@amaster.ai/employee-runtime-connector 0.1.0-beta.7 → 0.1.0-beta.9

package/dist/amaster-runtime-daemon.mjs

@@ -2331,11 +2331,11 @@ function readWorkspaceStatus(cwd, opts = {}) {
 // ---- bundled entrypoint: src/amaster-runtime-daemon.mjs ----
 
 import { createHash } from "node:crypto";
-import { copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { chmodSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, hostname } from "node:os";
 import { basename, delimiter, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
 import { spawn, spawnSync } from "node:child_process";
-const CONNECTOR_VERSION = "0.1.0-beta.7";
+const CONNECTOR_VERSION = "0.1.0-beta.9";
 const MAX_INFERRED_ARTIFACT_UPLOADS = 20;
 const MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 const CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1000;
@@ -3515,11 +3515,23 @@ function canRuntimeAgentOrchestrateOrganization(context) {
 }
 
 function runtimeActionsInstruction(options = {}) {
+  const authorizationEnvelope = options.authorizationEnvelope ?? {
+    allowedActionClasses: new Set(["task_governance"]),
+    sourceKind: "implicit_default",
+    sourceId: "unknown",
+    sourceRevision: "missing_envelope",
+  };
+  const knownActionClasses = ["task_governance", "organization_mutation", "executable_child"];
+  const allowedActionClasses = knownActionClasses.filter((actionClass) =>
+    authorizationEnvelope.allowedActionClasses.has(actionClass));
+  const deniedActionClasses = knownActionClasses.filter((actionClass) =>
+    !authorizationEnvelope.allowedActionClasses.has(actionClass));
   const allowedActionTypes = [
     "add_comment",
     "update_parent",
     "create_child_task",
     "upload_artifact",
+    "upsert_document",
     ...(options.canOrchestrateOrganization ? ["agent_hire"] : []),
     "create_interaction",
   ].join(", ");
@@ -3530,13 +3542,20 @@ function runtimeActionsInstruction(options = {}) {
   const actionValidatorCommand = readString(options.actionValidatorCommand);
   return [
     "Runtime action bridge:",
+    `Allowed runtime action classes for this wake: ${allowedActionClasses.join(", ") || "none"}.`,
+    `Denied runtime action classes for this wake: ${deniedActionClasses.join(", ") || "none"}.`,
+    `Wake authorization source: ${authorizationEnvelope.sourceKind}:${authorizationEnvelope.sourceId} revision ${authorizationEnvelope.sourceRevision}.`,
+    "This capability guidance is rendered from the same authorization envelope enforced by runtime preflight. Preflight remains the final authority. task_governance covers comments, parent status, backlog children, artifacts, and interactions; organization_mutation covers agent_hire/create_agent; executable_child covers todo/in_progress child creation.",
     "Choose exactly one mutation path for each requested action: direct AMaster API or the runtime action bridge. Never replay the same mutation through both paths.",
     "If direct AMaster API requests succeed for all requested mutations, finish with a normal summary and do not emit or mention the AMASTER_RUNTIME_ACTIONS marker.",
     "If direct AMaster API requests are unavailable from the executor sandbox, do not stop at blocked. Use the runtime action bridge for the unapplied mutations.",
     "Use runtime actions as a continuation patch, not as a full replay. If the wake reason or latest comments say a confirmation was accepted, rejected, or that no more child tasks/interactions should be created, do not recreate those earlier actions. Add the final result comment and update the parent task instead.",
+    "On an accepted request_confirmation or request_checkbox_confirmation continuation, any new confirmation must include payload.target.type and a non-empty payload.target.key. Missing decision identity fields fail before mutation with accepted_confirmation_decision_target_required. The server reuses identical content for the same target identity and rejects changed prompt, options, or labels until the action uses the genuinely new target revision.",
+    "Every request_confirmation and request_checkbox_confirmation should bind the concrete decision to payload.target using {type:\"custom\", key, label, revisionId} or the applicable issue_document target. Keep target.key stable for the same decision purpose and change target.revisionId only when the target content changes. Replace example target values with task-specific values; when no business revision exists, use the current run id as revisionId instead of omitting target.",
     "If the wake reason is issue_children_completed, treat the completed child tasks as already resolved blockers. Do not recreate blocker child tasks, do not repeat the first-run blocker plan, and do not create another review path unless new human input is truly required. Summarize the completed child work and use update_parent status done when no human review is needed.",
     "Use update_parent status done when no human review is needed. Prefer creating a pending review path such as request_confirmation, request_checkbox_confirmation, ask_user_questions, or suggest_tasks before status in_review; if a bare in_review update is emitted, AMaster will create a fallback request_confirmation before PATCH.",
     "For create_child_task, do not create ownerless executable todo tasks. Set assigneeAgentId only when the target agent id came from the current AMaster task context or an agent_hire action in this same batch. Do not invent agent ids, role ids, or ids from another company. If you are unsure, omit assigneeAgentId and assigneeUserId; AMaster will assign the current executing agent for todo/in_progress children. Use backlog only when a task is intentionally unassigned.",
+    "Every root create_child_task with status todo or in_progress must establish the parent disposition in the same batch. Set blockParentUntilDone true when the parent depends on that child. Only omit the wait when the same batch also closes the parent's independent scope with update_parent status done or cancelled. parentId alone is structural and never proves that the parent is waiting; missing both paths fails with delegated_parent_wait_required.",
     "Creating child tasks and delegating them to existing agents is task execution, not organization orchestration. Use assignee ids only from the current task context; server permissions still decide whether an assignment is allowed.",
     "Runtime actions use a strict schema. Unknown fields, unsupported action types, duplicate clientKey values, unknown client-key references, and client-key dependency cycles reject the entire batch before any mutation. blockedByIssueIds is supported only on create_child_task for existing issue UUIDs supplied by the current task context; connector preflight checks UUID shape, while the server validates same-company existence and permissions. Do not place it on update_parent or invent fields that are not in the canonical action examples.",
     "Use native JSON scalar types exactly: booleans such as create_child_task.blockParentUntilDone, top-level deliverables[].required, and create_interaction payload questions[].required must be true or false without quotes. Numbers such as minSelected/maxSelected/version must be numeric literals without quotes. String forms such as \"true\" or \"1\" reject the whole batch; AMaster does not silently coerce them.",
@@ -3556,6 +3575,9 @@ function runtimeActionsInstruction(options = {}) {
     options.canOrchestrateOrganization
       ? `For agent_hire, role must be one of: ${AGENT_HIRE_SCHEMA_ROLES.join(", ")}. Put custom business role names in name/title/capabilities/instructionsBundle, not in role. Map product/customer insight to research or product, growth/revenue to marketing or sales, finance/budget to finance, engineering delivery to engineering, legal/compliance to legal, customer success/support to customer_support. capabilities must be a string, not an array. instructionsBundle must use {entryFile:"AGENTS.md", files: {"AGENTS.md": "..."}}, and instructionsBundle.files must contain at least one file.`
       : "",
+    options.canOrchestrateOrganization
+      ? "Every agent_hire must declare exactly one reporting disposition. For an existing manager from the current task context, set reportsTo to that manager UUID. For a manager hired in the same batch, set reportsToAgentClientKey to the manager's clientKey. Only a genuinely company-root role may set topLevel true. reportsToAgentId is unsupported; use reportsTo for an existing manager UUID."
