@amaster.ai/employee-runtime-connector 0.1.11 → 0.1.13-beta.0

package/dist/amaster-runtime-daemon/capability-registry.mjs

@@ -24,9 +24,15 @@ export const BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "mirrorx_initialization_completion_v1",
   "native_session_checkpoint_v1",
   "pi_web_public_search_v1",
+  "pi_web_public_fetch_v1",
 ]);
 
 const DYNAMIC_READINESS = Object.freeze({
+  pi_web_public_fetch_v1: {
+    reasonCode: "pi_web_fetch_extension_unavailable",
+    ready: (input) => input.executors.some((executor) => executor.kind === "pi")
+      && input.piWebFetchReady === true,
+  },
   pi_web_public_search_v1: {
     reasonCode: "pi_web_search_extension_unavailable",
     ready: (input) => input.executors.some((executor) => executor.kind === "pi")

package/dist/amaster-runtime-daemon.mjs

@@ -4946,7 +4946,8 @@ var AMASTER_RUNTIME_CONNECTOR_CAPABILITIES = [
   "mirrorx_initialization_context_v1",
   "mirrorx_initialization_completion_v1",
   "native_session_checkpoint_v1",
-  "pi_web_public_search_v1"
+  "pi_web_public_search_v1",
+  "pi_web_public_fetch_v1"
 ];
 var RUNTIME_EXECUTION_LANES = ["business", "conversation"];
 var runtimeExecutionLaneSchema = external_exports.enum(RUNTIME_EXECUTION_LANES);
@@ -5462,10 +5463,20 @@ var EXTERNAL_WAIT_REASON_CODES = {
   externalInputPending: "external_input_pending",
   externalApprovalPending: "external_approval_pending",
   externalDependencyPending: "external_dependency_pending",
+  externalServiceUnavailable: "external_service_unavailable",
   heligeGenerationInProgress: "helige_generation_in_progress",
   heligeNewTurnNotObserved: "helige_new_turn_not_observed",
   heligeGenerationStatusUnavailable: "helige_generation_status_unavailable"
 };
+var EXTERNAL_WAIT_NEW_WRITE_REASON_CODES = [
+  EXTERNAL_WAIT_REASON_CODES.browserHumanSessionHandoffRequired,
+  EXTERNAL_WAIT_REASON_CODES.externalDependencyPending,
+  EXTERNAL_WAIT_REASON_CODES.externalServiceUnavailable,
+  EXTERNAL_WAIT_REASON_CODES.wikiOperationContextMissing,
+  EXTERNAL_WAIT_REASON_CODES.agentInsufficientBalance,
+  EXTERNAL_WAIT_REASON_CODES.heligeInsufficientBalance,
+  EXTERNAL_WAIT_REASON_CODES.businessDataSourceUnavailable
+];
 var LEGACY_BROWSER_HANDOFF_REASON_CODES = [
   EXTERNAL_WAIT_REASON_CODES.browserMfaRequired,
   EXTERNAL_WAIT_REASON_CODES.browserCaptchaRequired,
@@ -9701,6 +9712,32 @@ var createTaskResourceAttachmentRequestSchema = external_exports.object({ attach
 // ../shared/src/mirrorx-discovery-governance.ts
 var sha256Schema6 = external_exports.string().regex(/^sha256:[a-f0-9]{64}$/);
 var positiveBoundedInteger = (max) => external_exports.number().int().positive().max(max);
+var selectMirrorXInternalDiscoveryTargetSchema = external_exports.object({
+  routineId: external_exports.string().uuid(),
+  criterionId: external_exports.string().uuid(),
+  gapId: external_exports.string().uuid(),
+  expectedGapContractId: external_exports.string().uuid(),
+  expectedGapAuthorityRevision: external_exports.number().int().positive()
+}).strict();
+var mirrorXInternalDiscoveryTargetSelectionSchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  companyId: external_exports.string().uuid(),
+  routineId: external_exports.string().uuid(),
+  goalId: external_exports.string().uuid(),
+  criterionId: external_exports.string().uuid(),
+  gapId: external_exports.string().uuid(),
+  gapContractId: external_exports.string().uuid(),
+  gapAuthorityRevision: external_exports.number().int().positive(),
+  targetKey: external_exports.string().min(1),
+  sourceSelectorRevision: external_exports.string().min(1),
+  projectionPolicyRevision: external_exports.number().int().positive(),
+  comparePolicyRevision: external_exports.number().int().positive(),
+  freezeSeq: external_exports.string().regex(/^\d+$/),
+  selectionRevision: external_exports.number().int().positive(),
+  status: external_exports.enum(["current", "superseded"]),
+  createdAt: external_exports.string().datetime({ offset: true }),
+  supersededAt: external_exports.string().datetime({ offset: true }).nullable()
+}).strict();
 var mirrorxDiscoveryPromotionModeSchema = external_exports.enum(["shadow", "board_gated"]);
 var customerFeedbackSourceBindingV1Schema = external_exports.object({
   version: external_exports.literal(1),
@@ -19179,7 +19216,7 @@ var MIRRORX_DRIVE_AGENT_RULES = [
 // src/amaster-runtime-daemon.mjs
 import { chmodSync as chmodSync8, copyFileSync as copyFileSync2, existsSync as existsSync18, lstatSync as lstatSync15, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync5, readFileSync as readFileSync20, readdirSync as readdirSync13, realpathSync as realpathSync12, renameSync as renameSync11, rmSync as rmSync12, statSync as statSync12, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "node:fs";
 import { arch as arch4, homedir as homedir7, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
-import { basename as basename8, delimiter as delimiter3, dirname as dirname12, extname as extname3, isAbsolute as isAbsolute12, join as join25, relative as relative9, resolve as resolve19 } from "node:path";
+import { basename as basename8, delimiter as delimiter3, dirname as dirname13, extname as extname3, isAbsolute as isAbsolute13, join as join25, relative as relative9, resolve as resolve19 } from "node:path";
