@ var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "run_terminate",
   "logs_cost_workspace_status",
   "browser_credential_auth_transaction_v1",
+  "browser_credential_env_read_v1",
   "execution_lanes_v1",
   "mirrorx_initialization_context_v1",
   "mirrorx_initialization_completion_v1",
   "native_session_checkpoint_v1"
 ]);
 var DYNAMIC_READINESS = Object.freeze({
+  browser_credential_env_read_v1: {
+    reasonCode: "browser_credential_env_runtime_incomplete",
+    ready: (input) => input.executors.some((executor) => executor.kind === "pi") && input.browserCredentialEnv?.extension === true && input.runnerKind === "cloud_managed" && Number.isSafeInteger(input.piExecutorUid) && Number.isSafeInteger(input.piExecutorGid) && input.piExecutorUid > 0 && input.piExecutorGid > 0 && Number.isSafeInteger(input.connectorUid) && input.piExecutorUid !== input.connectorUid
+  },
   browser_credential_auth_transaction_v1: {
     reasonCode: "browser_credential_auth_runtime_incomplete",
     ready: (input) => {
@@ -32593,10 +32711,150 @@ function sameCredentialBrowserTcb(value) {
   return value && typeof value === "object" && Object.entries(CREDENTIAL_BROWSER_TCB).every(([key, expected]) => value[key] === expected) && Object.keys(value).length === Object.keys(CREDENTIAL_BROWSER_TCB).length;
 }
 
+// src/amaster-runtime-daemon/browser-credential-env-readiness.mjs
+import { lstatSync as lstatSync9, readFileSync as readFileSync13 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { join as join16 } from "node:path";
+var CACHE_TTL_MS = 5e3;
+var cache = /* @__PURE__ */ new Map();
+function inspectBrowserCredentialEnvReadiness(env = process.env) {
+  const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join16(homedir5(), ".pi", "agent")).trim();
+  const now = Date.now();
+  const cached = cache.get(home);
+  if (cached && cached.expiresAt > now) return { ...cached.readiness };
+  const extensionPath = join16(home, "extensions", "browser-credential-env.mjs");
+  let extension = false;
+  try {
+    const stat = lstatSync9(extensionPath);
+    const source = stat.isFile() && !stat.isSymbolicLink() ? readFileSync13(extensionPath, "utf8") : "";
+    extension = /\bname\s*:\s*["']browser_read_credential["']/u.test(source) && /\bPI_AGENT_BROWSER_CREDENTIAL_ENV_FILE\b/u.test(source);
+  } catch {
+    extension = false;
+  }
+  const readiness = { extension };
+  cache.set(home, { readiness, expiresAt: now + CACHE_TTL_MS });
+  return { ...readiness };
+}
+
+// src/amaster-runtime-daemon/browser-credential-env.mjs
+import { chmodSync as chmodSync5, mkdtempSync as mkdtempSync3, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join17, resolve as resolve11 } from "node:path";
+var BROWSER_CREDENTIAL_ENV_CAPABILITY = "browser_credential_env_read_v1";
+var BROWSER_CREDENTIAL_PRIVATE_CAPABILITY = "browser_credential_auth_transaction_v1";
+var BROWSER_CREDENTIAL_ENV_FILE = "PI_AGENT_BROWSER_CREDENTIAL_ENV_FILE";
+var BROWSER_CREDENTIAL_USERNAME_KEY = "BROWSER_USERNAME";
+var BROWSER_CREDENTIAL_PASSWORD_KEY = "BROWSER_PASSWORD";
+function exactOrigin2(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && !url.username && !url.password && url.pathname === "/" && !url.search && !url.hash && value === url.origin ? url.origin : null;
+  } catch {
+    return null;
+  }
+}
+function fail2(code) {
+  const error = new Error(code);
+  error.code = code;
+  throw error;
+}
+function browserCredentialPresentation(command) {
+  const refs = Array.isArray(command?.payload?.browserCredentialRefs) ? command.payload.browserCredentialRefs : [];
+  if (refs.length === 0) return null;
+  const capabilities = new Set(Array.isArray(command?.requiredCapabilities) ? command.requiredCapabilities : []);
+  const envRequested = capabilities.has(BROWSER_CREDENTIAL_ENV_CAPABILITY);
+  const privateRequested = capabilities.has(BROWSER_CREDENTIAL_PRIVATE_CAPABILITY);
+  if (envRequested && privateRequested) fail2("browser_credential_capability_conflict");
+  if (envRequested) return "model_visible_env";
+  if (privateRequested) return "private_channel";
+  fail2("browser_credential_capability_required");
+}
+function browserCredentialEnvPlan(command, presentation = browserCredentialPresentation(command)) {
+  if (presentation !== "model_visible_env") return null;
+  const refs = command.payload.browserCredentialRefs;
+  const passwordRefs = refs.filter((ref2) => ref2?.credentialRole === "password");
+  const usernameRefs = refs.filter((ref2) => ref2?.credentialRole === "username");
+  if (passwordRefs.length !== 1 || usernameRefs.length > 1 || passwordRefs.length + usernameRefs.length !== refs.length) {
+    fail2("browser_credential_env_ref_set_invalid");
+  }
+  const origin = exactOrigin2(passwordRefs[0]?.authenticationOrigin);
+  if (!origin || refs.some((ref2) => ref2?.commandId !== command?.commandId || ref2?.authenticationOrigin !== origin || ref2?.targetOrigin !== origin)) {
+    fail2("browser_credential_env_origin_mismatch");
+  }
+  const entries = [
+    ...usernameRefs.map((ref2) => ({ ref: ref2, key: BROWSER_CREDENTIAL_USERNAME_KEY, controlSemantic: "username" })),
+    { ref: passwordRefs[0], key: BROWSER_CREDENTIAL_PASSWORD_KEY, controlSemantic: "password" }
+  ];
+  const availableKeys = entries.map((entry) => entry.key);
+  return Object.freeze({
+    origin,
+    entries: Object.freeze(entries),
+    promptText: [
+      `Credentials saved for ${origin} are available only for this command.`,
+      `Call browser_read_credential with key ${BROWSER_CREDENTIAL_PASSWORD_KEY}${usernameRefs.length > 0 ? ` and ${BROWSER_CREDENTIAL_USERNAME_KEY}` : ""}, then use the ordinary browser fill and click tools.`,
+      "The returned values are intentionally model-visible under the approved runner .env design. Do not echo them in comments, documents, artifacts, or the final response.",
+      "Use these credentials only at the exact origin above. If the login redirects to another origin or the expected controls are absent, stop and request human assistance rather than reusing the values elsewhere."
+    ].join("\n"),
+    availableKeys: Object.freeze(availableKeys)
+  });
+}
+function dotenvQuotedValue(value) {
+  if (value.includes("\0")) fail2("browser_credential_env_value_invalid");
+  return `"${value.replace(/[\\"\n\r\t$`]/gu, (char) => ({
+    "\\": "\\\\",
+    '"': '\\"',
+    "\n": "\\n",
+    "\r": "\\r",
+    "	": "\\t",
+    "$": "\\$",
+    "`": "\\`"
+  })[char])}"`;
+}
+async function materializeBrowserCredentialEnv(plan, options) {
+  if (!plan || typeof options?.consume !== "function") fail2("browser_credential_env_plan_required");
+  const rawRunDir = String(options.runDir ?? "").trim();
+  if (!rawRunDir) fail2("browser_credential_env_run_dir_invalid");
+  const runDir = resolve11(rawRunDir);
+  const credentialDir = mkdtempSync3(join17(runDir, ".browser-credentials-"));
+  chmodSync5(credentialDir, 448);
+  const targetPath = join17(credentialDir, "credentials.env");
+  const temporaryPath = join17(credentialDir, ".credentials.env.tmp");
+  const buffers = [];
+  const protectedValues = [];
+  try {
+    const lines = [];
+    for (const entry of plan.entries) {
+      const consumed = await options.consume(entry.ref, entry.controlSemantic);
+      const valueBuffer = Buffer.isBuffer(consumed) ? consumed : Buffer.from(String(consumed), "utf8");
+      buffers.push(valueBuffer);
+      if (valueBuffer.length === 0 || valueBuffer.length > 16 * 1024) fail2("browser_credential_env_value_invalid");
+      const value = valueBuffer.toString("utf8");
+      if (!protectedValues.includes(value)) protectedValues.push(value);
+      lines.push(`${entry.key}=${dotenvQuotedValue(value)}`);
+    }
+    writeFileSync11(temporaryPath, `${lines.join("\n")}
+`, { encoding: "utf8", mode: 384, flag: "wx" });
+    renameSync8(temporaryPath, targetPath);
+    chmodSync5(targetPath, 384);
+    return {
+      dirPath: credentialDir,
+      filePath: targetPath,
+      protectedValues,
+      cleanup() {
+        rmSync9(credentialDir, { recursive: true, force: true });
+      }
+    };
+  } catch (error) {
+    rmSync9(credentialDir, { recursive: true, force: true });
+    throw error;
+  } finally {
+    for (const buffer of buffers) buffer.fill(0);
+  }
+}
+
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
 import { createHash as createHash14 } from "node:crypto";
-import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync4, lstatSync as lstatSync9, openSync as openSync4, readFileSync as readFileSync13, realpathSync as realpathSync10 } from "node:fs";
-import { isAbsolute as isAbsolute8, relative as relative6, resolve as resolve11 } from "node:path";
+import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync4, lstatSync as lstatSync10, openSync as openSync4, readFileSync as readFileSync14, realpathSync as realpathSync10 } from "node:fs";
+import { isAbsolute as isAbsolute8, relative as relative6, resolve as resolve12 } from "node:path";
 var SHA256_PATTERN = /^[a-f0-9]{64}$/;
 function requiredString2(value, name) {
   if (typeof value !== "string" || !value.trim()) throw new Error(`Runtime Artifact ${name} is required`);
@@ -32615,10 +32873,10 @@ function sameFileSnapshot(left, right) {
   return left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeMs === right.mtimeMs && left.ctimeMs === right.ctimeMs;
 }
 function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime workspace file", options = {}) {
-  const root = realpathSync10(resolve11(rootPath));
+  const root = realpathSync10(resolve12(rootPath));
   const relativePath = ownedRelativePath(sourceRelativePath);
-  const sourcePath = resolve11(root, relativePath);
-  const pathStat = lstatSync9(sourcePath);
+  const sourcePath = resolve12(root, relativePath);
+  const pathStat = lstatSync10(sourcePath);
   if (!pathStat.isFile() || pathStat.isSymbolicLink() || !pathWithin2(realpathSync10(sourcePath), root)) {
     throw new Error(`${label} source is not an owned regular file`);
   }
@@ -32647,10 +32905,10 @@ function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime w
         );
       }
     }
-    const body = readFileSync13(descriptor);
+    const body = readFileSync14(descriptor);
     options.afterRead?.({ sourcePath, descriptor });
     const after = fstatSync4(descriptor);
-    const pathAfter = lstatSync9(sourcePath);
+    const pathAfter = lstatSync10(sourcePath);
     if (!sameFileSnapshot(before, after) || !sameFileSnapshot(pathAfter, after) || !pathAfter.isFile() || pathAfter.isSymbolicLink() || !pathWithin2(realpathSync10(sourcePath), root) || body.length !== after.size) {
       throw new Error(`${label} source changed during the governed read`);
     }
@@ -32975,7 +33233,7 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 // src/amaster-runtime-daemon/workspace-guard.mjs
 import { createHash as createHash16 } from "node:crypto";
 import { existsSync as existsSync13, mkdirSync as mkdirSync10, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
-import { basename as basename6, join as join16, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve12 } from "node:path";
+import { basename as basename6, join as join18, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve13 } from "node:path";
 function pathWithin3(candidate, root) {
   const rel = relative7(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute9(rel);
