@amaster.ai/employee-runtime-connector 0.1.1-beta.320 → 0.1.1-beta.322

package/dist/amaster-runtime-daemon.mjs

@@ -9173,7 +9173,7 @@ var goalCriteriaProgressReadModelSchema = external_exports.object({
   items: external_exports.array(goalCriterionProgressReadModelSchema),
   completion: goalCompletionSummarySchema
 }).strict();
-var DEFAULT_CONTINUE_PROGRESS_RATIONALE = "Board \u786E\u8BA4\u5F53\u524D\u4E1A\u52A1\u7ED3\u679C\u5C1A\u672A\u8FBE\u5230\uFF0C\u7EE7\u7EED\u63A8\u8FDB\u3002";
+var DEFAULT_CONTINUE_PROGRESS_RATIONALE = "\u516C\u53F8\u7BA1\u7406\u5458\u786E\u8BA4\u5F53\u524D\u4E1A\u52A1\u7ED3\u679C\u5C1A\u672A\u8FBE\u5230\uFF0C\u7EE7\u7EED\u63A8\u8FDB\u3002";
 var DEFAULT_KEEP_IN_GOAL_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u786E\u8BA4\u8FD9\u6761\u8FBE\u6210\u6807\u51C6\u4ECD\u9002\u7528\u4E8E\u5F53\u524D\u76EE\u6807\u3002";
 var DEFAULT_DEFER_GOAL_CRITERION_RATIONALE = "\u516C\u53F8\u8D1F\u8D23\u4EBA\u8BBE\u7F6E\u4E86\u4E0B\u6B21\u786E\u8BA4\u65F6\u95F4\u3002";
 var boardDecideGoalCriterionBaseSchema = external_exports.object({
@@ -20592,12 +20592,8 @@ export default function amasterEffectiveToolsAttestor(pi) {
       ) {
         throw new Error("final active tool manifest is invalid");
       }
-      for (const entry of expectedEntries) {
-        const validatorSelfTest = inputErrorReason(entry.schema, { __amasterUnexpected: true });
-        if (!validatorSelfTest || !validatorSelfTest.includes("/__amasterUnexpected")) {
-          throw new Error("strict input validator self-test failed for " + entry.name);
-        }
-      }
+      // Validator behavior belongs in unit/adapter contract tests, not a per-run
+      // synthetic-input gate. Validate actual model inputs in tool_call below.
 
       const allTools = pi.getAllTools();
       if (allTools.some((tool) => typeof tool.name !== "string" || !tool.name)) {
@@ -20681,7 +20677,6 @@ export default function amasterEffectiveToolsAttestor(pi) {
         configSha256: configDigest,
         cacheSha256: cacheDigest,
         cacheAttestation,
-        strictInputValidatorSelfTest: true,
         modelInvocationStarted: false,
         attestedAt: new Date().toISOString(),
       };
@@ -20774,7 +20769,7 @@ function validateDirectTypedMcpCatalog(catalogValue, options = {}) {
   const fail4 = (detail) => {
     throw new Error(`${errorPrefix}: ${detail}`);
   };
-  const admittedToolNames = options.admittedToolNames instanceof Set ? options.admittedToolNames : new Set(options.admittedToolNames ?? []);
+  const admittedToolNames = options.admittedToolNames instanceof Set ? options.admittedToolNames : options.admittedToolNames == null ? null : new Set(options.admittedToolNames);
   const catalog = record4(catalogValue);
   if (catalog.schemaVersion !== DIRECT_TYPED_MCP_CATALOG_SCHEMA_VERSION) {
     fail4("direct tool catalog schema mismatch");
@@ -20784,7 +20779,7 @@ function validateDirectTypedMcpCatalog(catalogValue, options = {}) {
   const exposedNames = /* @__PURE__ */ new Set();
   const tools = rawTools.map((tool) => {
     const name = requiredString2(tool.name, "toolCatalog.tools.name", fail4);
-    if (!admittedToolNames.has(name) || names.has(name)) {
+    if (admittedToolNames && !admittedToolNames.has(name) || names.has(name)) {
       fail4("direct tool catalog name mismatch");
     }
     names.add(name);
@@ -22984,7 +22979,6 @@ export default function amasterRoleSkillsVisibility(pi) {
 import { existsSync as existsSync7, lstatSync as lstatSync7, readFileSync as readFileSync8, realpathSync as realpathSync5 } from "node:fs";
 import { join as join8, resolve as resolve7 } from "node:path";
 var ADAPTER_PACKAGE_NAME = "pi-mcp-adapter";
