@amaster.ai/employee-runtime-connector 0.1.1-beta.263 → 0.1.1-beta.264

package/README.md

@@ -95,21 +95,42 @@ It does not expose WorkBuddy experts, projects, Office integrations, marketplace
 connectors, or Pi's `final_model_context_attestation_v1`. The connector creates a
 private per-run CodeBuddy home, supplies one strict MirrorX MCP definition, uses an
 exact native-tool allowlist, and preserves only an authority-bound native session
-rollout. It never inherits the user's ordinary `.codebuddy` or WorkBuddy profile.
+rollout. It never inherits the user's ordinary `.codebuddy` settings, memory,
+projects, MCP servers, workflows, or marketplace state. When no dedicated provider
+credential is configured, it reuses only the current OS user's WorkBuddy desktop
+login through a bounded encrypted-file snapshot inside the private home. The
+connector copies only the active authentication id's `workbuddy-desktop.info`
+opaque encrypted bytes without decrypting, parsing, logging, or serializing token
+fields. Locks, logout markers, and backups are coordination/history state rather
+than authentication inputs and are not copied; any logout-marker directory entry,
+including a dangling symlink, makes the desktop session unavailable. CodeBuddy can
+mutate only the private snapshot.
 
 This executor is off by default. Enable discovery with
 `AMASTER_ENABLE_CODEBUDDY_EXECUTOR=true`. `AMASTER_CODEBUDDY_COMMAND` can select an
 explicit CLI; on macOS the gated discovery path can also find the CLI bundled in
 `/Applications/WorkBuddy.app`. The Server task-session snapshot owns the model for
 current commands; `AMASTER_CODEBUDDY_MODEL` is only a compatibility fallback for
-older commands without that snapshot. The daemon environment or a Server-issued
-command environment must provide exactly one of `CODEBUDDY_API_KEY` or
-`CODEBUDDY_AUTH_TOKEN`; ordinary host login state is not a credential source.
-Command-scoped values override same-name daemon values. Provider routing may additionally use the supported
+older commands without that snapshot. Authentication resolves in two fail-closed
+modes: exactly one explicitly configured `CODEBUDDY_API_KEY` or
+`CODEBUDDY_AUTH_TOKEN` wins, otherwise the current OS user's WorkBuddy desktop login
+must be present. Desktop login reuse validates the complete source path chain and
+opens it with no-follow file descriptors before materializing the private snapshot;
+all run configuration and native sessions stay isolated. The snapshot is currently
+supported on macOS and Linux, including Linux `XDG_DATA_HOME`; Windows
+continues to require an explicit provider credential until an ACL-equivalent safety
+check exists. If command scope supplies either auth variable, that complete auth
+scope overrides daemon auth; two methods in the selected scope fail closed. Provider routing may additionally use the supported
 `CODEBUDDY_INTERNET_ENVIRONMENT`, `CODEBUDDY_BASE_URL`, or proxy variables. Secret
 values remain run-scoped and must never be placed in arguments, logs, connector
 metadata, or committed configuration.
 
+Heartbeat readiness is explicitly a fresh `daemon_default` diagnostic, not command
+admission: a later command may supply its own complete auth scope. The source
+metadata check intentionally runs on each heartbeat so logout and permission changes
+are observed immediately; the measured local cost is about 0.03 ms per check, so it
+is not cached.
+
 This is an intentional compatibility break for the not-yet-public context-governance contract. There is no historical command migration, dual-read, or fallback from a new Server-issued envelope to an unproved executor path.
 
 ## Contracted Pi model calls

package/dist/amaster-runtime-daemon.mjs

@@ -10116,6 +10116,7 @@ var goalCriterionProgressReadModelSchema = external_exports.object({
   relatedDemands: external_exports.array(goalCriterionRelatedWorkSchema).max(20),
   relatedTasks: external_exports.array(goalCriterionRelatedWorkSchema).max(20),
   decisionRevision: external_exports.number().int().nonnegative().nullable(),
+  attentionItemKey: external_exports.string().min(1).nullable().optional(),
   expectedDecisionToken: sha256Schema5.nullable(),
   snoozedUntil: external_exports.string().datetime().nullable()
 }).strict();
@@ -14537,6 +14538,11 @@ var inboxActionCountSchema = external_exports.discriminatedUnion("kind", [
     ])
   }).strict()
 ]);
+var inboxGoalAttentionSummarySchema = external_exports.object({
+  attentionItemCount: external_exports.number().int().nonnegative(),
+  count: inboxActionCountSchema,
+  byGoalId: external_exports.record(external_exports.string().uuid(), external_exports.number().int().positive())
+}).strict();
 var inboxActionItemSchema = external_exports.object({
   itemKey: external_exports.string().min(1),
   itemRevision: external_exports.string().min(1),
@@ -14563,6 +14569,7 @@ var inboxActionItemSchema = external_exports.object({
     label: external_exports.string().min(1)
   }).strict(),
   resourceId: external_exports.string().min(1),
+  goalId: external_exports.string().uuid().nullable().optional(),
   issueId: external_exports.string().uuid().nullable(),
   issueIdentifier: external_exports.string().nullable(),
   issueStatus: external_exports.string().nullable(),
@@ -14593,6 +14600,8 @@ var inboxActionItemsResponseSchema = external_exports.object({
     governance: external_exports.number().int().nonnegative()
   }).strict(),
   count: inboxActionCountSchema,
+  goalAttention: inboxGoalAttentionSummarySchema.optional(),
+  scopedItemKeys: external_exports.array(external_exports.string().min(1)).optional(),
   nextCursor: external_exports.string().min(1).nullable()
 }).strict();
 