@@ -32984,10 +33242,10 @@ function resolveWorkspaceCwd(config, command) {
   const payload = asRecord(command.payload);
   const requested = readString(payload.workspacePath);
   const fallback = config.workspaceBindings[0] ?? process.cwd();
-  const cwd = realpathSync11(resolve12(expandHomePath(requested ?? fallback)));
+  const cwd = realpathSync11(resolve13(expandHomePath(requested ?? fallback)));
   const allowlist = config.workspaceBindings.flatMap((entry) => {
     try {
-      return [realpathSync11(resolve12(expandHomePath(entry)))];
+      return [realpathSync11(resolve13(expandHomePath(entry)))];
     } catch {
       return [];
     }
@@ -33030,7 +33288,7 @@ function workspaceLabel(sourceWorkspacePath, payload) {
   return readString(payload.workspaceName) ?? readString(payload.projectName) ?? readString(context.projectName) ?? basename6(sourceWorkspacePath) ?? "workspace";
 }
 function workspacesRoot(config) {
-  const root = resolve12(expandHomePath(config.runtimeWorkspacesRoot ?? "~/.amaster-employee/workspaces"));
+  const root = resolve13(expandHomePath(config.runtimeWorkspacesRoot ?? "~/.amaster-employee/workspaces"));
   mkdirSync10(root, { recursive: true });
   return realpathSync11(root);
 }
@@ -33044,9 +33302,9 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
   const workspaceKey = `${safeSegment(workspaceLabel(sourceWorkspacePath, payload), "workspace")}-${shortHash(sourceWorkspacePath)}`;
   const issueKey = `${safeSegment(issueLabel(command, payload), "issue")}-${shortHash(issueId, 8)}`;
   const runKey = `${safeSegment(runId, "run")}-${shortHash(runId, 8)}`;
-  const runDir = join16(root, workspaceKey, issueKey, runKey);
-  const cwd = join16(runDir, "workdir");
-  const executorHome = join16(runDir, "executors", safeSegment(executorKind, "executor"));
+  const runDir = join18(root, workspaceKey, issueKey, runKey);
+  const cwd = join18(runDir, "workdir");
+  const executorHome = join18(runDir, "executors", safeSegment(executorKind, "executor"));
   mkdirSync10(cwd, { recursive: true });
   mkdirSync10(executorHome, { recursive: true });
   const workspace = {
@@ -33071,11 +33329,11 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
 
 // src/amaster-runtime-daemon/workspace-gc.mjs
 import { existsSync as existsSync14, readdirSync as readdirSync8, statSync as statSync8 } from "node:fs";
-import { join as join17, resolve as resolve13 } from "node:path";
+import { join as join19, resolve as resolve14 } from "node:path";
 function readIsoTime(value) {
   if (typeof value !== "string" || !value.trim()) return null;
-  const time = new Date(value).getTime();
-  return Number.isFinite(time) ? time : null;
+  const time2 = new Date(value).getTime();
+  return Number.isFinite(time2) ? time2 : null;
 }
 function safeManifestString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
@@ -33094,7 +33352,7 @@ function walkWorkdirs(root) {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join17(current, entry.name);
+      const fullPath = join19(current, entry.name);
       if (entry.name === "workdir" && existsSync14(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -33126,7 +33384,7 @@ function directorySizeBytes(path) {
         continue;
       }
       for (const entry of entries) {
-        stack.push(join17(current, entry.name));
+        stack.push(join19(current, entry.name));
       }
       continue;
     }
@@ -33153,7 +33411,7 @@ function summarizeWorkdir(path, manifest, nowMs) {
   };
 }
 function planManagedWorkspaceGcDryRun(input) {
-  const root = resolve13(String(input.root ?? ""));
+  const root = resolve14(String(input.root ?? ""));
   const now = input.now instanceof Date ? input.now : /* @__PURE__ */ new Date();
   const nowMs = now.getTime();
   const ttlHours = Math.max(1, Number(input.ttlHours ?? 72));
@@ -33201,21 +33459,21 @@ function planManagedWorkspaceGcDryRun(input) {
 import { createHash as createHash17 } from "node:crypto";
 import {
   accessSync,
-  chmodSync as chmodSync5,
+  chmodSync as chmodSync6,
   constants as constants4,
   existsSync as existsSync15,
-  lstatSync as lstatSync10,
+  lstatSync as lstatSync11,
   mkdirSync as mkdirSync11,
-  mkdtempSync as mkdtempSync3,
-  readFileSync as readFileSync14,
+  mkdtempSync as mkdtempSync4,
+  readFileSync as readFileSync15,
   readdirSync as readdirSync9,
-  renameSync as renameSync8,
-  rmSync as rmSync9,
+  renameSync as renameSync9,
+  rmSync as rmSync10,
   statSync as statSync9,
   unlinkSync as unlinkSync2,
-  writeFileSync as writeFileSync11
+  writeFileSync as writeFileSync12
 } from "node:fs";
-import { dirname as dirname9, extname, isAbsolute as isAbsolute10, join as join18, parse as parse4, resolve as resolve14, sep as sep4 } from "node:path";
+import { dirname as dirname9, extname, isAbsolute as isAbsolute10, join as join20, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PRESET_TEMPLATE_MANIFEST_FILE = ".mirrorx-preset-templates.json";
 var MAX_PRESET_TEMPLATE_FILES = 256;
@@ -33226,7 +33484,7 @@ function sha2562(value) {
 }
 function lstatIfExists(path) {
   try {
-    return lstatSync10(path);
+    return lstatSync11(path);
   } catch (error) {
     if (error?.code === "ENOENT") return null;
     throw error;
@@ -33241,7 +33499,7 @@ function modeAllows(stat, identity, ownerBit, groupBit, otherBit) {
 function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
   if (!identity) {
     accessSync(targetDir, constants4.R_OK | constants4.X_OK);
-    for (const name of fileNames) accessSync(join18(targetDir, name), constants4.R_OK);
+    for (const name of fileNames) accessSync(join20(targetDir, name), constants4.R_OK);
     return;
   }
   let current = targetDir;
@@ -33259,7 +33517,7 @@ function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
     throw new Error(`preset_template_executor_catalog_unreadable: ${targetDir}`);
   }
   for (const name of fileNames) {
-    const path = join18(targetDir, name);
+    const path = join20(targetDir, name);
     const stat = statSync9(path);
     if (!stat.isFile() || !modeAllows(stat, identity, 256, 32, 4)) {
       throw new Error(`preset_template_executor_file_unreadable: ${name}`);
@@ -33275,7 +33533,7 @@ function validTemplateName(value) {
 }
 function readManifest(manifestPath, { strict }) {
   try {
-    const parsed = JSON.parse(readFileSync14(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync15(manifestPath, "utf8"));
     if (parsed?.schemaVersion !== 1 || !Array.isArray(parsed.files)) {
       throw new Error("preset_template_bundle_manifest_invalid");
     }
@@ -33303,12 +33561,12 @@ function readManifest(manifestPath, { strict }) {
 }
 function verifiedBundleFiles(sourceDir, manifest) {
   return manifest.files.map((entry) => {
-    const sourcePath = join18(sourceDir, entry.name);
-    const stat = lstatSync10(sourcePath);
+    const sourcePath = join20(sourceDir, entry.name);
+    const stat = lstatSync11(sourcePath);
     if (!stat.isFile() || stat.isSymbolicLink()) {
       throw new Error(`preset_template_bundle_file_unsafe: ${entry.name}`);
     }
-    const body = readFileSync14(sourcePath);
+    const body = readFileSync15(sourcePath);
     if (body.byteLength !== entry.bytes || sha2562(body) !== entry.sha256) {
       throw new Error(`preset_template_bundle_digest_mismatch: ${entry.name}`);
     }
@@ -33318,9 +33576,9 @@ function verifiedBundleFiles(sourceDir, manifest) {
 function removeRetiredPresetFiles(targetDir, previousManifest, nextNames) {
   for (const entry of previousManifest.files) {
     if (nextNames.has(entry.name)) continue;
-    const targetPath = join18(targetDir, entry.name);
+    const targetPath = join20(targetDir, entry.name);
     if (!existsSync15(targetPath)) continue;
-    const stat = lstatSync10(targetPath);
+    const stat = lstatSync11(targetPath);
     if (stat.isDirectory()) {
       throw new Error(`preset_template_target_conflict: ${entry.name}`);
     }
@@ -33328,12 +33586,12 @@ function removeRetiredPresetFiles(targetDir, previousManifest, nextNames) {
   }
 }
 function materializeBundledPresetTemplates(input) {
-  const sourceDir = resolve14(input.sourceDir);
-  const targetDir = resolve14(input.targetDir);
+  const sourceDir = resolve15(input.sourceDir);
+  const targetDir = resolve15(input.targetDir);
   if (sourceDir === targetDir || sourceDir.startsWith(`${targetDir}${sep4}`) || targetDir.startsWith(`${sourceDir}${sep4}`)) {
     throw new Error("preset_template_source_target_overlap");
   }
-  const manifest = readManifest(join18(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
+  const manifest = readManifest(join20(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
   const verifiedFiles = verifiedBundleFiles(sourceDir, manifest);
   mkdirSync11(dirname9(targetDir), { recursive: true, mode: 493 });
   const targetStat = lstatIfExists(targetDir);
@@ -33341,28 +33599,28 @@ function materializeBundledPresetTemplates(input) {
     throw new Error("preset_template_target_root_unsafe");
   }
   mkdirSync11(targetDir, { recursive: true, mode: 493 });
-  const previousManifest = readManifest(join18(targetDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: false });
-  const stageDir = mkdtempSync3(join18(dirname9(targetDir), ".mirrorx-preset-templates-"));
+  const previousManifest = readManifest(join20(targetDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: false });
+  const stageDir = mkdtempSync4(join20(dirname9(targetDir), ".mirrorx-preset-templates-"));
   try {
     for (const file of verifiedFiles) {
-      const stagedPath = join18(stageDir, file.name);
-      writeFileSync11(stagedPath, file.body, { mode: 292 });
-      chmodSync5(stagedPath, 292);
-      renameSync8(stagedPath, join18(targetDir, file.name));
+      const stagedPath = join20(stageDir, file.name);
+      writeFileSync12(stagedPath, file.body, { mode: 292 });
+      chmodSync6(stagedPath, 292);
+      renameSync9(stagedPath, join20(targetDir, file.name));
     }
     removeRetiredPresetFiles(targetDir, previousManifest, new Set(manifest.files.map((file) => file.name)));
-    const stagedManifest = join18(stageDir, PRESET_TEMPLATE_MANIFEST_FILE);
-    writeFileSync11(stagedManifest, `${JSON.stringify({
+    const stagedManifest = join20(stageDir, PRESET_TEMPLATE_MANIFEST_FILE);
+    writeFileSync12(stagedManifest, `${JSON.stringify({
       schemaVersion: manifest.schemaVersion,
       files: manifest.files
     }, null, 2)}
 `, { mode: 292 });
-    chmodSync5(stagedManifest, 292);
-    renameSync8(stagedManifest, join18(targetDir, PRESET_TEMPLATE_MANIFEST_FILE));
+    chmodSync6(stagedManifest, 292);
+    renameSync9(stagedManifest, join20(targetDir, PRESET_TEMPLATE_MANIFEST_FILE));
   } finally {
-    rmSync9(stageDir, { recursive: true, force: true });
+    rmSync10(stageDir, { recursive: true, force: true });
   }
-  chmodSync5(targetDir, 493);
+  chmodSync6(targetDir, 493);
   return {
     fileCount: manifest.files.length,
     totalBytes: manifest.totalBytes,
@@ -33375,12 +33633,12 @@ function materializeRuntimePresetTemplates(input) {
     sourceDir,
     targetDir: input.targetDir
   });
-  const manifestBody = readFileSync14(
-    join18(materialized.targetDir, PRESET_TEMPLATE_MANIFEST_FILE)
+  const manifestBody = readFileSync15(
+    join20(materialized.targetDir, PRESET_TEMPLATE_MANIFEST_FILE)
   );
