@amaster.ai/employee-runtime-connector 0.1.1-beta.270 → 0.1.1-beta.272

package/README.md

@@ -89,12 +89,14 @@ Pi 0.80.10's internal compaction summarizer calls the provider outside `before_p
 
 ## WorkBuddy Host (CodeBuddy engine)
 
-The optional `codebuddy` executor exposes the same common governed task contract as
-Codex, while remaining deliberately narrower than the WorkBuddy desktop product.
+The optional `codebuddy` executor participates in the same governed task lifecycle
+as Codex, while its local execution surface remains deliberately narrower than both
+Codex and the WorkBuddy desktop product.
 It does not expose WorkBuddy experts, projects, Office integrations, marketplace
 connectors, or Pi's `final_model_context_attestation_v1`. The connector creates a
 private per-run CodeBuddy home, supplies one strict MirrorX MCP definition, uses an
-exact native-tool allowlist, and preserves only an authority-bound native session
+exact tool allowlist, exposes the governed namespace directly with
+`NoDefer(mcp__amaster__*)`, and preserves only an authority-bound native session
 rollout. It never inherits the user's ordinary `.codebuddy` settings, memory,
 projects, MCP servers, workflows, or marketplace state. When no dedicated provider
 credential is configured, it reuses only the current OS user's WorkBuddy desktop
@@ -106,10 +108,27 @@ than authentication inputs and are not copied; any logout-marker directory entry
 including a dangling symlink, makes the desktop session unavailable. CodeBuddy can
 mutate only the private snapshot.
 
+Managed CodeBuddy runs expose the native file tools plus `mcp__amaster__*`; they do
+not expose Bash, WebFetch, or WebSearch. CodeBuddy 2.137.1's Bash sandbox cannot
+prevent a command from connecting to an existing loopback service, so allowing Bash
+would leave a path around Governed MCP even with unsandboxed execution disabled.
+Consequently these runs can inspect and edit a workspace and perform governed
+MirrorX actions, but they cannot run tests, builds, package managers, or arbitrary
+shell commands. This is an explicit capability gap rather than claimed Pi/Codex
+parity. Governed result authority remains correlated until a structured receipt is
+actually parsed; an outer transport `status` cannot shadow a nested
+`structuredContent` receipt, and more than 256 unresolved governed calls fails the
+run instead of evicting an unmatched call id. The managed profile also resolves the
+workspace once and uses that same canonical directory for CodeBuddy trust and child
+process execution; an unavailable cwd fails with a stable managed-profile error.
+
 This executor is off by default. Enable discovery with
 `AMASTER_ENABLE_CODEBUDDY_EXECUTOR=true`. `AMASTER_CODEBUDDY_COMMAND` can select an
 explicit CLI; on macOS the gated discovery path can also find the CLI bundled in
-`/Applications/WorkBuddy.app`. The Server task-session snapshot owns the model for
+`/Applications/WorkBuddy.app`. CodeBuddy `2.137.1` is the minimum supported version
+because that is the oldest release on which the native `NoDefer(mcp__amaster__*)`
+tool surface has been verified end to end; older versions fail readiness. The
+Server task-session snapshot owns the model for
 current commands; `AMASTER_CODEBUDDY_MODEL` is only a compatibility fallback for
