@amaster.ai/employee-runtime-connector 0.1.1-beta.130 → 0.1.1-beta.132

package/README.md

@@ -12,8 +12,7 @@ For production images, install an exact version and invoke the package bin:
 
 ```sh
 npm install --omit=dev --prefix /opt/pi-cli-runtime @amaster.ai/employee-runtime-connector@0.1.0
-/opt/pi-cli-runtime/node_modules/.bin/amaster-runtime setup https://employee.example.com \
-  --capabilities remote_registration,heartbeat,executor_discovery,workspace_binding,run_wakeup,context_envelope_v1,managed_project_instructions_v1,final_model_context_attestation_v1,runtime_actions_v2,run_exit_live_path_closure_v1,model_call,model_call_output_contract_v1,run_cancel,run_terminate,logs_cost_workspace_status
+/opt/pi-cli-runtime/node_modules/.bin/amaster-runtime setup https://employee.example.com
 /opt/pi-cli-runtime/node_modules/.bin/amaster-runtime daemon start --foreground
 ```
 
@@ -21,6 +20,15 @@ Do not use `latest`, `^`, or `~` in a runtime image. The image tag and connector
 
 Immutable images should pin an exact package version as their baseline. The current connector does not download or replace runtime code while running; package upgrades and rollbacks belong to the image build and rollout.
 
+Connector capability declaration is automatic. The exact package build declares
+what it implements, and runtime readiness removes dynamic capabilities when their
+executor or supporting runtime is unavailable. Operators restrict what the Server
+accepts with `AMASTER_RUNTIME_CONNECTOR_CAPABILITY_ALLOWLIST`; users do not need to
+configure a connector-local capability list. Historical `AMASTER_CAPABILITIES` and
+`--capabilities` inputs remain accepted for rollback compatibility in this release,
+but are ignored and reported as deprecated. They cannot add, remove, or authorize a
+capability.
+
 The publish workflow verifies that npm records the publishing commit as the package `gitHead`, then updates the repository deployment pin. Remote deployment accepts that package only when its `gitHead` is an ancestor of the target source commit and the connector runtime build inputs are unchanged between them. Those inputs are the package path plus `packages/shared/src/source-acquisition-compatibility.json`, which is copied into the published package and bundled into the daemon. If another workspace source becomes a runtime build input, expand the provenance scope and tests before release. After restart, deployment also verifies the package CLI version inside the container. Do not update the deployment pin manually to bypass either provenance check.
 
 ## Package Contents

package/dist/amaster-runtime-daemon/capability-registry.mjs

@@ -0,0 +1,66 @@
+export const BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
+  "remote_registration",
+  "heartbeat",
+  "executor_discovery",
+  "workspace_binding",
+  "run_wakeup",
+  "context_envelope_v1",
+  "managed_project_instructions_v1",
+  "final_model_context_attestation_v1",
+  "runtime_actions_v2",
+  "run_exit_live_path_closure_v1",
+  "model_call",
+  "model_call_output_contract_v1",
+  "run_cancel",
+  "run_terminate",
+  "logs_cost_workspace_status",
+  "source_acquisition_v1",
+  "headed_browser_auth",
+]);
+
+const DYNAMIC_READINESS = Object.freeze({
+  final_model_context_attestation_v1: {
+    reasonCode: "managed_pi_executor_required",
+    ready: (input) => input.runnerKind === "cloud_managed"
+      && input.executors.some((executor) => executor.kind === "pi"),
+  },
+  source_acquisition_v1: {
+    reasonCode: "source_acquisition_not_ready",
+    ready: (input) => input.sourceAcquisition?.ready === true,
+  },
+  headed_browser_auth: {
+    reasonCode: "headed_browser_runtime_not_ready",
+    ready: (input) => input.browserSessionBroker?.ready === true,
+  },
+});
+
+function uniqueStrings(values) {
+  return Array.from(new Set((Array.isArray(values) ? values : [])
+    .map((value) => String(value ?? "").trim())
+    .filter(Boolean)));
+}
+
+export function buildRuntimeCapabilityReport(input) {
+  const legacyConfiguredCapabilities = uniqueStrings(input.legacyConfiguredCapabilities);
+  const runtimeUnavailable = [];
+  const advertised = BUILD_SUPPORTED_CAPABILITIES.filter((capability) => {
+    const readiness = DYNAMIC_READINESS[capability];
+    if (!readiness || readiness.ready(input)) return true;
+    runtimeUnavailable.push({ capability, reasonCode: readiness.reasonCode });
+    return false;
+  });
+  const buildSet = new Set(BUILD_SUPPORTED_CAPABILITIES);
+  const legacySet = new Set(legacyConfiguredCapabilities);
+  return {
+    schemaVersion: "mirrorx.connector-capability-report/v1",
+    source: "build_attested",
+    buildSupported: [...BUILD_SUPPORTED_CAPABILITIES],
+    runtimeUnavailable,
+    advertised,
+    deprecatedCapabilityOverridePresent: legacyConfiguredCapabilities.length > 0,
+    legacyMissingFromBuildTruth: legacyConfiguredCapabilities.length > 0
+      ? BUILD_SUPPORTED_CAPABILITIES.filter((capability) => !legacySet.has(capability))
+      : [],
+    legacyUnsupportedClaims: legacyConfiguredCapabilities.filter((capability) => !buildSet.has(capability)),
+  };
+}

