@amaster.ai/employee-runtime-connector 0.1.1-beta.35 → 0.1.1-beta.37

package/README.md

@@ -21,12 +21,13 @@ Do not use `latest`, `^`, or `~` in a runtime image. The image tag and connector
 
 Immutable images should pin an exact package version as their baseline. The current connector does not download or replace runtime code while running; package upgrades and rollbacks belong to the image build and rollout.
 
-The publish workflow verifies that npm records the publishing commit as the package `gitHead`, then updates the repository deployment pin. Remote deployment accepts that package only when its `gitHead` is an ancestor of the target source commit and the connector package path is unchanged between them. This path-only comparison is valid because the published connector is self-contained; if runtime code starts importing workspace source outside this package, expand the provenance scope and tests before release. After restart, deployment also verifies the package CLI version inside the container. Do not update the deployment pin manually to bypass either provenance check.
+The publish workflow verifies that npm records the publishing commit as the package `gitHead`, then updates the repository deployment pin. Remote deployment accepts that package only when its `gitHead` is an ancestor of the target source commit and the connector runtime build inputs are unchanged between them. Those inputs are the package path plus `packages/shared/src/source-acquisition-compatibility.json`, which is copied into the published package and bundled into the daemon. If another workspace source becomes a runtime build input, expand the provenance scope and tests before release. After restart, deployment also verifies the package CLI version inside the container. Do not update the deployment pin manually to bypass either provenance check.
 
 ## Package Contents
 
 - `dist/amaster-runtime.mjs`: configuration, pairing, workspace, diagnostics, and daemon lifecycle CLI.
 - `dist/amaster-runtime-daemon.mjs`: standalone daemon bundle for connector registration, heartbeat, command execution, and result ingestion.
+- `dist/source-acquisition-compatibility.json`: versioned Source Acquisition compatibility manifest. Runner image builds must read this file from the exact installed connector package and fail before publishing when their Source Acquisition profile, adapter, or required package versions do not match it.
 
 The source of truth lives under this package's `src/` directory. The package build copies the CLI and bundles the daemon modules into publishable output; do not edit generated files under `dist/`.
 

