@amaster.ai/employee-runtime-connector 0.1.0-beta.7 → 0.1.0-beta.8

package/dist/amaster-runtime-daemon.mjs

@@ -2331,11 +2331,11 @@ function readWorkspaceStatus(cwd, opts = {}) {
 // ---- bundled entrypoint: src/amaster-runtime-daemon.mjs ----
 
 import { createHash } from "node:crypto";
-import { copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { chmodSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, hostname } from "node:os";
 import { basename, delimiter, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
 import { spawn, spawnSync } from "node:child_process";
-const CONNECTOR_VERSION = "0.1.0-beta.7";
+const CONNECTOR_VERSION = "0.1.0-beta.8";
 const MAX_INFERRED_ARTIFACT_UPLOADS = 20;
 const MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 const CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1000;
@@ -3515,11 +3515,23 @@ function canRuntimeAgentOrchestrateOrganization(context) {
 }
 
 function runtimeActionsInstruction(options = {}) {
+  const authorizationEnvelope = options.authorizationEnvelope ?? {
+    allowedActionClasses: new Set(["task_governance"]),
+    sourceKind: "implicit_default",
+    sourceId: "unknown",
+    sourceRevision: "missing_envelope",
+  };
+  const knownActionClasses = ["task_governance", "organization_mutation", "executable_child"];
+  const allowedActionClasses = knownActionClasses.filter((actionClass) =>
+    authorizationEnvelope.allowedActionClasses.has(actionClass));
+  const deniedActionClasses = knownActionClasses.filter((actionClass) =>
+    !authorizationEnvelope.allowedActionClasses.has(actionClass));
   const allowedActionTypes = [
     "add_comment",
     "update_parent",
     "create_child_task",
     "upload_artifact",
+    "upsert_document",
     ...(options.canOrchestrateOrganization ? ["agent_hire"] : []),
     "create_interaction",
   ].join(", ");
@@ -3530,6 +3542,10 @@ function runtimeActionsInstruction(options = {}) {
   const actionValidatorCommand = readString(options.actionValidatorCommand);
   return [
     "Runtime action bridge:",
+    `Allowed runtime action classes for this wake: ${allowedActionClasses.join(", ") || "none"}.`,
+    `Denied runtime action classes for this wake: ${deniedActionClasses.join(", ") || "none"}.`,
+    `Wake authorization source: ${authorizationEnvelope.sourceKind}:${authorizationEnvelope.sourceId} revision ${authorizationEnvelope.sourceRevision}.`,
+    "This capability guidance is rendered from the same authorization envelope enforced by runtime preflight. Preflight remains the final authority. task_governance covers comments, parent status, backlog children, artifacts, and interactions; organization_mutation covers agent_hire/create_agent; executable_child covers todo/in_progress child creation.",
     "Choose exactly one mutation path for each requested action: direct AMaster API or the runtime action bridge. Never replay the same mutation through both paths.",
     "If direct AMaster API requests succeed for all requested mutations, finish with a normal summary and do not emit or mention the AMASTER_RUNTIME_ACTIONS marker.",
     "If direct AMaster API requests are unavailable from the executor sandbox, do not stop at blocked. Use the runtime action bridge for the unapplied mutations.",
@@ -3567,6 +3583,7 @@ function runtimeActionsInstruction(options = {}) {
       ? `Before final output, write only the JSON envelope to .amaster-runtime-actions.json and run this exact strict-schema validator: ${actionValidatorCommand}. Fix every reported error and rerun until it exits 0. JSON.parse alone is not sufficient. Do not include the marker in the temporary file.`
       : "",
     `Allowed action types: ${allowedActionTypes}.`,
+    "For upsert_document, write or replace a Markdown document on the current AMaster task. Use {\"type\":\"upsert_document\",\"key\":\"business-brief\",\"title\":\"2026-07-16 每日经营简报\",\"body\":\"# 每日经营简报\\n...\",\"format\":\"markdown\",\"changeSummary\":\"生成每日经营简报\"}. key, body, and format are required; format must be markdown. Never target a different issue.",
