@amaster.ai/employee-runtime-connector 0.1.0-beta.2 → 0.1.0-beta.3

package/README.md

@@ -21,6 +21,8 @@ Do not use `latest`, `^`, or `~` in a runtime image. The image tag and connector
 
 Immutable images should pin an exact package version as their baseline. The current connector does not download or replace runtime code while running; package upgrades and rollbacks belong to the image build and rollout.
 
+The publish workflow verifies that npm records the publishing commit as the package `gitHead`, then updates the repository deployment pin. Remote deployment accepts that package only when its `gitHead` is an ancestor of the target source commit and the connector package path is unchanged between them. This path-only comparison is valid because the published connector is self-contained; if runtime code starts importing workspace source outside this package, expand the provenance scope and tests before release. After restart, deployment also verifies the package CLI version inside the container. Do not update the deployment pin manually to bypass either provenance check.
+
 ## Package Contents
 
 - `dist/amaster-runtime.mjs`: configuration, pairing, workspace, diagnostics, and daemon lifecycle CLI.

package/dist/amaster-runtime-daemon.mjs

@@ -2314,7 +2314,7 @@ import { copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSy
 import { homedir, hostname } from "node:os";
 import { basename, delimiter, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
 import { spawn, spawnSync } from "node:child_process";
-const CONNECTOR_VERSION = "0.1.0-beta.2";
+const CONNECTOR_VERSION = "0.1.0-beta.3";
 const MAX_INFERRED_ARTIFACT_UPLOADS = 20;
 const MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 const CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1000;
@@ -3508,7 +3508,9 @@ function runtimeActionsInstruction(options = {}) {
     : [];
   return [
     "Runtime action bridge:",
-    "If direct AMaster API requests are unavailable from the executor sandbox, do not stop at blocked. Instead finish with this exact marker and a JSON object:",
+    "Choose exactly one mutation path for each requested action: direct AMaster API or the runtime action bridge. Never replay the same mutation through both paths.",
+    "If direct AMaster API requests succeed for all requested mutations, finish with a normal summary and do not emit or mention the AMASTER_RUNTIME_ACTIONS marker.",
+    "If direct AMaster API requests are unavailable from the executor sandbox, do not stop at blocked. Use the runtime action bridge for the unapplied mutations.",
     "Use runtime actions as a continuation patch, not as a full replay. If the wake reason or latest comments say a confirmation was accepted, rejected, or that no more child tasks/interactions should be created, do not recreate those earlier actions. Add the final result comment and update the parent task instead.",
     "If the wake reason is issue_children_completed, treat the completed child tasks as already resolved blockers. Do not recreate blocker child tasks, do not repeat the first-run blocker plan, and do not create another review path unless new human input is truly required. Summarize the completed child work and use update_parent status done when no human review is needed.",
     "Use update_parent status done when no human review is needed. Prefer creating a pending review path such as request_confirmation, request_checkbox_confirmation, ask_user_questions, or suggest_tasks before status in_review; if a bare in_review update is emitted, AMaster will create a fallback request_confirmation before PATCH.",
@@ -3530,7 +3532,7 @@ function runtimeActionsInstruction(options = {}) {
     options.canOrchestrateOrganization
       ? "When assigning a newly hired agent's first task in the same action batch, set clientKey on the agent_hire action and set assigneeAgentClientKey or agentClientKey on the create_child_task action to that same key. Do not leave the first task assigned to the current CEO/executing agent unless the CEO should actually do the work."
       : "",
-    "Output format: write the marker AMASTER_RUNTIME_ACTIONS, then exactly one fenced json object. Use this literal shape with real action objects: {\"version\":1,\"actions\":[{\"type\":\"add_comment\",\"body\":\"Progress or result summary\"}]}.",
+    "Fallback output format: write the marker AMASTER_RUNTIME_ACTIONS, then exactly one fenced json object. Use this literal shape with real action objects: {\"version\":1,\"actions\":[{\"type\":\"add_comment\",\"body\":\"Progress or result summary\"}]}.",
     "The runtime action block must be strict JSON parseable by JSON.parse. Do not use ellipses, placeholders such as [...], comments, trailing commas, single quotes, markdown tables outside quoted strings, or raw double quotes inside string values. Escape quotes and newlines in string values, or generate the block with JSON.stringify / @amaster/runtime-sdk before printing it.",
     "Before final output, validate the runtime action block with JSON.parse. If it would fail, fix the JSON and only then print AMASTER_RUNTIME_ACTIONS.",
     `Allowed action types: ${allowedActionTypes}.`,
@@ -5269,9 +5271,10 @@ function extractRuntimeActionEnvelope(text) {
   const structuredEnvelope = tryExtractStructuredRuntimeActionEnvelope(text);
   if (structuredEnvelope) return structuredEnvelope;
 
