@amaster.ai/employee-runtime-connector 0.1.0-beta.43 → 0.1.0-beta.45

package/README.md

@@ -32,6 +32,18 @@ The source of truth lives under this package's `src/` directory. The package bui
 
 Runtime code belongs in the container image. Persist only connector state, the result outbox, and workspaces under the configured state directory.
 
+## Pi terminal cleanup outcome
+
+Pi execution uses three separate evidence layers:
+
+1. a valid successful `agent_end` and output/usage contract;
+2. a durable, inspectable Runtime Action receipt or finalized Runtime Artifact;
+3. process cleanup disposition.
+
+An exact process-kill `EPERM` error emitted only after the first two layers have completed may be isolated as a failed `cleanupDisposition` warning without changing the command's successful business result. Both accepted shapes require `kill` and `EPERM`; generic filesystem/process permission text such as `EPERM: operation not permitted, unlink ...` is a business error. A `runtime_action.status` readback is evidence only when its call/plan ref matches an earlier submit/commit receipt in the same transcript. The diagnostic and durable evidence reference remain in the result. Text-only or action-only-without-assistant-output streams, standalone governed reads, non-effect Runtime Action tools, rejected or pending effects, pre-terminal errors, provider failures, timeout, cancellation, resource limits, any signal, live residue, and uncertain ownership remain failures.
+
+This isolation does not schedule a retry or a second business continuation. Command result delivery and the result outbox remain the sole idempotency boundary.
+
 ## Mutation attestation
 
 The daemon reports its connector contract, exact package/build, platform/architecture, and discovered executor versions on every heartbeat. The server compares those facts with `AMASTER_RUNTIME_RECOMMENDED_VERSION` and `AMASTER_RUNTIME_RECOMMENDED_BUILD_COMMIT`, persists a short-lived content-bound attestation, and correlates Runtime V2 commands to that proof.

package/dist/amaster-runtime-daemon.mjs

@@ -2558,6 +2558,7 @@ function isTerminalResultOutboxStatus(status) {
 
 // src/amaster-runtime-daemon/prompt-compiler.mjs
 var DEFAULT_PROMPT_BUDGET_CHARS = 32e3;
+var DEADLINE_POSTURE_GUARD = "Named-window:skip_this_window_and_continue; no lower-quality/approval-bypass/fabrication/whole-task-stop; deadline_posture_receipt=targetMilestoneRef,posture,onMiss,taskContinuation,next owner/action; not Server proof";
 var MIN_PROMPT_BUDGET_CHARS = 8192;
 var CONTINUATION_WAKE_PATTERN = /(continuation|continued|retry|approved|liveness|resume|max_turn)/i;
 var RECOVERY_WAKE_REASONS = /* @__PURE__ */ new Set([
@@ -2670,9 +2671,10 @@ function governedReadSection(context) {
 function fixedRules(input, includeIssueLine) {
   return [
     "## AMaster Runtime Connector Task",
-    "You are executing a task dispatched by MirrorX from the central control plane.",
-    "Work only inside the declared workspace. Make concrete progress and finish with a concise result summary.",
+    "MirrorX task.",
+    "Use only the declared workspace; make concrete progress and report concisely.",
     "Before changing the task status to done, audit every explicit requirement in the task against the final evidence. A successful tool or document write proves delivery, not acceptance: inspect the delivered content for required sections, diagrams, tables, and factual constraints. Do not leave stale in-progress wording such as \u201Ccurrent run\u201D in a terminal deliverable; rewrite it to the final observed state. Do not list finalization itself as remaining or next work in a terminal deliverable. If any requirement is missing or cannot be verified, do not mark done. To request review, use create_interaction with kind request_confirmation and payload.resolutionMode review; never call update_parent with status in_review. Otherwise keep the issue todo or blocked with the exact gap and next owner.",
+    DEADLINE_POSTURE_GUARD,
