@amaster.ai/employee-runtime-connector 0.1.1-beta.136 → 0.1.1-beta.138

package/dist/amaster-runtime-daemon/capability-registry.mjs

@@ -6,6 +6,7 @@ export const BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "run_wakeup",
   "context_envelope_v1",
   "managed_project_instructions_v1",
+  "artifact_template_catalog_v1",
   "final_model_context_attestation_v1",
   "runtime_actions_v2",
   "run_exit_live_path_closure_v1",
@@ -19,6 +20,23 @@ export const BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
 ]);
 
 const DYNAMIC_READINESS = Object.freeze({
+  artifact_template_catalog_v1: {
+    reasonCode: "artifact_template_catalog_not_ready",
+    ready: (input) => {
+      const catalog = input.templateCatalog;
+      return catalog?.status === "ready"
+        && catalog.bundleAttested === true
+        && catalog.materialized === true
+        && catalog.readable === true
+        && catalog.executorReadable === true
+        && Number.isSafeInteger(catalog.fileCount)
+        && catalog.fileCount > 0
+        && typeof catalog.manifestSha256 === "string"
+        && /^[a-f0-9]{64}$/u.test(catalog.manifestSha256)
+        && typeof catalog.targetDir === "string"
+        && catalog.targetDir === input.runtimeTemplatesRoot;
+    },
+  },
   final_model_context_attestation_v1: {
     reasonCode: "managed_pi_executor_required",
     ready: (input) => input.runnerKind === "cloud_managed"

package/dist/amaster-runtime-daemon.mjs

@@ -4654,6 +4654,7 @@ var AMASTER_RUNTIME_CONNECTOR_CAPABILITIES = [
   "run_wakeup",
   "context_envelope_v1",
   "managed_project_instructions_v1",
+  "artifact_template_catalog_v1",
   "final_model_context_attestation_v1",
   "model_call",
   "model_call_output_contract_v1",
@@ -15573,9 +15574,9 @@ var completeCompanyCreationReviewSchema = external_exports.object({
 }).strict();
 
 // src/amaster-runtime-daemon.mjs
-import { chmodSync as chmodSync7, copyFileSync as copyFileSync2, existsSync as existsSync15, lstatSync as lstatSync9, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync2, readFileSync as readFileSync17, readdirSync as readdirSync11, realpathSync as realpathSync7, renameSync as renameSync9, rmSync as rmSync9, statSync as statSync9, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync11 } from "node:fs";
+import { chmodSync as chmodSync7, copyFileSync as copyFileSync2, existsSync as existsSync15, lstatSync as lstatSync9, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync2, readFileSync as readFileSync17, readdirSync as readdirSync11, realpathSync as realpathSync7, renameSync as renameSync9, rmSync as rmSync9, statSync as statSync10, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync11 } from "node:fs";
 import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3, tmpdir } from "node:os";
-import { basename as basename6, delimiter as delimiter3, dirname as dirname11, extname as extname3, isAbsolute as isAbsolute9, join as join16, relative as relative8, resolve as resolve13 } from "node:path";
+import { basename as basename6, delimiter as delimiter3, dirname as dirname11, extname as extname3, isAbsolute as isAbsolute9, join as join16, relative as relative8, resolve as resolve14 } from "node:path";
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
 
 // src/amaster-runtime-daemon/common.mjs
@@ -24384,7 +24385,7 @@ function agentInstructionDeliveryAudit(bundle, delivery) {
 // src/amaster-runtime-daemon/config-state.mjs
 import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync10, renameSync as renameSync7, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir2, hostname } from "node:os";
-import { dirname as dirname7, join as join9 } from "node:path";
+import { dirname as dirname7, join as join9, parse as parse2, resolve as resolve5 } from "node:path";
 
 // src/amaster-runtime-daemon/capability-registry.mjs
 var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
@@ -24395,6 +24396,7 @@ var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "run_wakeup",
   "context_envelope_v1",
   "managed_project_instructions_v1",
+  "artifact_template_catalog_v1",
   "final_model_context_attestation_v1",
   "runtime_actions_v2",
   "run_exit_live_path_closure_v1",
@@ -24407,6 +24409,13 @@ var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
   "headed_browser_auth"
 ]);
 var DYNAMIC_READINESS = Object.freeze({
+  artifact_template_catalog_v1: {
+    reasonCode: "artifact_template_catalog_not_ready",
+    ready: (input) => {
+      const catalog = input.templateCatalog;
+      return catalog?.status === "ready" && catalog.bundleAttested === true && catalog.materialized === true && catalog.readable === true && catalog.executorReadable === true && Number.isSafeInteger(catalog.fileCount) && catalog.fileCount > 0 && typeof catalog.manifestSha256 === "string" && /^[a-f0-9]{64}$/u.test(catalog.manifestSha256) && typeof catalog.targetDir === "string" && catalog.targetDir === input.runtimeTemplatesRoot;
+    }
+  },
   final_model_context_attestation_v1: {
     reasonCode: "managed_pi_executor_required",
     ready: (input) => input.runnerKind === "cloud_managed" && input.executors.some((executor) => executor.kind === "pi")
@@ -24494,6 +24503,14 @@ function runtimeHome(env) {
     env.AMASTER_RUNTIME_STATE_HOME || env.AMASTER_RUNTIME_HOME || join9(homedir2(), ".amaster-employee")
