@amaster.ai/employee-runtime-connector 0.1.1-beta.0 → 0.1.1-beta.2

package/README.md

@@ -40,7 +40,7 @@ Pi execution uses three separate evidence layers:
 2. a durable, inspectable Runtime Action receipt or finalized Runtime Artifact;
 3. process cleanup disposition.
 
-An exact process-kill `EPERM` error emitted only after the first two layers have completed may be isolated as a failed `cleanupDisposition` warning without changing the command's successful business result. Both accepted shapes require `kill` and `EPERM`; generic filesystem/process permission text such as `EPERM: operation not permitted, unlink ...` is a business error. A `runtime_action.status` readback is evidence only when its call/plan ref matches an earlier submit/commit receipt in the same transcript. The diagnostic and durable evidence reference remain in the result. Text-only or action-only-without-assistant-output streams, standalone governed reads, non-effect Runtime Action tools, rejected or pending effects, pre-terminal errors, provider failures, timeout, cancellation, resource limits, any signal, live residue, and uncertain ownership remain failures.
+An exact process-kill `EPERM` error emitted only after the first two layers have completed may be isolated as a failed `cleanupDisposition` warning without changing the command's successful business result. Both accepted shapes require `kill` and `EPERM`; generic filesystem/process permission text such as `EPERM: operation not permitted, unlink ...` is a business error. Durable evidence is limited to a completed Runtime Action, a finalized Runtime Artifact, or an accepted `company_diagnosis_brief` provider receipt whose invocation and returned Diagnosis/document/work-product identities are exact. A `runtime_action.status` readback is evidence only when its call/plan ref matches an earlier submit/commit receipt in the same transcript. The diagnostic and durable evidence reference remain in the result. Text-only or action-only-without-assistant-output streams, standalone governed reads, non-effect Runtime Action tools, rejected or pending effects, pre-terminal errors, provider failures, timeout, cancellation, resource limits, any signal, live residue, and uncertain ownership remain failures.
 
 This isolation does not schedule a retry or a second business continuation. Command result delivery and the result outbox remain the sole idempotency boundary.
 

package/dist/amaster-runtime-daemon.mjs

@@ -2,9 +2,9 @@
 // MirrorX runtime connector daemon bundle.
 
 // src/amaster-runtime-daemon.mjs
-import { createHash as createHash10 } from "node:crypto";
-import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, readFileSync as readFileSync11, readdirSync as readdirSync9, realpathSync as realpathSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync7, symlinkSync as symlinkSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
-import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3 } from "node:os";
+import { createHash as createHash11 } from "node:crypto";
+import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, mkdtempSync, readFileSync as readFileSync11, readdirSync as readdirSync9, realpathSync as realpathSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync7, symlinkSync as symlinkSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3, tmpdir } from "node:os";
 import { basename as basename6, delimiter as delimiter2, dirname as dirname9, extname as extname2, isAbsolute as isAbsolute8, join as join15, relative as relative9, resolve as resolve12 } from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync6 } from "node:child_process";
 
@@ -1607,7 +1607,7 @@ var MANAGED_PI_PROVIDER_PROTECTED_ENV_NAMES = Object.freeze([
 function isRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value);
 }
-function readJsonFile2(filePath) {
+function readJsonFile(filePath) {
   try {
     const parsed = JSON.parse(readFileSync2(filePath, "utf8"));
     return asRecord(parsed);
@@ -1679,7 +1679,7 @@ function syncAmasterProviderModels(agentDir, executorEnv) {
   const apiKey = readString(executorEnv.AMASTER_API_KEY);
   if (!apiKey) return false;
   const modelsPath = join3(agentDir, "models.json");
-  const config = readJsonFile2(modelsPath);
+  const config = readJsonFile(modelsPath);
   const providers = asRecord(config.providers);
   const amaster = { ...asRecord(providers.amaster) };
   amaster.apiKey = managedApiKeyConfigValue(executorEnv, apiKey);
@@ -1707,7 +1707,7 @@ function syncAmasterProviderSettings(agentDir, executorEnv) {
   if (!apiKey) return false;
   const settingsPath = join3(agentDir, "settings.json");
   if (!existsSync2(settingsPath)) return false;
-  const settings = readJsonFile2(settingsPath);
+  const settings = readJsonFile(settingsPath);
   const baseUrl = readString(executorEnv.AMASTER_PROVIDER_BASE_URL);
   const defaultModel = readString(executorEnv.AMASTER_PROVIDER_DEFAULT_MODEL);
   const imageGenBaseUrl = imageGenBaseUrlFromProviderBaseUrl(baseUrl);
@@ -1828,19 +1828,161 @@ function escapeLiteralJsonStringControlCharacters(value) {
   }
   return changed ? output : value;
 }
+function escapeLikelyLiteralJsonStringQuotes(value) {
+  let output = "";
+  let inString = false;
+  let escaped = false;
+  let changed = false;
+  let stringRole = null;
+  let previousSignificantCharacter = null;
+  function followingObjectProperty(offset) {
+    let cursor = offset;
+    while (cursor < value.length && /\s/u.test(value[cursor])) cursor += 1;
+    if (value[cursor] !== '"') return { valid: false, simpleIdentifier: false };
+    cursor += 1;
+    let propertyName = "";
+    let propertyEscaped = false;
+    for (; cursor < value.length; cursor += 1) {
+      const propertyCharacter = value[cursor];
+      if (propertyEscaped) {
+        propertyName += propertyCharacter;
+        propertyEscaped = false;
+        continue;
+      }
+      if (propertyCharacter === "\\") {
+        propertyEscaped = true;
+        continue;
+      }
+      if (propertyCharacter !== '"') {
+        propertyName += propertyCharacter;
+        continue;
+      }
+      cursor += 1;
+      while (cursor < value.length && /\s/u.test(value[cursor])) cursor += 1;
+      return {
+        valid: value[cursor] === ":",
+        simpleIdentifier: /^[A-Za-z_][A-Za-z0-9_-]*$/u.test(propertyName)
+      };
+    }
+    return { valid: false, simpleIdentifier: false };
+  }
+  for (let index = 0; index < value.length; index += 1) {
+    const character = value[index];
+    if (!inString) {
+      output += character;
+      if (character === '"') {
+        inString = true;
+        stringRole = previousSignificantCharacter === ":" ? "object_value" : null;
+      } else if (!/\s/u.test(character)) {
+        previousSignificantCharacter = character;
+      }
+      continue;
+    }
+    if (escaped) {
+      output += character;
+      escaped = false;
+      continue;
+    }
+    if (character === "\\") {
+      output += character;
+      escaped = true;
+      continue;
+    }
+    if (character !== '"') {
+      output += character;
+      continue;
+    }
+    let nextIndex = index + 1;
+    while (nextIndex < value.length && /\s/u.test(value[nextIndex])) nextIndex += 1;
+    const nextCharacter = value[nextIndex];
+    if (nextCharacter === "," && stringRole === "object_value") {
+      const following = followingObjectProperty(nextIndex + 1);
+      if (!following.valid && !following.simpleIdentifier) {
+        output += '\\"';
+        changed = true;
+        continue;
+      }
+    }
+    if (nextCharacter === void 0 || [":", ",", "}", "]"].includes(nextCharacter)) {
+      output += character;
+      inString = false;
+      stringRole = null;
+      previousSignificantCharacter = character;
+    } else {
+      output += '\\"';
+      changed = true;
+    }
+  }
+  return changed ? output : value;
+}
+function insertSingleMissingObjectPropertyComma(value) {
+  let parseError;
+  try {
+    JSON.parse(value);
+    return value;
+  } catch (error) {
+    parseError = error;
+  }
+  const positionMatch = String(parseError?.message ?? "").match(
+    /Expected ',' or '\}' after property value in JSON at position (\d+)/u