package/dist/amaster-runtime-daemon.mjs

@@ -4666,6 +4666,52 @@ var AMASTER_RUNTIME_CONNECTOR_CAPABILITIES = [
   "headed_browser_auth",
   "browser_auth_relay_outbound_e0"
 ];
+var TERMINAL_BUSINESS_RECONCILIATION_VERSION = "mirrorx.terminal-business-reconciliation/v1";
+var terminalBusinessReconciliationAuthoritySnapshotSchema = external_exports.object({
+  outcomeId: external_exports.string().uuid().nullable(),
+  outcomeRevision: external_exports.number().int().positive().nullable(),
+  businessRevision: external_exports.number().int().positive().nullable(),
+  manifestId: external_exports.string().uuid().nullable(),
+  manifestRevision: external_exports.number().int().positive().nullable()
+}).strict();
+var terminalBusinessReconciliationSchema = external_exports.discriminatedUnion("outcome", [
+  external_exports.object({
+    outcome: external_exports.literal("finalized"),
+    issueStatus: external_exports.literal("done"),
+    acceptanceId: external_exports.string().uuid()
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("review_pending"),
+    interactionId: external_exports.string().uuid()
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("live_path_owned"),
+    owner: external_exports.string().trim().min(1),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("recoverable_missing_disposition"),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("blocked_by_gate"),
+    owner: external_exports.string().trim().min(1),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("missing_authority"),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict()
+]);
+var terminalBusinessReconciliationEnvelopeSchema = external_exports.object({
+  schemaVersion: external_exports.literal(TERMINAL_BUSINESS_RECONCILIATION_VERSION),
+  decisionKey: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/),
+  commandId: external_exports.string().uuid(),
+  runId: external_exports.string().uuid(),
+  executionEpoch: external_exports.number().int().positive(),
+  authoritySnapshot: terminalBusinessReconciliationAuthoritySnapshotSchema,
+  decision: terminalBusinessReconciliationSchema
+}).strict();
 var MIRRORX_RUNTIME_CONTEXT_ENVELOPE_VERSION = "mirrorx.context-envelope.v1";
 var mirrorxEffectiveInstructionsSchema = external_exports.object({
   schemaVersion: external_exports.literal("mirrorx.project-instructions.v1"),
@@ -24080,7 +24126,9 @@ function agentInstructionDeliveryAudit(bundle, delivery) {
 import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync10, renameSync as renameSync7, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir2, hostname } from "node:os";
 import { dirname as dirname7, join as join9 } from "node:path";
-var CAPABILITIES = [
+
+// src/amaster-runtime-daemon/capability-registry.mjs
+var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "remote_registration",
   "heartbeat",
   "executor_discovery",
@@ -24096,8 +24144,50 @@ var CAPABILITIES = [
   "run_cancel",
   "run_terminate",
   "logs_cost_workspace_status",
-  "source_acquisition_v1"
-];
+  "source_acquisition_v1",
+  "headed_browser_auth"
+]);
+var DYNAMIC_READINESS = Object.freeze({
+  final_model_context_attestation_v1: {
+    reasonCode: "managed_pi_executor_required",
+    ready: (input) => input.runnerKind === "cloud_managed" && input.executors.some((executor) => executor.kind === "pi")
+  },
+  source_acquisition_v1: {
+    reasonCode: "source_acquisition_not_ready",
+    ready: (input) => input.sourceAcquisition?.ready === true
+  },
+  headed_browser_auth: {
+    reasonCode: "headed_browser_runtime_not_ready",
+    ready: (input) => input.browserSessionBroker?.ready === true
+  }
+});
+function uniqueStrings2(values) {
+  return Array.from(new Set((Array.isArray(values) ? values : []).map((value) => String(value ?? "").trim()).filter(Boolean)));
+}
+function buildRuntimeCapabilityReport(input) {
+  const legacyConfiguredCapabilities = uniqueStrings2(input.legacyConfiguredCapabilities);
+  const runtimeUnavailable = [];
+  const advertised = BUILD_SUPPORTED_CAPABILITIES.filter((capability) => {
+    const readiness = DYNAMIC_READINESS[capability];
+    if (!readiness || readiness.ready(input)) return true;
+    runtimeUnavailable.push({ capability, reasonCode: readiness.reasonCode });
+    return false;
+  });
+  const buildSet = new Set(BUILD_SUPPORTED_CAPABILITIES);
+  const legacySet = new Set(legacyConfiguredCapabilities);
+  return {
+    schemaVersion: "mirrorx.connector-capability-report/v1",
+    source: "build_attested",
+    buildSupported: [...BUILD_SUPPORTED_CAPABILITIES],
+    runtimeUnavailable,
+    advertised,
+    deprecatedCapabilityOverridePresent: legacyConfiguredCapabilities.length > 0,
+    legacyMissingFromBuildTruth: legacyConfiguredCapabilities.length > 0 ? BUILD_SUPPORTED_CAPABILITIES.filter((capability) => !legacySet.has(capability)) : [],
+    legacyUnsupportedClaims: legacyConfiguredCapabilities.filter((capability) => !buildSet.has(capability))
+  };
+}
+
+// src/amaster-runtime-daemon/config-state.mjs
 var RUNNER_KIND_CLOUD_MANAGED = "cloud_managed";
 var RUNNER_KIND_DESKTOP_DELEGATED = "desktop_delegated";
 function readEnum(value, allowed, fallback, label) {
@@ -24279,7 +24369,8 @@ function buildConfig(env = process.env, flags = {}) {
     piExecutorUid,
     piExecutorGid,
     runnerKind,
-    capabilities: splitList(flags.capabilities ?? env.AMASTER_CAPABILITIES ?? CAPABILITIES.join(",")),
+    capabilities: [...BUILD_SUPPORTED_CAPABILITIES],
+    legacyConfiguredCapabilities: splitList(flags.capabilities ?? env.AMASTER_CAPABILITIES ?? ""),
     pollIntervalSeconds: Number(flags.pollIntervalSeconds ?? env.AMASTER_POLL_INTERVAL_SECONDS ?? 10),
     maxConcurrentCommands: Math.min(
       parsePositiveInteger(flags.maxConcurrentCommands ?? env.AMASTER_MAX_CONCURRENT_COMMANDS, 1),
@@ -28670,7 +28761,7 @@ function createSourceCompletionStopPolicy({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.130";
+var CONNECTOR_VERSION = "0.1.1-beta.132";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY2 = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);
