@amaster.ai/employee-runtime-connector 0.1.4 → 0.1.6

package/dist/amaster-runtime-daemon.mjs

@@ -4333,7 +4333,8 @@ var ISSUE_RECOVERY_ACTION_KINDS = [
   "active_run_watchdog",
   "issue_graph_liveness",
   "finalization_operator",
-  "initialization_no_progress"
+  "initialization_no_progress",
+  "runtime_delivery_exhausted"
 ];
 var ISSUE_PROGRESS_FINDING_CODES = [
   "terminal",
@@ -5345,7 +5346,7 @@ var mirrorxGoalContextDeliveryReceiptSchema = external_exports.object({
   promptSha256: external_exports.string().regex(/^[a-f0-9]{64}$/)
 }).strict();
 var amasterRuntimeConnectorCommandResultSchema = external_exports.object({
-  sessionId: external_exports.string().max(2048).optional(),
+  sessionId: external_exports.string().max(2048).nullable().optional(),
   goalContextDeliveryReceipt: mirrorxGoalContextDeliveryReceiptSchema.optional()
 }).catchall(external_exports.unknown());
 var amasterRuntimeConnectorCompleteCommandSchema = external_exports.object({
@@ -5440,6 +5441,52 @@ var amasterRuntimeConnectorWorkspaceStatusIngestSchema = external_exports.object
   metadata: external_exports.record(external_exports.unknown()).default({})
 });
 
+// ../shared/src/external-wait-reasons.ts
+var EXTERNAL_WAIT_REASON_CODES = {
+  browserMfaRequired: "browser_mfa_required",
+  browserCaptchaRequired: "browser_captcha_required",
+  browserSsoHandoffRequired: "browser_sso_handoff_required",
+  browserHumanSessionHandoffRequired: "browser_human_session_handoff_required",
+  wikiOperationContextMissing: "wiki_operation_context_missing",
+  agentInsufficientBalance: "agent_insufficient_balance",
+  heligeInsufficientBalance: "helige_insufficient_balance",
+  businessDataSourceUnavailable: "business_data_source_unavailable",
+  customerInputPending: "customer_input_pending",
+  externalInputPending: "external_input_pending",
+  externalApprovalPending: "external_approval_pending",
+  externalDependencyPending: "external_dependency_pending",
+  heligeGenerationInProgress: "helige_generation_in_progress",
+  heligeNewTurnNotObserved: "helige_new_turn_not_observed",
+  heligeGenerationStatusUnavailable: "helige_generation_status_unavailable"
+};
+var BROWSER_HUMAN_SESSION_HANDOFF_REASON_CODES = [
+  EXTERNAL_WAIT_REASON_CODES.browserMfaRequired,
+  EXTERNAL_WAIT_REASON_CODES.browserCaptchaRequired,
+  EXTERNAL_WAIT_REASON_CODES.browserSsoHandoffRequired,
+  EXTERNAL_WAIT_REASON_CODES.browserHumanSessionHandoffRequired
+];
+var GENERIC_EXTERNAL_INPUT_WAIT_REASON_CODES = [
+  EXTERNAL_WAIT_REASON_CODES.customerInputPending,
+  EXTERNAL_WAIT_REASON_CODES.externalInputPending
+];
+var GENERIC_EXTERNAL_APPROVAL_WAIT_REASON_CODES = [
+  EXTERNAL_WAIT_REASON_CODES.externalApprovalPending
+];
+var GENERIC_EXTERNAL_DEPENDENCY_WAIT_REASON_CODES = [
+  EXTERNAL_WAIT_REASON_CODES.externalDependencyPending
+];
+var HELIGE_GENERATION_MONITOR_REASON_CODES = [
+  EXTERNAL_WAIT_REASON_CODES.heligeGenerationInProgress,
+  EXTERNAL_WAIT_REASON_CODES.heligeNewTurnNotObserved,
+  EXTERNAL_WAIT_REASON_CODES.heligeGenerationStatusUnavailable
+];
+
+// ../shared/src/amaster-billing-recovery.ts
+var BILLING_WAIT_REASONS = /* @__PURE__ */ new Set([
+  EXTERNAL_WAIT_REASON_CODES.heligeInsufficientBalance,
+  EXTERNAL_WAIT_REASON_CODES.agentInsufficientBalance
+]);
+
 // ../shared/src/validators/mirrorx-agent-sessions.ts
 var mirrorxAgentSessionGroupNameSchema = external_exports.string().trim().min(1).max(80);
 var MIRRORX_AGENT_SESSION_GROUP_LIMIT = 100;
@@ -8742,6 +8789,9 @@ function canonicalizeTaskResourceLocator(value) {
   if (parsed.username || parsed.password) {
     return { ok: false, code: "userinfo_forbidden" };
   }
+  if (parsed.toString().length > 2048) {
+    return { ok: false, code: "locator_too_long" };
+  }
   if (parsed.hash) {
     return { ok: false, code: "fragment_forbidden" };
   }
@@ -9068,8 +9118,212 @@ var mirrorxDiscoveryTriageCandidateInputSchema = external_exports.object({
   }
 });
 
+// ../shared/src/task-resource-input.ts
+var ATTACHMENT_PREPARATION_VERSION = "attachment-preparation-v1";
+var ORIGINAL_ONLY_PARSER_VERSION = "original-only-v1";
+var TASK_RESOURCE_INPUT_STATES = [
+  "declared",
+  "preparing",
+  "prepared",
+  "blocked",
+  "retired"
+];
+var TASK_RESOURCE_LOCATOR_MAX_LENGTH = 2048;
+var ATTACHMENT_PREPARATION_FORMATS = ["text", "pdf", "docx", "xlsx", "pptx"];
+var BROWSER_CREDENTIAL_ROLES = ["username", "password"];
+var ONBOARDING_RESOURCE_LINK_PROVIDERS = [
+  "feishu",
+  "dingtalk",
+  "wechat_work",
+  "notion",
+  "github_gitlab",
+  "crm",
+  "erp",
+  "custom",
+  "other"
+];
+var ONBOARDING_RESOURCE_LINK_CREATED_FROM = [
+  "current_system",
+  "manual_link",
+  "legacy_document_link"
+];
+var sha256Schema5 = external_exports.string().regex(/^[a-f0-9]{64}$/u);
+var exactOriginSchema = external_exports.string().url().superRefine((value, context) => {
+  const url = new URL(value);
+  if (url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash || value !== url.origin) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Origin must be an exact credential-free HTTPS origin"
+    });
+  }
+});
+var taskResourceLocatorSchema = external_exports.string().trim().min(1).max(TASK_RESOURCE_LOCATOR_MAX_LENGTH).transform((value, context) => {
+  const result2 = canonicalizeTaskResourceLocator(value);
+  if (!result2.ok) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: `Task resource locator rejected: ${result2.code}`
+    });
+    return external_exports.NEVER;
+  }
+  return result2.locator;
+});
+var userSuppliedResourceLinkIntakeSchema = external_exports.object({
+  sourceMessageId: external_exports.string().trim().min(1).max(255),
+  targetIssueId: external_exports.string().uuid(),
+  targetKey: external_exports.string().trim().min(1).max(500),
+  body: external_exports.string().max(1e5),
+  primaryLocator: taskResourceLocatorSchema.optional()
+}).strict();
+var onboardingResourceLinkSchema = external_exports.object({
+  clientKey: external_exports.string().trim().min(1).max(128),
+  kind: external_exports.literal("web"),
+  provider: external_exports.enum(ONBOARDING_RESOURCE_LINK_PROVIDERS),
+  displayName: external_exports.string().trim().min(1).max(500),
+  locator: taskResourceLocatorSchema,
+  scope: external_exports.string().trim().max(2e3).default(""),
+  accessHint: external_exports.enum(["public", "may_require_auth", "unknown"]),
+  criticality: external_exports.enum(["critical", "supporting"]),
+  declaredPageLocators: external_exports.array(taskResourceLocatorSchema).max(100).default([]),
+  createdFrom: external_exports.enum(ONBOARDING_RESOURCE_LINK_CREATED_FROM)
+}).strict().superRefine((resource, context) => {
+  if (typeof resource.locator !== "string") return;
+  const resourceOrigin = new URL(resource.locator).origin;
+  resource.declaredPageLocators.forEach((locator, index) => {
+    if (typeof locator === "string" && new URL(locator).origin !== resourceOrigin) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["declaredPageLocators", index],
+        message: "Declared page locator must use the same origin as the resource link"
+      });
+    }
+  });
+});
+var attachmentPreparationReceiptSchema = external_exports.object({
+  parserVersion: external_exports.literal(ATTACHMENT_PREPARATION_VERSION),
+  originalSha256: sha256Schema5,
+  sidecarSha256: sha256Schema5,
+  originalBytes: external_exports.number().int().nonnegative(),
+  sidecarBytes: external_exports.number().int().positive(),
+  format: external_exports.enum(ATTACHMENT_PREPARATION_FORMATS),
+  truncated: external_exports.boolean(),
+  metadata: external_exports.record(external_exports.string(), external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean(), external_exports.null()]))
+}).strict();
+var taskResourceInputBaseSchema = external_exports.object({
+  inputFingerprint: external_exports.string().trim().min(1).max(255),
+  state: external_exports.enum(TASK_RESOURCE_INPUT_STATES),
+  failureCode: external_exports.string().trim().min(1).max(160).nullable().optional()
+});
+var taskResourceInputSchema = external_exports.discriminatedUnion("kind", [
+  taskResourceInputBaseSchema.extend({
+    kind: external_exports.literal("link"),
+    displayName: external_exports.string().trim().min(1).max(255),
+    locator: external_exports.string().url().max(TASK_RESOURCE_LOCATOR_MAX_LENGTH),
+    scope: external_exports.string().trim().min(1).max(2e3),
+    preparationReceipt: external_exports.null().optional()
+  }).strict(),
+  taskResourceInputBaseSchema.extend({
+    kind: external_exports.literal("attachment"),
+    attachmentId: external_exports.string().uuid(),
+    assetId: external_exports.string().uuid(),
+    byteSize: external_exports.number().int().nonnegative(),
+    sha256: sha256Schema5,
+    parserVersion: external_exports.string().trim().min(1).max(120).nullable().optional(),
+    sidecarAssetId: external_exports.string().uuid().nullable().optional(),
+    preparationReceipt: attachmentPreparationReceiptSchema.nullable().optional()
+  }).strict()
+]).superRefine((value, context) => {
+  if (value.kind !== "attachment") return;
+  const originalOnly = value.parserVersion === ORIGINAL_ONLY_PARSER_VERSION;
+  if (value.state === "prepared" && !value.preparationReceipt && !originalOnly) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["preparationReceipt"],
+      message: "Prepared attachment input requires a complete preparation receipt"
+    });
+  }
+  if (originalOnly && (value.preparationReceipt || value.sidecarAssetId)) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["preparationReceipt"],
+      message: "Original-only attachment input must not carry a preparation sidecar"
+    });
+  }
+  if (value.preparationReceipt && (value.preparationReceipt.originalSha256 !== value.sha256 || value.preparationReceipt.originalBytes !== value.byteSize)) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["preparationReceipt"],
+      message: "Preparation receipt must match the exact original attachment"
+    });
+  }
+});
+var browserCredentialRefAuthoritySchema = external_exports.object({
+  version: external_exports.literal(1),
+  companyId: external_exports.string().uuid(),
+  issueId: external_exports.string().uuid(),
+  runId: external_exports.string().uuid(),
+  commandId: external_exports.string().uuid(),
+  interactionId: external_exports.string().uuid(),
+  credentialKey: external_exports.string().trim().min(1).max(255),
+  credentialVersion: external_exports.number().int().positive(),
+  credentialRole: external_exports.enum(BROWSER_CREDENTIAL_ROLES),
+  targetOrigin: exactOriginSchema,
+  authenticationOrigin: exactOriginSchema,
+  bindingId: external_exports.string().uuid(),
+  browserLeaseId: external_exports.string().regex(/^browser-credential-(?:auth-write|agent-read)-[0-9a-f-]{36}$/iu)
+}).strict();
+var browserCredentialRefConsumeSchema = browserCredentialRefAuthoritySchema.extend({
+  controlSemantic: external_exports.enum(["username", "email", "password"])
+}).strict();
+var runtimeWebEvidenceReceiptSchema = external_exports.object({
+  issueId: external_exports.string().uuid(),
+  runId: external_exports.string().uuid(),
+  commandId: external_exports.string().uuid(),
+  toolCallId: external_exports.string().trim().min(1).max(255),
+  requestedUrl: external_exports.string().url().max(2048),
+  finalUrl: external_exports.string().url().max(2048),
+  capturedAt: external_exports.string().datetime({ offset: true }),
+  mediaType: external_exports.string().trim().min(1).max(255),
+  truncated: external_exports.boolean(),
+  contentSha256: sha256Schema5,
+  observedChars: external_exports.number().int().nonnegative(),
+  observedBytes: external_exports.number().int().nonnegative(),
+  evidenceAssetId: external_exports.string().uuid().nullable().optional(),
+  taskResourceBinding: external_exports.object({
+    inputId: external_exports.string().uuid(),
+    inputFingerprint: external_exports.string().trim().min(1).max(255),
+    retrievalRevision: external_exports.number().int().positive()
+  }).strict().optional()
+}).strict();
+var runtimeWebEvidenceIngestSchema = external_exports.object({
+  companyId: external_exports.string().uuid(),
+  issueId: external_exports.string().uuid(),
+  runId: external_exports.string().uuid(),
+  commandId: external_exports.string().uuid(),
+  toolCallId: external_exports.string().trim().min(1).max(255),
+  requestedUrl: external_exports.string().url().max(8192),
+  finalUrl: external_exports.string().url().max(8192),
+  capturedAt: external_exports.string().datetime({ offset: true }),
+  mediaType: external_exports.string().trim().min(1).max(255),
+  normalizedText: external_exports.string().max(2e6),
+  truncated: external_exports.boolean().optional(),
+  taskResourceBinding: external_exports.object({
+    inputId: external_exports.string().uuid(),
+    inputFingerprint: external_exports.string().trim().min(1).max(255),
+    retrievalRevision: external_exports.number().int().positive()
+  }).strict().optional()
+}).strict();
+var createTaskResourceLinkRequestSchema = external_exports.object({
+  displayName: external_exports.string().trim().min(1).max(500),
+  locator: taskResourceLocatorSchema,
+  scope: external_exports.string().trim().min(1).max(2e3),
+  criticality: external_exports.enum(["critical", "supporting"]).default("supporting")
+}).strict();
+var finalizeTaskResourceAttachmentRequestSchema = external_exports.object({ inputId: external_exports.string().uuid() }).strict();
+var createTaskResourceAttachmentRequestSchema = external_exports.object({ attachmentId: external_exports.string().uuid() }).strict();
+
 // ../shared/src/mirrorx-discovery-governance.ts
-var sha256Schema5 = external_exports.string().regex(/^sha256:[a-f0-9]{64}$/);
+var sha256Schema6 = external_exports.string().regex(/^sha256:[a-f0-9]{64}$/);
 var positiveBoundedInteger = (max) => external_exports.number().int().positive().max(max);
 var mirrorxDiscoveryPromotionModeSchema = external_exports.enum(["shadow", "board_gated"]);
 var customerFeedbackSourceBindingV1Schema = external_exports.object({
@@ -9077,7 +9331,7 @@ var customerFeedbackSourceBindingV1Schema = external_exports.object({
   connectionId: external_exports.string().uuid(),
   providerKey: external_exports.string().trim().min(1).max(160),
   objectType: external_exports.literal("customer_feedback"),
-  queryScopeHash: sha256Schema5,
+  queryScopeHash: sha256Schema6,
   wikiId: external_exports.string().trim().min(1).max(160),
   wikiSpaceSlug: external_exports.string().trim().min(1).max(120).regex(/^[a-z0-9][a-z0-9._-]*$/),
   wikiPagePath: external_exports.string().trim().min(1).max(500)
@@ -9098,48 +9352,72 @@ var customerFeedbackDiscoveryConfigurationV1Schema = external_exports.object({
 var openConnectorDiscoverySourceSchema = external_exports.object({
   service: external_exports.string().trim().min(1).max(128),
   connectionName: external_exports.string().trim().min(1).max(256).nullable(),
-  connectionKeyHash: sha256Schema5,
+  connectionKeyHash: sha256Schema6,
   actions: external_exports.array(external_exports.object({
     actionId: external_exports.string().trim().min(1).max(256),
-    guideHash: sha256Schema5,
+    guideHash: sha256Schema6,
     inputSchema: external_exports.record(external_exports.string(), external_exports.unknown())
   }).strict()).min(1).max(20)
 }).strict();
 var discoveryReadGrantsSchema = external_exports.array(external_exports.object({
   service: external_exports.string().trim().min(1).max(128),
   actionId: external_exports.string().trim().min(1).max(256),
-  guideHash: sha256Schema5
+  guideHash: sha256Schema6
 }).strict()).max(100);
 var discoveryResearchSourceBindingV1Schema = external_exports.object({
   version: external_exports.literal(1),
   connectionId: external_exports.string().uuid(),
   providerKey: external_exports.string().trim().min(1).max(160),
   objectType: external_exports.string().trim().min(1).max(160).regex(/^[a-z0-9][a-z0-9._-]*$/),
-  queryScopeHash: sha256Schema5,
+  queryScopeHash: sha256Schema6,
   openConnector: openConnectorDiscoverySourceSchema.optional()
 }).strict();
 var openConnectorDiscoveryActionV2Schema = external_exports.object({
   actionId: external_exports.string().trim().min(1).max(256),
-  guideHash: sha256Schema5,
+  guideHash: sha256Schema6,
   inputSchema: external_exports.record(external_exports.string(), external_exports.unknown()),
   outputSchema: external_exports.record(external_exports.string(), external_exports.unknown()),
   followUpActions: external_exports.array(external_exports.object({
     actionId: external_exports.string().trim().min(1).max(256)
   }).strict()).max(20)
 }).strict();
-var discoveryResearchSourceBindingV2Schema = external_exports.object({
+var governedProviderDiscoverySourceBindingV2Schema = external_exports.object({
   version: external_exports.literal(2),
   connectionId: external_exports.string().uuid(),
   providerKey: external_exports.string().trim().min(1).max(160),
   objectType: external_exports.string().trim().min(1).max(160).regex(/^[a-z0-9][a-z0-9._-]*$/),
-  queryScopeHash: sha256Schema5,
+  queryScopeHash: sha256Schema6,
   openConnector: external_exports.object({
     service: external_exports.string().trim().min(1).max(128),
     connectionName: external_exports.string().trim().min(1).max(256).nullable(),
-    connectionKeyHash: sha256Schema5,
+    connectionKeyHash: sha256Schema6,
     actions: external_exports.array(openConnectorDiscoveryActionV2Schema).min(1).max(20)
   }).strict()
 }).strict();
+var taskResourceDiscoverySourceBindingV1Schema = external_exports.object({
+  version: external_exports.literal(3),
+  sourceKind: external_exports.literal("task_resource"),
+  connectionId: external_exports.string().uuid(),
+  inputId: external_exports.string().uuid(),
+  targetIssueId: external_exports.string().uuid(),
+  inputFingerprint: external_exports.string().trim().min(1).max(255),
+  locator: external_exports.string().url().max(TASK_RESOURCE_LOCATOR_MAX_LENGTH),
+  locatorFingerprint: external_exports.string().regex(/^[a-f0-9]{64}$/u),
+  intent: external_exports.enum(["primary", "supporting"]),
+  sourceMessageId: external_exports.string().trim().min(1).max(255),
+  suppliedBy: external_exports.object({
+    kind: external_exports.literal("user"),
+    id: external_exports.string().trim().min(1).max(200)
+  }).strict(),
+  suppliedAt: external_exports.string().datetime({ offset: true }),
+  retrievalRevision: external_exports.number().int().positive(),
+  authority: external_exports.literal("user_supplied_context_only"),
+  openConnector: external_exports.never().optional()
+}).strict();
+var discoveryResearchSourceBindingV2Schema = external_exports.union([
+  governedProviderDiscoverySourceBindingV2Schema,
+  taskResourceDiscoverySourceBindingV1Schema
+]);
 var discoveryResearchBriefV1Schema = external_exports.object({
   version: external_exports.literal(1),
   objective: external_exports.string().trim().min(1).max(2e3),
@@ -9167,7 +9445,7 @@ var frozenDiscoveryResearchV1Schema = external_exports.object({
   goalId: external_exports.string().uuid(),
   goalRevision: external_exports.string().trim().min(1).max(160),
   criterionIndex: external_exports.number().int().min(0).max(1e3),
-  sourceBindingRevision: sha256Schema5,
+  sourceBindingRevision: sha256Schema6,
   sourceBinding: discoveryResearchSourceBindingV1Schema,
   maxRuntimeMs: positiveBoundedInteger(864e5),
   maxProviderReads: positiveBoundedInteger(100),
@@ -9185,7 +9463,7 @@ var discoveryResearchTargetV2Schema = external_exports.object({
   gapId: external_exports.string().uuid().nullable(),
   gapAuthorityRevision: external_exports.number().int().positive().nullable(),
   selectionRevision: external_exports.number().int().positive(),
-  candidateSetHash: sha256Schema5,
+  candidateSetHash: sha256Schema6,
   resetReason: external_exports.enum(["goal_revision_changed", "candidate_set_changed"]).nullable()
 }).strict().superRefine((value, ctx) => {
   if (value.kind === "gap" && (!value.gapId || !value.gapAuthorityRevision)) {
@@ -9204,7 +9482,7 @@ var frozenDiscoveryResearchV2Schema = external_exports.object({
   goalId: external_exports.string().uuid(),
   goalRevision: external_exports.string().trim().min(1).max(160),
   target: discoveryResearchTargetV2Schema,
-  sourceBindingRevision: sha256Schema5,
+  sourceBindingRevision: sha256Schema6,
   sourceBinding: discoveryResearchSourceBindingV2Schema,
   coverageMode: external_exports.literal("targeted_goal_criterion"),
   maxProviderReads: positiveBoundedInteger(100),
@@ -9245,12 +9523,12 @@ var frozenDiscoveryResearchSchema = external_exports.union([
 ]);
 var discoveryProviderEvidenceReceiptV1Schema = external_exports.object({
   version: external_exports.literal(1),
-  sourceBindingRevision: sha256Schema5,
+  sourceBindingRevision: sha256Schema6,
   providerReceipt: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   evidence: external_exports.array(external_exports.object({
     externalObjectId: external_exports.string().uuid(),
     sourceRevision: external_exports.string().trim().min(1).max(500),
-    contentHash: sha256Schema5.optional(),
+    contentHash: sha256Schema6.optional(),
     snapshot: external_exports.object({
       displayTitle: external_exports.string().nullable(),
       data: external_exports.record(external_exports.string(), external_exports.unknown())
@@ -9299,7 +9577,7 @@ var completeDiscoveryResearchInputV2Fields = {
     invocationId: external_exports.string().uuid(),
     externalObjectId: external_exports.string().uuid().nullable(),
     sourceRevision: external_exports.string().trim().min(1).max(500).nullable(),
-    contentHash: sha256Schema5.nullable()
+    contentHash: sha256Schema6.nullable()
   }).strict()).max(1e4),
   coverageComplete: external_exports.boolean(),
   summary: external_exports.string().trim().min(1).max(4e3),
@@ -9541,7 +9819,7 @@ var mirrorxDiscoveryCoverageSchema = external_exports.object({
   currentRun: external_exports.object({
     routineRunId: external_exports.string().uuid(),
     state: external_exports.enum(["scheduled", "running", "waiting_retry", "finalizing"]),
-    windowKey: sha256Schema5,
+    windowKey: sha256Schema6,
     nextAttemptAt: external_exports.string().datetime({ offset: true }).nullable()
   }).strict().nullable(),
   lastTerminal: external_exports.object({
@@ -9631,192 +9909,6 @@ function resolveMirrorxWorkKindPurpose(workKind) {
   return domain ? resolveMirrorxWorkPurposeSelection({ kind: "activation_domain", domain }) : { status: "unmapped", workKind };
 }
 