-var ADAPTER_CACHE_OVERRIDE_ENV = "PI_MCP_METADATA_CACHE_PATH";
 function unavailable(reasonCode) {
   return { ready: false, reasonCode };
 }
@@ -23015,8 +23009,7 @@ function inspectDesktopPiFinalContextReadiness(input = {}) {
     }
     const packagePath = join8(adapterRoot, "package.json");
     const extensionPath = join8(adapterRoot, "index.ts");
-    const metadataCachePath = join8(adapterRoot, "metadata-cache.ts");
-    if (![packagePath, extensionPath, metadataCachePath].every(safeRegularFile)) {
+    if (![packagePath, extensionPath].every(safeRegularFile)) {
       return unavailable("desktop_pi_attestation_adapter_unavailable");
     }
     const packageJson = JSON.parse(readFileSync8(packagePath, "utf8"));
@@ -23024,8 +23017,9 @@ function inspectDesktopPiFinalContextReadiness(input = {}) {
     if (packageJson?.name !== ADAPTER_PACKAGE_NAME || !/^\d+\.\d+\.\d+(?:[-+].+)?$/.test(adapterVersion)) {
       return unavailable("desktop_pi_attestation_adapter_invalid");
     }
-    const metadataCacheSource = readFileSync8(metadataCachePath, "utf8");
-    if (!metadataCacheSource.includes(ADAPTER_CACHE_OVERRIDE_ENV)) {
+    try {
+      assertPiMcpAdapterDirectCatalogSupport(adapterVersion);
+    } catch {
       return unavailable("desktop_pi_attestation_cache_override_unsupported");
     }
     return {
@@ -23033,7 +23027,7 @@ function inspectDesktopPiFinalContextReadiness(input = {}) {
       adapterVersion,
       adapterRoot,
       extensionPath,
-      cachePathOverride: "supported"
+      cacheMode: "isolated_agent_dir"
     };
   } catch {
     return unavailable("desktop_pi_attestation_adapter_unavailable");
@@ -23290,8 +23284,7 @@ function createManagedPiMcpProfileApi(options = {}) {
   const DEFAULT_SESSION_ROLLOUT_TTL_MS3 = 24 * 60 * 60 * 1e3;
   const PI_VERSION_ATTESTATION_TIMEOUT_MS = 3e4;
   const PI_ATTESTATION_MAX_ATTEMPTS = 2;
-  const PI_ATTESTATION_RECENT_LIVE_TTL_MS = Number.isFinite(options.recentLiveTtlMs) && options.recentLiveTtlMs > 0 ? options.recentLiveTtlMs : 30 * 60 * 1e3;
-  const recentLivePiVersionProbes = /* @__PURE__ */ new Map();
+  const livePiVersionProbes = /* @__PURE__ */ new Map();
   function record10(value) {
     return value && typeof value === "object" && !Array.isArray(value) ? value : {};
   }
@@ -23510,29 +23503,6 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (configuredSources.length !== 1) {
       throw new Error("pi_managed_mcp_telemetry_package_source_invalid");
     }
-    const configuredSource = configuredSources[0];
-    const settingsVersion = configuredSource.startsWith(`${MANAGED_PI_TELEMETRY_PACKAGE_SOURCE}@`) ? configuredSource.slice(MANAGED_PI_TELEMETRY_PACKAGE_SOURCE.length + 1) : null;
-    if (settingsVersion !== null && !/^\d+\.\d+\.\d+(?:[-+].+)?$/.test(settingsVersion)) {
-      throw new Error("pi_managed_mcp_telemetry_package_source_unpinned");
-    }
-    const runtimeManifestPath = join9(sharedRuntime.home, "npm", "package.json");
-    let runtimeManifest;
-    try {
-      const runtimeManifestStat = lstatSync8(runtimeManifestPath);
-      if (!runtimeManifestStat.isFile() || runtimeManifestStat.isSymbolicLink()) {
-        throw new Error("unsafe runtime package manifest");
-      }
-      runtimeManifest = record10(JSON.parse(readFileSync9(runtimeManifestPath, "utf8")));
-    } catch {
-      throw new Error("pi_managed_mcp_telemetry_runtime_manifest_unavailable");
-    }
-    const pinnedVersion = typeof record10(runtimeManifest.dependencies)[MANAGED_PI_TELEMETRY_PACKAGE] === "string" ? record10(runtimeManifest.dependencies)[MANAGED_PI_TELEMETRY_PACKAGE].trim() : "";
-    if (!/^\d+\.\d+\.\d+(?:[-+].+)?$/.test(pinnedVersion)) {
-      throw new Error("pi_managed_mcp_telemetry_runtime_manifest_unpinned");
