@amaster.ai/employee-runtime-connector 0.1.1-beta.0 → 0.1.1-beta.1

package/README.md

@@ -40,7 +40,7 @@ Pi execution uses three separate evidence layers:
 2. a durable, inspectable Runtime Action receipt or finalized Runtime Artifact;
 3. process cleanup disposition.
 
-An exact process-kill `EPERM` error emitted only after the first two layers have completed may be isolated as a failed `cleanupDisposition` warning without changing the command's successful business result. Both accepted shapes require `kill` and `EPERM`; generic filesystem/process permission text such as `EPERM: operation not permitted, unlink ...` is a business error. A `runtime_action.status` readback is evidence only when its call/plan ref matches an earlier submit/commit receipt in the same transcript. The diagnostic and durable evidence reference remain in the result. Text-only or action-only-without-assistant-output streams, standalone governed reads, non-effect Runtime Action tools, rejected or pending effects, pre-terminal errors, provider failures, timeout, cancellation, resource limits, any signal, live residue, and uncertain ownership remain failures.
+An exact process-kill `EPERM` error emitted only after the first two layers have completed may be isolated as a failed `cleanupDisposition` warning without changing the command's successful business result. Both accepted shapes require `kill` and `EPERM`; generic filesystem/process permission text such as `EPERM: operation not permitted, unlink ...` is a business error. Durable evidence is limited to a completed Runtime Action, a finalized Runtime Artifact, or an accepted `company_diagnosis_brief` provider receipt whose invocation and returned Diagnosis/document/work-product identities are exact. A `runtime_action.status` readback is evidence only when its call/plan ref matches an earlier submit/commit receipt in the same transcript. The diagnostic and durable evidence reference remain in the result. Text-only or action-only-without-assistant-output streams, standalone governed reads, non-effect Runtime Action tools, rejected or pending effects, pre-terminal errors, provider failures, timeout, cancellation, resource limits, any signal, live residue, and uncertain ownership remain failures.
 
 This isolation does not schedule a retry or a second business continuation. Command result delivery and the result outbox remain the sole idempotency boundary.
 

package/dist/amaster-runtime-daemon.mjs

@@ -2,9 +2,9 @@
 // MirrorX runtime connector daemon bundle.
 
 // src/amaster-runtime-daemon.mjs
-import { createHash as createHash10 } from "node:crypto";
-import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, readFileSync as readFileSync11, readdirSync as readdirSync9, realpathSync as realpathSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync7, symlinkSync as symlinkSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
-import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3 } from "node:os";
+import { createHash as createHash11 } from "node:crypto";
+import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, mkdtempSync, readFileSync as readFileSync11, readdirSync as readdirSync9, realpathSync as realpathSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync7, symlinkSync as symlinkSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3, tmpdir } from "node:os";
 import { basename as basename6, delimiter as delimiter2, dirname as dirname9, extname as extname2, isAbsolute as isAbsolute8, join as join15, relative as relative9, resolve as resolve12 } from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync6 } from "node:child_process";
 
@@ -1607,7 +1607,7 @@ var MANAGED_PI_PROVIDER_PROTECTED_ENV_NAMES = Object.freeze([
 function isRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value);
 }
-function readJsonFile2(filePath) {
+function readJsonFile(filePath) {
   try {
     const parsed = JSON.parse(readFileSync2(filePath, "utf8"));
     return asRecord(parsed);
@@ -1679,7 +1679,7 @@ function syncAmasterProviderModels(agentDir, executorEnv) {
   const apiKey = readString(executorEnv.AMASTER_API_KEY);
   if (!apiKey) return false;
   const modelsPath = join3(agentDir, "models.json");
-  const config = readJsonFile2(modelsPath);
+  const config = readJsonFile(modelsPath);
   const providers = asRecord(config.providers);
   const amaster = { ...asRecord(providers.amaster) };
   amaster.apiKey = managedApiKeyConfigValue(executorEnv, apiKey);
@@ -1707,7 +1707,7 @@ function syncAmasterProviderSettings(agentDir, executorEnv) {
   if (!apiKey) return false;
   const settingsPath = join3(agentDir, "settings.json");
   if (!existsSync2(settingsPath)) return false;
-  const settings = readJsonFile2(settingsPath);
+  const settings = readJsonFile(settingsPath);
   const baseUrl = readString(executorEnv.AMASTER_PROVIDER_BASE_URL);
   const defaultModel = readString(executorEnv.AMASTER_PROVIDER_DEFAULT_MODEL);
   const imageGenBaseUrl = imageGenBaseUrlFromProviderBaseUrl(baseUrl);
@@ -2264,8 +2264,13 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (!existsSync3(packagePath) || lstatSync2(packagePath).isSymbolicLink() || !lstatSync2(packagePath).isFile()) {
       throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package is unavailable`);
     }
-    const packageMetadata = readJsonFile(packagePath, `package:${MANAGED_WEB_ACCESS_PACKAGE}`, null);
-    if (!packageMetadata || packageMetadata.name !== MANAGED_WEB_ACCESS_PACKAGE) {
+    let packageMetadata;
+    try {
+      packageMetadata = JSON.parse(readFileSync3(packagePath, "utf8"));
+    } catch {
+      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package metadata is invalid`);
+    }
+    if (packageMetadata.name !== MANAGED_WEB_ACCESS_PACKAGE) {
       throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package identity mismatch`);
     }
     return {
@@ -2318,44 +2323,11 @@ function createManagedPiMcpProfileApi(options = {}) {
       }
     }
     const browserUse = selectManagedBrowserUse(sourceSettings, npmSource);
-    const webAccess = selectManagedWebAccess(sourceSettings, npmSource);
+    const webAccess = sourceAcquisition ? null : selectManagedWebAccess(sourceSettings, npmSource);
     const telemetry = selectManagedTelemetry(sourceSettings, npmSource);
-    if (sourceAcquisition && (!browserUse || !webAccess)) {
+    if (sourceAcquisition && !browserUse) {
       throw new Error("pi_managed_mcp_source_acquisition_packages_missing");
     }
-    const sourceProfile = record6(sourceAcquisition?.profile);
-    const sourceAccess = record6(sourceProfile.access);
-    const sourceTransport = record6(sourceProfile.transport);
-    const sourceObservation = sourceAcquisition ? {
-      runId: sourceProfile.runId,
-      retention: sourceProfile.retention
-    } : null;
-    const sourceWebAccessConfig = sourceAcquisition ? {
-      ...webAccess.config,
-      fetch: {
-        ...record6(webAccess.config.fetch),
-        mode: sourceTransport.webFetchMode,
-        observation: sourceObservation,
-        ...!record6(webAccess.config.fetch).provider && !record6(webAccess.config.fetch).summary && typeof sourceSettings.defaultProvider === "string" && typeof sourceSettings.defaultModel === "string" ? { summary: { provider: sourceSettings.defaultProvider, model: sourceSettings.defaultModel } } : {}
-      }
-    } : null;
-    const sourceBrowserConfig = sourceAcquisition ? {
-      ...browserUse.config,
-      sessionMode: sourceTransport.browserMode,
-      ...sourceAccess.mode === "authenticated" ? { userDataDir: sourceAcquisition.userDataDir } : {},
-      readPolicy: {
-        version: "browser_read_policy_v1",
-        accessMode: sourceAccess.mode,
-        allowedTopLevelLocators: [sourceAccess.exactLocator, ...Array.isArray(sourceAccess.declaredPageLocators) ? sourceAccess.declaredPageLocators : []],
-        allowedTopLevelOrigins: sourceAccess.allowedTopLevelOrigins,
-        subresources: "public_or_same_origin",
-        privateCrossOriginSubresources: "deny",
-        popups: "deny",
-        downloads: "deny",
-        newTargets: "deny",
-        observation: sourceObservation
-      }
-    } : null;
     const settings = {
       ...typeof sourceSettings.defaultProvider === "string" ? { defaultProvider: sourceSettings.defaultProvider } : {},
       ...typeof sourceSettings.defaultModel === "string" ? { defaultModel: sourceSettings.defaultModel } : {},
@@ -2363,15 +2335,15 @@ function createManagedPiMcpProfileApi(options = {}) {
         "npm:pi-mcp-adapter",
         ...telemetry ? [telemetry.packageSpec] : [],
         ...webAccess ? [webAccess.packageSpec] : [],
-        ...browserUse ? [browserUse.packageSpec] : []
+        ...!sourceAcquisition && browserUse ? [browserUse.packageSpec] : []
       ],
       ...telemetry ? { "pi-telemetry": telemetry.config } : {},
-      ...webAccess ? { "pi-web-access": sourceWebAccessConfig ?? webAccess.config } : {},
-      ...browserUse ? {
+      ...webAccess ? { "pi-web-access": webAccess.config } : {},
+      ...!sourceAcquisition && browserUse ? {
         plugins: {
           [MANAGED_BROWSER_USE_PLUGIN]: browserUse.plugin
         },
-        "pi-browser-use": sourceBrowserConfig ?? browserUse.config
+        "pi-browser-use": browserUse.config
       } : {}
     };
     writePrivateFile2(join4(agentDir, "settings.json"), `${JSON.stringify(settings, null, 2)}
@@ -2382,6 +2354,12 @@ function createManagedPiMcpProfileApi(options = {}) {
       join4(extensionsDir, MANAGED_PI_MCP_ARGS_NORMALIZER_FILENAME),
       managedPiMcpArgsNormalizerExtensionSource()
     );
+    if (sourceAcquisition && !copyPrivateFile(
+      join4(source, "extensions", "amaster-source-acquisition.js"),
+      join4(extensionsDir, "amaster-source-acquisition.js")
+    )) {
+      throw new Error("pi_managed_mcp_source_acquisition_extension_missing");
+    }
     copyPrivateFile(join4(source, "models.json"), join4(agentDir, "models.json"));
     const authSource = join4(source, "auth.json");
     const protectedValues = [];
@@ -2523,8 +2501,6 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         PI_AGENT_MCP_SERVERS_FILE: configPath,
         TMPDIR: tmp,
         ...input.sourceAcquisition ? {
-          PI_WEB_ACCESS_RUNTIME_FETCH_MODE: record6(input.sourceAcquisition.profile).transport?.webFetchMode,
-          PI_WEB_ACCESS_RUNTIME_OBSERVATION: "required",
