@amaster.ai/employee-runtime-connector 0.1.0-beta.43 → 0.1.0-beta.44

package/README.md

@@ -32,6 +32,18 @@ The source of truth lives under this package's `src/` directory. The package bui
 
 Runtime code belongs in the container image. Persist only connector state, the result outbox, and workspaces under the configured state directory.
 
+## Pi terminal cleanup outcome
+
+Pi execution uses three separate evidence layers:
+
+1. a valid successful `agent_end` and output/usage contract;
+2. a durable, inspectable Runtime Action receipt or finalized Runtime Artifact;
+3. process cleanup disposition.
+
+An exact process-kill `EPERM` error emitted only after the first two layers have completed may be isolated as a failed `cleanupDisposition` warning without changing the command's successful business result. Both accepted shapes require `kill` and `EPERM`; generic filesystem/process permission text such as `EPERM: operation not permitted, unlink ...` is a business error. A `runtime_action.status` readback is evidence only when its call/plan ref matches an earlier submit/commit receipt in the same transcript. The diagnostic and durable evidence reference remain in the result. Text-only or action-only-without-assistant-output streams, standalone governed reads, non-effect Runtime Action tools, rejected or pending effects, pre-terminal errors, provider failures, timeout, cancellation, resource limits, any signal, live residue, and uncertain ownership remain failures.
+
+This isolation does not schedule a retry or a second business continuation. Command result delivery and the result outbox remain the sole idempotency boundary.
+
 ## Mutation attestation
 
 The daemon reports its connector contract, exact package/build, platform/architecture, and discovered executor versions on every heartbeat. The server compares those facts with `AMASTER_RUNTIME_RECOMMENDED_VERSION` and `AMASTER_RUNTIME_RECOMMENDED_BUILD_COMMIT`, persists a short-lived content-bound attestation, and correlates Runtime V2 commands to that proof.

