@amaster.ai/employee-runtime-connector 0.1.1-beta.156 → 0.1.1-beta.158

package/dist/amaster-runtime-daemon.mjs

@@ -4121,7 +4121,13 @@ var source_acquisition_compatibility_default = {
       "source_acquisition_prompt_authority_invalid",
       "source_acquisition_direct_tools_unavailable",
       "source_acquisition_profile_canonicalization_failed",
-      "source_acquisition_governed_profile_required"
+      "source_acquisition_governed_profile_required",
+      "context_output_reserve_exceeds_model_limit",
+      "model_context_attestation_unavailable",
+      "model_context_fixed_inputs_exceed_budget",
+      "native_session_history_attestation_invalid",
+      "native_session_history_attestation_unavailable",
+      "native_session_history_exceeds_measurement_limit"
     ],
     reasonCodes: [
       "source_profile_setup_failed",
@@ -11204,6 +11210,22 @@ var issueDeliveryAcceptanceGovernanceFindingSchema = external_exports.object({
   code: external_exports.literal("business_outcome_acceptance_policy_mismatch"),
   message: external_exports.string().min(1)
 }).strict();
+var terminalProducerBlockingRefSchema = external_exports.object({
+  kind: external_exports.enum(["action_call", "artifact_intent", "tool_invocation"]),
+  id: uuidSchema3,
+  status: external_exports.string().min(1),
+  code: external_exports.string().min(1).nullable()
+}).strict();
+var terminalProducerCleanlinessSchema = external_exports.object({
+  clean: external_exports.boolean(),
+  reasonCode: external_exports.enum([
+    "terminal_producer_action_rejected",
+    "terminal_producer_effect_pending",
+    "terminal_producer_effect_unknown"
+  ]).nullable(),
+  diagnosticCode: external_exports.literal("terminal_producer_correlation_unknown").nullable(),
+  blockingRefs: external_exports.array(terminalProducerBlockingRefSchema)
+}).strict();
 var issueDeliveryColdStartFactCoverageContextSchema = external_exports.object({
   worksetId: uuidSchema3,
   worksetItemId: uuidSchema3,
@@ -11229,13 +11251,22 @@ var issueDeliveryAcceptanceReadModelSchema = external_exports.object({
   outcome: external_exports.object({
     current: runtimeBusinessOutcomeReceiptSchema.nullable(),
     latestAcceptance: runtimeBusinessOutcomeAcceptanceRecordSchema.nullable(),
-    acceptanceIsCurrent: external_exports.boolean()
+    acceptanceIsCurrent: external_exports.boolean(),
+    terminalProducerCleanliness: terminalProducerCleanlinessSchema.nullable().optional()
   }).strict(),
   pendingInteractions: external_exports.array(issueDeliveryAcceptancePendingInteractionSchema),
   forceDone: issueForceDoneEvidenceSchema.nullable(),
   nextOwner: issueDeliveryAcceptanceNextOwnerSchema,
   coldStartFactCoverage: issueDeliveryColdStartFactCoverageContextSchema.nullable().default(null)
 }).strict();
+var issueDeliveryAcceptanceReconciliationResponseSchema = external_exports.object({
+  result: external_exports.object({
+    outcome: external_exports.enum(["created", "replayed", "not_eligible", "missing_issue"]),
+    interactionId: uuidSchema3.nullable(),
+    reason: external_exports.string().nullable()
+  }).strict(),
+  deliveryAcceptance: issueDeliveryAcceptanceReadModelSchema
+}).strict();
 
 // ../shared/src/operating-accounting.ts
 var OPERATING_IDENTITY_MAPPING_VERSION = "operating-identity-v1";
@@ -29011,12 +29042,113 @@ function summarizeAmasterRuntimeVersionDrift(input = {}) {
 
 // src/amaster-runtime-daemon/pi-context-budget.mjs
 import { readFileSync as readFileSync16 } from "node:fs";
+var CONTEXT_ERROR_CODES = /* @__PURE__ */ new Set([
+  "context_output_reserve_exceeds_model_limit",
+  "model_context_attestation_unavailable",
+  "model_context_fixed_inputs_exceed_budget",
+  "native_session_history_attestation_invalid",
+  "native_session_history_attestation_unavailable",
+  "native_session_history_exceeds_measurement_limit"
+]);
+var USAGE_FIELDS = Object.freeze({
+  input: ["inputTokens", "input_tokens", "input"],
+  cachedInput: ["cachedInputTokens", "cached_input_tokens", "cacheRead"],
+  cacheCreationInput: ["cacheCreationInputTokens", "cache_creation_input_tokens", "cacheWrite"],
