@amaster.ai/employee-runtime-connector 0.1.1-beta.131 → 0.1.1-beta.133

package/README.md

@@ -12,8 +12,7 @@ For production images, install an exact version and invoke the package bin:
 
 ```sh
 npm install --omit=dev --prefix /opt/pi-cli-runtime @amaster.ai/employee-runtime-connector@0.1.0
-/opt/pi-cli-runtime/node_modules/.bin/amaster-runtime setup https://employee.example.com \
-  --capabilities remote_registration,heartbeat,executor_discovery,workspace_binding,run_wakeup,context_envelope_v1,managed_project_instructions_v1,final_model_context_attestation_v1,runtime_actions_v2,run_exit_live_path_closure_v1,model_call,model_call_output_contract_v1,run_cancel,run_terminate,logs_cost_workspace_status
+/opt/pi-cli-runtime/node_modules/.bin/amaster-runtime setup https://employee.example.com
 /opt/pi-cli-runtime/node_modules/.bin/amaster-runtime daemon start --foreground
 ```
 
@@ -21,6 +20,15 @@ Do not use `latest`, `^`, or `~` in a runtime image. The image tag and connector
 
 Immutable images should pin an exact package version as their baseline. The current connector does not download or replace runtime code while running; package upgrades and rollbacks belong to the image build and rollout.
 
+Connector capability declaration is automatic. The exact package build declares
+what it implements, and runtime readiness removes dynamic capabilities when their
+executor or supporting runtime is unavailable. Operators restrict what the Server
+accepts with `AMASTER_RUNTIME_CONNECTOR_CAPABILITY_ALLOWLIST`; users do not need to
+configure a connector-local capability list. Historical `AMASTER_CAPABILITIES` and
+`--capabilities` inputs remain accepted for rollback compatibility in this release,
+but are ignored and reported as deprecated. They cannot add, remove, or authorize a
+capability.
+
 The publish workflow verifies that npm records the publishing commit as the package `gitHead`, then updates the repository deployment pin. Remote deployment accepts that package only when its `gitHead` is an ancestor of the target source commit and the connector runtime build inputs are unchanged between them. Those inputs are the package path plus `packages/shared/src/source-acquisition-compatibility.json`, which is copied into the published package and bundled into the daemon. If another workspace source becomes a runtime build input, expand the provenance scope and tests before release. After restart, deployment also verifies the package CLI version inside the container. Do not update the deployment pin manually to bypass either provenance check.
 
 ## Package Contents

package/dist/amaster-runtime-daemon/capability-registry.mjs

@@ -0,0 +1,66 @@
+export const BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
+  "remote_registration",
+  "heartbeat",
+  "executor_discovery",
+  "workspace_binding",
+  "run_wakeup",
+  "context_envelope_v1",
+  "managed_project_instructions_v1",
+  "final_model_context_attestation_v1",
+  "runtime_actions_v2",
+  "run_exit_live_path_closure_v1",
+  "model_call",
+  "model_call_output_contract_v1",
+  "run_cancel",
+  "run_terminate",
+  "logs_cost_workspace_status",
+  "source_acquisition_v1",
+  "headed_browser_auth",
+]);
+
+const DYNAMIC_READINESS = Object.freeze({
+  final_model_context_attestation_v1: {
+    reasonCode: "managed_pi_executor_required",
+    ready: (input) => input.runnerKind === "cloud_managed"
+      && input.executors.some((executor) => executor.kind === "pi"),
+  },
+  source_acquisition_v1: {
+    reasonCode: "source_acquisition_not_ready",
+    ready: (input) => input.sourceAcquisition?.ready === true,
+  },
+  headed_browser_auth: {
+    reasonCode: "headed_browser_runtime_not_ready",
+    ready: (input) => input.browserSessionBroker?.ready === true,
+  },
+});
+
+function uniqueStrings(values) {
+  return Array.from(new Set((Array.isArray(values) ? values : [])
+    .map((value) => String(value ?? "").trim())
+    .filter(Boolean)));
+}
+
+export function buildRuntimeCapabilityReport(input) {
+  const legacyConfiguredCapabilities = uniqueStrings(input.legacyConfiguredCapabilities);
+  const runtimeUnavailable = [];
+  const advertised = BUILD_SUPPORTED_CAPABILITIES.filter((capability) => {
+    const readiness = DYNAMIC_READINESS[capability];
+    if (!readiness || readiness.ready(input)) return true;
+    runtimeUnavailable.push({ capability, reasonCode: readiness.reasonCode });
+    return false;
+  });
+  const buildSet = new Set(BUILD_SUPPORTED_CAPABILITIES);
+  const legacySet = new Set(legacyConfiguredCapabilities);
+  return {
+    schemaVersion: "mirrorx.connector-capability-report/v1",
+    source: "build_attested",
+    buildSupported: [...BUILD_SUPPORTED_CAPABILITIES],
+    runtimeUnavailable,
+    advertised,
+    deprecatedCapabilityOverridePresent: legacyConfiguredCapabilities.length > 0,
+    legacyMissingFromBuildTruth: legacyConfiguredCapabilities.length > 0
+      ? BUILD_SUPPORTED_CAPABILITIES.filter((capability) => !legacySet.has(capability))
+      : [],
+    legacyUnsupportedClaims: legacyConfiguredCapabilities.filter((capability) => !buildSet.has(capability)),
+  };
+}