package/dist/amaster-runtime-daemon.mjs

@@ -2558,6 +2558,7 @@ function isTerminalResultOutboxStatus(status) {
 
 // src/amaster-runtime-daemon/prompt-compiler.mjs
 var DEFAULT_PROMPT_BUDGET_CHARS = 32e3;
+var DEADLINE_POSTURE_GUARD = "Named-window:skip_this_window_and_continue; no lower-quality/approval-bypass/fabrication/whole-task-stop; deadline_posture_receipt=targetMilestoneRef,posture,onMiss,taskContinuation,next owner/action; not Server proof";
 var MIN_PROMPT_BUDGET_CHARS = 8192;
 var CONTINUATION_WAKE_PATTERN = /(continuation|continued|retry|approved|liveness|resume|max_turn)/i;
 var RECOVERY_WAKE_REASONS = /* @__PURE__ */ new Set([
@@ -2670,9 +2671,10 @@ function governedReadSection(context) {
 function fixedRules(input, includeIssueLine) {
   return [
     "## AMaster Runtime Connector Task",
-    "You are executing a task dispatched by MirrorX from the central control plane.",
-    "Work only inside the declared workspace. Make concrete progress and finish with a concise result summary.",
+    "MirrorX task.",
+    "Use only the declared workspace; make concrete progress and report concisely.",
     "Before changing the task status to done, audit every explicit requirement in the task against the final evidence. A successful tool or document write proves delivery, not acceptance: inspect the delivered content for required sections, diagrams, tables, and factual constraints. Do not leave stale in-progress wording such as \u201Ccurrent run\u201D in a terminal deliverable; rewrite it to the final observed state. Do not list finalization itself as remaining or next work in a terminal deliverable. If any requirement is missing or cannot be verified, do not mark done. To request review, use create_interaction with kind request_confirmation and payload.resolutionMode review; never call update_parent with status in_review. Otherwise keep the issue todo or blocked with the exact gap and next owner.",
+    DEADLINE_POSTURE_GUARD,
     "Do not install operating-system or user-global packages, and do not use host package managers such as brew, apt, yum, or global pip/npm installs. Use tools already available or workspace-local dependencies or virtual environments. If a required renderer or evaluator is unavailable, keep the source artifact, record the exact verification gap, and do not mutate the host.",
     `- command id: ${input.commandId}`,
     `- run id: ${input.runId ?? "unknown"}`,
@@ -3690,7 +3692,17 @@ var PI_PROVIDER_AUTH_RE = /(?:(?:\b401\b|\b403\b)[^\n]*(?:unauthorized|forbidden
 var PI_PROVIDER_QUOTA_EXHAUSTED_RE = /(?:\binsufficient[_\s-]?user[_\s-]?quota\b|河狸币余额不足|\b402\b[^\n]*(?:余额不足|payment\s+required))/i;
 var PI_PROVIDER_TRANSIENT_RE = /(?:\b(?:429|5\d{2})\b|rate[-\s]?limit(?:ed)?|too\s+many\s+requests|billing\s+admission\s+failed|service\s+unavailable|upstream[^\n]*(?:unavailable|failed|timeout)|connect(?:ion)?[^\n]*refused|temporar(?:y|ily)[^\n]*(?:unavailable|failed)|try\s+again\s+later)/i;
 var PI_PROVIDER_RETRY_AFTER_SECONDS_RE = /retry[-\s]?after\s*[:=]?\s*(\d{1,6})\s*(?:seconds?|secs?|s)\b/i;
+var PI_TERMINAL_CLEANUP_PERMISSION_RE = /(?:\bkill\b[^\n]*\bEPERM\b|\bEPERM\b[^\n]*\bkill\b)/i;
 var MAX_PI_PROVIDER_RETRY_AFTER_SECONDS = 7 * 24 * 60 * 60;
+var PI_DURABLE_RUNTIME_ACTION_WRITE_TOOLS = /* @__PURE__ */ new Set([
+  "runtime_action.submit",
+  "runtime_action.commit"
+]);
+var PI_RUNTIME_ACTION_WRITE_RECEIPT_STATUSES = /* @__PURE__ */ new Set(["accepted", "pending_reconcile"]);
+var PI_TERMINAL_RUNTIME_ACTION_STATUSES = /* @__PURE__ */ new Set([
+  "completed",
+  "succeeded"
+]);
 function approvedMcpInvocationSucceeded(results, invocationId) {
   const approvedInvocationId = readString(invocationId);
   return Boolean(approvedInvocationId && (Array.isArray(results) ? results : []).some((rawResult) => {
@@ -3704,18 +3716,81 @@ function governedMcpToolResult(structuredContent) {
   const invocationId = readString(structuredContent.invocationId);
   const providerContent = asRecord(structuredContent.content);
   const providerStatus = readString(providerContent.status);
-  const effectResult = asRecord(asRecord(providerContent.result).effectResult);
+  const providerResult = asRecord(providerContent.result);
+  const effectResult = asRecord(providerResult.effectResult);
   const intentId = readString(effectResult.artifactIntentId);
   const manifestId = readString(effectResult.manifestId);
   const sourceRelativePath = readString(effectResult.sourceRelativePath);
   const sha256 = readString(effectResult.sha256);
   const byteSize = readNumber(effectResult.byteSize, 0);
   const artifactIntent = providerStatus === "pending_reconcile" && intentId && manifestId && sourceRelativePath && /^[a-f0-9]{64}$/.test(sha256 ?? "") && Number.isSafeInteger(byteSize) && byteSize > 0 ? { intentId, manifestId, sourceRelativePath, sha256, byteSize } : null;
+  const runtimeActionToolName = readString(providerContent.toolName);
+  const runtimeAction = runtimeActionToolName?.startsWith("runtime_action.") ? {
+    toolName: runtimeActionToolName,
+    ...readString(providerResult.callId) ? { callId: readString(providerResult.callId) } : {},