@@ -18334,7 +18343,7 @@ var oriaRunnerDeliverySchema = external_exports.object({
 
 // src/amaster-runtime-daemon.mjs
 import { chmodSync as chmodSync9, copyFileSync as copyFileSync3, existsSync as existsSync19, lstatSync as lstatSync12, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, readFileSync as readFileSync20, readdirSync as readdirSync12, realpathSync as realpathSync11, renameSync as renameSync10, rmSync as rmSync11, statSync as statSync13, symlinkSync as symlinkSync2, unlinkSync as unlinkSync4, writeFileSync as writeFileSync13 } from "node:fs";
-import { arch as arch4, homedir as homedir4, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
+import { arch as arch4, homedir as homedir5, hostname as hostname2, platform as platform4, tmpdir } from "node:os";
 import { basename as basename10, delimiter as delimiter4, dirname as dirname13, extname as extname3, isAbsolute as isAbsolute13, join as join20, relative as relative9, resolve as resolve18 } from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync5 } from "node:child_process";
 
@@ -19810,7 +19819,7 @@ function skipVoid(str, ptr, banNewLines, banComments) {
   }
   return ptr;
 }
-function skipUntil(str, ptr, sep4, end, banNewLines = false) {
+function skipUntil(str, ptr, sep5, end, banNewLines = false) {
   if (!end) {
     ptr = indexOfNewline(str, ptr);
     return ptr < 0 ? str.length : ptr;
@@ -19819,7 +19828,7 @@ function skipUntil(str, ptr, sep4, end, banNewLines = false) {
     let c = str[i];
     if (c === "#") {
       i = indexOfNewline(str, i);
-    } else if (c === sep4) {
+    } else if (c === sep5) {
       return i + 1;
     } else if (c === end || banNewLines && (c === "\n" || c === "\r" && str[i + 1] === "\n")) {
       return i;
@@ -21271,14 +21280,32 @@ function reconcileManagedCodexMcpProfiles(rootPath, options = {}) {
 