package/dist/amaster-runtime-daemon.mjs

@@ -4666,6 +4666,52 @@ var AMASTER_RUNTIME_CONNECTOR_CAPABILITIES = [
   "headed_browser_auth",
   "browser_auth_relay_outbound_e0"
 ];
+var TERMINAL_BUSINESS_RECONCILIATION_VERSION = "mirrorx.terminal-business-reconciliation/v1";
+var terminalBusinessReconciliationAuthoritySnapshotSchema = external_exports.object({
+  outcomeId: external_exports.string().uuid().nullable(),
+  outcomeRevision: external_exports.number().int().positive().nullable(),
+  businessRevision: external_exports.number().int().positive().nullable(),
+  manifestId: external_exports.string().uuid().nullable(),
+  manifestRevision: external_exports.number().int().positive().nullable()
+}).strict();
+var terminalBusinessReconciliationSchema = external_exports.discriminatedUnion("outcome", [
+  external_exports.object({
+    outcome: external_exports.literal("finalized"),
+    issueStatus: external_exports.literal("done"),
+    acceptanceId: external_exports.string().uuid()
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("review_pending"),
+    interactionId: external_exports.string().uuid()
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("live_path_owned"),
+    owner: external_exports.string().trim().min(1),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("recoverable_missing_disposition"),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("blocked_by_gate"),
+    owner: external_exports.string().trim().min(1),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("missing_authority"),
+    reasonCode: external_exports.string().trim().min(1)
+  }).strict()
+]);
+var terminalBusinessReconciliationEnvelopeSchema = external_exports.object({
+  schemaVersion: external_exports.literal(TERMINAL_BUSINESS_RECONCILIATION_VERSION),
+  decisionKey: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/),
+  commandId: external_exports.string().uuid(),
+  runId: external_exports.string().uuid(),
+  executionEpoch: external_exports.number().int().positive(),
+  authoritySnapshot: terminalBusinessReconciliationAuthoritySnapshotSchema,
+  decision: terminalBusinessReconciliationSchema
+}).strict();
 var MIRRORX_RUNTIME_CONTEXT_ENVELOPE_VERSION = "mirrorx.context-envelope.v1";
 var mirrorxEffectiveInstructionsSchema = external_exports.object({
   schemaVersion: external_exports.literal("mirrorx.project-instructions.v1"),
@@ -5185,6 +5231,165 @@ var amasterRuntimeConnectorWorkspaceStatusIngestSchema = external_exports.object
   metadata: external_exports.record(external_exports.unknown()).default({})
 });
 