   const manifest = JSON.parse(manifestBody.toString("utf8"));
   for (const file of manifest.files) {
-    const body = readFileSync14(join18(materialized.targetDir, file.name));
+    const body = readFileSync15(join20(materialized.targetDir, file.name));
     if (sha2562(body) !== file.sha256) {
       throw new Error(`preset_template_materialized_digest_mismatch: ${file.name}`);
     }
@@ -33404,7 +33662,7 @@ function materializeRuntimePresetTemplates(input) {
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
 import { existsSync as existsSync16, readdirSync as readdirSync10, statSync as statSync10 } from "node:fs";
-import { dirname as dirname10, join as join19, resolve as resolve15 } from "node:path";
+import { dirname as dirname10, join as join21, resolve as resolve16 } from "node:path";
 function runtimeStatusDirectoryEntries(path) {
   try {
     return readdirSync10(path, { withFileTypes: true });
@@ -33427,7 +33685,7 @@ function runtimeStatusDirectorySizeBytes(path) {
     if (!stat || stat.isSymbolicLink()) continue;
     if (stat.isDirectory()) {
       for (const entry of runtimeStatusDirectoryEntries(current)) {
-        stack.push(join19(current, entry.name));
+        stack.push(join21(current, entry.name));
       }
       continue;
     }
@@ -33444,7 +33702,7 @@ function walkRuntimeStatusManagedWorkdirs(root) {
     if (!current) continue;
     for (const entry of runtimeStatusDirectoryEntries(current)) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join19(current, entry.name);
+      const fullPath = join21(current, entry.name);
       if (entry.name === "workdir" && existsSync16(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -33456,8 +33714,8 @@ function walkRuntimeStatusManagedWorkdirs(root) {
 }
 function readRuntimeStatusIsoTime(value) {
   if (typeof value !== "string" || !value.trim()) return null;
-  const time = Date.parse(value);
-  return Number.isFinite(time) ? time : null;
+  const time2 = Date.parse(value);
+  return Number.isFinite(time2) ? time2 : null;
 }
 function readRuntimeStatusString(value) {
   return typeof value === "string" && value.trim() ? value : null;
@@ -33486,15 +33744,15 @@ function summarizeRuntimeStatusRecentRun(workdir, manifest) {
 }
 function runtimeStatusOutboxDir(config) {
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join19(dirname10(stateFilePath({
+  return join21(dirname10(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "result-outbox");
 }
 function runtimeStatusRunCompletionDir(config) {
   const explicit = config.AMASTER_RUN_COMPLETION_STATE_DIR ?? config.runCompletionStateDir;
-  if (typeof explicit === "string" && explicit.trim()) return resolve15(explicit);
+  if (typeof explicit === "string" && explicit.trim()) return resolve16(explicit);
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join19(dirname10(stateFilePath({
+  return join21(dirname10(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "run-completion-state");
 }
@@ -33504,7 +33762,7 @@ function countRuntimeStatusJsonEntries(dir) {
 }
 function summarizeRuntimeLocalState(input) {
   const config = input.config ?? {};
-  const root = resolve15(String(config.AMASTER_RUNTIME_WORKSPACES_ROOT ?? config.runtimeWorkspacesRoot ?? input.runtimeWorkspacesRoot ?? ""));
+  const root = resolve16(String(config.AMASTER_RUNTIME_WORKSPACES_ROOT ?? config.runtimeWorkspacesRoot ?? input.runtimeWorkspacesRoot ?? ""));
   const now = input.now instanceof Date ? input.now : /* @__PURE__ */ new Date();
   const workdirs = walkRuntimeStatusManagedWorkdirs(root);
   let managedWorkdirBytes = 0;
@@ -33531,9 +33789,9 @@ function summarizeRuntimeLocalState(input) {
     }
   }
   const pendingOutboxDir = runtimeStatusOutboxDir(config);
-  const invalidOutboxDir = join19(pendingOutboxDir, "invalid");
+  const invalidOutboxDir = join21(pendingOutboxDir, "invalid");
   const pendingRunCompletionDir = runtimeStatusRunCompletionDir(config);
-  const invalidRunCompletionDir = join19(pendingRunCompletionDir, "invalid");
+  const invalidRunCompletionDir = join21(pendingRunCompletionDir, "invalid");
   return {
     managedWorkspacesRoot: root,
     managedWorkdirCount: workdirs.length,
@@ -33655,7 +33913,7 @@ function summarizeAmasterRuntimeVersionDrift(input = {}) {
 }
 
 // src/amaster-runtime-daemon/pi-context-budget.mjs
-import { readFileSync as readFileSync15 } from "node:fs";
+import { readFileSync as readFileSync16 } from "node:fs";
 var CONTEXT_ERROR_CODES = /* @__PURE__ */ new Set([
   "context_effective_tool_schema_attestation_mismatch",
   "context_output_reserve_exceeds_model_limit",
@@ -33770,7 +34028,7 @@ function measureRestoredPiNativeHistory(managedMcpProfile) {
   if (!rolloutPath) {
     return { status: "fresh", tokens: 0, rolloutBytes: 0, usageTokens: 0 };
   }
-  const rollout = readFileSync15(rolloutPath);
+  const rollout = readFileSync16(rolloutPath);
   const maximumRolloutBytes = 64 * 1024 * 1024;
   if (rollout.byteLength > maximumRolloutBytes) {
     throw stableContextError(
@@ -33864,8 +34122,8 @@ function resolvePiModelContextBudget({
 }
 
 // src/amaster-runtime-daemon/pi-project-instruction-extension.mjs
-import { lstatSync as lstatSync11, readFileSync as readFileSync16 } from "node:fs";
-import { resolve as resolve16 } from "node:path";
+import { lstatSync as lstatSync12, readFileSync as readFileSync17 } from "node:fs";
+import { resolve as resolve17 } from "node:path";
 var MANAGED_PI_PROJECT_INSTRUCTION_FILENAME = "amaster-project-instructions.js";
 function requiredString4(value, name) {
   if (typeof value !== "string" || !value.trim()) {
@@ -33874,12 +34132,12 @@ function requiredString4(value, name) {
   return value.trim();
 }
 function managedPiProjectInstructionExtensionSource(input) {
-  const projectInstructionPath = resolve16(requiredString4(input.projectInstructionPath, "projectInstructionPath"));
-  const stat = lstatSync11(projectInstructionPath);
+  const projectInstructionPath = resolve17(requiredString4(input.projectInstructionPath, "projectInstructionPath"));
+  const stat = lstatSync12(projectInstructionPath);
   if (!stat.isFile() || stat.isSymbolicLink()) {
     throw new Error("pi_project_instruction_extension_invalid: unsafe projectInstructionPath");
   }
-  const projectInstructions = readFileSync16(projectInstructionPath, "utf8");
+  const projectInstructions = readFileSync17(projectInstructionPath, "utf8");
   return String.raw`const PROJECT_INSTRUCTIONS = ${JSON.stringify(projectInstructions.trim())};
 
 export default function amasterProjectInstructions(pi) {
@@ -33894,8 +34152,8 @@ export default function amasterProjectInstructions(pi) {
 // src/amaster-runtime-daemon/workspace-status.mjs
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash18 } from "node:crypto";
-import { existsSync as existsSync17, readdirSync as readdirSync11, readFileSync as readFileSync17, statSync as statSync11 } from "node:fs";
-import { basename as basename7, extname as extname2, isAbsolute as isAbsolute11, join as join20, relative as relative8, resolve as resolve17 } from "node:path";
+import { existsSync as existsSync17, readdirSync as readdirSync11, readFileSync as readFileSync18, statSync as statSync11 } from "node:fs";
+import { basename as basename7, extname as extname2, isAbsolute as isAbsolute11, join as join22, relative as relative8, resolve as resolve18 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Map([
   [".md", "markdown"],
@@ -33964,35 +34222,35 @@ function sanitizeTrackedChange(line) {
   return isSafeRelativePath(path) ? line : null;
 }
 function sha256File(filePath) {
-  return createHash18("sha256").update(readFileSync17(filePath)).digest("hex");
+  return createHash18("sha256").update(readFileSync18(filePath)).digest("hex");
 }
 function artifactHashCacheKey(relativePath, stat) {
   return `${relativePath}\0${stat.size}\0${stat.mtimeMs}`;
 }
 function artifactSha256(filePath, relativePath, stat, opts = {}) {
-  const cache = opts.hashCache;
+  const cache2 = opts.hashCache;
   const key = artifactHashCacheKey(relativePath, stat);
-  if (cache?.has(key)) {
-    const cached = cache.get(key);
-    cache.delete(key);
-    cache.set(key, cached);
+  if (cache2?.has(key)) {
+    const cached = cache2.get(key);
+    cache2.delete(key);
+    cache2.set(key, cached);
     return cached;
   }
   const hashFile = typeof opts.hashFile === "function" ? opts.hashFile : sha256File;
   const hash3 = hashFile(filePath);
-  if (cache) {
-    cache.set(key, hash3);
+  if (cache2) {
+    cache2.set(key, hash3);
     const maxEntries = Math.max(0, Number(opts.hashCacheMaxEntries ?? MAX_HASH_CACHE_ENTRIES) || 0);
-    while (maxEntries > 0 && cache.size > maxEntries) {
-      const oldestKey = cache.keys().next().value;
-      cache.delete(oldestKey);
+    while (maxEntries > 0 && cache2.size > maxEntries) {
+      const oldestKey = cache2.keys().next().value;
+      cache2.delete(oldestKey);
     }
-    if (maxEntries === 0) cache.clear();
+    if (maxEntries === 0) cache2.clear();
   }
   return hash3;
 }
 function scanArtifactCandidates(cwd, opts = {}) {
-  const root = resolve17(cwd);
+  const root = resolve18(cwd);
   const maxCandidates = opts.maxCandidates ?? MAX_CANDIDATES;
   const maxEntries = opts.maxEntries ?? MAX_SCAN_ENTRIES;
   const candidates = [];
@@ -34013,7 +34271,7 @@ function scanArtifactCandidates(cwd, opts = {}) {
       if (entry.name.startsWith(".") && entry.name !== ".amaster-runtime.json") {
         if (entry.name === ".git") continue;
       }
-      const fullPath = join20(current, entry.name);
+      const fullPath = join22(current, entry.name);
       const relativePath = normalizeRelativePath(root, fullPath);
       if (!isSafeRelativePath(relativePath)) continue;
       if (basename7(relativePath) === ".amaster-runtime.json") continue;
@@ -34031,7 +34289,7 @@ function scanArtifactCandidates(cwd, opts = {}) {
       } catch {
         continue;
       }
-      if (!statusPathWithin(resolve17(fullPath), root) || stat.size > MAX_HASH_BYTES) continue;
+      if (!statusPathWithin(resolve18(fullPath), root) || stat.size > MAX_HASH_BYTES) continue;
       candidates.push({
         relativePath,
         name: basename7(fullPath),
@@ -34091,10 +34349,10 @@ function sanitizeRuntimeService(entry) {
   };
 }
 function readRuntimeServicesSnapshot(cwd) {
-  const snapshotPath = join20(resolve17(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
+  const snapshotPath = join22(resolve18(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
   if (!existsSync17(snapshotPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync17(snapshotPath, "utf8"));
+    const parsed = JSON.parse(readFileSync18(snapshotPath, "utf8"));
     const rawServices = Array.isArray(parsed) ? parsed : Array.isArray(parsed?.services) ? parsed.services : [];
     return rawServices.map((entry) => sanitizeRuntimeService(entry)).filter((entry) => entry !== null).slice(0, 50);
   } catch {
@@ -34196,7 +34454,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1";
+var CONNECTOR_VERSION = "0.1.3";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SUPPORTED_TASK_CONTEXT_VERSIONS = Object.freeze([TASK_CONTEXT_MANIFEST_VERSION, TASK_CONTEXT_V2]);
 var daemonRequire = createRequire(import.meta.url);
@@ -34268,12 +34526,12 @@ function notifyDaemonLoop() {
 }
 function waitForDaemonLoop(timeoutMs, observedVersion) {