 // src/amaster-runtime-daemon/codebuddy-managed-mcp-profile.mjs
 import { createHash as createHash5 } from "node:crypto";
-import { chmodSync as chmodSync6, existsSync as existsSync7, lstatSync as lstatSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync7, readdirSync as readdirSync3, realpathSync as realpathSync4, rmSync as rmSync5, statSync as statSync5, writeFileSync as writeFileSync6 } from "node:fs";
-import { arch as arch2, platform as platform2 } from "node:os";
-import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute5, join as join8, relative as relative3, resolve as resolve7 } from "node:path";
+import {
+  chmodSync as chmodSync6,
+  closeSync,
+  constants as fsConstants,
+  existsSync as existsSync7,
+  fstatSync,
+  lstatSync as lstatSync6,
+  mkdirSync as mkdirSync4,
+  openSync,
+  readFileSync as readFileSync7,
+  readdirSync as readdirSync3,
+  realpathSync as realpathSync4,
+  rmSync as rmSync5,
+  statSync as statSync5,
+  writeFileSync as writeFileSync6
+} from "node:fs";
+import { arch as arch2, homedir as homedir3, platform as platform2 } from "node:os";
+import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute5, join as join8, parse as parse2, relative as relative3, resolve as resolve7, sep as sep2 } from "node:path";
 var SUPPORTED_SCHEMA_VERSION2 = "amaster.governed-mcp.v1";
 var SUPPORTED_SERVER_NAME2 = "amaster";
 var PROFILE_MARKER2 = ".mirrorx-managed-codebuddy-profile.json";
 var SESSION_ROLLOUT_MARKER2 = ".mirrorx-codebuddy-session-rollout.json";
 var DEFAULT_SESSION_ROLLOUT_TTL_MS2 = 24 * 60 * 60 * 1e3;
+var CODEBUDDY_DESKTOP_AUTH_SOURCE = "workbuddy_desktop_session";
+var CODEBUDDY_WORKBUDDY_AUTH_FILE = "workbuddy-desktop.info";
+var MAX_CODEBUDDY_DESKTOP_AUTH_BYTES = 4 * 1024 * 1024;
 var CODEBUDDY_NATIVE_TOOLS = [
   "Bash",
   "Edit",
@@ -21369,6 +21396,187 @@ function within3(candidate, root) {
   const rel = relative3(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute5(rel);
 }
+function codebuddyIsolatedAuthRelativePath(targetPlatform = platform2()) {
+  if (targetPlatform === "darwin") {
+    return join8("Library", "Application Support", "CodeBuddyExtension", "Data", "Public", "auth");
+  }
+  if (targetPlatform === "linux") {
+    return join8(".local", "share", "CodeBuddyExtension", "Data", "Public", "auth");
+  }
+  throw new Error(`codebuddy_managed_mcp_desktop_auth_unsupported: platform ${targetPlatform} is not supported`);
+}
+function codebuddyDesktopAuthDirectory(sourceHome, sourceEnv, targetPlatform) {
+  if (targetPlatform === "darwin") {
+    return join8(sourceHome, codebuddyIsolatedAuthRelativePath(targetPlatform));
+  }
+  if (targetPlatform === "linux") {
+    const xdgDataHome = typeof sourceEnv?.XDG_DATA_HOME === "string" ? sourceEnv.XDG_DATA_HOME.trim() : "";
+    if (xdgDataHome) {
+      if (!isAbsolute5(xdgDataHome)) {
+        throw new Error("codebuddy_managed_mcp_desktop_auth_xdg_invalid: XDG_DATA_HOME must be absolute");
+      }
+      const resolvedXdgDataHome = resolve7(xdgDataHome);
+      const canonicalXdgDataHome = existsSync7(resolvedXdgDataHome) ? realpathSync4(resolvedXdgDataHome) : resolvedXdgDataHome;
+      return join8(canonicalXdgDataHome, "CodeBuddyExtension", "Data", "Public", "auth");
+    }
+    return join8(sourceHome, codebuddyIsolatedAuthRelativePath(targetPlatform));
+  }
+  throw new Error(`codebuddy_managed_mcp_desktop_auth_unsupported: platform ${targetPlatform} is not supported`);
+}
+function absolutePathChain(path) {
+  const absolute = resolve7(path);
+  const root = parse2(absolute).root;
+  const components = relative3(root, absolute).split(sep2).filter(Boolean);
+  const chain = [root];
+  for (const component of components) chain.push(join8(chain.at(-1), component));
+  return chain;
+}
+function sameFileIdentity(left, right) {
+  return left.dev === right.dev && left.ino === right.ino;
+}
+function sameTrustedFileMetadata(left, right) {
+  return sameFileIdentity(left, right) && left.uid === right.uid && (left.mode & 4095) === (right.mode & 4095);
+}
+function lstatIfPresent(path) {
+  try {
+    return lstatSync6(path);
+  } catch (error) {
+    if (error && typeof error === "object" && error.code === "ENOENT") return null;
+    throw error;
+  }
+}
+function inspectCodebuddyDesktopAuthDirectory(sourceHome = homedir3(), sourceEnv = process.env, targetPlatform = platform2()) {
+  try {
+    const resolvedSourceHome = realpathSync4(resolve7(nonEmpty2(sourceHome, "desktopHome")));
+    const sourceAuthDir = codebuddyDesktopAuthDirectory(resolvedSourceHome, sourceEnv, targetPlatform);
+    if (!lstatIfPresent(sourceAuthDir)) {
+      return { available: false, source: CODEBUDDY_DESKTOP_AUTH_SOURCE, reasonCode: "desktop_auth_directory_missing" };
+    }
+    const sourceAuthFile = join8(sourceAuthDir, CODEBUDDY_WORKBUDDY_AUTH_FILE);
+    if (!lstatIfPresent(sourceAuthFile)) {
+      return { available: false, source: CODEBUDDY_DESKTOP_AUTH_SOURCE, reasonCode: "desktop_login_missing" };
+    }
+    if (lstatIfPresent(`${sourceAuthFile}.logged-out`)) {
+      return { available: false, source: CODEBUDDY_DESKTOP_AUTH_SOURCE, reasonCode: "desktop_login_missing" };
+    }
+    const chain = absolutePathChain(sourceAuthFile);
+    const currentUid = typeof process.getuid === "function" ? process.getuid() : null;
+    const pathChain = [];
+    for (const candidate of chain) {
+      const candidateStat = lstatSync6(candidate);
+      const isAuthFile = candidate === sourceAuthFile;
+      const isAuthDir = candidate === sourceAuthDir;
+      if (candidateStat.isSymbolicLink() || (isAuthFile ? !candidateStat.isFile() : !candidateStat.isDirectory())) {
+        return {
+          available: false,
+          source: CODEBUDDY_DESKTOP_AUTH_SOURCE,
+          reasonCode: isAuthFile ? "desktop_auth_file_unsafe" : isAuthDir ? "desktop_auth_directory_unsafe" : "desktop_auth_ancestor_unsafe"
+        };
+      }
+      const ownerAllowed = currentUid === null || candidateStat.uid === currentUid || !isAuthFile && !isAuthDir && candidateStat.uid === 0;
+      if (!ownerAllowed) {
+        return {
+          available: false,
+          source: CODEBUDDY_DESKTOP_AUTH_SOURCE,
+          reasonCode: isAuthFile ? "desktop_auth_file_owner_mismatch" : isAuthDir ? "desktop_auth_owner_mismatch" : "desktop_auth_ancestor_owner_mismatch"
+        };
+      }
+      const stickyRootOwnedDirectory = !isAuthFile && !isAuthDir && candidateStat.uid === 0 && (candidateStat.mode & 512) !== 0;
+      if ((candidateStat.mode & 18) !== 0 && !stickyRootOwnedDirectory) {
+        return {
+          available: false,
+          source: CODEBUDDY_DESKTOP_AUTH_SOURCE,
+          reasonCode: isAuthFile ? "desktop_auth_file_writable_by_others" : isAuthDir ? "desktop_auth_directory_writable_by_others" : "desktop_auth_ancestor_writable_by_others"
+        };
+      }
+      pathChain.push({ path: candidate, stat: candidateStat });
+    }
+    const sourceAuthFileStat = pathChain.at(-1).stat;
+    if (sourceAuthFileStat.size <= 0 || sourceAuthFileStat.size > MAX_CODEBUDDY_DESKTOP_AUTH_BYTES) {
+      return { available: false, source: CODEBUDDY_DESKTOP_AUTH_SOURCE, reasonCode: "desktop_auth_file_size_invalid" };
+    }
+    return {
+      available: true,
+      source: CODEBUDDY_DESKTOP_AUTH_SOURCE,
+      sourceAuthDir,
+      sourceAuthFile,
+      pathChain,
+      authFileCount: 1
+    };
+  } catch (error) {
+    return {
+      available: false,
+      source: CODEBUDDY_DESKTOP_AUTH_SOURCE,
+      reasonCode: error instanceof Error ? error.message.startsWith("codebuddy_managed_mcp_desktop_auth_unsupported:") ? "desktop_auth_platform_unsupported" : error.message.startsWith("codebuddy_managed_mcp_desktop_auth_xdg_invalid:") ? "desktop_auth_xdg_data_home_invalid" : "desktop_auth_inspection_failed" : "desktop_auth_inspection_failed"
+    };
+  }
+}
+function inspectCodebuddyDesktopAuthReadiness(sourceHome = homedir3(), sourceEnv = process.env, targetPlatform = platform2()) {
+  const inspected = inspectCodebuddyDesktopAuthDirectory(sourceHome, sourceEnv, targetPlatform);
+  return {
+    available: inspected.available,
+    source: inspected.source,
+    ...inspected.available ? { authFileCount: inspected.authFileCount } : { reasonCode: inspected.reasonCode }
+  };
+}
+function snapshotCodebuddyDesktopAuth(sourceHome, sourceEnv, isolatedHome) {
