@amaster.ai/employee-runtime-connector 0.1.1-beta.120 → 0.1.1-beta.121

package/dist/amaster-runtime-daemon.mjs

@@ -17358,14 +17358,16 @@ function reconcileManagedCodexMcpProfiles(rootPath, options = {}) {
 }
 
 // src/amaster-runtime-daemon/pi-managed-mcp-profile.mjs
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 import {
   chmodSync as chmodSync4,
   chownSync as chownSync2,
+  closeSync,
   copyFileSync,
   existsSync as existsSync4,
   lstatSync as lstatSync3,
   mkdirSync as mkdirSync3,
+  openSync,
   readFileSync as readFileSync5,
   realpathSync as realpathSync3,
   readdirSync as readdirSync3,
@@ -18732,6 +18734,97 @@ export default function amasterRoleSkillsVisibility(pi) {
 `;
 }
 
+// src/amaster-runtime-daemon/source-acquisition-invocation.mjs
+import { createHash as createHash4 } from "node:crypto";
+var SOURCE_ACQUISITION_PUBLIC_TOOLS2 = Object.freeze([
+  "source_open",
+  "source_snapshot",
+  "source_screenshot",
+  "source_analyze_screenshot",
+  "source_wait",
+  "runtime_action.submit",
+  "runtime_action.status"
+]);
+var SOURCE_ACQUISITION_AUTHENTICATED_TOOLS2 = SOURCE_ACQUISITION_PUBLIC_TOOLS2;
+var SOURCE_ACQUISITION_PI_EFFECTIVE_TOOLS = Object.freeze([
+  "source_open",
+  "source_snapshot",
+  "source_screenshot",
+  "source_analyze_screenshot",
+  "source_wait",
+  "runtime_action_submit",
+  "runtime_action_status"
+]);
+function exactToolsFor(profile) {
+  if (profile?.access?.mode === "public") return SOURCE_ACQUISITION_PUBLIC_TOOLS2;
+  if (profile?.access?.mode === "authenticated") return SOURCE_ACQUISITION_AUTHENTICATED_TOOLS2;
+  throw new Error("source_acquisition_invocation_invalid");
+}
+function sourceAcquisitionPiInvocationArgs(profile) {
+  const expected = exactToolsFor(profile);
+  const actual = profile?.tools?.exactAllowlist;
+  if (!Array.isArray(actual) || actual.length !== expected.length || actual.some((tool, index) => tool !== expected[index])) {
+    throw new Error("source_acquisition_tool_allowlist_invalid");
+  }
+  return [
+    "--tools",
+    SOURCE_ACQUISITION_PI_EFFECTIVE_TOOLS.join(","),
+    "--no-builtin-tools",
+    "--no-skills",
+    "--no-context-files",
+    "--no-prompt-templates",
+    "--no-session"
+  ];
+}
+function serializeSourceAcquisitionProfile(profile) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile)) return null;
+  const canonicalize = (value) => {
+    if (value === null || typeof value === "boolean" || typeof value === "string") {
+      return JSON.stringify(value);
+    }
+    if (typeof value === "number" && Number.isFinite(value)) return JSON.stringify(value);
+    if (Array.isArray(value)) return `[${value.map(canonicalize).join(",")}]`;
+    if (value && typeof value === "object") {
+      return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalize(value[key])}`).join(",")}}`;
+    }
+    throw new Error("source_acquisition_profile_canonicalization_failed");
+  };
+  const input = Buffer.from(canonicalize(profile), "utf8");
+  return {
+    input,
+    sha256: createHash4("sha256").update(input).digest("hex")
+  };
+}
+function sourceAcquisitionManagedInputs(options) {
+  return [
+    options.sourceProfileInput ? { fd: 4, input: options.sourceProfileInput, code: "source_acquisition_profile" } : null
+  ].filter(Boolean);
+}
+function sourceAcquisitionManagedStdio(inputs) {
+  const stdio = ["pipe", "pipe", "pipe"];
+  for (const { fd } of inputs) {
+    while (stdio.length <= fd) stdio.push("ignore");
+    stdio[fd] = "pipe";
+  }
+  return stdio;
+}
+function deliverSourceAcquisitionManagedInputs(child, inputs, onError) {
+  for (const { fd, input, code } of inputs) {
+    child.stdio[fd].once("error", (error) => onError(code, error));
+    child.stdio[fd].end(input);
+  }
+}
+function assertSourceAcquisitionRuntimeAuthority({
+  profile,
+  executorKind,
+  governedMcp
+}) {
+  if (!profile) return;