 older commands without that snapshot. Authentication resolves in two fail-closed
 modes: exactly one explicitly configured `CODEBUDDY_API_KEY` or

package/dist/amaster-runtime-daemon.mjs

@@ -5033,6 +5033,7 @@ var companyColdStartObligationReadSchema = external_exports.object({
     kind: external_exports.enum(["agent", "board", "external"]),
     id: external_exports.string().trim().min(1).max(200)
   }).strict().nullable(),
+  ownerDisplayName: external_exports.string().trim().min(1).max(200).nullable(),
   reviewAt: external_exports.string().datetime({ offset: true }).nullable(),
   noProgressReviewCount: external_exports.number().int().nonnegative(),
   dueState: external_exports.enum(["scheduled", "due", "overdue", "attention", "stalled"])
@@ -5076,13 +5077,25 @@ var companyColdStartReadModelBaseSchema = external_exports.object({
     workset: companyColdStartWorksetReadModelSchema.nullable(),
     tasks: external_exports.array(companyColdStartTaskReadSchema),
     factCoverage: companyColdStartFactCoverageReadSchema,
+    factOwnerDisplayNames: external_exports.record(
+      companyColdStartFactSlotSchema,
+      external_exports.string().trim().min(1).max(200)
+    ),
     missingFactSlots: external_exports.array(companyColdStartFactSlotSchema),
     taskLocalAttentionIds: external_exports.array(external_exports.string().uuid()),
     wikiProjectionAttentionCount: external_exports.number().int().nonnegative()
   }).strict(),
   operations: external_exports.object({
     currentObligationCount: external_exports.number().int().nonnegative(),
+    currentObligationCountByGoal: external_exports.record(
+      external_exports.string().uuid(),
+      external_exports.number().int().nonnegative()
+    ).optional(),
     actionRequiredCount: external_exports.number().int().nonnegative(),
+    actionRequiredCountByGoal: external_exports.record(
+      external_exports.string().uuid(),
+      external_exports.number().int().nonnegative()
+    ).optional(),
     goalGapRefs: external_exports.array(external_exports.string().trim().min(1).max(200)),
     obligations: external_exports.array(companyColdStartObligationReadSchema)
   }).strict()
@@ -5372,6 +5385,12 @@ var ERROR_PRESENTATIONS = {
     nextAction: null,
     tone: "neutral"
   },
+  issue_terminal_status: {
+    label: "\u4EFB\u52A1\u5DF2\u7ED3\u675F",
+    summary: "\u4EFB\u52A1\u5DF2\u8FDB\u5165\u7EC8\u6001\uFF0C\u672C\u6B21\u6267\u884C\u5DF2\u505C\u6B62\u3002",
+    nextAction: null,
+    tone: "neutral"
+  },
   issue_dependencies_blocked: {
     label: "\u7B49\u5F85\u524D\u7F6E\u4EFB\u52A1",
     summary: "\u524D\u7F6E\u4F9D\u8D56\u5C1A\u672A\u6EE1\u8DB3\uFF0C\u672C\u6B21\u6267\u884C\u5DF2\u505C\u6B62\u3002",
@@ -5507,7 +5526,7 @@ var ERROR_PRESENTATIONS = {
   pi_provider_quota_exhausted: {
     label: "\u6A21\u578B\u989D\u5EA6\u4E0D\u8DB3",
     summary: "\u5F53\u524D Credits \u4F59\u989D\u4E0D\u8DB3\uFF0C\u672C\u6B21\u4EFB\u52A1\u5DF2\u8FDB\u5165\u989D\u5EA6\u6062\u590D\u7B49\u5F85\u3002",
-    nextAction: "\u5145\u503C\u540E\u7CFB\u7EDF\u4F1A\u5B9A\u65F6\u68C0\u67E5\u5E76\u81EA\u52A8\u6062\u590D\uFF0C\u65E0\u9700\u624B\u52A8\u91CD\u8BD5\u3002",
