@amaster.ai/employee-runtime-connector 0.1.1-beta.70 → 0.1.1-beta.72

package/dist/amaster-runtime-daemon.mjs

@@ -2939,6 +2939,34 @@ function applyManagedPiToolAllowlist(args, profile) {
     ...args.slice(printArgIndex)
   ];
 }
+function applyManagedPiRunExitClosureArgs(args, profile) {
+  const narrowedArgs = applyManagedPiToolAllowlist(args, profile);
+  const toolAllowlist = Array.isArray(profile?.toolAllowlist) ? profile.toolAllowlist.filter((name) => typeof name === "string" && name) : [];
+  if (toolAllowlist.length === 0 || toolAllowlist.includes("read") || typeof profile?.profileRoot !== "string" || !profile.profileRoot) {
+    return narrowedArgs;
+  }
+  const canonicalPath = (filePath) => {
+    try {
+      return realpathSync2(filePath);
+    } catch {
+      return resolve3(filePath);
+    }
+  };
+  const roleSkillsVisibilityExtension = canonicalPath(resolve3(
+    profile.profileRoot,
+    "extensions",
+    MANAGED_PI_ROLE_SKILLS_VISIBILITY_FILENAME
+  ));
+  const closureArgs = [];
+  for (let index = 0; index < narrowedArgs.length; index += 1) {
+    if (narrowedArgs[index] === "--extension" && typeof narrowedArgs[index + 1] === "string" && canonicalPath(narrowedArgs[index + 1]) === roleSkillsVisibilityExtension) {
+      index += 1;
+      continue;
+    }
+    closureArgs.push(narrowedArgs[index]);
+  }
+  return closureArgs;
+}
 function createManagedPiMcpProfileApi(options = {}) {
   const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync2;
   const chownSyncImpl = typeof options.chownSync === "function" ? options.chownSync : chownSync2;
@@ -3833,6 +3861,14 @@ function createManagedPiMcpProfileApi(options = {}) {
     }
     return profile;
   }
+  function readCommonRoleSkills(piHome) {
+    const skillsRoot = resolve3(piHome, "bundles", "common", "skills");
+    if (!existsSync3(skillsRoot)) return [];
+    return readdirSync3(skillsRoot).sort().flatMap((name) => {
+      const source = join4(skillsRoot, name);
+      return existsSync3(join4(source, "SKILL.md")) ? [{ name, source }] : [];
+    });
+  }
   function resolveManagedRoleSkills(piHome, skillProfiles) {
     const entriesByName = /* @__PURE__ */ new Map();
     for (const skillProfile of skillProfiles) {
@@ -3847,6 +3883,9 @@ function createManagedPiMcpProfileApi(options = {}) {
         entriesByName.set(entry.name, entry);
       }
     }
+    for (const entry of readCommonRoleSkills(piHome)) {
+      if (!entriesByName.has(entry.name)) entriesByName.set(entry.name, entry);
+    }
     const entries = [...entriesByName.values()].map((entry) => ({
       name: entry.name,
       filePath: realpathSync2(join4(entry.source, "SKILL.md"))
@@ -6580,8 +6619,10 @@ function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionCon
   const evidenceAutoAcceptance = acceptancePolicy.mode === "evidence_auto" && acceptancePolicy.verdictAuthority === "none" && acceptancePolicy.acceptanceAuthority === null && acceptanceValidatorIds.length === EVIDENCE_AUTO_VALIDATOR_IDS.size && acceptanceValidatorIds.every((value) => EVIDENCE_AUTO_VALIDATOR_IDS.has(value));
   const completionRole = readString(completion.role);
   const completionDeliverable = readString(completion.deliverable);
+  const delegatedAggregationEvidence = asRecord(context.paperclipDelegatedAggregationEvidence);
+  const delegatedDelivery = readString(delegatedAggregationEvidence.schemaVersion) === "delegated-aggregation-evidence-v1" && readString(delegatedAggregationEvidence.finalAggregationIssueId) && readString(delegatedAggregationEvidence.manifestId) && readString(delegatedAggregationEvidence.packageReviewInteractionId);
   const manifestRefreshOnly = legacyManifestRefreshOnly(context);
-  const firstDocumentCheckpoint = completionDeliverable === "document_or_artifact" ? manifestRefreshOnly ? "The current deliverable content already exists and this run is limited to refreshing stale immutable Manifest refs. Do not create or revise a document unless a fresh Delivery readiness read proves a content or acceptance gap beyond stale refs." : mode === "cold" ? "Before the first external browse, search, or research action, call upsert_document with a stable key. Create a checkpoint skeleton containing the acceptance criteria, a source table, and known unknowns; update the same document with each piece of verified evidence instead of waiting until broad research is complete. Immediately after upsert_document, call update_parent with status: in_progress and a concrete next action; complete both control-plane writes before the first external browse, search, or research action." : "Before the first external browse, search, or research action, read the existing stable-key document. Preserve all still-valid verified rows, source URLs, conclusions, and known unknowns; do not replace a populated document with a blank skeleton or less-informative fallback. Only when the document does not exist may you create a checkpoint skeleton. Then call update_parent with status: in_progress and a concrete next action before the first external browse, search, or research action. Update the same document with each piece of verified evidence." : "";