     "Do not install operating-system or user-global packages, and do not use host package managers such as brew, apt, yum, or global pip/npm installs. Use tools already available or workspace-local dependencies or virtual environments. If a required renderer or evaluator is unavailable, keep the source artifact, record the exact verification gap, and do not mutate the host.",
     `- command id: ${input.commandId}`,
     `- run id: ${input.runId ?? "unknown"}`,
@@ -3690,7 +3692,17 @@ var PI_PROVIDER_AUTH_RE = /(?:(?:\b401\b|\b403\b)[^\n]*(?:unauthorized|forbidden
 var PI_PROVIDER_QUOTA_EXHAUSTED_RE = /(?:\binsufficient[_\s-]?user[_\s-]?quota\b|河狸币余额不足|\b402\b[^\n]*(?:余额不足|payment\s+required))/i;
 var PI_PROVIDER_TRANSIENT_RE = /(?:\b(?:429|5\d{2})\b|rate[-\s]?limit(?:ed)?|too\s+many\s+requests|billing\s+admission\s+failed|service\s+unavailable|upstream[^\n]*(?:unavailable|failed|timeout)|connect(?:ion)?[^\n]*refused|temporar(?:y|ily)[^\n]*(?:unavailable|failed)|try\s+again\s+later)/i;
 var PI_PROVIDER_RETRY_AFTER_SECONDS_RE = /retry[-\s]?after\s*[:=]?\s*(\d{1,6})\s*(?:seconds?|secs?|s)\b/i;
+var PI_TERMINAL_CLEANUP_PERMISSION_RE = /(?:\bkill\b[^\n]*\bEPERM\b|\bEPERM\b[^\n]*\bkill\b)/i;
 var MAX_PI_PROVIDER_RETRY_AFTER_SECONDS = 7 * 24 * 60 * 60;
+var PI_DURABLE_RUNTIME_ACTION_WRITE_TOOLS = /* @__PURE__ */ new Set([
+  "runtime_action.submit",
+  "runtime_action.commit"
+]);
+var PI_RUNTIME_ACTION_WRITE_RECEIPT_STATUSES = /* @__PURE__ */ new Set(["accepted", "pending_reconcile"]);
+var PI_TERMINAL_RUNTIME_ACTION_STATUSES = /* @__PURE__ */ new Set([
+  "completed",
+  "succeeded"
+]);
 function approvedMcpInvocationSucceeded(results, invocationId) {
   const approvedInvocationId = readString(invocationId);
   return Boolean(approvedInvocationId && (Array.isArray(results) ? results : []).some((rawResult) => {
@@ -3704,18 +3716,81 @@ function governedMcpToolResult(structuredContent) {
   const invocationId = readString(structuredContent.invocationId);
   const providerContent = asRecord(structuredContent.content);
   const providerStatus = readString(providerContent.status);
-  const effectResult = asRecord(asRecord(providerContent.result).effectResult);
+  const providerResult = asRecord(providerContent.result);
+  const effectResult = asRecord(providerResult.effectResult);
   const intentId = readString(effectResult.artifactIntentId);
   const manifestId = readString(effectResult.manifestId);
   const sourceRelativePath = readString(effectResult.sourceRelativePath);
   const sha256 = readString(effectResult.sha256);
   const byteSize = readNumber(effectResult.byteSize, 0);
   const artifactIntent = providerStatus === "pending_reconcile" && intentId && manifestId && sourceRelativePath && /^[a-f0-9]{64}$/.test(sha256 ?? "") && Number.isSafeInteger(byteSize) && byteSize > 0 ? { intentId, manifestId, sourceRelativePath, sha256, byteSize } : null;
+  const runtimeActionToolName = readString(providerContent.toolName);
+  const runtimeAction = runtimeActionToolName?.startsWith("runtime_action.") ? {
+    toolName: runtimeActionToolName,
+    ...readString(providerResult.callId) ? { callId: readString(providerResult.callId) } : {},
+    ...readString(providerResult.planId) ? { planId: readString(providerResult.planId) } : {},
+    ...readString(providerResult.status) ? { resultStatus: readString(providerResult.status) } : {}
+  } : null;
   return {
     ...invocationId ? { invocationId } : {},
     status,
     ...providerStatus ? { providerStatus } : {},
-    ...artifactIntent ? { artifactIntent } : {}
+    ...artifactIntent ? { artifactIntent } : {},
+    ...runtimeAction ? { runtimeAction } : {}
+  };
+}
+function durablePiRuntimeActionEvidence(results) {
+  const normalizedResults = (Array.isArray(results) ? results : []).map(asRecord);
+  const writeCallIds = /* @__PURE__ */ new Set();
+  const writePlanIds = /* @__PURE__ */ new Set();
+  for (const result2 of normalizedResults) {
+    const runtimeAction = asRecord(result2.runtimeAction);
+    const toolName = readString(runtimeAction.toolName);
+    const callId = readString(runtimeAction.callId);