@@ -29333,12 +29424,19 @@ function browserSessionRuntimeStatus(config) {
   return broker ? { ...readiness, ...broker.status() } : readiness;
 }
 function runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker) {
-  return config.capabilities.filter((capability) => (capability !== "headed_browser_auth" || browserSessionBroker.ready === true) && (capability !== SOURCE_ACQUISITION_CAPABILITY2 || sourceAcquisition.ready === true) && (capability !== "final_model_context_attestation_v1" || config.runnerKind === RUNNER_KIND_CLOUD_MANAGED && config.executors.some((executor) => executor.kind === "pi")));
+  return buildRuntimeCapabilityReport({
+    legacyConfiguredCapabilities: config.legacyConfiguredCapabilities,
+    sourceAcquisition,
+    browserSessionBroker,
+    runnerKind: config.runnerKind,
+    executors: config.executors
+  });
 }
 function buildRegisterPayload(config) {
   const buildCommit = readString(process.env.AMASTER_RUNTIME_BUILD_COMMIT ?? process.env.AMASTER_SOURCE_COMMIT);
   const sourceAcquisition = sourceAcquisitionRuntimeReadiness(config);
   const browserSessionBroker = browserSessionRuntimeReadiness(config);
+  const capabilityReport = runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker);
   return {
     ...config.companyId ? { companyId: config.companyId } : {},
     connectorName: config.connectorName,
@@ -29346,7 +29444,7 @@ function buildRegisterPayload(config) {
     workspaceBindings: config.workspaceBindings,
     networkDomains: config.networkDomains,
     executors: config.executors,
-    capabilities: runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker),
+    capabilities: capabilityReport.advertised,
     contractVersion: CONNECTOR_CONTRACT_VERSION,
     connectorVersion: CONNECTOR_VERSION,
     ...buildCommit ? { buildCommit } : {},
@@ -29359,7 +29457,12 @@ function buildRegisterPayload(config) {
       authMode: config.token ? "bearer_token" : config.authHeader ? "custom_header" : "none",
       platform: process.platform,
       arch: process.arch,
-      node: process.version
+      node: process.version,
+      capabilityReport: {
+        ...capabilityReport,
+        connectorVersion: CONNECTOR_VERSION,
+        ...buildCommit ? { connectorDigest: `build:${buildCommit}` } : {}
+      }
     }
   };
 }
@@ -29393,6 +29496,7 @@ function buildHeartbeatPayload(config, options = {}) {
   const executorReadiness = buildExecutorReadiness(config);
   const sourceAcquisition = sourceAcquisitionRuntimeReadiness(config);
   const browserSessionBroker = browserSessionRuntimeStatus(config);
+  const capabilityReport = runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker);
   const status = options.status === "offline" ? "offline" : "online";
   const daemonStatus = status === "offline" ? "stopping" : "running";
   return {
@@ -29400,7 +29504,7 @@ function buildHeartbeatPayload(config, options = {}) {
     workspaceBindings: config.workspaceBindings,
     networkDomains: config.networkDomains,
     executors: config.executors,
-    capabilities: runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker),
+    capabilities: capabilityReport.advertised,
     connectorVersion: CONNECTOR_VERSION,
     ...buildCommit ? { buildCommit } : {},
     contractVersion: CONNECTOR_CONTRACT_VERSION,
@@ -29426,7 +29530,12 @@ function buildHeartbeatPayload(config, options = {}) {
       ...versionDrift.versionDrift || versionDrift.bundleDrift ? versionDrift : {}
     },
     metadata: {
-      authMode: config.token ? "bearer_token" : config.authHeader ? "custom_header" : "none"
+      authMode: config.token ? "bearer_token" : config.authHeader ? "custom_header" : "none",
+      capabilityReport: {
+        ...capabilityReport,
+        connectorVersion: CONNECTOR_VERSION,
+        ...buildCommit ? { connectorDigest: `build:${buildCommit}` } : {}
+      }
     }
   };
 }
@@ -29593,7 +29702,6 @@ AMASTER_CONNECTOR_NAME=${quoteShell(config.connectorName)}
 AMASTER_MACHINE_ID=${quoteShell(config.machineId)}
 AMASTER_WORKSPACE_ALLOWLIST=${quoteShell(config.workspaceBindings.join(","))}
 AMASTER_EXECUTORS=${quoteShell(executorEnv)}
-AMASTER_CAPABILITIES=${quoteShell(config.capabilities.join(","))}
 AMASTER_NETWORK_DOMAINS=${quoteShell(config.networkDomains.join(","))}
 AMASTER_DAEMON_STATE_FILE=${quoteShell(join16(homedir3(), ".amaster-employee", "runtime-connector-state.json"))}
 EOF
@@ -34508,6 +34616,7 @@ async function executeRunCommand(config, command) {
       parsed.errorMessage = null;
     }
     if (succeeded && managedMcpProfile && Array.isArray(command.requiredCapabilities) && command.requiredCapabilities.includes("runtime_actions_v2")) {
+      const usesLivePathClosureContract = command.requiredCapabilities.includes("run_exit_live_path_closure_v1");
       const productiveSuccessfulRun = outputTelemetry.meaningfulProgressEventCount > 0 || runtimeArtifacts.length > 0 || mcpToolResults.some((toolResult) => ["succeeded", "approval_required"].includes(readString(toolResult.status)));
       let completionState = createRunCompletionState({
         connectorId: requireConnectorId(config),
@@ -34540,13 +34649,13 @@ async function executeRunCommand(config, command) {
           }
         },
         completionRequest: {
-          contractVersion: config.capabilities.includes("run_exit_live_path_closure_v1") ? "amaster.runtime-connector.completion-check.v2" : "amaster.runtime-connector.completion-check.v1",
+          contractVersion: usesLivePathClosureContract ? "amaster.runtime-connector.completion-check.v2" : "amaster.runtime-connector.completion-check.v1",
           leaseId: command.leaseId,
           proposedStatus: "succeeded",
           resultSignals: {
             productiveSuccessfulRun,
             executorTurnCount: terminalTextRepairUsageBreakdown ? 2 : 1,
-            ...config.capabilities.includes("run_exit_live_path_closure_v1") ? {
+            ...usesLivePathClosureContract ? {
               closureAttempts: {
                 workDisposition: 0,
                 livePath: 0,
@@ -34893,7 +35002,7 @@ Commands:
 
