@amaster.ai/employee-runtime-connector 0.1.8 → 0.1.10

package/dist/amaster-runtime-daemon.mjs

@@ -83,7 +83,7 @@ function withAuditCorrelationEnvironment(environment, command) {
 }
 
 // src/amaster-runtime-daemon.mjs
-import { createHash as createHash19, randomUUID as randomUUID2 } from "node:crypto";
+import { createHash as createHash20, randomUUID as randomUUID2 } from "node:crypto";
 import { createRequire } from "node:module";
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
@@ -4589,6 +4589,7 @@ var SECRET_BINDING_TARGET_TYPES = [
   "run",
   "tool_connection",
   "system",
+  "browser_login_identity",
   "browser_session"
 ];
 var STORAGE_PROVIDERS = ["local_disk", "s3"];
@@ -4652,6 +4653,11 @@ var HUMAN_COMPANY_MEMBERSHIP_ROLES = [
   "operator",
   "viewer"
 ];
+var HUMAN_TASK_VISIBILITY_SCOPES = [
+  "company",
+  "project_and_related",
+  "related_only"
+];
 var INVITE_JOIN_TYPES = ["human", "agent", "both"];
 var JOIN_REQUEST_TYPES = ["human", "agent"];
 var JOIN_REQUEST_STATUSES = ["pending_approval", "approved", "rejected"];
@@ -4939,7 +4945,8 @@ var AMASTER_RUNTIME_CONNECTOR_CAPABILITIES = [
   "execution_lanes_v1",
   "mirrorx_initialization_context_v1",
   "mirrorx_initialization_completion_v1",
-  "native_session_checkpoint_v1"
+  "native_session_checkpoint_v1",
+  "pi_web_public_search_v1"
 ];
 var RUNTIME_EXECUTION_LANES = ["business", "conversation"];
 var runtimeExecutionLaneSchema = external_exports.enum(RUNTIME_EXECUTION_LANES);
@@ -5459,12 +5466,18 @@ var EXTERNAL_WAIT_REASON_CODES = {
   heligeNewTurnNotObserved: "helige_new_turn_not_observed",
   heligeGenerationStatusUnavailable: "helige_generation_status_unavailable"
 };
-var BROWSER_HUMAN_SESSION_HANDOFF_REASON_CODES = [
+var LEGACY_BROWSER_HANDOFF_REASON_CODES = [
   EXTERNAL_WAIT_REASON_CODES.browserMfaRequired,
   EXTERNAL_WAIT_REASON_CODES.browserCaptchaRequired,
-  EXTERNAL_WAIT_REASON_CODES.browserSsoHandoffRequired,
+  EXTERNAL_WAIT_REASON_CODES.browserSsoHandoffRequired
+];
+var BROWSER_HUMAN_SESSION_HANDOFF_REASON_CODES = [
+  ...LEGACY_BROWSER_HANDOFF_REASON_CODES,
   EXTERNAL_WAIT_REASON_CODES.browserHumanSessionHandoffRequired
 ];
+var GENERIC_EXTERNAL_DEPENDENCY_WAIT_REASON_CODES = [
+  EXTERNAL_WAIT_REASON_CODES.externalDependencyPending
+];
 var GENERIC_EXTERNAL_INPUT_WAIT_REASON_CODES = [
   EXTERNAL_WAIT_REASON_CODES.customerInputPending,
   EXTERNAL_WAIT_REASON_CODES.externalInputPending
@@ -5472,9 +5485,6 @@ var GENERIC_EXTERNAL_INPUT_WAIT_REASON_CODES = [
 var GENERIC_EXTERNAL_APPROVAL_WAIT_REASON_CODES = [
   EXTERNAL_WAIT_REASON_CODES.externalApprovalPending
 ];
-var GENERIC_EXTERNAL_DEPENDENCY_WAIT_REASON_CODES = [
-  EXTERNAL_WAIT_REASON_CODES.externalDependencyPending
-];
 var HELIGE_GENERATION_MONITOR_REASON_CODES = [
   EXTERNAL_WAIT_REASON_CODES.heligeGenerationInProgress,
   EXTERNAL_WAIT_REASON_CODES.heligeNewTurnNotObserved,
@@ -5634,6 +5644,337 @@ var issueLivePathReleaseInputSchema = external_exports.object({
   terminalReceipt: external_exports.record(external_exports.unknown())
 }).strict();
 
+// ../shared/src/validators/secure-interaction.ts
+var SECURE_INTERACTION_CREDENTIAL_SHAPED_LABEL = /\b(?:password|passwd|passcode|pin|otp|cookie|token|secret|credential|authorization|bearer|api[-_ ]?key|private[-_ ]?key)\b\s*[:=]/iu;
+var secureInteractionAccountLabelSchema = external_exports.string().transform((value) => value.trim().normalize("NFKC")).pipe(external_exports.string().min(1).max(160)).superRefine((value, context) => {
+  if (/[\u0000-\u001f\u007f]/u.test(value)) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Secure interaction account label must contain only visible characters"
+    });
+  }
+  if (SECURE_INTERACTION_CREDENTIAL_SHAPED_LABEL.test(value)) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Secure interaction account label must not contain credential material",
+      params: { code: "browser_auth_account_label_credential_forbidden" }
+    });
+  }
+});
+var secureInteractionFormFieldTypeSchema = external_exports.enum([
+  "text",
+  "email",
+  "tel",
+  "textarea",
+  "secret",
+  "file"
+]);
+var browserCredentialOriginSchema = external_exports.string().superRefine((value, context) => {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Browser credential origin must be an exact credential-free HTTPS origin"
+    });
+    return;
+  }
+  if (url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash || value !== url.origin) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Browser credential origin must be an exact credential-free HTTPS origin"
+    });
+  }
+});
+var secureInteractionFormFieldSchema = external_exports.object({
+  id: external_exports.string().trim().min(1).max(120),
+  label: external_exports.string().trim().min(1).max(120),
+  type: secureInteractionFormFieldTypeSchema.optional(),
+  placeholder: external_exports.string().trim().max(240).nullable().optional(),
+  required: external_exports.boolean().optional(),
+  browserOrigin: browserCredentialOriginSchema.optional()
+}).superRefine((value, context) => {
+  if (value.browserOrigin && value.type !== "secret") {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Browser credential origin is allowed only on a secret field",
+      path: ["browserOrigin"]
+    });
+  }
+});
+var secureInteractionSecretRefSchema = external_exports.object({
+  secretId: external_exports.string().uuid(),
+  name: external_exports.string().trim().min(1).max(512),
+  key: external_exports.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9_.-]+$/).optional(),
+  version: external_exports.number().int().positive().optional()
+});
+var RESERVED_OTHER_OPTION_LABEL = /^(?:(?:其他|其它)(?:选项|方案|回答|情况|内容)?(?:请)?(?:说明|填写|输入|补充|补充说明)?|自定义(?:选项|方案|回答|内容)?(?:请)?(?:说明|填写|输入|补充|补充说明)?|以上都不是|other(?:option|answer|choice|pleasespecify|specify)?|custom(?:option|answer|choice)?|noneoftheabove|somethingelse)$/iu;
+function isReservedOtherOptionLabel(label) {
+  const normalized = label.toLowerCase().replace(/[\p{P}\p{S}\s]+/gu, "");
+  return RESERVED_OTHER_OPTION_LABEL.test(normalized);
+}
+
+// ../shared/src/mirrorx-connector-oauth.ts
+var connectorOAuthServiceIdSchema = external_exports.string().regex(/^[A-Za-z0-9_-]{1,128}$/);
+var connectorOAuthConnectionNameSchema = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/);
+var connectorOAuthAuthorizationIdSchema = external_exports.string().uuid();
+var connectorOAuthProfileSchema = external_exports.object({
+  accountId: external_exports.string().optional(),
+  displayName: external_exports.string().optional(),
+  accountLabel: external_exports.string().optional()
+});
+var connectorOAuthConnectionSchema = external_exports.object({
+  connectionName: connectorOAuthConnectionNameSchema,
+  profile: connectorOAuthProfileSchema.nullable()
+});
+var connectorOAuthAuthorizationResponseSchema = external_exports.object({
+  authorizationId: connectorOAuthAuthorizationIdSchema,
+  connectionName: connectorOAuthConnectionNameSchema,
+  authorizationUrl: external_exports.string().url()
+});
+var connectorOAuthFinalizeResponseSchema = external_exports.object({
+  status: external_exports.enum(["pending", "connected", "reauthorization_required"]),
+  profile: connectorOAuthProfileSchema.nullable()
+});
+
+// ../shared/src/form-spec.ts
+var FORM_SPEC_PROTOTYPE_KEYS = /* @__PURE__ */ new Set([...Object.getOwnPropertyNames(Object.prototype), "prototype"]);
+var formSpecFieldIdSchema = external_exports.string().trim().min(1).max(160).regex(/^[\p{L}\p{N}][\p{L}\p{N}._:/-]*$/u).refine((value) => !FORM_SPEC_PROTOTYPE_KEYS.has(value), {
+  message: "fieldId must not be an Object prototype member name"
+});
+var formSpecElementKeySchema = external_exports.string().min(1).max(120).refine((value) => !FORM_SPEC_PROTOTYPE_KEYS.has(value), {
+  message: "element key must not be an Object prototype member name"
+});
+var FORM_SPEC_OTHER_VALUE = "__other__";
+var formSpecOtherTextsSchema = external_exports.record(
+  formSpecFieldIdSchema,
+  external_exports.string().trim().min(1).max(2e3)
+);
+var formSpecOptionSchema = external_exports.object({
+  id: external_exports.string().trim().min(1).max(120),
+  label: external_exports.string().trim().min(1).max(240)
+}).strict();
+var fieldBaseProps = {
+  fieldId: formSpecFieldIdSchema,
+  label: external_exports.string().trim().min(1).max(240),
+  required: external_exports.boolean().optional(),
+  helpText: external_exports.string().trim().max(1e3).nullable().optional()
+};
+var placeholderProp = external_exports.string().trim().max(240).nullable().optional();
+var formSpecComponentPropsSchemas = {
+  Stack: external_exports.object({
+    gap: external_exports.enum(["sm", "md", "lg"]).optional()
+  }).strict(),
+  Card: external_exports.object({
+    title: external_exports.string().trim().max(240).nullable().optional()
+  }).strict(),
+  Heading: external_exports.object({
+    text: external_exports.string().trim().min(1).max(240)
+  }).strict(),
+  Text: external_exports.object({
+    text: external_exports.string().trim().min(1).max(2e3)
+  }).strict(),
+  TextField: external_exports.object({
+    ...fieldBaseProps,
+    placeholder: placeholderProp
+  }).strict(),
+  Textarea: external_exports.object({
+    ...fieldBaseProps,
+    placeholder: placeholderProp,
+    rows: external_exports.number().int().min(2).max(20).optional()
+  }).strict(),
+  Select: external_exports.object({
+    ...fieldBaseProps,
+    placeholder: placeholderProp,
+    options: external_exports.array(formSpecOptionSchema).min(1).max(10)
+  }).strict(),
+  MultiSelect: external_exports.object({
+    ...fieldBaseProps,
+    options: external_exports.array(formSpecOptionSchema).min(1).max(10),
+    maxSelections: external_exports.number().int().min(1).max(10).optional()
+  }).strict(),
+  DateField: external_exports.object({ ...fieldBaseProps }).strict(),
+  AttachmentField: external_exports.object({
+    ...fieldBaseProps,
+    maxFiles: external_exports.number().int().min(1).max(20).optional()
+  }).strict(),
+  SecretField: external_exports.object({
+    ...fieldBaseProps,
+    placeholder: placeholderProp,
+    credentialRole: external_exports.enum(["username", "password"]).optional(),
+    browserOrigin: browserCredentialOriginSchema.optional()
+  }).strict(),
+  OAuthAuthorizationField: external_exports.object({
+    ...fieldBaseProps,
+    service: connectorOAuthServiceIdSchema,
+    connectionName: connectorOAuthConnectionNameSchema.optional()
+  }).strict()
+};
+var credentialFieldEnglishNamePattern = /^(?:(?:please )?(?:enter|provide|submit|input) (?:your )?)?(?:(?:login|account|user|browser|api|access|refresh|private|client) )?(?:password|passwd|passphrase|passcode|one time code|otp|api key|access key|access token|refresh token|private key|client secret|secret|token|credentials?)(?: (?:value|text|code|received|provided|confirmed))?$/iu;
+var credentialFieldChineseNamePattern = /^(?:请(?:提供|输入|填写))?(?:登录|账户|账号|用户|浏览器|API)?(?:密码|口令|验证码|密钥|令牌|凭据|私钥)(?:值|内容|已提供|已提交)?$/iu;
+function isCredentialFieldName(name) {
+  const normalized = name.trim().normalize("NFKC").replace(/[._:/-]+/gu, " ").replace(/\s+/gu, " ");
+  return credentialFieldEnglishNamePattern.test(normalized) || credentialFieldChineseNamePattern.test(normalized);
+}
+var FORM_SPEC_COMPONENT_TYPES = Object.keys(formSpecComponentPropsSchemas);
+var FORM_SPEC_FIELD_COMPONENT_TYPES = [
+  "TextField",
+  "Textarea",
+  "Select",
+  "MultiSelect",
+  "DateField",
+  "AttachmentField",
+  "SecretField",
+  "OAuthAuthorizationField"
+];
+var FORM_SPEC_FIELD_COMPONENT_TYPE_SET = new Set(FORM_SPEC_FIELD_COMPONENT_TYPES);
+var FORM_SPEC_LAYOUT_CONTAINER_TYPES = /* @__PURE__ */ new Set(["Stack", "Card"]);
+var FORM_SPEC_MAX_ELEMENTS = 50;
+var FORM_SPEC_MAX_DEPTH = 8;
+var formSpecElementSchema = external_exports.object({
+  type: external_exports.enum(FORM_SPEC_COMPONENT_TYPES),
+  props: external_exports.record(external_exports.string(), external_exports.unknown()),
+  children: external_exports.array(formSpecElementKeySchema).max(FORM_SPEC_MAX_ELEMENTS).optional()
+}).strict();
+var formSpecSchema = external_exports.object({
+  root: formSpecElementKeySchema,
+  elements: external_exports.record(formSpecElementKeySchema, formSpecElementSchema)
+}).strict().superRefine((spec, ctx) => {
+  const elementEntries = Object.entries(spec.elements);
+  if (elementEntries.length === 0) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements"], message: "Form spec must declare at least one element" });
+    return;
+  }
+  if (elementEntries.length > FORM_SPEC_MAX_ELEMENTS) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements"], message: `Form spec supports at most ${FORM_SPEC_MAX_ELEMENTS} elements` });
+  }
+  const root = Object.hasOwn(spec.elements, spec.root) ? spec.elements[spec.root] : void 0;
+  if (!root) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["root"], message: "Form spec root element is not present in elements" });
+    return;
+  }
+  for (const [key, element] of elementEntries) {
+    const propsSchema = formSpecComponentPropsSchemas[element.type];
+    const parsed = propsSchema.safeParse(element.props);
+    if (!parsed.success) {
+      for (const issue of parsed.error.issues) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["elements", key, "props", ...issue.path],
+          message: `${element.type}: ${issue.message}`
+        });
+      }
+    } else if (element.type === "Select" || element.type === "MultiSelect") {
+      const options = parsed.data.options;
+      for (const [optionIndex, option] of options.entries()) {
+        if (isReservedOtherOptionLabel(option.label)) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["elements", key, "props", "options", optionIndex, "label"],
+            message: "Do not declare an Other/custom option; the UI always appends one with a free-text input"
+          });
+        }
+        if (option.id === FORM_SPEC_OTHER_VALUE) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["elements", key, "props", "options", optionIndex, "id"],
+            message: `Option id ${FORM_SPEC_OTHER_VALUE} is reserved for the UI-appended Other option`
+          });
+        }
+      }
+    }
+    if (element.children && element.children.length > 0 && !FORM_SPEC_LAYOUT_CONTAINER_TYPES.has(element.type)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["elements", key, "children"],
+        message: "Only Stack and Card elements may have children"
+      });
+    }
+    for (const childKey of element.children ?? []) {
+      if (!Object.hasOwn(spec.elements, childKey)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["elements", key, "children"],
+          message: `Form spec child element not found: ${childKey}`
+        });
+      }
+    }
+  }
+  const parentCount = /* @__PURE__ */ new Map();
+  for (const [, element] of elementEntries) {
+    for (const childKey of element.children ?? []) {
+      parentCount.set(childKey, (parentCount.get(childKey) ?? 0) + 1);
+    }
+  }
+  for (const [childKey, count2] of parentCount) {
+    if (count2 > 1) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["elements", childKey],
+        message: `Form spec element must have exactly one parent (shared subtrees are not allowed): ${childKey}`
+      });
+    }
+  }
+  const reachable = /* @__PURE__ */ new Set();
+  const walk = (key, depth, path) => {
+    if (path.has(key)) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements", key], message: `Form spec contains a cycle at element: ${key}` });
+      return;
+    }
+    if (reachable.has(key)) return;
+    if (depth > FORM_SPEC_MAX_DEPTH) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements", key], message: `Form spec exceeds the maximum nesting depth of ${FORM_SPEC_MAX_DEPTH}` });
+      return;
+    }
+    reachable.add(key);
+    path.add(key);
+    for (const childKey of spec.elements[key]?.children ?? []) walk(childKey, depth + 1, path);
+    path.delete(key);
+  };
+  walk(spec.root, 0, /* @__PURE__ */ new Set());
+  for (const key of Object.keys(spec.elements)) {
+    if (!reachable.has(key)) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements", key], message: "Form spec element is not reachable from root" });
+    }
+  }
+  const fieldIds = /* @__PURE__ */ new Set();
+  let requiredFieldCount = 0;
+  for (const [key, element] of elementEntries) {
+    if (!FORM_SPEC_FIELD_COMPONENT_TYPE_SET.has(element.type)) continue;
+    const parsed = formSpecComponentPropsSchemas[element.type].safeParse(element.props);
+    if (!parsed.success) continue;
+    const props = parsed.data;
+    if (element.type !== "SecretField" && element.type !== "OAuthAuthorizationField" && [props.fieldId, props.label].some(isCredentialFieldName)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["elements", key, "props", "fieldId"],
+        message: `${element.type} collects a credential-shaped name; use a SecretField instead: ${props.fieldId}`
+      });
+    }
+    if (fieldIds.has(props.fieldId)) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements", key, "props", "fieldId"], message: `Form spec fieldId must be unique: ${props.fieldId}` });
+    }
+    fieldIds.add(props.fieldId);
+    if (props.required === true) requiredFieldCount += 1;
+  }
+  if (fieldIds.size === 0) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements"], message: "Form spec must declare at least one input field" });
+  }
+  if (requiredFieldCount === 0) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["elements"], message: "Form spec must declare at least one required field" });
+  }
+});
+var formSpecSubmissionValueSchema = external_exports.union([
+  external_exports.string().max(2e4),
+  external_exports.array(external_exports.string().trim().min(1).max(120)).max(11),
+  external_exports.array(external_exports.string().uuid()).max(20)
+]);
+var formSpecSubmissionValuesSchema = external_exports.record(
+  formSpecFieldIdSchema,
+  formSpecSubmissionValueSchema
+);
+
 // ../shared/src/company-cold-start.ts
 var COMPANY_COLD_START_PHASES = [
   "not_started",
@@ -7324,17 +7665,23 @@ var operatingIdentityProposalSchema = external_exports.object({
   recurrenceWindow: operatingRecurrenceSchema.optional(),
   outcomeClass: external_exports.enum(["internal_enablement", "governed_decision", "external_action", "observed_business_result"])
 }).strict();
-var goalOutcomeRequestSchema = external_exports.discriminatedUnion("relation", [
+var goalOutcomeRequestBase = {
+  relation: external_exports.literal("direct_criterion"),
+  criterionId: external_exports.string().uuid(),
+  evaluationIntent: external_exports.enum(["full_criterion_claim", "partial_contribution", "effect_observation_trigger"]),
+  mappings: external_exports.array(external_exports.object({ requirementId: ref, taskAcceptanceRefs: external_exports.array(ref).min(1), coverage: external_exports.enum(["full", "partial"]) }).strict()).min(1).max(20),
+  operatingProposal: operatingIdentityProposalSchema
+};
+var goalOutcomeRequestSchema = external_exports.union([
   external_exports.object({ relation: external_exports.literal("goal_supporting"), operatingProposal: operatingIdentityProposalSchema.optional() }).strict(),
   external_exports.object({ relation: external_exports.literal("no_goal_effect"), operatingProposal: operatingIdentityProposalSchema.optional() }).strict(),
   external_exports.object({
-    relation: external_exports.literal("direct_criterion"),
-    criterionId: external_exports.string().uuid(),
-    goalRevision: external_exports.number().int().positive(),
-    evaluationIntent: external_exports.enum(["full_criterion_claim", "partial_contribution", "effect_observation_trigger"]),
-    mappings: external_exports.array(external_exports.object({ requirementId: ref, taskAcceptanceRefs: external_exports.array(ref).min(1), coverage: external_exports.enum(["full", "partial"]) }).strict()).min(1).max(20),
-    operatingProposal: operatingIdentityProposalSchema
-  }).strict()
+    ...goalOutcomeRequestBase,
+    gapContractRevision: external_exports.number().int().positive(),
+    criterionRevision: external_exports.number().int().positive()
+  }).strict(),
+  // Read-only compatibility for persisted v1 requests. Fresh direct admission must use both v2 revisions.
+  external_exports.object({ ...goalOutcomeRequestBase, goalRevision: external_exports.number().int().positive() }).strict()
 ]);
 var criterionEvidenceRequirementSchema = external_exports.object({
   requirementId: ref,
@@ -8217,7 +8564,7 @@ var ISSUE_EXECUTION_REVIEW_EVIDENCE_SCHEMA_VERSION = "mirrorx.execution-review-e
 var issueExecutionReviewEvidenceSchema = external_exports.object({
   schemaVersion: external_exports.literal(ISSUE_EXECUTION_REVIEW_EVIDENCE_SCHEMA_VERSION),
   manifest: issueDeliveryManifestIdentitySchema,
-  inspectedRefIds: external_exports.array(external_exports.string().trim().min(1).max(240)).min(1).max(101),
+  inspectedRefIds: external_exports.array(external_exports.string().trim().min(1).max(240)).max(101),
   acceptanceFindings: external_exports.array(external_exports.object({
     acceptanceRef: acceptanceRefSchema,
     outcome: external_exports.enum(["passed", "failed"]),
@@ -9220,6 +9567,8 @@ var taskResourceInputSchema = external_exports.discriminatedUnion("kind", [
     displayName: external_exports.string().trim().min(1).max(255),
     locator: external_exports.string().url().max(TASK_RESOURCE_LOCATOR_MAX_LENGTH),
     scope: external_exports.string().trim().min(1).max(2e3),
+    browserLoginIdentityId: external_exports.string().uuid().nullable().optional(),
+    browserLoginIdentityMode: external_exports.enum(["discover", "new", "reuse"]).optional(),
     preparationReceipt: external_exports.null().optional()
   }).strict(),
   taskResourceInputBaseSchema.extend({
@@ -9233,7 +9582,17 @@ var taskResourceInputSchema = external_exports.discriminatedUnion("kind", [
     preparationReceipt: attachmentPreparationReceiptSchema.nullable().optional()
   }).strict()
 ]).superRefine((value, context) => {
-  if (value.kind !== "attachment") return;
+  if (value.kind === "link") {
+    const mode = value.browserLoginIdentityMode ?? "discover";
+    if (mode === "reuse" !== Boolean(value.browserLoginIdentityId)) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["browserLoginIdentityId"],
+        message: "A reused browser login identity must be explicitly bound"
+      });
+    }
+    return;
+  }
   const originalOnly = value.parserVersion === ORIGINAL_ONLY_PARSER_VERSION;
   if (value.state === "prepared" && !value.preparationReceipt && !originalOnly) {
     context.addIssue({
@@ -9317,7 +9676,24 @@ var createTaskResourceLinkRequestSchema = external_exports.object({
   displayName: external_exports.string().trim().min(1).max(500),
   locator: taskResourceLocatorSchema,
   scope: external_exports.string().trim().min(1).max(2e3),
-  criticality: external_exports.enum(["critical", "supporting"]).default("supporting")
+  criticality: external_exports.enum(["critical", "supporting"]).default("supporting"),
+  browserLoginIdentityId: external_exports.string().uuid().optional(),
+  createNewBrowserLoginIdentity: external_exports.boolean().optional()
+}).strict().superRefine((value, context) => {
+  if (value.browserLoginIdentityId && value.createNewBrowserLoginIdentity) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["browserLoginIdentityId"],
+      message: "Choose an existing browser login identity or create a new one, not both"
+    });
+  }
+});
+var browserLoginIdentitySummarySchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  provider: external_exports.literal("chromium"),
+  authenticationOrigin: exactOriginSchema,
+  targetOrigin: exactOriginSchema,
+  policyRevision: external_exports.number().int().positive()
 }).strict();
 var finalizeTaskResourceAttachmentRequestSchema = external_exports.object({ inputId: external_exports.string().uuid() }).strict();
 var createTaskResourceAttachmentRequestSchema = external_exports.object({ attachmentId: external_exports.string().uuid() }).strict();
@@ -9941,54 +10317,6 @@ var browserSessionOriginSchema = external_exports.string().trim().min(1).max(204
   }
 );
 