+  const firstDocumentCheckpoint = completionDeliverable === "document_or_artifact" && !delegatedDelivery ? manifestRefreshOnly ? "The current deliverable content already exists and this run is limited to refreshing stale immutable Manifest refs. Do not create or revise a document unless a fresh Delivery readiness read proves a content or acceptance gap beyond stale refs." : mode === "cold" ? "Before the first external browse, search, or research action, call upsert_document with a stable key. Create a checkpoint skeleton containing the acceptance criteria, a source table, and known unknowns; update the same document with each piece of verified evidence instead of waiting until broad research is complete. Immediately after upsert_document, call update_parent with status: in_progress and a concrete next action; complete both control-plane writes before the first external browse, search, or research action." : "Before the first external browse, search, or research action, read the existing stable-key document. Preserve all still-valid verified rows, source URLs, conclusions, and known unknowns; do not replace a populated document with a blank skeleton or less-informative fallback. Only when the document does not exist may you create a checkpoint skeleton. Then call update_parent with status: in_progress and a concrete next action before the first external browse, search, or research action. Update the same document with each piece of verified evidence." : "";
   const completionContract = !suppressOrdinaryCompletionContract && completionRole && completionDeliverable ? [
     workDisposition.mode === "required" ? "Before the first business mutation, ensure the current required work disposition is recorded. Read-only governed checks may precede it. If no current valid receipt exists, call runtime_action.describe for record_work_disposition and persist exactly one truthful disposition before upsert_document, update_parent, add_comment, create_interaction, publish_delivery_manifest, or any other business mutation. Before ending this run, persist durable progress through Runtime Actions; browser and tool history alone are not durable progress." : "Before ending this run, persist durable progress through Runtime Actions and record one explicit task disposition. Browser and tool history alone are not durable progress.",
     firstDocumentCheckpoint,
@@ -6595,9 +6636,9 @@ function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionCon
     "Do not create a generic review-mode request_confirmation to ask the Board to accept final completion or the Outcome, and do not mark the issue done yourself. This does not prohibit an explicit intermediate review of an exact document revision before execution continues."
   ].join(" ") : "";
   const businessOutcomeTerminalContract = !suppressOrdinaryCompletionContract && businessOutcome.mode === "required" ? [
-    delivery.mode === "required" ? "When every acceptance criterion is satisfied and the exact current Delivery Manifest is ready, record the final execution disposition with update_parent status in_progress and a concise evidence summary, then end the run successfully without creating a final review interaction." : "When every acceptance criterion is satisfied, record the final execution disposition with update_parent status in_progress and a concise evidence summary, then end the run successfully without creating a final review interaction.",
+    delivery.mode === "required" ? delegatedDelivery ? "When every acceptance criterion is satisfied and the exact delegated final-child Manifest and package review remain current, record only the root execution disposition with update_parent status in_progress and a concise evidence summary, then end the run successfully without creating or publishing another package." : "When every acceptance criterion is satisfied and the exact current Delivery Manifest is ready, record the final execution disposition with update_parent status in_progress and a concise evidence summary, then end the run successfully without creating a final review interaction." : "When every acceptance criterion is satisfied, record the final execution disposition with update_parent status in_progress and a concise evidence summary, then end the run successfully without creating a final review interaction.",
     "The exact runtime_action_in_progress_server_owned rejection is the expected fail-before-effect receipt for this Server-owned handoff. After receiving it, do not retry update_parent with done or another status; end the run successfully so the Server terminal reconciler can take over.",
-    evidenceAutoAcceptance ? delivery.mode === "required" ? "Only after the run and command succeed does the Server validate the exact current Delivery Manifest and terminal Outcome evidence, auto-accept the Outcome, and finalize the issue as done atomically. This evidence-auto path does not create a Board review; report the actual Server-owned terminal disposition without implying a handoff." : "Only after the run and command succeed does the Server validate the terminal Outcome evidence, auto-accept the Outcome, and finalize the issue as done atomically. This evidence-auto path does not create a Board review; report the actual Server-owned terminal disposition without implying a handoff." : delivery.mode === "required" ? "Only after the run and command succeed does the Server bind the exact current Delivery Manifest and terminal Outcome evidence, create the formal Board review before generic continuation handoff is evaluated, and move the issue to in_review. Board acceptance then finalizes the issue as done atomically." : "Only after the run and command succeed does the Server bind the terminal Outcome evidence, create the formal Board review before generic continuation handoff is evaluated, and move the issue to in_review. Board acceptance then finalizes the issue as done atomically."