 Key env:
   AMASTER_EMPLOYEE_SERVER_URL, AMASTER_CONNECTOR_TOKEN or AMASTER_CONNECTOR_AUTH_HEADER,
-  AMASTER_WORKSPACE_ALLOWLIST, AMASTER_EXECUTORS, AMASTER_CAPABILITIES,
+  AMASTER_WORKSPACE_ALLOWLIST, AMASTER_EXECUTORS,
   AMASTER_NETWORK_DOMAINS, AMASTER_CONNECTOR_ID, AMASTER_DAEMON_STATE_FILE,
   AMASTER_MAX_CONCURRENT_COMMANDS, AMASTER_EXECUTOR_MAX_RSS_MB (default 0, disabled),
   AMASTER_RUNTIME_ORPHAN_REAPER_INTERVAL_SECONDS (default 300, set 0 to disable),
@@ -34903,6 +35012,11 @@ Key env:
 async function main() {
   const { command, flags } = parseArgs(process.argv.slice(2));
   const config = buildConfig(process.env, flags);
+  if (config.legacyConfiguredCapabilities.length > 0) {
+    process.stderr.write(
+      "Warning: AMASTER_CAPABILITIES/--capabilities is deprecated and ignored; use the Server capability allowlist for operator restrictions.\n"
+    );
+  }
   switch (command) {
     case "config-template":
       printInstall(config);