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
 
 // src/amaster-runtime-daemon/common.mjs
@@ -29118,11 +29155,17 @@ function piRuntimeWebEvidence(event) {
       return [];
     }
   }
+  const directToolEndResult = readString(event?.type) === "tool_execution_end" ? {
+    ...asRecord(event?.result),
+    role: "toolResult",
+    toolName: readString(event?.toolName) ?? readString(asRecord(event?.result).toolName),
+    toolCallId: readString(event?.toolCallId) ?? readString(asRecord(event?.result).toolCallId)
+  } : null;
   const toolResults = [
     event?.message,
     ...Array.isArray(event?.messages) ? event.messages : [],
     ...Array.isArray(event?.toolResults) ? event.toolResults : [],
-    ...readString(event?.type) === "tool_execution_end" ? [event?.result] : []
+    ...directToolEndResult ? [directToolEndResult] : []
   ];
   const evidence = [];
   const seen = /* @__PURE__ */ new Set();
@@ -32735,9 +32778,14 @@ var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "mirrorx_initialization_context_v1",
   "mirrorx_initialization_completion_v1",
   "native_session_checkpoint_v1",
-  "pi_web_public_search_v1"
+  "pi_web_public_search_v1",
+  "pi_web_public_fetch_v1"
 ]);
 var DYNAMIC_READINESS = Object.freeze({
+  pi_web_public_fetch_v1: {
+    reasonCode: "pi_web_fetch_extension_unavailable",
+    ready: (input) => input.executors.some((executor) => executor.kind === "pi") && input.piWebFetchReady === true
+  },
   pi_web_public_search_v1: {
     reasonCode: "pi_web_search_extension_unavailable",
     ready: (input) => input.executors.some((executor) => executor.kind === "pi") && input.piWebSearchReady === true
@@ -33236,20 +33284,35 @@ function exactRequest(value, challenge) {
   if (!["username", "password"].includes(value.credentialRole) || !semanticMatches(value.credentialRole, semantic)) return null;
   return { ...value, credentialKey: value.credentialKey.trim(), targetOrigin, authenticationOrigin, controlSemantic: semantic };
 }
-function createBrowserCredentialChannel({ consume }) {
+function createBrowserCredentialChannel({ consume, onFailure }) {
   if (typeof consume !== "function") throw new Error("browser_credential_consumer_required");
   const challenge = randomBytes2(32).toString("base64url");
   const consumedRefs = /* @__PURE__ */ new Set();
   const consumedRequests = [];
   const authReceipts = [];
   let closed = false;
+  let failed = false;
   let requestBuffer = Buffer.alloc(0);
   let sequence = Promise.resolve();
   let responsePipe = null;
+  const failClosed = () => {
+    if (failed) return;
+    failed = true;
+    closed = true;
+    requestBuffer.fill(0);
+    requestBuffer = Buffer.alloc(0);
+    authReceipts.length = 0;
+    try {
+      responsePipe?.end();
+    } catch {
+    }
+    onFailure?.("browser_credential_private_fd_lost");
+  };
   const respondError = (reason) => {
     if (!closed && responsePipe?.writable) responsePipe.write(encodeBrowserCredentialFrame("E", Buffer.from(reason, "utf8")));
   };
   const handleReceipt = (frame) => {
+    if (closed) return;
     let receipt;
     try {
       receipt = JSON.parse(frame.payload.toString("utf8"));
@@ -33280,6 +33343,7 @@ function createBrowserCredentialChannel({ consume }) {
     if (authReceipts.length === 0) authReceipts.push(Object.freeze({ ...receipt, credentialRoles: [...new Set(receipt.credentialRoles)].sort() }));
   };
   const handleFrame = async (frame) => {
+    if (closed) return;
     if (frame.type === "A") return handleReceipt(frame);
     if (frame.type !== "R" || frame.payload.length > MAX_BYTES3) return respondError("browser_credential_request_invalid");
     let decoded;
@@ -33299,6 +33363,10 @@ function createBrowserCredentialChannel({ consume }) {
     try {
       const value = await consume(request);
       bytes = Buffer.isBuffer(value) ? value : Buffer.from(value, "utf8");
+      if (closed) {
+        bytes.fill(0);
+        return;
+      }
       if (bytes.length === 0 || bytes.length > MAX_BYTES3) throw new Error("browser_credential_value_invalid");
       responseFrame = encodeBrowserCredentialFrame("V", bytes);
       responsePipe.write(responseFrame, () => {
@@ -33316,6 +33384,8 @@ function createBrowserCredentialChannel({ consume }) {
       const requestPipe = child?.stdio?.[BROWSER_CREDENTIAL_REQUEST_FD];
       responsePipe = child?.stdio?.[BROWSER_CREDENTIAL_RESPONSE_FD];
       if (!requestPipe?.on || !responsePipe?.write) throw new Error("browser_credential_private_fd_unavailable");
+      requestPipe.on("error", failClosed);
+      responsePipe.on("error", failClosed);
       responsePipe.write(encodeBrowserCredentialFrame("C", Buffer.from(challenge, "utf8")));
       requestPipe.on("data", (chunk) => {
         if (closed) return;
@@ -33342,6 +33412,7 @@ function createBrowserCredentialChannel({ consume }) {
     },
     async receipts() {
       await sequence;
+      if (failed) return [];
       return authReceipts.map((receipt) => ({ ...receipt, credentialRoles: [...receipt.credentialRoles] }));
     },
     close() {
@@ -33357,7 +33428,7 @@ function createBrowserCredentialChannel({ consume }) {
 import { existsSync as existsSync12, lstatSync as lstatSync9, readFileSync as readFileSync12, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