     "For every create_interaction action, set top-level kind to the interaction kind and set payload to a JSON object. Use this complete canonical request_confirmation example: {\"type\":\"create_interaction\",\"kind\":\"request_confirmation\",\"continuationPolicy\":\"wake_assignee_on_accept\",\"payload\":{\"version\":1,\"prompt\":\"Confirm this result?\",\"acceptLabel\":\"确认\",\"rejectLabel\":\"调整\"}}. Never use interactionType.",
     "Interactions cannot be updated with PATCH after creation. For direct API calls, include continuationPolicy in the initial POST /api/issues/{issueId}/interactions request and use only the documented POST accept, reject, respond, or cancel resolution endpoint afterward.",
     "For create_interaction ask_user_questions, use continuationPolicy wake_assignee, never wake_assignee_on_accept, because answering questions does not produce accepted status. Every question requires 1-10 options; do not emit an open-text question without options. The UI provides an Other text answer alongside the declared options. Use payload {\"version\":1,\"title\":\"...\",\"questions\":[{\"id\":\"question_key\",\"prompt\":\"Question text\",\"selectionMode\":\"single\",\"required\":true,\"options\":[{\"id\":\"option_key\",\"label\":\"Option label\"}]}]}. Do not use question/options.value at the top level.",
@@ -3580,6 +3597,7 @@ function runtimeActionsInstruction(options = {}) {
     "upload_artifact actions do not accept required. Artifact required belongs only to top-level deliverables entries, not action objects.",
     "When a child artifact is promoted as a replacement for a parent artifact, run upload_artifact on the parent issue and include both sourceWorkProductId (the child artifact) and supersedesWorkProductId (the current parent artifact). Never claim the parent artifact was corrected without this durable lineage.",
     "For derived artifacts, set evidenceRole=derived, sourceWorkProductIds to every consumed input work product, and scenarioKeys to the unchanged source scenario set. For post-implementation review artifacts, set evidenceRole=review and sourceWorkProductIds to the exact current artifacts reviewed; stale or missing sources fail closed.",
+    "When a child must consume current parent artifacts, set create_child_task.inputWorkProductIds to the exact parent work product UUIDs from task context. AMaster persists their attachment/SHA revision manifest and materializes only those required inputs under input-artifacts/. Do not assume parent attachments are implicitly copied into every child workspace.",
     "When creating a review child that must run after sibling implementation or governance tasks, express that ordering with blockedByClientKeys in the same create_child_task batch. Do not start a post-implementation review as an independent sibling without dependencies.",
     "For required deliverables, add top-level deliverables entries using {\"path\":\"relative/file\",\"required\":true}.",
     "update_parent accepts only status, comment, and force. Never put deliverables, artifacts, interactions, blockers, or child-task fields inside update_parent; keep top-level deliverables beside actions and use their dedicated action objects.",
@@ -3870,7 +3888,9 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
   const agentInstructions = renderAgentInstructionsBundle(asRecord(payload.agentInstructionsBundle));
   const runtimeAuth = commandRuntimeAuth(command);
   const hasRuntimeApi = Boolean(readString(runtimeAuth.apiUrl) && readString(runtimeAuth.apiKey));
-  const canOrchestrateOrganization = canRuntimeAgentOrchestrateOrganization(context);
+  const authorizationEnvelope = runtimeActionAuthorizationEnvelope(command);
+  const canOrchestrateOrganization = canRuntimeAgentOrchestrateOrganization(context)
+    && authorizationEnvelope.allowedActionClasses.has("organization_mutation");