+    evidenceAutoAcceptance ? delivery.mode === "required" ? delegatedDelivery ? "Only after the run and command succeed does the Server validate the exact delegated final-child Manifest, accepted package review, and terminal Outcome evidence, auto-accept the Outcome, and finalize the issue as done atomically. This evidence-auto path does not create a Board review; report the actual Server-owned terminal disposition without implying a handoff." : "Only after the run and command succeed does the Server validate the exact current Delivery Manifest and terminal Outcome evidence, auto-accept the Outcome, and finalize the issue as done atomically. This evidence-auto path does not create a Board review; report the actual Server-owned terminal disposition without implying a handoff." : "Only after the run and command succeed does the Server validate the terminal Outcome evidence, auto-accept the Outcome, and finalize the issue as done atomically. This evidence-auto path does not create a Board review; report the actual Server-owned terminal disposition without implying a handoff." : delivery.mode === "required" ? delegatedDelivery ? "Only after the run and command succeed does the Server bind the exact delegated final-child Manifest, accepted package review, and terminal Outcome evidence, create the formal Board review before generic continuation handoff is evaluated, and move the issue to in_review. Board acceptance then finalizes the issue as done atomically." : "Only after the run and command succeed does the Server bind the exact current Delivery Manifest and terminal Outcome evidence, create the formal Board review before generic continuation handoff is evaluated, and move the issue to in_review. Board acceptance then finalizes the issue as done atomically." : "Only after the run and command succeed does the Server bind the terminal Outcome evidence, create the formal Board review before generic continuation handoff is evaluated, and move the issue to in_review. Board acceptance then finalizes the issue as done atomically."
   ].join(" ") : "";
   const organizationCapabilityAllowed = asRecord(envelope.organizationCapability).allowed === true;
   const organizationMutationAuthorized = allowed.has("organization_mutation");
@@ -6620,6 +6661,19 @@ function runtimeAuthorizationText(context, mode, { suppressOrdinaryCompletionCon
     authorizationContract
   ].filter(Boolean).join("\n");
 }
+function continuationPostconditionGapSection(context, input) {
+  const gap = asRecord(context.paperclipContinuationPostconditionGap);
+  if (readString(gap.schemaVersion) !== "continuation-postcondition-gap-v1") return null;
+  return {
+    sourceRef: `run:${readString(gap.sourceRunId) ?? input.runId ?? "unknown"}:postcondition-gap`,
+    freshness: { kind: "run_snapshot" },
+    content: [
+      "This bounded Server-owned projection overrides conflicting historical summary instructions.",
+      stringifyBoundedJson(gap, 12e3),
+      "Revalidate the projection, execute only the first agent-owned missing action, and do not repeat forbiddenRepeats. Board-owned and external gaps require their typed wait path."