+// ../shared/src/issue-live-path.ts
+var ISSUE_LIVE_PATH_KINDS = [
+  "execution",
+  "continuation",
+  "scheduled_monitor",
+  "external_wait",
+  "pending_interaction",
+  "pending_approval",
+  "dependency_wait",
+  "recovery"
+];
+var ISSUE_LIVE_PATH_STATES = ["current", "superseded", "released"];
+var issueLivePathKindSchema = external_exports.enum(ISSUE_LIVE_PATH_KINDS);
+var issueLivePathStateSchema = external_exports.enum(ISSUE_LIVE_PATH_STATES);
+var issueLivePathOwnerRefSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("run"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("runtime_command"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("wakeup_request"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("continuation_intent"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("monitor"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("external_wait"), id: external_exports.string().min(1) }).strict(),
+  external_exports.object({ kind: external_exports.literal("interaction"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("approval"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("dependency"), id: external_exports.string().uuid() }).strict(),
+  external_exports.object({ kind: external_exports.literal("recovery_action"), id: external_exports.string().uuid() }).strict()
+]);
+var OWNER_KINDS_BY_PATH = {
+  execution: ["run", "runtime_command", "wakeup_request"],
+  continuation: ["continuation_intent"],
+  scheduled_monitor: ["monitor"],
+  external_wait: ["external_wait"],
+  pending_interaction: ["interaction"],
+  pending_approval: ["approval"],
+  dependency_wait: ["dependency"],
+  recovery: ["recovery_action"]
+};
+var issueLivePathTransitionInputSchema = external_exports.object({
+  companyId: external_exports.string().uuid(),
+  issueId: external_exports.string().uuid(),
+  executionEpoch: external_exports.number().int().positive(),
+  toKind: issueLivePathKindSchema,
+  ownerRef: issueLivePathOwnerRefSchema,
+  expectedAuthorityRevision: external_exports.number().int().nonnegative(),
+  idempotencyIdentity: external_exports.string().min(1).max(512),
+  requestHash: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/)
+}).strict().superRefine((input, context) => {
+  const allowedOwnerKinds = OWNER_KINDS_BY_PATH[input.toKind];
+  if (!allowedOwnerKinds.includes(input.ownerRef.kind)) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["ownerRef", "kind"],
+      message: `${input.ownerRef.kind} cannot own ${input.toKind}`
+    });
+  }
+});
+var issueLivePathClaimSchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  companyId: external_exports.string().uuid(),
+  issueId: external_exports.string().uuid(),
+  executionEpoch: external_exports.number().int().positive(),
+  state: issueLivePathStateSchema,
+  kind: issueLivePathKindSchema,
+  ownerRef: issueLivePathOwnerRefSchema,
+  authorityRevision: external_exports.number().int().positive(),
+  idempotencyIdentity: external_exports.string().min(1),
+  requestHash: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/),
+  committedAt: external_exports.string().datetime({ offset: true }),
+  supersededAt: external_exports.string().datetime({ offset: true }).nullable(),
+  releasedAt: external_exports.string().datetime({ offset: true }).nullable()
+}).strict();
+var issueLivePathReleaseInputSchema = external_exports.object({
+  companyId: external_exports.string().uuid(),
+  issueId: external_exports.string().uuid(),
+  executionEpoch: external_exports.number().int().positive(),
+  expectedAuthorityRevision: external_exports.number().int().positive(),
+  idempotencyIdentity: external_exports.string().min(1).max(512),
+  requestHash: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/),
+  terminalReceipt: external_exports.record(external_exports.unknown())
+}).strict();
+
+// ../shared/src/company-cold-start.ts
+var COMPANY_COLD_START_PHASES = [
+  "not_started",
+  "awaiting_strategy_confirmation",
+  "preparing_workset",
+  "executing_workset",
+  "evaluating_admission",
+  "admitted",
+  "interrupted"
+];
+var COMPANY_STAGES = [
+  "initialization",
+  "strategy_confirmation",
+  "cold_start",
+  "operating",
+  "needs_attention"
+];
+var COLD_START_STAGES = [
+  "awaiting_strategy_confirmation",
+  "running",
+  "admitted",
+  "interrupted"
+];
+var COMPANY_COLD_START_ACTIONS = [
+  "complete_initialization",
+  "review_strategy",
+  "submit_cold_start_workset",
+  "advance_cold_start_tasks",
+  "evaluate_operating_admission",
+  "operate",
+  "repair_cold_start_invariant"
+];
+var COMPANY_COLD_START_FACT_SLOTS = [
+  "goal_metric_baseline",
+  "customer_problem_evidence",
+  "offer_delivery_baseline",
+  "operating_risk_baseline",
+  "near_term_priority_ownership",
+  "reusable_company_artifact"
+];
+var companyColdStartPhaseSchema = external_exports.enum(COMPANY_COLD_START_PHASES);
+var companyStageSchema = external_exports.enum(COMPANY_STAGES);
+var coldStartStageSchema = external_exports.enum(COLD_START_STAGES);
+var coldStartExpectedActionSchema = external_exports.enum(COMPANY_COLD_START_ACTIONS);
+var companyColdStartFactSlotSchema = external_exports.enum(COMPANY_COLD_START_FACT_SLOTS);
+var companyColdStartWorksetItemDispositionSchema = external_exports.enum([
+  "pending",
+  "accepted_outcome",
+  "external_wait",
+  "scheduled_monitor",
+  "deferred_operating_dependency",
+  "cancelled"
+]);
+var companyColdStartWorksetItemReadSchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  issueId: external_exports.string().uuid(),
+  enrollmentId: external_exports.string().uuid(),
+  priorityOrder: external_exports.number().int().positive(),
+  factSlots: external_exports.array(companyColdStartFactSlotSchema).min(1),
+  disposition: companyColdStartWorksetItemDispositionSchema,
+  dispositionReceiptId: external_exports.string().min(1).max(512).nullable()
+}).strict();
+var companyColdStartWorksetReadSchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  companyId: external_exports.string().uuid(),
+  strategyRevisionId: external_exports.string().uuid(),
+  goalId: external_exports.string().uuid(),
+  organizationVersion: external_exports.number().int().nonnegative(),
+  authorityRevision: external_exports.number().int().positive(),
+  priorityIssueId: external_exports.string().uuid(),
+  items: external_exports.array(companyColdStartWorksetItemReadSchema).min(1)
+}).strict();