           PI_BROWSER_USE_RUNTIME_READ_POLICY: "required"
         } : {}
       };
@@ -4726,6 +4702,7 @@ function governedMcpToolResult(structuredContent) {
   if (!status) return null;
   const invocationId = readString(structuredContent.invocationId);
   const providerContent = asRecord(structuredContent.content);
+  const providerReceipt = asRecord(structuredContent.providerReceipt);
   const providerStatus = readString(providerContent.status);
   const providerResult = asRecord(providerContent.result);
   const effectResult = asRecord(providerResult.effectResult);
@@ -4742,12 +4719,23 @@ function governedMcpToolResult(structuredContent) {
     ...readString(providerResult.planId) ? { planId: readString(providerResult.planId) } : {},
     ...readString(providerResult.status) ? { resultStatus: readString(providerResult.status) } : {}
   } : null;
+  const diagnosisId = readString(providerContent.diagnosisId);
+  const diagnosisRevision = readNumber(providerContent.diagnosisRevision, 0);
+  const documentRevisionId = readString(providerContent.documentRevisionId);
+  const workProductId = readString(providerContent.workProductId);
+  const diagnosisBrief = status === "succeeded" && invocationId && readString(providerReceipt.provider) === "amaster_actions" && readString(providerReceipt.invocationId) === invocationId && readString(providerReceipt.status) === "accepted" && readString(providerReceipt.writeKind) === "company_diagnosis_brief" && diagnosisId && Number.isSafeInteger(diagnosisRevision) && diagnosisRevision > 0 && documentRevisionId && workProductId ? {
+    diagnosisId,
+    diagnosisRevision,
+    documentRevisionId,
+    workProductId
+  } : null;
   return {
     ...invocationId ? { invocationId } : {},
     status,
     ...providerStatus ? { providerStatus } : {},
     ...artifactIntent ? { artifactIntent } : {},
-    ...runtimeAction ? { runtimeAction } : {}
+    ...runtimeAction ? { runtimeAction } : {},
+    ...diagnosisBrief ? { diagnosisBrief } : {}
   };
 }
 function dedupeGovernedMcpToolResults(results) {
@@ -4820,10 +4808,23 @@ function finalizedPiRuntimeArtifactEvidence(runtimeArtifacts) {
     ...intentId ? { intentId } : {}
   };
 }
+function durablePiDiagnosisBriefEvidence(results) {
+  const result3 = (Array.isArray(results) ? results : []).map(asRecord).find((entry) => readString(entry.status) === "succeeded" && Object.keys(asRecord(entry.diagnosisBrief)).length > 0);
+  if (!result3) return null;
+  const brief = asRecord(result3.diagnosisBrief);
+  return {
+    kind: "company_diagnosis_brief",
+    invocationId: readString(result3.invocationId),
+    diagnosisId: readString(brief.diagnosisId),
+    diagnosisRevision: readNumber(brief.diagnosisRevision, 0),
+    documentRevisionId: readString(brief.documentRevisionId),
+    workProductId: readString(brief.workProductId)
+  };
+}
 function classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) {
   const diagnostics = Array.isArray(parsed?.cleanupDiagnostics) ? parsed.cleanupDiagnostics.map(asRecord) : [];
   if (parsed?.terminalEventType !== "agent_end" || readString(parsed?.stopReason) || parsed?.hasAssistantOutput !== true || diagnostics.length === 0 || diagnostics.some((diagnostic) => readString(diagnostic.phase) !== "post_terminal" || readString(diagnostic.code) !== "pi_terminal_cleanup_permission_denied") || readNumber(parsed?.nonCleanupErrorCount, 0) > 0) return null;
-  const durableEvidence = durablePiRuntimeActionEvidence(parsed?.mcpToolResults) ?? finalizedPiRuntimeArtifactEvidence(runtimeArtifacts);
+  const durableEvidence = durablePiRuntimeActionEvidence(parsed?.mcpToolResults) ?? durablePiDiagnosisBriefEvidence(parsed?.mcpToolResults) ?? finalizedPiRuntimeArtifactEvidence(runtimeArtifacts);
   if (!durableEvidence) return null;
   return {
     status: "failed",
@@ -6764,7 +6765,7 @@ function within3(candidate, root) {
   const rel = relative6(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
 }
-function readJsonFile3(path, label, fallback = {}) {
+function readJsonFile2(path, label, fallback = {}) {
   if (!existsSync11(path)) return fallback;
   const stat = lstatSync6(path);
   if (!stat.isFile() || stat.isSymbolicLink()) {
@@ -6815,8 +6816,8 @@ function copyTreeNoLinks(source, target) {
   chmodSync5(target, 384 | stat.mode & 73);
 }
 function mergeMcp(seedRoot, overlayRoot, governedConfig) {
-  const seed = record5(readJsonFile3(join12(seedRoot, "mcp.json"), "seed_mcp", { mcpServers: {} }));
-  const overlay = record5(readJsonFile3(join12(overlayRoot, "mcp.json"), "overlay_mcp", { mcpServers: {} }));
+  const seed = record5(readJsonFile2(join12(seedRoot, "mcp.json"), "seed_mcp", { mcpServers: {} }));
+  const overlay = record5(readJsonFile2(join12(overlayRoot, "mcp.json"), "overlay_mcp", { mcpServers: {} }));
   assertNoPersistentSecrets(seed, ["seed", "mcp.json"]);
   assertNoPersistentSecrets(overlay, ["overlay", "mcp.json"]);
   const seedServers = record5(seed.mcpServers);
@@ -6852,7 +6853,7 @@ function assertEnabledPackagesAvailable(settings, npmRoot) {
   }
   for (const name of requiredNames) {
     const metadataPath = join12(npmRoot, "node_modules", ...name.split("/"), "package.json");