+    nextAction: "\u8BF7\u5230 IAM \u8D22\u52A1\u4E2D\u5FC3\u5145\u503C\uFF0C\u5145\u503C\u540E\u7CFB\u7EDF\u4F1A\u5B9A\u65F6\u68C0\u67E5\u5E76\u81EA\u52A8\u6062\u590D\uFF0C\u65E0\u9700\u624B\u52A8\u91CD\u8BD5\u3002",
     tone: "warning"
   },
   pi_governed_tool_surface_changed: {
@@ -8967,6 +8986,7 @@ var recordGoalGapReadinessSchema = external_exports.object({
 }).strict();
 var boardScheduleGoalGapFollowUpSchema = external_exports.object({
   expectedRevision: external_exports.number().int().positive(),
+  ownerAgentId: external_exports.string().uuid(),
   reviewAt: external_exports.string().datetime({ offset: true })
 }).strict();
 var goalGapReadinessStateSchema = external_exports.object({
@@ -19355,7 +19375,7 @@ var KNOWN_EXECUTORS = [
   ["openclaw", "openclaw"]
 ];
 var MACOS_WORKBUDDY_CODEBUDDY_COMMAND = "/Applications/WorkBuddy.app/Contents/Resources/app.asar.unpacked/cli/bin/codebuddy";
-var MINIMUM_CODEBUDDY_VERSION = "2.115.0";
+var MINIMUM_CODEBUDDY_VERSION = "2.137.1";
 var MINIMUM_CODEBUDDY_VERSION_TUPLE = MINIMUM_CODEBUDDY_VERSION.split(".").map(Number);
 var REQUIRED_CODEBUDDY_FLAGS = [
   "--output-format",
@@ -20332,21 +20352,22 @@ var CODEBUDDY_DESKTOP_AUTH_SOURCE = "workbuddy_desktop_session";
 var CODEBUDDY_WORKBUDDY_AUTH_FILE = "workbuddy-desktop.info";
 var MAX_CODEBUDDY_DESKTOP_AUTH_BYTES = 4 * 1024 * 1024;
 var CODEBUDDY_NATIVE_TOOLS = [
-  "Bash",
   "Edit",
   "Read",
   "Write",
   "Glob",
   "Grep",
-  "LS",
-  "WebFetch",
-  "WebSearch"
+  "LS"
 ];
-var CODEBUDDY_ALLOWED_TOOLS = [
+var CODEBUDDY_MCP_TOOL_GLOB = `mcp__${SUPPORTED_SERVER_NAME2}__*`;
+var CODEBUDDY_TOOL_SURFACE = [
   ...CODEBUDDY_NATIVE_TOOLS,
-  "DeferExecuteTool",
-  `mcp__${SUPPORTED_SERVER_NAME2}__*`
+  `NoDefer(${CODEBUDDY_MCP_TOOL_GLOB})`
+];
+var CODEBUDDY_ALLOWED_TOOLS = [
+  CODEBUDDY_MCP_TOOL_GLOB
 ];
+var CODEBUDDY_DENIED_TOOLS = ["WebFetch", "WebSearch"];
 var REQUIRED_AUTHORITY_HEADERS2 = [
   "x-amaster-company-id",
   "x-amaster-agent-id",
@@ -20805,10 +20826,27 @@ function validateAuthority2(input) {
 function attestCli(executorCommand, env, cwd) {
   return attestCodebuddyCommand(executorCommand, env, cwd).executorVersion;
 }
+function canonicalCodebuddyCwd(value) {
+  const requestedCwd = resolve6(nonEmpty2(value, "cwd"));
+  try {
+    const canonicalCwd = realpathSync3(requestedCwd);
+    if (!statSync5(canonicalCwd).isDirectory()) {
+      throw new Error("cwd is not a directory");
+    }
+    return canonicalCwd;
+  } catch (cause) {
+    throw new Error(
+      "codebuddy_managed_mcp_cwd_invalid: cwd must resolve to an existing directory",
+      { cause }
+    );
+  }
+}
 function prepareManagedCodebuddyMcpProfile(input) {
   const authority = validateAuthority2(input);
   const runDir = resolve6(nonEmpty2(input.runDir, "runDir"));
   const executorHome = resolve6(nonEmpty2(input.executorHome, "executorHome"));
+  const cwd = canonicalCodebuddyCwd(input.cwd);
+  const bashSandboxEnabled = ["darwin", "linux"].includes(platform2());
   if (!within3(executorHome, join6(runDir, "executors"))) {
     throw new Error("codebuddy_managed_mcp_owner_mismatch: executorHome is outside the managed run");
   }
@@ -20850,9 +20888,25 @@ function prepareManagedCodebuddyMcpProfile(input) {
     }, null, 2)}
 `);
     privateFile(settingsPath, `${JSON.stringify({
+      trustedDirectories: [cwd],