+var companyColdStartAdmissionReadSchema = external_exports.object({
+  admitted: external_exports.boolean(),
+  receiptId: external_exports.string().uuid().nullable(),
+  missingFactSlots: external_exports.array(companyColdStartFactSlotSchema),
+  blockingItemIds: external_exports.array(external_exports.string().uuid())
+}).strict();
+
 // ../shared/src/amaster-runtime-command-outcome.ts
 var AMASTER_RUNTIME_EXPECTED_DISPOSITION_VERSION = "mirrorx.expected-run-disposition/v1";
 var AMASTER_RUNTIME_ORGANIZATION_MUTATION_AUTHORIZATION_PURPOSE = "runtime_action_authorization";
@@ -11666,7 +11871,8 @@ var GOVERNED_BUSINESS_TASK_ORIGIN_KINDS = [
   "first_business_activation",
   "ceo_periodic_discovery",
   "operator_business_task",
-  "company_strategy_first_wave"
+  "company_strategy_first_wave",
+  "company_strategy_cold_start"
 ];
 var BUSINESS_TASK_ENROLLMENT_READ_STATES = [
   "governed",
@@ -11738,6 +11944,18 @@ var governedBusinessTaskLineageSchema = external_exports.discriminatedUnion("kin
     priorityOrder: external_exports.number().int().min(1).max(10),
     dependencyItemClientKey: stableIdentitySchema2.nullable()
   }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("company_strategy_cold_start"),
+    worksetId: external_exports.string().uuid(),
+    initializationId: external_exports.string().uuid(),
+    strategyIssueId: external_exports.string().uuid(),
+    goalId: external_exports.string().uuid(),
+    strategyDocumentRevisionId: external_exports.string().uuid(),
+    organizationVersion: external_exports.number().int().nonnegative(),
+    candidateRef: stableIdentitySchema2,
+    priorityOrder: external_exports.number().int().min(1).max(100),
+    dependencyCandidateRef: stableIdentitySchema2.nullable()
+  }).strict(),
   external_exports.object({
     kind: external_exports.literal("ceo_periodic_discovery"),
     observationId: external_exports.string().uuid(),
@@ -19131,6 +19349,34 @@ function createManagedPiMcpProfileApi(options = {}) {
     const mode = statSync2(filePath).mode & 511;
     if (mode !== 384) throw new Error(`pi_managed_mcp_permissions_failed: ${filePath} mode=${mode.toString(8)}`);
   }
+  function resolveSourceAcquisitionExtension(sharedPiHome, sourceAcquisition) {
+    const expectedDigest = sourceAcquisition?.profile?.connectorAdmission?.sourceExtensionDigest;
+    if (typeof expectedDigest !== "string" || !/^[a-f0-9]{64}$/i.test(expectedDigest)) {
+      throw new Error("source_acquisition_extension_profile_digest_invalid");
+    }
+    const extensionPath = join5(sharedPiHome, "extensions", "amaster-source-acquisition.js");
+    let extensionStat;
+    try {
+      extensionStat = lstatSync3(extensionPath);
+    } catch (error) {
+      if (error?.code === "ENOENT") throw new Error("source_acquisition_extension_missing");
+      throw new Error("source_acquisition_extension_unsafe");
+    }
+    if (!extensionStat.isFile() || extensionStat.isSymbolicLink()) {
+      throw new Error("source_acquisition_extension_unsafe");
+    }
+    let extensionBytes;
+    try {
+      extensionBytes = readFileSync5(extensionPath);
+    } catch (error) {
+      if (error?.code === "ENOENT") throw new Error("source_acquisition_extension_missing");
+      throw new Error("source_acquisition_extension_unsafe");
+    }
+    if (sha2563(extensionBytes) !== expectedDigest.toLowerCase()) {
+      throw new Error("source_acquisition_extension_digest_mismatch");
+    }
+    return extensionBytes;
+  }
   function copyPrivateFile(source, target) {
     if (!existsSync4(source)) return false;
     const sourceStat = lstatSync3(source);
@@ -20385,6 +20631,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         extensionArgs.push("--extension", extensionPath);
         return extensionPath;
       };
+      const sourceAcquisitionExtension = input.sourceAcquisition ? resolveSourceAcquisitionExtension(sharedRuntime.home, input.sourceAcquisition) : null;
       if (directCatalog) {
         const adapterExtensionPath = join5(
           sharedRuntime.home,
@@ -20402,11 +20649,15 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         }
         extensionArgs.push("--extension", adapterExtensionPath);
       }
+      if (sourceAcquisitionExtension) {
+        writeProfileExtension("amaster-source-acquisition.js", sourceAcquisitionExtension);
+      }
       if (mcpToolMode !== MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE) {
         writeProfileExtension(MANAGED_PI_MCP_ARGS_NORMALIZER_FILENAME, managedPiMcpArgsNormalizerExtensionSource());
       }
       const cachePath = join5(profileRoot, "mcp-cache.json");
       let directAttestationInput = null;
+      let effectiveToolsAttestorExtensionPath = null;
       const sourceExecutionIdentity = input.sourceAcquisition && typeof input.sourceAcquisition.profile?.attemptId === "string" && Number.isSafeInteger(input.sourceAcquisition.profile?.epoch) ? {
         commandId: input.commandId,
         attemptId: input.sourceAcquisition.profile.attemptId,
@@ -20423,7 +20674,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       }
       const adapterVersion = piMcpAdapterVersion(sharedRuntime.home);
       if (directCatalog) {
-        writeProfileExtension(
+        effectiveToolsAttestorExtensionPath = writeProfileExtension(
           MANAGED_PI_EFFECTIVE_TOOLS_ATTESTOR_FILENAME,
           managedPiEffectiveToolsAttestorExtensionSource()
         );
@@ -20571,6 +20822,14 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         enabledRoleSkillMetadataBytes = roleSkills.serializedMetadataBytes;
         enabledRoleSkillMetadataSha256 = roleSkills.serializedMetadataSha256;
       }
+      if (input.sourceAcquisition && effectiveToolsAttestorExtensionPath) {
+        const attestorPathIndex = extensionArgs.indexOf(effectiveToolsAttestorExtensionPath);
+        if (attestorPathIndex < 1 || extensionArgs[attestorPathIndex - 1] !== "--extension") {
+          throw new Error("pi_managed_mcp_attestor_extension_order_invalid");
+        }
+        extensionArgs.splice(attestorPathIndex - 1, 2);
+        extensionArgs.push("--extension", effectiveToolsAttestorExtensionPath);
+      }
       const env = {
         ...sharedRuntime.settingsEnv,
         ...buildIsolatedEnvironment2(input.baseEnv, input.commandEnv),
@@ -21336,6 +21595,21 @@ function signalExecutorProcess(child, signal, processGroupId = processGroupIdFor
   return false;
 }
 