+      : "",
     options.canOrchestrateOrganization
       ? "When assigning a newly hired agent's first task in the same action batch, set clientKey on the agent_hire action and set assigneeAgentClientKey or agentClientKey on the create_child_task action to that same key. Do not leave the first task assigned to the current CEO/executing agent unless the CEO should actually do the work."
       : "",
@@ -3567,11 +3589,12 @@ function runtimeActionsInstruction(options = {}) {
       ? `Before final output, write only the JSON envelope to .amaster-runtime-actions.json and run this exact strict-schema validator: ${actionValidatorCommand}. Fix every reported error and rerun until it exits 0. JSON.parse alone is not sufficient. Do not include the marker in the temporary file.`
       : "",
     `Allowed action types: ${allowedActionTypes}.`,
-    "For every create_interaction action, set top-level kind to the interaction kind and set payload to a JSON object. Use this complete canonical request_confirmation example: {\"type\":\"create_interaction\",\"kind\":\"request_confirmation\",\"continuationPolicy\":\"wake_assignee_on_accept\",\"payload\":{\"version\":1,\"prompt\":\"Confirm this result?\",\"acceptLabel\":\"确认\",\"rejectLabel\":\"调整\"}}. Never use interactionType.",
+    "For upsert_document, write or replace a Markdown document on the current AMaster task. Use {\"type\":\"upsert_document\",\"key\":\"business-brief\",\"title\":\"2026-07-16 每日经营简报\",\"body\":\"# 每日经营简报\\n...\",\"format\":\"markdown\",\"changeSummary\":\"生成每日经营简报\"}. key, body, and format are required; format must be markdown. Never target a different issue.",
+    "For every create_interaction action, set top-level kind to the interaction kind and set payload to a JSON object. Use this complete canonical request_confirmation example: {\"type\":\"create_interaction\",\"kind\":\"request_confirmation\",\"continuationPolicy\":\"wake_assignee_on_accept\",\"payload\":{\"version\":1,\"prompt\":\"Confirm this result?\",\"acceptLabel\":\"确认\",\"rejectLabel\":\"调整\",\"target\":{\"type\":\"custom\",\"key\":\"delivery-review\",\"label\":\"交付结果\",\"revisionId\":\"v1\"}}}. Never use interactionType.",
     "Interactions cannot be updated with PATCH after creation. For direct API calls, include continuationPolicy in the initial POST /api/issues/{issueId}/interactions request and use only the documented POST accept, reject, respond, or cancel resolution endpoint afterward.",
     "For create_interaction ask_user_questions, use continuationPolicy wake_assignee, never wake_assignee_on_accept, because answering questions does not produce accepted status. Every question requires 1-10 options; do not emit an open-text question without options. The UI provides an Other text answer alongside the declared options. Use payload {\"version\":1,\"title\":\"...\",\"questions\":[{\"id\":\"question_key\",\"prompt\":\"Question text\",\"selectionMode\":\"single\",\"required\":true,\"options\":[{\"id\":\"option_key\",\"label\":\"Option label\"}]}]}. Do not use question/options.value at the top level.",
-    "For create_interaction request_confirmation, use payload {\"version\":1,\"prompt\":\"Confirm this result?\",\"acceptLabel\":\"确认\",\"rejectLabel\":\"调整\"}. Do not use options arrays for request_confirmation.",
-    "For create_interaction request_checkbox_confirmation, use payload {\"version\":1,\"prompt\":\"Select approved items\",\"options\":[{\"id\":\"option_key\",\"label\":\"Option label\"}],\"minSelected\":1,\"maxSelected\":2,\"acceptLabel\":\"确认\",\"rejectLabel\":\"调整\"}.",
+    "For create_interaction request_confirmation, follow the complete example above and do not use options arrays.",
+    "For create_interaction request_checkbox_confirmation, use payload {\"version\":1,\"prompt\":\"Select approved items\",\"options\":[{\"id\":\"option_key\",\"label\":\"Option label\"}],\"minSelected\":1,\"maxSelected\":2,\"acceptLabel\":\"确认\",\"rejectLabel\":\"调整\",\"target\":{\"type\":\"custom\",\"key\":\"approved-items\",\"label\":\"待批准项目\",\"revisionId\":\"v1\"}}.",
     "For create_interaction suggest_tasks, use payload {\"version\":1,\"tasks\":[{\"clientKey\":\"task_key\",\"title\":\"Task title\",\"description\":\"Task description\",\"priority\":\"medium\"}]}.",
     "When a suggested task should start automatically after acceptance, set assigneeAgentId to an agent id from the current task context. Set assigneeUserId only when a known user must own the task. Omit both assignee fields only when the accepted task should remain intentionally unassigned in backlog. Never substitute a role name for an assignee id.",
     "An external input or human approval cannot exist only as free-text owner/next-step prose. Create a human-owned create_child_task with assigneeUserId and blockParentUntilDone=true (or another explicit interaction/dependency path), then keep the parent blocked or in_review until it resolves.",
@@ -3580,6 +3603,7 @@ function runtimeActionsInstruction(options = {}) {
     "upload_artifact actions do not accept required. Artifact required belongs only to top-level deliverables entries, not action objects.",
     "When a child artifact is promoted as a replacement for a parent artifact, run upload_artifact on the parent issue and include both sourceWorkProductId (the child artifact) and supersedesWorkProductId (the current parent artifact). Never claim the parent artifact was corrected without this durable lineage.",
     "For derived artifacts, set evidenceRole=derived, sourceWorkProductIds to every consumed input work product, and scenarioKeys to the unchanged source scenario set. For post-implementation review artifacts, set evidenceRole=review and sourceWorkProductIds to the exact current artifacts reviewed; stale or missing sources fail closed.",
+    "When a child must consume current parent artifacts, set create_child_task.inputWorkProductIds to the exact parent work product UUIDs from task context. AMaster persists their attachment/SHA revision manifest and materializes only those required inputs under input-artifacts/. Do not assume parent attachments are implicitly copied into every child workspace.",
