@amaster.ai/employee-runtime-connector 0.1.1-beta.61 → 0.1.1-beta.63

package/dist/amaster-runtime-daemon.mjs

@@ -333,6 +333,47 @@ function createPiOutputRetentionCompactor() {
   };
 }
 
+// src/amaster-runtime-daemon/pi-run-exit-closure-guard.mjs
+function readText(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function parsePiEvent(line) {
+  const text = String(line ?? "").trim();
+  if (!text.startsWith("{")) return null;
+  try {
+    const parsed = JSON.parse(text);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function createPiRunExitClosureToolErrorGuard() {
+  let stdoutBuffer = "";
+  let terminalDiagnostic = null;
+  return {
+    write(stream, chunk) {
+      if (terminalDiagnostic || stream !== "stdout") return terminalDiagnostic;
+      const combined = `${stdoutBuffer}${String(chunk ?? "")}`;
+      const lines = combined.split(/\r?\n/);
+      stdoutBuffer = lines.pop() ?? "";
+      if (stdoutBuffer.length > 256 * 1024) stdoutBuffer = stdoutBuffer.slice(-256 * 1024);
+      for (const line of lines) {
+        const event = parsePiEvent(line);
+        if (event?.type !== "tool_execution_end" || event.isError !== true) continue;
+        terminalDiagnostic = {
+          kind: "run_exit_closure_tool_error",
+          enforced: true,
+          reason: "first_closure_tool_error",
+          toolName: readText(event.toolName) ?? readText(event.tool),
+          toolCallId: readText(event.toolCallId) ?? readText(event.tool_call_id)
+        };
+        return terminalDiagnostic;
+      }
+      return null;
+    }
+  };
+}
+
 // src/amaster-runtime-daemon/pi-executor-access.mjs
 import {
   chmodSync,
@@ -10397,7 +10438,7 @@ var source_acquisition_compatibility_default = {
 };
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.61";
+var CONNECTOR_VERSION = "0.1.1-beta.63";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = source_acquisition_compatibility_default.profileVersion;
 var SOURCE_ACQUISITION_PROFILE_VERSION = source_acquisition_compatibility_default.profileVersion;
@@ -12785,6 +12826,7 @@ function runExecutor(command, args, options) {
     let completionOutputHasFinalAssistantText = null;
     let outputFlood = null;
     let argumentAmplification = null;
+    let toolExecutionGuard = null;
     let memoryLimit = null;
     let timer = null;
     let rssTimer = null;
@@ -12841,6 +12883,7 @@ function runExecutor(command, args, options) {
         retainedOutputBytes: { ...retainedOutputBytes },
         outputFlood,
         argumentAmplification,
+        toolExecutionGuard,
         memoryLimit,
         completionOutputType,
         completionOutputHasFinalAssistantText,
@@ -12970,6 +13013,11 @@ function runExecutor(command, args, options) {
       argumentAmplification = diagnostic;
       requestStop("tool_argument_amplification");
     };
+    const killForToolExecutionGuard = (diagnostic) => {
+      if (settled || outputFlood || toolExecutionGuard) return;
+      toolExecutionGuard = diagnostic;
+      requestStop("tool_execution_guard");
+    };
     const killForMemoryLimit = (rssBytes) => {
       if (settled || memoryLimit) return;
       memoryLimit = {
@@ -13001,7 +13049,11 @@ function runExecutor(command, args, options) {
       const text = chunk.toString("utf8");
       outputBytes.stdout += chunk.length;
       const outputControl = options.onOutput?.("stdout", text, chunk.length);
-      if (outputControl?.enforced === true) killForArgumentAmplification(outputControl);
+      if (outputControl?.kind === "run_exit_closure_tool_error") {
+        killForToolExecutionGuard(outputControl);
+      } else if (outputControl?.enforced === true) {
+        killForArgumentAmplification(outputControl);
+      }
       maybeSchedulePiCompletionDrain(text);
       const retainedText = piOutputRetentionCompactor?.write(text) ?? text;
       retainedOutputBytes.stdout += Buffer.byteLength(retainedText);
@@ -13398,6 +13450,9 @@ function runExitClosurePrompt(state) {
   const response = asRecord(state.completionResponse);
   const summary = truncateText(readString(asRecord(state.candidateResult).summary) ?? "", 1200);
   const issueId = commandIssueId(command) ?? "unknown";
+  const runId = commandRunId(command) ?? "unknown";
+  const closureStrategy = readString(response.closureStrategy) ?? "select_issue_disposition";
+  const allowedActions = Array.isArray(response.allowedActions) ? response.allowedActions.filter((value) => typeof value === "string") : [];
   return [
     "# AMaster Run-Exit Disposition Closure",
     "This is a bounded status-only closure turn for the same command and heartbeat run.",
@@ -13405,8 +13460,10 @@ function runExitClosurePrompt(state) {
     `Completion reason: ${readString(response.reasonCode) ?? "successful_run_missing_state"}`,
     summary ? `Primary turn summary: ${summary}` : null,
     "Do not perform more business work, edit files, create artifacts/documents/children/plans, or mutate company/profile/milestone state.",
-    "Use exactly one runtime_action.submit mutation. Choose update_parent, create_interaction (not suggest_tasks), or add_comment only when a comment is truly the intended exit path.",
-    "A comment alone does not establish completion. Prefer update_parent with the truthful done, blocked, review/input, or todo-continuation state.",
+    closureStrategy === "record_work_disposition" ? "Effective closure action for this turn: record_work_disposition only." : `Server-allowed closure actions: ${allowedActions.join(", ") || "none"}.`,
+    "Use exactly one runtime_action.submit mutation.",