-    }
-    if (settingsVersion !== null && settingsVersion !== pinnedVersion) {
-      throw new Error("pi_managed_mcp_telemetry_package_source_version_mismatch");
-    }
     const packageRoot = resolve8(
       sharedRuntime.home,
       "npm",
@@ -23558,9 +23528,6 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (!/^\d+\.\d+\.\d+(?:[-+].+)?$/.test(version)) {
       throw new Error("pi_managed_mcp_telemetry_package_version_invalid");
     }
-    if (version !== pinnedVersion) {
-      throw new Error("pi_managed_mcp_telemetry_package_version_mismatch");
-    }
     const declaredExtensions = Array.isArray(record10(packageJson.pi).extensions) ? record10(packageJson.pi).extensions : [];
     if (declaredExtensions.length !== 1 || typeof declaredExtensions[0] !== "string") {
       throw new Error("pi_managed_mcp_telemetry_extension_invalid");
@@ -23587,7 +23554,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     return {
       packageName: MANAGED_PI_TELEMETRY_PACKAGE,
       packageVersion: version,
-      packageVersionSource: "runtime_npm_manifest",
+      packageVersionSource: "installed_package_manifest",
       extensionPath,
       extensionSha256: sha2566(readFileSync9(extensionPath)),
       packageTreeSha256,
@@ -23598,28 +23565,10 @@ function createManagedPiMcpProfileApi(options = {}) {
     const identity = piMcpAdapterServerConfigIdentity(definition, adapterVersion);
     return sha2566(stablePiJson(identity));
   }
-  function validateDirectCatalog(gateway, mcpToolMode) {
-    const catalog = record10(gateway.toolCatalog);
-    const tools = Array.isArray(catalog.tools) ? catalog.tools.map(record10) : [];
-    const declaredToolNames = new Set(tools.map((tool) => tool.name).filter((name) => typeof name === "string"));
-    const covers = (set) => [...set].every((name) => declaredToolNames.has(name));
-    const countIn = (set) => tools.filter((tool) => set.has(tool.name)).length;
-    const fullWikiReadCount = countIn(FULL_DIRECT_TYPED_V1_WIKI_READ_TOOL_NAMES);
-    const hasWikiWrite = declaredToolNames.has(FULL_DIRECT_TYPED_V1_WIKI_WRITE_TOOL_NAME);
-    const fullWikiCount = fullWikiReadCount + (hasWikiWrite ? 1 : 0);
-    const fullConnectorCount = countIn(FULL_DIRECT_TYPED_V1_CONNECTOR_TOOL_NAMES);
-    const fullCatalog = mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && tools.length === FULL_DIRECT_TYPED_V1_BASE_TOOL_NAMES.size + fullWikiCount + fullConnectorCount && covers(FULL_DIRECT_TYPED_V1_BASE_TOOL_NAMES) && (fullWikiReadCount === 0 && !hasWikiWrite || fullWikiReadCount === FULL_DIRECT_TYPED_V1_WIKI_READ_TOOL_NAMES.size) && (fullConnectorCount === 0 || fullConnectorCount === FULL_DIRECT_TYPED_V1_CONNECTOR_TOOL_NAMES.size) && tools.every((tool) => FULL_DIRECT_TYPED_V1_TOOL_NAMES.has(tool.name));
-    const initializationNames = new Set([...FULL_DIRECT_TYPED_V1_BASE_TOOL_NAMES].filter((name) => name !== "runtime_action.list" && name !== "mirrorx.list_issues"));
-    const initializationCatalog = tools.length === initializationNames.size + fullWikiReadCount && covers(initializationNames) && !hasWikiWrite && fullConnectorCount === 0 && (fullWikiReadCount === 0 || fullWikiReadCount === FULL_DIRECT_TYPED_V1_WIKI_READ_TOOL_NAMES.size);
-    if (mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && !fullCatalog && !initializationCatalog) {
-      throw new Error("pi_managed_mcp_invalid: direct tool catalog size mismatch");
-    }
-    const catalogKind = initializationCatalog ? "initialization" : "full";
-    const validated = validateDirectTypedMcpCatalog(catalog, {
-      admittedToolNames: FULL_DIRECT_TYPED_V1_TOOL_NAMES,
+  function validateDirectCatalog(gateway) {