+  if (executorKind !== "pi" || !governedMcp || typeof governedMcp !== "object" || Object.keys(governedMcp).length === 0) {
+    throw new Error("source_acquisition_governed_profile_required");
+  }
+}
+
 // src/amaster-runtime-daemon/pi-managed-mcp-profile.mjs
 var MANAGED_PI_MCP_TOOL_MODE = "proxy_only";
 var MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE = "direct_typed";
@@ -19011,7 +19104,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     nonEmpty2(session.invocationId, "nativeSession.invocationId");
     const sourceWorkspacePath = nonEmpty2(session.cwd, "nativeSession.cwd");
     const issueRoot = dirname4(runDir);
-    const managedSourceRunDirName = `${sourceRunId}-${createHash4("sha256").update(sourceRunId).digest("hex").slice(0, 8)}`;
+    const managedSourceRunDirName = `${sourceRunId}-${createHash5("sha256").update(sourceRunId).digest("hex").slice(0, 8)}`;
     const sourceRunDirs = readdirSync3(issueRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.isSymbolicLink() && (entry.name === sourceRunId || entry.name === managedSourceRunDirName)).map((entry) => join5(issueRoot, entry.name));
     if (sourceRunDirs.length !== 1) {
       throw new Error(`pi_managed_mcp_session_rollout_missing: expected one source run directory for ${sourceRunId}, received ${sourceRunDirs.length}`);
@@ -19057,12 +19150,12 @@ function createManagedPiMcpProfileApi(options = {}) {
     return value;
   }
   function sha2563(value) {
-    return createHash4("sha256").update(value).digest("hex");
+    return createHash5("sha256").update(value).digest("hex");
   }
   function trustedTreeDigest(rootPath, options2 = {}) {
     const root = resolve3(rootPath);
     const ignoredRootEntries = new Set(Array.isArray(options2.ignoredRootEntries) ? options2.ignoredRootEntries : []);
-    const hash = createHash4("sha256");
+    const hash = createHash5("sha256");
     hash.update(`ignored-root:${[...ignoredRootEntries].sort().join(",")}
 `);
     const pending = [root];
@@ -19394,8 +19487,8 @@ function createManagedPiMcpProfileApi(options = {}) {
       if (!executableStat.isFile() || executableStat.isSymbolicLink()) {
         throw Object.assign(new Error("Pi executable is not a regular file"), { code: "EUNSAFE" });
       }
-      const contentSha256 = createHash4("sha256").update(readFileSync5(realPath)).digest("hex");
-      return `sha256:${createHash4("sha256").update(JSON.stringify({ realPath, contentSha256 })).digest("hex")}`;
+      const contentSha256 = createHash5("sha256").update(readFileSync5(realPath)).digest("hex");
+      return `sha256:${createHash5("sha256").update(JSON.stringify({ realPath, contentSha256 })).digest("hex")}`;
     } catch (error) {
       const errorCode = typeof error?.code === "string" ? error.code : "UNKNOWN";
       throw new Error(`pi_managed_mcp_attestation_failed: --version error=${errorCode}`);
@@ -19738,7 +19831,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (skillProfiles.length === 0) return {};
     return {
       skillProfiles,
-      enabledSkillsDigest: createHash4("sha256").update(JSON.stringify(enabledSkills)).digest("hex"),
+      enabledSkillsDigest: createHash5("sha256").update(JSON.stringify(enabledSkills)).digest("hex"),
       enabledSkillMetadataBytes,
       enabledSkillMetadataSha256
     };
@@ -19902,30 +19995,37 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       completedAttempts = attempt;
       writeEffectiveToolsProbePhase(input.phasePath, "spawned", attempt);
       const resolvedExecutorCommand = resolveExecutorCommand(executorCommand, env) ?? executorCommand;
-      result3 = spawnSyncImpl(resolvedExecutorCommand, [
-        "--no-session",
-        "--no-approve",
-        "--no-skills",
-        "--no-context-files",
-        // The enforcement extensions live in the run profile, not an agent dir,
-        // so the probe must load them explicitly to measure the real run surface.