-// ../shared/src/task-resource-input.ts
-var ATTACHMENT_PREPARATION_VERSION = "attachment-preparation-v1";
-var ORIGINAL_ONLY_PARSER_VERSION = "original-only-v1";
-var TASK_RESOURCE_INPUT_STATES = [
-  "declared",
-  "preparing",
-  "prepared",
-  "blocked",
-  "retired"
-];
-var ATTACHMENT_PREPARATION_FORMATS = ["text", "pdf", "docx", "xlsx", "pptx"];
-var BROWSER_CREDENTIAL_ROLES = ["username", "password"];
-var ONBOARDING_RESOURCE_LINK_PROVIDERS = [
-  "feishu",
-  "dingtalk",
-  "wechat_work",
-  "notion",
-  "github_gitlab",
-  "crm",
-  "erp",
-  "custom",
-  "other"
-];
-var ONBOARDING_RESOURCE_LINK_CREATED_FROM = [
-  "current_system",
-  "manual_link",
-  "legacy_document_link"
-];
-var sha256Schema6 = external_exports.string().regex(/^[a-f0-9]{64}$/u);
-var exactOriginSchema = external_exports.string().url().superRefine((value, context) => {
-  const url = new URL(value);
-  if (url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash || value !== url.origin) {
-    context.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      message: "Origin must be an exact credential-free HTTPS origin"
-    });
-  }
-});
-var taskResourceLocatorSchema = external_exports.string().trim().min(1).max(8192).transform((value, context) => {
-  const result2 = canonicalizeTaskResourceLocator(value);
-  if (!result2.ok) {
-    context.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      message: `Task resource locator rejected: ${result2.code}`
-    });
-    return external_exports.NEVER;
-  }
-  return result2.locator;
-});
-var onboardingResourceLinkSchema = external_exports.object({
-  clientKey: external_exports.string().trim().min(1).max(128),
-  kind: external_exports.literal("web"),
-  provider: external_exports.enum(ONBOARDING_RESOURCE_LINK_PROVIDERS),
-  displayName: external_exports.string().trim().min(1).max(500),
-  locator: taskResourceLocatorSchema,
-  scope: external_exports.string().trim().max(2e3).default(""),
-  accessHint: external_exports.enum(["public", "may_require_auth", "unknown"]),
-  criticality: external_exports.enum(["critical", "supporting"]),
-  declaredPageLocators: external_exports.array(taskResourceLocatorSchema).max(100).default([]),
-  createdFrom: external_exports.enum(ONBOARDING_RESOURCE_LINK_CREATED_FROM)
-}).strict().superRefine((resource, context) => {
-  if (typeof resource.locator !== "string") return;
-  const resourceOrigin = new URL(resource.locator).origin;
-  resource.declaredPageLocators.forEach((locator, index) => {
-    if (typeof locator === "string" && new URL(locator).origin !== resourceOrigin) {
-      context.addIssue({
-        code: external_exports.ZodIssueCode.custom,
-        path: ["declaredPageLocators", index],
-        message: "Declared page locator must use the same origin as the resource link"
-      });
-    }
-  });
-});
-var attachmentPreparationReceiptSchema = external_exports.object({
-  parserVersion: external_exports.literal(ATTACHMENT_PREPARATION_VERSION),
-  originalSha256: sha256Schema6,
-  sidecarSha256: sha256Schema6,
-  originalBytes: external_exports.number().int().nonnegative(),
-  sidecarBytes: external_exports.number().int().positive(),
-  format: external_exports.enum(ATTACHMENT_PREPARATION_FORMATS),
-  truncated: external_exports.boolean(),
-  metadata: external_exports.record(external_exports.string(), external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean(), external_exports.null()]))
-}).strict();
-var taskResourceInputBaseSchema = external_exports.object({
-  inputFingerprint: external_exports.string().trim().min(1).max(255),
-  state: external_exports.enum(TASK_RESOURCE_INPUT_STATES),
-  failureCode: external_exports.string().trim().min(1).max(160).nullable().optional()
-});
-var taskResourceInputSchema = external_exports.discriminatedUnion("kind", [
-  taskResourceInputBaseSchema.extend({
-    kind: external_exports.literal("link"),
-    displayName: external_exports.string().trim().min(1).max(255),
-    locator: external_exports.string().url().max(2048),
-    scope: external_exports.string().trim().min(1).max(2e3),
-    preparationReceipt: external_exports.null().optional()
-  }).strict(),
-  taskResourceInputBaseSchema.extend({
-    kind: external_exports.literal("attachment"),
-    attachmentId: external_exports.string().uuid(),
-    assetId: external_exports.string().uuid(),
-    byteSize: external_exports.number().int().nonnegative(),
-    sha256: sha256Schema6,
-    parserVersion: external_exports.string().trim().min(1).max(120).nullable().optional(),
-    sidecarAssetId: external_exports.string().uuid().nullable().optional(),
-    preparationReceipt: attachmentPreparationReceiptSchema.nullable().optional()
-  }).strict()
-]).superRefine((value, context) => {
-  if (value.kind !== "attachment") return;
-  const originalOnly = value.parserVersion === ORIGINAL_ONLY_PARSER_VERSION;
-  if (value.state === "prepared" && !value.preparationReceipt && !originalOnly) {
-    context.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      path: ["preparationReceipt"],
-      message: "Prepared attachment input requires a complete preparation receipt"
-    });
-  }
-  if (originalOnly && (value.preparationReceipt || value.sidecarAssetId)) {
-    context.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      path: ["preparationReceipt"],
-      message: "Original-only attachment input must not carry a preparation sidecar"
-    });
-  }
-  if (value.preparationReceipt && (value.preparationReceipt.originalSha256 !== value.sha256 || value.preparationReceipt.originalBytes !== value.byteSize)) {
-    context.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      path: ["preparationReceipt"],
-      message: "Preparation receipt must match the exact original attachment"
-    });
-  }
-});
-var browserCredentialRefAuthoritySchema = external_exports.object({
-  version: external_exports.literal(1),
-  companyId: external_exports.string().uuid(),
-  issueId: external_exports.string().uuid(),
-  runId: external_exports.string().uuid(),
-  commandId: external_exports.string().uuid(),
-  interactionId: external_exports.string().uuid(),
-  credentialKey: external_exports.string().trim().min(1).max(255),
-  credentialVersion: external_exports.number().int().positive(),
-  credentialRole: external_exports.enum(BROWSER_CREDENTIAL_ROLES),
-  targetOrigin: exactOriginSchema,
-  authenticationOrigin: exactOriginSchema,
-  bindingId: external_exports.string().uuid(),
-  browserLeaseId: external_exports.string().regex(/^browser-credential-(?:auth-write|agent-read)-[0-9a-f-]{36}$/iu)
-}).strict();
-var browserCredentialRefConsumeSchema = browserCredentialRefAuthoritySchema.extend({
-  controlSemantic: external_exports.enum(["username", "email", "password"])
-}).strict();
-var runtimeWebEvidenceReceiptSchema = external_exports.object({
-  issueId: external_exports.string().uuid(),
-  runId: external_exports.string().uuid(),
-  commandId: external_exports.string().uuid(),
-  toolCallId: external_exports.string().trim().min(1).max(255),
-  requestedUrl: external_exports.string().url().max(2048),
-  finalUrl: external_exports.string().url().max(2048),
-  capturedAt: external_exports.string().datetime({ offset: true }),
-  mediaType: external_exports.string().trim().min(1).max(255),
-  truncated: external_exports.boolean(),
-  contentSha256: sha256Schema6,
-  observedChars: external_exports.number().int().nonnegative(),
-  observedBytes: external_exports.number().int().nonnegative(),
-  evidenceAssetId: external_exports.string().uuid().nullable().optional()
-}).strict();
-var runtimeWebEvidenceIngestSchema = external_exports.object({
-  companyId: external_exports.string().uuid(),
-  issueId: external_exports.string().uuid(),
-  runId: external_exports.string().uuid(),
-  commandId: external_exports.string().uuid(),
-  toolCallId: external_exports.string().trim().min(1).max(255),
-  requestedUrl: external_exports.string().url().max(8192),
-  finalUrl: external_exports.string().url().max(8192),
-  capturedAt: external_exports.string().datetime({ offset: true }),
-  mediaType: external_exports.string().trim().min(1).max(255),
-  normalizedText: external_exports.string().max(2e6),
-  truncated: external_exports.boolean().optional()
-}).strict();
-var createTaskResourceLinkRequestSchema = external_exports.object({
-  displayName: external_exports.string().trim().min(1).max(500),
-  locator: taskResourceLocatorSchema,
-  scope: external_exports.string().trim().min(1).max(2e3),
-  criticality: external_exports.enum(["critical", "supporting"]).default("supporting")
-}).strict();
-var finalizeTaskResourceAttachmentRequestSchema = external_exports.object({ inputId: external_exports.string().uuid() }).strict();
-var createTaskResourceAttachmentRequestSchema = external_exports.object({ attachmentId: external_exports.string().uuid() }).strict();
-
 // ../shared/src/types/browser-session-binding.ts
 var BROWSER_SESSION_BINDING_STATUSES = [
   "preparing",
@@ -10181,7 +10273,7 @@ var businessDataSourceReadSchema = external_exports.object({
   evidence: external_exports.string().trim().min(1).max(1e3)
 }).strict().describe("Required only for business_data_source_unavailable. Record the actual authorized configuration/access/read failure, observation time and non-secret evidence. A read_succeeded observation (including empty results) cannot create this wait; report source-scoped zero or unknown coverage instead.");
 function refineBusinessDataSourceWait(value, ctx) {
-  if (value.reasonCode === "business_data_source_unavailable") {
+  if (value.reasonCode === EXTERNAL_WAIT_REASON_CODES.businessDataSourceUnavailable) {
     if (!value.dataSourceRead || value.dataSourceRead.outcome === "read_succeeded") {
       ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["dataSourceRead"], message: "business_data_source_unavailable requires an observed access/configuration/read failure. A successful read, including an empty table, cannot block reports; report source-scoped zero or unknown coverage/baseline instead. Do not require non-empty records to restore access." });
     }
@@ -12739,6 +12831,34 @@ var issueDeliveryAcceptanceReferenceSchema = external_exports.object({
   state: external_exports.enum(ISSUE_DELIVERY_REFERENCE_STATES),
   href: external_exports.string().min(1).max(4e3).nullable()
 }).strict();
+var issueExecutionDecisionHistoryRecordSchema = external_exports.object({
+  sequence: external_exports.number().int().positive(),
+  reviewEvidenceStatus: external_exports.enum(["available", "absent", "invalid"]),
+  decision: external_exports.object({
+    id: uuidSchema3,
+    companyId: uuidSchema3,
+    issueId: uuidSchema3,
+    stageId: uuidSchema3,
+    stageType: external_exports.enum(ISSUE_EXECUTION_STAGE_TYPES),
+    actorAgentId: uuidSchema3.nullable(),
+    actorUserId: external_exports.string().min(1).nullable(),
+    outcome: external_exports.enum(ISSUE_EXECUTION_DECISION_OUTCOMES),
+    body: external_exports.string(),
+    reviewEvidence: issueExecutionReviewEvidenceSchema.nullable(),
+    createdByRunId: uuidSchema3.nullable(),
+    createdAt: dateSchema2,
+    updatedAt: dateSchema2
+  }).strict(),
+  inspectedReferences: external_exports.array(issueDeliveryAcceptanceReferenceSchema)
+}).strict();
+var issueExecutionDecisionHistoryEnvelopeSchema = external_exports.object({
+  records: external_exports.array(external_exports.unknown()),
+  totalCount: external_exports.number().int().nonnegative()
+}).strict();
+var issueExecutionDecisionHistoryResponseSchema = external_exports.object({
+  records: external_exports.array(issueExecutionDecisionHistoryRecordSchema),
+  totalCount: external_exports.number().int().nonnegative()
+}).strict();
 var issueDeliveryAcceptancePendingInteractionSchema = external_exports.object({
   interactionId: uuidSchema3,
   interactionKind: external_exports.enum(ISSUE_THREAD_INTERACTION_KINDS),
@@ -13367,12 +13487,36 @@ var ceoPeriodicGoalGapCandidateSchema = external_exports.object({
   businessSubjectScope: operatingNormalizedBusinessSubjectRefSchema,
   targetCondition: external_exports.object({ kind: external_exports.literal("boolean_milestone"), expected: external_exports.literal(true) }).strict(),
   window: external_exports.record(external_exports.string().min(1).max(80), external_exports.unknown()),
-  observationRef: goalGapObservationRefSchema,
-  sourceRefs: external_exports.array(ceoPeriodicWorkSourceRefSchema).min(1).max(20),
+  observationRef: goalGapObservationRefSchema.describe(
+    "Server-governed observation identity. For blocker_state or business_outcome candidates, use kind=governed_business_state and copy the primary sourceRef id/revision exactly; do not copy the primary sourceRef kind."
+  ),
+  sourceRefs: external_exports.array(ceoPeriodicWorkSourceRefSchema).min(1).max(20).describe(
+    "Exact leased evidence refs. A provisional Goal Gap candidate must include a primary blocker_state or business_outcome ref whose id/revision exactly match observationRef."
+  ),
   reasoningSummary: external_exports.string().trim().min(1).max(1e3),
   confidenceBand: external_exports.enum(["high", "medium", "low"]),
   workClass: external_exports.enum(["internal_enablement", "governed_decision", "external_action", "observed_business_result"])
 }).strict();
+var ceoPeriodicGoalGapCandidatesSchema = external_exports.array(ceoPeriodicGoalGapCandidateSchema).max(10).superRefine((candidates, ctx) => {
+  for (const [index, candidate] of candidates.entries()) {
+    const primarySource = candidate.sourceRefs.find((sourceRef) => ["blocker_state", "business_outcome"].includes(sourceRef.kind) && sourceRef.id === candidate.observationRef.id && sourceRef.revision === candidate.observationRef.revision);
+    if (!primarySource) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "observationRef"],
+        message: "Goal Gap candidate observationRef must identify an exact sourceRef"
+      });
+      continue;
+    }
+    if (candidate.observationRef.kind !== "governed_business_state") {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "observationRef"],
+        message: "Goal Gap candidates require a Server-verifiable blocker_state or business_outcome primary source"
+      });
+    }
+  }
+});
 var ceoPeriodicTaskAttentionSchema = external_exports.object({
   prerequisiteRequirements: external_exports.array(prerequisiteRequirementProjectionSchema),
   prerequisiteBindings: external_exports.array(prerequisiteBindingProjectionSchema),
@@ -13441,7 +13585,7 @@ var ceoPeriodicDemandCandidatesSchema = external_exports.array(ceoPeriodicDemand
 var ceoPeriodicWorkDispatchInputSchema = external_exports.object({
   observationId: external_exports.string().uuid(),
   inputFingerprint: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/u),
-  goalGapCandidates: external_exports.array(ceoPeriodicGoalGapCandidateSchema).max(10).default([]),
+  goalGapCandidates: ceoPeriodicGoalGapCandidatesSchema.default([]),
   continuations: external_exports.array(ceoPeriodicContinuationInputSchema).max(20).default([]),
   candidates: ceoPeriodicDemandCandidatesSchema.default([]),
   noWorkReason: ceoPeriodicNoWorkReasonSchema.optional(),
@@ -14854,7 +14998,7 @@ var FEEDBACK_TARGET_TYPES = ["issue_comment", "issue_document_revision"];
 var FEEDBACK_VOTE_VALUES = ["up", "down"];
 var FEEDBACK_DATA_SHARING_PREFERENCES = ["allowed", "not_allowed", "prompt"];
 var DEFAULT_FEEDBACK_DATA_SHARING_PREFERENCE = "prompt";
-var FEEDBACK_TRACE_STATUSES = ["local_only", "pending", "sent", "failed"];
+var FEEDBACK_TRACE_STATUSES = ["local_only", "pending", "sent", "failed", "dead_letter"];
 