+    return validateDirectTypedMcpCatalog(gateway.toolCatalog, {
       errorPrefix: "pi_managed_mcp_invalid"
     });
-    return { ...validated, kind: catalogKind };
   }
   function resolvePiExecutablePath(executorCommand, env) {
     if (platform3() === "win32") {
@@ -23659,20 +23608,19 @@ function createManagedPiMcpProfileApi(options = {}) {
         throw Object.assign(new Error("Pi executable is not a regular file"), { code: "EUNSAFE" });
       }
       const contentSha256 = createHash9("sha256").update(readFileSync9(realPath)).digest("hex");
-      return `sha256:${createHash9("sha256").update(JSON.stringify({ realPath, contentSha256 })).digest("hex")}`;
+      let packageManifestSha256 = null;
+      for (let directory = dirname6(realPath); dirname6(directory) !== directory; directory = dirname6(directory)) {
+        const packagePath = join9(directory, "package.json");
+        if (!existsSync8(packagePath)) continue;
+        packageManifestSha256 = sha2566(readFileSync9(packagePath));
+        break;
+      }
+      return `sha256:${createHash9("sha256").update(JSON.stringify({ realPath, contentSha256, packageManifestSha256 })).digest("hex")}`;
     } catch (error) {
       const errorCode = typeof error?.code === "string" ? error.code : "UNKNOWN";
       throw new Error(`pi_managed_mcp_attestation_failed: --version error=${errorCode}`);
     }
   }
-  function pruneRecentLivePiVersionProbes(nowMs) {
-    for (const [identity, entry] of recentLivePiVersionProbes) {
-      const ageMs = nowMs - entry.attestedAtMs;
-      if (ageMs < 0 || ageMs > PI_ATTESTATION_RECENT_LIVE_TTL_MS) {
-        recentLivePiVersionProbes.delete(identity);
-      }
-    }
-  }
   function validateAuthority3(input) {
     const runtimeAuth = record10(input.runtimeAuth);
     const gateway = record10(runtimeAuth.governedMcp);
@@ -23709,7 +23657,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (mcpToolMode !== MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE) {
       throw new Error("pi_managed_mcp_invalid: unsupported managed Pi MCP tool mode");
     }
-    const directCatalog = validateDirectCatalog(gateway, mcpToolMode);
+    const directCatalog = validateDirectCatalog(gateway);
     return { gateway, gatewayUrl, sessionToken, headers, runId, mcpToolMode, directCatalog };
   }
   function isSensitiveAuthKey2(key) {
@@ -24202,28 +24150,15 @@ function createManagedPiMcpProfileApi(options = {}) {
     }
     return { protectedValues };
   }
-  function attestPi(executorCommand, env, configPath, expectedConfig, spawnIdentity = null) {
+  function attestPi(executorCommand, env, spawnIdentity = null) {
     const resolvedExecutorCommand = resolvePiExecutablePath(executorCommand, env);
     const executorIdentity = piExecutableIdentity(resolvedExecutorCommand);
-    const nowMs = currentTimeMs();
-    pruneRecentLivePiVersionProbes(nowMs);
-    const recentLiveProbe = recentLivePiVersionProbes.get(executorIdentity);
-    if (recentLiveProbe) {
-      let effectiveConfig2;
-      try {
-        effectiveConfig2 = JSON.parse(readFileSync9(configPath, "utf8"));
-      } catch {
-        throw new Error("pi_managed_mcp_attestation_failed: managed MCP config is invalid JSON");
-      }
-      if (JSON.stringify(effectiveConfig2) !== JSON.stringify(expectedConfig) || env.PI_AGENT_MCP_SERVERS_FILE !== configPath) {
-        throw new Error("pi_managed_mcp_attestation_failed: effective config does not match managed amaster Gateway");
-      }
+    const cached = livePiVersionProbes.get(resolvedExecutorCommand);
+    if (cached?.executorIdentity === executorIdentity) {
       return {
-        executorVersion: recentLiveProbe.executorVersion,
-        executorIdentity,
