@amaster.ai/employee-runtime-connector 0.1.1-beta.270 → 0.1.1-beta.271

package/dist/amaster-runtime-daemon.mjs

@@ -5372,6 +5372,12 @@ var ERROR_PRESENTATIONS = {
     nextAction: null,
     tone: "neutral"
   },
+  issue_terminal_status: {
+    label: "\u4EFB\u52A1\u5DF2\u7ED3\u675F",
+    summary: "\u4EFB\u52A1\u5DF2\u8FDB\u5165\u7EC8\u6001\uFF0C\u672C\u6B21\u6267\u884C\u5DF2\u505C\u6B62\u3002",
+    nextAction: null,
+    tone: "neutral"
+  },
   issue_dependencies_blocked: {
     label: "\u7B49\u5F85\u524D\u7F6E\u4EFB\u52A1",
     summary: "\u524D\u7F6E\u4F9D\u8D56\u5C1A\u672A\u6EE1\u8DB3\uFF0C\u672C\u6B21\u6267\u884C\u5DF2\u505C\u6B62\u3002",
@@ -5507,7 +5513,7 @@ var ERROR_PRESENTATIONS = {
   pi_provider_quota_exhausted: {
     label: "\u6A21\u578B\u989D\u5EA6\u4E0D\u8DB3",
     summary: "\u5F53\u524D Credits \u4F59\u989D\u4E0D\u8DB3\uFF0C\u672C\u6B21\u4EFB\u52A1\u5DF2\u8FDB\u5165\u989D\u5EA6\u6062\u590D\u7B49\u5F85\u3002",
-    nextAction: "\u5145\u503C\u540E\u7CFB\u7EDF\u4F1A\u5B9A\u65F6\u68C0\u67E5\u5E76\u81EA\u52A8\u6062\u590D\uFF0C\u65E0\u9700\u624B\u52A8\u91CD\u8BD5\u3002",
+    nextAction: "\u8BF7\u5230 IAM \u8D22\u52A1\u4E2D\u5FC3\u5145\u503C\uFF0C\u5145\u503C\u540E\u7CFB\u7EDF\u4F1A\u5B9A\u65F6\u68C0\u67E5\u5E76\u81EA\u52A8\u6062\u590D\uFF0C\u65E0\u9700\u624B\u52A8\u91CD\u8BD5\u3002",
     tone: "warning"
   },
   pi_governed_tool_surface_changed: {
@@ -21260,9 +21266,7 @@ const completionAuthority = ${JSON.stringify(completionAuthority)};
 ${managedPiInitializationCompletionSource()}
 export default function(pi) {
   pi.on("tool_result", async (event) => {
-    // Linux dir-fd paths prevent a concurrent directory replacement redirecting writes.
-    // Other executors retain the original document workflow.
-    if (process.platform !== "linux" || event.isError || event.details?.server !== "amaster"
+    if (event.isError || event.details?.server !== "amaster"
       || !["runtime_action_plan", "runtime_action_status"].includes(event.toolName)) return;
     if (!Array.isArray(event.content) || event.content.length !== 1 || event.content[0].type !== "text") return;
     let envelope;
@@ -21289,14 +21293,35 @@ export default function(pi) {
         || doc.contentRef.planId !== result.planId || doc.contentRef.readTool !== "runtime_action.status")) {
         throw new Error("invalid_document_reference");
       }
-      // Pin the directory and verify existing bytes before loading credentials or reading chunks.
+      // Linux can safely address descendants through a pinned directory fd. On platforms without
+      // traversable directory-fd paths, keep the governed file directly under the process cwd: a
+      // relative single-component path is resolved from the kernel-pinned cwd and has no replaceable
+      // parent directory that could redirect the write outside the workspace.
       const flags = fs.constants.O_RDONLY | fs.constants.O_DIRECTORY | fs.constants.O_NOFOLLOW;
-      root = fs.openSync(cwd, flags);
-      const rootPath = "/proc/self/fd/" + root;
-      try { fs.mkdirSync(rootPath + "/deliverables", { mode: 0o700 }); }
-      catch (error) { if (error.code !== "EEXIST") throw error; }
-      parent = fs.openSync(rootPath + "/deliverables", flags);
-      const parentPath = "/proc/self/fd/" + parent;
+      let parentPath;
+      let materializedPathPrefix;
+      if (process.platform === "linux") {
+        root = fs.openSync(cwd, flags);
+        const rootPath = "/proc/self/fd/" + root;
+        try { fs.mkdirSync(rootPath + "/deliverables", { mode: 0o700 }); }
+        catch (error) { if (error.code !== "EEXIST") throw error; }
+        parent = fs.openSync(rootPath + "/deliverables", flags);
+        parentPath = "/proc/self/fd/" + parent;
+        materializedPathPrefix = "deliverables/";
+      } else {
+        const configured = fs.statSync(cwd);
+        const current = fs.statSync(".");