+  );
+  if (!positionMatch) return value;
+  const position = Number(positionMatch[1]);
+  if (!Number.isSafeInteger(position) || position < 1 || position >= value.length) return value;
+  let propertyStart = position;
+  while (propertyStart < value.length && /\s/u.test(value[propertyStart])) propertyStart += 1;
+  if (value[propertyStart] !== '"') return value;
+  let cursor = propertyStart + 1;
+  let escaped = false;
+  let propertyName = "";
+  for (; cursor < value.length; cursor += 1) {
+    const character = value[cursor];
+    if (escaped) {
+      propertyName += character;
+      escaped = false;
+      continue;
+    }
+    if (character === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (character === '"') break;
+    propertyName += character;
+  }
+  if (cursor >= value.length || !/^[A-Za-z_][A-Za-z0-9_-]*$/u.test(propertyName)) return value;
+  cursor += 1;
+  while (cursor < value.length && /\s/u.test(value[cursor])) cursor += 1;
+  if (value[cursor] !== ":") return value;
+  let previous = position - 1;
+  while (previous >= 0 && /\s/u.test(value[previous])) previous -= 1;
+  if (previous < 0 || !['"', "}", "]", "e", "l"].includes(value[previous]) && !/[0-9]/u.test(value[previous])) {
+    return value;
+  }
+  const candidate = `${value.slice(0, position)},${value.slice(position)}`;
+  try {
+    return isJsonObject(JSON.parse(candidate)) ? candidate : value;
+  } catch {
+    return value;
+  }
+}
 function normalizePiMcpProxyArgs(value) {
   if (typeof value !== "string") return { value, repaired: false };
   try {
     JSON.parse(value);
     return { value, repaired: false };
   } catch {
-    const repairedValue = escapeLiteralJsonStringControlCharacters(value);
-    if (repairedValue === value) return { value, repaired: false };
-    try {
-      return isJsonObject(JSON.parse(repairedValue)) ? { value: repairedValue, repaired: true } : { value, repaired: false };
-    } catch {
-      return { value, repaired: false };
+    const repairedControlCharacters = escapeLiteralJsonStringControlCharacters(value);
+    const repairedValue = escapeLikelyLiteralJsonStringQuotes(repairedControlCharacters);
+    if (repairedValue !== value) {
+      try {
+        if (isJsonObject(JSON.parse(repairedValue))) {
+          return { value: repairedValue, repaired: true };
+        }
+      } catch {
+      }
     }
+    const commaRepairedValue = insertSingleMissingObjectPropertyComma(repairedControlCharacters);
+    return commaRepairedValue !== value ? { value: commaRepairedValue, repaired: true } : { value, repaired: false };
   }
 }
 function registerManagedPiMcpArgsNormalizer(pi) {
@@ -1854,6 +1996,8 @@ function managedPiMcpArgsNormalizerExtensionSource() {
   return [
     isJsonObject.toString(),
     escapeLiteralJsonStringControlCharacters.toString(),
+    escapeLikelyLiteralJsonStringQuotes.toString(),
+    insertSingleMissingObjectPropertyComma.toString(),
     normalizePiMcpProxyArgs.toString(),
     `export default ${registerManagedPiMcpArgsNormalizer.toString()};`,
     ""
@@ -2264,7 +2408,12 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (!existsSync3(packagePath) || lstatSync2(packagePath).isSymbolicLink() || !lstatSync2(packagePath).isFile()) {
       throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package is unavailable`);
     }
-    const packageMetadata = readJsonFile(packagePath, `package:${MANAGED_WEB_ACCESS_PACKAGE}`, null);
+    let packageMetadata;
+    try {
+      packageMetadata = JSON.parse(readFileSync3(packagePath, "utf8"));
+    } catch {
+      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package metadata is invalid`);
+    }
     if (!packageMetadata || packageMetadata.name !== MANAGED_WEB_ACCESS_PACKAGE) {
       throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package identity mismatch`);
     }
@@ -2318,44 +2467,11 @@ function createManagedPiMcpProfileApi(options = {}) {
       }
     }
     const browserUse = selectManagedBrowserUse(sourceSettings, npmSource);
-    const webAccess = selectManagedWebAccess(sourceSettings, npmSource);
+    const webAccess = sourceAcquisition ? null : selectManagedWebAccess(sourceSettings, npmSource);
     const telemetry = selectManagedTelemetry(sourceSettings, npmSource);
-    if (sourceAcquisition && (!browserUse || !webAccess)) {
+    if (sourceAcquisition && !browserUse) {
       throw new Error("pi_managed_mcp_source_acquisition_packages_missing");
     }
-    const sourceProfile = record6(sourceAcquisition?.profile);
-    const sourceAccess = record6(sourceProfile.access);
-    const sourceTransport = record6(sourceProfile.transport);
-    const sourceObservation = sourceAcquisition ? {
-      runId: sourceProfile.runId,
-      retention: sourceProfile.retention
-    } : null;
-    const sourceWebAccessConfig = sourceAcquisition ? {
-      ...webAccess.config,
-      fetch: {
-        ...record6(webAccess.config.fetch),
-        mode: sourceTransport.webFetchMode,
-        observation: sourceObservation,
-        ...!record6(webAccess.config.fetch).provider && !record6(webAccess.config.fetch).summary && typeof sourceSettings.defaultProvider === "string" && typeof sourceSettings.defaultModel === "string" ? { summary: { provider: sourceSettings.defaultProvider, model: sourceSettings.defaultModel } } : {}
-      }
-    } : null;
-    const sourceBrowserConfig = sourceAcquisition ? {
-      ...browserUse.config,
-      sessionMode: sourceTransport.browserMode,
-      ...sourceAccess.mode === "authenticated" ? { userDataDir: sourceAcquisition.userDataDir } : {},
-      readPolicy: {
-        version: "browser_read_policy_v1",
-        accessMode: sourceAccess.mode,
-        allowedTopLevelLocators: [sourceAccess.exactLocator, ...Array.isArray(sourceAccess.declaredPageLocators) ? sourceAccess.declaredPageLocators : []],
-        allowedTopLevelOrigins: sourceAccess.allowedTopLevelOrigins,
-        subresources: "public_or_same_origin",
-        privateCrossOriginSubresources: "deny",
-        popups: "deny",
-        downloads: "deny",
-        newTargets: "deny",
-        observation: sourceObservation
-      }
-    } : null;
     const settings = {
       ...typeof sourceSettings.defaultProvider === "string" ? { defaultProvider: sourceSettings.defaultProvider } : {},
       ...typeof sourceSettings.defaultModel === "string" ? { defaultModel: sourceSettings.defaultModel } : {},
@@ -2363,15 +2479,15 @@ function createManagedPiMcpProfileApi(options = {}) {
         "npm:pi-mcp-adapter",
         ...telemetry ? [telemetry.packageSpec] : [],
         ...webAccess ? [webAccess.packageSpec] : [],
-        ...browserUse ? [browserUse.packageSpec] : []
+        ...!sourceAcquisition && browserUse ? [browserUse.packageSpec] : []
       ],
       ...telemetry ? { "pi-telemetry": telemetry.config } : {},
-      ...webAccess ? { "pi-web-access": sourceWebAccessConfig ?? webAccess.config } : {},
-      ...browserUse ? {
+      ...webAccess ? { "pi-web-access": webAccess.config } : {},
+      ...!sourceAcquisition && browserUse ? {
         plugins: {
           [MANAGED_BROWSER_USE_PLUGIN]: browserUse.plugin
         },
-        "pi-browser-use": sourceBrowserConfig ?? browserUse.config
+        "pi-browser-use": browserUse.config
       } : {}
     };
     writePrivateFile2(join4(agentDir, "settings.json"), `${JSON.stringify(settings, null, 2)}
@@ -2382,6 +2498,12 @@ function createManagedPiMcpProfileApi(options = {}) {
       join4(extensionsDir, MANAGED_PI_MCP_ARGS_NORMALIZER_FILENAME),
       managedPiMcpArgsNormalizerExtensionSource()
     );
+    if (sourceAcquisition && !copyPrivateFile(
+      join4(source, "extensions", "amaster-source-acquisition.js"),
+      join4(extensionsDir, "amaster-source-acquisition.js")
+    )) {
+      throw new Error("pi_managed_mcp_source_acquisition_extension_missing");
+    }
     copyPrivateFile(join4(source, "models.json"), join4(agentDir, "models.json"));
     const authSource = join4(source, "auth.json");
     const protectedValues = [];
@@ -2501,6 +2623,9 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       const restoredNativeSession = restoreManagedPiSessionRollout(input, sessionsRoot, runDir, executorHome, authority);