   ));
 }
+function runtimeTemplatesRoot(env, home) {
+  const configured = String(env.AMASTER_RUNTIME_TEMPLATES_ROOT ?? "").trim();
+  const resolved = configured ? resolve5(expandHomePath(configured)) : resolve5(String(env.PI_CODING_AGENT_DIR ?? "")) === "/data/.pi" ? "/data/templates" : resolve5(join9(home, "templates"));
+  if (resolved === parse2(resolved).root) {
+    throw new Error("AMASTER_RUNTIME_TEMPLATES_ROOT must not be a filesystem root");
+  }
+  return resolved;
+}
 function stateFilePath(env) {
   return env.AMASTER_DAEMON_STATE_FILE ? expandHomePath(String(env.AMASTER_DAEMON_STATE_FILE)) : join9(runtimeHome(env), "runtime-connector-state.json");
 }
@@ -24553,6 +24570,7 @@ function buildConfig(env = process.env, flags = {}) {
   const token = String(flags.token ?? env.AMASTER_CONNECTOR_TOKEN ?? state.connectorToken ?? "");
   const authHeader = String(flags.authHeader ?? env.AMASTER_CONNECTOR_AUTH_HEADER ?? "");
   const home = runtimeHome(env);
+  const templatesRoot = runtimeTemplatesRoot(env, home);
   const runtimeWorkspacesRoot = expandHomePath(
     String(flags.runtimeWorkspacesRoot ?? env.AMASTER_RUNTIME_WORKSPACES_ROOT ?? join9(home, "workspaces"))
   );
@@ -24677,6 +24695,7 @@ function buildConfig(env = process.env, flags = {}) {
       300
     ),
     browserSessionStateRoot,
+    runtimeTemplatesRoot: templatesRoot,
     runtimeWorkspacesRoot,
     state
   };
@@ -26385,7 +26404,7 @@ async function postRuntimeConnectorJsonWithRetry(config, path, payload, options
     } catch (error) {
       lastError = error;
       if (attempt >= maxAttempts || !retryableRuntimeConnectorPost(error)) throw error;
-      if (delayMs > 0) await new Promise((resolve14) => setTimeout(resolve14, delayMs));
+      if (delayMs > 0) await new Promise((resolve15) => setTimeout(resolve15, delayMs));
     }
   }
   throw lastError;
@@ -26411,7 +26430,7 @@ var bestEffortPostJson = bestEffortPostRuntimeConnectorJson;
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
 import { createHash as createHash9 } from "node:crypto";
 import { closeSync as closeSync2, constants, fstatSync, lstatSync as lstatSync5, openSync as openSync2, readFileSync as readFileSync11, realpathSync as realpathSync5 } from "node:fs";
-import { isAbsolute as isAbsolute5, relative as relative4, resolve as resolve5 } from "node:path";
+import { isAbsolute as isAbsolute5, relative as relative4, resolve as resolve6 } from "node:path";
 var SHA256_PATTERN3 = /^[a-f0-9]{64}$/;
 function requiredString(value, name) {
   if (typeof value !== "string" || !value.trim()) throw new Error(`Runtime Artifact ${name} is required`);
@@ -26430,9 +26449,9 @@ function sameFileSnapshot(left, right) {
   return left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeMs === right.mtimeMs && left.ctimeMs === right.ctimeMs;
 }
 function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime workspace file", options = {}) {
-  const root = realpathSync5(resolve5(rootPath));
+  const root = realpathSync5(resolve6(rootPath));
   const relativePath = ownedRelativePath(sourceRelativePath);
-  const sourcePath = resolve5(root, relativePath);
+  const sourcePath = resolve6(root, relativePath);
   const pathStat = lstatSync5(sourcePath);
   if (!pathStat.isFile() || pathStat.isSymbolicLink() || !pathWithin2(realpathSync5(sourcePath), root)) {
     throw new Error(`${label} source is not an owned regular file`);
@@ -26748,7 +26767,7 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 // src/amaster-runtime-daemon/workspace-guard.mjs
 import { createHash as createHash11 } from "node:crypto";
 import { existsSync as existsSync9, mkdirSync as mkdirSync7, realpathSync as realpathSync6, statSync as statSync4 } from "node:fs";
-import { basename as basename4, join as join10, isAbsolute as isAbsolute6, relative as relative5, resolve as resolve6 } from "node:path";
+import { basename as basename4, join as join10, isAbsolute as isAbsolute6, relative as relative5, resolve as resolve7 } from "node:path";
 function pathWithin3(candidate, root) {
   const rel = relative5(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
@@ -26757,10 +26776,10 @@ function resolveWorkspaceCwd(config, command) {
   const payload = asRecord(command.payload);
   const requested = readString(payload.workspacePath);
   const fallback = config.workspaceBindings[0] ?? process.cwd();
-  const cwd = realpathSync6(resolve6(expandHomePath(requested ?? fallback)));
+  const cwd = realpathSync6(resolve7(expandHomePath(requested ?? fallback)));
   const allowlist = config.workspaceBindings.flatMap((entry) => {
     try {
-      return [realpathSync6(resolve6(expandHomePath(entry)))];
+      return [realpathSync6(resolve7(expandHomePath(entry)))];
     } catch {
       return [];
     }
@@ -26803,7 +26822,7 @@ function workspaceLabel(sourceWorkspacePath, payload) {
   return readString(payload.workspaceName) ?? readString(payload.projectName) ?? readString(context.projectName) ?? basename4(sourceWorkspacePath) ?? "workspace";
 }
 function workspacesRoot(config) {
-  const root = resolve6(expandHomePath(config.runtimeWorkspacesRoot ?? "~/.amaster-employee/workspaces"));
+  const root = resolve7(expandHomePath(config.runtimeWorkspacesRoot ?? "~/.amaster-employee/workspaces"));