+      sandbox: {
+        enabled: bashSandboxEnabled,
+        autoAllowBashIfSandboxed: false,
+        network: {
+          allowedDomains: [],
+          deniedDomains: [],
+          allowLocalBinding: false,
+          allowUnixSockets: [],
+          allowAllUnixSockets: false
+        },
+        excludedCommands: [],
+        allowUnsandboxedCommands: false
+      },
       permissions: {
         allow: CODEBUDDY_ALLOWED_TOOLS,
-        deny: []
+        deny: CODEBUDDY_DENIED_TOOLS,
+        defaultMode: "acceptEdits",
+        disableBypassPermissionsMode: "disable"
       }
     }, null, 2)}
 `);
@@ -20877,7 +20931,7 @@ function prepareManagedCodebuddyMcpProfile(input) {
       restoredNativeSession,
       nativeSessionRestoreSkippedReason
     } = resolveManagedCodebuddySessionRollout(input, configDir, runDir, executorHome, profileAuthority);
-    const executorVersion = attestCli(nonEmpty2(input.executorCommand, "executorCommand"), env, nonEmpty2(input.cwd, "cwd"));
+    const executorVersion = attestCli(nonEmpty2(input.executorCommand, "executorCommand"), env, cwd);
     const cliArgs = [
       "--setting-sources",
       "",
@@ -20887,17 +20941,20 @@ function prepareManagedCodebuddyMcpProfile(input) {
       "--mcp-config",
       mcpConfigPath,
       "--tools",
-      CODEBUDDY_NATIVE_TOOLS.join(","),
+      CODEBUDDY_TOOL_SURFACE.join(","),
       "--allowedTools",
       CODEBUDDY_ALLOWED_TOOLS.join(","),
       "--permission-mode",
-      "dontAsk"
+      "acceptEdits"
     ];
     const attestationFacts = {
       connectorVersion: nonEmpty2(input.connectorVersion, "connectorVersion"),
       executorKind: "codebuddy",
       executorVersion,
       configMode: "isolated_config_strict_http_headers",
+      mcpExposureMode: "native_nodefer",
+      bashIsolation: "not_exposed",
+      networkAccessMode: "governed_mcp_only",
       namespace: SUPPORTED_SERVER_NAME2,
       schemaVersion: SUPPORTED_SCHEMA_VERSION2,
       platform: platform2(),
@@ -20908,6 +20965,7 @@ function prepareManagedCodebuddyMcpProfile(input) {
     };
     return {
       profileRoot,
+      cwd,
       markerPath,
       mcpConfigPath,
       settingsPath,
@@ -21260,9 +21318,7 @@ const completionAuthority = ${JSON.stringify(completionAuthority)};
 ${managedPiInitializationCompletionSource()}
 export default function(pi) {
   pi.on("tool_result", async (event) => {
-    // Linux dir-fd paths prevent a concurrent directory replacement redirecting writes.
-    // Other executors retain the original document workflow.
-    if (process.platform !== "linux" || event.isError || event.details?.server !== "amaster"
+    if (event.isError || event.details?.server !== "amaster"
       || !["runtime_action_plan", "runtime_action_status"].includes(event.toolName)) return;
     if (!Array.isArray(event.content) || event.content.length !== 1 || event.content[0].type !== "text") return;
     let envelope;
@@ -21289,14 +21345,35 @@ export default function(pi) {
         || doc.contentRef.planId !== result.planId || doc.contentRef.readTool !== "runtime_action.status")) {
         throw new Error("invalid_document_reference");
       }
-      // Pin the directory and verify existing bytes before loading credentials or reading chunks.