package/dist/amaster-runtime.mjs

@@ -5,26 +5,9 @@ import { randomUUID } from "node:crypto";
 import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
+import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.130";
-
-const CAPABILITIES = [
-  "remote_registration",
-  "heartbeat",
-  "executor_discovery",
-  "workspace_binding",
-  "run_wakeup",
-  "context_envelope_v1", "managed_project_instructions_v1",
-  "final_model_context_attestation_v1",
-  "runtime_actions_v2",
-  "run_exit_live_path_closure_v1",
-  "model_call",
-  "model_call_output_contract_v1",
-  "run_cancel",
-  "run_terminate",
-  "logs_cost_workspace_status",
-  "source_acquisition_v1",
-];
+const CONNECTOR_VERSION = "0.1.1-beta.132";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],
@@ -257,7 +240,6 @@ function withDefaults(config) {
     AMASTER_CONNECTOR_NAME: `${hostname()}-amaster`,
     AMASTER_MACHINE_ID: defaultMachineId(),
     AMASTER_WORKSPACE_ALLOWLIST: runtimeWorkspacesRoot,
-    AMASTER_CAPABILITIES: CAPABILITIES.join(","),
     AMASTER_NETWORK_DOMAINS: "self-host",
     AMASTER_DAEMON_STATE_FILE: join(configDir, "runtime-connector-state.json"),
     AMASTER_RUNTIME_WORKSPACES_ROOT: runtimeWorkspacesRoot,
@@ -463,7 +445,8 @@ function printConfig(config) {
     ["runner_kind", merged.AMASTER_RUNTIME_RUNNER_KIND || "cloud_managed"],
     ["heartbeat_log_mode", merged.AMASTER_HEARTBEAT_LOG_MODE || "(compact)"],
     ["network_domains", merged.AMASTER_NETWORK_DOMAINS],
-    ["capabilities", merged.AMASTER_CAPABILITIES],
+    ["capability_source", `connector build (${BUILD_SUPPORTED_CAPABILITIES.length}) + runtime readiness`],
+    ["legacy_capabilities", merged.AMASTER_CAPABILITIES ? "(deprecated; ignored)" : "(none)"],
     ["state_file", merged.AMASTER_DAEMON_STATE_FILE],
     ["env_file", envFile],
   ];
@@ -498,7 +481,12 @@ function commandSetup(argv) {
   config.AMASTER_MACHINE_ID = flags.machine_id || defaultConfig.AMASTER_MACHINE_ID;
   config.AMASTER_RUNTIME_WORKSPACES_ROOT = flags.runtime_workspaces_root || defaultConfig.AMASTER_RUNTIME_WORKSPACES_ROOT;
   config.AMASTER_WORKSPACE_ALLOWLIST = flags.workspace_allowlist || flags.workspace || defaultConfig.AMASTER_WORKSPACE_ALLOWLIST;
-  config.AMASTER_CAPABILITIES = flags.capabilities || defaultConfig.AMASTER_CAPABILITIES;
+  if (flags.capabilities) {
+    config.AMASTER_CAPABILITIES = flags.capabilities;
+    process.stderr.write(
+      "Warning: --capabilities is deprecated and ignored; restrict accepted capabilities with the Server allowlist.\n",
+    );
+  }
   config.AMASTER_NETWORK_DOMAINS = flags.network_domains || defaultConfig.AMASTER_NETWORK_DOMAINS;
   config.AMASTER_DAEMON_STATE_FILE = flags.state_file || defaultConfig.AMASTER_DAEMON_STATE_FILE;
   if (flags.executors) config.AMASTER_EXECUTORS = flags.executors;
@@ -528,6 +516,11 @@ function commandConfig(argv) {
   const envKey = envKeyFor(key);
   const value = valueParts.join(" ").trim();
   config[envKey] = envKey === "AMASTER_EMPLOYEE_SERVER_URL" ? normalizeServerUrl(value) : value;
+  if (envKey === "AMASTER_CAPABILITIES") {
+    process.stderr.write(
+      "Warning: connector-local capabilities are deprecated and ignored; restrict accepted capabilities with the Server allowlist.\n",
+    );
+  }
   writeConfig(config);
   process.stdout.write(`${normalizeKey(key)} updated\n`);
 }

