@amaster.ai/employee-runtime-connector 0.1.1-beta.21 → 0.1.1-beta.22

package/README.md

@@ -13,7 +13,7 @@ For production images, install an exact version and invoke the package bin:
 ```sh
 npm install --omit=dev --prefix /opt/pi-cli-runtime @amaster.ai/employee-runtime-connector@0.1.0
 /opt/pi-cli-runtime/node_modules/.bin/amaster-runtime setup https://employee.example.com \
-  --capabilities remote_registration,heartbeat,executor_discovery,workspace_binding,run_wakeup,model_call,run_cancel,run_terminate,logs_cost_workspace_status
+  --capabilities remote_registration,heartbeat,executor_discovery,workspace_binding,run_wakeup,model_call,model_call_output_contract_v1,run_cancel,run_terminate,logs_cost_workspace_status
 /opt/pi-cli-runtime/node_modules/.bin/amaster-runtime daemon start --foreground
 ```
 

package/dist/amaster-runtime-daemon.mjs

@@ -2,7 +2,7 @@
 // MirrorX runtime connector daemon bundle.
 
 // src/amaster-runtime-daemon.mjs
-import { createHash as createHash14 } from "node:crypto";
+import { createHash as createHash15 } from "node:crypto";
 import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, mkdtempSync, readFileSync as readFileSync11, readdirSync as readdirSync9, realpathSync as realpathSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync8, symlinkSync as symlinkSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
 import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3, tmpdir } from "node:os";
 import { basename as basename6, delimiter as delimiter3, dirname as dirname9, extname as extname2, isAbsolute as isAbsolute8, join as join15, relative as relative9, resolve as resolve12 } from "node:path";
@@ -2005,6 +2005,43 @@ function syncAmasterProviderFiles(agentDir, executorEnv) {
     settingsSynced: syncAmasterProviderSettings(agentDir, executorEnv)
   };
 }
+function normalizePiModelId(modelId) {
+  return readString(modelId)?.replace(/:(?:off|minimal|low|medium|high|xhigh|max)$/i, "") ?? null;
+}
+function applyModelCallOutputContract(agentDir, providerId, modelId, maxOutputTokens) {
+  const provider = readString(providerId);
+  const model = normalizePiModelId(modelId);
+  const tokenLimit = Number(maxOutputTokens);
+  if (!provider || !model || !Number.isSafeInteger(tokenLimit) || tokenLimit <= 0) {
+    throw new Error("pi_model_call_output_contract_invalid");
+  }
+  const modelsPath = join3(agentDir, "models.json");
+  const config = readJsonFile(modelsPath);
+  const providers = asRecord(config.providers);
+  const providerConfig = asRecord(providers[provider]);
+  const configuredModels = Array.isArray(providerConfig.models) ? providerConfig.models : [];
+  const configuredModelExists = configuredModels.some((entry) => readString(asRecord(entry).id) === model);
+  const existingOverrides = asRecord(providerConfig.modelOverrides);
+  if (!configuredModelExists && !(model in existingOverrides)) {
+    throw new Error(`pi_model_call_model_missing: ${provider}/${model}`);
+  }
+  writeJsonFileAtomic(modelsPath, {
+    ...config,
+    providers: {
+      ...providers,
+      [provider]: {
+        ...providerConfig,
+        modelOverrides: {
+          ...existingOverrides,
+          [model]: {
+            ...asRecord(existingOverrides[model]),
+            maxTokens: tokenLimit
+          }
+        }
+      }
+    }
+  });
+}
 