-// ../shared/src/validators/secure-interaction.ts
-var SECURE_INTERACTION_CREDENTIAL_SHAPED_LABEL = /\b(?:password|passwd|passcode|pin|otp|cookie|token|secret|credential|authorization|bearer|api[-_ ]?key|private[-_ ]?key)\b\s*[:=]/iu;
-var secureInteractionAccountLabelSchema = external_exports.string().transform((value) => value.trim().normalize("NFKC")).pipe(external_exports.string().min(1).max(160)).superRefine((value, context) => {
-  if (/[\u0000-\u001f\u007f]/u.test(value)) {
-    context.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      message: "Secure interaction account label must contain only visible characters"
-    });
-  }
-  if (SECURE_INTERACTION_CREDENTIAL_SHAPED_LABEL.test(value)) {
-    context.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      message: "Secure interaction account label must not contain credential material",
-      params: { code: "browser_auth_account_label_credential_forbidden" }
-    });
-  }
-});
-var secureInteractionFormFieldTypeSchema = external_exports.enum([
-  "text",
-  "email",
-  "tel",
-  "textarea",
-  "secret",
-  "file"
-]);
-var secureInteractionFormFieldSchema = external_exports.object({
-  id: external_exports.string().trim().min(1).max(120),
-  label: external_exports.string().trim().min(1).max(120),
-  type: secureInteractionFormFieldTypeSchema.optional(),
-  placeholder: external_exports.string().trim().max(240).nullable().optional(),
-  required: external_exports.boolean().optional(),
-  browserOrigin: external_exports.string().url().superRefine((value, context) => {
-    const url = new URL(value);
-    if (url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash || value !== url.origin) {
-      context.addIssue({
-        code: external_exports.ZodIssueCode.custom,
-        message: "Browser credential origin must be an exact credential-free HTTPS origin"
-      });
-    }
-  }).optional()
-});
-var secureInteractionSecretRefSchema = external_exports.object({
-  secretId: external_exports.string().uuid(),
-  name: external_exports.string().trim().min(1).max(512),
-  key: external_exports.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9_.-]+$/).optional(),
-  version: external_exports.number().int().positive().optional()
-});
-
 // ../shared/src/types/attachment-preparation.ts
 var ATTACHMENT_PREPARATION_MAX_REDACTION_AUDITS = 2e4;
 var ATTACHMENT_PREPARATION_BLOCK_KINDS = [
@@ -10624,29 +10952,6 @@ var issueDelegationContextSchema = external_exports.object({
   createdAt: external_exports.string().datetime()
 }).strict();
 
-// ../shared/src/mirrorx-connector-oauth.ts
-var connectorOAuthServiceIdSchema = external_exports.string().regex(/^[A-Za-z0-9_-]{1,128}$/);
-var connectorOAuthConnectionNameSchema = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/);
-var connectorOAuthAuthorizationIdSchema = external_exports.string().uuid();
-var connectorOAuthProfileSchema = external_exports.object({
-  accountId: external_exports.string().optional(),
-  displayName: external_exports.string().optional(),
-  accountLabel: external_exports.string().optional()
-});
-var connectorOAuthConnectionSchema = external_exports.object({
-  connectionName: connectorOAuthConnectionNameSchema,
-  profile: connectorOAuthProfileSchema.nullable()
-});
-var connectorOAuthAuthorizationResponseSchema = external_exports.object({
-  authorizationId: connectorOAuthAuthorizationIdSchema,
-  connectionName: connectorOAuthConnectionNameSchema,
-  authorizationUrl: external_exports.string().url()
-});
-var connectorOAuthFinalizeResponseSchema = external_exports.object({
-  status: external_exports.enum(["pending", "connected", "reauthorization_required"]),
-  profile: connectorOAuthProfileSchema.nullable()
-});
-
 // ../shared/src/validators/issue.ts
 var requiredReasonString = external_exports.string().trim().min(1);
 var ISSUE_PROGRESS_REASON_PARAM_SCHEMAS = {
@@ -11447,7 +11752,7 @@ var reconcileWikiIssueDocumentPublicationSchema = external_exports.discriminated
 ]);
 var upsertIssueExternalWaitSchema = external_exports.object({
   ownerType: external_exports.enum(["external", "user"]),
-  actionKind: external_exports.enum(["approval", "input", "dependency", "other"]),
+  actionKind: external_exports.enum(["dependency", "other"]),
   reasonCode: external_exports.string().trim().min(1).max(120),
   reviewAt: external_exports.string().datetime().nullable().optional(),
   dataSourceRead: businessDataSourceReadSchema.optional()
@@ -11702,11 +12007,6 @@ var suggestTasksResultSchema = external_exports.object({
   rejectionReason: external_exports.string().trim().max(4e3).nullable().optional()
 });
 var askUserQuestionsFormFieldSchema = secureInteractionFormFieldSchema;
-var RESERVED_OTHER_OPTION_LABEL = /^(?:(?:其他|其它)(?:选项|方案|回答|情况|内容)?(?:请)?(?:说明|填写|输入|补充|补充说明)?|自定义(?:选项|方案|回答|内容)?(?:请)?(?:说明|填写|输入|补充|补充说明)?|以上都不是|other(?:option|answer|choice|pleasespecify|specify)?|custom(?:option|answer|choice)?|noneoftheabove|somethingelse)$/iu;
-function isReservedOtherOptionLabel(label) {
-  const normalized = label.toLowerCase().replace(/[\p{P}\p{S}\s]+/gu, "");
-  return RESERVED_OTHER_OPTION_LABEL.test(normalized);
-}
 var askUserQuestionsQuestionOptionSchema = external_exports.object({
   id: external_exports.string().trim().min(1).max(120),
   label: external_exports.string().trim().min(1).max(120).describe(
@@ -12222,7 +12522,7 @@ var requestInputItemSchema = external_exports.object({
     });
   }
 });
-var requestInputsPayloadSchema = external_exports.object({
+var requestInputsPayloadV1Schema = external_exports.object({
   version: external_exports.literal(1),
   items: external_exports.array(requestInputItemSchema).min(1).max(50)
 }).strict().superRefine((value, ctx) => {
@@ -12245,6 +12545,16 @@ var requestInputsPayloadSchema = external_exports.object({
     });
   }
 });
+var requestInputsPayloadV2Schema = external_exports.object({
+  version: external_exports.literal(2),
+  spec: formSpecSchema,
+  submitLabel: external_exports.string().trim().max(120).nullable().optional(),
+  dueAt: external_exports.string().datetime({ offset: true }).nullable().optional()
+}).strict();
+var requestInputsPayloadSchema = external_exports.union([
+  requestInputsPayloadV1Schema,
+  requestInputsPayloadV2Schema
+]);
 var requestInputItemResultSchema = external_exports.object({
   id: requestInputStableCodeSchema,
   status: external_exports.enum(["open", "satisfied", "waived_by_authorized_actor", "cancelled"]),
@@ -12253,10 +12563,22 @@ var requestInputItemResultSchema = external_exports.object({
   oauthConnectionName: connectorOAuthConnectionNameSchema.nullable().optional(),
   waiverReason: external_exports.string().trim().min(1).max(4e3).nullable().optional()
 }).strict();
-var requestInputsResultSchema = external_exports.object({
+var requestInputsResultV1Schema = external_exports.object({
   version: external_exports.literal(1),
   items: external_exports.array(requestInputItemResultSchema).max(50)
 }).strict();
+var requestInputsResultV2Schema = external_exports.object({
+  version: external_exports.literal(2),
+  values: formSpecSubmissionValuesSchema,
+  otherTexts: formSpecOtherTextsSchema.optional(),
+  secretRefs: external_exports.record(formSpecFieldIdSchema, secureInteractionSecretRefSchema).optional(),
+  cancelled: external_exports.literal(true).optional(),
+  cancellationReason: external_exports.string().trim().min(1).max(4e3).optional()
+}).strict();
+var requestInputsResultSchema = external_exports.discriminatedUnion("version", [
+  requestInputsResultV1Schema,
+  requestInputsResultV2Schema
+]);
 var staffingEscalationTargetSchema = external_exports.discriminatedUnion("kind", [
   external_exports.object({
     kind: external_exports.literal("agent"),
@@ -12317,7 +12639,7 @@ var submitRequestInputItemSchema = external_exports.object({
     });
   }
 });
-var submitRequestInputItemsSchema = external_exports.object({
+var submitRequestInputItemsLegacySchema = external_exports.object({
   items: external_exports.array(submitRequestInputItemSchema).min(1, "At least one request input item submission is required").max(50)
 }).strict().superRefine((value, ctx) => {
   const itemIds = /* @__PURE__ */ new Set();
@@ -12332,6 +12654,21 @@ var submitRequestInputItemsSchema = external_exports.object({
     itemIds.add(item.id);
   }
 });
+var submitRequestInputFormValuesSchema = external_exports.object({
+  version: external_exports.literal(2),
+  values: formSpecSubmissionValuesSchema,
+  otherTexts: formSpecOtherTextsSchema.optional(),
+  secretValues: external_exports.record(formSpecFieldIdSchema, external_exports.string().max(4e3)).optional(),
+  oauthEvidence: external_exports.record(formSpecFieldIdSchema, external_exports.object({
+    connectionName: connectorOAuthConnectionNameSchema,
+    authorizationId: connectorOAuthAuthorizationIdSchema,
+    replaceConnectionName: connectorOAuthConnectionNameSchema.optional()
+  }).strict()).optional()
+}).strict();
+var submitRequestInputItemsSchema = external_exports.union([
+  submitRequestInputItemsLegacySchema,
+  submitRequestInputFormValuesSchema
+]);
 var requestInputAttentionMetadataItemUpdateSchema = external_exports.object({
   id: requestInputStableCodeSchema,
   owner: requestInputOwnerSchema.optional(),
@@ -12809,6 +13146,16 @@ var admitSuccessorExecutionEpochSchema = external_exports.object({
   idempotencyKey: external_exports.string().trim().min(1).max(200)
 }).strict();
 