 // ../shared/src/validators/feedback.ts
 var feedbackTargetTypeSchema = external_exports.enum(FEEDBACK_TARGET_TYPES);
@@ -18592,9 +18736,9 @@ var wikiMentionListSchema = external_exports.object({
 });
 
 // src/amaster-runtime-daemon.mjs
-import { chmodSync as chmodSync7, copyFileSync as copyFileSync2, existsSync as existsSync18, lstatSync as lstatSync13, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync5, readFileSync as readFileSync19, readdirSync as readdirSync12, realpathSync as realpathSync12, renameSync as renameSync10, rmSync as rmSync11, statSync as statSync12, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync13 } from "node:fs";
+import { chmodSync as chmodSync8, copyFileSync as copyFileSync2, existsSync as existsSync18, lstatSync as lstatSync13, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync5, readFileSync as readFileSync19, readdirSync as readdirSync12, realpathSync as realpathSync12, renameSync as renameSync11, rmSync as rmSync12, statSync as statSync12, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "node:fs";
 import { arch as arch4, homedir as homedir6, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
-import { basename as basename8, delimiter as delimiter3, dirname as dirname11, extname as extname3, isAbsolute as isAbsolute12, join as join23, relative as relative9, resolve as resolve19 } from "node:path";
+import { basename as basename8, delimiter as delimiter3, dirname as dirname12, extname as extname3, isAbsolute as isAbsolute12, join as join24, relative as relative9, resolve as resolve19 } from "node:path";
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
 
 // src/amaster-runtime-daemon/common.mjs
@@ -24955,8 +25099,10 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
             } : {}
           }
         } : {},
-        // CLI --tools remains unused so user-level tools stay available.
+        // Normal governed runs preserve user-level tools. An exact task-resource
+        // run narrows this later to direct governed tools plus its bound reader.
         toolAllowlist: null,
+        directToolNames,
         directCatalogFrozen: Boolean(directCatalog),
         protectedValues: [.../* @__PURE__ */ new Set([
           sessionToken,
@@ -25237,7 +25383,9 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
             } : {}
           }
         } : {},
+        // Exact task-resource runs narrow this after the run-owned reader exists.
         toolAllowlist: null,
+        directToolNames,
         directCatalogFrozen: Boolean(directCatalog),
         protectedValues: [.../* @__PURE__ */ new Set([sessionToken, ...seededRuntime.protectedValues])],
         attestation: {
@@ -25480,6 +25628,180 @@ function selectExecutor(config, command) {
   return selected;
 }
 
+// src/amaster-runtime-daemon/web-evidence.mjs
+import { createHash as createHash10 } from "node:crypto";
+var SENSITIVE_QUERY_KEY_FRAGMENTS = [
+  "apikey",
+  "accesskey",
+  "privatekey",
+  "token",
+  "secret",
+  "signature",
+  "credential",
+  "password",
+  "authorization",
+  "session",
+  "cookie",
+  "oauth",
+  "ticket",
+  "assertion",
+  "samlresponse",
+  "relaystate",
+  "jwt"
+];
+var SENSITIVE_QUERY_KEYS = /* @__PURE__ */ new Set(["auth", "code", "key", "sig", "sid", "state"]);
+function isSensitiveQueryKey(key) {
+  const compact = key.normalize("NFKC").toLocaleLowerCase("en-US").replace(/[^a-z0-9]/gu, "");
+  return SENSITIVE_QUERY_KEYS.has(compact) || SENSITIVE_QUERY_KEY_FRAGMENTS.some((fragment) => compact.includes(fragment));
+}
+function safeUrl(raw) {
+  const url = new URL(raw);
+  if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) {
+    throw new Error("runtime_web_evidence_url_invalid");
+  }
+  for (const key of [...url.searchParams.keys()]) {
+    if (isSensitiveQueryKey(key)) url.searchParams.delete(key);
+  }
+  url.hash = "";
+  return url.toString();
+}
+function sanitizeRuntimeWebEvidence(input) {
+  const allowed = /* @__PURE__ */ new Set(["toolCallId", "requestedUrl", "finalUrl", "capturedAt", "mediaType", "normalizedText", "truncated"]);
+  if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).some((key) => !allowed.has(key))) {
+    throw new Error("runtime_web_evidence_invalid");
+  }
+  const cleanedText = typeof input.normalizedText === "string" ? input.normalizedText.replace(/\r\n?/gu, "\n").replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/gu, "") : null;
+  if (!cleanedText || typeof input.toolCallId !== "string" || !input.toolCallId.trim()) {
+    throw new Error("runtime_web_evidence_invalid");
+  }
+  const normalizedText = cleanedText.slice(0, 2e5);
+  const bytes = Buffer.from(normalizedText, "utf8");
+  return {
+    toolCallId: input.toolCallId.trim(),
+    requestedUrl: safeUrl(input.requestedUrl),
+    finalUrl: safeUrl(input.finalUrl),
+    capturedAt: new Date(input.capturedAt).toISOString(),
+    mediaType: typeof input.mediaType === "string" && input.mediaType.trim() ? input.mediaType.trim() : "text/plain",
+    normalizedText,
+    truncated: input.truncated === true || cleanedText.length > 2e5,
+    contentSha256: createHash10("sha256").update(bytes).digest("hex"),
+    observedChars: normalizedText.length,
+    observedBytes: bytes.byteLength
+  };
+}
+function assertExactTaskResourceWebEvidence(evidence) {
+  if (evidence?.sourceToolName !== "amaster_exact_source_read") {
+    throw new Error("runtime_exact_source_evidence_untrusted");
+  }
+  return evidence;
+}
+function runtimeWebEvidenceTaskResourceBinding(payload) {
+  const binding = payload?.webEvidenceTaskResourceBinding;
+  if (!binding || typeof binding.inputId !== "string" || !binding.inputId.trim() || typeof binding.inputFingerprint !== "string" || !binding.inputFingerprint.trim() || !Number.isInteger(binding.retrievalRevision) || binding.retrievalRevision < 1) return null;
+  return {
+    inputId: binding.inputId.trim(),
+    inputFingerprint: binding.inputFingerprint.trim(),
+    retrievalRevision: binding.retrievalRevision
+  };
+}
+function runtimeExactTaskResourceBinding(payload) {
+  const binding = payload?.webEvidenceTaskResourceBinding;
+  if (!runtimeWebEvidenceTaskResourceBinding(payload) || typeof binding.locator !== "string" || !binding.locator.trim() || typeof binding.locatorFingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(binding.locatorFingerprint)) return null;
+  let locator;
+  try {
+    locator = safeUrl(binding.locator.trim());
+  } catch {
+    return null;
+  }
+  if (createHash10("sha256").update(locator).digest("hex") !== binding.locatorFingerprint) return null;
+  return {
+    locator,
+    locatorFingerprint: binding.locatorFingerprint
+  };
+}
+
+// src/amaster-runtime-daemon/pi-exact-source-read.mjs
+import { chmodSync as chmodSync5, mkdirSync as mkdirSync7, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync7, writeSync } from "node:fs";
+import { dirname as dirname6, join as join11 } from "node:path";
+
+// src/amaster-runtime-daemon/public-network-scope.mjs
+import { BlockList, isIP } from "node:net";
+var blockedV4Addresses = new BlockList();
+for (const [network, prefix] of [
+  ["0.0.0.0", 8],
+  ["10.0.0.0", 8],
+  ["100.64.0.0", 10],
+  ["127.0.0.0", 8],
+  ["169.254.0.0", 16],
+  ["172.16.0.0", 12],
+  ["192.0.0.0", 24],
+  ["192.0.2.0", 24],
+  ["192.88.99.0", 24],
+  ["192.168.0.0", 16],
+  ["198.18.0.0", 15],
+  ["198.51.100.0", 24],
+  ["203.0.113.0", 24],
+  ["224.0.0.0", 4],
+  ["240.0.0.0", 4]
+]) {
+  blockedV4Addresses.addSubnet(network, prefix, "ipv4");
+}
+var blockedV6Addresses = new BlockList();
+for (const [network, prefix] of [
+  ["::", 128],
+  ["::1", 128],
+  ["::", 96],
+  ["::ffff:0:0", 96],
+  ["64:ff9b::", 96],
+  ["64:ff9b:1::", 48],
+  ["100::", 64],
+  ["2001::", 32],
+  ["2001:2::", 48],
+  ["2001:db8::", 32],
+  ["2001:10::", 28],
+  ["2001:20::", 28],
+  ["2002::", 16],
+  ["fc00::", 7],
+  ["fe80::", 10],
+  ["fec0::", 10],
+  ["ff00::", 8]
+]) {
+  blockedV6Addresses.addSubnet(network, prefix, "ipv6");
+}
+
+// src/amaster-runtime-daemon/pi-exact-source-read.mjs
+var EXACT_SOURCE_READ_TOOL_NAME = "amaster_exact_source_read";
+var MAX_BYTES2 = 512 * 1024;
+function exactSourceToolAllowlist(profile) {
+  const governedToolNames = Array.isArray(profile?.directToolNames) ? profile.directToolNames.filter((name) => typeof name === "string" && name) : [];
+  return [.../* @__PURE__ */ new Set([...governedToolNames, EXACT_SOURCE_READ_TOOL_NAME])];
+}
+function managedPiExactSourceReadExtensionSource(binding, options = {}) {
+  const runtimeModuleUrl = typeof options.runtimeModuleUrl === "string" && options.runtimeModuleUrl ? options.runtimeModuleUrl : import.meta.url;
+  const readerModuleUrl = new URL("./pi-exact-source-read.mjs", runtimeModuleUrl).href;
+  return `import { registerExactSourceReadTool } from ${JSON.stringify(readerModuleUrl)};
+const binding = ${JSON.stringify(binding)};
+export default function amasterExactSourceRead(pi) { registerExactSourceReadTool(pi, binding); }
+`;
+}
+function materializePiExactSourceReadExtension(profileRoot, binding) {
+  const extensionPath = join11(profileRoot, "extensions", "amaster-exact-source-read.js");
+  mkdirSync7(dirname6(extensionPath), { recursive: true, mode: 448 });
+  const temporaryPath = `${extensionPath}.${process.pid}.tmp`;
+  try {
+    writeFileSync7(temporaryPath, managedPiExactSourceReadExtensionSource(binding), {
+      encoding: "utf8",
+      mode: 384,
+      flag: "wx"
+    });
+    renameSync4(temporaryPath, extensionPath);
+    chmodSync5(extensionPath, 384);
+    return extensionPath;
+  } finally {
+    rmSync6(temporaryPath, { force: true });
+  }
+}
+
 // src/amaster-runtime-daemon/model-authority.mjs
 var TASK_SESSION_SNAPSHOT_KEY = "mirrorxRuntimeConnectorTaskSessionV1";
 function asRecord2(value) {
@@ -25716,8 +26038,8 @@ function isTerminalResultOutboxStatus(status) {
 }
 
 // src/amaster-runtime-daemon/run-completion-state.mjs
-import { existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync8, readdirSync as readdirSync6, renameSync as renameSync4, unlinkSync, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join11 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync8, readFileSync as readFileSync8, readdirSync as readdirSync6, renameSync as renameSync5, unlinkSync, writeFileSync as writeFileSync8 } from "node:fs";
+import { join as join12 } from "node:path";
 