 // src/amaster-runtime-daemon/pi-mcp-args-normalizer.mjs
 function isJsonObject(value) {
@@ -2734,11 +2771,11 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (!Number.isFinite(value)) throw new Error("pi_managed_mcp_attestation_failed: invalid attestation clock");
     return value;
   }
-  function sha256(value) {
+  function sha2562(value) {
     return createHash3("sha256").update(value).digest("hex");
   }
   function adapterServerConfigHash(definition) {
-    return sha256(stablePiJson({
+    return sha2562(stablePiJson({
       command: definition.command,
       args: definition.args,
       env: definition.env,
@@ -3278,17 +3315,17 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     if (receipt.status !== "attested" || receipt.mode !== "probe" || receipt.proxyMode !== input.proxyMode || receipt.proxyPresent !== expectedProxyPresent || receipt.effectiveSetHash !== input.effectiveSetHash || receipt.attestorSourceSha256 !== input.attestorSourceSha256 || receipt.configSha256 !== input.configSha256 || receipt.cacheSha256 !== input.cacheSha256) {
       throw new Error("pi_managed_mcp_effective_tools_failed: probe receipt mismatch");
     }
-    if (sha256(readFileSync3(input.configPath)) !== input.configSha256) {
+    if (sha2562(readFileSync3(input.configPath)) !== input.configSha256) {
       throw new Error("pi_managed_mcp_effective_tools_failed: config drifted during probe");
     }
-    if (sha256(readFileSync3(input.cachePath)) !== input.cacheSha256) {
+    if (sha2562(readFileSync3(input.cachePath)) !== input.cacheSha256) {
       throw new Error("pi_managed_mcp_effective_tools_failed: cache drifted during probe");
     }
     return {
       effectiveToolProxyMode: receipt.proxyMode,
       effectiveToolProxyPresent: receipt.proxyPresent,
       effectiveToolSetHash: receipt.effectiveSetHash,
-      effectiveToolProbeDigest: sha256(stablePiJson(receipt)),
+      effectiveToolProbeDigest: sha2562(stablePiJson(receipt)),
       effectiveToolProbeAt: receipt.attestedAt,
       effectiveToolBindings: receipt.effectiveToolBindings
     };
@@ -3370,8 +3407,8 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         };
         writePrivateFile2(cachePath, `${JSON.stringify(cache, null, 2)}
 `);
-        const cacheSha256 = sha256(readFileSync3(cachePath));
-        const attestorSourceSha256 = sha256(managedPiEffectiveToolsAttestorExtensionSource());
+        const cacheSha256 = sha2562(readFileSync3(cachePath));
+        const attestorSourceSha256 = sha2562(managedPiEffectiveToolsAttestorExtensionSource());
         const manifestPath = join4(piCodingAgentDir, "effective-tools-manifest.json");
         const receiptPath = join4(tmp, "effective-tools-receipt.json");
         const manifest = {
@@ -3389,7 +3426,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
           }))),
           proxyMode: mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE ? "required" : "forbidden",
           attestorSourceSha256,
-          configSha256: sha256(readFileSync3(configPath)),
+          configSha256: sha2562(readFileSync3(configPath)),
           cacheSha256
         };
         writePrivateFile2(manifestPath, `${JSON.stringify(manifest, null, 2)}
@@ -3400,7 +3437,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
           receiptPath,
           cacheSha256,
           configPath,
-          configSha256: sha256(readFileSync3(configPath)),
+          configSha256: sha2562(readFileSync3(configPath)),
           attestorSourceSha256,
           effectiveSetHash: manifest.effectiveSetHash,
           proxyMode: manifest.proxyMode
@@ -3563,7 +3600,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         sessionId: gateway.sessionId,
         sourcePiHome,
         piCodingAgentDir,
-        configSha256: sha256(readFileSync3(configPath))
+        configSha256: sha2562(readFileSync3(configPath))
       };
       return {
         profileRoot,
@@ -5512,6 +5549,187 @@ function agentInstructionDeliveryAudit(bundle, delivery) {
   };
 }
 