     "When creating a review child that must run after sibling implementation or governance tasks, express that ordering with blockedByClientKeys in the same create_child_task batch. Do not start a post-implementation review as an independent sibling without dependencies.",
     "For required deliverables, add top-level deliverables entries using {\"path\":\"relative/file\",\"required\":true}.",
     "update_parent accepts only status, comment, and force. Never put deliverables, artifacts, interactions, blockers, or child-task fields inside update_parent; keep top-level deliverables beside actions and use their dedicated action objects.",
@@ -3870,7 +3894,9 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
   const agentInstructions = renderAgentInstructionsBundle(asRecord(payload.agentInstructionsBundle));
   const runtimeAuth = commandRuntimeAuth(command);
   const hasRuntimeApi = Boolean(readString(runtimeAuth.apiUrl) && readString(runtimeAuth.apiKey));
-  const canOrchestrateOrganization = canRuntimeAgentOrchestrateOrganization(context);
+  const authorizationEnvelope = runtimeActionAuthorizationEnvelope(command);
+  const canOrchestrateOrganization = canRuntimeAgentOrchestrateOrganization(context)
+    && authorizationEnvelope.allowedActionClasses.has("organization_mutation");
   const decompositionRequirement = commandLegacyTaskDecompositionRequirement(command);
   const explicitDecompositionRequired = decompositionRequirement.required
     && runtimeActionChildIssueSummaryEntries(command).length === 0;
@@ -3908,6 +3934,7 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
       explicitDecompositionRequired,
       artifactVerifierCommands: options.artifactVerifierCommands,
       actionValidatorCommand,
+      authorizationEnvelope,
     }) : "",
     "",
     agentInstructions,
@@ -5755,6 +5782,97 @@ async function materializeIssueAttachments(config, command, workspace) {
   return materialized;
 }
 
+function safeArtifactInputSourceDir(entry, index) {
+  const raw = readString(entry.sourceIssueIdentifier) ?? readString(entry.sourceIssueId) ?? `source-${index + 1}`;
+  const safe = raw.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^\.+|\.+$/g, "").slice(0, 120);
+  return safe && safe !== "." && safe !== ".." ? safe : `source-${index + 1}`;
+}
+
+async function materializeRequiredArtifactInputs(config, command, workspace) {
+  const runtimeAuth = commandRuntimeAuth(command);
+  if (!readString(runtimeAuth.apiUrl) || !readString(runtimeAuth.apiKey)) return [];
+  const context = asRecord(asRecord(command.payload).contextSnapshot);
+  const issue = asRecord(context.paperclipIssue);
+  const manifest = asRecord(issue.artifactInputManifest);
+  if (Object.keys(manifest).length === 0) return [];
+  if (manifest.version !== 1 || !Array.isArray(manifest.entries)) {
+    throw new Error("artifact_input_manifest_invalid: expected version 1 entries array");
+  }
+
+  const targetRoot = join(workspace.cwd, "input-artifacts");
+  rmSync(targetRoot, { recursive: true, force: true });
+  mkdirSync(targetRoot, { recursive: true });
+  const usedPaths = new Set();
+  const materialized = [];
+  for (const [index, rawEntry] of manifest.entries.entries()) {
+    const entry = asRecord(rawEntry);
+    const workProductId = readString(entry.workProductId);
+    const attachmentId = readString(entry.attachmentId);
+    const sha256 = readString(entry.sha256);
+    const contentPath = readString(entry.contentPath);
+    const byteSize = readNumber(entry.byteSize, null);
+    if (!workProductId || !attachmentId || !/^[a-f0-9]{64}$/i.test(sha256 ?? "") || !contentPath || byteSize === null) {
+      throw new Error(`artifact_input_manifest_invalid: entry ${index} is incomplete`);
+    }
+    const expectedContentPath = `/api/attachments/${attachmentId}/content`;
+    if (contentPath !== expectedContentPath) {
+      throw new Error(`artifact_input_manifest_invalid: entry ${index} contentPath does not match attachmentId`);
+    }
+    const body = await runtimeApiBuffer(runtimeAuth, contentPath);
+    const actualSha256 = createHash("sha256").update(body).digest("hex");
+    if (body.byteLength !== byteSize || actualSha256 !== sha256) {
+      throw new Error(
+        `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha256} actualSha256=${actualSha256}`,
+      );
+    }
+
+    const sourceDir = safeArtifactInputSourceDir(entry, index);
+    let filename = safeMaterializedAttachmentFilename({
+      id: attachmentId,
+      originalFilename: readString(entry.originalFilename),
+    }, index);
+    let relativePath = join("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    if (usedPaths.has(relativePath)) {
+      const ext = extname(filename);
+      const stem = ext ? filename.slice(0, -ext.length) : filename;
+      filename = `${stem}-${index + 1}${ext}`;
+      relativePath = join("input-artifacts", sourceDir, filename).split(/[\\/]+/).join("/");
+    }
+    usedPaths.add(relativePath);
+    const targetPath = join(workspace.cwd, relativePath);
+    mkdirSync(dirname(targetPath), { recursive: true });
+    writeFileSync(targetPath, body);
+    chmodSync(targetPath, 0o444);
+    materialized.push({
+      id: attachmentId,
+      workProductId,
+      sourceIssueId: readString(entry.sourceIssueId),
+      sourceIssueIdentifier: readString(entry.sourceIssueIdentifier),
+      name: readString(entry.originalFilename) ?? filename,
+      path: targetPath,
+      relativePath,
+      contentType: readString(entry.contentType),
+      byteSize: body.byteLength,
+      sha256,
+      contentPath,
+    });
+  }
+
+  const localManifest = {
+    version: 1,
+    entries: materialized.map(({ path: _path, relativePath, ...entry }) => ({ ...entry, path: relativePath })),
+  };