 import { createHash as createHash14 } from "node:crypto";
 import { homedir as homedir4 } from "node:os";
-import { isAbsolute as isAbsolute7, join as join16, relative as relative5, resolve as resolve10 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute7, join as join16, relative as relative5, resolve as resolve10 } from "node:path";
 var CAPABILITY = "browser_credential_auth_transaction_v1";
 var CREDENTIAL_BROWSER_TCB = Object.freeze({
   package: "chrome-devtools-mcp",
@@ -33370,26 +33441,34 @@ var CREDENTIAL_BROWSER_PACKAGE_FILES = Object.freeze({
   "dist/index.js": "7530da9aaa0ee272fa6e10ff80059f42a45aee6fff8d8c7cbce05c2cb24e180c"
 });
 var CREDENTIAL_AUTH_EXTENSION_SHA256 = "14088f0a7761a2a0884477ac2f300dcf615e4ba78b7753e4aec8078b344ab9b9";
+var IMAGE_PI_HOME = "/opt/pi-cli-runtime/.pi";
+var IMAGE_AUTH_EXTENSION_PATH = join16(IMAGE_PI_HOME, "extensions", "browser-credential-auth.mjs");
+var BROWSER_AUTH_IMAGE_NODE_PATH = join16(IMAGE_PI_HOME, "npm", "node_modules");
 var READINESS_CACHE_TTL_MS = 5e3;
 var readinessCache = /* @__PURE__ */ new Map();
-function inspectBrowserCredentialAuthReadiness(env = process.env, expected = {}) {
+function inspectBrowserCredentialAuthReadiness(env = process.env, expected = {}, options = {}) {
   const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join16(homedir4(), ".pi", "agent")).trim();
+  const packageHome = expected.packageHome ?? IMAGE_PI_HOME;
+  const extensionPath = expected.authExtensionPath ?? IMAGE_AUTH_EXTENSION_PATH;
+  const requireImageOwnership = options.requireImageOwnership !== false;
+  const cacheKey = JSON.stringify([home, packageHome, extensionPath, requireImageOwnership]);
   const now = Date.now();
-  const cached = readinessCache.get(home);
-  if (cached && cached.expiresAt > now) return { ...cached.readiness };
+  const cached = readinessCache.get(cacheKey);
+  if (!options.fresh && cached && cached.expiresAt > now) return { ...cached.readiness };
   const candidates = [
-    join16(home, "npm", "node_modules", "@amaster.ai", "pi-browser-use", "package.json"),
-    join16(home, "node_modules", "@amaster.ai", "pi-browser-use", "package.json")
+    join16(packageHome, "npm", "node_modules", "@amaster.ai", "pi-browser-use", "package.json"),
+    join16(packageHome, "node_modules", "@amaster.ai", "pi-browser-use", "package.json")
   ];
   const packageAttestation = candidates.map((manifestPath) => attestedPackageManifest(manifestPath, {
     browserTcb: expected.browserTcb ?? CREDENTIAL_BROWSER_TCB,
     packageFiles: expected.packageFiles ?? CREDENTIAL_BROWSER_PACKAGE_FILES,
     authExtensionSha256: expected.authExtensionSha256 ?? CREDENTIAL_AUTH_EXTENSION_SHA256
-  })).find(Boolean) ?? null;
+  }, requireImageOwnership)).find(Boolean) ?? null;
   const packageAttested = Boolean(packageAttestation);
   const authExtensionAttested = attestedAuthExtension(
-    join16(home, "extensions", "browser-credential-auth.mjs"),
-    packageAttestation ? expected.authExtensionSha256 ?? CREDENTIAL_AUTH_EXTENSION_SHA256 : null
+    extensionPath,
+    packageAttestation ? expected.authExtensionSha256 ?? CREDENTIAL_AUTH_EXTENSION_SHA256 : null,
+    requireImageOwnership
   );
   const readiness = {
     privateChannel: true,
@@ -33398,29 +33477,48 @@ function inspectBrowserCredentialAuthReadiness(env = process.env, expected = {})
     atomicTransaction: packageAttested && authExtensionAttested,
     trustedProfileInjection: packageAttested
   };
-  readinessCache.set(home, { readiness, expiresAt: now + READINESS_CACHE_TTL_MS });
+  readinessCache.set(cacheKey, { readiness, expiresAt: now + READINESS_CACHE_TTL_MS });
   return { ...readiness };
 }
-function attestedAuthExtension(extensionPath, expectedSha256) {
+function browserCredentialAuthExtensionArgs(authority, env = process.env, expected = {}, options = {}) {
+  if (!authority) return [];
+  const readiness = inspectBrowserCredentialAuthReadiness(env, expected, { ...options, fresh: true });
+  if (!readiness.atomicTransaction || !readiness.sealedGate) {
+    throw new Error("browser_credential_auth_extension_unavailable");
+  }
+  return ["--extension", expected.authExtensionPath ?? IMAGE_AUTH_EXTENSION_PATH];
+}
+function attestedAuthExtension(extensionPath, expectedSha256, requireImageOwnership) {
   try {
     if (typeof expectedSha256 !== "string" || !/^[a-f0-9]{64}$/u.test(expectedSha256)) return false;
-    if (!statSync6(extensionPath).isFile()) return false;
+    const extensionStat = lstatSync9(extensionPath);
+    if (!extensionStat.isFile() || extensionStat.isSymbolicLink()) return false;
+    if (requireImageOwnership && !immutableImageFile(extensionPath)) return false;
     const source = readFileSync12(extensionPath, "utf8");
     return createHash14("sha256").update(source, "utf8").digest("hex") === expectedSha256 && source.includes("BrowserCredentialAuthBroker") && source.includes("browser_authenticate") && source.includes("AMASTER_BROWSER_CREDENTIAL_PRIVATE_CHANNEL");
   } catch {
     return false;
   }
 }
+function immutableImageFile(filePath) {
+  const fileStat = lstatSync9(filePath);
+  if (!fileStat.isFile() || fileStat.isSymbolicLink() || fileStat.uid !== 0 || (fileStat.mode & 18) !== 0) return false;