package/dist/templates/.mirrorx-preset-templates.json

@@ -3,78 +3,78 @@
   "files": [
     {
       "name": "企业战略规划模板V0.1 副本.md",
-      "bytes": 18105,
-      "sha256": "8ac447cd94a16d6b400b9e0e0129abe7b96f68598a74c838ce13caaa2899b5e4"
+      "bytes": 19657,
+      "sha256": "fe288555abb00c3b0cf9410d3f34deec082655afbfe8d915e9ebe7246c1ff504"
     },
     {
       "name": "低空经济行业战略规划模板.md",
-      "bytes": 22446,
-      "sha256": "34d92fa06125ec8b89a0f2d822dd5ee46b973b5af3f975ca4fb85f8bfa29cf72"
+      "bytes": 23980,
+      "sha256": "27ed70d7cd7dd5a4b131e5e2c2aec089df38b13076942fe0d6ea2a684feb1344"
     },
     {
       "name": "元宇宙与数字内容行业战略规划模板.md",
-      "bytes": 17933,
-      "sha256": "972ebdf0905bf39d25d5fdea83710697f12e0420bb290b860959e0d24bed72c6"
+      "bytes": 19417,
+      "sha256": "658634f7f422a965812690ae2d11343be92a5f4cbac38632261452a14a4fd260"
     },
     {
       "name": "农业与食品深加工行业战略规划模板.md",
-      "bytes": 22443,
-      "sha256": "eabb6ce6547eeea4a8ebb731b5b75d4b446ad29426ce606a41587f7ad2e2cefd"
+      "bytes": 23970,
+      "sha256": "1f03400e4380e7b1d98b40bdeec59fae73af59bc4500b9488341708692035dad"
     },
     {
       "name": "医疗健康与生命科学行业战略规划模板.md",
-      "bytes": 22289,
-      "sha256": "4cb22a46407f99800f0c5a90fcc5706b9d08f747f9f7647b793a372dcdfcf538"
+      "bytes": 23822,
+      "sha256": "a239128a4dd217c5d8cd01102a202dd2039835b74b2a2ef730a912b6adfbdd5c"
     },
     {
       "name": "合成生物学行业战略规划模板.md",
-      "bytes": 17722,
-      "sha256": "ba1a6a4569917ab6df512fe48d0605f3931840c08a3323dd75ce28806092cd64"
+      "bytes": 19206,
+      "sha256": "2c06b7a7d61e6591e9fb90be2e5444422c5d0f460a42f600de4250b3239b79cd"
     },
     {
       "name": "商业航天行业战略规划模板.md",
-      "bytes": 25210,
-      "sha256": "ed5003a2dcce45a67fc54a5d5a1fbc5c0bea3ac7ff440e40264f0b2db1095e1f"
+      "bytes": 26694,
+      "sha256": "8d6289c464d7f83473a62117f620332780e41114a2ae62ac6474dc5ccb45db2b"
     },
     {
       "name": "建筑与房地产行业战略规划模板.md",
-      "bytes": 22161,
-      "sha256": "0aaa7922dfb5bcbe7e5b8392ae59e668c425b26e2bb04305f23eb13eab4d79fb"
+      "bytes": 23677,
+      "sha256": "faa9e80c0a3f5e20b5fa33f4c5b2d8196d34528074b3ef2b35631dc697cfd96c"
     },
     {
       "name": "文旅与文体教育行业战略规划模板.md",
-      "bytes": 22150,
-      "sha256": "28e00150570562ff90205e4617009c4f23c268d4da821708d0c5fbdce521d59b"
+      "bytes": 23681,
+      "sha256": "15332066fb2f48bc521a0a244dc8a541c5888f9475c4d2877c94627ddd454a1b"
     },
     {
       "name": "消费与零售行业战略规划模板.md",
-      "bytes": 20733,
-      "sha256": "f8371d140448851f39959481e9e5eb666963921ef270d3f238a7d4630980495e"
+      "bytes": 22282,
+      "sha256": "cc47581d7cc76c6ed6afbe9b5c45df2a2e2d4d13b98857f0dd902217ca7c9ad1"
     },
     {
       "name": "物流与供应链行业战略规划模板.md",
-      "bytes": 22115,
-      "sha256": "772cdbaf93318e7f0c42a97c3ba47d6f0810e49b085a19d24bb6ac27f65348c3"
+      "bytes": 23624,
+      "sha256": "1497043d2c8204c13c26e55149fdd6fe6fe94832e9f0e4706baa8aec81137326"
     },
     {
       "name": "科技与互联网行业战略规划模板.md",
-      "bytes": 18118,
-      "sha256": "b26d36e45360017a266ecb81bf50726b1c17ac00797adbc99305dafb799759d8"
+      "bytes": 19709,
+      "sha256": "0d2ef39367e5a4e95c908ca38447db3cb1747374b6a3175719d5d9a1b816b48f"
     },
     {
       "name": "能源与环保行业战略规划模板.md",
-      "bytes": 21641,
-      "sha256": "77b9182c3dbc0d33e2e21dee9ca6e053281b225c116bf144fa2b1964d6725c1b"
+      "bytes": 23184,
+      "sha256": "cf5bbaf542f42fc5c2ee387413fa9068d5f2be6cdc330718b0760be9bac911d9"
     },
     {
       "name": "金融与专业服务行业战略规划模板.md",
-      "bytes": 20963,
-      "sha256": "46c7b7e7b82145384d9a4051299b6c4c146bf84763864a39783a193bfdc51e6c"
+      "bytes": 22528,
+      "sha256": "7f2f90f5de809bcf8743a848b06c77edec28365dd315488776273478ca72662b"
     },
     {
       "name": "高端与先进制造业战略规划模板.md",
-      "bytes": 20629,
-      "sha256": "52cd770ac15fae04a4653b53f5e85b3f46aff6fb635f58682e297e67d6c32047"
+      "bytes": 22181,
+      "sha256": "7adc0b8ebb90cb65b2ac6a5188928b50fb4f51c8f5d776e7250910567e548aeb"
     }
   ]
 }

package/dist/templates//344/274/201/344/270/232/346/210/230/347/225/245/350/247/204/345/210/222/346/250/241/346/235/277V0.1 /345/211/257/346/234/254.md"

