@amaster.ai/employee-runtime-connector 0.1.1-beta.16 → 0.1.1-beta.18

package/dist/amaster-runtime-daemon.mjs

@@ -2183,6 +2183,42 @@ function insertSingleMissingObjectPropertyComma(value) {
     return value;
   }
 }
+function appendSingleMissingClosingDelimiter(value) {
+  const stack = [];
+  let inString = false;
+  let escaped = false;
+  for (const character of value) {
+    if (inString) {
+      if (escaped) {
+        escaped = false;
+      } else if (character === "\\") {
+        escaped = true;
+      } else if (character === '"') {
+        inString = false;
+      }
+      continue;
+    }
+    if (character === '"') {
+      inString = true;
+      continue;
+    }
+    if (character === "{" || character === "[") {
+      stack.push(character);
+      continue;
+    }
+    if (character === "}" || character === "]") {
+      const expected = character === "}" ? "{" : "[";
+      if (stack.pop() !== expected) return value;
+    }
+  }
+  if (inString || stack.length !== 1) return value;
+  const candidate = `${value}${stack[0] === "{" ? "}" : "]"}`;
+  try {
+    return isJsonObject(JSON.parse(candidate)) ? candidate : value;
+  } catch {
+    return value;
+  }
+}
 function normalizePiMcpProxyArgs(value) {
   if (typeof value !== "string") return { value, repaired: false };
   try {
@@ -2200,7 +2236,9 @@ function normalizePiMcpProxyArgs(value) {
       }
     }
     const commaRepairedValue = insertSingleMissingObjectPropertyComma(repairedControlCharacters);
-    return commaRepairedValue !== value ? { value: commaRepairedValue, repaired: true } : { value, repaired: false };
+    if (commaRepairedValue !== value) return { value: commaRepairedValue, repaired: true };
+    const closingDelimiterRepairedValue = appendSingleMissingClosingDelimiter(repairedControlCharacters);
+    return closingDelimiterRepairedValue !== value ? { value: closingDelimiterRepairedValue, repaired: true } : { value, repaired: false };
   }
 }
 function registerManagedPiMcpArgsNormalizer(pi) {
@@ -2216,6 +2254,7 @@ function managedPiMcpArgsNormalizerExtensionSource() {
     escapeLiteralJsonStringControlCharacters.toString(),
     escapeLikelyLiteralJsonStringQuotes.toString(),
     insertSingleMissingObjectPropertyComma.toString(),
+    appendSingleMissingClosingDelimiter.toString(),
     normalizePiMcpProxyArgs.toString(),
     `export default ${registerManagedPiMcpArgsNormalizer.toString()};`,
     ""
@@ -2469,6 +2508,11 @@ function createManagedPiMcpProfileApi(options = {}) {
     "amaster.read_company_diagnosis",
     "amaster.publish_company_diagnosis_brief"
   ]);
+  const DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES = /* @__PURE__ */ new Set([
+    "wiki_search",
+    "wiki_read_page",
+    "wiki_list_pages"
+  ]);
   const HYBRID_DIRECT_TYPED_V1_TOOL_NAMES = /* @__PURE__ */ new Set([
     "amaster.read_company_snapshot",
     "runtime_action.describe",
@@ -2481,29 +2525,6 @@ function createManagedPiMcpProfileApi(options = {}) {
   const MINIMUM_MCP_ADAPTER_VERSION = [2, 6, 1];
   const MANAGED_BROWSER_USE_PACKAGE = "@amaster.ai/pi-browser-use";
   const MANAGED_BROWSER_USE_PLUGIN = "browser-use";
-  const MANAGED_WEB_ACCESS_PACKAGE = "@amaster.ai/pi-web-access";
-  const MANAGED_TELEMETRY_PACKAGE = "@amaster.ai/pi-telemetry";
-  const MANAGED_TELEMETRY_ENV_NAMES = [
-    "PI_TELEMETRY_TASK_RUN_ID",
-    "PI_TELEMETRY_SERVICE_NAME",
-    "PI_TELEMETRY_SERVICE_VERSION",
-    "PI_TELEMETRY_INCLUDE_PAYLOADS",
-    "PI_TELEMETRY_LANGFUSE_ENABLED",
-    "PI_TELEMETRY_LANGFUSE_PUBLIC_KEY",
-    "PI_TELEMETRY_LANGFUSE_SECRET_KEY",
-    "PI_TELEMETRY_LANGFUSE_BASE_URL",
-    "PI_TELEMETRY_LANGFUSE_FLUSH_AT",
-    "PI_TELEMETRY_LANGFUSE_FLUSH_INTERVAL_MS",
-    "PI_TELEMETRY_OTEL_ENABLED",
-    "PI_TELEMETRY_OTEL_ENDPOINT",
-    "PI_TELEMETRY_OTEL_HEADERS",
-    "PI_TELEMETRY_OTEL_FLUSH_AT",
-    "PI_TELEMETRY_OTEL_FLUSH_INTERVAL_MS"
-  ];
-  const MANAGED_TELEMETRY_PROTECTED_ENV_NAMES = [
-    "PI_TELEMETRY_LANGFUSE_SECRET_KEY",
-    "PI_TELEMETRY_OTEL_HEADERS"
-  ];