   mkdirSync7(root, { recursive: true });
   return realpathSync6(root);
 }
@@ -26844,7 +26863,7 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
 
 // src/amaster-runtime-daemon/workspace-gc.mjs
 import { existsSync as existsSync10, readdirSync as readdirSync7, statSync as statSync5 } from "node:fs";
-import { join as join11, resolve as resolve7 } from "node:path";
+import { join as join11, resolve as resolve8 } from "node:path";
 function readIsoTime(value) {
   if (typeof value !== "string" || !value.trim()) return null;
   const time = new Date(value).getTime();
@@ -26926,7 +26945,7 @@ function summarizeWorkdir(path, manifest, nowMs) {
   };
 }
 function planManagedWorkspaceGcDryRun(input) {
-  const root = resolve7(String(input.root ?? ""));
+  const root = resolve8(String(input.root ?? ""));
   const now = input.now instanceof Date ? input.now : /* @__PURE__ */ new Date();
   const nowMs = now.getTime();
   const ttlHours = Math.max(1, Number(input.ttlHours ?? 72));
@@ -26973,7 +26992,9 @@ function planManagedWorkspaceGcDryRun(input) {
 // src/amaster-runtime-daemon/preset-templates.mjs
 import { createHash as createHash12 } from "node:crypto";
 import {
+  accessSync,
   chmodSync as chmodSync5,
+  constants as constants2,
   existsSync as existsSync11,
   lstatSync as lstatSync6,
   mkdirSync as mkdirSync8,
@@ -26982,10 +27003,11 @@ import {
   readdirSync as readdirSync8,
   renameSync as renameSync8,
   rmSync as rmSync7,
+  statSync as statSync6,
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync9
 } from "node:fs";
-import { dirname as dirname8, extname, isAbsolute as isAbsolute7, join as join12, parse as parse2, resolve as resolve8, sep as sep3 } from "node:path";
+import { dirname as dirname8, extname, isAbsolute as isAbsolute7, join as join12, parse as parse3, resolve as resolve9, sep as sep3 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PRESET_TEMPLATE_MANIFEST_FILE = ".mirrorx-preset-templates.json";
 var MAX_PRESET_TEMPLATE_FILES = 256;
@@ -27002,8 +27024,42 @@ function lstatIfExists(path) {
     throw error;
   }
 }
+function modeAllows(stat, identity2, ownerBit, groupBit, otherBit) {
+  if (!identity2 || identity2.uid === 0) return true;
+  if (stat.uid === identity2.uid) return (stat.mode & ownerBit) !== 0;
+  if (stat.gid === identity2.gid) return (stat.mode & groupBit) !== 0;
+  return (stat.mode & otherBit) !== 0;
+}
+function assertCatalogReadableByExecutor(targetDir, fileNames, identity2) {
+  if (!identity2) {
+    accessSync(targetDir, constants2.R_OK | constants2.X_OK);
+    for (const name of fileNames) accessSync(join12(targetDir, name), constants2.R_OK);
+    return;
+  }
+  let current = targetDir;
+  for (; ; ) {
+    const stat = statSync6(current);
+    if (!stat.isDirectory() || !modeAllows(stat, identity2, 64, 8, 1)) {
+      throw new Error(`preset_template_executor_path_unreadable: ${current}`);
+    }
+    const parent = dirname8(current);
+    if (parent === current) break;
+    current = parent;
+  }
+  const targetStat = statSync6(targetDir);
+  if (!modeAllows(targetStat, identity2, 256, 32, 4)) {
+    throw new Error(`preset_template_executor_catalog_unreadable: ${targetDir}`);
+  }
+  for (const name of fileNames) {
+    const path = join12(targetDir, name);
+    const stat = statSync6(path);
+    if (!stat.isFile() || !modeAllows(stat, identity2, 256, 32, 4)) {
+      throw new Error(`preset_template_executor_file_unreadable: ${name}`);
+    }
+  }
+}
 function validTemplateName(value) {
-  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute7(value) && parse2(value).base === value && extname(value).toLowerCase() === ".md";
+  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute7(value) && parse3(value).base === value && extname(value).toLowerCase() === ".md";
 }
 function readManifest(manifestPath, { strict }) {
   try {
@@ -27060,8 +27116,8 @@ function removeRetiredPresetFiles(targetDir, previousManifest, nextNames) {
   }
 }
 function materializeBundledPresetTemplates(input) {
-  const sourceDir = resolve8(input.sourceDir);
-  const targetDir = resolve8(input.targetDir);
+  const sourceDir = resolve9(input.sourceDir);
+  const targetDir = resolve9(input.targetDir);
   if (sourceDir === targetDir || sourceDir.startsWith(`${targetDir}${sep3}`) || targetDir.startsWith(`${sourceDir}${sep3}`)) {
     throw new Error("preset_template_source_target_overlap");
   }
@@ -27101,25 +27157,42 @@ function materializeBundledPresetTemplates(input) {
     targetDir
   };
 }
-function runtimePresetTemplateTarget(env = process.env) {
-  const configured = typeof env.AMASTER_RUNTIME_TEMPLATES_ROOT === "string" ? env.AMASTER_RUNTIME_TEMPLATES_ROOT.trim() : "";
-  if (configured) return resolve8(configured);
-  const piHome = typeof env.PI_CODING_AGENT_DIR === "string" ? resolve8(env.PI_CODING_AGENT_DIR) : null;
-  return piHome === "/data/.pi" ? "/data/templates" : null;
-}
-function materializeRuntimePresetTemplates(env = process.env, options = {}) {
-  const targetDir = options.targetDir ?? runtimePresetTemplateTarget(env);
-  if (!targetDir) return { status: "skipped", reason: "not_pi_cli_runtime" };
-  const sourceDir = options.sourceDir ?? fileURLToPath(new URL("./templates/", import.meta.url));