   if (daemonLoopWakeVersion !== observedVersion) return Promise.resolve();
-  return new Promise((resolve19) => {
+  return new Promise((resolve20) => {
     const finish = () => {
       clearTimeout(timer);
       if (wakeDaemonLoop === finish) wakeDaemonLoop = () => {
       };
-      resolve19();
+      resolve20();
     };
     const timer = setTimeout(finish, timeoutMs);
     wakeDaemonLoop = finish;
@@ -34296,7 +34554,7 @@ function resultOutboxPendingCount(config) {
   try {
     let pending = 0;
     for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json"))) {
-      if (readValidResultOutboxEntryOrQuarantine(config, file, join21(dir, file))) {
+      if (readValidResultOutboxEntryOrQuarantine(config, file, join23(dir, file))) {
         pending += 1;
       }
     }
@@ -34307,18 +34565,18 @@ function resultOutboxPendingCount(config) {
 }
 function runCompletionStateDir(config) {
   const explicit = readString(process.env.AMASTER_RUN_COMPLETION_STATE_DIR);
-  if (explicit) return resolve18(expandHomePath(explicit));
-  return join21(dirname11(stateFilePath(process.env)), "run-completion-state");
+  if (explicit) return resolve19(expandHomePath(explicit));
+  return join23(dirname11(stateFilePath(process.env)), "run-completion-state");
 }
 function runCompletionStateInvalidDir(config) {
-  return join21(runCompletionStateDir(config), "invalid");
+  return join23(runCompletionStateDir(config), "invalid");
 }
 function quarantineInvalidRunCompletionState(config, filePath, reason) {
   const invalidDir = runCompletionStateInvalidDir(config);
   mkdirSync12(invalidDir, { recursive: true, mode: 448 });
-  const destination = join21(invalidDir, basename8(filePath));
+  const destination = join23(invalidDir, basename8(filePath));
   try {
-    renameSync9(filePath, destination);
+    renameSync10(filePath, destination);
   } catch {
     copyFileSync2(filePath, destination);
     unlinkSync3(filePath);
@@ -34374,7 +34632,7 @@ function resultOutboxActiveRunCommands(config) {
   const outboxPending = resultOutboxPendingCount(config);
   const entries = [];
   for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json")).sort()) {
-    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join21(dir, file));
+    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join23(dir, file));
     if (!entry) continue;
     const activeRun = asRecord(entry.activeRun);
     const commandId = readString(activeRun.commandId) ?? readString(entry.commandId);
@@ -34410,7 +34668,7 @@ function resultOutboxFailedRunCommands(config) {
   for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json")).sort().slice(-100)) {
     let entry;
     try {
-      entry = asRecord(JSON.parse(readFileSync18(join21(dir, file), "utf8")));
+      entry = asRecord(JSON.parse(readFileSync19(join23(dir, file), "utf8")));
     } catch {
       continue;
     }
@@ -34473,11 +34731,11 @@ function piExtraArgsDiagnostics(value) {
 }
 function safeExpandPath(value) {
   const text2 = readString(value);
-  return text2 ? resolve18(expandHomePath(text2)) : null;
+  return text2 ? resolve19(expandHomePath(text2)) : null;
 }
 function safeJsonObjectFromFile(filePath) {
   try {
-    const parsed = JSON.parse(readFileSync18(filePath, "utf8"));
+    const parsed = JSON.parse(readFileSync19(filePath, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
   } catch {
     return null;
@@ -34520,10 +34778,10 @@ function safeSkillRootSummary(kind, source, pathValue) {
     try {
       for (const name of readdirSync12(pathValue)) {
         if (name.startsWith(".")) continue;
-        const skillDir = join21(pathValue, name);
+        const skillDir = join23(pathValue, name);
         try {
           if (!statSync12(skillDir).isDirectory()) continue;
-          if (!existsSync18(join21(skillDir, "SKILL.md"))) continue;
+          if (!existsSync18(join23(skillDir, "SKILL.md"))) continue;
           skillCount += 1;
           if (skillCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
             truncated = true;
@@ -34574,7 +34832,7 @@ function objectKeyCount(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? Object.keys(value).length : 0;
 }
 function defaultPiCodingAgentDir() {
-  return join21(homedir5(), ".pi", "agent");
+  return join23(homedir6(), ".pi", "agent");
 }
 function piCapabilitySourcesDiagnostics() {
   const configuredPiCodingAgentDir = safeExpandPath(process.env.PI_CODING_AGENT_DIR);
@@ -34583,14 +34841,14 @@ function piCapabilitySourcesDiagnostics() {
   const configuredPiAgentHome = safeExpandPath(process.env.PI_AGENT_HOME);
   const piAgentHome = configuredPiAgentHome ?? piCodingAgentDir;
   const piAgentHomeSource = configuredPiAgentHome ? "PI_AGENT_HOME" : piCodingAgentDirSource;
-  const userSkillsPath = piAgentHome ? join21(piAgentHome, "skills") : null;
+  const userSkillsPath = piAgentHome ? join23(piAgentHome, "skills") : null;
   const configuredMarketplaceSkillsPath = safeExpandPath(
     process.env.PI_AGENT_MARKETPLACE_SKILLS_DIR
   );
-  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join21(piAgentHome, "marketplace", "skills") : null);
+  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join23(piAgentHome, "marketplace", "skills") : null);
   const builtinSkillsPath = safeExpandPath(process.env.PI_AGENT_BUILTIN_SKILLS_DIR) ?? safeExpandPath(process.env.AMASTER_BUILTIN_SKILLS);
-  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join21(piAgentHome, "mcp.json") : null);
-  const settingsConfigPath = piCodingAgentDir ? join21(piCodingAgentDir, "settings.json") : null;
+  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join23(piAgentHome, "mcp.json") : null);
+  const settingsConfigPath = piCodingAgentDir ? join23(piCodingAgentDir, "settings.json") : null;
   const skillRoots = [
     safeSkillRootSummary("user", `${piAgentHomeSource}/skills`, userSkillsPath),
     safeSkillRootSummary(
@@ -34747,9 +35005,13 @@ function runtimeAdvertisedCapabilities(config) {
     templateCatalog: config.templateCatalog,
     runtimeTemplatesRoot: config.runtimeTemplatesRoot,
     runnerKind: config.runnerKind,
+    piExecutorUid: config.piExecutorUid,
+    piExecutorGid: config.piExecutorGid,
+    connectorUid: typeof process.getuid === "function" ? process.getuid() : null,
     checkpointUploadEnabled: config.checkpointUploadEnabled,
     executors: config.executors,
-    browserCredentialAuth: inspectBrowserCredentialAuthReadiness()
+    browserCredentialAuth: inspectBrowserCredentialAuthReadiness(),
+    browserCredentialEnv: inspectBrowserCredentialEnvReadiness()
   });
 }
 function buildRegisterPayload(config) {
@@ -34882,25 +35144,25 @@ function materializePiRuntimeSystemPrompt(config, promptRoot, commandId, content
   const normalizedCommandId = readString(commandId);
   if (!normalizedCommandId) throw new Error("pi_runtime_system_prompt_command_id_missing");
   const promptIdentity = createHash19("sha256").update(normalizedCommandId).digest("hex");
-  const promptDir = join21(promptRoot, "tmp");
+  const promptDir = join23(promptRoot, "tmp");
   mkdirSync12(promptDir, { recursive: true, mode: 448 });
-  const promptDirStat = lstatSync12(promptDir);
+  const promptDirStat = lstatSync13(promptDir);
   if (!promptDirStat.isDirectory() || promptDirStat.isSymbolicLink()) {
     throw new Error("pi_runtime_system_prompt_directory_invalid");
   }
-  chmodSync6(promptDir, 448);
-  const promptPath = join21(promptDir, `runtime-system-${promptIdentity}.md`);
-  const temporaryPath = join21(promptDir, `.runtime-system.${process.pid}.${randomUUID2()}.tmp`);
+  chmodSync7(promptDir, 448);
+  const promptPath = join23(promptDir, `runtime-system-${promptIdentity}.md`);
+  const temporaryPath = join23(promptDir, `.runtime-system.${process.pid}.${randomUUID2()}.tmp`);
   try {
-    writeFileSync12(temporaryPath, contents, { encoding: "utf8", mode: 384, flag: "wx" });
-    renameSync9(temporaryPath, promptPath);
-    chmodSync6(promptPath, 384);
+    writeFileSync13(temporaryPath, contents, { encoding: "utf8", mode: 384, flag: "wx" });
+    renameSync10(temporaryPath, promptPath);
+    chmodSync7(promptPath, 384);
     const promptMode = statSync12(promptPath).mode & 511;
     if (promptMode !== 384) {
       throw new Error(`pi_runtime_system_prompt_permissions_failed: mode=${promptMode.toString(8)}`);
     }
   } finally {
-    rmSync10(temporaryPath, { force: true });
+    rmSync11(temporaryPath, { force: true });
   }
   handoffPiRunPathsToChild(config, [promptDir, promptPath]);
   return promptPath;
@@ -35066,7 +35328,7 @@ AMASTER_MACHINE_ID=${quoteShell(config.machineId)}
 AMASTER_WORKSPACE_ALLOWLIST=${quoteShell(config.workspaceBindings.join(","))}
 AMASTER_EXECUTORS=${quoteShell(executorEnv)}
 AMASTER_NETWORK_DOMAINS=${quoteShell(config.networkDomains.join(","))}
-AMASTER_DAEMON_STATE_FILE=${quoteShell(join21(homedir5(), ".amaster-employee", "runtime-connector-state.json"))}
+AMASTER_DAEMON_STATE_FILE=${quoteShell(join23(homedir6(), ".amaster-employee", "runtime-connector-state.json"))}
 EOF
 
 set -a
@@ -35543,24 +35805,24 @@ function browserSessionProfileIdentity(config, session) {
 }
 function ensureBrowserSessionProfile(config, session) {
   const identity = browserSessionProfileIdentity(config, session);
-  const profileRoot = resolve18(config.browserSessionStateRoot);
+  const profileRoot = resolve19(config.browserSessionStateRoot);
   mkdirSync12(profileRoot, { recursive: true, mode: 448 });
-  if (lstatSync12(profileRoot).isSymbolicLink() || !lstatSync12(profileRoot).isDirectory()) {
+  if (lstatSync13(profileRoot).isSymbolicLink() || !lstatSync13(profileRoot).isDirectory()) {
     throw new Error("browser_session_profile_path_invalid");
   }
-  chmodSync6(profileRoot, 448);
-  const userDataDir = resolve18(profileRoot, identity.localOpaqueRef);
+  chmodSync7(profileRoot, 448);
+  const userDataDir = resolve19(profileRoot, identity.localOpaqueRef);
   if (!pathWithin3(userDataDir, profileRoot)) {
     throw new Error("browser_session_profile_path_invalid");
   }
   mkdirSync12(userDataDir, { recursive: true, mode: 448 });
-  if (lstatSync12(userDataDir).isSymbolicLink() || !lstatSync12(userDataDir).isDirectory()) {
+  if (lstatSync13(userDataDir).isSymbolicLink() || !lstatSync13(userDataDir).isDirectory()) {
     throw new Error("browser_session_profile_path_invalid");
   }
-  chmodSync6(userDataDir, 448);
-  const markerPath = join21(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
+  chmodSync7(userDataDir, 448);
+  const markerPath = join23(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
   if (existsSync18(markerPath)) {
-    if (lstatSync12(markerPath).isSymbolicLink()) {
+    if (lstatSync13(markerPath).isSymbolicLink()) {
       throw new Error("browser_session_profile_identity_invalid");
     }
     const existing = readJsonFile2(markerPath);
@@ -35568,41 +35830,41 @@ function ensureBrowserSessionProfile(config, session) {
       throw new Error("browser_session_profile_identity_invalid");
     }
   } else {
-    const temporaryPath = join21(
+    const temporaryPath = join23(
       userDataDir,
       `.${BROWSER_SESSION_PROFILE_OWNER_MARKER}.${process.pid}.${createHash19("sha256").update(randomUUID2()).digest("hex")}`
     );
-    writeFileSync12(temporaryPath, `${JSON.stringify(identity)}
+    writeFileSync13(temporaryPath, `${JSON.stringify(identity)}