   const MANAGED_BROWSER_USE_BOOLEAN_SETTINGS = [
     "headless",
     "categoryNetwork",
@@ -2530,6 +2551,12 @@ function createManagedPiMcpProfileApi(options = {}) {
     "AMASTER-CLI_CODING_AGENT_SESSION_DIR",
     "PI_AGENT_MCP_SERVERS_FILE"
   ]);
+  const RUN_OWNED_SETTINGS_ENV = /* @__PURE__ */ new Set([
+    ...FORBIDDEN_COMMAND_ENV2,
+    "MCP_DIRECT_TOOLS",
+    "PAPERCLIP_API_KEY",
+    "AMASTER_BOARD_API_KEY"
+  ]);
   const ALLOWED_COMMAND_ENV2 = new Set(MANAGED_PI_PROVIDER_ENV_NAMES);
   const SAFE_INHERITED_ENV2 = /* @__PURE__ */ new Set([
     "PATH",
@@ -2555,8 +2582,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     "PAPERCLIP_TASK_ID",
     "PAPERCLIP_AGENT_ID",
     "PAPERCLIP_COMPANY_ID",
-    "AMASTER_EMPLOYEE_COMPANY_ID",
-    ...MANAGED_TELEMETRY_ENV_NAMES
+    "AMASTER_EMPLOYEE_COMPANY_ID"
   ]);
   const FORBIDDEN_ARGV = /* @__PURE__ */ new Set([
     "--no-tools",
@@ -2731,8 +2757,9 @@ function createManagedPiMcpProfileApi(options = {}) {
       throw new Error("pi_managed_mcp_invalid: direct tool catalog schema mismatch");
     }
     const tools = Array.isArray(catalog.tools) ? catalog.tools.map(record8) : [];
-    const admittedToolNames = mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE ? HYBRID_DIRECT_TYPED_V1_TOOL_NAMES : DIRECT_TYPED_V1_TOOL_NAMES;
-    if (tools.length !== admittedToolNames.size) {
+    const admittedToolNames = mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE ? HYBRID_DIRECT_TYPED_V1_TOOL_NAMES : /* @__PURE__ */ new Set([...DIRECT_TYPED_V1_TOOL_NAMES, ...DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES]);
+    const directTypedSizeValid = mcpToolMode !== MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE || tools.length === DIRECT_TYPED_V1_TOOL_NAMES.size || tools.length === DIRECT_TYPED_V1_TOOL_NAMES.size + DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES.size;
+    if (!directTypedSizeValid || mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE && tools.length !== admittedToolNames.size) {
       throw new Error("pi_managed_mcp_invalid: direct tool catalog size mismatch");
     }
     const names = /* @__PURE__ */ new Set();
@@ -2777,6 +2804,15 @@ function createManagedPiMcpProfileApi(options = {}) {
         effectiveSchemaHash: stablePiToolSchemaHash(inputSchema, { adapterNormalized: true })
       };
     });
+    if (mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE) {
+      for (const name of DIRECT_TYPED_V1_TOOL_NAMES) {
+        if (!names.has(name)) throw new Error("pi_managed_mcp_invalid: direct tool catalog name mismatch");
+      }
+      const wikiReadCount = [...DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES].filter((name) => names.has(name)).length;
+      if (wikiReadCount !== 0 && wikiReadCount !== DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES.size) {
+        throw new Error("pi_managed_mcp_invalid: diagnosis wiki read catalog incomplete");
+      }
+    }
     const setHash = stablePiDirectCatalogSetHash(normalized.map((tool) => ({
       name: tool.name,
       exposedName: tool.exposedName,
@@ -2877,13 +2913,38 @@ function createManagedPiMcpProfileApi(options = {}) {
     return /^(?:(?:access|refresh|id)_)?token$/.test(normalized) || normalized.includes("api_key") || normalized.includes("secret") || normalized.includes("password") || normalized.includes("credential") || normalized.includes("authorization") || normalized.includes("cookie");
   }
   function collectAuthSecretStrings2(value, output = []) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) return output;
+    if (!value || typeof value !== "object") return output;
+    if (Array.isArray(value)) {
+      for (const entry of value) collectAuthSecretStrings2(entry, output);
+      return output;
+    }
     for (const [key, entry] of Object.entries(value)) {
       if (typeof entry === "string" && entry && isSensitiveAuthKey2(key)) output.push(entry);
-      else if (entry && typeof entry === "object" && !Array.isArray(entry)) collectAuthSecretStrings2(entry, output);