       const configPath = join4(piCodingAgentDir, "mcp.json");
       const config = {
+        settings: {
+          toolPrefix: "none"
+        },
         mcpServers: {
           [SUPPORTED_SERVER_NAME2]: {
             type: "http",
@@ -2523,8 +2648,6 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         PI_AGENT_MCP_SERVERS_FILE: configPath,
         TMPDIR: tmp,
         ...input.sourceAcquisition ? {
-          PI_WEB_ACCESS_RUNTIME_FETCH_MODE: record6(input.sourceAcquisition.profile).transport?.webFetchMode,
-          PI_WEB_ACCESS_RUNTIME_OBSERVATION: "required",
           PI_BROWSER_USE_RUNTIME_READ_POLICY: "required"
         } : {}
       };
@@ -3393,13 +3516,16 @@ function wikiAccessRuleLine(input) {
   return "";
 }
 function fixedRules(input, includeIssueLine) {
+  const issue = asRecord(asRecord(input.context).paperclipIssue);
+  const businessOutcome = asRecord(asRecord(issue.taskRequirements).businessOutcome);
+  const serverOwnedBusinessOutcomeReview = businessOutcome.mode === "required";
   return [
     "## AMaster Runtime Connector Task",
     "MirrorX task.",
     "Use only the declared workspace; make concrete progress and report concisely.",
     "Before changing the task status to done, audit every explicit requirement in the task against the final evidence. A successful tool or document write proves delivery, not acceptance: inspect the delivered content for required sections, diagrams, tables, and factual constraints.",
     "Do not leave stale in-progress wording such as \u201Ccurrent run\u201D in a terminal deliverable; rewrite it to the final observed state. Do not list finalization itself as remaining or next work in a terminal deliverable.",
-    "If any requirement is missing or cannot be verified, do not mark done. To request review, use create_interaction with kind request_confirmation and payload.resolutionMode review; never call update_parent with status in_review. Otherwise keep the issue todo or blocked with the exact gap and next owner.",
+    serverOwnedBusinessOutcomeReview ? "If any requirement is missing or cannot be verified, do not mark done or request final completion or Business Outcome review. Keep the issue in_progress or blocked with the exact gap and next owner. An intermediate review remains available only for an exact document revision that must be approved before execution can continue: use create_interaction with kind request_confirmation, payload.resolutionMode review, and purposeCode review_document_revision; never use that interaction as final completion or Outcome acceptance." : "If any requirement is missing or cannot be verified, do not mark done. To request review, use create_interaction with kind request_confirmation and payload.resolutionMode review; never call update_parent with status in_review. Otherwise keep the issue todo or blocked with the exact gap and next owner.",
     DEADLINE_POSTURE_GUARD,
     "Do not install operating-system or user-global packages, and do not use host package managers such as brew, apt, yum, or global pip/npm installs. Use tools already available or workspace-local dependencies or virtual environments. If a required renderer or evaluator is unavailable, keep the source artifact, record the exact verification gap, and do not mutate the host.",
     `- command id: ${input.commandId}`,
@@ -3433,7 +3559,7 @@ function interactionResolutionText(context) {
   if (Object.keys(resolution).length === 0) return "";
   const target = asRecord(resolution.target);
   const exactDocumentRevisionDirective = readString(resolution.status) === "changes_requested" && readString(target.type) === "issue_document" && readString(target.issueId) && readString(target.documentId) && readString(target.key) && readString(target.revisionId) ? [
-    "The review target is an exact issue_document revision. Revise that same document with upsert_document_revision: copy target.issueId, target.documentId, and target.key, and use target.revisionId as baseRevisionId.",
+    "The review target is an exact issue_document revision. Revise that same document with upsert_document_revision: copy target.issueId, target.documentId, and target.key, use target.revisionId as baseRevisionId, and put the complete revised markdown in the required action.body; metadata-only revisions are invalid.",
     "Do not copy the reviewed document into the current issue and do not restart its revision lineage at 1."
   ].join(" ") : "";
   return [
@@ -3544,7 +3670,10 @@ function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionCon
     optionId: readString(optionId)
   })).filter((entry) => entry.optionId && !allowed.has(entry.authorizationClass));
   const issue = asRecord(context.paperclipIssue);
-  const completion = asRecord(asRecord(issue.taskRequirements).completion);
+  const requirements = asRecord(issue.taskRequirements);
+  const completion = asRecord(requirements.completion);
+  const delivery = asRecord(requirements.delivery);
+  const businessOutcome = asRecord(requirements.businessOutcome);
   const completionRole = readString(completion.role);
   const completionDeliverable = readString(completion.deliverable);
   const manifestRefreshOnly = isManifestRefreshOnly(context);
@@ -3554,13 +3683,26 @@ function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionCon
     firstDocumentCheckpoint,
     "If work remains in an ordinary productive run, call update_parent with status: in_progress and a concrete next action so bounded continuation recovery can preserve a live path. Status: todo does not queue a normal continuation from an ordinary productive run. Only a server-issued successful-run handoff recovery may use status: todo, and only according to its exact Recovery Instruction. Otherwise use a supported terminal or waiting disposition."
   ].filter(Boolean).join(" ") : "";
+  const businessOutcomeOwnershipContract = businessOutcome.mode === "required" ? [
+    "Business Outcome review is owned by the Server terminal reconciler.",
+    "Do not create a generic review-mode request_confirmation to ask the Board to accept final completion or the Outcome, and do not mark the issue done yourself. This does not prohibit an explicit intermediate review of an exact document revision before execution continues."
+  ].join(" ") : "";
+  const businessOutcomeTerminalContract = !suppressOrdinaryCompletionContract && businessOutcome.mode === "required" ? [
+    delivery.mode === "required" ? "When every acceptance criterion is satisfied and the exact current Delivery Manifest is ready, record the final execution disposition with update_parent status in_progress and a concise evidence summary, then end the run successfully without creating a final review interaction." : "When every acceptance criterion is satisfied, record the final execution disposition with update_parent status in_progress and a concise evidence summary, then end the run successfully without creating a final review interaction.",
+    delivery.mode === "required" ? "Only after the run and command succeed does the Server bind the exact current Delivery Manifest and terminal Outcome evidence, create the formal Board review before generic continuation handoff is evaluated, and move the issue to in_review. Board acceptance then finalizes the issue as done atomically." : "Only after the run and command succeed does the Server bind the terminal Outcome evidence, create the formal Board review before generic continuation handoff is evaluated, and move the issue to in_review. Board acceptance then finalizes the issue as done atomically."
+  ].join(" ") : "";
   const authorizationContract = missing.length > 0 ? [
     `Current allowed action classes: ${[...allowed].join(", ") || "task_governance"}.`,
     "If the task requires a missing runtime action class, create a request_checkbox_confirmation interaction using the exact option id below and wait for its accepted continuation:",
     ...missing.map((entry) => `- ${entry.authorizationClass}: ${entry.optionId}`),
     "Never use request_confirmation to authorize a runtime action class."