+  output: ["outputTokens", "output_tokens", "output"],
+  total: ["totalTokens", "total_tokens"]
+});
 function record6(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function stringValue(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
+function stableContextError(code, details = "") {
+  if (!CONTEXT_ERROR_CODES.has(code)) {
+    throw new Error("context_error_code_invalid");
+  }
+  const error = new Error(details ? `${code}: ${details}` : code);
+  Object.defineProperty(error, "code", {
+    configurable: false,
+    enumerable: true,
+    value: code,
+    writable: false
+  });
+  return error;
+}
+function contextErrorCodeFromMessage(message) {
+  if (typeof message !== "string") return null;
+  const code = message.match(
+    /^((?:model_context|native_session_history|context_output_reserve)_[a-z0-9_]{1,109})(?::|$)/
+  )?.[1];
+  return code && /^[a-z][a-z0-9_]{0,127}$/.test(code) ? code : null;
+}
+function assertPiModelContextAttestationInputs(managedMcpProfile, piAgentDir) {
+  if (!managedMcpProfile || !stringValue(piAgentDir)) {
+    throw stableContextError(
+      "model_context_attestation_unavailable",
+      "managed Pi profile or Pi config home is missing"
+    );
+  }
+}
+function aliasedUsageInteger(usage, aliases, label) {
+  const entries = aliases.filter((key) => Object.prototype.hasOwnProperty.call(usage, key)).map((key) => usage[key]);
+  if (entries.length === 0) return { present: false, value: 0 };
+  if (entries.some((value) => typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)) {
+    throw stableContextError(
+      "native_session_history_attestation_invalid",
+      `usage ${label} must be a non-negative safe integer`
+    );
+  }
+  if (entries.some((value) => value !== entries[0])) {
+    throw stableContextError(
+      "native_session_history_attestation_invalid",
+      `usage ${label} aliases disagree`
+    );
+  }
+  return { present: true, value: entries[0] };
+}
+function piUsageTotal(usageValue) {
+  const usage = record6(usageValue);
+  const input = aliasedUsageInteger(usage, USAGE_FIELDS.input, "input");
+  const cachedInput = aliasedUsageInteger(usage, USAGE_FIELDS.cachedInput, "cached input");
+  const cacheCreationInput = aliasedUsageInteger(
+    usage,
+    USAGE_FIELDS.cacheCreationInput,
+    "cache creation input"
+  );
+  const output = aliasedUsageInteger(usage, USAGE_FIELDS.output, "output");
+  const total = aliasedUsageInteger(usage, USAGE_FIELDS.total, "total");
+  if (![input, cachedInput, cacheCreationInput, output, total].some((field) => field.present)) {
+    return null;
+  }
+  if (!input.present && !total.present) {
+    throw stableContextError(
+      "native_session_history_attestation_invalid",
+      "usage requires input or explicit total tokens"
+    );
+  }
+  const componentTotal = input.value + cachedInput.value + cacheCreationInput.value + output.value;
+  if (!Number.isSafeInteger(componentTotal)) {
+    throw stableContextError(
+      "native_session_history_attestation_invalid",
+      "usage component total exceeds the safe integer range"
+    );
+  }
+  return Math.max(componentTotal, total.present ? total.value : 0);
+}
+function usageFromContainer(containerValue) {
+  const container = record6(containerValue);
+  if (!Object.prototype.hasOwnProperty.call(container, "usage")) return null;
+  const usage = container.usage;
+  if (!usage || typeof usage !== "object" || Array.isArray(usage)) {
+    throw stableContextError(
+      "native_session_history_attestation_invalid",
+      "usage must be an object"
+    );
+  }
+  return usage;
+}
 function measureRestoredPiNativeHistory(managedMcpProfile) {
   const restored = record6(managedMcpProfile?.restoredNativeSession);
   const rolloutPath = stringValue(restored.rolloutPath);
@@ -29026,7 +29158,10 @@ function measureRestoredPiNativeHistory(managedMcpProfile) {
   const rollout = readFileSync16(rolloutPath);
   const maximumRolloutBytes = 64 * 1024 * 1024;
   if (rollout.byteLength > maximumRolloutBytes) {