-    const metadata = readJsonFile3(metadataPath, `package:${name}`, null);
+    const metadata = readJsonFile2(metadataPath, `package:${name}`, null);
     if (!metadata || metadata.name !== name) {
       throw new Error(`pi_trusted_runtime_package_unavailable:${name}`);
     }
@@ -6880,8 +6881,8 @@ function materializeTrustedPiRuntimeProfile(input) {
   }
   const mergedJson = {};
   for (const entry of JSON_ENTRIES) {
-    const seed = readJsonFile3(join12(seedRoot, entry), `seed_${entry}`, {});
-    const overlay = readJsonFile3(join12(overlayRoot, entry), `overlay_${entry}`, {});
+    const seed = readJsonFile2(join12(seedRoot, entry), `seed_${entry}`, {});
+    const overlay = readJsonFile2(join12(overlayRoot, entry), `overlay_${entry}`, {});
     const merged = deepMerge(seed, overlay);
     if (entry === "settings.json") {
       merged["pi-security"] = {
@@ -6901,7 +6902,7 @@ function materializeTrustedPiRuntimeProfile(input) {
     chmodSync5(join12(agentDir, entry), 384);
     mergedJson[entry] = merged;
   }
-  const governedConfig = readJsonFile3(input.governedMcpConfigPath, "governed_mcp");
+  const governedConfig = readJsonFile2(input.governedMcpConfigPath, "governed_mcp");
   const mcp = mergeMcp(seedRoot, overlayRoot, governedConfig);
   writeFileSync8(input.governedMcpConfigPath, `${JSON.stringify(mcp, null, 2)}
 `, { mode: 384 });
@@ -7947,20 +7948,17 @@ async function executeBrowserSessionCommand(command, dependencies = {}) {
 }
 
 // src/amaster-runtime-daemon/source-acquisition-invocation.mjs
+import { createHash as createHash10 } from "node:crypto";
 var SOURCE_ACQUISITION_PUBLIC_TOOLS = Object.freeze([
-  "web_fetch",
-  "browser_list_pages",
-  "browser_navigate_page",
-  "browser_take_snapshot",
-  "browser_take_screenshot",
-  "browser_analyze_screenshot",
-  "browser_wait_for",
+  "source_open",
+  "source_snapshot",
+  "source_screenshot",
+  "source_analyze_screenshot",
+  "source_wait",
   "runtime_action.submit",
   "runtime_action.status"
 ]);
-var SOURCE_ACQUISITION_AUTHENTICATED_TOOLS = Object.freeze(
-  SOURCE_ACQUISITION_PUBLIC_TOOLS.filter((tool) => tool !== "web_fetch")
-);
+var SOURCE_ACQUISITION_AUTHENTICATED_TOOLS = SOURCE_ACQUISITION_PUBLIC_TOOLS;
 function exactToolsFor(profile) {
   if (profile?.access?.mode === "public") return SOURCE_ACQUISITION_PUBLIC_TOOLS;
   if (profile?.access?.mode === "authenticated") return SOURCE_ACQUISITION_AUTHENTICATED_TOOLS;
@@ -7982,6 +7980,34 @@ function sourceAcquisitionPiInvocationArgs(profile) {
     "--no-session"
   ];
 }
+function serializeSourceAcquisitionProfile(profile) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile)) return null;
+  const input = Buffer.from(JSON.stringify(profile), "utf8");
+  return {
+    input,
+    sha256: createHash10("sha256").update(input).digest("hex")
+  };
+}
+function sourceAcquisitionManagedInputs(options) {
+  return [
+    options.managedInput ? { fd: 3, input: options.managedInput, code: "managed_runtime_assertion" } : null,
+    options.sourceProfileInput ? { fd: 4, input: options.sourceProfileInput, code: "source_acquisition_profile" } : null
+  ].filter(Boolean);
+}
+function sourceAcquisitionManagedStdio(inputs) {
+  const stdio = ["pipe", "pipe", "pipe"];
+  for (const { fd } of inputs) {
+    while (stdio.length <= fd) stdio.push("ignore");
+    stdio[fd] = "pipe";
+  }
+  return stdio;
+}
+function deliverSourceAcquisitionManagedInputs(child, inputs, onError) {
+  for (const { fd, input, code } of inputs) {
+    child.stdio[fd].once("error", (error) => onError(code, error));
+    child.stdio[fd].end(input);
+  }
+}
 function assertSourceAcquisitionRuntimeAuthority({
   profile,
   executorKind,
@@ -7995,17 +8021,17 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.0";
+var CONNECTOR_VERSION = "0.1.1-beta.1";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";
 var SOURCE_ACQUISITION_RETENTION_VERSION = "source_summary_only_v1";
 var SOURCE_ACQUISITION_ACTION_VERSION = "complete_source_acquisition_v1";
+var SOURCE_ACQUISITION_HEADLESS_ADAPTER = "pi_browser_use_headless_v1";
+var SOURCE_ACQUISITION_DESKTOP_ADAPTER = "browser_skill_desktop_v1";
 var SOURCE_ACQUISITION_PACKAGE_VERSIONS = Object.freeze({
-  "@amaster.ai/pi-web-access": "0.1.2-beta.52",
   "@amaster.ai/pi-browser-use": "0.1.2-beta.52"
 });
-var SOURCE_ACQUISITION_CONNECTOR_VERSION = "0.1.1-beta.0";
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
 var AMASTER_PI_PROHIBITED_EXTRA_ARGS = /* @__PURE__ */ new Set(["--no-extensions", "--no-skills", "--no-tools", "--no-session"]);
@@ -8536,14 +8562,11 @@ function sourceAcquisitionPackageMetadata(packageName2) {
   if (!existsSync14(packagePath)) return null;
   const stat = lstatSync7(packagePath);
   if (!stat.isFile() || stat.isSymbolicLink()) return null;
-  const metadata = readJsonFile4(packagePath);
+  const metadata = readJsonFile3(packagePath);
   return metadata.name === packageName2 && readString(metadata.version) ? metadata : null;
 }
 function sourceAcquisitionRuntimeReadiness(config) {
   const unavailable = (reason) => ({ ready: false, reason });
-  if (CONNECTOR_VERSION !== SOURCE_ACQUISITION_CONNECTOR_VERSION) {