 `, { mode: 384, flag: "wx" });
-    renameSync9(temporaryPath, markerPath);
+    renameSync10(temporaryPath, markerPath);
   }
-  chmodSync6(markerPath, 384);
+  chmodSync7(markerPath, 384);
   return { profileRoot, userDataDir, identity };
 }
 function cleanupBrowserSessionProfile(config, value) {
   const identity = browserSessionProfileIdentity(config, value);
-  const profileRoot = resolve18(config.browserSessionStateRoot);
-  const userDataDir = resolve18(profileRoot, identity.localOpaqueRef);
+  const profileRoot = resolve19(config.browserSessionStateRoot);
+  const userDataDir = resolve19(profileRoot, identity.localOpaqueRef);
   if (!pathWithin3(userDataDir, profileRoot)) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
   if (!existsSync18(userDataDir)) return { outcome: "absent", identity };
-  if (lstatSync12(userDataDir).isSymbolicLink() || !lstatSync12(userDataDir).isDirectory()) {
+  if (lstatSync13(userDataDir).isSymbolicLink() || !lstatSync13(userDataDir).isDirectory()) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
-  const markerPath = join21(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
-  if (!existsSync18(markerPath) || lstatSync12(markerPath).isSymbolicLink()) {
+  const markerPath = join23(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
+  if (!existsSync18(markerPath) || lstatSync13(markerPath).isSymbolicLink()) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
   if (JSON.stringify(readJsonFile2(markerPath)) !== JSON.stringify(identity)) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
-  rmSync10(userDataDir, { recursive: true, force: false });
+  rmSync11(userDataDir, { recursive: true, force: false });
   return { outcome: "deleted", identity };
 }
 function readJsonFile2(filePath) {
   try {
-    const parsed = JSON.parse(readFileSync18(filePath, "utf8"));
+    const parsed = JSON.parse(readFileSync19(filePath, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch {
     return {};
@@ -35613,8 +35875,8 @@ function syncPiExecutorProviderConfig(config, agentDir, providerConfig) {
   const { modelsSynced, settingsSynced } = syncAmasterProviderFiles(agentDir, providerConfig);
   if (!modelsSynced && !settingsSynced) return null;
   handoffPiRunPathsToChild(config, [
-    modelsSynced ? join21(agentDir, "models.json") : null,
-    settingsSynced ? join21(agentDir, "settings.json") : null
+    modelsSynced ? join23(agentDir, "models.json") : null,
+    settingsSynced ? join23(agentDir, "settings.json") : null
   ]);
   return { modelsSynced, settingsSynced };
 }
@@ -35645,7 +35907,7 @@ function safeAgentInstructionMaterializationTarget(workspace, filePath) {
   const segments = normalized.split("/").filter(Boolean);
   if (segments.length === 0 || segments.some((segment) => segment === "." || segment === "..")) return null;
   const relativePath = segments.join("/");
-  const targetPath = resolve18(workspace.cwd, relativePath);
+  const targetPath = resolve19(workspace.cwd, relativePath);
   if (!pathWithin3(targetPath, workspace.cwd)) return null;
   return { relativePath, targetPath };
 }
@@ -35734,14 +35996,14 @@ async function materializeEffectiveAgentInstructions(config, command, workspace,
     mkdirSync12(dirname11(target.targetPath), { recursive: true });
     const temporaryPath = `${target.targetPath}.mirrorx-${command.commandId}.tmp`;
     try {
-      writeFileSync12(temporaryPath, content, { encoding: "utf8", mode: 384 });
-      const readBack = readFileSync18(temporaryPath, "utf8");
+      writeFileSync13(temporaryPath, content, { encoding: "utf8", mode: 384 });
+      const readBack = readFileSync19(temporaryPath, "utf8");
       if (readBack !== content) {
         throw new Error(`context_envelope_instruction_readback_mismatch: ${filePath}`);
       }
-      renameSync9(temporaryPath, target.targetPath);
+      renameSync10(temporaryPath, target.targetPath);
     } finally {
-      rmSync10(temporaryPath, { force: true });
+      rmSync11(temporaryPath, { force: true });
     }
     materialized.push({
       path: target.relativePath,
@@ -35751,7 +36013,7 @@ async function materializeEffectiveAgentInstructions(config, command, workspace,
   }
   const readBackFiles = Object.fromEntries(materialized.map((entry) => [
     entry.path,
-    readFileSync18(resolve18(workspace.cwd, entry.path), "utf8")
+    readFileSync19(resolve19(workspace.cwd, entry.path), "utf8")
   ]));
   if (stableInstructionFilesHash(readBackFiles) !== readString(instructionContract.contentHash)) {
     throw new Error("context_envelope_materialized_hash_mismatch");
@@ -35775,7 +36037,7 @@ function wikiTreePathForCommand(command, workspaceBindings) {
     const candidates = [];
     if (root.endsWith("paperclipai.plugin-llm-wiki")) candidates.push(root);
     if (basename8(root) === "plugin-data" && companyId) {
-      candidates.push(join21(root, companyId, "paperclipai.plugin-llm-wiki"));
+      candidates.push(join23(root, companyId, "paperclipai.plugin-llm-wiki"));
     }
     for (const candidate of candidates) {
       try {
@@ -35786,6 +36048,62 @@ function wikiTreePathForCommand(command, workspaceBindings) {
   }
   return null;
 }
+function commandMentionContext(command) {
+  const mention = asRecord(requireCommandContextEnvelope(command).dynamicContext.paperclipMentionContext);
+  return readString(mention.schemaVersion) === MENTION_CONTEXT_SCHEMA_VERSION ? mention : null;
+}
+function renderMentionContextText(mention) {
+  if (!mention) return "";
+  const agents = (Array.isArray(mention.agents) ? mention.agents : []).map(asRecord);
+  const applications = (Array.isArray(mention.applications) ? mention.applications : []).map(asRecord);
+  if (agents.length === 0 && applications.length === 0) return "";
+  const blocks = [
+    "The user's message @-mentioned the following entities. Treat them as explicit context the user wants you to consider."
+  ];
+  if (agents.length > 0) {
+    blocks.push([
+      "Mentioned employees (reference only \u2014 a mention is not a handoff; to have one act, invoke it with the invoke_employee runtime action using its agentId):",
+      ...agents.map((agent) => {
+        const role = readString(agent.role);
+        const title = readString(agent.title);
+        const details = [
+          role ? `role: ${role}` : "",
+          title ? `title: ${title}` : ""
+        ].filter(Boolean).join(", ");
+        return `- ${readString(agent.name) ?? "unknown"}${details ? ` \u2014 ${details}` : ""} (agentId: ${readString(agent.agentId) ?? "unknown"})`;
+      })
+    ].join("\n"));
+  }
+  if (applications.length > 0) {
+    blocks.push([
+      "Mentioned applications:",
+      ...applications.map((application) => {
+        const provider = readString(application.provider);
+        const environment = readString(application.environment);
+        const headline = [
+          provider ? `provider: ${provider}` : "",
+          environment ? `environment: ${environment}` : ""
+        ].filter(Boolean).join(", ");
+        const lines = [
+          `- ${readString(application.title) ?? "unknown"}${headline ? ` (${headline})` : ""}`
+        ];
+        const url = readString(application.url);
+        if (url) lines.push(`  url: ${url}`);
+        const identity = ["applicationId", "appCode", "releaseId", "releaseVersion"].map((key) => {
+          const value = readString(application[key]);
+          return value ? `${key}: ${value}` : "";
+        }).filter(Boolean).join(" | ");
+        if (identity) lines.push(`  ${identity}`);
+        const skills = (Array.isArray(application.requiredSkills) ? application.requiredSkills : []).map((skill) => readString(skill)).filter(Boolean);
+        if (skills.length > 0) {
+          lines.push(`  required skills: ${skills.map((skill) => MENTIONED_APPLICATION_SKILL_HINTS[skill] ? `${skill} (${MENTIONED_APPLICATION_SKILL_HINTS[skill]})` : skill).join(", ")}`);
+        }
+        return lines.join("\n");
+      })
+    ].join("\n"));
+  }
+  return blocks.join("\n\n");
+}
 function buildCommandPrompt(command, workspace, materializedAttachments = [], options = {}) {
   const workspaceContext = normalizeWorkspaceContext(workspace);
   const cwd = workspaceContext.cwd;
@@ -35833,6 +36151,7 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
       return `- ${details}`;
     })
   ].join("\n") : "";
+  const mentionContextText = renderMentionContextText(commandMentionContext(command));
   const compilation = compileCommandPromptWithManifest({
     commandId: command.commandId,
     runId: commandRunId(command),
@@ -35851,6 +36170,7 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
     agentInstructions,
     taskMarkdown,
     attachmentsText,
+    mentionContextText,
     comments,
     context,
     nativeSession: asRecord(payload.nativeSession),
@@ -35859,7 +36179,8 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
       treePath: wikiTreePathForCommand(command, options.workspaceBindings)
     },
     runtimeTemplateCatalog: options.runtimeTemplateCatalog,
-    executorCapabilityNotice: options.executorCapabilityNotice
+    executorCapabilityNotice: options.executorCapabilityNotice,
+    browserCredentialEnv: options.browserCredentialEnv
   }, { maxChars: options.maxChars, separateRuntimeRules: options.executorKind === "pi" });
   const auditedCompilation = attachCurrentRunContractShadowAudit(
     compilation,
@@ -35955,13 +36276,13 @@ function attachPiProjectInstructionExtension(profile, input) {
       "managed Pi profile is missing"
     );
   }
-  const projectInstructionExtensionPath = join21(
+  const projectInstructionExtensionPath = join23(
     profile.profileRoot,
     "extensions",
     MANAGED_PI_PROJECT_INSTRUCTION_FILENAME
   );
-  const contract = { projectInstructionPath: resolve18(input.cwd, "AGENTS.md") };
-  writeFileSync12(projectInstructionExtensionPath, managedPiProjectInstructionExtensionSource(contract), { mode: 384 });
+  const contract = { projectInstructionPath: resolve19(input.cwd, "AGENTS.md") };
+  writeFileSync13(projectInstructionExtensionPath, managedPiProjectInstructionExtensionSource(contract), { mode: 384 });
   return projectInstructionExtensionPath;
 }
 function commandUsesPiExecutor(command) {
@@ -36004,18 +36325,18 @@ function buildExecutorEnv(config, command, workspace) {
   };
 }
 function preparePiModelCallProfile(commandId, baseEnv, options = {}) {
-  const profileRoot = mkdtempSync4(join21(tmpdir(), "amaster-pi-model-call-"));
-  const home = join21(profileRoot, "home");
-  const sessionsDir = join21(profileRoot, "sessions");
-  const tempDir = join21(profileRoot, "tmp");
+  const profileRoot = mkdtempSync5(join23(tmpdir(), "amaster-pi-model-call-"));
+  const home = join23(profileRoot, "home");
+  const sessionsDir = join23(profileRoot, "sessions");
+  const tempDir = join23(profileRoot, "tmp");
   for (const directory of [home, sessionsDir, tempDir]) {
     mkdirSync12(directory, { recursive: true, mode: 448 });
   }
   try {
     const extensionArgs = [];
     if (options.responseContract) {
-      const extensionPath = join21(profileRoot, "model-call-output-contract.js");
-      writeFileSync12(
+      const extensionPath = join23(profileRoot, "model-call-output-contract.js");
+      writeFileSync13(
         extensionPath,