+// src/amaster-runtime-daemon/executor-stdin.mjs
+var BENIGN_EMPTY_STDIN_CLOSE_ERROR_CODES = /* @__PURE__ */ new Set([
+  "EPIPE",
+  "ERR_STREAM_DESTROYED"
+]);
+function closeExecutorStdin(stdin, input, onDeliveryError) {
+  const hasInput = Boolean(input);
+  stdin.once("error", (error) => {
+    if (!hasInput && BENIGN_EMPTY_STDIN_CLOSE_ERROR_CODES.has(error?.code)) return;
+    onDeliveryError(error);
+  });
+  if (hasInput) stdin.end(input);
+  else stdin.end();
+}
+
 // src/amaster-runtime-daemon/durability.mjs
 function resultOutboxFileName(commandId, now = Date.now()) {
   const safeCommandId = String(commandId ?? "command").replace(/[^a-zA-Z0-9._-]/g, "_");
@@ -24080,7 +24354,9 @@ function agentInstructionDeliveryAudit(bundle, delivery) {
 import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync10, renameSync as renameSync7, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir2, hostname } from "node:os";
 import { dirname as dirname7, join as join9 } from "node:path";
-var CAPABILITIES = [
+
+// src/amaster-runtime-daemon/capability-registry.mjs
+var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "remote_registration",
   "heartbeat",
   "executor_discovery",
@@ -24096,8 +24372,50 @@ var CAPABILITIES = [
   "run_cancel",
   "run_terminate",
   "logs_cost_workspace_status",
-  "source_acquisition_v1"
-];
+  "source_acquisition_v1",
+  "headed_browser_auth"
+]);
+var DYNAMIC_READINESS = Object.freeze({
+  final_model_context_attestation_v1: {
+    reasonCode: "managed_pi_executor_required",
+    ready: (input) => input.runnerKind === "cloud_managed" && input.executors.some((executor) => executor.kind === "pi")
+  },
+  source_acquisition_v1: {
+    reasonCode: "source_acquisition_not_ready",
+    ready: (input) => input.sourceAcquisition?.ready === true
+  },
+  headed_browser_auth: {
+    reasonCode: "headed_browser_runtime_not_ready",
+    ready: (input) => input.browserSessionBroker?.ready === true
+  }
+});
+function uniqueStrings2(values) {
+  return Array.from(new Set((Array.isArray(values) ? values : []).map((value) => String(value ?? "").trim()).filter(Boolean)));
+}
+function buildRuntimeCapabilityReport(input) {
+  const legacyConfiguredCapabilities = uniqueStrings2(input.legacyConfiguredCapabilities);
+  const runtimeUnavailable = [];
+  const advertised = BUILD_SUPPORTED_CAPABILITIES.filter((capability) => {
+    const readiness = DYNAMIC_READINESS[capability];
+    if (!readiness || readiness.ready(input)) return true;
+    runtimeUnavailable.push({ capability, reasonCode: readiness.reasonCode });
+    return false;
+  });
+  const buildSet = new Set(BUILD_SUPPORTED_CAPABILITIES);
+  const legacySet = new Set(legacyConfiguredCapabilities);
+  return {
+    schemaVersion: "mirrorx.connector-capability-report/v1",
+    source: "build_attested",
+    buildSupported: [...BUILD_SUPPORTED_CAPABILITIES],
+    runtimeUnavailable,
+    advertised,
+    deprecatedCapabilityOverridePresent: legacyConfiguredCapabilities.length > 0,
+    legacyMissingFromBuildTruth: legacyConfiguredCapabilities.length > 0 ? BUILD_SUPPORTED_CAPABILITIES.filter((capability) => !legacySet.has(capability)) : [],
+    legacyUnsupportedClaims: legacyConfiguredCapabilities.filter((capability) => !buildSet.has(capability))
+  };
+}
+
+// src/amaster-runtime-daemon/config-state.mjs
 var RUNNER_KIND_CLOUD_MANAGED = "cloud_managed";
 var RUNNER_KIND_DESKTOP_DELEGATED = "desktop_delegated";
 function readEnum(value, allowed, fallback, label) {
@@ -24279,7 +24597,8 @@ function buildConfig(env = process.env, flags = {}) {
     piExecutorUid,
     piExecutorGid,
     runnerKind,
-    capabilities: splitList(flags.capabilities ?? env.AMASTER_CAPABILITIES ?? CAPABILITIES.join(",")),
+    capabilities: [...BUILD_SUPPORTED_CAPABILITIES],
+    legacyConfiguredCapabilities: splitList(flags.capabilities ?? env.AMASTER_CAPABILITIES ?? ""),
     pollIntervalSeconds: Number(flags.pollIntervalSeconds ?? env.AMASTER_POLL_INTERVAL_SECONDS ?? 10),
     maxConcurrentCommands: Math.min(
       parsePositiveInteger(flags.maxConcurrentCommands ?? env.AMASTER_MAX_CONCURRENT_COMMANDS, 1),
@@ -28670,7 +28989,7 @@ function createSourceCompletionStopPolicy({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.131";
+var CONNECTOR_VERSION = "0.1.1-beta.133";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY2 = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);
@@ -29333,12 +29652,19 @@ function browserSessionRuntimeStatus(config) {
   return broker ? { ...readiness, ...broker.status() } : readiness;
 }
 function runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker) {
-  return config.capabilities.filter((capability) => (capability !== "headed_browser_auth" || browserSessionBroker.ready === true) && (capability !== SOURCE_ACQUISITION_CAPABILITY2 || sourceAcquisition.ready === true) && (capability !== "final_model_context_attestation_v1" || config.runnerKind === RUNNER_KIND_CLOUD_MANAGED && config.executors.some((executor) => executor.kind === "pi")));
+  return buildRuntimeCapabilityReport({
+    legacyConfiguredCapabilities: config.legacyConfiguredCapabilities,
+    sourceAcquisition,
+    browserSessionBroker,
+    runnerKind: config.runnerKind,
+    executors: config.executors
+  });
 }
 function buildRegisterPayload(config) {
   const buildCommit = readString(process.env.AMASTER_RUNTIME_BUILD_COMMIT ?? process.env.AMASTER_SOURCE_COMMIT);
   const sourceAcquisition = sourceAcquisitionRuntimeReadiness(config);
   const browserSessionBroker = browserSessionRuntimeReadiness(config);
+  const capabilityReport = runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker);
   return {
     ...config.companyId ? { companyId: config.companyId } : {},
     connectorName: config.connectorName,
@@ -29346,7 +29672,7 @@ function buildRegisterPayload(config) {
     workspaceBindings: config.workspaceBindings,
     networkDomains: config.networkDomains,
     executors: config.executors,
-    capabilities: runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker),
+    capabilities: capabilityReport.advertised,
     contractVersion: CONNECTOR_CONTRACT_VERSION,
     connectorVersion: CONNECTOR_VERSION,