+      else if (entry && typeof entry === "object") collectAuthSecretStrings2(entry, output);
     }
     return output;
   }
+  function referencedSettingsEnvironment(settings, baseEnv) {
+    const names = /* @__PURE__ */ new Set();
+    const visit = (value) => {
+      if (typeof value === "string") {
+        for (const match of value.matchAll(/\$(?:\{([A-Za-z_][A-Za-z0-9_]*)(?::-[^}]*)?\}|([A-Za-z_][A-Za-z0-9_]*))/g)) {
+          names.add(match[1] ?? match[2]);
+        }
+      } else if (Array.isArray(value)) {
+        for (const entry of value) visit(entry);
+      } else if (value && typeof value === "object") {
+        for (const entry of Object.values(value)) visit(entry);
+      }
+    };
+    visit(settings);
+    const env = {};
+    for (const name of names) {
+      if (RUN_OWNED_SETTINGS_ENV.has(name)) continue;
+      if (typeof baseEnv?.[name] === "string" && baseEnv[name]) env[name] = baseEnv[name];
+    }
+    return env;
+  }
   function assertInvocationIsolation2(input) {
     for (const name of Object.keys(record8(input.commandEnv))) {
       if (FORBIDDEN_COMMAND_ENV2.has(name)) throw new Error(`pi_managed_mcp_env_override_blocked: ${name}`);
@@ -2993,49 +3054,7 @@ function createManagedPiMcpProfileApi(options = {}) {
       }
     };
   }
-  function selectManagedWebAccess(sourceSettings, npmSource) {
-    const packageSpec = Array.isArray(sourceSettings.packages) ? sourceSettings.packages.find((entry) => npmPackageName(entry) === MANAGED_WEB_ACCESS_PACKAGE) : null;
-    if (typeof packageSpec !== "string") return null;
-    const packagePath = join4(npmSource, "node_modules", ...MANAGED_WEB_ACCESS_PACKAGE.split("/"), "package.json");
-    if (!existsSync3(packagePath) || lstatSync2(packagePath).isSymbolicLink() || !lstatSync2(packagePath).isFile()) {
-      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package is unavailable`);
-    }
-    let packageMetadata;
-    try {
-      packageMetadata = JSON.parse(readFileSync3(packagePath, "utf8"));
-    } catch {
-      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package metadata is invalid`);
-    }
-    if (!packageMetadata || packageMetadata.name !== MANAGED_WEB_ACCESS_PACKAGE) {
-      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_WEB_ACCESS_PACKAGE} package identity mismatch`);
-    }
-    return {
-      packageSpec,
-      config: record8(sourceSettings["pi-web-access"])
-    };
-  }
-  function selectManagedTelemetry(sourceSettings, npmSource) {
-    const packageSpec = Array.isArray(sourceSettings.packages) ? sourceSettings.packages.find((entry) => npmPackageName(entry) === MANAGED_TELEMETRY_PACKAGE) : null;
-    if (typeof packageSpec !== "string") return null;
-    const packagePath = join4(npmSource, "node_modules", ...MANAGED_TELEMETRY_PACKAGE.split("/"), "package.json");
-    if (!existsSync3(packagePath) || lstatSync2(packagePath).isSymbolicLink() || !lstatSync2(packagePath).isFile()) {
-      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_TELEMETRY_PACKAGE} package is unavailable`);
-    }
-    let packageMetadata;
-    try {
-      packageMetadata = JSON.parse(readFileSync3(packagePath, "utf8"));
-    } catch {
-      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_TELEMETRY_PACKAGE} package metadata is invalid`);
-    }
-    if (packageMetadata.name !== MANAGED_TELEMETRY_PACKAGE) {
-      throw new Error(`pi_managed_mcp_attestation_failed: configured ${MANAGED_TELEMETRY_PACKAGE} package identity mismatch`);
-    }
-    return {
-      packageSpec,
-      config: record8(sourceSettings["pi-telemetry"])
-    };
-  }
-  function seedPiRuntime(sourceHome, agentDir, sourceAcquisition = null, mcpToolMode = MANAGED_PI_MCP_TOOL_MODE) {
+  function seedPiRuntime(sourceHome, agentDir, sourceAcquisition = null, mcpToolMode = MANAGED_PI_MCP_TOOL_MODE, baseEnv = {}) {
     const source = resolve2(nonEmpty2(sourceHome, "sourcePiHome"));
     const sourceStat = lstatSync2(source);
     if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