         modelCallOutputContractExtensionSource(options.responseContract.maxOutputTokens),
         { mode: 384 }
@@ -36035,12 +36356,12 @@ function preparePiModelCallProfile(commandId, baseEnv, options = {}) {
       }
     };
   } catch (error) {
-    rmSync10(profileRoot, { recursive: true, force: true });
+    rmSync11(profileRoot, { recursive: true, force: true });
     throw error;
   }
 }
 function cleanupPiModelCallProfile(profile) {
-  if (profile?.profileRoot) rmSync10(profile.profileRoot, { recursive: true, force: true });
+  if (profile?.profileRoot) rmSync11(profile.profileRoot, { recursive: true, force: true });
 }
 function splitExtraArgs(value) {
   return splitList(value).flatMap((entry) => entry.split(/\s+/).filter(Boolean));
@@ -36080,7 +36401,7 @@ function resolveNativeSessionRequest(command, workspace) {
     try {
       cwdMatched = realpathSync12(requestedCwd) === realpathSync12(sourceWorkspacePath);
     } catch {
-      cwdMatched = resolve18(requestedCwd) === resolve18(sourceWorkspacePath);
+      cwdMatched = resolve19(requestedCwd) === resolve19(sourceWorkspacePath);
     }
   }
   const used = Boolean(enabled && requested && sessionId && requestedCwd && cwdMatched);
@@ -36688,7 +37009,7 @@ function createLiveOutputLogger(config, command, executorKind, protectedValues =
       }
     }
     if (MIRRORX_FORMAL_TASK_EXECUTOR_KINDS.includes(executorKind) && event) {
-      const results = executorKind === "codex" ? codexMcpToolResults(event) : executorKind === "codebuddy" ? codebuddyMcpToolResultTracker.record(event) : piMcpToolResults(event, { runId: commandRunId(command), commandId: command.commandId, issueId: commandIssueId(command) });
+      const results = executorKind === "codex" ? codexMcpToolResults(event) : executorKind === "codebuddy" ? codebuddyMcpToolResultTracker.record(event) : piMcpToolResults(event);
       liveMcpToolResults.push(...results);
       if (results.length > 0) onMcpToolResults?.(results);
     }
@@ -36906,7 +37227,7 @@ function realOrResolvedPath(value) {
   try {
     return realpathSync12(value);
   } catch {
-    return resolve18(value);
+    return resolve19(value);
   }
 }
 var LSOF_COMMAND = process.platform === "darwin" && existsSync18("/usr/sbin/lsof") ? "/usr/sbin/lsof" : "lsof";
@@ -37034,7 +37355,7 @@ function walkManagedWorkdirs(root) {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join21(current, entry.name);
+      const fullPath = join23(current, entry.name);
       if (entry.name === "workdir" && existsSync18(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -38036,11 +38357,11 @@ async function completeCommand(config, command, status, result2, error) {
 }
 function resultOutboxDir(config) {
   const explicit = readString(process.env.AMASTER_RESULT_OUTBOX_DIR);
-  if (explicit) return resolve18(expandHomePath(explicit));
-  return join21(dirname11(stateFilePath(process.env)), "result-outbox");
+  if (explicit) return resolve19(expandHomePath(explicit));
+  return join23(dirname11(stateFilePath(process.env)), "result-outbox");
 }
 function resultOutboxInvalidDir(config) {
-  return join21(resultOutboxDir(config), "invalid");
+  return join23(resultOutboxDir(config), "invalid");
 }
 function writeResultOutboxEntry(config, entry) {
   const dir = resultOutboxDir(config);
@@ -38054,16 +38375,16 @@ function writeResultOutboxEntry(config, entry) {
     ...entry,
     ...pendingLogEntries.length > 0 ? { pendingLogEntries } : {}
   };
-  writeFileSync12(join21(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
+  writeFileSync13(join23(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
 }
 function moveResultOutboxEntryToInvalid(config, file, fullPath, reason, detail, original) {
   const invalidDir = resultOutboxInvalidDir(config);
   mkdirSync12(invalidDir, { recursive: true });
-  const invalidPath = join21(invalidDir, file);
+  const invalidPath = join23(invalidDir, file);
   if (original === void 0) {
     try {
-      renameSync9(fullPath, invalidPath);
+      renameSync10(fullPath, invalidPath);
     } catch {
       copyFileSync2(fullPath, invalidPath);
       unlinkSync3(fullPath);
@@ -38076,14 +38397,14 @@ function moveResultOutboxEntryToInvalid(config, file, fullPath, reason, detail,
     ...detail ? { detail: truncateText(detail, 1e3) } : {},
     original
   };
-  writeFileSync12(invalidPath, `${JSON.stringify(evidence, null, 2)}
+  writeFileSync13(invalidPath, `${JSON.stringify(evidence, null, 2)}
 `, { mode: 384 });
   unlinkSync3(fullPath);
 }
 function readValidResultOutboxEntryOrQuarantine(config, file, fullPath) {
   let entry;
   try {
-    entry = JSON.parse(readFileSync18(fullPath, "utf8"));
+    entry = JSON.parse(readFileSync19(fullPath, "utf8"));
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     moveResultOutboxEntryToInvalid(config, file, fullPath, "malformed_result_outbox_json", message);
@@ -38116,7 +38437,7 @@ function updateResultOutboxAttempt(fullPath, entry, err) {
     ...typeof err?.httpStatus === "number" ? { httpStatus: err.httpStatus } : {},
     lastError: truncateText(err instanceof Error ? err.message : String(err), 1e3)
   };
-  writeFileSync12(fullPath, `${JSON.stringify(next, null, 2)}
+  writeFileSync13(fullPath, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
   return next;
 }
@@ -38130,8 +38451,8 @@ function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err)
     ...typeof err?.httpStatus === "number" ? { httpStatus: err.httpStatus } : {},
     lastError: truncateText(err instanceof Error ? err.message : String(err), 1e3)
   };
-  const invalidPath = join21(invalidDir, file);
-  writeFileSync12(invalidPath, `${JSON.stringify(body, null, 2)}
+  const invalidPath = join23(invalidDir, file);
+  writeFileSync13(invalidPath, `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
   try {
     unlinkSync3(fullPath);
@@ -38149,7 +38470,7 @@ async function flushResultOutbox(config) {
   const files = readdirSync12(dir).filter((name) => name.endsWith(".json")).sort();
   let completed = 0;
   for (const file of files) {
-    const fullPath = join21(dir, file);
+    const fullPath = join23(dir, file);
     let entry = readValidResultOutboxEntryOrQuarantine(config, file, fullPath);
     if (!entry) continue;
     const pendingLogEntries = Array.isArray(entry.pendingLogEntries) ? entry.pendingLogEntries.filter((logEntry) => typeof asRecord(logEntry).message === "string") : [];
@@ -38164,7 +38485,7 @@ async function flushResultOutbox(config) {
         if (!isTerminalResultOutboxStatus(logHttpStatus)) {
           const logAttemptCount = readNumber(entry.logAttemptCount, 0) + 1;
           if (logAttemptCount < maxResultOutboxAttempts()) {
-            writeFileSync12(fullPath, `${JSON.stringify({ ...entry, logAttemptCount }, null, 2)}
+            writeFileSync13(fullPath, `${JSON.stringify({ ...entry, logAttemptCount }, null, 2)}
 `, { mode: 384 });
             process.stderr.write(`AMaster daemon deferred live log delivery retry failed for ${entry.commandId ?? file}: ${logMessage}
 `);
@@ -38177,7 +38498,7 @@ async function flushResultOutbox(config) {
       entry = { ...entry };
       delete entry.pendingLogEntries;
       delete entry.logAttemptCount;
-      writeFileSync12(fullPath, `${JSON.stringify(entry, null, 2)}
+      writeFileSync13(fullPath, `${JSON.stringify(entry, null, 2)}
 `, { mode: 384 });
     }
     try {
@@ -38280,6 +38601,12 @@ function safeMaterializedAttachmentFilename(attachment, index) {
   const name = basename8(original ?? `${id}.bin`).replace(/[\/\\:\0]/g, "_").trim();
   return name && name !== "." && name !== ".." ? name : `${id}.bin`;
 }
+function dedupeMaterializedFilename(filename, index, usedFilenames) {
+  if (!usedFilenames.has(filename)) return filename;
+  const ext = extname3(filename);
+  const stem = ext ? filename.slice(0, -ext.length) : filename;
+  return `${stem}-${index + 1}${ext}`;
+}
 function compareAttachmentLineageCandidates(left, right) {
   const versionDiff = Number(right.artifactVersionState === "current") - Number(left.artifactVersionState === "current");
   if (versionDiff !== 0) return versionDiff;
@@ -38382,7 +38709,7 @@ async function materializeIssueAttachments(config, command, workspace) {
     runtimeAuth,
     issueId
   );
-  const targetDir = join21(workspace.cwd, "input-attachments");
+  const targetDir = join23(workspace.cwd, "input-attachments");
   mkdirSync12(targetDir, { recursive: true });
   const usedFilenames = /* @__PURE__ */ new Set();
   const materialized = [];
@@ -38394,18 +38721,14 @@ async function materializeIssueAttachments(config, command, workspace) {
       continue;
     }
     let filename = safeMaterializedAttachmentFilename(attachment, index);
-    if (usedFilenames.has(filename)) {
-      const ext = extname3(filename);
-      const stem = ext ? filename.slice(0, -ext.length) : filename;
-      filename = `${stem}-${index + 1}${ext}`;
-    }
+    filename = dedupeMaterializedFilename(filename, index, usedFilenames);
     usedFilenames.add(filename);
-    const targetPath = join21(targetDir, filename);
+    const targetPath = join23(targetDir, filename);
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
     if (attachment.initializationInput === true && (body.byteLength !== attachment.byteSize || createHash19("sha256").update(body).digest("hex") !== attachment.sha256)) {
       throw new Error("Initialization input content does not match its preparation receipt");
     }
-    writeFileSync12(targetPath, body);
+    writeFileSync13(targetPath, body);
     const attachmentId = readString(attachment.id);
     const actualSha256 = createHash19("sha256").update(body).digest("hex");
     const lineageCandidates = lineageCandidatesByAttachmentId.get(attachmentId) ?? [];
@@ -38472,8 +38795,8 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
   if (manifest.version !== 1 || !Array.isArray(manifest.entries)) {
     throw new Error("artifact_input_manifest_invalid: expected version 1 entries array");
   }
-  const targetRoot = join21(workspace.cwd, "input-artifacts");
-  rmSync10(targetRoot, { recursive: true, force: true });
+  const targetRoot = join23(workspace.cwd, "input-artifacts");
+  rmSync11(targetRoot, { recursive: true, force: true });
   mkdirSync12(targetRoot, { recursive: true });
   const usedPaths = /* @__PURE__ */ new Set();
   const materialized = [];
@@ -38503,18 +38826,18 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       id: attachmentId,
       originalFilename: readString(entry.originalFilename)
     }, index);
-    let relativePath = join21("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    let relativePath = join23("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     if (usedPaths.has(relativePath)) {
       const ext = extname3(filename);
       const stem = ext ? filename.slice(0, -ext.length) : filename;
       filename = `${stem}-${index + 1}${ext}`;
-      relativePath = join21("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+      relativePath = join23("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     }
     usedPaths.add(relativePath);
-    const targetPath = join21(workspace.cwd, relativePath);
+    const targetPath = join23(workspace.cwd, relativePath);
     mkdirSync12(dirname11(targetPath), { recursive: true });
-    writeFileSync12(targetPath, body);
-    chmodSync6(targetPath, 292);
+    writeFileSync13(targetPath, body);