-    return unavailable("source_acquisition_connector_version_mismatch");
-  }
   const piExecutor = config.executors.find((executor) => executor.kind === "pi");
   if (!piExecutor || !commandExists(piExecutor.command, {
     ...process.env,
@@ -8565,9 +8588,16 @@ function sourceAcquisitionRuntimeReadiness(config) {
     return unavailable("source_acquisition_trusted_runtime_invalid");
   }
   const packageDigests = {
-    "@amaster.ai/pi-web-access": readString(process.env.AMASTER_SOURCE_ACQUISITION_PI_WEB_ACCESS_DIGEST),
     "@amaster.ai/pi-browser-use": readString(process.env.AMASTER_SOURCE_ACQUISITION_PI_BROWSER_USE_DIGEST)
   };
+  const extensionDigest = readString(process.env.AMASTER_SOURCE_ACQUISITION_EXTENSION_DIGEST);
+  if (!extensionDigest || !/^[a-f0-9]{64}$/.test(extensionDigest)) {
+    return unavailable("source_acquisition_extension_digest_unavailable");
+  }
+  const adapters = (readString(process.env.AMASTER_SOURCE_ACQUISITION_ADAPTERS) ?? "").split(",").map((value) => value.trim()).filter(Boolean);
+  if (adapters.length === 0 || adapters.some((adapter) => ![SOURCE_ACQUISITION_HEADLESS_ADAPTER, SOURCE_ACQUISITION_DESKTOP_ADAPTER].includes(adapter))) {
+    return unavailable("source_acquisition_adapter_attestation_invalid");
+  }
   const connectorDigest = readString(process.env.AMASTER_SOURCE_ACQUISITION_CONNECTOR_DIGEST);
   if (!connectorDigest || !/^[a-f0-9]{64}$/.test(connectorDigest)) {
     return unavailable("source_acquisition_connector_digest_unavailable");
@@ -8589,6 +8619,8 @@ function sourceAcquisitionRuntimeReadiness(config) {
     profileVersion: SOURCE_ACQUISITION_PROFILE_VERSION,
     retentionVersion: SOURCE_ACQUISITION_RETENTION_VERSION,
     actionVersion: SOURCE_ACQUISITION_ACTION_VERSION,
+    extension: { digest: extensionDigest },
+    adapters,
     connector: {
       version: CONNECTOR_VERSION,
       digest: connectorDigest
@@ -8703,10 +8735,10 @@ function piAgentSystemDataDir(config) {
   return configured ? resolve12(expandHomePath(configured)) : null;
 }
 function readPiAgentLocalPlatformCredential(credentialsDir) {
-  const pointer = readJsonFile4(join15(credentialsDir, "latest.json"));
+  const pointer = readJsonFile3(join15(credentialsDir, "latest.json"));
   const credentialRef = readString(pointer.credentialRef);
   if (!credentialRef || !/^[a-f0-9]{64}$/i.test(credentialRef)) return null;
-  const credential = readJsonFile4(join15(credentialsDir, `${credentialRef}.json`));
+  const credential = readJsonFile3(join15(credentialsDir, `${credentialRef}.json`));
   const organizationId = readString(credential.organizationId);
   const apiKey = readString(credential.apiKey);
   if (credential.version !== 1 || !organizationId || !apiKey) return null;
@@ -9270,16 +9302,16 @@ function sourceAcquisitionRuntimeProfile(config, command) {
   const access = asRecord(profile.access);
   const transport = asRecord(profile.transport);
   const tools = asRecord(profile.tools);
-  if (profile.purpose !== "source_acquisition_v1" || profile.retention !== "source_summary_only_v1" || readString(profile.runId) !== commandRunId(command) || !Array.isArray(tools.exactAllowlist) || tools.exactAllowlist.length === 0 || !["public", "authenticated"].includes(access.mode) || !["isolated", "existing"].includes(transport.browserMode) || !["provider_jina_or_local", "local_only"].includes(transport.webFetchMode)) {
+  if (profile.purpose !== "source_acquisition_v1" || profile.retention !== "source_summary_only_v1" || readString(profile.runId) !== commandRunId(command) || !Array.isArray(tools.exactAllowlist) || tools.exactAllowlist.length === 0 || !["public", "authenticated"].includes(access.mode) || !["isolated", "existing"].includes(transport.browserMode) || ![SOURCE_ACQUISITION_HEADLESS_ADAPTER, SOURCE_ACQUISITION_DESKTOP_ADAPTER].includes(transport.adapter)) {
     throw new Error("source_acquisition_profile_invalid");
   }
   if (access.mode === "public") {
-    if (transport.browserMode !== "isolated" || transport.webFetchMode !== "provider_jina_or_local") {
+    if (transport.browserMode !== "isolated" || transport.adapter !== SOURCE_ACQUISITION_HEADLESS_ADAPTER) {
       throw new Error("source_acquisition_profile_invalid");
     }
     return { profile };
   }
-  if (transport.browserMode !== "existing" || transport.webFetchMode !== "local_only") {
+  if (transport.browserMode !== "existing" || transport.adapter !== SOURCE_ACQUISITION_DESKTOP_ADAPTER) {
     throw new Error("source_acquisition_profile_invalid");
   }
   const companyId = readString(profile.companyId);
@@ -9288,12 +9320,12 @@ function sourceAcquisitionRuntimeProfile(config, command) {
   if (!companyId || !bindingId || !/^profile_[a-z0-9]{16,64}$/i.test(localOpaqueRef ?? "")) {
     throw new Error("source_acquisition_profile_invalid");
   }
-  const profileName2 = createHash10("sha256").update(`${companyId}\0${bindingId}\0${localOpaqueRef}`).digest("hex");
+  const profileName2 = createHash11("sha256").update(`${companyId}\0${bindingId}\0${localOpaqueRef}`).digest("hex");
   const stateRoot = resolve12(config.browserSessionStateRoot);
   const userDataDir = resolve12(stateRoot, profileName2);