+  for (let directory = dirname10(filePath); directory !== dirname10(directory); directory = dirname10(directory)) {
+    const parentStat = lstatSync9(directory);
+    if (!parentStat.isDirectory() || parentStat.isSymbolicLink() || parentStat.uid !== 0 || (parentStat.mode & 18) !== 0) return false;
+  }
+  return true;
+}
 function fileSha256(path) {
   return createHash14("sha256").update(readFileSync12(path)).digest("hex");
 }
-function treeAttestation(root) {
+function treeAttestation(root, requireImageOwnership) {
   const files = [];
   const visit = (directory) => {
     for (const entry of readdirSync8(directory, { withFileTypes: true })) {
       const path = join16(directory, entry.name);
       if (entry.isDirectory()) visit(path);
-      else if (entry.isFile() && !lstatSync9(path).isSymbolicLink()) files.push(path);
+      else if (entry.isFile() && !lstatSync9(path).isSymbolicLink() && (!requireImageOwnership || immutableImageFile(path))) files.push(path);
       else throw new Error("browser_credential_tcb_tree_invalid");
     }
   };
@@ -33434,8 +33532,9 @@ function treeAttestation(root) {
   }
   return digest2.digest("hex");
 }
-function attestedPackageManifest(manifestPath, expected) {
+function attestedPackageManifest(manifestPath, expected, requireImageOwnership) {
   try {
+    if (requireImageOwnership && !immutableImageFile(manifestPath)) return null;
     const manifest = JSON.parse(readFileSync12(manifestPath, "utf8"));
     if (manifest?.name !== "@amaster.ai/pi-browser-use") return null;
     if (!Array.isArray(manifest.mirrorxCapabilities) || !manifest.mirrorxCapabilities.includes(CAPABILITY)) {
@@ -33448,14 +33547,16 @@ function attestedPackageManifest(manifestPath, expected) {
     if (Object.entries(expected.packageFiles).some(([relativePath, sha2563]) => {
       const path = resolve10(packageDir, relativePath);
       const relativePathFromPackage = relative5(packageDir, path);
-      return !relativePathFromPackage || relativePathFromPackage.startsWith("..") || isAbsolute7(relativePathFromPackage) || !statSync6(path).isFile() || fileSha256(path) !== sha2563;
+      return !relativePathFromPackage || relativePathFromPackage.startsWith("..") || isAbsolute7(relativePathFromPackage) || !statSync6(path).isFile() || requireImageOwnership && !immutableImageFile(path) || fileSha256(path) !== sha2563;
     })) return null;
     const browserPackageDir = resolve10(packageDir, "..", "..", "chrome-devtools-mcp");
-    const browserPackage = JSON.parse(readFileSync12(join16(browserPackageDir, "package.json"), "utf8"));
-    if (browserPackage.name !== expected.browserTcb.package || browserPackage.version !== expected.browserTcb.version || treeAttestation(join16(browserPackageDir, "build")) !== expected.browserTcb.buildTreeSha256) return null;
+    const browserManifestPath = join16(browserPackageDir, "package.json");
+    if (requireImageOwnership && !immutableImageFile(browserManifestPath)) return null;
+    const browserPackage = JSON.parse(readFileSync12(browserManifestPath, "utf8"));
+    if (browserPackage.name !== expected.browserTcb.package || browserPackage.version !== expected.browserTcb.version || treeAttestation(join16(browserPackageDir, "build"), requireImageOwnership) !== expected.browserTcb.buildTreeSha256) return null;
     const entrypoint = resolve10(packageDir, manifest.main);
     const relativeEntrypoint = relative5(packageDir, entrypoint);
-    if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || isAbsolute7(relativeEntrypoint) || !existsSync12(entrypoint)) return null;
+    if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || isAbsolute7(relativeEntrypoint) || !existsSync12(entrypoint) || requireImageOwnership && !immutableImageFile(entrypoint)) return null;
     return statSync6(entrypoint).isFile() ? {} : null;
   } catch {
     return null;
@@ -33493,7 +33594,7 @@ function inspectBrowserCredentialEnvReadiness(env = process.env) {
 // src/amaster-runtime-daemon/pi-web-search-readiness.mjs
 import { lstatSync as lstatSync11, readFileSync as readFileSync14 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { join as join18 } from "node:path";
+import { isAbsolute as isAbsolute8, join as join18 } from "node:path";
 function readRegularJson(path) {
   try {
     const stat = lstatSync11(path);
@@ -33504,18 +33605,36 @@ function readRegularJson(path) {
     return null;
   }
 }
-function inspectPiWebSearchReadiness(env = process.env) {
-  const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join18(homedir6(), ".pi", "agent")).trim();
+function isRegularFile(path) {
+  try {
+    const stat = lstatSync11(path);
+    return stat.isFile() && !stat.isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function installedPiWebAccess(env) {
+  const home = String(env["AMASTER-CLI_CODING_AGENT_DIR"] ?? env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join18(homedir6(), ".pi", "agent")).trim();
   const settings = readRegularJson(join18(home, "settings.json"));
   const packages = Array.isArray(settings?.packages) ? settings.packages : [];
-  const configured = packages.some((entry) => typeof entry === "string" && /^npm:@amaster\.ai\/pi-web-access(?:@|$)/u.test(entry));