+// ../shared/src/goal-task-reauthorization.ts
+var reauthorizeGoalTaskSchema = external_exports.object({
+  expectedExecutionEpoch: external_exports.number().int().positive(),
+  expectedDeliveryEpoch: external_exports.number().int().positive(),
+  expectedEnrollmentId: external_exports.string().uuid(),
+  expectedGoalGrantHash: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/),
+  reason: external_exports.string().trim().min(1).max(2e3),
+  idempotencyKey: external_exports.string().trim().min(1).max(200)
+}).strict();
+
 // ../shared/src/issue-delivery-acceptance.ts
 var uuidSchema3 = external_exports.string().uuid();
 var dateSchema2 = external_exports.union([external_exports.string().datetime({ offset: true }), external_exports.date()]);
@@ -13349,6 +13696,20 @@ var ceoPeriodicReachableAcceptanceIdentitySchema = external_exports.object({
   ...ceoPeriodicAcceptanceIdentityShape,
   deliveryIntent: ceoPeriodicAgentOutputDeliveryIntentSchema
 }).strict().superRefine(validateCeoPeriodicAcceptanceIdentity);
+var ceoExecutionAffordanceKeySchema = external_exports.string().trim().regex(/^[a-z0-9][a-z0-9._:-]{0,159}$/u);
+var ceoExecutionAffordanceSchema = external_exports.object({
+  key: ceoExecutionAffordanceKeySchema,
+  label: external_exports.string().trim().min(1).max(160),
+  status: external_exports.enum(["available", "confirmation_required", "unavailable"]),
+  effectKinds: external_exports.array(external_exports.enum(["read", "download", "upload", "external_write", "readback"])).min(1).max(5),
+  source: external_exports.object({
+    kind: external_exports.enum(["pi_runtime", "browser_session", "helige", "governed_mcp"]),
+    ref: external_exports.string().trim().min(1).max(240),
+    revision: external_exports.string().trim().min(1).max(240)
+  }).strict(),
+  confirmationPolicy: external_exports.enum(["none", "company_policy"]),
+  evidenceKinds: external_exports.array(external_exports.enum(["web_evidence", "browser_receipt", "provider_receipt", "provider_readback"])).max(4)
+}).strict();
 var ceoPeriodicRoutingRosterEntrySchema = external_exports.object({
   agentId: external_exports.string().uuid(),
   roleSlot: external_exports.object({
@@ -13360,6 +13721,9 @@ var ceoPeriodicRoutingRosterEntrySchema = external_exports.object({
   runtimeReady: external_exports.boolean(),
   capabilitiesDeclared: external_exports.boolean(),
   capabilities: external_exports.array(external_exports.string().trim().min(1).max(160)).max(40),
+  // Optional for persisted pre-affordance observation contexts. New snapshots
+  // always write this independently from employee-declared professional skills.
+  executionAffordanceKeys: external_exports.array(ceoExecutionAffordanceKeySchema).max(40).optional(),
   liveExecutionCount: external_exports.number().int().nonnegative(),
   queuedWorkCount: external_exports.number().int().nonnegative(),
   maxQueuedWorkCount: external_exports.number().int().nonnegative().max(CEO_PERIODIC_MAX_CANDIDATES_PER_OBSERVATION),
@@ -14471,6 +14835,7 @@ var mirrorXIssueCurrentProgressSchema = external_exports.discriminatedUnion("cod
   progressBranch("waiting_external_input", "needs_action", "external_input_required"),
   progressBranch("waiting_external_owner", "waiting", "external_owner"),
   progressBranch("waiting_source_acquisition_runtime", "waiting", "source_acquisition_runtime_unavailable"),
+  progressBranch("result_disposition_required", "needs_action", "missing_successful_run_disposition"),
   progressBranch("recovery_needs_action", "needs_action", "active_recovery_action"),
   progressBranch("recovery_active", "active", "recovery_run_active"),
   progressBranch("execution_active", "active", "execution_active"),
@@ -14677,6 +15042,7 @@ var mirrorXIssueHandlingListCardSchema = external_exports.object({
   projectId: external_exports.string().uuid().nullable(),
   projectWorkspaceId: external_exports.string().uuid().nullable(),
   parentId: external_exports.string().uuid().nullable(),
+  parentVisibilityRestricted: external_exports.boolean().optional(),
   title: external_exports.string(),
   description: external_exports.string().nullable(),
   status: external_exports.enum(ISSUE_STATUSES),
@@ -14689,6 +15055,7 @@ var mirrorXIssueHandlingListCardSchema = external_exports.object({
   identifier: external_exports.string().nullable(),
   originKind: external_exports.string().optional(),
   originId: external_exports.string().nullable().optional(),
+  discoverySource: governedBusinessTaskDiscoverySourceSchema.nullable().optional(),
   executionWorkspaceId: external_exports.string().uuid().nullable(),
   routineStatus: external_exports.object({
     code: external_exports.enum([
@@ -17368,16 +17735,43 @@ var updateMemberPermissionsSchema = external_exports.object({
 var editableMembershipStatuses = ["pending", "active", "suspended"];
 var updateCompanyMemberSchema = external_exports.object({
   membershipRole: external_exports.enum(HUMAN_COMPANY_MEMBERSHIP_ROLES).optional().nullable(),
-  status: external_exports.enum(editableMembershipStatuses).optional()
-}).refine((value) => value.membershipRole !== void 0 || value.status !== void 0, {
-  message: "membershipRole or status is required"
+  status: external_exports.enum(editableMembershipStatuses).optional(),
+  taskVisibilityScope: external_exports.enum(HUMAN_TASK_VISIBILITY_SCOPES).optional().nullable()
+}).refine((value) => value.membershipRole !== void 0 || value.status !== void 0 || value.taskVisibilityScope !== void 0, {
+  message: "membershipRole, status, or taskVisibilityScope is required"
 });
 var updateCompanyMemberWithPermissionsSchema = external_exports.object({
   membershipRole: external_exports.enum(HUMAN_COMPANY_MEMBERSHIP_ROLES).optional().nullable(),
   status: external_exports.enum(editableMembershipStatuses).optional(),
+  taskVisibilityScope: external_exports.enum(HUMAN_TASK_VISIBILITY_SCOPES).optional().nullable(),
   grants: updateMemberPermissionsSchema.shape.grants.default([])
-}).refine((value) => value.membershipRole !== void 0 || value.status !== void 0, {
-  message: "membershipRole or status is required"
+}).refine((value) => value.membershipRole !== void 0 || value.status !== void 0 || value.taskVisibilityScope !== void 0, {
+  message: "membershipRole, status, or taskVisibilityScope is required"
+});
+var createProjectAccessGrantSchema = external_exports.object({
+  userId: external_exports.string().trim().min(1).max(320)
+});
+var createIssueAccessGrantSchema = external_exports.object({
+  userId: external_exports.string().trim().min(1).max(320),
+  includeDescendants: external_exports.boolean().optional().default(false)
+});
+var reconcileIssueAccessGrantsSchema = external_exports.object({
+  issueIds: external_exports.array(external_exports.string().uuid()).max(2e3).optional()
+});
+var applyTaskVisibilityMigrationSchema = external_exports.object({
+  previewRevision: external_exports.string().trim().length(64),
+  members: external_exports.array(external_exports.object({
+    memberId: external_exports.string().uuid(),
+    taskVisibilityScope: external_exports.enum(HUMAN_TASK_VISIBILITY_SCOPES),
+    currentReadableIssueCount: external_exports.number().int().nonnegative(),
+    suggestedReadableIssueCount: external_exports.number().int().nonnegative(),
+    blockers: external_exports.array(external_exports.enum([
+      "active_assignment_without_access",
+      "stage_participant_without_access",
+      "pending_interaction_without_access"
+    ])).max(3)
+  })).max(1e4),
+  finalize: external_exports.boolean().optional().default(false)
 });
 var archiveCompanyMemberSchema = external_exports.object({
   reassignment: external_exports.object({
@@ -18735,10 +19129,57 @@ var wikiMentionListSchema = external_exports.object({
   nextCursor: external_exports.string().nullable()
 });
 
+// ../shared/src/mirrorx-drive.ts
+var driveResourceRefSchema = external_exports.object({
+  kind: external_exports.literal("file"),
+  companyId: external_exports.string().uuid(),
+  fileId: external_exports.string().uuid(),
+  revisionId: external_exports.string().uuid()
+});
+var driveSaveSchema = external_exports.object({
+  name: external_exports.string().min(1).max(240),
+  parentId: external_exports.string().uuid().optional(),
+  fileId: external_exports.string().uuid().optional(),
+  expectedRevisionId: external_exports.string().uuid().optional(),
+  visibility: external_exports.enum(["company_shared"]).default("company_shared")
+}).strict();
+var driveMutationSchema = external_exports.discriminatedUnion("operation", [
+  external_exports.object({
+    operation: external_exports.literal("rename"),
+    metadataVersion: external_exports.number().int().positive(),
+    name: external_exports.string().min(1).max(240)
+  }),
+  external_exports.object({
+    operation: external_exports.literal("move"),
+    metadataVersion: external_exports.number().int().positive(),
+    parentId: external_exports.string().uuid()
+  }),
+  external_exports.object({
+    operation: external_exports.literal("trash"),
+    metadataVersion: external_exports.number().int().positive()
+  }),
+  external_exports.object({
+    operation: external_exports.literal("restore"),
+    metadataVersion: external_exports.number().int().positive()
+  }),
+  external_exports.object({
+    operation: external_exports.literal("restore_version"),
+    expectedRevisionId: external_exports.string().uuid(),
+    revisionId: external_exports.string().uuid()
+  })
+]);
+var MIRRORX_DRIVE_AGENT_RULES = [
+  "\u641C\u7D22\u3001\u8BFB\u53D6\u5F53\u524D\u516C\u53F8\u6709\u6743\u8BBF\u95EE\u7684\u8D44\u6599\uFF0C\u4F7F\u7528\u5DE5\u5177\u8FD4\u56DE\u7684\u5F15\u7528\u3002",
+  "\u6587\u4EF6\u4FDD\u5B58\u5230\u672C\u4EFB\u52A1\u5DE5\u4F5C\u6587\u4EF6\uFF0C\u7EE7\u7EED\u4FEE\u6539\u540C\u4E00\u6587\u4EF6\uFF0C\u4E0D\u9020\u7248\u672C\u540E\u7F00\u3002",
+  "\u66F4\u65B0\u5171\u4EAB\u8D44\u6599\u63D0\u4EA4\u5019\u9009\uFF0C\u7B49\u4EBA\u91C7\u7EB3\uFF0C\u4E0D\u76F4\u63A5\u6539\u539F\u4EF6\u6216\u6574\u7406\u76EE\u5F55\u3002",
+  "\u6210\u679C\u8D70\u4EFB\u52A1\u4EA4\u4ED8\u5DE5\u5177\uFF0C\u77E5\u8BC6\u66F4\u65B0\u8D70\u4E13\u7528\u77E5\u8BC6\u7EF4\u62A4\u8BF7\u6C42\u3002",
+  "\u51B2\u7A81\u6309\u63D0\u793A\u8BFB\u53D6\u6700\u65B0\u7248\u5E76\u91CD\u65B0\u6574\u7406\uFF1B\u65E0\u6743\u9650\u505C\u6B62\uFF1B\u5F52\u6863\u6210\u529F\u56DE\u6267\u624D\u4EE3\u8868\u5DF2\u4FDD\u5B58\u3002"
+].join("\n");
+
 // src/amaster-runtime-daemon.mjs
-import { chmodSync as chmodSync8, copyFileSync as copyFileSync2, existsSync as existsSync18, lstatSync as lstatSync13, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync5, readFileSync as readFileSync19, readdirSync as readdirSync12, realpathSync as realpathSync12, renameSync as renameSync11, rmSync as rmSync12, statSync as statSync12, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "node:fs";
-import { arch as arch4, homedir as homedir6, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
-import { basename as basename8, delimiter as delimiter3, dirname as dirname12, extname as extname3, isAbsolute as isAbsolute12, join as join24, relative as relative9, resolve as resolve19 } from "node:path";
+import { chmodSync as chmodSync8, copyFileSync as copyFileSync2, existsSync as existsSync18, lstatSync as lstatSync15, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync5, readFileSync as readFileSync20, readdirSync as readdirSync13, realpathSync as realpathSync12, renameSync as renameSync11, rmSync as rmSync12, statSync as statSync12, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "node:fs";
+import { arch as arch4, homedir as homedir7, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
+import { basename as basename8, delimiter as delimiter3, dirname as dirname12, extname as extname3, isAbsolute as isAbsolute12, join as join25, relative as relative9, resolve as resolve19 } from "node:path";
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
 