+      // Linux can safely address descendants through a pinned directory fd. On platforms without
+      // traversable directory-fd paths, keep the governed file directly under the process cwd: a
+      // relative single-component path is resolved from the kernel-pinned cwd and has no replaceable
+      // parent directory that could redirect the write outside the workspace.
       const flags = fs.constants.O_RDONLY | fs.constants.O_DIRECTORY | fs.constants.O_NOFOLLOW;
-      root = fs.openSync(cwd, flags);
-      const rootPath = "/proc/self/fd/" + root;
-      try { fs.mkdirSync(rootPath + "/deliverables", { mode: 0o700 }); }
-      catch (error) { if (error.code !== "EEXIST") throw error; }
-      parent = fs.openSync(rootPath + "/deliverables", flags);
-      const parentPath = "/proc/self/fd/" + parent;
+      let parentPath;
+      let materializedPathPrefix;
+      if (process.platform === "linux") {
+        root = fs.openSync(cwd, flags);
+        const rootPath = "/proc/self/fd/" + root;
+        try { fs.mkdirSync(rootPath + "/deliverables", { mode: 0o700 }); }
+        catch (error) { if (error.code !== "EEXIST") throw error; }
+        parent = fs.openSync(rootPath + "/deliverables", flags);
+        parentPath = "/proc/self/fd/" + parent;
+        materializedPathPrefix = "deliverables/";
+      } else {
+        const configured = fs.statSync(cwd);
+        const current = fs.statSync(".");
+        if (!configured.isDirectory() || configured.dev !== current.dev || configured.ino !== current.ino) {
+          throw new Error("workspace_cwd_mismatch");
+        }
+        root = fs.openSync(".", flags);
+        const pinned = fs.fstatSync(root);
+        if (pinned.dev !== current.dev || pinned.ino !== current.ino) {
+          throw new Error("workspace_cwd_changed");
+        }
+        parentPath = ".";
+        materializedPathPrefix = "";
+      }
       let target;
       // Preserve conflicts and select a stable alternate; replay verifies these same candidates.
       function selectTarget() {
@@ -21322,7 +21399,8 @@ export default function(pi) {
         let bytes;
         if (doc.contentRef) {
           // Use this run's existing governed session; references cannot select an endpoint or credential.
-          const server = JSON.parse(fs.readFileSync(configPath, "utf8")).mcpServers.amaster;
+          const safeConfigPath = process.platform === "linux" ? configPath : ".pi/mcp.json";
+          const server = JSON.parse(fs.readFileSync(safeConfigPath, "utf8")).mcpServers.amaster;
           const chunks = [];
           let offset = 0;
           while (offset < doc.byteSize) {
@@ -21383,9 +21461,10 @@ export default function(pi) {
           }
         }
       }
-      doc.path = "deliverables/" + targetName;
+      const materializedPath = materializedPathPrefix + targetName;
+      doc.path = materializedPath;
       result.initializationDocumentMaterialization = {
-        status: "materialized", path: doc.path, sha256: doc.sha256, byteSize: doc.byteSize,
+        status: "materialized", path: materializedPath, sha256: doc.sha256, byteSize: doc.byteSize,
         planId: result.planId, revision: result.revision, replayed, uploaded: false,
       };
     } catch {
@@ -27365,43 +27444,105 @@ function classifyCodexTransientUpstreamError(input, now = /* @__PURE__ */ new Da
 }
 
 // src/amaster-runtime-daemon/executor-protocol/codebuddy.mjs
-function structuredToolResult(value) {
-  const record8 = asRecord(value);
-  const direct = asRecord(record8.structuredContent);
-  if (Object.keys(direct).length > 0) return direct;
-  const text2 = readString(record8.text) ?? (typeof value === "string" ? value : null);
-  if (text2) {
+var AMASTER_MCP_TOOL_PREFIX = "mcp__amaster__";
+var MAX_STRUCTURED_RESULT_DEPTH = 8;
+var MAX_TRACKED_TOOL_USES = 256;
+function structuredToolResults(value, depth = 0) {
+  if (depth > MAX_STRUCTURED_RESULT_DEPTH || value === null || value === void 0) return [];
+  if (Array.isArray(value)) {
+    return value.flatMap((part) => structuredToolResults(part, depth + 1));