 // src/amaster-runtime-daemon/typed/run-completion-transitions.mjs
 var RUN_COMPLETION_PHASES = /* @__PURE__ */ new Set([
@@ -25979,12 +26301,12 @@ function assertValidRunCompletionState(value) {
 }
 function writeRunCompletionState(directory, state) {
   const valid = assertValidRunCompletionState(state);
-  mkdirSync7(directory, { recursive: true, mode: 448 });
-  const filePath = join11(directory, runCompletionStateFileName(valid.commandId));
+  mkdirSync8(directory, { recursive: true, mode: 448 });
+  const filePath = join12(directory, runCompletionStateFileName(valid.commandId));
   const temporaryPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
-  writeFileSync7(temporaryPath, `${JSON.stringify(valid, null, 2)}
+  writeFileSync8(temporaryPath, `${JSON.stringify(valid, null, 2)}
 `, { mode: 384 });
-  renameSync4(temporaryPath, filePath);
+  renameSync5(temporaryPath, filePath);
   return filePath;
 }
 function readRunCompletionState(filePath) {
@@ -25992,10 +26314,10 @@ function readRunCompletionState(filePath) {
 }
 function listRunCompletionStateFiles(directory) {
   if (!existsSync8(directory)) return [];
-  return readdirSync6(directory).filter((name) => name.endsWith(".json")).sort().map((name) => join11(directory, name));
+  return readdirSync6(directory).filter((name) => name.endsWith(".json")).sort().map((name) => join12(directory, name));
 }
 function removeRunCompletionState(directory, commandId) {
-  const filePath = join11(directory, runCompletionStateFileName(commandId));
+  const filePath = join12(directory, runCompletionStateFileName(commandId));
   if (existsSync8(filePath)) unlinkSync(filePath);
 }
 
@@ -27938,68 +28260,6 @@ function parseCodebuddyStreamJson(stdout, options = {}) {
   };
 }
 
-// src/amaster-runtime-daemon/web-evidence.mjs
-import { createHash as createHash10 } from "node:crypto";
-var SENSITIVE_QUERY_KEY_FRAGMENTS = [
-  "apikey",
-  "accesskey",
-  "privatekey",
-  "token",
-  "secret",
-  "signature",
-  "credential",
-  "password",
-  "authorization",
-  "session",
-  "cookie",
-  "oauth",
-  "ticket",
-  "assertion",
-  "samlresponse",
-  "relaystate",
-  "jwt"
-];
-var SENSITIVE_QUERY_KEYS = /* @__PURE__ */ new Set(["auth", "code", "key", "sig", "sid", "state"]);
-function isSensitiveQueryKey(key) {
-  const compact = key.normalize("NFKC").toLocaleLowerCase("en-US").replace(/[^a-z0-9]/gu, "");
-  return SENSITIVE_QUERY_KEYS.has(compact) || SENSITIVE_QUERY_KEY_FRAGMENTS.some((fragment) => compact.includes(fragment));
-}
-function safeUrl(raw) {
-  const url = new URL(raw);
-  if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) {
-    throw new Error("runtime_web_evidence_url_invalid");
-  }
-  for (const key of [...url.searchParams.keys()]) {
-    if (isSensitiveQueryKey(key)) url.searchParams.delete(key);
-  }
-  url.hash = "";
-  return url.toString();
-}
-function sanitizeRuntimeWebEvidence(input) {
-  const allowed = /* @__PURE__ */ new Set(["toolCallId", "requestedUrl", "finalUrl", "capturedAt", "mediaType", "normalizedText", "truncated"]);
-  if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).some((key) => !allowed.has(key))) {
-    throw new Error("runtime_web_evidence_invalid");
-  }
-  const cleanedText = typeof input.normalizedText === "string" ? input.normalizedText.replace(/\r\n?/gu, "\n").replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/gu, "") : null;
-  if (!cleanedText || typeof input.toolCallId !== "string" || !input.toolCallId.trim()) {
-    throw new Error("runtime_web_evidence_invalid");
-  }
-  const normalizedText = cleanedText.slice(0, 2e5);
-  const bytes = Buffer.from(normalizedText, "utf8");
-  return {
-    toolCallId: input.toolCallId.trim(),
-    requestedUrl: safeUrl(input.requestedUrl),
-    finalUrl: safeUrl(input.finalUrl),
-    capturedAt: new Date(input.capturedAt).toISOString(),
-    mediaType: typeof input.mediaType === "string" && input.mediaType.trim() ? input.mediaType.trim() : "text/plain",
-    normalizedText,
-    truncated: input.truncated === true || cleanedText.length > 2e5,
-    contentSha256: createHash10("sha256").update(bytes).digest("hex"),
-    observedChars: normalizedText.length,
-    observedBytes: bytes.byteLength
-  };
-}
-
 // src/amaster-runtime-daemon/executor-protocol/pi.mjs
 var PI_PROVIDER_AUTH_RE = /(?:(?:\b401\b|\b403\b)[^\n]*(?:unauthorized|forbidden|auth(?:entication|orization)?|api[_\s-]?key)|(?:invalid|missing|expired|revoked)\s+(?:provider\s+)?api[_\s-]?key|provider\s+authentication\s+required)/i;
 var PI_PROVIDER_QUOTA_EXHAUSTED_RE = /(?:\binsufficient[_\s-]?user[_\s-]?quota\b|河狸币余额不足|\b402\b[^\n]*(?:余额不足|insufficient[_\s-]?balance|payment\s+required))/i;
@@ -28403,7 +28663,10 @@ function piGovernedMcpUnavailableEvidence(event) {
 function piRuntimeWebEvidence(event) {
   if (readString(event?.type) === "amaster_web_evidence" && readString(event?.version) === "runtime_web_evidence_v1") {
     try {
-      return [sanitizeRuntimeWebEvidence(asRecord(event).evidence)];
+      return [{
+        ...sanitizeRuntimeWebEvidence(asRecord(event).evidence),
+        sourceToolName: "amaster_exact_source_read"
+      }];
     } catch {
       return [];
     }
@@ -28442,7 +28705,7 @@ function piRuntimeWebEvidence(event) {
       const identity = `${item.toolCallId}\0${item.contentSha256}`;
       if (!seen.has(identity)) {
         seen.add(identity);
-        evidence.push(item);
+        evidence.push({ ...item, sourceToolName: toolName });
       }
     } catch {
     }
@@ -29252,6 +29515,9 @@ function resolveRuntimeCostModelIdentity({
 }
 
 // src/amaster-runtime-daemon/execution-lanes.mjs
+function isRuntimeStopCommand(command) {
+  return command?.commandType === "cancel" || command?.commandType === "terminate";
+}
 function normalizeRuntimeExecutionLane(value) {
   return value === "conversation" ? "conversation" : "business";
 }
@@ -29273,6 +29539,10 @@ function selectRuntimeCommandsWithinLaneLimits(input) {
   }
   const selected = [];
   for (const command of Array.isArray(input.commands) ? input.commands : []) {
+    if (isRuntimeStopCommand(command)) {
+      selected.push(command);
+      continue;
+    }
     const lane = runtimeExecutionLaneForCapabilities(command?.executionLane, input.capabilities);
     if (lane === "conversation" && !supportsExecutionLanes) continue;
     const total = counts.business + counts.conversation;
@@ -30326,30 +30596,6 @@ function fixedRules(input, includeIssueLine, runContract = "producer") {
     "- A URL mentioned only in an Issue document, comment, assistant message, or provider tool output is not a collected work product. Persist the typed work product and use its returned workProductId as the durable receipt before marking the task done."
   ].filter(Boolean).join("\n");
 }
-function conversationAgentRosterText(context) {
-  const roster = asRecord(context.paperclipCompanyAgentRoster);
-  const agents = Array.isArray(roster.agents) ? roster.agents : [];
-  if (agents.length === 0) return "";
-  const lines = agents.map((agent) => {
-    const record11 = asRecord(agent);
-    const name = readString(record11.name) ?? "unknown";
-    const id = readString(record11.id) ?? "unknown";
-    const role = readString(record11.role);
-    const title = readString(record11.title);
-    const details = [
-      role ? `role: ${role}` : "",
-      title ? `title: ${title}` : ""
-    ].filter(Boolean).join(", ");
-    const status = readString(record11.status);
-    return `- ${name} (agentId: ${id})${details ? ` \u2014 ${details}` : ""}${status && status !== "active" ? ` [${status}]` : ""}`;
-  });
-  return [
-    "Company agent roster:",
-    'When the user refers to a Company employee by name, role, or pronoun (e.g. @-mention or "\u95EE\u4ED6"), resolve them from this roster and invoke them with the invoke_employee runtime action using their exact agentId. Never substitute a local subagent for a Company employee.',
-    ...lines,
-    ...roster.truncated === true ? ["(roster truncated; use the governed member-list read for the full roster)"] : []
-  ].join("\n");
-}
 function compileConversationPrompt(input, context, maxChars) {
   const mode = promptContextMode(input);
   const taskText = readString(input.taskMarkdown) ?? "";
@@ -30374,7 +30620,6 @@ function compileConversationPrompt(input, context, maxChars) {
     { name: "runtime_safety", title: "Runtime Safety", priority: 100, sourceRef: `command:${input.commandId}`, content: runtimeSafety },
     ...piGovernedTools ? [{ name: "pi_governed_tools", title: "Pi Governed Tools", priority: 96, sourceRef: "amaster_governed_mcp_direct_typed_contract", content: piGovernedTools }] : [],
     { name: "agent_instructions", title: "Agent Instructions", priority: 100, sourceRef: "agent_instructions_bundle", content: readString(input.agentInstructions) ?? "" },
-    { name: "agent_roster", title: "Company Agent Roster", priority: 86, sourceRef: "company_agent_roster", content: conversationAgentRosterText(context) },
     { name: "mention_context", title: "Mentioned Context", priority: 85, sourceRef: "paperclip_mention_context", content: readString(input.mentionContextText) ?? "" },
     { name: "attachments", title: "Materialized Inputs", priority: 80, sourceRef: "materialized_attachments", content: readString(input.attachmentsText) ?? "" },
     { name: "raw_snapshot", title: "Raw Context Snapshot", priority: 0, sourceRef: `run:${input.runId ?? "unknown"}`, originalChars: jsonCharLength(context), content: "", truncationReason: "on_demand_large_object" }
@@ -31066,7 +31311,6 @@ var COMPANY_INITIALIZATION_PRE_AUTHORITY_SECTIONS = /* @__PURE__ */ new Set([
   "governed_reads",
   "optional_task_wiki_context",
   "mention_context",
-  "agent_roster",
   "attachments"
 ]);
 var COMPANY_INITIALIZATION_POST_AUTHORITY_SECTIONS = /* @__PURE__ */ new Set([
@@ -31245,7 +31489,6 @@ var CONTEXT_AVAILABILITY_SECTION_TITLES = Object.freeze({
   optional_task_wiki_context: "Optional Company Wiki Context",
   agent_instructions: "Agent Instructions",
   mention_context: "Mentioned Context",
-  agent_roster: "Company Agent Roster",
   attachments: "Materialized Inputs",
   on_demand_refs: "On-demand Context References",
   raw_snapshot: "Raw Context Snapshot"
@@ -31590,12 +31833,12 @@ ${resolvedDependencies.details.content}` : resolvedDependencies.details.content
 
 // src/amaster-runtime-daemon/agent-instruction-delivery.mjs
 import { createHash as createHash13, randomBytes } from "node:crypto";
-import { existsSync as existsSync10, lstatSync as lstatSync8, mkdirSync as mkdirSync8, readFileSync as readFileSync10, readdirSync as readdirSync7, realpathSync as realpathSync9, renameSync as renameSync6, rmSync as rmSync7, writeFileSync as writeFileSync9 } from "node:fs";
-import { dirname as dirname7, isAbsolute as isAbsolute6, join as join13, relative as relative4, resolve as resolve8 } from "node:path";
+import { existsSync as existsSync10, lstatSync as lstatSync8, mkdirSync as mkdirSync9, readFileSync as readFileSync10, readdirSync as readdirSync7, realpathSync as realpathSync9, renameSync as renameSync7, rmSync as rmSync8, writeFileSync as writeFileSync10 } from "node:fs";
+import { dirname as dirname8, isAbsolute as isAbsolute6, join as join14, relative as relative4, resolve as resolve8 } from "node:path";
 
 // src/amaster-runtime-daemon/workspace-manifest.mjs
-import { chownSync as chownSync3, existsSync as existsSync9, readFileSync as readFileSync9, renameSync as renameSync5, rmSync as rmSync6, statSync as statSync5, writeFileSync as writeFileSync8 } from "node:fs";
-import { basename as basename5, dirname as dirname6, join as join12 } from "node:path";
+import { chownSync as chownSync3, existsSync as existsSync9, readFileSync as readFileSync9, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync5, writeFileSync as writeFileSync9 } from "node:fs";
+import { basename as basename5, dirname as dirname7, join as join13 } from "node:path";
 var WORKSPACE_MANIFEST_FILENAME = ".amaster-runtime.json";
 function syncManifestDirOwnership(manifestPath, deps = {}) {
   const stat = deps.statSync ?? statSync5;
@@ -31603,7 +31846,7 @@ function syncManifestDirOwnership(manifestPath, deps = {}) {
   const geteuid = deps.geteuid ?? (typeof process.geteuid === "function" ? process.geteuid.bind(process) : () => null);
   try {
     if (geteuid() !== 0) return false;
-    const dirStat = stat(dirname6(manifestPath));
+    const dirStat = stat(dirname7(manifestPath));
     if (dirStat.uid === 0 && dirStat.gid === 0) return false;
     chown(manifestPath, dirStat.uid, dirStat.gid);
     return true;
@@ -31616,8 +31859,8 @@ function nowIso() {
 }
 function workspaceManifestPath(workspaceOrCwd) {
   if (!workspaceOrCwd) return null;
-  if (typeof workspaceOrCwd === "string") return join12(workspaceOrCwd, WORKSPACE_MANIFEST_FILENAME);
-  if (typeof workspaceOrCwd.cwd === "string") return join12(workspaceOrCwd.cwd, WORKSPACE_MANIFEST_FILENAME);
+  if (typeof workspaceOrCwd === "string") return join13(workspaceOrCwd, WORKSPACE_MANIFEST_FILENAME);
+  if (typeof workspaceOrCwd.cwd === "string") return join13(workspaceOrCwd.cwd, WORKSPACE_MANIFEST_FILENAME);
   return null;
 }
 function readWorkspaceManifest(manifestPath) {
@@ -31630,17 +31873,17 @@ function readWorkspaceManifest(manifestPath) {
   }
 }
 function writeWorkspaceManifest(manifestPath, manifest, deps) {
-  const tempPath = join12(
-    dirname6(manifestPath),
+  const tempPath = join13(
+    dirname7(manifestPath),
     `.${basename5(manifestPath)}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`
   );
   try {
-    writeFileSync8(tempPath, `${JSON.stringify(manifest, null, 2)}
+    writeFileSync9(tempPath, `${JSON.stringify(manifest, null, 2)}
 `, { mode: 384 });
-    renameSync5(tempPath, manifestPath);
+    renameSync6(tempPath, manifestPath);
     syncManifestDirOwnership(manifestPath, deps);
   } catch (err) {
-    rmSync6(tempPath, { force: true });
+    rmSync7(tempPath, { force: true });
     throw err;
   }
   return manifest;
@@ -31728,7 +31971,7 @@ function isManagedExecutionDirectory(directory, managedWorkspacesRoot) {
   const managedRoot = canonicalExistingPath(managedWorkspacesRoot);
   const candidate = canonicalExistingPath(directory);
   if (!pathWithin(candidate, managedRoot)) return false;
-  const manifestPath = join13(candidate, WORKSPACE_MANIFEST_FILENAME);
+  const manifestPath = join14(candidate, WORKSPACE_MANIFEST_FILENAME);
   const manifestStat = lstatIfPresent2(manifestPath);
   if (!manifestStat?.isFile() || manifestStat.isSymbolicLink()) return false;
   try {
@@ -31844,7 +32087,7 @@ ${repositoryBlock}
 }
 function assertProjectionTargetAncestors(targetPath, targetRoot) {
   const pending = [];
-  let current = dirname7(targetPath);
+  let current = dirname8(targetPath);
   while (current !== targetRoot) {
     if (!pathWithin(current, targetRoot)) {
       throw instructionTopologyError(
@@ -31853,12 +32096,12 @@ function assertProjectionTargetAncestors(targetPath, targetRoot) {
       );
     }
     pending.push(current);
-    current = dirname7(current);
+    current = dirname8(current);
   }
   pending.push(targetRoot);
   for (const directory of pending.reverse()) {
     if (!existsSync10(directory)) {
-      mkdirSync8(directory, { mode: 448 });
+      mkdirSync9(directory, { mode: 448 });
       continue;
     }
     const stat = lstatSync8(directory);
@@ -31941,10 +32184,10 @@ function projectExternalWorkspaceProjectInstructions(sourceWorkspacePath, execut
     assertProjectionTargetAncestors(targetPath, targetRoot);
     const temporaryPath = `${targetPath}.mirrorx-${randomBytes(12).toString("hex")}.tmp`;
     try {
-      writeFileSync9(temporaryPath, projectedContent, { encoding: "utf8", flag: "wx", mode: 384 });
-      renameSync6(temporaryPath, targetPath);
+      writeFileSync10(temporaryPath, projectedContent, { encoding: "utf8", flag: "wx", mode: 384 });
+      renameSync7(temporaryPath, targetPath);
     } finally {
-      rmSync7(temporaryPath, { force: true });
+      rmSync8(temporaryPath, { force: true });
     }
     modelFacingFile = "AGENTS.md";
     modelFacingBytes = Buffer.byteLength(projectedContent, "utf8");
@@ -32015,9 +32258,9 @@ function agentInstructionDeliveryAudit(bundle, delivery) {
 }
 