-  const providers = settings?.["pi-web-access"]?.providers;
-  if (!configured || !providers || typeof providers !== "object" || Array.isArray(providers) || Object.keys(providers).length === 0) return false;
+  const npmConfigured = packages.some((entry) => typeof entry === "string" && /^npm:@amaster\.ai\/pi-web-access(?:@|$)/u.test(entry));
   const manifests = [
     join18(home, "npm", "node_modules", "@amaster.ai", "pi-web-access", "package.json"),
     join18(home, "node_modules", "@amaster.ai", "pi-web-access", "package.json")
   ];
-  return manifests.some((path) => readRegularJson(path)?.name === "@amaster.ai/pi-web-access");
+  const npmInstalled = npmConfigured && manifests.some((path) => readRegularJson(path)?.name === "@amaster.ai/pi-web-access");
+  const localInstalled = packages.some((entry) => typeof entry === "string" && isAbsolute8(entry) && readRegularJson(join18(entry, "package.json"))?.name === "@amaster.ai/pi-web-access" && readRegularJson(join18(entry, "package.json"))?.pi?.extensions?.includes("./dist/index.js") && isRegularFile(join18(entry, "dist", "index.js")));
+  return { settings, installed: npmInstalled || localInstalled };
+}
+function inspectPiWebSearchReadiness(env = process.env) {
+  const { settings, installed } = installedPiWebAccess(env);
+  const providers = settings?.["pi-web-access"]?.providers;
+  return Boolean(installed && providers && typeof providers === "object" && !Array.isArray(providers) && Object.keys(providers).length > 0);
+}
+function inspectPiWebFetchReadiness(env = process.env) {
+  const { settings, installed } = installedPiWebAccess(env);
+  const fetch2 = settings?.["pi-web-access"]?.fetch;
+  return Boolean(installed && fetch2?.mode === "direct" && fetch2?.dnsOverHttps === "google");
 }
 
 // src/amaster-runtime-daemon/browser-credential-env.mjs
@@ -33525,6 +33644,7 @@ var BROWSER_CREDENTIAL_ENV_CAPABILITY = "browser_credential_env_read_v1";
 var BROWSER_CREDENTIAL_PRIVATE_CAPABILITY = "browser_credential_auth_transaction_v1";
 var BROWSER_CREDENTIAL_ENV_FILE = "PI_AGENT_BROWSER_CREDENTIAL_ENV_FILE";
 var BROWSER_CREDENTIAL_AUTHORITY_ENV = "AMASTER_BROWSER_CREDENTIAL_AUTHORITY_JSON";
+var BROWSER_SESSION_USER_DATA_DIR_ENV = "AMASTER_BROWSER_SESSION_USER_DATA_DIR";
 var BROWSER_CREDENTIAL_USERNAME_KEY = "BROWSER_USERNAME";
 var BROWSER_CREDENTIAL_PASSWORD_KEY = "BROWSER_PASSWORD";
 function exactOrigin2(value) {
@@ -33605,6 +33725,15 @@ function browserCredentialPrivateAuthority(command, presentation = browserCreden
     refs: Object.freeze(refs.map((ref2) => Object.freeze({ ...ref2 })))
   });
 }
+function attachTrustedBrowserExecutorEnv(env, { authority = null, userDataDir = null } = {}) {
+  const result2 = { ...env };
+  delete result2[BROWSER_CREDENTIAL_AUTHORITY_ENV];
+  delete result2[BROWSER_SESSION_USER_DATA_DIR_ENV];
+  if (authority && !userDataDir) fail2("browser_credential_authority_profile_required");
+  if (userDataDir) result2[BROWSER_SESSION_USER_DATA_DIR_ENV] = userDataDir;
+  if (authority) result2[BROWSER_CREDENTIAL_AUTHORITY_ENV] = JSON.stringify(authority);
+  return result2;
+}
 function dotenvQuotedValue(value) {
   if (value.includes("\0")) fail2("browser_credential_env_value_invalid");
   return `"${value.replace(/[\\"\n\r\t$`]/gu, (char) => ({
@@ -33662,7 +33791,7 @@ async function materializeBrowserCredentialEnv(plan, options) {
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
 import { createHash as createHash15 } from "node:crypto";
 import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync4, lstatSync as lstatSync12, openSync as openSync4, readFileSync as readFileSync15, realpathSync as realpathSync10 } from "node:fs";
-import { isAbsolute as isAbsolute8, relative as relative6, resolve as resolve12 } from "node:path";
+import { isAbsolute as isAbsolute9, relative as relative6, resolve as resolve12 } from "node:path";
 var SHA256_PATTERN = /^[a-f0-9]{64}$/;
 function requiredString2(value, name) {
   if (typeof value !== "string" || !value.trim()) throw new Error(`Runtime Artifact ${name} is required`);
@@ -33675,7 +33804,7 @@ function ownedRelativePath(value) {
 }
 function pathWithin2(candidate, root) {
   const rel = relative6(root, candidate);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute8(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute9(rel);
 }
 function sameFileSnapshot(left, right) {
   return left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeMs === right.mtimeMs && left.ctimeMs === right.ctimeMs;
@@ -34041,10 +34170,10 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 // src/amaster-runtime-daemon/workspace-guard.mjs
 import { createHash as createHash17 } from "node:crypto";
 import { existsSync as existsSync13, mkdirSync as mkdirSync11, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
-import { basename as basename6, join as join20, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve13 } from "node:path";
+import { basename as basename6, join as join20, isAbsolute as isAbsolute10, relative as relative7, resolve as resolve13 } from "node:path";
 function pathWithin3(candidate, root) {
   const rel = relative7(root, candidate);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute9(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute10(rel);
 }