     ...buildCommit ? { buildCommit } : {},
@@ -29359,7 +29685,12 @@ function buildRegisterPayload(config) {
       authMode: config.token ? "bearer_token" : config.authHeader ? "custom_header" : "none",
       platform: process.platform,
       arch: process.arch,
-      node: process.version
+      node: process.version,
+      capabilityReport: {
+        ...capabilityReport,
+        connectorVersion: CONNECTOR_VERSION,
+        ...buildCommit ? { connectorDigest: `build:${buildCommit}` } : {}
+      }
     }
   };
 }
@@ -29393,6 +29724,7 @@ function buildHeartbeatPayload(config, options = {}) {
   const executorReadiness = buildExecutorReadiness(config);
   const sourceAcquisition = sourceAcquisitionRuntimeReadiness(config);
   const browserSessionBroker = browserSessionRuntimeStatus(config);
+  const capabilityReport = runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker);
   const status = options.status === "offline" ? "offline" : "online";
   const daemonStatus = status === "offline" ? "stopping" : "running";
   return {
@@ -29400,7 +29732,7 @@ function buildHeartbeatPayload(config, options = {}) {
     workspaceBindings: config.workspaceBindings,
     networkDomains: config.networkDomains,
     executors: config.executors,
-    capabilities: runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker),
+    capabilities: capabilityReport.advertised,
     connectorVersion: CONNECTOR_VERSION,
     ...buildCommit ? { buildCommit } : {},
     contractVersion: CONNECTOR_CONTRACT_VERSION,
@@ -29426,7 +29758,12 @@ function buildHeartbeatPayload(config, options = {}) {
       ...versionDrift.versionDrift || versionDrift.bundleDrift ? versionDrift : {}
     },
     metadata: {
-      authMode: config.token ? "bearer_token" : config.authHeader ? "custom_header" : "none"
+      authMode: config.token ? "bearer_token" : config.authHeader ? "custom_header" : "none",
+      capabilityReport: {
+        ...capabilityReport,
+        connectorVersion: CONNECTOR_VERSION,
+        ...buildCommit ? { connectorDigest: `build:${buildCommit}` } : {}
+      }
     }
   };
 }
@@ -29593,7 +29930,6 @@ AMASTER_CONNECTOR_NAME=${quoteShell(config.connectorName)}
 AMASTER_MACHINE_ID=${quoteShell(config.machineId)}
 AMASTER_WORKSPACE_ALLOWLIST=${quoteShell(config.workspaceBindings.join(","))}
 AMASTER_EXECUTORS=${quoteShell(executorEnv)}
-AMASTER_CAPABILITIES=${quoteShell(config.capabilities.join(","))}
 AMASTER_NETWORK_DOMAINS=${quoteShell(config.networkDomains.join(","))}
 AMASTER_DAEMON_STATE_FILE=${quoteShell(join16(homedir3(), ".amaster-employee", "runtime-connector-state.json"))}
 EOF
@@ -31702,8 +32038,12 @@ function runExecutor(command, args, options) {
       closeSignal = signal;
       maybeFinishQuiescent();
     });
-    if (options.stdin) child.stdin.end(options.stdin);
-    else child.stdin.end();
+    closeExecutorStdin(child.stdin, options.stdin, (error) => {
+      if (settled) return;
+      spawnError = `executor_stdin_delivery_failed: ${error.message}`;
+      spawnErrorCode = sourceAcquisitionSpawnErrno(error.code);
+      requestStop("executor_stdin_delivery_failed");
+    });
   });
 }
 async function ingestLog(config, command, stream, level, message, payload = {}) {
@@ -33844,9 +34184,6 @@ async function executeRunCommand(config, command) {
       if (executor.kind === "pi" && managedMcpProfile.toolAllowlist && !sourceAcquisition) {
         invocation.args = applyManagedPiToolAllowlist(invocation.args, managedMcpProfile);
       }
-      if (executor.kind === "pi" && Array.isArray(managedMcpProfile.extensionArgs) && managedMcpProfile.extensionArgs.length > 0) {
-        invocation.args = [...invocation.args, ...managedMcpProfile.extensionArgs];
-      }
       if (executor.kind === "pi") {
         invocation.args = [
           ...invocation.args,
@@ -33856,6 +34193,9 @@ async function executeRunCommand(config, command) {
           "--no-approve"
         ];
       }
+      if (executor.kind === "pi" && Array.isArray(managedMcpProfile.extensionArgs) && managedMcpProfile.extensionArgs.length > 0) {
+        invocation.args = [...invocation.args, ...managedMcpProfile.extensionArgs];
+      }
       await ingestLog(config, command, "system", "info", desktopDelegatedRunnerEnabled(config) && executor.kind === "pi" ? "Prepared desktop delegated Pi runtime action bridge" : `Attested isolated ${executor.kind} managed MCP profile`, {
         presentationKind: "managed_mcp_attestation",
         ...managedMcpProfile.attestation
@@ -34508,6 +34848,7 @@ async function executeRunCommand(config, command) {
       parsed.errorMessage = null;
     }
     if (succeeded && managedMcpProfile && Array.isArray(command.requiredCapabilities) && command.requiredCapabilities.includes("runtime_actions_v2")) {
+      const usesLivePathClosureContract = command.requiredCapabilities.includes("run_exit_live_path_closure_v1");
       const productiveSuccessfulRun = outputTelemetry.meaningfulProgressEventCount > 0 || runtimeArtifacts.length > 0 || mcpToolResults.some((toolResult) => ["succeeded", "approval_required"].includes(readString(toolResult.status)));
       let completionState = createRunCompletionState({
         connectorId: requireConnectorId(config),
@@ -34540,13 +34881,13 @@ async function executeRunCommand(config, command) {
           }
         },
         completionRequest: {
-          contractVersion: config.capabilities.includes("run_exit_live_path_closure_v1") ? "amaster.runtime-connector.completion-check.v2" : "amaster.runtime-connector.completion-check.v1",
+          contractVersion: usesLivePathClosureContract ? "amaster.runtime-connector.completion-check.v2" : "amaster.runtime-connector.completion-check.v1",
           leaseId: command.leaseId,
           proposedStatus: "succeeded",
           resultSignals: {
             productiveSuccessfulRun,
             executorTurnCount: terminalTextRepairUsageBreakdown ? 2 : 1,
-            ...config.capabilities.includes("run_exit_live_path_closure_v1") ? {
+            ...usesLivePathClosureContract ? {
               closureAttempts: {
                 workDisposition: 0,
                 livePath: 0,
@@ -34893,7 +35234,7 @@ Commands:
 