+// src/amaster-runtime-daemon/agent-instruction-system-kernel-shadow.mjs
+import { createHash as createHash5 } from "node:crypto";
+var SHADOW_VERSION = 1;
+var TARGET_CHARS = 16e3;
+var USER_RESPONSE_START = "<user-facing-response>";
+var USER_RESPONSE_END = "</user-facing-response>";
+var RUNTIME_HEADING = "# AMaster Runtime Contract";
+var RUNTIME_KERNEL_SECTIONS = /* @__PURE__ */ new Set([
+  "Narrow recovery and terminalization",
+  "Secrets and Safety",
+  "Execution continuity"
+]);
+var ROLE_KERNEL_SECTIONS = /* @__PURE__ */ new Set([
+  "How you think",
+  "What you do",
+  "What you do not do",
+  "When you finish"
+]);
+function sha256(value) {
+  return createHash5("sha256").update(value, "utf8").digest("hex");
+}
+function normalizedText(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function sectionAudit(scope, section, disposition) {
+  return {
+    scope,
+    heading: section.heading,
+    disposition,
+    chars: section.content.length,
+    sha256: sha256(section.content)
+  };
+}
+function splitH2Sections(content, scope) {
+  const matches = [...content.matchAll(/^## (.+)$/gm)];
+  const sections = [];
+  const preambleEnd = matches[0]?.index ?? content.length;
+  const preamble = content.slice(0, preambleEnd).trim();
+  if (preamble) {
+    sections.push({
+      scope,
+      heading: `${scope}_preamble`,
+      content: preamble
+    });
+  }
+  for (let index = 0; index < matches.length; index += 1) {
+    const match = matches[index];
+    const start = match.index;
+    const end = matches[index + 1]?.index ?? content.length;
+    const sectionContent = content.slice(start, end).trim();
+    if (!sectionContent) continue;
+    sections.push({
+      scope,
+      heading: match[1].trim(),
+      content: sectionContent
+    });
+  }
+  return sections;
+}
+function extractUserResponseContract(content) {
+  const start = content.indexOf(USER_RESPONSE_START);
+  if (start === -1) return null;
+  const end = content.indexOf(USER_RESPONSE_END, start);
+  if (end === -1) return null;
+  const contentEnd = end + USER_RESPONSE_END.length;
+  return {
+    start,
+    end: contentEnd,
+    content: content.slice(start, contentEnd).trim()
+  };
+}
+function splitManagedLayout(content) {
+  const userResponse = extractUserResponseContract(content);
+  const runtimeStart = content.indexOf(RUNTIME_HEADING);
+  if (!userResponse || runtimeStart === -1 || runtimeStart < userResponse.end) return null;
+  const afterRuntime = content.slice(runtimeStart);
+  const parts = afterRuntime.split(/^---$/gm);
+  if (parts.length < 2) return null;
+  const rolePartIndex = parts.findIndex((part, index) => index > 0 && /^## (?:How you think|What you do|What you do not do|When you finish)$/m.test(part));
+  if (rolePartIndex === -1) return null;
+  const runtime = parts[0].trim();
+  const role = parts.slice(rolePartIndex).join("\n---\n").trim();
+  if (!runtime.startsWith(RUNTIME_HEADING) || !role) return null;
+  return { userResponse: userResponse.content, runtime, role };
+}
+function kernelProjection(content) {
+  const layout = splitManagedLayout(content);
+  if (!layout) return null;
+  const selected = [{
+    scope: "response",
+    heading: "User-Facing Response Contract",
+    content: layout.userResponse
+  }];
+  const onDemand = [];
+  for (const section of splitH2Sections(layout.runtime, "runtime")) {
+    if (section.heading === "runtime_preamble" || RUNTIME_KERNEL_SECTIONS.has(section.heading)) {
+      selected.push(section);
+    } else {
+      onDemand.push(section);
+    }
+  }
+  for (const section of splitH2Sections(layout.role, "role")) {
+    if (section.heading === "role_preamble" || ROLE_KERNEL_SECTIONS.has(section.heading)) {
+      selected.push(section);
+    } else {
+      onDemand.push(section);
+    }
+  }
+  return {
+    candidate: selected.map((section) => section.content).join("\n\n---\n\n"),
+    selected,
+    onDemand
+  };
+}
+function buildAgentInstructionSystemKernelShadow(bundle) {
+  const bundleMode = normalizedText(bundle?.mode).toLowerCase();
+  const source = normalizedText(bundle?.files?.["AGENTS.md"]);
+  const base = {
+    version: SHADOW_VERSION,
+    mode: "shadow_only",
+    activation: "disabled",
+    targetChars: TARGET_CHARS,
+    bundleMode: bundleMode || "unknown",
+    sourceFile: source ? "AGENTS.md" : null
+  };
+  if (!source) {
+    return {
+      candidate: "",
+      audit: {
+        ...base,
+        status: "not_applicable",
+        reason: "agents_entry_not_supplied"
+      }
+    };
+  }
+  if (bundleMode !== "managed") {
+    return {
+      candidate: "",
+      audit: {
+        ...base,
+        status: "not_applicable",
+        reason: bundleMode === "external" ? "external_instructions_are_user_owned" : "managed_bundle_not_attested",
+        sourceChars: source.length,
+        sourceSha256: sha256(source)
+      }
+    };
+  }
+  const projection = kernelProjection(source);
+  if (!projection) {
+    return {
+      candidate: "",
+      audit: {
+        ...base,
+        status: "unavailable",
+        reason: "managed_layout_not_recognized",
+        sourceChars: source.length,
+        sourceSha256: sha256(source)
+      }
+    };
+  }
+  const candidateChars = projection.candidate.length;
+  const reductionChars = source.length - candidateChars;
+  return {
+    candidate: projection.candidate,
+    audit: {
+      ...base,
+      status: "candidate_ready",
+      reason: "managed_sections_classified",
+      sourceChars: source.length,
+      sourceSha256: sha256(source),
+      candidateChars,
+      candidateSha256: sha256(projection.candidate),
+      reductionChars,
+      reductionRatio: source.length > 0 ? Number((reductionChars / source.length).toFixed(4)) : 0,
+      withinTarget: candidateChars <= TARGET_CHARS,
+      selectedSections: projection.selected.map((section) => sectionAudit(section.scope, section, "kernel_candidate")),
+      onDemandSections: projection.onDemand.map((section) => sectionAudit(section.scope, section, "on_demand_candidate"))
+    }
+  };
+}
+
 // src/amaster-runtime-daemon/config-state.mjs
 import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync5, renameSync as renameSync3, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir as homedir2, hostname } from "node:os";
@@ -5597,6 +5815,7 @@ var CAPABILITIES = [
   "run_wakeup",
   "runtime_actions_v2",
   "model_call",
+  "model_call_output_contract_v1",
   "run_cancel",
   "run_terminate",
   "logs_cost_workspace_status"
@@ -6434,9 +6653,9 @@ function governedMcpToolResult(structuredContent) {
   const intentId = readString(effectResult.artifactIntentId);
   const manifestId = readString(effectResult.manifestId);
   const sourceRelativePath = readString(effectResult.sourceRelativePath);
-  const sha256 = readString(effectResult.sha256);
+  const sha2562 = readString(effectResult.sha256);
   const byteSize = readNumber(effectResult.byteSize, 0);
-  const artifactIntent = providerStatus === "pending_reconcile" && intentId && manifestId && sourceRelativePath && /^[a-f0-9]{64}$/.test(sha256 ?? "") && Number.isSafeInteger(byteSize) && byteSize > 0 ? { intentId, manifestId, sourceRelativePath, sha256, byteSize } : null;
+  const artifactIntent = providerStatus === "pending_reconcile" && intentId && manifestId && sourceRelativePath && /^[a-f0-9]{64}$/.test(sha2562 ?? "") && Number.isSafeInteger(byteSize) && byteSize > 0 ? { intentId, manifestId, sourceRelativePath, sha256: sha2562, byteSize } : null;
   const workspaceDocumentEffect = asRecord(effectResult.workspaceDocumentIntent);
   const workspaceDocumentCallId = readString(workspaceDocumentEffect.callId);
   const workspaceDocumentManifestId = readString(workspaceDocumentEffect.manifestId);
@@ -7391,7 +7610,7 @@ var postJsonWithRetry = postRuntimeConnectorJsonWithRetry;
 var bestEffortPostJson = bestEffortPostRuntimeConnectorJson;
 