+  const manifestPath = join(targetRoot, "artifact-input-manifest.json");
+  writeFileSync(manifestPath, JSON.stringify(localManifest, null, 2) + "\n");
+  chmodSync(manifestPath, 0o444);
+  updateWorkspaceManifest(workspaceManifestPath(workspace), { artifactInputManifest: localManifest });
+  await ingestLog(config, command, "system", "info", `Materialized ${materialized.length} required artifact input(s) into the execution workspace`, {
+    artifactInputCount: materialized.length,
+    artifactInputs: localManifest.entries,
+  });
+  return materialized;
+}
+
 function issueCheckpointDir(workspace) {
   return join(dirname(workspace.runDir), "checkpoint");
 }
@@ -6054,7 +6172,11 @@ function runtimeChildActionFingerprint(action, issueId, parentIssueId) {
     title,
     status: readActionStatus(action.status) ?? null,
     priority: readActionPriority(action.priority) ?? null,
+    blockParentUntilDone: action.blockParentUntilDone === true || readActionStatus(action.status) === "blocked",
     parentClientKey: readString(action.parentClientKey) ?? null,
+    inputWorkProductIds: Array.isArray(action.inputWorkProductIds)
+      ? action.inputWorkProductIds.map(readString).filter(Boolean).sort()
+      : [],
     blockedByClientKeys: Array.isArray(action.blockedByClientKeys)
       ? action.blockedByClientKeys.map(readString).filter(Boolean).sort()
       : [],
@@ -6075,7 +6197,9 @@ function runtimeAgentHireActionFingerprint(action, companyId, issueId, body) {
     adapterType: readString(body.adapterType) ?? null,
     sourceIssueId: readString(body.sourceIssueId) ?? null,
     sourceIssueIds: runtimeActionIssueIdList(body.sourceIssueIds).sort(),
+    reportsTo: readString(body.reportsTo) ?? null,
     reportsToAgentClientKey: readString(action.reportsToAgentClientKey) ?? null,
+    topLevel: action.topLevel === true,
   })}`;
 }
 
@@ -6233,7 +6357,7 @@ function runtimeActionAcceptedConfirmationContinuation(command) {
   if (context.acceptedConfirmationContinuation === true) return true;
   if (readString(context.wakeReason) === "request_confirmation_accepted") return true;
   if (
-    readString(context.interactionKind) === "request_confirmation" &&
+    ["request_confirmation", "request_checkbox_confirmation"].includes(readString(context.interactionKind) ?? "") &&
     readString(context.interactionStatus) === "accepted"
   ) {
     return true;
@@ -6242,7 +6366,7 @@ function runtimeActionAcceptedConfirmationContinuation(command) {
   const interactions = Array.isArray(wake.interactions) ? wake.interactions : [];
   return interactions.some((entry) => {
     const interaction = asRecord(entry);
-    return readString(interaction.kind) === "request_confirmation" &&
+    return ["request_confirmation", "request_checkbox_confirmation"].includes(readString(interaction.kind) ?? "") &&
       readString(interaction.status) === "accepted";
   });
 }
@@ -6934,16 +7058,17 @@ const RUNTIME_ACTION_ALLOWED_FIELDS = new Map([
     "title", "description", "status", "priority", "assigneeAgentId", "assigneeUserId",
     "assigneeAgentClientKey", "agentClientKey", "blockParentUntilDone", "executeBeforeConfirmation",
     "clientKey", "idempotencyKey", "parentClientKey", "blockedByIssueIds", "blockedByClientKeys", "create_child_task",
+    "inputWorkProductIds",
   ])],
   ["agent_hire", new Set([
     "clientKey", "idempotencyKey", "key", "companyId", "role", "title", "icon", "reportsTo",
-    "reportsToAgentClientKey", "capabilities", "desiredSkills", "adapterType", "adapterConfig",
+    "reportsToAgentClientKey", "topLevel", "capabilities", "desiredSkills", "adapterType", "adapterConfig",
     "instructionsBundle", "runtimeConfig", "defaultEnvironmentId", "budgetMonthlyCents", "permissions",
     "metadata", "sourceIssueId", "sourceIssueIds", "executeBeforeConfirmation", "agent_hire", "agent_hire/create_agent",
   ])],
   ["create_agent", new Set([
     "clientKey", "idempotencyKey", "key", "companyId", "role", "title", "icon", "reportsTo",
-    "reportsToAgentClientKey", "capabilities", "desiredSkills", "adapterType", "adapterConfig",
+    "reportsToAgentClientKey", "topLevel", "capabilities", "desiredSkills", "adapterType", "adapterConfig",
     "instructionsBundle", "runtimeConfig", "defaultEnvironmentId", "budgetMonthlyCents", "permissions",
     "metadata", "sourceIssueId", "sourceIssueIds", "executeBeforeConfirmation", "create_agent",
   ])],
@@ -6954,6 +7079,9 @@ const RUNTIME_ACTION_ALLOWED_FIELDS = new Map([
     "sourceWorkProductId", "sourceWorkProductIds", "supersedesWorkProductId", "evidenceRole", "scenarioKeys",
     "idempotencyKey", "upload_artifact",
   ])],
+  ["upsert_document", new Set([
+    "key", "title", "body", "format", "changeSummary", "baseRevisionId", "upsert_document",
+  ])],
   ["create_interaction", new Set([
     "kind", "continuationPolicy", "title", "summary", "idempotencyKey", "interaction", "version",
     "prompt", "question", "body", "content", "text", "message", "description", "acceptLabel",
@@ -6990,8 +7118,11 @@ function assertNoUnsupportedRuntimeActionFields(action, actionIndex) {
     if (RUNTIME_ACTION_COMMON_FIELDS.has(field) || allowed.has(field)) continue;
     const fieldPath = `actions[${actionIndex}].${field}`;
     const receivedType = runtimeActionReceivedType(value);
+    const managerFieldHint = ["agent_hire", "create_agent"].includes(type ?? "") && field === "reportsToAgentId"
+      ? "; reportsToAgentId is unsupported; use reportsTo for an existing manager UUID or reportsToAgentClientKey for a manager hired in the same batch"
+      : "";
     const err = runtimeActionValidationError(
-      `${type} action has unsupported field ${field} at ${fieldPath}; received ${receivedType}`,
+      `${type} action has unsupported field ${field} at ${fieldPath}; received ${receivedType}${managerFieldHint}`,
     );
     err.runtimeActionFieldPath = fieldPath;
     err.runtimeActionReceivedType = receivedType;
@@ -7002,12 +7133,13 @@ function assertNoUnsupportedRuntimeActionFields(action, actionIndex) {