+    const planId = readString(runtimeAction.planId);
+    const resultStatus = readString(runtimeAction.resultStatus);
+    const status = readString(result2.status);
+    const providerStatus = readString(result2.providerStatus);
+    if (status === "succeeded" && providerStatus === "accepted" && toolName && resultStatus && PI_TERMINAL_RUNTIME_ACTION_STATUSES.has(resultStatus)) {
+      const isLinkedStatus = toolName === "runtime_action.status" && (callId && writeCallIds.has(callId) || planId && writePlanIds.has(planId));
+      const isDurableWrite = toolName === "runtime_action.submit" ? Boolean(callId) : toolName === "runtime_action.commit" && Boolean(planId || callId);
+      if (isLinkedStatus || isDurableWrite) {
+        return {
+          kind: "runtime_action",
+          ...readString(result2.invocationId) ? { invocationId: readString(result2.invocationId) } : {},
+          toolName,
+          ...callId ? { callId } : {},
+          ...planId ? { planId } : {}
+        };
+      }
+    }
+    if (status !== "succeeded" || !PI_DURABLE_RUNTIME_ACTION_WRITE_TOOLS.has(toolName ?? "") || !PI_RUNTIME_ACTION_WRITE_RECEIPT_STATUSES.has(providerStatus ?? "")) continue;
+    if (callId) writeCallIds.add(callId);
+    if (planId) writePlanIds.add(planId);
+  }
+  return null;
+}
+function finalizedPiRuntimeArtifactEvidence(runtimeArtifacts) {
+  const artifact = (Array.isArray(runtimeArtifacts) ? runtimeArtifacts : []).map(asRecord).find((entry) => readString(entry.status) === "finalized");
+  if (!artifact) return null;
+  const intentId = readString(artifact.intentId) ?? readString(artifact.artifactIntentId);
+  return {
+    kind: "runtime_artifact",
+    ...intentId ? { intentId } : {}
+  };
+}
+function classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) {
+  const diagnostics = Array.isArray(parsed?.cleanupDiagnostics) ? parsed.cleanupDiagnostics.map(asRecord) : [];
+  if (parsed?.terminalEventType !== "agent_end" || readString(parsed?.stopReason) || parsed?.hasAssistantOutput !== true || diagnostics.length === 0 || diagnostics.some((diagnostic) => readString(diagnostic.phase) !== "post_terminal" || readString(diagnostic.code) !== "pi_terminal_cleanup_permission_denied") || readNumber(parsed?.nonCleanupErrorCount, 0) > 0) return null;
+  const durableEvidence = durablePiRuntimeActionEvidence(parsed?.mcpToolResults) ?? finalizedPiRuntimeArtifactEvidence(runtimeArtifacts);
+  if (!durableEvidence) return null;
+  return {
+    status: "failed",
+    phase: "post_terminal",
+    errorCode: "pi_terminal_cleanup_permission_denied",
+    isolatedFromBusinessResult: true,
+    durableEvidence,
+    diagnostics
   };
 }
 function codexMcpToolResults(event) {
@@ -4159,8 +4234,11 @@ function parsePiJsonl(stdout) {
   let terminalEventType = null;
   let stopReason = null;
   let hasAssistantOutput = false;
+  let nonCleanupErrorCount = 0;
+  let nonCleanupErrorMessage = null;
   const messages = [];
   const mcpToolResults = [];
+  const cleanupDiagnostics = [];
   const usage = { inputTokens: 0, cachedInputTokens: 0, outputTokens: 0 };
   for (const rawLine of String(stdout ?? "").split(/\r?\n/)) {
     const event = parseJsonLine(rawLine.trim());
@@ -4191,12 +4269,30 @@ function parsePiJsonl(stdout) {
       if (event.type === "turn_end") sawTurnEnd = true;
       if (event.type === "turn_end" || event.type === "agent_end") terminalEventType = event.type;
       stopReason = readString(event.stopReason ?? event.stop_reason) ?? piNestedMessageStopReason(event) ?? stopReason;
-      errorMessage = piStopReasonErrorText(event) ?? piNestedMessageErrorText(event) ?? errorMessage;
+      const terminalError = piStopReasonErrorText(event) ?? piNestedMessageErrorText(event);
+      if (terminalError) {
+        nonCleanupErrorCount += 1;
+        nonCleanupErrorMessage = terminalError;
+        errorMessage = terminalError;
+      }
       hasAssistantOutput = maybeCapturePiMessage(event, messages, usage) || hasAssistantOutput;
       continue;
     }
     if (event.type === "error") {