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 import { closeSync, constants, fstatSync, lstatSync as lstatSync3, openSync, readFileSync as readFileSync6, realpathSync as realpathSync3 } from "node:fs";
 import { isAbsolute as isAbsolute3, relative as relative3, resolve as resolve3 } from "node:path";
 var SHA256_PATTERN = /^[a-f0-9]{64}$/;
@@ -7481,7 +7700,7 @@ function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
       `Runtime Artifact ${intentId}`,
       { expectedByteSize }
     );
-    const actualSha256 = createHash5("sha256").update(body).digest("hex");
+    const actualSha256 = createHash6("sha256").update(body).digest("hex");
     if (body.length !== expectedByteSize || actualSha256 !== expectedSha256) {
       throw new Error(`Runtime Artifact ${intentId} bytes do not match the governed ownership manifest`);
     }
@@ -7498,7 +7717,7 @@ function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
 }
 
 // src/amaster-runtime-daemon/runtime-document-upload.mjs
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 
 // src/amaster-runtime-daemon/workspace-sensitive-path.mjs
 var SENSITIVE_PATH_SEGMENTS = /* @__PURE__ */ new Set([
@@ -7573,7 +7792,7 @@ function prepareRuntimeDocumentUploads(cwd, mcpToolResults) {
         maxByteSize: MAX_WORKSPACE_DOCUMENT_BYTES
       }
     );
-    const actualSha256 = createHash6("sha256").update(body).digest("hex");
+    const actualSha256 = createHash7("sha256").update(body).digest("hex");
     if (body.length !== expectedByteSize || actualSha256 !== expectedSha256) {
       throw new Error(`Runtime Document ${callId} bytes do not match the governed ownership manifest`);
     }
@@ -7647,9 +7866,9 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
   let queue = Promise.resolve();
   const artifactIdentity = (intent) => {
     const sourceRelativePath = readString(asRecord(intent).sourceRelativePath);
-    const sha256 = readString(asRecord(intent).sha256);
+    const sha2562 = readString(asRecord(intent).sha256);
     const byteSize = asRecord(intent).byteSize;
-    return sourceRelativePath && sha256 && Number.isSafeInteger(byteSize) && byteSize > 0 ? `${sourceRelativePath}\0${sha256}\0${byteSize}` : null;
+    return sourceRelativePath && sha2562 && Number.isSafeInteger(byteSize) && byteSize > 0 ? `${sourceRelativePath}\0${sha2562}\0${byteSize}` : null;
   };
   const retainReceipts = (receipts) => {
     artifacts.push(...receipts);
@@ -7699,7 +7918,7 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 }
 
 // src/amaster-runtime-daemon/workspace-guard.mjs
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 import { existsSync as existsSync7, mkdirSync as mkdirSync6, realpathSync as realpathSync4, statSync as statSync4 } from "node:fs";
 import { basename as basename4, join as join8, isAbsolute as isAbsolute4, relative as relative4, resolve as resolve4 } from "node:path";
 
@@ -7825,7 +8044,7 @@ function resolveWorkspaceCwd(config, command) {
   return cwd;
 }
 function shortHash(value, length = 12) {
-  return createHash7("sha256").update(String(value)).digest("hex").slice(0, length);
+  return createHash8("sha256").update(String(value)).digest("hex").slice(0, length);
 }
 function safeSegment(value, fallback) {
   const raw = String(value ?? "").trim();
@@ -8269,7 +8488,7 @@ function summarizeAmasterRuntimeVersionDrift(input = {}) {
 }
 
 // src/amaster-runtime-daemon/pi-child-isolation.mjs
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 import {
   chmodSync as chmodSync3,
   chownSync as chownSync2,
@@ -8280,7 +8499,7 @@ import {
 import { resolve as resolve7, sep } from "node:path";
 var defaultFs = { chmodSync: chmodSync3, chownSync: chownSync2, lchownSync, lstatSync: lstatSync4, readdirSync: readdirSync6 };
 function defaultHashRunId(runId) {
-  return Number.parseInt(createHash8("sha256").update(runId).digest("hex").slice(0, 8), 16);
+  return Number.parseInt(createHash9("sha256").update(runId).digest("hex").slice(0, 8), 16);
 }
 function positiveInteger(value, label) {
   if (!Number.isSafeInteger(value) || value <= 0) {
@@ -8404,7 +8623,7 @@ function preparePiChildIsolation(input) {
 }
 