   if (!pathWithin2(userDataDir, stateRoot)) throw new Error("source_acquisition_browser_profile_invalid");
   const markerPath = join15(userDataDir, ".amaster-browser-session.json");
-  const marker = readJsonFile4(markerPath);
+  const marker = readJsonFile3(markerPath);
   if (marker.version !== 1 || marker.companyId !== companyId || marker.bindingId !== bindingId || marker.localOpaqueRef !== localOpaqueRef || Object.keys(marker).length !== 4) {
     throw new Error("source_acquisition_browser_profile_invalid");
   }
@@ -9309,7 +9341,7 @@ function trustedPiRuntimeSources(config) {
     policyFile: config.piRuntimeEffectivePolicyFile
   };
 }
-function readJsonFile4(filePath) {
+function readJsonFile3(filePath) {
   try {
     const parsed = JSON.parse(readFileSync11(filePath, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
@@ -9554,6 +9586,60 @@ function buildExecutorEnv(config, command, workspace) {
     AMASTER_EMPLOYEE_COMPANY_ID: companyId
   };
 }
+function copyPiModelCallConfig(sourceRoot, targetRoot, fileName, required) {
+  const source = join15(sourceRoot, fileName);
+  if (!existsSync14(source)) {
+    if (required) throw new Error(`pi_model_call_profile_missing: ${fileName}`);
+    return;
+  }
+  const sourceStat = lstatSync7(source);
+  if (!sourceStat.isFile() || sourceStat.isSymbolicLink()) {
+    throw new Error(`pi_model_call_profile_unsafe: ${fileName}`);
+  }
+  const target = join15(targetRoot, fileName);
+  copyFileSync3(source, target);
+  chmodSync6(target, 384);
+}
+function preparePiModelCallProfile(commandId, baseEnv) {
+  const sourceRoot = readString(process.env.PI_CODING_AGENT_DIR) ?? readString(process.env.PI_AGENT_HOME) ?? readString(process.env["AMASTER-CLI_CODING_AGENT_DIR"]);
+  if (!sourceRoot) throw new Error("pi_model_call_profile_missing: source Pi home");
+  const sourceStat = lstatSync7(sourceRoot);
+  if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
+    throw new Error("pi_model_call_profile_unsafe: source Pi home");
+  }
+  const profileRoot = mkdtempSync(join15(tmpdir(), "amaster-pi-model-call-"));
+  const home = join15(profileRoot, "home");
+  const agentDir = join15(profileRoot, "agent");
+  const sessionsDir = join15(profileRoot, "sessions");
+  const tempDir = join15(profileRoot, "tmp");
+  for (const directory of [home, agentDir, sessionsDir, tempDir]) {
+    mkdirSync9(directory, { recursive: true, mode: 448 });
+  }
+  try {
+    copyPiModelCallConfig(sourceRoot, agentDir, "models.json", true);
+    copyPiModelCallConfig(sourceRoot, agentDir, "auth.json", false);
+    return {
+      profileRoot,
+      env: {
+        ...baseEnv,
+        HOME: home,
+        PI_AGENT_HOME: agentDir,
+        PI_CODING_AGENT_DIR: agentDir,
+        "AMASTER-CLI_CODING_AGENT_DIR": agentDir,
+        PI_CODING_AGENT_SESSION_DIR: sessionsDir,
+        "AMASTER-CLI_CODING_AGENT_SESSION_DIR": sessionsDir,
+        TMPDIR: tempDir,
+        AMASTER_RUNTIME_COMMAND_ID: commandId
+      }
+    };
+  } catch (error) {
+    rmSync7(profileRoot, { recursive: true, force: true });
+    throw error;
+  }
+}
+function cleanupPiModelCallProfile(profile) {
+  if (profile?.profileRoot) rmSync7(profile.profileRoot, { recursive: true, force: true });
+}
 function splitExtraArgs(value) {
   return splitList(value).flatMap((entry) => entry.split(/\s+/).filter(Boolean));
 }
@@ -9714,15 +9800,27 @@ async function executeModelCallCommand(config, command, signal) {
     purpose: readString(payload.purpose) ?? null,
     promptBytes: Buffer.byteLength(prompt, "utf8")
   });
-  const execution = await runExecutor(invocation.command, invocation.args, {
-    cwd: process.cwd(),
-    env: buildExecutorEnv(config, command, { managed: false, cwd: process.cwd(), sourceWorkspacePath: process.cwd() }),
-    stdin: invocation.stdin === "prompt" ? prompt : "",
-    timeoutSeconds,
-    maxOutputBytes,
-    executorKind: executor.kind,
-    signal
-  });
+  let piModelCallProfile = null;
+  let execution;
+  try {
+    const baseEnv = buildExecutorEnv(config, command, {
+      managed: false,
+      cwd: process.cwd(),
+      sourceWorkspacePath: process.cwd()
+    });
+    piModelCallProfile = executor.kind === "pi" ? preparePiModelCallProfile(command.commandId, baseEnv) : null;
+    execution = await runExecutor(invocation.command, invocation.args, {
+      cwd: process.cwd(),
+      env: piModelCallProfile?.env ?? baseEnv,
+      stdin: invocation.stdin === "prompt" ? prompt : "",
+      timeoutSeconds,
+      maxOutputBytes,
+      executorKind: executor.kind,
+      signal
+    });
+  } finally {
+    cleanupPiModelCallProfile(piModelCallProfile);
+  }
   if (execution.stdout) {
     await ingestLog(config, command, "stdout", "info", truncateText(execution.stdout, 4e3));
   }
@@ -10330,11 +10428,12 @@ function runExecutor(command, args, options) {
     const maxRssMb = parsePositiveInteger(options.maxRssMb, 0);
     const maxRssBytes = maxRssMb * 1024 * 1024;
     const spawnInvocation = managedChildSpawnInvocation(command, args, options.spawnIdentity);
+    const managedInputs = sourceAcquisitionManagedInputs(options);
     const child = spawn2(spawnInvocation.command, spawnInvocation.args, {
       cwd: options.cwd,
       env: options.env,