 function resolveWorkspaceCwd(config, command) {
   const payload = asRecord(command.payload);
@@ -34281,7 +34410,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync13
 } from "node:fs";
-import { dirname as dirname10, extname, isAbsolute as isAbsolute10, join as join22, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
+import { dirname as dirname11, extname, isAbsolute as isAbsolute11, join as join22, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PRESET_TEMPLATE_MANIFEST_FILE = ".mirrorx-preset-templates.json";
 var MAX_PRESET_TEMPLATE_FILES = 256;
@@ -34316,7 +34445,7 @@ function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
     if (!stat.isDirectory() || !modeAllows(stat, identity, 64, 8, 1)) {
       throw new Error(`preset_template_executor_path_unreadable: ${current}`);
     }
-    const parent = dirname10(current);
+    const parent = dirname11(current);
     if (parent === current) break;
     current = parent;
   }
@@ -34337,7 +34466,7 @@ function hasAllowedTemplateExtension(name) {
   return ALLOWED_TEMPLATE_EXTENSIONS.has(extname(name).toLowerCase());
 }
 function validTemplateName(value) {
-  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute10(value) && parse4(value).base === value && hasAllowedTemplateExtension(value);
+  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute11(value) && parse4(value).base === value && hasAllowedTemplateExtension(value);
 }
 function readManifest(manifestPath, { strict }) {
   try {
@@ -34401,14 +34530,14 @@ function materializeBundledPresetTemplates(input) {
   }
   const manifest = readManifest(join22(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
   const verifiedFiles = verifiedBundleFiles(sourceDir, manifest);
-  mkdirSync12(dirname10(targetDir), { recursive: true, mode: 493 });
+  mkdirSync12(dirname11(targetDir), { recursive: true, mode: 493 });
   const targetStat = lstatIfExists(targetDir);
   if (targetStat && (!targetStat.isDirectory() || targetStat.isSymbolicLink())) {
     throw new Error("preset_template_target_root_unsafe");
   }
   mkdirSync12(targetDir, { recursive: true, mode: 493 });
   const previousManifest = readManifest(join22(targetDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: false });
-  const stageDir = mkdtempSync4(join22(dirname10(targetDir), ".mirrorx-preset-templates-"));
+  const stageDir = mkdtempSync4(join22(dirname11(targetDir), ".mirrorx-preset-templates-"));
   try {
     for (const file of verifiedFiles) {
       const stagedPath = join22(stageDir, file.name);
@@ -34470,7 +34599,7 @@ function materializeRuntimePresetTemplates(input) {
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
 import { existsSync as existsSync16, readdirSync as readdirSync11, statSync as statSync10 } from "node:fs";
-import { dirname as dirname11, join as join23, resolve as resolve16 } from "node:path";
+import { dirname as dirname12, join as join23, resolve as resolve16 } from "node:path";
 function runtimeStatusDirectoryEntries(path) {
   try {
     return readdirSync11(path, { withFileTypes: true });
@@ -34552,7 +34681,7 @@ function summarizeRuntimeStatusRecentRun(workdir, manifest) {
 }
 function runtimeStatusOutboxDir(config) {
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join23(dirname11(stateFilePath({
+  return join23(dirname12(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "result-outbox");
 }
@@ -34560,7 +34689,7 @@ function runtimeStatusRunCompletionDir(config) {
   const explicit = config.AMASTER_RUN_COMPLETION_STATE_DIR ?? config.runCompletionStateDir;
   if (typeof explicit === "string" && explicit.trim()) return resolve16(explicit);
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join23(dirname11(stateFilePath({
+  return join23(dirname12(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "run-completion-state");
 }
@@ -34961,7 +35090,7 @@ export default function amasterProjectInstructions(pi) {
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash19 } from "node:crypto";
 import { existsSync as existsSync17, readdirSync as readdirSync12, readFileSync as readFileSync19, statSync as statSync11 } from "node:fs";
-import { basename as basename7, extname as extname2, isAbsolute as isAbsolute11, join as join24, relative as relative8, resolve as resolve18 } from "node:path";
+import { basename as basename7, extname as extname2, isAbsolute as isAbsolute12, join as join24, relative as relative8, resolve as resolve18 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Map([
   [".md", "markdown"],
@@ -35007,7 +35136,7 @@ var SAFE_RUNTIME_SERVICE_HEALTH_STATUSES = /* @__PURE__ */ new Set(["unknown", "
 var SAFE_RUNTIME_SERVICE_LIFECYCLES = /* @__PURE__ */ new Set(["shared", "ephemeral"]);
 function statusPathWithin(candidate, root) {
   const rel = relative8(root, candidate);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute11(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute12(rel);
 }
 function normalizeRelativePath(root, filePath) {
   return relative8(root, filePath).split(/[\\/]+/).join("/");
@@ -35262,7 +35391,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.11";
+var CONNECTOR_VERSION = "0.1.13-beta.0";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SUPPORTED_TASK_CONTEXT_VERSIONS = Object.freeze([TASK_CONTEXT_MANIFEST_VERSION, TASK_CONTEXT_V2]);