+function materializeRuntimePresetTemplates(input) {
+  const sourceDir = input.sourceDir ?? fileURLToPath(new URL("./templates/", import.meta.url));
+  const materialized = materializeBundledPresetTemplates({
+    sourceDir,
+    targetDir: input.targetDir
+  });
+  const manifestBody = readFileSync12(
+    join12(materialized.targetDir, PRESET_TEMPLATE_MANIFEST_FILE)
+  );
+  const manifest = JSON.parse(manifestBody.toString("utf8"));
+  for (const file of manifest.files) {
+    const body = readFileSync12(join12(materialized.targetDir, file.name));
+    if (sha256(body) !== file.sha256) {
+      throw new Error(`preset_template_materialized_digest_mismatch: ${file.name}`);
+    }
+  }
+  assertCatalogReadableByExecutor(
+    materialized.targetDir,
+    [PRESET_TEMPLATE_MANIFEST_FILE, ...manifest.files.map((file) => file.name)],
+    input.executorIdentity ?? null
+  );
   return {
     status: "ready",
-    ...materializeBundledPresetTemplates({ sourceDir, targetDir })
+    ready: true,
+    bundleAttested: true,
+    materialized: true,
+    readable: true,
+    executorReadable: true,
+    manifestSha256: sha256(manifestBody),
+    ...materialized
   };
 }
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
-import { existsSync as existsSync12, readdirSync as readdirSync9, statSync as statSync6 } from "node:fs";
-import { dirname as dirname9, join as join13, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync12, readdirSync as readdirSync9, statSync as statSync7 } from "node:fs";
+import { dirname as dirname9, join as join13, resolve as resolve10 } from "node:path";
 function runtimeStatusDirectoryEntries(path) {
   try {
     return readdirSync9(path, { withFileTypes: true });
@@ -27135,7 +27208,7 @@ function runtimeStatusDirectorySizeBytes(path) {
     if (!current) continue;
     let stat;
     try {
-      stat = statSync6(current, { throwIfNoEntry: false });
+      stat = statSync7(current, { throwIfNoEntry: false });
     } catch {
       continue;
     }
@@ -27207,7 +27280,7 @@ function runtimeStatusOutboxDir(config) {
 }
 function runtimeStatusRunCompletionDir(config) {
   const explicit = config.AMASTER_RUN_COMPLETION_STATE_DIR ?? config.runCompletionStateDir;
-  if (typeof explicit === "string" && explicit.trim()) return resolve9(explicit);
+  if (typeof explicit === "string" && explicit.trim()) return resolve10(explicit);
   const statePath = config.AMASTER_DAEMON_STATE_FILE ?? config.daemonStateFile;
   return join13(dirname9(stateFilePath({
     AMASTER_DAEMON_STATE_FILE: statePath
@@ -27219,7 +27292,7 @@ function countRuntimeStatusJsonEntries(dir) {
 }
 function summarizeRuntimeLocalState(input) {
   const config = input.config ?? {};
-  const root = resolve9(String(config.AMASTER_RUNTIME_WORKSPACES_ROOT ?? config.runtimeWorkspacesRoot ?? input.runtimeWorkspacesRoot ?? ""));
+  const root = resolve10(String(config.AMASTER_RUNTIME_WORKSPACES_ROOT ?? config.runtimeWorkspacesRoot ?? input.runtimeWorkspacesRoot ?? ""));
   const now = input.now instanceof Date ? input.now : /* @__PURE__ */ new Date();
   const workdirs = walkRuntimeStatusManagedWorkdirs(root);
   let managedWorkdirBytes = 0;
@@ -27477,7 +27550,7 @@ function resolvePiModelContextBudget({
 // src/amaster-runtime-daemon/pi-final-context-attestor.mjs
 import { createHash as createHash13 } from "node:crypto";
 import { lstatSync as lstatSync7, readFileSync as readFileSync14 } from "node:fs";
-import { resolve as resolve10 } from "node:path";
+import { resolve as resolve11 } from "node:path";
 var MANAGED_PI_FINAL_CONTEXT_ATTESTOR_FILENAME = "amaster-final-model-context-attestor.js";
 var MANAGED_PI_PROJECT_INSTRUCTION_FILENAME = "amaster-project-instructions.js";
 var MANAGED_PI_FINAL_CONTEXT_SCHEMA_VERSION = "mirrorx.pi-final-model-context-attestation.v4";
@@ -27502,7 +27575,7 @@ function requiredInteger(value, name, minimum = 0) {
   return value;
 }
 function managedPiProjectInstructionExtensionSource(input) {
-  const projectInstructionPath = resolve10(requiredString3(input.projectInstructionPath, "projectInstructionPath"));
+  const projectInstructionPath = resolve11(requiredString3(input.projectInstructionPath, "projectInstructionPath"));
   const projectInstructionSha256 = requiredString3(input.projectInstructionSha256, "projectInstructionSha256");
   if (!/^[a-f0-9]{64}$/.test(projectInstructionSha256)) {
     throw new Error("pi_project_instruction_extension_invalid: projectInstructionSha256");
@@ -27558,8 +27631,8 @@ export default function amasterProjectInstructions(pi) {
 function managedPiFinalContextAttestorExtensionSource(input) {
   const contract = {
     schemaVersion: MANAGED_PI_FINAL_CONTEXT_SCHEMA_VERSION,
-    receiptPath: resolve10(requiredString3(input.receiptPath, "receiptPath")),
-    projectInstructionPath: resolve10(requiredString3(input.projectInstructionPath, "projectInstructionPath")),
+    receiptPath: resolve11(requiredString3(input.receiptPath, "receiptPath")),
+    projectInstructionPath: resolve11(requiredString3(input.projectInstructionPath, "projectInstructionPath")),
     projectInstructionSha256: requiredString3(input.projectInstructionSha256, "projectInstructionSha256"),
     provider: requiredString3(input.provider, "provider"),
     model: requiredString3(input.model, "model"),