 // src/amaster-runtime-daemon/common.mjs
@@ -22954,8 +23395,8 @@ async function runInitializationCompletion({ plan, authority, call, sleep, now,
       fail3("initialization_completion_invalid_plan");
     }
     const prefix = "initialization-complete:" + plan.planId;
-    const { createHash: createHash20 } = await import("node:crypto");
-    const uploadKey = prefix + ":upload:" + createHash20("sha256").update(materialized.path).digest("hex");
+    const { createHash: createHash21 } = await import("node:crypto");
+    const uploadKey = prefix + ":upload:" + createHash21("sha256").update(materialized.path).digest("hex");
     const upload = await settleCall(await invoke("runtime_action_submit", {
       idempotencyKey: uploadKey,
       action: {
@@ -23903,6 +24344,27 @@ function applyManagedPiRunExitClosureArgs(args, profile) {
   }
   return closureArgs;
 }
+function resolveManagedPiMcpAdapterExtension(adapterRoot) {
+  const adapterRootStat = lstatSync7(adapterRoot);
+  if (!adapterRootStat.isDirectory() || adapterRootStat.isSymbolicLink()) {
+    throw new Error("pi_managed_mcp_adapter_extension_unsafe");
+  }
+  const adapterManifest = JSON.parse(readFileSync6(join10(adapterRoot, "package.json"), "utf8"));
+  const entries = adapterManifest.pi?.extensions;
+  const entry = entries === void 0 ? "index.ts" : Array.isArray(entries) && entries.length === 1 ? entries[0] : null;
+  if (!["index.ts", "./index.ts", "index.js", "./index.js"].includes(entry)) {
+    throw new Error("pi_managed_mcp_adapter_extension_unsafe");
+  }
+  const adapterExtensionPath = join10(adapterRoot, entry);
+  if (!existsSync7(adapterExtensionPath)) {
+    throw new Error("pi_managed_mcp_adapter_extension_missing");
+  }
+  const adapterExtensionStat = lstatSync7(adapterExtensionPath);
+  if (!adapterExtensionStat.isFile() || adapterExtensionStat.isSymbolicLink()) {
+    throw new Error("pi_managed_mcp_adapter_extension_unsafe");
+  }
+  return adapterExtensionPath;
+}
 function createManagedPiMcpProfileApi(options = {}) {
   const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync3;
   const chownSyncImpl = typeof options.chownSync === "function" ? options.chownSync : chownSync2;
@@ -24946,24 +25408,9 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         return extensionPath;
       };
       if (directCatalog) {
-        const adapterExtensionPath = join10(
-          sharedRuntime.home,
-          "npm",
-          "node_modules",
-          "pi-mcp-adapter",
-          "index.ts"
+        const adapterExtensionPath = resolveManagedPiMcpAdapterExtension(
+          join10(sharedRuntime.home, "npm", "node_modules", "pi-mcp-adapter")
         );
-        if (!existsSync7(adapterExtensionPath)) {
-          throw new Error("pi_managed_mcp_adapter_extension_missing");
-        }
-        const adapterRootStat = lstatSync7(dirname5(adapterExtensionPath));
-        if (!adapterRootStat.isDirectory() || adapterRootStat.isSymbolicLink()) {
-          throw new Error("pi_managed_mcp_adapter_extension_unsafe");
-        }
-        const adapterExtensionStat = lstatSync7(adapterExtensionPath);
-        if (!adapterExtensionStat.isFile() || adapterExtensionStat.isSymbolicLink()) {
-          throw new Error("pi_managed_mcp_adapter_extension_unsafe");
-        }
         extensionArgs.push("--extension", adapterExtensionPath);
         writeProfileExtension(
           MANAGED_PI_RUN_TERMINATION_FILENAME,
@@ -32287,9 +32734,14 @@ var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "execution_lanes_v1",
   "mirrorx_initialization_context_v1",
   "mirrorx_initialization_completion_v1",
-  "native_session_checkpoint_v1"
+  "native_session_checkpoint_v1",
+  "pi_web_public_search_v1"
 ]);
 var DYNAMIC_READINESS = Object.freeze({
+  pi_web_public_search_v1: {
+    reasonCode: "pi_web_search_extension_unavailable",
+    ready: (input) => input.executors.some((executor) => executor.kind === "pi") && input.piWebSearchReady === true
+  },
   browser_credential_env_read_v1: {
     reasonCode: "browser_credential_env_runtime_incomplete",
     ready: (input) => input.executors.some((executor) => executor.kind === "pi") && input.browserCredentialEnv?.extension === true && input.runnerKind === "cloud_managed" && Number.isSafeInteger(input.piExecutorUid) && Number.isSafeInteger(input.piExecutorGid) && input.piExecutorUid > 0 && input.piExecutorGid > 0 && Number.isSafeInteger(input.connectorUid) && input.piExecutorUid !== input.connectorUid
@@ -32883,10 +33335,13 @@ function createBrowserCredentialChannel({ consume }) {
           return;
         }
         requestBuffer = Buffer.from(parsed.remainder);
-        for (const frame of parsed.frames) sequence = sequence.then(() => handleFrame(frame));
+        for (const frame of parsed.frames) {
+          sequence = sequence.then(() => handleFrame(frame)).catch(() => respondError("browser_credential_request_invalid"));
+        }
       });
     },
-    receipts() {
+    async receipts() {
+      await sequence;
       return authReceipts.map((receipt) => ({ ...receipt, credentialRoles: [...receipt.credentialRoles] }));
     },
     close() {
@@ -32899,7 +33354,8 @@ function createBrowserCredentialChannel({ consume }) {
 }
 
 // src/amaster-runtime-daemon/browser-credential-readiness.mjs
-import { existsSync as existsSync12, readFileSync as readFileSync12, statSync as statSync6 } from "node:fs";
+import { existsSync as existsSync12, lstatSync as lstatSync9, readFileSync as readFileSync12, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
+import { createHash as createHash14 } from "node:crypto";
 import { homedir as homedir4 } from "node:os";
 import { isAbsolute as isAbsolute7, join as join16, relative as relative5, resolve as resolve10 } from "node:path";
 var CAPABILITY = "browser_credential_auth_transaction_v1";
@@ -32907,12 +33363,16 @@ var CREDENTIAL_BROWSER_TCB = Object.freeze({
   package: "chrome-devtools-mcp",
   version: "1.6.0",
   mode: "puppeteer_pipe",
-  buildFileCount: 348,
-  buildTreeSha256: "b7f34fe406693fb9abac325a2c32cbb94c2096aafbed1cac2fee63a47eb1aff0"
+  buildTreeSha256: "5bd07cd7ea92141441db12d1e84c4829dd4e2a45ea77f719878be9f4a42925d7"
+});
+var CREDENTIAL_BROWSER_PACKAGE_FILES = Object.freeze({
+  "dist/config.js": "ed61ba70f3c2445db22fac31c432c86df2d9b3674bd36b34cce6f7a981f3926f",
+  "dist/index.js": "7530da9aaa0ee272fa6e10ff80059f42a45aee6fff8d8c7cbce05c2cb24e180c"
 });
+var CREDENTIAL_AUTH_EXTENSION_SHA256 = "14088f0a7761a2a0884477ac2f300dcf615e4ba78b7753e4aec8078b344ab9b9";
 var READINESS_CACHE_TTL_MS = 5e3;
 var readinessCache = /* @__PURE__ */ new Map();
-function inspectBrowserCredentialAuthReadiness(env = process.env) {
+function inspectBrowserCredentialAuthReadiness(env = process.env, expected = {}) {
   const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join16(homedir4(), ".pi", "agent")).trim();
   const now = Date.now();
   const cached = readinessCache.get(home);
@@ -32921,41 +33381,92 @@ function inspectBrowserCredentialAuthReadiness(env = process.env) {
     join16(home, "npm", "node_modules", "@amaster.ai", "pi-browser-use", "package.json"),
     join16(home, "node_modules", "@amaster.ai", "pi-browser-use", "package.json")
   ];
-  const packageAttested = candidates.some(attestedPackageManifest);
+  const packageAttestation = candidates.map((manifestPath) => attestedPackageManifest(manifestPath, {
+    browserTcb: expected.browserTcb ?? CREDENTIAL_BROWSER_TCB,
+    packageFiles: expected.packageFiles ?? CREDENTIAL_BROWSER_PACKAGE_FILES,
+    authExtensionSha256: expected.authExtensionSha256 ?? CREDENTIAL_AUTH_EXTENSION_SHA256
+  })).find(Boolean) ?? null;
+  const packageAttested = Boolean(packageAttestation);
+  const authExtensionAttested = attestedAuthExtension(
+    join16(home, "extensions", "browser-credential-auth.mjs"),
+    packageAttestation ? expected.authExtensionSha256 ?? CREDENTIAL_AUTH_EXTENSION_SHA256 : null
+  );
   const readiness = {
     privateChannel: true,
     executorClient: packageAttested,
-    sealedGate: packageAttested,
-    atomicTransaction: packageAttested,
-    trustedProfileInjection: true
+    sealedGate: packageAttested && authExtensionAttested,
+    atomicTransaction: packageAttested && authExtensionAttested,
+    trustedProfileInjection: packageAttested
   };
   readinessCache.set(home, { readiness, expiresAt: now + READINESS_CACHE_TTL_MS });
   return { ...readiness };
 }
-function attestedPackageManifest(manifestPath) {
+function attestedAuthExtension(extensionPath, expectedSha256) {
+  try {
+    if (typeof expectedSha256 !== "string" || !/^[a-f0-9]{64}$/u.test(expectedSha256)) return false;
+    if (!statSync6(extensionPath).isFile()) return false;
+    const source = readFileSync12(extensionPath, "utf8");
+    return createHash14("sha256").update(source, "utf8").digest("hex") === expectedSha256 && source.includes("BrowserCredentialAuthBroker") && source.includes("browser_authenticate") && source.includes("AMASTER_BROWSER_CREDENTIAL_PRIVATE_CHANNEL");
+  } catch {
+    return false;
+  }
+}
+function fileSha256(path) {
+  return createHash14("sha256").update(readFileSync12(path)).digest("hex");
+}
+function treeAttestation(root) {
+  const files = [];
+  const visit = (directory) => {
+    for (const entry of readdirSync8(directory, { withFileTypes: true })) {
+      const path = join16(directory, entry.name);
+      if (entry.isDirectory()) visit(path);
+      else if (entry.isFile() && !lstatSync9(path).isSymbolicLink()) files.push(path);
+      else throw new Error("browser_credential_tcb_tree_invalid");
+    }
+  };
+  visit(root);
+  files.sort();
+  const digest2 = createHash14("sha256");
+  for (const path of files) {
+    digest2.update(relative5(root, path).replaceAll("\\", "/"));
+    digest2.update("\0");
+    digest2.update(readFileSync12(path));
+  }
+  return digest2.digest("hex");
+}
+function attestedPackageManifest(manifestPath, expected) {
   try {
     const manifest = JSON.parse(readFileSync12(manifestPath, "utf8"));
-    if (manifest?.name !== "@amaster.ai/pi-browser-use") return false;
+    if (manifest?.name !== "@amaster.ai/pi-browser-use") return null;
     if (!Array.isArray(manifest.mirrorxCapabilities) || !manifest.mirrorxCapabilities.includes(CAPABILITY)) {
-      return false;
+      return null;
     }
-    if (!sameCredentialBrowserTcb(manifest.mirrorxCredentialBrowserTcb)) return false;
-    if (typeof manifest.main !== "string" || !manifest.main.trim()) return false;
+    if (!sameCredentialBrowserTcb(manifest.mirrorxCredentialBrowserTcb, expected.browserTcb)) return null;
+    if (manifest.mirrorxCredentialAuthExtensionSha256 !== expected.authExtensionSha256) return null;
+    if (typeof manifest.main !== "string" || !manifest.main.trim()) return null;
     const packageDir = resolve10(manifestPath, "..");
+    if (Object.entries(expected.packageFiles).some(([relativePath, sha2563]) => {
+      const path = resolve10(packageDir, relativePath);
+      const relativePathFromPackage = relative5(packageDir, path);
+      return !relativePathFromPackage || relativePathFromPackage.startsWith("..") || isAbsolute7(relativePathFromPackage) || !statSync6(path).isFile() || fileSha256(path) !== sha2563;
+    })) return null;
+    const browserPackageDir = resolve10(packageDir, "..", "..", "chrome-devtools-mcp");
+    const browserPackage = JSON.parse(readFileSync12(join16(browserPackageDir, "package.json"), "utf8"));
+    if (browserPackage.name !== expected.browserTcb.package || browserPackage.version !== expected.browserTcb.version || treeAttestation(join16(browserPackageDir, "build")) !== expected.browserTcb.buildTreeSha256) return null;
     const entrypoint = resolve10(packageDir, manifest.main);
     const relativeEntrypoint = relative5(packageDir, entrypoint);
-    if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || isAbsolute7(relativeEntrypoint) || !existsSync12(entrypoint)) return false;
-    return statSync6(entrypoint).isFile();
+    if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || isAbsolute7(relativeEntrypoint) || !existsSync12(entrypoint)) return null;
+    return statSync6(entrypoint).isFile() ? {} : null;
   } catch {
-    return false;
+    return null;
   }
 }
-function sameCredentialBrowserTcb(value) {
-  return value && typeof value === "object" && Object.entries(CREDENTIAL_BROWSER_TCB).every(([key, expected]) => value[key] === expected) && Object.keys(value).length === Object.keys(CREDENTIAL_BROWSER_TCB).length;
+function sameCredentialBrowserTcb(value, expected) {
+  return value && typeof value === "object" && Object.entries(expected).every(([key, expectedValue]) => value[key] === expectedValue) && Object.keys(value).length === Object.keys(expected).length;
 }
 
 // src/amaster-runtime-daemon/browser-credential-env-readiness.mjs
-import { lstatSync as lstatSync9, readFileSync as readFileSync13 } from "node:fs";
+import { lstatSync as lstatSync10, readFileSync as readFileSync13 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join17 } from "node:path";
 var CACHE_TTL_MS = 5e3;
@@ -32968,7 +33479,7 @@ function inspectBrowserCredentialEnvReadiness(env = process.env) {
   const extensionPath = join17(home, "extensions", "browser-credential-env.mjs");
   let extension = false;
   try {
-    const stat = lstatSync9(extensionPath);
+    const stat = lstatSync10(extensionPath);
     const source = stat.isFile() && !stat.isSymbolicLink() ? readFileSync13(extensionPath, "utf8") : "";
     extension = /\bname\s*:\s*["']browser_read_credential["']/u.test(source) && /\bPI_AGENT_BROWSER_CREDENTIAL_ENV_FILE\b/u.test(source);
   } catch {
@@ -32979,12 +33490,41 @@ function inspectBrowserCredentialEnvReadiness(env = process.env) {
   return { ...readiness };
 }
 
+// src/amaster-runtime-daemon/pi-web-search-readiness.mjs
+import { lstatSync as lstatSync11, readFileSync as readFileSync14 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { join as join18 } from "node:path";
+function readRegularJson(path) {
+  try {
+    const stat = lstatSync11(path);
+    if (!stat.isFile() || stat.isSymbolicLink()) return null;
+    const value = JSON.parse(readFileSync14(path, "utf8"));
+    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+function inspectPiWebSearchReadiness(env = process.env) {
+  const home = String(env.PI_CODING_AGENT_DIR ?? env.PI_AGENT_HOME ?? join18(homedir6(), ".pi", "agent")).trim();
+  const settings = readRegularJson(join18(home, "settings.json"));
+  const packages = Array.isArray(settings?.packages) ? settings.packages : [];
+  const configured = packages.some((entry) => typeof entry === "string" && /^npm:@amaster\.ai\/pi-web-access(?:@|$)/u.test(entry));
+  const providers = settings?.["pi-web-access"]?.providers;
+  if (!configured || !providers || typeof providers !== "object" || Array.isArray(providers) || Object.keys(providers).length === 0) return false;
+  const manifests = [
+    join18(home, "npm", "node_modules", "@amaster.ai", "pi-web-access", "package.json"),
+    join18(home, "node_modules", "@amaster.ai", "pi-web-access", "package.json")
+  ];
+  return manifests.some((path) => readRegularJson(path)?.name === "@amaster.ai/pi-web-access");
+}
+
 // src/amaster-runtime-daemon/browser-credential-env.mjs
 import { chmodSync as chmodSync6, mkdtempSync as mkdtempSync3, renameSync as renameSync9, rmSync as rmSync10, writeFileSync as writeFileSync12 } from "node:fs";
-import { join as join18, resolve as resolve11 } from "node:path";
+import { join as join19, resolve as resolve11 } from "node:path";
 var BROWSER_CREDENTIAL_ENV_CAPABILITY = "browser_credential_env_read_v1";
 var BROWSER_CREDENTIAL_PRIVATE_CAPABILITY = "browser_credential_auth_transaction_v1";
 var BROWSER_CREDENTIAL_ENV_FILE = "PI_AGENT_BROWSER_CREDENTIAL_ENV_FILE";
+var BROWSER_CREDENTIAL_AUTHORITY_ENV = "AMASTER_BROWSER_CREDENTIAL_AUTHORITY_JSON";
 var BROWSER_CREDENTIAL_USERNAME_KEY = "BROWSER_USERNAME";
 var BROWSER_CREDENTIAL_PASSWORD_KEY = "BROWSER_PASSWORD";
 function exactOrigin2(value) {
@@ -33040,6 +33580,31 @@ function browserCredentialEnvPlan(command, presentation = browserCredentialPrese
     availableKeys: Object.freeze(availableKeys)
   });
 }
+function browserCredentialPrivateAuthority(command, presentation = browserCredentialPresentation(command)) {
+  if (presentation !== "private_channel") return null;
+  const refs = Array.isArray(command?.payload?.browserCredentialRefs) ? command.payload.browserCredentialRefs : [];
+  const session = command?.payload?.browserSession;
+  const targetUrl = typeof session?.targetUrl === "string" ? session.targetUrl : "";
+  const predicate = session?.authenticatedPredicate;
+  let parsedTarget;
+  try {
+    parsedTarget = new URL(targetUrl);
+  } catch {
+    fail2("browser_credential_authority_invalid");
+  }
+  const origin = parsedTarget.protocol === "https:" && !parsedTarget.username && !parsedTarget.password ? parsedTarget.origin : null;
+  const passwordRefs = refs.filter((ref2) => ref2?.credentialRole === "password");
+  const usernameRefs = refs.filter((ref2) => ref2?.credentialRole === "username");
+  if (!origin || refs.length < 1 || refs.length > 2 || passwordRefs.length !== 1 || usernameRefs.length > 1 || !predicate || predicate.version !== 1 || predicate.type !== "snapshot_text_v1" || typeof predicate.requiredText !== "string" || predicate.requiredText !== predicate.requiredText.trim() || predicate.requiredText.length < 8 || predicate.requiredText.length > 256 || /[\u0000-\u001f\u007f]/u.test(predicate.requiredText) || refs.some((ref2) => ref2?.commandId !== command?.commandId || ref2?.bindingId !== session?.bindingId || ref2?.browserLeaseId !== session?.browserLeaseId || ref2?.targetOrigin !== origin || ref2?.authenticationOrigin !== origin)) {
+    fail2("browser_credential_authority_invalid");
+  }
+  return Object.freeze({
+    version: 1,
+    targetUrl: parsedTarget.href,
+    authenticatedPredicate: Object.freeze({ ...predicate }),
+    refs: Object.freeze(refs.map((ref2) => Object.freeze({ ...ref2 })))
+  });
+}
 function dotenvQuotedValue(value) {
   if (value.includes("\0")) fail2("browser_credential_env_value_invalid");
   return `"${value.replace(/[\\"\n\r\t$`]/gu, (char) => ({
@@ -33057,10 +33622,10 @@ async function materializeBrowserCredentialEnv(plan, options) {
   const rawRunDir = String(options.runDir ?? "").trim();
   if (!rawRunDir) fail2("browser_credential_env_run_dir_invalid");
   const runDir = resolve11(rawRunDir);
-  const credentialDir = mkdtempSync3(join18(runDir, ".browser-credentials-"));
+  const credentialDir = mkdtempSync3(join19(runDir, ".browser-credentials-"));
   chmodSync6(credentialDir, 448);
-  const targetPath = join18(credentialDir, "credentials.env");
-  const temporaryPath = join18(credentialDir, ".credentials.env.tmp");
+  const targetPath = join19(credentialDir, "credentials.env");
+  const temporaryPath = join19(credentialDir, ".credentials.env.tmp");
   const buffers = [];
   const protectedValues = [];
   try {
@@ -33095,8 +33660,8 @@ async function materializeBrowserCredentialEnv(plan, options) {
 }
 