@@ -3063,30 +3082,20 @@ function createManagedPiMcpProfileApi(options = {}) {
         throw new Error("pi_managed_mcp_attestation_failed: source Pi settings are invalid");
       }
     }
-    const browserUse = selectManagedBrowserUse(sourceSettings, npmSource);
-    const webAccess = sourceAcquisition ? null : selectManagedWebAccess(sourceSettings, npmSource);
-    const telemetry = selectManagedTelemetry(sourceSettings, npmSource);
+    const browserUse = sourceAcquisition ? selectManagedBrowserUse(sourceSettings, npmSource) : null;
     if (sourceAcquisition && !browserUse) {
       throw new Error("pi_managed_mcp_source_acquisition_packages_missing");
     }
-    const settings = {
+    const sourcePackages = Array.isArray(sourceSettings.packages) ? [...sourceSettings.packages] : [];
+    const settings = sourceAcquisition ? {
       ...typeof sourceSettings.defaultProvider === "string" ? { defaultProvider: sourceSettings.defaultProvider } : {},
       ...typeof sourceSettings.defaultModel === "string" ? { defaultModel: sourceSettings.defaultModel } : {},
-      packages: [
-        "npm:pi-mcp-adapter",
-        ...telemetry ? [telemetry.packageSpec] : [],
-        ...webAccess ? [webAccess.packageSpec] : [],
-        ...!sourceAcquisition && browserUse ? [browserUse.packageSpec] : []
-      ],
-      ...telemetry ? { "pi-telemetry": telemetry.config } : {},
-      ...webAccess ? { "pi-web-access": webAccess.config } : {},
-      ...!sourceAcquisition && browserUse ? {
-        plugins: {
-          [MANAGED_BROWSER_USE_PLUGIN]: browserUse.plugin
-        },
-        "pi-browser-use": browserUse.config
-      } : {}
+      packages: ["npm:pi-mcp-adapter"]
+    } : {
+      ...sourceSettings,
+      packages: sourcePackages.some((entry) => npmPackageName(entry) === "pi-mcp-adapter") ? sourcePackages : ["npm:pi-mcp-adapter", ...sourcePackages]
     };
+    const settingsEnv = sourceAcquisition ? {} : referencedSettingsEnvironment(settings, baseEnv);
     writePrivateFile2(join4(agentDir, "settings.json"), `${JSON.stringify(settings, null, 2)}
 `);
     const extensionsDir = join4(agentDir, "extensions");
@@ -3112,7 +3121,10 @@ function createManagedPiMcpProfileApi(options = {}) {
     copyPrivateFile(join4(source, "models.json"), join4(agentDir, "models.json"));
     copyPrivateFile(join4(source, "SYSTEM.md"), join4(agentDir, "SYSTEM.md"));
     const authSource = join4(source, "auth.json");
-    const protectedValues = [];
+    const protectedValues = collectAuthSecretStrings2(settings);
+    for (const [name, value] of Object.entries(settingsEnv)) {
+      if (isSensitiveAuthKey2(name)) protectedValues.push(value);
+    }
     if (copyPrivateFile(authSource, join4(agentDir, "auth.json"))) {
       try {
         collectAuthSecretStrings2(JSON.parse(readFileSync3(authSource, "utf8")), protectedValues);
@@ -3123,7 +3135,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     const npmStat = lstatSync2(npmSource);
     if (!npmStat.isDirectory() || npmStat.isSymbolicLink()) throw new Error("pi_managed_mcp_source_config_unsafe: Pi npm root");
     symlinkSync(npmSource, join4(agentDir, "npm"), "dir");
-    return { adapterVersion, protectedValues };
+    return { adapterVersion, protectedValues, settingsEnv };
   }
   function seedDelegatedPiRuntime(sourceHome, agentDir) {
     const source = resolve2(nonEmpty2(sourceHome, "sourcePiHome"));
@@ -3309,7 +3321,13 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         commandId: input.commandId
       });
       const sourcePiHome = nonEmpty2(input.baseEnv?.PI_CODING_AGENT_DIR ?? input.baseEnv?.PI_AGENT_HOME, "sourcePiHome");
-      const seededRuntime = seedPiRuntime(sourcePiHome, piCodingAgentDir, input.sourceAcquisition, mcpToolMode);
+      const seededRuntime = seedPiRuntime(
+        sourcePiHome,
+        piCodingAgentDir,
+        input.sourceAcquisition,
+        mcpToolMode,
+        input.baseEnv
+      );
       const restoredNativeSession = restoreManagedPiSessionRollout(input, sessionsRoot, runDir, executorHome, authority);