-      errorMessage = readString(event.message) ?? errorMessage;
+      const eventError = readString(event.message);
+      if (!eventError) continue;
+      if (PI_TERMINAL_CLEANUP_PERMISSION_RE.test(eventError)) {
+        cleanupDiagnostics.push({
+          code: "pi_terminal_cleanup_permission_denied",
+          message: eventError,
+          phase: terminalEventType === "agent_end" ? "post_terminal" : "pre_terminal"
+        });
+        errorMessage = nonCleanupErrorMessage ?? eventError;
+      } else {
+        nonCleanupErrorCount += 1;
+        nonCleanupErrorMessage = eventError;
+        errorMessage = eventError;
+      }
     }
   }
   return {
@@ -4208,6 +4304,8 @@ function parsePiJsonl(stdout) {
     stopReason,
     hasAssistantOutput,
     errorMessage,
+    ...nonCleanupErrorCount > 0 ? { nonCleanupErrorCount } : {},
+    ...cleanupDiagnostics.length > 0 ? { cleanupDiagnostics } : {},
     ...mcpToolResults.length > 0 ? { mcpToolResults } : {}
   };
 }
@@ -4953,7 +5051,79 @@ function normalizeRuntimeVersionText(value) {
   const trimmed = value.trim();
   return trimmed ? trimmed : null;
 }
-function versionPairDiffers(current, recommended) {
+var EXACT_SEMVER_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
+function isExactSemverVersion(value) {
+  const normalized = normalizeRuntimeVersionText(value);
+  const match = normalized?.match(EXACT_SEMVER_PATTERN);
+  if (!match) return false;
+  const prerelease = match[4]?.split(".") ?? [];
+  return !prerelease.some(
+    (identifier) => /^\d+$/.test(identifier) && identifier.length > 1 && identifier.startsWith("0")
+  );
+}
+function compareNumericSemverIdentifiers(left, right) {
+  if (left.length !== right.length) return left.length < right.length ? -1 : 1;
+  if (left === right) return 0;
+  return left < right ? -1 : 1;
+}
+function compareExactSemverVersions(current, recommended) {
+  const normalizedCurrent = normalizeRuntimeVersionText(current);
+  const normalizedRecommended = normalizeRuntimeVersionText(recommended);
+  if (!normalizedCurrent || !normalizedRecommended || !isExactSemverVersion(normalizedCurrent) || !isExactSemverVersion(normalizedRecommended)) {
+    return null;
+  }
+  const currentMatch = normalizedCurrent.match(EXACT_SEMVER_PATTERN);
+  const recommendedMatch = normalizedRecommended.match(EXACT_SEMVER_PATTERN);
+  if (!currentMatch || !recommendedMatch) return null;
+  for (const index of [1, 2, 3]) {
+    const comparison = compareNumericSemverIdentifiers(
+      currentMatch[index],
+      recommendedMatch[index]
+    );
+    if (comparison !== 0) return comparison;
+  }
+  const currentPrerelease = currentMatch[4]?.split(".");
+  const recommendedPrerelease = recommendedMatch[4]?.split(".");
+  if (!currentPrerelease && !recommendedPrerelease) return 0;
+  if (!currentPrerelease) return 1;
+  if (!recommendedPrerelease) return -1;
+  const identifierCount = Math.max(
+    currentPrerelease.length,
+    recommendedPrerelease.length
+  );
+  for (let index = 0; index < identifierCount; index += 1) {
+    const currentIdentifier = currentPrerelease[index];
+    const recommendedIdentifier = recommendedPrerelease[index];
+    if (currentIdentifier === void 0) return -1;
+    if (recommendedIdentifier === void 0) return 1;
+    if (currentIdentifier === recommendedIdentifier) continue;
+    const currentIsNumeric = /^\d+$/.test(currentIdentifier);
+    const recommendedIsNumeric = /^\d+$/.test(recommendedIdentifier);
+    if (currentIsNumeric && recommendedIsNumeric) {
+      return compareNumericSemverIdentifiers(
+        currentIdentifier,
+        recommendedIdentifier
+      );
+    }
+    if (currentIsNumeric !== recommendedIsNumeric) {
+      return currentIsNumeric ? -1 : 1;
+    }
+    return currentIdentifier < recommendedIdentifier ? -1 : 1;
+  }
+  return 0;
+}
+function versionPairRequiresUpgrade(current, recommended) {
+  const normalizedCurrent = normalizeRuntimeVersionText(current);
+  const normalizedRecommended = normalizeRuntimeVersionText(recommended);