 // src/amaster-runtime-daemon/config-state.mjs
-import { existsSync as existsSync11, mkdirSync as mkdirSync9, readFileSync as readFileSync11, renameSync as renameSync7, rmSync as rmSync8, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync10, readFileSync as readFileSync11, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync11 } from "node:fs";
 import { homedir as homedir3, hostname } from "node:os";
-import { dirname as dirname8, join as join14, parse as parse3, resolve as resolve9 } from "node:path";
+import { dirname as dirname9, join as join15, parse as parse3, resolve as resolve9 } from "node:path";
 
 // src/amaster-runtime-daemon/capability-registry.mjs
 var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
@@ -32153,19 +32396,19 @@ function defaultMachineId() {
 }
 function runtimeHome(env) {
   return expandHomePath(String(
-    env.AMASTER_RUNTIME_STATE_HOME || env.AMASTER_RUNTIME_HOME || join14(homedir3(), ".amaster-employee")
+    env.AMASTER_RUNTIME_STATE_HOME || env.AMASTER_RUNTIME_HOME || join15(homedir3(), ".amaster-employee")
   ));
 }
 function runtimeTemplatesRoot(env, home) {
   const configured = String(env.AMASTER_RUNTIME_TEMPLATES_ROOT ?? "").trim();
-  const resolved = configured ? resolve9(expandHomePath(configured)) : resolve9(String(env.PI_CODING_AGENT_DIR ?? "")) === "/data/.pi" ? "/data/templates" : resolve9(join14(home, "templates"));
+  const resolved = configured ? resolve9(expandHomePath(configured)) : resolve9(String(env.PI_CODING_AGENT_DIR ?? "")) === "/data/.pi" ? "/data/templates" : resolve9(join15(home, "templates"));
   if (resolved === parse3(resolved).root) {
     throw new Error("AMASTER_RUNTIME_TEMPLATES_ROOT must not be a filesystem root");
   }
   return resolved;
 }
 function stateFilePath(env) {
-  return env.AMASTER_DAEMON_STATE_FILE ? expandHomePath(String(env.AMASTER_DAEMON_STATE_FILE)) : join14(runtimeHome(env), "runtime-connector-state.json");
+  return env.AMASTER_DAEMON_STATE_FILE ? expandHomePath(String(env.AMASTER_DAEMON_STATE_FILE)) : join15(runtimeHome(env), "runtime-connector-state.json");
 }
 function corruptStatePath(path) {
   const timestamp2 = (/* @__PURE__ */ new Date()).toISOString().replace(/\D/g, "").slice(0, 14);
@@ -32188,7 +32431,7 @@ function readState(env) {
   } catch {
     const quarantinePath = corruptStatePath(path);
     try {
-      renameSync7(path, quarantinePath);
+      renameSync8(path, quarantinePath);
       process.stderr.write(`AMaster runtime state was invalid and quarantined at ${quarantinePath}
 `);
     } catch (error) {
@@ -32202,17 +32445,17 @@ function readState(env) {
 }
 function writeState(env, state) {
   const path = stateFilePath(env);
-  mkdirSync9(dirname8(path), { recursive: true });
+  mkdirSync10(dirname9(path), { recursive: true });
   const temporaryPath = `${path}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
   try {
-    writeFileSync10(temporaryPath, `${JSON.stringify(state, null, 2)}
+    writeFileSync11(temporaryPath, `${JSON.stringify(state, null, 2)}
 `, {
       flag: "wx",
       mode: 384
     });
-    renameSync7(temporaryPath, path);
+    renameSync8(temporaryPath, path);
   } finally {
-    rmSync8(temporaryPath, { force: true });
+    rmSync9(temporaryPath, { force: true });
   }
 }
 function buildConfig(env = process.env, flags = {}) {
@@ -32225,10 +32468,10 @@ function buildConfig(env = process.env, flags = {}) {
   const home = runtimeHome(env);
   const templatesRoot = runtimeTemplatesRoot(env, home);
   const runtimeWorkspacesRoot = expandHomePath(
-    String(flags.runtimeWorkspacesRoot ?? env.AMASTER_RUNTIME_WORKSPACES_ROOT ?? join14(home, "workspaces"))
+    String(flags.runtimeWorkspacesRoot ?? env.AMASTER_RUNTIME_WORKSPACES_ROOT ?? join15(home, "workspaces"))
   );
   const browserSessionStateRoot = expandHomePath(String(
-    flags.browserSessionStateRoot ?? env.AMASTER_BROWSER_SESSION_STATE_ROOT ?? join14(home, "browser-auth")
+    flags.browserSessionStateRoot ?? env.AMASTER_BROWSER_SESSION_STATE_ROOT ?? join15(home, "browser-auth")
   ));
   const piToolArgumentGuardModeValue = String(
     flags.piToolArgumentGuardMode ?? env.AMASTER_PI_TOOL_ARGUMENT_GUARD_MODE ?? "shadow"
@@ -32254,7 +32497,7 @@ function buildConfig(env = process.env, flags = {}) {
       "Pi tool argument enforce thresholds cannot be more aggressive than 8 MiB transport, 512 KiB materialized, and 16x amplification"
     );
   }
-  mkdirSync9(runtimeWorkspacesRoot, { recursive: true });
+  mkdirSync10(runtimeWorkspacesRoot, { recursive: true });
   const workspaceBindings = splitList(
     flags.workspaceAllowlist ?? env.AMASTER_WORKSPACE_ALLOWLIST ?? env.AMASTER_WORKSPACE_BINDINGS ?? runtimeWorkspacesRoot
   ).map(expandHomePath);
@@ -32447,7 +32690,7 @@ function createManifestOutputFlusher(opts = {}) {
 import { randomBytes as randomBytes2, timingSafeEqual } from "node:crypto";
 var BROWSER_CREDENTIAL_REQUEST_FD = 5;
 var BROWSER_CREDENTIAL_RESPONSE_FD = 6;
-var MAX_BYTES2 = 16 * 1024;
+var MAX_BYTES3 = 16 * 1024;
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
 var AUTHORITY_FIELDS = /* @__PURE__ */ new Set([
   "version",
@@ -32466,7 +32709,7 @@ var AUTHORITY_FIELDS = /* @__PURE__ */ new Set([
 ]);
 function encodeBrowserCredentialFrame(type, payload) {
   if (!/^[ACREV]$/u.test(type) || !Buffer.isBuffer(payload)) throw new Error("browser_credential_frame_invalid");
-  if (payload.length > MAX_BYTES2) throw new Error("browser_credential_frame_too_large");
+  if (payload.length > MAX_BYTES3) throw new Error("browser_credential_frame_too_large");
   return Buffer.concat([Buffer.from(`${type}${payload.length}
 `, "ascii"), payload]);
 }
@@ -32482,7 +32725,7 @@ function parseFrames(input, allowPartial) {
     const match = /^([ACREV])([0-9]{1,6})$/u.exec(input.subarray(offset, newline).toString("ascii"));
     if (!match) throw new Error("browser_credential_frame_invalid");
     const length = Number(match[2]);
-    if (length > MAX_BYTES2) throw new Error("browser_credential_frame_too_large");
+    if (length > MAX_BYTES3) throw new Error("browser_credential_frame_too_large");
     const end = newline + 1 + length;
     if (end > input.length) {
       if (allowPartial) break;
@@ -32586,7 +32829,7 @@ function createBrowserCredentialChannel({ consume }) {
   };
   const handleFrame = async (frame) => {
     if (frame.type === "A") return handleReceipt(frame);
-    if (frame.type !== "R" || frame.payload.length > MAX_BYTES2) return respondError("browser_credential_request_invalid");
+    if (frame.type !== "R" || frame.payload.length > MAX_BYTES3) return respondError("browser_credential_request_invalid");
     let decoded;
     try {
       decoded = JSON.parse(frame.payload.toString("utf8"));
@@ -32604,7 +32847,7 @@ function createBrowserCredentialChannel({ consume }) {
     try {
       const value = await consume(request);
       bytes = Buffer.isBuffer(value) ? value : Buffer.from(value, "utf8");
-      if (bytes.length === 0 || bytes.length > MAX_BYTES2) throw new Error("browser_credential_value_invalid");
+      if (bytes.length === 0 || bytes.length > MAX_BYTES3) throw new Error("browser_credential_value_invalid");
       responseFrame = encodeBrowserCredentialFrame("V", bytes);
       responsePipe.write(responseFrame, () => {
         responseFrame.fill(0);
@@ -32625,7 +32868,7 @@ function createBrowserCredentialChannel({ consume }) {
       requestPipe.on("data", (chunk) => {
         if (closed) return;
         requestBuffer = Buffer.concat([requestBuffer, Buffer.from(chunk)]);
-        if (requestBuffer.length > MAX_BYTES2 * 3) {
+        if (requestBuffer.length > MAX_BYTES3 * 3) {
           closed = true;
           responsePipe.end();
           return;
@@ -32658,7 +32901,7 @@ function createBrowserCredentialChannel({ consume }) {
 // src/amaster-runtime-daemon/browser-credential-readiness.mjs
 import { existsSync as existsSync12, readFileSync as readFileSync12, statSync as statSync6 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { isAbsolute as isAbsolute7, join as join15, relative as relative5, resolve as resolve10 } from "node:path";
+import { isAbsolute as isAbsolute7, join as join16, relative as relative5, resolve as resolve10 } from "node:path";
 var CAPABILITY = "browser_credential_auth_transaction_v1";
 var CREDENTIAL_BROWSER_TCB = Object.freeze({
   package: "chrome-devtools-mcp",
@@ -32670,13 +32913,13 @@ var CREDENTIAL_BROWSER_TCB = Object.freeze({
 var READINESS_CACHE_TTL_MS = 5e3;
 var readinessCache = /* @__PURE__ */ new Map();
 function inspectBrowserCredentialAuthReadiness(env = process.env) {
-  const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join15(homedir4(), ".pi", "agent")).trim();
+  const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join16(homedir4(), ".pi", "agent")).trim();
   const now = Date.now();
   const cached = readinessCache.get(home);
   if (cached && cached.expiresAt > now) return { ...cached.readiness };
   const candidates = [
-    join15(home, "npm", "node_modules", "@amaster.ai", "pi-browser-use", "package.json"),
-    join15(home, "node_modules", "@amaster.ai", "pi-browser-use", "package.json")
+    join16(home, "npm", "node_modules", "@amaster.ai", "pi-browser-use", "package.json"),
+    join16(home, "node_modules", "@amaster.ai", "pi-browser-use", "package.json")
   ];
   const packageAttested = candidates.some(attestedPackageManifest);
   const readiness = {
@@ -32714,15 +32957,15 @@ function sameCredentialBrowserTcb(value) {
 // src/amaster-runtime-daemon/browser-credential-env-readiness.mjs
 import { lstatSync as lstatSync9, readFileSync as readFileSync13 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 var CACHE_TTL_MS = 5e3;
 var cache = /* @__PURE__ */ new Map();
 function inspectBrowserCredentialEnvReadiness(env = process.env) {
-  const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join16(homedir5(), ".pi", "agent")).trim();
+  const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join17(homedir5(), ".pi", "agent")).trim();
   const now = Date.now();
   const cached = cache.get(home);
   if (cached && cached.expiresAt > now) return { ...cached.readiness };
-  const extensionPath = join16(home, "extensions", "browser-credential-env.mjs");
+  const extensionPath = join17(home, "extensions", "browser-credential-env.mjs");
   let extension = false;
   try {
     const stat = lstatSync9(extensionPath);
@@ -32737,8 +32980,8 @@ function inspectBrowserCredentialEnvReadiness(env = process.env) {
 }
 
 // src/amaster-runtime-daemon/browser-credential-env.mjs
-import { chmodSync as chmodSync5, mkdtempSync as mkdtempSync3, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join17, resolve as resolve11 } from "node:path";
+import { chmodSync as chmodSync6, mkdtempSync as mkdtempSync3, renameSync as renameSync9, rmSync as rmSync10, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join18, resolve as resolve11 } from "node:path";
 var BROWSER_CREDENTIAL_ENV_CAPABILITY = "browser_credential_env_read_v1";
 var BROWSER_CREDENTIAL_PRIVATE_CAPABILITY = "browser_credential_auth_transaction_v1";
 var BROWSER_CREDENTIAL_ENV_FILE = "PI_AGENT_BROWSER_CREDENTIAL_ENV_FILE";
@@ -32814,10 +33057,10 @@ async function materializeBrowserCredentialEnv(plan, options) {
   const rawRunDir = String(options.runDir ?? "").trim();
   if (!rawRunDir) fail2("browser_credential_env_run_dir_invalid");
   const runDir = resolve11(rawRunDir);
-  const credentialDir = mkdtempSync3(join17(runDir, ".browser-credentials-"));
-  chmodSync5(credentialDir, 448);
-  const targetPath = join17(credentialDir, "credentials.env");
-  const temporaryPath = join17(credentialDir, ".credentials.env.tmp");
+  const credentialDir = mkdtempSync3(join18(runDir, ".browser-credentials-"));
+  chmodSync6(credentialDir, 448);
+  const targetPath = join18(credentialDir, "credentials.env");
+  const temporaryPath = join18(credentialDir, ".credentials.env.tmp");
   const buffers = [];
   const protectedValues = [];
   try {
@@ -32831,20 +33074,20 @@ async function materializeBrowserCredentialEnv(plan, options) {
       if (!protectedValues.includes(value)) protectedValues.push(value);
       lines.push(`${entry.key}=${dotenvQuotedValue(value)}`);
     }
-    writeFileSync11(temporaryPath, `${lines.join("\n")}
+    writeFileSync12(temporaryPath, `${lines.join("\n")}
 `, { encoding: "utf8", mode: 384, flag: "wx" });
-    renameSync8(temporaryPath, targetPath);
-    chmodSync5(targetPath, 384);
+    renameSync9(temporaryPath, targetPath);
+    chmodSync6(targetPath, 384);
     return {
       dirPath: credentialDir,
       filePath: targetPath,
       protectedValues,
       cleanup() {
-        rmSync9(credentialDir, { recursive: true, force: true });
+        rmSync10(credentialDir, { recursive: true, force: true });
       }
     };
   } catch (error) {
-    rmSync9(credentialDir, { recursive: true, force: true });
+    rmSync10(credentialDir, { recursive: true, force: true });
     throw error;
   } finally {
     for (const buffer of buffers) buffer.fill(0);
@@ -33232,8 +33475,8 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 
 // src/amaster-runtime-daemon/workspace-guard.mjs
 import { createHash as createHash16 } from "node:crypto";
-import { existsSync as existsSync13, mkdirSync as mkdirSync10, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
-import { basename as basename6, join as join18, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve13 } from "node:path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync11, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
+import { basename as basename6, join as join19, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve13 } from "node:path";
 function pathWithin3(candidate, root) {
   const rel = relative7(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute9(rel);
@@ -33289,7 +33532,7 @@ function workspaceLabel(sourceWorkspacePath, payload) {
 }
 function workspacesRoot(config) {
   const root = resolve13(expandHomePath(config.runtimeWorkspacesRoot ?? "~/.amaster-employee/workspaces"));
-  mkdirSync10(root, { recursive: true });
+  mkdirSync11(root, { recursive: true });
   return realpathSync11(root);
 }
 function resolveExecutionWorkspace(config, command, opts = {}) {
@@ -33302,11 +33545,11 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
   const workspaceKey = `${safeSegment(workspaceLabel(sourceWorkspacePath, payload), "workspace")}-${shortHash(sourceWorkspacePath)}`;
   const issueKey = `${safeSegment(issueLabel(command, payload), "issue")}-${shortHash(issueId, 8)}`;
   const runKey = `${safeSegment(runId, "run")}-${shortHash(runId, 8)}`;
-  const runDir = join18(root, workspaceKey, issueKey, runKey);
-  const cwd = join18(runDir, "workdir");
-  const executorHome = join18(runDir, "executors", safeSegment(executorKind, "executor"));
-  mkdirSync10(cwd, { recursive: true });
-  mkdirSync10(executorHome, { recursive: true });
+  const runDir = join19(root, workspaceKey, issueKey, runKey);
+  const cwd = join19(runDir, "workdir");
+  const executorHome = join19(runDir, "executors", safeSegment(executorKind, "executor"));
+  mkdirSync11(cwd, { recursive: true });
+  mkdirSync11(executorHome, { recursive: true });
   const workspace = {
     managed: true,
     cwd,
@@ -33329,7 +33572,7 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
 