 const RUNTIME_ACTION_BOOLEAN_FIELDS = new Set([
   "blockParentUntilDone", "executeBeforeConfirmation", "createWorkProduct", "isPrimary",
   "force", "markAutoDerived", "rejectRequiresReason", "allowDeclineReason", "supersedeOnUserComment",
-  "required",
+  "required", "topLevel",
 ]);
 const RUNTIME_ACTION_NUMBER_FIELDS = new Set(["budgetMonthlyCents", "minSelected", "maxSelected", "version"]);
 const RUNTIME_ACTION_ARRAY_FIELDS = new Set([
   "blockedByIssueIds", "blockedByClientKeys", "desiredSkills", "sourceIssueIds", "artifactRefs", "tasks",
   "options", "defaultSelectedOptionIds", "questions", "sourceWorkProductIds", "scenarioKeys",
+  "inputWorkProductIds",
 ]);
 const RUNTIME_ACTION_OBJECT_FIELDS = new Set([
   "adapterConfig", "instructionsBundle", "runtimeConfig", "permissions", "metadata", "target",
@@ -7288,6 +7420,29 @@ function assertNoAmbiguousApprovalGatedSideEffects(actions) {
   throw error;
 }
 
+function assertDelegatedParentWaitDisposition(actions) {
+  const closesIndependentParentScope = actions.some((action) => {
+    const fields = runtimeActionBusinessFields(action);
+    if (readRuntimeActionType(fields) !== "update_parent") return false;
+    return ["done", "cancelled"].includes(readActionStatus(fields.status) ?? "");
+  });
+  for (const [actionIndex, action] of actions.entries()) {
+    const fields = runtimeActionBusinessFields(action);
+    if (readRuntimeActionType(fields) !== "create_child_task") continue;
+    if (readString(fields.parentClientKey)) continue;
+    const status = readActionStatus(fields.status) ?? "todo";
+    if (!["todo", "in_progress"].includes(status)) continue;
+    if (fields.blockParentUntilDone === true || closesIndependentParentScope) continue;
+    const err = runtimeActionValidationError(
+      "delegated_parent_wait_required: root executable child tasks require blockParentUntilDone true, or the same batch must close the parent's independent scope with update_parent done/cancelled",
+    );
+    err.runtimeActionType = "create_child_task";
+    err.runtimeActionFieldPath = `actions[${actionIndex}].blockParentUntilDone`;
+    err.runtimeActionReason = err.message;
+    throw err;
+  }
+}
+
 function assertExplicitTaskDecomposition(command, actions) {
   const requirement = commandLegacyTaskDecompositionRequirement(command);
   if (!requirement.required) return;
@@ -7358,14 +7513,34 @@ function preflightRuntimeAction(action, preflightContext, actionIndex) {
         );
       }
     }
+    if (fields.inputWorkProductIds !== undefined) {
+      const seen = new Set();
+      for (const [index, rawWorkProductId] of fields.inputWorkProductIds.entries()) {
+        const workProductId = readString(rawWorkProductId);
+        assertRuntimeActionValid(
+          workProductId && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(workProductId),
+          `create_child_task inputWorkProductIds[${index}] must be a UUID`,
+        );
+        assertRuntimeActionValid(
+          !seen.has(workProductId),
+          `create_child_task inputWorkProductIds[${index}] duplicates ${workProductId}`,
+        );
+        seen.add(workProductId);
+      }
+    }
     return;
   }
   if (["agent_hire", "create_agent"].includes(type ?? "")) {
     assertNoPlaceholderRuntimeActionText(fields, ["name", "role", "title", "instructionsBundle"]);
     assertRuntimeActionValid(readBoundedActionString(fields, "name", 240), `${type} action requires name`);
+    const reportingDispositionCount = [
+      Boolean(readString(fields.reportsTo)),
+      Boolean(readString(fields.reportsToAgentClientKey)),
+      fields.topLevel === true,
+    ].filter(Boolean).length;
     assertRuntimeActionValid(
-      !readString(fields.reportsTo) || !readString(fields.reportsToAgentClientKey),
-      `${type} action cannot combine reportsTo with reportsToAgentClientKey`,
+      reportingDispositionCount === 1,
+      `${type} action requires exactly one of reportsTo, reportsToAgentClientKey, or topLevel true`,
     );
     return;
   }
@@ -7413,6 +7588,20 @@ function preflightRuntimeAction(action, preflightContext, actionIndex) {
     resolveWorkspaceArtifactPath(fields, { cwd: preflightContext.cwd });
     return;
   }
+  if (type === "upsert_document") {
+    assertNoPlaceholderRuntimeActionText(fields, ["key", "title", "body", "changeSummary"]);
+    const key = readBoundedActionString(fields, "key", 64);
+    const body = readBoundedActionString(fields, "body", 524_288);
+    assertRuntimeActionValid(key && /^[a-z0-9][a-z0-9_-]*$/.test(key), "upsert_document key must use lowercase letters, numbers, _ or -");
+    assertRuntimeActionValid(body, "upsert_document action requires body");
+    assertRuntimeActionValid(fields.format === "markdown", "upsert_document format must be markdown");
+    const baseRevisionId = readString(fields.baseRevisionId);
+    assertRuntimeActionValid(
+      !baseRevisionId || /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(baseRevisionId),
+      "upsert_document baseRevisionId must be a UUID",
+    );
+    return;
+  }
   if (type === "create_interaction") {
     assertNoPlaceholderRuntimeActionText(fields, ["title", "summary", "payload"]);
     assertCanonicalCreateInteractionShape(fields);
@@ -7431,6 +7620,17 @@ function preflightRuntimeAction(action, preflightContext, actionIndex) {
       `create_interaction.${kind} action requires payload; expected shape is available in runtimeActionDiagnostics.expectedShape`,
     );
     assertRuntimeCreateInteractionPayload(kind, payload);
+    const confirmationTarget = asRecord(payload.target);
+    if (
+      preflightContext.acceptedConfirmationContinuation &&
+      ["request_confirmation", "request_checkbox_confirmation"].includes(kind) &&
+      (!readString(confirmationTarget.type) || !readString(confirmationTarget.key))
+    ) {
+      assertRuntimeActionValid(
+        false,