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
-import { createHash as createHash14 } from "node:crypto";
-import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync4, lstatSync as lstatSync10, openSync as openSync4, readFileSync as readFileSync14, realpathSync as realpathSync10 } from "node:fs";
+import { createHash as createHash15 } from "node:crypto";
+import { closeSync as closeSync4, constants as constants3, fstatSync as fstatSync4, lstatSync as lstatSync12, openSync as openSync4, readFileSync as readFileSync15, realpathSync as realpathSync10 } from "node:fs";
 import { isAbsolute as isAbsolute8, relative as relative6, resolve as resolve12 } from "node:path";
 var SHA256_PATTERN = /^[a-f0-9]{64}$/;
 function requiredString2(value, name) {
@@ -33119,7 +33684,7 @@ function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime w
   const root = realpathSync10(resolve12(rootPath));
   const relativePath = ownedRelativePath(sourceRelativePath);
   const sourcePath = resolve12(root, relativePath);
-  const pathStat = lstatSync10(sourcePath);
+  const pathStat = lstatSync12(sourcePath);
   if (!pathStat.isFile() || pathStat.isSymbolicLink() || !pathWithin2(realpathSync10(sourcePath), root)) {
     throw new Error(`${label} source is not an owned regular file`);
   }
@@ -33148,10 +33713,10 @@ function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime w
         );
       }
     }
-    const body = readFileSync14(descriptor);
+    const body = readFileSync15(descriptor);
     options.afterRead?.({ sourcePath, descriptor });
     const after = fstatSync4(descriptor);
-    const pathAfter = lstatSync10(sourcePath);
+    const pathAfter = lstatSync12(sourcePath);
     if (!sameFileSnapshot(before, after) || !sameFileSnapshot(pathAfter, after) || !pathAfter.isFile() || pathAfter.isSymbolicLink() || !pathWithin2(realpathSync10(sourcePath), root) || body.length !== after.size) {
       throw new Error(`${label} source changed during the governed read`);
     }
@@ -33185,7 +33750,7 @@ function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
       `Runtime Artifact ${intentId}`,
       { expectedByteSize }
     );
-    const actualSha256 = createHash14("sha256").update(body).digest("hex");
+    const actualSha256 = createHash15("sha256").update(body).digest("hex");
     if (body.length !== expectedByteSize || actualSha256 !== expectedSha256) {
       throw new Error(`Runtime Artifact ${intentId} bytes do not match the governed ownership manifest`);
     }
@@ -33202,7 +33767,7 @@ function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
 }
 
 // src/amaster-runtime-daemon/runtime-document-upload.mjs
-import { createHash as createHash15 } from "node:crypto";
+import { createHash as createHash16 } from "node:crypto";
 
 // src/amaster-runtime-daemon/workspace-sensitive-path.mjs
 var SENSITIVE_PATH_SEGMENTS = /* @__PURE__ */ new Set([
@@ -33277,7 +33842,7 @@ function prepareRuntimeDocumentUploads(cwd, mcpToolResults) {
         maxByteSize: MAX_WORKSPACE_DOCUMENT_BYTES
       }
     );
-    const actualSha256 = createHash15("sha256").update(body).digest("hex");
+    const actualSha256 = createHash16("sha256").update(body).digest("hex");
     if (body.length !== expectedByteSize || actualSha256 !== expectedSha256) {
       throw new Error(`Runtime Document ${callId} bytes do not match the governed ownership manifest`);
     }
@@ -33474,9 +34039,9 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 }
 
 // src/amaster-runtime-daemon/workspace-guard.mjs
-import { createHash as createHash16 } from "node:crypto";
+import { createHash as createHash17 } from "node:crypto";
 import { existsSync as existsSync13, mkdirSync as mkdirSync11, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
-import { basename as basename6, join as join19, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve13 } from "node:path";
+import { basename as basename6, join as join20, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve13 } from "node:path";
 function pathWithin3(candidate, root) {
   const rel = relative7(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute9(rel);
@@ -33503,7 +34068,7 @@ function resolveWorkspaceCwd(config, command) {
   return cwd;
 }
 function shortHash(value, length = 12) {
-  return createHash16("sha256").update(String(value)).digest("hex").slice(0, length);
+  return createHash17("sha256").update(String(value)).digest("hex").slice(0, length);
 }
 function safeSegment(value, fallback) {
   const raw = String(value ?? "").trim();
@@ -33545,9 +34110,9 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
   const workspaceKey = `${safeSegment(workspaceLabel(sourceWorkspacePath, payload), "workspace")}-${shortHash(sourceWorkspacePath)}`;
   const issueKey = `${safeSegment(issueLabel(command, payload), "issue")}-${shortHash(issueId, 8)}`;
   const runKey = `${safeSegment(runId, "run")}-${shortHash(runId, 8)}`;
-  const runDir = join19(root, workspaceKey, issueKey, runKey);
-  const cwd = join19(runDir, "workdir");
-  const executorHome = join19(runDir, "executors", safeSegment(executorKind, "executor"));
+  const runDir = join20(root, workspaceKey, issueKey, runKey);
+  const cwd = join20(runDir, "workdir");
+  const executorHome = join20(runDir, "executors", safeSegment(executorKind, "executor"));
   mkdirSync11(cwd, { recursive: true });
   mkdirSync11(executorHome, { recursive: true });
   const workspace = {
@@ -33571,8 +34136,8 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
 }
 
 // src/amaster-runtime-daemon/workspace-gc.mjs
-import { existsSync as existsSync14, readdirSync as readdirSync8, statSync as statSync8 } from "node:fs";
-import { join as join20, resolve as resolve14 } from "node:path";
+import { existsSync as existsSync14, readdirSync as readdirSync9, statSync as statSync8 } from "node:fs";
+import { join as join21, resolve as resolve14 } from "node:path";
 function readIsoTime(value) {
   if (typeof value !== "string" || !value.trim()) return null;
   const time2 = new Date(value).getTime();
@@ -33589,13 +34154,13 @@ function walkWorkdirs(root) {
     if (!current) continue;
     let entries = [];
     try {
-      entries = readdirSync8(current, { withFileTypes: true });
+      entries = readdirSync9(current, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join20(current, entry.name);
+      const fullPath = join21(current, entry.name);
       if (entry.name === "workdir" && existsSync14(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -33622,12 +34187,12 @@ function directorySizeBytes(path) {
     if (stat.isDirectory()) {
       let entries = [];
       try {
-        entries = readdirSync8(current, { withFileTypes: true });
+        entries = readdirSync9(current, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const entry of entries) {
-        stack.push(join20(current, entry.name));
+        stack.push(join21(current, entry.name));
       }
       continue;
     }
@@ -33699,35 +34264,35 @@ function planManagedWorkspaceGcDryRun(input) {
 }
 
 // src/amaster-runtime-daemon/preset-templates.mjs
-import { createHash as createHash17 } from "node:crypto";
+import { createHash as createHash18 } from "node:crypto";
 import {
   accessSync,
   chmodSync as chmodSync7,
   constants as constants4,
   existsSync as existsSync15,
-  lstatSync as lstatSync11,
+  lstatSync as lstatSync13,
   mkdirSync as mkdirSync12,
   mkdtempSync as mkdtempSync4,
-  readFileSync as readFileSync15,
-  readdirSync as readdirSync9,
+  readFileSync as readFileSync16,
+  readdirSync as readdirSync10,
   renameSync as renameSync10,
   rmSync as rmSync11,
   statSync as statSync9,
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync13
 } from "node:fs";
-import { dirname as dirname10, extname, isAbsolute as isAbsolute10, join as join21, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
+import { dirname as dirname10, extname, isAbsolute as isAbsolute10, join as join22, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PRESET_TEMPLATE_MANIFEST_FILE = ".mirrorx-preset-templates.json";
 var MAX_PRESET_TEMPLATE_FILES = 256;
 var MAX_PRESET_TEMPLATE_FILE_BYTES = 20 * 1024 * 1024;
 var MAX_PRESET_TEMPLATE_TOTAL_BYTES = 50 * 1024 * 1024;
 function sha2562(value) {
-  return createHash17("sha256").update(value).digest("hex");
+  return createHash18("sha256").update(value).digest("hex");
 }
 function lstatIfExists(path) {
   try {
-    return lstatSync11(path);
+    return lstatSync13(path);
   } catch (error) {
     if (error?.code === "ENOENT") return null;
     throw error;
@@ -33742,7 +34307,7 @@ function modeAllows(stat, identity, ownerBit, groupBit, otherBit) {
 function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
   if (!identity) {
     accessSync(targetDir, constants4.R_OK | constants4.X_OK);
-    for (const name of fileNames) accessSync(join21(targetDir, name), constants4.R_OK);
+    for (const name of fileNames) accessSync(join22(targetDir, name), constants4.R_OK);
     return;
   }
   let current = targetDir;
@@ -33760,7 +34325,7 @@ function assertCatalogReadableByExecutor(targetDir, fileNames, identity) {
     throw new Error(`preset_template_executor_catalog_unreadable: ${targetDir}`);
   }
   for (const name of fileNames) {
-    const path = join21(targetDir, name);
+    const path = join22(targetDir, name);
     const stat = statSync9(path);
     if (!stat.isFile() || !modeAllows(stat, identity, 256, 32, 4)) {
       throw new Error(`preset_template_executor_file_unreadable: ${name}`);
@@ -33776,7 +34341,7 @@ function validTemplateName(value) {
 }
 function readManifest(manifestPath, { strict }) {
   try {
-    const parsed = JSON.parse(readFileSync15(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync16(manifestPath, "utf8"));
     if (parsed?.schemaVersion !== 1 || !Array.isArray(parsed.files)) {
       throw new Error("preset_template_bundle_manifest_invalid");
     }
@@ -33804,12 +34369,12 @@ function readManifest(manifestPath, { strict }) {
 }
 function verifiedBundleFiles(sourceDir, manifest) {
   return manifest.files.map((entry) => {
-    const sourcePath = join21(sourceDir, entry.name);
-    const stat = lstatSync11(sourcePath);
+    const sourcePath = join22(sourceDir, entry.name);
+    const stat = lstatSync13(sourcePath);
     if (!stat.isFile() || stat.isSymbolicLink()) {
       throw new Error(`preset_template_bundle_file_unsafe: ${entry.name}`);
     }
-    const body = readFileSync15(sourcePath);
+    const body = readFileSync16(sourcePath);
     if (body.byteLength !== entry.bytes || sha2562(body) !== entry.sha256) {
       throw new Error(`preset_template_bundle_digest_mismatch: ${entry.name}`);
     }
@@ -33819,9 +34384,9 @@ function verifiedBundleFiles(sourceDir, manifest) {
 function removeRetiredPresetFiles(targetDir, previousManifest, nextNames) {
   for (const entry of previousManifest.files) {
     if (nextNames.has(entry.name)) continue;
-    const targetPath = join21(targetDir, entry.name);
+    const targetPath = join22(targetDir, entry.name);
     if (!existsSync15(targetPath)) continue;
-    const stat = lstatSync11(targetPath);
+    const stat = lstatSync13(targetPath);
     if (stat.isDirectory()) {
       throw new Error(`preset_template_target_conflict: ${entry.name}`);
     }
@@ -33834,7 +34399,7 @@ function materializeBundledPresetTemplates(input) {
   if (sourceDir === targetDir || sourceDir.startsWith(`${targetDir}${sep4}`) || targetDir.startsWith(`${sourceDir}${sep4}`)) {
     throw new Error("preset_template_source_target_overlap");
   }
-  const manifest = readManifest(join21(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
+  const manifest = readManifest(join22(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
   const verifiedFiles = verifiedBundleFiles(sourceDir, manifest);
   mkdirSync12(dirname10(targetDir), { recursive: true, mode: 493 });
   const targetStat = lstatIfExists(targetDir);
@@ -33842,24 +34407,24 @@ function materializeBundledPresetTemplates(input) {
     throw new Error("preset_template_target_root_unsafe");
   }
   mkdirSync12(targetDir, { recursive: true, mode: 493 });
-  const previousManifest = readManifest(join21(targetDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: false });
-  const stageDir = mkdtempSync4(join21(dirname10(targetDir), ".mirrorx-preset-templates-"));
+  const previousManifest = readManifest(join22(targetDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: false });
+  const stageDir = mkdtempSync4(join22(dirname10(targetDir), ".mirrorx-preset-templates-"));
   try {
     for (const file of verifiedFiles) {
-      const stagedPath = join21(stageDir, file.name);
+      const stagedPath = join22(stageDir, file.name);
       writeFileSync13(stagedPath, file.body, { mode: 292 });
       chmodSync7(stagedPath, 292);
-      renameSync10(stagedPath, join21(targetDir, file.name));
+      renameSync10(stagedPath, join22(targetDir, file.name));
     }
     removeRetiredPresetFiles(targetDir, previousManifest, new Set(manifest.files.map((file) => file.name)));
-    const stagedManifest = join21(stageDir, PRESET_TEMPLATE_MANIFEST_FILE);
+    const stagedManifest = join22(stageDir, PRESET_TEMPLATE_MANIFEST_FILE);
     writeFileSync13(stagedManifest, `${JSON.stringify({
       schemaVersion: manifest.schemaVersion,
       files: manifest.files
     }, null, 2)}
 `, { mode: 292 });
     chmodSync7(stagedManifest, 292);
-    renameSync10(stagedManifest, join21(targetDir, PRESET_TEMPLATE_MANIFEST_FILE));
+    renameSync10(stagedManifest, join22(targetDir, PRESET_TEMPLATE_MANIFEST_FILE));
   } finally {
     rmSync11(stageDir, { recursive: true, force: true });
   }
@@ -33876,12 +34441,12 @@ function materializeRuntimePresetTemplates(input) {
     sourceDir,
     targetDir: input.targetDir
   });
-  const manifestBody = readFileSync15(
-    join21(materialized.targetDir, PRESET_TEMPLATE_MANIFEST_FILE)
+  const manifestBody = readFileSync16(
+    join22(materialized.targetDir, PRESET_TEMPLATE_MANIFEST_FILE)
   );
   const manifest = JSON.parse(manifestBody.toString("utf8"));
   for (const file of manifest.files) {
-    const body = readFileSync15(join21(materialized.targetDir, file.name));
+    const body = readFileSync16(join22(materialized.targetDir, file.name));
     if (sha2562(body) !== file.sha256) {
       throw new Error(`preset_template_materialized_digest_mismatch: ${file.name}`);
     }
@@ -33904,11 +34469,11 @@ function materializeRuntimePresetTemplates(input) {
 }
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
-import { existsSync as existsSync16, readdirSync as readdirSync10, statSync as statSync10 } from "node:fs";
-import { dirname as dirname11, join as join22, resolve as resolve16 } from "node:path";
+import { existsSync as existsSync16, readdirSync as readdirSync11, statSync as statSync10 } from "node:fs";
+import { dirname as dirname11, join as join23, resolve as resolve16 } from "node:path";
 function runtimeStatusDirectoryEntries(path) {
   try {
-    return readdirSync10(path, { withFileTypes: true });
+    return readdirSync11(path, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -33928,7 +34493,7 @@ function runtimeStatusDirectorySizeBytes(path) {
     if (!stat || stat.isSymbolicLink()) continue;
     if (stat.isDirectory()) {
       for (const entry of runtimeStatusDirectoryEntries(current)) {
-        stack.push(join22(current, entry.name));
+        stack.push(join23(current, entry.name));
       }
       continue;
     }
@@ -33945,7 +34510,7 @@ function walkRuntimeStatusManagedWorkdirs(root) {
     if (!current) continue;
     for (const entry of runtimeStatusDirectoryEntries(current)) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join22(current, entry.name);
+      const fullPath = join23(current, entry.name);
       if (entry.name === "workdir" && existsSync16(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -33987,7 +34552,7 @@ function summarizeRuntimeStatusRecentRun(workdir, manifest) {
 }
 function runtimeStatusOutboxDir(config) {
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join22(dirname11(stateFilePath({
+  return join23(dirname11(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "result-outbox");
 }
@@ -33995,7 +34560,7 @@ function runtimeStatusRunCompletionDir(config) {
   const explicit = config.AMASTER_RUN_COMPLETION_STATE_DIR ?? config.runCompletionStateDir;
   if (typeof explicit === "string" && explicit.trim()) return resolve16(explicit);
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
-  return join22(dirname11(stateFilePath({
+  return join23(dirname11(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
   })), "run-completion-state");
 }
@@ -34032,9 +34597,9 @@ function summarizeRuntimeLocalState(input) {
     }
   }
   const pendingOutboxDir = runtimeStatusOutboxDir(config);
-  const invalidOutboxDir = join22(pendingOutboxDir, "invalid");
+  const invalidOutboxDir = join23(pendingOutboxDir, "invalid");
   const pendingRunCompletionDir = runtimeStatusRunCompletionDir(config);
-  const invalidRunCompletionDir = join22(pendingRunCompletionDir, "invalid");
+  const invalidRunCompletionDir = join23(pendingRunCompletionDir, "invalid");
   return {
     managedWorkspacesRoot: root,
     managedWorkdirCount: workdirs.length,
@@ -34156,7 +34721,7 @@ function summarizeAmasterRuntimeVersionDrift(input = {}) {
 }
 