+  const inspected = inspectCodebuddyDesktopAuthDirectory(sourceHome, sourceEnv);
+  if (!inspected.available) {
+    throw new Error(
+      `codebuddy_managed_mcp_desktop_auth_missing: ${inspected.reasonCode}; sign in to WorkBuddy Desktop or configure exactly one of CODEBUDDY_API_KEY and CODEBUDDY_AUTH_TOKEN`
+    );
+  }
+  const openDescriptors = [];
+  let authSnapshot = null;
+  try {
+    for (const [index, entry] of inspected.pathChain.entries()) {
+      const isAuthFile = index === inspected.pathChain.length - 1;
+      const flags = fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | (isAuthFile ? 0 : fsConstants.O_DIRECTORY);
+      const fd = openSync(entry.path, flags);
+      openDescriptors.push(fd);
+      const openedStat = fstatSync(fd);
+      if (!sameTrustedFileMetadata(openedStat, entry.stat)) {
+        throw new Error("codebuddy_managed_mcp_desktop_auth_changed: source path changed during validation");
+      }
+      if (isAuthFile) {
+        if (!openedStat.isFile() || openedStat.size <= 0 || openedStat.size > MAX_CODEBUDDY_DESKTOP_AUTH_BYTES) {
+          throw new Error("codebuddy_managed_mcp_desktop_auth_unsafe: source auth file is invalid");
+        }
+        authSnapshot = readFileSync7(fd);
+        const afterReadStat = fstatSync(fd);
+        if (!sameTrustedFileMetadata(openedStat, afterReadStat) || openedStat.size !== afterReadStat.size || openedStat.mtimeMs !== afterReadStat.mtimeMs || authSnapshot.length !== openedStat.size) {
+          throw new Error("codebuddy_managed_mcp_desktop_auth_changed: source auth file changed during snapshot");
+        }
+      }
+    }
+    for (const entry of inspected.pathChain) {
+      const currentStat = lstatSync6(entry.path);
+      if (currentStat.isSymbolicLink() || !sameTrustedFileMetadata(currentStat, entry.stat)) {
+        throw new Error("codebuddy_managed_mcp_desktop_auth_changed: source path changed during snapshot");
+      }
+    }
+    if (lstatIfPresent(`${inspected.sourceAuthFile}.logged-out`)) {
+      throw new Error("codebuddy_managed_mcp_desktop_auth_changed: desktop session logged out during snapshot");
+    }
+    const targetAuthDir = join8(isolatedHome, codebuddyIsolatedAuthRelativePath());
+    privateDir(targetAuthDir);
+    const targetAuthFile = join8(targetAuthDir, CODEBUDDY_WORKBUDDY_AUTH_FILE);
+    privateFile(targetAuthFile, authSnapshot);
+    return {
+      authMode: CODEBUDDY_DESKTOP_AUTH_SOURCE,
+      targetAuthDir,
+      targetAuthFile
+    };
+  } finally {
+    if (authSnapshot) authSnapshot.fill(0);
+    for (const fd of openDescriptors.reverse()) {
+      try {
+        closeSync(fd);
+      } catch {
+      }
+    }
+  }
+}
 function findCodebuddySession(configDir, sessionId) {
   const projectsRoot = join8(configDir, "projects");
   if (!existsSync7(projectsRoot)) {
@@ -21460,16 +21668,56 @@ function buildIsolatedEnvironment2(baseEnv, commandEnv) {
   }
   return env;
 }
+function codebuddyAuthSelection(baseEnv, commandEnv) {
+  const scopes = [
+    { name: "command_env", value: record5(commandEnv) },
+    { name: "daemon_env", value: record5(baseEnv) }
+  ];
+  for (const scope of scopes) {
+    const apiKey = typeof scope.value.CODEBUDDY_API_KEY === "string" ? scope.value.CODEBUDDY_API_KEY.trim() : "";
+    const authToken = typeof scope.value.CODEBUDDY_AUTH_TOKEN === "string" ? scope.value.CODEBUDDY_AUTH_TOKEN.trim() : "";
+    if (!apiKey && !authToken) continue;
+    const sources = [
+      ...apiKey ? ["CODEBUDDY_API_KEY"] : [],
+      ...authToken ? ["CODEBUDDY_AUTH_TOKEN"] : []
+    ];
+    return {
+      scope: scope.name,
+      apiKey,
+      authToken,
+      sources,
+      conflict: sources.length > 1,
+      authMode: apiKey && !authToken ? "api_key" : authToken && !apiKey ? "oauth_token" : null
+    };
+  }
+  return {
+    scope: null,
+    apiKey: "",
+    authToken: "",
+    sources: [],
+    conflict: false,
+    authMode: null
+  };
+}
+function inspectCodebuddyProviderAuthReadiness(baseEnv = process.env, commandEnv = {}) {
+  const selected = codebuddyAuthSelection(baseEnv, commandEnv);
+  return {
+    present: selected.sources.length > 0,
+    conflict: selected.conflict,
+    ...selected.sources.length > 0 ? { sources: selected.sources, scope: selected.scope } : {},
+    ...selected.authMode ? { authMode: selected.authMode } : {}
+  };
+}
 function codebuddyProviderEnvironment(baseEnv, commandEnv) {
   const source = { ...record5(baseEnv), ...record5(commandEnv) };
-  const apiKey = typeof source.CODEBUDDY_API_KEY === "string" ? source.CODEBUDDY_API_KEY.trim() : "";
-  const authToken = typeof source.CODEBUDDY_AUTH_TOKEN === "string" ? source.CODEBUDDY_AUTH_TOKEN.trim() : "";
-  if (!apiKey && !authToken) {
-    throw new Error("codebuddy_managed_mcp_auth_missing: configure CODEBUDDY_API_KEY or CODEBUDDY_AUTH_TOKEN in the agent runtime environment");
-  }
-  if (apiKey && authToken) {
+  const selectedAuth = codebuddyAuthSelection(baseEnv, commandEnv);
+  if (selectedAuth.conflict) {
     throw new Error("codebuddy_managed_mcp_auth_conflict: configure only one CodeBuddy authentication method");
   }
+  delete source.CODEBUDDY_API_KEY;
+  delete source.CODEBUDDY_AUTH_TOKEN;
+  if (selectedAuth.apiKey) source.CODEBUDDY_API_KEY = selectedAuth.apiKey;
+  if (selectedAuth.authToken) source.CODEBUDDY_AUTH_TOKEN = selectedAuth.authToken;
   const env = {};
   for (const [key, value] of Object.entries(source)) {
     if (!CODEBUDDY_PROVIDER_ENV.has(key) || typeof value !== "string" || value.trim() === "") continue;
@@ -21478,8 +21726,8 @@ function codebuddyProviderEnvironment(baseEnv, commandEnv) {
   return {
     env,
     protectedValues: [...new Set([
-      apiKey,
-      authToken,
+      selectedAuth.apiKey,
+      selectedAuth.authToken,
       source.CODEBUDDY_BASE_URL,
       source.HTTP_PROXY,
       source.HTTPS_PROXY,
@@ -21488,7 +21736,8 @@ function codebuddyProviderEnvironment(baseEnv, commandEnv) {
       source.https_proxy,
       source.all_proxy
     ].filter((value) => typeof value === "string" && value.trim() !== ""))],
-    authMode: apiKey ? "api_key" : "oauth_token"
+    authMode: selectedAuth.authMode,
+    authScope: selectedAuth.scope
   };
 }
 function validateAuthority2(input) {
@@ -21583,10 +21832,12 @@ function prepareManagedCodebuddyMcpProfile(input) {
     }, null, 2)}
 `);
     const provider = codebuddyProviderEnvironment(input.baseEnv, input.commandEnv);
+    const desktopAuthSnapshot = provider.authMode ? null : snapshotCodebuddyDesktopAuth(input.desktopHome ?? homedir3(), input.desktopEnv ?? process.env, home);
     const env = {
       ...buildIsolatedEnvironment2(input.baseEnv, input.commandEnv),
       ...provider.env,
       HOME: home,
+      ...platform2() === "win32" ? { USERPROFILE: home } : {},
       TMPDIR: tmp,
       CODEBUDDY_CONFIG_DIR: configDir,
       CODEBUDDY_DISABLE_MEMORY: "true",
@@ -21646,8 +21897,15 @@ function prepareManagedCodebuddyMcpProfile(input) {
         ...attestationFacts,
         attestationId: createHash5("sha256").update(JSON.stringify(attestationFacts)).digest("hex"),
         attestedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        authMode: provider.authMode
-      }
+        authMode: provider.authMode ?? desktopAuthSnapshot.authMode,
+        authScope: provider.authScope ?? "desktop_os_user",
+        authIsolation: desktopAuthSnapshot ? "isolated_home_desktop_auth_snapshot" : "isolated_home_provider_env"
+      },
+      desktopAuthSnapshot: desktopAuthSnapshot ? {
+        source: CODEBUDDY_DESKTOP_AUTH_SOURCE,
+        targetAuthDir: desktopAuthSnapshot.targetAuthDir,
+        targetAuthFile: desktopAuthSnapshot.targetAuthFile
+      } : null
     };
   } catch (error) {
     rmSync5(profileRoot, { recursive: true, force: true });
@@ -21821,7 +22079,7 @@ import {
   writeFileSync as writeFileSync7
 } from "node:fs";
 import { arch as arch3, platform as platform3 } from "node:os";
-import { basename as basename5, delimiter as delimiter3, dirname as dirname7, isAbsolute as isAbsolute6, join as join10, relative as relative4, resolve as resolve9, sep as sep2 } from "node:path";
+import { basename as basename5, delimiter as delimiter3, dirname as dirname7, isAbsolute as isAbsolute6, join as join10, relative as relative4, resolve as resolve9, sep as sep3 } from "node:path";
 import { spawnSync as spawnSync3 } from "node:child_process";
 