   ].join("\n") : "";
-  return [completionContract, authorizationContract].filter(Boolean).join("\n");
+  return [
+    completionContract,
+    businessOutcomeOwnershipContract,
+    businessOutcomeTerminalContract,
+    authorizationContract
+  ].filter(Boolean).join("\n");
 }
 function runtimeDecompositionRequirementText(context) {
   const issue = asRecord(context.paperclipIssue);
@@ -3685,12 +3827,13 @@ function piMcpProxyExamplesText(input) {
     args: JSON.stringify(args)
   });
   return [
-    "The Pi native tool is the outer `mcp` proxy. Emit these as actual tool calls; `args` is the stringified inner canonical object:",
+    "The Pi native tool is the outer `mcp` proxy. Emit these as actual tool calls; `args` is the stringified inner canonical object. Pi validates this string schema before extension hooks, so never send object-valued `args`:",
     "Keep review payload strings short. Reference the exact document key and revision in `target`; do not duplicate the reviewed document body in `prompt` or `detailsMarkdown`.",
+    "payload.supersedesInteractionId is invalid. provenance.supersedesInteractionId is only for replacing a currently pending governed interaction; after changes_requested or rejected resolution, do not send a supersession id.",
     "update_parent.comment creates a separate persistent issue comment. Omit it when add_comment already recorded the message.",
     `- describe: ${proxy("runtime_action.describe", { schemaVersion: "runtime-action-v1", actionType: "update_parent" })}`,
     `- submit: ${proxy("runtime_action.submit", { schemaVersion: "runtime-action-v1", idempotencyKey: "task-123-progress", action: { type: "update_parent", status: "in_progress" } })}`,
-    `- submit review interaction: ${proxy("runtime_action.submit", { schemaVersion: "runtime-action-v1", idempotencyKey: "task-123-review", action: { type: "create_interaction", kind: "request_confirmation", continuationPolicy: "wake_assignee_on_accept", provenance: { purposeCode: "review_document_revision", requirementRefs: ["acceptance:document_review"], attentionOwner: { kind: "board", id: "board" }, epochKey: "document_revision:22222222-2222-4222-8222-222222222222" }, payload: { version: 1, resolutionMode: "review", prompt: "Review `plan` revision 1.", target: { type: "issue_document", issueId: "11111111-1111-4111-8111-111111111111", documentId: "33333333-3333-4333-8333-333333333333", key: "plan", revisionId: "22222222-2222-4222-8222-222222222222", revisionNumber: 1 } } } })}`,
+    `- submit intermediate document review interaction: ${proxy("runtime_action.submit", { schemaVersion: "runtime-action-v1", idempotencyKey: "task-123-review", action: { type: "create_interaction", kind: "request_confirmation", continuationPolicy: "wake_assignee_on_accept", provenance: { purposeCode: "review_document_revision", requirementRefs: ["acceptance:document_review"], attentionOwner: { kind: "board", id: "board" }, epochKey: "document_revision:22222222-2222-4222-8222-222222222222" }, payload: { version: 1, resolutionMode: "review", prompt: "Review `plan` revision 1.", target: { type: "issue_document", issueId: "11111111-1111-4111-8111-111111111111", documentId: "33333333-3333-4333-8333-333333333333", key: "plan", revisionId: "22222222-2222-4222-8222-222222222222", revisionNumber: 1 } } } })}`,
     `- plan: ${proxy("runtime_action.plan", { schemaVersion: "runtime-action-v1", idempotencyKey: "task-123-plan", actions: [{ type: "update_parent", status: "in_progress" }] })}`,
     `- commit the returned plan revision: ${proxy("runtime_action.commit", { schemaVersion: "runtime-action-v1", planId: "11111111-1111-4111-8111-111111111111", revision: "plan-revision-1" })}`,
     `- read document: ${proxy("amaster.read_issue_document", { issueId: "AM-123", key: "plan" })}`
@@ -4177,16 +4320,38 @@ function tcReadNumber(value, fallback = 0) {
   return typeof value === "number" && Number.isFinite(value) ? value : fallback;
 }
 var TC_PI_ARGUMENT_VALIDATION_NODE_BUDGET = 4e3;
-function tcContainsPiArgumentValidation(value, depth = 0, seen = /* @__PURE__ */ new WeakSet(), budget = { remaining: TC_PI_ARGUMENT_VALIDATION_NODE_BUDGET }) {
-  if (budget.remaining <= 0) return false;
+var TC_PI_ARGUMENT_VALIDATION_PATTERN = /\binvalid(?:[_ -]+)tool(?:[_ -]+)arguments?\b|\binvalid args json\b|\btool[- ]arguments? (?:failed )?validation\b/i;
+function tcFindPiArgumentValidationText(value, depth = 0, seen = /* @__PURE__ */ new WeakSet(), budget = { remaining: TC_PI_ARGUMENT_VALIDATION_NODE_BUDGET }) {
+  if (budget.remaining <= 0) return null;
   budget.remaining -= 1;
   if (typeof value === "string") {
-    return /\binvalid(?:[_ -]+)tool(?:[_ -]+)arguments?\b|\binvalid args json\b|\btool[- ]arguments? (?:failed )?validation\b/i.test(value.slice(0, 2e4));
+    const bounded = value.slice(0, 2e4);
+    return TC_PI_ARGUMENT_VALIDATION_PATTERN.test(bounded) ? bounded : null;
   }
-  if (!value || typeof value !== "object" || depth >= 6 || seen.has(value)) return false;
+  if (!value || typeof value !== "object" || depth >= 6 || seen.has(value)) return null;
   seen.add(value);
   const entries = Array.isArray(value) ? value.slice(0, 40).map((entry, index) => [String(index), entry]) : Object.entries(value).slice(0, 80);
-  return entries.some(([, entry]) => tcContainsPiArgumentValidation(entry, depth + 1, seen, budget));
+  for (const [, entry] of entries) {
+    const match = tcFindPiArgumentValidationText(entry, depth + 1, seen, budget);
+    if (match) return match;
+  }
+  return null;
+}
+function tcPiArgumentValidationDiagnostic(value) {
+  const text = tcFindPiArgumentValidationText(value);
+  if (!text) return null;
+  const normalized = text.toLowerCase();
+  const validationSource = /\binvalid args json\b/iu.test(text) ? "invalid_args_json" : /\binvalid(?:[_ -]+)tool(?:[_ -]+)arguments?\b/iu.test(text) ? "invalid_tool_arguments" : "tool_argument_validation";
+  const parseErrorKind = validationSource !== "invalid_args_json" ? null : normalized.includes("unexpected end") ? "unexpected_end" : normalized.includes("unexpected token") || normalized.includes("unexpected non-whitespace") ? "unexpected_token" : normalized.includes("unterminated string") ? "unterminated_string" : normalized.includes("bad control character") ? "bad_control_character" : normalized.includes("bad escaped character") || normalized.includes("invalid escape") ? "bad_escape" : /expected (?:','|'\}'|':'|property name|double-quoted property)/u.test(normalized) ? "missing_delimiter" : "other";
+  const rawPosition = validationSource === "invalid_args_json" ? text.match(/\bposition\s+(\d{1,9})\b/iu)?.[1] : null;
+  const parseErrorPosition = rawPosition ? Number(rawPosition) : null;
+  return {
+    validationSource,
+    validationPath: validationSource === "invalid_args_json" ? "$.args" : "$",
+    pathPrecision: validationSource === "invalid_args_json" ? "exact" : "root_only",
+    ...parseErrorKind ? { parseErrorKind } : {},
+    ...typeof parseErrorPosition === "number" && Number.isSafeInteger(parseErrorPosition) && parseErrorPosition >= 0 ? { parseErrorPosition } : {}
+  };
 }
 function tcTruncateText(value, maxChars = 16e3) {
   const text = String(value ?? "");
@@ -4559,7 +4724,7 @@ function summarizePiEvent(event) {
   if (type === "tool_execution_start" || type === "tool_execution_end") {
     const toolName = tcReadString(event.toolName) ?? "unknown";
     const completed = type === "tool_execution_end";
-    const argumentValidationFailed = completed && event.isError === true && tcContainsPiArgumentValidation(event.result);
+    const argumentValidationDiagnostic = completed && event.isError === true ? tcPiArgumentValidationDiagnostic(event.result) : null;
     return {
       stream: "system",
       level: completed && event.isError === true ? "error" : "info",
@@ -4570,7 +4735,7 @@ function summarizePiEvent(event) {