 Key env:
   AMASTER_EMPLOYEE_SERVER_URL, AMASTER_CONNECTOR_TOKEN or AMASTER_CONNECTOR_AUTH_HEADER,
-  AMASTER_WORKSPACE_ALLOWLIST, AMASTER_EXECUTORS, AMASTER_CAPABILITIES,
+  AMASTER_WORKSPACE_ALLOWLIST, AMASTER_EXECUTORS,
   AMASTER_NETWORK_DOMAINS, AMASTER_CONNECTOR_ID, AMASTER_DAEMON_STATE_FILE,
   AMASTER_MAX_CONCURRENT_COMMANDS, AMASTER_EXECUTOR_MAX_RSS_MB (default 0, disabled),
   AMASTER_RUNTIME_ORPHAN_REAPER_INTERVAL_SECONDS (default 300, set 0 to disable),
@@ -34903,6 +35244,11 @@ Key env:
 async function main() {
   const { command, flags } = parseArgs(process.argv.slice(2));
   const config = buildConfig(process.env, flags);
+  if (config.legacyConfiguredCapabilities.length > 0) {
+    process.stderr.write(
+      "Warning: AMASTER_CAPABILITIES/--capabilities is deprecated and ignored; use the Server capability allowlist for operator restrictions.\n"
+    );
+  }
   switch (command) {
     case "config-template":
       printInstall(config);