package/dist/amaster-runtime-daemon.mjs

@@ -1891,6 +1891,25 @@ var MANAGED_PI_PROVIDER_PROTECTED_ENV_NAMES = Object.freeze([
   "AMASTER_API_KEY",
   "AMASTER_PLATFORM_OAUTH_TOKEN"
 ]);
+var MANAGED_PI_HELIGE_EXECUTION_ENV_NAMES = Object.freeze([
+  "HELIGE_ACCESS_TOKEN",
+  "HELIGE_BASE_URL",
+  "HELIGE_USER_ID",
+  "HELIGE_USER_UID",
+  "HELIGE_USER_NAME",
+  "HELIGE_USER_EMAIL"
+]);
+var MANAGED_PI_HELIGE_EXECUTION_PROTECTED_ENV_NAMES = Object.freeze([
+  "HELIGE_ACCESS_TOKEN"
+]);
+var MANAGED_PI_LEGACY_PLATFORM_EXECUTION_ENV_NAMES = Object.freeze([
+  "PLATFORM_ACCESS_TOKEN",
+  "PLATFORM_BASE_URL",
+  "PLATFORM_USER_ID",
+  "PLATFORM_USER_UID",
+  "PLATFORM_USER_NAME",
+  "PLATFORM_USER_EMAIL"
+]);
 function isRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value);
 }
@@ -2700,7 +2719,10 @@ function createManagedPiMcpProfileApi(options = {}) {
     "PAPERCLIP_API_KEY",
     "AMASTER_BOARD_API_KEY"
   ]);
-  const ALLOWED_COMMAND_ENV2 = new Set(MANAGED_PI_PROVIDER_ENV_NAMES);
+  const ALLOWED_COMMAND_ENV2 = /* @__PURE__ */ new Set([
+    ...MANAGED_PI_PROVIDER_ENV_NAMES,
+    ...MANAGED_PI_HELIGE_EXECUTION_ENV_NAMES
+  ]);
   const SAFE_INHERITED_ENV2 = /* @__PURE__ */ new Set([
     "PATH",
     "LANG",
@@ -3717,7 +3739,10 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         protectedValues: [.../* @__PURE__ */ new Set([
           sessionToken,
           ...sharedRuntime.protectedValues,
-          ...MANAGED_PI_PROVIDER_PROTECTED_ENV_NAMES.map((name) => input.commandEnv?.[name]).filter((value) => typeof value === "string" && value.length > 0)
+          ...[
+            ...MANAGED_PI_PROVIDER_PROTECTED_ENV_NAMES,
+            ...MANAGED_PI_HELIGE_EXECUTION_PROTECTED_ENV_NAMES
+          ].map((name) => input.commandEnv?.[name]).filter((value) => typeof value === "string" && value.length > 0)
         ])],
         attestation: {
           ...attestationFacts,
@@ -5457,6 +5482,7 @@ function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionCon
   const completion = asRecord(requirements.completion);
   const delivery = asRecord(requirements.delivery);
   const businessOutcome = asRecord(requirements.businessOutcome);
+  const workDisposition = asRecord(requirements.workDisposition);
   const acceptancePolicy = asRecord(businessOutcome.acceptancePolicy);
   const acceptanceValidatorIds = Array.isArray(acceptancePolicy.validatorIds) ? acceptancePolicy.validatorIds.filter((value) => typeof value === "string") : [];
   const evidenceAutoAcceptance = acceptancePolicy.mode === "evidence_auto" && acceptancePolicy.verdictAuthority === "none" && acceptancePolicy.acceptanceAuthority === null && acceptanceValidatorIds.length === EVIDENCE_AUTO_VALIDATOR_IDS.size && acceptanceValidatorIds.every((value) => EVIDENCE_AUTO_VALIDATOR_IDS.has(value));
@@ -5465,7 +5491,7 @@ function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionCon
   const manifestRefreshOnly = legacyManifestRefreshOnly(context);
   const firstDocumentCheckpoint = completionDeliverable === "document_or_artifact" ? manifestRefreshOnly ? "The current deliverable content already exists and this run is limited to refreshing stale immutable Manifest refs. Do not create or revise a document unless a fresh Delivery readiness read proves a content or acceptance gap beyond stale refs." : mode === "cold" ? "Before the first external browse, search, or research action, call upsert_document with a stable key. Create a checkpoint skeleton containing the acceptance criteria, a source table, and known unknowns; update the same document with each piece of verified evidence instead of waiting until broad research is complete. Immediately after upsert_document, call update_parent with status: in_progress and a concrete next action; complete both control-plane writes before the first external browse, search, or research action." : "Before the first external browse, search, or research action, read the existing stable-key document. Preserve all still-valid verified rows, source URLs, conclusions, and known unknowns; do not replace a populated document with a blank skeleton or less-informative fallback. Only when the document does not exist may you create a checkpoint skeleton. Then call update_parent with status: in_progress and a concrete next action before the first external browse, search, or research action. Update the same document with each piece of verified evidence." : "";
   const completionContract = !suppressOrdinaryCompletionContract && completionRole && completionDeliverable ? [
-    "Before ending this run, persist durable progress through Runtime Actions and record one explicit task disposition. Browser and tool history alone are not durable progress.",
+    workDisposition.mode === "required" ? "Before the first business mutation, ensure the current required work disposition is recorded. Read-only governed checks may precede it. If no current valid receipt exists, call runtime_action.describe for record_work_disposition and persist exactly one truthful disposition before upsert_document, update_parent, add_comment, create_interaction, publish_delivery_manifest, or any other business mutation. Before ending this run, persist durable progress through Runtime Actions; browser and tool history alone are not durable progress." : "Before ending this run, persist durable progress through Runtime Actions and record one explicit task disposition. Browser and tool history alone are not durable progress.",
     firstDocumentCheckpoint,
     "If work remains in an ordinary productive run, call update_parent with status: in_progress and a concrete next action so bounded continuation recovery can preserve a live path. Status: todo does not queue a normal continuation from an ordinary productive run. Only a server-issued successful-run handoff recovery may use status: todo, and only according to its exact Recovery Instruction. Otherwise use a supported terminal or waiting disposition."
   ].filter(Boolean).join(" ") : "";
@@ -9625,18 +9651,33 @@ function assertSourceAcquisitionRuntimeAuthority({
   }
 }
 