         toolName,
         toolCallId: tcReadString(event.toolCallId),
         status: completed ? event.isError === true ? "failed" : "completed" : "started",
-        ...argumentValidationFailed ? { errorCode: "invalid_tool_arguments" } : {}
+        ...argumentValidationDiagnostic ? { errorCode: "invalid_tool_arguments", ...argumentValidationDiagnostic } : {}
       }
     };
   }
@@ -4726,6 +4891,7 @@ function governedMcpToolResult(structuredContent) {
   if (!status) return null;
   const invocationId = readString(structuredContent.invocationId);
   const providerContent = asRecord(structuredContent.content);
+  const providerReceipt = asRecord(structuredContent.providerReceipt);
   const providerStatus = readString(providerContent.status);
   const providerResult = asRecord(providerContent.result);
   const effectResult = asRecord(providerResult.effectResult);
@@ -4742,12 +4908,23 @@ function governedMcpToolResult(structuredContent) {
     ...readString(providerResult.planId) ? { planId: readString(providerResult.planId) } : {},
     ...readString(providerResult.status) ? { resultStatus: readString(providerResult.status) } : {}
   } : null;
+  const diagnosisId = readString(providerContent.diagnosisId);
+  const diagnosisRevision = readNumber(providerContent.diagnosisRevision, 0);
+  const documentRevisionId = readString(providerContent.documentRevisionId);
+  const workProductId = readString(providerContent.workProductId);
+  const diagnosisBrief = status === "succeeded" && invocationId && readString(providerReceipt.provider) === "amaster_actions" && readString(providerReceipt.invocationId) === invocationId && readString(providerReceipt.status) === "accepted" && readString(providerReceipt.writeKind) === "company_diagnosis_brief" && diagnosisId && Number.isSafeInteger(diagnosisRevision) && diagnosisRevision > 0 && documentRevisionId && workProductId ? {
+    diagnosisId,
+    diagnosisRevision,
+    documentRevisionId,
+    workProductId
+  } : null;
   return {
     ...invocationId ? { invocationId } : {},
     status,
     ...providerStatus ? { providerStatus } : {},
     ...artifactIntent ? { artifactIntent } : {},
-    ...runtimeAction ? { runtimeAction } : {}
+    ...runtimeAction ? { runtimeAction } : {},
+    ...diagnosisBrief ? { diagnosisBrief } : {}
   };
 }
 function dedupeGovernedMcpToolResults(results) {
@@ -4820,10 +4997,23 @@ function finalizedPiRuntimeArtifactEvidence(runtimeArtifacts) {
     ...intentId ? { intentId } : {}
   };
 }
+function durablePiDiagnosisBriefEvidence(results) {
+  const result3 = (Array.isArray(results) ? results : []).map(asRecord).find((entry) => readString(entry.status) === "succeeded" && Object.keys(asRecord(entry.diagnosisBrief)).length > 0);
+  if (!result3) return null;
+  const brief = asRecord(result3.diagnosisBrief);
+  return {
+    kind: "company_diagnosis_brief",
+    invocationId: readString(result3.invocationId),
+    diagnosisId: readString(brief.diagnosisId),
+    diagnosisRevision: readNumber(brief.diagnosisRevision, 0),
+    documentRevisionId: readString(brief.documentRevisionId),
+    workProductId: readString(brief.workProductId)
+  };
+}
 function classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) {
   const diagnostics = Array.isArray(parsed?.cleanupDiagnostics) ? parsed.cleanupDiagnostics.map(asRecord) : [];
   if (parsed?.terminalEventType !== "agent_end" || readString(parsed?.stopReason) || parsed?.hasAssistantOutput !== true || diagnostics.length === 0 || diagnostics.some((diagnostic) => readString(diagnostic.phase) !== "post_terminal" || readString(diagnostic.code) !== "pi_terminal_cleanup_permission_denied") || readNumber(parsed?.nonCleanupErrorCount, 0) > 0) return null;
-  const durableEvidence = durablePiRuntimeActionEvidence(parsed?.mcpToolResults) ?? finalizedPiRuntimeArtifactEvidence(runtimeArtifacts);
+  const durableEvidence = durablePiRuntimeActionEvidence(parsed?.mcpToolResults) ?? durablePiDiagnosisBriefEvidence(parsed?.mcpToolResults) ?? finalizedPiRuntimeArtifactEvidence(runtimeArtifacts);
   if (!durableEvidence) return null;
   return {
     status: "failed",
@@ -6764,7 +6954,7 @@ function within3(candidate, root) {
   const rel = relative6(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
 }
-function readJsonFile3(path, label, fallback = {}) {
+function readJsonFile2(path, label, fallback = {}) {
   if (!existsSync11(path)) return fallback;
   const stat = lstatSync6(path);
   if (!stat.isFile() || stat.isSymbolicLink()) {
@@ -6815,8 +7005,8 @@ function copyTreeNoLinks(source, target) {
   chmodSync5(target, 384 | stat.mode & 73);
 }
 function mergeMcp(seedRoot, overlayRoot, governedConfig) {
-  const seed = record5(readJsonFile3(join12(seedRoot, "mcp.json"), "seed_mcp", { mcpServers: {} }));
-  const overlay = record5(readJsonFile3(join12(overlayRoot, "mcp.json"), "overlay_mcp", { mcpServers: {} }));
+  const seed = record5(readJsonFile2(join12(seedRoot, "mcp.json"), "seed_mcp", { mcpServers: {} }));
+  const overlay = record5(readJsonFile2(join12(overlayRoot, "mcp.json"), "overlay_mcp", { mcpServers: {} }));
   assertNoPersistentSecrets(seed, ["seed", "mcp.json"]);
   assertNoPersistentSecrets(overlay, ["overlay", "mcp.json"]);
   const seedServers = record5(seed.mcpServers);
@@ -6852,7 +7042,7 @@ function assertEnabledPackagesAvailable(settings, npmRoot) {
   }
   for (const name of requiredNames) {
     const metadataPath = join12(npmRoot, "node_modules", ...name.split("/"), "package.json");
-    const metadata = readJsonFile3(metadataPath, `package:${name}`, null);
+    const metadata = readJsonFile2(metadataPath, `package:${name}`, null);
     if (!metadata || metadata.name !== name) {
       throw new Error(`pi_trusted_runtime_package_unavailable:${name}`);
     }
@@ -6880,8 +7070,8 @@ function materializeTrustedPiRuntimeProfile(input) {
   }
   const mergedJson = {};
   for (const entry of JSON_ENTRIES) {
-    const seed = readJsonFile3(join12(seedRoot, entry), `seed_${entry}`, {});
-    const overlay = readJsonFile3(join12(overlayRoot, entry), `overlay_${entry}`, {});
+    const seed = readJsonFile2(join12(seedRoot, entry), `seed_${entry}`, {});
+    const overlay = readJsonFile2(join12(overlayRoot, entry), `overlay_${entry}`, {});
     const merged = deepMerge(seed, overlay);
     if (entry === "settings.json") {
       merged["pi-security"] = {
@@ -6901,7 +7091,7 @@ function materializeTrustedPiRuntimeProfile(input) {
     chmodSync5(join12(agentDir, entry), 384);
     mergedJson[entry] = merged;
   }
-  const governedConfig = readJsonFile3(input.governedMcpConfigPath, "governed_mcp");
+  const governedConfig = readJsonFile2(input.governedMcpConfigPath, "governed_mcp");
   const mcp = mergeMcp(seedRoot, overlayRoot, governedConfig);
   writeFileSync8(input.governedMcpConfigPath, `${JSON.stringify(mcp, null, 2)}
 `, { mode: 384 });
@@ -7947,20 +8137,17 @@ async function executeBrowserSessionCommand(command, dependencies = {}) {
 }
 
 // src/amaster-runtime-daemon/source-acquisition-invocation.mjs
+import { createHash as createHash10 } from "node:crypto";
 var SOURCE_ACQUISITION_PUBLIC_TOOLS = Object.freeze([
-  "web_fetch",
-  "browser_list_pages",
-  "browser_navigate_page",
-  "browser_take_snapshot",
-  "browser_take_screenshot",
-  "browser_analyze_screenshot",
-  "browser_wait_for",
+  "source_open",
+  "source_snapshot",
+  "source_screenshot",
+  "source_analyze_screenshot",
+  "source_wait",
   "runtime_action.submit",
   "runtime_action.status"
 ]);
-var SOURCE_ACQUISITION_AUTHENTICATED_TOOLS = Object.freeze(
-  SOURCE_ACQUISITION_PUBLIC_TOOLS.filter((tool) => tool !== "web_fetch")
-);
+var SOURCE_ACQUISITION_AUTHENTICATED_TOOLS = SOURCE_ACQUISITION_PUBLIC_TOOLS;
 function exactToolsFor(profile) {
   if (profile?.access?.mode === "public") return SOURCE_ACQUISITION_PUBLIC_TOOLS;
   if (profile?.access?.mode === "authenticated") return SOURCE_ACQUISITION_AUTHENTICATED_TOOLS;