 // src/amaster-runtime-daemon/pi-context-budget.mjs
-import { readFileSync as readFileSync16 } from "node:fs";
+import { readFileSync as readFileSync17 } from "node:fs";
 var CONTEXT_ERROR_CODES = /* @__PURE__ */ new Set([
   "context_effective_tool_schema_attestation_mismatch",
   "context_output_reserve_exceeds_model_limit",
@@ -34271,7 +34836,7 @@ function measureRestoredPiNativeHistory(managedMcpProfile) {
   if (!rolloutPath) {
     return { status: "fresh", tokens: 0, rolloutBytes: 0, usageTokens: 0 };
   }
-  const rollout = readFileSync16(rolloutPath);
+  const rollout = readFileSync17(rolloutPath);
   const maximumRolloutBytes = 64 * 1024 * 1024;
   if (rollout.byteLength > maximumRolloutBytes) {
     throw stableContextError(
@@ -34365,7 +34930,7 @@ function resolvePiModelContextBudget({
 }
 
 // src/amaster-runtime-daemon/pi-project-instruction-extension.mjs
-import { lstatSync as lstatSync12, readFileSync as readFileSync17 } from "node:fs";
+import { lstatSync as lstatSync14, readFileSync as readFileSync18 } from "node:fs";
 import { resolve as resolve17 } from "node:path";
 var MANAGED_PI_PROJECT_INSTRUCTION_FILENAME = "amaster-project-instructions.js";
 function requiredString4(value, name) {
@@ -34376,11 +34941,11 @@ function requiredString4(value, name) {
 }
 function managedPiProjectInstructionExtensionSource(input) {
   const projectInstructionPath = resolve17(requiredString4(input.projectInstructionPath, "projectInstructionPath"));
-  const stat = lstatSync12(projectInstructionPath);
+  const stat = lstatSync14(projectInstructionPath);
   if (!stat.isFile() || stat.isSymbolicLink()) {
     throw new Error("pi_project_instruction_extension_invalid: unsafe projectInstructionPath");
   }
-  const projectInstructions = readFileSync17(projectInstructionPath, "utf8");
+  const projectInstructions = readFileSync18(projectInstructionPath, "utf8");
   return String.raw`const PROJECT_INSTRUCTIONS = ${JSON.stringify(projectInstructions.trim())};
 
 export default function amasterProjectInstructions(pi) {
@@ -34394,9 +34959,9 @@ export default function amasterProjectInstructions(pi) {
 
 // src/amaster-runtime-daemon/workspace-status.mjs
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { createHash as createHash18 } from "node:crypto";
-import { existsSync as existsSync17, readdirSync as readdirSync11, readFileSync as readFileSync18, statSync as statSync11 } from "node:fs";
-import { basename as basename7, extname as extname2, isAbsolute as isAbsolute11, join as join23, relative as relative8, resolve as resolve18 } from "node:path";
+import { createHash as createHash19 } from "node:crypto";
+import { existsSync as existsSync17, readdirSync as readdirSync12, readFileSync as readFileSync19, statSync as statSync11 } from "node:fs";
+import { basename as basename7, extname as extname2, isAbsolute as isAbsolute11, join as join24, relative as relative8, resolve as resolve18 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Map([
   [".md", "markdown"],
@@ -34465,7 +35030,7 @@ function sanitizeTrackedChange(line) {
   return isSafeRelativePath(path) ? line : null;
 }
 function sha256File(filePath) {
-  return createHash18("sha256").update(readFileSync18(filePath)).digest("hex");
+  return createHash19("sha256").update(readFileSync19(filePath)).digest("hex");
 }
 function artifactHashCacheKey(relativePath, stat) {
   return `${relativePath}\0${stat.size}\0${stat.mtimeMs}`;
@@ -34503,7 +35068,7 @@ function scanArtifactCandidates(cwd, opts = {}) {
     const current = stack.pop();
     let entries;
     try {
-      entries = readdirSync11(current, { withFileTypes: true });
+      entries = readdirSync12(current, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -34514,7 +35079,7 @@ function scanArtifactCandidates(cwd, opts = {}) {
       if (entry.name.startsWith(".") && entry.name !== ".amaster-runtime.json") {
         if (entry.name === ".git") continue;
       }
-      const fullPath = join23(current, entry.name);
+      const fullPath = join24(current, entry.name);
       const relativePath = normalizeRelativePath(root, fullPath);
       if (!isSafeRelativePath(relativePath)) continue;
       if (basename7(relativePath) === ".amaster-runtime.json") continue;
@@ -34592,10 +35157,10 @@ function sanitizeRuntimeService(entry) {
   };
 }
 function readRuntimeServicesSnapshot(cwd) {
-  const snapshotPath = join23(resolve18(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
+  const snapshotPath = join24(resolve18(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
   if (!existsSync17(snapshotPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync18(snapshotPath, "utf8"));
+    const parsed = JSON.parse(readFileSync19(snapshotPath, "utf8"));
     const rawServices = Array.isArray(parsed) ? parsed : Array.isArray(parsed?.services) ? parsed.services : [];
     return rawServices.map((entry) => sanitizeRuntimeService(entry)).filter((entry) => entry !== null).slice(0, 50);
   } catch {
@@ -34697,7 +35262,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.8";
+var CONNECTOR_VERSION = "0.1.10";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SUPPORTED_TASK_CONTEXT_VERSIONS = Object.freeze([TASK_CONTEXT_MANIFEST_VERSION, TASK_CONTEXT_V2]);
 var daemonRequire = createRequire(import.meta.url);
@@ -34796,8 +35361,8 @@ function resultOutboxPendingCount(config) {
   if (!existsSync18(dir)) return 0;
   try {
     let pending = 0;
-    for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json"))) {
-      if (readValidResultOutboxEntryOrQuarantine(config, file, join24(dir, file))) {
+    for (const file of readdirSync13(dir).filter((name) => name.endsWith(".json"))) {
+      if (readValidResultOutboxEntryOrQuarantine(config, file, join25(dir, file))) {
         pending += 1;
       }
     }
@@ -34809,15 +35374,15 @@ function resultOutboxPendingCount(config) {
 function runCompletionStateDir(config) {
   const explicit = readString(process.env.AMASTER_RUN_COMPLETION_STATE_DIR);
   if (explicit) return resolve19(expandHomePath(explicit));
-  return join24(dirname12(stateFilePath(process.env)), "run-completion-state");
+  return join25(dirname12(stateFilePath(process.env)), "run-completion-state");
 }
 function runCompletionStateInvalidDir(config) {
-  return join24(runCompletionStateDir(config), "invalid");
+  return join25(runCompletionStateDir(config), "invalid");
 }
 function quarantineInvalidRunCompletionState(config, filePath, reason) {
   const invalidDir = runCompletionStateInvalidDir(config);
   mkdirSync13(invalidDir, { recursive: true, mode: 448 });
-  const destination = join24(invalidDir, basename8(filePath));
+  const destination = join25(invalidDir, basename8(filePath));
   try {
     renameSync11(filePath, destination);
   } catch {
@@ -34874,8 +35439,8 @@ function resultOutboxActiveRunCommands(config) {
   if (!existsSync18(dir)) return [];
   const outboxPending = resultOutboxPendingCount(config);
   const entries = [];
-  for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json")).sort()) {
-    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join24(dir, file));
+  for (const file of readdirSync13(dir).filter((name) => name.endsWith(".json")).sort()) {
+    const entry = readValidResultOutboxEntryOrQuarantine(config, file, join25(dir, file));
     if (!entry) continue;
     const activeRun = asRecord(entry.activeRun);
     const commandId = readString(activeRun.commandId) ?? readString(entry.commandId);
@@ -34908,10 +35473,10 @@ function resultOutboxFailedRunCommands(config) {
   const dir = resultOutboxInvalidDir(config);
   if (!existsSync18(dir)) return [];
   const entries = [];
-  for (const file of readdirSync12(dir).filter((name) => name.endsWith(".json")).sort().slice(-100)) {
+  for (const file of readdirSync13(dir).filter((name) => name.endsWith(".json")).sort().slice(-100)) {
     let entry;
     try {
-      entry = asRecord(JSON.parse(readFileSync19(join24(dir, file), "utf8")));
+      entry = asRecord(JSON.parse(readFileSync20(join25(dir, file), "utf8")));
     } catch {
       continue;
     }
@@ -34978,7 +35543,7 @@ function safeExpandPath(value) {
 }
 function safeJsonObjectFromFile(filePath) {
   try {
-    const parsed = JSON.parse(readFileSync19(filePath, "utf8"));
+    const parsed = JSON.parse(readFileSync20(filePath, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
   } catch {
     return null;
@@ -34995,7 +35560,7 @@ function safeDirectorySummary(pathValue) {
     }
     let entryCount = 0;
     let truncated = false;
-    for (const name of readdirSync12(pathValue)) {
+    for (const name of readdirSync13(pathValue)) {
       if (name.startsWith(".")) continue;
       entryCount += 1;
       if (entryCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
@@ -35019,12 +35584,12 @@ function safeSkillRootSummary(kind, source, pathValue) {
   let truncated = false;
   if (directory.available && pathValue) {
     try {
-      for (const name of readdirSync12(pathValue)) {
+      for (const name of readdirSync13(pathValue)) {
         if (name.startsWith(".")) continue;
-        const skillDir = join24(pathValue, name);
+        const skillDir = join25(pathValue, name);
         try {
           if (!statSync12(skillDir).isDirectory()) continue;
-          if (!existsSync18(join24(skillDir, "SKILL.md"))) continue;
+          if (!existsSync18(join25(skillDir, "SKILL.md"))) continue;
           skillCount += 1;
           if (skillCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
             truncated = true;
@@ -35075,7 +35640,7 @@ function objectKeyCount(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? Object.keys(value).length : 0;
 }
 function defaultPiCodingAgentDir() {
-  return join24(homedir6(), ".pi", "agent");
+  return join25(homedir7(), ".pi", "agent");
 }
 function piCapabilitySourcesDiagnostics() {
   const configuredPiCodingAgentDir = safeExpandPath(process.env.PI_CODING_AGENT_DIR);
@@ -35084,14 +35649,14 @@ function piCapabilitySourcesDiagnostics() {
   const configuredPiAgentHome = safeExpandPath(process.env.PI_AGENT_HOME);
   const piAgentHome = configuredPiAgentHome ?? piCodingAgentDir;
   const piAgentHomeSource = configuredPiAgentHome ? "PI_AGENT_HOME" : piCodingAgentDirSource;
-  const userSkillsPath = piAgentHome ? join24(piAgentHome, "skills") : null;
+  const userSkillsPath = piAgentHome ? join25(piAgentHome, "skills") : null;
   const configuredMarketplaceSkillsPath = safeExpandPath(
     process.env.PI_AGENT_MARKETPLACE_SKILLS_DIR
   );
-  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join24(piAgentHome, "marketplace", "skills") : null);
+  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join25(piAgentHome, "marketplace", "skills") : null);
   const builtinSkillsPath = safeExpandPath(process.env.PI_AGENT_BUILTIN_SKILLS_DIR) ?? safeExpandPath(process.env.AMASTER_BUILTIN_SKILLS);
-  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join24(piAgentHome, "mcp.json") : null);
-  const settingsConfigPath = piCodingAgentDir ? join24(piCodingAgentDir, "settings.json") : null;
+  const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join25(piAgentHome, "mcp.json") : null);
+  const settingsConfigPath = piCodingAgentDir ? join25(piCodingAgentDir, "settings.json") : null;
   const skillRoots = [
     safeSkillRootSummary("user", `${piAgentHomeSource}/skills`, userSkillsPath),
     safeSkillRootSummary(
@@ -35254,7 +35819,8 @@ function runtimeAdvertisedCapabilities(config) {
     checkpointUploadEnabled: config.checkpointUploadEnabled,
     executors: config.executors,
     browserCredentialAuth: inspectBrowserCredentialAuthReadiness(),
-    browserCredentialEnv: inspectBrowserCredentialEnvReadiness()
+    browserCredentialEnv: inspectBrowserCredentialEnvReadiness(),
+    piWebSearchReady: inspectPiWebSearchReadiness()
   });
 }
 function buildRegisterPayload(config) {
@@ -35386,16 +35952,16 @@ function handoffPiRunPathsToChild(config, paths) {
 function materializePiRuntimeSystemPrompt(config, promptRoot, commandId, contents) {
   const normalizedCommandId = readString(commandId);
   if (!normalizedCommandId) throw new Error("pi_runtime_system_prompt_command_id_missing");
-  const promptIdentity = createHash19("sha256").update(normalizedCommandId).digest("hex");
-  const promptDir = join24(promptRoot, "tmp");
+  const promptIdentity = createHash20("sha256").update(normalizedCommandId).digest("hex");
+  const promptDir = join25(promptRoot, "tmp");
   mkdirSync13(promptDir, { recursive: true, mode: 448 });
-  const promptDirStat = lstatSync13(promptDir);
+  const promptDirStat = lstatSync15(promptDir);
   if (!promptDirStat.isDirectory() || promptDirStat.isSymbolicLink()) {
     throw new Error("pi_runtime_system_prompt_directory_invalid");
   }
   chmodSync8(promptDir, 448);
-  const promptPath = join24(promptDir, `runtime-system-${promptIdentity}.md`);
-  const temporaryPath = join24(promptDir, `.runtime-system.${process.pid}.${randomUUID2()}.tmp`);
+  const promptPath = join25(promptDir, `runtime-system-${promptIdentity}.md`);
+  const temporaryPath = join25(promptDir, `.runtime-system.${process.pid}.${randomUUID2()}.tmp`);
   try {
     writeFileSync14(temporaryPath, contents, { encoding: "utf8", mode: 384, flag: "wx" });
     renameSync11(temporaryPath, promptPath);
@@ -35571,7 +36137,7 @@ AMASTER_MACHINE_ID=${quoteShell(config.machineId)}
 AMASTER_WORKSPACE_ALLOWLIST=${quoteShell(config.workspaceBindings.join(","))}
 AMASTER_EXECUTORS=${quoteShell(executorEnv)}
 AMASTER_NETWORK_DOMAINS=${quoteShell(config.networkDomains.join(","))}
-AMASTER_DAEMON_STATE_FILE=${quoteShell(join24(homedir6(), ".amaster-employee", "runtime-connector-state.json"))}
+AMASTER_DAEMON_STATE_FILE=${quoteShell(join25(homedir7(), ".amaster-employee", "runtime-connector-state.json"))}
 EOF
 