 // src/amaster-runtime-daemon/pi-company-memory.mjs
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 import {
   chmodSync as chmodSync4,
   chownSync as chownSync3,
@@ -8490,7 +8709,7 @@ function safeCompanyPiHomeSegment(companyId) {
   const raw = requiredString3(companyId, "companyId");
   if (/^[A-Za-z0-9][A-Za-z0-9._-]{0,119}$/.test(raw)) return raw;
   const normalized = raw.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^[._-]+|[._-]+$/g, "").slice(0, 80);
-  const hash = createHash9("sha256").update(raw).digest("hex").slice(0, 12);
+  const hash = createHash10("sha256").update(raw).digest("hex").slice(0, 12);
   return normalized ? `${normalized}-${hash}` : `company-${hash}`;
 }
 function ensureMemoryRoot(root, fs) {
@@ -8529,7 +8748,7 @@ function allocateCompanyGid(root, companyId, input, fs) {
   if (groups[companyId]) return groups[companyId];
   const used = new Set(Object.values(groups));
   const initialOffset = Number.parseInt(
-    createHash9("sha256").update(companyId).digest("hex").slice(0, 12),
+    createHash10("sha256").update(companyId).digest("hex").slice(0, 12),
     16
   ) % gidSpan;
   let gid = null;
@@ -8631,7 +8850,7 @@ function prepareCompanyPiMemory(input, fs = defaultFs2) {
 }
 
 // src/amaster-runtime-daemon/pi-trusted-runtime-profile.mjs
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 import {
   chmodSync as chmodSync5,
   copyFileSync as copyFileSync2,
@@ -8671,7 +8890,7 @@ function sha256File(path, label) {
   if (!stat.isFile() || stat.isSymbolicLink()) {
     throw new Error(`pi_trusted_runtime_source_unsafe:${label}`);
   }
-  return createHash10("sha256").update(readFileSync9(path)).digest("hex");
+  return createHash11("sha256").update(readFileSync9(path)).digest("hex");
 }
 function verifyDeclaredFiles(manifest, root, label, ignoredPaths = [], enforceComplete = true) {
   if (!Array.isArray(manifest.files) || manifest.files.length === 0) {
@@ -8939,12 +9158,12 @@ function materializeTrustedPiRuntimeProfile(input) {
     // bundle skills were enabled. Absent profile => main skills only.
     ...skillProfile ? {
       skillProfile,
-      enabledSkillsDigest: createHash10("sha256").update(JSON.stringify(enabledSkills)).digest("hex")
+      enabledSkillsDigest: createHash11("sha256").update(JSON.stringify(enabledSkills)).digest("hex")
     } : {}
   };
   return {
     facts,
-    attestationId: createHash10("sha256").update(JSON.stringify(facts)).digest("hex")
+    attestationId: createHash11("sha256").update(JSON.stringify(facts)).digest("hex")
   };
 }
 function assertAuditArgsRedacted(value) {
@@ -9140,7 +9359,7 @@ function verifyTrustedPiRuntimeAssertion(input) {
   if (hasSourceAssertion) {
     const exactTools = Array.isArray(record7(sourceProfile.tools).exactAllowlist) ? record7(sourceProfile.tools).exactAllowlist : [];
     const exactActions = Array.isArray(record7(sourceProfile.actions).exactAllowlist) ? record7(sourceProfile.actions).exactAllowlist : [];
-    const profileHash = createHash10("sha256").update(JSON.stringify(sourceProfile)).digest("hex");
+    const profileHash = createHash11("sha256").update(JSON.stringify(sourceProfile)).digest("hex");
     if (assertion.unknownToolMode !== "deny" || maxCalls !== 0 || sourceAssertion.profileVersion !== sourceProfile.purpose || sourceAssertion.profileHash !== profileHash || sourceAssertion.retentionVersion !== sourceProfile.retention || JSON.stringify(sourceAssertion.exactTools) !== JSON.stringify(exactTools) || JSON.stringify(sourceAssertion.exactActions) !== JSON.stringify(exactActions) || sourceAssertion.sourceId !== sourceProfile.sourceId || sourceAssertion.sourceRevisionId !== sourceProfile.sourceRevisionId || sourceAssertion.sourceRevision !== sourceProfile.sourceRevision || sourceAssertion.attemptId !== sourceProfile.attemptId || sourceAssertion.epoch !== sourceProfile.epoch) {
       throw new Error("pi_trusted_runtime_assertion_binding_mismatch:sourceAcquisition");
     }
@@ -9169,7 +9388,7 @@ function verifyTrustedPiRuntimeAssertion(input) {
 
 // src/amaster-runtime-daemon/workspace-status.mjs
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 import { existsSync as existsSync12, readdirSync as readdirSync8, readFileSync as readFileSync10, statSync as statSync7 } from "node:fs";
 import { basename as basename5, extname, isAbsolute as isAbsolute7, join as join13, relative as relative7, resolve as resolve10 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
@@ -9240,7 +9459,7 @@ function sanitizeTrackedChange(line) {
   return isSafeRelativePath(path) ? line : null;
 }
 function sha256File2(filePath) {
-  return createHash11("sha256").update(readFileSync10(filePath)).digest("hex");
+  return createHash12("sha256").update(readFileSync10(filePath)).digest("hex");
 }
 function artifactHashCacheKey(relativePath, stat) {
   return `${relativePath}\0${stat.size}\0${stat.mtimeMs}`;
@@ -9441,7 +9660,7 @@ function readWorkspaceStatus(cwd, opts = {}) {
 }
 