+    closureStrategy === "record_work_disposition" ? "The Server selected record_work_disposition as the only closure strategy. For this already-productive source run, record execute_inline with truthful source-run evidence; do not also mutate issue status or create an interaction. After command terminalization, the Server writes the Business Outcome and owns the matching Board review or terminal-state transition." : "The Server selected an Issue disposition closure. Choose update_parent, create_interaction (not suggest_tasks), or add_comment only when a comment is truly the intended exit path. A comment alone does not establish completion.",
+    closureStrategy === "record_work_disposition" ? `Use evidenceRefs ["run:${runId}", "command:${state.commandId}"], structure.deliverableType "runtime_command_result", structure.deliverableKey "runtime-command-${state.commandId}", and structure.acceptanceMethodCode "governed_business_outcome". Supply a concise truthful reason based only on the primary turn summary.` : null,
     `The idempotencyKey must be runtime-command-closure:${state.commandId}.`,
     "Do not call runtime_action.plan or runtime_action.commit. Stop immediately after the one allowed mutation returns."
   ].filter(Boolean).join("\n\n");
@@ -13580,6 +13637,7 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
     executorKind,
     protectedValues
   );
+  const closureToolErrorGuard = executorKind === "pi" ? createPiRunExitClosureToolErrorGuard() : null;
   try {
     const managedMcpClosureBaseline = executorKind === "pi" ? restoreManagedPiRunExitClosureBaseline(
       executionConfig.runExitClosureBaseline,
@@ -13607,6 +13665,7 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
         onOutput: (stream, chunk, rawBytes) => {
           noteActiveRunOutput(command, stream, chunk, rawBytes);
           liveOutputLogger.write(stream, chunk);
+          return closureToolErrorGuard?.write(stream, chunk) ?? null;
         }
       });
     } finally {
@@ -13618,6 +13677,8 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
     const hasOutputFlood = Boolean(readString(outputFlood.stream) && readNumber(outputFlood.bytes, 0) > 0);
     const memoryLimit = asRecord(execution.memoryLimit);
     const hasMemoryLimit = readNumber(memoryLimit.rssBytes, 0) > 0;
+    const toolExecutionGuard = asRecord(execution.toolExecutionGuard);
+    const hasToolExecutionGuard = toolExecutionGuard.enforced === true && readString(toolExecutionGuard.kind) === "run_exit_closure_tool_error";
     const parsed = parseExecutorTurnOutput(executorKind, execution, liveOutputLogger, hasOutputFlood);
     const mcpToolResults = dedupeGovernedMcpToolResults([
       ...Array.isArray(parsed.mcpToolResults) ? parsed.mcpToolResults.map(asRecord) : [],
@@ -13636,14 +13697,14 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
       allowMissingTurnEnd: completionOutputStopped || Boolean(cleanupDisposition),
       allowMissingAssistantOutput: false
     }) : null;
-    const parsedError = hasOutputFlood ? "Run-exit closure output exceeded the configured limit" : hasMemoryLimit ? "Run-exit closure exceeded the configured memory limit" : execution.timedOut ? "Run-exit closure timed out" : execution.spawnError ?? piInvalidOutputError ?? parsedForValidation.errorMessage ?? ((execution.exitCode ?? 0) === 0 || cleanupDisposition ? null : `Run-exit closure exited with code ${execution.exitCode ?? "unknown"}`);
+    const parsedError = hasOutputFlood ? "Run-exit closure output exceeded the configured limit" : hasMemoryLimit ? "Run-exit closure exceeded the configured memory limit" : hasToolExecutionGuard ? "Run-exit closure stopped after the first rejected or invalid tool attempt" : execution.timedOut ? "Run-exit closure timed out" : execution.spawnError ?? piInvalidOutputError ?? parsedForValidation.errorMessage ?? ((execution.exitCode ?? 0) === 0 || cleanupDisposition ? null : `Run-exit closure exited with code ${execution.exitCode ?? "unknown"}`);
     const effectiveToolsAttestation = executorKind === "pi" ? inspectManagedPiRunExitClosureAttestation(
       executionConfig.runExitClosureBaseline,
       { commandId: state.commandId, runId: commandRunId(command) }
     ) : { status: "not_required" };
     const effectiveToolsError = executorKind === "pi" && executionConfig.runExitClosureBaseline && effectiveToolsAttestation.status !== "attested" ? `Run-exit closure effective-tools attestation ${effectiveToolsAttestation.status}` : null;
     const closureError = parsedError ?? effectiveToolsError;
-    const succeeded = execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && (execution.exitCode === 0 || completionOutputStopped || Boolean(cleanupDisposition)) && !execution.timedOut && !execution.spawnError && !closureError;
+    const succeeded = execution.cancelled !== true && !hasOutputFlood && !hasMemoryLimit && !hasToolExecutionGuard && (execution.exitCode === 0 || completionOutputStopped || Boolean(cleanupDisposition)) && !execution.timedOut && !execution.spawnError && !closureError;
     await ingestLog(config, command, "system", succeeded ? "info" : "error", succeeded ? "Run-exit disposition closure turn completed" : `Run-exit disposition closure turn failed: ${closureError}`, {
       presentationKind: "run_exit_disposition_closure",
       closureAttempt: 1,
@@ -13666,6 +13727,7 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
         outputTelemetry,
         cleanupDisposition,
         effectiveToolsAttestation,
+        ...hasToolExecutionGuard ? { toolExecutionGuard } : {},
         toolResults: mcpToolResults.slice(0, 10).map((result3) => ({
           status: readString(result3.status),
           toolName: readString(result3.toolName) ?? readString(result3.name) ?? readString(asRecord(result3.runtimeAction).toolName),

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.61";
+const CONNECTOR_VERSION = "0.1.1-beta.63";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.61",
+  "version": "0.1.1-beta.63",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",