@@ -7982,6 +8169,34 @@ function sourceAcquisitionPiInvocationArgs(profile) {
     "--no-session"
   ];
 }
+function serializeSourceAcquisitionProfile(profile) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile)) return null;
+  const input = Buffer.from(JSON.stringify(profile), "utf8");
+  return {
+    input,
+    sha256: createHash10("sha256").update(input).digest("hex")
+  };
+}
+function sourceAcquisitionManagedInputs(options) {
+  return [
+    options.managedInput ? { fd: 3, input: options.managedInput, code: "managed_runtime_assertion" } : null,
+    options.sourceProfileInput ? { fd: 4, input: options.sourceProfileInput, code: "source_acquisition_profile" } : null
+  ].filter(Boolean);
+}
+function sourceAcquisitionManagedStdio(inputs) {
+  const stdio = ["pipe", "pipe", "pipe"];
+  for (const { fd } of inputs) {
+    while (stdio.length <= fd) stdio.push("ignore");
+    stdio[fd] = "pipe";
+  }
+  return stdio;
+}
+function deliverSourceAcquisitionManagedInputs(child, inputs, onError) {
+  for (const { fd, input, code } of inputs) {
+    child.stdio[fd].once("error", (error) => onError(code, error));
+    child.stdio[fd].end(input);
+  }
+}
 function assertSourceAcquisitionRuntimeAuthority({
   profile,
   executorKind,
@@ -7995,17 +8210,17 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.0";
+var CONNECTOR_VERSION = "0.1.1-beta.2";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";
 var SOURCE_ACQUISITION_RETENTION_VERSION = "source_summary_only_v1";
 var SOURCE_ACQUISITION_ACTION_VERSION = "complete_source_acquisition_v1";
+var SOURCE_ACQUISITION_HEADLESS_ADAPTER = "pi_browser_use_headless_v1";
+var SOURCE_ACQUISITION_DESKTOP_ADAPTER = "browser_skill_desktop_v1";
 var SOURCE_ACQUISITION_PACKAGE_VERSIONS = Object.freeze({
-  "@amaster.ai/pi-web-access": "0.1.2-beta.52",
   "@amaster.ai/pi-browser-use": "0.1.2-beta.52"
 });
-var SOURCE_ACQUISITION_CONNECTOR_VERSION = "0.1.1-beta.0";
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
 var AMASTER_PI_PROHIBITED_EXTRA_ARGS = /* @__PURE__ */ new Set(["--no-extensions", "--no-skills", "--no-tools", "--no-session"]);
@@ -8536,14 +8751,11 @@ function sourceAcquisitionPackageMetadata(packageName2) {
   if (!existsSync14(packagePath)) return null;
   const stat = lstatSync7(packagePath);
   if (!stat.isFile() || stat.isSymbolicLink()) return null;
-  const metadata = readJsonFile4(packagePath);
+  const metadata = readJsonFile3(packagePath);
   return metadata.name === packageName2 && readString(metadata.version) ? metadata : null;
 }
 function sourceAcquisitionRuntimeReadiness(config) {
   const unavailable = (reason) => ({ ready: false, reason });
-  if (CONNECTOR_VERSION !== SOURCE_ACQUISITION_CONNECTOR_VERSION) {
-    return unavailable("source_acquisition_connector_version_mismatch");
-  }
   const piExecutor = config.executors.find((executor) => executor.kind === "pi");
   if (!piExecutor || !commandExists(piExecutor.command, {
     ...process.env,
@@ -8565,9 +8777,16 @@ function sourceAcquisitionRuntimeReadiness(config) {
     return unavailable("source_acquisition_trusted_runtime_invalid");
   }
   const packageDigests = {
-    "@amaster.ai/pi-web-access": readString(process.env.AMASTER_SOURCE_ACQUISITION_PI_WEB_ACCESS_DIGEST),
     "@amaster.ai/pi-browser-use": readString(process.env.AMASTER_SOURCE_ACQUISITION_PI_BROWSER_USE_DIGEST)
   };
+  const extensionDigest = readString(process.env.AMASTER_SOURCE_ACQUISITION_EXTENSION_DIGEST);
+  if (!extensionDigest || !/^[a-f0-9]{64}$/.test(extensionDigest)) {
+    return unavailable("source_acquisition_extension_digest_unavailable");
+  }
+  const adapters = (readString(process.env.AMASTER_SOURCE_ACQUISITION_ADAPTERS) ?? "").split(",").map((value) => value.trim()).filter(Boolean);
+  if (adapters.length === 0 || adapters.some((adapter) => ![SOURCE_ACQUISITION_HEADLESS_ADAPTER, SOURCE_ACQUISITION_DESKTOP_ADAPTER].includes(adapter))) {
+    return unavailable("source_acquisition_adapter_attestation_invalid");
+  }
   const connectorDigest = readString(process.env.AMASTER_SOURCE_ACQUISITION_CONNECTOR_DIGEST);
   if (!connectorDigest || !/^[a-f0-9]{64}$/.test(connectorDigest)) {
     return unavailable("source_acquisition_connector_digest_unavailable");
@@ -8589,6 +8808,8 @@ function sourceAcquisitionRuntimeReadiness(config) {
     profileVersion: SOURCE_ACQUISITION_PROFILE_VERSION,
     retentionVersion: SOURCE_ACQUISITION_RETENTION_VERSION,
     actionVersion: SOURCE_ACQUISITION_ACTION_VERSION,
+    extension: { digest: extensionDigest },
+    adapters,
     connector: {
       version: CONNECTOR_VERSION,
       digest: connectorDigest
@@ -8703,10 +8924,10 @@ function piAgentSystemDataDir(config) {
   return configured ? resolve12(expandHomePath(configured)) : null;
 }
 function readPiAgentLocalPlatformCredential(credentialsDir) {
-  const pointer = readJsonFile4(join15(credentialsDir, "latest.json"));
+  const pointer = readJsonFile3(join15(credentialsDir, "latest.json"));
   const credentialRef = readString(pointer.credentialRef);
   if (!credentialRef || !/^[a-f0-9]{64}$/i.test(credentialRef)) return null;
-  const credential = readJsonFile4(join15(credentialsDir, `${credentialRef}.json`));
+  const credential = readJsonFile3(join15(credentialsDir, `${credentialRef}.json`));
   const organizationId = readString(credential.organizationId);
   const apiKey = readString(credential.apiKey);
   if (credential.version !== 1 || !organizationId || !apiKey) return null;
@@ -9270,16 +9491,16 @@ function sourceAcquisitionRuntimeProfile(config, command) {
   const access = asRecord(profile.access);
   const transport = asRecord(profile.transport);
   const tools = asRecord(profile.tools);
-  if (profile.purpose !== "source_acquisition_v1" || profile.retention !== "source_summary_only_v1" || readString(profile.runId) !== commandRunId(command) || !Array.isArray(tools.exactAllowlist) || tools.exactAllowlist.length === 0 || !["public", "authenticated"].includes(access.mode) || !["isolated", "existing"].includes(transport.browserMode) || !["provider_jina_or_local", "local_only"].includes(transport.webFetchMode)) {
+  if (profile.purpose !== "source_acquisition_v1" || profile.retention !== "source_summary_only_v1" || readString(profile.runId) !== commandRunId(command) || !Array.isArray(tools.exactAllowlist) || tools.exactAllowlist.length === 0 || !["public", "authenticated"].includes(access.mode) || !["isolated", "existing"].includes(transport.browserMode) || ![SOURCE_ACQUISITION_HEADLESS_ADAPTER, SOURCE_ACQUISITION_DESKTOP_ADAPTER].includes(transport.adapter)) {
     throw new Error("source_acquisition_profile_invalid");
   }
   if (access.mode === "public") {
-    if (transport.browserMode !== "isolated" || transport.webFetchMode !== "provider_jina_or_local") {
+    if (transport.browserMode !== "isolated" || transport.adapter !== SOURCE_ACQUISITION_HEADLESS_ADAPTER) {
       throw new Error("source_acquisition_profile_invalid");
     }
     return { profile };
   }
-  if (transport.browserMode !== "existing" || transport.webFetchMode !== "local_only") {
+  if (transport.browserMode !== "existing" || transport.adapter !== SOURCE_ACQUISITION_DESKTOP_ADAPTER) {
     throw new Error("source_acquisition_profile_invalid");
   }
   const companyId = readString(profile.companyId);
@@ -9288,12 +9509,12 @@ function sourceAcquisitionRuntimeProfile(config, command) {
   if (!companyId || !bindingId || !/^profile_[a-z0-9]{16,64}$/i.test(localOpaqueRef ?? "")) {
     throw new Error("source_acquisition_profile_invalid");
   }
-  const profileName2 = createHash10("sha256").update(`${companyId}\0${bindingId}\0${localOpaqueRef}`).digest("hex");
+  const profileName2 = createHash11("sha256").update(`${companyId}\0${bindingId}\0${localOpaqueRef}`).digest("hex");
   const stateRoot = resolve12(config.browserSessionStateRoot);