@@ -27826,7 +27899,7 @@ export default function amasterFinalModelContextAttestor(pi) {
 `;
 }
 function readPiFinalContextAttestation(input) {
-  const receiptPath = resolve10(requiredString3(input.receiptPath, "receiptPath"));
+  const receiptPath = resolve11(requiredString3(input.receiptPath, "receiptPath"));
   const stat = lstatSync7(receiptPath);
   if (!stat.isFile() || stat.isSymbolicLink()) throw new Error("pi_final_context_attestation_unsafe");
   const receipt = JSON.parse(readFileSync14(receiptPath, "utf8"));
@@ -27860,8 +27933,8 @@ function readPiFinalContextAttestation(input) {
 // src/amaster-runtime-daemon/workspace-status.mjs
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash14 } from "node:crypto";
-import { existsSync as existsSync13, readdirSync as readdirSync10, readFileSync as readFileSync15, statSync as statSync7 } from "node:fs";
-import { basename as basename5, extname as extname2, isAbsolute as isAbsolute8, join as join14, relative as relative6, resolve as resolve11 } from "node:path";
+import { existsSync as existsSync13, readdirSync as readdirSync10, readFileSync as readFileSync15, statSync as statSync8 } from "node:fs";
+import { basename as basename5, extname as extname2, isAbsolute as isAbsolute8, join as join14, relative as relative6, resolve as resolve12 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Map([
   [".md", "markdown"],
@@ -27958,7 +28031,7 @@ function artifactSha256(filePath, relativePath, stat, opts = {}) {
   return hash;
 }
 function scanArtifactCandidates(cwd, opts = {}) {
-  const root = resolve11(cwd);
+  const root = resolve12(cwd);
   const maxCandidates = opts.maxCandidates ?? MAX_CANDIDATES;
   const maxEntries = opts.maxEntries ?? MAX_SCAN_ENTRIES;
   const candidates = [];
@@ -27993,11 +28066,11 @@ function scanArtifactCandidates(cwd, opts = {}) {
       const type = ARTIFACT_EXTENSIONS.get(ext) ?? "file";
       let stat;
       try {
-        stat = statSync7(fullPath);
+        stat = statSync8(fullPath);
       } catch {
         continue;
       }
-      if (!statusPathWithin(resolve11(fullPath), root) || stat.size > MAX_HASH_BYTES) continue;
+      if (!statusPathWithin(resolve12(fullPath), root) || stat.size > MAX_HASH_BYTES) continue;
       candidates.push({
         relativePath,
         name: basename5(fullPath),
@@ -28057,7 +28130,7 @@ function sanitizeRuntimeService(entry) {
   };
 }
 function readRuntimeServicesSnapshot(cwd) {
-  const snapshotPath = join14(resolve11(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
+  const snapshotPath = join14(resolve12(cwd), WORKSPACE_RUNTIME_SERVICES_FILENAME);
   if (!existsSync13(snapshotPath)) return [];
   try {
     const parsed = JSON.parse(readFileSync15(snapshotPath, "utf8"));
@@ -28299,12 +28372,12 @@ import {
   mkdirSync as mkdirSync9,
   readFileSync as readFileSync16,
   rmSync as rmSync8,
-  statSync as statSync8,
+  statSync as statSync9,
   writeFileSync as writeFileSync10
 } from "node:fs";
 import { createServer as createHttpServer } from "node:http";
 import { connect as connectTcp, isIP } from "node:net";
-import { dirname as dirname10, join as join15, relative as relative7, resolve as resolve12 } from "node:path";
+import { dirname as dirname10, join as join15, relative as relative7, resolve as resolve13 } from "node:path";
 var MARKER_NAME = ".amaster-browser-session.json";
 var HUMAN_LEASE_INACTIVITY_MS = 30 * 60 * 1e3;
 var HUMAN_LEASE_HARD_CAP_MS = 2 * 60 * 60 * 1e3;
@@ -28516,14 +28589,14 @@ function pathWithin4(candidate, root) {
 function ensureExecutable(path) {
   if (!path) return false;
   try {
-    const stat = statSync8(path);
+    const stat = statSync9(path);
     return stat.isFile() && (stat.mode & 73) !== 0;
   } catch {
     return false;
   }
 }
 function ensurePrivateRoot(stateRoot) {
-  const root = resolve12(stateRoot);
+  const root = resolve13(stateRoot);
   if (existsSync14(root) && lstatSync8(root).isSymbolicLink()) {
     throw brokerError("browser_session_profile_root_symlink");
   }
@@ -28549,7 +28622,7 @@ function expectedOwner(payload) {
 }
 function exactProfile(stateRoot, payload, { create = false } = {}) {
   const root = ensurePrivateRoot(stateRoot);
-  const profilePath = resolve12(root, profileName(payload));
+  const profilePath = resolve13(root, profileName(payload));
   if (!pathWithin4(profilePath, root) || dirname10(profilePath) !== root) {
     throw brokerError("browser_session_profile_path_invalid");
   }
@@ -28853,8 +28926,8 @@ function createBrowserSessionBroker({
         throw brokerError("browser_session_agent_lease_expired");
       }
       const root = ensurePrivateRoot(stateRoot);
-      const expectedPath = resolve12(root, profileName(payload));
-      if (resolve12(payload.userDataDir) !== expectedPath) {
+      const expectedPath = resolve13(root, profileName(payload));
+      if (resolve13(payload.userDataDir) !== expectedPath) {
         throw brokerError("browser_session_profile_path_invalid");
       }
       const marker = JSON.parse(readFileSync16(join15(expectedPath, MARKER_NAME), "utf8"));
@@ -29020,7 +29093,7 @@ function createSourceCompletionStopPolicy({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.136";