-        ...Array.isArray(input.extensionArgs) ? input.extensionArgs : [],
-        "--print",
-        "probe effective tools"
-      ], {
-        cwd: env.AMASTER_RUNTIME_EXECUTION_WORKDIR,
-        env: {
-          ...env,
-          AMASTER_PI_EFFECTIVE_TOOLS_MODE: "probe",
-          AMASTER_PI_EFFECTIVE_TOOLS_ATTEMPT: String(attempt)
-        },
-        encoding: "utf8",
-        timeout,
-        killSignal: "SIGKILL",
-        maxBuffer: 1024 * 1024,
-        ...isWindowsCommandShim(resolvedExecutorCommand) ? { shell: true } : {},
-        ...spawnIdentity ?? {}
-      });
+      let sourceProfileFd = null;
+      try {
+        sourceProfileFd = input.sourceProfilePath ? openSync(input.sourceProfilePath, "r") : null;
+        result3 = spawnSyncImpl(resolvedExecutorCommand, [
+          "--no-session",
+          "--no-approve",
+          "--no-skills",
+          "--no-context-files",
+          // The enforcement extensions live in the run profile, not an agent dir,
+          // so the probe must load them explicitly to measure the real run surface.
+          ...Array.isArray(input.extensionArgs) ? input.extensionArgs : [],
+          "--print",
+          "probe effective tools"
+        ], {
+          cwd: env.AMASTER_RUNTIME_EXECUTION_WORKDIR,
+          env: {
+            ...env,
+            AMASTER_PI_EFFECTIVE_TOOLS_MODE: "probe",
+            AMASTER_PI_EFFECTIVE_TOOLS_ATTEMPT: String(attempt)
+          },
+          ...sourceProfileFd === null ? {} : { stdio: ["ignore", "pipe", "pipe", "ignore", sourceProfileFd] },
+          encoding: "utf8",
+          timeout,
+          killSignal: "SIGKILL",
+          maxBuffer: 1024 * 1024,
+          ...isWindowsCommandShim(resolvedExecutorCommand) ? { shell: true } : {},
+          ...spawnIdentity ?? {}
+        });
+      } finally {
+        if (sourceProfileFd !== null) closeSync(sourceProfileFd);
+      }
       if (result3.error?.code === "ETIMEDOUT" && attempt < attempts.length) continue;
       break;
     }
@@ -20121,6 +20221,11 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       if (sourceExecutionReceiptPath) {
         createSourceAcquisitionExecutionReceipt(sourceExecutionReceiptPath, sourceExecutionIdentity);
       }
+      const serializedSourceProfile = input.sourceAcquisition ? serializeSourceAcquisitionProfile(input.sourceAcquisition.profile) : null;
+      const sourceAttestationProfilePath = serializedSourceProfile && directCatalog ? join5(tmp, "source-acquisition-attestation-profile.json") : null;
+      if (sourceAttestationProfilePath) {
+        writePrivateFile2(sourceAttestationProfilePath, serializedSourceProfile.input);
+      }
       const adapterVersion = piMcpAdapterVersion(sharedRuntime.home);
       if (directCatalog) {
         writeProfileExtension(
@@ -20249,7 +20354,8 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
           extensionArgs: [...extensionArgs],
           finalActiveToolNames: effectiveRunToolAllowlist,
           profileToolAllowlist: null,
-          closureProfile
+          closureProfile,
+          ...sourceAttestationProfilePath ? { sourceProfilePath: sourceAttestationProfilePath } : {}
         };
       }
       let enabledRoleSkills = null;
@@ -20287,6 +20393,10 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         ...sourceExecutionReceiptPath ? {
           AMASTER_SOURCE_ACQUISITION_EXECUTION_RECEIPT: sourceExecutionReceiptPath
         } : {},
+        ...serializedSourceProfile ? {
+          AMASTER_SOURCE_ACQUISITION_PROFILE_FD: "4",
+          AMASTER_SOURCE_ACQUISITION_PROFILE_SHA256: serializedSourceProfile.sha256
+        } : {},
         ...input.sourceAcquisition ? sourceAcquisitionBrowserEnvironment(input.sourceAcquisition, input.baseEnv) : {}
       };
       if (directAttestationInput) {
@@ -20313,6 +20423,9 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         spawnIdentity,
         effectiveToolsBootstrapCache?.key ?? null
       ) : {};
+      if (directAttestationInput?.sourceProfilePath) {