+        "accepted_confirmation_decision_target_required: an accepted confirmation continuation requires payload.target.type and a non-empty payload.target.key so the server can identify the decision; use a new target revision for genuinely changed content or finish the accepted work",
+      );
+    }
     preflightContext.createdReviewPathForInReview = true;
     return;
   }
@@ -7486,6 +7686,7 @@ function preflightRuntimeAction(action, preflightContext, actionIndex) {
 
 function preflightRuntimeActionBatch(actions, options = {}) {
   const actionIndexByObject = new Map(actions.map((action, index) => [action, index]));
+  assertDelegatedParentWaitDisposition(actions);
   const orderedActions = orderRuntimeActionsByClientKeyDependencies(actions);
   assertRuntimeActionsAllowedByContinuationScope(orderedActions, options.continuationScope);
   assertNoAmbiguousApprovalGatedSideEffects(orderedActions);
@@ -7494,6 +7695,7 @@ function preflightRuntimeActionBatch(actions, options = {}) {
     createdRootBlockingChildForInReview: false,
     createdHumanOwnedInputPath: false,
     answeredQuestionContinuation: options.answeredQuestionContinuation === true,
+    acceptedConfirmationContinuation: options.acceptedConfirmationContinuation === true,
     allowedContentTypes: Array.isArray(options.allowedContentTypes) ? options.allowedContentTypes : [],
     cwd: readString(options.cwd),
     finalCommentBodies: [],
@@ -7596,6 +7798,7 @@ const SINGLE_KEY_RUNTIME_ACTION_TYPES = new Set([
   "create_child_task",
   "create_interaction",
   "create_routine",
+  "upsert_document",
   "update_company_profile",
   "update_parent",
   "upload_artifact",
@@ -7669,6 +7872,9 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
       assigneeAgentId: runtimeChildAssigneeAgentId(fields, runtimeAuth, command, actionContext),
       assigneeUserId: readString(fields.assigneeUserId),
       blockedByIssueIds: runtimeActionBlockedByIssueIds(fields, actionContext),
+      ...(Array.isArray(fields.inputWorkProductIds)
+        ? { inputWorkProductIds: fields.inputWorkProductIds.map(readString).filter(Boolean) }
+        : {}),
       blockParentUntilDone,
       originKind: "amaster_runtime_child_task",
       originId: issueId,
@@ -7755,6 +7961,11 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
         `runtime_action_postcondition_failed: agent reportsTo mismatch; expected ${reportsTo}, received ${readString(agent.reportsTo) ?? "missing"}`,
       );
     }
+    if (fields.topLevel === true && readString(agent.reportsTo)) {
+      throw new Error(
+        `runtime_action_postcondition_failed: top-level agent reportsTo mismatch; expected missing, received ${readString(agent.reportsTo)}`,
+      );
+    }
     if (agentId && clientKey) actionContext.agentIdByClientKey.set(clientKey, agentId);
     return {
       type,
@@ -7767,6 +7978,8 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
       approvalStatus: readString(approval.status),
       sourceIssueId: readString(body.sourceIssueId) ?? null,
       sourceIssueIds: runtimeActionIssueIdList(body.sourceIssueIds),
+      reportsTo: reportsTo ?? null,
+      topLevel: fields.topLevel === true,
       ...(clientKey ? { clientKey } : {}),
       reusedExisting: asRecord(created).reusedExisting === true,
     };
@@ -7824,12 +8037,22 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
       const existingWorkProduct = existingExplicitArtifactUploadMatch(filePath, title, existingWorkProducts, fields);
       if (existingWorkProduct) {
         const metadata = asRecord(existingWorkProduct.metadata);
+        const existingWorkProductId = readString(existingWorkProduct.id);
+        const existingAttachmentId = readString(metadata.attachmentId);
+        if (!existingWorkProductId || !existingAttachmentId) {
+          throw new Error("runtime_action_postcondition_failed: reused artifact is missing work product or attachment identity");
+        }
+        await verifyUploadedArtifactPostcondition(runtimeAuth, issueId, {
+          attachmentId: existingAttachmentId,
+          workProductId: existingWorkProductId,
+          sha256,
+        }, fields);
         return {
           type,
           ...(originalType && originalType !== type ? { originalType } : {}),
           path: filePath,
-          attachmentId: readString(metadata.attachmentId),
-          workProductId: readString(existingWorkProduct.id),
+          attachmentId: existingAttachmentId,
+          workProductId: existingWorkProductId,
           sha256: readString(metadata.sha256) ?? sha256,
           byteSize: readNumber(metadata.byteSize, fileBytes.byteLength),
           originalFilename: readString(metadata.originalFilename) ?? filename,
@@ -7851,11 +8074,12 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
     if (!attachmentId) throw new Error("upload_artifact attachment response did not include id");
 
     let workProduct = null;
-    if (fields.createWorkProduct !== false) {
-      const contentPath = readString(attachment.contentPath) ?? `/api/attachments/${attachmentId}/content`;
-      const openPath = readString(attachment.openPath) ?? contentPath;
-      const downloadPath = readString(attachment.downloadPath) ?? `${contentPath}?download=1`;
-      workProduct = asRecord(await runtimeApiJson(runtimeAuth, "POST", `/api/issues/${encodeURIComponent(issueId)}/work-products`, {
+    try {
+      if (fields.createWorkProduct !== false) {
+        const contentPath = readString(attachment.contentPath) ?? `/api/attachments/${attachmentId}/content`;
+        const openPath = readString(attachment.openPath) ?? contentPath;
+        const downloadPath = readString(attachment.downloadPath) ?? `${contentPath}?download=1`;
+        workProduct = asRecord(await runtimeApiJson(runtimeAuth, "POST", `/api/issues/${encodeURIComponent(issueId)}/work-products`, {
         type: "artifact",
         provider: readString(fields.provider) ?? "paperclip",
         title,
@@ -7880,10 +8104,20 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