 // src/amaster-runtime-daemon/pi-mcp-adapter-config.mjs
@@ -22927,7 +23185,7 @@ function createManagedPiMcpProfileApi(options = {}) {
       const current = pending.pop();
       const currentStat = lstatSync8(current);
       if (currentStat.isSymbolicLink()) throw new Error(`pi_managed_mcp_bootstrap_cache_unsafe: ${current}`);
-      const relativePath = relative4(root, current).split(sep2).join("/");
+      const relativePath = relative4(root, current).split(sep3).join("/");
       if (currentStat.isDirectory()) {
         hash.update(`d:${relativePath}
 `);
@@ -23699,7 +23957,7 @@ function createManagedPiMcpProfileApi(options = {}) {
       const directory = pending.pop();
       for (const child of readdirSync4(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name))) {
         const candidate = join10(directory, child.name);
-        const relativePath = relative4(root, candidate).split(sep2).join("/");
+        const relativePath = relative4(root, candidate).split(sep3).join("/");
         const stat = lstatSync8(candidate);
         if (stat.isSymbolicLink()) throw new Error("pi_managed_mcp_company_skill_existing_source_unsafe");
         if (stat.isDirectory()) {
@@ -29974,10 +30232,6 @@ function fixedRules(input, includeIssueLine, runContract = "producer") {
 function compileConversationPrompt(input, context, maxChars) {
   const mode = promptContextMode(input);
   const taskText = readString(input.taskMarkdown) ?? "";
-  const wakeBodies = commentBodies(context);
-  const commentsDuplicatedByTask = !Array.isArray(context.paperclipTaskMarkdownCommentIds) && taskText && wakeBodies.length > 0 && wakeBodies.every((body) => taskText.includes(body));
-  const commentsSelected = mode !== "cold" || !commentsDuplicatedByTask;
-  const comments = commentsSelected ? readString(input.comments) ?? "" : "";
   const contextScope = {
     companyId: readString(asRecord(context.paperclipCompany).id),
     issueId: input.issueId ?? null
@@ -29989,8 +30243,11 @@ function compileConversationPrompt(input, context, maxChars) {
     `- workspace: ${input.cwd}`,
     input.managed ? `- source workspace: ${input.sourceWorkspacePath}` : ""
   ].filter(Boolean).join("\n");
+  const wakeComments = asRecord(context.paperclipWake).comments;
+  const latestWakeMessage = Array.isArray(wakeComments) ? [...wakeComments].reverse().map((comment) => readString(asRecord(comment).body)).find(Boolean) : null;
+  const userPrompt = latestWakeMessage ?? readString(asRecord(context.paperclipWakeComment).body) ?? readString(asRecord(context.paperclipIssue).description);
+  if (!userPrompt) throw new Error("conversation_user_message_missing");
   const rawSections = [
-    { name: "wake_comments", title: "Latest Message", priority: 95, sourceRef: commentRefs(context).map((id) => `comment:${id}`), originalContent: readString(input.comments) ?? "", content: comments, truncationReason: commentsSelected ? null : "duplicate_task_context" },
     { name: "task", title: "Conversation History", priority: 90, sourceRef: "conversation", originalContent: taskText, content: mode === "cold" ? taskText : "", truncationReason: mode === "cold" ? null : "mode_selection" },
     { name: "runtime_safety", title: "Runtime Safety", priority: 100, sourceRef: `command:${input.commandId}`, content: runtimeSafety },
     ...piGovernedTools ? [{ name: "pi_governed_tools", title: "Pi Governed Tools", priority: 96, sourceRef: "amaster_governed_mcp_direct_typed_contract", content: piGovernedTools }] : [],
@@ -30002,16 +30259,24 @@ function compileConversationPrompt(input, context, maxChars) {
     section.scope ??= contextScope;
     section.freshness ??= { kind: "run_snapshot" };
   }
+  const systemPromptBudget = maxChars === null ? null : Math.max(0, maxChars - userPrompt.length);
   const compiled = compilePreparedSections({
     rawSections,
     mode,
-    maxChars,
+    maxChars: systemPromptBudget,
     governedReadProvenance: [],
     resolvedDependencyTupleCount: 0
   });
   compiled.manifest.runContract = "producer";
   compiled.manifest.continuationPromptContract = { capability: null, mode: "legacy_server_owned_in_progress" };
-  return compiled;
+  const usedChars = userPrompt.length + compiled.prompt.length;
+  compiled.manifest.budget = {
+    ...compiled.manifest.budget,
+    totalChars: maxChars,
+    usedChars,
+    utilization: maxChars === null ? null : (usedChars / maxChars).toFixed(4)
+  };
+  return { prompt: userPrompt, systemPrompt: compiled.prompt, manifest: compiled.manifest };
 }
 function approvalContinuationText(input) {
   if (asRecord(input.nativeSession).mode !== "governed_action_approval") return "";
@@ -31275,7 +31540,7 @@ function pathWithin(candidate, root) {
   const rel = relative5(root, candidate);
   return rel === "" || !rel.startsWith("..") && !isAbsolute8(rel);
 }
-function lstatIfPresent(path) {
+function lstatIfPresent2(path) {
   try {
     return lstatSync9(path);
   } catch (error) {
@@ -31296,7 +31561,7 @@ function isManagedExecutionDirectory(directory, managedWorkspacesRoot) {
   const candidate = canonicalExistingPath(directory);
   if (!pathWithin(candidate, managedRoot)) return false;
   const manifestPath = join13(candidate, WORKSPACE_MANIFEST_FILENAME);
-  const manifestStat = lstatIfPresent(manifestPath);
+  const manifestStat = lstatIfPresent2(manifestPath);
   if (!manifestStat?.isFile() || manifestStat.isSymbolicLink()) return false;
   try {
     const manifest = JSON.parse(readFileSync14(manifestPath, "utf8"));
@@ -31497,7 +31762,7 @@ function projectExternalWorkspaceProjectInstructions(sourceWorkspacePath, execut
   let modelFacingSha256 = null;
   if (selectedSources.length > 0) {
     const targetPath = resolve10(targetRoot, "AGENTS.md");
-    const targetStat = lstatIfPresent(targetPath);
+    const targetStat = lstatIfPresent2(targetPath);
     if (!pathWithin(targetPath, targetRoot) || targetStat?.isSymbolicLink()) {
       throw instructionTopologyError(
         "workspace_project_instruction_projection_unsafe",
@@ -31583,8 +31848,8 @@ function agentInstructionDeliveryAudit(bundle, delivery) {
 