+  }
+  if (typeof value === "string") {
     try {
-      return asRecord(JSON.parse(text2));
+      return structuredToolResults(JSON.parse(value), depth + 1);
     } catch {
-      return {};
+      return [];
     }
   }
-  for (const part of Array.isArray(record8.content) ? record8.content : []) {
-    const parsed = structuredToolResult(part);
-    if (Object.keys(parsed).length > 0) return parsed;
-  }
-  return {};
-}
-function codebuddyMcpToolResults(event) {
-  const record8 = asRecord(event);
+  const record8 = asRecord(value);
+  const structuredContent = structuredToolResults(record8.structuredContent, depth + 1);
+  if (structuredContent.length > 0) return structuredContent;
+  if (readString(record8.status)) return [record8];
   const candidates = [];
-  if (record8.type === "function_call_result" && ["DeferExecuteTool", "mcp__amaster"].some((prefix) => (readString(record8.name) ?? "").startsWith(prefix))) {
-    candidates.push(record8.output ?? record8.result);
+  for (const nested of [
+    record8.content,
+    record8.text,
+    record8.result,
+    record8.output
+  ]) {
+    candidates.push(...structuredToolResults(nested, depth + 1));
   }
-  if (record8.type === "user") {
-    const message = asRecord(record8.message);
-    for (const rawBlock of Array.isArray(message.content) ? message.content : []) {
-      const block = asRecord(rawBlock);
-      if (block.type === "tool_result" || block.type === "toolResult") {
-        candidates.push(block.content ?? block.result);
+  return candidates;
+}
+function governedResults(candidates) {
+  return candidates.flatMap((candidate) => structuredToolResults(candidate).flatMap((structured) => {
+    const parsed = governedMcpToolResult(structured);
+    return parsed ? [parsed] : [];
+  }));
+}
+function createCodebuddyMcpToolResultTracker() {
+  const toolNamesById = /* @__PURE__ */ new Map();
+  let trackingFailure = null;
+  const rememberToolUse = (id, name) => {
+    if (trackingFailure) return;
+    const toolUseId = readString(id);
+    if (!toolUseId) return;
+    const toolName = readString(name);
+    if (!toolName?.startsWith(AMASTER_MCP_TOOL_PREFIX)) {
+      toolNamesById.delete(toolUseId);
+      return;
+    }
+    if (!toolNamesById.has(toolUseId) && toolNamesById.size >= MAX_TRACKED_TOOL_USES) {
+      trackingFailure = `codebuddy_mcp_tool_tracking_overflow: more than ${MAX_TRACKED_TOOL_USES} unresolved governed tool calls`;
+      return;
+    }
+    toolNamesById.set(toolUseId, toolName);
+  };
+  return {
+    failure() {
+      return trackingFailure;
+    },
+    record(event) {
+      if (trackingFailure) return [];
+      const record8 = asRecord(event);
+      const eventType = readString(record8.type);
+      if (eventType === "assistant") {
+        const message2 = asRecord(record8.message);
+        for (const rawBlock of Array.isArray(message2.content) ? message2.content : []) {
+          const block = asRecord(rawBlock);
+          if (["tool_use", "toolUse"].includes(readString(block.type) ?? "")) {
+            rememberToolUse(block.id ?? block.tool_use_id ?? block.toolUseId, block.name ?? block.tool_name);
+          }
+        }
+        return [];
+      }
+      if (eventType === "function_call") {
+        rememberToolUse(record8.call_id ?? record8.tool_use_id ?? record8.id, record8.name);
+        return [];
+      }
+      if (eventType === "function_call_result") {
+        const callId = readString(record8.call_id ?? record8.tool_use_id ?? record8.id);
+        if (!callId || !toolNamesById.has(callId)) return [];
+        const results2 = governedResults([record8.output ?? record8.result]);
+        if (results2.length > 0) toolNamesById.delete(callId);
+        return results2;
+      }
+      if (eventType !== "user") return [];
+      const message = asRecord(record8.message);
+      const results = [];
+      for (const rawBlock of Array.isArray(message.content) ? message.content : []) {
+        const block = asRecord(rawBlock);
+        if (!["tool_result", "toolResult"].includes(readString(block.type) ?? "")) continue;