+var CONNECTOR_VERSION = "0.1.1-beta.138";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY2 = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);
@@ -29079,7 +29152,7 @@ function resultOutboxPendingCount(config) {
 }
 function runCompletionStateDir(config) {
   const explicit = readString(process.env.AMASTER_RUN_COMPLETION_STATE_DIR);
-  if (explicit) return resolve13(expandHomePath(explicit));
+  if (explicit) return resolve14(expandHomePath(explicit));
   return join16(dirname11(stateFilePath(process.env)), "run-completion-state");
 }
 function runCompletionStateInvalidDir(config) {
@@ -29243,7 +29316,7 @@ function piExtraArgsDiagnostics(value) {
 }
 function safeExpandPath(value) {
   const text = readString(value);
-  return text ? resolve13(expandHomePath(text)) : null;
+  return text ? resolve14(expandHomePath(text)) : null;
 }
 function safeJsonObjectFromFile(filePath) {
   try {
@@ -29258,7 +29331,7 @@ function safeDirectorySummary(pathValue) {
     return { configured: false, available: false, entryCount: 0 };
   }
   try {
-    const stat = statSync9(pathValue);
+    const stat = statSync10(pathValue);
     if (!stat.isDirectory()) {
       return { configured: true, available: false, entryCount: 0, reason: "not_directory" };
     }
@@ -29292,7 +29365,7 @@ function safeSkillRootSummary(kind, source, pathValue) {
         if (name.startsWith(".")) continue;
         const skillDir = join16(pathValue, name);
         try {
-          if (!statSync9(skillDir).isDirectory()) continue;
+          if (!statSync10(skillDir).isDirectory()) continue;
           if (!existsSync15(join16(skillDir, "SKILL.md"))) continue;
           skillCount += 1;
           if (skillCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
@@ -29321,7 +29394,7 @@ function safeJsonConfigSummary(source, pathValue, counter) {
     return { source, configured: false, available: false, parseable: false };
   }
   try {
-    const stat = statSync9(pathValue);
+    const stat = statSync10(pathValue);
     if (!stat.isFile()) {
       return { source, configured: true, available: false, parseable: false, reason: "not_file" };
     }
@@ -29481,7 +29554,7 @@ function sourceAcquisitionPackageMetadata(packageName, location = "pi-config") {
   const packageBase = location === "runtime" ? readString(process.env.PI_RUNTIME_ROOT) : readString(process.env.PI_CODING_AGENT_DIR ?? process.env.PI_AGENT_HOME);
   if (!packageBase) return null;
   const packagePath = join16(
-    resolve13(expandHomePath(packageBase)),
+    resolve14(expandHomePath(packageBase)),
     ...location === "runtime" ? [] : ["npm"],
     "node_modules",
     ...packageName.split("/"),
@@ -29497,7 +29570,7 @@ function sourceAcquisitionBrowserExecutableReady() {
   const executable = readString(process.env.AMASTER_BROWSER_EXECUTABLE_PATH);
   if (!executable || !isAbsolute9(executable)) return false;
   try {
-    const stat = statSync9(executable);
+    const stat = statSync10(executable);
     return stat.isFile() && (stat.mode & 73) !== 0;
   } catch {
     return false;
@@ -29664,7 +29737,7 @@ function browserSessionRuntimeReadiness(config) {
 }
 var browserSessionBrokers = /* @__PURE__ */ new Map();
 function browserSessionBrokerFor(config) {
-  const key = resolve13(config.browserSessionStateRoot);
+  const key = resolve14(config.browserSessionStateRoot);
   let broker = browserSessionBrokers.get(key);
   if (!broker) {
     const { chromium } = daemonRequire("playwright-core");
@@ -29679,7 +29752,7 @@ function browserSessionBrokerFor(config) {
 }
 function browserSessionRuntimeStatus(config) {
   const readiness = browserSessionRuntimeReadiness(config);
-  const broker = browserSessionBrokers.get(resolve13(config.browserSessionStateRoot));
+  const broker = browserSessionBrokers.get(resolve14(config.browserSessionStateRoot));
   return broker ? { ...readiness, ...broker.status() } : readiness;
 }
 function runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSessionBroker) {
@@ -29687,6 +29760,8 @@ function runtimeAdvertisedCapabilities(config, sourceAcquisition, browserSession
     legacyConfiguredCapabilities: config.legacyConfiguredCapabilities,
     sourceAcquisition,
     browserSessionBroker,
+    templateCatalog: config.templateCatalog,
+    runtimeTemplatesRoot: config.runtimeTemplatesRoot,
     runnerKind: config.runnerKind,
     executors: config.executors
   });
@@ -29920,7 +29995,7 @@ ${authBlock}  -H 'content-type: application/json' \\
 # Control-plane side: create a command for daemon poll.
 COMMAND_ID="$(curl -fsS -X POST "$BASE_URL/api/amaster/runtime-connectors/$CONNECTOR_ID/commands" \\
 ${authBlock}  -H 'content-type: application/json' \\
-  --data-binary '{"commandType":"wakeup","requiredCapabilities":["run_wakeup","context_envelope_v1","managed_project_instructions_v1","final_model_context_attestation_v1","runtime_actions_v2"],"payload":{"smoke":true,"executorKind":"${smokeExecutorKind}"}}' | jq -r '.commandId')"
+  --data-binary '{"commandType":"wakeup","requiredCapabilities":["run_wakeup","context_envelope_v1","managed_project_instructions_v1","artifact_template_catalog_v1","final_model_context_attestation_v1","runtime_actions_v2"],"payload":{"smoke":true,"executorKind":"${smokeExecutorKind}"}}' | jq -r '.commandId')"
 echo "created command: $COMMAND_ID"
 
