@amaster.ai/employee-runtime-connector 0.1.1-beta.322 → 0.1.1-beta.323

package/dist/amaster-runtime-daemon.mjs

@@ -34154,7 +34154,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.322";
+var CONNECTOR_VERSION = "0.1.1-beta.323";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var daemonRequire = createRequire(import.meta.url);
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
@@ -34859,6 +34859,33 @@ function handoffPiRunPathsToChild(config, paths) {
     makePiRunPathWritable(path, ownership.uid, ownership.gid);
   }
 }
+function materializePiRuntimeSystemPrompt(config, promptRoot, commandId, contents) {
+  const normalizedCommandId = readString(commandId);
+  if (!normalizedCommandId) throw new Error("pi_runtime_system_prompt_command_id_missing");
+  const promptIdentity = createHash19("sha256").update(normalizedCommandId).digest("hex");
+  const promptDir = join19(promptRoot, "tmp");
+  mkdirSync10(promptDir, { recursive: true, mode: 448 });
+  const promptDirStat = lstatSync12(promptDir);
+  if (!promptDirStat.isDirectory() || promptDirStat.isSymbolicLink()) {
+    throw new Error("pi_runtime_system_prompt_directory_invalid");
+  }
+  chmodSync8(promptDir, 448);
+  const promptPath = join19(promptDir, `runtime-system-${promptIdentity}.md`);
+  const temporaryPath = join19(promptDir, `.runtime-system.${process.pid}.${randomUUID()}.tmp`);
+  try {
+    writeFileSync12(temporaryPath, contents, { encoding: "utf8", mode: 384, flag: "wx" });
+    renameSync10(temporaryPath, promptPath);
+    chmodSync8(promptPath, 384);
+    const promptMode = statSync13(promptPath).mode & 511;
+    if (promptMode !== 384) {
+      throw new Error(`pi_runtime_system_prompt_permissions_failed: mode=${promptMode.toString(8)}`);
+    }
+  } finally {
+    rmSync10(temporaryPath, { force: true });
+  }
+  handoffPiRunPathsToChild(config, [promptDir, promptPath]);
+  return promptPath;
+}
 function writeLocalRuntimeStatus(config, runtimeStatus) {
   const currentState = readState(process.env);
   writeState(process.env, {
@@ -39030,6 +39057,7 @@ async function executeRunCommand(config, command) {
   let managedMcpProfile = null;
   let managedMcpCleanup = null;
   let cleanupManagedMcpProfile = null;
+  let piRuntimeSystemPromptCleanupPath = null;
   let piExecutorIdentity = null;
   const providerProtectedValues = [];
   let piResolvedProviderConfig = null;
@@ -39346,14 +39374,8 @@ async function executeRunCommand(config, command) {
     const appendedSystemPrompt = readString(promptCompilation.systemPrompt);
     if (executor.kind === "pi" && appendedSystemPrompt) {
       const promptRoot = managedMcpProfile?.profileRoot ?? workspace.executorHome;
-      const promptDir = join19(promptRoot, "tmp");
-      mkdirSync10(promptDir, { recursive: true, mode: 448 });
-      const promptPath = join19(
-        promptDir,
-        `runtime-system-${createHash19("sha256").update(command.commandId, "utf8").digest("hex")}.md`
-      );
-      writeFileSync12(promptPath, appendedSystemPrompt, { encoding: "utf8", mode: 384, flag: "wx" });
-      handoffPiRunPathsToChild(config, [promptDir, promptPath]);
+      const promptPath = materializePiRuntimeSystemPrompt(config, promptRoot, command.commandId, appendedSystemPrompt);
+      if (!managedMcpProfile) piRuntimeSystemPromptCleanupPath = promptPath;
       const printIndex = invocation.args.lastIndexOf("-p");
       invocation.args.splice(printIndex < 0 ? invocation.args.length : printIndex, 0, "--append-system-prompt", promptPath);
     }
@@ -40064,6 +40086,9 @@ async function executeRunCommand(config, command) {
     return { resultDelivered: Boolean(completion) };
   } finally {
     await preparationLogChain;
+    if (piRuntimeSystemPromptCleanupPath) {
+      rmSync10(piRuntimeSystemPromptCleanupPath, { force: true });
+    }
     if (managedMcpProfile && !managedMcpCleanup && !completionOwnsManagedMcpProfile) {
       managedMcpCleanup = cleanupManagedMcpProfile(managedMcpProfile, {
         commandId: command.commandId,

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.322";
+const CONNECTOR_VERSION = "0.1.1-beta.323";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.322",
+  "version": "0.1.1-beta.323",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",