   const userDataDir = resolve12(stateRoot, profileName2);
   if (!pathWithin2(userDataDir, stateRoot)) throw new Error("source_acquisition_browser_profile_invalid");
   const markerPath = join15(userDataDir, ".amaster-browser-session.json");
-  const marker = readJsonFile4(markerPath);
+  const marker = readJsonFile3(markerPath);
   if (marker.version !== 1 || marker.companyId !== companyId || marker.bindingId !== bindingId || marker.localOpaqueRef !== localOpaqueRef || Object.keys(marker).length !== 4) {
     throw new Error("source_acquisition_browser_profile_invalid");
   }
@@ -9309,7 +9530,7 @@ function trustedPiRuntimeSources(config) {
     policyFile: config.piRuntimeEffectivePolicyFile
   };
 }
-function readJsonFile4(filePath) {
+function readJsonFile3(filePath) {
   try {
     const parsed = JSON.parse(readFileSync11(filePath, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
@@ -9554,6 +9775,60 @@ function buildExecutorEnv(config, command, workspace) {
     AMASTER_EMPLOYEE_COMPANY_ID: companyId
   };
 }
+function copyPiModelCallConfig(sourceRoot, targetRoot, fileName, required) {
+  const source = join15(sourceRoot, fileName);
+  if (!existsSync14(source)) {
+    if (required) throw new Error(`pi_model_call_profile_missing: ${fileName}`);
+    return;
+  }
+  const sourceStat = lstatSync7(source);
+  if (!sourceStat.isFile() || sourceStat.isSymbolicLink()) {
+    throw new Error(`pi_model_call_profile_unsafe: ${fileName}`);
+  }
+  const target = join15(targetRoot, fileName);
+  copyFileSync3(source, target);
+  chmodSync6(target, 384);
+}
+function preparePiModelCallProfile(commandId, baseEnv) {
+  const sourceRoot = readString(process.env.PI_CODING_AGENT_DIR) ?? readString(process.env.PI_AGENT_HOME) ?? readString(process.env["AMASTER-CLI_CODING_AGENT_DIR"]);
+  if (!sourceRoot) throw new Error("pi_model_call_profile_missing: source Pi home");
+  const sourceStat = lstatSync7(sourceRoot);
+  if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
+    throw new Error("pi_model_call_profile_unsafe: source Pi home");
+  }
+  const profileRoot = mkdtempSync(join15(tmpdir(), "amaster-pi-model-call-"));
+  const home = join15(profileRoot, "home");
+  const agentDir = join15(profileRoot, "agent");
+  const sessionsDir = join15(profileRoot, "sessions");
+  const tempDir = join15(profileRoot, "tmp");
+  for (const directory of [home, agentDir, sessionsDir, tempDir]) {
+    mkdirSync9(directory, { recursive: true, mode: 448 });
+  }
+  try {
+    copyPiModelCallConfig(sourceRoot, agentDir, "models.json", true);
+    copyPiModelCallConfig(sourceRoot, agentDir, "auth.json", false);
+    return {
+      profileRoot,
+      env: {
+        ...baseEnv,
+        HOME: home,
+        PI_AGENT_HOME: agentDir,
+        PI_CODING_AGENT_DIR: agentDir,
+        "AMASTER-CLI_CODING_AGENT_DIR": agentDir,
+        PI_CODING_AGENT_SESSION_DIR: sessionsDir,
+        "AMASTER-CLI_CODING_AGENT_SESSION_DIR": sessionsDir,
+        TMPDIR: tempDir,
+        AMASTER_RUNTIME_COMMAND_ID: commandId
+      }
+    };
+  } catch (error) {
+    rmSync7(profileRoot, { recursive: true, force: true });
+    throw error;
+  }
+}
+function cleanupPiModelCallProfile(profile) {
+  if (profile?.profileRoot) rmSync7(profile.profileRoot, { recursive: true, force: true });
+}
 function splitExtraArgs(value) {
   return splitList(value).flatMap((entry) => entry.split(/\s+/).filter(Boolean));
 }
@@ -9714,15 +9989,27 @@ async function executeModelCallCommand(config, command, signal) {
     purpose: readString(payload.purpose) ?? null,
     promptBytes: Buffer.byteLength(prompt, "utf8")
   });
-  const execution = await runExecutor(invocation.command, invocation.args, {
-    cwd: process.cwd(),
-    env: buildExecutorEnv(config, command, { managed: false, cwd: process.cwd(), sourceWorkspacePath: process.cwd() }),
-    stdin: invocation.stdin === "prompt" ? prompt : "",
-    timeoutSeconds,
-    maxOutputBytes,
-    executorKind: executor.kind,
-    signal
-  });
+  let piModelCallProfile = null;
+  let execution;
+  try {
+    const baseEnv = buildExecutorEnv(config, command, {
+      managed: false,
+      cwd: process.cwd(),
+      sourceWorkspacePath: process.cwd()
+    });
+    piModelCallProfile = executor.kind === "pi" ? preparePiModelCallProfile(command.commandId, baseEnv) : null;
+    execution = await runExecutor(invocation.command, invocation.args, {
+      cwd: process.cwd(),
+      env: piModelCallProfile?.env ?? baseEnv,
+      stdin: invocation.stdin === "prompt" ? prompt : "",
+      timeoutSeconds,
+      maxOutputBytes,
+      executorKind: executor.kind,
+      signal
+    });
+  } finally {
+    cleanupPiModelCallProfile(piModelCallProfile);
+  }
   if (execution.stdout) {
     await ingestLog(config, command, "stdout", "info", truncateText(execution.stdout, 4e3));
   }
@@ -10330,11 +10617,12 @@ function runExecutor(command, args, options) {
     const maxRssMb = parsePositiveInteger(options.maxRssMb, 0);
     const maxRssBytes = maxRssMb * 1024 * 1024;
     const spawnInvocation = managedChildSpawnInvocation(command, args, options.spawnIdentity);
+    const managedInputs = sourceAcquisitionManagedInputs(options);
     const child = spawn2(spawnInvocation.command, spawnInvocation.args, {
       cwd: options.cwd,
       env: options.env,
       detached: process.platform !== "win32",
-      stdio: options.managedInput ? ["pipe", "pipe", "pipe", "pipe"] : ["pipe", "pipe", "pipe"],
+      stdio: sourceAcquisitionManagedStdio(managedInputs),
       ...spawnInvocation.spawnIdentity
     });
     const processGroupId = processGroupIdForChild(child);
@@ -10370,13 +10658,10 @@ function runExecutor(command, args, options) {
       signalExecutorProcess(child, "SIGTERM", processGroupId);
       scheduleStopKill();
     };
-    if (options.managedInput) {
-      child.stdio[3].once("error", (error) => {
-        spawnError = `managed_runtime_assertion_delivery_failed: ${error.message}`;
-        requestStop("managed_runtime_assertion_delivery_failed");
-      });
-      child.stdio[3].end(options.managedInput);
-    }
+    deliverSourceAcquisitionManagedInputs(child, managedInputs, (code, error) => {
+      spawnError = `${code}_delivery_failed: ${error.message}`;
+      requestStop(`${code}_delivery_failed`);
+    });
     const reapStoppedWorkspaceResidents = () => {
       if (settled || !stopReason || stopReason === "completion_cleanup") return;
       const residents = listWorkspaceResidentProcesses(options.cwd, processGroupId, {
@@ -10980,6 +11265,7 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
         executorKind,
         ...readNumber(storedSpawnIdentity.uid, 0) > 0 ? { spawnIdentity: storedSpawnIdentity } : {},
         ...readString(executionConfig.managedInput) ? { managedInput: readString(executionConfig.managedInput) } : {},
+        ...readString(executionConfig.sourceProfileInput) ? { sourceProfileInput: readString(executionConfig.sourceProfileInput) } : {},
         onOutput: (stream, chunk, rawBytes) => {
           noteActiveRunOutput(command, stream, chunk, rawBytes);
           liveOutputLogger.write(stream, chunk);
@@ -10995,24 +11281,24 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
     const memoryLimit = asRecord(execution.memoryLimit);
     const hasMemoryLimit = readNumber(memoryLimit.rssBytes, 0) > 0;
     const parsed = parseExecutorTurnOutput(executorKind, execution, liveOutputLogger, hasOutputFlood);
+    const mcpToolResults = dedupeGovernedMcpToolResults([
+      ...Array.isArray(parsed.mcpToolResults) ? parsed.mcpToolResults.map(asRecord) : [],
+      ...liveOutputLogger.mcpToolResults().map(asRecord)
+    ]);
     const outputTelemetry = liveOutputLogger.snapshot({
       outputBytes: execution.outputBytes,
       floodLimitBytes: Math.max(1, readNumber(executionConfig.maxOutputBytes, config.executorMaxOutputBytes)),