 # Daemon side: poll, ack, and complete the command.
@@ -30387,8 +30462,8 @@ async function sourceAcquisitionRuntimeProfile(config, command) {
     throw new Error("source_acquisition_profile_invalid");
   }
   const profileName2 = createHash16("sha256").update(`${companyId}\0${bindingId}\0${localOpaqueRef}`).digest("hex");
-  const stateRoot = resolve13(config.browserSessionStateRoot);
-  const userDataDir = resolve13(stateRoot, profileName2);
+  const stateRoot = resolve14(config.browserSessionStateRoot);
+  const userDataDir = resolve14(stateRoot, profileName2);
   if (!pathWithin3(userDataDir, stateRoot)) throw new Error("source_acquisition_browser_profile_invalid");
   const markerPath = join16(userDataDir, ".amaster-browser-session.json");
   if (!existsSync15(userDataDir) || lstatSync9(userDataDir).isSymbolicLink() || !lstatSync9(userDataDir).isDirectory() || !existsSync15(markerPath) || lstatSync9(markerPath).isSymbolicLink()) throw new Error("source_acquisition_browser_profile_invalid");
@@ -30454,7 +30529,7 @@ function safeAgentInstructionMaterializationTarget(workspace, filePath) {
   const segments = normalized.split("/").filter(Boolean);
   if (segments.length === 0 || segments.some((segment) => segment === "." || segment === "..")) return null;
   const relativePath = segments.join("/");
-  const targetPath = resolve13(workspace.cwd, relativePath);
+  const targetPath = resolve14(workspace.cwd, relativePath);
   if (!pathWithin3(targetPath, workspace.cwd)) return null;
   return { relativePath, targetPath };
 }
@@ -30568,7 +30643,7 @@ async function materializeEffectiveAgentInstructions(config, command, workspace,
   }
   const readBackFiles = Object.fromEntries(materialized.map((entry) => [
     entry.path,
-    readFileSync17(resolve13(workspace.cwd, entry.path), "utf8")
+    readFileSync17(resolve14(workspace.cwd, entry.path), "utf8")
   ]));
   if (stableInstructionFilesHash(readBackFiles) !== readString(instructionContract.contentHash)) {
     throw new Error("context_envelope_materialized_hash_mismatch");
@@ -30784,7 +30859,7 @@ function attachPiFinalContextAttestor(profile, input) {
   const receiptPath = join16(profile.profileRoot, "tmp", "final-model-context-receipt.json");
   const contract = {
     receiptPath,
-    projectInstructionPath: resolve13(input.cwd, "AGENTS.md"),
+    projectInstructionPath: resolve14(input.cwd, "AGENTS.md"),
     projectInstructionSha256: projectInstruction.sha256,
     provider: input.modelContextBudget.provider,
     model: input.modelContextBudget.model,
@@ -30831,6 +30906,7 @@ function buildExecutorEnv(config, command, workspace) {
     AMASTER_RUNTIME_WORKSPACE: cwd,
     AMASTER_RUNTIME_EXECUTION_WORKDIR: cwd,
     AMASTER_RUNTIME_SOURCE_WORKSPACE: workspaceContext.sourceWorkspacePath ?? cwd,
+    AMASTER_RUNTIME_TEMPLATES_ROOT: config.runtimeTemplatesRoot,
     ...workspaceContext.executorHome ? { AMASTER_RUNTIME_EXECUTOR_HOME: workspaceContext.executorHome } : {},
     ...commandUsesPiExecutor(command) ? { PI_TELEMETRY_TASK_RUN_ID: runId } : {},
     PAPERCLIP_RUN_ID: readString(runtimeAuth.runId) ?? runId,
@@ -30917,7 +30993,7 @@ function resolveNativeSessionRequest(command, workspace) {
     try {
       cwdMatched = realpathSync7(requestedCwd) === realpathSync7(sourceWorkspacePath);
     } catch {
-      cwdMatched = resolve13(requestedCwd) === resolve13(sourceWorkspacePath);
+      cwdMatched = resolve14(requestedCwd) === resolve14(sourceWorkspacePath);
     }
   }
   const used = Boolean(enabled && requested && sessionId && requestedCwd && cwdMatched);
@@ -31523,7 +31599,7 @@ function realOrResolvedPath(value) {
   try {
     return realpathSync7(value);
   } catch {
-    return resolve13(value);
+    return resolve14(value);
   }
 }
 var LSOF_COMMAND = process.platform === "darwin" && existsSync15("/usr/sbin/lsof") ? "/usr/sbin/lsof" : "lsof";
@@ -33419,7 +33495,7 @@ async function completeCommand(config, command, status, result3, error) {
 }
 function resultOutboxDir(config) {
   const explicit = readString(process.env.AMASTER_RESULT_OUTBOX_DIR);
-  if (explicit) return resolve13(expandHomePath(explicit));
+  if (explicit) return resolve14(expandHomePath(explicit));
   return join16(dirname11(stateFilePath(process.env)), "result-outbox");
 }
 function resultOutboxInvalidDir(config) {
@@ -33934,14 +34010,14 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       const file = asRecord(rawFile);
       const relativePath = safeCheckpointRelativePath(readString(file.path));
       if (!relativePath) throw new Error("issue checkpoint manifest contains an invalid file path");
-      const sourceCandidate = resolve13(filesRoot, relativePath);
-      const target = resolve13(workspaceRoot, relativePath);
+      const sourceCandidate = resolve14(filesRoot, relativePath);
+      const target = resolve14(workspaceRoot, relativePath);
       if (!pathWithin3(sourceCandidate, filesRoot) || !pathWithin3(target, workspaceRoot)) {
         throw new Error(`issue checkpoint path escapes its workspace: ${relativePath}`);
       }
       if (!existsSync15(sourceCandidate)) throw new Error(`issue checkpoint file is missing: ${relativePath}`);
       const source = realpathSync7(sourceCandidate);
-      if (!pathWithin3(source, filesRoot) || !statSync9(source).isFile()) {
+      if (!pathWithin3(source, filesRoot) || !statSync10(source).isFile()) {
         throw new Error(`issue checkpoint source escapes its storage root: ${relativePath}`);
       }
       const expectedSha256 = readString(file.sha256);
@@ -33949,7 +34025,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       if (!expectedSha256 || expectedByteSize === null || expectedByteSize <= 0) {
         throw new Error(`issue checkpoint evidence is incomplete: ${relativePath}`);
       }
-      if (hashFileSha256(source) !== expectedSha256 || statSync9(source).size !== expectedByteSize) {
+      if (hashFileSha256(source) !== expectedSha256 || statSync10(source).size !== expectedByteSize) {
         throw new Error(`issue checkpoint integrity mismatch: ${relativePath}`);
       }
       totalBytes += expectedByteSize;