+    ...readString(providerResult.planId) ? { planId: readString(providerResult.planId) } : {},
+    ...readString(providerResult.status) ? { resultStatus: readString(providerResult.status) } : {}
+  } : null;
   return {
     ...invocationId ? { invocationId } : {},
     status,
     ...providerStatus ? { providerStatus } : {},
-    ...artifactIntent ? { artifactIntent } : {}
+    ...artifactIntent ? { artifactIntent } : {},
+    ...runtimeAction ? { runtimeAction } : {}
+  };
+}
+function durablePiRuntimeActionEvidence(results) {
+  const normalizedResults = (Array.isArray(results) ? results : []).map(asRecord);
+  const writeCallIds = /* @__PURE__ */ new Set();
+  const writePlanIds = /* @__PURE__ */ new Set();
+  for (const result2 of normalizedResults) {
+    const runtimeAction = asRecord(result2.runtimeAction);
+    const toolName = readString(runtimeAction.toolName);
+    const callId = readString(runtimeAction.callId);
+    const planId = readString(runtimeAction.planId);
+    const resultStatus = readString(runtimeAction.resultStatus);
+    const status = readString(result2.status);
+    const providerStatus = readString(result2.providerStatus);
+    if (status === "succeeded" && providerStatus === "accepted" && toolName && resultStatus && PI_TERMINAL_RUNTIME_ACTION_STATUSES.has(resultStatus)) {
+      const isLinkedStatus = toolName === "runtime_action.status" && (callId && writeCallIds.has(callId) || planId && writePlanIds.has(planId));
+      const isDurableWrite = toolName === "runtime_action.submit" ? Boolean(callId) : toolName === "runtime_action.commit" && Boolean(planId || callId);
+      if (isLinkedStatus || isDurableWrite) {
+        return {
+          kind: "runtime_action",
+          ...readString(result2.invocationId) ? { invocationId: readString(result2.invocationId) } : {},
+          toolName,
+          ...callId ? { callId } : {},
+          ...planId ? { planId } : {}
+        };
+      }
+    }
+    if (status !== "succeeded" || !PI_DURABLE_RUNTIME_ACTION_WRITE_TOOLS.has(toolName ?? "") || !PI_RUNTIME_ACTION_WRITE_RECEIPT_STATUSES.has(providerStatus ?? "")) continue;
+    if (callId) writeCallIds.add(callId);
+    if (planId) writePlanIds.add(planId);
+  }
+  return null;
+}
+function finalizedPiRuntimeArtifactEvidence(runtimeArtifacts) {
+  const artifact = (Array.isArray(runtimeArtifacts) ? runtimeArtifacts : []).map(asRecord).find((entry) => readString(entry.status) === "finalized");
+  if (!artifact) return null;
+  const intentId = readString(artifact.intentId) ?? readString(artifact.artifactIntentId);
+  return {
+    kind: "runtime_artifact",
+    ...intentId ? { intentId } : {}
+  };
+}
+function classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) {
+  const diagnostics = Array.isArray(parsed?.cleanupDiagnostics) ? parsed.cleanupDiagnostics.map(asRecord) : [];
+  if (parsed?.terminalEventType !== "agent_end" || readString(parsed?.stopReason) || parsed?.hasAssistantOutput !== true || diagnostics.length === 0 || diagnostics.some((diagnostic) => readString(diagnostic.phase) !== "post_terminal" || readString(diagnostic.code) !== "pi_terminal_cleanup_permission_denied") || readNumber(parsed?.nonCleanupErrorCount, 0) > 0) return null;
+  const durableEvidence = durablePiRuntimeActionEvidence(parsed?.mcpToolResults) ?? finalizedPiRuntimeArtifactEvidence(runtimeArtifacts);
+  if (!durableEvidence) return null;
+  return {
+    status: "failed",
+    phase: "post_terminal",
+    errorCode: "pi_terminal_cleanup_permission_denied",
+    isolatedFromBusinessResult: true,
+    durableEvidence,
+    diagnostics
   };
 }
 function codexMcpToolResults(event) {
@@ -4159,8 +4234,11 @@ function parsePiJsonl(stdout) {
   let terminalEventType = null;
   let stopReason = null;
   let hasAssistantOutput = false;
+  let nonCleanupErrorCount = 0;
+  let nonCleanupErrorMessage = null;
   const messages = [];
   const mcpToolResults = [];
+  const cleanupDiagnostics = [];
   const usage = { inputTokens: 0, cachedInputTokens: 0, outputTokens: 0 };
   for (const rawLine of String(stdout ?? "").split(/\r?\n/)) {
     const event = parseJsonLine(rawLine.trim());
@@ -4191,12 +4269,30 @@ function parsePiJsonl(stdout) {
       if (event.type === "turn_end") sawTurnEnd = true;
       if (event.type === "turn_end" || event.type === "agent_end") terminalEventType = event.type;
       stopReason = readString(event.stopReason ?? event.stop_reason) ?? piNestedMessageStopReason(event) ?? stopReason;
-      errorMessage = piStopReasonErrorText(event) ?? piNestedMessageErrorText(event) ?? errorMessage;
+      const terminalError = piStopReasonErrorText(event) ?? piNestedMessageErrorText(event);
+      if (terminalError) {
+        nonCleanupErrorCount += 1;
+        nonCleanupErrorMessage = terminalError;
+        errorMessage = terminalError;
+      }
       hasAssistantOutput = maybeCapturePiMessage(event, messages, usage) || hasAssistantOutput;
       continue;
     }
     if (event.type === "error") {
-      errorMessage = readString(event.message) ?? errorMessage;
+      const eventError = readString(event.message);
+      if (!eventError) continue;
+      if (PI_TERMINAL_CLEANUP_PERMISSION_RE.test(eventError)) {