+  if (!normalizedCurrent || !normalizedRecommended) return false;
+  const comparison = compareExactSemverVersions(
+    normalizedCurrent,
+    normalizedRecommended
+  );
+  if (comparison !== null) return comparison < 0;
+  return false;
+}
+function normalizedTextPairDiffers(current, recommended) {
   const normalizedCurrent = normalizeRuntimeVersionText(current);
   const normalizedRecommended = normalizeRuntimeVersionText(recommended);
   if (!normalizedCurrent || !normalizedRecommended) return false;
@@ -4962,10 +5132,10 @@ function versionPairDiffers(current, recommended) {
 function summarizeAmasterRuntimeVersionDrift(input = {}) {
   const versionMismatches = [];
   const bundleMismatches = [];
-  if (versionPairDiffers(input.connectorVersion, input.recommendedConnectorVersion)) {
+  if (versionPairRequiresUpgrade(input.connectorVersion, input.recommendedConnectorVersion)) {
     versionMismatches.push("connector package version differs from the recommended package");
   }
-  if (versionPairDiffers(input.buildCommit, input.recommendedBuildCommit)) {
+  if (normalizedTextPairDiffers(input.buildCommit, input.recommendedBuildCommit)) {
     bundleMismatches.push("build commit differs from the deployed connector package");
   }
   const recommendedConnectorVersion = normalizeRuntimeVersionText(input.recommendedConnectorVersion);
@@ -6061,7 +6231,7 @@ function readWorkspaceStatus(cwd, opts = {}) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.0-beta.43";
+var CONNECTOR_VERSION = "0.1.0-beta.45";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -6339,7 +6509,10 @@ function piCapabilitySourcesDiagnostics() {
   const piAgentHome = configuredPiAgentHome ?? piCodingAgentDir;
   const piAgentHomeSource = configuredPiAgentHome ? "PI_AGENT_HOME" : piCodingAgentDirSource;
   const userSkillsPath = piAgentHome ? join13(piAgentHome, "skills") : null;
-  const marketplaceSkillsPath = safeExpandPath(process.env.PI_AGENT_MARKETPLACE_SKILLS_DIR) ?? (piAgentHome ? join13(piAgentHome, "marketplace", "skills") : null);
+  const configuredMarketplaceSkillsPath = safeExpandPath(
+    process.env.PI_AGENT_MARKETPLACE_SKILLS_DIR
+  );
+  const marketplaceSkillsPath = configuredMarketplaceSkillsPath ?? (piAgentHome ? join13(piAgentHome, "marketplace", "skills") : null);
   const builtinSkillsPath = safeExpandPath(process.env.PI_AGENT_BUILTIN_SKILLS_DIR) ?? safeExpandPath(process.env.AMASTER_BUILTIN_SKILLS);
   const mcpConfigPath = safeExpandPath(process.env.PI_AGENT_MCP_SERVERS_FILE) ?? (piAgentHome ? join13(piAgentHome, "mcp.json") : null);
   const settingsConfigPath = piCodingAgentDir ? join13(piCodingAgentDir, "settings.json") : null;
@@ -6347,7 +6520,7 @@ function piCapabilitySourcesDiagnostics() {
     safeSkillRootSummary("user", `${piAgentHomeSource}/skills`, userSkillsPath),
     safeSkillRootSummary(
       "marketplace",
-      readString(process.env.PI_AGENT_MARKETPLACE_SKILLS_DIR) ? "PI_AGENT_MARKETPLACE_SKILLS_DIR" : `${piAgentHomeSource}/marketplace/skills`,
+      configuredMarketplaceSkillsPath ? "PI_AGENT_MARKETPLACE_SKILLS_DIR" : `${piAgentHomeSource}/marketplace/skills`,
       marketplaceSkillsPath
     ),
     safeSkillRootSummary(
@@ -6357,7 +6530,9 @@ function piCapabilitySourcesDiagnostics() {
     )
   ];
   const visibleSkillCount = skillRoots.reduce((sum, root) => sum + readNumber(root.skillCount, 0), 0);
-  const missingRootKinds = skillRoots.filter((root) => root.configured === true && root.available !== true).map((root) => root.kind);
+  const missingRootKinds = skillRoots.filter(
+    (root) => root.configured === true && root.available !== true && (root.kind !== "marketplace" || configuredMarketplaceSkillsPath)
+  ).map((root) => root.kind);
   const mcpConfig = safeJsonConfigSummary(
     readString(process.env.PI_AGENT_MCP_SERVERS_FILE) ? "PI_AGENT_MCP_SERVERS_FILE" : `${piAgentHomeSource}/mcp.json`,
     mcpConfigPath,
@@ -9611,18 +9786,33 @@ async function executeRunCommand(config, command) {