   const decompositionRequirement = commandLegacyTaskDecompositionRequirement(command);
   const explicitDecompositionRequired = decompositionRequirement.required
     && runtimeActionChildIssueSummaryEntries(command).length === 0;
@@ -3908,6 +3928,7 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
       explicitDecompositionRequired,
       artifactVerifierCommands: options.artifactVerifierCommands,
       actionValidatorCommand,
+      authorizationEnvelope,
     }) : "",
     "",
     agentInstructions,
@@ -5755,6 +5776,97 @@ async function materializeIssueAttachments(config, command, workspace) {
   return materialized;
 }
 
+function safeArtifactInputSourceDir(entry, index) {
+  const raw = readString(entry.sourceIssueIdentifier) ?? readString(entry.sourceIssueId) ?? `source-${index + 1}`;
+  const safe = raw.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^\.+|\.+$/g, "").slice(0, 120);
+  return safe && safe !== "." && safe !== ".." ? safe : `source-${index + 1}`;
+}
+
+async function materializeRequiredArtifactInputs(config, command, workspace) {
+  const runtimeAuth = commandRuntimeAuth(command);
+  if (!readString(runtimeAuth.apiUrl) || !readString(runtimeAuth.apiKey)) return [];
+  const context = asRecord(asRecord(command.payload).contextSnapshot);
+  const issue = asRecord(context.paperclipIssue);
+  const manifest = asRecord(issue.artifactInputManifest);
+  if (Object.keys(manifest).length === 0) return [];
+  if (manifest.version !== 1 || !Array.isArray(manifest.entries)) {
+    throw new Error("artifact_input_manifest_invalid: expected version 1 entries array");
+  }
+
+  const targetRoot = join(workspace.cwd, "input-artifacts");
+  rmSync(targetRoot, { recursive: true, force: true });
+  mkdirSync(targetRoot, { recursive: true });
+  const usedPaths = new Set();
+  const materialized = [];
+  for (const [index, rawEntry] of manifest.entries.entries()) {
+    const entry = asRecord(rawEntry);
+    const workProductId = readString(entry.workProductId);
+    const attachmentId = readString(entry.attachmentId);
+    const sha256 = readString(entry.sha256);
+    const contentPath = readString(entry.contentPath);
+    const byteSize = readNumber(entry.byteSize, null);
+    if (!workProductId || !attachmentId || !/^[a-f0-9]{64}$/i.test(sha256 ?? "") || !contentPath || byteSize === null) {
+      throw new Error(`artifact_input_manifest_invalid: entry ${index} is incomplete`);
+    }
+    const expectedContentPath = `/api/attachments/${attachmentId}/content`;
+    if (contentPath !== expectedContentPath) {
+      throw new Error(`artifact_input_manifest_invalid: entry ${index} contentPath does not match attachmentId`);
+    }
+    const body = await runtimeApiBuffer(runtimeAuth, contentPath);
+    const actualSha256 = createHash("sha256").update(body).digest("hex");
+    if (body.byteLength !== byteSize || actualSha256 !== sha256) {
+      throw new Error(
+        `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha256} actualSha256=${actualSha256}`,
+      );
+    }
+
+    const sourceDir = safeArtifactInputSourceDir(entry, index);
+    let filename = safeMaterializedAttachmentFilename({
+      id: attachmentId,
+      originalFilename: readString(entry.originalFilename),
+    }, index);
+    let relativePath = join("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    if (usedPaths.has(relativePath)) {
+      const ext = extname(filename);
+      const stem = ext ? filename.slice(0, -ext.length) : filename;
+      filename = `${stem}-${index + 1}${ext}`;
+      relativePath = join("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    }
+    usedPaths.add(relativePath);
+    const targetPath = join(workspace.cwd, relativePath);
+    mkdirSync(dirname(targetPath), { recursive: true });
+    writeFileSync(targetPath, body);
+    chmodSync(targetPath, 0o444);
+    materialized.push({
+      id: attachmentId,
+      workProductId,
+      sourceIssueId: readString(entry.sourceIssueId),
