@amaster.ai/employee-runtime-connector 0.1.1-beta.349 → 0.1.1-beta.350

package/README.md

@@ -18,6 +18,28 @@ npm install --omit=dev --prefix /opt/pi-cli-runtime @amaster.ai/employee-runtime
 
 Do not use `latest`, `^`, or `~` in a runtime image. The image tag and connector package version should identify one immutable deployment.
 
+## Tool transcript payloads
+
+Task-mode Pi tool start/end events retain bounded input and result data instead
+of replacing both with lifecycle labels. Call IDs and `isError` stay unchanged;
+older summary-only events still replay. This changes reporting only, not tool
+execution or task acceptance. Existing known-runtime-credential redaction runs
+before projection; the projection additionally redacts credential-like keys,
+Bearer/credential assignments and private keys, and omits binary content blocks.
+
+The projection limits strings to 2,000 characters, total text to 6,000 characters,
+depth to 7, traversal to 240 nodes, arrays to 20 items and objects to 30 fields.
+Serialized payloads above 12,000 characters use an explicit omission notice so
+the JSONL event is never cut mid-record. Truncation remains visible. File paths
+are data: Windows drive/UNC paths and CRLF text are JSON-escaped without shell
+commands or OS-specific path conversion. The module is included in the existing
+Node 20 daemon bundle on every platform.
+
+Existing historical events cannot gain details that were never uploaded.
+New details require the executing desktop/cloud connector to use the updated
+bundle; deploying the frontend alone is insufficient. No connector install,
+restart or release is performed by the source change.
+
 ## Incremental type safety
 
 `pnpm typecheck` runs the legacy entry-point syntax checks plus TypeScript strict

package/dist/amaster-runtime-daemon.mjs

@@ -26477,6 +26477,75 @@ function terminatingRunDispositionEvidence(results, expected = {}) {
   };
 }
 
+// src/amaster-runtime-daemon/typed/tool-transcript-payload.mjs
+var SECRET_KEY = /secret|token|password|passwd|credential|private[_-]?key|api[_-]?key|authorization|cookie|bearer|jwt/i;
+var OMITTED = "[\u5185\u5BB9\u5DF2\u622A\u65AD]";
+var REDACTED = "[\u5DF2\u8131\u654F]";
+function scrubText(text2) {
+  return text2.replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g, REDACTED).replace(/\b((?:set-cookie|cookie)\s*:\s*)[^\r\n]*/gi, `$1${REDACTED}`).replace(/\bBearer\s+[^\s"'<>]+/gi, `Bearer ${REDACTED}`).replace(/(--(?:api[_-]?key|token|password|secret)\s+)(?:"[^"]*"|'[^']*'|\S+)/gi, `$1${REDACTED}`).replace(/\b((?:api[_-]?key|access[_-]?token|refresh[_-]?token|password|passwd|secret|credential|authorization|cookie)\s*[=:]\s*)(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s&,;]+)/gi, `$1${REDACTED}`).replace(/(https?:\/\/)[^\s/@]+:[^\s/@]+@/gi, `$1${REDACTED}@`);
+}
+function compactToolTranscriptPayload(value) {
+  const budget = { nodes: 240, chars: 6e3, truncated: false };
+  const seen = /* @__PURE__ */ new WeakSet();
+  const omitted = () => {
+    budget.truncated = true;
+    return OMITTED;
+  };
+  function visit(input, depth = 0) {
+    if (--budget.nodes < 0 || depth > 7 || budget.chars <= 0) return omitted();
+    if (typeof input === "string") {
+      if (/^\s*[{[]/.test(input)) {
+        try {
+          return JSON.stringify(visit(JSON.parse(input), depth + 1));
+        } catch {
+          return "\u7ED3\u6784\u5316\u5185\u5BB9\u4E0D\u5B8C\u6574\uFF0C\u672A\u5305\u542B\u5728\u8FC7\u7A0B\u6458\u8981\u4E2D";
+        }
+      }
+      const text2 = scrubText(input);
+      const limit = Math.min(2e3, budget.chars);
+      budget.chars -= Math.min(text2.length, limit);
+      return text2.length > limit ? text2.slice(0, limit) + omitted() : text2;
+    }
+    if (input == null || typeof input === "boolean" || typeof input === "number") return input;
+    if (typeof input !== "object") return void 0;
+    if (seen.has(input)) return omitted();
+    seen.add(input);
+    let result2;
+    const object = (
+      /** @type {Record<string, unknown>} */
+      input
+    );
+    if (Array.isArray(input)) {
+      const items = input.slice(0, 20).map((item) => visit(item, depth + 1));
+      if (input.length > 20) items.push(omitted());
+      result2 = items;
+    } else if (typeof object.type === "string" && ["image", "audio", "resource"].includes(object.type)) {
+      result2 = { type: object.type, summary: "\u9644\u4EF6\u5185\u5BB9\u672A\u5305\u542B\u5728\u8FC7\u7A0B\u6458\u8981\u4E2D" };
+    } else {
+      const fields = /* @__PURE__ */ Object.create(null);
+      const entries = Object.entries(input);
+      for (const [key, entry] of entries.slice(0, 30)) {
+        if (key.length > 120) {
+          omitted();
+          continue;
+        }
+        fields[key] = SECRET_KEY.test(key) ? REDACTED : visit(entry, depth + 1);
+      }
+      if (entries.length > 30) {
+        omitted();
+        fields._truncated = true;
+      }
+      result2 = fields;
+    }
+    seen.delete(input);
+    return result2;
+  }
+  const projected = visit(value);
+  const data = budget.truncated && projected && typeof projected === "object" && !Array.isArray(projected) ? { ...projected, _truncated: true } : projected;
+  if (JSON.stringify(data ?? null).length > 12e3) return { summary: "\u5185\u5BB9\u8FC7\u957F\uFF0C\u672A\u5305\u542B\u5728\u8FC7\u7A0B\u6458\u8981\u4E2D", _truncated: true };
+  return data;
+}
+
 // src/amaster-runtime-daemon/transcript-compaction.mjs
 function tcAsRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
@@ -26600,12 +26669,12 @@ function compactPiToolLifecycleForTranscript(event, readableSummary) {
     type,
     toolCallId,
     toolName,
-    args: { summary }
+    args: record10.args == null ? { summary } : compactToolTranscriptPayload(record10.args)
   } : {
     type,
     toolCallId,
     toolName,
-    result: summary,
+    result: record10.result == null ? summary : compactToolTranscriptPayload(record10.result),
     isError: record10.isError === true
   });
 }
@@ -33749,7 +33818,7 @@ function assertRequiredTaskAttachmentMaterialized(input, materialized) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.349";
+var CONNECTOR_VERSION = "0.1.1-beta.350";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var daemonRequire = createRequire(import.meta.url);
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;

package/dist/amaster-runtime.mjs

@@ -7,7 +7,7 @@ import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 import { BUILD_SUPPORTED_CAPABILITIES } from "./amaster-runtime-daemon/capability-registry.mjs";
 
-const CONNECTOR_VERSION = "0.1.1-beta.349";
+const CONNECTOR_VERSION = "0.1.1-beta.350";
 
 const CONFIG_KEY_MAP = new Map([
   ["server_url", "AMASTER_EMPLOYEE_SERVER_URL"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.349",
+  "version": "0.1.1-beta.350",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",