+        cleanupDiagnostics.push({
+          code: "pi_terminal_cleanup_permission_denied",
+          message: eventError,
+          phase: terminalEventType === "agent_end" ? "post_terminal" : "pre_terminal"
+        });
+        errorMessage = nonCleanupErrorMessage ?? eventError;
+      } else {
+        nonCleanupErrorCount += 1;
+        nonCleanupErrorMessage = eventError;
+        errorMessage = eventError;
+      }
     }
   }
   return {
@@ -4208,6 +4304,8 @@ function parsePiJsonl(stdout) {
     stopReason,
     hasAssistantOutput,
     errorMessage,
+    ...nonCleanupErrorCount > 0 ? { nonCleanupErrorCount } : {},
+    ...cleanupDiagnostics.length > 0 ? { cleanupDiagnostics } : {},
     ...mcpToolResults.length > 0 ? { mcpToolResults } : {}
   };
 }
@@ -6061,7 +6159,7 @@ function readWorkspaceStatus(cwd, opts = {}) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.0-beta.43";
+var CONNECTOR_VERSION = "0.1.0-beta.44";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -9611,18 +9709,33 @@ async function executeRunCommand(config, command) {
     const memoryLimitError = hasMemoryLimit ? `${executor.kind === "pi" ? "Pi Agent" : "Executor"} memory limit exceeded: RSS ${readNumber(memoryLimit.rssBytes, 0)} bytes exceeded ${readNumber(memoryLimit.limitBytes, config.executorMaxRssMb * 1024 * 1024)} bytes` : null;
     const piUsageDiagnostic = executor.kind === "pi" && !hasOutputFlood && piOutputUsageMetadataMissing(parsed) ? "Pi Agent exited without usage metadata" : null;
     const completionOutputStopped = executor.kind === "pi" && piCompletionOutputStopped(parsed, execution);
-    const piInvalidOutputError = executor.kind === "pi" ? piOutputValidationError(parsed, {
-      allowMissingTurnEnd: completionOutputStopped,
+    const cleanupDisposition = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) : null;
+    if (cleanupDisposition) {
+      await ingestLog(
+        config,
+        command,
+        "system",
+        "warn",
+        "Pi terminal result was preserved after a post-terminal cleanup permission failure",
+        {
+          presentationKind: "pi_terminal_cleanup",
+          cleanupDisposition
+        }
+      );
+    }
+    const parsedForValidation = cleanupDisposition ? { ...parsed, errorMessage: null } : parsed;
+    const piInvalidOutputError = executor.kind === "pi" ? piOutputValidationError(parsedForValidation, {
+      allowMissingTurnEnd: completionOutputStopped || Boolean(cleanupDisposition),
       allowMissingAssistantOutput: execution.completionOutputType === "approval_required"
     }) : null;
-    const piProviderFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiProviderError(parsed) : null;
-    const parsedErrorMessage = outputFloodError ?? memoryLimitError ?? piInvalidOutputError ?? nativeSessionRolloutError ?? nativeSessionRolloutCleanupError ?? parsed.errorMessage;
+    const piProviderFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiProviderError(parsedForValidation) : null;
+    const parsedErrorMessage = outputFloodError ?? memoryLimitError ?? piInvalidOutputError ?? nativeSessionRolloutError ?? nativeSessionRolloutCleanupError ?? parsedForValidation.errorMessage;
     const codexTransientFailure = executor.kind === "codex" && (execution.exitCode ?? 0) !== 0 ? classifyCodexTransientUpstreamError({
       stdout: execution.stdout,
       stderr: execution.stderr,
       errorMessage: parsedErrorMessage
     }) : null;
-    const succeeded = !cancelled && !hasOutputFlood && !hasMemoryLimit && (execution.exitCode === 0 || completionOutputStopped) && !execution.timedOut && !execution.spawnError && !parsedErrorMessage;
+    const succeeded = !cancelled && !hasOutputFlood && !hasMemoryLimit && (execution.exitCode === 0 || completionOutputStopped || Boolean(cleanupDisposition)) && !execution.timedOut && !execution.spawnError && !parsedErrorMessage;
     const resultStderr = filterExecutionStderrForResult(executor.kind, execution.stderr);
     const error = execution.timedOut ? `Executor timed out after ${config.executorTimeoutSeconds}s` : cancelled ? "Executor cancelled by AMaster control plane" : execution.spawnError ?? parsedErrorMessage ?? (succeeded ? null : `Executor exited with code ${execution.exitCode ?? "unknown"}`);
     const costUsage = parsedCostUsage(parsed.usage);
@@ -9655,6 +9768,7 @@ async function executeRunCommand(config, command) {
       timedOut: execution.timedOut,
       ...execution.outputDrainForcedClosed ? { outputDrainForcedClosed: true } : {},
       ...readString(execution.completionOutputType) ? { completionOutputType: readString(execution.completionOutputType) } : {},
+      ...cleanupDisposition ? { cleanupDisposition } : {},
       ...cancelled ? { cancelledByControlPlane: true } : {},
       ...invocation.nativeSession ? { nativeSession: invocation.nativeSession } : {},
       ...nativeSessionRollout ? { nativeSessionRollout } : {},

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.0-beta.43";
+const CONNECTOR_VERSION = "0.1.0-beta.44";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.0-beta.43",
+  "version": "0.1.0-beta.44",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",