 // src/amaster-runtime-daemon/workspace-gc.mjs
 import { existsSync as existsSync14, readdirSync as readdirSync8, statSync as statSync8 } from "node:fs";
-import { join as join19, resolve as resolve14 } from "node:path";
+import { join as join20, resolve as resolve14 } from "node:path";
 function readIsoTime(value) {
   if (typeof value !== "string" || !value.trim()) return null;
   const time2 = new Date(value).getTime();
@@ -33352,7 +33595,7 @@ function walkWorkdirs(root) {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join19(current, entry.name);
+      const fullPath = join20(current, entry.name);
       if (entry.name === "workdir" && existsSync14(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -33384,7 +33627,7 @@ function directorySizeBytes(path) {
         continue;
       }
       for (const entry of entries) {
-        stack.push(join19(current, entry.name));
+        stack.push(join20(current, entry.name));
       }
       continue;
     }
@@ -33459,21 +33702,21 @@ function planManagedWorkspaceGcDryRun(input) {
 import { createHash as createHash17 } from "node:crypto";
 import {
   accessSync,
-  chmodSync as chmodSync6,
+  chmodSync as chmodSync7,
   constants as constants4,
   existsSync as existsSync15,
   lstatSync as lstatSync11,
-  mkdirSync as mkdirSync11,
+  mkdirSync as mkdirSync12,
   mkdtempSync as mkdtempSync4,
   readFileSync as readFileSync15,
   readdirSync as readdirSync9,
-  renameSync as renameSync9,
-  rmSync as rmSync10,
+  renameSync as renameSync10,
+  rmSync as rmSync11,
   statSync as statSync9,
   unlinkSync as unlinkSync2,
-  writeFileSync as writeFileSync12
+  writeFileSync as writeFileSync13
 } from "node:fs";
-import { dirname as dirname9, extname, isAbsolute as isAbsolute10, join as join20, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
+import { dirname as dirname10, extname, isAbsolute as isAbsolute10, join as join21, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PRESET_TEMPLATE_MANIFEST_FILE = ".mirrorx-preset-templates.json";
 var MAX_PRESET_TEMPLATE_FILES = 256;
@@ -33499,7 +33742,7 @@ function modeAllows(stat, identity, ownerBit, groupBit, otherBit) {
 function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
   if (!identity) {
     accessSync(targetDir, constants4.R_OK | constants4.X_OK);
-    for (const name of fileNames) accessSync(join20(targetDir, name), constants4.R_OK);
+    for (const name of fileNames) accessSync(join21(targetDir, name), constants4.R_OK);
     return;
   }
   let current = targetDir;
@@ -33508,7 +33751,7 @@ function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
     if (!stat.isDirectory() || !modeAllows(stat, identity, 64, 8, 1)) {
       throw new Error(`preset_template_executor_path_unreadable: ${current}`);
     }
-    const parent = dirname9(current);
+    const parent = dirname10(current);
     if (parent === current) break;
     current = parent;
   }
@@ -33517,7 +33760,7 @@ function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
     throw new Error(`preset_template_executor_catalog_unreadable: ${targetDir}`);
   }
   for (const name of fileNames) {
-    const path = join20(targetDir, name);
+    const path = join21(targetDir, name);
     const stat = statSync9(path);
     if (!stat.isFile() || !modeAllows(stat, identity, 256, 32, 4)) {
       throw new Error(`preset_template_executor_file_unreadable: ${name}`);
@@ -33561,7 +33804,7 @@ function readManifest(manifestPath, { strict }) {
 }
 function verifiedBundleFiles(sourceDir, manifest) {
   return manifest.files.map((entry) => {
-    const sourcePath = join20(sourceDir, entry.name);
+    const sourcePath = join21(sourceDir, entry.name);
     const stat = lstatSync11(sourcePath);
     if (!stat.isFile() || stat.isSymbolicLink()) {
       throw new Error(`preset_template_bundle_file_unsafe: ${entry.name}`);
@@ -33576,7 +33819,7 @@ function verifiedBundleFiles(sourceDir, manifest) {
 function removeRetiredPresetFiles(targetDir, previousManifest, nextNames) {
   for (const entry of previousManifest.files) {
     if (nextNames.has(entry.name)) continue;
-    const targetPath = join20(targetDir, entry.name);
+    const targetPath = join21(targetDir, entry.name);
     if (!existsSync15(targetPath)) continue;
     const stat = lstatSync11(targetPath);
     if (stat.isDirectory()) {
@@ -33591,36 +33834,36 @@ function materializeBundledPresetTemplates(input) {
   if (sourceDir === targetDir || sourceDir.startsWith(`${targetDir}${sep4}`) || targetDir.startsWith(`${sourceDir}${sep4}`)) {
     throw new Error("preset_template_source_target_overlap");
   }
-  const manifest = readManifest(join20(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
+  const manifest = readManifest(join21(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
   const verifiedFiles = verifiedBundleFiles(sourceDir, manifest);
-  mkdirSync11(dirname9(targetDir), { recursive: true, mode: 493 });
+  mkdirSync12(dirname10(targetDir), { recursive: true, mode: 493 });
   const targetStat = lstatIfExists(targetDir);
   if (targetStat && (!targetStat.isDirectory() || targetStat.isSymbolicLink())) {
     throw new Error("preset_template_target_root_unsafe");
   }
-  mkdirSync11(targetDir, { recursive: true, mode: 493 });
-  const previousManifest = readManifest(join20(targetDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: false });
-  const stageDir = mkdtempSync4(join20(dirname9(targetDir), ".mirrorx-preset-templates-"));
+  mkdirSync12(targetDir, { recursive: true, mode: 493 });
+  const previousManifest = readManifest(join21(targetDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: false });
+  const stageDir = mkdtempSync4(join21(dirname10(targetDir), ".mirrorx-preset-templates-"));
   try {
     for (const file of verifiedFiles) {
-      const stagedPath = join20(stageDir, file.name);
-      writeFileSync12(stagedPath, file.body, { mode: 292 });
-      chmodSync6(stagedPath, 292);
-      renameSync9(stagedPath, join20(targetDir, file.name));
+      const stagedPath = join21(stageDir, file.name);
+      writeFileSync13(stagedPath, file.body, { mode: 292 });
+      chmodSync7(stagedPath, 292);
+      renameSync10(stagedPath, join21(targetDir, file.name));
     }
     removeRetiredPresetFiles(targetDir, previousManifest, new Set(manifest.files.map((file) => file.name)));
-    const stagedManifest = join20(stageDir, PRESET_TEMPLATE_MANIFEST_FILE);
-    writeFileSync12(stagedManifest, `${JSON.stringify({
+    const stagedManifest = join21(stageDir, PRESET_TEMPLATE_MANIFEST_FILE);
+    writeFileSync13(stagedManifest, `${JSON.stringify({
       schemaVersion: manifest.schemaVersion,
       files: manifest.files
     }, null, 2)}
 `, { mode: 292 });
-    chmodSync6(stagedManifest, 292);
-    renameSync9(stagedManifest, join20(targetDir, PRESET_TEMPLATE_MANIFEST_FILE));
+    chmodSync7(stagedManifest, 292);
+    renameSync10(stagedManifest, join21(targetDir, PRESET_TEMPLATE_MANIFEST_FILE));
   } finally {
-    rmSync10(stageDir, { recursive: true, force: true });
+    rmSync11(stageDir, { recursive: true, force: true });
   }
-  chmodSync6(targetDir, 493);
+  chmodSync7(targetDir, 493);
   return {
     fileCount: manifest.files.length,
     totalBytes: manifest.totalBytes,
@@ -33634,11 +33877,11 @@ function materializeRuntimePresetTemplates(input) {
     targetDir: input.targetDir
   });
   const manifestBody = readFileSync15(
-    join20(materialized.targetDir, PRESET_TEMPLATE_MANIFEST_FILE)
+    join21(materialized.targetDir, PRESET_TEMPLATE_MANIFEST_FILE)
   );
   const manifest = JSON.parse(manifestBody.toString("utf8"));
   for (const file of manifest.files) {
-    const body = readFileSync15(join20(materialized.targetDir, file.name));
+    const body = readFileSync15(join21(materialized.targetDir, file.name));
     if (sha2562(body) !== file.sha256) {
       throw new Error(`preset_template_materialized_digest_mismatch: ${file.name}`);
     }
@@ -33662,7 +33905,7 @@ function materializeRuntimePresetTemplates(input) {
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
 import { existsSync as existsSync16, readdirSync as readdirSync10, statSync as statSync10 } from "node:fs";
-import { dirname as dirname10, join as join21, resolve as resolve16 } from "node:path";
+import { dirname as dirname11, join as join22, resolve as resolve16 } from "node:path";
 function runtimeStatusDirectoryEntries(path) {
   try {
     return readdirSync10(path, { withFileTypes: true });
@@ -33685,7 +33928,7 @@ function runtimeStatusDirectorySizeBytes(path) {
     if (!stat || stat.isSymbolicLink()) continue;
     if (stat.isDirectory()) {
       for (const entry of runtimeStatusDirectoryEntries(current)) {
-        stack.push(join21(current, entry.name));
+        stack.push(join22(current, entry.name));
       }
       continue;
     }
@@ -33702,7 +33945,7 @@ function walkRuntimeStatusManagedWorkdirs(root) {
     if (!current) continue;
     for (const entry of runtimeStatusDirectoryEntries(current)) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join21(current, entry.name);
+      const fullPath = join22(current, entry.name);
       if (entry.name === "workdir" && existsSync16(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -33744,7 +33987,7 @@ function summarizeRuntimeStatusRecentRun(workdir, manifest) {
 }
 function runtimeStatusOutboxDir(config) {
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join21(dirname10(stateFilePath({
+  return join22(dirname11(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "result-outbox");
 }
@@ -33752,7 +33995,7 @@ function runtimeStatusRunCompletionDir(config) {
   const explicit = config.AMASTER_RUN_COMPLETION_STATE_DIR ?? config.runCompletionStateDir;
   if (typeof explicit === "string" && explicit.trim()) return resolve16(explicit);
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join21(dirname10(stateFilePath({
+  return join22(dirname11(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "run-completion-state");
 }
@@ -33789,9 +34032,9 @@ function summarizeRuntimeLocalState(input) {
     }
   }
   const pendingOutboxDir = runtimeStatusOutboxDir(config);
-  const invalidOutboxDir = join21(pendingOutboxDir, "invalid");
+  const invalidOutboxDir = join22(pendingOutboxDir, "invalid");
   const pendingRunCompletionDir = runtimeStatusRunCompletionDir(config);
-  const invalidRunCompletionDir = join21(pendingRunCompletionDir, "invalid");
+  const invalidRunCompletionDir = join22(pendingRunCompletionDir, "invalid");
   return {
     managedWorkspacesRoot: root,
     managedWorkdirCount: workdirs.length,
@@ -34153,7 +34396,7 @@ export default function amasterProjectInstructions(pi) {
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash18 } from "node:crypto";
 import { existsSync as existsSync17, readdirSync as readdirSync11, readFileSync as readFileSync18, statSync as statSync11 } from "node:fs";
-import { basename as basename7, extname as extname2, isAbsolute as isAbsolute11, join as join22, relative as relative8, resolve as resolve18 } from "node:path";
+import { basename as basename7, extname as extname2, isAbsolute as isAbsolute11, join as join23, relative as relative8, resolve as resolve18 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Map([
   [".md", "markdown"],
@@ -34271,7 +34514,7 @@ function scanArtifactCandidates(cwd, opts = {}) {
       if (entry.name.startsWith(".") && entry.name !== ".amaster-runtime.json") {
         if (entry.name === ".git") continue;
       }
-      const fullPath = join22(current, entry.name);
+      const fullPath = join23(current, entry.name);
       const relativePath = normalizeRelativePath(root, fullPath);
       if (!isSafeRelativePath(relativePath)) continue;
       if (basename7(relativePath) === ".amaster-runtime.json") continue;
@@ -34349,7 +34592,7 @@ function sanitizeRuntimeService(entry) {
   };
 }
 function readRuntimeServicesSnapshot(cwd) {
-  const snapshotPath = join22(resolve18(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
+  const snapshotPath = join23(resolve18(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
   if (!existsSync17(snapshotPath)) return [];
   try {
     const parsed = JSON.parse(readFileSync18(snapshotPath, "utf8"));
@@ -34454,7 +34697,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.4";
+var CONNECTOR_VERSION = "0.1.6";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SUPPORTED_TASK_CONTEXT_VERSIONS = Object.freeze([TASK_CONTEXT_MANIFEST_VERSION, TASK_CONTEXT_V2]);
 var daemonRequire = createRequire(import.meta.url);
@@ -34554,7 +34797,7 @@ function resultOutboxPendingCount(config) {
   try {
     let pending = 0;
     for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json"))) {
-      if (readValidResultOutboxEntryOrQuarantine(config, file, join23(dir, file))) {
+      if (readValidResultOutboxEntryOrQuarantine(config, file, join24(dir, file))) {
         pending += 1;
       }
     }
@@ -34566,17 +34809,17 @@ function resultOutboxPendingCount(config) {
 function runCompletionStateDir(config) {
   const explicit = readString(process.env.AMASTER_RUN_COMPLETION_STATE_DIR);
   if (explicit) return resolve19(expandHomePath(explicit));
-  return join23(dirname11(stateFilePath(process.env)), "run-completion-state");
+  return join24(dirname12(stateFilePath(process.env)), "run-completion-state");
 }
 function runCompletionStateInvalidDir(config) {
-  return join23(runCompletionStateDir(config), "invalid");
+  return join24(runCompletionStateDir(config), "invalid");
 }
 function quarantineInvalidRunCompletionState(config, filePath, reason) {
   const invalidDir = runCompletionStateInvalidDir(config);
-  mkdirSync12(invalidDir, { recursive: true, mode: 448 });
-  const destination = join23(invalidDir, basename8(filePath));
+  mkdirSync13(invalidDir, { recursive: true, mode: 448 });
+  const destination = join24(invalidDir, basename8(filePath));
   try {
-    renameSync10(filePath, destination);
+    renameSync11(filePath, destination);
   } catch {
     copyFileSync2(filePath, destination);
     unlinkSync3(filePath);
@@ -34632,7 +34875,7 @@ function resultOutboxActiveRunCommands(config) {
   const outboxPending = resultOutboxPendingCount(config);
   const entries = [];
   for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json")).sort()) {
-    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join23(dir, file));
+    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join24(dir, file));
     if (!entry) continue;
     const activeRun = asRecord(entry.activeRun);
     const commandId = readString(activeRun.commandId) ?? readString(entry.commandId);
@@ -34668,7 +34911,7 @@ function resultOutboxFailedRunCommands(config) {
   for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json")).sort().slice(-100)) {
     let entry;
     try {
-      entry = asRecord(JSON.parse(readFileSync19(join23(dir, file), "utf8")));
+      entry = asRecord(JSON.parse(readFileSync19(join24(dir, file), "utf8")));
     } catch {
       continue;
     }
@@ -34778,10 +35021,10 @@ function safeSkillRootSummary(kind, source, pathValue) {
     try {
       for (const name of readdirSync12(pathValue)) {
         if (name.startsWith(".")) continue;
-        const skillDir = join23(pathValue, name);
+        const skillDir = join24(pathValue, name);
         try {
           if (!statSync12(skillDir).isDirectory()) continue;
-          if (!existsSync18(join23(skillDir, "SKILL.md"))) continue;
+          if (!existsSync18(join24(skillDir, "SKILL.md"))) continue;
           skillCount += 1;
           if (skillCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
             truncated = true;
@@ -34832,7 +35075,7 @@ function objectKeyCount(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? Object.keys(value).length : 0;
 }
 function defaultPiCodingAgentDir() {
-  return join23(homedir6(), ".pi", "agent");
+  return join24(homedir6(), ".pi", "agent");
 }
 function piCapabilitySourcesDiagnostics() {
   const configuredPiCodingAgentDir = safeExpandPath(process.env.PI_CODING_AGENT_DIR);
@@ -34841,14 +35084,14 @@ function piCapabilitySourcesDiagnostics() {
   const configuredPiAgentHome = safeExpandPath(process.env.PI_AGENT_HOME);
   const piAgentHome = configuredPiAgentHome ?? piCodingAgentDir;
   const piAgentHomeSource = configuredPiAgentHome ? "PI_AGENT_HOME" : piCodingAgentDirSource;
-  const userSkillsPath = piAgentHome ? join23(piAgentHome, "skills") : null;
+  const userSkillsPath = piAgentHome ? join24(piAgentHome, "skills") : null;
   const configuredMarketplaceSkillsPath = safeExpandPath(
     process.env.PI_AGENT_MARKETPLACE_SKILLS_DIR
   );
-  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join23(piAgentHome, "marketplace", "skills") : null);
+  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join24(piAgentHome, "marketplace", "skills") : null);
   const builtinSkillsPath = safeExpandPath(process.env.PI_AGENT_BUILTIN_SKILLS_DIR) ?? safeExpandPath(process.env.AMASTER_BUILTIN_SKILLS);
-  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join23(piAgentHome, "mcp.json") : null);
-  const settingsConfigPath = piCodingAgentDir ? join23(piCodingAgentDir, "settings.json") : null;
+  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join24(piAgentHome, "mcp.json") : null);
+  const settingsConfigPath = piCodingAgentDir ? join24(piCodingAgentDir, "settings.json") : null;
   const skillRoots = [
     safeSkillRootSummary("user", `${piAgentHomeSource}/skills`, userSkillsPath),
     safeSkillRootSummary(
@@ -35144,25 +35387,25 @@ function materializePiRuntimeSystemPrompt(config, promptRoot, commandId, content
   const normalizedCommandId = readString(commandId);
   if (!normalizedCommandId) throw new Error("pi_runtime_system_prompt_command_id_missing");
   const promptIdentity = createHash19("sha256").update(normalizedCommandId).digest("hex");
-  const promptDir = join23(promptRoot, "tmp");
-  mkdirSync12(promptDir, { recursive: true, mode: 448 });
+  const promptDir = join24(promptRoot, "tmp");
+  mkdirSync13(promptDir, { recursive: true, mode: 448 });
   const promptDirStat = lstatSync13(promptDir);
   if (!promptDirStat.isDirectory() || promptDirStat.isSymbolicLink()) {
     throw new Error("pi_runtime_system_prompt_directory_invalid");
   }
-  chmodSync7(promptDir, 448);
-  const promptPath = join23(promptDir, `runtime-system-${promptIdentity}.md`);
-  const temporaryPath = join23(promptDir, `.runtime-system.${process.pid}.${randomUUID2()}.tmp`);
+  chmodSync8(promptDir, 448);
+  const promptPath = join24(promptDir, `runtime-system-${promptIdentity}.md`);
+  const temporaryPath = join24(promptDir, `.runtime-system.${process.pid}.${randomUUID2()}.tmp`);
   try {
-    writeFileSync13(temporaryPath, contents, { encoding: "utf8", mode: 384, flag: "wx" });
-    renameSync10(temporaryPath, promptPath);
-    chmodSync7(promptPath, 384);
+    writeFileSync14(temporaryPath, contents, { encoding: "utf8", mode: 384, flag: "wx" });
+    renameSync11(temporaryPath, promptPath);
+    chmodSync8(promptPath, 384);
     const promptMode = statSync12(promptPath).mode & 511;
     if (promptMode !== 384) {
       throw new Error(`pi_runtime_system_prompt_permissions_failed: mode=${promptMode.toString(8)}`);
     }
   } finally {
-    rmSync11(temporaryPath, { force: true });
+    rmSync12(temporaryPath, { force: true });
   }
   handoffPiRunPathsToChild(config, [promptDir, promptPath]);
   return promptPath;
@@ -35328,7 +35571,7 @@ AMASTER_MACHINE_ID=${quoteShell(config.machineId)}
 AMASTER_WORKSPACE_ALLOWLIST=${quoteShell(config.workspaceBindings.join(","))}
 AMASTER_EXECUTORS=${quoteShell(executorEnv)}
 AMASTER_NETWORK_DOMAINS=${quoteShell(config.networkDomains.join(","))}
-AMASTER_DAEMON_STATE_FILE=${quoteShell(join23(homedir6(), ".amaster-employee", "runtime-connector-state.json"))}
+AMASTER_DAEMON_STATE_FILE=${quoteShell(join24(homedir6(), ".amaster-employee", "runtime-connector-state.json"))}
 EOF
 