 set -a
@@ -36050,7 +36616,7 @@ function ensureBrowserSessionProfile(config, session) {
   const identity = browserSessionProfileIdentity(config, session);
   const profileRoot = resolve19(config.browserSessionStateRoot);
   mkdirSync13(profileRoot, { recursive: true, mode: 448 });
-  if (lstatSync13(profileRoot).isSymbolicLink() || !lstatSync13(profileRoot).isDirectory()) {
+  if (lstatSync15(profileRoot).isSymbolicLink() || !lstatSync15(profileRoot).isDirectory()) {
     throw new Error("browser_session_profile_path_invalid");
   }
   chmodSync8(profileRoot, 448);
@@ -36059,13 +36625,13 @@ function ensureBrowserSessionProfile(config, session) {
     throw new Error("browser_session_profile_path_invalid");
   }
   mkdirSync13(userDataDir, { recursive: true, mode: 448 });
-  if (lstatSync13(userDataDir).isSymbolicLink() || !lstatSync13(userDataDir).isDirectory()) {
+  if (lstatSync15(userDataDir).isSymbolicLink() || !lstatSync15(userDataDir).isDirectory()) {
     throw new Error("browser_session_profile_path_invalid");
   }
   chmodSync8(userDataDir, 448);
-  const markerPath = join24(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
+  const markerPath = join25(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
   if (existsSync18(markerPath)) {
-    if (lstatSync13(markerPath).isSymbolicLink()) {
+    if (lstatSync15(markerPath).isSymbolicLink()) {
       throw new Error("browser_session_profile_identity_invalid");
     }
     const existing = readJsonFile2(markerPath);
@@ -36073,9 +36639,9 @@ function ensureBrowserSessionProfile(config, session) {
       throw new Error("browser_session_profile_identity_invalid");
     }
   } else {
-    const temporaryPath = join24(
+    const temporaryPath = join25(
       userDataDir,
-      `.${BROWSER_SESSION_PROFILE_OWNER_MARKER}.${process.pid}.${createHash19("sha256").update(randomUUID2()).digest("hex")}`
+      `.${BROWSER_SESSION_PROFILE_OWNER_MARKER}.${process.pid}.${createHash20("sha256").update(randomUUID2()).digest("hex")}`
     );
     writeFileSync14(temporaryPath, `${JSON.stringify(identity)}
 `, { mode: 384, flag: "wx" });
@@ -36092,11 +36658,11 @@ function cleanupBrowserSessionProfile(config, value) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
   if (!existsSync18(userDataDir)) return { outcome: "absent", identity };
-  if (lstatSync13(userDataDir).isSymbolicLink() || !lstatSync13(userDataDir).isDirectory()) {
+  if (lstatSync15(userDataDir).isSymbolicLink() || !lstatSync15(userDataDir).isDirectory()) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
-  const markerPath = join24(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
-  if (!existsSync18(markerPath) || lstatSync13(markerPath).isSymbolicLink()) {
+  const markerPath = join25(userDataDir, BROWSER_SESSION_PROFILE_OWNER_MARKER);
+  if (!existsSync18(markerPath) || lstatSync15(markerPath).isSymbolicLink()) {
     throw new Error("browser_session_profile_cleanup_invalid");
   }
   if (JSON.stringify(readJsonFile2(markerPath)) !== JSON.stringify(identity)) {
@@ -36107,7 +36673,7 @@ function cleanupBrowserSessionProfile(config, value) {
 }
 function readJsonFile2(filePath) {
   try {
-    const parsed = JSON.parse(readFileSync19(filePath, "utf8"));
+    const parsed = JSON.parse(readFileSync20(filePath, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch {
     return {};
@@ -36118,8 +36684,8 @@ function syncPiExecutorProviderConfig(config, agentDir, providerConfig) {
   const { modelsSynced, settingsSynced } = syncAmasterProviderFiles(agentDir, providerConfig);
   if (!modelsSynced && !settingsSynced) return null;
   handoffPiRunPathsToChild(config, [
-    modelsSynced ? join24(agentDir, "models.json") : null,
-    settingsSynced ? join24(agentDir, "settings.json") : null
+    modelsSynced ? join25(agentDir, "models.json") : null,
+    settingsSynced ? join25(agentDir, "settings.json") : null
   ]);
   return { modelsSynced, settingsSynced };
 }
@@ -36156,7 +36722,7 @@ function safeAgentInstructionMaterializationTarget(workspace, filePath) {
 }
 function stableInstructionFilesHash(files) {
   const canonical = Object.entries(files).filter(([filePath, content]) => typeof filePath === "string" && typeof content === "string").sort(([left], [right]) => left.localeCompare(right)).map(([filePath, content]) => `${filePath.length}:${filePath}${content.length}:${content}`).join("");
-  return createHash19("sha256").update(canonical, "utf8").digest("hex");
+  return createHash20("sha256").update(canonical, "utf8").digest("hex");
 }
 function requireCommandContextEnvelope(command) {
   const payload = asRecord(command.payload);
@@ -36200,7 +36766,7 @@ function requireCommandContextEnvelope(command) {
   if (instructions.effectiveChars !== files["AGENTS.md"].length) {
     throw new Error("context_envelope_instruction_size_mismatch");
   }
-  const entrySha256 = createHash19("sha256").update(files["AGENTS.md"], "utf8").digest("hex");
+  const entrySha256 = createHash20("sha256").update(files["AGENTS.md"], "utf8").digest("hex");
   if (entrySha256 !== readString(instructions.contentSha256)) {
     throw new Error("context_envelope_instruction_content_hash_mismatch");
   }
@@ -36210,7 +36776,7 @@ function requireCommandContextEnvelope(command) {
   }
   const runDecisionContext = asRecord(envelope.runDecisionContext);
   const dynamicContext2 = asRecord(runDecisionContext.content);
-  const runDecisionHash = createHash19("sha256").update(canonicalGoalOutcomeValue(dynamicContext2), "utf8").digest("hex");
+  const runDecisionHash = createHash20("sha256").update(canonicalGoalOutcomeValue(dynamicContext2), "utf8").digest("hex");
   if (!readString(runDecisionContext.revision) || !Number.isInteger(runDecisionContext.authorizationEpoch) || runDecisionContext.authorizationEpoch < 0 || runDecisionHash !== readString(runDecisionContext.contentSha256)) throw new Error("context_envelope_run_decision_invalid");
   if (!Array.isArray(envelope.selectedProcedures)) throw new Error("context_envelope_procedures_invalid");
   const toolProfile = asRecord(envelope.toolProfile);
@@ -36220,7 +36786,7 @@ function requireCommandContextEnvelope(command) {
     throw new Error("context_envelope_session_binding_invalid");
   }
   const envelopeHashInput = Object.fromEntries(Object.entries(envelope).filter(([key]) => key !== "envelopeSha256"));
-  const envelopeHash = createHash19("sha256").update(canonicalGoalOutcomeValue(envelopeHashInput), "utf8").digest("hex");
+  const envelopeHash = createHash20("sha256").update(canonicalGoalOutcomeValue(envelopeHashInput), "utf8").digest("hex");
   if (envelopeHash !== readString(envelope.envelopeSha256)) {
     throw new Error("context_envelope_hash_mismatch");
   }
@@ -36240,7 +36806,7 @@ async function materializeEffectiveAgentInstructions(config, command, workspace,
     const temporaryPath = `${target.targetPath}.mirrorx-${command.commandId}.tmp`;
     try {
       writeFileSync14(temporaryPath, content, { encoding: "utf8", mode: 384 });
-      const readBack = readFileSync19(temporaryPath, "utf8");
+      const readBack = readFileSync20(temporaryPath, "utf8");
       if (readBack !== content) {
         throw new Error(`context_envelope_instruction_readback_mismatch: ${filePath}`);
       }
@@ -36251,12 +36817,12 @@ async function materializeEffectiveAgentInstructions(config, command, workspace,
     materialized.push({
       path: target.relativePath,
       byteSize: Buffer.byteLength(content, "utf8"),
-      sha256: createHash19("sha256").update(content, "utf8").digest("hex")
+      sha256: createHash20("sha256").update(content, "utf8").digest("hex")
     });
   }
   const readBackFiles = Object.fromEntries(materialized.map((entry) => [
     entry.path,
-    readFileSync19(resolve19(workspace.cwd, entry.path), "utf8")
+    readFileSync20(resolve19(workspace.cwd, entry.path), "utf8")
   ]));
   if (stableInstructionFilesHash(readBackFiles) !== readString(instructionContract.contentHash)) {
     throw new Error("context_envelope_materialized_hash_mismatch");
@@ -36280,7 +36846,7 @@ function wikiTreePathForCommand(command, workspaceBindings) {
     const candidates = [];
     if (root.endsWith("paperclipai.plugin-llm-wiki")) candidates.push(root);
     if (basename8(root) === "plugin-data" && companyId) {
-      candidates.push(join24(root, companyId, "paperclipai.plugin-llm-wiki"));
+      candidates.push(join25(root, companyId, "paperclipai.plugin-llm-wiki"));
     }
     for (const candidate of candidates) {
       try {
@@ -36519,7 +37085,7 @@ function attachPiProjectInstructionExtension(profile, input) {
       "managed Pi profile is missing"
     );
   }
-  const projectInstructionExtensionPath = join24(
+  const projectInstructionExtensionPath = join25(
     profile.profileRoot,
     "extensions",
     MANAGED_PI_PROJECT_INSTRUCTION_FILENAME
@@ -36568,17 +37134,17 @@ function buildExecutorEnv(config, command, workspace) {
   };
 }
 function preparePiModelCallProfile(commandId, baseEnv, options = {}) {
-  const profileRoot = mkdtempSync5(join24(tmpdir(), "amaster-pi-model-call-"));
-  const home = join24(profileRoot, "home");
-  const sessionsDir = join24(profileRoot, "sessions");
-  const tempDir = join24(profileRoot, "tmp");
+  const profileRoot = mkdtempSync5(join25(tmpdir(), "amaster-pi-model-call-"));
+  const home = join25(profileRoot, "home");
+  const sessionsDir = join25(profileRoot, "sessions");
+  const tempDir = join25(profileRoot, "tmp");
   for (const directory of [home, sessionsDir, tempDir]) {
     mkdirSync13(directory, { recursive: true, mode: 448 });
   }
   try {
     const extensionArgs = [];
     if (options.responseContract) {
-      const extensionPath = join24(profileRoot, "model-call-output-contract.js");
+      const extensionPath = join25(profileRoot, "model-call-output-contract.js");
       writeFileSync14(
         extensionPath,
         modelCallOutputContractExtensionSource(options.responseContract.maxOutputTokens),
@@ -36958,6 +37524,8 @@ function runtimeLogBatchBytes(command, entries) {
   return Buffer.byteLength(JSON.stringify({ entries: runtimeLogBatchEntries(command, entries) }));
 }
 function createLiveOutputLogger(config, command, executorKind, protectedValues = [], onMcpToolResults = null, options = {}) {
+  const timing = executionTiming("runner.output", command);
+  const observedTimingEvents = /* @__PURE__ */ new Set();
   const buffers = { stdout: "", stderr: "" };
   const displayCounts = { stdout: 0, stderr: 0, system: 0 };
   const sourceCounts = { stdout: 0, stderr: 0 };
@@ -37051,6 +37619,11 @@ function createLiveOutputLogger(config, command, executorKind, protectedValues =
     }
     jsonlEventCount += 1;
     const eventType = countEventType(event);
+    const deltaType = asRecord(asRecord(event).assistantMessageEvent).type;
+    if (eventType === "message_update" && ["text_delta", "thinking_delta"].includes(deltaType) && !observedTimingEvents.has(deltaType)) {
+      observedTimingEvents.add(deltaType);
+      timing(deltaType === "text_delta" ? "first_text_delta" : "first_thinking_delta");
+    }
     const progressType = options2.suppressMeaningful === true ? null : meaningfulProgressType(event, entry);
     if (progressType) {
       meaningfulProgressEventCount += 1;
@@ -37499,7 +38072,7 @@ function allProcessCwdsByPid() {
   if (process.platform === "linux") {
     const procEntries = (() => {
       try {
-        return readdirSync12("/proc", { withFileTypes: true });
+        return readdirSync13("/proc", { withFileTypes: true });
       } catch {
         return [];
       }
@@ -37592,13 +38165,13 @@ function walkManagedWorkdirs(root) {
     if (!current) continue;
     let entries = [];
     try {
-      entries = readdirSync12(current, { withFileTypes: true });
+      entries = readdirSync13(current, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const fullPath = join24(current, entry.name);
+      const fullPath = join25(current, entry.name);
       if (entry.name === "workdir" && existsSync18(workspaceManifestPath(fullPath))) {
         workdirs.push(fullPath);
         continue;
@@ -37789,7 +38362,7 @@ function runExecutor(command, args, options) {
     };
     const stdoutDecoder = createUtf8StreamDecoder(handleStdoutText);
     const stderrDecoder = createUtf8StreamDecoder(handleStderrText);
-    const finish = (result2) => {
+    const finish = async (result2) => {
       if (settled) return;
       settled = true;
       stdoutDecoder.end();
@@ -37806,7 +38379,7 @@ function runExecutor(command, args, options) {
       if (stoppedResidentTimer) clearTimeout(stoppedResidentTimer);
       if (completionOutputDrainTimer) clearTimeout(completionOutputDrainTimer);
       if (stdinSettlementTimer) clearTimeout(stdinSettlementTimer);
-      const browserCredentialAuthReceipts = browserCredentialChannel?.receipts() ?? [];
+      const browserCredentialAuthReceipts = await browserCredentialChannel?.receipts() ?? [];
       browserCredentialChannel?.close();
       options.signal?.removeEventListener?.("abort", abort);
       resolveRun({
@@ -37917,7 +38490,7 @@ function runExecutor(command, args, options) {
         child.stdout.destroy();
         child.stderr.destroy();
       }
-      finish({
+      void finish({
         exitCode: closeCode,
         signal: closeSignal,
         timedOut: stopReason === "timeout",
@@ -38601,10 +39174,10 @@ async function completeCommand(config, command, status, result2, error) {
 function resultOutboxDir(config) {
   const explicit = readString(process.env.AMASTER_RESULT_OUTBOX_DIR);
   if (explicit) return resolve19(expandHomePath(explicit));
-  return join24(dirname12(stateFilePath(process.env)), "result-outbox");
+  return join25(dirname12(stateFilePath(process.env)), "result-outbox");
 }
 function resultOutboxInvalidDir(config) {
-  return join24(resultOutboxDir(config), "invalid");
+  return join25(resultOutboxDir(config), "invalid");
 }
 function writeResultOutboxEntry(config, entry) {
   const dir = resultOutboxDir(config);
@@ -38618,13 +39191,13 @@ function writeResultOutboxEntry(config, entry) {
     ...entry,
     ...pendingLogEntries.length > 0 ? { pendingLogEntries } : {}
   };
-  writeFileSync14(join24(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
+  writeFileSync14(join25(dir, resultOutboxFileName(entry.commandId)), `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
 }
 function moveResultOutboxEntryToInvalid(config, file, fullPath, reason, detail, original) {
   const invalidDir = resultOutboxInvalidDir(config);
   mkdirSync13(invalidDir, { recursive: true });
-  const invalidPath = join24(invalidDir, file);
+  const invalidPath = join25(invalidDir, file);
   if (original === void 0) {
     try {
       renameSync11(fullPath, invalidPath);
@@ -38647,7 +39220,7 @@ function moveResultOutboxEntryToInvalid(config, file, fullPath, reason, detail,
 function readValidResultOutboxEntryOrQuarantine(config, file, fullPath) {
   let entry;
   try {
-    entry = JSON.parse(readFileSync19(fullPath, "utf8"));
+    entry = JSON.parse(readFileSync20(fullPath, "utf8"));
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     moveResultOutboxEntryToInvalid(config, file, fullPath, "malformed_result_outbox_json", message);
@@ -38694,7 +39267,7 @@ function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err)
     ...typeof err?.httpStatus === "number" ? { httpStatus: err.httpStatus } : {},
     lastError: truncateText(err instanceof Error ? err.message : String(err), 1e3)
   };
-  const invalidPath = join24(invalidDir, file);
+  const invalidPath = join25(invalidDir, file);
   writeFileSync14(invalidPath, `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
   try {
@@ -38710,10 +39283,10 @@ function quarantineResultOutboxEntry(config, fullPath, file, entry, reason, err)
 async function flushResultOutbox(config) {
   const dir = resultOutboxDir(config);
   if (!existsSync18(dir)) return { attempted: 0, completed: 0 };
-  const files = readdirSync12(dir).filter((name) => name.endsWith(".json")).sort();
+  const files = readdirSync13(dir).filter((name) => name.endsWith(".json")).sort();
   let completed = 0;
   for (const file of files) {
-    const fullPath = join24(dir, file);
+    const fullPath = join25(dir, file);
     let entry = readValidResultOutboxEntryOrQuarantine(config, file, fullPath);
     if (!entry) continue;
     const pendingLogEntries = Array.isArray(entry.pendingLogEntries) ? entry.pendingLogEntries.filter((logEntry) => typeof asRecord(logEntry).message === "string") : [];
@@ -38952,7 +39525,7 @@ async function materializeIssueAttachments(config, command, workspace) {
     runtimeAuth,
     issueId
   );
-  const targetDir = join24(workspace.cwd, "input-attachments");