@@ -11,19 +11,19 @@
 - **核心特点**：业务与合规深度融合，而非 “两张皮”；所有举措均可拆解为可执行、可考核、可复盘的具体任务；覆盖从战略顶层设计到落地管控的全流程。
 
 <mirrorx_template_guidance>
-  <completion>章节齐全只代表结构对齐；完成稿必须形成可供管理层判断、取舍和执行的实质内容。通用判断、模板复述、只有表格字段而缺少公司证据的内容，不计为实质完成；仅当所有保留章节均达到本元素的相应验收标准，才算完成。</completion>
+  <completion>章节齐全只代表结构对齐；完成稿必须形成可供管理层判断、取舍和执行的实质内容。通用判断、模板复述、只有表格字段而缺少公司证据的内容，不计为实质完成；仅当所有保留章节均达到本元素的相应验收标准，才算完成。按公司规模、业务阶段、监管强度和本次决策裁剪，资本运作、系统建设、组织扩张和专项合规仅在存在实质需求时展开。</completion>
   <continuation>若一次写入无法完成全文，继续在同一文件从下一未完成章节写到全部完成；不得上传中间稿，也不得让后半部分退化为提纲、通用填表或“待建立”事项。</continuation>
-  <analysis>每个核心判断形成“事实与来源 → 分析 → 战略含义 → 决策”闭环；分析章节不得只罗列事实或套用框架，必须明确本章支持的决策。任务数、运行次数和人员数量只能证明内部运行状态，不得直接证明市场需求、商业能力或竞争优势。事实注明来源、口径与时间，缺少可验证证据时转入数据缺口。</analysis>
-  <strategy_choice>说明所选方向、备选方案、选择依据、关键取舍和明确不做事项，并指出选择成立所依赖的假设；备选方案使用一致维度比较预期收益、成本、资源占用、周期、依赖、风险和退出条件。</strategy_choice>
-  <targets>每个核心指标包含指标定义、当前基线、目标值、目标期限、责任主体和数据来源；收入、增长、客户和预算等重大目标写明计算公式与关键假设，并用基准或保守情景校验，不得只凭行业规模或经验客单价反推。基线未知时定义盘点动作与审定节点。</targets>
-  <initiatives>每项重大举措包含核心目标、基线或现状差距、动作包、责任主体、资源与依赖、里程碑、KPI、验收标准、风险与应对；动作包写清连续执行步骤与实际产出，前一动作的产出作为下一动作的输入，并写明继续、调整或停止的触发条件。</initiatives>
-  <implementation_and_risk>重大项目写明前置依赖、资源投入、阶段 Gate 和失败处置；预算与资源配置写明可用总量、优先级和资源不足时的取舍。重大风险使用可观察的触发阈值，并写明预防动作、应急动作和责任主体；复盘机制写明输入数据、决策人、可作出的调整和复盘频率。</implementation_and_risk>
+  <analysis>每个核心判断形成“事实与来源 → 分析 → 战略含义 → 决策”闭环；分析框架只展开有可靠输入且会改变战略判断的部分，每个框架必须产出其支持的决策、取舍或资源调整，否则压缩为简要判断。任务数、运行次数和人员数量只能证明内部运行状态，不得直接证明市场需求、商业能力或竞争优势。事实注明来源、口径与时间，缺少可验证证据时转入数据缺口。</analysis>
+  <strategy_choice>说明所选方向、备选方案、选择依据、关键取舍和明确不做事项，并指出选择成立所依赖的假设；备选方案使用一致维度比较预期收益、成本、资源占用、周期、依赖、风险和退出条件。对承担增长或现金贡献的核心业务，写明目标客户与需求、产品或服务、定价依据、获客路径、单位交付成本或产能、毛利或现金贡献、回款周期和验证证据；缺失项转入数据缺口。</strategy_choice>
+  <targets>战略目标和重大举措使用“衡量指标与成功标准”：按事项选用经营结果、关键结果、里程碑、质量阈值或阶段 Gate；每个可量化指标包含定义、当前基线、目标值或验收阈值、期限和数据来源。收入、增长、客户和预算等重大目标写明计算公式与关键假设，并用基准或保守情景校验，不得只凭行业规模或经验客单价反推。足以改变某项目标、预算或扩张结论的收入、客户、定价、交付产能、成本或现金流基线未知时，该决策单元使用条件化表达，并写明数据闭环任务与下一阶段验证方案；其余章节仍按模板完整编制，基线审定后再固化受影响的目标、预算或扩张承诺。需要汇总时使用“战略衡量体系”，按核心结果、业务结果、领先指标和风险护栏组织。</targets>
+  <initiatives>每项重大举措围绕实际事项与业务需求，包含核心目标、基线或现状差距、关键任务、所需输入、实际产出、资源与依赖、里程碑、衡量指标与成功标准、风险与应对；关键任务写清连续执行步骤，前一任务的产出作为下一任务的输入，并写明继续、调整或停止的触发条件。分别表述实际产出、阶段验收和最终业务结果；报告、台账、模板或系统上线属于实际产出，阶段验收可使用里程碑、质量阈值或 Gate，最终业务结果使用可观察的经营变化或风险降低。</initiatives>
+  <implementation_and_risk>重大项目写明前置依赖、资源投入、阶段 Gate 和失败处置；优先级清单按可投入资源与实际执行能力排序，并写明并行上限、关键路径、暂不启动事项和资源不足时的取舍。重大风险使用可观察的触发阈值，并写明预防动作和应急动作；复盘机制写明输入数据、可作出的调整和复盘频率。</implementation_and_risk>
   <length>执行摘要约 600–900 个中文字符且不超过一页；其他章节以完成决策单元为准，不用固定字数填充篇幅。</length>
-  <data_gaps>关键事实无法从范围内来源获得时，增加“关键数据缺口闭环表”，字段包括缺口、影响的判断或决策、补齐动作、责任主体和审定节点。</data_gaps>
+  <data_gaps>关键事实无法从范围内来源获得时，增加“关键数据缺口闭环表”，字段包括缺口、影响的判断或决策、所需数据或输入、补齐动作和审定节点。</data_gaps>
   <report_metadata>交付稿在标题下依次给出报告日期、研究对象、研究范围、数据截止日期、规划周期和版本六个紧凑字段，然后直接进入执行摘要；作者或编制方仅在任务明确提供时增加。</report_metadata>
-  <evidence_presentation>正文事实使用来源、日期、口径、引用和措辞强度表达证据边界；无法可靠支持且影响决策的内容转入关键数据缺口或省略。交付稿遵循共享 Clean deliverables 契约。</evidence_presentation>
+  <evidence_presentation>正文事实使用来源、日期、口径、引用和措辞强度表达证据边界；引用通过脚注或“主要来源 / 参考资料”呈现。无法可靠支持且影响决策的内容转入关键数据缺口或省略。交付稿遵循共享 Clean deliverables 契约。</evidence_presentation>
   <document_status>足以改变战略选择的关键输入尚未闭环时，文档标记为“战略初稿 / 待决策版”，不得标记为“正式版”或“决策就绪”；大纲完整、系统运行正常或任务执行成功，均不能替代关键商业输入闭环。</document_status>
-  <delivery_cleanup>逐章确认所有保留章节均已完成，附件只列实际随稿交付的内容；应用本元素的全部验收标准后，删除整个 mirrorx_template_guidance 元素，再执行最终校验与上传；交付物不得保留本元素。</delivery_cleanup>
+  <delivery_cleanup>逐章确认所有保留章节均已完成；应用本元素的全部验收标准后，删除整个 mirrorx_template_guidance 元素，再执行最终校验与上传；交付物不得保留本元素。</delivery_cleanup>
 </mirrorx_template_guidance>
 