           ...(readString(fields.evidenceRole) ? { evidenceRole: readString(fields.evidenceRole) } : {}),
           ...(Array.isArray(fields.scenarioKeys) ? { scenarioKeys: fields.scenarioKeys.map(readString).filter(Boolean) } : {}),
         },
-      }));
-      if (!readString(workProduct.id)) {
-        throw new Error("runtime_action_postcondition_failed: artifact work product response did not include id");
+        }));
+        const workProductId = readString(workProduct.id);
+        if (!workProductId) {
+          throw new Error("runtime_action_postcondition_failed: artifact work product response did not include id");
+        }
+        await verifyUploadedArtifactPostcondition(runtimeAuth, issueId, {
+          attachmentId,
+          workProductId,
+          sha256: readString(attachment.sha256) ?? sha256,
+        }, fields);
       }
+    } catch (err) {
+      await cleanupFailedArtifactUpload(config, command, runtimeAuth, attachmentId, readString(workProduct?.id), err);
+      throw err;
     }
 
     return {
@@ -7941,6 +8175,37 @@ async function applyRuntimeAction(config, command, runtimeAuth, issueId, action,
     };
   }
 
+  if (type === "upsert_document") {
+    assertNoPlaceholderRuntimeActionText(fields, ["key", "title", "body", "changeSummary"]);
+    const key = readBoundedActionString(fields, "key", 64);
+    if (!key || !/^[a-z0-9][a-z0-9_-]*$/.test(key)) {
+      throw new Error("upsert_document key must use lowercase letters, numbers, _ or -");
+    }
+    const body = readBoundedActionString(fields, "body", 524_288);
+    if (!body) throw new Error("upsert_document action requires body");
+    if (fields.format !== "markdown") throw new Error("upsert_document format must be markdown");
+    const document = asRecord(await runtimeApiJson(
+      runtimeAuth,
+      "PUT",
+      `/api/issues/${encodeURIComponent(issueId)}/documents/${encodeURIComponent(key)}`,
+      {
+        title: readBoundedActionString(fields, "title", 200) ?? null,
+        format: "markdown",
+        body,
+        changeSummary: readBoundedActionString(fields, "changeSummary", 500) ?? null,
+        baseRevisionId: readString(fields.baseRevisionId) ?? null,
+      },
+    ));
+    return {
+      type,
+      ...(originalType && originalType !== type ? { originalType } : {}),
+      issueId,
+      key,
+      documentId: readString(document.id),
+      revisionNumber: typeof document.latestRevisionNumber === "number" ? document.latestRevisionNumber : undefined,
+    };
+  }
+
   if (type === "update_parent") {
     assertNoPlaceholderRuntimeActionText(fields, ["comment"]);
     const patch = {};
@@ -8396,6 +8661,16 @@ function runtimeActionExpectedShape(actionType, actionKind) {
   if (actionType === "upload_artifact") {
     return { type: "upload_artifact", path: "relative/path.ext", title: "Artifact title", summary: "Artifact summary" };
   }
+  if (actionType === "upsert_document") {
+    return {
+      type: "upsert_document",
+      key: "business-brief",
+      title: "2026-07-16 每日经营简报",
+      body: "# 每日经营简报\n\n经营摘要。",
+      format: "markdown",
+      changeSummary: "生成每日经营简报",
+    };
+  }
   if (actionType === "agent_hire" || actionType === "create_agent") {
     return {
       type: actionType,
@@ -8613,6 +8888,27 @@ function piOutputUsageMetadataMissing(parsed) {
   return totalTokens <= 0;
 }
 
+function runtimeBusinessDisposition(runtimeActions, inferredArtifactUploads) {
+  const results = Array.isArray(runtimeActions?.results)
+    ? runtimeActions.results.map(asRecord).filter((result) => !isSkippedRuntimeActionResult(result))
+    : [];
+  const terminalUpdate = results.find((result) =>
+    readString(result.type) === "update_parent" &&
+    ["done", "cancelled", "blocked", "in_review"].includes(readString(result.status) ?? ""));
+  const terminalStatus = readString(terminalUpdate?.status);
+  if (["done", "cancelled"].includes(terminalStatus ?? "")) {
+    return { state: "completed", reason: `parent_${terminalStatus}` };
+  }
+  if (terminalStatus === "blocked") return { state: "blocked", reason: "parent_blocked" };
+  if (terminalStatus === "in_review" || results.some((result) => readString(result.type) === "create_interaction")) {
+    return { state: "waiting", reason: "review_or_interaction_path_recorded" };
+  }
+  if (results.length > 0 || readNumber(inferredArtifactUploads?.appliedCount, 0) > 0) {
+    return { state: "needs_followup", reason: "durable_progress_without_terminal_disposition" };
+  }
+  return { state: "missing", reason: "no_durable_action_or_live_path" };
+}
+
 function piCompletionOutputStopped(parsed, execution) {
   return execution?.timedOut !== true
     && execution?.signal === "SIGTERM"
@@ -8920,9 +9216,11 @@ async function applyRuntimeActionBridge(config, command, parsed, execution, cwd)
   }
   let actions = orderRuntimeActionsForGovernance([...generatedUploadActions, ...rawActions]);
   const answeredQuestionContinuation = runtimeActionAnsweredQuestionContinuation(command);
+  const acceptedConfirmationContinuation = runtimeActionAcceptedConfirmationContinuation(command);
   try {
     actions = preflightRuntimeActionBatch(actions, {
       answeredQuestionContinuation,
+      acceptedConfirmationContinuation,
       allowedContentTypes,
       continuationScope,
       cwd,
@@ -8960,7 +9258,7 @@ async function applyRuntimeActionBridge(config, command, parsed, execution, cwd)
     createdChildIssueIdByFingerprint: new Map(),
     completedChildIssuesByTitle: runtimeActionCompletedChildIssueMap(command),
     createdReviewPathForInReview: false,
-    acceptedConfirmationContinuation: runtimeActionAcceptedConfirmationContinuation(command),
+    acceptedConfirmationContinuation,
     answeredQuestionContinuation,
     finalCommentBodies: [],
   };
@@ -9071,6 +9369,72 @@ async function listExistingIssueWorkProducts(runtimeAuth, issueId) {
   }
 }
 