+      sourceIssueIdentifier: readString(entry.sourceIssueIdentifier),
+      name: readString(entry.originalFilename) ?? filename,
+      path: targetPath,
+      relativePath,
+      contentType: readString(entry.contentType),
+      byteSize: body.byteLength,
+      sha256,
+      contentPath,
+    });
+  }
+
+  const localManifest = {
+    version: 1,
+    entries: materialized.map(({ path: _path, relativePath, ...entry }) => ({ ...entry, path: relativePath })),
+  };
+  const manifestPath = join(targetRoot, "artifact-input-manifest.json");
+  writeFileSync(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
+  chmodSync(manifestPath, 0o444);
+  updateWorkspaceManifest(workspaceManifestPath(workspace), { artifactInputManifest: localManifest });
+  await ingestLog(config, command, "system", "info", `Materialized ${materialized.length} required artifact input(s) into the execution workspace`, {
+    artifactInputCount: materialized.length,
+    artifactInputs: localManifest.entries,
+  });
+  return materialized;
+}
+
 function issueCheckpointDir(workspace) {
   return join(dirname(workspace.runDir), "checkpoint");
 }
@@ -6055,6 +6167,9 @@ function runtimeChildActionFingerprint(action, issueId, parentIssueId) {
     status: readActionStatus(action.status) ?? null,
     priority: readActionPriority(action.priority) ?? null,
     parentClientKey: readString(action.parentClientKey) ?? null,
+    inputWorkProductIds: Array.isArray(action.inputWorkProductIds)
+      ? action.inputWorkProductIds.map(readString).filter(Boolean).sort()
+      : [],
     blockedByClientKeys: Array.isArray(action.blockedByClientKeys)
       ? action.blockedByClientKeys.map(readString).filter(Boolean).sort()
       : [],
@@ -6934,6 +7049,7 @@ const RUNTIME_ACTION_ALLOWED_FIELDS = new Map([
     "title", "description", "status", "priority", "assigneeAgentId", "assigneeUserId",
     "assigneeAgentClientKey", "agentClientKey", "blockParentUntilDone", "executeBeforeConfirmation",
     "clientKey", "idempotencyKey", "parentClientKey", "blockedByIssueIds", "blockedByClientKeys", "create_child_task",
+    "inputWorkProductIds",
   ])],
   ["agent_hire", new Set([
     "clientKey", "idempotencyKey", "key", "companyId", "role", "title", "icon", "reportsTo",
@@ -6954,6 +7070,9 @@ const RUNTIME_ACTION_ALLOWED_FIELDS = new Map([
     "sourceWorkProductId", "sourceWorkProductIds", "supersedesWorkProductId", "evidenceRole", "scenarioKeys",
     "idempotencyKey", "upload_artifact",
   ])],
+  ["upsert_document", new Set([
+    "key", "title", "body", "format", "changeSummary", "baseRevisionId", "upsert_document",
+  ])],
   ["create_interaction", new Set([
     "kind", "continuationPolicy", "title", "summary", "idempotencyKey", "interaction", "version",
     "prompt", "question", "body", "content", "text", "message", "description", "acceptLabel",
@@ -7008,6 +7127,7 @@ const RUNTIME_ACTION_NUMBER_FIELDS = new Set(["budgetMonthlyCents", "minSelected
 const RUNTIME_ACTION_ARRAY_FIELDS = new Set([
   "blockedByIssueIds", "blockedByClientKeys", "desiredSkills", "sourceIssueIds", "artifactRefs", "tasks",
   "options", "defaultSelectedOptionIds", "questions", "sourceWorkProductIds", "scenarioKeys",
+  "inputWorkProductIds",
 ]);
 const RUNTIME_ACTION_OBJECT_FIELDS = new Set([
   "adapterConfig", "instructionsBundle", "runtimeConfig", "permissions", "metadata", "target",
@@ -7358,6 +7478,21 @@ function preflightRuntimeAction(action, preflightContext, actionIndex) {
         );
       }
     }
+    if (fields.inputWorkProductIds !== undefined) {
+      const seen = new Set();
+      for (const [index, rawWorkProductId] of fields.inputWorkProductIds.entries()) {
+        const workProductId = readString(rawWorkProductId);
+        assertRuntimeActionValid(
+          workProductId && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(workProductId),
+          `create_child_task inputWorkProductIds[${index}] must be a UUID`,
+        );