+        rmSync3(directAttestationInput.sourceProfilePath, { force: true });
+      }
       const effectiveToolProbeBootstrapCache = effectiveToolsBootstrapCache ? publishEffectiveToolsBootstrapCache(effectiveToolsBootstrapCache) : null;
       const runExitClosureOwnership = directAttestationInput ? {
         cache: ownershipStatSyncImpl(directAttestationInput.cachePath),
@@ -20399,7 +20512,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         ])],
         attestation: {
           ...attestationFacts,
-          attestationId: createHash4("sha256").update(JSON.stringify(attestationFacts)).digest("hex"),
+          attestationId: createHash5("sha256").update(JSON.stringify(attestationFacts)).digest("hex"),
           attestedAt: (/* @__PURE__ */ new Date()).toISOString()
         }
       };
@@ -20677,7 +20790,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         protectedValues: [.../* @__PURE__ */ new Set([sessionToken, ...seededRuntime.protectedValues])],
         attestation: {
           ...attestationFacts,
-          attestationId: createHash4("sha256").update(JSON.stringify(attestationFacts)).digest("hex"),
+          attestationId: createHash5("sha256").update(JSON.stringify(attestationFacts)).digest("hex"),
           attestedAt: (/* @__PURE__ */ new Date()).toISOString()
         }
       };
@@ -21375,7 +21488,7 @@ function inspectSourceAcquisitionProfile(profile, expectedRunId) {
 import { createHash as createHash7 } from "node:crypto";
 
 // src/amaster-runtime-daemon/current-run-contract.mjs
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 var CONTRACT_VERSION = "mirrorx.current-run-contract.v1";
 var REQUIRED_ACTIONS = [
   "amaster.read_issue_delivery",
@@ -21407,7 +21520,7 @@ function canonicalJson(value) {
 }
 function semanticHash(contract) {
   const { contractHash: _contractHash, compiledAt: _compiledAt, ...semantic } = contract;
-  return `sha256:${createHash5("sha256").update(canonicalJson(semantic)).digest("hex")}`;
+  return `sha256:${createHash6("sha256").update(canonicalJson(semantic)).digest("hex")}`;
 }
 function validateBlockingGaps(value) {
   return Array.isArray(value) && value.length === 0;
@@ -21568,97 +21681,6 @@ function resolveTaskCompanyKnowledgePolicy(context) {
   };
 }
 
-// src/amaster-runtime-daemon/source-acquisition-invocation.mjs
-import { createHash as createHash6 } from "node:crypto";
-var SOURCE_ACQUISITION_PUBLIC_TOOLS2 = Object.freeze([
-  "source_open",
-  "source_snapshot",
-  "source_screenshot",
-  "source_analyze_screenshot",
-  "source_wait",
-  "runtime_action.submit",
-  "runtime_action.status"
-]);
-var SOURCE_ACQUISITION_AUTHENTICATED_TOOLS2 = SOURCE_ACQUISITION_PUBLIC_TOOLS2;
-var SOURCE_ACQUISITION_PI_EFFECTIVE_TOOLS = Object.freeze([
-  "source_open",
-  "source_snapshot",
-  "source_screenshot",
-  "source_analyze_screenshot",
-  "source_wait",
-  "runtime_action_submit",
-  "runtime_action_status"
-]);
-function exactToolsFor(profile) {
-  if (profile?.access?.mode === "public") return SOURCE_ACQUISITION_PUBLIC_TOOLS2;
-  if (profile?.access?.mode === "authenticated") return SOURCE_ACQUISITION_AUTHENTICATED_TOOLS2;
-  throw new Error("source_acquisition_invocation_invalid");
-}
-function sourceAcquisitionPiInvocationArgs(profile) {
-  const expected = exactToolsFor(profile);
-  const actual = profile?.tools?.exactAllowlist;
-  if (!Array.isArray(actual) || actual.length !== expected.length || actual.some((tool, index) => tool !== expected[index])) {
-    throw new Error("source_acquisition_tool_allowlist_invalid");
-  }
-  return [
-    "--tools",
-    SOURCE_ACQUISITION_PI_EFFECTIVE_TOOLS.join(","),
-    "--no-builtin-tools",
-    "--no-skills",
-    "--no-context-files",
-    "--no-prompt-templates",
-    "--no-session"
-  ];
-}
-function serializeSourceAcquisitionProfile(profile) {
-  if (!profile || typeof profile !== "object" || Array.isArray(profile)) return null;
-  const canonicalize = (value) => {
-    if (value === null || typeof value === "boolean" || typeof value === "string") {
-      return JSON.stringify(value);
-    }