       detached: process.platform !== "win32",
-      stdio: options.managedInput ? ["pipe", "pipe", "pipe", "pipe"] : ["pipe", "pipe", "pipe"],
+      stdio: sourceAcquisitionManagedStdio(managedInputs),
       ...spawnInvocation.spawnIdentity
     });
     const processGroupId = processGroupIdForChild(child);
@@ -10370,13 +10469,10 @@ function runExecutor(command, args, options) {
       signalExecutorProcess(child, "SIGTERM", processGroupId);
       scheduleStopKill();
     };
-    if (options.managedInput) {
-      child.stdio[3].once("error", (error) => {
-        spawnError = `managed_runtime_assertion_delivery_failed: ${error.message}`;
-        requestStop("managed_runtime_assertion_delivery_failed");
-      });
-      child.stdio[3].end(options.managedInput);
-    }
+    deliverSourceAcquisitionManagedInputs(child, managedInputs, (code, error) => {
+      spawnError = `${code}_delivery_failed: ${error.message}`;
+      requestStop(`${code}_delivery_failed`);
+    });
     const reapStoppedWorkspaceResidents = () => {
       if (settled || !stopReason || stopReason === "completion_cleanup") return;
       const residents = listWorkspaceResidentProcesses(options.cwd, processGroupId, {
@@ -10980,6 +11076,7 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
         executorKind,
         ...readNumber(storedSpawnIdentity.uid, 0) > 0 ? { spawnIdentity: storedSpawnIdentity } : {},
         ...readString(executionConfig.managedInput) ? { managedInput: readString(executionConfig.managedInput) } : {},
+        ...readString(executionConfig.sourceProfileInput) ? { sourceProfileInput: readString(executionConfig.sourceProfileInput) } : {},
         onOutput: (stream, chunk, rawBytes) => {
           noteActiveRunOutput(command, stream, chunk, rawBytes);
           liveOutputLogger.write(stream, chunk);
@@ -10995,24 +11092,24 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
     const memoryLimit = asRecord(execution.memoryLimit);
     const hasMemoryLimit = readNumber(memoryLimit.rssBytes, 0) > 0;
     const parsed = parseExecutorTurnOutput(executorKind, execution, liveOutputLogger, hasOutputFlood);
+    const mcpToolResults = dedupeGovernedMcpToolResults([
+      ...Array.isArray(parsed.mcpToolResults) ? parsed.mcpToolResults.map(asRecord) : [],
+      ...liveOutputLogger.mcpToolResults().map(asRecord)
+    ]);
     const outputTelemetry = liveOutputLogger.snapshot({
       outputBytes: execution.outputBytes,
       floodLimitBytes: Math.max(1, readNumber(executionConfig.maxOutputBytes, config.executorMaxOutputBytes)),
       outputTokens: readNumber(parsed.usage?.outputTokens, 0)
     });
     const completionOutputStopped = executorKind === "pi" && piCompletionOutputStopped(parsed, execution);
-    const cleanupDisposition = executorKind === "pi" && execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(parsed, []) : null;
+    const cleanupDisposition = executorKind === "pi" && execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition({ ...parsed, mcpToolResults }, []) : null;
     const parsedForValidation = cleanupDisposition ? { ...parsed, errorMessage: null } : parsed;
     const piInvalidOutputError = executorKind === "pi" ? piOutputValidationError(parsedForValidation, {
       allowMissingTurnEnd: completionOutputStopped || Boolean(cleanupDisposition),
       allowMissingAssistantOutput: false
     }) : null;
-    const parsedError = hasOutputFlood ? "Run-exit closure output exceeded the configured limit" : hasMemoryLimit ? "Run-exit closure exceeded the configured memory limit" : execution.timedOut ? "Run-exit closure timed out" : execution.spawnError ?? piInvalidOutputError ?? parsedForValidation.errorMessage ?? ((execution.exitCode ?? 0) === 0 ? null : `Run-exit closure exited with code ${execution.exitCode ?? "unknown"}`);
+    const parsedError = hasOutputFlood ? "Run-exit closure output exceeded the configured limit" : hasMemoryLimit ? "Run-exit closure exceeded the configured memory limit" : execution.timedOut ? "Run-exit closure timed out" : execution.spawnError ?? piInvalidOutputError ?? parsedForValidation.errorMessage ?? ((execution.exitCode ?? 0) === 0 || cleanupDisposition ? null : `Run-exit closure exited with code ${execution.exitCode ?? "unknown"}`);
     const succeeded = execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && (execution.exitCode === 0 || completionOutputStopped || Boolean(cleanupDisposition)) && !execution.timedOut && !execution.spawnError && !parsedError;
-    const mcpToolResults = dedupeGovernedMcpToolResults([
-      ...Array.isArray(parsed.mcpToolResults) ? parsed.mcpToolResults.map(asRecord) : [],
-      ...liveOutputLogger.mcpToolResults().map(asRecord)
-    ]);
     await ingestLog(config, command, "system", succeeded ? "info" : "error", succeeded ? "Run-exit disposition closure turn completed" : `Run-exit disposition closure turn failed: ${parsedError}`, {
       presentationKind: "run_exit_disposition_closure",
       closureAttempt: 1,
@@ -11033,6 +11130,7 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
         timedOut: execution.timedOut,
         summary: truncateText(readString(parsed.summary) ?? "", 2e3),
         outputTelemetry,