 // src/amaster-runtime-daemon/pi-browser-session-adapter.mjs
-import { createHash as createHash12 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
 import { existsSync as existsSync13 } from "node:fs";
 import {
@@ -9564,7 +9783,7 @@ function fail(code) {
   throw Object.assign(new Error(code), { code });
 }
 function profileName(identity2) {
-  return createHash12("sha256").update(`${identity2.companyId}\0${identity2.bindingId}\0${identity2.localOpaqueRef}`).digest("hex");
+  return createHash13("sha256").update(`${identity2.companyId}\0${identity2.bindingId}\0${identity2.localOpaqueRef}`).digest("hex");
 }
 function expectedMarker(identity2) {
   return {
@@ -9963,7 +10182,7 @@ async function executeBrowserSessionCommand(command, dependencies = {}) {
 }
 
 // src/amaster-runtime-daemon/source-acquisition-invocation.mjs
-import { createHash as createHash13 } from "node:crypto";
+import { createHash as createHash14 } from "node:crypto";
 var SOURCE_ACQUISITION_PUBLIC_TOOLS = Object.freeze([
   "source_open",
   "source_snapshot",
@@ -10000,7 +10219,7 @@ function serializeSourceAcquisitionProfile(profile) {
   const input = Buffer.from(JSON.stringify(profile), "utf8");
   return {
     input,
-    sha256: createHash13("sha256").update(input).digest("hex")
+    sha256: createHash14("sha256").update(input).digest("hex")
   };
 }
 function sourceAcquisitionManagedInputs(options) {
@@ -10036,7 +10255,7 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.21";
+var CONNECTOR_VERSION = "0.1.1-beta.22";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";
@@ -11370,7 +11589,7 @@ function sourceAcquisitionRuntimeProfile(config, command) {
   if (!companyId || !bindingId || !/^profile_[a-z0-9]{16,64}$/i.test(localOpaqueRef ?? "")) {
     throw new Error("source_acquisition_profile_invalid");
   }
-  const profileName2 = createHash14("sha256").update(`${companyId}\0${bindingId}\0${localOpaqueRef}`).digest("hex");
+  const profileName2 = createHash15("sha256").update(`${companyId}\0${bindingId}\0${localOpaqueRef}`).digest("hex");
   const stateRoot = resolve12(config.browserSessionStateRoot);
   const userDataDir = resolve12(stateRoot, profileName2);
   if (!pathWithin2(userDataDir, stateRoot)) throw new Error("source_acquisition_browser_profile_invalid");
@@ -11541,6 +11760,7 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
     suppliedFiles: agentInstructionFileNames(agentInstructionsBundle)
   });
   const agentInstructions = renderAgentInstructionsBundle(agentInstructionsBundle, agentInstructionDelivery);
+  const agentInstructionSystemKernelShadow = buildAgentInstructionSystemKernelShadow(agentInstructionsBundle);
   const runtimeAuth = commandRuntimeAuth(command);
   const hasGovernedMcp = Object.keys(asRecord(runtimeAuth.governedMcp)).length > 0;
   const attachmentsText = materializedAttachments.length > 0 ? [
@@ -11597,7 +11817,8 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
       agentInstructionDelivery: agentInstructionDeliveryAudit(
         agentInstructionsBundle,
         agentInstructionDelivery
-      )
+      ),
+      agentInstructionSystemKernelShadow: agentInstructionSystemKernelShadow.audit
     }
   };
 }
@@ -11721,6 +11942,16 @@ function sanitizePiExtraArgs(value) {
 function nativeSessionResumeEnabled(session) {
   return process.env.AMASTER_RUNTIME_ENABLE_NATIVE_SESSION_RESUME === "true" || readString(session.mode) === "governed_action_approval" && session.required === true;
 }
+function modelCallResponseContract(payload) {
+  if (payload.responseContract === void 0) return null;
+  const contract = asRecord(payload.responseContract);
+  const maxOutputTokens = Number(contract.maxOutputTokens);
+  const maxSemanticBytes = Number(contract.maxSemanticBytes);
+  if (readString(contract.format) !== "json" || readString(contract.thinking) !== "off" || !Number.isSafeInteger(maxOutputTokens) || maxOutputTokens < 1 || maxOutputTokens > 131072 || !Number.isSafeInteger(maxSemanticBytes) || maxSemanticBytes < 1024 || maxSemanticBytes > 256 * 1024) {
+    throw new Error("model_call_response_contract_invalid");
+  }
+  return { format: "json", thinking: "off", maxOutputTokens, maxSemanticBytes };
+}
 function resolveNativeSessionRequest(command, workspace) {
   const payload = asRecord(command.payload);
   const session = asRecord(payload.nativeSession);
@@ -11754,17 +11985,21 @@ function resolveNativeSessionRequest(command, workspace) {
     ...enabled && requested && sessionId && requestedCwd && !cwdMatched ? { skippedReason: "native_session_cwd_mismatch" } : {}
   };
 }
-function buildExecutorInvocation(executor, command = {}, workspace = null) {
+function buildExecutorInvocation(executor, command = {}, workspace = null, options = {}) {
   const payload = asRecord(command.payload);
   if (command.commandType === "model_call") {
     if (executor.kind === "pi") {
       const args = ["--mode", "json"];
+      const responseContract = options.responseContract ?? null;
       const provider = readString(payload.provider) ?? readString(process.env.AMASTER_PI_PROVIDER);