+        assertRuntimeActionValid(
+          !seen.has(workProductId),
+          `create_child_task inputWorkProductIds[${index}] duplicates ${workProductId}`,
+        );
+        seen.add(workProductId);
+      }
+    }
     return;
   }
   if (["agent_hire", "create_agent"].includes(type ?? "")) {
@@ -7413,6 +7548,20 @@ function preflightRuntimeAction(action, preflightContext, actionIndex) {
     resolveWorkspaceArtifactPath(fields, { cwd: preflightContext.cwd });
     return;
   }
+  if (type === "upsert_document") {
+    assertNoPlaceholderRuntimeActionText(fields, ["key", "title", "body", "changeSummary"]);
+    const key = readBoundedActionString(fields, "key", 64);
+    const body = readBoundedActionString(fields, "body", 524_288);
+    assertRuntimeActionValid(key && /^[a-z0-9][a-z0-9_-]*$/.test(key), "upsert_document key must use lowercase letters, numbers, _ or -");
+    assertRuntimeActionValid(body, "upsert_document action requires body");
+    assertRuntimeActionValid(fields.format === "markdown", "upsert_document format must be markdown");
+    const baseRevisionId = readString(fields.baseRevisionId);
+    assertRuntimeActionValid(
+      !baseRevisionId || /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(baseRevisionId),
+      "upsert_document baseRevisionId must be a UUID",
+    );
+    return;
+  }
   if (type === "create_interaction") {
     assertNoPlaceholderRuntimeActionText(fields, ["title", "summary", "payload"]);
     assertCanonicalCreateInteractionShape(fields);
@@ -7596,6 +7745,7 @@ const SINGLE_KEY_RUNTIME_ACTION_TYPES = new Set([
   "create_child_task",
   "create_interaction",
   "create_routine",
+  "upsert_document",
   "update_company_profile",
   "update_parent",
   "upload_artifact",
@@ -7669,6 +7819,9 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
       assigneeAgentId: runtimeChildAssigneeAgentId(fields, runtimeAuth, command, actionContext),
       assigneeUserId: readString(fields.assigneeUserId),
       blockedByIssueIds: runtimeActionBlockedByIssueIds(fields, actionContext),
+      ...(Array.isArray(fields.inputWorkProductIds)
+        ? { inputWorkProductIds: fields.inputWorkProductIds.map(readString).filter(Boolean) }
+        : {}),
       blockParentUntilDone,
       originKind: "amaster_runtime_child_task",
       originId: issueId,
@@ -7824,12 +7977,22 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
       const existingWorkProduct = existingExplicitArtifactUploadMatch(filePath, title, existingWorkProducts, fields);
       if (existingWorkProduct) {
         const metadata = asRecord(existingWorkProduct.metadata);
+        const existingWorkProductId = readString(existingWorkProduct.id);
+        const existingAttachmentId = readString(metadata.attachmentId);
+        if (!existingWorkProductId || !existingAttachmentId) {
+          throw new Error("runtime_action_postcondition_failed: reused artifact is missing work product or attachment identity");
+        }
+        await verifyUploadedArtifactPostcondition(runtimeAuth, issueId, {
+          attachmentId: existingAttachmentId,
+          workProductId: existingWorkProductId,
+          sha256,
+        }, fields);
         return {
           type,
           ...(originalType && originalType !== type ? { originalType } : {}),
           path: filePath,
-          attachmentId: readString(metadata.attachmentId),
-          workProductId: readString(existingWorkProduct.id),
+          attachmentId: existingAttachmentId,
+          workProductId: existingWorkProductId,
           sha256: readString(metadata.sha256) ?? sha256,
           byteSize: readNumber(metadata.byteSize, fileBytes.byteLength),
           originalFilename: readString(metadata.originalFilename) ?? filename,
@@ -7851,11 +8014,12 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
     if (!attachmentId) throw new Error("upload_artifact attachment response did not include id");
 
     let workProduct = null;
-    if (fields.createWorkProduct !== false) {