 var daemonRequire = createRequire(import.meta.url);
@@ -35374,7 +35503,7 @@ function resultOutboxPendingCount(config) {
 function runCompletionStateDir(config) {
   const explicit = readString(process.env.AMASTER_RUN_COMPLETION_STATE_DIR);
   if (explicit) return resolve19(expandHomePath(explicit));
-  return join25(dirname12(stateFilePath(process.env)), "run-completion-state");
+  return join25(dirname13(stateFilePath(process.env)), "run-completion-state");
 }
 function runCompletionStateInvalidDir(config) {
   return join25(runCompletionStateDir(config), "invalid");
@@ -35820,7 +35949,8 @@ function runtimeAdvertisedCapabilities(config) {
     executors: config.executors,
     browserCredentialAuth: inspectBrowserCredentialAuthReadiness(),
     browserCredentialEnv: inspectBrowserCredentialEnvReadiness(),
-    piWebSearchReady: inspectPiWebSearchReadiness()
+    piWebSearchReady: inspectPiWebSearchReadiness(),
+    piWebFetchReady: inspectPiWebFetchReadiness()
   });
 }
 function buildRegisterPayload(config) {
@@ -36712,7 +36842,7 @@ function safeAgentInstructionMaterializationTarget(workspace, filePath) {
   const raw = readString(filePath);
   if (!raw || raw.includes("\0")) return null;
   const normalized = raw.replace(/\\/g, "/");
-  if (isAbsolute12(normalized)) return null;
+  if (isAbsolute13(normalized)) return null;
   const segments = normalized.split("/").filter(Boolean);
   if (segments.length === 0 || segments.some((segment) => segment === "." || segment === "..")) return null;
   const relativePath = segments.join("/");
@@ -36802,7 +36932,7 @@ async function materializeEffectiveAgentInstructions(config, command, workspace,
     }
     const target = safeAgentInstructionMaterializationTarget(workspace, filePath);
     if (!target) throw new Error(`context_envelope_instruction_path_invalid: ${filePath}`);
-    mkdirSync13(dirname12(target.targetPath), { recursive: true });
+    mkdirSync13(dirname13(target.targetPath), { recursive: true });
     const temporaryPath = `${target.targetPath}.mirrorx-${command.commandId}.tmp`;
     try {
       writeFileSync14(temporaryPath, content, { encoding: "utf8", mode: 384 });
@@ -38211,7 +38341,7 @@ function manifestMatchesActiveRuntimeRef(manifest, refs, workdir = null) {
 function buildOrphanReaperSample(root, workdir, manifest, residents) {
   const relativeWorkdir = (() => {
     const value = relative9(root, workdir);
-    return value && !value.startsWith("..") && !isAbsolute12(value) ? value : basename8(workdir);
+    return value && !value.startsWith("..") && !isAbsolute13(value) ? value : basename8(workdir);
   })();
   return {
     workdir: relativeWorkdir,
@@ -38324,7 +38454,14 @@ function runExecutor(command, args, options) {
     const maxOutputBytes = parsePositiveInteger(options.maxOutputBytes, 50 * 1024 * 1024);
     const maxRssMb = parsePositiveInteger(options.maxRssMb, 0);
     const maxRssBytes = maxRssMb * 1024 * 1024;
-    const browserCredentialChannel = typeof options.browserCredentialConsumer === "function" ? createBrowserCredentialChannel({ consume: options.browserCredentialConsumer }) : null;
+    const browserCredentialChannel = typeof options.browserCredentialConsumer === "function" ? createBrowserCredentialChannel({
+      consume: options.browserCredentialConsumer,
+      onFailure: (reason) => {
+        spawnError = reason;
+        spawnErrorCode = reason;
+        requestStop(reason);
+      }
+    }) : null;
     const childEnv = { ...options.env };
     delete childEnv.AMASTER_BROWSER_CREDENTIAL_PRIVATE_CHANNEL;
     if (browserCredentialChannel) childEnv.AMASTER_BROWSER_CREDENTIAL_PRIVATE_CHANNEL = "1";
@@ -38592,8 +38729,8 @@ function runExecutor(command, args, options) {
     child.stdout.once("end", () => stdoutDecoder.end());
     child.stderr.once("end", () => stderrDecoder.end());
     child.on("error", (err) => {
-      spawnError = err.message;
-      spawnErrorCode = typeof err.code === "string" ? err.code : null;
+      if (!spawnError) spawnError = err.message;
+      if (!spawnErrorCode) spawnErrorCode = typeof err.code === "string" ? err.code : null;
     });
     child.on("exit", (code, signal) => {
       childExited = true;
@@ -39174,7 +39311,7 @@ async function completeCommand(config, command, status, result2, error) {
 function resultOutboxDir(config) {
   const explicit = readString(process.env.AMASTER_RESULT_OUTBOX_DIR);
   if (explicit) return resolve19(expandHomePath(explicit));
-  return join25(dirname12(stateFilePath(process.env)), "result-outbox");
+  return join25(dirname13(stateFilePath(process.env)), "result-outbox");
 }
 function resultOutboxInvalidDir(config) {
   return join25(resultOutboxDir(config), "invalid");
@@ -39651,7 +39788,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
     }
     usedPaths.add(relativePath);
     const targetPath = join25(workspace.cwd, relativePath);
-    mkdirSync13(dirname12(targetPath), { recursive: true });
+    mkdirSync13(dirname13(targetPath), { recursive: true });
     writeFileSync14(targetPath, body);
     chmodSync8(targetPath, 292);
     materialized.push({
@@ -39749,7 +39886,7 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
   return { materialized, skipped };
 }
