amsd-pipeline-shared 0.5.26 → 0.5.27

package/orchestrations/scripts/lib/doctor/classify.js

@@ -23,12 +23,20 @@ function signaturesFor(runtime, injected) {
     internalFrame: rxOf(s.internalFrame), dependencyDir: s.dependencyDir };
 }
 
-function classify({ profile, portRoot, res, crash, aborted, since, signatures, evidence }) {
+function classify({ profile, portRoot, res, crash, aborted, since, signatures, evidence, runDir }) {
   const sig = signaturesFor(profile.classify.runtime, signatures);
   const takesMost = profile.classify.policy === 'all-but-refusals';
   // WHAT IS EXTERNAL: the machine, the network, the model service, a kill. Under "all-but-refusals" a kill that happened inside the pipeline's OWN memory budget (the bounded wrapper's start banner is in the text:
   // the cap the pipeline chose, so what ran inside it is the pipeline's to bound — run 11, jest workers inside a Writer session's cap) is not external
-  const isExternal = (text) => sig.external.test(text) && !(takesMost && sig.ownBudget.test(text));
+  // An access error on the leg's OWN run folder is the code's too (live run 13, 2026-10-22: the driver copied a locked set into the run's
+  // project copy and could not clear it — "EACCES … rmdir '<run>/project/…'"): every path the message quotes is inside runDir
+  const ownRunPaths = (text) => {
+    if (!takesMost || !runDir || !/\bE(ACCES|PERM)\b/.test(text)) return false;
+    const paths = [...String(text).matchAll(/'(\/[^']+)'/g)].map((m) => path.resolve(m[1]));
+    const root = path.resolve(runDir);
+    return paths.length > 0 && paths.every((p) => p === root || p.startsWith(`${root}${path.sep}`));
+  };
+  const isExternal = (text) => sig.external.test(text) && !(takesMost && sig.ownBudget.test(text)) && !ownRunPaths(text);
   if (!res || typeof res !== 'object') return no('no-result', 'the leg gave no result');
   if (aborted) return no('aborted', 'the operator or a watcher ended the leg');
   // AN AGENT-CAUSED ABORT (operator, 2026-10-20: look for the agentic solution first): a failed leg whose reason is one of the pipeline's own agent-caused

package/orchestrations/scripts/lib/doctor/handle.js

@@ -33,7 +33,7 @@ async function handle(a) {
   // the logs are cumulative across legs: the decision reads only what follows the last leg-start line in each file (the whole tail when the profile names none or the tail holds none)
   const thisLeg = (text) => { if (!profile.logs.legStart) return text; const ls = text.split('\n'); let at = -1; ls.forEach((l, i) => { if (profile.logs.legStart.test(l)) at = i; }); return at < 0 ? text : ls.slice(at).join('\n'); };
   const evidence = profile.logs.evidence.map((f) => thisLeg(tail(path.join(runDir, f), profile.logs.evidenceTailLines))).join('\n');
-  const c = classify({ profile, portRoot, res, crash, aborted, since, evidence });
+  const c = classify({ profile, portRoot, res, crash, aborted, since, evidence, runDir });
   if (!c.call) { d.event('not-called', { kind: c.kind, why: c.why }); return { handled: false, kind: c.kind, why: c.why }; }
   d.event('trigger', { kind: c.kind, layer: c.layer, why: c.why, step: (crash && crash.step) || '' });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amsd-pipeline-shared",
-  "version": "0.5.26",
+  "version": "0.5.27",
   "description": "The AMSD pipeline's shared components, one source for the bash pipeline and its Claude workflows: the model-call gateway (llm-handler.sh — retry, ladder, self-heal, cost) and the libraries it runs.",
   "license": "UNLICENSED",
   "bin": {