+// ../shared/src/source-acquisition-compatibility.json
+var source_acquisition_compatibility_default = {
+  schemaVersion: "mirrorx.source-acquisition-compatibility.v1",
+  profileVersion: "source_acquisition_v1",
+  retentionVersion: "source_summary_only_v1",
+  actionVersion: "complete_source_acquisition_v1",
+  policyVersion: "browser_read_policy_v1",
+  adapters: [
+    "pi_browser_use_headless_v1"
+  ],
+  requiredPackages: {
+    "@amaster.ai/pi-browser-use": "0.1.2-beta.59"
+  }
+};
+
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.35";
+var CONNECTOR_VERSION = "0.1.1-beta.37";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
-var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
-var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";
-var SOURCE_ACQUISITION_RETENTION_VERSION = "source_summary_only_v1";
-var SOURCE_ACQUISITION_ACTION_VERSION = "complete_source_acquisition_v1";
-var SOURCE_ACQUISITION_HEADLESS_ADAPTER = "pi_browser_use_headless_v1";
+var SOURCE_ACQUISITION_CAPABILITY = source_acquisition_compatibility_default.profileVersion;
+var SOURCE_ACQUISITION_PROFILE_VERSION = source_acquisition_compatibility_default.profileVersion;
+var SOURCE_ACQUISITION_RETENTION_VERSION = source_acquisition_compatibility_default.retentionVersion;
+var SOURCE_ACQUISITION_ACTION_VERSION = source_acquisition_compatibility_default.actionVersion;
+var SOURCE_ACQUISITION_HEADLESS_ADAPTER = source_acquisition_compatibility_default.adapters[0];
 var SOURCE_ACQUISITION_DESKTOP_ADAPTER = "browser_skill_desktop_v1";
-var SOURCE_ACQUISITION_PACKAGE_VERSIONS = Object.freeze({
-  "@amaster.ai/pi-browser-use": "0.1.2-beta.52"
-});
+var SOURCE_ACQUISITION_PACKAGE_VERSIONS = Object.freeze(
+  source_acquisition_compatibility_default.requiredPackages
+);
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
 var AMASTER_PI_PROHIBITED_EXTRA_ARGS = /* @__PURE__ */ new Set(["--no-extensions", "--no-skills", "--no-tools", "--no-session"]);
@@ -11050,7 +11091,11 @@ function buildExecutorEnv(config, command, workspace) {
   const issueId = commandIssueId(command) ?? "";
   const companyId = readString(runtimeAuth.companyId) ?? readString(asRecord(command.payload).companyId) ?? "";
   const baseEnv = { ...process.env };
-  for (const name of MANAGED_PI_PROVIDER_ENV_NAMES) delete baseEnv[name];
+  for (const name of [
+    ...MANAGED_PI_PROVIDER_ENV_NAMES,
+    ...MANAGED_PI_HELIGE_EXECUTION_ENV_NAMES,
+    ...MANAGED_PI_LEGACY_PLATFORM_EXECUTION_ENV_NAMES
+  ]) delete baseEnv[name];
   const executorPaths = readStringArray(config.executorPaths);
   if (executorPaths.length > 0) {
     baseEnv.PATH = [...executorPaths, baseEnv.PATH ?? ""].filter(Boolean).join(delimiter3);
@@ -14108,7 +14153,12 @@ async function executeRunCommand(config, command) {
     }
     if (executor.kind === "pi") {
       piResolvedProviderConfig = executorEnv;
-      for (const envName of ["AMASTER_API_KEY", "AMASTER_PLATFORM_OAUTH_TOKEN", "PLATFORM_ACCESS_TOKEN"]) {
+      for (const envName of [
+        "AMASTER_API_KEY",
+        "AMASTER_PLATFORM_OAUTH_TOKEN",
+        ...MANAGED_PI_HELIGE_EXECUTION_PROTECTED_ENV_NAMES,
+        "PLATFORM_ACCESS_TOKEN"
+      ]) {
         const protectedValue = readString(piResolvedProviderConfig[envName]);
         if (protectedValue && !providerProtectedValues.includes(protectedValue)) {
           providerProtectedValues.push(protectedValue);

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.35";
+const CONNECTOR_VERSION = "0.1.1-beta.37";
 
 const CAPABILITIES = [
   "remote_registration",

package/dist/source-acquisition-compatibility.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "mirrorx.source-acquisition-compatibility.v1",
+  "profileVersion": "source_acquisition_v1",
+  "retentionVersion": "source_summary_only_v1",
+  "actionVersion": "complete_source_acquisition_v1",
+  "policyVersion": "browser_read_policy_v1",
+  "adapters": [
+    "pi_browser_use_headless_v1"
+  ],
+  "requiredPackages": {
+    "@amaster.ai/pi-browser-use": "0.1.2-beta.59"
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.35",
+  "version": "0.1.1-beta.37",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",