 // src/amaster-runtime-daemon/config-state.mjs
 import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync15, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync11 } from "node:fs";
-import { homedir as homedir3, hostname } from "node:os";
-import { dirname as dirname10, join as join14, parse as parse2, resolve as resolve11 } from "node:path";
+import { homedir as homedir4, hostname } from "node:os";
+import { dirname as dirname10, join as join14, parse as parse3, resolve as resolve11 } from "node:path";
 
 // src/amaster-runtime-daemon/capability-registry.mjs
 var BUILD_SUPPORTED_CAPABILITIES = Object.freeze([
@@ -31696,13 +31961,13 @@ function defaultMachineId() {
 }
 function runtimeHome(env) {
   return expandHomePath(String(
-    env.AMASTER_RUNTIME_STATE_HOME || env.AMASTER_RUNTIME_HOME || join14(homedir3(), ".amaster-employee")
+    env.AMASTER_RUNTIME_STATE_HOME || env.AMASTER_RUNTIME_HOME || join14(homedir4(), ".amaster-employee")
   ));
 }
 function runtimeTemplatesRoot(env, home) {
   const configured = String(env.AMASTER_RUNTIME_TEMPLATES_ROOT ?? "").trim();
   const resolved = configured ? resolve11(expandHomePath(configured)) : resolve11(String(env.PI_CODING_AGENT_DIR ?? "")) === "/data/.pi" ? "/data/templates" : resolve11(join14(home, "templates"));
-  if (resolved === parse2(resolved).root) {
+  if (resolved === parse3(resolved).root) {
     throw new Error("AMASTER_RUNTIME_TEMPLATES_ROOT must not be a filesystem root");
   }
   return resolved;
@@ -32162,7 +32427,7 @@ function createBrowserCredentialChannel({ consume }) {
 