-      const model = readString(payload.model) ?? readString(process.env.AMASTER_PI_MODEL);
+      const configuredModel = readString(payload.model) ?? readString(process.env.AMASTER_PI_MODEL);
+      const model = responseContract ? normalizePiModelId(configuredModel) : configuredModel;
       if (provider) args.push("--provider", provider);
       if (model) args.push("--model", model);
+      if (responseContract?.thinking) args.push("--thinking", responseContract.thinking);
       args.push(...sanitizePiExtraArgs(process.env.AMASTER_PI_EXTRA_ARGS));
       args.push("--no-extensions", "--no-skills", "--no-session", "--no-tools");
+      if (responseContract) args.push("--no-context-files");
       args.push("-p");
       return { command: executor.command, args, stdin: "prompt" };
     }
@@ -11852,7 +12087,8 @@ async function executeModelCallCommand(config, command, signal) {
   if (!prompt) {
     throw new Error("model_call command requires a prompt");
   }
-  const invocation = buildExecutorInvocation(executor, command);
+  const responseContract = modelCallResponseContract(payload);
+  const invocation = buildExecutorInvocation(executor, command, null, { responseContract });
   const timeoutSeconds = Math.max(1, Math.min(
     config.executorTimeoutSeconds,
     readNumber(payload.timeoutSeconds, Math.min(config.executorTimeoutSeconds, 60))
@@ -11884,6 +12120,16 @@ async function executeModelCallCommand(config, command, signal) {
         piModelCallProfile.env.PI_CODING_AGENT_DIR,
         resolvePiExecutorProviderConfig(config, command, baseEnv)
       );
+      if (responseContract) {
+        const provider = readString(payload.provider) ?? readString(process.env.AMASTER_PI_PROVIDER);
+        const model = readString(payload.model) ?? readString(process.env.AMASTER_PI_MODEL);
+        applyModelCallOutputContract(
+          piModelCallProfile.env.PI_CODING_AGENT_DIR,
+          provider,
+          model,
+          responseContract.maxOutputTokens
+        );
+      }
     }
     execution = await runExecutor(invocation.command, invocation.args, {
       cwd: process.cwd(),
@@ -11907,9 +12153,13 @@ async function executeModelCallCommand(config, command, signal) {
   const hasOutputFlood = Boolean(readString(outputFlood.stream) && readNumber(outputFlood.bytes, 0) > 0);
   const timedOut = execution.timedOut === true;
   const parsed = hasOutputFlood ? { summary: "", usage: null, errorMessage: null, messages: [] } : executor.kind === "pi" ? parsePiJsonl(execution.stdout) : parseGenericOutput(execution.stdout, execution.stderr);
-  const summary = truncateText(parsed.summary || parsed.finalMessage || parsed.messages?.join("\n\n") || "", 8e3);
-  const succeeded = !hasOutputFlood && !timedOut && !execution.spawnError && execution.exitCode === 0 && !parsed.errorMessage && Boolean(summary);
-  const error = timedOut ? `Runtime model call timed out after ${timeoutSeconds}s` : execution.spawnError ?? parsed.errorMessage ?? (hasOutputFlood ? `Runtime model call output flood: ${readString(outputFlood.stream)} exceeded ${readNumber(outputFlood.limitBytes, 0)} bytes` : succeeded ? null : `Runtime model call exited with code ${execution.exitCode ?? "unknown"}`);
+  const rawSummary = parsed.summary || parsed.finalMessage || parsed.messages?.join("\n\n") || "";
+  const semanticBytes = Buffer.byteLength(rawSummary, "utf8");
+  const semanticOutputExceeded = Boolean(responseContract && semanticBytes > responseContract.maxSemanticBytes);
+  const summary = semanticOutputExceeded ? "" : responseContract ? rawSummary : truncateText(rawSummary, 8e3);
+  const hasTerminalCompletion = !responseContract || executor.kind !== "pi" || Boolean(parsed.terminalEventType);
+  const succeeded = !hasOutputFlood && !timedOut && !semanticOutputExceeded && !execution.spawnError && execution.exitCode === 0 && hasTerminalCompletion && !parsed.errorMessage && Boolean(summary);
+  const error = timedOut ? `Runtime model call timed out after ${timeoutSeconds}s` : execution.spawnError ?? parsed.errorMessage ?? (hasOutputFlood ? `Runtime model call output flood: ${readString(outputFlood.stream)} exceeded ${readNumber(outputFlood.limitBytes, 0)} bytes` : semanticOutputExceeded ? `Runtime model call semantic output exceeded ${responseContract.maxSemanticBytes} bytes` : !hasTerminalCompletion ? "Runtime model call exited without a terminal provider response" : succeeded ? null : `Runtime model call exited with code ${execution.exitCode ?? "unknown"}`);
   await completeCommand(config, command, succeeded ? "succeeded" : "failed", {
     callType: "model_call",
     executorKind: executor.kind,
@@ -11920,7 +12170,21 @@ async function executeModelCallCommand(config, command, signal) {
     timedOut,
     summary,
     usage: parsed.usage,
-    stdout: truncateText(execution.stdout, 8e3),
+    ...responseContract ? {
+      driver: "pi_cli_json_v1",
+      responseContract,
+      stopReason: parsed.stopReason ?? null,
+      terminalEventType: parsed.terminalEventType ?? null,