 ---
@@ -51,7 +51,7 @@
 
 3. **总体目标**：【期末核心经营指标：营收、净利润、市场份额、合规零重大事故、资本节点等】
 
-4. **关键战略路径**：【3\-5 条贯穿周期的核心战略举措】
+4. **核心战略路径**：【支撑核心选择并进入资源配置与执行计划的最小必要路径集】
 
 5. **核心资源需求**：【资金、核心人才、关键资质、技术投入、合规建设投入等概览】
 
@@ -217,7 +217,7 @@
 
 ### 6\.3 核心战略主题
 
-提炼 3\-5 个贯穿规划周期的核心战略主题，作为所有工作的总纲。 示例：
+提炼能够贯穿规划周期并进入资源配置的最小必要战略主题集；以下仅为可选示例：
 
 1. 【产品创新与技术引领】
 
@@ -233,7 +233,7 @@
 
 ## 七、核心战略举措
 
-> 每项举措均需明确：**核心目标、关键动作、责任主体、时间节点、衡量标准**，确保可落地、可考核。
+> 每项举措围绕实际事项与业务需求，明确：**核心目标、现状差距、关键任务、所需输入与依赖、实际产出、时间节点、衡量指标与成功标准、调整 / 停止条件**。
 >
 >
 
@@ -267,7 +267,7 @@
 
 - 精益运营与降本增效：核心流程优化、人均效能提升目标
 
-### 7\.4 组织与人才战略
+### 7\.4 组织能力与资源配置战略
 
 - 组织架构优化方向：适配战略的组织形态调整、权责划分
 
@@ -329,7 +329,7 @@
 
 表格
 
-### 8\.2 重大战略项目清单（Top 10）
+### 8\.2 重大战略项目优先级清单
 
 筛选支撑战略落地的核心项目，作为资源倾斜与重点管控对象。
 
@@ -357,7 +357,7 @@
 
 表格
 
-### 9\.3 核心人力资源配置计划
+### 9\.3 关键能力与资源配置计划
 
 表格
 
@@ -395,7 +395,7 @@
 
 ### 11\.2 考核与激励机制
 
-- 战略目标逐层分解：公司目标→部门目标→个人目标，与 KPI/OKR 全面挂钩
+- 战略目标拆解为可执行事项与阶段结果，并与衡量指标、成功标准和复盘节点关联
 
 - 合规指标一票否决：发生重大合规事故，取消对应部门与负责人年度评优资格