+    chmodSync7(targetPath, 292);
     materialized.push({
       id: attachmentId,
       workProductId,
@@ -38533,14 +38856,84 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
     version: 1,
     entries: materialized.map(({ path: _path, relativePath, ...entry }) => ({ ...entry, path: relativePath }))
   };
-  const manifestPath = join21(targetRoot, "artifact-input-manifest.json");
-  writeFileSync12(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
-  chmodSync6(manifestPath, 292);
+  const manifestPath = join23(targetRoot, "artifact-input-manifest.json");
+  writeFileSync13(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
+  chmodSync7(manifestPath, 292);
   updateWorkspaceManifest(workspaceManifestPath(workspace), { artifactInputManifest: localManifest });
   return materialized;
 }
+async function materializeMentionedArtifactFiles(config, command, workspace) {
+  const empty = { materialized: [], skipped: [] };
+  const mention = commandMentionContext(command);
+  if (!mention) return empty;
+  const runtimeAuth = commandRuntimeAuth(command);
+  const files = Array.isArray(mention.files) ? mention.files : [];
+  if (files.length === 0 || !readString(runtimeAuth.apiUrl) || !readString(runtimeAuth.apiKey)) return empty;
+  const targetDir = join23(workspace.cwd, "input-artifacts", "mentioned");
+  rmSync11(targetDir, { recursive: true, force: true });
+  mkdirSync12(targetDir, { recursive: true });
+  const usedFilenames = /* @__PURE__ */ new Set();
+  const materialized = [];
+  const skipped = [];
+  for (const [index, rawEntry] of files.entries()) {
+    const entry = asRecord(rawEntry);
+    const artifactId = readString(entry.artifactId) ?? `mentioned-${index + 1}`;
+    const contentPath = readString(entry.contentPath);
+    if (!contentPath) {
+      skipped.push({ artifactId, reason: "content_path_missing" });
+      continue;
+    }
+    let body;
+    try {
+      body = await runtimeApiBuffer(runtimeAuth, contentPath);
+    } catch (err) {
+      skipped.push({
+        artifactId,
+        reason: "download_failed",
+        error: truncateText(err instanceof Error ? err.message : String(err), 1e3)
+      });
+      continue;
+    }
+    const actualSha256 = createHash19("sha256").update(body).digest("hex");
+    const expectedSha256 = readString(entry.sha256)?.toLowerCase() ?? null;
+    const expectedByteSize = readNumber(entry.byteSize, null);
+    if (expectedByteSize !== null && body.byteLength !== expectedByteSize || expectedSha256 && actualSha256 !== expectedSha256) {
+      skipped.push({
+        artifactId,
+        reason: "integrity_mismatch",
+        expectedByteSize,
+        actualByteSize: body.byteLength,
+        ...expectedSha256 ? { expectedSha256 } : {},
+        actualSha256
+      });
+      continue;
+    }
+    let filename = safeMaterializedAttachmentFilename({
+      id: artifactId,
+      originalFilename: readString(entry.originalFilename),
+      title: readString(entry.title)
+    }, index);
+    filename = dedupeMaterializedFilename(filename, index, usedFilenames);
+    usedFilenames.add(filename);
+    const targetPath = join23(targetDir, filename);
+    writeFileSync13(targetPath, body);
+    chmodSync7(targetPath, 292);
+    materialized.push({
+      id: artifactId,
+      name: readString(entry.title) ?? readString(entry.originalFilename) ?? filename,
+      path: targetPath,
+      relativePath: relative9(workspace.cwd, targetPath),
+      contentType: readString(entry.contentType),
+      byteSize: body.byteLength,
+      sha256: actualSha256,
+      contentPath,
+      ...readString(entry.workProductId) ? { workProductId: readString(entry.workProductId) } : {}
+    });
+  }
+  return { materialized, skipped };
+}
 function issueCheckpointDir(workspace) {
-  return join21(dirname11(workspace.runDir), "checkpoint");
+  return join23(dirname11(workspace.runDir), "checkpoint");
 }
 async function clearIssueCheckpoint(config, command, workspace, reason, consumedSource = null) {
   const checkpointDir = issueCheckpointDir(workspace);
@@ -38550,13 +38943,13 @@ async function clearIssueCheckpoint(config, command, workspace, reason, consumed
     if (!sourceRunId) return false;
     let manifest;
     try {
-      manifest = asRecord(JSON.parse(readFileSync18(join21(checkpointDir, "manifest.json"), "utf8")));
+      manifest = asRecord(JSON.parse(readFileSync19(join23(checkpointDir, "manifest.json"), "utf8")));
     } catch {
       return false;
     }
     if (readString(manifest.issueId) !== commandIssueId(command) || readString(manifest.sourceRunId) !== sourceRunId) return false;
   }
-  rmSync10(checkpointDir, { recursive: true, force: true });
+  rmSync11(checkpointDir, { recursive: true, force: true });
   await ingestLog(config, command, "system", "info", "Cleared issue continuation checkpoint", { reason });
   return true;
 }
@@ -38569,7 +38962,7 @@ function safeCheckpointRelativePath(rawPath) {
   return normalized;
 }
 function hashFileSha256(filePath) {
-  return createHash19("sha256").update(readFileSync18(filePath)).digest("hex");
+  return createHash19("sha256").update(readFileSync19(filePath)).digest("hex");
 }
 function expectedContinuationCheckpoint(command) {
   const payload = asRecord(command.payload);
@@ -38595,7 +38988,7 @@ function expectedContinuationCheckpoint(command) {
 }
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);
-  const manifestPath = join21(checkpointDir, "manifest.json");
+  const manifestPath = join23(checkpointDir, "manifest.json");
   const expectedContinuation = expectedContinuationCheckpoint(command);
   const nativeRequest = asRecord(asRecord(command.payload).nativeSession);
   let portableNativeSession;
@@ -38625,14 +39018,14 @@ async function materializeIssueCheckpoint(config, command, workspace) {
   }
   let manifest;
   try {
-    manifest = asRecord(JSON.parse(readFileSync18(manifestPath, "utf8")));
+    manifest = asRecord(JSON.parse(readFileSync19(manifestPath, "utf8")));
   } catch (err) {
-    rmSync10(checkpointDir, { recursive: true, force: true });
+    rmSync11(checkpointDir, { recursive: true, force: true });
     throw new Error(`invalid issue checkpoint manifest: ${err instanceof Error ? err.message : String(err)}`);
   }
   const expiresAt = Date.parse(readString(manifest.expiresAt) ?? "");
   if (!Number.isFinite(expiresAt) || expiresAt <= Date.now() || readString(manifest.issueId) !== commandIssueId(command)) {
-    rmSync10(checkpointDir, { recursive: true, force: true });
+    rmSync11(checkpointDir, { recursive: true, force: true });
     if (expectedContinuation) throw new Error("continuation_checkpoint_unavailable: manifest_expired_or_mismatched");
     return unavailable2;
   }
@@ -38656,7 +39049,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
         throw new Error("continuation_checkpoint_lineage_mismatch");
       }
     }
-    const filesRoot = realpathSync12(join21(checkpointDir, "files"));
+    const filesRoot = files.length > 0 ? realpathSync12(join23(checkpointDir, "files")) : null;
     const workspaceRoot = realpathSync12(workspace.cwd);
     const validated = [];
     let totalBytes = 0;
@@ -38664,8 +39057,8 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       const file = asRecord(rawFile);
       const relativePath = safeCheckpointRelativePath(readString(file.path));
       if (!relativePath) throw new Error("issue checkpoint manifest contains an invalid file path");
-      const sourceCandidate = resolve18(filesRoot, relativePath);
-      const target = resolve18(workspaceRoot, relativePath);
+      const sourceCandidate = resolve19(filesRoot, relativePath);
+      const target = resolve19(workspaceRoot, relativePath);
       if (!pathWithin3(sourceCandidate, filesRoot) || !pathWithin3(target, workspaceRoot)) {
         throw new Error(`issue checkpoint path escapes its workspace: ${relativePath}`);
       }
@@ -38701,7 +39094,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       }
       let existingTarget = null;
       try {
-        existingTarget = lstatSync12(target);
+        existingTarget = lstatSync13(target);
       } catch (err) {
         if (err?.code !== "ENOENT") throw err;
       }
@@ -38712,16 +39105,16 @@ async function materializeIssueCheckpoint(config, command, workspace) {
         materialized.push(relativePath);
         continue;
       }
-      const temporaryTarget = join21(targetParent, `.${basename8(target)}.checkpoint-${randomUUID2()}.tmp`);
+      const temporaryTarget = join23(targetParent, `.${basename8(target)}.checkpoint-${randomUUID2()}.tmp`);
       try {
         copyFileSync2(source, temporaryTarget);
-        const temporaryStat = lstatSync12(temporaryTarget);
+        const temporaryStat = lstatSync13(temporaryTarget);
         if (!temporaryStat.isFile() || temporaryStat.size !== expectedByteSize || hashFileSha256(temporaryTarget) !== expectedSha256) {
           throw new Error(`issue checkpoint target verification failed: ${relativePath}`);
         }
-        renameSync9(temporaryTarget, target);
+        renameSync10(temporaryTarget, target);
       } finally {
-        rmSync10(temporaryTarget, { force: true });
+        rmSync11(temporaryTarget, { force: true });
       }
       materialized.push(relativePath);
     }
@@ -38748,9 +39141,9 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
   const commandKey = readString(command.commandId)?.replace(/[^A-Za-z0-9_-]/g, "-") ?? randomUUID2();
   const stagingDir = `${checkpointDir}.tmp-${commandKey}`;
   const backupDir = `${checkpointDir}.previous-${commandKey}`;
-  const filesDir = join21(stagingDir, "files");
-  rmSync10(stagingDir, { recursive: true, force: true });
-  rmSync10(backupDir, { recursive: true, force: true });
+  const filesDir = join23(stagingDir, "files");
+  rmSync11(stagingDir, { recursive: true, force: true });
+  rmSync11(backupDir, { recursive: true, force: true });
   mkdirSync12(filesDir, { recursive: true });
   try {
     const files = [];
@@ -38762,13 +39155,13 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       if (!normalized) {
         throw new Error(`continuation_checkpoint_file_unavailable: ${requiredPath}`);
       }
-      const sourceCandidate = resolve18(workspaceRoot, normalized);
+      const sourceCandidate = resolve19(workspaceRoot, normalized);
       if (!pathWithin3(sourceCandidate, workspaceRoot)) {
         throw new Error(`continuation_checkpoint_file_unavailable: ${requiredPath}`);
       }
       let sourceStat;
       try {
-        sourceStat = lstatSync12(sourceCandidate);
+        sourceStat = lstatSync13(sourceCandidate);
       } catch (err) {
         if (err?.code === "ENOENT") {
           throw new Error(`continuation_checkpoint_file_unavailable: ${requiredPath}`);
@@ -38800,11 +39193,11 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
         if (requiredPaths.length > 0 || options.taskSession) throw new Error(`continuation_checkpoint_file_size_invalid: ${relativePath}`);
         continue;
       }
-      const target = resolve18(filesDir, relativePath);
+      const target = resolve19(filesDir, relativePath);
       if (!pathWithin3(target, filesDir)) continue;
       mkdirSync12(dirname11(target), { recursive: true });
       copyFileSync2(ownedSource, target);
-      const storedStat = lstatSync12(target);