 set -a
@@ -35806,21 +36049,21 @@ function browserSessionProfileIdentity(config, session) {
 function ensureBrowserSessionProfile(config, session) {
   const identity = browserSessionProfileIdentity(config, session);
   const profileRoot = resolve19(config.browserSessionStateRoot);
-  mkdirSync12(profileRoot, { recursive: true, mode: 448 });
+  mkdirSync13(profileRoot, { recursive: true, mode: 448 });
   if (lstatSync13(profileRoot).isSymbolicLink() || !lstatSync13(profileRoot).isDirectory()) {
     throw new Error("browser_session_profile_path_invalid");
   }
-  chmodSync7(profileRoot, 448);
+  chmodSync8(profileRoot, 448);
   const userDataDir = resolve19(profileRoot, identity.localOpaqueRef);
   if (!pathWithin3(userDataDir, profileRoot)) {
     throw new Error("browser_session_profile_path_invalid");
   }
-  mkdirSync12(userDataDir, { recursive: true, mode: 448 });
+  mkdirSync13(userDataDir, { recursive: true, mode: 448 });
   if (lstatSync13(userDataDir).isSymbolicLink() || !lstatSync13(userDataDir).isDirectory()) {
     throw new Error("browser_session_profile_path_invalid");
   }
-  chmodSync7(userDataDir, 448);
-  const markerPath = join23(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
+  chmodSync8(userDataDir, 448);
+  const markerPath = join24(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
   if (existsSync18(markerPath)) {
     if (lstatSync13(markerPath).isSymbolicLink()) {
       throw new Error("browser_session_profile_identity_invalid");
@@ -35830,15 +36073,15 @@ function ensureBrowserSessionProfile(config, session) {
       throw new Error("browser_session_profile_identity_invalid");
     }
   } else {
-    const temporaryPath = join23(
+    const temporaryPath = join24(
       userDataDir,
       `.${BROWSER_SESSION_PROFILE_OWNER_MARKER}.${process.pid}.${createHash19("sha256").update(randomUUID2()).digest("hex")}`
     );
-    writeFileSync13(temporaryPath, `${JSON.stringify(identity)}
+    writeFileSync14(temporaryPath, `${JSON.stringify(identity)}
 `, { mode: 384, flag: "wx" });
-    renameSync10(temporaryPath, markerPath);
+    renameSync11(temporaryPath, markerPath);
   }
-  chmodSync7(markerPath, 384);
+  chmodSync8(markerPath, 384);
   return { profileRoot, userDataDir, identity };
 }
 function cleanupBrowserSessionProfile(config, value) {
@@ -35852,14 +36095,14 @@ function cleanupBrowserSessionProfile(config, value) {
   if (lstatSync13(userDataDir).isSymbolicLink() || !lstatSync13(userDataDir).isDirectory()) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
-  const markerPath = join23(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
+  const markerPath = join24(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
   if (!existsSync18(markerPath) || lstatSync13(markerPath).isSymbolicLink()) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
   if (JSON.stringify(readJsonFile2(markerPath)) !== JSON.stringify(identity)) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
-  rmSync11(userDataDir, { recursive: true, force: false });
+  rmSync12(userDataDir, { recursive: true, force: false });
   return { outcome: "deleted", identity };
 }
 function readJsonFile2(filePath) {
@@ -35875,8 +36118,8 @@ function syncPiExecutorProviderConfig(config, agentDir, providerConfig) {
   const { modelsSynced, settingsSynced } = syncAmasterProviderFiles(agentDir, providerConfig);
   if (!modelsSynced && !settingsSynced) return null;
   handoffPiRunPathsToChild(config, [
-    modelsSynced ? join23(agentDir, "models.json") : null,
-    settingsSynced ? join23(agentDir, "settings.json") : null
+    modelsSynced ? join24(agentDir, "models.json") : null,
+    settingsSynced ? join24(agentDir, "settings.json") : null
   ]);
   return { modelsSynced, settingsSynced };
 }
@@ -35993,17 +36236,17 @@ async function materializeEffectiveAgentInstructions(config, command, workspace,
     }
     const target = safeAgentInstructionMaterializationTarget(workspace, filePath);
     if (!target) throw new Error(`context_envelope_instruction_path_invalid: ${filePath}`);
-    mkdirSync12(dirname11(target.targetPath), { recursive: true });
+    mkdirSync13(dirname12(target.targetPath), { recursive: true });
     const temporaryPath = `${target.targetPath}.mirrorx-${command.commandId}.tmp`;
     try {
-      writeFileSync13(temporaryPath, content, { encoding: "utf8", mode: 384 });
+      writeFileSync14(temporaryPath, content, { encoding: "utf8", mode: 384 });
       const readBack = readFileSync19(temporaryPath, "utf8");
       if (readBack !== content) {
         throw new Error(`context_envelope_instruction_readback_mismatch: ${filePath}`);
       }
-      renameSync10(temporaryPath, target.targetPath);
+      renameSync11(temporaryPath, target.targetPath);
     } finally {
-      rmSync11(temporaryPath, { force: true });
+      rmSync12(temporaryPath, { force: true });
     }
     materialized.push({
       path: target.relativePath,
@@ -36037,7 +36280,7 @@ function wikiTreePathForCommand(command, workspaceBindings) {
     const candidates = [];
     if (root.endsWith("paperclipai.plugin-llm-wiki")) candidates.push(root);
     if (basename8(root) === "plugin-data" && companyId) {
-      candidates.push(join23(root, companyId, "paperclipai.plugin-llm-wiki"));
+      candidates.push(join24(root, companyId, "paperclipai.plugin-llm-wiki"));
     }
     for (const candidate of candidates) {
       try {
@@ -36276,13 +36519,13 @@ function attachPiProjectInstructionExtension(profile, input) {
       "managed Pi profile is missing"
     );
   }
-  const projectInstructionExtensionPath = join23(
+  const projectInstructionExtensionPath = join24(
     profile.profileRoot,
     "extensions",
     MANAGED_PI_PROJECT_INSTRUCTION_FILENAME
   );
   const contract = { projectInstructionPath: resolve19(input.cwd, "AGENTS.md") };
-  writeFileSync13(projectInstructionExtensionPath, managedPiProjectInstructionExtensionSource(contract), { mode: 384 });
+  writeFileSync14(projectInstructionExtensionPath, managedPiProjectInstructionExtensionSource(contract), { mode: 384 });
   return projectInstructionExtensionPath;
 }
 function commandUsesPiExecutor(command) {
@@ -36325,18 +36568,18 @@ function buildExecutorEnv(config, command, workspace) {
   };
 }
 function preparePiModelCallProfile(commandId, baseEnv, options = {}) {
-  const profileRoot = mkdtempSync5(join23(tmpdir(), "amaster-pi-model-call-"));
-  const home = join23(profileRoot, "home");
-  const sessionsDir = join23(profileRoot, "sessions");
-  const tempDir = join23(profileRoot, "tmp");
+  const profileRoot = mkdtempSync5(join24(tmpdir(), "amaster-pi-model-call-"));
+  const home = join24(profileRoot, "home");
+  const sessionsDir = join24(profileRoot, "sessions");
+  const tempDir = join24(profileRoot, "tmp");
   for (const directory of [home, sessionsDir, tempDir]) {
-    mkdirSync12(directory, { recursive: true, mode: 448 });
+    mkdirSync13(directory, { recursive: true, mode: 448 });
   }
   try {
     const extensionArgs = [];
     if (options.responseContract) {
-      const extensionPath = join23(profileRoot, "model-call-output-contract.js");
-      writeFileSync13(
+      const extensionPath = join24(profileRoot, "model-call-output-contract.js");
+      writeFileSync14(
         extensionPath,
         modelCallOutputContractExtensionSource(options.responseContract.maxOutputTokens),
         { mode: 384 }
@@ -36356,12 +36599,12 @@ function preparePiModelCallProfile(commandId, baseEnv, options = {}) {
       }
     };
   } catch (error) {
-    rmSync11(profileRoot, { recursive: true, force: true });
+    rmSync12(profileRoot, { recursive: true, force: true });
     throw error;
   }
 }
 function cleanupPiModelCallProfile(profile) {
-  if (profile?.profileRoot) rmSync11(profile.profileRoot, { recursive: true, force: true });
+  if (profile?.profileRoot) rmSync12(profile.profileRoot, { recursive: true, force: true });
 }
 function splitExtraArgs(value) {
   return splitList(value).flatMap((entry) => entry.split(/\s+/).filter(Boolean));
@@ -37355,7 +37598,7 @@ function walkManagedWorkdirs(root) {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join23(current, entry.name);
+      const fullPath = join24(current, entry.name);
       if (entry.name === "workdir" && existsSync18(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -38358,14 +38601,14 @@ async function completeCommand(config, command, status, result2, error) {
 function resultOutboxDir(config) {
   const explicit = readString(process.env.AMASTER_RESULT_OUTBOX_DIR);
   if (explicit) return resolve19(expandHomePath(explicit));
-  return join23(dirname11(stateFilePath(process.env)), "result-outbox");
+  return join24(dirname12(stateFilePath(process.env)), "result-outbox");
 }
 function resultOutboxInvalidDir(config) {
-  return join23(resultOutboxDir(config), "invalid");
+  return join24(resultOutboxDir(config), "invalid");
 }
 function writeResultOutboxEntry(config, entry) {
   const dir = resultOutboxDir(config);
-  mkdirSync12(dir, { recursive: true });
+  mkdirSync13(dir, { recursive: true });
   const pendingLogEntries = takeDeferredLiveLogEntries(entry.commandId);
   const body = {
     version: 1,
@@ -38375,16 +38618,16 @@ function writeResultOutboxEntry(config, entry) {
     ...entry,
     ...pendingLogEntries.length > 0 ? { pendingLogEntries } : {}
   };
-  writeFileSync13(join23(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
+  writeFileSync14(join24(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
 }
 function moveResultOutboxEntryToInvalid(config, file, fullPath, reason, detail, original) {
   const invalidDir = resultOutboxInvalidDir(config);
-  mkdirSync12(invalidDir, { recursive: true });
-  const invalidPath = join23(invalidDir, file);
+  mkdirSync13(invalidDir, { recursive: true });
+  const invalidPath = join24(invalidDir, file);
   if (original === void 0) {
     try {
-      renameSync10(fullPath, invalidPath);
+      renameSync11(fullPath, invalidPath);
     } catch {
       copyFileSync2(fullPath, invalidPath);
       unlinkSync3(fullPath);
@@ -38397,7 +38640,7 @@ function moveResultOutboxEntryToInvalid(config, file, fullPath, reason, detail,
     ...detail ? { detail: truncateText(detail, 1e3) } : {},
     original
   };
-  writeFileSync13(invalidPath, `${JSON.stringify(evidence, null, 2)}
+  writeFileSync14(invalidPath, `${JSON.stringify(evidence, null, 2)}
 `, { mode: 384 });
   unlinkSync3(fullPath);
 }
@@ -38437,13 +38680,13 @@ function updateResultOutboxAttempt(fullPath, entry, err) {
     ...typeof err?.httpStatus === "number" ? { httpStatus: err.httpStatus } : {},
     lastError: truncateText(err instanceof Error ? err.message : String(err), 1e3)
   };
-  writeFileSync13(fullPath, `${JSON.stringify(next, null, 2)}
+  writeFileSync14(fullPath, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
   return next;
 }
 function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err) {
   const invalidDir = resultOutboxInvalidDir(config);
-  mkdirSync12(invalidDir, { recursive: true });
+  mkdirSync13(invalidDir, { recursive: true });
   const body = {
     ...entry,
     invalidReason: reason,
@@ -38451,8 +38694,8 @@ function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err)
     ...typeof err?.httpStatus === "number" ? { httpStatus: err.httpStatus } : {},
     lastError: truncateText(err instanceof Error ? err.message : String(err), 1e3)
   };
-  const invalidPath = join23(invalidDir, file);
-  writeFileSync13(invalidPath, `${JSON.stringify(body, null, 2)}
+  const invalidPath = join24(invalidDir, file);
+  writeFileSync14(invalidPath, `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
   try {
     unlinkSync3(fullPath);
@@ -38470,7 +38713,7 @@ async function flushResultOutbox(config) {
   const files = readdirSync12(dir).filter((name) => name.endsWith(".json")).sort();
   let completed = 0;
   for (const file of files) {
-    const fullPath = join23(dir, file);
+    const fullPath = join24(dir, file);
     let entry = readValidResultOutboxEntryOrQuarantine(config, file, fullPath);
     if (!entry) continue;
     const pendingLogEntries = Array.isArray(entry.pendingLogEntries) ? entry.pendingLogEntries.filter((logEntry) => typeof asRecord(logEntry).message === "string") : [];
@@ -38485,7 +38728,7 @@ async function flushResultOutbox(config) {
         if (!isTerminalResultOutboxStatus(logHttpStatus)) {
           const logAttemptCount = readNumber(entry.logAttemptCount, 0) + 1;
           if (logAttemptCount < maxResultOutboxAttempts()) {
-            writeFileSync13(fullPath, `${JSON.stringify({ ...entry, logAttemptCount }, null, 2)}
+            writeFileSync14(fullPath, `${JSON.stringify({ ...entry, logAttemptCount }, null, 2)}
 `, { mode: 384 });
             process.stderr.write(`AMaster daemon deferred live log delivery retry failed for ${entry.commandId ?? file}: ${logMessage}
 `);
@@ -38498,7 +38741,7 @@ async function flushResultOutbox(config) {
       entry = { ...entry };
       delete entry.pendingLogEntries;
       delete entry.logAttemptCount;
-      writeFileSync13(fullPath, `${JSON.stringify(entry, null, 2)}
+      writeFileSync14(fullPath, `${JSON.stringify(entry, null, 2)}
 `, { mode: 384 });
     }
     try {
@@ -38709,8 +38952,8 @@ async function materializeIssueAttachments(config, command, workspace) {
     runtimeAuth,
     issueId
   );
-  const targetDir = join23(workspace.cwd, "input-attachments");
-  mkdirSync12(targetDir, { recursive: true });
+  const targetDir = join24(workspace.cwd, "input-attachments");
+  mkdirSync13(targetDir, { recursive: true });
   const usedFilenames = /* @__PURE__ */ new Set();
   const materialized = [];
   for (const [index, rawAttachment] of attachments.entries()) {
@@ -38723,12 +38966,12 @@ async function materializeIssueAttachments(config, command, workspace) {
     let filename = safeMaterializedAttachmentFilename(attachment, index);
     filename = dedupeMaterializedFilename(filename, index, usedFilenames);
     usedFilenames.add(filename);
-    const targetPath = join23(targetDir, filename);
+    const targetPath = join24(targetDir, filename);
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
     if (attachment.initializationInput === true && (body.byteLength !== attachment.byteSize || createHash19("sha256").update(body).digest("hex") !== attachment.sha256)) {
       throw new Error("Initialization input content does not match its preparation receipt");
     }
-    writeFileSync13(targetPath, body);
+    writeFileSync14(targetPath, body);
     const attachmentId = readString(attachment.id);
     const actualSha256 = createHash19("sha256").update(body).digest("hex");
     const lineageCandidates = lineageCandidatesByAttachmentId.get(attachmentId) ?? [];
@@ -38795,9 +39038,9 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
   if (manifest.version !== 1 || !Array.isArray(manifest.entries)) {
     throw new Error("artifact_input_manifest_invalid: expected version 1 entries array");
   }
-  const targetRoot = join23(workspace.cwd, "input-artifacts");
-  rmSync11(targetRoot, { recursive: true, force: true });
-  mkdirSync12(targetRoot, { recursive: true });
+  const targetRoot = join24(workspace.cwd, "input-artifacts");
+  rmSync12(targetRoot, { recursive: true, force: true });
+  mkdirSync13(targetRoot, { recursive: true });
   const usedPaths = /* @__PURE__ */ new Set();
   const materialized = [];
   for (const [index, rawEntry] of manifest.entries.entries()) {
@@ -38826,18 +39069,18 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       id: attachmentId,
       originalFilename: readString(entry.originalFilename)
     }, index);
-    let relativePath = join23("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    let relativePath = join24("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     if (usedPaths.has(relativePath)) {