+      semanticBytes,
+      outputBytes: Object.values(execution.outputBytes).reduce((total, bytes) => total + bytes, 0),
+      outputBytesByStream: execution.outputBytes,
+      retainedOutputBytes: Object.values(execution.retainedOutputBytes).reduce((total, bytes) => total + bytes, 0),
+      retainedOutputBytesByStream: execution.retainedOutputBytes
+    } : {},
+    // Contracted model calls persist semantic output and metadata only. Pi's
+    // JSONL stdout may contain provider reasoning/event content, so retaining
+    // even a bounded tail would violate the response-contract data boundary.
+    stdout: responseContract ? "" : truncateText(execution.stdout, 8e3),
     stderr: truncateText(filterExecutionStderrForResult(executor.kind, execution.stderr), 8e3),
     ...hasOutputFlood ? {
       errorCode: "model_call_output_flood",
@@ -11930,6 +12194,12 @@ async function executeModelCallCommand(config, command, signal) {
         bytes: readNumber(outputFlood.bytes, 0),
         limitBytes: readNumber(outputFlood.limitBytes, maxOutputBytes)
       }
+    } : semanticOutputExceeded ? {
+      errorCode: "model_call_semantic_output_exceeded",
+      errorFamily: "validation"
+    } : responseContract && !hasTerminalCompletion ? {
+      errorCode: "model_call_terminal_event_missing",
+      errorFamily: "provider_protocol"
     } : {}
   }, error ?? void 0);
 }
@@ -14202,7 +14472,7 @@ async function materializeIssueAttachments(config, command, workspace) {
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
     writeFileSync9(targetPath, body);
     const attachmentId = readString(attachment.id);
-    const actualSha256 = createHash14("sha256").update(body).digest("hex");
+    const actualSha256 = createHash15("sha256").update(body).digest("hex");
     const lineageCandidates = lineageCandidatesByAttachmentId.get(attachmentId) ?? [];
     const lineage = selectAttachmentLineage(lineageCandidates, actualSha256);
     if (lineageCandidates.length > 0 && !lineage) {
@@ -14283,10 +14553,10 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
     const entry = asRecord(rawEntry);
     const workProductId = readString(entry.workProductId);
     const attachmentId = readString(entry.attachmentId);
-    const sha256 = readString(entry.sha256);
+    const sha2562 = readString(entry.sha256);
     const contentPath = readString(entry.contentPath);
     const byteSize = readNumber(entry.byteSize, null);
-    if (!workProductId || !attachmentId || !/^[a-f0-9]{64}$/i.test(sha256 ?? "") || !contentPath || byteSize === null) {
+    if (!workProductId || !attachmentId || !/^[a-f0-9]{64}$/i.test(sha2562 ?? "") || !contentPath || byteSize === null) {
       throw new Error(`artifact_input_manifest_invalid: entry ${index} is incomplete`);
     }
     const expectedContentPath = `/api/attachments/${attachmentId}/content`;
@@ -14294,10 +14564,10 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       throw new Error(`artifact_input_manifest_invalid: entry ${index} contentPath does not match attachmentId`);
     }
     const body = await runtimeApiBuffer(runtimeAuth, contentPath);
-    const actualSha256 = createHash14("sha256").update(body).digest("hex");
-    if (body.byteLength !== byteSize || actualSha256 !== sha256) {
+    const actualSha256 = createHash15("sha256").update(body).digest("hex");
+    if (body.byteLength !== byteSize || actualSha256 !== sha2562) {
       throw new Error(
-        `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha256} actualSha256=${actualSha256}`
+        `artifact_input_integrity_mismatch: workProductId=${workProductId} expectedBytes=${byteSize} actualBytes=${body.byteLength} expectedSha256=${sha2562} actualSha256=${actualSha256}`
       );
     }
     const sourceDir = safeArtifactInputSourceDir(entry, index);
@@ -14327,7 +14597,7 @@ async function materializeRequiredArtifactInputs(config, command, workspace) {
       relativePath,
       contentType: readString(entry.contentType),
       byteSize: body.byteLength,
-      sha256,
+      sha256: sha2562,
       contentPath
     });
   }
@@ -14364,7 +14634,7 @@ function safeCheckpointRelativePath(rawPath) {
   return normalized;
 }
 function hashFileSha256(filePath) {
-  return createHash14("sha256").update(readFileSync11(filePath)).digest("hex");
+  return createHash15("sha256").update(readFileSync11(filePath)).digest("hex");
 }
 async function materializeIssueCheckpoint(config, command, workspace) {
   const checkpointDir = issueCheckpointDir(workspace);

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.21";
+const CONNECTOR_VERSION = "0.1.1-beta.22";
 
 const CAPABILITIES = [
   "remote_registration",
@@ -16,6 +16,7 @@ const CAPABILITIES = [
   "run_wakeup",
   "runtime_actions_v2",
   "model_call",
+  "model_call_output_contract_v1",
   "run_cancel",
   "run_terminate",
   "logs_cost_workspace_status",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.21",
+  "version": "0.1.1-beta.22",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",