+  const targetDir = join25(workspace.cwd, "input-attachments");
   mkdirSync13(targetDir, { recursive: true });
   const usedFilenames = /* @__PURE__ */ new Set();
   const materialized = [];
@@ -38966,14 +39539,14 @@ async function materializeIssueAttachments(config, command, workspace) {
     let filename = safeMaterializedAttachmentFilename(attachment, index);
     filename = dedupeMaterializedFilename(filename, index, usedFilenames);
     usedFilenames.add(filename);
-    const targetPath = join24(targetDir, filename);
+    const targetPath = join25(targetDir, filename);
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
-    if (attachment.initializationInput === true && (body.byteLength !== attachment.byteSize || createHash19("sha256").update(body).digest("hex") !== attachment.sha256)) {
+    if (attachment.initializationInput === true && (body.byteLength !== attachment.byteSize || createHash20("sha256").update(body).digest("hex") !== attachment.sha256)) {
       throw new Error("Initialization input content does not match its preparation receipt");
     }
     writeFileSync14(targetPath, body);
     const attachmentId = readString(attachment.id);
-    const actualSha256 = createHash19("sha256").update(body).digest("hex");
+    const actualSha256 = createHash20("sha256").update(body).digest("hex");
     const lineageCandidates = lineageCandidatesByAttachmentId.get(attachmentId) ?? [];
     const lineage = selectAttachmentLineage(lineageCandidates, actualSha256);
     if (lineageCandidates.length > 0 && !lineage) {
@@ -39038,7 +39611,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
   if (manifest.version !== 1 || !Array.isArray(manifest.entries)) {
     throw new Error("artifact_input_manifest_invalid: expected version 1 entries array");
   }
-  const targetRoot = join24(workspace.cwd, "input-artifacts");
+  const targetRoot = join25(workspace.cwd, "input-artifacts");
   rmSync12(targetRoot, { recursive: true, force: true });
   mkdirSync13(targetRoot, { recursive: true });
   const usedPaths = /* @__PURE__ */ new Set();
@@ -39058,7 +39631,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       throw new Error(`artifact_input_manifest_invalid: entry ${index} contentPath does not match attachmentId`);
     }
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
-    const actualSha256 = createHash19("sha256").update(body).digest("hex");
+    const actualSha256 = createHash20("sha256").update(body).digest("hex");
     if (body.byteLength !== byteSize || actualSha256 !== sha2563) {
       throw new Error(
         `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha2563} actualSha256=${actualSha256}`
@@ -39069,15 +39642,15 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       id: attachmentId,
       originalFilename: readString(entry.originalFilename)
     }, index);
-    let relativePath = join24("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    let relativePath = join25("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     if (usedPaths.has(relativePath)) {
       const ext = extname3(filename);
       const stem = ext ? filename.slice(0, -ext.length) : filename;
       filename = `${stem}-${index + 1}${ext}`;
-      relativePath = join24("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+      relativePath = join25("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
     }
     usedPaths.add(relativePath);
-    const targetPath = join24(workspace.cwd, relativePath);
+    const targetPath = join25(workspace.cwd, relativePath);
     mkdirSync13(dirname12(targetPath), { recursive: true });
     writeFileSync14(targetPath, body);
     chmodSync8(targetPath, 292);
@@ -39099,7 +39672,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
     version: 1,
     entries: materialized.map(({ path: _path, relativePath, ...entry }) => ({ ...entry, path: relativePath }))
   };
-  const manifestPath = join24(targetRoot, "artifact-input-manifest.json");
+  const manifestPath = join25(targetRoot, "artifact-input-manifest.json");
   writeFileSync14(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
   chmodSync8(manifestPath, 292);
   updateWorkspaceManifest(workspaceManifestPath(workspace), { artifactInputManifest: localManifest });
@@ -39112,7 +39685,7 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
   const runtimeAuth = commandRuntimeAuth(command);
   const files = Array.isArray(mention.files) ? mention.files : [];
   if (files.length === 0 || !readString(runtimeAuth.apiUrl) || !readString(runtimeAuth.apiKey)) return empty;
-  const targetDir = join24(workspace.cwd, "input-artifacts", "mentioned");
+  const targetDir = join25(workspace.cwd, "input-artifacts", "mentioned");
   rmSync12(targetDir, { recursive: true, force: true });
   mkdirSync13(targetDir, { recursive: true });
   const usedFilenames = /* @__PURE__ */ new Set();
@@ -39137,7 +39710,7 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
       });
       continue;
     }
-    const actualSha256 = createHash19("sha256").update(body).digest("hex");
+    const actualSha256 = createHash20("sha256").update(body).digest("hex");
     const expectedSha256 = readString(entry.sha256)?.toLowerCase() ?? null;
     const expectedByteSize = readNumber(entry.byteSize, null);
     if (expectedByteSize !== null && body.byteLength !== expectedByteSize || expectedSha256 && actualSha256 !== expectedSha256) {
@@ -39158,7 +39731,7 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
     }, index);
     filename = dedupeMaterializedFilename(filename, index, usedFilenames);
     usedFilenames.add(filename);
-    const targetPath = join24(targetDir, filename);
+    const targetPath = join25(targetDir, filename);
     writeFileSync14(targetPath, body);
     chmodSync8(targetPath, 292);
     materialized.push({
@@ -39176,7 +39749,7 @@ async function materializeMentionedArtifactFiles(config, command, workspace) {
   return { materialized, skipped };
 }
 function issueCheckpointDir(workspace) {
-  return join24(dirname12(workspace.runDir), "checkpoint");
+  return join25(dirname12(workspace.runDir), "checkpoint");
 }
 async function clearIssueCheckpoint(config, command, workspace, reason, consumedSource = null) {
   const checkpointDir = issueCheckpointDir(workspace);
@@ -39186,7 +39759,7 @@ async function clearIssueCheckpoint(config, command, workspace, reason, consumed
     if (!sourceRunId) return false;
     let manifest;
     try {
-      manifest = asRecord(JSON.parse(readFileSync19(join24(checkpointDir, "manifest.json"), "utf8")));
+      manifest = asRecord(JSON.parse(readFileSync20(join25(checkpointDir, "manifest.json"), "utf8")));
     } catch {
       return false;
     }
@@ -39205,7 +39778,7 @@ function safeCheckpointRelativePath(rawPath) {
   return normalized;
 }
 function hashFileSha256(filePath) {
-  return createHash19("sha256").update(readFileSync19(filePath)).digest("hex");
+  return createHash20("sha256").update(readFileSync20(filePath)).digest("hex");
 }
 function expectedContinuationCheckpoint(command) {
   const payload = asRecord(command.payload);
@@ -39231,7 +39804,7 @@ function expectedContinuationCheckpoint(command) {
 }
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);
-  const manifestPath = join24(checkpointDir, "manifest.json");
+  const manifestPath = join25(checkpointDir, "manifest.json");
   const expectedContinuation = expectedContinuationCheckpoint(command);
   const nativeRequest = asRecord(asRecord(command.payload).nativeSession);
   let portableNativeSession;
@@ -39261,7 +39834,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
   }
   let manifest;
   try {
-    manifest = asRecord(JSON.parse(readFileSync19(manifestPath, "utf8")));
+    manifest = asRecord(JSON.parse(readFileSync20(manifestPath, "utf8")));
   } catch (err) {
     rmSync12(checkpointDir, { recursive: true, force: true });
     throw new Error(`invalid issue checkpoint manifest: ${err instanceof Error ? err.message : String(err)}`);
@@ -39292,7 +39865,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
         throw new Error("continuation_checkpoint_lineage_mismatch");
       }
     }
-    const filesRoot = files.length > 0 ? realpathSync12(join24(checkpointDir, "files")) : null;
+    const filesRoot = files.length > 0 ? realpathSync12(join25(checkpointDir, "files")) : null;
     const workspaceRoot = realpathSync12(workspace.cwd);
     const validated = [];
     let totalBytes = 0;
@@ -39337,7 +39910,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       }
       let existingTarget = null;
       try {
-        existingTarget = lstatSync13(target);
+        existingTarget = lstatSync15(target);
       } catch (err) {
         if (err?.code !== "ENOENT") throw err;
       }
@@ -39348,10 +39921,10 @@ async function materializeIssueCheckpoint(config, command, workspace) {
         materialized.push(relativePath);
         continue;
       }
-      const temporaryTarget = join24(targetParent, `.${basename8(target)}.checkpoint-${randomUUID2()}.tmp`);
+      const temporaryTarget = join25(targetParent, `.${basename8(target)}.checkpoint-${randomUUID2()}.tmp`);
       try {
         copyFileSync2(source, temporaryTarget);
-        const temporaryStat = lstatSync13(temporaryTarget);
+        const temporaryStat = lstatSync15(temporaryTarget);
         if (!temporaryStat.isFile() || temporaryStat.size !== expectedByteSize || hashFileSha256(temporaryTarget) !== expectedSha256) {
           throw new Error(`issue checkpoint target verification failed: ${relativePath}`);
         }
@@ -39384,7 +39957,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
   const commandKey = readString(command.commandId)?.replace(/[^A-Za-z0-9_-]/g, "-") ?? randomUUID2();
   const stagingDir = `${checkpointDir}.tmp-${commandKey}`;
   const backupDir = `${checkpointDir}.previous-${commandKey}`;
-  const filesDir = join24(stagingDir, "files");
+  const filesDir = join25(stagingDir, "files");
   rmSync12(stagingDir, { recursive: true, force: true });
   rmSync12(backupDir, { recursive: true, force: true });
   mkdirSync13(filesDir, { recursive: true });
@@ -39404,7 +39977,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       }
       let sourceStat;
       try {
-        sourceStat = lstatSync13(sourceCandidate);
+        sourceStat = lstatSync15(sourceCandidate);
       } catch (err) {
         if (err?.code === "ENOENT") {
           throw new Error(`continuation_checkpoint_file_unavailable: ${requiredPath}`);
@@ -39440,7 +40013,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       if (!pathWithin3(target, filesDir)) continue;
       mkdirSync13(dirname12(target), { recursive: true });
       copyFileSync2(ownedSource, target);
-      const storedStat = lstatSync13(target);
+      const storedStat = lstatSync15(target);
       if (!storedStat.isFile() || storedStat.size !== byteSize) {
         throw new Error(`issue checkpoint copy verification failed: ${relativePath}`);
       }
@@ -39474,7 +40047,7 @@ async function saveIssueCheckpoint(config, command, workspace, candidates, optio
       totalBytes,
       files
     };
-    writeFileSync14(join24(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
+    writeFileSync14(join25(stagingDir, "manifest.json"), `${JSON.stringify(manifest, null, 2)}
 `);
     const replacingExistingCheckpoint = existsSync18(checkpointDir);
     if (replacingExistingCheckpoint) renameSync11(checkpointDir, backupDir);
@@ -39529,6 +40102,28 @@ function piOutputValidationError(parsed, options = {}) {
   }
   return null;
 }
+function executionTiming(scope, command) {
+  if (process.env.MIRRORX_EXECUTION_TIMING_ENABLED !== "true") return () => {
+  };
+  const started = performance.now();
+  let previous = started;
+  return (phase) => {
+    const now = performance.now();
+    process.stderr.write(`${JSON.stringify({ executionTiming: {
+      version: 1,
+      scope,
+      commandId: command.commandId,
+      issueId: commandIssueId(command),
+      runId: commandRunId(command),
+      phase,
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      elapsedMs: Number((now - started).toFixed(3)),
+      segmentMs: Number((now - previous).toFixed(3))
+    } })}
+`);
+    previous = now;
+  };
+}
 async function ackCommand(config, command, phase = "preparing") {
   const connectorId = requireConnectorId(config);
   return await postJsonWithRetry(config, `/api/amaster/runtime-connectors/${connectorId}/commands/${command.commandId}/ack`, {
@@ -39538,6 +40133,8 @@ async function ackCommand(config, command, phase = "preparing") {
   });
 }
 async function executeRunCommand(config, command) {
+  const timing = executionTiming("runner.execution", command);
+  timing("prepare_started");
   const preparationStartedAtMs = Date.now();
   let preparationLogChain = Promise.resolve();
   const enqueuePreparationLog = (stream, level, message, payload = {}) => {
@@ -39658,6 +40255,7 @@ async function executeRunCommand(config, command) {
   const browserSession = commandBrowserSession(command);
   const browserCredentialPresentationKind = browserCredentialPresentation(command);
   const browserCredentialPlan = browserCredentialEnvPlan(command, browserCredentialPresentationKind);
+  const browserCredentialAuthority = browserCredentialPrivateAuthority(command, browserCredentialPresentationKind);
   if (browserCredentialPlan && executor.kind !== "pi") {
     throw new Error("browser_credential_env_pi_executor_required");
   }
@@ -39667,6 +40265,13 @@ async function executeRunCommand(config, command) {
   const nativeSessionRequest = asRecord(asRecord(command.payload).nativeSession);
   let invocation = null;
   let executorEnv = buildExecutorEnv(config, command, workspace);
+  delete executorEnv[BROWSER_CREDENTIAL_AUTHORITY_ENV];
+  if (browserCredentialAuthority) {
+    executorEnv = {
+      ...executorEnv,
+      [BROWSER_CREDENTIAL_AUTHORITY_ENV]: JSON.stringify(browserCredentialAuthority)
+    };
+  }
   let managedMcpProfile = null;
   let managedMcpCleanup = null;
   let cleanupManagedMcpProfile = null;
@@ -39786,7 +40391,7 @@ async function executeRunCommand(config, command) {
           executorCommand: invocation.command,
           executorHome: workspace.executorHome,
           runDir: workspace.runDir,
-          runtimeCacheRoot: join24(dirname12(config.daemonStateFile), "cache"),
+          runtimeCacheRoot: join25(dirname12(config.daemonStateFile), "cache"),
           cwd,
           runtimeAuth: commandRuntimeAuth(command),
           nativeSession: asRecord(asRecord(executionCommand.payload).nativeSession),
@@ -40049,7 +40654,9 @@ async function executeRunCommand(config, command) {
       runId: commandRunId(command),
       executorKind: executor.kind
     });
+    timing("before_spawn_ack");
     await ackCommand(config, command, "spawned");
+    timing("spawn_acknowledged");
     enqueuePreparationLog("system", "info", `Starting ${executor.kind} executor`, {
       executorKind: executor.kind,
       cwd,
@@ -40058,6 +40665,7 @@ async function executeRunCommand(config, command) {
       preparationStages
     });
     await preparationLogChain;
+    timing("preparation_logs_delivered");
     const abortController = new AbortController();
     if (browserCredentialPlan) {
       browserCredentialEnvMaterialization = await runExecutionStage(
@@ -40157,7 +40765,9 @@ async function executeRunCommand(config, command) {
         { signal: abortController.signal }
       );
     } : null;
+    let firstOutput = false;
     try {
+      timing("before_executor_spawn");
       execution = await runExecutor(invocation.command, invocation.args, {
         cwd: executor.kind === "codebuddy" ? managedMcpProfile?.cwd ?? cwd : cwd,
         env: executorEnv,
@@ -40170,6 +40780,10 @@ async function executeRunCommand(config, command) {
         ...piExecutorIdentity ? { spawnIdentity: piExecutorIdentity } : {},
         ...browserCredentialConsumer ? { browserCredentialConsumer } : {},
         onOutput: (stream, chunk, rawBytes) => {
+          if (!firstOutput) {
+            firstOutput = true;
+            timing("first_executor_output");
+          }
           noteActiveRunOutput(command, stream, chunk, rawBytes);
           return liveOutputLogger.write(stream, chunk);
         }
@@ -40762,7 +41376,10 @@ async function executeRunCommand(config, command) {
   }
 }
 async function processCommand(config, command) {
+  const timing = executionTiming("runner.dispatch", command);
+  timing("received");
   await ackCommand(config, command);
+  timing("preparing_acknowledged");
   try {
     if (command.commandType === "browser_session") {
       const error = new Error("legacy_browser_session_command_retired");