+async function verifyUploadedArtifactPostcondition(runtimeAuth, issueId, expected, fields) {
+  const [workProducts, attachments] = await Promise.all([
+    runtimeApiJson(runtimeAuth, "GET", `/api/issues/${encodeURIComponent(issueId)}/work-products`),
+    runtimeApiJson(runtimeAuth, "GET", `/api/issues/${encodeURIComponent(issueId)}/attachments`),
+  ]);
+  const workProduct = Array.isArray(workProducts)
+    ? workProducts.map(asRecord).find((entry) => readString(entry.id) === expected.workProductId)
+    : null;
+  const attachment = Array.isArray(attachments)
+    ? attachments.map(asRecord).find((entry) => readString(entry.id) === expected.attachmentId)
+    : null;
+  const metadata = asRecord(workProduct?.metadata);
+  const expectedSourceIds = Array.isArray(fields.sourceWorkProductIds)
+    ? fields.sourceWorkProductIds.map(readString).filter(Boolean).sort()
+    : [];
+  const persistedSourceIds = Array.isArray(metadata.sourceWorkProductIds)
+    ? metadata.sourceWorkProductIds.map(readString).filter(Boolean).sort()
+    : [];
+  const expectedScenarioKeys = Array.isArray(fields.scenarioKeys)
+    ? fields.scenarioKeys.map(readString).filter(Boolean).sort()
+    : [];
+  const persistedScenarioKeys = Array.isArray(metadata.scenarioKeys)
+    ? metadata.scenarioKeys.map(readString).filter(Boolean).sort()
+    : [];
+  const failures = [
+    !workProduct ? "work product missing" : null,
+    !attachment ? "attachment missing" : null,
+    readString(metadata.attachmentId) !== expected.attachmentId ? "work product attachmentId mismatch" : null,
+    readString(metadata.sha256) !== expected.sha256 ? "work product SHA mismatch" : null,
+    readString(attachment?.sha256) !== expected.sha256 ? "attachment SHA mismatch" : null,
+    readString(metadata.sourceWorkProductId) !== readString(fields.sourceWorkProductId) ? "sourceWorkProductId mismatch" : null,
+    readString(metadata.supersedesWorkProductId) !== readString(fields.supersedesWorkProductId) ? "supersedesWorkProductId mismatch" : null,
+    readString(metadata.evidenceRole) !== readString(fields.evidenceRole) ? "evidenceRole mismatch" : null,
+    JSON.stringify(persistedSourceIds) !== JSON.stringify(expectedSourceIds) ? "sourceWorkProductIds mismatch" : null,
+    JSON.stringify(persistedScenarioKeys) !== JSON.stringify(expectedScenarioKeys) ? "scenarioKeys mismatch" : null,
+  ].filter(Boolean);
+  if (failures.length > 0) {
+    throw new Error(`runtime_action_postcondition_failed: artifact upload readback failed: ${failures.join("; ")}`);
+  }
+}
+
+async function cleanupFailedArtifactUpload(config, command, runtimeAuth, attachmentId, workProductId, cause) {
+  const cleanupFailures = [];
+  if (workProductId) {
+    try {
+      await runtimeApiJson(runtimeAuth, "DELETE", `/api/work-products/${encodeURIComponent(workProductId)}`);
+    } catch (err) {
+      cleanupFailures.push(`workProduct=${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  try {
+    await runtimeApiJson(runtimeAuth, "DELETE", `/api/attachments/${encodeURIComponent(attachmentId)}`);
+  } catch (err) {
+    cleanupFailures.push(`attachment=${err instanceof Error ? err.message : String(err)}`);
+  }
+  await ingestLog(config, command, "system", "error", "Artifact upload postcondition failed", {
+    attachmentId,
+    workProductId: workProductId ?? null,
+    cause: cause instanceof Error ? cause.message : String(cause),
+    cleanupFailures,
+  });
+  if (cleanupFailures.length > 0) {
+    throw new Error(`${cause instanceof Error ? cause.message : String(cause)}; cleanup failed: ${cleanupFailures.join("; ")}`);
+  }
+}
+
 function existingArtifactUploadMatches(artifact, existingWorkProducts) {
   const filename = basename(artifact.path);
   const byteSize = statSync(artifact.path).size;
@@ -9245,9 +9609,10 @@ async function executeRunCommand(config, command) {
     });
   }
   await materializeIssueCheckpoint(config, command, workspace);
-  let materializedAttachments = [];
+  const requiredArtifactInputs = await materializeRequiredArtifactInputs(config, command, workspace);
+  let materializedAttachments = requiredArtifactInputs;
   try {
-    materializedAttachments = await materializeIssueAttachments(config, command, workspace);
+    materializedAttachments = [...requiredArtifactInputs, ...await materializeIssueAttachments(config, command, workspace)];
   } catch (err) {
     await ingestLog(config, command, "system", "warn", `Failed to materialize issue attachments: ${err instanceof Error ? err.message : String(err)}`, {
       error: err instanceof Error ? err.message : String(err),
@@ -9472,6 +9837,7 @@ async function executeRunCommand(config, command) {
         ? "Executor cancelled by AMaster control plane"
       : execution.spawnError ?? parsedErrorMessage ?? runtimeActionError ?? inferredArtifactError ?? (succeeded ? null : `Executor exited with code ${execution.exitCode ?? "unknown"}`);
     const artifactUploadSummary = runtimeArtifactUploadSummary(runtimeActions, inferredArtifactUploads);
+    const businessDisposition = runtimeBusinessDisposition(runtimeActions, inferredArtifactUploads);
     const costUsage = parsedCostUsage(parsed.usage);
     const result = {
       executorKind: executor.kind,
@@ -9542,6 +9908,7 @@ async function executeRunCommand(config, command) {
       ...(runtimeActions ? { runtimeActions } : {}),
       ...(inferredArtifactUploads ? { inferredArtifactUploads } : {}),
       ...(artifactUploadSummary ? { artifactUploadSummary } : {}),
+      businessDisposition,
     };
     const completion = await completeCommand(config, command, cancelled ? "cancelled" : succeeded ? "succeeded" : "failed", result, error ?? undefined);
     if (!completion) {

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.0-beta.7";
+const CONNECTOR_VERSION = "0.1.0-beta.9";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.0-beta.7",
+  "version": "0.1.0-beta.9",
   "description": "AMaster Employee runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",