-    throw new Error(`native_session_history_exceeds_measurement_limit: bytes=${rollout.byteLength}`);
+    throw stableContextError(
+      "native_session_history_exceeds_measurement_limit",
+      `bytes=${rollout.byteLength}`
+    );
   }
   let latestUsageTokens = null;
   for (const line of rollout.toString("utf8").split("\n")) {
@@ -29035,27 +29170,27 @@ function measureRestoredPiNativeHistory(managedMcpProfile) {
     try {
       event = JSON.parse(line);
     } catch {
-      throw new Error("native_session_history_attestation_invalid: rollout contains invalid JSONL");
+      throw stableContextError(
+        "native_session_history_attestation_invalid",
+        "rollout contains invalid JSONL"
+      );
     }
-    const candidates = [
-      record6(event.usage),
-      record6(record6(event.message).usage),
-      record6(record6(event.turn).usage)
-    ];
-    for (const usage of candidates) {
-      const inputTokens = Number(usage.inputTokens ?? usage.input_tokens ?? usage.input);
-      const outputTokens = Number(usage.outputTokens ?? usage.output_tokens ?? usage.output ?? 0);
-      if (Number.isSafeInteger(inputTokens) && inputTokens >= 0 && Number.isSafeInteger(outputTokens) && outputTokens >= 0) {
-        latestUsageTokens = inputTokens + outputTokens;
-      }
+    for (const container of [event, event.message, event.turn]) {
+      const usage = usageFromContainer(container);
+      if (!usage) continue;
+      const usageTotal = piUsageTotal(usage);
+      if (usageTotal !== null) latestUsageTokens = usageTotal;
     }
   }
   if (!Number.isSafeInteger(latestUsageTokens)) {
-    throw new Error("native_session_history_attestation_unavailable: rollout has no usage-bearing turn");
+    throw stableContextError(
+      "native_session_history_attestation_unavailable",
+      "rollout has no usage-bearing turn"
+    );
   }
   return {
     status: "restored_measured",
-    tokens: Math.max(rollout.byteLength, latestUsageTokens),
+    tokens: latestUsageTokens,
     rolloutBytes: rollout.byteLength,
     usageTokens: latestUsageTokens
   };
@@ -29067,19 +29202,26 @@ function resolvePiModelContextBudget({
   managedMcpProfile
 }) {
   if (outputReserveTokens > modelContext.maxOutputTokens) {
-    throw new Error(
-      `context_output_reserve_exceeds_model_limit: reserve=${outputReserveTokens} modelMax=${modelContext.maxOutputTokens}`
+    throw stableContextError(
+      "context_output_reserve_exceeds_model_limit",
+      `reserve=${outputReserveTokens} modelMax=${modelContext.maxOutputTokens}`
     );
   }
   const instructionBytes = [...finalAgentInstructionFiles.values()].reduce((total, entry) => total + Number(entry.byteSize ?? 0), 0);
   const profileAttestation = record6(managedMcpProfile?.attestation);
   const toolSchemaBytes = Number(profileAttestation.finalEffectiveToolSchemaBytes);
   if (!Number.isSafeInteger(toolSchemaBytes) || toolSchemaBytes < 1) {
-    throw new Error("model_context_attestation_unavailable: final tool schema size is missing");
+    throw stableContextError(
+      "model_context_attestation_unavailable",
+      "final tool schema size is missing"
+    );
   }
   const skillMetadataBytes = Number(profileAttestation.enabledSkillMetadataBytes ?? 0);
   if (!Number.isSafeInteger(skillMetadataBytes) || skillMetadataBytes < 0) {
-    throw new Error("model_context_attestation_unavailable: skill metadata size is invalid");
+    throw stableContextError(
+      "model_context_attestation_unavailable",
+      "skill metadata size is invalid"
+    );
   }
   const nativeHistory = measureRestoredPiNativeHistory(managedMcpProfile);
   const executorBaseReserveTokens = Math.max(32768, Math.floor(modelContext.contextWindowTokens * 0.05));
@@ -29088,8 +29230,16 @@ function resolvePiModelContextBudget({
   const dynamicInputTokens = modelContext.contextWindowTokens - outputReserveTokens - executorBaseReserveTokens - nativeHistoryReserveTokens - knownFixedInputTokens;
   const dynamicPromptMaxChars = Math.floor(dynamicInputTokens / 4);
   if (dynamicPromptMaxChars < 8192) {