-        executorVersionSource: "recent_live_probe_reuse",
-        liveProbeAttestedAt: new Date(recentLiveProbe.attestedAtMs).toISOString(),
-        liveProbeAgeMs: nowMs - recentLiveProbe.attestedAtMs
+        ...cached,
+        executorVersionSource: "installation_identity_cache",
+        liveProbeAgeMs: Math.max(0, currentTimeMs() - Date.parse(cached.liveProbeAttestedAt))
       };
     }
     let result2;
@@ -24241,64 +24176,29 @@ function createManagedPiMcpProfileApi(options = {}) {
       if (result2.error?.code === "ETIMEDOUT" && attempt < PI_ATTESTATION_MAX_ATTEMPTS) continue;
       break;
     }
-    let executorVersion;
-    let executorVersionSource;
-    let liveProbeAttestedAtMs;
-    let liveProbeAgeMs;
-    if (result2.error?.code === "ETIMEDOUT") {
-      const identityAfterTimeout = piExecutableIdentity(resolvedExecutorCommand);
-      const nowMs2 = currentTimeMs();
-      pruneRecentLivePiVersionProbes(nowMs2);
-      const recentLiveProbe2 = identityAfterTimeout === executorIdentity ? recentLivePiVersionProbes.get(executorIdentity) : null;
-      const ageMs = recentLiveProbe2 ? nowMs2 - recentLiveProbe2.attestedAtMs : Number.POSITIVE_INFINITY;
-      if (!recentLiveProbe2 || ageMs < 0 || ageMs > PI_ATTESTATION_RECENT_LIVE_TTL_MS) {
-        throw new Error("pi_managed_mcp_attestation_failed: --version error=ETIMEDOUT");
-      }
-      executorVersion = recentLiveProbe2.executorVersion;
-      executorVersionSource = "recent_live_probe_reuse";
-      liveProbeAttestedAtMs = recentLiveProbe2.attestedAtMs;
-      liveProbeAgeMs = ageMs;
-    } else if (result2.error) {
-      const errorCode = typeof result2.error.code === "string" ? result2.error.code : "UNKNOWN";
-      throw new Error(`pi_managed_mcp_attestation_failed: --version error=${errorCode}`);
-    } else if (result2.status !== 0) {
-      throw new Error(`pi_managed_mcp_attestation_failed: --version exit=${result2.status ?? "unknown"}`);
-    } else {
-      executorVersion = parseVersion(`${result2.stdout ?? ""}
-${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
-      if (piExecutableIdentity(resolvedExecutorCommand) !== executorIdentity) {
-        throw new Error("pi_managed_mcp_attestation_failed: Pi executable changed during --version probe");
-      }
-      executorVersionSource = "live_probe";
-      liveProbeAttestedAtMs = currentTimeMs();
-      liveProbeAgeMs = 0;
+    if (result2.error) {
+      throw new Error(`pi_managed_mcp_attestation_failed: --version error=${typeof result2.error.code === "string" ? result2.error.code : "UNKNOWN"}`);
     }
-    let effectiveConfig;
-    try {
-      effectiveConfig = JSON.parse(readFileSync9(configPath, "utf8"));
-    } catch {
-      throw new Error("pi_managed_mcp_attestation_failed: managed MCP config is invalid JSON");
-    }
-    if (JSON.stringify(effectiveConfig) !== JSON.stringify(expectedConfig) || env.PI_AGENT_MCP_SERVERS_FILE !== configPath) {
-      throw new Error("pi_managed_mcp_attestation_failed: effective config does not match managed amaster Gateway");
+    if (result2.status !== 0) {
+      throw new Error(`pi_managed_mcp_attestation_failed: --version exit=${result2.status ?? "unknown"}`);
     }
-    if (executorVersionSource === "live_probe") {
-      pruneRecentLivePiVersionProbes(liveProbeAttestedAtMs);
-      recentLivePiVersionProbes.set(executorIdentity, {
-        executorVersion,
-        attestedAtMs: liveProbeAttestedAtMs
-      });
+    const executorVersion = parseVersion(`${result2.stdout ?? ""}
+${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
+    if (piExecutableIdentity(resolvedExecutorCommand) !== executorIdentity) {