       const configPath = join4(piCodingAgentDir, "mcp.json");
       const directToolNames = directCatalog?.tools.map((tool) => tool.exposedName) ?? [];
@@ -3388,6 +3406,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         };
       }
       const env = {
+        ...seededRuntime.settingsEnv,
         ...buildIsolatedEnvironment2(input.baseEnv, input.commandEnv),
         HOME: home,
         PI_AGENT_HOME: piAgentHome,
@@ -3442,7 +3461,6 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         protectedValues: [.../* @__PURE__ */ new Set([
           sessionToken,
           ...seededRuntime.protectedValues,
-          ...MANAGED_TELEMETRY_PROTECTED_ENV_NAMES.map((name) => input.baseEnv?.[name]).filter((value) => typeof value === "string" && value.length > 0),
           ...MANAGED_PI_PROVIDER_PROTECTED_ENV_NAMES.map((name) => input.commandEnv?.[name]).filter((value) => typeof value === "string" && value.length > 0)
         ])],
         attestation: {
@@ -4415,24 +4433,56 @@ function resolvedDependencySections(context, input, contextScope, snapshotFreshn
     overflowRefs
   };
 }
-function verifiedCompanyContextSection(context) {
-  const companyContext = asRecord(context.verifiedCompanyContext);
-  if (Object.keys(companyContext).length === 0) return { content: "", sourceRef: [], observedAt: [] };
+function projectModelFactRecord(value, seenFacts) {
+  return Object.fromEntries(Object.entries(asRecord(value)).sort(([left], [right]) => left.localeCompare(right)).flatMap(([key, rawValue]) => {
+    if (typeof rawValue !== "string" || !rawValue.trim()) return [];
+    const normalizedValue = rawValue.trim();
+    const fingerprint = `${key}\0${normalizedValue}`;
+    if (seenFacts.has(fingerprint)) return [];
+    seenFacts.add(fingerprint);
+    return [[key, normalizedValue]];
+  }));
+}
+function projectVerifiedCompanyContextForModel(value) {
+  const companyContext = asRecord(value);
+  if (Object.keys(companyContext).length === 0) return {};
   if (companyContext.schemaVersion !== "mirrorx.verified-company-context.v1") {
     throw new Error("verified_company_context_invalid: unsupported schemaVersion");
   }
   const company = asRecord(companyContext.company);
-  const registration = asRecord(companyContext.registration);
   const companyId = readString(company.id);
   const companyName = readString(company.name);
   if (!companyId || !companyName) {
     throw new Error("verified_company_context_invalid: company id and name are required");
   }
+  const seenFacts = /* @__PURE__ */ new Set([`companyName\0${companyName}`]);
+  const confirmedProfileFacts = projectModelFactRecord(companyContext.confirmedProfileFacts, seenFacts);
+  const confirmedOnboardingFacts = projectModelFactRecord(companyContext.confirmedOnboardingFacts, seenFacts);
+  const verifiedRegistrationFacts = projectModelFactRecord(
+    asRecord(companyContext.registration).facts,
+    seenFacts
+  );
+  const knownUnknowns = Array.isArray(companyContext.unavailableFromCurrentVerification) ? [...new Set(companyContext.unavailableFromCurrentVerification.map(readString).filter(Boolean))] : [];
+  return {
+    companyName,
+    ...Object.keys(confirmedProfileFacts).length > 0 ? { confirmedProfileFacts } : {},
+    ...Object.keys(confirmedOnboardingFacts).length > 0 ? { confirmedOnboardingFacts } : {},
+    ...Object.keys(verifiedRegistrationFacts).length > 0 ? { verifiedRegistrationFacts } : {},
+    ...knownUnknowns.length > 0 ? { knownUnknowns } : {}
+  };
+}
+function verifiedCompanyContextSection(context) {
+  const companyContext = asRecord(context.verifiedCompanyContext);
+  const modelContext = projectVerifiedCompanyContextForModel(companyContext);
+  if (Object.keys(modelContext).length === 0) return { content: "", sourceRef: [], observedAt: [] };
+  const company = asRecord(companyContext.company);
+  const registration = asRecord(companyContext.registration);
+  const companyId = readString(company.id);
   return {
     content: [