-      const contentPath = readString(attachment.contentPath) ?? `/api/attachments/${attachmentId}/content`;
-      const openPath = readString(attachment.openPath) ?? contentPath;
-      const downloadPath = readString(attachment.downloadPath) ?? `${contentPath}?download=1`;
-      workProduct = asRecord(await runtimeApiJson(runtimeAuth, "POST", `/api/issues/${encodeURIComponent(issueId)}/work-products`, {
+    try {
+      if (fields.createWorkProduct !== false) {
+        const contentPath = readString(attachment.contentPath) ?? `/api/attachments/${attachmentId}/content`;
+        const openPath = readString(attachment.openPath) ?? contentPath;
+        const downloadPath = readString(attachment.downloadPath) ?? `${contentPath}?download=1`;
+        workProduct = asRecord(await runtimeApiJson(runtimeAuth, "POST", `/api/issues/${encodeURIComponent(issueId)}/work-products`, {
         type: "artifact",
         provider: readString(fields.provider) ?? "paperclip",
         title,
@@ -7880,10 +8044,20 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
           ...(readString(fields.evidenceRole) ? { evidenceRole: readString(fields.evidenceRole) } : {}),
           ...(Array.isArray(fields.scenarioKeys) ? { scenarioKeys: fields.scenarioKeys.map(readString).filter(Boolean) } : {}),
         },
-      }));
-      if (!readString(workProduct.id)) {
-        throw new Error("runtime_action_postcondition_failed: artifact work product response did not include id");
+        }));
+        const workProductId = readString(workProduct.id);
+        if (!workProductId) {
+          throw new Error("runtime_action_postcondition_failed: artifact work product response did not include id");
+        }
+        await verifyUploadedArtifactPostcondition(runtimeAuth, issueId, {
+          attachmentId,
+          workProductId,
+          sha256: readString(attachment.sha256) ?? sha256,
+        }, fields);
       }
+    } catch (err) {
+      await cleanupFailedArtifactUpload(config, command, runtimeAuth, attachmentId, readString(workProduct?.id), err);
+      throw err;
     }
 
     return {
@@ -7941,6 +8115,37 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
     };
   }
 
+  if (type === "upsert_document") {
+    assertNoPlaceholderRuntimeActionText(fields, ["key", "title", "body", "changeSummary"]);
+    const key = readBoundedActionString(fields, "key", 64);
+    if (!key || !/^[a-z0-9][a-z0-9_-]*$/.test(key)) {
+      throw new Error("upsert_document key must use lowercase letters, numbers, _ or -");
+    }
+    const body = readBoundedActionString(fields, "body", 524_288);
+    if (!body) throw new Error("upsert_document action requires body");
+    if (fields.format !== "markdown") throw new Error("upsert_document format must be markdown");
+    const document = asRecord(await runtimeApiJson(
+      runtimeAuth,
+      "PUT",
+      `/api/issues/${encodeURIComponent(issueId)}/documents/${encodeURIComponent(key)}`,
+      {
+        title: readBoundedActionString(fields, "title", 200) ?? null,
+        format: "markdown",
+        body,
+        changeSummary: readBoundedActionString(fields, "changeSummary", 500) ?? null,
+        baseRevisionId: readString(fields.baseRevisionId) ?? null,
+      },
+    ));
+    return {
+      type,
+      ...(originalType && originalType !== type ? { originalType } : {}),
+      issueId,
+      key,
+      documentId: readString(document.id),
+      revisionNumber: typeof document.latestRevisionNumber === "number" ? document.latestRevisionNumber : undefined,
+    };
+  }
+
   if (type === "update_parent") {
     assertNoPlaceholderRuntimeActionText(fields, ["comment"]);
     const patch = {};
@@ -8396,6 +8601,16 @@ function runtimeActionExpectedShape(actionType, actionKind) {
   if (actionType === "upload_artifact") {
     return { type: "upload_artifact", path: "relative/path.ext", title: "Artifact title", summary: "Artifact summary" };
   }