 // src/amaster-runtime-daemon/runtime-artifact-upload.mjs
 import { createHash as createHash13 } from "node:crypto";
-import { closeSync, constants, fstatSync, lstatSync as lstatSync10, openSync, readFileSync as readFileSync16, realpathSync as realpathSync9 } from "node:fs";
+import { closeSync as closeSync2, constants, fstatSync as fstatSync2, lstatSync as lstatSync10, openSync as openSync2, readFileSync as readFileSync16, realpathSync as realpathSync9 } from "node:fs";
 import { isAbsolute as isAbsolute9, relative as relative6, resolve as resolve12 } from "node:path";
 var SHA256_PATTERN = /^[a-f0-9]{64}$/;
 function requiredString2(value, name) {
@@ -32190,9 +32455,9 @@ function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime w
     throw new Error(`${label} source is not an owned regular file`);
   }
   const noFollow = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
-  const descriptor = openSync(sourcePath, constants.O_RDONLY | noFollow);
+  const descriptor = openSync2(sourcePath, constants.O_RDONLY | noFollow);
   try {
-    const before = fstatSync(descriptor);
+    const before = fstatSync2(descriptor);
     if (!before.isFile() || !sameFileSnapshot(pathStat, before)) {
       throw new Error(`${label} source changed before the governed read`);
     }
@@ -32216,14 +32481,14 @@ function readOwnedWorkspaceFile(rootPath, sourceRelativePath, label = "Runtime w
     }
     const body = readFileSync16(descriptor);
     options.afterRead?.({ sourcePath, descriptor });
-    const after = fstatSync(descriptor);
+    const after = fstatSync2(descriptor);
     const pathAfter = lstatSync10(sourcePath);
     if (!sameFileSnapshot(before, after) || !sameFileSnapshot(pathAfter, after) || !pathAfter.isFile() || pathAfter.isSymbolicLink() || !pathWithin2(realpathSync9(sourcePath), root) || body.length !== after.size) {
       throw new Error(`${label} source changed during the governed read`);
     }
     return { body, relativePath, stat: after };
   } finally {
-    closeSync(descriptor);
+    closeSync2(descriptor);
   }
 }
 function prepareRuntimeArtifactUploads(cwd, mcpToolResults) {
@@ -32782,7 +33047,7 @@ import {
   unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync12
 } from "node:fs";
-import { dirname as dirname11, extname, isAbsolute as isAbsolute11, join as join17, parse as parse3, resolve as resolve15, sep as sep3 } from "node:path";
+import { dirname as dirname11, extname, isAbsolute as isAbsolute11, join as join17, parse as parse4, resolve as resolve15, sep as sep4 } from "node:path";
 import { fileURLToPath } from "node:url";
 var PRESET_TEMPLATE_MANIFEST_FILE = ".mirrorx-preset-templates.json";
 var MAX_PRESET_TEMPLATE_FILES = 256;
@@ -32838,7 +33103,7 @@ function hasAllowedTemplateExtension(name) {
   return ALLOWED_TEMPLATE_EXTENSIONS.has(extname(name).toLowerCase());
 }
 function validTemplateName(value) {
-  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute11(value) && parse3(value).base === value && hasAllowedTemplateExtension(value);
+  return typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !value.includes("\0") && !value.includes("/") && !value.includes("\\") && !isAbsolute11(value) && parse4(value).base === value && hasAllowedTemplateExtension(value);
 }
 function readManifest(manifestPath, { strict }) {
   try {
@@ -32897,7 +33162,7 @@ function removeRetiredPresetFiles(targetDir, previousManifest, nextNames) {
 function materializeBundledPresetTemplates(input) {
   const sourceDir = resolve15(input.sourceDir);
   const targetDir = resolve15(input.targetDir);
-  if (sourceDir === targetDir || sourceDir.startsWith(`${targetDir}${sep3}`) || targetDir.startsWith(`${sourceDir}${sep3}`)) {
+  if (sourceDir === targetDir || sourceDir.startsWith(`${targetDir}${sep4}`) || targetDir.startsWith(`${sourceDir}${sep4}`)) {
     throw new Error("preset_template_source_target_overlap");
   }
   const manifest = readManifest(join17(sourceDir, PRESET_TEMPLATE_MANIFEST_FILE), { strict: true });
@@ -33745,7 +34010,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.263";
+var CONNECTOR_VERSION = "0.1.1-beta.264";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var daemonRequire = createRequire2(import.meta.url);
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
@@ -34059,7 +34324,7 @@ function objectKeyCount(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? Object.keys(value).length : 0;
 }
 function defaultPiCodingAgentDir() {
-  return join20(homedir4(), ".pi", "agent");
+  return join20(homedir5(), ".pi", "agent");
 }
 function piCapabilitySourcesDiagnostics() {
   const configuredPiCodingAgentDir = safeExpandPath(process.env.PI_CODING_AGENT_DIR);
@@ -34189,18 +34454,30 @@ function executorReadinessFor(config, executor, piFinalContextAttestation) {
     };
   }
   if (executor.kind === "codebuddy") {
+    const providerAuthEnv = inspectCodebuddyProviderAuthReadiness(process.env);
+    const providerAuthConflict = providerAuthEnv.conflict;
+    const desktopSession = inspectCodebuddyDesktopAuthReadiness();
     return {
       ...entry,
       label: "WorkBuddy Host\uFF08CodeBuddy \u6267\u884C\u5F15\u64CE\uFF09",
       model: configuredValue("AMASTER_CODEBUDDY_MODEL", process.env.AMASTER_CODEBUDDY_MODEL),
       auth: {
-        providerAuthEnv: optionalEnvPresence("CODEBUDDY_API_KEY", "CODEBUDDY_AUTH_TOKEN")
+        diagnosticScope: "daemon_default",
+        commandOverrideSupported: true,
+        source: providerAuthConflict ? "provider_env_conflict" : providerAuthEnv.present ? "provider_env" : desktopSession.source,
+        available: !providerAuthConflict && (providerAuthEnv.present || desktopSession.available),
+        providerAuthEnv: {
+          ...providerAuthEnv,
+          conflict: providerAuthConflict
+        },
+        desktopSession
       },
       capabilityProtection: {
         featureGateEnabled: process.env.AMASTER_ENABLE_CODEBUDDY_EXECUTOR === "true",
         isolatedConfig: true,
         strictManagedMcp: true,
         inheritedWorkBuddyProfiles: false,
+        desktopAuthPrivateSnapshot: true,
         minimumExecutorVersion: MINIMUM_CODEBUDDY_VERSION
       }
     };
@@ -34511,7 +34788,7 @@ AMASTER_MACHINE_ID=${quoteShell(config.machineId)}
 AMASTER_WORKSPACE_ALLOWLIST=${quoteShell(config.workspaceBindings.join(","))}
 AMASTER_EXECUTORS=${quoteShell(executorEnv)}
 AMASTER_NETWORK_DOMAINS=${quoteShell(config.networkDomains.join(","))}
-AMASTER_DAEMON_STATE_FILE=${quoteShell(join20(homedir4(), ".amaster-employee", "runtime-connector-state.json"))}
+AMASTER_DAEMON_STATE_FILE=${quoteShell(join20(homedir5(), ".amaster-employee", "runtime-connector-state.json"))}
 EOF
 