-    throw new Error(
-      `model_context_fixed_inputs_exceed_budget: context=${modelContext.contextWindowTokens} fixed=${knownFixedInputTokens}`
+    throw stableContextError(
+      "model_context_fixed_inputs_exceed_budget",
+      [
+        `context=${modelContext.contextWindowTokens}`,
+        `output=${outputReserveTokens}`,
+        `base=${executorBaseReserveTokens}`,
+        `history=${nativeHistoryReserveTokens}`,
+        `fixed=${knownFixedInputTokens}`,
+        `dynamic=${dynamicInputTokens}`
+      ].join(" ")
     );
   }
   return {
@@ -30278,7 +30428,7 @@ function createSourceCompletionStopPolicy({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.156";
+var CONNECTOR_VERSION = "0.1.1-beta.158";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY2 = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);
@@ -31859,10 +32009,18 @@ function attachPiOutputReserve(profile, outputReserveTokens) {
   return profile;
 }
 function attachPiFinalContextAttestor(profile, input) {
-  if (!profile?.profileRoot) throw new Error("model_context_attestation_unavailable: managed Pi profile is missing");
+  if (!profile?.profileRoot) {
+    throw stableContextError(
+      "model_context_attestation_unavailable",
+      "managed Pi profile is missing"
+    );
+  }
   const projectInstruction = input.finalAgentInstructionFiles.get("AGENTS.md");
   if (!projectInstruction || !/^[a-f0-9]{64}$/.test(readString(projectInstruction.sha256) ?? "")) {
-    throw new Error("model_context_attestation_unavailable: final AGENTS.md receipt is missing");
+    throw stableContextError(
+      "model_context_attestation_unavailable",
+      "final AGENTS.md receipt is missing"
+    );
   }
   const extensionPath = join18(profile.profileRoot, "extensions", MANAGED_PI_FINAL_CONTEXT_ATTESTOR_FILENAME);
   const projectInstructionExtensionPath = join18(
@@ -33425,7 +33583,7 @@ function commandFailureErrorCode(error) {
   const explicit = readString(asRecord(error).code);
   if (explicit && /^[a-z][a-z0-9_]{0,127}$/.test(explicit)) return explicit;
   const message = error instanceof Error ? error.message : String(error);
-  const prefix = message.match(/^(codex_managed_mcp_[a-z0-9_]{1,109})(?::|$)/)?.[1];
+  const prefix = message.match(/^(codex_managed_mcp_[a-z0-9_]{1,109})(?::|$)/)?.[1] ?? contextErrorCodeFromMessage(message);
   return prefix && /^[a-z][a-z0-9_]{0,127}$/.test(prefix) ? prefix : null;
 }
 function terminalCommandStatusFromCompletionCheckError(error) {
@@ -35536,9 +35694,7 @@ async function executeRunCommand(config, command) {
             }
           };
         }
-        if (!managedMcpProfile || !piAgentDirForContextBudget) {
-          throw new Error("model_context_attestation_unavailable: managed Pi profile or Pi config home is missing");
-        }
+        assertPiModelContextAttestationInputs(managedMcpProfile, piAgentDirForContextBudget);
         const modelContext = resolvePiRunModelContext(
           piAgentDirForContextBudget,
           readString(process.env.AMASTER_PI_PROVIDER),

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.156";
+const CONNECTOR_VERSION = "0.1.1-beta.158";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/dist/source-acquisition-compatibility.json

@@ -67,7 +67,13 @@
       "source_acquisition_prompt_authority_invalid",
       "source_acquisition_direct_tools_unavailable",
       "source_acquisition_profile_canonicalization_failed",
-      "source_acquisition_governed_profile_required"
+      "source_acquisition_governed_profile_required",
+      "context_output_reserve_exceeds_model_limit",
+      "model_context_attestation_unavailable",
+      "model_context_fixed_inputs_exceed_budget",
+      "native_session_history_attestation_invalid",
+      "native_session_history_attestation_unavailable",
+      "native_session_history_exceeds_measurement_limit"
     ],
     "reasonCodes": [
       "source_profile_setup_failed",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.156",
+  "version": "0.1.1-beta.158",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",