+  if (actionType === "upsert_document") {
+    return {
+      type: "upsert_document",
+      key: "business-brief",
+      title: "2026-07-16 每日经营简报",
+      body: "# 每日经营简报\n\n经营摘要。",
+      format: "markdown",
+      changeSummary: "生成每日经营简报",
+    };
+  }
   if (actionType === "agent_hire" || actionType === "create_agent") {
     return {
       type: actionType,
@@ -8613,6 +8828,27 @@ function piOutputUsageMetadataMissing(parsed) {
   return totalTokens <= 0;
 }
 
+function runtimeBusinessDisposition(runtimeActions, inferredArtifactUploads) {
+  const results = Array.isArray(runtimeActions?.results)
+    ? runtimeActions.results.map(asRecord).filter((result) => !isSkippedRuntimeActionResult(result))
+    : [];
+  const terminalUpdate = results.find((result) =>
+    readString(result.type) === "update_parent" &&
+    ["done", "cancelled", "blocked", "in_review"].includes(readString(result.status) ?? ""));
+  const terminalStatus = readString(terminalUpdate?.status);
+  if (["done", "cancelled"].includes(terminalStatus ?? "")) {
+    return { state: "completed", reason: `parent_${terminalStatus}` };
+  }
+  if (terminalStatus === "blocked") return { state: "blocked", reason: "parent_blocked" };
+  if (terminalStatus === "in_review" || results.some((result) => readString(result.type) === "create_interaction")) {
+    return { state: "waiting", reason: "review_or_interaction_path_recorded" };
+  }
+  if (results.length > 0 || readNumber(inferredArtifactUploads?.appliedCount, 0) > 0) {
+    return { state: "needs_followup", reason: "durable_progress_without_terminal_disposition" };
+  }
+  return { state: "missing", reason: "no_durable_action_or_live_path" };
+}
+
 function piCompletionOutputStopped(parsed, execution) {
   return execution?.timedOut !== true
     && execution?.signal === "SIGTERM"
@@ -9071,6 +9307,72 @@ async function listExistingIssueWorkProducts(runtimeAuth, issueId) {
   }
 }
 
+async function verifyUploadedArtifactPostcondition(runtimeAuth, issueId, expected, fields) {
+  const [workProducts, attachments] = await Promise.all([
+    runtimeApiJson(runtimeAuth, "GET", `/api/issues/${encodeURIComponent(issueId)}/work-products`),
+    runtimeApiJson(runtimeAuth, "GET", `/api/issues/${encodeURIComponent(issueId)}/attachments`),
+  ]);
+  const workProduct = Array.isArray(workProducts)
+    ? workProducts.map(asRecord).find((entry) => readString(entry.id) === expected.workProductId)
+    : null;
+  const attachment = Array.isArray(attachments)
+    ? attachments.map(asRecord).find((entry) => readString(entry.id) === expected.attachmentId)
+    : null;
+  const metadata = asRecord(workProduct?.metadata);
+  const expectedSourceIds = Array.isArray(fields.sourceWorkProductIds)
+    ? fields.sourceWorkProductIds.map(readString).filter(Boolean).sort()
+    : [];
+  const persistedSourceIds = Array.isArray(metadata.sourceWorkProductIds)
+    ? metadata.sourceWorkProductIds.map(readString).filter(Boolean).sort()
+    : [];
+  const expectedScenarioKeys = Array.isArray(fields.scenarioKeys)
+    ? fields.scenarioKeys.map(readString).filter(Boolean).sort()
+    : [];
+  const persistedScenarioKeys = Array.isArray(metadata.scenarioKeys)
+    ? metadata.scenarioKeys.map(readString).filter(Boolean).sort()
+    : [];
+  const failures = [
+    !workProduct ? "work product missing" : null,
+    !attachment ? "attachment missing" : null,
+    readString(metadata.attachmentId) !== expected.attachmentId ? "work product attachmentId mismatch" : null,
+    readString(metadata.sha256) !== expected.sha256 ? "work product SHA mismatch" : null,
+    readString(attachment?.sha256) !== expected.sha256 ? "attachment SHA mismatch" : null,
+    readString(metadata.sourceWorkProductId) !== readString(fields.sourceWorkProductId) ? "sourceWorkProductId mismatch" : null,
+    readString(metadata.supersedesWorkProductId) !== readString(fields.supersedesWorkProductId) ? "supersedesWorkProductId mismatch" : null,