+      throw new Error("pi_managed_mcp_attestation_failed: Pi executable changed during --version probe");
     }
-    return {
+    const attestation = {
       executorVersion,
       executorIdentity,
-      executorVersionSource,
-      liveProbeAttestedAt: new Date(liveProbeAttestedAtMs).toISOString(),
-      liveProbeAgeMs
+      executorVersionSource: "live_probe",
+      liveProbeAttestedAt: new Date(currentTimeMs()).toISOString(),
+      liveProbeAgeMs: 0
     };
+    livePiVersionProbes.set(resolvedExecutorCommand, attestation);
+    return attestation;
   }
   function prepareDirectPiToolAttestation(input) {
-    const cachePath = join9(input.profileRoot, "mcp-cache.json");
+    const cachePath = input.cachePath;
     if (!input.directCatalog) {
       return {
         cachePath,
@@ -24579,6 +24479,7 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         cachePath,
         directAttestationInput
       } = prepareDirectPiToolAttestation({
+        cachePath: join9(profileRoot, "mcp-cache.json"),
         profileRoot,
         tmp,
         configPath,
@@ -24643,8 +24544,6 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       const executorAttestation = attestPi(
         nonEmpty3(input.executorCommand, "executorCommand"),
         env,
-        configPath,
-        config,
         spawnIdentity
       );
       const runExitClosureOwnership = directAttestationInput ? {
@@ -25007,6 +24906,9 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         cachePath,
         directAttestationInput
       } = prepareDirectPiToolAttestation({
+        // Use the adapter's native path inside the isolated run home. Desktop
+        // installs need no cache-override patch; never point this at sourcePiHome.
+        cachePath: join9(piCodingAgentDir, "mcp-cache.json"),
         profileRoot,
         tmp,
         configPath,
@@ -25049,8 +24951,6 @@ ${result2.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       const executorAttestation = directAttestationInput ? attestPi(
         nonEmpty3(input.executorCommand, "executorCommand"),
         env,
-        configPath,
-        config,
         spawnIdentity
       ) : {};
       const runExitClosureOwnership = directAttestationInput ? {
@@ -29472,13 +29372,10 @@ function runtimeTemplateCatalogSection(input) {
   return {
     sourceRef: "runtime_template_catalog_attestation",
     content: [
-      "The runtime connector attested and materialized the artifact template catalog before this command was leased.",
-      `- exact catalog path: \`${targetDir}\``,
+      `- exact catalog path: \`${targetDir}\` (ready, read-only)`,
       `- file count: ${catalog.fileCount}`,
       `- manifest SHA-256: ${manifestSha256}`,
-      "This exact catalog is the run's only authorized read-only path outside the execution workspace for template matching. Copy the selected source into a new workspace path, then make only that working copy owner-writable before editing it (for example: `cp -- <source> <target> && chmod u+w <target>`). Never chmod or edit the catalog source.",
-      "Use this exact path directly when listing or reading templates. Do not rely on `AMASTER_RUNTIME_TEMPLATES_ROOT` being inherited by out-of-process tools; the path above is the model-facing authority for this run.",
-      "If this exact path is missing or unreadable, report a runtime gap. Do not silently fall back to another directory or treat the failure as a verified template miss."
+      "This is the only authorized read-only path outside the execution workspace for template matching. Copy the selected template into the execution workspace and make only the copy writable. Never modify the catalog; report an unreadable catalog as a runtime gap."