       const ext = extname3(filename);
       const stem = ext ? filename.slice(0, -ext.length) : filename;
       filename = `${stem}-${index + 1}${ext}`;
-      relativePath = join23("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+      relativePath = join24("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     }
     usedPaths.add(relativePath);
-    const targetPath = join23(workspace.cwd, relativePath);
-    mkdirSync12(dirname11(targetPath), { recursive: true });
-    writeFileSync13(targetPath, body);
-    chmodSync7(targetPath, 292);
+    const targetPath = join24(workspace.cwd, relativePath);
+    mkdirSync13(dirname12(targetPath), { recursive: true });
+    writeFileSync14(targetPath, body);
+    chmodSync8(targetPath, 292);
     materialized.push({
       id: attachmentId,
       workProductId,
@@ -38856,9 +39099,9 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
     version: 1,
     entries: materialized.map(({ path: _path, relativePath, ...entry }) => ({ ...entry, path: relativePath }))
   };
-  const manifestPath = join23(targetRoot, "artifact-input-manifest.json");
-  writeFileSync13(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
-  chmodSync7(manifestPath, 292);
+  const manifestPath = join24(targetRoot, "artifact-input-manifest.json");
+  writeFileSync14(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
+  chmodSync8(manifestPath, 292);
   updateWorkspaceManifest(workspaceManifestPath(workspace), { artifactInputManifest: localManifest });
   return materialized;
 }
@@ -38869,9 +39112,9 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
   const runtimeAuth = commandRuntimeAuth(command);
   const files = Array.isArray(mention.files) ? mention.files : [];
   if (files.length === 0 || !readString(runtimeAuth.apiUrl) || !readString(runtimeAuth.apiKey)) return empty;
-  const targetDir = join23(workspace.cwd, "input-artifacts", "mentioned");
-  rmSync11(targetDir, { recursive: true, force: true });
-  mkdirSync12(targetDir, { recursive: true });
+  const targetDir = join24(workspace.cwd, "input-artifacts", "mentioned");
+  rmSync12(targetDir, { recursive: true, force: true });
+  mkdirSync13(targetDir, { recursive: true });
   const usedFilenames = /* @__PURE__ */ new Set();
   const materialized = [];
   const skipped = [];
@@ -38915,9 +39158,9 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
     }, index);
     filename = dedupeMaterializedFilename(filename, index, usedFilenames);
     usedFilenames.add(filename);
-    const targetPath = join23(targetDir, filename);
-    writeFileSync13(targetPath, body);
-    chmodSync7(targetPath, 292);
+    const targetPath = join24(targetDir, filename);
+    writeFileSync14(targetPath, body);
+    chmodSync8(targetPath, 292);
     materialized.push({
       id: artifactId,
       name: readString(entry.title) ?? readString(entry.originalFilename) ?? filename,
@@ -38933,7 +39176,7 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
   return { materialized, skipped };
 }
 function issueCheckpointDir(workspace) {
-  return join23(dirname11(workspace.runDir), "checkpoint");
+  return join24(dirname12(workspace.runDir), "checkpoint");
 }
 async function clearIssueCheckpoint(config, command, workspace, reason, consumedSource = null) {
   const checkpointDir = issueCheckpointDir(workspace);
@@ -38943,13 +39186,13 @@ async function clearIssueCheckpoint(config, command, workspace, reason, consumed
     if (!sourceRunId) return false;
     let manifest;
     try {
-      manifest = asRecord(JSON.parse(readFileSync19(join23(checkpointDir, "manifest.json"), "utf8")));
+      manifest = asRecord(JSON.parse(readFileSync19(join24(checkpointDir, "manifest.json"), "utf8")));
     } catch {
       return false;
     }
     if (readString(manifest.issueId) !== commandIssueId(command) || readString(manifest.sourceRunId) !== sourceRunId) return false;
   }
-  rmSync11(checkpointDir, { recursive: true, force: true });
+  rmSync12(checkpointDir, { recursive: true, force: true });
   await ingestLog(config, command, "system", "info", "Cleared issue continuation checkpoint", { reason });
   return true;
 }
@@ -38988,7 +39231,7 @@ function expectedContinuationCheckpoint(command) {
 }
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);
-  const manifestPath = join23(checkpointDir, "manifest.json");
+  const manifestPath = join24(checkpointDir, "manifest.json");
   const expectedContinuation = expectedContinuationCheckpoint(command);
   const nativeRequest = asRecord(asRecord(command.payload).nativeSession);
   let portableNativeSession;
@@ -39020,12 +39263,12 @@ async function materializeIssueCheckpoint(config, command, workspace) {
   try {
     manifest = asRecord(JSON.parse(readFileSync19(manifestPath, "utf8")));
   } catch (err) {
-    rmSync11(checkpointDir, { recursive: true, force: true });
+    rmSync12(checkpointDir, { recursive: true, force: true });
     throw new Error(`invalid issue checkpoint manifest: ${err instanceof Error ? err.message : String(err)}`);
   }
   const expiresAt = Date.parse(readString(manifest.expiresAt) ?? "");
   if (!Number.isFinite(expiresAt) || expiresAt <= Date.now() || readString(manifest.issueId) !== commandIssueId(command)) {
-    rmSync11(checkpointDir, { recursive: true, force: true });
+    rmSync12(checkpointDir, { recursive: true, force: true });
     if (expectedContinuation) throw new Error("continuation_checkpoint_unavailable: manifest_expired_or_mismatched");
     return unavailable2;
   }
@@ -39049,7 +39292,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
         throw new Error("continuation_checkpoint_lineage_mismatch");
       }
     }
-    const filesRoot = files.length > 0 ? realpathSync12(join23(checkpointDir, "files")) : null;
+    const filesRoot = files.length > 0 ? realpathSync12(join24(checkpointDir, "files")) : null;
     const workspaceRoot = realpathSync12(workspace.cwd);
     const validated = [];
     let totalBytes = 0;
@@ -39087,8 +39330,8 @@ async function materializeIssueCheckpoint(config, command, workspace) {
     }
     const materialized = [];
     for (const { relativePath, source, target, expectedSha256, expectedByteSize } of validated) {
-      mkdirSync12(dirname11(target), { recursive: true });
-      const targetParent = realpathSync12(dirname11(target));
+      mkdirSync13(dirname12(target), { recursive: true });
+      const targetParent = realpathSync12(dirname12(target));
       if (!pathWithin3(targetParent, workspaceRoot)) {
         throw new Error(`issue checkpoint target escapes its workspace: ${relativePath}`);
       }
@@ -39105,16 +39348,16 @@ async function materializeIssueCheckpoint(config, command, workspace) {
         materialized.push(relativePath);
         continue;
       }
-      const temporaryTarget = join23(targetParent, `.${basename8(target)}.checkpoint-${randomUUID2()}.tmp`);
+      const temporaryTarget = join24(targetParent, `.${basename8(target)}.checkpoint-${randomUUID2()}.tmp`);
       try {
         copyFileSync2(source, temporaryTarget);
         const temporaryStat = lstatSync13(temporaryTarget);
         if (!temporaryStat.isFile() || temporaryStat.size !== expectedByteSize || hashFileSha256(temporaryTarget) !== expectedSha256) {
           throw new Error(`issue checkpoint target verification failed: ${relativePath}`);
         }
-        renameSync10(temporaryTarget, target);
+        renameSync11(temporaryTarget, target);
       } finally {
-        rmSync11(temporaryTarget, { force: true });
+        rmSync12(temporaryTarget, { force: true });
       }
       materialized.push(relativePath);
     }
@@ -39141,10 +39384,10 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
   const commandKey = readString(command.commandId)?.replace(/[^A-Za-z0-9_-]/g, "-") ?? randomUUID2();
   const stagingDir = `${checkpointDir}.tmp-${commandKey}`;
   const backupDir = `${checkpointDir}.previous-${commandKey}`;
-  const filesDir = join23(stagingDir, "files");
-  rmSync11(stagingDir, { recursive: true, force: true });
-  rmSync11(backupDir, { recursive: true, force: true });
-  mkdirSync12(filesDir, { recursive: true });
+  const filesDir = join24(stagingDir, "files");
+  rmSync12(stagingDir, { recursive: true, force: true });
+  rmSync12(backupDir, { recursive: true, force: true });
+  mkdirSync13(filesDir, { recursive: true });
   try {
     const files = [];
     let totalBytes = 0;
@@ -39195,7 +39438,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       }
       const target = resolve19(filesDir, relativePath);
       if (!pathWithin3(target, filesDir)) continue;
-      mkdirSync12(dirname11(target), { recursive: true });
+      mkdirSync13(dirname12(target), { recursive: true });
       copyFileSync2(ownedSource, target);
       const storedStat = lstatSync13(target);
       if (!storedStat.isFile() || storedStat.size !== byteSize) {
@@ -39205,8 +39448,8 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       files.push({ path: relativePath, byteSize, sha256: hashFileSha256(target) });
     }
     if (files.length === 0 && !options.taskSession) {
-      rmSync11(stagingDir, { recursive: true, force: true });
-      rmSync11(checkpointDir, { recursive: true, force: true });
+      rmSync12(stagingDir, { recursive: true, force: true });
+      rmSync12(checkpointDir, { recursive: true, force: true });
       return null;
     }
     const checkpointCreatedAt = Date.now();
@@ -39231,26 +39474,26 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       totalBytes,
       files
     };
-    writeFileSync13(join23(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
+    writeFileSync14(join24(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
 `);
     const replacingExistingCheckpoint = existsSync18(checkpointDir);
-    if (replacingExistingCheckpoint) renameSync10(checkpointDir, backupDir);
+    if (replacingExistingCheckpoint) renameSync11(checkpointDir, backupDir);
     try {
-      renameSync10(stagingDir, checkpointDir);
+      renameSync11(stagingDir, checkpointDir);
     } catch (err) {
       if (replacingExistingCheckpoint && existsSync18(backupDir) && !existsSync18(checkpointDir)) {
-        renameSync10(backupDir, checkpointDir);
+        renameSync11(backupDir, checkpointDir);
       }
       throw err;
     }
-    rmSync11(backupDir, { recursive: true, force: true });
+    rmSync12(backupDir, { recursive: true, force: true });
     if (config.checkpointUploadEnabled) {
       await uploadCheckpoint(config, command, checkpointDir, manifest, void 0, options.nativeSession);
     }
     await ingestLog(config, command, "system", "info", `Saved ${files.length} issue checkpoint file(s) for continuation`, manifest);
     return manifest;
   } catch (err) {
-    rmSync11(stagingDir, { recursive: true, force: true });
+    rmSync12(stagingDir, { recursive: true, force: true });
     throw err;
   }
 }
@@ -39543,7 +39786,7 @@ async function executeRunCommand(config, command) {
           executorCommand: invocation.command,
           executorHome: workspace.executorHome,
           runDir: workspace.runDir,
-          runtimeCacheRoot: join23(dirname11(config.daemonStateFile), "cache"),
+          runtimeCacheRoot: join24(dirname12(config.daemonStateFile), "cache"),
           cwd,
           runtimeAuth: commandRuntimeAuth(command),
           nativeSession: asRecord(asRecord(executionCommand.payload).nativeSession),
@@ -39759,6 +40002,25 @@ async function executeRunCommand(config, command) {
       invocation.args = [...invocation.args, "--extension", projectInstructionExtensionPath];
       handoffPiRunPathsToChild(config, [projectInstructionExtensionPath]);
     }
+    const taskResourceReceiptBinding = runtimeWebEvidenceTaskResourceBinding(command.payload);
+    const exactTaskResourceBinding = runtimeExactTaskResourceBinding(command.payload);
+    if (taskResourceReceiptBinding && !exactTaskResourceBinding) {
+      throw new Error("runtime_exact_source_binding_invalid");
+    }
+    if (exactTaskResourceBinding) {
+      if (executor.kind !== "pi" || !managedMcpProfile) {
+        throw new Error("runtime_exact_source_reader_unavailable");
+      }
+      const exactSourceExtensionPath = materializePiExactSourceReadExtension(
+        managedMcpProfile.profileRoot,
+        exactTaskResourceBinding
+      );
+      invocation.args = [...invocation.args, "--extension", exactSourceExtensionPath];
+      invocation.args = applyManagedPiToolAllowlist(invocation.args, {
+        toolAllowlist: exactSourceToolAllowlist(managedMcpProfile)
+      });
+      handoffPiRunPathsToChild(config, [exactSourceExtensionPath]);
+    }
     const promptBudgetSummary = contextManifest.budget.totalChars === null ? `${contextManifest.budget.usedChars} characters (unbounded)` : `${contextManifest.budget.usedChars}/${contextManifest.budget.totalChars} characters`;
     enqueuePreparationLog("system", "info", `Compiled ${contextManifest.mode} prompt using ${promptBudgetSummary}`, {
       presentationKind: "context_manifest",
@@ -39863,11 +40125,10 @@ async function executeRunCommand(config, command) {
       },
       {
         piToolArgumentGuard: config.piToolArgumentGuard,
-        onWebEvidence: (evidence) => Promise.all(evidence.map((entry) => postRuntimeWebEvidence(
-          config,
-          requireConnectorId(config),
-          command.commandId,
-          {
+        onWebEvidence: (evidence) => Promise.all(evidence.map((entry) => {
+          const taskResourceBinding = runtimeWebEvidenceTaskResourceBinding(command.payload);
+          if (taskResourceBinding) assertExactTaskResourceWebEvidence(entry);
+          return postRuntimeWebEvidence(config, requireConnectorId(config), command.commandId, {
             companyId: readString(command.payload?.companyId),
             issueId: commandIssueId(command),
             runId: commandRunId(command),
@@ -39878,9 +40139,10 @@ async function executeRunCommand(config, command) {
             capturedAt: entry.capturedAt,
             mediaType: entry.mediaType,
             normalizedText: entry.normalizedText,
-            truncated: entry.truncated
-          }
-        ))),
+            truncated: entry.truncated,
+            ...taskResourceBinding ? { taskResourceBinding } : {}
+          });
+        })),
         codebuddyAuthorizedMcpToolNames: executor.kind === "codebuddy" ? asRecord(managedMcpProfile?.attestation).authorizedMcpToolNames : void 0
       }
     );
@@ -40486,7 +40748,7 @@ async function executeRunCommand(config, command) {
   } finally {
     await preparationLogChain;
     if (piRuntimeSystemPromptCleanupPath) {
-      rmSync11(piRuntimeSystemPromptCleanupPath, { force: true });
+      rmSync12(piRuntimeSystemPromptCleanupPath, { force: true });
     }
     browserCredentialEnvMaterialization?.cleanup();
     if (managedMcpProfile && !managedMcpCleanup && !completionOwnsManagedMcpProfile) {
@@ -40671,7 +40933,7 @@ async function dispatchAvailableCommands(config, options = {}) {
   );
   for (const command of commands) {
     const commandId = readString(command.commandId) ?? readString(command.id);
-    if (commandId) {
+    if (commandId && !isRuntimeStopCommand(command)) {
       localDispatchCommands.set(commandId, {
         commandId,
         executionLane: normalizeRuntimeExecutionLane(command.executionLane),
@@ -40715,7 +40977,7 @@ async function waitForConversationCommand(config) {
   );
   for (const command of commands) {
     const commandId = readString(command.commandId) ?? readString(command.id);
-    if (commandId) {
+    if (commandId && !isRuntimeStopCommand(command)) {
       localDispatchCommands.set(commandId, {
         commandId,
         executionLane: "conversation",