+    readString(metadata.evidenceRole) !== readString(fields.evidenceRole) ? "evidenceRole mismatch" : null,
+    JSON.stringify(persistedSourceIds) !== JSON.stringify(expectedSourceIds) ? "sourceWorkProductIds mismatch" : null,
+    JSON.stringify(persistedScenarioKeys) !== JSON.stringify(expectedScenarioKeys) ? "scenarioKeys mismatch" : null,
+  ].filter(Boolean);
+  if (failures.length > 0) {
+    throw new Error(`runtime_action_postcondition_failed: artifact upload readback failed: ${failures.join("; ")}`);
+  }
+}
+
+async function cleanupFailedArtifactUpload(config, command, runtimeAuth, attachmentId, workProductId, cause) {
+  const cleanupFailures = [];
+  if (workProductId) {
+    try {
+      await runtimeApiJson(runtimeAuth, "DELETE", `/api/work-products/${encodeURIComponent(workProductId)}`);
+    } catch (err) {
+      cleanupFailures.push(`workProduct=${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  try {
+    await runtimeApiJson(runtimeAuth, "DELETE", `/api/attachments/${encodeURIComponent(attachmentId)}`);
+  } catch (err) {
+    cleanupFailures.push(`attachment=${err instanceof Error ? err.message : String(err)}`);
+  }
+  await ingestLog(config, command, "system", "error", "Artifact upload postcondition failed", {
+    attachmentId,
+    workProductId: workProductId ?? null,
+    cause: cause instanceof Error ? cause.message : String(cause),
+    cleanupFailures,
+  });
+  if (cleanupFailures.length > 0) {
+    throw new Error(`${cause instanceof Error ? cause.message : String(cause)}; cleanup failed: ${cleanupFailures.join("; ")}`);
+  }
+}
+
 function existingArtifactUploadMatches(artifact, existingWorkProducts) {
   const filename = basename(artifact.path);
   const byteSize = statSync(artifact.path).size;
@@ -9245,9 +9547,10 @@ async function executeRunCommand(config, command) {
     });
   }
   await materializeIssueCheckpoint(config, command, workspace);
-  let materializedAttachments = [];
+  const requiredArtifactInputs = await materializeRequiredArtifactInputs(config, command, workspace);
+  let materializedAttachments = requiredArtifactInputs;
   try {
-    materializedAttachments = await materializeIssueAttachments(config, command, workspace);
+    materializedAttachments = [...requiredArtifactInputs, ...await materializeIssueAttachments(config, command, workspace)];
   } catch (err) {
     await ingestLog(config, command, "system", "warn", `Failed to materialize issue attachments: ${err instanceof Error ? err.message : String(err)}`, {
       error: err instanceof Error ? err.message : String(err),
@@ -9472,6 +9775,7 @@ async function executeRunCommand(config, command) {
         ? "Executor cancelled by AMaster control plane"
       : execution.spawnError ?? parsedErrorMessage ?? runtimeActionError ?? inferredArtifactError ?? (succeeded ? null : `Executor exited with code ${execution.exitCode ?? "unknown"}`);
     const artifactUploadSummary = runtimeArtifactUploadSummary(runtimeActions, inferredArtifactUploads);
+    const businessDisposition = runtimeBusinessDisposition(runtimeActions, inferredArtifactUploads);
     const costUsage = parsedCostUsage(parsed.usage);
     const result = {
       executorKind: executor.kind,
@@ -9542,6 +9846,7 @@ async function executeRunCommand(config, command) {
       ...(runtimeActions ? { runtimeActions } : {}),
       ...(inferredArtifactUploads ? { inferredArtifactUploads } : {}),
       ...(artifactUploadSummary ? { artifactUploadSummary } : {}),
+      businessDisposition,
     };
     const completion = await completeCommand(config, command, cancelled ? "cancelled" : succeeded ? "succeeded" : "failed", result, error ?? undefined);
     if (!completion) {

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.0-beta.7";
+const CONNECTOR_VERSION = "0.1.0-beta.8";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.0-beta.7",
+  "version": "0.1.0-beta.8",
   "description": "AMaster Employee runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",