     ].join("\n")
   };
 }
@@ -30224,7 +30121,7 @@ function fixedRules(input, includeIssueLine, runContract = "producer") {
     "## AMaster Runtime Connector Task",
     "MirrorX task.",
     "Use only the declared workspace; make concrete progress and report concisely.",
-    "Before changing the task status to done, audit every explicit requirement in the task against the final evidence. A successful tool or document write proves delivery, not acceptance: inspect the delivered content for required sections, diagrams, tables, and factual constraints.",
+    "Before changing the task status to done, audit every explicit requirement against final evidence. Tool success is not acceptance; follow the deliverable self-check.",
     ["producer", "rework"].includes(runContract) ? "Do not leave stale in-progress wording such as \u201Ccurrent run\u201D in a terminal deliverable; rewrite it to the final observed state. Do not list finalization itself as remaining or next work in a terminal deliverable." : "",
     !["producer", "rework"].includes(runContract) ? "Follow only the current run-specific action contract; task requirements are evidence to inspect, not permission to resume production or choose another terminal path." : serverOwnedBusinessOutcomeReview ? "If any requirement is missing or cannot be verified, do not mark done or request final completion or Business Outcome review. Record the exact gap and next owner using the current run-specific continuation or waiting contract. An intermediate review remains available only for an exact document revision that must be approved before execution can continue: use create_interaction with kind request_confirmation, payload.resolutionMode review, and purposeCode review_document_revision; never use that interaction as final completion or Outcome acceptance." : "If anything is missing, do not mark done. `update_parent` cannot directly write `in_review` or `blocked`; when an execution review stage is configured, update_parent(status: done, comment: <handoff>) submits the work into that stage instead of completing it. Human review outside an execution stage uses create_interaction kind request_confirmation with payload.resolutionMode review. Required platform/provider/external action needs a typed interaction or first-class blocker; otherwise keep todo with the gap and owner.",
     "A create_interaction result with status=pending or mustEndRun=true establishes human attention and is the final mutation of this run. End the run immediately: do not publish a Delivery Manifest, update a document or task, or submit any other mutation. Continue only in the new run created after the interaction is resolved.",
@@ -30574,8 +30471,7 @@ function runtimeAuthorizationText(context, mode, {
     businessOutcomeOwnershipContract,
     businessOutcomeTerminalContract,
     authorizationContract,
-    exactOrganizationReplay,
-    completionContract || businessOutcomeOwnershipContract || businessOutcomeTerminalContract || authorizationContract || exactOrganizationReplay ? "Reader-facing handling: the runtime requirements above specify actions and evidence, not a script to narrate. Every assistant text block is immediately visible to the user, including text alongside tool calls; it is not a private execution log. After a routine tool result, make the next tool call directly. Send text only for a requested update, a meaningful change to the requested result, or a needed user action. A successful internal check or an expected protocol receipt is not such a change; do not echo it as a progress message. Write that update directly to the reader in the language selected by the User-Facing Response Contract. Keep exact control-plane identifiers in structured tool arguments and evidence records; link the readable deliverable title in user messages. Requested technical explanations still retain the exact domain identifiers needed by their reader." : ""
+    exactOrganizationReplay
   ].filter(Boolean).join("\n");
 }
 function continuationPostconditionGapSection(context, input) {
@@ -31210,12 +31106,35 @@ function buildManifest(mode, maxChars, sections, governedReadProvenance, usedCha
     governedReadProvenance
   };
 }
+var RUNTIME_SYSTEM_SECTIONS = /* @__PURE__ */ new Set(["runtime_rules", "runtime_authorization", "pi_governed_tools", "agent_instructions"]);
+function deliverCompiledPrompt(prompt, manifest, sections, separateRuntimeRules) {
+  if (!separateRuntimeRules) return { prompt, manifest };
+  const inSystem = (section) => RUNTIME_SYSTEM_SECTIONS.has(section.name) && !(section.name === "runtime_authorization" && section.content.includes(EXACT_ORGANIZATION_INTENT_REPLAY_MARKER));
+  const userPrompt = renderPrompt(sections.filter((section) => !inSystem(section)));
+  const systemPrompt = renderPrompt(sections.filter(inSystem));
+  if (!userPrompt.trim() || !systemPrompt.trim()) return { prompt, manifest };
+  const usedChars = userPrompt.length + systemPrompt.length;
+  const systemNames = new Set(sections.filter(inSystem).map((section) => section.name));
+  return { prompt: userPrompt, systemPrompt, manifest: {
+    ...manifest,
+    sections: manifest.sections.map((section) => ({
+      ...section,