       "Use these server-snapshotted current Company facts as authoritative context for this run.",
-      "The current verification contract does not supply shareholder structure or a financial baseline; treat them as unknown unless separate evidence is present, and do not describe the verified registration facts below as missing.",
-      jsonText(companyContext)
+      "Treat fields listed under knownUnknowns as unknown unless separate evidence is present; do not describe the supplied verified facts as missing.",
+      jsonText(modelContext)
     ].join("\n"),
     sourceRef: [
       `company:${companyId}`,
@@ -4528,7 +4578,7 @@ function taskContextAuthoritySection(context) {
   if (sourceRefs.length === 0) return null;
   return {
     content: [
-      "Immutable Task admission context authority. It identifies admitted sources and automatic memory policy; it does not replace the runtime Context Manifest below.",
+      "Immutable Task admission context authority. It identifies admitted sources and automatic memory policy; it is model-visible execution input and is distinct from the audit-only runtime Context Manifest.",
       jsonText({
         version: manifest.version,
         memoryScope: readString(manifest.memoryScope),
@@ -4799,7 +4849,9 @@ function runtimeDecompositionRequirementText(context) {
   return [
     "This issue has a server-enforced typed decomposition requirement.",
     "Create the complete real direct child graph before doing any substantial source work.",
-    "Before browsing, searching, commenting, or doing any source work, call runtime_action.describe for create_child_task, persist the complete child graph with runtime_action.plan, and execute it with runtime_action.commit.",
+    "Before browsing, searching, commenting, or doing any source work, call runtime_action.describe for record_work_disposition with dispositionKind create_children and for every child action type you need.",
+    "Persist one immutable runtime_action.plan whose first action is record_work_disposition kind create_children and whose remaining actions are exactly the complete child graph referenced by that disposition. Do not append update_parent, add_comment, upsert_document, or any other action after the child graph.",
+    "Execute that exact plan with runtime_action.commit.",
     "Once runtime_action.commit succeeds, the committed required child graph is this parent run's durable delegated live disposition.",
     "After runtime_action.commit succeeds, yield and end the parent run immediately. Do not browse, search, research, or execute any delegated child acceptance scope, and do not poll child runs. Child assignment runs are the sole execution path for delegated child scope.",
     "Each executable child must have an owner, dependencies where needed, and acceptance criteria. Do not create probe or test children.",
@@ -4973,14 +5025,86 @@ function manifestEntry(section) {
     truncationReason: section.truncationReason ?? null
   };
 }
-function renderPrompt(sections, manifest, compactManifest = false) {
+var CONTEXT_AVAILABILITY_SECTION_TITLES = Object.freeze({
+  recovery_instruction: "Recovery Instruction",
+  approval_continuation: "Approved Runtime Action Continuation",
+  wake_comments: "Wake Delta",
+  task: "Task Context",
+  continuation_summary: "Continuation Summary",
+  resolved_dependencies: "Resolved Dependency Outputs",
+  runtime_delivery_readiness: "Current Delivery Readiness",
+  runtime_authorization: "Runtime Action Contract",
+  runtime_decomposition_requirement: "Required Task Decomposition",
+  task_context_authority: "Task Context Authority",
+  verified_company_context: "Verified Company Context",
+  pi_mcp_proxy_examples: "Pi MCP Proxy Examples",
+  governed_reads: "Governed External Reads",
+  optional_task_wiki_context: "Optional Company Wiki Context",
+  agent_instructions: "Agent Instructions",
+  attachments: "Materialized Inputs",
+  on_demand_refs: "On-demand Context References",
+  raw_snapshot: "Raw Context Snapshot"
+});
+function contextAvailabilitySectionTitle(sectionName) {