+        const toolUseId = readString(block.tool_use_id ?? block.toolUseId ?? block.id);
+        if (!toolUseId || !toolNamesById.has(toolUseId)) continue;
+        const blockResults = governedResults([block.content ?? block.result]);
+        if (blockResults.length === 0) continue;
+        toolNamesById.delete(toolUseId);
+        results.push(...blockResults);
       }
+      return results;
     }
-  }
-  return candidates.flatMap((candidate) => {
-    const parsed = governedMcpToolResult(structuredToolResult(candidate));
-    return parsed ? [parsed] : [];
-  });
+  };
 }
 function parseCodebuddyStreamJson(stdout) {
   let sessionId = null;
@@ -27410,12 +27551,13 @@ function parseCodebuddyStreamJson(stdout) {
   let sawSuccessfulResult = false;
   const assistantTexts = [];
   const mcpToolResults = [];
+  const mcpToolResultTracker = createCodebuddyMcpToolResultTracker();
   const usage = { inputTokens: 0, cachedInputTokens: 0, outputTokens: 0 };
   for (const rawLine of String(stdout ?? "").split(/\r?\n/)) {
     const event = parseJsonLine(rawLine.trim());
     if (!event) continue;
     sessionId = readString(event.session_id) ?? readString(event.sessionId) ?? sessionId;
-    mcpToolResults.push(...codebuddyMcpToolResults(event));
+    mcpToolResults.push(...mcpToolResultTracker.record(event));
     if (event.type === "assistant") {
       const message = asRecord(event.message);
       for (const rawBlock of Array.isArray(message.content) ? message.content : []) {
@@ -27453,6 +27595,11 @@ function parseCodebuddyStreamJson(stdout) {
       errorMessage = readString(event.message) ?? errorMessage;
     }
   }
+  const trackingFailure = mcpToolResultTracker.failure();
+  if (trackingFailure) {
+    sawSuccessfulResult = false;
+    errorMessage = trackingFailure;
+  }
   const uniqueMcpToolResults = dedupeGovernedMcpToolResults(mcpToolResults);
   return {
     sessionId,
@@ -33904,7 +34051,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.270";
+var CONNECTOR_VERSION = "0.1.1-beta.272";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var daemonRequire = createRequire(import.meta.url);
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
@@ -36111,6 +36258,7 @@ function createLiveOutputLogger(config, command, executorKind, protectedValues =
   let piTerminalOutput = null;
   let executorSessionId = null;
   const liveMcpToolResults = [];
+  const codebuddyMcpToolResultTracker = executorKind === "codebuddy" ? createCodebuddyMcpToolResultTracker() : null;
   const onWebEvidence = typeof options.onWebEvidence === "function" ? options.onWebEvidence : null;
   let queue = Promise.resolve();
   let observationQueue = Promise.resolve();
@@ -36303,7 +36451,7 @@ function createLiveOutputLogger(config, command, executorKind, protectedValues =
       }
     }
     if (MIRRORX_FORMAL_TASK_EXECUTOR_KINDS.includes(executorKind) && event) {
-      const results = executorKind === "codex" ? codexMcpToolResults(event) : executorKind === "codebuddy" ? codebuddyMcpToolResults(event) : piMcpToolResults(event, { runId: commandRunId(command), commandId: command.commandId, issueId: commandIssueId(command) });
+      const results = executorKind === "codex" ? codexMcpToolResults(event) : executorKind === "codebuddy" ? codebuddyMcpToolResultTracker.record(event) : piMcpToolResults(event, { runId: commandRunId(command), commandId: command.commandId, issueId: commandIssueId(command) });
       liveMcpToolResults.push(...results);
       if (results.length > 0) onMcpToolResults?.(results);
     }
@@ -36392,6 +36540,7 @@ function createLiveOutputLogger(config, command, executorKind, protectedValues =
         processLine(stream, buffers[stream]);
         buffers[stream] = "";
       }
+      const codebuddyTrackingFailure = codebuddyMcpToolResultTracker?.failure();
       await observationQueue;
       if (observationError) throw observationError;
       flushPendingBatch();
@@ -36414,6 +36563,7 @@ function createLiveOutputLogger(config, command, executorKind, protectedValues =
           }
         }], { terminalSummary: true });