+        cleanupDisposition,
         toolResults: mcpToolResults.slice(0, 10).map((result3) => ({
           status: readString(result3.status),
           toolName: readString(result3.toolName) ?? readString(result3.name) ?? readString(asRecord(result3.runtimeAction).toolName),
@@ -11955,7 +12053,7 @@ async function materializeIssueAttachments(config, command, workspace) {
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
     writeFileSync9(targetPath, body);
     const attachmentId = readString(attachment.id);
-    const actualSha256 = createHash10("sha256").update(body).digest("hex");
+    const actualSha256 = createHash11("sha256").update(body).digest("hex");
     const lineageCandidates = lineageCandidatesByAttachmentId.get(attachmentId) ?? [];
     const lineage = selectAttachmentLineage(lineageCandidates, actualSha256);
     if (lineageCandidates.length > 0 && !lineage) {
@@ -12047,7 +12145,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       throw new Error(`artifact_input_manifest_invalid: entry ${index} contentPath does not match attachmentId`);
     }
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
-    const actualSha256 = createHash10("sha256").update(body).digest("hex");
+    const actualSha256 = createHash11("sha256").update(body).digest("hex");
     if (body.byteLength !== byteSize || actualSha256 !== sha256) {
       throw new Error(
         `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha256} actualSha256=${actualSha256}`
@@ -12117,7 +12215,7 @@ function safeCheckpointRelativePath(rawPath) {
   return normalized;
 }
 function hashFileSha256(filePath) {
-  return createHash10("sha256").update(readFileSync11(filePath)).digest("hex");
+  return createHash11("sha256").update(readFileSync11(filePath)).digest("hex");
 }
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);
@@ -12330,6 +12428,7 @@ async function executeRunCommand(config, command) {
   };
   let completionOwnsManagedMcpProfile = false;
   const sourceAcquisition = sourceAcquisitionRuntimeProfile(config, command);
+  const sourceProfile = serializeSourceAcquisitionProfile(sourceAcquisition?.profile ?? null);
   const trustedPiRuntimeAssertion = commandTrustedPiRuntimeAssertion(command);
   assertSourceAcquisitionRuntimeAuthority({
     profile: sourceAcquisition,
@@ -12457,6 +12556,13 @@ async function executeRunCommand(config, command) {
         inheritedEntries: trustedPiRuntimeProfile.facts.inheritedEntries
       });
     }
+    if (sourceProfile) {
+      executorEnv = {
+        ...executorEnv,
+        AMASTER_SOURCE_ACQUISITION_PROFILE_FD: "4",
+        AMASTER_SOURCE_ACQUISITION_PROFILE_SHA256: sourceProfile.sha256
+      };
+    }
     if (executor.kind === "pi" && piResolvedProviderConfig) {
       const agentDir = managedMcpProfile ? readString(managedMcpProfile.env.PI_CODING_AGENT_DIR) ?? readString(managedMcpProfile.env.PI_AGENT_HOME) ?? null : piAgentLocalPlatformRunnerEnabled(config) ? readString(executorEnv.PI_AGENT_HOME) ?? readString(executorEnv.PI_CODING_AGENT_DIR) ?? null : readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
       try {
@@ -12591,6 +12697,7 @@ async function executeRunCommand(config, command) {
           managedInput: `${JSON.stringify(trustedPiRuntimeAssertion)}
 `
         } : {},
+        ...sourceProfile ? { sourceProfileInput: sourceProfile.input } : {},
         onOutput: (stream, chunk, rawBytes) => {
           noteActiveRunOutput(command, stream, chunk, rawBytes);
           liveOutputLogger.write(stream, chunk);
@@ -12759,7 +12866,10 @@ async function executeRunCommand(config, command) {
     const memoryLimitError = hasMemoryLimit ? `${executor.kind === "pi" ? "Pi Agent" : "Executor"} memory limit exceeded: RSS ${readNumber(memoryLimit.rssBytes, 0)} bytes exceeded ${readNumber(memoryLimit.limitBytes, config.executorMaxRssMb * 1024 * 1024)} bytes` : null;
     const piUsageDiagnostic = executor.kind === "pi" && !hasOutputFlood && piOutputUsageMetadataMissing(parsed) ? "Pi Agent exited without usage metadata" : null;
     const completionOutputStopped = executor.kind === "pi" && piCompletionOutputStopped(parsed, execution);
-    const cleanupDisposition = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) : null;
+    const cleanupDisposition = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(
+      { ...parsed, mcpToolResults },
+      runtimeArtifacts
+    ) : null;
     if (cleanupDisposition) {
       await ingestLog(
         config,
@@ -12933,7 +13043,8 @@ async function executeRunCommand(config, command) {
             maxRssMb: config.executorMaxRssMb,
             ...piChildIsolation ? { spawnIdentity: piChildIsolation.spawn } : {},
             ...trustedPiRuntime ? { managedInput: `${JSON.stringify(trustedPiRuntimeAssertion)}
-` } : {}
+` } : {},
+            ...sourceProfile ? { sourceProfileInput: sourceProfile.input } : {}
           }
         },
         completionRequest: {

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.0";
+const CONNECTOR_VERSION = "0.1.1-beta.1";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.0",
+  "version": "0.1.1-beta.1",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",