+  return CONTEXT_AVAILABILITY_SECTION_TITLES[sectionName] ?? sectionName.replaceAll("_", " ");
+}
+function projectModelContextAvailability(manifestSections) {
+  const entries = Array.isArray(manifestSections) ? manifestSections.map(asRecord) : [];
+  const bySection = new Map(entries.map((entry) => [readString(entry.section), entry]));
+  const lines = [];
+  const coveredSections = [];
+  const wikiEntry = bySection.get("optional_task_wiki_context");
+  const wikiReason = readString(wikiEntry?.truncationReason);
+  if (wikiEntry?.omitted === true && wikiReason?.startsWith("wiki_optional_context_gap:")) {
+    const gapCode = wikiReason.slice("wiki_optional_context_gap:".length);
+    lines.push(
+      gapCode === "wiki_zero_hit" ? "Optional Company Wiki lookup completed with no matching result." : "Optional Company Wiki context was unavailable for this run. Do not assume that no relevant Wiki material exists."
+    );
+    coveredSections.push("optional_task_wiki_context");
+  }
+  const budgetOmissions = entries.filter((entry) => entry.omitted === true && entry.truncationReason === "unified_context_budget").map((entry) => readString(entry.section)).filter(Boolean);
+  if (budgetOmissions.length > 0) {
+    lines.push(
+      `The prompt budget omitted these context sections: ${budgetOmissions.map(contextAvailabilitySectionTitle).join(", ")}. Do not assume that the underlying material is absent; use managed typed reads when an applicable reference is available.`
+    );
+    coveredSections.push(...budgetOmissions);
+  }
+  const rawSnapshot = bySection.get("raw_snapshot");
+  const onDemandRefs2 = bySection.get("on_demand_refs");
+  if (rawSnapshot?.omitted === true && rawSnapshot.truncationReason === "on_demand_large_object" && Number(rawSnapshot.originalChars ?? 0) > 0 && (!onDemandRefs2 || onDemandRefs2.omitted === true)) {
+    lines.push(
+      "Additional raw run context was intentionally not inlined and no managed on-demand reference was provided. Do not assume that omitted details are absent."
+    );
+    coveredSections.push("raw_snapshot");
+  }
+  return {
+    content: lines.join("\n"),
+    coveredSections: [...new Set(coveredSections)]
+  };
+}
+function modelSectionsWithAvailability(sections) {
+  const manifestEntries = sections.map(manifestEntry);
+  const projection = projectModelContextAvailability(manifestEntries);
+  if (!projection.content) return sections;
+  const covered = new Set(projection.coveredSections);
   return [
-    ...sections.map(sectionText).filter(Boolean),
-    "## Context Manifest",
-    "```json",
-    compactManifest ? JSON.stringify(manifest) : jsonText(manifest),
-    "```"
-  ].join("\n");
+    ...sections,
+    {
+      name: "context_availability",
+      title: "Context Availability",
+      priority: 100,
+      sourceRef: manifestEntries.filter((entry) => covered.has(entry.section)).flatMap((entry) => Array.isArray(entry.sourceRef) ? entry.sourceRef : [entry.sourceRef]).filter(Boolean),
+      observedAt: null,
+      freshness: { kind: "run_snapshot" },
+      scope: null,
+      content: projection.content,
+      originalChars: sectionText({ title: "Context Availability", content: projection.content }).length,
+      truncationReason: null
+    }
+  ];
+}
+function renderPrompt(sections) {
+  return sections.map(sectionText).filter(Boolean).join("\n");
 }
 function buildManifest(mode, maxChars, sections, governedReadProvenance, usedChars) {
   return {
@@ -5102,50 +5226,38 @@ ${resolvedDependencies.details.content}` : ""
     truncationReason: section.content ? section.truncationReason : section.truncationReason ?? "source_absent"
   }));
   let prompt = "";
-  let compactManifest = false;
-  let manifest = buildManifest(mode, maxChars, sections, governedReads.provenance, 0);
+  let modelSections = modelSectionsWithAvailability(sections);
+  let manifest = buildManifest(mode, maxChars, modelSections, governedReads.provenance, 0);
   if (maxChars === null) {