 set -a
@@ -38462,6 +38739,16 @@ async function executeRunCommand(config, command) {
     }));
     const prompt = promptCompilation.prompt;
     const contextManifest = promptCompilation.manifest;
+    const appendedSystemPrompt = readString(promptCompilation.systemPrompt);
+    if (executor.kind === "pi" && appendedSystemPrompt) {
+      const promptRoot = managedMcpProfile?.profileRoot ?? workspace.executorHome;
+      const promptDir = join20(promptRoot, "tmp");
+      mkdirSync11(promptDir, { recursive: true, mode: 448 });
+      const promptPath = join20(promptDir, "conversation-system.md");
+      writeFileSync13(promptPath, appendedSystemPrompt, { encoding: "utf8", mode: 384, flag: "wx" });
+      const printIndex = invocation.args.lastIndexOf("-p");
+      invocation.args.splice(printIndex < 0 ? invocation.args.length : printIndex, 0, "--append-system-prompt", promptPath);
+    }
     let projectInstructionSnapshot = null;
     if (strictContextGovernance) {
       const finalContextExtensions = await runExecutionStage("context_attestation", () => attachPiFinalContextAttestor(managedMcpProfile, {

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.263";
+const CONNECTOR_VERSION = "0.1.1-beta.264";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.263",
+  "version": "0.1.1-beta.264",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",