       outputTokens: readNumber(parsed.usage?.outputTokens, 0)
     });
     const completionOutputStopped = executorKind === "pi" && piCompletionOutputStopped(parsed, execution);
-    const cleanupDisposition = executorKind === "pi" && execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(parsed, []) : null;
+    const cleanupDisposition = executorKind === "pi" && execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition({ ...parsed, mcpToolResults }, []) : null;
     const parsedForValidation = cleanupDisposition ? { ...parsed, errorMessage: null } : parsed;
     const piInvalidOutputError = executorKind === "pi" ? piOutputValidationError(parsedForValidation, {
       allowMissingTurnEnd: completionOutputStopped || Boolean(cleanupDisposition),
       allowMissingAssistantOutput: false
     }) : null;
-    const parsedError = hasOutputFlood ? "Run-exit closure output exceeded the configured limit" : hasMemoryLimit ? "Run-exit closure exceeded the configured memory limit" : execution.timedOut ? "Run-exit closure timed out" : execution.spawnError ?? piInvalidOutputError ?? parsedForValidation.errorMessage ?? ((execution.exitCode ?? 0) === 0 ? null : `Run-exit closure exited with code ${execution.exitCode ?? "unknown"}`);
+    const parsedError = hasOutputFlood ? "Run-exit closure output exceeded the configured limit" : hasMemoryLimit ? "Run-exit closure exceeded the configured memory limit" : execution.timedOut ? "Run-exit closure timed out" : execution.spawnError ?? piInvalidOutputError ?? parsedForValidation.errorMessage ?? ((execution.exitCode ?? 0) === 0 || cleanupDisposition ? null : `Run-exit closure exited with code ${execution.exitCode ?? "unknown"}`);
     const succeeded = execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && (execution.exitCode === 0 || completionOutputStopped || Boolean(cleanupDisposition)) && !execution.timedOut && !execution.spawnError && !parsedError;
-    const mcpToolResults = dedupeGovernedMcpToolResults([
-      ...Array.isArray(parsed.mcpToolResults) ? parsed.mcpToolResults.map(asRecord) : [],
-      ...liveOutputLogger.mcpToolResults().map(asRecord)
-    ]);
     await ingestLog(config, command, "system", succeeded ? "info" : "error", succeeded ? "Run-exit disposition closure turn completed" : `Run-exit disposition closure turn failed: ${parsedError}`, {
       presentationKind: "run_exit_disposition_closure",
       closureAttempt: 1,
@@ -11033,6 +11319,7 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
         timedOut: execution.timedOut,
         summary: truncateText(readString(parsed.summary) ?? "", 2e3),
         outputTelemetry,
+        cleanupDisposition,
         toolResults: mcpToolResults.slice(0, 10).map((result3) => ({
           status: readString(result3.status),
           toolName: readString(result3.toolName) ?? readString(result3.name) ?? readString(asRecord(result3.runtimeAction).toolName),
@@ -11955,7 +12242,7 @@ async function materializeIssueAttachments(config, command, workspace) {
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
     writeFileSync9(targetPath, body);
     const attachmentId = readString(attachment.id);
-    const actualSha256 = createHash10("sha256").update(body).digest("hex");
+    const actualSha256 = createHash11("sha256").update(body).digest("hex");
     const lineageCandidates = lineageCandidatesByAttachmentId.get(attachmentId) ?? [];
     const lineage = selectAttachmentLineage(lineageCandidates, actualSha256);
     if (lineageCandidates.length > 0 && !lineage) {
@@ -12047,7 +12334,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       throw new Error(`artifact_input_manifest_invalid: entry ${index} contentPath does not match attachmentId`);
     }
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
-    const actualSha256 = createHash10("sha256").update(body).digest("hex");
+    const actualSha256 = createHash11("sha256").update(body).digest("hex");
     if (body.byteLength !== byteSize || actualSha256 !== sha256) {
       throw new Error(
         `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha256} actualSha256=${actualSha256}`
@@ -12117,7 +12404,7 @@ function safeCheckpointRelativePath(rawPath) {
   return normalized;
 }
 function hashFileSha256(filePath) {
-  return createHash10("sha256").update(readFileSync11(filePath)).digest("hex");
+  return createHash11("sha256").update(readFileSync11(filePath)).digest("hex");
 }
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);
@@ -12330,6 +12617,7 @@ async function executeRunCommand(config, command) {
   };
   let completionOwnsManagedMcpProfile = false;
   const sourceAcquisition = sourceAcquisitionRuntimeProfile(config, command);
+  const sourceProfile = serializeSourceAcquisitionProfile(sourceAcquisition?.profile ?? null);
   const trustedPiRuntimeAssertion = commandTrustedPiRuntimeAssertion(command);
   assertSourceAcquisitionRuntimeAuthority({
     profile: sourceAcquisition,
@@ -12457,6 +12745,13 @@ async function executeRunCommand(config, command) {
         inheritedEntries: trustedPiRuntimeProfile.facts.inheritedEntries
       });
     }
+    if (sourceProfile) {
+      executorEnv = {
+        ...executorEnv,
+        AMASTER_SOURCE_ACQUISITION_PROFILE_FD: "4",
+        AMASTER_SOURCE_ACQUISITION_PROFILE_SHA256: sourceProfile.sha256
+      };
+    }
     if (executor.kind === "pi" && piResolvedProviderConfig) {
       const agentDir = managedMcpProfile ? readString(managedMcpProfile.env.PI_CODING_AGENT_DIR) ?? readString(managedMcpProfile.env.PI_AGENT_HOME) ?? null : piAgentLocalPlatformRunnerEnabled(config) ? readString(executorEnv.PI_AGENT_HOME) ?? readString(executorEnv.PI_CODING_AGENT_DIR) ?? null : readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
       try {
@@ -12591,6 +12886,7 @@ async function executeRunCommand(config, command) {
           managedInput: `${JSON.stringify(trustedPiRuntimeAssertion)}
 `
         } : {},
+        ...sourceProfile ? { sourceProfileInput: sourceProfile.input } : {},
         onOutput: (stream, chunk, rawBytes) => {
           noteActiveRunOutput(command, stream, chunk, rawBytes);
           liveOutputLogger.write(stream, chunk);
@@ -12759,7 +13055,10 @@ async function executeRunCommand(config, command) {
     const memoryLimitError = hasMemoryLimit ? `${executor.kind === "pi" ? "Pi Agent" : "Executor"} memory limit exceeded: RSS ${readNumber(memoryLimit.rssBytes, 0)} bytes exceeded ${readNumber(memoryLimit.limitBytes, config.executorMaxRssMb * 1024 * 1024)} bytes` : null;
     const piUsageDiagnostic = executor.kind === "pi" && !hasOutputFlood && piOutputUsageMetadataMissing(parsed) ? "Pi Agent exited without usage metadata" : null;
     const completionOutputStopped = executor.kind === "pi" && piCompletionOutputStopped(parsed, execution);
-    const cleanupDisposition = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(parsed, runtimeArtifacts) : null;
+    const cleanupDisposition = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && execution.signal === null ? classifyPiTerminalCleanupDisposition(
+      { ...parsed, mcpToolResults },
+      runtimeArtifacts
+    ) : null;
     if (cleanupDisposition) {
       await ingestLog(
         config,
@@ -12933,7 +13232,8 @@ async function executeRunCommand(config, command) {
             maxRssMb: config.executorMaxRssMb,
             ...piChildIsolation ? { spawnIdentity: piChildIsolation.spawn } : {},
             ...trustedPiRuntime ? { managedInput: `${JSON.stringify(trustedPiRuntimeAssertion)}
-` } : {}
+` } : {},
+            ...sourceProfile ? { sourceProfileInput: sourceProfile.input } : {}
           }
         },
         completionRequest: {

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.0";
+const CONNECTOR_VERSION = "0.1.1-beta.2";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.0",
+  "version": "0.1.1-beta.2",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",