+        if (!configured.isDirectory() || configured.dev !== current.dev || configured.ino !== current.ino) {
+          throw new Error("workspace_cwd_mismatch");
+        }
+        root = fs.openSync(".", flags);
+        const pinned = fs.fstatSync(root);
+        if (pinned.dev !== current.dev || pinned.ino !== current.ino) {
+          throw new Error("workspace_cwd_changed");
+        }
+        parentPath = ".";
+        materializedPathPrefix = "";
+      }
       let target;
       // Preserve conflicts and select a stable alternate; replay verifies these same candidates.
       function selectTarget() {
@@ -21322,7 +21347,8 @@ export default function(pi) {
         let bytes;
         if (doc.contentRef) {
           // Use this run's existing governed session; references cannot select an endpoint or credential.
-          const server = JSON.parse(fs.readFileSync(configPath, "utf8")).mcpServers.amaster;
+          const safeConfigPath = process.platform === "linux" ? configPath : ".pi/mcp.json";
+          const server = JSON.parse(fs.readFileSync(safeConfigPath, "utf8")).mcpServers.amaster;
           const chunks = [];
           let offset = 0;
           while (offset < doc.byteSize) {
@@ -21383,9 +21409,10 @@ export default function(pi) {
           }
         }
       }
-      doc.path = "deliverables/" + targetName;
+      const materializedPath = materializedPathPrefix + targetName;
+      doc.path = materializedPath;
       result.initializationDocumentMaterialization = {
-        status: "materialized", path: doc.path, sha256: doc.sha256, byteSize: doc.byteSize,
+        status: "materialized", path: materializedPath, sha256: doc.sha256, byteSize: doc.byteSize,
         planId: result.planId, revision: result.revision, replayed, uploaded: false,
       };
     } catch {
@@ -33904,7 +33931,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.270";
+var CONNECTOR_VERSION = "0.1.1-beta.271";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var daemonRequire = createRequire(import.meta.url);
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
@@ -39143,15 +39170,16 @@ async function executeRunCommand(config, command) {
       );
     }
     const parsedForValidation = parsed;
+    const completionOutputHasFinalAssistantText = terminalTextRepair?.succeeded === true ? true : execution.completionOutputHasFinalAssistantText;
     const piTurnLimitFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasArgumentAmplification && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiTurnLimitResult(parsedForValidation, {
       authoritativeTerminalDisposition: Boolean(terminalRunDisposition)
     }) : null;
     const piInvalidOutputError = executor.kind === "pi" ? piOutputValidationError(parsedForValidation, {
-      allowMissingTurnEnd: completionOutputStopped,
+      allowMissingTurnEnd: completionOutputStopped || execution.completionOutputType === "agent_settled" && completionOutputHasFinalAssistantText === true,
       allowMissingAssistantOutput: execution.completionOutputType === "approval_required" || Boolean(terminalRunDisposition),
       allowMissingFinalAssistantText: Boolean(terminalRunDisposition),
       completionOutputType: execution.completionOutputType,
-      completionOutputHasFinalAssistantText: terminalTextRepair?.succeeded === true ? true : execution.completionOutputHasFinalAssistantText
+      completionOutputHasFinalAssistantText
     }) : null;
     const piOutputFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasArgumentAmplification && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiOutputFailure(parsedForValidation, {
       exitCode: execution.exitCode,

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.270";
+const CONNECTOR_VERSION = "0.1.1-beta.271";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.270",
+  "version": "0.1.1-beta.271",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",