package/dist/amaster-runtime.mjs

@@ -5,26 +5,9 @@ import { randomUUID } from "node:crypto";
 import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
+import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.131";
-
-const CAPABILITIES = [
-  "remote_registration",
-  "heartbeat",
-  "executor_discovery",
-  "workspace_binding",
-  "run_wakeup",
-  "context_envelope_v1", "managed_project_instructions_v1",
-  "final_model_context_attestation_v1",
-  "runtime_actions_v2",
-  "run_exit_live_path_closure_v1",
-  "model_call",
-  "model_call_output_contract_v1",
-  "run_cancel",
-  "run_terminate",
-  "logs_cost_workspace_status",
-  "source_acquisition_v1",
-];
+const CONNECTOR_VERSION = "0.1.1-beta.133";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],
@@ -257,7 +240,6 @@ function withDefaults(config) {
     AMASTER_CONNECTOR_NAME: `${hostname()}-amaster`,
     AMASTER_MACHINE_ID: defaultMachineId(),
     AMASTER_WORKSPACE_ALLOWLIST: runtimeWorkspacesRoot,
-    AMASTER_CAPABILITIES: CAPABILITIES.join(","),
     AMASTER_NETWORK_DOMAINS: "self-host",
     AMASTER_DAEMON_STATE_FILE: join(configDir, "runtime-connector-state.json"),
     AMASTER_RUNTIME_WORKSPACES_ROOT: runtimeWorkspacesRoot,
@@ -463,7 +445,8 @@ function printConfig(config) {
     ["runner_kind", merged.AMASTER_RUNTIME_RUNNER_KIND || "cloud_managed"],
     ["heartbeat_log_mode", merged.AMASTER_HEARTBEAT_LOG_MODE || "(compact)"],
     ["network_domains", merged.AMASTER_NETWORK_DOMAINS],
-    ["capabilities", merged.AMASTER_CAPABILITIES],
+    ["capability_source", `connector build (${BUILD_SUPPORTED_CAPABILITIES.length}) + runtime readiness`],
+    ["legacy_capabilities", merged.AMASTER_CAPABILITIES ? "(deprecated; ignored)" : "(none)"],
     ["state_file", merged.AMASTER_DAEMON_STATE_FILE],
     ["env_file", envFile],
   ];
@@ -498,7 +481,12 @@ function commandSetup(argv) {
   config.AMASTER_MACHINE_ID = flags.machine_id || defaultConfig.AMASTER_MACHINE_ID;
   config.AMASTER_RUNTIME_WORKSPACES_ROOT = flags.runtime_workspaces_root || defaultConfig.AMASTER_RUNTIME_WORKSPACES_ROOT;
   config.AMASTER_WORKSPACE_ALLOWLIST = flags.workspace_allowlist || flags.workspace || defaultConfig.AMASTER_WORKSPACE_ALLOWLIST;
-  config.AMASTER_CAPABILITIES = flags.capabilities || defaultConfig.AMASTER_CAPABILITIES;
+  if (flags.capabilities) {
+    config.AMASTER_CAPABILITIES = flags.capabilities;
+    process.stderr.write(
+      "Warning: --capabilities is deprecated and ignored; restrict accepted capabilities with the Server allowlist.\n",
+    );
+  }
   config.AMASTER_NETWORK_DOMAINS = flags.network_domains || defaultConfig.AMASTER_NETWORK_DOMAINS;
   config.AMASTER_DAEMON_STATE_FILE = flags.state_file || defaultConfig.AMASTER_DAEMON_STATE_FILE;
   if (flags.executors) config.AMASTER_EXECUTORS = flags.executors;
@@ -528,6 +516,11 @@ function commandConfig(argv) {
   const envKey = envKeyFor(key);
   const value = valueParts.join(" ").trim();
   config[envKey] = envKey === "AMASTER_EMPLOYEE_SERVER_URL" ? normalizeServerUrl(value) : value;
+  if (envKey === "AMASTER_CAPABILITIES") {
+    process.stderr.write(
+      "Warning: connector-local capabilities are deprecated and ignored; restrict accepted capabilities with the Server allowlist.\n",
+    );
+  }
   writeConfig(config);
   process.stdout.write(`${normalizeKey(key)} updated\n`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.131",
+  "version": "0.1.1-beta.133",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",