@@ -34002,14 +34078,14 @@ async function saveIssueCheckpoint(config, command, workspace, candidates) {
   for (const candidate of candidates.slice(0, 20)) {
     const relativePath = safeCheckpointRelativePath(candidate.rawPath);
     const source = readString(candidate.filePath);
-    if (!relativePath || !source || !existsSync15(source) || !statSync9(source).isFile()) continue;
+    if (!relativePath || !source || !existsSync15(source) || !statSync10(source).isFile()) continue;
     const ownedSource = realpathSync7(source);
     if (!pathWithin3(ownedSource, workspaceRoot)) {
       throw new Error(`issue checkpoint source escapes its execution workspace: ${relativePath}`);
     }
-    const byteSize = statSync9(ownedSource).size;
+    const byteSize = statSync10(ownedSource).size;
     if (byteSize <= 0 || totalBytes + byteSize > MAX_CHECKPOINT_BYTES) continue;
-    const target = resolve13(filesDir, relativePath);
+    const target = resolve14(filesDir, relativePath);
     if (!pathWithin3(target, filesDir)) continue;
     mkdirSync10(dirname11(target), { recursive: true });
     copyFileSync2(ownedSource, target);
@@ -34268,7 +34344,7 @@ async function executeRunCommand(config, command) {
       const sharedPiHome = readString(process.env.PI_CODING_AGENT_DIR) ?? readString(process.env.PI_AGENT_HOME) ?? null;
       let agentDir = managedMcpProfile ? readString(managedMcpProfile.env.PI_CODING_AGENT_DIR) ?? readString(managedMcpProfile.env.PI_AGENT_HOME) ?? null : desktopDelegatedRunnerEnabled(config) ? readString(executorEnv.PI_AGENT_HOME) ?? readString(executorEnv.PI_CODING_AGENT_DIR) ?? null : readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
       piAgentDirForContextBudget = agentDir;
-      if (agentDir && sharedPiHome && resolve13(agentDir) === resolve13(sharedPiHome)) {
+      if (agentDir && sharedPiHome && resolve14(agentDir) === resolve14(sharedPiHome)) {
         agentDir = null;
       }
       try {
@@ -34655,7 +34731,7 @@ async function executeRunCommand(config, command) {
           workspace,
           workspaceStatus.artifacts.map((artifact) => ({
             rawPath: artifact.relativePath,
-            filePath: resolve13(cwd, artifact.relativePath)
+            filePath: resolve14(cwd, artifact.relativePath)
           }))
         ) : null;
         nativeSessionRollout = {
@@ -35110,20 +35186,25 @@ function reconcileStaleManagedMcpProfiles(config) {
   }
 }
 async function runOnce(config) {
-  const templates = materializeRuntimePresetTemplates(process.env);
+  const templates = materializeRuntimePresetTemplates({
+    targetDir: config.runtimeTemplatesRoot,
+    executorIdentity: config.runnerKind === "cloud_managed" && config.piExecutorUid > 0 ? { uid: config.piExecutorUid, gid: config.piExecutorGid } : null
+  });
   if (templates.status === "ready") {
     process.stderr.write(`MirrorX preset templates ready: files=${templates.fileCount} target=${templates.targetDir}
 `);
   }
+  config = { ...config, templateCatalog: templates };
   reconcileStaleManagedMcpProfiles(config);
   config = await ensureRegistered(config);
+  config = { ...config, templateCatalog: templates };
   try {
     await heartbeat(config, { logMode: "compact" });
   } catch (err) {
     if (!hasConnectorAuth(config) && isConnectorAuthFailure(err)) {
       process.stderr.write("AMaster daemon heartbeat was rejected without connector auth; re-registering once.\n");
       await register(config, { quiet: true });
-      config = buildConfig(process.env, {});
+      config = { ...buildConfig(process.env, {}), templateCatalog: templates };
       await heartbeat(config, { logMode: "compact" });
     } else {
       throw err;
@@ -35240,21 +35321,26 @@ function statusSummary(config) {
 `);
 }
 async function runLoop(config) {
-  const templates = materializeRuntimePresetTemplates(process.env);
+  const templates = materializeRuntimePresetTemplates({
+    targetDir: config.runtimeTemplatesRoot,
+    executorIdentity: config.runnerKind === "cloud_managed" && config.piExecutorUid > 0 ? { uid: config.piExecutorUid, gid: config.piExecutorGid } : null
+  });
   if (templates.status === "ready") {
     process.stderr.write(`MirrorX preset templates ready: files=${templates.fileCount} target=${templates.targetDir}
 `);
   }
+  config = { ...config, templateCatalog: templates };
   process.stderr.write(
     `AMaster daemon runtime safety controls resolved: pi_guard_mode=${config.piToolArgumentGuard.mode}
 `
   );
   reconcileStaleManagedMcpProfiles(config);
   config = await ensureRegistered(config);
+  config = { ...config, templateCatalog: templates };
   let startupOrphanCheckPending = true;
   for (; ; ) {
     try {
-      config = buildConfig(process.env, {});
+      config = { ...buildConfig(process.env, {}), templateCatalog: templates };
       maybeRunOrphanReaper(config, { force: startupOrphanCheckPending });
       await dispatchAvailableCommands(config, startupOrphanCheckPending ? { orphanCheck: "startup" } : {});
       startupOrphanCheckPending = false;
@@ -35264,7 +35350,7 @@ async function runLoop(config) {
 ${message}
 `);
     }
-    await new Promise((resolve14) => setTimeout(resolve14, config.pollIntervalSeconds * 1e3));
+    await new Promise((resolve15) => setTimeout(resolve15, config.pollIntervalSeconds * 1e3));
   }
 }
 function help() {
@@ -35291,7 +35377,7 @@ Key env:
   AMASTER_NETWORK_DOMAINS, AMASTER_CONNECTOR_ID, AMASTER_DAEMON_STATE_FILE,
   AMASTER_MAX_CONCURRENT_COMMANDS, AMASTER_EXECUTOR_MAX_RSS_MB (default 0, disabled),
   AMASTER_RUNTIME_ORPHAN_REAPER_INTERVAL_SECONDS (default 300, set 0 to disable),
-  AMASTER_RUNTIME_TEMPLATES_ROOT (optional; defaults to /data/templates in pi-cli-runtime)
+  AMASTER_RUNTIME_TEMPLATES_ROOT (optional; defaults to /data/templates for managed Pi, otherwise <runtime-home>/templates)
 `);
 }
 async function main() {

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.136";
+const CONNECTOR_VERSION = "0.1.1-beta.138";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.136",
+  "version": "0.1.1-beta.138",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",