-    for (let telemetryPass = 0; telemetryPass < 20; telemetryPass += 1) {
-      prompt = renderPrompt(sections, manifest);
-      if (manifest.budget.usedChars === prompt.length) return { prompt, manifest };
-      manifest = buildManifest(mode, null, sections, governedReads.provenance, prompt.length);
-    }
-    throw new Error("Prompt compiler could not stabilize the unbounded Context Manifest");
+    prompt = renderPrompt(modelSections);
+    manifest = buildManifest(mode, null, modelSections, governedReads.provenance, prompt.length);
+    return { prompt, manifest };
   }
   for (let pass = 0; pass < 20; pass += 1) {
-    let usedChars = 0;
-    for (let telemetryPass = 0; telemetryPass < 3; telemetryPass += 1) {
-      manifest = buildManifest(mode, maxChars, sections, governedReads.provenance, usedChars);
-      prompt = renderPrompt(sections, manifest, compactManifest);
-      if (prompt.length === usedChars) break;
-      usedChars = prompt.length;
-    }
-    if (prompt.length <= maxChars && manifest.budget.usedChars === prompt.length) break;
+    modelSections = modelSectionsWithAvailability(sections);
+    prompt = renderPrompt(modelSections);
+    manifest = buildManifest(mode, maxChars, modelSections, governedReads.provenance, prompt.length);
+    if (prompt.length <= maxChars) break;
     const overflow = Math.max(1, prompt.length - maxChars);
     const candidate = [...sections].filter(
       (section) => section.priority < 100 && section.content.length > (section.mandatoryContent?.length ?? 0)
     ).sort((left, right) => left.priority - right.priority)[0];
     if (!candidate) {
-      if (!compactManifest) {
-        compactManifest = true;
-        manifest = buildManifest(mode, maxChars, sections, governedReads.provenance, 0);
-        continue;
-      }
-      const fixedChars = sections.filter((section) => section.priority === 100).map(sectionText).join("\n").length;
-      const manifestChars = JSON.stringify(manifest).length;
+      const fixedChars = modelSections.filter((section) => section.priority === 100).map(sectionText).join("\n").length;
+      const availabilitySection = modelSections.find((section) => section.name === "context_availability");
+      const availabilityChars = availabilitySection ? sectionText(availabilitySection).length : 0;
       if (resolvedDependencies.required.tupleCount > 0) {
         throw promptBudgetError(
           "resolved_dependencies_budget_exceeded",
-          `Resolved dependency mandatory read tuples exceed the unified ${maxChars}-character prompt budget: tupleCount=${resolvedDependencies.required.tupleCount} promptChars=${prompt.length} fixedChars=${fixedChars} manifestChars=${manifestChars}`
+          `Resolved dependency mandatory read tuples exceed the unified ${maxChars}-character prompt budget: tupleCount=${resolvedDependencies.required.tupleCount} promptChars=${prompt.length} fixedChars=${fixedChars} availabilityChars=${availabilityChars}`
         );
       }
       throw promptBudgetError(
         "prompt_budget_exceeded",
-        `Prompt fixed sections exceed the unified ${maxChars}-character budget: promptChars=${prompt.length} fixedChars=${fixedChars} manifestChars=${manifestChars}`
+        `Prompt fixed sections exceed the unified ${maxChars}-character budget: promptChars=${prompt.length} fixedChars=${fixedChars} availabilityChars=${availabilityChars}`
       );
     }
     truncateSection(candidate, Math.max(0, candidate.content.length - overflow - 32));
-    manifest = buildManifest(mode, maxChars, sections, governedReads.provenance, 0);
   }
   if (prompt.length > maxChars || manifest.budget.usedChars !== prompt.length) {
     throw promptBudgetError(
@@ -9680,7 +9792,7 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.16";
+var CONNECTOR_VERSION = "0.1.1-beta.18";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.16";
+const CONNECTOR_VERSION = "0.1.1-beta.18";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.16",
+  "version": "0.1.1-beta.18",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",