       }
+      if (codebuddyTrackingFailure) throw new Error(codebuddyTrackingFailure);
     },
     hasStream(stream) {
       return displayCounts[stream] > 0;
@@ -37237,7 +37387,7 @@ async function executePiTerminalTextRepairTurn(config, command, executor, execut
   ]);
   const completionOutputStopped = piCompletionOutputStopped(execution);
   const invalidOutput = piOutputValidationError(parsed, {
-    allowMissingTurnEnd: completionOutputStopped || parsed.terminalEventType === "agent_end",
+    allowMissingTurnEnd: piOutputAllowsMissingTurnEnd(execution, parsed, { allowTerminalAgentEnd: true }),
     completionOutputType: execution.completionOutputType,
     completionOutputHasFinalAssistantText: execution.completionOutputHasFinalAssistantText
   });
@@ -38300,6 +38450,11 @@ function piCompletionCleanupStopped(execution) {
 function piCompletionOutputStopped(execution) {
   return piCompletionCleanupStopped(execution) && PI_COMPLETION_OUTPUT_TYPES.has(readString(execution?.completionOutputType) ?? "") && (execution?.completionOutputType === "approval_required" || execution?.completionOutputHasFinalAssistantText === true);
 }
+function piOutputAllowsMissingTurnEnd(execution, parsed, options = {}) {
+  if (piCompletionOutputStopped(execution)) return true;
+  if (options.allowTerminalAgentEnd === true && parsed?.terminalEventType === "agent_end") return true;
+  return execution?.completionOutputType === "agent_settled" && execution?.completionOutputHasFinalAssistantText === true && execution?.exitCode === 0 && execution?.signal === null;
+}
 function piOutputValidationError(parsed, options = {}) {
   if (parsed?.errorMessage) return parsed.errorMessage;
   if (options.completionOutputType === "agent_settled" && options.completionOutputHasFinalAssistantText !== true && options.allowMissingFinalAssistantText !== true) {
@@ -38813,7 +38968,7 @@ async function executeRunCommand(config, command) {
     } : null;
     try {
       execution = await runExecutor(invocation.command, invocation.args, {
-        cwd,
+        cwd: executor.kind === "codebuddy" ? managedMcpProfile?.cwd ?? cwd : cwd,
         env: executorEnv,
         stdin: invocation.stdin === "prompt" ? prompt : "",
         timeoutSeconds: config.executorTimeoutSeconds,
@@ -39143,15 +39298,16 @@ async function executeRunCommand(config, command) {
       );
     }
     const parsedForValidation = parsed;
+    const effectiveCompletionOutputHasFinalAssistantText = terminalTextRepair?.succeeded === true ? true : execution.completionOutputHasFinalAssistantText;
     const piTurnLimitFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasArgumentAmplification && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiTurnLimitResult(parsedForValidation, {
       authoritativeTerminalDisposition: Boolean(terminalRunDisposition)
     }) : null;
     const piInvalidOutputError = executor.kind === "pi" ? piOutputValidationError(parsedForValidation, {
-      allowMissingTurnEnd: completionOutputStopped,
+      allowMissingTurnEnd: piOutputAllowsMissingTurnEnd(execution, parsedForValidation),
       allowMissingAssistantOutput: execution.completionOutputType === "approval_required" || Boolean(terminalRunDisposition),
       allowMissingFinalAssistantText: Boolean(terminalRunDisposition),
       completionOutputType: execution.completionOutputType,
-      completionOutputHasFinalAssistantText: terminalTextRepair?.succeeded === true ? true : execution.completionOutputHasFinalAssistantText
+      completionOutputHasFinalAssistantText: effectiveCompletionOutputHasFinalAssistantText
     }) : null;
     const piOutputFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasArgumentAmplification && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiOutputFailure(parsedForValidation, {
       exitCode: execution.exitCode,

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.270";
+const CONNECTOR_VERSION = "0.1.1-beta.272";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.270",
+  "version": "0.1.1-beta.272",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",