+    ].join("\n")
+  };
+}
 function runtimeDecompositionRequirementText(context) {
   const issue = asRecord(context.paperclipIssue);
   const requirements = asRecord(issue.taskRequirements);
@@ -7239,6 +7293,7 @@ ${resolvedDependencies.details.content}` : ""
   const deliveryReadinessContent = runtimeDeliveryReadinessText(context, input);
   const optionalTaskWikiContext = optionalTaskWikiContextSection(context);
   const taskContextAuthority = taskContextAuthoritySection(context);
+  const continuationPostconditionGap = continuationPostconditionGapSection(context, input);
   const companyInitializationAuthority = companyInitializationAuthoritySection(context);
   const rawSections = [
     { name: "recovery_instruction", title: "Recovery Instruction", priority: 100, sourceRef: `run:${input.runId ?? "unknown"}`, content: completeRecoveryInstruction, truncationReason: completeRecoveryInstruction ? null : "mode_selection" },
@@ -7248,6 +7303,7 @@ ${resolvedDependencies.details.content}` : ""
     ...companyInitializationAuthority && !includeTask ? [companyInitializationAuthority] : [],
     ...taskAcceptanceContract ? [{ name: "task_acceptance_contract", title: "Task Acceptance Contract", priority: 100, ...taskAcceptanceContract }] : [],
     ...governedBusinessState ? [{ name: "governed_business_state", title: "Governed Business State", priority: 99, ...governedBusinessState }] : [],
+    ...continuationPostconditionGap ? [{ name: "continuation_postcondition_gap", title: "Continuation Postcondition Gap", priority: 100, ...continuationPostconditionGap }] : [],
     { name: "continuation_summary", title: continuationSectionTitle(context), priority: 97, sourceRef: readString(asRecord(context.paperclipContinuationSummary).key) ?? `issue:${input.issueId ?? "unknown"}`, observedAt: readString(asRecord(context.paperclipContinuationSummary).updatedAt), originalContent: continuationSummary, content: mode === "cold" ? "" : continuationSummary, truncationReason: mode === "cold" ? "mode_selection" : null },
     ...resolvedDependencyContent ? [{
       name: "resolved_dependencies",
@@ -8580,7 +8636,7 @@ var CODEX_REMOTE_COMPACTION_RE = /remote\s+compact\s+task/i;
 var CODEX_USAGE_LIMIT_RE = /you(?:'|’)ve hit your usage limit for .+\.\s+switch to another model now,\s+or try again at\s+([^.!\n]+)(?:[.!]|\n|$)/i;
 var PI_PROVIDER_AUTH_RE = /(?:(?:\b401\b|\b403\b)[^\n]*(?:unauthorized|forbidden|auth(?:entication|orization)?|api[_\s-]?key)|(?:invalid|missing|expired|revoked)\s+(?:provider\s+)?api[_\s-]?key|provider\s+authentication\s+required)/i;
 var PI_PROVIDER_QUOTA_EXHAUSTED_RE = /(?:\binsufficient[_\s-]?user[_\s-]?quota\b|河狸币余额不足|\b402\b[^\n]*(?:余额不足|payment\s+required))/i;
-var PI_PROVIDER_TRANSIENT_RE = /(?:\b(?:429|5\d{2})\b|rate[-\s]?limit(?:ed)?|too\s+many\s+requests|billing\s+admission\s+failed|service\s+unavailable|upstream[^\n]*(?:unavailable|failed|timeout)|connect(?:ion)?[^\n]*refused|temporar(?:y|ily)[^\n]*(?:unavailable|failed)|try\s+again\s+later)/i;
+var PI_PROVIDER_TRANSIENT_RE = /(?:Stream ended without finish_reason|\b(?:429|5\d{2})\b|rate[-\s]?limit(?:ed)?|too\s+many\s+requests|billing\s+admission\s+failed|service\s+unavailable|upstream[^\n]*(?:unavailable|failed|timeout)|connect(?:ion)?[^\n]*refused|temporar(?:y|ily)[^\n]*(?:unavailable|failed)|try\s+again\s+later)/i;
 var PI_PROVIDER_PROTOCOL_RE = /provider[^\n]*finish_reason[^\n]*unexpected_state/i;
 var PI_PROVIDER_RETRY_AFTER_SECONDS_RE = /retry[-\s]?after\s*[:=]?\s*(\d{1,6})\s*(?:seconds?|secs?|s)\b/i;
 var PI_TERMINAL_CLEANUP_PERMISSION_RE = /(?:\bkill\b[^\n]*\bEPERM\b|\bEPERM\b[^\n]*\bkill\b)/i;
@@ -9016,6 +9072,15 @@ function classifyPiProviderError(input, now = /* @__PURE__ */ new Date()) {
     ...retryNotBefore ? { retryNotBefore: retryNotBefore.toISOString() } : {}
   };
 }
+function classifyPiOutputFailure(input, options = {}) {
+  const providerFailure = classifyPiProviderError(input, options.now);
