diff --git a/tests/runner-e2e/installed-daytona-plugin.test.ts b/tests/runner-e2e/installed-daytona-plugin.test.ts
index a3d65456116..ec0df9d4b98 100644
--- a/tests/runner-e2e/installed-daytona-plugin.test.ts
+++ b/tests/runner-e2e/installed-daytona-plugin.test.ts
@@ -69,6 +69,8 @@ it.skipIf(process.platform === "win32")("rejects a FIFO authority without waitin
   const f=await fixture();const p=f.env.PAPERCLIP_RUNNER_E2E_INSTALLED_DAYTONA_PLUGIN_AUTHORITY!;await rm(p);execFileSync("/usr/bin/mkfifo",[p],{timeout:5000,env:{}});await expect(verifyInstalledDaytonaPlugin(f.env,[cell])).rejects.toThrow("bounded unlinked regular file");
 });
 it("uses the verified public package in the existing API and rejects changed bytes before any mutation", async () => {
+  // This positive fixture models the sanitized installed launcher, not pnpm's parent environment.
+  vi.stubEnv("NODE_OPTIONS", undefined); vi.stubEnv("NODE_PATH", undefined);
   const f=await fixture(); for(const [k,v]of Object.entries(f.env))vi.stubEnv(k,v!);
   const calls:unknown[]=[];
   const api={async post(url:string,data:unknown){calls.push({url,data});throw new Error("stop-after-public-install");}} as unknown as RunnerApi;
@@ -77,4 +79,16 @@ it("uses the verified public package in the existing API and rejects changed byt
   expect(calls).toEqual([{url:"/api/plugins/install",data:{packageName:f.authority.plugin.root,isLocalPath:true}}]);
   calls.length=0;await writeFile(join(f.authority.plugin.root,"dist/worker.js"),"// changed");await expect(setupLiveFixtures(input)).rejects.toThrow("reviewed pins");expect(calls).toEqual([]);
 });
+it.each(["NODE_OPTIONS", "NODE_PATH"])("rejects ambient %s before the plugin install API", async (key) => {
+  const f = await fixture();
+  for (const [name, value] of Object.entries(f.env)) vi.stubEnv(name, value!);
+  vi.stubEnv("NODE_OPTIONS", undefined); vi.stubEnv("NODE_PATH", undefined);
+  const post = vi.fn();
+  const api = { post } as unknown as RunnerApi;
+  for (const value of ["", "foreign"]) {
+    vi.stubEnv(key, value);
+    await expect(setupLiveFixtures({ api, execution: cell, executionNonce: "nonce", workspacePath: "/tmp/workspace", credentials: {} })).rejects.toThrow("ambient Node injection");
+    expect(post).not.toHaveBeenCalled();
+  }
+});
 it("keeps fixture authority out of the production server environment", async()=>{const f=await fixture();const env=buildPaperclipServerEnvironment(f.env);for(const k of installedDaytonaPluginKeys)expect(env[k]).toBeUndefined();});
diff --git a/ui/src/adapters/config-sections.test.tsx b/ui/src/adapters/config-sections.test.tsx
index 5903e75e40d..67ae731a453 100644
--- a/ui/src/adapters/config-sections.test.tsx
+++ b/ui/src/adapters/config-sections.test.tsx
@@ -75,7 +75,9 @@ describe("adapter configuration sections", () => {
     const policy = renderSection(CodexLocalConfigFields, "paperclip_runner", "runPolicy", config);
 
     expect(adapter).toContain('<option value="claude" selected="">Claude</option>');
-    expect(adapter).toContain('<option value="pi" disabled="">Pi — qualification pending</option>');
+    expect(adapter).toContain('<option value="pi">Pi</option>');
+    expect(adapter).toContain('<option value="cursor" disabled="">Cursor — qualification pending</option>');
+    expect(adapter).toContain('<option value="copilot" disabled="">GitHub Copilot — qualification pending</option>');
     expect(adapter).not.toContain("Runner lifecycle");
     expect(policy).toContain("Runner lifecycle");
     expect(policy).not.toContain("ACP agent");