-  const markerIndex = text.indexOf("AMASTER_RUNTIME_ACTIONS");
-  if (markerIndex === -1) return null;
-  const jsonStart = text.indexOf("{", markerIndex);
+  const markerMatch = /^[ \t]*AMASTER_RUNTIME_ACTIONS[ \t]*$/m.exec(text);
+  if (!markerMatch) return null;
+  const markerEnd = markerMatch.index + markerMatch[0].length;
+  const jsonStart = text.indexOf("{", markerEnd);
   if (jsonStart === -1) {
     const err = new Error("AMASTER_RUNTIME_ACTIONS JSON could not be parsed: missing JSON object");
     err.runtimeActionType = "parse";
@@ -5290,7 +5293,9 @@ function extractRuntimeActionEnvelope(text) {
 
 function tryExtractStructuredRuntimeActionEnvelope(text) {
   const source = String(text ?? "");
-  const markerRe = /(^|\r?\n)[ \t]*AMASTER_RUNTIME_ACTIONS\b/g;
+  // Completion detection is permissive about fenced JSON, but the protocol
+  // marker itself must still be the only content on its line.
+  const markerRe = /(^|\r?\n)[ \t]*AMASTER_RUNTIME_ACTIONS[ \t]*(?:\r?\n|$)/g;
   let match;
   while ((match = markerRe.exec(source)) !== null) {
     let cursor = markerRe.lastIndex;
@@ -6116,8 +6121,13 @@ function runtimeActionReviewConfirmation(action, runtimeAuth, command, actionCon
     payload: {
       version: 1,
       prompt: copy.prompt,
-      acceptLabel: "确认，继续推进",
-      rejectLabel: "需要修订",
+      resolutionMode: "review",
+      acceptLabel: "接受并继续",
+      requestChangesLabel: "退回修改",
+      requestChangesReasonLabel: "说明需要补充或修改的内容",
+      rejectLabel: "拒绝并停止",
+      rejectRequiresReason: true,
+      rejectReasonLabel: "说明停止该任务的原因",
       detailsMarkdown,
       target: {
         type: "custom",
@@ -6599,9 +6609,14 @@ function normalizeRequestConfirmationPayload(payload, action) {
   return {
     version: normalized.version === 1 ? normalized.version : 1,
     prompt,
+    ...(readString(normalized.resolutionMode) === "review" ? { resolutionMode: "review" } : {}),
     ...(readString(normalized.acceptLabel) ?? readString(action.acceptLabel)
       ? { acceptLabel: readString(normalized.acceptLabel) ?? readString(action.acceptLabel) }
       : {}),
+    ...(readString(normalized.requestChangesLabel) ? { requestChangesLabel: readString(normalized.requestChangesLabel) } : {}),
+    ...(readString(normalized.requestChangesReasonLabel)
+      ? { requestChangesReasonLabel: readString(normalized.requestChangesReasonLabel) }
+      : {}),
     ...(readString(normalized.rejectLabel) ?? readString(action.rejectLabel)
       ? { rejectLabel: readString(normalized.rejectLabel) ?? readString(action.rejectLabel) }
       : {}),

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.0-beta.2";
+const CONNECTOR_VERSION = "0.1.0-beta.3";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.0-beta.2",
+  "version": "0.1.0-beta.3",
   "description": "AMaster Employee runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",