+      delivery: systemNames.has(section.section) ? "system" : "user"
+    })),
+    budget: {
+      ...manifest.budget,
+      usedChars,
+      utilization: manifest.budget.totalChars === null ? null : (usedChars / manifest.budget.totalChars).toFixed(4)
+    }
+  } };
+}
 function compilePreparedSections({
   rawSections,
   mode,
   maxChars,
   governedReadProvenance = [],
-  resolvedDependencyTupleCount = 0
+  resolvedDependencyTupleCount = 0,
+  separateRuntimeRules = false
 }) {
   const seenContent = /* @__PURE__ */ new Set();
   for (const section of rawSections) {
@@ -31239,7 +31158,7 @@ function compilePreparedSections({
   if (maxChars === null) {
     prompt = renderPrompt(modelSections);
     manifest = buildManifest(mode, null, modelSections, governedReadProvenance, prompt.length);
-    return { prompt, manifest };
+    return deliverCompiledPrompt(prompt, manifest, modelSections, separateRuntimeRules);
   }
   for (let pass = 0; pass < 20; pass += 1) {
     modelSections = modelSectionsWithAvailability(sections);
@@ -31273,7 +31192,7 @@ function compilePreparedSections({
       `Prompt compiler could not satisfy the unified ${maxChars}-character budget`
     );
   }
-  return { prompt, manifest };
+  return deliverCompiledPrompt(prompt, manifest, modelSections, separateRuntimeRules);
 }
 function compileCommandPromptWithManifest(input, options = {}) {
   const maxChars = options.maxChars == null ? null : Number(options.maxChars);
@@ -31388,7 +31307,8 @@ ${resolvedDependencies.details.content}` : resolvedDependencies.details.content
     }] : [],
     ...deliveryReadinessContent ? [{ name: "runtime_delivery_readiness", title: "Current Delivery Readiness", priority: 99, sourceRef: `issue:${input.issueId ?? "unknown"}:delivery`, content: deliveryReadinessContent }] : [],
     ...companyInitializationAuthority && !includeTask ? [companyInitializationAuthority] : [],
-    { name: "runtime_rules", title: "", priority: 100, sourceRef: `command:${input.commandId}`, content: fixedRules(input, !hasTask, runContract) },
+    ...!hasTask && readString(input.issueLine) && options.separateRuntimeRules === true ? [{ name: "issue_line", title: "", priority: 100, sourceRef: `issue:${input.issueId ?? "unknown"}`, content: `- issue: ${input.issueLine}` }] : [],
+    { name: "runtime_rules", title: "", priority: 100, sourceRef: `command:${input.commandId}`, content: fixedRules(input, !hasTask && options.separateRuntimeRules !== true, runContract) },
     { name: "runtime_authorization", title: "Runtime Action Contract", priority: 98, sourceRef: `run:${input.runId ?? "unknown"}`, content: runtimeAuthorizationText(context, mode, {
       replayAlreadyInTask: includeTask && taskText.includes(EXACT_ORGANIZATION_INTENT_REPLAY_MARKER),
       runContract,
@@ -31446,7 +31366,8 @@ ${resolvedDependencies.details.content}` : resolvedDependencies.details.content
     mode,
     maxChars,
     governedReadProvenance: governedReads.provenance,
-    resolvedDependencyTupleCount: resolvedDependencies.required.tupleCount
+    resolvedDependencyTupleCount: resolvedDependencies.required.tupleCount,
+    separateRuntimeRules: options.separateRuntimeRules === true
   });
   compiled.manifest.runContract = runContract;
   compiled.manifest.continuationPromptContract = continueTaskEnabled ? { capability: "continue_task_v1", mode: "continue_task" } : { capability: null, mode: "legacy_server_owned_in_progress" };
@@ -34233,7 +34154,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.320";
+var CONNECTOR_VERSION = "0.1.1-beta.322";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var daemonRequire = createRequire(import.meta.url);
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
@@ -35898,7 +35819,7 @@ function buildCommandPrompt(command, workspace, materializedAttachments = [], op
     },
     runtimeTemplateCatalog: options.runtimeTemplateCatalog,
     executorCapabilityNotice: options.executorCapabilityNotice
-  }, { maxChars: options.maxChars });
+  }, { maxChars: options.maxChars, separateRuntimeRules: options.executorKind === "pi" });
   const auditedCompilation = attachCurrentRunContractShadowAudit(
     compilation,
     payload.currentRunContract,
@@ -39427,7 +39348,10 @@ async function executeRunCommand(config, command) {
       const promptRoot = managedMcpProfile?.profileRoot ?? workspace.executorHome;
       const promptDir = join19(promptRoot, "tmp");
       mkdirSync10(promptDir, { recursive: true, mode: 448 });
-      const promptPath = join19(promptDir, "conversation-system.md");
+      const promptPath = join19(
+        promptDir,
+        `runtime-system-${createHash19("sha256").update(command.commandId, "utf8").digest("hex")}.md`
+      );
       writeFileSync12(promptPath, appendedSystemPrompt, { encoding: "utf8", mode: 384, flag: "wx" });
       handoffPiRunPathsToChild(config, [promptDir, promptPath]);
       const printIndex = invocation.args.lastIndexOf("-p");

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.320";
+const CONNECTOR_VERSION = "0.1.1-beta.322";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.320",
+  "version": "0.1.1-beta.322",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",