+      const storedStat = lstatSync13(target);
       if (!storedStat.isFile() || storedStat.size !== byteSize) {
         throw new Error(`issue checkpoint copy verification failed: ${relativePath}`);
       }
@@ -38812,8 +39205,8 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       files.push({ path: relativePath, byteSize, sha256: hashFileSha256(target) });
     }
     if (files.length === 0 && !options.taskSession) {
-      rmSync10(stagingDir, { recursive: true, force: true });
-      rmSync10(checkpointDir, { recursive: true, force: true });
+      rmSync11(stagingDir, { recursive: true, force: true });
+      rmSync11(checkpointDir, { recursive: true, force: true });
       return null;
     }
     const checkpointCreatedAt = Date.now();
@@ -38838,26 +39231,26 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       totalBytes,
       files
     };
-    writeFileSync12(join21(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
+    writeFileSync13(join23(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
 `);
     const replacingExistingCheckpoint = existsSync18(checkpointDir);
-    if (replacingExistingCheckpoint) renameSync9(checkpointDir, backupDir);
+    if (replacingExistingCheckpoint) renameSync10(checkpointDir, backupDir);
     try {
-      renameSync9(stagingDir, checkpointDir);
+      renameSync10(stagingDir, checkpointDir);
     } catch (err) {
       if (replacingExistingCheckpoint && existsSync18(backupDir) && !existsSync18(checkpointDir)) {
-        renameSync9(backupDir, checkpointDir);
+        renameSync10(backupDir, checkpointDir);
       }
       throw err;
     }
-    rmSync10(backupDir, { recursive: true, force: true });
+    rmSync11(backupDir, { recursive: true, force: true });
     if (config.checkpointUploadEnabled) {
       await uploadCheckpoint(config, command, checkpointDir, manifest, void 0, options.nativeSession);
     }
     await ingestLog(config, command, "system", "info", `Saved ${files.length} issue checkpoint file(s) for continuation`, manifest);
     return manifest;
   } catch (err) {
-    rmSync10(stagingDir, { recursive: true, force: true });
+    rmSync11(stagingDir, { recursive: true, force: true });
     throw err;
   }
 }
@@ -38998,8 +39391,36 @@ async function executeRunCommand(config, command) {
     });
   }
   assertRequiredTaskAttachmentMaterialized(commandTaskResourceInput(command), materializedAttachments);
+  try {
+    const mentionResult = await materializeMentionedArtifactFiles(config, command, workspace);
+    if (mentionResult.materialized.length > 0 || mentionResult.skipped.length > 0) {
+      enqueuePreparationLog("system", "info", `Materialized ${mentionResult.materialized.length} mentioned file(s) into the execution workspace (${mentionResult.skipped.length} skipped)`, {
+        mentionedFileCount: mentionResult.materialized.length,
+        mentionedSkippedCount: mentionResult.skipped.length,
+        mentionedFiles: mentionResult.materialized.map((entry) => ({
+          id: entry.id,
+          name: entry.name,
+          path: entry.relativePath
+        })),
+        ...mentionResult.skipped.length > 0 ? { mentionedSkipped: mentionResult.skipped } : {}
+      });
+    }
+    materializedAttachments = [...materializedAttachments, ...mentionResult.materialized];
+  } catch (err) {
+    enqueuePreparationLog("system", "warn", `Failed to materialize mentioned files: ${err instanceof Error ? err.message : String(err)}`, {
+      error: err instanceof Error ? err.message : String(err)
+    });
+  }
   await ingestWorkspaceStatus(config, command, cwd);
   const browserSession = commandBrowserSession(command);
+  const browserCredentialPresentationKind = browserCredentialPresentation(command);
+  const browserCredentialPlan = browserCredentialEnvPlan(command, browserCredentialPresentationKind);
+  if (browserCredentialPlan && executor.kind !== "pi") {
+    throw new Error("browser_credential_env_pi_executor_required");
+  }
+  if (browserCredentialPlan && (config.runnerKind !== RUNNER_KIND_CLOUD_MANAGED || config.piExecutorUid <= 0 || config.piExecutorGid <= 0 || typeof process.getuid !== "function" || config.piExecutorUid === process.getuid())) {
+    throw new Error("browser_credential_env_managed_isolation_required");
+  }
   const nativeSessionRequest = asRecord(asRecord(command.payload).nativeSession);
   let invocation = null;
   let executorEnv = buildExecutorEnv(config, command, workspace);
@@ -39007,6 +39428,7 @@ async function executeRunCommand(config, command) {
   let managedMcpCleanup = null;
   let cleanupManagedMcpProfile = null;
   let piRuntimeSystemPromptCleanupPath = null;
+  let browserCredentialEnvMaterialization = null;
   let piExecutorIdentity = null;
   const providerProtectedValues = [];
   let piResolvedProviderConfig = null;
@@ -39121,7 +39543,7 @@ async function executeRunCommand(config, command) {
           executorCommand: invocation.command,
           executorHome: workspace.executorHome,
           runDir: workspace.runDir,
-          runtimeCacheRoot: join21(dirname11(config.daemonStateFile), "cache"),
+          runtimeCacheRoot: join23(dirname11(config.daemonStateFile), "cache"),
           cwd,
           runtimeAuth: commandRuntimeAuth(command),
           nativeSession: asRecord(asRecord(executionCommand.payload).nativeSession),
@@ -39208,7 +39630,7 @@ async function executeRunCommand(config, command) {
       const sharedPiHome = readString(process.env.PI_CODING_AGENT_DIR) ?? readString(process.env.PI_AGENT_HOME) ?? null;
       let agentDir = managedMcpProfile ? readString(managedMcpProfile.env.PI_CODING_AGENT_DIR) ?? readString(managedMcpProfile.env.PI_AGENT_HOME) ?? null : desktopDelegatedRunnerEnabled(config) ? readString(executorEnv.PI_AGENT_HOME) ?? readString(executorEnv.PI_CODING_AGENT_DIR) ?? null : readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
       piAgentDirForContextBudget = agentDir;
-      if (agentDir && sharedPiHome && resolve18(agentDir) === resolve18(sharedPiHome)) {
+      if (agentDir && sharedPiHome && resolve19(agentDir) === resolve19(sharedPiHome)) {
         agentDir = null;
       }
       try {
@@ -39315,6 +39737,7 @@ async function executeRunCommand(config, command) {
       runtimeTemplateCatalog: config.templateCatalog,
       runtimeInstructionInjectionEnabled: strictContextGovernance,
       executorCapabilityNotice: executor.kind === "codebuddy" ? codebuddyExecutionCapabilityNotice(managedMcpProfile) : "",
+      browserCredentialEnv: browserCredentialPlan?.promptText ?? "",
       maxChars: modelContextBudget.dynamicPromptMaxChars
     }));
     const requiredGoalAuthority = goalAuthorityBlock(requireCommandContextEnvelope(command).dynamicContext);
@@ -39373,6 +39796,40 @@ async function executeRunCommand(config, command) {
       preparationStages
     });
     await preparationLogChain;
+    const abortController = new AbortController();
+    if (browserCredentialPlan) {
+      browserCredentialEnvMaterialization = await runExecutionStage(
+        "browser_credential_env",
+        () => materializeBrowserCredentialEnv(browserCredentialPlan, {
+          runDir: workspace.runDir,
+          consume: (credentialRef, controlSemantic) => consumeRuntimeBrowserCredentialRef(
+            config,
+            requireConnectorId(config),
+            command.commandId,
+            { ...credentialRef, controlSemantic },
+            { signal: abortController.signal }
+          )
+        })
+      );
+      executorEnv = {
+        ...executorEnv,
+        [BROWSER_CREDENTIAL_ENV_FILE]: browserCredentialEnvMaterialization.filePath
+      };
+      for (const protectedValue of browserCredentialEnvMaterialization.protectedValues) {
+        if (!providerProtectedValues.includes(protectedValue)) providerProtectedValues.push(protectedValue);
+      }
+      if (piExecutorIdentity) handoffPiRunPathsToChild(config, [
+        browserCredentialEnvMaterialization.dirPath,
+        browserCredentialEnvMaterialization.filePath
+      ]);
+      enqueuePreparationLog("system", "info", "Materialized command-scoped browser credential environment", {
+        presentationKind: "browser_credential_env",
+        origin: browserCredentialPlan.origin,
+        keys: browserCredentialPlan.availableKeys,
+        modelVisible: true
+      });
+      await preparationLogChain;
+    }
     forgetActiveRunCommand = rememberActiveRunCommand(command, {
       executorKind: executor.kind,
       workspacePath: cwd,
@@ -39382,9 +39839,11 @@ async function executeRunCommand(config, command) {
       outputFloodLimitBytesPerStream: config.executorMaxOutputBytes,
       ...managedMcpProfile ? { managedMcpAttestation: managedMcpProfile.attestation } : {}
     });
-    const abortController = new AbortController();
     stopActiveRunHeartbeats = startActiveRunHeartbeats(config, command, abortController);
-    const protectedExecutorValues = managedMcpProfile?.protectedValues ?? providerProtectedValues;
+    const protectedExecutorValues = [.../* @__PURE__ */ new Set([
+      ...managedMcpProfile?.protectedValues ?? [],
+      ...providerProtectedValues
+    ])];
     const runtimeArtifacts = [];
     const runtimeDocuments = [];
     const runtimeArtifactIngest = createRuntimeArtifactIngestQueue({
@@ -39426,7 +39885,7 @@ async function executeRunCommand(config, command) {
       }
     );
     let execution;
-    const browserCredentialConsumer = Array.isArray(command.payload?.browserCredentialRefs) && command.payload.browserCredentialRefs.length > 0 ? async (request) => {
+    const browserCredentialConsumer = browserCredentialPresentationKind === "private_channel" ? async (request) => {
       const credentialRef = browserCredentialRefForRequest(command, request);
       return consumeRuntimeBrowserCredentialRef(
         config,
@@ -39558,7 +40017,7 @@ async function executeRunCommand(config, command) {
           workspace,
           workspaceStatus.artifacts.map((artifact) => ({
             rawPath: artifact.relativePath,
-            filePath: resolve18(cwd, artifact.relativePath)
+            filePath: resolve19(cwd, artifact.relativePath)
           })),
           {
             requiredPaths: checkpointPaths,
@@ -39669,7 +40128,7 @@ async function executeRunCommand(config, command) {
           workspace,
           workspaceStatus.artifacts.map((artifact) => ({
             rawPath: artifact.relativePath,
-            filePath: resolve18(cwd, artifact.relativePath)
+            filePath: resolve19(cwd, artifact.relativePath)
           }))
         ) : readString(terminalRunDisposition?.disposition) !== "continuation_scheduled" ? await saveIssueCheckpoint(config, command, workspace, [], {
           requiredPaths: taskSessionCheckpointPaths(workspaceStatus),
@@ -40027,8 +40486,9 @@ async function executeRunCommand(config, command) {
   } finally {
     await preparationLogChain;
     if (piRuntimeSystemPromptCleanupPath) {
-      rmSync10(piRuntimeSystemPromptCleanupPath, { force: true });
+      rmSync11(piRuntimeSystemPromptCleanupPath, { force: true });
     }
+    browserCredentialEnvMaterialization?.cleanup();
     if (managedMcpProfile && !managedMcpCleanup && !completionOwnsManagedMcpProfile) {
       managedMcpCleanup = cleanupManagedMcpProfile(managedMcpProfile, {
         commandId: command.commandId,