     const memoryLimitError = hasMemoryLimit ? `${executor.kind === "pi" ? "Pi Agent" : "Executor"} memory limit exceeded: RSS ${readNumber(memoryLimit.rssBytes, 0)} bytes exceeded ${readNumber(memoryLimit.limitBytes, config.executorMaxRssMb * 1024 * 1024)} bytes` : null;
     const piUsageDiagnostic = executor.kind === "pi" && !hasOutputFlood && piOutputUsageMetadataMissing(parsed) ? "Pi Agent exited without usage metadata" : null;
     const completionOutputStopped = executor.kind === "pi" && piCompletionOutputStopped(parsed, execution);
-    const piInvalidOutputError = executor.kind === "pi" ? piOutputValidationError(parsed, {
-      allowMissingTurnEnd: completionOutputStopped,
+    const cleanupDisposition = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) : null;
+    if (cleanupDisposition) {
+      await ingestLog(
+        config,
+        command,
+        "system",
+        "warn",
+        "Pi terminal result was preserved after a post-terminal cleanup permission failure",
+        {
+          presentationKind: "pi_terminal_cleanup",
+          cleanupDisposition
+        }
+      );
+    }
+    const parsedForValidation = cleanupDisposition ? { ...parsed, errorMessage: null } : parsed;
+    const piInvalidOutputError = executor.kind === "pi" ? piOutputValidationError(parsedForValidation, {
+      allowMissingTurnEnd: completionOutputStopped || Boolean(cleanupDisposition),
       allowMissingAssistantOutput: execution.completionOutputType === "approval_required"
     }) : null;
-    const piProviderFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiProviderError(parsed) : null;
-    const parsedErrorMessage = outputFloodError ?? memoryLimitError ?? piInvalidOutputError ?? nativeSessionRolloutError ?? nativeSessionRolloutCleanupError ?? parsed.errorMessage;
+    const piProviderFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiProviderError(parsedForValidation) : null;
+    const parsedErrorMessage = outputFloodError ?? memoryLimitError ?? piInvalidOutputError ?? nativeSessionRolloutError ?? nativeSessionRolloutCleanupError ?? parsedForValidation.errorMessage;
     const codexTransientFailure = executor.kind === "codex" && (execution.exitCode ?? 0) !== 0 ? classifyCodexTransientUpstreamError({
       stdout: execution.stdout,
       stderr: execution.stderr,
       errorMessage: parsedErrorMessage
     }) : null;
-    const succeeded = !cancelled && !hasOutputFlood && !hasMemoryLimit && (execution.exitCode === 0 || completionOutputStopped) && !execution.timedOut && !execution.spawnError && !parsedErrorMessage;
+    const succeeded = !cancelled && !hasOutputFlood && !hasMemoryLimit && (execution.exitCode === 0 || completionOutputStopped || Boolean(cleanupDisposition)) && !execution.timedOut && !execution.spawnError && !parsedErrorMessage;
     const resultStderr = filterExecutionStderrForResult(executor.kind, execution.stderr);
     const error = execution.timedOut ? `Executor timed out after ${config.executorTimeoutSeconds}s` : cancelled ? "Executor cancelled by AMaster control plane" : execution.spawnError ?? parsedErrorMessage ?? (succeeded ? null : `Executor exited with code ${execution.exitCode ?? "unknown"}`);
     const costUsage = parsedCostUsage(parsed.usage);
@@ -9655,6 +9845,7 @@ async function executeRunCommand(config, command) {
       timedOut: execution.timedOut,
       ...execution.outputDrainForcedClosed ? { outputDrainForcedClosed: true } : {},
       ...readString(execution.completionOutputType) ? { completionOutputType: readString(execution.completionOutputType) } : {},
+      ...cleanupDisposition ? { cleanupDisposition } : {},
       ...cancelled ? { cancelledByControlPlane: true } : {},
       ...invocation.nativeSession ? { nativeSession: invocation.nativeSession } : {},
       ...nativeSessionRollout ? { nativeSessionRollout } : {},

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.0-beta.43";
+const CONNECTOR_VERSION = "0.1.0-beta.45";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.0-beta.43",
+  "version": "0.1.0-beta.45",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",