 function issueCheckpointDir(workspace) {
-  return join25(dirname12(workspace.runDir), "checkpoint");
+  return join25(dirname13(workspace.runDir), "checkpoint");
 }
 async function clearIssueCheckpoint(config, command, workspace, reason, consumedSource = null) {
   const checkpointDir = issueCheckpointDir(workspace);
@@ -39771,7 +39908,7 @@ async function clearIssueCheckpoint(config, command, workspace, reason, consumed
 }
 function safeCheckpointRelativePath(rawPath) {
   const raw = String(rawPath ?? "").trim();
-  if (isAbsolute12(raw) || /^[A-Za-z]:[\\/]/.test(raw)) return null;
+  if (isAbsolute13(raw) || /^[A-Za-z]:[\\/]/.test(raw)) return null;
   const normalized = raw.split(/[\\/]+/).filter(Boolean).join("/");
   if (!normalized || normalized.startsWith("../") || normalized.split("/").some((segment) => segment.startsWith("."))) return null;
   if (normalized.startsWith("input-attachments/") || isRuntimeMetadataArtifactPath(normalized)) return null;
@@ -39903,8 +40040,8 @@ async function materializeIssueCheckpoint(config, command, workspace) {
     }
     const materialized = [];
     for (const { relativePath, source, target, expectedSha256, expectedByteSize } of validated) {
-      mkdirSync13(dirname12(target), { recursive: true });
-      const targetParent = realpathSync12(dirname12(target));
+      mkdirSync13(dirname13(target), { recursive: true });
+      const targetParent = realpathSync12(dirname13(target));
       if (!pathWithin3(targetParent, workspaceRoot)) {
         throw new Error(`issue checkpoint target escapes its workspace: ${relativePath}`);
       }
@@ -40011,7 +40148,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       }
       const target = resolve19(filesDir, relativePath);
       if (!pathWithin3(target, filesDir)) continue;
-      mkdirSync13(dirname12(target), { recursive: true });
+      mkdirSync13(dirname13(target), { recursive: true });
       copyFileSync2(ownedSource, target);
       const storedStat = lstatSync15(target);
       if (!storedStat.isFile() || storedStat.size !== byteSize) {
@@ -40265,13 +40402,7 @@ async function executeRunCommand(config, command) {
   const nativeSessionRequest = asRecord(asRecord(command.payload).nativeSession);
   let invocation = null;
   let executorEnv = buildExecutorEnv(config, command, workspace);
-  delete executorEnv[BROWSER_CREDENTIAL_AUTHORITY_ENV];
-  if (browserCredentialAuthority) {
-    executorEnv = {
-      ...executorEnv,
-      [BROWSER_CREDENTIAL_AUTHORITY_ENV]: JSON.stringify(browserCredentialAuthority)
-    };
-  }
+  let browserSessionUserDataDir = null;
   let managedMcpProfile = null;
   let managedMcpCleanup = null;
   let cleanupManagedMcpProfile = null;
@@ -40325,10 +40456,7 @@ async function executeRunCommand(config, command) {
           cleanupBrowserSessionProfile(config, browserSession);
         }
         const ownedProfile = ensureBrowserSessionProfile(config, browserSession);
-        executorEnv = {
-          ...executorEnv,
-          AMASTER_BROWSER_SESSION_USER_DATA_DIR: ownedProfile.userDataDir
-        };
+        browserSessionUserDataDir = ownedProfile.userDataDir;
       }
       invocation = buildExecutorInvocation(executor, executionCommand, workspace);
       if (taskSessionCheckpointUnavailable) {
@@ -40391,7 +40519,7 @@ async function executeRunCommand(config, command) {
           executorCommand: invocation.command,
           executorHome: workspace.executorHome,
           runDir: workspace.runDir,
-          runtimeCacheRoot: join25(dirname12(config.daemonStateFile), "cache"),
+          runtimeCacheRoot: join25(dirname13(config.daemonStateFile), "cache"),
           cwd,
           runtimeAuth: commandRuntimeAuth(command),
           nativeSession: asRecord(asRecord(executionCommand.payload).nativeSession),
@@ -40462,6 +40590,10 @@ async function executeRunCommand(config, command) {
       if (executor.kind === "pi" && Array.isArray(managedMcpProfile.extensionArgs) && managedMcpProfile.extensionArgs.length > 0) {
         invocation.args = [...invocation.args, ...managedMcpProfile.extensionArgs];
       }
+      if (executor.kind === "pi" && browserCredentialAuthority) {
+        invocation.args = [...invocation.args, ...browserCredentialAuthExtensionArgs(browserCredentialAuthority, executorEnv)];
+        executorEnv = { ...executorEnv, NODE_PATH: BROWSER_AUTH_IMAGE_NODE_PATH };
+      }
       if (executor.kind === "pi") {
         assertManagedPiNonInteractiveInvocation(invocation.args, managedMcpProfile);
       }
@@ -40470,6 +40602,10 @@ async function executeRunCommand(config, command) {
         ...managedMcpProfile.attestation
       });
     }
+    executorEnv = attachTrustedBrowserExecutorEnv(executorEnv, {
+      authority: browserCredentialAuthority,
+      userDataDir: browserSessionUserDataDir
+    });
     executorEnv = withAuditCorrelationEnvironment(executorEnv, command);
     if (Object.keys(trustedPiRuntimeAssertion).length > 0) {
       throw new Error("pi_trusted_runtime_unsupported");

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.11";
+const CONNECTOR_VERSION = "0.1.13-beta.0";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.11",
+  "version": "0.1.13-beta.0",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",