-    if (typeof value === "number" && Number.isFinite(value)) return JSON.stringify(value);
-    if (Array.isArray(value)) return `[${value.map(canonicalize).join(",")}]`;
-    if (value && typeof value === "object") {
-      return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalize(value[key])}`).join(",")}}`;
-    }
-    throw new Error("source_acquisition_profile_canonicalization_failed");
-  };
-  const input = Buffer.from(canonicalize(profile), "utf8");
-  return {
-    input,
-    sha256: createHash6("sha256").update(input).digest("hex")
-  };
-}
-function sourceAcquisitionManagedInputs(options) {
-  return [
-    options.sourceProfileInput ? { fd: 4, input: options.sourceProfileInput, code: "source_acquisition_profile" } : null
-  ].filter(Boolean);
-}
-function sourceAcquisitionManagedStdio(inputs) {
-  const stdio = ["pipe", "pipe", "pipe"];
-  for (const { fd } of inputs) {
-    while (stdio.length <= fd) stdio.push("ignore");
-    stdio[fd] = "pipe";
-  }
-  return stdio;
-}
-function deliverSourceAcquisitionManagedInputs(child, inputs, onError) {
-  for (const { fd, input, code } of inputs) {
-    child.stdio[fd].once("error", (error) => onError(code, error));
-    child.stdio[fd].end(input);
-  }
-}
-function assertSourceAcquisitionRuntimeAuthority({
-  profile,
-  executorKind,
-  governedMcp
-}) {
-  if (!profile) return;
-  if (executorKind !== "pi" || !governedMcp || typeof governedMcp !== "object" || Object.keys(governedMcp).length === 0) {
-    throw new Error("source_acquisition_governed_profile_required");
-  }
-}
-
 // src/amaster-runtime-daemon/prompt-compiler.mjs
 var DEADLINE_POSTURE_GUARD = "If a named time window or milestone is missed, skip that window and keep the task moving: never lower quality, bypass approvals, fabricate results, or stop the whole task because of the miss. Record a deadline-posture receipt with targetMilestoneRef, posture, onMiss=skip_this_window_and_continue, taskContinuation, and the next owner/action; the receipt is an execution signal, not Server-side proof.";
 var MIN_PROMPT_BUDGET_CHARS = 8192;
@@ -25672,7 +25694,7 @@ var bestEffortPostJson = bestEffortPostRuntimeConnectorJson;
 
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
 import { createHash as createHash9 } from "node:crypto";
-import { closeSync, constants, fstatSync, lstatSync as lstatSync5, openSync, readFileSync as readFileSync10, realpathSync as realpathSync4 } from "node:fs";
+import { closeSync as closeSync2, constants, fstatSync, lstatSync as lstatSync5, openSync as openSync2, readFileSync as readFileSync10, realpathSync as realpathSync4 } from "node:fs";
 import { isAbsolute as isAbsolute5, relative as relative4, resolve as resolve5 } from "node:path";
 var SHA256_PATTERN3 = /^[a-f0-9]{64}$/;
 function requiredString(value, name) {
@@ -25700,7 +25722,7 @@ function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime w
     throw new Error(`${label} source is not an owned regular file`);
   }
   const noFollow = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
-  const descriptor = openSync(sourcePath, constants.O_RDONLY | noFollow);
+  const descriptor = openSync2(sourcePath, constants.O_RDONLY | noFollow);
   try {
     const before = fstatSync(descriptor);
     if (!before.isFile() || !sameFileSnapshot(pathStat, before)) {
@@ -25733,7 +25755,7 @@ function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime w
     }
     return { body, relativePath, stat: after };
   } finally {
-    closeSync(descriptor);
+    closeSync2(descriptor);
   }
 }
 function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
@@ -28379,7 +28401,7 @@ function createSourceCompletionStopPolicy({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.120";
+var CONNECTOR_VERSION = "0.1.1-beta.121";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY2 = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.120";
+const CONNECTOR_VERSION = "0.1.1-beta.121";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.120",
+  "version": "0.1.1-beta.121",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",