+  if (providerFailure) return providerFailure;
+  if (!readString(options.invalidOutputError)) return null;
+  return {
+    errorCode: "pi_executor_invalid_output",
+    errorFamily: "validation"
+  };
+}
 function parseClaudeStreamJson(stdout) {
   let sessionId = null;
   let summary = "";
@@ -11312,7 +11377,7 @@ var source_acquisition_compatibility_default = {
 };
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.70";
+var CONNECTOR_VERSION = "0.1.1-beta.72";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);
@@ -14601,8 +14666,9 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
       executionConfig.runExitClosureBaseline,
       { commandId: state.commandId, runId: commandRunId(command) }
     ) : { status: "not_required" };
-    const closureArgs = executorKind === "pi" ? applyManagedPiToolAllowlist(args, {
-      toolAllowlist: Array.isArray(managedMcpClosureBaseline.toolAllowlist) ? managedMcpClosureBaseline.toolAllowlist : null
+    const closureArgs = executorKind === "pi" ? applyManagedPiRunExitClosureArgs(args, {
+      toolAllowlist: Array.isArray(managedMcpClosureBaseline.toolAllowlist) ? managedMcpClosureBaseline.toolAllowlist : null,
+      profileRoot: readString(asRecord(executionConfig.runExitClosureBaseline).profileRoot)
     }) : args;
     const describeRequired = executorKind !== "pi" || managedMcpClosureBaseline.status !== "restored" || Array.isArray(managedMcpClosureBaseline.toolAllowlist);
     await ingestLog(config, command, "system", "info", "Starting bounded run-exit disposition closure turn", {
@@ -16522,7 +16588,8 @@ async function executeRunCommand(config, command) {
       completionOutputType: execution.completionOutputType,
       completionOutputHasFinalAssistantText: terminalTextRepair?.succeeded === true ? true : execution.completionOutputHasFinalAssistantText
     }) : null;
-    const piProviderFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasArgumentAmplification && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiProviderError(parsedForValidation) : null;
+    const piOutputFailure = executor.kind === "pi" && !cancelled && !hasOutputFlood && !hasArgumentAmplification && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError ? classifyPiOutputFailure(parsedForValidation, { invalidOutputError: piInvalidOutputError }) : null;
+    const piProviderFailure = piOutputFailure?.errorCode !== "pi_executor_invalid_output" ? piOutputFailure : null;
     const parsedErrorMessage = outputFloodError ?? argumentAmplificationError ?? memoryLimitError ?? piTurnLimitFailure?.message ?? piInvalidOutputError ?? nativeSessionRolloutError ?? nativeSessionRolloutCleanupError ?? parsedForValidation.errorMessage;
     const codexTransientFailure = executor.kind === "codex" && (execution.exitCode ?? 0) !== 0 ? classifyCodexTransientUpstreamError({
       stdout: execution.stdout,
@@ -16619,10 +16686,7 @@ async function executeRunCommand(config, command) {
       ...Array.isArray(execution.killedWorkspaceResidents) && execution.killedWorkspaceResidents.length > 0 ? {
         killedWorkspaceResidents: execution.killedWorkspaceResidents
       } : {},
-      ...piInvalidOutputError && !cancelled && !hasOutputFlood && !hasArgumentAmplification && !hasMemoryLimit && execution.timedOut !== true && !execution.spawnError && !piTurnLimitFailure && !piProviderFailure ? {
-        errorCode: "pi_executor_invalid_output",
-        errorFamily: "validation"
-      } : {},
+      ...piOutputFailure?.errorCode === "pi_executor_invalid_output" && !piTurnLimitFailure ? piOutputFailure : {},
       ...piTurnLimitFailure ? {
         errorCode: piTurnLimitFailure.errorCode,
         errorFamily: piTurnLimitFailure.errorFamily,

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.70";
+const CONNECTOR_VERSION = "0.1.1-beta.72";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.70",
+  "version": "0.1.1-beta.72",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",